@meshwhisper/sdk 0.1.0

package/dist/packet/index.js

@@ -0,0 +1,244 @@
+// ============================================================
+// MeshWhisper SDK — Binary Packet Codec
+// Encodes/decodes the wire format defined in PRD section 9.
+// ============================================================
+import { PacketFlags } from '../types.js';
+import lz4 from 'lz4js';
+import { randomBytes } from 'node:crypto';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Current protocol wire version. */
+export const PROTOCOL_VERSION = 0x01;
+/** Fixed header size in bytes (version + flags + dest_hash + sender_eph_id + ttl + payload_length). */
+export const HEADER_SIZE = 29;
+/** Maximum hop count. */
+export const MAX_TTL = 7;
+/** Maximum encrypted payload size (uint16 max). */
+export const MAX_PAYLOAD_SIZE = 65535;
+// Internal field offsets within the header.
+const OFF_VERSION = 0;
+const OFF_FLAGS = 1;
+const OFF_DEST_HASH = 2;
+const OFF_SENDER_EPH_ID = 10; // 2 + 8
+const OFF_TTL = 26; // 10 + 16
+const OFF_PAYLOAD_LEN = 27; // 26 + 1
+// ---------------------------------------------------------------------------
+// Validation helpers
+// ---------------------------------------------------------------------------
+function assertUint8Array(value, expectedLen, name) {
+    if (!(value instanceof Uint8Array)) {
+        throw new TypeError(`${name} must be a Uint8Array`);
+    }
+    if (value.length !== expectedLen) {
+        throw new RangeError(`${name} must be exactly ${expectedLen} bytes, got ${value.length}`);
+    }
+}
+function assertValidFlags(flags) {
+    const valid = [
+        PacketFlags.DATA,
+        PacketFlags.ACK,
+        PacketFlags.CHAFF,
+        PacketFlags.HANDSHAKE,
+        PacketFlags.ROUTE_REQUEST,
+        PacketFlags.ROUTE_OFFER,
+    ];
+    if (!valid.includes(flags)) {
+        throw new RangeError(`Invalid packet flags: 0x${flags.toString(16).padStart(2, '0')}`);
+    }
+}
+// ---------------------------------------------------------------------------
+// Encoding
+// ---------------------------------------------------------------------------
+/**
+ * Serialize a {@link Packet} into its binary wire representation.
+ *
+ * Layout (29-byte header + variable payload):
+ * | version (1) | flags (1) | dest_hash (8) | sender_ephemeral_id (16) | ttl (1) | payload_length (2 BE) | encrypted_payload (N) |
+ */
+export function encodePacket(packet) {
+    // --- Field validation ---
+    if (packet.version !== PROTOCOL_VERSION) {
+        throw new RangeError(`Unsupported protocol version: ${packet.version}`);
+    }
+    assertValidFlags(packet.flags);
+    assertUint8Array(packet.destHash, 8, 'destHash');
+    assertUint8Array(packet.senderEphemeralId, 16, 'senderEphemeralId');
+    if (!Number.isInteger(packet.ttl) || packet.ttl < 0 || packet.ttl > MAX_TTL) {
+        throw new RangeError(`ttl must be an integer between 0 and ${MAX_TTL}, got ${packet.ttl}`);
+    }
+    if (!(packet.encryptedPayload instanceof Uint8Array)) {
+        throw new TypeError('encryptedPayload must be a Uint8Array');
+    }
+    if (packet.encryptedPayload.length > MAX_PAYLOAD_SIZE) {
+        throw new RangeError(`encryptedPayload exceeds maximum size of ${MAX_PAYLOAD_SIZE} bytes (got ${packet.encryptedPayload.length})`);
+    }
+    // --- Serialise ---
+    const payloadLen = packet.encryptedPayload.length;
+    const buf = new Uint8Array(HEADER_SIZE + payloadLen);
+    const view = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);
+    buf[OFF_VERSION] = packet.version;
+    buf[OFF_FLAGS] = packet.flags;
+    buf.set(packet.destHash, OFF_DEST_HASH);
+    buf.set(packet.senderEphemeralId, OFF_SENDER_EPH_ID);
+    buf[OFF_TTL] = packet.ttl;
+    view.setUint16(OFF_PAYLOAD_LEN, payloadLen, false); // big-endian
+    buf.set(packet.encryptedPayload, HEADER_SIZE);
+    return buf;
+}
+// ---------------------------------------------------------------------------
+// Decoding
+// ---------------------------------------------------------------------------
+/**
+ * Deserialize a binary buffer into a {@link Packet}.
+ *
+ * @throws on malformed input (too short, wrong version, invalid flags, length mismatch).
+ */
+export function decodePacket(data) {
+    if (!(data instanceof Uint8Array)) {
+        throw new TypeError('data must be a Uint8Array');
+    }
+    if (data.length < HEADER_SIZE) {
+        throw new RangeError(`Packet too short: expected at least ${HEADER_SIZE} bytes, got ${data.length}`);
+    }
+    const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+    const version = data[OFF_VERSION];
+    if (version !== PROTOCOL_VERSION) {
+        throw new RangeError(`Unsupported protocol version: ${version}`);
+    }
+    const flags = data[OFF_FLAGS];
+    assertValidFlags(flags);
+    const destHash = data.slice(OFF_DEST_HASH, OFF_DEST_HASH + 8);
+    const senderEphemeralId = data.slice(OFF_SENDER_EPH_ID, OFF_SENDER_EPH_ID + 16);
+    const ttl = data[OFF_TTL];
+    if (ttl > MAX_TTL) {
+        throw new RangeError(`ttl exceeds maximum of ${MAX_TTL}: got ${ttl}`);
+    }
+    const payloadLength = view.getUint16(OFF_PAYLOAD_LEN, false); // big-endian
+    if (data.length < HEADER_SIZE + payloadLength) {
+        throw new RangeError(`Packet truncated: header declares ${payloadLength} payload bytes, but only ${data.length - HEADER_SIZE} available`);
+    }
+    const encryptedPayload = data.slice(HEADER_SIZE, HEADER_SIZE + payloadLength);
+    return {
+        version,
+        flags,
+        destHash,
+        senderEphemeralId,
+        ttl,
+        payloadLength,
+        encryptedPayload,
+    };
+}
+// ---------------------------------------------------------------------------
+// LZ4 Compression (applied to plaintext BEFORE encryption)
+// ---------------------------------------------------------------------------
+/**
+ * Compress a plaintext payload with LZ4 (frame format).
+ */
+export function compressPayload(plaintext) {
+    if (!(plaintext instanceof Uint8Array)) {
+        throw new TypeError('plaintext must be a Uint8Array');
+    }
+    // lz4js.compress returns a Buffer/Uint8Array of the compressed frame.
+    const compressed = lz4.compress(plaintext);
+    return new Uint8Array(compressed);
+}
+/**
+ * Decompress an LZ4 compressed payload back to plaintext.
+ */
+export function decompressPayload(compressed) {
+    if (!(compressed instanceof Uint8Array)) {
+        throw new TypeError('compressed must be a Uint8Array');
+    }
+    const decompressed = lz4.decompress(compressed);
+    return new Uint8Array(decompressed);
+}
+// ---------------------------------------------------------------------------
+// Packet builders
+// ---------------------------------------------------------------------------
+/**
+ * Build a DATA packet.
+ *
+ * @param destHash          8-byte truncated BLAKE3 destination hash
+ * @param senderEphId       16-byte rotating ephemeral sender identifier
+ * @param payload           Encrypted payload bytes
+ * @param ttl               Hop count (0-7, defaults to {@link MAX_TTL})
+ */
+export function createDataPacket(destHash, senderEphId, payload, ttl = MAX_TTL) {
+    return buildPacket(PacketFlags.DATA, destHash, senderEphId, payload, ttl);
+}
+/**
+ * Build an ACK packet (ttl fixed at 0 since ACKs are single-hop).
+ */
+export function createAckPacket(destHash, senderEphId, ackPayload) {
+    return buildPacket(PacketFlags.ACK, destHash, senderEphId, ackPayload, 0);
+}
+/**
+ * Build a CHAFF (cover-traffic) packet with random destination and payload.
+ *
+ * The payload length is randomly chosen between 32 and 256 bytes to mimic
+ * realistic traffic without being trivially distinguishable.
+ */
+export function createChaffPacket(senderEphId) {
+    const destHash = randomUint8Array(8);
+    const payloadLen = 32 + (randomUint8Array(1)[0] % 225); // 32..256
+    const payload = randomUint8Array(payloadLen);
+    return buildPacket(PacketFlags.CHAFF, destHash, senderEphId, payload, 0);
+}
+/**
+ * Build a ROUTE_REQUEST packet.
+ */
+export function createRouteRequestPacket(destHash, senderEphId, requestPayload) {
+    return buildPacket(PacketFlags.ROUTE_REQUEST, destHash, senderEphId, requestPayload, MAX_TTL);
+}
+/**
+ * Build a ROUTE_OFFER packet.
+ */
+export function createRouteOfferPacket(destHash, senderEphId, offerPayload) {
+    return buildPacket(PacketFlags.ROUTE_OFFER, destHash, senderEphId, offerPayload, MAX_TTL);
+}
+/**
+ * Build a HANDSHAKE packet.
+ */
+export function createHandshakePacket(destHash, senderEphId, handshakePayload) {
+    return buildPacket(PacketFlags.HANDSHAKE, destHash, senderEphId, handshakePayload, MAX_TTL);
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function buildPacket(flags, destHash, senderEphId, encryptedPayload, ttl) {
+    assertUint8Array(destHash, 8, 'destHash');
+    assertUint8Array(senderEphId, 16, 'senderEphemeralId');
+    if (!Number.isInteger(ttl) || ttl < 0 || ttl > MAX_TTL) {
+        throw new RangeError(`ttl must be an integer between 0 and ${MAX_TTL}, got ${ttl}`);
+    }
+    if (!(encryptedPayload instanceof Uint8Array)) {
+        throw new TypeError('payload must be a Uint8Array');
+    }
+    if (encryptedPayload.length > MAX_PAYLOAD_SIZE) {
+        throw new RangeError(`Payload exceeds maximum size of ${MAX_PAYLOAD_SIZE} bytes (got ${encryptedPayload.length})`);
+    }
+    return {
+        version: PROTOCOL_VERSION,
+        flags,
+        destHash,
+        senderEphemeralId: senderEphId,
+        ttl,
+        payloadLength: encryptedPayload.length,
+        encryptedPayload,
+    };
+}
+/**
+ * Generate a Uint8Array filled with cryptographically secure random bytes.
+ */
+function randomUint8Array(length) {
+    // Works in both Node.js and browser contexts.
+    if (typeof globalThis.crypto !== 'undefined' && typeof globalThis.crypto.getRandomValues === 'function') {
+        const buf = new Uint8Array(length);
+        globalThis.crypto.getRandomValues(buf);
+        return buf;
+    }
+    // Fallback: Node.js crypto module (already imported).
+    return new Uint8Array(randomBytes(length));
+}
+//# sourceMappingURL=index.js.map

package/dist/packet/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/packet/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,wCAAwC;AACxC,4DAA4D;AAC5D,+DAA+D;AAE/D,OAAO,EAAU,WAAW,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,GAAG,MAAM,OAAO,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,qCAAqC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,uGAAuG;AACvG,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,yBAAyB;AACzB,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;AAEzB,mDAAmD;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAEtC,4CAA4C;AAC5C,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,iBAAiB,GAAG,EAAE,CAAC,CAAC,QAAQ;AACtC,MAAM,OAAO,GAAG,EAAE,CAAC,CAAW,UAAU;AACxC,MAAM,eAAe,GAAG,EAAE,CAAC,CAAG,SAAS;AAEvC,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,KAAiB,EAAE,WAAmB,EAAE,IAAY;IAC5E,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,oBAAoB,WAAW,eAAe,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,KAAK,GAAa;QACtB,WAAW,CAAC,IAAI;QAChB,WAAW,CAAC,GAAG;QACf,WAAW,CAAC,KAAK;QACjB,WAAW,CAAC,SAAS;QACrB,WAAW,CAAC,aAAa;QACzB,WAAW,CAAC,WAAW;KACxB,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAAC,2BAA2B,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,2BAA2B;IAC3B,IAAI,MAAM,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACxC,MAAM,IAAI,UAAU,CAAC,iCAAiC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IACjD,gBAAgB,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAEpE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;QAC5E,MAAM,IAAI,UAAU,CAAC,wCAAwC,OAAO,SAAS,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,CAAC,gBAAgB,YAAY,UAAU,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACtD,MAAM,IAAI,UAAU,CAClB,4CAA4C,gBAAgB,eAAe,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAC7G,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,WAAW,GAAG,UAAU,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAEtE,GAAG,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IAClC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACxC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IACrD,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;IAC1B,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa;IACjE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAE9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAClB,uCAAuC,WAAW,eAAe,IAAI,CAAC,MAAM,EAAE,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAEzE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,MAAM,IAAI,UAAU,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,iBAAiB,GAAG,EAAE,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAE1B,IAAI,GAAG,GAAG,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,UAAU,CAAC,0BAA0B,OAAO,SAAS,GAAG,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa;IAE3E,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW,GAAG,aAAa,EAAE,CAAC;QAC9C,MAAM,IAAI,UAAU,CAClB,qCAAqC,aAAa,4BAA4B,IAAI,CAAC,MAAM,GAAG,WAAW,YAAY,CACpH,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,CAAC,CAAC;IAE9E,OAAO;QACL,OAAO;QACP,KAAK;QACL,QAAQ;QACR,iBAAiB;QACjB,GAAG;QACH,aAAa;QACb,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,2DAA2D;AAC3D,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAqB;IACnD,IAAI,CAAC,CAAC,SAAS,YAAY,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;IACD,sEAAsE;IACtE,MAAM,UAAU,GAAe,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvD,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAsB;IACtD,IAAI,CAAC,CAAC,UAAU,YAAY,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,YAAY,GAAe,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5D,OAAO,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAoB,EACpB,WAAuB,EACvB,OAAmB,EACnB,MAAc,OAAO;IAErB,OAAO,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAoB,EACpB,WAAuB,EACvB,UAAsB;IAEtB,OAAO,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAuB;IACvD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU;IAClE,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAoB,EACpB,WAAuB,EACvB,cAA0B;IAE1B,OAAO,WAAW,CAAC,WAAW,CAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;AAChG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAoB,EACpB,WAAuB,EACvB,YAAwB;IAExB,OAAO,WAAW,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAC5F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAoB,EACpB,WAAuB,EACvB,gBAA4B;IAE5B,OAAO,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,WAAW,CAClB,KAAkB,EAClB,QAAoB,EACpB,WAAuB,EACvB,gBAA4B,EAC5B,GAAW;IAEX,gBAAgB,CAAC,QAAQ,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1C,gBAAgB,CAAC,WAAW,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAEvD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,OAAO,EAAE,CAAC;QACvD,MAAM,IAAI,UAAU,CAAC,wCAAwC,OAAO,SAAS,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC,CAAC,gBAAgB,YAAY,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAClB,mCAAmC,gBAAgB,eAAe,gBAAgB,CAAC,MAAM,GAAG,CAC7F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,KAAK;QACL,QAAQ;QACR,iBAAiB,EAAE,WAAW;QAC9B,GAAG;QACH,aAAa,EAAE,gBAAgB,CAAC,MAAM;QACtC,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,MAAc;IACtC,8CAA8C;IAC9C,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,UAAU,CAAC,MAAM,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QACxG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACnC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,sDAAsD;IACtD,OAAO,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/permissions/index.d.ts

@@ -0,0 +1,107 @@
+import type { PermissionModel } from '../types';
+export interface ContactContext {
+    senderId: string;
+    senderPublicKey: Uint8Array;
+    timestamp: number;
+    introductionBy?: string;
+    transactionEvent?: string;
+}
+export interface PermissionOptions {
+    customHandler?: (senderId: string, context: ContactContext) => boolean | Promise<boolean>;
+    transactionVerifier?: (senderId: string, event: string) => boolean | Promise<boolean>;
+    allowList?: Set<string>;
+    blockList?: Set<string>;
+}
+export interface ContactRequest {
+    id: string;
+    fromPeerId: string;
+    toPeerId: string;
+    timestamp: number;
+    status: 'pending' | 'accepted' | 'rejected';
+}
+export interface IntroductionRequest {
+    id: string;
+    fromPeerId: string;
+    toPeerId: string;
+    introducerPeerId: string;
+    timestamp: number;
+    status: 'pending' | 'introduced' | 'accepted' | 'rejected';
+}
+export declare class PermissionManager {
+    private model;
+    private readonly customHandler?;
+    private readonly transactionVerifier?;
+    private readonly contacts;
+    private readonly blocked;
+    private readonly allowed;
+    /** Peers who have sent us a contact request (mutual model). */
+    private readonly inboundRequests;
+    /** Peers we have sent a contact request to (mutual model). */
+    private readonly outboundRequests;
+    /** Introduction requests keyed by request id. */
+    private readonly introductionRequests;
+    /** Peers whose mutual contact has been confirmed (both sides accepted). */
+    private readonly mutualConfirmed;
+    /** Peers introduced to us via a trusted intermediary. */
+    private readonly introducedPeers;
+    constructor(model: PermissionModel, options?: PermissionOptions);
+    setModel(model: PermissionModel): void;
+    getModel(): PermissionModel;
+    addContact(peerId: string): void;
+    removeContact(peerId: string): void;
+    isContact(peerId: string): boolean;
+    getContacts(): string[];
+    loadContacts(contacts: string[]): void;
+    blockPeer(peerId: string): void;
+    unblockPeer(peerId: string): void;
+    isBlocked(peerId: string): boolean;
+    /**
+     * Main inbound permission check.
+     * Order: blockList -> allowList -> model-specific logic.
+     */
+    canReceiveFrom(senderId: string, context: ContactContext): Promise<boolean>;
+    /**
+     * Outbound permission check — can we send to this recipient?
+     * Primarily relevant for the mutual model where both sides
+     * need to have each other as contacts.
+     */
+    canSendTo(recipientId: string): Promise<boolean>;
+    /**
+     * Create a contact request to send to a peer (mutual model).
+     * The caller is responsible for transmitting the request over the wire.
+     */
+    requestMutualContact(peerId: string): ContactRequest;
+    /**
+     * Handle an inbound contact request from a peer.
+     * Returns true if the request is accepted (i.e. we already have an
+     * outbound request to that peer, achieving mutual consent), false
+     * if the request is stored as pending.
+     */
+    handleContactRequest(request: ContactRequest): boolean;
+    /**
+     * Explicitly confirm mutual contact with a peer.
+     * Adds the peer to contacts and the mutualConfirmed set.
+     */
+    confirmMutualContact(peerId: string): void;
+    /**
+     * Request an introduction to a target peer through a mutual contact.
+     * The caller is responsible for transmitting the request to the introducer.
+     */
+    requestIntroduction(targetPeerId: string, introducerPeerId: string): IntroductionRequest;
+    /**
+     * Handle an introduction request as the intermediary.
+     * Returns true if the introducer is a known contact of ours (trusted),
+     * false otherwise (the intermediary should only broker introductions
+     * between their own contacts).
+     */
+    handleIntroductionRequest(request: IntroductionRequest): boolean;
+    /**
+     * Confirm an introduction — called on the receiving end once the
+     * introduction has been brokered by the intermediary.
+     */
+    confirmIntroduction(request: IntroductionRequest): void;
+    private checkIntroduction;
+    private checkTransaction;
+    private checkCustom;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/permissions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/permissions/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAIhD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,UAAU,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,KACpB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,mBAAmB,CAAC,EAAE,CACpB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,KACV,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,UAAU,CAAC;CAC5D;AAcD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAGC;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAGL;IAEhC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0B;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAElD,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0C;IAC1E,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAE3E,iDAAiD;IACjD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CACzB;IAEZ,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0B;IAE1D,yDAAyD;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0B;gBAE9C,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAyB/D,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAItC,QAAQ,IAAI,eAAe;IAQ3B,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhC,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKnC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIlC,WAAW,IAAI,MAAM,EAAE;IAIvB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;IAItC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIjC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAQlC;;;OAGG;IACG,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,OAAO,CAAC;IAqCnB;;;;OAIG;IACG,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA2CtD;;;OAGG;IACH,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc;IAYpD;;;;;OAKG;IACH,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO;IAoBtD;;;OAGG;IACH,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAS1C;;;OAGG;IACH,mBAAmB,CACjB,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,GACvB,mBAAmB;IAatB;;;;;OAKG;IACH,yBAAyB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO;IAqBhE;;;OAGG;IACH,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI;IAWvD,OAAO,CAAC,iBAAiB;YAYX,gBAAgB;YAUhB,WAAW;CAU1B"}

package/dist/permissions/index.js

@@ -0,0 +1,282 @@
+// ============================================================
+// MeshWhisper SDK — Contact Permissions Module
+// Endpoint-side permission enforcement for P2P contact initiation.
+// ============================================================
+// --- Helpers ---
+function generateId() {
+    const bytes = new Uint8Array(16);
+    crypto.getRandomValues(bytes);
+    return Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+// --- PermissionManager ---
+export class PermissionManager {
+    model;
+    customHandler;
+    transactionVerifier;
+    contacts = new Set();
+    blocked = new Set();
+    allowed = new Set();
+    /** Peers who have sent us a contact request (mutual model). */
+    inboundRequests = new Map();
+    /** Peers we have sent a contact request to (mutual model). */
+    outboundRequests = new Map();
+    /** Introduction requests keyed by request id. */
+    introductionRequests = new Map();
+    /** Peers whose mutual contact has been confirmed (both sides accepted). */
+    mutualConfirmed = new Set();
+    /** Peers introduced to us via a trusted intermediary. */
+    introducedPeers = new Set();
+    constructor(model, options) {
+        this.model = model;
+        if (options?.customHandler) {
+            this.customHandler = options.customHandler;
+        }
+        if (options?.transactionVerifier) {
+            this.transactionVerifier = options.transactionVerifier;
+        }
+        if (options?.allowList) {
+            for (const id of options.allowList) {
+                this.allowed.add(id);
+            }
+        }
+        if (options?.blockList) {
+            for (const id of options.blockList) {
+                this.blocked.add(id);
+            }
+        }
+    }
+    // ------------------------------------------------------------------
+    // Model switching
+    // ------------------------------------------------------------------
+    setModel(model) {
+        this.model = model;
+    }
+    getModel() {
+        return this.model;
+    }
+    // ------------------------------------------------------------------
+    // Contact management
+    // ------------------------------------------------------------------
+    addContact(peerId) {
+        this.contacts.add(peerId);
+    }
+    removeContact(peerId) {
+        this.contacts.delete(peerId);
+        this.mutualConfirmed.delete(peerId);
+    }
+    isContact(peerId) {
+        return this.contacts.has(peerId);
+    }
+    getContacts() {
+        return Array.from(this.contacts);
+    }
+    loadContacts(contacts) {
+        for (const id of contacts)
+            this.contacts.add(id);
+    }
+    blockPeer(peerId) {
+        this.blocked.add(peerId);
+    }
+    unblockPeer(peerId) {
+        this.blocked.delete(peerId);
+    }
+    isBlocked(peerId) {
+        return this.blocked.has(peerId);
+    }
+    // ------------------------------------------------------------------
+    // Permission checks
+    // ------------------------------------------------------------------
+    /**
+     * Main inbound permission check.
+     * Order: blockList -> allowList -> model-specific logic.
+     */
+    async canReceiveFrom(senderId, context) {
+        // Always deny blocked peers.
+        if (this.blocked.has(senderId)) {
+            return false;
+        }
+        // Always allow explicitly allowed peers.
+        if (this.allowed.has(senderId)) {
+            return true;
+        }
+        // Existing contacts are always permitted regardless of model.
+        if (this.contacts.has(senderId)) {
+            return true;
+        }
+        switch (this.model) {
+            case 'open':
+                return true;
+            case 'mutual':
+                return this.mutualConfirmed.has(senderId);
+            case 'introduction':
+                return this.introducedPeers.has(senderId) || this.checkIntroduction(senderId, context);
+            case 'transactional':
+                return this.checkTransaction(senderId, context);
+            case 'custom':
+                return this.checkCustom(senderId, context);
+            default:
+                return false;
+        }
+    }
+    /**
+     * Outbound permission check — can we send to this recipient?
+     * Primarily relevant for the mutual model where both sides
+     * need to have each other as contacts.
+     */
+    async canSendTo(recipientId) {
+        // Never send to blocked peers.
+        if (this.blocked.has(recipientId)) {
+            return false;
+        }
+        // Always allowed peers.
+        if (this.allowed.has(recipientId)) {
+            return true;
+        }
+        switch (this.model) {
+            case 'open':
+                return true;
+            case 'mutual':
+                // Can only send if mutual contact has been confirmed or they are
+                // already a known contact.
+                return this.contacts.has(recipientId) || this.mutualConfirmed.has(recipientId);
+            case 'introduction':
+                return (this.contacts.has(recipientId) || this.introducedPeers.has(recipientId));
+            case 'transactional':
+                // For outbound in transactional model, allow if they are a contact.
+                return this.contacts.has(recipientId);
+            case 'custom':
+                // Custom model defers to the handler for inbound only;
+                // outbound is permitted to any non-blocked peer.
+                return true;
+            default:
+                return false;
+        }
+    }
+    // ------------------------------------------------------------------
+    // Mutual model logic
+    // ------------------------------------------------------------------
+    /**
+     * Create a contact request to send to a peer (mutual model).
+     * The caller is responsible for transmitting the request over the wire.
+     */
+    requestMutualContact(peerId) {
+        const request = {
+            id: generateId(),
+            fromPeerId: '', // Will be filled by the caller with own peer ID
+            toPeerId: peerId,
+            timestamp: Date.now(),
+            status: 'pending',
+        };
+        this.outboundRequests.set(peerId, request);
+        return request;
+    }
+    /**
+     * Handle an inbound contact request from a peer.
+     * Returns true if the request is accepted (i.e. we already have an
+     * outbound request to that peer, achieving mutual consent), false
+     * if the request is stored as pending.
+     */
+    handleContactRequest(request) {
+        if (this.blocked.has(request.fromPeerId)) {
+            request.status = 'rejected';
+            return false;
+        }
+        this.inboundRequests.set(request.fromPeerId, request);
+        // If we already sent a request to this peer, auto-confirm mutual contact.
+        if (this.outboundRequests.has(request.fromPeerId)) {
+            request.status = 'accepted';
+            const outbound = this.outboundRequests.get(request.fromPeerId);
+            outbound.status = 'accepted';
+            this.confirmMutualContact(request.fromPeerId);
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Explicitly confirm mutual contact with a peer.
+     * Adds the peer to contacts and the mutualConfirmed set.
+     */
+    confirmMutualContact(peerId) {
+        this.mutualConfirmed.add(peerId);
+        this.contacts.add(peerId);
+    }
+    // ------------------------------------------------------------------
+    // Introduction model logic
+    // ------------------------------------------------------------------
+    /**
+     * Request an introduction to a target peer through a mutual contact.
+     * The caller is responsible for transmitting the request to the introducer.
+     */
+    requestIntroduction(targetPeerId, introducerPeerId) {
+        const request = {
+            id: generateId(),
+            fromPeerId: '', // Will be filled by the caller with own peer ID
+            toPeerId: targetPeerId,
+            introducerPeerId,
+            timestamp: Date.now(),
+            status: 'pending',
+        };
+        this.introductionRequests.set(request.id, request);
+        return request;
+    }
+    /**
+     * Handle an introduction request as the intermediary.
+     * Returns true if the introducer is a known contact of ours (trusted),
+     * false otherwise (the intermediary should only broker introductions
+     * between their own contacts).
+     */
+    handleIntroductionRequest(request) {
+        if (this.blocked.has(request.fromPeerId)) {
+            request.status = 'rejected';
+            return false;
+        }
+        // The intermediary should know both parties as contacts.
+        const knowsSender = this.contacts.has(request.fromPeerId);
+        const knowsTarget = this.contacts.has(request.toPeerId);
+        if (knowsSender && knowsTarget) {
+            request.status = 'introduced';
+            this.introductionRequests.set(request.id, request);
+            return true;
+        }
+        request.status = 'rejected';
+        this.introductionRequests.set(request.id, request);
+        return false;
+    }
+    /**
+     * Confirm an introduction — called on the receiving end once the
+     * introduction has been brokered by the intermediary.
+     */
+    confirmIntroduction(request) {
+        request.status = 'accepted';
+        this.introductionRequests.set(request.id, request);
+        this.introducedPeers.add(request.fromPeerId);
+        this.contacts.add(request.fromPeerId);
+    }
+    // ------------------------------------------------------------------
+    // Private model-specific checks
+    // ------------------------------------------------------------------
+    checkIntroduction(senderId, context) {
+        // If the context carries a valid introduction reference, check it.
+        if (context.introductionBy) {
+            // The introducer must be one of our contacts.
+            return this.contacts.has(context.introductionBy);
+        }
+        return false;
+    }
+    async checkTransaction(senderId, context) {
+        if (!this.transactionVerifier || !context.transactionEvent) {
+            return false;
+        }
+        return this.transactionVerifier(senderId, context.transactionEvent);
+    }
+    async checkCustom(senderId, context) {
+        if (!this.customHandler) {
+            // No custom handler configured — deny by default for safety.
+            return false;
+        }
+        return this.customHandler(senderId, context);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/permissions/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,+CAA+C;AAC/C,mEAAmE;AACnE,+DAA+D;AA4C/D,kBAAkB;AAElB,SAAS,UAAU;IACjB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,4BAA4B;AAE5B,MAAM,OAAO,iBAAiB;IACpB,KAAK,CAAkB;IACd,aAAa,CAGE;IACf,mBAAmB,CAGJ;IAEf,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;IAClC,OAAO,GAAgB,IAAI,GAAG,EAAE,CAAC;IACjC,OAAO,GAAgB,IAAI,GAAG,EAAE,CAAC;IAElD,+DAA+D;IAC9C,eAAe,GAAgC,IAAI,GAAG,EAAE,CAAC;IAC1E,8DAA8D;IAC7C,gBAAgB,GAAgC,IAAI,GAAG,EAAE,CAAC;IAE3E,iDAAiD;IAChC,oBAAoB,GACnC,IAAI,GAAG,EAAE,CAAC;IAEZ,2EAA2E;IAC1D,eAAe,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE1D,yDAAyD;IACxC,eAAe,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE1D,YAAY,KAAsB,EAAE,OAA2B;QAC7D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC7C,CAAC;QACD,IAAI,OAAO,EAAE,mBAAmB,EAAE,CAAC;YACjC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACvB,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACvB,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,kBAAkB;IAClB,qEAAqE;IAErE,QAAQ,CAAC,KAAsB;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,qEAAqE;IACrE,qBAAqB;IACrB,qEAAqE;IAErE,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,aAAa,CAAC,MAAc;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,WAAW;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,QAAkB;QAC7B,KAAK,MAAM,EAAE,IAAI,QAAQ;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,qEAAqE;IACrE,oBAAoB;IACpB,qEAAqE;IAErE;;;OAGG;IACH,KAAK,CAAC,cAAc,CAClB,QAAgB,EAChB,OAAuB;QAEvB,6BAA6B;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yCAAyC;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC;YAEd,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE5C,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAEzF,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAElD,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE7C;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,WAAmB;QACjC,+BAA+B;QAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wBAAwB;QACxB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC;YAEd,KAAK,QAAQ;gBACX,iEAAiE;gBACjE,2BAA2B;gBAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAEjF,KAAK,cAAc;gBACjB,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CACxE,CAAC;YAEJ,KAAK,eAAe;gBAClB,oEAAoE;gBACpE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAExC,KAAK,QAAQ;gBACX,uDAAuD;gBACvD,iDAAiD;gBACjD,OAAO,IAAI,CAAC;YAEd;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,qBAAqB;IACrB,qEAAqE;IAErE;;;OAGG;IACH,oBAAoB,CAAC,MAAc;QACjC,MAAM,OAAO,GAAmB;YAC9B,EAAE,EAAE,UAAU,EAAE;YAChB,UAAU,EAAE,EAAE,EAAE,gDAAgD;YAChE,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,SAAS;SAClB,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAAC,OAAuB;QAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEtD,0EAA0E;QAC1E,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAE,CAAC;YAChE,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;YAC7B,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,MAAc;QACjC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,qEAAqE;IACrE,2BAA2B;IAC3B,qEAAqE;IAErE;;;OAGG;IACH,mBAAmB,CACjB,YAAoB,EACpB,gBAAwB;QAExB,MAAM,OAAO,GAAwB;YACnC,EAAE,EAAE,UAAU,EAAE;YAChB,UAAU,EAAE,EAAE,EAAE,gDAAgD;YAChE,QAAQ,EAAE,YAAY;YACtB,gBAAgB;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,SAAS;SAClB,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,yBAAyB,CAAC,OAA4B;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yDAAyD;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExD,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC;YAC9B,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;QAC5B,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,OAA4B;QAC9C,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;QAC5B,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,qEAAqE;IACrE,gCAAgC;IAChC,qEAAqE;IAE7D,iBAAiB,CACvB,QAAgB,EAChB,OAAuB;QAEvB,mEAAmE;QACnE,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,8CAA8C;YAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAgB,EAChB,OAAuB;QAEvB,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,QAAgB,EAChB,OAAuB;QAEvB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,6DAA6D;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;CACF"}