@did-btcr2/aggregation 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (233) hide show
  1. package/LICENSE +373 -0
  2. package/README.md +19 -0
  3. package/dist/.tsbuildinfo +1 -0
  4. package/dist/browser.js +24017 -0
  5. package/dist/browser.mjs +24011 -0
  6. package/dist/cjs/index.js +5690 -0
  7. package/dist/cjs/package.json +1 -0
  8. package/dist/esm/beacon-strategy.js +76 -0
  9. package/dist/esm/beacon-strategy.js.map +1 -0
  10. package/dist/esm/cohort.js +316 -0
  11. package/dist/esm/cohort.js.map +1 -0
  12. package/dist/esm/conditions.js +102 -0
  13. package/dist/esm/conditions.js.map +1 -0
  14. package/dist/esm/errors.js +22 -0
  15. package/dist/esm/errors.js.map +1 -0
  16. package/dist/esm/fallback-spend.js +132 -0
  17. package/dist/esm/fallback-spend.js.map +1 -0
  18. package/dist/esm/index.js +21 -0
  19. package/dist/esm/index.js.map +1 -0
  20. package/dist/esm/logger.js +15 -0
  21. package/dist/esm/logger.js.map +1 -0
  22. package/dist/esm/messages/base.js +36 -0
  23. package/dist/esm/messages/base.js.map +1 -0
  24. package/dist/esm/messages/bodies.js +149 -0
  25. package/dist/esm/messages/bodies.js.map +1 -0
  26. package/dist/esm/messages/constants.js +37 -0
  27. package/dist/esm/messages/constants.js.map +1 -0
  28. package/dist/esm/messages/factories.js +139 -0
  29. package/dist/esm/messages/factories.js.map +1 -0
  30. package/dist/esm/messages/guards.js +40 -0
  31. package/dist/esm/messages/guards.js.map +1 -0
  32. package/dist/esm/messages/index.js +6 -0
  33. package/dist/esm/messages/index.js.map +1 -0
  34. package/dist/esm/participant.js +588 -0
  35. package/dist/esm/participant.js.map +1 -0
  36. package/dist/esm/phases.js +45 -0
  37. package/dist/esm/phases.js.map +1 -0
  38. package/dist/esm/recovery-policy.js +156 -0
  39. package/dist/esm/recovery-policy.js.map +1 -0
  40. package/dist/esm/recovery-spend.js +106 -0
  41. package/dist/esm/recovery-spend.js.map +1 -0
  42. package/dist/esm/runner/aggregation-runner.js +75 -0
  43. package/dist/esm/runner/aggregation-runner.js.map +1 -0
  44. package/dist/esm/runner/events.js +2 -0
  45. package/dist/esm/runner/events.js.map +1 -0
  46. package/dist/esm/runner/index.js +6 -0
  47. package/dist/esm/runner/index.js.map +1 -0
  48. package/dist/esm/runner/participant-runner.js +407 -0
  49. package/dist/esm/runner/participant-runner.js.map +1 -0
  50. package/dist/esm/runner/service-runner.js +701 -0
  51. package/dist/esm/runner/service-runner.js.map +1 -0
  52. package/dist/esm/runner/typed-emitter.js +80 -0
  53. package/dist/esm/runner/typed-emitter.js.map +1 -0
  54. package/dist/esm/service.js +774 -0
  55. package/dist/esm/service.js.map +1 -0
  56. package/dist/esm/signer.js +33 -0
  57. package/dist/esm/signer.js.map +1 -0
  58. package/dist/esm/signing-session.js +195 -0
  59. package/dist/esm/signing-session.js.map +1 -0
  60. package/dist/esm/transport/didcomm.js +41 -0
  61. package/dist/esm/transport/didcomm.js.map +1 -0
  62. package/dist/esm/transport/error.js +12 -0
  63. package/dist/esm/transport/error.js.map +1 -0
  64. package/dist/esm/transport/factory.js +29 -0
  65. package/dist/esm/transport/factory.js.map +1 -0
  66. package/dist/esm/transport/http/client.js +342 -0
  67. package/dist/esm/transport/http/client.js.map +1 -0
  68. package/dist/esm/transport/http/envelope.js +126 -0
  69. package/dist/esm/transport/http/envelope.js.map +1 -0
  70. package/dist/esm/transport/http/errors.js +11 -0
  71. package/dist/esm/transport/http/errors.js.map +1 -0
  72. package/dist/esm/transport/http/inbox-buffer.js +45 -0
  73. package/dist/esm/transport/http/inbox-buffer.js.map +1 -0
  74. package/dist/esm/transport/http/index.js +12 -0
  75. package/dist/esm/transport/http/index.js.map +1 -0
  76. package/dist/esm/transport/http/nonce-cache.js +38 -0
  77. package/dist/esm/transport/http/nonce-cache.js.map +1 -0
  78. package/dist/esm/transport/http/protocol.js +28 -0
  79. package/dist/esm/transport/http/protocol.js.map +1 -0
  80. package/dist/esm/transport/http/rate-limiter.js +45 -0
  81. package/dist/esm/transport/http/rate-limiter.js.map +1 -0
  82. package/dist/esm/transport/http/request-auth.js +100 -0
  83. package/dist/esm/transport/http/request-auth.js.map +1 -0
  84. package/dist/esm/transport/http/server.js +475 -0
  85. package/dist/esm/transport/http/server.js.map +1 -0
  86. package/dist/esm/transport/http/sse-stream.js +110 -0
  87. package/dist/esm/transport/http/sse-stream.js.map +1 -0
  88. package/dist/esm/transport/http/sse-writer.js +25 -0
  89. package/dist/esm/transport/http/sse-writer.js.map +1 -0
  90. package/dist/esm/transport/in-memory.js +149 -0
  91. package/dist/esm/transport/in-memory.js.map +1 -0
  92. package/dist/esm/transport/index.js +8 -0
  93. package/dist/esm/transport/index.js.map +1 -0
  94. package/dist/esm/transport/nostr.js +491 -0
  95. package/dist/esm/transport/nostr.js.map +1 -0
  96. package/dist/esm/transport/transport.js +2 -0
  97. package/dist/esm/transport/transport.js.map +1 -0
  98. package/dist/types/beacon-strategy.d.ts +56 -0
  99. package/dist/types/beacon-strategy.d.ts.map +1 -0
  100. package/dist/types/cohort.d.ts +188 -0
  101. package/dist/types/cohort.d.ts.map +1 -0
  102. package/dist/types/conditions.d.ts +86 -0
  103. package/dist/types/conditions.d.ts.map +1 -0
  104. package/dist/types/errors.d.ts +14 -0
  105. package/dist/types/errors.d.ts.map +1 -0
  106. package/dist/types/fallback-spend.d.ts +94 -0
  107. package/dist/types/fallback-spend.d.ts.map +1 -0
  108. package/dist/types/index.d.ts +17 -0
  109. package/dist/types/index.d.ts.map +1 -0
  110. package/dist/types/logger.d.ts +22 -0
  111. package/dist/types/logger.d.ts.map +1 -0
  112. package/dist/types/messages/base.d.ts +58 -0
  113. package/dist/types/messages/base.d.ts.map +1 -0
  114. package/dist/types/messages/bodies.d.ts +177 -0
  115. package/dist/types/messages/bodies.d.ts.map +1 -0
  116. package/dist/types/messages/constants.d.ts +31 -0
  117. package/dist/types/messages/constants.d.ts.map +1 -0
  118. package/dist/types/messages/factories.d.ts +217 -0
  119. package/dist/types/messages/factories.d.ts.map +1 -0
  120. package/dist/types/messages/guards.d.ts +11 -0
  121. package/dist/types/messages/guards.d.ts.map +1 -0
  122. package/dist/types/messages/index.d.ts +6 -0
  123. package/dist/types/messages/index.d.ts.map +1 -0
  124. package/dist/types/participant.d.ts +162 -0
  125. package/dist/types/participant.d.ts.map +1 -0
  126. package/dist/types/phases.d.ts +55 -0
  127. package/dist/types/phases.d.ts.map +1 -0
  128. package/dist/types/recovery-policy.d.ts +132 -0
  129. package/dist/types/recovery-policy.d.ts.map +1 -0
  130. package/dist/types/recovery-spend.d.ts +94 -0
  131. package/dist/types/recovery-spend.d.ts.map +1 -0
  132. package/dist/types/runner/aggregation-runner.d.ts +72 -0
  133. package/dist/types/runner/aggregation-runner.d.ts.map +1 -0
  134. package/dist/types/runner/events.d.ts +147 -0
  135. package/dist/types/runner/events.d.ts.map +1 -0
  136. package/dist/types/runner/index.d.ts +6 -0
  137. package/dist/types/runner/index.d.ts.map +1 -0
  138. package/dist/types/runner/participant-runner.d.ts +122 -0
  139. package/dist/types/runner/participant-runner.d.ts.map +1 -0
  140. package/dist/types/runner/service-runner.d.ts +228 -0
  141. package/dist/types/runner/service-runner.d.ts.map +1 -0
  142. package/dist/types/runner/typed-emitter.d.ts +41 -0
  143. package/dist/types/runner/typed-emitter.d.ts.map +1 -0
  144. package/dist/types/service.d.ts +177 -0
  145. package/dist/types/service.d.ts.map +1 -0
  146. package/dist/types/signer.d.ts +50 -0
  147. package/dist/types/signer.d.ts.map +1 -0
  148. package/dist/types/signing-session.d.ts +81 -0
  149. package/dist/types/signing-session.d.ts.map +1 -0
  150. package/dist/types/transport/didcomm.d.ts +23 -0
  151. package/dist/types/transport/didcomm.d.ts.map +1 -0
  152. package/dist/types/transport/error.d.ts +8 -0
  153. package/dist/types/transport/error.d.ts.map +1 -0
  154. package/dist/types/transport/factory.d.ts +28 -0
  155. package/dist/types/transport/factory.d.ts.map +1 -0
  156. package/dist/types/transport/http/client.d.ts +56 -0
  157. package/dist/types/transport/http/client.d.ts.map +1 -0
  158. package/dist/types/transport/http/envelope.d.ts +64 -0
  159. package/dist/types/transport/http/envelope.d.ts.map +1 -0
  160. package/dist/types/transport/http/errors.d.ts +9 -0
  161. package/dist/types/transport/http/errors.d.ts.map +1 -0
  162. package/dist/types/transport/http/inbox-buffer.d.ts +32 -0
  163. package/dist/types/transport/http/inbox-buffer.d.ts.map +1 -0
  164. package/dist/types/transport/http/index.d.ts +12 -0
  165. package/dist/types/transport/http/index.d.ts.map +1 -0
  166. package/dist/types/transport/http/nonce-cache.d.ts +26 -0
  167. package/dist/types/transport/http/nonce-cache.d.ts.map +1 -0
  168. package/dist/types/transport/http/protocol.d.ts +53 -0
  169. package/dist/types/transport/http/protocol.d.ts.map +1 -0
  170. package/dist/types/transport/http/rate-limiter.d.ts +41 -0
  171. package/dist/types/transport/http/rate-limiter.d.ts.map +1 -0
  172. package/dist/types/transport/http/request-auth.d.ts +50 -0
  173. package/dist/types/transport/http/request-auth.d.ts.map +1 -0
  174. package/dist/types/transport/http/server.d.ts +118 -0
  175. package/dist/types/transport/http/server.d.ts.map +1 -0
  176. package/dist/types/transport/http/sse-stream.d.ts +34 -0
  177. package/dist/types/transport/http/sse-stream.d.ts.map +1 -0
  178. package/dist/types/transport/http/sse-writer.d.ts +12 -0
  179. package/dist/types/transport/http/sse-writer.d.ts.map +1 -0
  180. package/dist/types/transport/in-memory.d.ts +64 -0
  181. package/dist/types/transport/in-memory.d.ts.map +1 -0
  182. package/dist/types/transport/index.d.ts +8 -0
  183. package/dist/types/transport/index.d.ts.map +1 -0
  184. package/dist/types/transport/nostr.d.ts +153 -0
  185. package/dist/types/transport/nostr.d.ts.map +1 -0
  186. package/dist/types/transport/transport.d.ts +62 -0
  187. package/dist/types/transport/transport.d.ts.map +1 -0
  188. package/package.json +128 -0
  189. package/src/beacon-strategy.ts +142 -0
  190. package/src/cohort.ts +422 -0
  191. package/src/conditions.ts +172 -0
  192. package/src/errors.ts +25 -0
  193. package/src/fallback-spend.ts +223 -0
  194. package/src/index.ts +23 -0
  195. package/src/logger.ts +33 -0
  196. package/src/messages/base.ts +80 -0
  197. package/src/messages/bodies.ts +328 -0
  198. package/src/messages/constants.ts +40 -0
  199. package/src/messages/factories.ts +297 -0
  200. package/src/messages/guards.ts +61 -0
  201. package/src/messages/index.ts +5 -0
  202. package/src/participant.ts +779 -0
  203. package/src/phases.ts +91 -0
  204. package/src/recovery-policy.ts +237 -0
  205. package/src/recovery-spend.ts +192 -0
  206. package/src/runner/aggregation-runner.ts +125 -0
  207. package/src/runner/events.ts +129 -0
  208. package/src/runner/index.ts +5 -0
  209. package/src/runner/participant-runner.ts +488 -0
  210. package/src/runner/service-runner.ts +891 -0
  211. package/src/runner/typed-emitter.ts +87 -0
  212. package/src/service.ts +1000 -0
  213. package/src/signer.ts +67 -0
  214. package/src/signing-session.ts +290 -0
  215. package/src/transport/didcomm.ts +59 -0
  216. package/src/transport/error.ts +13 -0
  217. package/src/transport/factory.ts +65 -0
  218. package/src/transport/http/client.ts +409 -0
  219. package/src/transport/http/envelope.ts +204 -0
  220. package/src/transport/http/errors.ts +11 -0
  221. package/src/transport/http/inbox-buffer.ts +53 -0
  222. package/src/transport/http/index.ts +11 -0
  223. package/src/transport/http/nonce-cache.ts +43 -0
  224. package/src/transport/http/protocol.ts +57 -0
  225. package/src/transport/http/rate-limiter.ts +75 -0
  226. package/src/transport/http/request-auth.ts +164 -0
  227. package/src/transport/http/server.ts +617 -0
  228. package/src/transport/http/sse-stream.ts +121 -0
  229. package/src/transport/http/sse-writer.ts +23 -0
  230. package/src/transport/in-memory.ts +178 -0
  231. package/src/transport/index.ts +7 -0
  232. package/src/transport/nostr.ts +576 -0
  233. package/src/transport/transport.ts +79 -0
@@ -0,0 +1,45 @@
1
+ export class InMemoryRateLimitStore {
2
+ #buckets = new Map();
3
+ get(key) {
4
+ return this.#buckets.get(key);
5
+ }
6
+ set(key, state) {
7
+ this.#buckets.set(key, state);
8
+ }
9
+ }
10
+ /**
11
+ * Token-bucket rate limiter keyed by an opaque string (typically a verified
12
+ * sender DID). Tokens refill linearly at `rps` up to `burst`. Each `consume`
13
+ * call atomically debits one token or returns `false` to reject.
14
+ *
15
+ * The limiter is synchronous and deterministic given `nowMs` - tests can
16
+ * drive it with a fixed clock to exercise exact boundaries.
17
+ */
18
+ export class RateLimiter {
19
+ #rps;
20
+ #burst;
21
+ #store;
22
+ constructor(config = {}) {
23
+ this.#rps = config.rps ?? 10;
24
+ this.#burst = config.burst ?? 30;
25
+ this.#store = config.store ?? new InMemoryRateLimitStore();
26
+ }
27
+ /** Consume one token for `key`. Returns `true` if accepted, `false` if throttled. */
28
+ consume(key, nowMs) {
29
+ const existing = this.#store.get(key);
30
+ const state = existing ?? { tokens: this.#burst, lastRefillMs: nowMs };
31
+ if (existing) {
32
+ const elapsedSec = Math.max(0, (nowMs - existing.lastRefillMs) / 1000);
33
+ state.tokens = Math.min(this.#burst, existing.tokens + elapsedSec * this.#rps);
34
+ state.lastRefillMs = nowMs;
35
+ }
36
+ if (state.tokens < 1) {
37
+ this.#store.set(key, state);
38
+ return false;
39
+ }
40
+ state.tokens -= 1;
41
+ this.#store.set(key, state);
42
+ return true;
43
+ }
44
+ }
45
+ //# sourceMappingURL=rate-limiter.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../../src/transport/http/rate-limiter.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,sBAAsB;IACxB,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEnD,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAkB;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;CACF;AAWD;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACb,IAAI,CAAS;IACb,MAAM,CAAS;IACf,MAAM,CAAiB;IAEhC,YAAY,SAA4B,EAAE;QACxC,IAAI,CAAC,IAAI,GAAK,MAAM,CAAC,GAAG,IAAM,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,sBAAsB,EAAE,CAAC;IAC7D,CAAC;IAED,qFAAqF;IACrF,OAAO,CAAC,GAAW,EAAE,KAAa;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAgB,QAAQ,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAEpF,IAAG,QAAQ,EAAE,CAAC;YACZ,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;YACvE,KAAK,CAAC,MAAM,GAAS,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACrF,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;QAC7B,CAAC;QAED,IAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
@@ -0,0 +1,100 @@
1
+ import { canonicalHashBytes } from '@did-btcr2/common';
2
+ import { bytesToHex, hexToBytes, randomBytes } from '@noble/hashes/utils';
3
+ import { HttpTransportError } from './errors.js';
4
+ import { DEFAULT_CLOCK_SKEW_SEC, DEFAULT_NONCE_LEN_BYTES, HTTP_ENVELOPE_VERSION } from './protocol.js';
5
+ /**
6
+ * `Authorization`-header scheme used to authenticate SSE subscription
7
+ * requests. The header value takes the form
8
+ * `BTCR2-Sig v=<n>,did=<did>,ts=<unix>,nonce=<hex>,sig=<hex>`.
9
+ *
10
+ * Used only for GET endpoints (SSE inbox subscribe). POST endpoints carry a
11
+ * full {@link SignedEnvelope} in the request body instead.
12
+ */
13
+ export const REQUEST_AUTH_SCHEME = 'BTCR2-Sig';
14
+ /**
15
+ * Build an `Authorization` header value proving the caller controls the
16
+ * private key for `did`. Covers a specific request path so the signature
17
+ * can't be replayed against a different endpoint.
18
+ */
19
+ export function buildRequestAuth(did, keys, path, opts = {}) {
20
+ const ts = opts.timestamp ?? Math.floor(Date.now() / 1000);
21
+ const nonce = opts.nonce ?? bytesToHex(randomBytes(DEFAULT_NONCE_LEN_BYTES));
22
+ const digest = canonicalHashBytes({
23
+ v: HTTP_ENVELOPE_VERSION,
24
+ did,
25
+ ts,
26
+ nonce,
27
+ path,
28
+ });
29
+ const sig = keys.secretKey.sign(digest, { scheme: 'schnorr' });
30
+ return `${REQUEST_AUTH_SCHEME} v=${HTTP_ENVELOPE_VERSION},did=${did},ts=${ts},nonce=${nonce},sig=${bytesToHex(sig)}`;
31
+ }
32
+ /**
33
+ * Parse a `BTCR2-Sig` auth header value into its structured fields. Does NOT
34
+ * verify the signature: call {@link verifyRequestAuth} for that.
35
+ */
36
+ export function parseRequestAuth(headerValue) {
37
+ const prefix = `${REQUEST_AUTH_SCHEME} `;
38
+ if (!headerValue.startsWith(prefix)) {
39
+ throw new HttpTransportError(`Unexpected auth scheme (want ${REQUEST_AUTH_SCHEME})`, 'REQUEST_AUTH_SCHEME');
40
+ }
41
+ const params = {};
42
+ for (const piece of headerValue.slice(prefix.length).split(',')) {
43
+ const eq = piece.indexOf('=');
44
+ if (eq === -1)
45
+ continue;
46
+ const key = piece.slice(0, eq).trim();
47
+ const val = piece.slice(eq + 1).trim();
48
+ if (key.length > 0)
49
+ params[key] = val;
50
+ }
51
+ const v = Number(params.v);
52
+ const ts = Number(params.ts);
53
+ if (!Number.isInteger(v) || !Number.isInteger(ts) || !params.did || !params.nonce || !params.sig) {
54
+ throw new HttpTransportError('Malformed auth header (missing or invalid field)', 'REQUEST_AUTH_MALFORMED', { received: Object.keys(params) });
55
+ }
56
+ return { v, did: params.did, ts, nonce: params.nonce, sig: params.sig };
57
+ }
58
+ /**
59
+ * Parse + verify an auth header. Throws {@link HttpTransportError} on any
60
+ * failure; returns the parsed fields on success.
61
+ *
62
+ * `expectedPath` must match the path the signature commits to. `senderPk`
63
+ * must correspond to the DID the signer claims.
64
+ */
65
+ export function verifyRequestAuth(headerValue, expectedPath, senderPk, opts = {}) {
66
+ const parsed = parseRequestAuth(headerValue);
67
+ if (parsed.v !== HTTP_ENVELOPE_VERSION) {
68
+ throw new HttpTransportError(`Unsupported auth version: ${parsed.v}`, 'REQUEST_AUTH_VERSION_MISMATCH', { version: parsed.v, expected: HTTP_ENVELOPE_VERSION });
69
+ }
70
+ const skewSec = opts.clockSkewSec ?? DEFAULT_CLOCK_SKEW_SEC;
71
+ const nowMs = opts.now ? opts.now() : Date.now();
72
+ const nowSec = Math.floor(nowMs / 1000);
73
+ const diff = Math.abs(nowSec - parsed.ts);
74
+ if (diff > skewSec) {
75
+ throw new HttpTransportError(`Auth timestamp out of skew: ${diff}s > ${skewSec}s`, 'REQUEST_AUTH_TIMESTAMP_SKEW', { diff, skewSec });
76
+ }
77
+ let sigBytes;
78
+ try {
79
+ sigBytes = hexToBytes(parsed.sig);
80
+ }
81
+ catch {
82
+ throw new HttpTransportError('Auth signature is not valid hex', 'REQUEST_AUTH_SIG_HEX');
83
+ }
84
+ if (sigBytes.length !== 64) {
85
+ throw new HttpTransportError(`Invalid auth signature length: ${sigBytes.length}`, 'REQUEST_AUTH_SIG_LENGTH', { length: sigBytes.length });
86
+ }
87
+ const digest = canonicalHashBytes({
88
+ v: parsed.v,
89
+ did: parsed.did,
90
+ ts: parsed.ts,
91
+ nonce: parsed.nonce,
92
+ path: expectedPath,
93
+ });
94
+ const ok = senderPk.verify(sigBytes, digest, { scheme: 'schnorr' });
95
+ if (!ok) {
96
+ throw new HttpTransportError('Auth signature verification failed', 'REQUEST_AUTH_SIG_INVALID');
97
+ }
98
+ return parsed;
99
+ }
100
+ //# sourceMappingURL=request-auth.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"request-auth.js","sourceRoot":"","sources":["../../../../src/transport/http/request-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEvG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAoB/C;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAY,EACZ,IAAoB,EACpB,IAAY,EACZ,OAAgC,EAAE;IAElC,MAAM,EAAE,GAAM,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,CAAC,EAAG,qBAAqB;QACzB,GAAG;QACH,EAAE;QACF,KAAK;QACL,IAAI;KACL,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAE/D,OAAO,GAAG,mBAAmB,MAAM,qBAAqB,QAAQ,GAAG,OAAO,EAAE,UAAU,KAAK,QAAQ,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;AACvH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,MAAM,MAAM,GAAG,GAAG,mBAAmB,GAAG,CAAC;IACzC,IAAG,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,kBAAkB,CAC1B,gCAAgC,mBAAmB,GAAG,EACtD,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAI,MAAM,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAG,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAG,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,GAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChG,MAAM,IAAI,kBAAkB,CAC1B,kDAAkD,EAClD,wBAAwB,EACxB,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;AAC1E,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAAoB,EACpB,YAAoB,EACpB,QAA0C,EAC1C,OAAyC,EAAE;IAE3C,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAE7C,IAAG,MAAM,CAAC,CAAC,KAAK,qBAAqB,EAAE,CAAC;QACtC,MAAM,IAAI,kBAAkB,CAC1B,6BAA6B,MAAM,CAAC,CAAC,EAAE,EACvC,+BAA+B,EAC/B,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAC5D,MAAM,KAAK,GAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACnD,MAAM,MAAM,GAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAM,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAG,IAAI,GAAG,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,kBAAkB,CAC1B,+BAA+B,IAAI,OAAO,OAAO,GAAG,EACpD,6BAA6B,EAC7B,EAAE,IAAI,EAAE,OAAO,EAAE,CAClB,CAAC;IACJ,CAAC;IAED,IAAI,QAAoB,CAAC;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,EAAE,sBAAsB,CAAC,CAAC;IAC1F,CAAC;IACD,IAAG,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAC1B,kCAAkC,QAAQ,CAAC,MAAM,EAAE,EACnD,yBAAyB,EACzB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC5B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,CAAC,EAAO,MAAM,CAAC,CAAC;QAChB,GAAG,EAAK,MAAM,CAAC,GAAG;QAClB,EAAE,EAAM,MAAM,CAAC,EAAE;QACjB,KAAK,EAAG,MAAM,CAAC,KAAK;QACpB,IAAI,EAAI,YAAY;KACrB,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,IAAG,CAAC,EAAE,EAAE,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,EAAE,0BAA0B,CAAC,CAAC;IACjG,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
@@ -0,0 +1,475 @@
1
+ import { CompressedSecp256k1PublicKey } from '@did-btcr2/keypair';
2
+ import { CONSOLE_LOGGER } from '../../logger.js';
3
+ import { reviveFromWire, signEnvelope, verifyEnvelope } from './envelope.js';
4
+ import { HttpTransportError } from './errors.js';
5
+ import { InboxBuffer } from './inbox-buffer.js';
6
+ import { NonceCache } from './nonce-cache.js';
7
+ import { DEFAULT_CLOCK_SKEW_SEC, HTTP_ENVELOPE_VERSION, HTTP_ROUTE, SSE_EVENT, } from './protocol.js';
8
+ import { RateLimiter } from './rate-limiter.js';
9
+ import { verifyRequestAuth } from './request-auth.js';
10
+ const INBOX_PATH_PREFIX = '/v1/actors/';
11
+ const INBOX_PATH_SUFFIX = '/inbox';
12
+ const DEFAULT_ADVERT_TTL_MS = 5 * 60 * 1000;
13
+ const DEFAULT_HEARTBEAT_MS = 20_000;
14
+ /**
15
+ * Server-side HTTP transport. Sans-I/O - the caller mounts
16
+ * {@link handleRequest} and {@link handleSse} under their HTTP framework of
17
+ * choice; the transport owns only in-memory state (actors, inboxes, advert
18
+ * cache, replay / rate-limit policies).
19
+ *
20
+ * Implements the generic {@link Transport} interface so the aggregation
21
+ * runners can drive it exactly the same way they drive {@link NostrTransport}
22
+ * or {@link HttpClientTransport}.
23
+ */
24
+ export class HttpServerTransport {
25
+ name = 'http';
26
+ #logger;
27
+ #cors;
28
+ #clockSkewSec;
29
+ #inboxBufferSize;
30
+ #advertTtlMs;
31
+ #heartbeatMs;
32
+ #rateLimiter;
33
+ #nonceCache;
34
+ #now;
35
+ #resolveSenderPkFn;
36
+ #actors = new Map();
37
+ #peers = new Map();
38
+ #inboxes = new Map();
39
+ #broadcastSubscribers = new Set();
40
+ #currentAdvert;
41
+ #advertSeq = 0;
42
+ constructor(config = {}) {
43
+ this.#logger = config.logger ?? CONSOLE_LOGGER;
44
+ this.#cors = config.cors ?? { mode: 'permissive' };
45
+ this.#clockSkewSec = config.clockSkewSec ?? DEFAULT_CLOCK_SKEW_SEC;
46
+ this.#inboxBufferSize = config.inboxBufferSize ?? 100;
47
+ this.#advertTtlMs = config.advertTtlMs ?? DEFAULT_ADVERT_TTL_MS;
48
+ this.#heartbeatMs = config.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_MS;
49
+ this.#rateLimiter = config.rateLimiter ?? new RateLimiter();
50
+ this.#nonceCache = config.nonceCache ?? new NonceCache();
51
+ this.#now = config.now ?? (() => Date.now());
52
+ this.#resolveSenderPkFn = config.resolveSenderPk;
53
+ }
54
+ // ----------------------------------------------------------------
55
+ // Transport interface
56
+ // ----------------------------------------------------------------
57
+ start() {
58
+ // No-op: server-side transport has no persistent outbound connections.
59
+ // SSE subscribers connect on demand via handleSse().
60
+ }
61
+ /**
62
+ * Detach the transport: close every open SSE subscription, clear the advert
63
+ * cache, and drop all actor / peer / inbox state. Intended for shutdown and
64
+ * for test teardown.
65
+ */
66
+ stop() {
67
+ for (const sub of this.#broadcastSubscribers)
68
+ this.#closeBroadcastSubscriber(sub);
69
+ this.#broadcastSubscribers.clear();
70
+ for (const inbox of this.#inboxes.values()) {
71
+ for (const sub of inbox.subscribers)
72
+ this.#closeInboxSubscriber(sub);
73
+ inbox.subscribers.clear();
74
+ }
75
+ this.#inboxes.clear();
76
+ this.#currentAdvert = undefined;
77
+ }
78
+ registerActor(did, keys) {
79
+ this.#actors.set(did, { keys, handlers: new Map() });
80
+ }
81
+ unregisterActor(did) {
82
+ this.#actors.delete(did);
83
+ this.#peers.delete(did);
84
+ }
85
+ getActorPk(did) {
86
+ return this.#actors.get(did)?.keys.publicKey.compressed;
87
+ }
88
+ registerPeer(did, communicationPk) {
89
+ try {
90
+ new CompressedSecp256k1PublicKey(communicationPk);
91
+ }
92
+ catch {
93
+ throw new HttpTransportError(`Invalid peer public key for ${did}`, 'INVALID_PEER_KEY', { did, keyLength: communicationPk.length });
94
+ }
95
+ this.#peers.set(did, communicationPk);
96
+ }
97
+ getPeerPk(did) {
98
+ return this.#peers.get(did);
99
+ }
100
+ registerMessageHandler(actorDid, messageType, handler) {
101
+ const actor = this.#actors.get(actorDid);
102
+ if (!actor) {
103
+ throw new HttpTransportError(`Cannot register handler: actor ${actorDid} not registered`, 'UNKNOWN_ACTOR', { did: actorDid });
104
+ }
105
+ actor.handlers.set(messageType, handler);
106
+ }
107
+ unregisterMessageHandler(actorDid, messageType) {
108
+ this.#actors.get(actorDid)?.handlers.delete(messageType);
109
+ }
110
+ async sendMessage(message, sender, recipient) {
111
+ if (!recipient) {
112
+ throw new HttpTransportError('HttpServerTransport.sendMessage requires a recipient. Use publishRepeating for broadcasts.', 'MISSING_RECIPIENT', { messageType: message.type });
113
+ }
114
+ const actor = this.#actors.get(sender);
115
+ if (!actor) {
116
+ throw new HttpTransportError(`Unknown sender: ${sender}`, 'UNKNOWN_SENDER', { did: sender });
117
+ }
118
+ const envelope = signEnvelope(message, { did: sender, keys: actor.keys }, { to: recipient });
119
+ const dataJson = JSON.stringify(envelope);
120
+ const inbox = this.#getOrCreateInbox(recipient);
121
+ const stored = inbox.buffer.append(SSE_EVENT.MESSAGE, dataJson);
122
+ for (const sub of inbox.subscribers) {
123
+ this.#safeWrite(sub.stream, stored.event, stored.data, stored.id);
124
+ }
125
+ }
126
+ publishRepeating(message, sender, _intervalMs, _recipient) {
127
+ const actor = this.#actors.get(sender);
128
+ if (!actor) {
129
+ throw new HttpTransportError(`Unknown sender: ${sender}`, 'UNKNOWN_SENDER', { did: sender });
130
+ }
131
+ const envelope = signEnvelope(message, { did: sender, keys: actor.keys });
132
+ const dataJson = JSON.stringify(envelope);
133
+ const id = String(++this.#advertSeq);
134
+ const expiresAtMs = this.#now() + this.#advertTtlMs;
135
+ this.#currentAdvert = { dataJson, id, expiresAtMs };
136
+ for (const sub of this.#broadcastSubscribers) {
137
+ this.#safeWrite(sub.stream, SSE_EVENT.ADVERT, dataJson, id);
138
+ }
139
+ return () => {
140
+ if (this.#currentAdvert?.id === id)
141
+ this.#currentAdvert = undefined;
142
+ };
143
+ }
144
+ // ----------------------------------------------------------------
145
+ // Sans-I/O HTTP surface
146
+ // ----------------------------------------------------------------
147
+ /**
148
+ * Handle a POST / GET request (non-SSE). The caller dispatches SSE paths to
149
+ * {@link handleSse} instead. Returns a fully formed response; the caller's
150
+ * adapter turns it into an HTTP write.
151
+ */
152
+ async handleRequest(req) {
153
+ const method = req.method.toUpperCase();
154
+ if (method === 'OPTIONS')
155
+ return this.#respond(204, '', req);
156
+ const path = extractPath(req.url);
157
+ if (method === 'GET' && path === HTTP_ROUTE.WELL_KNOWN) {
158
+ return this.#respondJson(200, this.#wellKnownMetadata(), req);
159
+ }
160
+ if (method === 'POST' && path === HTTP_ROUTE.MESSAGES) {
161
+ return await this.#handleMessagesPost(req);
162
+ }
163
+ if (method === 'POST' && path === HTTP_ROUTE.ADVERTS) {
164
+ return await this.#handleAdvertsPost(req);
165
+ }
166
+ return this.#respondJson(404, { error: 'not_found' }, req);
167
+ }
168
+ /**
169
+ * Open an SSE stream for a GET request. The caller is responsible for
170
+ * flushing writes and propagating the `onClose` callback when the HTTP
171
+ * connection ends.
172
+ */
173
+ handleSse(req, stream) {
174
+ if (req.method.toUpperCase() !== 'GET') {
175
+ stream.close();
176
+ return;
177
+ }
178
+ const path = extractPath(req.url);
179
+ if (path === HTTP_ROUTE.ADVERTS) {
180
+ this.#openBroadcastSubscription(stream);
181
+ return;
182
+ }
183
+ const inboxMatch = matchInboxPath(path);
184
+ if (inboxMatch) {
185
+ this.#openInboxSubscription(req, stream, inboxMatch.did, path);
186
+ return;
187
+ }
188
+ stream.close();
189
+ }
190
+ // ----------------------------------------------------------------
191
+ // Request handlers
192
+ // ----------------------------------------------------------------
193
+ async #handleMessagesPost(req) {
194
+ const envelope = parseJsonBody(req.body);
195
+ if (!envelope)
196
+ return this.#respondJson(400, { error: 'invalid_json' }, req);
197
+ const senderPk = this.#resolveSenderPk(envelope.from);
198
+ if (!senderPk) {
199
+ return this.#respondJson(401, { error: 'unknown_sender' }, req);
200
+ }
201
+ try {
202
+ verifyEnvelope(envelope, senderPk, { clockSkewSec: this.#clockSkewSec });
203
+ }
204
+ catch (err) {
205
+ this.#logger.debug('POST /v1/messages: envelope verification failed:', err);
206
+ return this.#respondJson(401, { error: 'invalid_envelope' }, req);
207
+ }
208
+ if (!this.#nonceCache.store(envelope.from, envelope.nonce, envelope.timestamp)) {
209
+ return this.#respondJson(409, { error: 'replay' }, req);
210
+ }
211
+ if (!this.#rateLimiter.consume(envelope.from, this.#now())) {
212
+ return this.#respondJson(429, { error: 'rate_limited' }, req);
213
+ }
214
+ if (!envelope.to) {
215
+ return this.#respondJson(400, { error: 'missing_recipient' }, req);
216
+ }
217
+ const actor = this.#actors.get(envelope.to);
218
+ if (!actor) {
219
+ return this.#respondJson(404, { error: 'unknown_recipient' }, req);
220
+ }
221
+ const revived = reviveFromWire(envelope.message);
222
+ const flat = flattenMessage(revived);
223
+ const messageType = typeof flat.type === 'string' ? flat.type : undefined;
224
+ if (!messageType)
225
+ return this.#respondJson(400, { error: 'missing_message_type' }, req);
226
+ const handler = actor.handlers.get(messageType);
227
+ if (handler) {
228
+ try {
229
+ await handler(flat);
230
+ }
231
+ catch (err) {
232
+ this.#logger.debug(`Handler threw for ${messageType}:`, err);
233
+ }
234
+ }
235
+ return this.#respondJson(202, { ok: true }, req);
236
+ }
237
+ async #handleAdvertsPost(req) {
238
+ const envelope = parseJsonBody(req.body);
239
+ if (!envelope)
240
+ return this.#respondJson(400, { error: 'invalid_json' }, req);
241
+ const senderPk = this.#resolveSenderPk(envelope.from);
242
+ if (!senderPk)
243
+ return this.#respondJson(401, { error: 'unknown_sender' }, req);
244
+ try {
245
+ verifyEnvelope(envelope, senderPk, { clockSkewSec: this.#clockSkewSec });
246
+ }
247
+ catch {
248
+ return this.#respondJson(401, { error: 'invalid_envelope' }, req);
249
+ }
250
+ if (!this.#nonceCache.store(envelope.from, envelope.nonce, envelope.timestamp)) {
251
+ return this.#respondJson(409, { error: 'replay' }, req);
252
+ }
253
+ if (!this.#rateLimiter.consume(envelope.from, this.#now())) {
254
+ return this.#respondJson(429, { error: 'rate_limited' }, req);
255
+ }
256
+ // Only registered actors can publish adverts on this server.
257
+ if (!this.#actors.has(envelope.from)) {
258
+ return this.#respondJson(403, { error: 'not_an_actor' }, req);
259
+ }
260
+ const id = String(++this.#advertSeq);
261
+ this.#currentAdvert = {
262
+ dataJson: JSON.stringify(envelope),
263
+ id,
264
+ expiresAtMs: this.#now() + this.#advertTtlMs,
265
+ };
266
+ for (const sub of this.#broadcastSubscribers) {
267
+ this.#safeWrite(sub.stream, SSE_EVENT.ADVERT, this.#currentAdvert.dataJson, id);
268
+ }
269
+ return this.#respondJson(202, { ok: true }, req);
270
+ }
271
+ #openBroadcastSubscription(stream) {
272
+ const sub = { stream };
273
+ this.#broadcastSubscribers.add(sub);
274
+ stream.onClose(() => {
275
+ this.#closeBroadcastSubscriber(sub);
276
+ this.#broadcastSubscribers.delete(sub);
277
+ });
278
+ // Replay current advert if still within TTL.
279
+ if (this.#currentAdvert && this.#currentAdvert.expiresAtMs > this.#now()) {
280
+ this.#safeWrite(stream, SSE_EVENT.ADVERT, this.#currentAdvert.dataJson, this.#currentAdvert.id);
281
+ }
282
+ if (this.#heartbeatMs > 0) {
283
+ sub.heartbeatTimer = setInterval(() => {
284
+ try {
285
+ stream.writeComment('hb');
286
+ }
287
+ catch { /* caller-owned failure */ }
288
+ }, this.#heartbeatMs);
289
+ }
290
+ }
291
+ #openInboxSubscription(req, stream, did, path) {
292
+ const auth = req.headers.authorization;
293
+ if (!auth) {
294
+ this.#logger.debug(`Inbox subscribe: missing authorization header for ${did}`);
295
+ stream.close();
296
+ return;
297
+ }
298
+ const senderPk = this.#resolveSenderPk(did);
299
+ if (!senderPk) {
300
+ stream.close();
301
+ return;
302
+ }
303
+ let parsedTs = 0;
304
+ let parsedNonce = '';
305
+ try {
306
+ const parsed = verifyRequestAuth(auth, path, senderPk, {
307
+ clockSkewSec: this.#clockSkewSec,
308
+ now: () => this.#now(),
309
+ });
310
+ if (parsed.did !== did) {
311
+ stream.close();
312
+ return;
313
+ }
314
+ parsedTs = parsed.ts;
315
+ parsedNonce = parsed.nonce;
316
+ }
317
+ catch (err) {
318
+ this.#logger.debug(`Inbox subscribe: auth verification failed for ${did}:`, err);
319
+ stream.close();
320
+ return;
321
+ }
322
+ if (!this.#nonceCache.store(did, parsedNonce, parsedTs)) {
323
+ stream.close();
324
+ return;
325
+ }
326
+ if (!this.#rateLimiter.consume(did, this.#now())) {
327
+ stream.close();
328
+ return;
329
+ }
330
+ const inbox = this.#getOrCreateInbox(did);
331
+ const sub = { stream };
332
+ inbox.subscribers.add(sub);
333
+ stream.onClose(() => {
334
+ this.#closeInboxSubscriber(sub);
335
+ inbox.subscribers.delete(sub);
336
+ });
337
+ // Replay buffered events since the client's Last-Event-ID, if any.
338
+ const lastEventId = req.headers['last-event-id'];
339
+ for (const stored of inbox.buffer.since(lastEventId)) {
340
+ this.#safeWrite(stream, stored.event, stored.data, stored.id);
341
+ }
342
+ if (this.#heartbeatMs > 0) {
343
+ sub.heartbeatTimer = setInterval(() => {
344
+ try {
345
+ stream.writeComment('hb');
346
+ }
347
+ catch { /* caller-owned failure */ }
348
+ }, this.#heartbeatMs);
349
+ }
350
+ }
351
+ // ----------------------------------------------------------------
352
+ // Internal helpers
353
+ // ----------------------------------------------------------------
354
+ #getOrCreateInbox(did) {
355
+ let inbox = this.#inboxes.get(did);
356
+ if (!inbox) {
357
+ inbox = { buffer: new InboxBuffer(this.#inboxBufferSize), subscribers: new Set() };
358
+ this.#inboxes.set(did, inbox);
359
+ }
360
+ return inbox;
361
+ }
362
+ #resolveSenderPk(did) {
363
+ const peerBytes = this.#peers.get(did);
364
+ if (peerBytes) {
365
+ try {
366
+ return new CompressedSecp256k1PublicKey(peerBytes);
367
+ }
368
+ catch { /* fall through to the injected resolver */ }
369
+ }
370
+ return this.#resolveSenderPkFn?.(did);
371
+ }
372
+ #safeWrite(stream, event, data, id) {
373
+ try {
374
+ stream.writeEvent(event, data, id);
375
+ }
376
+ catch (err) {
377
+ this.#logger.debug('SSE writeEvent failed:', err);
378
+ }
379
+ }
380
+ #closeBroadcastSubscriber(sub) {
381
+ if (sub.heartbeatTimer)
382
+ clearInterval(sub.heartbeatTimer);
383
+ try {
384
+ sub.stream.close();
385
+ }
386
+ catch { /* already closed */ }
387
+ }
388
+ #closeInboxSubscriber(sub) {
389
+ if (sub.heartbeatTimer)
390
+ clearInterval(sub.heartbeatTimer);
391
+ try {
392
+ sub.stream.close();
393
+ }
394
+ catch { /* already closed */ }
395
+ }
396
+ #respondJson(status, body, req) {
397
+ return {
398
+ status,
399
+ headers: { 'content-type': 'application/json', ...this.#corsHeaders(req) },
400
+ body: JSON.stringify(body),
401
+ };
402
+ }
403
+ #respond(status, body, req) {
404
+ return { status, headers: this.#corsHeaders(req), body };
405
+ }
406
+ #corsHeaders(req) {
407
+ const origin = req.headers.origin;
408
+ if (!origin)
409
+ return {};
410
+ const common = {
411
+ 'access-control-allow-methods': 'GET, POST, OPTIONS',
412
+ 'access-control-allow-headers': 'authorization, content-type, last-event-id',
413
+ 'access-control-max-age': '86400',
414
+ };
415
+ switch (this.#cors.mode) {
416
+ case 'permissive':
417
+ return { 'access-control-allow-origin': '*', ...common };
418
+ case 'allowlist':
419
+ if (this.#cors.origins.includes(origin)) {
420
+ return { 'access-control-allow-origin': origin, vary: 'origin', ...common };
421
+ }
422
+ return {};
423
+ case 'same-origin':
424
+ return {};
425
+ }
426
+ }
427
+ #wellKnownMetadata() {
428
+ return {
429
+ envelopeVersion: HTTP_ENVELOPE_VERSION,
430
+ heartbeatIntervalMs: this.#heartbeatMs,
431
+ inboxBufferSize: this.#inboxBufferSize,
432
+ advertTtlMs: this.#advertTtlMs,
433
+ };
434
+ }
435
+ }
436
+ // ----------------------------------------------------------------
437
+ // Module-local pure helpers
438
+ // ----------------------------------------------------------------
439
+ function extractPath(reqUrl) {
440
+ if (reqUrl.startsWith('http://') || reqUrl.startsWith('https://')) {
441
+ return new URL(reqUrl).pathname;
442
+ }
443
+ const q = reqUrl.indexOf('?');
444
+ return q === -1 ? reqUrl : reqUrl.slice(0, q);
445
+ }
446
+ function matchInboxPath(path) {
447
+ if (!path.startsWith(INBOX_PATH_PREFIX) || !path.endsWith(INBOX_PATH_SUFFIX))
448
+ return undefined;
449
+ const encodedDid = path.slice(INBOX_PATH_PREFIX.length, path.length - INBOX_PATH_SUFFIX.length);
450
+ if (!encodedDid)
451
+ return undefined;
452
+ try {
453
+ return { did: decodeURIComponent(encodedDid) };
454
+ }
455
+ catch {
456
+ return undefined;
457
+ }
458
+ }
459
+ function parseJsonBody(body) {
460
+ if (body === undefined || body === '')
461
+ return undefined;
462
+ try {
463
+ return JSON.parse(body);
464
+ }
465
+ catch {
466
+ return undefined;
467
+ }
468
+ }
469
+ function flattenMessage(msg) {
470
+ if (msg.body && typeof msg.body === 'object') {
471
+ return { ...msg, ...msg.body };
472
+ }
473
+ return msg;
474
+ }
475
+ //# sourceMappingURL=server.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/transport/http/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAGlE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGjD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,UAAU,EACV,SAAS,GAEV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAgGtD,MAAM,iBAAiB,GAAG,aAAa,CAAC;AACxC,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAEnC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,oBAAoB,GAAI,MAAM,CAAC;AAErC;;;;;;;;;GASG;AACH,MAAM,OAAO,mBAAmB;IACrB,IAAI,GAAG,MAAM,CAAC;IAEd,OAAO,CAAqB;IAC5B,KAAK,CAA2B;IAChC,aAAa,CAAe;IAC5B,gBAAgB,CAAY;IAC5B,YAAY,CAAgB;IAC5B,YAAY,CAAgB;IAC5B,YAAY,CAAqB;IACjC,WAAW,CAAqB;IAChC,IAAI,CAA8B;IAClC,kBAAkB,CAA6D;IAE/E,OAAO,GAA8B,IAAI,GAAG,EAAE,CAAC;IAC/C,MAAM,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC/C,QAAQ,GAA6B,IAAI,GAAG,EAAE,CAAC;IAE/C,qBAAqB,GAA6B,IAAI,GAAG,EAAE,CAAC;IAErE,cAAc,CAAiB;IAC/B,UAAU,GAAG,CAAC,CAAC;IAEf,YAAY,SAAoC,EAAE;QAChD,IAAI,CAAC,OAAO,GAAY,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC;QACxD,IAAI,CAAC,KAAK,GAAc,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAC9D,IAAI,CAAC,aAAa,GAAM,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;QACtE,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,eAAe,IAAI,GAAG,CAAC;QACtD,IAAI,CAAC,YAAY,GAAO,MAAM,CAAC,WAAW,IAAI,qBAAqB,CAAC;QACpE,IAAI,CAAC,YAAY,GAAO,MAAM,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;QAC3E,IAAI,CAAC,YAAY,GAAO,MAAM,CAAC,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC;QAChE,IAAI,CAAC,WAAW,GAAQ,MAAM,CAAC,UAAU,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAe,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC;IACnD,CAAC;IAED,mEAAmE;IACnE,sBAAsB;IACtB,mEAAmE;IAEnE,KAAK;QACH,uEAAuE;QACvE,qDAAqD;IACvD,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,KAAI,MAAM,GAAG,IAAI,IAAI,CAAC,qBAAqB;YAAE,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;QACjF,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;QACnC,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,KAAI,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW;gBAAE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YACpE,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;IAClC,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,IAAoB;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,eAAe,CAAC,GAAW;QACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;IAC1D,CAAC;IAED,YAAY,CAAC,GAAW,EAAE,eAA2B;QACnD,IAAI,CAAC;YACH,IAAI,4BAA4B,CAAC,eAAe,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,kBAAkB,CAC1B,+BAA+B,GAAG,EAAE,EACpC,kBAAkB,EAClB,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,EAAE,CAC3C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxC,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,sBAAsB,CAAC,QAAgB,EAAE,WAAmB,EAAE,OAAuB;QACnF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,kBAAkB,CAC1B,kCAAkC,QAAQ,iBAAiB,EAC3D,eAAe,EACf,EAAE,GAAG,EAAE,QAAQ,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,wBAAwB,CAAC,QAAgB,EAAE,WAAmB;QAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAoB,EAAE,MAAc,EAAE,SAAkB;QACxE,IAAG,CAAC,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,kBAAkB,CAC1B,4FAA4F,EAC5F,mBAAmB,EACnB,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,CAC9B,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,kBAAkB,CAC1B,mBAAmB,MAAM,EAAE,EAC3B,gBAAgB,EAChB,EAAE,GAAG,EAAE,MAAM,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAI,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChE,KAAI,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,gBAAgB,CACd,OAAuB,EACvB,MAAkB,EAClB,WAAmB,EACnB,UAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,MAAM,EAAE,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAS,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QAEpD,IAAI,CAAC,cAAc,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACpD,KAAI,MAAM,GAAG,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,GAAS,EAAE;YAChB,IAAG,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE;gBAAE,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QACrE,CAAC,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,wBAAwB;IACxB,mEAAmE;IAEnE;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,GAAoB;QACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,IAAG,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAE5D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAG,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAG,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;YACrD,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,IAAG,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YACpD,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,GAAoB,EAAE,MAAiB;QAC/C,IAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAG,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACxC,IAAG,UAAU,EAAE,CAAC;YACd,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,mEAAmE;IACnE,mBAAmB;IACnB,mEAAmE;IAEnE,KAAK,CAAC,mBAAmB,CAAC,GAAoB;QAC5C,MAAM,QAAQ,GAAG,aAAa,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,IAAG,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtD,IAAG,CAAC,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC;YACH,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAM,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9E,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAED,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QAED,IAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAA4B,CAAC;QAC5E,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,IAAG,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAG,OAAO,EAAE,CAAC;YACX,IAAI,CAAC;gBAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAC5B,OAAM,GAAG,EAAE,CAAC;gBACV,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,WAAW,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAoB;QAC3C,MAAM,QAAQ,GAAG,aAAa,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,IAAG,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtD,IAAG,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAE9E,IAAI,CAAC;YACH,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9E,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QAED,6DAA6D;QAC7D,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG;YACpB,QAAQ,EAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YACtC,EAAE;YACF,WAAW,EAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY;SAC9C,CAAC;QACF,KAAI,MAAM,GAAG,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,0BAA0B,CAAC,MAAiB;QAC1C,MAAM,GAAG,GAAwB,EAAE,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,6CAA6C;QAC7C,IAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACxE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;QAED,IAAG,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBACpC,IAAI,CAAC;oBAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;YACzE,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,sBAAsB,CAAC,GAAoB,EAAE,MAAiB,EAAE,GAAW,EAAE,IAAY;QACvF,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QACvC,IAAG,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAG,CAAC,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACrD,YAAY,EAAG,IAAI,CAAC,aAAa;gBACjC,GAAG,EAAY,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;aACjC,CAAC,CAAC;YACH,IAAG,MAAM,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAClD,QAAQ,GAAM,MAAM,CAAC,EAAE,CAAC;YACxB,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAM,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iDAAiD,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YACjF,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,CAAC;QACxC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAChC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,mEAAmE;QACnE,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACjD,KAAI,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAG,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBACpC,IAAI,CAAC;oBAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;YACzE,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,mBAAmB;IACnB,mEAAmE;IAEnE,iBAAiB,CAAC,GAAW;QAC3B,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,KAAK,GAAG,EAAE,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YACnF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gBAAgB,CAAC,GAAW;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAG,SAAS,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,OAAO,IAAI,4BAA4B,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAC3D,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,UAAU,CAAC,MAAiB,EAAE,KAAa,EAAE,IAAY,EAAE,EAAW;QACpE,IAAI,CAAC;YAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAC3C,OAAM,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACnE,CAAC;IAED,yBAAyB,CAAC,GAAwB;QAChD,IAAG,GAAG,CAAC,cAAc;YAAE,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC5D,CAAC;IAED,qBAAqB,CAAC,GAAoB;QACxC,IAAG,GAAG,CAAC,cAAc;YAAE,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC5D,CAAC;IAED,YAAY,CAAC,MAAc,EAAE,IAAa,EAAE,GAAoB;QAC9D,OAAO;YACL,MAAM;YACN,OAAO,EAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;YAC3E,IAAI,EAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,GAAoB;QACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,YAAY,CAAC,GAAoB;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAG,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,GAA2B;YACrC,8BAA8B,EAAG,oBAAoB;YACrD,8BAA8B,EAAG,4CAA4C;YAC7E,wBAAwB,EAAS,OAAO;SACzC,CAAC;QACF,QAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACvB,KAAK,YAAY;gBACf,OAAO,EAAE,6BAA6B,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YAC3D,KAAK,WAAW;gBACd,IAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;gBAC9E,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,KAAK,aAAa;gBAChB,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,kBAAkB;QAChB,OAAO;YACL,eAAe,EAAO,qBAAqB;YAC3C,mBAAmB,EAAG,IAAI,CAAC,YAAY;YACvC,eAAe,EAAO,IAAI,CAAC,gBAAgB;YAC3C,WAAW,EAAW,IAAI,CAAC,YAAY;SACxC,CAAC;IACJ,CAAC;CACF;AAED,mEAAmE;AACnE,4BAA4B;AAC5B,mEAAmE;AAEnE,SAAS,WAAW,CAAC,MAAc;IACjC,IAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IAClC,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAG,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChG,IAAG,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,CAAC;QAAC,OAAO,EAAE,GAAG,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;IAAC,CAAC;IACvD,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAI,IAAwB;IAChD,IAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAAC,CAAC;IACrC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC7B,CAAC;AAED,SAAS,cAAc,CAAC,GAA4B;IAClD,IAAG,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,GAAG,GAAG,EAAE,GAAI,GAAG,CAAC,IAAgC,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}