@provian/mcp 0.0.0-stage → 1.2.0

package/dist/core/meter-wire.js

@@ -0,0 +1,418 @@
+"use strict";
+/**
+ * PE METER WIRE FORMAT — the ONE definition of a v2 Provenance Envelope, its act record,
+ * the daily batch, and the fingerprints over them (: the relay is a
+ * meter, not an archive).
+ *
+ * THIS FILE IS BYTE-IDENTICAL IN THREE PACKAGES and a parity check refuses any drift:
+ * provian-backend/src/core/meter/meter-wire.ts (the relay)
+ * provian-agent-sdk/src/meter-wire.ts (daemon + SDK)
+ * src/core/meter/meter-wire.ts (the app)
+ * The only per-package file is `./meter-hash` (a sha256 over bytes), because the three
+ * packages carry different hash libraries. Everything that decides a byte lives here.
+ *
+ * WHAT EACH THING IS
+ * PE (v2) — the complete envelope. Built, hashed and kept by its OWNER's device. The
+ * relay never stores it.
+ * act record — what the relay prices: the PE's identity fields, its pe_hash (which covers
+ * the complete PE), and `pricing` = the PE minus identity fields and free text.
+ * batch — one signed, chained submission per device per day (and right before a
+ * presentation or payout); `acts_root` is the
+ * fingerprint over every act leaf.
+ * batch leaf — what the daily on-chain anchor commits to (one per accepted batch).
+ *
+ * Proving one act later: act leaf → acts_root (Merkle path) → batch leaf → the day's on-chain
+ * root (PEAnchor.verifyPE). Anyone holding the PE recomputes every step; nobody else needs it.
+ *
+ * Pure: no I/O, no clock, no randomness.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NON_PRICING_PE_FIELDS = exports.METER_MINT_WINDOW_MS = exports.MAX_ACTS_PER_BATCH = exports.METER_GENESIS_PREV_HASH = exports.PE_BATCH_SCHEMA = exports.PE_V2_SCHEMA = void 0;
+exports.canonicalJson = canonicalJson;
+exports.bytesToHexLower = bytesToHexLower;
+exports.hexToBytesStrict = hexToBytesStrict;
+exports.utf8Bytes = utf8Bytes;
+exports.sha256HexOfText = sha256HexOfText;
+exports.peHashOf = peHashOf;
+exports.pricingOf = pricingOf;
+exports.actRecordOf = actRecordOf;
+exports.actMatchesPe = actMatchesPe;
+exports.actLeafOf = actLeafOf;
+exports.hardwareNonceOfAct = hardwareNonceOfAct;
+exports.merkleRootOf = merkleRootOf;
+exports.merkleProofOf = merkleProofOf;
+exports.merkleTreeOf = merkleTreeOf;
+exports.verifyMerkleProofOf = verifyMerkleProofOf;
+exports.actsRootOf = actsRootOf;
+exports.batchHashOf = batchHashOf;
+exports.batchLeafOf = batchLeafOf;
+exports.buildBatch = buildBatch;
+exports.validateBatchShape = validateBatchShape;
+exports.verifyActChain = verifyActChain;
+exports.verifyActInclusion = verifyActInclusion;
+const meter_hash_1 = require("./meter-hash");
+exports.PE_V2_SCHEMA = 'provian.pe.v2';
+exports.PE_BATCH_SCHEMA = 'provian.pe-batch.v1';
+exports.METER_GENESIS_PREV_HASH = 'genesis';
+exports.MAX_ACTS_PER_BATCH = 500;
+/** An act older than this when it reaches the relay is recorded into totals but does not mint. */
+exports.METER_MINT_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
+const ACT_LEAF_DOMAIN = 'provian.meter.act.v1\n';
+const BATCH_LEAF_DOMAIN = 'provian.meter.batch-leaf.v1\n';
+/** Fields of a PE that are identity or free text, never pricing inputs. */
+exports.NON_PRICING_PE_FIELDS = [
+    'schema',
+    'pe_id',
+    'device_id',
+    'prev_hash',
+    'timestamp',
+    'action_type',
+    'pe_hash',
+    'signature',
+    'description',
+    'intent_text',
+    'private_commitment',
+    'private_owner_view',
+    'detail_commitment',
+];
+/** Fields excluded from a PE's own hash (the hash cannot cover itself; the signature signs it). */
+const PE_HASH_EXCLUDED = ['pe_hash', 'signature'];
+// ─── canonical JSON ─────────────────────────────────────────────────────────────
+/**
+ * Canonical JSON: object keys sorted by UTF-16 code unit, no whitespace, `undefined` object
+ * members dropped, `undefined` array members written as null, non-finite numbers refused.
+ * Identical to the hardware-witness canonicalizer and to json-stable-stringify on plain JSON.
+ */
+function canonicalJson(value) {
+    if (value === null)
+        return 'null';
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw new Error('canonical_json_non_finite_number');
+        return JSON.stringify(value);
+    }
+    if (typeof value === 'string' || typeof value === 'boolean')
+        return JSON.stringify(value);
+    if (Array.isArray(value)) {
+        return '[' + value.map((v) => (v === undefined ? 'null' : canonicalJson(v))).join(',') + ']';
+    }
+    if (typeof value === 'object') {
+        const obj = value;
+        const keys = Object.keys(obj).filter((k) => obj[k] !== undefined).sort();
+        return '{' + keys.map((k) => JSON.stringify(k) + ':' + canonicalJson(obj[k])).join(',') + '}';
+    }
+    throw new Error(`canonical_json_unsupported_type:${typeof value}`);
+}
+// ─── bytes ──────────────────────────────────────────────────────────────────────
+const HEX = '0123456789abcdef';
+function bytesToHexLower(bytes) {
+    let out = '';
+    for (let i = 0; i < bytes.length; i++) {
+        out += HEX[bytes[i] >> 4] + HEX[bytes[i] & 15];
+    }
+    return out;
+}
+function hexToBytesStrict(hex) {
+    const h = hex.startsWith('0x') ? hex.slice(2) : hex;
+    if (h.length % 2 !== 0 || !/^[0-9a-fA-F]*$/.test(h))
+        throw new Error('invalid_hex');
+    const out = new Uint8Array(h.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = parseInt(h.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+function utf8Bytes(text) {
+    return new TextEncoder().encode(text);
+}
+function sha256HexOfText(text) {
+    return bytesToHexLower((0, meter_hash_1.sha256Bytes)(utf8Bytes(text)));
+}
+function isHex64(value) {
+    return typeof value === 'string' && /^[0-9a-f]{64}$/.test(value);
+}
+function omit(source, drop) {
+    const out = {};
+    for (const key of Object.keys(source)) {
+        if (!drop.includes(key) && source[key] !== undefined)
+            out[key] = source[key];
+    }
+    return out;
+}
+// ─── the PE and its act record ──────────────────────────────────────────────────
+/** sha256 hex over the complete PE minus its own hash and signature. */
+function peHashOf(pe) {
+    return sha256HexOfText(canonicalJson(omit(pe, PE_HASH_EXCLUDED)));
+}
+/** The pricing projection: everything in the PE except identity fields and free text. */
+function pricingOf(pe) {
+    if (pe.private_pricing !== undefined)
+        return {
+            private_pricing: pe.private_pricing,
+            ...(pe.hardware_witness !== undefined ? { hardware_witness: pe.hardware_witness } : {}),
+            ...(pe.detail_hash !== undefined ? { detail_hash: pe.detail_hash } : {}),
+        };
+    return omit(pe, exports.NON_PRICING_PE_FIELDS);
+}
+/** The act record the relay prices. `pe_hash` covers the complete PE, free text included. */
+function actRecordOf(pe) {
+    return {
+        pe_id: pe.pe_id,
+        pe_hash: peHashOf(pe),
+        prev_hash: pe.prev_hash,
+        timestamp: pe.timestamp,
+        action_type: pe.action_type,
+        pricing: pricingOf(pe),
+    };
+}
+/**
+ * True when `act` is exactly the act record of `pe` (same hash AND same pricing inputs).
+ * This is the byte-for-byte check a verifier runs on a presented PE.
+ */
+function actMatchesPe(act, pe) {
+    return canonicalJson(act) === canonicalJson(actRecordOf(pe));
+}
+/** The act's leaf in its batch's `acts_root`. */
+function actLeafOf(act) {
+    return sha256HexOfText(ACT_LEAF_DOMAIN + canonicalJson(act));
+}
+/**
+ * The hardware-witness binding nonce for a v2 act: sha256 over the act's identity (`pe_id`,
+ * `prev_hash`, `timestamp`, `action_type`) and every pricing input except the witness slot itself.
+ * `pe_hash` is left out because it covers the whole PE, witness included — a nonce over it would
+ * ask the witness to sign its own signature. The witness therefore attests exactly what the relay
+ * prices, bound to one position in one device's chain.
+ */
+function hardwareNonceOfAct(act) {
+    return sha256HexOfText(canonicalJson({
+        pe_id: act.pe_id,
+        prev_hash: act.prev_hash,
+        timestamp: act.timestamp,
+        action_type: act.action_type,
+        pricing: omit(act.pricing, ['hardware_witness']),
+    }));
+}
+// ─── Merkle (sha256; the same tagged, sorted-pair, power-of-two shape as PEAnchor) ──
+const EMPTY_NODE = () => (0, meter_hash_1.sha256Bytes)(new Uint8Array(0));
+function tagged(tag, ...parts) {
+    let length = 1;
+    for (const p of parts)
+        length += p.length;
+    const out = new Uint8Array(length);
+    out[0] = tag;
+    let offset = 1;
+    for (const p of parts) {
+        out.set(p, offset);
+        offset += p.length;
+    }
+    return out;
+}
+function compareBytes(a, b) {
+    for (let i = 0; i < a.length && i < b.length; i++) {
+        if (a[i] !== b[i])
+            return a[i] - b[i];
+    }
+    return a.length - b.length;
+}
+function nodeOf(a, b) {
+    return compareBytes(a, b) <= 0 ? (0, meter_hash_1.sha256Bytes)(tagged(0x01, a, b)) : (0, meter_hash_1.sha256Bytes)(tagged(0x01, b, a));
+}
+function leafNodeOf(leafHex) {
+    if (!isHex64(leafHex))
+        throw new Error('invalid_leaf');
+    return (0, meter_hash_1.sha256Bytes)(tagged(0x00, hexToBytesStrict(leafHex)));
+}
+function layersOf(leafHexes) {
+    if (leafHexes.length === 0)
+        throw new Error('empty_tree');
+    const base = leafHexes.map(leafNodeOf);
+    let size = 1;
+    while (size < base.length)
+        size *= 2;
+    while (base.length < size)
+        base.push(EMPTY_NODE());
+    const layers = [base];
+    let current = base;
+    while (current.length > 1) {
+        const next = [];
+        for (let i = 0; i < current.length; i += 2)
+            next.push(nodeOf(current[i], current[i + 1]));
+        layers.push(next);
+        current = next;
+    }
+    return layers;
+}
+function merkleRootOf(leafHexes) {
+    const layers = layersOf(leafHexes);
+    return bytesToHexLower(layers[layers.length - 1][0]);
+}
+function proofFromLayers(layers, leafCount, index) {
+    if (!Number.isSafeInteger(index) || index < 0 || index >= leafCount) {
+        throw new Error('leaf_index_out_of_range');
+    }
+    const proof = [];
+    let i = index;
+    for (let level = 0; level < layers.length - 1; level++) {
+        proof.push(bytesToHexLower(layers[level][i % 2 === 0 ? i + 1 : i - 1]));
+        i = Math.floor(i / 2);
+    }
+    return proof;
+}
+function merkleProofOf(leafHexes, index) {
+    if (!Number.isSafeInteger(index) || index < 0 || index >= leafHexes.length) {
+        throw new Error('leaf_index_out_of_range');
+    }
+    return proofFromLayers(layersOf(leafHexes), leafHexes.length, index);
+}
+/**
+ * One build of the tree, then its root and any leaf's proof — byte-identical to merkleRootOf /
+ * merkleProofOf. Proving many leaves of one tree with merkleProofOf rebuilds it per leaf, which on
+ * a phone (interpreted SHA-256) made proving a few thousand acts take minutes.
+ */
+function merkleTreeOf(leafHexes) {
+    const layers = layersOf(leafHexes);
+    return {
+        root: bytesToHexLower(layers[layers.length - 1][0]),
+        proofOf: (index) => proofFromLayers(layers, leafHexes.length, index),
+    };
+}
+function verifyMerkleProofOf(leafHex, proof, rootHex) {
+    try {
+        let node = leafNodeOf(leafHex);
+        for (const sibling of proof) {
+            if (!isHex64(sibling))
+                return false;
+            node = nodeOf(node, hexToBytesStrict(sibling));
+        }
+        return bytesToHexLower(node) === rootHex;
+    }
+    catch {
+        return false;
+    }
+}
+/** The fingerprint over a batch's acts, in order. */
+function actsRootOf(acts) {
+    return merkleRootOf(acts.map(actLeafOf));
+}
+// ─── the batch ──────────────────────────────────────────────────────────────────
+/** sha256 over the batch minus its sealed copies (delivery payload, not part of the record). */
+function batchHashOf(batch) {
+    return sha256HexOfText(canonicalJson(omit(batch, ['sealed'])));
+}
+/** The 32-byte leaf the daily on-chain anchor commits to for one accepted batch. */
+function batchLeafOf(input) {
+    return sha256HexOfText(BATCH_LEAF_DOMAIN + canonicalJson({
+        actor_id: input.actor_id,
+        acts_root: input.acts_root,
+        batch_hash: input.batch_hash,
+        device_id: input.device_id,
+        seq: input.seq,
+    }));
+}
+/** Build a batch from complete PEs (client side). */
+function buildBatch(input) {
+    const acts = input.pes.map(actRecordOf);
+    const batch = {
+        schema: exports.PE_BATCH_SCHEMA,
+        device_id: input.device_id,
+        seq: input.seq,
+        prev_batch_hash: input.prev_batch_hash,
+        created_at_ms: input.created_at_ms,
+        acts,
+        acts_root: actsRootOf(acts),
+        ...(input.sealed && input.sealed.length > 0 ? { sealed: input.sealed } : {}),
+    };
+    return batch;
+}
+/** Structural validation (relay side). Never trusts `acts_root`: recomputes it. */
+function validateBatchShape(batch) {
+    if (batch === null || typeof batch !== 'object' || Array.isArray(batch))
+        return { ok: false, error: 'bad_schema' };
+    const b = batch;
+    if (b.schema !== exports.PE_BATCH_SCHEMA)
+        return { ok: false, error: 'bad_schema' };
+    if (typeof b.device_id !== 'string' || b.device_id.length === 0 || b.device_id.length > 200)
+        return { ok: false, error: 'bad_device_id' };
+    if (typeof b.seq !== 'number' || !Number.isSafeInteger(b.seq) || b.seq < 1)
+        return { ok: false, error: 'bad_seq' };
+    if (typeof b.prev_batch_hash !== 'string' || (b.prev_batch_hash !== exports.METER_GENESIS_PREV_HASH && !isHex64(b.prev_batch_hash))) {
+        return { ok: false, error: 'bad_prev_batch_hash' };
+    }
+    if (typeof b.created_at_ms !== 'number' || !Number.isSafeInteger(b.created_at_ms) || b.created_at_ms <= 0)
+        return { ok: false, error: 'bad_created_at' };
+    if (!Array.isArray(b.acts) || b.acts.length === 0)
+        return { ok: false, error: 'no_acts' };
+    if (b.acts.length > exports.MAX_ACTS_PER_BATCH)
+        return { ok: false, error: 'too_many_acts' };
+    const seen = new Set();
+    for (let i = 0; i < b.acts.length; i++) {
+        const a = b.acts[i];
+        if (a === null || typeof a !== 'object' || Array.isArray(a))
+            return { ok: false, error: 'bad_act', index: i };
+        const keys = Object.keys(a).sort().join(',');
+        if (keys !== 'action_type,pe_hash,pe_id,prev_hash,pricing,timestamp')
+            return { ok: false, error: 'bad_act', index: i };
+        if (typeof a.pe_id !== 'string' || a.pe_id.length === 0 || a.pe_id.length > 200)
+            return { ok: false, error: 'bad_act', index: i };
+        if (!isHex64(a.pe_hash))
+            return { ok: false, error: 'bad_act', index: i };
+        if (typeof a.prev_hash !== 'string' || (a.prev_hash !== exports.METER_GENESIS_PREV_HASH && !isHex64(a.prev_hash)))
+            return { ok: false, error: 'bad_act', index: i };
+        if (typeof a.timestamp !== 'number' || !Number.isSafeInteger(a.timestamp) || a.timestamp <= 0)
+            return { ok: false, error: 'bad_act', index: i };
+        if (typeof a.action_type !== 'string' || a.action_type.length === 0 || a.action_type.length > 128)
+            return { ok: false, error: 'bad_act', index: i };
+        if (a.pricing === null || typeof a.pricing !== 'object' || Array.isArray(a.pricing))
+            return { ok: false, error: 'bad_act', index: i };
+        for (const k of Object.keys(a.pricing)) {
+            if (exports.NON_PRICING_PE_FIELDS.includes(k))
+                return { ok: false, error: 'bad_act', index: i };
+        }
+        if (seen.has(a.pe_id))
+            return { ok: false, error: 'duplicate_pe_id', index: i };
+        seen.add(a.pe_id);
+    }
+    const acts = b.acts;
+    if (b.acts_root !== actsRootOf(acts))
+        return { ok: false, error: 'acts_root_mismatch' };
+    if (b.sealed !== undefined) {
+        if (!Array.isArray(b.sealed) || b.sealed.length > exports.MAX_ACTS_PER_BATCH * 2)
+            return { ok: false, error: 'bad_sealed' };
+        for (const s of b.sealed) {
+            const c = s;
+            if (c === null || typeof c !== 'object' || typeof c.to !== 'string' || typeof c.pe_id !== 'string'
+                || typeof c.box !== 'string' || c.box.length === 0 || c.box.length > 262144 || !seen.has(c.pe_id)) {
+                return { ok: false, error: 'bad_sealed' };
+            }
+        }
+    }
+    return { ok: true, batch: batch };
+}
+/**
+ * The device's PE chain must continue across batches: the first act links to the last act the
+ * relay accepted from this device, and every later act links to its predecessor. A PE can
+ * therefore appear in exactly one accepted batch.
+ */
+function verifyActChain(lastAcceptedPeHash, acts) {
+    let prev = lastAcceptedPeHash;
+    for (let i = 0; i < acts.length; i++) {
+        if (acts[i].prev_hash !== prev)
+            return { ok: false, index: i };
+        prev = acts[i].pe_hash;
+    }
+    return { ok: true };
+}
+/** Check an act (from a presented PE) against its inclusion proof, up to the batch leaf. */
+function verifyActInclusion(pe, proof) {
+    const act = actRecordOf(pe);
+    if (!verifyMerkleProofOf(actLeafOf(act), proof.act_proof, proof.acts_root))
+        return { ok: false, reason: 'act_not_in_batch' };
+    const leaf = batchLeafOf({
+        device_id: proof.batch.device_id,
+        actor_id: proof.batch.actor_id,
+        seq: proof.batch.seq,
+        batch_hash: proof.batch.batch_hash,
+        acts_root: proof.acts_root,
+    });
+    return { ok: true, batch_leaf: leaf };
+}
+//# sourceMappingURL=meter-wire.js.map

package/dist/core/meter-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meter-wire.js","sourceRoot":"","sources":["../../src/core/meter-wire.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AAmFH,sCAgBC;AAMD,0CAMC;AAED,4CAMC;AAED,8BAEC;AAED,0CAEC;AAiBD,4BAEC;AAGD,8BAOC;AAGD,kCASC;AAMD,oCAEC;AAGD,8BAEC;AASD,gDAQC;AAoDD,oCAGC;AAeD,sCAKC;AAOD,oCAMC;AAED,kDAWC;AAGD,gCAEC;AAKD,kCAEC;AAGD,kCAcC;AAGD,gCAoBC;AAgBD,gDA2CC;AAOD,wCAOC;AA8BD,gDAWC;AA/cD,6CAA2C;AAE9B,QAAA,YAAY,GAAG,eAAe,CAAC;AAC/B,QAAA,eAAe,GAAG,qBAAqB,CAAC;AACxC,QAAA,uBAAuB,GAAG,SAAS,CAAC;AACpC,QAAA,kBAAkB,GAAG,GAAG,CAAC;AACtC,kGAAkG;AACrF,QAAA,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7D,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAE1D,2EAA2E;AAC9D,QAAA,qBAAqB,GAAsB;IACtD,QAAQ;IACR,OAAO;IACP,WAAW;IACX,WAAW;IACX,WAAW;IACX,aAAa;IACb,SAAS;IACT,WAAW;IACX,aAAa;IACb,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,mBAAmB;CACpB,CAAC;AAEF,mGAAmG;AACnG,MAAM,gBAAgB,GAAsB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AA4CrE,mFAAmF;AAEnF;;;;GAIG;AACH,SAAgB,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC/F,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAChG,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,KAAK,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,mFAAmF;AAEnF,MAAM,GAAG,GAAG,kBAAkB,CAAC;AAE/B,SAAgB,eAAe,CAAC,KAAiB;IAC/C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY;IAC1C,OAAO,eAAe,CAAC,IAAA,wBAAW,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,IAAI,CAAC,MAAyC,EAAE,IAAuB;IAC9E,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AAEnF,wEAAwE;AACxE,SAAgB,QAAQ,CAAC,EAAQ;IAC/B,OAAO,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,yFAAyF;AACzF,SAAgB,SAAS,CAAC,EAAQ;IAChC,IAAG,EAAE,CAAC,eAAe,KAAG,SAAS;QAAE,OAAO;YACxC,eAAe,EAAC,EAAE,CAAC,eAAe;YAClC,GAAG,CAAC,EAAE,CAAC,gBAAgB,KAAG,SAAS,CAAA,CAAC,CAAA,EAAC,gBAAgB,EAAC,EAAE,CAAC,gBAAgB,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAC9E,GAAG,CAAC,EAAE,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,EAAE,CAAC,WAAW,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;SAChE,CAAC;IACF,OAAO,IAAI,CAAC,EAAE,EAAE,6BAAqB,CAAC,CAAC;AACzC,CAAC;AAED,6FAA6F;AAC7F,SAAgB,WAAW,CAAC,EAAQ;IAClC,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;KACvB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAAC,GAAc,EAAE,EAAQ;IACnD,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,iDAAiD;AACjD,SAAgB,SAAS,CAAC,GAAc;IACtC,OAAO,eAAe,CAAC,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,GAAc;IAC/C,OAAO,eAAe,CAAC,aAAa,CAAC;QACnC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC;KACjD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,uFAAuF;AAEvF,MAAM,UAAU,GAAG,GAAe,EAAE,CAAC,IAAA,wBAAW,EAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpE,SAAS,MAAM,CAAC,GAAW,EAAE,GAAG,KAAmB;IACjD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,CAAa,EAAE,CAAa;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,SAAS,MAAM,CAAC,CAAa,EAAE,CAAa;IAC1C,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,wBAAW,EAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,wBAAW,EAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACvD,OAAO,IAAA,wBAAW,EAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,QAAQ,CAAC,SAA4B;IAC5C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM;QAAE,IAAI,IAAI,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,GAAmB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,YAAY,CAAC,SAA4B;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B,EAAE,SAAiB,EAAE,KAAa;IACxF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,SAA4B,EAAE,KAAa;IACvE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,SAA4B;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CAAC,OAAe,EAAE,KAAwB,EAAE,OAAe;IAC5F,IAAI,CAAC;QACH,IAAI,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YACpC,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,SAAgB,UAAU,CAAC,IAA0B;IACnD,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,mFAAmF;AAEnF,gGAAgG;AAChG,SAAgB,WAAW,CAAC,KAAc;IACxC,OAAO,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,KAA2C,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,oFAAoF;AACpF,SAAgB,WAAW,CAAC,KAM3B;IACC,OAAO,eAAe,CAAC,iBAAiB,GAAG,aAAa,CAAC;QACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC,CAAC,CAAC;AACN,CAAC;AAED,qDAAqD;AACrD,SAAgB,UAAU,CAAC,KAO1B;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,KAAK,GAAY;QACrB,MAAM,EAAE,uBAAe;QACvB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,IAAI;QACJ,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC;QAC3B,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAeD,mFAAmF;AACnF,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACnH,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,uBAAe;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC5E,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAC1I,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnH,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,eAAe,KAAK,+BAAuB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAC5H,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IACzJ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC1F,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,0BAAkB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IACrF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAmC,CAAC;QACtD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,uDAAuD;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACvH,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAClI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,+BAAuB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC5J,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAChJ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpJ,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACtI,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAiB,CAAC,EAAE,CAAC;YACjD,IAAI,6BAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1F,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAA8B,CAAC;IAC9C,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACxF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,0BAAkB,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QACpH,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAmB,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,CAAmC,CAAC;YAC9C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;mBAC7F,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,MAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAgB,EAAE,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,kBAA0B,EAAE,IAA0B;IACnF,IAAI,IAAI,GAAG,kBAAkB,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AA6BD,4FAA4F;AAC5F,SAAgB,kBAAkB,CAAC,EAAQ,EAAE,KAAwB;IACnE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7H,MAAM,IAAI,GAAG,WAAW,CAAC;QACvB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;QAChC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;QAC9B,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;QACpB,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC"}

package/dist/core/output-signature.d.ts

@@ -0,0 +1,162 @@
+/**
+ * OUTPUT SIGNATURE — the ONE definition of a signature over an output an agent or a person's device
+ * hands out, and of the citation that carries it :
+ *
+ * "every output an agent hands out carries its signature over the output's hash (SDK, MCP and
+ * facilitator responses). A citation counts toward the producer's consumption when it carries
+ * that signature."
+ * "1. The producer's signature only establishes who made the output. The citing act must still
+ * be witnessed, and the ring and self filters still apply …
+ * 2. Outputs produced on devices that don't hold the wallet key (the MacBook daemon, phones) are
+ * signed with that device's registered key and map to the owner through the same identity
+ * index, so human-device work earns consumption too."
+ *
+ * THIS FILE IS BYTE-IDENTICAL IN THREE PACKAGES and `scripts/check-meter-wire-parity.sh` refuses any
+ * drift:
+ * provian-backend/src/core/meter/output-signature.ts (the relay: verifies at intake)
+ * provian-agent-sdk/src/output-signature.ts (daemon + SDK: signs and cites)
+ * src/core/meter/output-signature.ts (the app: signs and cites)
+ * Pure: no I/O, no clock, no key material. Signing and verification are each package's own, over
+ * the message defined here; `docs/audit/output-signature-vectors.json` binds every package to the
+ * same bytes.
+ *
+ * WHAT IS SIGNED — one message for every key kind:
+ * hash `sha256:<64 lowercase hex>` of the output's exact bytes (what the consumer received).
+ * message `provian-output:v1:<64 lowercase hex>` (UTF-8). Domain-separated from every other
+ * Provian-signed message (none begins `provian-output:`; it is not base64url, so it can
+ * never be a device-signature preimage), and it carries the literal "provian", so the
+ * app's WalletConnect guard never lets a dApp obtain one (`provianReserved.ts`).
+ *
+ * WHO SIGNS — the producer's REGISTERED key, three kinds:
+ * wallet an agent's (or person's) wallet key, secp256k1. scheme `eip191_secp256k1` * `personal_sign` over the message; sig = 0x + 130 hex (r‖s‖v). id = the address
+ * (0x + 40 lowercase hex), resolved through the native wallet address index or a proven
+ * address registry.
+ * device a registered observer device (`devices/{id}` e.g. a human's MacBook daemon), its
+ * Secure-Enclave P-256 `signing_public_key`, or the P-256 output key a bearer device
+ * registered. scheme `p256_sha256` ECDSA P-256 over SHA-256(message); sig = 128
+ * lowercase hex (r‖s, low-s). id = the device id.
+ * app a phone running the Provian app: its hardware PE-attestation key
+ * (`provian_pe_attestation`, Secure Enclave / StrongBox — never the wallet key),
+ * registered once under wallet auth. scheme `p256_sha256`. id = `aok_` + 32 hex.
+ *
+ * HOW IT TRAVELS
+ * HTTP response header `Provian-Output-Signature: <base64url(canonical JSON of the object)>`.
+ * MCP/JSON the object itself under `provian_output_signature`.
+ * PE the consumer's next PE cites it as one `input_origins` entry:
+ * `{ hash, origin_identifier: "out:<kind>:<id>", witnessed, witness?, signature }`.
+ * The signature establishes WHO MADE the output (the owner of the citation edge); it
+ * never makes the citing act witnessed — that is the citing lane's own witness.
+ */
+export declare const OUTPUT_SIGNATURE_MESSAGE_PREFIX = "provian-output:v1:";
+export declare const OUTPUT_SIGNATURE_HEADER = "Provian-Output-Signature";
+/** The JSON key a non-HTTP surface (an MCP tool result, a JSON body) carries the object under. */
+export declare const OUTPUT_SIGNATURE_JSON_KEY = "provian_output_signature";
+/** The `input_origins` class of a signed citation: `out:<kind>:<id>`. */
+export declare const OUTPUT_CITATION_SCHEME = "out:";
+/** Longest header value accepted (a wallet-signed object encodes to ~420 characters). */
+export declare const OUTPUT_SIGNATURE_HEADER_MAX_LEN = 2048;
+/** The message a P-256 output key signs to prove possession when it is registered. */
+export declare const OUTPUT_KEY_REGISTRATION_PREFIX = "provian-output-key:v1:";
+export type OutputSignerKind = 'wallet' | 'device' | 'app';
+export type OutputSignatureScheme = 'eip191_secp256k1' | 'p256_sha256';
+export interface OutputSigner {
+    readonly kind: OutputSignerKind;
+    readonly id: string;
+}
+export interface OutputSignature {
+    /** `sha256:<64 lowercase hex>` of the output bytes. */
+    readonly hash: string;
+    readonly signer: OutputSigner;
+    readonly scheme: OutputSignatureScheme;
+    /** eip191: 0x + 130 hex. p256: 128 hex (r‖s). Lowercase. */
+    readonly sig: string;
+}
+/** The `input_origins` entry of a signed citation. */
+export interface OutputCitationOrigin {
+    readonly hash: string;
+    readonly origin_identifier: string;
+    readonly witnessed: boolean;
+    readonly witness?: {
+        readonly type: string;
+        readonly identity: string;
+        readonly attestation_tier?: string;
+    };
+    readonly signature: OutputSignature;
+}
+/** The scheme each signer kind signs with (one scheme per kind). */
+export declare const OUTPUT_SIGNER_SCHEMES: Readonly<Record<OutputSignerKind, OutputSignatureScheme>>;
+/** `sha256:<hex>` of an output's exact bytes. */
+export declare function outputHashOfBytes(bytes: Uint8Array): string;
+/** `sha256:<hex>` of an output that is text (UTF-8). */
+export declare function outputHashOfText(text: string): string;
+/** The canonical form of an output hash (`sha256:` + 64 lowercase hex), or null. */
+export declare function canonicalOutputHash(value: unknown): string | null;
+/** The exact UTF-8 message every signer kind signs for an output hash. */
+export declare function outputSignatureMessage(hash: string): string;
+/** SHA-256 (hex) of the message — the digest a P-256 signer (Secure Enclave, StrongBox) signs. */
+export declare function outputSignatureDigestHex(hash: string): string;
+/** The canonical form of a signer reference, or null. */
+export declare function normalizeOutputSigner(value: unknown): OutputSigner | null;
+/**
+ * The canonical form of a signature object, or null when it is not one. Shape only (the scheme must
+ * be the signer kind's scheme and the sig must have that scheme's shape): whether the signature
+ * verifies against the signer's registered key is the verifier's check (the relay's, at intake).
+ */
+export declare function normalizeOutputSignature(value: unknown): OutputSignature | null;
+/** The canonical SEC1 uncompressed P-256 public key (`04` + 128 hex, lowercase, no 0x), or null. */
+export declare function canonicalP256PublicKey(value: unknown): string | null;
+/** The registered id of an app output key: `aok_` + the first 32 hex of sha256(public key bytes). */
+export declare function appOutputKeyId(publicKeyHex: string): string;
+/**
+ * The proof-of-possession message a P-256 output key signs (ECDSA P-256 over SHA-256 of it) when
+ * it is registered: bound to the key kind, the identity registering it, and the key itself.
+ */
+export declare function outputKeyRegistrationMessage(kind: 'device' | 'app', ownerId: string, publicKeyHex: string): string;
+/** The `Provian-Output-Signature` header value for a signature object. */
+export declare function encodeOutputSignatureHeader(signature: OutputSignature): string;
+/**
+ * Read a `Provian-Output-Signature` header value (base64url of the JSON object, or the JSON object
+ * itself), or null when it is not a well-formed signature object.
+ */
+export declare function decodeOutputSignatureHeader(value: unknown): OutputSignature | null;
+/** `out:<kind>:<id>` for a signer. */
+export declare function outputCitationIdentifier(signer: OutputSigner): string;
+/** The signer an `out:<kind>:<id>` identifier names, or null. */
+export declare function outputCitationSignerOf(originIdentifier: unknown): OutputSigner | null;
+/**
+ * The `input_origins` entry a consumer's next PE carries for an output it received signed. The
+ * `witness` is the CITING lane's own witness (e.g. the observer daemon's device) — never the
+ * producer: the producer's signature names the owner, not the act's witness. Without one the entry
+ * is `witnessed: false`, and whether a non-actor key vouched the citing act is the relay's call.
+ */
+export declare function outputCitationOrigin(signature: OutputSignature, citingWitness?: {
+    readonly type: string;
+    readonly identity: string;
+    readonly attestation_tier?: string;
+} | null): OutputCitationOrigin;
+/**
+ * The signature carried on an `input_origins` entry when the entry is a well-formed signed citation
+ * (an `out:` identifier, a well-formed signature naming the same signer and the same hash), else
+ * null. Shape only — verification against the registered key is the verifier's.
+ */
+export declare function signedCitationOf(origin: unknown): OutputSignature | null;
+/** A forum post or reply: its trimmed content. */
+export declare function forumPostOutputText(content: string): string;
+/** A want: its outcome, capabilities and preferred chains, normalized as the relay stores them. */
+export declare function wantOutputText(outcome: string, capabilities: readonly string[], preferredChains?: readonly string[]): string;
+/** A hiring-board job post: its trimmed title and description. */
+export declare function jobPostOutputText(title: string, description: string): string;
+/** A job deliverable: its body when it has one, else its trimmed URI. */
+export declare function deliverableOutputText(uri: string | null | undefined, body: string | null | undefined): string;
+/**
+ * A thread message is E2E ciphertext the relay cannot read, so its signature rides INSIDE the
+ * sealed plaintext as a trailing header line; the signature covers the message text before it.
+ */
+export declare const THREAD_OUTPUT_SIGNATURE_TRAILER = "\n\nProvian-Output-Signature: ";
+export declare function withThreadOutputSignature(text: string, signature: OutputSignature): string;
+/** Split a thread plaintext into its text and the signature over exactly that text (else null). */
+export declare function splitThreadOutputSignature(plaintext: string): {
+    text: string;
+    signature: OutputSignature | null;
+};
+//# sourceMappingURL=output-signature.d.ts.map

package/dist/core/output-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-signature.d.ts","sourceRoot":"","sources":["../../src/core/output-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAKH,eAAO,MAAM,+BAA+B,uBAAuB,CAAC;AACpE,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAClE,kGAAkG;AAClG,eAAO,MAAM,yBAAyB,6BAA6B,CAAC;AACpE,yEAAyE;AACzE,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,yFAAyF;AACzF,eAAO,MAAM,+BAA+B,OAAO,CAAC;AACpD,sFAAsF;AACtF,eAAO,MAAM,8BAA8B,2BAA2B,CAAC;AAEvE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;AAC3D,MAAM,MAAM,qBAAqB,GAAG,kBAAkB,GAAG,aAAa,CAAC;AAEvE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,4DAA4D;IAC5D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5G,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAUD,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAI1F,CAAC;AAEH,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAE3D;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAIjE;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI3D;AAED,kGAAkG;AAClG,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,yDAAyD;AACzD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAkBzE;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAW/E;AAED,oGAAoG;AACpG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAKpE;AAED,qGAAqG;AACrG,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAKlH;AAsCD,0EAA0E;AAC1E,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,CAI9E;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAWlF;AAED,sCAAsC;AACtC,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAIrE;AAED,iEAAiE;AACjE,wBAAgB,sBAAsB,CAAC,gBAAgB,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAQrF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,eAAe,EAC1B,aAAa,CAAC,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAC9G,oBAAoB,CAOtB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CASxE;AAkBD,kDAAkD;AAClD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,mGAAmG;AACnG,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,EAAE,eAAe,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAEhI;AAED,kEAAkE;AAClE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAG7G;AAED;;;GAGG;AACH,eAAO,MAAM,+BAA+B,mCAAqC,CAAC;AAElF,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,GAAG,MAAM,CAE1F;AAED,mGAAmG;AACnG,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,CAQjH"}