@spfn/auth 0.2.0-beta.87 → 0.2.0-beta.88

package/dist/client-proof.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server/client-proof/canonical-json.ts","../src/server/client-proof/proof.ts","../src/server/client-proof/refusal.ts","../src/server/client-proof/replay-store.ts","../src/server/client-proof/state.ts","../src/server/client-proof/admission.ts","../src/server/client-proof/contract-types.ts","../src/server/client-proof/dev-control.ts","../src/server/client-proof/dev-handler.ts","../src/server/client-proof/guard.ts"],"sourcesContent":["/**\n * SPFN-CANON-JSON-1 — the canonical JSON form the mobile contract pins.\n *\n * The rules (contracts/mobile/spfn-mobile-contract.json `canonicalJson`):\n * - object keys sorted ascending by UTF-8 byte sequence\n * - no insignificant whitespace\n * - numbers are signed 64-bit integers only\n * - string escapes: `\"` and `\\` escaped; C0 controls use \\b \\f \\n \\r \\t where\n *   defined and lowercase \\u00XX otherwise; every other scalar is emitted\n *   literally as UTF-8\n * - absent optional fields are omitted, never null\n *\n * JSON.parse cannot implement this: it loses int64 precision, accepts duplicate\n * keys and (in V8) raw control characters, so both directions are hand-rolled.\n * A proof binds the received bytes — parse-then-re-encode equality is what makes\n * canonicity a rule a client can actually break.\n *\n * @module server/client-proof/canonical-json\n */\n\nexport type CanonicalObject = Map<string, CanonicalValue>;\n\nexport type CanonicalValue = null | boolean | bigint | string | CanonicalValue[] | CanonicalObject;\n\n/**\n * Parse failures carry the code the mobile conformance fixtures name\n * (Contracts/fixtures/canonical/rejects.json), so the fixtures can assert on it.\n */\nexport type CanonicalJsonErrorCode =\n    | 'DUPLICATE_KEY'\n    | 'NON_INTEGER_NUMBER'\n    | 'TRAILING_CONTENT'\n    | 'UNEXPECTED_END'\n    | 'INVALID_TOKEN'\n    | 'INVALID_ESCAPE'\n    | 'INTEGER_OUT_OF_RANGE'\n    | 'INVALID_UTF8';\n\nexport class CanonicalJsonError extends Error\n{\n    constructor(readonly code: CanonicalJsonErrorCode)\n    {\n        super(`canonical JSON: ${code}`);\n        this.name = 'CanonicalJsonError';\n    }\n}\n\nconst INT64_MIN = -(2n ** 63n);\nconst INT64_MAX = 2n ** 63n - 1n;\n\n// ============================================================================\n// Parsing\n// ============================================================================\n\n/**\n * Parse bytes as SPFN-CANON-JSON-1.\n *\n * Arbitrary whitespace and key order are accepted here — parsing alone proves\n * nothing about canonicity. Callers that must enforce it re-encode the result\n * and compare bytes (see `isCanonicalBytes`).\n */\nexport function parseCanonicalJson(bytes: Uint8Array): CanonicalValue\n{\n    let text: string;\n    try\n    {\n        text = new TextDecoder('utf-8', { fatal: true }).decode(bytes);\n    }\n    catch\n    {\n        throw new CanonicalJsonError('INVALID_UTF8');\n    }\n\n    const parser = new Parser(text);\n    const value = parser.parseValue();\n    parser.skipWhitespace();\n    if (!parser.atEnd())\n    {\n        throw new CanonicalJsonError('TRAILING_CONTENT');\n    }\n\n    return value;\n}\n\n/** True when `bytes` are exactly the canonical encoding of the value they parse to. */\nexport function isCanonicalBytes(bytes: Uint8Array, value: CanonicalValue): boolean\n{\n    const encoded = encodeCanonicalJson(value);\n    if (encoded.length !== bytes.length)\n    {\n        return false;\n    }\n    for (let i = 0; i < encoded.length; i++)\n    {\n        if (encoded[i] !== bytes[i])\n        {\n            return false;\n        }\n    }\n\n    return true;\n}\n\nclass Parser\n{\n    private pos = 0;\n\n    constructor(private readonly text: string) \n    {}\n\n    atEnd(): boolean\n    {\n        return this.pos >= this.text.length;\n    }\n\n    skipWhitespace(): void\n    {\n        while (!this.atEnd())\n        {\n            const c = this.text[this.pos];\n            if (c === ' ' || c === '\\t' || c === '\\n' || c === '\\r')\n            {\n                this.pos++;\n                continue;\n            }\n            break;\n        }\n    }\n\n    parseValue(): CanonicalValue\n    {\n        this.skipWhitespace();\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        const c = this.text[this.pos];\n        if (c === '{')\n        {\n            return this.parseObject();\n        }\n        if (c === '[')\n        {\n            return this.parseArray();\n        }\n        if (c === '\"')\n        {\n            return this.parseString();\n        }\n        if (c === '-' || (c >= '0' && c <= '9'))\n        {\n            return this.parseNumber();\n        }\n        if (this.text.startsWith('null', this.pos))\n        {\n            this.pos += 4;\n\n            return null;\n        }\n        if (this.text.startsWith('true', this.pos))\n        {\n            this.pos += 4;\n\n            return true;\n        }\n        if (this.text.startsWith('false', this.pos))\n        {\n            this.pos += 5;\n\n            return false;\n        }\n        throw new CanonicalJsonError('INVALID_TOKEN');\n    }\n\n    private parseObject(): CanonicalObject\n    {\n        this.pos++; // '{'\n        const members: CanonicalObject = new Map();\n        this.skipWhitespace();\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        if (this.text[this.pos] === '}')\n        {\n            this.pos++;\n\n            return members;\n        }\n        for (;;)\n        {\n            this.skipWhitespace();\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            if (this.text[this.pos] !== '\"')\n            {\n                throw new CanonicalJsonError('INVALID_TOKEN');\n            }\n            const key = this.parseString();\n            if (members.has(key))\n            {\n                throw new CanonicalJsonError('DUPLICATE_KEY');\n            }\n            this.skipWhitespace();\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            if (this.text[this.pos] !== ':')\n            {\n                throw new CanonicalJsonError('INVALID_TOKEN');\n            }\n            this.pos++;\n            members.set(key, this.parseValue());\n            this.skipWhitespace();\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            const next = this.text[this.pos];\n            if (next === ',')\n            {\n                this.pos++;\n                continue;\n            }\n            if (next === '}')\n            {\n                this.pos++;\n\n                return members;\n            }\n            throw new CanonicalJsonError('INVALID_TOKEN');\n        }\n    }\n\n    private parseArray(): CanonicalValue[]\n    {\n        this.pos++; // '['\n        const items: CanonicalValue[] = [];\n        this.skipWhitespace();\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        if (this.text[this.pos] === ']')\n        {\n            this.pos++;\n\n            return items;\n        }\n        for (;;)\n        {\n            items.push(this.parseValue());\n            this.skipWhitespace();\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            const next = this.text[this.pos];\n            if (next === ',')\n            {\n                this.pos++;\n                continue;\n            }\n            if (next === ']')\n            {\n                this.pos++;\n\n                return items;\n            }\n            throw new CanonicalJsonError('INVALID_TOKEN');\n        }\n    }\n\n    private parseString(): string\n    {\n        this.pos++; // '\"'\n        let out = '';\n        for (;;)\n        {\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            const c = this.text[this.pos];\n            const code = this.text.charCodeAt(this.pos);\n            if (c === '\"')\n            {\n                this.pos++;\n\n                return out;\n            }\n            if (c === '\\\\')\n            {\n                out += this.parseEscape();\n                continue;\n            }\n            if (code < 0x20)\n            {\n                throw new CanonicalJsonError('INVALID_TOKEN');\n            }\n            out += c;\n            this.pos++;\n        }\n    }\n\n    private parseEscape(): string\n    {\n        this.pos++; // '\\'\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        const c = this.text[this.pos];\n        this.pos++;\n        switch (c)\n        {\n            case '\"': return '\"';\n            case '\\\\': return '\\\\';\n            case '/': return '/';\n            case 'b': return '\\b';\n            case 'f': return '\\f';\n            case 'n': return '\\n';\n            case 'r': return '\\r';\n            case 't': return '\\t';\n            case 'u': return this.parseUnicodeEscape();\n            default: throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n    }\n\n    private parseUnicodeEscape(): string\n    {\n        const high = this.readHex4();\n        if (high >= 0xdc00 && high <= 0xdfff)\n        {\n            // A low surrogate with no preceding high surrogate.\n            throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n        if (high < 0xd800 || high > 0xdbff)\n        {\n            return String.fromCharCode(high);\n        }\n        // A high surrogate must be completed by an escaped low surrogate.\n        if (this.text[this.pos] !== '\\\\' || this.text[this.pos + 1] !== 'u')\n        {\n            throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n        this.pos += 2;\n        const low = this.readHex4();\n        if (low < 0xdc00 || low > 0xdfff)\n        {\n            throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n\n        return String.fromCharCode(high, low);\n    }\n\n    private readHex4(): number\n    {\n        if (this.pos + 4 > this.text.length)\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        const hex = this.text.slice(this.pos, this.pos + 4);\n        if (!/^[0-9a-fA-F]{4}$/.test(hex))\n        {\n            throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n        this.pos += 4;\n\n        return parseInt(hex, 16);\n    }\n\n    private parseNumber(): bigint\n    {\n        const start = this.pos;\n        if (this.text[this.pos] === '-')\n        {\n            this.pos++;\n        }\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        const first = this.text[this.pos];\n        if (first < '0' || first > '9')\n        {\n            throw new CanonicalJsonError('INVALID_TOKEN');\n        }\n        if (first === '0')\n        {\n            this.pos++;\n        }\n        else\n        {\n            while (!this.atEnd() && this.text[this.pos] >= '0' && this.text[this.pos] <= '9')\n            {\n                this.pos++;\n            }\n        }\n        if (!this.atEnd())\n        {\n            const next = this.text[this.pos];\n            if (next >= '0' && next <= '9')\n            {\n                // A leading zero followed by more digits.\n                throw new CanonicalJsonError('INVALID_TOKEN');\n            }\n            if (next === '.' || next === 'e' || next === 'E')\n            {\n                throw new CanonicalJsonError('NON_INTEGER_NUMBER');\n            }\n        }\n        const value = BigInt(this.text.slice(start, this.pos));\n        if (value < INT64_MIN || value > INT64_MAX)\n        {\n            throw new CanonicalJsonError('INTEGER_OUT_OF_RANGE');\n        }\n\n        return value;\n    }\n}\n\n// ============================================================================\n// Encoding\n// ============================================================================\n\n/** Encode a value as SPFN-CANON-JSON-1 bytes. */\nexport function encodeCanonicalJson(value: CanonicalValue): Uint8Array\n{\n    return new TextEncoder().encode(encodeToString(value));\n}\n\nfunction encodeToString(value: CanonicalValue): string\n{\n    if (value === null)\n    {\n        return 'null';\n    }\n    if (typeof value === 'boolean')\n    {\n        return value ? 'true' : 'false';\n    }\n    if (typeof value === 'bigint')\n    {\n        return value.toString();\n    }\n    if (typeof value === 'string')\n    {\n        return encodeString(value);\n    }\n    if (Array.isArray(value))\n    {\n        return `[${value.map(encodeToString).join(',')}]`;\n    }\n    const keys = [...value.keys()].sort(compareByCodePoints);\n    const members = keys.map((key) => `${encodeString(key)}:${encodeToString(value.get(key)!)}`);\n\n    return `{${members.join(',')}}`;\n}\n\n/**\n * UTF-8 byte order equals code point order, so keys are compared by code\n * points rather than UTF-16 code units (which would misorder U+E000..U+FFFF\n * against supplementary-plane characters).\n */\nfunction compareByCodePoints(a: string, b: string): number\n{\n    let i = 0;\n    let j = 0;\n    while (i < a.length && j < b.length)\n    {\n        const ca = a.codePointAt(i)!;\n        const cb = b.codePointAt(j)!;\n        if (ca !== cb)\n        {\n            return ca - cb;\n        }\n        i += ca > 0xffff ? 2 : 1;\n        j += cb > 0xffff ? 2 : 1;\n    }\n\n    return (a.length - i) - (b.length - j);\n}\n\nfunction encodeString(value: string): string\n{\n    let out = '\"';\n    for (const ch of value)\n    {\n        const code = ch.codePointAt(0)!;\n        if (ch === '\"')\n        {\n            out += '\\\\\"';\n        }\n        else if (ch === '\\\\')\n        {\n            out += '\\\\\\\\';\n        }\n        else if (code === 0x08)\n        {\n            out += '\\\\b';\n        }\n        else if (code === 0x0c)\n        {\n            out += '\\\\f';\n        }\n        else if (code === 0x0a)\n        {\n            out += '\\\\n';\n        }\n        else if (code === 0x0d)\n        {\n            out += '\\\\r';\n        }\n        else if (code === 0x09)\n        {\n            out += '\\\\t';\n        }\n        else if (code < 0x20)\n        {\n            out += `\\\\u00${code.toString(16).padStart(2, '0')}`;\n        }\n        else\n        {\n            out += ch;\n        }\n    }\n\n    return out + '\"';\n}\n","/**\n * SPFN-PROOF-INPUT-1 — proof-input assembly and verification for clientProofV1.\n *\n * The proof input is 8 fields joined by `\\n` in fixed order: profile, method,\n * path, clientId, keyId, nonce, issuedAtMillis, bodySha256. Any C0 control\n * character in any field is a hard refusal (the separator would otherwise be\n * ambiguous), never something to escape. The proof is an ECDSA P-256 signature\n * with SHA-256 over the canonical input's UTF-8 bytes, wire-encoded as the raw\n * `r ‖ s` 64 bytes in base16-lower (128 hex characters). DER is never accepted\n * on the wire: a platform signer that emits DER (Java `Signature`) converts to\n * raw before sending. Low-S normalization is not required — uniqueness is owned\n * by the nonce and replay window, so signature malleability cannot replay.\n *\n * @module server/client-proof/proof\n */\nimport { createHash, createPrivateKey, createPublicKey, sign, verify, type KeyObject } from 'node:crypto';\n\n/** The only auth profile this module implements. */\nexport const CLIENT_PROOF_PROFILE = 'clientProofV1';\n\n/** `bodySha256` when an operation carries no body: 64 zero characters. */\nexport const ABSENT_BODY_SHA256 = '0'.repeat(64);\n\n/** The contract's `clientProofV1.replayWindowMillis`. */\nexport const DEFAULT_REPLAY_WINDOW_MILLIS = 300_000;\n\n/** The eight proof-input fields, in the order the signature is taken over. */\nexport const PROOF_INPUT_FIELDS = [\n    'profile',\n    'method',\n    'path',\n    'clientId',\n    'keyId',\n    'nonce',\n    'issuedAtMillis',\n    'bodySha256',\n] as const;\n\n/** What joins the proof-input fields. */\nexport const PROOF_INPUT_SEPARATOR = '\\n';\n\n/** Raw `r ‖ s`: two 32-byte big-endian integers, always exactly this long. */\nexport const PROOF_SIGNATURE_BYTES = 64;\n\n/** The wire form is base16-lower of the raw signature: 128 hex characters. */\nexport const PROOF_SIGNATURE_HEX_LENGTH = PROOF_SIGNATURE_BYTES * 2;\n\n/**\n * Exactly 128 lowercase hex characters — anything else (DER, uppercase,\n * truncated, padded) is not a proof this contract describes.\n */\nconst PROOF_SIGNATURE_PATTERN = /^[0-9a-f]{128}$/;\n\n/**\n * Node's name for the fixed-width raw `r ‖ s` signature encoding. Both signing\n * and verification pin it, so the r/s padding rules (a 32-byte length is\n * guaranteed, a would-be 33-byte DER integer is trimmed) live inside\n * node:crypto rather than in a hand-rolled DER converter.\n */\nconst RAW_SIGNATURE_ENCODING = 'ieee-p1363';\n\ntype ProofInputField = (typeof PROOF_INPUT_FIELDS)[number];\n\nexport interface ClientProofInput\n{\n    method: string;\n    path: string;\n    clientId: string;\n    keyId: string;\n    nonce: string;\n    issuedAtMillis: bigint;\n    bodySha256: string;\n}\n\n/** A C0 control character appeared in a proof field. */\nexport class ProofInputError extends Error\n{\n    constructor()\n    {\n        super('proof input field contains a C0 control character');\n        this.name = 'ProofInputError';\n    }\n}\n\n/**\n * The canonical proof-input string the signature is taken over.\n *\n * @throws ProofInputError when any field contains a C0 control character.\n */\nexport function canonicalProofInput(input: ClientProofInput): string\n{\n    const values: Record<ProofInputField, string> = {\n        profile: CLIENT_PROOF_PROFILE,\n        method: input.method,\n        path: input.path,\n        clientId: input.clientId,\n        keyId: input.keyId,\n        nonce: input.nonce,\n        issuedAtMillis: input.issuedAtMillis.toString(),\n        bodySha256: input.bodySha256,\n    };\n    const fields = PROOF_INPUT_FIELDS.map((name) => values[name]);\n    for (const field of fields)\n    {\n        for (const ch of field)\n        {\n            if (ch.codePointAt(0)! < 0x20)\n            {\n                throw new ProofInputError();\n            }\n        }\n    }\n\n    return fields.join(PROOF_INPUT_SEPARATOR);\n}\n\n/**\n * The contract's public-key representation — SPKI DER, base64 (the same\n * representation `user_public_keys` and the web ES256 path store) — as a key\n * object. Anything that is not a P-256 EC key is refused at parse time, so a\n * key that could never verify a proof is never registered.\n *\n * @throws when the input is not base64 SPKI DER naming a P-256 key.\n */\nexport function parseClientProofPublicKey(spkiDerBase64: string): KeyObject\n{\n    const key = createPublicKey({\n        key: Buffer.from(spkiDerBase64, 'base64'),\n        format: 'der',\n        type: 'spki',\n    });\n    if (key.asymmetricKeyType !== 'ec' || key.asymmetricKeyDetails?.namedCurve !== 'prime256v1')\n    {\n        throw new Error('a clientProofV1 public key must be an ECDSA P-256 key');\n    }\n\n    return key;\n}\n\n/**\n * Verifies a presented proof against `input` and a registered public key.\n *\n * The input is assembled first, so a C0 control character throws no matter\n * what was presented — an unassemblable input is a contract violation, never\n * a proof answer. Then the wire-format gate: a value that is not exactly 128\n * lowercase hex characters — a DER signature, a truncated one, uppercase hex —\n * is invalid before any cryptography happens.\n *\n * @throws ProofInputError when an input field contains a C0 control character.\n */\nexport function verifyClientProof(input: ClientProofInput, presentedProof: string, publicKey: KeyObject): boolean\n{\n    const data = Buffer.from(canonicalProofInput(input), 'utf8');\n    if (!PROOF_SIGNATURE_PATTERN.test(presentedProof))\n    {\n        return false;\n    }\n\n    return verify(\n        'sha256',\n        data,\n        { key: publicKey, dsaEncoding: RAW_SIGNATURE_ENCODING },\n        Buffer.from(presentedProof, 'hex'),\n    );\n}\n\n/**\n * Signs `input` with a PKCS#8 DER base64 private key, producing the wire form\n * (raw `r ‖ s`, base16-lower).\n *\n * The verifying half's counterpart, here for tests and dev clients — a\n * production signer lives in the mobile SDKs against hardware-held keys.\n */\nexport function signClientProof(input: ClientProofInput, privateKeyPkcs8DerBase64: string): string\n{\n    const key = createPrivateKey({\n        key: Buffer.from(privateKeyPkcs8DerBase64, 'base64'),\n        format: 'der',\n        type: 'pkcs8',\n    });\n\n    return sign(\n        'sha256',\n        Buffer.from(canonicalProofInput(input), 'utf8'),\n        { key, dsaEncoding: RAW_SIGNATURE_ENCODING },\n    ).toString('hex');\n}\n\n/** Lowercase base16 SHA-256 of `bytes`. */\nexport function sha256Hex(bytes: Uint8Array): string\n{\n    return createHash('sha256').update(bytes).digest('hex');\n}\n","/**\n * Every way a clientProofV1 server refuses a request.\n *\n * The contract declares six error codes and forbids inventing a seventh, so\n * every refusal here is one of the six. Two rules decide which code a refusal\n * gets (mirroring the spfn-mobile reference server, the executable spec):\n *\n * 1. A refusal a new session could clear is an auth-family code (401). The SDK\n *    re-handshakes exactly once on those.\n * 2. Everything else — the request is not the shape the contract describes —\n *    is CONTRACT_UNSUPPORTED: the two ends do not agree on what the contract\n *    is. PROOF_INVALID would provoke a pointless re-handshake and\n *    PROFILE_REJECTED names one specific thing (a profile outside the\n *    allowlist), used for exactly and only that.\n *\n * Every message is a fixed string: a message assembled from the request would\n * put a nonce, session id or body fragment into an error the client may log.\n *\n * @module server/client-proof/refusal\n */\nimport { randomBytes } from 'node:crypto';\n\nimport { encodeCanonicalJson, type CanonicalObject, type CanonicalValue } from './canonical-json';\n\n/** The six wire codes. The SDKs classify by code, never HTTP status. */\nexport type ClientProofErrorCode =\n    | 'PROOF_INVALID'\n    | 'PROOF_REPLAYED'\n    | 'PROOF_EXPIRED'\n    | 'SESSION_REVOKED'\n    | 'PROFILE_REJECTED'\n    | 'CONTRACT_UNSUPPORTED';\n\n/** The declaration order of the six codes — the contract export emits this order. */\nexport const CLIENT_PROOF_ERROR_CODES: readonly ClientProofErrorCode[] = [\n    'PROOF_INVALID',\n    'PROOF_REPLAYED',\n    'PROOF_EXPIRED',\n    'SESSION_REVOKED',\n    'PROFILE_REJECTED',\n    'CONTRACT_UNSUPPORTED',\n];\n\n/** The status each code answers with. The contract export reads this. */\nexport const HTTP_STATUS: Record<ClientProofErrorCode, number> = {\n    PROOF_INVALID: 401,\n    PROOF_REPLAYED: 401,\n    PROOF_EXPIRED: 401,\n    SESSION_REVOKED: 401,\n    PROFILE_REJECTED: 400,\n    CONTRACT_UNSUPPORTED: 409,\n};\n\n/** 128 random bits as lowercase base16 — request ids and control tokens. */\nexport function newHexId(): string\n{\n    return randomBytes(16).toString('hex');\n}\n\nexport class ClientProofRefusal\n{\n    constructor(\n        readonly code: ClientProofErrorCode,\n        readonly message: string,\n    ) \n    {}\n\n    get httpStatus(): number\n    {\n        return HTTP_STATUS[this.code];\n    }\n\n    /** The canonical bytes of `{\"error\":{\"code\":…,\"message\":…,\"requestId\":…}}`. */\n    envelopeBytes(requestId: string): Uint8Array\n    {\n        const error: CanonicalObject = new Map<string, CanonicalValue>([\n            ['code', this.code],\n            ['message', this.message],\n            ['requestId', requestId],\n        ]);\n\n        return encodeCanonicalJson(new Map<string, CanonicalValue>([['error', error]]));\n    }\n\n    /** Nothing request-derived reaches a log through this. */\n    toString(): string\n    {\n        return `ClientProofRefusal(${this.code})`;\n    }\n\n    // ---- shape: what arrived is not the contract (rule 2) -------------------\n\n    static unroutable(): ClientProofRefusal\n    {\n        return contractViolation('no operation in this contract answers that method and path');\n    }\n\n    static malformedHeaders(): ClientProofRefusal\n    {\n        return contractViolation('the request does not carry the contract header fields exactly once each');\n    }\n\n    static missingContentType(): ClientProofRefusal\n    {\n        return contractViolation('a request that carries a body must declare the contract content type');\n    }\n\n    static bodyTooLarge(): ClientProofRefusal\n    {\n        return contractViolation('the request body exceeds the size this server accepts');\n    }\n\n    /**\n     * The body parsed but its bytes are not the canonical form of what it\n     * parsed to. Not PROOF_INVALID even though it is discovered next to the\n     * proof: the proof over these bytes verifies perfectly well, and an\n     * auth-family answer would tell the client to re-handshake and send the\n     * same non-canonical bytes again.\n     */\n    static bodyNotCanonical(): ClientProofRefusal\n    {\n        return contractViolation('the request body is not the canonical JSON form of the value it encodes');\n    }\n\n    static bodyNotTheDeclaredType(): ClientProofRefusal\n    {\n        return contractViolation('the request body is not the request type this operation declares');\n    }\n\n    static sessionHeaderMisplaced(): ClientProofRefusal\n    {\n        return contractViolation('the session header is present exactly on the operations that require one');\n    }\n\n    static unprocessable(): ClientProofRefusal\n    {\n        return contractViolation('the request could not be processed');\n    }\n\n    // ---- the profile allowlist ----------------------------------------------\n\n    static profileRejected(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('PROFILE_REJECTED', \"the named auth profile is not on this contract's allowlist\");\n    }\n\n    // ---- auth: a new session might clear it (rule 1) -------------------------\n\n    static sessionRevoked(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('SESSION_REVOKED', 'the key or session was revoked');\n    }\n\n    static proofExpired(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('PROOF_EXPIRED', 'issuedAtMillis falls outside the replay window');\n    }\n\n    static proofReplayed(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('PROOF_REPLAYED', 'the nonce was already used inside the replay window');\n    }\n\n    static proofInvalid(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('PROOF_INVALID', 'the client proof did not verify');\n    }\n}\n\nfunction contractViolation(message: string): ClientProofRefusal\n{\n    return new ClientProofRefusal('CONTRACT_UNSUPPORTED', message);\n}\n","/**\n * The clientProofV1 replay ledger as a pluggable store — the same pattern\n * one-time-token uses: an in-memory default, an opt-in Redis/Valkey store on\n * top of `getCache()`, and a module-level configuration hook.\n *\n * One data structure owns the memory semantics: `MemoryReplayLedger` is used\n * synchronously by the dev surface's `ClientProofState` (whose `admit` must\n * stay synchronous to keep its single-thread atomicity argument) and wrapped\n * by `MemoryReplayStore` for the async middleware path. There is exactly one\n * implementation of \"spent inside the window\", not two.\n *\n * The nonce-spending rule is the contract's: a nonce is recorded only when a\n * request is admitted, so `isSpent` (the replay-order check) and `spend` (the\n * post-verification record) are separate calls. `spend` is check-and-set — it\n * answers false when another request spent the nonce between the two calls —\n * so the race two concurrent same-nonce requests can open is closed at the\n * store, for memory and Redis alike.\n *\n * Store failure is the caller's refusal, never a pass-through: the middleware\n * path treats a throwing store as \"reject the request\" (fail-closed). An auth\n * surface does not fail open.\n *\n * @module server/client-proof/replay-store\n */\nimport { getCache } from '@spfn/core/cache';\n\nimport { DEFAULT_REPLAY_WINDOW_MILLIS, sha256Hex } from './proof';\n\n/**\n * The ledger key. `JSON.stringify` of the pair, so no crafted clientId/nonce\n * concatenation can collide with another pair — the fields are checked for C0\n * controls only later, at proof verification, so the key must be unambiguous\n * for arbitrary strings.\n */\nexport function replayLedgerKey(clientId: string, nonce: string): string\n{\n    return JSON.stringify([clientId, nonce]);\n}\n\n/**\n * What the middleware's replay ledger must answer. Both methods may reject;\n * the caller refuses the request when they do (fail-closed).\n */\nexport interface ClientProofReplayStore\n{\n    /** True when (clientId, nonce) was already spent inside the window. */\n    isSpent(clientId: string, nonce: string): Promise<boolean>;\n\n    /**\n     * Records the pair as spent. False when it was already spent — the caller\n     * lost a race and must answer PROOF_REPLAYED, not accept twice.\n     */\n    spend(clientId: string, nonce: string): Promise<boolean>;\n}\n\n/**\n * The in-memory ledger — the single implementation of the window semantics.\n *\n * Entries carry the millisecond they were recorded at; `prune` drops an entry\n * only once a proof carrying that timestamp would be refused as expired\n * anyway (the exact negation of the admission window check). All methods are\n * synchronous so `ClientProofState.admit` can stay atomic on Node's single\n * thread.\n */\nexport class MemoryReplayLedger\n{\n    /** replayLedgerKey(...) → the millis it was spent at. */\n    private readonly spent = new Map<string, number>();\n\n    isSpent(clientId: string, nonce: string): boolean\n    {\n        return this.spent.has(replayLedgerKey(clientId, nonce));\n    }\n\n    /** Records the pair at `atMillis`; false when it was already spent. */\n    spend(clientId: string, nonce: string, atMillis: number): boolean\n    {\n        const key = replayLedgerKey(clientId, nonce);\n        if (this.spent.has(key))\n        {\n            return false;\n        }\n        this.spent.set(key, atMillis);\n\n        return true;\n    }\n\n    /** Drops entries older than the window, judged against `nowMillis`. */\n    prune(nowMillis: number, windowMillis: number): void\n    {\n        for (const [key, spentAtMillis] of this.spent)\n        {\n            if (nowMillis - spentAtMillis > windowMillis)\n            {\n                this.spent.delete(key);\n            }\n        }\n    }\n\n    get size(): number\n    {\n        return this.spent.size;\n    }\n\n    clear(): void\n    {\n        this.spent.clear();\n    }\n}\n\n/**\n * The default store: a process-local `MemoryReplayLedger` on the wall clock.\n *\n * Correct for a single process. Behind a multi-instance deployment each\n * instance keeps its own ledger, so a replay against a *different* instance\n * is not seen — that deployment opts into `RedisReplayStore`.\n */\nexport class MemoryReplayStore implements ClientProofReplayStore\n{\n    private readonly ledger = new MemoryReplayLedger();\n\n    constructor(private readonly windowMillis: number = DEFAULT_REPLAY_WINDOW_MILLIS)\n    {}\n\n    async isSpent(clientId: string, nonce: string): Promise<boolean>\n    {\n        this.ledger.prune(Date.now(), this.windowMillis);\n\n        return this.ledger.isSpent(clientId, nonce);\n    }\n\n    async spend(clientId: string, nonce: string): Promise<boolean>\n    {\n        const now = Date.now();\n        this.ledger.prune(now, this.windowMillis);\n\n        return this.ledger.spend(clientId, nonce, now);\n    }\n}\n\n/**\n * The opt-in shared ledger over `getCache()` (ioredis): `SET NX PX <window>`.\n *\n * The key hashes the pair, so arbitrary clientId/nonce strings become short,\n * safe Redis keys with no ambiguity. `PX` makes Redis expire the entry itself\n * exactly when a proof reusing the nonce would pass the window check again.\n *\n * Fail-closed by construction: when the cache is not configured or a command\n * rejects, the error propagates and the caller refuses the request. Nothing\n * here answers \"not spent\" on a store it could not reach.\n */\nexport class RedisReplayStore implements ClientProofReplayStore\n{\n    constructor(private readonly windowMillis: number = DEFAULT_REPLAY_WINDOW_MILLIS)\n    {}\n\n    async isSpent(clientId: string, nonce: string): Promise<boolean>\n    {\n        return await this.cache().exists(this.key(clientId, nonce)) === 1;\n    }\n\n    async spend(clientId: string, nonce: string): Promise<boolean>\n    {\n        return await this.cache().set(this.key(clientId, nonce), '1', 'PX', this.windowMillis, 'NX') === 'OK';\n    }\n\n    private cache(): NonNullable<ReturnType<typeof getCache>>\n    {\n        const cache = getCache();\n        if (!cache)\n        {\n            throw new Error('client-proof replay ledger: cache is not available');\n        }\n\n        return cache;\n    }\n\n    private key(clientId: string, nonce: string): string\n    {\n        return `spfn:auth:client-proof:replay:${sha256Hex(Buffer.from(replayLedgerKey(clientId, nonce), 'utf8'))}`;\n    }\n}\n\n// ---- module-level configuration (the one-time-token pattern) ---------------\n\nlet configured: ClientProofReplayStore | null = null;\n\n/**\n * Installs the replay store the authenticate middleware uses. Pass\n * `new RedisReplayStore()` to opt into the shared ledger; pass null to return\n * to the in-memory default.\n */\nexport function configureClientProofReplayStore(store: ClientProofReplayStore | null): void\n{\n    configured = store;\n}\n\n/** The configured store, or a lazily created in-memory default. */\nexport function getClientProofReplayStore(): ClientProofReplayStore\n{\n    configured ??= new MemoryReplayStore();\n\n    return configured;\n}\n","/**\n * Everything a clientProofV1 server remembers between requests: issued\n * sessions, the replay ledger, revoked keys and the key directory.\n *\n * The admission order is the contract's, not this file's invention\n * (`clientProofV1.revocationRule` + the replay fixtures):\n *\n * 1. revoked keyId / invalid session → SESSION_REVOKED — before proof\n *    verification, so revocation stays distinguishable from a bad proof;\n * 2. issuedAtMillis outside the replay window (0 <= age <= window) → PROOF_EXPIRED;\n * 3. a repeated (clientId, nonce) pair inside the window → PROOF_REPLAYED;\n * 4. only then signature verification → PROOF_INVALID when it does not verify.\n *\n * A nonce is recorded as spent only on admission: a request refused for any\n * earlier reason has not spent anything, so a client that fixes the reason and\n * retries with the same nonce is not punished twice for one mistake. This is\n * why core's `NonceStore.checkAndSet` (which records on check) is not reused\n * here — its semantics would spend a nonce on a refused request.\n *\n * `admit` is synchronous, so on Node's single thread the whole sequence is\n * atomic: two requests presenting the same nonce cannot interleave inside it.\n *\n * @module server/client-proof/state\n */\nimport type { KeyObject } from 'node:crypto';\n\nimport {\n    DEFAULT_REPLAY_WINDOW_MILLIS,\n    parseClientProofPublicKey,\n    verifyClientProof,\n    type ClientProofInput,\n} from './proof';\nimport { ClientProofRefusal, newHexId } from './refusal';\nimport { MemoryReplayLedger } from './replay-store';\n\n/** Millisecond clock. Injectable so expiry paths are testable without waiting. */\nexport interface ClientProofClock\n{\n    nowMillis(): number;\n}\n\nexport function systemClock(): ClientProofClock\n{\n    return { nowMillis: () => Date.now() };\n}\n\n/** A clock a test (or the dev control surface) can move forward. */\nexport class TestClock implements ClientProofClock\n{\n    constructor(private millis: number) \n    {}\n\n    nowMillis(): number\n    {\n        return this.millis;\n    }\n\n    advance(byMillis: number): void\n    {\n        this.millis += byMillis;\n    }\n}\n\n/** What `stats()` reports. Counters only; nothing a request carried. */\nexport interface ClientProofStats\n{\n    requestCount: number;\n    handshakeCount: number;\n    echoCount: number;\n    itemsListCount: number;\n    refusalCount: number;\n    liveSessionCount: number;\n    spentNonceCount: number;\n}\n\ninterface ClientProofSession\n{\n    clientId: string;\n    keyId: string;\n    expiresAtMillis: number;\n}\n\ninterface PathHold\n{\n    millis: number;\n    remaining: number;\n}\n\nexport interface ClientProofStateOptions\n{\n    /**\n     * keyId → registered public key, as SPKI DER base64. The private half\n     * never reaches the server: a client generates its keypair (hardware-held\n     * on mobile) and only the public key is registered — at construction here,\n     * or later through `registerPublicKey` (the dev `/control/register-key`\n     * route).\n     */\n    publicKeys: Record<string, string>;\n\n    clock?: ClientProofClock;\n\n    /** @default 600000 */\n    sessionTtlMillis?: number;\n\n    /** The contract's replay window. @default 300000 */\n    replayWindowMillis?: number;\n}\n\nexport const DEFAULT_SESSION_TTL_MILLIS = 600_000;\n\nexport class ClientProofState\n{\n    readonly replayWindowMillis: number;\n\n    private readonly clock: ClientProofClock;\n    private readonly initialPublicKeys: ReadonlyMap<string, KeyObject>;\n    private readonly publicKeys = new Map<string, KeyObject>();\n    private readonly sessions = new Map<string, ClientProofSession>();\n\n    /** The replay ledger — the shared memory implementation, used dev-only here. */\n    private readonly spentNonces = new MemoryReplayLedger();\n\n    private readonly revokedKeyIds = new Set<string>();\n    private readonly holds = new Map<string, PathHold>();\n\n    private readonly initialSessionTtlMillis: number;\n    private sessionTtlMillis: number;\n\n    private requestCount = 0;\n    private handshakeCount = 0;\n    private echoCount = 0;\n    private itemsListCount = 0;\n    private refusalCount = 0;\n\n    constructor(options: ClientProofStateOptions)\n    {\n        this.clock = options.clock ?? systemClock();\n        this.initialSessionTtlMillis = options.sessionTtlMillis ?? DEFAULT_SESSION_TTL_MILLIS;\n        this.sessionTtlMillis = this.initialSessionTtlMillis;\n        this.replayWindowMillis = options.replayWindowMillis ?? DEFAULT_REPLAY_WINDOW_MILLIS;\n        // Parsed once here, so a key that is not P-256 SPKI fails loudly at\n        // construction rather than as a PROOF_INVALID mystery at request time.\n        this.initialPublicKeys = new Map(\n            Object.entries(options.publicKeys).map(([keyId, spki]) => [keyId, parseClientProofPublicKey(spki)]),\n        );\n        for (const [keyId, key] of this.initialPublicKeys)\n        {\n            this.publicKeys.set(keyId, key);\n        }\n    }\n\n    // ---- key registration --------------------------------------------------\n\n    /**\n     * Registers (or replaces) the public key `keyId` presents proofs under.\n     *\n     * @throws when the key is not base64 SPKI DER naming a P-256 key.\n     */\n    registerPublicKey(keyId: string, publicKeySpkiDerBase64: string): void\n    {\n        this.publicKeys.set(keyId, parseClientProofPublicKey(publicKeySpkiDerBase64));\n    }\n\n    // ---- admission ---------------------------------------------------------\n\n    /**\n     * Runs the contract's checks in the contract's order and returns the\n     * refusal, or null when the request is admitted (spending its nonce).\n     */\n    admit(args: {\n        clientId: string;\n        keyId: string;\n        presentedSessionId: string | null;\n        requiresSession: boolean;\n        proofInput: ClientProofInput;\n        presentedProof: string;\n    }): ClientProofRefusal | null\n    {\n        const now = this.clock.nowMillis();\n        this.prune(now);\n\n        // 1. Revocation, before anything the proof could explain. A revoked key\n        //    and a dropped session are the same answer on purpose: both are\n        //    cleared by opening a new session.\n        if (this.revokedKeyIds.has(args.keyId))\n        {\n            return ClientProofRefusal.sessionRevoked();\n        }\n        if (args.requiresSession)\n        {\n            const session = args.presentedSessionId === null ? undefined : this.sessions.get(args.presentedSessionId);\n            if (session === undefined || session.expiresAtMillis <= now\n                || session.keyId !== args.keyId || session.clientId !== args.clientId)\n            {\n                return ClientProofRefusal.sessionRevoked();\n            }\n        }\n\n        // 2. The replay window, judged against this server's clock.\n        const age = now - Number(args.proofInput.issuedAtMillis);\n        if (age < 0 || age > this.replayWindowMillis)\n        {\n            return ClientProofRefusal.proofExpired();\n        }\n\n        // 3. One acceptance per (clientId, nonce) inside that window.\n        if (this.spentNonces.isSpent(args.clientId, args.proofInput.nonce))\n        {\n            return ClientProofRefusal.proofReplayed();\n        }\n\n        // 4. The proof itself, last, so the three answers above stay\n        //    distinguishable. An unregistered keyId lands here rather than in\n        //    step 1, and shares PROOF_INVALID with a failed signature: it was\n        //    never registered, so it was never revoked, there is nothing for a\n        //    new session to fix, and whether a keyId exists is not inferable\n        //    from the refusal — the same non-disclosure the revocation rule\n        //    keeps.\n        const publicKey = this.publicKeys.get(args.keyId);\n        if (publicKey === undefined)\n        {\n            return ClientProofRefusal.proofInvalid();\n        }\n        if (!verifyClientProof(args.proofInput, args.presentedProof, publicKey))\n        {\n            return ClientProofRefusal.proofInvalid();\n        }\n\n        this.spentNonces.spend(args.clientId, args.proofInput.nonce, Number(args.proofInput.issuedAtMillis));\n\n        return null;\n    }\n\n    // ---- sessions ----------------------------------------------------------\n\n    /** Opens a session and returns its id and the expiry the server advertises. */\n    openSession(clientId: string, keyId: string): { sessionId: string; expiresAtMillis: number }\n    {\n        const now = this.clock.nowMillis();\n        this.prune(now);\n        const sessionId = newHexId();\n        const expiresAtMillis = now + this.sessionTtlMillis;\n        this.sessions.set(sessionId, { clientId, keyId, expiresAtMillis });\n\n        return { sessionId, expiresAtMillis };\n    }\n\n    /** Test hook: installs a session with a chosen id (wire-fixture replays). */\n    seedSession(sessionId: string, clientId: string, keyId: string, expiresAtMillis: number): void\n    {\n        this.sessions.set(sessionId, { clientId, keyId, expiresAtMillis });\n    }\n\n    /** Drops every session, as a restart would. Advertised expiries stay told. */\n    expireSessions(): void\n    {\n        this.sessions.clear();\n    }\n\n    /** Revokes a key and drops the sessions it opened. */\n    revokeKey(keyId: string): void\n    {\n        this.revokedKeyIds.add(keyId);\n        for (const [sessionId, session] of this.sessions)\n        {\n            if (session.keyId === keyId)\n            {\n                this.sessions.delete(sessionId);\n            }\n        }\n    }\n\n    setSessionTtlMillis(millis: number): void\n    {\n        this.sessionTtlMillis = millis;\n    }\n\n    /** Returns the state to how it started, counters and registered keys included. */\n    reset(): void\n    {\n        this.publicKeys.clear();\n        for (const [keyId, key] of this.initialPublicKeys)\n        {\n            this.publicKeys.set(keyId, key);\n        }\n        this.sessions.clear();\n        this.spentNonces.clear();\n        this.revokedKeyIds.clear();\n        this.holds.clear();\n        this.sessionTtlMillis = this.initialSessionTtlMillis;\n        this.requestCount = 0;\n        this.handshakeCount = 0;\n        this.echoCount = 0;\n        this.itemsListCount = 0;\n        this.refusalCount = 0;\n    }\n\n    // ---- delays (dev/test only) --------------------------------------------\n\n    /** Makes the next `count` requests to `path` wait `millis` before processing. */\n    holdPath(path: string, millis: number, count: number): void\n    {\n        this.holds.set(path, { millis, remaining: count });\n    }\n\n    /** Consumes one configured delay for `path`; returns how long to wait, or 0. */\n    takeHoldMillis(path: string): number\n    {\n        const hold = this.holds.get(path);\n        if (hold === undefined)\n        {\n            return 0;\n        }\n        hold.remaining -= 1;\n        if (hold.remaining <= 0)\n        {\n            this.holds.delete(path);\n        }\n\n        return hold.millis;\n    }\n\n    // ---- counters ----------------------------------------------------------\n\n    recordRequest(): void\n    {\n        this.requestCount += 1;\n    }\n\n    recordOperation(operationId: string): void\n    {\n        if (operationId === 'auth.clientProof.handshake')\n        {\n            this.handshakeCount += 1;\n        }\n        else if (operationId === 'echo.send')\n        {\n            this.echoCount += 1;\n        }\n        else if (operationId === 'items.list')\n        {\n            this.itemsListCount += 1;\n        }\n    }\n\n    recordRefusal(): void\n    {\n        this.refusalCount += 1;\n    }\n\n    stats(): ClientProofStats\n    {\n        this.prune(this.clock.nowMillis());\n\n        return {\n            requestCount: this.requestCount,\n            handshakeCount: this.handshakeCount,\n            echoCount: this.echoCount,\n            itemsListCount: this.itemsListCount,\n            refusalCount: this.refusalCount,\n            liveSessionCount: this.sessions.size,\n            spentNonceCount: this.spentNonces.size,\n        };\n    }\n\n    nowMillis(): number\n    {\n        return this.clock.nowMillis();\n    }\n\n    /** The clock, exposed for the dev control surface's advance-clock route. */\n    get clockRef(): ClientProofClock\n    {\n        return this.clock;\n    }\n\n    // ---- housekeeping ------------------------------------------------------\n\n    /**\n     * Drops what can no longer affect an answer. The nonce predicate is the\n     * exact negation of the window check in `admit`: an entry is dropped only\n     * once a proof carrying that issuedAtMillis would be refused as expired\n     * anyway. Dropping one moment earlier would let a nonce inside the window\n     * be spent twice.\n     */\n    private prune(nowMillis: number): void\n    {\n        for (const [sessionId, session] of this.sessions)\n        {\n            if (session.expiresAtMillis <= nowMillis)\n            {\n                this.sessions.delete(sessionId);\n            }\n        }\n        this.spentNonces.prune(nowMillis, this.replayWindowMillis);\n    }\n}\n","/**\n * The checks between a clientProofV1 request arriving and being applied.\n *\n * Shape first, then the profile allowlist, then the proof. That order is\n * forced: none of the proof checks can run until the fields they read are\n * known to be present and the body is known to be the bytes the digest is\n * supposed to cover. The order *inside* the proof checks is the contract's and\n * lives in `ClientProofState.admit`.\n *\n * @module server/client-proof/admission\n */\nimport { isCanonicalBytes, parseCanonicalJson, type CanonicalValue } from './canonical-json';\nimport { CLIENT_PROOF_PROFILE, sha256Hex, type ClientProofInput } from './proof';\nimport { ClientProofRefusal } from './refusal';\nimport type { ClientProofState } from './state';\n\n/** D23 wire-header names, ratified as proposed by the mobile dev bundle. */\nexport const CLIENT_PROOF_HEADERS = {\n    profile: 'x-spfn-auth-profile',\n    clientId: 'x-spfn-client-id',\n    keyId: 'x-spfn-key-id',\n    nonce: 'x-spfn-nonce',\n    issuedAtMillis: 'x-spfn-issued-at',\n    proof: 'x-spfn-proof',\n    session: 'x-spfn-session',\n} as const;\n\nexport const CLIENT_PROOF_CONTENT_TYPE = 'application/json';\n\nconst INT64_MIN = -(2n ** 63n);\nconst INT64_MAX = 2n ** 63n - 1n;\n\n/** The contract header fields one request presented. */\nexport interface ClientProofCredentials\n{\n    profile: string;\n    clientId: string;\n    keyId: string;\n    nonce: string;\n    issuedAtMillis: bigint;\n    proof: string;\n    sessionId: string | null;\n}\n\nexport type Admission =\n    | { admitted: false; refusal: ClientProofRefusal }\n    | { admitted: true; value: CanonicalValue; credentials: ClientProofCredentials };\n\n/**\n * Runs every check for one operation over already-read body bytes.\n *\n * `path` must be the operation's contract path (what the client signed), not a\n * proxied or rewritten one.\n */\nexport function admitClientProofRequest(args: {\n    state: ClientProofState;\n    headers: Headers;\n    method: string;\n    path: string;\n    requiresSession: boolean;\n    body: Uint8Array;\n}): Admission\n{\n    const credentials = readCredentials(args.headers);\n    if (credentials === null)\n    {\n        return refused(ClientProofRefusal.malformedHeaders());\n    }\n    if (credentials.profile !== CLIENT_PROOF_PROFILE)\n    {\n        return refused(ClientProofRefusal.profileRejected());\n    }\n    if (!isRequestContentType(args.headers.get('content-type')))\n    {\n        return refused(ClientProofRefusal.missingContentType());\n    }\n    if (args.requiresSession !== (credentials.sessionId !== null))\n    {\n        return refused(ClientProofRefusal.sessionHeaderMisplaced());\n    }\n\n    let value: CanonicalValue;\n    try\n    {\n        value = parseCanonicalJson(args.body);\n    }\n    catch\n    {\n        return refused(ClientProofRefusal.bodyNotCanonical());\n    }\n    // The proof binds the received bytes; accepting a re-serialization would\n    // let two implementations disagree about what was signed.\n    if (!isCanonicalBytes(args.body, value))\n    {\n        return refused(ClientProofRefusal.bodyNotCanonical());\n    }\n\n    const proofInput: ClientProofInput = {\n        method: args.method,\n        path: args.path,\n        clientId: credentials.clientId,\n        keyId: credentials.keyId,\n        nonce: credentials.nonce,\n        issuedAtMillis: credentials.issuedAtMillis,\n        bodySha256: sha256Hex(args.body),\n    };\n\n    let refusal: ClientProofRefusal | null;\n    try\n    {\n        refusal = args.state.admit({\n            clientId: credentials.clientId,\n            keyId: credentials.keyId,\n            presentedSessionId: credentials.sessionId,\n            requiresSession: args.requiresSession,\n            proofInput,\n            presentedProof: credentials.proof,\n        });\n    }\n    catch\n    {\n        // A C0 control character in a header field makes the proof input\n        // unassemblable — the request is not the shape the contract describes.\n        return refused(ClientProofRefusal.unprocessable());\n    }\n    if (refusal !== null)\n    {\n        return refused(refusal);\n    }\n\n    return { admitted: true, value, credentials };\n}\n\nfunction refused(refusal: ClientProofRefusal): Admission\n{\n    return { admitted: false, refusal };\n}\n\n/**\n * The contract header fields, or null when any is absent or malformed.\n *\n * Fetch `Headers` folds a repeated field into one comma-joined value, so\n * \"sent more than once\" is not directly observable here; a folded value fails\n * either the issuedAt grammar or proof verification instead.\n *\n * Exported for the authenticate middleware's profile path, which runs the\n * same shape checks over arbitrary routes.\n */\nexport function readCredentials(headers: Headers): ClientProofCredentials | null\n{\n    const profile = headers.get(CLIENT_PROOF_HEADERS.profile);\n    const clientId = headers.get(CLIENT_PROOF_HEADERS.clientId);\n    const keyId = headers.get(CLIENT_PROOF_HEADERS.keyId);\n    const nonce = headers.get(CLIENT_PROOF_HEADERS.nonce);\n    const issuedAtRaw = headers.get(CLIENT_PROOF_HEADERS.issuedAtMillis);\n    const proof = headers.get(CLIENT_PROOF_HEADERS.proof);\n    if (profile === null || clientId === null || keyId === null\n        || nonce === null || issuedAtRaw === null || proof === null)\n    {\n        return null;\n    }\n    const issuedAtMillis = parseInt64(issuedAtRaw);\n    if (issuedAtMillis === null)\n    {\n        return null;\n    }\n\n    return {\n        profile,\n        clientId,\n        keyId,\n        nonce,\n        issuedAtMillis,\n        proof,\n        sessionId: headers.get(CLIENT_PROOF_HEADERS.session),\n    };\n}\n\nfunction parseInt64(raw: string): bigint | null\n{\n    if (!/^[+-]?\\d{1,19}$/.test(raw))\n    {\n        return null;\n    }\n    const value = BigInt(raw);\n    if (value < INT64_MIN || value > INT64_MAX)\n    {\n        return null;\n    }\n\n    return value;\n}\n\n/** Exported for the authenticate middleware's profile path. */\nexport function isRequestContentType(value: string | null): boolean\n{\n    if (value === null)\n    {\n        return false;\n    }\n\n    return value.split(';')[0].trim().toLowerCase() === CLIENT_PROOF_CONTENT_TYPE;\n}\n","/**\n * The mobile dev-contract types and operations, decoded from / encoded to\n * canonical values. Strict on purpose: a missing required field, a wrong type\n * or an unknown field is \"not the request type this operation declares\".\n *\n * This module is the source of truth for `operations`. The exported contract\n * bundle (`contracts/mobile/spfn-mobile-contract.json`) is generated from it\n * by `contract-bundle.ts`; spfn-mobile consumes that export rather than the\n * other way round.\n *\n * @module server/client-proof/contract-types\n */\nimport type { CanonicalObject, CanonicalValue } from './canonical-json';\n\nexport interface ContractOperation\n{\n    id:\n        | 'auth.clientProof.handshake'\n        | 'echo.send'\n        | 'items.list'\n        | 'auth.enroll.register'\n        | 'auth.enroll.login'\n        | 'auth.enroll.oauthNative'\n        | 'auth.keys.rotate';\n    method: 'POST';\n    path: string;\n\n    /**\n     * How a call is admitted. `clientProofV1` operations run the proof\n     * admission order; `none` operations are the unproven class — accepted\n     * with neither proof headers nor a session header, because enrollment is\n     * called before any key exists to sign with.\n     */\n    authProfile: 'clientProofV1' | 'none';\n    requiresSession: boolean;\n    requestType: string;\n    responseType: string;\n    summary: string;\n}\n\nexport const CONTRACT_OPERATIONS: readonly ContractOperation[] = [\n    {\n        id: 'auth.clientProof.handshake',\n        method: 'POST',\n        path: '/v1/auth/client-proof/handshake',\n        authProfile: 'clientProofV1',\n        requiresSession: false,\n        requestType: 'HandshakeRequest',\n        responseType: 'HandshakeResponse',\n        summary: 'Presents a client proof and opens a session.',\n    },\n    {\n        id: 'echo.send',\n        method: 'POST',\n        path: '/v1/echo',\n        authProfile: 'clientProofV1',\n        requiresSession: true,\n        requestType: 'EchoRequest',\n        responseType: 'EchoResponse',\n        summary: 'Authenticated round trip used as the smallest real vertical slice.',\n    },\n    {\n        id: 'items.list',\n        method: 'POST',\n        path: '/v1/items/list',\n        authProfile: 'clientProofV1',\n        requiresSession: true,\n        requestType: 'ListItemsRequest',\n        responseType: 'ListItemsResponse',\n        summary: 'Authenticated paged read covering optional fields and arrays.',\n    },\n];\n\n/**\n * The `/_auth` surface exported into the mobile contract: enrollment, login\n * and key rotation. These are ordinary SPFN REST routes, not canonical-JSON\n * operations — the dev handler never serves them, and their wire rules are\n * the `restOperations` section of the bundle, not `canonicalJson`.\n *\n * The three `authProfile: 'none'` operations are the unproven class: they are\n * accepted with neither proof headers nor a session header, because they are\n * how a client obtains a key in the first place. `auth.keys.rotate` requires\n * an authenticated caller (a clientProofV1 proof on this surface); an\n * unproven call to it is refused like any failed admission.\n */\nexport const AUTH_SURFACE_OPERATIONS: readonly ContractOperation[] = [\n    {\n        id: 'auth.enroll.register',\n        method: 'POST',\n        path: '/_auth/register',\n        authProfile: 'none',\n        requiresSession: false,\n        requestType: 'RegisterRequest',\n        responseType: 'RegisterResponse',\n        summary: 'Registers an account with a verification token and enrolls the client-generated public key.',\n    },\n    {\n        id: 'auth.enroll.login',\n        method: 'POST',\n        path: '/_auth/login',\n        authProfile: 'none',\n        requiresSession: false,\n        requestType: 'LoginRequest',\n        responseType: 'LoginResponse',\n        summary: 'Authenticates with password credentials and enrolls a fresh client-generated public key.',\n    },\n    {\n        id: 'auth.enroll.oauthNative',\n        method: 'POST',\n        path: '/_auth/oauth/{provider}/native',\n        authProfile: 'none',\n        requiresSession: false,\n        requestType: 'OauthNativeRequest',\n        responseType: 'OauthNativeResponse',\n        summary: 'Verifies a native/web social id_token server-side and enrolls the client-generated public key.',\n    },\n    {\n        id: 'auth.keys.rotate',\n        method: 'POST',\n        path: '/_auth/keys/rotate',\n        authProfile: 'clientProofV1',\n        requiresSession: false,\n        requestType: 'RotateKeyRequest',\n        responseType: 'RotateKeyResponse',\n        summary: 'Replaces the authenticated key with a new client-generated public key before its TTL runs out.',\n    },\n];\n\n/** The body is canonical JSON but not the declared request type. */\nexport class ContractTypeError extends Error\n{\n    constructor()\n    {\n        super('not the declared contract type');\n        this.name = 'ContractTypeError';\n    }\n}\n\nexport interface HandshakeRequest\n{\n    clientId: string;\n    keyId: string;\n    nonce: string;\n    issuedAtMillis: bigint;\n}\n\nexport interface EchoRequest\n{\n    message: string;\n    sequence: bigint;\n}\n\nexport interface ListItemsRequest\n{\n    limit: bigint;\n    cursor?: string;\n}\n\nexport interface ContractItem\n{\n    id: string;\n    name: string;\n    updatedAtMillis: bigint;\n}\n\n// ============================================================================\n// Decoding\n// ============================================================================\n\nexport function decodeHandshakeRequest(value: CanonicalValue): HandshakeRequest\n{\n    const members = objectWithKeys(value, ['clientId', 'keyId', 'nonce', 'issuedAtMillis'], []);\n\n    return {\n        clientId: text(members.get('clientId')),\n        keyId: text(members.get('keyId')),\n        nonce: text(members.get('nonce')),\n        issuedAtMillis: integer(members.get('issuedAtMillis')),\n    };\n}\n\nexport function decodeEchoRequest(value: CanonicalValue): EchoRequest\n{\n    const members = objectWithKeys(value, ['message', 'sequence'], []);\n\n    return {\n        message: text(members.get('message')),\n        sequence: integer(members.get('sequence')),\n    };\n}\n\nexport function decodeListItemsRequest(value: CanonicalValue): ListItemsRequest\n{\n    const members = objectWithKeys(value, ['limit'], ['cursor']);\n    const request: ListItemsRequest = { limit: integer(members.get('limit')) };\n    if (members.has('cursor'))\n    {\n        request.cursor = text(members.get('cursor'));\n    }\n\n    return request;\n}\n\nfunction objectWithKeys(\n    value: CanonicalValue,\n    required: string[],\n    optional: string[],\n): CanonicalObject\n{\n    if (!(value instanceof Map))\n    {\n        throw new ContractTypeError();\n    }\n    for (const key of required)\n    {\n        if (!value.has(key))\n        {\n            throw new ContractTypeError();\n        }\n    }\n    for (const key of value.keys())\n    {\n        if (!required.includes(key) && !optional.includes(key))\n        {\n            throw new ContractTypeError();\n        }\n    }\n\n    return value;\n}\n\nfunction text(value: CanonicalValue | undefined): string\n{\n    if (typeof value !== 'string')\n    {\n        throw new ContractTypeError();\n    }\n\n    return value;\n}\n\nfunction integer(value: CanonicalValue | undefined): bigint\n{\n    if (typeof value !== 'bigint')\n    {\n        throw new ContractTypeError();\n    }\n\n    return value;\n}\n\n// ============================================================================\n// Encoding\n// ============================================================================\n\nexport function encodeHandshakeResponse(sessionId: string, expiresAtMillis: bigint): CanonicalValue\n{\n    return new Map<string, CanonicalValue>([\n        ['sessionId', sessionId],\n        ['expiresAtMillis', expiresAtMillis],\n    ]);\n}\n\nexport function encodeEchoResponse(message: string, sequence: bigint, serverTimeMillis: bigint): CanonicalValue\n{\n    return new Map<string, CanonicalValue>([\n        ['message', message],\n        ['sequence', sequence],\n        ['serverTimeMillis', serverTimeMillis],\n    ]);\n}\n\nexport function encodeListItemsResponse(items: ContractItem[], nextCursor: string | null): CanonicalValue\n{\n    const encodedItems: CanonicalValue = items.map((item) => new Map<string, CanonicalValue>([\n        ['id', item.id],\n        ['name', item.name],\n        ['updatedAtMillis', item.updatedAtMillis],\n    ]));\n    const members = new Map<string, CanonicalValue>([['items', encodedItems]]);\n    if (nextCursor !== null)\n    {\n        members.set('nextCursor', nextCursor);\n    }\n\n    return members;\n}\n","/**\n * The dev server's test hooks, mirroring the spfn-mobile reference server's\n * `/control` surface route for route so the mobile integration suites can\n * drive either server with only a URL change.\n *\n * `/control` is NOT part of the contract: nothing under it appears in the\n * bundle, no SDK knows it exists, and its answers are plain objects rather\n * than contract envelopes. Every route except the readiness probe requires\n * the per-launch token; the token is never logged.\n *\n * @module server/client-proof/dev-control\n */\nimport { encodeCanonicalJson, parseCanonicalJson, type CanonicalValue } from './canonical-json';\nimport { ClientProofState, TestClock } from './state';\n\nexport const CONTROL_PREFIX = '/control/';\n\nexport const CONTROL_TOKEN_HEADER = 'x-spfn-reference-control';\n\nconst HTTP_OK = 200;\nconst HTTP_BAD_REQUEST = 400;\nconst HTTP_FORBIDDEN = 403;\nconst HTTP_NOT_FOUND = 404;\nconst HTTP_CONFLICT = 409;\n\nconst MAX_CONTROL_BODY_BYTES = 4096;\n\nexport async function handleControlRequest(\n    state: ClientProofState,\n    controlToken: string,\n    path: string,\n    request: Request,\n): Promise<Response>\n{\n    if (path === '/control/health')\n    {\n        return answer(HTTP_OK, new Map<string, CanonicalValue>([['status', 'ok']]));\n    }\n    if (request.headers.get(CONTROL_TOKEN_HEADER) !== controlToken)\n    {\n        return answer(HTTP_FORBIDDEN, failure('control token'));\n    }\n\n    const raw = new Uint8Array(await request.arrayBuffer());\n    const body = raw.length > MAX_CONTROL_BODY_BYTES ? raw.slice(0, MAX_CONTROL_BODY_BYTES) : raw;\n\n    switch (path)\n    {\n        case '/control/stats':\n            return stats(state);\n        case '/control/reset':\n            state.reset();\n\n            return ok();\n        case '/control/expire-sessions':\n            state.expireSessions();\n\n            return ok();\n        case '/control/register-key':\n            return registerKey(state, body);\n        case '/control/revoke-key':\n            return revokeKey(state, body);\n        case '/control/session-ttl':\n            return sessionTtl(state, body);\n        case '/control/hold':\n            return hold(state, body);\n        case '/control/advance-clock':\n            return advanceClock(state, body);\n        default:\n            return answer(HTTP_NOT_FOUND, failure('unknown control route'));\n    }\n}\n\n// ---- routes ----------------------------------------------------------------\n\nfunction stats(state: ClientProofState): Response\n{\n    const counters = state.stats();\n\n    return answer(HTTP_OK, withOk(new Map<string, CanonicalValue>([\n        ['echoCount', BigInt(counters.echoCount)],\n        ['handshakeCount', BigInt(counters.handshakeCount)],\n        ['itemsListCount', BigInt(counters.itemsListCount)],\n        ['liveSessionCount', BigInt(counters.liveSessionCount)],\n        ['refusalCount', BigInt(counters.refusalCount)],\n        ['requestCount', BigInt(counters.requestCount)],\n        ['spentNonceCount', BigInt(counters.spentNonceCount)],\n    ])));\n}\n\n/**\n * Registers the public key a test client generated — the asymmetric\n * counterpart of the shared-key provisioning the HMAC profile injected at\n * construction. The body carries only the public half (SPKI DER base64); no\n * secret ever crosses this route.\n */\nfunction registerKey(state: ClientProofState, body: Uint8Array): Response\n{\n    const keyId = stringField(body, 'keyId');\n    const publicKey = stringField(body, 'publicKey');\n    if (keyId === null)\n    {\n        return badRequest('keyId');\n    }\n    if (publicKey === null)\n    {\n        return badRequest('publicKey');\n    }\n    try\n    {\n        state.registerPublicKey(keyId, publicKey);\n    }\n    catch\n    {\n        return badRequest('publicKey');\n    }\n\n    return ok();\n}\n\nfunction revokeKey(state: ClientProofState, body: Uint8Array): Response\n{\n    const keyId = stringField(body, 'keyId');\n    if (keyId === null)\n    {\n        return badRequest('keyId');\n    }\n    state.revokeKey(keyId);\n\n    return ok();\n}\n\nfunction sessionTtl(state: ClientProofState, body: Uint8Array): Response\n{\n    const ttlMillis = integerField(body, 'ttlMillis');\n    if (ttlMillis === null)\n    {\n        return badRequest('ttlMillis');\n    }\n    state.setSessionTtlMillis(Number(ttlMillis));\n\n    return ok();\n}\n\nfunction hold(state: ClientProofState, body: Uint8Array): Response\n{\n    const path = stringField(body, 'path');\n    const millis = integerField(body, 'millis');\n    const count = integerField(body, 'count');\n    if (path === null)\n    {\n        return badRequest('path');\n    }\n    if (millis === null)\n    {\n        return badRequest('millis');\n    }\n    if (count === null)\n    {\n        return badRequest('count');\n    }\n    state.holdPath(path, Number(millis), Number(count));\n\n    return ok();\n}\n\n/**\n * Moves a test clock forward. Refused when the server runs on the wall clock,\n * because silently doing nothing is how a test passes for the wrong reason.\n */\nfunction advanceClock(state: ClientProofState, body: Uint8Array): Response\n{\n    const clock = state.clockRef;\n    if (!(clock instanceof TestClock))\n    {\n        return answer(HTTP_CONFLICT, failure('server is running on the system clock'));\n    }\n    const millis = integerField(body, 'millis');\n    if (millis === null)\n    {\n        return badRequest('millis');\n    }\n    clock.advance(Number(millis));\n\n    return ok();\n}\n\n// ---- plumbing --------------------------------------------------------------\n\nfunction members(body: Uint8Array): Map<string, CanonicalValue> | null\n{\n    if (body.length === 0)\n    {\n        return new Map();\n    }\n    let parsed: CanonicalValue;\n    try\n    {\n        parsed = parseCanonicalJson(body);\n    }\n    catch\n    {\n        return null;\n    }\n\n    return parsed instanceof Map ? parsed : null;\n}\n\nfunction stringField(body: Uint8Array, field: string): string | null\n{\n    const value = members(body)?.get(field);\n\n    return typeof value === 'string' ? value : null;\n}\n\nfunction integerField(body: Uint8Array, field: string): bigint | null\n{\n    const value = members(body)?.get(field);\n\n    return typeof value === 'bigint' ? value : null;\n}\n\nfunction badRequest(field: string): Response\n{\n    return answer(HTTP_BAD_REQUEST, failure(`missing or malformed field: ${field}`));\n}\n\nfunction ok(): Response\n{\n    return answer(HTTP_OK, withOk(new Map()));\n}\n\nfunction failure(reason: string): Map<string, CanonicalValue>\n{\n    return new Map<string, CanonicalValue>([['ok', false], ['reason', reason]]);\n}\n\nfunction withOk(extra: Map<string, CanonicalValue>): Map<string, CanonicalValue>\n{\n    extra.set('ok', true);\n\n    return extra;\n}\n\nfunction answer(status: number, value: Map<string, CanonicalValue>): Response\n{\n    const bytes = encodeCanonicalJson(value);\n    const buffer = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) as ArrayBuffer;\n\n    return new Response(buffer, { status, headers: { 'content-type': 'application/json' } });\n}\n","/**\n * The mobile-contract dev surface: a fetch-style handler exposing the three\n * dev operations (handshake / echo.send / items.list) plus the `/control`\n * test hooks the spfn-mobile integration suites drive.\n *\n * Framework-free on purpose — `fetch(request) => Response` plugs into\n * `@hono/node-server`'s `serve({ fetch })` or any Web-standard runtime, and\n * the contract needs byte-exact control over bodies and envelopes that a\n * validating router would take away.\n *\n * This is a dev/test surface, not a production deployment target: keys are\n * injected at construction, state is in-memory, and `/control` mutates it.\n *\n * @module server/client-proof/dev-handler\n */\nimport { encodeCanonicalJson, type CanonicalValue } from './canonical-json';\nimport { admitClientProofRequest, type Admission } from './admission';\nimport {\n    CONTRACT_OPERATIONS,\n    ContractTypeError,\n    decodeEchoRequest,\n    decodeHandshakeRequest,\n    decodeListItemsRequest,\n    encodeEchoResponse,\n    encodeHandshakeResponse,\n    encodeListItemsResponse,\n    type ContractItem,\n    type ContractOperation,\n    type ListItemsRequest,\n} from './contract-types';\nimport { ClientProofRefusal, newHexId } from './refusal';\nimport { ClientProofState, type ClientProofStateOptions, TestClock } from './state';\nimport { handleControlRequest, CONTROL_PREFIX } from './dev-control';\n\n/** Far above any contract request and far below anything worth buffering. */\nconst MAX_BODY_BYTES = 1 << 20;\n\nconst HTTP_OK = 200;\n\n/**\n * The items `items.list` pages through — fixed and small on purpose, matching\n * the spfn-mobile reference catalogue byte for byte so an integration test can\n * assert exact values against either server.\n */\nexport const DEV_CATALOGUE: readonly ContractItem[] = [\n    { id: 'item-0001', name: 'alpha', updatedAtMillis: 1_750_000_000_001n },\n    { id: 'item-0002', name: 'bravo', updatedAtMillis: 1_750_000_000_002n },\n    { id: 'item-0003', name: 'charlie', updatedAtMillis: 1_750_000_000_003n },\n    { id: 'item-0004', name: 'delta', updatedAtMillis: 1_750_000_000_004n },\n    { id: 'item-0005', name: 'echo', updatedAtMillis: 1_750_000_000_005n },\n];\n\n/** The largest `items.list` page this server will answer with. */\nexport const DEV_MAX_LIMIT = 100n;\n\nexport interface ClientProofDevHandlerOptions extends ClientProofStateOptions\n{\n    /**\n     * Token the `/control` routes require (header `x-spfn-reference-control`).\n     * Generated per construction when omitted; never logged.\n     */\n    controlToken?: string;\n\n    /** Disables the `/control` surface entirely. @default true */\n    enableControl?: boolean;\n\n    /** One line per request: method, path, status. Nothing a request carried. */\n    log?: (line: string) => void;\n}\n\nexport interface ClientProofDevHandler\n{\n    fetch(request: Request): Promise<Response>;\n    state: ClientProofState;\n    controlToken: string;\n}\n\nexport function createClientProofDevHandler(options: ClientProofDevHandlerOptions): ClientProofDevHandler\n{\n    const state = new ClientProofState(options);\n    const controlToken = options.controlToken ?? newHexId();\n    const enableControl = options.enableControl ?? true;\n    const log = options.log ?? (() => undefined);\n\n    async function dispatch(request: Request): Promise<Response>\n    {\n        state.recordRequest();\n        const url = new URL(request.url);\n\n        if (enableControl && url.pathname.startsWith(CONTROL_PREFIX))\n        {\n            return handleControlRequest(state, controlToken, url.pathname, request);\n        }\n\n        // A query string is refused by omission: no contract path carries one,\n        // and a proof is taken over the path alone.\n        const operation = url.search === ''\n            ? CONTRACT_OPERATIONS.find((op) => op.path === url.pathname && op.method === request.method)\n            : undefined;\n        if (operation === undefined)\n        {\n            return refuse(ClientProofRefusal.unroutable());\n        }\n\n        const body = await readBodyCapped(request);\n        if (body === null)\n        {\n            return refuse(ClientProofRefusal.bodyTooLarge());\n        }\n\n        // Before verification, so a request a test is holding open has not\n        // spent its nonce by the time the client gives up waiting for it.\n        await waitOutHold(url.pathname);\n\n        const admission = admitClientProofRequest({\n            state,\n            headers: request.headers,\n            method: operation.method,\n            path: operation.path,\n            requiresSession: operation.requiresSession,\n            body,\n        });\n        if (!admission.admitted)\n        {\n            return refuse(admission.refusal);\n        }\n\n        return apply(operation, admission);\n    }\n\n    function apply(operation: ContractOperation, admission: Extract<Admission, { admitted: true }>): Response\n    {\n        let value: CanonicalValue;\n        try\n        {\n            if (operation.id === 'auth.clientProof.handshake')\n            {\n                const request = decodeHandshakeRequest(admission.value);\n                // The proof already binds the header identity to the key that\n                // signed it, so a body naming a different client is a request\n                // whose two halves disagree about who sent it.\n                if (request.clientId !== admission.credentials.clientId\n                    || request.keyId !== admission.credentials.keyId)\n                {\n                    return refuse(ClientProofRefusal.bodyNotTheDeclaredType());\n                }\n                const opened = state.openSession(request.clientId, request.keyId);\n                value = encodeHandshakeResponse(opened.sessionId, BigInt(opened.expiresAtMillis));\n            }\n            else if (operation.id === 'echo.send')\n            {\n                const request = decodeEchoRequest(admission.value);\n                value = encodeEchoResponse(request.message, request.sequence, BigInt(state.nowMillis()));\n            }\n            else\n            {\n                const listed = listItems(decodeListItemsRequest(admission.value));\n                if (listed === null)\n                {\n                    return refuse(ClientProofRefusal.bodyNotTheDeclaredType());\n                }\n                value = listed;\n            }\n        }\n        catch (error)\n        {\n            if (error instanceof ContractTypeError)\n            {\n                return refuse(ClientProofRefusal.bodyNotTheDeclaredType());\n            }\n\n            return refuse(ClientProofRefusal.unprocessable());\n        }\n\n        state.recordOperation(operation.id);\n\n        return contractResponse(HTTP_OK, encodeCanonicalJson(value));\n    }\n\n    function refuse(refusal: ClientProofRefusal): Response\n    {\n        state.recordRefusal();\n\n        return contractResponse(refusal.httpStatus, refusal.envelopeBytes(newHexId()));\n    }\n\n    async function waitOutHold(path: string): Promise<void>\n    {\n        const millis = state.takeHoldMillis(path);\n        if (millis > 0)\n        {\n            await new Promise((resolve) => setTimeout(resolve, millis));\n        }\n    }\n\n    return {\n        state,\n        controlToken,\n        fetch: async (request: Request): Promise<Response> =>\n        {\n            try\n            {\n                const response = await dispatch(request);\n                log(`${request.method} ${new URL(request.url).pathname} -> ${response.status}`);\n\n                return response;\n            }\n            catch\n            {\n                // A contract answer rather than a stack trace: an exception\n                // message can quote the request that produced it.\n                return refuse(ClientProofRefusal.unprocessable());\n            }\n        },\n    };\n}\n\n/**\n * One page of the catalogue, or null when the request is not one this\n * contract describes. An unknown cursor and a limit outside 1…MAX are refused\n * rather than clamped — a server that quietly repaired a request would hide\n * the client bug that produced it.\n */\nfunction listItems(request: ListItemsRequest): CanonicalValue | null\n{\n    if (request.limit < 1n || request.limit > DEV_MAX_LIMIT)\n    {\n        return null;\n    }\n    let start = 0;\n    if (request.cursor !== undefined)\n    {\n        const index = DEV_CATALOGUE.findIndex((item) => item.id === request.cursor);\n        if (index < 0)\n        {\n            return null;\n        }\n        start = index + 1;\n    }\n    const end = Math.min(DEV_CATALOGUE.length, start + Number(request.limit));\n    const page = DEV_CATALOGUE.slice(start, end);\n    // Present only when a further page exists, so \"nextCursor is absent\" is a\n    // fact about the data rather than a value the client has to interpret.\n    const nextCursor = end < DEV_CATALOGUE.length && page.length > 0 ? page[page.length - 1].id : null;\n\n    return encodeListItemsResponse([...page], nextCursor);\n}\n\nfunction contractResponse(status: number, body: Uint8Array): Response\n{\n    return new Response(toArrayBuffer(body), {\n        status,\n        headers: { 'content-type': 'application/json' },\n    });\n}\n\n/** The body, or null when it is larger than this server will read. */\nasync function readBodyCapped(request: Request): Promise<Uint8Array | null>\n{\n    if (request.body === null)\n    {\n        return new Uint8Array(0);\n    }\n    const reader = request.body.getReader();\n    const chunks: Uint8Array[] = [];\n    let total = 0;\n    for (;;)\n    {\n        const { done, value } = await reader.read();\n        if (done)\n        {\n            break;\n        }\n        total += value.length;\n        if (total > MAX_BODY_BYTES)\n        {\n            await reader.cancel();\n\n            return null;\n        }\n        chunks.push(value);\n    }\n    const body = new Uint8Array(total);\n    let offset = 0;\n    for (const chunk of chunks)\n    {\n        body.set(chunk, offset);\n        offset += chunk.length;\n    }\n\n    return body;\n}\n\nfunction toArrayBuffer(bytes: Uint8Array): ArrayBuffer\n{\n    return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) as ArrayBuffer;\n}\n\nexport { TestClock };\n","/**\n * Hono middleware adapter for clientProofV1 — the `requiresSession` guard for\n * SPFN servers that mount contract operations as ordinary routes.\n *\n * Runs the full admission sequence over the raw request bytes and, on\n * acceptance, tags the request `clientType: 'mobile'` (the attestation slot\n * PROXY-BACKEND-AUTH-SPEC reserved) and exposes the parsed canonical body and\n * credentials under the `clientProof` context key.\n *\n * hono is imported as types only — the middleware itself is a plain async\n * function, so this module adds no runtime dependency.\n *\n * @module server/client-proof/guard\n */\nimport type { Context, MiddlewareHandler, Next } from 'hono';\n\nimport { admitClientProofRequest, type ClientProofCredentials } from './admission';\nimport type { CanonicalValue } from './canonical-json';\nimport { newHexId } from './refusal';\nimport type { ClientProofState } from './state';\n\n/** What the guard leaves in the context for the route handler. */\nexport interface ClientProofContext\n{\n    credentials: ClientProofCredentials;\n\n    /** The request body as a canonical value (already byte-verified). */\n    value: CanonicalValue;\n}\n\nexport interface ClientProofGuardOptions\n{\n    /**\n     * The contract path the client signed, when it differs from the mounted\n     * path (e.g. behind a stripped ingress prefix). Defaults to the request\n     * path.\n     */\n    contractPath?: string;\n}\n\n/**\n * A guard for operations with `requiresSession: true`.\n *\n * Refusals are answered with the contract envelope and never reach the route.\n */\nexport function createClientProofGuard(\n    state: ClientProofState,\n    options: ClientProofGuardOptions = {},\n): MiddlewareHandler\n{\n    return async (c: Context, next: Next) =>\n    {\n        const body = new Uint8Array(await c.req.arrayBuffer());\n        const admission = admitClientProofRequest({\n            state,\n            headers: c.req.raw.headers,\n            method: c.req.method,\n            path: options.contractPath ?? c.req.path,\n            requiresSession: true,\n            body,\n        });\n        if (!admission.admitted)\n        {\n            state.recordRefusal();\n            const bytes = admission.refusal.envelopeBytes(newHexId());\n            const buffer = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) as ArrayBuffer;\n\n            return c.newResponse(buffer, admission.refusal.httpStatus as 401, {\n                'content-type': 'application/json',\n            });\n        }\n        c.set('clientType', 'mobile');\n        c.set('clientProof', {\n            credentials: admission.credentials,\n            value: admission.value,\n        } satisfies ClientProofContext);\n        await next();\n\n        return undefined;\n    };\n}\n"],"mappings":";AAsCO,IAAM,qBAAN,cAAiC,MACxC;AAAA,EACI,YAAqB,MACrB;AACI,UAAM,mBAAmB,IAAI,EAAE;AAFd;AAGjB,SAAK,OAAO;AAAA,EAChB;AACJ;AAEA,IAAM,YAAY,EAAE,MAAM;AAC1B,IAAM,YAAY,MAAM,MAAM;AAavB,SAAS,mBAAmB,OACnC;AACI,MAAIA;AACJ,MACA;AACI,IAAAA,QAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK;AAAA,EACjE,QAEA;AACI,UAAM,IAAI,mBAAmB,cAAc;AAAA,EAC/C;AAEA,QAAM,SAAS,IAAI,OAAOA,KAAI;AAC9B,QAAM,QAAQ,OAAO,WAAW;AAChC,SAAO,eAAe;AACtB,MAAI,CAAC,OAAO,MAAM,GAClB;AACI,UAAM,IAAI,mBAAmB,kBAAkB;AAAA,EACnD;AAEA,SAAO;AACX;AAGO,SAAS,iBAAiB,OAAmB,OACpD;AACI,QAAM,UAAU,oBAAoB,KAAK;AACzC,MAAI,QAAQ,WAAW,MAAM,QAC7B;AACI,WAAO;AAAA,EACX;AACA,WAAS,IAAI,GAAG,IAAI,QAAQ,QAAQ,KACpC;AACI,QAAI,QAAQ,CAAC,MAAM,MAAM,CAAC,GAC1B;AACI,aAAO;AAAA,IACX;AAAA,EACJ;AAEA,SAAO;AACX;AAEA,IAAM,SAAN,MACA;AAAA,EAGI,YAA6BA,OAC7B;AAD6B,gBAAAA;AAAA,EAC5B;AAAA,EAHO,MAAM;AAAA,EAKd,QACA;AACI,WAAO,KAAK,OAAO,KAAK,KAAK;AAAA,EACjC;AAAA,EAEA,iBACA;AACI,WAAO,CAAC,KAAK,MAAM,GACnB;AACI,YAAM,IAAI,KAAK,KAAK,KAAK,GAAG;AAC5B,UAAI,MAAM,OAAO,MAAM,OAAQ,MAAM,QAAQ,MAAM,MACnD;AACI,aAAK;AACL;AAAA,MACJ;AACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,aACA;AACI,SAAK,eAAe;AACpB,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,UAAM,IAAI,KAAK,KAAK,KAAK,GAAG;AAC5B,QAAI,MAAM,KACV;AACI,aAAO,KAAK,YAAY;AAAA,IAC5B;AACA,QAAI,MAAM,KACV;AACI,aAAO,KAAK,WAAW;AAAA,IAC3B;AACA,QAAI,MAAM,KACV;AACI,aAAO,KAAK,YAAY;AAAA,IAC5B;AACA,QAAI,MAAM,OAAQ,KAAK,OAAO,KAAK,KACnC;AACI,aAAO,KAAK,YAAY;AAAA,IAC5B;AACA,QAAI,KAAK,KAAK,WAAW,QAAQ,KAAK,GAAG,GACzC;AACI,WAAK,OAAO;AAEZ,aAAO;AAAA,IACX;AACA,QAAI,KAAK,KAAK,WAAW,QAAQ,KAAK,GAAG,GACzC;AACI,WAAK,OAAO;AAEZ,aAAO;AAAA,IACX;AACA,QAAI,KAAK,KAAK,WAAW,SAAS,KAAK,GAAG,GAC1C;AACI,WAAK,OAAO;AAEZ,aAAO;AAAA,IACX;AACA,UAAM,IAAI,mBAAmB,eAAe;AAAA,EAChD;AAAA,EAEQ,cACR;AACI,SAAK;AACL,UAAMC,WAA2B,oBAAI,IAAI;AACzC,SAAK,eAAe;AACpB,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,QAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,WAAK;AAEL,aAAOA;AAAA,IACX;AACA,eACA;AACI,WAAK,eAAe;AACpB,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,UAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,YAAM,MAAM,KAAK,YAAY;AAC7B,UAAIA,SAAQ,IAAI,GAAG,GACnB;AACI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,WAAK,eAAe;AACpB,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,UAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,WAAK;AACL,MAAAA,SAAQ,IAAI,KAAK,KAAK,WAAW,CAAC;AAClC,WAAK,eAAe;AACpB,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,YAAM,OAAO,KAAK,KAAK,KAAK,GAAG;AAC/B,UAAI,SAAS,KACb;AACI,aAAK;AACL;AAAA,MACJ;AACA,UAAI,SAAS,KACb;AACI,aAAK;AAEL,eAAOA;AAAA,MACX;AACA,YAAM,IAAI,mBAAmB,eAAe;AAAA,IAChD;AAAA,EACJ;AAAA,EAEQ,aACR;AACI,SAAK;AACL,UAAM,QAA0B,CAAC;AACjC,SAAK,eAAe;AACpB,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,QAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,WAAK;AAEL,aAAO;AAAA,IACX;AACA,eACA;AACI,YAAM,KAAK,KAAK,WAAW,CAAC;AAC5B,WAAK,eAAe;AACpB,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,YAAM,OAAO,KAAK,KAAK,KAAK,GAAG;AAC/B,UAAI,SAAS,KACb;AACI,aAAK;AACL;AAAA,MACJ;AACA,UAAI,SAAS,KACb;AACI,aAAK;AAEL,eAAO;AAAA,MACX;AACA,YAAM,IAAI,mBAAmB,eAAe;AAAA,IAChD;AAAA,EACJ;AAAA,EAEQ,cACR;AACI,SAAK;AACL,QAAI,MAAM;AACV,eACA;AACI,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,YAAM,IAAI,KAAK,KAAK,KAAK,GAAG;AAC5B,YAAM,OAAO,KAAK,KAAK,WAAW,KAAK,GAAG;AAC1C,UAAI,MAAM,KACV;AACI,aAAK;AAEL,eAAO;AAAA,MACX;AACA,UAAI,MAAM,MACV;AACI,eAAO,KAAK,YAAY;AACxB;AAAA,MACJ;AACA,UAAI,OAAO,IACX;AACI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,aAAO;AACP,WAAK;AAAA,IACT;AAAA,EACJ;AAAA,EAEQ,cACR;AACI,SAAK;AACL,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,UAAM,IAAI,KAAK,KAAK,KAAK,GAAG;AAC5B,SAAK;AACL,YAAQ,GACR;AAAA,MACI,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAM,eAAO;AAAA,MAClB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO,KAAK,mBAAmB;AAAA,MACzC;AAAS,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,IAC1D;AAAA,EACJ;AAAA,EAEQ,qBACR;AACI,UAAM,OAAO,KAAK,SAAS;AAC3B,QAAI,QAAQ,SAAU,QAAQ,OAC9B;AAEI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,QAAI,OAAO,SAAU,OAAO,OAC5B;AACI,aAAO,OAAO,aAAa,IAAI;AAAA,IACnC;AAEA,QAAI,KAAK,KAAK,KAAK,GAAG,MAAM,QAAQ,KAAK,KAAK,KAAK,MAAM,CAAC,MAAM,KAChE;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,SAAK,OAAO;AACZ,UAAM,MAAM,KAAK,SAAS;AAC1B,QAAI,MAAM,SAAU,MAAM,OAC1B;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AAEA,WAAO,OAAO,aAAa,MAAM,GAAG;AAAA,EACxC;AAAA,EAEQ,WACR;AACI,QAAI,KAAK,MAAM,IAAI,KAAK,KAAK,QAC7B;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,UAAM,MAAM,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,MAAM,CAAC;AAClD,QAAI,CAAC,mBAAmB,KAAK,GAAG,GAChC;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,SAAK,OAAO;AAEZ,WAAO,SAAS,KAAK,EAAE;AAAA,EAC3B;AAAA,EAEQ,cACR;AACI,UAAM,QAAQ,KAAK;AACnB,QAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,WAAK;AAAA,IACT;AACA,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,UAAM,QAAQ,KAAK,KAAK,KAAK,GAAG;AAChC,QAAI,QAAQ,OAAO,QAAQ,KAC3B;AACI,YAAM,IAAI,mBAAmB,eAAe;AAAA,IAChD;AACA,QAAI,UAAU,KACd;AACI,WAAK;AAAA,IACT,OAEA;AACI,aAAO,CAAC,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,GAAG,KAAK,OAAO,KAAK,KAAK,KAAK,GAAG,KAAK,KAC7E;AACI,aAAK;AAAA,MACT;AAAA,IACJ;AACA,QAAI,CAAC,KAAK,MAAM,GAChB;AACI,YAAM,OAAO,KAAK,KAAK,KAAK,GAAG;AAC/B,UAAI,QAAQ,OAAO,QAAQ,KAC3B;AAEI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,UAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAC7C;AACI,cAAM,IAAI,mBAAmB,oBAAoB;AAAA,MACrD;AAAA,IACJ;AACA,UAAM,QAAQ,OAAO,KAAK,KAAK,MAAM,OAAO,KAAK,GAAG,CAAC;AACrD,QAAI,QAAQ,aAAa,QAAQ,WACjC;AACI,YAAM,IAAI,mBAAmB,sBAAsB;AAAA,IACvD;AAEA,WAAO;AAAA,EACX;AACJ;AAOO,SAAS,oBAAoB,OACpC;AACI,SAAO,IAAI,YAAY,EAAE,OAAO,eAAe,KAAK,CAAC;AACzD;AAEA,SAAS,eAAe,OACxB;AACI,MAAI,UAAU,MACd;AACI,WAAO;AAAA,EACX;AACA,MAAI,OAAO,UAAU,WACrB;AACI,WAAO,QAAQ,SAAS;AAAA,EAC5B;AACA,MAAI,OAAO,UAAU,UACrB;AACI,WAAO,MAAM,SAAS;AAAA,EAC1B;AACA,MAAI,OAAO,UAAU,UACrB;AACI,WAAO,aAAa,KAAK;AAAA,EAC7B;AACA,MAAI,MAAM,QAAQ,KAAK,GACvB;AACI,WAAO,IAAI,MAAM,IAAI,cAAc,EAAE,KAAK,GAAG,CAAC;AAAA,EAClD;AACA,QAAM,OAAO,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE,KAAK,mBAAmB;AACvD,QAAMA,WAAU,KAAK,IAAI,CAAC,QAAQ,GAAG,aAAa,GAAG,CAAC,IAAI,eAAe,MAAM,IAAI,GAAG,CAAE,CAAC,EAAE;AAE3F,SAAO,IAAIA,SAAQ,KAAK,GAAG,CAAC;AAChC;AAOA,SAAS,oBAAoB,GAAW,GACxC;AACI,MAAI,IAAI;AACR,MAAI,IAAI;AACR,SAAO,IAAI,EAAE,UAAU,IAAI,EAAE,QAC7B;AACI,UAAM,KAAK,EAAE,YAAY,CAAC;AAC1B,UAAM,KAAK,EAAE,YAAY,CAAC;AAC1B,QAAI,OAAO,IACX;AACI,aAAO,KAAK;AAAA,IAChB;AACA,SAAK,KAAK,QAAS,IAAI;AACvB,SAAK,KAAK,QAAS,IAAI;AAAA,EAC3B;AAEA,SAAQ,EAAE,SAAS,KAAM,EAAE,SAAS;AACxC;AAEA,SAAS,aAAa,OACtB;AACI,MAAI,MAAM;AACV,aAAW,MAAM,OACjB;AACI,UAAM,OAAO,GAAG,YAAY,CAAC;AAC7B,QAAI,OAAO,KACX;AACI,aAAO;AAAA,IACX,WACS,OAAO,MAChB;AACI,aAAO;AAAA,IACX,WACS,SAAS,GAClB;AACI,aAAO;AAAA,IACX,WACS,SAAS,IAClB;AACI,aAAO;AAAA,IACX,WACS,SAAS,IAClB;AACI,aAAO;AAAA,IACX,WACS,SAAS,IAClB;AACI,aAAO;AAAA,IACX,WACS,SAAS,GAClB;AACI,aAAO;AAAA,IACX,WACS,OAAO,IAChB;AACI,aAAO,QAAQ,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,IACrD,OAEA;AACI,aAAO;AAAA,IACX;AAAA,EACJ;AAEA,SAAO,MAAM;AACjB;;;ACrgBA,SAAS,YAAY,kBAAkB,iBAAiB,MAAM,cAA8B;AAGrF,IAAM,uBAAuB;AAG7B,IAAM,qBAAqB,IAAI,OAAO,EAAE;AAGxC,IAAM,+BAA+B;AAGrC,IAAM,qBAAqB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ;AAGO,IAAM,wBAAwB;AAG9B,IAAM,wBAAwB;AAG9B,IAAM,6BAA6B,wBAAwB;AAMlE,IAAM,0BAA0B;AAQhC,IAAM,yBAAyB;AAgBxB,IAAM,kBAAN,cAA8B,MACrC;AAAA,EACI,cACA;AACI,UAAM,mDAAmD;AACzD,SAAK,OAAO;AAAA,EAChB;AACJ;AAOO,SAAS,oBAAoB,OACpC;AACI,QAAM,SAA0C;AAAA,IAC5C,SAAS;AAAA,IACT,QAAQ,MAAM;AAAA,IACd,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,IACb,gBAAgB,MAAM,eAAe,SAAS;AAAA,IAC9C,YAAY,MAAM;AAAA,EACtB;AACA,QAAM,SAAS,mBAAmB,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC;AAC5D,aAAW,SAAS,QACpB;AACI,eAAW,MAAM,OACjB;AACI,UAAI,GAAG,YAAY,CAAC,IAAK,IACzB;AACI,cAAM,IAAI,gBAAgB;AAAA,MAC9B;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO,OAAO,KAAK,qBAAqB;AAC5C;AAUO,SAAS,0BAA0B,eAC1C;AACI,QAAM,MAAM,gBAAgB;AAAA,IACxB,KAAK,OAAO,KAAK,eAAe,QAAQ;AAAA,IACxC,QAAQ;AAAA,IACR,MAAM;AAAA,EACV,CAAC;AACD,MAAI,IAAI,sBAAsB,QAAQ,IAAI,sBAAsB,eAAe,cAC/E;AACI,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AAEA,SAAO;AACX;AAaO,SAAS,kBAAkB,OAAyB,gBAAwB,WACnF;AACI,QAAM,OAAO,OAAO,KAAK,oBAAoB,KAAK,GAAG,MAAM;AAC3D,MAAI,CAAC,wBAAwB,KAAK,cAAc,GAChD;AACI,WAAO;AAAA,EACX;AAEA,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA,EAAE,KAAK,WAAW,aAAa,uBAAuB;AAAA,IACtD,OAAO,KAAK,gBAAgB,KAAK;AAAA,EACrC;AACJ;AASO,SAAS,gBAAgB,OAAyB,0BACzD;AACI,QAAM,MAAM,iBAAiB;AAAA,IACzB,KAAK,OAAO,KAAK,0BAA0B,QAAQ;AAAA,IACnD,QAAQ;AAAA,IACR,MAAM;AAAA,EACV,CAAC;AAED,SAAO;AAAA,IACH;AAAA,IACA,OAAO,KAAK,oBAAoB,KAAK,GAAG,MAAM;AAAA,IAC9C,EAAE,KAAK,aAAa,uBAAuB;AAAA,EAC/C,EAAE,SAAS,KAAK;AACpB;AAGO,SAAS,UAAU,OAC1B;AACI,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAC1D;;;AC5KA,SAAS,mBAAmB;AAwBrB,IAAM,cAAoD;AAAA,EAC7D,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,sBAAsB;AAC1B;AAGO,SAAS,WAChB;AACI,SAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AACzC;AAEO,IAAM,qBAAN,MAAM,oBACb;AAAA,EACI,YACa,MACA,SAEb;AAHa;AACA;AAAA,EAEZ;AAAA,EAED,IAAI,aACJ;AACI,WAAO,YAAY,KAAK,IAAI;AAAA,EAChC;AAAA;AAAA,EAGA,cAAc,WACd;AACI,UAAM,QAAyB,oBAAI,IAA4B;AAAA,MAC3D,CAAC,QAAQ,KAAK,IAAI;AAAA,MAClB,CAAC,WAAW,KAAK,OAAO;AAAA,MACxB,CAAC,aAAa,SAAS;AAAA,IAC3B,CAAC;AAED,WAAO,oBAAoB,oBAAI,IAA4B,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC;AAAA,EAClF;AAAA;AAAA,EAGA,WACA;AACI,WAAO,sBAAsB,KAAK,IAAI;AAAA,EAC1C;AAAA;AAAA,EAIA,OAAO,aACP;AACI,WAAO,kBAAkB,4DAA4D;AAAA,EACzF;AAAA,EAEA,OAAO,mBACP;AACI,WAAO,kBAAkB,yEAAyE;AAAA,EACtG;AAAA,EAEA,OAAO,qBACP;AACI,WAAO,kBAAkB,sEAAsE;AAAA,EACnG;AAAA,EAEA,OAAO,eACP;AACI,WAAO,kBAAkB,uDAAuD;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,mBACP;AACI,WAAO,kBAAkB,yEAAyE;AAAA,EACtG;AAAA,EAEA,OAAO,yBACP;AACI,WAAO,kBAAkB,kEAAkE;AAAA,EAC/F;AAAA,EAEA,OAAO,yBACP;AACI,WAAO,kBAAkB,0EAA0E;AAAA,EACvG;AAAA,EAEA,OAAO,gBACP;AACI,WAAO,kBAAkB,oCAAoC;AAAA,EACjE;AAAA;AAAA,EAIA,OAAO,kBACP;AACI,WAAO,IAAI,oBAAmB,oBAAoB,4DAA4D;AAAA,EAClH;AAAA;AAAA,EAIA,OAAO,iBACP;AACI,WAAO,IAAI,oBAAmB,mBAAmB,gCAAgC;AAAA,EACrF;AAAA,EAEA,OAAO,eACP;AACI,WAAO,IAAI,oBAAmB,iBAAiB,gDAAgD;AAAA,EACnG;AAAA,EAEA,OAAO,gBACP;AACI,WAAO,IAAI,oBAAmB,kBAAkB,qDAAqD;AAAA,EACzG;AAAA,EAEA,OAAO,eACP;AACI,WAAO,IAAI,oBAAmB,iBAAiB,iCAAiC;AAAA,EACpF;AACJ;AAEA,SAAS,kBAAkB,SAC3B;AACI,SAAO,IAAI,mBAAmB,wBAAwB,OAAO;AACjE;;;ACpJA,SAAS,gBAAgB;AAUlB,SAAS,gBAAgB,UAAkB,OAClD;AACI,SAAO,KAAK,UAAU,CAAC,UAAU,KAAK,CAAC;AAC3C;AA2BO,IAAM,qBAAN,MACP;AAAA;AAAA,EAEqB,QAAQ,oBAAI,IAAoB;AAAA,EAEjD,QAAQ,UAAkB,OAC1B;AACI,WAAO,KAAK,MAAM,IAAI,gBAAgB,UAAU,KAAK,CAAC;AAAA,EAC1D;AAAA;AAAA,EAGA,MAAM,UAAkB,OAAe,UACvC;AACI,UAAM,MAAM,gBAAgB,UAAU,KAAK;AAC3C,QAAI,KAAK,MAAM,IAAI,GAAG,GACtB;AACI,aAAO;AAAA,IACX;AACA,SAAK,MAAM,IAAI,KAAK,QAAQ;AAE5B,WAAO;AAAA,EACX;AAAA;AAAA,EAGA,MAAM,WAAmB,cACzB;AACI,eAAW,CAAC,KAAK,aAAa,KAAK,KAAK,OACxC;AACI,UAAI,YAAY,gBAAgB,cAChC;AACI,aAAK,MAAM,OAAO,GAAG;AAAA,MACzB;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,IAAI,OACJ;AACI,WAAO,KAAK,MAAM;AAAA,EACtB;AAAA,EAEA,QACA;AACI,SAAK,MAAM,MAAM;AAAA,EACrB;AACJ;AASO,IAAM,oBAAN,MACP;AAAA,EAGI,YAA6B,eAAuB,8BACpD;AAD6B;AAAA,EAC5B;AAAA,EAHgB,SAAS,IAAI,mBAAmB;AAAA,EAKjD,MAAM,QAAQ,UAAkB,OAChC;AACI,SAAK,OAAO,MAAM,KAAK,IAAI,GAAG,KAAK,YAAY;AAE/C,WAAO,KAAK,OAAO,QAAQ,UAAU,KAAK;AAAA,EAC9C;AAAA,EAEA,MAAM,MAAM,UAAkB,OAC9B;AACI,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAO,MAAM,KAAK,KAAK,YAAY;AAExC,WAAO,KAAK,OAAO,MAAM,UAAU,OAAO,GAAG;AAAA,EACjD;AACJ;AAaO,IAAM,mBAAN,MACP;AAAA,EACI,YAA6B,eAAuB,8BACpD;AAD6B;AAAA,EAC5B;AAAA,EAED,MAAM,QAAQ,UAAkB,OAChC;AACI,WAAO,MAAM,KAAK,MAAM,EAAE,OAAO,KAAK,IAAI,UAAU,KAAK,CAAC,MAAM;AAAA,EACpE;AAAA,EAEA,MAAM,MAAM,UAAkB,OAC9B;AACI,WAAO,MAAM,KAAK,MAAM,EAAE,IAAI,KAAK,IAAI,UAAU,KAAK,GAAG,KAAK,MAAM,KAAK,cAAc,IAAI,MAAM;AAAA,EACrG;AAAA,EAEQ,QACR;AACI,UAAM,QAAQ,SAAS;AACvB,QAAI,CAAC,OACL;AACI,YAAM,IAAI,MAAM,oDAAoD;AAAA,IACxE;AAEA,WAAO;AAAA,EACX;AAAA,EAEQ,IAAI,UAAkB,OAC9B;AACI,WAAO,iCAAiC,UAAU,OAAO,KAAK,gBAAgB,UAAU,KAAK,GAAG,MAAM,CAAC,CAAC;AAAA,EAC5G;AACJ;AAIA,IAAI,aAA4C;AAOzC,SAAS,gCAAgC,OAChD;AACI,eAAa;AACjB;AAGO,SAAS,4BAChB;AACI,iBAAe,IAAI,kBAAkB;AAErC,SAAO;AACX;;;AClKO,SAAS,cAChB;AACI,SAAO,EAAE,WAAW,MAAM,KAAK,IAAI,EAAE;AACzC;AAGO,IAAM,YAAN,MACP;AAAA,EACI,YAAoB,QACpB;AADoB;AAAA,EACnB;AAAA,EAED,YACA;AACI,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,QAAQ,UACR;AACI,SAAK,UAAU;AAAA,EACnB;AACJ;AA+CO,IAAM,6BAA6B;AAEnC,IAAM,mBAAN,MACP;AAAA,EACa;AAAA,EAEQ;AAAA,EACA;AAAA,EACA,aAAa,oBAAI,IAAuB;AAAA,EACxC,WAAW,oBAAI,IAAgC;AAAA;AAAA,EAG/C,cAAc,IAAI,mBAAmB;AAAA,EAErC,gBAAgB,oBAAI,IAAY;AAAA,EAChC,QAAQ,oBAAI,IAAsB;AAAA,EAElC;AAAA,EACT;AAAA,EAEA,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,eAAe;AAAA,EAEvB,YAAY,SACZ;AACI,SAAK,QAAQ,QAAQ,SAAS,YAAY;AAC1C,SAAK,0BAA0B,QAAQ,oBAAoB;AAC3D,SAAK,mBAAmB,KAAK;AAC7B,SAAK,qBAAqB,QAAQ,sBAAsB;AAGxD,SAAK,oBAAoB,IAAI;AAAA,MACzB,OAAO,QAAQ,QAAQ,UAAU,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,0BAA0B,IAAI,CAAC,CAAC;AAAA,IACtG;AACA,eAAW,CAAC,OAAO,GAAG,KAAK,KAAK,mBAChC;AACI,WAAK,WAAW,IAAI,OAAO,GAAG;AAAA,IAClC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,kBAAkB,OAAe,wBACjC;AACI,SAAK,WAAW,IAAI,OAAO,0BAA0B,sBAAsB,CAAC;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAQN;AACI,UAAM,MAAM,KAAK,MAAM,UAAU;AACjC,SAAK,MAAM,GAAG;AAKd,QAAI,KAAK,cAAc,IAAI,KAAK,KAAK,GACrC;AACI,aAAO,mBAAmB,eAAe;AAAA,IAC7C;AACA,QAAI,KAAK,iBACT;AACI,YAAM,UAAU,KAAK,uBAAuB,OAAO,SAAY,KAAK,SAAS,IAAI,KAAK,kBAAkB;AACxG,UAAI,YAAY,UAAa,QAAQ,mBAAmB,OACjD,QAAQ,UAAU,KAAK,SAAS,QAAQ,aAAa,KAAK,UACjE;AACI,eAAO,mBAAmB,eAAe;AAAA,MAC7C;AAAA,IACJ;AAGA,UAAM,MAAM,MAAM,OAAO,KAAK,WAAW,cAAc;AACvD,QAAI,MAAM,KAAK,MAAM,KAAK,oBAC1B;AACI,aAAO,mBAAmB,aAAa;AAAA,IAC3C;AAGA,QAAI,KAAK,YAAY,QAAQ,KAAK,UAAU,KAAK,WAAW,KAAK,GACjE;AACI,aAAO,mBAAmB,cAAc;AAAA,IAC5C;AASA,UAAM,YAAY,KAAK,WAAW,IAAI,KAAK,KAAK;AAChD,QAAI,cAAc,QAClB;AACI,aAAO,mBAAmB,aAAa;AAAA,IAC3C;AACA,QAAI,CAAC,kBAAkB,KAAK,YAAY,KAAK,gBAAgB,SAAS,GACtE;AACI,aAAO,mBAAmB,aAAa;AAAA,IAC3C;AAEA,SAAK,YAAY,MAAM,KAAK,UAAU,KAAK,WAAW,OAAO,OAAO,KAAK,WAAW,cAAc,CAAC;AAEnG,WAAO;AAAA,EACX;AAAA;AAAA;AAAA,EAKA,YAAY,UAAkB,OAC9B;AACI,UAAM,MAAM,KAAK,MAAM,UAAU;AACjC,SAAK,MAAM,GAAG;AACd,UAAM,YAAY,SAAS;AAC3B,UAAM,kBAAkB,MAAM,KAAK;AACnC,SAAK,SAAS,IAAI,WAAW,EAAE,UAAU,OAAO,gBAAgB,CAAC;AAEjE,WAAO,EAAE,WAAW,gBAAgB;AAAA,EACxC;AAAA;AAAA,EAGA,YAAY,WAAmB,UAAkB,OAAe,iBAChE;AACI,SAAK,SAAS,IAAI,WAAW,EAAE,UAAU,OAAO,gBAAgB,CAAC;AAAA,EACrE;AAAA;AAAA,EAGA,iBACA;AACI,SAAK,SAAS,MAAM;AAAA,EACxB;AAAA;AAAA,EAGA,UAAU,OACV;AACI,SAAK,cAAc,IAAI,KAAK;AAC5B,eAAW,CAAC,WAAW,OAAO,KAAK,KAAK,UACxC;AACI,UAAI,QAAQ,UAAU,OACtB;AACI,aAAK,SAAS,OAAO,SAAS;AAAA,MAClC;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,oBAAoB,QACpB;AACI,SAAK,mBAAmB;AAAA,EAC5B;AAAA;AAAA,EAGA,QACA;AACI,SAAK,WAAW,MAAM;AACtB,eAAW,CAAC,OAAO,GAAG,KAAK,KAAK,mBAChC;AACI,WAAK,WAAW,IAAI,OAAO,GAAG;AAAA,IAClC;AACA,SAAK,SAAS,MAAM;AACpB,SAAK,YAAY,MAAM;AACvB,SAAK,cAAc,MAAM;AACzB,SAAK,MAAM,MAAM;AACjB,SAAK,mBAAmB,KAAK;AAC7B,SAAK,eAAe;AACpB,SAAK,iBAAiB;AACtB,SAAK,YAAY;AACjB,SAAK,iBAAiB;AACtB,SAAK,eAAe;AAAA,EACxB;AAAA;AAAA;AAAA,EAKA,SAAS,MAAc,QAAgB,OACvC;AACI,SAAK,MAAM,IAAI,MAAM,EAAE,QAAQ,WAAW,MAAM,CAAC;AAAA,EACrD;AAAA;AAAA,EAGA,eAAe,MACf;AACI,UAAMC,QAAO,KAAK,MAAM,IAAI,IAAI;AAChC,QAAIA,UAAS,QACb;AACI,aAAO;AAAA,IACX;AACA,IAAAA,MAAK,aAAa;AAClB,QAAIA,MAAK,aAAa,GACtB;AACI,WAAK,MAAM,OAAO,IAAI;AAAA,IAC1B;AAEA,WAAOA,MAAK;AAAA,EAChB;AAAA;AAAA,EAIA,gBACA;AACI,SAAK,gBAAgB;AAAA,EACzB;AAAA,EAEA,gBAAgB,aAChB;AACI,QAAI,gBAAgB,8BACpB;AACI,WAAK,kBAAkB;AAAA,IAC3B,WACS,gBAAgB,aACzB;AACI,WAAK,aAAa;AAAA,IACtB,WACS,gBAAgB,cACzB;AACI,WAAK,kBAAkB;AAAA,IAC3B;AAAA,EACJ;AAAA,EAEA,gBACA;AACI,SAAK,gBAAgB;AAAA,EACzB;AAAA,EAEA,QACA;AACI,SAAK,MAAM,KAAK,MAAM,UAAU,CAAC;AAEjC,WAAO;AAAA,MACH,cAAc,KAAK;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,WAAW,KAAK;AAAA,MAChB,gBAAgB,KAAK;AAAA,MACrB,cAAc,KAAK;AAAA,MACnB,kBAAkB,KAAK,SAAS;AAAA,MAChC,iBAAiB,KAAK,YAAY;AAAA,IACtC;AAAA,EACJ;AAAA,EAEA,YACA;AACI,WAAO,KAAK,MAAM,UAAU;AAAA,EAChC;AAAA;AAAA,EAGA,IAAI,WACJ;AACI,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,MAAM,WACd;AACI,eAAW,CAAC,WAAW,OAAO,KAAK,KAAK,UACxC;AACI,UAAI,QAAQ,mBAAmB,WAC/B;AACI,aAAK,SAAS,OAAO,SAAS;AAAA,MAClC;AAAA,IACJ;AACA,SAAK,YAAY,MAAM,WAAW,KAAK,kBAAkB;AAAA,EAC7D;AACJ;;;AC3XO,IAAM,uBAAuB;AAAA,EAChC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,OAAO;AAAA,EACP,OAAO;AAAA,EACP,gBAAgB;AAAA,EAChB,OAAO;AAAA,EACP,SAAS;AACb;AAEO,IAAM,4BAA4B;AAEzC,IAAMC,aAAY,EAAE,MAAM;AAC1B,IAAMC,aAAY,MAAM,MAAM;AAwBvB,SAAS,wBAAwB,MAQxC;AACI,QAAM,cAAc,gBAAgB,KAAK,OAAO;AAChD,MAAI,gBAAgB,MACpB;AACI,WAAO,QAAQ,mBAAmB,iBAAiB,CAAC;AAAA,EACxD;AACA,MAAI,YAAY,YAAY,sBAC5B;AACI,WAAO,QAAQ,mBAAmB,gBAAgB,CAAC;AAAA,EACvD;AACA,MAAI,CAAC,qBAAqB,KAAK,QAAQ,IAAI,cAAc,CAAC,GAC1D;AACI,WAAO,QAAQ,mBAAmB,mBAAmB,CAAC;AAAA,EAC1D;AACA,MAAI,KAAK,qBAAqB,YAAY,cAAc,OACxD;AACI,WAAO,QAAQ,mBAAmB,uBAAuB,CAAC;AAAA,EAC9D;AAEA,MAAI;AACJ,MACA;AACI,YAAQ,mBAAmB,KAAK,IAAI;AAAA,EACxC,QAEA;AACI,WAAO,QAAQ,mBAAmB,iBAAiB,CAAC;AAAA,EACxD;AAGA,MAAI,CAAC,iBAAiB,KAAK,MAAM,KAAK,GACtC;AACI,WAAO,QAAQ,mBAAmB,iBAAiB,CAAC;AAAA,EACxD;AAEA,QAAM,aAA+B;AAAA,IACjC,QAAQ,KAAK;AAAA,IACb,MAAM,KAAK;AAAA,IACX,UAAU,YAAY;AAAA,IACtB,OAAO,YAAY;AAAA,IACnB,OAAO,YAAY;AAAA,IACnB,gBAAgB,YAAY;AAAA,IAC5B,YAAY,UAAU,KAAK,IAAI;AAAA,EACnC;AAEA,MAAI;AACJ,MACA;AACI,cAAU,KAAK,MAAM,MAAM;AAAA,MACvB,UAAU,YAAY;AAAA,MACtB,OAAO,YAAY;AAAA,MACnB,oBAAoB,YAAY;AAAA,MAChC,iBAAiB,KAAK;AAAA,MACtB;AAAA,MACA,gBAAgB,YAAY;AAAA,IAChC,CAAC;AAAA,EACL,QAEA;AAGI,WAAO,QAAQ,mBAAmB,cAAc,CAAC;AAAA,EACrD;AACA,MAAI,YAAY,MAChB;AACI,WAAO,QAAQ,OAAO;AAAA,EAC1B;AAEA,SAAO,EAAE,UAAU,MAAM,OAAO,YAAY;AAChD;AAEA,SAAS,QAAQ,SACjB;AACI,SAAO,EAAE,UAAU,OAAO,QAAQ;AACtC;AAYO,SAAS,gBAAgB,SAChC;AACI,QAAM,UAAU,QAAQ,IAAI,qBAAqB,OAAO;AACxD,QAAM,WAAW,QAAQ,IAAI,qBAAqB,QAAQ;AAC1D,QAAM,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AACpD,QAAM,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AACpD,QAAM,cAAc,QAAQ,IAAI,qBAAqB,cAAc;AACnE,QAAM,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AACpD,MAAI,YAAY,QAAQ,aAAa,QAAQ,UAAU,QAChD,UAAU,QAAQ,gBAAgB,QAAQ,UAAU,MAC3D;AACI,WAAO;AAAA,EACX;AACA,QAAM,iBAAiB,WAAW,WAAW;AAC7C,MAAI,mBAAmB,MACvB;AACI,WAAO;AAAA,EACX;AAEA,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,IAAI,qBAAqB,OAAO;AAAA,EACvD;AACJ;AAEA,SAAS,WAAW,KACpB;AACI,MAAI,CAAC,kBAAkB,KAAK,GAAG,GAC/B;AACI,WAAO;AAAA,EACX;AACA,QAAM,QAAQ,OAAO,GAAG;AACxB,MAAI,QAAQD,cAAa,QAAQC,YACjC;AACI,WAAO;AAAA,EACX;AAEA,SAAO;AACX;AAGO,SAAS,qBAAqB,OACrC;AACI,MAAI,UAAU,MACd;AACI,WAAO;AAAA,EACX;AAEA,SAAO,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,MAAM;AACxD;;;AClKO,IAAM,sBAAoD;AAAA,EAC7D;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AACJ;AAcO,IAAM,0BAAwD;AAAA,EACjE;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AACJ;AAGO,IAAM,oBAAN,cAAgC,MACvC;AAAA,EACI,cACA;AACI,UAAM,gCAAgC;AACtC,SAAK,OAAO;AAAA,EAChB;AACJ;AAiCO,SAAS,uBAAuB,OACvC;AACI,QAAMC,WAAU,eAAe,OAAO,CAAC,YAAY,SAAS,SAAS,gBAAgB,GAAG,CAAC,CAAC;AAE1F,SAAO;AAAA,IACH,UAAU,KAAKA,SAAQ,IAAI,UAAU,CAAC;AAAA,IACtC,OAAO,KAAKA,SAAQ,IAAI,OAAO,CAAC;AAAA,IAChC,OAAO,KAAKA,SAAQ,IAAI,OAAO,CAAC;AAAA,IAChC,gBAAgB,QAAQA,SAAQ,IAAI,gBAAgB,CAAC;AAAA,EACzD;AACJ;AAEO,SAAS,kBAAkB,OAClC;AACI,QAAMA,WAAU,eAAe,OAAO,CAAC,WAAW,UAAU,GAAG,CAAC,CAAC;AAEjE,SAAO;AAAA,IACH,SAAS,KAAKA,SAAQ,IAAI,SAAS,CAAC;AAAA,IACpC,UAAU,QAAQA,SAAQ,IAAI,UAAU,CAAC;AAAA,EAC7C;AACJ;AAEO,SAAS,uBAAuB,OACvC;AACI,QAAMA,WAAU,eAAe,OAAO,CAAC,OAAO,GAAG,CAAC,QAAQ,CAAC;AAC3D,QAAM,UAA4B,EAAE,OAAO,QAAQA,SAAQ,IAAI,OAAO,CAAC,EAAE;AACzE,MAAIA,SAAQ,IAAI,QAAQ,GACxB;AACI,YAAQ,SAAS,KAAKA,SAAQ,IAAI,QAAQ,CAAC;AAAA,EAC/C;AAEA,SAAO;AACX;AAEA,SAAS,eACL,OACA,UACA,UAEJ;AACI,MAAI,EAAE,iBAAiB,MACvB;AACI,UAAM,IAAI,kBAAkB;AAAA,EAChC;AACA,aAAW,OAAO,UAClB;AACI,QAAI,CAAC,MAAM,IAAI,GAAG,GAClB;AACI,YAAM,IAAI,kBAAkB;AAAA,IAChC;AAAA,EACJ;AACA,aAAW,OAAO,MAAM,KAAK,GAC7B;AACI,QAAI,CAAC,SAAS,SAAS,GAAG,KAAK,CAAC,SAAS,SAAS,GAAG,GACrD;AACI,YAAM,IAAI,kBAAkB;AAAA,IAChC;AAAA,EACJ;AAEA,SAAO;AACX;AAEA,SAAS,KAAK,OACd;AACI,MAAI,OAAO,UAAU,UACrB;AACI,UAAM,IAAI,kBAAkB;AAAA,EAChC;AAEA,SAAO;AACX;AAEA,SAAS,QAAQ,OACjB;AACI,MAAI,OAAO,UAAU,UACrB;AACI,UAAM,IAAI,kBAAkB;AAAA,EAChC;AAEA,SAAO;AACX;AAMO,SAAS,wBAAwB,WAAmB,iBAC3D;AACI,SAAO,oBAAI,IAA4B;AAAA,IACnC,CAAC,aAAa,SAAS;AAAA,IACvB,CAAC,mBAAmB,eAAe;AAAA,EACvC,CAAC;AACL;AAEO,SAAS,mBAAmB,SAAiB,UAAkB,kBACtE;AACI,SAAO,oBAAI,IAA4B;AAAA,IACnC,CAAC,WAAW,OAAO;AAAA,IACnB,CAAC,YAAY,QAAQ;AAAA,IACrB,CAAC,oBAAoB,gBAAgB;AAAA,EACzC,CAAC;AACL;AAEO,SAAS,wBAAwB,OAAuB,YAC/D;AACI,QAAM,eAA+B,MAAM,IAAI,CAAC,SAAS,oBAAI,IAA4B;AAAA,IACrF,CAAC,MAAM,KAAK,EAAE;AAAA,IACd,CAAC,QAAQ,KAAK,IAAI;AAAA,IAClB,CAAC,mBAAmB,KAAK,eAAe;AAAA,EAC5C,CAAC,CAAC;AACF,QAAMA,WAAU,oBAAI,IAA4B,CAAC,CAAC,SAAS,YAAY,CAAC,CAAC;AACzE,MAAI,eAAe,MACnB;AACI,IAAAA,SAAQ,IAAI,cAAc,UAAU;AAAA,EACxC;AAEA,SAAOA;AACX;;;AC/QO,IAAM,iBAAiB;AAEvB,IAAM,uBAAuB;AAEpC,IAAM,UAAU;AAChB,IAAM,mBAAmB;AACzB,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AAEtB,IAAM,yBAAyB;AAE/B,eAAsB,qBAClB,OACA,cACA,MACA,SAEJ;AACI,MAAI,SAAS,mBACb;AACI,WAAO,OAAO,SAAS,oBAAI,IAA4B,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAAA,EAC9E;AACA,MAAI,QAAQ,QAAQ,IAAI,oBAAoB,MAAM,cAClD;AACI,WAAO,OAAO,gBAAgB,QAAQ,eAAe,CAAC;AAAA,EAC1D;AAEA,QAAM,MAAM,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC;AACtD,QAAM,OAAO,IAAI,SAAS,yBAAyB,IAAI,MAAM,GAAG,sBAAsB,IAAI;AAE1F,UAAQ,MACR;AAAA,IACI,KAAK;AACD,aAAO,MAAM,KAAK;AAAA,IACtB,KAAK;AACD,YAAM,MAAM;AAEZ,aAAO,GAAG;AAAA,IACd,KAAK;AACD,YAAM,eAAe;AAErB,aAAO,GAAG;AAAA,IACd,KAAK;AACD,aAAO,YAAY,OAAO,IAAI;AAAA,IAClC,KAAK;AACD,aAAO,UAAU,OAAO,IAAI;AAAA,IAChC,KAAK;AACD,aAAO,WAAW,OAAO,IAAI;AAAA,IACjC,KAAK;AACD,aAAO,KAAK,OAAO,IAAI;AAAA,IAC3B,KAAK;AACD,aAAO,aAAa,OAAO,IAAI;AAAA,IACnC;AACI,aAAO,OAAO,gBAAgB,QAAQ,uBAAuB,CAAC;AAAA,EACtE;AACJ;AAIA,SAAS,MAAM,OACf;AACI,QAAM,WAAW,MAAM,MAAM;AAE7B,SAAO,OAAO,SAAS,OAAO,oBAAI,IAA4B;AAAA,IAC1D,CAAC,aAAa,OAAO,SAAS,SAAS,CAAC;AAAA,IACxC,CAAC,kBAAkB,OAAO,SAAS,cAAc,CAAC;AAAA,IAClD,CAAC,kBAAkB,OAAO,SAAS,cAAc,CAAC;AAAA,IAClD,CAAC,oBAAoB,OAAO,SAAS,gBAAgB,CAAC;AAAA,IACtD,CAAC,gBAAgB,OAAO,SAAS,YAAY,CAAC;AAAA,IAC9C,CAAC,gBAAgB,OAAO,SAAS,YAAY,CAAC;AAAA,IAC9C,CAAC,mBAAmB,OAAO,SAAS,eAAe,CAAC;AAAA,EACxD,CAAC,CAAC,CAAC;AACP;AAQA,SAAS,YAAY,OAAyB,MAC9C;AACI,QAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,QAAM,YAAY,YAAY,MAAM,WAAW;AAC/C,MAAI,UAAU,MACd;AACI,WAAO,WAAW,OAAO;AAAA,EAC7B;AACA,MAAI,cAAc,MAClB;AACI,WAAO,WAAW,WAAW;AAAA,EACjC;AACA,MACA;AACI,UAAM,kBAAkB,OAAO,SAAS;AAAA,EAC5C,QAEA;AACI,WAAO,WAAW,WAAW;AAAA,EACjC;AAEA,SAAO,GAAG;AACd;AAEA,SAAS,UAAU,OAAyB,MAC5C;AACI,QAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,MAAI,UAAU,MACd;AACI,WAAO,WAAW,OAAO;AAAA,EAC7B;AACA,QAAM,UAAU,KAAK;AAErB,SAAO,GAAG;AACd;AAEA,SAAS,WAAW,OAAyB,MAC7C;AACI,QAAM,YAAY,aAAa,MAAM,WAAW;AAChD,MAAI,cAAc,MAClB;AACI,WAAO,WAAW,WAAW;AAAA,EACjC;AACA,QAAM,oBAAoB,OAAO,SAAS,CAAC;AAE3C,SAAO,GAAG;AACd;AAEA,SAAS,KAAK,OAAyB,MACvC;AACI,QAAM,OAAO,YAAY,MAAM,MAAM;AACrC,QAAM,SAAS,aAAa,MAAM,QAAQ;AAC1C,QAAM,QAAQ,aAAa,MAAM,OAAO;AACxC,MAAI,SAAS,MACb;AACI,WAAO,WAAW,MAAM;AAAA,EAC5B;AACA,MAAI,WAAW,MACf;AACI,WAAO,WAAW,QAAQ;AAAA,EAC9B;AACA,MAAI,UAAU,MACd;AACI,WAAO,WAAW,OAAO;AAAA,EAC7B;AACA,QAAM,SAAS,MAAM,OAAO,MAAM,GAAG,OAAO,KAAK,CAAC;AAElD,SAAO,GAAG;AACd;AAMA,SAAS,aAAa,OAAyB,MAC/C;AACI,QAAM,QAAQ,MAAM;AACpB,MAAI,EAAE,iBAAiB,YACvB;AACI,WAAO,OAAO,eAAe,QAAQ,uCAAuC,CAAC;AAAA,EACjF;AACA,QAAM,SAAS,aAAa,MAAM,QAAQ;AAC1C,MAAI,WAAW,MACf;AACI,WAAO,WAAW,QAAQ;AAAA,EAC9B;AACA,QAAM,QAAQ,OAAO,MAAM,CAAC;AAE5B,SAAO,GAAG;AACd;AAIA,SAAS,QAAQ,MACjB;AACI,MAAI,KAAK,WAAW,GACpB;AACI,WAAO,oBAAI,IAAI;AAAA,EACnB;AACA,MAAI;AACJ,MACA;AACI,aAAS,mBAAmB,IAAI;AAAA,EACpC,QAEA;AACI,WAAO;AAAA,EACX;AAEA,SAAO,kBAAkB,MAAM,SAAS;AAC5C;AAEA,SAAS,YAAY,MAAkB,OACvC;AACI,QAAM,QAAQ,QAAQ,IAAI,GAAG,IAAI,KAAK;AAEtC,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC/C;AAEA,SAAS,aAAa,MAAkB,OACxC;AACI,QAAM,QAAQ,QAAQ,IAAI,GAAG,IAAI,KAAK;AAEtC,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC/C;AAEA,SAAS,WAAW,OACpB;AACI,SAAO,OAAO,kBAAkB,QAAQ,+BAA+B,KAAK,EAAE,CAAC;AACnF;AAEA,SAAS,KACT;AACI,SAAO,OAAO,SAAS,OAAO,oBAAI,IAAI,CAAC,CAAC;AAC5C;AAEA,SAAS,QAAQ,QACjB;AACI,SAAO,oBAAI,IAA4B,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,MAAM,CAAC,CAAC;AAC9E;AAEA,SAAS,OAAO,OAChB;AACI,QAAM,IAAI,MAAM,IAAI;AAEpB,SAAO;AACX;AAEA,SAAS,OAAO,QAAgB,OAChC;AACI,QAAM,QAAQ,oBAAoB,KAAK;AACvC,QAAM,SAAS,MAAM,OAAO,MAAM,MAAM,YAAY,MAAM,aAAa,MAAM,UAAU;AAEvF,SAAO,IAAI,SAAS,QAAQ,EAAE,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE,CAAC;AAC3F;;;ACvNA,IAAM,iBAAiB,KAAK;AAE5B,IAAMC,WAAU;AAOT,IAAM,gBAAyC;AAAA,EAClD,EAAE,IAAI,aAAa,MAAM,SAAS,iBAAiB,eAAmB;AAAA,EACtE,EAAE,IAAI,aAAa,MAAM,SAAS,iBAAiB,eAAmB;AAAA,EACtE,EAAE,IAAI,aAAa,MAAM,WAAW,iBAAiB,eAAmB;AAAA,EACxE,EAAE,IAAI,aAAa,MAAM,SAAS,iBAAiB,eAAmB;AAAA,EACtE,EAAE,IAAI,aAAa,MAAM,QAAQ,iBAAiB,eAAmB;AACzE;AAGO,IAAM,gBAAgB;AAwBtB,SAAS,4BAA4B,SAC5C;AACI,QAAM,QAAQ,IAAI,iBAAiB,OAAO;AAC1C,QAAM,eAAe,QAAQ,gBAAgB,SAAS;AACtD,QAAM,gBAAgB,QAAQ,iBAAiB;AAC/C,QAAM,MAAM,QAAQ,QAAQ,MAAM;AAElC,iBAAe,SAAS,SACxB;AACI,UAAM,cAAc;AACpB,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAE/B,QAAI,iBAAiB,IAAI,SAAS,WAAW,cAAc,GAC3D;AACI,aAAO,qBAAqB,OAAO,cAAc,IAAI,UAAU,OAAO;AAAA,IAC1E;AAIA,UAAM,YAAY,IAAI,WAAW,KAC3B,oBAAoB,KAAK,CAAC,OAAO,GAAG,SAAS,IAAI,YAAY,GAAG,WAAW,QAAQ,MAAM,IACzF;AACN,QAAI,cAAc,QAClB;AACI,aAAO,OAAO,mBAAmB,WAAW,CAAC;AAAA,IACjD;AAEA,UAAM,OAAO,MAAM,eAAe,OAAO;AACzC,QAAI,SAAS,MACb;AACI,aAAO,OAAO,mBAAmB,aAAa,CAAC;AAAA,IACnD;AAIA,UAAM,YAAY,IAAI,QAAQ;AAE9B,UAAM,YAAY,wBAAwB;AAAA,MACtC;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB,QAAQ,UAAU;AAAA,MAClB,MAAM,UAAU;AAAA,MAChB,iBAAiB,UAAU;AAAA,MAC3B;AAAA,IACJ,CAAC;AACD,QAAI,CAAC,UAAU,UACf;AACI,aAAO,OAAO,UAAU,OAAO;AAAA,IACnC;AAEA,WAAO,MAAM,WAAW,SAAS;AAAA,EACrC;AAEA,WAAS,MAAM,WAA8B,WAC7C;AACI,QAAI;AACJ,QACA;AACI,UAAI,UAAU,OAAO,8BACrB;AACI,cAAM,UAAU,uBAAuB,UAAU,KAAK;AAItD,YAAI,QAAQ,aAAa,UAAU,YAAY,YACxC,QAAQ,UAAU,UAAU,YAAY,OAC/C;AACI,iBAAO,OAAO,mBAAmB,uBAAuB,CAAC;AAAA,QAC7D;AACA,cAAM,SAAS,MAAM,YAAY,QAAQ,UAAU,QAAQ,KAAK;AAChE,gBAAQ,wBAAwB,OAAO,WAAW,OAAO,OAAO,eAAe,CAAC;AAAA,MACpF,WACS,UAAU,OAAO,aAC1B;AACI,cAAM,UAAU,kBAAkB,UAAU,KAAK;AACjD,gBAAQ,mBAAmB,QAAQ,SAAS,QAAQ,UAAU,OAAO,MAAM,UAAU,CAAC,CAAC;AAAA,MAC3F,OAEA;AACI,cAAM,SAAS,UAAU,uBAAuB,UAAU,KAAK,CAAC;AAChE,YAAI,WAAW,MACf;AACI,iBAAO,OAAO,mBAAmB,uBAAuB,CAAC;AAAA,QAC7D;AACA,gBAAQ;AAAA,MACZ;AAAA,IACJ,SACO,OACP;AACI,UAAI,iBAAiB,mBACrB;AACI,eAAO,OAAO,mBAAmB,uBAAuB,CAAC;AAAA,MAC7D;AAEA,aAAO,OAAO,mBAAmB,cAAc,CAAC;AAAA,IACpD;AAEA,UAAM,gBAAgB,UAAU,EAAE;AAElC,WAAO,iBAAiBA,UAAS,oBAAoB,KAAK,CAAC;AAAA,EAC/D;AAEA,WAAS,OAAO,SAChB;AACI,UAAM,cAAc;AAEpB,WAAO,iBAAiB,QAAQ,YAAY,QAAQ,cAAc,SAAS,CAAC,CAAC;AAAA,EACjF;AAEA,iBAAe,YAAY,MAC3B;AACI,UAAM,SAAS,MAAM,eAAe,IAAI;AACxC,QAAI,SAAS,GACb;AACI,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,MAAM,CAAC;AAAA,IAC9D;AAAA,EACJ;AAEA,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA,OAAO,OAAO,YACd;AACI,UACA;AACI,cAAM,WAAW,MAAM,SAAS,OAAO;AACvC,YAAI,GAAG,QAAQ,MAAM,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,QAAQ,OAAO,SAAS,MAAM,EAAE;AAE9E,eAAO;AAAA,MACX,QAEA;AAGI,eAAO,OAAO,mBAAmB,cAAc,CAAC;AAAA,MACpD;AAAA,IACJ;AAAA,EACJ;AACJ;AAQA,SAAS,UAAU,SACnB;AACI,MAAI,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,eAC1C;AACI,WAAO;AAAA,EACX;AACA,MAAI,QAAQ;AACZ,MAAI,QAAQ,WAAW,QACvB;AACI,UAAM,QAAQ,cAAc,UAAU,CAAC,SAAS,KAAK,OAAO,QAAQ,MAAM;AAC1E,QAAI,QAAQ,GACZ;AACI,aAAO;AAAA,IACX;AACA,YAAQ,QAAQ;AAAA,EACpB;AACA,QAAM,MAAM,KAAK,IAAI,cAAc,QAAQ,QAAQ,OAAO,QAAQ,KAAK,CAAC;AACxE,QAAM,OAAO,cAAc,MAAM,OAAO,GAAG;AAG3C,QAAM,aAAa,MAAM,cAAc,UAAU,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC,EAAE,KAAK;AAE9F,SAAO,wBAAwB,CAAC,GAAG,IAAI,GAAG,UAAU;AACxD;AAEA,SAAS,iBAAiB,QAAgB,MAC1C;AACI,SAAO,IAAI,SAAS,cAAc,IAAI,GAAG;AAAA,IACrC;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAClD,CAAC;AACL;AAGA,eAAe,eAAe,SAC9B;AACI,MAAI,QAAQ,SAAS,MACrB;AACI,WAAO,IAAI,WAAW,CAAC;AAAA,EAC3B;AACA,QAAM,SAAS,QAAQ,KAAK,UAAU;AACtC,QAAM,SAAuB,CAAC;AAC9B,MAAI,QAAQ;AACZ,aACA;AACI,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,QAAI,MACJ;AACI;AAAA,IACJ;AACA,aAAS,MAAM;AACf,QAAI,QAAQ,gBACZ;AACI,YAAM,OAAO,OAAO;AAEpB,aAAO;AAAA,IACX;AACA,WAAO,KAAK,KAAK;AAAA,EACrB;AACA,QAAM,OAAO,IAAI,WAAW,KAAK;AACjC,MAAI,SAAS;AACb,aAAW,SAAS,QACpB;AACI,SAAK,IAAI,OAAO,MAAM;AACtB,cAAU,MAAM;AAAA,EACpB;AAEA,SAAO;AACX;AAEA,SAAS,cAAc,OACvB;AACI,SAAO,MAAM,OAAO,MAAM,MAAM,YAAY,MAAM,aAAa,MAAM,UAAU;AACnF;;;AC3PO,SAAS,uBACZ,OACA,UAAmC,CAAC,GAExC;AACI,SAAO,OAAO,GAAY,SAC1B;AACI,UAAM,OAAO,IAAI,WAAW,MAAM,EAAE,IAAI,YAAY,CAAC;AACrD,UAAM,YAAY,wBAAwB;AAAA,MACtC;AAAA,MACA,SAAS,EAAE,IAAI,IAAI;AAAA,MACnB,QAAQ,EAAE,IAAI;AAAA,MACd,MAAM,QAAQ,gBAAgB,EAAE,IAAI;AAAA,MACpC,iBAAiB;AAAA,MACjB;AAAA,IACJ,CAAC;AACD,QAAI,CAAC,UAAU,UACf;AACI,YAAM,cAAc;AACpB,YAAM,QAAQ,UAAU,QAAQ,cAAc,SAAS,CAAC;AACxD,YAAM,SAAS,MAAM,OAAO,MAAM,MAAM,YAAY,MAAM,aAAa,MAAM,UAAU;AAEvF,aAAO,EAAE,YAAY,QAAQ,UAAU,QAAQ,YAAmB;AAAA,QAC9D,gBAAgB;AAAA,MACpB,CAAC;AAAA,IACL;AACA,MAAE,IAAI,cAAc,QAAQ;AAC5B,MAAE,IAAI,eAAe;AAAA,MACjB,aAAa,UAAU;AAAA,MACvB,OAAO,UAAU;AAAA,IACrB,CAA8B;AAC9B,UAAM,KAAK;AAEX,WAAO;AAAA,EACX;AACJ;","names":["text","members","hold","INT64_MIN","INT64_MAX","members","HTTP_OK"]}
+{"version":3,"sources":["../src/server/client-proof/canonical-json.ts","../src/server/client-proof/proof.ts","../src/server/client-proof/refusal.ts","../src/server/client-proof/replay-store.ts","../src/server/client-proof/state.ts","../src/server/client-proof/admission.ts","../src/server/client-proof/contract-types.ts","../src/server/client-proof/dev-control.ts","../src/server/client-proof/dev-handler.ts","../src/server/client-proof/guard.ts"],"sourcesContent":["/**\n * SPFN-CANON-JSON-1 — the canonical JSON form the mobile contract pins.\n *\n * The rules (contracts/mobile/spfn-mobile-contract.json `canonicalJson`):\n * - object keys sorted ascending by UTF-8 byte sequence\n * - no insignificant whitespace\n * - numbers are signed 64-bit integers only\n * - string escapes: `\"` and `\\` escaped; C0 controls use \\b \\f \\n \\r \\t where\n *   defined and lowercase \\u00XX otherwise; every other scalar is emitted\n *   literally as UTF-8\n * - absent optional fields are omitted, never null\n *\n * JSON.parse cannot implement this: it loses int64 precision, accepts duplicate\n * keys and (in V8) raw control characters, so both directions are hand-rolled.\n * A proof binds the received bytes — parse-then-re-encode equality is what makes\n * canonicity a rule a client can actually break.\n *\n * @module server/client-proof/canonical-json\n */\n\nexport type CanonicalObject = Map<string, CanonicalValue>;\n\nexport type CanonicalValue = null | boolean | bigint | string | CanonicalValue[] | CanonicalObject;\n\n/**\n * Parse failures carry the code the mobile conformance fixtures name\n * (Contracts/fixtures/canonical/rejects.json), so the fixtures can assert on it.\n */\nexport type CanonicalJsonErrorCode =\n    | 'DUPLICATE_KEY'\n    | 'NON_INTEGER_NUMBER'\n    | 'TRAILING_CONTENT'\n    | 'UNEXPECTED_END'\n    | 'INVALID_TOKEN'\n    | 'INVALID_ESCAPE'\n    | 'INTEGER_OUT_OF_RANGE'\n    | 'INVALID_UTF8';\n\nexport class CanonicalJsonError extends Error\n{\n    constructor(readonly code: CanonicalJsonErrorCode)\n    {\n        super(`canonical JSON: ${code}`);\n        this.name = 'CanonicalJsonError';\n    }\n}\n\nconst INT64_MIN = -(2n ** 63n);\nconst INT64_MAX = 2n ** 63n - 1n;\n\n// ============================================================================\n// Parsing\n// ============================================================================\n\n/**\n * Parse bytes as SPFN-CANON-JSON-1.\n *\n * Arbitrary whitespace and key order are accepted here — parsing alone proves\n * nothing about canonicity. Callers that must enforce it re-encode the result\n * and compare bytes (see `isCanonicalBytes`).\n */\nexport function parseCanonicalJson(bytes: Uint8Array): CanonicalValue\n{\n    let text: string;\n    try\n    {\n        text = new TextDecoder('utf-8', { fatal: true }).decode(bytes);\n    }\n    catch\n    {\n        throw new CanonicalJsonError('INVALID_UTF8');\n    }\n\n    const parser = new Parser(text);\n    const value = parser.parseValue();\n    parser.skipWhitespace();\n    if (!parser.atEnd())\n    {\n        throw new CanonicalJsonError('TRAILING_CONTENT');\n    }\n\n    return value;\n}\n\n/** True when `bytes` are exactly the canonical encoding of the value they parse to. */\nexport function isCanonicalBytes(bytes: Uint8Array, value: CanonicalValue): boolean\n{\n    const encoded = encodeCanonicalJson(value);\n    if (encoded.length !== bytes.length)\n    {\n        return false;\n    }\n    for (let i = 0; i < encoded.length; i++)\n    {\n        if (encoded[i] !== bytes[i])\n        {\n            return false;\n        }\n    }\n\n    return true;\n}\n\nclass Parser\n{\n    private pos = 0;\n\n    constructor(private readonly text: string) \n    {}\n\n    atEnd(): boolean\n    {\n        return this.pos >= this.text.length;\n    }\n\n    skipWhitespace(): void\n    {\n        while (!this.atEnd())\n        {\n            const c = this.text[this.pos];\n            if (c === ' ' || c === '\\t' || c === '\\n' || c === '\\r')\n            {\n                this.pos++;\n                continue;\n            }\n            break;\n        }\n    }\n\n    parseValue(): CanonicalValue\n    {\n        this.skipWhitespace();\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        const c = this.text[this.pos];\n        if (c === '{')\n        {\n            return this.parseObject();\n        }\n        if (c === '[')\n        {\n            return this.parseArray();\n        }\n        if (c === '\"')\n        {\n            return this.parseString();\n        }\n        if (c === '-' || (c >= '0' && c <= '9'))\n        {\n            return this.parseNumber();\n        }\n        if (this.text.startsWith('null', this.pos))\n        {\n            this.pos += 4;\n\n            return null;\n        }\n        if (this.text.startsWith('true', this.pos))\n        {\n            this.pos += 4;\n\n            return true;\n        }\n        if (this.text.startsWith('false', this.pos))\n        {\n            this.pos += 5;\n\n            return false;\n        }\n        throw new CanonicalJsonError('INVALID_TOKEN');\n    }\n\n    private parseObject(): CanonicalObject\n    {\n        this.pos++; // '{'\n        const members: CanonicalObject = new Map();\n        this.skipWhitespace();\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        if (this.text[this.pos] === '}')\n        {\n            this.pos++;\n\n            return members;\n        }\n        for (;;)\n        {\n            this.skipWhitespace();\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            if (this.text[this.pos] !== '\"')\n            {\n                throw new CanonicalJsonError('INVALID_TOKEN');\n            }\n            const key = this.parseString();\n            if (members.has(key))\n            {\n                throw new CanonicalJsonError('DUPLICATE_KEY');\n            }\n            this.skipWhitespace();\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            if (this.text[this.pos] !== ':')\n            {\n                throw new CanonicalJsonError('INVALID_TOKEN');\n            }\n            this.pos++;\n            members.set(key, this.parseValue());\n            this.skipWhitespace();\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            const next = this.text[this.pos];\n            if (next === ',')\n            {\n                this.pos++;\n                continue;\n            }\n            if (next === '}')\n            {\n                this.pos++;\n\n                return members;\n            }\n            throw new CanonicalJsonError('INVALID_TOKEN');\n        }\n    }\n\n    private parseArray(): CanonicalValue[]\n    {\n        this.pos++; // '['\n        const items: CanonicalValue[] = [];\n        this.skipWhitespace();\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        if (this.text[this.pos] === ']')\n        {\n            this.pos++;\n\n            return items;\n        }\n        for (;;)\n        {\n            items.push(this.parseValue());\n            this.skipWhitespace();\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            const next = this.text[this.pos];\n            if (next === ',')\n            {\n                this.pos++;\n                continue;\n            }\n            if (next === ']')\n            {\n                this.pos++;\n\n                return items;\n            }\n            throw new CanonicalJsonError('INVALID_TOKEN');\n        }\n    }\n\n    private parseString(): string\n    {\n        this.pos++; // '\"'\n        let out = '';\n        for (;;)\n        {\n            if (this.atEnd())\n            {\n                throw new CanonicalJsonError('UNEXPECTED_END');\n            }\n            const c = this.text[this.pos];\n            const code = this.text.charCodeAt(this.pos);\n            if (c === '\"')\n            {\n                this.pos++;\n\n                return out;\n            }\n            if (c === '\\\\')\n            {\n                out += this.parseEscape();\n                continue;\n            }\n            if (code < 0x20)\n            {\n                throw new CanonicalJsonError('INVALID_TOKEN');\n            }\n            out += c;\n            this.pos++;\n        }\n    }\n\n    private parseEscape(): string\n    {\n        this.pos++; // '\\'\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        const c = this.text[this.pos];\n        this.pos++;\n        switch (c)\n        {\n            case '\"': return '\"';\n            case '\\\\': return '\\\\';\n            case '/': return '/';\n            case 'b': return '\\b';\n            case 'f': return '\\f';\n            case 'n': return '\\n';\n            case 'r': return '\\r';\n            case 't': return '\\t';\n            case 'u': return this.parseUnicodeEscape();\n            default: throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n    }\n\n    private parseUnicodeEscape(): string\n    {\n        const high = this.readHex4();\n        if (high >= 0xdc00 && high <= 0xdfff)\n        {\n            // A low surrogate with no preceding high surrogate.\n            throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n        if (high < 0xd800 || high > 0xdbff)\n        {\n            return String.fromCharCode(high);\n        }\n        // A high surrogate must be completed by an escaped low surrogate.\n        if (this.text[this.pos] !== '\\\\' || this.text[this.pos + 1] !== 'u')\n        {\n            throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n        this.pos += 2;\n        const low = this.readHex4();\n        if (low < 0xdc00 || low > 0xdfff)\n        {\n            throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n\n        return String.fromCharCode(high, low);\n    }\n\n    private readHex4(): number\n    {\n        if (this.pos + 4 > this.text.length)\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        const hex = this.text.slice(this.pos, this.pos + 4);\n        if (!/^[0-9a-fA-F]{4}$/.test(hex))\n        {\n            throw new CanonicalJsonError('INVALID_ESCAPE');\n        }\n        this.pos += 4;\n\n        return parseInt(hex, 16);\n    }\n\n    private parseNumber(): bigint\n    {\n        const start = this.pos;\n        if (this.text[this.pos] === '-')\n        {\n            this.pos++;\n        }\n        if (this.atEnd())\n        {\n            throw new CanonicalJsonError('UNEXPECTED_END');\n        }\n        const first = this.text[this.pos];\n        if (first < '0' || first > '9')\n        {\n            throw new CanonicalJsonError('INVALID_TOKEN');\n        }\n        if (first === '0')\n        {\n            this.pos++;\n        }\n        else\n        {\n            while (!this.atEnd() && this.text[this.pos] >= '0' && this.text[this.pos] <= '9')\n            {\n                this.pos++;\n            }\n        }\n        if (!this.atEnd())\n        {\n            const next = this.text[this.pos];\n            if (next >= '0' && next <= '9')\n            {\n                // A leading zero followed by more digits.\n                throw new CanonicalJsonError('INVALID_TOKEN');\n            }\n            if (next === '.' || next === 'e' || next === 'E')\n            {\n                throw new CanonicalJsonError('NON_INTEGER_NUMBER');\n            }\n        }\n        const value = BigInt(this.text.slice(start, this.pos));\n        if (value < INT64_MIN || value > INT64_MAX)\n        {\n            throw new CanonicalJsonError('INTEGER_OUT_OF_RANGE');\n        }\n\n        return value;\n    }\n}\n\n// ============================================================================\n// Encoding\n// ============================================================================\n\n/** Encode a value as SPFN-CANON-JSON-1 bytes. */\nexport function encodeCanonicalJson(value: CanonicalValue): Uint8Array\n{\n    return new TextEncoder().encode(encodeToString(value));\n}\n\nfunction encodeToString(value: CanonicalValue): string\n{\n    if (value === null)\n    {\n        return 'null';\n    }\n    if (typeof value === 'boolean')\n    {\n        return value ? 'true' : 'false';\n    }\n    if (typeof value === 'bigint')\n    {\n        return value.toString();\n    }\n    if (typeof value === 'string')\n    {\n        return encodeString(value);\n    }\n    if (Array.isArray(value))\n    {\n        return `[${value.map(encodeToString).join(',')}]`;\n    }\n    const keys = [...value.keys()].sort(compareByCodePoints);\n    const members = keys.map((key) => `${encodeString(key)}:${encodeToString(value.get(key)!)}`);\n\n    return `{${members.join(',')}}`;\n}\n\n/**\n * UTF-8 byte order equals code point order, so keys are compared by code\n * points rather than UTF-16 code units (which would misorder U+E000..U+FFFF\n * against supplementary-plane characters).\n */\nfunction compareByCodePoints(a: string, b: string): number\n{\n    let i = 0;\n    let j = 0;\n    while (i < a.length && j < b.length)\n    {\n        const ca = a.codePointAt(i)!;\n        const cb = b.codePointAt(j)!;\n        if (ca !== cb)\n        {\n            return ca - cb;\n        }\n        i += ca > 0xffff ? 2 : 1;\n        j += cb > 0xffff ? 2 : 1;\n    }\n\n    return (a.length - i) - (b.length - j);\n}\n\nfunction encodeString(value: string): string\n{\n    let out = '\"';\n    for (const ch of value)\n    {\n        const code = ch.codePointAt(0)!;\n        if (ch === '\"')\n        {\n            out += '\\\\\"';\n        }\n        else if (ch === '\\\\')\n        {\n            out += '\\\\\\\\';\n        }\n        else if (code === 0x08)\n        {\n            out += '\\\\b';\n        }\n        else if (code === 0x0c)\n        {\n            out += '\\\\f';\n        }\n        else if (code === 0x0a)\n        {\n            out += '\\\\n';\n        }\n        else if (code === 0x0d)\n        {\n            out += '\\\\r';\n        }\n        else if (code === 0x09)\n        {\n            out += '\\\\t';\n        }\n        else if (code < 0x20)\n        {\n            out += `\\\\u00${code.toString(16).padStart(2, '0')}`;\n        }\n        else\n        {\n            out += ch;\n        }\n    }\n\n    return out + '\"';\n}\n","/**\n * SPFN-PROOF-INPUT-1 — proof-input assembly and verification for clientProofV1.\n *\n * The proof input is 8 fields joined by `\\n` in fixed order: profile, method,\n * path, clientId, keyId, nonce, issuedAtMillis, bodySha256. Any C0 control\n * character in any field is a hard refusal (the separator would otherwise be\n * ambiguous), never something to escape. The proof is an ECDSA P-256 signature\n * with SHA-256 over the canonical input's UTF-8 bytes, wire-encoded as the raw\n * `r ‖ s` 64 bytes in base16-lower (128 hex characters). DER is never accepted\n * on the wire: a platform signer that emits DER (Java `Signature`) converts to\n * raw before sending. Low-S normalization is not required — uniqueness is owned\n * by the nonce and replay window, so signature malleability cannot replay.\n *\n * @module server/client-proof/proof\n */\nimport { createHash, createPrivateKey, createPublicKey, sign, verify, type KeyObject } from 'node:crypto';\n\n/** The only auth profile this module implements. */\nexport const CLIENT_PROOF_PROFILE = 'clientProofV1';\n\n/** `bodySha256` when an operation carries no body: 64 zero characters. */\nexport const ABSENT_BODY_SHA256 = '0'.repeat(64);\n\n/** The contract's `clientProofV1.replayWindowMillis`. */\nexport const DEFAULT_REPLAY_WINDOW_MILLIS = 300_000;\n\n/** The eight proof-input fields, in the order the signature is taken over. */\nexport const PROOF_INPUT_FIELDS = [\n    'profile',\n    'method',\n    'path',\n    'clientId',\n    'keyId',\n    'nonce',\n    'issuedAtMillis',\n    'bodySha256',\n] as const;\n\n/** What joins the proof-input fields. */\nexport const PROOF_INPUT_SEPARATOR = '\\n';\n\n/** Raw `r ‖ s`: two 32-byte big-endian integers, always exactly this long. */\nexport const PROOF_SIGNATURE_BYTES = 64;\n\n/** The wire form is base16-lower of the raw signature: 128 hex characters. */\nexport const PROOF_SIGNATURE_HEX_LENGTH = PROOF_SIGNATURE_BYTES * 2;\n\n/**\n * Exactly 128 lowercase hex characters — anything else (DER, uppercase,\n * truncated, padded) is not a proof this contract describes.\n */\nconst PROOF_SIGNATURE_PATTERN = /^[0-9a-f]{128}$/;\n\n/**\n * Node's name for the fixed-width raw `r ‖ s` signature encoding. Both signing\n * and verification pin it, so the r/s padding rules (a 32-byte length is\n * guaranteed, a would-be 33-byte DER integer is trimmed) live inside\n * node:crypto rather than in a hand-rolled DER converter.\n */\nconst RAW_SIGNATURE_ENCODING = 'ieee-p1363';\n\ntype ProofInputField = (typeof PROOF_INPUT_FIELDS)[number];\n\nexport interface ClientProofInput\n{\n    method: string;\n    path: string;\n    clientId: string;\n    keyId: string;\n    nonce: string;\n    issuedAtMillis: bigint;\n    bodySha256: string;\n}\n\n/** A C0 control character appeared in a proof field. */\nexport class ProofInputError extends Error\n{\n    constructor()\n    {\n        super('proof input field contains a C0 control character');\n        this.name = 'ProofInputError';\n    }\n}\n\n/**\n * The canonical proof-input string the signature is taken over.\n *\n * @throws ProofInputError when any field contains a C0 control character.\n */\nexport function canonicalProofInput(input: ClientProofInput): string\n{\n    const values: Record<ProofInputField, string> = {\n        profile: CLIENT_PROOF_PROFILE,\n        method: input.method,\n        path: input.path,\n        clientId: input.clientId,\n        keyId: input.keyId,\n        nonce: input.nonce,\n        issuedAtMillis: input.issuedAtMillis.toString(),\n        bodySha256: input.bodySha256,\n    };\n    const fields = PROOF_INPUT_FIELDS.map((name) => values[name]);\n    for (const field of fields)\n    {\n        for (const ch of field)\n        {\n            if (ch.codePointAt(0)! < 0x20)\n            {\n                throw new ProofInputError();\n            }\n        }\n    }\n\n    return fields.join(PROOF_INPUT_SEPARATOR);\n}\n\n/**\n * The contract's public-key representation — SPKI DER, base64 (the same\n * representation `user_public_keys` and the web ES256 path store) — as a key\n * object. Anything that is not a P-256 EC key is refused at parse time, so a\n * key that could never verify a proof is never registered.\n *\n * @throws when the input is not base64 SPKI DER naming a P-256 key.\n */\nexport function parseClientProofPublicKey(spkiDerBase64: string): KeyObject\n{\n    const key = createPublicKey({\n        key: Buffer.from(spkiDerBase64, 'base64'),\n        format: 'der',\n        type: 'spki',\n    });\n    if (key.asymmetricKeyType !== 'ec' || key.asymmetricKeyDetails?.namedCurve !== 'prime256v1')\n    {\n        throw new Error('a clientProofV1 public key must be an ECDSA P-256 key');\n    }\n\n    return key;\n}\n\n/**\n * Verifies a presented proof against `input` and a registered public key.\n *\n * The input is assembled first, so a C0 control character throws no matter\n * what was presented — an unassemblable input is a contract violation, never\n * a proof answer. Then the wire-format gate: a value that is not exactly 128\n * lowercase hex characters — a DER signature, a truncated one, uppercase hex —\n * is invalid before any cryptography happens.\n *\n * @throws ProofInputError when an input field contains a C0 control character.\n */\nexport function verifyClientProof(input: ClientProofInput, presentedProof: string, publicKey: KeyObject): boolean\n{\n    const data = Buffer.from(canonicalProofInput(input), 'utf8');\n    if (!PROOF_SIGNATURE_PATTERN.test(presentedProof))\n    {\n        return false;\n    }\n\n    return verify(\n        'sha256',\n        data,\n        { key: publicKey, dsaEncoding: RAW_SIGNATURE_ENCODING },\n        Buffer.from(presentedProof, 'hex'),\n    );\n}\n\n/**\n * Signs `input` with a PKCS#8 DER base64 private key, producing the wire form\n * (raw `r ‖ s`, base16-lower).\n *\n * The verifying half's counterpart, here for tests and dev clients — a\n * production signer lives in the mobile SDKs against hardware-held keys.\n */\nexport function signClientProof(input: ClientProofInput, privateKeyPkcs8DerBase64: string): string\n{\n    const key = createPrivateKey({\n        key: Buffer.from(privateKeyPkcs8DerBase64, 'base64'),\n        format: 'der',\n        type: 'pkcs8',\n    });\n\n    return sign(\n        'sha256',\n        Buffer.from(canonicalProofInput(input), 'utf8'),\n        { key, dsaEncoding: RAW_SIGNATURE_ENCODING },\n    ).toString('hex');\n}\n\n/** Lowercase base16 SHA-256 of `bytes`. */\nexport function sha256Hex(bytes: Uint8Array): string\n{\n    return createHash('sha256').update(bytes).digest('hex');\n}\n","/**\n * Every way a clientProofV1 server refuses a request.\n *\n * The contract declares six error codes and forbids inventing a seventh, so\n * every refusal here is one of the six. Two rules decide which code a refusal\n * gets (mirroring the spfn-mobile reference server, the executable spec):\n *\n * 1. A refusal a new session could clear is an auth-family code (401). The SDK\n *    re-handshakes exactly once on those.\n * 2. Everything else — the request is not the shape the contract describes —\n *    is CONTRACT_UNSUPPORTED: the two ends do not agree on what the contract\n *    is. PROOF_INVALID would provoke a pointless re-handshake and\n *    PROFILE_REJECTED names one specific thing (a profile outside the\n *    allowlist), used for exactly and only that.\n *\n * Every message is a fixed string: a message assembled from the request would\n * put a nonce, session id or body fragment into an error the client may log.\n *\n * @module server/client-proof/refusal\n */\nimport { randomBytes } from 'node:crypto';\n\nimport { encodeCanonicalJson, type CanonicalObject, type CanonicalValue } from './canonical-json';\n\n/** The six wire codes. The SDKs classify by code, never HTTP status. */\nexport type ClientProofErrorCode =\n    | 'PROOF_INVALID'\n    | 'PROOF_REPLAYED'\n    | 'PROOF_EXPIRED'\n    | 'SESSION_REVOKED'\n    | 'PROFILE_REJECTED'\n    | 'CONTRACT_UNSUPPORTED';\n\n/** The declaration order of the six codes — the contract export emits this order. */\nexport const CLIENT_PROOF_ERROR_CODES: readonly ClientProofErrorCode[] = [\n    'PROOF_INVALID',\n    'PROOF_REPLAYED',\n    'PROOF_EXPIRED',\n    'SESSION_REVOKED',\n    'PROFILE_REJECTED',\n    'CONTRACT_UNSUPPORTED',\n];\n\n/** The status each code answers with. The contract export reads this. */\nexport const HTTP_STATUS: Record<ClientProofErrorCode, number> = {\n    PROOF_INVALID: 401,\n    PROOF_REPLAYED: 401,\n    PROOF_EXPIRED: 401,\n    SESSION_REVOKED: 401,\n    PROFILE_REJECTED: 400,\n    CONTRACT_UNSUPPORTED: 409,\n};\n\n/** 128 random bits as lowercase base16 — request ids and control tokens. */\nexport function newHexId(): string\n{\n    return randomBytes(16).toString('hex');\n}\n\nexport class ClientProofRefusal\n{\n    constructor(\n        readonly code: ClientProofErrorCode,\n        readonly message: string,\n    ) \n    {}\n\n    get httpStatus(): number\n    {\n        return HTTP_STATUS[this.code];\n    }\n\n    /** The canonical bytes of `{\"error\":{\"code\":…,\"message\":…,\"requestId\":…}}`. */\n    envelopeBytes(requestId: string): Uint8Array\n    {\n        const error: CanonicalObject = new Map<string, CanonicalValue>([\n            ['code', this.code],\n            ['message', this.message],\n            ['requestId', requestId],\n        ]);\n\n        return encodeCanonicalJson(new Map<string, CanonicalValue>([['error', error]]));\n    }\n\n    /** Nothing request-derived reaches a log through this. */\n    toString(): string\n    {\n        return `ClientProofRefusal(${this.code})`;\n    }\n\n    // ---- shape: what arrived is not the contract (rule 2) -------------------\n\n    static unroutable(): ClientProofRefusal\n    {\n        return contractViolation('no operation in this contract answers that method and path');\n    }\n\n    static malformedHeaders(): ClientProofRefusal\n    {\n        return contractViolation('the request does not carry the contract header fields exactly once each');\n    }\n\n    static missingContentType(): ClientProofRefusal\n    {\n        return contractViolation('a request that carries a body must declare the contract content type');\n    }\n\n    static bodyTooLarge(): ClientProofRefusal\n    {\n        return contractViolation('the request body exceeds the size this server accepts');\n    }\n\n    /**\n     * The body parsed but its bytes are not the canonical form of what it\n     * parsed to. Not PROOF_INVALID even though it is discovered next to the\n     * proof: the proof over these bytes verifies perfectly well, and an\n     * auth-family answer would tell the client to re-handshake and send the\n     * same non-canonical bytes again.\n     */\n    static bodyNotCanonical(): ClientProofRefusal\n    {\n        return contractViolation('the request body is not the canonical JSON form of the value it encodes');\n    }\n\n    static bodyNotTheDeclaredType(): ClientProofRefusal\n    {\n        return contractViolation('the request body is not the request type this operation declares');\n    }\n\n    static sessionHeaderMisplaced(): ClientProofRefusal\n    {\n        return contractViolation('the session header is present exactly on the operations that require one');\n    }\n\n    static unprocessable(): ClientProofRefusal\n    {\n        return contractViolation('the request could not be processed');\n    }\n\n    // ---- the profile allowlist ----------------------------------------------\n\n    static profileRejected(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('PROFILE_REJECTED', \"the named auth profile is not on this contract's allowlist\");\n    }\n\n    // ---- auth: a new session might clear it (rule 1) -------------------------\n\n    static sessionRevoked(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('SESSION_REVOKED', 'the key or session was revoked');\n    }\n\n    static proofExpired(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('PROOF_EXPIRED', 'issuedAtMillis falls outside the replay window');\n    }\n\n    static proofReplayed(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('PROOF_REPLAYED', 'the nonce was already used inside the replay window');\n    }\n\n    static proofInvalid(): ClientProofRefusal\n    {\n        return new ClientProofRefusal('PROOF_INVALID', 'the client proof did not verify');\n    }\n}\n\nfunction contractViolation(message: string): ClientProofRefusal\n{\n    return new ClientProofRefusal('CONTRACT_UNSUPPORTED', message);\n}\n","/**\n * The clientProofV1 replay ledger as a pluggable store — the same pattern\n * one-time-token uses: an in-memory default, an opt-in Redis/Valkey store on\n * top of `getCache()`, and a module-level configuration hook.\n *\n * One data structure owns the memory semantics: `MemoryReplayLedger` is used\n * synchronously by the dev surface's `ClientProofState` (whose `admit` must\n * stay synchronous to keep its single-thread atomicity argument) and wrapped\n * by `MemoryReplayStore` for the async middleware path. There is exactly one\n * implementation of \"spent inside the window\", not two.\n *\n * The nonce-spending rule is the contract's: a nonce is recorded only when a\n * request is admitted, so `isSpent` (the replay-order check) and `spend` (the\n * post-verification record) are separate calls. `spend` is check-and-set — it\n * answers false when another request spent the nonce between the two calls —\n * so the race two concurrent same-nonce requests can open is closed at the\n * store, for memory and Redis alike.\n *\n * Store failure is the caller's refusal, never a pass-through: the middleware\n * path treats a throwing store as \"reject the request\" (fail-closed). An auth\n * surface does not fail open.\n *\n * @module server/client-proof/replay-store\n */\nimport { getCache } from '@spfn/core/cache';\n\nimport { DEFAULT_REPLAY_WINDOW_MILLIS, sha256Hex } from './proof';\n\n/**\n * The ledger key. `JSON.stringify` of the pair, so no crafted clientId/nonce\n * concatenation can collide with another pair — the fields are checked for C0\n * controls only later, at proof verification, so the key must be unambiguous\n * for arbitrary strings.\n */\nexport function replayLedgerKey(clientId: string, nonce: string): string\n{\n    return JSON.stringify([clientId, nonce]);\n}\n\n/**\n * What the middleware's replay ledger must answer. Both methods may reject;\n * the caller refuses the request when they do (fail-closed).\n */\nexport interface ClientProofReplayStore\n{\n    /** True when (clientId, nonce) was already spent inside the window. */\n    isSpent(clientId: string, nonce: string): Promise<boolean>;\n\n    /**\n     * Records the pair as spent. False when it was already spent — the caller\n     * lost a race and must answer PROOF_REPLAYED, not accept twice.\n     */\n    spend(clientId: string, nonce: string): Promise<boolean>;\n}\n\n/**\n * The in-memory ledger — the single implementation of the window semantics.\n *\n * Entries carry the millisecond they were recorded at; `prune` drops an entry\n * only once a proof carrying that timestamp would be refused as expired\n * anyway (the exact negation of the admission window check). All methods are\n * synchronous so `ClientProofState.admit` can stay atomic on Node's single\n * thread.\n */\nexport class MemoryReplayLedger\n{\n    /** replayLedgerKey(...) → the millis it was spent at. */\n    private readonly spent = new Map<string, number>();\n\n    isSpent(clientId: string, nonce: string): boolean\n    {\n        return this.spent.has(replayLedgerKey(clientId, nonce));\n    }\n\n    /** Records the pair at `atMillis`; false when it was already spent. */\n    spend(clientId: string, nonce: string, atMillis: number): boolean\n    {\n        const key = replayLedgerKey(clientId, nonce);\n        if (this.spent.has(key))\n        {\n            return false;\n        }\n        this.spent.set(key, atMillis);\n\n        return true;\n    }\n\n    /** Drops entries older than the window, judged against `nowMillis`. */\n    prune(nowMillis: number, windowMillis: number): void\n    {\n        for (const [key, spentAtMillis] of this.spent)\n        {\n            if (nowMillis - spentAtMillis > windowMillis)\n            {\n                this.spent.delete(key);\n            }\n        }\n    }\n\n    get size(): number\n    {\n        return this.spent.size;\n    }\n\n    clear(): void\n    {\n        this.spent.clear();\n    }\n}\n\n/**\n * The default store: a process-local `MemoryReplayLedger` on the wall clock.\n *\n * Correct for a single process. Behind a multi-instance deployment each\n * instance keeps its own ledger, so a replay against a *different* instance\n * is not seen — that deployment opts into `RedisReplayStore`.\n */\nexport class MemoryReplayStore implements ClientProofReplayStore\n{\n    private readonly ledger = new MemoryReplayLedger();\n\n    constructor(private readonly windowMillis: number = DEFAULT_REPLAY_WINDOW_MILLIS)\n    {}\n\n    async isSpent(clientId: string, nonce: string): Promise<boolean>\n    {\n        this.ledger.prune(Date.now(), this.windowMillis);\n\n        return this.ledger.isSpent(clientId, nonce);\n    }\n\n    async spend(clientId: string, nonce: string): Promise<boolean>\n    {\n        const now = Date.now();\n        this.ledger.prune(now, this.windowMillis);\n\n        return this.ledger.spend(clientId, nonce, now);\n    }\n}\n\n/**\n * The opt-in shared ledger over `getCache()` (ioredis): `SET NX PX <window>`.\n *\n * The key hashes the pair, so arbitrary clientId/nonce strings become short,\n * safe Redis keys with no ambiguity. `PX` makes Redis expire the entry itself\n * exactly when a proof reusing the nonce would pass the window check again.\n *\n * Fail-closed by construction: when the cache is not configured or a command\n * rejects, the error propagates and the caller refuses the request. Nothing\n * here answers \"not spent\" on a store it could not reach.\n */\nexport class RedisReplayStore implements ClientProofReplayStore\n{\n    constructor(private readonly windowMillis: number = DEFAULT_REPLAY_WINDOW_MILLIS)\n    {}\n\n    async isSpent(clientId: string, nonce: string): Promise<boolean>\n    {\n        return await this.cache().exists(this.key(clientId, nonce)) === 1;\n    }\n\n    async spend(clientId: string, nonce: string): Promise<boolean>\n    {\n        return await this.cache().set(this.key(clientId, nonce), '1', 'PX', this.windowMillis, 'NX') === 'OK';\n    }\n\n    private cache(): NonNullable<ReturnType<typeof getCache>>\n    {\n        const cache = getCache();\n        if (!cache)\n        {\n            throw new Error('client-proof replay ledger: cache is not available');\n        }\n\n        return cache;\n    }\n\n    private key(clientId: string, nonce: string): string\n    {\n        return `spfn:auth:client-proof:replay:${sha256Hex(Buffer.from(replayLedgerKey(clientId, nonce), 'utf8'))}`;\n    }\n}\n\n// ---- module-level configuration (the one-time-token pattern) ---------------\n\nlet configured: ClientProofReplayStore | null = null;\n\n/**\n * Installs the replay store the authenticate middleware uses. Pass\n * `new RedisReplayStore()` to opt into the shared ledger; pass null to return\n * to the in-memory default.\n */\nexport function configureClientProofReplayStore(store: ClientProofReplayStore | null): void\n{\n    configured = store;\n}\n\n/** The configured store, or a lazily created in-memory default. */\nexport function getClientProofReplayStore(): ClientProofReplayStore\n{\n    configured ??= new MemoryReplayStore();\n\n    return configured;\n}\n","/**\n * Everything a clientProofV1 server remembers between requests: issued\n * sessions, the replay ledger, revoked keys and the key directory.\n *\n * The admission order is the contract's, not this file's invention\n * (`clientProofV1.revocationRule` + the replay fixtures):\n *\n * 1. revoked keyId / invalid session → SESSION_REVOKED — before proof\n *    verification, so revocation stays distinguishable from a bad proof;\n * 2. issuedAtMillis outside the replay window (0 <= age <= window) → PROOF_EXPIRED;\n * 3. a repeated (clientId, nonce) pair inside the window → PROOF_REPLAYED;\n * 4. only then signature verification → PROOF_INVALID when it does not verify.\n *\n * A nonce is recorded as spent only on admission: a request refused for any\n * earlier reason has not spent anything, so a client that fixes the reason and\n * retries with the same nonce is not punished twice for one mistake. This is\n * why core's `NonceStore.checkAndSet` (which records on check) is not reused\n * here — its semantics would spend a nonce on a refused request.\n *\n * `admit` is synchronous, so on Node's single thread the whole sequence is\n * atomic: two requests presenting the same nonce cannot interleave inside it.\n *\n * @module server/client-proof/state\n */\nimport type { KeyObject } from 'node:crypto';\n\nimport {\n    DEFAULT_REPLAY_WINDOW_MILLIS,\n    parseClientProofPublicKey,\n    verifyClientProof,\n    type ClientProofInput,\n} from './proof';\nimport { ClientProofRefusal, newHexId } from './refusal';\nimport { MemoryReplayLedger } from './replay-store';\n\n/** Millisecond clock. Injectable so expiry paths are testable without waiting. */\nexport interface ClientProofClock\n{\n    nowMillis(): number;\n}\n\nexport function systemClock(): ClientProofClock\n{\n    return { nowMillis: () => Date.now() };\n}\n\n/** A clock a test (or the dev control surface) can move forward. */\nexport class TestClock implements ClientProofClock\n{\n    constructor(private millis: number) \n    {}\n\n    nowMillis(): number\n    {\n        return this.millis;\n    }\n\n    advance(byMillis: number): void\n    {\n        this.millis += byMillis;\n    }\n}\n\n/** What `stats()` reports. Counters only; nothing a request carried. */\nexport interface ClientProofStats\n{\n    requestCount: number;\n    handshakeCount: number;\n    echoCount: number;\n    itemsListCount: number;\n    refusalCount: number;\n    liveSessionCount: number;\n    spentNonceCount: number;\n}\n\ninterface ClientProofSession\n{\n    clientId: string;\n    keyId: string;\n    expiresAtMillis: number;\n}\n\ninterface PathHold\n{\n    millis: number;\n    remaining: number;\n}\n\nexport interface ClientProofStateOptions\n{\n    /**\n     * keyId → registered public key, as SPKI DER base64. The private half\n     * never reaches the server: a client generates its keypair (hardware-held\n     * on mobile) and only the public key is registered — at construction here,\n     * or later through `registerPublicKey` (the dev `/control/register-key`\n     * route).\n     */\n    publicKeys: Record<string, string>;\n\n    clock?: ClientProofClock;\n\n    /** @default 600000 */\n    sessionTtlMillis?: number;\n\n    /** The contract's replay window. @default 300000 */\n    replayWindowMillis?: number;\n}\n\nexport const DEFAULT_SESSION_TTL_MILLIS = 600_000;\n\nexport class ClientProofState\n{\n    readonly replayWindowMillis: number;\n\n    private readonly clock: ClientProofClock;\n    private readonly initialPublicKeys: ReadonlyMap<string, KeyObject>;\n    private readonly publicKeys = new Map<string, KeyObject>();\n    private readonly sessions = new Map<string, ClientProofSession>();\n\n    /** The replay ledger — the shared memory implementation, used dev-only here. */\n    private readonly spentNonces = new MemoryReplayLedger();\n\n    private readonly revokedKeyIds = new Set<string>();\n    private readonly holds = new Map<string, PathHold>();\n\n    private readonly initialSessionTtlMillis: number;\n    private sessionTtlMillis: number;\n\n    private requestCount = 0;\n    private handshakeCount = 0;\n    private echoCount = 0;\n    private itemsListCount = 0;\n    private refusalCount = 0;\n\n    constructor(options: ClientProofStateOptions)\n    {\n        this.clock = options.clock ?? systemClock();\n        this.initialSessionTtlMillis = options.sessionTtlMillis ?? DEFAULT_SESSION_TTL_MILLIS;\n        this.sessionTtlMillis = this.initialSessionTtlMillis;\n        this.replayWindowMillis = options.replayWindowMillis ?? DEFAULT_REPLAY_WINDOW_MILLIS;\n        // Parsed once here, so a key that is not P-256 SPKI fails loudly at\n        // construction rather than as a PROOF_INVALID mystery at request time.\n        this.initialPublicKeys = new Map(\n            Object.entries(options.publicKeys).map(([keyId, spki]) => [keyId, parseClientProofPublicKey(spki)]),\n        );\n        for (const [keyId, key] of this.initialPublicKeys)\n        {\n            this.publicKeys.set(keyId, key);\n        }\n    }\n\n    // ---- key registration --------------------------------------------------\n\n    /**\n     * Registers (or replaces) the public key `keyId` presents proofs under.\n     *\n     * @throws when the key is not base64 SPKI DER naming a P-256 key.\n     */\n    registerPublicKey(keyId: string, publicKeySpkiDerBase64: string): void\n    {\n        this.publicKeys.set(keyId, parseClientProofPublicKey(publicKeySpkiDerBase64));\n    }\n\n    // ---- admission ---------------------------------------------------------\n\n    /**\n     * Runs the contract's checks in the contract's order and returns the\n     * refusal, or null when the request is admitted (spending its nonce).\n     */\n    admit(args: {\n        clientId: string;\n        keyId: string;\n        presentedSessionId: string | null;\n        requiresSession: boolean;\n        proofInput: ClientProofInput;\n        presentedProof: string;\n    }): ClientProofRefusal | null\n    {\n        const now = this.clock.nowMillis();\n        this.prune(now);\n\n        // 1. Revocation, before anything the proof could explain. A revoked key\n        //    and a dropped session are the same answer on purpose: both are\n        //    cleared by opening a new session.\n        if (this.revokedKeyIds.has(args.keyId))\n        {\n            return ClientProofRefusal.sessionRevoked();\n        }\n        if (args.requiresSession)\n        {\n            const session = args.presentedSessionId === null ? undefined : this.sessions.get(args.presentedSessionId);\n            if (session === undefined || session.expiresAtMillis <= now\n                || session.keyId !== args.keyId || session.clientId !== args.clientId)\n            {\n                return ClientProofRefusal.sessionRevoked();\n            }\n        }\n\n        // 2. The replay window, judged against this server's clock.\n        const age = now - Number(args.proofInput.issuedAtMillis);\n        if (age < 0 || age > this.replayWindowMillis)\n        {\n            return ClientProofRefusal.proofExpired();\n        }\n\n        // 3. One acceptance per (clientId, nonce) inside that window.\n        if (this.spentNonces.isSpent(args.clientId, args.proofInput.nonce))\n        {\n            return ClientProofRefusal.proofReplayed();\n        }\n\n        // 4. The proof itself, last, so the three answers above stay\n        //    distinguishable. An unregistered keyId lands here rather than in\n        //    step 1, and shares PROOF_INVALID with a failed signature: it was\n        //    never registered, so it was never revoked, there is nothing for a\n        //    new session to fix, and whether a keyId exists is not inferable\n        //    from the refusal — the same non-disclosure the revocation rule\n        //    keeps.\n        const publicKey = this.publicKeys.get(args.keyId);\n        if (publicKey === undefined)\n        {\n            return ClientProofRefusal.proofInvalid();\n        }\n        if (!verifyClientProof(args.proofInput, args.presentedProof, publicKey))\n        {\n            return ClientProofRefusal.proofInvalid();\n        }\n\n        this.spentNonces.spend(args.clientId, args.proofInput.nonce, Number(args.proofInput.issuedAtMillis));\n\n        return null;\n    }\n\n    // ---- sessions ----------------------------------------------------------\n\n    /** Opens a session and returns its id and the expiry the server advertises. */\n    openSession(clientId: string, keyId: string): { sessionId: string; expiresAtMillis: number }\n    {\n        const now = this.clock.nowMillis();\n        this.prune(now);\n        const sessionId = newHexId();\n        const expiresAtMillis = now + this.sessionTtlMillis;\n        this.sessions.set(sessionId, { clientId, keyId, expiresAtMillis });\n\n        return { sessionId, expiresAtMillis };\n    }\n\n    /** Test hook: installs a session with a chosen id (wire-fixture replays). */\n    seedSession(sessionId: string, clientId: string, keyId: string, expiresAtMillis: number): void\n    {\n        this.sessions.set(sessionId, { clientId, keyId, expiresAtMillis });\n    }\n\n    /** Drops every session, as a restart would. Advertised expiries stay told. */\n    expireSessions(): void\n    {\n        this.sessions.clear();\n    }\n\n    /** Revokes a key and drops the sessions it opened. */\n    revokeKey(keyId: string): void\n    {\n        this.revokedKeyIds.add(keyId);\n        for (const [sessionId, session] of this.sessions)\n        {\n            if (session.keyId === keyId)\n            {\n                this.sessions.delete(sessionId);\n            }\n        }\n    }\n\n    setSessionTtlMillis(millis: number): void\n    {\n        this.sessionTtlMillis = millis;\n    }\n\n    /** Returns the state to how it started, counters and registered keys included. */\n    reset(): void\n    {\n        this.publicKeys.clear();\n        for (const [keyId, key] of this.initialPublicKeys)\n        {\n            this.publicKeys.set(keyId, key);\n        }\n        this.sessions.clear();\n        this.spentNonces.clear();\n        this.revokedKeyIds.clear();\n        this.holds.clear();\n        this.sessionTtlMillis = this.initialSessionTtlMillis;\n        this.requestCount = 0;\n        this.handshakeCount = 0;\n        this.echoCount = 0;\n        this.itemsListCount = 0;\n        this.refusalCount = 0;\n    }\n\n    // ---- delays (dev/test only) --------------------------------------------\n\n    /** Makes the next `count` requests to `path` wait `millis` before processing. */\n    holdPath(path: string, millis: number, count: number): void\n    {\n        this.holds.set(path, { millis, remaining: count });\n    }\n\n    /** Consumes one configured delay for `path`; returns how long to wait, or 0. */\n    takeHoldMillis(path: string): number\n    {\n        const hold = this.holds.get(path);\n        if (hold === undefined)\n        {\n            return 0;\n        }\n        hold.remaining -= 1;\n        if (hold.remaining <= 0)\n        {\n            this.holds.delete(path);\n        }\n\n        return hold.millis;\n    }\n\n    // ---- counters ----------------------------------------------------------\n\n    recordRequest(): void\n    {\n        this.requestCount += 1;\n    }\n\n    recordOperation(operationId: string): void\n    {\n        if (operationId === 'auth.clientProof.handshake')\n        {\n            this.handshakeCount += 1;\n        }\n        else if (operationId === 'echo.send')\n        {\n            this.echoCount += 1;\n        }\n        else if (operationId === 'items.list')\n        {\n            this.itemsListCount += 1;\n        }\n    }\n\n    recordRefusal(): void\n    {\n        this.refusalCount += 1;\n    }\n\n    stats(): ClientProofStats\n    {\n        this.prune(this.clock.nowMillis());\n\n        return {\n            requestCount: this.requestCount,\n            handshakeCount: this.handshakeCount,\n            echoCount: this.echoCount,\n            itemsListCount: this.itemsListCount,\n            refusalCount: this.refusalCount,\n            liveSessionCount: this.sessions.size,\n            spentNonceCount: this.spentNonces.size,\n        };\n    }\n\n    nowMillis(): number\n    {\n        return this.clock.nowMillis();\n    }\n\n    /** The clock, exposed for the dev control surface's advance-clock route. */\n    get clockRef(): ClientProofClock\n    {\n        return this.clock;\n    }\n\n    // ---- housekeeping ------------------------------------------------------\n\n    /**\n     * Drops what can no longer affect an answer. The nonce predicate is the\n     * exact negation of the window check in `admit`: an entry is dropped only\n     * once a proof carrying that issuedAtMillis would be refused as expired\n     * anyway. Dropping one moment earlier would let a nonce inside the window\n     * be spent twice.\n     */\n    private prune(nowMillis: number): void\n    {\n        for (const [sessionId, session] of this.sessions)\n        {\n            if (session.expiresAtMillis <= nowMillis)\n            {\n                this.sessions.delete(sessionId);\n            }\n        }\n        this.spentNonces.prune(nowMillis, this.replayWindowMillis);\n    }\n}\n","/**\n * The checks between a clientProofV1 request arriving and being applied.\n *\n * Shape first, then the profile allowlist, then the proof. That order is\n * forced: none of the proof checks can run until the fields they read are\n * known to be present and the body is known to be the bytes the digest is\n * supposed to cover. The order *inside* the proof checks is the contract's and\n * lives in `ClientProofState.admit`.\n *\n * @module server/client-proof/admission\n */\nimport { isCanonicalBytes, parseCanonicalJson, type CanonicalValue } from './canonical-json';\nimport { CLIENT_PROOF_PROFILE, sha256Hex, type ClientProofInput } from './proof';\nimport { ClientProofRefusal } from './refusal';\nimport type { ClientProofState } from './state';\n\n/** D23 wire-header names, ratified as proposed by the mobile dev bundle. */\nexport const CLIENT_PROOF_HEADERS = {\n    profile: 'x-spfn-auth-profile',\n    clientId: 'x-spfn-client-id',\n    keyId: 'x-spfn-key-id',\n    nonce: 'x-spfn-nonce',\n    issuedAtMillis: 'x-spfn-issued-at',\n    proof: 'x-spfn-proof',\n    session: 'x-spfn-session',\n} as const;\n\nexport const CLIENT_PROOF_CONTENT_TYPE = 'application/json';\n\nconst INT64_MIN = -(2n ** 63n);\nconst INT64_MAX = 2n ** 63n - 1n;\n\n/** The contract header fields one request presented. */\nexport interface ClientProofCredentials\n{\n    profile: string;\n    clientId: string;\n    keyId: string;\n    nonce: string;\n    issuedAtMillis: bigint;\n    proof: string;\n    sessionId: string | null;\n}\n\nexport type Admission =\n    | { admitted: false; refusal: ClientProofRefusal }\n    | { admitted: true; value: CanonicalValue; credentials: ClientProofCredentials };\n\n/**\n * Runs every check for one operation over already-read body bytes.\n *\n * `path` must be the operation's contract path (what the client signed), not a\n * proxied or rewritten one.\n */\nexport function admitClientProofRequest(args: {\n    state: ClientProofState;\n    headers: Headers;\n    method: string;\n    path: string;\n    requiresSession: boolean;\n    body: Uint8Array;\n}): Admission\n{\n    const credentials = readCredentials(args.headers);\n    if (credentials === null)\n    {\n        return refused(ClientProofRefusal.malformedHeaders());\n    }\n    if (credentials.profile !== CLIENT_PROOF_PROFILE)\n    {\n        return refused(ClientProofRefusal.profileRejected());\n    }\n    if (!isRequestContentType(args.headers.get('content-type')))\n    {\n        return refused(ClientProofRefusal.missingContentType());\n    }\n    if (args.requiresSession !== (credentials.sessionId !== null))\n    {\n        return refused(ClientProofRefusal.sessionHeaderMisplaced());\n    }\n\n    let value: CanonicalValue;\n    try\n    {\n        value = parseCanonicalJson(args.body);\n    }\n    catch\n    {\n        return refused(ClientProofRefusal.bodyNotCanonical());\n    }\n    // The proof binds the received bytes; accepting a re-serialization would\n    // let two implementations disagree about what was signed.\n    if (!isCanonicalBytes(args.body, value))\n    {\n        return refused(ClientProofRefusal.bodyNotCanonical());\n    }\n\n    const proofInput: ClientProofInput = {\n        method: args.method,\n        path: args.path,\n        clientId: credentials.clientId,\n        keyId: credentials.keyId,\n        nonce: credentials.nonce,\n        issuedAtMillis: credentials.issuedAtMillis,\n        bodySha256: sha256Hex(args.body),\n    };\n\n    let refusal: ClientProofRefusal | null;\n    try\n    {\n        refusal = args.state.admit({\n            clientId: credentials.clientId,\n            keyId: credentials.keyId,\n            presentedSessionId: credentials.sessionId,\n            requiresSession: args.requiresSession,\n            proofInput,\n            presentedProof: credentials.proof,\n        });\n    }\n    catch\n    {\n        // A C0 control character in a header field makes the proof input\n        // unassemblable — the request is not the shape the contract describes.\n        return refused(ClientProofRefusal.unprocessable());\n    }\n    if (refusal !== null)\n    {\n        return refused(refusal);\n    }\n\n    return { admitted: true, value, credentials };\n}\n\nfunction refused(refusal: ClientProofRefusal): Admission\n{\n    return { admitted: false, refusal };\n}\n\n/**\n * The contract header fields, or null when any is absent or malformed.\n *\n * Fetch `Headers` folds a repeated field into one comma-joined value, so\n * \"sent more than once\" is not directly observable here; a folded value fails\n * either the issuedAt grammar or proof verification instead.\n *\n * Exported for the authenticate middleware's profile path, which runs the\n * same shape checks over arbitrary routes.\n */\nexport function readCredentials(headers: Headers): ClientProofCredentials | null\n{\n    const profile = headers.get(CLIENT_PROOF_HEADERS.profile);\n    const clientId = headers.get(CLIENT_PROOF_HEADERS.clientId);\n    const keyId = headers.get(CLIENT_PROOF_HEADERS.keyId);\n    const nonce = headers.get(CLIENT_PROOF_HEADERS.nonce);\n    const issuedAtRaw = headers.get(CLIENT_PROOF_HEADERS.issuedAtMillis);\n    const proof = headers.get(CLIENT_PROOF_HEADERS.proof);\n    if (profile === null || clientId === null || keyId === null\n        || nonce === null || issuedAtRaw === null || proof === null)\n    {\n        return null;\n    }\n    const issuedAtMillis = parseInt64(issuedAtRaw);\n    if (issuedAtMillis === null)\n    {\n        return null;\n    }\n\n    return {\n        profile,\n        clientId,\n        keyId,\n        nonce,\n        issuedAtMillis,\n        proof,\n        sessionId: headers.get(CLIENT_PROOF_HEADERS.session),\n    };\n}\n\nfunction parseInt64(raw: string): bigint | null\n{\n    if (!/^[+-]?\\d{1,19}$/.test(raw))\n    {\n        return null;\n    }\n    const value = BigInt(raw);\n    if (value < INT64_MIN || value > INT64_MAX)\n    {\n        return null;\n    }\n\n    return value;\n}\n\n/** Exported for the authenticate middleware's profile path. */\nexport function isRequestContentType(value: string | null): boolean\n{\n    if (value === null)\n    {\n        return false;\n    }\n\n    return value.split(';')[0].trim().toLowerCase() === CLIENT_PROOF_CONTENT_TYPE;\n}\n","/**\n * The mobile dev-contract types and operations, decoded from / encoded to\n * canonical values. Strict on purpose: a missing required field, a wrong type\n * or an unknown field is \"not the request type this operation declares\".\n *\n * This module is the source of truth for `operations`. The exported contract\n * bundle (`contracts/mobile/spfn-mobile-contract.json`) is generated from it\n * by `contract-bundle.ts`; spfn-mobile consumes that export rather than the\n * other way round.\n *\n * @module server/client-proof/contract-types\n */\nimport type { CanonicalObject, CanonicalValue } from './canonical-json';\n\nexport interface ContractOperation\n{\n    id:\n        | 'auth.clientProof.handshake'\n        | 'echo.send'\n        | 'items.list'\n        | 'auth.enroll.register'\n        | 'auth.enroll.login'\n        | 'auth.enroll.oauthNative'\n        | 'auth.keys.rotate'\n        | 'auth.keys.list'\n        | 'auth.keys.revoke'\n        | 'auth.keys.revokeAll';\n    method: 'POST';\n    path: string;\n\n    /**\n     * How a call is admitted. `clientProofV1` operations run the proof\n     * admission order; `none` operations are the unproven class — accepted\n     * with neither proof headers nor a session header, because enrollment is\n     * called before any key exists to sign with.\n     */\n    authProfile: 'clientProofV1' | 'none';\n    requiresSession: boolean;\n    requestType: string;\n    responseType: string;\n    summary: string;\n}\n\nexport const CONTRACT_OPERATIONS: readonly ContractOperation[] = [\n    {\n        id: 'auth.clientProof.handshake',\n        method: 'POST',\n        path: '/v1/auth/client-proof/handshake',\n        authProfile: 'clientProofV1',\n        requiresSession: false,\n        requestType: 'HandshakeRequest',\n        responseType: 'HandshakeResponse',\n        summary: 'Presents a client proof and opens a session.',\n    },\n    {\n        id: 'echo.send',\n        method: 'POST',\n        path: '/v1/echo',\n        authProfile: 'clientProofV1',\n        requiresSession: true,\n        requestType: 'EchoRequest',\n        responseType: 'EchoResponse',\n        summary: 'Authenticated round trip used as the smallest real vertical slice.',\n    },\n    {\n        id: 'items.list',\n        method: 'POST',\n        path: '/v1/items/list',\n        authProfile: 'clientProofV1',\n        requiresSession: true,\n        requestType: 'ListItemsRequest',\n        responseType: 'ListItemsResponse',\n        summary: 'Authenticated paged read covering optional fields and arrays.',\n    },\n];\n\n/**\n * The `/_auth` surface exported into the mobile contract: enrollment, login\n * and key rotation. These are ordinary SPFN REST routes, not canonical-JSON\n * operations — the dev handler never serves them, and their wire rules are\n * the `restOperations` section of the bundle, not `canonicalJson`.\n *\n * The three `authProfile: 'none'` operations are the unproven class: they are\n * accepted with neither proof headers nor a session header, because they are\n * how a client obtains a key in the first place. `auth.keys.rotate` requires\n * an authenticated caller (a clientProofV1 proof on this surface); an\n * unproven call to it is refused like any failed admission.\n */\nexport const AUTH_SURFACE_OPERATIONS: readonly ContractOperation[] = [\n    {\n        id: 'auth.enroll.register',\n        method: 'POST',\n        path: '/_auth/register',\n        authProfile: 'none',\n        requiresSession: false,\n        requestType: 'RegisterRequest',\n        responseType: 'RegisterResponse',\n        summary: 'Registers an account with a verification token and enrolls the client-generated public key.',\n    },\n    {\n        id: 'auth.enroll.login',\n        method: 'POST',\n        path: '/_auth/login',\n        authProfile: 'none',\n        requiresSession: false,\n        requestType: 'LoginRequest',\n        responseType: 'LoginResponse',\n        summary: 'Authenticates with password credentials and enrolls a fresh client-generated public key.',\n    },\n    {\n        id: 'auth.enroll.oauthNative',\n        method: 'POST',\n        path: '/_auth/oauth/{provider}/native',\n        authProfile: 'none',\n        requiresSession: false,\n        requestType: 'OauthNativeRequest',\n        responseType: 'OauthNativeResponse',\n        summary: 'Verifies a native/web social id_token server-side and enrolls the client-generated public key.',\n    },\n    {\n        id: 'auth.keys.rotate',\n        method: 'POST',\n        path: '/_auth/keys/rotate',\n        authProfile: 'clientProofV1',\n        requiresSession: false,\n        requestType: 'RotateKeyRequest',\n        responseType: 'RotateKeyResponse',\n        summary: 'Replaces the authenticated key with a new client-generated public key before its TTL runs out.',\n    },\n    {\n        id: 'auth.keys.list',\n        method: 'POST',\n        path: '/_auth/keys/list',\n        authProfile: 'clientProofV1',\n        requiresSession: false,\n        requestType: 'ListKeysRequest',\n        responseType: 'ListKeysResponse',\n        summary: 'Lists the keys registered to the caller, one per device that can sign for them.',\n    },\n    {\n        id: 'auth.keys.revoke',\n        method: 'POST',\n        path: '/_auth/keys/revoke',\n        authProfile: 'clientProofV1',\n        requiresSession: false,\n        requestType: 'RevokeKeyRequest',\n        responseType: 'RevokeKeyResponse',\n        summary: 'Revokes one of the caller\\'s keys, signing that device out.',\n    },\n    {\n        id: 'auth.keys.revokeAll',\n        method: 'POST',\n        path: '/_auth/keys/revoke-all',\n        authProfile: 'clientProofV1',\n        requiresSession: false,\n        requestType: 'RevokeAllKeysRequest',\n        responseType: 'RevokeAllKeysResponse',\n        summary: 'Revokes every key the caller has, sparing the calling device unless asked otherwise.',\n    },\n];\n\n/** The body is canonical JSON but not the declared request type. */\nexport class ContractTypeError extends Error\n{\n    constructor()\n    {\n        super('not the declared contract type');\n        this.name = 'ContractTypeError';\n    }\n}\n\nexport interface HandshakeRequest\n{\n    clientId: string;\n    keyId: string;\n    nonce: string;\n    issuedAtMillis: bigint;\n}\n\nexport interface EchoRequest\n{\n    message: string;\n    sequence: bigint;\n}\n\nexport interface ListItemsRequest\n{\n    limit: bigint;\n    cursor?: string;\n}\n\nexport interface ContractItem\n{\n    id: string;\n    name: string;\n    updatedAtMillis: bigint;\n}\n\n// ============================================================================\n// Decoding\n// ============================================================================\n\nexport function decodeHandshakeRequest(value: CanonicalValue): HandshakeRequest\n{\n    const members = objectWithKeys(value, ['clientId', 'keyId', 'nonce', 'issuedAtMillis'], []);\n\n    return {\n        clientId: text(members.get('clientId')),\n        keyId: text(members.get('keyId')),\n        nonce: text(members.get('nonce')),\n        issuedAtMillis: integer(members.get('issuedAtMillis')),\n    };\n}\n\nexport function decodeEchoRequest(value: CanonicalValue): EchoRequest\n{\n    const members = objectWithKeys(value, ['message', 'sequence'], []);\n\n    return {\n        message: text(members.get('message')),\n        sequence: integer(members.get('sequence')),\n    };\n}\n\nexport function decodeListItemsRequest(value: CanonicalValue): ListItemsRequest\n{\n    const members = objectWithKeys(value, ['limit'], ['cursor']);\n    const request: ListItemsRequest = { limit: integer(members.get('limit')) };\n    if (members.has('cursor'))\n    {\n        request.cursor = text(members.get('cursor'));\n    }\n\n    return request;\n}\n\nfunction objectWithKeys(\n    value: CanonicalValue,\n    required: string[],\n    optional: string[],\n): CanonicalObject\n{\n    if (!(value instanceof Map))\n    {\n        throw new ContractTypeError();\n    }\n    for (const key of required)\n    {\n        if (!value.has(key))\n        {\n            throw new ContractTypeError();\n        }\n    }\n    for (const key of value.keys())\n    {\n        if (!required.includes(key) && !optional.includes(key))\n        {\n            throw new ContractTypeError();\n        }\n    }\n\n    return value;\n}\n\nfunction text(value: CanonicalValue | undefined): string\n{\n    if (typeof value !== 'string')\n    {\n        throw new ContractTypeError();\n    }\n\n    return value;\n}\n\nfunction integer(value: CanonicalValue | undefined): bigint\n{\n    if (typeof value !== 'bigint')\n    {\n        throw new ContractTypeError();\n    }\n\n    return value;\n}\n\n// ============================================================================\n// Encoding\n// ============================================================================\n\nexport function encodeHandshakeResponse(sessionId: string, expiresAtMillis: bigint): CanonicalValue\n{\n    return new Map<string, CanonicalValue>([\n        ['sessionId', sessionId],\n        ['expiresAtMillis', expiresAtMillis],\n    ]);\n}\n\nexport function encodeEchoResponse(message: string, sequence: bigint, serverTimeMillis: bigint): CanonicalValue\n{\n    return new Map<string, CanonicalValue>([\n        ['message', message],\n        ['sequence', sequence],\n        ['serverTimeMillis', serverTimeMillis],\n    ]);\n}\n\nexport function encodeListItemsResponse(items: ContractItem[], nextCursor: string | null): CanonicalValue\n{\n    const encodedItems: CanonicalValue = items.map((item) => new Map<string, CanonicalValue>([\n        ['id', item.id],\n        ['name', item.name],\n        ['updatedAtMillis', item.updatedAtMillis],\n    ]));\n    const members = new Map<string, CanonicalValue>([['items', encodedItems]]);\n    if (nextCursor !== null)\n    {\n        members.set('nextCursor', nextCursor);\n    }\n\n    return members;\n}\n","/**\n * The dev server's test hooks, mirroring the spfn-mobile reference server's\n * `/control` surface route for route so the mobile integration suites can\n * drive either server with only a URL change.\n *\n * `/control` is NOT part of the contract: nothing under it appears in the\n * bundle, no SDK knows it exists, and its answers are plain objects rather\n * than contract envelopes. Every route except the readiness probe requires\n * the per-launch token; the token is never logged.\n *\n * @module server/client-proof/dev-control\n */\nimport { encodeCanonicalJson, parseCanonicalJson, type CanonicalValue } from './canonical-json';\nimport { ClientProofState, TestClock } from './state';\n\nexport const CONTROL_PREFIX = '/control/';\n\nexport const CONTROL_TOKEN_HEADER = 'x-spfn-reference-control';\n\nconst HTTP_OK = 200;\nconst HTTP_BAD_REQUEST = 400;\nconst HTTP_FORBIDDEN = 403;\nconst HTTP_NOT_FOUND = 404;\nconst HTTP_CONFLICT = 409;\n\nconst MAX_CONTROL_BODY_BYTES = 4096;\n\nexport async function handleControlRequest(\n    state: ClientProofState,\n    controlToken: string,\n    path: string,\n    request: Request,\n): Promise<Response>\n{\n    if (path === '/control/health')\n    {\n        return answer(HTTP_OK, new Map<string, CanonicalValue>([['status', 'ok']]));\n    }\n    if (request.headers.get(CONTROL_TOKEN_HEADER) !== controlToken)\n    {\n        return answer(HTTP_FORBIDDEN, failure('control token'));\n    }\n\n    const raw = new Uint8Array(await request.arrayBuffer());\n    const body = raw.length > MAX_CONTROL_BODY_BYTES ? raw.slice(0, MAX_CONTROL_BODY_BYTES) : raw;\n\n    switch (path)\n    {\n        case '/control/stats':\n            return stats(state);\n        case '/control/reset':\n            state.reset();\n\n            return ok();\n        case '/control/expire-sessions':\n            state.expireSessions();\n\n            return ok();\n        case '/control/register-key':\n            return registerKey(state, body);\n        case '/control/revoke-key':\n            return revokeKey(state, body);\n        case '/control/session-ttl':\n            return sessionTtl(state, body);\n        case '/control/hold':\n            return hold(state, body);\n        case '/control/advance-clock':\n            return advanceClock(state, body);\n        default:\n            return answer(HTTP_NOT_FOUND, failure('unknown control route'));\n    }\n}\n\n// ---- routes ----------------------------------------------------------------\n\nfunction stats(state: ClientProofState): Response\n{\n    const counters = state.stats();\n\n    return answer(HTTP_OK, withOk(new Map<string, CanonicalValue>([\n        ['echoCount', BigInt(counters.echoCount)],\n        ['handshakeCount', BigInt(counters.handshakeCount)],\n        ['itemsListCount', BigInt(counters.itemsListCount)],\n        ['liveSessionCount', BigInt(counters.liveSessionCount)],\n        ['refusalCount', BigInt(counters.refusalCount)],\n        ['requestCount', BigInt(counters.requestCount)],\n        ['spentNonceCount', BigInt(counters.spentNonceCount)],\n    ])));\n}\n\n/**\n * Registers the public key a test client generated — the asymmetric\n * counterpart of the shared-key provisioning the HMAC profile injected at\n * construction. The body carries only the public half (SPKI DER base64); no\n * secret ever crosses this route.\n */\nfunction registerKey(state: ClientProofState, body: Uint8Array): Response\n{\n    const keyId = stringField(body, 'keyId');\n    const publicKey = stringField(body, 'publicKey');\n    if (keyId === null)\n    {\n        return badRequest('keyId');\n    }\n    if (publicKey === null)\n    {\n        return badRequest('publicKey');\n    }\n    try\n    {\n        state.registerPublicKey(keyId, publicKey);\n    }\n    catch\n    {\n        return badRequest('publicKey');\n    }\n\n    return ok();\n}\n\nfunction revokeKey(state: ClientProofState, body: Uint8Array): Response\n{\n    const keyId = stringField(body, 'keyId');\n    if (keyId === null)\n    {\n        return badRequest('keyId');\n    }\n    state.revokeKey(keyId);\n\n    return ok();\n}\n\nfunction sessionTtl(state: ClientProofState, body: Uint8Array): Response\n{\n    const ttlMillis = integerField(body, 'ttlMillis');\n    if (ttlMillis === null)\n    {\n        return badRequest('ttlMillis');\n    }\n    state.setSessionTtlMillis(Number(ttlMillis));\n\n    return ok();\n}\n\nfunction hold(state: ClientProofState, body: Uint8Array): Response\n{\n    const path = stringField(body, 'path');\n    const millis = integerField(body, 'millis');\n    const count = integerField(body, 'count');\n    if (path === null)\n    {\n        return badRequest('path');\n    }\n    if (millis === null)\n    {\n        return badRequest('millis');\n    }\n    if (count === null)\n    {\n        return badRequest('count');\n    }\n    state.holdPath(path, Number(millis), Number(count));\n\n    return ok();\n}\n\n/**\n * Moves a test clock forward. Refused when the server runs on the wall clock,\n * because silently doing nothing is how a test passes for the wrong reason.\n */\nfunction advanceClock(state: ClientProofState, body: Uint8Array): Response\n{\n    const clock = state.clockRef;\n    if (!(clock instanceof TestClock))\n    {\n        return answer(HTTP_CONFLICT, failure('server is running on the system clock'));\n    }\n    const millis = integerField(body, 'millis');\n    if (millis === null)\n    {\n        return badRequest('millis');\n    }\n    clock.advance(Number(millis));\n\n    return ok();\n}\n\n// ---- plumbing --------------------------------------------------------------\n\nfunction members(body: Uint8Array): Map<string, CanonicalValue> | null\n{\n    if (body.length === 0)\n    {\n        return new Map();\n    }\n    let parsed: CanonicalValue;\n    try\n    {\n        parsed = parseCanonicalJson(body);\n    }\n    catch\n    {\n        return null;\n    }\n\n    return parsed instanceof Map ? parsed : null;\n}\n\nfunction stringField(body: Uint8Array, field: string): string | null\n{\n    const value = members(body)?.get(field);\n\n    return typeof value === 'string' ? value : null;\n}\n\nfunction integerField(body: Uint8Array, field: string): bigint | null\n{\n    const value = members(body)?.get(field);\n\n    return typeof value === 'bigint' ? value : null;\n}\n\nfunction badRequest(field: string): Response\n{\n    return answer(HTTP_BAD_REQUEST, failure(`missing or malformed field: ${field}`));\n}\n\nfunction ok(): Response\n{\n    return answer(HTTP_OK, withOk(new Map()));\n}\n\nfunction failure(reason: string): Map<string, CanonicalValue>\n{\n    return new Map<string, CanonicalValue>([['ok', false], ['reason', reason]]);\n}\n\nfunction withOk(extra: Map<string, CanonicalValue>): Map<string, CanonicalValue>\n{\n    extra.set('ok', true);\n\n    return extra;\n}\n\nfunction answer(status: number, value: Map<string, CanonicalValue>): Response\n{\n    const bytes = encodeCanonicalJson(value);\n    const buffer = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) as ArrayBuffer;\n\n    return new Response(buffer, { status, headers: { 'content-type': 'application/json' } });\n}\n","/**\n * The mobile-contract dev surface: a fetch-style handler exposing the three\n * dev operations (handshake / echo.send / items.list) plus the `/control`\n * test hooks the spfn-mobile integration suites drive.\n *\n * Framework-free on purpose — `fetch(request) => Response` plugs into\n * `@hono/node-server`'s `serve({ fetch })` or any Web-standard runtime, and\n * the contract needs byte-exact control over bodies and envelopes that a\n * validating router would take away.\n *\n * This is a dev/test surface, not a production deployment target: keys are\n * injected at construction, state is in-memory, and `/control` mutates it.\n *\n * @module server/client-proof/dev-handler\n */\nimport { encodeCanonicalJson, type CanonicalValue } from './canonical-json';\nimport { admitClientProofRequest, type Admission } from './admission';\nimport {\n    CONTRACT_OPERATIONS,\n    ContractTypeError,\n    decodeEchoRequest,\n    decodeHandshakeRequest,\n    decodeListItemsRequest,\n    encodeEchoResponse,\n    encodeHandshakeResponse,\n    encodeListItemsResponse,\n    type ContractItem,\n    type ContractOperation,\n    type ListItemsRequest,\n} from './contract-types';\nimport { ClientProofRefusal, newHexId } from './refusal';\nimport { ClientProofState, type ClientProofStateOptions, TestClock } from './state';\nimport { handleControlRequest, CONTROL_PREFIX } from './dev-control';\n\n/** Far above any contract request and far below anything worth buffering. */\nconst MAX_BODY_BYTES = 1 << 20;\n\nconst HTTP_OK = 200;\n\n/**\n * The items `items.list` pages through — fixed and small on purpose, matching\n * the spfn-mobile reference catalogue byte for byte so an integration test can\n * assert exact values against either server.\n */\nexport const DEV_CATALOGUE: readonly ContractItem[] = [\n    { id: 'item-0001', name: 'alpha', updatedAtMillis: 1_750_000_000_001n },\n    { id: 'item-0002', name: 'bravo', updatedAtMillis: 1_750_000_000_002n },\n    { id: 'item-0003', name: 'charlie', updatedAtMillis: 1_750_000_000_003n },\n    { id: 'item-0004', name: 'delta', updatedAtMillis: 1_750_000_000_004n },\n    { id: 'item-0005', name: 'echo', updatedAtMillis: 1_750_000_000_005n },\n];\n\n/** The largest `items.list` page this server will answer with. */\nexport const DEV_MAX_LIMIT = 100n;\n\nexport interface ClientProofDevHandlerOptions extends ClientProofStateOptions\n{\n    /**\n     * Token the `/control` routes require (header `x-spfn-reference-control`).\n     * Generated per construction when omitted; never logged.\n     */\n    controlToken?: string;\n\n    /** Disables the `/control` surface entirely. @default true */\n    enableControl?: boolean;\n\n    /** One line per request: method, path, status. Nothing a request carried. */\n    log?: (line: string) => void;\n}\n\nexport interface ClientProofDevHandler\n{\n    fetch(request: Request): Promise<Response>;\n    state: ClientProofState;\n    controlToken: string;\n}\n\nexport function createClientProofDevHandler(options: ClientProofDevHandlerOptions): ClientProofDevHandler\n{\n    const state = new ClientProofState(options);\n    const controlToken = options.controlToken ?? newHexId();\n    const enableControl = options.enableControl ?? true;\n    const log = options.log ?? (() => undefined);\n\n    async function dispatch(request: Request): Promise<Response>\n    {\n        state.recordRequest();\n        const url = new URL(request.url);\n\n        if (enableControl && url.pathname.startsWith(CONTROL_PREFIX))\n        {\n            return handleControlRequest(state, controlToken, url.pathname, request);\n        }\n\n        // A query string is refused by omission: no contract path carries one,\n        // and a proof is taken over the path alone.\n        const operation = url.search === ''\n            ? CONTRACT_OPERATIONS.find((op) => op.path === url.pathname && op.method === request.method)\n            : undefined;\n        if (operation === undefined)\n        {\n            return refuse(ClientProofRefusal.unroutable());\n        }\n\n        const body = await readBodyCapped(request);\n        if (body === null)\n        {\n            return refuse(ClientProofRefusal.bodyTooLarge());\n        }\n\n        // Before verification, so a request a test is holding open has not\n        // spent its nonce by the time the client gives up waiting for it.\n        await waitOutHold(url.pathname);\n\n        const admission = admitClientProofRequest({\n            state,\n            headers: request.headers,\n            method: operation.method,\n            path: operation.path,\n            requiresSession: operation.requiresSession,\n            body,\n        });\n        if (!admission.admitted)\n        {\n            return refuse(admission.refusal);\n        }\n\n        return apply(operation, admission);\n    }\n\n    function apply(operation: ContractOperation, admission: Extract<Admission, { admitted: true }>): Response\n    {\n        let value: CanonicalValue;\n        try\n        {\n            if (operation.id === 'auth.clientProof.handshake')\n            {\n                const request = decodeHandshakeRequest(admission.value);\n                // The proof already binds the header identity to the key that\n                // signed it, so a body naming a different client is a request\n                // whose two halves disagree about who sent it.\n                if (request.clientId !== admission.credentials.clientId\n                    || request.keyId !== admission.credentials.keyId)\n                {\n                    return refuse(ClientProofRefusal.bodyNotTheDeclaredType());\n                }\n                const opened = state.openSession(request.clientId, request.keyId);\n                value = encodeHandshakeResponse(opened.sessionId, BigInt(opened.expiresAtMillis));\n            }\n            else if (operation.id === 'echo.send')\n            {\n                const request = decodeEchoRequest(admission.value);\n                value = encodeEchoResponse(request.message, request.sequence, BigInt(state.nowMillis()));\n            }\n            else\n            {\n                const listed = listItems(decodeListItemsRequest(admission.value));\n                if (listed === null)\n                {\n                    return refuse(ClientProofRefusal.bodyNotTheDeclaredType());\n                }\n                value = listed;\n            }\n        }\n        catch (error)\n        {\n            if (error instanceof ContractTypeError)\n            {\n                return refuse(ClientProofRefusal.bodyNotTheDeclaredType());\n            }\n\n            return refuse(ClientProofRefusal.unprocessable());\n        }\n\n        state.recordOperation(operation.id);\n\n        return contractResponse(HTTP_OK, encodeCanonicalJson(value));\n    }\n\n    function refuse(refusal: ClientProofRefusal): Response\n    {\n        state.recordRefusal();\n\n        return contractResponse(refusal.httpStatus, refusal.envelopeBytes(newHexId()));\n    }\n\n    async function waitOutHold(path: string): Promise<void>\n    {\n        const millis = state.takeHoldMillis(path);\n        if (millis > 0)\n        {\n            await new Promise((resolve) => setTimeout(resolve, millis));\n        }\n    }\n\n    return {\n        state,\n        controlToken,\n        fetch: async (request: Request): Promise<Response> =>\n        {\n            try\n            {\n                const response = await dispatch(request);\n                log(`${request.method} ${new URL(request.url).pathname} -> ${response.status}`);\n\n                return response;\n            }\n            catch\n            {\n                // A contract answer rather than a stack trace: an exception\n                // message can quote the request that produced it.\n                return refuse(ClientProofRefusal.unprocessable());\n            }\n        },\n    };\n}\n\n/**\n * One page of the catalogue, or null when the request is not one this\n * contract describes. An unknown cursor and a limit outside 1…MAX are refused\n * rather than clamped — a server that quietly repaired a request would hide\n * the client bug that produced it.\n */\nfunction listItems(request: ListItemsRequest): CanonicalValue | null\n{\n    if (request.limit < 1n || request.limit > DEV_MAX_LIMIT)\n    {\n        return null;\n    }\n    let start = 0;\n    if (request.cursor !== undefined)\n    {\n        const index = DEV_CATALOGUE.findIndex((item) => item.id === request.cursor);\n        if (index < 0)\n        {\n            return null;\n        }\n        start = index + 1;\n    }\n    const end = Math.min(DEV_CATALOGUE.length, start + Number(request.limit));\n    const page = DEV_CATALOGUE.slice(start, end);\n    // Present only when a further page exists, so \"nextCursor is absent\" is a\n    // fact about the data rather than a value the client has to interpret.\n    const nextCursor = end < DEV_CATALOGUE.length && page.length > 0 ? page[page.length - 1].id : null;\n\n    return encodeListItemsResponse([...page], nextCursor);\n}\n\nfunction contractResponse(status: number, body: Uint8Array): Response\n{\n    return new Response(toArrayBuffer(body), {\n        status,\n        headers: { 'content-type': 'application/json' },\n    });\n}\n\n/** The body, or null when it is larger than this server will read. */\nasync function readBodyCapped(request: Request): Promise<Uint8Array | null>\n{\n    if (request.body === null)\n    {\n        return new Uint8Array(0);\n    }\n    const reader = request.body.getReader();\n    const chunks: Uint8Array[] = [];\n    let total = 0;\n    for (;;)\n    {\n        const { done, value } = await reader.read();\n        if (done)\n        {\n            break;\n        }\n        total += value.length;\n        if (total > MAX_BODY_BYTES)\n        {\n            await reader.cancel();\n\n            return null;\n        }\n        chunks.push(value);\n    }\n    const body = new Uint8Array(total);\n    let offset = 0;\n    for (const chunk of chunks)\n    {\n        body.set(chunk, offset);\n        offset += chunk.length;\n    }\n\n    return body;\n}\n\nfunction toArrayBuffer(bytes: Uint8Array): ArrayBuffer\n{\n    return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) as ArrayBuffer;\n}\n\nexport { TestClock };\n","/**\n * Hono middleware adapter for clientProofV1 — the `requiresSession` guard for\n * SPFN servers that mount contract operations as ordinary routes.\n *\n * Runs the full admission sequence over the raw request bytes and, on\n * acceptance, tags the request `clientType: 'mobile'` (the attestation slot\n * PROXY-BACKEND-AUTH-SPEC reserved) and exposes the parsed canonical body and\n * credentials under the `clientProof` context key.\n *\n * hono is imported as types only — the middleware itself is a plain async\n * function, so this module adds no runtime dependency.\n *\n * @module server/client-proof/guard\n */\nimport type { Context, MiddlewareHandler, Next } from 'hono';\n\nimport { admitClientProofRequest, type ClientProofCredentials } from './admission';\nimport type { CanonicalValue } from './canonical-json';\nimport { newHexId } from './refusal';\nimport type { ClientProofState } from './state';\n\n/** What the guard leaves in the context for the route handler. */\nexport interface ClientProofContext\n{\n    credentials: ClientProofCredentials;\n\n    /** The request body as a canonical value (already byte-verified). */\n    value: CanonicalValue;\n}\n\nexport interface ClientProofGuardOptions\n{\n    /**\n     * The contract path the client signed, when it differs from the mounted\n     * path (e.g. behind a stripped ingress prefix). Defaults to the request\n     * path.\n     */\n    contractPath?: string;\n}\n\n/**\n * A guard for operations with `requiresSession: true`.\n *\n * Refusals are answered with the contract envelope and never reach the route.\n */\nexport function createClientProofGuard(\n    state: ClientProofState,\n    options: ClientProofGuardOptions = {},\n): MiddlewareHandler\n{\n    return async (c: Context, next: Next) =>\n    {\n        const body = new Uint8Array(await c.req.arrayBuffer());\n        const admission = admitClientProofRequest({\n            state,\n            headers: c.req.raw.headers,\n            method: c.req.method,\n            path: options.contractPath ?? c.req.path,\n            requiresSession: true,\n            body,\n        });\n        if (!admission.admitted)\n        {\n            state.recordRefusal();\n            const bytes = admission.refusal.envelopeBytes(newHexId());\n            const buffer = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) as ArrayBuffer;\n\n            return c.newResponse(buffer, admission.refusal.httpStatus as 401, {\n                'content-type': 'application/json',\n            });\n        }\n        c.set('clientType', 'mobile');\n        c.set('clientProof', {\n            credentials: admission.credentials,\n            value: admission.value,\n        } satisfies ClientProofContext);\n        await next();\n\n        return undefined;\n    };\n}\n"],"mappings":";AAsCO,IAAM,qBAAN,cAAiC,MACxC;AAAA,EACI,YAAqB,MACrB;AACI,UAAM,mBAAmB,IAAI,EAAE;AAFd;AAGjB,SAAK,OAAO;AAAA,EAChB;AACJ;AAEA,IAAM,YAAY,EAAE,MAAM;AAC1B,IAAM,YAAY,MAAM,MAAM;AAavB,SAAS,mBAAmB,OACnC;AACI,MAAIA;AACJ,MACA;AACI,IAAAA,QAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK;AAAA,EACjE,QAEA;AACI,UAAM,IAAI,mBAAmB,cAAc;AAAA,EAC/C;AAEA,QAAM,SAAS,IAAI,OAAOA,KAAI;AAC9B,QAAM,QAAQ,OAAO,WAAW;AAChC,SAAO,eAAe;AACtB,MAAI,CAAC,OAAO,MAAM,GAClB;AACI,UAAM,IAAI,mBAAmB,kBAAkB;AAAA,EACnD;AAEA,SAAO;AACX;AAGO,SAAS,iBAAiB,OAAmB,OACpD;AACI,QAAM,UAAU,oBAAoB,KAAK;AACzC,MAAI,QAAQ,WAAW,MAAM,QAC7B;AACI,WAAO;AAAA,EACX;AACA,WAAS,IAAI,GAAG,IAAI,QAAQ,QAAQ,KACpC;AACI,QAAI,QAAQ,CAAC,MAAM,MAAM,CAAC,GAC1B;AACI,aAAO;AAAA,IACX;AAAA,EACJ;AAEA,SAAO;AACX;AAEA,IAAM,SAAN,MACA;AAAA,EAGI,YAA6BA,OAC7B;AAD6B,gBAAAA;AAAA,EAC5B;AAAA,EAHO,MAAM;AAAA,EAKd,QACA;AACI,WAAO,KAAK,OAAO,KAAK,KAAK;AAAA,EACjC;AAAA,EAEA,iBACA;AACI,WAAO,CAAC,KAAK,MAAM,GACnB;AACI,YAAM,IAAI,KAAK,KAAK,KAAK,GAAG;AAC5B,UAAI,MAAM,OAAO,MAAM,OAAQ,MAAM,QAAQ,MAAM,MACnD;AACI,aAAK;AACL;AAAA,MACJ;AACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,aACA;AACI,SAAK,eAAe;AACpB,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,UAAM,IAAI,KAAK,KAAK,KAAK,GAAG;AAC5B,QAAI,MAAM,KACV;AACI,aAAO,KAAK,YAAY;AAAA,IAC5B;AACA,QAAI,MAAM,KACV;AACI,aAAO,KAAK,WAAW;AAAA,IAC3B;AACA,QAAI,MAAM,KACV;AACI,aAAO,KAAK,YAAY;AAAA,IAC5B;AACA,QAAI,MAAM,OAAQ,KAAK,OAAO,KAAK,KACnC;AACI,aAAO,KAAK,YAAY;AAAA,IAC5B;AACA,QAAI,KAAK,KAAK,WAAW,QAAQ,KAAK,GAAG,GACzC;AACI,WAAK,OAAO;AAEZ,aAAO;AAAA,IACX;AACA,QAAI,KAAK,KAAK,WAAW,QAAQ,KAAK,GAAG,GACzC;AACI,WAAK,OAAO;AAEZ,aAAO;AAAA,IACX;AACA,QAAI,KAAK,KAAK,WAAW,SAAS,KAAK,GAAG,GAC1C;AACI,WAAK,OAAO;AAEZ,aAAO;AAAA,IACX;AACA,UAAM,IAAI,mBAAmB,eAAe;AAAA,EAChD;AAAA,EAEQ,cACR;AACI,SAAK;AACL,UAAMC,WAA2B,oBAAI,IAAI;AACzC,SAAK,eAAe;AACpB,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,QAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,WAAK;AAEL,aAAOA;AAAA,IACX;AACA,eACA;AACI,WAAK,eAAe;AACpB,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,UAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,YAAM,MAAM,KAAK,YAAY;AAC7B,UAAIA,SAAQ,IAAI,GAAG,GACnB;AACI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,WAAK,eAAe;AACpB,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,UAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,WAAK;AACL,MAAAA,SAAQ,IAAI,KAAK,KAAK,WAAW,CAAC;AAClC,WAAK,eAAe;AACpB,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,YAAM,OAAO,KAAK,KAAK,KAAK,GAAG;AAC/B,UAAI,SAAS,KACb;AACI,aAAK;AACL;AAAA,MACJ;AACA,UAAI,SAAS,KACb;AACI,aAAK;AAEL,eAAOA;AAAA,MACX;AACA,YAAM,IAAI,mBAAmB,eAAe;AAAA,IAChD;AAAA,EACJ;AAAA,EAEQ,aACR;AACI,SAAK;AACL,UAAM,QAA0B,CAAC;AACjC,SAAK,eAAe;AACpB,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,QAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,WAAK;AAEL,aAAO;AAAA,IACX;AACA,eACA;AACI,YAAM,KAAK,KAAK,WAAW,CAAC;AAC5B,WAAK,eAAe;AACpB,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,YAAM,OAAO,KAAK,KAAK,KAAK,GAAG;AAC/B,UAAI,SAAS,KACb;AACI,aAAK;AACL;AAAA,MACJ;AACA,UAAI,SAAS,KACb;AACI,aAAK;AAEL,eAAO;AAAA,MACX;AACA,YAAM,IAAI,mBAAmB,eAAe;AAAA,IAChD;AAAA,EACJ;AAAA,EAEQ,cACR;AACI,SAAK;AACL,QAAI,MAAM;AACV,eACA;AACI,UAAI,KAAK,MAAM,GACf;AACI,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,MACjD;AACA,YAAM,IAAI,KAAK,KAAK,KAAK,GAAG;AAC5B,YAAM,OAAO,KAAK,KAAK,WAAW,KAAK,GAAG;AAC1C,UAAI,MAAM,KACV;AACI,aAAK;AAEL,eAAO;AAAA,MACX;AACA,UAAI,MAAM,MACV;AACI,eAAO,KAAK,YAAY;AACxB;AAAA,MACJ;AACA,UAAI,OAAO,IACX;AACI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,aAAO;AACP,WAAK;AAAA,IACT;AAAA,EACJ;AAAA,EAEQ,cACR;AACI,SAAK;AACL,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,UAAM,IAAI,KAAK,KAAK,KAAK,GAAG;AAC5B,SAAK;AACL,YAAQ,GACR;AAAA,MACI,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAM,eAAO;AAAA,MAClB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO;AAAA,MACjB,KAAK;AAAK,eAAO,KAAK,mBAAmB;AAAA,MACzC;AAAS,cAAM,IAAI,mBAAmB,gBAAgB;AAAA,IAC1D;AAAA,EACJ;AAAA,EAEQ,qBACR;AACI,UAAM,OAAO,KAAK,SAAS;AAC3B,QAAI,QAAQ,SAAU,QAAQ,OAC9B;AAEI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,QAAI,OAAO,SAAU,OAAO,OAC5B;AACI,aAAO,OAAO,aAAa,IAAI;AAAA,IACnC;AAEA,QAAI,KAAK,KAAK,KAAK,GAAG,MAAM,QAAQ,KAAK,KAAK,KAAK,MAAM,CAAC,MAAM,KAChE;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,SAAK,OAAO;AACZ,UAAM,MAAM,KAAK,SAAS;AAC1B,QAAI,MAAM,SAAU,MAAM,OAC1B;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AAEA,WAAO,OAAO,aAAa,MAAM,GAAG;AAAA,EACxC;AAAA,EAEQ,WACR;AACI,QAAI,KAAK,MAAM,IAAI,KAAK,KAAK,QAC7B;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,UAAM,MAAM,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,MAAM,CAAC;AAClD,QAAI,CAAC,mBAAmB,KAAK,GAAG,GAChC;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,SAAK,OAAO;AAEZ,WAAO,SAAS,KAAK,EAAE;AAAA,EAC3B;AAAA,EAEQ,cACR;AACI,UAAM,QAAQ,KAAK;AACnB,QAAI,KAAK,KAAK,KAAK,GAAG,MAAM,KAC5B;AACI,WAAK;AAAA,IACT;AACA,QAAI,KAAK,MAAM,GACf;AACI,YAAM,IAAI,mBAAmB,gBAAgB;AAAA,IACjD;AACA,UAAM,QAAQ,KAAK,KAAK,KAAK,GAAG;AAChC,QAAI,QAAQ,OAAO,QAAQ,KAC3B;AACI,YAAM,IAAI,mBAAmB,eAAe;AAAA,IAChD;AACA,QAAI,UAAU,KACd;AACI,WAAK;AAAA,IACT,OAEA;AACI,aAAO,CAAC,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,GAAG,KAAK,OAAO,KAAK,KAAK,KAAK,GAAG,KAAK,KAC7E;AACI,aAAK;AAAA,MACT;AAAA,IACJ;AACA,QAAI,CAAC,KAAK,MAAM,GAChB;AACI,YAAM,OAAO,KAAK,KAAK,KAAK,GAAG;AAC/B,UAAI,QAAQ,OAAO,QAAQ,KAC3B;AAEI,cAAM,IAAI,mBAAmB,eAAe;AAAA,MAChD;AACA,UAAI,SAAS,OAAO,SAAS,OAAO,SAAS,KAC7C;AACI,cAAM,IAAI,mBAAmB,oBAAoB;AAAA,MACrD;AAAA,IACJ;AACA,UAAM,QAAQ,OAAO,KAAK,KAAK,MAAM,OAAO,KAAK,GAAG,CAAC;AACrD,QAAI,QAAQ,aAAa,QAAQ,WACjC;AACI,YAAM,IAAI,mBAAmB,sBAAsB;AAAA,IACvD;AAEA,WAAO;AAAA,EACX;AACJ;AAOO,SAAS,oBAAoB,OACpC;AACI,SAAO,IAAI,YAAY,EAAE,OAAO,eAAe,KAAK,CAAC;AACzD;AAEA,SAAS,eAAe,OACxB;AACI,MAAI,UAAU,MACd;AACI,WAAO;AAAA,EACX;AACA,MAAI,OAAO,UAAU,WACrB;AACI,WAAO,QAAQ,SAAS;AAAA,EAC5B;AACA,MAAI,OAAO,UAAU,UACrB;AACI,WAAO,MAAM,SAAS;AAAA,EAC1B;AACA,MAAI,OAAO,UAAU,UACrB;AACI,WAAO,aAAa,KAAK;AAAA,EAC7B;AACA,MAAI,MAAM,QAAQ,KAAK,GACvB;AACI,WAAO,IAAI,MAAM,IAAI,cAAc,EAAE,KAAK,GAAG,CAAC;AAAA,EAClD;AACA,QAAM,OAAO,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE,KAAK,mBAAmB;AACvD,QAAMA,WAAU,KAAK,IAAI,CAAC,QAAQ,GAAG,aAAa,GAAG,CAAC,IAAI,eAAe,MAAM,IAAI,GAAG,CAAE,CAAC,EAAE;AAE3F,SAAO,IAAIA,SAAQ,KAAK,GAAG,CAAC;AAChC;AAOA,SAAS,oBAAoB,GAAW,GACxC;AACI,MAAI,IAAI;AACR,MAAI,IAAI;AACR,SAAO,IAAI,EAAE,UAAU,IAAI,EAAE,QAC7B;AACI,UAAM,KAAK,EAAE,YAAY,CAAC;AAC1B,UAAM,KAAK,EAAE,YAAY,CAAC;AAC1B,QAAI,OAAO,IACX;AACI,aAAO,KAAK;AAAA,IAChB;AACA,SAAK,KAAK,QAAS,IAAI;AACvB,SAAK,KAAK,QAAS,IAAI;AAAA,EAC3B;AAEA,SAAQ,EAAE,SAAS,KAAM,EAAE,SAAS;AACxC;AAEA,SAAS,aAAa,OACtB;AACI,MAAI,MAAM;AACV,aAAW,MAAM,OACjB;AACI,UAAM,OAAO,GAAG,YAAY,CAAC;AAC7B,QAAI,OAAO,KACX;AACI,aAAO;AAAA,IACX,WACS,OAAO,MAChB;AACI,aAAO;AAAA,IACX,WACS,SAAS,GAClB;AACI,aAAO;AAAA,IACX,WACS,SAAS,IAClB;AACI,aAAO;AAAA,IACX,WACS,SAAS,IAClB;AACI,aAAO;AAAA,IACX,WACS,SAAS,IAClB;AACI,aAAO;AAAA,IACX,WACS,SAAS,GAClB;AACI,aAAO;AAAA,IACX,WACS,OAAO,IAChB;AACI,aAAO,QAAQ,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,IACrD,OAEA;AACI,aAAO;AAAA,IACX;AAAA,EACJ;AAEA,SAAO,MAAM;AACjB;;;ACrgBA,SAAS,YAAY,kBAAkB,iBAAiB,MAAM,cAA8B;AAGrF,IAAM,uBAAuB;AAG7B,IAAM,qBAAqB,IAAI,OAAO,EAAE;AAGxC,IAAM,+BAA+B;AAGrC,IAAM,qBAAqB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ;AAGO,IAAM,wBAAwB;AAG9B,IAAM,wBAAwB;AAG9B,IAAM,6BAA6B,wBAAwB;AAMlE,IAAM,0BAA0B;AAQhC,IAAM,yBAAyB;AAgBxB,IAAM,kBAAN,cAA8B,MACrC;AAAA,EACI,cACA;AACI,UAAM,mDAAmD;AACzD,SAAK,OAAO;AAAA,EAChB;AACJ;AAOO,SAAS,oBAAoB,OACpC;AACI,QAAM,SAA0C;AAAA,IAC5C,SAAS;AAAA,IACT,QAAQ,MAAM;AAAA,IACd,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,IACb,gBAAgB,MAAM,eAAe,SAAS;AAAA,IAC9C,YAAY,MAAM;AAAA,EACtB;AACA,QAAM,SAAS,mBAAmB,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC;AAC5D,aAAW,SAAS,QACpB;AACI,eAAW,MAAM,OACjB;AACI,UAAI,GAAG,YAAY,CAAC,IAAK,IACzB;AACI,cAAM,IAAI,gBAAgB;AAAA,MAC9B;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO,OAAO,KAAK,qBAAqB;AAC5C;AAUO,SAAS,0BAA0B,eAC1C;AACI,QAAM,MAAM,gBAAgB;AAAA,IACxB,KAAK,OAAO,KAAK,eAAe,QAAQ;AAAA,IACxC,QAAQ;AAAA,IACR,MAAM;AAAA,EACV,CAAC;AACD,MAAI,IAAI,sBAAsB,QAAQ,IAAI,sBAAsB,eAAe,cAC/E;AACI,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AAEA,SAAO;AACX;AAaO,SAAS,kBAAkB,OAAyB,gBAAwB,WACnF;AACI,QAAM,OAAO,OAAO,KAAK,oBAAoB,KAAK,GAAG,MAAM;AAC3D,MAAI,CAAC,wBAAwB,KAAK,cAAc,GAChD;AACI,WAAO;AAAA,EACX;AAEA,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA,EAAE,KAAK,WAAW,aAAa,uBAAuB;AAAA,IACtD,OAAO,KAAK,gBAAgB,KAAK;AAAA,EACrC;AACJ;AASO,SAAS,gBAAgB,OAAyB,0BACzD;AACI,QAAM,MAAM,iBAAiB;AAAA,IACzB,KAAK,OAAO,KAAK,0BAA0B,QAAQ;AAAA,IACnD,QAAQ;AAAA,IACR,MAAM;AAAA,EACV,CAAC;AAED,SAAO;AAAA,IACH;AAAA,IACA,OAAO,KAAK,oBAAoB,KAAK,GAAG,MAAM;AAAA,IAC9C,EAAE,KAAK,aAAa,uBAAuB;AAAA,EAC/C,EAAE,SAAS,KAAK;AACpB;AAGO,SAAS,UAAU,OAC1B;AACI,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAC1D;;;AC5KA,SAAS,mBAAmB;AAwBrB,IAAM,cAAoD;AAAA,EAC7D,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,sBAAsB;AAC1B;AAGO,SAAS,WAChB;AACI,SAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AACzC;AAEO,IAAM,qBAAN,MAAM,oBACb;AAAA,EACI,YACa,MACA,SAEb;AAHa;AACA;AAAA,EAEZ;AAAA,EAED,IAAI,aACJ;AACI,WAAO,YAAY,KAAK,IAAI;AAAA,EAChC;AAAA;AAAA,EAGA,cAAc,WACd;AACI,UAAM,QAAyB,oBAAI,IAA4B;AAAA,MAC3D,CAAC,QAAQ,KAAK,IAAI;AAAA,MAClB,CAAC,WAAW,KAAK,OAAO;AAAA,MACxB,CAAC,aAAa,SAAS;AAAA,IAC3B,CAAC;AAED,WAAO,oBAAoB,oBAAI,IAA4B,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC;AAAA,EAClF;AAAA;AAAA,EAGA,WACA;AACI,WAAO,sBAAsB,KAAK,IAAI;AAAA,EAC1C;AAAA;AAAA,EAIA,OAAO,aACP;AACI,WAAO,kBAAkB,4DAA4D;AAAA,EACzF;AAAA,EAEA,OAAO,mBACP;AACI,WAAO,kBAAkB,yEAAyE;AAAA,EACtG;AAAA,EAEA,OAAO,qBACP;AACI,WAAO,kBAAkB,sEAAsE;AAAA,EACnG;AAAA,EAEA,OAAO,eACP;AACI,WAAO,kBAAkB,uDAAuD;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,mBACP;AACI,WAAO,kBAAkB,yEAAyE;AAAA,EACtG;AAAA,EAEA,OAAO,yBACP;AACI,WAAO,kBAAkB,kEAAkE;AAAA,EAC/F;AAAA,EAEA,OAAO,yBACP;AACI,WAAO,kBAAkB,0EAA0E;AAAA,EACvG;AAAA,EAEA,OAAO,gBACP;AACI,WAAO,kBAAkB,oCAAoC;AAAA,EACjE;AAAA;AAAA,EAIA,OAAO,kBACP;AACI,WAAO,IAAI,oBAAmB,oBAAoB,4DAA4D;AAAA,EAClH;AAAA;AAAA,EAIA,OAAO,iBACP;AACI,WAAO,IAAI,oBAAmB,mBAAmB,gCAAgC;AAAA,EACrF;AAAA,EAEA,OAAO,eACP;AACI,WAAO,IAAI,oBAAmB,iBAAiB,gDAAgD;AAAA,EACnG;AAAA,EAEA,OAAO,gBACP;AACI,WAAO,IAAI,oBAAmB,kBAAkB,qDAAqD;AAAA,EACzG;AAAA,EAEA,OAAO,eACP;AACI,WAAO,IAAI,oBAAmB,iBAAiB,iCAAiC;AAAA,EACpF;AACJ;AAEA,SAAS,kBAAkB,SAC3B;AACI,SAAO,IAAI,mBAAmB,wBAAwB,OAAO;AACjE;;;ACpJA,SAAS,gBAAgB;AAUlB,SAAS,gBAAgB,UAAkB,OAClD;AACI,SAAO,KAAK,UAAU,CAAC,UAAU,KAAK,CAAC;AAC3C;AA2BO,IAAM,qBAAN,MACP;AAAA;AAAA,EAEqB,QAAQ,oBAAI,IAAoB;AAAA,EAEjD,QAAQ,UAAkB,OAC1B;AACI,WAAO,KAAK,MAAM,IAAI,gBAAgB,UAAU,KAAK,CAAC;AAAA,EAC1D;AAAA;AAAA,EAGA,MAAM,UAAkB,OAAe,UACvC;AACI,UAAM,MAAM,gBAAgB,UAAU,KAAK;AAC3C,QAAI,KAAK,MAAM,IAAI,GAAG,GACtB;AACI,aAAO;AAAA,IACX;AACA,SAAK,MAAM,IAAI,KAAK,QAAQ;AAE5B,WAAO;AAAA,EACX;AAAA;AAAA,EAGA,MAAM,WAAmB,cACzB;AACI,eAAW,CAAC,KAAK,aAAa,KAAK,KAAK,OACxC;AACI,UAAI,YAAY,gBAAgB,cAChC;AACI,aAAK,MAAM,OAAO,GAAG;AAAA,MACzB;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,IAAI,OACJ;AACI,WAAO,KAAK,MAAM;AAAA,EACtB;AAAA,EAEA,QACA;AACI,SAAK,MAAM,MAAM;AAAA,EACrB;AACJ;AASO,IAAM,oBAAN,MACP;AAAA,EAGI,YAA6B,eAAuB,8BACpD;AAD6B;AAAA,EAC5B;AAAA,EAHgB,SAAS,IAAI,mBAAmB;AAAA,EAKjD,MAAM,QAAQ,UAAkB,OAChC;AACI,SAAK,OAAO,MAAM,KAAK,IAAI,GAAG,KAAK,YAAY;AAE/C,WAAO,KAAK,OAAO,QAAQ,UAAU,KAAK;AAAA,EAC9C;AAAA,EAEA,MAAM,MAAM,UAAkB,OAC9B;AACI,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,OAAO,MAAM,KAAK,KAAK,YAAY;AAExC,WAAO,KAAK,OAAO,MAAM,UAAU,OAAO,GAAG;AAAA,EACjD;AACJ;AAaO,IAAM,mBAAN,MACP;AAAA,EACI,YAA6B,eAAuB,8BACpD;AAD6B;AAAA,EAC5B;AAAA,EAED,MAAM,QAAQ,UAAkB,OAChC;AACI,WAAO,MAAM,KAAK,MAAM,EAAE,OAAO,KAAK,IAAI,UAAU,KAAK,CAAC,MAAM;AAAA,EACpE;AAAA,EAEA,MAAM,MAAM,UAAkB,OAC9B;AACI,WAAO,MAAM,KAAK,MAAM,EAAE,IAAI,KAAK,IAAI,UAAU,KAAK,GAAG,KAAK,MAAM,KAAK,cAAc,IAAI,MAAM;AAAA,EACrG;AAAA,EAEQ,QACR;AACI,UAAM,QAAQ,SAAS;AACvB,QAAI,CAAC,OACL;AACI,YAAM,IAAI,MAAM,oDAAoD;AAAA,IACxE;AAEA,WAAO;AAAA,EACX;AAAA,EAEQ,IAAI,UAAkB,OAC9B;AACI,WAAO,iCAAiC,UAAU,OAAO,KAAK,gBAAgB,UAAU,KAAK,GAAG,MAAM,CAAC,CAAC;AAAA,EAC5G;AACJ;AAIA,IAAI,aAA4C;AAOzC,SAAS,gCAAgC,OAChD;AACI,eAAa;AACjB;AAGO,SAAS,4BAChB;AACI,iBAAe,IAAI,kBAAkB;AAErC,SAAO;AACX;;;AClKO,SAAS,cAChB;AACI,SAAO,EAAE,WAAW,MAAM,KAAK,IAAI,EAAE;AACzC;AAGO,IAAM,YAAN,MACP;AAAA,EACI,YAAoB,QACpB;AADoB;AAAA,EACnB;AAAA,EAED,YACA;AACI,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,QAAQ,UACR;AACI,SAAK,UAAU;AAAA,EACnB;AACJ;AA+CO,IAAM,6BAA6B;AAEnC,IAAM,mBAAN,MACP;AAAA,EACa;AAAA,EAEQ;AAAA,EACA;AAAA,EACA,aAAa,oBAAI,IAAuB;AAAA,EACxC,WAAW,oBAAI,IAAgC;AAAA;AAAA,EAG/C,cAAc,IAAI,mBAAmB;AAAA,EAErC,gBAAgB,oBAAI,IAAY;AAAA,EAChC,QAAQ,oBAAI,IAAsB;AAAA,EAElC;AAAA,EACT;AAAA,EAEA,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,eAAe;AAAA,EAEvB,YAAY,SACZ;AACI,SAAK,QAAQ,QAAQ,SAAS,YAAY;AAC1C,SAAK,0BAA0B,QAAQ,oBAAoB;AAC3D,SAAK,mBAAmB,KAAK;AAC7B,SAAK,qBAAqB,QAAQ,sBAAsB;AAGxD,SAAK,oBAAoB,IAAI;AAAA,MACzB,OAAO,QAAQ,QAAQ,UAAU,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,0BAA0B,IAAI,CAAC,CAAC;AAAA,IACtG;AACA,eAAW,CAAC,OAAO,GAAG,KAAK,KAAK,mBAChC;AACI,WAAK,WAAW,IAAI,OAAO,GAAG;AAAA,IAClC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,kBAAkB,OAAe,wBACjC;AACI,SAAK,WAAW,IAAI,OAAO,0BAA0B,sBAAsB,CAAC;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAQN;AACI,UAAM,MAAM,KAAK,MAAM,UAAU;AACjC,SAAK,MAAM,GAAG;AAKd,QAAI,KAAK,cAAc,IAAI,KAAK,KAAK,GACrC;AACI,aAAO,mBAAmB,eAAe;AAAA,IAC7C;AACA,QAAI,KAAK,iBACT;AACI,YAAM,UAAU,KAAK,uBAAuB,OAAO,SAAY,KAAK,SAAS,IAAI,KAAK,kBAAkB;AACxG,UAAI,YAAY,UAAa,QAAQ,mBAAmB,OACjD,QAAQ,UAAU,KAAK,SAAS,QAAQ,aAAa,KAAK,UACjE;AACI,eAAO,mBAAmB,eAAe;AAAA,MAC7C;AAAA,IACJ;AAGA,UAAM,MAAM,MAAM,OAAO,KAAK,WAAW,cAAc;AACvD,QAAI,MAAM,KAAK,MAAM,KAAK,oBAC1B;AACI,aAAO,mBAAmB,aAAa;AAAA,IAC3C;AAGA,QAAI,KAAK,YAAY,QAAQ,KAAK,UAAU,KAAK,WAAW,KAAK,GACjE;AACI,aAAO,mBAAmB,cAAc;AAAA,IAC5C;AASA,UAAM,YAAY,KAAK,WAAW,IAAI,KAAK,KAAK;AAChD,QAAI,cAAc,QAClB;AACI,aAAO,mBAAmB,aAAa;AAAA,IAC3C;AACA,QAAI,CAAC,kBAAkB,KAAK,YAAY,KAAK,gBAAgB,SAAS,GACtE;AACI,aAAO,mBAAmB,aAAa;AAAA,IAC3C;AAEA,SAAK,YAAY,MAAM,KAAK,UAAU,KAAK,WAAW,OAAO,OAAO,KAAK,WAAW,cAAc,CAAC;AAEnG,WAAO;AAAA,EACX;AAAA;AAAA;AAAA,EAKA,YAAY,UAAkB,OAC9B;AACI,UAAM,MAAM,KAAK,MAAM,UAAU;AACjC,SAAK,MAAM,GAAG;AACd,UAAM,YAAY,SAAS;AAC3B,UAAM,kBAAkB,MAAM,KAAK;AACnC,SAAK,SAAS,IAAI,WAAW,EAAE,UAAU,OAAO,gBAAgB,CAAC;AAEjE,WAAO,EAAE,WAAW,gBAAgB;AAAA,EACxC;AAAA;AAAA,EAGA,YAAY,WAAmB,UAAkB,OAAe,iBAChE;AACI,SAAK,SAAS,IAAI,WAAW,EAAE,UAAU,OAAO,gBAAgB,CAAC;AAAA,EACrE;AAAA;AAAA,EAGA,iBACA;AACI,SAAK,SAAS,MAAM;AAAA,EACxB;AAAA;AAAA,EAGA,UAAU,OACV;AACI,SAAK,cAAc,IAAI,KAAK;AAC5B,eAAW,CAAC,WAAW,OAAO,KAAK,KAAK,UACxC;AACI,UAAI,QAAQ,UAAU,OACtB;AACI,aAAK,SAAS,OAAO,SAAS;AAAA,MAClC;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,oBAAoB,QACpB;AACI,SAAK,mBAAmB;AAAA,EAC5B;AAAA;AAAA,EAGA,QACA;AACI,SAAK,WAAW,MAAM;AACtB,eAAW,CAAC,OAAO,GAAG,KAAK,KAAK,mBAChC;AACI,WAAK,WAAW,IAAI,OAAO,GAAG;AAAA,IAClC;AACA,SAAK,SAAS,MAAM;AACpB,SAAK,YAAY,MAAM;AACvB,SAAK,cAAc,MAAM;AACzB,SAAK,MAAM,MAAM;AACjB,SAAK,mBAAmB,KAAK;AAC7B,SAAK,eAAe;AACpB,SAAK,iBAAiB;AACtB,SAAK,YAAY;AACjB,SAAK,iBAAiB;AACtB,SAAK,eAAe;AAAA,EACxB;AAAA;AAAA;AAAA,EAKA,SAAS,MAAc,QAAgB,OACvC;AACI,SAAK,MAAM,IAAI,MAAM,EAAE,QAAQ,WAAW,MAAM,CAAC;AAAA,EACrD;AAAA;AAAA,EAGA,eAAe,MACf;AACI,UAAMC,QAAO,KAAK,MAAM,IAAI,IAAI;AAChC,QAAIA,UAAS,QACb;AACI,aAAO;AAAA,IACX;AACA,IAAAA,MAAK,aAAa;AAClB,QAAIA,MAAK,aAAa,GACtB;AACI,WAAK,MAAM,OAAO,IAAI;AAAA,IAC1B;AAEA,WAAOA,MAAK;AAAA,EAChB;AAAA;AAAA,EAIA,gBACA;AACI,SAAK,gBAAgB;AAAA,EACzB;AAAA,EAEA,gBAAgB,aAChB;AACI,QAAI,gBAAgB,8BACpB;AACI,WAAK,kBAAkB;AAAA,IAC3B,WACS,gBAAgB,aACzB;AACI,WAAK,aAAa;AAAA,IACtB,WACS,gBAAgB,cACzB;AACI,WAAK,kBAAkB;AAAA,IAC3B;AAAA,EACJ;AAAA,EAEA,gBACA;AACI,SAAK,gBAAgB;AAAA,EACzB;AAAA,EAEA,QACA;AACI,SAAK,MAAM,KAAK,MAAM,UAAU,CAAC;AAEjC,WAAO;AAAA,MACH,cAAc,KAAK;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,WAAW,KAAK;AAAA,MAChB,gBAAgB,KAAK;AAAA,MACrB,cAAc,KAAK;AAAA,MACnB,kBAAkB,KAAK,SAAS;AAAA,MAChC,iBAAiB,KAAK,YAAY;AAAA,IACtC;AAAA,EACJ;AAAA,EAEA,YACA;AACI,WAAO,KAAK,MAAM,UAAU;AAAA,EAChC;AAAA;AAAA,EAGA,IAAI,WACJ;AACI,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,MAAM,WACd;AACI,eAAW,CAAC,WAAW,OAAO,KAAK,KAAK,UACxC;AACI,UAAI,QAAQ,mBAAmB,WAC/B;AACI,aAAK,SAAS,OAAO,SAAS;AAAA,MAClC;AAAA,IACJ;AACA,SAAK,YAAY,MAAM,WAAW,KAAK,kBAAkB;AAAA,EAC7D;AACJ;;;AC3XO,IAAM,uBAAuB;AAAA,EAChC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,OAAO;AAAA,EACP,OAAO;AAAA,EACP,gBAAgB;AAAA,EAChB,OAAO;AAAA,EACP,SAAS;AACb;AAEO,IAAM,4BAA4B;AAEzC,IAAMC,aAAY,EAAE,MAAM;AAC1B,IAAMC,aAAY,MAAM,MAAM;AAwBvB,SAAS,wBAAwB,MAQxC;AACI,QAAM,cAAc,gBAAgB,KAAK,OAAO;AAChD,MAAI,gBAAgB,MACpB;AACI,WAAO,QAAQ,mBAAmB,iBAAiB,CAAC;AAAA,EACxD;AACA,MAAI,YAAY,YAAY,sBAC5B;AACI,WAAO,QAAQ,mBAAmB,gBAAgB,CAAC;AAAA,EACvD;AACA,MAAI,CAAC,qBAAqB,KAAK,QAAQ,IAAI,cAAc,CAAC,GAC1D;AACI,WAAO,QAAQ,mBAAmB,mBAAmB,CAAC;AAAA,EAC1D;AACA,MAAI,KAAK,qBAAqB,YAAY,cAAc,OACxD;AACI,WAAO,QAAQ,mBAAmB,uBAAuB,CAAC;AAAA,EAC9D;AAEA,MAAI;AACJ,MACA;AACI,YAAQ,mBAAmB,KAAK,IAAI;AAAA,EACxC,QAEA;AACI,WAAO,QAAQ,mBAAmB,iBAAiB,CAAC;AAAA,EACxD;AAGA,MAAI,CAAC,iBAAiB,KAAK,MAAM,KAAK,GACtC;AACI,WAAO,QAAQ,mBAAmB,iBAAiB,CAAC;AAAA,EACxD;AAEA,QAAM,aAA+B;AAAA,IACjC,QAAQ,KAAK;AAAA,IACb,MAAM,KAAK;AAAA,IACX,UAAU,YAAY;AAAA,IACtB,OAAO,YAAY;AAAA,IACnB,OAAO,YAAY;AAAA,IACnB,gBAAgB,YAAY;AAAA,IAC5B,YAAY,UAAU,KAAK,IAAI;AAAA,EACnC;AAEA,MAAI;AACJ,MACA;AACI,cAAU,KAAK,MAAM,MAAM;AAAA,MACvB,UAAU,YAAY;AAAA,MACtB,OAAO,YAAY;AAAA,MACnB,oBAAoB,YAAY;AAAA,MAChC,iBAAiB,KAAK;AAAA,MACtB;AAAA,MACA,gBAAgB,YAAY;AAAA,IAChC,CAAC;AAAA,EACL,QAEA;AAGI,WAAO,QAAQ,mBAAmB,cAAc,CAAC;AAAA,EACrD;AACA,MAAI,YAAY,MAChB;AACI,WAAO,QAAQ,OAAO;AAAA,EAC1B;AAEA,SAAO,EAAE,UAAU,MAAM,OAAO,YAAY;AAChD;AAEA,SAAS,QAAQ,SACjB;AACI,SAAO,EAAE,UAAU,OAAO,QAAQ;AACtC;AAYO,SAAS,gBAAgB,SAChC;AACI,QAAM,UAAU,QAAQ,IAAI,qBAAqB,OAAO;AACxD,QAAM,WAAW,QAAQ,IAAI,qBAAqB,QAAQ;AAC1D,QAAM,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AACpD,QAAM,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AACpD,QAAM,cAAc,QAAQ,IAAI,qBAAqB,cAAc;AACnE,QAAM,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AACpD,MAAI,YAAY,QAAQ,aAAa,QAAQ,UAAU,QAChD,UAAU,QAAQ,gBAAgB,QAAQ,UAAU,MAC3D;AACI,WAAO;AAAA,EACX;AACA,QAAM,iBAAiB,WAAW,WAAW;AAC7C,MAAI,mBAAmB,MACvB;AACI,WAAO;AAAA,EACX;AAEA,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,IAAI,qBAAqB,OAAO;AAAA,EACvD;AACJ;AAEA,SAAS,WAAW,KACpB;AACI,MAAI,CAAC,kBAAkB,KAAK,GAAG,GAC/B;AACI,WAAO;AAAA,EACX;AACA,QAAM,QAAQ,OAAO,GAAG;AACxB,MAAI,QAAQD,cAAa,QAAQC,YACjC;AACI,WAAO;AAAA,EACX;AAEA,SAAO;AACX;AAGO,SAAS,qBAAqB,OACrC;AACI,MAAI,UAAU,MACd;AACI,WAAO;AAAA,EACX;AAEA,SAAO,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,MAAM;AACxD;;;AC/JO,IAAM,sBAAoD;AAAA,EAC7D;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AACJ;AAcO,IAAM,0BAAwD;AAAA,EACjE;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AAAA,EACA;AAAA,IACI,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,cAAc;AAAA,IACd,SAAS;AAAA,EACb;AACJ;AAGO,IAAM,oBAAN,cAAgC,MACvC;AAAA,EACI,cACA;AACI,UAAM,gCAAgC;AACtC,SAAK,OAAO;AAAA,EAChB;AACJ;AAiCO,SAAS,uBAAuB,OACvC;AACI,QAAMC,WAAU,eAAe,OAAO,CAAC,YAAY,SAAS,SAAS,gBAAgB,GAAG,CAAC,CAAC;AAE1F,SAAO;AAAA,IACH,UAAU,KAAKA,SAAQ,IAAI,UAAU,CAAC;AAAA,IACtC,OAAO,KAAKA,SAAQ,IAAI,OAAO,CAAC;AAAA,IAChC,OAAO,KAAKA,SAAQ,IAAI,OAAO,CAAC;AAAA,IAChC,gBAAgB,QAAQA,SAAQ,IAAI,gBAAgB,CAAC;AAAA,EACzD;AACJ;AAEO,SAAS,kBAAkB,OAClC;AACI,QAAMA,WAAU,eAAe,OAAO,CAAC,WAAW,UAAU,GAAG,CAAC,CAAC;AAEjE,SAAO;AAAA,IACH,SAAS,KAAKA,SAAQ,IAAI,SAAS,CAAC;AAAA,IACpC,UAAU,QAAQA,SAAQ,IAAI,UAAU,CAAC;AAAA,EAC7C;AACJ;AAEO,SAAS,uBAAuB,OACvC;AACI,QAAMA,WAAU,eAAe,OAAO,CAAC,OAAO,GAAG,CAAC,QAAQ,CAAC;AAC3D,QAAM,UAA4B,EAAE,OAAO,QAAQA,SAAQ,IAAI,OAAO,CAAC,EAAE;AACzE,MAAIA,SAAQ,IAAI,QAAQ,GACxB;AACI,YAAQ,SAAS,KAAKA,SAAQ,IAAI,QAAQ,CAAC;AAAA,EAC/C;AAEA,SAAO;AACX;AAEA,SAAS,eACL,OACA,UACA,UAEJ;AACI,MAAI,EAAE,iBAAiB,MACvB;AACI,UAAM,IAAI,kBAAkB;AAAA,EAChC;AACA,aAAW,OAAO,UAClB;AACI,QAAI,CAAC,MAAM,IAAI,GAAG,GAClB;AACI,YAAM,IAAI,kBAAkB;AAAA,IAChC;AAAA,EACJ;AACA,aAAW,OAAO,MAAM,KAAK,GAC7B;AACI,QAAI,CAAC,SAAS,SAAS,GAAG,KAAK,CAAC,SAAS,SAAS,GAAG,GACrD;AACI,YAAM,IAAI,kBAAkB;AAAA,IAChC;AAAA,EACJ;AAEA,SAAO;AACX;AAEA,SAAS,KAAK,OACd;AACI,MAAI,OAAO,UAAU,UACrB;AACI,UAAM,IAAI,kBAAkB;AAAA,EAChC;AAEA,SAAO;AACX;AAEA,SAAS,QAAQ,OACjB;AACI,MAAI,OAAO,UAAU,UACrB;AACI,UAAM,IAAI,kBAAkB;AAAA,EAChC;AAEA,SAAO;AACX;AAMO,SAAS,wBAAwB,WAAmB,iBAC3D;AACI,SAAO,oBAAI,IAA4B;AAAA,IACnC,CAAC,aAAa,SAAS;AAAA,IACvB,CAAC,mBAAmB,eAAe;AAAA,EACvC,CAAC;AACL;AAEO,SAAS,mBAAmB,SAAiB,UAAkB,kBACtE;AACI,SAAO,oBAAI,IAA4B;AAAA,IACnC,CAAC,WAAW,OAAO;AAAA,IACnB,CAAC,YAAY,QAAQ;AAAA,IACrB,CAAC,oBAAoB,gBAAgB;AAAA,EACzC,CAAC;AACL;AAEO,SAAS,wBAAwB,OAAuB,YAC/D;AACI,QAAM,eAA+B,MAAM,IAAI,CAAC,SAAS,oBAAI,IAA4B;AAAA,IACrF,CAAC,MAAM,KAAK,EAAE;AAAA,IACd,CAAC,QAAQ,KAAK,IAAI;AAAA,IAClB,CAAC,mBAAmB,KAAK,eAAe;AAAA,EAC5C,CAAC,CAAC;AACF,QAAMA,WAAU,oBAAI,IAA4B,CAAC,CAAC,SAAS,YAAY,CAAC,CAAC;AACzE,MAAI,eAAe,MACnB;AACI,IAAAA,SAAQ,IAAI,cAAc,UAAU;AAAA,EACxC;AAEA,SAAOA;AACX;;;AChTO,IAAM,iBAAiB;AAEvB,IAAM,uBAAuB;AAEpC,IAAM,UAAU;AAChB,IAAM,mBAAmB;AACzB,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AAEtB,IAAM,yBAAyB;AAE/B,eAAsB,qBAClB,OACA,cACA,MACA,SAEJ;AACI,MAAI,SAAS,mBACb;AACI,WAAO,OAAO,SAAS,oBAAI,IAA4B,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAAA,EAC9E;AACA,MAAI,QAAQ,QAAQ,IAAI,oBAAoB,MAAM,cAClD;AACI,WAAO,OAAO,gBAAgB,QAAQ,eAAe,CAAC;AAAA,EAC1D;AAEA,QAAM,MAAM,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC;AACtD,QAAM,OAAO,IAAI,SAAS,yBAAyB,IAAI,MAAM,GAAG,sBAAsB,IAAI;AAE1F,UAAQ,MACR;AAAA,IACI,KAAK;AACD,aAAO,MAAM,KAAK;AAAA,IACtB,KAAK;AACD,YAAM,MAAM;AAEZ,aAAO,GAAG;AAAA,IACd,KAAK;AACD,YAAM,eAAe;AAErB,aAAO,GAAG;AAAA,IACd,KAAK;AACD,aAAO,YAAY,OAAO,IAAI;AAAA,IAClC,KAAK;AACD,aAAO,UAAU,OAAO,IAAI;AAAA,IAChC,KAAK;AACD,aAAO,WAAW,OAAO,IAAI;AAAA,IACjC,KAAK;AACD,aAAO,KAAK,OAAO,IAAI;AAAA,IAC3B,KAAK;AACD,aAAO,aAAa,OAAO,IAAI;AAAA,IACnC;AACI,aAAO,OAAO,gBAAgB,QAAQ,uBAAuB,CAAC;AAAA,EACtE;AACJ;AAIA,SAAS,MAAM,OACf;AACI,QAAM,WAAW,MAAM,MAAM;AAE7B,SAAO,OAAO,SAAS,OAAO,oBAAI,IAA4B;AAAA,IAC1D,CAAC,aAAa,OAAO,SAAS,SAAS,CAAC;AAAA,IACxC,CAAC,kBAAkB,OAAO,SAAS,cAAc,CAAC;AAAA,IAClD,CAAC,kBAAkB,OAAO,SAAS,cAAc,CAAC;AAAA,IAClD,CAAC,oBAAoB,OAAO,SAAS,gBAAgB,CAAC;AAAA,IACtD,CAAC,gBAAgB,OAAO,SAAS,YAAY,CAAC;AAAA,IAC9C,CAAC,gBAAgB,OAAO,SAAS,YAAY,CAAC;AAAA,IAC9C,CAAC,mBAAmB,OAAO,SAAS,eAAe,CAAC;AAAA,EACxD,CAAC,CAAC,CAAC;AACP;AAQA,SAAS,YAAY,OAAyB,MAC9C;AACI,QAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,QAAM,YAAY,YAAY,MAAM,WAAW;AAC/C,MAAI,UAAU,MACd;AACI,WAAO,WAAW,OAAO;AAAA,EAC7B;AACA,MAAI,cAAc,MAClB;AACI,WAAO,WAAW,WAAW;AAAA,EACjC;AACA,MACA;AACI,UAAM,kBAAkB,OAAO,SAAS;AAAA,EAC5C,QAEA;AACI,WAAO,WAAW,WAAW;AAAA,EACjC;AAEA,SAAO,GAAG;AACd;AAEA,SAAS,UAAU,OAAyB,MAC5C;AACI,QAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,MAAI,UAAU,MACd;AACI,WAAO,WAAW,OAAO;AAAA,EAC7B;AACA,QAAM,UAAU,KAAK;AAErB,SAAO,GAAG;AACd;AAEA,SAAS,WAAW,OAAyB,MAC7C;AACI,QAAM,YAAY,aAAa,MAAM,WAAW;AAChD,MAAI,cAAc,MAClB;AACI,WAAO,WAAW,WAAW;AAAA,EACjC;AACA,QAAM,oBAAoB,OAAO,SAAS,CAAC;AAE3C,SAAO,GAAG;AACd;AAEA,SAAS,KAAK,OAAyB,MACvC;AACI,QAAM,OAAO,YAAY,MAAM,MAAM;AACrC,QAAM,SAAS,aAAa,MAAM,QAAQ;AAC1C,QAAM,QAAQ,aAAa,MAAM,OAAO;AACxC,MAAI,SAAS,MACb;AACI,WAAO,WAAW,MAAM;AAAA,EAC5B;AACA,MAAI,WAAW,MACf;AACI,WAAO,WAAW,QAAQ;AAAA,EAC9B;AACA,MAAI,UAAU,MACd;AACI,WAAO,WAAW,OAAO;AAAA,EAC7B;AACA,QAAM,SAAS,MAAM,OAAO,MAAM,GAAG,OAAO,KAAK,CAAC;AAElD,SAAO,GAAG;AACd;AAMA,SAAS,aAAa,OAAyB,MAC/C;AACI,QAAM,QAAQ,MAAM;AACpB,MAAI,EAAE,iBAAiB,YACvB;AACI,WAAO,OAAO,eAAe,QAAQ,uCAAuC,CAAC;AAAA,EACjF;AACA,QAAM,SAAS,aAAa,MAAM,QAAQ;AAC1C,MAAI,WAAW,MACf;AACI,WAAO,WAAW,QAAQ;AAAA,EAC9B;AACA,QAAM,QAAQ,OAAO,MAAM,CAAC;AAE5B,SAAO,GAAG;AACd;AAIA,SAAS,QAAQ,MACjB;AACI,MAAI,KAAK,WAAW,GACpB;AACI,WAAO,oBAAI,IAAI;AAAA,EACnB;AACA,MAAI;AACJ,MACA;AACI,aAAS,mBAAmB,IAAI;AAAA,EACpC,QAEA;AACI,WAAO;AAAA,EACX;AAEA,SAAO,kBAAkB,MAAM,SAAS;AAC5C;AAEA,SAAS,YAAY,MAAkB,OACvC;AACI,QAAM,QAAQ,QAAQ,IAAI,GAAG,IAAI,KAAK;AAEtC,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC/C;AAEA,SAAS,aAAa,MAAkB,OACxC;AACI,QAAM,QAAQ,QAAQ,IAAI,GAAG,IAAI,KAAK;AAEtC,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC/C;AAEA,SAAS,WAAW,OACpB;AACI,SAAO,OAAO,kBAAkB,QAAQ,+BAA+B,KAAK,EAAE,CAAC;AACnF;AAEA,SAAS,KACT;AACI,SAAO,OAAO,SAAS,OAAO,oBAAI,IAAI,CAAC,CAAC;AAC5C;AAEA,SAAS,QAAQ,QACjB;AACI,SAAO,oBAAI,IAA4B,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,MAAM,CAAC,CAAC;AAC9E;AAEA,SAAS,OAAO,OAChB;AACI,QAAM,IAAI,MAAM,IAAI;AAEpB,SAAO;AACX;AAEA,SAAS,OAAO,QAAgB,OAChC;AACI,QAAM,QAAQ,oBAAoB,KAAK;AACvC,QAAM,SAAS,MAAM,OAAO,MAAM,MAAM,YAAY,MAAM,aAAa,MAAM,UAAU;AAEvF,SAAO,IAAI,SAAS,QAAQ,EAAE,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,EAAE,CAAC;AAC3F;;;ACvNA,IAAM,iBAAiB,KAAK;AAE5B,IAAMC,WAAU;AAOT,IAAM,gBAAyC;AAAA,EAClD,EAAE,IAAI,aAAa,MAAM,SAAS,iBAAiB,eAAmB;AAAA,EACtE,EAAE,IAAI,aAAa,MAAM,SAAS,iBAAiB,eAAmB;AAAA,EACtE,EAAE,IAAI,aAAa,MAAM,WAAW,iBAAiB,eAAmB;AAAA,EACxE,EAAE,IAAI,aAAa,MAAM,SAAS,iBAAiB,eAAmB;AAAA,EACtE,EAAE,IAAI,aAAa,MAAM,QAAQ,iBAAiB,eAAmB;AACzE;AAGO,IAAM,gBAAgB;AAwBtB,SAAS,4BAA4B,SAC5C;AACI,QAAM,QAAQ,IAAI,iBAAiB,OAAO;AAC1C,QAAM,eAAe,QAAQ,gBAAgB,SAAS;AACtD,QAAM,gBAAgB,QAAQ,iBAAiB;AAC/C,QAAM,MAAM,QAAQ,QAAQ,MAAM;AAElC,iBAAe,SAAS,SACxB;AACI,UAAM,cAAc;AACpB,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAE/B,QAAI,iBAAiB,IAAI,SAAS,WAAW,cAAc,GAC3D;AACI,aAAO,qBAAqB,OAAO,cAAc,IAAI,UAAU,OAAO;AAAA,IAC1E;AAIA,UAAM,YAAY,IAAI,WAAW,KAC3B,oBAAoB,KAAK,CAAC,OAAO,GAAG,SAAS,IAAI,YAAY,GAAG,WAAW,QAAQ,MAAM,IACzF;AACN,QAAI,cAAc,QAClB;AACI,aAAO,OAAO,mBAAmB,WAAW,CAAC;AAAA,IACjD;AAEA,UAAM,OAAO,MAAM,eAAe,OAAO;AACzC,QAAI,SAAS,MACb;AACI,aAAO,OAAO,mBAAmB,aAAa,CAAC;AAAA,IACnD;AAIA,UAAM,YAAY,IAAI,QAAQ;AAE9B,UAAM,YAAY,wBAAwB;AAAA,MACtC;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB,QAAQ,UAAU;AAAA,MAClB,MAAM,UAAU;AAAA,MAChB,iBAAiB,UAAU;AAAA,MAC3B;AAAA,IACJ,CAAC;AACD,QAAI,CAAC,UAAU,UACf;AACI,aAAO,OAAO,UAAU,OAAO;AAAA,IACnC;AAEA,WAAO,MAAM,WAAW,SAAS;AAAA,EACrC;AAEA,WAAS,MAAM,WAA8B,WAC7C;AACI,QAAI;AACJ,QACA;AACI,UAAI,UAAU,OAAO,8BACrB;AACI,cAAM,UAAU,uBAAuB,UAAU,KAAK;AAItD,YAAI,QAAQ,aAAa,UAAU,YAAY,YACxC,QAAQ,UAAU,UAAU,YAAY,OAC/C;AACI,iBAAO,OAAO,mBAAmB,uBAAuB,CAAC;AAAA,QAC7D;AACA,cAAM,SAAS,MAAM,YAAY,QAAQ,UAAU,QAAQ,KAAK;AAChE,gBAAQ,wBAAwB,OAAO,WAAW,OAAO,OAAO,eAAe,CAAC;AAAA,MACpF,WACS,UAAU,OAAO,aAC1B;AACI,cAAM,UAAU,kBAAkB,UAAU,KAAK;AACjD,gBAAQ,mBAAmB,QAAQ,SAAS,QAAQ,UAAU,OAAO,MAAM,UAAU,CAAC,CAAC;AAAA,MAC3F,OAEA;AACI,cAAM,SAAS,UAAU,uBAAuB,UAAU,KAAK,CAAC;AAChE,YAAI,WAAW,MACf;AACI,iBAAO,OAAO,mBAAmB,uBAAuB,CAAC;AAAA,QAC7D;AACA,gBAAQ;AAAA,MACZ;AAAA,IACJ,SACO,OACP;AACI,UAAI,iBAAiB,mBACrB;AACI,eAAO,OAAO,mBAAmB,uBAAuB,CAAC;AAAA,MAC7D;AAEA,aAAO,OAAO,mBAAmB,cAAc,CAAC;AAAA,IACpD;AAEA,UAAM,gBAAgB,UAAU,EAAE;AAElC,WAAO,iBAAiBA,UAAS,oBAAoB,KAAK,CAAC;AAAA,EAC/D;AAEA,WAAS,OAAO,SAChB;AACI,UAAM,cAAc;AAEpB,WAAO,iBAAiB,QAAQ,YAAY,QAAQ,cAAc,SAAS,CAAC,CAAC;AAAA,EACjF;AAEA,iBAAe,YAAY,MAC3B;AACI,UAAM,SAAS,MAAM,eAAe,IAAI;AACxC,QAAI,SAAS,GACb;AACI,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,MAAM,CAAC;AAAA,IAC9D;AAAA,EACJ;AAEA,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA,OAAO,OAAO,YACd;AACI,UACA;AACI,cAAM,WAAW,MAAM,SAAS,OAAO;AACvC,YAAI,GAAG,QAAQ,MAAM,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,QAAQ,OAAO,SAAS,MAAM,EAAE;AAE9E,eAAO;AAAA,MACX,QAEA;AAGI,eAAO,OAAO,mBAAmB,cAAc,CAAC;AAAA,MACpD;AAAA,IACJ;AAAA,EACJ;AACJ;AAQA,SAAS,UAAU,SACnB;AACI,MAAI,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,eAC1C;AACI,WAAO;AAAA,EACX;AACA,MAAI,QAAQ;AACZ,MAAI,QAAQ,WAAW,QACvB;AACI,UAAM,QAAQ,cAAc,UAAU,CAAC,SAAS,KAAK,OAAO,QAAQ,MAAM;AAC1E,QAAI,QAAQ,GACZ;AACI,aAAO;AAAA,IACX;AACA,YAAQ,QAAQ;AAAA,EACpB;AACA,QAAM,MAAM,KAAK,IAAI,cAAc,QAAQ,QAAQ,OAAO,QAAQ,KAAK,CAAC;AACxE,QAAM,OAAO,cAAc,MAAM,OAAO,GAAG;AAG3C,QAAM,aAAa,MAAM,cAAc,UAAU,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC,EAAE,KAAK;AAE9F,SAAO,wBAAwB,CAAC,GAAG,IAAI,GAAG,UAAU;AACxD;AAEA,SAAS,iBAAiB,QAAgB,MAC1C;AACI,SAAO,IAAI,SAAS,cAAc,IAAI,GAAG;AAAA,IACrC;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAClD,CAAC;AACL;AAGA,eAAe,eAAe,SAC9B;AACI,MAAI,QAAQ,SAAS,MACrB;AACI,WAAO,IAAI,WAAW,CAAC;AAAA,EAC3B;AACA,QAAM,SAAS,QAAQ,KAAK,UAAU;AACtC,QAAM,SAAuB,CAAC;AAC9B,MAAI,QAAQ;AACZ,aACA;AACI,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,QAAI,MACJ;AACI;AAAA,IACJ;AACA,aAAS,MAAM;AACf,QAAI,QAAQ,gBACZ;AACI,YAAM,OAAO,OAAO;AAEpB,aAAO;AAAA,IACX;AACA,WAAO,KAAK,KAAK;AAAA,EACrB;AACA,QAAM,OAAO,IAAI,WAAW,KAAK;AACjC,MAAI,SAAS;AACb,aAAW,SAAS,QACpB;AACI,SAAK,IAAI,OAAO,MAAM;AACtB,cAAU,MAAM;AAAA,EACpB;AAEA,SAAO;AACX;AAEA,SAAS,cAAc,OACvB;AACI,SAAO,MAAM,OAAO,MAAM,MAAM,YAAY,MAAM,aAAa,MAAM,UAAU;AACnF;;;AC3PO,SAAS,uBACZ,OACA,UAAmC,CAAC,GAExC;AACI,SAAO,OAAO,GAAY,SAC1B;AACI,UAAM,OAAO,IAAI,WAAW,MAAM,EAAE,IAAI,YAAY,CAAC;AACrD,UAAM,YAAY,wBAAwB;AAAA,MACtC;AAAA,MACA,SAAS,EAAE,IAAI,IAAI;AAAA,MACnB,QAAQ,EAAE,IAAI;AAAA,MACd,MAAM,QAAQ,gBAAgB,EAAE,IAAI;AAAA,MACpC,iBAAiB;AAAA,MACjB;AAAA,IACJ,CAAC;AACD,QAAI,CAAC,UAAU,UACf;AACI,YAAM,cAAc;AACpB,YAAM,QAAQ,UAAU,QAAQ,cAAc,SAAS,CAAC;AACxD,YAAM,SAAS,MAAM,OAAO,MAAM,MAAM,YAAY,MAAM,aAAa,MAAM,UAAU;AAEvF,aAAO,EAAE,YAAY,QAAQ,UAAU,QAAQ,YAAmB;AAAA,QAC9D,gBAAgB;AAAA,MACpB,CAAC;AAAA,IACL;AACA,MAAE,IAAI,cAAc,QAAQ;AAC5B,MAAE,IAAI,eAAe;AAAA,MACjB,aAAa,UAAU;AAAA,MACvB,OAAO,UAAU;AAAA,IACrB,CAA8B;AAC9B,UAAM,KAAK;AAEX,WAAO;AAAA,EACX;AACJ;","names":["text","members","hold","INT64_MIN","INT64_MAX","members","HTTP_OK"]}

package/dist/config.d.ts

@@ -400,6 +400,24 @@ declare const authEnvSchema: {
     } & {
         key: "SPFN_AUTH_APPLE_CLIENT_IDS";
     };
+    SPFN_AUTH_KAKAO_NATIVE_CLIENT_IDS: {
+        description: string;
+        required: boolean;
+        examples: string[];
+        type: "string";
+        validator: (value: string) => string;
+    } & {
+        key: "SPFN_AUTH_KAKAO_NATIVE_CLIENT_IDS";
+    };
+    SPFN_AUTH_NAVER_NATIVE_CLIENT_IDS: {
+        description: string;
+        required: boolean;
+        examples: string[];
+        type: "string";
+        validator: (value: string) => string;
+    } & {
+        key: "SPFN_AUTH_NAVER_NATIVE_CLIENT_IDS";
+    };
     SPFN_AUTH_OAUTH_SUCCESS_URL: {
         description: string;
         required: boolean;
@@ -796,6 +814,24 @@ declare const env: _spfn_core_env.InferEnvType<{
     } & {
         key: "SPFN_AUTH_APPLE_CLIENT_IDS";
     };
+    SPFN_AUTH_KAKAO_NATIVE_CLIENT_IDS: {
+        description: string;
+        required: boolean;
+        examples: string[];
+        type: "string";
+        validator: (value: string) => string;
+    } & {
+        key: "SPFN_AUTH_KAKAO_NATIVE_CLIENT_IDS";
+    };
+    SPFN_AUTH_NAVER_NATIVE_CLIENT_IDS: {
+        description: string;
+        required: boolean;
+        examples: string[];
+        type: "string";
+        validator: (value: string) => string;
+    } & {
+        key: "SPFN_AUTH_NAVER_NATIVE_CLIENT_IDS";
+    };
     SPFN_AUTH_OAUTH_SUCCESS_URL: {
         description: string;
         required: boolean;