@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.149

package/dist/transport/control-route.js

@@ -0,0 +1,84 @@
+/**
+ * The control plane's routing endpoint for mdbase-next apps:
+ * `GET {server}/v1/next/collections/:id/route` with the app's access token.
+ *
+ * ```json
+ * {"collection": "…", "grant": "…", "targets": [{"kind": "…", "device": "<uuid>",
+ *   "noise_pk": "<64 hex>", "url": "wss://…/v1/next/relay/client", "relay_collection": "…"}],
+ *  "availability": {"state": "unavailable", "reason": "device_offline"},
+ *  "reason": "no_device_registered"}
+ * ```
+ *
+ * `availability` (Private collections) is advisory; an `unavailable` one fails the
+ * open with {@link collectionUnavailableError}, including the 200 `sync_required`
+ * answer for a grant whose collection must be set up again.
+ *
+ * `routeFromControl` turns one response into the `RelayRoute` `relayConnector` wants,
+ * and `controlRouteResolver` fetches it on every (re)connect, so the three app ports
+ * share one mapping.
+ */
+import { LOCAL_APPLICATION_BUILD, localApplicationHttpOrigin } from "../local-build.js";
+import { fromHex } from "../cbor.js";
+import { collectionUnavailableError, parseCollectionAvailability } from "../collection-availability.js";
+import { mdbaseError } from "../errors.js";
+/**
+ * The first usable target, or `null` when there is none (the SDK then reports
+ * `unavailable` / `no_device_online`; `no_device_registered` is kept as the reason).
+ * Relay targets (with `relay_collection`) use the relay Noise pipe and need the
+ * access token; others are direct WebSockets (the hosted replica).
+ */
+export function routeFromControl(res, accessToken) {
+    for (const t of res.targets ?? []) {
+        if (!/^[0-9a-f]{64}$/i.test(t.noise_pk) || !t.url || !t.device)
+            continue;
+        const route = { url: t.url, targetDevice: t.device, noisePublicKey: fromHex(t.noise_pk) };
+        if (t.relay_collection)
+            route.pipe = { collection: t.relay_collection, accessToken };
+        return route;
+    }
+    return null;
+}
+/** A `resolveRoute` for `relayConnector`, backed by the control plane. */
+export function controlRouteResolver(o) {
+    let server;
+    try {
+        server = new URL(o.server);
+    }
+    catch {
+        throw mdbaseError("invalid_request", "The control plane requires an HTTPS origin");
+    }
+    if ((server.protocol !== "https:" && !(LOCAL_APPLICATION_BUILD && localApplicationHttpOrigin(o.server))) || server.username || server.password || server.pathname !== "/" || server.search || server.hash) {
+        throw mdbaseError("invalid_request", "The control plane requires an HTTPS origin without credentials, path, query or fragment");
+    }
+    // Snapshot the validated destination before retrieving any access token.
+    const url = `${server.origin}/v1/next/collections/${encodeURIComponent(o.collection)}/route`;
+    const f = o.fetch ?? globalThis.fetch.bind(globalThis);
+    return async () => {
+        const token = await o.accessToken();
+        let res;
+        try {
+            res = await f(url, { headers: { authorization: `Bearer ${token}` }, redirect: "error" });
+        }
+        catch {
+            throw mdbaseError("unavailable", "cannot reach the control plane", "control_unreachable");
+        }
+        if (res.status === 401)
+            throw mdbaseError("unauthenticated", "the control plane refused the access token");
+        if (res.status === 409) {
+            // The grant has no registered client key: consent must run again.
+            throw mdbaseError("unauthenticated", "this app's key is not registered with its grant", "client_key_required");
+        }
+        if (!res.ok)
+            throw mdbaseError("unavailable", `control plane answered ${res.status}`, "control_error");
+        const body = (await res.json());
+        const availability = parseCollectionAvailability(body.availability);
+        if (availability?.state === "unavailable")
+            throw collectionUnavailableError(availability.reason);
+        const route = routeFromControl(body, token);
+        if (!route && body.reason === "no_device_registered") {
+            throw mdbaseError("unavailable", "this collection has no device set up to serve it", "no_device_registered");
+        }
+        return route;
+    };
+}
+//# sourceMappingURL=control-route.js.map

package/dist/transport/control-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-route.js","sourceRoot":"","sources":["../../src/transport/control-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAA+B,MAAM,+BAA+B,CAAC;AACrI,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAmB3C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAyB,EAAE,WAAmB;IAC7E,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS;QACzE,MAAM,KAAK,GAAe,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtG,IAAI,CAAC,CAAC,gBAAgB;YAAE,KAAK,CAAC,IAAI,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,CAAsB;IACzD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,uBAAuB,IAAI,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1M,MAAM,WAAW,CAAC,iBAAiB,EAAE,yFAAyF,CAAC,CAAC;IAClI,CAAC;IACD,yEAAyE;IACzE,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,wBAAwB,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;IAC7F,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,WAAW,CAAC,aAAa,EAAE,gCAAgC,EAAE,qBAAqB,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;QAC3G,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,kEAAkE;YAClE,MAAM,WAAW,CAAC,iBAAiB,EAAE,iDAAiD,EAAE,qBAAqB,CAAC,CAAC;QACjH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,aAAa,EAAE,0BAA0B,GAAG,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;QACvG,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;QACxD,MAAM,YAAY,GAAG,2BAA2B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpE,IAAI,YAAY,EAAE,KAAK,KAAK,aAAa;YAAE,MAAM,0BAA0B,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACjG,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACrD,MAAM,WAAW,CAAC,aAAa,EAAE,kDAAkD,EAAE,sBAAsB,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/transport/inprocess.d.ts

@@ -0,0 +1,13 @@
+import type { Connector, FramePort } from "./port.js";
+export interface InProcessConnectOptions {
+    /** The grant of a plugin attaching to another plugin's host; absent for the hosting plugin. */
+    grant?: string;
+    /** The collection to attach to, when the runtime hosts several. */
+    collection?: string;
+}
+/** What a shared runtime offers in process. */
+export interface InProcessRuntime {
+    connect(options: InProcessConnectOptions): FramePort;
+}
+/** A connector to a runtime in this JS process. */
+export declare function inProcessConnector(runtime: InProcessRuntime, options?: InProcessConnectOptions): Connector;

package/dist/transport/inprocess.js

@@ -0,0 +1,37 @@
+import { mdbaseError } from "../errors.js";
+/** A connector to a runtime in this JS process. */
+export function inProcessConnector(runtime, options = {}) {
+    return {
+        description: "in-process",
+        open(hello, signal) {
+            return new Promise((resolve, reject) => {
+                let port;
+                try {
+                    port = runtime.connect(options);
+                }
+                catch (e) {
+                    reject(mdbaseError("unavailable", `runtime refused to connect: ${String(e)}`));
+                    return;
+                }
+                const onAbort = () => {
+                    port.close();
+                    reject(mdbaseError("cancelled", "connect aborted"));
+                };
+                signal?.addEventListener("abort", onAbort, { once: true });
+                port.onframe = (f) => {
+                    // The first frame back is the hello response (request ID 0).
+                    signal?.removeEventListener("abort", onAbort);
+                    port.onframe = null;
+                    port.onclose = null;
+                    resolve({ port, helloResponse: f });
+                };
+                port.onclose = (e) => {
+                    signal?.removeEventListener("abort", onAbort);
+                    reject(e ?? mdbaseError("unavailable", "runtime closed the session"));
+                };
+                port.send(hello);
+            });
+        },
+    };
+}
+//# sourceMappingURL=inprocess.js.map

package/dist/transport/inprocess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inprocess.js","sourceRoot":"","sources":["../../src/transport/inprocess.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAe3C,mDAAmD;AACnD,MAAM,UAAU,kBAAkB,CAAC,OAAyB,EAAE,UAAmC,EAAE;IACjG,OAAO;QACL,WAAW,EAAE,YAAY;QACzB,IAAI,CAAC,KAAgB,EAAE,MAAoB;YACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,IAAI,IAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAClC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,+BAA+B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC/E,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,IAAI,CAAC,KAAK,EAAE,CAAC;oBACb,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;gBACtD,CAAC,CAAC;gBACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3D,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE;oBACnB,6DAA6D;oBAC7D,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;oBACpB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;oBACpB,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtC,CAAC,CAAC;gBACF,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE;oBACnB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC9C,MAAM,CAAC,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC,CAAC;gBACxE,CAAC,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/transport/local-link.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The localhost link between the Obsidian runtime and the desktop daemon
+ * (`replica-client-api.md` §12.4):
+ *
+ * - `ws://127.0.0.1:<port>/v1/plugin`, port and per-start token from the daemon's
+ *   owner-only `local-link.json` (read by the host: `readLocalLink` in
+ *   `@mdbase-dev/sdk/node`, or the plugin's own desktop file API);
+ * - the daemon's Noise key from its owner-only `daemon.json` is **pinned** as the IK
+ *   responder key, so a process squatting on the port fails the handshake;
+ * - the 64-byte prologue goes first in clear (one WebSocket message), then Noise
+ *   message 1 whose encrypted payload is `{0: token, 1: hello-params}`: the token never
+ *   appears in a URL or in clear;
+ * - prologue: `"mdbase/v1/client" ‖ collection ‖ 16 zero bytes ‖ daemon device ID`
+ *   (zero device ID for a local-only collection); the zero grant marks the hosting
+ *   session;
+ * - message 2 carries the `hello` response frame; frames as §12.3;
+ * - the daemon serves the session only if the user linked this static key to the
+ *   collection on screen (`link_not_approved` otherwise), and only the data, holds,
+ *   files, presence and fence methods (anything else: `confirm_in_daemon_ui`).
+ */
+import { CborValue } from "../cbor.js";
+import { Uuid } from "../wire.js";
+import { KeyPair, StaticKey } from "./noise.js";
+import { WebSocketFactory } from "./noise-session.js";
+import type { Connector } from "./port.js";
+export interface LocalLink {
+    port: number;
+    /** 32 bytes, fresh at each daemon start. */
+    token: Uint8Array;
+    /** The daemon's device ID (`daemon.json`). */
+    device: Uuid;
+    /** The daemon's replica Noise public key (`daemon.json`): pinned. */
+    noisePublicKey: Uint8Array;
+}
+export interface LocalLinkConnectorOptions {
+    link: LocalLink | (() => Promise<LocalLink>);
+    collection: Uuid;
+    /** A local-only collection uses the zero device ID in the prologue. */
+    localOnly?: boolean;
+    /**
+     * Initiator static key. Pass a key kept for this plugin installation: the daemon
+     * serves a collection on the link only to a key the user linked to it on screen
+     * (once per collection and key). The token only proves the plugin
+     * can read the link file. An ephemeral key (the default) asks the user every time.
+     */
+    staticKey?: KeyPair | StaticKey;
+    /** WebSocket factory (Obsidian desktop: the global WebSocket, Origin app://obsidian.md). */
+    webSocket?: WebSocketFactory;
+}
+/** `{0: token, 1: hello-params}`, canonical, from the `hello` request frame. */
+export declare function localLinkFirstPayload(token: Uint8Array, hello: CborValue): Uint8Array;
+/** A connector to the desktop daemon over the authenticated localhost link. */
+export declare function localLinkConnector(o: LocalLinkConnectorOptions): Connector;

package/dist/transport/local-link.js

@@ -0,0 +1,66 @@
+/**
+ * The localhost link between the Obsidian runtime and the desktop daemon
+ * (`replica-client-api.md` §12.4):
+ *
+ * - `ws://127.0.0.1:<port>/v1/plugin`, port and per-start token from the daemon's
+ *   owner-only `local-link.json` (read by the host: `readLocalLink` in
+ *   `@mdbase-dev/sdk/node`, or the plugin's own desktop file API);
+ * - the daemon's Noise key from its owner-only `daemon.json` is **pinned** as the IK
+ *   responder key, so a process squatting on the port fails the handshake;
+ * - the 64-byte prologue goes first in clear (one WebSocket message), then Noise
+ *   message 1 whose encrypted payload is `{0: token, 1: hello-params}`: the token never
+ *   appears in a URL or in clear;
+ * - prologue: `"mdbase/v1/client" ‖ collection ‖ 16 zero bytes ‖ daemon device ID`
+ *   (zero device ID for a local-only collection); the zero grant marks the hosting
+ *   session;
+ * - message 2 carries the `hello` response frame; frames as §12.3;
+ * - the daemon serves the session only if the user linked this static key to the
+ *   collection on screen (`link_not_approved` otherwise), and only the data, holds,
+ *   files, presence and fence methods (anything else: `confirm_in_daemon_ui`).
+ */
+import { encode } from "../cbor.js";
+import { uuidToBytes } from "../codec.js";
+import { mdbaseError } from "../errors.js";
+import { clientFrame } from "../wire.js";
+import { clientPrologue, generateKeyPair } from "./noise.js";
+import { noiseConnector, webSocketCarrier } from "./noise-session.js";
+const ZERO16 = new Uint8Array(16);
+/** `{0: token, 1: hello-params}`, canonical, from the `hello` request frame. */
+export function localLinkFirstPayload(token, hello) {
+    if (token.length !== 32)
+        throw mdbaseError("invalid_request", "the link token is 32 bytes");
+    const f = clientFrame.dec(hello);
+    if (f.kind !== "request" || f.method !== "hello")
+        throw mdbaseError("internal", "expected the hello request");
+    return encode(new Map([
+        [0, token],
+        [1, f.params],
+    ]));
+}
+/** A connector to the desktop daemon over the authenticated localhost link. */
+export function localLinkConnector(o) {
+    const collection = uuidToBytes(o.collection);
+    const staticKey = o.staticKey ?? generateKeyPair();
+    let current = null;
+    return noiseConnector({
+        description: "localhost-link",
+        staticKey,
+        firstPayload: (hello) => localLinkFirstPayload(current.token, hello),
+        target: async () => {
+            // Re-read every (re)connect: the daemon mints a new port and token at each start.
+            current = typeof o.link === "function" ? await o.link() : o.link;
+            const link = current;
+            if (!Number.isInteger(link.port) || link.port <= 0 || link.port > 65535) {
+                throw mdbaseError("unavailable", "invalid local link port", "daemon_not_running");
+            }
+            const prologue = clientPrologue(collection, null, o.localOnly ? ZERO16 : uuidToBytes(link.device));
+            return {
+                prologue,
+                preamble: prologue,
+                remoteStatic: link.noisePublicKey,
+                openCarrier: (signal) => webSocketCarrier(`ws://127.0.0.1:${link.port}/v1/plugin`, o.webSocket, signal),
+            };
+        },
+    });
+}
+//# sourceMappingURL=local-link.js.map

package/dist/transport/local-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-link.js","sourceRoot":"","sources":["../../src/transport/local-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAa,MAAM,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAQ,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAsB,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAoB,MAAM,oBAAoB,CAAC;AA6BxF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAElC,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,KAAiB,EAAE,KAAgB;IACvE,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IAC5F,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;QAAE,MAAM,WAAW,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IAC9G,OAAO,MAAM,CACX,IAAI,GAAG,CAAoB;QACzB,CAAC,CAAC,EAAE,KAAK,CAAC;QACV,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;KACd,CAAC,CACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,CAA4B;IAC7D,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC;IACnD,IAAI,OAAO,GAAqB,IAAI,CAAC;IACrC,OAAO,cAAc,CAAC;QACpB,WAAW,EAAE,gBAAgB;QAC7B,SAAS;QACT,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACrE,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,kFAAkF;YAClF,OAAO,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,MAAM,IAAI,GAAG,OAAO,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;gBACxE,MAAM,WAAW,CAAC,aAAa,EAAE,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACnG,OAAO;gBACL,QAAQ;gBACR,QAAQ,EAAE,QAAQ;gBAClB,YAAY,EAAE,IAAI,CAAC,cAAc;gBACjC,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,kBAAkB,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC;aACxG,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/transport/next-relay.d.ts

@@ -0,0 +1,64 @@
+import { type CollectionAvailability } from "../collection-availability.js";
+import type { Uuid } from "../wire.js";
+import { KeyPair, StaticKey } from "./noise.js";
+import { MessageCarrier } from "./noise-session.js";
+import type { Connector } from "./port.js";
+/** The authenticated relay stream `openPipe` returns: raw chunks, not whole messages. */
+export interface AuthenticatedRelayByteDuplex {
+    send(bytes: Uint8Array): void;
+    onmessage: ((bytes: Uint8Array) => void) | null;
+    onclose: ((event?: {
+        code?: number;
+        reason?: string;
+    }) => void) | null;
+    close(): void;
+}
+export interface NextRouteTarget {
+    readonly kind: "desktop" | "cli" | "hosted";
+    readonly device: string;
+    readonly noise_pk: string;
+    readonly url: string;
+    readonly relay_collection?: string;
+    /** Preference hint only; never authorization or proof of reachability. */
+    readonly online?: boolean;
+}
+export interface NextRouteResponse {
+    readonly collection: string;
+    readonly grant: string;
+    readonly targets: readonly NextRouteTarget[];
+    /** Private collections: advisory; `unavailable` fails the open with its reason. */
+    readonly availability?: CollectionAvailability;
+    readonly reason?: "no_device_registered";
+}
+/** What `mdbaseNext(connection)` from `@mdbase-dev/connect/next` provides. */
+export interface NextBridge {
+    route(collection: string, options?: {
+        signal?: AbortSignal;
+    }): Promise<NextRouteResponse>;
+    /** `options.signal` bounds the open and, once admitted, the pipe's whole lifetime. */
+    openPipe(collection: string, target: NextRouteTarget, options?: {
+        signal?: AbortSignal;
+    }): Promise<AuthenticatedRelayByteDuplex>;
+}
+/**
+ * Whole Noise messages over an authenticated relay duplex: `u32be(len) ‖ message` out,
+ * reassembled from arbitrarily chunked input. Oversized lengths end the pipe.
+ */
+export declare function duplexCarrier(d: AuthenticatedRelayByteDuplex): MessageCarrier;
+export interface NextRelayConnectorOptions {
+    /** `mdbaseNext(connection)` from `@mdbase-dev/connect/next`. */
+    next: NextBridge;
+    /** The collection the app holds a grant for (the route's `collection`). */
+    collection: Uuid;
+    /** The grant's client key, registered at consent (`nextClientKey`). */
+    staticKey: KeyPair | StaticKey;
+}
+/** Valid relay targets, sticky device first, then those hinted online, in route order. */
+export declare function orderTargets(route: NextRouteResponse, sticky: string | null): NextRouteTarget[];
+/**
+ * A connector for web apps reaching a device replica through the relay. Every
+ * (re)connect asks for a fresh route and pipe; the token never reaches this code.
+ */
+export declare function nextRelayConnector(o: NextRelayConnectorOptions): Connector & {
+    readonly target: string | null;
+};

package/dist/transport/next-relay.js

@@ -0,0 +1,222 @@
+/**
+ * Browser apps to a device replica through Connect's relay, with the access token kept
+ * inside the Connect client (`@mdbase-dev/connect/next`, control contracts pinned to
+ * Connect #600/#604):
+ *
+ * 1. `next.route(collection)` lists the grant's targets (no token in the response);
+ * 2. `next.openPipe(collection, target)` re-validates that target, authenticates the
+ *    relay pipe (`pipe_auth` → `pipe_opened`) and returns an authenticated byte duplex;
+ * 3. this module frames `u32be(len) ‖ Noise message` on that duplex exactly once and
+ *    runs Noise IK with a prologue binding the relay collection, the route's grant and
+ *    the target device — the same values the relay gives the daemon in `pipe_open`.
+ *    It never sends a second `pipe_auth` and never sees the token.
+ *
+ * **Sticky target.** Reconnects stay on the device they last reached while the route
+ * still lists it; only then do they move. The client's read fence
+ * (`MdbaseClient`, `confirmed_through`) keeps a switch from serving older data.
+ */
+import { uuidToBytes } from "../codec.js";
+import { collectionUnavailableError, parseCollectionAvailability } from "../collection-availability.js";
+import { isMdbaseError, mdbaseError } from "../errors.js";
+import { clientPrologue } from "./noise.js";
+import { noiseConnector } from "./noise-session.js";
+import { pipeCloseError } from "./relay-pipe.js";
+import { registerNextRelayFence } from "./read-fence-policy.js";
+/** Max Noise message, and max relay chunk (`u32be` length + message). */
+const MAX_MESSAGE = 65535;
+const MAX_CHUNK = 4 + MAX_MESSAGE;
+const MAX_EARLY = 16;
+const MAX_EARLY_BYTES = 1 << 20;
+const UUID = /^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i;
+/**
+ * Whole Noise messages over an authenticated relay duplex: `u32be(len) ‖ message` out,
+ * reassembled from arbitrarily chunked input. Oversized lengths end the pipe.
+ */
+export function duplexCarrier(d) {
+    let buf = new Uint8Array(0);
+    let closed = false;
+    let terminal;
+    let onmessage = null;
+    let onclose = null;
+    // Messages that arrive before a consumer is attached (bounded), and the terminal
+    // state, are kept and delivered when it attaches.
+    const early = [];
+    let earlyBytes = 0;
+    const carrier = {
+        get onmessage() {
+            return onmessage;
+        },
+        set onmessage(f) {
+            onmessage = f;
+            while (f && !closed && early.length && onmessage === f) {
+                const m = early.shift();
+                earlyBytes -= m.length;
+                f(m);
+            }
+        },
+        get onclose() {
+            return onclose;
+        },
+        set onclose(f) {
+            onclose = f;
+            if (f && closed && terminal)
+                f(terminal);
+        },
+        send(m) {
+            if (closed)
+                throw mdbaseError("unavailable", "relay pipe closed");
+            if (m.length > MAX_MESSAGE)
+                throw mdbaseError("too_large", "Noise message over 65535 bytes");
+            const f = new Uint8Array(4 + m.length);
+            new DataView(f.buffer).setUint32(0, m.length);
+            f.set(m, 4);
+            d.send(f);
+        },
+        close() {
+            if (closed)
+                return;
+            closed = true;
+            early.length = 0;
+            earlyBytes = 0;
+            d.close();
+        },
+    };
+    const fail = (code, reason) => {
+        if (closed)
+            return;
+        closed = true;
+        buf = new Uint8Array(0);
+        // Terminal purge: queued ciphertext is dropped; only the close event is kept.
+        early.length = 0;
+        earlyBytes = 0;
+        terminal = pipeCloseError(code, reason);
+        d.close();
+        onclose?.(terminal);
+    };
+    const deliver = (m) => {
+        if (closed)
+            return;
+        if (onmessage)
+            return onmessage(m);
+        if (early.length >= MAX_EARLY || earlyBytes + m.length > MAX_EARLY_BYTES)
+            return fail(4000, "invalid_frame");
+        early.push(m);
+        earlyBytes += m.length;
+    };
+    d.onmessage = (chunk) => {
+        if (closed)
+            return;
+        if (chunk.length > MAX_CHUNK)
+            return fail(4000, "invalid_frame");
+        const b = new Uint8Array(buf.length + chunk.length);
+        b.set(buf);
+        b.set(chunk, buf.length);
+        let off = 0;
+        while (b.length - off >= 4) {
+            const len = new DataView(b.buffer, b.byteOffset + off, 4).getUint32(0);
+            if (len > MAX_MESSAGE)
+                return fail(4000, "invalid_frame");
+            if (b.length - off - 4 < len)
+                break;
+            const m = b.slice(off + 4, off + 4 + len);
+            off += 4 + len;
+            deliver(m);
+            if (closed)
+                return;
+        }
+        buf = b.slice(off);
+        if (buf.length > MAX_CHUNK)
+            fail(4000, "invalid_frame");
+    };
+    d.onclose = (ev) => fail(ev?.code, ev?.reason);
+    return carrier;
+}
+/**
+ * Connect client errors as SDK errors: a missing or revoked authorization stops the
+ * client (`unauthenticated`); anything else (refused or failed admission, timeouts,
+ * a route that no longer validates) is `unavailable` and retried with backoff.
+ */
+async function bridged(f) {
+    try {
+        return await f();
+    }
+    catch (e) {
+        if (isMdbaseError(e))
+            throw e;
+        const code = e?.code;
+        if (code === "not_authorized")
+            throw mdbaseError("unauthenticated", "Connect authorization is missing", "not_authorized");
+        // Admission refused by the relay: the client passes its close code and known reason.
+        const cause = e?.cause;
+        if (typeof cause?.code === "number") {
+            throw pipeCloseError(cause.code, typeof cause.reason === "string" ? cause.reason : undefined);
+        }
+        throw mdbaseError("unavailable", "the relay pipe could not be opened", "relay_unavailable");
+    }
+}
+/** Valid relay targets, sticky device first, then those hinted online, in route order. */
+export function orderTargets(route, sticky) {
+    const usable = route.targets.filter((t) => UUID.test(t.device) && /^[0-9a-f]{64}$/.test(t.noise_pk) && !!t.relay_collection && UUID.test(t.relay_collection));
+    const stuck = usable.filter((t) => t.device === sticky);
+    if (stuck.length)
+        return stuck;
+    return [...usable.filter((t) => t.online === true), ...usable.filter((t) => t.online !== true)];
+}
+/**
+ * A connector for web apps reaching a device replica through the relay. Every
+ * (re)connect asks for a fresh route and pipe; the token never reaches this code.
+ */
+export function nextRelayConnector(o) {
+    // Pin original host references/scope before any route/pipe await.
+    const collection = o.collection, next = o.next, staticKey = o.staticKey;
+    if (!UUID.test(collection))
+        throw mdbaseError("invalid_request", "collection must be a UUID");
+    const routeCall = next.route.bind(next), pipeCall = next.openPipe.bind(next);
+    let sticky = null;
+    const connector = noiseConnector({
+        description: `next-relay:${collection}`,
+        staticKey,
+        target: async (signal) => {
+            const route = await bridged(() => routeCall(collection, signal ? { signal } : {}));
+            if (route.collection.toLowerCase() !== collection.toLowerCase() || !UUID.test(route.grant)) {
+                throw mdbaseError("unauthenticated", "the route does not match this collection's grant", "route_mismatch");
+            }
+            const availability = parseCollectionAvailability(route.availability);
+            if (availability?.state === "unavailable")
+                throw collectionUnavailableError(availability.reason);
+            const selected = orderTargets(route, sticky)[0];
+            if (!selected) {
+                throw mdbaseError("unavailable", route.reason === "no_device_registered"
+                    ? "this collection has no device set up to serve it"
+                    : "no device of this collection is online", route.reason ?? "no_device_online");
+            }
+            const target = Object.freeze({ ...selected });
+            const hex = target.noise_pk;
+            const remoteStatic = new Uint8Array(32);
+            for (let i = 0; i < 32; i++)
+                remoteStatic[i] = parseInt(hex.slice(2 * i, 2 * i + 2), 16);
+            return {
+                // Must equal the daemon's pipe_open prologue: relay collection, grant, device.
+                prologue: clientPrologue(uuidToBytes(target.relay_collection), uuidToBytes(route.grant), uuidToBytes(target.device)),
+                remoteStatic,
+                device: target.device,
+                openCarrier: async (signal) => {
+                    const pipe = await bridged(() => pipeCall(collection, target, signal ? { signal } : {}));
+                    return duplexCarrier(pipe);
+                },
+            };
+        },
+    });
+    return registerNextRelayFence({
+        description: connector.description,
+        open: async (hello, signal) => {
+            const opened = await connector.open(hello, signal);
+            sticky = opened.device ?? null;
+            return opened;
+        },
+        get target() {
+            return sticky;
+        },
+    });
+}
+//# sourceMappingURL=next-relay.js.map

package/dist/transport/next-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"next-relay.js","sourceRoot":"","sources":["../../src/transport/next-relay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAA+B,MAAM,+BAA+B,CAAC;AACrI,OAAO,EAAE,aAAa,EAAE,WAAW,EAAoB,MAAM,cAAc,CAAC;AAE5E,OAAO,EAAE,cAAc,EAAsB,MAAM,YAAY,CAAC;AAChE,OAAO,EAAkB,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAwChE,yEAAyE;AACzE,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,SAAS,GAAG,CAAC,GAAG,WAAW,CAAC;AAClC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,CAAC;AAChC,MAAM,IAAI,GAAG,gDAAgD,CAAC;AAE9D;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAA+B;IAC3D,IAAI,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,QAAiC,CAAC;IACtC,IAAI,SAAS,GAAgC,IAAI,CAAC;IAClD,IAAI,OAAO,GAA8B,IAAI,CAAC;IAC9C,iFAAiF;IACjF,kDAAkD;IAClD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,OAAO,GAAmB;QAC9B,IAAI,SAAS;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,SAAS,CAAC,CAAC;YACb,SAAS,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;gBACzB,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC;gBACvB,CAAC,CAAC,CAAC,CAAC,CAAC;YACP,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YACT,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,CAAC,CAAC;YACX,OAAO,GAAG,CAAC,CAAC;YACZ,IAAI,CAAC,IAAI,MAAM,IAAI,QAAQ;gBAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,CAAC;YACJ,IAAI,MAAM;gBAAE,MAAM,WAAW,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;YAClE,IAAI,CAAC,CAAC,MAAM,GAAG,WAAW;gBAAE,MAAM,WAAW,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;YAC7F,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACZ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;QACD,KAAK;YACH,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACjB,UAAU,GAAG,CAAC,CAAC;YACf,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;KACF,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAe,EAAE,EAAE;QAC9C,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACxB,8EAA8E;QAC9E,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACjB,UAAU,GAAG,CAAC,CAAC;QACf,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;IACtB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,CAAa,EAAE,EAAE;QAChC,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,IAAI,UAAU,GAAG,CAAC,CAAC,MAAM,GAAG,eAAe;YAAE,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC7G,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC;IACzB,CAAC,CAAC;IACF,CAAC,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE;QACtB,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;YAAE,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACvE,IAAI,GAAG,GAAG,WAAW;gBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG;gBAAE,MAAM;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YAC1C,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;YACf,OAAO,CAAC,CAAC,CAAC,CAAC;YACX,IAAI,MAAM;gBAAE,OAAO;QACrB,CAAC;QACD,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS;YAAE,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC;AACjB,CAAC;AAWD;;;;GAIG;AACH,KAAK,UAAU,OAAO,CAAI,CAAmB;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,aAAa,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAI,CAA+B,EAAE,IAAI,CAAC;QACpD,IAAI,IAAI,KAAK,gBAAgB;YAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,kCAAkC,EAAE,gBAAgB,CAAC,CAAC;QAC1H,qFAAqF;QACrF,MAAM,KAAK,GAAI,CAA6D,EAAE,KAAK,CAAC;QACpF,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,WAAW,CAAC,aAAa,EAAE,oCAAoC,EAAE,mBAAmB,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,KAAwB,EAAE,MAAqB;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CACzH,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAA4B;IAC7D,kEAAkE;IAClE,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IACxE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,cAAc,CAAC;QAC/B,WAAW,EAAE,cAAc,UAAU,EAAE;QACvC,SAAS;QACT,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnF,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3F,MAAM,WAAW,CAAC,iBAAiB,EAAE,kDAAkD,EAAE,gBAAgB,CAAC,CAAC;YAC7G,CAAC;YACD,MAAM,YAAY,GAAG,2BAA2B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACrE,IAAI,YAAY,EAAE,KAAK,KAAK,aAAa;gBAAE,MAAM,0BAA0B,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACjG,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,WAAW,CACf,aAAa,EACb,KAAK,CAAC,MAAM,KAAK,sBAAsB;oBACrC,CAAC,CAAC,kDAAkD;oBACpD,CAAC,CAAC,wCAAwC,EAC5C,KAAK,CAAC,MAAM,IAAI,kBAAkB,CACnC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC5B,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;gBAAE,YAAY,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzF,OAAO;gBACL,+EAA+E;gBAC/E,QAAQ,EAAE,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,gBAAiB,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrH,YAAY;gBACZ,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBAC5B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACzF,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IACH,OAAO,sBAAsB,CAAC;QAC5B,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC5B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}