@bopen-io/messagebox-server 1.1.5

package/README.md

@@ -0,0 +1,372 @@
+# Message Box Server
+
+A secure, peer-to-peer message routing server designed for the Bitcoin SV ecosystem. Supports both HTTP and WebSocket message transport, encrypted payloads, identity-based routing, and overlay advertisement via SHIP.
+
+## Table of Contents
+ 
+1. [Overview](#1-overview)  
+2. [Concepts](#2-concepts)  
+3. [Environment Variables](#3-environment-variables)  
+4. [Quick Start](#4-quick-start)  
+5. [Examples](#5-examples)  
+6. [API Reference](#6-api-reference)  
+   - [POST /sendMessage](#post-sendmessage)  
+   - [POST /listMessages](#post-listmessages)  
+   - [POST /acknowledgeMessage](#post-acknowledgemessage)  
+7. [WebSocket Support](#7-websocket-support)  
+8. [Authentication](#8-authentication)  
+9. [Scripts](#9-scripts)  
+10. [Deploying](#10-deploying)  
+11. [License](#11-license)
+
+## 1. Overview
+
+MessageBox is a peer-to-peer messaging API that enables secure, encrypted, and authenticated communication between users on the MetaNet. This is primarily achieved through a message-box architecture combined with optional overlay routing and real-time WebSocket transport.
+
+When a user sends a message, they must specify the messageBox type and the intended recipient (an identity key). This design allows for protocol-specific messageBox types to be defined at higher application layers, while maintaining clear separation of messages by type and recipient. Each message is routed into a box associated with a specific recipient and use case.
+
+Security is a critical aspect of MessageBox. It relies on [AuthExpress middleware](https://github.com/bitcoin-sv/auth-express-middleware) to ensure that only the recipient can access and acknowledge their own messages. Encrypted payloads are supported automatically following [BRC-2](https://github.com/bitcoin-sv/BRCs/blob/master/wallet/0002.md), using secure symmetric encryption between authenticated peers.
+
+MessageBox also supports [@bsv/authsocket](https://www.npmjs.com/package/@bsv/authsocket) for real-time authenticated WebSocket communication. This enables clients to receive messages instantly and interact with rooms associated with their identity key and chosen messageBox.
+
+To interact with MessageBox, use [MessageBoxClient](https://github.com/bitcoin-sv/p2p), the client-side library designed to handle authentication, encryption, WebSocket communication, and overlay resolution.
+
+## 2. Concepts
+- **Identity Key:** All messages are addressed to an identity key (a public key)
+- **MessageBox:** A named message stream associated with an identity key (e.g., payment_inbox)
+- **Encrypted Payloads:** Messages can be AES-encrypted and include metadata
+- **Live Messaging:** Clients can join WebSocket rooms and receive messages in real-time
+- **Acknowledgment:** Messages must be acknowledged to be removed from the database
+________________________________________
+
+## 3. Environment Variables
+**Variables**
+
+NODE_ENV - Set to development, staging, or production
+
+PORT - Port for the HTTP server (default: 8080 or 3000)
+
+ROUTING_PREFIX - (Optional) Prefix for all HTTP and WebSocket routes (e.g., /api)
+
+HOSTING_DOMAIN - (Optional) Full domain where this server is hosted (used in overlay metadata)
+
+SERVER_PRIVATE_KEY - Required. 256-bit hex private key used for identity, signing, and authentication
+
+WALLET_STORAGE_URL - URL of a wallet-storage service that stores key derivation metadata
+
+NETWORK - Target network chain (e.g., main, test, or regtest)
+
+KNEX_DB_CONNECTION - (Optional) JSON-formatted connection string for MySQL/Knex (if not using default)
+
+ENABLE_WEBSOCKETS - Set to 'true' to enable real-time messaging over WebSocket
+
+LOGGING_ENABLED - Set to 'true' to enable verbose debug logging in any environment
+
+MIGRATE_KEY - (Optional) Key used to authorize protected migration operations, if required
+
+________________________________________
+
+## 4. Quick Start
+
+To run the MessageBox Server locally or in a hosted environment, follow the steps below.
+
+1. **Clone the Repository**
+```bash
+git clone https://github.com/bitcoin-sv/messagebox-server.git
+cd messagebox-server
+```
+
+2. **Configure Environment Variables**
+Create a .env file based on the variables listed in the Environment Variables section:
+
+```bash
+cp .env.example .env
+```
+
+Then fill in or update the necessary fields in .env, including:
+
+SERVER_PRIVATE_KEY – your root private key for identity/auth
+
+WALLET_STORAGE_URL – points to a wallet-storage instance
+
+(Optional) KNEX_DB_CONNECTION – if you're not using the default MySQL config
+
+For local development, use:
+
+```bash
+.env
+NODE_ENV=development
+BSV_NETWORK=local
+```
+
+3. **Install Dependencies**
+```bash
+npm install
+```
+
+4. **Start the Server**
+
+```bash
+npm run dev
+```
+**Note:**  
+MessageBox Server requires a MySQL database for storing messages.  
+See [Deploying](#10-deploying) for instructions on setting up the required database locally or in production environments.
+
+This launches the Express-based MessageBox Server on the configured port (default: 8080 or 3000 in production). WebSocket support will be enabled if ENABLE_WEBSOCKETS=true in your environment.
+
+You can customize the HTTP port using the PORT variable in .env.
+
+You're now ready to send and receive messages using the MessageBoxClient, test endpoints, and participate in the overlay network.
+
+________________________________________
+
+## 5. Examples
+
+This section provides quick examples for sending, listing, and acknowledging messages using the MessageBoxClient library.
+
+1. **Sending a Message**
+```ts
+import { WalletClient } from '@bsv/sdk'
+import { MessageBoxClient } from '@bsv/p2p'
+
+const wallet = new WalletClient()
+const mb = new MessageBoxClient({
+  walletClient: wallet,
+  host: 'http://localhost:8080' // your MessageBoxServer instance
+})
+
+await mb.sendMessage({
+  recipient: '028d37b941208cd6b8a4c28288eda5f2f16c2b3ab0fcb6d13c18b47fe37b971fc1',
+  messageBox: 'demo_inbox',
+  body: { text: 'Hello there!' }
+})
+```
+
+2. **Listening for Live Messages (WebSocket)**
+```ts
+await mb.initializeConnection()
+
+await mb.listenForLiveMessages({
+  messageBox: 'demo_inbox',
+  onMessage: (msg) => {
+    console.log('New Message:', msg)
+  }
+})
+```
+
+3. **Listing Messages via HTTP**
+```ts
+const messages = await mb.listMessages({
+  messageBox: 'demo_inbox'
+})
+
+console.log('All Messages:', messages)
+```
+
+4. **Acknowledging Messages (Marking as Read)**
+```ts
+const toAcknowledge = messages.map(m => m.messageId.toString())
+
+await mb.acknowledgeMessage({
+  messageIds: toAcknowledge
+})
+```
+
+5. **Sending a Live Message with Fallback**
+```ts
+await mb.sendLiveMessage({
+  recipient: '028d37b941208cd6b8a4c28288eda5f2f16c2b3ab0fcb6d13c18b47fe37b971fc1',
+  messageBox: 'demo_inbox',
+  body: 'This will try WebSocket first, and fallback to HTTP if needed.'
+})
+```
+
+________________________________________
+
+## 6. API Reference
+The MessageBox Server exposes a small set of authenticated HTTP endpoints to support secure, store-and-forward messaging. All routes require identity-based authentication using @bsv/auth-express-middleware.
+
+### POST /sendMessage
+Send a message to a specific recipient’s message box.
+
+**Request Body**
+```json
+{
+  "message": {
+    "recipient": "IDENTITY_PUBLIC_KEY",
+    "messageBox": "payment_inbox",
+    "messageId": "abc123",
+    "body": "{\"amount\":10000}"
+  }
+}
+```
+
+**Response**
+```json
+{
+  "status": "success",
+  "messageId": "abc123",
+  "message": "Your message has been sent to IDENTITY_PUBLIC_KEY"
+}
+```
+
+Messages are persisted in the recipient’s messageBox.
+
+messageId must be globally unique (can be derived using HMAC).
+
+Duplicate messageIds will be ignored.
+
+### POST /listMessages
+List all messages from a given messageBox owned by the authenticated identity.
+
+**Request Body**
+```json
+{
+  "messageBox": "payment_inbox"
+}
+```
+
+**Response**
+```json
+{
+  "status": "success",
+  "messages": [
+    {
+      "messageId": "abc123",
+      "body": "{\"amount\":10000}",
+      "sender": "SENDER_PUBLIC_KEY",
+      "created_at": "2024-12-01T12:00:00Z",
+      "updated_at": "2024-12-01T12:01:00Z"
+    }
+  ]
+}
+```
+
+Message bodies will be returned as strings (plain or encrypted).
+
+Empty arrays are returned if no messages exist or the box is unregistered.
+
+### POST /acknowledgeMessage
+Permanently delete one or more messages after they have been processed.
+
+**Request Body**
+```json
+{
+  "messageIds": ["abc123", "def456"]
+}
+```
+
+**Response**
+```json
+{
+  "status": "success"
+}
+```
+
+This action cannot be undone.
+
+Only messages owned by the authenticated identity can be acknowledged.
+
+Note: All requests must include automatically signed and verified headers following [BRC-103](https://github.com/bitcoin-sv/BRCs/blob/master/peer-to-peer/0103.md) authentication.
+Mutual authentication is handled transparently by [@bsv/auth-express-middleware](https://www.npmjs.com/package/@bsv/auth-express-middleware).
+
+________________________________________
+
+## 7. WebSocket Support
+The MessageBox Server supports real-time messaging over WebSocket using @bsv/authsocket. This allows clients to send and receive messages instantly without polling.
+
+**Connection**
+Clients should connect to the same host and port used by the HTTP server (e.g., ws://localhost:8080) and must authenticate using their identity key.
+
+**Authentication**
+There are two ways to authenticate:
+
+During initial connection: Send the identityKey as part of the connection handshake.
+
+After connecting: Emit an authenticated event with { identityKey }.
+
+Once authenticated, the server emits authenticationSuccess. If the key is missing or invalid, authenticationFailed is returned.
+
+**Room Format**
+Each messageBox uses a room in the format:
+
+```bash
+{identityKey}-{messageBox}
+```
+For example:
+028d37b94120...-payment_inbox
+
+**Events**
+
+authenticated -	Authenticate using an identity key
+joinRoom	- Subscribe to a specific messageBox room
+sendMessage -	Send a message to a room (triggers DB storage + broadcast)
+sendMessageAck-ROOM -	Acknowledgment that the message was received by the server
+sendMessage-ROOM -	Broadcasted message to all listeners in the room
+leaveRoom	- Unsubscribe from a room
+
+**Example WebSocket Usage (Client)**
+```ts
+import { io } from 'socket.io-client'
+
+const socket = io('ws://localhost:8080')
+
+// Step 1: Authenticate after connection
+socket.emit('authenticated', { identityKey })
+
+// Step 2: Join a messageBox room
+socket.emit('joinRoom', '028d...-payment_inbox')
+
+// Step 3: Send a message
+socket.emit('sendMessage', {
+  roomId: '028d...-payment_inbox',
+  message: {
+    messageId: 'abc123',
+    recipient: '028d...',
+    body: JSON.stringify({ hello: 'world' })
+  }
+})
+
+// Step 4: Listen for acknowledgment and broadcast
+socket.on('sendMessageAck-028d...-payment_inbox', (ack) => {
+  console.log('Message acknowledged:', ack)
+})
+
+socket.on('sendMessage-028d...-payment_inbox', (msg) => {
+  console.log('New message received:', msg)
+})
+```
+
+**Notes**
+Messages sent via WebSocket are also persisted in the database.
+
+If a room is not joined or the recipient isn't online, delivery is deferred until the recipient polls via HTTP.
+
+If ENABLE_WEBSOCKETS is not set to 'true', this functionality is disabled.
+
+________________________________________
+## 8. Authentication
+All HTTP and WebSocket communications use full mutual authentication based on [BRC-103](https://github.com/bitcoin-sv/BRCs/blob/master/peer-to-peer/0103.md).
+- HTTP requests are authenticated using [@bsv/auth-express-middleware](https://www.npmjs.com/package/@bsv/auth-express-middleware), with automatically signed and verified headers.
+- WebSocket connections are authenticated using [@bsv/authsocket](https://www.npmjs.com/package/@bsv/authsocket), signing the WebSocket handshake and room interactions.
+
+Clients authenticate automatically when using the [MessageBoxClient](https://github.com/bitcoin-sv/p2p) library. Manual integrations must follow BRC-103 signing conventions.
+
+________________________________________
+
+## 9. Scripts
+```bash
+npm run dev      # Start with hot reloading
+npm run start    # Start in production
+npm run test     # Run all tests
+npm run build    # Compile documentation
+```
+________________________________________
+
+## 10. Deploying
+See [DEPLOYING.md](./DEPLOYING.md) for tips.
+________________________________________
+## 11. License
+This project is released under the [Open BSV License](https://www.bsvlicense.org/).
+

package/knexfile.d.ts

@@ -0,0 +1,5 @@
+import { Knex } from 'knex'
+declare const knexConfig: {
+  [key: string]: Knex.Config
+}
+export default knexConfig

package/knexfile.ts

@@ -0,0 +1,29 @@
+import dotenv from 'dotenv'
+import type { Knex } from 'knex'
+dotenv.config()
+
+const connectionConfig = process.env.KNEX_DB_CONNECTION != null && process.env.KNEX_DB_CONNECTION.trim() !== ''
+  ? JSON.parse(process.env.KNEX_DB_CONNECTION)
+  : undefined
+
+const config: Knex.Config = {
+  client: process.env.KNEX_DB_CLIENT ?? 'mysql2',
+  connection: connectionConfig,
+  useNullAsDefault: true,
+  migrations: {
+    directory: './out/src/migrations'
+  },
+  pool: {
+    min: 0,
+    max: 7,
+    idleTimeoutMillis: 15000
+  }
+}
+
+const knexfile: { [key: string]: Knex.Config } = {
+  development: config,
+  staging: config,
+  production: config
+}
+
+export default knexfile

package/out/knexfile.js

@@ -0,0 +1,25 @@
+import dotenv from 'dotenv';
+dotenv.config();
+const connectionConfig = process.env.KNEX_DB_CONNECTION != null && process.env.KNEX_DB_CONNECTION.trim() !== ''
+    ? JSON.parse(process.env.KNEX_DB_CONNECTION)
+    : undefined;
+const config = {
+    client: process.env.KNEX_DB_CLIENT ?? 'mysql2',
+    connection: connectionConfig,
+    useNullAsDefault: true,
+    migrations: {
+        directory: './out/src/migrations'
+    },
+    pool: {
+        min: 0,
+        max: 7,
+        idleTimeoutMillis: 15000
+    }
+};
+const knexfile = {
+    development: config,
+    staging: config,
+    production: config
+};
+export default knexfile;
+//# sourceMappingURL=knexfile.js.map

package/out/knexfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knexfile.js","sourceRoot":"","sources":["../knexfile.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B,MAAM,CAAC,MAAM,EAAE,CAAA;AAEf,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE;IAC7G,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC5C,CAAC,CAAC,SAAS,CAAA;AAEb,MAAM,MAAM,GAAgB;IAC1B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,QAAQ;IAC9C,UAAU,EAAE,gBAAgB;IAC5B,gBAAgB,EAAE,IAAI;IACtB,UAAU,EAAE;QACV,SAAS,EAAE,sBAAsB;KAClC;IACD,IAAI,EAAE;QACJ,GAAG,EAAE,CAAC;QACN,GAAG,EAAE,CAAC;QACN,iBAAiB,EAAE,KAAK;KACzB;CACF,CAAA;AAED,MAAM,QAAQ,GAAmC;IAC/C,WAAW,EAAE,MAAM;IACnB,OAAO,EAAE,MAAM;IACf,UAAU,EAAE,MAAM;CACnB,CAAA;AAED,eAAe,QAAQ,CAAA"}

package/out/src/app.js

@@ -0,0 +1,160 @@
+/**
+ * @file app.ts
+ * @description
+ * Initializes the MessageBoxServer Express app.
+ *
+ * Responsibilities:
+ * - Parses environment variables and loads config
+ * - Sets up Knex for DB access
+ * - Initializes WalletClient from the BSV SDK
+ * - Mounts Express routes (pre-auth and post-auth)
+ * - Applies auth middleware using wallet identity
+ *
+ * This file exports:
+ * - `app`: the configured Express instance
+ * - `walletReady`: a promise that resolves once the wallet is ready
+ * - `getWallet()`: async accessor for the WalletClient
+ * - `useRoutes()`: middleware + route initialization
+ * - `appReady`: promise that completes once all setup is done
+ */
+import * as dotenv from 'dotenv';
+import express from 'express';
+import bodyParser from 'body-parser';
+import { preAuth, postAuth } from './routes/index.js';
+import { Logger } from './utils/logger.js';
+import sendMessageRoute from './routes/sendMessage.js';
+import { Setup } from '@bsv/wallet-toolbox';
+import knexLib from 'knex';
+import knexConfig from '../knexfile.js';
+import { createAuthMiddleware } from '@bsv/auth-express-middleware';
+import { createPaymentMiddleware } from '@bsv/payment-express-middleware';
+import { setupSwagger } from './swagger.js';
+import * as crypto from 'crypto';
+global.self = { crypto };
+dotenv.config();
+// Create the Express app instance
+export const app = express();
+// Load environment variables
+const { NODE_ENV = 'development', ROUTING_PREFIX = '', SERVER_PRIVATE_KEY, WALLET_STORAGE_URL, BSV_NETWORK = 'mainnet' } = process.env;
+// Enable logger in dev mode or if explicitly enabled
+if (NODE_ENV === 'development' || process.env.LOGGING_ENABLED === 'true') {
+    Logger.enable();
+}
+/**
+ * Knex instance connected based on environment (development, production, or staging).
+ */
+export const knex = knexLib.default?.(NODE_ENV === 'production' || NODE_ENV === 'staging'
+    ? knexConfig.production
+    : knexConfig.development) ?? knexLib(NODE_ENV === 'production' || NODE_ENV === 'staging'
+    ? knexConfig.production
+    : knexConfig.development);
+// Wallet initialization logic
+let _wallet;
+let _resolveReady;
+export const walletReady = new Promise((resolve) => {
+    _resolveReady = resolve;
+});
+/**
+ * @function initializeWallet
+ * @description Initializes the WalletClient with a root identity key and storage backend.
+ *
+ * Loads configuration from the environment and connects to the wallet service.
+ *
+ * @returns {Promise<void>} Resolves when the wallet is initialized.
+ * @throws If SERVER_PRIVATE_KEY is missing or invalid.
+ */
+export async function initializeWallet() {
+    if (SERVER_PRIVATE_KEY == null || SERVER_PRIVATE_KEY.trim() === '') {
+        throw new Error('SERVER_PRIVATE_KEY is not defined in environment variables.');
+    }
+    _wallet = await Setup.createWalletClientNoEnv({
+        chain: BSV_NETWORK === 'testnet' ? 'test' : 'main',
+        rootKeyHex: SERVER_PRIVATE_KEY,
+        storageUrl: WALLET_STORAGE_URL
+    });
+    _resolveReady();
+}
+/**
+ * @function getWallet
+ * @description Waits for the WalletClient to be ready and returns the instance.
+ *
+ * @returns {Promise<WalletInterface>} The initialized wallet client
+ * @throws {Error} If called before the wallet is initialized
+ */
+export async function getWallet() {
+    await walletReady;
+    if (_wallet == null) {
+        throw new Error('Wallet has not been initialized yet.');
+    }
+    return _wallet;
+}
+// Run on app startup to prep wallet and activate routes
+export const appReady = (async () => {
+    await initializeWallet();
+    await useRoutes();
+})();
+/**
+ * @function useRoutes
+ * @description Registers all routes and middleware on the Express app instance.
+ *
+ * Steps:
+ * - Applies JSON body parser
+ * - Enables CORS headers for all routes
+ * - Waits for WalletClient to initialize
+ * - Adds authentication middleware
+ * - Mounts pre-auth and post-auth route handlers
+ *
+ * @returns {Promise<void>} Once all middleware and routes are mounted
+ * @throws If wallet is not available when needed
+ */
+export async function useRoutes() {
+    // Parse incoming JSON bodies with a high limit
+    app.use(bodyParser.json({ limit: '1gb', type: 'application/json' }));
+    // CORS setup
+    app.use((req, res, next) => {
+        res.header('Access-Control-Allow-Origin', '*');
+        res.header('Access-Control-Allow-Headers', '*');
+        res.header('Access-Control-Allow-Methods', '*');
+        res.header('Access-Control-Expose-Headers', '*');
+        res.header('Access-Control-Allow-Private-Network', 'true');
+        if (req.method === 'OPTIONS') {
+            res.sendStatus(200);
+        }
+        else {
+            next();
+        }
+    });
+    // Enable Swagger docs
+    setupSwagger(app);
+    await walletReady;
+    if (_wallet == null) {
+        throw new Error('Wallet is not initialized for auth middleware');
+    }
+    app.use(createAuthMiddleware({
+        wallet: _wallet,
+        logger: console
+    }));
+    app.use(createPaymentMiddleware({
+        wallet: _wallet,
+        calculateRequestPrice: async (req) => {
+            if (req.url.includes('/sendMessage')) {
+                // TODO: Configure a custom price calculation as needed.
+            }
+            return 0;
+        }
+    }));
+    // Register pre-authentication routes (no auth required)
+    preAuth.forEach((route) => {
+        app[route.type](`${String(ROUTING_PREFIX)}${String(route.path)}`, route.func);
+    });
+    // Register post-authentication routes (requires auth header)
+    postAuth.forEach((route) => {
+        if (route.path === '/sendMessage') {
+            app[route.type](`${ROUTING_PREFIX}${route.path}`, sendMessageRoute.func);
+        }
+        else {
+            app[route.type](`${ROUTING_PREFIX}${route.path}`, route.func);
+        }
+    });
+}
+//# sourceMappingURL=app.js.map

package/out/src/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAChC,OAAO,OAMN,MAAM,SAAS,CAAA;AAChB,OAAO,UAAU,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,gBAAgB,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,OAAiB,MAAM,MAAM,CAAA;AACpC,OAAO,UAAU,MAAM,gBAAgB,CAAA;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAC/B,MAAM,CAAC,IAAY,GAAG,EAAE,MAAM,EAAE,CAAA;AAEjC,MAAM,CAAC,MAAM,EAAE,CAAA;AAEf,kCAAkC;AAClC,MAAM,CAAC,MAAM,GAAG,GAAY,OAAO,EAAE,CAAA;AAErC,6BAA6B;AAC7B,MAAM,EACJ,QAAQ,GAAG,aAAa,EACxB,cAAc,GAAG,EAAE,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,GAAG,SAAS,EACxB,GAAG,OAAO,CAAC,GAAG,CAAA;AAEf,qDAAqD;AACrD,IAAI,QAAQ,KAAK,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;IACzE,MAAM,CAAC,MAAM,EAAE,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,IAAI,GAAU,OAAe,CAAC,OAAO,EAAE,CAClD,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,SAAS;IACjD,CAAC,CAAC,UAAU,CAAC,UAAU;IACvB,CAAC,CAAC,UAAU,CAAC,WAAW,CAC3B,IAAK,OAAe,CACnB,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,SAAS;IACjD,CAAC,CAAC,UAAU,CAAC,UAAU;IACvB,CAAC,CAAC,UAAU,CAAC,WAAW,CAC3B,CAAA;AAED,8BAA8B;AAC9B,IAAI,OAAoC,CAAA;AACxC,IAAI,aAAyB,CAAA;AAC7B,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;IACvD,aAAa,GAAG,OAAO,CAAA;AACzB,CAAC,CAAC,CAAA;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,kBAAkB,IAAI,IAAI,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IAChF,CAAC;IAED,OAAO,GAAG,MAAM,KAAK,CAAC,uBAAuB,CAAC;QAC5C,KAAK,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAClD,UAAU,EAAE,kBAAkB;QAC9B,UAAU,EAAE,kBAAkB;KAC/B,CAAC,CAAA;IAEF,aAAa,EAAE,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,WAAW,CAAA;IACjB,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;IAClC,MAAM,gBAAgB,EAAE,CAAA;IACxB,MAAM,SAAS,EAAE,CAAA;AACnB,CAAC,CAAC,EAAE,CAAA;AAEJ;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,+CAA+C;IAC/C,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAA;IAEpE,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;QAC9C,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAA;QAC/C,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAA;QAC/C,GAAG,CAAC,MAAM,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAA;QAChD,GAAG,CAAC,MAAM,CAAC,sCAAsC,EAAE,MAAM,CAAC,CAAA;QAE1D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,EAAE,CAAA;QACR,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,sBAAsB;IACtB,YAAY,CAAC,GAAG,CAAC,CAAA;IAEjB,MAAM,WAAW,CAAA;IACjB,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAClE,CAAC;IAED,GAAG,CAAC,GAAG,CACL,oBAAoB,CAAC;QACnB,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,OAAO;KAChB,CAAC,CACH,CAAA;IAED,GAAG,CAAC,GAAG,CACL,uBAAuB,CAAC;QACtB,MAAM,EAAE,OAAO;QACf,qBAAqB,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;YAC5C,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBACrC,wDAAwD;YAC1D,CAAC;YACD,OAAO,CAAC,CAAA;QACV,CAAC;KACF,CAAC,CACH,CAAA;IAED,wDAAwD;IACxD,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACxB,GAAG,CAAC,KAAK,CAAC,IAAyC,CAAC,CAClD,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAChD,KAAK,CAAC,IAAmF,CAC1F,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,GAAG,CAAC,KAAK,CAAC,IAAyC,CAAC,CAClD,GAAG,cAAc,GAAG,KAAK,CAAC,IAAI,EAAE,EAChC,gBAAgB,CAAC,IAAiC,CACnD,CAAA;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CAAC,IAAyC,CAAC,CAClD,GAAG,cAAc,GAAG,KAAK,CAAC,IAAI,EAAE,EAChC,KAAK,CAAC,IAAsB,CAC7B,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}