@jingyi0605/codingns 0.3.6 → 0.5.0

package/dist/server/modules/provider/provider-discovery-runtime.js

@@ -1,14 +1,72 @@
 import { ClaudeCodeAdapter, CodexAdapter, GeminiAdapter, KimiAdapter, OpenCodeAdapter, ProviderRegistry, SessionSyncService } from "@codingns/session-sync-core";
+const WORKSPACE_DISCOVERY_CACHE_MAX_AGE_MS = 5_000;
+const SESSION_TITLE_CACHE_MAX_AGE_MS = 15_000;
 let workspaceDiscoveryRuntime = null;
+const workspaceDiscoveryCache = new Map();
+const workspaceDiscoveryInflight = new Map();
+const sessionTitleCache = new Map();
+const sessionTitleInflight = new Map();
 export async function discoverWorkspaceSessionsInRuntime(config, workspacePath, knownSessions, signal) {
     const service = getWorkspaceDiscoveryService(config);
-    return await raceWithAbortSignal(service.discoverWorkspaceSessions(workspacePath, {
+    const runtimeKey = buildWorkspaceDiscoveryRuntimeKey(config, workspacePath);
+    const knownSessionsSignature = buildKnownSessionsSignature(knownSessions);
+    const cached = workspaceDiscoveryCache.get(runtimeKey);
+    if (cached &&
+        cached.knownSessionsSignature === knownSessionsSignature &&
+        Date.now() - cached.cachedAt <= WORKSPACE_DISCOVERY_CACHE_MAX_AGE_MS) {
+        return cached.result;
+    }
+    const inflight = workspaceDiscoveryInflight.get(runtimeKey);
+    if (inflight && inflight.knownSessionsSignature === knownSessionsSignature) {
+        return await raceWithAbortSignal(inflight.promise, signal);
+    }
+    const promise = service.discoverWorkspaceSessions(workspacePath, {
         knownSessions
-    }), signal);
+    }).then((result) => {
+        workspaceDiscoveryCache.set(runtimeKey, {
+            knownSessionsSignature,
+            cachedAt: Date.now(),
+            result
+        });
+        return result;
+    }).finally(() => {
+        const active = workspaceDiscoveryInflight.get(runtimeKey);
+        if (active?.promise === promise) {
+            workspaceDiscoveryInflight.delete(runtimeKey);
+        }
+    });
+    workspaceDiscoveryInflight.set(runtimeKey, {
+        knownSessionsSignature,
+        promise
+    });
+    return await raceWithAbortSignal(promise, signal);
 }
 export async function readSessionTitleInRuntime(config, provider, providerSessionId, rawStoreRef, signal) {
     const service = getWorkspaceDiscoveryService(config);
-    return await raceWithAbortSignal(service.readSessionTitle(provider, providerSessionId, rawStoreRef), signal);
+    const runtimeKey = buildSessionTitleRuntimeKey(config, provider, providerSessionId, rawStoreRef);
+    const cached = sessionTitleCache.get(runtimeKey);
+    if (cached && Date.now() - cached.cachedAt <= SESSION_TITLE_CACHE_MAX_AGE_MS) {
+        return cached.title;
+    }
+    const inflight = sessionTitleInflight.get(runtimeKey);
+    if (inflight) {
+        return await raceWithAbortSignal(inflight, signal);
+    }
+    const promise = service.readSessionTitle(provider, providerSessionId, rawStoreRef)
+        .then((title) => {
+        sessionTitleCache.set(runtimeKey, {
+            cachedAt: Date.now(),
+            title
+        });
+        return title;
+    })
+        .finally(() => {
+        if (sessionTitleInflight.get(runtimeKey) === promise) {
+            sessionTitleInflight.delete(runtimeKey);
+        }
+    });
+    sessionTitleInflight.set(runtimeKey, promise);
+    return await raceWithAbortSignal(promise, signal);
 }
 function getWorkspaceDiscoveryService(config) {
     const cacheKey = JSON.stringify(config);
@@ -41,6 +99,28 @@ function getWorkspaceDiscoveryService(config) {
     };
     return service;
 }
+function buildWorkspaceDiscoveryRuntimeKey(config, workspacePath) {
+    return `${JSON.stringify(config)}::${workspacePath}`;
+}
+function buildSessionTitleRuntimeKey(config, provider, providerSessionId, rawStoreRef) {
+    return `${JSON.stringify(config)}::${provider}::${providerSessionId}::${rawStoreRef}`;
+}
+function buildKnownSessionsSignature(knownSessions) {
+    return JSON.stringify([...knownSessions]
+        .map((session) => ({
+        provider: session.provider,
+        providerSessionId: session.providerSessionId,
+        workspacePath: session.workspacePath,
+        rawStoreRef: session.rawStoreRef,
+        isArchived: session.isArchived ?? false,
+        parentProviderSessionId: session.parentProviderSessionId ?? null,
+        isSubagent: session.isSubagent ?? false,
+        subagentLabel: session.subagentLabel ?? null,
+        sourceMtimeMs: session.sourceMtimeMs ?? null,
+        sourceSizeBytes: session.sourceSizeBytes ?? null
+    }))
+        .sort((left, right) => `${left.provider}:${left.providerSessionId}:${left.rawStoreRef}`.localeCompare(`${right.provider}:${right.providerSessionId}:${right.rawStoreRef}`)));
+}
 async function raceWithAbortSignal(promise, signal) {
     if (!signal) {
         return await promise;

package/dist/server/modules/provider/provider-discovery-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-discovery-runtime.js","sourceRoot":"","sources":["../../../../src/modules/provider/provider-discovery-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAGnB,MAAM,6BAA6B,CAAC;AAIrC,IAAI,yBAAyB,GAKlB,IAAI,CAAC;AAEhB,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,MAA4C,EAC5C,aAAqB,EACrB,aAAuC,EACvC,MAAoB;IAEpB,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,MAAM,mBAAmB,CAC9B,OAAO,CAAC,yBAAyB,CAAC,aAAa,EAAE;QAC/C,aAAa;KACd,CAAC,EACF,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAA4C,EAC5C,QAAgB,EAChB,iBAAyB,EACzB,WAAmB,EACnB,MAAoB;IAEpB,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,MAAM,mBAAmB,CAC9B,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAClE,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,MAA4C;IAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,yBAAyB,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,yBAAyB,CAAC,OAAO,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC;QACpC,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC5D,IAAI,YAAY,CAAC;YACf,OAAO,EAAE,MAAM,CAAC,YAAY;SAC7B,CAAC;QACF,IAAI,aAAa,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC,aAAa;YAC7B,WAAW,EAAE,MAAM,CAAC,aAAa;SAClC,CAAC;QACF,IAAI,WAAW,CAAC;YACd,OAAO,EAAE,MAAM,CAAC,WAAW;YAC3B,YAAY,EAAE,MAAM,CAAC,gBAAgB;SACtC,CAAC;QACF,IAAI,eAAe,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,eAAe;YAC/B,OAAO,EAAE,MAAM,CAAC,eAAe;YAC/B,MAAM,EAAE,MAAM,CAAC,cAAc;SAC9B,CAAC;KACH,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEjD,yBAAyB,GAAG;QAC1B,QAAQ;QACR,OAAO;KACR,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAI,OAAmB,EAAE,MAAoB;IAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,OAAO,CAAC;IACvB,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"provider-discovery-runtime.js","sourceRoot":"","sources":["../../../../src/modules/provider/provider-discovery-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAGnB,MAAM,6BAA6B,CAAC;AAIrC,MAAM,oCAAoC,GAAG,KAAK,CAAC;AACnD,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAE9C,IAAI,yBAAyB,GAKlB,IAAI,CAAC;AAEhB,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAInC,CAAC;AACL,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAGtC,CAAC;AACL,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAG7B,CAAC;AACL,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEhE,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,MAA4C,EAC5C,aAAqB,EACrB,aAAuC,EACvC,MAAoB;IAEpB,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,iCAAiC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5E,MAAM,sBAAsB,GAAG,2BAA2B,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEvD,IACE,MAAM;QACN,MAAM,CAAC,sBAAsB,KAAK,sBAAsB;QACxD,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,oCAAoC,EACpE,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,MAAM,QAAQ,GAAG,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAE5D,IAAI,QAAQ,IAAI,QAAQ,CAAC,sBAAsB,KAAK,sBAAsB,EAAE,CAAC;QAC3E,OAAO,MAAM,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,yBAAyB,CAAC,aAAa,EAAE;QAC/D,aAAa;KACd,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACjB,uBAAuB,CAAC,GAAG,CAAC,UAAU,EAAE;YACtC,sBAAsB;YACtB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,MAAM;SACP,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACd,MAAM,MAAM,GAAG,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE1D,IAAI,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;YAChC,0BAA0B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,0BAA0B,CAAC,GAAG,CAAC,UAAU,EAAE;QACzC,sBAAsB;QACtB,OAAO;KACR,CAAC,CAAC;IAEH,OAAO,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAA4C,EAC5C,QAAgB,EAChB,iBAAyB,EACzB,WAAmB,EACnB,MAAoB;IAEpB,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,2BAA2B,CAC5C,MAAM,EACN,QAAQ,EACR,iBAAiB,EACjB,WAAW,CACZ,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEjD,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,8BAA8B,EAAE,CAAC;QAC7E,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEtD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,MAAM,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,WAAW,CAAC;SAC/E,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACd,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE;YAChC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,KAAK;SACN,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACZ,IAAI,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,EAAE,CAAC;YACrD,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,oBAAoB,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,4BAA4B,CACnC,MAA4C;IAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,yBAAyB,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,yBAAyB,CAAC,OAAO,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC;QACpC,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC5D,IAAI,YAAY,CAAC;YACf,OAAO,EAAE,MAAM,CAAC,YAAY;SAC7B,CAAC;QACF,IAAI,aAAa,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC,aAAa;YAC7B,WAAW,EAAE,MAAM,CAAC,aAAa;SAClC,CAAC;QACF,IAAI,WAAW,CAAC;YACd,OAAO,EAAE,MAAM,CAAC,WAAW;YAC3B,YAAY,EAAE,MAAM,CAAC,gBAAgB;SACtC,CAAC;QACF,IAAI,eAAe,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,eAAe;YAC/B,OAAO,EAAE,MAAM,CAAC,eAAe;YAC/B,MAAM,EAAE,MAAM,CAAC,cAAc;SAC9B,CAAC;KACH,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEjD,yBAAyB,GAAG;QAC1B,QAAQ;QACR,OAAO;KACR,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iCAAiC,CACxC,MAA4C,EAC5C,aAAqB;IAErB,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,2BAA2B,CAClC,MAA4C,EAC5C,QAAgB,EAChB,iBAAyB,EACzB,WAAmB;IAEnB,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,KAAK,iBAAiB,KAAK,WAAW,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,2BAA2B,CAAC,aAAuC;IAC1E,OAAO,IAAI,CAAC,SAAS,CACnB,CAAC,GAAG,aAAa,CAAC;SACf,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;QACvC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB,IAAI,IAAI;QAChE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;QACvC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;QAC5C,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;QAC5C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI;KACjD,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,aAAa,CAC5E,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,WAAW,EAAE,CACpE,CACF,CACJ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAI,OAAmB,EAAE,MAAoB;IAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,OAAO,CAAC;IACvB,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/modules/relay-tunnel/crypto/relay-tunnel-identity-service.d.ts

@@ -0,0 +1,10 @@
+import type { InstanceRelayTunnelIdentityRepository } from "../../../storage/repositories/instance-relay-tunnel-identity-repository.js";
+import type { InstanceRelayTunnelIdentity } from "../../../types/domain.js";
+export declare class RelayTunnelIdentityService {
+    private readonly repository;
+    constructor(repository: InstanceRelayTunnelIdentityRepository);
+    getIdentity(): InstanceRelayTunnelIdentity | null;
+    ensureIdentity(): InstanceRelayTunnelIdentity;
+}
+export declare function generateRelayTunnelIdentity(timestamp?: string): InstanceRelayTunnelIdentity;
+export declare function buildRelayTunnelPublicKeyFingerprint(publicKeyPem: string): string;

package/dist/server/modules/relay-tunnel/crypto/relay-tunnel-identity-service.js

@@ -0,0 +1,48 @@
+import { createHash, createPublicKey, generateKeyPairSync } from "node:crypto";
+import { nowIso } from "../../../shared/utils/time.js";
+export class RelayTunnelIdentityService {
+    repository;
+    constructor(repository) {
+        this.repository = repository;
+    }
+    getIdentity() {
+        return this.repository.findIdentity();
+    }
+    ensureIdentity() {
+        const existing = this.repository.findIdentity();
+        if (existing) {
+            return existing;
+        }
+        const createdAt = nowIso();
+        const generated = generateRelayTunnelIdentity(createdAt);
+        this.repository.upsertIdentity(generated);
+        return generated;
+    }
+}
+export function generateRelayTunnelIdentity(timestamp = nowIso()) {
+    const { privateKey, publicKey } = generateKeyPairSync("x25519");
+    const publicKeyPem = publicKey.export({
+        type: "spki",
+        format: "pem"
+    }).toString();
+    const privateKeyPem = privateKey.export({
+        type: "pkcs8",
+        format: "pem"
+    }).toString();
+    return {
+        keyAlgorithm: "x25519",
+        privateKeyPem,
+        publicKeyPem,
+        keyFingerprint: buildRelayTunnelPublicKeyFingerprint(publicKeyPem),
+        createdAt: timestamp,
+        updatedAt: timestamp
+    };
+}
+export function buildRelayTunnelPublicKeyFingerprint(publicKeyPem) {
+    const der = createPublicKey(publicKeyPem).export({
+        type: "spki",
+        format: "der"
+    });
+    return `SHA256:${createHash("sha256").update(der).digest("base64")}`;
+}
+//# sourceMappingURL=relay-tunnel-identity-service.js.map

package/dist/server/modules/relay-tunnel/crypto/relay-tunnel-identity-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-tunnel-identity-service.js","sourceRoot":"","sources":["../../../../../src/modules/relay-tunnel/crypto/relay-tunnel-identity-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,eAAe,EACf,mBAAmB,EACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAIvD,MAAM,OAAO,0BAA0B;IAElB;IADnB,YACmB,UAAiD;QAAjD,eAAU,GAAV,UAAU,CAAuC;IACjE,CAAC;IAEJ,WAAW;QACT,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAED,cAAc;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAEhD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAS,GAAG,MAAM,EAAE;IAC9D,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;QACpC,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK;KACd,CAAC,CAAC,QAAQ,EAAE,CAAC;IACd,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC;QACtC,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;KACd,CAAC,CAAC,QAAQ,EAAE,CAAC;IAEd,OAAO;QACL,YAAY,EAAE,QAAQ;QACtB,aAAa;QACb,YAAY;QACZ,cAAc,EAAE,oCAAoC,CAAC,YAAY,CAAC;QAClE,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,YAAoB;IACvE,MAAM,GAAG,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;QAC/C,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvE,CAAC"}

package/dist/server/modules/relay-tunnel/crypto/relay-tunnel-packets.d.ts

@@ -0,0 +1,48 @@
+export type RelayTunnelGatewayPacket = RelayTunnelHttpRequestPacket | RelayTunnelHttpResponsePacket | RelayTunnelWsOpenPacket | RelayTunnelWsOpenedPacket | RelayTunnelWsMessagePacket | RelayTunnelWsClosedPacket | RelayTunnelErrorPacket;
+export interface RelayTunnelHttpRequestPacket {
+    type: "http.request";
+    streamId: string;
+    method: string;
+    path: string;
+    headers: Record<string, string>;
+    bodyBase64Url: string | null;
+}
+export interface RelayTunnelHttpResponsePacket {
+    type: "http.response";
+    streamId: string;
+    status: number;
+    headers: Record<string, string>;
+    bodyBase64Url: string | null;
+}
+export interface RelayTunnelWsOpenPacket {
+    type: "ws.open";
+    streamId: string;
+    path: string;
+    headers: Record<string, string>;
+    protocols?: string[];
+}
+export interface RelayTunnelWsOpenedPacket {
+    type: "ws.opened";
+    streamId: string;
+    selectedProtocol?: string | null;
+}
+export interface RelayTunnelWsMessagePacket {
+    type: "ws.message";
+    streamId: string;
+    binary: boolean;
+    dataBase64Url: string;
+}
+export interface RelayTunnelWsClosedPacket {
+    type: "ws.closed";
+    streamId: string;
+    code: number;
+    reason: string | null;
+}
+export interface RelayTunnelErrorPacket {
+    type: "error";
+    streamId: string | null;
+    errorCode: string;
+    detail: string;
+}
+export declare function serializeRelayTunnelPacket(packet: RelayTunnelGatewayPacket): Buffer;
+export declare function deserializeRelayTunnelPacket(payload: Buffer | Uint8Array | string): RelayTunnelGatewayPacket;

package/dist/server/modules/relay-tunnel/crypto/relay-tunnel-packets.js

@@ -0,0 +1,11 @@
+export function serializeRelayTunnelPacket(packet) {
+    return Buffer.from(JSON.stringify(packet), "utf8");
+}
+export function deserializeRelayTunnelPacket(payload) {
+    const text = typeof payload === "string"
+        ? payload
+        : Buffer.from(payload).toString("utf8");
+    const parsed = JSON.parse(text);
+    return parsed;
+}
+//# sourceMappingURL=relay-tunnel-packets.js.map

package/dist/server/modules/relay-tunnel/crypto/relay-tunnel-packets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-tunnel-packets.js","sourceRoot":"","sources":["../../../../../src/modules/relay-tunnel/crypto/relay-tunnel-packets.ts"],"names":[],"mappings":"AA6DA,MAAM,UAAU,0BAA0B,CAAC,MAAgC;IACzE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAqC;IAChF,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC;IAE5D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/modules/relay-tunnel/crypto/relay-tunnel-protocol.d.ts

@@ -0,0 +1,74 @@
+import { type KeyObject } from "node:crypto";
+import type { InstanceRelayTunnelIdentity } from "../../../types/domain.js";
+export declare const RELAY_TUNNEL_PROTOCOL_VERSION = 1;
+export declare const RELAY_TUNNEL_CIPHER_SUITE: "x25519-hkdf-sha256-aes-256-gcm";
+export type RelayTunnelCipherSuite = typeof RELAY_TUNNEL_CIPHER_SUITE;
+export type RelayTunnelEndpointRole = "client" | "host";
+export type RelayTunnelFrameDirection = "client_to_host" | "host_to_client";
+export interface RelayTunnelClientHello {
+    version: number;
+    cipherSuite: RelayTunnelCipherSuite;
+    clientEphemeralPublicKey: string;
+    clientNonce: string;
+    expectedHostFingerprint: string;
+}
+export interface RelayTunnelServerHello {
+    version: number;
+    cipherSuite: RelayTunnelCipherSuite;
+    sessionId: string;
+    hostPublicKey: string;
+    hostKeyFingerprint: string;
+    serverEphemeralPublicKey: string;
+    serverNonce: string;
+    proof: string;
+}
+export interface RelayTunnelEncryptedFrame {
+    version: number;
+    cipherSuite: RelayTunnelCipherSuite;
+    sessionId: string;
+    direction: RelayTunnelFrameDirection;
+    sequence: number;
+    iv: string;
+    authTag: string;
+    ciphertext: string;
+}
+export interface RelayTunnelPendingClientHandshake {
+    readonly expectedHostPublicKey: string;
+    readonly expectedHostFingerprint: string;
+    readonly clientEphemeralPrivateKey: KeyObject;
+    readonly clientHello: RelayTunnelClientHello;
+}
+export interface RelayTunnelSession {
+    readonly sessionId: string;
+    readonly role: RelayTunnelEndpointRole;
+    readonly cipherSuite: RelayTunnelCipherSuite;
+    readonly peerHostFingerprint: string;
+    sendSequence: number;
+    receiveSequence: number;
+    readonly sendKey: Buffer;
+    readonly receiveKey: Buffer;
+}
+export declare class RelayTunnelProtocolError extends Error {
+    readonly code: "RELAY_TUNNEL_PROTOCOL_UNSUPPORTED" | "RELAY_TUNNEL_HOST_FINGERPRINT_MISMATCH" | "RELAY_TUNNEL_HOST_PUBLIC_KEY_MISMATCH" | "RELAY_TUNNEL_HANDSHAKE_PROOF_INVALID" | "RELAY_TUNNEL_FRAME_SESSION_MISMATCH" | "RELAY_TUNNEL_FRAME_DIRECTION_MISMATCH" | "RELAY_TUNNEL_FRAME_SEQUENCE_MISMATCH" | "RELAY_TUNNEL_FRAME_AUTH_INVALID";
+    constructor(code: "RELAY_TUNNEL_PROTOCOL_UNSUPPORTED" | "RELAY_TUNNEL_HOST_FINGERPRINT_MISMATCH" | "RELAY_TUNNEL_HOST_PUBLIC_KEY_MISMATCH" | "RELAY_TUNNEL_HANDSHAKE_PROOF_INVALID" | "RELAY_TUNNEL_FRAME_SESSION_MISMATCH" | "RELAY_TUNNEL_FRAME_DIRECTION_MISMATCH" | "RELAY_TUNNEL_FRAME_SEQUENCE_MISMATCH" | "RELAY_TUNNEL_FRAME_AUTH_INVALID", message: string);
+}
+export declare function createRelayTunnelClientHandshake(input: {
+    expectedHostPublicKey: string;
+    expectedHostFingerprint: string;
+}): {
+    pendingHandshake: RelayTunnelPendingClientHandshake;
+    clientHello: RelayTunnelClientHello;
+};
+export declare function acceptRelayTunnelClientHandshake(input: {
+    hostIdentity: InstanceRelayTunnelIdentity;
+    clientHello: RelayTunnelClientHello;
+}): {
+    serverHello: RelayTunnelServerHello;
+    session: RelayTunnelSession;
+};
+export declare function finalizeRelayTunnelClientHandshake(input: {
+    pendingHandshake: RelayTunnelPendingClientHandshake;
+    serverHello: RelayTunnelServerHello;
+}): RelayTunnelSession;
+export declare function encryptRelayTunnelFrame(session: RelayTunnelSession, payload: Buffer | Uint8Array | string): RelayTunnelEncryptedFrame;
+export declare function decryptRelayTunnelFrame(session: RelayTunnelSession, frame: RelayTunnelEncryptedFrame): Buffer;

package/dist/server/modules/relay-tunnel/crypto/relay-tunnel-protocol.js

@@ -0,0 +1,302 @@
+import { createCipheriv, createDecipheriv, createHash, createHmac, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { buildRelayTunnelPublicKeyFingerprint } from "./relay-tunnel-identity-service.js";
+export const RELAY_TUNNEL_PROTOCOL_VERSION = 1;
+export const RELAY_TUNNEL_CIPHER_SUITE = "x25519-hkdf-sha256-aes-256-gcm";
+const RELAY_TUNNEL_KEY_ALGORITHM = "x25519";
+const RELAY_TUNNEL_FRAME_ALGORITHM = "aes-256-gcm";
+const RELAY_TUNNEL_FRAME_IV_LENGTH = 12;
+const RELAY_TUNNEL_FRAME_KEY_LENGTH = 32;
+export class RelayTunnelProtocolError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "RelayTunnelProtocolError";
+    }
+}
+export function createRelayTunnelClientHandshake(input) {
+    const expectedHostFingerprint = normalizeRequiredText(input.expectedHostFingerprint, "expectedHostFingerprint");
+    const expectedHostPublicKey = normalizeRequiredText(input.expectedHostPublicKey, "expectedHostPublicKey");
+    const actualFingerprint = buildRelayTunnelPublicKeyFingerprint(expectedHostPublicKey);
+    if (actualFingerprint !== expectedHostFingerprint) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_HOST_FINGERPRINT_MISMATCH", "客户端持有的 Host 公钥和指纹不一致");
+    }
+    const { privateKey, publicKey } = generateKeyPairSync(RELAY_TUNNEL_KEY_ALGORITHM);
+    const clientHello = {
+        version: RELAY_TUNNEL_PROTOCOL_VERSION,
+        cipherSuite: RELAY_TUNNEL_CIPHER_SUITE,
+        clientEphemeralPublicKey: exportPublicKeyAsSpkiBase64Url(publicKey),
+        clientNonce: randomBytes(16).toString("base64url"),
+        expectedHostFingerprint
+    };
+    return {
+        pendingHandshake: {
+            expectedHostPublicKey,
+            expectedHostFingerprint,
+            clientEphemeralPrivateKey: privateKey,
+            clientHello
+        },
+        clientHello
+    };
+}
+export function acceptRelayTunnelClientHandshake(input) {
+    validateHandshakeEnvelope(input.clientHello);
+    if (input.clientHello.expectedHostFingerprint !== input.hostIdentity.keyFingerprint) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_HOST_FINGERPRINT_MISMATCH", "客户端请求的 Host 指纹和当前 Host 身份不匹配");
+    }
+    const clientEphemeralPublicKey = importPublicKeyFromSpkiBase64Url(input.clientHello.clientEphemeralPublicKey);
+    const hostStaticPrivateKey = createPrivateKey(input.hostIdentity.privateKeyPem);
+    const { privateKey: serverEphemeralPrivateKey, publicKey: serverEphemeralPublicKey } = generateKeyPairSync(RELAY_TUNNEL_KEY_ALGORITHM);
+    const serverHello = {
+        version: RELAY_TUNNEL_PROTOCOL_VERSION,
+        cipherSuite: RELAY_TUNNEL_CIPHER_SUITE,
+        sessionId: randomUUID(),
+        hostPublicKey: input.hostIdentity.publicKeyPem,
+        hostKeyFingerprint: input.hostIdentity.keyFingerprint,
+        serverEphemeralPublicKey: exportPublicKeyAsSpkiBase64Url(serverEphemeralPublicKey),
+        serverNonce: randomBytes(16).toString("base64url"),
+        proof: ""
+    };
+    const transcriptHash = buildHandshakeTranscriptHash(input.clientHello, serverHello);
+    const ikm = deriveHandshakeInputKeyMaterial({
+        clientEphemeralPublicKey,
+        clientEphemeralPrivateKey: null,
+        hostStaticPrivateKey,
+        hostStaticPublicKey: null,
+        serverEphemeralPrivateKey,
+        serverEphemeralPublicKey: null
+    });
+    serverHello.proof = createHandshakeProof(ikm, transcriptHash);
+    return {
+        serverHello,
+        session: createRelayTunnelSession({
+            sessionId: serverHello.sessionId,
+            role: "host",
+            peerHostFingerprint: input.hostIdentity.keyFingerprint,
+            ikm,
+            transcriptHash
+        })
+    };
+}
+export function finalizeRelayTunnelClientHandshake(input) {
+    validateHandshakeEnvelope(input.pendingHandshake.clientHello);
+    validateServerHelloEnvelope(input.serverHello);
+    if (input.serverHello.hostKeyFingerprint !== input.pendingHandshake.expectedHostFingerprint) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_HOST_FINGERPRINT_MISMATCH", "服务端返回的 Host 指纹和客户端预期不一致");
+    }
+    const actualFingerprint = buildRelayTunnelPublicKeyFingerprint(input.serverHello.hostPublicKey);
+    if (actualFingerprint !== input.pendingHandshake.expectedHostFingerprint) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_HOST_FINGERPRINT_MISMATCH", "服务端返回的 Host 公钥与指纹不一致");
+    }
+    if (normalizePem(input.serverHello.hostPublicKey) !== normalizePem(input.pendingHandshake.expectedHostPublicKey)) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_HOST_PUBLIC_KEY_MISMATCH", "服务端返回的 Host 公钥和客户端持有的公钥不一致");
+    }
+    const transcriptHash = buildHandshakeTranscriptHash(input.pendingHandshake.clientHello, input.serverHello);
+    const ikm = deriveHandshakeInputKeyMaterial({
+        clientEphemeralPublicKey: null,
+        clientEphemeralPrivateKey: input.pendingHandshake.clientEphemeralPrivateKey,
+        hostStaticPrivateKey: null,
+        hostStaticPublicKey: createPublicKey(input.pendingHandshake.expectedHostPublicKey),
+        serverEphemeralPrivateKey: null,
+        serverEphemeralPublicKey: importPublicKeyFromSpkiBase64Url(input.serverHello.serverEphemeralPublicKey)
+    });
+    const expectedProof = createHandshakeProof(ikm, transcriptHash);
+    const expectedProofBuffer = Buffer.from(expectedProof, "utf8");
+    const actualProofBuffer = Buffer.from(input.serverHello.proof, "utf8");
+    if (expectedProofBuffer.length !== actualProofBuffer.length
+        || !timingSafeEqual(expectedProofBuffer, actualProofBuffer)) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_HANDSHAKE_PROOF_INVALID", "服务端握手证明无效");
+    }
+    return createRelayTunnelSession({
+        sessionId: input.serverHello.sessionId,
+        role: "client",
+        peerHostFingerprint: input.serverHello.hostKeyFingerprint,
+        ikm,
+        transcriptHash
+    });
+}
+export function encryptRelayTunnelFrame(session, payload) {
+    const nextSequence = session.sendSequence + 1;
+    const direction = resolveSendDirection(session.role);
+    const iv = randomBytes(RELAY_TUNNEL_FRAME_IV_LENGTH);
+    const cipher = createCipheriv(RELAY_TUNNEL_FRAME_ALGORITHM, session.sendKey, iv);
+    const plaintext = normalizePayload(payload);
+    const aad = buildFrameAad({
+        sessionId: session.sessionId,
+        direction,
+        sequence: nextSequence
+    });
+    cipher.setAAD(aad);
+    const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    session.sendSequence = nextSequence;
+    return {
+        version: RELAY_TUNNEL_PROTOCOL_VERSION,
+        cipherSuite: RELAY_TUNNEL_CIPHER_SUITE,
+        sessionId: session.sessionId,
+        direction,
+        sequence: nextSequence,
+        iv: iv.toString("base64url"),
+        authTag: authTag.toString("base64url"),
+        ciphertext: ciphertext.toString("base64url")
+    };
+}
+export function decryptRelayTunnelFrame(session, frame) {
+    validateFrameEnvelope(frame);
+    if (frame.sessionId !== session.sessionId) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_FRAME_SESSION_MISMATCH", "加密帧的会话标识和当前会话不匹配");
+    }
+    const expectedDirection = resolveReceiveDirection(session.role);
+    if (frame.direction !== expectedDirection) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_FRAME_DIRECTION_MISMATCH", "加密帧方向和当前接收方向不匹配");
+    }
+    const expectedSequence = session.receiveSequence + 1;
+    if (frame.sequence !== expectedSequence) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_FRAME_SEQUENCE_MISMATCH", `加密帧序号错误，期望 ${expectedSequence}，实际 ${frame.sequence}`);
+    }
+    const decipher = createDecipheriv(RELAY_TUNNEL_FRAME_ALGORITHM, session.receiveKey, Buffer.from(frame.iv, "base64url"));
+    const aad = buildFrameAad({
+        sessionId: frame.sessionId,
+        direction: frame.direction,
+        sequence: frame.sequence
+    });
+    decipher.setAAD(aad);
+    decipher.setAuthTag(Buffer.from(frame.authTag, "base64url"));
+    try {
+        const plaintext = Buffer.concat([
+            decipher.update(Buffer.from(frame.ciphertext, "base64url")),
+            decipher.final()
+        ]);
+        session.receiveSequence = frame.sequence;
+        return plaintext;
+    }
+    catch {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_FRAME_AUTH_INVALID", "加密帧完整性校验失败");
+    }
+}
+function createRelayTunnelSession(input) {
+    const clientToHostKey = deriveSessionKey(input.ikm, input.transcriptHash, "codingns-relay-client-to-host");
+    const hostToClientKey = deriveSessionKey(input.ikm, input.transcriptHash, "codingns-relay-host-to-client");
+    return {
+        sessionId: input.sessionId,
+        role: input.role,
+        cipherSuite: RELAY_TUNNEL_CIPHER_SUITE,
+        peerHostFingerprint: input.peerHostFingerprint,
+        sendSequence: 0,
+        receiveSequence: 0,
+        sendKey: input.role === "client" ? clientToHostKey : hostToClientKey,
+        receiveKey: input.role === "client" ? hostToClientKey : clientToHostKey
+    };
+}
+function validateHandshakeEnvelope(hello) {
+    if (hello.version !== RELAY_TUNNEL_PROTOCOL_VERSION
+        || hello.cipherSuite !== RELAY_TUNNEL_CIPHER_SUITE) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_PROTOCOL_UNSUPPORTED", "客户端握手协议版本或套件不受支持");
+    }
+}
+function validateServerHelloEnvelope(hello) {
+    if (hello.version !== RELAY_TUNNEL_PROTOCOL_VERSION
+        || hello.cipherSuite !== RELAY_TUNNEL_CIPHER_SUITE) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_PROTOCOL_UNSUPPORTED", "服务端握手协议版本或套件不受支持");
+    }
+}
+function validateFrameEnvelope(frame) {
+    if (frame.version !== RELAY_TUNNEL_PROTOCOL_VERSION
+        || frame.cipherSuite !== RELAY_TUNNEL_CIPHER_SUITE) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_PROTOCOL_UNSUPPORTED", "加密帧协议版本或套件不受支持");
+    }
+}
+function deriveHandshakeInputKeyMaterial(input) {
+    const staticShared = input.hostStaticPrivateKey
+        ? diffieHellman({
+            privateKey: input.hostStaticPrivateKey,
+            publicKey: input.clientEphemeralPublicKey
+        })
+        : diffieHellman({
+            privateKey: input.clientEphemeralPrivateKey,
+            publicKey: input.hostStaticPublicKey
+        });
+    const ephemeralShared = input.serverEphemeralPrivateKey
+        ? diffieHellman({
+            privateKey: input.serverEphemeralPrivateKey,
+            publicKey: input.clientEphemeralPublicKey
+        })
+        : diffieHellman({
+            privateKey: input.clientEphemeralPrivateKey,
+            publicKey: input.serverEphemeralPublicKey
+        });
+    return Buffer.concat([staticShared, ephemeralShared]);
+}
+function buildHandshakeTranscriptHash(clientHello, serverHello) {
+    return createHash("sha256")
+        .update(JSON.stringify({
+        version: RELAY_TUNNEL_PROTOCOL_VERSION,
+        cipherSuite: RELAY_TUNNEL_CIPHER_SUITE,
+        clientEphemeralPublicKey: clientHello.clientEphemeralPublicKey,
+        clientNonce: clientHello.clientNonce,
+        expectedHostFingerprint: clientHello.expectedHostFingerprint,
+        hostPublicKey: normalizePem(serverHello.hostPublicKey),
+        hostKeyFingerprint: serverHello.hostKeyFingerprint,
+        serverEphemeralPublicKey: serverHello.serverEphemeralPublicKey,
+        serverNonce: serverHello.serverNonce,
+        sessionId: serverHello.sessionId
+    }))
+        .digest();
+}
+function createHandshakeProof(ikm, transcriptHash) {
+    const proofKey = hkdfBuffer(ikm, transcriptHash, "codingns-relay-handshake-proof");
+    return createHmac("sha256", proofKey)
+        .update(transcriptHash)
+        .digest("base64url");
+}
+function deriveSessionKey(ikm, transcriptHash, info) {
+    return hkdfBuffer(ikm, transcriptHash, info);
+}
+function hkdfBuffer(ikm, salt, info) {
+    return Buffer.from(hkdfSync("sha256", ikm, salt, Buffer.from(info, "utf8"), RELAY_TUNNEL_FRAME_KEY_LENGTH));
+}
+function buildFrameAad(input) {
+    return Buffer.from(JSON.stringify({
+        version: RELAY_TUNNEL_PROTOCOL_VERSION,
+        cipherSuite: RELAY_TUNNEL_CIPHER_SUITE,
+        sessionId: input.sessionId,
+        direction: input.direction,
+        sequence: input.sequence
+    }), "utf8");
+}
+function exportPublicKeyAsSpkiBase64Url(key) {
+    return key.export({
+        type: "spki",
+        format: "der"
+    }).toString("base64url");
+}
+function importPublicKeyFromSpkiBase64Url(value) {
+    return createPublicKey({
+        key: Buffer.from(value, "base64url"),
+        type: "spki",
+        format: "der"
+    });
+}
+function normalizePayload(payload) {
+    if (typeof payload === "string") {
+        return Buffer.from(payload, "utf8");
+    }
+    return Buffer.from(payload);
+}
+function resolveSendDirection(role) {
+    return role === "client" ? "client_to_host" : "host_to_client";
+}
+function resolveReceiveDirection(role) {
+    return role === "client" ? "host_to_client" : "client_to_host";
+}
+function normalizeRequiredText(value, field) {
+    const normalized = value.trim();
+    if (!normalized) {
+        throw new RelayTunnelProtocolError("RELAY_TUNNEL_PROTOCOL_UNSUPPORTED", `${field} 不能为空`);
+    }
+    return normalized;
+}
+function normalizePem(value) {
+    return value.trim().replace(/\r\n/g, "\n");
+}
+//# sourceMappingURL=relay-tunnel-protocol.js.map

package/dist/server/modules/relay-tunnel/crypto/relay-tunnel-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-tunnel-protocol.js","sourceRoot":"","sources":["../../../../../src/modules/relay-tunnel/crypto/relay-tunnel-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,QAAQ,EACR,WAAW,EACX,UAAU,EACV,eAAe,EAEhB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAE1F,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,yBAAyB,GAAG,gCAAyC,CAAC;AAEnF,MAAM,0BAA0B,GAAG,QAAQ,CAAC;AAC5C,MAAM,4BAA4B,GAAG,aAAa,CAAC;AACnD,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAsDzC,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAEtC;IADX,YACW,IAQ4B,EACrC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAXN,SAAI,GAAJ,IAAI,CAQwB;QAIrC,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,UAAU,gCAAgC,CAAC,KAGhD;IAIC,MAAM,uBAAuB,GAAG,qBAAqB,CACnD,KAAK,CAAC,uBAAuB,EAC7B,yBAAyB,CAC1B,CAAC;IACF,MAAM,qBAAqB,GAAG,qBAAqB,CACjD,KAAK,CAAC,qBAAqB,EAC3B,uBAAuB,CACxB,CAAC;IACF,MAAM,iBAAiB,GAAG,oCAAoC,CAAC,qBAAqB,CAAC,CAAC;IAEtF,IAAI,iBAAiB,KAAK,uBAAuB,EAAE,CAAC;QAClD,MAAM,IAAI,wBAAwB,CAChC,wCAAwC,EACxC,sBAAsB,CACvB,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,0BAA0B,CAAC,CAAC;IAClF,MAAM,WAAW,GAA2B;QAC1C,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,yBAAyB;QACtC,wBAAwB,EAAE,8BAA8B,CAAC,SAAS,CAAC;QACnE,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClD,uBAAuB;KACxB,CAAC;IAEF,OAAO;QACL,gBAAgB,EAAE;YAChB,qBAAqB;YACrB,uBAAuB;YACvB,yBAAyB,EAAE,UAAU;YACrC,WAAW;SACZ;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAGhD;IAIC,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAE7C,IAAI,KAAK,CAAC,WAAW,CAAC,uBAAuB,KAAK,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;QACpF,MAAM,IAAI,wBAAwB,CAChC,wCAAwC,EACxC,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IAED,MAAM,wBAAwB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAC3C,CAAC;IACF,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAChF,MAAM,EAAE,UAAU,EAAE,yBAAyB,EAAE,SAAS,EAAE,wBAAwB,EAAE,GAClF,mBAAmB,CAAC,0BAA0B,CAAC,CAAC;IAClD,MAAM,WAAW,GAA2B;QAC1C,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,yBAAyB;QACtC,SAAS,EAAE,UAAU,EAAE;QACvB,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,YAAY;QAC9C,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;QACrD,wBAAwB,EAAE,8BAA8B,CAAC,wBAAwB,CAAC;QAClF,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClD,KAAK,EAAE,EAAE;KACV,CAAC;IACF,MAAM,cAAc,GAAG,4BAA4B,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,+BAA+B,CAAC;QAC1C,wBAAwB;QACxB,yBAAyB,EAAE,IAAI;QAC/B,oBAAoB;QACpB,mBAAmB,EAAE,IAAI;QACzB,yBAAyB;QACzB,wBAAwB,EAAE,IAAI;KAC/B,CAAC,CAAC;IAEH,WAAW,CAAC,KAAK,GAAG,oBAAoB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAE9D,OAAO;QACL,WAAW;QACX,OAAO,EAAE,wBAAwB,CAAC;YAChC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,IAAI,EAAE,MAAM;YACZ,mBAAmB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;YACtD,GAAG;YACH,cAAc;SACf,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAGlD;IACC,yBAAyB,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC9D,2BAA2B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAE/C,IAAI,KAAK,CAAC,WAAW,CAAC,kBAAkB,KAAK,KAAK,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,CAAC;QAC5F,MAAM,IAAI,wBAAwB,CAChC,wCAAwC,EACxC,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,oCAAoC,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAEhG,IAAI,iBAAiB,KAAK,KAAK,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,CAAC;QACzE,MAAM,IAAI,wBAAwB,CAChC,wCAAwC,EACxC,sBAAsB,CACvB,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,wBAAwB,CAChC,uCAAuC,EACvC,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,4BAA4B,CACjD,KAAK,CAAC,gBAAgB,CAAC,WAAW,EAClC,KAAK,CAAC,WAAW,CAClB,CAAC;IACF,MAAM,GAAG,GAAG,+BAA+B,CAAC;QAC1C,wBAAwB,EAAE,IAAI;QAC9B,yBAAyB,EAAE,KAAK,CAAC,gBAAgB,CAAC,yBAAyB;QAC3E,oBAAoB,EAAE,IAAI;QAC1B,mBAAmB,EAAE,eAAe,CAAC,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,CAAC;QAClF,yBAAyB,EAAE,IAAI;QAC/B,wBAAwB,EAAE,gCAAgC,CACxD,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAC3C;KACF,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAChE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAEvE,IACE,mBAAmB,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM;WACpD,CAAC,eAAe,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,sCAAsC,EACtC,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,OAAO,wBAAwB,CAAC;QAC9B,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS;QACtC,IAAI,EAAE,QAAQ;QACd,mBAAmB,EAAE,KAAK,CAAC,WAAW,CAAC,kBAAkB;QACzD,GAAG;QACH,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAA2B,EAC3B,OAAqC;IAErC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,WAAW,CAAC,4BAA4B,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC,4BAA4B,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,aAAa,CAAC;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;QACT,QAAQ,EAAE,YAAY;KACvB,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAEnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;IAEpC,OAAO;QACL,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,yBAAyB;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;QACT,QAAQ,EAAE,YAAY;QACtB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAA2B,EAC3B,KAAgC;IAEhC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAE7B,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,wBAAwB,CAChC,qCAAqC,EACrC,kBAAkB,CACnB,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhE,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,wBAAwB,CAChC,uCAAuC,EACvC,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,eAAe,GAAG,CAAC,CAAC;IAErD,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QACxC,MAAM,IAAI,wBAAwB,CAChC,sCAAsC,EACtC,cAAc,gBAAgB,OAAO,KAAK,CAAC,QAAQ,EAAE,CACtD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,4BAA4B,EAC5B,OAAO,CAAC,UAAU,EAClB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CACnC,CAAC;IACF,MAAM,GAAG,GAAG,aAAa,CAAC;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAE7D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAC3D,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QACH,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,wBAAwB,CAChC,iCAAiC,EACjC,YAAY,CACb,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAMjC;IACC,MAAM,eAAe,GAAG,gBAAgB,CACtC,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,cAAc,EACpB,+BAA+B,CAChC,CAAC;IACF,MAAM,eAAe,GAAG,gBAAgB,CACtC,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,cAAc,EACpB,+BAA+B,CAChC,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,yBAAyB;QACtC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,YAAY,EAAE,CAAC;QACf,eAAe,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;QACpE,UAAU,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA6B;IAC9D,IACE,KAAK,CAAC,OAAO,KAAK,6BAA6B;WAC5C,KAAK,CAAC,WAAW,KAAK,yBAAyB,EAClD,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,mCAAmC,EACnC,kBAAkB,CACnB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,KAA6B;IAChE,IACE,KAAK,CAAC,OAAO,KAAK,6BAA6B;WAC5C,KAAK,CAAC,WAAW,KAAK,yBAAyB,EAClD,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,mCAAmC,EACnC,kBAAkB,CACnB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAgC;IAC7D,IACE,KAAK,CAAC,OAAO,KAAK,6BAA6B;WAC5C,KAAK,CAAC,WAAW,KAAK,yBAAyB,EAClD,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,mCAAmC,EACnC,gBAAgB,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,KAOxC;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,oBAAoB;QAC7C,CAAC,CAAC,aAAa,CAAC;YACd,UAAU,EAAE,KAAK,CAAC,oBAAoB;YACtC,SAAS,EAAE,KAAK,CAAC,wBAAyB;SAC3C,CAAC;QACF,CAAC,CAAC,aAAa,CAAC;YACd,UAAU,EAAE,KAAK,CAAC,yBAA0B;YAC5C,SAAS,EAAE,KAAK,CAAC,mBAAoB;SACtC,CAAC,CAAC;IACL,MAAM,eAAe,GAAG,KAAK,CAAC,yBAAyB;QACrD,CAAC,CAAC,aAAa,CAAC;YACd,UAAU,EAAE,KAAK,CAAC,yBAAyB;YAC3C,SAAS,EAAE,KAAK,CAAC,wBAAyB;SAC3C,CAAC;QACF,CAAC,CAAC,aAAa,CAAC;YACd,UAAU,EAAE,KAAK,CAAC,yBAA0B;YAC5C,SAAS,EAAE,KAAK,CAAC,wBAAyB;SAC3C,CAAC,CAAC;IAEL,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,4BAA4B,CACnC,WAAmC,EACnC,WAAmC;IAEnC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,yBAAyB;QACtC,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;QAC9D,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,uBAAuB,EAAE,WAAW,CAAC,uBAAuB;QAC5D,aAAa,EAAE,YAAY,CAAC,WAAW,CAAC,aAAa,CAAC;QACtD,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;QAClD,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;QAC9D,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,SAAS,EAAE,WAAW,CAAC,SAAS;KACjC,CAAC,CACH;SACA,MAAM,EAAE,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW,EAAE,cAAsB;IAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,gCAAgC,CAAC,CAAC;IAEnF,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAClC,MAAM,CAAC,cAAc,CAAC;SACtB,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,cAAsB,EAAE,IAAY;IACzE,OAAO,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IACzD,OAAO,MAAM,CAAC,IAAI,CAChB,QAAQ,CACN,QAAQ,EACR,GAAG,EACH,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EACzB,6BAA6B,CAC9B,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAItB;IACC,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,yBAAyB;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,EACF,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,GAAc;IACpD,OAAO,GAAG,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK;KACd,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAa;IACrD,OAAO,eAAe,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC;QACpC,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAqC;IAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,IAA6B;IACzD,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACjE,CAAC;AAED,SAAS,uBAAuB,CAAC,IAA6B;IAC5D,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACjE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAEhC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,wBAAwB,CAChC,mCAAmC,EACnC,GAAG,KAAK,OAAO,CAChB,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC"}