@limrun/api 0.48.4 → 0.49.0

package/destination-tunnel.d.mts

@@ -1,20 +1,87 @@
+export { DestinationTunnelProtocolError } from "./internal/destination-tunnel-wire-reader.mjs";
 export declare const DESTINATION_TUNNEL_VERSION = 1;
 export declare const DESTINATION_TUNNEL_MAX_ROUTES = 10;
+export declare const DESTINATION_TUNNEL_MAX_DOMAINS = 64;
 export declare const DESTINATION_TUNNEL_CONN_ID_HEADER_BYTES = 4;
+/**
+ * IPv4 range used by the device side for synthetic (fake) DNS answers of
+ * matched domain selectors.
+ */
+export declare const DESTINATION_TUNNEL_FAKE_RANGE = "198.18.0.0/15";
+/** Upper bound for per-flow receive windows advertised in open/openOk. */
+export declare const DESTINATION_TUNNEL_MAX_WINDOW: number;
+/** Default receive window advertised by generic SDK tunnel clients. */
+export declare const DESTINATION_TUNNEL_DEFAULT_WINDOW: number;
+/** Upper bound for a single windowUpdate increment. */
+export declare const DESTINATION_TUNNEL_MAX_WINDOW_INCREMENT = 2147483647;
+export declare const DESTINATION_TUNNEL_DEFAULT_MAX_BODY_BYTES: number;
+export declare const DESTINATION_TUNNEL_MAX_BODY_BYTES: number;
+export declare const DESTINATION_TUNNEL_DEFAULT_TTL_SECONDS: number;
+export declare const DESTINATION_TUNNEL_MAX_TTL_SECONDS: number;
 export interface DestinationTunnelRoute {
     host: string;
     port: number;
 }
-export type DestinationTunnelOpenFailureReason = 'dns_not_found' | 'dns_temporary_failure' | 'connection_refused' | 'connection_reset' | 'connection_timed_out' | 'unreachable' | 'permission_denied' | 'resource_exhausted' | 'route_not_allowed' | 'cancelled' | 'internal' | (string & {});
+/** Canonical selector values carried by the public protocol. */
+export type DestinationTunnelSelectors = string[];
+/** Internal classification used to enforce and dial canonical selectors. */
+export interface DestinationTunnelSelectorCatalog {
+    routes?: DestinationTunnelRoute[];
+    domains?: string[];
+}
+export interface DestinationTunnelInspectionConfig {
+    enabled: boolean;
+    captureBodies: boolean;
+    maxBodyBytes: number;
+    persist: boolean;
+    ttlSeconds: number;
+}
+export type DestinationTunnelTransportType = 'tcp' | 'tls';
+export type DestinationTunnelTransportRequest = {
+    type: 'tcp';
+} | {
+    type: 'tls';
+    serverName: string;
+    alpnProtocols: string[];
+};
+export interface DestinationTunnelTransportResult {
+    type: DestinationTunnelTransportType;
+    alpnProtocol?: string;
+    remoteAddress?: string;
+    dnsMs?: number;
+    connectMs?: number;
+    tlsMs?: number;
+}
+export type DestinationTunnelSelectorKind = 'route' | 'domain';
+export type DestinationTunnelBindStatus = 'ok' | 'conflict' | 'error';
+/** Per-address bind outcome the device server reports for exact routes. */
+export interface DestinationTunnelBindReport {
+    address: string;
+    status: DestinationTunnelBindStatus;
+    osCode?: string;
+}
+/** Normalized selector the server acknowledges in `ready` and status. */
+export interface DestinationTunnelSelectorReport {
+    id: string;
+    kind: DestinationTunnelSelectorKind;
+    value: string;
+    binds?: DestinationTunnelBindReport[];
+}
+export type DestinationTunnelOpenFailureReason = 'dns_not_found' | 'dns_temporary_failure' | 'connection_refused' | 'connection_reset' | 'connection_timed_out' | 'unreachable' | 'permission_denied' | 'resource_exhausted' | 'selector_not_allowed' | 'tls_handshake_failed' | 'tls_validation_failed' | 'tls_protocol_error' | 'cancelled' | 'internal' | (string & {});
 export type DestinationTunnelResetReason = 'cancelled' | 'connection_error' | 'protocol_error' | 'resource_exhausted' | 'internal' | (string & {});
-export type DestinationTunnelSessionErrorCode = 'unsupported_version' | 'invalid_message' | 'invalid_route' | 'route_capacity' | 'already_active' | 'unavailable' | 'internal' | (string & {});
+export type DestinationTunnelSessionErrorCode = 'unsupported_version' | 'invalid_message' | 'invalid_selector' | 'already_active' | 'unavailable' | 'internal' | (string & {});
 export type DestinationTunnelClientMessage = {
     type: 'start';
     version: number;
-    routes: DestinationTunnelRoute[];
+    selectors: DestinationTunnelSelectors;
+    inspection: DestinationTunnelInspectionConfig;
+    /** Default per-flow receive window this client grants. */
+    window: number;
 } | {
     type: 'openOk';
     connId: number;
+    transport: DestinationTunnelTransportResult;
+    window: number;
 } | {
     type: 'openFail';
     connId: number;
@@ -28,18 +95,26 @@ export type DestinationTunnelClientMessage = {
     connId: number;
     reason: DestinationTunnelResetReason;
     osCode?: string;
+} | {
+    type: 'windowUpdate';
+    connId: number;
+    increment: number;
 };
 export type DestinationTunnelServerMessage = {
     type: 'ready';
     version: number;
     tunnelId: string;
+    selectors: DestinationTunnelSelectorReport[];
+    configHash: string;
 } | {
     type: 'open';
     connId: number;
-    routeId: string;
+    selectorId: string;
     host: string;
     port: number;
-    proto: 'tcp';
+    transport: DestinationTunnelTransportRequest;
+    /** Server's receive window for this flow. */
+    window: number;
 } | {
     type: 'fin';
     connId: number;
@@ -48,27 +123,57 @@ export type DestinationTunnelServerMessage = {
     connId: number;
     reason: DestinationTunnelResetReason;
     osCode?: string;
+} | {
+    type: 'windowUpdate';
+    connId: number;
+    increment: number;
 } | {
     type: 'error';
     code: DestinationTunnelSessionErrorCode;
 };
-export type DestinationTunnelRouteErrorCode = 'empty' | 'too_many' | 'invalid_host' | 'invalid_port' | 'duplicate';
-export declare class DestinationTunnelRouteError extends Error {
-    readonly code: DestinationTunnelRouteErrorCode;
-    constructor(code: DestinationTunnelRouteErrorCode, message: string);
-}
-export declare class DestinationTunnelProtocolError extends Error {
-    constructor(message: string);
+export type DestinationTunnelSelectorErrorCode = 'empty' | 'too_many' | 'invalid_host' | 'invalid_port' | 'invalid_domain' | 'duplicate';
+export declare class DestinationTunnelSelectorError extends Error {
+    readonly code: DestinationTunnelSelectorErrorCode;
+    constructor(code: DestinationTunnelSelectorErrorCode, message: string);
 }
 export declare function encodeDestinationTunnelDataFrame(connId: number, payload: Buffer): Buffer;
 export declare function decodeDestinationTunnelDataFrame(frame: Buffer): {
     connId: number;
     payload: Buffer;
 };
-export declare function validateDestinationTunnelRoutes(routes: readonly DestinationTunnelRoute[]): DestinationTunnelRoute[];
+export declare function validateDestinationTunnelRoutes(routes: readonly DestinationTunnelRoute[], options?: {
+    minPort?: number;
+}): DestinationTunnelRoute[];
+/**
+ * Validate and canonicalize a full selector set. Selector policy specific to
+ * one product (such as the Android bind-listener minimum route port) is
+ * expressed via options rather than separate message shapes.
+ */
+export declare function validateDestinationTunnelSelectors(selectors: readonly string[], options?: {
+    minRoutePort?: number;
+}): DestinationTunnelSelectors;
+export declare function classifyDestinationTunnelSelectors(selectors: readonly string[], options?: {
+    minRoutePort?: number;
+}): DestinationTunnelSelectorCatalog;
+export declare function validateDestinationTunnelDomains(domains: readonly string[]): string[];
+/**
+ * Deterministic hash of the canonical selector configuration. Servers echo it
+ * in `ready` so clients can detect config mismatches across reconnects. The
+ * hashed JSON has fixed key order.
+ */
+export declare function destinationTunnelConfigHash(selectors: DestinationTunnelSelectors, inspection?: DestinationTunnelInspectionConfig): string;
+export declare function normalizeDestinationTunnelInspection(inspection: Partial<DestinationTunnelInspectionConfig>): DestinationTunnelInspectionConfig;
+export declare function disabledDestinationTunnelInspection(): DestinationTunnelInspectionConfig;
+/** Selector IDs are one-based positions in the canonical selector array. */
+export declare function destinationTunnelSelectorIds(selectors: DestinationTunnelSelectors): string[];
+export declare function destinationTunnelDomainMatches(pattern: string, host: string): boolean;
+/**
+ * Verify a server OPEN against the negotiated selectors. Every OPEN must name
+ * a known selector ID and a target that the selector actually covers.
+ */
 export declare function assertDestinationTunnelOpenAllowed(message: Extract<DestinationTunnelServerMessage, {
     type: 'open';
-}>, routes: readonly DestinationTunnelRoute[]): void;
+}>, selectors: DestinationTunnelSelectors): DestinationTunnelSelectorKind;
 export declare function assertDestinationTunnelReady(message: Extract<DestinationTunnelServerMessage, {
     type: 'ready';
 }>): void;

package/destination-tunnel.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"destination-tunnel.d.mts","sourceRoot":"","sources":["src/destination-tunnel.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,eAAO,MAAM,uCAAuC,IAAI,CAAC;AAEzD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,kCAAkC,GAC1C,eAAe,GACf,uBAAuB,GACvB,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,aAAa,GACb,mBAAmB,GACnB,oBAAoB,GACpB,mBAAmB,GACnB,WAAW,GACX,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,4BAA4B,GACpC,WAAW,GACX,kBAAkB,GAClB,gBAAgB,GAChB,oBAAoB,GACpB,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,iCAAiC,GACzC,qBAAqB,GACrB,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,aAAa,GACb,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,8BAA8B,GACtC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,sBAAsB,EAAE,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,kCAAkC,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,MAAM,MAAM,8BAA8B,GACtC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;CACd,GACD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,iCAAiC,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,+BAA+B,GACvC,OAAO,GACP,UAAU,GACV,cAAc,GACd,cAAc,GACd,WAAW,CAAC;AAEhB,qBAAa,2BAA4B,SAAQ,KAAK;IAElD,QAAQ,CAAC,IAAI,EAAE,+BAA+B;gBAArC,IAAI,EAAE,+BAA+B,EAC9C,OAAO,EAAE,MAAM;CAKlB;AAED,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CASxF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAQA;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,SAAS,sBAAsB,EAAE,GACxC,sBAAsB,EAAE,CA0B1B;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAClE,MAAM,EAAE,SAAS,sBAAsB,EAAE,GACxC,IAAI,CAQN;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,GAClE,IAAI,CAIN;AAED,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,8BAA8B,GAAG,MAAM,CA2BpG;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAkCnG"}
+{"version":3,"file":"destination-tunnel.d.mts","sourceRoot":"","sources":["src/destination-tunnel.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,8BAA8B,EAAE,sDAAkD;AAE3F,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,eAAO,MAAM,uCAAuC,IAAI,CAAC;AACzD;;;GAGG;AACH,eAAO,MAAM,6BAA6B,kBAAkB,CAAC;AAC7D,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAC9D,uEAAuE;AACvE,eAAO,MAAM,iCAAiC,QAAc,CAAC;AAC7D,uDAAuD;AACvD,eAAO,MAAM,uCAAuC,aAAc,CAAC;AACnE,eAAO,MAAM,yCAAyC,QAAmB,CAAC;AAC1E,eAAO,MAAM,iCAAiC,QAAmB,CAAC;AAClE,eAAO,MAAM,sCAAsC,QAAe,CAAC;AACnE,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AAEpE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,gEAAgE;AAChE,MAAM,MAAM,0BAA0B,GAAG,MAAM,EAAE,CAAC;AAElD,4EAA4E;AAC5E,MAAM,WAAW,gCAAgC;IAC/C,MAAM,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,8BAA8B,GAAG,KAAK,GAAG,KAAK,CAAC;AAE3D,MAAM,MAAM,iCAAiC,GACzC;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEN,MAAM,WAAW,gCAAgC;IAC/C,IAAI,EAAE,8BAA8B,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/D,MAAM,MAAM,2BAA2B,GAAG,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC;AAEtE,2EAA2E;AAC3E,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,2BAA2B,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,yEAAyE;AACzE,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,6BAA6B,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,2BAA2B,EAAE,CAAC;CACvC;AAED,MAAM,MAAM,kCAAkC,GAC1C,eAAe,GACf,uBAAuB,GACvB,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,aAAa,GACb,mBAAmB,GACnB,oBAAoB,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,uBAAuB,GACvB,oBAAoB,GACpB,WAAW,GACX,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,4BAA4B,GACpC,WAAW,GACX,kBAAkB,GAClB,gBAAgB,GAChB,oBAAoB,GACpB,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,iCAAiC,GACzC,qBAAqB,GACrB,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,aAAa,GACb,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,8BAA8B,GACtC;IACE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,0BAA0B,CAAC;IACtC,UAAU,EAAE,iCAAiC,CAAC;IAC9C,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,gCAAgC,CAAC;IAC5C,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,kCAAkC,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,8BAA8B,GACtC;IACE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,+BAA+B,EAAE,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC;CACpB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,iCAAiC,CAAC;IAC7C,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,iCAAiC,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,kCAAkC,GAC1C,OAAO,GACP,UAAU,GACV,cAAc,GACd,cAAc,GACd,gBAAgB,GAChB,WAAW,CAAC;AAEhB,qBAAa,8BAA+B,SAAQ,KAAK;IAErD,QAAQ,CAAC,IAAI,EAAE,kCAAkC;gBAAxC,IAAI,EAAE,kCAAkC,EACjD,OAAO,EAAE,MAAM;CAKlB;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CASxF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAQA;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,SAAS,sBAAsB,EAAE,EACzC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,sBAAsB,EAAE,CA0B1B;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,0BAA0B,CAkC5B;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,gCAAgC,CAalC;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAkBrF;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,0BAA0B,EACrC,UAAU,GAAE,iCAAyE,GACpF,MAAM,CAcR;AAED,wBAAgB,oCAAoC,CAClD,UAAU,EAAE,OAAO,CAAC,iCAAiC,CAAC,GACrD,iCAAiC,CA2BnC;AAED,wBAAgB,mCAAmC,IAAI,iCAAiC,CAEvF;AAED,4EAA4E;AAC5E,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,0BAA0B,GAAG,MAAM,EAAE,CAE5F;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOrF;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAClE,SAAS,EAAE,0BAA0B,GACpC,6BAA6B,CAoB/B;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,GAClE,IAAI,CAIN;AAED,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,8BAA8B,GAAG,MAAM,CAqDpG;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CA6CnG"}

package/destination-tunnel.d.ts

@@ -1,20 +1,87 @@
+export { DestinationTunnelProtocolError } from "./internal/destination-tunnel-wire-reader.js";
 export declare const DESTINATION_TUNNEL_VERSION = 1;
 export declare const DESTINATION_TUNNEL_MAX_ROUTES = 10;
+export declare const DESTINATION_TUNNEL_MAX_DOMAINS = 64;
 export declare const DESTINATION_TUNNEL_CONN_ID_HEADER_BYTES = 4;
+/**
+ * IPv4 range used by the device side for synthetic (fake) DNS answers of
+ * matched domain selectors.
+ */
+export declare const DESTINATION_TUNNEL_FAKE_RANGE = "198.18.0.0/15";
+/** Upper bound for per-flow receive windows advertised in open/openOk. */
+export declare const DESTINATION_TUNNEL_MAX_WINDOW: number;
+/** Default receive window advertised by generic SDK tunnel clients. */
+export declare const DESTINATION_TUNNEL_DEFAULT_WINDOW: number;
+/** Upper bound for a single windowUpdate increment. */
+export declare const DESTINATION_TUNNEL_MAX_WINDOW_INCREMENT = 2147483647;
+export declare const DESTINATION_TUNNEL_DEFAULT_MAX_BODY_BYTES: number;
+export declare const DESTINATION_TUNNEL_MAX_BODY_BYTES: number;
+export declare const DESTINATION_TUNNEL_DEFAULT_TTL_SECONDS: number;
+export declare const DESTINATION_TUNNEL_MAX_TTL_SECONDS: number;
 export interface DestinationTunnelRoute {
     host: string;
     port: number;
 }
-export type DestinationTunnelOpenFailureReason = 'dns_not_found' | 'dns_temporary_failure' | 'connection_refused' | 'connection_reset' | 'connection_timed_out' | 'unreachable' | 'permission_denied' | 'resource_exhausted' | 'route_not_allowed' | 'cancelled' | 'internal' | (string & {});
+/** Canonical selector values carried by the public protocol. */
+export type DestinationTunnelSelectors = string[];
+/** Internal classification used to enforce and dial canonical selectors. */
+export interface DestinationTunnelSelectorCatalog {
+    routes?: DestinationTunnelRoute[];
+    domains?: string[];
+}
+export interface DestinationTunnelInspectionConfig {
+    enabled: boolean;
+    captureBodies: boolean;
+    maxBodyBytes: number;
+    persist: boolean;
+    ttlSeconds: number;
+}
+export type DestinationTunnelTransportType = 'tcp' | 'tls';
+export type DestinationTunnelTransportRequest = {
+    type: 'tcp';
+} | {
+    type: 'tls';
+    serverName: string;
+    alpnProtocols: string[];
+};
+export interface DestinationTunnelTransportResult {
+    type: DestinationTunnelTransportType;
+    alpnProtocol?: string;
+    remoteAddress?: string;
+    dnsMs?: number;
+    connectMs?: number;
+    tlsMs?: number;
+}
+export type DestinationTunnelSelectorKind = 'route' | 'domain';
+export type DestinationTunnelBindStatus = 'ok' | 'conflict' | 'error';
+/** Per-address bind outcome the device server reports for exact routes. */
+export interface DestinationTunnelBindReport {
+    address: string;
+    status: DestinationTunnelBindStatus;
+    osCode?: string;
+}
+/** Normalized selector the server acknowledges in `ready` and status. */
+export interface DestinationTunnelSelectorReport {
+    id: string;
+    kind: DestinationTunnelSelectorKind;
+    value: string;
+    binds?: DestinationTunnelBindReport[];
+}
+export type DestinationTunnelOpenFailureReason = 'dns_not_found' | 'dns_temporary_failure' | 'connection_refused' | 'connection_reset' | 'connection_timed_out' | 'unreachable' | 'permission_denied' | 'resource_exhausted' | 'selector_not_allowed' | 'tls_handshake_failed' | 'tls_validation_failed' | 'tls_protocol_error' | 'cancelled' | 'internal' | (string & {});
 export type DestinationTunnelResetReason = 'cancelled' | 'connection_error' | 'protocol_error' | 'resource_exhausted' | 'internal' | (string & {});
-export type DestinationTunnelSessionErrorCode = 'unsupported_version' | 'invalid_message' | 'invalid_route' | 'route_capacity' | 'already_active' | 'unavailable' | 'internal' | (string & {});
+export type DestinationTunnelSessionErrorCode = 'unsupported_version' | 'invalid_message' | 'invalid_selector' | 'already_active' | 'unavailable' | 'internal' | (string & {});
 export type DestinationTunnelClientMessage = {
     type: 'start';
     version: number;
-    routes: DestinationTunnelRoute[];
+    selectors: DestinationTunnelSelectors;
+    inspection: DestinationTunnelInspectionConfig;
+    /** Default per-flow receive window this client grants. */
+    window: number;
 } | {
     type: 'openOk';
     connId: number;
+    transport: DestinationTunnelTransportResult;
+    window: number;
 } | {
     type: 'openFail';
     connId: number;
@@ -28,18 +95,26 @@ export type DestinationTunnelClientMessage = {
     connId: number;
     reason: DestinationTunnelResetReason;
     osCode?: string;
+} | {
+    type: 'windowUpdate';
+    connId: number;
+    increment: number;
 };
 export type DestinationTunnelServerMessage = {
     type: 'ready';
     version: number;
     tunnelId: string;
+    selectors: DestinationTunnelSelectorReport[];
+    configHash: string;
 } | {
     type: 'open';
     connId: number;
-    routeId: string;
+    selectorId: string;
     host: string;
     port: number;
-    proto: 'tcp';
+    transport: DestinationTunnelTransportRequest;
+    /** Server's receive window for this flow. */
+    window: number;
 } | {
     type: 'fin';
     connId: number;
@@ -48,27 +123,57 @@ export type DestinationTunnelServerMessage = {
     connId: number;
     reason: DestinationTunnelResetReason;
     osCode?: string;
+} | {
+    type: 'windowUpdate';
+    connId: number;
+    increment: number;
 } | {
     type: 'error';
     code: DestinationTunnelSessionErrorCode;
 };
-export type DestinationTunnelRouteErrorCode = 'empty' | 'too_many' | 'invalid_host' | 'invalid_port' | 'duplicate';
-export declare class DestinationTunnelRouteError extends Error {
-    readonly code: DestinationTunnelRouteErrorCode;
-    constructor(code: DestinationTunnelRouteErrorCode, message: string);
-}
-export declare class DestinationTunnelProtocolError extends Error {
-    constructor(message: string);
+export type DestinationTunnelSelectorErrorCode = 'empty' | 'too_many' | 'invalid_host' | 'invalid_port' | 'invalid_domain' | 'duplicate';
+export declare class DestinationTunnelSelectorError extends Error {
+    readonly code: DestinationTunnelSelectorErrorCode;
+    constructor(code: DestinationTunnelSelectorErrorCode, message: string);
 }
 export declare function encodeDestinationTunnelDataFrame(connId: number, payload: Buffer): Buffer;
 export declare function decodeDestinationTunnelDataFrame(frame: Buffer): {
     connId: number;
     payload: Buffer;
 };
-export declare function validateDestinationTunnelRoutes(routes: readonly DestinationTunnelRoute[]): DestinationTunnelRoute[];
+export declare function validateDestinationTunnelRoutes(routes: readonly DestinationTunnelRoute[], options?: {
+    minPort?: number;
+}): DestinationTunnelRoute[];
+/**
+ * Validate and canonicalize a full selector set. Selector policy specific to
+ * one product (such as the Android bind-listener minimum route port) is
+ * expressed via options rather than separate message shapes.
+ */
+export declare function validateDestinationTunnelSelectors(selectors: readonly string[], options?: {
+    minRoutePort?: number;
+}): DestinationTunnelSelectors;
+export declare function classifyDestinationTunnelSelectors(selectors: readonly string[], options?: {
+    minRoutePort?: number;
+}): DestinationTunnelSelectorCatalog;
+export declare function validateDestinationTunnelDomains(domains: readonly string[]): string[];
+/**
+ * Deterministic hash of the canonical selector configuration. Servers echo it
+ * in `ready` so clients can detect config mismatches across reconnects. The
+ * hashed JSON has fixed key order.
+ */
+export declare function destinationTunnelConfigHash(selectors: DestinationTunnelSelectors, inspection?: DestinationTunnelInspectionConfig): string;
+export declare function normalizeDestinationTunnelInspection(inspection: Partial<DestinationTunnelInspectionConfig>): DestinationTunnelInspectionConfig;
+export declare function disabledDestinationTunnelInspection(): DestinationTunnelInspectionConfig;
+/** Selector IDs are one-based positions in the canonical selector array. */
+export declare function destinationTunnelSelectorIds(selectors: DestinationTunnelSelectors): string[];
+export declare function destinationTunnelDomainMatches(pattern: string, host: string): boolean;
+/**
+ * Verify a server OPEN against the negotiated selectors. Every OPEN must name
+ * a known selector ID and a target that the selector actually covers.
+ */
 export declare function assertDestinationTunnelOpenAllowed(message: Extract<DestinationTunnelServerMessage, {
     type: 'open';
-}>, routes: readonly DestinationTunnelRoute[]): void;
+}>, selectors: DestinationTunnelSelectors): DestinationTunnelSelectorKind;
 export declare function assertDestinationTunnelReady(message: Extract<DestinationTunnelServerMessage, {
     type: 'ready';
 }>): void;

package/destination-tunnel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"destination-tunnel.d.ts","sourceRoot":"","sources":["src/destination-tunnel.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,eAAO,MAAM,uCAAuC,IAAI,CAAC;AAEzD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,kCAAkC,GAC1C,eAAe,GACf,uBAAuB,GACvB,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,aAAa,GACb,mBAAmB,GACnB,oBAAoB,GACpB,mBAAmB,GACnB,WAAW,GACX,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,4BAA4B,GACpC,WAAW,GACX,kBAAkB,GAClB,gBAAgB,GAChB,oBAAoB,GACpB,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,iCAAiC,GACzC,qBAAqB,GACrB,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,aAAa,GACb,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,8BAA8B,GACtC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,sBAAsB,EAAE,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,kCAAkC,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,MAAM,MAAM,8BAA8B,GACtC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;CACd,GACD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,iCAAiC,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,+BAA+B,GACvC,OAAO,GACP,UAAU,GACV,cAAc,GACd,cAAc,GACd,WAAW,CAAC;AAEhB,qBAAa,2BAA4B,SAAQ,KAAK;IAElD,QAAQ,CAAC,IAAI,EAAE,+BAA+B;gBAArC,IAAI,EAAE,+BAA+B,EAC9C,OAAO,EAAE,MAAM;CAKlB;AAED,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CASxF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAQA;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,SAAS,sBAAsB,EAAE,GACxC,sBAAsB,EAAE,CA0B1B;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAClE,MAAM,EAAE,SAAS,sBAAsB,EAAE,GACxC,IAAI,CAQN;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,GAClE,IAAI,CAIN;AAED,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,8BAA8B,GAAG,MAAM,CA2BpG;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAkCnG"}
+{"version":3,"file":"destination-tunnel.d.ts","sourceRoot":"","sources":["src/destination-tunnel.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,8BAA8B,EAAE,qDAAkD;AAE3F,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,eAAO,MAAM,uCAAuC,IAAI,CAAC;AACzD;;;GAGG;AACH,eAAO,MAAM,6BAA6B,kBAAkB,CAAC;AAC7D,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAC9D,uEAAuE;AACvE,eAAO,MAAM,iCAAiC,QAAc,CAAC;AAC7D,uDAAuD;AACvD,eAAO,MAAM,uCAAuC,aAAc,CAAC;AACnE,eAAO,MAAM,yCAAyC,QAAmB,CAAC;AAC1E,eAAO,MAAM,iCAAiC,QAAmB,CAAC;AAClE,eAAO,MAAM,sCAAsC,QAAe,CAAC;AACnE,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AAEpE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,gEAAgE;AAChE,MAAM,MAAM,0BAA0B,GAAG,MAAM,EAAE,CAAC;AAElD,4EAA4E;AAC5E,MAAM,WAAW,gCAAgC;IAC/C,MAAM,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,8BAA8B,GAAG,KAAK,GAAG,KAAK,CAAC;AAE3D,MAAM,MAAM,iCAAiC,GACzC;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEN,MAAM,WAAW,gCAAgC;IAC/C,IAAI,EAAE,8BAA8B,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/D,MAAM,MAAM,2BAA2B,GAAG,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC;AAEtE,2EAA2E;AAC3E,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,2BAA2B,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,yEAAyE;AACzE,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,6BAA6B,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,2BAA2B,EAAE,CAAC;CACvC;AAED,MAAM,MAAM,kCAAkC,GAC1C,eAAe,GACf,uBAAuB,GACvB,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,aAAa,GACb,mBAAmB,GACnB,oBAAoB,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,uBAAuB,GACvB,oBAAoB,GACpB,WAAW,GACX,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,4BAA4B,GACpC,WAAW,GACX,kBAAkB,GAClB,gBAAgB,GAChB,oBAAoB,GACpB,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,iCAAiC,GACzC,qBAAqB,GACrB,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,aAAa,GACb,UAAU,GACV,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,8BAA8B,GACtC;IACE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,0BAA0B,CAAC;IACtC,UAAU,EAAE,iCAAiC,CAAC;IAC9C,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,gCAAgC,CAAC;IAC5C,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,kCAAkC,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,8BAA8B,GACtC;IACE,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,+BAA+B,EAAE,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC;CACpB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,iCAAiC,CAAC;IAC7C,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,iCAAiC,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,kCAAkC,GAC1C,OAAO,GACP,UAAU,GACV,cAAc,GACd,cAAc,GACd,gBAAgB,GAChB,WAAW,CAAC;AAEhB,qBAAa,8BAA+B,SAAQ,KAAK;IAErD,QAAQ,CAAC,IAAI,EAAE,kCAAkC;gBAAxC,IAAI,EAAE,kCAAkC,EACjD,OAAO,EAAE,MAAM;CAKlB;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CASxF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAQA;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,SAAS,sBAAsB,EAAE,EACzC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,sBAAsB,EAAE,CA0B1B;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,0BAA0B,CAkC5B;AAED,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,gCAAgC,CAalC;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAkBrF;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,0BAA0B,EACrC,UAAU,GAAE,iCAAyE,GACpF,MAAM,CAcR;AAED,wBAAgB,oCAAoC,CAClD,UAAU,EAAE,OAAO,CAAC,iCAAiC,CAAC,GACrD,iCAAiC,CA2BnC;AAED,wBAAgB,mCAAmC,IAAI,iCAAiC,CAEvF;AAED,4EAA4E;AAC5E,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,0BAA0B,GAAG,MAAM,EAAE,CAE5F;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOrF;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAClE,SAAS,EAAE,0BAA0B,GACpC,6BAA6B,CAoB/B;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,GAClE,IAAI,CAIN;AAED,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,8BAA8B,GAAG,MAAM,CAqDpG;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CA6CnG"}