@modularizer/plat-client 0.4.0

package/dist/client-side-server/channel.js

@@ -0,0 +1,38 @@
+export function createRTCDataChannelAdapter(channel) {
+    return {
+        send(message) {
+            channel.send(JSON.stringify(message));
+        },
+        subscribe(listener) {
+            const onMessage = (event) => {
+                const raw = typeof event.data === 'string' ? event.data : String(event.data);
+                listener(JSON.parse(raw));
+            };
+            channel.addEventListener('message', onMessage);
+            return () => channel.removeEventListener('message', onMessage);
+        },
+        close() {
+            channel.close();
+        },
+    };
+}
+export function createWeriftDataChannelAdapter(channel) {
+    return {
+        send(message) {
+            channel.send(JSON.stringify(message));
+        },
+        subscribe(listener) {
+            const subscription = channel.onMessage.subscribe((data) => {
+                const raw = typeof data === 'string' ? data : data.toString('utf8');
+                listener(JSON.parse(raw));
+            });
+            return () => {
+                subscription.unSubscribe();
+            };
+        },
+        close() {
+            channel.close();
+        },
+    };
+}
+//# sourceMappingURL=channel.js.map

package/dist/client-side-server/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../../../typescript/src/client-side-server/channel.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,2BAA2B,CAAC,OAAuB;IACjE,OAAO;QACL,IAAI,CAAC,OAAO;YACV,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;QACvC,CAAC;QACD,SAAS,CAAC,QAAQ;YAChB,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;gBACxC,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC5E,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC,CAAA;YACtD,CAAC,CAAA;YACD,OAAO,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YAC9C,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAChE,CAAC;QACD,KAAK;YACH,OAAO,CAAC,KAAK,EAAE,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAMC;IAED,OAAO;QACL,IAAI,CAAC,OAAO;YACV,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;QACvC,CAAC;QACD,SAAS,CAAC,QAAQ;YAChB,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;gBACxD,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;gBACnE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC,CAAA;YACtD,CAAC,CAAC,CAAA;YACF,OAAO,GAAG,EAAE;gBACV,YAAY,CAAC,WAAW,EAAE,CAAA;YAC5B,CAAC,CAAA;QACH,CAAC;QACD,KAAK;YACH,OAAO,CAAC,KAAK,EAAE,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/client-side-server/identity.d.ts

@@ -0,0 +1,116 @@
+export interface ClientSideServerStorageLike {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem?(key: string): void;
+}
+export interface ClientSideServerExportedKeyPair {
+    algorithm: 'ECDSA-P256';
+    publicKeyJwk: JsonWebKey;
+    privateKeyJwk: JsonWebKey;
+    keyId: string;
+    createdAt: number;
+}
+export interface ClientSideServerPublicIdentity {
+    algorithm: 'ECDSA-P256';
+    publicKeyJwk: JsonWebKey;
+    keyId: string;
+    fingerprint: string;
+    createdAt?: number;
+}
+export interface ClientSideServerTrustedServerRecord {
+    serverName: string;
+    publicKeyJwk: JsonWebKey;
+    keyId?: string;
+    fingerprint: string;
+    trustedAt: number;
+    source: 'first-use' | 'authority' | 'manual';
+}
+export interface ClientSideServerSignedAuthorityRecord {
+    protocol: 'plat-css-authority-v1';
+    serverName: string;
+    publicKeyJwk: JsonWebKey;
+    keyId?: string;
+    authorityName?: string;
+    issuedAt: number;
+    signature: string;
+}
+export interface GenerateClientSideServerKeyPairOptions {
+    keyId?: string;
+}
+export interface ClientSideServerKnownHostsStoreOptions {
+    storage?: ClientSideServerStorageLike;
+    storageKey?: string;
+}
+export interface ClientSideServerKeyPairStoreOptions {
+    storage?: ClientSideServerStorageLike;
+    storageKey?: string;
+}
+export interface ClientSideServerAuthorityStoreOptions {
+    storage?: ClientSideServerStorageLike;
+    storageKey?: string;
+}
+export interface ClientSideServerAuthorityResolverOptions extends ClientSideServerAuthorityStoreOptions {
+    authorityPublicKeyJwk: JsonWebKey;
+    knownHostsStorage?: ClientSideServerStorageLike;
+    knownHostsStorageKey?: string;
+}
+export interface ClientSideServerAuthorityServer {
+    authorityName?: string;
+    publicKeyJwk: JsonWebKey;
+    resolve(serverName: string): Promise<ClientSideServerSignedAuthorityRecord | null>;
+}
+export interface StaticClientSideServerAuthorityRegistryOptions {
+    authorityKeyPair: ClientSideServerExportedKeyPair;
+    authorityName?: string;
+    records?: Record<string, JsonWebKey | ClientSideServerPublicIdentity | ClientSideServerTrustedServerRecord>;
+}
+export interface FetchClientSideServerAuthorityServerOptions {
+    baseUrl: string;
+    publicKeyJwk: JsonWebKey;
+    authorityName?: string;
+    resolvePath?: string;
+    fetchImpl?: typeof fetch;
+}
+export declare function createInMemoryClientSideServerStorage(initial?: Record<string, string>): ClientSideServerStorageLike;
+export declare function saveTrustedClientSideServerRecordToMap(knownHosts: Record<string, ClientSideServerTrustedServerRecord>, record: ClientSideServerTrustedServerRecord): void;
+export declare function loadTrustedClientSideServerRecordFromMap(knownHosts: Record<string, ClientSideServerTrustedServerRecord> | undefined, serverName: string): ClientSideServerTrustedServerRecord | null;
+export declare function generateClientSideServerIdentityKeyPair(options?: GenerateClientSideServerKeyPairOptions): Promise<ClientSideServerExportedKeyPair>;
+export declare function createClientSideServerKeyId(publicKeyJwk: JsonWebKey): Promise<string>;
+export declare function getClientSideServerPublicKeyFingerprint(publicKeyJwk: JsonWebKey): Promise<string>;
+export declare function signClientSideServerChallenge(keyPair: ClientSideServerExportedKeyPair, challenge: string): Promise<string>;
+export declare function verifyClientSideServerChallenge(publicKeyJwk: JsonWebKey, challenge: string, signature: string): Promise<boolean>;
+export declare function buildClientSideServerIdentityChallenge(input: {
+    serverName: string;
+    connectionId: string;
+    challengeNonce: string;
+}): string;
+export declare function createSignedClientSideServerAuthorityRecord(authorityKeyPair: ClientSideServerExportedKeyPair, input: {
+    serverName: string;
+    publicKeyJwk: JsonWebKey;
+    keyId?: string;
+    authorityName?: string;
+    issuedAt?: number;
+}): Promise<ClientSideServerSignedAuthorityRecord>;
+export declare function verifySignedClientSideServerAuthorityRecord(record: ClientSideServerSignedAuthorityRecord, authorityPublicKeyJwk: JsonWebKey): Promise<boolean>;
+export declare function toClientSideServerPublicIdentity(keyPair: ClientSideServerExportedKeyPair): Promise<ClientSideServerPublicIdentity>;
+export declare function saveClientSideServerIdentityKeyPair(keyPair: ClientSideServerExportedKeyPair, options?: ClientSideServerKeyPairStoreOptions): void;
+export declare function loadClientSideServerIdentityKeyPair(options?: ClientSideServerKeyPairStoreOptions): ClientSideServerExportedKeyPair | null;
+export declare function getOrCreateClientSideServerIdentityKeyPair(options?: ClientSideServerKeyPairStoreOptions & GenerateClientSideServerKeyPairOptions): Promise<ClientSideServerExportedKeyPair>;
+export declare function saveTrustedClientSideServerRecord(record: ClientSideServerTrustedServerRecord, options?: ClientSideServerKnownHostsStoreOptions): void;
+export declare function loadTrustedClientSideServerRecord(serverName: string, options?: ClientSideServerKnownHostsStoreOptions): ClientSideServerTrustedServerRecord | null;
+export declare function loadAllTrustedClientSideServerRecords(options?: ClientSideServerKnownHostsStoreOptions): Record<string, ClientSideServerTrustedServerRecord>;
+export declare function saveClientSideServerAuthorityRecord(record: ClientSideServerSignedAuthorityRecord, options?: ClientSideServerAuthorityStoreOptions): void;
+export declare function loadClientSideServerAuthorityRecord(serverName: string, options?: ClientSideServerAuthorityStoreOptions): ClientSideServerSignedAuthorityRecord | null;
+export declare function loadAllClientSideServerAuthorityRecords(options?: ClientSideServerAuthorityStoreOptions): Record<string, ClientSideServerSignedAuthorityRecord>;
+export declare function trustClientSideServerOnFirstUse(serverName: string, identity: ClientSideServerPublicIdentity, options?: ClientSideServerKnownHostsStoreOptions): Promise<ClientSideServerTrustedServerRecord>;
+export declare function trustClientSideServerFromAuthorityRecord(record: ClientSideServerSignedAuthorityRecord, authorityPublicKeyJwk: JsonWebKey, options?: ClientSideServerKnownHostsStoreOptions): Promise<ClientSideServerTrustedServerRecord>;
+export declare function createClientSideServerAuthorityResolver(options: ClientSideServerAuthorityResolverOptions): (serverName: string) => Promise<ClientSideServerTrustedServerRecord | null>;
+export declare function createStaticClientSideServerAuthorityRegistry(options: StaticClientSideServerAuthorityRegistryOptions): {
+    register(serverName: string, value: JsonWebKey | ClientSideServerPublicIdentity | ClientSideServerTrustedServerRecord): void;
+    resolve(serverName: string): Promise<ClientSideServerSignedAuthorityRecord | null>;
+    createServer(): ClientSideServerAuthorityServer;
+};
+export declare function createFetchClientSideServerAuthorityServer(options: FetchClientSideServerAuthorityServerOptions): ClientSideServerAuthorityServer;
+export declare function resolveTrustedClientSideServerFromAuthorities(serverName: string, authorityServers: ClientSideServerAuthorityServer[], options?: ClientSideServerKnownHostsStoreOptions): Promise<ClientSideServerTrustedServerRecord | null>;
+export declare function clientSideServerPublicKeysEqual(a: JsonWebKey, b: JsonWebKey): boolean;
+//# sourceMappingURL=identity.d.ts.map

package/dist/client-side-server/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../typescript/src/client-side-server/identity.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACnC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,UAAU,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,YAAY,CAAA;IACvB,YAAY,EAAE,UAAU,CAAA;IACxB,aAAa,EAAE,UAAU,CAAA;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,YAAY,CAAA;IACvB,YAAY,EAAE,UAAU,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,mCAAmC;IAClD,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,UAAU,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAA;CAC7C;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,EAAE,uBAAuB,CAAA;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,UAAU,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,sCAAsC;IACrD,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,sCAAsC;IACrD,OAAO,CAAC,EAAE,2BAA2B,CAAA;IACrC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,mCAAmC;IAClD,OAAO,CAAC,EAAE,2BAA2B,CAAA;IACrC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,qCAAqC;IACpD,OAAO,CAAC,EAAE,2BAA2B,CAAA;IACrC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,wCAAyC,SAAQ,qCAAqC;IACrG,qBAAqB,EAAE,UAAU,CAAA;IACjC,iBAAiB,CAAC,EAAE,2BAA2B,CAAA;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,UAAU,CAAA;IACxB,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qCAAqC,GAAG,IAAI,CAAC,CAAA;CACnF;AAED,MAAM,WAAW,8CAA8C;IAC7D,gBAAgB,EAAE,+BAA+B,CAAA;IACjD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,8BAA8B,GAAG,mCAAmC,CAAC,CAAA;CAC5G;AAED,MAAM,WAAW,2CAA2C;IAC1D,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,UAAU,CAAA;IACxB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED,wBAAgB,qCAAqC,CACnD,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACnC,2BAA2B,CAa7B;AAED,wBAAgB,sCAAsC,CACpD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,EAC/D,MAAM,EAAE,mCAAmC,GAC1C,IAAI,CAEN;AAED,wBAAgB,wCAAwC,CACtD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,GAAG,SAAS,EAC3E,UAAU,EAAE,MAAM,GACjB,mCAAmC,GAAG,IAAI,CAG5C;AAED,wBAAsB,uCAAuC,CAC3D,OAAO,GAAE,sCAA2C,GACnD,OAAO,CAAC,+BAA+B,CAAC,CAmB1C;AAED,wBAAsB,2BAA2B,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAG3F;AAED,wBAAsB,uCAAuC,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAIvG;AAED,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,+BAA+B,EACxC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAqBjB;AAED,wBAAsB,+BAA+B,CACnD,YAAY,EAAE,UAAU,EACxB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED,wBAAgB,sCAAsC,CAAC,KAAK,EAAE;IAC5D,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;CACvB,GAAG,MAAM,CAET;AAED,wBAAsB,2CAA2C,CAC/D,gBAAgB,EAAE,+BAA+B,EACjD,KAAK,EAAE;IACL,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,UAAU,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,GACA,OAAO,CAAC,qCAAqC,CAAC,CAchD;AAED,wBAAsB,2CAA2C,CAC/D,MAAM,EAAE,qCAAqC,EAC7C,qBAAqB,EAAE,UAAU,GAChC,OAAO,CAAC,OAAO,CAAC,CAIlB;AAED,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,8BAA8B,CAAC,CAQzC;AAED,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,+BAA+B,EACxC,OAAO,GAAE,mCAAwC,GAChD,IAAI,CAIN;AAED,wBAAgB,mCAAmC,CACjD,OAAO,GAAE,mCAAwC,GAChD,+BAA+B,GAAG,IAAI,CAMxC;AAED,wBAAsB,0CAA0C,CAC9D,OAAO,GAAE,mCAAmC,GAAG,sCAA2C,GACzF,OAAO,CAAC,+BAA+B,CAAC,CAS1C;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,mCAAmC,EAC3C,OAAO,GAAE,sCAA2C,GACnD,IAAI,CAMN;AAED,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,sCAA2C,GACnD,mCAAmC,GAAG,IAAI,CAG5C;AAED,wBAAgB,qCAAqC,CACnD,OAAO,GAAE,sCAA2C,GACnD,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAMrD;AAED,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,qCAAqC,EAC7C,OAAO,GAAE,qCAA0C,GAClD,IAAI,CAMN;AAED,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,qCAA0C,GAClD,qCAAqC,GAAG,IAAI,CAG9C;AAED,wBAAgB,uCAAuC,CACrD,OAAO,GAAE,qCAA0C,GAClD,MAAM,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAMvD;AAED,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,8BAA8B,EACxC,OAAO,GAAE,sCAA2C,GACnD,OAAO,CAAC,mCAAmC,CAAC,CAW9C;AAED,wBAAsB,wCAAwC,CAC5D,MAAM,EAAE,qCAAqC,EAC7C,qBAAqB,EAAE,UAAU,EACjC,OAAO,GAAE,sCAA2C,GACnD,OAAO,CAAC,mCAAmC,CAAC,CAe9C;AAED,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,wCAAwC,GAChD,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,mCAAmC,GAAG,IAAI,CAAC,CAa7E;AAED,wBAAgB,6CAA6C,CAC3D,OAAO,EAAE,8CAA8C,GACtD;IACD,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,8BAA8B,GAAG,mCAAmC,GAAG,IAAI,CAAA;IAC5H,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qCAAqC,GAAG,IAAI,CAAC,CAAA;IAClF,YAAY,IAAI,+BAA+B,CAAA;CAChD,CAkCA;AAED,wBAAgB,0CAA0C,CACxD,OAAO,EAAE,2CAA2C,GACnD,+BAA+B,CAyBjC;AAED,wBAAsB,6CAA6C,CACjE,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,+BAA+B,EAAE,EACnD,OAAO,GAAE,sCAA2C,GACnD,OAAO,CAAC,mCAAmC,GAAG,IAAI,CAAC,CAWrD;AAED,wBAAgB,+BAA+B,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAErF"}

package/dist/client-side-server/identity.js

@@ -0,0 +1,358 @@
+export function createInMemoryClientSideServerStorage(initial = {}) {
+    const store = new Map(Object.entries(initial));
+    return {
+        getItem(key) {
+            return store.has(key) ? store.get(key) : null;
+        },
+        setItem(key, value) {
+            store.set(key, value);
+        },
+        removeItem(key) {
+            store.delete(key);
+        },
+    };
+}
+export function saveTrustedClientSideServerRecordToMap(knownHosts, record) {
+    knownHosts[record.serverName] = record;
+}
+export function loadTrustedClientSideServerRecordFromMap(knownHosts, serverName) {
+    if (!knownHosts)
+        return null;
+    return knownHosts[serverName] ?? null;
+}
+export async function generateClientSideServerIdentityKeyPair(options = {}) {
+    const subtle = await resolveSubtle();
+    const keyPair = await subtle.generateKey({
+        name: 'ECDSA',
+        namedCurve: 'P-256',
+    }, true, ['sign', 'verify']);
+    const publicKeyJwk = await subtle.exportKey('jwk', keyPair.publicKey);
+    const privateKeyJwk = await subtle.exportKey('jwk', keyPair.privateKey);
+    return {
+        algorithm: 'ECDSA-P256',
+        publicKeyJwk,
+        privateKeyJwk,
+        keyId: options.keyId ?? await createClientSideServerKeyId(publicKeyJwk),
+        createdAt: Date.now(),
+    };
+}
+export async function createClientSideServerKeyId(publicKeyJwk) {
+    const fingerprint = await getClientSideServerPublicKeyFingerprint(publicKeyJwk);
+    return `cssk-${fingerprint.slice(0, 16)}`;
+}
+export async function getClientSideServerPublicKeyFingerprint(publicKeyJwk) {
+    const subtle = await resolveSubtle();
+    const digest = await subtle.digest('SHA-256', toBufferSource(encodeUtf8(stableStringify(publicKeyJwk))));
+    return base64UrlEncode(new Uint8Array(digest));
+}
+export async function signClientSideServerChallenge(keyPair, challenge) {
+    const subtle = await resolveSubtle();
+    const privateKey = await subtle.importKey('jwk', keyPair.privateKeyJwk, {
+        name: 'ECDSA',
+        namedCurve: 'P-256',
+    }, false, ['sign']);
+    const signature = await subtle.sign({
+        name: 'ECDSA',
+        hash: 'SHA-256',
+    }, privateKey, toBufferSource(encodeUtf8(challenge)));
+    return base64UrlEncode(new Uint8Array(signature));
+}
+export async function verifyClientSideServerChallenge(publicKeyJwk, challenge, signature) {
+    const subtle = await resolveSubtle();
+    const publicKey = await subtle.importKey('jwk', publicKeyJwk, {
+        name: 'ECDSA',
+        namedCurve: 'P-256',
+    }, false, ['verify']);
+    return subtle.verify({
+        name: 'ECDSA',
+        hash: 'SHA-256',
+    }, publicKey, base64UrlDecode(signature), toBufferSource(encodeUtf8(challenge)));
+}
+export function buildClientSideServerIdentityChallenge(input) {
+    return `plat-css-identity-v1:${input.serverName}:${input.connectionId}:${input.challengeNonce}`;
+}
+export async function createSignedClientSideServerAuthorityRecord(authorityKeyPair, input) {
+    const payload = {
+        protocol: 'plat-css-authority-v1',
+        serverName: input.serverName,
+        publicKeyJwk: input.publicKeyJwk,
+        keyId: input.keyId,
+        authorityName: input.authorityName,
+        issuedAt: input.issuedAt ?? Date.now(),
+    };
+    const signature = await signClientSideServerChallenge(authorityKeyPair, stableStringify(payload));
+    return {
+        ...payload,
+        signature,
+    };
+}
+export async function verifySignedClientSideServerAuthorityRecord(record, authorityPublicKeyJwk) {
+    const { signature, ...payload } = record;
+    if (payload.protocol !== 'plat-css-authority-v1')
+        return false;
+    return verifyClientSideServerChallenge(authorityPublicKeyJwk, stableStringify(payload), signature);
+}
+export async function toClientSideServerPublicIdentity(keyPair) {
+    return {
+        algorithm: keyPair.algorithm,
+        publicKeyJwk: keyPair.publicKeyJwk,
+        keyId: keyPair.keyId,
+        createdAt: keyPair.createdAt,
+        fingerprint: await getClientSideServerPublicKeyFingerprint(keyPair.publicKeyJwk),
+    };
+}
+export function saveClientSideServerIdentityKeyPair(keyPair, options = {}) {
+    const storage = resolveStorage(options.storage);
+    if (!storage)
+        throw new Error('No storage available to save a client-side server key pair');
+    storage.setItem(options.storageKey ?? 'plat-css:keypair', JSON.stringify(keyPair));
+}
+export function loadClientSideServerIdentityKeyPair(options = {}) {
+    const storage = resolveStorage(options.storage);
+    if (!storage)
+        return null;
+    const raw = storage.getItem(options.storageKey ?? 'plat-css:keypair');
+    if (!raw)
+        return null;
+    return JSON.parse(raw);
+}
+export async function getOrCreateClientSideServerIdentityKeyPair(options = {}) {
+    const existing = loadClientSideServerIdentityKeyPair(options);
+    if (existing)
+        return existing;
+    const created = await generateClientSideServerIdentityKeyPair(options);
+    const storage = resolveStorage(options.storage);
+    if (storage) {
+        storage.setItem(options.storageKey ?? 'plat-css:keypair', JSON.stringify(created));
+    }
+    return created;
+}
+export function saveTrustedClientSideServerRecord(record, options = {}) {
+    const storage = resolveStorage(options.storage);
+    if (!storage)
+        throw new Error('No storage available to save a trusted client-side server record');
+    const all = loadAllTrustedClientSideServerRecords(options);
+    all[record.serverName] = record;
+    storage.setItem(options.storageKey ?? 'plat-css:known-hosts', JSON.stringify(all));
+}
+export function loadTrustedClientSideServerRecord(serverName, options = {}) {
+    const all = loadAllTrustedClientSideServerRecords(options);
+    return all[serverName] ?? null;
+}
+export function loadAllTrustedClientSideServerRecords(options = {}) {
+    const storage = resolveStorage(options.storage);
+    if (!storage)
+        return {};
+    const raw = storage.getItem(options.storageKey ?? 'plat-css:known-hosts');
+    if (!raw)
+        return {};
+    return JSON.parse(raw);
+}
+export function saveClientSideServerAuthorityRecord(record, options = {}) {
+    const storage = resolveStorage(options.storage);
+    if (!storage)
+        throw new Error('No storage available to save a client-side server authority record');
+    const all = loadAllClientSideServerAuthorityRecords(options);
+    all[record.serverName] = record;
+    storage.setItem(options.storageKey ?? 'plat-css:authority-records', JSON.stringify(all));
+}
+export function loadClientSideServerAuthorityRecord(serverName, options = {}) {
+    const all = loadAllClientSideServerAuthorityRecords(options);
+    return all[serverName] ?? null;
+}
+export function loadAllClientSideServerAuthorityRecords(options = {}) {
+    const storage = resolveStorage(options.storage);
+    if (!storage)
+        return {};
+    const raw = storage.getItem(options.storageKey ?? 'plat-css:authority-records');
+    if (!raw)
+        return {};
+    return JSON.parse(raw);
+}
+export async function trustClientSideServerOnFirstUse(serverName, identity, options = {}) {
+    const record = {
+        serverName,
+        publicKeyJwk: identity.publicKeyJwk,
+        keyId: identity.keyId,
+        fingerprint: identity.fingerprint,
+        trustedAt: Date.now(),
+        source: 'first-use',
+    };
+    saveTrustedClientSideServerRecord(record, options);
+    return record;
+}
+export async function trustClientSideServerFromAuthorityRecord(record, authorityPublicKeyJwk, options = {}) {
+    const valid = await verifySignedClientSideServerAuthorityRecord(record, authorityPublicKeyJwk);
+    if (!valid) {
+        throw new Error(`Authority record for ${record.serverName} failed signature verification`);
+    }
+    const trusted = {
+        serverName: record.serverName,
+        publicKeyJwk: record.publicKeyJwk,
+        keyId: record.keyId,
+        fingerprint: await getClientSideServerPublicKeyFingerprint(record.publicKeyJwk),
+        trustedAt: Date.now(),
+        source: 'authority',
+    };
+    saveTrustedClientSideServerRecord(trusted, options);
+    return trusted;
+}
+export function createClientSideServerAuthorityResolver(options) {
+    return async (serverName) => {
+        const record = loadClientSideServerAuthorityRecord(serverName, options);
+        if (!record)
+            return null;
+        return trustClientSideServerFromAuthorityRecord(record, options.authorityPublicKeyJwk, {
+            storage: options.knownHostsStorage,
+            storageKey: options.knownHostsStorageKey,
+        });
+    };
+}
+export function createStaticClientSideServerAuthorityRegistry(options) {
+    const records = new Map();
+    for (const [serverName, value] of Object.entries(options.records ?? {})) {
+        records.set(serverName, normalizePublicKey(value));
+    }
+    return {
+        register(serverName, value) {
+            records.set(serverName, normalizePublicKey(value));
+        },
+        async resolve(serverName) {
+            const publicKeyJwk = records.get(serverName);
+            if (!publicKeyJwk)
+                return null;
+            return createSignedClientSideServerAuthorityRecord(options.authorityKeyPair, {
+                serverName,
+                publicKeyJwk,
+                authorityName: options.authorityName,
+            });
+        },
+        createServer() {
+            return {
+                authorityName: options.authorityName,
+                publicKeyJwk: options.authorityKeyPair.publicKeyJwk,
+                resolve: async (serverName) => {
+                    const publicKeyJwk = records.get(serverName);
+                    if (!publicKeyJwk)
+                        return null;
+                    return createSignedClientSideServerAuthorityRecord(options.authorityKeyPair, {
+                        serverName,
+                        publicKeyJwk,
+                        authorityName: options.authorityName,
+                    });
+                },
+            };
+        },
+    };
+}
+export function createFetchClientSideServerAuthorityServer(options) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    if (typeof fetchImpl !== 'function') {
+        throw new Error('A fetch implementation is required to create a fetch-backed authority server');
+    }
+    return {
+        authorityName: options.authorityName,
+        publicKeyJwk: options.publicKeyJwk,
+        async resolve(serverName) {
+            const baseUrl = options.baseUrl.replace(/\/+$/, '');
+            const resolvePath = (options.resolvePath ?? '/resolveAuthorityHost').replace(/^([^/])/, '/$1');
+            const url = new URL(`${baseUrl}${resolvePath}`);
+            url.searchParams.set('serverName', serverName);
+            const response = await fetchImpl(url.toString(), {
+                headers: {
+                    accept: 'application/json',
+                },
+            });
+            if (!response.ok) {
+                throw new Error(`Authority server ${baseUrl} returned ${response.status} ${response.statusText}`);
+            }
+            const record = await response.json();
+            return record;
+        },
+    };
+}
+export async function resolveTrustedClientSideServerFromAuthorities(serverName, authorityServers, options = {}) {
+    for (const authorityServer of authorityServers) {
+        try {
+            const record = await authorityServer.resolve(serverName);
+            if (!record)
+                continue;
+            return await trustClientSideServerFromAuthorityRecord(record, authorityServer.publicKeyJwk, options);
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+export function clientSideServerPublicKeysEqual(a, b) {
+    return stableStringify(a) === stableStringify(b);
+}
+function resolveStorage(storage) {
+    if (storage)
+        return storage;
+    if (typeof localStorage !== 'undefined')
+        return localStorage;
+    return null;
+}
+function normalizePublicKey(value) {
+    if ('publicKeyJwk' in value)
+        return value.publicKeyJwk;
+    return value;
+}
+function stableStringify(value) {
+    return JSON.stringify(sortValue(value));
+}
+function sortValue(value) {
+    if (Array.isArray(value))
+        return value.map(sortValue);
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value)
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([key, child]) => [key, sortValue(child)]));
+    }
+    return value;
+}
+function encodeUtf8(value) {
+    return new TextEncoder().encode(value);
+}
+function base64UrlEncode(bytes) {
+    const base64 = typeof Buffer !== 'undefined'
+        ? Buffer.from(bytes).toString('base64')
+        : bytesToBase64(bytes);
+    return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+}
+function base64UrlDecode(value) {
+    const padded = value.replace(/-/g, '+').replace(/_/g, '/').padEnd(Math.ceil(value.length / 4) * 4, '=');
+    if (typeof Buffer !== 'undefined') {
+        return new Uint8Array(Buffer.from(padded, 'base64'));
+    }
+    return base64ToBytes(padded);
+}
+async function resolveSubtle() {
+    if (globalThis.crypto?.subtle)
+        return globalThis.crypto.subtle;
+    const dynamicImport = new Function('m', 'return import(m)');
+    const cryptoModule = await dynamicImport('node:crypto');
+    if (cryptoModule.webcrypto?.subtle)
+        return cryptoModule.webcrypto.subtle;
+    throw new Error('Web Crypto subtle API is not available in this environment');
+}
+function bytesToBase64(bytes) {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+function base64ToBytes(base64) {
+    const binary = atob(base64);
+    const bytes = new Uint8Array(binary.length);
+    for (let index = 0; index < binary.length; index += 1) {
+        bytes[index] = binary.charCodeAt(index);
+    }
+    return bytes;
+}
+function toBufferSource(bytes) {
+    return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+}
+//# sourceMappingURL=identity.js.map

package/dist/client-side-server/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../typescript/src/client-side-server/identity.ts"],"names":[],"mappings":"AAsFA,MAAM,UAAU,qCAAqC,CACnD,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IAC9C,OAAO;QACL,OAAO,CAAC,GAAG;YACT,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAChD,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,KAAK;YAChB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACvB,CAAC;QACD,UAAU,CAAC,GAAG;YACZ,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACnB,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,UAA+D,EAC/D,MAA2C;IAE3C,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,UAA2E,EAC3E,UAAkB;IAElB,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAC5B,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAA;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,UAAkD,EAAE;IAEpD,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CACtC;QACE,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,OAAO;KACpB,EACD,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAA;IACD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IACrE,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IACvE,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,YAAY;QACZ,aAAa;QACb,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,2BAA2B,CAAC,YAAY,CAAC;QACvE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,YAAwB;IACxE,MAAM,WAAW,GAAG,MAAM,uCAAuC,CAAC,YAAY,CAAC,CAAA;IAC/E,OAAO,QAAQ,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,YAAwB;IACpF,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;IACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;IACxG,OAAO,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAwC,EACxC,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;IACpC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,OAAO,CAAC,aAAa,EACrB;QACE,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,OAAO;KACpB,EACD,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;IACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,SAAS;KAChB,EACD,UAAU,EACV,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CACtC,CAAA;IACD,OAAO,eAAe,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,YAAwB,EACxB,SAAiB,EACjB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CACtC,KAAK,EACL,YAAY,EACZ;QACE,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,OAAO;KACpB,EACD,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAClB;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,SAAS;KAChB,EACD,SAAS,EACT,eAAe,CAAC,SAAS,CAAC,EAC1B,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CACtC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,KAItD;IACC,OAAO,wBAAwB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,cAAc,EAAE,CAAA;AACjG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAC/D,gBAAiD,EACjD,KAMC;IAED,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,uBAAgC;QAC1C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE;KACvC,CAAA;IACD,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,gBAAgB,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IACjG,OAAO;QACL,GAAG,OAAO;QACV,SAAS;KACV,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAC/D,MAA6C,EAC7C,qBAAiC;IAEjC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAA;IACxC,IAAI,OAAO,CAAC,QAAQ,KAAK,uBAAuB;QAAE,OAAO,KAAK,CAAA;IAC9D,OAAO,+BAA+B,CAAC,qBAAqB,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAA;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAwC;IAExC,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,MAAM,uCAAuC,CAAC,OAAO,CAAC,YAAY,CAAC;KACjF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,OAAwC,EACxC,UAA+C,EAAE;IAEjD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;IAC3F,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,UAA+C,EAAE;IAEjD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,kBAAkB,CAAC,CAAA;IACrE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoC,CAAA;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAC9D,UAAwF,EAAE;IAE1F,MAAM,QAAQ,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAA;IAC7D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,MAAM,OAAO,GAAG,MAAM,uCAAuC,CAAC,OAAO,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,MAA2C,EAC3C,UAAkD,EAAE;IAEpD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;IACjG,MAAM,GAAG,GAAG,qCAAqC,CAAC,OAAO,CAAC,CAAA;IAC1D,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAA;IAC/B,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,UAAkB,EAClB,UAAkD,EAAE;IAEpD,MAAM,GAAG,GAAG,qCAAqC,CAAC,OAAO,CAAC,CAAA;IAC1D,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,UAAkD,EAAE;IAEpD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,sBAAsB,CAAC,CAAA;IACzE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwD,CAAA;AAC/E,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,MAA6C,EAC7C,UAAiD,EAAE;IAEnD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;IACnG,MAAM,GAAG,GAAG,uCAAuC,CAAC,OAAO,CAAC,CAAA;IAC5D,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAA;IAC/B,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,4BAA4B,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;AAC1F,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,UAAkB,EAClB,UAAiD,EAAE;IAEnD,MAAM,GAAG,GAAG,uCAAuC,CAAC,OAAO,CAAC,CAAA;IAC5D,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,UAAiD,EAAE;IAEnD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,4BAA4B,CAAC,CAAA;IAC/E,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0D,CAAA;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,UAAkB,EAClB,QAAwC,EACxC,UAAkD,EAAE;IAEpD,MAAM,MAAM,GAAwC;QAClD,UAAU;QACV,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,MAAM,EAAE,WAAW;KACpB,CAAA;IACD,iCAAiC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,MAA6C,EAC7C,qBAAiC,EACjC,UAAkD,EAAE;IAEpD,MAAM,KAAK,GAAG,MAAM,2CAA2C,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC9F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,UAAU,gCAAgC,CAAC,CAAA;IAC5F,CAAC;IACD,MAAM,OAAO,GAAwC;QACnD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,uCAAuC,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/E,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,MAAM,EAAE,WAAW;KACpB,CAAA;IACD,iCAAiC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACnD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,OAAiD;IAEjD,OAAO,KAAK,EAAE,UAAkB,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,mCAAmC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACvE,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO,wCAAwC,CAC7C,MAAM,EACN,OAAO,CAAC,qBAAqB,EAC7B;YACE,OAAO,EAAE,OAAO,CAAC,iBAAiB;YAClC,UAAU,EAAE,OAAO,CAAC,oBAAoB;SACzC,CACF,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,6CAA6C,CAC3D,OAAuD;IAMvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC7C,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;IACpD,CAAC;IACD,OAAO;QACL,QAAQ,CAAC,UAAU,EAAE,KAAK;YACxB,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;QACpD,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,UAAU;YACtB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC5C,IAAI,CAAC,YAAY;gBAAE,OAAO,IAAI,CAAA;YAC9B,OAAO,2CAA2C,CAAC,OAAO,CAAC,gBAAgB,EAAE;gBAC3E,UAAU;gBACV,YAAY;gBACZ,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAA;QACJ,CAAC;QACD,YAAY;YACV,OAAO;gBACL,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,YAAY;gBACnD,OAAO,EAAE,KAAK,EAAE,UAAkB,EAAE,EAAE;oBACpC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;oBAC5C,IAAI,CAAC,YAAY;wBAAE,OAAO,IAAI,CAAA;oBAC9B,OAAO,2CAA2C,CAAC,OAAO,CAAC,gBAAgB,EAAE;wBAC3E,UAAU;wBACV,YAAY;wBACZ,aAAa,EAAE,OAAO,CAAC,aAAa;qBACrC,CAAC,CAAA;gBACJ,CAAC;aACF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,OAAoD;IAEpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC5C,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;IACjG,CAAC;IACD,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,CAAC,OAAO,CAAC,UAAkB;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;YACnD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC9F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,OAAO,GAAG,WAAW,EAAE,CAAC,CAAA;YAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;YAC9C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAC/C,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;iBAC3B;aACF,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,aAAa,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;YACnG,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAkD,CAAA;YACpF,OAAO,MAAM,CAAA;QACf,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6CAA6C,CACjE,UAAkB,EAClB,gBAAmD,EACnD,UAAkD,EAAE;IAEpD,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACxD,IAAI,CAAC,MAAM;gBAAE,SAAQ;YACrB,OAAO,MAAM,wCAAwC,CAAC,MAAM,EAAE,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QACtG,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,CAAa,EAAE,CAAa;IAC1E,OAAO,eAAe,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,CAAA;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,OAAqC;IAC3D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAA;IAC3B,IAAI,OAAO,YAAY,KAAK,WAAW;QAAE,OAAO,YAAY,CAAA;IAC5D,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAwF;IAExF,IAAI,cAAc,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,YAAY,CAAA;IACtD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACrD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAClD,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,WAAW;QAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IACxB,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IACvG,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAA;IAC9D,MAAM,aAAa,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAgC,CAAA;IAC1F,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;IACvD,IAAI,YAAY,CAAC,SAAS,EAAE,MAAM;QAAE,OAAO,YAAY,CAAC,SAAS,CAAC,MAAM,CAAA;IACxE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;AACrB,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAgB,CAAA;AACjG,CAAC"}

package/dist/client-side-server/mqtt-webrtc.d.ts

@@ -0,0 +1,77 @@
+import type { IClientOptions } from 'mqtt';
+import type { OpenAPIClientTransportPlugin } from '../client/transport-plugin';
+import { type ClientSideServerChannel } from './channel';
+import { type ClientSideServerAuthorityServer, type ClientSideServerExportedKeyPair, type ClientSideServerSignedAuthorityRecord, type ClientSideServerStorageLike, type ClientSideServerTrustedServerRecord } from './identity';
+import { type ClientSideServerPeerMessage } from './protocol';
+import { type ClientSideServerAddress } from './signaling';
+import type { PLATClientSideServer } from './server';
+export declare const DEFAULT_CLIENT_SIDE_SERVER_MQTT_BROKER = "wss://broker.emqx.io:8084/mqtt";
+export declare const DEFAULT_CLIENT_SIDE_SERVER_MQTT_TOPIC = "mrtchat/plat-css";
+export declare const DEFAULT_CLIENT_SIDE_SERVER_ICE_SERVERS: RTCIceServer[];
+export interface ClientSideServerMQTTWebRTCOptions {
+    mqttBroker?: string;
+    mqttTopic?: string;
+    mqttOptions?: IClientOptions;
+    iceServers?: RTCIceServer[];
+    connectionTimeoutMs?: number;
+    announceIntervalMs?: number;
+    clientIdPrefix?: string;
+    identity?: ClientSideServerIdentityOptions;
+}
+export interface ClientSideServerMQTTWebRTCServerOptions extends ClientSideServerMQTTWebRTCOptions {
+    serverName: string;
+    server: PLATClientSideServer;
+}
+export interface ClientSideServerIdentityOptions {
+    keyPair?: ClientSideServerExportedKeyPair;
+    storage?: ClientSideServerStorageLike;
+    keyPairStorageKey?: string;
+    knownHosts?: Record<string, ClientSideServerTrustedServerRecord>;
+    knownHostsStorage?: ClientSideServerStorageLike;
+    knownHostsStorageKey?: string;
+    trustOnFirstUse?: boolean;
+    authority?: {
+        publicKeyJwk: JsonWebKey;
+        authorityName?: string;
+    };
+    authorityServers?: ClientSideServerAuthorityServer[];
+    authorityResolver?: (serverName: string) => Promise<ClientSideServerTrustedServerRecord | null>;
+    authorityRecord?: ClientSideServerSignedAuthorityRecord;
+}
+export interface ClientSideServerPeerSession extends ClientSideServerChannel {
+    readonly address: ClientSideServerAddress;
+    readonly connectionId: string;
+    readonly peerId: string;
+    readonly connectedAt: number;
+    isOpen(): boolean;
+    sendPeer(event: string, data?: unknown): Promise<void>;
+    subscribePeer(listener: (message: ClientSideServerPeerMessage) => void | Promise<void>): () => void;
+}
+export interface ClientSideServerPeerPool {
+    connect(address: string | ClientSideServerAddress): Promise<ClientSideServerPeerSession>;
+    close(address: string | ClientSideServerAddress): Promise<void>;
+    closeAll(): Promise<void>;
+}
+export declare class ClientSideServerMQTTWebRTCServer {
+    private options;
+    private mqtt?;
+    private readonly serverInstanceId;
+    private readonly unsubscribeByConnection;
+    private readonly peers;
+    private readonly pendingCandidates;
+    private announceTimer?;
+    private identityKeyPair?;
+    private publicIdentity?;
+    constructor(options: ClientSideServerMQTTWebRTCServerOptions);
+    get connectionUrl(): string;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    private announce;
+    private onMessage;
+    private acceptOffer;
+    private ensureIdentity;
+}
+export declare function createClientSideServerMQTTWebRTCTransportPlugin(options?: ClientSideServerMQTTWebRTCOptions): OpenAPIClientTransportPlugin;
+export declare function createClientSideServerMQTTWebRTCPeerPool(options?: ClientSideServerMQTTWebRTCOptions): ClientSideServerPeerPool;
+export declare function createClientSideServerMQTTWebRTCServer(options: ClientSideServerMQTTWebRTCServerOptions): ClientSideServerMQTTWebRTCServer;
+//# sourceMappingURL=mqtt-webrtc.d.ts.map

package/dist/client-side-server/mqtt-webrtc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mqtt-webrtc.d.ts","sourceRoot":"","sources":["../../../typescript/src/client-side-server/mqtt-webrtc.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,MAAM,CAAA;AAEtD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAA+B,KAAK,uBAAuB,EAAE,MAAM,WAAW,CAAA;AACrF,OAAO,EAGL,KAAK,+BAA+B,EACpC,KAAK,+BAA+B,EAEpC,KAAK,qCAAqC,EAC1C,KAAK,2BAA2B,EAChC,KAAK,mCAAmC,EAYzC,MAAM,YAAY,CAAA;AACnB,OAAO,EAGL,KAAK,2BAA2B,EACjC,MAAM,YAAY,CAAA;AACnB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAEpD,eAAO,MAAM,sCAAsC,mCAAmC,CAAA;AACtF,eAAO,MAAM,qCAAqC,qBAAqB,CAAA;AACvE,eAAO,MAAM,sCAAsC,EAAE,YAAY,EAMhE,CAAA;AAoBD,MAAM,WAAW,iCAAiC;IAChD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,cAAc,CAAA;IAC5B,UAAU,CAAC,EAAE,YAAY,EAAE,CAAA;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,+BAA+B,CAAA;CAC3C;AAED,MAAM,WAAW,uCAAwC,SAAQ,iCAAiC;IAChG,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,oBAAoB,CAAA;CAC7B;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,CAAC,EAAE,+BAA+B,CAAA;IACzC,OAAO,CAAC,EAAE,2BAA2B,CAAA;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAA;IAChE,iBAAiB,CAAC,EAAE,2BAA2B,CAAA;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,SAAS,CAAC,EAAE;QACV,YAAY,EAAE,UAAU,CAAA;QACxB,aAAa,CAAC,EAAE,MAAM,CAAA;KACvB,CAAA;IACD,gBAAgB,CAAC,EAAE,+BAA+B,EAAE,CAAA;IACpD,iBAAiB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,mCAAmC,GAAG,IAAI,CAAC,CAAA;IAC/F,eAAe,CAAC,EAAE,qCAAqC,CAAA;CACxD;AAED,MAAM,WAAW,2BAA4B,SAAQ,uBAAuB;IAC1E,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAA;IACzC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,MAAM,IAAI,OAAO,CAAA;IACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD,aAAa,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAA;CACpG;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAA;IACxF,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1B;AAKD,qBAAa,gCAAgC;IAU/B,OAAO,CAAC,OAAO;IAT3B,OAAO,CAAC,IAAI,CAAC,CAAY;IACzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAgC;IACxE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAC7D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA2C;IAC7E,OAAO,CAAC,aAAa,CAAC,CAAgC;IACtD,OAAO,CAAC,eAAe,CAAC,CAAiC;IACzD,OAAO,CAAC,cAAc,CAAC,CAAgC;gBAEnC,OAAO,EAAE,uCAAuC;IAIpE,IAAI,aAAa,IAAI,MAAM,CAE1B;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAsBb,QAAQ;YAaR,SAAS;YA2BT,WAAW;YAyEX,cAAc;CAU7B;AAED,wBAAgB,+CAA+C,CAC7D,OAAO,GAAE,iCAAsC,GAC9C,4BAA4B,CAM9B;AAkBD,wBAAgB,wCAAwC,CACtD,OAAO,GAAE,iCAAsC,GAC9C,wBAAwB,CAM1B;AAmTD,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,uCAAuC,GAC/C,gCAAgC,CAElC"}