@honeybbq/teamspeak 0.0.1 → 1.0.0-beta.7

package/dist/client/crypto/eax.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eax.d.ts","sourceRoot":"","sources":["../../../src/client/crypto/eax.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,qBAAa,GAAG;;IAGd,YAAY,GAAG,EAAE,UAAU,EAG1B;IAED,OAAO,CACL,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,UAAU,GACpB,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,CAAC,CAc3C;IAED,OAAO,CACL,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,UAAU,GACd,UAAU,CAeZ;CAcF;AAoDD,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,CA2BxE"}

package/dist/client/crypto/eax.js

@@ -0,0 +1,118 @@
+import { createCipheriv, timingSafeEqual } from "node:crypto";
+import { EAXTagMismatchError } from "../errors.js";
+const EAX_TAG_SIZE = 8;
+const EAX_BLOCK_SIZE = 16;
+/**
+ * AES-EAX AEAD implementation for TS3 (64-bit tag, AES-128).
+ * Uses AES-CMAC for authentication and AES-CTR for encryption.
+ */
+export class EAX {
+    #key;
+    constructor(key) {
+        if (key.length !== 16)
+            throw new Error("EAX requires a 16-byte key");
+        this.#key = key;
+    }
+    encrypt(nonce, header, plaintext) {
+        const nStar = this.#cmac(0, nonce);
+        const hStar = this.#cmac(1, header);
+        const ciphertext = aesCtr(this.#key, nStar, plaintext);
+        const cStar = this.#cmac(2, ciphertext);
+        const tag = new Uint8Array(EAX_TAG_SIZE);
+        for (let i = 0; i < EAX_TAG_SIZE; i++) {
+            tag[i] = nStar[i] ^ hStar[i] ^ cStar[i];
+        }
+        return [ciphertext, tag];
+    }
+    decrypt(nonce, header, ciphertext, tag) {
+        const nStar = this.#cmac(0, nonce);
+        const hStar = this.#cmac(1, header);
+        const cStar = this.#cmac(2, ciphertext);
+        const expected = new Uint8Array(EAX_TAG_SIZE);
+        for (let i = 0; i < EAX_TAG_SIZE; i++) {
+            expected[i] = nStar[i] ^ hStar[i] ^ cStar[i];
+        }
+        if (!timingSafeEqual(Buffer.from(expected), Buffer.from(tag.slice(0, EAX_TAG_SIZE)))) {
+            throw new EAXTagMismatchError();
+        }
+        return aesCtr(this.#key, nStar, ciphertext);
+    }
+    /**
+     * AES-CMAC per RFC 4493:
+     *   input = [0…0 tag] ++ data   (one block prefix)
+     */
+    #cmac(tagByte, data) {
+        const input = new Uint8Array(EAX_BLOCK_SIZE + data.length);
+        // first block: zeros then tag byte at the last position
+        input[EAX_BLOCK_SIZE - 1] = tagByte;
+        input.set(data, EAX_BLOCK_SIZE);
+        return aesCmac(this.#key, input);
+    }
+}
+// ---- AES-CTR ----------------------------------------------------------------
+function aesCtr(key, iv, data) {
+    const cipher = createCipheriv("aes-128-ctr", Buffer.from(key), Buffer.from(iv));
+    return Buffer.concat([cipher.update(Buffer.from(data)), cipher.final()]);
+}
+// ---- AES-CMAC (RFC 4493) ----------------------------------------------------
+function aesEcb(key, block) {
+    // Node.js does not expose ECB directly; simulate via CTR with zero IV and
+    // a zero-input (CTR of 0-block XOR with input = ECB)
+    const cipher = createCipheriv("aes-128-ecb", Buffer.from(key), null);
+    cipher.setAutoPadding(false);
+    return Buffer.concat([cipher.update(Buffer.from(block)), cipher.final()]);
+}
+function xorBlock(a, b) {
+    const out = new Uint8Array(EAX_BLOCK_SIZE);
+    for (let i = 0; i < EAX_BLOCK_SIZE; i++)
+        out[i] = a[i] ^ b[i];
+    return out;
+}
+function shiftLeft1(b) {
+    const out = new Uint8Array(EAX_BLOCK_SIZE);
+    let carry = 0;
+    for (let i = EAX_BLOCK_SIZE - 1; i >= 0; i--) {
+        const shifted = ((b[i] << 1) | carry) & 0xff;
+        carry = b[i] >> 7;
+        out[i] = shifted;
+    }
+    return out;
+}
+const RB = new Uint8Array(EAX_BLOCK_SIZE);
+RB[EAX_BLOCK_SIZE - 1] = 0x87;
+function generateSubkeys(key) {
+    const zero = new Uint8Array(EAX_BLOCK_SIZE);
+    const L = aesEcb(key, zero);
+    let K1 = shiftLeft1(L);
+    if ((L[0] & 0x80) !== 0)
+        K1 = xorBlock(K1, RB);
+    let K2 = shiftLeft1(K1);
+    if ((K1[0] & 0x80) !== 0)
+        K2 = xorBlock(K2, RB);
+    return [K1, K2];
+}
+export function aesCmac(key, message) {
+    const [K1, K2] = generateSubkeys(key);
+    const n = Math.max(1, Math.ceil(message.length / EAX_BLOCK_SIZE));
+    const lastBlockComplete = message.length > 0 && message.length % EAX_BLOCK_SIZE === 0;
+    let X = new Uint8Array(EAX_BLOCK_SIZE);
+    for (let i = 0; i < n - 1; i++) {
+        const block = message.slice(i * EAX_BLOCK_SIZE, (i + 1) * EAX_BLOCK_SIZE);
+        X = Uint8Array.from(aesEcb(key, xorBlock(X, block)));
+    }
+    const lastBlock = new Uint8Array(EAX_BLOCK_SIZE);
+    const lastStart = (n - 1) * EAX_BLOCK_SIZE;
+    const lastSlice = message.slice(lastStart);
+    lastBlock.set(lastSlice);
+    let Mn;
+    if (lastBlockComplete) {
+        Mn = xorBlock(lastBlock, K1);
+    }
+    else {
+        if (lastSlice.length < EAX_BLOCK_SIZE)
+            lastBlock[lastSlice.length] = 0x80;
+        Mn = xorBlock(lastBlock, K2);
+    }
+    return Uint8Array.from(aesEcb(key, xorBlock(X, Mn)));
+}
+//# sourceMappingURL=eax.js.map

package/dist/client/crypto/eax.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eax.js","sourceRoot":"","sources":["../../../src/client/crypto/eax.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B;;;GAGG;AACH,MAAM,OAAO,GAAG;IACL,IAAI,CAAa;IAE1B,YAAY,GAAe;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,OAAO,CACL,KAAiB,EACjB,MAAkB,EAClB,SAAqB;QAErB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEpC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAEvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAExC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC7C,CAAC;QAED,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,CACL,KAAiB,EACjB,MAAkB,EAClB,UAAsB,EACtB,GAAe;QAEf,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAExC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAe,EAAE,IAAgB;QACrC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,wDAAwD;QACxD,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAEhC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;CACF;AAED,gFAAgF;AAEhF,SAAS,MAAM,CAAC,GAAe,EAAE,EAAc,EAAE,IAAgB;IAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,gFAAgF;AAEhF,SAAS,MAAM,CAAC,GAAe,EAAE,KAAiB;IAChD,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,CAAa,EAAE,CAAa;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAa;IAC/B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;QAC9C,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC;QACnB,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;AAC1C,EAAE,CAAC,cAAc,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;AAE9B,SAAS,eAAe,CAAC,GAAe;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAE5B,IAAI,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAEhD,IAAI,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAEjD,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAe,EAAE,OAAmB;IAC1D,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEtC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC;IAClE,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc,KAAK,CAAC,CAAC;IAEtF,IAAI,CAAC,GAAe,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC;QAC1E,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3C,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEzB,IAAI,EAAc,CAAC;IACnB,IAAI,iBAAiB,EAAE,CAAC;QACtB,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc;YAAE,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC1E,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/client/crypto/identity.d.ts

@@ -0,0 +1,97 @@
+import { type KeyObject } from "node:crypto";
+import { type UID } from "@honeybbq/teamspeak";
+/**
+ * A TeamSpeak client identity: a P-256 key pair plus a counter, the offset,
+ * whose hash with the public key sets the identity's security level.
+ *
+ * Immutable: raising the level returns a new identity. Opaque: the private
+ * key is never exposed, and `toString()`, `toJSON()` and `util.inspect()`
+ * describe the identity without it, so an identity that reaches a log or an
+ * error message does not leak; `export()` is the one way to get the secret
+ * form, for storing it. Make one with `generateIdentity()` or
+ * `parseIdentity()`.
+ */
+export declare class Identity {
+    #private;
+    private constructor();
+    /** The counter whose hash with the public key sets the security level. */
+    get offset(): bigint;
+    /** The public key in TeamSpeak's encoding: base64 of its DER form. */
+    publicKey(): string;
+    /**
+     * The identity's unique identifier, hashed with `algorithm`: SHA-1 for a
+     * TeamSpeak 3 server, SHA-256 for TeamSpeak 6. A connected client's `uid`
+     * already uses the one its server does.
+     */
+    uid(algorithm: UIDAlgorithm): UID;
+    /**
+     * The identity in the form `parseIdentity()` reads, private key included.
+     * Store it as you would a password.
+     */
+    export(): string;
+    /** Describes the identity, by its SHA-1 unique identifier, without its private key. */
+    toString(): string;
+    /** The same as `toString()`, so serialising an identity cannot leak its key. */
+    toJSON(): string;
+    /** The security level: trailing zero bits in SHA-1 of the public key and offset. */
+    securityLevel(): number;
+    /**
+     * The same key at an offset whose security level reaches `targetLevel`, as
+     * a new identity; this one is unchanged, and returned as it is when it
+     * already reaches the level.
+     *
+     * Each level doubles the expected work, so a high level can take a long
+     * time; `signal` bounds it, and the event loop keeps running meanwhile. A
+     * level above 160, the width of SHA-1, can never be reached and is refused
+     * with a RangeError.
+     */
+    upgradeToLevel(targetLevel: number, options?: {
+        readonly signal?: AbortSignal | undefined;
+    }): Promise<Identity>;
+}
+/**
+ * Read an identity from the form `Identity.export()` writes: the private key
+ * as canonical base64 of at most 32 bytes, a colon, and the offset as a
+ * decimal unsigned 64-bit integer. Anything else throws an
+ * InvalidIdentityError, with the underlying failure as its cause.
+ */
+export declare function parseIdentity(s: string): Identity;
+/**
+ * Create an identity at the given security level, at most 160. Each level
+ * doubles the expected work; `signal` bounds it, and the event loop keeps
+ * running meanwhile.
+ */
+export declare function generateIdentity(targetLevel: number, options?: {
+    readonly signal?: AbortSignal | undefined;
+}): Promise<Identity>;
+/**
+ * Create an identity at the given security level, at most 160, blocking until
+ * done. Fine for a low level; a high one can block the event loop for minutes,
+ * so prefer `generateIdentity()` there.
+ */
+export declare function generateIdentitySync(targetLevel: number): Identity;
+/**
+ * The hash a server uses for `client_unique_identifier`, keyed by the server's
+ * major version.
+ *
+ * TeamSpeak 3 hashes the canonical public key with SHA-1 (20 bytes); TeamSpeak
+ * 6 switched to SHA-256 (32 bytes). The algorithm is not negotiable on the
+ * wire, so a client that guesses wrong computes a UID that matches nothing the
+ * server ever sends — self-identification by UID silently fails.
+ *
+ * May gain members in a minor release, should a server generation change the
+ * hash again: a `switch` over it needs a default case.
+ */
+export type UIDAlgorithm = "sha1" | "sha256";
+/** Pick the UID hash from a `virtualserver_version` string, e.g. "6.0.0-beta13.1". */
+export declare function uidAlgorithmForVersion(version: string): UIDAlgorithm;
+/**
+ * The unique identifier of a public key in TeamSpeak's encoding, hashed with
+ * `algorithm`: SHA-1 for a TeamSpeak 3 server, SHA-256 for TeamSpeak 6.
+ */
+export declare function uidFromPublicKey(publicKey: string, algorithm: UIDAlgorithm): UID;
+export declare function hash512(data: Uint8Array): Uint8Array;
+/** Import a TS3 public key (canonical or legacy ASN.1 DER) and return the
+ *  uncompressed 65-byte point [0x04 || x || y]. */
+export declare function importPublicKey(data: Uint8Array): KeyObject;
+//# sourceMappingURL=identity.d.ts.map

package/dist/client/crypto/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/client/crypto/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAS,KAAK,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAYtD;;;;;;;;;;GAUG;AACH,qBAAa,QAAQ;;IAUnB,OAAO,eAGN;IAED,0EAA0E;IAC1E,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,sEAAsE;IACtE,SAAS,IAAI,MAAM,CAUlB;IAED;;;;OAIG;IACH,GAAG,CAAC,SAAS,EAAE,YAAY,GAAG,GAAG,CAEhC;IAED;;;OAGG;IACH,MAAM,IAAI,MAAM,CAKf;IAED,uFAAuF;IACvF,QAAQ,IAAI,MAAM,CAEjB;IAED,gFAAgF;IAChF,MAAM,IAAI,MAAM,CAEf;IAED,oFAAoF;IACpF,aAAa,IAAI,MAAM,CAEtB;IAED;;;;;;;;;OASG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAO,GAC1D,OAAO,CAAC,QAAQ,CAAC,CAgBnB;CACF;AAqCD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,CA0CjD;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CAAO,GAC1D,OAAO,CAAC,QAAQ,CAAC,CAGnB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,QAAQ,CAOlE;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE7C,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAGpE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,GAAG,GAAG,CAEhF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAEpD;AA+BD;mDACmD;AACnD,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAS3D"}

package/dist/client/crypto/identity.js

@@ -0,0 +1,412 @@
+import { createHash, createECDH, generateKeyPairSync, createPrivateKey, createPublicKey, } from "node:crypto";
+import { InvalidIdentityError } from "../errors.js";
+import { asUID } from "@honeybbq/teamspeak";
+const P256_SCALAR_SIZE = 32;
+const P256_UNCOMPRESSED_KEY_SIZE = 65;
+const P256_POINT_PREFIX = 0x04;
+/** The most a security level can be: SHA-1 is 160 bits wide. */
+const MAX_SECURITY_LEVEL = 160;
+let createIdentity;
+let privateKeyOf;
+/**
+ * A TeamSpeak client identity: a P-256 key pair plus a counter, the offset,
+ * whose hash with the public key sets the identity's security level.
+ *
+ * Immutable: raising the level returns a new identity. Opaque: the private
+ * key is never exposed, and `toString()`, `toJSON()` and `util.inspect()`
+ * describe the identity without it, so an identity that reaches a log or an
+ * error message does not leak; `export()` is the one way to get the secret
+ * form, for storing it. Make one with `generateIdentity()` or
+ * `parseIdentity()`.
+ */
+export class Identity {
+    static {
+        createIdentity = (privateKey, offset) => new Identity(privateKey, offset);
+        privateKeyOf = (identity) => identity.#privateKey;
+    }
+    #privateKey;
+    #offset;
+    #publicKey;
+    constructor(privateKey, offset) {
+        this.#privateKey = privateKey;
+        this.#offset = offset;
+    }
+    /** The counter whose hash with the public key sets the security level. */
+    get offset() {
+        return this.#offset;
+    }
+    /** The public key in TeamSpeak's encoding: base64 of its DER form. */
+    publicKey() {
+        if (this.#publicKey !== undefined)
+            return this.#publicKey;
+        const rawJwk = this.#privateKey.export({ format: "jwk" });
+        if (typeof rawJwk.x !== "string" || typeof rawJwk.y !== "string")
+            return "";
+        const xBytes = base64UrlToBytes(rawJwk.x, P256_SCALAR_SIZE);
+        const yBytes = base64UrlToBytes(rawJwk.y, P256_SCALAR_SIZE);
+        // Encode as TS3 canonical ASN.1: SEQUENCE { BIT STRING, INTEGER(32), INTEGER(x), INTEGER(y) }
+        this.#publicKey = encodeTsPublicKey(xBytes, yBytes);
+        return this.#publicKey;
+    }
+    /**
+     * The identity's unique identifier, hashed with `algorithm`: SHA-1 for a
+     * TeamSpeak 3 server, SHA-256 for TeamSpeak 6. A connected client's `uid`
+     * already uses the one its server does.
+     */
+    uid(algorithm) {
+        return uidFromPublicKey(this.publicKey(), algorithm);
+    }
+    /**
+     * The identity in the form `parseIdentity()` reads, private key included.
+     * Store it as you would a password.
+     */
+    export() {
+        const jwk = this.#privateKey.export({ format: "jwk" });
+        if (!jwk.d)
+            return `:${this.#offset}`;
+        const dBytes = base64UrlToBytes(jwk.d, P256_SCALAR_SIZE);
+        return `${Buffer.from(dBytes).toString("base64")}:${this.#offset}`;
+    }
+    /** Describes the identity, by its SHA-1 unique identifier, without its private key. */
+    toString() {
+        return `identity ${this.uid("sha1")} (private key redacted)`;
+    }
+    /** The same as `toString()`, so serialising an identity cannot leak its key. */
+    toJSON() {
+        return this.toString();
+    }
+    /** The security level: trailing zero bits in SHA-1 of the public key and offset. */
+    securityLevel() {
+        return levelAt(this.publicKey(), this.#offset);
+    }
+    /**
+     * The same key at an offset whose security level reaches `targetLevel`, as
+     * a new identity; this one is unchanged, and returned as it is when it
+     * already reaches the level.
+     *
+     * Each level doubles the expected work, so a high level can take a long
+     * time; `signal` bounds it, and the event loop keeps running meanwhile. A
+     * level above 160, the width of SHA-1, can never be reached and is refused
+     * with a RangeError.
+     */
+    async upgradeToLevel(targetLevel, options = {}) {
+        checkLevel(targetLevel);
+        const { signal } = options;
+        const prefix = this.publicKey();
+        let offset = this.#offset;
+        while (true) {
+            signal?.throwIfAborted();
+            if (levelAt(prefix, offset) >= targetLevel) {
+                return offset === this.#offset ? this : new Identity(this.#privateKey, offset);
+            }
+            offset++;
+            // Yield to the event loop now and then rather than blocking it.
+            if (offset % 10000n === 0n) {
+                await new Promise((resolve) => setImmediate(resolve));
+            }
+        }
+    }
+}
+// Defined outside the class body: a computed key there would have to be
+// inferred, which isolatedDeclarations rules out. By its registered name, so
+// this module needs no node:util.
+Object.defineProperty(Identity.prototype, Symbol.for("nodejs.util.inspect.custom"), {
+    value() {
+        return `Identity <${this.toString()}>`;
+    },
+});
+/**
+ * The private key of an identity, for the handshake. Not exported from the
+ * package.
+ *
+ * @internal
+ */
+export function identityPrivateKey(identity) {
+    return privateKeyOf(identity);
+}
+function checkLevel(level) {
+    if (!Number.isInteger(level) || level < 0 || level > MAX_SECURITY_LEVEL) {
+        throw new RangeError(`a security level is an integer from 0 to 160, not ${level}`);
+    }
+}
+function levelAt(publicKey, offset) {
+    const h = createHash("sha1");
+    h.update(publicKey);
+    h.update(offset.toString(10));
+    return countLeadingZeros(h.digest());
+}
+/** The largest offset, an unsigned 64-bit counter. */
+const MAX_UINT64 = (1n << 64n) - 1n;
+/**
+ * Read an identity from the form `Identity.export()` writes: the private key
+ * as canonical base64 of at most 32 bytes, a colon, and the offset as a
+ * decimal unsigned 64-bit integer. Anything else throws an
+ * InvalidIdentityError, with the underlying failure as its cause.
+ */
+export function parseIdentity(s) {
+    const colonIdx = s.lastIndexOf(":");
+    if (colonIdx < 0)
+        throw new InvalidIdentityError();
+    const dBase64 = s.slice(0, colonIdx);
+    const offsetStr = s.slice(colonIdx + 1);
+    if (!/^\d+$/.test(offsetStr) || BigInt(offsetStr) > MAX_UINT64) {
+        throw new InvalidIdentityError("invalid identity offset");
+    }
+    const offset = BigInt(offsetStr);
+    // Node's base64 decoder skips what it cannot read, so the key is checked by
+    // a round trip: anything but canonical base64 would otherwise decode to some
+    // other key, silently.
+    const dBytes = Buffer.from(dBase64, "base64");
+    if (dBytes.length === 0 || dBytes.toString("base64") !== dBase64) {
+        throw new InvalidIdentityError("the private key is not canonical base64");
+    }
+    if (dBytes.length > P256_SCALAR_SIZE) {
+        throw new InvalidIdentityError("private key scalar too large");
+    }
+    // Pad to P256_SCALAR_SIZE
+    const padded = Buffer.alloc(P256_SCALAR_SIZE);
+    dBytes.copy(padded, P256_SCALAR_SIZE - dBytes.length);
+    try {
+        // node:crypto JWK import requires x and y to be present.
+        // Derive the public key from the private scalar via ECDH.
+        const ecdh = createECDH("prime256v1");
+        ecdh.setPrivateKey(padded);
+        const pub = ecdh.getPublicKey(null, "uncompressed"); // 65 bytes: 0x04 || x(32) || y(32)
+        const x = Buffer.from(pub.subarray(1, 33)).toString("base64url");
+        const y = Buffer.from(pub.subarray(33, 65)).toString("base64url");
+        const d = padded.toString("base64url");
+        const jwk = { kty: "EC", crv: "P-256", d, x, y };
+        return createIdentity(createPrivateKey({ key: jwk, format: "jwk" }), offset);
+    }
+    catch (error) {
+        throw new InvalidIdentityError("invalid private key", { cause: error });
+    }
+}
+/**
+ * Create an identity at the given security level, at most 160. Each level
+ * doubles the expected work; `signal` bounds it, and the event loop keeps
+ * running meanwhile.
+ */
+export async function generateIdentity(targetLevel, options = {}) {
+    checkLevel(targetLevel);
+    return createIdentity(generateKey(), 0n).upgradeToLevel(targetLevel, options);
+}
+/**
+ * Create an identity at the given security level, at most 160, blocking until
+ * done. Fine for a low level; a high one can block the event loop for minutes,
+ * so prefer `generateIdentity()` there.
+ */
+export function generateIdentitySync(targetLevel) {
+    checkLevel(targetLevel);
+    const key = generateKey();
+    const prefix = createIdentity(key, 0n).publicKey();
+    let offset = 0n;
+    while (levelAt(prefix, offset) < targetLevel)
+        offset++;
+    return createIdentity(key, offset);
+}
+function generateKey() {
+    return generateKeyPairSync("ec", { namedCurve: "prime256v1" }).privateKey;
+}
+/** Pick the UID hash from a `virtualserver_version` string, e.g. "6.0.0-beta13.1". */
+export function uidAlgorithmForVersion(version) {
+    const major = Number.parseInt(version, 10);
+    return Number.isNaN(major) || major < 6 ? "sha1" : "sha256";
+}
+/**
+ * The unique identifier of a public key in TeamSpeak's encoding, hashed with
+ * `algorithm`: SHA-1 for a TeamSpeak 3 server, SHA-256 for TeamSpeak 6.
+ */
+export function uidFromPublicKey(publicKey, algorithm) {
+    return asUID(createHash(algorithm).update(publicKey).digest("base64"));
+}
+export function hash512(data) {
+    return createHash("sha512").update(data).digest();
+}
+// ---- Internal ASN.1 DER helpers for TS3 canonical P-256 public key ----------
+/**
+ * Encode a P-256 public key as the TS3 canonical ASN.1 SEQUENCE and return
+ * its base64 representation.
+ *
+ * TS3 canonical format (v3+):
+ *   SEQUENCE {
+ *     BIT STRING { unused=7, value=0x00 }  — DER: 03 02 07 00
+ *     INTEGER 32
+ *     INTEGER x
+ *     INTEGER y
+ *   }
+ */
+function encodeTsPublicKey(x, y) {
+    // BIT STRING with 7 unused bits + value byte 0x00 — matches C# DerBitString(0x00, 7)
+    const bitStringBody = Buffer.from([0x07, 0x00]);
+    const bitStringDer = encodeDerTlv(0x03, bitStringBody);
+    const integerSize = encodeDerTlv(0x02, encodePositiveInt(32));
+    const integerX = encodeDerTlv(0x02, encodePositiveInt(x));
+    const integerY = encodeDerTlv(0x02, encodePositiveInt(y));
+    const seqBody = Buffer.concat([bitStringDer, integerSize, integerX, integerY]);
+    const seqDer = encodeDerTlv(0x30, seqBody);
+    return seqDer.toString("base64");
+}
+/** Import a TS3 public key (canonical or legacy ASN.1 DER) and return the
+ *  uncompressed 65-byte point [0x04 || x || y]. */
+export function importPublicKey(data) {
+    const point = parseTsPublicKeyDer(data);
+    const jwk = {
+        kty: "EC",
+        crv: "P-256",
+        x: Buffer.from(point.slice(1, 33)).toString("base64url"),
+        y: Buffer.from(point.slice(33, 65)).toString("base64url"),
+    };
+    return createPublicKey({ key: jwk, format: "jwk" });
+}
+/**
+ * Parse both TS3 canonical and legacy ASN.1 formats and return the
+ * uncompressed 65-byte point [0x04 || x || y].
+ */
+function parseTsPublicKeyDer(data) {
+    // Try canonical: SEQUENCE { BIT_STRING, INTEGER(32), INTEGER(x), INTEGER(y) }
+    try {
+        return parseTsCanonicalPublicKey(data);
+    }
+    catch {
+        // fall through to legacy
+    }
+    // Try legacy: SEQUENCE { INTEGER(x), INTEGER(y), BIT_STRING, INTEGER }
+    return parseTsLegacyPublicKey(data);
+}
+function parseTsCanonicalPublicKey(data) {
+    const seqTlv = parseDerTlv(data, 0x30);
+    const seq = seqTlv.value;
+    let offset = 0;
+    // BIT_STRING
+    const bs = parseDerTlv(seq, 0x03, offset);
+    offset += bs.consumed;
+    // INTEGER (32)
+    const sizeInt = parseDerTlv(seq, 0x02, offset);
+    offset += sizeInt.consumed;
+    // INTEGER x
+    const xInt = parseDerTlv(seq, 0x02, offset);
+    offset += xInt.consumed;
+    // INTEGER y
+    const yInt = parseDerTlv(seq, 0x02, offset);
+    return buildUncompressedPoint(positiveIntToBytes(xInt.value, P256_SCALAR_SIZE), positiveIntToBytes(yInt.value, P256_SCALAR_SIZE));
+}
+function parseTsLegacyPublicKey(data) {
+    const seqTlv = parseDerTlv(data, 0x30);
+    const seq = seqTlv.value;
+    let offset = 0;
+    const xInt = parseDerTlv(seq, 0x02, offset);
+    offset += xInt.consumed;
+    const yInt = parseDerTlv(seq, 0x02, offset);
+    return buildUncompressedPoint(positiveIntToBytes(xInt.value, P256_SCALAR_SIZE), positiveIntToBytes(yInt.value, P256_SCALAR_SIZE));
+}
+function buildUncompressedPoint(x, y) {
+    if (x.length > P256_SCALAR_SIZE || y.length > P256_SCALAR_SIZE) {
+        throw new Error("invalid public key point encoding");
+    }
+    const point = new Uint8Array(P256_UNCOMPRESSED_KEY_SIZE);
+    point[0] = P256_POINT_PREFIX;
+    point.set(x, 1 + P256_SCALAR_SIZE - x.length);
+    point.set(y, 1 + 2 * P256_SCALAR_SIZE - y.length);
+    return point;
+}
+// ---- DER encoding helpers ---------------------------------------------------
+function encodeDerTlv(tag, value) {
+    const lenBytes = encodeDerLength(value.length);
+    return Buffer.concat([Buffer.from([tag]), lenBytes, value]);
+}
+function encodeDerLength(len) {
+    if (len < 128)
+        return Buffer.from([len]);
+    if (len < 256)
+        return Buffer.from([0x81, len]);
+    return Buffer.from([0x82, (len >> 8) & 0xff, len & 0xff]);
+}
+/** Encode a non-negative value as a DER INTEGER (with 0x00 prefix if high bit set). */
+function encodePositiveInt(v) {
+    if (typeof v === "number") {
+        const bytes = [];
+        let n = v;
+        do {
+            bytes.unshift(n & 0xff);
+            n >>= 8;
+        } while (n > 0);
+        if ((bytes[0] & 0x80) !== 0)
+            bytes.unshift(0x00);
+        return Buffer.from(bytes);
+    }
+    // Uint8Array — strip leading zeros, add 0x00 if high bit set
+    let start = 0;
+    while (start < v.length - 1 && v[start] === 0)
+        start++;
+    const trimmed = v.slice(start);
+    if ((trimmed[0] & 0x80) !== 0) {
+        return Buffer.concat([Buffer.from([0x00]), trimmed]);
+    }
+    return Buffer.from(trimmed);
+}
+function parseDerTlv(data, expectedTag, offset = 0) {
+    if (data[offset] !== expectedTag) {
+        throw new Error(`expected DER tag 0x${expectedTag.toString(16)}, got 0x${(data[offset] ?? 0).toString(16)}`);
+    }
+    let pos = offset + 1;
+    let len;
+    const firstLenByte = data[pos++];
+    if (firstLenByte < 0x80) {
+        len = firstLenByte;
+    }
+    else if (firstLenByte === 0x81) {
+        len = data[pos++];
+    }
+    else if (firstLenByte === 0x82) {
+        len = ((data[pos] << 8) | data[pos + 1]) >>> 0;
+        pos += 2;
+    }
+    else {
+        throw new Error("unsupported DER length encoding");
+    }
+    const value = data.slice(pos, pos + len);
+    return { value, consumed: pos - offset + len };
+}
+/** Convert a DER INTEGER value (may have leading 0x00) to fixed-length bytes. */
+function positiveIntToBytes(int, size) {
+    // Strip leading 0x00 sign byte
+    let start = 0;
+    while (start < int.length - 1 && int[start] === 0x00)
+        start++;
+    const stripped = int.slice(start);
+    if (stripped.length > size)
+        throw new Error("integer too large");
+    if (stripped.length === size)
+        return stripped;
+    const padded = new Uint8Array(size);
+    padded.set(stripped, size - stripped.length);
+    return padded;
+}
+// ---- Misc helpers -----------------------------------------------------------
+function base64UrlToBytes(b64url, size) {
+    const buf = Buffer.from(b64url, "base64url");
+    if (buf.length === size)
+        return buf;
+    const padded = Buffer.alloc(size);
+    buf.copy(padded, size - buf.length);
+    return padded;
+}
+function countLeadingZeros(data) {
+    let zeros = 0;
+    for (const b of data) {
+        if (b === 0) {
+            zeros += 8;
+        }
+        else {
+            for (let i = 0; i < 8; i++) {
+                if ((b & (1 << i)) === 0)
+                    zeros++;
+                else
+                    return zeros;
+            }
+        }
+    }
+    return zeros;
+}
+//# sourceMappingURL=identity.js.map

package/dist/client/crypto/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/client/crypto/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,UAAU,EACV,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAEhB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,KAAK,EAAY,MAAM,qBAAqB,CAAC;AAEtD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,IAAI,cAAmE,CAAC;AACxE,IAAI,YAA+C,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,QAAQ;IACnB;QACE,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1E,YAAY,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;IACpD,CAAC;IAEQ,WAAW,CAAY;IACvB,OAAO,CAAS;IACzB,UAAU,CAAqB;IAE/B,YAAoB,UAAqB,EAAE,MAAc;QACvD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,0EAA0E;IAC1E,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,sEAAsE;IACtE,SAAS;QACP,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAE5E,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC5D,8FAA8F;QAC9F,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,SAAuB;QACzB,OAAO,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAmB,CAAC;QACzE,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACzD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IACrE,CAAC;IAED,uFAAuF;IACvF,QAAQ;QACN,OAAO,YAAY,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC;IAC/D,CAAC;IAED,gFAAgF;IAChF,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED,oFAAoF;IACpF,aAAa;QACX,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,OAAO,GAAkD,EAAE;QAE3D,UAAU,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC3C,OAAO,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,EAAE,CAAC;YACT,gEAAgE;YAChE,IAAI,MAAM,GAAG,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,wEAAwE;AACxE,6EAA6E;AAC7E,kCAAkC;AAClC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE;IAClF,KAAK;QACH,OAAO,aAAa,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;IACzC,CAAC;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAkB;IACnD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;QACxE,MAAM,IAAI,UAAU,CAAC,qDAAqD,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB,EAAE,MAAc;IAChD,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,OAAO,iBAAiB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;IAEnD,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAEjC,4EAA4E;IAC5E,6EAA6E;IAC7E,uBAAuB;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;QACjE,MAAM,IAAI,oBAAoB,CAAC,yCAAyC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACrC,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,CAAC,CAAC;IACjE,CAAC;IAED,0BAA0B;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,yDAAyD;QACzD,0DAA0D;QAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,mCAAmC;QAExF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACjD,OAAO,cAAc,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,OAAO,GAAkD,EAAE;IAE3D,UAAU,CAAC,WAAW,CAAC,CAAC;IACxB,OAAO,cAAc,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,UAAU,CAAC,WAAW,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IACnD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,WAAW;QAAE,MAAM,EAAE,CAAC;IACvD,OAAO,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC;AAC5E,CAAC;AAgBD,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,SAAuB;IACzE,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAgB;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CAAC,CAAa,EAAE,CAAa;IACrD,qFAAqF;IACrF,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAEvD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE3C,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED;mDACmD;AACnD,MAAM,UAAU,eAAe,CAAC,IAAgB;IAC9C,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG;QACV,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,OAAO;QACZ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACxD,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC1D,CAAC;IACF,OAAO,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAAgB;IAC3C,8EAA8E;IAC9E,IAAI,CAAC;QACH,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IACD,uEAAuE;IACvE,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAgB;IACjD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;IACzB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,aAAa;IACb,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,EAAE,CAAC,QAAQ,CAAC;IACtB,eAAe;IACf,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC;IAC3B,YAAY;IACZ,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC;IACxB,YAAY;IACZ,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE5C,OAAO,sBAAsB,CAC3B,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAChD,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAgB;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;IACzB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC;IACxB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE5C,OAAO,sBAAsB,CAC3B,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAChD,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAa,EAAE,CAAa;IAC1D,IAAI,CAAC,CAAC,MAAM,GAAG,gBAAgB,IAAI,CAAC,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;IACzD,KAAK,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;IAC7B,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAEhF,SAAS,YAAY,CAAC,GAAW,EAAE,KAAiB;IAClD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,GAAG,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,GAAG,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,uFAAuF;AACvF,SAAS,iBAAiB,CAAC,CAAsB;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,GAAG,CAAC;YACF,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACxB,CAAC,KAAK,CAAC,CAAC;QACV,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,6DAA6D;IAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAOD,SAAS,WAAW,CAAC,IAAgB,EAAE,WAAmB,EAAE,MAAM,GAAG,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,sBAAsB,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAC5F,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC;IACrB,IAAI,GAAW,CAAC;IAChB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAE,CAAC;IAClC,IAAI,YAAY,GAAG,IAAI,EAAE,CAAC;QACxB,GAAG,GAAG,YAAY,CAAC;IACrB,CAAC;SAAM,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACjC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAE,CAAC;IACrB,CAAC;SAAM,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACjC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;QACjD,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;IACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;AACjD,CAAC;AAED,iFAAiF;AACjF,SAAS,kBAAkB,CAAC,GAAe,EAAE,IAAY;IACvD,+BAA+B;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,KAAK,EAAE,CAAC;IAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,SAAS,gBAAgB,CAAC,MAAc,EAAE,IAAY;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;oBAAE,KAAK,EAAE,CAAC;;oBAC7B,OAAO,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}