@run402/sdk 4.95.0 → 4.96.0

package/dist/node/{gitvault-keystore.js → vault-keystore.js}

@@ -1,10 +1,10 @@
 /**
- * gitvault — the principal keystore (protocol rev 41 §5.1; task 5.2).
+ * vault — the principal keystore (protocol rev 41 §5.1; task 5.2).
  *
  * Layout (under the active profile's config dir, beside the project-key cache
  * `core/src/keystore.ts` manages — `RUN402_CONFIG_DIR` / `RUN402_WALLET` aware):
  *
- *   <config>/gitvault/
+ *   <config>/vault/
  *     identity.json                 Ed25519 seed + X25519 private key (0600)
  *     repos/<repo_id>.json          K_repo, trust pin, dual pins, last ref transaction (0600)
  *     repos/<repo_id>.lock/         per-repo lock (mkdir-atomic, 0700)
@@ -19,7 +19,7 @@
  * is a named finding, never silent.
  *
  * Transitions (protocol §5.1 partial-loss table) are DERIVED by
- * {@link GitvaultKeystore.assess} and acted on by explicit methods — the
+ * {@link VaultKeystore.assess} and acted on by explicit methods — the
  * keystore never guesses:
  *   - repo file lost + identity intact  → `restoreRepoFromEnvelope` (own envelope)
  *   - signing key lost, K_repo held     → `read_only` (clear report)
@@ -30,7 +30,7 @@ import { closeSync, constants, existsSync, fsyncSync, lstatSync, mkdirSync, open
 import { dirname, join } from "node:path";
 import { getConfigDir } from "../../core-dist/config.js";
 import { LocalError } from "../errors.js";
-import { GITVAULT_EK_RE, GITVAULT_SRC_RE, GITVAULT_TERMINAL_LOSS_DOCTOR_TEXT, GITVAULT_TERMINAL_LOSS_STATEMENT, GITVAULT_VK_RE, bytesToHex, checkGenesisKeyBindings, checkRecoveryReceipt, ekFingerprint, fromBase64url, formatGitvaultTimestamp, generateEncryptionKeypair, generateSigningKeypair, hexToBytes, openKeyEnvelope, storedBytesSha256, toBase64url, verifyGitvaultObject, vkFingerprint, } from "../namespaces/gitvault.crypto.js";
+import { VAULT_EK_RE, VAULT_SRC_RE, VAULT_TERMINAL_LOSS_DOCTOR_TEXT, VAULT_TERMINAL_LOSS_STATEMENT, VAULT_VK_RE, bytesToHex, checkGenesisKeyBindings, checkRecoveryReceipt, ekFingerprint, fromBase64url, formatVaultTimestamp, generateEncryptionKeypair, generateSigningKeypair, hexToBytes, openKeyEnvelope, storedBytesSha256, toBase64url, verifyVaultObject, vkFingerprint, } from "../namespaces/vault.crypto.js";
 function fail(code, message, context, details) {
     throw new LocalError(message, context, { code, details });
 }
@@ -38,10 +38,10 @@ const O_NOFOLLOW = constants.O_NOFOLLOW ?? 0;
 const DIR_MODE = 0o700;
 const FILE_MODE = 0o600;
 /** The local object cache's recency window (design D3: "genesis + newest N=8 heads + newest carriers"). */
-export const GITVAULT_OBJECT_CACHE_WINDOW = 8;
-/** gitvault-object-host-predial (design D1): the max persisted object-store origins per repo — small on purpose, this is a predial hint, not an inventory. */
-export const GITVAULT_OBJECT_STORE_ORIGINS_CAP = 4;
-/** Bare hex16 generation comparison for cache eviction — deliberately NOT `generationToBigInt` (gitvault-publication.ts), which this lower-level module must not import (publication already imports FROM here). Malformed input sorts as "evict" rather than throwing: a corrupt cache entry should never block eviction of everything else. */
+export const VAULT_OBJECT_CACHE_WINDOW = 8;
+/** vault-object-host-predial (design D1): the max persisted object-store origins per repo — small on purpose, this is a predial hint, not an inventory. */
+export const VAULT_OBJECT_STORE_ORIGINS_CAP = 4;
+/** Bare hex16 generation comparison for cache eviction — deliberately NOT `generationToBigInt` (vault-publication.ts), which this lower-level module must not import (publication already imports FROM here). Malformed input sorts as "evict" rather than throwing: a corrupt cache entry should never block eviction of everything else. */
 function genToBigInt(generation) {
     try {
         return /^[0-9a-f]{16}$/.test(generation) ? BigInt(`0x${generation}`) : -1n;
@@ -50,9 +50,46 @@ function genToBigInt(generation) {
         return -1n;
     }
 }
-/** Default keystore root: `<active profile config dir>/gitvault`. */
-export function getGitvaultKeystoreRoot() {
-    return join(getConfigDir(), "gitvault");
+/** The keystore directory's earlier name under the same config dir. */
+const FORMER_KEYSTORE_DIRNAME = "gitvault";
+/**
+ * Default keystore root: `<active profile config dir>/vault`.
+ *
+ * This is the one place the keystore path is first resolved, so it is also
+ * where a keystore still at `<config>/gitvault` moves to `<config>/vault`:
+ * one same-directory `rename`, which is atomic, and only when `vault` does
+ * not exist yet. Nothing reads the earlier path after that. A move another
+ * process already made is not an error; any other refusal throws
+ * `VAULT_KEYSTORE_MOVE_FAILED` naming both paths, because answering with an
+ * empty `vault` directory would make a live keystore look lost.
+ */
+export function getVaultKeystoreRoot() {
+    const configDir = getConfigDir();
+    const root = join(configDir, "vault");
+    moveFormerKeystoreDir(join(configDir, FORMER_KEYSTORE_DIRNAME), root);
+    return root;
+}
+function moveFormerKeystoreDir(former, root) {
+    if (existsSync(root))
+        return;
+    let stat;
+    try {
+        stat = lstatSync(former);
+    }
+    catch {
+        return; // nothing to move
+    }
+    if (!stat.isDirectory() && !stat.isSymbolicLink())
+        return;
+    try {
+        renameSync(former, root);
+    }
+    catch (e) {
+        const code = e.code;
+        if (existsSync(root) || code === "ENOENT")
+            return; // another process moved it first
+        throw new LocalError(`could not move the vault keystore from ${former} to ${root}: ${e instanceof Error ? e.message : String(e)}`, "resolving the vault keystore", { code: "VAULT_KEYSTORE_MOVE_FAILED", details: { from: former, to: root }, cause: e });
+    }
 }
 function mkdir0700(path) {
     mkdirSync(path, { recursive: true, mode: DIR_MODE });
@@ -79,7 +116,7 @@ export function writeFileAtomic0600(path, text) {
     const dir = dirname(path);
     mkdir0700(dir);
     if (existsSync(path) && lstatSync(path).isSymbolicLink()) {
-        fail("GITVAULT_KEYSTORE_SYMLINK", `refusing to write through a symlink: ${path}`, "writing gitvault keystore file", { path });
+        fail("VAULT_KEYSTORE_SYMLINK", `refusing to write through a symlink: ${path}`, "writing vault keystore file", { path });
     }
     const tmp = join(dir, `.${String(process.pid)}.${bytesToHex(globalThis.crypto.getRandomValues(new Uint8Array(6)))}.tmp`);
     const fd = openSync(tmp, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | O_NOFOLLOW, FILE_MODE);
@@ -103,7 +140,7 @@ export function readFileNoFollow(path) {
         return null;
     }
     if (st.isSymbolicLink()) {
-        fail("GITVAULT_KEYSTORE_SYMLINK", `refusing to read through a symlink: ${path}`, "reading gitvault keystore file", { path });
+        fail("VAULT_KEYSTORE_SYMLINK", `refusing to read through a symlink: ${path}`, "reading vault keystore file", { path });
     }
     const fd = openSync(path, constants.O_RDONLY | O_NOFOLLOW);
     try {
@@ -135,24 +172,24 @@ function auditPath(path, expectDir) {
     return findings;
 }
 // ─── The keystore ────────────────────────────────────────────────────────────
-export class GitvaultKeystore {
+export class VaultKeystore {
     rootDir;
     now;
     strictPermissions;
     constructor(options = {}) {
-        this.rootDir = options.rootDir ?? getGitvaultKeystoreRoot();
+        this.rootDir = options.rootDir ?? getVaultKeystoreRoot();
         this.now = options.now ?? (() => new Date());
         this.strictPermissions = options.strictPermissions ?? false;
     }
     /** Open (creating the directory skeleton) and run the permission audit. */
     static open(options = {}) {
-        const ks = new GitvaultKeystore(options);
+        const ks = new VaultKeystore(options);
         for (const dir of [ks.rootDir, ks.reposDir, ks.receiptsDir, ks.journalDir])
             mkdir0700(dir);
         const findings = ks.auditPermissions();
         ks.audit("keystore_opened", undefined, { findings: findings.length });
         if (findings.length > 0 && ks.strictPermissions) {
-            fail("GITVAULT_KEYSTORE_PERMISSIONS", "gitvault keystore permission audit failed", "opening gitvault keystore", { findings });
+            fail("VAULT_KEYSTORE_PERMISSIONS", "vault keystore permission audit failed", "opening vault keystore", { findings });
         }
         return ks;
     }
@@ -162,13 +199,13 @@ export class GitvaultKeystore {
     get journalDir() { return join(this.rootDir, "journal"); }
     get auditLogPath() { return join(this.rootDir, "audit.log"); }
     repoPath(repoId) {
-        if (!GITVAULT_SRC_RE.test(repoId))
-            fail("GITVAULT_BAD_REPO_ID", `not a src_ id: ${repoId}`, "resolving gitvault repo path");
+        if (!VAULT_SRC_RE.test(repoId))
+            fail("VAULT_BAD_REPO_ID", `not a src_ id: ${repoId}`, "resolving vault repo path");
         return join(this.reposDir, `${repoId}.json`);
     }
     recoveryReceiptPath(repoId) {
-        if (!GITVAULT_SRC_RE.test(repoId))
-            fail("GITVAULT_BAD_REPO_ID", `not a src_ id: ${repoId}`, "resolving gitvault receipt path");
+        if (!VAULT_SRC_RE.test(repoId))
+            fail("VAULT_BAD_REPO_ID", `not a src_ id: ${repoId}`, "resolving vault receipt path");
         return join(this.receiptsDir, `${repoId}.recovery_receipt.json`);
     }
     // ── permission audit ──
@@ -201,10 +238,10 @@ export class GitvaultKeystore {
     // ── audit log ──
     /** Append one JSON line to `audit.log` (0600, created no-follow). */
     audit(event, repoId, details) {
-        const entry = { at: formatGitvaultTimestamp(this.now()), event, ...(repoId ? { repo_id: repoId } : {}), ...(details ? { details } : {}) };
+        const entry = { at: formatVaultTimestamp(this.now()), event, ...(repoId ? { repo_id: repoId } : {}), ...(details ? { details } : {}) };
         mkdir0700(this.rootDir);
         if (isSymlink(this.auditLogPath)) {
-            fail("GITVAULT_KEYSTORE_SYMLINK", "refusing to append through a symlinked audit.log", "appending gitvault audit log");
+            fail("VAULT_KEYSTORE_SYMLINK", "refusing to append through a symlinked audit.log", "appending vault audit log");
         }
         const fd = openSync(this.auditLogPath, constants.O_WRONLY | constants.O_CREAT | constants.O_APPEND | O_NOFOLLOW, FILE_MODE);
         try {
@@ -229,7 +266,7 @@ export class GitvaultKeystore {
             return null;
         const parsed = JSON.parse(text);
         if (parsed.version !== 1 || typeof parsed.signing_pubkey !== "string" || typeof parsed.encryption_pubkey !== "string") {
-            fail("GITVAULT_KEYSTORE_CORRUPT", "identity.json is not a version-1 gitvault identity", "reading gitvault identity");
+            fail("VAULT_KEYSTORE_CORRUPT", "identity.json is not a version-1 vault identity", "reading vault identity");
         }
         return parsed;
     }
@@ -248,10 +285,10 @@ export class GitvaultKeystore {
             encryption_private_key_hex: bytesToHex(encryption.private_key),
             encryption_pubkey: toBase64url(encryption.public_key),
             encryption_fingerprint: ekFingerprint(encryption.public_key),
-            created_at: formatGitvaultTimestamp(this.now()),
+            created_at: formatVaultTimestamp(this.now()),
         };
         if (existsSync(this.identityPath)) {
-            fail("GITVAULT_KEYSTORE_CONFLICT", "identity.json appeared concurrently; refusing to overwrite", "creating gitvault identity");
+            fail("VAULT_KEYSTORE_CONFLICT", "identity.json appeared concurrently; refusing to overwrite", "creating vault identity");
         }
         writeFileAtomic0600(this.identityPath, JSON.stringify(identity, null, 2));
         this.audit("identity_created", undefined, { signing_fingerprint: identity.signing_fingerprint, encryption_fingerprint: identity.encryption_fingerprint });
@@ -267,7 +304,7 @@ export class GitvaultKeystore {
         if (identity.enrolled_principal_id === principalId)
             return;
         if (identity.enrolled_principal_id) {
-            fail("GITVAULT_IDENTITY_PROFILE_MISMATCH", `this keystore identity enrolled as principal ${identity.enrolled_principal_id}, not ${principalId} — refusing cross-profile reuse`, "binding gitvault identity", { enrolled_principal_id: identity.enrolled_principal_id, principal_id: principalId });
+            fail("VAULT_IDENTITY_PROFILE_MISMATCH", `this keystore identity enrolled as principal ${identity.enrolled_principal_id}, not ${principalId} — refusing cross-profile reuse`, "binding vault identity", { enrolled_principal_id: identity.enrolled_principal_id, principal_id: principalId });
         }
         writeFileAtomic0600(this.identityPath, JSON.stringify({ ...identity, enrolled_principal_id: principalId }, null, 2));
         this.audit("identity_principal_bound", undefined, { principal_id: principalId });
@@ -278,7 +315,7 @@ export class GitvaultKeystore {
             return null;
         const kp = generateSigningKeypair(hexToBytes(identity.signing_seed_hex));
         if (vkFingerprint(kp.public_key) !== identity.signing_fingerprint) {
-            fail("GITVAULT_KEYSTORE_CORRUPT", "identity signing seed does not derive the recorded fingerprint", "loading gitvault signing key");
+            fail("VAULT_KEYSTORE_CORRUPT", "identity signing seed does not derive the recorded fingerprint", "loading vault signing key");
         }
         return kp;
     }
@@ -288,14 +325,14 @@ export class GitvaultKeystore {
             return null;
         const kp = generateEncryptionKeypair(hexToBytes(identity.encryption_private_key_hex));
         if (ekFingerprint(kp.public_key) !== identity.encryption_fingerprint) {
-            fail("GITVAULT_KEYSTORE_CORRUPT", "identity encryption key does not derive the recorded fingerprint", "loading gitvault encryption key");
+            fail("VAULT_KEYSTORE_CORRUPT", "identity encryption key does not derive the recorded fingerprint", "loading vault encryption key");
         }
         return kp;
     }
     requireIdentity() {
         const id = this.readIdentity();
         if (!id)
-            fail("VAULT_UNRECOVERABLE", GITVAULT_TERMINAL_LOSS_DOCTOR_TEXT, "loading gitvault identity", { statement: GITVAULT_TERMINAL_LOSS_STATEMENT });
+            fail("VAULT_UNRECOVERABLE", VAULT_TERMINAL_LOSS_DOCTOR_TEXT, "loading vault identity", { statement: VAULT_TERMINAL_LOSS_STATEMENT });
         return id;
     }
     // ── repo files ──
@@ -305,19 +342,19 @@ export class GitvaultKeystore {
             return null;
         const parsed = JSON.parse(text);
         if (parsed.version !== 1 || parsed.repo_id !== repoId || typeof parsed.k_repo_hex !== "string") {
-            fail("GITVAULT_KEYSTORE_CORRUPT", `repos/${repoId}.json is not a version-1 gitvault repo file`, "reading gitvault repo file", { repo_id: repoId });
+            fail("VAULT_KEYSTORE_CORRUPT", `repos/${repoId}.json is not a version-1 vault repo file`, "reading vault repo file", { repo_id: repoId });
         }
         return parsed;
     }
     listRepoIds() {
         if (!existsSync(this.reposDir))
             return [];
-        return readdirSync(this.reposDir).filter((n) => n.endsWith(".json")).map((n) => n.slice(0, -5)).filter((id) => GITVAULT_SRC_RE.test(id)).sort();
+        return readdirSync(this.reposDir).filter((n) => n.endsWith(".json")).map((n) => n.slice(0, -5)).filter((id) => VAULT_SRC_RE.test(id)).sort();
     }
     /**
-     * gitvault-offline-clone-resolve (design D1/D2/D6, task 1.1): the
-     * keystore's project→repo lookup that lets {@link resolveGitvaultAddress}
-     * (`gitvault-address.ts`) answer an id-form address WITHOUT the network
+     * vault-offline-clone-resolve (design D1/D2/D6, task 1.1): the
+     * keystore's project→repo lookup that lets {@link resolveVaultAddress}
+     * (`vault-address.ts`) answer an id-form address WITHOUT the network
      * `findVaultByProject` round trip. D2's completeness argument: decrypting
      * anything requires exactly this repo file (`k_repo_hex`), so "this
      * keystore holds a matching file" is exactly the set of clones that can
@@ -335,7 +372,7 @@ export class GitvaultKeystore {
      * old `repo_id` on THIS machine. D3: the most-recently-modified file (by
      * filesystem mtime — D6 rules out a maintained on-disk index for v1) wins;
      * a wrong pick is indistinguishable from an ordinary stale pin and heals
-     * through the same {@link recoverStaleGitvaultPin} first-use-refusal path.
+     * through the same {@link recoverStaleVaultPin} first-use-refusal path.
      *
      * Cheap by construction (D6): one directory listing plus one JSON read per
      * candidate — no maintained project→repo index. NEVER throws: a corrupt,
@@ -373,7 +410,7 @@ export class GitvaultKeystore {
     }
     /** Save (create or replace) a repo file under the per-repo lock. */
     saveRepo(repo) {
-        const full = { version: 1, ...repo, updated_at: formatGitvaultTimestamp(this.now()) };
+        const full = { version: 1, ...repo, updated_at: formatVaultTimestamp(this.now()) };
         this.withRepoLock(repo.repo_id, () => {
             writeFileAtomic0600(this.repoPath(repo.repo_id), JSON.stringify(full, null, 2));
         });
@@ -385,18 +422,18 @@ export class GitvaultKeystore {
         return this.withRepoLock(repoId, () => {
             const existing = this.readRepo(repoId);
             if (!existing)
-                fail("GITVAULT_REPO_STATE_MISSING", `no repo file for ${repoId}`, "updating gitvault repo file", { repo_id: repoId });
-            const full = { ...existing, ...patch, updated_at: formatGitvaultTimestamp(this.now()) };
+                fail("VAULT_REPO_STATE_MISSING", `no repo file for ${repoId}`, "updating vault repo file", { repo_id: repoId });
+            const full = { ...existing, ...patch, updated_at: formatVaultTimestamp(this.now()) };
             writeFileAtomic0600(this.repoPath(repoId), JSON.stringify(full, null, 2));
             return full;
         });
     }
     /**
-     * gitvault-object-host-predial (design D1/D4, task 1.2): record that
+     * vault-object-host-predial (design D1/D4, task 1.2): record that
      * `origins` (already-normalized `scheme://host` strings) were observed
      * serving THIS repo's objects — the transport's write-through-on-change
      * hook. Most-recently-observed wins ties over anything already recorded;
-     * deduped; capped at {@link GITVAULT_OBJECT_STORE_ORIGINS_CAP}. A true
+     * deduped; capped at {@link VAULT_OBJECT_STORE_ORIGINS_CAP}. A true
      * no-op (no lock taken, no write, `updated_at` untouched) when the
      * resulting set is IDENTICAL — in order — to what is already on disk, so
      * the steady state (every session re-observes the same one or two
@@ -418,12 +455,12 @@ export class GitvaultKeystore {
                 if (!next.includes(o))
                     next.push(o);
             for (const o of current) {
-                if (next.length >= GITVAULT_OBJECT_STORE_ORIGINS_CAP)
+                if (next.length >= VAULT_OBJECT_STORE_ORIGINS_CAP)
                     break;
                 if (!next.includes(o))
                     next.push(o);
             }
-            const capped = next.slice(0, GITVAULT_OBJECT_STORE_ORIGINS_CAP);
+            const capped = next.slice(0, VAULT_OBJECT_STORE_ORIGINS_CAP);
             if (capped.length === current.length && capped.every((o, i) => o === current[i]))
                 return;
             this.updateRepo(repoId, { object_store_origins: capped });
@@ -432,7 +469,7 @@ export class GitvaultKeystore {
             /* best-effort learning only — never surfaces into an object read */
         }
     }
-    // ── local immutable-object cache (gitvault-client-round-trips design D3) ──
+    // ── local immutable-object cache (vault-client-round-trips design D3) ──
     //
     // `<rootDir>/<repo_id>/objects/` — beside the repo file above, NOT inside
     // it: genesis bytes, admitted head bytes, and carrier (ref_state /
@@ -440,7 +477,7 @@ export class GitvaultKeystore {
     // verified once. Holds ONLY ciphertext and signed public objects — never
     // decrypted plaintext, key material, or key envelopes. This class stores
     // and retrieves bytes alongside the sha256 they were verified against; it
-    // does not itself re-verify anything — every caller (`GitvaultVault`)
+    // does not itself re-verify anything — every caller (`Vault`)
     // re-checks a cache hit against the SAME pin/receipt it would check
     // network bytes against before trusting it, so a stale or tampered entry
     // can only ever be discarded and refetched, never silently trusted. A
@@ -448,8 +485,8 @@ export class GitvaultKeystore {
     // never a thrown error — the cache is a pure accelerator, and its absence
     // degrades to exactly today's network-fetch behavior.
     objectsRepoDir(repoId) {
-        if (!GITVAULT_SRC_RE.test(repoId))
-            fail("GITVAULT_BAD_REPO_ID", `not a src_ id: ${repoId}`, "resolving gitvault object cache path");
+        if (!VAULT_SRC_RE.test(repoId))
+            fail("VAULT_BAD_REPO_ID", `not a src_ id: ${repoId}`, "resolving vault object cache path");
         return join(this.rootDir, repoId, "objects");
     }
     objectsGenesisPath(repoId) { return join(this.objectsRepoDir(repoId), "genesis.json"); }
@@ -492,7 +529,7 @@ export class GitvaultKeystore {
     readCachedHead(repoId, generation) {
         return this.decodeCachedBytes(this.readCachedFile(this.objectsHeadPath(repoId, generation)));
     }
-    /** Writes the head, then evicts anything more than {@link GITVAULT_OBJECT_CACHE_WINDOW} generations behind it. */
+    /** Writes the head, then evicts anything more than {@link VAULT_OBJECT_CACHE_WINDOW} generations behind it. */
     writeCachedHead(repoId, generation, sha256, bytes) {
         this.writeCachedFile(this.objectsHeadPath(repoId, generation), { sha256, bytes_base64: Buffer.from(bytes).toString("base64") });
         this.evictObjectCache(repoId, generation);
@@ -510,7 +547,7 @@ export class GitvaultKeystore {
         this.evictObjectCache(repoId, generation);
     }
     /**
-     * Drop heads and carriers more than {@link GITVAULT_OBJECT_CACHE_WINDOW}
+     * Drop heads and carriers more than {@link VAULT_OBJECT_CACHE_WINDOW}
      * generations behind `latestGeneration` — genesis is exempt (kept
      * forever). Runs inline on every cache write; also callable directly
      * (`sweepObjectCache`, wired into `repos gc`) as a periodic backstop that
@@ -519,7 +556,7 @@ export class GitvaultKeystore {
      * cache's own "a miss just refetches" posture.
      */
     evictObjectCache(repoId, latestGeneration) {
-        const cutoff = genToBigInt(latestGeneration) - BigInt(GITVAULT_OBJECT_CACHE_WINDOW - 1);
+        const cutoff = genToBigInt(latestGeneration) - BigInt(VAULT_OBJECT_CACHE_WINDOW - 1);
         const pruneDir = (dir, generationOf) => {
             if (!existsSync(dir))
                 return;
@@ -563,9 +600,9 @@ export class GitvaultKeystore {
         return this.withRepoLock(repoId, () => {
             const existing = this.readRepo(repoId);
             if (!existing)
-                fail("GITVAULT_REPO_STATE_MISSING", `no repo file for ${repoId}`, "recording gitvault epoch rotation", { repo_id: repoId });
+                fail("VAULT_REPO_STATE_MISSING", `no repo file for ${repoId}`, "recording vault epoch rotation", { repo_id: repoId });
             const epochKeys = { ...(existing.epoch_keys ?? {}), [existing.epoch]: existing.k_repo_hex, [input.new_epoch]: input.new_k_repo_hex };
-            const full = { ...existing, epoch: input.new_epoch, k_repo_hex: input.new_k_repo_hex, epoch_keys: epochKeys, updated_at: formatGitvaultTimestamp(this.now()) };
+            const full = { ...existing, epoch: input.new_epoch, k_repo_hex: input.new_k_repo_hex, epoch_keys: epochKeys, updated_at: formatVaultTimestamp(this.now()) };
             writeFileAtomic0600(this.repoPath(repoId), JSON.stringify(full, null, 2));
             this.audit("epoch_rotation_recorded", repoId, { new_epoch: input.new_epoch, known_epoch_count: Object.keys(epochKeys).length });
             return full;
@@ -607,14 +644,14 @@ export class GitvaultKeystore {
                 if (this.reclaimStaleLock(lockDir, repoId, staleAfterMs))
                     continue;
                 if (Date.now() >= deadline) {
-                    fail("GITVAULT_KEYSTORE_LOCKED", `another process holds the lock for ${repoId}`, "acquiring gitvault repo lock", { repo_id: repoId, lock: lockDir });
+                    fail("VAULT_KEYSTORE_LOCKED", `another process holds the lock for ${repoId}`, "acquiring vault repo lock", { repo_id: repoId, lock: lockDir });
                 }
                 const until = Date.now() + 25;
                 while (Date.now() < until) { /* spin */ }
             }
         }
         try {
-            writeFileAtomic0600(join(lockDir, "owner.json"), JSON.stringify({ pid: process.pid, at: formatGitvaultTimestamp(this.now()) }));
+            writeFileAtomic0600(join(lockDir, "owner.json"), JSON.stringify({ pid: process.pid, at: formatVaultTimestamp(this.now()) }));
         }
         catch {
             /* owner record is advisory */
@@ -670,7 +707,7 @@ export class GitvaultKeystore {
         const repo = this.readRepo(repoId);
         let state;
         if (!identity && !repo) {
-            state = { state: "unrecoverable", code: "VAULT_UNRECOVERABLE", statement: GITVAULT_TERMINAL_LOSS_STATEMENT, doctor_text: GITVAULT_TERMINAL_LOSS_DOCTOR_TEXT };
+            state = { state: "unrecoverable", code: "VAULT_UNRECOVERABLE", statement: VAULT_TERMINAL_LOSS_STATEMENT, doctor_text: VAULT_TERMINAL_LOSS_DOCTOR_TEXT };
         }
         else if (!identity && repo) {
             // K_repo survives but no key can sign or open anything new: the history
@@ -680,7 +717,7 @@ export class GitvaultKeystore {
         else if (identity && !repo) {
             state = identity.encryption_private_key_hex
                 ? { state: "repo_state_lost_identity_intact", next_action: "restore_from_envelope" }
-                : { state: "unrecoverable", code: "VAULT_UNRECOVERABLE", statement: GITVAULT_TERMINAL_LOSS_STATEMENT, doctor_text: GITVAULT_TERMINAL_LOSS_DOCTOR_TEXT };
+                : { state: "unrecoverable", code: "VAULT_UNRECOVERABLE", statement: VAULT_TERMINAL_LOSS_STATEMENT, doctor_text: VAULT_TERMINAL_LOSS_DOCTOR_TEXT };
         }
         else if (identity && repo && !identity.signing_seed_hex) {
             state = { state: "read_only", repo, reason: "signing_key_lost" };
@@ -703,17 +740,17 @@ export class GitvaultKeystore {
     async restoreRepoFromEnvelope(input) {
         const identity = this.readIdentity();
         if (!identity)
-            fail("VAULT_UNRECOVERABLE", GITVAULT_TERMINAL_LOSS_DOCTOR_TEXT, "restoring gitvault repo state", { statement: GITVAULT_TERMINAL_LOSS_STATEMENT });
+            fail("VAULT_UNRECOVERABLE", VAULT_TERMINAL_LOSS_DOCTOR_TEXT, "restoring vault repo state", { statement: VAULT_TERMINAL_LOSS_STATEMENT });
         const recipient = this.encryptionKeypair(identity);
         if (!recipient)
-            fail("VAULT_UNRECOVERABLE", GITVAULT_TERMINAL_LOSS_DOCTOR_TEXT, "restoring gitvault repo state", { statement: GITVAULT_TERMINAL_LOSS_STATEMENT });
+            fail("VAULT_UNRECOVERABLE", VAULT_TERMINAL_LOSS_DOCTOR_TEXT, "restoring vault repo state", { statement: VAULT_TERMINAL_LOSS_STATEMENT });
         const { genesis, envelope } = input;
-        if (!verifyGitvaultObject(genesis, genesis.creator_signing_pubkey)) {
-            fail("GITVAULT_SIGNATURE_INVALID", "vault_genesis signature does not verify", "restoring gitvault repo state", { repo_id: genesis.repo_id });
+        if (!verifyVaultObject(genesis, genesis.creator_signing_pubkey)) {
+            fail("VAULT_SIGNATURE_INVALID", "vault_genesis signature does not verify", "restoring vault repo state", { repo_id: genesis.repo_id });
         }
         // The creator's OWN genesis envelope is bound to genesis byte-for-byte
         // (hash + size + recipient). Any OTHER recipient's envelope (a member
-        // wrapped post-genesis — gitvault-agent-envelopes D4's cold open) is
+        // wrapped post-genesis — vault-agent-envelopes D4's cold open) is
         // not in genesis at all: for it, check genesis's own structural bindings
         // plus the envelope's addressing (this vault, this epoch, written under
         // the registered writer key); `openKeyEnvelope` then verifies the
@@ -738,7 +775,7 @@ export class GitvaultKeystore {
             }
         }
         if (bindings.length > 0) {
-            fail("VAULT_CREATION_CONFLICT", "genesis key bindings do not hold for the stored envelope", "restoring gitvault repo state", { repo_id: genesis.repo_id, problems: bindings });
+            fail("VAULT_CREATION_CONFLICT", "genesis key bindings do not hold for the stored envelope", "restoring vault repo state", { repo_id: genesis.repo_id, problems: bindings });
         }
         const genesisSha = storedBytesSha256(genesis);
         // First-open pin (agent-envelopes D4): a genesis this keystore already
@@ -747,7 +784,7 @@ export class GitvaultKeystore {
         const priorRepo = this.readRepo(genesis.repo_id);
         const priorPin = priorRepo?.genesis_sha256 ?? this.readCachedGenesis(genesis.repo_id)?.sha256 ?? null;
         if (priorPin && priorPin !== genesisSha) {
-            fail("VAULT_CREATION_CONFLICT", `the admitted genesis (${genesisSha}) is not the one this keystore pinned (${priorPin}); refusing a substituted vault`, "restoring gitvault repo state", { repo_id: genesis.repo_id, admitted: genesisSha, pinned: priorPin });
+            fail("VAULT_CREATION_CONFLICT", `the admitted genesis (${genesisSha}) is not the one this keystore pinned (${priorPin}); refusing a substituted vault`, "restoring vault repo state", { repo_id: genesis.repo_id, admitted: genesisSha, pinned: priorPin });
         }
         const continuity = priorPin ? "pinned" : "first_seen";
         const receipt = input.recovery_receipt ?? this.readRecoveryReceipt(genesis.repo_id);
@@ -755,12 +792,12 @@ export class GitvaultKeystore {
         if (receipt) {
             const problems = checkRecoveryReceipt(receipt, genesis);
             if (problems.length > 0) {
-                fail("VAULT_CREATION_CONFLICT", "recovery receipt does not pin this genesis (substituted vault?)", "restoring gitvault repo state", { repo_id: genesis.repo_id, problems });
+                fail("VAULT_CREATION_CONFLICT", "recovery receipt does not pin this genesis (substituted vault?)", "restoring vault repo state", { repo_id: genesis.repo_id, problems });
             }
             trust = "receipt";
         }
         if (envelope.recipient_fingerprint !== identity.encryption_fingerprint) {
-            fail("GITVAULT_ENVELOPE_NOT_FOR_RECIPIENT", "the stored envelope is addressed to another principal", "restoring gitvault repo state", { recipient_fingerprint: envelope.recipient_fingerprint });
+            fail("VAULT_ENVELOPE_NOT_FOR_RECIPIENT", "the stored envelope is addressed to another principal", "restoring vault repo state", { recipient_fingerprint: envelope.recipient_fingerprint });
         }
         const kRepo = await openKeyEnvelope({ envelope, recipient, signer_public_key: envelopeSignerPubkey });
         const repo = this.saveRepo({
@@ -782,8 +819,8 @@ export class GitvaultKeystore {
         const id = this.readIdentity();
         if (!id)
             return null;
-        if (!GITVAULT_VK_RE.test(id.signing_fingerprint) || !GITVAULT_EK_RE.test(id.encryption_fingerprint)) {
-            fail("GITVAULT_KEYSTORE_CORRUPT", "identity fingerprints are malformed", "reading gitvault identity");
+        if (!VAULT_VK_RE.test(id.signing_fingerprint) || !VAULT_EK_RE.test(id.encryption_fingerprint)) {
+            fail("VAULT_KEYSTORE_CORRUPT", "identity fingerprints are malformed", "reading vault identity");
         }
         return {
             signing_fingerprint: id.signing_fingerprint,
@@ -825,4 +862,4 @@ function safeRemoveLock(lockDir) {
         unlinkSync(owner);
     rmdirSync(lockDir);
 }
-//# sourceMappingURL=gitvault-keystore.js.map
+//# sourceMappingURL=vault-keystore.js.map

package/dist/node/vault-keystore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-keystore.js","sourceRoot":"","sources":["../../src/node/vault-keystore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzL,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,WAAW,EACX,YAAY,EACZ,+BAA+B,EAC/B,6BAA6B,EAC7B,WAAW,EACX,UAAU,EACV,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,iBAAiB,EACjB,aAAa,GACd,MAAM,+BAA+B,CAAC;AAoOvC,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe,EAAE,OAAiB;IAC7E,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;AAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB,2GAA2G;AAC3G,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,2JAA2J;AAC3J,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAEhD,8UAA8U;AAC9U,SAAS,WAAW,CAAC,UAAkB;IACrC,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtC,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,EAAE,IAAI,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,IAAY;IACzD,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAC7B,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,kBAAkB;IAC5B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO;IAC1D,IAAI,CAAC;QACH,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,iCAAiC;QACpF,MAAM,IAAI,UAAU,CAClB,0CAA0C,MAAM,OAAO,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAC5G,8BAA8B,EAC9B,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,wBAAwB,EAAE,wCAAwC,IAAI,EAAE,EAAE,6BAA6B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,EAAE,SAAS,CAAC,CAAC;IAC5G,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACpB,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,IAAI,CAAC,wBAAwB,EAAE,uCAAuC,IAAI,EAAE,EAAE,6BAA6B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,SAAkB;IACjD,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,EAAE,CAAC,cAAc,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC;QAC7B,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnH,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAEhF,MAAM,OAAO,aAAa;IACf,OAAO,CAAS;IACR,GAAG,CAAa;IAChB,iBAAiB,CAAU;IAE5C,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,oBAAoB,EAAE,CAAC;QACzD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,KAAK,CAAC;IAC9D,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,IAAI,CAAC,UAAgC,EAAE;QAC5C,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACvC,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,CAAC;YAChD,IAAI,CAAC,4BAA4B,EAAE,wCAAwC,EAAE,wBAAwB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,YAAY,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,QAAQ,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,WAAW,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,UAAU,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,YAAY,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,MAAc;QACrB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACnH,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,mBAAmB,CAAC,MAAc;QAChC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,wBAAwB,CAAC,CAAC;IACnE,CAAC;IAED,yBAAyB;IAEzB,gGAAgG;IAChG,gBAAgB;QACd,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,GAAY,EAAE,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,OAAO;YAClD,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjB,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAAE,SAAS;oBACtC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,kBAAkB;IAElB,qEAAqE;IACrE,KAAK,CAAC,KAAsB,EAAE,MAAe,EAAE,OAAiC;QAC9E,MAAM,KAAK,GAAoB,EAAE,EAAE,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACxJ,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,IAAI,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,wBAAwB,EAAE,kDAAkD,EAAE,2BAA2B,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,QAAQ,GAAG,UAAU,EAAE,SAAS,CAAC,CAAC;QAC5H,IAAI,CAAC;YACH,SAAS,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,YAAY;QACV,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAoB,CAAC,CAAC;IACnG,CAAC;IAED,iBAAiB;IAEjB,YAAY;QACV,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;QACrD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YACtH,IAAI,CAAC,wBAAwB,EAAE,iDAAiD,EAAE,wBAAwB,CAAC,CAAC;QAC9G,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,uEAAuE;IACvE,cAAc;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,OAAO,GAAG,sBAAsB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAsB;YAClC,OAAO,EAAE,CAAC;YACV,gBAAgB,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;YAC1C,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/C,mBAAmB,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;YACtD,0BAA0B,EAAE,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;YAC9D,iBAAiB,EAAE,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC;YACrD,sBAAsB,EAAE,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC;YAC5D,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;SAC7C,CAAC;QACF,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,yBAAyB,EAAE,4DAA4D,EAAE,yBAAyB,CAAC,CAAC;QAC3H,CAAC;QACD,mBAAmB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,SAAS,EAAE,EAAE,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,CAAC,CAAC;QAC1J,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,qBAAqB,CAAC,WAAmB;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,qBAAqB,KAAK,WAAW;YAAE,OAAO;QAC3D,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACnC,IAAI,CAAC,iCAAiC,EAAE,gDAAgD,QAAQ,CAAC,qBAAqB,SAAS,WAAW,iCAAiC,EAAE,wBAAwB,EAAE,EAAE,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/R,CAAC;QACD,mBAAmB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,qBAAqB,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrH,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,0FAA0F;IAC1F,cAAc,CAAC,WAA8B,IAAI,CAAC,eAAe,EAAE;QACjE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,EAAE,GAAG,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACzE,IAAI,aAAa,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAClE,IAAI,CAAC,wBAAwB,EAAE,gEAAgE,EAAE,2BAA2B,CAAC,CAAC;QAChI,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,6EAA6E;IAC7E,iBAAiB,CAAC,WAA8B,IAAI,CAAC,eAAe,EAAE;QACpE,IAAI,CAAC,QAAQ,CAAC,0BAA0B;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,EAAE,GAAG,yBAAyB,CAAC,UAAU,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACtF,IAAI,aAAa,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,sBAAsB,EAAE,CAAC;YACrE,IAAI,CAAC,wBAAwB,EAAE,kEAAkE,EAAE,8BAA8B,CAAC,CAAC;QACrI,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,eAAe;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,EAAE,SAAS,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC9I,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,mBAAmB;IAEnB,QAAQ,CAAC,MAAc;QACrB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QACjD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/F,IAAI,CAAC,wBAAwB,EAAE,SAAS,MAAM,0CAA0C,EAAE,yBAAyB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5I,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,WAAW;QACT,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1C,OAAO,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/I,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,iBAAiB,CAAC,SAAiB,EAAE,KAAc;QACjD,IAAI,IAAI,GAAoD,IAAI,CAAC;QACjE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxC,IAAI,IAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,+EAA+E;YAC3F,CAAC;YACD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;gBAAE,SAAS;YACrD,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;gBAAE,SAAS;YAC3D,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,2CAA2C;YACvD,CAAC;YACD,IAAI,CAAC,IAAI,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO;gBAAE,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;IAC5B,CAAC;IAED,oEAAoE;IACpE,QAAQ,CAAC,IAAmD;QAC1D,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAClG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACnC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iFAAiF;IACjF,UAAU,CAAC,MAAc,EAAE,KAAqU;QAC9V,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE;YACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,0BAA0B,EAAE,oBAAoB,MAAM,EAAE,EAAE,0BAA0B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/H,MAAM,IAAI,GAAkB,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACpG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,wBAAwB,CAAC,MAAc,EAAE,OAA0B;QACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC;YACpD,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,IAAI,CAAC,MAAM,IAAI,8BAA8B;oBAAE,MAAM;gBACzD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO;YACzF,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,EAAE;IACF,0EAA0E;IAC1E,mEAAmE;IACnE,qEAAqE;IACrE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,8DAA8D;IAC9D,oEAAoE;IACpE,yEAAyE;IACzE,sEAAsE;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,sDAAsD;IAE9C,cAAc,CAAC,MAAc;QACnC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC3H,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IACO,kBAAkB,CAAC,MAAc,IAAY,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IACxG,eAAe,CAAC,MAAc,IAAY,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9F,kBAAkB,CAAC,MAAc,IAAY,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACpG,eAAe,CAAC,MAAc,EAAE,UAAkB,IAAY,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC,CAAC,CAAC;IAChI,kBAAkB,CAAC,MAAc,EAAE,QAAgB,IAAY,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,CAAC;IAElI,cAAc,CAAC,IAAY;QACjC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC3D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACO,eAAe,CAAC,IAAY,EAAE,IAA6B;QACjE,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IACO,iBAAiB,CAAC,IAAoC;QAC5D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnG,IAAI,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,iBAAiB,CAAC,MAAc;QAC9B,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,kBAAkB,CAAC,MAAc,EAAE,MAAc,EAAE,KAAiB;QAClE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC;IAED,cAAc,CAAC,MAAc,EAAE,UAAkB;QAC/C,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,+GAA+G;IAC/G,eAAe,CAAC,MAAc,EAAE,UAAkB,EAAE,MAAc,EAAE,KAAiB;QACnF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChI,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,iBAAiB,CAAC,MAAc,EAAE,QAAgB;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,EAAE,UAAU,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,OAAO,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IACrD,CAAC;IACD,wHAAwH;IACxH,kBAAkB,CAAC,MAAc,EAAE,QAAgB,EAAE,UAAkB,EAAE,MAAc,EAAE,KAAiB;QACxG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7I,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;OAQG;IACK,gBAAgB,CAAC,MAAc,EAAE,gBAAwB;QAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,yBAAyB,GAAG,CAAC,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,YAA8C,EAAE,EAAE;YAC/E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO;YAC7B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACvC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,GAAG,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC;oBAC9C,IAAI,CAAC;wBAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/E,OAAO,OAAO,IAAI,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+MAA+M;IAC/M,gBAAgB,CAAC,MAAc;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,EAAE,gBAAgB,EAAE,UAAU,IAAI,IAAI,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI,CAAC;QACxF,IAAI,MAAM;YAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;OAOG;IACH,mBAAmB,CAAC,MAAc,EAAE,KAAoD;QACtF,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE;YACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,0BAA0B,EAAE,oBAAoB,MAAM,EAAE,EAAE,gCAAgC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACrI,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;YACrI,MAAM,IAAI,GAAkB,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC3K,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAChI,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0BAA0B;IAE1B,mBAAmB,CAAC,OAA6B;QAC/C,6EAA6E;QAC7E,gDAAgD;QAChD,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjG,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,mBAAmB,CAAC,MAAc;QAChC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;IAED,sBAAsB;IAEtB;;;;OAIG;IACH,YAAY,CAAI,MAAc,EAAE,EAAW,EAAE,UAA4B,EAAE;QACzE,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;QAChD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,GAAG,IAAI,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACvC,MAAM;YACR,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACpB,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,CAAC,CAAC;gBAC5D,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC;oBAAE,SAAS;gBACnE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,IAAI,CAAC,uBAAuB,EAAE,sCAAsC,MAAM,EAAE,EAAE,2BAA2B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjJ,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/H,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,CAAC;gBAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEgB,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,gBAAgB,CAAC,OAAe,EAAE,MAAc,EAAE,YAAoB;QAC5E,IAAI,QAA4B,CAAC;QACjC,IAAI,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7B,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC;YAC9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YAC5D,IAAI,KAAK;gBAAE,QAAQ,GAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAsB,CAAC,GAAG,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5F,IAAI,GAAG,GAAG,YAAY,IAAI,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,cAAc,CAAC,OAAO,CAAC,CAAC;gBACxB,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrG,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yBAAyB;IAEzB;;;OAGG;IACH,MAAM,CAAC,MAAc,EAAE,qBAA8B;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,KAAyB,CAAC;QAC9B,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YACvB,KAAK,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,6BAA6B,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;QAC1J,CAAC;aAAM,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC7B,wEAAwE;YACxE,iEAAiE;YACjE,KAAK,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACnE,CAAC;aAAM,IAAI,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,KAAK,GAAG,QAAQ,CAAC,0BAA0B;gBACzC,CAAC,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,WAAW,EAAE,uBAAuB,EAAE;gBACpF,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,6BAA6B,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;QACtJ,CAAC;aAAM,IAAI,QAAQ,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC1D,KAAK,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACnE,CAAC;aAAM,IAAI,qBAAqB,KAAK,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,qBAAqB,EAAE,CAAC;YACxG,KAAK,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAK,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,uBAAuB,CAAC,KAyB7B;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACxJ,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACzJ,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QACpC,IAAI,CAAC,iBAAiB,CAAC,OAAuC,EAAE,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAChG,IAAI,CAAC,yBAAyB,EAAE,yCAAyC,EAAE,4BAA4B,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACzI,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,kEAAkE;QAClE,yEAAyE;QACzE,wEAAwE;QACxE,kEAAkE;QAClE,wDAAwD;QACxD,MAAM,SAAS,GAAG,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,yBAAyB,EAAE,2BAA2B,CAAC,CAAC,CAAC;QAC/G,MAAM,iBAAiB,GAAG,QAAQ,CAAC,qBAAqB,KAAK,SAAS,CAAC;QACvE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACnH,wEAAwE;QACxE,mEAAmE;QACnE,IAAI,oBAAoB,GAAW,OAAO,CAAC,sBAAsB,CAAC;QAClE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACnF,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;gBAAE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC7E,IAAI,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;gBAClD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACpG,IAAI,CAAC,OAAO;oBAAE,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;;oBACrD,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;YACrD,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,yBAAyB,EAAE,0DAA0D,EAAE,4BAA4B,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9K,CAAC;QACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAuC,CAAC,CAAC;QAC9E,uEAAuE;QACvE,2EAA2E;QAC3E,sEAAsE;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,SAAS,EAAE,cAAc,IAAI,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;QACtG,IAAI,QAAQ,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACxC,IAAI,CAAC,yBAAyB,EAAE,yBAAyB,UAAU,0CAA0C,QAAQ,iCAAiC,EAAE,4BAA4B,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9P,CAAC;QACD,MAAM,UAAU,GAA4B,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;QAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,KAAK,GAAgE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,yBAAyB,CAAC;QACrJ,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,yBAAyB,EAAE,iEAAiE,EAAE,4BAA4B,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3K,CAAC;YACD,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;QACD,IAAI,QAAQ,CAAC,qBAAqB,KAAK,QAAQ,CAAC,sBAAsB,EAAE,CAAC;YACvE,IAAI,CAAC,kCAAkC,EAAE,uDAAuD,EAAE,4BAA4B,EAAE,EAAE,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC;QAC7L,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtG,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;YAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,cAAc,EAAE,UAAU;YAC1B,QAAQ,EAAE,IAAI;YACd,oBAAoB,EAAE,IAAI;YAC1B,UAAU,EAAE,wBAAwB;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,6BAA6B,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;IAClF,CAAC;IAED,qEAAqE;IACrE,eAAe;QACb,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC9F,IAAI,CAAC,wBAAwB,EAAE,qCAAqC,EAAE,wBAAwB,CAAC,CAAC;QAClG,CAAC;QACD,OAAO;YACL,mBAAmB,EAAE,EAAE,CAAC,mBAAmB;YAC3C,sBAAsB,EAAE,EAAE,CAAC,sBAAsB;YACjD,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC;YACjD,sBAAsB,EAAE,OAAO,CAAC,EAAE,CAAC,0BAA0B,CAAC;SAC/D,CAAC;IACJ,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,OAAQ,CAA2B,CAAC,IAAI,KAAK,OAAO,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC1C,wFAAwF;IACxF,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACzC,SAAS,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC"}

package/dist/node/{gitvault-member-bundle.d.ts → vault-member-bundle.d.ts}

@@ -1,7 +1,7 @@
-import type { GitvaultMirrorBackend } from "./gitvault-mirror-backend.js";
-export declare const GITVAULT_MEMBER_BUNDLE_FORMAT: "r402s-member-recovery-bundle/v1";
+import type { VaultMirrorBackend } from "./vault-mirror-backend.js";
+export declare const VAULT_MEMBER_BUNDLE_FORMAT: "r402s-member-recovery-bundle/v1";
 /** The mirrored-prefix sidecar directory recovery/verify scan for bundles. */
-export declare const GITVAULT_MEMBER_BUNDLE_MIRROR_PREFIX: "member-recovery-bundles/";
+export declare const VAULT_MEMBER_BUNDLE_MIRROR_PREFIX: "member-recovery-bundles/";
 /**
  * The seal-time ceremony host every wrapper in existence was sealed under
  * (`location.hostname` of the sealing console page). Used only when neither
@@ -9,8 +9,8 @@ export declare const GITVAULT_MEMBER_BUNDLE_MIRROR_PREFIX: "member-recovery-bund
  * wrong value fails closed as `WRAPPER_DID_NOT_OPEN`, never a silent
  * wrong-key open.
  */
-export declare const GITVAULT_DEFAULT_SOURCE_WRAPPER_RP_ID: "console.run402.com";
-export interface GitvaultMemberBundleWrapper {
+export declare const VAULT_DEFAULT_SOURCE_WRAPPER_RP_ID: "console.run402.com";
+export interface VaultMemberBundleWrapper {
     wrapper_id: string;
     kind: "webauthn_prf" | "recovery_code";
     format_version: string;
@@ -21,8 +21,8 @@ export interface GitvaultMemberBundleWrapper {
     created_at: string;
 }
 /** `r402s-member-recovery-bundle/v1` — exactly what the gateway export returns (plus the console download's client-stamped `rp_id`, when present). */
-export interface GitvaultMemberRecoveryBundle {
-    format: typeof GITVAULT_MEMBER_BUNDLE_FORMAT;
+export interface VaultMemberRecoveryBundle {
+    format: typeof VAULT_MEMBER_BUNDLE_FORMAT;
     exported_at?: string;
     principal_id: string;
     encryption_key_id: string;
@@ -31,14 +31,14 @@ export interface GitvaultMemberRecoveryBundle {
     public_key: string;
     suite: string;
     custody_scheme: string;
-    wrappers: GitvaultMemberBundleWrapper[];
+    wrappers: VaultMemberBundleWrapper[];
     /** Seal-time ceremony host, when the exporting surface knew it (the console download stamps `location.hostname`). */
     rp_id?: string;
     note?: string;
 }
 /** Parse + shape-check a member recovery bundle (a JSON string or an already-parsed value). Typed refusal, never a silent partial. */
-export declare function parseMemberRecoveryBundle(input: unknown, context?: string): GitvaultMemberRecoveryBundle;
-export interface GitvaultMemberUnwrapResult {
+export declare function parseMemberRecoveryBundle(input: unknown, context?: string): VaultMemberRecoveryBundle;
+export interface VaultMemberUnwrapResult {
     /** X25519 private scalar, lowercase hex — feed straight into the recovery identity. */
     private_key_hex: string;
     /** Raw 32-byte member public key (derived from the scalar and verified against the bundle). */
@@ -62,13 +62,13 @@ export interface GitvaultMemberUnwrapResult {
  * material.
  */
 export declare function unwrapMemberRecoveryBundle(input: {
-    bundle: GitvaultMemberRecoveryBundle;
+    bundle: VaultMemberRecoveryBundle;
     source_recovery_code: string;
-    /** Seal-time ceremony host override; default = bundle.rp_id, then {@link GITVAULT_DEFAULT_SOURCE_WRAPPER_RP_ID}. */
+    /** Seal-time ceremony host override; default = bundle.rp_id, then {@link VAULT_DEFAULT_SOURCE_WRAPPER_RP_ID}. */
     rp_id?: string;
-}): GitvaultMemberUnwrapResult;
+}): VaultMemberUnwrapResult;
 /** One mirrored bundle sidecar, reported keylessly — an UNVERIFIED availability hint (nothing about it is authenticated). */
-export interface GitvaultMemberBundleHint {
+export interface VaultMemberBundleHint {
     key: string;
     /** Parsed identity when the sidecar is readable; null when it exists but does not parse as a v1 bundle. */
     ek_fingerprint: string | null;
@@ -82,7 +82,7 @@ export interface GitvaultMemberBundleHint {
  * bundle auto-discovery both read this. Never throws: an unreadable or
  * malformed sidecar is reported with its parse error, not skipped silently.
  */
-export declare function discoverMemberBundles(backend: GitvaultMirrorBackend): Promise<Array<GitvaultMemberBundleHint & {
-    bundle: GitvaultMemberRecoveryBundle | null;
+export declare function discoverMemberBundles(backend: VaultMirrorBackend): Promise<Array<VaultMemberBundleHint & {
+    bundle: VaultMemberRecoveryBundle | null;
 }>>;
-//# sourceMappingURL=gitvault-member-bundle.d.ts.map
+//# sourceMappingURL=vault-member-bundle.d.ts.map