@acpantenna/relay-protocol 0.0.0-stage → 0.3.0

package/dist/sas.js

@@ -0,0 +1,26 @@
+/**
+ * The short authentication string: four words both sides show, so the user
+ * can see they are talking to the same peer. They come from
+ * `BLAKE2s("acpantenna-sas" ‖ h)`, `h` being the final handshake hash: its
+ * first 44 bits, most significant first, as four 11-bit indexes into the
+ * BIP-39 English wordlist.
+ */
+import { blake2s } from "@noble/hashes/blake2.js";
+import { BIP39_ENGLISH } from "./bip39-english.js";
+import { concatBytes, utf8Encode } from "./bytes.js";
+export const SAS_LABEL = "acpantenna-sas";
+export const SAS_WORDS = 4;
+export function sasWords(handshakeHash) {
+    const digest = blake2s(concatBytes(utf8Encode(SAS_LABEL), handshakeHash));
+    const words = [];
+    for (let word = 0; word < SAS_WORDS; word++) {
+        let index = 0;
+        for (let bit = word * 11; bit < word * 11 + 11; bit++) {
+            const byte = digest[bit >> 3] ?? 0;
+            index = (index << 1) | ((byte >> (7 - (bit & 7))) & 1);
+        }
+        words.push(BIP39_ENGLISH[index]);
+    }
+    return words;
+}
+//# sourceMappingURL=sas.js.map

package/dist/sas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sas.js","sourceRoot":"","sources":["../src/sas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAC1C,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,MAAM,UAAU,QAAQ,CAAC,aAAyB;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,GAAG,GAAG,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;YACnC,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAW,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/session.d.ts

@@ -0,0 +1,298 @@
+/**
+ * One end of an encrypted channel over a relay: the Noise handshake, then
+ * framed ACP messages. Both sides use it — the browser as the
+ * {@link initiator}, the agent side as the {@link responder} — to pair with
+ * a link, and a remembered browser and the agent side to reconnect
+ * ({@link reconnectInitiator}, {@link reconnectResponder}).
+ *
+ * The session does no I/O of its own. Give it `send`, which puts one binary
+ * message on the relay socket, and hand every binary message from the socket
+ * to `receive`. When the socket ends, call `transportClosed`.
+ */
+import { type PairingLink } from "./link.ts";
+import { type HandshakeResult, type KeyPair, type StaticKey } from "./noise.ts";
+/** Each side rekeys its sending CipherState after this many messages, and its receiving one likewise. */
+export declare const REKEY_INTERVAL = 10000;
+/** How much of what it sent each side keeps by default, to resend after a reconnect. */
+export declare const DEFAULT_RESUME_BYTES: number;
+/**
+ * What one side keeps across the transports of a connection, so a reconnect
+ * loses nothing: ACP stream ids go on counting from one transport to the
+ * next, and the messages most recently sent are kept to send again.
+ */
+export declare class ResumeBuffer {
+    private readonly maxBytes;
+    /** The last stream received whole from the other side. */
+    received: number;
+    private next;
+    private kept;
+    private keptBytes;
+    constructor(maxBytes?: number);
+    /** The stream id of the next message sent. */
+    get nextStream(): number;
+    /** Numbers a message to send and keeps it, dropping the oldest past the limit. */
+    add(message: string): number;
+    /**
+     * The messages sent after stream `stream`, which the other side says it
+     * received last; undefined if some are no longer kept (or never were).
+     */
+    after(stream: number): {
+        stream: number;
+        message: string;
+    }[] | undefined;
+    /** Starts again from stream 1 both ways: nothing before is resent. */
+    reset(): void;
+}
+export type SessionState = 
+/** The initiator has not called `start` yet. */
+"idle"
+/** The handshake is under way. */
+ | "handshake"
+/**
+ * Keys confirmed (the initiator's first frame, a PING, has decrypted);
+ * waiting for the user to confirm the SAS words on the agent side, or,
+ * reconnecting, for the agent side's CONFIRMED.
+ */
+ | "pairing"
+/** Confirmed: ACP messages flow both ways. */
+ | "open" | "closed";
+export interface HandshakeInfo {
+    /** The four SAS words both sides show. */
+    sas: string[];
+    /** The final handshake hash `h`. */
+    handshakeHash: Uint8Array;
+}
+export type CloseEvent = 
+/** An authenticated CLOSE was sent or received: the session ended on purpose. */
+{
+    kind: "ended";
+    reason: string;
+    byPeer: boolean;
+}
+/** The socket ended without an authenticated CLOSE. Report it as "connection lost". */
+ | {
+    kind: "lost";
+    reason: string;
+}
+/** A rule was broken or a message failed to decrypt. The socket must be closed. */
+ | {
+    kind: "error";
+    reason: string;
+    error: Error;
+};
+export interface SessionHandlers {
+    /**
+     * Show `sas` to the user. The initiator calls it when the handshake
+     * finishes, the responder only once the keys are confirmed.
+     */
+    onHandshake?: (info: HandshakeInfo) => void;
+    /**
+     * Responder only: the first transport message from the initiator decrypted,
+     * so the peer really holds the keys (key confirmation). Only now is the
+     * link's psk used up. Reconnecting, the session is already open by then:
+     * there are no words, so the responder sends CONFIRMED by itself.
+     */
+    onKeyConfirmed?: () => void;
+    /** Initiator only: the agent side sent CONFIRMED; `send` may now be used. */
+    onConfirmed?: () => void;
+    /**
+     * Responder only, after a pairing: the browser sent its static public key
+     * (REMEMBER), to reconnect with later.
+     */
+    onRemember?: (publicKey: Uint8Array) => void;
+    /** One whole ACP message (a JSON-RPC 2.0 message, as text). */
+    onMessage?: (message: string) => void;
+    /** A PONG answered a PING. */
+    onPong?: (payload: Uint8Array) => void;
+    /** The session is over, for one of the reasons in {@link CloseEvent}. */
+    onClose?: (event: CloseEvent) => void;
+}
+export interface SessionOptions extends SessionHandlers {
+    /** Puts one binary message on the relay socket. */
+    send: (data: Uint8Array) => void;
+    /** The largest ACP message accepted from the peer. Defaults to 32 MiB. */
+    maxMessageBytes?: number;
+    /** Fixes the ephemeral key, for tests only. */
+    ephemeralPrivateKey?: Uint8Array;
+    /**
+     * Kept across the transports of one connection: give a reconnect the
+     * buffer the connection's earlier sessions used. A new one by default.
+     */
+    buffer?: ResumeBuffer;
+}
+export interface InitiatorOptions extends SessionOptions {
+    /** The parsed pairing link. Check its expiry first. */
+    link: PairingLink;
+}
+export interface ReconnectInitiatorOptions extends SessionOptions {
+    room: Uint8Array;
+    webOrigin: string;
+    /** The agent side's static key, from the link the browser paired with. */
+    remoteStaticPublicKey: Uint8Array;
+    /** The browser's own static key, whose public half it sent in REMEMBER. */
+    staticKey: StaticKey;
+    /**
+     * Ask to carry on where the last transport stopped, with `buffer`'s
+     * streams. False for a page that has lost them (a reload): both sides
+     * start again from stream 1, and the browser loads the session afresh.
+     */
+    resume: boolean;
+}
+export interface ReconnectResponderOptions extends SessionOptions {
+    staticKeyPair: KeyPair;
+    room: Uint8Array;
+    webOrigin: string;
+    /** The browser's static key, from its REMEMBER. */
+    remoteStaticPublicKey: Uint8Array;
+}
+export interface ResponderOptions extends SessionOptions {
+    staticKeyPair: KeyPair;
+    psk: Uint8Array;
+    room: Uint8Array;
+    webOrigin: string;
+    /**
+     * Called with the initiator's ephemeral key once message 1 has decrypted.
+     * Return false if it has been seen before while the link is valid: the
+     * message is a replay, and the session fails.
+     */
+    acceptEphemeral?: (ephemeralPublicKey: Uint8Array) => boolean;
+}
+export declare class SessionError extends Error {
+    constructor(message: string);
+}
+/** Either handshake: NKpsk0 steps are synchronous, KK steps asynchronous. */
+interface Handshake {
+    writeMessage(payload: Uint8Array): Uint8Array | Promise<Uint8Array>;
+    readMessage(message: Uint8Array): Uint8Array | Promise<Uint8Array>;
+    readonly result: HandshakeResult | undefined;
+}
+/** One end of the channel. Use {@link initiator} or {@link responder} to make one. */
+export declare class RelaySession implements SessionHandlers {
+    readonly role: "initiator" | "responder";
+    /** A first pairing with a link, or a remembered browser coming back. */
+    readonly kind: "pairing" | "reconnect";
+    /** What this side keeps across the connection's transports. */
+    readonly buffer: ResumeBuffer;
+    onHandshake: SessionHandlers["onHandshake"];
+    onKeyConfirmed: SessionHandlers["onKeyConfirmed"];
+    onConfirmed: SessionHandlers["onConfirmed"];
+    onMessage: SessionHandlers["onMessage"];
+    onPong: SessionHandlers["onPong"];
+    onRemember: SessionHandlers["onRemember"];
+    onClose: SessionHandlers["onClose"];
+    private stateValue;
+    private readonly handshake;
+    private readonly sendRaw;
+    private readonly acceptEphemeral;
+    private reassembler;
+    private readonly maxMessageBytes;
+    private readonly askResume;
+    private sendCipher;
+    private receiveCipher;
+    private keyConfirmed;
+    private resumedValue;
+    private info;
+    /** REMEMBER has been sent or received. */
+    private remembered;
+    /** An ACP message has gone, or come, since CONFIRMED: too late for REMEMBER. */
+    private acpSeen;
+    /** A handshake step is waiting on an asynchronous DH. */
+    private busy;
+    /** What arrived meanwhile, in order. */
+    private readonly backlog;
+    constructor(role: "initiator" | "responder", kind: "pairing" | "reconnect", handshake: Handshake, options: SessionOptions & {
+        acceptEphemeral?: ResponderOptions["acceptEphemeral"];
+        resume?: boolean;
+    });
+    get state(): SessionState;
+    /**
+     * A reconnect that carried on from the last transport: nothing was lost.
+     * False after a pairing, or a reconnect that started again from stream 1,
+     * when the browser must load the session afresh. Set before
+     * `onConfirmed` and `onKeyConfirmed` run.
+     */
+    get resumed(): boolean;
+    /** The SAS words and handshake hash, once the handshake is done (and, on the agent side, the keys confirmed). */
+    get handshakeInfo(): HandshakeInfo | undefined;
+    /** Initiator: sends message 1. */
+    start(): void;
+    /**
+     * Responder: the user confirmed the SAS words. Sends CONFIRMED, and lets
+     * ACP messages through from now on.
+     */
+    confirm(): void;
+    /** Sends one ACP message (a JSON-RPC 2.0 message, as text). */
+    send(message: string): void;
+    private sendStream;
+    /**
+     * Initiator, after a pairing: sends REMEMBER with the public half of the
+     * static key it will reconnect with. Once, as soon as CONFIRMED has come,
+     * before any ACP message.
+     */
+    remember(publicKey: Uint8Array): void;
+    ping(payload?: Uint8Array): void;
+    /** Ends the session with an authenticated CLOSE. */
+    close(reason?: string): void;
+    /** The socket ended. Without an authenticated CLOSE first, the connection was lost. */
+    transportClosed(reason?: string): void;
+    /** Takes one binary message from the relay socket. */
+    receive(data: Uint8Array): void;
+    /**
+     * Runs one step. A step that waits on a DH holds back what arrives
+     * meanwhile, which then runs in order.
+     */
+    private run;
+    private resume;
+    /** Protocol errors end the session; others are bugs, thrown when they can be. */
+    private failOn;
+    private receiveUnsafe;
+    private receiveHandshake;
+    /** Message 2 is written (responder, `reply`) or read (initiator). */
+    private handshakeDone;
+    private receiveTransport;
+    private handleFrame;
+    /**
+     * Responder, reconnecting: the browser's first PING has decrypted. Its
+     * payload, if any, is the last stream it received. Answers CONFIRMED with
+     * the last stream received here, then sends again what the browser
+     * missed; or, if that can't be done, an empty CONFIRMED, and both sides
+     * start again from stream 1.
+     */
+    private openReconnect;
+    /** Initiator, reconnecting: the agent side's CONFIRMED. */
+    private confirmReconnect;
+    private restart;
+    private sendFrame;
+    private fail;
+    private finish;
+}
+/**
+ * The browser's end: no static key, the agent side's key and the psk from
+ * the link. Call `start` once the relay says `ready`.
+ */
+export declare function initiator(options: InitiatorOptions): RelaySession;
+/**
+ * The agent side's end, with its static key and the link's psk. It answers
+ * message 1 when it arrives.
+ */
+export declare function responder(options: ResponderOptions): RelaySession;
+/**
+ * A remembered browser's end of a reconnect (Noise KK): its own static key,
+ * and the agent side's from the link it paired with. Call `start` once the
+ * relay says `ready`.
+ */
+export declare function reconnectInitiator(options: ReconnectInitiatorOptions): RelaySession;
+/**
+ * The agent side's end of a reconnect, with the key the browser sent in
+ * REMEMBER. It answers message 1 when it arrives, and opens by itself once
+ * the keys are confirmed.
+ */
+export declare function reconnectResponder(options: ReconnectResponderOptions): RelaySession;
+/** Remembers the ephemeral keys seen while a link is valid, to refuse replays of message 1. */
+export declare class EphemeralCache {
+    private readonly seen;
+    /** Returns false if `key` was seen before; otherwise remembers it. */
+    accept: (key: Uint8Array) => boolean;
+}
+export {};
+//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAoBH,OAAO,EAAE,KAAK,WAAW,EAAY,MAAM,WAAW,CAAC;AACvD,OAAO,EAGN,KAAK,eAAe,EAEpB,KAAK,OAAO,EAIZ,KAAK,SAAS,EAEd,MAAM,YAAY,CAAC;AAGpB,yGAAyG;AACzG,eAAO,MAAM,cAAc,QAAS,CAAC;AACrC,wFAAwF;AACxF,eAAO,MAAM,oBAAoB,QAAkB,CAAC;AAEpD;;;;GAIG;AACH,qBAAa,YAAY;IAOZ,OAAO,CAAC,QAAQ,CAAC,QAAQ;IANrC,0DAA0D;IAC1D,QAAQ,SAAK;IACb,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,IAAI,CAA6C;IACzD,OAAO,CAAC,SAAS,CAAK;gBAEO,QAAQ,SAAuB;IAE5D,8CAA8C;IAC9C,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,kFAAkF;IAClF,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAY5B;;;OAGG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,SAAS;IAcxE,sEAAsE;IACtE,KAAK,IAAI,IAAI;CAMb;AAED,MAAM,MAAM,YAAY;AACvB,gDAAgD;AAC9C,MAAM;AACR,kCAAkC;GAChC,WAAW;AACb;;;;GAIG;GACD,SAAS;AACX,8CAA8C;GAC5C,MAAM,GACN,QAAQ,CAAC;AAEZ,MAAM,WAAW,aAAa;IAC7B,0CAA0C;IAC1C,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,oCAAoC;IACpC,aAAa,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,MAAM,UAAU;AACrB,iFAAiF;AAC/E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE;AACpD,uFAAuF;GACrF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAClC,mFAAmF;GACjF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,CAAC;IAC5C;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,IAAI,CAAC;IAC7C,+DAA+D;IAC/D,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,8BAA8B;IAC9B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC;IACvC,yEAAyE;IACzE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,cAAe,SAAQ,eAAe;IACtD,mDAAmD;IACnD,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IACjC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,UAAU,CAAC;IACjC;;;OAGG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACvD,uDAAuD;IACvD,IAAI,EAAE,WAAW,CAAC;CAClB;AAED,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAChE,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,qBAAqB,EAAE,UAAU,CAAC;IAClC,2EAA2E;IAC3E,SAAS,EAAE,SAAS,CAAC;IACrB;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAChE,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,qBAAqB,EAAE,UAAU,CAAC;CAClC;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACvD,aAAa,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,kBAAkB,EAAE,UAAU,KAAK,OAAO,CAAC;CAC9D;AAED,qBAAa,YAAa,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI3B;AAID,6EAA6E;AAC7E,UAAU,SAAS;IAClB,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpE,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC;CAC7C;AAUD,sFAAsF;AACtF,qBAAa,YAAa,YAAW,eAAe;IACnD,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;IACzC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,WAAW,CAAC;IACvC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IAC5C,cAAc,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAClD,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IAC5C,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClC,UAAU,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC;IAC1C,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IAEpC,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAEnB;IACb,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,UAAU,CAA0B;IAC5C,OAAO,CAAC,aAAa,CAA0B;IAC/C,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,IAAI,CAA4B;IACxC,0CAA0C;IAC1C,OAAO,CAAC,UAAU,CAAS;IAC3B,gFAAgF;IAChF,OAAO,CAAC,OAAO,CAAS;IACxB,yDAAyD;IACzD,OAAO,CAAC,IAAI,CAAS;IACrB,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;gBAG3C,IAAI,EAAE,WAAW,GAAG,WAAW,EAC/B,IAAI,EAAE,SAAS,GAAG,WAAW,EAC7B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,cAAc,GAAG;QACzB,eAAe,CAAC,EAAE,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,OAAO,CAAC;KACjB;IA2BF,IAAI,KAAK,IAAI,YAAY,CAExB;IAED;;;;;OAKG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,iHAAiH;IACjH,IAAI,aAAa,IAAI,aAAa,GAAG,SAAS,CAE7C;IAED,kCAAkC;IAClC,KAAK,IAAI,IAAI;IAcb;;;OAGG;IACH,OAAO,IAAI,IAAI;IAYf,+DAA+D;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAQ3B,OAAO,CAAC,UAAU;IAMlB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IAqBrC,IAAI,CAAC,OAAO,GAAE,UAAkB,GAAG,IAAI;IAOvC,oDAAoD;IACpD,KAAK,CAAC,MAAM,SAAK,GAAG,IAAI;IAUxB,uFAAuF;IACvF,eAAe,CAAC,MAAM,SAAoB,GAAG,IAAI;IAMjD,sDAAsD;IACtD,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAW/B;;;OAGG;IACH,OAAO,CAAC,GAAG;IAqBX,OAAO,CAAC,MAAM;IAQd,iFAAiF;IACjF,OAAO,CAAC,MAAM;IAiBd,OAAO,CAAC,aAAa;IAmBrB,OAAO,CAAC,gBAAgB;IAkBxB,qEAAqE;IACrE,OAAO,CAAC,aAAa;IAoCrB,OAAO,CAAC,gBAAgB;IAoCxB,OAAO,CAAC,WAAW;IAmEnB;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAsBrB,2DAA2D;IAC3D,OAAO,CAAC,gBAAgB;IAsBxB,OAAO,CAAC,OAAO;IAKf,OAAO,CAAC,SAAS;IAYjB,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,MAAM;CAMd;AAoBD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,YAAY,CAQjE;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,YAAY,CAQjE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,yBAAyB,GAChC,YAAY,CAQd;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,yBAAyB,GAChC,YAAY,CAQd;AAED,+FAA+F;AAC/F,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IAEzC,sEAAsE;IACtE,MAAM,GAAI,KAAK,UAAU,KAAG,OAAO,CAMjC;CACF"}