@erfan_bahramali/tping 1.0.0 → 1.1.0

package/dist/webproxy/check.js

@@ -0,0 +1,423 @@
+import { AbortedError, Attempt, STAGE_WAITING, describeError } from '../lib/attempt.js';
+import { HttpConnection, openTls } from '../net/http-client.js';
+import { WebSocketConnection } from '../net/websocket.js';
+import { createObfuscation, ObfuscatedPipe } from '../mtproto/obfuscation.js';
+import { exchangeReqPq } from '../mtproto/exchange.js';
+import { basePrefix, deriveCapability } from './link.js';
+import { FRAME, decodeWebFrames, encodeDataFrames, encodeWebFrame } from './frames.js';
+/**
+ * WEB proxy check (telegramdesktop/tproxy-server, protocol v1). TPing plays
+ * both the Telegram app and the bridge page:
+ *
+ *   GET  /?bridge=<capability>      -> bridge page with a bootstrap token and carrier mode
+ *   POST /api/v1/session (HELLO)    -> session token (WELCOME)
+ *   one stream per DC: OPEN + DATA carrying the normal MTProxy bytes
+ *   (obfuscation with the secret), over the carrier the relay selected,
+ *   until the Telegram DC answers req_pq_multi with resPQ.
+ */
+const CARRIER_MODES = ['https', 'https-lanes', 'websocket', 'websocket-lanes'];
+const BRIDGE_PATTERN = /const relayBase=("(?:[^"\\]|\\.)*"),bootstrap=("(?:[^"\\]|\\.)*"),carrierMode=("(?:[^"\\]|\\.)*")/;
+const TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+const DELETE_BUDGET_MS = 2000;
+const USER_AGENT = 'Mozilla/5.0 (compatible; tping)';
+const BINARY = 'application/octet-stream';
+export class WebProxyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WebProxyError';
+    }
+}
+class StreamClosedByRelayError extends WebProxyError {
+    constructor() {
+        super("Relay closed the stream before Telegram answered (the relay's MTProxy backend rejected the secret or cannot reach Telegram)");
+    }
+}
+/**
+ * One logical stream: the Telegram side writes MTProxy bytes into it, the carrier
+ * turns them into OPEN/DATA frames and feeds relay DATA back.
+ */
+class StreamPipe {
+    id;
+    onWrite;
+    incoming = Buffer.alloc(0);
+    outgoing = [];
+    opened = false;
+    waiter = null;
+    error = null;
+    constructor(id, onWrite) {
+        this.id = id;
+        this.onWrite = onWrite;
+    }
+    write(data) {
+        this.outgoing.push(data);
+        this.onWrite();
+    }
+    takeFrames() {
+        const frames = [];
+        if (this.outgoing.length === 0) {
+            return frames;
+        }
+        if (!this.opened) {
+            frames.push(encodeWebFrame(FRAME.OPEN, this.id));
+            this.opened = true;
+        }
+        for (const data of this.outgoing) {
+            frames.push(...encodeDataFrames(this.id, data));
+        }
+        this.outgoing = [];
+        return frames;
+    }
+    deliver(frame) {
+        if (frame.type === FRAME.DATA) {
+            this.incoming = Buffer.concat([this.incoming, frame.payload]);
+            this.waiter?.();
+        }
+        else if (frame.type === FRAME.CLOSE) {
+            this.fail(new StreamClosedByRelayError());
+        }
+    }
+    fail(err) {
+        this.error ??= err;
+        this.waiter?.();
+    }
+    read(length) {
+        return new Promise((resolve, reject) => {
+            const tick = () => {
+                if (this.incoming.length >= length) {
+                    this.waiter = null;
+                    const out = this.incoming.subarray(0, length);
+                    this.incoming = this.incoming.subarray(length);
+                    resolve(out);
+                }
+                else if (this.error) {
+                    this.waiter = null;
+                    reject(this.error);
+                }
+            };
+            this.waiter = tick;
+            tick();
+        });
+    }
+}
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+const retryDelay = (response) => {
+    const seconds = Number(response.headers.get('retry-after'));
+    return Number.isFinite(seconds) && seconds >= 0 ? Math.min(seconds * 1000, 30000) : 1000;
+};
+/**
+ * Send a request, honouring 503 + Retry-After with a byte-identical retry (as the bridge does).
+ */
+const requestWithRetry = async (http, deadline, method, path, headers, body) => {
+    for (;;) {
+        const response = await http.request(method, path, headers, body);
+        if (response.status !== 503) {
+            return response;
+        }
+        const wait = retryDelay(response);
+        if (Date.now() + wait >= deadline) {
+            throw new WebProxyError('Relay is overloaded (HTTP 503)');
+        }
+        await sleep(wait);
+    }
+};
+const parseBridgePage = (page, expectedBase) => {
+    if (page.status !== 200) {
+        throw new WebProxyError(`Bridge page returned HTTP ${page.status} (wrong secret, hostname or base path)`);
+    }
+    const match = BRIDGE_PATTERN.exec(page.body.toString('utf8'));
+    if (!match) {
+        throw new WebProxyError('Server returned a normal website instead of the WEB proxy bridge (wrong secret, hostname or base path)');
+    }
+    const [relayBase, bootstrap, carrier] = match.slice(1).map((json) => JSON.parse(json));
+    if (relayBase !== expectedBase) {
+        throw new WebProxyError('Bridge page points to a different relay address');
+    }
+    if (!TOKEN_PATTERN.test(bootstrap)) {
+        throw new WebProxyError('Bridge page has an invalid bootstrap token');
+    }
+    if (!CARRIER_MODES.includes(carrier)) {
+        throw new WebProxyError(`Bridge page uses an unknown carrier mode "${carrier}"`);
+    }
+    return { bootstrap, carrier: carrier };
+};
+const createSession = async (http, base, origin, bridge, deadline) => {
+    const response = await requestWithRetry(http, deadline, 'POST', `${base}api/v1/session`, {
+        Authorization: `Bearer ${bridge.bootstrap}`,
+        'Content-Type': BINARY,
+        Origin: origin,
+    }, encodeWebFrame(FRAME.HELLO, 0, Buffer.from([0x01])));
+    if (response.status !== 200) {
+        throw new WebProxyError(`Relay refused to create a session (HTTP ${response.status})`);
+    }
+    const token = response.headers.get('x-session-token') ?? '';
+    if (!TOKEN_PATTERN.test(token)) {
+        throw new WebProxyError('Relay returned an invalid session token');
+    }
+    if (response.headers.get('x-carrier-mode') !== bridge.carrier) {
+        throw new WebProxyError('Relay carrier mode does not match the bridge page');
+    }
+    if (!decodeWebFrames(response.body).some((frame) => frame.type === FRAME.WELCOME)) {
+        throw new WebProxyError('Relay did not answer HELLO with WELCOME');
+    }
+    return { token, cursor: response.headers.get('x-down-cursor') ?? '0' };
+};
+/**
+ * Shared state between streams and carrier loops.
+ */
+class Mux {
+    onFailure;
+    finished = false;
+    wakers = [];
+    streams = [];
+    constructor(onFailure) {
+        this.onFailure = onFailure;
+    }
+    add(id) {
+        const stream = new StreamPipe(id, () => this.wakers.splice(0).forEach((wake) => wake()));
+        this.streams.push(stream);
+        return stream;
+    }
+    byId(id) {
+        return this.streams.find((s) => s.id === id);
+    }
+    dispatch(frames, onPing) {
+        for (const frame of frames) {
+            if (frame.streamId === 0) {
+                if (frame.type === FRAME.BYE) {
+                    this.failAll(new WebProxyError(`Relay ended the session${frame.payload.length ? `: ${frame.payload.toString('utf8')}` : ''}`));
+                }
+                else if (frame.type === FRAME.PING) {
+                    onPing?.(frame);
+                }
+            }
+            else {
+                this.byId(frame.streamId)?.deliver(frame);
+            }
+        }
+    }
+    /** Resolves on the next write from any stream. */
+    waitForWrite() {
+        return new Promise((resolve) => {
+            this.wakers.push(resolve);
+        });
+    }
+    failAll(err) {
+        if (!this.finished) {
+            this.streams.forEach((stream) => stream.fail(err));
+            this.onFailure(err);
+        }
+    }
+    /** Run a carrier loop; its failure fails every stream it serves. */
+    run(loop, streams = this.streams) {
+        loop().catch((err) => {
+            if (!this.finished) {
+                streams.forEach((stream) => stream.fail(err));
+            }
+        });
+    }
+}
+/**
+ * Serialized HTTPS carrier (`https`), or one lane of `https-lanes`.
+ */
+const runHttpLane = (mux, http, base, origin, session, deadline, streams, laneId) => async () => {
+    let sequence = 1;
+    let cursor = laneId === undefined ? session.cursor : '0';
+    const pongs = [];
+    const lane = laneId === undefined ? {} : { 'X-Lane-ID': String(laneId) };
+    const auth = { Authorization: `Bearer ${session.token}` };
+    while (!mux.finished) {
+        const frames = [...pongs.splice(0), ...streams.flatMap((stream) => stream.takeFrames())];
+        if (frames.length > 0) {
+            const ack = String(sequence);
+            const response = await requestWithRetry(http, deadline, 'POST', `${base}api/v1/up`, {
+                ...auth, 'Content-Type': BINARY, Origin: origin, 'X-Up-Seq': ack, ...lane,
+            }, Buffer.concat(frames));
+            if (response.status !== 204 || response.headers.get('x-up-ack') !== ack) {
+                throw new WebProxyError(`Relay rejected the uplink (HTTP ${response.status})`);
+            }
+            sequence++;
+            continue;
+        }
+        const response = await requestWithRetry(http, deadline, 'POST', `${base}api/v1/down`, {
+            ...auth, Origin: origin, 'X-Down-Cursor': cursor, ...lane,
+        });
+        if (response.status === 204) {
+            if (response.headers.get('x-lane-closed') === '1') {
+                streams.forEach((stream) => stream.fail(new StreamClosedByRelayError()));
+                return;
+            }
+            continue;
+        }
+        const next = response.headers.get('x-down-cursor');
+        if (response.status !== 200 || !next || response.body.length === 0) {
+            throw new WebProxyError(`Relay rejected the downlink poll (HTTP ${response.status})`);
+        }
+        cursor = next;
+        mux.dispatch(decodeWebFrames(response.body), (ping) => pongs.push(encodeWebFrame(FRAME.PONG, 0, ping.payload)));
+    }
+};
+/**
+ * WebSocket carrier (`websocket`), or one lane of `websocket-lanes`.
+ */
+const runWebSocket = (mux, socket, streams) => {
+    const flush = () => {
+        const frames = streams.flatMap((stream) => stream.takeFrames());
+        if (frames.length > 0) {
+            socket.send(Buffer.concat(frames));
+        }
+    };
+    return async () => {
+        flush();
+        const sender = (async () => {
+            while (!mux.finished) {
+                await mux.waitForWrite();
+                flush();
+            }
+        })();
+        void sender;
+        while (!mux.finished) {
+            mux.dispatch(decodeWebFrames(await socket.receive()));
+        }
+    };
+};
+const pendingCleanups = new Set();
+/**
+ * Wait for background session deletes (each bounded to 2s), so a short run does not
+ * exit before the relay has freed its session slots.
+ */
+export const waitForWebProxyCleanup = async () => {
+    await Promise.all([...pendingCleanups]);
+};
+const deleteSession = async (hostname, endpoint, base, origin, token) => {
+    const cleanup = new Attempt(Date.now() + DELETE_BUDGET_MS);
+    try {
+        const connection = new HttpConnection((await openTls(cleanup, hostname, endpoint)).stream, hostname);
+        await connection.request('DELETE', `${base}api/v1/session`, { Authorization: `Bearer ${token}`, Origin: origin });
+    }
+    catch {
+        // Best effort: the relay also expires idle sessions.
+    }
+    finally {
+        cleanup.close();
+    }
+};
+/**
+ * Check a WEB proxy through one relay session, with one stream per DC.
+ */
+export const checkWebProxy = async (proxy, dcs, options) => {
+    const secret = Buffer.from(proxy.secret, 'hex');
+    const secure = secret.length === 17;
+    const key = secure ? secret.subarray(1) : secret;
+    const mode = secure ? 'padded' : 'intermediate';
+    const hostname = proxy.server;
+    const base = basePrefix(proxy.basePath);
+    const origin = `https://${hostname}`;
+    const endpoint = options.webProxyEndpoint ?? {};
+    const deadline = Date.now() + options.timeout;
+    const attempt = new Attempt(deadline, options.signal);
+    let sessionError = null;
+    const mux = new Mux((err) => {
+        sessionError ??= err;
+    });
+    let session;
+    try {
+        const start = Date.now();
+        const main = await openTls(attempt, hostname, endpoint);
+        const connected = Date.now();
+        const http = new HttpConnection(main.stream, hostname);
+        attempt.stage = 'loading the bridge page';
+        const page = await http.request('GET', `${base}?bridge=${deriveCapability({ host: hostname, basePath: proxy.basePath }, secret)}`, {
+            Accept: 'text/html',
+            'User-Agent': USER_AGENT,
+        });
+        const bridge = parseBridgePage(page, `${origin}${base}`);
+        attempt.stage = 'creating the relay session';
+        session = await createSession(http, base, origin, bridge, deadline);
+        const activeSession = session;
+        const streams = dcs.map((_, index) => mux.add(index + 1));
+        const lanes = [];
+        const laneSockets = [];
+        let socket;
+        attempt.stage = `opening the ${bridge.carrier} carrier`;
+        const openConnection = async () => new HttpConnection((await openTls(attempt, hostname, endpoint)).stream, hostname);
+        switch (bridge.carrier) {
+            case 'https':
+                break;
+            case 'https-lanes':
+                for (const stream of streams) {
+                    lanes.push({ stream, http: await openConnection() });
+                }
+                break;
+            case 'websocket':
+                socket = await WebSocketConnection.open(await openConnection(), `${base}api/v1/ws`, `tproxy-v1.${activeSession.token}`, origin);
+                break;
+            case 'websocket-lanes':
+                // A lane that cannot be established fails the whole carrier, as in the bridge.
+                for (const stream of streams) {
+                    const protocol = `tproxy-lane-v1.${activeSession.token}.${stream.id}`;
+                    laneSockets.push({ stream, socket: await WebSocketConnection.open(await openConnection(), `${base}api/v1/ws`, protocol, origin) });
+                }
+                break;
+        }
+        const negotiated = Date.now();
+        attempt.stage = STAGE_WAITING;
+        // Streams write their MTProxy bytes synchronously here, before any carrier loop runs.
+        const results = Promise.all(dcs.map(async (dc, index) => {
+            const stream = streams[index];
+            const streamStart = Date.now();
+            try {
+                await exchangeReqPq(new ObfuscatedPipe(stream, createObfuscation(dc, mode, key)), mode);
+                const end = Date.now();
+                const timings = { connect: connected - start, handshake: negotiated - connected, rtt: end - streamStart };
+                return { dc, success: true, latency: end - start, timings, via: bridge.carrier };
+            }
+            catch (err) {
+                if (err instanceof AbortedError) {
+                    throw err;
+                }
+                return { dc, success: false, error: describeError(sessionError ?? err, attempt.stage), via: bridge.carrier };
+            }
+        }));
+        switch (bridge.carrier) {
+            case 'https':
+                mux.run(runHttpLane(mux, http, base, origin, activeSession, deadline, streams));
+                break;
+            case 'https-lanes':
+                for (const lane of lanes) {
+                    mux.run(runHttpLane(mux, lane.http, base, origin, activeSession, deadline, [lane.stream], lane.stream.id), [lane.stream]);
+                }
+                break;
+            case 'websocket':
+                mux.run(runWebSocket(mux, socket, streams));
+                break;
+            case 'websocket-lanes':
+                for (const lane of laneSockets) {
+                    mux.run(runWebSocket(mux, lane.socket, [lane.stream]), [lane.stream]);
+                }
+                break;
+        }
+        // Failures of individual streams are reported per DC; abort fails all of them.
+        const settled = await results;
+        mux.finished = true;
+        return settled;
+    }
+    catch (err) {
+        mux.finished = true;
+        if (err instanceof AbortedError) {
+            throw err;
+        }
+        const error = describeError(err, attempt.stage);
+        return dcs.map((dc) => ({ dc, success: false, error }));
+    }
+    finally {
+        mux.finished = true;
+        attempt.close();
+        if (session) {
+            // Free the relay's session slot right away; not part of the measurement.
+            const cleanup = deleteSession(hostname, endpoint, base, origin, session.token)
+                .finally(() => pendingCleanups.delete(cleanup));
+            pendingCleanups.add(cleanup);
+        }
+    }
+};
+//# sourceMappingURL=check.js.map

package/dist/webproxy/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/webproxy/check.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,OAAO,EAAuC,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAiB,MAAM,aAAa,CAAC;AAEtG;;;;;;;;;GASG;AAEH,MAAM,aAAa,GAA2B,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;AACvG,MAAM,cAAc,GAAG,mGAAmG,CAAC;AAC3H,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,UAAU,GAAG,iCAAiC,CAAC;AACrD,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAE1C,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,wBAAyB,SAAQ,aAAa;IAClD;QACE,KAAK,CAAC,6HAA6H,CAAC,CAAC;IACvI,CAAC;CACF;AAOD;;;GAGG;AACH,MAAM,UAAU;IAOO;IAA6B;IAN1C,QAAQ,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,QAAQ,GAAa,EAAE,CAAC;IACxB,MAAM,GAAG,KAAK,CAAC;IACf,MAAM,GAAwB,IAAI,CAAC;IACnC,KAAK,GAAiB,IAAI,CAAC;IAEnC,YAAqB,EAAU,EAAmB,OAAmB;QAAhD,OAAE,GAAF,EAAE,CAAQ;QAAmB,YAAO,GAAP,OAAO,CAAY;IAAG,CAAC;IAEzE,KAAK,CAAC,IAAY;QAChB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,UAAU;QACR,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,KAAe;QACrB,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAwB,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAU;QACb,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC;QACnB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;oBACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAC/C,OAAO,CAAC,GAAG,CAAC,CAAC;gBACf,CAAC;qBAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC;YACF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/F,MAAM,UAAU,GAAG,CAAC,QAAsB,EAAU,EAAE;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3F,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAAG,KAAK,EAC5B,IAAoB,EACpB,QAAgB,EAChB,MAAc,EACd,IAAY,EACZ,OAAyC,EACzC,IAAa,EACU,EAAE;IACzB,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,IAAkB,EAAE,YAAoB,EAAU,EAAE;IAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,6BAA6B,IAAI,CAAC,MAAM,wCAAwC,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,wGAAwG,CAAC,CAAC;IACpI,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAW,CAAC,CAAC;IACjG,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,iDAAiD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAsB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,aAAa,CAAC,6CAA6C,OAAO,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAsB,EAAE,CAAC;AACxD,CAAC,CAAC;AAOF,MAAM,aAAa,GAAG,KAAK,EAAE,IAAoB,EAAE,IAAY,EAAE,MAAc,EAAE,MAAc,EAAE,QAAgB,EAAoB,EAAE;IACrI,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,gBAAgB,EAAE;QACvF,aAAa,EAAE,UAAU,MAAM,CAAC,SAAS,EAAE;QAC3C,cAAc,EAAE,MAAM;QACtB,MAAM,EAAE,MAAM;KACf,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAExD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,2CAA2C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9D,MAAM,IAAI,aAAa,CAAC,mDAAmD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,EAAE,CAAC;AACzE,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,GAAG;IAKsB;IAJ7B,QAAQ,GAAG,KAAK,CAAC;IACT,MAAM,GAAsB,EAAE,CAAC;IAC9B,OAAO,GAAiB,EAAE,CAAC;IAEpC,YAA6B,SAA+B;QAA/B,cAAS,GAAT,SAAS,CAAsB;IAAG,CAAC;IAEhE,GAAG,CAAC,EAAU;QACZ,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,EAAU;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ,CAAC,MAA2B,EAAE,MAAkC;QACtE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;oBAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,0BAA0B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBACjI,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;oBACrC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,YAAY;QACV,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAU;QAChB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,GAAG,CAAC,IAAyB,EAAE,UAAiC,IAAI,CAAC,OAAO;QAC1E,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;YAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;GAEG;AACH,MAAM,WAAW,GAAG,CAClB,GAAQ,EACR,IAAoB,EACpB,IAAY,EACZ,MAAc,EACd,OAAgB,EAChB,QAAgB,EAChB,OAA8B,EAC9B,MAAe,EACf,EAAE,CAAC,KAAK,IAAmB,EAAE;IAC7B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAA2B,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACjG,MAAM,IAAI,GAAG,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAE1D,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE;gBAClF,GAAG,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,IAAI;aAC1E,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxE,MAAM,IAAI,aAAa,CAAC,mCAAmC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACjF,CAAC;YACD,QAAQ,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,aAAa,EAAE;YACpF,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI;SAC1D,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,GAAG,EAAE,CAAC;gBAClD,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,wBAAwB,EAAE,CAAC,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,aAAa,CAAC,0CAA0C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC;AACH,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,YAAY,GAAG,CAAC,GAAQ,EAAE,MAA2B,EAAE,OAA8B,EAAE,EAAE;IAC7F,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC;IACF,OAAO,KAAK,IAAmB,EAAE;QAC/B,KAAK,EAAE,CAAC;QACR,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;gBACzB,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,KAAK,MAAM,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAiB,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,IAAmB,EAAE;IAC9D,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,KAAK,EAAE,QAAgB,EAAE,QAAqB,EAAE,IAAY,EAAE,MAAc,EAAE,KAAa,EAAiB,EAAE;IAClI,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrG,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,gBAAgB,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpH,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,KAAe,EAAE,GAAsB,EAAE,OAAqB,EAAuB,EAAE;IACzH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,IAAI,GAAkB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;IAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,WAAW,QAAQ,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAgB,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAE9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,YAAY,GAAiB,IAAI,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,YAAY,KAAK,GAAG,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,IAAI,OAA4B,CAAC;IAEjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEvD,OAAO,CAAC,KAAK,GAAG,yBAAyB,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,WAAW,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;YACjI,MAAM,EAAE,WAAW;YACnB,YAAY,EAAE,UAAU;SACzB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;QAEzD,OAAO,CAAC,KAAK,GAAG,4BAA4B,CAAC;QAC7C,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,OAAO,CAAC;QAE9B,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAA0E,EAAE,CAAC;QACxF,MAAM,WAAW,GAAiF,EAAE,CAAC;QACrG,IAAI,MAAuC,CAAC;QAE5C,OAAO,CAAC,KAAK,GAAG,eAAe,MAAM,CAAC,OAAO,UAAU,CAAC;QACxD,MAAM,cAAc,GAAG,KAAK,IAA6B,EAAE,CACzD,IAAI,cAAc,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEpF,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,OAAO;gBACV,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc,EAAE,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM;YACR,KAAK,WAAW;gBACd,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,cAAc,EAAE,EAAE,GAAG,IAAI,WAAW,EAAE,aAAa,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;gBAChI,MAAM;YACR,KAAK,iBAAiB;gBACpB,+EAA+E;gBAC/E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,MAAM,QAAQ,GAAG,kBAAkB,aAAa,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;oBACtE,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,cAAc,EAAE,EAAE,GAAG,IAAI,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBACrI,CAAC;gBACD,MAAM;QACV,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE9B,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC;QAC9B,sFAAsF;QACtF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAqB,EAAE;YACzE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,IAAI,cAAc,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBACxF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,EAAE,UAAU,GAAG,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,WAAW,EAAE,CAAC;gBAC1G,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YACnF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;oBAChC,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,YAAY,IAAI,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/G,CAAC;QACH,CAAC,CAAC,CAAC,CAAC;QAEJ,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,OAAO;gBACV,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;gBAChF,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5H,CAAC;gBACD,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,MAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC7C,MAAM;YACR,KAAK,iBAAiB;gBACpB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM;QACV,CAAC;QAED,+EAA+E;QAC/E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;QAC9B,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;QACpB,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAChC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,EAAE,CAAC;YACZ,yEAAyE;YACzE,MAAM,OAAO,GAAkB,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC;iBAC1F,OAAO,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAClD,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC,CAAC"}

package/dist/webproxy/frames.d.ts

@@ -0,0 +1,30 @@
+/**
+ * WEB proxy shared frames: type:u8 | stream_id:u24 | payload_length:u32 | payload (big-endian).
+ */
+export declare const FRAME: {
+    readonly OPEN: 1;
+    readonly DATA: 2;
+    readonly CLOSE: 3;
+    readonly WINDOW: 4;
+    readonly PING: 5;
+    readonly PONG: 6;
+    readonly HELLO: 16;
+    readonly WELCOME: 17;
+    readonly BYE: 31;
+};
+export declare const MAX_FRAME_PAYLOAD: number;
+export declare const MAX_DATA_CHUNK: number;
+export interface WebFrame {
+    readonly type: number;
+    readonly streamId: number;
+    readonly payload: Buffer;
+}
+export declare class FrameError extends Error {
+    constructor(message: string);
+}
+export declare const encodeWebFrame: (type: number, streamId: number, payload?: Buffer) => Buffer;
+/** DATA frames for `data`, split into relay-sized chunks. */
+export declare const encodeDataFrames: (streamId: number, data: Buffer) => Buffer[];
+/** Split a carrier body into complete frames. */
+export declare const decodeWebFrames: (batch: Buffer) => WebFrame[];
+//# sourceMappingURL=frames.d.ts.map

package/dist/webproxy/frames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.d.ts","sourceRoot":"","sources":["../../src/webproxy/frames.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,KAAK;;;;;;;;;;CAUR,CAAC;AAEX,eAAO,MAAM,iBAAiB,QAAc,CAAC;AAC7C,eAAO,MAAM,cAAc,QAAY,CAAC;AAGxC,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,UAAW,SAAQ,KAAK;gBACvB,OAAO,EAAE,MAAM;CAI5B;AAED,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,EAAE,UAAU,MAAM,EAAE,UAAS,MAAwB,KAAG,MAMlG,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,GAAI,UAAU,MAAM,EAAE,MAAM,MAAM,KAAG,MAAM,EAMvE,CAAC;AAEF,iDAAiD;AACjD,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,KAAG,QAAQ,EAkBvD,CAAC"}

package/dist/webproxy/frames.js

@@ -0,0 +1,59 @@
+/**
+ * WEB proxy shared frames: type:u8 | stream_id:u24 | payload_length:u32 | payload (big-endian).
+ */
+export const FRAME = {
+    OPEN: 0x01,
+    DATA: 0x02,
+    CLOSE: 0x03,
+    WINDOW: 0x04,
+    PING: 0x05,
+    PONG: 0x06,
+    HELLO: 0x10,
+    WELCOME: 0x11,
+    BYE: 0x1f,
+};
+export const MAX_FRAME_PAYLOAD = 1024 * 1024;
+export const MAX_DATA_CHUNK = 64 * 1024;
+const MAX_FRAMES_PER_BATCH = 4096;
+export class FrameError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'FrameError';
+    }
+}
+export const encodeWebFrame = (type, streamId, payload = Buffer.alloc(0)) => {
+    const header = Buffer.alloc(8);
+    header[0] = type;
+    header.writeUIntBE(streamId, 1, 3);
+    header.writeUInt32BE(payload.length, 4);
+    return Buffer.concat([header, payload]);
+};
+/** DATA frames for `data`, split into relay-sized chunks. */
+export const encodeDataFrames = (streamId, data) => {
+    const frames = [];
+    for (let offset = 0; offset < data.length; offset += MAX_DATA_CHUNK) {
+        frames.push(encodeWebFrame(FRAME.DATA, streamId, data.subarray(offset, offset + MAX_DATA_CHUNK)));
+    }
+    return frames;
+};
+/** Split a carrier body into complete frames. */
+export const decodeWebFrames = (batch) => {
+    const frames = [];
+    let offset = 0;
+    while (offset < batch.length) {
+        if (batch.length - offset < 8 || frames.length >= MAX_FRAMES_PER_BATCH) {
+            throw new FrameError('Invalid frame batch from relay');
+        }
+        const type = batch[offset];
+        const streamId = batch.readUIntBE(offset + 1, 3);
+        const size = batch.readUInt32BE(offset + 4);
+        const end = offset + 8 + size;
+        if (size > MAX_FRAME_PAYLOAD || end > batch.length || (type === FRAME.DATA && size === 0)) {
+            throw new FrameError('Invalid frame from relay');
+        }
+        frames.push({ type, streamId, payload: batch.subarray(offset + 8, end) });
+        offset = end;
+    }
+    return frames;
+};
+//# sourceMappingURL=frames.js.map

package/dist/webproxy/frames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.js","sourceRoot":"","sources":["../../src/webproxy/frames.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,IAAI;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAQlC,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAE,UAAkB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAU,EAAE;IAC1G,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACjB,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAY,EAAE;IAC3E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,cAAc,EAAE,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,iDAAiD;AACjD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAa,EAAc,EAAE;IAC3D,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,oBAAoB,EAAE,CAAC;YACvE,MAAM,IAAI,UAAU,CAAC,gCAAgC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC;QAC9B,IAAI,IAAI,GAAG,iBAAiB,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC"}

package/dist/webproxy/link.d.ts

@@ -0,0 +1,27 @@
+export interface WebProxyAddress {
+    /** Lowercase ASCII (IDNA A-label) hostname. */
+    readonly host: string;
+    /** Base path without leading/trailing slash; empty for a root deployment. */
+    readonly basePath: string;
+}
+export declare const validateHostname: (host: string) => string | null;
+export declare const validateBasePath: (path: string) => string | null;
+/**
+ * Parse the `server` field: `host` or `host/base/path`.
+ */
+export declare const parseWebProxyServer: (value: string) => WebProxyAddress | string;
+/**
+ * Decode a WEB proxy secret. A link with a base path must carry the marked
+ * form (0x70 || secret, base64url); the marker is stripped.
+ *
+ * @returns the MTProxy secret bytes (16, or 17 starting with 0xdd), or an error message
+ */
+export declare const decodeWebSecret: (value: string, hasBasePath: boolean) => Buffer | string;
+/**
+ * Bridge capability: base64url(HMAC-SHA256(secret, context)), where context
+ * binds the hostname (v1) or the hostname and base path (v2).
+ */
+export declare const deriveCapability: (address: WebProxyAddress, secret: Buffer) => string;
+/** Path prefix of every relay endpoint: "/" or "/<base>/". */
+export declare const basePrefix: (basePath: string) => string;
+//# sourceMappingURL=link.d.ts.map

package/dist/webproxy/link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../../src/webproxy/link.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAID,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAM,GAAG,IAaxD,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAM,GAAG,IAUxD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,eAAe,GAAG,MAgBrE,CAAC;AAcF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,EAAE,aAAa,OAAO,KAAG,MAAM,GAAG,MAsB9E,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,eAAe,EAAE,QAAQ,MAAM,KAAG,MAK3E,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,UAAU,GAAI,UAAU,MAAM,KAAG,MAAmD,CAAC"}