@inkbox/sdk 0.2.16 → 0.3.0

package/dist/tunnels/client/_ws_passthrough.js

@@ -0,0 +1,432 @@
+/**
+ * inkbox-tunnels/client/_ws_passthrough.ts
+ *
+ * WebSocket support for passthrough mode.
+ *
+ * The h1 parser and h2 transcoder hand a {@link WebSocketSink} to the
+ * dispatcher when the inbound is a WS upgrade. The dispatcher completes
+ * the handshake via `accept` then bridges frames via `sendFrame` /
+ * `recvFrame`. The `bridgeWsHandlerOverSink` helper wires an
+ * `InkboxWsHandler` to one of those sinks so the same handler shape
+ * serves h1 `Upgrade: websocket` and h2 RFC 8441 Extended CONNECT.
+ */
+import { createHash } from "node:crypto";
+import { WS_OPCODE_BINARY, WS_OPCODE_CLOSE, WS_OPCODE_PING, WS_OPCODE_PONG, WS_OPCODE_TEXT, } from "./_wsframe.js";
+const WS_GUID = "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
+export function computeWsAccept(key) {
+    return createHash("sha1")
+        .update(key + WS_GUID, "ascii")
+        .digest("base64");
+}
+/**
+ * Encode an unmasked server-to-client frame. RFC 6455 §5.1 — server
+ * frames MUST NOT be masked. The shared `_wsframe.encodeWsFrame`
+ * defaults to client semantics (masked); this helper enforces unmasked.
+ */
+export function encodeServerFrame(opcode, payload, fin = true) {
+    const out = [];
+    out.push((fin ? 0x80 : 0x00) | (opcode & 0x0f));
+    const plen = payload.length;
+    if (plen < 126) {
+        out.push(plen);
+    }
+    else if (plen < 65536) {
+        out.push(126);
+        out.push((plen >> 8) & 0xff, plen & 0xff);
+    }
+    else {
+        out.push(127);
+        // Encode as 8-byte big-endian; payloads > 2^32 not supported here.
+        for (let i = 7; i >= 0; i--) {
+            out.push((Number(BigInt(plen) >> BigInt(i * 8))) & 0xff);
+        }
+    }
+    return Buffer.concat([Buffer.from(out), payload]);
+}
+/**
+ * Decode one complete client-to-server frame from `buf`.
+ *
+ * For h1 WebSockets (RFC 6455 §5.1) client frames MUST be masked;
+ * pass `requireMask=true` (default) and the decoder rejects unmasked
+ * frames. For h2 WebSockets (RFC 8441 §5.1) frames are NEVER masked —
+ * the transcoder passes `requireMask=false` so unmasked payloads are
+ * returned verbatim.
+ */
+export function decodeClientFrame(buf, opts) {
+    const requireMask = opts?.requireMask ?? true;
+    let total = 0;
+    for (const c of buf)
+        total += c.length;
+    if (total < 2)
+        return { kind: "need-more" };
+    const merged = Buffer.concat(buf, total);
+    let offset = 0;
+    const b0 = merged[0];
+    const b1 = merged[1];
+    const fin = (b0 & 0x80) !== 0;
+    const opcode = b0 & 0x0f;
+    const masked = (b1 & 0x80) !== 0;
+    let plen = b1 & 0x7f;
+    offset = 2;
+    if (plen === 126) {
+        if (merged.length < 4) {
+            buf.length = 0;
+            buf.push(merged);
+            return { kind: "need-more" };
+        }
+        plen = merged.readUInt16BE(2);
+        offset = 4;
+    }
+    else if (plen === 127) {
+        if (merged.length < 10) {
+            buf.length = 0;
+            buf.push(merged);
+            return { kind: "need-more" };
+        }
+        plen = Number(merged.readBigUInt64BE(2));
+        offset = 10;
+    }
+    if (requireMask && !masked)
+        return { kind: "rejected" };
+    if (!requireMask && masked)
+        return { kind: "rejected" };
+    let payload;
+    if (masked) {
+        if (merged.length < offset + 4) {
+            buf.length = 0;
+            buf.push(merged);
+            return { kind: "need-more" };
+        }
+        const maskKey = merged.subarray(offset, offset + 4);
+        offset += 4;
+        if (merged.length < offset + plen) {
+            buf.length = 0;
+            buf.push(merged);
+            return { kind: "need-more" };
+        }
+        const raw = merged.subarray(offset, offset + plen);
+        payload = Buffer.alloc(plen);
+        for (let i = 0; i < plen; i++) {
+            payload[i] = raw[i] ^ maskKey[i % 4];
+        }
+    }
+    else {
+        if (merged.length < offset + plen) {
+            buf.length = 0;
+            buf.push(merged);
+            return { kind: "need-more" };
+        }
+        payload = Buffer.from(merged.subarray(offset, offset + plen));
+    }
+    const remaining = merged.subarray(offset + plen);
+    buf.length = 0;
+    if (remaining.length > 0)
+        buf.push(remaining);
+    return { kind: "frame", opcode, payload, fin };
+}
+/**
+ * Drive an `InkboxWsHandler` against a `WebSocketSink`. Constructs an
+ * `InkboxWebSocket`-shaped object whose lifecycle (`accept`, `send`,
+ * `close`, async-iterator) maps onto the sink's frame I/O.
+ */
+export async function bridgeWsHandlerOverSink(opts) {
+    const { handler, sink, meta } = opts;
+    let accepted = false;
+    let closed = false;
+    // Inbound message stream — the handler's async-iterator pulls from
+    // here. The reader task is started lazily on `accept` so frames
+    // received before the user's handler iterates are still buffered.
+    const inboundQueue = [];
+    const inboundResolvers = [];
+    let inboundEnded = false;
+    let inboundError = null;
+    const pushInbound = (msg) => {
+        if (inboundResolvers.length > 0) {
+            inboundResolvers.shift()({ value: msg, done: false });
+            return;
+        }
+        inboundQueue.push(msg);
+    };
+    const endInbound = (err) => {
+        inboundEnded = true;
+        if (err)
+            inboundError = err;
+        while (inboundResolvers.length > 0) {
+            const r = inboundResolvers.shift();
+            r({ value: undefined, done: true });
+        }
+    };
+    let readerTask = null;
+    const startReader = () => {
+        if (readerTask !== null)
+            return;
+        readerTask = (async () => {
+            let fragments = null;
+            let fragmentsText = false;
+            while (!closed) {
+                let frame;
+                try {
+                    frame = await sink.recvFrame();
+                }
+                catch (err) {
+                    endInbound(err);
+                    return;
+                }
+                if (frame === null) {
+                    endInbound();
+                    return;
+                }
+                const { opcode, payload, fin } = frame;
+                if (opcode === WS_OPCODE_PING) {
+                    await sink.sendFrame(WS_OPCODE_PONG, payload).catch(() => undefined);
+                    continue;
+                }
+                if (opcode === WS_OPCODE_PONG)
+                    continue;
+                if (opcode === WS_OPCODE_CLOSE) {
+                    endInbound();
+                    return;
+                }
+                if (opcode === 0x0) {
+                    if (fragments === null) {
+                        endInbound(new Error("continuation without start"));
+                        return;
+                    }
+                    fragments.push(payload);
+                }
+                else if (opcode === WS_OPCODE_TEXT) {
+                    if (fragments !== null) {
+                        endInbound(new Error("new text frame mid-fragment"));
+                        return;
+                    }
+                    fragments = [payload];
+                    fragmentsText = true;
+                }
+                else if (opcode === WS_OPCODE_BINARY) {
+                    if (fragments !== null) {
+                        endInbound(new Error("new binary frame mid-fragment"));
+                        return;
+                    }
+                    fragments = [payload];
+                    fragmentsText = false;
+                }
+                else {
+                    endInbound(new Error(`unsupported opcode ${opcode}`));
+                    return;
+                }
+                if (!fin)
+                    continue;
+                const merged = fragments.length === 1
+                    ? fragments[0]
+                    : Buffer.concat(fragments);
+                fragments = null;
+                if (fragmentsText) {
+                    try {
+                        pushInbound(merged.toString("utf-8"));
+                    }
+                    catch {
+                        endInbound(new Error("invalid utf-8 in text frame"));
+                        return;
+                    }
+                }
+                else {
+                    pushInbound(merged);
+                }
+            }
+        })();
+    };
+    const ws = {
+        url: meta.url,
+        headers: meta.headers,
+        offeredProtocols: meta.offeredSubprotocols,
+        async accept(acceptOpts) {
+            if (accepted || closed)
+                return;
+            accepted = true;
+            const subprotocol = acceptOpts?.protocol;
+            if (subprotocol !== undefined &&
+                !meta.offeredSubprotocols.includes(subprotocol)) {
+                const { WsProtocolMismatch } = await import("./_ws.js");
+                throw new WsProtocolMismatch(subprotocol, meta.offeredSubprotocols);
+            }
+            await sink.accept({
+                subprotocol,
+                extraHeaders: acceptOpts?.headers,
+            });
+            startReader();
+        },
+        async send(data) {
+            if (!accepted || closed) {
+                const { WsClosed } = await import("./_ws.js");
+                throw new WsClosed();
+            }
+            if (typeof data === "string") {
+                await sink.sendFrame(WS_OPCODE_TEXT, Buffer.from(data, "utf-8"));
+            }
+            else {
+                await sink.sendFrame(WS_OPCODE_BINARY, data);
+            }
+        },
+        async close(code = 1000, reason = "") {
+            if (closed)
+                return;
+            closed = true;
+            if (!accepted) {
+                await sink.reject({ status: 403, reason });
+                return;
+            }
+            const reasonBuf = Buffer.from(reason, "utf-8");
+            const payload = Buffer.alloc(2 + reasonBuf.length);
+            payload.writeUInt16BE(code, 0);
+            reasonBuf.copy(payload, 2);
+            try {
+                await sink.sendFrame(WS_OPCODE_CLOSE, payload);
+            }
+            catch {
+                /* swallow */
+            }
+        },
+        [Symbol.asyncIterator]() {
+            return {
+                async next() {
+                    if (inboundError !== null)
+                        throw inboundError;
+                    if (inboundQueue.length > 0) {
+                        return { value: inboundQueue.shift(), done: false };
+                    }
+                    if (inboundEnded) {
+                        return { value: undefined, done: true };
+                    }
+                    return new Promise((resolve) => inboundResolvers.push(resolve));
+                },
+            };
+        },
+    };
+    try {
+        await handler(ws);
+    }
+    catch {
+        if (!accepted) {
+            await sink.reject({ status: 500, reason: "handler error" });
+        }
+    }
+    finally {
+        closed = true;
+        endInbound();
+        if (readerTask !== null) {
+            try {
+                await readerTask;
+            }
+            catch {
+                /* swallow */
+            }
+        }
+        try {
+            await sink.aclose();
+        }
+        catch {
+            /* swallow */
+        }
+    }
+}
+/**
+ * Common `WebSocketSink` impl backed by an inbound byte queue + outbound
+ * send callback. The h1 parser drives this from a node:http upgrade
+ * socket; the h2 transcoder drives the same shape from Extended-CONNECT
+ * stream DATA frames.
+ */
+export class ByteChannelWebSocketSink {
+    sendPlaintext;
+    buildAccept;
+    buildReject;
+    onCloseHook;
+    requireClientMask;
+    inboundChunks = [];
+    inboundResolvers = [];
+    inboundClosed = false;
+    accepted = false;
+    closed = false;
+    constructor(opts) {
+        this.sendPlaintext = opts.sendPlaintext;
+        this.buildAccept = opts.buildAcceptResponse;
+        this.buildReject = opts.buildRejectResponse;
+        this.onCloseHook = opts.onClose;
+        this.requireClientMask = opts.requireClientMask ?? true;
+    }
+    feedInbound(data) {
+        if (this.closed)
+            return;
+        this.inboundChunks.push(data);
+        while (this.inboundResolvers.length > 0) {
+            this.inboundResolvers.shift()();
+        }
+    }
+    signalInboundEof() {
+        this.inboundClosed = true;
+        while (this.inboundResolvers.length > 0) {
+            this.inboundResolvers.shift()();
+        }
+    }
+    async accept(opts) {
+        if (this.accepted || this.closed)
+            return;
+        this.accepted = true;
+        const head = this.buildAccept(opts?.subprotocol ?? null, opts?.extraHeaders ?? null);
+        await this.sendPlaintext(head);
+    }
+    async reject(opts) {
+        if (this.accepted || this.closed)
+            return;
+        this.closed = true;
+        const head = this.buildReject(opts?.status ?? 400);
+        try {
+            await this.sendPlaintext(head);
+        }
+        catch {
+            /* swallow */
+        }
+    }
+    async sendFrame(opcode, payload, opts) {
+        if (!this.accepted || this.closed)
+            return;
+        const fin = opts?.fin ?? true;
+        const frame = encodeServerFrame(opcode, payload, fin);
+        await this.sendPlaintext(frame);
+    }
+    async recvFrame() {
+        while (true) {
+            const decoded = decodeClientFrame(this.inboundChunks, {
+                requireMask: this.requireClientMask,
+            });
+            if (decoded.kind === "frame") {
+                return {
+                    opcode: decoded.opcode,
+                    payload: decoded.payload,
+                    fin: decoded.fin,
+                };
+            }
+            if (decoded.kind === "rejected")
+                return null;
+            // need-more
+            if (this.inboundClosed && this.inboundChunks.length === 0) {
+                return null;
+            }
+            await new Promise((r) => this.inboundResolvers.push(r));
+        }
+    }
+    async aclose() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.signalInboundEof();
+        if (this.onCloseHook !== undefined) {
+            try {
+                await this.onCloseHook();
+            }
+            catch {
+                /* swallow */
+            }
+        }
+    }
+}
+//# sourceMappingURL=_ws_passthrough.js.map

package/dist/tunnels/client/_ws_passthrough.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_ws_passthrough.js","sourceRoot":"","sources":["../../../src/tunnels/client/_ws_passthrough.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,UAAU,CAAC,MAAM,CAAC;SACtB,MAAM,CAAC,GAAG,GAAG,OAAO,EAAE,OAAO,CAAC;SAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,OAAe,EACf,GAAG,GAAG,IAAI;IAEV,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5B,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;SAAM,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,mEAAmE;QACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAa,EACb,IAAgC;IAKhC,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;IAC9C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,MAAM,GAAG,CAAC,CAAC;IACX,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,CAAC,CAAC;IACb,CAAC;SAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,GAAG,EAAE,CAAC;IACd,CAAC;IACD,IAAI,WAAW,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACxD,IAAI,CAAC,WAAW,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACxD,IAAI,OAAe,CAAC;IACpB,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;QACnD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjD,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACjD,CAAC;AA2BD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAI7C;IACC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,mEAAmE;IACnE,gEAAgE;IAChE,kEAAkE;IAClE,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAElB,EAAE,CAAC;IACP,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,YAAY,GAAiB,IAAI,CAAC;IAEtC,MAAM,WAAW,GAAG,CAAC,GAAoB,EAAQ,EAAE;QACjD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,gBAAgB,CAAC,KAAK,EAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,GAAW,EAAQ,EAAE;QACvC,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,GAAG;YAAE,YAAY,GAAG,GAAG,CAAC;QAC5B,OAAO,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,gBAAgB,CAAC,KAAK,EAAG,CAAC;YACpC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,UAAU,GAAyB,IAAI,CAAC;IAC5C,MAAM,WAAW,GAAG,GAAS,EAAE;QAC7B,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO;QAChC,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE;YACvB,IAAI,SAAS,GAAoB,IAAI,CAAC;YACtC,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,OAAO,CAAC,MAAM,EAAE,CAAC;gBACf,IAAI,KAA+D,CAAC;gBACpE,IAAI,CAAC;oBACH,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,UAAU,CAAC,GAAY,CAAC,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,UAAU,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;gBACvC,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;oBAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACrE,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,KAAK,cAAc;oBAAE,SAAS;gBACxC,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;oBAC/B,UAAU,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;wBACvB,UAAU,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;wBACpD,OAAO;oBACT,CAAC;oBACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,CAAC;qBAAM,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;oBACrC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;wBACvB,UAAU,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;wBACrD,OAAO;oBACT,CAAC;oBACD,SAAS,GAAG,CAAC,OAAO,CAAC,CAAC;oBACtB,aAAa,GAAG,IAAI,CAAC;gBACvB,CAAC;qBAAM,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;oBACvC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;wBACvB,UAAU,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;wBACvD,OAAO;oBACT,CAAC;oBACD,SAAS,GAAG,CAAC,OAAO,CAAC,CAAC;oBACtB,aAAa,GAAG,KAAK,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,IAAI,KAAK,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC,CAAC;oBACtD,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,GAAG;oBAAE,SAAS;gBACnB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC;oBACnC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;oBACd,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7B,SAAS,GAAG,IAAI,CAAC;gBACjB,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC;wBACH,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;oBACxC,CAAC;oBAAC,MAAM,CAAC;wBACP,UAAU,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;wBACrD,OAAO;oBACT,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,MAAM,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,MAAM,EAAE,GAAoB;QAC1B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,IAAI,CAAC,mBAAmB;QAE1C,KAAK,CAAC,MAAM,CAAC,UAAU;YACrB,IAAI,QAAQ,IAAI,MAAM;gBAAE,OAAO;YAC/B,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,WAAW,GAAG,UAAU,EAAE,QAAQ,CAAC;YACzC,IACE,WAAW,KAAK,SAAS;gBACzB,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC/C,CAAC;gBACD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;gBACxD,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,WAAW;gBACX,YAAY,EAAE,UAAU,EAAE,OAAO;aAClC,CAAC,CAAC;YACH,WAAW,EAAE,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,IAAI;YACb,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACxB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC9C,MAAM,IAAI,QAAQ,EAAE,CAAC;YACvB,CAAC;YACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,MAAM,GAAG,EAAE;YAClC,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YACnD,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/B,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;QAED,CAAC,MAAM,CAAC,aAAa,CAAC;YACpB,OAAO;gBACL,KAAK,CAAC,IAAI;oBACR,IAAI,YAAY,KAAK,IAAI;wBAAE,MAAM,YAAY,CAAC;oBAC9C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC5B,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;oBACvD,CAAC;oBACD,IAAI,YAAY,EAAE,CAAC;wBACjB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;oBAC1C,CAAC;oBACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAClE,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,IAAI,CAAC;QACd,UAAU,EAAE,CAAC;QACb,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAwBD;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IAClB,aAAa,CAAkC;IAC/C,WAAW,CAGhB;IACK,WAAW,CAA6B;IACxC,WAAW,CAAuB;IAClC,iBAAiB,CAAU;IACpC,aAAa,GAAa,EAAE,CAAC;IAC7B,gBAAgB,GAAsB,EAAE,CAAC;IACzC,aAAa,GAAG,KAAK,CAAC;IACtB,QAAQ,GAAG,KAAK,CAAC;IACjB,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,IAAyB;QACnC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAC1D,CAAC;IAED,WAAW,CAAC,IAAY;QACtB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAG,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAG,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAGZ;QACC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACzC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAC3B,IAAI,EAAE,WAAW,IAAI,IAAI,EACzB,IAAI,EAAE,YAAY,IAAI,IAAI,CAC3B,CAAC;QACF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAA0B;QACrC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAc,EACd,OAAe,EACf,IAAwB;QAExB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAC1C,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC;QAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,SAAS;QAKb,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,aAAa,EAAE;gBACpD,WAAW,EAAE,IAAI,CAAC,iBAAiB;aACpC,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7B,OAAO;oBACL,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC7C,YAAY;YACZ,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/tunnels/client/_ws_url_bridge.d.ts

@@ -0,0 +1,71 @@
+/**
+ * inkbox-tunnels/client/_ws_url_bridge.ts
+ *
+ * Bridge a WebSocket upgrade between an inbound `WebSocketSink` (h1
+ * parser or h2 transcoder) and an `http://` / `https://` URL upstream.
+ *
+ * Flow per request:
+ *
+ *   1. Open a TCP / TLS connection to ``forwardTo``.
+ *   2. Send a standard h1 ``GET /<path> HTTP/1.1`` upgrade request.
+ *   3. Read the upstream's status line + headers; if not 101, reject
+ *      the inbound sink with the upstream status.
+ *   4. Accept on the inbound sink (with the upstream's negotiated
+ *      subprotocol, when present).
+ *   5. Bridge frames: inbound third-party frames re-encoded with the
+ *      mask bit (we are the h1 client to upstream, RFC 6455 §5.1) and
+ *      written to the upstream socket; upstream server frames decoded
+ *      (unmasked) and forwarded back via ``ws.sendFrame``.
+ */
+import * as net from "node:net";
+import * as tls from "node:tls";
+import type { WebSocketSink } from "./_ws_passthrough.js";
+import type { DispatchRequest } from "./_dispatch.js";
+export interface WsUpgradeToUrlOpts {
+    forwardTo: URL;
+    publicHost: string;
+    verifyTls: boolean;
+    caBundle: Buffer | string | null;
+    request: DispatchRequest;
+    ws: WebSocketSink;
+}
+export interface WsUpstreamHandle {
+    socket: net.Socket | tls.TLSSocket;
+    subprotocol: string | null;
+    leftover: Buffer;
+    /**
+     * All 101 response headers, lowercased keys, in arrival order.
+     * Application-defined headers (Set-Cookie, X-Use-Inkbox-*, custom
+     * correlation IDs) live here. The runtime filters hop-by-hop +
+     * handshake-control headers when reconstructing the third-party
+     * 101.
+     */
+    headers: Array<[string, string]>;
+}
+export declare class WsUpstreamError extends Error {
+    readonly status: number;
+    readonly reason: string;
+    constructor(status: number, reason: string);
+}
+export interface OpenWsUpstreamOpts {
+    forwardTo: URL;
+    publicHost: string;
+    verifyTls: boolean;
+    caBundle: Buffer | string | null;
+    requestPath: string;
+    requestHeaders: Array<[string, string]>;
+    wsSubprotocol: string | null;
+    forwardedForIp: string | null;
+    /** Bound on connect + h1 head-read. Default 30s. */
+    handshakeTimeoutMs?: number;
+}
+/**
+ * Open a TCP/TLS connection to ``forwardTo`` and complete an h1
+ * ``Upgrade: websocket`` handshake. Verifies the upstream's
+ * ``Sec-WebSocket-Accept`` per RFC 6455 §1.3 and returns the connected
+ * socket + negotiated subprotocol + any bytes received past the head
+ * (typically empty, but possibly the start of an early-pushed frame).
+ */
+export declare function openWsUpstream(opts: OpenWsUpstreamOpts): Promise<WsUpstreamHandle>;
+export declare function bridgeWsUpgradeToUrl(opts: WsUpgradeToUrlOpts): Promise<void>;
+//# sourceMappingURL=_ws_url_bridge.d.ts.map

package/dist/tunnels/client/_ws_url_bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_ws_url_bridge.d.ts","sourceRoot":"","sources":["../../../src/tunnels/client/_ws_url_bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAOhC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAuBtD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,GAAG,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,eAAe,CAAC;IACzB,EAAE,EAAE,aAAa,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC;IACnC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClC;AAED,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,MAAM,EAAE,MAAM;aACd,MAAM,EAAE,MAAM;gBADd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM;CAKjC;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,GAAG,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAmP3B;AAgBD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAiLf"}