@acpantenna/relay-protocol 0.0.0-stage → 0.2.0

package/dist/noise.js

@@ -0,0 +1,490 @@
+/**
+ * `Noise_NKpsk0_25519_ChaChaPoly_BLAKE2s` for pairing and
+ * `Noise_KK_25519_ChaChaPoly_BLAKE2s` for reconnecting, following the Noise
+ * Protocol Framework, revision 34 (https://noiseprotocol.org/noise.html): the
+ * CipherState, SymmetricState and HandshakeState objects of §5, with the
+ * `psk` modifier of §9 and `Rekey()` of §11.3.
+ *
+ * NKpsk0:
+ *
+ *     <- s
+ *     ...
+ *     -> psk, e, es
+ *     <- e, ee
+ *
+ * KK:
+ *
+ *     -> s
+ *     <- s
+ *     ...
+ *     -> e, es, ss
+ *     <- e, ee, se
+ */
+import { chacha20poly1305 } from "@noble/ciphers/chacha.js";
+import { x25519 } from "@noble/curves/ed25519.js";
+import { blake2s } from "@noble/hashes/blake2.js";
+import { hmac } from "@noble/hashes/hmac.js";
+import { concatBytes, randomBytes, utf8Encode } from "./bytes.js";
+export const PROTOCOL_NAME = "Noise_NKpsk0_25519_ChaChaPoly_BLAKE2s";
+export const KK_PROTOCOL_NAME = "Noise_KK_25519_ChaChaPoly_BLAKE2s";
+export const DHLEN = 32;
+export const HASHLEN = 32;
+export const KEYLEN = 32;
+export const TAGLEN = 16;
+/** The largest Noise message, in bytes (§3). */
+export const MAX_MESSAGE_LENGTH = 65535;
+/** A decryption failed, or a message could not be processed. Always fatal. */
+export class NoiseError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "NoiseError";
+    }
+}
+/** Makes an X25519 key pair, from `privateKey` if given. */
+export function generateKeyPair(privateKey) {
+    const secret = privateKey ?? randomBytes(DHLEN);
+    if (secret.length !== DHLEN) {
+        throw new NoiseError("An X25519 private key is 32 bytes");
+    }
+    return { privateKey: secret, publicKey: x25519.getPublicKey(secret) };
+}
+/** A {@link StaticKey} over a key pair held in memory. */
+export function staticKey(keyPair) {
+    return {
+        publicKey: keyPair.publicKey,
+        dh: async (publicKey) => dh(keyPair, publicKey),
+    };
+}
+async function staticDh(key, publicKey) {
+    let shared;
+    try {
+        shared = await key.dh(publicKey);
+    }
+    catch {
+        throw new NoiseError("Invalid X25519 public key");
+    }
+    if (shared.length !== DHLEN || shared.every((byte) => byte === 0)) {
+        throw new NoiseError("Invalid X25519 public key");
+    }
+    return shared;
+}
+function dh(keyPair, publicKey) {
+    try {
+        return x25519.getSharedSecret(keyPair.privateKey, publicKey);
+    }
+    catch {
+        // A low-order public key gives an all-zero result, which noble refuses.
+        throw new NoiseError("Invalid X25519 public key");
+    }
+}
+function hash(data) {
+    return blake2s(data);
+}
+/** HKDF from §4.3, with HMAC-BLAKE2s. */
+function hkdf(chainingKey, inputKeyMaterial, outputs) {
+    const tempKey = hmac(blake2s, chainingKey, inputKeyMaterial);
+    const output1 = hmac(blake2s, tempKey, Uint8Array.of(1));
+    const output2 = hmac(blake2s, tempKey, concatBytes(output1, Uint8Array.of(2)));
+    if (outputs === 2) {
+        return [output1, output2];
+    }
+    const output3 = hmac(blake2s, tempKey, concatBytes(output2, Uint8Array.of(3)));
+    return [output1, output2, output3];
+}
+/** ChaChaPoly's nonce: 32 bits of zeros, then the 64-bit counter, little-endian. */
+function chachaNonce(n) {
+    const nonce = new Uint8Array(12);
+    const view = new DataView(nonce.buffer);
+    view.setUint32(4, n >>> 0, true);
+    view.setUint32(8, Math.floor(n / 2 ** 32), true);
+    return nonce;
+}
+/** 2^64 − 1, the nonce `Rekey()` uses and no message may. */
+const REKEY_NONCE = Uint8Array.of(0, 0, 0, 0, 255, 255, 255, 255, 255, 255, 255, 255);
+/**
+ * A key and a nonce counter (§5.1). The counter is a JavaScript number, so it
+ * stops at 2^53 rather than 2^64 − 1; a session never gets near either.
+ */
+export class CipherState {
+    key;
+    nonce = 0;
+    constructor(key) {
+        if (key) {
+            this.initializeKey(key);
+        }
+    }
+    initializeKey(key) {
+        this.key = key;
+        this.nonce = 0;
+    }
+    hasKey() {
+        return this.key !== undefined;
+    }
+    /** How many messages this state has encrypted or decrypted. */
+    get messages() {
+        return this.nonce;
+    }
+    encryptWithAd(ad, plaintext) {
+        if (!this.key) {
+            return plaintext;
+        }
+        this.checkNonce();
+        const ciphertext = chacha20poly1305(this.key, chachaNonce(this.nonce), ad).encrypt(plaintext);
+        this.nonce++;
+        return ciphertext;
+    }
+    /** Throws a {@link NoiseError} if the tag does not verify; the nonce is then unchanged. */
+    decryptWithAd(ad, ciphertext) {
+        if (!this.key) {
+            return ciphertext;
+        }
+        this.checkNonce();
+        let plaintext;
+        try {
+            plaintext = chacha20poly1305(this.key, chachaNonce(this.nonce), ad).decrypt(ciphertext);
+        }
+        catch {
+            throw new NoiseError("Decryption failed");
+        }
+        this.nonce++;
+        return plaintext;
+    }
+    /** §11.3: replaces the key with the first 32 bytes of ENCRYPT(k, 2^64 − 1, ε, zeros). */
+    rekey() {
+        if (!this.key) {
+            throw new NoiseError("Cannot rekey a CipherState without a key");
+        }
+        this.key = chacha20poly1305(this.key, REKEY_NONCE, new Uint8Array(0))
+            .encrypt(new Uint8Array(KEYLEN))
+            .subarray(0, KEYLEN);
+    }
+    checkNonce() {
+        if (this.nonce >= Number.MAX_SAFE_INTEGER) {
+            throw new NoiseError("Nonce exhausted");
+        }
+    }
+}
+/** The chaining key, the handshake hash and a CipherState (§5.2). */
+export class SymmetricState {
+    cipher = new CipherState();
+    chainingKey;
+    h;
+    constructor(protocolName) {
+        const name = utf8Encode(protocolName);
+        if (name.length <= HASHLEN) {
+            this.h = new Uint8Array(HASHLEN);
+            this.h.set(name);
+        }
+        else {
+            this.h = hash(name);
+        }
+        this.chainingKey = this.h;
+    }
+    get handshakeHash() {
+        return this.h;
+    }
+    mixKey(inputKeyMaterial) {
+        const [chainingKey, tempKey] = hkdf(this.chainingKey, inputKeyMaterial, 2);
+        this.chainingKey = chainingKey;
+        this.cipher.initializeKey(tempKey);
+    }
+    mixHash(data) {
+        this.h = hash(concatBytes(this.h, data));
+    }
+    mixKeyAndHash(inputKeyMaterial) {
+        const [chainingKey, tempHash, tempKey] = hkdf(this.chainingKey, inputKeyMaterial, 3);
+        this.chainingKey = chainingKey;
+        this.mixHash(tempHash);
+        this.cipher.initializeKey(tempKey);
+    }
+    encryptAndHash(plaintext) {
+        const ciphertext = this.cipher.encryptWithAd(this.h, plaintext);
+        this.mixHash(ciphertext);
+        return ciphertext;
+    }
+    decryptAndHash(ciphertext) {
+        const plaintext = this.cipher.decryptWithAd(this.h, ciphertext);
+        this.mixHash(ciphertext);
+        return plaintext;
+    }
+    /** Returns the initiator's sending and receiving CipherStates, in that order. */
+    split() {
+        const [key1, key2] = hkdf(this.chainingKey, new Uint8Array(0), 2);
+        return [
+            new CipherState(key1),
+            new CipherState(key2),
+        ];
+    }
+}
+/**
+ * The NKpsk0 HandshakeState (§5.3), for one side. Call `writeMessage` and
+ * `readMessage` in turn: the initiator writes message 1 and reads message 2,
+ * the responder the other way round. After message 2 `result` is set.
+ */
+export class HandshakeState {
+    initiator;
+    symmetric = new SymmetricState(PROTOCOL_NAME);
+    psk;
+    staticKeyPair;
+    remoteStatic;
+    fixedEphemeral;
+    ephemeral;
+    remoteEphemeral;
+    step = 0;
+    result;
+    constructor(initiator, options) {
+        if (options.psk.length !== 32) {
+            throw new NoiseError("The psk is 32 bytes");
+        }
+        if (options.remoteStaticPublicKey.length !== DHLEN) {
+            throw new NoiseError("The responder's static key is 32 bytes");
+        }
+        this.initiator = initiator;
+        this.psk = options.psk;
+        this.staticKeyPair = options.staticKeyPair;
+        this.remoteStatic = options.remoteStaticPublicKey;
+        this.fixedEphemeral = options.ephemeralPrivateKey;
+        this.symmetric.mixHash(options.prologue);
+        // The pre-message `<- s`: both sides hash the responder's static key.
+        this.symmetric.mixHash(this.remoteStatic);
+    }
+    static initiator(options) {
+        return new HandshakeState(true, options);
+    }
+    static responder(options) {
+        return new HandshakeState(false, {
+            ...options,
+            remoteStaticPublicKey: options.staticKeyPair.publicKey,
+        });
+    }
+    get handshakeHash() {
+        return this.symmetric.handshakeHash;
+    }
+    /** Writes the next handshake message, carrying `payload`. */
+    writeMessage(payload = new Uint8Array(0)) {
+        if (this.step === 0 && this.initiator) {
+            // -> psk, e, es
+            this.symmetric.mixKeyAndHash(this.psk);
+            const e = this.writeEphemeral();
+            this.symmetric.mixKey(dh(this.ephemeralKeyPair(), this.remoteStatic));
+            const message = concatBytes(e, this.symmetric.encryptAndHash(payload));
+            this.step = 1;
+            return this.checkLength(message);
+        }
+        if (this.step === 1 && !this.initiator) {
+            // <- e, ee
+            const e = this.writeEphemeral();
+            this.symmetric.mixKey(dh(this.ephemeralKeyPair(), this.remoteEphemeralKey()));
+            const message = concatBytes(e, this.symmetric.encryptAndHash(payload));
+            this.finish();
+            return this.checkLength(message);
+        }
+        throw new NoiseError("Not this side's turn to write");
+    }
+    /** Reads the next handshake message and returns its payload. */
+    readMessage(message) {
+        if (message.length > MAX_MESSAGE_LENGTH) {
+            throw new NoiseError("Handshake message too long");
+        }
+        if (message.length < DHLEN + TAGLEN) {
+            throw new NoiseError("Handshake message too short");
+        }
+        const e = message.subarray(0, DHLEN);
+        const rest = message.subarray(DHLEN);
+        if (this.step === 0 && !this.initiator) {
+            // -> psk, e, es
+            this.symmetric.mixKeyAndHash(this.psk);
+            this.readEphemeral(e);
+            this.symmetric.mixKey(dh(this.staticKeys(), this.remoteEphemeralKey()));
+            const payload = this.symmetric.decryptAndHash(rest);
+            this.step = 1;
+            return payload;
+        }
+        if (this.step === 1 && this.initiator) {
+            // <- e, ee
+            this.readEphemeral(e);
+            this.symmetric.mixKey(dh(this.ephemeralKeyPair(), this.remoteEphemeralKey()));
+            const payload = this.symmetric.decryptAndHash(rest);
+            this.finish();
+            return payload;
+        }
+        throw new NoiseError("Not this side's turn to read");
+    }
+    writeEphemeral() {
+        this.ephemeral = generateKeyPair(this.fixedEphemeral);
+        this.symmetric.mixHash(this.ephemeral.publicKey);
+        // The psk modifier (§9.2): `e` also calls MixKey.
+        this.symmetric.mixKey(this.ephemeral.publicKey);
+        return this.ephemeral.publicKey;
+    }
+    readEphemeral(e) {
+        this.remoteEphemeral = e.slice();
+        this.symmetric.mixHash(this.remoteEphemeral);
+        this.symmetric.mixKey(this.remoteEphemeral);
+    }
+    ephemeralKeyPair() {
+        if (!this.ephemeral) {
+            throw new NoiseError("No ephemeral key");
+        }
+        return this.ephemeral;
+    }
+    remoteEphemeralKey() {
+        if (!this.remoteEphemeral) {
+            throw new NoiseError("No remote ephemeral key");
+        }
+        return this.remoteEphemeral;
+    }
+    staticKeys() {
+        if (!this.staticKeyPair) {
+            throw new NoiseError("No static key");
+        }
+        return this.staticKeyPair;
+    }
+    finish() {
+        const [initiatorSend, responderSend] = this.symmetric.split();
+        this.result = {
+            send: this.initiator ? initiatorSend : responderSend,
+            receive: this.initiator ? responderSend : initiatorSend,
+            handshakeHash: this.symmetric.handshakeHash,
+            remoteEphemeralPublicKey: this.remoteEphemeralKey(),
+        };
+        this.step = 2;
+    }
+    checkLength(message) {
+        if (message.length > MAX_MESSAGE_LENGTH) {
+            throw new NoiseError("Handshake message too long");
+        }
+        return message;
+    }
+}
+/**
+ * The KK HandshakeState (§5.3), for one side: both static keys are known in
+ * advance, so it needs no psk. As with {@link HandshakeState}, the initiator
+ * writes message 1 and reads message 2. Its steps are asynchronous because a
+ * {@link StaticKey}'s DH is.
+ */
+export class KKHandshakeState {
+    initiator;
+    symmetric = new SymmetricState(KK_PROTOCOL_NAME);
+    staticKey;
+    remoteStatic;
+    fixedEphemeral;
+    ephemeral;
+    remoteEphemeral;
+    step = 0;
+    result;
+    constructor(initiator, options) {
+        if (options.remoteStaticPublicKey.length !== DHLEN ||
+            options.staticKey.publicKey.length !== DHLEN) {
+            throw new NoiseError("A static key is 32 bytes");
+        }
+        this.initiator = initiator;
+        this.staticKey = options.staticKey;
+        this.remoteStatic = options.remoteStaticPublicKey;
+        this.fixedEphemeral = options.ephemeralPrivateKey;
+        this.symmetric.mixHash(options.prologue);
+        // The pre-messages `-> s` and `<- s`: the initiator's key is hashed first.
+        const [initiatorStatic, responderStatic] = initiator
+            ? [this.staticKey.publicKey, this.remoteStatic]
+            : [this.remoteStatic, this.staticKey.publicKey];
+        this.symmetric.mixHash(initiatorStatic);
+        this.symmetric.mixHash(responderStatic);
+    }
+    static initiator(options) {
+        return new KKHandshakeState(true, options);
+    }
+    static responder(options) {
+        return new KKHandshakeState(false, options);
+    }
+    get handshakeHash() {
+        return this.symmetric.handshakeHash;
+    }
+    /** Writes the next handshake message, carrying `payload`. */
+    async writeMessage(payload = new Uint8Array(0)) {
+        if (this.step === 0 && this.initiator) {
+            // -> e, es, ss
+            this.step = -1;
+            const e = this.writeEphemeral();
+            this.symmetric.mixKey(dh(this.ephemeralKeyPair(), this.remoteStatic));
+            this.symmetric.mixKey(await staticDh(this.staticKey, this.remoteStatic));
+            const message = concatBytes(e, this.symmetric.encryptAndHash(payload));
+            this.step = 1;
+            return message;
+        }
+        if (this.step === 1 && !this.initiator) {
+            // <- e, ee, se
+            const e = this.writeEphemeral();
+            this.symmetric.mixKey(dh(this.ephemeralKeyPair(), this.remoteEphemeralKey()));
+            this.symmetric.mixKey(dh(this.ephemeralKeyPair(), this.remoteStatic));
+            const message = concatBytes(e, this.symmetric.encryptAndHash(payload));
+            this.finish();
+            return message;
+        }
+        throw new NoiseError("Not this side's turn to write");
+    }
+    /** Reads the next handshake message and returns its payload. */
+    async readMessage(message) {
+        if (message.length > MAX_MESSAGE_LENGTH) {
+            throw new NoiseError("Handshake message too long");
+        }
+        if (message.length < DHLEN + TAGLEN) {
+            throw new NoiseError("Handshake message too short");
+        }
+        const e = message.subarray(0, DHLEN);
+        const rest = message.subarray(DHLEN);
+        if (this.step === 0 && !this.initiator) {
+            // -> e, es, ss
+            this.step = -1;
+            this.readEphemeral(e);
+            this.symmetric.mixKey(await staticDh(this.staticKey, this.remoteEphemeralKey()));
+            this.symmetric.mixKey(await staticDh(this.staticKey, this.remoteStatic));
+            const payload = this.symmetric.decryptAndHash(rest);
+            this.step = 1;
+            return payload;
+        }
+        if (this.step === 1 && this.initiator) {
+            // <- e, ee, se
+            this.step = -1;
+            this.readEphemeral(e);
+            this.symmetric.mixKey(dh(this.ephemeralKeyPair(), this.remoteEphemeralKey()));
+            this.symmetric.mixKey(await staticDh(this.staticKey, this.remoteEphemeralKey()));
+            const payload = this.symmetric.decryptAndHash(rest);
+            this.finish();
+            return payload;
+        }
+        throw new NoiseError("Not this side's turn to read");
+    }
+    writeEphemeral() {
+        this.ephemeral = generateKeyPair(this.fixedEphemeral);
+        // No psk, so `e` is only hashed.
+        this.symmetric.mixHash(this.ephemeral.publicKey);
+        return this.ephemeral.publicKey;
+    }
+    readEphemeral(e) {
+        this.remoteEphemeral = e.slice();
+        this.symmetric.mixHash(this.remoteEphemeral);
+    }
+    ephemeralKeyPair() {
+        if (!this.ephemeral) {
+            throw new NoiseError("No ephemeral key");
+        }
+        return this.ephemeral;
+    }
+    remoteEphemeralKey() {
+        if (!this.remoteEphemeral) {
+            throw new NoiseError("No remote ephemeral key");
+        }
+        return this.remoteEphemeral;
+    }
+    finish() {
+        const [initiatorSend, responderSend] = this.symmetric.split();
+        this.result = {
+            send: this.initiator ? initiatorSend : responderSend,
+            receive: this.initiator ? responderSend : initiatorSend,
+            handshakeHash: this.symmetric.handshakeHash,
+            remoteEphemeralPublicKey: this.remoteEphemeralKey(),
+        };
+        this.step = 2;
+    }
+}
+//# sourceMappingURL=noise.js.map

package/dist/noise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise.js","sourceRoot":"","sources":["../src/noise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAElE,MAAM,CAAC,MAAM,aAAa,GAAG,uCAAuC,CAAC;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AACpE,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;AACxB,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,CAAC;AAC1B,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,CAAC;AACzB,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,CAAC;AACzB,gDAAgD;AAChD,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAExC,8EAA8E;AAC9E,MAAM,OAAO,UAAW,SAAQ,KAAK;IACpC,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,CAAC;CACD;AAOD,4DAA4D;AAC5D,MAAM,UAAU,eAAe,CAAC,UAAuB;IACtD,MAAM,MAAM,GAAG,UAAU,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;AACvE,CAAC;AAYD,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,OAAgB;IACzC,OAAO;QACN,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;KAC/C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACtB,GAAc,EACd,SAAqB;IAErB,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,EAAE,CAAC,OAAgB,EAAE,SAAqB;IAClD,IAAI,CAAC;QACJ,OAAO,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACR,wEAAwE;QACxE,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;IACnD,CAAC;AACF,CAAC;AAED,SAAS,IAAI,CAAC,IAAgB;IAC7B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED,yCAAyC;AACzC,SAAS,IAAI,CACZ,WAAuB,EACvB,gBAA4B,EAC5B,OAAc;IAEd,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,IAAI,CACnB,OAAO,EACP,OAAO,EACP,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CACtC,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CACnB,OAAO,EACP,OAAO,EACP,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CACtC,CAAC;IACF,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,CAAS;IAC7B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,WAAW,GAAG,UAAU,CAAC,EAAE,CAChC,CAAC,EACD,CAAC,EACD,CAAC,EACD,CAAC,EACD,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,CACH,CAAC;AAEF;;;GAGG;AACH,MAAM,OAAO,WAAW;IACf,GAAG,CAAyB;IAC5B,KAAK,GAAG,CAAC,CAAC;IAElB,YAAY,GAAgB;QAC3B,IAAI,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED,aAAa,CAAC,GAAe;QAC5B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAChB,CAAC;IAED,MAAM;QACL,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;IAC/B,CAAC;IAED,+DAA+D;IAC/D,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,aAAa,CAAC,EAAc,EAAE,SAAqB;QAClD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,gBAAgB,CAClC,IAAI,CAAC,GAAG,EACR,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EACvB,EAAE,CACF,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,UAAU,CAAC;IACnB,CAAC;IAED,2FAA2F;IAC3F,aAAa,CAAC,EAAc,EAAE,UAAsB;QACnD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,UAAU,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACJ,SAAS,GAAG,gBAAgB,CAC3B,IAAI,CAAC,GAAG,EACR,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EACvB,EAAE,CACF,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,yFAAyF;IACzF,KAAK;QACJ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;aACnE,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;aAC/B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;IAEO,UAAU;QACjB,IAAI,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACzC,CAAC;IACF,CAAC;CACD;AAED,qEAAqE;AACrE,MAAM,OAAO,cAAc;IACjB,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;IAC5B,WAAW,CAAa;IACxB,CAAC,CAAa;IAEtB,YAAY,YAAoB;QAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,aAAa;QAChB,OAAO,IAAI,CAAC,CAAC,CAAC;IACf,CAAC;IAED,MAAM,CAAC,gBAA4B;QAClC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,GAAG,WAAyB,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAqB,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,CAAC,IAAgB;QACvB,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,aAAa,CAAC,gBAA4B;QACzC,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,IAAI,CAC5C,IAAI,CAAC,WAAW,EAChB,gBAAgB,EAChB,CAAC,CACD,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,WAAyB,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,QAAsB,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAqB,CAAC,CAAC;IAClD,CAAC;IAED,cAAc,CAAC,SAAqB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzB,OAAO,UAAU,CAAC;IACnB,CAAC;IAED,cAAc,CAAC,UAAsB;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,iFAAiF;IACjF,KAAK;QACJ,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,OAAO;YACN,IAAI,WAAW,CAAC,IAAkB,CAAC;YACnC,IAAI,WAAW,CAAC,IAAkB,CAAC;SACnC,CAAC;IACH,CAAC;CACD;AA8BD;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACjB,SAAS,CAAU;IACX,SAAS,GAAG,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC;IAC9C,GAAG,CAAa;IAChB,aAAa,CAAsB;IACnC,YAAY,CAAa;IACzB,cAAc,CAAyB;IAChD,SAAS,CAAsB;IAC/B,eAAe,CAAyB;IACxC,IAAI,GAAG,CAAC,CAAC;IACjB,MAAM,CAA8B;IAEpC,YACC,SAAkB,EAClB,OAGC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,OAAO,CAAC,qBAAqB,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACpD,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAClD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,sEAAsE;QACtE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,OAAkC;QAClD,OAAO,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,OAAkC;QAClD,OAAO,IAAI,cAAc,CAAC,KAAK,EAAE;YAChC,GAAG,OAAO;YACV,qBAAqB,EAAE,OAAO,CAAC,aAAa,CAAC,SAAS;SACtD,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,aAAa;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IACrC,CAAC;IAED,6DAA6D;IAC7D,YAAY,CAAC,UAAsB,IAAI,UAAU,CAAC,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,gBAAgB;YAChB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACd,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,WAAW;YACX,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CACpB,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CACtD,CAAC;YACF,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IACvD,CAAC;IAED,gEAAgE;IAChE,WAAW,CAAC,OAAmB;QAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,gBAAgB;YAChB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACd,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,WAAW;YACX,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CACpB,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CACtD,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC;IAEO,cAAc;QACrB,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,kDAAkD;QAClD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;IACjC,CAAC;IAEO,aAAa,CAAC,CAAa;QAClC,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC;IAEO,gBAAgB;QACvB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAEO,kBAAkB;QACzB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC;IAC7B,CAAC;IAEO,UAAU;QACjB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACzB,MAAM,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC3B,CAAC;IAEO,MAAM;QACb,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,MAAM,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa;YACpD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa;YACvD,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa;YAC3C,wBAAwB,EAAE,IAAI,CAAC,kBAAkB,EAAE;SACnD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IACf,CAAC;IAEO,WAAW,CAAC,OAAmB;QACtC,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;CACD;AAYD;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IACnB,SAAS,CAAU;IACX,SAAS,GAAG,IAAI,cAAc,CAAC,gBAAgB,CAAC,CAAC;IACjD,SAAS,CAAY;IACrB,YAAY,CAAa;IACzB,cAAc,CAAyB;IAChD,SAAS,CAAsB;IAC/B,eAAe,CAAyB;IACxC,IAAI,GAAG,CAAC,CAAC;IACjB,MAAM,CAA8B;IAEpC,YAAoB,SAAkB,EAAE,OAA2B;QAClE,IACC,OAAO,CAAC,qBAAqB,CAAC,MAAM,KAAK,KAAK;YAC9C,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,EAC3C,CAAC;YACF,MAAM,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAClD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,2EAA2E;QAC3E,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,GAAG,SAAS;YACnD,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;YAC/C,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,OAA2B;QAC3C,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,OAA2B;QAC3C,OAAO,IAAI,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,aAAa;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IACrC,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,YAAY,CACjB,UAAsB,IAAI,UAAU,CAAC,CAAC,CAAC;QAEvC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,eAAe;YACf,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACd,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,eAAe;YACf,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CACpB,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CACtD,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IACvD,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,WAAW,CAAC,OAAmB;QACpC,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,eAAe;YACf,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CACpB,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CACzD,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YACzE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACd,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,eAAe;YACf,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CACpB,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CACtD,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,MAAM,CACpB,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CACzD,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC;IAEO,cAAc;QACrB,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtD,iCAAiC;QACjC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;IACjC,CAAC;IAEO,aAAa,CAAC,CAAa;QAClC,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC;IAEO,gBAAgB;QACvB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAEO,kBAAkB;QACzB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC;IAC7B,CAAC;IAEO,MAAM;QACb,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,MAAM,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa;YACpD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa;YACvD,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa;YAC3C,wBAAwB,EAAE,IAAI,CAAC,kBAAkB,EAAE;SACnD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IACf,CAAC;CACD"}

package/dist/relay.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The relay's own messages: the text JSON around the opaque binary frames
+ * (spec §1). A peer's first message is its hello; the relay answers with
+ * status messages.
+ */
+export declare const RELAY_PROTOCOL_VERSION = 1;
+export type RelayRole = "agent" | "browser";
+export interface RelayHello {
+    v: 1;
+    role: RelayRole;
+    /** Agent only: an optional plan credential. */
+    token?: string;
+    /** Browser only: a remembered browser coming back to reconnect. */
+    resume?: true;
+}
+export type RelayCloseReason = "time-limit" | "ttl" | "replaced" | "limit" | "protocol";
+export type RelayStatus = {
+    t: "waiting";
+} | {
+    t: "ready";
+} | {
+    t: "peer-left";
+} | {
+    t: "closed";
+    reason: RelayCloseReason;
+};
+/** WebSocket close code for a second browser in a room. */
+export declare const CLOSE_CODE_ROOM_FULL = 4009;
+/** The largest binary message a relay forwards: one Noise message. */
+export declare const MAX_RELAY_BINARY_LENGTH: number;
+/** The path of a room on a relay: `/v1/rooms/<room>`. */
+export declare function roomPath(room: string): string;
+/** Parses a status message from the relay, or returns undefined if it is not one. */
+export declare function parseRelayStatus(text: string): RelayStatus | undefined;
+/** Parses a peer's hello, or returns undefined if it is not one. */
+export declare function parseRelayHello(text: string): RelayHello | undefined;
+//# sourceMappingURL=relay.d.ts.map

package/dist/relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.d.ts","sourceRoot":"","sources":["../src/relay.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE5C,MAAM,WAAW,UAAU;IAC1B,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,SAAS,CAAC;IAChB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,MAAM,CAAC,EAAE,IAAI,CAAC;CACd;AAED,MAAM,MAAM,gBAAgB,GACzB,YAAY,GACZ,KAAK,GACL,UAAU,GACV,OAAO,GACP,UAAU,CAAC;AAEd,MAAM,MAAM,WAAW,GACpB;IAAE,CAAC,EAAE,SAAS,CAAA;CAAE,GAChB;IAAE,CAAC,EAAE,OAAO,CAAA;CAAE,GACd;IAAE,CAAC,EAAE,WAAW,CAAA;CAAE,GAClB;IAAE,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAE7C,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,QAAa,CAAC;AAElD,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAyBtE;AAED,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAiCpE"}

package/dist/relay.js

@@ -0,0 +1,70 @@
+/**
+ * The relay's own messages: the text JSON around the opaque binary frames
+ * (spec §1). A peer's first message is its hello; the relay answers with
+ * status messages.
+ */
+export const RELAY_PROTOCOL_VERSION = 1;
+/** WebSocket close code for a second browser in a room. */
+export const CLOSE_CODE_ROOM_FULL = 4009;
+/** The largest binary message a relay forwards: one Noise message. */
+export const MAX_RELAY_BINARY_LENGTH = 65535 + 16;
+/** The path of a room on a relay: `/v1/rooms/<room>`. */
+export function roomPath(room) {
+    return `/v1/rooms/${room}`;
+}
+/** Parses a status message from the relay, or returns undefined if it is not one. */
+export function parseRelayStatus(text) {
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+    if (!value || typeof value !== "object") {
+        return undefined;
+    }
+    const { t, reason } = value;
+    if (t === "waiting" || t === "ready" || t === "peer-left") {
+        return { t };
+    }
+    if (t === "closed" &&
+        (reason === "time-limit" ||
+            reason === "ttl" ||
+            reason === "replaced" ||
+            reason === "limit" ||
+            reason === "protocol")) {
+        return { t, reason };
+    }
+    return undefined;
+}
+/** Parses a peer's hello, or returns undefined if it is not one. */
+export function parseRelayHello(text) {
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+    if (!value || typeof value !== "object") {
+        return undefined;
+    }
+    const { v, role, token, resume } = value;
+    if (v !== RELAY_PROTOCOL_VERSION) {
+        return undefined;
+    }
+    if (role === "browser" && token === undefined) {
+        if (resume === true) {
+            return { v, role, resume };
+        }
+        return resume === undefined ? { v, role } : undefined;
+    }
+    if (role === "agent" &&
+        resume === undefined &&
+        (token === undefined || typeof token === "string")) {
+        return token === undefined ? { v, role } : { v, role, token };
+    }
+    return undefined;
+}
+//# sourceMappingURL=relay.js.map

package/dist/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../src/relay.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AA0BxC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC,sEAAsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,GAAG,EAAE,CAAC;AAElD,yDAAyD;AACzD,MAAM,UAAU,QAAQ,CAAC,IAAY;IACpC,OAAO,aAAa,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC5C,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,KAA0C,CAAC;IACjE,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;QAC3D,OAAO,EAAE,CAAC,EAAE,CAAC;IACd,CAAC;IACD,IACC,CAAC,KAAK,QAAQ;QACd,CAAC,MAAM,KAAK,YAAY;YACvB,MAAM,KAAK,KAAK;YAChB,MAAM,KAAK,UAAU;YACrB,MAAM,KAAK,OAAO;YAClB,MAAM,KAAK,UAAU,CAAC,EACtB,CAAC;QACF,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC3C,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAKlC,CAAC;IACF,IAAI,CAAC,KAAK,sBAAsB,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IACD,IACC,IAAI,KAAK,OAAO;QAChB,MAAM,KAAK,SAAS;QACpB,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,EACjD,CAAC;QACF,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/sas.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The short authentication string: four words both sides show, so the user
+ * can see they are talking to the same peer. They come from
+ * `BLAKE2s("acpantenna-sas" ‖ h)`, `h` being the final handshake hash: its
+ * first 44 bits, most significant first, as four 11-bit indexes into the
+ * BIP-39 English wordlist.
+ */
+export declare const SAS_LABEL = "acpantenna-sas";
+export declare const SAS_WORDS = 4;
+export declare function sasWords(handshakeHash: Uint8Array): string[];
+//# sourceMappingURL=sas.d.ts.map

package/dist/sas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sas.d.ts","sourceRoot":"","sources":["../src/sas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAC1C,eAAO,MAAM,SAAS,IAAI,CAAC;AAE3B,wBAAgB,QAAQ,CAAC,aAAa,EAAE,UAAU,GAAG,MAAM,EAAE,CAY5D"}