@matter/protocol 0.11.0-alpha.0-20241005-e3e4e4a7a

package/dist/esm/session/pase/PaseClient.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { PbkdfParameters } from "#general";
+import { SessionManager } from "#session/SessionManager.js";
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { SessionParameters } from "../Session.js";
+export declare class PaseClient {
+    #private;
+    constructor(sessions: SessionManager);
+    static generatePakePasscodeVerifier(setupPinCode: number, pbkdfParameters: PbkdfParameters): Promise<Uint8Array>;
+    static generateRandomPasscode(): number;
+    static generateRandomDiscriminator(): number;
+    pair(sessionParameters: SessionParameters, exchange: MessageExchange, setupPin: number): Promise<import("../SecureSession.js").SecureSession>;
+}
+//# sourceMappingURL=PaseClient.d.ts.map

package/dist/esm/session/pase/PaseClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseClient.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAA6B,eAAe,EAAgC,MAAM,UAAU,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAOlD,qBAAa,UAAU;;gBAGP,QAAQ,EAAE,cAAc;WAIvB,4BAA4B,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe;IAKhG,MAAM,CAAC,sBAAsB;IAS7B,MAAM,CAAC,2BAA2B;IAI5B,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;CAyD/F"}

package/dist/esm/session/pase/PaseClient.js

@@ -0,0 +1,81 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Bytes, Crypto, ec, Logger, Spake2p, UnexpectedDataError } from "#general";
+import { CommissioningOptions, NodeId } from "#types";
+import { DEFAULT_PASSCODE_ID, PaseClientMessenger, SPAKE_CONTEXT } from "./PaseMessenger.js";
+const { numberToBytesBE } = ec;
+const logger = Logger.get("PaseClient");
+class PaseClient {
+  #sessions;
+  constructor(sessions) {
+    this.#sessions = sessions;
+  }
+  static async generatePakePasscodeVerifier(setupPinCode, pbkdfParameters) {
+    const { w0, L } = await Spake2p.computeW0L(pbkdfParameters, setupPinCode);
+    return Bytes.concat(numberToBytesBE(w0, 32), L);
+  }
+  static generateRandomPasscode() {
+    let passcode;
+    passcode = Crypto.getRandomUInt32() % 99999998 + 1;
+    if (CommissioningOptions.FORBIDDEN_PASSCODES.includes(passcode)) {
+      passcode += 1;
+    }
+    return passcode;
+  }
+  static generateRandomDiscriminator() {
+    return Crypto.getRandomUInt16() % 4096;
+  }
+  async pair(sessionParameters, exchange, setupPin) {
+    const messenger = new PaseClientMessenger(exchange);
+    const initiatorRandom = Crypto.getRandom();
+    const initiatorSessionId = await this.#sessions.getNextAvailableSessionId();
+    const requestPayload = await messenger.sendPbkdfParamRequest({
+      initiatorRandom,
+      initiatorSessionId,
+      passcodeId: DEFAULT_PASSCODE_ID,
+      hasPbkdfParameters: false,
+      initiatorSessionParams: sessionParameters
+    });
+    const {
+      responsePayload,
+      response: { pbkdfParameters, responderSessionId, responderSessionParams }
+    } = await messenger.readPbkdfParamResponse();
+    if (pbkdfParameters === void 0)
+      throw new UnexpectedDataError("Missing requested PbkdfParameters in the response.");
+    sessionParameters = {
+      ...exchange.session.parameters,
+      ...responderSessionParams ?? {}
+    };
+    const { w0, w1 } = await Spake2p.computeW0W1(pbkdfParameters, setupPin);
+    const spake2p = Spake2p.create(Crypto.hash([SPAKE_CONTEXT, requestPayload, responsePayload]), w0);
+    const X = spake2p.computeX();
+    await messenger.sendPasePake1({ x: X });
+    const { y: Y, verifier } = await messenger.readPasePake2();
+    const { Ke, hAY, hBX } = await spake2p.computeSecretAndVerifiersFromY(w1, X, Y);
+    if (!Bytes.areEqual(verifier, hBX))
+      throw new UnexpectedDataError("Received incorrect key confirmation from the receiver.");
+    await messenger.sendPasePake3({ verifier: hAY });
+    await messenger.waitForSuccess("Success after PASE Pake3");
+    const secureSession = await this.#sessions.createSecureSession({
+      sessionId: initiatorSessionId,
+      fabric: void 0,
+      peerNodeId: NodeId.UNSPECIFIED_NODE_ID,
+      peerSessionId: responderSessionId,
+      sharedSecret: Ke,
+      salt: new Uint8Array(0),
+      isInitiator: true,
+      isResumption: false,
+      peerSessionParameters: sessionParameters
+    });
+    await messenger.close();
+    logger.info(`Pase client: Paired successfully with ${messenger.getChannelName()}.`);
+    return secureSession;
+  }
+}
+export {
+  PaseClient
+};
+//# sourceMappingURL=PaseClient.js.map

package/dist/esm/session/pase/PaseClient.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/session/pase/PaseClient.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,OAAO,QAAQ,IAAI,QAAyB,SAAS,2BAA2B;AAEzF,SAAS,sBAAsB,cAAc;AAG7C,SAAS,qBAAqB,qBAAqB,qBAAqB;AAExE,MAAM,EAAE,gBAAgB,IAAI;AAE5B,MAAM,SAAS,OAAO,IAAI,YAAY;AAE/B,MAAM,WAAW;AAAA,EACpB;AAAA,EAEA,YAAY,UAA0B;AAClC,SAAK,YAAY;AAAA,EACrB;AAAA,EAEA,aAAa,6BAA6B,cAAsB,iBAAkC;AAC9F,UAAM,EAAE,IAAI,EAAE,IAAI,MAAM,QAAQ,WAAW,iBAAiB,YAAY;AACxE,WAAO,MAAM,OAAO,gBAAgB,IAAI,EAAE,GAAG,CAAC;AAAA,EAClD;AAAA,EAEA,OAAO,yBAAyB;AAC5B,QAAI;AACJ,eAAY,OAAO,gBAAgB,IAAI,WAAY;AACnD,QAAI,qBAAqB,oBAAoB,SAAS,QAAQ,GAAG;AAC7D,kBAAY;AAAA,IAChB;AACA,WAAO;AAAA,EACX;AAAA,EAEA,OAAO,8BAA8B;AACjC,WAAO,OAAO,gBAAgB,IAAI;AAAA,EACtC;AAAA,EAEA,MAAM,KAAK,mBAAsC,UAA2B,UAAkB;AAC1F,UAAM,YAAY,IAAI,oBAAoB,QAAQ;AAClD,UAAM,kBAAkB,OAAO,UAAU;AACzC,UAAM,qBAAqB,MAAM,KAAK,UAAU,0BAA0B;AAG1E,UAAM,iBAAiB,MAAM,UAAU,sBAAsB;AAAA,MACzD;AAAA,MACA;AAAA,MACA,YAAY;AAAA,MACZ,oBAAoB;AAAA,MACpB,wBAAwB;AAAA,IAC5B,CAAC;AACD,UAAM;AAAA,MACF;AAAA,MACA,UAAU,EAAE,iBAAiB,oBAAoB,uBAAuB;AAAA,IAC5E,IAAI,MAAM,UAAU,uBAAuB;AAC3C,QAAI,oBAAoB;AACpB,YAAM,IAAI,oBAAoB,oDAAoD;AAGtF,wBAAoB;AAAA,MAChB,GAAG,SAAS,QAAQ;AAAA,MACpB,GAAI,0BAA0B,CAAC;AAAA,IACnC;AAGA,UAAM,EAAE,IAAI,GAAG,IAAI,MAAM,QAAQ,YAAY,iBAAiB,QAAQ;AACtE,UAAM,UAAU,QAAQ,OAAO,OAAO,KAAK,CAAC,eAAe,gBAAgB,eAAe,CAAC,GAAG,EAAE;AAChG,UAAM,IAAI,QAAQ,SAAS;AAC3B,UAAM,UAAU,cAAc,EAAE,GAAG,EAAE,CAAC;AAGtC,UAAM,EAAE,GAAG,GAAG,SAAS,IAAI,MAAM,UAAU,cAAc;AACzD,UAAM,EAAE,IAAI,KAAK,IAAI,IAAI,MAAM,QAAQ,+BAA+B,IAAI,GAAG,CAAC;AAC9E,QAAI,CAAC,MAAM,SAAS,UAAU,GAAG;AAC7B,YAAM,IAAI,oBAAoB,wDAAwD;AAC1F,UAAM,UAAU,cAAc,EAAE,UAAU,IAAI,CAAC;AAG/C,UAAM,UAAU,eAAe,0BAA0B;AACzD,UAAM,gBAAgB,MAAM,KAAK,UAAU,oBAAoB;AAAA,MAC3D,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,YAAY,OAAO;AAAA,MACnB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,MAAM,IAAI,WAAW,CAAC;AAAA,MACtB,aAAa;AAAA,MACb,cAAc;AAAA,MACd,uBAAuB;AAAA,IAC3B,CAAC;AACD,UAAM,UAAU,MAAM;AACtB,WAAO,KAAK,yCAAyC,UAAU,eAAe,CAAC,GAAG;AAElF,WAAO;AAAA,EACX;AACJ;",
+  "names": []
+}

package/dist/esm/session/pase/PaseMessages.d.ts

@@ -0,0 +1,85 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/** @see {@link MatterSpecification.v13.Core} § 4.12.8 */
+export declare const TlvSessionParameters: import("#types").ObjectSchema<{
+    /** Maximum sleep interval of node when in idle mode. */
+    idleIntervalMs: import("#types").OptionalFieldType<number>;
+    /** Maximum sleep interval of node when in active mode. */
+    activeIntervalMs: import("#types").OptionalFieldType<number>;
+    /** Minimum amount of time the node SHOULD stay active after network activity. */
+    activeThresholdMs: import("#types").OptionalFieldType<number>;
+    /** Data model revision. */
+    dataModelRevision: import("#types").OptionalFieldType<number>;
+    /** Interaction model revision. */
+    interactionModelRevision: import("#types").OptionalFieldType<number>;
+    /** Specification version. */
+    specificationVersion: import("#types").OptionalFieldType<number>;
+    /** Maximum Paths pert Invoke */
+    maxPathsPerInvoke: import("#types").OptionalFieldType<number>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPbkdfParamRequest: import("#types").ObjectSchema<{
+    initiatorRandom: import("#types").FieldType<Uint8Array>;
+    initiatorSessionId: import("#types").FieldType<number>;
+    passcodeId: import("#types").FieldType<number>;
+    hasPbkdfParameters: import("#types").FieldType<boolean>;
+    initiatorSessionParams: import("#types").OptionalFieldType<import("#types").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleIntervalMs: import("#types").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeIntervalMs: import("#types").OptionalFieldType<number>;
+        /** Minimum amount of time the node SHOULD stay active after network activity. */
+        activeThresholdMs: import("#types").OptionalFieldType<number>;
+        /** Data model revision. */
+        dataModelRevision: import("#types").OptionalFieldType<number>;
+        /** Interaction model revision. */
+        interactionModelRevision: import("#types").OptionalFieldType<number>;
+        /** Specification version. */
+        specificationVersion: import("#types").OptionalFieldType<number>;
+        /** Maximum Paths pert Invoke */
+        maxPathsPerInvoke: import("#types").OptionalFieldType<number>;
+    }>>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPbkdfParamResponse: import("#types").ObjectSchema<{
+    initiatorRandom: import("#types").FieldType<Uint8Array>;
+    responderRandom: import("#types").FieldType<Uint8Array>;
+    responderSessionId: import("#types").FieldType<number>;
+    pbkdfParameters: import("#types").OptionalFieldType<import("#types").TypeFromFields<{
+        iterations: import("#types").FieldType<number>;
+        salt: import("#types").FieldType<Uint8Array>;
+    }>>;
+    responderSessionParams: import("#types").OptionalFieldType<import("#types").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleIntervalMs: import("#types").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeIntervalMs: import("#types").OptionalFieldType<number>;
+        /** Minimum amount of time the node SHOULD stay active after network activity. */
+        activeThresholdMs: import("#types").OptionalFieldType<number>;
+        /** Data model revision. */
+        dataModelRevision: import("#types").OptionalFieldType<number>;
+        /** Interaction model revision. */
+        interactionModelRevision: import("#types").OptionalFieldType<number>;
+        /** Specification version. */
+        specificationVersion: import("#types").OptionalFieldType<number>;
+        /** Maximum Paths pert Invoke */
+        maxPathsPerInvoke: import("#types").OptionalFieldType<number>;
+    }>>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPasePake1: import("#types").ObjectSchema<{
+    x: import("#types").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPasePake2: import("#types").ObjectSchema<{
+    y: import("#types").FieldType<Uint8Array>;
+    verifier: import("#types").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPasePake3: import("#types").ObjectSchema<{
+    verifier: import("#types").FieldType<Uint8Array>;
+}>;
+//# sourceMappingURL=PaseMessages.d.ts.map

package/dist/esm/session/pase/PaseMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessages.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,yDAAyD;AACzD,eAAO,MAAM,oBAAoB;IAC7B,wDAAwD;;IAGxD,0DAA0D;;IAG1D,iFAAiF;;IAGjF,2BAA2B;;IAG3B,kCAAkC;;IAGlC,6BAA6B;;IAG7B,gCAAgC;;EAElC,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB;;;;;;QAvB7B,wDAAwD;;QAGxD,0DAA0D;;QAG1D,iFAAiF;;QAGjF,2BAA2B;;QAG3B,kCAAkC;;QAGlC,6BAA6B;;QAG7B,gCAAgC;;;EAWlC,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB;;;;;;;;;QAhC9B,wDAAwD;;QAGxD,0DAA0D;;QAG1D,iFAAiF;;QAGjF,2BAA2B;;QAG3B,kCAAkC;;QAGlC,6BAA6B;;QAG7B,gCAAgC;;;EA0BlC,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,YAAY;;EAEvB,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,YAAY;;;EAGvB,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,YAAY;;EAEvB,CAAC"}

package/dist/esm/session/pase/PaseMessages.js

@@ -0,0 +1,68 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { CRYPTO_HASH_LEN_BYTES, CRYPTO_PUBLIC_KEY_SIZE_BYTES } from "#general";
+import { TlvBoolean, TlvByteString, TlvField, TlvObject, TlvOptionalField, TlvUInt16, TlvUInt32 } from "#types";
+const TlvSessionParameters = TlvObject({
+  /** Maximum sleep interval of node when in idle mode. */
+  idleIntervalMs: TlvOptionalField(1, TlvUInt32),
+  /** Maximum sleep interval of node when in active mode. */
+  activeIntervalMs: TlvOptionalField(2, TlvUInt32),
+  /** Minimum amount of time the node SHOULD stay active after network activity. */
+  activeThresholdMs: TlvOptionalField(3, TlvUInt16),
+  /** Data model revision. */
+  dataModelRevision: TlvOptionalField(4, TlvUInt16),
+  /** Interaction model revision. */
+  interactionModelRevision: TlvOptionalField(5, TlvUInt16),
+  /** Specification version. */
+  specificationVersion: TlvOptionalField(6, TlvUInt32),
+  /** Maximum Paths pert Invoke */
+  maxPathsPerInvoke: TlvOptionalField(7, TlvUInt16)
+});
+const TlvPbkdfParamRequest = TlvObject({
+  initiatorRandom: TlvField(1, TlvByteString.bound({ length: 32 })),
+  initiatorSessionId: TlvField(2, TlvUInt16),
+  // Specs: range: 16bits
+  passcodeId: TlvField(3, TlvUInt16),
+  // Specs: length: 16bits so min is 0x8000?
+  hasPbkdfParameters: TlvField(4, TlvBoolean),
+  initiatorSessionParams: TlvOptionalField(5, TlvSessionParameters)
+});
+const TlvPbkdfParamResponse = TlvObject({
+  initiatorRandom: TlvField(1, TlvByteString.bound({ length: 32 })),
+  responderRandom: TlvField(2, TlvByteString.bound({ length: 32 })),
+  responderSessionId: TlvField(3, TlvUInt16),
+  pbkdfParameters: TlvOptionalField(
+    4,
+    TlvObject({
+      iterations: TlvField(1, TlvUInt32),
+      salt: TlvField(2, TlvByteString.bound({ minLength: 16, maxLength: 32 }))
+    })
+  ),
+  responderSessionParams: TlvOptionalField(5, TlvSessionParameters)
+});
+const TlvPasePake1 = TlvObject({
+  x: TlvField(1, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES }))
+  // pA
+});
+const TlvPasePake2 = TlvObject({
+  y: TlvField(1, TlvByteString.bound({ length: CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+  // pB
+  verifier: TlvField(2, TlvByteString.bound({ length: CRYPTO_HASH_LEN_BYTES }))
+  // cB
+});
+const TlvPasePake3 = TlvObject({
+  verifier: TlvField(1, TlvByteString.bound({ length: CRYPTO_HASH_LEN_BYTES }))
+  // cA
+});
+export {
+  TlvPasePake1,
+  TlvPasePake2,
+  TlvPasePake3,
+  TlvPbkdfParamRequest,
+  TlvPbkdfParamResponse,
+  TlvSessionParameters
+};
+//# sourceMappingURL=PaseMessages.js.map

package/dist/esm/session/pase/PaseMessages.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/session/pase/PaseMessages.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,uBAAuB,oCAAoC;AACpE,SAAS,YAAY,eAAe,UAAU,WAAW,kBAAkB,WAAW,iBAAiB;AAGhG,MAAM,uBAAuB,UAAU;AAAA;AAAA,EAE1C,gBAAgB,iBAAiB,GAAG,SAAS;AAAA;AAAA,EAG7C,kBAAkB,iBAAiB,GAAG,SAAS;AAAA;AAAA,EAG/C,mBAAmB,iBAAiB,GAAG,SAAS;AAAA;AAAA,EAGhD,mBAAmB,iBAAiB,GAAG,SAAS;AAAA;AAAA,EAGhD,0BAA0B,iBAAiB,GAAG,SAAS;AAAA;AAAA,EAGvD,sBAAsB,iBAAiB,GAAG,SAAS;AAAA;AAAA,EAGnD,mBAAmB,iBAAiB,GAAG,SAAS;AACpD,CAAC;AAGM,MAAM,uBAAuB,UAAU;AAAA,EAC1C,iBAAiB,SAAS,GAAG,cAAc,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC;AAAA,EAChE,oBAAoB,SAAS,GAAG,SAAS;AAAA;AAAA,EACzC,YAAY,SAAS,GAAG,SAAS;AAAA;AAAA,EACjC,oBAAoB,SAAS,GAAG,UAAU;AAAA,EAC1C,wBAAwB,iBAAiB,GAAG,oBAAoB;AACpE,CAAC;AAGM,MAAM,wBAAwB,UAAU;AAAA,EAC3C,iBAAiB,SAAS,GAAG,cAAc,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC;AAAA,EAChE,iBAAiB,SAAS,GAAG,cAAc,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC;AAAA,EAChE,oBAAoB,SAAS,GAAG,SAAS;AAAA,EACzC,iBAAiB;AAAA,IACb;AAAA,IACA,UAAU;AAAA,MACN,YAAY,SAAS,GAAG,SAAS;AAAA,MACjC,MAAM,SAAS,GAAG,cAAc,MAAM,EAAE,WAAW,IAAI,WAAW,GAAG,CAAC,CAAC;AAAA,IAC3E,CAAC;AAAA,EACL;AAAA,EACA,wBAAwB,iBAAiB,GAAG,oBAAoB;AACpE,CAAC;AAGM,MAAM,eAAe,UAAU;AAAA,EAClC,GAAG,SAAS,GAAG,cAAc,MAAM,EAAE,QAAQ,6BAA6B,CAAC,CAAC;AAAA;AAChF,CAAC;AAGM,MAAM,eAAe,UAAU;AAAA,EAClC,GAAG,SAAS,GAAG,cAAc,MAAM,EAAE,QAAQ,6BAA6B,CAAC,CAAC;AAAA;AAAA,EAC5E,UAAU,SAAS,GAAG,cAAc,MAAM,EAAE,QAAQ,sBAAsB,CAAC,CAAC;AAAA;AAChF,CAAC;AAGM,MAAM,eAAe,UAAU;AAAA,EAClC,UAAU,SAAS,GAAG,cAAc,MAAM,EAAE,QAAQ,sBAAsB,CAAC,CAAC;AAAA;AAChF,CAAC;",
+  "names": []
+}

package/dist/esm/session/pase/PaseMessenger.d.ts

@@ -0,0 +1,75 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { TypeFromSchema } from "#types";
+import { SecureChannelMessenger } from "../../securechannel/SecureChannelMessenger.js";
+import { TlvPasePake1, TlvPasePake2, TlvPasePake3, TlvPbkdfParamRequest, TlvPbkdfParamResponse } from "./PaseMessages.js";
+export declare const DEFAULT_PASSCODE_ID = 0;
+export declare const SPAKE_CONTEXT: Uint8Array;
+type PbkdfParamRequest = TypeFromSchema<typeof TlvPbkdfParamRequest>;
+type PbkdfParamResponse = TypeFromSchema<typeof TlvPbkdfParamResponse>;
+type PasePake1 = TypeFromSchema<typeof TlvPasePake1>;
+type PasePake2 = TypeFromSchema<typeof TlvPasePake2>;
+type PasePake3 = TypeFromSchema<typeof TlvPasePake3>;
+export declare class PaseServerMessenger extends SecureChannelMessenger {
+    readPbkdfParamRequest(): Promise<{
+        requestPayload: Uint8Array;
+        request: import("#types").TypeFromFields<{
+            initiatorRandom: import("#types").FieldType<Uint8Array>;
+            initiatorSessionId: import("#types").FieldType<number>;
+            passcodeId: import("#types").FieldType<number>;
+            hasPbkdfParameters: import("#types").FieldType<boolean>;
+            initiatorSessionParams: import("#types").OptionalFieldType<import("#types").TypeFromFields<{
+                idleIntervalMs: import("#types").OptionalFieldType<number>;
+                activeIntervalMs: import("#types").OptionalFieldType<number>;
+                activeThresholdMs: import("#types").OptionalFieldType<number>;
+                dataModelRevision: import("#types").OptionalFieldType<number>;
+                interactionModelRevision: import("#types").OptionalFieldType<number>;
+                specificationVersion: import("#types").OptionalFieldType<number>;
+                maxPathsPerInvoke: import("#types").OptionalFieldType<number>;
+            }>>;
+        }>;
+    }>;
+    sendPbkdfParamResponse(response: PbkdfParamResponse): Promise<Uint8Array>;
+    readPasePake1(): Promise<import("#types").TypeFromFields<{
+        x: import("#types").FieldType<Uint8Array>;
+    }>>;
+    sendPasePake2(pasePake2: PasePake2): Promise<Uint8Array>;
+    readPasePake3(): Promise<import("#types").TypeFromFields<{
+        verifier: import("#types").FieldType<Uint8Array>;
+    }>>;
+}
+export declare class PaseClientMessenger extends SecureChannelMessenger {
+    sendPbkdfParamRequest(request: PbkdfParamRequest): Promise<Uint8Array>;
+    readPbkdfParamResponse(): Promise<{
+        responsePayload: Uint8Array;
+        response: import("#types").TypeFromFields<{
+            initiatorRandom: import("#types").FieldType<Uint8Array>;
+            responderRandom: import("#types").FieldType<Uint8Array>;
+            responderSessionId: import("#types").FieldType<number>;
+            pbkdfParameters: import("#types").OptionalFieldType<import("#types").TypeFromFields<{
+                iterations: import("#types").FieldType<number>;
+                salt: import("#types").FieldType<Uint8Array>;
+            }>>;
+            responderSessionParams: import("#types").OptionalFieldType<import("#types").TypeFromFields<{
+                idleIntervalMs: import("#types").OptionalFieldType<number>;
+                activeIntervalMs: import("#types").OptionalFieldType<number>;
+                activeThresholdMs: import("#types").OptionalFieldType<number>;
+                dataModelRevision: import("#types").OptionalFieldType<number>;
+                interactionModelRevision: import("#types").OptionalFieldType<number>;
+                specificationVersion: import("#types").OptionalFieldType<number>;
+                maxPathsPerInvoke: import("#types").OptionalFieldType<number>;
+            }>>;
+        }>;
+    }>;
+    sendPasePake1(pasePake1: PasePake1): Promise<Uint8Array>;
+    readPasePake2(): Promise<import("#types").TypeFromFields<{
+        y: import("#types").FieldType<Uint8Array>;
+        verifier: import("#types").FieldType<Uint8Array>;
+    }>>;
+    sendPasePake3(pasePake3: PasePake3): Promise<Uint8Array>;
+}
+export {};
+//# sourceMappingURL=PaseMessenger.d.ts.map

package/dist/esm/session/pase/PaseMessenger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessenger.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessenger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAqB,cAAc,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EAEH,sBAAsB,EACzB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACH,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACxB,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,aAAa,YAAiD,CAAC;AAE5E,KAAK,iBAAiB,GAAG,cAAc,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACrE,KAAK,kBAAkB,GAAG,cAAc,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACvE,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AACrD,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AACrD,KAAK,SAAS,GAAG,cAAc,CAAC,OAAO,YAAY,CAAC,CAAC;AAErD,qBAAa,mBAAoB,SAAQ,sBAAsB;IACrD,qBAAqB;;;;;;;;;;;;;;;;;;IASrB,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB;IAMzD,aAAa;;;IAIb,aAAa,CAAC,SAAS,EAAE,SAAS;IAIlC,aAAa;;;CAGhB;AAED,qBAAa,mBAAoB,SAAQ,sBAAsB;IAC3D,qBAAqB,CAAC,OAAO,EAAE,iBAAiB;IAM1C,sBAAsB;;;;;;;;;;;;;;;;;;;;;IAS5B,aAAa,CAAC,SAAS,EAAE,SAAS;IAIlC,aAAa;;;;IAIb,aAAa,CAAC,SAAS,EAAE,SAAS;CAGrC"}

package/dist/esm/session/pase/PaseMessenger.js

@@ -0,0 +1,75 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Bytes } from "#general";
+import { SecureMessageType } from "#types";
+import {
+  DEFAULT_NORMAL_PROCESSING_TIME_MS,
+  SecureChannelMessenger
+} from "../../securechannel/SecureChannelMessenger.js";
+import {
+  TlvPasePake1,
+  TlvPasePake2,
+  TlvPasePake3,
+  TlvPbkdfParamRequest,
+  TlvPbkdfParamResponse
+} from "./PaseMessages.js";
+const DEFAULT_PASSCODE_ID = 0;
+const SPAKE_CONTEXT = Bytes.fromString("CHIP PAKE V1 Commissioning");
+class PaseServerMessenger extends SecureChannelMessenger {
+  async readPbkdfParamRequest() {
+    const { payload } = await this.nextMessage(
+      "PASE PbkdfParamRequest",
+      SecureMessageType.PbkdfParamRequest,
+      DEFAULT_NORMAL_PROCESSING_TIME_MS
+    );
+    return { requestPayload: payload, request: TlvPbkdfParamRequest.decode(payload) };
+  }
+  async sendPbkdfParamResponse(response) {
+    return this.send(response, SecureMessageType.PbkdfParamResponse, TlvPbkdfParamResponse, {
+      expectedProcessingTimeMs: DEFAULT_NORMAL_PROCESSING_TIME_MS
+    });
+  }
+  readPasePake1() {
+    return this.nextMessageDecoded(SecureMessageType.PasePake1, TlvPasePake1, "PASE Pake1");
+  }
+  sendPasePake2(pasePake2) {
+    return this.send(pasePake2, SecureMessageType.PasePake2, TlvPasePake2);
+  }
+  readPasePake3() {
+    return this.nextMessageDecoded(SecureMessageType.PasePake3, TlvPasePake3, "PASE Pake3");
+  }
+}
+class PaseClientMessenger extends SecureChannelMessenger {
+  sendPbkdfParamRequest(request) {
+    return this.send(request, SecureMessageType.PbkdfParamRequest, TlvPbkdfParamRequest, {
+      expectedProcessingTimeMs: DEFAULT_NORMAL_PROCESSING_TIME_MS
+    });
+  }
+  async readPbkdfParamResponse() {
+    const { payload } = await this.nextMessage(
+      "PASE PbkdfParamResponse",
+      SecureMessageType.PbkdfParamResponse,
+      DEFAULT_NORMAL_PROCESSING_TIME_MS
+    );
+    return { responsePayload: payload, response: TlvPbkdfParamResponse.decode(payload) };
+  }
+  sendPasePake1(pasePake1) {
+    return this.send(pasePake1, SecureMessageType.PasePake1, TlvPasePake1);
+  }
+  readPasePake2() {
+    return this.nextMessageDecoded(SecureMessageType.PasePake2, TlvPasePake2, "PASE Pake2");
+  }
+  sendPasePake3(pasePake3) {
+    return this.send(pasePake3, SecureMessageType.PasePake3, TlvPasePake3);
+  }
+}
+export {
+  DEFAULT_PASSCODE_ID,
+  PaseClientMessenger,
+  PaseServerMessenger,
+  SPAKE_CONTEXT
+};
+//# sourceMappingURL=PaseMessenger.js.map

package/dist/esm/session/pase/PaseMessenger.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/session/pase/PaseMessenger.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,aAAa;AACtB,SAAS,yBAAyC;AAClD;AAAA,EACI;AAAA,EACA;AAAA,OACG;AACP;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AAEA,MAAM,sBAAsB;AAC5B,MAAM,gBAAgB,MAAM,WAAW,4BAA4B;AAQnE,MAAM,4BAA4B,uBAAuB;AAAA,EAC5D,MAAM,wBAAwB;AAC1B,UAAM,EAAE,QAAQ,IAAI,MAAM,KAAK;AAAA,MAC3B;AAAA,MACA,kBAAkB;AAAA,MAClB;AAAA,IACJ;AACA,WAAO,EAAE,gBAAgB,SAAS,SAAS,qBAAqB,OAAO,OAAO,EAAE;AAAA,EACpF;AAAA,EAEA,MAAM,uBAAuB,UAA8B;AACvD,WAAO,KAAK,KAAK,UAAU,kBAAkB,oBAAoB,uBAAuB;AAAA,MACpF,0BAA0B;AAAA,IAC9B,CAAC;AAAA,EACL;AAAA,EAEA,gBAAgB;AACZ,WAAO,KAAK,mBAAmB,kBAAkB,WAAW,cAAc,YAAY;AAAA,EAC1F;AAAA,EAEA,cAAc,WAAsB;AAChC,WAAO,KAAK,KAAK,WAAW,kBAAkB,WAAW,YAAY;AAAA,EACzE;AAAA,EAEA,gBAAgB;AACZ,WAAO,KAAK,mBAAmB,kBAAkB,WAAW,cAAc,YAAY;AAAA,EAC1F;AACJ;AAEO,MAAM,4BAA4B,uBAAuB;AAAA,EAC5D,sBAAsB,SAA4B;AAC9C,WAAO,KAAK,KAAK,SAAS,kBAAkB,mBAAmB,sBAAsB;AAAA,MACjF,0BAA0B;AAAA,IAC9B,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,yBAAyB;AAC3B,UAAM,EAAE,QAAQ,IAAI,MAAM,KAAK;AAAA,MAC3B;AAAA,MACA,kBAAkB;AAAA,MAClB;AAAA,IACJ;AACA,WAAO,EAAE,iBAAiB,SAAS,UAAU,sBAAsB,OAAO,OAAO,EAAE;AAAA,EACvF;AAAA,EAEA,cAAc,WAAsB;AAChC,WAAO,KAAK,KAAK,WAAW,kBAAkB,WAAW,YAAY;AAAA,EACzE;AAAA,EAEA,gBAAgB;AACZ,WAAO,KAAK,mBAAmB,kBAAkB,WAAW,cAAc,YAAY;AAAA,EAC1F;AAAA,EAEA,cAAc,WAAsB;AAChC,WAAO,KAAK,KAAK,WAAW,kBAAkB,WAAW,YAAY;AAAA,EACzE;AACJ;",
+  "names": []
+}

package/dist/esm/session/pase/PaseServer.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterFlowError, PbkdfParameters } from "#general";
+import { SessionManager } from "#session/SessionManager.js";
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { ProtocolHandler } from "../../protocol/ProtocolHandler.js";
+import { PaseServerMessenger } from "./PaseMessenger.js";
+export declare class MaximumPasePairingErrorsReachedError extends MatterFlowError {
+}
+export declare class PaseServer implements ProtocolHandler {
+    private sessions;
+    private readonly w0;
+    private readonly L;
+    private readonly pbkdfParameters?;
+    private pairingTimer;
+    private pairingErrors;
+    static fromPin(sessions: SessionManager, setupPinCode: number, pbkdfParameters: PbkdfParameters): Promise<PaseServer>;
+    static fromVerificationValue(sessions: SessionManager, verificationValue: Uint8Array, pbkdfParameters?: PbkdfParameters): PaseServer;
+    constructor(sessions: SessionManager, w0: bigint, L: Uint8Array, pbkdfParameters?: PbkdfParameters | undefined);
+    getId(): number;
+    onNewExchange(exchange: MessageExchange): Promise<void>;
+    private handlePairingRequest;
+    cancelPairing(messenger: PaseServerMessenger, sendError?: boolean): Promise<void>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=PaseServer.d.ts.map

package/dist/esm/session/pase/PaseServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseServer.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAKH,eAAe,EACf,eAAe,EAKlB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE,OAAO,EAAuB,mBAAmB,EAAiB,MAAM,oBAAoB,CAAC;AAS7F,qBAAa,oCAAqC,SAAQ,eAAe;CAAG;AAE5E,qBAAa,UAAW,YAAW,eAAe;IAoB1C,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IAtBrC,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,aAAa,CAAK;WAEb,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe;IAKrG,MAAM,CAAC,qBAAqB,CACxB,QAAQ,EAAE,cAAc,EACxB,iBAAiB,EAAE,UAAU,EAC7B,eAAe,CAAC,EAAE,eAAe;gBAQzB,QAAQ,EAAE,cAAc,EACf,EAAE,EAAE,MAAM,EACV,CAAC,EAAE,UAAU,EACb,eAAe,CAAC,EAAE,eAAe,YAAA;IAGtD,KAAK,IAAI,MAAM;IAIT,aAAa,CAAC,QAAQ,EAAE,eAAe;YA0B/B,oBAAoB;IAmF5B,aAAa,CAAC,SAAS,EAAE,mBAAmB,EAAE,SAAS,UAAO;IAU9D,KAAK;CAGd"}

package/dist/esm/session/pase/PaseServer.js

@@ -0,0 +1,148 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import {
+  Bytes,
+  Crypto,
+  ec,
+  Logger,
+  MatterFlowError,
+  Spake2p,
+  Time,
+  UnexpectedDataError
+} from "#general";
+import { NodeId, ProtocolStatusCode, SECURE_CHANNEL_PROTOCOL_ID } from "#types";
+import { ChannelStatusResponseError } from "../../securechannel/SecureChannelMessenger.js";
+import { DEFAULT_PASSCODE_ID, PaseServerMessenger, SPAKE_CONTEXT } from "./PaseMessenger.js";
+const { bytesToNumberBE } = ec;
+const logger = Logger.get("PaseServer");
+const PASE_PAIRING_TIMEOUT_MS = 6e4;
+const PASE_COMMISSIONING_MAX_ERRORS = 20;
+class MaximumPasePairingErrorsReachedError extends MatterFlowError {
+}
+class PaseServer {
+  constructor(sessions, w0, L, pbkdfParameters) {
+    this.sessions = sessions;
+    this.w0 = w0;
+    this.L = L;
+    this.pbkdfParameters = pbkdfParameters;
+  }
+  pairingTimer;
+  pairingErrors = 0;
+  static async fromPin(sessions, setupPinCode, pbkdfParameters) {
+    const { w0, L } = await Spake2p.computeW0L(pbkdfParameters, setupPinCode);
+    return new PaseServer(sessions, w0, L, pbkdfParameters);
+  }
+  static fromVerificationValue(sessions, verificationValue, pbkdfParameters) {
+    const w0 = bytesToNumberBE(verificationValue.slice(0, 32));
+    const L = verificationValue.slice(32, 32 + 65);
+    return new PaseServer(sessions, w0, L, pbkdfParameters);
+  }
+  getId() {
+    return SECURE_CHANNEL_PROTOCOL_ID;
+  }
+  async onNewExchange(exchange) {
+    const messenger = new PaseServerMessenger(exchange);
+    try {
+      await this.handlePairingRequest(messenger);
+    } catch (error) {
+      this.pairingErrors++;
+      logger.error(
+        `An error occurred during the PASE commissioning (${this.pairingErrors}/${PASE_COMMISSIONING_MAX_ERRORS}):`,
+        error
+      );
+      const sendError = !(error instanceof ChannelStatusResponseError);
+      await this.cancelPairing(messenger, sendError);
+      if (this.pairingErrors >= PASE_COMMISSIONING_MAX_ERRORS) {
+        throw new MaximumPasePairingErrorsReachedError(
+          `Pase server: Too many errors during PASE commissioning, aborting commissioning window`
+        );
+      }
+    } finally {
+      await exchange.session.destroy();
+    }
+  }
+  async handlePairingRequest(messenger) {
+    if (this.sessions.getPaseSession()) {
+      throw new MatterFlowError(
+        "Pase server: Pairing already in progress (PASE session exists), ignoring new exchange."
+      );
+    }
+    if (this.pairingTimer !== void 0 && this.pairingTimer.isRunning) {
+      throw new MatterFlowError(
+        "Pase server: Pairing already in progress (PASE establishment Timer running), ignoring new exchange."
+      );
+    }
+    logger.info(`Received pairing request from ${messenger.getChannelName()}.`);
+    this.pairingTimer = Time.getTimer(
+      "PASE pairing timeout",
+      PASE_PAIRING_TIMEOUT_MS,
+      () => this.cancelPairing(messenger)
+    ).start();
+    const {
+      requestPayload,
+      request: {
+        initiatorRandom,
+        initiatorSessionParams,
+        passcodeId,
+        hasPbkdfParameters,
+        initiatorSessionId: peerSessionId
+      }
+    } = await messenger.readPbkdfParamRequest();
+    if (passcodeId !== DEFAULT_PASSCODE_ID) {
+      throw new UnexpectedDataError(`Unsupported passcode ID ${passcodeId}.`);
+    }
+    const responderSessionId = await this.sessions.getNextAvailableSessionId();
+    const responderRandom = Crypto.getRandom();
+    const responsePayload = await messenger.sendPbkdfParamResponse({
+      initiatorRandom,
+      responderRandom,
+      responderSessionId,
+      pbkdfParameters: hasPbkdfParameters ? void 0 : this.pbkdfParameters,
+      responderSessionParams: this.sessions.sessionParameters
+      // responder session parameters
+    });
+    const spake2p = Spake2p.create(Crypto.hash([SPAKE_CONTEXT, requestPayload, responsePayload]), this.w0);
+    const { x: X } = await messenger.readPasePake1();
+    const Y = spake2p.computeY();
+    const { Ke, hAY, hBX } = await spake2p.computeSecretAndVerifiersFromX(this.L, X, Y);
+    await messenger.sendPasePake2({ y: Y, verifier: hBX });
+    const { verifier } = await messenger.readPasePake3();
+    if (!Bytes.areEqual(verifier, hAY)) {
+      throw new UnexpectedDataError("Received incorrect key confirmation from the initiator.");
+    }
+    await this.sessions.createSecureSession({
+      sessionId: responderSessionId,
+      fabric: void 0,
+      peerNodeId: NodeId.UNSPECIFIED_NODE_ID,
+      peerSessionId,
+      sharedSecret: Ke,
+      salt: new Uint8Array(0),
+      isInitiator: false,
+      isResumption: false,
+      peerSessionParameters: initiatorSessionParams
+    });
+    logger.info(`Session ${responderSessionId} created with ${messenger.getChannelName()}.`);
+    await messenger.sendSuccess();
+    await messenger.close();
+    this.pairingTimer?.stop();
+    this.pairingTimer = void 0;
+  }
+  async cancelPairing(messenger, sendError = true) {
+    this.pairingTimer?.stop();
+    this.pairingTimer = void 0;
+    if (sendError) {
+      await messenger.sendError(ProtocolStatusCode.InvalidParam);
+    }
+    await messenger.close();
+  }
+  async close() {
+  }
+}
+export {
+  MaximumPasePairingErrorsReachedError,
+  PaseServer
+};
+//# sourceMappingURL=PaseServer.js.map

package/dist/esm/session/pase/PaseServer.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/session/pase/PaseServer.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,OACG;AAEP,SAAS,QAAQ,oBAAoB,kCAAkC;AAGvE,SAAS,kCAAkC;AAC3C,SAAS,qBAAqB,qBAAqB,qBAAqB;AAExE,MAAM,EAAE,gBAAgB,IAAI;AAE5B,MAAM,SAAS,OAAO,IAAI,YAAY;AAEtC,MAAM,0BAA0B;AAChC,MAAM,gCAAgC;AAE/B,MAAM,6CAA6C,gBAAgB;AAAC;AAEpE,MAAM,WAAsC;AAAA,EAmB/C,YACY,UACS,IACA,GACA,iBACnB;AAJU;AACS;AACA;AACA;AAAA,EAClB;AAAA,EAvBK;AAAA,EACA,gBAAgB;AAAA,EAExB,aAAa,QAAQ,UAA0B,cAAsB,iBAAkC;AACnG,UAAM,EAAE,IAAI,EAAE,IAAI,MAAM,QAAQ,WAAW,iBAAiB,YAAY;AACxE,WAAO,IAAI,WAAW,UAAU,IAAI,GAAG,eAAe;AAAA,EAC1D;AAAA,EAEA,OAAO,sBACH,UACA,mBACA,iBACF;AACE,UAAM,KAAK,gBAAgB,kBAAkB,MAAM,GAAG,EAAE,CAAC;AACzD,UAAM,IAAI,kBAAkB,MAAM,IAAI,KAAK,EAAE;AAC7C,WAAO,IAAI,WAAW,UAAU,IAAI,GAAG,eAAe;AAAA,EAC1D;AAAA,EASA,QAAgB;AACZ,WAAO;AAAA,EACX;AAAA,EAEA,MAAM,cAAc,UAA2B;AAC3C,UAAM,YAAY,IAAI,oBAAoB,QAAQ;AAClD,QAAI;AACA,YAAM,KAAK,qBAAqB,SAAS;AAAA,IAC7C,SAAS,OAAO;AACZ,WAAK;AACL,aAAO;AAAA,QACH,oDAAoD,KAAK,aAAa,IAAI,6BAA6B;AAAA,QACvG;AAAA,MACJ;AAGA,YAAM,YAAY,EAAE,iBAAiB;AACrC,YAAM,KAAK,cAAc,WAAW,SAAS;AAE7C,UAAI,KAAK,iBAAiB,+BAA+B;AACrD,cAAM,IAAI;AAAA,UACN;AAAA,QACJ;AAAA,MACJ;AAAA,IACJ,UAAE;AAEE,YAAM,SAAS,QAAQ,QAAQ;AAAA,IACnC;AAAA,EACJ;AAAA,EAEA,MAAc,qBAAqB,WAAgC;AAK/D,QAAI,KAAK,SAAS,eAAe,GAAG;AAChC,YAAM,IAAI;AAAA,QACN;AAAA,MACJ;AAAA,IACJ;AAEA,QAAI,KAAK,iBAAiB,UAAa,KAAK,aAAa,WAAW;AAChE,YAAM,IAAI;AAAA,QACN;AAAA,MACJ;AAAA,IACJ;AAEA,WAAO,KAAK,iCAAiC,UAAU,eAAe,CAAC,GAAG;AAE1E,SAAK,eAAe,KAAK;AAAA,MAAS;AAAA,MAAwB;AAAA,MAAyB,MAC/E,KAAK,cAAc,SAAS;AAAA,IAChC,EAAE,MAAM;AAGR,UAAM;AAAA,MACF;AAAA,MACA,SAAS;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,oBAAoB;AAAA,MACxB;AAAA,IACJ,IAAI,MAAM,UAAU,sBAAsB;AAC1C,QAAI,eAAe,qBAAqB;AACpC,YAAM,IAAI,oBAAoB,2BAA2B,UAAU,GAAG;AAAA,IAC1E;AAEA,UAAM,qBAAqB,MAAM,KAAK,SAAS,0BAA0B;AACzE,UAAM,kBAAkB,OAAO,UAAU;AAEzC,UAAM,kBAAkB,MAAM,UAAU,uBAAuB;AAAA,MAC3D;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,qBAAqB,SAAY,KAAK;AAAA,MACvD,wBAAwB,KAAK,SAAS;AAAA;AAAA,IAC1C,CAAC;AAGD,UAAM,UAAU,QAAQ,OAAO,OAAO,KAAK,CAAC,eAAe,gBAAgB,eAAe,CAAC,GAAG,KAAK,EAAE;AACrG,UAAM,EAAE,GAAG,EAAE,IAAI,MAAM,UAAU,cAAc;AAC/C,UAAM,IAAI,QAAQ,SAAS;AAC3B,UAAM,EAAE,IAAI,KAAK,IAAI,IAAI,MAAM,QAAQ,+BAA+B,KAAK,GAAG,GAAG,CAAC;AAClF,UAAM,UAAU,cAAc,EAAE,GAAG,GAAG,UAAU,IAAI,CAAC;AAGrD,UAAM,EAAE,SAAS,IAAI,MAAM,UAAU,cAAc;AACnD,QAAI,CAAC,MAAM,SAAS,UAAU,GAAG,GAAG;AAChC,YAAM,IAAI,oBAAoB,yDAAyD;AAAA,IAC3F;AAGA,UAAM,KAAK,SAAS,oBAAoB;AAAA,MACpC,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,YAAY,OAAO;AAAA,MACnB;AAAA,MACA,cAAc;AAAA,MACd,MAAM,IAAI,WAAW,CAAC;AAAA,MACtB,aAAa;AAAA,MACb,cAAc;AAAA,MACd,uBAAuB;AAAA,IAC3B,CAAC;AACD,WAAO,KAAK,WAAW,kBAAkB,iBAAiB,UAAU,eAAe,CAAC,GAAG;AAEvF,UAAM,UAAU,YAAY;AAC5B,UAAM,UAAU,MAAM;AAEtB,SAAK,cAAc,KAAK;AACxB,SAAK,eAAe;AAAA,EACxB;AAAA,EAEA,MAAM,cAAc,WAAgC,YAAY,MAAM;AAClE,SAAK,cAAc,KAAK;AACxB,SAAK,eAAe;AAEpB,QAAI,WAAW;AACX,YAAM,UAAU,UAAU,mBAAmB,YAAY;AAAA,IAC7D;AACA,UAAM,UAAU,MAAM;AAAA,EAC1B;AAAA,EAEA,MAAM,QAAQ;AAAA,EAEd;AACJ;",
+  "names": []
+}