@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/hub/attachments/store.d.ts

@@ -0,0 +1,116 @@
+import type Database from "better-sqlite3";
+import { HubProtocolError } from "../validation.js";
+import type { HubAttachmentRef } from "../types.js";
+import { type HubAttachmentLimits } from "./limits.js";
+export declare const UPLOAD_TTL_MS: number;
+/** Files waiting to be used (an asker's uploads; a fleet's staged answer files) are budgeted, not only aged: per owner of
+ * the wait, and in all. A full budget refuses (backpressure) before anything is stored. */
+export declare const HUB_PENDING_BUDGET: Readonly<{
+    files: 20;
+    bytes: number;
+    totalBytes: number;
+}>;
+declare function migrate(db: Database.Database): void;
+/** Its own component (an older build that meets it refuses to open the state, as for every Hub component). */
+export declare const HUB_ATTACHMENTS_MIGRATION: Readonly<{
+    component: "s7-attachments";
+    version: 1;
+    up: typeof migrate;
+}>;
+interface Row {
+    id: string;
+    sha256: string;
+    name: string;
+    size: number;
+    mime: string;
+    direction: "question" | "answer";
+    state: "pending" | "staged" | "bound";
+    fleet_id: string | null;
+    room_id: string | null;
+    uploader: string | null;
+    message_id: string | null;
+    position: number | null;
+    created_at: number;
+    expires_at: number | null;
+}
+export type HubAttachmentRow = Readonly<Row>;
+export declare const refOf: (r: Row) => HubAttachmentRef;
+export interface HubAttachmentStoreOptions {
+    contentKey: Buffer;
+    now?: () => number;
+    limits?: Partial<HubAttachmentLimits> | null;
+    /** Tests only: a smaller pending budget. */
+    budget?: Partial<{
+        files: number;
+        bytes: number;
+        totalBytes: number;
+    }>;
+}
+export declare class HubAttachmentStore {
+    private readonly options;
+    private readonly key;
+    readonly limits: HubAttachmentLimits;
+    constructor(options: HubAttachmentStoreOptions);
+    private now;
+    private budget;
+    /** What is physically waiting now (after the sweep): every remaining upload/staged file of one owner (uploader or fleet),
+     * staging in progress, and in all — no age filter, so a row the sweep did not delete is always charged. */
+    private waiting;
+    /** Expired uploads/staged files and stale staging, deleted with any blob nothing uses any more (caller's transaction). */
+    private sweepExpired;
+    private dropOrphans;
+    /** Room for one more waiting file of `size` bytes for this owner (backpressure otherwise). Capacity held by an expired
+     * file returns only once its bytes are actually deleted — here, in the same transaction — never by age alone. */
+    admit(db: Database.Database, owner: {
+        uploader?: string;
+        fleetId?: string;
+    }, size: number): void;
+    private seal;
+    private open;
+    /** Store whole-file bytes under their digest (once per digest); returns the digest. */
+    storeBlob(db: Database.Database, bytes: Buffer): string;
+    /** One chunk of a stored file, at a chunk-aligned offset. */
+    chunk(db: Database.Database, digest: string, offset: number): {
+        data: Buffer;
+        total: number;
+    };
+    /** A whole stored file (downloads; bounded by the file limit). */
+    read(db: Database.Database, digest: string): Buffer;
+    /** The asker's upload: classified by name and (for an image) magic bytes, stored, pending for one hour. */
+    createUpload(db: Database.Database, input: {
+        roomId: string;
+        uploader: string;
+        name: string;
+        bytes: Buffer;
+    }): HubAttachmentRef;
+    /** The uploader's own unexpired pending files in this room, in the order named; refused as a whole otherwise. */
+    pending(db: Database.Database, roomId: string, uploader: string, ids: readonly string[]): HubAttachmentRef[];
+    bindQuestion(db: Database.Database, refs: readonly HubAttachmentRef[], messageId: string, fleetId: string): void;
+    /** A message's files in one direction, in order. */
+    forMessage(db: Database.Database, messageId: string, direction: "question" | "answer"): HubAttachmentRef[];
+    row(db: Database.Database, id: string): HubAttachmentRow | undefined;
+    /** One chunk of an answer's file from the member, in order. Returns the next offset; the last chunk checks the digest. */
+    stage(db: Database.Database, fleetId: string, c: {
+        id: string;
+        offset: number;
+        total: number;
+        sha256: string;
+        data: Buffer;
+    }): {
+        complete: boolean;
+        discarded?: true;
+    };
+    /** Bind an answer's files: each must be a complete file this fleet sent, matching the ref's digest and size; its
+     * name decides its type and an image must carry its magic bytes, exactly as for an asker's upload. */
+    bindAnswer(db: Database.Database, refs: readonly HubAttachmentRef[], messageId: string, roomId: string, fleetId: string): void;
+    /** Retention: bound files older than `contentCut`, expired uploads and staging, then blobs nothing uses. */
+    purge(db: Database.Database, contentCut: number): {
+        files: number;
+        blobs: number;
+    };
+}
+export declare class HubAttachmentRefused extends HubProtocolError {
+    readonly refusal: "type-not-allowed" | "image-mismatch" | "empty";
+    constructor(refusal: "type-not-allowed" | "image-mismatch" | "empty");
+}
+export {};

package/dist/hub/attachments/store.js

@@ -0,0 +1,246 @@
+/**
+ * Hub attachments (attachments-v1): files stored by digest, each 180 KiB segment AES-256-GCM under the Hub content key
+ * (the audit content key), so serving one chunk decrypts one segment. Rows say which room and message a file belongs
+ * to and in which direction it travelled. Every method runs inside the caller's transaction (`db` is that tx's DB).
+ *
+ * - A question's file starts as the asker's pending upload (one hour), then is bound to the question that names it.
+ * - An answer's file arrives from the member in chunks (`attachment.put`), staged under its id until the whole file is
+ *   in and its SHA-256 matches; the answer that names it binds it, re-checking name, type and size.
+ * - Retention deletes rows older than `contentDays`, expired uploads and staging, then blobs no row uses.
+ */
+import { createCipheriv, createDecipheriv, createHash, randomBytes, randomUUID } from "node:crypto";
+import { HUB_ATTACHMENT_CHUNK } from "../protocol.js";
+import { HubProtocolError } from "../validation.js";
+import { attachmentLimits, classifyAttachment } from "./limits.js";
+export const UPLOAD_TTL_MS = 60 * 60 * 1000;
+/** Files waiting to be used (an asker's uploads; a fleet's staged answer files) are budgeted, not only aged: per owner of
+ * the wait, and in all. A full budget refuses (backpressure) before anything is stored. */
+export const HUB_PENDING_BUDGET = Object.freeze({ files: 20, bytes: 100 * 1024 * 1024, totalBytes: 1024 * 1024 * 1024 });
+const STAGING_TTL_MS = 60 * 60 * 1000;
+const sha = (b) => createHash("sha256").update(b).digest("hex");
+function migrate(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS hub_attachment_blobs(sha256 TEXT PRIMARY KEY, size INTEGER NOT NULL, created_at INTEGER NOT NULL);
+    CREATE TABLE IF NOT EXISTS hub_attachment_segments(sha256 TEXT NOT NULL, idx INTEGER NOT NULL, nonce BLOB NOT NULL, ciphertext BLOB NOT NULL, PRIMARY KEY(sha256, idx));
+    CREATE TABLE IF NOT EXISTS hub_attachments(id TEXT PRIMARY KEY, sha256 TEXT NOT NULL, name TEXT NOT NULL, size INTEGER NOT NULL, mime TEXT NOT NULL,
+      direction TEXT NOT NULL CHECK(direction IN ('question','answer')), state TEXT NOT NULL CHECK(state IN ('pending','staged','bound')),
+      fleet_id TEXT, room_id TEXT, uploader TEXT, message_id TEXT, position INTEGER, created_at INTEGER NOT NULL, expires_at INTEGER);
+    CREATE INDEX IF NOT EXISTS hub_attachments_message ON hub_attachments(message_id, direction, position);
+    CREATE TABLE IF NOT EXISTS hub_attachment_staging(id TEXT NOT NULL, idx INTEGER NOT NULL, fleet_id TEXT NOT NULL, total INTEGER NOT NULL, sha256 TEXT NOT NULL,
+      nonce BLOB NOT NULL, ciphertext BLOB NOT NULL, created_at INTEGER NOT NULL, PRIMARY KEY(id, idx));`);
+}
+/** Its own component (an older build that meets it refuses to open the state, as for every Hub component). */
+export const HUB_ATTACHMENTS_MIGRATION = Object.freeze({ component: "s7-attachments", version: 1, up: migrate });
+export const refOf = (r) => ({ id: r.id, name: r.name, size: r.size, mime: r.mime, sha256: r.sha256 });
+export class HubAttachmentStore {
+    options;
+    key;
+    limits;
+    constructor(options) {
+        this.options = options;
+        if (!Buffer.isBuffer(options.contentKey) || options.contentKey.length !== 32)
+            throw new Error("the Hub content key must be 32 bytes");
+        this.key = Buffer.from(options.contentKey);
+        this.limits = attachmentLimits(options.limits);
+    }
+    now() { return this.options.now?.() ?? Date.now(); }
+    budget() { return { ...HUB_PENDING_BUDGET, ...this.options.budget }; }
+    /** What is physically waiting now (after the sweep): every remaining upload/staged file of one owner (uploader or fleet),
+     * staging in progress, and in all — no age filter, so a row the sweep did not delete is always charged. */
+    waiting(db, owner) {
+        const rows = db.prepare(`SELECT COUNT(*) AS n, COALESCE(SUM(size),0) AS b FROM hub_attachments WHERE state IN ('pending','staged')
+      AND ${owner.uploader !== undefined ? "uploader=?" : "fleet_id=?"}`).get(owner.uploader ?? owner.fleetId);
+        const staging = owner.fleetId !== undefined ? db.prepare("SELECT COUNT(*) AS n, COALESCE(SUM(t),0) AS b FROM (SELECT MAX(total) AS t FROM hub_attachment_staging WHERE fleet_id=? GROUP BY id)").get(owner.fleetId) : { n: 0, b: 0 };
+        const all = db.prepare("SELECT COALESCE(SUM(size),0) AS b FROM hub_attachments WHERE state IN ('pending','staged')").get().b
+            + db.prepare("SELECT COALESCE(SUM(t),0) AS b FROM (SELECT MAX(total) AS t FROM hub_attachment_staging GROUP BY id)").get().b;
+        return { files: rows.n + staging.n, bytes: rows.b + staging.b, total: all };
+    }
+    /** Expired uploads/staged files and stale staging, deleted with any blob nothing uses any more (caller's transaction). */
+    sweepExpired(db) {
+        const now = this.now();
+        db.prepare("DELETE FROM hub_attachments WHERE state <> 'bound' AND expires_at IS NOT NULL AND expires_at <= ?").run(now);
+        db.prepare("DELETE FROM hub_attachment_staging WHERE created_at <= ?").run(now - STAGING_TTL_MS);
+        this.dropOrphans(db);
+    }
+    dropOrphans(db) {
+        const orphans = db.prepare("SELECT sha256 FROM hub_attachment_blobs b WHERE NOT EXISTS (SELECT 1 FROM hub_attachments a WHERE a.sha256 = b.sha256)").all();
+        for (const o of orphans) {
+            db.prepare("DELETE FROM hub_attachment_segments WHERE sha256=?").run(o.sha256);
+            db.prepare("DELETE FROM hub_attachment_blobs WHERE sha256=?").run(o.sha256);
+        }
+        return orphans.length;
+    }
+    /** Room for one more waiting file of `size` bytes for this owner (backpressure otherwise). Capacity held by an expired
+     * file returns only once its bytes are actually deleted — here, in the same transaction — never by age alone. */
+    admit(db, owner, size) {
+        this.sweepExpired(db);
+        const b = this.budget(), w = this.waiting(db, owner);
+        if (w.files + 1 > b.files || w.bytes + size > b.bytes || w.total + size > b.totalBytes)
+            throw new HubProtocolError("backpressure");
+    }
+    seal(aad, plain) {
+        const nonce = randomBytes(12), c = createCipheriv("aes-256-gcm", this.key, nonce);
+        c.setAAD(Buffer.from(aad));
+        return { nonce, body: Buffer.concat([c.update(plain), c.final(), c.getAuthTag()]) };
+    }
+    open(aad, nonce, body) {
+        const d = createDecipheriv("aes-256-gcm", this.key, nonce);
+        d.setAAD(Buffer.from(aad));
+        d.setAuthTag(body.subarray(body.length - 16));
+        return Buffer.concat([d.update(body.subarray(0, body.length - 16)), d.final()]);
+    }
+    /** Store whole-file bytes under their digest (once per digest); returns the digest. */
+    storeBlob(db, bytes) {
+        if (bytes.length === 0 || bytes.length > this.limits.fileBytes)
+            throw new HubProtocolError("invalid");
+        const digest = sha(bytes);
+        if (db.prepare("SELECT 1 FROM hub_attachment_blobs WHERE sha256=?").get(digest))
+            return digest;
+        db.prepare("INSERT INTO hub_attachment_blobs(sha256, size, created_at) VALUES(?,?,?)").run(digest, bytes.length, this.now());
+        const insert = db.prepare("INSERT INTO hub_attachment_segments(sha256, idx, nonce, ciphertext) VALUES(?,?,?,?)");
+        for (let idx = 0, at = 0; at < bytes.length; idx++, at += HUB_ATTACHMENT_CHUNK) {
+            const s = this.seal(`agend-hub-attachment-v1\n${digest}\n${idx}`, bytes.subarray(at, at + HUB_ATTACHMENT_CHUNK));
+            insert.run(digest, idx, s.nonce, s.body);
+        }
+        return digest;
+    }
+    /** One chunk of a stored file, at a chunk-aligned offset. */
+    chunk(db, digest, offset) {
+        const blob = db.prepare("SELECT size FROM hub_attachment_blobs WHERE sha256=?").get(digest);
+        if (!blob)
+            throw new HubProtocolError("expired");
+        if (!Number.isSafeInteger(offset) || offset < 0 || offset >= blob.size || offset % HUB_ATTACHMENT_CHUNK !== 0)
+            throw new HubProtocolError("invalid");
+        const idx = offset / HUB_ATTACHMENT_CHUNK, seg = db.prepare("SELECT nonce, ciphertext FROM hub_attachment_segments WHERE sha256=? AND idx=?").get(digest, idx);
+        if (!seg)
+            throw new HubProtocolError("expired");
+        return { data: this.open(`agend-hub-attachment-v1\n${digest}\n${idx}`, seg.nonce, seg.ciphertext), total: blob.size };
+    }
+    /** A whole stored file (downloads; bounded by the file limit). */
+    read(db, digest) {
+        const parts = [];
+        let total = 0;
+        for (let offset = 0; offset === 0 || offset < total; offset += HUB_ATTACHMENT_CHUNK) {
+            const c = this.chunk(db, digest, offset);
+            total = c.total;
+            parts.push(c.data);
+        }
+        const all = Buffer.concat(parts);
+        if (all.length !== total || sha(all) !== digest)
+            throw new HubProtocolError("uncertain");
+        return all;
+    }
+    /** The asker's upload: classified by name and (for an image) magic bytes, stored, pending for one hour. */
+    createUpload(db, input) {
+        if (input.bytes.length > this.limits.fileBytes)
+            throw new HubProtocolError("invalid");
+        const kind = classifyAttachment(input.name, input.bytes.subarray(0, 64));
+        if ("refused" in kind)
+            throw new HubAttachmentRefused(kind.refused);
+        this.admit(db, { uploader: input.uploader }, input.bytes.length);
+        const digest = this.storeBlob(db, input.bytes), now = this.now(), id = randomUUID();
+        db.prepare(`INSERT INTO hub_attachments(id, sha256, name, size, mime, direction, state, room_id, uploader, created_at, expires_at)
+      VALUES(?,?,?,?,?,'question','pending',?,?,?,?)`).run(id, digest, input.name, input.bytes.length, kind.mime, input.roomId, input.uploader, now, now + UPLOAD_TTL_MS);
+        return { id, name: input.name, size: input.bytes.length, mime: kind.mime, sha256: digest };
+    }
+    /** The uploader's own unexpired pending files in this room, in the order named; refused as a whole otherwise. */
+    pending(db, roomId, uploader, ids) {
+        if (ids.length > this.limits.files || new Set(ids).size !== ids.length)
+            throw new HubProtocolError("invalid");
+        const now = this.now(), rows = ids.map(id => db.prepare("SELECT * FROM hub_attachments WHERE id=?").get(id));
+        if (rows.some(r => !r || r.direction !== "question" || r.state !== "pending" || r.room_id !== roomId || r.uploader !== uploader || (r.expires_at ?? 0) <= now))
+            throw new HubProtocolError("not-found");
+        const refs = rows.map(r => refOf(r));
+        if (refs.reduce((n, r) => n + r.size, 0) > this.limits.messageBytes)
+            throw new HubProtocolError("invalid");
+        return refs;
+    }
+    bindQuestion(db, refs, messageId, fleetId) {
+        const bind = db.prepare("UPDATE hub_attachments SET state='bound', message_id=?, fleet_id=?, position=?, expires_at=NULL WHERE id=? AND state='pending'");
+        refs.forEach((r, i) => { if (bind.run(messageId, fleetId, i, r.id).changes !== 1)
+            throw new HubProtocolError("conflict"); });
+    }
+    /** A message's files in one direction, in order. */
+    forMessage(db, messageId, direction) {
+        return db.prepare("SELECT * FROM hub_attachments WHERE message_id=? AND direction=? AND state='bound' ORDER BY position").all(messageId, direction).map(refOf);
+    }
+    row(db, id) { return db.prepare("SELECT * FROM hub_attachments WHERE id=?").get(id); }
+    /** One chunk of an answer's file from the member, in order. Returns the next offset; the last chunk checks the digest. */
+    stage(db, fleetId, c) {
+        if (c.total > this.limits.fileBytes || c.data.length === 0 || c.data.length > HUB_ATTACHMENT_CHUNK || c.offset % HUB_ATTACHMENT_CHUNK !== 0)
+            throw new HubProtocolError("invalid");
+        const done = db.prepare("SELECT * FROM hub_attachments WHERE id=?").get(c.id);
+        if (done) {
+            if (done.direction !== "answer" || done.fleet_id !== fleetId || done.sha256 !== c.sha256 || done.size !== c.total)
+                throw new HubProtocolError("conflict");
+            return { complete: true }; // a repeat after completion: the same ACK
+        }
+        const idx = c.offset / HUB_ATTACHMENT_CHUNK, last = c.offset + c.data.length === c.total;
+        if (!last && c.data.length !== HUB_ATTACHMENT_CHUNK || c.offset + c.data.length > c.total)
+            throw new HubProtocolError("invalid");
+        const prior = db.prepare("SELECT fleet_id, total, sha256, COUNT(*) AS n, MAX(idx) AS top FROM hub_attachment_staging WHERE id=?").get(c.id);
+        if (prior.n > 0 && (prior.fleet_id !== fleetId || prior.total !== c.total || prior.sha256 !== c.sha256))
+            throw new HubProtocolError("conflict");
+        const seen = db.prepare("SELECT 1 FROM hub_attachment_staging WHERE id=? AND idx=?").get(c.id, idx);
+        if (!seen) {
+            if (idx !== prior.n)
+                throw new HubProtocolError("stale"); // one chunk in flight, in order
+            if (prior.n === 0)
+                this.admit(db, { fleetId }, c.total); // a new file: within the fleet's waiting budget
+            const s = this.seal(`agend-hub-attachment-staging-v1\n${c.id}\n${idx}`, c.data);
+            db.prepare("INSERT INTO hub_attachment_staging(id, idx, fleet_id, total, sha256, nonce, ciphertext, created_at) VALUES(?,?,?,?,?,?,?,?)")
+                .run(c.id, idx, fleetId, c.total, c.sha256, s.nonce, s.body, this.now());
+        }
+        if (!last)
+            return { complete: false };
+        const parts = db.prepare("SELECT idx, nonce, ciphertext FROM hub_attachment_staging WHERE id=? ORDER BY idx").all(c.id)
+            .map(p => this.open(`agend-hub-attachment-staging-v1\n${c.id}\n${p.idx}`, p.nonce, p.ciphertext));
+        const bytes = Buffer.concat(parts);
+        db.prepare("DELETE FROM hub_attachment_staging WHERE id=?").run(c.id);
+        // A file that does not match its digest is discarded — returned, not thrown, so the caller's transaction keeps the delete.
+        if (bytes.length !== c.total || sha(bytes) !== c.sha256)
+            return { complete: false, discarded: true };
+        this.storeBlob(db, bytes);
+        // Name and type are unknown until the answer names this file: placeholders, checked and filled at bind.
+        db.prepare(`INSERT INTO hub_attachments(id, sha256, name, size, mime, direction, state, fleet_id, created_at, expires_at)
+      VALUES(?,?,'',?,'','answer','staged',?,?,?)`).run(c.id, c.sha256, c.total, fleetId, this.now(), this.now() + STAGING_TTL_MS);
+        return { complete: true };
+    }
+    /** Bind an answer's files: each must be a complete file this fleet sent, matching the ref's digest and size; its
+     * name decides its type and an image must carry its magic bytes, exactly as for an asker's upload. */
+    bindAnswer(db, refs, messageId, roomId, fleetId) {
+        if (refs.length > this.limits.files || refs.reduce((n, r) => n + r.size, 0) > this.limits.messageBytes)
+            throw new HubProtocolError("invalid");
+        refs.forEach((r, i) => {
+            const row = db.prepare("SELECT * FROM hub_attachments WHERE id=?").get(r.id);
+            if (!row || row.direction !== "answer" || row.fleet_id !== fleetId || row.sha256 !== r.sha256 || row.size !== r.size)
+                throw new HubProtocolError("not-found");
+            if (row.state === "bound") {
+                if (row.message_id !== messageId || row.position !== i || row.name !== r.name || row.mime !== r.mime)
+                    throw new HubProtocolError("conflict");
+                return;
+            }
+            if ((row.expires_at ?? 0) <= this.now())
+                throw new HubProtocolError("expired"); // never resurrected by a late answer
+            const kind = classifyAttachment(r.name, this.chunk(db, r.sha256, 0).data.subarray(0, 64));
+            if ("refused" in kind || kind.mime !== r.mime)
+                throw new HubProtocolError("invalid");
+            db.prepare("UPDATE hub_attachments SET state='bound', name=?, mime=?, message_id=?, room_id=?, position=?, expires_at=NULL WHERE id=? AND state='staged'")
+                .run(r.name, r.mime, messageId, roomId, i, r.id);
+        });
+    }
+    /** Retention: bound files older than `contentCut`, expired uploads and staging, then blobs nothing uses. */
+    purge(db, contentCut) {
+        const now = this.now();
+        const files = db.prepare("DELETE FROM hub_attachments WHERE created_at < ? OR (state <> 'bound' AND expires_at IS NOT NULL AND expires_at <= ?)").run(contentCut, now).changes;
+        db.prepare("DELETE FROM hub_attachment_staging WHERE created_at <= ?").run(now - STAGING_TTL_MS);
+        return { files, blobs: this.dropOrphans(db) };
+    }
+}
+export class HubAttachmentRefused extends HubProtocolError {
+    refusal;
+    constructor(refusal) {
+        super("invalid");
+        this.refusal = refusal;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/hub/attachments/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/hub/attachments/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEpG,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAA4B,MAAM,aAAa,CAAC;AAE7F,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C;2FAC2F;AAC3F,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;AACzH,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEhF,SAAS,OAAO,CAAC,EAAqB;IACpC,EAAE,CAAC,IAAI,CAAC;;;;;;;yGAO+F,CAAC,CAAC;AAC3G,CAAC;AACD,8GAA8G;AAC9G,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAKjH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAM,EAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAK9H,MAAM,OAAO,kBAAkB;IAGA,OAAO;IAFnB,GAAG,CAAS;IACpB,MAAM,CAAsB;IACrC,YAA6B,OAAkC;uBAAlC,OAAO;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7F,CAAC;IACO,GAAG,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,OAAO,EAAE,GAAG,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9E;+GAC2G;IACnG,OAAO,CAAC,EAAqB,EAAE,KAA8C;QACnF,MAAM,IAAI,GAAI,EAAE,CAAC,OAAO,CAAC;YACjB,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAA8B,CAAC;QACxI,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,sIAAsI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACjQ,MAAM,GAAG,GAAI,EAAE,CAAC,OAAO,CAAC,4FAA4F,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC;cAC1I,EAAE,CAAC,OAAO,CAAC,sGAAsG,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;QAClJ,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC9E,CAAC;IACD,0HAA0H;IAClH,YAAY,CAAC,EAAqB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,EAAE,CAAC,OAAO,CAAC,mGAAmG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzH,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC;QACjG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IACO,WAAW,CAAC,EAAqB;QACvC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,wHAAwH,CAAC,CAAC,GAAG,EAA0B,CAAC;QACnL,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAAC,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACzL,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IACD;qHACiH;IACjH,KAAK,CAAC,EAAqB,EAAE,KAA8C,EAAE,IAAY;QACvF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU;YAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACrI,CAAC;IACO,IAAI,CAAC,GAAW,EAAE,KAAa;QACrC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9G,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IACO,IAAI,CAAC,GAAW,EAAE,KAAa,EAAE,IAAY;QACnD,MAAM,CAAC,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;QACtI,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,uFAAuF;IACvF,SAAS,CAAC,EAAqB,EAAE,KAAa;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACtG,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAC/F,EAAE,CAAC,OAAO,CAAC,0EAA0E,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7H,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,qFAAqF,CAAC,CAAC;QACjH,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,oBAAoB,EAAE,CAAC;YAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,4BAA4B,MAAM,KAAK,GAAG,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7J,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,6DAA6D;IAC7D,KAAK,CAAC,EAAqB,EAAE,MAAc,EAAE,MAAc;QACzD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAiC,CAAC;QAC5H,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,MAAM,GAAG,oBAAoB,KAAK,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrJ,MAAM,GAAG,GAAG,MAAM,GAAG,oBAAoB,EAAE,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,gFAAgF,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAsD,CAAC;QACpN,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,4BAA4B,MAAM,KAAK,GAAG,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACxH,CAAC;IACD,kEAAkE;IAClE,IAAI,CAAC,EAAqB,EAAE,MAAc;QACxC,MAAM,KAAK,GAAa,EAAE,CAAC;QAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAC1C,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACvK,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAAC,OAAO,GAAG,CAAC;IACzI,CAAC;IAED,2GAA2G;IAC3G,YAAY,CAAC,EAAqB,EAAE,KAAwE;QAC1G,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,SAAS,IAAI,IAAI;YAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,UAAU,EAAE,CAAC;QACpF,EAAE,CAAC,OAAO,CAAC;qDACsC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,aAAa,CAAC,CAAC;QACtK,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC7F,CAAC;IACD,iHAAiH;IACjH,OAAO,CAAC,EAAqB,EAAE,MAAc,EAAE,QAAgB,EAAE,GAAsB;QACrF,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC9G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAoB,CAAC,CAAC;QAChI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACxM,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAE,CAAC,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC;IACd,CAAC;IACD,YAAY,CAAC,EAAqB,EAAE,IAAiC,EAAE,SAAiB,EAAE,OAAe;QACvG,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,gIAAgI,CAAC,CAAC;QAC1J,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/H,CAAC;IACD,oDAAoD;IACpD,UAAU,CAAC,EAAqB,EAAE,SAAiB,EAAE,SAAgC;QACnF,OAAQ,EAAE,CAAC,OAAO,CAAC,sGAAsG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5K,CAAC;IACD,GAAG,CAAC,EAAqB,EAAE,EAAU,IAAkC,OAAO,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAoB,CAAC,CAAC,CAAC;IAElK,0HAA0H;IAC1H,KAAK,CAAC,EAAqB,EAAE,OAAe,EAAE,CAA8E;QAC1H,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,oBAAoB,IAAI,CAAC,CAAC,MAAM,GAAG,oBAAoB,KAAK,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACnL,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAoB,CAAC;QACjG,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC1J,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAqB,0CAA0C;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,oBAAoB,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC;QACzF,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,oBAAoB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjI,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA8F,CAAC;QACzO,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAChJ,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpG,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAU,gCAAgC;YACnG,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAa,gDAAgD;YACrH,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAChF,EAAE,CAAC,OAAO,CAAC,6HAA6H,CAAC;iBACtI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACtC,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA0D;aAC9K,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACpG,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtE,2HAA2H;QAC3H,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACrG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1B,wGAAwG;QACxG,EAAE,CAAC,OAAO,CAAC;kDACmC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC;QAC/H,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IACD;0GACsG;IACtG,UAAU,CAAC,EAAqB,EAAE,IAAiC,EAAE,SAAiB,EAAE,MAAc,EAAE,OAAe;QACrH,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC9I,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACpB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAoB,CAAC;YAChG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC9J,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAAC,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACpL,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAK,qCAAqC;YACzH,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1F,IAAI,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACrF,EAAE,CAAC,OAAO,CAAC,8IAA8I,CAAC;iBACvJ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4GAA4G;IAC5G,KAAK,CAAC,EAAqB,EAAE,UAAkB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,uHAAuH,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC;QAC/K,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC;QACjG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;IAChD,CAAC;CACF;AACD,MAAM,OAAO,oBAAqB,SAAQ,gBAAgB;IACnC,OAAO;IAA5B,YAAqB,OAAwD;QAAI,KAAK,CAAC,SAAS,CAAC,CAAC;uBAA7E,OAAO;IAAuE,CAAC;CACrG"}

package/dist/hub/audit/index.d.ts

@@ -0,0 +1,62 @@
+/**
+ * S5b audit (S-51; docs/design/hub-composition.md §4). One hash-chained table per database (the Hub's, or a member's
+ * own), written synchronously inside the caller's transaction: if the append fails, the caller's transaction aborts,
+ * so nothing is accepted, disclosed or reported as changed without its record.
+ *
+ * - `sequence` is S5's own monotonic key; a caller's record.sequence (S1's store revision) is kept as component_sequence.
+ * - Question/answer text lives in hub_audit_content, AES-256-GCM under content.key; S5 generates every ref.
+ * - Reads: only the asked owner (owner_at_event) or an assigned auditor; every read appends its own record first.
+ * - Retention deletes a contiguous prefix of events and old content, keeping a checkpoint so the chain still verifies.
+ */
+import type Database from "better-sqlite3";
+import { type HubMigration } from "../db.js";
+import type { HubAuditRecord, HubAuditSink, HubTx, PersonKey } from "../types.js";
+export declare const HUB_AUDIT_MIGRATION: HubMigration;
+export declare class HubAuditAccessError extends Error {
+    constructor(message?: string);
+}
+export interface HubContentPayload {
+    question?: string;
+    answer?: string;
+    buttons?: import("../types.js").HubAnswerButtons;
+    pollBallot?: import("../types.js").HubPollBallot;
+}
+export interface HubContentStore {
+    /** Encrypt and store inside `tx`; returns the S5-generated ref to use as the record's contentRef. */
+    put(tx: HubTx, payload: HubContentPayload): string;
+    /** For S3's own room projection after its audience check. undefined once retention removed it. */
+    get(ref: string): HubContentPayload | undefined;
+}
+export interface HubAuditStore extends HubAuditSink {
+    /** S1's store bridge: append inside the caller's own transaction on this exact database. */
+    appendInTransaction(record: HubAuditRecord, database: Database.Database): void;
+    readonly content: HubContentStore;
+    /** Walk the chain from the latest checkpoint; reports the first sequence whose hash does not match. */
+    verifyChain(): {
+        ok: true;
+        checked: number;
+    } | {
+        ok: false;
+        sequence: number;
+    };
+    /** Assign or remove a security auditor (the change is itself audited, inside the same transaction). */
+    setAuditor(tx: HubTx, person: PersonKey, assigned: boolean, by: HubAuditRecord["actor"], requestId: string): void;
+    /**
+     * Apply retention: content older than contentDays; a contiguous prefix of events older than eventDays, stopping at
+     * the first one `retained` keeps (unresolved dedup/revocation evidence).
+     */
+    purge(retention: {
+        contentDays: number;
+        eventDays: number;
+    }, retained?: (record: HubAuditRecord) => boolean): {
+        content: number;
+        events: number;
+    };
+}
+export interface HubAuditOptions {
+    db: Database.Database;
+    /** 32 random bytes from the private content key file. */
+    contentKey: Buffer;
+    now?: () => number;
+}
+export declare function createHubAudit(options: HubAuditOptions): HubAuditStore;