zklicensing 0.1.0-beta.2 → 0.1.0-beta.21

package/build/licenseLeaf.d.ts

@@ -0,0 +1,76 @@
+/**
+ * licenseLeaf.ts
+ *
+ * On-chain leaf value stored at every occupied `licensesRoot` slot. Bundles
+ * the license expiry with the device-binding state (cap, slot commitments,
+ * fill counter) so a single tree lookup returns everything a verifier or a
+ * `/prove/bind` call needs.
+ *
+ * Wire shape (in order of hash preimage):
+ *   licenseHash          Field       the tree key, also carried in the leaf
+ *                                    so a stolen witness can't be re-pointed
+ *                                    at another entry. Doubles as the owner-
+ *                                    pubkey commitment — buyLicense asserts
+ *                                    licenseHash == Poseidon(pk.x, pk.isOdd)
+ *                                    so bind/unbind's ownership check reads
+ *                                    the same field as the tree key. Storing
+ *                                    them separately would be pure redundancy.
+ *   expirySlot           UInt32→Field UInt32 packed into a Field
+ *   cap                  UInt32→Field 0 disables /prove/bind; ≤DEVICE_SLOT_CAP
+ *                                    (kept as UInt32 in-circuit because o1js's
+ *                                    provable types don't include UInt8)
+ *   deviceSlotsRoot      Field       Poseidon fold over the 10 slot fields
+ *                                    below (2 fields × DEVICE_SLOT_CAP)
+ *   deviceSlotsFilled    UInt32→Field how many of the DEVICE_SLOT_CAP slots
+ *                                    are currently non-empty — carried
+ *                                    alongside the fold so `bind()` can do
+ *                                    a cheap "cap - filled > 0" check
+ *                                    without re-summing the array
+ *
+ * DEVICE_SLOT_CAP is fixed at 5 so the slot arrays have a size known to the
+ * circuit at compile time. `cap` in the leaf may be smaller — it's a
+ * per-license limit; slots [cap..DEVICE_SLOT_CAP) must always stay empty
+ * (Field(0)) and `bind()` rejects any write to them. `cap = 0` disables
+ * binding entirely; `bind()` rejects immediately without ever touching a
+ * slot.
+ *
+ * Slot encoding (fields carried in the fold, per slot i):
+ *   occupied[i]  Field   0 (empty) or Poseidon(devicePubKeyHash)
+ *   freedAt[i]   Field   packed (boundAtSlot << 32) | freedAtSlot; both
+ *                        are UInt32-range Mina slot numbers. On a fresh
+ *                        empty slot both halves are 0. On bind, boundAt
+ *                        gets the current slot and freedAt stays 0. On
+ *                        unbind, freedAt gets the current slot (boundAt
+ *                        is preserved for audit / cooldown math).
+ *
+ * The struct + helpers live in the SDK (not the circuit package) so both
+ * the on-chain `@method` bodies AND the off-chain backend / verifier /
+ * dashboards can share a single source of truth for the leaf hash. The
+ * circuit re-exports them from `LicensingApp.ts` so existing consumers
+ * that import from there keep working.
+ */
+import { Field, PublicKey, UInt32 } from 'o1js';
+import type { LicenseRecord } from './licenseRecord.js';
+export declare const DEVICE_SLOT_CAP_N = 5;
+export declare const DEVICE_SLOT_CAP: UInt32;
+export declare const EMPTY_DEVICE_SLOTS_ROOT: Field;
+export declare function ownerPubKeyHash(pub: PublicKey): Field;
+export declare function packSlotTimes(boundAtSlot: UInt32, freedAtSlot: UInt32): Field;
+export declare function unpackSlotTimes(packed: Field): {
+    boundAtSlot: UInt32;
+    freedAtSlot: UInt32;
+};
+export declare function computeDeviceSlotsRoot(occupied: Field[], freedAt: Field[]): Field;
+export declare const DeviceSlot: any;
+export type DeviceSlot = any;
+export declare function emptyDeviceSlot(): DeviceSlot;
+export declare const DeviceSlots: any;
+export type DeviceSlots = any;
+export declare function emptyDeviceSlots(): DeviceSlots;
+export declare function deviceSlotsHash(ds: DeviceSlots): Field;
+export declare const LicenseLeaf: any;
+export type LicenseLeaf = any;
+export declare function leafHash(leaf: LicenseLeaf): Field;
+export declare function freshLeaf(licenseHash: Field, expirySlot: UInt32, cap: UInt32): LicenseLeaf;
+export declare function leafFromRecord(record: LicenseRecord): LicenseLeaf;
+//# sourceMappingURL=licenseLeaf.d.ts.map

package/build/licenseLeaf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseLeaf.d.ts","sourceRoot":"","sources":["../src/licenseLeaf.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,KAAK,EAAsB,SAAS,EAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMxD,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,eAAe,QAAiC,CAAC;AAK9D,eAAO,MAAM,uBAAuB,EAAE,KAErC,CAAC;AAOF,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,KAAK,CAErD;AASD,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,KAAK,CAE7E;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAQ3F;AAMD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,KAAK,EAAE,EACjB,OAAO,EAAG,KAAK,EAAE,GAChB,KAAK,CAYP;AAYD,eAAO,MAAM,UAAU,EAAE,GAGvB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,GAAG,CAAC;AAE7B,wBAAgB,eAAe,IAAI,UAAU,CAE5C;AAID,eAAO,MAAM,WAAW,EAAE,GAExB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,GAAG,CAAC;AAE9B,wBAAgB,gBAAgB,IAAI,WAAW,CAI9C;AAKD,wBAAgB,eAAe,CAAC,EAAE,EAAE,WAAW,GAAG,KAAK,CAMtD;AAMD,eAAO,MAAM,WAAW,EAAE,GAMxB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,GAAG,CAAC;AAE9B,wBAAgB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,KAAK,CAQjD;AAID,wBAAgB,SAAS,CACvB,WAAW,EAAE,KAAK,EAClB,UAAU,EAAG,MAAM,EACnB,GAAG,EAAU,MAAM,GAClB,WAAW,CAQb;AAMD,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,WAAW,CAUjE"}

package/build/licenseLeaf.js

@@ -0,0 +1,189 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * licenseLeaf.ts
+ *
+ * On-chain leaf value stored at every occupied `licensesRoot` slot. Bundles
+ * the license expiry with the device-binding state (cap, slot commitments,
+ * fill counter) so a single tree lookup returns everything a verifier or a
+ * `/prove/bind` call needs.
+ *
+ * Wire shape (in order of hash preimage):
+ *   licenseHash          Field       the tree key, also carried in the leaf
+ *                                    so a stolen witness can't be re-pointed
+ *                                    at another entry. Doubles as the owner-
+ *                                    pubkey commitment — buyLicense asserts
+ *                                    licenseHash == Poseidon(pk.x, pk.isOdd)
+ *                                    so bind/unbind's ownership check reads
+ *                                    the same field as the tree key. Storing
+ *                                    them separately would be pure redundancy.
+ *   expirySlot           UInt32→Field UInt32 packed into a Field
+ *   cap                  UInt32→Field 0 disables /prove/bind; ≤DEVICE_SLOT_CAP
+ *                                    (kept as UInt32 in-circuit because o1js's
+ *                                    provable types don't include UInt8)
+ *   deviceSlotsRoot      Field       Poseidon fold over the 10 slot fields
+ *                                    below (2 fields × DEVICE_SLOT_CAP)
+ *   deviceSlotsFilled    UInt32→Field how many of the DEVICE_SLOT_CAP slots
+ *                                    are currently non-empty — carried
+ *                                    alongside the fold so `bind()` can do
+ *                                    a cheap "cap - filled > 0" check
+ *                                    without re-summing the array
+ *
+ * DEVICE_SLOT_CAP is fixed at 5 so the slot arrays have a size known to the
+ * circuit at compile time. `cap` in the leaf may be smaller — it's a
+ * per-license limit; slots [cap..DEVICE_SLOT_CAP) must always stay empty
+ * (Field(0)) and `bind()` rejects any write to them. `cap = 0` disables
+ * binding entirely; `bind()` rejects immediately without ever touching a
+ * slot.
+ *
+ * Slot encoding (fields carried in the fold, per slot i):
+ *   occupied[i]  Field   0 (empty) or Poseidon(devicePubKeyHash)
+ *   freedAt[i]   Field   packed (boundAtSlot << 32) | freedAtSlot; both
+ *                        are UInt32-range Mina slot numbers. On a fresh
+ *                        empty slot both halves are 0. On bind, boundAt
+ *                        gets the current slot and freedAt stays 0. On
+ *                        unbind, freedAt gets the current slot (boundAt
+ *                        is preserved for audit / cooldown math).
+ *
+ * The struct + helpers live in the SDK (not the circuit package) so both
+ * the on-chain `@method` bodies AND the off-chain backend / verifier /
+ * dashboards can share a single source of truth for the leaf hash. The
+ * circuit re-exports them from `LicensingApp.ts` so existing consumers
+ * that import from there keep working.
+ */
+import { Field, Poseidon, Provable, Struct, UInt32 } from 'o1js';
+// Fixed slot-array width. Per the device-binding-noncustodial plan: 5 is
+// the sweet spot between "enough seats for a normal user" and "witnesses
+// stay small." Changing this is a hardfork migration (would flip every
+// leaf hash) — not a runtime tunable.
+export const DEVICE_SLOT_CAP_N = 5;
+export const DEVICE_SLOT_CAP = UInt32.from(DEVICE_SLOT_CAP_N);
+// Poseidon-fold of DEVICE_SLOT_CAP × 2 = 10 zero Fields, used as the
+// initial deviceSlotsRoot on every freshly-minted leaf. Precomputed once
+// at module load so `freshLeaf()` doesn't reconstruct it per-call.
+export const EMPTY_DEVICE_SLOTS_ROOT = Poseidon.hash(Array.from({ length: DEVICE_SLOT_CAP_N * 2 }, () => Field(0)));
+// Poseidon-bound identity of the passphrase-derived ownership pubkey.
+// The full PublicKey is (x: Field, isOdd: Bool); Poseidon(x, isOdd.toField())
+// gives a single Field commitment. The buy circuit asserts this equals
+// `licenseHash`, so the leaf carries no separate owner-pubkey field —
+// `licenseHash` IS the on-chain owner-pubkey commitment.
+export function ownerPubKeyHash(pub) {
+    return Poseidon.hash([pub.x, pub.isOdd.toField()]);
+}
+// Pack (boundAtSlot, freedAtSlot) into a single Field. Both are Mina
+// slot numbers (UInt32-range, ≤ 2^32-1), so the concatenation fits in 64
+// bits. Layout mirrors packPrices in LicensingApp.ts — low bits first so
+// the more frequently-read half (freedAt, checked by every bind cooldown)
+// unpacks with a single mask.
+const SHIFT_32 = Field(1n << 32n);
+export function packSlotTimes(boundAtSlot, freedAtSlot) {
+    return freedAtSlot.value.add(boundAtSlot.value.mul(SHIFT_32));
+}
+export function unpackSlotTimes(packed) {
+    // toBits(64) enforces the high 190 bits are zero — belt-and-suspenders
+    // since we only ever write via packSlotTimes, but keeps the circuit
+    // sound against an adversarially-crafted slot in a future upgrade.
+    const bits = packed.toBits(64);
+    const freedAtSlot = UInt32.Unsafe.fromField(Field.fromBits(bits.slice(0, 32)));
+    const boundAtSlot = UInt32.Unsafe.fromField(Field.fromBits(bits.slice(32, 64)));
+    return { boundAtSlot, freedAtSlot };
+}
+// Fold the parallel slot arrays into `deviceSlotsRoot`. Same order every
+// time — occupied[0], freedAt[0], occupied[1], freedAt[1], ... — so a
+// buyer that reconstructs the fold off-chain (verifier, dashboard) gets
+// the same commitment the circuit computed.
+export function computeDeviceSlotsRoot(occupied, freedAt) {
+    if (occupied.length !== DEVICE_SLOT_CAP_N || freedAt.length !== DEVICE_SLOT_CAP_N) {
+        throw new Error(`computeDeviceSlotsRoot expects exactly ${DEVICE_SLOT_CAP_N} entries in each array ` +
+            `(got occupied=${occupied.length}, freedAt=${freedAt.length})`);
+    }
+    const fields = [];
+    for (let i = 0; i < DEVICE_SLOT_CAP_N; i++) {
+        fields.push(occupied[i], freedAt[i]);
+    }
+    return Poseidon.hash(fields);
+}
+// Per-slot payload. The Struct wrapper is what lets o1js serialize this
+// inside larger provable structures — it also gives us a fixed
+// two-Field width so DeviceSlots.slots can be a `Provable.Array` of a
+// well-known type instead of a bag of loose Fields.
+//
+// Same `const X: any = Struct(...)` pattern as contractInterface.ts —
+// annotating as `any` sidesteps TS2742 (o1js sits outside the package
+// rootDir under npm hoisting, so tsc can't emit portable declarations
+// for the inferred Struct class). Instance methods and `static empty()`
+// therefore live as standalone helpers below rather than on the class.
+export const DeviceSlot = Struct({
+    occupied: Field, // 0 or Poseidon(devicePubKeyHash)
+    freedAt: Field, // packSlotTimes(boundAtSlot, freedAtSlot)
+});
+export function emptyDeviceSlot() {
+    return new DeviceSlot({ occupied: Field(0), freedAt: Field(0) });
+}
+// Fixed-width slot array. `Provable.Array(DeviceSlot, N)` promises the
+// circuit an exact length so witnesses can address slots by static index.
+export const DeviceSlots = Struct({
+    slots: Provable.Array(DeviceSlot, DEVICE_SLOT_CAP_N),
+});
+export function emptyDeviceSlots() {
+    return new DeviceSlots({
+        slots: Array.from({ length: DEVICE_SLOT_CAP_N }, () => emptyDeviceSlot()),
+    });
+}
+// In-circuit fold — takes a DeviceSlots value so it composes cleanly
+// inside `@method` bodies. The array length is fixed by the Struct's
+// Provable.Array declaration, so no runtime length guard is needed.
+export function deviceSlotsHash(ds) {
+    const fields = [];
+    for (const s of ds.slots) {
+        fields.push(s.occupied, s.freedAt);
+    }
+    return Poseidon.hash(fields);
+}
+// The leaf value itself. `LicensingApp.buyLicense` builds one of these
+// with EMPTY_DEVICE_SLOTS_ROOT and writes leafHash(leaf) into licensesRoot;
+// subsequent mutations (renew, refund, migrate, bind, unbind) each build
+// a new leaf with the appropriate field(s) updated and write its hash.
+export const LicenseLeaf = Struct({
+    licenseHash: Field,
+    expirySlot: UInt32,
+    cap: UInt32,
+    deviceSlotsRoot: Field,
+    deviceSlotsFilled: UInt32,
+});
+export function leafHash(leaf) {
+    return Poseidon.hash([
+        leaf.licenseHash,
+        leaf.expirySlot.value,
+        leaf.cap.value,
+        leaf.deviceSlotsRoot,
+        leaf.deviceSlotsFilled.value,
+    ]);
+}
+// Construct the leaf a fresh buy writes into the tree — no devices bound
+// yet, filled counter at zero, slot-fold at the precomputed empty root.
+export function freshLeaf(licenseHash, expirySlot, cap) {
+    return new LicenseLeaf({
+        licenseHash,
+        expirySlot,
+        cap,
+        deviceSlotsRoot: EMPTY_DEVICE_SLOTS_ROOT,
+        deviceSlotsFilled: UInt32.zero,
+    });
+}
+// Reconstruct the leaf that lives at `record.licenseHash` in the licensesRoot
+// MerkleMap. `LicenseRecord` optionally persists the device-binding fields;
+// anything missing falls back to the fresh-leaf defaults, matching the state
+// a just-issued license was minted with.
+export function leafFromRecord(record) {
+    return new LicenseLeaf({
+        licenseHash: Field(record.licenseHash),
+        expirySlot: UInt32.from(record.expirySlot),
+        cap: UInt32.from(record.deviceCap ?? 0),
+        deviceSlotsRoot: record.deviceSlotsRoot !== undefined
+            ? Field(record.deviceSlotsRoot)
+            : EMPTY_DEVICE_SLOTS_ROOT,
+        deviceSlotsFilled: UInt32.from(record.deviceSlotsFilled ?? 0),
+    });
+}
+//# sourceMappingURL=licenseLeaf.js.map

package/build/licenseLeaf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseLeaf.js","sourceRoot":"","sources":["../src/licenseLeaf.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAa,MAAM,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAG5E,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,sCAAsC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAE9D,qEAAqE;AACrE,yEAAyE;AACzE,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAU,QAAQ,CAAC,IAAI,CACzD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iBAAiB,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAC9D,CAAC;AAEF,sEAAsE;AACtE,8EAA8E;AAC9E,uEAAuE;AACvE,sEAAsE;AACtE,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,GAAc;IAC5C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,8BAA8B;AAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC;AAElC,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,WAAmB;IACpE,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAa;IAC3C,uEAAuE;IACvE,oEAAoE;IACpE,mEAAmE;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AACtC,CAAC;AAED,yEAAyE;AACzE,sEAAsE;AACtE,wEAAwE;AACxE,4CAA4C;AAC5C,MAAM,UAAU,sBAAsB,CACpC,QAAiB,EACjB,OAAiB;IAEjB,IAAI,QAAQ,CAAC,MAAM,KAAK,iBAAiB,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CACb,0CAA0C,iBAAiB,yBAAyB;YACpF,iBAAiB,QAAQ,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,GAAG,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,wEAAwE;AACxE,+DAA+D;AAC/D,sEAAsE;AACtE,oDAAoD;AACpD,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,MAAM,CAAC,MAAM,UAAU,GAAQ,MAAM,CAAC;IACpC,QAAQ,EAAE,KAAK,EAAI,kCAAkC;IACrD,OAAO,EAAG,KAAK,EAAI,0CAA0C;CAC9D,CAAC,CAAC;AAGH,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,uEAAuE;AACvE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAQ,MAAM,CAAC;IACrC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC;CACrD,CAAC,CAAC;AAGH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,WAAW,CAAC;QACrB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC;KAC1E,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,qEAAqE;AACrE,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,EAAe;IAC7C,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,uEAAuE;AACvE,4EAA4E;AAC5E,yEAAyE;AACzE,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAQ,MAAM,CAAC;IACrC,WAAW,EAAQ,KAAK;IACxB,UAAU,EAAS,MAAM;IACzB,GAAG,EAAgB,MAAM;IACzB,eAAe,EAAI,KAAK;IACxB,iBAAiB,EAAE,MAAM;CAC1B,CAAC,CAAC;AAGH,MAAM,UAAU,QAAQ,CAAC,IAAiB;IACxC,OAAO,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,UAAU,CAAC,KAAK;QACrB,IAAI,CAAC,GAAG,CAAC,KAAK;QACd,IAAI,CAAC,eAAe;QACpB,IAAI,CAAC,iBAAiB,CAAC,KAAK;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,wEAAwE;AACxE,MAAM,UAAU,SAAS,CACvB,WAAkB,EAClB,UAAmB,EACnB,GAAmB;IAEnB,OAAO,IAAI,WAAW,CAAC;QACrB,WAAW;QACX,UAAU;QACV,GAAG;QACH,eAAe,EAAI,uBAAuB;QAC1C,iBAAiB,EAAE,MAAM,CAAC,IAAI;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,yCAAyC;AACzC,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,OAAO,IAAI,WAAW,CAAC;QACrB,WAAW,EAAQ,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;QAC5C,UAAU,EAAS,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QACjD,GAAG,EAAgB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QACrD,eAAe,EAAI,MAAM,CAAC,eAAe,KAAK,SAAS;YACrD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC;YAC/B,CAAC,CAAC,uBAAuB;QAC3B,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC"}

package/build/licenseRecord.d.ts

@@ -7,7 +7,22 @@
  * the same type without dragging in filesystem code. licenseStore.ts
  * re-exports these to keep existing Node imports working.
  */
+export type FiatRateSnapshot = {
+    minaEurRate: number;
+    minaUsdRate: number;
+    minaGbpRate: number;
+    recordedAt: string;
+};
 export type LicenseRecord = {
+    /** Carried over from this earlier deployment when the app was redeployed (its successor starts with the same licenses): license state only, the sale stays on the earlier record. */
+    carriedOverFrom?: string;
+    /**
+     * Moved to another owner key (transferLicense): this record keeps the sale,
+     * and the license itself is the record under `transferredTo` (which names
+     * its origin in `transferredFrom`, with no sale of its own).
+     */
+    transferredTo?: string;
+    transferredFrom?: string;
     zkAppAddress: string;
     licenseHash: string;
     expirySlot: number;
@@ -15,25 +30,73 @@ export type LicenseRecord = {
     purchaseAmount: string;
     txHash: string;
     createdAt: string;
-    buyerAddress?: string;
+    deviceCap?: number;
+    deviceSlotsRoot?: string;
+    deviceSlotsFilled?: number;
+    devices?: Array<{
+        slotIndex: number;
+        deviceCommitment: string;
+        boundAtSlot: number;
+        freedAtSlot: number;
+    }>;
+    buyerAddress: string;
     buyerCountry?: string;
+    buyerZip?: string;
+    buyerIpCountry?: string | null;
+    geoDb?: string;
     pending?: boolean;
     provedAtSlot?: number;
+    pendingPrior?: LicenseRecord;
     initialExpirySlot?: number;
-    tier?: 'monthly' | 'yearly' | 'fiveYear';
+    tier?: 'monthly' | 'yearly' | 'fiveYear' | 'perpetual';
     renewedAtLeastOnce?: boolean;
-    refunded?: boolean;
-    released?: boolean;
+    refunded?: boolean | 'fast';
+    released?: boolean | 'fast';
     releaseSlot?: number;
+    releaseTxHash?: string;
     renewals?: Array<{
         slot: number;
         amount: string;
         newExpiry: number;
         txHash?: string;
+        fiatSnapshot?: FiatRateSnapshot;
+        waiverGivenBy?: AgentWaiverRecord;
+        ipCountry?: string | null;
+        geoDb?: string;
     }>;
+    fiatSnapshot?: FiatRateSnapshot;
     refundWaiverAcceptedAt?: string;
     escrowless?: boolean;
+    escrowStranded?: {
+        txHash: string;
+        at: string;
+    };
+    waiverGivenBy?: AgentWaiverRecord;
+    provisionalFlipAtSlot?: number;
 };
 export declare const PENDING_REAP_SLOTS = 60;
-export type LicenseStatus = 'active' | 'refunded' | 'expired' | 'unknown';
+export type LicenseStatus = 'active' | 'refunded' | 'expired' | 'transferred' | 'unknown';
+/** A withdrawal waiver an agent gave under the buyer's standing consent. */
+export type AgentWaiverRecord = {
+    agent: string;
+    owner: string;
+    /** SHA-256 of the signed statement; the full consent is in the keeper's consent log. */
+    statementSha256: string;
+    issuedAt: string;
+};
+/**
+ * The file name of the license receipt a buyer downloads: `license-<appId>.json`,
+ * so an app looks for its own file and a buyer's receipts for different apps
+ * don't collide. Falls back to the zkApp address when there is no app ID (a
+ * contract that isn't registered as an app).
+ */
+export declare function licenseFileName(appId: string | null | undefined, zkAppAddress?: string): string;
+/**
+ * The 98/2 split exactly as the licensing circuit pays it (LicensingApp:
+ * fee = amount.div(50), vendor = amount.sub(fee)); the two always add up to
+ * the amount. Use these for every off-chain figure, so dashboards, stats
+ * and tax exports match the on-chain payouts to the nanomina.
+ */
+export declare function platformFeeNano(amount: bigint): bigint;
+export declare function vendorShareNano(amount: bigint): bigint;
 //# sourceMappingURL=licenseRecord.d.ts.map

package/build/licenseRecord.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseRecord.d.ts","sourceRoot":"","sources":["../src/licenseRecord.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AAQH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAI,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IACtB,UAAU,EAAK,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,qLAAqL;IACrL,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,EAAI,MAAM,CAAC;IACvB,WAAW,EAAK,MAAM,CAAC;IACvB,UAAU,EAAM,MAAM,CAAC;IACvB,YAAY,EAAI,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAU,MAAM,CAAC;IACvB,SAAS,EAAO,MAAM,CAAC;IAMvB,SAAS,CAAC,EAAQ,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,SAAS,EAAS,MAAM,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAO,MAAM,CAAC;QACzB,WAAW,EAAO,MAAM,CAAC;KAC1B,CAAC,CAAC;IACH,YAAY,EAAI,MAAM,CAAC;IAQvB,YAAY,CAAC,EAAG,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAO,MAAM,CAAC;IAIvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAU,MAAM,CAAC;IACvB,OAAO,CAAC,EAAQ,OAAO,CAAC;IACxB,YAAY,CAAC,EAAG,MAAM,CAAC;IAIvB,YAAY,CAAC,EAAG,aAAa,CAAC;IAG9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAG3B,IAAI,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;IAGvD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAY7B,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAG5B,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IAKrB,aAAa,CAAC,EAAE,MAAM,CAAC;IAOvB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;QAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAKtM,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAMhC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAMhC,UAAU,CAAC,EAAE,OAAO,CAAC;IAKrB,cAAc,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAGhD,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAKlC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAIF,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;AAE1F,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAI/F;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/build/licenseRecord.js

@@ -1,6 +1,31 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 // Reap pending records this many slots after prove time if no event ever lands.
 // 60 slots ≈ 90 minutes — a generous window for tx inclusion under devnet conditions.
 export const PENDING_REAP_SLOTS = 60;
+/**
+ * The file name of the license receipt a buyer downloads: `license-<appId>.json`,
+ * so an app looks for its own file and a buyer's receipts for different apps
+ * don't collide. Falls back to the zkApp address when there is no app ID (a
+ * contract that isn't registered as an app).
+ */
+export function licenseFileName(appId, zkAppAddress) {
+    if (appId && /^[a-z0-9][a-z0-9-]{1,38}[a-z0-9]$/.test(appId))
+        return `license-${appId}.json`;
+    if (zkAppAddress && /^B62q[1-9A-HJ-NP-Za-km-z]{51}$/.test(zkAppAddress))
+        return `license-${zkAppAddress}.json`;
+    return 'license.json';
+}
+/**
+ * The 98/2 split exactly as the licensing circuit pays it (LicensingApp:
+ * fee = amount.div(50), vendor = amount.sub(fee)); the two always add up to
+ * the amount. Use these for every off-chain figure, so dashboards, stats
+ * and tax exports match the on-chain payouts to the nanomina.
+ */
+export function platformFeeNano(amount) {
+    return amount / 50n;
+}
+export function vendorShareNano(amount) {
+    return amount - amount / 50n;
+}
 //# sourceMappingURL=licenseRecord.js.map

package/build/licenseRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseRecord.js","sourceRoot":"","sources":["../src/licenseRecord.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAqJpC,gFAAgF;AAChF,sFAAsF;AACtF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAarC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgC,EAAE,YAAqB;IACrF,IAAI,KAAK,IAAI,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,KAAK,OAAO,CAAC;IAC7F,IAAI,YAAY,IAAI,gCAAgC,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,OAAO,WAAW,YAAY,OAAO,CAAC;IAC/G,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,MAAM,GAAG,GAAG,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;AAC/B,CAAC"}

package/build/licenseStore.d.ts

@@ -1,11 +1,39 @@
+/**
+ * licenseStore.ts
+ *
+ * Off-chain MerkleMap state for the licensing system.
+ *
+ * Records are keyed by (zkAppAddress, licenseHash). Each LicensingApp deploys
+ * its own on-chain MerkleMap, so a passphrase used on two different apps
+ * produces the same `licenseHash` but two distinct records. Lookups that omit
+ * `zkAppAddress` would collide across apps — every API here takes it.
+ *
+ * Used by:
+ *   - interact.ts / buyLicense.ts (CLI) — reads/writes directly
+ *   - keeperService.ts              — exposes the same logic over HTTP
+ */
 import { MerkleMap, MerkleMapWitness } from 'o1js';
 import { type LicenseRecord as _LicenseRecord, type LicenseStatus as _LicenseStatus } from './licenseRecord.js';
 export type LicenseRecord = _LicenseRecord;
 export type LicenseStatus = _LicenseStatus;
+export type { AgentWaiverRecord } from './licenseRecord.js';
 export declare const PENDING_REAP_SLOTS = 60;
 export declare function licenseStorePath(): string;
+/**
+ * Where records live. Default: the JSON file at licenseStorePath() (the
+ * verify service and SDK users). The keeper installs its SQLite store with
+ * setLicenseStoreBackend, including a lock that works across processes.
+ */
+export type LicenseStoreBackend = {
+    read(): Promise<unknown>;
+    write(records: LicenseRecord[]): Promise<void>;
+    /** Wraps each read-modify-write; default none (in-process lock only). */
+    withLock?<T>(fn: () => Promise<T>): Promise<T>;
+};
+export declare function setLicenseStoreBackend(b: LicenseStoreBackend | null): void;
 export declare function readRecords(): Promise<LicenseRecord[]>;
 export declare function buildMap(records: LicenseRecord[], zkAppAddress: string): MerkleMap;
+export declare function escrowExpirySlot(r: LicenseRecord): number;
 export declare function buildEscrowMap(records: LicenseRecord[], zkAppAddress: string): MerkleMap;
 export declare function serializeWitness(witness: MerkleMapWitness): {
     isLefts: boolean[];
@@ -22,7 +50,20 @@ export declare function getWitness(zkAppAddress: string, licenseHash: string): P
     serialized: ReturnType<typeof serializeWitness>;
 }>;
 export declare function getLicense(zkAppAddress: string, licenseHash: string): Promise<LicenseRecord | null>;
-export declare function licenseStatus(record: LicenseRecord | null, currentSlot: number): LicenseStatus;
+export declare function licenseStatus(record: LicenseRecord | null, currentSlot: number, forkActivationSlot?: number): LicenseStatus;
+/**
+ * A redeployed app's successor starts with every license of `from` (its
+ * frozen tree, checked on chain): copy them to `to`, marked carriedOverFrom
+ * (not new sales). Refunded and already-present licenses are skipped.
+ * Returns how many were copied.
+ */
+export declare function carryOverRecords(from: string, to: string): Promise<number>;
+/**
+ * A forced retirement left `zkAppAddress`'s escrowed purchases on the
+ * retired contract: marks them stranded (no refund or release follows).
+ * Returns how many.
+ */
+export declare function markEscrowStranded(zkAppAddress: string, txHash: string, at?: string): Promise<number>;
 export declare function upsertLicense(record: LicenseRecord): Promise<void>;
 export declare function updateExpiry(zkAppAddress: string, licenseHash: string, expirySlot: number, opts?: {
     markRenewed?: boolean;
@@ -33,16 +74,52 @@ export declare function updateExpiry(zkAppAddress: string, licenseHash: string,
         txHash?: string;
     };
 }): Promise<boolean>;
-export declare function recordRefund(zkAppAddress: string, licenseHash: string): Promise<boolean>;
-export declare function recordRelease(zkAppAddress: string, licenseHash: string, releaseSlot?: number): Promise<boolean>;
+export declare function recordRefund(zkAppAddress: string, licenseHash: string, opts?: {
+    provisional?: boolean;
+    nowSlot?: number;
+}): Promise<boolean>;
+export declare function recordRelease(zkAppAddress: string, licenseHash: string, releaseSlot?: number, txHash?: string, opts?: {
+    provisional?: boolean;
+    nowSlot?: number;
+}): Promise<boolean>;
+export declare function revertProvisionalFlip(zkAppAddress: string, licenseHash: string, kind: 'release' | 'refund'): Promise<boolean>;
 export declare function confirmRecord(zkAppAddress: string, licenseHash: string): Promise<boolean>;
 export declare function applyLicenseIssued(zkAppAddress: string, licenseHash: string, fields: {
     expirySlot: number;
     purchaseSlot: number;
     purchaseAmount: string;
-    tier?: 'monthly' | 'yearly' | 'fiveYear';
+    tier?: 'monthly' | 'yearly' | 'fiveYear' | 'perpetual';
     escrowless?: boolean;
+    deviceCap?: number;
+    deviceSlotsRoot?: string;
+    deviceSlotsFilled?: number;
+    buyerAddress: string;
 }): Promise<void>;
+export declare function applyLicenseRenewed(zkAppAddress: string, licenseHash: string, fields: {
+    newExpiry: number;
+}): Promise<boolean>;
+/**
+ * A license moved to a new owner key (transferLicense): the license state
+ * (expiry, cap, bound devices) goes to a record under `to`, with no sale of
+ * its own (the sale and its receipt stay on the original record), listed
+ * under `wallet` (the transfer's sender, the new owner's wallet, which
+ * paid), and the original leaves the licenses tree (expirySlot 0) marked
+ * `transferredTo`.
+ */
+export declare function applyLicenseTransferred(zkAppAddress: string, from: string, to: string, opts?: {
+    wallet?: string;
+    txHash?: string;
+}): Promise<boolean>;
+export declare function applyDeviceBound(zkAppAddress: string, licenseHash: string, fields: {
+    slotIndex: number;
+    deviceCommitment: string;
+    boundAtSlot: number;
+}): Promise<boolean>;
+export declare function applyDeviceUnbound(zkAppAddress: string, licenseHash: string, fields: {
+    slotIndex: number;
+    freedAtSlot: number;
+}): Promise<boolean>;
+export declare function revertPending(zkAppAddress: string, licenseHash: string, txHash?: string): Promise<'restored' | 'removed' | false>;
 export declare function deleteRecord(zkAppAddress: string, licenseHash: string): Promise<boolean>;
 export declare function getStalePendingRecords(currentSlot: number, maxAgeSlots?: number): Promise<LicenseRecord[]>;
 export declare function getReleasableRecords(currentSlot: number): Promise<LicenseRecord[]>;

package/build/licenseStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseStore.d.ts","sourceRoot":"","sources":["../src/licenseStore.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAe,SAAS,EAAE,gBAAgB,EAAuC,MAAM,MAAM,CAAC;AAGrG,OAAO,EAA6C,KAAK,aAAa,IAAI,cAAc,EAAE,KAAK,aAAa,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAO3J,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC;AAC3C,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC;AAC3C,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,eAAO,MAAM,kBAAkB,KAAsB,CAAC;AAEtD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,yEAAyE;IACzE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAChD,CAAC;AASF,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAE1E;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAY5D;AAmCD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,CAQlF;AAOD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAEzD;AAOD,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,CAgBxF;AAGD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG;IAC3D,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAKA;AAGD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,GAAG,gBAAgB,CAKnB;AAGD,wBAAsB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CACjD,CAAC,CAWD;AAGD,wBAAsB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAGzG;AAID,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,SAAI,GAAG,aAAa,CAMtH;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBhF;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,SAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,CAY7H;AAGD,wBAAsB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBxE;AAMD,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAO,GACnH,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAcD,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD,OAAO,CAAC,OAAO,CAAC,CA4BlB;AAUD,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAMD,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,SAAS,GAAG,QAAQ,GACzB,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAGD,wBAAsB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/F;AASD,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;IACN,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;IAGvD,UAAU,CAAC,EAAE,OAAO,CAAC;IASrB,SAAS,CAAC,EAAU,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAI,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAM3B,YAAY,EAAQ,MAAM,CAAC;CAC5B,GACA,OAAO,CAAC,IAAI,CAAC,CAwEf;AAaD,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5B,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,OAAO,CAAC,OAAO,CAAC,CA4BlB;AAkCD,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAG,MAAM,EACpB,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC3E,OAAO,CAAC,OAAO,CAAC,CAoBlB;AAQD,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAG,MAAM,EACpB,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACjD,OAAO,CAAC,OAAO,CAAC,CAclB;AAKD,wBAAsB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,GAAG,KAAK,CAAC,CAavI;AAGD,wBAAsB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAS9F;AAID,wBAAsB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,SAAqB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAK5H;AAID,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAYxF"}