@estiva-app/protocol 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,57 @@
+/**
+ * `@estiva-app/protocol` — the Estiva wire format, once.
+ *
+ * ## What is in here, and what is deliberately not
+ *
+ * **In:** the bytes. Event construction, the NIP-01 id preimage, NIP-19 `naddr`,
+ * NIP-98 HTTP auth, Schnorr signing, and the two relay clients (the HTTP bridge
+ * and the live socket). Everything whose correctness the *relay* judges.
+ *
+ * **Not in: the fold, or anything that interprets events.** How an app turns a
+ * stream of events into current truth is where apps are supposed to differ —
+ * `estiva-docs/decisions/0001` §8, and the README of this repo. Ship folds
+ * issues, Peek folds conversations, and neither should inherit the other's
+ * opinion. `foldFolder`, `foldResolution` and the projection all stay in their
+ * apps, and each app's conformance fixture stays with it.
+ *
+ * That line is the one thing to hold when adding to this package. "Both apps
+ * need it" is not the test; "the relay would notice if we disagreed" is.
+ *
+ * ## Why one implementation, when the suite's whole claim is independence
+ *
+ * SPEC §10 used to say the duplication *was* the architecture: three apps each
+ * implementing NIP-01 serialization is what makes "apps sharing no code work on
+ * the same data" a real statement. That argument was right about the *claim* and
+ * wrong about the *mechanism*, and the third copy is what settled it.
+ *
+ * A second hand-written event-id hash is not a demonstration of independence, it
+ * is a divergence the relay notices and we do not. It had already happened:
+ * Peek's `buildMessage` emitted `a` tags and Ship's could not, so the same
+ * logical message produced different bytes depending on which app sent it — and
+ * nothing failed, because each copy was self-consistent. `diff -r` between two
+ * vendored trees was the only thing holding the other two together, and it is a
+ * check somebody has to remember to run.
+ *
+ * What makes the interop claim true is that the apps share **no interpretation
+ * and no database** — which is still exactly the case. They now agree on the
+ * wire format on purpose rather than by coincidence.
+ *
+ * ## A MAJOR here is a protocol event, not a TypeScript event
+ *
+ * A change to the bytes an app publishes — id computation, serialization order,
+ * tag semantics, signature input — is a MAJOR even when the TypeScript signature
+ * is identical (ADR 0002 §4b). Every release note answers the wire question
+ * explicitly, including when the answer is "unchanged".
+ */
+/** Bumped by hand with the version in package.json — `test/version.test.ts`
+ * pins the two together. It exists so "the upgrade reached the app" can be
+ * checked by grepping a built bundle rather than by trusting a lockfile. */
+export declare const PROTOCOL_VERSION = "0.1.0";
+export { type NostrTag, type UnsignedEvent, type SignedEvent, type Profile, type ThreadRef, type ChannelVisibility, type ChannelKind, type MemberRole, type Label, type ResolutionAction, KIND, MAX_EMOJI_CHARS, MAX_MESSAGE_BYTES, MAX_MENTIONS, MAX_RATIONALE_BYTES, RELAY_AUTH_TOLERANCE_SECS, ASSERTION_SUBTYPE, computeEventId, toNostrSeconds, canonicalChannelName, threadTags, addr, relayAuthUrl, buildProfile, parseProfile, buildCreateChannel, buildDeleteChannel, buildEditChannelMetadata, buildAddMember, buildReaction, buildDeletion, buildMessage, buildResolution, buildFile, buildComponent, buildHighlight, buildUnsignedRelayAuthEvent, } from './events.js';
+export { type AddressPointer, convertBits, bech32Encode, bech32Decode, encodeNaddr, decodeNaddr, pointerToAddress, addressToPointer, addrToNaddr, naddrToAddr, referenceToPointer, NADDR_RE, findNaddrs, stripNaddrs, } from './nip19.js';
+export { type AuthEventArgs, TIMESTAMP_TOLERANCE_SECS, normalizeUrl, buildUnsignedAuthEvent, base64, authorizationHeaderFor, authorizationHeader, } from './nip98.js';
+export { type Signer, type SignerKind, publicKeyFromSecret, signEvent, secretKeySigner, } from './sign.js';
+export { type PublishResult, type QueryResult, type RelayHeaders, type RelayOptions, type FetchLike, parsePublishResponse, parseQueryResponse, Relay, } from './bridge.js';
+export { type RelayState, type SocketLike, type RelayCredential, type LiveRelayOptions, type Subscription, type LiveRelay, toWebSocketUrl, parseFrame, createLiveRelay, } from './live.js';
+export { type ChannelEventHandler, type ChannelSubscription, type ChannelSubscriptions, createChannelSubscriptions, } from './subscriptions.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH;;4EAE4E;AAC5E,eAAO,MAAM,gBAAgB,UAAU,CAAA;AAEvC,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,OAAO,EACZ,KAAK,SAAS,EACd,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,KAAK,EACV,KAAK,gBAAgB,EAErB,IAAI,EACJ,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,EAEjB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,IAAI,EACJ,YAAY,EAEZ,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,cAAc,EACd,aAAa,EACb,aAAa,EACb,YAAY,EACZ,eAAe,EACf,SAAS,EACT,cAAc,EACd,cAAc,EACd,2BAA2B,GAC5B,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,KAAK,cAAc,EACnB,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,WAAW,GACZ,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,KAAK,aAAa,EAClB,wBAAwB,EACxB,YAAY,EACZ,sBAAsB,EACtB,MAAM,EACN,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,KAAK,MAAM,EACX,KAAK,UAAU,EACf,mBAAmB,EACnB,SAAS,EACT,eAAe,GAChB,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,GACN,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,cAAc,EACd,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAA"}

package/dist/index.js

@@ -0,0 +1,63 @@
+/**
+ * `@estiva-app/protocol` — the Estiva wire format, once.
+ *
+ * ## What is in here, and what is deliberately not
+ *
+ * **In:** the bytes. Event construction, the NIP-01 id preimage, NIP-19 `naddr`,
+ * NIP-98 HTTP auth, Schnorr signing, and the two relay clients (the HTTP bridge
+ * and the live socket). Everything whose correctness the *relay* judges.
+ *
+ * **Not in: the fold, or anything that interprets events.** How an app turns a
+ * stream of events into current truth is where apps are supposed to differ —
+ * `estiva-docs/decisions/0001` §8, and the README of this repo. Ship folds
+ * issues, Peek folds conversations, and neither should inherit the other's
+ * opinion. `foldFolder`, `foldResolution` and the projection all stay in their
+ * apps, and each app's conformance fixture stays with it.
+ *
+ * That line is the one thing to hold when adding to this package. "Both apps
+ * need it" is not the test; "the relay would notice if we disagreed" is.
+ *
+ * ## Why one implementation, when the suite's whole claim is independence
+ *
+ * SPEC §10 used to say the duplication *was* the architecture: three apps each
+ * implementing NIP-01 serialization is what makes "apps sharing no code work on
+ * the same data" a real statement. That argument was right about the *claim* and
+ * wrong about the *mechanism*, and the third copy is what settled it.
+ *
+ * A second hand-written event-id hash is not a demonstration of independence, it
+ * is a divergence the relay notices and we do not. It had already happened:
+ * Peek's `buildMessage` emitted `a` tags and Ship's could not, so the same
+ * logical message produced different bytes depending on which app sent it — and
+ * nothing failed, because each copy was self-consistent. `diff -r` between two
+ * vendored trees was the only thing holding the other two together, and it is a
+ * check somebody has to remember to run.
+ *
+ * What makes the interop claim true is that the apps share **no interpretation
+ * and no database** — which is still exactly the case. They now agree on the
+ * wire format on purpose rather than by coincidence.
+ *
+ * ## A MAJOR here is a protocol event, not a TypeScript event
+ *
+ * A change to the bytes an app publishes — id computation, serialization order,
+ * tag semantics, signature input — is a MAJOR even when the TypeScript signature
+ * is identical (ADR 0002 §4b). Every release note answers the wire question
+ * explicitly, including when the answer is "unchanged".
+ */
+/** Bumped by hand with the version in package.json — `test/version.test.ts`
+ * pins the two together. It exists so "the upgrade reached the app" can be
+ * checked by grepping a built bundle rather than by trusting a lockfile. */
+export const PROTOCOL_VERSION = '0.1.0';
+export { 
+// constants
+KIND, MAX_EMOJI_CHARS, MAX_MESSAGE_BYTES, MAX_MENTIONS, MAX_RATIONALE_BYTES, RELAY_AUTH_TOLERANCE_SECS, ASSERTION_SUBTYPE, 
+// the id preimage and the pieces that feed it
+computeEventId, toNostrSeconds, canonicalChannelName, threadTags, addr, relayAuthUrl, 
+// builders
+buildProfile, parseProfile, buildCreateChannel, buildDeleteChannel, buildEditChannelMetadata, buildAddMember, buildReaction, buildDeletion, buildMessage, buildResolution, buildFile, buildComponent, buildHighlight, buildUnsignedRelayAuthEvent, } from './events.js';
+export { convertBits, bech32Encode, bech32Decode, encodeNaddr, decodeNaddr, pointerToAddress, addressToPointer, addrToNaddr, naddrToAddr, referenceToPointer, NADDR_RE, findNaddrs, stripNaddrs, } from './nip19.js';
+export { TIMESTAMP_TOLERANCE_SECS, normalizeUrl, buildUnsignedAuthEvent, base64, authorizationHeaderFor, authorizationHeader, } from './nip98.js';
+export { publicKeyFromSecret, signEvent, secretKeySigner, } from './sign.js';
+export { parsePublishResponse, parseQueryResponse, Relay, } from './bridge.js';
+export { toWebSocketUrl, parseFrame, createLiveRelay, } from './live.js';
+export { createChannelSubscriptions, } from './subscriptions.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH;;4EAE4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAEvC,OAAO;AAYL,YAAY;AACZ,IAAI,EACJ,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB;AACjB,8CAA8C;AAC9C,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,IAAI,EACJ,YAAY;AACZ,WAAW;AACX,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,cAAc,EACd,aAAa,EACb,aAAa,EACb,YAAY,EACZ,eAAe,EACf,SAAS,EACT,cAAc,EACd,cAAc,EACd,2BAA2B,GAC5B,MAAM,aAAa,CAAA;AAEpB,OAAO,EAEL,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,WAAW,GACZ,MAAM,YAAY,CAAA;AAEnB,OAAO,EAEL,wBAAwB,EACxB,YAAY,EACZ,sBAAsB,EACtB,MAAM,EACN,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAGL,mBAAmB,EACnB,SAAS,EACT,eAAe,GAChB,MAAM,WAAW,CAAA;AAElB,OAAO,EAML,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,GACN,MAAM,aAAa,CAAA;AAEpB,OAAO,EAOL,cAAc,EACd,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAA;AAElB,OAAO,EAIL,0BAA0B,GAC3B,MAAM,oBAAoB,CAAA"}

package/dist/live.d.ts

@@ -0,0 +1,205 @@
+/**
+ * One live relay socket, with NIP-42 AUTH and reconnect (PEE-5).
+ *
+ * A WebSocket that stays open, authenticates as the viewer, and keeps
+ * subscriptions alive across disconnects. Nothing is *interpreted* here: this
+ * delivers frames, and folding them into state is the consuming app's business.
+ *
+ * The socket belongs in the **client**, not in a backend: a request-scoped
+ * server runtime cannot hold one, and more importantly the viewer's own
+ * credential is the only thing that can see the viewer's channels. Buzz gates
+ * reads per channel (`is_member_cached`), so a service identity would need
+ * membership in every conversation — a product decision, not an implementation
+ * detail.
+ *
+ * **This was built inside Peek** (PEE-5, PEE-6) because Gate 2 had not happened
+ * when it was due, and it was Peek-only for two days. SHA-3 is the ticket that
+ * owed the move; `subscriptions.ts` beside this file is PEE-6's half.
+ *
+ * No nostr library. Raw `WebSocket` plus `buildUnsignedRelayAuthEvent` is
+ * enough, and the tag layout stays in one place.
+ *
+ * ## Three things the relay does that shape this file
+ *
+ * All three were read out of `crates/buzz-*` rather than assumed, because each
+ * one fails as a healthy-looking socket that delivers nothing.
+ *
+ * 1. **A second AUTH on an authenticated connection is refused.** `handle_auth`
+ *    matches on `AuthState::{Pending, Authenticated, Failed}` and answers
+ *    anything but `Pending` with `OK … false "auth-required: already
+ *    authenticated"`. So re-authenticating in place is not possible, and
+ *    {@link LiveRelay} never tries.
+ *
+ * 2. **A failed AUTH poisons the connection and leaves it open.** Only a *ban*
+ *    closes the socket; a verification failure sets `AuthState::Failed` and
+ *    returns. Every later REQ is answered `CLOSED … "auth-required:
+ *    authenticate before subscribing"`, forever, on a socket whose readyState
+ *    is OPEN. Treating an AUTH refusal as fatal-for-this-socket and reconnecting
+ *    is the only way out.
+ *
+ * 3. **The `relay` tag is bound to the connection's host**, not the deployment
+ *    URL — see `relayAuthUrl`.
+ *
+ * ## Token rotation needs nothing here, and that is worth stating
+ *
+ * PEE-5 asked for re-authentication when the app renews its access token,
+ * preferring it to a reconnect. Neither is needed, and the first is impossible
+ * (point 1 above).
+ *
+ * The relay authenticates a **pubkey**, by verifying a Schnorr signature. It
+ * never sees the Estiva ID access token and has no idea one exists. Renewal
+ * issues a new token for the *same* keypair, so nothing the relay checked has
+ * changed and the connection stays valid. The token is needed only to *sign* a
+ * fresh 22242, which happens on the next connect.
+ *
+ * What genuinely does not propagate is offboarding: a person whose Estiva ID
+ * access is revoked keeps an already-authenticated socket until it drops. That
+ * is the relay's session model — its own ban gate is the control for it — and
+ * re-authenticating on a timer would not have fixed it either, since a banned
+ * pubkey is caught at connect.
+ *
+ * ## Never logged, never persisted
+ *
+ * The AUTH event and the access token appear in no log line. Buzz refuses to
+ * store kind:22242 for this reason, and Convex surfaces function arguments in
+ * its dashboard logs — which is the entire reason Peek's credential lives in the
+ * browser. {@link LiveRelayOptions.log} receives states and reasons, never
+ * events or credentials, and this module must keep it that way.
+ */
+import { type SignedEvent, type UnsignedEvent } from './events.js';
+/**
+ * What the connection is doing, for PEE-9 to render.
+ *
+ * `failed` is terminal and deliberate: it means repeated *authentication*
+ * refusals, which retrying cannot fix — a missing 22242 grant, a clock more
+ * than 60s out, a revoked identity. A relay that is merely down stays in
+ * `reconnecting` forever, because that one does fix itself.
+ */
+export type RelayState = 'connecting' | 'authenticating' | 'live' | 'reconnecting' | 'failed';
+/** Just enough of `WebSocket` to be faked in a test. */
+export interface SocketLike {
+    send(data: string): void;
+    close(): void;
+    onopen: ((this: unknown, ev: unknown) => unknown) | null;
+    onmessage: ((this: unknown, ev: {
+        data: unknown;
+    }) => unknown) | null;
+    onclose: ((this: unknown, ev: unknown) => unknown) | null;
+    onerror: ((this: unknown, ev: unknown) => unknown) | null;
+}
+/** The credential a connect attempt needs. `null` means "not signed in". */
+export interface RelayCredential {
+    accessToken: string;
+    pubkey: string;
+}
+export interface LiveRelayOptions {
+    /**
+     * The relay origin, `https://…` or `wss://…`.
+     *
+     * Peek reads this from a Convex query rather than a `VITE_` build-time
+     * variable, so that the bundle and the backend cannot drift. Where it comes
+     * from is the app's decision; that it is one value is not.
+     */
+    url: string;
+    /** Read fresh on every connect, so a reconnect picks up a renewed token. */
+    getCredential: () => RelayCredential | null;
+    /**
+     * Injected so this module does no fetching of its own. Peek passes
+     * `signViaEstivaId`; a keyed client passes a `signEvent` wrapper.
+     *
+     * `expectedPubkey` is not a request — a remote `/sign` signs as the token's
+     * subject whatever it is handed, so a mismatch comes back as HTTP 200 with a
+     * valid event authored by somebody else. The implementation must check it.
+     */
+    sign: (unsigned: UnsignedEvent, token: string, expectedPubkey: string) => Promise<SignedEvent>;
+    onState?: (state: RelayState) => void;
+    /** Never receives event bodies or credentials. */
+    log?: (message: string, detail?: Record<string, unknown>) => void;
+    /** Test seams. */
+    socketFactory?: (url: string) => SocketLike;
+    now?: () => number;
+    setTimer?: (fn: () => void, ms: number) => unknown;
+    clearTimer?: (handle: unknown) => void;
+    /** Backoff shape. Exposed so a test does not wait real seconds. */
+    backoff?: {
+        baseMs: number;
+        maxMs: number;
+        jitter: () => number;
+    };
+    /**
+     * Prefix for REQ subscription ids. Cosmetic — it appears in the relay's logs
+     * and nowhere else — but a relay operator reading two apps' traffic wants to
+     * know which is which. Was hardcoded `peek-` while this lived in Peek.
+     */
+    subscriptionPrefix?: string;
+}
+export interface Subscription {
+    /** Idempotent. Sends CLOSE when the socket is live, and forgets it either way. */
+    close(): void;
+}
+export interface LiveRelay {
+    /**
+     * Drop the current socket and connect again now, ignoring any backoff.
+     *
+     * For the case a socket cannot detect on its own: the network went away and
+     * came back without the connection ever closing. A WebSocket whose peer has
+     * become unreachable stays `OPEN` until TCP gives up, which can be minutes —
+     * and browser devtools' offline mode frequently does not close it at all. The
+     * socket therefore reports `live`, delivers nothing, and would never
+     * reconnect, because reconnection is driven by `onclose`.
+     *
+     * `liveTopics` calls this from the browser's own `online`/`offline` events,
+     * which are the one authority here that a socket cannot second-guess.
+     */
+    reconnect(): void;
+    /**
+     * Subscribe now if the socket is live, and on every future reconnect.
+     *
+     * Registering before `live` is normal and supported — that is what makes a
+     * subscription survive a reconnect rather than being lost with the socket.
+     */
+    subscribe(filters: Record<string, unknown>[], onEvent: (event: SignedEvent) => void, options?: {
+        onEose?: () => void;
+        onClosed?: (reason: string) => void;
+    }): Subscription;
+    state(): RelayState;
+    /** Stop for good. Does not reconnect afterwards. */
+    close(): void;
+}
+/** `https://` → `wss://`, `http://` → `ws://`; a `ws`-scheme URL is left alone. */
+export declare function toWebSocketUrl(url: string): string;
+/**
+ * A relay message, parsed far enough to route.
+ *
+ * Deliberately tolerant: an unknown verb is ignored rather than throwing, so a
+ * relay that grows a frame does not take the socket down with it.
+ */
+type RelayFrame = {
+    type: 'AUTH';
+    challenge: string;
+} | {
+    type: 'OK';
+    eventId: string;
+    accepted: boolean;
+    message: string;
+} | {
+    type: 'EVENT';
+    subId: string;
+    event: SignedEvent;
+} | {
+    type: 'EOSE';
+    subId: string;
+} | {
+    type: 'CLOSED';
+    subId: string;
+    message: string;
+} | {
+    type: 'NOTICE';
+    message: string;
+} | {
+    type: 'OTHER';
+};
+export declare function parseFrame(raw: unknown): RelayFrame;
+export declare function createLiveRelay(options: LiveRelayOptions): LiveRelay;
+export {};
+//# sourceMappingURL=live.d.ts.map

package/dist/live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../src/live.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,aAAa,CAAA;AAgBpB;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,gBAAgB,GAAG,MAAM,GAAG,cAAc,GAAG,QAAQ,CAAA;AAE7F,wDAAwD;AACxD,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,IAAI,IAAI,CAAA;IACb,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,IAAI,CAAA;IACxD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,GAAG,IAAI,CAAA;IACrE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,IAAI,CAAA;IACzD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,IAAI,CAAA;CAC1D;AAED,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,GAAG,EAAE,MAAM,CAAA;IACX,4EAA4E;IAC5E,aAAa,EAAE,MAAM,eAAe,GAAG,IAAI,CAAA;IAC3C;;;;;;;OAOG;IACH,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAC9F,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,kDAAkD;IAClD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IACjE,kBAAkB;IAClB,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,CAAA;IAC3C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAA;IAClD,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAA;IACtC,mEAAmE;IACnE,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,MAAM,CAAA;KAAE,CAAA;IACjE;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,SAAS;IACxB;;;;;;;;;;;;OAYG;IACH,SAAS,IAAI,IAAI,CAAA;IACjB;;;;;OAKG;IACH,SAAS,CACP,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAClC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,EACrC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,GACrE,YAAY,CAAA;IACf,KAAK,IAAI,UAAU,CAAA;IACnB,oDAAoD;IACpD,KAAK,IAAI,IAAI,CAAA;CACd;AAaD,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED;;;;;GAKG;AACH,KAAK,UAAU,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAA;AAErB,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CA6CnD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAyQpE"}