@zerc20/storage-sdk 0.0.0-stage → 0.1.0

package/dist/sync.js

@@ -0,0 +1,263 @@
+// Incremental history. Everything is append-only or write-once, so a state remembers how far each
+// list has been read and every refresh reads only past that. New records are found through the
+// canister's log of lane slot ids: a refresh matches the next id of each of its lanes against the
+// log's new entries, so its cost does not grow with the number of channels or receive codes.
+import { concat, equal, hex, kdf, open, openFrom, seal, unhex, utf8 } from './crypto.js';
+import { addressInbox, channelKey, channelSeed, codeKey, outgoingId, outgoingKey, ownKey, posKey, readChannel, readLaneRecord, readTarget, sealKey, slotId, } from './formats.js';
+import { notifyKey, notifySecret } from './viewKey.js';
+import { MAX_LOG_READ, MAX_READ } from './wire.js';
+/** Slots read per sequence and round trip once a sequence has news. */
+const BATCH = 16;
+export const emptyState = (view, chains) => ({
+    address: view.address,
+    chains,
+    addressInboxRead: 0,
+    incoming: [],
+    outgoing: { next: 0, lanes: [] },
+    own: [],
+    log: null,
+});
+export function checkState(view, state) {
+    if (!equal(state.address, view.address))
+        throw new Error('the state belongs to another view key');
+}
+const payerOf = (r) => (r.kind === 'note' ? (r.payer ?? null) : null);
+/** Reads what is new since `state` and returns the extended state, plus the records it found. `state` itself is
+ * left untouched, so a failed refresh loses nothing. A first sync is a refresh of `emptyState`.
+ *
+ * Queries only spot news: whatever is kept is read again as update calls, so a single lying replica
+ * can neither plant entries nor make a cursor skip one. With nothing new it costs queries only: one
+ * for outgoing records, one for the address inbox, and one for the lane log.
+ *
+ * A replica can still leave log entries out, which only delays those records: `full` reads every
+ * lane instead (one query per 256 of them: every channel, point of sale and the own lane on every
+ * watched chain, every code on its own), as the first refresh of a state does. Do that now and then, say hourly. */
+export async function refresh(client, view, state, opts = {}) {
+    checkState(view, state);
+    const next = structuredClone(state);
+    // read before anything else: writes made while this refresh runs are found by the next one
+    const fromLog = opts.full || next.log === null ? null : next.log;
+    const log = fromLog === null ? { end: Number(await client.actor.log_length()), ids: [] } : await readLog(client, fromLog);
+    const news = new Set(log.ids.map((id) => hex(id)));
+    const { address, seed } = view;
+    const added = [];
+    /** The sequences of `sources` with news: a lane found in this refresh, or a chain just watched, may hold records
+     * from before the log position. */
+    const due = (sources) => sources.flatMap((source) => {
+        const via = source.lane?.via;
+        const chainIds = via?.type === 'code'
+            ? next.chains.filter((c) => c === ('code' in via ? via.code.chainId : via.chainId))
+            : next.chains;
+        return chainIds.flatMap((chainId) => {
+            let chain = source.chains.find((c) => c.chainId === chainId);
+            const fresh = !chain;
+            if (!chain)
+                source.chains.push((chain = { chainId, nextSlotIndex: 0, records: [] }));
+            const idAt = (i) => slotId(source.key, chainId, i);
+            const isDue = fromLog === null || fresh || news.has(hex(idAt(chain.nextSlotIndex)));
+            return isDue ? [{ source, chain, next: chain.nextSlotIndex, idAt }] : [];
+        });
+    });
+    /** Takes what `sequences` held, every filled slot counting (so that a code's payer writes past the other payers'
+     * notes), and returns the records it took. */
+    const take = (sequences, found) => sequences.flatMap(({ source, chain }, s) => found[s].flatMap(({ id, slot }) => {
+        const slotIndex = chain.nextSlotIndex++;
+        const plain = open(sealKey(source.key), id, slot.data);
+        const record = plain && readLaneRecord(source.kind, chain.chainId, slotIndex, slot.at_ns, plain);
+        const peer = record && source.peerOf(record);
+        if (!record || peer === undefined)
+            return [];
+        chain.records.push(record);
+        added.push({ direction: source.direction, lane: source.lane, peer, record });
+        return [record];
+    }));
+    // The own lane and outgoing records past the cursors, perhaps written by another device. The own lane comes
+    // first, so that the codes of a new burn block, and a new point of sale's lane, are read in this refresh.
+    const own = {
+        direction: 'own',
+        kind: 'own',
+        lane: null,
+        chains: next.own,
+        key: ownKey(seed),
+        peerOf: () => null,
+    };
+    const ownSequences = due([own]);
+    const [ownFound, records] = await Promise.all([
+        readSequences(client, { Lane: null }, ownSequences),
+        readSequences(client, { Outgoing: null }, [{ next: next.outgoing.next, idAt: (i) => outgoingId(seed, i) }]),
+    ]);
+    // two devices may record the same index, or the same point of sale: one lane each
+    const lanesHeld = new Set(next.incoming.filter((c) => c.via.type !== 'address').map((c) => hex(c.key)));
+    const hold = (via, key) => {
+        if (lanesHeld.has(hex(key)))
+            return;
+        lanesHeld.add(hex(key));
+        next.incoming.push({ peer: null, via, seed: null, inbox: null, key, chains: [] });
+    };
+    for (const r of take(ownSequences, ownFound)) {
+        if (r.kind === 'pos-lane')
+            hold({ type: 'pos', n: r.n }, posKey(seed, r.n));
+        if (r.kind !== 'burn-block')
+            continue;
+        r.salts.forEach((_, i) => {
+            const index = r.first + i;
+            hold({ type: 'code', chainId: r.chainId, tokenId: r.tokenId, index }, codeKey(seed, r.chainId, r.tokenId, index));
+        });
+    }
+    for (const { id, slot } of records[0]) {
+        next.outgoing.next++;
+        const target = readTarget(open(outgoingKey(seed), id, slot.data) ?? new Uint8Array());
+        if (!target)
+            continue;
+        if (!('address' in target)) {
+            next.outgoing.lanes.push({
+                peer: null,
+                via: { type: 'code', code: target },
+                seed: null,
+                inbox: null,
+                key: target.key,
+                chains: [],
+            });
+            continue;
+        }
+        const inbox = addressInbox(target.address, target.notifyKey);
+        const c = channelSeed(seed, address, inbox);
+        const channel = {
+            peer: target.address,
+            via: { type: 'address' },
+            seed: c,
+            inbox,
+            key: channelKey(c, inbox, address),
+            chains: [],
+        };
+        next.outgoing.lanes.push(channel);
+    }
+    // New announcements in the address inbox, once per seed. Deduplicating by payer instead would let a forged entry
+    // naming a real payer hide the real channel.
+    const inbox = addressInbox(address, notifyKey(view));
+    const infos = await readInbox(client, inbox, next.addressInboxRead);
+    next.addressInboxRead += infos.length;
+    for (const info of infos) {
+        const announced = readChannel(openFrom(notifySecret(view), 'announce', inbox, info) ?? new Uint8Array());
+        if (!announced || next.incoming.some((channel) => channel.seed && equal(channel.seed, announced.seed)))
+            continue;
+        const { payer, seed: c } = announced;
+        next.incoming.push({
+            peer: payer,
+            via: { type: 'address' },
+            seed: c,
+            inbox,
+            key: channelKey(c, inbox, payer),
+            chains: [],
+        });
+    }
+    // New records in every channel and point of sale on every watched chain, and in every code on its own. Of a code's
+    // lane, the owner takes every payer's notes, and a payer only its own.
+    const sources = [
+        ...next.incoming.map((lane) => ({
+            direction: 'incoming',
+            kind: lane.via.type === 'address' ? 'channel' : lane.via.type,
+            lane,
+            chains: lane.chains,
+            key: lane.key,
+            peerOf: (r) => (lane.via.type === 'code' ? payerOf(r) : lane.peer),
+        })),
+        ...next.outgoing.lanes.map((lane) => ({
+            direction: 'outgoing',
+            kind: lane.via.type === 'code' ? 'code' : 'channel',
+            lane,
+            chains: lane.chains,
+            key: lane.key,
+            peerOf: (r) => (lane.via.type !== 'code' ? lane.peer : equal(payerOf(r), address) ? null : undefined),
+        })),
+    ];
+    const sequences = due(sources);
+    take(sequences, await readSequences(client, { Lane: null }, sequences));
+    next.log = log.end;
+    return { state: next, added };
+}
+/** The lane log from `start` to its end. */
+async function readLog(client, start) {
+    const ids = [];
+    for (;;) {
+        const page = await client.actor.get_log(BigInt(start + ids.length), MAX_LOG_READ);
+        ids.push(...page);
+        if (page.length < MAX_LOG_READ)
+            return { end: start + ids.length, ids };
+    }
+}
+/** Announcements from `start` on. */
+async function readInbox(client, inbox, start) {
+    const infos = [];
+    for (;;) {
+        const at = start + infos.length;
+        const peek = await client.actor.get_announcements(inbox, at, MAX_READ);
+        if (peek.length === 0)
+            return infos;
+        const page = await client.replicated.get_announcements(inbox, at, MAX_READ);
+        infos.push(...page);
+        if (page.length < MAX_READ)
+            return infos;
+    }
+}
+/** The filled slots of each sequence from its `next` index up to the first empty one. The first round
+ * checks one slot per sequence; sequences with news are then read `BATCH` slots at a time. */
+async function readSequences(client, kind, sequences) {
+    const found = sequences.map(() => []);
+    let pending = sequences.map((_, s) => s);
+    for (let width = 1; pending.length > 0; width = BATCH) {
+        const ids = pending.map((s) => {
+            const { next, idAt } = sequences[s];
+            return Array.from({ length: width }, (_, i) => idAt(next + found[s].length + i));
+        });
+        const peek = await getSlots(client.actor, kind, ids.flat());
+        const news = ids.map((row, p) => row.slice(0, leading(peek.slice(p * width, (p + 1) * width))));
+        const confirmed = await getSlots(client.replicated, kind, news.flat());
+        let at = 0;
+        pending = pending.filter((s, p) => {
+            const slots = confirmed.slice(at, (at += news[p].length));
+            const n = leading(slots);
+            found[s].push(...slots.slice(0, n).map((slot, i) => ({ id: news[p][i], slot: slot })));
+            return n === width;
+        });
+    }
+    return found;
+}
+/** `get_slots` in reads of at most `MAX_READ` ids. */
+async function getSlots(actor, kind, ids) {
+    const reads = [];
+    for (let i = 0; i < ids.length; i += MAX_READ)
+        reads.push(actor.get_slots(kind, ids.slice(i, i + MAX_READ)));
+    return (await Promise.all(reads)).flat().map((slot) => slot[0] ?? null);
+}
+/** The first empty slot of a lane's sequence from slot `from` on: where a code's first payment goes, or a point of
+ * sale's next block. */
+export async function sequenceEnd(client, idAt, from = 0) {
+    return from + (await readSequences(client, { Lane: null }, [{ next: from, idAt }]))[0].length;
+}
+const leading = (slots) => {
+    const empty = slots.indexOf(null);
+    return empty < 0 ? slots.length : empty;
+};
+const STATE_TAG = utf8('zerc20/storage/sync-state/v1');
+/** `state`, encrypted under a key only `view` derives, for the app to store anywhere. */
+export function exportState(view, state) {
+    checkState(view, state);
+    const json = JSON.stringify(state, (_, v) => typeof v === 'bigint' ? { $n: v.toString() } : v instanceof Uint8Array ? { $b: hex(v) } : v);
+    return seal(kdf(view.seed, 'sync-state'), concat(STATE_TAG, view.address), utf8(json));
+}
+/** The state `exportState` encrypted, or `null` if `bytes` is not one for `view` (start over from
+ * `emptyState` then). */
+export function importState(view, bytes) {
+    const plain = open(kdf(view.seed, 'sync-state'), concat(STATE_TAG, view.address), bytes);
+    if (!plain)
+        return null;
+    return JSON.parse(new TextDecoder().decode(plain), (_, v) => {
+        if (typeof v === 'object' && v !== null && '$n' in v)
+            return BigInt(v.$n);
+        if (typeof v === 'object' && v !== null && '$b' in v)
+            return unhex(v.$b);
+        return v;
+    });
+}
+//# sourceMappingURL=sync.js.map

package/dist/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,+FAA+F;AAC/F,kGAAkG;AAClG,6FAA6F;AAK7F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAIL,YAAY,EACZ,UAAU,EACV,WAAW,EACX,OAAO,EACP,UAAU,EACV,WAAW,EACX,MAAM,EACN,MAAM,EACN,WAAW,EACX,cAAc,EACd,UAAU,EACV,OAAO,EACP,MAAM,GACP,MAAM,cAAc,CAAC;AACtB,OAAO,EAAgB,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEnD,uEAAuE;AACvE,MAAM,KAAK,GAAG,EAAE,CAAC;AAmEjB,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,MAAgB,EAAa,EAAE,CAAC,CAAC;IACzE,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,MAAM;IACN,gBAAgB,EAAE,CAAC;IACnB,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;IAChC,GAAG,EAAE,EAAE;IACP,GAAG,EAAE,IAAI;CACV,CAAC,CAAC;AAEH,MAAM,UAAU,UAAU,CAAC,IAAa,EAAE,KAAgB;IACxD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAa,EAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAErG;;;;;;;;;oHASoH;AACpH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAsB,EACtB,IAAa,EACb,KAAgB,EAChB,OAA2B,EAAE;IAE7B,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,2FAA2F;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACjE,MAAM,GAAG,GACP,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B;uCACmC;IACnC,MAAM,GAAG,GAAG,CAAC,OAAiB,EAAE,EAAE,CAChC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;QAC7B,MAAM,QAAQ,GACZ,GAAG,EAAE,IAAI,KAAK,MAAM;YAClB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnF,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAClB,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC;YACrB,IAAI,CAAC,KAAK;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACrF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACpF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACL;kDAC8C;IAC9C,MAAM,IAAI,GAAG,CAAC,SAAiC,EAAE,KAAiB,EAAE,EAAE,CACpE,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CACzC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QAChC,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,KAAK,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAC7C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC,CAAC,CACH,CAAC;IAEJ,4GAA4G;IAC5G,0GAA0G;IAC1G,MAAM,GAAG,GAAW;QAClB,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI,CAAC,GAAG;QAChB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC;QACjB,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;KACnB,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,CAAC;QACnD,aAAa,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAC5G,CAAC,CAAC;IACH,kFAAkF;IAClF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxG,MAAM,IAAI,GAAG,CAAC,GAAQ,EAAE,GAAe,EAAE,EAAE;QACzC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO;QACpC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;YAAE,SAAS;QACtC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBACvB,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;gBACnC,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;gBACX,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAW;YACjC,IAAI,EAAE,CAAC;YACP,KAAK;YACL,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC;YAClC,MAAM,EAAE,EAAE;SACX,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,iHAAiH;IACjH,6CAA6C;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpE,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC,MAAM,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;QACzG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YACxB,IAAI,EAAE,CAAC;YACP,KAAK;YACL,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC;YAChC,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;IACL,CAAC;IAED,mHAAmH;IACnH,uEAAuE;IACvE,MAAM,OAAO,GAAa;QACxB,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAU,EAAE,CAAC,CAAC;YACtC,SAAS,EAAE,UAAU;YACrB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;YAC7D,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SACnE,CAAC,CAAC;QACH,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAU,EAAE,CAAC,CAAC;YAC5C,SAAS,EAAE,UAAU;YACrB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnD,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACvG,CAAC,CAAC;KACJ,CAAC;IACF,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACnB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,4CAA4C;AAC5C,KAAK,UAAU,OAAO,CAAC,MAAsB,EAAE,KAAa;IAC1D,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;QAClF,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,KAAK,UAAU,SAAS,CAAC,MAAsB,EAAE,KAAiB,EAAE,KAAa;IAC/E,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,SAAS,CAAC;QACR,MAAM,EAAE,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;AACH,CAAC;AAUD;8FAC8F;AAC9F,KAAK,UAAU,aAAa,CAAC,MAAsB,EAAE,IAAU,EAAE,SAAqB;IACpF,MAAM,KAAK,GAAe,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,EAAE,GAAG,CAAC,CAAC;QACX,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACzB,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACxF,OAAO,CAAC,KAAK,KAAK,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sDAAsD;AACtD,KAAK,UAAU,QAAQ,CAAC,KAA6B,EAAE,IAAU,EAAE,GAAiB;IAClF,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7G,OAAO,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED;wBACwB;AACxB,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAsB,EACtB,IAAmC,EACnC,IAAI,GAAG,CAAC;IAER,OAAO,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAChG,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAsB,EAAU,EAAE;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,CAAC,8BAA8B,CAAC,CAAC;AAEvD,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,KAAgB;IACzD,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAU,EAAE,EAAE,CACnD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAC5F,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACzF,CAAC;AAED;yBACyB;AACzB,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,KAAiB;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACzF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAU,EAAE,EAAE;QACnE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC;QACpF,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC;IACX,CAAC,CAAc,CAAC;AAClB,CAAC"}

package/dist/viewKey.d.ts

@@ -0,0 +1,45 @@
+import { DerivedPublicKey, TransportSecretKey } from '@dfinity/vetkeys';
+import type { Principal } from '@icp-sdk/core/principal';
+import type { Registration } from './candid.js';
+import type { CanisterClient } from './canister.js';
+/** EIP-191 `personal_sign` by the address's wallet: `r ‖ s ‖ v`, 65 bytes. */
+export type Signer = (message: string) => Promise<Uint8Array>;
+/** An address's view key: the seed everything owner-only derives from. */
+export interface ViewKey {
+    address: Uint8Array;
+    seed: Uint8Array;
+}
+/** `address`'s view key, from the root seed of the address's zERC20 identity (in zERC20-v2, `keccak256` of a
+ * canonical `personal_sign` signature). */
+export declare function viewKey(rootSeed: Uint8Array, address: Uint8Array): ViewKey;
+/** The X25519 secret that opens announcements to `view`'s address inbox. */
+export declare const notifySecret: (view: ViewKey) => Uint8Array;
+/** The key payers encrypt announcements to, which names `view`'s registration. */
+export declare const notifyKey: (view: ViewKey) => Uint8Array;
+/** `view`'s address registered with `publicKey`, the zERC20 public key payments to it are to be owned by. The first
+ * check is a query, answered by one replica: only a missing or foreign registration is confirmed with an update call
+ * before registering (one wallet signature) or throwing. Throws if the address is registered with another root seed;
+ * `register` to take it over. */
+export declare function registeredViewKey(client: CanisterClient, rootSeed: Uint8Array, signer: Signer, address: Uint8Array, publicKey: Uint8Array): Promise<ViewKey>;
+/** Registers `view`'s address with `publicKey`, replacing whatever it registered before. */
+export declare function register(client: CanisterClient, signer: Signer, view: ViewKey, publicKey: Uint8Array): Promise<void>;
+/** The address that signed `message` with EIP-191 `personal_sign`, or `null`. */
+export declare function eip191Signer(message: string, signature: Uint8Array): Uint8Array | null;
+/** Whether `r` is what `address` signed: the canister checks this on write, and a payer checks it again so that a
+ * canister cannot point it at keys of its own. */
+export declare const verifyRegistration: (canister: Principal, address: Uint8Array, r: Registration) => boolean;
+/** Whom a payment to an address goes to: the zERC20 public key to own the note, and the inbox and key to announce a
+ * channel to. */
+export interface Recipient {
+    address: Uint8Array;
+    publicKey: Uint8Array;
+    notifyKey: Uint8Array;
+    inbox: Uint8Array;
+}
+/** `address` as a recipient, checked against its owner's signature, or `null` when it never registered: pay it
+ * publicly instead, or ask for a receive code. An update call, so that no single replica can answer with a
+ * registration the address has replaced; a canister can withhold one, but not forge one. */
+export declare function lookupRecipient(client: CanisterClient, address: Uint8Array): Promise<Recipient | null>;
+/** For the auditor: the view key in `registration`'s escrow, from what `audit_escrow_key` returned (encrypted to
+ * `transportKey`). `null` if the key or the escrow does not open. */
+export declare function openEscrow(encrypted: Uint8Array, transportKey: TransportSecretKey, escrowPublicKey: DerivedPublicKey, registration: Registration): ViewKey | null;

package/dist/viewKey.js

@@ -0,0 +1,104 @@
+// View keys and registration.
+//
+// An address's view key derives from the root seed of the address's zERC20 identity, so restoring a wallet needs
+// nothing from the canister. Registering (one wallet signature) publishes what payers need: the address's zERC20
+// public key and the key payers encrypt channel announcements to. It also escrows the view key to the auditor,
+// whom vetKD alone can give the key to it. A later registration, from another root seed, replaces it.
+import { EncryptedVetKey, IbeCiphertext, IbeIdentity, IbeSeed, } from '@dfinity/vetkeys';
+import { x25519 } from '@noble/curves/ed25519.js';
+import { secp256k1 } from '@noble/curves/secp256k1.js';
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { compare, concat, equal, kdf, nowNs, utf8 } from './crypto.js';
+import { FR_BE, addressInbox } from './formats.js';
+import { MAX_TTL_NS, registerMessage, vetkdInput } from './wire.js';
+/** `address`'s view key, from the root seed of the address's zERC20 identity (in zERC20-v2, `keccak256` of a
+ * canonical `personal_sign` signature). */
+export function viewKey(rootSeed, address) {
+    if (rootSeed.length !== 32)
+        throw new Error('the root seed must be 32 bytes');
+    return { address, seed: kdf(rootSeed, 'view', [address]) };
+}
+/** The X25519 secret that opens announcements to `view`'s address inbox. */
+export const notifySecret = (view) => kdf(view.seed, 'notify');
+/** The key payers encrypt announcements to, which names `view`'s registration. */
+export const notifyKey = (view) => x25519.getPublicKey(notifySecret(view));
+/** `view`'s address registered with `publicKey`, the zERC20 public key payments to it are to be owned by. The first
+ * check is a query, answered by one replica: only a missing or foreign registration is confirmed with an update call
+ * before registering (one wallet signature) or throwing. Throws if the address is registered with another root seed;
+ * `register` to take it over. */
+export async function registeredViewKey(client, rootSeed, signer, address, publicKey) {
+    const view = viewKey(rootSeed, address);
+    const ours = (r) => r && equal(r.notify_key, notifyKey(view)) && equal(r.public_key, publicKey);
+    if (ours(await client.registration(address)))
+        return view;
+    const [r] = await client.replicated.registration(address, []);
+    if (r && !equal(r.notify_key, notifyKey(view))) {
+        throw new Error('the address is registered with another root seed: register to take it over');
+    }
+    if (!ours(r ?? null))
+        await register(client, signer, view, publicKey);
+    return view;
+}
+/** Registers `view`'s address with `publicKey`, replacing whatever it registered before. */
+export async function register(client, signer, view, publicKey) {
+    if (publicKey.length !== 32)
+        throw new Error('a public key is 32 bytes');
+    const notify = notifyKey(view);
+    const identity = IbeIdentity.fromBytes(vetkdInput(view.address, notify));
+    const r = {
+        address: view.address,
+        public_key: publicKey,
+        notify_key: notify,
+        escrow: IbeCiphertext.encrypt(await client.escrowPublicKey(), identity, view.seed, IbeSeed.random()).serialize(),
+        expiry_ns: nowNs() + MAX_TTL_NS / 2n,
+        signature: new Uint8Array(),
+    };
+    r.signature = await signer(registerMessage(client.canisterId, r));
+    await client.register(r);
+}
+/** The address that signed `message` with EIP-191 `personal_sign`, or `null`. */
+export function eip191Signer(message, signature) {
+    if (signature.length !== 65)
+        return null;
+    const v = signature[64] >= 27 ? signature[64] - 27 : signature[64];
+    if (v > 1)
+        return null;
+    const msg = utf8(message);
+    const digest = keccak_256(concat(utf8(`\x19Ethereum Signed Message:\n${msg.length}`), msg));
+    try {
+        const sig = secp256k1.Signature.fromBytes(concat(Uint8Array.of(v), signature.subarray(0, 64)), 'recovered');
+        if (sig.hasHighS())
+            return null;
+        return keccak_256(sig.recoverPublicKey(digest).toBytes(false).subarray(1)).slice(12);
+    }
+    catch {
+        return null;
+    }
+}
+/** Whether `r` is what `address` signed: the canister checks this on write, and a payer checks it again so that a
+ * canister cannot point it at keys of its own. */
+export const verifyRegistration = (canister, address, r) => equal(r.address, address) &&
+    equal(eip191Signer(registerMessage(canister, r), r.signature) ?? new Uint8Array(), address);
+/** `address` as a recipient, checked against its owner's signature, or `null` when it never registered: pay it
+ * publicly instead, or ask for a receive code. An update call, so that no single replica can answer with a
+ * registration the address has replaced; a canister can withhold one, but not forge one. */
+export async function lookupRecipient(client, address) {
+    const [r] = await client.replicated.registration(address, []);
+    if (!r || !verifyRegistration(client.canisterId, address, r) || compare(r.public_key, FR_BE) >= 0)
+        return null;
+    return { address, publicKey: r.public_key, notifyKey: r.notify_key, inbox: addressInbox(address, r.notify_key) };
+}
+/** For the auditor: the view key in `registration`'s escrow, from what `audit_escrow_key` returned (encrypted to
+ * `transportKey`). `null` if the key or the escrow does not open. */
+export function openEscrow(encrypted, transportKey, escrowPublicKey, registration) {
+    const { address, notify_key } = registration;
+    try {
+        const vetKey = EncryptedVetKey.deserialize(encrypted).decryptAndVerify(transportKey, escrowPublicKey, vetkdInput(address, notify_key));
+        const seed = IbeCiphertext.deserialize(registration.escrow).decrypt(vetKey);
+        return seed.length === 32 ? { address, seed } : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=viewKey.js.map

package/dist/viewKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewKey.js","sourceRoot":"","sources":["../src/viewKey.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,iHAAiH;AACjH,iHAAiH;AACjH,+GAA+G;AAC/G,sGAAsG;AAEtG,OAAO,EAEL,eAAe,EACf,aAAa,EACb,WAAW,EACX,OAAO,GAER,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAInD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAWpE;2CAC2C;AAC3C,MAAM,UAAU,OAAO,CAAC,QAAoB,EAAE,OAAmB;IAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC9E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAa,EAAc,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAEpF,kFAAkF;AAClF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAa,EAAc,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AAEhG;;;iCAGiC;AACjC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAsB,EACtB,QAAoB,EACpB,MAAc,EACd,OAAmB,EACnB,SAAqB;IAErB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrH,IAAI,IAAI,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;QAAE,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAsB,EACtB,MAAc,EACd,IAAa,EACb,SAAqB;IAErB,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,GAAiB;QACtB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE;QAChH,SAAS,EAAE,KAAK,EAAE,GAAG,UAAU,GAAG,EAAE;QACpC,SAAS,EAAE,IAAI,UAAU,EAAE;KAC5B,CAAC;IACF,CAAC,CAAC,SAAS,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,SAAqB;IACjE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC5G,IAAI,GAAG,CAAC,QAAQ,EAAE;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;kDACkD;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAmB,EAAE,OAAmB,EAAE,CAAe,EAAW,EAAE,CACvG,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC;AAW9F;;4FAE4F;AAC5F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAsB,EAAE,OAAmB;IAC/E,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/G,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;AACnH,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,UAAU,CACxB,SAAqB,EACrB,YAAgC,EAChC,eAAiC,EACjC,YAA0B;IAE1B,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,gBAAgB,CACpE,YAAY,EACZ,eAAe,EACf,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAChC,CAAC;QACF,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/wire.d.ts

@@ -0,0 +1,33 @@
+import type { Principal } from '@icp-sdk/core/principal';
+import type { Action, Registration } from './candid.js';
+/** Sized for a five-year-old budget Android phone (the canister's `lib.rs` says how). */
+export declare const POW_BITS = 14;
+/** Address inboxes are public, so opening a channel costs more work than a plain write. */
+export declare const OPEN_POW_BITS = 17;
+export declare const REGISTER_POW_BITS = 18;
+/** Every blob is exactly this long, so its length tells nothing of what it holds. */
+export declare const BLOB_LEN = 256;
+export declare const MAX_READ = 256;
+/** Lane slot ids per `get_log` call. */
+export declare const MAX_LOG_READ = 8192;
+/** Longest a signed request stays valid. */
+export declare const MAX_TTL_NS = 600000000000n;
+/** The vetKD input, which is also the IBE identity, of the key to the escrow of `address`'s registration with
+ * `notifyKey`. */
+export declare const vetkdInput: (address: Uint8Array, notifyKey: Uint8Array) => Uint8Array;
+/** What an address owner signs (EIP-191) to register. */
+export declare function registerMessage(canister: Principal, r: Registration): string;
+/** What the auditor signs (EIP-191) to receive the key to the escrow of `target`'s registration with `notifyKey`. */
+export declare function auditMessage(canister: Principal, target: Uint8Array, notifyKey: Uint8Array, transportPublicKey: Uint8Array, expiryNs: bigint): string;
+export declare function registerDigest(r: Registration): Uint8Array;
+export declare function actionsDigest(actions: Action[]): Uint8Array;
+export declare const requiredPowBits: (actions: Action[]) => number;
+export declare function powOk(digest: Uint8Array, nonce: bigint, bits: number): boolean;
+/** The first nonce whose proof of work reaches `bits`, searched in a Web Worker so a page stays
+ * responsive. Where there is none (Node), or it does not start (a bundler that left out
+ * powWorker.js), on this thread, yielding every ~100 ms. */
+export declare function solvePow(digest: Uint8Array, bits: number): Promise<bigint>;
+/** The first nonce whose proof of work reaches `bits`. On a page's thread, yields to the event loop
+ * every `yieldMs`, and no more often: each yield is a timer, which costs 4 ms in a visible tab and a
+ * whole second in a hidden one. */
+export declare function findNonce(digest: Uint8Array, bits: number, yieldMs: number): Promise<bigint>;

package/dist/wire.js

@@ -0,0 +1,112 @@
+// Bytes the canister checks: signed messages and proof-of-work digests, and the vetKD input. They must match
+// canister/src/registry.rs, audit.rs and store.rs byte for byte; test/wire.test.ts pins the same fixtures as the
+// canister's `wire_fixtures` test.
+import { sha256 } from '@noble/hashes/sha2.js';
+import { concat, hex, lengthPrefixed, taggedHash, u64be, utf8 } from './crypto.js';
+/** Sized for a five-year-old budget Android phone (the canister's `lib.rs` says how). */
+export const POW_BITS = 14;
+/** Address inboxes are public, so opening a channel costs more work than a plain write. */
+export const OPEN_POW_BITS = 17;
+export const REGISTER_POW_BITS = 18;
+/** Every blob is exactly this long, so its length tells nothing of what it holds. */
+export const BLOB_LEN = 256;
+export const MAX_READ = 256;
+/** Lane slot ids per `get_log` call. */
+export const MAX_LOG_READ = 8192;
+/** Longest a signed request stays valid. */
+export const MAX_TTL_NS = 600000000000n;
+/** The canister's `Kind` numbers (Rust's, not the .did's alphabetical order). */
+const KIND_CODE = { Outgoing: 0, Lane: 1 };
+/** Tags a registration's proof-of-work digest and the text its owner signs. */
+const REGISTRATION_TAG = 'zerc20/storage/registration/v1';
+/** The vetKD input, which is also the IBE identity, of the key to the escrow of `address`'s registration with
+ * `notifyKey`. */
+export const vetkdInput = (address, notifyKey) => concat(address, notifyKey);
+/** What an address owner signs (EIP-191) to register. */
+export function registerMessage(canister, r) {
+    return (`zERC20 storage registration\ncanister: ${canister.toText()}\naddress: 0x${hex(r.address)}\n` +
+        `public_key: 0x${hex(r.public_key)}\nnotify_key: 0x${hex(r.notify_key)}\n` +
+        `escrow_sha256: 0x${hex(sha256(r.escrow))}\nexpiry_ns: ${r.expiry_ns}\ntag: ${REGISTRATION_TAG}`);
+}
+/** What the auditor signs (EIP-191) to receive the key to the escrow of `target`'s registration with `notifyKey`. */
+export function auditMessage(canister, target, notifyKey, transportPublicKey, expiryNs) {
+    return (`zERC20 storage audit request\ncanister: ${canister.toText()}\ntarget: 0x${hex(target)}\n` +
+        `notify_key: 0x${hex(notifyKey)}\ntransport_public_key: 0x${hex(transportPublicKey)}\nexpiry_ns: ${expiryNs}\n` +
+        'tag: zerc20/storage/audit/v1');
+}
+export function registerDigest(r) {
+    return taggedHash(REGISTRATION_TAG, [r.address, r.public_key, r.notify_key, r.escrow, u64be(r.expiry_ns)]);
+}
+export function actionsDigest(actions) {
+    const parts = actions.flatMap((action) => {
+        if ('OpenChannel' in action) {
+            const { inbox, enc_announcement, outgoing_id, enc_outgoing } = action.OpenChannel;
+            return [Uint8Array.of(0), lengthPrefixed([inbox, enc_announcement, outgoing_id, enc_outgoing])];
+        }
+        const { kind, id, data } = action.Put;
+        const code = KIND_CODE[Object.keys(kind)[0]];
+        return [Uint8Array.of(1, code), lengthPrefixed([id, data])];
+    });
+    return sha256(concat(...parts));
+}
+export const requiredPowBits = (actions) => actions.some((action) => 'OpenChannel' in action) ? OPEN_POW_BITS : POW_BITS;
+const POW_TAG = utf8('zerc20/storage/pow/v1');
+function leadingZeroBits(bytes) {
+    let zeros = 0;
+    for (const byte of bytes) {
+        if (byte !== 0)
+            return zeros + Math.clz32(byte) - 24;
+        zeros += 8;
+    }
+    return zeros;
+}
+export function powOk(digest, nonce, bits) {
+    return leadingZeroBits(sha256(concat(POW_TAG, digest, u64be(nonce)))) >= bits;
+}
+/** The first nonce whose proof of work reaches `bits`, searched in a Web Worker so a page stays
+ * responsive. Where there is none (Node), or it does not start (a bundler that left out
+ * powWorker.js), on this thread, yielding every ~100 ms. */
+export async function solvePow(digest, bits) {
+    if (typeof Worker !== 'undefined') {
+        try {
+            return await inWorker(digest, bits);
+        }
+        catch {
+            // searched here instead
+        }
+    }
+    return findNonce(digest, bits, 100);
+}
+async function inWorker(digest, bits) {
+    // this exact form is what bundlers (Vite, webpack) look for to emit the worker
+    const worker = new Worker(new URL('./powWorker.js', import.meta.url), { type: 'module' });
+    try {
+        return await new Promise((resolve, reject) => {
+            worker.onmessage = ({ data }) => resolve(data);
+            worker.onerror = reject;
+            worker.postMessage({ digest, bits });
+        });
+    }
+    finally {
+        worker.terminate();
+    }
+}
+/** The first nonce whose proof of work reaches `bits`. On a page's thread, yields to the event loop
+ * every `yieldMs`, and no more often: each yield is a timer, which costs 4 ms in a visible tab and a
+ * whole second in a hidden one. */
+export async function findNonce(digest, bits, yieldMs) {
+    const buffer = concat(POW_TAG, digest, new Uint8Array(8));
+    const nonce = new DataView(buffer.buffer, POW_TAG.length + digest.length, 8);
+    let since = Date.now();
+    for (let n = 0;; n++) {
+        nonce.setUint32(0, Math.floor(n / 2 ** 32), false);
+        nonce.setUint32(4, n >>> 0, false);
+        if (leadingZeroBits(sha256(buffer)) >= bits)
+            return BigInt(n);
+        if (n % 4096 === 4095 && Date.now() - since >= yieldMs) {
+            await new Promise((resolve) => setTimeout(resolve, 0));
+            since = Date.now();
+        }
+    }
+}
+//# sourceMappingURL=wire.js.map

package/dist/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../src/wire.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,iHAAiH;AACjH,mCAAmC;AAGnC,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnF,yFAAyF;AACzF,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAC3B,2FAA2F;AAC3F,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,qFAAqF;AACrF,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAC5B,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAC5B,wCAAwC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,UAAU,GAAG,aAAgB,CAAC;AAE3C,iFAAiF;AACjF,MAAM,SAAS,GAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAErE,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AAE1D;kBACkB;AAClB,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAmB,EAAE,SAAqB,EAAc,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAEjH,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,QAAmB,EAAE,CAAe;IAClE,OAAO,CACL,0CAA0C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;QAC7F,iBAAiB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI;QAC1E,oBAAoB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC,SAAS,UAAU,gBAAgB,EAAE,CACjG,CAAC;AACJ,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,YAAY,CAC1B,QAAmB,EACnB,MAAkB,EAClB,SAAqB,EACrB,kBAA8B,EAC9B,QAAgB;IAEhB,OAAO,CACL,2CAA2C,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,CAAC,MAAM,CAAC,IAAI;QAC1F,iBAAiB,GAAG,CAAC,SAAS,CAAC,6BAA6B,GAAG,CAAC,kBAAkB,CAAC,gBAAgB,QAAQ,IAAI;QAC/G,8BAA8B,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAe;IAC5C,OAAO,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAiB;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACvC,IAAI,aAAa,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;YAClF,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;QACtC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC;QACzD,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAiB,EAAU,EAAE,CAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;AAE/E,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAE9C,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACrD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAkB,EAAE,KAAa,EAAE,IAAY;IACnE,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAChF,CAAC;AAED;;4DAE4D;AAC5D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAkB,EAAE,IAAY;IAC7D,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAkB,EAAE,IAAY;IACtD,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,IAAI,EAAwB,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC;YACxB,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;mCAEmC;AACnC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAkB,EAAE,IAAY,EAAE,OAAe;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACnD,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;YACvD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC"}