sealbridge 0.0.1 → 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (187) hide show
  1. package/NOTICE +43 -0
  2. package/README.ja.md +375 -0
  3. package/README.md +466 -1
  4. package/dist/cli/dist/acp.d.ts +2 -0
  5. package/dist/cli/dist/acp.js +6 -0
  6. package/dist/cli/dist/acp.js.map +1 -0
  7. package/dist/cli/dist/board.d.ts +47 -0
  8. package/dist/cli/dist/board.js +255 -0
  9. package/dist/cli/dist/board.js.map +1 -0
  10. package/dist/cli/dist/contacts.d.ts +18 -0
  11. package/dist/cli/dist/contacts.js +154 -0
  12. package/dist/cli/dist/contacts.js.map +1 -0
  13. package/dist/cli/dist/doctor.d.ts +13 -0
  14. package/dist/cli/dist/doctor.js +30 -0
  15. package/dist/cli/dist/doctor.js.map +1 -0
  16. package/dist/cli/dist/index.d.ts +2 -0
  17. package/dist/cli/dist/index.js +193 -0
  18. package/dist/cli/dist/index.js.map +1 -0
  19. package/dist/cli/dist/invite-share.d.ts +16 -0
  20. package/dist/cli/dist/invite-share.js +169 -0
  21. package/dist/cli/dist/invite-share.js.map +1 -0
  22. package/dist/cli/dist/mcp.d.ts +17 -0
  23. package/dist/cli/dist/mcp.js +105 -0
  24. package/dist/cli/dist/mcp.js.map +1 -0
  25. package/dist/cli/dist/network.d.ts +1 -0
  26. package/dist/cli/dist/network.js +320 -0
  27. package/dist/cli/dist/network.js.map +1 -0
  28. package/dist/cli/dist/public-settings.d.ts +27 -0
  29. package/dist/cli/dist/public-settings.js +33 -0
  30. package/dist/cli/dist/public-settings.js.map +1 -0
  31. package/dist/cli/dist/receipt.d.ts +39 -0
  32. package/dist/cli/dist/receipt.js +90 -0
  33. package/dist/cli/dist/receipt.js.map +1 -0
  34. package/dist/cli/dist/receive-hook.d.ts +2 -0
  35. package/dist/cli/dist/receive-hook.js +35 -0
  36. package/dist/cli/dist/receive-hook.js.map +1 -0
  37. package/dist/examples/two-owner-demo/alice-policy.json +4 -0
  38. package/dist/examples/two-owner-demo/bob-policy.json +4 -0
  39. package/dist/examples/two-owner-demo/dist/run-demo.d.ts +71 -0
  40. package/dist/examples/two-owner-demo/dist/run-demo.js +383 -0
  41. package/dist/examples/two-owner-demo/dist/run-demo.js.map +1 -0
  42. package/dist/package.json +1 -0
  43. package/dist/packages/adapters/dist/command.d.ts +120 -0
  44. package/dist/packages/adapters/dist/command.js +365 -0
  45. package/dist/packages/adapters/dist/command.js.map +1 -0
  46. package/dist/packages/adapters/dist/credential-proxy.d.ts +37 -0
  47. package/dist/packages/adapters/dist/credential-proxy.js +363 -0
  48. package/dist/packages/adapters/dist/credential-proxy.js.map +1 -0
  49. package/dist/packages/adapters/dist/index.d.ts +6 -0
  50. package/dist/packages/adapters/dist/index.js +6 -0
  51. package/dist/packages/adapters/dist/index.js.map +1 -0
  52. package/dist/packages/adapters/dist/mcp.d.ts +32 -0
  53. package/dist/packages/adapters/dist/mcp.js +87 -0
  54. package/dist/packages/adapters/dist/mcp.js.map +1 -0
  55. package/dist/packages/adapters/dist/openai.d.ts +23 -0
  56. package/dist/packages/adapters/dist/openai.js +81 -0
  57. package/dist/packages/adapters/dist/openai.js.map +1 -0
  58. package/dist/packages/adapters/dist/sandbox.d.ts +45 -0
  59. package/dist/packages/adapters/dist/sandbox.js +60 -0
  60. package/dist/packages/adapters/dist/sandbox.js.map +1 -0
  61. package/dist/packages/core/dist/capability.d.ts +36 -0
  62. package/dist/packages/core/dist/capability.js +198 -0
  63. package/dist/packages/core/dist/capability.js.map +1 -0
  64. package/dist/packages/core/dist/contract.d.ts +33 -0
  65. package/dist/packages/core/dist/contract.js +97 -0
  66. package/dist/packages/core/dist/contract.js.map +1 -0
  67. package/dist/packages/core/dist/crypto.d.ts +34 -0
  68. package/dist/packages/core/dist/crypto.js +323 -0
  69. package/dist/packages/core/dist/crypto.js.map +1 -0
  70. package/dist/packages/core/dist/discovery.d.ts +124 -0
  71. package/dist/packages/core/dist/discovery.js +511 -0
  72. package/dist/packages/core/dist/discovery.js.map +1 -0
  73. package/dist/packages/core/dist/edge.d.ts +4 -0
  74. package/dist/packages/core/dist/edge.js +6 -0
  75. package/dist/packages/core/dist/edge.js.map +1 -0
  76. package/dist/packages/core/dist/index.d.ts +9 -0
  77. package/dist/packages/core/dist/index.js +10 -0
  78. package/dist/packages/core/dist/index.js.map +1 -0
  79. package/dist/packages/core/dist/receipts.d.ts +9 -0
  80. package/dist/packages/core/dist/receipts.js +67 -0
  81. package/dist/packages/core/dist/receipts.js.map +1 -0
  82. package/dist/packages/core/dist/relay-auth.d.ts +40 -0
  83. package/dist/packages/core/dist/relay-auth.js +106 -0
  84. package/dist/packages/core/dist/relay-auth.js.map +1 -0
  85. package/dist/packages/core/dist/revocation.d.ts +55 -0
  86. package/dist/packages/core/dist/revocation.js +88 -0
  87. package/dist/packages/core/dist/revocation.js.map +1 -0
  88. package/dist/packages/core/dist/schema.d.ts +11 -0
  89. package/dist/packages/core/dist/schema.js +48 -0
  90. package/dist/packages/core/dist/schema.js.map +1 -0
  91. package/dist/packages/core/dist/types.d.ts +172 -0
  92. package/dist/packages/core/dist/types.js +2 -0
  93. package/dist/packages/core/dist/types.js.map +1 -0
  94. package/dist/packages/ledger/dist/index.d.ts +84 -0
  95. package/dist/packages/ledger/dist/index.js +269 -0
  96. package/dist/packages/ledger/dist/index.js.map +1 -0
  97. package/dist/packages/relay/dist/fetch.d.ts +223 -0
  98. package/dist/packages/relay/dist/fetch.js +1210 -0
  99. package/dist/packages/relay/dist/fetch.js.map +1 -0
  100. package/dist/packages/relay/dist/index.d.ts +92 -0
  101. package/dist/packages/relay/dist/index.js +707 -0
  102. package/dist/packages/relay/dist/index.js.map +1 -0
  103. package/dist/packages/relay/dist/journal.d.ts +70 -0
  104. package/dist/packages/relay/dist/journal.js +310 -0
  105. package/dist/packages/relay/dist/journal.js.map +1 -0
  106. package/dist/packages/relay/dist/retry.d.ts +9 -0
  107. package/dist/packages/relay/dist/retry.js +39 -0
  108. package/dist/packages/relay/dist/retry.js.map +1 -0
  109. package/dist/packages/relay/dist/ssrf.d.ts +32 -0
  110. package/dist/packages/relay/dist/ssrf.js +213 -0
  111. package/dist/packages/relay/dist/ssrf.js.map +1 -0
  112. package/dist/packages/relay/dist/worker.d.ts +85 -0
  113. package/dist/packages/relay/dist/worker.js +411 -0
  114. package/dist/packages/relay/dist/worker.js.map +1 -0
  115. package/dist/packages/runtime/dist/a2a.d.ts +8 -0
  116. package/dist/packages/runtime/dist/a2a.js +69 -0
  117. package/dist/packages/runtime/dist/a2a.js.map +1 -0
  118. package/dist/packages/runtime/dist/adapter.d.ts +51 -0
  119. package/dist/packages/runtime/dist/adapter.js +2 -0
  120. package/dist/packages/runtime/dist/adapter.js.map +1 -0
  121. package/dist/packages/runtime/dist/approval-providers.d.ts +97 -0
  122. package/dist/packages/runtime/dist/approval-providers.js +269 -0
  123. package/dist/packages/runtime/dist/approval-providers.js.map +1 -0
  124. package/dist/packages/runtime/dist/daily-limit.d.ts +2 -0
  125. package/dist/packages/runtime/dist/daily-limit.js +54 -0
  126. package/dist/packages/runtime/dist/daily-limit.js.map +1 -0
  127. package/dist/packages/runtime/dist/gateway.d.ts +35 -0
  128. package/dist/packages/runtime/dist/gateway.js +92 -0
  129. package/dist/packages/runtime/dist/gateway.js.map +1 -0
  130. package/dist/packages/runtime/dist/inbox.d.ts +10 -0
  131. package/dist/packages/runtime/dist/inbox.js +24 -0
  132. package/dist/packages/runtime/dist/inbox.js.map +1 -0
  133. package/dist/packages/runtime/dist/index.d.ts +13 -0
  134. package/dist/packages/runtime/dist/index.js +14 -0
  135. package/dist/packages/runtime/dist/index.js.map +1 -0
  136. package/dist/packages/runtime/dist/mcp-server.d.ts +90 -0
  137. package/dist/packages/runtime/dist/mcp-server.js +631 -0
  138. package/dist/packages/runtime/dist/mcp-server.js.map +1 -0
  139. package/dist/packages/runtime/dist/mcp-tool-catalog.d.ts +3 -0
  140. package/dist/packages/runtime/dist/mcp-tool-catalog.js +491 -0
  141. package/dist/packages/runtime/dist/mcp-tool-catalog.js.map +1 -0
  142. package/dist/packages/runtime/dist/mcp.d.ts +73 -0
  143. package/dist/packages/runtime/dist/mcp.js +67 -0
  144. package/dist/packages/runtime/dist/mcp.js.map +1 -0
  145. package/dist/packages/runtime/dist/policy.d.ts +19 -0
  146. package/dist/packages/runtime/dist/policy.js +41 -0
  147. package/dist/packages/runtime/dist/policy.js.map +1 -0
  148. package/dist/packages/runtime/dist/quota.d.ts +39 -0
  149. package/dist/packages/runtime/dist/quota.js +147 -0
  150. package/dist/packages/runtime/dist/quota.js.map +1 -0
  151. package/dist/packages/runtime/dist/session-audit.d.ts +88 -0
  152. package/dist/packages/runtime/dist/session-audit.js +415 -0
  153. package/dist/packages/runtime/dist/session-audit.js.map +1 -0
  154. package/dist/packages/runtime/dist/session.d.ts +288 -0
  155. package/dist/packages/runtime/dist/session.js +1880 -0
  156. package/dist/packages/runtime/dist/session.js.map +1 -0
  157. package/dist/packages/runtime/dist/verifier.d.ts +64 -0
  158. package/dist/packages/runtime/dist/verifier.js +109 -0
  159. package/dist/packages/runtime/dist/verifier.js.map +1 -0
  160. package/dist/packages/sandbox/dist/container.d.ts +33 -0
  161. package/dist/packages/sandbox/dist/container.js +189 -0
  162. package/dist/packages/sandbox/dist/container.js.map +1 -0
  163. package/dist/packages/sandbox/dist/index.d.ts +34 -0
  164. package/dist/packages/sandbox/dist/index.js +179 -0
  165. package/dist/packages/sandbox/dist/index.js.map +1 -0
  166. package/dist/packages/sandbox/dist/permission.d.ts +58 -0
  167. package/dist/packages/sandbox/dist/permission.js +90 -0
  168. package/dist/packages/sandbox/dist/permission.js.map +1 -0
  169. package/dist/spec/README.ja.md +76 -0
  170. package/dist/spec/README.md +135 -0
  171. package/dist/spec/ack-receipt.schema.json +77 -0
  172. package/dist/spec/agent-card.schema.json +83 -0
  173. package/dist/spec/approval-receipt.schema.json +94 -0
  174. package/dist/spec/audit-entry.schema.json +101 -0
  175. package/dist/spec/capability-token.schema.json +133 -0
  176. package/dist/spec/envelope.schema.json +197 -0
  177. package/dist/spec/examples/sample-ack-receipt.json +16 -0
  178. package/dist/spec/examples/sample-agent-card.json +35 -0
  179. package/dist/spec/examples/sample-approval-receipt.json +18 -0
  180. package/dist/spec/examples/sample-audit-entry.json +37 -0
  181. package/dist/spec/examples/sample-capability-token.json +39 -0
  182. package/dist/spec/examples/sample-envelope.json +21 -0
  183. package/dist/spec/examples/sample-task-manifest.json +141 -0
  184. package/dist/spec/examples/sample-usage-receipt.json +19 -0
  185. package/dist/spec/task-manifest.schema.json +422 -0
  186. package/dist/spec/usage-receipt.schema.json +91 -0
  187. package/package.json +61 -5
@@ -0,0 +1,415 @@
1
+ // SPDX-License-Identifier: Apache-2.0
2
+ import { digest, openEnvelope, signAck, signEnvelope, signPayload, validateSchema, verifyEnvelope, verifySigned, verifySignature, } from '../../core/dist/index.js';
3
+ import { JsonlStore, verifyAudit } from '../../ledger/dist/index.js';
4
+ import { isTransientRelayError, relayRetryDelay, waitForRelayRetry } from '../../relay/dist/index.js';
5
+ /** The peer's signed ERROR, retaining optional diagnostics for programmatic callers. */
6
+ export class PeerRejectedError extends Error {
7
+ code;
8
+ detail;
9
+ constructor(body) {
10
+ super('PEER_REJECTED: ' + JSON.stringify(body));
11
+ if (body && typeof body === 'object' && !Array.isArray(body)) {
12
+ if (typeof body.code === 'string')
13
+ this.code = body.code;
14
+ const detail = body.detail;
15
+ if (detail && typeof detail === 'object' && !Array.isArray(detail) &&
16
+ typeof detail.field === 'string' && typeof detail.hint === 'string' &&
17
+ typeof detail.expected === 'string' && /^sha256:[a-f0-9]{64}$/.test(detail.expected) &&
18
+ typeof detail.actual === 'string' && /^sha256:[a-f0-9]{64}$/.test(detail.actual))
19
+ this.detail = { field: detail.field, expected: detail.expected, actual: detail.actual, hint: detail.hint };
20
+ }
21
+ }
22
+ }
23
+ export const asJson = (v) => JSON.parse(JSON.stringify(v));
24
+ const pause = (signal) => new Promise((resolve, reject) => {
25
+ const abort = () => {
26
+ clearTimeout(timer);
27
+ reject(new Error('SESSION_ABORTED'));
28
+ };
29
+ const timer = setTimeout(() => {
30
+ signal?.removeEventListener('abort', abort);
31
+ resolve();
32
+ }, 10);
33
+ signal?.addEventListener('abort', abort, { once: true });
34
+ if (signal?.aborted)
35
+ abort();
36
+ });
37
+ export async function receiveRelay(relay, did, signal, filter) {
38
+ let attempt = 0;
39
+ while (true) {
40
+ signal?.throwIfAborted();
41
+ try {
42
+ const e = await relay.receive(did, 1000, signal, { ...filter, lease: relay.acknowledgeDelivery !== undefined });
43
+ attempt = 0;
44
+ if (e)
45
+ return e;
46
+ }
47
+ catch (error) {
48
+ if (signal?.aborted)
49
+ throw new Error('SESSION_ABORTED');
50
+ if (!isTransientRelayError(error))
51
+ throw error;
52
+ console.warn('Relay poll retry ' + (attempt + 1));
53
+ await waitForRelayRetry(relayRetryDelay(attempt++), signal);
54
+ continue;
55
+ }
56
+ await pause(signal);
57
+ }
58
+ }
59
+ /** A lost ack is retried by the HTTP client when the completed envelope is redelivered. */
60
+ export async function acknowledgeRelay(relay, envelope) {
61
+ try {
62
+ await relay.acknowledgeDelivery?.(envelope.payload.recipientDid, envelope.payload.envelopeId);
63
+ }
64
+ catch (error) {
65
+ if (!isTransientRelayError(error))
66
+ throw error;
67
+ }
68
+ }
69
+ /** Each side has only its own private key. All countersignatures arrive on wire. */
70
+ export class SessionWire {
71
+ relay;
72
+ owner;
73
+ peerDid;
74
+ taskId;
75
+ actors;
76
+ signal;
77
+ auditPath;
78
+ allowUnencryptedEnvelopes;
79
+ outgoing = 0;
80
+ incoming = 0;
81
+ /** Opened session views keep the ciphertext envelope so delivery verification can check it. */
82
+ sealedByView = new WeakMap();
83
+ inbox = [];
84
+ inboxWaiters = [];
85
+ stashed = [];
86
+ waiters = [];
87
+ waiterAdded = [];
88
+ cancelResolvers = [];
89
+ pumpError;
90
+ pumping = false;
91
+ dispatching = false;
92
+ detached = false;
93
+ stopped = false;
94
+ cancellation;
95
+ /** One bilateral send at a time so PROGRESS cannot overtake its own ACK. */
96
+ sendTail = Promise.resolve();
97
+ entries = [];
98
+ onProgress;
99
+ /** Aborts the running task as soon as a CANCEL frame is queued. */
100
+ earlyCancel;
101
+ lastCancel;
102
+ cancelHandled = false;
103
+ constructor(relay, owner, peerDid, taskId, actors, signal, auditPath,
104
+ /** Legacy in-memory fixtures may open cleartext. Network sessions leave this false. */
105
+ allowUnencryptedEnvelopes = false) {
106
+ this.relay = relay;
107
+ this.owner = owner;
108
+ this.peerDid = peerDid;
109
+ this.taskId = taskId;
110
+ this.actors = actors;
111
+ this.signal = signal;
112
+ this.auditPath = auditPath;
113
+ this.allowUnencryptedEnvelopes = allowUnencryptedEnvelopes;
114
+ this.startPump();
115
+ void this.dispatch();
116
+ }
117
+ get cancellationStarted() {
118
+ return this.cancellation !== undefined;
119
+ }
120
+ /** Keep reading after the caller aborts the session signal, so CANCEL can still be sealed. */
121
+ detachSignal() {
122
+ this.detached = true;
123
+ this.pumpError = undefined;
124
+ if (!this.pumping)
125
+ this.startPump();
126
+ }
127
+ cancelSession(payload) {
128
+ if (!this.cancellation) {
129
+ if (!payload)
130
+ return Promise.reject(new Error('CANCEL_PAYLOAD_REQUIRED'));
131
+ this.cancellation = this.sendCancel(payload);
132
+ }
133
+ return this.cancellation;
134
+ }
135
+ waitUntilCancelHandled() {
136
+ if (this.cancelHandled)
137
+ return Promise.resolve();
138
+ return new Promise((resolve) => this.cancelResolvers.push(resolve));
139
+ }
140
+ startPump() {
141
+ if (this.pumping || this.stopped)
142
+ return;
143
+ this.pumping = true;
144
+ void this.runPump();
145
+ }
146
+ async runPump() {
147
+ try {
148
+ while (!this.stopped) {
149
+ if (!this.detached && this.signal.aborted)
150
+ throw new Error('SESSION_ABORTED');
151
+ const envelope = await receiveRelay(this.relay, this.owner.did, this.detached ? undefined : this.signal);
152
+ if (envelope.payload.eventType === 'CANCEL' && envelope.payload.senderDid === this.peerDid)
153
+ this.earlyCancel?.();
154
+ this.inbox.push(envelope);
155
+ this.inboxWaiters.shift()?.();
156
+ }
157
+ }
158
+ catch (error) {
159
+ if (!this.detached)
160
+ this.pumpError = error instanceof Error ? error : new Error(String(error));
161
+ }
162
+ finally {
163
+ this.pumping = false;
164
+ this.inboxWaiters.shift()?.();
165
+ if (this.detached && !this.stopped) {
166
+ this.pumpError = undefined;
167
+ this.startPump();
168
+ }
169
+ }
170
+ }
171
+ shift() {
172
+ const queued = this.inbox.shift();
173
+ if (queued)
174
+ return Promise.resolve(queued);
175
+ if (this.pumpError)
176
+ return Promise.reject(this.pumpError);
177
+ return new Promise((resolve, reject) => {
178
+ const wake = () => {
179
+ const next = this.inbox.shift();
180
+ if (next)
181
+ resolve(next);
182
+ else if (this.pumpError)
183
+ reject(this.pumpError);
184
+ else
185
+ this.inboxWaiters.push(wake);
186
+ };
187
+ this.inboxWaiters.push(wake);
188
+ });
189
+ }
190
+ async nextEnvelope() {
191
+ const ready = this.stashed.shift();
192
+ if (ready)
193
+ return ready;
194
+ return this.check(await this.shift());
195
+ }
196
+ rejectWaiters(error) {
197
+ for (const waiter of this.waiters.splice(0))
198
+ waiter.reject(error);
199
+ }
200
+ async dispatch() {
201
+ if (this.dispatching)
202
+ return;
203
+ this.dispatching = true;
204
+ try {
205
+ for (;;) {
206
+ const envelope = await this.nextEnvelope();
207
+ const type = envelope.payload.eventType;
208
+ const index = this.waiters.findIndex((waiter) => waiter.allowed.includes(type));
209
+ if (index >= 0) {
210
+ this.waiters.splice(index, 1)[0].resolve(envelope);
211
+ continue;
212
+ }
213
+ if (type === 'PROGRESS') {
214
+ await this.acknowledgeControl(envelope);
215
+ const progress = envelope.payload.payload;
216
+ await this.onProgress?.(progress, envelope);
217
+ continue;
218
+ }
219
+ if (type === 'CANCEL' && envelope.payload.senderDid === this.peerDid) {
220
+ await this.acknowledgeControl(envelope);
221
+ this.lastCancel = envelope;
222
+ this.cancelHandled = true;
223
+ for (const resolve of this.cancelResolvers.splice(0))
224
+ resolve();
225
+ this.rejectWaiters(new Error('CANCELLED'));
226
+ continue;
227
+ }
228
+ if (this.waiters.length === 0) {
229
+ this.stashed.push(envelope);
230
+ await new Promise((resolve) => this.waiterAdded.push(resolve));
231
+ continue;
232
+ }
233
+ this.waiters.shift()?.reject(new Error('UNEXPECTED_SESSION_EVENT: ' + type));
234
+ }
235
+ }
236
+ catch (error) {
237
+ const wrapped = error instanceof Error ? error : new Error(String(error));
238
+ if (!this.pumpError)
239
+ this.pumpError = wrapped;
240
+ this.rejectWaiters(wrapped);
241
+ for (const resolve of this.cancelResolvers.splice(0))
242
+ resolve();
243
+ }
244
+ finally {
245
+ this.dispatching = false;
246
+ if (!this.stopped && !this.pumpError && (this.waiters.length > 0 || this.inbox.length > 0))
247
+ void this.dispatch();
248
+ }
249
+ }
250
+ async rawSend(eventType, payload) {
251
+ await this.relay.send(signEnvelope({
252
+ taskId: this.taskId,
253
+ recipientDid: this.peerDid,
254
+ seq: this.outgoing++,
255
+ eventType,
256
+ payload: asJson(payload),
257
+ }, this.owner, { encrypt: true }));
258
+ }
259
+ /** Ciphertext that still matches the outer signature, when `view` was opened for the session. */
260
+ sealed(view) {
261
+ return this.sealedByView.get(view) ?? view;
262
+ }
263
+ check(e) {
264
+ if (!verifyEnvelope(e, this.owner.did) ||
265
+ e.payload.senderDid !== this.peerDid ||
266
+ e.payload.taskId !== this.taskId ||
267
+ e.payload.seq !== this.incoming++)
268
+ throw new Error('INVALID_OR_REPLAYED_SESSION_ENVELOPE');
269
+ // The signature covers ciphertext. Open a copy so later session code reads plaintext.
270
+ const view = structuredClone(e);
271
+ view.payload.payload = asJson(openEnvelope(e, this.owner, {
272
+ requireEncrypted: !this.allowUnencryptedEnvelopes,
273
+ }));
274
+ this.sealedByView.set(view, e);
275
+ if (view.payload.eventType === 'ERROR')
276
+ throw new PeerRejectedError(view.payload.payload);
277
+ return view;
278
+ }
279
+ acceptInitial(expected, initial) {
280
+ const envelope = this.check(initial);
281
+ const allowed = Array.isArray(expected) ? expected : [expected];
282
+ if (!allowed.includes(envelope.payload.eventType))
283
+ throw new Error('UNEXPECTED_SESSION_EVENT: ' + envelope.payload.eventType);
284
+ return envelope;
285
+ }
286
+ async rawReceive(expected, initial) {
287
+ if (initial)
288
+ return this.acceptInitial(expected, initial);
289
+ if (this.pumpError && this.inbox.length === 0 && this.stashed.length === 0)
290
+ return Promise.reject(this.pumpError);
291
+ const allowed = Array.isArray(expected) ? expected : [expected];
292
+ const envelope = await new Promise((resolve, reject) => {
293
+ this.waiters.push({ allowed, resolve, reject });
294
+ this.waiterAdded.shift()?.();
295
+ void this.dispatch();
296
+ });
297
+ if (['AUDIT_ACK', 'CHECKPOINT', 'CHECKPOINT_ACK', 'ATTEST'].includes(envelope.payload.eventType))
298
+ await acknowledgeRelay(this.relay, this.sealed(envelope));
299
+ return envelope;
300
+ }
301
+ append(entry) {
302
+ validateSchema('audit-entry', entry);
303
+ this.entries.push(entry);
304
+ if (this.auditPath)
305
+ new JsonlStore(this.auditPath).append(entry);
306
+ }
307
+ body(eventType, payload, actorDid, receiverDid) {
308
+ return {
309
+ taskId: this.taskId,
310
+ seq: this.entries.length,
311
+ prevEntryHash: this.entries.at(-1)?.entryHash ?? null,
312
+ actorDid,
313
+ receiverDid,
314
+ eventType,
315
+ payload,
316
+ };
317
+ }
318
+ async acknowledgeControl(event) {
319
+ const audit = await this.nextEnvelope();
320
+ if (audit.payload.eventType !== 'AUDIT_ENTRY')
321
+ throw new Error('UNEXPECTED_SESSION_EVENT: ' + audit.payload.eventType);
322
+ await this.recordPeer(event, audit);
323
+ }
324
+ async recordPeer(event, audit) {
325
+ const signed = audit.payload.payload;
326
+ const expected = this.body(event.payload.eventType, event.payload.payload, this.peerDid, this.owner.did);
327
+ if (!verifySigned(signed, this.peerDid) ||
328
+ digest(signed.payload) !== digest(expected) ||
329
+ !verifySignature(expected, signed.signature, this.peerDid))
330
+ throw new Error('INVALID_AUDIT_ENTRY');
331
+ const ack = signAck({
332
+ type: 'AckReceipt',
333
+ taskId: this.taskId,
334
+ entryHash: digest(expected),
335
+ actorDid: this.peerDid,
336
+ receiverDid: this.owner.did,
337
+ }, this.owner);
338
+ this.append({
339
+ body: expected,
340
+ entryHash: digest(expected),
341
+ actorSignature: signed.signature,
342
+ counterSignature: ack,
343
+ });
344
+ await acknowledgeRelay(this.relay, this.sealed(audit));
345
+ if (event.payload.eventType !== 'PROPOSE')
346
+ await acknowledgeRelay(this.relay, this.sealed(event));
347
+ await this.rawSend('AUDIT_ACK', ack);
348
+ }
349
+ async sendEvent(eventType, payload) {
350
+ const run = this.sendTail.then(() => this.transmit(eventType, payload));
351
+ this.sendTail = run.then(() => undefined, () => undefined);
352
+ return run;
353
+ }
354
+ async transmit(eventType, payload) {
355
+ const data = asJson(payload), body = this.body(eventType, data, this.owner.did, this.peerDid), draft = signPayload(body, this.owner);
356
+ await this.rawSend(eventType, data);
357
+ await this.rawSend('AUDIT_ENTRY', draft);
358
+ const ack = (await this.rawReceive('AUDIT_ACK')).payload.payload;
359
+ if (!verifySigned(ack, this.peerDid) ||
360
+ ack.payload.type !== 'AckReceipt' ||
361
+ ack.payload.taskId !== this.taskId ||
362
+ ack.payload.actorDid !== this.owner.did ||
363
+ ack.payload.receiverDid !== this.peerDid ||
364
+ ack.payload.entryHash !== digest(body))
365
+ throw new Error('INVALID_AUDIT_ACK');
366
+ this.append({
367
+ body,
368
+ entryHash: digest(body),
369
+ actorSignature: draft.signature,
370
+ counterSignature: ack,
371
+ });
372
+ }
373
+ async receiveEvent(eventType, initial) {
374
+ const e = await this.rawReceive(eventType, initial), signed = await this.rawReceive('AUDIT_ENTRY');
375
+ await this.recordPeer(e, signed);
376
+ return e;
377
+ }
378
+ async sendCancel(payload) {
379
+ await this.sendEvent('CANCEL', payload);
380
+ this.rejectWaiters(new Error('CANCELLED'));
381
+ }
382
+ checkpoint() {
383
+ return {
384
+ type: 'AuditCheckpoint',
385
+ taskId: this.taskId,
386
+ count: this.entries.length,
387
+ head: this.entries.at(-1)?.entryHash ?? null,
388
+ actors: this.actors,
389
+ };
390
+ }
391
+ seal(checkpoint) {
392
+ const bundle = { entries: this.entries, checkpoint };
393
+ if (!verifyAudit(bundle, { taskId: this.taskId, actors: this.actors }).valid)
394
+ throw new Error('INVALID_BILATERAL_AUDIT');
395
+ if (this.auditPath)
396
+ new JsonlStore(this.auditPath).seal(checkpoint);
397
+ return bundle;
398
+ }
399
+ async finishRequester() {
400
+ const actor = signPayload(this.checkpoint(), this.owner);
401
+ await this.rawSend('CHECKPOINT', actor);
402
+ const receiver = (await this.rawReceive('CHECKPOINT_ACK')).payload.payload;
403
+ return this.seal({ actor, receiver });
404
+ }
405
+ async finishWorker() {
406
+ const actor = (await this.rawReceive('CHECKPOINT')).payload
407
+ .payload;
408
+ if (!verifySigned(actor, this.peerDid) || digest(actor.payload) !== digest(this.checkpoint()))
409
+ throw new Error('INVALID_AUDIT_CHECKPOINT');
410
+ const receiver = signPayload(actor, this.owner), bundle = this.seal({ actor, receiver });
411
+ await this.rawSend('CHECKPOINT_ACK', receiver);
412
+ return bundle;
413
+ }
414
+ }
415
+ //# sourceMappingURL=session-audit.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"session-audit.js","sourceRoot":"","sources":["../src/session-audit.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EACL,MAAM,EACN,YAAY,EACZ,OAAO,EACP,YAAY,EACZ,WAAW,EACX,cAAc,EACd,cAAc,EACd,YAAY,EACZ,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIvF,wFAAwF;AACxF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAU;IACd,MAAM,CAAe;IAC9B,YAAY,IAAU;QACpB,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC9D,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;gBACnE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACpF,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAClF,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/G,CAAC;IACH,CAAC;CACF;AACD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAU,EAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAS,CAAC;AAClF,MAAM,KAAK,GAAG,CAAC,MAAoB,EAAE,EAAE,CACrC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACpC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,EAAE,CAAC;IACZ,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,MAAM,EAAE,OAAO;QAAE,KAAK,EAAE,CAAC;AAC/B,CAAC,CAAC,CAAC;AACL,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAqB,EACrB,GAAW,EACX,MAAoB,EACpB,MAA2B;IAE3B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC,CAAC;YAChH,OAAO,GAAG,CAAC,CAAC;YACZ,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxD,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,iBAAiB,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AACD,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAqB,EAAE,QAAwB;IACpF,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,mBAAmB,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IACtG,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;AACnE,CAAC;AAWD,oFAAoF;AACpF,MAAM,OAAO,WAAW;IA0BX;IACA;IACA;IACA;IACA;IACA;IACA;IAEA;IAjCH,QAAQ,GAAG,CAAC,CAAC;IACb,QAAQ,GAAG,CAAC,CAAC;IACrB,+FAA+F;IAC9E,YAAY,GAAG,IAAI,OAAO,EAAkC,CAAC;IAC7D,KAAK,GAAqB,EAAE,CAAC;IAC7B,YAAY,GAAsB,EAAE,CAAC;IACrC,OAAO,GAAqB,EAAE,CAAC;IAC/B,OAAO,GAAqB,EAAE,CAAC;IAC/B,WAAW,GAAsB,EAAE,CAAC;IACpC,eAAe,GAAsB,EAAE,CAAC;IACjD,SAAS,CAAS;IAClB,OAAO,GAAG,KAAK,CAAC;IAChB,WAAW,GAAG,KAAK,CAAC;IACpB,QAAQ,GAAG,KAAK,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC;IAChB,YAAY,CAAiB;IACrC,4EAA4E;IACpE,QAAQ,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3C,OAAO,GAAiB,EAAE,CAAC;IACpC,UAAU,CAAiF;IAC3F,mEAAmE;IACnE,WAAW,CAAc;IACzB,UAAU,CAAkB;IAC5B,aAAa,GAAG,KAAK,CAAC;IACtB,YACW,KAAqB,EACrB,KAAc,EACd,OAAe,EACf,MAAc,EACd,MAAwB,EACxB,MAAmB,EACnB,SAAkB;IAC3B,uFAAuF;IAC9E,4BAA4B,KAAK;QARjC,UAAK,GAAL,KAAK,CAAgB;QACrB,UAAK,GAAL,KAAK,CAAS;QACd,YAAO,GAAP,OAAO,CAAQ;QACf,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAkB;QACxB,WAAM,GAAN,MAAM,CAAa;QACnB,cAAS,GAAT,SAAS,CAAS;QAElB,8BAAyB,GAAzB,yBAAyB,CAAQ;QAE1C,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;IACzC,CAAC;IACD,8FAA8F;IAC9F,YAAY;QACV,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC;IACD,aAAa,CAAC,OAAoB;QAChC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,OAAO;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IACD,sBAAsB;QACpB,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IACO,SAAS;QACf,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;IACO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAC9E,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,KAAK,CAAC,GAAG,EACd,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CACxC,CAAC;gBACF,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO;oBACxF,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC1B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAChB,IAAI,CAAC,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/E,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACO,KAAK;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,GAAG,EAAE;gBAChB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChC,IAAI,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;qBACnB,IAAI,IAAI,CAAC,SAAS;oBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;;oBAC3C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,YAAY;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;IACO,aAAa,CAAC,KAAY;QAChC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IACO,KAAK,CAAC,QAAQ;QACpB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;gBACxC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChF,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACnD,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxB,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAqC,CAAC;oBACxE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;oBACrE,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBACxC,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;oBAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;oBAC1B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;wBAAE,OAAO,EAAE,CAAC;oBAChE,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;oBAC3C,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC5B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;oBACrE,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;YAC9C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC;QAClE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBACxF,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,OAAgB;QAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACnB,YAAY,CACV;YACE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,OAAO;YAC1B,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE;YACpB,SAAS;YACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;SACzB,EACD,IAAI,CAAC,KAAK,EACV,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CACF,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,MAAM,CAAC,IAAoB;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IACO,KAAK,CAAC,CAAiB;QAC7B,IACE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAClC,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO;YACpC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAChC,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,QAAQ,EAAE;YAEjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,sFAAsF;QACtF,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAC3B,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE;YAC1B,gBAAgB,EAAE,CAAC,IAAI,CAAC,yBAAyB;SAClD,CAAC,CACH,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO;YACpC,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IACO,aAAa,CAAC,QAA2B,EAAE,OAAuB;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,QAA2B,EAAE,OAAwB;QACpE,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YACxE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;YAC7B,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;YAC9F,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC;IAClB,CAAC;IACO,MAAM,CAAC,KAAiB;QAC9B,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACO,IAAI,CAAC,SAAiB,EAAE,OAAa,EAAE,QAAgB,EAAE,WAAmB;QAClF,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YACxB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI;YACrD,QAAQ;YACR,WAAW;YACX,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;IACO,KAAK,CAAC,kBAAkB,CAAC,KAAqB;QACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,aAAa;YAC3C,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACO,KAAK,CAAC,UAAU,CAAC,KAAqB,EAAE,KAAqB;QACnE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAuC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,KAAK,CAAC,OAAO,CAAC,SAAS,EACvB,KAAK,CAAC,OAAO,CAAC,OAAO,EACrB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,CAAC,GAAG,CACf,CAAC;QACF,IACE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC;YAC3C,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC;YAE1D,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CACjB;YACE,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;YAC3B,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;SAC5B,EACD,IAAI,CAAC,KAAK,CACX,CAAC;QACF,IAAI,CAAC,MAAM,CAAC;YACV,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;YAC3B,cAAc,EAAE,MAAM,CAAC,SAAS;YAChC,gBAAgB,EAAE,GAAG;SACtB,CAAC,CAAC;QACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,OAAgB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,OAAgB;QACxD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,EAC1B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,EAC/D,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAgC,CAAC;QAC1F,IACE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;YAChC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;YACjC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAClC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG;YACvC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO;YACxC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,IAAI,CAAC;YAEtC,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC;YACV,IAAI;YACJ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC;YACvB,cAAc,EAAE,KAAK,CAAC,SAAS;YAC/B,gBAAgB,EAAE,GAAG;SACtB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,YAAY,CAChB,SAA4B,EAC5B,OAAwB;QAExB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,EACjD,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IACO,KAAK,CAAC,UAAU,CAAC,OAAmB;QAC1C,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7C,CAAC;IACO,UAAU;QAChB,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC1B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI;YAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IACO,IAAI,CAAC,UAAqC;QAChD,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;QACrD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK;YAC1E,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,eAAe;QACnB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,OAElE,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO;aACxD,OAAwC,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAC7C,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}