@plane31/blind-relay 0.0.0-stage → 0.1.1

package/dist/testing/faults.d.ts

@@ -0,0 +1,97 @@
+import { type Store, type Tx } from "../store.js";
+import type { Directory, Relay, Transport } from "../transport.js";
+export type CrashPhase = "beforeCommit" | "afterCommit";
+export interface CrashPlan {
+    /** The 1-based index of the transaction (counted across every handle of the process) to crash at. */
+    readonly at: number;
+    /** Before commit: the transaction rolls back. After commit: it is durable but no caller sees the result. */
+    readonly phase: CrashPhase;
+}
+/** The process died here. Every later store call from the same process fails. */
+export declare class SimulatedCrash extends Error {
+    readonly at: number;
+    readonly phase: CrashPhase;
+    constructor(at: number, phase: CrashPhase);
+}
+interface ProcessState {
+    transactions: number;
+    crashed: SimulatedCrash | undefined;
+    readonly plan: CrashPlan | undefined;
+}
+/**
+ * A store handle that belongs to one simulated process. All handles made with `fork()` share
+ * the transaction counter and die together. A read-only probe that must survive the crash reads
+ * the inner store directly.
+ */
+export declare class FaultyStore implements Store {
+    readonly inner: Store;
+    private readonly forkInner?;
+    private readonly process;
+    constructor(inner: Store, plan?: CrashPlan, forkInner?: (() => Store) | undefined, process?: ProcessState);
+    get crashed(): SimulatedCrash | undefined;
+    get transactions(): number;
+    transaction<R>(fn: (tx: Tx) => R): Promise<R>;
+    read<R>(fn: (tx: Omit<Tx, "put" | "delete" | "handoff">) => R): Promise<R>;
+    /** Another execution context of the same process. */
+    fork(): FaultyStore;
+    private die;
+    private alive;
+}
+export type MutationName = "registerAccount" | "activateDevice" | "publishVault" | "publishOwnedCircle" | "requestJoin" | "requestLeave" | "resetAccount" | "publishEpoch" | "appendRecord" | "ackThrough";
+export type ServedKind = "certificate" | "snapshot" | "vault" | "manifest" | "wrap" | "record" | "keyList" | "receipt";
+export interface MaliciousKnobs {
+    /** Mutations whose next response is lost after the host committed it (each name is consumed once). */
+    readonly loseResponseOf: Set<MutationName>;
+    /** Mutations whose next call fails before reaching the host (each name is consumed once). */
+    readonly refuse: Set<MutationName>;
+    /** Mutations whose next response waits for the given promise after the host committed (consumed once). */
+    readonly hold: Map<MutationName, Promise<void>>;
+    /** Reads that answer "nothing" while present. */
+    readonly withhold: Set<"snapshots" | "epochs" | "records" | "requests" | "currentEpoch" | "keyList" | "certificates">;
+    /** Older documents served instead of the current ones. */
+    readonly replay: {
+        vault?: Uint8Array;
+        snapshots: Map<string, Uint8Array>;
+        keyList?: Uint8Array;
+        currentEpoch?: {
+            epoch: number;
+            manifestHash: Uint8Array;
+        };
+    };
+    /** Served documents to substitute: forks of the host's log. Keys are hex (circle id, stream id, record id). */
+    readonly fork: {
+        snapshots: Map<string, Uint8Array>;
+        manifests: Map<string, Uint8Array>;
+        records: Map<string, Uint8Array>;
+        certificates: Map<string, Uint8Array>;
+    };
+    /** Every record page is served twice over, and each record appears twice inside a page. */
+    duplicate: boolean;
+    /** Records inside a page are served newest first. */
+    reorder: boolean;
+    /** Flip a byte in every served document of these kinds. */
+    readonly tamper: Set<ServedKind>;
+}
+export declare function emptyKnobs(): MaliciousKnobs;
+/**
+ * Wraps a transport. Everything not switched on passes through unchanged, so a scenario can be
+ * driven to a point and then attacked. `calls` records every method name in order.
+ */
+export declare class MaliciousTransport implements Transport {
+    private readonly inner;
+    readonly knobs: MaliciousKnobs;
+    readonly calls: string[];
+    /** The mutations whose response this transport has lost so far. */
+    readonly losses: MutationName[];
+    readonly directory: Directory;
+    readonly relay: Relay;
+    constructor(inner: Transport);
+    private serve;
+    private mutate;
+    private wrapDirectory;
+    private wrapRelay;
+}
+/** Whether two byte strings are equal, for assertions on exact-bytes outcomes. */
+export declare function sameBytes(a: Uint8Array | undefined, b: Uint8Array | undefined): boolean;
+export {};
+//# sourceMappingURL=faults.d.ts.map

package/dist/testing/faults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"faults.d.ts","sourceRoot":"","sources":["../../src/testing/faults.ts"],"names":[],"mappings":"AASA,OAAO,EAAc,KAAK,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAiB,SAAS,EAAmD,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAInI,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,aAAa,CAAC;AAExD,MAAM,WAAW,SAAS;IACxB,qGAAqG;IACrG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,4GAA4G;IAC5G,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,iFAAiF;AACjF,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,EAAE,EAAE,MAAM;IACnB,QAAQ,CAAC,KAAK,EAAE,UAAU;gBADjB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,UAAU;CAK7B;AAED,UAAU,YAAY;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,cAAc,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;CACtC;AAED;;;;GAIG;AACH,qBAAa,WAAY,YAAW,KAAK;IAIrC,QAAQ,CAAC,KAAK,EAAE,KAAK;IAErB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAL7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;gBAG5B,KAAK,EAAE,KAAK,EACrB,IAAI,CAAC,EAAE,SAAS,EACC,SAAS,CAAC,GAAE,MAAM,KAAK,aAAA,EACxC,OAAO,CAAC,EAAE,YAAY;IAKxB,IAAI,OAAO,IAAI,cAAc,GAAG,SAAS,CAExC;IAED,IAAI,YAAY,IAAI,MAAM,CAEzB;IAEK,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAa7C,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAKhF,qDAAqD;IACrD,IAAI,IAAI,WAAW;IAKnB,OAAO,CAAC,GAAG;IAKX,OAAO,CAAC,KAAK;CAGd;AAID,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,cAAc,GAAG,oBAAoB,GAAG,aAAa,GAAG,cAAc,GAAG,cAAc,GAAG,cAAc,GAAG,cAAc,GAAG,YAAY,CAAC;AAE3M,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAEvH,MAAM,WAAW,cAAc;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,0GAA0G;IAC1G,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,GAAG,cAAc,CAAC,CAAC;IACtH,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE;QACf,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB,YAAY,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,UAAU,CAAA;SAAE,CAAC;KAC5D,CAAC;IACF,+GAA+G;IAC/G,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACjC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;KACvC,CAAC;IACF,2FAA2F;IAC3F,SAAS,EAAE,OAAO,CAAC;IACnB,qDAAqD;IACrD,OAAO,EAAE,OAAO,CAAC;IACjB,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;CAClC;AAED,wBAAgB,UAAU,IAAI,cAAc,CAY3C;AASD;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,SAAS;IAQtC,OAAO,CAAC,QAAQ,CAAC,KAAK;IAPlC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAgB;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAM;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,CAAM;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;gBAEO,KAAK,EAAE,SAAS;IAK7C,OAAO,CAAC,KAAK;YAKC,MAAM;IAoBpB,OAAO,CAAC,aAAa;IAuDrB,OAAO,CAAC,SAAS;CA2DlB;AAID,kFAAkF;AAClF,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,SAAS,EAAE,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAEvF"}

package/dist/testing/faults.js

@@ -0,0 +1,264 @@
+/**
+ * The fault harness of build step 16: a store wrapper that crashes the process at a chosen
+ * transaction boundary, a transport wrapper that loses responses after the host committed,
+ * duplicates and reorders deliveries, withholds, replays, forks and tampers with documents,
+ * and a sweep that runs one scenario once per boundary and checks the durable-state outcomes
+ * of protocol section 11 after a restart. Exported under `@plane31/blind-relay/testing` only.
+ */
+import { equalBytes, toHex } from "../bytes.js";
+import { KavachError } from "../errors.js";
+import { invokeSync } from "../store.js";
+/** The process died here. Every later store call from the same process fails. */
+export class SimulatedCrash extends Error {
+    at;
+    phase;
+    constructor(at, phase) {
+        super(`simulated crash ${phase} transaction ${at}`);
+        this.at = at;
+        this.phase = phase;
+        this.name = "SimulatedCrash";
+    }
+}
+/**
+ * A store handle that belongs to one simulated process. All handles made with `fork()` share
+ * the transaction counter and die together. A read-only probe that must survive the crash reads
+ * the inner store directly.
+ */
+export class FaultyStore {
+    inner;
+    forkInner;
+    process;
+    constructor(inner, plan, forkInner, process) {
+        this.inner = inner;
+        this.forkInner = forkInner;
+        this.process = process ?? { transactions: 0, crashed: undefined, plan };
+    }
+    get crashed() {
+        return this.process.crashed;
+    }
+    get transactions() {
+        return this.process.transactions;
+    }
+    async transaction(fn) {
+        this.alive();
+        const n = ++this.process.transactions;
+        const plan = this.process.plan;
+        const result = await this.inner.transaction((tx) => {
+            const r = invokeSync(fn, tx);
+            if (plan && plan.phase === "beforeCommit" && plan.at === n)
+                throw this.die(n, "beforeCommit");
+            return r;
+        });
+        if (plan && plan.phase === "afterCommit" && plan.at === n)
+            throw this.die(n, "afterCommit");
+        return result;
+    }
+    async read(fn) {
+        this.alive();
+        return this.inner.read(fn);
+    }
+    /** Another execution context of the same process. */
+    fork() {
+        if (!this.forkInner)
+            throw new Error("this store cannot fork");
+        return new FaultyStore(this.forkInner(), undefined, this.forkInner, this.process);
+    }
+    die(at, phase) {
+        this.process.crashed = new SimulatedCrash(at, phase);
+        return this.process.crashed;
+    }
+    alive() {
+        if (this.process.crashed)
+            throw new KavachError("STORAGE_FAILURE", "faultyStore", "the process has crashed");
+    }
+}
+export function emptyKnobs() {
+    return {
+        loseResponseOf: new Set(),
+        refuse: new Set(),
+        hold: new Map(),
+        withhold: new Set(),
+        replay: { snapshots: new Map() },
+        fork: { snapshots: new Map(), manifests: new Map(), records: new Map(), certificates: new Map() },
+        duplicate: false,
+        reorder: false,
+        tamper: new Set()
+    };
+}
+function flipByte(bytes) {
+    const out = Uint8Array.from(bytes);
+    const i = out.length - 1; // inside the signature for every signed type; inside the tag for a wrap
+    out[i] = (out[i] ?? 0) ^ 0x01;
+    return out;
+}
+/**
+ * Wraps a transport. Everything not switched on passes through unchanged, so a scenario can be
+ * driven to a point and then attacked. `calls` records every method name in order.
+ */
+export class MaliciousTransport {
+    inner;
+    knobs = emptyKnobs();
+    calls = [];
+    /** The mutations whose response this transport has lost so far. */
+    losses = [];
+    directory;
+    relay;
+    constructor(inner) {
+        this.inner = inner;
+        this.directory = this.wrapDirectory();
+        this.relay = this.wrapRelay();
+    }
+    serve(kind, bytes) {
+        if (!bytes)
+            return bytes;
+        return this.knobs.tamper.has(kind) ? flipByte(bytes) : bytes;
+    }
+    async mutate(name, call) {
+        this.calls.push(name);
+        if (this.knobs.refuse.has(name)) {
+            this.knobs.refuse.delete(name);
+            throw new KavachError("NETWORK", "transport", "network unreachable");
+        }
+        const result = await call();
+        const gate = this.knobs.hold.get(name);
+        if (gate) {
+            this.knobs.hold.delete(name);
+            await gate;
+        }
+        if (this.knobs.loseResponseOf.has(name)) {
+            this.knobs.loseResponseOf.delete(name);
+            this.losses.push(name);
+            throw new KavachError("NETWORK", "transport", "response lost");
+        }
+        return result;
+    }
+    wrapDirectory() {
+        // The inner transport may rebind itself per call (a device's certificate changes at
+        // activation), so it is read on every call, never captured.
+        const d = () => this.inner.directory;
+        const k = this.knobs;
+        return {
+            resolveAccounts: async (names) => {
+                this.calls.push("resolveAccounts");
+                if (k.withhold.has("certificates"))
+                    return [];
+                const rs = await d().resolveAccounts(names);
+                return rs.map((r) => ({ ...r, certificate: k.fork.certificates.get(r.accountName) ?? this.serve("certificate", r.certificate) ?? r.certificate }));
+            },
+            resolveIdentities: async (ids) => {
+                this.calls.push("resolveIdentities");
+                if (k.withhold.has("certificates"))
+                    return [];
+                const rs = await d().resolveIdentities(ids);
+                return rs.map((r) => ({ ...r, certificate: k.fork.certificates.get(r.accountName) ?? this.serve("certificate", r.certificate) ?? r.certificate }));
+            },
+            getCertificate: async (hash) => {
+                this.calls.push("getCertificate");
+                return this.serve("certificate", await d().getCertificate(hash));
+            },
+            activateDevice: (input) => this.mutate("activateDevice", () => d().activateDevice(input)),
+            registerAccount: (input) => this.mutate("registerAccount", () => d().registerAccount(input)),
+            getVault: async (name) => {
+                this.calls.push("getVault");
+                return this.serve("vault", k.replay.vault ?? (await d().getVault(name)));
+            },
+            publishVault: (input) => this.mutate("publishVault", () => d().publishVault(input)),
+            getCircle: async (circleId) => {
+                this.calls.push("getCircle");
+                if (k.withhold.has("snapshots"))
+                    return undefined;
+                const key = toHex(circleId);
+                return this.serve("snapshot", k.fork.snapshots.get(key) ?? k.replay.snapshots.get(key) ?? (await d().getCircle(circleId)));
+            },
+            publishOwnedCircle: (input) => this.mutate("publishOwnedCircle", () => d().publishOwnedCircle(input)),
+            requestJoin: (circleId) => this.mutate("requestJoin", () => d().requestJoin(circleId)),
+            requestLeave: (circleId) => this.mutate("requestLeave", () => d().requestLeave(circleId)),
+            readRequests: async (circleId) => {
+                this.calls.push("readRequests");
+                return k.withhold.has("requests") ? [] : d().readRequests(circleId);
+            },
+            getResetKeyList: async () => {
+                this.calls.push("getResetKeyList");
+                if (k.withhold.has("keyList"))
+                    return undefined;
+                return this.serve("keyList", k.replay.keyList ?? (await d().getResetKeyList()));
+            },
+            getResetReceipt: async (id) => {
+                this.calls.push("getResetReceipt");
+                return this.serve("receipt", await d().getResetReceipt(id));
+            },
+            resetAccount: (input) => this.mutate("resetAccount", () => d().resetAccount(input))
+        };
+    }
+    wrapRelay() {
+        const r = () => this.inner.relay;
+        const k = this.knobs;
+        const pagesServed = new Map();
+        return {
+            getCurrentEpoch: async (streamId) => {
+                this.calls.push("getCurrentEpoch");
+                if (k.withhold.has("currentEpoch"))
+                    return undefined;
+                return k.replay.currentEpoch ?? r().getCurrentEpoch(streamId);
+            },
+            getEpoch: async (streamId, epoch) => {
+                this.calls.push("getEpoch");
+                if (k.withhold.has("epochs"))
+                    return undefined;
+                const b = await r().getEpoch(streamId, epoch);
+                if (!b)
+                    return b;
+                const manifest = k.fork.manifests.get(`${toHex(streamId)}:${epoch}`) ?? this.serve("manifest", b.manifest) ?? b.manifest;
+                return { manifest, wrap: this.serve("wrap", b.wrap) };
+            },
+            publishEpoch: (input) => this.mutate("publishEpoch", () => r().publishEpoch(input)),
+            appendRecord: (recordId, wire) => {
+                // Must stay synchronous up to the inner call (T6h).
+                this.calls.push("appendRecord");
+                const p = r().appendRecord(recordId, wire);
+                if (!k.loseResponseOf.has("appendRecord"))
+                    return p;
+                k.loseResponseOf.delete("appendRecord");
+                this.losses.push("appendRecord");
+                return p.then(() => {
+                    throw new KavachError("NETWORK", "transport", "response lost");
+                });
+            },
+            readRecords: async (streamId, afterSeq, limit) => {
+                this.calls.push("readRecords");
+                if (k.withhold.has("records")) {
+                    const probe = await r().readRecords(streamId, afterSeq, limit);
+                    return { ...probe, records: [], nextSeq: afterSeq };
+                }
+                const page = await r().readRecords(streamId, afterSeq, limit);
+                let records = page.records.map((x) => {
+                    const forked = k.fork.records.get(`${toHex(streamId)}:${x.deliverySeq}`);
+                    return { deliverySeq: x.deliverySeq, wire: forked ?? this.serve("record", x.wire) ?? x.wire };
+                });
+                if (k.reorder)
+                    records = [...records].reverse();
+                if (k.duplicate) {
+                    records = records.flatMap((x) => [x, x]);
+                    const key = `${toHex(streamId)}:${afterSeq}`;
+                    const n = (pagesServed.get(key) ?? 0) + 1;
+                    pagesServed.set(key, n);
+                    // The first time a page is asked for, claim no progress so the reader asks again.
+                    if (n === 1 && records.length > 0)
+                        return { ...page, records, nextSeq: afterSeq };
+                }
+                return { ...page, records };
+            },
+            ackThrough: (streamId, cursor) => this.mutate("ackThrough", () => r().ackThrough(streamId, cursor)),
+            listSubscriptions: async () => {
+                this.calls.push("listSubscriptions");
+                return r().listSubscriptions();
+            }
+        };
+    }
+}
+// Helpers shared by the sweeps ----------------------------------------------------------------------
+/** Whether two byte strings are equal, for assertions on exact-bytes outcomes. */
+export function sameBytes(a, b) {
+    return a !== undefined && b !== undefined && equalBytes(a, b);
+}
+//# sourceMappingURL=faults.js.map

package/dist/testing/faults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"faults.js","sourceRoot":"","sources":["../../src/testing/faults.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAuB,MAAM,aAAa,CAAC;AAc9D,iFAAiF;AACjF,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B;IACA;IAFX,YACW,EAAU,EACV,KAAiB;QAE1B,KAAK,CAAC,mBAAmB,KAAK,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAH3C,OAAE,GAAF,EAAE,CAAQ;QACV,UAAK,GAAL,KAAK,CAAY;QAG1B,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAQD;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAIX;IAEQ;IALF,OAAO,CAAe;IAEvC,YACW,KAAY,EACrB,IAAgB,EACC,SAAuB,EACxC,OAAsB;QAHb,UAAK,GAAL,KAAK,CAAO;QAEJ,cAAS,GAAT,SAAS,CAAc;QAGxC,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,WAAW,CAAI,EAAiB;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;YACjD,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc,IAAI,IAAI,CAAC,EAAE,KAAK,CAAC;gBAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;YAC9F,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,aAAa,IAAI,IAAI,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAC5F,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,EAAqD;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,qDAAqD;IACrD,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC/D,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC;IAEO,GAAG,CAAC,EAAU,EAAE,KAAiB;QACvC,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9B,CAAC;IAEO,KAAK;QACX,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAC;IAC/G,CAAC;CACF;AAuCD,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,MAAM,EAAE,IAAI,GAAG,EAAE;QACjB,IAAI,EAAE,IAAI,GAAG,EAAE;QACf,QAAQ,EAAE,IAAI,GAAG,EAAE;QACnB,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE;QAChC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,GAAG,EAAE,EAAE;QACjG,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,IAAI,GAAG,EAAE;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,wEAAwE;IAClG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IAQA;IAPpB,KAAK,GAAmB,UAAU,EAAE,CAAC;IACrC,KAAK,GAAa,EAAE,CAAC;IAC9B,mEAAmE;IAC1D,MAAM,GAAmB,EAAE,CAAC;IAC5B,SAAS,CAAY;IACrB,KAAK,CAAQ;IAEtB,YAA6B,KAAgB;QAAhB,UAAK,GAAL,KAAK,CAAW;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,CAAC;IAEO,KAAK,CAAC,IAAgB,EAAE,KAA6B;QAC3D,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,MAAM,CAAiE,IAAkB,EAAE,IAAsB;QAC7H,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,IAAI,CAAC;QACb,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,aAAa;QACnB,oFAAoF;QACpF,4DAA4D;QAC5D,MAAM,CAAC,GAAG,GAAc,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAChD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,OAAO;YACL,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACnC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;oBAAE,OAAO,EAAE,CAAC;gBAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC5C,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACrJ,CAAC;YACD,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACrC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;oBAAE,OAAO,EAAE,CAAC;gBAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAC5C,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACrJ,CAAC;YACD,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAClC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACzF,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC5F,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3E,CAAC;YACD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACnF,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAClD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7H,CAAC;YACD,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACrG,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACtF,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACzF,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAChC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACtE,CAAC;YACD,eAAe,EAAE,KAAK,IAAI,EAAE;gBAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACnC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAChD,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC;YACD,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACnC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;YACD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;SACpF,CAAC;IACJ,CAAC;IAEO,SAAS;QACf,MAAM,CAAC,GAAG,GAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,OAAO;YACL,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACnC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC;oBAAE,OAAO,SAAS,CAAC;gBACrD,OAAO,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAChE,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAoC,EAAE;gBACpE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5B,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC9C,IAAI,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACjB,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;gBACzH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,CAAC;YACD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACnF,YAAY,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;gBAC/B,oDAAoD;gBACpD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAChC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC;oBAAE,OAAO,CAAC,CAAC;gBACpD,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;gBACjE,CAAC,CAAC,CAAC;YACL,CAAC;YACD,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAA8B,EAAE;gBAC3E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC/B,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAC/D,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACtD,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC9D,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACnC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;oBACzE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChG,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;gBAChD,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;oBAChB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBACzC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;oBAC7C,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC1C,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBACxB,kFAAkF;oBAClF,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;wBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACpF,CAAC;gBACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9B,CAAC;YACD,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACnG,iBAAiB,EAAE,KAAK,IAAI,EAAE;gBAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACrC,OAAO,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC;YACjC,CAAC;SACF,CAAC;IACJ,CAAC;CACF;AAED,sGAAsG;AAEtG,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,CAAyB,EAAE,CAAyB;IAC5E,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/testing/fixtures.d.ts

@@ -0,0 +1,15 @@
+import { type SigningKeypair } from "../crypto.js";
+export { accountKeypair, identityId } from "../crypto.js";
+export { certify, deviceFromSeed, newDevice, openAccount, type DeviceKeys, type OwnAccount } from "../identity.js";
+export interface TestResetKeys {
+    /** The deployment's management keypair, derived from a fixed seed. */
+    readonly management: SigningKeypair;
+    /** The operational keypair that signs reset receipts, derived from a fixed seed. */
+    readonly operational: SigningKeypair;
+    readonly operationalKeyId: Uint8Array;
+}
+/** Deterministic management and operational keys: management seed H(C("identity")), operational seed H(C("stream")), key id 07x16. */
+export declare function testResetKeys(): TestResetKeys;
+/** A key list of version 1, issued at `now` and valid for thirty days, signed by the management key. */
+export declare function testResetKeyList(keys: TestResetKeys, now: bigint): Uint8Array;
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/testing/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../src/testing/fixtures.ts"],"names":[],"mappings":"AAMA,OAAO,EAAgC,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEnH,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,oFAAoF;IACpF,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;CACvC;AAED,sIAAsI;AACtI,wBAAgB,aAAa,IAAI,aAAa,CAM7C;AAED,wGAAwG;AACxG,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAK7E"}

package/dist/testing/fixtures.js

@@ -0,0 +1,22 @@
+/**
+ * Protocol state a test builds by hand where an application would let the client build it:
+ * accounts, devices and certificates for store tests, and a signed reset key list for a fake
+ * or real host. Call `ready()` first.
+ */
+import { buildResetKeyList } from "../codec.js";
+import { C, H, signingKeypairFromSeed } from "../crypto.js";
+export { accountKeypair, identityId } from "../crypto.js";
+export { certify, deviceFromSeed, newDevice, openAccount } from "../identity.js";
+/** Deterministic management and operational keys: management seed H(C("identity")), operational seed H(C("stream")), key id 07x16. */
+export function testResetKeys() {
+    return {
+        management: signingKeypairFromSeed(H(C("identity"))),
+        operational: signingKeypairFromSeed(H(C("stream"))),
+        operationalKeyId: new Uint8Array(16).fill(7)
+    };
+}
+/** A key list of version 1, issued at `now` and valid for thirty days, signed by the management key. */
+export function testResetKeyList(keys, now) {
+    return buildResetKeyList({ version: 1n, issuedAt: now, expiresAt: now + 2592000000n, keys: [{ keyId: keys.operationalKeyId, publicKey: keys.operational.publicKey }] }, keys.management.secretKey);
+}
+//# sourceMappingURL=fixtures.js.map

package/dist/testing/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../src/testing/fixtures.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,sBAAsB,EAAuB,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAoC,MAAM,gBAAgB,CAAC;AAUnH,sIAAsI;AACtI,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,UAAU,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACpD,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,gBAAgB,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,gBAAgB,CAAC,IAAmB,EAAE,GAAW;IAC/D,OAAO,iBAAiB,CACtB,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,WAAc,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,EAAE,EAChJ,IAAI,CAAC,UAAU,CAAC,SAAS,CAC1B,CAAC;AACJ,CAAC"}

package/dist/testing/index.d.ts

@@ -0,0 +1,7 @@
+export { FakeHost, type Notification } from "./fakeHost.js";
+export { testPolicy, TestClock } from "./clock.js";
+export { FaultyStore, MaliciousTransport, SimulatedCrash, emptyKnobs, sameBytes, type CrashPhase, type CrashPlan, type MaliciousKnobs, type MutationName, type ServedKind } from "./faults.js";
+export { MemoryPlatformProvider } from "./providers.js";
+export { countBoundaries, crashSweep, hostTransport, lostResponseSweep, type DeviceName, type LostResponseRun, type SweepOptions, type SweepResult, type SweepRun, type SweepStores } from "./sweep.js";
+export { accountKeypair, certify, deviceFromSeed, identityId, newDevice, openAccount, testResetKeyList, testResetKeys, type DeviceKeys, type OwnAccount, type TestResetKeys } from "./fixtures.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/L,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AACxM,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/testing/index.js

@@ -0,0 +1,7 @@
+export { FakeHost } from "./fakeHost.js";
+export { testPolicy, TestClock } from "./clock.js";
+export { FaultyStore, MaliciousTransport, SimulatedCrash, emptyKnobs, sameBytes } from "./faults.js";
+export { MemoryPlatformProvider } from "./providers.js";
+export { countBoundaries, crashSweep, hostTransport, lostResponseSweep } from "./sweep.js";
+export { accountKeypair, certify, deviceFromSeed, identityId, newDevice, openAccount, testResetKeyList, testResetKeys } from "./fixtures.js";
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAqB,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAA4F,MAAM,aAAa,CAAC;AAC/L,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAA+G,MAAM,YAAY,CAAC;AACxM,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAwD,MAAM,eAAe,CAAC"}

package/dist/testing/providers.d.ts

@@ -0,0 +1,16 @@
+import type { ProviderLoadResult, ProviderSaveResult, ProviderStatus, ProviderStatusResult, RecoveryProvider } from "../vault.js";
+/** A platform recovery provider shared by every device signed into one platform account. */
+export declare class MemoryPlatformProvider implements RecoveryProvider {
+    private readonly platformAccount;
+    status_: ProviderStatus;
+    items: Map<string, Uint8Array>;
+    constructor(platformAccount: string);
+    private key;
+    load(accountName: string, identityId: Uint8Array): Promise<ProviderLoadResult>;
+    save(accountName: string, identityId: Uint8Array, recoveryKey: Uint8Array): Promise<ProviderSaveResult>;
+    status(): Promise<ProviderStatusResult>;
+    eraseLocalAccess(): Promise<void>;
+    /** Another phone on the same platform account sees the same items. */
+    twin(): MemoryPlatformProvider;
+}
+//# sourceMappingURL=providers.d.ts.map

package/dist/testing/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/testing/providers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,cAAc,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAElI,4FAA4F;AAC5F,qBAAa,sBAAuB,YAAW,gBAAgB;IAIjD,OAAO,CAAC,QAAQ,CAAC,eAAe;IAH5C,OAAO,EAAE,cAAc,CAAe;IACtC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAa;gBAEd,eAAe,EAAE,MAAM;IAEpD,OAAO,CAAC,GAAG;IAIL,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAM9E,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMvG,MAAM,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAIvC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAEvC,sEAAsE;IACtE,IAAI,IAAI,sBAAsB;CAK/B"}

package/dist/testing/providers.js

@@ -0,0 +1,36 @@
+import { toHex } from "../bytes.js";
+/** A platform recovery provider shared by every device signed into one platform account. */
+export class MemoryPlatformProvider {
+    platformAccount;
+    status_ = "available";
+    items = new Map();
+    constructor(platformAccount) {
+        this.platformAccount = platformAccount;
+    }
+    key(accountName, identityId) {
+        return `${this.platformAccount}:${accountName}:${toHex(identityId)}`;
+    }
+    async load(accountName, identityId) {
+        if (this.status_ !== "available")
+            return { status: this.status_ };
+        const k = this.items.get(this.key(accountName, identityId));
+        return k ? { status: "available", recoveryKey: k } : { status: "unavailable", reason: "no item" };
+    }
+    async save(accountName, identityId, recoveryKey) {
+        if (this.status_ !== "available")
+            return { status: this.status_, backupState: "unavailable" };
+        this.items.set(this.key(accountName, identityId), recoveryKey);
+        return { status: "available", backupState: "pending" };
+    }
+    async status() {
+        return { status: this.status_, backupState: this.status_ === "available" ? "pending" : "unavailable" };
+    }
+    async eraseLocalAccess() { }
+    /** Another phone on the same platform account sees the same items. */
+    twin() {
+        const p = new MemoryPlatformProvider(this.platformAccount);
+        p.items = this.items;
+        return p;
+    }
+}
+//# sourceMappingURL=providers.js.map

package/dist/testing/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/testing/providers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAGpC,4FAA4F;AAC5F,MAAM,OAAO,sBAAsB;IAIJ;IAH7B,OAAO,GAAmB,WAAW,CAAC;IACtC,KAAK,GAA4B,IAAI,GAAG,EAAE,CAAC;IAE3C,YAA6B,eAAuB;QAAvB,oBAAe,GAAf,eAAe,CAAQ;IAAG,CAAC;IAEhD,GAAG,CAAC,WAAmB,EAAE,UAAsB;QACrD,OAAO,GAAG,IAAI,CAAC,eAAe,IAAI,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,UAAsB;QACpD,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAClE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpG,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,UAAsB,EAAE,WAAuB;QAC7E,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;QAC9F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;QAC/D,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACzG,CAAC;IAED,KAAK,CAAC,gBAAgB,KAAmB,CAAC;IAE1C,sEAAsE;IACtE,IAAI;QACF,MAAM,CAAC,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/testing/sweep.d.ts

@@ -0,0 +1,46 @@
+import { type Store } from "../store.js";
+import type { Transport } from "../transport.js";
+import { FakeHost } from "./fakeHost.js";
+import { type CrashPhase, type MutationName } from "./faults.js";
+export type DeviceName = "alice" | "bob" | "bob2";
+export interface SweepStores {
+    /** A durable store for the named device of this run, empty. */
+    open(run: string, name: DeviceName): Promise<Store> | Store;
+    /** The same durable state as a restarted process opens it: a new handle on the same file. */
+    reopen(run: string, name: DeviceName): Promise<Store> | Store;
+    /** Another in-process handle on the same durable state, when the engine can give one. */
+    fork?(run: string, name: DeviceName): Store;
+    dispose?(run: string): Promise<void> | void;
+}
+export interface SweepOptions {
+    readonly stores: SweepStores;
+    readonly victim: DeviceName;
+    readonly phases?: readonly CrashPhase[];
+    /** Run only these boundaries (for narrowing a failure). */
+    readonly only?: readonly number[];
+}
+export interface SweepRun {
+    readonly at: number;
+    readonly phase: CrashPhase;
+    /** The scenario step during which the process died. */
+    readonly crashedDuring: string;
+    /** What the re-invoked step answered after the restart. */
+    readonly retry: string;
+}
+export interface SweepResult {
+    readonly boundaries: number;
+    readonly runs: readonly SweepRun[];
+}
+export interface LostResponseRun {
+    readonly mutation: MutationName;
+    /** Whether the victim actually issued that mutation in this scenario. */
+    readonly exercised: boolean;
+}
+/** The transport of a device: bound to the account's current certificate at the host on every call. */
+export declare function hostTransport(host: FakeHost, account: string): Transport;
+/** Runs the scenario with no fault and returns the victim's transaction count. */
+export declare function countBoundaries(stores: SweepStores, victim: DeviceName): Promise<number>;
+export declare function crashSweep(options: SweepOptions): Promise<SweepResult>;
+/** For each mutation the victim issues, the host commits it and the response is lost once. */
+export declare function lostResponseSweep(stores: SweepStores, victim: DeviceName): Promise<LostResponseRun[]>;
+//# sourceMappingURL=sweep.d.ts.map

package/dist/testing/sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.d.ts","sourceRoot":"","sources":["../../src/testing/sweep.ts"],"names":[],"mappings":"AAUA,OAAO,EAAqB,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAmC,KAAK,UAAU,EAAkB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAIlH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,+DAA+D;IAC/D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IAC5D,6FAA6F;IAC7F,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IAC9D,yFAAyF;IACzF,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,KAAK,CAAC;IAC5C,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAkCD,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAaxE;AAuPD,kFAAkF;AAClF,wBAAsB,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAY9F;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAoB5E;AAID,8FAA8F;AAC9F,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAe3G"}