@swarmdo/cli 1.4.8

package/dist/src/appliance/rvfa-distribution.js

@@ -0,0 +1,370 @@
+/**
+ * RVFA Distribution & Hot-Patch Module
+ *
+ * IPFS publishing of RVFA appliances via Pinata and RVFP binary patches
+ * for section-level hot updates with atomic rollback.
+ *
+ * RVFP layout: [4B "RVFP"] [4B version u32LE] [4B header_len u32LE]
+ *              [header JSON] [new section data] [32B SHA256 footer]
+ */
+import { createHash, sign, verify as edVerify } from 'node:crypto';
+import { readFile, writeFile, rename, unlink, copyFile, mkdir } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { request as httpsRequest } from 'node:https';
+import { gzipSync, gunzipSync } from 'node:zlib';
+import { RvfaReader, RvfaWriter } from './rvfa-format.js';
+// ── Constants ────────────────────────────────────────────────
+const RVFP_VERSION = 1;
+const PRE = 12; // preamble: 4 magic + 4 version + 4 header_len
+const SHA_LEN = 32;
+const DEFAULT_GW = 'https://gateway.pinata.cloud';
+const DEFAULT_API = 'https://api.pinata.cloud';
+// ── Crypto helpers ───────────────────────────────────────────
+function sha256(d) { return createHash('sha256').update(d).digest('hex'); }
+function sha256B(d) { return createHash('sha256').update(d).digest(); }
+function detectKeyFormat(key) {
+    const str = key.toString('utf-8');
+    if (str.includes('BEGIN PRIVATE KEY'))
+        return { format: 'pem', type: 'pkcs8' };
+    if (str.includes('BEGIN PUBLIC KEY'))
+        return { format: 'pem', type: 'spki' };
+    // Heuristic: DER-encoded keys are raw binary, never valid UTF-8 "BEGIN"
+    return { format: 'der', type: 'pkcs8' }; // caller must override type for public keys
+}
+function edSign(data, key) {
+    const det = detectKeyFormat(key);
+    return sign(null, data, { key, format: det.format, type: det.type }).toString('hex');
+}
+function edCheck(data, sig, key) {
+    try {
+        const det = detectKeyFormat(key);
+        const type = det.format === 'pem' ? det.type : 'spki'; // public key for verify
+        return edVerify(null, data, { key, format: det.format, type }, Buffer.from(sig, 'hex'));
+    }
+    catch {
+        return false;
+    }
+}
+// ── HTTP helpers ─────────────────────────────────────────────
+function pinataReq(method, path, jwt, body, ct) {
+    return new Promise((resolve, reject) => {
+        const u = new URL(path);
+        const h = { Authorization: `Bearer ${jwt}` };
+        if (ct)
+            h['Content-Type'] = ct;
+        if (body)
+            h['Content-Length'] = String(body.length);
+        const req = httpsRequest({ hostname: u.hostname, path: u.pathname + u.search, method, headers: h }, (res) => {
+            const ch = [];
+            res.on('data', (c) => ch.push(c));
+            res.on('end', () => {
+                const raw = Buffer.concat(ch);
+                let data;
+                try {
+                    data = JSON.parse(raw.toString('utf-8'));
+                }
+                catch {
+                    data = raw;
+                }
+                resolve({ status: res.statusCode ?? 0, data });
+            });
+        });
+        req.setTimeout(30_000, () => { req.destroy(new Error('Request timed out after 30s')); });
+        req.on('error', reject);
+        if (body)
+            req.write(body);
+        req.end();
+    });
+}
+function httpGet(url, maxRedirects = 5) {
+    return new Promise((resolve, reject) => {
+        if (maxRedirects <= 0)
+            return reject(new Error('Too many redirects'));
+        const u = new URL(url);
+        const req = httpsRequest({ hostname: u.hostname, path: u.pathname + u.search, method: 'GET' }, (res) => {
+            if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+                return void httpGet(res.headers.location, maxRedirects - 1).then(resolve, reject);
+            }
+            const ch = [];
+            res.on('data', (c) => ch.push(c));
+            res.on('end', () => resolve(Buffer.concat(ch)));
+        });
+        req.setTimeout(30_000, () => { req.destroy(new Error('Request timed out after 30s')); });
+        req.on('error', reject);
+        req.end();
+    });
+}
+function multipart(name, file, data, meta) {
+    const b = `----Rvfa${Date.now()}${Math.random().toString(36).slice(2)}`;
+    const parts = [];
+    if (meta) {
+        parts.push(Buffer.from(`--${b}\r\nContent-Disposition: form-data; name="pinataMetadata"\r\n` +
+            `Content-Type: application/json\r\n\r\n${meta}\r\n`));
+    }
+    parts.push(Buffer.from(`--${b}\r\nContent-Disposition: form-data; name="${name}"; filename="${file}"\r\n` +
+        `Content-Type: application/octet-stream\r\n\r\n`));
+    parts.push(data, Buffer.from(`\r\n--${b}--\r\n`));
+    return { body: Buffer.concat(parts), ct: `multipart/form-data; boundary=${b}` };
+}
+/** Extract patch section data and bounds from a parsed patch buffer. */
+function patchData(buf) {
+    const hLen = buf.readUInt32LE(8);
+    const start = PRE + hLen;
+    const end = buf.length - SHA_LEN;
+    return { start, end, section: buf.subarray(start, end) };
+}
+/** Canonical JSON: recursive key-sorting for deterministic serialization. */
+function canonicalJson(value) {
+    return JSON.stringify(value, (_key, val) => {
+        if (val !== null && typeof val === 'object' && !Array.isArray(val) && !Buffer.isBuffer(val)) {
+            const sorted = {};
+            for (const k of Object.keys(val).sort()) {
+                sorted[k] = val[k];
+            }
+            return sorted;
+        }
+        return val;
+    });
+}
+/** Build a failed ApplyResult. */
+function failResult(sec, errs, extra) {
+    return { success: false, newSize: 0, patchedSection: sec, errors: errs, ...extra };
+}
+// ── RvfaPatcher ──────────────────────────────────────────────
+export class RvfaPatcher {
+    static async createPatch(opts) {
+        const comp = opts.compression ?? 'none';
+        const payload = comp === 'gzip' ? gzipSync(opts.sectionData) : opts.sectionData;
+        const header = {
+            magic: 'RVFP', version: RVFP_VERSION,
+            targetApplianceName: opts.targetName, targetApplianceVersion: opts.targetVersion,
+            targetSection: opts.sectionId, patchVersion: opts.patchVersion,
+            created: new Date().toISOString(), newSectionSize: payload.length,
+            newSectionSha256: sha256(payload), compression: comp,
+        };
+        if (opts.privateKey && opts.signedBy) {
+            const signable = Buffer.concat([Buffer.from(canonicalJson(header), 'utf-8'), payload]);
+            header.signature = edSign(signable, opts.privateKey);
+            header.signedBy = opts.signedBy;
+        }
+        const hJson = Buffer.from(JSON.stringify(header), 'utf-8');
+        const magic = Buffer.from('RVFP');
+        const ver = Buffer.alloc(4);
+        ver.writeUInt32LE(RVFP_VERSION, 0);
+        const hLen = Buffer.alloc(4);
+        hLen.writeUInt32LE(hJson.length, 0);
+        return Buffer.concat([magic, ver, hLen, hJson, payload, sha256B(payload)]);
+    }
+    static parsePatchHeader(buf) {
+        if (buf.length < PRE)
+            throw new Error('Buffer too small for RVFP preamble');
+        const magic = buf.subarray(0, 4).toString('ascii');
+        if (magic !== 'RVFP')
+            throw new Error(`Invalid RVFP magic: "${magic}"`);
+        const ver = buf.readUInt32LE(4);
+        if (ver !== RVFP_VERSION)
+            throw new Error(`Unsupported RVFP version: ${ver}`);
+        const hLen = buf.readUInt32LE(8);
+        if (PRE + hLen > buf.length)
+            throw new Error('Buffer too small for declared header');
+        const h = JSON.parse(buf.subarray(PRE, PRE + hLen).toString('utf-8'));
+        if (h.magic !== 'RVFP')
+            throw new Error('RVFP header magic mismatch');
+        return h;
+    }
+    static async verifyPatch(buf) {
+        const errors = [];
+        let header;
+        try {
+            header = RvfaPatcher.parsePatchHeader(buf);
+        }
+        catch (e) {
+            const empty = {
+                magic: 'RVFP', version: 0, targetApplianceName: '', targetApplianceVersion: '',
+                targetSection: '', patchVersion: '', created: '', newSectionSize: 0,
+                newSectionSha256: '', compression: 'none',
+            };
+            return { valid: false, header: empty, errors: [e.message] };
+        }
+        const { start, end, section } = patchData(buf);
+        if (end < start) {
+            errors.push('Patch too small: no room for section data and footer');
+            return { valid: false, header, errors };
+        }
+        if (section.length !== header.newSectionSize)
+            errors.push(`Size mismatch: header=${header.newSectionSize}, actual=${section.length}`);
+        if (sha256(section) !== header.newSectionSha256)
+            errors.push('Section SHA256 mismatch');
+        if (!sha256B(section).equals(buf.subarray(buf.length - SHA_LEN)))
+            errors.push('Footer SHA256 mismatch');
+        return { valid: errors.length === 0, header, errors };
+    }
+    static async applyPatch(rvfaPath, patchBuf, opts) {
+        const doBackup = opts?.backup ?? true;
+        const doVerify = opts?.verify ?? true;
+        // Parse & verify patch
+        let header;
+        try {
+            header = RvfaPatcher.parsePatchHeader(patchBuf);
+        }
+        catch (e) {
+            return failResult('', [e.message]);
+        }
+        const sec = header.targetSection;
+        // Verify signature
+        if (opts?.publicKey && header.signature) {
+            const { section } = patchData(patchBuf);
+            const unsigned = { ...header };
+            delete unsigned.signature;
+            delete unsigned.signedBy;
+            const signable = Buffer.concat([Buffer.from(canonicalJson(unsigned), 'utf-8'), section]);
+            if (!edCheck(signable, header.signature, opts.publicKey))
+                return failResult(sec, ['Patch signature verification failed']);
+        }
+        // Verify patch integrity
+        const check = await RvfaPatcher.verifyPatch(patchBuf);
+        if (!check.valid)
+            return failResult(sec, check.errors);
+        // Read target RVFA
+        let reader;
+        try {
+            reader = await RvfaReader.fromFile(rvfaPath);
+        }
+        catch (e) {
+            return failResult(sec, [`Failed to read RVFA: ${e.message}`]);
+        }
+        const rh = reader.getHeader();
+        // Verify target matches
+        const errs = [];
+        if (rh.name !== header.targetApplianceName)
+            errs.push(`Name mismatch: patch="${header.targetApplianceName}", file="${rh.name}"`);
+        if (rh.appVersion !== header.targetApplianceVersion)
+            errs.push(`Version mismatch: patch="${header.targetApplianceVersion}", file="${rh.appVersion}"`);
+        if (errs.length)
+            return failResult(sec, errs);
+        if (!rh.sections.find((s) => s.id === sec))
+            return failResult(sec, [`Section "${sec}" not found in appliance`]);
+        // Backup
+        let backupPath;
+        if (doBackup) {
+            backupPath = rvfaPath + '.bak';
+            await copyFile(rvfaPath, backupPath);
+        }
+        // Extract new section data from patch (decompress if needed)
+        let newData = patchData(patchBuf).section;
+        if (header.compression === 'gzip')
+            newData = gunzipSync(newData);
+        // Rebuild RVFA with replaced section
+        const writer = new RvfaWriter({ ...rh, sections: [] });
+        for (const s of rh.sections) {
+            const comp = s.compression === 'zstd' ? 'gzip' : s.compression;
+            if (s.id === sec) {
+                writer.addSection(s.id, newData, { compression: comp, type: s.type });
+            }
+            else {
+                writer.addSection(s.id, reader.extractSection(s.id), { compression: comp, type: s.type });
+            }
+        }
+        const newRvfa = writer.build();
+        // Atomic write (tmp + rename)
+        const tmpPath = rvfaPath + `.tmp.${Date.now()}`;
+        try {
+            await writeFile(tmpPath, newRvfa);
+            await rename(tmpPath, rvfaPath);
+        }
+        catch (e) {
+            await unlink(tmpPath).catch(() => { });
+            if (backupPath)
+                await copyFile(backupPath, rvfaPath).catch(() => { });
+            return failResult(sec, [`Atomic write failed: ${e.message}`], { backupPath });
+        }
+        // Post-patch verification with rollback
+        if (doVerify) {
+            try {
+                const vr = await RvfaReader.fromFile(rvfaPath);
+                const vResult = vr.verify();
+                if (!vResult.valid) {
+                    if (backupPath)
+                        await copyFile(backupPath, rvfaPath).catch(() => { });
+                    return failResult(sec, [`Post-patch verification failed: ${vResult.errors.join('; ')}`], { backupPath, newSize: newRvfa.length });
+                }
+            }
+            catch (e) {
+                if (backupPath)
+                    await copyFile(backupPath, rvfaPath).catch(() => { });
+                return failResult(sec, [`Post-patch verify error: ${e.message}`], { backupPath, newSize: newRvfa.length });
+            }
+        }
+        return { success: true, backupPath, newSize: newRvfa.length, patchedSection: sec, errors: [] };
+    }
+}
+// ── RvfaPublisher ────────────────────────────────────────────
+export class RvfaPublisher {
+    jwt;
+    gw;
+    api;
+    constructor(config) {
+        this.jwt = config.pinataJwt || process.env.PINATA_API_JWT || '';
+        this.gw = (config.gatewayUrl || DEFAULT_GW).replace(/\/+$/, '');
+        this.api = (config.apiUrl || DEFAULT_API).replace(/\/+$/, '');
+        if (!this.jwt)
+            throw new Error('Pinata JWT required (config.pinataJwt or PINATA_API_JWT)');
+    }
+    async upload(fileName, data, kv) {
+        const meta = JSON.stringify({ name: fileName, keyvalues: kv });
+        const { body, ct } = multipart('file', fileName, data, meta);
+        const res = await pinataReq('POST', `${this.api}/pinning/pinFileToIPFS`, this.jwt, body, ct);
+        if (res.status !== 200)
+            throw new Error(`Pinata upload failed (HTTP ${res.status}): ${JSON.stringify(res.data)}`);
+        const r = res.data;
+        return {
+            cid: r.IpfsHash, size: r.PinSize,
+            gatewayUrl: `${this.gw}/ipfs/${r.IpfsHash}`, pinataUrl: `${this.api}/pinning/pins/${r.IpfsHash}`,
+        };
+    }
+    async publish(rvfaPath, meta) {
+        const data = await readFile(rvfaPath);
+        const name = meta?.name || rvfaPath.split('/').pop() || 'appliance.rvf';
+        return this.upload(name, data, {
+            type: 'rvfa-appliance', version: meta?.version || '',
+            profile: meta?.profile || '', description: meta?.description || '',
+        });
+    }
+    async publishPatch(patchBuf, meta) {
+        const name = meta?.name || `patch-${Date.now()}.rvfp`;
+        return this.upload(name, patchBuf, {
+            type: 'rvfp-patch', version: meta?.version || '', description: meta?.description || '',
+        });
+    }
+    async fetch(cid, outputPath) {
+        const data = await httpGet(`${this.gw}/ipfs/${cid}`);
+        await mkdir(dirname(outputPath), { recursive: true });
+        await writeFile(outputPath, data);
+    }
+    async list() {
+        const res = await pinataReq('GET', `${this.api}/data/pinList?status=pinned&pageLimit=100`, this.jwt);
+        if (res.status !== 200)
+            throw new Error(`Pinata list failed (HTTP ${res.status}): ${JSON.stringify(res.data)}`);
+        const d = res.data;
+        return (d.rows || []).map((r) => ({
+            cid: r.ipfs_pin_hash, name: r.metadata?.name || r.ipfs_pin_hash,
+            size: r.size, date: r.date_pinned,
+        }));
+    }
+    async pin(cid, name) {
+        const body = Buffer.from(JSON.stringify({ hashToPin: cid, pinataMetadata: { name: name || cid } }));
+        const res = await pinataReq('POST', `${this.api}/pinning/pinByHash`, this.jwt, body, 'application/json');
+        if (res.status !== 200)
+            throw new Error(`Pinata pin failed (HTTP ${res.status}): ${JSON.stringify(res.data)}`);
+    }
+}
+// ── Convenience exports ──────────────────────────────────────
+export function createPublisher(config) {
+    return new RvfaPublisher({ pinataJwt: config?.pinataJwt, gatewayUrl: config?.gatewayUrl, apiUrl: config?.apiUrl });
+}
+export async function createAndVerifyPatch(options) {
+    const patch = await RvfaPatcher.createPatch(options);
+    const verification = await RvfaPatcher.verifyPatch(patch);
+    return { patch, verification };
+}
+//# sourceMappingURL=rvfa-distribution.js.map

package/dist/src/appliance/rvfa-distribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rvfa-distribution.js","sourceRoot":"","sources":["../../../src/appliance/rvfa-distribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE1D,gEAAgE;AAChE,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,+CAA+C;AAC/D,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAClD,MAAM,WAAW,GAAG,0BAA0B,CAAC;AA0B/C,gEAAgE;AAChE,SAAS,MAAM,CAAC,CAAS,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3F,SAAS,OAAO,CAAC,CAAS,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAEvF,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/E,IAAI,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7E,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,4CAA4C;AACvF,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,GAAW;IACvC,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AACD,SAAS,OAAO,CAAC,IAAY,EAAE,GAAW,EAAE,GAAW;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,wBAAwB;QAC/E,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,gEAAgE;AAChE,SAAS,SAAS,CAChB,MAAc,EAAE,IAAY,EAAE,GAAW,EAAE,IAAa,EAAE,EAAW;IAErE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,GAA2B,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,CAAC;QACrE,IAAI,EAAE;YAAE,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,IAAI;YAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,YAAY,CACtB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EACzE,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,EAAE,GAAa,EAAE,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC9B,IAAI,IAAa,CAAC;gBAClB,IAAI,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,IAAI,GAAG,GAAG,CAAC;gBAAC,CAAC;gBACvE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,IAAI,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,YAAY,GAAG,CAAC;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,YAAY,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YACrG,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC5F,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,EAAE,GAAa,EAAE,CAAC;YACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAChB,IAAY,EAAE,IAAY,EAAE,IAAY,EAAE,IAAa;IAEvD,MAAM,CAAC,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,KAAK,CAAC,+DAA+D;YACrE,yCAAyC,IAAI,MAAM,CACpD,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,KAAK,CAAC,6CAA6C,IAAI,gBAAgB,IAAI,OAAO;QAClF,gDAAgD,CACjD,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,iCAAiC,CAAC,EAAE,EAAE,CAAC;AAClF,CAAC;AAED,wEAAwE;AACxE,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC;IACzB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC;IACjC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACzC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5F,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnE,MAAM,CAAC,CAAC,CAAC,GAAI,GAA+B,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED,kCAAkC;AAClC,SAAS,UAAU,CAAC,GAAW,EAAE,IAAc,EAAE,KAA4B;IAC3E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;AACrF,CAAC;AAED,gEAAgE;AAChE,MAAM,OAAO,WAAW;IACtB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAwB;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;QAChF,MAAM,MAAM,GAAe;YACzB,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY;YACpC,mBAAmB,EAAE,IAAI,CAAC,UAAU,EAAE,sBAAsB,EAAE,IAAI,CAAC,aAAa;YAChF,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC9D,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM;YACjE,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI;SACrD,CAAC;QACF,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACvF,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,GAAG,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,GAAW;QACjC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,GAAG,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,GAAG,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACrF,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAe,CAAC;QACpF,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAW;QAClC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,MAAM,GAAG,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAe;gBACxB,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE;gBAC9E,aAAa,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC;gBACnE,gBAAgB,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM;aAC1C,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAE,CAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACpE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,cAAc;YAC1C,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,cAAc,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,gBAAgB;YAC7C,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,UAAU,CACrB,QAAgB,EAAE,QAAgB,EAAE,IAAmB;QAEvD,MAAM,QAAQ,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC;QAEtC,uBAAuB;QACvB,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,MAAM,GAAG,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAClE,OAAO,UAAU,CAAC,EAAE,EAAE,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC;QAEjC,mBAAmB;QACnB,IAAI,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,EAAE,GAAG,MAAM,EAA6B,CAAC;YAC1D,OAAO,QAAQ,CAAC,SAAS,CAAC;YAAC,OAAO,QAAQ,CAAC,QAAQ,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtD,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,qCAAqC,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,yBAAyB;QACzB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAEvD,mBAAmB;QACnB,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAC/D,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,wBAAyB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAE9B,wBAAwB;QACxB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,mBAAmB;YACxC,IAAI,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,mBAAmB,YAAY,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;QACvF,IAAI,EAAE,CAAC,UAAU,KAAK,MAAM,CAAC,sBAAsB;YACjD,IAAI,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,sBAAsB,YAAY,EAAE,CAAC,UAAU,GAAG,CAAC,CAAC;QACnG,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC;YACxC,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,GAAG,0BAA0B,CAAC,CAAC,CAAC;QAEtE,SAAS;QACT,IAAI,UAA8B,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YAAC,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;YAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAAC,CAAC;QAEvF,6DAA6D;QAC7D,IAAI,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QAC1C,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM;YAAE,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAEjE,qCAAqC;QACrC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC/D,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;gBACjB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;QAE/B,8BAA8B;QAC9B,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtC,IAAI,UAAU;gBAAE,MAAM,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrE,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,wBAAyB,CAAW,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,wCAAwC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC/C,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,UAAU;wBAAE,MAAM,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACrE,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,mCAAmC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EACrF,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,UAAU;oBAAE,MAAM,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACrE,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,4BAA6B,CAAW,CAAC,OAAO,EAAE,CAAC,EACzE,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjG,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,OAAO,aAAa;IAChB,GAAG,CAAS;IACZ,EAAE,CAAS;IACX,GAAG,CAAS;IAEpB,YAAY,MAAqB;QAC/B,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC7F,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,QAAgB,EAAE,IAAY,EAAE,EAA0B;QAE1D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,wBAAwB,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7F,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YACpB,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,GAAG,GAAG,CAAC,IAA6C,CAAC;QAC5D,OAAO;YACL,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO;YAChC,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC,QAAQ,EAAE;SACjG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,IAAsB;QACpD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC;QACxE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE;YAC7B,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE;YACpD,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,IAAsB;QACzD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,SAAS,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;QACtD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE;YACjC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE;SACvF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,UAAkB;QACzC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,2CAA2C,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACrG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YACpB,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,GAAG,CAAC,IAEV,CAAC;QACL,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,GAAG,EAAE,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,aAAa;YAC/D,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW;SAClC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAa;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACpG,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,oBAAoB,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACzG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YACpB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe,CAAC,MAA+B;IAC7D,OAAO,IAAI,aAAa,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACrH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA2B;IAE3B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACjC,CAAC"}

package/dist/src/appliance/rvfa-format.d.ts

@@ -0,0 +1,111 @@
+/**
+ * RVFA (SwarmVector Format Appliance) — Binary format reader/writer
+ * for self-contained Swarmdo appliances.
+ *
+ * Binary layout:
+ *   [4B magic "RVFA"] [4B version u32LE] [4B header_len u32LE]
+ *   [header_len B JSON header] [section data ...] [32B SHA256 footer]
+ */
+export declare const RVFA_MAGIC: Buffer<ArrayBuffer>;
+export declare const RVFA_VERSION = 1;
+export interface RvfaHeader {
+    magic: string;
+    version: number;
+    name: string;
+    appVersion: string;
+    arch: string;
+    platform: string;
+    profile: 'cloud' | 'hybrid' | 'offline';
+    created: string;
+    sections: RvfaSection[];
+    boot: RvfaBootConfig;
+    models: RvfaModelConfig;
+    capabilities: string[];
+}
+export interface RvfaSection {
+    id: string;
+    type: string;
+    offset: number;
+    size: number;
+    originalSize: number;
+    sha256: string;
+    compression: 'none' | 'gzip' | 'zstd';
+}
+export interface RvfaBootConfig {
+    entrypoint: string;
+    args: string[];
+    env: Record<string, string>;
+    isolation: 'container' | 'microvm' | 'native';
+}
+export interface RvfaModelConfig {
+    provider: 'swarmllm' | 'api-vault' | 'hybrid';
+    engine?: string;
+    models?: string[];
+    vaultEncryption?: string;
+}
+/** Format bytes into a human-readable string (e.g. '2.3 GB'). */
+export declare function formatSize(bytes: number): string;
+/** Create a sensible default header for a given profile. */
+export declare function createDefaultHeader(profile: 'cloud' | 'hybrid' | 'offline'): RvfaHeader;
+/** Type-guard that validates an unknown value is a well-formed RvfaHeader. */
+export declare function validateHeader(header: unknown): header is RvfaHeader;
+export declare class RvfaWriter {
+    private header;
+    private staged;
+    constructor(partial: Partial<RvfaHeader>);
+    /**
+     * Add a section to the appliance image.
+     *
+     * @param id      Section identifier (e.g. 'kernel', 'runtime', 'swarmdo').
+     * @param data    Raw (uncompressed) section payload.
+     * @param options Optional compression and MIME type overrides.
+     */
+    addSection(id: string, data: Buffer, options?: {
+        compression?: 'none' | 'gzip' | 'zstd';
+        type?: string;
+    }): void;
+    /**
+     * Assemble the final RVFA binary image.
+     *
+     * Layout:
+     *   [4B magic] [4B version] [4B header_len]
+     *   [header JSON bytes]
+     *   [section 0 bytes] [section 1 bytes] ...
+     *   [32B SHA256 of all section bytes combined]
+     */
+    build(): Buffer;
+}
+export declare class RvfaReader {
+    private buf;
+    private header;
+    private constructor();
+    /** Parse an RVFA image from an in-memory Buffer. */
+    static fromBuffer(buf: Buffer): RvfaReader;
+    /** Read an RVFA image from a file path. */
+    static fromFile(path: string): Promise<RvfaReader>;
+    /** Return the parsed header. */
+    getHeader(): RvfaHeader;
+    /** List all sections declared in the header. */
+    getSections(): RvfaSection[];
+    /**
+     * Extract and decompress a section by its id.
+     *
+     * @param id  The section identifier (e.g. 'kernel', 'runtime').
+     * @returns   The decompressed section payload.
+     */
+    extractSection(id: string): Buffer;
+    /**
+     * Verify the integrity of the RVFA image.
+     *
+     * Checks:
+     *  1. Magic bytes
+     *  2. Version number
+     *  3. SHA256 of each section's compressed data
+     *  4. SHA256 footer (all section data combined)
+     */
+    verify(): {
+        valid: boolean;
+        errors: string[];
+    };
+}
+//# sourceMappingURL=rvfa-format.d.ts.map

package/dist/src/appliance/rvfa-format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rvfa-format.d.ts","sourceRoot":"","sources":["../../../src/appliance/rvfa-format.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,eAAO,MAAM,UAAU,qBAAsB,CAAC;AAC9C,eAAO,MAAM,YAAY,IAAI,CAAC;AAa9B,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,SAAS,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;CAC/C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAcD,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED,4DAA4D;AAC5D,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GACtC,UAAU,CAyCZ;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,UAAU,CA6BpE;AAWD,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,MAAM,CAAuB;gBAEzB,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC;IAMxC;;;;;;OAMG;IACH,UAAU,CACR,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAClE,IAAI;IA6BP;;;;;;;;OAQG;IACH,KAAK,IAAI,MAAM;CAqDhB;AAKD,qBAAa,UAAU;IACrB,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,MAAM,CAAa;IAE3B,OAAO;IAKP,oDAAoD;IACpD,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IA0E1C,2CAA2C;WAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAQxD,gCAAgC;IAChC,SAAS,IAAI,UAAU;IAIvB,gDAAgD;IAChD,WAAW,IAAI,WAAW,EAAE;IAI5B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IA8BlC;;;;;;;;OAQG;IACH,MAAM,IAAI;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE;CAoD/C"}