@peac/net-node 0.12.6

package/dist/codes.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Error codes for @peac/net-node
+ *
+ * Single source of truth for all error codes used in this package.
+ * Both index.ts (public API) and impl.ts (internal) import from here.
+ *
+ * STABILITY: These identifiers are part of the public API surface.
+ * Consumers may log, alert, or persist these codes. Changes to code
+ * values are breaking changes and require a major version bump.
+ *
+ * @module @peac/net-node
+ */
+/**
+ * All error codes for safeFetch operations
+ *
+ * These codes are designed for audit-clean logging:
+ * - Each failure mode has a distinct code
+ * - Codes follow E_NET_* namespace
+ * - Reason suffix indicates specific cause for mixed scenarios
+ */
+export declare const SAFE_FETCH_ERROR_CODES: {
+    readonly E_SSRF_URL_REJECTED: "E_NET_SSRF_URL_REJECTED";
+    readonly E_SSRF_DNS_RESOLVED_PRIVATE: "E_NET_SSRF_DNS_RESOLVED_PRIVATE";
+    readonly E_SSRF_ALL_IPS_BLOCKED: "E_NET_SSRF_ALL_IPS_BLOCKED";
+    readonly E_SSRF_REDIRECT_BLOCKED: "E_NET_SSRF_REDIRECT_BLOCKED";
+    readonly E_SSRF_TOO_MANY_REDIRECTS: "E_NET_SSRF_TOO_MANY_REDIRECTS";
+    readonly E_SSRF_ALLOWCIDRS_ACK_REQUIRED: "E_NET_SSRF_ALLOWCIDRS_ACK_REQUIRED";
+    readonly E_SSRF_IPV6_ZONE_ID: "E_NET_SSRF_IPV6_ZONE_ID";
+    readonly E_SSRF_INVALID_HOST: "E_NET_SSRF_INVALID_HOST";
+    readonly E_SSRF_MIXED_DNS_BLOCKED: "E_NET_SSRF_MIXED_DNS_BLOCKED";
+    readonly E_SSRF_MIXED_DNS_ACK_MISSING: "E_NET_SSRF_MIXED_DNS_ACK_MISSING";
+    readonly E_SSRF_DANGEROUS_PORT: "E_NET_SSRF_DANGEROUS_PORT";
+    readonly E_SSRF_DANGEROUS_PORT_ACK_MISSING: "E_NET_SSRF_DANGEROUS_PORT_ACK_MISSING";
+    readonly E_TENANT_KEY_MISSING: "E_NET_TENANT_KEY_MISSING";
+    readonly E_DNS_RESOLUTION_FAILED: "E_NET_DNS_RESOLUTION_FAILED";
+    readonly E_REQUEST_TIMEOUT: "E_NET_REQUEST_TIMEOUT";
+    readonly E_DNS_TIMEOUT: "E_NET_DNS_TIMEOUT";
+    readonly E_CONNECT_TIMEOUT: "E_NET_CONNECT_TIMEOUT";
+    readonly E_HEADERS_TIMEOUT: "E_NET_HEADERS_TIMEOUT";
+    readonly E_BODY_TIMEOUT: "E_NET_BODY_TIMEOUT";
+    readonly E_NETWORK_ERROR: "E_NET_NETWORK_ERROR";
+    readonly E_METHOD_NOT_ALLOWED: "E_NET_METHOD_NOT_ALLOWED";
+    readonly E_RESPONSE_TOO_LARGE: "E_NET_RESPONSE_TOO_LARGE";
+    readonly E_PARSE_ERROR: "E_NET_PARSE_ERROR";
+};
+export type SafeFetchErrorCode = (typeof SAFE_FETCH_ERROR_CODES)[keyof typeof SAFE_FETCH_ERROR_CODES];
+//# sourceMappingURL=codes.d.ts.map

package/dist/codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codes.d.ts","sourceRoot":"","sources":["../src/codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;CA+BzB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/codes.js

@@ -0,0 +1,53 @@
+/**
+ * Error codes for @peac/net-node
+ *
+ * Single source of truth for all error codes used in this package.
+ * Both index.ts (public API) and impl.ts (internal) import from here.
+ *
+ * STABILITY: These identifiers are part of the public API surface.
+ * Consumers may log, alert, or persist these codes. Changes to code
+ * values are breaking changes and require a major version bump.
+ *
+ * @module @peac/net-node
+ */
+/**
+ * All error codes for safeFetch operations
+ *
+ * These codes are designed for audit-clean logging:
+ * - Each failure mode has a distinct code
+ * - Codes follow E_NET_* namespace
+ * - Reason suffix indicates specific cause for mixed scenarios
+ */
+export const SAFE_FETCH_ERROR_CODES = {
+    // SSRF errors
+    E_SSRF_URL_REJECTED: 'E_NET_SSRF_URL_REJECTED',
+    E_SSRF_DNS_RESOLVED_PRIVATE: 'E_NET_SSRF_DNS_RESOLVED_PRIVATE',
+    E_SSRF_ALL_IPS_BLOCKED: 'E_NET_SSRF_ALL_IPS_BLOCKED',
+    E_SSRF_REDIRECT_BLOCKED: 'E_NET_SSRF_REDIRECT_BLOCKED',
+    E_SSRF_TOO_MANY_REDIRECTS: 'E_NET_SSRF_TOO_MANY_REDIRECTS',
+    E_SSRF_ALLOWCIDRS_ACK_REQUIRED: 'E_NET_SSRF_ALLOWCIDRS_ACK_REQUIRED',
+    E_SSRF_IPV6_ZONE_ID: 'E_NET_SSRF_IPV6_ZONE_ID',
+    E_SSRF_INVALID_HOST: 'E_NET_SSRF_INVALID_HOST',
+    // P0.2: Mixed DNS audit-clean reason codes
+    E_SSRF_MIXED_DNS_BLOCKED: 'E_NET_SSRF_MIXED_DNS_BLOCKED',
+    E_SSRF_MIXED_DNS_ACK_MISSING: 'E_NET_SSRF_MIXED_DNS_ACK_MISSING',
+    // Port security
+    E_SSRF_DANGEROUS_PORT: 'E_NET_SSRF_DANGEROUS_PORT',
+    E_SSRF_DANGEROUS_PORT_ACK_MISSING: 'E_NET_SSRF_DANGEROUS_PORT_ACK_MISSING',
+    // Evidence configuration
+    E_TENANT_KEY_MISSING: 'E_NET_TENANT_KEY_MISSING',
+    // Network errors
+    E_DNS_RESOLUTION_FAILED: 'E_NET_DNS_RESOLUTION_FAILED',
+    E_REQUEST_TIMEOUT: 'E_NET_REQUEST_TIMEOUT',
+    // P1.3: Phase-specific timeout codes for audit trail
+    E_DNS_TIMEOUT: 'E_NET_DNS_TIMEOUT',
+    E_CONNECT_TIMEOUT: 'E_NET_CONNECT_TIMEOUT',
+    E_HEADERS_TIMEOUT: 'E_NET_HEADERS_TIMEOUT',
+    E_BODY_TIMEOUT: 'E_NET_BODY_TIMEOUT',
+    E_NETWORK_ERROR: 'E_NET_NETWORK_ERROR',
+    // Method/size errors
+    E_METHOD_NOT_ALLOWED: 'E_NET_METHOD_NOT_ALLOWED',
+    E_RESPONSE_TOO_LARGE: 'E_NET_RESPONSE_TOO_LARGE',
+    E_PARSE_ERROR: 'E_NET_PARSE_ERROR',
+};
+//# sourceMappingURL=codes.js.map

package/dist/codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codes.js","sourceRoot":"","sources":["../src/codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,cAAc;IACd,mBAAmB,EAAE,yBAAyB;IAC9C,2BAA2B,EAAE,iCAAiC;IAC9D,sBAAsB,EAAE,4BAA4B;IACpD,uBAAuB,EAAE,6BAA6B;IACtD,yBAAyB,EAAE,+BAA+B;IAC1D,8BAA8B,EAAE,oCAAoC;IACpE,mBAAmB,EAAE,yBAAyB;IAC9C,mBAAmB,EAAE,yBAAyB;IAC9C,2CAA2C;IAC3C,wBAAwB,EAAE,8BAA8B;IACxD,4BAA4B,EAAE,kCAAkC;IAChE,gBAAgB;IAChB,qBAAqB,EAAE,2BAA2B;IAClD,iCAAiC,EAAE,uCAAuC;IAC1E,yBAAyB;IACzB,oBAAoB,EAAE,0BAA0B;IAChD,iBAAiB;IACjB,uBAAuB,EAAE,6BAA6B;IACtD,iBAAiB,EAAE,uBAAuB;IAC1C,qDAAqD;IACrD,aAAa,EAAE,mBAAmB;IAClC,iBAAiB,EAAE,uBAAuB;IAC1C,iBAAiB,EAAE,uBAAuB;IAC1C,cAAc,EAAE,oBAAoB;IACpC,eAAe,EAAE,qBAAqB;IACtC,qBAAqB;IACrB,oBAAoB,EAAE,0BAA0B;IAChD,oBAAoB,EAAE,0BAA0B;IAChD,aAAa,EAAE,mBAAmB;CAC1B,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Constants for @peac/net-node
+ *
+ * Single source of truth for schema versions and configuration constants.
+ * Both index.ts (public API) and impl.ts (internal) import from here.
+ *
+ * STABILITY: Schema version strings are part of the public API surface.
+ * Evidence producers persist these in receipts. Changes to version
+ * strings indicate wire format changes and follow semver semantics.
+ *
+ * @module @peac/net-node
+ */
+/**
+ * Event schema version for forward compatibility
+ *
+ * Events are emitted during fetch lifecycle for audit logging.
+ * Increment minor for additive changes, major for breaking changes.
+ * @since v0.10.x
+ */
+export declare const SAFE_FETCH_EVENT_SCHEMA_VERSION: "peac-safe-fetch-event/0.1";
+/**
+ * Evidence schema version for forward compatibility
+ *
+ * Evidence is the portable, signed-ready artifact returned by safeFetch.
+ * This is separate from event schema because evidence and events serve
+ * different purposes and may evolve independently.
+ *
+ * Increment minor for additive changes, major for breaking changes.
+ * @since v0.10.x
+ */
+export declare const SAFE_FETCH_EVIDENCE_SCHEMA_VERSION: "peac-safe-fetch-evidence/0.1";
+/**
+ * P1.4: Bounded audit queue configuration
+ *
+ * Maximum number of pending audit events before new events are dropped.
+ * This prevents microtask blowup if events are generated faster than processed.
+ */
+export declare const MAX_PENDING_AUDIT_EVENTS: 1000;
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,EAAG,2BAAoC,CAAC;AAEpF;;;;;;;;;GASG;AACH,eAAO,MAAM,kCAAkC,EAAG,8BAAuC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAG,IAAa,CAAC"}

package/dist/constants.js

@@ -0,0 +1,39 @@
+/**
+ * Constants for @peac/net-node
+ *
+ * Single source of truth for schema versions and configuration constants.
+ * Both index.ts (public API) and impl.ts (internal) import from here.
+ *
+ * STABILITY: Schema version strings are part of the public API surface.
+ * Evidence producers persist these in receipts. Changes to version
+ * strings indicate wire format changes and follow semver semantics.
+ *
+ * @module @peac/net-node
+ */
+/**
+ * Event schema version for forward compatibility
+ *
+ * Events are emitted during fetch lifecycle for audit logging.
+ * Increment minor for additive changes, major for breaking changes.
+ * @since v0.10.x
+ */
+export const SAFE_FETCH_EVENT_SCHEMA_VERSION = 'peac-safe-fetch-event/0.1';
+/**
+ * Evidence schema version for forward compatibility
+ *
+ * Evidence is the portable, signed-ready artifact returned by safeFetch.
+ * This is separate from event schema because evidence and events serve
+ * different purposes and may evolve independently.
+ *
+ * Increment minor for additive changes, major for breaking changes.
+ * @since v0.10.x
+ */
+export const SAFE_FETCH_EVIDENCE_SCHEMA_VERSION = 'peac-safe-fetch-evidence/0.1';
+/**
+ * P1.4: Bounded audit queue configuration
+ *
+ * Maximum number of pending audit events before new events are dropped.
+ * This prevents microtask blowup if events are generated faster than processed.
+ */
+export const MAX_PENDING_AUDIT_EVENTS = 1000;
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,2BAAoC,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,8BAAuC,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAa,CAAC"}

package/dist/evidence-utils.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Evidence Utilities for @peac/net-node
+ *
+ * This module contains shared utilities used by both the main entry (index.ts)
+ * and internal modules (internal.ts). Breaking these out prevents circular
+ * dependencies and makes the module graph simpler.
+ *
+ * @internal
+ * @module @peac/net-node/evidence-utils
+ */
+import { MAX_PENDING_AUDIT_EVENTS } from './constants.js';
+export { MAX_PENDING_AUDIT_EVENTS };
+/**
+ * Canonicalize a value according to RFC 8785 (JSON Canonicalization Scheme)
+ *
+ * Key ordering is lexicographic by Unicode code point (UTF-16 code units).
+ * This matches JavaScript's default string comparison.
+ *
+ * IMPORTANT: This function produces deterministic output suitable for
+ * cryptographic hashing. The output is cross-platform consistent.
+ *
+ * @param value - Any JSON-serializable value
+ * @returns Canonical JSON string
+ */
+export declare function jcsCanonicalizeValue(value: unknown): string;
+/**
+ * Canonicalize evidence object using RFC 8785 JCS
+ *
+ * This is the first step in computing an evidence digest.
+ * The output is a deterministic JSON string.
+ *
+ * @param evidence - Evidence object (SafeFetchEvidence or SafeFetchEvidenceCore)
+ * @returns Canonical JSON string
+ */
+export declare function canonicalizeEvidence(evidence: Record<string, unknown>): string;
+/**
+ * Compute SHA-256 digest of evidence using JCS canonicalization
+ *
+ * Returns a 0x-prefixed lowercase hex string, consistent with other
+ * PEAC cryptographic identifiers (EAS anchors, IP hashes).
+ *
+ * Self-omission rule: If the evidence includes digest fields, they are
+ * stripped before computing the digest to avoid circularity.
+ *
+ * @param evidence - Evidence object with optional digest fields
+ * @returns 0x-prefixed SHA-256 hex digest
+ */
+export declare function computeEvidenceDigest(evidence: Record<string, unknown>): string;
+//# sourceMappingURL=evidence-utils.d.ts.map

package/dist/evidence-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-utils.d.ts","sourceRoot":"","sources":["../src/evidence-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAkBpC;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA4B3D;AAMD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAE9E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAM/E"}

package/dist/evidence-utils.js

@@ -0,0 +1,109 @@
+/**
+ * Evidence Utilities for @peac/net-node
+ *
+ * This module contains shared utilities used by both the main entry (index.ts)
+ * and internal modules (internal.ts). Breaking these out prevents circular
+ * dependencies and makes the module graph simpler.
+ *
+ * @internal
+ * @module @peac/net-node/evidence-utils
+ */
+import { createHash } from 'crypto';
+// Import constants from single source of truth
+import { MAX_PENDING_AUDIT_EVENTS } from './constants.js';
+// Re-export for backwards compatibility
+export { MAX_PENDING_AUDIT_EVENTS };
+// -----------------------------------------------------------------------------
+// JCS Canonicalization (RFC 8785)
+// -----------------------------------------------------------------------------
+/**
+ * Check if a value is a plain object (prototype is Object.prototype or null)
+ *
+ * This excludes Date, RegExp, Map, Set, and other non-JSON-serializable objects.
+ * @internal
+ */
+function isPlainObject(value) {
+    if (value === null || typeof value !== 'object')
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+/**
+ * Canonicalize a value according to RFC 8785 (JSON Canonicalization Scheme)
+ *
+ * Key ordering is lexicographic by Unicode code point (UTF-16 code units).
+ * This matches JavaScript's default string comparison.
+ *
+ * IMPORTANT: This function produces deterministic output suitable for
+ * cryptographic hashing. The output is cross-platform consistent.
+ *
+ * @param value - Any JSON-serializable value
+ * @returns Canonical JSON string
+ */
+export function jcsCanonicalizeValue(value) {
+    if (value === null)
+        return 'null';
+    if (typeof value === 'boolean')
+        return value ? 'true' : 'false';
+    if (typeof value === 'number') {
+        // Handle special cases per ES2015 spec
+        if (Object.is(value, -0))
+            return '0';
+        if (!Number.isFinite(value)) {
+            throw new Error('JCS does not support Infinity or NaN');
+        }
+        return String(value);
+    }
+    if (typeof value === 'string') {
+        // Use JSON.stringify for proper escaping
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        const elements = value.map(jcsCanonicalizeValue);
+        return '[' + elements.join(',') + ']';
+    }
+    if (isPlainObject(value)) {
+        // Sort keys lexicographically (Unicode code point order)
+        const keys = Object.keys(value).sort();
+        const pairs = keys
+            .filter((k) => value[k] !== undefined)
+            .map((k) => JSON.stringify(k) + ':' + jcsCanonicalizeValue(value[k]));
+        return '{' + pairs.join(',') + '}';
+    }
+    throw new Error(`Cannot canonicalize value of type ${typeof value}`);
+}
+// -----------------------------------------------------------------------------
+// Evidence Canonicalization and Digest
+// -----------------------------------------------------------------------------
+/**
+ * Canonicalize evidence object using RFC 8785 JCS
+ *
+ * This is the first step in computing an evidence digest.
+ * The output is a deterministic JSON string.
+ *
+ * @param evidence - Evidence object (SafeFetchEvidence or SafeFetchEvidenceCore)
+ * @returns Canonical JSON string
+ */
+export function canonicalizeEvidence(evidence) {
+    return jcsCanonicalizeValue(evidence);
+}
+/**
+ * Compute SHA-256 digest of evidence using JCS canonicalization
+ *
+ * Returns a 0x-prefixed lowercase hex string, consistent with other
+ * PEAC cryptographic identifiers (EAS anchors, IP hashes).
+ *
+ * Self-omission rule: If the evidence includes digest fields, they are
+ * stripped before computing the digest to avoid circularity.
+ *
+ * @param evidence - Evidence object with optional digest fields
+ * @returns 0x-prefixed SHA-256 hex digest
+ */
+export function computeEvidenceDigest(evidence) {
+    // Strip digest fields if present (self-omission rule)
+    const { evidence_digest, evidence_alg, canonicalization, ...core } = evidence;
+    const canonical = canonicalizeEvidence(core);
+    const hash = createHash('sha256').update(canonical, 'utf8').digest('hex');
+    return `0x${hash}`;
+}
+//# sourceMappingURL=evidence-utils.js.map

package/dist/evidence-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-utils.js","sourceRoot":"","sources":["../src/evidence-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,+CAA+C;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wCAAwC;AACxC,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAEpC,gFAAgF;AAChF,kCAAkC;AAClC,gFAAgF;AAEhF;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,uCAAuC;QACvC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,yCAAyC;QACzC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACjD,OAAO,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACxC,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,yDAAyD;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI;aACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,KAAK,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,gFAAgF;AAChF,uCAAuC;AACvC,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAiC;IACpE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAiC;IACrE,sDAAsD;IACtD,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IAC9E,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC"}