burnledger 0.8.0 → 0.9.0

package/dist/cjs/customer-keys.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Customer key groups (ADR-025 §2), computed on the customer's own machine.
+ *
+ * WHY THIS IS CLIENT-SIDE AND NOT AN API CALL. The private halves never leave
+ * the customer's machines -- that is the entire point of the mechanism. What a
+ * customer needs from us is not a service that computes their key id, but the
+ * ability to compute it themselves and compare it against the id the enclave
+ * signed. An id returned over HTTP would be an id the parent could choose, and
+ * the one comparison this design rests on would be checking our answer against
+ * our answer.
+ *
+ * WHY IT MUST MATCH GO EXACTLY. `customer_key_id` is derived independently by
+ * the enclave and by the customer. If the two derivations disagree by so much
+ * as a JSON separator, enrollment SUCCEEDS, the enclave signs a statement
+ * naming an id, and the customer's comparison fails -- indistinguishable, from
+ * where they are standing, from a parent having substituted their key. Every
+ * expectation in tests/customer-key-parity.test.ts comes from a corpus the Go
+ * generator writes by calling core itself.
+ */
+import type { CryptoOps } from "./crypto.js";
+/**
+ * Mirrors core.CustomerKeyIDPrefix. It distinguishes a customer's key id from
+ * an issuer key id, which are otherwise the same shape and would be confusable
+ * in a log line at exactly the wrong moment.
+ */
+export declare const CUSTOMER_KEY_ID_PREFIX = "cust_k_";
+/**
+ * Mirrors core.PayloadTypeKeyRotationRequest. v2 carries not_after, which bounds
+ * the request itself; a protocol-12 enclave refuses v1.
+ */
+export declare const PAYLOAD_TYPE_KEY_ROTATION_REQUEST = "burnledger.key_rotation_request.v2";
+/** Mirrors core.MaxCustomerKeyGroupMembers. */
+export declare const MAX_CUSTOMER_KEY_GROUP_MEMBERS = 16;
+/** A group that cannot be enrolled, for a reason stated in the message. */
+export declare class InvalidKeyGroupError extends Error {
+    constructor(message: string);
+}
+export interface CustomerKeyGroup {
+    /** How many distinct members must sign. 1 <= threshold <= members.length. */
+    threshold: number;
+    /**
+     * The enrolled public keys. Order is not significant: the id sorts the
+     * fingerprints, so two customers who list the same keys in a different order
+     * enrol the same group rather than two indistinguishable ones.
+     */
+    members: Uint8Array[];
+}
+/** hex(SHA-256(public key)) -- a member's identity inside a group. */
+export declare function memberFingerprint(crypto: CryptoOps, publicKey: Uint8Array): Promise<string>;
+/** Throws InvalidKeyGroupError unless this group could ever be used. */
+export declare function validateKeyGroup(crypto: CryptoOps, group: CustomerKeyGroup): Promise<void>;
+/** The members' fingerprints, sorted, so the id does not depend on order. */
+export declare function memberFingerprints(crypto: CryptoOps, group: CustomerKeyGroup): Promise<string[]>;
+/**
+ * The id the enclave will compute for this group.
+ *
+ * Throws rather than returning an id for a group that could never be enrolled:
+ * an id for an unusable group is a value a caller would go on to compare
+ * against, and it would never match anything.
+ */
+export declare function customerKeyId(crypto: CryptoOps, group: CustomerKeyGroup): Promise<string>;
+/**
+ * A request's `not_after` as Go signs it (core.KeyTimeFormat): UTC, whole
+ * seconds, the fraction truncated as Go's Format truncates it.
+ */
+export declare function keyTime(value: Date): string;
+/**
+ * The canonical bytes the OUTGOING group's members sign to authorise a rotation.
+ *
+ * This is the only payload in the scheme signed by the customer rather than by
+ * the enclave, so it is the only one where a signature captured elsewhere could
+ * be replayed into the mechanism -- hence its own payload type.
+ *
+ * Both ids are bound, not just the successor: a statement naming only the
+ * incoming key could be lifted onto a different predecessor, re-presenting the
+ * same signatures as though another group had approved it.
+ */
+export declare function buildKeyRotationRequestPayload(request: {
+    assertedTeamId: string;
+    prevKeyId: string;
+    nextKeyId: string;
+    /**
+     * Bounds the request: the enclave ends the successor's window no later than
+     * this and refuses the request once it has passed, so a replay cannot renew
+     * the window. Signed as whole seconds, UTC.
+     */
+    notAfter: Date;
+}): Uint8Array;
+/** Mirrors core.PayloadTypeKeyEnrollmentRequest. */
+export declare const PAYLOAD_TYPE_KEY_ENROLLMENT_REQUEST = "burnledger.key_enrollment_request.v1";
+/** Mirrors core.PayloadTypeSystemRegistrationRequest. */
+export declare const PAYLOAD_TYPE_SYSTEM_REGISTRATION_REQUEST = "burnledger.system_registration_request.v1";
+/**
+ * The canonical bytes EVERY member of a group signs to enrol it for a team.
+ *
+ * Port of core.BuildKeyEnrollmentRequestPayload. Without these signatures
+ * whoever relays the request could enrol public keys it does not hold — the
+ * customer's included — so the enclave demands one from each member, not a
+ * threshold: the statement it signs vouches for every key. `notAfter` is the
+ * latest the resulting authorization may end, and when the request itself stops
+ * being usable: the enclave cannot recognize a replay, so this is what keeps a
+ * relayed copy from renewing the window.
+ */
+export declare function buildKeyEnrollmentRequestPayload(request: {
+    assertedTeamId: string;
+    customerKeyId: string;
+    notAfter: Date;
+}): Uint8Array;
+/**
+ * The canonical bytes an enrolled group signs, at its threshold, to register one
+ * system under it.
+ *
+ * Port of core.BuildSystemRegistrationRequestPayload. Both digests are over bytes
+ * the CUSTOMER holds: `configDigest` is SHA-256 of the exact config bytes
+ * submitted when the system was created (the plaintext that was sealed), and
+ * `queryTemplateSha256` is SHA-256 of the template exactly as it will be sent —
+ * raw, not normalized. The enclave recomputes both from what it decrypted and
+ * was given, so a relay that substitutes either changes the bytes and the
+ * signatures fail.
+ */
+export declare function buildSystemRegistrationRequestPayload(request: {
+    assertedTeamId: string;
+    systemId: string;
+    configDigest: Uint8Array;
+    queryTemplateSha256: Uint8Array;
+    connectorType: string;
+    customerKeyId: string;
+}): Uint8Array;
+/**
+ * Verify the enclave's signature on a key enrolment statement (the `enrollment`
+ * object ENROLL_KEY and ROTATE_KEY return). Also refuses a statement whose
+ * `customer_key_id` is not the id its own group derives, as Go's payload
+ * builder does -- so a statement that verifies names exactly its members and
+ * threshold, and comparing its key id with yours compares those too.
+ */
+export declare function verifyKeyEnrollmentStatement(crypto: CryptoOps, statement: unknown, enclaveKey: Uint8Array): Promise<void>;
+/**
+ * Verify the enclave's signature on a team authorization (the `authorization`
+ * object ENROLL_KEY and ROTATE_KEY return). The signature only: whether it is
+ * in force now is a separate question, as in Go.
+ */
+export declare function verifyTeamAuthorization(crypto: CryptoOps, certificate: unknown, enclaveKey: Uint8Array): Promise<void>;
+/** Verify the enclave's signature on a system registration (the
+ * `registration` object REGISTER_SYSTEM returns). */
+export declare function verifySystemRegistration(crypto: CryptoOps, certificate: unknown, enclaveKey: Uint8Array): Promise<void>;
+//# sourceMappingURL=customer-keys.d.ts.map

package/dist/cjs/customer-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-keys.d.ts","sourceRoot":"","sources":["../../src/customer-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAShD;;;GAGG;AACH,eAAO,MAAM,iCAAiC,uCAAuC,CAAC;AAEtF,+CAA+C;AAC/C,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAIjD,2EAA2E;AAC3E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAMD,sEAAsE;AACtE,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wEAAwE;AACxE,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CA2Cf;AAED,6EAA6E;AAC7E,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM,CAK3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,EAAE,IAAI,CAAC;CAChB,GAAG,UAAU,CAqBb;AAiED,oDAAoD;AACpD,eAAO,MAAM,mCAAmC,yCAAyC,CAAC;AAC1F,yDAAyD;AACzD,eAAO,MAAM,wCAAwC,8CAA8C,CAAC;AA0BpG;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,IAAI,CAAC;CAChB,GAAG,UAAU,CAQb;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qCAAqC,CAAC,OAAO,EAAE;IAC7D,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,UAAU,CAAC;IACzB,mBAAmB,EAAE,UAAU,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,UAAU,CAab;AA2FD;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,OAAO,EAClB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,OAAO,EACpB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED;qDACqD;AACrD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,OAAO,EACpB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/cjs/customer-keys.js

@@ -0,0 +1,465 @@
+"use strict";
+/**
+ * Customer key groups (ADR-025 §2), computed on the customer's own machine.
+ *
+ * WHY THIS IS CLIENT-SIDE AND NOT AN API CALL. The private halves never leave
+ * the customer's machines -- that is the entire point of the mechanism. What a
+ * customer needs from us is not a service that computes their key id, but the
+ * ability to compute it themselves and compare it against the id the enclave
+ * signed. An id returned over HTTP would be an id the parent could choose, and
+ * the one comparison this design rests on would be checking our answer against
+ * our answer.
+ *
+ * WHY IT MUST MATCH GO EXACTLY. `customer_key_id` is derived independently by
+ * the enclave and by the customer. If the two derivations disagree by so much
+ * as a JSON separator, enrollment SUCCEEDS, the enclave signs a statement
+ * naming an id, and the customer's comparison fails -- indistinguishable, from
+ * where they are standing, from a parent having substituted their key. Every
+ * expectation in tests/customer-key-parity.test.ts comes from a corpus the Go
+ * generator writes by calling core itself.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PAYLOAD_TYPE_SYSTEM_REGISTRATION_REQUEST = exports.PAYLOAD_TYPE_KEY_ENROLLMENT_REQUEST = exports.InvalidKeyGroupError = exports.MAX_CUSTOMER_KEY_GROUP_MEMBERS = exports.PAYLOAD_TYPE_KEY_ROTATION_REQUEST = exports.CUSTOMER_KEY_ID_PREFIX = void 0;
+exports.memberFingerprint = memberFingerprint;
+exports.validateKeyGroup = validateKeyGroup;
+exports.memberFingerprints = memberFingerprints;
+exports.customerKeyId = customerKeyId;
+exports.keyTime = keyTime;
+exports.buildKeyRotationRequestPayload = buildKeyRotationRequestPayload;
+exports.buildKeyEnrollmentRequestPayload = buildKeyEnrollmentRequestPayload;
+exports.buildSystemRegistrationRequestPayload = buildSystemRegistrationRequestPayload;
+exports.verifyKeyEnrollmentStatement = verifyKeyEnrollmentStatement;
+exports.verifyTeamAuthorization = verifyTeamAuthorization;
+exports.verifySystemRegistration = verifySystemRegistration;
+const verify_js_1 = require("./verify.js");
+const errors_js_1 = require("./errors.js");
+/**
+ * Mirrors core.CustomerKeyIDPrefix. It distinguishes a customer's key id from
+ * an issuer key id, which are otherwise the same shape and would be confusable
+ * in a log line at exactly the wrong moment.
+ */
+exports.CUSTOMER_KEY_ID_PREFIX = "cust_k_";
+/**
+ * Mirrors core.payloadTypeCustomerKeyGroup. Unexported in Go because it is
+ * never signed or transmitted -- only hashed -- but it IS inside the hash, so a
+ * reimplementation that omits it computes a different id for every group.
+ */
+const PAYLOAD_TYPE_CUSTOMER_KEY_GROUP = "burnledger.customer_key_group.v1";
+/**
+ * Mirrors core.PayloadTypeKeyRotationRequest. v2 carries not_after, which bounds
+ * the request itself; a protocol-12 enclave refuses v1.
+ */
+exports.PAYLOAD_TYPE_KEY_ROTATION_REQUEST = "burnledger.key_rotation_request.v2";
+/** Mirrors core.MaxCustomerKeyGroupMembers. */
+exports.MAX_CUSTOMER_KEY_GROUP_MEMBERS = 16;
+const ED25519_PUBLIC_KEY_SIZE = 32;
+/** A group that cannot be enrolled, for a reason stated in the message. */
+class InvalidKeyGroupError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "InvalidKeyGroupError";
+    }
+}
+exports.InvalidKeyGroupError = InvalidKeyGroupError;
+function toHex(bytes) {
+    return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+/** hex(SHA-256(public key)) -- a member's identity inside a group. */
+async function memberFingerprint(crypto, publicKey) {
+    return toHex(await crypto.sha256(publicKey));
+}
+/** Throws InvalidKeyGroupError unless this group could ever be used. */
+async function validateKeyGroup(crypto, group) {
+    if (group.members.length === 0) {
+        throw new InvalidKeyGroupError("a customer key group needs at least one member");
+    }
+    if (group.members.length > exports.MAX_CUSTOMER_KEY_GROUP_MEMBERS) {
+        throw new InvalidKeyGroupError(`a customer key group may have at most ${exports.MAX_CUSTOMER_KEY_GROUP_MEMBERS} members, ` +
+            `got ${group.members.length}`);
+    }
+    if (!Number.isInteger(group.threshold) ||
+        group.threshold < 1 ||
+        group.threshold > group.members.length) {
+        throw new InvalidKeyGroupError(`threshold ${group.threshold} is not between 1 and the ${group.members.length} members`);
+    }
+    const seen = new Set();
+    for (const member of group.members) {
+        if (member.length !== ED25519_PUBLIC_KEY_SIZE) {
+            throw new InvalidKeyGroupError(`every member must be a ${ED25519_PUBLIC_KEY_SIZE}-byte Ed25519 key`);
+        }
+        if (!isNotSmallOrder(member)) {
+            // A small-order key is held by nobody: with the identity point as the
+            // public key, R = identity and S = 0 verify over ANY message, so it
+            // would pass proof of possession and count toward a threshold for free.
+            throw new InvalidKeyGroupError("every member must be an Ed25519 public key on the curve and not of small order " +
+                "(small-order and off-curve keys are refused)");
+        }
+        const fingerprint = await memberFingerprint(crypto, member);
+        if (seen.has(fingerprint)) {
+            // A repeated member would let one holder satisfy a threshold meant to
+            // require several, which is the entire point of one.
+            throw new InvalidKeyGroupError("the same member key is listed twice");
+        }
+        seen.add(fingerprint);
+    }
+}
+/** The members' fingerprints, sorted, so the id does not depend on order. */
+async function memberFingerprints(crypto, group) {
+    const out = [];
+    for (const member of group.members) {
+        out.push(await memberFingerprint(crypto, member));
+    }
+    return out.sort();
+}
+/**
+ * The id the enclave will compute for this group.
+ *
+ * Throws rather than returning an id for a group that could never be enrolled:
+ * an id for an unusable group is a value a caller would go on to compare
+ * against, and it would never match anything.
+ */
+async function customerKeyId(crypto, group) {
+    await validateKeyGroup(crypto, group);
+    const document = {
+        member_key_ids: await memberFingerprints(crypto, group),
+        payload_type: PAYLOAD_TYPE_CUSTOMER_KEY_GROUP,
+        threshold: group.threshold,
+    };
+    return exports.CUSTOMER_KEY_ID_PREFIX + toHex(await crypto.sha256((0, verify_js_1.canonicalJson)(document)));
+}
+/**
+ * A request's `not_after` as Go signs it (core.KeyTimeFormat): UTC, whole
+ * seconds, the fraction truncated as Go's Format truncates it.
+ */
+function keyTime(value) {
+    if (!(value instanceof Date) || Number.isNaN(value.getTime())) {
+        throw new Error("not_after is required");
+    }
+    return value.toISOString().slice(0, 19) + "Z";
+}
+/**
+ * The canonical bytes the OUTGOING group's members sign to authorise a rotation.
+ *
+ * This is the only payload in the scheme signed by the customer rather than by
+ * the enclave, so it is the only one where a signature captured elsewhere could
+ * be replayed into the mechanism -- hence its own payload type.
+ *
+ * Both ids are bound, not just the successor: a statement naming only the
+ * incoming key could be lifted onto a different predecessor, re-presenting the
+ * same signatures as though another group had approved it.
+ */
+function buildKeyRotationRequestPayload(request) {
+    if (!request.prevKeyId || !request.nextKeyId) {
+        throw new Error("a rotation request names both the key being replaced and its replacement");
+    }
+    if (!(request.notAfter instanceof Date) || Number.isNaN(request.notAfter.getTime())) {
+        throw new Error("not_after is required");
+    }
+    if (request.prevKeyId === request.nextKeyId) {
+        // A self-rotation is a cycle in the chain the enclave walks, and it walks
+        // without a visited set.
+        throw new Error("a rotation request cannot name the same key as both predecessor and successor");
+    }
+    return (0, verify_js_1.canonicalJson)({
+        asserted_team_id: canonicalUuid(request.assertedTeamId, "assertedTeamId"),
+        next_key_id: request.nextKeyId,
+        not_after: keyTime(request.notAfter),
+        payload_type: exports.PAYLOAD_TYPE_KEY_ROTATION_REQUEST,
+        prev_key_id: request.prevKeyId,
+    });
+}
+// Ed25519 arithmetic for one question only: is a member key a curve point
+// outside the small-order subgroup? It mirrors the decoding Go's
+// filippo.io/edwards25519 performs in core.CustomerKeyGroup.Validate, so both
+// sides refuse exactly the same keys: bit 255 of y is ignored and y is reduced
+// mod p (non-canonical encodings are accepted), a y with no matching x is
+// refused, and the sign bit selects the negative root even when x = 0.
+const FIELD_P = 2n ** 255n - 19n;
+const fieldMod = (a) => ((a % FIELD_P) + FIELD_P) % FIELD_P;
+function fieldPow(base, exp) {
+    let result = 1n;
+    let b = fieldMod(base);
+    for (let e = exp; e > 0n; e >>= 1n) {
+        if (e & 1n)
+            result = (result * b) % FIELD_P;
+        b = (b * b) % FIELD_P;
+    }
+    return result;
+}
+const fieldInv = (a) => fieldPow(a, FIELD_P - 2n);
+const CURVE_D = fieldMod(-121665n * fieldInv(121666n));
+const SQRT_MINUS_ONE = fieldPow(2n, (FIELD_P - 1n) / 4n);
+function decodePoint(bytes) {
+    // validateKeyGroup has already required exactly 32 bytes.
+    const top = bytes[31] ?? 0;
+    let y = 0n;
+    for (let i = 31; i >= 0; i--) {
+        y = (y << 8n) | BigInt(i === 31 ? top & 0x7f : (bytes[i] ?? 0));
+    }
+    y = fieldMod(y);
+    const u = fieldMod(y * y - 1n);
+    const v = fieldMod(CURVE_D * y * y + 1n);
+    let x = fieldMod(u * fieldPow(v, 3n) * fieldPow(u * fieldPow(v, 7n), (FIELD_P - 5n) / 8n));
+    const vx2 = fieldMod(v * x * x);
+    if (vx2 === fieldMod(-u)) {
+        x = fieldMod(x * SQRT_MINUS_ONE);
+    }
+    else if (vx2 !== u) {
+        return null;
+    }
+    if (Number(x & 1n) !== top >> 7)
+        x = fieldMod(-x);
+    return [x, y];
+}
+// The complete twisted-Edwards addition law (a = -1); its denominators are
+// never zero because d is not a square.
+function addPoints(p, q) {
+    const t = fieldMod(CURVE_D * p[0] * q[0] * p[1] * q[1]);
+    return [
+        fieldMod((p[0] * q[1] + p[1] * q[0]) * fieldInv(1n + t)),
+        fieldMod((p[1] * q[1] + p[0] * q[0]) * fieldInv(fieldMod(1n - t))),
+    ];
+}
+/**
+ * Whether key decodes to a curve point that is not of small order (8·P ≠ identity).
+ * Not a prime-order check: a mixed-order key passes, as it does in Go.
+ */
+function isNotSmallOrder(key) {
+    let point = decodePoint(key);
+    if (point === null)
+        return false;
+    for (let i = 0; i < 3; i++)
+        point = addPoints(point, point);
+    return !(point[0] === 0n && point[1] === 1n);
+}
+/** Mirrors core.PayloadTypeKeyEnrollmentRequest. */
+exports.PAYLOAD_TYPE_KEY_ENROLLMENT_REQUEST = "burnledger.key_enrollment_request.v1";
+/** Mirrors core.PayloadTypeSystemRegistrationRequest. */
+exports.PAYLOAD_TYPE_SYSTEM_REGISTRATION_REQUEST = "burnledger.system_registration_request.v1";
+const UUID_RE = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+const NIL_UUID = "00000000-0000-0000-0000-000000000000";
+/**
+ * A UUID in the one form Go prints it (uuid.UUID.String()): lowercase and
+ * hyphenated. The enclave rebuilds every customer-signed payload from the
+ * uuid.UUID it parsed, so a team id signed as the caller happened to type it —
+ * uppercase, say — would be different bytes, and the refusal would be a 401 with
+ * nothing in it to say why.
+ */
+function canonicalUuid(value, field) {
+    if (typeof value !== "string" || !UUID_RE.test(value)) {
+        throw new Error(`${field} must be a UUID, got ${JSON.stringify(value)}`);
+    }
+    return value.toLowerCase();
+}
+function requireSha256(value, field) {
+    if (!(value instanceof Uint8Array) || value.length !== 32) {
+        throw new Error(`${field} must be a 32-byte SHA-256 digest`);
+    }
+    return toHex(value);
+}
+/**
+ * The canonical bytes EVERY member of a group signs to enrol it for a team.
+ *
+ * Port of core.BuildKeyEnrollmentRequestPayload. Without these signatures
+ * whoever relays the request could enrol public keys it does not hold — the
+ * customer's included — so the enclave demands one from each member, not a
+ * threshold: the statement it signs vouches for every key. `notAfter` is the
+ * latest the resulting authorization may end, and when the request itself stops
+ * being usable: the enclave cannot recognize a replay, so this is what keeps a
+ * relayed copy from renewing the window.
+ */
+function buildKeyEnrollmentRequestPayload(request) {
+    if (!request.customerKeyId)
+        throw new Error("customer_key_id is required");
+    return (0, verify_js_1.canonicalJson)({
+        asserted_team_id: canonicalUuid(request.assertedTeamId, "assertedTeamId"),
+        customer_key_id: request.customerKeyId,
+        not_after: keyTime(request.notAfter),
+        payload_type: exports.PAYLOAD_TYPE_KEY_ENROLLMENT_REQUEST,
+    });
+}
+/**
+ * The canonical bytes an enrolled group signs, at its threshold, to register one
+ * system under it.
+ *
+ * Port of core.BuildSystemRegistrationRequestPayload. Both digests are over bytes
+ * the CUSTOMER holds: `configDigest` is SHA-256 of the exact config bytes
+ * submitted when the system was created (the plaintext that was sealed), and
+ * `queryTemplateSha256` is SHA-256 of the template exactly as it will be sent —
+ * raw, not normalized. The enclave recomputes both from what it decrypted and
+ * was given, so a relay that substitutes either changes the bytes and the
+ * signatures fail.
+ */
+function buildSystemRegistrationRequestPayload(request) {
+    if (!request.customerKeyId)
+        throw new Error("customer_key_id is required");
+    const systemId = canonicalUuid(request.systemId, "systemId");
+    if (systemId === NIL_UUID)
+        throw new Error("system_id is required");
+    return (0, verify_js_1.canonicalJson)({
+        asserted_team_id: canonicalUuid(request.assertedTeamId, "assertedTeamId"),
+        config_digest: requireSha256(request.configDigest, "configDigest"),
+        connector_type: request.connectorType,
+        customer_key_id: request.customerKeyId,
+        payload_type: exports.PAYLOAD_TYPE_SYSTEM_REGISTRATION_REQUEST,
+        query_template_sha256: requireSha256(request.queryTemplateSha256, "queryTemplateSha256"),
+        system_id: systemId,
+    });
+}
+// --- The documents the ENCLAVE signs -----------------------------------------
+//
+// Ports of core.VerifyKeyEnrollment, core.VerifyTeamAuthorization and
+// core.VerifySystemRegistration. Each takes the key rather than finding one, as
+// Go's do: a document that names the key vouching for it proves only that its
+// author holds that key. The key to pass is the signing key of an enclave you
+// attested against your pinned PCR0 (EnclaveIdentity.signingKey) -- the client's
+// enrol, rotate and register calls use exactly that. Each reads the document as
+// the API returns it, because the signed bytes are rebuilt from the wire
+// strings (whole-second UTC timestamps, lowercase UUIDs), and throws
+// VerificationError on anything that does not verify.
+// v2 from wire protocol 12, and v2 is the only version a protocol-12 enclave
+// issues or honors: a v1 document could have been minted by an earlier image
+// without the customer's signature.
+const PAYLOAD_TYPE_KEY_ENROLLMENT = "burnledger.key_enrollment.v2";
+const PAYLOAD_TYPE_TEAM_AUTHORIZATION = "burnledger.team_authorization.v2";
+const PAYLOAD_TYPE_SYSTEM_REGISTRATION = "burnledger.system_registration.v2";
+function docObject(value, what) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new errors_js_1.VerificationError(`${what} is not an object`);
+    }
+    return value;
+}
+function docString(doc, what, field) {
+    const value = doc[field];
+    if (typeof value !== "string")
+        throw new errors_js_1.VerificationError(`${what}.${field} is not a string`);
+    return value;
+}
+function docKeyId(doc, what) {
+    const value = docString(doc, what, "customer_key_id");
+    if (value === "")
+        throw new errors_js_1.VerificationError(`${what}.customer_key_id is empty`);
+    return value;
+}
+function docUuid(doc, what, field) {
+    const value = docString(doc, what, field);
+    if (!UUID_RE.test(value))
+        throw new errors_js_1.VerificationError(`${what}.${field} is not a UUID`);
+    return value.toLowerCase();
+}
+/** Go encodes [N]byte as an array of numbers. */
+function docBytes(doc, what, field, length) {
+    const value = doc[field];
+    if (!Array.isArray(value) ||
+        value.length !== length ||
+        !value.every((b) => Number.isInteger(b) && b >= 0 && b <= 255)) {
+        throw new errors_js_1.VerificationError(`${what}.${field} is not ${length} bytes`);
+    }
+    return new Uint8Array(value);
+}
+/** Go encodes []byte as padded standard base64. */
+function base64Bytes(value, what) {
+    if (typeof value !== "string" || value.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(value)) {
+        throw new errors_js_1.VerificationError(`${what} is not base64`);
+    }
+    const bin = atob(value);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+async function requireEnclaveSignature(crypto, enclaveKey, payload, signature, what) {
+    if (!(enclaveKey instanceof Uint8Array) || enclaveKey.length !== ED25519_PUBLIC_KEY_SIZE) {
+        throw new TypeError(`enclaveKey must be a ${ED25519_PUBLIC_KEY_SIZE}-byte Ed25519 public key`);
+    }
+    if (!(await crypto.ed25519Verify(enclaveKey, payload, signature))) {
+        const keyId = "dp_k_" + toHex(await crypto.sha256(enclaveKey));
+        throw new errors_js_1.VerificationError(`the ${what} is not signed by enclave key ${keyId}. Do not use it: a relay that ` +
+            "forged or altered one would produce exactly this.");
+    }
+}
+/**
+ * Verify the enclave's signature on a key enrolment statement (the `enrollment`
+ * object ENROLL_KEY and ROTATE_KEY return). Also refuses a statement whose
+ * `customer_key_id` is not the id its own group derives, as Go's payload
+ * builder does -- so a statement that verifies names exactly its members and
+ * threshold, and comparing its key id with yours compares those too.
+ */
+async function verifyKeyEnrollmentStatement(crypto, statement, enclaveKey) {
+    const what = "enrollment";
+    const doc = docObject(statement, what);
+    const rawGroup = docObject(doc.group, `${what}.group`);
+    if (!Array.isArray(rawGroup.members))
+        throw new errors_js_1.VerificationError(`${what}.group.members is not an array`);
+    const group = {
+        threshold: rawGroup.threshold,
+        members: rawGroup.members.map((m, i) => base64Bytes(m, `${what}.group.members[${i}]`)),
+    };
+    let derived;
+    try {
+        derived = await customerKeyId(crypto, group);
+    }
+    catch (err) {
+        if (err instanceof InvalidKeyGroupError)
+            throw new errors_js_1.VerificationError(`${what}.group: ${err.message}`);
+        throw err;
+    }
+    const keyId = docKeyId(doc, what);
+    if (keyId !== derived) {
+        throw new errors_js_1.VerificationError(`${what}.customer_key_id ${keyId} is not the id its own group derives (${derived})`);
+    }
+    const payload = (0, verify_js_1.canonicalJson)({
+        asserted_team_id: docUuid(doc, what, "asserted_team_id"),
+        customer_key_id: keyId,
+        enclave_pcr0: docString(doc, what, "enclave_pcr0"),
+        enrolled_at: (0, verify_js_1.formatTimestamp)(doc.enrolled_at, `${what}.enrolled_at`),
+        member_key_ids: await memberFingerprints(crypto, group),
+        payload_type: PAYLOAD_TYPE_KEY_ENROLLMENT,
+        threshold: group.threshold,
+    });
+    await requireEnclaveSignature(crypto, enclaveKey, payload, docBytes(doc, what, "signature", 64), "enrollment statement");
+}
+/**
+ * Verify the enclave's signature on a team authorization (the `authorization`
+ * object ENROLL_KEY and ROTATE_KEY return). The signature only: whether it is
+ * in force now is a separate question, as in Go.
+ */
+async function verifyTeamAuthorization(crypto, certificate, enclaveKey) {
+    const what = "authorization";
+    const doc = docObject(certificate, what);
+    const notBefore = (0, verify_js_1.formatTimestamp)(doc.not_before, `${what}.not_before`);
+    const notAfter = (0, verify_js_1.formatTimestamp)(doc.not_after, `${what}.not_after`);
+    // Go compares at full precision; the whole-second strings disagree with it
+    // only for a window shorter than a second, which no enclave issues.
+    if (notAfter <= notBefore)
+        throw new errors_js_1.VerificationError(`${what}.not_after is not after not_before`);
+    // prev_key_id is omitempty in Go: absent on a first enrolment, and absent
+    // from the signed payload too.
+    const prevKeyId = doc.prev_key_id == null ? "" : docString(doc, what, "prev_key_id");
+    const payload = (0, verify_js_1.canonicalJson)({
+        asserted_team_id: docUuid(doc, what, "asserted_team_id"),
+        customer_key_id: docKeyId(doc, what),
+        not_after: notAfter,
+        not_before: notBefore,
+        payload_type: PAYLOAD_TYPE_TEAM_AUTHORIZATION,
+        ...(prevKeyId === "" ? {} : { prev_key_id: prevKeyId }),
+    });
+    await requireEnclaveSignature(crypto, enclaveKey, payload, docBytes(doc, what, "signature", 64), "team authorization");
+}
+/** Verify the enclave's signature on a system registration (the
+ * `registration` object REGISTER_SYSTEM returns). */
+async function verifySystemRegistration(crypto, certificate, enclaveKey) {
+    const what = "registration";
+    const doc = docObject(certificate, what);
+    const payload = (0, verify_js_1.canonicalJson)({
+        config_digest: toHex(docBytes(doc, what, "config_digest", 32)),
+        connector_type: docString(doc, what, "connector_type"),
+        customer_key_id: docKeyId(doc, what),
+        payload_type: PAYLOAD_TYPE_SYSTEM_REGISTRATION,
+        query_template_hash: toHex(docBytes(doc, what, "query_template_hash", 32)),
+        registered_at: (0, verify_js_1.formatTimestamp)(doc.registered_at, `${what}.registered_at`),
+        system_id: docUuid(doc, what, "system_id"),
+    });
+    await requireEnclaveSignature(crypto, enclaveKey, payload, docBytes(doc, what, "signature", 64), "system registration");
+}
+//# sourceMappingURL=customer-keys.js.map

package/dist/cjs/customer-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-keys.js","sourceRoot":"","sources":["../../src/customer-keys.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;;;;;;;;;;;AAEH,2CAA6D;AAE7D,2CAAgD;AAEhD;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,SAAS,CAAC;AAEhD;;;;GAIG;AACH,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAE3E;;;GAGG;AACU,QAAA,iCAAiC,GAAG,oCAAoC,CAAC;AAEtF,+CAA+C;AAClC,QAAA,8BAA8B,GAAG,EAAE,CAAC;AAEjD,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,2EAA2E;AAC3E,0BAAkC,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;;AAaD,SAAS,KAAK,CAAC,KAAiB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,sEAAsE;AAC/D,KAAK,4BACV,MAAiB,EACjB,SAAqB;IAErB,OAAO,KAAK,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,wEAAwE;AACjE,KAAK,2BACV,MAAiB,EACjB,KAAuB;IAEvB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,oBAAoB,CAAC,gDAAgD,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,QAAA,8BAA8B,EAAE,CAAC;QAC1D,MAAM,IAAI,oBAAoB,CAC5B,yCAAyC,QAAA,8BAA8B,YAAY;YACjF,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAChC,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;QAClC,KAAK,CAAC,SAAS,GAAG,CAAC;QACnB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EACtC,CAAC;QACD,MAAM,IAAI,oBAAoB,CAC5B,aAAa,KAAK,CAAC,SAAS,6BAA6B,KAAK,CAAC,OAAO,CAAC,MAAM,UAAU,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;YAC9C,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,uBAAuB,mBAAmB,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,sEAAsE;YACtE,oEAAoE;YACpE,wEAAwE;YACxE,MAAM,IAAI,oBAAoB,CAC5B,iFAAiF;gBAC/E,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1B,sEAAsE;YACtE,qDAAqD;YACrD,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,6EAA6E;AACtE,KAAK,6BACV,MAAiB,EACjB,KAAuB;IAEvB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACI,KAAK,wBACV,MAAiB,EACjB,KAAuB;IAEvB,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG;QACf,cAAc,EAAE,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC;QACvD,YAAY,EAAE,+BAA+B;QAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,OAAO,QAAA,sBAAsB,GAAG,KAAK,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAA,yBAAa,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,iBAAwB,KAAW;IACjC,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;AAChD,CAAC;AAED;;;;;;;;;;GAUG;AACH,wCAA+C,OAU9C;IACC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,YAAY,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5C,0EAA0E;QAC1E,yBAAyB;QACzB,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,yBAAa,EAAC;QACnB,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACzE,WAAW,EAAE,OAAO,CAAC,SAAS;QAC9B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpC,YAAY,EAAE,QAAA,iCAAiC;QAC/C,WAAW,EAAE,OAAO,CAAC,SAAS;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,iEAAiE;AACjE,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,uEAAuE;AACvE,MAAM,OAAO,GAAG,EAAE,IAAI,IAAI,GAAG,GAAG,CAAC;AACjC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC;AAC5E,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW;IACzC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;QAC5C,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,EAAE,CAAC,CAAC;AAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACvD,MAAM,cAAc,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;AAEzD,SAAS,WAAW,CAAC,KAAiB;IACpC,0DAA0D;IAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC;IACnC,CAAC;SAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC;QAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,wCAAwC;AACxC,SAAS,SAAS,CAAC,CAAmB,EAAE,CAAmB;IACzD,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;KACnE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAe;IACtC,IAAI,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,oDAAoD;AACvC,QAAA,mCAAmC,GAAG,sCAAsC,CAAC;AAC1F,yDAAyD;AAC5C,QAAA,wCAAwC,GAAG,2CAA2C,CAAC;AAEpG,MAAM,OAAO,GAAG,+EAA+E,CAAC;AAChG,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AAExD;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB,EAAE,KAAa;IACrD,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;;;;GAUG;AACH,0CAAiD,OAIhD;IACC,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC3E,OAAO,IAAA,yBAAa,EAAC;QACnB,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACzE,eAAe,EAAE,OAAO,CAAC,aAAa;QACtC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpC,YAAY,EAAE,QAAA,mCAAmC;KAClD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,+CAAsD,OAOrD;IACC,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpE,OAAO,IAAA,yBAAa,EAAC;QACnB,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACzE,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC;QAClE,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,eAAe,EAAE,OAAO,CAAC,aAAa;QACtC,YAAY,EAAE,QAAA,wCAAwC;QACtD,qBAAqB,EAAE,aAAa,CAAC,OAAO,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;QACxF,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,EAAE;AACF,sEAAsE;AACtE,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,iFAAiF;AACjF,gFAAgF;AAChF,yEAAyE;AACzE,qEAAqE;AACrE,sDAAsD;AAEtD,6EAA6E;AAC7E,6EAA6E;AAC7E,oCAAoC;AACpC,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AACnE,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAC3E,MAAM,gCAAgC,GAAG,mCAAmC,CAAC;AAI7E,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,GAAQ,EAAE,IAAY,EAAE,KAAa;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,IAAI,KAAK,kBAAkB,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,GAAQ,EAAE,IAAY;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;IAClF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,GAAQ,EAAE,IAAY,EAAE,KAAa;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AAED,iDAAiD;AACjD,SAAS,QAAQ,CAAC,GAAQ,EAAE,IAAY,EAAE,KAAa,EAAE,MAAc;IACrE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,IAAI,KAAK,WAAW,MAAM,QAAQ,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,KAAiB,CAAC,CAAC;AAC3C,CAAC;AAED,mDAAmD;AACnD,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,gBAAgB,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,MAAiB,EACjB,UAAsB,EACtB,OAAmB,EACnB,SAAqB,EACrB,IAAY;IAEZ,IAAI,CAAC,CAAC,UAAU,YAAY,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,wBAAwB,uBAAuB,0BAA0B,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/D,MAAM,IAAI,6BAAiB,CACzB,OAAO,IAAI,iCAAiC,KAAK,gCAAgC;YAC/E,mDAAmD,CACtD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,uCACV,MAAiB,EACjB,SAAkB,EAClB,UAAsB;IAEtB,MAAM,IAAI,GAAG,YAAY,CAAC;IAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAqB;QAC9B,SAAS,EAAE,QAAQ,CAAC,SAAmB;QACvC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;KACvF,CAAC;IACF,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB;YAAE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,WAAW,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtG,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,oBAAoB,KAAK,yCAAyC,OAAO,GAAG,CAAC,CAAC;IACnH,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,yBAAa,EAAC;QAC5B,gBAAgB,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAkB,CAAC;QACxD,eAAe,EAAE,KAAK;QACtB,YAAY,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC;QAClD,WAAW,EAAE,IAAA,2BAAe,EAAC,GAAG,CAAC,WAAW,EAAE,GAAG,IAAI,cAAc,CAAC;QACpE,cAAc,EAAE,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC;QACvD,YAAY,EAAE,2BAA2B;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,MAAM,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAC3H,CAAC;AAED;;;;GAIG;AACI,KAAK,kCACV,MAAiB,EACjB,WAAoB,EACpB,UAAsB;IAEtB,MAAM,IAAI,GAAG,eAAe,CAAC;IAC7B,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,GAAG,CAAC,UAAU,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAA,2BAAe,EAAC,GAAG,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;IACrE,2EAA2E;IAC3E,oEAAoE;IACpE,IAAI,QAAQ,IAAI,SAAS;QAAE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;IACpG,0EAA0E;IAC1E,+BAA+B;IAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,IAAA,yBAAa,EAAC;QAC5B,gBAAgB,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAkB,CAAC;QACxD,eAAe,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;QACpC,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,+BAA+B;QAC7C,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,MAAM,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACzH,CAAC;AAED;qDACqD;AAC9C,KAAK,mCACV,MAAiB,EACjB,WAAoB,EACpB,UAAsB;IAEtB,MAAM,IAAI,GAAG,cAAc,CAAC;IAC5B,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAA,yBAAa,EAAC;QAC5B,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QAC9D,cAAc,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC;QACtD,eAAe,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;QACpC,YAAY,EAAE,gCAAgC;QAC9C,mBAAmB,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;QAC1E,aAAa,EAAE,IAAA,2BAAe,EAAC,GAAG,CAAC,aAAa,EAAE,GAAG,IAAI,gBAAgB,CAAC;QAC1E,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC;KAC3C,CAAC,CAAC;IACH,MAAM,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAC;AAC1H,CAAC"}