@did-btcr2/aggregation 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +373 -0
- package/README.md +19 -0
- package/dist/.tsbuildinfo +1 -0
- package/dist/browser.js +24017 -0
- package/dist/browser.mjs +24011 -0
- package/dist/cjs/index.js +5690 -0
- package/dist/cjs/package.json +1 -0
- package/dist/esm/beacon-strategy.js +76 -0
- package/dist/esm/beacon-strategy.js.map +1 -0
- package/dist/esm/cohort.js +316 -0
- package/dist/esm/cohort.js.map +1 -0
- package/dist/esm/conditions.js +102 -0
- package/dist/esm/conditions.js.map +1 -0
- package/dist/esm/errors.js +22 -0
- package/dist/esm/errors.js.map +1 -0
- package/dist/esm/fallback-spend.js +132 -0
- package/dist/esm/fallback-spend.js.map +1 -0
- package/dist/esm/index.js +21 -0
- package/dist/esm/index.js.map +1 -0
- package/dist/esm/logger.js +15 -0
- package/dist/esm/logger.js.map +1 -0
- package/dist/esm/messages/base.js +36 -0
- package/dist/esm/messages/base.js.map +1 -0
- package/dist/esm/messages/bodies.js +149 -0
- package/dist/esm/messages/bodies.js.map +1 -0
- package/dist/esm/messages/constants.js +37 -0
- package/dist/esm/messages/constants.js.map +1 -0
- package/dist/esm/messages/factories.js +139 -0
- package/dist/esm/messages/factories.js.map +1 -0
- package/dist/esm/messages/guards.js +40 -0
- package/dist/esm/messages/guards.js.map +1 -0
- package/dist/esm/messages/index.js +6 -0
- package/dist/esm/messages/index.js.map +1 -0
- package/dist/esm/participant.js +588 -0
- package/dist/esm/participant.js.map +1 -0
- package/dist/esm/phases.js +45 -0
- package/dist/esm/phases.js.map +1 -0
- package/dist/esm/recovery-policy.js +156 -0
- package/dist/esm/recovery-policy.js.map +1 -0
- package/dist/esm/recovery-spend.js +106 -0
- package/dist/esm/recovery-spend.js.map +1 -0
- package/dist/esm/runner/aggregation-runner.js +75 -0
- package/dist/esm/runner/aggregation-runner.js.map +1 -0
- package/dist/esm/runner/events.js +2 -0
- package/dist/esm/runner/events.js.map +1 -0
- package/dist/esm/runner/index.js +6 -0
- package/dist/esm/runner/index.js.map +1 -0
- package/dist/esm/runner/participant-runner.js +407 -0
- package/dist/esm/runner/participant-runner.js.map +1 -0
- package/dist/esm/runner/service-runner.js +701 -0
- package/dist/esm/runner/service-runner.js.map +1 -0
- package/dist/esm/runner/typed-emitter.js +80 -0
- package/dist/esm/runner/typed-emitter.js.map +1 -0
- package/dist/esm/service.js +774 -0
- package/dist/esm/service.js.map +1 -0
- package/dist/esm/signer.js +33 -0
- package/dist/esm/signer.js.map +1 -0
- package/dist/esm/signing-session.js +195 -0
- package/dist/esm/signing-session.js.map +1 -0
- package/dist/esm/transport/didcomm.js +41 -0
- package/dist/esm/transport/didcomm.js.map +1 -0
- package/dist/esm/transport/error.js +12 -0
- package/dist/esm/transport/error.js.map +1 -0
- package/dist/esm/transport/factory.js +29 -0
- package/dist/esm/transport/factory.js.map +1 -0
- package/dist/esm/transport/http/client.js +342 -0
- package/dist/esm/transport/http/client.js.map +1 -0
- package/dist/esm/transport/http/envelope.js +126 -0
- package/dist/esm/transport/http/envelope.js.map +1 -0
- package/dist/esm/transport/http/errors.js +11 -0
- package/dist/esm/transport/http/errors.js.map +1 -0
- package/dist/esm/transport/http/inbox-buffer.js +45 -0
- package/dist/esm/transport/http/inbox-buffer.js.map +1 -0
- package/dist/esm/transport/http/index.js +12 -0
- package/dist/esm/transport/http/index.js.map +1 -0
- package/dist/esm/transport/http/nonce-cache.js +38 -0
- package/dist/esm/transport/http/nonce-cache.js.map +1 -0
- package/dist/esm/transport/http/protocol.js +28 -0
- package/dist/esm/transport/http/protocol.js.map +1 -0
- package/dist/esm/transport/http/rate-limiter.js +45 -0
- package/dist/esm/transport/http/rate-limiter.js.map +1 -0
- package/dist/esm/transport/http/request-auth.js +100 -0
- package/dist/esm/transport/http/request-auth.js.map +1 -0
- package/dist/esm/transport/http/server.js +475 -0
- package/dist/esm/transport/http/server.js.map +1 -0
- package/dist/esm/transport/http/sse-stream.js +110 -0
- package/dist/esm/transport/http/sse-stream.js.map +1 -0
- package/dist/esm/transport/http/sse-writer.js +25 -0
- package/dist/esm/transport/http/sse-writer.js.map +1 -0
- package/dist/esm/transport/in-memory.js +149 -0
- package/dist/esm/transport/in-memory.js.map +1 -0
- package/dist/esm/transport/index.js +8 -0
- package/dist/esm/transport/index.js.map +1 -0
- package/dist/esm/transport/nostr.js +491 -0
- package/dist/esm/transport/nostr.js.map +1 -0
- package/dist/esm/transport/transport.js +2 -0
- package/dist/esm/transport/transport.js.map +1 -0
- package/dist/types/beacon-strategy.d.ts +56 -0
- package/dist/types/beacon-strategy.d.ts.map +1 -0
- package/dist/types/cohort.d.ts +188 -0
- package/dist/types/cohort.d.ts.map +1 -0
- package/dist/types/conditions.d.ts +86 -0
- package/dist/types/conditions.d.ts.map +1 -0
- package/dist/types/errors.d.ts +14 -0
- package/dist/types/errors.d.ts.map +1 -0
- package/dist/types/fallback-spend.d.ts +94 -0
- package/dist/types/fallback-spend.d.ts.map +1 -0
- package/dist/types/index.d.ts +17 -0
- package/dist/types/index.d.ts.map +1 -0
- package/dist/types/logger.d.ts +22 -0
- package/dist/types/logger.d.ts.map +1 -0
- package/dist/types/messages/base.d.ts +58 -0
- package/dist/types/messages/base.d.ts.map +1 -0
- package/dist/types/messages/bodies.d.ts +177 -0
- package/dist/types/messages/bodies.d.ts.map +1 -0
- package/dist/types/messages/constants.d.ts +31 -0
- package/dist/types/messages/constants.d.ts.map +1 -0
- package/dist/types/messages/factories.d.ts +217 -0
- package/dist/types/messages/factories.d.ts.map +1 -0
- package/dist/types/messages/guards.d.ts +11 -0
- package/dist/types/messages/guards.d.ts.map +1 -0
- package/dist/types/messages/index.d.ts +6 -0
- package/dist/types/messages/index.d.ts.map +1 -0
- package/dist/types/participant.d.ts +162 -0
- package/dist/types/participant.d.ts.map +1 -0
- package/dist/types/phases.d.ts +55 -0
- package/dist/types/phases.d.ts.map +1 -0
- package/dist/types/recovery-policy.d.ts +132 -0
- package/dist/types/recovery-policy.d.ts.map +1 -0
- package/dist/types/recovery-spend.d.ts +94 -0
- package/dist/types/recovery-spend.d.ts.map +1 -0
- package/dist/types/runner/aggregation-runner.d.ts +72 -0
- package/dist/types/runner/aggregation-runner.d.ts.map +1 -0
- package/dist/types/runner/events.d.ts +147 -0
- package/dist/types/runner/events.d.ts.map +1 -0
- package/dist/types/runner/index.d.ts +6 -0
- package/dist/types/runner/index.d.ts.map +1 -0
- package/dist/types/runner/participant-runner.d.ts +122 -0
- package/dist/types/runner/participant-runner.d.ts.map +1 -0
- package/dist/types/runner/service-runner.d.ts +228 -0
- package/dist/types/runner/service-runner.d.ts.map +1 -0
- package/dist/types/runner/typed-emitter.d.ts +41 -0
- package/dist/types/runner/typed-emitter.d.ts.map +1 -0
- package/dist/types/service.d.ts +177 -0
- package/dist/types/service.d.ts.map +1 -0
- package/dist/types/signer.d.ts +50 -0
- package/dist/types/signer.d.ts.map +1 -0
- package/dist/types/signing-session.d.ts +81 -0
- package/dist/types/signing-session.d.ts.map +1 -0
- package/dist/types/transport/didcomm.d.ts +23 -0
- package/dist/types/transport/didcomm.d.ts.map +1 -0
- package/dist/types/transport/error.d.ts +8 -0
- package/dist/types/transport/error.d.ts.map +1 -0
- package/dist/types/transport/factory.d.ts +28 -0
- package/dist/types/transport/factory.d.ts.map +1 -0
- package/dist/types/transport/http/client.d.ts +56 -0
- package/dist/types/transport/http/client.d.ts.map +1 -0
- package/dist/types/transport/http/envelope.d.ts +64 -0
- package/dist/types/transport/http/envelope.d.ts.map +1 -0
- package/dist/types/transport/http/errors.d.ts +9 -0
- package/dist/types/transport/http/errors.d.ts.map +1 -0
- package/dist/types/transport/http/inbox-buffer.d.ts +32 -0
- package/dist/types/transport/http/inbox-buffer.d.ts.map +1 -0
- package/dist/types/transport/http/index.d.ts +12 -0
- package/dist/types/transport/http/index.d.ts.map +1 -0
- package/dist/types/transport/http/nonce-cache.d.ts +26 -0
- package/dist/types/transport/http/nonce-cache.d.ts.map +1 -0
- package/dist/types/transport/http/protocol.d.ts +53 -0
- package/dist/types/transport/http/protocol.d.ts.map +1 -0
- package/dist/types/transport/http/rate-limiter.d.ts +41 -0
- package/dist/types/transport/http/rate-limiter.d.ts.map +1 -0
- package/dist/types/transport/http/request-auth.d.ts +50 -0
- package/dist/types/transport/http/request-auth.d.ts.map +1 -0
- package/dist/types/transport/http/server.d.ts +118 -0
- package/dist/types/transport/http/server.d.ts.map +1 -0
- package/dist/types/transport/http/sse-stream.d.ts +34 -0
- package/dist/types/transport/http/sse-stream.d.ts.map +1 -0
- package/dist/types/transport/http/sse-writer.d.ts +12 -0
- package/dist/types/transport/http/sse-writer.d.ts.map +1 -0
- package/dist/types/transport/in-memory.d.ts +64 -0
- package/dist/types/transport/in-memory.d.ts.map +1 -0
- package/dist/types/transport/index.d.ts +8 -0
- package/dist/types/transport/index.d.ts.map +1 -0
- package/dist/types/transport/nostr.d.ts +153 -0
- package/dist/types/transport/nostr.d.ts.map +1 -0
- package/dist/types/transport/transport.d.ts +62 -0
- package/dist/types/transport/transport.d.ts.map +1 -0
- package/package.json +128 -0
- package/src/beacon-strategy.ts +142 -0
- package/src/cohort.ts +422 -0
- package/src/conditions.ts +172 -0
- package/src/errors.ts +25 -0
- package/src/fallback-spend.ts +223 -0
- package/src/index.ts +23 -0
- package/src/logger.ts +33 -0
- package/src/messages/base.ts +80 -0
- package/src/messages/bodies.ts +328 -0
- package/src/messages/constants.ts +40 -0
- package/src/messages/factories.ts +297 -0
- package/src/messages/guards.ts +61 -0
- package/src/messages/index.ts +5 -0
- package/src/participant.ts +779 -0
- package/src/phases.ts +91 -0
- package/src/recovery-policy.ts +237 -0
- package/src/recovery-spend.ts +192 -0
- package/src/runner/aggregation-runner.ts +125 -0
- package/src/runner/events.ts +129 -0
- package/src/runner/index.ts +5 -0
- package/src/runner/participant-runner.ts +488 -0
- package/src/runner/service-runner.ts +891 -0
- package/src/runner/typed-emitter.ts +87 -0
- package/src/service.ts +1000 -0
- package/src/signer.ts +67 -0
- package/src/signing-session.ts +290 -0
- package/src/transport/didcomm.ts +59 -0
- package/src/transport/error.ts +13 -0
- package/src/transport/factory.ts +65 -0
- package/src/transport/http/client.ts +409 -0
- package/src/transport/http/envelope.ts +204 -0
- package/src/transport/http/errors.ts +11 -0
- package/src/transport/http/inbox-buffer.ts +53 -0
- package/src/transport/http/index.ts +11 -0
- package/src/transport/http/nonce-cache.ts +43 -0
- package/src/transport/http/protocol.ts +57 -0
- package/src/transport/http/rate-limiter.ts +75 -0
- package/src/transport/http/request-auth.ts +164 -0
- package/src/transport/http/server.ts +617 -0
- package/src/transport/http/sse-stream.ts +121 -0
- package/src/transport/http/sse-writer.ts +23 -0
- package/src/transport/in-memory.ts +178 -0
- package/src/transport/index.ts +7 -0
- package/src/transport/nostr.ts +576 -0
- package/src/transport/transport.ts +79 -0
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
export class InMemoryRateLimitStore {
|
|
2
|
+
#buckets = new Map();
|
|
3
|
+
get(key) {
|
|
4
|
+
return this.#buckets.get(key);
|
|
5
|
+
}
|
|
6
|
+
set(key, state) {
|
|
7
|
+
this.#buckets.set(key, state);
|
|
8
|
+
}
|
|
9
|
+
}
|
|
10
|
+
/**
|
|
11
|
+
* Token-bucket rate limiter keyed by an opaque string (typically a verified
|
|
12
|
+
* sender DID). Tokens refill linearly at `rps` up to `burst`. Each `consume`
|
|
13
|
+
* call atomically debits one token or returns `false` to reject.
|
|
14
|
+
*
|
|
15
|
+
* The limiter is synchronous and deterministic given `nowMs` - tests can
|
|
16
|
+
* drive it with a fixed clock to exercise exact boundaries.
|
|
17
|
+
*/
|
|
18
|
+
export class RateLimiter {
|
|
19
|
+
#rps;
|
|
20
|
+
#burst;
|
|
21
|
+
#store;
|
|
22
|
+
constructor(config = {}) {
|
|
23
|
+
this.#rps = config.rps ?? 10;
|
|
24
|
+
this.#burst = config.burst ?? 30;
|
|
25
|
+
this.#store = config.store ?? new InMemoryRateLimitStore();
|
|
26
|
+
}
|
|
27
|
+
/** Consume one token for `key`. Returns `true` if accepted, `false` if throttled. */
|
|
28
|
+
consume(key, nowMs) {
|
|
29
|
+
const existing = this.#store.get(key);
|
|
30
|
+
const state = existing ?? { tokens: this.#burst, lastRefillMs: nowMs };
|
|
31
|
+
if (existing) {
|
|
32
|
+
const elapsedSec = Math.max(0, (nowMs - existing.lastRefillMs) / 1000);
|
|
33
|
+
state.tokens = Math.min(this.#burst, existing.tokens + elapsedSec * this.#rps);
|
|
34
|
+
state.lastRefillMs = nowMs;
|
|
35
|
+
}
|
|
36
|
+
if (state.tokens < 1) {
|
|
37
|
+
this.#store.set(key, state);
|
|
38
|
+
return false;
|
|
39
|
+
}
|
|
40
|
+
state.tokens -= 1;
|
|
41
|
+
this.#store.set(key, state);
|
|
42
|
+
return true;
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
//# sourceMappingURL=rate-limiter.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../../src/transport/http/rate-limiter.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,sBAAsB;IACxB,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEnD,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAkB;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;CACF;AAWD;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACb,IAAI,CAAS;IACb,MAAM,CAAS;IACf,MAAM,CAAiB;IAEhC,YAAY,SAA4B,EAAE;QACxC,IAAI,CAAC,IAAI,GAAK,MAAM,CAAC,GAAG,IAAM,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,sBAAsB,EAAE,CAAC;IAC7D,CAAC;IAED,qFAAqF;IACrF,OAAO,CAAC,GAAW,EAAE,KAAa;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAgB,QAAQ,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAEpF,IAAG,QAAQ,EAAE,CAAC;YACZ,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;YACvE,KAAK,CAAC,MAAM,GAAS,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACrF,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;QAC7B,CAAC;QAED,IAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
|
|
@@ -0,0 +1,100 @@
|
|
|
1
|
+
import { canonicalHashBytes } from '@did-btcr2/common';
|
|
2
|
+
import { bytesToHex, hexToBytes, randomBytes } from '@noble/hashes/utils';
|
|
3
|
+
import { HttpTransportError } from './errors.js';
|
|
4
|
+
import { DEFAULT_CLOCK_SKEW_SEC, DEFAULT_NONCE_LEN_BYTES, HTTP_ENVELOPE_VERSION } from './protocol.js';
|
|
5
|
+
/**
|
|
6
|
+
* `Authorization`-header scheme used to authenticate SSE subscription
|
|
7
|
+
* requests. The header value takes the form
|
|
8
|
+
* `BTCR2-Sig v=<n>,did=<did>,ts=<unix>,nonce=<hex>,sig=<hex>`.
|
|
9
|
+
*
|
|
10
|
+
* Used only for GET endpoints (SSE inbox subscribe). POST endpoints carry a
|
|
11
|
+
* full {@link SignedEnvelope} in the request body instead.
|
|
12
|
+
*/
|
|
13
|
+
export const REQUEST_AUTH_SCHEME = 'BTCR2-Sig';
|
|
14
|
+
/**
|
|
15
|
+
* Build an `Authorization` header value proving the caller controls the
|
|
16
|
+
* private key for `did`. Covers a specific request path so the signature
|
|
17
|
+
* can't be replayed against a different endpoint.
|
|
18
|
+
*/
|
|
19
|
+
export function buildRequestAuth(did, keys, path, opts = {}) {
|
|
20
|
+
const ts = opts.timestamp ?? Math.floor(Date.now() / 1000);
|
|
21
|
+
const nonce = opts.nonce ?? bytesToHex(randomBytes(DEFAULT_NONCE_LEN_BYTES));
|
|
22
|
+
const digest = canonicalHashBytes({
|
|
23
|
+
v: HTTP_ENVELOPE_VERSION,
|
|
24
|
+
did,
|
|
25
|
+
ts,
|
|
26
|
+
nonce,
|
|
27
|
+
path,
|
|
28
|
+
});
|
|
29
|
+
const sig = keys.secretKey.sign(digest, { scheme: 'schnorr' });
|
|
30
|
+
return `${REQUEST_AUTH_SCHEME} v=${HTTP_ENVELOPE_VERSION},did=${did},ts=${ts},nonce=${nonce},sig=${bytesToHex(sig)}`;
|
|
31
|
+
}
|
|
32
|
+
/**
|
|
33
|
+
* Parse a `BTCR2-Sig` auth header value into its structured fields. Does NOT
|
|
34
|
+
* verify the signature: call {@link verifyRequestAuth} for that.
|
|
35
|
+
*/
|
|
36
|
+
export function parseRequestAuth(headerValue) {
|
|
37
|
+
const prefix = `${REQUEST_AUTH_SCHEME} `;
|
|
38
|
+
if (!headerValue.startsWith(prefix)) {
|
|
39
|
+
throw new HttpTransportError(`Unexpected auth scheme (want ${REQUEST_AUTH_SCHEME})`, 'REQUEST_AUTH_SCHEME');
|
|
40
|
+
}
|
|
41
|
+
const params = {};
|
|
42
|
+
for (const piece of headerValue.slice(prefix.length).split(',')) {
|
|
43
|
+
const eq = piece.indexOf('=');
|
|
44
|
+
if (eq === -1)
|
|
45
|
+
continue;
|
|
46
|
+
const key = piece.slice(0, eq).trim();
|
|
47
|
+
const val = piece.slice(eq + 1).trim();
|
|
48
|
+
if (key.length > 0)
|
|
49
|
+
params[key] = val;
|
|
50
|
+
}
|
|
51
|
+
const v = Number(params.v);
|
|
52
|
+
const ts = Number(params.ts);
|
|
53
|
+
if (!Number.isInteger(v) || !Number.isInteger(ts) || !params.did || !params.nonce || !params.sig) {
|
|
54
|
+
throw new HttpTransportError('Malformed auth header (missing or invalid field)', 'REQUEST_AUTH_MALFORMED', { received: Object.keys(params) });
|
|
55
|
+
}
|
|
56
|
+
return { v, did: params.did, ts, nonce: params.nonce, sig: params.sig };
|
|
57
|
+
}
|
|
58
|
+
/**
|
|
59
|
+
* Parse + verify an auth header. Throws {@link HttpTransportError} on any
|
|
60
|
+
* failure; returns the parsed fields on success.
|
|
61
|
+
*
|
|
62
|
+
* `expectedPath` must match the path the signature commits to. `senderPk`
|
|
63
|
+
* must correspond to the DID the signer claims.
|
|
64
|
+
*/
|
|
65
|
+
export function verifyRequestAuth(headerValue, expectedPath, senderPk, opts = {}) {
|
|
66
|
+
const parsed = parseRequestAuth(headerValue);
|
|
67
|
+
if (parsed.v !== HTTP_ENVELOPE_VERSION) {
|
|
68
|
+
throw new HttpTransportError(`Unsupported auth version: ${parsed.v}`, 'REQUEST_AUTH_VERSION_MISMATCH', { version: parsed.v, expected: HTTP_ENVELOPE_VERSION });
|
|
69
|
+
}
|
|
70
|
+
const skewSec = opts.clockSkewSec ?? DEFAULT_CLOCK_SKEW_SEC;
|
|
71
|
+
const nowMs = opts.now ? opts.now() : Date.now();
|
|
72
|
+
const nowSec = Math.floor(nowMs / 1000);
|
|
73
|
+
const diff = Math.abs(nowSec - parsed.ts);
|
|
74
|
+
if (diff > skewSec) {
|
|
75
|
+
throw new HttpTransportError(`Auth timestamp out of skew: ${diff}s > ${skewSec}s`, 'REQUEST_AUTH_TIMESTAMP_SKEW', { diff, skewSec });
|
|
76
|
+
}
|
|
77
|
+
let sigBytes;
|
|
78
|
+
try {
|
|
79
|
+
sigBytes = hexToBytes(parsed.sig);
|
|
80
|
+
}
|
|
81
|
+
catch {
|
|
82
|
+
throw new HttpTransportError('Auth signature is not valid hex', 'REQUEST_AUTH_SIG_HEX');
|
|
83
|
+
}
|
|
84
|
+
if (sigBytes.length !== 64) {
|
|
85
|
+
throw new HttpTransportError(`Invalid auth signature length: ${sigBytes.length}`, 'REQUEST_AUTH_SIG_LENGTH', { length: sigBytes.length });
|
|
86
|
+
}
|
|
87
|
+
const digest = canonicalHashBytes({
|
|
88
|
+
v: parsed.v,
|
|
89
|
+
did: parsed.did,
|
|
90
|
+
ts: parsed.ts,
|
|
91
|
+
nonce: parsed.nonce,
|
|
92
|
+
path: expectedPath,
|
|
93
|
+
});
|
|
94
|
+
const ok = senderPk.verify(sigBytes, digest, { scheme: 'schnorr' });
|
|
95
|
+
if (!ok) {
|
|
96
|
+
throw new HttpTransportError('Auth signature verification failed', 'REQUEST_AUTH_SIG_INVALID');
|
|
97
|
+
}
|
|
98
|
+
return parsed;
|
|
99
|
+
}
|
|
100
|
+
//# sourceMappingURL=request-auth.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"request-auth.js","sourceRoot":"","sources":["../../../../src/transport/http/request-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEvG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAoB/C;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAY,EACZ,IAAoB,EACpB,IAAY,EACZ,OAAgC,EAAE;IAElC,MAAM,EAAE,GAAM,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,CAAC,EAAG,qBAAqB;QACzB,GAAG;QACH,EAAE;QACF,KAAK;QACL,IAAI;KACL,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAE/D,OAAO,GAAG,mBAAmB,MAAM,qBAAqB,QAAQ,GAAG,OAAO,EAAE,UAAU,KAAK,QAAQ,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;AACvH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,MAAM,MAAM,GAAG,GAAG,mBAAmB,GAAG,CAAC;IACzC,IAAG,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,kBAAkB,CAC1B,gCAAgC,mBAAmB,GAAG,EACtD,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAI,MAAM,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAG,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAG,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,GAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChG,MAAM,IAAI,kBAAkB,CAC1B,kDAAkD,EAClD,wBAAwB,EACxB,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;AAC1E,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAAoB,EACpB,YAAoB,EACpB,QAA0C,EAC1C,OAAyC,EAAE;IAE3C,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAE7C,IAAG,MAAM,CAAC,CAAC,KAAK,qBAAqB,EAAE,CAAC;QACtC,MAAM,IAAI,kBAAkB,CAC1B,6BAA6B,MAAM,CAAC,CAAC,EAAE,EACvC,+BAA+B,EAC/B,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAC5D,MAAM,KAAK,GAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACnD,MAAM,MAAM,GAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAM,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAG,IAAI,GAAG,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,kBAAkB,CAC1B,+BAA+B,IAAI,OAAO,OAAO,GAAG,EACpD,6BAA6B,EAC7B,EAAE,IAAI,EAAE,OAAO,EAAE,CAClB,CAAC;IACJ,CAAC;IAED,IAAI,QAAoB,CAAC;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,EAAE,sBAAsB,CAAC,CAAC;IAC1F,CAAC;IACD,IAAG,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAC1B,kCAAkC,QAAQ,CAAC,MAAM,EAAE,EACnD,yBAAyB,EACzB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC5B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,CAAC,EAAO,MAAM,CAAC,CAAC;QAChB,GAAG,EAAK,MAAM,CAAC,GAAG;QAClB,EAAE,EAAM,MAAM,CAAC,EAAE;QACjB,KAAK,EAAG,MAAM,CAAC,KAAK;QACpB,IAAI,EAAI,YAAY;KACrB,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,IAAG,CAAC,EAAE,EAAE,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,EAAE,0BAA0B,CAAC,CAAC;IACjG,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -0,0 +1,475 @@
|
|
|
1
|
+
import { CompressedSecp256k1PublicKey } from '@did-btcr2/keypair';
|
|
2
|
+
import { CONSOLE_LOGGER } from '../../logger.js';
|
|
3
|
+
import { reviveFromWire, signEnvelope, verifyEnvelope } from './envelope.js';
|
|
4
|
+
import { HttpTransportError } from './errors.js';
|
|
5
|
+
import { InboxBuffer } from './inbox-buffer.js';
|
|
6
|
+
import { NonceCache } from './nonce-cache.js';
|
|
7
|
+
import { DEFAULT_CLOCK_SKEW_SEC, HTTP_ENVELOPE_VERSION, HTTP_ROUTE, SSE_EVENT, } from './protocol.js';
|
|
8
|
+
import { RateLimiter } from './rate-limiter.js';
|
|
9
|
+
import { verifyRequestAuth } from './request-auth.js';
|
|
10
|
+
const INBOX_PATH_PREFIX = '/v1/actors/';
|
|
11
|
+
const INBOX_PATH_SUFFIX = '/inbox';
|
|
12
|
+
const DEFAULT_ADVERT_TTL_MS = 5 * 60 * 1000;
|
|
13
|
+
const DEFAULT_HEARTBEAT_MS = 20_000;
|
|
14
|
+
/**
|
|
15
|
+
* Server-side HTTP transport. Sans-I/O - the caller mounts
|
|
16
|
+
* {@link handleRequest} and {@link handleSse} under their HTTP framework of
|
|
17
|
+
* choice; the transport owns only in-memory state (actors, inboxes, advert
|
|
18
|
+
* cache, replay / rate-limit policies).
|
|
19
|
+
*
|
|
20
|
+
* Implements the generic {@link Transport} interface so the aggregation
|
|
21
|
+
* runners can drive it exactly the same way they drive {@link NostrTransport}
|
|
22
|
+
* or {@link HttpClientTransport}.
|
|
23
|
+
*/
|
|
24
|
+
export class HttpServerTransport {
|
|
25
|
+
name = 'http';
|
|
26
|
+
#logger;
|
|
27
|
+
#cors;
|
|
28
|
+
#clockSkewSec;
|
|
29
|
+
#inboxBufferSize;
|
|
30
|
+
#advertTtlMs;
|
|
31
|
+
#heartbeatMs;
|
|
32
|
+
#rateLimiter;
|
|
33
|
+
#nonceCache;
|
|
34
|
+
#now;
|
|
35
|
+
#resolveSenderPkFn;
|
|
36
|
+
#actors = new Map();
|
|
37
|
+
#peers = new Map();
|
|
38
|
+
#inboxes = new Map();
|
|
39
|
+
#broadcastSubscribers = new Set();
|
|
40
|
+
#currentAdvert;
|
|
41
|
+
#advertSeq = 0;
|
|
42
|
+
constructor(config = {}) {
|
|
43
|
+
this.#logger = config.logger ?? CONSOLE_LOGGER;
|
|
44
|
+
this.#cors = config.cors ?? { mode: 'permissive' };
|
|
45
|
+
this.#clockSkewSec = config.clockSkewSec ?? DEFAULT_CLOCK_SKEW_SEC;
|
|
46
|
+
this.#inboxBufferSize = config.inboxBufferSize ?? 100;
|
|
47
|
+
this.#advertTtlMs = config.advertTtlMs ?? DEFAULT_ADVERT_TTL_MS;
|
|
48
|
+
this.#heartbeatMs = config.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_MS;
|
|
49
|
+
this.#rateLimiter = config.rateLimiter ?? new RateLimiter();
|
|
50
|
+
this.#nonceCache = config.nonceCache ?? new NonceCache();
|
|
51
|
+
this.#now = config.now ?? (() => Date.now());
|
|
52
|
+
this.#resolveSenderPkFn = config.resolveSenderPk;
|
|
53
|
+
}
|
|
54
|
+
// ----------------------------------------------------------------
|
|
55
|
+
// Transport interface
|
|
56
|
+
// ----------------------------------------------------------------
|
|
57
|
+
start() {
|
|
58
|
+
// No-op: server-side transport has no persistent outbound connections.
|
|
59
|
+
// SSE subscribers connect on demand via handleSse().
|
|
60
|
+
}
|
|
61
|
+
/**
|
|
62
|
+
* Detach the transport: close every open SSE subscription, clear the advert
|
|
63
|
+
* cache, and drop all actor / peer / inbox state. Intended for shutdown and
|
|
64
|
+
* for test teardown.
|
|
65
|
+
*/
|
|
66
|
+
stop() {
|
|
67
|
+
for (const sub of this.#broadcastSubscribers)
|
|
68
|
+
this.#closeBroadcastSubscriber(sub);
|
|
69
|
+
this.#broadcastSubscribers.clear();
|
|
70
|
+
for (const inbox of this.#inboxes.values()) {
|
|
71
|
+
for (const sub of inbox.subscribers)
|
|
72
|
+
this.#closeInboxSubscriber(sub);
|
|
73
|
+
inbox.subscribers.clear();
|
|
74
|
+
}
|
|
75
|
+
this.#inboxes.clear();
|
|
76
|
+
this.#currentAdvert = undefined;
|
|
77
|
+
}
|
|
78
|
+
registerActor(did, keys) {
|
|
79
|
+
this.#actors.set(did, { keys, handlers: new Map() });
|
|
80
|
+
}
|
|
81
|
+
unregisterActor(did) {
|
|
82
|
+
this.#actors.delete(did);
|
|
83
|
+
this.#peers.delete(did);
|
|
84
|
+
}
|
|
85
|
+
getActorPk(did) {
|
|
86
|
+
return this.#actors.get(did)?.keys.publicKey.compressed;
|
|
87
|
+
}
|
|
88
|
+
registerPeer(did, communicationPk) {
|
|
89
|
+
try {
|
|
90
|
+
new CompressedSecp256k1PublicKey(communicationPk);
|
|
91
|
+
}
|
|
92
|
+
catch {
|
|
93
|
+
throw new HttpTransportError(`Invalid peer public key for ${did}`, 'INVALID_PEER_KEY', { did, keyLength: communicationPk.length });
|
|
94
|
+
}
|
|
95
|
+
this.#peers.set(did, communicationPk);
|
|
96
|
+
}
|
|
97
|
+
getPeerPk(did) {
|
|
98
|
+
return this.#peers.get(did);
|
|
99
|
+
}
|
|
100
|
+
registerMessageHandler(actorDid, messageType, handler) {
|
|
101
|
+
const actor = this.#actors.get(actorDid);
|
|
102
|
+
if (!actor) {
|
|
103
|
+
throw new HttpTransportError(`Cannot register handler: actor ${actorDid} not registered`, 'UNKNOWN_ACTOR', { did: actorDid });
|
|
104
|
+
}
|
|
105
|
+
actor.handlers.set(messageType, handler);
|
|
106
|
+
}
|
|
107
|
+
unregisterMessageHandler(actorDid, messageType) {
|
|
108
|
+
this.#actors.get(actorDid)?.handlers.delete(messageType);
|
|
109
|
+
}
|
|
110
|
+
async sendMessage(message, sender, recipient) {
|
|
111
|
+
if (!recipient) {
|
|
112
|
+
throw new HttpTransportError('HttpServerTransport.sendMessage requires a recipient. Use publishRepeating for broadcasts.', 'MISSING_RECIPIENT', { messageType: message.type });
|
|
113
|
+
}
|
|
114
|
+
const actor = this.#actors.get(sender);
|
|
115
|
+
if (!actor) {
|
|
116
|
+
throw new HttpTransportError(`Unknown sender: ${sender}`, 'UNKNOWN_SENDER', { did: sender });
|
|
117
|
+
}
|
|
118
|
+
const envelope = signEnvelope(message, { did: sender, keys: actor.keys }, { to: recipient });
|
|
119
|
+
const dataJson = JSON.stringify(envelope);
|
|
120
|
+
const inbox = this.#getOrCreateInbox(recipient);
|
|
121
|
+
const stored = inbox.buffer.append(SSE_EVENT.MESSAGE, dataJson);
|
|
122
|
+
for (const sub of inbox.subscribers) {
|
|
123
|
+
this.#safeWrite(sub.stream, stored.event, stored.data, stored.id);
|
|
124
|
+
}
|
|
125
|
+
}
|
|
126
|
+
publishRepeating(message, sender, _intervalMs, _recipient) {
|
|
127
|
+
const actor = this.#actors.get(sender);
|
|
128
|
+
if (!actor) {
|
|
129
|
+
throw new HttpTransportError(`Unknown sender: ${sender}`, 'UNKNOWN_SENDER', { did: sender });
|
|
130
|
+
}
|
|
131
|
+
const envelope = signEnvelope(message, { did: sender, keys: actor.keys });
|
|
132
|
+
const dataJson = JSON.stringify(envelope);
|
|
133
|
+
const id = String(++this.#advertSeq);
|
|
134
|
+
const expiresAtMs = this.#now() + this.#advertTtlMs;
|
|
135
|
+
this.#currentAdvert = { dataJson, id, expiresAtMs };
|
|
136
|
+
for (const sub of this.#broadcastSubscribers) {
|
|
137
|
+
this.#safeWrite(sub.stream, SSE_EVENT.ADVERT, dataJson, id);
|
|
138
|
+
}
|
|
139
|
+
return () => {
|
|
140
|
+
if (this.#currentAdvert?.id === id)
|
|
141
|
+
this.#currentAdvert = undefined;
|
|
142
|
+
};
|
|
143
|
+
}
|
|
144
|
+
// ----------------------------------------------------------------
|
|
145
|
+
// Sans-I/O HTTP surface
|
|
146
|
+
// ----------------------------------------------------------------
|
|
147
|
+
/**
|
|
148
|
+
* Handle a POST / GET request (non-SSE). The caller dispatches SSE paths to
|
|
149
|
+
* {@link handleSse} instead. Returns a fully formed response; the caller's
|
|
150
|
+
* adapter turns it into an HTTP write.
|
|
151
|
+
*/
|
|
152
|
+
async handleRequest(req) {
|
|
153
|
+
const method = req.method.toUpperCase();
|
|
154
|
+
if (method === 'OPTIONS')
|
|
155
|
+
return this.#respond(204, '', req);
|
|
156
|
+
const path = extractPath(req.url);
|
|
157
|
+
if (method === 'GET' && path === HTTP_ROUTE.WELL_KNOWN) {
|
|
158
|
+
return this.#respondJson(200, this.#wellKnownMetadata(), req);
|
|
159
|
+
}
|
|
160
|
+
if (method === 'POST' && path === HTTP_ROUTE.MESSAGES) {
|
|
161
|
+
return await this.#handleMessagesPost(req);
|
|
162
|
+
}
|
|
163
|
+
if (method === 'POST' && path === HTTP_ROUTE.ADVERTS) {
|
|
164
|
+
return await this.#handleAdvertsPost(req);
|
|
165
|
+
}
|
|
166
|
+
return this.#respondJson(404, { error: 'not_found' }, req);
|
|
167
|
+
}
|
|
168
|
+
/**
|
|
169
|
+
* Open an SSE stream for a GET request. The caller is responsible for
|
|
170
|
+
* flushing writes and propagating the `onClose` callback when the HTTP
|
|
171
|
+
* connection ends.
|
|
172
|
+
*/
|
|
173
|
+
handleSse(req, stream) {
|
|
174
|
+
if (req.method.toUpperCase() !== 'GET') {
|
|
175
|
+
stream.close();
|
|
176
|
+
return;
|
|
177
|
+
}
|
|
178
|
+
const path = extractPath(req.url);
|
|
179
|
+
if (path === HTTP_ROUTE.ADVERTS) {
|
|
180
|
+
this.#openBroadcastSubscription(stream);
|
|
181
|
+
return;
|
|
182
|
+
}
|
|
183
|
+
const inboxMatch = matchInboxPath(path);
|
|
184
|
+
if (inboxMatch) {
|
|
185
|
+
this.#openInboxSubscription(req, stream, inboxMatch.did, path);
|
|
186
|
+
return;
|
|
187
|
+
}
|
|
188
|
+
stream.close();
|
|
189
|
+
}
|
|
190
|
+
// ----------------------------------------------------------------
|
|
191
|
+
// Request handlers
|
|
192
|
+
// ----------------------------------------------------------------
|
|
193
|
+
async #handleMessagesPost(req) {
|
|
194
|
+
const envelope = parseJsonBody(req.body);
|
|
195
|
+
if (!envelope)
|
|
196
|
+
return this.#respondJson(400, { error: 'invalid_json' }, req);
|
|
197
|
+
const senderPk = this.#resolveSenderPk(envelope.from);
|
|
198
|
+
if (!senderPk) {
|
|
199
|
+
return this.#respondJson(401, { error: 'unknown_sender' }, req);
|
|
200
|
+
}
|
|
201
|
+
try {
|
|
202
|
+
verifyEnvelope(envelope, senderPk, { clockSkewSec: this.#clockSkewSec });
|
|
203
|
+
}
|
|
204
|
+
catch (err) {
|
|
205
|
+
this.#logger.debug('POST /v1/messages: envelope verification failed:', err);
|
|
206
|
+
return this.#respondJson(401, { error: 'invalid_envelope' }, req);
|
|
207
|
+
}
|
|
208
|
+
if (!this.#nonceCache.store(envelope.from, envelope.nonce, envelope.timestamp)) {
|
|
209
|
+
return this.#respondJson(409, { error: 'replay' }, req);
|
|
210
|
+
}
|
|
211
|
+
if (!this.#rateLimiter.consume(envelope.from, this.#now())) {
|
|
212
|
+
return this.#respondJson(429, { error: 'rate_limited' }, req);
|
|
213
|
+
}
|
|
214
|
+
if (!envelope.to) {
|
|
215
|
+
return this.#respondJson(400, { error: 'missing_recipient' }, req);
|
|
216
|
+
}
|
|
217
|
+
const actor = this.#actors.get(envelope.to);
|
|
218
|
+
if (!actor) {
|
|
219
|
+
return this.#respondJson(404, { error: 'unknown_recipient' }, req);
|
|
220
|
+
}
|
|
221
|
+
const revived = reviveFromWire(envelope.message);
|
|
222
|
+
const flat = flattenMessage(revived);
|
|
223
|
+
const messageType = typeof flat.type === 'string' ? flat.type : undefined;
|
|
224
|
+
if (!messageType)
|
|
225
|
+
return this.#respondJson(400, { error: 'missing_message_type' }, req);
|
|
226
|
+
const handler = actor.handlers.get(messageType);
|
|
227
|
+
if (handler) {
|
|
228
|
+
try {
|
|
229
|
+
await handler(flat);
|
|
230
|
+
}
|
|
231
|
+
catch (err) {
|
|
232
|
+
this.#logger.debug(`Handler threw for ${messageType}:`, err);
|
|
233
|
+
}
|
|
234
|
+
}
|
|
235
|
+
return this.#respondJson(202, { ok: true }, req);
|
|
236
|
+
}
|
|
237
|
+
async #handleAdvertsPost(req) {
|
|
238
|
+
const envelope = parseJsonBody(req.body);
|
|
239
|
+
if (!envelope)
|
|
240
|
+
return this.#respondJson(400, { error: 'invalid_json' }, req);
|
|
241
|
+
const senderPk = this.#resolveSenderPk(envelope.from);
|
|
242
|
+
if (!senderPk)
|
|
243
|
+
return this.#respondJson(401, { error: 'unknown_sender' }, req);
|
|
244
|
+
try {
|
|
245
|
+
verifyEnvelope(envelope, senderPk, { clockSkewSec: this.#clockSkewSec });
|
|
246
|
+
}
|
|
247
|
+
catch {
|
|
248
|
+
return this.#respondJson(401, { error: 'invalid_envelope' }, req);
|
|
249
|
+
}
|
|
250
|
+
if (!this.#nonceCache.store(envelope.from, envelope.nonce, envelope.timestamp)) {
|
|
251
|
+
return this.#respondJson(409, { error: 'replay' }, req);
|
|
252
|
+
}
|
|
253
|
+
if (!this.#rateLimiter.consume(envelope.from, this.#now())) {
|
|
254
|
+
return this.#respondJson(429, { error: 'rate_limited' }, req);
|
|
255
|
+
}
|
|
256
|
+
// Only registered actors can publish adverts on this server.
|
|
257
|
+
if (!this.#actors.has(envelope.from)) {
|
|
258
|
+
return this.#respondJson(403, { error: 'not_an_actor' }, req);
|
|
259
|
+
}
|
|
260
|
+
const id = String(++this.#advertSeq);
|
|
261
|
+
this.#currentAdvert = {
|
|
262
|
+
dataJson: JSON.stringify(envelope),
|
|
263
|
+
id,
|
|
264
|
+
expiresAtMs: this.#now() + this.#advertTtlMs,
|
|
265
|
+
};
|
|
266
|
+
for (const sub of this.#broadcastSubscribers) {
|
|
267
|
+
this.#safeWrite(sub.stream, SSE_EVENT.ADVERT, this.#currentAdvert.dataJson, id);
|
|
268
|
+
}
|
|
269
|
+
return this.#respondJson(202, { ok: true }, req);
|
|
270
|
+
}
|
|
271
|
+
#openBroadcastSubscription(stream) {
|
|
272
|
+
const sub = { stream };
|
|
273
|
+
this.#broadcastSubscribers.add(sub);
|
|
274
|
+
stream.onClose(() => {
|
|
275
|
+
this.#closeBroadcastSubscriber(sub);
|
|
276
|
+
this.#broadcastSubscribers.delete(sub);
|
|
277
|
+
});
|
|
278
|
+
// Replay current advert if still within TTL.
|
|
279
|
+
if (this.#currentAdvert && this.#currentAdvert.expiresAtMs > this.#now()) {
|
|
280
|
+
this.#safeWrite(stream, SSE_EVENT.ADVERT, this.#currentAdvert.dataJson, this.#currentAdvert.id);
|
|
281
|
+
}
|
|
282
|
+
if (this.#heartbeatMs > 0) {
|
|
283
|
+
sub.heartbeatTimer = setInterval(() => {
|
|
284
|
+
try {
|
|
285
|
+
stream.writeComment('hb');
|
|
286
|
+
}
|
|
287
|
+
catch { /* caller-owned failure */ }
|
|
288
|
+
}, this.#heartbeatMs);
|
|
289
|
+
}
|
|
290
|
+
}
|
|
291
|
+
#openInboxSubscription(req, stream, did, path) {
|
|
292
|
+
const auth = req.headers.authorization;
|
|
293
|
+
if (!auth) {
|
|
294
|
+
this.#logger.debug(`Inbox subscribe: missing authorization header for ${did}`);
|
|
295
|
+
stream.close();
|
|
296
|
+
return;
|
|
297
|
+
}
|
|
298
|
+
const senderPk = this.#resolveSenderPk(did);
|
|
299
|
+
if (!senderPk) {
|
|
300
|
+
stream.close();
|
|
301
|
+
return;
|
|
302
|
+
}
|
|
303
|
+
let parsedTs = 0;
|
|
304
|
+
let parsedNonce = '';
|
|
305
|
+
try {
|
|
306
|
+
const parsed = verifyRequestAuth(auth, path, senderPk, {
|
|
307
|
+
clockSkewSec: this.#clockSkewSec,
|
|
308
|
+
now: () => this.#now(),
|
|
309
|
+
});
|
|
310
|
+
if (parsed.did !== did) {
|
|
311
|
+
stream.close();
|
|
312
|
+
return;
|
|
313
|
+
}
|
|
314
|
+
parsedTs = parsed.ts;
|
|
315
|
+
parsedNonce = parsed.nonce;
|
|
316
|
+
}
|
|
317
|
+
catch (err) {
|
|
318
|
+
this.#logger.debug(`Inbox subscribe: auth verification failed for ${did}:`, err);
|
|
319
|
+
stream.close();
|
|
320
|
+
return;
|
|
321
|
+
}
|
|
322
|
+
if (!this.#nonceCache.store(did, parsedNonce, parsedTs)) {
|
|
323
|
+
stream.close();
|
|
324
|
+
return;
|
|
325
|
+
}
|
|
326
|
+
if (!this.#rateLimiter.consume(did, this.#now())) {
|
|
327
|
+
stream.close();
|
|
328
|
+
return;
|
|
329
|
+
}
|
|
330
|
+
const inbox = this.#getOrCreateInbox(did);
|
|
331
|
+
const sub = { stream };
|
|
332
|
+
inbox.subscribers.add(sub);
|
|
333
|
+
stream.onClose(() => {
|
|
334
|
+
this.#closeInboxSubscriber(sub);
|
|
335
|
+
inbox.subscribers.delete(sub);
|
|
336
|
+
});
|
|
337
|
+
// Replay buffered events since the client's Last-Event-ID, if any.
|
|
338
|
+
const lastEventId = req.headers['last-event-id'];
|
|
339
|
+
for (const stored of inbox.buffer.since(lastEventId)) {
|
|
340
|
+
this.#safeWrite(stream, stored.event, stored.data, stored.id);
|
|
341
|
+
}
|
|
342
|
+
if (this.#heartbeatMs > 0) {
|
|
343
|
+
sub.heartbeatTimer = setInterval(() => {
|
|
344
|
+
try {
|
|
345
|
+
stream.writeComment('hb');
|
|
346
|
+
}
|
|
347
|
+
catch { /* caller-owned failure */ }
|
|
348
|
+
}, this.#heartbeatMs);
|
|
349
|
+
}
|
|
350
|
+
}
|
|
351
|
+
// ----------------------------------------------------------------
|
|
352
|
+
// Internal helpers
|
|
353
|
+
// ----------------------------------------------------------------
|
|
354
|
+
#getOrCreateInbox(did) {
|
|
355
|
+
let inbox = this.#inboxes.get(did);
|
|
356
|
+
if (!inbox) {
|
|
357
|
+
inbox = { buffer: new InboxBuffer(this.#inboxBufferSize), subscribers: new Set() };
|
|
358
|
+
this.#inboxes.set(did, inbox);
|
|
359
|
+
}
|
|
360
|
+
return inbox;
|
|
361
|
+
}
|
|
362
|
+
#resolveSenderPk(did) {
|
|
363
|
+
const peerBytes = this.#peers.get(did);
|
|
364
|
+
if (peerBytes) {
|
|
365
|
+
try {
|
|
366
|
+
return new CompressedSecp256k1PublicKey(peerBytes);
|
|
367
|
+
}
|
|
368
|
+
catch { /* fall through to the injected resolver */ }
|
|
369
|
+
}
|
|
370
|
+
return this.#resolveSenderPkFn?.(did);
|
|
371
|
+
}
|
|
372
|
+
#safeWrite(stream, event, data, id) {
|
|
373
|
+
try {
|
|
374
|
+
stream.writeEvent(event, data, id);
|
|
375
|
+
}
|
|
376
|
+
catch (err) {
|
|
377
|
+
this.#logger.debug('SSE writeEvent failed:', err);
|
|
378
|
+
}
|
|
379
|
+
}
|
|
380
|
+
#closeBroadcastSubscriber(sub) {
|
|
381
|
+
if (sub.heartbeatTimer)
|
|
382
|
+
clearInterval(sub.heartbeatTimer);
|
|
383
|
+
try {
|
|
384
|
+
sub.stream.close();
|
|
385
|
+
}
|
|
386
|
+
catch { /* already closed */ }
|
|
387
|
+
}
|
|
388
|
+
#closeInboxSubscriber(sub) {
|
|
389
|
+
if (sub.heartbeatTimer)
|
|
390
|
+
clearInterval(sub.heartbeatTimer);
|
|
391
|
+
try {
|
|
392
|
+
sub.stream.close();
|
|
393
|
+
}
|
|
394
|
+
catch { /* already closed */ }
|
|
395
|
+
}
|
|
396
|
+
#respondJson(status, body, req) {
|
|
397
|
+
return {
|
|
398
|
+
status,
|
|
399
|
+
headers: { 'content-type': 'application/json', ...this.#corsHeaders(req) },
|
|
400
|
+
body: JSON.stringify(body),
|
|
401
|
+
};
|
|
402
|
+
}
|
|
403
|
+
#respond(status, body, req) {
|
|
404
|
+
return { status, headers: this.#corsHeaders(req), body };
|
|
405
|
+
}
|
|
406
|
+
#corsHeaders(req) {
|
|
407
|
+
const origin = req.headers.origin;
|
|
408
|
+
if (!origin)
|
|
409
|
+
return {};
|
|
410
|
+
const common = {
|
|
411
|
+
'access-control-allow-methods': 'GET, POST, OPTIONS',
|
|
412
|
+
'access-control-allow-headers': 'authorization, content-type, last-event-id',
|
|
413
|
+
'access-control-max-age': '86400',
|
|
414
|
+
};
|
|
415
|
+
switch (this.#cors.mode) {
|
|
416
|
+
case 'permissive':
|
|
417
|
+
return { 'access-control-allow-origin': '*', ...common };
|
|
418
|
+
case 'allowlist':
|
|
419
|
+
if (this.#cors.origins.includes(origin)) {
|
|
420
|
+
return { 'access-control-allow-origin': origin, vary: 'origin', ...common };
|
|
421
|
+
}
|
|
422
|
+
return {};
|
|
423
|
+
case 'same-origin':
|
|
424
|
+
return {};
|
|
425
|
+
}
|
|
426
|
+
}
|
|
427
|
+
#wellKnownMetadata() {
|
|
428
|
+
return {
|
|
429
|
+
envelopeVersion: HTTP_ENVELOPE_VERSION,
|
|
430
|
+
heartbeatIntervalMs: this.#heartbeatMs,
|
|
431
|
+
inboxBufferSize: this.#inboxBufferSize,
|
|
432
|
+
advertTtlMs: this.#advertTtlMs,
|
|
433
|
+
};
|
|
434
|
+
}
|
|
435
|
+
}
|
|
436
|
+
// ----------------------------------------------------------------
|
|
437
|
+
// Module-local pure helpers
|
|
438
|
+
// ----------------------------------------------------------------
|
|
439
|
+
function extractPath(reqUrl) {
|
|
440
|
+
if (reqUrl.startsWith('http://') || reqUrl.startsWith('https://')) {
|
|
441
|
+
return new URL(reqUrl).pathname;
|
|
442
|
+
}
|
|
443
|
+
const q = reqUrl.indexOf('?');
|
|
444
|
+
return q === -1 ? reqUrl : reqUrl.slice(0, q);
|
|
445
|
+
}
|
|
446
|
+
function matchInboxPath(path) {
|
|
447
|
+
if (!path.startsWith(INBOX_PATH_PREFIX) || !path.endsWith(INBOX_PATH_SUFFIX))
|
|
448
|
+
return undefined;
|
|
449
|
+
const encodedDid = path.slice(INBOX_PATH_PREFIX.length, path.length - INBOX_PATH_SUFFIX.length);
|
|
450
|
+
if (!encodedDid)
|
|
451
|
+
return undefined;
|
|
452
|
+
try {
|
|
453
|
+
return { did: decodeURIComponent(encodedDid) };
|
|
454
|
+
}
|
|
455
|
+
catch {
|
|
456
|
+
return undefined;
|
|
457
|
+
}
|
|
458
|
+
}
|
|
459
|
+
function parseJsonBody(body) {
|
|
460
|
+
if (body === undefined || body === '')
|
|
461
|
+
return undefined;
|
|
462
|
+
try {
|
|
463
|
+
return JSON.parse(body);
|
|
464
|
+
}
|
|
465
|
+
catch {
|
|
466
|
+
return undefined;
|
|
467
|
+
}
|
|
468
|
+
}
|
|
469
|
+
function flattenMessage(msg) {
|
|
470
|
+
if (msg.body && typeof msg.body === 'object') {
|
|
471
|
+
return { ...msg, ...msg.body };
|
|
472
|
+
}
|
|
473
|
+
return msg;
|
|
474
|
+
}
|
|
475
|
+
//# sourceMappingURL=server.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/transport/http/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAGlE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGjD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,UAAU,EACV,SAAS,GAEV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAgGtD,MAAM,iBAAiB,GAAG,aAAa,CAAC;AACxC,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAEnC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,oBAAoB,GAAI,MAAM,CAAC;AAErC;;;;;;;;;GASG;AACH,MAAM,OAAO,mBAAmB;IACrB,IAAI,GAAG,MAAM,CAAC;IAEd,OAAO,CAAqB;IAC5B,KAAK,CAA2B;IAChC,aAAa,CAAe;IAC5B,gBAAgB,CAAY;IAC5B,YAAY,CAAgB;IAC5B,YAAY,CAAgB;IAC5B,YAAY,CAAqB;IACjC,WAAW,CAAqB;IAChC,IAAI,CAA8B;IAClC,kBAAkB,CAA6D;IAE/E,OAAO,GAA8B,IAAI,GAAG,EAAE,CAAC;IAC/C,MAAM,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC/C,QAAQ,GAA6B,IAAI,GAAG,EAAE,CAAC;IAE/C,qBAAqB,GAA6B,IAAI,GAAG,EAAE,CAAC;IAErE,cAAc,CAAiB;IAC/B,UAAU,GAAG,CAAC,CAAC;IAEf,YAAY,SAAoC,EAAE;QAChD,IAAI,CAAC,OAAO,GAAY,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC;QACxD,IAAI,CAAC,KAAK,GAAc,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAC9D,IAAI,CAAC,aAAa,GAAM,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;QACtE,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,eAAe,IAAI,GAAG,CAAC;QACtD,IAAI,CAAC,YAAY,GAAO,MAAM,CAAC,WAAW,IAAI,qBAAqB,CAAC;QACpE,IAAI,CAAC,YAAY,GAAO,MAAM,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;QAC3E,IAAI,CAAC,YAAY,GAAO,MAAM,CAAC,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC;QAChE,IAAI,CAAC,WAAW,GAAQ,MAAM,CAAC,UAAU,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAe,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC;IACnD,CAAC;IAED,mEAAmE;IACnE,sBAAsB;IACtB,mEAAmE;IAEnE,KAAK;QACH,uEAAuE;QACvE,qDAAqD;IACvD,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,KAAI,MAAM,GAAG,IAAI,IAAI,CAAC,qBAAqB;YAAE,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;QACjF,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;QACnC,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,KAAI,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW;gBAAE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YACpE,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;IAClC,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,IAAoB;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,eAAe,CAAC,GAAW;QACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;IAC1D,CAAC;IAED,YAAY,CAAC,GAAW,EAAE,eAA2B;QACnD,IAAI,CAAC;YACH,IAAI,4BAA4B,CAAC,eAAe,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,kBAAkB,CAC1B,+BAA+B,GAAG,EAAE,EACpC,kBAAkB,EAClB,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,EAAE,CAC3C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxC,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,sBAAsB,CAAC,QAAgB,EAAE,WAAmB,EAAE,OAAuB;QACnF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,kBAAkB,CAC1B,kCAAkC,QAAQ,iBAAiB,EAC3D,eAAe,EACf,EAAE,GAAG,EAAE,QAAQ,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,wBAAwB,CAAC,QAAgB,EAAE,WAAmB;QAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAoB,EAAE,MAAc,EAAE,SAAkB;QACxE,IAAG,CAAC,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,kBAAkB,CAC1B,4FAA4F,EAC5F,mBAAmB,EACnB,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,CAC9B,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,kBAAkB,CAC1B,mBAAmB,MAAM,EAAE,EAC3B,gBAAgB,EAChB,EAAE,GAAG,EAAE,MAAM,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAI,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChE,KAAI,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,gBAAgB,CACd,OAAuB,EACvB,MAAkB,EAClB,WAAmB,EACnB,UAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,MAAM,EAAE,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAS,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QAEpD,IAAI,CAAC,cAAc,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACpD,KAAI,MAAM,GAAG,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,GAAS,EAAE;YAChB,IAAG,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE;gBAAE,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QACrE,CAAC,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,wBAAwB;IACxB,mEAAmE;IAEnE;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,GAAoB;QACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,IAAG,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAE5D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAG,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAG,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;YACrD,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,IAAG,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YACpD,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,GAAoB,EAAE,MAAiB;QAC/C,IAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAG,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACxC,IAAG,UAAU,EAAE,CAAC;YACd,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,mEAAmE;IACnE,mBAAmB;IACnB,mEAAmE;IAEnE,KAAK,CAAC,mBAAmB,CAAC,GAAoB;QAC5C,MAAM,QAAQ,GAAG,aAAa,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,IAAG,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtD,IAAG,CAAC,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC;YACH,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAM,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9E,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAED,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QAED,IAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAA4B,CAAC;QAC5E,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,IAAG,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAG,OAAO,EAAE,CAAC;YACX,IAAI,CAAC;gBAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAC5B,OAAM,GAAG,EAAE,CAAC;gBACV,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,WAAW,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAoB;QAC3C,MAAM,QAAQ,GAAG,aAAa,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,IAAG,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtD,IAAG,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAE9E,IAAI,CAAC;YACH,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9E,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QAED,6DAA6D;QAC7D,IAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG;YACpB,QAAQ,EAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YACtC,EAAE;YACF,WAAW,EAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY;SAC9C,CAAC;QACF,KAAI,MAAM,GAAG,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,0BAA0B,CAAC,MAAiB;QAC1C,MAAM,GAAG,GAAwB,EAAE,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,6CAA6C;QAC7C,IAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACxE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;QAED,IAAG,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBACpC,IAAI,CAAC;oBAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;YACzE,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,sBAAsB,CAAC,GAAoB,EAAE,MAAiB,EAAE,GAAW,EAAE,IAAY;QACvF,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QACvC,IAAG,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAG,CAAC,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACrD,YAAY,EAAG,IAAI,CAAC,aAAa;gBACjC,GAAG,EAAY,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;aACjC,CAAC,CAAC;YACH,IAAG,MAAM,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAClD,QAAQ,GAAM,MAAM,CAAC,EAAE,CAAC;YACxB,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAM,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iDAAiD,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YACjF,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,CAAC;QACxC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAChC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,mEAAmE;QACnE,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACjD,KAAI,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAG,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBACpC,IAAI,CAAC;oBAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;YACzE,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,mBAAmB;IACnB,mEAAmE;IAEnE,iBAAiB,CAAC,GAAW;QAC3B,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAG,CAAC,KAAK,EAAE,CAAC;YACV,KAAK,GAAG,EAAE,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YACnF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gBAAgB,CAAC,GAAW;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAG,SAAS,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,OAAO,IAAI,4BAA4B,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAC3D,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,UAAU,CAAC,MAAiB,EAAE,KAAa,EAAE,IAAY,EAAE,EAAW;QACpE,IAAI,CAAC;YAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAC3C,OAAM,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACnE,CAAC;IAED,yBAAyB,CAAC,GAAwB;QAChD,IAAG,GAAG,CAAC,cAAc;YAAE,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC5D,CAAC;IAED,qBAAqB,CAAC,GAAoB;QACxC,IAAG,GAAG,CAAC,cAAc;YAAE,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC5D,CAAC;IAED,YAAY,CAAC,MAAc,EAAE,IAAa,EAAE,GAAoB;QAC9D,OAAO;YACL,MAAM;YACN,OAAO,EAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;YAC3E,IAAI,EAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,GAAoB;QACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,YAAY,CAAC,GAAoB;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAG,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,GAA2B;YACrC,8BAA8B,EAAG,oBAAoB;YACrD,8BAA8B,EAAG,4CAA4C;YAC7E,wBAAwB,EAAS,OAAO;SACzC,CAAC;QACF,QAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACvB,KAAK,YAAY;gBACf,OAAO,EAAE,6BAA6B,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YAC3D,KAAK,WAAW;gBACd,IAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;gBAC9E,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,KAAK,aAAa;gBAChB,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,kBAAkB;QAChB,OAAO;YACL,eAAe,EAAO,qBAAqB;YAC3C,mBAAmB,EAAG,IAAI,CAAC,YAAY;YACvC,eAAe,EAAO,IAAI,CAAC,gBAAgB;YAC3C,WAAW,EAAW,IAAI,CAAC,YAAY;SACxC,CAAC;IACJ,CAAC;CACF;AAED,mEAAmE;AACnE,4BAA4B;AAC5B,mEAAmE;AAEnE,SAAS,WAAW,CAAC,MAAc;IACjC,IAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IAClC,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAG,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChG,IAAG,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,CAAC;QAAC,OAAO,EAAE,GAAG,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;IAAC,CAAC;IACvD,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAI,IAAwB;IAChD,IAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAAC,CAAC;IACrC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC7B,CAAC;AAED,SAAS,cAAc,CAAC,GAA4B;IAClD,IAAG,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,GAAG,GAAG,EAAE,GAAI,GAAG,CAAC,IAAgC,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
|