@hsuite/smart-engines-cli 1.0.0

package/dist/libs/infrastructure/src/nats/nats-acl.service.js

@@ -0,0 +1,446 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var NatsAclService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NatsAclService = void 0;
+const common_1 = require("@nestjs/common");
+let NatsAclService = NatsAclService_1 = class NatsAclService {
+    validatorRegistry;
+    logger = new common_1.Logger(NatsAclService_1.name);
+    aclRules = new Map();
+    defaultPolicy = 'deny';
+    localNodeId;
+    useDynamicRegistry = false;
+    _registryUnsubscribe;
+    constructor(validatorRegistry) {
+        this.validatorRegistry = validatorRegistry;
+        this.localNodeId = process.env.NODE_ID || `validator-${Math.random().toString(16).slice(2)}`;
+        this.logger.log(`NATS ACL initialized for node ${this.localNodeId}`);
+        this.initializeDefaultRules();
+    }
+    async onModuleInit() {
+        if (this.validatorRegistry) {
+            this.logger.log('Dynamic validator registry available');
+            this._registryUnsubscribe = this.validatorRegistry.onUpdate((_state, change) => {
+                this.logger.log(`Validator registry updated: ${change.type}`);
+                this.refreshAclRules();
+            });
+            if (this.validatorRegistry.isGenesisComplete()) {
+                this.useDynamicRegistry = true;
+                this.logger.log('✓ Using dynamic validator registry for ACLs');
+            }
+            else {
+                this.logger.log('Genesis not complete - allowing all validators during bootstrap');
+            }
+        }
+        else {
+            this.logger.warn('ValidatorRegistryProvider not injected. ACLs will allow all validators (*). ' +
+                'For production, inject DynamicValidatorRegistryService.');
+        }
+        this.initializeDefaultRules();
+    }
+    onModuleDestroy() {
+        if (this._registryUnsubscribe) {
+            this._registryUnsubscribe();
+            this._registryUnsubscribe = undefined;
+        }
+    }
+    get validatorWhitelist() {
+        if (this.useDynamicRegistry && this.validatorRegistry) {
+            const activeValidators = this.validatorRegistry.getActiveValidatorIds();
+            if (activeValidators.length > 0) {
+                return activeValidators;
+            }
+        }
+        const genesisIds = process.env.GENESIS_VALIDATOR_IDS;
+        if (genesisIds) {
+            const ids = genesisIds
+                .split(',')
+                .map((id) => id.trim())
+                .filter(Boolean);
+            if (ids.length > 0) {
+                return ids;
+            }
+        }
+        return '*';
+    }
+    refreshAclRules() {
+        if (this.validatorRegistry?.isGenesisComplete() && !this.useDynamicRegistry) {
+            this.useDynamicRegistry = true;
+            this.logger.log('🔄 Switched to dynamic validator registry for ACLs');
+        }
+        this.initializeDefaultRules();
+        this.logger.debug(`ACL rules refreshed. Active validators: ${this.describeWhitelist()}`);
+    }
+    initializeDefaultRules() {
+        this.addRule({
+            subject: 'system.heartbeat',
+            allowedNodeIds: '*',
+            action: 'subscribe',
+        });
+        this.addRule({
+            subject: 'system.discovery',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'networking.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'networking-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'dkg.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'dkg-stream.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'tss.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'tss-stream.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'share.private.*',
+            allowedNodeIds: [],
+            action: 'subscribe',
+        });
+        this.addRule({
+            subject: 'multi-chain.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'multi-chain-stream.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'security.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'security-stream.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'governance.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'governance-stream.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'genesis.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'genesis-stream.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'membership.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'membership-stream.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'subscription.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'subscription-stream.>',
+            allowedNodeIds: this.validatorWhitelist,
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'host-mesh.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'host-mesh-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'ipfs.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'ipfs-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'xrpl.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'xrpl-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'hedera.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'hedera-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'polkadot.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'polkadot-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'host-app-replication.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'host-app-replication-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'smart-app.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'smart-app-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'entity-registry.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'entity-registry-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'agent.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'agent-lifecycle.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.addRule({
+            subject: 'agent-lifecycle-stream.>',
+            allowedNodeIds: '*',
+            action: 'both',
+        });
+        this.logger.log('✅ Initialized NATS ACL with default security rules');
+    }
+    addRule(rule) {
+        this.aclRules.set(rule.subject, rule);
+        this.logger.debug(`Added ACL rule: ${rule.subject} -> ${rule.action}`);
+    }
+    removeRule(subject) {
+        this.aclRules.delete(subject);
+        this.logger.debug(`Removed ACL rule: ${subject}`);
+    }
+    canSubscribe(nodeId, subject) {
+        return this.checkPermission(nodeId, subject, 'subscribe');
+    }
+    canPublish(nodeId, subject) {
+        return this.checkPermission(nodeId, subject, 'publish');
+    }
+    checkPermission(nodeId, subject, action) {
+        const rule = this.findMatchingRule(subject);
+        if (!rule) {
+            if (this.defaultPolicy === 'deny') {
+                this.logger.warn(`🚨 ACCESS DENIED: No ACL rule for ${subject}\n` +
+                    `  Node: ${nodeId}\n` +
+                    `  Action: ${action}\n` +
+                    `  Policy: Default DENY`);
+                return {
+                    allowed: false,
+                    reason: `No ACL rule defined for subject '${subject}'. Default policy: DENY`,
+                };
+            }
+            return { allowed: true };
+        }
+        if (rule.action !== action && rule.action !== 'both') {
+            return {
+                allowed: false,
+                reason: `Action '${action}' not permitted on '${subject}'. Allowed: ${rule.action}`,
+            };
+        }
+        if (subject.startsWith('share.private.')) {
+            return this.checkPrivateShareAccess(nodeId, subject);
+        }
+        if (rule.allowedNodeIds === '*') {
+            return { allowed: true };
+        }
+        if (rule.allowedNodeIds.includes(nodeId)) {
+            return { allowed: true };
+        }
+        this.logger.warn(`🚨 ACCESS DENIED: Node not in ACL\n` +
+            `  Subject: ${subject}\n` +
+            `  Node: ${nodeId}\n` +
+            `  Action: ${action}\n` +
+            `  Allowed nodes: ${this.formatAllowedNodes(rule.allowedNodeIds)}`);
+        return {
+            allowed: false,
+            reason: `Node '${nodeId}' not authorized for subject '${subject}'`,
+        };
+    }
+    checkPrivateShareAccess(nodeId, subject) {
+        const parts = subject.split('.');
+        if (parts.length !== 3) {
+            return {
+                allowed: false,
+                reason: 'Invalid private share subject format',
+            };
+        }
+        const recipientNodeId = parts[2];
+        if (nodeId !== recipientNodeId) {
+            this.logger.error(`🚨 CRITICAL: Attempted unauthorized access to private shares!\n` +
+                `  Subject: ${subject}\n` +
+                `  Recipient: ${recipientNodeId}\n` +
+                `  Attacker: ${nodeId}\n` +
+                `  **THIS IS A SERIOUS SECURITY BREACH ATTEMPT**`);
+            return {
+                allowed: false,
+                reason: `Private shares for '${recipientNodeId}' can only be accessed by that node`,
+            };
+        }
+        return { allowed: true };
+    }
+    findMatchingRule(subject) {
+        if (this.aclRules.has(subject)) {
+            return this.aclRules.get(subject);
+        }
+        for (const [pattern, rule] of this.aclRules.entries()) {
+            if (this.subjectMatches(subject, pattern)) {
+                return rule;
+            }
+        }
+        return undefined;
+    }
+    subjectMatches(subject, pattern) {
+        const regexPattern = pattern
+            .replace(/\./g, '\\.')
+            .replace(/\*/g, '[^.]+')
+            .replace(/>/g, '.+');
+        const regex = new RegExp(`^${regexPattern}$`);
+        return regex.test(subject);
+    }
+    grantCeremonyAccess(ceremonyId, participants, durationMs = 3600000) {
+        const subject = `dkg-stream.ceremony.${ceremonyId}.*`;
+        this.addRule({
+            subject,
+            allowedNodeIds: participants,
+            action: 'both',
+        });
+        this.logger.log(`✅ Granted ceremony access: ${ceremonyId}\n` +
+            `  Participants: ${participants.length}\n` +
+            `  Duration: ${durationMs}ms`);
+        setTimeout(() => {
+            this.removeRule(subject);
+            this.logger.log(`⏱️  Revoked ceremony access: ${ceremonyId}`);
+        }, durationMs);
+    }
+    getAllRules() {
+        return Array.from(this.aclRules.values());
+    }
+    getStats() {
+        let publicRules = 0;
+        let privateRules = 0;
+        for (const rule of this.aclRules.values()) {
+            if (rule.allowedNodeIds === '*') {
+                publicRules++;
+            }
+            else {
+                privateRules++;
+            }
+        }
+        return {
+            totalRules: this.aclRules.size,
+            publicRules,
+            privateRules,
+            defaultPolicy: this.defaultPolicy,
+        };
+    }
+    describeWhitelist() {
+        if (this.validatorWhitelist === '*') {
+            return '* (all validators)';
+        }
+        if (this.validatorWhitelist.length === 0) {
+            return '(empty)';
+        }
+        return this.validatorWhitelist.join(', ');
+    }
+    formatAllowedNodes(allowed) {
+        if (allowed === '*') {
+            return '* (all validators)';
+        }
+        if (allowed.length === 0) {
+            return '(empty)';
+        }
+        return allowed.join(', ');
+    }
+};
+exports.NatsAclService = NatsAclService;
+exports.NatsAclService = NatsAclService = NatsAclService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, common_1.Inject)('ValidatorRegistryProvider')),
+    __metadata("design:paramtypes", [Object])
+], NatsAclService);
+//# sourceMappingURL=nats-acl.service.js.map

package/dist/libs/infrastructure/src/nats/nats-acl.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nats-acl.service.js","sourceRoot":"","sources":["../../../../../../../libs/infrastructure/src/nats/nats-acl.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAOwB;AA0CjB,IAAM,cAAc,sBAApB,MAAM,cAAc;IAmBN;IAlBF,MAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAGlD,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAG1C,aAAa,GAAqB,MAAM,CAAC;IAChC,WAAW,CAAS;IAG7B,kBAAkB,GAAG,KAAK,CAAC;IAG3B,oBAAoB,CAAc;IAE1C,YAGmB,iBAA8C;QAA9C,sBAAiB,GAAjB,iBAAiB,CAA6B;QAE/D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAKrE,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY;QAEhB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YAGxD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBAC7E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,CAAC,CAAC,CAAC;YAGH,IAAI,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,EAAE,CAAC;gBAC/C,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8EAA8E;gBAC5E,yDAAyD,CAC5D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAED,eAAe;QAEb,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,IAAI,CAAC,oBAAoB,GAAG,SAAS,CAAC;QACxC,CAAC;IACH,CAAC;IAcD,IAAY,kBAAkB;QAE5B,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtD,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YACxE,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,gBAAgB,CAAC;YAC1B,CAAC;QACH,CAAC;QAGD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACrD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,UAAU;iBACnB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;iBACtB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QAGD,OAAO,GAAG,CAAC;IACb,CAAC;IAKO,eAAe;QAErB,IAAI,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5E,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAGD,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAE9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC3F,CAAC;IAOO,sBAAsB;QAE5B,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,kBAAkB;YAC3B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,kBAAkB;YAC3B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAIH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,cAAc;YACvB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,qBAAqB;YAC9B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,OAAO;YAChB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,cAAc;YACvB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,OAAO;YAChB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,cAAc;YACvB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,iBAAiB;YAC1B,cAAc,EAAE,EAAE;YAClB,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,eAAe;YACxB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,sBAAsB;YAC/B,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,YAAY;YACrB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,mBAAmB;YAC5B,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,cAAc;YACvB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,qBAAqB;YAC9B,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,WAAW;YACpB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,kBAAkB;YAC3B,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,cAAc;YACvB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,qBAAqB;YAC9B,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,gBAAgB;YACzB,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,uBAAuB;YAChC,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,aAAa;YACtB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,oBAAoB;YAC7B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,QAAQ;YACjB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,eAAe;YACxB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,QAAQ;YACjB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,eAAe;YACxB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,UAAU;YACnB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,iBAAiB;YAC1B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,YAAY;YACrB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,mBAAmB;YAC5B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,wBAAwB;YACjC,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,+BAA+B;YACxC,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,aAAa;YACtB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,oBAAoB;YAC7B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,mBAAmB;YAC5B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,0BAA0B;YACnC,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAGH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,SAAS;YAClB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,mBAAmB;YAC5B,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,OAAO,EAAE,0BAA0B;YACnC,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAOD,OAAO,CAAC,IAAiB;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,OAAO,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IAOD,UAAU,CAAC,OAAe;QACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;IASD,YAAY,CACV,MAAc,EACd,OAAe;QAKf,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5D,CAAC;IASD,UAAU,CACR,MAAc,EACd,OAAe;QAKf,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IAUO,eAAe,CACrB,MAAc,EACd,OAAe,EACf,MAA+B;QAM/B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qCAAqC,OAAO,IAAI;oBAC9C,WAAW,MAAM,IAAI;oBACrB,aAAa,MAAM,IAAI;oBACvB,wBAAwB,CAC3B,CAAC;gBAEF,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,oCAAoC,OAAO,yBAAyB;iBAC7E,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAGD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACrD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,WAAW,MAAM,uBAAuB,OAAO,eAAe,IAAI,CAAC,MAAM,EAAE;aACpF,CAAC;QACJ,CAAC;QAGD,IAAI,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAGD,IAAI,IAAI,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;YAEhC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qCAAqC;YACnC,cAAc,OAAO,IAAI;YACzB,WAAW,MAAM,IAAI;YACrB,aAAa,MAAM,IAAI;YACvB,oBAAoB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CACrE,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,MAAM,iCAAiC,OAAO,GAAG;SACnE,CAAC;IACJ,CAAC;IASO,uBAAuB,CAC7B,MAAc,EACd,OAAe;QAMf,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,sCAAsC;aAC/C,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAGjC,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iEAAiE;gBAC/D,cAAc,OAAO,IAAI;gBACzB,gBAAgB,eAAe,IAAI;gBACnC,eAAe,MAAM,IAAI;gBACzB,iDAAiD,CACpD,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uBAAuB,eAAe,qCAAqC;aACpF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IASO,gBAAgB,CAAC,OAAe;QAEtC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAGD,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IASO,cAAc,CAAC,OAAe,EAAE,OAAe;QAKrD,MAAM,YAAY,GAAG,OAAO;aACzB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;aACvB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAWD,mBAAmB,CACjB,UAAkB,EAClB,YAAsB,EACtB,aAAqB,OAAO;QAE5B,MAAM,OAAO,GAAG,uBAAuB,UAAU,IAAI,CAAC;QAEtD,IAAI,CAAC,OAAO,CAAC;YACX,OAAO;YACP,cAAc,EAAE,YAAY;YAC5B,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,8BAA8B,UAAU,IAAI;YAC1C,mBAAmB,YAAY,CAAC,MAAM,IAAI;YAC1C,eAAe,UAAU,IAAI,CAChC,CAAC;QAGF,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAC;QAChE,CAAC,EAAE,UAAU,CAAC,CAAC;IACjB,CAAC;IAKD,WAAW;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAKD,QAAQ;QAMN,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;gBAChC,WAAW,EAAE,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAC9B,WAAW;YACX,YAAY;YACZ,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;IACJ,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,kBAAkB,KAAK,GAAG,EAAE,CAAC;YACpC,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEO,kBAAkB,CAAC,OAAuB;QAChD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;CACF,CAAA;AAxrBY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAkBR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,2BAA2B,CAAC,CAAA;;GAlB3B,cAAc,CAwrB1B"}

package/dist/libs/infrastructure/src/nats/nats-mesh.service.d.ts

@@ -0,0 +1,100 @@
+import { OnModuleInit, OnModuleDestroy } from '@nestjs/common';
+import { ModuleRef } from '@nestjs/core';
+import { NatsConnection, JetStreamClient, JetStreamManager } from 'nats';
+export interface INostrPeerDiscoveryService {
+    getActivePeers(): Array<{
+        validatorId: string;
+        publicKey: string;
+        endpoints: {
+            nats: string;
+            api: string;
+            publicIp?: string;
+        };
+        capabilities: string[];
+    }>;
+    isEnabled(): boolean;
+}
+export interface PeerConnection {
+    nodeId: string;
+    natsEndpoint: string;
+    connection?: NatsConnection;
+    jetstream?: JetStreamClient;
+    status: 'connecting' | 'connected' | 'disconnected' | 'failed';
+    lastConnectAttempt?: Date;
+    lastError?: string;
+    reconnectAttempts: number;
+    publicKey?: string;
+}
+export interface MeshStatus {
+    localConnected: boolean;
+    localEndpoint: string;
+    mode: 'mesh';
+    peers: {
+        nodeId: string;
+        endpoint: string;
+        status: string;
+        reconnectAttempts: number;
+    }[];
+    totalPeers: number;
+    connectedPeers: number;
+}
+export type PeerEventCallback = (nodeId: string, event: 'connected' | 'disconnected' | 'failed') => void;
+export declare class NatsMeshService implements OnModuleInit, OnModuleDestroy {
+    private readonly moduleRef;
+    private readonly logger;
+    private localNc?;
+    private localJs?;
+    private localJsm?;
+    private peerConnections;
+    private readonly nodeId;
+    private readonly localEndpoint;
+    private readonly publicEndpoint;
+    private readonly natsToken?;
+    private readonly tlsEnabled;
+    private readonly tlsOptions;
+    private readonly connectTimeoutMs;
+    private readonly reconnectDelayMs;
+    private readonly maxReconnectAttempts;
+    private readonly maxPeerConnections;
+    private peerEventListeners;
+    private reconnectTimers;
+    private autoConnectInterval?;
+    private connectionReady;
+    private resolveConnection;
+    private rejectConnection;
+    private nostrPeerDiscovery?;
+    private readonly autoConnectFromNostrEnabled;
+    private readonly autoConnectIntervalMs;
+    constructor(moduleRef: ModuleRef);
+    waitForConnection(): Promise<void>;
+    onModuleInit(): Promise<void>;
+    onModuleDestroy(): Promise<void>;
+    private initTlsOptions;
+    connectLocal(): Promise<void>;
+    disconnectLocal(): Promise<void>;
+    connectToPeer(nodeId: string, natsEndpoint: string, publicKey?: string): Promise<boolean>;
+    autoConnectFromNostr(): Promise<void>;
+    private handlePeerDisconnect;
+    private scheduleReconnect;
+    disconnectPeer(nodeId: string): Promise<void>;
+    publishLocal(subject: string, data: Uint8Array): Promise<void>;
+    publishLocalJetStream(subject: string, data: Uint8Array): Promise<void>;
+    broadcastToPeers(subject: string, data: Uint8Array): Promise<number>;
+    publishToMesh(subject: string, data: Uint8Array): Promise<void>;
+    publishToMeshJetStream(subject: string, data: Uint8Array): Promise<void>;
+    getLocalConnection(): NatsConnection | undefined;
+    getLocalJetStream(): JetStreamClient | undefined;
+    getLocalJetStreamManager(): JetStreamManager | undefined;
+    isLocalConnected(): boolean;
+    getConnectedPeerCount(): number;
+    getMeshStatus(): MeshStatus;
+    getPublicEndpoint(): string;
+    getNodeId(): string;
+    getMode(): 'mesh';
+    onPeerEvent(callback: PeerEventCallback): () => void;
+    private emitPeerEvent;
+    getPeerConnection(nodeId: string): PeerConnection | undefined;
+    getPeerNodeIds(): string[];
+    isPeerConnected(nodeId: string): boolean;
+}
+//# sourceMappingURL=nats-mesh.service.d.ts.map

package/dist/libs/infrastructure/src/nats/nats-mesh.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nats-mesh.service.d.ts","sourceRoot":"","sources":["../../../../../../../libs/infrastructure/src/nats/nats-mesh.service.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAsB,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAW,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAc,MAAM,MAAM,CAAC;AAQ9F,MAAM,WAAW,0BAA0B;IACzC,cAAc,IAAI,KAAK,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE;YACT,IAAI,EAAE,MAAM,CAAC;YACb,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;SACnB,CAAC;QACF,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC,CAAC;IACH,SAAS,IAAI,OAAO,CAAC;CACtB;AAKD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,cAAc,GAAG,QAAQ,CAAC;IAC/D,kBAAkB,CAAC,EAAE,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAKD,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,iBAAiB,EAAE,MAAM,CAAC;KAC3B,EAAE,CAAC;IACJ,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAKD,MAAM,MAAM,iBAAiB,GAAG,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,WAAW,GAAG,cAAc,GAAG,QAAQ,KAC3C,IAAI,CAAC;AAEV,qBACa,eAAgB,YAAW,YAAY,EAAE,eAAe;IA8CvD,OAAO,CAAC,QAAQ,CAAC,SAAS;IA7CtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAG3D,OAAO,CAAC,OAAO,CAAC,CAAiB;IACjC,OAAO,CAAC,OAAO,CAAC,CAAkB;IAClC,OAAO,CAAC,QAAQ,CAAC,CAAmB;IAGpC,OAAO,CAAC,eAAe,CAAqC;IAG5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAG7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAG5C,OAAO,CAAC,kBAAkB,CAA2B;IAGrD,OAAO,CAAC,eAAe,CAAqC;IAG5D,OAAO,CAAC,mBAAmB,CAAC,CAAiB;IAG7C,OAAO,CAAC,eAAe,CAAgB;IACvC,OAAO,CAAC,iBAAiB,CAAc;IACvC,OAAO,CAAC,gBAAgB,CAA0B;IAGlD,OAAO,CAAC,kBAAkB,CAAC,CAA6B;IAGxD,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAU;IACtD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;gBAElB,SAAS,EAAE,SAAS;IAwD3C,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAqE7B,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IA0BtC,OAAO,CAAC,cAAc;IAyBhB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAiF7B,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBhC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgGzF,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAqD3C,OAAO,CAAC,oBAAoB;IAoB5B,OAAO,CAAC,iBAAiB;IA8BnB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6B7C,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9D,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBvE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BpE,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAa/D,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9E,kBAAkB,IAAI,cAAc,GAAG,SAAS;IAOhD,iBAAiB,IAAI,eAAe,GAAG,SAAS;IAOhD,wBAAwB,IAAI,gBAAgB,GAAG,SAAS;IAOxD,gBAAgB,IAAI,OAAO;IAO3B,qBAAqB,IAAI,MAAM;IAa/B,aAAa,IAAI,UAAU;IAqB3B,iBAAiB,IAAI,MAAM;IAO3B,SAAS,IAAI,MAAM;IAOnB,OAAO,IAAI,MAAM;IAOjB,WAAW,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAapD,OAAO,CAAC,aAAa;IAarB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAO7D,cAAc,IAAI,MAAM,EAAE;IAO1B,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;CAIzC"}