epistery 2.0.3 → 2.1.0

package/dist/utils/Config.d.ts

@@ -1,19 +1,44 @@
 /**
- * Epistery Config - Path-based configuration system
+ * Epistery Config — async path-based configuration store.
  *
- * Provides unified, filesystem-like config management:
+ * Filesystem-like config management, now async so the same interface can be
+ * served by a remote authority:
  * - setPath('/') → ~/.epistery/config.ini
  * - setPath('/domain') → ~/.epistery/domain/config.ini
  * - setPath('/.ssl/domain') → ~/.epistery/.ssl/domain/config.ini
  *
+ * `Config` is a thin facade that picks a backend at construction:
+ *   - if the local bootstrap ~/.epistery/config.ini has [authority] url=…,
+ *     or EPISTERY_CONFIG_URL is set → RemoteConfig (talks to epistery-authority)
+ *   - otherwise → LocalConfig (the filesystem store; unchanged semantics)
+ *
+ * Every IO method is async because a remote/HSM custodian cannot answer
+ * synchronously. `data` holds the snapshot from the last awaited load()/setPath().
+ *
  * Usage:
  *   const config = new Config('epistery');
- *   config.setPath('/wiki.rootz.global');
- *   config.load();
+ *   await config.setPath('/wiki.rootz.global');   // loads
  *   config.data.verified = true;
- *   config.save();
+ *   await config.save();
+ */
+export interface ConfigStore {
+    data: any;
+    getPath(): string;
+    setPath(path: string): Promise<void>;
+    load(): Promise<void>;
+    read(path: string): Promise<any>;
+    save(): Promise<void>;
+    readFile(filename: string): Promise<Buffer>;
+    writeFile(filename: string, data: string | Buffer): Promise<void>;
+    exists(): Promise<boolean>;
+    listPaths(): Promise<string[]>;
+}
+/**
+ * LocalConfig — the filesystem backend under ~/.epistery. This is the original
+ * Config behavior, with all IO made async. It is also what the epistery-authority
+ * server mounts as its own storage backend (one implementation, not two).
  */
-export declare class Config {
+export declare class LocalConfig implements ConfigStore {
     readonly rootName: string;
     readonly homeDir: string;
     readonly configDir: string;
@@ -22,50 +47,78 @@ export declare class Config {
     private currentFile;
     data: any;
     constructor(rootName?: string);
-    /**
-     * Set current working path and load config (like cd)
-     * Examples: '/', 'domain', '/domain', '/.ssl/domain'
-     * Leading slash is optional and will be added if not present
-     * Automatically loads the config at the specified path
-     */
-    setPath(path: string): void;
-    /**
-     * Get current path
-     */
+    private initializeSync;
     getPath(): string;
+    setPath(path: string): Promise<void>;
+    load(): Promise<void>;
+    read(path: string): Promise<any>;
+    save(): Promise<void>;
+    readFile(filename: string): Promise<Buffer>;
+    writeFile(filename: string, data: string | Buffer): Promise<void>;
+    exists(): Promise<boolean>;
+    listPaths(): Promise<string[]>;
+}
+/**
+ * RemoteConfig — HTTP client to an epistery-authority server. Implements the
+ * same ConfigStore interface; the authority mounts a LocalConfig behind it.
+ *
+ * Auth is the rivet key-exchange: the machine signs a challenge with its
+ * device key, and the authority issues a bearer token (see epistery-authority
+ * lib/auth.mjs). In Phase 1 config data (including the wallet mnemonic) is
+ * still served; Phase 2 splits public from secret and adds /sign/*.
+ */
+export declare class RemoteConfig implements ConfigStore {
+    private readonly baseUrl;
+    private readonly machineAddress;
+    private readonly signChallenge;
+    data: any;
+    private currentPath;
+    private token;
+    constructor(baseUrl: string, machineAddress: string, signChallenge: (message: string) => Promise<string>);
+    getPath(): string;
+    private authenticate;
+    private authedFetch;
+    setPath(path: string): Promise<void>;
+    load(): Promise<void>;
+    read(path: string): Promise<any>;
+    save(): Promise<void>;
+    private filePrefix;
+    readFile(filename: string): Promise<Buffer>;
+    writeFile(filename: string, data: string | Buffer): Promise<void>;
+    exists(): Promise<boolean>;
+    listPaths(): Promise<string[]>;
+}
+/**
+ * Config — the public facade. `new Config()` selects the backend synchronously
+ * (reading only the local bootstrap), then delegates every async operation.
+ * Existing call sites change only by adding `await`.
+ */
+export declare class Config implements ConfigStore {
+    private readonly backend;
+    private readonly local;
+    constructor(rootName?: string);
+    /** Read the local bootstrap config.ini synchronously (authority selection only). */
+    private static readBootstrap;
+    private static resolveAuthorityUrl;
     /**
-     * Initialize config at current path
-     */
-    private initialize;
-    /**
-     * Load config from current path
-     */
-    load(): void;
-    /**
-     * Read config from arbitrary path without changing current path
-     * @param path Path to read from (e.g., '/', '/domain')
-     * @returns Parsed config data from that path
-     */
-    read(path: string): any;
-    /**
-     * Save config to current path
-     */
-    save(): void;
-    /**
-     * Read file from current path directory
-     */
-    readFile(filename: string): Buffer;
-    /**
-     * Write file to current path directory
-     */
-    writeFile(filename: string, data: string | Buffer): void;
-    /**
-     * Check if config exists at current path
-     */
-    exists(): boolean;
-    /**
-     * List all subdirectories at current path
+     * Build the machine signer used to authenticate to the authority. The machine
+     * rivet key lives in the local bootstrap [authority] section (Phase 1). A
+     * future TPM-backed key replaces this without changing the call site.
      */
-    listPaths(): string[];
+    private static machineSigner;
+    get rootName(): string;
+    get homeDir(): string;
+    get configDir(): string;
+    get data(): any;
+    set data(v: any);
+    getPath(): string;
+    setPath(path: string): Promise<void>;
+    load(): Promise<void>;
+    read(path: string): Promise<any>;
+    save(): Promise<void>;
+    readFile(filename: string): Promise<Buffer>;
+    writeFile(filename: string, data: string | Buffer): Promise<void>;
+    exists(): Promise<boolean>;
+    listPaths(): Promise<string[]>;
 }
 //# sourceMappingURL=Config.d.ts.map

package/dist/utils/Config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Config.d.ts","sourceRoot":"","sources":["../../src/utils/Config.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AACH,qBAAa,MAAM;IACjB,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAElC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAErB,IAAI,EAAE,GAAG,CAAM;gBAEV,QAAQ,GAAE,MAAmB;IAczC;;;;;OAKG;IACI,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAsBlC;;OAEG;IACI,OAAO,IAAI,MAAM;IAIxB;;OAEG;IACH,OAAO,CAAC,UAAU;IAWlB;;OAEG;IACI,IAAI,IAAI,IAAI;IAUnB;;;;OAIG;IACI,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG;IAwB9B;;OAEG;IACI,IAAI,IAAI,IAAI;IASnB;;OAEG;IACI,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAIzC;;OAEG;IACI,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAO/D;;OAEG;IACI,MAAM,IAAI,OAAO;IAIxB;;OAEG;IACI,SAAS,IAAI,MAAM,EAAE;CAS7B"}
+{"version":3,"file":"Config.d.ts","sourceRoot":"","sources":["../../src/utils/Config.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,GAAG,CAAC;IACV,OAAO,IAAI,MAAM,CAAC;IAClB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAChC;AAUD;;;;GAIG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAElC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAErB,IAAI,EAAE,GAAG,CAAM;gBAEV,QAAQ,GAAE,MAAmB;IAgBzC,OAAO,CAAC,cAAc;IASf,OAAO,IAAI,MAAM;IAIX,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAepC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IASrB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAahC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI3C,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAS1B,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAQ5C;AAED;;;;;;;;GAQG;AACH,qBAAa,YAAa,YAAW,WAAW;IAM5C,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAPzB,IAAI,EAAE,GAAG,CAAM;IACtB,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,KAAK,CAAuB;gBAGjB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;IAK/D,OAAO,IAAI,MAAM;YAIV,YAAY;YAsBZ,WAAW;IAaZ,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAOhC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAUlC,OAAO,CAAC,UAAU;IAIL,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM3C,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASjE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAK1B,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAK5C;AAED;;;;GAIG;AACH,qBAAa,MAAO,YAAW,WAAW;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;gBAExB,QAAQ,GAAE,MAAmB;IAWzC,oFAAoF;IACpF,OAAO,CAAC,MAAM,CAAC,aAAa;IAU5B,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAMlC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IAkB5B,IAAW,QAAQ,IAAI,MAAM,CAAgC;IAC7D,IAAW,OAAO,IAAI,MAAM,CAA+B;IAC3D,IAAW,SAAS,IAAI,MAAM,CAAiC;IAE/D,IAAW,IAAI,IAAI,GAAG,CAA8B;IACpD,IAAW,IAAI,CAAC,CAAC,EAAE,GAAG,EAA4B;IAE3C,OAAO,IAAI,MAAM;IACjB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACpC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IACrB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAChC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3C,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACjE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAC1B,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CACtC"}

package/dist/utils/Config.js

@@ -3,26 +3,27 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Config = void 0;
+exports.Config = exports.RemoteConfig = exports.LocalConfig = void 0;
 const fs_1 = __importDefault(require("fs"));
+const promises_1 = __importDefault(require("fs/promises"));
 const path_1 = require("path");
 const ini_1 = __importDefault(require("ini"));
+const ethers_1 = require("ethers");
+/** Normalize a path: leading slash, no trailing slash, lowercase. */
+function normalizePath(path) {
+    path = path.trim();
+    if (!path.startsWith('/'))
+        path = '/' + path;
+    if (path.length > 1 && path.endsWith('/'))
+        path = path.slice(0, -1);
+    return path.toLowerCase();
+}
 /**
- * Epistery Config - Path-based configuration system
- *
- * Provides unified, filesystem-like config management:
- * - setPath('/') → ~/.epistery/config.ini
- * - setPath('/domain') → ~/.epistery/domain/config.ini
- * - setPath('/.ssl/domain') → ~/.epistery/.ssl/domain/config.ini
- *
- * Usage:
- *   const config = new Config('epistery');
- *   config.setPath('/wiki.rootz.global');
- *   config.load();
- *   config.data.verified = true;
- *   config.save();
+ * LocalConfig — the filesystem backend under ~/.epistery. This is the original
+ * Config behavior, with all IO made async. It is also what the epistery-authority
+ * server mounts as its own storage backend (one implementation, not two).
  */
-class Config {
+class LocalConfig {
     constructor(rootName = 'epistery') {
         this.currentPath = '/';
         this.data = {};
@@ -31,137 +32,270 @@ class Config {
         this.configDir = (0, path_1.join)(this.homeDir, '.' + this.rootName);
         this.currentDir = this.configDir;
         this.currentFile = (0, path_1.join)(this.configDir, 'config.ini');
-        // Initialize root config if it doesn't exist
+        // Bootstrap is synchronous: seed the root config so the very first run has
+        // somewhere to read the authority URL from. Only this seed stays sync; all
+        // subsequent IO is async.
         if (!fs_1.default.existsSync(this.currentFile)) {
-            this.initialize();
+            this.initializeSync();
         }
     }
-    /**
-     * Set current working path and load config (like cd)
-     * Examples: '/', 'domain', '/domain', '/.ssl/domain'
-     * Leading slash is optional and will be added if not present
-     * Automatically loads the config at the specified path
-     */
-    setPath(path) {
-        // Normalize path: ensure leading slash, remove trailing slash, lowercase
-        path = path.trim();
-        if (!path.startsWith('/'))
-            path = '/' + path;
-        if (path.length > 1 && path.endsWith('/'))
-            path = path.slice(0, -1);
-        path = path.toLowerCase();
+    initializeSync() {
+        if (!fs_1.default.existsSync(this.currentDir)) {
+            fs_1.default.mkdirSync(this.currentDir, { recursive: true });
+        }
+        const defaultContent = this.currentPath === '/' ? defaultIni : '';
+        fs_1.default.writeFileSync(this.currentFile, defaultContent);
+        this.data = ini_1.default.decode(defaultContent);
+    }
+    getPath() {
+        return this.currentPath;
+    }
+    async setPath(path) {
+        path = normalizePath(path);
         this.currentPath = path;
-        // Calculate directory and file paths
         if (path === '/') {
             this.currentDir = this.configDir;
             this.currentFile = (0, path_1.join)(this.configDir, 'config.ini');
         }
         else {
-            this.currentDir = (0, path_1.join)(this.configDir, path.slice(1)); // Remove leading /
+            this.currentDir = (0, path_1.join)(this.configDir, path.slice(1));
             this.currentFile = (0, path_1.join)(this.currentDir, 'config.ini');
         }
-        // Automatically load the config at this path
-        this.load();
-    }
-    /**
-     * Get current path
-     */
-    getPath() {
-        return this.currentPath;
+        await this.load();
     }
-    /**
-     * Initialize config at current path
-     */
-    initialize() {
-        if (!fs_1.default.existsSync(this.currentDir)) {
-            fs_1.default.mkdirSync(this.currentDir, { recursive: true });
+    async load() {
+        try {
+            const fileData = await promises_1.default.readFile(this.currentFile, 'utf8');
+            this.data = ini_1.default.decode(fileData);
         }
-        // Write default config for root, empty for paths
-        const defaultContent = this.currentPath === '/' ? defaultIni : '';
-        fs_1.default.writeFileSync(this.currentFile, defaultContent);
-        this.data = ini_1.default.decode(defaultContent);
-    }
-    /**
-     * Load config from current path
-     */
-    load() {
-        if (!fs_1.default.existsSync(this.currentFile)) {
+        catch {
             this.data = {};
-            return;
         }
-        const fileData = fs_1.default.readFileSync(this.currentFile, 'utf8');
-        this.data = ini_1.default.decode(fileData);
     }
-    /**
-     * Read config from arbitrary path without changing current path
-     * @param path Path to read from (e.g., '/', '/domain')
-     * @returns Parsed config data from that path
-     */
-    read(path) {
-        // Normalize path
-        path = path.trim();
-        if (!path.startsWith('/'))
-            path = '/' + path;
-        if (path.length > 1 && path.endsWith('/'))
-            path = path.slice(0, -1);
-        path = path.toLowerCase();
-        // Calculate file location
-        let configFile;
-        if (path === '/') {
-            configFile = (0, path_1.join)(this.configDir, 'config.ini');
-        }
-        else {
-            configFile = (0, path_1.join)(this.configDir, path.slice(1), 'config.ini');
+    async read(path) {
+        path = normalizePath(path);
+        const configFile = path === '/'
+            ? (0, path_1.join)(this.configDir, 'config.ini')
+            : (0, path_1.join)(this.configDir, path.slice(1), 'config.ini');
+        try {
+            const fileData = await promises_1.default.readFile(configFile, 'utf8');
+            return ini_1.default.decode(fileData);
         }
-        // Read and parse
-        if (!fs_1.default.existsSync(configFile)) {
+        catch {
             return {};
         }
-        const fileData = fs_1.default.readFileSync(configFile, 'utf8');
-        return ini_1.default.decode(fileData);
     }
-    /**
-     * Save config to current path
-     */
-    save() {
-        if (!fs_1.default.existsSync(this.currentDir)) {
-            fs_1.default.mkdirSync(this.currentDir, { recursive: true });
+    async save() {
+        await promises_1.default.mkdir(this.currentDir, { recursive: true });
+        await promises_1.default.writeFile(this.currentFile, ini_1.default.stringify(this.data));
+    }
+    async readFile(filename) {
+        return promises_1.default.readFile((0, path_1.join)(this.currentDir, filename));
+    }
+    async writeFile(filename, data) {
+        await promises_1.default.mkdir(this.currentDir, { recursive: true });
+        await promises_1.default.writeFile((0, path_1.join)(this.currentDir, filename), data);
+    }
+    async exists() {
+        try {
+            await promises_1.default.access(this.currentFile);
+            return true;
+        }
+        catch {
+            return false;
         }
-        const text = ini_1.default.stringify(this.data);
-        fs_1.default.writeFileSync(this.currentFile, text);
     }
-    /**
-     * Read file from current path directory
-     */
-    readFile(filename) {
-        return fs_1.default.readFileSync((0, path_1.join)(this.currentDir, filename));
+    async listPaths() {
+        try {
+            const entries = await promises_1.default.readdir(this.currentDir, { withFileTypes: true });
+            return entries.filter(e => e.isDirectory()).map(e => e.name);
+        }
+        catch {
+            return [];
+        }
     }
-    /**
-     * Write file to current path directory
-     */
-    writeFile(filename, data) {
-        if (!fs_1.default.existsSync(this.currentDir)) {
-            fs_1.default.mkdirSync(this.currentDir, { recursive: true });
+}
+exports.LocalConfig = LocalConfig;
+/**
+ * RemoteConfig — HTTP client to an epistery-authority server. Implements the
+ * same ConfigStore interface; the authority mounts a LocalConfig behind it.
+ *
+ * Auth is the rivet key-exchange: the machine signs a challenge with its
+ * device key, and the authority issues a bearer token (see epistery-authority
+ * lib/auth.mjs). In Phase 1 config data (including the wallet mnemonic) is
+ * still served; Phase 2 splits public from secret and adds /sign/*.
+ */
+class RemoteConfig {
+    constructor(baseUrl, machineAddress, signChallenge) {
+        this.baseUrl = baseUrl;
+        this.machineAddress = machineAddress;
+        this.signChallenge = signChallenge;
+        this.data = {};
+        this.currentPath = '/';
+        this.token = null;
+        this.baseUrl = baseUrl.replace(/\/+$/, '');
+    }
+    getPath() {
+        return this.currentPath;
+    }
+    async authenticate() {
+        const fetch = globalThis.fetch;
+        const cRes = await fetch(`${this.baseUrl}/auth/challenge`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ machineAddress: this.machineAddress }),
+        });
+        if (!cRes.ok)
+            throw new Error(`authority challenge failed: ${cRes.status}`);
+        const { challenge } = await cRes.json();
+        const message = `Epistery Key Exchange - ${this.machineAddress} - ${challenge}`;
+        const signature = await this.signChallenge(message);
+        const vRes = await fetch(`${this.baseUrl}/auth/verify`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ machineAddress: this.machineAddress, message, signature }),
+        });
+        if (!vRes.ok)
+            throw new Error(`authority verify failed: ${vRes.status}`);
+        this.token = (await vRes.json()).token;
+    }
+    async authedFetch(pathAndQuery, init = {}) {
+        const fetch = globalThis.fetch;
+        if (!this.token)
+            await this.authenticate();
+        const withAuth = () => ({ ...init, headers: { ...(init.headers || {}), authorization: `Bearer ${this.token}` } });
+        let res = await fetch(this.baseUrl + pathAndQuery, withAuth());
+        if (res.status === 401) {
+            this.token = null; // expired — re-auth once
+            await this.authenticate();
+            res = await fetch(this.baseUrl + pathAndQuery, withAuth());
         }
-        fs_1.default.writeFileSync((0, path_1.join)(this.currentDir, filename), data);
+        return res;
     }
-    /**
-     * Check if config exists at current path
-     */
-    exists() {
-        return fs_1.default.existsSync(this.currentFile);
+    async setPath(path) {
+        this.currentPath = normalizePath(path);
+        await this.load();
+    }
+    async load() {
+        this.data = await this.read(this.currentPath);
+    }
+    async read(path) {
+        path = normalizePath(path);
+        const res = await this.authedFetch(`/config${path === '/' ? '/' : path}`);
+        if (!res.ok)
+            return {};
+        return (await res.json()).data || {};
+    }
+    async save() {
+        const path = this.currentPath;
+        const res = await this.authedFetch(`/config${path === '/' ? '/' : path}`, {
+            method: 'PUT',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ data: this.data }),
+        });
+        if (!res.ok)
+            throw new Error(`authority save failed: ${res.status}`);
+    }
+    filePrefix() {
+        return this.currentPath === '/' ? '' : this.currentPath;
+    }
+    async readFile(filename) {
+        const res = await this.authedFetch(`/file${this.filePrefix()}/${filename}`);
+        if (!res.ok)
+            throw new Error(`authority file read failed: ${res.status}`);
+        return Buffer.from(await res.arrayBuffer());
+    }
+    async writeFile(filename, data) {
+        const res = await this.authedFetch(`/file${this.filePrefix()}/${filename}`, {
+            method: 'PUT',
+            headers: { 'content-type': 'application/octet-stream' },
+            body: data,
+        });
+        if (!res.ok)
+            throw new Error(`authority file write failed: ${res.status}`);
+    }
+    async exists() {
+        const data = await this.read(this.currentPath);
+        return !!data && Object.keys(data).length > 0;
+    }
+    async listPaths() {
+        const res = await this.authedFetch(`/paths${this.currentPath === '/' ? '/' : this.currentPath}`);
+        if (!res.ok)
+            return [];
+        return (await res.json()).paths || [];
+    }
+}
+exports.RemoteConfig = RemoteConfig;
+/**
+ * Config — the public facade. `new Config()` selects the backend synchronously
+ * (reading only the local bootstrap), then delegates every async operation.
+ * Existing call sites change only by adding `await`.
+ */
+class Config {
+    constructor(rootName = 'epistery') {
+        this.local = new LocalConfig(rootName);
+        const authorityUrl = Config.resolveAuthorityUrl(rootName);
+        if (authorityUrl) {
+            const { machineAddress, sign } = Config.machineSigner(rootName);
+            this.backend = new RemoteConfig(authorityUrl, machineAddress, sign);
+        }
+        else {
+            this.backend = this.local;
+        }
+    }
+    /** Read the local bootstrap config.ini synchronously (authority selection only). */
+    static readBootstrap(rootName) {
+        const homeDir = (process.platform === 'win32' ? process.env.USERPROFILE : process.env.HOME) || '';
+        const file = (0, path_1.join)(homeDir, '.' + rootName, 'config.ini');
+        try {
+            return ini_1.default.decode(fs_1.default.readFileSync(file, 'utf8'));
+        }
+        catch {
+            return {};
+        }
+    }
+    static resolveAuthorityUrl(rootName) {
+        if (process.env.EPISTERY_CONFIG_URL)
+            return process.env.EPISTERY_CONFIG_URL;
+        const boot = Config.readBootstrap(rootName);
+        return boot?.authority?.url || null;
     }
     /**
-     * List all subdirectories at current path
+     * Build the machine signer used to authenticate to the authority. The machine
+     * rivet key lives in the local bootstrap [authority] section (Phase 1). A
+     * future TPM-backed key replaces this without changing the call site.
      */
-    listPaths() {
-        if (!fs_1.default.existsSync(this.currentDir)) {
-            return [];
+    static machineSigner(rootName) {
+        const boot = Config.readBootstrap(rootName);
+        const a = boot?.authority || {};
+        let wallet;
+        if (a.machineMnemonic) {
+            wallet = ethers_1.ethers.Wallet.fromMnemonic(a.machineMnemonic);
+        }
+        else if (a.machineKey) {
+            wallet = new ethers_1.ethers.Wallet(a.machineKey);
         }
-        return fs_1.default.readdirSync(this.currentDir, { withFileTypes: true })
-            .filter(dirent => dirent.isDirectory())
-            .map(dirent => dirent.name);
+        else {
+            throw new Error('Config: [authority] url is set but no machine credential ([authority] machineMnemonic or machineKey) is configured to authenticate to it.');
+        }
+        return { machineAddress: wallet.address, sign: (m) => wallet.signMessage(m) };
     }
+    // Local-machine facts (always the bootstrap LocalConfig, even in remote mode):
+    // these are filesystem paths some callers need (e.g. CliWallet session dir).
+    get rootName() { return this.local.rootName; }
+    get homeDir() { return this.local.homeDir; }
+    get configDir() { return this.local.configDir; }
+    get data() { return this.backend.data; }
+    set data(v) { this.backend.data = v; }
+    getPath() { return this.backend.getPath(); }
+    setPath(path) { return this.backend.setPath(path); }
+    load() { return this.backend.load(); }
+    read(path) { return this.backend.read(path); }
+    save() { return this.backend.save(); }
+    readFile(filename) { return this.backend.readFile(filename); }
+    writeFile(filename, data) { return this.backend.writeFile(filename, data); }
+    exists() { return this.backend.exists(); }
+    listPaths() { return this.backend.listPaths(); }
 }
 exports.Config = Config;
 const defaultIni = `[profile]
@@ -204,5 +338,12 @@ nativeCurrencyDecimals=18
 ;   minPriorityFeeGwei=25         ; Polygon RPC floor (don't lower)
 ;   [default.rpc.81.policy]
 ;   maxGasPriceGwei=1000           ; legacy-chain analogue (JOC)
+
+; Shared Configuration Authority (optional). When set, Config reads/writes
+; through the epistery-authority server instead of the local filesystem, so
+; this host becomes a stateless pool member. EPISTERY_CONFIG_URL overrides url.
+;   [authority]
+;   url=https://epistery-authority-1.internal:4500
+;   machineMnemonic=...            ; this machine's rivet (or machineKey=0x…)
 `;
 //# sourceMappingURL=Config.js.map

package/dist/utils/Config.js.map

@@ -1 +1 @@
-{"version":3,"file":"Config.js","sourceRoot":"","sources":["../../src/utils/Config.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,+BAA4B;AAC5B,8CAAsB;AAEtB;;;;;;;;;;;;;;GAcG;AACH,MAAa,MAAM;IAWjB,YAAY,WAAmB,UAAU;QANjC,gBAAW,GAAW,GAAG,CAAC;QAI3B,SAAI,GAAQ,EAAE,CAAC;QAGpB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjG,IAAI,CAAC,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAEtD,6CAA6C;QAC7C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,OAAO,CAAC,IAAY;QACzB,yEAAyE;QACzE,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAE1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,qCAAqC;QACrC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,IAAI,CAAC,WAAW,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB;YAC1E,IAAI,CAAC,WAAW,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACzD,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACI,OAAO;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,YAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,iDAAiD;QACjD,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,YAAE,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,aAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACI,IAAI;QACT,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,YAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,aAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACI,IAAI,CAAC,IAAY;QACtB,iBAAiB;QACjB,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAE1B,0BAA0B;QAC1B,IAAI,UAAkB,CAAC;QACvB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACjE,CAAC;QAED,iBAAiB;QACjB,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAAG,YAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,aAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACI,IAAI;QACT,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,YAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,aAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,YAAE,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,QAAQ,CAAC,QAAgB;QAC9B,OAAO,YAAE,CAAC,YAAY,CAAC,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,QAAgB,EAAE,IAAqB;QACtD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,YAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,YAAE,CAAC,aAAa,CAAC,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACI,MAAM;QACX,OAAO,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACI,SAAS;QACd,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,YAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC5D,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;aACtC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;CACF;AApKD,wBAoKC;AAED,MAAM,UAAU,GAChB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCC,CAAA"}
+{"version":3,"file":"Config.js","sourceRoot":"","sources":["../../src/utils/Config.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,2DAA8B;AAC9B,+BAA4B;AAC5B,8CAAsB;AACtB,mCAAgC;AAsChC,qEAAqE;AACrE,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;IAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAa,WAAW;IAWtB,YAAY,WAAmB,UAAU;QANjC,gBAAW,GAAW,GAAG,CAAC;QAI3B,SAAI,GAAQ,EAAE,CAAC;QAGpB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjG,IAAI,CAAC,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAEtD,2EAA2E;QAC3E,2EAA2E;QAC3E,0BAA0B;QAC1B,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,YAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,YAAE,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,aAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,IAAY;QAC/B,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,IAAI,CAAC,WAAW,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,WAAW,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,GAAG,aAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,IAAY;QAC5B,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,UAAU,GAAG,IAAI,KAAK,GAAG;YAC7B,CAAC,CAAC,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;YACpC,CAAC,CAAC,IAAA,WAAI,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxD,OAAO,aAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,MAAM,kBAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,kBAAG,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,aAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,QAAgB;QACpC,OAAO,kBAAG,CAAC,QAAQ,CAAC,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,IAAqB;QAC5D,MAAM,kBAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,kBAAG,CAAC,SAAS,CAAC,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC;YACH,MAAM,kBAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,kBAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AA5GD,kCA4GC;AAED;;;;;;;;GAQG;AACH,MAAa,YAAY;IAKvB,YACmB,OAAe,EACf,cAAsB,EACtB,aAAmD;QAFnD,YAAO,GAAP,OAAO,CAAQ;QACf,mBAAc,GAAd,cAAc,CAAQ;QACtB,kBAAa,GAAb,aAAa,CAAsC;QAP/D,SAAI,GAAQ,EAAE,CAAC;QACd,gBAAW,GAAW,GAAG,CAAC;QAC1B,UAAK,GAAkB,IAAI,CAAC;QAOlC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,KAAK,GAAI,UAAkB,CAAC,KAAK,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,iBAAiB,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAExC,MAAM,OAAO,GAAG,2BAA2B,IAAI,CAAC,cAAc,MAAM,SAAS,EAAE,CAAC;QAChF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAEpD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,cAAc,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;SAClF,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,YAAoB,EAAE,OAAY,EAAE;QAC5D,MAAM,KAAK,GAAI,UAAkB,CAAC,KAAK,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAClH,IAAI,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAY,yBAAyB;YACvD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,IAAY;QAC/B,IAAI,CAAC,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,IAAY;QAC5B,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;YACxE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC1D,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,QAAgB;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,IAAI,QAAQ,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,IAAqB;QAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,IAAI,QAAQ,EAAE,EAAE;YAC1E,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;YACvD,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAChD,CAAC;IAEM,KAAK,CAAC,SAAS;QACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACjG,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;IACxC,CAAC;CACF;AA3GD,oCA2GC;AAED;;;;GAIG;AACH,MAAa,MAAM;IAIjB,YAAY,WAAmB,UAAU;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAChE,IAAI,CAAC,OAAO,GAAG,IAAI,YAAY,CAAC,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,oFAAoF;IAC5E,MAAM,CAAC,aAAa,CAAC,QAAgB;QAC3C,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAClG,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,aAAG,CAAC,MAAM,CAAC,YAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAAC,QAAgB;QACjD,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,aAAa,CAAC,QAAgB;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;QAChC,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;YACtB,MAAM,GAAG,eAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,eAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,2IAA2I,CAC5I,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,IAAW,QAAQ,KAAa,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,IAAW,OAAO,KAAa,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,IAAW,SAAS,KAAa,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAE/D,IAAW,IAAI,KAAU,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,IAAW,IAAI,CAAC,CAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IAE3C,OAAO,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,IAAY,IAAmB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,KAAoB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,IAAY,IAAkB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,KAAoB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,QAAgB,IAAqB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvF,SAAS,CAAC,QAAgB,EAAE,IAAqB,IAAmB,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACpH,MAAM,KAAuB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5D,SAAS,KAAwB,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;CAC3E;AAvED,wBAuEC;AAED,MAAM,UAAU,GAChB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CC,CAAC"}