@project-chip/matter.js 0.2.1 → 0.4.0

package/dist/cjs/session/SessionManager.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionManager = exports.UNICAST_UNSECURE_SESSION_ID = exports.UNDEFINED_NODE_ID = void 0;
+const Crypto_js_1 = require("../crypto/Crypto.js");
+const NodeId_js_1 = require("../datatype/NodeId.js");
+const SecureSession_js_1 = require("./SecureSession.js");
+const UnsecureSession_js_1 = require("./UnsecureSession.js");
+exports.UNDEFINED_NODE_ID = new NodeId_js_1.NodeId(BigInt(0));
+exports.UNICAST_UNSECURE_SESSION_ID = 0x0000;
+class SessionManager {
+    constructor(context, storageManager) {
+        this.context = context;
+        this.sessions = new Map();
+        this.nextSessionId = Crypto_js_1.Crypto.getRandomUInt16();
+        this.resumptionRecords = new Map();
+        this.sessionStorage = storageManager.createContext("SessionManager");
+        this.unsecureSession = new UnsecureSession_js_1.UnsecureSession(context);
+        this.sessions.set(exports.UNICAST_UNSECURE_SESSION_ID, this.unsecureSession);
+    }
+    createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, salt, isInitiator, isResumption, idleRetransTimeoutMs, activeRetransTimeoutMs) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const session = yield SecureSession_js_1.SecureSession.create(this.context, sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, salt, isInitiator, isResumption, () => this.removeSession(sessionId, peerNodeId), idleRetransTimeoutMs, activeRetransTimeoutMs);
+            this.sessions.set(sessionId, session);
+            // TODO: close previous secure channel for
+            return session;
+        });
+    }
+    removeSession(sessionId, peerNodeId) {
+        this.sessions.delete(sessionId);
+        this.resumptionRecords.delete(peerNodeId.id);
+        this.storeResumptionRecords();
+    }
+    getNextAvailableSessionId() {
+        while (true) {
+            if (this.sessions.has(this.nextSessionId)) {
+                this.nextSessionId = (this.nextSessionId + 1) & 0xFFFF;
+                if (this.nextSessionId === 0)
+                    this.nextSessionId++;
+                continue;
+            }
+            return this.nextSessionId++;
+        }
+    }
+    getSession(sessionId) {
+        return this.sessions.get(sessionId);
+    }
+    getSessionForNode(fabric, nodeId) {
+        //TODO: It can have multiple sessions for one node ...
+        return [...this.sessions.values()].find(session => {
+            var _a;
+            if (!session.isSecure())
+                return false;
+            const secureSession = session;
+            return ((_a = secureSession.getFabric()) === null || _a === void 0 ? void 0 : _a.fabricId.id) === fabric.fabricId.id && secureSession.getPeerNodeId().id === nodeId.id;
+        });
+    }
+    getUnsecureSession() {
+        return this.unsecureSession;
+    }
+    findResumptionRecordById(resumptionId) {
+        return [...this.resumptionRecords.values()].find(record => record.resumptionId.equals(resumptionId));
+    }
+    findResumptionRecordByNodeId(nodeId) {
+        return this.resumptionRecords.get(nodeId.id);
+    }
+    saveResumptionRecord(resumptionRecord) {
+        this.resumptionRecords.set(resumptionRecord.peerNodeId.id, resumptionRecord);
+        this.storeResumptionRecords();
+    }
+    storeResumptionRecords() {
+        this.sessionStorage.set("resumptionRecords", [...this.resumptionRecords].map(([nodeId, { sharedSecret, resumptionId, peerNodeId, fabric }]) => ({
+            nodeId,
+            sharedSecret,
+            resumptionId,
+            fabricId: fabric.fabricId.id,
+            peerNodeId: peerNodeId.id,
+        })));
+    }
+    initFromStorage(fabrics) {
+        const storedResumptionRecords = this.sessionStorage.get("resumptionRecords", []);
+        storedResumptionRecords.forEach(({ nodeId, sharedSecret, resumptionId, fabricId, peerNodeId }) => {
+            console.log("restoring resumption record for node", nodeId);
+            const fabric = fabrics.find(fabric => fabric.fabricId.id === fabricId);
+            if (!fabric) {
+                console.log("fabric not found for resumption record", fabricId);
+                return;
+            }
+            this.resumptionRecords.set(nodeId, {
+                sharedSecret,
+                resumptionId,
+                fabric,
+                peerNodeId: new NodeId_js_1.NodeId(peerNodeId),
+            });
+        });
+    }
+}
+exports.SessionManager = SessionManager;
+//# sourceMappingURL=SessionManager.js.map

package/dist/cjs/session/SessionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionManager.js","sourceRoot":"","sources":["../../../src/session/SessionManager.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;AAEH,mDAA6C;AAC7C,qDAA+C;AAK/C,yDAAmD;AAEnD,6DAAuD;AAE1C,QAAA,iBAAiB,GAAG,IAAI,kBAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1C,QAAA,2BAA2B,GAAG,MAAM,CAAC;AAiBlD,MAAa,cAAc;IAOvB,YACqB,OAAiB,EAClC,cAA8B;QADb,YAAO,GAAP,OAAO,CAAU;QANrB,aAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;QACzD,kBAAa,GAAG,kBAAM,CAAC,eAAe,EAAE,CAAC;QACzC,sBAAiB,GAAG,IAAI,GAAG,EAA4B,CAAC;QAO5D,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAA;QACpE,IAAI,CAAC,eAAe,GAAG,IAAI,oCAAe,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,mCAA2B,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACzE,CAAC;IAEK,mBAAmB,CAAC,SAAiB,EAAE,MAA0B,EAAE,UAAkB,EAAE,aAAqB,EAAE,YAAuB,EAAE,IAAe,EAAE,WAAoB,EAAE,YAAqB,EAAE,oBAA6B,EAAE,sBAA+B;;YACrQ,MAAM,OAAO,GAAG,MAAM,gCAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;YACrP,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAEtC,0CAA0C;YAC1C,OAAO,OAAO,CAAC;QACnB,CAAC;KAAA;IAED,aAAa,CAAC,SAAiB,EAAE,UAAkB;QAC/C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAClC,CAAC;IAED,yBAAyB;QACrB,OAAO,IAAI,EAAE;YACT,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;gBACvC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;gBACvD,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;oBAAE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnD,SAAS;aACZ;YACD,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;SAC/B;IACL,CAAC;IAED,UAAU,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,iBAAiB,CAAC,MAAc,EAAE,MAAc;QAC5C,sDAAsD;QACtD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;;YAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBAAE,OAAO,KAAK,CAAC;YACtC,MAAM,aAAa,GAAG,OAA6B,CAAC;YACpD,OAAO,CAAA,MAAA,aAAa,CAAC,SAAS,EAAE,0CAAE,QAAQ,CAAC,EAAE,MAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,aAAa,CAAC,aAAa,EAAE,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;QAC3H,CAAC,CAAC,CAAC;IACP,CAAC;IAED,kBAAkB;QACd,OAAO,IAAI,CAAC,eAAe,CAAC;IAChC,CAAC;IAED,wBAAwB,CAAC,YAAuB;QAC5C,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IACzG,CAAC;IAED,4BAA4B,CAAC,MAAc;QACvC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,oBAAoB,CAAC,gBAAkC;QACnD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC7E,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAClC,CAAC;IAED,sBAAsB;QAClB,IAAI,CAAC,cAAc,CAAC,GAAG,CAA4B,mBAAmB,EAAE,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACvK,MAAM;YACN,YAAY;YACZ,YAAY;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;YAC5B,UAAU,EAAE,UAAU,CAAC,EAAE;SAC5B,CAAC,CAAC,CAAC,CAAC;IACT,CAAC;IAED,eAAe,CAAC,OAAiB;QAC7B,MAAM,uBAAuB,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAA4B,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAE5G,uBAAuB,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC7F,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,EAAE;gBACT,OAAO,CAAC,GAAG,CAAC,wCAAwC,EAAE,QAAQ,CAAC,CAAC;gBAChE,OAAO;aACV;YACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE;gBAC/B,YAAY;gBACZ,YAAY;gBACZ,MAAM;gBACN,UAAU,EAAE,IAAI,kBAAM,CAAC,UAAU,CAAC;aACrC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AAnGD,wCAmGC"}

package/dist/cjs/session/UnsecureSession.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Packet, Message } from "../codec/MessageCodec.js";
+import { Fabric } from "../fabric/Fabric.js";
+import { Session } from "./Session.js";
+import { ByteArray } from "../util/ByteArray.js";
+import { NodeId } from "../datatype/NodeId.js";
+export declare class UnsecureSession<T> implements Session<T> {
+    private readonly context;
+    private readonly initiatorNodeId;
+    constructor(context: T);
+    isSecure(): boolean;
+    notifyActivity(_messageReceived: boolean): void;
+    isPeerActive(): boolean;
+    decode(packet: Packet): Message;
+    encode(message: Message): Packet;
+    getAttestationChallengeKey(): ByteArray;
+    setFabric(_fabric: Fabric): void;
+    getName(): string;
+    getMrpParameters(): {
+        idleRetransmissionTimeoutMs: number;
+        activeRetransmissionTimeoutMs: number;
+        retransmissionRetries: number;
+    };
+    getContext(): T;
+    getId(): number;
+    getPeerSessionId(): number;
+    getNodeId(): NodeId;
+    getPeerNodeId(): undefined;
+    destroy(): void;
+}
+//# sourceMappingURL=UnsecureSession.d.ts.map

package/dist/cjs/session/UnsecureSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnsecureSession.d.ts","sourceRoot":"","sources":["../../../src/session/UnsecureSession.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAgB,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAoH,OAAO,EAAE,MAAM,cAAc,CAAC;AAEzJ,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,qBAAa,eAAe,CAAC,CAAC,CAAE,YAAW,OAAO,CAAC,CAAC,CAAC;IAI7C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH5B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuC;gBAGlD,OAAO,EAAE,CAAC;IAG/B,QAAQ,IAAI,OAAO;IAInB,cAAc,CAAC,gBAAgB,EAAE,OAAO;IAIxC,YAAY,IAAI,OAAO;IAIvB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAI/B,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM;IAIhC,0BAA0B,IAAI,SAAS;IAIvC,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIhC,OAAO;IAIP,gBAAgB;;;;;IAQhB,UAAU;IAIV,KAAK,IAAI,MAAM;IAIf,gBAAgB,IAAI,MAAM;IAI1B,SAAS;IAIT,aAAa;IAIb,OAAO;CAGV"}

package/dist/cjs/session/UnsecureSession.js

@@ -0,0 +1,69 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnsecureSession = void 0;
+const MessageCodec_js_1 = require("../codec/MessageCodec.js");
+const Session_js_1 = require("./Session.js");
+const SessionManager_js_1 = require("./SessionManager.js");
+const NodeId_js_1 = require("../datatype/NodeId.js");
+class UnsecureSession {
+    constructor(context) {
+        this.context = context;
+        this.initiatorNodeId = NodeId_js_1.NodeId.getRandomOperationalNodeId();
+    }
+    isSecure() {
+        return false;
+    }
+    notifyActivity(_messageReceived) {
+        // Do nothing
+    }
+    isPeerActive() {
+        return true;
+    }
+    decode(packet) {
+        return MessageCodec_js_1.MessageCodec.decodePayload(packet);
+    }
+    encode(message) {
+        return MessageCodec_js_1.MessageCodec.encodePayload(message);
+    }
+    getAttestationChallengeKey() {
+        throw new Error("Not supported on an unsecure session");
+    }
+    setFabric(_fabric) {
+        throw new Error("Not supported on an unsecure session");
+    }
+    getName() {
+        return "unsecure";
+    }
+    getMrpParameters() {
+        return {
+            idleRetransmissionTimeoutMs: Session_js_1.DEFAULT_IDLE_RETRANSMISSION_TIMEOUT_MS,
+            activeRetransmissionTimeoutMs: Session_js_1.DEFAULT_ACTIVE_RETRANSMISSION_TIMEOUT_MS,
+            retransmissionRetries: Session_js_1.DEFAULT_RETRANSMISSION_RETRIES,
+        };
+    }
+    getContext() {
+        return this.context;
+    }
+    getId() {
+        return SessionManager_js_1.UNICAST_UNSECURE_SESSION_ID;
+    }
+    getPeerSessionId() {
+        return SessionManager_js_1.UNICAST_UNSECURE_SESSION_ID;
+    }
+    getNodeId() {
+        return this.initiatorNodeId;
+    }
+    getPeerNodeId() {
+        return undefined;
+    }
+    destroy() {
+        throw new Error("The unsecure session should never be destroyed.");
+    }
+}
+exports.UnsecureSession = UnsecureSession;
+//# sourceMappingURL=UnsecureSession.js.map

package/dist/cjs/session/UnsecureSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnsecureSession.js","sourceRoot":"","sources":["../../../src/session/UnsecureSession.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,8DAAyE;AAEzE,6CAAyJ;AACzJ,2DAAkE;AAElE,qDAA+C;AAE/C,MAAa,eAAe;IAGxB,YACqB,OAAU;QAAV,YAAO,GAAP,OAAO,CAAG;QAHd,oBAAe,GAAG,kBAAM,CAAC,0BAA0B,EAAE,CAAC;IAInE,CAAC;IAEL,QAAQ;QACJ,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,cAAc,CAAC,gBAAyB;QACpC,aAAa;IACjB,CAAC;IAED,YAAY;QACR,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,MAAc;QACjB,OAAO,8BAAY,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,OAAgB;QACnB,OAAO,8BAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,0BAA0B;QACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5D,CAAC;IAED,SAAS,CAAC,OAAe;QACrB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO;QACH,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,gBAAgB;QACZ,OAAO;YACH,2BAA2B,EAAE,mDAAsC;YACnE,6BAA6B,EAAE,qDAAwC;YACvE,qBAAqB,EAAE,2CAA8B;SACxD,CAAA;IACL,CAAC;IAED,UAAU;QACN,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,KAAK;QACD,OAAO,+CAA2B,CAAC;IACvC,CAAC;IAED,gBAAgB;QACZ,OAAO,+CAA2B,CAAC;IACvC,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,eAAe,CAAC;IAChC,CAAC;IAED,aAAa;QACT,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO;QACH,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;CACJ;AAtED,0CAsEC"}

package/dist/cjs/session/case/CaseClient.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Fabric } from "../../fabric/Fabric.js";
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { MatterController } from "../../MatterController.js";
+import { NodeId } from "../../datatype/NodeId.js";
+export declare class CaseClient {
+    pair(client: MatterController, exchange: MessageExchange<MatterController>, fabric: Fabric, peerNodeId: NodeId): Promise<any>;
+}
+//# sourceMappingURL=CaseClient.d.ts.map

package/dist/cjs/session/case/CaseClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseClient.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAQ7D,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAIlD,qBAAa,UAAU;IACb,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;CA0EvH"}

package/dist/cjs/session/case/CaseClient.js

@@ -0,0 +1,98 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaseClient = void 0;
+const CertificateManager_js_1 = require("../../certificate/CertificateManager.js");
+const Crypto_js_1 = require("../../crypto/Crypto.js");
+const CaseMessages_js_1 = require("./CaseMessages.js");
+const CaseMessenger_js_1 = require("./CaseMessenger.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+const Logger_js_1 = require("../../log/Logger.js");
+const logger = Logger_js_1.Logger.get("CaseClient");
+class CaseClient {
+    pair(client, exchange, fabric, peerNodeId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const messenger = new CaseMessenger_js_1.CaseClientMessenger(exchange);
+            // Generate pairing info
+            const random = Crypto_js_1.Crypto.getRandom();
+            const sessionId = client.getNextAvailableSessionId();
+            const { operationalIdentityProtectionKey, operationalCert: nodeOpCert, intermediateCACert } = fabric;
+            const { publicKey: ecdhPublicKey, ecdh } = Crypto_js_1.Crypto.ecdhGeneratePublicKey();
+            // Send sigma1
+            let sigma1Bytes;
+            let resumptionRecord = client.findResumptionRecordByNodeId(peerNodeId);
+            if (resumptionRecord !== undefined) {
+                const { sharedSecret, resumptionId } = resumptionRecord;
+                const resumeKey = yield Crypto_js_1.Crypto.hkdf(sharedSecret, ByteArray_js_1.ByteArray.concat(random, resumptionId), CaseMessages_js_1.KDFSR1_KEY_INFO);
+                const resumeMic = Crypto_js_1.Crypto.encrypt(resumeKey, new ByteArray_js_1.ByteArray(0), CaseMessages_js_1.RESUME1_MIC_NONCE);
+                sigma1Bytes = yield messenger.sendSigma1({ sessionId, destinationId: fabric.getDestinationId(peerNodeId, random), ecdhPublicKey, random, resumptionId, resumeMic });
+            }
+            else {
+                sigma1Bytes = yield messenger.sendSigma1({ sessionId, destinationId: fabric.getDestinationId(peerNodeId, random), ecdhPublicKey, random });
+            }
+            let secureSession;
+            const { sigma2Bytes, sigma2, sigma2Resume } = yield messenger.readSigma2();
+            if (sigma2Resume !== undefined) {
+                // Process sigma2 resume
+                if (resumptionRecord === undefined)
+                    throw new Error("Received an unexpected sigma2Resume");
+                const { sharedSecret, fabric } = resumptionRecord;
+                const { sessionId: peerSessionId, resumptionId, resumeMic } = sigma2Resume;
+                const resumeSalt = ByteArray_js_1.ByteArray.concat(random, resumptionId);
+                const resumeKey = yield Crypto_js_1.Crypto.hkdf(sharedSecret, resumeSalt, CaseMessages_js_1.KDFSR2_KEY_INFO);
+                Crypto_js_1.Crypto.decrypt(resumeKey, resumeMic, CaseMessages_js_1.RESUME2_MIC_NONCE);
+                const secureSessionSalt = ByteArray_js_1.ByteArray.concat(random, resumptionRecord.resumptionId);
+                secureSession = yield client.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, true, true);
+                yield messenger.sendSuccess();
+                logger.info(`Case client: session resumed with ${messenger.getChannelName()}`);
+                resumptionRecord.resumptionId = resumptionId; /* update resumptionId */
+            }
+            else {
+                // Process sigma2
+                const { ecdhPublicKey: peerEcdhPublicKey, encrypted: peerEncrypted, random: peerRandom, sessionId: peerSessionId } = sigma2;
+                const sharedSecret = Crypto_js_1.Crypto.ecdhGenerateSecret(peerEcdhPublicKey, ecdh);
+                const sigma2Salt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, peerRandom, peerEcdhPublicKey, Crypto_js_1.Crypto.hash(sigma1Bytes));
+                const sigma2Key = yield Crypto_js_1.Crypto.hkdf(sharedSecret, sigma2Salt, CaseMessages_js_1.KDFSR2_INFO);
+                const peerEncryptedData = Crypto_js_1.Crypto.decrypt(sigma2Key, peerEncrypted, CaseMessages_js_1.TBE_DATA2_NONCE);
+                const { nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, signature: peerSignature, resumptionId: peerResumptionId } = CaseMessages_js_1.TlvEncryptedDataSigma2.decode(peerEncryptedData);
+                const peerSignatureData = CaseMessages_js_1.TlvSignedData.encode({ nodeOpCert: peerNewOpCert, intermediateCACert: peerIntermediateCACert, ecdhPublicKey: peerEcdhPublicKey, peerEcdhPublicKey: ecdhPublicKey });
+                const { ellipticCurvePublicKey: peerPublicKey, subject: { nodeId: peerNodeIdCert } } = CertificateManager_js_1.TlvOperationalCertificate.decode(peerNewOpCert);
+                if (peerNodeIdCert.id !== peerNodeId.id)
+                    throw new Error("The node ID in the peer certificate doesn't match the expected peer node ID");
+                Crypto_js_1.Crypto.verifySpki(peerPublicKey, peerSignatureData, peerSignature);
+                // Generate and send sigma3
+                const sigma3Salt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, Crypto_js_1.Crypto.hash([sigma1Bytes, sigma2Bytes]));
+                const sigma3Key = yield Crypto_js_1.Crypto.hkdf(sharedSecret, sigma3Salt, CaseMessages_js_1.KDFSR3_INFO);
+                const signatureData = CaseMessages_js_1.TlvSignedData.encode({ nodeOpCert, intermediateCACert, ecdhPublicKey, peerEcdhPublicKey });
+                const signature = fabric.sign(signatureData);
+                const encryptedData = CaseMessages_js_1.TlvEncryptedDataSigma3.encode({ nodeOpCert, intermediateCACert, signature });
+                const encrypted = Crypto_js_1.Crypto.encrypt(sigma3Key, encryptedData, CaseMessages_js_1.TBE_DATA3_NONCE);
+                const sigma3Bytes = yield messenger.sendSigma3({ encrypted });
+                yield messenger.waitForSuccess();
+                // All good! Create secure session
+                const secureSessionSalt = ByteArray_js_1.ByteArray.concat(operationalIdentityProtectionKey, Crypto_js_1.Crypto.hash([sigma1Bytes, sigma2Bytes, sigma3Bytes]));
+                secureSession = yield client.createSecureSession(sessionId, fabric, peerNodeId, peerSessionId, sharedSecret, secureSessionSalt, true, false);
+                logger.info(`Case client: Paired succesfully with ${messenger.getChannelName()}`);
+                resumptionRecord = { fabric, peerNodeId, sharedSecret, resumptionId: peerResumptionId };
+            }
+            messenger.close();
+            client.saveResumptionRecord(resumptionRecord);
+            return secureSession;
+        });
+    }
+}
+exports.CaseClient = CaseClient;
+//# sourceMappingURL=CaseClient.js.map

package/dist/cjs/session/case/CaseClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseClient.js","sourceRoot":"","sources":["../../../../src/session/case/CaseClient.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;AAEH,mFAAoF;AACpF,sDAAgD;AAIhD,uDAG2B;AAC3B,yDAAyD;AACzD,0DAAoD;AACpD,mDAA6C;AAG7C,MAAM,MAAM,GAAG,kBAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAExC,MAAa,UAAU;IACb,IAAI,CAAC,MAAwB,EAAE,QAA2C,EAAE,MAAc,EAAE,UAAkB;;YAChH,MAAM,SAAS,GAAG,IAAI,sCAAmB,CAAC,QAAQ,CAAC,CAAC;YAEpD,wBAAwB;YACxB,MAAM,MAAM,GAAG,kBAAM,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrD,MAAM,EAAE,gCAAgC,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;YACrG,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,kBAAM,CAAC,qBAAqB,EAAE,CAAC;YAE1E,cAAc;YACd,IAAI,WAAW,CAAC;YAChB,IAAI,gBAAgB,GAAG,MAAM,CAAC,4BAA4B,CAAC,UAAU,CAAC,CAAC;YACvE,IAAI,gBAAgB,KAAK,SAAS,EAAE;gBAChC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC;gBACxD,MAAM,SAAS,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,YAAY,EAAE,wBAAS,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,iCAAe,CAAC,CAAC;gBAC3G,MAAM,SAAS,GAAG,kBAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,wBAAS,CAAC,CAAC,CAAC,EAAE,mCAAiB,CAAC,CAAC;gBACjF,WAAW,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;aACvK;iBAAM;gBACH,WAAW,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;aAC9I;YAED,IAAI,aAAa,CAAC;YAClB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;YAC3E,IAAI,YAAY,KAAK,SAAS,EAAE;gBAC5B,wBAAwB;gBACxB,IAAI,gBAAgB,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBAC3F,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;gBAClD,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;gBAE3E,MAAM,UAAU,GAAG,wBAAS,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;gBAC1D,MAAM,SAAS,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,iCAAe,CAAC,CAAC;gBAC/E,kBAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,mCAAiB,CAAC,CAAC;gBAExD,MAAM,iBAAiB,GAAG,wBAAS,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAClF,aAAa,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC5I,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,qCAAqC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBAE/E,gBAAgB,CAAC,YAAY,GAAG,YAAY,CAAC,CAAC,yBAAyB;aAC1E;iBAAM;gBACH,iBAAiB;gBACjB,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;gBAC5H,MAAM,YAAY,GAAG,kBAAM,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACxE,MAAM,UAAU,GAAG,wBAAS,CAAC,MAAM,CAAC,gCAAgC,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC/H,MAAM,SAAS,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,6BAAW,CAAC,CAAC;gBAC3E,MAAM,iBAAiB,GAAG,kBAAM,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,iCAAe,CAAC,CAAC;gBACpF,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,wCAAsB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC7L,MAAM,iBAAiB,GAAG,+BAAa,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC9L,MAAM,EAAE,sBAAsB,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,GAAG,iDAAyB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACvI,IAAI,cAAc,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;gBACxI,kBAAM,CAAC,UAAU,CAAC,aAAa,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;gBAEnE,2BAA2B;gBAC3B,MAAM,UAAU,GAAG,wBAAS,CAAC,MAAM,CAAC,gCAAgC,EAAE,kBAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC/G,MAAM,SAAS,GAAG,MAAM,kBAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,6BAAW,CAAC,CAAC;gBAC3E,MAAM,aAAa,GAAG,+BAAa,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBACjH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7C,MAAM,aAAa,GAAG,wCAAsB,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;gBACnG,MAAM,SAAS,GAAG,kBAAM,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,iCAAe,CAAC,CAAC;gBAC5E,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC9D,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;gBAEjC,kCAAkC;gBAClC,MAAM,iBAAiB,GAAG,wBAAS,CAAC,MAAM,CAAC,gCAAgC,EAAE,kBAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;gBACnI,aAAa,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7I,MAAM,CAAC,IAAI,CAAC,wCAAwC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBAClF,gBAAgB,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;aAC3F;YAED,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;YAE9C,OAAO,aAAa,CAAC;QACzB,CAAC;KAAA;CACJ;AA3ED,gCA2EC"}

package/dist/cjs/session/case/CaseMessages.d.ts

@@ -0,0 +1,67 @@
+export declare const KDFSR1_KEY_INFO: Uint8Array;
+export declare const KDFSR2_KEY_INFO: Uint8Array;
+export declare const RESUME1_MIC_NONCE: Uint8Array;
+export declare const RESUME2_MIC_NONCE: Uint8Array;
+export declare const KDFSR2_INFO: Uint8Array;
+export declare const KDFSR3_INFO: Uint8Array;
+export declare const TBE_DATA2_NONCE: Uint8Array;
+export declare const TBE_DATA3_NONCE: Uint8Array;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma1: import("../../tlv/TlvObject.js").ObjectSchema<{
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    destinationId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+    }>>;
+    resumptionId: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    resumeMic: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma2: import("../../tlv/TlvObject.js").ObjectSchema<{
+    random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+    ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+    }>>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma2Resume: import("../../tlv/TlvObject.js").ObjectSchema<{
+    resumptionId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    resumeMic: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvCaseSigma3: import("../../tlv/TlvObject.js").ObjectSchema<{
+    encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvSignedData: import("../../tlv/TlvObject.js").ObjectSchema<{
+    nodeOpCert: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    intermediateCACert: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    peerEcdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvEncryptedDataSigma2: import("../../tlv/TlvObject.js").ObjectSchema<{
+    nodeOpCert: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    intermediateCACert: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    signature: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    resumptionId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+export declare const TlvEncryptedDataSigma3: import("../../tlv/TlvObject.js").ObjectSchema<{
+    nodeOpCert: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+    intermediateCACert: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    signature: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+//# sourceMappingURL=CaseMessages.d.ts.map

package/dist/cjs/session/case/CaseMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessages.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseMessages.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,eAAe,YAAwC,CAAC;AACrE,eAAO,MAAM,eAAe,YAAwC,CAAC;AACrE,eAAO,MAAM,iBAAiB,YAAwC,CAAC;AACvE,eAAO,MAAM,iBAAiB,YAAwC,CAAC;AACvE,eAAO,MAAM,WAAW,YAAiC,CAAC;AAC1D,eAAO,MAAM,WAAW,YAAiC,CAAC;AAC1D,eAAO,MAAM,eAAe,YAAwC,CAAC;AACrE,eAAO,MAAM,eAAe,YAAwC,CAAC;AAWrE,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;;;;;QARtB,wDAAwD;;QAGxD,0DAA0D;;;;;EAa5D,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;;;;;QAnBtB,wDAAwD;;QAGxD,0DAA0D;;;EAsB5D,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,mBAAmB;;;;EAI9B,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;EAExB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,aAAa;;;;;EAKxB,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB;;;;;EAKjC,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB;;;;EAIjC,CAAC"}

package/dist/cjs/session/case/CaseMessages.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TlvEncryptedDataSigma3 = exports.TlvEncryptedDataSigma2 = exports.TlvSignedData = exports.TlvCaseSigma3 = exports.TlvCaseSigma2Resume = exports.TlvCaseSigma2 = exports.TlvCaseSigma1 = exports.TBE_DATA3_NONCE = exports.TBE_DATA2_NONCE = exports.KDFSR3_INFO = exports.KDFSR2_INFO = exports.RESUME2_MIC_NONCE = exports.RESUME1_MIC_NONCE = exports.KDFSR2_KEY_INFO = exports.KDFSR1_KEY_INFO = void 0;
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const CryptoConstants_js_1 = require("../../crypto/CryptoConstants.js");
+const TlvNumber_js_1 = require("../../tlv/TlvNumber.js");
+const TlvObject_js_1 = require("../../tlv/TlvObject.js");
+const TlvString_js_1 = require("../../tlv/TlvString.js");
+const ByteArray_js_1 = require("../../util/ByteArray.js");
+const CASE_SIGNATURE_LENGTH = CryptoConstants_js_1.CRYPTO_GROUP_SIZE_BYTES * 2;
+const CASE2_ENCRYPTED_LENGTH = 800 + CryptoConstants_js_1.CRYPTO_AEAD_MIC_LENGTH_BYTES + CASE_SIGNATURE_LENGTH; // NOC + ICAC + CASE-Sig + Mic
+exports.KDFSR1_KEY_INFO = ByteArray_js_1.ByteArray.fromString("Sigma1_Resume");
+exports.KDFSR2_KEY_INFO = ByteArray_js_1.ByteArray.fromString("Sigma2_Resume");
+exports.RESUME1_MIC_NONCE = ByteArray_js_1.ByteArray.fromString("NCASE_SigmaS1");
+exports.RESUME2_MIC_NONCE = ByteArray_js_1.ByteArray.fromString("NCASE_SigmaS2");
+exports.KDFSR2_INFO = ByteArray_js_1.ByteArray.fromString("Sigma2");
+exports.KDFSR3_INFO = ByteArray_js_1.ByteArray.fromString("Sigma3");
+exports.TBE_DATA2_NONCE = ByteArray_js_1.ByteArray.fromString("NCASE_Sigma2N");
+exports.TBE_DATA3_NONCE = ByteArray_js_1.ByteArray.fromString("NCASE_Sigma3N");
+/** @see {@link MatterCoreSpecificationV1_0} § 2.12.5 */
+const TlvSedParameters = (0, TlvObject_js_1.TlvObject)({
+    /** Maximum sleep interval of node when in idle mode. */
+    idleRetransTimeoutMs: (0, TlvObject_js_1.TlvOptionalField)(1, TlvNumber_js_1.TlvUInt32),
+    /** Maximum sleep interval of node when in active mode. */
+    activeRetransTimeoutMs: (0, TlvObject_js_1.TlvOptionalField)(2, TlvNumber_js_1.TlvUInt32), /* default: 300ms */
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvCaseSigma1 = (0, TlvObject_js_1.TlvObject)({
+    random: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(2, TlvNumber_js_1.TlvUInt16),
+    destinationId: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_HASH_LEN_BYTES })),
+    ecdhPublicKey: (0, TlvObject_js_1.TlvField)(4, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    mrpParams: (0, TlvObject_js_1.TlvOptionalField)(5, TlvSedParameters),
+    resumptionId: (0, TlvObject_js_1.TlvOptionalField)(6, TlvString_js_1.TlvByteString.bound({ length: 16 })),
+    resumeMic: (0, TlvObject_js_1.TlvOptionalField)(7, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_AEAD_MIC_LENGTH_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvCaseSigma2 = (0, TlvObject_js_1.TlvObject)({
+    random: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 32 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(2, TlvNumber_js_1.TlvUInt16),
+    ecdhPublicKey: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    encrypted: (0, TlvObject_js_1.TlvField)(4, TlvString_js_1.TlvByteString.bound({ maxLength: CASE2_ENCRYPTED_LENGTH })),
+    mrpParams: (0, TlvObject_js_1.TlvOptionalField)(5, TlvSedParameters),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvCaseSigma2Resume = (0, TlvObject_js_1.TlvObject)({
+    resumptionId: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString.bound({ length: 16 })),
+    resumeMic: (0, TlvObject_js_1.TlvField)(2, TlvString_js_1.TlvByteString.bound({ length: 16 })),
+    sessionId: (0, TlvObject_js_1.TlvField)(3, TlvNumber_js_1.TlvUInt16),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvCaseSigma3 = (0, TlvObject_js_1.TlvObject)({
+    encrypted: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvSignedData = (0, TlvObject_js_1.TlvObject)({
+    nodeOpCert: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString),
+    intermediateCACert: (0, TlvObject_js_1.TlvOptionalField)(2, TlvString_js_1.TlvByteString),
+    ecdhPublicKey: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+    peerEcdhPublicKey: (0, TlvObject_js_1.TlvField)(4, TlvString_js_1.TlvByteString.bound({ length: CryptoConstants_js_1.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvEncryptedDataSigma2 = (0, TlvObject_js_1.TlvObject)({
+    nodeOpCert: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString),
+    intermediateCACert: (0, TlvObject_js_1.TlvOptionalField)(2, TlvString_js_1.TlvByteString),
+    signature: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CASE_SIGNATURE_LENGTH })),
+    resumptionId: (0, TlvObject_js_1.TlvField)(4, TlvString_js_1.TlvByteString.bound({ length: 16 })),
+});
+/** @see {@link MatterCoreSpecificationV1_0} § 4.13.2.3 */
+exports.TlvEncryptedDataSigma3 = (0, TlvObject_js_1.TlvObject)({
+    nodeOpCert: (0, TlvObject_js_1.TlvField)(1, TlvString_js_1.TlvByteString),
+    intermediateCACert: (0, TlvObject_js_1.TlvOptionalField)(2, TlvString_js_1.TlvByteString),
+    signature: (0, TlvObject_js_1.TlvField)(3, TlvString_js_1.TlvByteString.bound({ length: CASE_SIGNATURE_LENGTH })),
+});
+//# sourceMappingURL=CaseMessages.js.map

package/dist/cjs/session/case/CaseMessages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessages.js","sourceRoot":"","sources":["../../../../src/session/case/CaseMessages.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,wEAA6J;AAC7J,yDAA8D;AAC9D,yDAA+E;AAC/E,yDAAuD;AACvD,0DAAoD;AAGpD,MAAM,qBAAqB,GAAG,4CAAuB,GAAG,CAAC,CAAC;AAE1D,MAAM,sBAAsB,GAAG,GAAG,GAAG,iDAA4B,GAAG,qBAAqB,CAAC,CAAC,8BAA8B;AAE5G,QAAA,eAAe,GAAG,wBAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACxD,QAAA,eAAe,GAAG,wBAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACxD,QAAA,iBAAiB,GAAG,wBAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAC1D,QAAA,iBAAiB,GAAG,wBAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAC1D,QAAA,WAAW,GAAG,wBAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC7C,QAAA,WAAW,GAAG,wBAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC7C,QAAA,eAAe,GAAG,wBAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACxD,QAAA,eAAe,GAAG,wBAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAErE,wDAAwD;AACxD,MAAM,gBAAgB,GAAG,IAAA,wBAAS,EAAC;IAC/B,wDAAwD;IACxD,oBAAoB,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,wBAAS,CAAC;IAEpD,0DAA0D;IAC1D,sBAAsB,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,wBAAS,CAAC,EAAE,oBAAoB;CAC/E,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,aAAa,GAAG,IAAA,wBAAS,EAAC;IACnC,MAAM,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,wBAAS,CAAC;IACjC,aAAa,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,0CAAqB,EAAE,CAAC,CAAC;IAClF,aAAa,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iDAA4B,EAAE,CAAC,CAAC;IACzF,SAAS,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,gBAAgB,CAAC;IAChD,YAAY,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,SAAS,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iDAA4B,EAAE,CAAC,CAAC;CAChG,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,aAAa,GAAG,IAAA,wBAAS,EAAC;IACnC,MAAM,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,wBAAS,CAAC;IACjC,aAAa,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iDAA4B,EAAE,CAAC,CAAC;IACzF,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAClF,SAAS,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,gBAAgB,CAAC;CACnD,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,mBAAmB,GAAG,IAAA,wBAAS,EAAC;IACzC,YAAY,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9D,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,wBAAS,CAAC;CACpC,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,aAAa,GAAG,IAAA,wBAAS,EAAC;IACnC,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC;CACxC,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,aAAa,GAAG,IAAA,wBAAS,EAAC;IACnC,UAAU,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC;IACtC,kBAAkB,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,4BAAa,CAAC;IACtD,aAAa,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iDAA4B,EAAE,CAAC,CAAC;IACzF,iBAAiB,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iDAA4B,EAAE,CAAC,CAAC;CAChG,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,sBAAsB,GAAG,IAAA,wBAAS,EAAC;IAC5C,UAAU,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC;IACtC,kBAAkB,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,4BAAa,CAAC;IACtD,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC9E,YAAY,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;CACjE,CAAC,CAAC;AAEH,0DAA0D;AAC7C,QAAA,sBAAsB,GAAG,IAAA,wBAAS,EAAC;IAC5C,UAAU,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC;IACtC,kBAAkB,EAAE,IAAA,+BAAgB,EAAC,CAAC,EAAE,4BAAa,CAAC;IACtD,SAAS,EAAE,IAAA,uBAAQ,EAAC,CAAC,EAAE,4BAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;CACjF,CAAC,CAAC"}

package/dist/cjs/session/case/CaseMessenger.d.ts

@@ -0,0 +1,62 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { MatterController } from "../../MatterController.js";
+import { MatterDevice } from "../../MatterDevice.js";
+import { TlvCaseSigma1, TlvCaseSigma2Resume, TlvCaseSigma2, TlvCaseSigma3 } from "./CaseMessages.js";
+import { SecureChannelMessenger } from "../../protocol/securechannel/SecureChannelMessenger.js";
+import { TypeFromSchema } from "../../tlv/TlvSchema.js";
+export declare class CaseServerMessenger extends SecureChannelMessenger<MatterDevice> {
+    readSigma1(): Promise<{
+        sigma1Bytes: Uint8Array;
+        sigma1: import("../../tlv/TlvObject.js").TypeFromFields<{
+            random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+            destinationId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+                activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+            }>>;
+            resumptionId: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+            resumeMic: import("../../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+        }>;
+    }>;
+    sendSigma2(sigma2: TypeFromSchema<typeof TlvCaseSigma2>): Promise<Uint8Array>;
+    sendSigma2Resume(sigma2Resume: TypeFromSchema<typeof TlvCaseSigma2Resume>): Promise<Uint8Array>;
+    readSigma3(): Promise<{
+        sigma3Bytes: Uint8Array;
+        sigma3: import("../../tlv/TlvObject.js").TypeFromFields<{
+            encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+        }>;
+    }>;
+}
+export declare class CaseClientMessenger extends SecureChannelMessenger<MatterController> {
+    sendSigma1(sigma1: TypeFromSchema<typeof TlvCaseSigma1>): Promise<Uint8Array>;
+    readSigma2(): Promise<{
+        sigma2Bytes: Uint8Array;
+        sigma2: import("../../tlv/TlvObject.js").TypeFromFields<{
+            random: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+            ecdhPublicKey: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            encrypted: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            mrpParams: import("../../tlv/TlvObject.js").OptionalFieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                idleRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+                activeRetransTimeoutMs: import("../../tlv/TlvObject.js").OptionalFieldType<number>;
+            }>>;
+        }>;
+        sigma2Resume?: undefined;
+    } | {
+        sigma2Resume: import("../../tlv/TlvObject.js").TypeFromFields<{
+            resumptionId: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            resumeMic: import("../../tlv/TlvObject.js").FieldType<Uint8Array>;
+            sessionId: import("../../tlv/TlvObject.js").FieldType<number>;
+        }>;
+        sigma2Bytes?: undefined;
+        sigma2?: undefined;
+    }>;
+    sendSigma3(sigma3: TypeFromSchema<typeof TlvCaseSigma3>): Promise<Uint8Array>;
+}
+//# sourceMappingURL=CaseMessenger.d.ts.map

package/dist/cjs/session/case/CaseMessenger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CaseMessenger.d.ts","sourceRoot":"","sources":["../../../../src/session/case/CaseMessenger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,YAAY,CAAC;IACnE,UAAU;;;;;;;;;;;;;;;IAKhB,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;IAIvD,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC,OAAO,mBAAmB,CAAC;IAInE,UAAU;;;;;;CAInB;AAED,qBAAa,mBAAoB,SAAQ,sBAAsB,CAAC,gBAAgB,CAAC;IAC7E,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;IAIjD,UAAU;;;;;;;;;;;;;;;;;;;;;;IAYhB,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,aAAa,CAAC;CAG1D"}