metered-protocol 1.0.0

package/dist/tools/expire-cases.js

@@ -0,0 +1,211 @@
+/**
+ * The `expire` cases -- the payout path, and the one that carries every bug found in this covenant.
+ *
+ * Every case here needs a real transaction signature, so each is built twice: once with a
+ * placeholder to learn the sighash, once with the signature over it. See tools/sighash.ts.
+ */
+import { sighashFor, signSighash } from './sighash.js';
+import { BUYER_PK, BUYER_SK, PROVIDER_PK, PROVIDER_SK, STRANGER_SK, FUNDED, FEE, WINDOW, ctor, x } from './fixtures.js';
+const PLACEHOLDER = x('44'.repeat(65));
+const CLAIM = 4_000_000;
+/** An expire spends the covenant and pays out. `sequence` is what satisfies the relative window. */
+function expireTx(pendingSeq, pendingSompi, outputs, sequence = WINDOW) {
+    return {
+        active_input_index: 0,
+        inputs: [{ utxo_value: FUNDED, sequence, constructor_args: ctor(pendingSeq, pendingSompi) }],
+        outputs,
+    };
+}
+const toBuyer = (value) => ({ value, p2pk_pubkey: x(BUYER_PK) });
+const toProvider = (value) => ({ value, p2pk_pubkey: x(PROVIDER_PK) });
+/** Each case, with the key that must sign it. The signature is filled in afterwards. */
+const PLAN = [
+    {
+        signer: BUYER_SK,
+        case: {
+            name: 'BUG 1, THE STUCK FUNDS: nobody ever settled, so the buyer takes everything back',
+            function: 'expire',
+            constructor_args: ctor(-1, 0),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'pass',
+            tx: expireTx(-1, 0, [toBuyer(FUNDED - FEE)]),
+        },
+    },
+    {
+        signer: BUYER_SK,
+        case: {
+            name: 'BUG 1: with no claim, paying the provider instead of refunding the buyer is refused',
+            function: 'expire',
+            constructor_args: ctor(-1, 0),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: expireTx(-1, 0, [toProvider(FUNDED - FEE)]),
+        },
+    },
+    {
+        signer: PROVIDER_SK,
+        case: {
+            name: 'the normal payout: the provider takes the claim, the buyer takes the remainder',
+            function: 'expire',
+            constructor_args: ctor(3, CLAIM),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'pass',
+            tx: expireTx(3, CLAIM, [toProvider(CLAIM), toBuyer(FUNDED - CLAIM - FEE)]),
+        },
+    },
+    {
+        signer: PROVIDER_SK,
+        case: {
+            name: 'BUG 2, THE BURNED REFUND: paying the buyer a token amount and burning the rest to fee is refused',
+            function: 'expire',
+            constructor_args: ctor(3, CLAIM),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: expireTx(3, CLAIM, [toProvider(CLAIM), toBuyer(1)]),
+        },
+    },
+    {
+        signer: PROVIDER_SK,
+        case: {
+            name: 'THE OVERCLAIM: paying the provider more than the pending claim is refused',
+            function: 'expire',
+            constructor_args: ctor(3, CLAIM),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: expireTx(3, CLAIM, [toProvider(CLAIM + 1_000_000), toBuyer(FUNDED - CLAIM - 1_000_000 - FEE)]),
+        },
+    },
+    {
+        signer: PROVIDER_SK,
+        case: {
+            name: 'THE WRONG DESTINATION: paying the claim to a stranger instead of the provider is refused',
+            function: 'expire',
+            constructor_args: ctor(3, CLAIM),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: expireTx(3, CLAIM, [{ value: CLAIM, p2pk_pubkey: x('cc'.repeat(32)) }, toBuyer(FUNDED - CLAIM - FEE)]),
+        },
+    },
+    {
+        signer: STRANGER_SK,
+        case: {
+            name: 'A STRANGER CANNOT CLOSE: expire signed by neither party is refused',
+            function: 'expire',
+            constructor_args: ctor(3, CLAIM),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: expireTx(3, CLAIM, [toProvider(CLAIM), toBuyer(FUNDED - CLAIM - FEE)]),
+        },
+    },
+    {
+        signer: BUYER_SK,
+        case: {
+            name: 'FINDING G: a claim too small to pay closes to the buyer instead of locking forever',
+            function: 'expire',
+            constructor_args: ctor(3, 100_000),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'pass',
+            tx: expireTx(3, 100_000, [toBuyer(FUNDED - FEE)]),
+        },
+    },
+    {
+        signer: PROVIDER_SK,
+        case: {
+            name: 'FINDING G: a dust claim may NOT be paid to the provider -- it cannot be created',
+            function: 'expire',
+            constructor_args: ctor(3, 100_000),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: expireTx(3, 100_000, [toProvider(100_000), toBuyer(FUNDED - 100_000 - FEE)]),
+        },
+    },
+    {
+        signer: BUYER_SK,
+        case: {
+            // THE WINDOW THAT USED TO STRAND THE FUNDS. With the dust constant at 2,000,000 this claim
+            // took the two-output branch, which demanded an output of exactly 2,100,000 -- and KIP-9
+            // refuses to create one that small beside a large refund, so the session had NO legal close
+            // at all. tools/dust-map.ts found the window; 2,600,000 folds it to the buyer instead.
+            name: 'THE UNCLOSABLE WINDOW: a claim just above the old dust line folds, it does not strand',
+            function: 'expire',
+            constructor_args: ctor(3, 2_100_000),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'pass',
+            tx: expireTx(3, 2_100_000, [toBuyer(FUNDED - FEE)]),
+        },
+    },
+    {
+        signer: PROVIDER_SK,
+        case: {
+            // The other half: it must NOT be payable to the provider, because it still cannot be
+            // created. A fold that merely moved the problem would be no fix.
+            name: 'THE UNCLOSABLE WINDOW: that same claim still may not be paid to the provider',
+            function: 'expire',
+            constructor_args: ctor(3, 2_100_000),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: expireTx(3, 2_100_000, [toProvider(2_100_000), toBuyer(FUNDED - 2_100_000 - FEE)]),
+        },
+    },
+    {
+        signer: PROVIDER_SK,
+        case: {
+            name: 'FINDING H: a one-output close that burns a payable refund to fee is refused',
+            function: 'expire',
+            constructor_args: ctor(3, CLAIM),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: expireTx(3, CLAIM, [toProvider(CLAIM)]),
+        },
+    },
+    {
+        signer: PROVIDER_SK,
+        case: {
+            name: 'a refund too small to pay folds into the provider, rather than locking the balance',
+            function: 'expire',
+            constructor_args: ctor(3, FUNDED - 1_000_000),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'pass',
+            tx: expireTx(3, FUNDED - 1_000_000, [toProvider(FUNDED - 1_000_000)]),
+        },
+    },
+    {
+        signer: PROVIDER_SK,
+        case: {
+            name: 'FINDING J: two covenant inputs paying out once is refused -- input-group closure',
+            function: 'expire',
+            constructor_args: ctor(3, CLAIM),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: {
+                active_input_index: 0,
+                inputs: [
+                    { utxo_value: FUNDED, sequence: WINDOW, constructor_args: ctor(3, CLAIM) },
+                    { utxo_value: FUNDED, sequence: WINDOW, constructor_args: ctor(3, CLAIM) },
+                ],
+                outputs: [toProvider(CLAIM), toBuyer(FUNDED - CLAIM - FEE)],
+            },
+        },
+    },
+    {
+        signer: BUYER_SK,
+        case: {
+            name: 'P10/THE EARLY CLOSE: expiring before the response window has passed is refused',
+            function: 'expire',
+            constructor_args: ctor(3, CLAIM),
+            args: [x(BUYER_PK), x(PROVIDER_PK), PLACEHOLDER],
+            expect: 'fail',
+            tx: expireTx(3, CLAIM, [toProvider(CLAIM), toBuyer(FUNDED - CLAIM - FEE)], WINDOW - 1),
+        },
+    },
+];
+/** Ask the VM for each case's sighash, sign it, and return the cases with real signatures. */
+export function buildExpireCases(contractPath) {
+    return PLAN.map(({ case: testCase, signer }) => {
+        const sighash = sighashFor(contractPath, testCase);
+        const args = [...testCase.args];
+        args[2] = x(signSighash(sighash, signer));
+        return { ...testCase, args };
+    });
+}
+//# sourceMappingURL=expire-cases.js.map

package/dist/tools/expire-cases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expire-cases.js","sourceRoot":"","sources":["../../tools/expire-cases.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAa,MAAM,eAAe,CAAC;AAEnI,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACvC,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,oGAAoG;AACpG,SAAS,QAAQ,CAAC,UAAkB,EAAE,YAAoB,EAAE,OAAkB,EAAE,QAAQ,GAAG,MAAM;IAC/F,OAAO;QACL,kBAAkB,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5F,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACzE,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAE/E,wFAAwF;AACxF,MAAM,IAAI,GAAqC;IAC7C;QACE,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE;YACJ,IAAI,EAAE,iFAAiF;YACvF,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;SAC7C;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE;YACJ,IAAI,EAAE,qFAAqF;YAC3F,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;SAChD;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,gFAAgF;YACtF,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC;SAC3E;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,kGAAkG;YACxG,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;SACxD;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,2EAA2E;YACjF,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,GAAG,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC;SACnG;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,0FAA0F;YAChG,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC;SAC3G;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,oEAAoE;YAC1E,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC;SAC3E;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE;YACJ,IAAI,EAAE,oFAAoF;YAC1F,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;YAClC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;SAClD;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,iFAAiF;YACvF,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;YAClC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;SACjF;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE;YACJ,2FAA2F;YAC3F,yFAAyF;YACzF,4FAA4F;YAC5F,uFAAuF;YACvF,IAAI,EAAE,uFAAuF;YAC7F,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC;YACpC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;SACpD;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,qFAAqF;YACrF,iEAAiE;YACjE,IAAI,EAAE,8EAA8E;YACpF,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC;YACpC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC;SACvF;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,6EAA6E;YACnF,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;SAC5C;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,oFAAoF;YAC1F,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAC7C,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;SACtE;KACF;IACD;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE;YACJ,IAAI,EAAE,kFAAkF;YACxF,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE;gBACF,kBAAkB,EAAE,CAAC;gBACrB,MAAM,EAAE;oBACN,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE;oBAC1E,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE;iBAC3E;gBACD,OAAO,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;aAC5D;SACF;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE;YACJ,IAAI,EAAE,gFAAgF;YACtF,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;YAChD,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;SACvF;KACF;CACF,CAAC;AAEF,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/fee-check.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fee-check.d.ts.map

package/dist/tools/fee-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fee-check.d.ts","sourceRoot":"","sources":["../../tools/fee-check.ts"],"names":[],"mappings":""}

package/dist/tools/fee-check.js

@@ -0,0 +1,127 @@
+/**
+ * `npm run fee-check` -- does the covenant's compiled-in fee allowance hold on MAINNET?
+ *
+ * WHY THIS CANNOT WAIT UNTIL AFTER A DEPLOYMENT. `expire` reserves 400,000 sompi for the
+ * transaction that closes a session, and that number is COMPILED INTO THE SCRIPT. If mainnet
+ * prices the close above it, the covenant demands an output it cannot afford to pay for, no valid
+ * close exists, and the balance is stranded -- with no way to patch the script that stranded it.
+ * Finding E cost a live spend to learn the allowance was below the minimum; this asks the same
+ * question of a different network, in advance.
+ *
+ * THE SDK'S FEE CALCULATOR IS NOT THE ORACLE HERE, and finding that out was the point of writing
+ * this. `calculateTransactionFee` returns `undefined` above `maximumStandardTransactionMass`,
+ * which is 100,000 on both networks -- and a two-output close of this covenant has a STORAGE mass
+ * of 251,929, because KIP-9 prices an output by its reciprocal and a 4,000,000-sompi payout is
+ * expensive by that measure. So the SDK refuses to price a transaction THIS PROJECT HAS REPEATEDLY
+ * LANDED ON CHAIN: 100,000 is a standard-transaction policy, while the consensus limit KIP-9
+ * enforces is 500,000, which tools/dust-map.ts models against a real rejection.
+ *
+ * So this reports three things separately rather than one number: what the two networks' rules
+ * are, what the compute fee is where the SDK will price it, and where each shape sits against the
+ * consensus storage limit. A single "fits" would have hidden all of it.
+ */
+import { mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { loadSdk } from './kaspa.js';
+import { CLOSE_FEE_SOMPI } from '../src/reservation.js';
+import { compileWithState } from './covenant.js';
+import { buildExpire } from './live-steps.js';
+import { publicKeyHex } from '../src/encoding.js';
+const FUNDED = 50000000n;
+/**
+ * Build the REAL close transaction, with the real redeem script and a real signature.
+ *
+ * An earlier version of this file modelled the transaction by hand and reported a mass of 251,929
+ * with a fee of zero -- the fee was `undefined`, meaning the SDK could not price it, and a `?? 0n`
+ * turned that into a pass. Measuring the real thing removes both the model and the excuse.
+ */
+const dir = mkdtempSync(join(tmpdir(), 'metered-fee-'));
+const BUYER_SK = '11'.repeat(32);
+const PROVIDER_SK = '22'.repeat(32);
+function closeTx(sdk, network, outputs) {
+    const networkId = new sdk.NetworkId(network);
+    const buyer = new sdk.PrivateKey(BUYER_SK).toKeypair().toAddress(networkId).toString();
+    const provider = new sdk.PrivateKey(PROVIDER_SK).toKeypair().toAddress(networkId).toString();
+    const built = compileWithState(dir, {
+        parties: 'cd'.repeat(32), sessionId: 'a1'.repeat(16), window: 2, seq: 3, sompi: 4_000_000,
+    });
+    const utxo = {
+        address: buyer,
+        outpoint: { transactionId: 'ab'.repeat(32), index: 0 },
+        amount: FUNDED,
+        scriptPublicKey: sdk.payToScriptHashScript(built.hex),
+        blockDaaScore: 1n,
+        isCoinbase: false,
+    };
+    const addrs = [provider, buyer];
+    return buildExpire(sdk, {
+        buyerPk: publicKeyHex(BUYER_SK), providerPk: publicKeyHex(PROVIDER_SK), signerSk: BUYER_SK,
+        redeem: built.hex, tag: built.entries.expire?.dispatch_tag ?? '',
+    }, utxo, outputs.map((amount, i) => ({ address: addrs[i] ?? buyer, amount })), 2);
+}
+const SHAPES = [
+    { name: 'two outputs (provider + buyer)', outputs: [4000000n, FUNDED - 4000000n - BigInt(CLOSE_FEE_SOMPI)] },
+    { name: 'one output, folded', outputs: [FUNDED - BigInt(CLOSE_FEE_SOMPI)] },
+];
+/** KIP-9's consensus limit on storage mass, validated against a real rejection in dust-map.ts. */
+const STORAGE_LIMIT = 500000n;
+/** Price every close shape on every network, and return the fees the SDK is willing to quote. */
+function reportShapes(sdk, networks) {
+    console.log('\n  2. WHAT EACH CLOSE SHAPE COSTS');
+    console.log(`     ${'shape'.padEnd(32)}${'network'.padEnd(13)}${'mass'.padStart(9)}${'fee'.padStart(11)}`);
+    const fees = [];
+    for (const shape of SHAPES) {
+        for (const network of networks) {
+            const tx = closeTx(sdk, network, shape.outputs);
+            const mass = sdk.calculateTransactionMass(network, tx);
+            const priced = sdk.calculateTransactionFee(network, tx);
+            if (priced !== undefined)
+                fees.push(priced);
+            const shown = priced === undefined ? 'unpriced' : String(priced);
+            console.log(`     ${shape.name.padEnd(32)}${network.padEnd(13)}${String(mass).padStart(9)}${shown.padStart(11)}`);
+        }
+    }
+    console.log('     "unpriced" = above the 100,000 STANDARD-transaction policy, not above consensus.');
+    return fees;
+}
+async function main() {
+    const sdk = await loadSdk();
+    const networks = ['mainnet', 'testnet-10'];
+    console.log(`
+  COVENANT FEE ALLOWANCE: ${CLOSE_FEE_SOMPI.toLocaleString()} sompi, compiled into the script
+`);
+    console.log('  1. DO THE TWO NETWORKS PRICE ALIKE?');
+    const limits = networks.map((n) => String(sdk.maximumStandardTransactionMass(n)));
+    for (const [i, n] of networks.entries()) {
+        console.log(`     ${n.padEnd(12)} maximumStandardTransactionMass ${limits[i]}`);
+    }
+    const alike = new Set(limits).size === 1;
+    console.log(`     ${alike ? 'IDENTICAL' : 'THEY DIFFER -- do not assume testnet measurements carry over'}`);
+    const fees = reportShapes(sdk, networks);
+    console.log('\n  3. WHERE EACH SHAPE SITS AGAINST THE KIP-9 CONSENSUS LIMIT');
+    for (const shape of SHAPES) {
+        // Numbers, not bigints: the signature says Array<number>, and bigints panic inside the WASM.
+        const storage = sdk.calculateStorageMass('mainnet', [Number(FUNDED)], shape.outputs.map(Number));
+        const ok = storage !== undefined && storage <= STORAGE_LIMIT;
+        console.log(`     ${shape.name.padEnd(32)}storage mass ${String(storage).padStart(7)} / ${STORAGE_LIMIT}   ${ok ? 'legal' : 'REFUSED'}`);
+    }
+    const worst = fees.reduce((a, b) => (b > a ? b : a), 0n);
+    const headroom = BigInt(CLOSE_FEE_SOMPI) - worst;
+    console.log(`
+  WORST PRICED FEE ${worst.toLocaleString()} sompi, allowance ${CLOSE_FEE_SOMPI.toLocaleString()}, headroom ${headroom.toLocaleString()}`);
+    if (headroom < 0n) {
+        console.log('\n  THE ALLOWANCE IS TOO SMALL. Do not deploy: closes would be unaffordable.\n');
+        process.exit(1);
+    }
+    if (!alike)
+        process.exit(1);
+    console.log('  Both networks price identically, and the allowance covers the worst of them.\n');
+}
+main().catch((err) => {
+    console.error(`
+  ${err instanceof Error ? err.message : String(err)}
+`);
+    process.exit(1);
+});
+//# sourceMappingURL=fee-check.js.map

package/dist/tools/fee-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fee-check.js","sourceRoot":"","sources":["../../tools/fee-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAgB,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,MAAM,MAAM,GAAG,SAAW,CAAC;AAE3B;;;;;;GAMG;AACH,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;AACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEpC,SAAS,OAAO,CAAC,GAAQ,EAAE,OAAgB,EAAE,OAAiB;IAC5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7F,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE;QAClC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS;KAC1F,CAAC,CAAC;IACH,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QACtD,MAAM,EAAE,MAAM;QACd,eAAe,EAAE,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC;QACrD,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,KAAK;KAClB,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,WAAW,CAChB,GAAG,EACH;QACE,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ;QAC1F,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE;KACjE,EACD,IAAI,EACJ,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,EACpE,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAA0C;IACpD,EAAE,IAAI,EAAE,gCAAgC,EAAE,OAAO,EAAE,CAAC,QAAU,EAAE,MAAM,GAAG,QAAU,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE;IAChH,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE;CAC5E,CAAC;AAEF,kGAAkG;AAClG,MAAM,aAAa,GAAG,OAAQ,CAAC;AAE/B,iGAAiG;AACjG,SAAS,YAAY,CAAC,GAAQ,EAAE,QAAmB;IACjD,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,GAAG,CAAC,wBAAwB,CAAC,OAAO,EAAE,EAAE,CAAW,CAAC;YACjE,MAAM,MAAM,GAAG,GAAG,CAAC,uBAAuB,CAAC,OAAO,EAAE,EAAE,CAAuB,CAAC;YAC9E,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;IACrG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAc,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEtD,OAAO,CAAC,GAAG,CAAC;4BACc,eAAe,CAAC,cAAc,EAAE;CAC3D,CAAC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,mCAAmC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,8DAA8D,EAAE,CAAC,CAAC;IAE5G,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEzC,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,6FAA6F;QAC7F,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,CACtC,SAAS,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CACjC,CAAC;QACxB,MAAM,EAAE,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,aAAa,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3I,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC;qBACO,KAAK,CAAC,cAAc,EAAE,qBAAqB,eAAe,CAAC,cAAc,EAAE,cAAc,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACzI,IAAI,QAAQ,GAAG,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;AAClG,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC;IACZ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;CACnD,CAAC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools/fixtures.d.ts

@@ -0,0 +1,39 @@
+export declare const BUYER_SK: string;
+export declare const PROVIDER_SK: string;
+export declare const STRANGER_SK: string;
+export declare const BUYER_PK: string;
+export declare const PROVIDER_PK: string;
+export declare const STRANGER_PK: string;
+export declare const SESSION_ID: string;
+export declare const WINDOW = 10;
+export declare const FUNDED = 10000000;
+/**
+ * MUST equal the covenant's fee allowance. It is not a test convenience: THE DRAIN case works by
+ * keeping one sompi more than the contract permits, so if this drifts below the contract's figure
+ * the case stops testing anything and passes for the wrong reason. It did exactly that when the
+ * allowance was raised from 100,000, and the suite caught it.
+ */
+export declare const FEE = 400000;
+/** The covenant's `parties`: blake3 over the two x-only keys, concatenated raw. */
+export declare const PARTIES: string;
+export declare const x: (hex: string) => string;
+/** Constructor arguments in declaration order, carrying whatever claim is currently pending. */
+export declare const ctor: (pendingSeq: number, pendingSompi: number) => (string | number)[];
+export interface Case {
+    name: string;
+    function: string;
+    constructor_args: unknown[];
+    args: unknown[];
+    expect: 'pass' | 'fail';
+    tx: unknown;
+}
+export interface State {
+    v: number;
+    sessionId: string;
+    seq: number;
+    cumulativeUnits: number;
+    cumulativeSompi: number;
+    prevState: string | null;
+}
+export declare const state: (seq: number, units: number, sompi: number, prev?: string | null) => State;
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/tools/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../tools/fixtures.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,QAAQ,QAAkB,CAAC;AACxC,eAAO,MAAM,WAAW,QAAkB,CAAC;AAC3C,eAAO,MAAM,WAAW,QAAkB,CAAC;AAE3C,eAAO,MAAM,QAAQ,QAAyB,CAAC;AAC/C,eAAO,MAAM,WAAW,QAA4B,CAAC;AACrD,eAAO,MAAM,WAAW,QAA4B,CAAC;AAErD,eAAO,MAAM,UAAU,QAAkB,CAAC;AAC1C,eAAO,MAAM,MAAM,KAAK,CAAC;AACzB,eAAO,MAAM,MAAM,WAAa,CAAC;AACjC;;;;;GAKG;AACH,eAAO,MAAM,GAAG,SAAU,CAAC;AAE3B,mFAAmF;AACnF,eAAO,MAAM,OAAO,QAEnB,CAAC;AAEF,eAAO,MAAM,CAAC,GAAI,KAAK,MAAM,WAAe,CAAC;AAE7C,gGAAgG;AAChG,eAAO,MAAM,IAAI,GAAI,YAAY,MAAM,EAAE,cAAc,MAAM,wBACE,CAAC;AAEhE,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,EAAE,EAAE,OAAO,CAAC;CACb;AAED,MAAM,WAAW,KAAK;IACpB,CAAC,EAAE,MAAM,CAAC;IACV,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,eAAO,MAAM,KAAK,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,EAAE,OAAO,MAAM,EAAE,OAAM,MAAM,GAAG,IAAW,KAAG,KACW,CAAC"}

package/dist/tools/fixtures.js

@@ -0,0 +1,31 @@
+/**
+ * Shared fixtures for the covenant's simulator suite. One place, so the settle cases and the
+ * expire cases cannot drift into disagreeing about who the parties are -- which would look like a
+ * contract bug and be a test bug.
+ */
+import { blake3 } from '@noble/hashes/blake3';
+import { bytesToHex, hexToBytes } from '@noble/hashes/utils';
+import { publicKeyHex } from '../src/encoding.js';
+export const BUYER_SK = '11'.repeat(32);
+export const PROVIDER_SK = '22'.repeat(32);
+export const STRANGER_SK = '33'.repeat(32);
+export const BUYER_PK = publicKeyHex(BUYER_SK);
+export const PROVIDER_PK = publicKeyHex(PROVIDER_SK);
+export const STRANGER_PK = publicKeyHex(STRANGER_SK);
+export const SESSION_ID = 'a1'.repeat(16);
+export const WINDOW = 10;
+export const FUNDED = 10_000_000;
+/**
+ * MUST equal the covenant's fee allowance. It is not a test convenience: THE DRAIN case works by
+ * keeping one sompi more than the contract permits, so if this drifts below the contract's figure
+ * the case stops testing anything and passes for the wrong reason. It did exactly that when the
+ * allowance was raised from 100,000, and the suite caught it.
+ */
+export const FEE = 400_000;
+/** The covenant's `parties`: blake3 over the two x-only keys, concatenated raw. */
+export const PARTIES = bytesToHex(blake3(new Uint8Array([...hexToBytes(BUYER_PK), ...hexToBytes(PROVIDER_PK)]), { dkLen: 32 }));
+export const x = (hex) => `0x${hex}`;
+/** Constructor arguments in declaration order, carrying whatever claim is currently pending. */
+export const ctor = (pendingSeq, pendingSompi) => [x(PARTIES), x(SESSION_ID), WINDOW, pendingSeq, pendingSompi];
+export const state = (seq, units, sompi, prev = null) => ({ v: 1, sessionId: SESSION_ID, seq, cumulativeUnits: units, cumulativeSompi: sompi, prevState: prev });
+//# sourceMappingURL=fixtures.js.map

package/dist/tools/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../tools/fixtures.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE3C,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1C,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,CAAC;AACzB,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC;AACjC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC;AAE3B,mFAAmF;AACnF,MAAM,CAAC,MAAM,OAAO,GAAG,UAAU,CAC/B,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAC7F,CAAC;AAEF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;AAE7C,gGAAgG;AAChG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,UAAkB,EAAE,YAAoB,EAAE,EAAE,CAC/D,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAoBhE,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,KAAa,EAAE,OAAsB,IAAI,EAAS,EAAE,CACpG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC"}

package/dist/tools/gen-contract-tests.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gen-contract-tests.d.ts.map

package/dist/tools/gen-contract-tests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gen-contract-tests.d.ts","sourceRoot":"","sources":["../../tools/gen-contract-tests.ts"],"names":[],"mappings":""}

package/dist/tools/gen-contract-tests.js

@@ -0,0 +1,170 @@
+/**
+ * `npm run contracts:gen` -- generate the covenant's simulator suite, with REAL signatures.
+ *
+ * Why this exists. Both entry points check a signature before doing anything else, and the
+ * SilverScript simulator verifies signatures for real -- it hands `sig`/`datasig` to the VM as
+ * opaque blobs. So a hand-written test file cannot execute a single line of this contract.
+ * kaspa-depin never tested a signature path for exactly this reason; its only suite covers
+ * `topUp`, which needs no key.
+ *
+ * The two entries need different treatment. `settle` uses `checkMsgSig` (OpCheckSigFromStack),
+ * which verifies a signature over SUPPLIED DATA -- the signed message is just the 32-byte
+ * settlement digest, so it can be signed here and now. `expire` uses `checkSig`, which covers the
+ * spending transaction, and that needs the two-pass harness in tools/sighash.ts.
+ *
+ * The settle signatures come from src/encoding.ts -- the same code the protocol signs with. If the
+ * covenant and the encoder ever disagree about the 72-byte preimage of SPEC.md 3.4.1, these tests
+ * fail. That is the point: this is a conformance test between two independent implementations of
+ * the same spec, not a mock of either.
+ */
+import { writeFileSync } from 'node:fs';
+import { blake3 } from '@noble/hashes/blake3';
+import { bytesToHex } from '@noble/hashes/utils';
+import { signState, settlementPreimage } from '../src/encoding.js';
+import { buildExpireCases } from './expire-cases.js';
+import { settleArgs } from './sigscript.js';
+import { profileFromArgv, COVENANT_ID } from './covenant-profile.js';
+import { BUYER_SK, PROVIDER_SK, STRANGER_SK, BUYER_PK, PROVIDER_PK, STRANGER_PK, SESSION_ID, WINDOW, FUNDED, FEE, PARTIES, ctor, x, state, } from './fixtures.js';
+const PROFILE = profileFromArgv();
+/** This suite's session, in whichever field names the profile's covenant uses. */
+const sessionState = (seq, sompi, sessionId = SESSION_ID) => PROFILE.outState({ parties: PARTIES, sessionId, window: WINDOW, seq, sompi });
+/**
+ * KIP-20 bindings for a settle. Argent's `emits next` lowers to OpAuthOutputCount == 1, so its
+ * continuation output must be AUTHORISED by the spending input rather than merely sitting at
+ * index 0. The hand-written covenant asks for no binding and gets none.
+ */
+const bindInput = () => (PROFILE.binds ? { covenant_id: COVENANT_ID } : {});
+const bindOutput = () => (PROFILE.binds ? { covenant_id: COVENANT_ID, authorizing_input: 0 } : {});
+/** The arguments `settle` takes, signed by whichever keys the case calls for. */
+function signedSettleArgs(s, buyerSk = BUYER_SK, providerSk = PROVIDER_SK, buyerPk = BUYER_PK, providerPk = PROVIDER_PK) {
+    return settleArgs(s, buyerPk, providerPk, signState(s, buyerSk), signState(s, providerSk));
+}
+/** A settle spends the covenant and hands it straight back, carrying the new claim. */
+function settleTx(pendingSeq, pendingSompi, s, outValue = FUNDED - FEE, outState) {
+    return {
+        active_input_index: 0,
+        inputs: [{ utxo_value: FUNDED, constructor_args: ctor(pendingSeq, pendingSompi), ...bindInput() }],
+        outputs: [{
+                value: outValue,
+                constructor_args: ctor(pendingSeq, pendingSompi),
+                state: outState ?? sessionState(s.seq, s.cumulativeSompi),
+                ...bindOutput(),
+            }],
+    };
+}
+const digestOf = (s) => bytesToHex(blake3(settlementPreimage(s), { dkLen: 32 }));
+const FIRST = state(0, 550, 1_000_000);
+const SECOND = state(1, 1100, 2_000_000, digestOf(FIRST));
+const OTHER_ID = 'c3'.repeat(16);
+const OTHER_SESSION = ctor(-1, 0).map((v, i) => (i === 1 ? x(OTHER_ID) : v));
+const settleCases = [
+    {
+        name: 'the first claim: a doubly-signed State at seq 0 posts, and pays nobody',
+        function: 'settle',
+        constructor_args: ctor(-1, 0),
+        args: signedSettleArgs(FIRST),
+        expect: 'pass',
+        tx: settleTx(-1, 0, FIRST),
+    },
+    {
+        name: 'SUPERSEDE: a strictly higher seq replaces the pending claim',
+        function: 'settle',
+        constructor_args: ctor(0, 1_000_000),
+        args: signedSettleArgs(SECOND),
+        expect: 'pass',
+        tx: settleTx(0, 1_000_000, SECOND),
+    },
+    {
+        name: 'P6/B5 THE STALE CLOSE: re-posting the SAME seq over a pending claim is refused',
+        function: 'settle',
+        constructor_args: ctor(0, 1_000_000),
+        args: signedSettleArgs(FIRST),
+        expect: 'fail',
+        tx: settleTx(0, 1_000_000, FIRST),
+    },
+    {
+        name: 'a LOWER seq than the pending claim is refused -- supersede is strict, not >=',
+        function: 'settle',
+        constructor_args: ctor(5, 9_000_000),
+        args: signedSettleArgs(FIRST),
+        expect: 'fail',
+        tx: settleTx(5, 9_000_000, FIRST),
+    },
+    {
+        name: 'THE FORGERY: a State signed by a stranger instead of the buyer is refused',
+        function: 'settle',
+        constructor_args: ctor(-1, 0),
+        args: signedSettleArgs(FIRST, STRANGER_SK, PROVIDER_SK, STRANGER_PK, PROVIDER_PK),
+        expect: 'fail',
+        tx: settleTx(-1, 0, FIRST),
+    },
+    {
+        name: 'ONE SIGNATURE IS NOT A STATE: the provider signing both halves is refused',
+        function: 'settle',
+        constructor_args: ctor(-1, 0),
+        args: signedSettleArgs(FIRST, PROVIDER_SK, PROVIDER_SK, PROVIDER_PK, PROVIDER_PK),
+        expect: 'fail',
+        tx: settleTx(-1, 0, FIRST),
+    },
+    {
+        name: 'X1 CROSS-SESSION REPLAY: a State signed for another session is refused',
+        function: 'settle',
+        constructor_args: OTHER_SESSION,
+        args: signedSettleArgs(FIRST),
+        expect: 'fail',
+        tx: {
+            active_input_index: 0,
+            inputs: [{ utxo_value: FUNDED, constructor_args: OTHER_SESSION, ...bindInput() }],
+            outputs: [{
+                    value: FUNDED - FEE,
+                    constructor_args: OTHER_SESSION,
+                    state: sessionState(FIRST.seq, FIRST.cumulativeSompi, OTHER_ID),
+                    ...bindOutput(),
+                }],
+        },
+    },
+    {
+        name: 'THE DRAIN: a settle keeping more than the fee instead of returning the funds is refused',
+        function: 'settle',
+        constructor_args: ctor(-1, 0),
+        args: signedSettleArgs(FIRST),
+        expect: 'fail',
+        tx: settleTx(-1, 0, FIRST, FUNDED - FEE - 1),
+    },
+    {
+        name: 'THE LIE: a settle whose carried state does not match the State it verified is refused',
+        function: 'settle',
+        constructor_args: ctor(-1, 0),
+        args: signedSettleArgs(FIRST),
+        expect: 'fail',
+        tx: settleTx(-1, 0, FIRST, FUNDED - FEE, sessionState(FIRST.seq, 9_000_000)),
+    },
+];
+/**
+ * THE CASE THAT JUSTIFIES THE 16 BYTES, and it can only be written against Argent.
+ *
+ * In the hand-written covenant `sessionId` is a constructor constant, so a continuation cannot be
+ * ASKED to rewrite it -- the field is not in the state block, and the case does not exist. In
+ * Argent it is state, `become` rewrites the whole of it, and the compiler emits a continuation
+ * that checks every field. That is what the extra 16 bytes bought, and without
+ * this case that claim is an assertion about a compiler rather than a measurement of one.
+ *
+ * Verified to refuse at `validateOutputState`, with the covenant's own computed `next_state`
+ * carrying the original session_id against an output claiming another.
+ */
+const identityCases = PROFILE.identityInState
+    ? [{
+            name: 'IDENTITY DRIFT: a continuation that rewrites the session_id it carries is refused',
+            function: 'settle',
+            constructor_args: ctor(-1, 0),
+            args: signedSettleArgs(FIRST),
+            expect: 'fail',
+            tx: settleTx(-1, 0, FIRST, FUNDED - FEE, sessionState(FIRST.seq, FIRST.cumulativeSompi, 'c3'.repeat(16))),
+        }]
+    : [];
+const cases = [...settleCases, ...identityCases, ...buildExpireCases(PROFILE.contract)];
+writeFileSync(PROFILE.suite, `${JSON.stringify({ tests: cases }, null, 2)}\n`);
+console.log(`wrote ${PROFILE.suite} -- ${cases.length} cases  [${PROFILE.key}: ${PROFILE.contract}]`);
+console.log(`  session  ${SESSION_ID}  window ${WINDOW}  funded ${FUNDED}`);
+console.log(`  parties  ${PARTIES}`);
+//# sourceMappingURL=gen-contract-tests.js.map

package/dist/tools/gen-contract-tests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gen-contract-tests.js","sourceRoot":"","sources":["../../tools/gen-contract-tests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EACL,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EACtE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,GACzD,MAAM,eAAe,CAAC;AAEvB,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;AAElC,kFAAkF;AAClF,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,SAAS,GAAG,UAAU,EAAE,EAAE,CAC1E,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AAEhF;;;;GAIG;AACH,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC5E,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEnG,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,CAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,UAAU,GAAG,WAAW,EAAE,OAAO,GAAG,QAAQ,EAAE,UAAU,GAAG,WAAW;IAC5H,OAAO,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,uFAAuF;AACvF,SAAS,QAAQ,CAAC,UAAkB,EAAE,YAAoB,EAAE,CAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,GAAG,EAAE,QAAkB;IAC/G,OAAO;QACL,kBAAkB,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,GAAG,SAAS,EAAE,EAAE,CAAC;QAClG,OAAO,EAAE,CAAC;gBACR,KAAK,EAAE,QAAQ;gBACf,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;gBAChD,KAAK,EAAE,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,eAAe,CAAC;gBACzD,GAAG,UAAU,EAAE;aAChB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAuC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAE9H,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;AACvC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACjC,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7E,MAAM,WAAW,GAAW;IAC1B;QACE,IAAI,EAAE,wEAAwE;QAC9E,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,MAAM;QACd,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;KAC3B;IACD;QACE,IAAI,EAAE,6DAA6D;QACnE,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC;QACpC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAC9B,MAAM,EAAE,MAAM;QACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC;KACnC;IACD;QACE,IAAI,EAAE,gFAAgF;QACtF,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC;QACpC,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,MAAM;QACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;KAClC;IACD;QACE,IAAI,EAAE,8EAA8E;QACpF,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC;QACpC,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,MAAM;QACd,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;KAClC;IACD;QACE,IAAI,EAAE,2EAA2E;QACjF,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;QACjF,MAAM,EAAE,MAAM;QACd,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;KAC3B;IACD;QACE,IAAI,EAAE,2EAA2E;QACjF,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;QACjF,MAAM,EAAE,MAAM;QACd,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;KAC3B;IACD;QACE,IAAI,EAAE,wEAAwE;QAC9E,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,aAAa;QAC/B,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,MAAM;QACd,EAAE,EAAE;YACF,kBAAkB,EAAE,CAAC;YACrB,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,SAAS,EAAE,EAAE,CAAC;YACjF,OAAO,EAAE,CAAC;oBACR,KAAK,EAAE,MAAM,GAAG,GAAG;oBACnB,gBAAgB,EAAE,aAAa;oBAC/B,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC;oBAC/D,GAAG,UAAU,EAAE;iBAChB,CAAC;SACH;KACF;IACD;QACE,IAAI,EAAE,yFAAyF;QAC/F,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,MAAM;QACd,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC;KAC7C;IACD;QACE,IAAI,EAAE,uFAAuF;QAC7F,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;QAC7B,MAAM,EAAE,MAAM;QACd,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;KAC7E;CACF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,aAAa,GAAW,OAAO,CAAC,eAAe;IACnD,CAAC,CAAC,CAAC;YACC,IAAI,EAAE,mFAAmF;YACzF,QAAQ,EAAE,QAAQ;YAClB,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;YAC7B,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;SAC1G,CAAC;IACJ,CAAC,CAAC,EAAE,CAAC;AAEP,MAAM,KAAK,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,aAAa,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxF,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC/E,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,KAAK,OAAO,KAAK,CAAC,MAAM,YAAY,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACtG,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,YAAY,MAAM,YAAY,MAAM,EAAE,CAAC,CAAC;AAC5E,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC"}