zklicensing 0.1.0-beta.2 → 0.1.0-beta.21

package/build/permitMessages.js

@@ -0,0 +1,462 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * permitMessages.ts — `zklicensing/permits/messages`
+ *
+ * The single definition of everything signed or hashed for zkPermits: the
+ * permit leaf, subject derivation, packed fees and policy, the authority
+ * key-set commitment, and the message each signer signs. The PermitRegistry
+ * circuit imports this module, so an off-chain signature (authority console,
+ * operator page, agent) always hashes to exactly what the circuit verifies.
+ * Test vectors: permitMessages.vectors.json.
+ *
+ * Every function works both off-chain and inside a circuit (o1js types
+ * only). Messages are short Field arrays; wallets sign them with
+ * `signFields` (Auro, WalletConnect `mina_signFields`), and o1js
+ * `Signature.verify` accepts those signatures in-circuit.
+ *
+ * Wallet field signatures are NOT bound to a network by the signer, so
+ * every message carries the network, the registry address and a
+ * per-message nonce itself (see `authorityMessage`).
+ */
+import { Bool, Field, Poseidon, PrivateKey, Provable, PublicKey, Signature, Struct, UInt32, UInt64 } from 'o1js';
+// ------------------------------------------------------------
+// Domain separation
+// ------------------------------------------------------------
+/** Deterministic Field from a short ASCII label (≤ 31 bytes). */
+function labelField(label) {
+    if (label.length > 31)
+        throw new Error(`label too long: ${label}`);
+    let v = 0n;
+    for (const ch of label) {
+        const c = ch.charCodeAt(0);
+        if (c > 0x7f)
+            throw new Error('ASCII labels only');
+        v = (v << 8n) | BigInt(c);
+    }
+    return Field(v);
+}
+/** One tag per message type. Never reuse or renumber. */
+export const PERMIT_TAGS = {
+    INIT: labelField('zkPermits/v1/init'),
+    GRANT: labelField('zkPermits/v1/grant'),
+    ACCEPT: labelField('zkPermits/v1/accept'),
+    SUSPEND: labelField('zkPermits/v1/suspend'),
+    REINSTATE: labelField('zkPermits/v1/reinstate'),
+    REVOKE: labelField('zkPermits/v1/revoke'),
+    SURRENDER: labelField('zkPermits/v1/surrender'),
+    SET_FEES: labelField('zkPermits/v1/setFees'),
+    ROTATE: labelField('zkPermits/v1/rotate'),
+    LEAF: labelField('zkPermits/v1/leaf'),
+    SUBJECT: labelField('zkPermits/v1/subject'),
+    KEYS: labelField('zkPermits/v1/keys'),
+    // Application escrow (PERMITS_PLAN.md §4.2).
+    APPLICATION: labelField('zkPermits/v1/application'),
+    APPLY: labelField('zkPermits/v1/apply'),
+    APPROVE: labelField('zkPermits/v1/approve'),
+    REJECT: labelField('zkPermits/v1/reject'),
+    WITHDRAW: labelField('zkPermits/v1/withdraw'),
+    // Generations: the authority retires a registry before redeploying it.
+    RETIRE: labelField('zkPermits/v1/retire'),
+    // ... or the platform does (one signature by the platform key).
+    PLATFORM_RETIRE: labelField('zkPermits/v1/platformRetire'),
+    // Before retiring, the platform may cancel an open application (full refund).
+    PLATFORM_CANCEL: labelField('zkPermits/v1/platformCancel'),
+    // Key changes: a new payout address (threshold, after a delay), a permit moving to a new holder key.
+    PAYOUT: labelField('zkPermits/v1/payout'),
+    PAYOUT_CANCEL: labelField('zkPermits/v1/payoutCancel'),
+    REKEY: labelField('zkPermits/v1/rekey'),
+};
+/** Network in signed messages. 0 is never valid. */
+export const PERMIT_NETWORK = { devnet: Field(1), mainnet: Field(2) };
+export function networkField(network) {
+    const f = PERMIT_NETWORK[network];
+    if (!f)
+        throw new Error(`unknown network ${network}`);
+    return f;
+}
+// ------------------------------------------------------------
+// Permit leaf
+// ------------------------------------------------------------
+/** MOVED: the permit moved to a new holder key (rekeyPermit), under a new subject; this leaf is closed. */
+export const PERMIT_STATUS = { ACTIVE: 0, SUSPENDED: 1, REVOKED: 2, MOVED: 3 };
+export const PERMIT_STATUS_ACTIVE = UInt32.from(0);
+export const PERMIT_STATUS_SUSPENDED = UInt32.from(1);
+export const PERMIT_STATUS_REVOKED = UInt32.from(2);
+export const PERMIT_STATUS_MOVED = UInt32.from(3);
+/** Expiry value meaning "does not expire" (only if the policy allows it). */
+export const NO_EXPIRY_SLOT = UInt32.MAXINT();
+// `const X: any = Struct(...)` — same pattern as licenseLeaf.ts: the inferred
+// Struct class type references o1js internals outside this package's rootDir.
+export const PermitLeaf = Struct({
+    subject: Field,
+    holderKey: PublicKey,
+    scope: Field,
+    validFrom: UInt32,
+    expirySlot: UInt32,
+    status: UInt32,
+    seq: UInt32,
+    docHash: Field,
+});
+/** Hash stored in the permits MerkleMap. An empty map slot is Field(0). */
+export function permitLeafHash(leaf) {
+    return Poseidon.hash([PERMIT_TAGS.LEAF, ...PermitLeaf.toFields(leaf)]);
+}
+/** Tree key of an operator: hides the key behind a salt. */
+export function permitSubject(holderKey, salt) {
+    return Poseidon.hash([PERMIT_TAGS.SUBJECT, ...holderKey.toFields(), salt]);
+}
+/** Leaf value for a subject that has never held a permit. */
+export function emptyPermitLeaf(subject) {
+    return new PermitLeaf({
+        subject,
+        holderKey: PublicKey.empty(),
+        scope: Field(0),
+        validFrom: UInt32.zero,
+        expirySlot: UInt32.zero,
+        status: PERMIT_STATUS_ACTIVE,
+        seq: UInt32.zero,
+        docHash: Field(0),
+    });
+}
+// ------------------------------------------------------------
+// Packed fees and policy
+// ------------------------------------------------------------
+const TWO_64 = 1n << 64n;
+/** grantFee | renewalFee << 64 | minFee << 128 (nanomina). */
+export function packFees(f) {
+    return f.grantFee.value
+        .add(f.renewalFee.value.mul(Field(TWO_64)))
+        .add(f.minFee.value.mul(Field(TWO_64 * TWO_64)));
+}
+/** Inverse of packFees; range-checks every part (safe in-circuit). */
+export function unpackFees(packed) {
+    const bits = packed.toBits(192);
+    return {
+        grantFee: UInt64.Unsafe.fromField(Field.fromBits(bits.slice(0, 64))),
+        renewalFee: UInt64.Unsafe.fromField(Field.fromBits(bits.slice(64, 128))),
+        minFee: UInt64.Unsafe.fromField(Field.fromBits(bits.slice(128, 192))),
+    };
+}
+/** Default minimum permit fee: 10 MINA. Configurable per registry at initialize. */
+export const DEFAULT_MIN_PERMIT_FEE = UInt64.from(10000000000n);
+/** Platform share of a fee: 2%, rounded down (rounding favours the authority). */
+export const PERMIT_PLATFORM_FEE_BASIS = UInt64.from(50);
+export function platformShare(fee) {
+    return fee.div(PERMIT_PLATFORM_FEE_BASIS);
+}
+/** gracePeriod | maxTerm << 32 | singleKeySuspend << 64 | holderSigRequired << 65 */
+export function packPolicy(p) {
+    return p.gracePeriod.value
+        .add(p.maxTerm.value.mul(Field(1n << 32n)))
+        .add(p.singleKeySuspend.toField().mul(Field(1n << 64n)))
+        .add(p.holderSigRequired.toField().mul(Field(1n << 65n)));
+}
+export function unpackPolicy(packed) {
+    const bits = packed.toBits(66);
+    return {
+        gracePeriod: UInt32.Unsafe.fromField(Field.fromBits(bits.slice(0, 32))),
+        maxTerm: UInt32.Unsafe.fromField(Field.fromBits(bits.slice(32, 64))),
+        singleKeySuspend: bits[64],
+        holderSigRequired: bits[65],
+    };
+}
+/** processingFee | minProcessingFee << 64 | decisionWindow << 128 */
+export function packApplicationTerms(t) {
+    return t.processingFee.value
+        .add(t.minProcessingFee.value.mul(Field(TWO_64)))
+        .add(t.decisionWindow.value.mul(Field(TWO_64 * TWO_64)));
+}
+export function unpackApplicationTerms(packed) {
+    const bits = packed.toBits(160);
+    return {
+        processingFee: UInt64.Unsafe.fromField(Field.fromBits(bits.slice(0, 64))),
+        minProcessingFee: UInt64.Unsafe.fromField(Field.fromBits(bits.slice(64, 128))),
+        decisionWindow: UInt32.Unsafe.fromField(Field.fromBits(bits.slice(128, 160))),
+    };
+}
+/** Default minimum processing fee: 1 MINA. Configurable per registry at initialize. */
+export const DEFAULT_MIN_PROCESSING_FEE = UInt64.from(1000000000n);
+/** Default decision window: 14 days of 90 s slots (as licensing's refund window). */
+export const DEFAULT_DECISION_WINDOW = UInt32.from(13_440);
+/** Longest decision window an authority may set: one year. */
+export const MAX_DECISION_WINDOW = UInt32.from(350_640);
+/**
+ * An application with its fee in escrow. Stored as `applicationHash` in the
+ * registry's escrow MerkleMap under `subject`; emitted in full when filed.
+ * `baseSeq` is the permit leaf's `seq` it applies to (0 = new permit);
+ * `fee` is the whole amount escrowed, `processingFee` the part kept on
+ * rejection or withdrawal; both are locked at filing. `filing` is the
+ * registry's filing number (its filingCount when filed), so two filings
+ * never share a hash and a signature settling one can't settle another.
+ */
+export const Application = Struct({
+    subject: Field,
+    holderKey: PublicKey,
+    payer: PublicKey,
+    baseSeq: UInt32,
+    scope: Field,
+    validFrom: UInt32,
+    expirySlot: UInt32,
+    docHash: Field,
+    fee: UInt64,
+    processingFee: UInt64,
+    deadline: UInt32,
+    filing: UInt32,
+});
+export function applicationHash(app) {
+    return Poseidon.hash([PERMIT_TAGS.APPLICATION, ...Application.toFields(app)]);
+}
+/**
+ * What the holder agrees to when applying: everything in the application
+ * except the payer (the transaction sender), the deadline (set by the
+ * contract from the filing slot) and the filing number (the registry's next).
+ */
+export function applicationTermsHash(app) {
+    return Poseidon.hash([
+        PERMIT_TAGS.APPLICATION, app.subject, ...app.holderKey.toFields(), app.baseSeq.value, app.scope,
+        app.validFrom.value, app.expirySlot.value, app.docHash, app.fee.value, app.processingFee.value,
+    ]);
+}
+/** The permit leaf an approved application becomes. */
+export function leafFromApplication(app) {
+    return new PermitLeaf({
+        subject: app.subject,
+        holderKey: app.holderKey,
+        scope: app.scope,
+        validFrom: app.validFrom,
+        expirySlot: app.expirySlot,
+        status: PERMIT_STATUS_ACTIVE,
+        seq: app.baseSeq.add(1),
+        docHash: app.docHash,
+    });
+}
+/** Outcome codes in `applicationSettled` events. */
+export const APPLICATION_OUTCOME = { APPROVED: 1, REJECTED: 2, WITHDRAWN: 3, RECLAIMED: 4, CANCELLED: 5 };
+// ------------------------------------------------------------
+// Authority key set
+// ------------------------------------------------------------
+export const MAX_AUTHORITY_KEYS = 3;
+// Fixed-length key set. `count` keys are in use (slots 0..count-1); unused
+// slots hold PublicKey.empty() and never count toward a threshold, whatever
+// signature is supplied for them.
+export const AuthorityKeys = Struct({
+    keys: Provable.Array(PublicKey, MAX_AUTHORITY_KEYS),
+    count: UInt32,
+    threshold: UInt32,
+});
+export function authorityKeys(keys, threshold) {
+    if (keys.length < 1 || keys.length > MAX_AUTHORITY_KEYS)
+        throw new Error(`1..${MAX_AUTHORITY_KEYS} authority keys`);
+    if (!Number.isInteger(threshold) || threshold < 1 || threshold > keys.length)
+        throw new Error('threshold must be 1..number of keys');
+    const b58 = keys.map(k => k.toBase58());
+    if (new Set(b58).size !== b58.length)
+        throw new Error('authority keys must be distinct');
+    const padded = [...keys];
+    while (padded.length < MAX_AUTHORITY_KEYS)
+        padded.push(PublicKey.empty());
+    return new AuthorityKeys({ keys: padded, count: UInt32.from(keys.length), threshold: UInt32.from(threshold) });
+}
+// One optional signature per key slot. `present[i]` false → slot i ignored.
+export const AuthoritySigs = Struct({
+    sigs: Provable.Array(Signature, MAX_AUTHORITY_KEYS),
+    present: Provable.Array(Bool, MAX_AUTHORITY_KEYS),
+});
+// Placeholder for absent slots: a well-formed signature over an unrelated
+// one-field message. Absent slots are never counted anyway.
+let placeholder = null;
+function placeholderSignature() {
+    placeholder ??= Signature.create(PrivateKey.fromBigInt(1n), [Field(0)]);
+    return placeholder;
+}
+/** Builds the signature bundle from `{ slotIndex: signature }` (base58 or Signature). */
+export function authoritySigs(bySlot) {
+    const sigs = [];
+    const present = [];
+    for (let i = 0; i < MAX_AUTHORITY_KEYS; i++) {
+        const s = bySlot[i];
+        if (s === undefined) {
+            sigs.push(placeholderSignature());
+            present.push(Bool(false));
+            continue;
+        }
+        sigs.push(typeof s === 'string' ? Signature.fromBase58(s) : s);
+        present.push(Bool(true));
+    }
+    return new AuthoritySigs({ sigs, present });
+}
+/**
+ * Number of valid signatures over `message` from distinct, in-use key
+ * slots. Works in-circuit. Absent or unused slots count zero; a present
+ * signature that doesn't verify also counts zero.
+ */
+export function countAuthoritySignatures(keys, sigs, message) {
+    let n = UInt32.zero;
+    for (let i = 0; i < MAX_AUTHORITY_KEYS; i++) {
+        const inUse = UInt32.from(i).lessThan(keys.count);
+        // An unused slot's key is PublicKey.empty(); verify against a real key
+        // instead so the check stays well-formed. The result is masked by inUse.
+        const key = Provable.if(inUse, PublicKey, keys.keys[i], keys.keys[0]);
+        const ok = sigs.sigs[i].verify(key, message);
+        const counted = inUse.and(sigs.present[i]).and(ok);
+        n = n.add(Provable.if(counted, UInt32.from(1), UInt32.zero));
+    }
+    return n;
+}
+/**
+ * In-circuit validity of a key set: 1 ≤ count ≤ MAX, 1 ≤ threshold ≤ count,
+ * in-use keys pairwise distinct, unused slots empty.
+ */
+export function assertValidAuthorityKeys(keys) {
+    keys.count.assertGreaterThanOrEqual(UInt32.from(1));
+    keys.count.assertLessThanOrEqual(UInt32.from(MAX_AUTHORITY_KEYS));
+    keys.threshold.assertGreaterThanOrEqual(UInt32.from(1));
+    keys.threshold.assertLessThanOrEqual(keys.count);
+    for (let i = 0; i < MAX_AUTHORITY_KEYS; i++) {
+        const inUse = UInt32.from(i).lessThan(keys.count);
+        // Unused slots must be empty so the commitment is canonical.
+        inUse.or(keys.keys[i].equals(PublicKey.empty())).assertTrue();
+        // In-use keys are real keys, and distinct from every other in-use key.
+        inUse.not().or(keys.keys[i].equals(PublicKey.empty()).not()).assertTrue();
+        for (let j = i + 1; j < MAX_AUTHORITY_KEYS; j++) {
+            const bothInUse = UInt32.from(j).lessThan(keys.count);
+            bothInUse.not().or(keys.keys[i].equals(keys.keys[j]).not()).assertTrue();
+        }
+    }
+}
+/** Commitment stored on-chain as `authorityKeysHash`. */
+export function authorityKeysHash(k) {
+    return Poseidon.hash([PERMIT_TAGS.KEYS, ...AuthorityKeys.toFields(k)]);
+}
+// ------------------------------------------------------------
+// Messages
+// ------------------------------------------------------------
+/**
+ * Message an authority key signs:
+ *   [tag, network, registry.x, registry.isOdd, epoch, nonce, payloadHash]
+ * `nonce` is the leaf's `seq` for per-permit actions and the registry's
+ * `actionNonce` for registry-wide ones (setFees, rotate, init = 0).
+ */
+export function authorityMessage(tag, network, registry, epoch, nonce, payload) {
+    return [tag, network, ...registry.toFields(), epoch.value, nonce.value, Poseidon.hash(payload)];
+}
+export function initMessage(a) {
+    // On a redeploy, the registry this one continues and the frozen permits
+    // tree it starts with (the chain checks both); PublicKey.empty() and the
+    // empty root for a first generation.
+    return authorityMessage(PERMIT_TAGS.INIT, a.network, a.registry, UInt32.zero, UInt32.zero, [a.keysHash, a.policyPacked, a.feesPacked, a.appTermsPacked, a.metadataHash, ...a.payout.toFields(), a.forkActivationSlot.value, ...a.predecessor.toFields(), a.initialPermitsRoot]);
+}
+/** Authority approval of a leaf change (issue, renew, scope change). Nonce = oldLeaf.seq. */
+export function grantMessage(a) {
+    return authorityMessage(PERMIT_TAGS.GRANT, a.network, a.registry, a.epoch, a.oldLeaf.seq, [permitLeafHash(a.oldLeaf), permitLeafHash(a.newLeaf)]);
+}
+/** The operator's acceptance of a grant, including the fee it pays. */
+export function acceptMessage(a) {
+    return [PERMIT_TAGS.ACCEPT, a.network, ...a.registry.toFields(), permitLeafHash(a.newLeaf), a.fee.value];
+}
+const STATUS_TAG = {
+    suspend: PERMIT_TAGS.SUSPEND, reinstate: PERMIT_TAGS.REINSTATE, revoke: PERMIT_TAGS.REVOKE,
+};
+/** Authority status change of a permit. Nonce = leaf.seq. */
+export function statusMessage(action, a) {
+    return authorityMessage(STATUS_TAG[action], a.network, a.registry, a.epoch, a.leaf.seq, [permitLeafHash(a.leaf), a.reasonCode]);
+}
+/** The holder giving up their permit. */
+export function surrenderMessage(a) {
+    return [PERMIT_TAGS.SURRENDER, a.network, ...a.registry.toFields(), permitLeafHash(a.leaf), a.leaf.seq.value];
+}
+/** New fees and application terms (processing fee, decision window). */
+export function setFeesMessage(a) {
+    return authorityMessage(PERMIT_TAGS.SET_FEES, a.network, a.registry, a.epoch, a.actionNonce, [a.newFeesPacked, a.newAppTermsPacked]);
+}
+/**
+ * The authority retires the registry, freezing its permits at `permitsRoot`
+ * (the root the redeployed registry's ancestorsRoot commits to). Bound to the
+ * epoch and action nonce like the other registry-wide actions.
+ */
+export function retireMessage(a) {
+    return authorityMessage(PERMIT_TAGS.RETIRE, a.network, a.registry, a.epoch, a.actionNonce, [a.permitsRoot, ...a.successor.toFields()]);
+}
+/**
+ * The platform's retirement of a registry (`retireByPlatform`): what the
+ * platform key signs, the fields of retireMessage under its own tag (so
+ * neither signature can stand in for the other) plus `force`: retire with
+ * application fees still in escrow, which then stay on the retired registry.
+ */
+export function platformRetireMessage(a) {
+    return authorityMessage(PERMIT_TAGS.PLATFORM_RETIRE, a.network, a.registry, a.epoch, a.actionNonce, [a.permitsRoot, ...a.successor.toFields(), a.force.toField()]);
+}
+/**
+ * authorityKeysHash of a retired registry: no key set hashes to it, so no
+ * authority action can run again, and filing and surrender check
+ * it. (0 means not yet initialized.)
+ */
+export const RETIRED_KEYS_HASH = Field(1);
+export function rotateMessage(a) {
+    return authorityMessage(PERMIT_TAGS.ROTATE, a.network, a.registry, a.epoch, a.actionNonce, [a.newKeysHash]);
+}
+// ------------------------------------------------------------
+// Application escrow messages
+// ------------------------------------------------------------
+/** The holder's application: the terms and the fee they put in escrow. */
+export function applyMessage(a) {
+    return [PERMIT_TAGS.APPLY, a.network, ...a.registry.toFields(), applicationTermsHash(a.application)];
+}
+/** Authority approval of an application exactly as filed. Nonce = baseSeq. */
+export function approveMessage(a) {
+    return authorityMessage(PERMIT_TAGS.APPROVE, a.network, a.registry, a.epoch, a.application.baseSeq, [applicationHash(a.application)]);
+}
+/** Authority rejection of an application. Nonce = baseSeq. */
+export function rejectMessage(a) {
+    return authorityMessage(PERMIT_TAGS.REJECT, a.network, a.registry, a.epoch, a.application.baseSeq, [applicationHash(a.application), a.reasonCode]);
+}
+/**
+ * The platform cancelling the open applications of a registry before it
+ * retires it (`cancelApplication`, e.g. ahead of a hard fork): every
+ * application filed before filing number `cutoff` (the registry's filing
+ * count when signed) may be cancelled, its whole fee back to its payer. One
+ * signature covers them all; anyone may send the cancellations. Later
+ * filings it never covers.
+ */
+export function cancelMessage(a) {
+    return [PERMIT_TAGS.PLATFORM_CANCEL, a.network, ...a.registry.toFields(), a.cutoff.value];
+}
+/**
+ * A new payout address for the registry (threshold, registry-wide nonce):
+ * it takes effect PAYOUT_DELAY_SLOTS_N after it is proposed, unless the keys
+ * cancel it (payoutCancelMessage) meanwhile.
+ */
+export function payoutMessage(a) {
+    return authorityMessage(PERMIT_TAGS.PAYOUT, a.network, a.registry, a.epoch, a.actionNonce, a.payout.toFields());
+}
+export function payoutCancelMessage(a) {
+    return authorityMessage(PERMIT_TAGS.PAYOUT_CANCEL, a.network, a.registry, a.epoch, a.actionNonce, []);
+}
+/**
+ * A permit moving to a new holder key (rekeyPermit), with the same terms,
+ * under the new subject permitSubject(newHolderKey, newSalt): signed by the
+ * current holder key and the new one, over the permit as it is now. The old
+ * leaf is closed (MOVED), so the signatures can't be used twice.
+ */
+export function rekeyMessage(a) {
+    return [PERMIT_TAGS.REKEY, a.network, ...a.registry.toFields(), permitLeafHash(a.leaf), a.newSubject, ...a.newHolderKey.toFields()];
+}
+/** The holder withdrawing their application before a decision. */
+export function withdrawMessage(a) {
+    return [PERMIT_TAGS.WITHDRAW, a.network, ...a.registry.toFields(), applicationHash(a.application)];
+}
+/** What both wallets sign (signMessage) to move an authority account to a new wallet. */
+export function authorityMoveText(from, to) {
+    return [
+        'zkPermits: move my authority account to a new wallet',
+        `from: ${from}`,
+        `to: ${to}`,
+        'Both wallets sign this. The account and its registries move to the new wallet; registry keys change by a rotation.',
+    ].join('\n');
+}
+/** Decimal strings for a wallet's `signFields({ message })`. */
+export function toSignableFields(message) {
+    return message.map(f => f.toString());
+}
+//# sourceMappingURL=permitMessages.js.map

package/build/permitMessages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permitMessages.js","sourceRoot":"","sources":["../src/permitMessages.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEjH,+DAA+D;AAC/D,oBAAoB;AACpB,+DAA+D;AAE/D,iEAAiE;AACjE,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACnD,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,WAAW,GAKnB;IACH,IAAI,EAAQ,UAAU,CAAC,mBAAmB,CAAC;IAC3C,KAAK,EAAO,UAAU,CAAC,oBAAoB,CAAC;IAC5C,MAAM,EAAM,UAAU,CAAC,qBAAqB,CAAC;IAC7C,OAAO,EAAK,UAAU,CAAC,sBAAsB,CAAC;IAC9C,SAAS,EAAG,UAAU,CAAC,wBAAwB,CAAC;IAChD,MAAM,EAAM,UAAU,CAAC,qBAAqB,CAAC;IAC7C,SAAS,EAAG,UAAU,CAAC,wBAAwB,CAAC;IAChD,QAAQ,EAAI,UAAU,CAAC,sBAAsB,CAAC;IAC9C,MAAM,EAAM,UAAU,CAAC,qBAAqB,CAAC;IAC7C,IAAI,EAAQ,UAAU,CAAC,mBAAmB,CAAC;IAC3C,OAAO,EAAK,UAAU,CAAC,sBAAsB,CAAC;IAC9C,IAAI,EAAQ,UAAU,CAAC,mBAAmB,CAAC;IAC3C,6CAA6C;IAC7C,WAAW,EAAE,UAAU,CAAC,0BAA0B,CAAC;IACnD,KAAK,EAAQ,UAAU,CAAC,oBAAoB,CAAC;IAC7C,OAAO,EAAM,UAAU,CAAC,sBAAsB,CAAC;IAC/C,MAAM,EAAO,UAAU,CAAC,qBAAqB,CAAC;IAC9C,QAAQ,EAAK,UAAU,CAAC,uBAAuB,CAAC;IAChD,uEAAuE;IACvE,MAAM,EAAO,UAAU,CAAC,qBAAqB,CAAC;IAC9C,gEAAgE;IAChE,eAAe,EAAE,UAAU,CAAC,6BAA6B,CAAC;IAC1D,8EAA8E;IAC9E,eAAe,EAAE,UAAU,CAAC,6BAA6B,CAAC;IAC1D,qGAAqG;IACrG,MAAM,EAAS,UAAU,CAAC,qBAAqB,CAAC;IAChD,aAAa,EAAE,UAAU,CAAC,2BAA2B,CAAC;IACtD,KAAK,EAAU,UAAU,CAAC,oBAAoB,CAAC;CAChD,CAAC;AAEF,oDAAoD;AACpD,MAAM,CAAC,MAAM,cAAc,GAAgD,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAGnH,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,MAAM,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,+DAA+D;AAC/D,cAAc;AACd,+DAA+D;AAE/D,2GAA2G;AAC3G,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAW,CAAC;AACxF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAElD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;AAE9C,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,UAAU,GAAQ,MAAM,CAAC;IACpC,OAAO,EAAK,KAAK;IACjB,SAAS,EAAG,SAAS;IACrB,KAAK,EAAO,KAAK;IACjB,SAAS,EAAG,MAAM;IAClB,UAAU,EAAE,MAAM;IAClB,MAAM,EAAM,MAAM;IAClB,GAAG,EAAS,MAAM;IAClB,OAAO,EAAK,KAAK;CAClB,CAAC,CAAC;AAGH,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,aAAa,CAAC,SAAoB,EAAE,IAAW;IAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,OAAc;IAC5C,OAAO,IAAI,UAAU,CAAC;QACpB,OAAO;QACP,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE;QAC5B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACf,SAAS,EAAE,MAAM,CAAC,IAAI;QACtB,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,MAAM,EAAE,oBAAoB;QAC5B,GAAG,EAAE,MAAM,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;KAClB,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,yBAAyB;AACzB,+DAA+D;AAE/D,MAAM,MAAM,GAAG,EAAE,IAAI,GAAG,CAAC;AAIzB,8DAA8D;AAC9D,MAAM,UAAU,QAAQ,CAAC,CAAa;IACpC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK;SACpB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,MAAa;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO;QACL,QAAQ,EAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACtE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACxE,MAAM,EAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,YAAe,CAAC,CAAC;AAEnE,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzD,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAC5C,CAAC;AASD,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,CAAe;IACxC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK;SACvB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;SACvD,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAa;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,OAAO;QACL,WAAW,EAAQ,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,EAAY,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9E,gBAAgB,EAAG,IAAI,CAAC,EAAE,CAAC;QAC3B,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC;KAC5B,CAAC;AACJ,CAAC;AAYD,qEAAqE;AACrE,MAAM,UAAU,oBAAoB,CAAC,CAAmB;IACtD,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK;SACzB,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAa;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO;QACL,aAAa,EAAK,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5E,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9E,cAAc,EAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,WAAc,CAAC,CAAC;AACtE,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAQ,MAAM,CAAC;IACrC,OAAO,EAAQ,KAAK;IACpB,SAAS,EAAM,SAAS;IACxB,KAAK,EAAU,SAAS;IACxB,OAAO,EAAQ,MAAM;IACrB,KAAK,EAAU,KAAK;IACpB,SAAS,EAAM,MAAM;IACrB,UAAU,EAAK,MAAM;IACrB,OAAO,EAAQ,KAAK;IACpB,GAAG,EAAY,MAAM;IACrB,aAAa,EAAE,MAAM;IACrB,QAAQ,EAAO,MAAM;IACrB,MAAM,EAAS,MAAM;CACtB,CAAC,CAAC;AAGH,MAAM,UAAU,eAAe,CAAC,GAAgB;IAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAgB;IACnD,OAAO,QAAQ,CAAC,IAAI,CAAC;QACnB,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK;QAC/F,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC,KAAK;KAC/F,CAAC,CAAC;AACL,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IAClD,OAAO,IAAI,UAAU,CAAC;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE,oBAAoB;QAC5B,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAW,CAAC;AAEnH,+DAA+D;AAC/D,oBAAoB;AACpB,+DAA+D;AAE/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,2EAA2E;AAC3E,4EAA4E;AAC5E,kCAAkC;AAClC,MAAM,CAAC,MAAM,aAAa,GAAQ,MAAM,CAAC;IACvC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACnD,KAAK,EAAE,MAAM;IACb,SAAS,EAAE,MAAM;CAClB,CAAC,CAAC;AAGH,MAAM,UAAU,aAAa,CAAC,IAAiB,EAAE,SAAiB;IAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,kBAAkB,iBAAiB,CAAC,CAAC;IACpH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACrI,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,MAAM,GAAG,kBAAkB;QAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1E,OAAO,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AACjH,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAQ,MAAM,CAAC;IACvC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACnD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC;CAClD,CAAC,CAAC;AAGH,0EAA0E;AAC1E,4DAA4D;AAC5D,IAAI,WAAW,GAAqB,IAAI,CAAC;AACzC,SAAS,oBAAoB;IAC3B,WAAW,KAAK,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,MAA0C;IACtE,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAW,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAChG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAmB,EAAE,IAAmB,EAAE,OAAgB;IACjG,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAmB;IAC1D,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,6DAA6D;QAC7D,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC9D,uEAAuE;QACvE,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtD,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,CAAgB;IAChD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,+DAA+D;AAC/D,WAAW;AACX,+DAA+D;AAE/D;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAU,EAAE,OAAc,EAAE,QAAmB,EAAE,KAAa,EAAE,KAAa,EAAE,OAAgB;IAE/F,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAI3B;IACC,wEAAwE;IACxE,yEAAyE;IACzE,qCAAqC;IACrC,OAAO,gBAAgB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EACvF,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACzL,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,CAE5B;IACC,OAAO,gBAAgB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EACtF,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,CAA4E;IACxG,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3G,CAAC;AAGD,MAAM,UAAU,GAAgC;IAC9C,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM;CAC3F,CAAC;AAEF,6DAA6D;AAC7D,MAAM,UAAU,aAAa,CAAC,MAAoB,EAAE,CAEnD;IACC,OAAO,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EACpF,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,gBAAgB,CAAC,CAA4D;IAC3F,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAChH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,CAE9B;IACC,OAAO,gBAAgB,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EACzF,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAI7B;IACC,OAAO,gBAAgB,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;AACzI,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAErC;IACC,OAAO,gBAAgB,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACrK,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAU,KAAK,CAAC,CAAC,CAAC,CAAC;AAEjD,MAAM,UAAU,aAAa,CAAC,CAE7B;IACC,OAAO,gBAAgB,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED,+DAA+D;AAC/D,8BAA8B;AAC9B,+DAA+D;AAE/D,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,CAAoE;IAC/F,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,CAAmF;IAChH,OAAO,gBAAgB,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,EAChG,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,CAE7B;IACC,OAAO,gBAAgB,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,EAC/F,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,CAA0D;IACtF,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAiG;IAC7H,OAAO,gBAAgB,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;AAClH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAA8E;IAChH,OAAO,gBAAgB,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACxG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,CAAwG;IACnI,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;AACtI,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAAC,CAAoE;IAClG,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,EAAU;IACxD,OAAO;QACL,sDAAsD;QACtD,SAAS,IAAI,EAAE;QACf,OAAO,EAAE,EAAE;QACX,oHAAoH;KACrH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AACxC,CAAC"}

package/build/permitProof.d.ts

@@ -0,0 +1,108 @@
+/**
+ * permitProof.ts — `zklicensing/permits/proof`
+ *
+ * Zero-knowledge proof that the prover holds an active permit in a registry
+ * (PERMITS_PLAN.md §7.2), without revealing which permit or which key:
+ *
+ *   public:  registry, root, slot, requiredScope, context
+ *   output:  nullifier = Poseidon(holder secret, context)
+ *   private: the permit leaf, its Merkle witness, the holder secret, and the
+ *            holder's signature over (registry, root, context)
+ *
+ * The verifier checks the proof, that `root` is a recent root of the
+ * registry (from a Mina node, or the keeper's /roots), that `slot` is close
+ * to now, and — if it wants one use per holder per context — that the
+ * nullifier is new. Proving runs on the holder's device: it needs the
+ * holder's signature and secret, which never leave it.
+ *
+ * The holder secret: permit subjects are public (each permit is published
+ * with its subject), so a nullifier computed from the subject could be
+ * recomputed by anyone for every permit and matched. The nullifier is
+ * computed from a secret only the holder's wallet can produce instead: the
+ * hash of its text signature over (registry, network, a counter), which is
+ * deterministic, so the same wallet re-derives it anywhere from the chain
+ * alone (holderSecret.ts). The permit's
+ * salt is the hash of that secret, so the keeper and the authority, who see
+ * the salt, still cannot compute nullifiers; and one secret per permit keeps
+ * one nullifier per permit and context.
+ */
+import { Field, PublicKey } from 'o1js';
+import { PermitLeaf } from './permitMessages.js';
+/** Tag for the holder's proof signature (distinct from every registry message). */
+export declare const PERMIT_PROOF_TAG: Field;
+export declare const PermitProofInput: any;
+export type PermitProofInput = any;
+/** The message the holder signs to prove control of the permit's key. */
+export declare function holderProofMessage(registry: PublicKey, root: Field, context: Field): Field[];
+/** Nullifier: stable per (permit, context), unlinkable across contexts; needs the holder secret. */
+export declare function permitNullifier(holderSecret: Field, context: Field): Field;
+export { HOLDER_SECRET_TAG, HOLDER_SALT_TAG, holderSecretText, holderSecretFromSignature, saltFromHolderSecret, deriveHolderSecret, findHolderSecret, holderSecretMatches, MAX_HOLDER_SECRETS, } from './holderSecret.js';
+/** Tag for verifier-bound contexts (distinct from PERMIT_PROOF_TAG). */
+export declare const VERIFIER_CONTEXT_TAG: Field;
+/**
+ * The canonical form of a verifier identity: a URL becomes its origin
+ * (scheme, lower-case host, non-default port; path and query dropped), so
+ * `https://Shop.Example/verify?x=1` and `https://shop.example` are the same
+ * verifier. Anything else is a service name, trimmed and lower-cased with
+ * runs of whitespace collapsed.
+ */
+export declare function normalizeVerifier(verifier: string): string;
+/** A fresh 128-bit nonce for a verifier to hand to a holder. */
+export declare function randomNonce(): bigint;
+/**
+ * The proof context for `verifier` (see normalizeVerifier) and its `nonce`:
+ * Poseidon(VERIFIER_CONTEXT_TAG, byteLength, identity in 31-byte chunks, nonce).
+ * Holder and verifier compute it the same way.
+ */
+export declare function verifierContext(verifier: string, nonce: bigint | string): bigint;
+export declare const PermitProof: any;
+export type HolderProofRequest = {
+    registry: string;
+    /** Root the witness is for (the keeper's GET …/permits/:subject returns both). */
+    root: string;
+    witness: {
+        isLefts: boolean[];
+        siblings: string[];
+    };
+    leaf: PermitLeaf;
+    /** The holder secret (deriveHolderSecret). Never leaves the holder's device. */
+    holderSecret: string;
+    slot: number;
+    requiredScope: bigint;
+    context: bigint;
+    /** Signature over holderProofMessage(registry, root, context) by the holder key (wallet signFields). */
+    holderSignature: string;
+};
+/** Holder side: compiles (once) and proves. Returns the proof as JSON. */
+export declare function proveHolder(r: HolderProofRequest): Promise<{
+    proof: unknown;
+    nullifier: string;
+}>;
+export type HolderProofCheck = {
+    registry: string;
+    /** Roots accepted as current (e.g. from a Mina node, or the keeper's recent /roots). */
+    acceptedRoots: string[];
+    currentSlot: number;
+    /** How far the proof's slot may be from `currentSlot`. Default 10 slots. */
+    maxSlotSkew?: number;
+    requiredScope?: bigint;
+} & (
+/** Your identity as the holder saw it and the nonce you issued: the expected context is verifierContext(verifier, nonce). */
+{
+    verifier: string;
+    nonce: bigint | string;
+    context?: never;
+}
+/** A raw expected context, for schemes that derive it otherwise. */
+ | {
+    context: bigint;
+    verifier?: never;
+    nonce?: never;
+});
+/** Verifier side: checks the proof and its public inputs. Returns the nullifier. */
+export declare function verifyHolderProof(proofJson: unknown, check: HolderProofCheck): Promise<{
+    valid: boolean;
+    nullifier: string | null;
+    reason: string | null;
+}>;
+//# sourceMappingURL=permitProof.d.ts.map

package/build/permitProof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permitProof.d.ts","sourceRoot":"","sources":["../src/permitProof.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,KAAK,EAA8B,SAAS,EAAwC,MAAM,MAAM,CAAC;AAC1G,OAAO,EACL,UAAU,EACX,MAAM,qBAAqB,CAAC;AAG7B,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,EAAE,KAAoG,CAAC;AAEpI,eAAO,MAAM,gBAAgB,EAAE,GAM7B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAEnC,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,GAAG,KAAK,EAAE,CAE5F;AAED,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,GAAG,KAAK,CAE1E;AAID,OAAO,EACL,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,kBAAkB,EACzH,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,GAC1D,MAAM,mBAAmB,CAAC;AAa3B,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,EAAE,KAAuG,CAAC;AAE3I;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAe1D;AAED,gEAAgE;AAChE,wBAAgB,WAAW,IAAI,MAAM,CAIpC;AAQD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAOhF;AASD,eAAO,MAAM,WAAW,EAAE,GAqBxB,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACpD,IAAI,EAAE,UAAU,CAAC;IACjB,gFAAgF;IAChF,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,wGAAwG;IACxG,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,0EAA0E;AAC1E,wBAAsB,WAAW,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAavG;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG;AACF,6HAA6H;AAC3H;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,KAAK,CAAA;CAAE;AAC/D,oEAAoE;GAClE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CACvD,CAAC;AAEF,oFAAoF;AACpF,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAoBjK"}