@matter/protocol 0.11.0-alpha.0-20241005-e3e4e4a7a

package/dist/esm/session/SessionManager.js

@@ -0,0 +1,411 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { FabricManager } from "#fabric/FabricManager.js";
+import {
+  BasicSet,
+  Bytes,
+  Construction,
+  Crypto,
+  Environmental,
+  Lifecycle,
+  Logger,
+  MatterFlowError,
+  Mutex,
+  Observable,
+  ObserverGroup,
+  StorageManager
+} from "#general";
+import { Specification } from "#model";
+import { PeerAddressMap } from "#peer/PeerAddress.js";
+import { DEFAULT_MAX_PATHS_PER_INVOKE, NodeId } from "#types";
+import { MessageCounter } from "../protocol/MessageCounter.js";
+import { InsecureSession } from "./InsecureSession.js";
+import { SecureSession } from "./SecureSession.js";
+import {
+  FALLBACK_DATAMODEL_REVISION,
+  FALLBACK_INTERACTIONMODEL_REVISION,
+  FALLBACK_MAX_PATHS_PER_INVOKE,
+  FALLBACK_SPECIFICATION_VERSION,
+  SESSION_ACTIVE_INTERVAL_MS,
+  SESSION_ACTIVE_THRESHOLD_MS,
+  SESSION_IDLE_INTERVAL_MS
+} from "./Session.js";
+const logger = Logger.get("SessionManager");
+const DEFAULT_SESSION_PARAMETERS = {
+  idleIntervalMs: SESSION_IDLE_INTERVAL_MS,
+  activeIntervalMs: SESSION_ACTIVE_INTERVAL_MS,
+  activeThresholdMs: SESSION_ACTIVE_THRESHOLD_MS,
+  dataModelRevision: Specification.DATA_MODEL_REVISION,
+  interactionModelRevision: Specification.INTERACTION_MODEL_REVISION,
+  specificationVersion: Specification.SPECIFICATION_VERSION,
+  maxPathsPerInvoke: DEFAULT_MAX_PATHS_PER_INVOKE
+};
+const UNICAST_UNSECURE_SESSION_ID = 0;
+class SessionManager {
+  #context;
+  #insecureSessions = /* @__PURE__ */ new Map();
+  #sessions = new BasicSet();
+  #nextSessionId = Crypto.getRandomUInt16();
+  #resumptionRecords = new PeerAddressMap();
+  #globalUnencryptedMessageCounter = new MessageCounter();
+  #subscriptionsChanged = Observable();
+  #sessionParameters;
+  #resubmissionStarted = new Observable();
+  #construction;
+  #observers = new ObserverGroup();
+  #subscriptionUpdateMutex = new Mutex(this);
+  constructor(context) {
+    this.#context = context;
+    this.#sessionParameters = { ...DEFAULT_SESSION_PARAMETERS, ...context.parameters };
+    this.#observers.on(
+      context.fabrics.events.deleted,
+      async (fabric) => this.deleteResumptionRecordsForFabric(fabric)
+    );
+    this.#construction = Construction(this, () => this.#initialize());
+  }
+  [Environmental.create](env) {
+    const instance = new SessionManager({
+      storage: env.get(StorageManager).createContext("sessions"),
+      fabrics: env.get(FabricManager)
+    });
+    env.set(SessionManager, instance);
+    return instance;
+  }
+  get construction() {
+    return this.#construction;
+  }
+  get context() {
+    return this.#context;
+  }
+  /**
+   * Active secure sessions.
+   */
+  get sessions() {
+    return this.#sessions;
+  }
+  /**
+   * Active insecure sessions.
+   */
+  get insecureSessions() {
+    return this.#insecureSessions;
+  }
+  /**
+   * Our session parameters.  These are the parameters we provide during session negotiation.  The peer may specify
+   * different parameters.
+   */
+  get sessionParameters() {
+    return this.#sessionParameters;
+  }
+  /**
+   * Emits when there is a change to the subscription set.
+   */
+  get subscriptionsChanged() {
+    return this.#subscriptionsChanged;
+  }
+  /**
+   * Emits when resubmission is necessary due to timeout or network error.
+   */
+  get resubmissionStarted() {
+    return this.#resubmissionStarted;
+  }
+  /**
+   * Convenience function for accessing a fabric by address.
+   */
+  fabricFor(address) {
+    return this.#context.fabrics.for(address);
+  }
+  /**
+   * @deprecated
+   */
+  get owner() {
+    return this.#context.owner;
+  }
+  createInsecureSession(options) {
+    this.#construction.assert();
+    const { initiatorNodeId, sessionParameters, isInitiator } = options;
+    if (initiatorNodeId !== void 0) {
+      if (this.#insecureSessions.has(initiatorNodeId)) {
+        throw new MatterFlowError(`UnsecureSession with NodeId ${initiatorNodeId} already exists.`);
+      }
+    }
+    while (true) {
+      const session = new InsecureSession({
+        manager: this,
+        messageCounter: this.#globalUnencryptedMessageCounter,
+        initiatorNodeId,
+        sessionParameters,
+        isInitiator: isInitiator ?? false
+      });
+      const ephemeralNodeId = session.nodeId;
+      if (this.#insecureSessions.has(ephemeralNodeId)) continue;
+      this.#insecureSessions.set(ephemeralNodeId, session);
+      return session;
+    }
+  }
+  async createSecureSession(args) {
+    await this.construction;
+    const {
+      sessionId,
+      fabric,
+      peerNodeId,
+      peerSessionId,
+      sharedSecret,
+      salt,
+      isInitiator,
+      isResumption,
+      peerSessionParameters,
+      caseAuthenticatedTags
+    } = args;
+    const session = await SecureSession.create({
+      manager: this,
+      id: sessionId,
+      fabric,
+      peerNodeId,
+      peerSessionId,
+      sharedSecret,
+      salt,
+      isInitiator,
+      isResumption,
+      peerSessionParameters,
+      caseAuthenticatedTags
+    });
+    const subscriptionsChanged = (subscription) => {
+      if (session.isClosing) {
+        return;
+      }
+      this.#subscriptionsChanged.emit(session, subscription);
+    };
+    session.subscriptions.added.on(subscriptionsChanged);
+    session.subscriptions.deleted.on(subscriptionsChanged);
+    this.#sessions.add(session);
+    return session;
+  }
+  async deleteResumptionRecord(address) {
+    await this.#construction;
+    this.#resumptionRecords.delete(address);
+    await this.#storeResumptionRecords();
+  }
+  async deleteResumptionRecordsForFabric(fabric) {
+    await this.#construction;
+    for (const address of this.#resumptionRecords.keys()) {
+      if (address.fabricIndex === fabric.fabricIndex) {
+        this.#resumptionRecords.delete(address);
+      }
+    }
+    await this.#storeResumptionRecords();
+  }
+  findOldestInactiveSession() {
+    this.#construction.assert();
+    let oldestSession = void 0;
+    for (const session of this.#sessions) {
+      if (!oldestSession || session.activeTimestamp < oldestSession.activeTimestamp) {
+        oldestSession = session;
+      }
+    }
+    if (oldestSession === void 0) {
+      throw new MatterFlowError("No session found to close and all session ids are taken.");
+    }
+    return oldestSession;
+  }
+  async getNextAvailableSessionId() {
+    await this.#construction;
+    for (let i = 0; i < 65535; i++) {
+      const id = this.#nextSessionId;
+      this.#nextSessionId = this.#nextSessionId + 1 & 65535;
+      if (this.#nextSessionId === 0) this.#nextSessionId++;
+      if (this.getSession(id) === void 0) {
+        return id;
+      }
+    }
+    const oldestSession = this.findOldestInactiveSession();
+    await oldestSession.end(true, false);
+    this.#nextSessionId = oldestSession.id;
+    return this.#nextSessionId++;
+  }
+  getSession(sessionId) {
+    this.#construction.assert();
+    return this.#sessions.get("id", sessionId);
+  }
+  getPaseSession() {
+    this.#construction.assert();
+    return [...this.#sessions].find(
+      (session) => session.isSecure && session.isPase && !session.closingAfterExchangeFinished
+    );
+  }
+  getSessionForNode(address) {
+    this.#construction.assert();
+    return [...this.#sessions].find((session) => {
+      if (!session.isSecure) return false;
+      const secureSession = session;
+      return secureSession.peerIs(address);
+    });
+  }
+  async removeAllSessionsForNode(address, sendClose = false) {
+    await this.#construction;
+    for (const session of this.#sessions) {
+      if (!session.isSecure) continue;
+      const secureSession = session;
+      if (secureSession.peerIs(address)) {
+        await secureSession.destroy(sendClose, false);
+      }
+    }
+  }
+  getUnsecureSession(sourceNodeId) {
+    this.#construction.assert();
+    if (sourceNodeId === void 0) {
+      return this.#insecureSessions.get(NodeId.UNSPECIFIED_NODE_ID);
+    }
+    return this.#insecureSessions.get(sourceNodeId);
+  }
+  findGroupSession(groupId, groupSessionId) {
+    this.#construction.assert();
+    throw new Error(`Not implemented ${groupId} ${groupSessionId}`);
+  }
+  findResumptionRecordById(resumptionId) {
+    this.#construction.assert();
+    return [...this.#resumptionRecords.values()].find((record) => Bytes.areEqual(record.resumptionId, resumptionId));
+  }
+  findResumptionRecordByAddress(address) {
+    this.#construction.assert();
+    return this.#resumptionRecords.get(address);
+  }
+  async saveResumptionRecord(resumptionRecord) {
+    await this.#construction;
+    this.#resumptionRecords.set(resumptionRecord.fabric.addressOf(resumptionRecord.peerNodeId), resumptionRecord);
+    await this.#storeResumptionRecords();
+  }
+  async #storeResumptionRecords() {
+    await this.#construction;
+    await this.#context.storage.set(
+      "resumptionRecords",
+      [...this.#resumptionRecords].map(
+        ([
+          address,
+          { sharedSecret, resumptionId, peerNodeId, fabric, sessionParameters, caseAuthenticatedTags }
+        ]) => ({
+          nodeId: address.nodeId,
+          sharedSecret,
+          resumptionId,
+          fabricId: fabric.fabricId,
+          peerNodeId,
+          sessionParameters,
+          caseAuthenticatedTags
+        })
+      )
+    );
+  }
+  async #initialize() {
+    await this.#context.fabrics.construction;
+    const storedResumptionRecords = await this.#context.storage.get(
+      "resumptionRecords",
+      []
+    );
+    storedResumptionRecords.forEach(
+      ({
+        nodeId,
+        sharedSecret,
+        resumptionId,
+        fabricId,
+        peerNodeId,
+        sessionParameters: {
+          idleIntervalMs,
+          activeIntervalMs,
+          activeThresholdMs,
+          dataModelRevision,
+          interactionModelRevision,
+          specificationVersion,
+          maxPathsPerInvoke
+        } = {},
+        caseAuthenticatedTags
+      }) => {
+        const fabric = this.#context.fabrics.getFabrics().find((fabric2) => fabric2.fabricId === fabricId);
+        logger.info(
+          "restoring resumption record for node",
+          nodeId,
+          "and peer node",
+          peerNodeId,
+          "for fabric index",
+          fabric?.fabricIndex
+        );
+        if (!fabric) {
+          logger.error("fabric not found for resumption record", fabricId);
+          return;
+        }
+        this.#resumptionRecords.set(fabric.addressOf(nodeId), {
+          sharedSecret,
+          resumptionId,
+          fabric,
+          peerNodeId,
+          sessionParameters: {
+            // Make sure to initialize default values when restoring an older resumption record
+            idleIntervalMs: idleIntervalMs ?? SESSION_IDLE_INTERVAL_MS,
+            activeIntervalMs: activeIntervalMs ?? SESSION_ACTIVE_INTERVAL_MS,
+            activeThresholdMs: activeThresholdMs ?? SESSION_ACTIVE_THRESHOLD_MS,
+            dataModelRevision: dataModelRevision ?? FALLBACK_DATAMODEL_REVISION,
+            interactionModelRevision: interactionModelRevision ?? FALLBACK_INTERACTIONMODEL_REVISION,
+            specificationVersion: specificationVersion ?? FALLBACK_SPECIFICATION_VERSION,
+            maxPathsPerInvoke: maxPathsPerInvoke ?? FALLBACK_MAX_PATHS_PER_INVOKE
+          },
+          caseAuthenticatedTags
+        });
+      }
+    );
+  }
+  getActiveSessionInformation() {
+    this.#construction.assert();
+    return [...this.#sessions].filter((session) => session.isSecure && !session.isPase).map((session) => ({
+      name: session.name,
+      nodeId: session.nodeId,
+      peerNodeId: session.peerNodeId,
+      fabric: session instanceof SecureSession ? session.fabric?.externalInformation : void 0,
+      isPeerActive: session.isPeerActive(),
+      secure: session.isSecure,
+      lastInteractionTimestamp: session instanceof SecureSession ? session.timestamp : void 0,
+      lastActiveTimestamp: session instanceof SecureSession ? session.activeTimestamp : void 0,
+      numberOfActiveSubscriptions: session instanceof SecureSession ? session.subscriptions.size : 0
+    }));
+  }
+  async close() {
+    if (this.#construction.status === Lifecycle.Status.Initializing) {
+      await this.#construction;
+    }
+    await this.#subscriptionUpdateMutex;
+    this.#observers.close();
+    await this.#storeResumptionRecords();
+    for (const session of this.#sessions) {
+      await session?.end(false);
+      this.#sessions.delete(session);
+    }
+    for (const session of this.#insecureSessions.values()) {
+      await session?.end();
+    }
+  }
+  updateAllSubscriptions() {
+    this.#subscriptionUpdateMutex.run(async () => {
+      for (const session of this.#sessions) {
+        for (const subscription of session.subscriptions) {
+          await subscription.update();
+        }
+      }
+    });
+  }
+  async clearSubscriptionsForNode(fabricIndex, nodeId, flushSubscriptions) {
+    for (const session of this.#sessions) {
+      if (session.fabric?.fabricIndex !== fabricIndex) {
+        continue;
+      }
+      if (session.peerNodeId !== nodeId) {
+        continue;
+      }
+      await session.clearSubscriptions(flushSubscriptions);
+    }
+  }
+}
+export {
+  SessionManager,
+  UNICAST_UNSECURE_SESSION_ID
+};
+//# sourceMappingURL=SessionManager.js.map

package/dist/esm/session/SessionManager.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../src/session/SessionManager.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,qBAAqB;AAC9B;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACG;AAEP,SAAS,qBAAqB;AAC9B,SAAsB,sBAAsB;AAC5C,SAA+B,8BAAqD,cAAc;AAElG,SAAS,sBAAsB;AAC/B,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OAGG;AAEP,MAAM,SAAS,OAAO,IAAI,gBAAgB;AAE1C,MAAM,6BAA6B;AAAA,EAC/B,gBAAgB;AAAA,EAChB,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,mBAAmB,cAAc;AAAA,EACjC,0BAA0B,cAAc;AAAA,EACxC,sBAAsB,cAAc;AAAA,EACpC,mBAAmB;AACvB;AAEO,MAAM,8BAA8B;AAoDpC,MAAM,eAAe;AAAA,EACf;AAAA,EACA,oBAAoB,oBAAI,IAA6B;AAAA,EACrD,YAAY,IAAI,SAAwB;AAAA,EACjD,iBAAiB,OAAO,gBAAgB;AAAA,EACxC,qBAAqB,IAAI,eAAiC;AAAA,EACjD,mCAAmC,IAAI,eAAe;AAAA,EACtD,wBAAwB,WAAiE;AAAA,EACzF;AAAA,EACA,uBAAuB,IAAI,WAA+B;AAAA,EAC1D;AAAA,EACA,aAAa,IAAI,cAAc;AAAA,EAC/B,2BAA2B,IAAI,MAAM,IAAI;AAAA,EAElD,YAAY,SAAgC;AACxC,SAAK,WAAW;AAChB,SAAK,qBAAqB,EAAE,GAAG,4BAA4B,GAAG,QAAQ,WAAW;AAGjF,SAAK,WAAW;AAAA,MAAG,QAAQ,QAAQ,OAAO;AAAA,MAAS,OAAM,WACrD,KAAK,iCAAiC,MAAM;AAAA,IAChD;AAEA,SAAK,gBAAgB,aAAa,MAAM,MAAM,KAAK,YAAY,CAAC;AAAA,EACpE;AAAA,EAEA,CAAC,cAAc,MAAM,EAAE,KAAkB;AACrC,UAAM,WAAW,IAAI,eAAe;AAAA,MAChC,SAAS,IAAI,IAAI,cAAc,EAAE,cAAc,UAAU;AAAA,MACzD,SAAS,IAAI,IAAI,aAAa;AAAA,IAClC,CAAC;AACD,QAAI,IAAI,gBAAgB,QAAQ;AAChC,WAAO;AAAA,EACX;AAAA,EAEA,IAAI,eAAe;AACf,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,UAAU;AACV,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,WAAW;AACX,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,mBAAmB;AACnB,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,oBAAoB;AACpB,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,uBAAuB;AACvB,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,sBAAsB;AACtB,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,UAAU,SAAoC;AAC1C,WAAO,KAAK,SAAS,QAAQ,IAAI,OAAO;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,QAAQ;AACR,WAAO,KAAK,SAAS;AAAA,EACzB;AAAA,EAEA,sBAAsB,SAInB;AACC,SAAK,cAAc,OAAO;AAE1B,UAAM,EAAE,iBAAiB,mBAAmB,YAAY,IAAI;AAC5D,QAAI,oBAAoB,QAAW;AAC/B,UAAI,KAAK,kBAAkB,IAAI,eAAe,GAAG;AAC7C,cAAM,IAAI,gBAAgB,+BAA+B,eAAe,kBAAkB;AAAA,MAC9F;AAAA,IACJ;AACA,WAAO,MAAM;AACT,YAAM,UAAU,IAAI,gBAAgB;AAAA,QAChC,SAAS;AAAA,QACT,gBAAgB,KAAK;AAAA,QACrB;AAAA,QACA;AAAA,QACA,aAAa,eAAe;AAAA,MAChC,CAAC;AAED,YAAM,kBAAkB,QAAQ;AAChC,UAAI,KAAK,kBAAkB,IAAI,eAAe,EAAG;AAEjD,WAAK,kBAAkB,IAAI,iBAAiB,OAAO;AACnD,aAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,oBAAoB,MAWvB;AACC,UAAM,KAAK;AAEX,UAAM;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ,IAAI;AACJ,UAAM,UAAU,MAAM,cAAc,OAAO;AAAA,MACvC,SAAS;AAAA,MACT,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ,CAAC;AAED,UAAM,uBAAuB,CAAC,iBAA+B;AACzD,UAAI,QAAQ,WAAW;AACnB;AAAA,MACJ;AAEA,WAAK,sBAAsB,KAAK,SAAS,YAAY;AAAA,IACzD;AAEA,YAAQ,cAAc,MAAM,GAAG,oBAAoB;AACnD,YAAQ,cAAc,QAAQ,GAAG,oBAAoB;AAErD,SAAK,UAAU,IAAI,OAAO;AAE1B,WAAO;AAAA,EACX;AAAA,EAEA,MAAM,uBAAuB,SAAsB;AAC/C,UAAM,KAAK;AAEX,SAAK,mBAAmB,OAAO,OAAO;AACtC,UAAM,KAAK,wBAAwB;AAAA,EACvC;AAAA,EAEA,MAAM,iCAAiC,QAAgB;AACnD,UAAM,KAAK;AAEX,eAAW,WAAW,KAAK,mBAAmB,KAAK,GAAG;AAClD,UAAI,QAAQ,gBAAgB,OAAO,aAAa;AAC5C,aAAK,mBAAmB,OAAO,OAAO;AAAA,MAC1C;AAAA,IACJ;AAEA,UAAM,KAAK,wBAAwB;AAAA,EACvC;AAAA,EAEA,4BAA4B;AACxB,SAAK,cAAc,OAAO;AAE1B,QAAI,gBAA2C;AAC/C,eAAW,WAAW,KAAK,WAAW;AAClC,UAAI,CAAC,iBAAiB,QAAQ,kBAAkB,cAAc,iBAAiB;AAC3E,wBAAgB;AAAA,MACpB;AAAA,IACJ;AACA,QAAI,kBAAkB,QAAW;AAC7B,YAAM,IAAI,gBAAgB,0DAA0D;AAAA,IACxF;AACA,WAAO;AAAA,EACX;AAAA,EAEA,MAAM,4BAA4B;AAC9B,UAAM,KAAK;AAEX,aAAS,IAAI,GAAG,IAAI,OAAQ,KAAK;AAC7B,YAAM,KAAK,KAAK;AAChB,WAAK,iBAAkB,KAAK,iBAAiB,IAAK;AAClD,UAAI,KAAK,mBAAmB,EAAG,MAAK;AAEpC,UAAI,KAAK,WAAW,EAAE,MAAM,QAAW;AACnC,eAAO;AAAA,MACX;AAAA,IACJ;AAGA,UAAM,gBAAgB,KAAK,0BAA0B;AACrD,UAAM,cAAc,IAAI,MAAM,KAAK;AACnC,SAAK,iBAAiB,cAAc;AACpC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,WAAW,WAAmB;AAC1B,SAAK,cAAc,OAAO;AAE1B,WAAO,KAAK,UAAU,IAAI,MAAM,SAAS;AAAA,EAC7C;AAAA,EAEA,iBAAiB;AACb,SAAK,cAAc,OAAO;AAE1B,WAAO,CAAC,GAAG,KAAK,SAAS,EAAE;AAAA,MACvB,aAAW,QAAQ,YAAY,QAAQ,UAAU,CAAC,QAAQ;AAAA,IAC9D;AAAA,EACJ;AAAA,EAEA,kBAAkB,SAAsB;AACpC,SAAK,cAAc,OAAO;AAG1B,WAAO,CAAC,GAAG,KAAK,SAAS,EAAE,KAAK,aAAW;AACvC,UAAI,CAAC,QAAQ,SAAU,QAAO;AAC9B,YAAM,gBAAgB;AACtB,aAAO,cAAc,OAAO,OAAO;AAAA,IACvC,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,yBAAyB,SAAsB,YAAY,OAAO;AACpE,UAAM,KAAK;AAEX,eAAW,WAAW,KAAK,WAAW;AAClC,UAAI,CAAC,QAAQ,SAAU;AACvB,YAAM,gBAAgB;AACtB,UAAI,cAAc,OAAO,OAAO,GAAG;AAC/B,cAAM,cAAc,QAAQ,WAAW,KAAK;AAAA,MAChD;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,mBAAmB,cAAuB;AACtC,SAAK,cAAc,OAAO;AAE1B,QAAI,iBAAiB,QAAW;AAC5B,aAAO,KAAK,kBAAkB,IAAI,OAAO,mBAAmB;AAAA,IAChE;AACA,WAAO,KAAK,kBAAkB,IAAI,YAAY;AAAA,EAClD;AAAA,EAEA,iBAAiB,SAAiB,gBAAwB;AACtD,SAAK,cAAc,OAAO;AAO1B,UAAM,IAAI,MAAM,mBAAmB,OAAO,IAAI,cAAc,EAAE;AAAA,EAClE;AAAA,EAEA,yBAAyB,cAA0B;AAC/C,SAAK,cAAc,OAAO;AAC1B,WAAO,CAAC,GAAG,KAAK,mBAAmB,OAAO,CAAC,EAAE,KAAK,YAAU,MAAM,SAAS,OAAO,cAAc,YAAY,CAAC;AAAA,EACjH;AAAA,EAEA,8BAA8B,SAAsB;AAChD,SAAK,cAAc,OAAO;AAC1B,WAAO,KAAK,mBAAmB,IAAI,OAAO;AAAA,EAC9C;AAAA,EAEA,MAAM,qBAAqB,kBAAoC;AAC3D,UAAM,KAAK;AACX,SAAK,mBAAmB,IAAI,iBAAiB,OAAO,UAAU,iBAAiB,UAAU,GAAG,gBAAgB;AAC5G,UAAM,KAAK,wBAAwB;AAAA,EACvC;AAAA,EAEA,MAAM,0BAA0B;AAC5B,UAAM,KAAK;AACX,UAAM,KAAK,SAAS,QAAQ;AAAA,MACxB;AAAA,MACA,CAAC,GAAG,KAAK,kBAAkB,EAAE;AAAA,QACzB,CAAC;AAAA,UACG;AAAA,UACA,EAAE,cAAc,cAAc,YAAY,QAAQ,mBAAmB,sBAAsB;AAAA,QAC/F,OACK;AAAA,UACG,QAAQ,QAAQ;AAAA,UAChB;AAAA,UACA;AAAA,UACA,UAAU,OAAO;AAAA,UACjB;AAAA,UACA;AAAA,UACA;AAAA,QACJ;AAAA,MACR;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,cAAc;AAChB,UAAM,KAAK,SAAS,QAAQ;AAE5B,UAAM,0BAA0B,MAAM,KAAK,SAAS,QAAQ;AAAA,MACxD;AAAA,MACA,CAAC;AAAA,IACL;AAEA,4BAAwB;AAAA,MACpB,CAAC;AAAA,QACG;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,mBAAmB;AAAA,UACf;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACJ,IAAI,CAAC;AAAA,QACL;AAAA,MACJ,MAAM;AACF,cAAM,SAAS,KAAK,SAAS,QAAQ,WAAW,EAAE,KAAK,CAAAA,YAAUA,QAAO,aAAa,QAAQ;AAC7F,eAAO;AAAA,UACH;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ;AAAA,QACZ;AACA,YAAI,CAAC,QAAQ;AACT,iBAAO,MAAM,0CAA0C,QAAQ;AAC/D;AAAA,QACJ;AACA,aAAK,mBAAmB,IAAI,OAAO,UAAU,MAAM,GAAG;AAAA,UAClD;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,mBAAmB;AAAA;AAAA,YAEf,gBAAgB,kBAAkB;AAAA,YAClC,kBAAkB,oBAAoB;AAAA,YACtC,mBAAmB,qBAAqB;AAAA,YACxC,mBAAmB,qBAAqB;AAAA,YACxC,0BAA0B,4BAA4B;AAAA,YACtD,sBAAsB,wBAAwB;AAAA,YAC9C,mBAAmB,qBAAqB;AAAA,UAC5C;AAAA,UACA;AAAA,QACJ,CAAC;AAAA,MACL;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,8BAA8B;AAC1B,SAAK,cAAc,OAAO;AAC1B,WAAO,CAAC,GAAG,KAAK,SAAS,EACpB,OAAO,aAAW,QAAQ,YAAY,CAAC,QAAQ,MAAM,EACrD,IAAI,cAAY;AAAA,MACb,MAAM,QAAQ;AAAA,MACd,QAAQ,QAAQ;AAAA,MAChB,YAAY,QAAQ;AAAA,MACpB,QAAQ,mBAAmB,gBAAgB,QAAQ,QAAQ,sBAAsB;AAAA,MACjF,cAAc,QAAQ,aAAa;AAAA,MACnC,QAAQ,QAAQ;AAAA,MAChB,0BAA0B,mBAAmB,gBAAgB,QAAQ,YAAY;AAAA,MACjF,qBAAqB,mBAAmB,gBAAgB,QAAQ,kBAAkB;AAAA,MAClF,6BAA6B,mBAAmB,gBAAgB,QAAQ,cAAc,OAAO;AAAA,IACjG,EAAE;AAAA,EACV;AAAA,EAEA,MAAM,QAAQ;AACV,QAAI,KAAK,cAAc,WAAW,UAAU,OAAO,cAAc;AAC7D,YAAM,KAAK;AAAA,IACf;AAEA,UAAM,KAAK;AAEX,SAAK,WAAW,MAAM;AACtB,UAAM,KAAK,wBAAwB;AACnC,eAAW,WAAW,KAAK,WAAW;AAClC,YAAM,SAAS,IAAI,KAAK;AACxB,WAAK,UAAU,OAAO,OAAO;AAAA,IACjC;AACA,eAAW,WAAW,KAAK,kBAAkB,OAAO,GAAG;AACnD,YAAM,SAAS,IAAI;AAAA,IACvB;AAAA,EACJ;AAAA,EAEA,yBAAyB;AACrB,SAAK,yBAAyB,IAAI,YAAY;AAC1C,iBAAW,WAAW,KAAK,WAAW;AAClC,mBAAW,gBAAgB,QAAQ,eAAe;AAC9C,gBAAM,aAAa,OAAO;AAAA,QAC9B;AAAA,MACJ;AAAA,IACJ,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,0BAA0B,aAA0B,QAAgB,oBAA8B;AACpG,eAAW,WAAW,KAAK,WAAW;AAClC,UAAI,QAAQ,QAAQ,gBAAgB,aAAa;AAC7C;AAAA,MACJ;AACA,UAAI,QAAQ,eAAe,QAAQ;AAC/B;AAAA,MACJ;AACA,YAAM,QAAQ,mBAAmB,kBAAkB;AAAA,IACvD;AAAA,EACJ;AACJ;",
+  "names": ["fabric"]
+}

package/dist/esm/session/case/CaseClient.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { SessionManager } from "#session/SessionManager.js";
+import { NodeId } from "#types";
+import { Fabric } from "../../fabric/Fabric.js";
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+export declare class CaseClient {
+    #private;
+    constructor(sessions: SessionManager);
+    pair(exchange: MessageExchange, fabric: Fabric, peerNodeId: NodeId, expectedProcessingTimeMs?: number): Promise<{
+        session: import("../SecureSession.js").SecureSession;
+        resumed: boolean;
+    }>;
+}
+//# sourceMappingURL=CaseClient.d.ts.map

package/dist/esm/session/case/CaseClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseClient.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAkBpE,qBAAa,UAAU;;gBAGP,QAAQ,EAAE,cAAc;IAI9B,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,EAAE,MAAM;;;;CAsM9G"}

package/dist/esm/session/case/CaseClient.js

@@ -0,0 +1,208 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Bytes, Crypto, Diagnostic, Logger, PublicKey, UnexpectedDataError } from "#general";
+import { TlvIntermediateCertificate, TlvOperationalCertificate } from "../../certificate/CertificateManager.js";
+import {
+  KDFSR1_KEY_INFO,
+  KDFSR2_INFO,
+  KDFSR2_KEY_INFO,
+  KDFSR3_INFO,
+  RESUME1_MIC_NONCE,
+  RESUME2_MIC_NONCE,
+  TBE_DATA2_NONCE,
+  TBE_DATA3_NONCE,
+  TlvEncryptedDataSigma2,
+  TlvEncryptedDataSigma3,
+  TlvSignedData
+} from "./CaseMessages.js";
+import { CaseClientMessenger } from "./CaseMessenger.js";
+const logger = Logger.get("CaseClient");
+class CaseClient {
+  #sessions;
+  constructor(sessions) {
+    this.#sessions = sessions;
+  }
+  async pair(exchange, fabric, peerNodeId, expectedProcessingTimeMs) {
+    const messenger = new CaseClientMessenger(exchange, expectedProcessingTimeMs);
+    const initiatorRandom = Crypto.getRandom();
+    const initiatorSessionId = await this.#sessions.getNextAvailableSessionId();
+    const { operationalIdentityProtectionKey, operationalCert: nodeOpCert, intermediateCACert } = fabric;
+    const { publicKey: initiatorEcdhPublicKey, ecdh } = Crypto.ecdhGeneratePublicKey();
+    let sigma1Bytes;
+    let resumed = false;
+    let resumptionRecord = this.#sessions.findResumptionRecordByAddress(fabric.addressOf(peerNodeId));
+    if (resumptionRecord !== void 0) {
+      const { sharedSecret, resumptionId } = resumptionRecord;
+      const resumeKey = await Crypto.hkdf(
+        sharedSecret,
+        Bytes.concat(initiatorRandom, resumptionId),
+        KDFSR1_KEY_INFO
+      );
+      const initiatorResumeMic = Crypto.encrypt(resumeKey, new Uint8Array(0), RESUME1_MIC_NONCE);
+      sigma1Bytes = await messenger.sendSigma1({
+        initiatorSessionId,
+        destinationId: fabric.getDestinationId(peerNodeId, initiatorRandom),
+        initiatorEcdhPublicKey,
+        initiatorRandom,
+        resumptionId,
+        initiatorResumeMic,
+        initiatorSessionParams: this.#sessions.sessionParameters
+      });
+    } else {
+      sigma1Bytes = await messenger.sendSigma1({
+        initiatorSessionId,
+        destinationId: fabric.getDestinationId(peerNodeId, initiatorRandom),
+        initiatorEcdhPublicKey,
+        initiatorRandom,
+        initiatorSessionParams: this.#sessions.sessionParameters
+      });
+    }
+    let secureSession;
+    const { sigma2Bytes, sigma2, sigma2Resume } = await messenger.readSigma2();
+    if (sigma2Resume !== void 0) {
+      if (resumptionRecord === void 0) throw new UnexpectedDataError("Received an unexpected sigma2Resume.");
+      const { sharedSecret, fabric: fabric2, sessionParameters: resumptionSessionParams } = resumptionRecord;
+      const { responderSessionId: peerSessionId, resumptionId, resumeMic } = sigma2Resume;
+      const sessionParameters = {
+        ...exchange.session.parameters,
+        ...resumptionSessionParams ?? {}
+      };
+      const resumeSalt = Bytes.concat(initiatorRandom, resumptionId);
+      const resumeKey = await Crypto.hkdf(sharedSecret, resumeSalt, KDFSR2_KEY_INFO);
+      Crypto.decrypt(resumeKey, resumeMic, RESUME2_MIC_NONCE);
+      const secureSessionSalt = Bytes.concat(initiatorRandom, resumptionRecord.resumptionId);
+      secureSession = await this.#sessions.createSecureSession({
+        sessionId: initiatorSessionId,
+        fabric: fabric2,
+        peerNodeId,
+        peerSessionId,
+        sharedSecret,
+        salt: secureSessionSalt,
+        isInitiator: true,
+        isResumption: true,
+        peerSessionParameters: sessionParameters
+      });
+      await messenger.sendSuccess();
+      logger.info(
+        `Case client: session resumed with ${messenger.getChannelName()} and parameters`,
+        Diagnostic.dict(secureSession.parameters)
+      );
+      resumptionRecord.resumptionId = resumptionId;
+      resumptionRecord.sessionParameters = secureSession.parameters;
+      resumed = true;
+    } else {
+      const {
+        responderEcdhPublicKey: peerEcdhPublicKey,
+        encrypted: peerEncrypted,
+        responderRandom,
+        responderSessionId: peerSessionId,
+        responderSessionParams
+      } = sigma2;
+      const sessionParameters = {
+        ...exchange.session.parameters,
+        ...responderSessionParams ?? {}
+      };
+      const sharedSecret = Crypto.ecdhGenerateSecret(peerEcdhPublicKey, ecdh);
+      const sigma2Salt = Bytes.concat(
+        operationalIdentityProtectionKey,
+        responderRandom,
+        peerEcdhPublicKey,
+        Crypto.hash(sigma1Bytes)
+      );
+      const sigma2Key = await Crypto.hkdf(sharedSecret, sigma2Salt, KDFSR2_INFO);
+      const peerEncryptedData = Crypto.decrypt(sigma2Key, peerEncrypted, TBE_DATA2_NONCE);
+      const {
+        nodeOpCert: peerNewOpCert,
+        intermediateCACert: peerIntermediateCACert,
+        signature: peerSignature,
+        resumptionId: peerResumptionId
+      } = TlvEncryptedDataSigma2.decode(peerEncryptedData);
+      const peerSignatureData = TlvSignedData.encode({
+        nodeOpCert: peerNewOpCert,
+        intermediateCACert: peerIntermediateCACert,
+        ecdhPublicKey: peerEcdhPublicKey,
+        peerEcdhPublicKey: initiatorEcdhPublicKey
+      });
+      const {
+        ellipticCurvePublicKey: peerPublicKey,
+        subject: { fabricId: peerFabricIdNOCert, nodeId: peerNodeIdNOCert }
+      } = TlvOperationalCertificate.decode(peerNewOpCert);
+      Crypto.verify(PublicKey(peerPublicKey), peerSignatureData, peerSignature);
+      if (peerNodeIdNOCert !== peerNodeId) {
+        throw new UnexpectedDataError(
+          "The node ID in the peer certificate doesn't match the expected peer node ID"
+        );
+      }
+      if (peerNodeIdNOCert !== peerNodeId) {
+        throw new UnexpectedDataError(
+          "The node ID in the peer certificate doesn't match the expected peer node ID"
+        );
+      }
+      if (peerFabricIdNOCert !== fabric.fabricId) {
+        throw new UnexpectedDataError(
+          "The fabric ID in the peer certificate doesn't match the expected fabric ID"
+        );
+      }
+      if (peerIntermediateCACert !== void 0) {
+        const {
+          subject: { fabricId: peerFabricIdIcaCert }
+        } = TlvIntermediateCertificate.decode(peerIntermediateCACert);
+        if (peerFabricIdIcaCert !== fabric.fabricId) {
+          throw new UnexpectedDataError(
+            "The fabric ID in the peer intermediate CA certificate doesn't match the expected fabric ID"
+          );
+        }
+      }
+      fabric.verifyCredentials(peerNewOpCert, peerIntermediateCACert);
+      const sigma3Salt = Bytes.concat(operationalIdentityProtectionKey, Crypto.hash([sigma1Bytes, sigma2Bytes]));
+      const sigma3Key = await Crypto.hkdf(sharedSecret, sigma3Salt, KDFSR3_INFO);
+      const signatureData = TlvSignedData.encode({
+        nodeOpCert,
+        intermediateCACert,
+        ecdhPublicKey: initiatorEcdhPublicKey,
+        peerEcdhPublicKey
+      });
+      const signature = fabric.sign(signatureData);
+      const encryptedData = TlvEncryptedDataSigma3.encode({ nodeOpCert, intermediateCACert, signature });
+      const encrypted = Crypto.encrypt(sigma3Key, encryptedData, TBE_DATA3_NONCE);
+      const sigma3Bytes = await messenger.sendSigma3({ encrypted });
+      await messenger.waitForSuccess("Success after CASE Sigma3");
+      const secureSessionSalt = Bytes.concat(
+        operationalIdentityProtectionKey,
+        Crypto.hash([sigma1Bytes, sigma2Bytes, sigma3Bytes])
+      );
+      secureSession = await this.#sessions.createSecureSession({
+        sessionId: initiatorSessionId,
+        fabric,
+        peerNodeId,
+        peerSessionId,
+        sharedSecret,
+        salt: secureSessionSalt,
+        isInitiator: true,
+        isResumption: false,
+        peerSessionParameters: sessionParameters
+      });
+      logger.info(
+        `Case client: Paired successfully with ${messenger.getChannelName()} and parameters`,
+        Diagnostic.dict(secureSession.parameters)
+      );
+      resumptionRecord = {
+        fabric,
+        peerNodeId,
+        sharedSecret,
+        resumptionId: peerResumptionId,
+        sessionParameters: secureSession.parameters
+      };
+    }
+    await messenger.close();
+    await this.#sessions.saveResumptionRecord(resumptionRecord);
+    return { session: secureSession, resumed };
+  }
+}
+export {
+  CaseClient
+};
+//# sourceMappingURL=CaseClient.js.map

package/dist/esm/session/case/CaseClient.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/session/case/CaseClient.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,OAAO,QAAQ,YAAY,QAAQ,WAAW,2BAA2B;AAGlF,SAAS,4BAA4B,iCAAiC;AAGtE;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,SAAS,2BAA2B;AAEpC,MAAM,SAAS,OAAO,IAAI,YAAY;AAE/B,MAAM,WAAW;AAAA,EACpB;AAAA,EAEA,YAAY,UAA0B;AAClC,SAAK,YAAY;AAAA,EACrB;AAAA,EAEA,MAAM,KAAK,UAA2B,QAAgB,YAAoB,0BAAmC;AACzG,UAAM,YAAY,IAAI,oBAAoB,UAAU,wBAAwB;AAG5E,UAAM,kBAAkB,OAAO,UAAU;AACzC,UAAM,qBAAqB,MAAM,KAAK,UAAU,0BAA0B;AAC1E,UAAM,EAAE,kCAAkC,iBAAiB,YAAY,mBAAmB,IAAI;AAC9F,UAAM,EAAE,WAAW,wBAAwB,KAAK,IAAI,OAAO,sBAAsB;AAGjF,QAAI;AACJ,QAAI,UAAU;AACd,QAAI,mBAAmB,KAAK,UAAU,8BAA8B,OAAO,UAAU,UAAU,CAAC;AAChG,QAAI,qBAAqB,QAAW;AAChC,YAAM,EAAE,cAAc,aAAa,IAAI;AACvC,YAAM,YAAY,MAAM,OAAO;AAAA,QAC3B;AAAA,QACA,MAAM,OAAO,iBAAiB,YAAY;AAAA,QAC1C;AAAA,MACJ;AACA,YAAM,qBAAqB,OAAO,QAAQ,WAAW,IAAI,WAAW,CAAC,GAAG,iBAAiB;AACzF,oBAAc,MAAM,UAAU,WAAW;AAAA,QACrC;AAAA,QACA,eAAe,OAAO,iBAAiB,YAAY,eAAe;AAAA,QAClE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,wBAAwB,KAAK,UAAU;AAAA,MAC3C,CAAC;AAAA,IACL,OAAO;AACH,oBAAc,MAAM,UAAU,WAAW;AAAA,QACrC;AAAA,QACA,eAAe,OAAO,iBAAiB,YAAY,eAAe;AAAA,QAClE;AAAA,QACA;AAAA,QACA,wBAAwB,KAAK,UAAU;AAAA,MAC3C,CAAC;AAAA,IACL;AAEA,QAAI;AACJ,UAAM,EAAE,aAAa,QAAQ,aAAa,IAAI,MAAM,UAAU,WAAW;AACzE,QAAI,iBAAiB,QAAW;AAE5B,UAAI,qBAAqB,OAAW,OAAM,IAAI,oBAAoB,sCAAsC;AACxG,YAAM,EAAE,cAAc,QAAAA,SAAQ,mBAAmB,wBAAwB,IAAI;AAC7E,YAAM,EAAE,oBAAoB,eAAe,cAAc,UAAU,IAAI;AAGvE,YAAM,oBAAoB;AAAA,QACtB,GAAG,SAAS,QAAQ;AAAA,QACpB,GAAI,2BAA2B,CAAC;AAAA,MACpC;AAEA,YAAM,aAAa,MAAM,OAAO,iBAAiB,YAAY;AAC7D,YAAM,YAAY,MAAM,OAAO,KAAK,cAAc,YAAY,eAAe;AAC7E,aAAO,QAAQ,WAAW,WAAW,iBAAiB;AAEtD,YAAM,oBAAoB,MAAM,OAAO,iBAAiB,iBAAiB,YAAY;AACrF,sBAAgB,MAAM,KAAK,UAAU,oBAAoB;AAAA,QACrD,WAAW;AAAA,QACX,QAAAA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN,aAAa;AAAA,QACb,cAAc;AAAA,QACd,uBAAuB;AAAA,MAC3B,CAAC;AACD,YAAM,UAAU,YAAY;AAC5B,aAAO;AAAA,QACH,qCAAqC,UAAU,eAAe,CAAC;AAAA,QAC/D,WAAW,KAAK,cAAc,UAAU;AAAA,MAC5C;AAEA,uBAAiB,eAAe;AAChC,uBAAiB,oBAAoB,cAAc;AACnD,gBAAU;AAAA,IACd,OAAO;AAEH,YAAM;AAAA,QACF,wBAAwB;AAAA,QACxB,WAAW;AAAA,QACX;AAAA,QACA,oBAAoB;AAAA,QACpB;AAAA,MACJ,IAAI;AAEJ,YAAM,oBAAoB;AAAA,QACtB,GAAG,SAAS,QAAQ;AAAA,QACpB,GAAI,0BAA0B,CAAC;AAAA,MACnC;AACA,YAAM,eAAe,OAAO,mBAAmB,mBAAmB,IAAI;AACtE,YAAM,aAAa,MAAM;AAAA,QACrB;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,KAAK,WAAW;AAAA,MAC3B;AACA,YAAM,YAAY,MAAM,OAAO,KAAK,cAAc,YAAY,WAAW;AACzE,YAAM,oBAAoB,OAAO,QAAQ,WAAW,eAAe,eAAe;AAClF,YAAM;AAAA,QACF,YAAY;AAAA,QACZ,oBAAoB;AAAA,QACpB,WAAW;AAAA,QACX,cAAc;AAAA,MAClB,IAAI,uBAAuB,OAAO,iBAAiB;AACnD,YAAM,oBAAoB,cAAc,OAAO;AAAA,QAC3C,YAAY;AAAA,QACZ,oBAAoB;AAAA,QACpB,eAAe;AAAA,QACf,mBAAmB;AAAA,MACvB,CAAC;AACD,YAAM;AAAA,QACF,wBAAwB;AAAA,QACxB,SAAS,EAAE,UAAU,oBAAoB,QAAQ,iBAAiB;AAAA,MACtE,IAAI,0BAA0B,OAAO,aAAa;AAElD,aAAO,OAAO,UAAU,aAAa,GAAG,mBAAmB,aAAa;AAExE,UAAI,qBAAqB,YAAY;AACjC,cAAM,IAAI;AAAA,UACN;AAAA,QACJ;AAAA,MACJ;AACA,UAAI,qBAAqB,YAAY;AACjC,cAAM,IAAI;AAAA,UACN;AAAA,QACJ;AAAA,MACJ;AACA,UAAI,uBAAuB,OAAO,UAAU;AACxC,cAAM,IAAI;AAAA,UACN;AAAA,QACJ;AAAA,MACJ;AACA,UAAI,2BAA2B,QAAW;AACtC,cAAM;AAAA,UACF,SAAS,EAAE,UAAU,oBAAoB;AAAA,QAC7C,IAAI,2BAA2B,OAAO,sBAAsB;AAE5D,YAAI,wBAAwB,OAAO,UAAU;AACzC,gBAAM,IAAI;AAAA,YACN;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ;AACA,aAAO,kBAAkB,eAAe,sBAAsB;AAG9D,YAAM,aAAa,MAAM,OAAO,kCAAkC,OAAO,KAAK,CAAC,aAAa,WAAW,CAAC,CAAC;AACzG,YAAM,YAAY,MAAM,OAAO,KAAK,cAAc,YAAY,WAAW;AACzE,YAAM,gBAAgB,cAAc,OAAO;AAAA,QACvC;AAAA,QACA;AAAA,QACA,eAAe;AAAA,QACf;AAAA,MACJ,CAAC;AACD,YAAM,YAAY,OAAO,KAAK,aAAa;AAC3C,YAAM,gBAAgB,uBAAuB,OAAO,EAAE,YAAY,oBAAoB,UAAU,CAAC;AACjG,YAAM,YAAY,OAAO,QAAQ,WAAW,eAAe,eAAe;AAC1E,YAAM,cAAc,MAAM,UAAU,WAAW,EAAE,UAAU,CAAC;AAC5D,YAAM,UAAU,eAAe,2BAA2B;AAG1D,YAAM,oBAAoB,MAAM;AAAA,QAC5B;AAAA,QACA,OAAO,KAAK,CAAC,aAAa,aAAa,WAAW,CAAC;AAAA,MACvD;AACA,sBAAgB,MAAM,KAAK,UAAU,oBAAoB;AAAA,QACrD,WAAW;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN,aAAa;AAAA,QACb,cAAc;AAAA,QACd,uBAAuB;AAAA,MAC3B,CAAC;AACD,aAAO;AAAA,QACH,yCAAyC,UAAU,eAAe,CAAC;AAAA,QACnE,WAAW,KAAK,cAAc,UAAU;AAAA,MAC5C;AACA,yBAAmB;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAc;AAAA,QACd,mBAAmB,cAAc;AAAA,MACrC;AAAA,IACJ;AAEA,UAAM,UAAU,MAAM;AACtB,UAAM,KAAK,UAAU,qBAAqB,gBAAgB;AAE1D,WAAO,EAAE,SAAS,eAAe,QAAQ;AAAA,EAC7C;AACJ;",
+  "names": ["fabric"]
+}