@neykoor/libsignal-node 1.0.4 → 1.0.7

package/lib/sender-message-key.js

@@ -0,0 +1,31 @@
+import * as crypto from "./crypto.js";
+import { wipeBuffer } from "./util.js";
+export class SenderMessageKey {
+    constructor(iteration, seed) {
+        const derivative = crypto.deriveSecrets(seed, Buffer.alloc(32), Buffer.from("WhisperGroup"));
+        const part0 = derivative[0];
+        const part1 = derivative[1];
+        if (!part0 || !part1) {
+            throw new Error("Failed to derive sender message key material");
+        }
+        this.iv = Buffer.from(part0.subarray(0, 16));
+        this.cipherKey = Buffer.concat([part0.subarray(16), part1.subarray(0, 16)]);
+        this.iteration = iteration;
+        this.seed = Buffer.from(seed);
+        wipeBuffer(part0);
+        wipeBuffer(part1);
+    }
+    getIteration() {
+        return this.iteration;
+    }
+    getIv() {
+        return this.iv;
+    }
+    getCipherKey() {
+        return this.cipherKey;
+    }
+    getSeed() {
+        return this.seed;
+    }
+}
+//# sourceMappingURL=sender-message-key.js.map

package/lib/sender-message-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-message-key.js","sourceRoot":"","sources":["../src/sender-message-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAEnC,MAAM,OAAO,gBAAgB;IAM3B,YAAY,SAAiB,EAAE,IAAgB;QAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;QAC5F,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;QAE3B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;QAED,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3E,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE7B,UAAU,CAAC,KAAK,CAAC,CAAA;QACjB,UAAU,CAAC,KAAK,CAAC,CAAA;IACnB,CAAC;IAEM,YAAY;QACjB,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAEM,KAAK;QACV,OAAO,IAAI,CAAC,EAAE,CAAA;IAChB,CAAC;IAEM,YAAY;QACjB,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;CACF"}

package/lib/session-builder.d.ts

@@ -0,0 +1,13 @@
+import type { ProtocolAddress } from "./protocol-address.js";
+import { SessionRecord } from "./session-record.js";
+import type { DeviceKeyBundle, IncomingPreKeyMessage, SignalStorage } from "./types.js";
+export declare class SessionBuilder {
+    private addr;
+    private storage;
+    constructor(storage: SignalStorage, protocolAddress: ProtocolAddress);
+    initOutgoing(device: DeviceKeyBundle): Promise<void>;
+    initIncoming(record: SessionRecord, message: IncomingPreKeyMessage): Promise<number | undefined>;
+    private initSession;
+    private calculateSendingRatchet;
+}
+//# sourceMappingURL=session-builder.d.ts.map

package/lib/session-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-builder.d.ts","sourceRoot":"","sources":["../src/session-builder.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAGzD,OAAO,EAAgB,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAEpF,qBAAa,cAAc;IACzB,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAAe;gBAElB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe;IAK9D,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAiDpD,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YA0CxF,WAAW;IAmFzB,OAAO,CAAC,uBAAuB;CAgB9B"}

package/lib/session-builder.js

@@ -0,0 +1,154 @@
+import { BaseKeyType } from "./base-key-type.js";
+import { ChainType } from "./chain-type.js";
+import * as crypto from "./crypto.js";
+import * as curve from "./curve.js";
+import { Direction } from "./direction.js";
+import * as errors from "./errors.js";
+import { queueJob } from "./queue-job.js";
+import { assertValidDeviceKeyBundle } from "./prekey-bundle-validator.js";
+import { SessionEntry, SessionRecord } from "./session-record.js";
+export class SessionBuilder {
+    constructor(storage, protocolAddress) {
+        this.addr = protocolAddress;
+        this.storage = storage;
+    }
+    async initOutgoing(device) {
+        assertValidDeviceKeyBundle(device);
+        const fqAddr = this.addr.toString();
+        return await queueJob(fqAddr, async () => {
+            if (!(await this.storage.isTrustedIdentity(this.addr.id, device.identityKey, Direction.SENDING))) {
+                throw new errors.UntrustedIdentityKeyError(this.addr.id, device.identityKey);
+            }
+            if (!curve.verifySignature(device.identityKey, device.signedPreKey.publicKey, device.signedPreKey.signature)) {
+                throw new Error("Signature validation failed");
+            }
+            const baseKey = curve.generateKeyPair();
+            const devicePreKey = device.preKey && device.preKey.publicKey;
+            const session = await this.initSession(true, baseKey, undefined, device.identityKey, devicePreKey, device.signedPreKey.publicKey, device.registrationId);
+            session.pendingPreKey = {
+                signedKeyId: device.signedPreKey.keyId,
+                baseKey: baseKey.pubKey
+            };
+            if (device.preKey) {
+                session.pendingPreKey.preKeyId = device.preKey.keyId;
+            }
+            let record = await this.storage.loadSession(fqAddr);
+            if (!record) {
+                record = new SessionRecord();
+            }
+            else {
+                const openSession = record.getOpenSession();
+                if (openSession) {
+                    record.closeSession(openSession);
+                }
+            }
+            record.setSession(session);
+            record.removeOldSessions();
+            await this.storage.storeSession(fqAddr, record);
+        });
+    }
+    async initIncoming(record, message) {
+        if (!(await this.storage.isTrustedIdentity(this.addr.id, message.identityKey, Direction.RECEIVING))) {
+            throw new errors.UntrustedIdentityKeyError(this.addr.id, message.identityKey);
+        }
+        if (record.getSession(message.baseKey)) {
+            return undefined;
+        }
+        let preKeyPair;
+        if (message.preKeyId !== undefined) {
+            preKeyPair = await this.storage.loadPreKey(message.preKeyId);
+            if (!preKeyPair) {
+                throw new errors.PreKeyError("Invalid PreKey ID");
+            }
+        }
+        const signedPreKeyPair = await this.storage.loadSignedPreKey(message.signedPreKeyId);
+        if (!signedPreKeyPair) {
+            throw new errors.PreKeyError("Missing SignedPreKey");
+        }
+        const existingOpenSession = record.getOpenSession();
+        if (existingOpenSession) {
+            record.closeSession(existingOpenSession);
+        }
+        record.setSession(await this.initSession(false, preKeyPair, signedPreKeyPair, message.identityKey, message.baseKey, undefined, message.registrationId));
+        return message.preKeyId;
+    }
+    async initSession(isInitiator, ourEphemeralKey, ourSignedKeyInput, theirIdentityPubKey, theirEphemeralPubKey, theirSignedPubKeyInput, registrationId) {
+        let ourSignedKey = ourSignedKeyInput;
+        let theirSignedPubKey = theirSignedPubKeyInput;
+        if (isInitiator) {
+            if (ourSignedKey) {
+                throw new Error("Invalid call to initSession");
+            }
+            ourSignedKey = ourEphemeralKey;
+        }
+        else {
+            if (theirSignedPubKey) {
+                throw new Error("Invalid call to initSession");
+            }
+            theirSignedPubKey = theirEphemeralPubKey;
+        }
+        let sharedSecret;
+        if (!ourEphemeralKey || !theirEphemeralPubKey) {
+            sharedSecret = new Uint8Array(32 * 4);
+        }
+        else {
+            sharedSecret = new Uint8Array(32 * 5);
+        }
+        for (let i = 0; i < 32; i++) {
+            sharedSecret[i] = 0xff;
+        }
+        const ourIdentityKey = await this.storage.getOurIdentity();
+        const a1 = curve.calculateAgreement(theirSignedPubKey, ourIdentityKey.privKey);
+        const a2 = curve.calculateAgreement(theirIdentityPubKey, ourSignedKey.privKey);
+        const a3 = curve.calculateAgreement(theirSignedPubKey, ourSignedKey.privKey);
+        if (isInitiator) {
+            sharedSecret.set(new Uint8Array(a1), 32);
+            sharedSecret.set(new Uint8Array(a2), 32 * 2);
+        }
+        else {
+            sharedSecret.set(new Uint8Array(a1), 32 * 2);
+            sharedSecret.set(new Uint8Array(a2), 32);
+        }
+        sharedSecret.set(new Uint8Array(a3), 32 * 3);
+        if (ourEphemeralKey && theirEphemeralPubKey) {
+            const a4 = curve.calculateAgreement(theirEphemeralPubKey, ourEphemeralKey.privKey);
+            sharedSecret.set(new Uint8Array(a4), 32 * 4);
+        }
+        const masterKey = crypto.deriveSecrets(Buffer.from(sharedSecret), Buffer.alloc(32), Buffer.from("WhisperText"));
+        const session = SessionRecord.createEntry();
+        session.registrationId = registrationId;
+        session.currentRatchet = {
+            rootKey: masterKey[0],
+            ephemeralKeyPair: isInitiator ? curve.generateKeyPair() : ourSignedKey,
+            lastRemoteEphemeralKey: theirSignedPubKey,
+            previousCounter: 0
+        };
+        session.indexInfo = {
+            created: Date.now(),
+            used: Date.now(),
+            remoteIdentityKey: theirIdentityPubKey,
+            baseKey: isInitiator ? ourEphemeralKey.pubKey : theirEphemeralPubKey,
+            baseKeyType: isInitiator ? BaseKeyType.OURS : BaseKeyType.THEIRS,
+            closed: -1
+        };
+        if (isInitiator) {
+            this.calculateSendingRatchet(session, theirSignedPubKey);
+        }
+        return session;
+    }
+    calculateSendingRatchet(session, remoteKey) {
+        const ratchet = session.currentRatchet;
+        const sharedSecret = curve.calculateAgreement(remoteKey, ratchet.ephemeralKeyPair.privKey);
+        const masterKey = crypto.deriveSecrets(sharedSecret, ratchet.rootKey, Buffer.from("WhisperRatchet"));
+        session.addChain(ratchet.ephemeralKeyPair.pubKey, {
+            messageKeys: {},
+            chainKey: {
+                counter: -1,
+                key: masterKey[1]
+            },
+            chainType: ChainType.SENDING
+        });
+        ratchet.rootKey = masterKey[0];
+    }
+}
+//# sourceMappingURL=session-builder.js.map

package/lib/session-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-builder.js","sourceRoot":"","sources":["../src/session-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAClC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAA;AAEhC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAG9D,MAAM,OAAO,cAAc;IAIzB,YAAY,OAAsB,EAAE,eAAgC;QAClE,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAuB;QACxC,0BAA0B,CAAC,MAAM,CAAC,CAAA;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;QACnC,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YACvC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACjG,MAAM,IAAI,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;YAC9E,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7G,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YAChD,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,EAAE,CAAA;YACvC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAA;YAC7D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CACpC,IAAI,EACJ,OAAO,EACP,SAAS,EACT,MAAM,CAAC,WAAW,EAClB,YAAY,EACZ,MAAM,CAAC,YAAY,CAAC,SAAS,EAC7B,MAAM,CAAC,cAAc,CACtB,CAAA;YACD,OAAO,CAAC,aAAa,GAAG;gBACtB,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK;gBACtC,OAAO,EAAE,OAAO,CAAC,MAAM;aACxB,CAAA;YAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,aAAa,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAA;YACtD,CAAC;YAED,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YACnD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA;YAC9B,CAAC;iBAAM,CAAC;gBACN,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,CAAA;gBAC3C,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;gBAClC,CAAC;YACH,CAAC;YAED,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;YAC1B,MAAM,CAAC,iBAAiB,EAAE,CAAA;YAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACjD,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAqB,EAAE,OAA8B;QACtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QAC/E,CAAC;QAED,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,UAA+B,CAAA;QACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;YACnD,CAAC;QACH,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QACpF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAA;QACtD,CAAC;QAED,MAAM,mBAAmB,GAAG,MAAM,CAAC,cAAc,EAAE,CAAA;QACnD,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,CAAC,UAAU,CACf,MAAM,IAAI,CAAC,WAAW,CACpB,KAAK,EACL,UAAU,EACV,gBAAgB,EAChB,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,OAAO,EACf,SAAS,EACT,OAAO,CAAC,cAAc,CACvB,CACF,CAAA;QAED,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,WAAoB,EACpB,eAAoC,EACpC,iBAAsC,EACtC,mBAA2B,EAC3B,oBAAwC,EACxC,sBAA0C,EAC1C,cAAkC;QAElC,IAAI,YAAY,GAAG,iBAAiB,CAAA;QACpC,IAAI,iBAAiB,GAAG,sBAAsB,CAAA;QAE9C,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YAChD,CAAC;YAED,YAAY,GAAG,eAAe,CAAA;QAChC,CAAC;aAAM,CAAC;YACN,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YAChD,CAAC;YAED,iBAAiB,GAAG,oBAAoB,CAAA;QAC1C,CAAC;QAED,IAAI,YAAwB,CAAA;QAC5B,IAAI,CAAC,eAAe,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9C,YAAY,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QACvC,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QACvC,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;QACxB,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAC1D,MAAM,EAAE,GAAG,KAAK,CAAC,kBAAkB,CAAC,iBAAkB,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;QAC/E,MAAM,EAAE,GAAG,KAAK,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,YAAa,CAAC,OAAO,CAAC,CAAA;QAC/E,MAAM,EAAE,GAAG,KAAK,CAAC,kBAAkB,CAAC,iBAAkB,EAAE,YAAa,CAAC,OAAO,CAAC,CAAA;QAE9E,IAAI,WAAW,EAAE,CAAC;YAChB,YAAY,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;YACxC,YAAY,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAC9C,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;YAC5C,YAAY,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAC1C,CAAC;QAED,YAAY,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAE5C,IAAI,eAAe,IAAI,oBAAoB,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,kBAAkB,CAAC,oBAAoB,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;YAClF,YAAY,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAA;QAE/G,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,CAAA;QAC3C,OAAO,CAAC,cAAc,GAAG,cAAc,CAAA;QACvC,OAAO,CAAC,cAAc,GAAG;YACvB,OAAO,EAAE,SAAS,CAAC,CAAC,CAAE;YACtB,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,YAAa;YACvE,sBAAsB,EAAE,iBAAkB;YAC1C,eAAe,EAAE,CAAC;SACnB,CAAA;QACD,OAAO,CAAC,SAAS,GAAG;YAClB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;YACnB,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;YAChB,iBAAiB,EAAE,mBAAmB;YACtC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,eAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAqB;YACtE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM;YAChE,MAAM,EAAE,CAAC,CAAC;SACX,CAAA;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,iBAAkB,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,uBAAuB,CAAC,OAAqB,EAAE,SAAiB;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAA;QACtC,MAAM,YAAY,GAAG,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC1F,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAEpG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAChD,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE;gBACR,OAAO,EAAE,CAAC,CAAC;gBACX,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;aAClB;YACD,SAAS,EAAE,SAAS,CAAC,OAAO;SAC7B,CAAC,CAAA;QAEF,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,CAAE,CAAA;IACjC,CAAC;CACA"}

package/lib/session-cipher.d.ts

@@ -0,0 +1,30 @@
+import { ProtocolAddress } from "./protocol-address.js";
+import type { Chain, SessionEntry } from "./session-record.js";
+import { SessionRecord } from "./session-record.js";
+import type { EncryptedMessage, SignalStorage } from "./types.js";
+export declare class SessionCipher {
+    private addr;
+    private storage;
+    private staleSessionMaxAgeMs?;
+    constructor(storage: SignalStorage, protocolAddress: ProtocolAddress, staleSessionMaxAgeMs?: number | undefined);
+    private _encodeTupleByte;
+    private _decodeTupleByte;
+    toString(): string;
+    getRecord(): Promise<SessionRecord | undefined>;
+    storeRecord(record: SessionRecord): Promise<void>;
+    queueJob<T>(awaitable: () => Promise<T>): Promise<T>;
+    encrypt(data: Uint8Array): Promise<EncryptedMessage>;
+    decryptWithSessions(data: Uint8Array, sessions: SessionEntry[]): Promise<{
+        session: SessionEntry;
+        plaintext: Buffer;
+    }>;
+    decryptWhisperMessage(data: Uint8Array): Promise<Buffer>;
+    decryptPreKeyWhisperMessage(data: Uint8Array): Promise<Buffer>;
+    doDecryptWhisperMessage(messageBuffer: Uint8Array, session: SessionEntry): Promise<Buffer>;
+    fillMessageKeys(chain: Chain, counter: number): void;
+    maybeStepRatchet(session: SessionEntry, remoteKey: Buffer, previousCounter: number): void;
+    calculateRatchet(session: SessionEntry, remoteKey: Buffer, sending: boolean): void;
+    hasOpenSession(): Promise<boolean>;
+    closeOpenSession(): Promise<void>;
+}
+//# sourceMappingURL=session-cipher.d.ts.map

package/lib/session-cipher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cipher.d.ts","sourceRoot":"","sources":["../src/session-cipher.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAKpD,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAc9D,qBAAa,aAAa;IACxB,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,oBAAoB,CAAC,CAAQ;gBAGnC,OAAO,EAAE,aAAa,EACtB,eAAe,EAAE,eAAe,EAChC,oBAAoB,GAAE,MAAM,GAAG,SAA4C;IAW7E,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,gBAAgB;IAIxB,QAAQ,IAAI,MAAM;IAIZ,SAAS,IAAI,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAS/C,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IASjD,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIpD,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8FpD,mBAAmB,CACvB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,YAAY,EAAE,GACvB,OAAO,CAAC;QAAE,OAAO,EAAE,YAAY,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAuBlD,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBxD,2BAA2B,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAiD9D,uBAAuB,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAyDhG,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAiBpD,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI;IA0BzF,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAkB5E,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC;IAWlC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;CAYxC"}

package/lib/session-cipher.js

@@ -0,0 +1,327 @@
+import { ChainType } from "./chain-type.js";
+import * as crypto from "./crypto.js";
+import * as curve from "./curve.js";
+import { Direction } from "./direction.js";
+import * as errors from "./errors.js";
+import { ProtocolAddress } from "./protocol-address.js";
+import * as protobufs from "./protobufs.js";
+import { queueJob } from "./queue-job.js";
+import { wipeBuffer, wipeBuffers } from "./util.js";
+import { SessionBuilder } from "./session-builder.js";
+import { SessionRecord } from "./session-record.js";
+const VERSION = 3;
+const DEFAULT_STALE_SESSION_MAX_AGE_MS = 90 * 24 * 60 * 60 * 1000;
+const MIN_MESSAGE_LENGTH = 1 + 1 + 8;
+function assertBuffer(value) {
+    if (!(value instanceof Uint8Array)) {
+        throw TypeError(`Expected Uint8Array instead of: ${value?.constructor?.name}`);
+    }
+    return value;
+}
+export class SessionCipher {
+    constructor(storage, protocolAddress, staleSessionMaxAgeMs = DEFAULT_STALE_SESSION_MAX_AGE_MS) {
+        if (!(protocolAddress instanceof ProtocolAddress)) {
+            throw new TypeError("protocolAddress must be a ProtocolAddress");
+        }
+        this.addr = protocolAddress;
+        this.storage = storage;
+        this.staleSessionMaxAgeMs = staleSessionMaxAgeMs;
+    }
+    _encodeTupleByte(number1, number2) {
+        if (number1 > 15 || number2 > 15) {
+            throw TypeError("Numbers must be 4 bits or less");
+        }
+        return (number1 << 4) | number2;
+    }
+    _decodeTupleByte(byte) {
+        return [byte >> 4, byte & 0xf];
+    }
+    toString() {
+        return `<SessionCipher(${this.addr.toString()})>`;
+    }
+    async getRecord() {
+        const record = await this.storage.loadSession(this.addr.toString());
+        if (record && !(record instanceof SessionRecord)) {
+            throw new TypeError("SessionRecord type expected from loadSession");
+        }
+        return record;
+    }
+    async storeRecord(record) {
+        record.removeOldSessions();
+        if (this.staleSessionMaxAgeMs) {
+            record.removeStaleSessions(this.staleSessionMaxAgeMs);
+        }
+        await this.storage.storeSession(this.addr.toString(), record);
+    }
+    async queueJob(awaitable) {
+        return await queueJob(this.addr.toString(), awaitable);
+    }
+    async encrypt(data) {
+        assertBuffer(data);
+        const ourIdentityKey = await this.storage.getOurIdentity();
+        return await this.queueJob(async () => {
+            const record = await this.getRecord();
+            if (!record) {
+                throw new errors.SessionError("No sessions");
+            }
+            const session = record.getOpenSession();
+            if (!session) {
+                throw new errors.SessionError("No open session");
+            }
+            const remoteIdentityKey = session.indexInfo.remoteIdentityKey;
+            if (!(await this.storage.isTrustedIdentity(this.addr.id, remoteIdentityKey, Direction.SENDING))) {
+                throw new errors.UntrustedIdentityKeyError(this.addr.id, remoteIdentityKey);
+            }
+            const chain = session.getChain(session.currentRatchet.ephemeralKeyPair.pubKey);
+            if (!chain) {
+                throw new errors.SessionError("No chain found for current ratchet");
+            }
+            if (chain.chainType === ChainType.RECEIVING) {
+                throw new errors.SessionError("Tried to encrypt on a receiving chain");
+            }
+            this.fillMessageKeys(chain, chain.chainKey.counter + 1);
+            const keys = crypto.deriveSecrets(chain.messageKeys[chain.chainKey.counter], Buffer.alloc(32), Buffer.from("WhisperMessageKeys"));
+            wipeBuffer(chain.messageKeys[chain.chainKey.counter]);
+            delete chain.messageKeys[chain.chainKey.counter];
+            const msg = protobufs.WhisperMessage.create();
+            msg.ephemeralKey = session.currentRatchet.ephemeralKeyPair.pubKey;
+            msg.counter = chain.chainKey.counter;
+            msg.previousCounter = session.currentRatchet.previousCounter;
+            msg.ciphertext = crypto.encrypt(keys[0], data, keys[2].slice(0, 16));
+            const msgBuf = protobufs.WhisperMessage.encode(msg).finish();
+            const macInput = Buffer.alloc(msgBuf.byteLength + 33 * 2 + 1);
+            macInput.set(ourIdentityKey.pubKey);
+            macInput.set(session.indexInfo.remoteIdentityKey, 33);
+            macInput[33 * 2] = this._encodeTupleByte(VERSION, VERSION);
+            macInput.set(msgBuf, 33 * 2 + 1);
+            const mac = crypto.calculateMAC(keys[1], macInput);
+            wipeBuffers(keys[0], keys[1], keys[2]);
+            const result = Buffer.alloc(msgBuf.byteLength + 9);
+            result[0] = this._encodeTupleByte(VERSION, VERSION);
+            result.set(msgBuf, 1);
+            result.set(mac.slice(0, 8), msgBuf.byteLength + 1);
+            await this.storeRecord(record);
+            let type;
+            let body;
+            if (session.pendingPreKey) {
+                type = 3;
+                const preKeyMsg = protobufs.PreKeyWhisperMessage.create({
+                    identityKey: ourIdentityKey.pubKey,
+                    registrationId: await this.storage.getOurRegistrationId(),
+                    baseKey: session.pendingPreKey.baseKey,
+                    signedPreKeyId: session.pendingPreKey.signedKeyId,
+                    message: result
+                });
+                if (session.pendingPreKey.preKeyId) {
+                    preKeyMsg.preKeyId = session.pendingPreKey.preKeyId;
+                }
+                body = Buffer.concat([
+                    Buffer.from([this._encodeTupleByte(VERSION, VERSION)]),
+                    Buffer.from(protobufs.PreKeyWhisperMessage.encode(preKeyMsg).finish())
+                ]);
+            }
+            else {
+                type = 1;
+                body = result;
+            }
+            return {
+                type,
+                body,
+                registrationId: session.registrationId
+            };
+        });
+    }
+    async decryptWithSessions(data, sessions) {
+        if (!sessions.length) {
+            throw new errors.SessionError("No sessions available");
+        }
+        const errs = [];
+        for (const session of sessions) {
+            let plaintext;
+            try {
+                plaintext = await this.doDecryptWhisperMessage(data, session);
+                session.indexInfo.used = Date.now();
+                return {
+                    session,
+                    plaintext
+                };
+            }
+            catch (e) {
+                errs.push(e);
+            }
+        }
+        throw Object.assign(new errors.SessionError("No matching sessions found for message"), { errors: errs });
+    }
+    async decryptWhisperMessage(data) {
+        assertBuffer(data);
+        return await this.queueJob(async () => {
+            const record = await this.getRecord();
+            if (!record) {
+                throw new errors.SessionError("No session record");
+            }
+            const result = await this.decryptWithSessions(data, record.getSessions());
+            const remoteIdentityKey = result.session.indexInfo.remoteIdentityKey;
+            if (!(await this.storage.isTrustedIdentity(this.addr.id, remoteIdentityKey, Direction.RECEIVING))) {
+                throw new errors.UntrustedIdentityKeyError(this.addr.id, remoteIdentityKey);
+            }
+            if (record.isClosed(result.session)) {
+                result.session.indexInfo.used = Date.now();
+            }
+            await this.storeRecord(record);
+            return result.plaintext;
+        });
+    }
+    async decryptPreKeyWhisperMessage(data) {
+        assertBuffer(data);
+        if (data.byteLength < MIN_MESSAGE_LENGTH) {
+            throw new errors.SessionError("Message too short");
+        }
+        const versions = this._decodeTupleByte(data[0]);
+        if (versions[1] > 3 || versions[0] < 3) {
+            throw new Error("Incompatible version number on PreKeyWhisperMessage");
+        }
+        return await this.queueJob(async () => {
+            let record = await this.getRecord();
+            const preKeyProto = protobufs.PreKeyWhisperMessage.decode(data.slice(1));
+            if (!record) {
+                if (preKeyProto.registrationId == null) {
+                    throw new errors.PreKeyError("No registrationId");
+                }
+                record = new SessionRecord();
+            }
+            const builder = new SessionBuilder(this.storage, this.addr);
+            const preKeyId = await builder.initIncoming(record, {
+                registrationId: preKeyProto.registrationId,
+                identityKey: Buffer.from(preKeyProto.identityKey),
+                baseKey: Buffer.from(preKeyProto.baseKey),
+                preKeyId: preKeyProto.preKeyId,
+                signedPreKeyId: preKeyProto.signedPreKeyId,
+                message: Buffer.from(preKeyProto.message)
+            });
+            const session = record.getSession(Buffer.from(preKeyProto.baseKey));
+            if (!session) {
+                throw new errors.SessionError("No session established for incoming PreKeyWhisperMessage");
+            }
+            const plaintext = await this.doDecryptWhisperMessage(Buffer.from(preKeyProto.message), session);
+            await this.storeRecord(record);
+            if (preKeyId !== undefined) {
+                await this.storage.removePreKey(preKeyId);
+            }
+            return plaintext;
+        });
+    }
+    async doDecryptWhisperMessage(messageBuffer, session) {
+        assertBuffer(messageBuffer);
+        if (!session) {
+            throw new TypeError("session required");
+        }
+        if (messageBuffer.byteLength < MIN_MESSAGE_LENGTH) {
+            throw new errors.SessionError("Message too short");
+        }
+        const versions = this._decodeTupleByte(messageBuffer[0]);
+        if (versions[1] > 3 || versions[0] < 3) {
+            throw new Error("Incompatible version number on WhisperMessage");
+        }
+        const messageProto = messageBuffer.slice(1, -8);
+        const message = protobufs.WhisperMessage.decode(messageProto);
+        this.maybeStepRatchet(session, Buffer.from(message.ephemeralKey), message.previousCounter);
+        const chain = session.getChain(Buffer.from(message.ephemeralKey));
+        if (!chain) {
+            throw new errors.SessionError("No chain found for message ephemeral key");
+        }
+        if (chain.chainType === ChainType.SENDING) {
+            throw new errors.SessionError("Tried to decrypt on a sending chain");
+        }
+        this.fillMessageKeys(chain, message.counter);
+        if (!Object.prototype.hasOwnProperty.call(chain.messageKeys, message.counter)) {
+            throw new errors.MessageCounterError("Key used already or never filled");
+        }
+        const messageKey = chain.messageKeys[message.counter];
+        delete chain.messageKeys[message.counter];
+        const keys = crypto.deriveSecrets(messageKey, Buffer.alloc(32), Buffer.from("WhisperMessageKeys"));
+        wipeBuffer(messageKey);
+        const ourIdentityKey = await this.storage.getOurIdentity();
+        const macInput = Buffer.alloc(messageProto.byteLength + 33 * 2 + 1);
+        macInput.set(session.indexInfo.remoteIdentityKey);
+        macInput.set(ourIdentityKey.pubKey, 33);
+        macInput[33 * 2] = this._encodeTupleByte(VERSION, VERSION);
+        macInput.set(messageProto, 33 * 2 + 1);
+        crypto.verifyMAC(macInput, keys[1], messageBuffer.slice(-8), 8);
+        const plaintext = crypto.decrypt(keys[0], Buffer.from(message.ciphertext), keys[2].slice(0, 16));
+        wipeBuffers(keys[0], keys[1], keys[2]);
+        delete session.pendingPreKey;
+        return plaintext;
+    }
+    fillMessageKeys(chain, counter) {
+        while (chain.chainKey.counter < counter) {
+            if (counter - chain.chainKey.counter > 2000) {
+                throw new errors.SessionError("Over 2000 messages into the future!");
+            }
+            if (chain.chainKey.key === undefined) {
+                throw new errors.SessionError("Chain closed");
+            }
+            const key = chain.chainKey.key;
+            chain.messageKeys[chain.chainKey.counter + 1] = crypto.calculateMAC(key, Buffer.from([1]));
+            chain.chainKey.key = crypto.calculateMAC(key, Buffer.from([2]));
+            chain.chainKey.counter += 1;
+        }
+    }
+    maybeStepRatchet(session, remoteKey, previousCounter) {
+        if (session.getChain(remoteKey)) {
+            return;
+        }
+        const ratchet = session.currentRatchet;
+        const previousRatchet = session.getChain(ratchet.lastRemoteEphemeralKey);
+        if (previousRatchet) {
+            this.fillMessageKeys(previousRatchet, previousCounter);
+            wipeBuffer(previousRatchet.chainKey.key);
+            delete previousRatchet.chainKey.key;
+        }
+        this.calculateRatchet(session, remoteKey, false);
+        const prevCounter = session.getChain(ratchet.ephemeralKeyPair.pubKey);
+        if (prevCounter) {
+            ratchet.previousCounter = prevCounter.chainKey.counter;
+            session.deleteChain(ratchet.ephemeralKeyPair.pubKey);
+        }
+        ratchet.ephemeralKeyPair = curve.generateKeyPair();
+        this.calculateRatchet(session, remoteKey, true);
+        ratchet.lastRemoteEphemeralKey = remoteKey;
+    }
+    calculateRatchet(session, remoteKey, sending) {
+        const ratchet = session.currentRatchet;
+        const sharedSecret = curve.calculateAgreement(remoteKey, ratchet.ephemeralKeyPair.privKey);
+        const masterKey = crypto.deriveSecrets(sharedSecret, ratchet.rootKey, Buffer.from("WhisperRatchet"), 2);
+        const chainKey = sending ? ratchet.ephemeralKeyPair.pubKey : remoteKey;
+        session.addChain(chainKey, {
+            messageKeys: {},
+            chainKey: {
+                counter: -1,
+                key: masterKey[1]
+            },
+            chainType: sending ? ChainType.SENDING : ChainType.RECEIVING
+        });
+        ratchet.rootKey = masterKey[0];
+    }
+    async hasOpenSession() {
+        return await this.queueJob(async () => {
+            const record = await this.getRecord();
+            if (!record) {
+                return false;
+            }
+            return record.haveOpenSession();
+        });
+    }
+    async closeOpenSession() {
+        return await this.queueJob(async () => {
+            const record = await this.getRecord();
+            if (record) {
+                const openSession = record.getOpenSession();
+                if (openSession) {
+                    record.closeSession(openSession);
+                    await this.storeRecord(record);
+                }
+            }
+        });
+    }
+}
+//# sourceMappingURL=session-cipher.js.map

package/lib/session-cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cipher.js","sourceRoot":"","sources":["../src/session-cipher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAClC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,KAAK,SAAS,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGhD,MAAM,OAAO,GAAG,CAAC,CAAA;AACjB,MAAM,gCAAgC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACjE,MAAM,kBAAkB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAEpC,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,mCAAoC,KAA2B,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IACvG,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,OAAO,aAAa;IAKxB,YACE,OAAsB,EACtB,eAAgC,EAChC,uBAA2C,gCAAgC;QAE3E,IAAI,CAAC,CAAC,eAAe,YAAY,eAAe,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAA;QAClE,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAA;IAClD,CAAC;IAEO,gBAAgB,CAAC,OAAe,EAAE,OAAe;QACvD,IAAI,OAAO,GAAG,EAAE,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;YACjC,MAAM,SAAS,CAAC,gCAAgC,CAAC,CAAA;QACnD,CAAC;QAED,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,OAAO,CAAA;IACjC,CAAC;IAEO,gBAAgB,CAAC,IAAY;QACnC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,CAAA;IAChC,CAAC;IAED,QAAQ;QACN,OAAO,kBAAkB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;QACnE,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,YAAY,aAAa,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAA;QACrE,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAqB;QACrC,MAAM,CAAC,iBAAiB,EAAE,CAAA;QAC1B,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QACvD,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,SAA2B;QAC3C,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAA;IACxD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAgB;QAC5B,YAAY,CAAC,IAAI,CAAC,CAAA;QAClB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAE1D,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAA;YAC9C,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,CAAA;YACvC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAA;YAClD,CAAC;YAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAA;YAC7D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAChG,MAAM,IAAI,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAA;YAC7E,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;YAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,oCAAoC,CAAC,CAAA;YACrE,CAAC;YAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;gBAC5C,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,uCAAuC,CAAC,CAAA;YACxE,CAAC;YAED,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAC/B,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAE,EAC1C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAChB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAClC,CAAA;YACD,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;YACrD,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAEhD,MAAM,GAAG,GAAG,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,CAAA;YAC7C,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAA;YACjE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAA;YACpC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,eAAe,CAAA;YAC5D,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAEtE,MAAM,MAAM,GAAG,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAA;YAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;YAC7D,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YACnC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;YACrD,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC1D,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;YAEhC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,QAAQ,CAAC,CAAA;YACnD,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAA;YAClD,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YACnD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAA;YAElD,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YAE9B,IAAI,IAAY,CAAA;YAChB,IAAI,IAAY,CAAA;YAEhB,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,IAAI,GAAG,CAAC,CAAA;gBACR,MAAM,SAAS,GAAG,SAAS,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBACtD,WAAW,EAAE,cAAc,CAAC,MAAM;oBAClC,cAAc,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE;oBACzD,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,OAAO;oBACtC,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC,WAAW;oBACjD,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAA;gBAEF,IAAI,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;oBACnC,SAAS,CAAC,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAA;gBACrD,CAAC;gBAED,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;oBACtD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;iBACvE,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,CAAC,CAAA;gBACR,IAAI,GAAG,MAAM,CAAA;YACf,CAAC;YAED,OAAO;gBACL,IAAI;gBACJ,IAAI;gBACJ,cAAc,EAAE,OAAO,CAAC,cAAc;aACvC,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,IAAgB,EAChB,QAAwB;QAExB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAA;QACxD,CAAC;QAED,MAAM,IAAI,GAAc,EAAE,CAAA;QAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,SAAiB,CAAA;YACrB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;gBAC7D,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACnC,OAAO;oBACL,OAAO;oBACP,SAAS;iBACV,CAAA;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACd,CAAC;QACH,CAAC;QAED,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,wCAAwC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1G,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAgB;QAC1C,YAAY,CAAC,IAAI,CAAC,CAAA;QAClB,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;YACzE,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAA;YACpE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBAClG,MAAM,IAAI,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAA;YAC7E,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC5C,CAAC;YAED,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YAC9B,OAAO,MAAM,CAAC,SAAS,CAAA;QACzB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,IAAgB;QAChD,YAAY,CAAC,IAAI,CAAC,CAAA;QAClB,IAAI,IAAI,CAAC,UAAU,GAAG,kBAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAA;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAA;QAChD,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YACpC,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;YACnC,MAAM,WAAW,GAAG,SAAS,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAExE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,WAAW,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;oBACvC,MAAM,IAAI,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;gBACnD,CAAC;gBAED,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA;YAC9B,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAC3D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE;gBAClD,cAAc,EAAE,WAAW,CAAC,cAAc;gBAC1C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;gBACjD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBACzC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,cAAc,EAAE,WAAW,CAAC,cAAc;gBAC1C,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;aAC1C,CAAC,CAAA;YAEF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,0DAA0D,CAAC,CAAA;YAC3F,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;YAC/F,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YAE9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;YAC3C,CAAC;YAED,OAAO,SAAS,CAAA;QAClB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,aAAyB,EAAE,OAAqB;QAC5E,YAAY,CAAC,aAAa,CAAC,CAAA;QAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,kBAAkB,CAAC,CAAA;QACzC,CAAC;QAED,IAAI,aAAa,CAAC,UAAU,GAAG,kBAAkB,EAAE,CAAC;YAClD,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAA;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,CAAA;QACzD,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAClE,CAAC;QAED,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAE7D,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;QAE1F,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,0CAA0C,CAAC,CAAA;QAC3E,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1C,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,qCAAqC,CAAC,CAAA;QACtE,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QAE5C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,MAAM,CAAC,mBAAmB,CAAC,kCAAkC,CAAC,CAAA;QAC1E,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAE,CAAA;QACtD,OAAO,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAEzC,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAA;QAClG,UAAU,CAAC,UAAU,CAAC,CAAA;QACtB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;QAE1D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACnE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QACjD,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACvC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC1D,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAEtC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAEhE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAClG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACtC,OAAO,OAAO,CAAC,aAAa,CAAA;QAE5B,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,eAAe,CAAC,KAAY,EAAE,OAAe;QAC3C,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;YACxC,IAAI,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;gBAC5C,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,qCAAqC,CAAC,CAAA;YACtE,CAAC;YAED,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;YAC/C,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAA;YAC9B,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1F,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/D,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,OAAqB,EAAE,SAAiB,EAAE,eAAuB;QAChF,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAA;QACtC,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;QACxE,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,eAAe,CAAC,CAAA;YACtD,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;YACxC,OAAO,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAA;QACrC,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAEhD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QACrE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,eAAe,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAA;YACtD,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QACtD,CAAC;QAED,OAAO,CAAC,gBAAgB,GAAG,KAAK,CAAC,eAAe,EAAE,CAAA;QAClD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;QAC/C,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAA;IAC5C,CAAC;IAED,gBAAgB,CAAC,OAAqB,EAAE,SAAiB,EAAE,OAAgB;QACzE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAA;QACtC,MAAM,YAAY,GAAG,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC1F,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAA;QACvG,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QAEtE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE;YACzB,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE;gBACR,OAAO,EAAE,CAAC,CAAC;gBACX,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;aAClB;YACD,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS;SAC7D,CAAC,CAAA;QAEF,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,CAAE,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,KAAK,CAAA;YACd,CAAC;YAED,OAAO,MAAM,CAAC,eAAe,EAAE,CAAA;QACjC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;YACrC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE,CAAA;gBAC3C,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;oBAChC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;gBAChC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}