@airterm/protocol 0.2.0 → 0.4.0

package/dist/naming.js

@@ -0,0 +1,85 @@
+import { decodeBase64Url, encodeBase64Url } from './capability.js';
+const encoder = new TextEncoder();
+const forbidden = /[\p{Cc}\p{Cf}]/u;
+export function customName(value) {
+    const name = value.trim();
+    if (!name || [...name].length > 80 || forbidden.test(value))
+        throw new Error('Use 1–80 characters without control characters.');
+    return name;
+}
+export function automaticName(value) {
+    if (!value.trim() || forbidden.test(value))
+        return undefined;
+    return [...value].slice(0, 160).join('');
+}
+function canonical(value, length) {
+    if (typeof value !== 'string' || value.length > 22000)
+        throw new Error('Invalid naming encoding');
+    const bytes = decodeBase64Url(value);
+    if (encodeBase64Url(bytes) !== value || length !== undefined && bytes.length !== length)
+        throw new Error('Invalid naming encoding');
+    return bytes;
+}
+function buffer(value) { return value.slice().buffer; }
+function context(identity, sessionId) {
+    if (!/^[1-9][0-9]{0,18}$/.test(identity.accountId) || !Number.isSafeInteger(identity.generation) || identity.generation < 1)
+        throw new Error('Invalid naming identity');
+    canonical(sessionId, 16);
+    return encoder.encode(JSON.stringify(['airterm-names', 1, identity.accountId, identity.generation, sessionId]));
+}
+export function validateSessionNames(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Invalid names');
+    const doc = value;
+    if (Object.keys(doc).some(key => !['defaultName', 'alias', 'tabs'].includes(key)) || typeof doc.defaultName !== 'string' || automaticName(doc.defaultName) !== doc.defaultName || !doc.tabs || typeof doc.tabs !== 'object' || Array.isArray(doc.tabs))
+        throw new Error('Invalid names');
+    if (doc.alias !== undefined && (typeof doc.alias !== 'string' || customName(doc.alias) !== doc.alias))
+        throw new Error('Invalid alias');
+    const tabs = {};
+    for (const [id, title] of Object.entries(doc.tabs)) {
+        if (!/^[1-9][0-9]{0,4}$/.test(id) || Number(id) > 65535 || typeof title !== 'string' || customName(title) !== title)
+            throw new Error('Invalid tab alias');
+        tabs[id] = title;
+    }
+    return { defaultName: doc.defaultName, ...(doc.alias === undefined ? {} : { alias: doc.alias }), tabs };
+}
+export async function encryptSessionNames(publicKey, identity, sessionId, names) {
+    const data = encoder.encode(JSON.stringify(validateSessionNames(names)));
+    if (data.length > 11000)
+        throw new Error('Naming document is too large');
+    const aad = buffer(context(identity, sessionId));
+    const raw = crypto.getRandomValues(new Uint8Array(32));
+    try {
+        const key = await crypto.subtle.importKey('raw', buffer(raw), 'AES-GCM', false, ['encrypt']);
+        const rsa = await crypto.subtle.importKey('spki', buffer(canonical(publicKey)), { name: 'RSA-OAEP', hash: 'SHA-256' }, false, ['encrypt']);
+        if (rsa.algorithm.modulusLength !== 3072)
+            throw new Error('Invalid public key');
+        const nonce = crypto.getRandomValues(new Uint8Array(12));
+        const envelope = { version: 1, accountId: identity.accountId, generation: identity.generation, sessionId,
+            wrappedKey: encodeBase64Url(new Uint8Array(await crypto.subtle.encrypt({ name: 'RSA-OAEP', label: aad }, rsa, buffer(raw)))),
+            nonce: encodeBase64Url(nonce), ciphertext: encodeBase64Url(new Uint8Array(await crypto.subtle.encrypt({ name: 'AES-GCM', iv: buffer(nonce), additionalData: aad }, key, buffer(data)))) };
+        if (encoder.encode(JSON.stringify(envelope)).length > 16384)
+            throw new Error('Naming document is too large');
+        return envelope;
+    }
+    finally {
+        raw.fill(0);
+    }
+}
+export async function decryptSessionNames(privateKey, identity, sessionId, envelope) {
+    if (!envelope || encoder.encode(JSON.stringify(envelope)).length > 16384 || Object.keys(envelope).sort().join(',') !== 'accountId,ciphertext,generation,nonce,sessionId,version,wrappedKey' || envelope.version !== 1 || envelope.accountId !== identity.accountId || envelope.generation !== identity.generation || envelope.sessionId !== sessionId)
+        throw new Error('Invalid naming envelope');
+    const aad = buffer(context(identity, sessionId));
+    const raw = new Uint8Array(await crypto.subtle.decrypt({ name: 'RSA-OAEP', label: aad }, privateKey, buffer(canonical(envelope.wrappedKey, 384))));
+    try {
+        if (raw.length !== 32)
+            throw new Error('Invalid naming key');
+        const key = await crypto.subtle.importKey('raw', buffer(raw), 'AES-GCM', false, ['decrypt']);
+        const data = await crypto.subtle.decrypt({ name: 'AES-GCM', iv: buffer(canonical(envelope.nonce, 12)), additionalData: aad }, key, buffer(canonical(envelope.ciphertext)));
+        return validateSessionNames(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(data)));
+    }
+    finally {
+        raw.fill(0);
+    }
+}
+//# sourceMappingURL=naming.js.map

package/dist/naming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.js","sourceRoot":"","sources":["../src/naming.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAKnE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,UAAU,UAAU,CAAC,KAAa;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAChI,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAa;IACvC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC7C,CAAC;AACD,SAAS,SAAS,CAAC,KAAc,EAAE,MAAe;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpI,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,MAAM,CAAC,KAAiB,IAAiB,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,MAAqB,CAAC,CAAC,CAAC;AAC/F,SAAS,OAAO,CAAC,QAAsB,EAAE,SAAiB;IACtD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACxK,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,eAAe,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AACpH,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAClG,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAC,OAAO,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACvR,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACxI,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1J,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAe,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;AACtH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,QAAsB,EAAE,SAAiB,EAAE,KAAmB;IACvH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3I,IAAK,GAAG,CAAC,SAAmC,CAAC,aAAa,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3G,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS;YACpH,UAAU,EAAE,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5H,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9L,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC7G,OAAO,QAAQ,CAAC;IACpB,CAAC;YAAS,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAqB,EAAE,QAAsB,EAAE,SAAiB,EAAE,QAAwB;IAChI,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,oEAAoE,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClY,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnJ,IAAI,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3K,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC;YAAS,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC"}

package/dist/outbound-queue.d.ts

@@ -0,0 +1,17 @@
+import { type InnerFrame } from './framing.js';
+export declare const OUTPUT_HIGH_WATER_BYTES: number;
+export declare const OUTPUT_LOW_WATER_BYTES: number;
+export declare const OUTPUT_MAX_PENDING_BYTES: number;
+export declare class OutboundQueue {
+    #private;
+    private readonly bufferedAmount;
+    private readonly write;
+    private readonly onBackpressure;
+    private readonly onFailure;
+    constructor(bufferedAmount: () => number, write: (frame: InnerFrame, done: (error?: Error | null) => void) => void, onBackpressure: (paused: boolean) => void, onFailure: (error: Error) => void);
+    get pendingBytes(): number;
+    send(frame: InnerFrame): Promise<void>;
+    discard(predicate: (frame: InnerFrame) => boolean): void;
+    close(error?: Error): void;
+}
+//# sourceMappingURL=outbound-queue.d.ts.map

package/dist/outbound-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-queue.d.ts","sourceRoot":"","sources":["../src/outbound-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEnE,eAAO,MAAM,uBAAuB,QAAc,CAAC;AACnD,eAAO,MAAM,sBAAsB,QAAa,CAAC;AACjD,eAAO,MAAM,wBAAwB,QAAgB,CAAC;AAUtD,qBAAa,aAAa;;IAYlB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAItB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS;gBANT,cAAc,EAAE,MAAM,MAAM,EAC5B,KAAK,EAAE,CACpB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI,KAAK,IAAI,KACnC,IAAI,EACQ,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EACzC,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI;IAGtD,IAAW,YAAY,IAAI,MAAM,CAIhC;IAEM,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBtC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,GAAG,IAAI;IAWxD,KAAK,CAAC,KAAK,QAA0C,GAAG,IAAI;CAqFtE"}

package/dist/outbound-queue.js

@@ -0,0 +1,150 @@
+import { INNER_HEADER_BYTES } from './framing.js';
+export const OUTPUT_HIGH_WATER_BYTES = 256 * 1_024;
+export const OUTPUT_LOW_WATER_BYTES = 64 * 1_024;
+export const OUTPUT_MAX_PENDING_BYTES = 1_024 * 1_024;
+const FRAME_OVERHEAD_BYTES = INNER_HEADER_BYTES + 18;
+export class OutboundQueue {
+    bufferedAmount;
+    write;
+    onBackpressure;
+    onFailure;
+    #queue = [];
+    #bytes = 0;
+    #inFlight;
+    #timer;
+    #closed = false;
+    #paused = false;
+    #pumping = false;
+    #progressAt = Date.now();
+    #lastBuffered = 0;
+    constructor(bufferedAmount, write, onBackpressure, onFailure) {
+        this.bufferedAmount = bufferedAmount;
+        this.write = write;
+        this.onBackpressure = onBackpressure;
+        this.onFailure = onFailure;
+    }
+    get pendingBytes() {
+        return (this.#bytes + (this.#inFlight?.bytes ?? 0) + this.bufferedAmount());
+    }
+    send(frame) {
+        if (this.#closed)
+            return Promise.reject(new Error('Gateway output queue is closed.'));
+        if (this.pendingBytes === 0)
+            this.#progressAt = Date.now();
+        const bytes = frame.payload.byteLength + FRAME_OVERHEAD_BYTES;
+        if (this.pendingBytes + bytes > OUTPUT_MAX_PENDING_BYTES) {
+            const error = new Error('Gateway output exceeded its 1 MiB limit.');
+            this.#fail(error);
+            return Promise.reject(error);
+        }
+        const pending = new Promise((resolve, reject) => {
+            this.#queue.push({
+                frame: { ...frame, payload: Uint8Array.from(frame.payload) },
+                bytes,
+                resolve,
+                reject,
+            });
+            this.#bytes += bytes;
+        });
+        this.#updatePressure();
+        this.#pump();
+        return pending;
+    }
+    discard(predicate) {
+        for (let index = this.#queue.length - 1; index >= 0; index--) {
+            const item = this.#queue[index];
+            if (!predicate(item.frame))
+                continue;
+            this.#queue.splice(index, 1);
+            this.#bytes -= item.bytes;
+            item.reject(new Error('Relay traffic paused by usage policy.'));
+        }
+        this.#updatePressure();
+    }
+    close(error = new Error('Gateway transport changed.')) {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        clearTimeout(this.#timer);
+        this.#timer = undefined;
+        for (const item of this.#queue.splice(0))
+            item.reject(error);
+        this.#inFlight?.reject(error);
+        this.#inFlight = undefined;
+        this.#bytes = 0;
+        if (this.#paused)
+            this.onBackpressure(false);
+        this.#paused = false;
+    }
+    #pump() {
+        if (this.#closed || this.#pumping)
+            return;
+        this.#pumping = true;
+        try {
+            while (!this.#closed &&
+                this.#inFlight === undefined &&
+                this.bufferedAmount() < OUTPUT_HIGH_WATER_BYTES) {
+                const item = this.#queue.shift();
+                if (item === undefined)
+                    break;
+                this.#bytes -= item.bytes;
+                this.#inFlight = item;
+                this.write(item.frame, (error) => {
+                    if (this.#closed || this.#inFlight !== item)
+                        return;
+                    if (error != null) {
+                        this.#fail(error);
+                        return;
+                    }
+                    this.#inFlight = undefined;
+                    this.#progressAt = Date.now();
+                    item.resolve();
+                    this.#updatePressure();
+                    this.#pump();
+                });
+            }
+        }
+        catch (error) {
+            this.#fail(error instanceof Error ? error : new Error(String(error)));
+        }
+        finally {
+            this.#pumping = false;
+        }
+        this.#updatePressure();
+        if (!this.#closed &&
+            this.pendingBytes > 0 &&
+            this.#timer === undefined) {
+            this.#timer = setTimeout(() => {
+                this.#timer = undefined;
+                const buffered = this.bufferedAmount();
+                if (buffered < this.#lastBuffered)
+                    this.#progressAt = Date.now();
+                this.#lastBuffered = buffered;
+                if (Date.now() - this.#progressAt >= 30_000) {
+                    this.#fail(new Error('Gateway output stalled for 30 seconds.'));
+                }
+                else {
+                    this.#pump();
+                }
+            }, 10);
+        }
+    }
+    #updatePressure() {
+        if (this.#closed)
+            return;
+        const paused = this.#paused
+            ? this.pendingBytes >= OUTPUT_LOW_WATER_BYTES
+            : this.pendingBytes >= OUTPUT_HIGH_WATER_BYTES;
+        if (paused !== this.#paused) {
+            this.#paused = paused;
+            this.onBackpressure(paused);
+        }
+        if (this.pendingBytes === 0)
+            this.#progressAt = Date.now();
+    }
+    #fail(error) {
+        this.close(error);
+        this.onFailure(error);
+    }
+}
+//# sourceMappingURL=outbound-queue.js.map

package/dist/outbound-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-queue.js","sourceRoot":"","sources":["../src/outbound-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAmB,MAAM,cAAc,CAAC;AAEnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,GAAG,KAAK,CAAC;AACnD,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,KAAK,CAAC;AACjD,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,GAAG,KAAK,CAAC;AACtD,MAAM,oBAAoB,GAAG,kBAAkB,GAAG,EAAE,CAAC;AASrD,MAAM,OAAO,aAAa;IAYD;IACA;IAIA;IACA;IAjBZ,MAAM,GAAmB,EAAE,CAAC;IACrC,MAAM,GAAG,CAAC,CAAC;IACX,SAAS,CAA2B;IACpC,MAAM,CAA4C;IAClD,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAAG,KAAK,CAAC;IACjB,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,aAAa,GAAG,CAAC,CAAC;IAElB,YACqB,cAA4B,EAC5B,KAGR,EACQ,cAAyC,EACzC,SAAiC;QANjC,mBAAc,GAAd,cAAc,CAAc;QAC5B,UAAK,GAAL,KAAK,CAGb;QACQ,mBAAc,GAAd,cAAc,CAA2B;QACzC,cAAS,GAAT,SAAS,CAAwB;IACnD,CAAC;IAEJ,IAAW,YAAY;QACnB,OAAO,CACH,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CACrE,CAAC;IACN,CAAC;IAEM,IAAI,CAAC,KAAiB;QACzB,IAAI,IAAI,CAAC,OAAO;YACZ,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,oBAAoB,CAAC;QAC9D,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,GAAG,wBAAwB,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACpE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACb,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;gBAC5D,KAAK;gBACL,OAAO;gBACP,MAAM;aACT,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,OAAO,CAAC;IACnB,CAAC;IAEM,OAAO,CAAC,SAAyC;QACpD,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YACrC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,eAAe,EAAE,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,4BAA4B,CAAC;QACxD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAChB,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,KAAK;QACD,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACD,OACI,CAAC,IAAI,CAAC,OAAO;gBACb,IAAI,CAAC,SAAS,KAAK,SAAS;gBAC5B,IAAI,CAAC,cAAc,EAAE,GAAG,uBAAuB,EACjD,CAAC;gBACC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM;gBAC9B,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC;gBAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC7B,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;wBAAE,OAAO;oBACpD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;wBAChB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBAClB,OAAO;oBACX,CAAC;oBACD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;oBAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACf,IAAI,CAAC,eAAe,EAAE,CAAC;oBACvB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CACN,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC5D,CAAC;QACN,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IACI,CAAC,IAAI,CAAC,OAAO;YACb,IAAI,CAAC,YAAY,GAAG,CAAC;YACrB,IAAI,CAAC,MAAM,KAAK,SAAS,EAC3B,CAAC;YACC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvC,IAAI,QAAQ,GAAG,IAAI,CAAC,aAAa;oBAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClC,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;gBAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC;oBAC1C,IAAI,CAAC,KAAK,CACN,IAAI,KAAK,CAAC,wCAAwC,CAAC,CACtD,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACJ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;YACL,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,CAAC;IACL,CAAC;IAED,eAAe;QACX,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO;YACvB,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,sBAAsB;YAC7C,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,uBAAuB,CAAC;QACnD,IAAI,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,KAAY;QACd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;CACJ"}

package/dist/p2p.d.ts

@@ -0,0 +1,37 @@
+import { type InnerFrame } from './framing.js';
+export declare const P2P_FEATURE: "p2p-v1";
+export declare const P2P_MIN_BUFFER_BYTES: number;
+export declare const P2P_NEGOTIATION_MS = 10000;
+export declare const P2P_RECOVERY_MS = 30000;
+export declare const DEFAULT_STUN_URLS: string[];
+export type P2PMessage = {
+    type: 'accept';
+    id: string;
+    attempt: boolean;
+} | {
+    type: 'configure';
+    id: string;
+    stun: string[];
+} | {
+    type: 'offer' | 'answer';
+    id: string;
+    sdp: string;
+} | {
+    type: 'candidate';
+    id: string;
+    candidate: string;
+    mid: string;
+} | {
+    type: 'ready' | 'barrier' | 'commit' | 'committed' | 'fallback' | 'decline' | 'detach' | 'ping' | 'pong';
+    id: string;
+};
+export declare function validateStunUrls(value: unknown): string[];
+export declare function decodeP2PMessage(payload: Uint8Array): P2PMessage;
+export declare function p2pFrame(message: P2PMessage): InnerFrame;
+/** A negotiation is bounded in both directions, including rejected messages. */
+export declare class SignalingBudget {
+    #private;
+    consume(payload: Uint8Array): P2PMessage;
+}
+export declare function directConnectionId(pairing: string, id: string): string;
+//# sourceMappingURL=p2p.d.ts.map

package/dist/p2p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"p2p.d.ts","sourceRoot":"","sources":["../src/p2p.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/D,eAAO,MAAM,WAAW,EAAG,QAAiB,CAAC;AAC7C,eAAO,MAAM,oBAAoB,QAAa,CAAC;AAC/C,eAAO,MAAM,kBAAkB,QAAS,CAAC;AACzC,eAAO,MAAM,eAAe,QAAS,CAAC;AACtC,eAAO,MAAM,iBAAiB,UAAmC,CAAC;AAClE,MAAM,MAAM,UAAU,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjE;IACI,IAAI,EACE,OAAO,GACP,SAAS,GACT,QAAQ,GACR,WAAW,GACX,UAAU,GACV,SAAS,GACT,QAAQ,GACR,MAAM,GACN,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACd,CAAC;AAGR,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAkBzD;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,CAmDhE;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,CAIxD;AAED,gFAAgF;AAChF,qBAAa,eAAe;;IAGjB,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU;CASlD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAItE"}

package/dist/p2p.js

@@ -0,0 +1,91 @@
+import { InnerFrameType } from './framing.js';
+export const P2P_FEATURE = 'p2p-v1';
+export const P2P_MIN_BUFFER_BYTES = 512 * 1024;
+export const P2P_NEGOTIATION_MS = 10_000;
+export const P2P_RECOVERY_MS = 30_000;
+export const DEFAULT_STUN_URLS = ['stun:stun.l.google.com:19302'];
+const encoder = new TextEncoder();
+export function validateStunUrls(value) {
+    if (!Array.isArray(value) ||
+        value.length > 4 ||
+        value.some((url) => typeof url !== 'string' ||
+            url.length > 256 ||
+            !/^stun:(?:[a-zA-Z0-9.-]+|\[[a-fA-F0-9:]+\])(?::[0-9]{1,5})?$/.test(url) ||
+            (/:([0-9]+)$/.test(url) &&
+                (Number(url.match(/:([0-9]+)$/)?.[1]) < 1 ||
+                    Number(url.match(/:([0-9]+)$/)?.[1]) > 65535))))
+        throw new Error('Expected up to four STUN URLs without credentials.');
+    return [...value];
+}
+export function decodeP2PMessage(payload) {
+    if (payload.byteLength > 34 * 1024)
+        throw new Error('P2P message exceeds limit.');
+    const value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(payload));
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Invalid P2P message.');
+    const v = value;
+    if (typeof v.id !== 'string' || !/^[a-f0-9]{32}$/.test(v.id))
+        throw new Error('Invalid negotiation ID.');
+    const id = v.id;
+    switch (v.type) {
+        case 'accept':
+            if (typeof v.attempt !== 'boolean')
+                break;
+            return { type: v.type, id, attempt: v.attempt };
+        case 'configure':
+            return { type: v.type, id, stun: validateStunUrls(v.stun) };
+        case 'offer':
+        case 'answer':
+            if (typeof v.sdp !== 'string' ||
+                encoder.encode(v.sdp).length > 32 * 1024 ||
+                !/^v=0\r?\n/.test(v.sdp) ||
+                !/^m=application /m.test(v.sdp) ||
+                /^m=(?!application )/m.test(v.sdp))
+                break;
+            return { type: v.type, id, sdp: v.sdp };
+        case 'candidate':
+            if (typeof v.candidate !== 'string' ||
+                encoder.encode(v.candidate).length > 2048 ||
+                !/^candidate:/.test(v.candidate) ||
+                typeof v.mid !== 'string' ||
+                v.mid.length > 64)
+                break;
+            return { type: v.type, id, candidate: v.candidate, mid: v.mid };
+        case 'ready':
+        case 'barrier':
+        case 'commit':
+        case 'committed':
+        case 'fallback':
+        case 'decline':
+        case 'detach':
+        case 'ping':
+        case 'pong':
+            return { type: v.type, id };
+    }
+    throw new Error('Invalid P2P message.');
+}
+export function p2pFrame(message) {
+    const payload = encoder.encode(JSON.stringify(message));
+    decodeP2PMessage(payload);
+    return { type: InnerFrameType.P2PControl, ptyId: 0, sequence: 0n, payload };
+}
+/** A negotiation is bounded in both directions, including rejected messages. */
+export class SignalingBudget {
+    #bytes = 0;
+    #candidates = 0;
+    consume(payload) {
+        this.#bytes += payload.byteLength;
+        if (this.#bytes > 256 * 1024)
+            throw new Error('Signaling budget exceeded.');
+        const message = decodeP2PMessage(payload);
+        if (message.type === 'candidate' && ++this.#candidates > 64)
+            throw new Error('Too many ICE candidates.');
+        return message;
+    }
+}
+export function directConnectionId(pairing, id) {
+    if (!pairing || !/^[a-f0-9]{32}$/.test(id))
+        throw new Error('Invalid direct connection binding.');
+    return JSON.stringify(['airterm-direct-v1', pairing, id]);
+}
+//# sourceMappingURL=p2p.js.map

package/dist/p2p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"p2p.js","sourceRoot":"","sources":["../src/p2p.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAmB,MAAM,cAAc,CAAC;AAE/D,MAAM,CAAC,MAAM,WAAW,GAAG,QAAiB,CAAC;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,8BAA8B,CAAC,CAAC;AAmBlE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC3C,IACI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,IAAI,CACN,CAAC,GAAG,EAAE,EAAE,CACJ,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,CAAC,MAAM,GAAG,GAAG;YAChB,CAAC,6DAA6D,CAAC,IAAI,CAC/D,GAAG,CACN;YACD,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;gBACnB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;oBACrC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAC7D;QAED,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAmB;IAChD,IAAI,OAAO,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI;QAC9B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC7B,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAC5D,CAAC;IACF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAChB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACT,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM;YAC1C,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACpD,KAAK,WAAW;YACZ,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ;YACT,IACI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;gBACzB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;gBACxC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBACxB,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC/B,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBAElC,MAAM;YACV,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC5C,KAAK,WAAW;YACZ,IACI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;gBAC/B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,IAAI;gBACzC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;gBACzB,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE;gBAEjB,MAAM;YACV,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QACpE,KAAK,OAAO,CAAC;QACb,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,WAAW,CAAC;QACjB,KAAK,UAAU,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACP,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAmB;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AAChF,CAAC;AAED,gFAAgF;AAChF,MAAM,OAAO,eAAe;IACxB,MAAM,GAAG,CAAC,CAAC;IACX,WAAW,GAAG,CAAC,CAAC;IACT,OAAO,CAAC,OAAmB;QAC9B,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI;YACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,IAAI,CAAC,WAAW,GAAG,EAAE;YACvD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC;IACnB,CAAC;CACJ;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,EAAU;IAC1D,IAAI,CAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC"}

package/dist/pairing.d.ts

@@ -0,0 +1,18 @@
+import { type SealedValue } from './vault.js';
+export interface PairingApproval {
+    version: 1;
+    pairingId: string;
+    accountId: string;
+    email: string;
+    generation: number;
+    publicKey: string;
+    fingerprint: string;
+    token: string;
+}
+export interface EncryptedPairing extends SealedValue {
+    version: 1;
+}
+export declare function validatePairingApproval(value: PairingApproval, pairingId: string): Promise<void>;
+export declare function encryptPairingApproval(value: PairingApproval, secret: Uint8Array): Promise<EncryptedPairing>;
+export declare function decryptPairingApproval(value: EncryptedPairing, secret: Uint8Array, pairingId: string): Promise<PairingApproval>;
+//# sourceMappingURL=pairing.d.ts.map

package/dist/pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AACA,OAAO,EAA0C,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAEtF,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IAAG,OAAO,EAAE,CAAC,CAAA;CAAE;AAYpE,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAItG;AACD,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAOlH;AACD,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAUrI"}

package/dist/pairing.js

@@ -0,0 +1,48 @@
+import { decodeBase64Url, encodeBase64Url } from './capability.js';
+import { publicKeyFingerprint, randomVaultBytes } from './vault.js';
+const bytes = (value) => new Uint8Array(value).buffer;
+function decode(value, size) {
+    const result = decodeBase64Url(value);
+    if (result.length !== size || encodeBase64Url(result) !== value)
+        throw new Error('Invalid pairing value');
+    return result;
+}
+async function key(secret, pairingId) {
+    if (secret.length !== 32)
+        throw new Error('Invalid pairing secret');
+    const source = await crypto.subtle.importKey('raw', bytes(secret), 'HKDF', false, ['deriveKey']);
+    return crypto.subtle.deriveKey({ name: 'HKDF', hash: 'SHA-256', salt: bytes(decode(pairingId, 16)), info: new TextEncoder().encode('airterm/pairing/v1/approval') }, source, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+export async function validatePairingApproval(value, pairingId) {
+    if (!value || value.version !== 1 || value.pairingId !== pairingId || !/^[1-9][0-9]{0,18}$/.test(value.accountId) || !Number.isSafeInteger(value.generation) || value.generation < 1 || typeof value.email !== 'string' || value.email.length > 254 || !/^[^\s@\x00-\x1f\x7f]+@[^\s@\x00-\x1f\x7f]+$/.test(value.email))
+        throw new Error('Invalid pairing identity');
+    decode(value.token, 32);
+    if (await publicKeyFingerprint(value.publicKey) !== value.fingerprint)
+        throw new Error('Invalid public key fingerprint');
+}
+export async function encryptPairingApproval(value, secret) {
+    await validatePairingApproval(value, value.pairingId);
+    const nonce = randomVaultBytes(12);
+    const data = new TextEncoder().encode(JSON.stringify(value));
+    if (data.length > 4096)
+        throw new Error('Oversized pairing approval');
+    const ciphertext = await crypto.subtle.encrypt({ name: 'AES-GCM', iv: bytes(nonce), additionalData: new TextEncoder().encode(value.pairingId) }, await key(secret, value.pairingId), bytes(data));
+    return { version: 1, nonce: encodeBase64Url(nonce), ciphertext: encodeBase64Url(new Uint8Array(ciphertext)) };
+}
+export async function decryptPairingApproval(value, secret, pairingId) {
+    if (!value || value.version !== 1 || typeof value.ciphertext !== 'string' || value.ciphertext.length > 5500)
+        throw new Error('Invalid pairing envelope');
+    const ciphertext = decodeBase64Url(value.ciphertext);
+    if (encodeBase64Url(ciphertext) !== value.ciphertext)
+        throw new Error('Invalid pairing encoding');
+    const raw = new Uint8Array(await crypto.subtle.decrypt({ name: 'AES-GCM', iv: bytes(decode(value.nonce, 12)), additionalData: new TextEncoder().encode(pairingId) }, await key(secret, pairingId), bytes(ciphertext)));
+    try {
+        const result = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(raw));
+        await validatePairingApproval(result, pairingId);
+        return result;
+    }
+    finally {
+        raw.fill(0);
+    }
+}
+//# sourceMappingURL=pairing.js.map

package/dist/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAoB,MAAM,YAAY,CAAC;AAatF,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAe,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;AAC/E,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY;IACvC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC;AAClB,CAAC;AACD,KAAK,UAAU,GAAG,CAAC,MAAkB,EAAE,SAAiB;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAClP,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAsB,EAAE,SAAiB;IACnF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACrW,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxB,IAAI,MAAM,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AAC7H,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAsB,EAAE,MAAkB;IACnF,MAAM,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClM,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;AAClH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAuB,EAAE,MAAkB,EAAE,SAAiB;IACvG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzJ,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,eAAe,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAClG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACvN,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAoB,CAAC;QACpG,MAAM,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAClB,CAAC;YAAS,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC"}

package/dist/peer-transport.d.ts

@@ -0,0 +1,31 @@
+import { type InnerFrame } from './framing.js';
+import { type RtcAdapterFactory } from './direct-negotiation.js';
+/** Per-pairing policy. The caller owns relay reconnect and browser-page attempt policy. */
+export declare class PeerTransport {
+    #private;
+    private readonly options;
+    constructor(options: {
+        browser: boolean;
+        sessionId: string;
+        psk: Uint8Array;
+        pairing: string;
+        factory: RtcAdapterFactory;
+        stun: string[];
+        relay: (frame: InnerFrame) => Promise<void>;
+        frame: (frame: InnerFrame) => void;
+        accepted: () => void;
+        busy: () => boolean;
+        freeze: (frozen: boolean) => void;
+        pressure: (paused: boolean) => void;
+        changed: (direct: boolean) => void;
+        fallback: () => void;
+    });
+    get direct(): boolean;
+    get frozen(): boolean;
+    accept(attempt: boolean): void;
+    send(frame: InnerFrame): Promise<void>;
+    receive(frame: InnerFrame): void;
+    fallback(): void;
+    close(): void;
+}
+//# sourceMappingURL=peer-transport.d.ts.map

package/dist/peer-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-transport.d.ts","sourceRoot":"","sources":["../src/peer-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAEH,KAAK,iBAAiB,EACzB,MAAM,yBAAyB,CAAC;AAIjC,2FAA2F;AAC3F,qBAAa,aAAa;;IAUlB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE;QACtB,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,UAAU,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,iBAAiB,CAAC;QAC3B,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;QACnC,QAAQ,EAAE,MAAM,IAAI,CAAC;QACrB,IAAI,EAAE,MAAM,OAAO,CAAC;QACpB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QAClC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QACpC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QACnC,QAAQ,EAAE,MAAM,IAAI,CAAC;KACxB;IAEL,IAAW,MAAM,IAAI,OAAO,CAE3B;IACD,IAAW,MAAM,IAAI,OAAO,CAE3B;IACM,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAY9B,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtC,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAyDhC,QAAQ,IAAI,IAAI;IAKhB,KAAK,IAAI,IAAI;CAoDvB"}