@typeberry/lib 0.5.10-6cb1bd5 → 0.5.10-7338c21

package/packages/jam/in-core/is-authorized.d.ts

@@ -0,0 +1,33 @@
+import { type CodeHash, type CoreIndex, type ServiceGas, type ServiceId } from "#@typeberry/block";
+import type { AuthorizerHash } from "#@typeberry/block/refine-context.js";
+import { BytesBlob } from "#@typeberry/bytes";
+import type { ChainSpec, PvmBackend } from "#@typeberry/config";
+import type { Blake2b } from "#@typeberry/hash";
+import type { State } from "#@typeberry/state";
+import { Result } from "#@typeberry/utils";
+export declare enum AuthorizationError {
+    /** BAD: authorizer code not found (service or preimage missing). */
+    CodeNotFound = 0,
+    /** BIG: authorizer code exceeds W_A limit. */
+    CodeTooBig = 1,
+    /** PANIC/OOG: PVM execution failed. */
+    PvmFailed = 2
+}
+export type AuthorizationOk = {
+    authorizerHash: AuthorizerHash;
+    authorizationGasUsed: ServiceGas;
+    authorizationOutput: BytesBlob;
+};
+/**
+ * IsAuthorized PVM invocation (Psi_I).
+ *
+ * https://graypaper.fluffylabs.dev/#/ab2cdbd/2e64002e6400?v=0.7.2
+ */
+export declare class IsAuthorized {
+    private readonly chainSpec;
+    private readonly pvmBackend;
+    private readonly blake2b;
+    constructor(chainSpec: ChainSpec, pvmBackend: PvmBackend, blake2b: Blake2b);
+    invoke(state: State, coreIndex: CoreIndex, authToken: BytesBlob, authCodeHost: ServiceId, authCodeHash: CodeHash, authConfiguration: BytesBlob): Promise<Result<AuthorizationOk, AuthorizationError>>;
+}
+//# sourceMappingURL=is-authorized.d.ts.map

package/packages/jam/in-core/is-authorized.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-authorized.d.ts","sourceRoot":"","sources":["../../../../../packages/jam/in-core/is-authorized.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAmB,MAAM,kBAAkB,CAAC;AAEnH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,oBAAY,kBAAkB;IAC5B,oEAAoE;IACpE,YAAY,IAAI;IAChB,8CAA8C;IAC9C,UAAU,IAAI;IACd,uCAAuC;IACvC,SAAS,IAAI;CACd;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,cAAc,EAAE,cAAc,CAAC;IAC/B,oBAAoB,EAAE,UAAU,CAAC;IACjC,mBAAmB,EAAE,SAAS,CAAC;CAChC,CAAC;AAMF;;;;GAIG;AACH,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAFP,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,OAAO;IAG7B,MAAM,CACV,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,SAAS,EACvB,YAAY,EAAE,QAAQ,EACtB,iBAAiB,EAAE,SAAS,GAC3B,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;CA+DxD"}

package/packages/jam/in-core/is-authorized.js

@@ -0,0 +1,72 @@
+import { tryAsServiceGas } from "#@typeberry/block";
+import { G_I, W_A } from "#@typeberry/block/gp-constants.js";
+import { BytesBlob } from "#@typeberry/bytes";
+import { codec, Encoder } from "#@typeberry/codec";
+import { PvmExecutor, ReturnStatus } from "#@typeberry/executor";
+import { IsAuthorizedFetchExternalities } from "#@typeberry/transition/externalities/is-authorized-fetch-externalities.js";
+import { Result } from "#@typeberry/utils";
+export var AuthorizationError;
+(function (AuthorizationError) {
+    /** BAD: authorizer code not found (service or preimage missing). */
+    AuthorizationError[AuthorizationError["CodeNotFound"] = 0] = "CodeNotFound";
+    /** BIG: authorizer code exceeds W_A limit. */
+    AuthorizationError[AuthorizationError["CodeTooBig"] = 1] = "CodeTooBig";
+    /** PANIC/OOG: PVM execution failed. */
+    AuthorizationError[AuthorizationError["PvmFailed"] = 2] = "PvmFailed";
+})(AuthorizationError || (AuthorizationError = {}));
+const AUTH_ARGS_CODEC = codec.object({
+    coreIndex: codec.u16,
+});
+/**
+ * IsAuthorized PVM invocation (Psi_I).
+ *
+ * https://graypaper.fluffylabs.dev/#/ab2cdbd/2e64002e6400?v=0.7.2
+ */
+export class IsAuthorized {
+    chainSpec;
+    pvmBackend;
+    blake2b;
+    constructor(chainSpec, pvmBackend, blake2b) {
+        this.chainSpec = chainSpec;
+        this.pvmBackend = pvmBackend;
+        this.blake2b = blake2b;
+    }
+    async invoke(state, coreIndex, authToken, authCodeHost, authCodeHash, authConfiguration) {
+        // Look up the authorizer code from the auth code host service
+        const service = state.getService(authCodeHost);
+        // https://graypaper.fluffylabs.dev/#/ab2cdbd/2eca002eca00?v=0.7.2
+        if (service === null) {
+            return Result.error(AuthorizationError.CodeNotFound, () => `Auth code host service ${authCodeHost} not found in state.`);
+        }
+        const code = service.getPreimage(authCodeHash.asOpaque());
+        if (code === null) {
+            return Result.error(AuthorizationError.CodeNotFound, () => `Auth code preimage ${authCodeHash} not found in service ${authCodeHost}.`);
+        }
+        // BIG: code exceeds W_A
+        // https://graypaper.fluffylabs.dev/#/ab2cdbd/2ed6002ed600?v=0.7.2
+        if (code.length > W_A) {
+            return Result.error(AuthorizationError.CodeTooBig, () => `Auth code is too big: ${code.length} bytes vs ${W_A} max.`);
+        }
+        // Prepare fetch externalities and executor
+        const fetchExternalities = new IsAuthorizedFetchExternalities(this.chainSpec, {
+            authToken,
+            authConfiguration,
+        });
+        const executor = await PvmExecutor.createIsAuthorizedExecutor(authCodeHost, code, { fetchExternalities }, this.pvmBackend);
+        const args = Encoder.encodeObject(AUTH_ARGS_CODEC, {
+            coreIndex,
+        });
+        // Run PVM with gas budget G_I
+        const gasLimit = tryAsServiceGas(G_I);
+        const execResult = await executor.run(args, gasLimit);
+        if (execResult.status !== ReturnStatus.OK) {
+            return Result.error(AuthorizationError.PvmFailed, () => `IsAuthorized PVM ${ReturnStatus[execResult.status]} (gas used: ${execResult.consumedGas}).`);
+        }
+        // Compute authorizer hash: H(code_hash ++ configuration)
+        // https://graypaper.fluffylabs.dev/#/ab2cdbd/1b81011b8401?v=0.7.2
+        const authorizerHash = this.blake2b.hashBlobs([authCodeHash, authConfiguration]);
+        const authorizationOutput = BytesBlob.blobFrom(execResult.memorySlice);
+        const authorizationGasUsed = tryAsServiceGas(execResult.consumedGas);
+        return Result.ok({ authorizerHash, authorizationGasUsed, authorizationOutput });
+    }
+}

package/packages/jam/in-core/is-authorized.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=is-authorized.test.d.ts.map

package/packages/jam/in-core/is-authorized.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-authorized.test.d.ts","sourceRoot":"","sources":["../../../../../packages/jam/in-core/is-authorized.test.ts"],"names":[],"mappings":""}

package/packages/jam/in-core/is-authorized.test.js

@@ -0,0 +1,125 @@
+import assert from "node:assert";
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { before, describe, it } from "node:test";
+import { tryAsCoreIndex, tryAsServiceGas, tryAsServiceId, tryAsTimeSlot } from "#@typeberry/block";
+import { Bytes, BytesBlob } from "#@typeberry/bytes";
+import { HashDictionary } from "#@typeberry/collections";
+import { PvmBackend, tinyChainSpec } from "#@typeberry/config";
+import { Blake2b, HASH_SIZE } from "#@typeberry/hash";
+import { tryAsU32, tryAsU64 } from "#@typeberry/numbers";
+import { InMemoryService, InMemoryState, PreimageItem, ServiceAccountInfo } from "#@typeberry/state";
+import { AuthorizationError, IsAuthorized } from "./is-authorized.js";
+let blake2b;
+before(async () => {
+    blake2b = await Blake2b.createHasher();
+});
+// Load the authorizer PVM fixture.
+// This authorizer checks that authToken === authConfiguration and returns "Auth=<token>".
+// https://github.com/tomusdrw/as-lan/blob/main/examples/authorizer/assembly/authorize.ts
+const AUTHORIZER_PVM = BytesBlob.blobFrom(readFileSync(resolve(import.meta.dirname, "fixtures/authorizer.pvm")));
+const AUTH_SERVICE_ID = tryAsServiceId(42);
+function createService(serviceId, codeHash, code) {
+    return new InMemoryService(serviceId, {
+        info: ServiceAccountInfo.create({
+            codeHash: codeHash.asOpaque(),
+            balance: tryAsU64(10_000_000_000),
+            accumulateMinGas: tryAsServiceGas(0n),
+            onTransferMinGas: tryAsServiceGas(0n),
+            storageUtilisationBytes: tryAsU64(0),
+            storageUtilisationCount: tryAsU32(0),
+            gratisStorage: tryAsU64(0),
+            created: tryAsTimeSlot(0),
+            lastAccumulation: tryAsTimeSlot(0),
+            parentService: tryAsServiceId(0),
+        }),
+        preimages: HashDictionary.fromEntries([PreimageItem.create({ hash: codeHash.asOpaque(), blob: code })].map((x) => [x.hash, x])),
+        lookupHistory: HashDictionary.fromEntries([]),
+        storage: new Map(),
+    });
+}
+describe("IsAuthorized", () => {
+    const spec = tinyChainSpec;
+    function getAuthCodeHash() {
+        return blake2b.hashBytes(AUTHORIZER_PVM).asOpaque();
+    }
+    function createStateWithService(codeHash, code) {
+        return InMemoryState.partial(spec, {
+            timeslot: tryAsTimeSlot(16),
+            services: new Map([[AUTH_SERVICE_ID, createService(AUTH_SERVICE_ID, codeHash, code)]]),
+        });
+    }
+    it("should authorize when token matches configuration", async () => {
+        const authCodeHash = getAuthCodeHash();
+        const state = createStateWithService(authCodeHash, AUTHORIZER_PVM);
+        const isAuthorized = new IsAuthorized(spec, PvmBackend.BuiltIn, blake2b);
+        const token = BytesBlob.blobFromString("hello");
+        const result = await isAuthorized.invoke(state, tryAsCoreIndex(0), token, AUTH_SERVICE_ID, authCodeHash, token);
+        assert.strictEqual(result.isOk, true, `Expected OK but got error: ${result.isError ? result.details() : ""}`);
+        // Verify the authorization output starts with "Auth=<hello>"
+        const outputStr = Buffer.from(result.ok.authorizationOutput.raw).toString("utf8");
+        assert.ok(outputStr.startsWith("Auth=<hello>"), `Expected "Auth=<hello>" prefix but got "${outputStr.slice(0, 30)}"`);
+        // Verify the authorizer hash is H(code_hash ++ configuration)
+        const expectedHash = blake2b.hashBlobs([authCodeHash, token]);
+        assert.ok(result.ok.authorizerHash.isEqualTo(expectedHash), "authorizerHash should be H(code_hash || config)");
+        // Verify gas was consumed
+        assert.ok(Number(result.ok.authorizationGasUsed) > 0, "should have consumed some gas");
+    });
+    it("should authorize with empty token and configuration", async () => {
+        const authCodeHash = getAuthCodeHash();
+        const state = createStateWithService(authCodeHash, AUTHORIZER_PVM);
+        const isAuthorized = new IsAuthorized(spec, PvmBackend.BuiltIn, blake2b);
+        const result = await isAuthorized.invoke(state, tryAsCoreIndex(0), BytesBlob.empty(), AUTH_SERVICE_ID, authCodeHash, BytesBlob.empty());
+        assert.strictEqual(result.isOk, true, `Expected OK but got error: ${result.isError ? result.details() : ""}`);
+        const outputStr = Buffer.from(result.ok.authorizationOutput.raw).toString("utf8");
+        assert.ok(outputStr.startsWith("Auth=<>"), `Expected "Auth=<>" prefix but got "${outputStr.slice(0, 30)}"`);
+    });
+    it("should fail when token does not match configuration", async () => {
+        const authCodeHash = getAuthCodeHash();
+        const state = createStateWithService(authCodeHash, AUTHORIZER_PVM);
+        const isAuthorized = new IsAuthorized(spec, PvmBackend.BuiltIn, blake2b);
+        const result = await isAuthorized.invoke(state, tryAsCoreIndex(0), BytesBlob.blobFromString("wrong"), AUTH_SERVICE_ID, authCodeHash, BytesBlob.blobFromString("right"));
+        assert.strictEqual(result.isError, true);
+        assert.strictEqual(result.error, AuthorizationError.PvmFailed);
+    });
+    it("should fail when auth code host service is missing", async () => {
+        const authCodeHash = getAuthCodeHash();
+        const state = InMemoryState.partial(spec, {
+            timeslot: tryAsTimeSlot(16),
+            services: new Map(),
+        });
+        const isAuthorized = new IsAuthorized(spec, PvmBackend.BuiltIn, blake2b);
+        const result = await isAuthorized.invoke(state, tryAsCoreIndex(0), BytesBlob.empty(), AUTH_SERVICE_ID, authCodeHash, BytesBlob.empty());
+        assert.strictEqual(result.isError, true);
+        assert.strictEqual(result.error, AuthorizationError.CodeNotFound);
+    });
+    it("should fail when auth code preimage is missing", async () => {
+        const authCodeHash = getAuthCodeHash();
+        // Service exists but with no preimages
+        const emptyService = new InMemoryService(AUTH_SERVICE_ID, {
+            info: ServiceAccountInfo.create({
+                codeHash: Bytes.zero(HASH_SIZE).asOpaque(),
+                balance: tryAsU64(0),
+                accumulateMinGas: tryAsServiceGas(0n),
+                onTransferMinGas: tryAsServiceGas(0n),
+                storageUtilisationBytes: tryAsU64(0),
+                storageUtilisationCount: tryAsU32(0),
+                gratisStorage: tryAsU64(0),
+                created: tryAsTimeSlot(0),
+                lastAccumulation: tryAsTimeSlot(0),
+                parentService: tryAsServiceId(0),
+            }),
+            preimages: HashDictionary.fromEntries([]),
+            lookupHistory: HashDictionary.fromEntries([]),
+            storage: new Map(),
+        });
+        const state = InMemoryState.partial(spec, {
+            timeslot: tryAsTimeSlot(16),
+            services: new Map([[AUTH_SERVICE_ID, emptyService]]),
+        });
+        const isAuthorized = new IsAuthorized(spec, PvmBackend.BuiltIn, blake2b);
+        const result = await isAuthorized.invoke(state, tryAsCoreIndex(0), BytesBlob.empty(), AUTH_SERVICE_ID, authCodeHash, BytesBlob.empty());
+        assert.strictEqual(result.isError, true);
+        assert.strictEqual(result.error, AuthorizationError.CodeNotFound);
+    });
+});

package/packages/jam/in-core/refine.d.ts

@@ -0,0 +1,34 @@
+import { type CoreIndex, type Segment, type SegmentIndex, type ServiceGas } from "#@typeberry/block";
+import type { WorkPackageHash } from "#@typeberry/block/refine-context.js";
+import type { WorkItem, WorkItemExtrinsic } from "#@typeberry/block/work-item.js";
+import { WorkExecResult, WorkResult } from "#@typeberry/block/work-result.js";
+import type { KnownSizeArray } from "#@typeberry/collections";
+import type { ChainSpec, PvmBackend } from "#@typeberry/config";
+import { type ReturnValue } from "#@typeberry/executor";
+import { type Blake2b } from "#@typeberry/hash";
+import type { State } from "#@typeberry/state";
+export type RefineItemResult = {
+    result: WorkResult;
+    exports: readonly Segment[];
+};
+export type PerWorkItem<T> = KnownSizeArray<T, "for each work item">;
+export type ImportedSegment = {
+    index: SegmentIndex;
+    data: Segment;
+};
+/**
+ * Refine PVM invocation (Psi_R).
+ *
+ * Executes a single work item's refinement logic.
+ */
+export declare class Refine {
+    private readonly chainSpec;
+    private readonly pvmBackend;
+    private readonly blake2b;
+    constructor(chainSpec: ChainSpec, pvmBackend: PvmBackend, blake2b: Blake2b);
+    invoke(state: State, lookupState: State, idx: number, item: WorkItem, allImports: PerWorkItem<ImportedSegment[]>, allExtrinsics: PerWorkItem<WorkItemExtrinsic[]>, coreIndex: CoreIndex, workPackageHash: WorkPackageHash, exportOffset: number): Promise<RefineItemResult>;
+    static extractWorkResult(execResult: ReturnValue<ServiceGas>): WorkExecResult;
+    private getServiceCode;
+    private createRefineExternalities;
+}
+//# sourceMappingURL=refine.d.ts.map

package/packages/jam/in-core/refine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refine.d.ts","sourceRoot":"","sources":["../../../../../packages/jam/in-core/refine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,UAAU,EAIhB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACjF,OAAO,EAAE,cAAc,EAAsC,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAGjH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAA+D,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACpH,OAAO,EAAE,KAAK,OAAO,EAAa,MAAM,iBAAiB,CAAC;AAE1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAK9C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,SAAS,OAAO,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;AAErE,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,YAAY,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAyBF;;;;GAIG;AACH,qBAAa,MAAM;IAEf,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAFP,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,OAAO;IAG7B,MAAM,CACV,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,QAAQ,EACd,UAAU,EAAE,WAAW,CAAC,eAAe,EAAE,CAAC,EAC1C,aAAa,EAAE,WAAW,CAAC,iBAAiB,EAAE,CAAC,EAC/C,SAAS,EAAE,SAAS,EACpB,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,gBAAgB,CAAC;IA0F5B,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC;IAiB5D,OAAO,CAAC,cAAc;IAyCtB,OAAO,CAAC,yBAAyB;CAsBlC"}

package/packages/jam/in-core/refine.js

@@ -0,0 +1,176 @@
+import { tryAsCoreIndex, tryAsServiceGas, } from "#@typeberry/block";
+import { W_C } from "#@typeberry/block/gp-constants.js";
+import { WorkExecResult, WorkExecResultKind, WorkRefineLoad, WorkResult } from "#@typeberry/block/work-result.js";
+import { BytesBlob } from "#@typeberry/bytes";
+import { codec, Encoder } from "#@typeberry/codec";
+import { PvmExecutor, ReturnStatus } from "#@typeberry/executor";
+import { HASH_SIZE } from "#@typeberry/hash";
+import { tryAsU32 } from "#@typeberry/numbers";
+import { RefineFetchExternalities } from "#@typeberry/transition/externalities/refine-fetch-externalities.js";
+import { assertNever, Result } from "#@typeberry/utils";
+import { RefineExternalitiesImpl } from "./externalities/refine.js";
+var ServiceCodeError;
+(function (ServiceCodeError) {
+    /** Service id is not found in the state. */
+    ServiceCodeError[ServiceCodeError["ServiceNotFound"] = 0] = "ServiceNotFound";
+    /** Expected service code does not match the state one. */
+    ServiceCodeError[ServiceCodeError["ServiceCodeMismatch"] = 1] = "ServiceCodeMismatch";
+    /** Code preimage missing. */
+    ServiceCodeError[ServiceCodeError["ServiceCodeMissing"] = 2] = "ServiceCodeMissing";
+    /** Code blob is too big. */
+    ServiceCodeError[ServiceCodeError["ServiceCodeTooBig"] = 3] = "ServiceCodeTooBig";
+})(ServiceCodeError || (ServiceCodeError = {}));
+/** https://graypaper.fluffylabs.dev/#/ab2cdbd/2ffe002ffe00?v=0.7.2 */
+const REFINE_ARGS_CODEC = codec.object({
+    core: codec.varU32.convert((x) => tryAsU32(x), (x) => tryAsCoreIndex(x)),
+    workItemIndex: codec.varU32,
+    serviceId: codec.varU32.asOpaque(),
+    payloadLength: codec.varU32,
+    packageHash: codec.bytes(HASH_SIZE).asOpaque(),
+});
+/**
+ * Refine PVM invocation (Psi_R).
+ *
+ * Executes a single work item's refinement logic.
+ */
+export class Refine {
+    chainSpec;
+    pvmBackend;
+    blake2b;
+    constructor(chainSpec, pvmBackend, blake2b) {
+        this.chainSpec = chainSpec;
+        this.pvmBackend = pvmBackend;
+        this.blake2b = blake2b;
+    }
+    async invoke(state, lookupState, idx, item, allImports, allExtrinsics, coreIndex, workPackageHash, exportOffset) {
+        const payloadHash = this.blake2b.hashBytes(item.payload);
+        const baseResult = {
+            serviceId: item.service,
+            codeHash: item.codeHash,
+            payloadHash,
+            gas: item.refineGasLimit,
+        };
+        const imports = allImports[idx];
+        const extrinsics = allExtrinsics[idx];
+        const baseLoad = {
+            importedSegments: tryAsU32(imports.length),
+            extrinsicCount: tryAsU32(extrinsics.length),
+            extrinsicSize: tryAsU32(extrinsics.reduce((acc, x) => acc + x.length, 0)),
+        };
+        const maybeCode = this.getServiceCode(state, idx, item);
+        if (maybeCode.isError) {
+            const error = maybeCode.error === ServiceCodeError.ServiceCodeTooBig
+                ? WorkExecResultKind.codeOversize
+                : WorkExecResultKind.badCode;
+            return {
+                exports: [],
+                result: WorkResult.create({
+                    ...baseResult,
+                    result: WorkExecResult.error(error),
+                    load: WorkRefineLoad.create({
+                        ...baseLoad,
+                        gasUsed: tryAsServiceGas(item.refineGasLimit),
+                        exportedSegments: tryAsU32(0),
+                    }),
+                }),
+            };
+        }
+        const code = maybeCode.ok;
+        const externalities = this.createRefineExternalities({
+            payload: item.payload,
+            imports: allImports,
+            extrinsics: allExtrinsics,
+            currentServiceId: item.service,
+            lookupState,
+            exportOffset,
+        });
+        const executor = await PvmExecutor.createRefineExecutor(item.service, code, externalities, this.pvmBackend);
+        const args = Encoder.encodeObject(REFINE_ARGS_CODEC, {
+            serviceId: item.service,
+            core: coreIndex,
+            workItemIndex: tryAsU32(idx),
+            payloadLength: tryAsU32(item.payload.length),
+            packageHash: workPackageHash,
+        });
+        const execResult = await executor.run(args, item.refineGasLimit);
+        const exports = externalities.refine.getExportedSegments();
+        if (exports.length !== item.exportCount) {
+            return {
+                exports: [],
+                result: WorkResult.create({
+                    ...baseResult,
+                    result: WorkExecResult.error(WorkExecResultKind.incorrectNumberOfExports),
+                    load: WorkRefineLoad.create({
+                        ...baseLoad,
+                        gasUsed: tryAsServiceGas(item.refineGasLimit),
+                        exportedSegments: tryAsU32(0),
+                    }),
+                }),
+            };
+        }
+        const result = Refine.extractWorkResult(execResult);
+        return {
+            exports,
+            result: WorkResult.create({
+                ...baseResult,
+                result,
+                load: WorkRefineLoad.create({
+                    ...baseLoad,
+                    gasUsed: tryAsServiceGas(execResult.consumedGas),
+                    exportedSegments: tryAsU32(exports.length),
+                }),
+            }),
+        };
+    }
+    static extractWorkResult(execResult) {
+        if (execResult.status === ReturnStatus.OK) {
+            const slice = execResult.memorySlice;
+            // TODO [ToDr] Verify the output size and change digestTooBig?
+            return WorkExecResult.ok(BytesBlob.blobFrom(slice));
+        }
+        switch (execResult.status) {
+            case ReturnStatus.OOG:
+                return WorkExecResult.error(WorkExecResultKind.outOfGas);
+            case ReturnStatus.PANIC:
+                return WorkExecResult.error(WorkExecResultKind.panic);
+            default:
+                assertNever(execResult);
+        }
+    }
+    getServiceCode(state, idx, item) {
+        const serviceId = item.service;
+        const service = state.getService(serviceId);
+        // TODO [ToDr] GP link
+        // missing service
+        if (service === null) {
+            return Result.error(ServiceCodeError.ServiceNotFound, () => `[i:${idx}] Service ${serviceId} is missing in state.`);
+        }
+        // TODO [ToDr] GP link
+        // TODO [ToDr] shall we rather use the old codehash instead
+        if (!service.getInfo().codeHash.isEqualTo(item.codeHash)) {
+            return Result.error(ServiceCodeError.ServiceCodeMismatch, () => `[i:${idx}] Service ${serviceId} has invalid code hash. Ours: ${service.getInfo().codeHash}, expected: ${item.codeHash}`);
+        }
+        const code = service.getPreimage(item.codeHash.asOpaque());
+        if (code === null) {
+            return Result.error(ServiceCodeError.ServiceCodeMissing, () => `[i:${idx}] Code ${item.codeHash} for service ${serviceId} was not found.`);
+        }
+        if (code.length > W_C) {
+            return Result.error(ServiceCodeError.ServiceCodeTooBig, () => `[i:${idx}] Code ${item.codeHash} for service ${serviceId} is too big! ${code.length} bytes vs ${W_C} bytes max.`);
+        }
+        return Result.ok(code);
+    }
+    createRefineExternalities(args) {
+        // TODO [ToDr] Pass all required fetch data
+        const fetchExternalities = new RefineFetchExternalities(this.chainSpec);
+        const refine = RefineExternalitiesImpl.create({
+            currentServiceId: args.currentServiceId,
+            lookupState: args.lookupState,
+            exportOffset: args.exportOffset,
+            pvmBackend: this.pvmBackend,
+        });
+        return {
+            fetchExternalities,
+            refine,
+        };
+    }
+}

package/packages/jam/in-core/refine.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=refine.test.d.ts.map

package/packages/jam/in-core/refine.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refine.test.d.ts","sourceRoot":"","sources":["../../../../../packages/jam/in-core/refine.test.ts"],"names":[],"mappings":""}

package/packages/jam/in-core/refine.test.js

@@ -0,0 +1,6 @@
+import { describe } from "node:test";
+describe("Refine", () => {
+    // TODO [ToDr] Add refine-specific PVM invocation tests.
+    // These should test Refine.invoke() directly, similar to
+    // how is-authorized.test.ts tests IsAuthorized.invoke().
+});

package/packages/jam/jam-host-calls/accumulate/bless.js

@@ -34,8 +34,8 @@ export class Bless {
     async execute(_gas, regs, memory) {
         // `m`: manager service (can change privileged services)
         const manager = getServiceId(regs.get(IN_OUT_REG));
-        // `a`: manages authorization queue
-        const authorization = regs.get(8);
+        // `a`: mem pointer for collection of auth queue assigners (one per core)
+        const assignersPtr = regs.get(8);
         // `v`: manages validator keys
         const delegator = getServiceId(regs.get(9));
         // `r`: manages creation of new services with id within protected range
@@ -67,29 +67,29 @@ export class Bless {
         }
         // https://graypaper.fluffylabs.dev/#/7e6ff6a/367200367200?v=0.6.7
         const res = safeAllocUint8Array(tryAsExactBytes(codec.u32.sizeHint) * this.chainSpec.coresCount);
-        const authorizersDecoder = Decoder.fromBlob(res);
-        const memoryReadResult = memory.loadInto(res, authorization);
+        const assignersDecoder = Decoder.fromBlob(res);
+        const memoryReadResult = memory.loadInto(res, assignersPtr);
         if (memoryReadResult.isError) {
             logger.trace `[${this.currentServiceId}] BLESS(m: ${manager}, v: ${delegator}, r: ${registrar}, ${lazyInspect(autoAccumulate)}) <- PANIC`;
             return PvmExecution.Panic;
         }
         // `a`
-        const authorizers = tryAsPerCore(authorizersDecoder.sequenceFixLen(codec.u32.asOpaque(), this.chainSpec.coresCount), this.chainSpec);
-        const updateResult = this.partialState.updatePrivilegedServices(manager, authorizers, delegator, registrar, autoAccumulate);
+        const assigners = tryAsPerCore(assignersDecoder.sequenceFixLen(codec.u32.asOpaque(), this.chainSpec.coresCount), this.chainSpec);
+        const updateResult = this.partialState.updatePrivilegedServices(manager, assigners, delegator, registrar, autoAccumulate);
         if (updateResult.isOk) {
-            logger.trace `[${this.currentServiceId}] BLESS(m: ${manager}, a: [${authorizers}], v: ${delegator}, r: ${registrar}, ${lazyInspect(autoAccumulate)}) <- OK`;
+            logger.trace `[${this.currentServiceId}] BLESS(m: ${manager}, a: [${assigners}], v: ${delegator}, r: ${registrar}, ${lazyInspect(autoAccumulate)}) <- OK`;
             regs.set(IN_OUT_REG, HostCallResult.OK);
             return;
         }
         const e = updateResult.error;
         // NOTE: `UpdatePrivilegesError.UnprivilegedService` won't happen in 0.7.1+
         if (e === UpdatePrivilegesError.UnprivilegedService) {
-            logger.trace `[${this.currentServiceId}] BLESS(m: ${manager}, a: [${authorizers}], v: ${delegator}, r: ${registrar}, ${lazyInspect(autoAccumulate)}) <- HUH`;
+            logger.trace `[${this.currentServiceId}] BLESS(m: ${manager}, a: [${assigners}], v: ${delegator}, r: ${registrar}, ${lazyInspect(autoAccumulate)}) <- HUH`;
             regs.set(IN_OUT_REG, HostCallResult.HUH);
             return;
         }
         if (e === UpdatePrivilegesError.InvalidServiceId) {
-            logger.trace `[${this.currentServiceId}] BLESS(m: ${manager}, a: [${authorizers}], v: ${delegator}, r: ${registrar}, ${lazyInspect(autoAccumulate)}) <- WHO`;
+            logger.trace `[${this.currentServiceId}] BLESS(m: ${manager}, a: [${assigners}], v: ${delegator}, r: ${registrar}, ${lazyInspect(autoAccumulate)}) <- WHO`;
             regs.set(IN_OUT_REG, HostCallResult.WHO);
             return;
         }

package/packages/jam/jam-host-calls/externalities/partial-state.d.ts

@@ -185,7 +185,7 @@ export interface PartialState {
      * Update priviliged services and their gas.
      *
      * `m`: manager service (can change privileged services)
-     * `a`: manages authorization queue
+     * `a`: per-core manager of authorization queue
      * `v`: manages validator keys
      * `r`: manages create new services in protected id range.
      * `z`: collection of serviceId -> gas that auto-accumulate every block

package/packages/jam/jam-host-calls/externalities/refine-externalities.d.ts

@@ -84,7 +84,7 @@ export type SegmentExportError = typeof SegmentExportError;
 export interface RefineExternalities {
     /** Get the segments exported during this work item's refinement. */
     getExportedSegments(): readonly Segment[];
-    /** Forget a previously started nested VM. */
+    /** Forget a previously started nested VM. Return its current program counter.*/
     machineExpunge(machineIndex: MachineId): Promise<Result<ProgramCounter, NoMachineError>>;
     /** Set given range of pages as non-accessible and re-initialize them with zeros. */
     machineVoidPages(machineIndex: MachineId, pageStart: U64, pageCount: U64): Promise<Result<OK, ZeroVoidError>>;

package/packages/jam/jam-host-calls/externalities/refine-externalities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refine-externalities.d.ts","sourceRoot":"","sources":["../../../../../../packages/jam/jam-host-calls/externalities/refine-externalities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAY,KAAK,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+DAA+D,CAAC;AACzG,OAAO,EAAgB,KAAK,EAAE,EAAE,KAAK,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAEnF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;AAChE,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,cAA2C,CAAC;AAErG,uCAAuC;AACvC,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AACtD,qDAAqD;AACrD,eAAO,MAAM,cAAc,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,SAAsC,CAAC;AAE3F,qBAAa,eAAe;IACpB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC;CAS7E;AAED,MAAM,MAAM,aAAa,GACrB;IACE,MAAM,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IAC3B,aAAa,EAAE,GAAG,CAAC;CACpB,GACD;IACE,MAAM,EAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAC5B,OAAO,EAAE,GAAG,CAAC;CACd,GACD;IACE,MAAM,EAAE,OAAO,MAAM,CAAC,EAAE,GAAG,OAAO,MAAM,CAAC,IAAI,GAAG,OAAO,MAAM,CAAC,KAAK,GAAG,OAAO,MAAM,CAAC,GAAG,CAAC;CACzF,CAAC;AAEN,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,iBAAiB,CAAC;CAC9B,CAAC;AAEF,kEAAkE;AAClE,oBAAY,eAAe;IACzB,kDAAkD;IAClD,IAAI,IAAI;IACR,iDAAiD;IACjD,QAAQ,IAAI;IACZ,kDAAkD;IAClD,SAAS,IAAI;IACb,mDAAmD;IACnD,IAAI,IAAI;IACR,oDAAoD;IACpD,KAAK,IAAI;CACV;AAED,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,eAAe,GAAG,IACG,CAAC;AAE7E,iEAAiE;AACjE,oBAAY,aAAa;IACvB,yBAAyB;IACzB,eAAe,IAAI;IACnB,8BAA8B;IAC9B,oBAAoB,IAAI;IACxB,4CAA4C;IAC5C,SAAS,IAAI;CACd;AAED,oBAAY,aAAa;IACvB,4CAA4C;IAC5C,SAAS,IAAI;IACb,sDAAsD;IACtD,WAAW,IAAI;CAChB;AAED,oBAAY,UAAU;IACpB,4CAA4C;IAC5C,SAAS,IAAI;IACb,gCAAgC;IAChC,gBAAgB,IAAI;IACpB,2FAA2F;IAC3F,WAAW,IAAI;CAChB;AAED,kCAAkC;AAClC,eAAO,MAAM,cAAc,eAAqC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC;AAEnD,0CAA0C;AAC1C,eAAO,MAAM,kBAAkB,eAAgD,CAAC;AAChF,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC;AAE3D,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,mBAAmB,IAAI,SAAS,OAAO,EAAE,CAAC;IAE1C,6CAA6C;IAC7C,cAAc,CAAC,YAAY,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAEzF,oFAAoF;IACpF,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAE9G,4EAA4E;IAC5E,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAE9G,mFAAmF;IACnF,eAAe,CACb,YAAY,EAAE,SAAS,EACvB,gBAAgB,EAAE,GAAG,EACrB,WAAW,EAAE,GAAG,EAChB,MAAM,EAAE,GAAG,EACX,WAAW,EAAE,cAAc,GAC1B,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAEtC,+EAA+E;IAC/E,eAAe,CACb,YAAY,EAAE,SAAS,EACvB,WAAW,EAAE,GAAG,EAChB,gBAAgB,EAAE,GAAG,EACrB,MAAM,EAAE,GAAG,EACX,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAEtC,4EAA4E;IAC5E,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAE9G,8EAA8E;IAC9E,aAAa,CACX,YAAY,EAAE,SAAS,EACvB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,iBAAiB,GAC3B,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;IAElD;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IAE1E,oCAAoC;IACpC,gBAAgB,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAE5F,wDAAwD;IACxD,YAAY,CACV,YAAY,EAAE,SAAS,EACvB,SAAS,EAAE,GAAG,EACd,SAAS,EAAE,GAAG,EACd,WAAW,EAAE,eAAe,GAAG,IAAI,GAClC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;CACpC"}
+{"version":3,"file":"refine-externalities.d.ts","sourceRoot":"","sources":["../../../../../../packages/jam/jam-host-calls/externalities/refine-externalities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAY,KAAK,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+DAA+D,CAAC;AACzG,OAAO,EAAgB,KAAK,EAAE,EAAE,KAAK,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAEnF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;AAChE,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,cAA2C,CAAC;AAErG,uCAAuC;AACvC,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AACtD,qDAAqD;AACrD,eAAO,MAAM,cAAc,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,SAAsC,CAAC;AAE3F,qBAAa,eAAe;IACpB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC;CAS7E;AAED,MAAM,MAAM,aAAa,GACrB;IACE,MAAM,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IAC3B,aAAa,EAAE,GAAG,CAAC;CACpB,GACD;IACE,MAAM,EAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAC5B,OAAO,EAAE,GAAG,CAAC;CACd,GACD;IACE,MAAM,EAAE,OAAO,MAAM,CAAC,EAAE,GAAG,OAAO,MAAM,CAAC,IAAI,GAAG,OAAO,MAAM,CAAC,KAAK,GAAG,OAAO,MAAM,CAAC,GAAG,CAAC;CACzF,CAAC;AAEN,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,iBAAiB,CAAC;CAC9B,CAAC;AAEF,kEAAkE;AAClE,oBAAY,eAAe;IACzB,kDAAkD;IAClD,IAAI,IAAI;IACR,iDAAiD;IACjD,QAAQ,IAAI;IACZ,kDAAkD;IAClD,SAAS,IAAI;IACb,mDAAmD;IACnD,IAAI,IAAI;IACR,oDAAoD;IACpD,KAAK,IAAI;CACV;AAED,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,eAAe,GAAG,IACG,CAAC;AAE7E,iEAAiE;AACjE,oBAAY,aAAa;IACvB,yBAAyB;IACzB,eAAe,IAAI;IACnB,8BAA8B;IAC9B,oBAAoB,IAAI;IACxB,4CAA4C;IAC5C,SAAS,IAAI;CACd;AAED,oBAAY,aAAa;IACvB,4CAA4C;IAC5C,SAAS,IAAI;IACb,sDAAsD;IACtD,WAAW,IAAI;CAChB;AAED,oBAAY,UAAU;IACpB,4CAA4C;IAC5C,SAAS,IAAI;IACb,gCAAgC;IAChC,gBAAgB,IAAI;IACpB,2FAA2F;IAC3F,WAAW,IAAI;CAChB;AAED,kCAAkC;AAClC,eAAO,MAAM,cAAc,eAAqC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC;AAEnD,0CAA0C;AAC1C,eAAO,MAAM,kBAAkB,eAAgD,CAAC;AAChF,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC;AAE3D,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,mBAAmB,IAAI,SAAS,OAAO,EAAE,CAAC;IAE1C,gFAAgF;IAChF,cAAc,CAAC,YAAY,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAEzF,oFAAoF;IACpF,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAE9G,4EAA4E;IAC5E,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAE9G,mFAAmF;IACnF,eAAe,CACb,YAAY,EAAE,SAAS,EACvB,gBAAgB,EAAE,GAAG,EACrB,WAAW,EAAE,GAAG,EAChB,MAAM,EAAE,GAAG,EACX,WAAW,EAAE,cAAc,GAC1B,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAEtC,+EAA+E;IAC/E,eAAe,CACb,YAAY,EAAE,SAAS,EACvB,WAAW,EAAE,GAAG,EAChB,gBAAgB,EAAE,GAAG,EACrB,MAAM,EAAE,GAAG,EACX,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAEtC,4EAA4E;IAC5E,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAE9G,8EAA8E;IAC9E,aAAa,CACX,YAAY,EAAE,SAAS,EACvB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,iBAAiB,GAC3B,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;IAElD;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IAE1E,oCAAoC;IACpC,gBAAgB,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAE5F,wDAAwD;IACxD,YAAY,CACV,YAAY,EAAE,SAAS,EACvB,SAAS,EAAE,GAAG,EACd,SAAS,EAAE,GAAG,EACd,WAAW,EAAE,eAAe,GAAG,IAAI,GAClC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;CACpC"}