@f2a/network 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/workflows/ci.yml +113 -0
- package/.github/workflows/publish.yml +60 -0
- package/LICENSE +21 -0
- package/MONOREPO.md +58 -0
- package/README.md +280 -0
- package/SKILL.md +137 -0
- package/dist/adapters/openclaw.d.ts +103 -0
- package/dist/adapters/openclaw.d.ts.map +1 -0
- package/dist/adapters/openclaw.js +297 -0
- package/dist/adapters/openclaw.js.map +1 -0
- package/dist/cli/commands.d.ts +17 -0
- package/dist/cli/commands.d.ts.map +1 -0
- package/dist/cli/commands.js +107 -0
- package/dist/cli/commands.js.map +1 -0
- package/dist/cli/index.d.ts +6 -0
- package/dist/cli/index.d.ts.map +1 -0
- package/dist/cli/index.js +203 -0
- package/dist/cli/index.js.map +1 -0
- package/dist/core/autonomous-economy.d.ts +136 -0
- package/dist/core/autonomous-economy.d.ts.map +1 -0
- package/dist/core/autonomous-economy.js +255 -0
- package/dist/core/autonomous-economy.js.map +1 -0
- package/dist/core/connection-manager.d.ts +80 -0
- package/dist/core/connection-manager.d.ts.map +1 -0
- package/dist/core/connection-manager.js +235 -0
- package/dist/core/connection-manager.js.map +1 -0
- package/dist/core/connection-manager.test.d.ts +2 -0
- package/dist/core/connection-manager.test.d.ts.map +1 -0
- package/dist/core/connection-manager.test.js +52 -0
- package/dist/core/connection-manager.test.js.map +1 -0
- package/dist/core/e2ee-crypto.d.ts +90 -0
- package/dist/core/e2ee-crypto.d.ts.map +1 -0
- package/dist/core/e2ee-crypto.js +190 -0
- package/dist/core/e2ee-crypto.js.map +1 -0
- package/dist/core/f2a.d.ts +126 -0
- package/dist/core/f2a.d.ts.map +1 -0
- package/dist/core/f2a.js +425 -0
- package/dist/core/f2a.js.map +1 -0
- package/dist/core/identity.d.ts +47 -0
- package/dist/core/identity.d.ts.map +1 -0
- package/dist/core/identity.js +130 -0
- package/dist/core/identity.js.map +1 -0
- package/dist/core/identity.test.d.ts +2 -0
- package/dist/core/identity.test.d.ts.map +1 -0
- package/dist/core/identity.test.js +43 -0
- package/dist/core/identity.test.js.map +1 -0
- package/dist/core/p2p-network.d.ts +242 -0
- package/dist/core/p2p-network.d.ts.map +1 -0
- package/dist/core/p2p-network.js +1182 -0
- package/dist/core/p2p-network.js.map +1 -0
- package/dist/core/reputation-security.d.ts +168 -0
- package/dist/core/reputation-security.d.ts.map +1 -0
- package/dist/core/reputation-security.js +369 -0
- package/dist/core/reputation-security.js.map +1 -0
- package/dist/core/reputation.d.ts +179 -0
- package/dist/core/reputation.d.ts.map +1 -0
- package/dist/core/reputation.js +472 -0
- package/dist/core/reputation.js.map +1 -0
- package/dist/core/review-committee.d.ts +130 -0
- package/dist/core/review-committee.d.ts.map +1 -0
- package/dist/core/review-committee.js +251 -0
- package/dist/core/review-committee.js.map +1 -0
- package/dist/core/serverless.d.ts +155 -0
- package/dist/core/serverless.d.ts.map +1 -0
- package/dist/core/serverless.js +615 -0
- package/dist/core/serverless.js.map +1 -0
- package/dist/core/token-manager.d.ts +42 -0
- package/dist/core/token-manager.d.ts.map +1 -0
- package/dist/core/token-manager.js +122 -0
- package/dist/core/token-manager.js.map +1 -0
- package/dist/daemon/control-server.d.ts +55 -0
- package/dist/daemon/control-server.d.ts.map +1 -0
- package/dist/daemon/control-server.js +262 -0
- package/dist/daemon/control-server.js.map +1 -0
- package/dist/daemon/index.d.ts +35 -0
- package/dist/daemon/index.d.ts.map +1 -0
- package/dist/daemon/index.js +69 -0
- package/dist/daemon/index.js.map +1 -0
- package/dist/daemon/main.d.ts +6 -0
- package/dist/daemon/main.d.ts.map +1 -0
- package/dist/daemon/main.js +38 -0
- package/dist/daemon/main.js.map +1 -0
- package/dist/daemon/start.d.ts +6 -0
- package/dist/daemon/start.d.ts.map +1 -0
- package/dist/daemon/start.js +25 -0
- package/dist/daemon/start.js.map +1 -0
- package/dist/daemon/webhook.d.ts +30 -0
- package/dist/daemon/webhook.d.ts.map +1 -0
- package/dist/daemon/webhook.js +86 -0
- package/dist/daemon/webhook.js.map +1 -0
- package/dist/daemon/webhook.test.d.ts +2 -0
- package/dist/daemon/webhook.test.d.ts.map +1 -0
- package/dist/daemon/webhook.test.js +24 -0
- package/dist/daemon/webhook.test.js.map +1 -0
- package/dist/index.d.ts +24 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +25 -0
- package/dist/index.js.map +1 -0
- package/dist/protocol/messages.d.ts +739 -0
- package/dist/protocol/messages.d.ts.map +1 -0
- package/dist/protocol/messages.js +188 -0
- package/dist/protocol/messages.js.map +1 -0
- package/dist/protocol/messages.test.d.ts +2 -0
- package/dist/protocol/messages.test.d.ts.map +1 -0
- package/dist/protocol/messages.test.js +55 -0
- package/dist/protocol/messages.test.js.map +1 -0
- package/dist/types/index.d.ts +247 -0
- package/dist/types/index.d.ts.map +1 -0
- package/dist/types/index.js +10 -0
- package/dist/types/index.js.map +1 -0
- package/dist/types/result.d.ts +28 -0
- package/dist/types/result.d.ts.map +1 -0
- package/dist/types/result.js +16 -0
- package/dist/types/result.js.map +1 -0
- package/dist/utils/benchmark.d.ts +67 -0
- package/dist/utils/benchmark.d.ts.map +1 -0
- package/dist/utils/benchmark.js +179 -0
- package/dist/utils/benchmark.js.map +1 -0
- package/dist/utils/logger.d.ts +105 -0
- package/dist/utils/logger.d.ts.map +1 -0
- package/dist/utils/logger.js +275 -0
- package/dist/utils/logger.js.map +1 -0
- package/dist/utils/middleware.d.ts +85 -0
- package/dist/utils/middleware.d.ts.map +1 -0
- package/dist/utils/middleware.js +173 -0
- package/dist/utils/middleware.js.map +1 -0
- package/dist/utils/rate-limiter.d.ts +71 -0
- package/dist/utils/rate-limiter.d.ts.map +1 -0
- package/dist/utils/rate-limiter.js +160 -0
- package/dist/utils/rate-limiter.js.map +1 -0
- package/dist/utils/signature.d.ts +57 -0
- package/dist/utils/signature.d.ts.map +1 -0
- package/dist/utils/signature.js +102 -0
- package/dist/utils/signature.js.map +1 -0
- package/dist/utils/validation.d.ts +504 -0
- package/dist/utils/validation.d.ts.map +1 -0
- package/dist/utils/validation.js +159 -0
- package/dist/utils/validation.js.map +1 -0
- package/docs/F2A-PROTOCOL.md +61 -0
- package/docs/MOBILE_BOOTSTRAP_DESIGN.md +126 -0
- package/docs/a2a-lessons.md +316 -0
- package/docs/middleware-guide.md +448 -0
- package/docs/readme-update-checklist.md +90 -0
- package/docs/reputation-guide.md +396 -0
- package/docs/rfcs/001-reputation-system.md +712 -0
- package/docs/security-design.md +247 -0
- package/install.sh +231 -0
- package/package.json +64 -0
- package/packages/openclaw-adapter/README.md +510 -0
- package/packages/openclaw-adapter/openclaw.plugin.json +106 -0
- package/packages/openclaw-adapter/package.json +40 -0
- package/packages/openclaw-adapter/src/announcement-queue.test.ts +449 -0
- package/packages/openclaw-adapter/src/announcement-queue.ts +403 -0
- package/packages/openclaw-adapter/src/capability-detector.test.ts +99 -0
- package/packages/openclaw-adapter/src/capability-detector.ts +183 -0
- package/packages/openclaw-adapter/src/claim-handlers.test.ts +974 -0
- package/packages/openclaw-adapter/src/claim-handlers.ts +482 -0
- package/packages/openclaw-adapter/src/connector.business.test.ts +583 -0
- package/packages/openclaw-adapter/src/connector.ts +795 -0
- package/packages/openclaw-adapter/src/index.test.ts +82 -0
- package/packages/openclaw-adapter/src/index.ts +18 -0
- package/packages/openclaw-adapter/src/integration.e2e.test.ts +829 -0
- package/packages/openclaw-adapter/src/logger.ts +51 -0
- package/packages/openclaw-adapter/src/network-client.test.ts +266 -0
- package/packages/openclaw-adapter/src/network-client.ts +251 -0
- package/packages/openclaw-adapter/src/network-recovery.test.ts +465 -0
- package/packages/openclaw-adapter/src/node-manager.test.ts +136 -0
- package/packages/openclaw-adapter/src/node-manager.ts +429 -0
- package/packages/openclaw-adapter/src/plugin.test.ts +439 -0
- package/packages/openclaw-adapter/src/plugin.ts +104 -0
- package/packages/openclaw-adapter/src/reputation.test.ts +221 -0
- package/packages/openclaw-adapter/src/reputation.ts +368 -0
- package/packages/openclaw-adapter/src/task-guard.test.ts +502 -0
- package/packages/openclaw-adapter/src/task-guard.ts +860 -0
- package/packages/openclaw-adapter/src/task-queue.concurrency.test.ts +462 -0
- package/packages/openclaw-adapter/src/task-queue.edge-cases.test.ts +284 -0
- package/packages/openclaw-adapter/src/task-queue.persistence.test.ts +408 -0
- package/packages/openclaw-adapter/src/task-queue.ts +668 -0
- package/packages/openclaw-adapter/src/tool-handlers.test.ts +906 -0
- package/packages/openclaw-adapter/src/tool-handlers.ts +574 -0
- package/packages/openclaw-adapter/src/types.ts +361 -0
- package/packages/openclaw-adapter/src/webhook-pusher.test.ts +188 -0
- package/packages/openclaw-adapter/src/webhook-pusher.ts +220 -0
- package/packages/openclaw-adapter/src/webhook-server.test.ts +580 -0
- package/packages/openclaw-adapter/src/webhook-server.ts +202 -0
- package/packages/openclaw-adapter/tsconfig.json +20 -0
- package/src/cli/commands.test.ts +157 -0
- package/src/cli/commands.ts +129 -0
- package/src/cli/index.test.ts +77 -0
- package/src/cli/index.ts +234 -0
- package/src/core/autonomous-economy.test.ts +291 -0
- package/src/core/autonomous-economy.ts +428 -0
- package/src/core/e2ee-crypto.test.ts +125 -0
- package/src/core/e2ee-crypto.ts +246 -0
- package/src/core/f2a.test.ts +269 -0
- package/src/core/f2a.ts +618 -0
- package/src/core/p2p-network.test.ts +199 -0
- package/src/core/p2p-network.ts +1432 -0
- package/src/core/reputation-security.test.ts +403 -0
- package/src/core/reputation-security.ts +562 -0
- package/src/core/reputation.test.ts +260 -0
- package/src/core/reputation.ts +576 -0
- package/src/core/review-committee.test.ts +380 -0
- package/src/core/review-committee.ts +401 -0
- package/src/core/token-manager.test.ts +133 -0
- package/src/core/token-manager.ts +140 -0
- package/src/daemon/control-server.test.ts +216 -0
- package/src/daemon/control-server.ts +292 -0
- package/src/daemon/index.test.ts +85 -0
- package/src/daemon/index.ts +89 -0
- package/src/daemon/main.ts +44 -0
- package/src/daemon/start.ts +29 -0
- package/src/daemon/webhook.test.ts +68 -0
- package/src/daemon/webhook.ts +105 -0
- package/src/index.test.ts +436 -0
- package/src/index.ts +72 -0
- package/src/types/index.test.ts +87 -0
- package/src/types/index.ts +341 -0
- package/src/types/result.ts +68 -0
- package/src/utils/benchmark.ts +237 -0
- package/src/utils/logger.ts +331 -0
- package/src/utils/middleware.ts +229 -0
- package/src/utils/rate-limiter.ts +207 -0
- package/src/utils/signature.ts +136 -0
- package/src/utils/validation.ts +186 -0
- package/tests/docker/Dockerfile.node +23 -0
- package/tests/docker/Dockerfile.runner +18 -0
- package/tests/docker/docker-compose.test.yml +73 -0
- package/tests/integration/message-passing.test.ts +109 -0
- package/tests/integration/multi-node.test.ts +92 -0
- package/tests/integration/p2p-connection.test.ts +83 -0
- package/tests/integration/test-config.ts +32 -0
- package/tsconfig.json +21 -0
- package/vitest.config.ts +26 -0
|
@@ -0,0 +1,615 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* P2P Serverless 模块
|
|
4
|
+
* 处理 TCP 连接、UDP 发现、身份验证
|
|
5
|
+
*/
|
|
6
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
7
|
+
exports.ServerlessP2P = void 0;
|
|
8
|
+
const eventemitter3_1 = require("eventemitter3");
|
|
9
|
+
const net_1 = require("net");
|
|
10
|
+
const dgram_1 = require("dgram");
|
|
11
|
+
const crypto_1 = require("crypto");
|
|
12
|
+
const os_1 = require("os");
|
|
13
|
+
const messages_1 = require("../protocol/messages");
|
|
14
|
+
// 常量
|
|
15
|
+
const DEFAULT_P2P_PORT = 9000;
|
|
16
|
+
const DISCOVERY_PORT = 8767;
|
|
17
|
+
const MULTICAST_ADDR = '239.255.255.250';
|
|
18
|
+
const MULTICAST_PORT = 8768;
|
|
19
|
+
const DISCOVERY_INTERVAL = 15000;
|
|
20
|
+
const BROADCAST_INTERVAL = 60000;
|
|
21
|
+
const MAX_MESSAGE_SIZE = 1024 * 1024;
|
|
22
|
+
const CHALLENGE_TIMEOUT = 5 * 60 * 1000; // 5分钟
|
|
23
|
+
class ServerlessP2P extends eventemitter3_1.EventEmitter {
|
|
24
|
+
identity;
|
|
25
|
+
config;
|
|
26
|
+
connectionManager;
|
|
27
|
+
tcpServer;
|
|
28
|
+
udpSocket;
|
|
29
|
+
peers = new Map();
|
|
30
|
+
discoveredAgents = new Map();
|
|
31
|
+
pendingChallenges = new Map();
|
|
32
|
+
rateLimiter = new Map();
|
|
33
|
+
discoveryInterval;
|
|
34
|
+
broadcastInterval;
|
|
35
|
+
cleanupInterval;
|
|
36
|
+
constructor(options) {
|
|
37
|
+
super();
|
|
38
|
+
this.identity = options.identity;
|
|
39
|
+
this.config = options.config;
|
|
40
|
+
this.connectionManager = options.connectionManager;
|
|
41
|
+
}
|
|
42
|
+
/**
|
|
43
|
+
* 启动 P2P 服务
|
|
44
|
+
*/
|
|
45
|
+
async start() {
|
|
46
|
+
try {
|
|
47
|
+
// 启动 TCP 监听
|
|
48
|
+
await this.startTCPListener();
|
|
49
|
+
// 启动 UDP 发现
|
|
50
|
+
await this.startUDPDiscovery();
|
|
51
|
+
// 启动清理定时器
|
|
52
|
+
this.startCleanup();
|
|
53
|
+
console.log(`[ServerlessP2P] Started on port ${this.config.p2pPort}`);
|
|
54
|
+
this.emit('started', { port: this.config.p2pPort });
|
|
55
|
+
return { success: true, data: undefined };
|
|
56
|
+
}
|
|
57
|
+
catch (error) {
|
|
58
|
+
const message = error instanceof Error ? error.message : String(error);
|
|
59
|
+
return { success: false, error: `Failed to start: ${message}` };
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
/**
|
|
63
|
+
* 停止 P2P 服务
|
|
64
|
+
*/
|
|
65
|
+
stop() {
|
|
66
|
+
// 清除定时器
|
|
67
|
+
if (this.discoveryInterval)
|
|
68
|
+
clearInterval(this.discoveryInterval);
|
|
69
|
+
if (this.broadcastInterval)
|
|
70
|
+
clearInterval(this.broadcastInterval);
|
|
71
|
+
if (this.cleanupInterval)
|
|
72
|
+
clearInterval(this.cleanupInterval);
|
|
73
|
+
// 关闭 UDP
|
|
74
|
+
if (this.udpSocket) {
|
|
75
|
+
this.udpSocket.close();
|
|
76
|
+
this.udpSocket = undefined;
|
|
77
|
+
}
|
|
78
|
+
// 关闭 TCP 服务器
|
|
79
|
+
if (this.tcpServer) {
|
|
80
|
+
this.tcpServer.close();
|
|
81
|
+
this.tcpServer = undefined;
|
|
82
|
+
}
|
|
83
|
+
// 断开所有 Peer
|
|
84
|
+
for (const peer of this.peers.values()) {
|
|
85
|
+
this.closeSocket(peer.socket);
|
|
86
|
+
}
|
|
87
|
+
this.peers.clear();
|
|
88
|
+
this.emit('stopped');
|
|
89
|
+
}
|
|
90
|
+
/**
|
|
91
|
+
* 连接到指定 Agent
|
|
92
|
+
*/
|
|
93
|
+
async connectToAgent(agentId, address, port) {
|
|
94
|
+
// 检查是否已连接
|
|
95
|
+
if (this.peers.has(agentId)) {
|
|
96
|
+
return { success: false, error: 'Already connected' };
|
|
97
|
+
}
|
|
98
|
+
// 检查黑名单
|
|
99
|
+
if (this.config.security.blacklist?.has(agentId)) {
|
|
100
|
+
return { success: false, error: 'Agent is blacklisted' };
|
|
101
|
+
}
|
|
102
|
+
return new Promise((resolve) => {
|
|
103
|
+
const socket = new net_1.Socket();
|
|
104
|
+
let timeoutId;
|
|
105
|
+
const cleanup = () => {
|
|
106
|
+
if (timeoutId)
|
|
107
|
+
clearTimeout(timeoutId);
|
|
108
|
+
socket.removeAllListeners();
|
|
109
|
+
};
|
|
110
|
+
socket.on('connect', () => {
|
|
111
|
+
console.log(`[ServerlessP2P] Connected to ${agentId.slice(0, 16)}...`);
|
|
112
|
+
this.sendIdentityChallenge(socket, agentId);
|
|
113
|
+
// 等待验证完成
|
|
114
|
+
const checkVerified = () => {
|
|
115
|
+
const peer = this.peers.get(agentId);
|
|
116
|
+
if (peer?.verified) {
|
|
117
|
+
cleanup();
|
|
118
|
+
resolve({ success: true, data: undefined });
|
|
119
|
+
}
|
|
120
|
+
else {
|
|
121
|
+
setTimeout(checkVerified, 100);
|
|
122
|
+
}
|
|
123
|
+
};
|
|
124
|
+
checkVerified();
|
|
125
|
+
});
|
|
126
|
+
socket.on('error', (err) => {
|
|
127
|
+
cleanup();
|
|
128
|
+
resolve({ success: false, error: err.message });
|
|
129
|
+
});
|
|
130
|
+
timeoutId = setTimeout(() => {
|
|
131
|
+
cleanup();
|
|
132
|
+
socket.destroy();
|
|
133
|
+
resolve({ success: false, error: 'Connection timeout' });
|
|
134
|
+
}, 30000);
|
|
135
|
+
socket.connect(port, address);
|
|
136
|
+
this.setupSocketHandlers(socket);
|
|
137
|
+
});
|
|
138
|
+
}
|
|
139
|
+
/**
|
|
140
|
+
* 发送消息给 Peer
|
|
141
|
+
*/
|
|
142
|
+
sendToPeer(peerId, message) {
|
|
143
|
+
const peer = this.peers.get(peerId);
|
|
144
|
+
if (!peer || !peer.verified) {
|
|
145
|
+
return { success: false, error: 'Peer not connected or not verified' };
|
|
146
|
+
}
|
|
147
|
+
try {
|
|
148
|
+
const data = JSON.stringify(message);
|
|
149
|
+
peer.socket.write(data + '\n');
|
|
150
|
+
return { success: true, data: undefined };
|
|
151
|
+
}
|
|
152
|
+
catch (error) {
|
|
153
|
+
const message = error instanceof Error ? error.message : String(error);
|
|
154
|
+
return { success: false, error: message };
|
|
155
|
+
}
|
|
156
|
+
}
|
|
157
|
+
/**
|
|
158
|
+
* 获取已连接的 Peers
|
|
159
|
+
*/
|
|
160
|
+
getConnectedPeers() {
|
|
161
|
+
return Array.from(this.peers.entries())
|
|
162
|
+
.filter(([_, peer]) => peer.verified)
|
|
163
|
+
.map(([id, _]) => id);
|
|
164
|
+
}
|
|
165
|
+
/**
|
|
166
|
+
* 获取发现的 Agents
|
|
167
|
+
*/
|
|
168
|
+
getDiscoveredAgents() {
|
|
169
|
+
const now = Date.now();
|
|
170
|
+
return Array.from(this.discoveredAgents.values())
|
|
171
|
+
.filter(agent => now - agent.lastSeen < 30000);
|
|
172
|
+
}
|
|
173
|
+
// ============================================================================
|
|
174
|
+
// 私有方法
|
|
175
|
+
// ============================================================================
|
|
176
|
+
/**
|
|
177
|
+
* 启动 TCP 监听器
|
|
178
|
+
*/
|
|
179
|
+
startTCPListener() {
|
|
180
|
+
return new Promise((resolve, reject) => {
|
|
181
|
+
this.tcpServer = (0, net_1.createServer)((socket) => {
|
|
182
|
+
this.handleIncomingConnection(socket);
|
|
183
|
+
});
|
|
184
|
+
this.tcpServer.on('error', (err) => {
|
|
185
|
+
console.error('[ServerlessP2P] TCP server error:', err.message);
|
|
186
|
+
reject(err);
|
|
187
|
+
});
|
|
188
|
+
this.tcpServer.listen(this.config.p2pPort, () => {
|
|
189
|
+
console.log(`[ServerlessP2P] TCP listener on port ${this.config.p2pPort}`);
|
|
190
|
+
resolve();
|
|
191
|
+
});
|
|
192
|
+
});
|
|
193
|
+
}
|
|
194
|
+
/**
|
|
195
|
+
* 启动 UDP 发现
|
|
196
|
+
*/
|
|
197
|
+
startUDPDiscovery() {
|
|
198
|
+
return new Promise((resolve, reject) => {
|
|
199
|
+
this.udpSocket = (0, dgram_1.createSocket)('udp4');
|
|
200
|
+
this.udpSocket.on('message', (msg, rinfo) => {
|
|
201
|
+
this.handleDiscoveryMessage(msg, rinfo);
|
|
202
|
+
});
|
|
203
|
+
this.udpSocket.on('error', (err) => {
|
|
204
|
+
console.error('[ServerlessP2P] UDP error:', err.message);
|
|
205
|
+
if (err.message.includes('EADDRINUSE')) {
|
|
206
|
+
console.warn('[ServerlessP2P] UDP port in use, continuing without discovery');
|
|
207
|
+
resolve();
|
|
208
|
+
}
|
|
209
|
+
else {
|
|
210
|
+
reject(err);
|
|
211
|
+
}
|
|
212
|
+
});
|
|
213
|
+
this.udpSocket.bind(MULTICAST_PORT, '0.0.0.0', () => {
|
|
214
|
+
try {
|
|
215
|
+
this.udpSocket.addMembership(MULTICAST_ADDR);
|
|
216
|
+
this.udpSocket.setMulticastTTL(128);
|
|
217
|
+
console.log(`[ServerlessP2P] Multicast joined: ${MULTICAST_ADDR}:${MULTICAST_PORT}`);
|
|
218
|
+
}
|
|
219
|
+
catch (err) {
|
|
220
|
+
console.error('[ServerlessP2P] Failed to join multicast:', err);
|
|
221
|
+
}
|
|
222
|
+
this.udpSocket.setBroadcast(true);
|
|
223
|
+
console.log('[ServerlessP2P] Broadcast enabled');
|
|
224
|
+
this.startDiscoveryBroadcast();
|
|
225
|
+
resolve();
|
|
226
|
+
});
|
|
227
|
+
});
|
|
228
|
+
}
|
|
229
|
+
/**
|
|
230
|
+
* 开始发现广播
|
|
231
|
+
*/
|
|
232
|
+
startDiscoveryBroadcast() {
|
|
233
|
+
// 多播(主要方式)
|
|
234
|
+
this.discoveryInterval = setInterval(() => {
|
|
235
|
+
const msg = JSON.stringify({
|
|
236
|
+
type: 'F2A_DISCOVER',
|
|
237
|
+
agentId: this.identity.agentId,
|
|
238
|
+
publicKey: this.identity.publicKey,
|
|
239
|
+
port: this.config.p2pPort,
|
|
240
|
+
timestamp: Date.now()
|
|
241
|
+
});
|
|
242
|
+
this.udpSocket?.send(msg, MULTICAST_PORT, MULTICAST_ADDR);
|
|
243
|
+
}, DISCOVERY_INTERVAL);
|
|
244
|
+
// 广播(备用方式)
|
|
245
|
+
this.broadcastInterval = setInterval(() => {
|
|
246
|
+
const msg = JSON.stringify({
|
|
247
|
+
type: 'F2A_DISCOVER',
|
|
248
|
+
agentId: this.identity.agentId,
|
|
249
|
+
publicKey: this.identity.publicKey,
|
|
250
|
+
port: this.config.p2pPort,
|
|
251
|
+
timestamp: Date.now()
|
|
252
|
+
});
|
|
253
|
+
const addresses = this.getBroadcastAddresses();
|
|
254
|
+
for (const addr of addresses) {
|
|
255
|
+
this.udpSocket?.send(msg, DISCOVERY_PORT, addr);
|
|
256
|
+
}
|
|
257
|
+
}, BROADCAST_INTERVAL);
|
|
258
|
+
}
|
|
259
|
+
/**
|
|
260
|
+
* 处理发现消息
|
|
261
|
+
*/
|
|
262
|
+
handleDiscoveryMessage(msg, rinfo) {
|
|
263
|
+
try {
|
|
264
|
+
const data = JSON.parse(msg.toString());
|
|
265
|
+
if (data.type !== 'F2A_DISCOVER')
|
|
266
|
+
return;
|
|
267
|
+
if (data.agentId === this.identity.agentId)
|
|
268
|
+
return;
|
|
269
|
+
// 检查黑名单
|
|
270
|
+
if (this.config.security.blacklist?.has(data.agentId))
|
|
271
|
+
return;
|
|
272
|
+
// 记录发现的 Agent
|
|
273
|
+
const isNew = !this.discoveredAgents.has(data.agentId);
|
|
274
|
+
this.discoveredAgents.set(data.agentId, {
|
|
275
|
+
agentId: data.agentId,
|
|
276
|
+
address: rinfo.address,
|
|
277
|
+
port: data.port,
|
|
278
|
+
publicKey: data.publicKey,
|
|
279
|
+
lastSeen: Date.now()
|
|
280
|
+
});
|
|
281
|
+
if (isNew) {
|
|
282
|
+
console.log(`[ServerlessP2P] Discovered: ${data.agentId.slice(0, 16)}...`);
|
|
283
|
+
this.emit('agent_discovered', {
|
|
284
|
+
agentId: data.agentId,
|
|
285
|
+
address: rinfo.address,
|
|
286
|
+
port: data.port,
|
|
287
|
+
publicKey: data.publicKey,
|
|
288
|
+
lastSeen: Date.now()
|
|
289
|
+
});
|
|
290
|
+
}
|
|
291
|
+
// 自动连接(低安全等级或白名单)
|
|
292
|
+
if (this.config.security.level === 'low' ||
|
|
293
|
+
this.config.security.whitelist?.has(data.agentId)) {
|
|
294
|
+
this.connectToAgent(data.agentId, rinfo.address, data.port)
|
|
295
|
+
.catch(err => console.error('[ServerlessP2P] Auto-connect failed:', err.message));
|
|
296
|
+
}
|
|
297
|
+
}
|
|
298
|
+
catch {
|
|
299
|
+
// 忽略无效消息
|
|
300
|
+
}
|
|
301
|
+
}
|
|
302
|
+
/**
|
|
303
|
+
* 处理传入连接
|
|
304
|
+
*/
|
|
305
|
+
handleIncomingConnection(socket) {
|
|
306
|
+
const remoteAddress = socket.remoteAddress;
|
|
307
|
+
const remotePort = socket.remotePort;
|
|
308
|
+
if (!remoteAddress || !remotePort) {
|
|
309
|
+
socket.end();
|
|
310
|
+
return;
|
|
311
|
+
}
|
|
312
|
+
// 速率限制检查
|
|
313
|
+
const clientKey = `${remoteAddress}:${remotePort}`;
|
|
314
|
+
if (!this.checkRateLimit(clientKey)) {
|
|
315
|
+
console.warn(`[ServerlessP2P] Rate limit exceeded for ${clientKey}`);
|
|
316
|
+
socket.end();
|
|
317
|
+
return;
|
|
318
|
+
}
|
|
319
|
+
console.log(`[ServerlessP2P] Incoming connection from ${remoteAddress}:${remotePort}`);
|
|
320
|
+
// 发送身份挑战
|
|
321
|
+
this.sendIdentityChallenge(socket);
|
|
322
|
+
this.setupSocketHandlers(socket);
|
|
323
|
+
}
|
|
324
|
+
/**
|
|
325
|
+
* 设置 Socket 处理器
|
|
326
|
+
*/
|
|
327
|
+
setupSocketHandlers(socket) {
|
|
328
|
+
let buffer = '';
|
|
329
|
+
socket.on('data', (data) => {
|
|
330
|
+
buffer += data.toString();
|
|
331
|
+
const lines = buffer.split('\n');
|
|
332
|
+
buffer = lines.pop() || '';
|
|
333
|
+
for (const line of lines) {
|
|
334
|
+
if (line.trim()) {
|
|
335
|
+
this.handleSocketMessage(socket, line);
|
|
336
|
+
}
|
|
337
|
+
}
|
|
338
|
+
});
|
|
339
|
+
socket.on('close', () => {
|
|
340
|
+
this.handleSocketClose(socket);
|
|
341
|
+
});
|
|
342
|
+
socket.on('error', (err) => {
|
|
343
|
+
console.error('[ServerlessP2P] Socket error:', err.message);
|
|
344
|
+
});
|
|
345
|
+
}
|
|
346
|
+
/**
|
|
347
|
+
* 处理 Socket 消息
|
|
348
|
+
*/
|
|
349
|
+
handleSocketMessage(socket, data) {
|
|
350
|
+
// 消息大小限制
|
|
351
|
+
if (data.length > MAX_MESSAGE_SIZE) {
|
|
352
|
+
console.warn('[ServerlessP2P] Message too large');
|
|
353
|
+
return;
|
|
354
|
+
}
|
|
355
|
+
try {
|
|
356
|
+
const parsed = JSON.parse(data);
|
|
357
|
+
const validation = (0, messages_1.validateMessage)(parsed);
|
|
358
|
+
if (!validation.success) {
|
|
359
|
+
console.warn('[ServerlessP2P] Invalid message:', validation.error);
|
|
360
|
+
return;
|
|
361
|
+
}
|
|
362
|
+
const message = validation.data;
|
|
363
|
+
switch (message.type) {
|
|
364
|
+
case 'identity_challenge':
|
|
365
|
+
this.handleIdentityChallenge(socket, message);
|
|
366
|
+
break;
|
|
367
|
+
case 'identity_response':
|
|
368
|
+
this.handleIdentityResponse(socket, message);
|
|
369
|
+
break;
|
|
370
|
+
case 'confirmation_result':
|
|
371
|
+
this.handleConfirmationResult(socket, message);
|
|
372
|
+
break;
|
|
373
|
+
default:
|
|
374
|
+
// 转发给应用层
|
|
375
|
+
const peerId = this.getPeerIdBySocket(socket);
|
|
376
|
+
if (peerId && this.peers.get(peerId)?.verified) {
|
|
377
|
+
this.emit('message', { peerId, message });
|
|
378
|
+
}
|
|
379
|
+
}
|
|
380
|
+
}
|
|
381
|
+
catch {
|
|
382
|
+
// 忽略解析错误
|
|
383
|
+
}
|
|
384
|
+
}
|
|
385
|
+
/**
|
|
386
|
+
* 发送身份挑战
|
|
387
|
+
*/
|
|
388
|
+
sendIdentityChallenge(socket, expectedAgentId) {
|
|
389
|
+
const challenge = (0, crypto_1.randomBytes)(32).toString('hex');
|
|
390
|
+
const timestamp = Date.now();
|
|
391
|
+
this.pendingChallenges.set(socket, {
|
|
392
|
+
challenge,
|
|
393
|
+
timestamp,
|
|
394
|
+
expectedAgentId
|
|
395
|
+
});
|
|
396
|
+
const message = {
|
|
397
|
+
type: 'identity_challenge',
|
|
398
|
+
agentId: this.identity.agentId,
|
|
399
|
+
publicKey: this.identity.publicKey,
|
|
400
|
+
challenge,
|
|
401
|
+
timestamp
|
|
402
|
+
};
|
|
403
|
+
socket.write(JSON.stringify(message) + '\n');
|
|
404
|
+
}
|
|
405
|
+
/**
|
|
406
|
+
* 处理身份挑战
|
|
407
|
+
*/
|
|
408
|
+
handleIdentityChallenge(socket, message) {
|
|
409
|
+
// 检查时间戳
|
|
410
|
+
if (Date.now() - message.timestamp > CHALLENGE_TIMEOUT) {
|
|
411
|
+
console.log('[ServerlessP2P] Challenge expired');
|
|
412
|
+
socket.end();
|
|
413
|
+
return;
|
|
414
|
+
}
|
|
415
|
+
// 检查黑名单
|
|
416
|
+
if (this.config.security.blacklist?.has(message.agentId)) {
|
|
417
|
+
console.log(`[ServerlessP2P] Rejected blacklisted agent: ${message.agentId}`);
|
|
418
|
+
socket.end();
|
|
419
|
+
return;
|
|
420
|
+
}
|
|
421
|
+
// 签名响应
|
|
422
|
+
const sign = (0, crypto_1.createSign)('SHA256');
|
|
423
|
+
sign.update(message.challenge + message.timestamp);
|
|
424
|
+
sign.end();
|
|
425
|
+
const signature = sign.sign(this.identity.privateKey, 'base64');
|
|
426
|
+
const response = {
|
|
427
|
+
type: 'identity_response',
|
|
428
|
+
agentId: this.identity.agentId,
|
|
429
|
+
publicKey: this.identity.publicKey,
|
|
430
|
+
signature,
|
|
431
|
+
timestamp: Date.now()
|
|
432
|
+
};
|
|
433
|
+
socket.write(JSON.stringify(response) + '\n');
|
|
434
|
+
// 保存对方信息
|
|
435
|
+
this.pendingChallenges.set(socket, {
|
|
436
|
+
challenge: '',
|
|
437
|
+
timestamp: Date.now(),
|
|
438
|
+
expectedAgentId: message.agentId
|
|
439
|
+
});
|
|
440
|
+
}
|
|
441
|
+
/**
|
|
442
|
+
* 处理身份响应
|
|
443
|
+
*/
|
|
444
|
+
handleIdentityResponse(socket, message) {
|
|
445
|
+
const pending = this.pendingChallenges.get(socket);
|
|
446
|
+
if (!pending || !pending.challenge) {
|
|
447
|
+
console.log('[ServerlessP2P] No pending challenge');
|
|
448
|
+
socket.end();
|
|
449
|
+
return;
|
|
450
|
+
}
|
|
451
|
+
// 验证签名
|
|
452
|
+
try {
|
|
453
|
+
const verify = (0, crypto_1.createVerify)('SHA256');
|
|
454
|
+
verify.update(pending.challenge + pending.timestamp);
|
|
455
|
+
verify.end();
|
|
456
|
+
const isValid = verify.verify(message.publicKey, message.signature, 'base64');
|
|
457
|
+
if (!isValid) {
|
|
458
|
+
console.log(`[ServerlessP2P] Invalid signature from ${message.agentId}`);
|
|
459
|
+
socket.end();
|
|
460
|
+
return;
|
|
461
|
+
}
|
|
462
|
+
}
|
|
463
|
+
catch (err) {
|
|
464
|
+
console.log('[ServerlessP2P] Signature verification failed');
|
|
465
|
+
socket.end();
|
|
466
|
+
return;
|
|
467
|
+
}
|
|
468
|
+
// 检查是否需要确认
|
|
469
|
+
if (this.config.security.level === 'medium' &&
|
|
470
|
+
!this.config.security.whitelist?.has(message.agentId)) {
|
|
471
|
+
if (this.config.security.requireConfirmation) {
|
|
472
|
+
this.requestConfirmation(socket, message.agentId, message.publicKey);
|
|
473
|
+
return;
|
|
474
|
+
}
|
|
475
|
+
}
|
|
476
|
+
// 验证通过
|
|
477
|
+
this.verifyPeer(socket, message.agentId, message.publicKey);
|
|
478
|
+
}
|
|
479
|
+
/**
|
|
480
|
+
* 请求确认
|
|
481
|
+
*/
|
|
482
|
+
requestConfirmation(socket, agentId, publicKey) {
|
|
483
|
+
const result = this.connectionManager.addPending(agentId, socket, publicKey, socket.remoteAddress || 'unknown', socket.remotePort || 0);
|
|
484
|
+
// 发送 pending 状态
|
|
485
|
+
const pending = {
|
|
486
|
+
type: 'connection_pending',
|
|
487
|
+
confirmationId: result.confirmationId,
|
|
488
|
+
message: '等待用户确认',
|
|
489
|
+
timeout: 60 * 60 * 1000,
|
|
490
|
+
timestamp: Date.now()
|
|
491
|
+
};
|
|
492
|
+
socket.write(JSON.stringify(pending) + '\n');
|
|
493
|
+
}
|
|
494
|
+
/**
|
|
495
|
+
* 处理确认结果
|
|
496
|
+
*/
|
|
497
|
+
handleConfirmationResult(socket, message) {
|
|
498
|
+
// 这里处理 A 端收到 B 的确认结果
|
|
499
|
+
// 实际逻辑在 ConnectionManager 中处理
|
|
500
|
+
}
|
|
501
|
+
/**
|
|
502
|
+
* 验证 Peer
|
|
503
|
+
*/
|
|
504
|
+
verifyPeer(socket, agentId, publicKey) {
|
|
505
|
+
this.peers.set(agentId, {
|
|
506
|
+
socket,
|
|
507
|
+
address: socket.remoteAddress || 'unknown',
|
|
508
|
+
port: socket.remotePort || 0,
|
|
509
|
+
publicKey,
|
|
510
|
+
verified: true,
|
|
511
|
+
connectedAt: Date.now()
|
|
512
|
+
});
|
|
513
|
+
this.config.security.whitelist?.add(agentId);
|
|
514
|
+
this.pendingChallenges.delete(socket);
|
|
515
|
+
console.log(`[ServerlessP2P] Peer verified: ${agentId}`);
|
|
516
|
+
this.emit('peer_connected', { peerId: agentId, publicKey });
|
|
517
|
+
}
|
|
518
|
+
/**
|
|
519
|
+
* 处理 Socket 关闭
|
|
520
|
+
*/
|
|
521
|
+
handleSocketClose(socket) {
|
|
522
|
+
for (const [peerId, peer] of this.peers) {
|
|
523
|
+
if (peer.socket === socket) {
|
|
524
|
+
this.peers.delete(peerId);
|
|
525
|
+
this.emit('peer_disconnected', { peerId });
|
|
526
|
+
break;
|
|
527
|
+
}
|
|
528
|
+
}
|
|
529
|
+
this.pendingChallenges.delete(socket);
|
|
530
|
+
}
|
|
531
|
+
/**
|
|
532
|
+
* 获取 Socket 对应的 Peer ID
|
|
533
|
+
*/
|
|
534
|
+
getPeerIdBySocket(socket) {
|
|
535
|
+
for (const [peerId, peer] of this.peers) {
|
|
536
|
+
if (peer.socket === socket) {
|
|
537
|
+
return peerId;
|
|
538
|
+
}
|
|
539
|
+
}
|
|
540
|
+
return null;
|
|
541
|
+
}
|
|
542
|
+
/**
|
|
543
|
+
* 速率限制检查
|
|
544
|
+
*/
|
|
545
|
+
checkRateLimit(clientKey) {
|
|
546
|
+
const now = Date.now();
|
|
547
|
+
const limit = this.config.security.rateLimit || { maxRequests: 10, windowMs: 60000 };
|
|
548
|
+
let record = this.rateLimiter.get(clientKey);
|
|
549
|
+
if (!record || now > record.resetTime) {
|
|
550
|
+
record = { count: 1, resetTime: now + limit.windowMs };
|
|
551
|
+
this.rateLimiter.set(clientKey, record);
|
|
552
|
+
return true;
|
|
553
|
+
}
|
|
554
|
+
record.count++;
|
|
555
|
+
return record.count <= limit.maxRequests;
|
|
556
|
+
}
|
|
557
|
+
/**
|
|
558
|
+
* 获取广播地址列表
|
|
559
|
+
*/
|
|
560
|
+
getBroadcastAddresses() {
|
|
561
|
+
const addresses = ['255.255.255.255'];
|
|
562
|
+
const interfaces = (0, os_1.networkInterfaces)();
|
|
563
|
+
for (const iface of Object.values(interfaces)) {
|
|
564
|
+
if (!iface)
|
|
565
|
+
continue;
|
|
566
|
+
for (const info of iface) {
|
|
567
|
+
if (info.family === 'IPv4' && !info.internal) {
|
|
568
|
+
const parts = info.address.split('.');
|
|
569
|
+
const netmask = info.netmask.split('.');
|
|
570
|
+
const broadcast = parts.map((part, i) => {
|
|
571
|
+
return (parseInt(part) | (255 - parseInt(netmask[i]))).toString();
|
|
572
|
+
}).join('.');
|
|
573
|
+
if (!addresses.includes(broadcast)) {
|
|
574
|
+
addresses.push(broadcast);
|
|
575
|
+
}
|
|
576
|
+
}
|
|
577
|
+
}
|
|
578
|
+
}
|
|
579
|
+
return addresses;
|
|
580
|
+
}
|
|
581
|
+
/**
|
|
582
|
+
* 启动清理定时器
|
|
583
|
+
*/
|
|
584
|
+
startCleanup() {
|
|
585
|
+
this.cleanupInterval = setInterval(() => {
|
|
586
|
+
// 清理过期的 rate limit 记录
|
|
587
|
+
const now = Date.now();
|
|
588
|
+
for (const [key, record] of this.rateLimiter) {
|
|
589
|
+
if (now > record.resetTime) {
|
|
590
|
+
this.rateLimiter.delete(key);
|
|
591
|
+
}
|
|
592
|
+
}
|
|
593
|
+
// 清理过期的 challenges
|
|
594
|
+
for (const [socket, pending] of this.pendingChallenges) {
|
|
595
|
+
if (now - pending.timestamp > CHALLENGE_TIMEOUT) {
|
|
596
|
+
this.pendingChallenges.delete(socket);
|
|
597
|
+
this.closeSocket(socket);
|
|
598
|
+
}
|
|
599
|
+
}
|
|
600
|
+
}, 60000);
|
|
601
|
+
}
|
|
602
|
+
/**
|
|
603
|
+
* 安全关闭 Socket
|
|
604
|
+
*/
|
|
605
|
+
closeSocket(socket) {
|
|
606
|
+
try {
|
|
607
|
+
socket.end();
|
|
608
|
+
}
|
|
609
|
+
catch {
|
|
610
|
+
// 忽略错误
|
|
611
|
+
}
|
|
612
|
+
}
|
|
613
|
+
}
|
|
614
|
+
exports.ServerlessP2P = ServerlessP2P;
|
|
615
|
+
//# sourceMappingURL=serverless.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"serverless.js","sourceRoot":"","sources":["../../src/core/serverless.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,iDAA6C;AAC7C,6BAAmD;AACnD,iCAA4D;AAC5D,mCAA+D;AAC/D,2BAAuC;AAcvC,mDAAuD;AAEvD,KAAK;AACL,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AACrC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,MAAM;AAiB/C,MAAa,aAAc,SAAQ,4BAQjC;IACQ,QAAQ,CAAgB;IACxB,MAAM,CAAmB;IACzB,iBAAiB,CAAoB;IAErC,SAAS,CAAU;IACnB,SAAS,CAAe;IACxB,KAAK,GAA0B,IAAI,GAAG,EAAE,CAAC;IACzC,gBAAgB,GAAiC,IAAI,GAAG,EAAE,CAAC;IAC3D,iBAAiB,GAAoF,IAAI,GAAG,EAAE,CAAC;IAC/G,WAAW,GAAsD,IAAI,GAAG,EAAE,CAAC;IAE3E,iBAAiB,CAAkB;IACnC,iBAAiB,CAAkB;IACnC,eAAe,CAAkB;IAEzC,YAAY,OAA6B;QACvC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,YAAY;YACZ,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9B,YAAY;YACZ,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAE/B,UAAU;YACV,IAAI,CAAC,YAAY,EAAE,CAAC;YAEpB,OAAO,CAAC,GAAG,CAAC,mCAAmC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAEpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,OAAO,EAAE,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI;QACF,QAAQ;QACR,IAAI,IAAI,CAAC,iBAAiB;YAAE,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,iBAAiB;YAAE,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,eAAe;YAAE,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAE9D,SAAS;QACT,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QAED,aAAa;QACb,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QAED,YAAY;QACZ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAEnB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,OAAe,EAAE,IAAY;QACjE,UAAU;QACV,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACxD,CAAC;QAED,QAAQ;QACR,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,IAAI,YAAM,EAAE,CAAC;YAC5B,IAAI,SAAyB,CAAC;YAE9B,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC9B,CAAC,CAAC;YAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACxB,OAAO,CAAC,GAAG,CAAC,gCAAgC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;gBACvE,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE5C,SAAS;gBACT,MAAM,aAAa,GAAG,GAAG,EAAE;oBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACrC,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;wBACnB,OAAO,EAAE,CAAC;wBACV,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC9C,CAAC;yBAAM,CAAC;wBACN,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;oBACjC,CAAC;gBACH,CAAC,CAAC;gBACF,aAAa,EAAE,CAAC;YAClB,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YAEH,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAC3D,CAAC,EAAE,KAAK,CAAC,CAAC;YAEV,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAAc,EAAE,OAAmB;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACzE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;aAC9C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,+EAA+E;IAC/E,OAAO;IACP,+EAA+E;IAE/E;;OAEG;IACK,gBAAgB;QACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,SAAS,GAAG,IAAA,kBAAY,EAAC,CAAC,MAAM,EAAE,EAAE;gBACvC,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACjC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBAChE,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC9C,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC3E,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,SAAS,GAAG,IAAA,oBAAY,EAAC,MAAM,CAAC,CAAC;YAEtC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBAC1C,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACjC,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBACvC,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;oBAC9E,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,EAAE;gBAClD,IAAI,CAAC;oBACH,IAAI,CAAC,SAAU,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;oBAC9C,IAAI,CAAC,SAAU,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;oBACrC,OAAO,CAAC,GAAG,CAAC,qCAAqC,cAAc,IAAI,cAAc,EAAE,CAAC,CAAC;gBACvF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;gBAClE,CAAC;gBAED,IAAI,CAAC,SAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;gBAEjD,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBAC/B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,uBAAuB;QAC7B,WAAW;QACX,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAC9B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAClC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC5D,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,WAAW;QACX,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAC9B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAClC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,GAAW,EAAE,KAAwC;QAClF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAExC,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;gBAAE,OAAO;YACzC,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO;YAEnD,QAAQ;YACR,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO;YAE9D,cAAc;YACd,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE;gBACtC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;aACrB,CAAC,CAAC;YAEH,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;gBAC3E,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE;oBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;YAED,kBAAkB;YAClB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK;gBACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;qBACxD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,MAAc;QAC7C,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QAErC,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,SAAS;QACT,MAAM,SAAS,GAAG,GAAG,aAAa,IAAI,UAAU,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,4CAA4C,aAAa,IAAI,UAAU,EAAE,CAAC,CAAC;QAEvF,SAAS;QACT,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,MAAc;QACxC,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAChB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,MAAc,EAAE,IAAY;QACtD,SAAS;QACT,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,UAAU,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;YAE3C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC;YAEhC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,oBAAoB;oBACvB,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC9C,MAAM;gBACR,KAAK,mBAAmB;oBACtB,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC7C,MAAM;gBACR,KAAK,qBAAqB;oBACxB,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC/C,MAAM;gBACR;oBACE,SAAS;oBACT,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;oBAC9C,IAAI,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;wBAC/C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC5C,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,MAAc,EAAE,eAAwB;QACpE,MAAM,SAAS,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE;YACjC,SAAS;YACT,SAAS;YACT,eAAe;SAChB,CAAC,CAAC;QAEH,MAAM,OAAO,GAA6B;YACxC,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;YAC9B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS;YACT,SAAS;SACV,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,MAAc,EAAE,OAAiC;QAC/E,QAAQ;QACR,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,iBAAiB,EAAE,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,QAAQ;QACR,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,+CAA+C,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,OAAO;QACP,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAA4B;YACxC,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;YAC9B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QAE9C,SAAS;QACT,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE;YACjC,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,eAAe,EAAE,OAAO,CAAC,OAAO;SACjC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,MAAc,EAAE,OAAgC;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,OAAO;QACP,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,CAAC,GAAG,EAAE,CAAC;YAEb,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,0CAA0C,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzE,MAAM,CAAC,GAAG,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ;YACvC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;gBAC7C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;QACH,CAAC;QAED,OAAO;QACP,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,MAAc,EAAE,OAAe,EAAE,SAAiB;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAC9C,OAAO,EACP,MAAM,EACN,SAAS,EACT,MAAM,CAAC,aAAa,IAAI,SAAS,EACjC,MAAM,CAAC,UAAU,IAAI,CAAC,CACvB,CAAC;QAEF,gBAAgB;QAChB,MAAM,OAAO,GAA6B;YACxC,IAAI,EAAE,oBAAoB;YAC1B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;YACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,MAAc,EAAE,OAAkC;QACjF,qBAAqB;QACrB,8BAA8B;IAChC,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,MAAc,EAAE,OAAe,EAAE,SAAiB;QACnE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE;YACtB,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;YAC1C,IAAI,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;YAC5B,SAAS;YACT,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEtC,OAAO,CAAC,GAAG,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,MAAc;QACtC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC3C,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,MAAc;QACtC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,SAAiB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAErF,IAAI,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YACvD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC;IAC3C,CAAC;IAED;;OAEG;IACK,qBAAqB;QAC3B,MAAM,SAAS,GAAa,CAAC,iBAAiB,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,IAAA,sBAAiB,GAAE,CAAC;QAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACxC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;wBACtC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACpE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAEb,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBACnC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACtC,sBAAsB;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC7C,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,mBAAmB;YACnB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvD,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,iBAAiB,EAAE,CAAC;oBAChD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACtC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,MAAc;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;IACH,CAAC;CACF;AAzqBD,sCAyqBC"}
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Token 管理器
|
|
3
|
+
* 负责生成、存储和验证 F2A 控制 Token
|
|
4
|
+
*/
|
|
5
|
+
export declare class TokenManager {
|
|
6
|
+
private tokenPath;
|
|
7
|
+
private token;
|
|
8
|
+
private logger;
|
|
9
|
+
constructor(dataDir?: string);
|
|
10
|
+
/**
|
|
11
|
+
* 获取或生成 Token
|
|
12
|
+
* 优先从环境变量读取,其次从文件读取,最后生成新的
|
|
13
|
+
*/
|
|
14
|
+
getToken(): string;
|
|
15
|
+
/**
|
|
16
|
+
* 验证 Token 是否有效
|
|
17
|
+
* 使用 timingSafeEqual 防止时序攻击
|
|
18
|
+
*/
|
|
19
|
+
verifyToken(token: string | undefined): boolean;
|
|
20
|
+
/**
|
|
21
|
+
* 记录 Token 使用审计日志
|
|
22
|
+
*/
|
|
23
|
+
logTokenUsage(clientInfo: {
|
|
24
|
+
ip?: string;
|
|
25
|
+
action?: string;
|
|
26
|
+
success: boolean;
|
|
27
|
+
}): void;
|
|
28
|
+
/**
|
|
29
|
+
* 生成安全的随机 Token
|
|
30
|
+
*/
|
|
31
|
+
private generateSecureToken;
|
|
32
|
+
/**
|
|
33
|
+
* 保存 Token 到文件
|
|
34
|
+
*/
|
|
35
|
+
private saveToken;
|
|
36
|
+
/**
|
|
37
|
+
* 获取 Token 文件路径
|
|
38
|
+
*/
|
|
39
|
+
getTokenPath(): string;
|
|
40
|
+
}
|
|
41
|
+
export declare const defaultTokenManager: TokenManager;
|
|
42
|
+
//# sourceMappingURL=token-manager.d.ts.map
|