@de-otio/trellis 0.4.0

package/dist/lib/activitypub/group-service.js

@@ -0,0 +1,301 @@
+"use strict";
+/**
+ * Group Service
+ *
+ * Handles ActivityPub actor functionality for private groups.
+ * Groups are ActivityPub actors (type: "Group") with their own inbox/outbox and followers collection (members).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GroupService = void 0;
+const crypto = __importStar(require("crypto"));
+const actor_1 = require("./actor");
+const crypto_1 = require("./crypto");
+class GroupService {
+    /**
+     * Generate ActivityPub actor URI for a group
+     */
+    static generateActorUri(groupId, env, requestUrl) {
+        const baseUrl = actor_1.ActorService.getBaseUrl(env, requestUrl);
+        return `${baseUrl}/groups/${groupId}`;
+    }
+    /**
+     * Get actor URI from group
+     */
+    static getActorUri(group, env, requestUrl) {
+        if (group.actorUri) {
+            return group.actorUri;
+        }
+        // Generate if missing
+        return this.generateActorUri(group.id, env, requestUrl);
+    }
+    /**
+     * Generate collection URLs for a group actor
+     */
+    static generateCollectionUrls(actorUri) {
+        return {
+            inbox: `${actorUri}/inbox`,
+            outbox: `${actorUri}/outbox`,
+            followers: `${actorUri}/followers`,
+        };
+    }
+    /**
+     * Create a new group with ActivityPub actor
+     */
+    static async createGroup(prisma, name, description, privacy, creator, env) {
+        if (!creator.actorUri) {
+            throw new Error("Creator must have an actorUri");
+        }
+        // Generate actor URI
+        const groupId = crypto.randomUUID();
+        const actorUri = this.generateActorUri(groupId, env);
+        const collections = this.generateCollectionUrls(actorUri);
+        // Generate key pair
+        const { publicKey, privateKey } = crypto_1.KeyPairService.generateKeyPair();
+        const encryptedPrivateKey = crypto_1.KeyPairService.encryptPrivateKey(privateKey, env);
+        // Create group in database
+        const group = await prisma.group.create({
+            data: {
+                id: groupId,
+                name,
+                description,
+                actorUri: actorUri,
+                inboxUrl: collections.inbox,
+                outboxUrl: collections.outbox,
+                followersUrl: collections.followers,
+                publicKey,
+                privateKey: encryptedPrivateKey,
+                privacy,
+            },
+        });
+        // Add creator as admin member
+        await prisma.groupMember.create({
+            data: {
+                groupId: group.id,
+                actorUri: creator.actorUri,
+                role: "ADMIN",
+            },
+        });
+        return group;
+    }
+    /**
+     * Serialize group to ActivityStreams Actor document
+     */
+    static async serializeActor(group, env, requestUrl) {
+        const actorUri = this.getActorUri(group, env, requestUrl);
+        const collections = this.generateCollectionUrls(actorUri);
+        const actorDoc = {
+            "@context": [
+                "https://www.w3.org/ns/activitystreams",
+                "https://w3id.org/security/v1",
+                {
+                    trellis: "https://example.com/ns#",
+                },
+            ],
+            type: "Group",
+            id: actorUri,
+            name: group.name,
+            preferredUsername: group.id,
+            inbox: collections.inbox,
+            outbox: collections.outbox,
+            followers: collections.followers,
+        };
+        // Add optional fields
+        if (group.description) {
+            actorDoc.summary = group.description;
+        }
+        // Add public key if available
+        if (group.publicKey) {
+            actorDoc.publicKey = {
+                id: `${actorUri}#main-key`,
+                owner: actorUri,
+                publicKeyPem: group.publicKey,
+            };
+        }
+        // Add custom Trellis extensions
+        actorDoc["trellis:privacy"] = group.privacy.toLowerCase();
+        return actorDoc;
+    }
+    /**
+     * Initialize ActivityPub fields for a group
+     */
+    static async initializeActorFields(prisma, group, env) {
+        // Generate actor URI
+        const actorUri = this.generateActorUri(group.id, env);
+        const collections = this.generateCollectionUrls(actorUri);
+        // Generate key pair
+        const { publicKey, privateKey } = crypto_1.KeyPairService.generateKeyPair();
+        const encryptedPrivateKey = crypto_1.KeyPairService.encryptPrivateKey(privateKey, env);
+        // Update group with ActivityPub fields
+        return await prisma.group.update({
+            where: { id: group.id },
+            data: {
+                actorUri: actorUri,
+                inboxUrl: collections.inbox,
+                outboxUrl: collections.outbox,
+                followersUrl: collections.followers,
+                publicKey,
+                privateKey: encryptedPrivateKey,
+            },
+        });
+    }
+    /**
+     * Get group by actor URI
+     */
+    static async getGroupByActorUri(prisma, actorUri) {
+        return await prisma.group.findUnique({
+            where: { actorUri },
+        });
+    }
+    /**
+     * Get group by ID
+     */
+    static async getGroupById(prisma, groupId) {
+        return await prisma.group.findUnique({
+            where: { id: groupId },
+        });
+    }
+    /**
+     * Get members of a group
+     */
+    static async getMembers(prisma, groupId, page = 1, limit = 20) {
+        return await prisma.groupMember.findMany({
+            where: {
+                groupId,
+            },
+            skip: (page - 1) * limit,
+            take: limit,
+            orderBy: {
+                joinedAt: "desc",
+            },
+        });
+    }
+    /**
+     * Get members count
+     */
+    static async getMembersCount(prisma, groupId) {
+        return await prisma.groupMember.count({
+            where: {
+                groupId,
+            },
+        });
+    }
+    /**
+     * Get member actor URIs (for followers collection)
+     */
+    static async getMemberActorUris(prisma, groupId, page = 1, limit = 20) {
+        const members = await this.getMembers(prisma, groupId, page, limit);
+        return members.map((member) => member.actorUri);
+    }
+    /**
+     * Add member to group
+     */
+    static async addMember(prisma, groupId, actorUri, role = "MEMBER") {
+        return await prisma.groupMember.create({
+            data: {
+                groupId,
+                actorUri,
+                role,
+            },
+        });
+    }
+    /**
+     * Remove member from group
+     */
+    static async removeMember(prisma, groupId, actorUri) {
+        await prisma.groupMember.deleteMany({
+            where: {
+                groupId,
+                actorUri,
+            },
+        });
+    }
+    /**
+     * Update member role
+     */
+    static async updateMemberRole(prisma, groupId, actorUri, role) {
+        return await prisma.groupMember.update({
+            where: {
+                groupId_actorUri: {
+                    groupId,
+                    actorUri,
+                },
+            },
+            data: {
+                role,
+            },
+        });
+    }
+    /**
+     * Get member role
+     */
+    static async getMemberRole(prisma, groupId, actorUri) {
+        const member = await prisma.groupMember.findUnique({
+            where: {
+                groupId_actorUri: {
+                    groupId,
+                    actorUri,
+                },
+            },
+            select: {
+                role: true,
+            },
+        });
+        return member?.role || null;
+    }
+    /**
+     * Check if user is member of group
+     */
+    static async isMember(prisma, groupId, actorUri) {
+        const member = await prisma.groupMember.findUnique({
+            where: {
+                groupId_actorUri: {
+                    groupId,
+                    actorUri,
+                },
+            },
+        });
+        return member !== null;
+    }
+    /**
+     * Check if user is admin or moderator
+     */
+    static async isAdminOrModerator(prisma, groupId, actorUri) {
+        const role = await this.getMemberRole(prisma, groupId, actorUri);
+        return role === "ADMIN" || role === "MODERATOR";
+    }
+}
+exports.GroupService = GroupService;
+//# sourceMappingURL=group-service.js.map

package/dist/lib/activitypub/group-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-service.js","sourceRoot":"","sources":["../../../src/lib/activitypub/group-service.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AASjC,mCAAuC;AACvC,qCAA0C;AAG1C,MAAa,YAAY;IACvB;;OAEG;IACH,MAAM,CAAC,gBAAgB,CACrB,OAAe,EACf,GAAQ,EACR,UAAmB;QAEnB,MAAM,OAAO,GAAG,oBAAY,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACzD,OAAO,GAAG,OAAO,WAAW,OAAO,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,KAAY,EAAE,GAAQ,EAAE,UAAmB;QAC5D,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,QAAQ,CAAC;QACxB,CAAC;QAED,sBAAsB;QACtB,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,sBAAsB,CAAC,QAAgB;QAK5C,OAAO;YACL,KAAK,EAAE,GAAG,QAAQ,QAAQ;YAC1B,MAAM,EAAE,GAAG,QAAQ,SAAS;YAC5B,SAAS,EAAE,GAAG,QAAQ,YAAY;SACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW,CACtB,MAAoB,EACpB,IAAY,EACZ,WAA0B,EAC1B,OAAqB,EACrB,OAAa,EACb,GAAQ;QAER,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,qBAAqB;QACrB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAE1D,oBAAoB;QACpB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,uBAAc,CAAC,eAAe,EAAE,CAAC;QACnE,MAAM,mBAAmB,GAAG,uBAAc,CAAC,iBAAiB,CAC1D,UAAU,EACV,GAAG,CACJ,CAAC;QAEF,2BAA2B;QAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YACtC,IAAI,EAAE;gBACJ,EAAE,EAAE,OAAO;gBACX,IAAI;gBACJ,WAAW;gBACX,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,WAAW,CAAC,KAAK;gBAC3B,SAAS,EAAE,WAAW,CAAC,MAAM;gBAC7B,YAAY,EAAE,WAAW,CAAC,SAAS;gBACnC,SAAS;gBACT,UAAU,EAAE,mBAAmB;gBAC/B,OAAO;aACR;SACF,CAAC,CAAC;QAEH,8BAA8B;QAC9B,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YAC9B,IAAI,EAAE;gBACJ,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO;aACd;SACF,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CACzB,KAAY,EACZ,GAAQ,EACR,UAAmB;QAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAAQ;YACpB,UAAU,EAAE;gBACV,uCAAuC;gBACvC,8BAA8B;gBAC9B;oBACE,OAAO,EAAE,yBAAyB;iBACnC;aACF;YACD,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,iBAAiB,EAAE,KAAK,CAAC,EAAE;YAC3B,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,SAAS,EAAE,WAAW,CAAC,SAAS;SACjC,CAAC;QAEF,sBAAsB;QACtB,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC;QACvC,CAAC;QAED,8BAA8B;QAC9B,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,QAAQ,CAAC,SAAS,GAAG;gBACnB,EAAE,EAAE,GAAG,QAAQ,WAAW;gBAC1B,KAAK,EAAE,QAAQ;gBACf,YAAY,EAAE,KAAK,CAAC,SAAS;aAC9B,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAE1D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAChC,MAAoB,EACpB,KAAY,EACZ,GAAQ;QAER,qBAAqB;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAE1D,oBAAoB;QACpB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,uBAAc,CAAC,eAAe,EAAE,CAAC;QACnE,MAAM,mBAAmB,GAAG,uBAAc,CAAC,iBAAiB,CAC1D,UAAU,EACV,GAAG,CACJ,CAAC;QAEF,uCAAuC;QACvC,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/B,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;YACvB,IAAI,EAAE;gBACJ,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,WAAW,CAAC,KAAK;gBAC3B,SAAS,EAAE,WAAW,CAAC,MAAM;gBAC7B,YAAY,EAAE,WAAW,CAAC,SAAS;gBACnC,SAAS;gBACT,UAAU,EAAE,mBAAmB;aAChC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAC7B,MAAoB,EACpB,QAAgB;QAEhB,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;YACnC,KAAK,EAAE,EAAE,QAAQ,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CACvB,MAAoB,EACpB,OAAe;QAEf,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;YACnC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CACrB,MAAoB,EACpB,OAAe,EACf,OAAe,CAAC,EAChB,QAAgB,EAAE;QAElB,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;YACvC,KAAK,EAAE;gBACL,OAAO;aACR;YACD,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK;YACxB,IAAI,EAAE,KAAK;YACX,OAAO,EAAE;gBACP,QAAQ,EAAE,MAAM;aACjB;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAC1B,MAAoB,EACpB,OAAe;QAEf,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;YACpC,KAAK,EAAE;gBACL,OAAO;aACR;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAC7B,MAAoB,EACpB,OAAe,EACf,OAAe,CAAC,EAChB,QAAgB,EAAE;QAElB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CACpB,MAAoB,EACpB,OAAe,EACf,QAAgB,EAChB,OAAkB,QAAQ;QAE1B,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YACrC,IAAI,EAAE;gBACJ,OAAO;gBACP,QAAQ;gBACR,IAAI;aACL;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CACvB,MAAoB,EACpB,OAAe,EACf,QAAgB;QAEhB,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;YAClC,KAAK,EAAE;gBACL,OAAO;gBACP,QAAQ;aACT;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAC3B,MAAoB,EACpB,OAAe,EACf,QAAgB,EAChB,IAAe;QAEf,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YACrC,KAAK,EAAE;gBACL,gBAAgB,EAAE;oBAChB,OAAO;oBACP,QAAQ;iBACT;aACF;YACD,IAAI,EAAE;gBACJ,IAAI;aACL;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,aAAa,CACxB,MAAoB,EACpB,OAAe,EACf,QAAgB;QAEhB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;YACjD,KAAK,EAAE;gBACL,gBAAgB,EAAE;oBAChB,OAAO;oBACP,QAAQ;iBACT;aACF;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,IAAI;aACX;SACF,CAAC,CAAC;QAEH,OAAO,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CACnB,MAAoB,EACpB,OAAe,EACf,QAAgB;QAEhB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;YACjD,KAAK,EAAE;gBACL,gBAAgB,EAAE;oBAChB,OAAO;oBACP,QAAQ;iBACT;aACF;SACF,CAAC,CAAC;QAEH,OAAO,MAAM,KAAK,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAC7B,MAAoB,EACpB,OAAe,EACf,QAAgB;QAEhB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjE,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,WAAW,CAAC;IAClD,CAAC;CACF;AAtWD,oCAsWC"}

package/dist/lib/activitypub/http-signatures.d.ts

@@ -0,0 +1,41 @@
+/**
+ * HTTP Signatures Service
+ *
+ * Handles signing and verification of HTTP Signatures for ActivityPub federation.
+ * Implements RFC 9421 (HTTP Message Signatures).
+ */
+export interface HttpSignatureEnv {
+    LOG_LEVEL?: string;
+    ACTIVITYPUB_BASE_URL?: string;
+    [key: string]: any;
+}
+export declare class HttpSignatureService {
+    /**
+     * Sign outgoing request
+     */
+    static signRequest(method: string, path: string, host: string, privateKey: string, keyId: string): {
+        signature: string;
+        date: string;
+    };
+    /**
+     * Add HTTP Signature headers to request
+     */
+    static addSignatureHeaders(request: Request, privateKey: string, keyId: string): Headers;
+    /**
+     * Verify HTTP Signature on incoming request
+     */
+    static verifyRequest(request: Request, env: HttpSignatureEnv): Promise<boolean>;
+    /**
+     * Parse Signature header
+     */
+    private static parseSignatureHeader;
+    /**
+     * Fetch public key from actor document
+     */
+    private static fetchPublicKey;
+    /**
+     * Reconstruct signature string from request
+     */
+    private static reconstructSignatureString;
+}
+//# sourceMappingURL=http-signatures.d.ts.map

package/dist/lib/activitypub/http-signatures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-signatures.d.ts","sourceRoot":"","sources":["../../../src/lib/activitypub/http-signatures.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,qBAAa,oBAAoB;IAC/B;;OAEG;IACH,MAAM,CAAC,WAAW,CAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IA8BtC;;OAEG;IACH,MAAM,CAAC,mBAAmB,CACxB,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ,OAAO;IAiBV;;OAEG;WACU,aAAa,CACxB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,OAAO,CAAC;IAwFnB;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAsCnC;;OAEG;mBACkB,cAAc;IAkGnC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,0BAA0B;CAwB1C"}

package/dist/lib/activitypub/http-signatures.js

@@ -0,0 +1,284 @@
+"use strict";
+/**
+ * HTTP Signatures Service
+ *
+ * Handles signing and verification of HTTP Signatures for ActivityPub federation.
+ * Implements RFC 9421 (HTTP Message Signatures).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpSignatureService = void 0;
+const crypto = __importStar(require("crypto"));
+const logger_1 = require("../logger");
+class HttpSignatureService {
+    /**
+     * Sign outgoing request
+     */
+    static signRequest(method, path, host, privateKey, keyId) {
+        const date = new Date().toUTCString();
+        // Create signature string
+        const signatureString = [
+            `(request-target): ${method.toLowerCase()} ${path}`,
+            `host: ${host}`,
+            `date: ${date}`,
+        ].join("\n");
+        // Sign with private key
+        const sign = crypto.createSign("RSA-SHA256");
+        sign.update(signatureString);
+        sign.end();
+        const signature = sign.sign(privateKey, "base64");
+        // Create Signature header
+        const signatureHeader = [
+            `keyId="${keyId}"`,
+            'algorithm="rsa-sha256"',
+            'headers="(request-target) host date"',
+            `signature="${signature}"`,
+        ].join(",");
+        return {
+            signature: signatureHeader,
+            date,
+        };
+    }
+    /**
+     * Add HTTP Signature headers to request
+     */
+    static addSignatureHeaders(request, privateKey, keyId) {
+        const url = new URL(request.url);
+        const { signature, date } = this.signRequest(request.method, url.pathname, url.host, privateKey, keyId);
+        const headers = new Headers(request.headers);
+        headers.set("Signature", signature);
+        headers.set("Date", date);
+        return headers;
+    }
+    /**
+     * Verify HTTP Signature on incoming request
+     */
+    static async verifyRequest(request, env) {
+        const logger = logger_1.Logger.getInstance(env);
+        // Parse Signature header
+        const signatureHeader = request.headers.get("Signature");
+        if (!signatureHeader) {
+            logger.warn("[HttpSignatureService] Missing Signature header");
+            return false;
+        }
+        let signatureParams;
+        try {
+            signatureParams = this.parseSignatureHeader(signatureHeader);
+        }
+        catch (error) {
+            logger.warn("[HttpSignatureService] Failed to parse Signature header", {
+                error: error.message,
+            });
+            return false;
+        }
+        const { keyId, algorithm, headers: headerList, signature, } = signatureParams;
+        // Validate algorithm
+        if (algorithm !== "rsa-sha256") {
+            logger.warn("[HttpSignatureService] Unsupported algorithm", {
+                algorithm,
+            });
+            return false;
+        }
+        // Fetch public key from actor document
+        const publicKey = await this.fetchPublicKey(keyId, env);
+        if (!publicKey) {
+            logger.warn("[HttpSignatureService] Failed to fetch public key", {
+                keyId,
+            });
+            return false;
+        }
+        // Reconstruct signature string
+        let signatureString;
+        try {
+            signatureString = this.reconstructSignatureString(request, headerList);
+        }
+        catch (error) {
+            logger.warn("[HttpSignatureService] Failed to reconstruct signature string", {
+                error: error.message,
+            });
+            return false;
+        }
+        // Verify signature
+        try {
+            const verify = crypto.createVerify("RSA-SHA256");
+            verify.update(signatureString);
+            const isValid = verify.verify(publicKey, signature, "base64");
+            if (!isValid) {
+                logger.warn("[HttpSignatureService] Signature verification failed", {
+                    keyId,
+                });
+            }
+            return isValid;
+        }
+        catch (error) {
+            logger.warn("[HttpSignatureService] Error during signature verification", {
+                error: error.message,
+            });
+            return false;
+        }
+    }
+    /**
+     * Parse Signature header
+     */
+    static parseSignatureHeader(header) {
+        const params = {};
+        header.split(",").forEach((param) => {
+            const trimmed = param.trim();
+            const equalIndex = trimmed.indexOf("=");
+            if (equalIndex === -1) {
+                throw new Error(`Invalid signature parameter: ${trimmed}`);
+            }
+            const key = trimmed.substring(0, equalIndex).trim();
+            const value = trimmed
+                .substring(equalIndex + 1)
+                .trim()
+                .replace(/^"|"$/g, "");
+            params[key] = value;
+        });
+        if (!params.keyId ||
+            !params.algorithm ||
+            !params.headers ||
+            !params.signature) {
+            throw new Error("Missing required signature parameters");
+        }
+        return {
+            keyId: params.keyId,
+            algorithm: params.algorithm,
+            headers: params.headers,
+            signature: params.signature,
+        };
+    }
+    /**
+     * Fetch public key from actor document
+     */
+    static async fetchPublicKey(keyId, env) {
+        const logger = logger_1.Logger.getInstance(env);
+        try {
+            // Extract actor URI from keyId (format: https://domain.com/users/username#main-key)
+            const actorUri = keyId.split("#")[0];
+            if (!actorUri) {
+                logger.warn("[HttpSignatureService] Invalid keyId format", { keyId });
+                return null;
+            }
+            // Check if this is a local or remote actor
+            const { isRemoteUri } = await Promise.resolve().then(() => __importStar(require("./standalone-mode")));
+            const isRemote = isRemoteUri(actorUri, env);
+            let actor;
+            if (isRemote) {
+                // Check if standalone mode is enabled - reject remote signature verification
+                const { isStandaloneModeEnabled } = await Promise.resolve().then(() => __importStar(require("./standalone-mode")));
+                const standaloneMode = await isStandaloneModeEnabled(env);
+                if (standaloneMode) {
+                    logger.info("[HttpSignatureService] Rejecting remote signature verification (standalone mode enabled)", {
+                        actorUri,
+                    });
+                    return null;
+                }
+                // Phase 4: Fetch remote actor using RemoteFetchService
+                const { RemoteFetchService } = await Promise.resolve().then(() => __importStar(require("./remote-fetch-service")));
+                const fetchedActor = await RemoteFetchService.fetchActor(actorUri, env, logger);
+                if (!fetchedActor) {
+                    logger.warn("[HttpSignatureService] Failed to fetch remote actor document", {
+                        actorUri,
+                    });
+                    return null;
+                }
+                actor = fetchedActor;
+            }
+            else {
+                // Fetch local actor document
+                const response = await fetch(actorUri, {
+                    headers: {
+                        Accept: "application/activity+json",
+                    },
+                });
+                if (!response.ok) {
+                    logger.warn("[HttpSignatureService] Failed to fetch actor document", {
+                        actorUri,
+                        status: response.status,
+                    });
+                    return null;
+                }
+                actor = (await response.json());
+            }
+            const publicKey = actor.publicKey;
+            if (!publicKey) {
+                logger.warn("[HttpSignatureService] Actor document missing publicKey", {
+                    actorUri,
+                });
+                return null;
+            }
+            // Verify keyId matches
+            if (publicKey.id !== keyId) {
+                logger.warn("[HttpSignatureService] KeyId mismatch", {
+                    expected: keyId,
+                    actual: publicKey.id,
+                });
+                return null;
+            }
+            return publicKey.publicKeyPem;
+        }
+        catch (error) {
+            logger.warn("[HttpSignatureService] Error fetching public key", {
+                error: error.message,
+                keyId,
+            });
+            return null;
+        }
+    }
+    /**
+     * Reconstruct signature string from request
+     */
+    static reconstructSignatureString(request, headerList) {
+        const headers = [];
+        const headerNames = headerList.split(" ");
+        for (const headerName of headerNames) {
+            if (headerName === "(request-target)") {
+                const url = new URL(request.url);
+                headers.push(`(request-target): ${request.method.toLowerCase()} ${url.pathname}`);
+            }
+            else {
+                const value = request.headers.get(headerName.toLowerCase());
+                if (!value) {
+                    throw new Error(`Missing required header: ${headerName}`);
+                }
+                headers.push(`${headerName.toLowerCase()}: ${value}`);
+            }
+        }
+        return headers.join("\n");
+    }
+}
+exports.HttpSignatureService = HttpSignatureService;
+//# sourceMappingURL=http-signatures.js.map

package/dist/lib/activitypub/http-signatures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-signatures.js","sourceRoot":"","sources":["../../../src/lib/activitypub/http-signatures.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AACjC,sCAAmC;AAQnC,MAAa,oBAAoB;IAC/B;;OAEG;IACH,MAAM,CAAC,WAAW,CAChB,MAAc,EACd,IAAY,EACZ,IAAY,EACZ,UAAkB,EAClB,KAAa;QAEb,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEtC,0BAA0B;QAC1B,MAAM,eAAe,GAAG;YACtB,qBAAqB,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE;YACnD,SAAS,IAAI,EAAE;YACf,SAAS,IAAI,EAAE;SAChB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,wBAAwB;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAElD,0BAA0B;QAC1B,MAAM,eAAe,GAAG;YACtB,UAAU,KAAK,GAAG;YAClB,wBAAwB;YACxB,sCAAsC;YACtC,cAAc,SAAS,GAAG;SAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,OAAO;YACL,SAAS,EAAE,eAAe;YAC1B,IAAI;SACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,mBAAmB,CACxB,OAAgB,EAChB,UAAkB,EAClB,KAAa;QAEb,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,CAC1C,OAAO,CAAC,MAAM,EACd,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,IAAI,EACR,UAAU,EACV,KAAK,CACN,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE1B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,aAAa,CACxB,OAAgB,EAChB,GAAqB;QAErB,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEvC,yBAAyB;QACzB,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,eAKH,CAAC;QAEF,IAAI,CAAC;YACH,eAAe,GAAG,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE;gBACrE,KAAK,EAAG,KAAe,CAAC,OAAO;aAChC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,EACJ,KAAK,EACL,SAAS,EACT,OAAO,EAAE,UAAU,EACnB,SAAS,GACV,GAAG,eAAe,CAAC;QAEpB,qBAAqB;QACrB,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBAC1D,SAAS;aACV,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,uCAAuC;QACvC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBAC/D,KAAK;aACN,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,+BAA+B;QAC/B,IAAI,eAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,eAAe,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,+DAA+D,EAC/D;gBACE,KAAK,EAAG,KAAe,CAAC,OAAO;aAChC,CACF,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBAClE,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,4DAA4D,EAC5D;gBACE,KAAK,EAAG,KAAe,CAAC,OAAO;aAChC,CACF,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,oBAAoB,CAAC,MAAc;QAMhD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,OAAO;iBAClB,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC;iBACzB,IAAI,EAAE;iBACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IACE,CAAC,MAAM,CAAC,KAAK;YACb,CAAC,MAAM,CAAC,SAAS;YACjB,CAAC,MAAM,CAAC,OAAO;YACf,CAAC,MAAM,CAAC,SAAS,EACjB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,KAAK,CAAC,cAAc,CACjC,KAAa,EACb,GAAqB;QAErB,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,CAAC;YACH,oFAAoF;YACpF,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,2CAA2C;YAC3C,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAU,CAAC,CAAC;YAEnD,IAAI,KAAU,CAAC;YAEf,IAAI,QAAQ,EAAE,CAAC;gBACb,6EAA6E;gBAC7E,MAAM,EAAE,uBAAuB,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;gBACtE,MAAM,cAAc,GAAG,MAAM,uBAAuB,CAAC,GAAU,CAAC,CAAC;gBACjE,IAAI,cAAc,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CACT,0FAA0F,EAC1F;wBACE,QAAQ;qBACT,CACF,CAAC;oBACF,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,uDAAuD;gBACvD,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,wBAAwB,GAAC,CAAC;gBACtE,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,UAAU,CACtD,QAAQ,EACR,GAAU,EACV,MAAM,CACP,CAAC;gBACF,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,CAAC,IAAI,CACT,8DAA8D,EAC9D;wBACE,QAAQ;qBACT,CACF,CAAC;oBACF,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,KAAK,GAAG,YAAY,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,6BAA6B;gBAC7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;oBACrC,OAAO,EAAE;wBACP,MAAM,EAAE,2BAA2B;qBACpC;iBACF,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;wBACnE,QAAQ;wBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAC;YACzC,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAElC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE;oBACrE,QAAQ;iBACT,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,uBAAuB;YACvB,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACnD,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,SAAS,CAAC,EAAE;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,SAAS,CAAC,YAAY,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;gBAC9D,KAAK,EAAG,KAAe,CAAC,OAAO;gBAC/B,KAAK;aACN,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,0BAA0B,CACvC,OAAgB,EAChB,UAAkB;QAElB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE1C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CACV,qBAAqB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,CACpE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;gBAC5D,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;CACF;AAvUD,oDAuUC"}