@actana/sdk 0.3.3 → 0.4.2

package/dist/core-pairing.js

@@ -0,0 +1,630 @@
+// Pairing, from the client's side: a key pair born here, a fingerprint checked
+// before a secret moves, and a `CoreRegistrationBlob` at the end of it (#280,
+// #284).
+//
+// An operator on the Core runs `actana pair new` and reads out two things — an
+// eight-character code and the SHA-256 fingerprint of that Core's CA. This
+// module is what the other machine does with them:
+//
+//   1. dial the Core's HTTPS surface with nothing trusted yet, and read the
+//      certificate chain it presents;
+//   2. compute the fingerprint of the CA in that chain and compare it with the
+//      one the operator read out;
+//   3. **only then** post the code, a client label and a CSR;
+//   4. put the response together with the private key that never moved, and
+//      hand back the shape every other client surface already takes.
+//
+// **Step 2 is the whole security argument.** A client at step 1 has an address
+// and a code and no trust anchor, so the dial cannot verify anything and does
+// not pretend to. What it must not do is *stay* that way: the fingerprint is
+// compared while nothing secret has been sent, and the redemption in step 3 is
+// a second, separate connection pinned to the exact CA certificate that
+// matched — `rejectUnauthorized: true`, plus a `checkServerIdentity` that
+// re-runs both the hostname check and the fingerprint comparison before the
+// handshake completes. There is no code path here that sends the code over an
+// unverified connection, and no blob comes back pinned to a CA that was not
+// the one compared.
+//
+// **A caller with no fingerprint is not a caller with a waived one.** Passing
+// no `expectedCaFingerprint` is the first-contact case (#286's UI wants to show
+// the operator's fingerprint beside the Core's before anyone types anything),
+// and it is answered by reporting the presented fingerprint back — through
+// {@link fetchCorePairingIdentity}, which has no code to send, or as the
+// `fingerprint-unconfirmed` failure of {@link pairWithCore}, which has one and
+// does not send it.
+//
+// **The wire types live in `core-pairing-wire.ts` and are re-exported here.**
+// They are not imported from `@actana/shared`: that package is private and
+// stays private ([ADR 0025][adr] D4), so an SDK that imported the pairing
+// request and response from it would be a published package with a dependency
+// nobody outside this repository can resolve — the arrangement that ADR
+// rejected (D1: the protocol ships with the client). Nor are they declared
+// here: `packages/core/src/core-pairing-routes.ts` reads and answers with the
+// same shapes, and two structurally identical declarations are the mirror D3
+// forbids. One import-free module, imported by both sides, is the shape D2's
+// amendment allows and D3 asks for.
+//
+// [adr]: ../../docs/adr/0025-the-protocol-ships-with-the-client.md
+import { createHash } from "node:crypto";
+import { request as httpsRequest } from "node:https";
+import { isIP } from "node:net";
+import { checkServerIdentity as checkTlsServerIdentity, connect as tlsConnect } from "node:tls";
+import { generateClientCsr } from "./core-pairing-csr.js";
+// ─── The wire ───
+// One definition, in an import-free module the Core imports too (ADR 0025 D2 as
+// amended by #306, D3). Re-exported here so every client-side caller keeps
+// reaching for them by the name it already used.
+export { CORE_PAIRING_REDEEM_PATH, } from "./core-pairing-wire.js";
+import { CORE_PAIRING_REDEEM_PATH } from "./core-pairing-wire.js";
+/**
+ * A pairing attempt that did not produce a blob.
+ *
+ * One class with a {@link CorePairingFailure} rather than a class per failure:
+ * the CLI (#285) and the Panel (#286) both switch on the reason to write a
+ * sentence, and a `switch` over a union is checked by the compiler where a
+ * chain of `instanceof` is not.
+ */
+export class CorePairingError extends Error {
+    name = "CorePairingError";
+    /** Which failure this is. Switch on it; do not read the message. */
+    failure;
+    /** Whatever the failure knows beyond its reason. */
+    detail;
+    // Fields are assigned rather than declared as constructor parameters: this
+    // package is loaded by plain `node` with nothing but type stripping
+    // (`__tests__/plain-node-consumption.test.ts`), and a parameter property is
+    // syntax that stripping cannot erase.
+    constructor(failure, message, detail = {}, options = {}) {
+        super(message, options);
+        this.failure = failure;
+        this.detail = detail;
+    }
+}
+/** How long a dial or a redemption may take before it is called unreachable. */
+export const DEFAULT_PAIRING_TIMEOUT_MS = 15_000;
+/**
+ * Dial a Core and report the CA it presents — **without a code to send**.
+ *
+ * This is the first-contact mode, and the reason it is a separate function
+ * rather than a flag is that it takes no code: a UI that shows the operator's
+ * fingerprint beside the Core's, and asks a human whether they match, cannot
+ * leak a secret it was never given. {@link pairWithCore} calls it too, so the
+ * fingerprint a caller confirms is computed by the same code that later
+ * enforces it.
+ *
+ * The dial is unverified, because at this point in the flow there is nothing to
+ * verify against — that is what the fingerprint the operator read out is for.
+ * Nothing is sent on this connection and it is closed as soon as the chain has
+ * been read.
+ */
+export async function fetchCorePairingIdentity(opts) {
+    const { host, port, httpsOrigin } = parseCoreAddress(opts.address);
+    const chain = await presentedChain(host, port, opts.timeoutMs ?? DEFAULT_PAIRING_TIMEOUT_MS);
+    const ca = certificateAuthorityIn(chain);
+    if (!ca) {
+        throw new CorePairingError("no-ca-presented", `${httpsOrigin} presented a certificate chain with no certificate authority in it, so there is nothing to compare against the fingerprint`);
+    }
+    return { fingerprint: fingerprintOf(ca.raw), caCert: derToCertificatePem(ca.raw), host, port, httpsOrigin };
+}
+/**
+ * Pair with a Core and return the credential it issued.
+ *
+ * The result is a {@link CoreRegistrationBlob} and nothing downstream can tell
+ * it from a hand-carried one: `coreConnectionFromBlob` unpacks it,
+ * `httpsBaseUrlFor` derives the HTTPS origin, the PEMs go into the mTLS
+ * handshake and the bearer into the `auth` frame — exactly as they do today.
+ * `clientKey` is the key generated on this machine a few lines above; it was
+ * never sent, and the Core has never seen it.
+ *
+ * Throws {@link CorePairingError} for everything that is not a blob.
+ */
+export async function pairWithCore(opts) {
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_PAIRING_TIMEOUT_MS;
+    // Read the address and the ticket first. Both are failures a caller can fix
+    // without a Core being involved, and neither is worth a dial to discover.
+    const address = parseCoreAddress(opts.address);
+    const ticket = parsePairingTicket(opts.code, opts.sessionId);
+    const expected = opts.expectedCaFingerprint ? parseFingerprint(opts.expectedCaFingerprint) : null;
+    const identity = await fetchCorePairingIdentity({ address: opts.address, timeoutMs });
+    // ── The comparison, and everything that turns on it ──
+    if (!expected) {
+        throw new CorePairingError("fingerprint-unconfirmed", `${identity.httpsOrigin} presents a certificate authority with fingerprint ${identity.fingerprint}; no expected fingerprint was given, so the pairing code was not sent`, { presentedFingerprint: identity.fingerprint, presentedCaCert: identity.caCert });
+    }
+    if (expected !== identity.fingerprint) {
+        throw new CorePairingError("fingerprint-mismatch", `${identity.httpsOrigin} presented a certificate authority with fingerprint ${identity.fingerprint}, but ${expected} was expected — the pairing code was not sent`, {
+            expectedFingerprint: expected,
+            presentedFingerprint: identity.fingerprint,
+            presentedCaCert: identity.caCert,
+        });
+    }
+    // Past the comparison, and only past it. The key pair is minted here rather
+    // than above so that a mismatch costs a dial rather than a dial and an RSA
+    // key generation — and so that nothing exists to be sent until the Core on
+    // the other end is the one the operator described.
+    const { csrPem, privateKeyPem } = await generateClientCsr(opts.label ?? "actana-client");
+    const body = {
+        sessionId: ticket.sessionId,
+        code: ticket.code,
+        client: {
+            ...(opts.label === undefined ? {} : { label: opts.label }),
+            ...(opts.platform === undefined ? {} : { platform: opts.platform }),
+        },
+        csr: csrPem,
+    };
+    const answer = await postRedemption({
+        host: address.host,
+        port: address.port,
+        origin: identity.httpsOrigin,
+        caCert: identity.caCert,
+        expectedFingerprint: expected,
+        body: JSON.stringify(body),
+        timeoutMs,
+    });
+    const issued = readRedeemResponse(answer, identity.httpsOrigin);
+    // The CA in the response is the one every later dial pins, so it is held to
+    // the same fingerprint the bootstrap dial was. A Core that presented one CA
+    // in its handshake and handed back another would be asking this client to
+    // trust something no human ever read out.
+    const issuedFingerprint = fingerprintOf(pemToDer(issued.caCert));
+    if (issuedFingerprint !== expected) {
+        throw new CorePairingError("fingerprint-mismatch", `${identity.httpsOrigin} answered with a certificate authority whose fingerprint is ${issuedFingerprint}, not the ${expected} it presented in the handshake`, { expectedFingerprint: expected, presentedFingerprint: issuedFingerprint });
+    }
+    return {
+        endpoint: issued.endpoint,
+        ...(opts.label === undefined ? {} : { label: opts.label }),
+        caCert: issued.caCert,
+        clientCert: issued.clientCert,
+        // The field that never crossed the wire, put back into the shape.
+        clientKey: privateKeyPem,
+        bearer: issued.bearer,
+    };
+}
+/**
+ * Read a ticket out of what a human typed.
+ *
+ * The code is checked for *shape* — eight alphanumerics, hyphens and spaces
+ * ignored — and not against the Core's alphabet. That is a deliberate stop:
+ * the alphabet is an internal of `packages/shared` (which this package may not
+ * import) and mirroring it here would be a copy free to drift, which ADR 0025
+ * D3 is about. What the shape check buys is worth having on its own: a code
+ * that could not be right whatever the alphabet is never spends one of the
+ * five attempts the operator's session has.
+ */
+export function parsePairingTicket(input, sessionId) {
+    const trimmed = input.trim();
+    const separator = trimmed.indexOf(":");
+    const explicit = sessionId?.trim() ?? "";
+    const carried = separator === -1 ? "" : trimmed.slice(0, separator).trim();
+    // The prefix is stripped whenever there is one, whether or not a session id
+    // was also passed: a caller that always forwards `--session` while letting an
+    // operator paste whatever they were read out hands in both, and refusing that
+    // would refuse the one shape this function exists to be tolerant of.
+    const rawCode = separator === -1 ? trimmed : trimmed.slice(separator + 1);
+    if (explicit !== "" && carried !== "" && explicit !== carried) {
+        // Two session ids that disagree is not a shape to pick a winner from: one
+        // of them is a mistake, and redeeming against the wrong session refuses in
+        // a way that looks like a bad code.
+        throw new CorePairingError("bad-code", `the code names session "${carried}" and "${explicit}" was passed beside it — they must agree`);
+    }
+    const session = explicit !== "" ? explicit : carried;
+    if (session === "") {
+        throw new CorePairingError("bad-code", "a pairing code names a pairing session — pass the session id as `sessionId`, or a `<sessionId>:<XXXX-XXXX>` code");
+    }
+    const stripped = rawCode.replace(/[\s-]/g, "").toUpperCase();
+    if (!/^[A-Z0-9]{8}$/.test(stripped)) {
+        throw new CorePairingError("bad-code", `a pairing code is eight characters, written XXXX-XXXX — "${rawCode.trim()}" is not`);
+    }
+    return { sessionId: session, code: `${stripped.slice(0, 4)}-${stripped.slice(4)}` };
+}
+/**
+ * Read `host:port`, `https://host:port` or `wss://host:port`.
+ *
+ * `ws://` and `http://` are refused rather than upgraded: there is no
+ * certificate on a plaintext dial, so there is no fingerprint to check, and
+ * pairing over one would be the silent unverified exchange this module exists
+ * to make impossible. A caller that meant the secure port should say so.
+ */
+export function parseCoreAddress(address) {
+    const trimmed = address.trim();
+    if (trimmed === "")
+        throw new CorePairingError("bad-address", "a Core address is required");
+    const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`;
+    let url;
+    try {
+        url = new URL(withScheme);
+    }
+    catch {
+        throw new CorePairingError("bad-address", `"${address}" is not a Core address — try host:port`);
+    }
+    if (url.protocol === "ws:" || url.protocol === "http:") {
+        throw new CorePairingError("bad-address", `pairing needs the Core's TLS port: "${address}" names a plaintext one, and there is no certificate on it to check the fingerprint against`);
+    }
+    if (url.protocol !== "https:" && url.protocol !== "wss:") {
+        throw new CorePairingError("bad-address", `"${address}" is not a Core address — try host:port`);
+    }
+    const host = url.hostname.replace(/^\[|\]$/g, "");
+    if (host === "")
+        throw new CorePairingError("bad-address", `"${address}" names no host`);
+    const port = url.port === "" ? 443 : Number(url.port);
+    return { host, port, httpsOrigin: `https://${url.host}` };
+}
+/**
+ * A fingerprint as this module compares them: colon-separated uppercase hex,
+ * which is the form `actana pair new` prints and a human copies.
+ */
+export function parseFingerprint(input) {
+    const hex = input.trim().replace(/^sha-?256[:=]/i, "").replace(/[\s:]/g, "").toUpperCase();
+    if (!/^[0-9A-F]{64}$/.test(hex)) {
+        throw new CorePairingError("bad-fingerprint", `"${input.trim()}" is not a SHA-256 fingerprint — expected 32 bytes of hex, as AA:BB:…`);
+    }
+    return groupHex(hex);
+}
+/** SHA-256 over a certificate's DER, in the form {@link parseFingerprint} yields. */
+export function fingerprintOf(der) {
+    return groupHex(createHash("sha256").update(der).digest("hex").toUpperCase());
+}
+function groupHex(hex) {
+    return (hex.match(/../g) ?? []).join(":");
+}
+/**
+ * The chain a Core presents, deepest certificate last.
+ *
+ * `rejectUnauthorized: false` is here and nowhere else in this file. It is what
+ * "no trust anchor yet" means in code: the client has an address and a
+ * fingerprint on a piece of paper, and the only way to compare the two is to
+ * look at what the server presents. Nothing is sent on this socket, and it is
+ * destroyed as soon as the chain has been copied out.
+ */
+function presentedChain(host, port, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const socket = tlsConnect({
+            host,
+            port,
+            rejectUnauthorized: false,
+            // An IP address is not a valid SNI server name (RFC 6066), and Node warns
+            // about sending one. The certificate is identified by its fingerprint
+            // here rather than by its name, so there is nothing to lose by omitting
+            // it in that case.
+            ...(isIP(host) === 0 ? { servername: host } : {}),
+        });
+        const settle = (fn) => {
+            clearTimeout(timer);
+            socket.removeAllListeners();
+            socket.destroy();
+            fn();
+        };
+        const timer = setTimeout(() => {
+            settle(() => reject(new CorePairingError("unreachable", `${host}:${port} did not answer within ${timeoutMs}ms`)));
+        }, timeoutMs);
+        socket.once("secureConnect", () => {
+            const chain = chainOf(socket.getPeerCertificate(true));
+            settle(() => resolve(chain));
+        });
+        socket.once("error", (err) => {
+            settle(() => reject(new CorePairingError("unreachable", `${host}:${port} could not be reached: ${err.message}`, {}, { cause: err })));
+        });
+    });
+}
+/**
+ * Walk a peer certificate up to the root.
+ *
+ * Node hands back the chain as a linked list through `issuerCertificate`, and
+ * terminates it by pointing the root at itself — so the loop stops on a
+ * certificate it has already seen rather than on a null, which is the shape
+ * that would spin forever.
+ */
+function chainOf(leaf) {
+    const chain = [];
+    const seen = new Set();
+    let current = leaf;
+    while (current && current.raw && !seen.has(current.fingerprint256)) {
+        seen.add(current.fingerprint256);
+        chain.push(current);
+        current = current.issuerCertificate;
+    }
+    return chain;
+}
+/**
+ * The certificate authority in a presented chain: the last one, when it is
+ * self-issued.
+ *
+ * A Core presents its server certificate and the CA above it, and that CA — the
+ * one `actana pair new` fingerprints from `PersistedMaterial.caCert` — is the
+ * root of what it sends. If the chain ends somewhere else the Core has sent a
+ * partial chain, and there is nothing here to compare: the alternative,
+ * fingerprinting whatever is at the top, would compare the operator's CA
+ * fingerprint against a leaf and fail with a mismatch that describes the wrong
+ * problem.
+ *
+ * That makes "a Core presents a chain ending in its own root" a property of the
+ * pairing flow rather than a detail of this file: a Core that later fronts an
+ * intermediate, or serves a partial chain, breaks first contact for every
+ * client. It belongs in #280 beside the rest of the flow's properties, and is
+ * written here so the dependency is visible from the code that has it.
+ */
+function certificateAuthorityIn(chain) {
+    const top = chain.at(-1);
+    if (!top)
+        return null;
+    return sameName(top.subject, top.issuer) ? top : null;
+}
+function sameName(a, b) {
+    return JSON.stringify(a) === JSON.stringify(b);
+}
+/**
+ * Post the redemption on a connection pinned to the CA that just matched.
+ *
+ * Three things hold the code to that connection, and they are deliberately not
+ * one thing: `ca` is the single certificate the bootstrap dial fingerprinted,
+ * so no other authority can complete this handshake; `rejectUnauthorized` is
+ * true, so the verification is enforced rather than reported; and
+ * `checkServerIdentity` re-runs Node's own hostname check *and* the fingerprint
+ * comparison, before the handshake completes and therefore before a byte of the
+ * body is written. The last is redundant against the first two by construction
+ * — which is the point of having it, since the first two are options on an
+ * object and the day one of them is edited away the third still refuses.
+ */
+function postRedemption(opts) {
+    return new Promise((resolve, reject) => {
+        const req = httpsRequest({
+            host: opts.host,
+            port: opts.port,
+            path: CORE_PAIRING_REDEEM_PATH,
+            method: "POST",
+            ca: opts.caCert,
+            rejectUnauthorized: true,
+            agent: false,
+            ...(isIP(opts.host) === 0 ? { servername: opts.host } : {}),
+            checkServerIdentity: (host, cert) => {
+                const identity = checkTlsServerIdentity(host, cert);
+                if (identity)
+                    return identity;
+                const ca = certificateAuthorityIn(chainOf(cert));
+                if (!ca) {
+                    return pinFailure(`${opts.origin} presented no certificate authority on the redemption dial`);
+                }
+                const presented = fingerprintOf(ca.raw);
+                if (presented !== opts.expectedFingerprint) {
+                    return pinFailure(`${opts.origin} presented ${presented} on the redemption dial, not the ${opts.expectedFingerprint} it presented before`);
+                }
+                return undefined;
+            },
+            headers: {
+                "content-type": "application/json",
+                "content-length": String(Buffer.byteLength(opts.body)),
+            },
+        }, (res) => {
+            const chunks = [];
+            res.on("data", (chunk) => chunks.push(chunk));
+            res.on("end", () => {
+                clearTimeout(timer);
+                const retryAfter = Number(res.headers["retry-after"]);
+                resolve({
+                    status: res.statusCode ?? 0,
+                    body: Buffer.concat(chunks).toString("utf8"),
+                    ...(Number.isFinite(retryAfter) ? { retryAfterSeconds: retryAfter } : {}),
+                });
+            });
+        });
+        const timer = setTimeout(() => {
+            req.destroy(new Error(`no answer within ${opts.timeoutMs}ms`));
+        }, opts.timeoutMs);
+        req.on("error", (err) => {
+            clearTimeout(timer);
+            // Whatever this turns out to be, the body was never written: the failure
+            // is the handshake's, and the code went nowhere. What is decided here is
+            // only which of four things the operator is told — and one of them
+            // accuses somebody, so see {@link classifyDialFailure}.
+            const code = failureCode(err);
+            const tls = code === undefined ? {} : { tlsCode: code };
+            reject(dialFailure(classifyDialFailure(err), err, opts, tls));
+        });
+        req.end(opts.body);
+    });
+}
+/** One sentence per {@link DialFailure}, and the failure that carries it. */
+function dialFailure(kind, err, opts, tls) {
+    const cause = { cause: err };
+    if (kind === "pin") {
+        return new CorePairingError("fingerprint-mismatch", `${opts.origin} did not present the certificate authority whose fingerprint was confirmed — the pairing code was not sent (${err.message})`, { ...tls, expectedFingerprint: opts.expectedFingerprint }, cause);
+    }
+    if (kind === "hostname") {
+        return new CorePairingError("hostname-mismatch", `${opts.origin} presented the expected certificate authority, but its certificate does not cover ${opts.host} — dial the address this Core was set up for (${err.message})`, { ...tls, expectedFingerprint: opts.expectedFingerprint }, cause);
+    }
+    if (kind === "certificate") {
+        return new CorePairingError("certificate-invalid", `${opts.origin} presented the expected certificate authority, but its certificate could not be used: ${err.message}`, { ...tls, expectedFingerprint: opts.expectedFingerprint }, cause);
+    }
+    return new CorePairingError("unreachable", `${opts.origin} could not be reached: ${err.message}`, tls, cause);
+}
+/**
+ * Turn an answer into a response or a {@link CorePairingError}.
+ *
+ * The mapping is the Core's status table read back: `403` is the one refusal
+ * that covers four states, `429` carries a `retry-after` a caller can wait out,
+ * `400` and its neighbours mean this client sent something wrong, and `404`
+ * means the Core has no pairing endpoint at all — which is what an operator who
+ * has not run `actana pair new` on a Core built before #282 will see.
+ */
+function readRedeemResponse(answer, origin) {
+    if (answer.status !== 200)
+        throw refusalFor(answer, origin);
+    let parsed;
+    try {
+        parsed = JSON.parse(answer.body);
+    }
+    catch {
+        throw new CorePairingError("malformed-response", `${origin} answered 200 with something that was not JSON`, {
+            status: answer.status,
+        });
+    }
+    // `JSON.parse("null")` succeeds, and an array parses too. Both would reach
+    // the sweep below as something a field can be read off without complaint from
+    // the compiler, and `null` would throw a raw `TypeError` out of a function
+    // whose whole contract is that failures arrive as a `CorePairingError`.
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new CorePairingError("malformed-response", `${origin} answered 200 with something that was not an object`, {
+            status: answer.status,
+        });
+    }
+    const fields = parsed;
+    const missing = ["endpoint", "caCert", "clientCert", "bearer"].filter((field) => typeof fields[field] !== "string" || fields[field].length === 0);
+    if (missing.length > 0) {
+        throw new CorePairingError("malformed-response", `${origin} answered 200 without ${missing.join(", ")}`, { status: answer.status });
+    }
+    // The endpoint decides whether anything later is protected at all.
+    // `coreConnectionFromBlob` reads TLS off the scheme and nothing else: a
+    // `ws://` endpoint yields `tls: null` **and still carries the bearer**, so a
+    // Core that answered with one — misconfigured, or hostile — would hand back a
+    // credential whose every later dial ships the bearer in cleartext with no
+    // client certificate. That is the property this module spent a bootstrap
+    // dial, a fingerprint comparison and a pinned second connection to establish,
+    // undone by one field nobody looked at.
+    const endpoint = fields.endpoint.trim();
+    if (!endpoint.startsWith("wss://")) {
+        throw new CorePairingError("malformed-response", `${origin} answered with the endpoint ${endpoint}, which is not a \`wss://\` core link — a paired credential is only a credential on one`, { status: answer.status });
+    }
+    return {
+        endpoint,
+        caCert: fields.caCert,
+        clientCert: fields.clientCert,
+        bearer: fields.bearer,
+    };
+}
+function refusalFor(answer, origin) {
+    const body = safeRefusal(answer.body);
+    const detail = {
+        status: answer.status,
+        ...(body.code === undefined ? {} : { coreCode: body.code }),
+    };
+    const said = body.error ?? `HTTP ${answer.status}`;
+    if (answer.status === 429) {
+        return new CorePairingError("rate-limited", `${origin} is refusing pairing attempts for now: ${said}`, { ...detail, ...(answer.retryAfterSeconds === undefined ? {} : { retryAfterSeconds: answer.retryAfterSeconds }) });
+    }
+    if (answer.status === 403) {
+        return new CorePairingError("refused", `${origin} refused the pairing code: it is wrong, expired, already used, or the session is out of attempts`, detail);
+    }
+    if (answer.status === 404) {
+        return new CorePairingError("not-pairable", `${origin} has no pairing endpoint — ${said}`, detail);
+    }
+    if (answer.status >= 500) {
+        return new CorePairingError("core-error", `${origin} failed to handle the redemption: ${said}`, detail);
+    }
+    return new CorePairingError("rejected", `${origin} would not accept the redemption: ${said}`, detail);
+}
+/**
+ * The `code` this module's own `checkServerIdentity` refusals carry.
+ *
+ * Node reports a refusal from `checkServerIdentity` by destroying the socket
+ * with the returned error, which arrives at the request as an ordinary
+ * `error` event indistinguishable from a connection reset. Tagging it is what
+ * lets {@link classifyDialFailure} tell "this is not the Core you confirmed"
+ * from "nothing answered" — and from the two failures that are neither.
+ */
+const PIN_FAILURE_CODE = "ERR_ACTANA_PAIRING_PIN";
+/** An error for `checkServerIdentity` to refuse a handshake with. */
+function pinFailure(message) {
+    return Object.assign(new Error(message), { code: PIN_FAILURE_CODE });
+}
+/**
+ * Was this failure about the certificate at all?
+ *
+ * OpenSSL's verdicts reach Node as `code` — `UNABLE_TO_VERIFY_LEAF_SIGNATURE`,
+ * `CERT_HAS_EXPIRED` and the rest of a list too long and too version-dependent
+ * to enumerate — beside the `ERR_TLS_*` family Node raises itself. Matched by
+ * prefix, deliberately: a verification failure this predicate did not recognise
+ * would be reported as `unreachable`, which sends an operator looking at their
+ * network for a problem that is in their certificates.
+ *
+ * It answers only that question. Which certificate failure it was — the pin,
+ * the hostname, or an unusable certificate — is {@link classifyDialFailure}'s,
+ * and that one is enumerated rather than guessed.
+ */
+function certificateFailure(code) {
+    return (code.startsWith("ERR_TLS_") ||
+        code.startsWith("ERR_SSL_") ||
+        code.includes("CERT") ||
+        code.startsWith("UNABLE_TO_") ||
+        code.startsWith("DEPTH_ZERO_") ||
+        code.startsWith("SELF_SIGNED_"));
+}
+/**
+ * OpenSSL verdicts that mean **this chain does not lead to the pinned CA**.
+ *
+ * Every one of them is a statement about who signed what: no issuer, an issuer
+ * that is not the one supplied, a signature that does not check out, a chain
+ * that ends in a self-signed certificate that is not the pinned root. On a dial
+ * whose `ca` is the single certificate the operator's fingerprint matched,
+ * that is the pin refusing — the same event `checkServerIdentity` reports when
+ * it gets far enough to run.
+ *
+ * Enumerated rather than prefix-matched, because this is the set that decides
+ * whether a person is told they are being attacked.
+ */
+const CHAIN_FAILURE_CODES = new Set([
+    "UNABLE_TO_GET_ISSUER_CERT",
+    "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+    "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+    "SELF_SIGNED_CERT_IN_CHAIN",
+    "DEPTH_ZERO_SELF_SIGNED_CERT",
+    "CERT_SIGNATURE_FAILURE",
+    "CERT_UNTRUSTED",
+    "INVALID_CA",
+]);
+/** Node's own verdict when a certificate does not cover the address dialled. */
+const HOSTNAME_FAILURE_CODE = "ERR_TLS_CERT_ALTNAME_INVALID";
+/**
+ * Classify a failure on the pinned dial.
+ *
+ * The distinction this draws is the module's most consequential sentence, and
+ * it used to be drawn wrong: any code containing `CERT` was reported as a
+ * fingerprint mismatch, so `ERR_TLS_CERT_ALTNAME_INVALID` — a Core set up for
+ * one address and reached at another, which `core-cert-material.ts` makes an
+ * ordinary configuration rather than an exotic one — told the operator they
+ * were being intercepted. So did an expired server certificate. **A
+ * misconfigured Core must not be reported as an attack**: the person who reads
+ * that goes looking for an attacker instead of for their own SAN list.
+ *
+ * So the width and the accusation are now two separate decisions.
+ * {@link certificateFailure} still decides broadly whether the failure was
+ * about the certificate at all — being wrong there only costs the wrong noun.
+ * Whether it was the *pin* is decided by an enumerated set plus the tagged
+ * refusal, and anything certificate-shaped that is in neither is reported as an
+ * invalid certificate. Nothing is lost by that default: the exchange is refused
+ * either way and the code was never written to the socket — the only thing that
+ * changes is which sentence a person is shown.
+ */
+function classifyDialFailure(err) {
+    const code = String(err?.code ?? "");
+    if (code === PIN_FAILURE_CODE)
+        return "pin";
+    if (CHAIN_FAILURE_CODES.has(code))
+        return "pin";
+    if (code === HOSTNAME_FAILURE_CODE)
+        return "hostname";
+    return certificateFailure(code) ? "certificate" : "transport";
+}
+/** The `code` a dial failure carried, for {@link CorePairingErrorDetail.tlsCode}. */
+function failureCode(err) {
+    const code = err?.code;
+    return typeof code === "string" && code.length > 0 ? code : undefined;
+}
+function safeRefusal(body) {
+    try {
+        const parsed = JSON.parse(body);
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+/** DER to a PEM `CERTIFICATE`, in the 64-column form every PEM reader expects. */
+function derToCertificatePem(der) {
+    const body = Buffer.from(der).toString("base64").replace(/(.{64})/g, "$1\n").trimEnd();
+    return `-----BEGIN CERTIFICATE-----\n${body}\n-----END CERTIFICATE-----\n`;
+}
+/** The first certificate in a PEM, as DER. Throws nothing: an empty PEM yields no bytes. */
+function pemToDer(pem) {
+    const match = /-----BEGIN CERTIFICATE-----([\s\S]*?)-----END CERTIFICATE-----/.exec(pem);
+    return new Uint8Array(Buffer.from((match?.[1] ?? "").replace(/\s+/g, ""), "base64"));
+}
+//# sourceMappingURL=core-pairing.js.map

package/dist/core-pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-pairing.js","sourceRoot":"","sources":["../src/core-pairing.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,8EAA8E;AAC9E,SAAS;AACT,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,mDAAmD;AACnD,EAAE;AACF,4EAA4E;AAC5E,sCAAsC;AACtC,+EAA+E;AAC/E,kCAAkC;AAClC,8DAA8D;AAC9D,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,wEAAwE;AACxE,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,oBAAoB;AACpB,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,2EAA2E;AAC3E,yEAAyE;AACzE,+EAA+E;AAC/E,oBAAoB;AACpB,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,wEAAwE;AACxE,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,oCAAoC;AACpC,EAAE;AACF,mEAAmE;AAEnE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,mBAAmB,IAAI,sBAAsB,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,UAAU,CAAC;AAEhG,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,mBAAmB;AAEnB,gFAAgF;AAChF,2EAA2E;AAC3E,iDAAiD;AACjD,OAAO,EACL,wBAAwB,GAKzB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAgFlE;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACvB,IAAI,GAAG,kBAAkB,CAAC;IAC5C,oEAAoE;IAC3D,OAAO,CAAqB;IACrC,oDAAoD;IAC3C,MAAM,CAAyB;IAExC,2EAA2E;IAC3E,oEAAoE;IACpE,4EAA4E;IAC5E,sCAAsC;IACtC,YACE,OAA2B,EAC3B,OAAe,EACf,SAAiC,EAAE,EACnC,UAA+B,EAAE;QAEjC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAkBD,gFAAgF;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAK9C;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,0BAA0B,CAAC,CAAC;IAC7F,MAAM,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,gBAAgB,CACxB,iBAAiB,EACjB,GAAG,WAAW,4HAA4H,CAC3I,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC9G,CAAC;AAsCD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,0BAA0B,CAAC;IAE/D,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElG,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAEtF,wDAAwD;IACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,gBAAgB,CACxB,yBAAyB,EACzB,GAAG,QAAQ,CAAC,WAAW,sDAAsD,QAAQ,CAAC,WAAW,uEAAuE,EACxK,EAAE,oBAAoB,EAAE,QAAQ,CAAC,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,GAAG,QAAQ,CAAC,WAAW,uDAAuD,QAAQ,CAAC,WAAW,SAAS,QAAQ,+CAA+C,EAClK;YACE,mBAAmB,EAAE,QAAQ;YAC7B,oBAAoB,EAAE,QAAQ,CAAC,WAAW;YAC1C,eAAe,EAAE,QAAQ,CAAC,MAAM;SACjC,CACF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,mDAAmD;IACnD,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC;IAEzF,MAAM,IAAI,GAA6B;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE;YACN,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;SACpE;QACD,GAAG,EAAE,MAAM;KACZ,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,QAAQ,CAAC,WAAW;QAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,mBAAmB,EAAE,QAAQ;QAC7B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEhE,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAM,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,IAAI,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,GAAG,QAAQ,CAAC,WAAW,+DAA+D,iBAAiB,aAAa,QAAQ,gCAAgC,EAC5J,EAAE,mBAAmB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,CAC3E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1D,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,kEAAkE;QAClE,SAAS,EAAE,aAAa;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAOD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,SAAkB;IAClE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,qEAAqE;IACrE,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAE1E,IAAI,QAAQ,KAAK,EAAE,IAAI,OAAO,KAAK,EAAE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC9D,0EAA0E;QAC1E,2EAA2E;QAC3E,oCAAoC;QACpC,MAAM,IAAI,gBAAgB,CACxB,UAAU,EACV,2BAA2B,OAAO,UAAU,QAAQ,0CAA0C,CAC/F,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IACrD,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,gBAAgB,CACxB,UAAU,EACV,kHAAkH,CACnH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,gBAAgB,CACxB,UAAU,EACV,4DAA4D,OAAO,CAAC,IAAI,EAAE,UAAU,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACtF,CAAC;AAKD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC;IAE7F,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,IAAI,OAAO,yCAAyC,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvD,MAAM,IAAI,gBAAgB,CACxB,aAAa,EACb,uCAAuC,OAAO,6FAA6F,CAC5I,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,IAAI,OAAO,yCAAyC,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,gBAAgB,CAAC,aAAa,EAAE,IAAI,OAAO,iBAAiB,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3F,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CACxB,iBAAiB,EACjB,IAAI,KAAK,CAAC,IAAI,EAAE,uEAAuE,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,GAAe;IAC3C,OAAO,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,IAAI;YACJ,IAAI;YACJ,kBAAkB,EAAE,KAAK;YACzB,0EAA0E;YAC1E,sEAAsE;YACtE,wEAAwE;YACxE,mBAAmB;YACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,EAAc,EAAQ,EAAE;YACtC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,gBAAgB,CAAC,aAAa,EAAE,GAAG,IAAI,IAAI,IAAI,0BAA0B,SAAS,IAAI,CAAC,CAC5F,CACF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;YAChC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAClC,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,gBAAgB,CAAC,aAAa,EAAE,GAAG,IAAI,IAAI,IAAI,0BAA0B,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAChH,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,IAA6B;IAC5C,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,OAAO,GAAwC,IAAI,CAAC;IACxD,OAAO,OAAO,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,sBAAsB,CAAC,KAAgC;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,CAA6B,EAAE,CAA4B;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAID;;;;;;;;;;;;GAYG;AACH,SAAS,cAAc,CAAC,IAQvB;IACC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,YAAY,CACtB;YACE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,EAAE,EAAE,IAAI,CAAC,MAAM;YACf,kBAAkB,EAAE,IAAI;YACxB,KAAK,EAAE,KAAK;YACZ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,mBAAmB,EAAE,CAAC,IAAY,EAAE,IAAqB,EAAE,EAAE;gBAC3D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACpD,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;gBAC9B,MAAM,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAA+B,CAAC,CAAC,CAAC;gBAC5E,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,4DAA4D,CAAC,CAAC;gBAChG,CAAC;gBACD,MAAM,SAAS,GAAG,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,SAAS,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC3C,OAAO,UAAU,CACf,GAAG,IAAI,CAAC,MAAM,cAAc,SAAS,oCAAoC,IAAI,CAAC,mBAAmB,sBAAsB,CACxH,CAAC;gBACJ,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACvD;SACF,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;gBACtD,OAAO,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC5C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1E,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,yEAAyE;YACzE,yEAAyE;YACzE,mEAAmE;YACnE,wDAAwD;YACxD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxD,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAClB,IAAiB,EACjB,GAAU,EACV,IAAmE,EACnE,GAAyB;IAEzB,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC7B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,gBAAgB,CACzB,sBAAsB,EACtB,GAAG,IAAI,CAAC,MAAM,+GAA+G,GAAG,CAAC,OAAO,GAAG,EAC3I,EAAE,GAAG,GAAG,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,EACzD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,IAAI,gBAAgB,CACzB,mBAAmB,EACnB,GAAG,IAAI,CAAC,MAAM,qFAAqF,IAAI,CAAC,IAAI,iDAAiD,GAAG,CAAC,OAAO,GAAG,EAC3K,EAAE,GAAG,GAAG,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,EACzD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,OAAO,IAAI,gBAAgB,CACzB,qBAAqB,EACrB,GAAG,IAAI,CAAC,MAAM,yFAAyF,GAAG,CAAC,OAAO,EAAE,EACpH,EAAE,GAAG,GAAG,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,EACzD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,gBAAgB,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,0BAA0B,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AAChH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,MAAwB,EAAE,MAAc;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE5D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,GAAG,MAAM,gDAAgD,EAAE;YAC1G,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IACD,2EAA2E;IAC3E,8EAA8E;IAC9E,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,GAAG,MAAM,qDAAqD,EAAE;YAC/G,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,MAAmE,CAAC;IACnF,MAAM,OAAO,GAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAW,CAAC,MAAM,CAC9E,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,MAAM,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,CACvF,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,GAAG,MAAM,yBAAyB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACtD,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;IACJ,CAAC;IACD,mEAAmE;IACnE,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,yEAAyE;IACzE,8EAA8E;IAC9E,wCAAwC;IACxC,MAAM,QAAQ,GAAI,MAAM,CAAC,QAAmB,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,GAAG,MAAM,+BAA+B,QAAQ,yFAAyF,EACzI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,MAAM,CAAC,MAAgB;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAoB;QACvC,MAAM,EAAE,MAAM,CAAC,MAAgB;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAwB,EAAE,MAAc;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAA2B;QACrC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;IAEnD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,IAAI,gBAAgB,CACzB,cAAc,EACd,GAAG,MAAM,0CAA0C,IAAI,EAAE,EACzD,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAClH,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,IAAI,gBAAgB,CACzB,SAAS,EACT,GAAG,MAAM,kGAAkG,EAC3G,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,IAAI,gBAAgB,CAAC,cAAc,EAAE,GAAG,MAAM,8BAA8B,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,gBAAgB,CAAC,YAAY,EAAE,GAAG,MAAM,qCAAqC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,IAAI,gBAAgB,CAAC,UAAU,EAAE,GAAG,MAAM,qCAAqC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;AACxG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAElD,qEAAqE;AACrE,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,CACL,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IACvD,2BAA2B;IAC3B,mCAAmC;IACnC,iCAAiC;IACjC,2BAA2B;IAC3B,6BAA6B;IAC7B,wBAAwB;IACxB,gBAAgB;IAChB,YAAY;CACb,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAa7D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,IAAI,GAAG,MAAM,CAAE,GAAiC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACpE,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,IAAI,KAAK,qBAAqB;QAAE,OAAO,UAAU,CAAC;IACtD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;AAChE,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B,CAAC;QAC1D,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,mBAAmB,CAAC,GAAe;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IACvF,OAAO,gCAAgC,IAAI,+BAA+B,CAAC;AAC7E,CAAC;AAED,4FAA4F;AAC5F,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,KAAK,GAAG,gEAAgE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzF,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC"}