canary-kit 0.9.0

package/dist/sync.js

@@ -0,0 +1,568 @@
+// Transport-agnostic sync message protocol
+export { deriveGroupKey, deriveGroupSigningKey, hashGroupTag, encryptEnvelope, decryptEnvelope } from './sync-crypto.js';
+import { bytesToHex, hexToBytes } from './crypto.js';
+import { addMember, removeMember } from './group.js';
+const VALID_TYPES = new Set([
+    'member-join', 'member-leave', 'counter-advance',
+    'reseed', 'beacon', 'duress-alert', 'duress-clear', 'liveness-checkin', 'state-snapshot',
+]);
+/**
+ * Message types that mutate group state or are safety-critical.
+ * These MUST be delivered to offline devices — use a stored event kind.
+ * Fire-and-forget messages (beacons, liveness) use ephemeral kinds.
+ */
+export const STORED_MESSAGE_TYPES = new Set([
+    'member-join', 'member-leave', 'counter-advance', 'reseed',
+    'state-snapshot', 'duress-alert', 'duress-clear',
+]);
+/** 64-character lowercase hex string (32 bytes — Nostr pubkey or CANARY seed). */
+const HEX_64_RE = /^[0-9a-f]{64}$/;
+const MAX_COUNTER_ADVANCE_OFFSET = 100;
+const MAX_MEMBERS = 100;
+const MAX_BEACON_ACCURACY_METERS = 20_000_000;
+const MAX_TAG_LENGTH = 256;
+/** Maximum age (in seconds) for fire-and-forget messages before they are dropped. */
+export const FIRE_AND_FORGET_FRESHNESS_SEC = 300;
+/** Maximum allowed future skew (in seconds) for fire-and-forget timestamps. */
+export const MAX_FUTURE_SKEW_SEC = 60;
+/** Maximum consumedOps entries per epoch before oldest are evicted. */
+const MAX_CONSUMED_OPS = 1000;
+function appendConsumedOp(ops, opId, timestamp, currentFloor) {
+    const next = [...ops, opId];
+    if (next.length > MAX_CONSUMED_OPS) {
+        return {
+            consumedOps: next.slice(-MAX_CONSUMED_OPS),
+            consumedOpsFloor: Math.max(currentFloor ?? 0, timestamp),
+        };
+    }
+    return { consumedOps: next, consumedOpsFloor: currentFloor };
+}
+/** Current protocol version. Bump on any breaking wire format change. */
+export const PROTOCOL_VERSION = 2;
+function isFiniteNumber(value) {
+    return typeof value === 'number' && Number.isFinite(value);
+}
+function isNonNegativeInt(value) {
+    return isFiniteNumber(value) && Number.isInteger(value) && value >= 0;
+}
+// ── Serialisation ─────────────────────────────────────────────
+/**
+ * Encode a sync message as a JSON string for transport.
+ * Binary fields (seed) are hex-encoded for safe JSON round-tripping.
+ *
+ * @param msg - The sync message to serialise.
+ * @returns JSON string with protocolVersion injected and binary fields hex-encoded.
+ */
+export function encodeSyncMessage(msg) {
+    const versioned = { ...msg, protocolVersion: PROTOCOL_VERSION };
+    if (msg.type === 'reseed') {
+        const { seed: _seed, ...rest } = versioned;
+        return JSON.stringify({ ...rest, seed: bytesToHex(msg.seed) });
+    }
+    return JSON.stringify(versioned);
+}
+/**
+ * Recursively produce a JSON string with sorted keys and no whitespace.
+ * Handles nested objects, arrays (elements stringified recursively), and
+ * all JSON-safe primitives. Used for deterministic signing (H2).
+ *
+ * @param value - Any JSON-serialisable value (null, boolean, number, string, array, or plain object).
+ * @returns Deterministic JSON string with sorted keys and no whitespace.
+ * @throws {Error} If value contains a Uint8Array (must be hex-encoded first) or unsupported type.
+ */
+export function stableStringify(value) {
+    if (value === null || value === undefined)
+        return 'null';
+    if (typeof value === 'boolean' || typeof value === 'number')
+        return JSON.stringify(value);
+    if (typeof value === 'string')
+        return JSON.stringify(value);
+    if (Array.isArray(value)) {
+        return '[' + value.map(stableStringify).join(',') + ']';
+    }
+    if (value instanceof Uint8Array) {
+        throw new Error('stableStringify: Uint8Array must be hex-encoded before serialisation');
+    }
+    if (typeof value === 'object') {
+        const obj = value;
+        const keys = Object.keys(obj).sort();
+        const pairs = keys
+            .filter(k => obj[k] !== undefined)
+            .map(k => JSON.stringify(k) + ':' + stableStringify(obj[k]));
+        return '{' + pairs.join(',') + '}';
+    }
+    throw new Error(`stableStringify: unsupported type ${typeof value}`);
+}
+/**
+ * Return the canonical string representation of a sync message for signing.
+ * Keys are sorted recursively, no whitespace. Binary fields are hex-encoded.
+ * The message's protocolVersion field is preserved as-is — the send side
+ * (encodeSyncMessage) is responsible for injecting PROTOCOL_VERSION before
+ * both encode and sign, so the canonical bytes always reflect the actual
+ * wire value. This is the format that inner signatures are computed over (H2).
+ *
+ * @param msg - The sync message to canonicalise.
+ * @returns Deterministic JSON string with sorted keys and no whitespace.
+ */
+export function canonicaliseSyncMessage(msg) {
+    if (msg.type === 'reseed') {
+        const { seed, ...rest } = msg;
+        return stableStringify({ ...rest, seed: bytesToHex(seed) });
+    }
+    return stableStringify(msg);
+}
+/**
+ * Decode a sync message from a JSON string.
+ * Throws on invalid or unrecognised messages.
+ *
+ * @param payload - JSON string to decode.
+ * @returns Validated {@link SyncMessage} with correct types (e.g. reseed.seed as Uint8Array).
+ * @throws {Error} If JSON is invalid, message type is unrecognised, required fields are missing, or protocolVersion does not match.
+ */
+export function decodeSyncMessage(payload) {
+    let parsed;
+    try {
+        parsed = JSON.parse(payload);
+    }
+    catch {
+        throw new Error('Invalid sync message: not valid JSON');
+    }
+    const type = parsed.type;
+    if (typeof type !== 'string' || !VALID_TYPES.has(type)) {
+        throw new Error(`Invalid sync message type: ${String(type)}`);
+    }
+    // Per-type field validation
+    const ts = parsed.timestamp;
+    if (!isNonNegativeInt(ts)) {
+        throw new Error(`Invalid sync message: missing or invalid timestamp`);
+    }
+    // Protocol version check (H1: hard cutover, exact match only)
+    const version = parsed.protocolVersion;
+    if (version === undefined || version === null) {
+        throw new Error('Invalid sync message: protocolVersion is required');
+    }
+    if (version !== PROTOCOL_VERSION) {
+        throw new Error(`Unsupported protocol version: ${JSON.stringify(version)} (expected: ${PROTOCOL_VERSION})`);
+    }
+    switch (type) {
+        case 'member-join':
+            if (typeof parsed.pubkey !== 'string' || !HEX_64_RE.test(parsed.pubkey)) {
+                throw new Error('Invalid sync message: member-join requires a 64-char hex pubkey');
+            }
+            // member-join always requires epoch and opId (privileged action)
+            if (!isNonNegativeInt(parsed.epoch)) {
+                throw new Error('Invalid sync message: member-join requires a non-negative epoch');
+            }
+            if (typeof parsed.opId !== 'string' || parsed.opId.length === 0 || parsed.opId.length > 128) {
+                throw new Error('Invalid sync message: member-join requires a non-empty opId (max 128 chars)');
+            }
+            if (parsed.displayName !== undefined) {
+                if (typeof parsed.displayName !== 'string' || parsed.displayName.length > 256) {
+                    throw new Error('Invalid sync message: member-join displayName must be a string of at most 256 characters');
+                }
+            }
+            break;
+        case 'member-leave':
+            if (typeof parsed.pubkey !== 'string' || !HEX_64_RE.test(parsed.pubkey)) {
+                throw new Error('Invalid sync message: member-leave requires a 64-char hex pubkey');
+            }
+            if (!isNonNegativeInt(parsed.epoch)) {
+                throw new Error('Invalid sync message: member-leave requires a non-negative epoch');
+            }
+            if (typeof parsed.opId !== 'string' || parsed.opId.length === 0 || parsed.opId.length > 128) {
+                throw new Error('Invalid sync message: member-leave requires a non-empty opId (max 128 chars)');
+            }
+            break;
+        case 'liveness-checkin':
+            if (typeof parsed.pubkey !== 'string' || !HEX_64_RE.test(parsed.pubkey)) {
+                throw new Error('Invalid sync message: liveness-checkin requires a 64-char hex pubkey');
+            }
+            if (typeof parsed.opId !== 'string' || parsed.opId.length === 0 || parsed.opId.length > 128) {
+                throw new Error('Invalid sync message: liveness-checkin requires a non-empty opId (max 128 chars)');
+            }
+            break;
+        case 'counter-advance':
+            if (!isNonNegativeInt(parsed.counter)) {
+                throw new Error('Invalid sync message: counter-advance requires a non-negative counter');
+            }
+            if (!isNonNegativeInt(parsed.usageOffset)) {
+                throw new Error('Invalid sync message: counter-advance requires a non-negative usageOffset');
+            }
+            break;
+        case 'reseed':
+            if (typeof parsed.seed !== 'string' || !HEX_64_RE.test(parsed.seed)) {
+                throw new Error('Invalid sync message: reseed.seed must be a 64-char hex string');
+            }
+            if (!isNonNegativeInt(parsed.counter)) {
+                throw new Error('Invalid sync message: reseed requires a non-negative counter');
+            }
+            if (!isNonNegativeInt(parsed.epoch)) {
+                throw new Error('Invalid sync message: reseed requires a non-negative epoch');
+            }
+            if (typeof parsed.opId !== 'string' || parsed.opId.length === 0 || parsed.opId.length > 128) {
+                throw new Error('Invalid sync message: reseed requires a non-empty opId (max 128 chars)');
+            }
+            if (!Array.isArray(parsed.admins) || !parsed.admins.every((a) => typeof a === 'string' && HEX_64_RE.test(a))) {
+                throw new Error('Invalid sync message: reseed.admins must be 64-char hex pubkeys');
+            }
+            if (!Array.isArray(parsed.members) || !parsed.members.every((m) => typeof m === 'string' && HEX_64_RE.test(m))) {
+                throw new Error('Invalid sync message: reseed.members must be 64-char hex pubkeys');
+            }
+            if (parsed.members.length > MAX_MEMBERS) {
+                throw new Error(`Invalid sync message: reseed.members exceeds maximum of ${MAX_MEMBERS}`);
+            }
+            if (parsed.admins.length > MAX_MEMBERS) {
+                throw new Error(`Invalid sync message: reseed.admins exceeds maximum of ${MAX_MEMBERS}`);
+            }
+            return {
+                type, seed: hexToBytes(parsed.seed), counter: parsed.counter, timestamp: ts,
+                epoch: parsed.epoch, opId: parsed.opId,
+                admins: [...parsed.admins], members: [...parsed.members],
+                protocolVersion: PROTOCOL_VERSION,
+            };
+        case 'beacon':
+            if (!isFiniteNumber(parsed.lat) || !isFiniteNumber(parsed.lon)) {
+                throw new Error('Invalid sync message: beacon requires numeric lat and lon');
+            }
+            if (parsed.lat < -90 || parsed.lat > 90 || parsed.lon < -180 || parsed.lon > 180) {
+                throw new Error('Invalid sync message: beacon lat/lon out of range');
+            }
+            if (!isFiniteNumber(parsed.accuracy) || parsed.accuracy < 0 || parsed.accuracy > MAX_BEACON_ACCURACY_METERS) {
+                throw new Error('Invalid sync message: beacon requires a non-negative accuracy');
+            }
+            if (typeof parsed.opId !== 'string' || parsed.opId.length === 0 || parsed.opId.length > 128) {
+                throw new Error('Invalid sync message: beacon requires a non-empty opId (max 128 chars)');
+            }
+            break;
+        case 'duress-alert':
+            if (!isFiniteNumber(parsed.lat) || !isFiniteNumber(parsed.lon)) {
+                throw new Error('Invalid sync message: duress-alert requires numeric lat and lon');
+            }
+            if (parsed.lat < -90 || parsed.lat > 90 || parsed.lon < -180 || parsed.lon > 180) {
+                throw new Error('Invalid sync message: duress-alert lat/lon out of range');
+            }
+            if (typeof parsed.opId !== 'string' || parsed.opId.length === 0 || parsed.opId.length > 128) {
+                throw new Error('Invalid sync message: duress-alert requires a non-empty opId (max 128 chars)');
+            }
+            if (parsed.subject !== undefined && (typeof parsed.subject !== 'string' || parsed.subject.length > MAX_TAG_LENGTH)) {
+                throw new Error(`Invalid sync message: duress-alert subject must be a string of at most ${MAX_TAG_LENGTH} characters`);
+            }
+            break;
+        case 'duress-clear':
+            if (typeof parsed.subject !== 'string' || parsed.subject.length === 0) {
+                throw new Error('Invalid sync message: duress-clear requires a non-empty subject');
+            }
+            if (parsed.subject.length > MAX_TAG_LENGTH) {
+                throw new Error(`Invalid sync message: duress-clear subject exceeds maximum length of ${MAX_TAG_LENGTH} characters`);
+            }
+            if (typeof parsed.opId !== 'string' || parsed.opId.length === 0 || parsed.opId.length > 128) {
+                throw new Error('Invalid sync message: duress-clear requires a non-empty opId (max 128 chars)');
+            }
+            break;
+        case 'state-snapshot':
+            if (typeof parsed.seed !== 'string' || !HEX_64_RE.test(parsed.seed)) {
+                throw new Error('Invalid sync message: state-snapshot requires a 64-char hex seed');
+            }
+            if (!isNonNegativeInt(parsed.counter)) {
+                throw new Error('Invalid sync message: state-snapshot requires a non-negative counter');
+            }
+            if (!isNonNegativeInt(parsed.usageOffset)) {
+                throw new Error('Invalid sync message: state-snapshot requires a non-negative usageOffset');
+            }
+            if (!Array.isArray(parsed.members) || !parsed.members.every((m) => typeof m === 'string' && HEX_64_RE.test(m))) {
+                throw new Error('Invalid sync message: state-snapshot members must be 64-char hex pubkeys');
+            }
+            if (!Array.isArray(parsed.admins) || !parsed.admins.every((a) => typeof a === 'string' && HEX_64_RE.test(a))) {
+                throw new Error('Invalid sync message: state-snapshot admins must be 64-char hex pubkeys');
+            }
+            if (parsed.members.length > MAX_MEMBERS) {
+                throw new Error(`Invalid sync message: state-snapshot members exceeds maximum of ${MAX_MEMBERS}`);
+            }
+            if (parsed.admins.length > MAX_MEMBERS) {
+                throw new Error(`Invalid sync message: state-snapshot admins exceeds maximum of ${MAX_MEMBERS}`);
+            }
+            if (!isNonNegativeInt(parsed.epoch)) {
+                throw new Error('Invalid sync message: state-snapshot requires a non-negative epoch');
+            }
+            if (typeof parsed.opId !== 'string' || parsed.opId.length === 0 || parsed.opId.length > 128) {
+                throw new Error('Invalid sync message: state-snapshot requires a non-empty opId (max 128 chars)');
+            }
+            // Optional prevEpochSeed for epoch continuity verification
+            if (parsed.prevEpochSeed !== undefined) {
+                if (typeof parsed.prevEpochSeed !== 'string' || !HEX_64_RE.test(parsed.prevEpochSeed)) {
+                    throw new Error('Invalid sync message: state-snapshot.prevEpochSeed must be a 64-char hex string');
+                }
+            }
+            break;
+    }
+    return parsed;
+}
+// ── State application ─────────────────────────────────────────
+/**
+ * Determine whether a sync message type is privileged (requires admin sender).
+ * member-join is privileged UNLESS the sender is adding themselves (self-join).
+ * Self-join is allowed because decrypting the group envelope proves the sender
+ * received a valid admin-signed invite containing the group key.
+ * member-leave is privileged when target !== sender.
+ * Self-leave is NOT privileged — a member can always remove themselves.
+ */
+function isPrivilegedAction(msg, sender) {
+    if (msg.type === 'reseed')
+        return true;
+    if (msg.type === 'state-snapshot')
+        return true;
+    if (msg.type === 'member-join' && msg.pubkey !== sender)
+        return true;
+    if (msg.type === 'member-leave' && msg.pubkey !== sender)
+        return true;
+    return false;
+}
+/**
+ * Apply a sync message to group state.
+ * Returns a new GroupState with the change applied.
+ * Beacons and duress alerts don't modify group state (fire-and-forget).
+ *
+ * Authority invariants (I1-I6) are enforced for privileged actions.
+ * Privileged actions without a sender are rejected (fail-closed).
+ *
+ * @param group - Current group state.
+ * @param msg - The sync message to apply.
+ * @param nowSec - Current unix timestamp in seconds (default: `Date.now() / 1000`).
+ * @param sender - Hex pubkey of the message sender (required for privileged actions).
+ * @returns New group state with the change applied, or unchanged state if rejected.
+ */
+export function applySyncMessage(group, msg, nowSec = Math.floor(Date.now() / 1000), sender) {
+    // ── Authority checks (I1, I2, I3, I4, I6) ──────────────────
+    if (isPrivilegedAction(msg, sender)) {
+        // Fail-closed: no sender → reject privileged action
+        if (!sender)
+            return group;
+        // I1: sender must be in admins
+        if (!group.admins.includes(sender))
+            return group;
+        const msgEpoch = msg.epoch;
+        const msgOpId = msg.opId;
+        // Strict: privileged ops require epoch and opId
+        if (msgEpoch === undefined || msgOpId === undefined)
+            return group;
+        // I6: stale epoch — drop
+        if (msgEpoch < group.epoch)
+            return group;
+        if (msg.type === 'reseed') {
+            // I4: reseed must have msg.epoch == local.epoch + 1
+            if (msgEpoch !== group.epoch + 1)
+                return group;
+            // I4: reseed must carry admins and members
+            const reseedMsg = msg;
+            if (!reseedMsg.admins || !reseedMsg.members)
+                return group;
+            // Enforce admins ⊆ members
+            const memberSet = new Set(reseedMsg.members);
+            if (!reseedMsg.admins.every(a => memberSet.has(a)))
+                return group;
+        }
+        else if (msg.type === 'state-snapshot') {
+            // I5: snapshot epoch must be >= local epoch (allows catch-up across multiple reseeds)
+            if (msgEpoch < group.epoch)
+                return group;
+            // Snapshot must carry admins and members
+            const snapMsg = msg;
+            if (!snapMsg.admins || !snapMsg.members)
+                return group;
+            // Enforce admins ⊆ members
+            const memberSet = new Set(snapMsg.members);
+            if (!snapMsg.admins.every(a => memberSet.has(a)))
+                return group;
+        }
+        else {
+            // I3: non-reseed privileged ops must have msg.epoch == local.epoch
+            if (msgEpoch !== group.epoch)
+                return group;
+        }
+        // I2: opId must not be consumed in current epoch
+        // reseed starts a new epoch so its opId is not subject to the current-epoch replay guard
+        // Higher-epoch snapshots also start fresh; same-epoch snapshot opId is checked in the switch case
+        if (msg.type !== 'reseed' && !(msg.type === 'state-snapshot' && msgEpoch > group.epoch)) {
+            const consumedSet = new Set(group.consumedOps);
+            if (consumedSet.has(msgOpId))
+                return group;
+            // Floor check: reject messages with timestamps at or below the eviction floor
+            // (prevents replay of ops that were evicted from consumedOps)
+            if (group.consumedOpsFloor !== undefined && msg.timestamp <= group.consumedOpsFloor)
+                return group;
+        }
+    }
+    // ── Freshness gate for fire-and-forget messages ────────────
+    // Drop stale duress-alert/beacon/liveness-checkin messages to prevent replay.
+    if (msg.type === 'duress-alert' || msg.type === 'duress-clear' || msg.type === 'beacon' || msg.type === 'liveness-checkin') {
+        const elapsed = nowSec - msg.timestamp;
+        if (elapsed > FIRE_AND_FORGET_FRESHNESS_SEC)
+            return group; // stale
+        if (elapsed < -MAX_FUTURE_SKEW_SEC)
+            return group; // too far in the future
+    }
+    // Cross-check: liveness-checkin sender must match the pubkey in the message
+    if (msg.type === 'liveness-checkin' && sender && msg.pubkey !== sender)
+        return group;
+    // Non-privileged member-leave/member-join/duress-clear still need opId replay guard
+    if ((msg.type === 'member-leave' || msg.type === 'member-join' || msg.type === 'duress-clear') && !isPrivilegedAction(msg, sender)) {
+        const consumedSet = new Set(group.consumedOps);
+        if (consumedSet.has(msg.opId))
+            return group;
+        if (group.consumedOpsFloor !== undefined && msg.timestamp <= group.consumedOpsFloor)
+            return group;
+    }
+    switch (msg.type) {
+        case 'member-join': {
+            let updated;
+            try {
+                updated = addMember(group, msg.pubkey);
+            }
+            catch {
+                return group; // invalid pubkey or MAX_MEMBERS exceeded — reject silently
+            }
+            const ops = appendConsumedOp(updated.consumedOps, msg.opId, msg.timestamp, group.consumedOpsFloor);
+            const names = msg.displayName
+                ? { memberNames: { ...updated.memberNames, [msg.pubkey]: msg.displayName } }
+                : {};
+            return { ...updated, ...ops, ...names };
+        }
+        case 'member-leave':
+            // Replay guard: if the pubkey is not a current member, ignore the message
+            if (!group.members.includes(msg.pubkey))
+                return group;
+            {
+                const updated = removeMember(group, msg.pubkey);
+                const ops = appendConsumedOp(updated.consumedOps, msg.opId, msg.timestamp, group.consumedOpsFloor);
+                return { ...updated, ...ops };
+            }
+        case 'counter-advance': {
+            // NOTE: counter-advance intentionally has no epoch field (unlike other
+            // mutation messages). This was evaluated during security audit 2026-03-15.
+            //
+            // Why this is safe without epoch:
+            // 1. Envelope encryption: messages travel inside AES-GCM envelopes keyed
+            //    by deriveGroupKey(seed). After a reseed the key changes, so captured
+            //    ciphertext from epoch N cannot be injected into epoch N+1.
+            // 2. Active replay requires a current member who survived the reseed —
+            //    but such a member could just send a *new* counter-advance with any
+            //    values they want. Epoch wouldn't stop a malicious current member.
+            // 3. Monotonic check rejects old effective counters (reseeds preserve the
+            //    effective counter, so old values are always <=).
+            // 4. Time-based bound caps damage to +MAX_COUNTER_ADVANCE_OFFSET.
+            //
+            // Adding epoch is planned for protocol v3 for conceptual consistency.
+            // Require sender to be a current group member
+            if (!sender || !group.members.includes(sender))
+                return group;
+            // Bound individual fields to prevent overflow when summed
+            if (msg.usageOffset > MAX_COUNTER_ADVANCE_OFFSET)
+                return group;
+            // Monotonic: only advance, never retreat
+            const currentEffective = group.counter + group.usageOffset;
+            const incomingEffective = msg.counter + msg.usageOffset;
+            if (incomingEffective <= currentEffective)
+                return group;
+            // Bound forward jumps to limit desync damage from malicious/compromised senders.
+            const timeBasedCounter = Math.floor(nowSec / group.rotationInterval);
+            const maxAllowedEffective = timeBasedCounter + MAX_COUNTER_ADVANCE_OFFSET;
+            if (incomingEffective > maxAllowedEffective)
+                return group;
+            return { ...group, counter: msg.counter, usageOffset: msg.usageOffset };
+        }
+        case 'reseed':
+            // I4: atomic replacement of {seed, members, admins, epoch} + clear consumedOps
+            return {
+                ...group,
+                seed: bytesToHex(msg.seed),
+                counter: msg.counter,
+                usageOffset: 0,
+                members: [...msg.members],
+                admins: [...msg.admins],
+                epoch: msg.epoch,
+                consumedOps: [msg.opId],
+            };
+        case 'state-snapshot': {
+            // I5: admin-gated state recovery for clients that missed transitions.
+            //
+            // KNOWN LIMITATION — stale-admin higher-epoch hijack:
+            // A removed admin still in the receiver's stale local cache can fabricate
+            // a higher-epoch snapshot. Single-field continuity proofs (prevEpochSeed)
+            // are either bypassable (optional) or create multi-epoch recovery dead-ends
+            // (mandatory). Full mitigation requires either:
+            //   (a) quorum-based recovery (multiple admins must agree), or
+            //   (b) a verifiable reseed-chain (signed epoch transitions stored on relays).
+            // Both are deferred to a future protocol version. The self-consistency check
+            // in the adapter (sender must be in snapshot's own admins list) narrows the
+            // attack surface to fabrication, not impersonation.
+            if (msg.epoch === group.epoch) {
+                // ── Same-epoch recovery: anti-rollback constraints ──
+                // No silent reseed within the same epoch
+                if (msg.seed !== group.seed)
+                    return group;
+                // Effective counter must not regress
+                const localEffective = group.counter + group.usageOffset;
+                const incomingEffective = msg.counter + msg.usageOffset;
+                if (incomingEffective < localEffective)
+                    return group;
+                // Members and admins must be supersets of current (removals require reseed/epoch bump)
+                if (!group.members.every(m => msg.members.includes(m)))
+                    return group;
+                if (!group.admins.every(a => msg.admins.includes(a)))
+                    return group;
+                // Append to consumedOps (preserve replay history within epoch)
+                const snapOps = appendConsumedOp(group.consumedOps, msg.opId, msg.timestamp, group.consumedOpsFloor);
+                return {
+                    ...group,
+                    counter: msg.counter,
+                    usageOffset: msg.usageOffset,
+                    members: [...msg.members],
+                    admins: [...msg.admins],
+                    ...snapOps,
+                };
+            }
+            // ── Higher-epoch recovery: DISABLED ──
+            // Higher-epoch snapshots are rejected. Members who miss reseeds
+            // must be re-invited. This eliminates the stale-admin hijack
+            // attack surface entirely.
+            return group;
+        }
+        case 'beacon':
+        case 'duress-alert':
+        case 'liveness-checkin':
+            return group;
+        default:
+            return group;
+    }
+}
+/**
+ * Apply a sync message and return a result indicating whether it was accepted.
+ *
+ * Unlike `applySyncMessage` which silently returns unchanged state on rejection,
+ * this function tells the caller whether the message was actually applied —
+ * enabling logging, alerting, and debugging of rejected messages.
+ *
+ * Fire-and-forget messages (beacon, duress-alert, liveness-checkin) always
+ * return `applied: true` when they pass freshness checks, even though they
+ * don't modify group state.
+ *
+ * @param group - Current group state.
+ * @param msg - The sync message to apply.
+ * @param nowSec - Current unix timestamp in seconds (default: `Date.now() / 1000`).
+ * @param sender - Hex pubkey of the message sender (required for privileged actions).
+ * @returns `{ state, applied }` where `applied` indicates whether the message was accepted.
+ */
+export function applySyncMessageWithResult(group, msg, nowSec = Math.floor(Date.now() / 1000), sender) {
+    const result = applySyncMessage(group, msg, nowSec, sender);
+    // Fire-and-forget messages don't modify state, so reference equality
+    // doesn't distinguish accepted from rejected. Check freshness directly.
+    if (msg.type === 'beacon' || msg.type === 'duress-alert' || msg.type === 'liveness-checkin') {
+        const elapsed = nowSec - msg.timestamp;
+        const fresh = elapsed <= FIRE_AND_FORGET_FRESHNESS_SEC && elapsed >= -MAX_FUTURE_SKEW_SEC;
+        // For liveness-checkin, also check sender-pubkey cross-check
+        const senderValid = msg.type !== 'liveness-checkin' || !sender || msg.pubkey === sender;
+        return { state: result, applied: fresh && senderValid };
+    }
+    return { state: result, applied: result !== group };
+}
+//# sourceMappingURL=sync.js.map

package/dist/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAE3C,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAExH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAEpD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAmBpD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS;IAClC,aAAa,EAAE,cAAc,EAAE,iBAAiB;IAChD,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB;CACzF,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;IAClD,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,QAAQ;IAC1D,gBAAgB,EAAE,cAAc,EAAE,cAAc;CACjD,CAAC,CAAA;AAEF,kFAAkF;AAClF,MAAM,SAAS,GAAG,gBAAgB,CAAA;AAClC,MAAM,0BAA0B,GAAG,GAAG,CAAA;AACtC,MAAM,WAAW,GAAG,GAAG,CAAA;AACvB,MAAM,0BAA0B,GAAG,UAAU,CAAA;AAC7C,MAAM,cAAc,GAAG,GAAG,CAAA;AAE1B,qFAAqF;AACrF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAA;AAEhD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAErC,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAO7B,SAAS,gBAAgB,CAAC,GAAa,EAAE,IAAY,EAAE,SAAiB,EAAE,YAAqB;IAC7F,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,EAAE,IAAI,CAAC,CAAA;IAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACnC,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC;YAC1C,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,EAAE,SAAS,CAAC;SACzD,CAAA;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAA;AAC9D,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAA;AAEjC,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AACvE,CAAC;AAED,iEAAiE;AAEjE;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAgB;IAChD,MAAM,SAAS,GAAG,EAAE,GAAG,GAAG,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAA;IAC/D,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,SAAqD,CAAA;QACtF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IACxD,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACzF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACzD,CAAC;IACD,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAgC,CAAA;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;QACpC,MAAM,KAAK,GAAG,IAAI;aACf,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9D,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACpC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,KAAK,EAAE,CAAC,CAAA;AACtE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAgB;IACtD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAA;QAC7B,OAAO,eAAe,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,MAA+B,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACzD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,4BAA4B;IAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAA;IAC3B,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAA;IACtC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,gBAAgB,GAAG,CAAC,CAAA;IAC7G,CAAC;IAED,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa;YAChB,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;YACpF,CAAC;YACD,iEAAiE;YACjE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;YAChG,CAAC;YACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACrC,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBAC9E,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAA;gBAC7G,CAAC;YACH,CAAC;YACD,MAAK;QAEP,KAAK,cAAc;YACjB,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;YACrF,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;YACrF,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;YACjG,CAAC;YACD,MAAK;QAEP,KAAK,kBAAkB;YACrB,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;YACzF,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;YACrG,CAAC;YACD,MAAK;QAEP,KAAK,iBAAiB;YACpB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;YAC1F,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;YAC9F,CAAC;YACD,MAAK;QAEP,KAAK,QAAQ;YACX,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;YACnF,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;YAC/E,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;YAC3F,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtH,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxH,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;YACrF,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,2DAA2D,WAAW,EAAE,CAAC,CAAA;YAC3F,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,0DAA0D,WAAW,EAAE,CAAC,CAAA;YAC1F,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE;gBAC3E,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACtC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAmB,CAAC;gBAChF,eAAe,EAAE,gBAAgB;aAClC,CAAA;QAEH,KAAK,QAAQ;YACX,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;YAC9E,CAAC;YACD,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,GAAG,EAAE,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;gBACjF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;YACtE,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,0BAA0B,EAAE,CAAC;gBAC5G,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;YAClF,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;YAC3F,CAAC;YACD,MAAK;QAEP,KAAK,cAAc;YACjB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,GAAG,EAAE,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;gBACjF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;YAC5E,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;YACjG,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,EAAE,CAAC;gBACnH,MAAM,IAAI,KAAK,CAAC,0EAA0E,cAAc,aAAa,CAAC,CAAA;YACxH,CAAC;YACD,MAAK;QAEP,KAAK,cAAc;YACjB,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,wEAAwE,cAAc,aAAa,CAAC,CAAA;YACtH,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;YACjG,CAAC;YACD,MAAK;QAEP,KAAK,gBAAgB;YACnB,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;YACrF,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;YACzF,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;YAC7F,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxH,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;YAC7F,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtH,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;YAC5F,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,mEAAmE,WAAW,EAAE,CAAC,CAAA;YACnG,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,kEAAkE,WAAW,EAAE,CAAC,CAAA;YAClG,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;YACvF,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAA;YACnG,CAAC;YACD,2DAA2D;YAC3D,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACvC,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBACtF,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;gBACpG,CAAC;YACH,CAAC;YACD,MAAK;IACT,CAAC;IAED,OAAO,MAAqB,CAAA;AAC9B,CAAC;AAED,iEAAiE;AAEjE;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,GAAgB,EAAE,MAAe;IAC3D,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACtC,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAA;IAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IACpE,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IACrE,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAiB,EACjB,GAAgB,EAChB,SAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAC9C,MAAe;IAEf,8DAA8D;IAC9D,IAAI,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QACpC,oDAAoD;QACpD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEzB,+BAA+B;QAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAA;QAEhD,MAAM,QAAQ,GAAI,GAA0B,CAAC,KAAK,CAAA;QAClD,MAAM,OAAO,GAAI,GAAyB,CAAC,IAAI,CAAA;QAE/C,gDAAgD;QAChD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QAEjE,yBAAyB;QACzB,IAAI,QAAQ,GAAG,KAAK,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QAExC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,oDAAoD;YACpD,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YAE9C,2CAA2C;YAC3C,MAAM,SAAS,GAAG,GAAgD,CAAA;YAClE,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAA;YAEzD,2BAA2B;YAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAA;QAClE,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACzC,sFAAsF;YACtF,IAAI,QAAQ,GAAG,KAAK,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAA;YAExC,yCAAyC;YACzC,MAAM,OAAO,GAAG,GAAgD,CAAA;YAChE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAA;YAErD,2BAA2B;YAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAA;QAChE,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAA;QAC5C,CAAC;QAED,iDAAiD;QACjD,yFAAyF;QACzF,kGAAkG;QAClG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACxF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YAC9C,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAA;YAE1C,8EAA8E;YAC9E,8DAA8D;YAC9D,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,gBAAgB;gBAAE,OAAO,KAAK,CAAA;QACnG,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,8EAA8E;IAC9E,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC3H,MAAM,OAAO,GAAG,MAAM,GAAG,GAAG,CAAC,SAAS,CAAA;QACtC,IAAI,OAAO,GAAG,6BAA6B;YAAE,OAAO,KAAK,CAAA,CAAG,QAAQ;QACpE,IAAI,OAAO,GAAG,CAAC,mBAAmB;YAAE,OAAO,KAAK,CAAA,CAAa,wBAAwB;IACvF,CAAC;IAED,4EAA4E;IAC5E,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAA;IAEpF,oFAAoF;IACpF,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QACnI,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAC9C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QAC3C,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,gBAAgB;YAAE,OAAO,KAAK,CAAA;IACnG,CAAC;IAED,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,IAAI,OAAmB,CAAA;YACvB,IAAI,CAAC;gBACH,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA,CAAC,2DAA2D;YAC1E,CAAC;YACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAA;YAClG,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;gBAC3B,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,GAAI,OAA8C,CAAC,WAAiD,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;gBAC1J,CAAC,CAAC,EAAE,CAAA;YACN,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAA;QACzC,CAAC;QAED,KAAK,cAAc;YACjB,0EAA0E;YAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA;YACrD,CAAC;gBACC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC/C,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAA;gBAClG,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,EAAE,CAAA;YAC/B,CAAC;QAEH,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,uEAAuE;YACvE,2EAA2E;YAC3E,EAAE;YACF,kCAAkC;YAClC,yEAAyE;YACzE,0EAA0E;YAC1E,gEAAgE;YAChE,uEAAuE;YACvE,wEAAwE;YACxE,uEAAuE;YACvE,0EAA0E;YAC1E,sDAAsD;YACtD,kEAAkE;YAClE,EAAE;YACF,sEAAsE;YAEtE,8CAA8C;YAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA;YAE5D,0DAA0D;YAC1D,IAAI,GAAG,CAAC,WAAW,GAAG,0BAA0B;gBAAE,OAAO,KAAK,CAAA;YAE9D,yCAAyC;YACzC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAA;YAC1D,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,CAAA;YACvD,IAAI,iBAAiB,IAAI,gBAAgB;gBAAE,OAAO,KAAK,CAAA;YAEvD,iFAAiF;YACjF,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAA;YACpE,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,0BAA0B,CAAA;YACzE,IAAI,iBAAiB,GAAG,mBAAmB;gBAAE,OAAO,KAAK,CAAA;YAEzD,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAA;QACzE,CAAC;QAED,KAAK,QAAQ;YACX,+EAA+E;YAC/E,OAAO;gBACL,GAAG,KAAK;gBACR,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,WAAW,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;gBACzB,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;gBACvB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;aACxB,CAAA;QAEH,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,sEAAsE;YACtE,EAAE;YACF,sDAAsD;YACtD,0EAA0E;YAC1E,0EAA0E;YAC1E,4EAA4E;YAC5E,gDAAgD;YAChD,+DAA+D;YAC/D,+EAA+E;YAC/E,6EAA6E;YAC7E,4EAA4E;YAC5E,oDAAoD;YACpD,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC9B,uDAAuD;gBACvD,yCAAyC;gBACzC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;oBAAE,OAAO,KAAK,CAAA;gBACzC,qCAAqC;gBACrC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAA;gBACxD,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,WAAW,CAAA;gBACvD,IAAI,iBAAiB,GAAG,cAAc;oBAAE,OAAO,KAAK,CAAA;gBACpD,uFAAuF;gBACvF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAA;gBACpE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAA;gBAClE,+DAA+D;gBAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAA;gBACpG,OAAO;oBACL,GAAG,KAAK;oBACR,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;oBACzB,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;oBACvB,GAAG,OAAO;iBACX,CAAA;YACH,CAAC;YACD,wCAAwC;YACxC,gEAAgE;YAChE,6DAA6D;YAC7D,2BAA2B;YAC3B,OAAO,KAAK,CAAA;QACd,CAAC;QAED,KAAK,QAAQ,CAAC;QACd,KAAK,cAAc,CAAC;QACpB,KAAK,kBAAkB;YACrB,OAAO,KAAK,CAAA;QAEd;YACE,OAAO,KAAK,CAAA;IAChB,CAAC;AACH,CAAC;AAUD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAiB,EACjB,GAAgB,EAChB,SAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAC9C,MAAe;IAEf,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3D,qEAAqE;IACrE,wEAAwE;IACxE,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC5F,MAAM,OAAO,GAAG,MAAM,GAAG,GAAG,CAAC,SAAS,CAAA;QACtC,MAAM,KAAK,GAAG,OAAO,IAAI,6BAA6B,IAAI,OAAO,IAAI,CAAC,mBAAmB,CAAA;QACzF,6DAA6D;QAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAA;QACvF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,CAAA;IACzD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,KAAK,EAAE,CAAA;AACrD,CAAC"}