@sempdev/semp 0.4.3

package/dist/delivery/receipt.js

@@ -0,0 +1,181 @@
+/**
+ * Signed delivery receipts per DELIVERY.md §1.1.1.
+ *
+ * Every `delivered` acknowledgment a recipient server returns to a
+ * sending server MUST carry a signed receipt. The receipt binds
+ * `(envelope_hash, recipient_domain, accepted_at)` under the recipient
+ * domain's Ed25519 signing key with the `SEMP-DELIVERY-RECEIPT:`
+ * domain-separation prefix. It is a portable, non-repudiable artifact
+ * the sending user can later export to a `.semp-receipt` file.
+ *
+ * This module provides:
+ *
+ *  - {@link computeEnvelopeHash}: SHA-256 over canonical envelope bytes
+ *    (the same canonical form `seal.signature` is computed over —
+ *    `signature` and `session_mac` blanked, `hop_count` and `padding`
+ *    omitted).
+ *  - {@link signDeliveryReceipt}: build + sign a receipt from
+ *    pre-sign inputs.
+ *  - {@link verifyDeliveryReceipt}: Ed25519-verify a receipt against
+ *    a recipient domain public key.
+ *  - {@link verifyEnvelopeBinding}: cross-check the receipt's
+ *    `envelope_hash.value` against a fresh canonical envelope hash.
+ *  - {@link validateReceipt}: structural checks per §1.1.1.2.
+ *
+ * The companion {@link "./receipt_store"} module holds receipts the
+ * sending server has issued to its sending users until at least one
+ * client device acknowledges the delivery event carrying it.
+ *
+ * @module
+ */
+import { sha256 } from "@noble/hashes/sha2.js";
+import { signSignedDoc, verifySignedDoc, } from "../keys/index.js";
+/** Domain-separation prefix for the receipt signature, per ENVELOPE.md §4.3. */
+export const DeliveryReceiptPrefix = "SEMP-DELIVERY-RECEIPT:";
+/** `type` discriminator for the receipt JSON. */
+export const DeliveryReceiptType = "SEMP_DELIVERY_RECEIPT";
+/** Receipt schema version per §1.1.1.1. */
+export const DeliveryReceiptVersion = "1.0.0";
+/** Only digest algorithm defined for v1.0.0 receipts per §1.1.1.3. */
+export const EnvelopeHashAlgorithmSHA256 = "sha-256";
+/** Receipt signature algorithm. */
+export const ReceiptSignatureAlgorithmEd25519 = "ed25519";
+/**
+ * Receiver-side tolerance window per §1.1.1.5: "Verifiers MUST NOT
+ * reject a receipt solely because `accepted_at` is within 120 seconds
+ * of their own current time in either direction."
+ */
+export const ReceiptClockSkewToleranceSeconds = 120;
+/**
+ * SHA-256 of canonical envelope bytes, base64-encoded, per
+ * §1.1.1.3. The caller is responsible for producing the canonical
+ * bytes — typically via `envelope.canonicalEnvelopeFor(env)` which
+ * applies §4.3 elision (signature, session_mac, hop_count, padding).
+ */
+export function computeEnvelopeHash(canonicalEnvelopeBytes) {
+    const sum = sha256(canonicalEnvelopeBytes);
+    return base64Encode(sum);
+}
+/**
+ * Build and Ed25519-sign a SEMP_DELIVERY_RECEIPT under the recipient
+ * domain's signing key, following §1.1.1.4.
+ */
+export function signDeliveryReceipt(input) {
+    if (input.envelopeHashB64 === "") {
+        throw new Error("delivery receipt: empty envelope_hash.value");
+    }
+    if (input.recipientDomain === "") {
+        throw new Error("delivery receipt: empty recipient_domain");
+    }
+    if (input.acceptedAt === "") {
+        throw new Error("delivery receipt: empty accepted_at");
+    }
+    if (input.domainKeyId === "") {
+        throw new Error("delivery receipt: empty domain key_id");
+    }
+    const preSign = {
+        type: DeliveryReceiptType,
+        version: DeliveryReceiptVersion,
+        envelope_hash: {
+            algorithm: EnvelopeHashAlgorithmSHA256,
+            value: input.envelopeHashB64,
+        },
+        recipient_domain: input.recipientDomain,
+        accepted_at: input.acceptedAt,
+        signature: {
+            algorithm: ReceiptSignatureAlgorithmEd25519,
+            key_id: input.domainKeyId,
+            value: "",
+        },
+    };
+    const { signedJSON, signatureB64 } = signSignedDoc({
+        preSignJSON: preSign,
+        seed: input.domainSigningSeed,
+        signaturePath: "signature.value",
+        prefix: DeliveryReceiptPrefix,
+    });
+    return {
+        receipt: signedJSON,
+        signatureB64,
+    };
+}
+/**
+ * Ed25519-verify a delivery receipt's signature against the
+ * recipient domain public key. Returns true on success. Throws on
+ * structural validation failure (use {@link validateReceipt} ahead
+ * of time to surface those as boolean false instead).
+ *
+ * Does NOT cross-check `accepted_at` against the verifier's clock —
+ * that is a §1.1.1.5 caller-side decision and MUST be applied with
+ * the {@link ReceiptClockSkewToleranceSeconds} tolerance.
+ */
+export function verifyDeliveryReceipt(input) {
+    validateReceipt(input.receipt);
+    if (input.receipt.signature.value === "") {
+        return false;
+    }
+    const { ok } = verifySignedDoc({
+        signedJSON: input.receipt,
+        publicKey: input.domainPub,
+        signaturePath: "signature.value",
+        prefix: DeliveryReceiptPrefix,
+    });
+    return ok;
+}
+/**
+ * Cross-check that the receipt's `envelope_hash.value` matches the
+ * fresh hash of the supplied canonical envelope bytes per §1.1.1.7
+ * step 4. Returns true when the binding holds.
+ */
+export function verifyEnvelopeBinding(receipt, canonicalEnvelopeBytes) {
+    if (receipt.envelope_hash.algorithm !== EnvelopeHashAlgorithmSHA256) {
+        return false;
+    }
+    const want = computeEnvelopeHash(canonicalEnvelopeBytes);
+    return receipt.envelope_hash.value === want;
+}
+/**
+ * Structural validation per §1.1.1.2. Throws on the first missing or
+ * malformed field. Callers that want a boolean outcome can wrap in
+ * try/catch.
+ */
+export function validateReceipt(r) {
+    if (r.type !== DeliveryReceiptType) {
+        throw new Error(`delivery receipt: type ${JSON.stringify(r.type)}, want ${DeliveryReceiptType}`);
+    }
+    if (typeof r.version !== "string" || r.version === "") {
+        throw new Error("delivery receipt: missing version");
+    }
+    if (typeof r.envelope_hash?.algorithm !== "string" || r.envelope_hash.algorithm === "") {
+        throw new Error("delivery receipt: missing envelope_hash.algorithm");
+    }
+    if (typeof r.envelope_hash?.value !== "string" || r.envelope_hash.value === "") {
+        throw new Error("delivery receipt: missing envelope_hash.value");
+    }
+    if (typeof r.recipient_domain !== "string" || r.recipient_domain === "") {
+        throw new Error("delivery receipt: missing recipient_domain");
+    }
+    if (typeof r.accepted_at !== "string" || r.accepted_at === "") {
+        throw new Error("delivery receipt: missing accepted_at");
+    }
+    if (typeof r.signature?.algorithm !== "string" || r.signature.algorithm === "") {
+        throw new Error("delivery receipt: missing signature.algorithm");
+    }
+    if (typeof r.signature?.key_id !== "string" || r.signature.key_id === "") {
+        throw new Error("delivery receipt: missing signature.key_id");
+    }
+    if (typeof r.signature?.value !== "string") {
+        throw new Error("delivery receipt: missing signature.value");
+    }
+}
+function base64Encode(b) {
+    if (typeof Buffer !== "undefined") {
+        return Buffer.from(b).toString("base64");
+    }
+    let bin = "";
+    for (let i = 0; i < b.length; i++) {
+        bin += String.fromCharCode(b[i] ?? 0);
+    }
+    return btoa(bin);
+}
+//# sourceMappingURL=receipt.js.map

package/dist/delivery/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/delivery/receipt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EACL,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D,iDAAiD;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAE3D,2CAA2C;AAC3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C,sEAAsE;AACtE,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC;AAErD,mCAAmC;AACnC,MAAM,CAAC,MAAM,gCAAgC,GAAG,SAAS,CAAC;AAE1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAuDpD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,sBAAkC;IACpE,MAAM,GAAG,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC3C,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAA+B;IAE/B,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,sBAAsB;QAC/B,aAAa,EAAE;YACb,SAAS,EAAE,2BAA2B;YACtC,KAAK,EAAE,KAAK,CAAC,eAAe;SAC7B;QACD,gBAAgB,EAAE,KAAK,CAAC,eAAe;QACvC,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,SAAS,EAAE;YACT,SAAS,EAAE,gCAAgC;YAC3C,MAAM,EAAE,KAAK,CAAC,WAAW;YACzB,KAAK,EAAE,EAAE;SACV;KACF,CAAC;IAEF,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC;QACjD,WAAW,EAAE,OAA6C;QAC1D,IAAI,EAAE,KAAK,CAAC,iBAAiB;QAC7B,aAAa,EAAE,iBAAiB;QAChC,MAAM,EAAE,qBAAqB;KAC9B,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,UAAwC;QACjD,YAAY;KACb,CAAC;AACJ,CAAC;AAUD;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAiC;IAEjC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,OAA6C;QAC/D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,iBAAiB;QAChC,MAAM,EAAE,qBAAqB;KAC9B,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAwB,EACxB,sBAAkC;IAElC,IAAI,OAAO,CAAC,aAAa,CAAC,SAAS,KAAK,2BAA2B,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,KAAK,IAAI,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,CAAkB;IAChD,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,mBAAmB,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,aAAa,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,aAAa,EAAE,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,CAAC,gBAAgB,KAAK,EAAE,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC"}

package/dist/delivery/receipt_store.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Sending-server transient holding area for delivery receipts per
+ * DELIVERY.md §1.1.1.6.
+ *
+ * The sending server retains a receipt only until at least one
+ * authenticated client device of the sending user has acknowledged
+ * the delivery event carrying it; after that acknowledgment the
+ * server SHOULD drop the receipt so it does not accumulate a
+ * long-term receipts archive (which would conflict with the §2.5
+ * correspondent-graph privacy posture).
+ *
+ * Production deployments plug in a durable backend (a Redis cache, a
+ * relational table) by implementing {@link ReceiptStore} directly.
+ * Tests and demos use {@link InMemoryReceiptStore}.
+ *
+ * @module
+ */
+import type { DeliveryReceipt } from "./receipt.js";
+/**
+ * The transient holding area. Implementations MUST be safe for
+ * concurrent use; the in-memory reference uses a mutex.
+ */
+export interface ReceiptStore {
+    /**
+     * Insert a receipt issued by a recipient server, keyed by
+     * `(envelopeId, recipient)`. `storedAt` is the wall-clock time the
+     * receipt entered the store; the prune path uses it to enforce the
+     * push-notification retention window for receipts that no client
+     * ever acknowledged.
+     */
+    put(envelopeId: string, recipient: string, receipt: DeliveryReceipt, storedAt: Date): Promise<void>;
+    /**
+     * Fetch the receipt for `(envelopeId, recipient)`. Returns `null`
+     * for unknown records.
+     */
+    get(envelopeId: string, recipient: string): Promise<DeliveryReceipt | null>;
+    /**
+     * Mark the receipt for `(envelopeId, recipient)` as having been
+     * delivered to a client device per §1.1.1.6. The implementation MAY
+     * drop the receipt immediately on acknowledge (the spec's "MAY drop"
+     * allowance), or retain it briefly for cross-device propagation. The
+     * reference in-memory implementation drops on acknowledge.
+     *
+     * A no-op on unknown records: the §1.1.1.6 retention rule does not
+     * require acknowledgment to be exact-once, only that the server
+     * eventually drop the receipt.
+     */
+    acknowledge(envelopeId: string, recipient: string): Promise<void>;
+    /**
+     * Remove receipts whose `storedAt` is older than `cutoff` and that
+     * have not been acknowledged. Returns the number of receipts pruned.
+     * The §1.1.1.6 retention rule says receipts MAY be dropped on the
+     * same schedule as undelivered notifications; this method
+     * implements that pruning.
+     */
+    pruneUnacknowledged(cutoff: Date): Promise<number>;
+}
+/**
+ * Default push-notification window the §1.1.1.6 prune path uses when
+ * the operator has not configured a tighter value. Three days matches
+ * the 72h `server_max_retry_horizon` default per §2.4: any envelope
+ * that hits the queue's hard deadline cannot have a delivered
+ * acknowledgment past that point, so retaining receipts longer offers
+ * no value.
+ */
+export declare const DefaultReceiptRetentionMs: number;
+/**
+ * Reference {@link ReceiptStore} backed by a Map. Acknowledge drops
+ * the receipt immediately so no plaintext archive accumulates.
+ *
+ * Single-process only — production deployments replace this with a
+ * durable backend.
+ */
+export declare class InMemoryReceiptStore implements ReceiptStore {
+    private readonly records;
+    put(envelopeId: string, recipient: string, receipt: DeliveryReceipt, storedAt: Date): Promise<void>;
+    get(envelopeId: string, recipient: string): Promise<DeliveryReceipt | null>;
+    acknowledge(envelopeId: string, recipient: string): Promise<void>;
+    pruneUnacknowledged(cutoff: Date): Promise<number>;
+}
+//# sourceMappingURL=receipt_store.d.ts.map

package/dist/delivery/receipt_store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt_store.d.ts","sourceRoot":"","sources":["../../src/delivery/receipt_store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;OAMG;IACH,GAAG,CACD,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,IAAI,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;OAGG;IACH,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAE5E;;;;;;;;;;OAUG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE;;;;;;OAMG;IACH,mBAAmB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACpD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,QAAsB,CAAC;AAO7D;;;;;;GAMG;AACH,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAEtD,GAAG,CACP,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,IAAI,GACb,OAAO,CAAC,IAAI,CAAC;IAgBV,GAAG,CACP,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAK5B,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,mBAAmB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;CAczD"}

package/dist/delivery/receipt_store.js

@@ -0,0 +1,74 @@
+/**
+ * Sending-server transient holding area for delivery receipts per
+ * DELIVERY.md §1.1.1.6.
+ *
+ * The sending server retains a receipt only until at least one
+ * authenticated client device of the sending user has acknowledged
+ * the delivery event carrying it; after that acknowledgment the
+ * server SHOULD drop the receipt so it does not accumulate a
+ * long-term receipts archive (which would conflict with the §2.5
+ * correspondent-graph privacy posture).
+ *
+ * Production deployments plug in a durable backend (a Redis cache, a
+ * relational table) by implementing {@link ReceiptStore} directly.
+ * Tests and demos use {@link InMemoryReceiptStore}.
+ *
+ * @module
+ */
+/**
+ * Default push-notification window the §1.1.1.6 prune path uses when
+ * the operator has not configured a tighter value. Three days matches
+ * the 72h `server_max_retry_horizon` default per §2.4: any envelope
+ * that hits the queue's hard deadline cannot have a delivered
+ * acknowledgment past that point, so retaining receipts longer offers
+ * no value.
+ */
+export const DefaultReceiptRetentionMs = 72 * 60 * 60 * 1000;
+/**
+ * Reference {@link ReceiptStore} backed by a Map. Acknowledge drops
+ * the receipt immediately so no plaintext archive accumulates.
+ *
+ * Single-process only — production deployments replace this with a
+ * durable backend.
+ */
+export class InMemoryReceiptStore {
+    records = new Map();
+    async put(envelopeId, recipient, receipt, storedAt) {
+        if (envelopeId === "") {
+            throw new Error("ReceiptStore.put: empty envelopeId");
+        }
+        if (recipient === "") {
+            throw new Error("ReceiptStore.put: empty recipient");
+        }
+        const k = recordKey(envelopeId, recipient);
+        if (this.records.has(k)) {
+            throw new Error(`ReceiptStore.put: receipt already stored for (${envelopeId}, ${recipient})`);
+        }
+        this.records.set(k, { receipt, storedAt });
+    }
+    async get(envelopeId, recipient) {
+        const rec = this.records.get(recordKey(envelopeId, recipient));
+        return rec === undefined ? null : rec.receipt;
+    }
+    async acknowledge(envelopeId, recipient) {
+        this.records.delete(recordKey(envelopeId, recipient));
+    }
+    async pruneUnacknowledged(cutoff) {
+        const cutoffMs = cutoff.getTime();
+        const stale = [];
+        for (const [k, rec] of this.records) {
+            if (rec.storedAt.getTime() <= cutoffMs) {
+                stale.push(k);
+            }
+        }
+        stale.sort();
+        for (const k of stale) {
+            this.records.delete(k);
+        }
+        return stale.length;
+    }
+}
+function recordKey(envelopeId, recipient) {
+    return `${envelopeId}\x00${recipient}`;
+}
+//# sourceMappingURL=receipt_store.js.map

package/dist/delivery/receipt_store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt_store.js","sourceRoot":"","sources":["../../src/delivery/receipt_store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAoDH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAO7D;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE5D,KAAK,CAAC,GAAG,CACP,UAAkB,EAClB,SAAiB,EACjB,OAAwB,EACxB,QAAc;QAEd,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,iDAAiD,UAAU,KAAK,SAAS,GAAG,CAC7E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,GAAG,CACP,UAAkB,EAClB,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,SAAiB;QACrD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAY;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACvC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;CACF;AAED,SAAS,SAAS,CAAC,UAAkB,EAAE,SAAiB;IACtD,OAAO,GAAG,UAAU,OAAO,SAAS,EAAE,CAAC;AACzC,CAAC"}

package/dist/delivery/retry.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Retry-schedule primitives per DELIVERY.md §2.2 + §2.3 + §2.4.
+ *
+ * Exposes the bounds the spec sets on retry timing (initial
+ * interval, multiplier, max interval, jitter, attempt floor),
+ * computes the base + jittered interval for a given attempt, and
+ * enforces the §2.3 recoverable-reason classification.
+ *
+ * @module
+ */
+/** Minimum first base interval per §2.3 (60 seconds). */
+export declare const MinRetryInitialIntervalMs = 60000;
+/** Minimum exponential backoff multiplier per §2.3. */
+export declare const MinRetryMultiplier = 2;
+/** Cap on individual inter-attempt intervals per §2.3 (6 hours). */
+export declare const MaxRetryIntervalMs: number;
+/** Minimum jitter half-width per §2.3 (10% — RECOMMENDED 25%). */
+export declare const MinRetryJitterFraction = 0.1;
+/**
+ * Lower bound on the realized jittered interval per §2.3:
+ * jitter MUST NOT reduce below 50% of the first base interval.
+ */
+export declare const MinJitterFloorMs: number;
+/** Minimum number of retry attempts per §2.3. */
+export declare const MinRetryAttempts = 5;
+/** Default `server_max_retry_horizon` per §2.4 (72 hours). */
+export declare const DefaultMaxRetryHorizonMs: number;
+/** Hard ceiling on `server_max_retry_horizon` per §2.4 (7 days). */
+export declare const MaxRetryHorizonCapMs: number;
+/** Operator-tunable retry policy. Zero / out-of-bounds values clamp to spec minima. */
+export interface RetryConfig {
+    /** First base interval. Defaults to {@link MinRetryInitialIntervalMs}. */
+    initialIntervalMs?: number;
+    /** Exponential backoff factor. Defaults to {@link MinRetryMultiplier}. */
+    multiplier?: number;
+    /** Cap on individual base intervals. Defaults to {@link MaxRetryIntervalMs}. */
+    maxIntervalMs?: number;
+    /** Symmetric jitter half-width. Defaults to {@link MinRetryJitterFraction}. */
+    jitterFraction?: number;
+}
+/** Effective {@link RetryConfig} after applying spec minima/maxima. */
+export interface EffectiveRetryConfig {
+    initialIntervalMs: number;
+    multiplier: number;
+    maxIntervalMs: number;
+    jitterFraction: number;
+}
+/** Apply spec minima/maxima to `cfg` and return the effective values. */
+export declare function sanitizeRetry(cfg: RetryConfig): EffectiveRetryConfig;
+/**
+ * Unjittered base interval for the zero-indexed `attempt`. Computes
+ * `initialInterval * multiplier^attempt`, clamped to `maxIntervalMs`.
+ */
+export declare function baseIntervalMs(cfg: RetryConfig, attempt: number): number;
+/**
+ * Apply symmetric jitter to `baseMs` using a random multiplier in
+ * `[1-j, 1+j]`, floored at {@link MinJitterFloorMs}. Uses
+ * `globalThis.crypto.getRandomValues` for entropy by default.
+ */
+export declare function jitterIntervalMs(cfg: RetryConfig, baseMs: number, rand?: () => number): number;
+/**
+ * Compute the wall-clock time of the next attempt:
+ * `previous + jitter(base(cfg, attempt))`.
+ */
+export declare function nextAttemptAt(cfg: RetryConfig, previous: Date, attempt: number, rand?: () => number): Date;
+/**
+ * Report whether `reasonCode` permits retry per §2.3 / ERRORS.md
+ * §3. Unknown reason codes default to non-recoverable.
+ */
+export declare function isRecoverableReason(reasonCode: string): boolean;
+/**
+ * Effective delivery deadline per §2.4 — the earlier of
+ * `postmark.expires` and `queuedAt + horizon`. `horizon <= 0`
+ * defaults to {@link DefaultMaxRetryHorizonMs}; values larger than
+ * {@link MaxRetryHorizonCapMs} clamp down.
+ */
+export declare function effectiveDeadline(postmarkExpires: Date | null, queuedAt: Date, horizonMs?: number): Date;
+//# sourceMappingURL=retry.d.ts.map

package/dist/delivery/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/delivery/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,yDAAyD;AACzD,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD,uDAAuD;AACvD,eAAO,MAAM,kBAAkB,IAAM,CAAC;AAEtC,oEAAoE;AACpE,eAAO,MAAM,kBAAkB,QAAqB,CAAC;AAErD,kEAAkE;AAClE,eAAO,MAAM,sBAAsB,MAAO,CAAC;AAE3C;;;GAGG;AACH,eAAO,MAAM,gBAAgB,QAAgC,CAAC;AAE9D,iDAAiD;AACjD,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,8DAA8D;AAC9D,eAAO,MAAM,wBAAwB,QAAsB,CAAC;AAE5D,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,QAA0B,CAAC;AAE5D,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,GAAG,EAAE,WAAW,GAAG,oBAAoB,CAepE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,MAAM,GACd,MAAM,CAYR;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,WAAW,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,MAAM,MAAyB,GACpC,MAAM,CAYR;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,WAAW,EAChB,QAAQ,EAAE,IAAI,EACd,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,MAAM,MAAyB,GACpC,IAAI,CAON;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAY/D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,eAAe,EAAE,IAAI,GAAG,IAAI,EAC5B,QAAQ,EAAE,IAAI,EACd,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAeN"}

package/dist/delivery/retry.js

@@ -0,0 +1,132 @@
+/**
+ * Retry-schedule primitives per DELIVERY.md §2.2 + §2.3 + §2.4.
+ *
+ * Exposes the bounds the spec sets on retry timing (initial
+ * interval, multiplier, max interval, jitter, attempt floor),
+ * computes the base + jittered interval for a given attempt, and
+ * enforces the §2.3 recoverable-reason classification.
+ *
+ * @module
+ */
+/** Minimum first base interval per §2.3 (60 seconds). */
+export const MinRetryInitialIntervalMs = 60_000;
+/** Minimum exponential backoff multiplier per §2.3. */
+export const MinRetryMultiplier = 2.0;
+/** Cap on individual inter-attempt intervals per §2.3 (6 hours). */
+export const MaxRetryIntervalMs = 6 * 60 * 60 * 1000;
+/** Minimum jitter half-width per §2.3 (10% — RECOMMENDED 25%). */
+export const MinRetryJitterFraction = 0.10;
+/**
+ * Lower bound on the realized jittered interval per §2.3:
+ * jitter MUST NOT reduce below 50% of the first base interval.
+ */
+export const MinJitterFloorMs = MinRetryInitialIntervalMs / 2;
+/** Minimum number of retry attempts per §2.3. */
+export const MinRetryAttempts = 5;
+/** Default `server_max_retry_horizon` per §2.4 (72 hours). */
+export const DefaultMaxRetryHorizonMs = 72 * 60 * 60 * 1000;
+/** Hard ceiling on `server_max_retry_horizon` per §2.4 (7 days). */
+export const MaxRetryHorizonCapMs = 7 * 24 * 60 * 60 * 1000;
+/** Apply spec minima/maxima to `cfg` and return the effective values. */
+export function sanitizeRetry(cfg) {
+    const initialIntervalMs = Math.max(cfg.initialIntervalMs ?? 0, MinRetryInitialIntervalMs);
+    const multiplier = Math.max(cfg.multiplier ?? 0, MinRetryMultiplier);
+    let maxIntervalMs = cfg.maxIntervalMs ?? 0;
+    if (maxIntervalMs <= 0 || maxIntervalMs > MaxRetryIntervalMs) {
+        maxIntervalMs = MaxRetryIntervalMs;
+    }
+    const jitterFraction = Math.max(cfg.jitterFraction ?? 0, MinRetryJitterFraction);
+    return { initialIntervalMs, multiplier, maxIntervalMs, jitterFraction };
+}
+/**
+ * Unjittered base interval for the zero-indexed `attempt`. Computes
+ * `initialInterval * multiplier^attempt`, clamped to `maxIntervalMs`.
+ */
+export function baseIntervalMs(cfg, attempt) {
+    const eff = sanitizeRetry(cfg);
+    const a = Math.max(0, Math.floor(attempt));
+    let d = eff.initialIntervalMs;
+    for (let i = 0; i < a; i++) {
+        d *= eff.multiplier;
+        if (d > eff.maxIntervalMs) {
+            d = eff.maxIntervalMs;
+            break;
+        }
+    }
+    return Math.min(d, eff.maxIntervalMs);
+}
+/**
+ * Apply symmetric jitter to `baseMs` using a random multiplier in
+ * `[1-j, 1+j]`, floored at {@link MinJitterFloorMs}. Uses
+ * `globalThis.crypto.getRandomValues` for entropy by default.
+ */
+export function jitterIntervalMs(cfg, baseMs, rand = defaultRandFloat) {
+    const eff = sanitizeRetry(cfg);
+    if (baseMs <= 0) {
+        throw new Error("delivery: non-positive base interval");
+    }
+    const r = rand();
+    if (r < 0 || r >= 1) {
+        throw new Error("delivery: jitter random source returned out-of-range value");
+    }
+    const m = 1 - eff.jitterFraction + 2 * eff.jitterFraction * r;
+    const jittered = Math.floor(baseMs * m);
+    return Math.max(jittered, MinJitterFloorMs);
+}
+/**
+ * Compute the wall-clock time of the next attempt:
+ * `previous + jitter(base(cfg, attempt))`.
+ */
+export function nextAttemptAt(cfg, previous, attempt, rand = defaultRandFloat) {
+    if (Number.isNaN(previous.getTime())) {
+        throw new Error("delivery: previous attempt time is invalid");
+    }
+    const base = baseIntervalMs(cfg, attempt);
+    const jittered = jitterIntervalMs(cfg, base, rand);
+    return new Date(previous.getTime() + jittered);
+}
+/**
+ * Report whether `reasonCode` permits retry per §2.3 / ERRORS.md
+ * §3. Unknown reason codes default to non-recoverable.
+ */
+export function isRecoverableReason(reasonCode) {
+    switch (reasonCode) {
+        case "handshake_invalid":
+        case "handshake_expired":
+        case "no_session":
+        case "server_unavailable":
+        case "rate_limited":
+        case "server_at_capacity":
+            return true;
+        default:
+            return false;
+    }
+}
+/**
+ * Effective delivery deadline per §2.4 — the earlier of
+ * `postmark.expires` and `queuedAt + horizon`. `horizon <= 0`
+ * defaults to {@link DefaultMaxRetryHorizonMs}; values larger than
+ * {@link MaxRetryHorizonCapMs} clamp down.
+ */
+export function effectiveDeadline(postmarkExpires, queuedAt, horizonMs) {
+    let h = horizonMs ?? 0;
+    if (h <= 0) {
+        h = DefaultMaxRetryHorizonMs;
+    }
+    if (h > MaxRetryHorizonCapMs) {
+        h = MaxRetryHorizonCapMs;
+    }
+    const horizonDeadline = new Date(queuedAt.getTime() + h);
+    if (postmarkExpires === null) {
+        return horizonDeadline;
+    }
+    return postmarkExpires.getTime() < horizonDeadline.getTime()
+        ? postmarkExpires
+        : horizonDeadline;
+}
+function defaultRandFloat() {
+    const buf = new Uint32Array(1);
+    globalThis.crypto.getRandomValues(buf);
+    return (buf[0] ?? 0) / 0x1_0000_0000;
+}
+//# sourceMappingURL=retry.js.map

package/dist/delivery/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/delivery/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,yDAAyD;AACzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,uDAAuD;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,oEAAoE;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD,kEAAkE;AAClE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,GAAG,CAAC,CAAC;AAE9D,iDAAiD;AACjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,8DAA8D;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5D,oEAAoE;AACpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAsB5D,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,GAAgB;IAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAChC,GAAG,CAAC,iBAAiB,IAAI,CAAC,EAC1B,yBAAyB,CAC1B,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACrE,IAAI,aAAa,GAAG,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;IAC3C,IAAI,aAAa,IAAI,CAAC,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;QAC7D,aAAa,GAAG,kBAAkB,CAAC;IACrC,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAC7B,GAAG,CAAC,cAAc,IAAI,CAAC,EACvB,sBAAsB,CACvB,CAAC;IACF,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAgB,EAChB,OAAe;IAEf,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,GAAG,CAAC,iBAAiB,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC;QACpB,IAAI,CAAC,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;YAC1B,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC;YACtB,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAgB,EAChB,MAAc,EACd,OAAqB,gBAAgB;IAErC,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IACjB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,cAAc,GAAG,CAAC,GAAG,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAgB,EAChB,QAAc,EACd,OAAe,EACf,OAAqB,gBAAgB;IAErC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACnD,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,QAAQ,UAAiC,EAAE,CAAC;QAC1C,KAAK,mBAAmB,CAAC;QACzB,KAAK,mBAAmB,CAAC;QACzB,KAAK,YAAY,CAAC;QAClB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,cAAc,CAAC;QACpB,KAAK,oBAAoB;YACvB,OAAO,IAAI,CAAC;QACd;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,eAA4B,EAC5B,QAAc,EACd,SAAkB;IAElB,IAAI,CAAC,GAAG,SAAS,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACX,CAAC,GAAG,wBAAwB,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,GAAG,oBAAoB,EAAE,CAAC;QAC7B,CAAC,GAAG,oBAAoB,CAAC;IAC3B,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,eAAe,CAAC,OAAO,EAAE,GAAG,eAAe,CAAC,OAAO,EAAE;QAC1D,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,eAAe,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,aAAa,CAAC;AACvC,CAAC"}