@qntx/nostr 0.1.0 → 0.2.0

package/dist/pool-DhRi7l-b.d.mts

@@ -1,297 +0,0 @@
-import { n as EventTemplate, t as Event } from "./event-B5D2jxt_.mjs";
-import { t as Filter } from "./filter-DUEKP3q1.mjs";
-import { n as CountResult } from "./message-DJC-Jz6T.mjs";
-import { a as NegentropyStorageVector } from "./nip77-ByxlgoQO.mjs";
-//#region src/relay/subscription.d.ts
-type SubscriptionHandlers = {
-  onevent?: (event: Event) => void;
-  oneose?: () => void;
-  onclose?: (reason: string) => void;
-  /** Skip verify + onevent when true. Evaluated after parse, before verify. */
-  alreadyHaveEvent?: (id: string) => boolean;
-  /**
-   * Fired for every EVENT id this sub sees, including duplicates and
-   * alreadyHaveEvent hits, after parse and before the verify skip.
-   */
-  receivedEvent?: (id: string) => void;
-};
-type SubscribeOptions = SubscriptionHandlers & {
-  id?: string;
-  /**
-   * If set, fire `oneose` once after this many ms if EOSE has not arrived.
-   * Does not close the REQ. `Relay.fetch` is the one-shot closer.
-   */
-  eoseTimeoutMs?: number;
-  /**
-   * One-shot REQ: do not join a live coalescing group, and close on EOSE.
-   * Default false (live). `Relay.fetch` passes true.
-   */
-  closeOnEose?: boolean;
-  signal?: AbortSignal;
-};
-declare class Subscription {
-  #private;
-  private readonly sendClose;
-  readonly id: string;
-  readonly filters: Filter[];
-  readonly handlers: SubscriptionHandlers;
-  readonly closeOnEose: boolean;
-  eosed: boolean;
-  closed: boolean;
-  /** True after one CLOSED `auth-required:` retry. */
-  authRetried: boolean;
-  /** Inclusive NIP-01 `since` watermark from verified EVENTs. */
-  lastCreatedAt: number | undefined;
-  /** Event ids at `lastCreatedAt` (same-second reconnect dedup). Not all seen ids. */
-  readonly idsAtWatermark: Set<string>;
-  constructor(filters: Filter[], opts: SubscribeOptions, sendClose: (id: string) => void);
-  close(reason?: string): void;
-  /** Advance the reconnect watermark after a verified EVENT. */
-  noteVerified(event: Event): void;
-  /**
-   * Filters for re-REQ. Original `filters` stay unchanged.
-   * NIP-01 `since` is inclusive — never `lastCreatedAt + 1`.
-   */
-  replayFilters(): Filter[];
-}
-/** AsyncIterable wrapper over a subscription's events until EOSE or close. */
-declare function subscriptionToAsyncIterable(start: (handlers: SubscriptionHandlers) => {
-  close: (reason?: string) => void;
-}, opts?: {
-  signal?: AbortSignal;
-  includeEose?: boolean;
-}): AsyncIterable<Event> & {
-  close: (reason?: string) => void;
-};
-//#endregion
-//#region src/relay/websocket.d.ts
-/** Minimal WebSocket surface used by Relay (browser or `ws`). */
-type WebSocketLike = {
-  readyState: number;
-  send(data: string): void;
-  close(code?: number, reason?: string): void;
-  addEventListener(type: string, listener: (ev: unknown) => void): void;
-  removeEventListener(type: string, listener: (ev: unknown) => void): void;
-  ping?(): void;
-  /** Node `ws` emits `pong` on the EventEmitter; `addEventListener("pong")` is a no-op. */
-  once?(event: string, listener: (...args: unknown[]) => void): void;
-  on?(event: string, listener: (...args: unknown[]) => void): void;
-  off?(event: string, listener: (...args: unknown[]) => void): void;
-};
-type WebSocketConstructor = {
-  new (url: string): WebSocketLike;
-  readonly OPEN: number;
-  readonly CONNECTING: number;
-  readonly CLOSING: number;
-  readonly CLOSED: number;
-};
-/** Inject a WebSocket implementation (required on Node unless undici/global is present). */
-declare function useWebSocketImplementation(websocketImplementation: WebSocketConstructor): void;
-declare function getWebSocketImplementation(): WebSocketConstructor;
-//#endregion
-//#region src/relay/relay.d.ts
-declare const RelayStatus: {
-  readonly Initialized: "initialized";
-  readonly Connecting: "connecting";
-  readonly Connected: "connected";
-  readonly Disconnected: "disconnected";
-  readonly Closed: "closed";
-};
-type RelayStatusName = (typeof RelayStatus)[keyof typeof RelayStatus];
-type RelayOptions = {
-  websocketImplementation?: WebSocketConstructor;
-  verifyEvent?: (event: Event) => boolean;
-  publishTimeoutMs?: number;
-  connectTimeoutMs?: number;
-  /**
-   * When true, unexpected disconnects schedule reconnect with backoff and
-   * re-fire open subscriptions. Default false.
-   */
-  enableReconnect?: boolean;
-  /** Backoff delays in ms between reconnect attempts. */
-  reconnectBackoffMs?: number[];
-  enablePing?: boolean;
-  pingIntervalMs?: number;
-  pingTimeoutMs?: number;
-  /** When set, CLOSED/OK `auth-required:` triggers AUTH then retries the REQ/EVENT/COUNT. */
-  authSigner?: (template: EventTemplate) => Promise<Event>;
-};
-type PublishResult = {
-  ok: boolean;
-  message: string;
-};
-/**
- * Single-relay NIP-01 client.
- * Connection lifecycle, REQ/CLOSE, EVENT publish ACK, AUTH, COUNT, NIP-77, optional reconnect.
- */
-declare class Relay {
-  #private;
-  readonly url: string;
-  onnotice: ((msg: string) => void) | null;
-  onclose: (() => void) | null;
-  /** Fired when the relay sends a NIP-42 AUTH challenge. */
-  onauth: ((challenge: string) => void) | null;
-  /** Fired after a successful reconnect (not the initial connect). */
-  onreconnect: (() => void) | null;
-  constructor(url: string, opts?: RelayOptions);
-  /** Latest NIP-42 challenge, if any. */
-  get challenge(): string | undefined;
-  get connected(): boolean;
-  get status(): RelayStatusName;
-  get generation(): number;
-  get reconnectEnabled(): boolean;
-  /** User subscriptions only; dummy ping REQs are not counted. */
-  get subscriptionCount(): number;
-  static connect(url: string, opts?: RelayOptions & {
-    signal?: AbortSignal;
-  }): Promise<Relay>;
-  connect(opts?: {
-    signal?: AbortSignal;
-    timeoutMs?: number;
-  }): Promise<void>;
-  /** Graceful shutdown: disables reconnect and closes all subscriptions. */
-  close(): void;
-  /** Low-level REQ with callbacks. Survives reconnect when enableReconnect is on. */
-  subscribe(filters: Filter[], opts?: SubscribeOptions): Subscription;
-  /** AsyncIterable of events for filters until the subscription is closed. */
-  stream(filters: Filter[], opts?: {
-    signal?: AbortSignal;
-    id?: string;
-  }): AsyncIterable<Event> & {
-    close: (reason?: string) => void;
-  };
-  /**
-   * One-shot query: collect events until EOSE or timeout, then close.
-   */
-  fetch(filters: Filter[], opts?: {
-    timeoutMs?: number;
-    signal?: AbortSignal;
-    id?: string;
-  }): Promise<Event[]>;
-  /** Publish an event and wait for OK. */
-  publish(event: Event, opts?: {
-    timeoutMs?: number;
-  }): Promise<PublishResult>;
-  /**
-   * NIP-45 COUNT: ask the relay how many events match `filters`.
-   * Resolves with the COUNT payload (count / optional approximate / optional hll).
-   */
-  count(filters: Filter[], opts?: {
-    id?: string;
-    timeoutMs?: number;
-    signal?: AbortSignal;
-  }): Promise<CountResult>;
-  /**
-   * NIP-42 AUTH: sign the current challenge and wait for OK.
-   */
-  auth(sign: (template: EventTemplate) => Promise<Event>, opts?: {
-    timeoutMs?: number;
-  }): Promise<PublishResult>;
-  /**
-   * NIP-77: run Negentropy reconciliation against this relay.
-   * Returns the local-only (`have`) and remote-only (`need`) event ids.
-   * Does not upload or download events.
-   *
-   * `timeoutMs` is a single wall-clock deadline for the whole session
-   * (`NEG-OPEN` through the last `NEG-MSG`), not a per-message budget.
-   * Default: {@link RelayOptions.publishTimeoutMs}.
-   */
-  negReconcile(filter: Filter, storage: NegentropyStorageVector, opts?: {
-    id?: string;
-    timeoutMs?: number;
-    signal?: AbortSignal;
-  }): Promise<{
-    have: string[];
-    need: string[];
-  }>;
-  /** Generate a unique subscription id for this relay instance. */
-  nextSubId(prefix?: string): string;
-}
-//#endregion
-//#region src/relay/pool.d.ts
-type PoolOptions = {
-  websocketImplementation?: WebSocketConstructor;
-  verifyEvent?: RelayOptions["verifyEvent"];
-  publishTimeoutMs?: number;
-  connectTimeoutMs?: number;
-  enableReconnect?: boolean;
-  reconnectBackoffMs?: number[];
-  enablePing?: boolean;
-  pingIntervalMs?: number;
-  pingTimeoutMs?: number;
-  /**
-   * When set, automatically answer NIP-42 AUTH challenges for relays that
-   * send them. Return null to skip a given relay URL.
-   */
-  automaticallyAuth?: (relayURL: string) => null | ((event: EventTemplate) => Promise<Event>);
-  /** When false, ensureRelay rejects isInsecureRelayUrl unless trusted. Default true (allow). */
-  allowInsecure?: boolean;
-  trustedInsecureUrls?: readonly string[];
-  /** Close unused relays. Unset/0 = disabled. */
-  idleTimeoutMs?: number;
-  idleCleanupIntervalMs?: number;
-  onIdleRelaysClosed?: (urls: string[]) => void;
-};
-type PoolPublishResult = {
-  url: string;
-  result?: PublishResult;
-  error?: string;
-};
-type PoolCountResult = {
-  url: string;
-  count?: number;
-  approximate?: boolean;
-  hll?: string;
-  error?: string;
-};
-/**
- * Multi-relay coordinator: connection reuse, cross-relay event dedup, fan-out publish.
- */
-declare class Pool {
-  #private;
-  constructor(opts?: PoolOptions);
-  setAllowInsecure(allow: boolean): void;
-  setTrustedInsecureUrls(urls: readonly string[]): void;
-  cleanIdleRelays(): void;
-  ensureRelay(url: string, opts?: {
-    signal?: AbortSignal;
-    timeoutMs?: number;
-  }): Promise<Relay>;
-  close(urls?: string[]): void;
-  /**
-   * Subscribe across relays. Deduplicates by event id.
-   * Returns a closer; callbacks receive every new event once.
-   */
-  subscribe(relays: string[], filters: Filter[], opts?: SubscribeOptions): {
-    close: (reason?: string) => void;
-  };
-  /** Fetch events until each connected relay EOSE or timeout; dedupe by id. */
-  fetch(relays: string[], filters: Filter[], opts?: {
-    timeoutMs?: number;
-    signal?: AbortSignal;
-  }): Promise<Event[]>;
-  /** Publish to all listed relays; returns per-relay outcomes. */
-  publish(relays: string[], event: Event, opts?: {
-    timeoutMs?: number;
-  }): Promise<PoolPublishResult[]>;
-  /** First successful publish (Promise.any semantics). */
-  publishAny(relays: string[], event: Event, opts?: {
-    timeoutMs?: number;
-  }): Promise<PoolPublishResult>;
-  /**
-   * NIP-45 COUNT across relays. Per-relay outcomes; failures do not throw.
-   * Counts are not summed — each relay reports independently (may overlap).
-   */
-  count(relays: string[], filters: Filter[], opts?: {
-    timeoutMs?: number;
-    signal?: AbortSignal;
-  }): Promise<PoolCountResult[]>;
-  listRelays(): string[];
-  /** Lookup a pooled relay, including disconnected reconnecting entries. */
-  getRelay(url: string): Relay | undefined;
-  /** Currently connected URLs. Unlike listRelays(), excludes reconnecting/disconnected entries. */
-  connectedUrls(): string[];
-}
-//#endregion
-export { subscriptionToAsyncIterable as _, PublishResult as a, RelayStatus as c, WebSocketLike as d, getWebSocketImplementation as f, SubscriptionHandlers as g, Subscription as h, PoolPublishResult as i, RelayStatusName as l, SubscribeOptions as m, PoolCountResult as n, Relay as o, useWebSocketImplementation as p, PoolOptions as r, RelayOptions as s, Pool as t, WebSocketConstructor as u };
-//# sourceMappingURL=pool-DhRi7l-b.d.mts.map

package/dist/signer-CZ6K6FUc.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"signer-CZ6K6FUc.mjs","names":["#keys","#convKeys","nip04.encrypt","nip04.decrypt","nip44.getConversationKey","nip44.encrypt","#conversationKey","nip44.decrypt","#provider","#resolve","#pool","#ownsPool","#clientSecret","#clientPubkey","#pointer","#conversationKey","#onAuthUrl","#timeoutMs","#perms","#metadata","#listeners","#waitingAuth","#relays","#startSubscription","decrypt","#sub","#open","#sendRequest","#cachedRemotePubkey","#serial","#idPrefix","encrypt"],"sources":["../src/signer/keys.ts","../src/signer/nip07.ts","../src/signer/nip46.ts"],"sourcesContent":["import type { Event, UnsignedEvent } from \"../core/event.ts\";\nimport { CryptoError } from \"../core/error.ts\";\nimport { Keys, SecretKey, getPublicKey, signEvent } from \"../core/key.ts\";\nimport * as nip04 from \"../nips/nip04.ts\";\nimport * as nip44 from \"../nips/nip44.ts\";\nimport type { NostrSigner } from \"./types.ts\";\n\n/** Local secret-key signer with NIP-04 (legacy) and NIP-44 support. */\nexport class KeysSigner implements NostrSigner {\n  readonly #keys: Keys;\n  readonly #convKeys = new Map<string, Uint8Array>();\n\n  constructor(secretKey: SecretKey | Uint8Array | string | Keys) {\n    this.#keys = secretKey instanceof Keys ? secretKey : Keys.fromSecretKey(secretKey);\n  }\n\n  get keys(): Keys {\n    return this.#keys;\n  }\n\n  async getPublicKey(): Promise<string> {\n    return this.#keys.publicKey;\n  }\n\n  async signEvent(unsigned: UnsignedEvent): Promise<Event> {\n    const expected = getPublicKey(this.#keys.secretKey);\n    if (unsigned.pubkey.toLowerCase() !== expected) {\n      throw new CryptoError(\"unsigned event pubkey does not match signer\");\n    }\n    return signEvent(unsigned, this.#keys.secretKey);\n  }\n\n  async nip04Encrypt(peer: string, plaintext: string): Promise<string> {\n    return nip04.encrypt(this.#keys.secretKey.bytes, peer, plaintext);\n  }\n\n  async nip04Decrypt(peer: string, ciphertext: string): Promise<string> {\n    return nip04.decrypt(this.#keys.secretKey.bytes, peer, ciphertext);\n  }\n\n  #conversationKey(peer: string): Uint8Array {\n    const pk = peer.toLowerCase();\n    let key = this.#convKeys.get(pk);\n    if (!key) {\n      key = nip44.getConversationKey(this.#keys.secretKey.bytes, pk);\n      this.#convKeys.set(pk, key);\n    }\n    return key;\n  }\n\n  async nip44Encrypt(peer: string, plaintext: string): Promise<string> {\n    return nip44.encrypt(plaintext, this.#conversationKey(peer));\n  }\n\n  async nip44Decrypt(peer: string, payload: string): Promise<string> {\n    return nip44.decrypt(payload, this.#conversationKey(peer));\n  }\n}\n","import type { Event, EventTemplate, UnsignedEvent } from \"../core/event.ts\";\nimport { signedMatchesUnsigned, validateSignedEvent } from \"../core/event.ts\";\nimport { CryptoError } from \"../core/error.ts\";\nimport { verifyEvent } from \"../core/key.ts\";\nimport type { NostrSigner } from \"./types.ts\";\n\n/**\n * Minimal NIP-07 provider surface (browser extension `window.nostr`).\n * @see https://github.com/nostr-protocol/nips/blob/master/07.md\n */\nexport type WindowNostr = {\n  getPublicKey(): Promise<string>;\n  signEvent(event: EventTemplate): Promise<Event>;\n  nip04?: {\n    encrypt(pubkey: string, plaintext: string): Promise<string>;\n    decrypt(pubkey: string, ciphertext: string): Promise<string>;\n  };\n  nip44?: {\n    encrypt(pubkey: string, plaintext: string): Promise<string>;\n    decrypt(pubkey: string, ciphertext: string): Promise<string>;\n  };\n};\n\ntype GlobalWithNostr = typeof globalThis & {\n  nostr?: WindowNostr;\n  window?: { nostr?: WindowNostr };\n};\n\n/** Resolve `window.nostr` / `globalThis.nostr` when present. */\nexport function getWindowNostr(): WindowNostr | undefined {\n  const g = globalThis as GlobalWithNostr;\n  return g.nostr ?? g.window?.nostr;\n}\n\n/** True when a NIP-07 provider is injected in the current environment. */\nexport function isNip07Available(): boolean {\n  const n = getWindowNostr();\n  return Boolean(n && typeof n.getPublicKey === \"function\" && typeof n.signEvent === \"function\");\n}\n\n/**\n * Signer backed by a NIP-07 browser extension (or any injected provider).\n * Never holds secret keys in-process.\n */\nexport class Nip07Signer implements NostrSigner {\n  readonly #provider: WindowNostr | undefined;\n\n  constructor(provider?: WindowNostr) {\n    this.#provider = provider;\n  }\n\n  #resolve(): WindowNostr {\n    const provider = this.#provider ?? getWindowNostr();\n    if (!provider) {\n      throw new CryptoError(\"NIP-07 provider not available (window.nostr missing)\");\n    }\n    return provider;\n  }\n\n  async getPublicKey(): Promise<string> {\n    const pk = await this.#resolve().getPublicKey();\n    if (typeof pk !== \"string\" || pk.length !== 64) {\n      throw new CryptoError(\"NIP-07 getPublicKey returned an invalid pubkey\");\n    }\n    return pk.toLowerCase();\n  }\n\n  async signEvent(unsigned: UnsignedEvent): Promise<Event> {\n    const provider = this.#resolve();\n    const template: EventTemplate = {\n      kind: unsigned.kind,\n      tags: unsigned.tags.map((t) => [...t] as [string, ...string[]]),\n      content: unsigned.content,\n      created_at: unsigned.created_at,\n    };\n\n    const signed = await provider.signEvent(template);\n    if (!validateSignedEvent(signed)) {\n      throw new CryptoError(\"NIP-07 signEvent returned an invalid event\");\n    }\n    if (!verifyEvent(signed)) {\n      throw new CryptoError(\"NIP-07 signed event failed signature verification\");\n    }\n    if (!signedMatchesUnsigned(signed, unsigned)) {\n      throw new CryptoError(\"NIP-07 signed event does not match unsigned template\");\n    }\n    return signed;\n  }\n\n  async nip04Encrypt(peer: string, plaintext: string): Promise<string> {\n    const nip04 = this.#resolve().nip04;\n    if (!nip04?.encrypt) throw new CryptoError(\"NIP-07 provider does not support nip04.encrypt\");\n    return nip04.encrypt(peer, plaintext);\n  }\n\n  async nip04Decrypt(peer: string, ciphertext: string): Promise<string> {\n    const nip04 = this.#resolve().nip04;\n    if (!nip04?.decrypt) throw new CryptoError(\"NIP-07 provider does not support nip04.decrypt\");\n    return nip04.decrypt(peer, ciphertext);\n  }\n\n  async nip44Encrypt(peer: string, plaintext: string): Promise<string> {\n    const nip44 = this.#resolve().nip44;\n    if (!nip44?.encrypt) throw new CryptoError(\"NIP-07 provider does not support nip44.encrypt\");\n    return nip44.encrypt(peer, plaintext);\n  }\n\n  async nip44Decrypt(peer: string, payload: string): Promise<string> {\n    const nip44 = this.#resolve().nip44;\n    if (!nip44?.decrypt) throw new CryptoError(\"NIP-07 provider does not support nip44.decrypt\");\n    return nip44.decrypt(peer, payload);\n  }\n}\n","import type { Event, EventTemplate, UnsignedEvent } from \"../core/event.ts\";\nimport { signedMatchesUnsigned, validateSignedEvent } from \"../core/event.ts\";\nimport type { Filter } from \"../core/filter.ts\";\nimport { Kind } from \"../core/kind.ts\";\nimport { SecretKey, finalizeEvent, getPublicKey, verifyEvent } from \"../core/key.ts\";\nimport { Tag } from \"../core/tag.ts\";\nimport { isHex32 } from \"../core/util.ts\";\nimport { decrypt, encrypt, getConversationKey } from \"../nips/nip44.ts\";\nimport {\n  Nip46Error,\n  decodeNip46Response,\n  encodeNip46Request,\n  parseBunkerURL,\n  parseNostrConnectURI,\n  type BunkerPointer,\n  type ClientMetadata,\n  type Nip46Request,\n} from \"../nips/nip46.ts\";\nimport type { NostrSigner } from \"./types.ts\";\n\n/** Subscribe options used by NIP-46 transport (structural subset of Pool). */\nexport type Nip46SubscribeOptions = {\n  signal?: AbortSignal;\n  onevent?: (event: Event) => void;\n  onclose?: (reason: string) => void;\n};\n\n/**\n * Structural relay transport for NIP-46 RPC.\n * Satisfied by {@link import(\"../relay/pool.ts\").Pool}; constructed above the signer layer\n * so `signer` never imports `relay` (ADR-0001).\n */\nexport type Nip46Transport = {\n  subscribe(\n    relays: string[],\n    filters: Filter[],\n    opts?: Nip46SubscribeOptions,\n  ): { close: (reason?: string) => void };\n  publish(relays: string[], event: Event): Promise<unknown>;\n  close(urls?: string[]): void;\n};\n\nexport type Nip46SignerOptions = {\n  /**\n   * Shared transport. When set, the signer does not close it on {@link Nip46Signer.close}.\n   */\n  pool?: Nip46Transport;\n  /**\n   * Factory for a private transport when `pool` is omitted.\n   * Typical: `() => new Pool({ websocketImplementation, enableReconnect: true })`.\n   */\n  createPool?: () => Nip46Transport;\n  /**\n   * Relays used when the bunker pointer has none, and merged uniquely onto a\n   * nonempty pointer (pointer first).\n   */\n  relays?: string[];\n  /**\n   * Bunker connection secret when the pointer or bunker:// URL has none.\n   */\n  secret?: string | null;\n  /** Local client key used to encrypt RPC (not the remote user key). */\n  clientSecretKey?: SecretKey | Uint8Array | string;\n  /** Called when bunker returns `auth_url` for a pending request. */\n  onAuthUrl?: (url: string) => void;\n  /** Per-request timeout in ms. Default 30s. */\n  timeoutMs?: number;\n  /** Requested permissions sent with `connect` (`method[:kind]` list). */\n  perms?: string[];\n  /** Client metadata sent with bunker-initiated `connect`. */\n  metadata?: ClientMetadata;\n};\n\nfunction resolveClientSecret(key?: SecretKey | Uint8Array | string): SecretKey {\n  if (key === undefined) return SecretKey.generate();\n  if (key instanceof SecretKey) return key;\n  if (typeof key === \"string\") return SecretKey.fromHex(key);\n  return SecretKey.fromBytes(key);\n}\n\nfunction resolveTransport(opts: Nip46SignerOptions): { pool: Nip46Transport; ownsPool: boolean } {\n  if (opts.pool) return { pool: opts.pool, ownsPool: false };\n  if (opts.createPool) return { pool: opts.createPool(), ownsPool: true };\n  throw new Nip46Error(\n    \"Nip46Signer requires pool or createPool (inject Pool from @qntx/nostr/relay)\",\n  );\n}\n\nfunction applyPointerOpts(pointer: BunkerPointer, opts: Nip46SignerOptions): BunkerPointer {\n  let next: BunkerPointer = {\n    pubkey: pointer.pubkey.toLowerCase(),\n    relays: [...pointer.relays],\n    secret: pointer.secret,\n  };\n  if (opts.secret !== undefined && next.secret == null) {\n    next = { ...next, secret: opts.secret };\n  }\n\n  const relays = next.relays.length > 0 ? next.relays : [...(opts.relays ?? [])];\n  if (relays.length === 0) {\n    throw new Nip46Error(\"no relays for bunker connection\");\n  }\n  if (next.relays.length > 0 && opts.relays?.length) {\n    const merged = [...next.relays];\n    for (const r of opts.relays) {\n      if (!merged.includes(r)) merged.push(r);\n    }\n    return { ...next, relays: merged };\n  }\n  return { ...next, relays };\n}\n\nfunction resolveBunkerPointer(input: string | BunkerPointer): BunkerPointer {\n  if (typeof input !== \"string\") {\n    return {\n      pubkey: input.pubkey.toLowerCase(),\n      relays: [...input.relays],\n      secret: input.secret,\n    };\n  }\n\n  const bunker = parseBunkerURL(input);\n  if (bunker) return bunker;\n\n  throw new Nip46Error(\"invalid bunker input (expected bunker:// URL or BunkerPointer)\");\n}\n\n/**\n * NIP-46 remote signer (bunker / nostrconnect).\n * Implements {@link NostrSigner}; never holds the remote user's secret key.\n * Network I/O is injected via {@link Nip46Transport} (no relay import).\n */\nexport class Nip46Signer implements NostrSigner {\n  readonly #pool: Nip46Transport;\n  readonly #ownsPool: boolean;\n  readonly #clientSecret: SecretKey;\n  readonly #clientPubkey: string;\n  readonly #pointer: BunkerPointer;\n  readonly #conversationKey: Uint8Array;\n  readonly #onAuthUrl: ((url: string) => void) | undefined;\n  readonly #timeoutMs: number;\n  readonly #perms: string[] | undefined;\n  readonly #metadata: ClientMetadata | undefined;\n  #relays: string[];\n  readonly #listeners = new Map<\n    string,\n    {\n      resolve: (v: string) => void;\n      reject: (e: Error) => void;\n      timer: ReturnType<typeof setTimeout>;\n    }\n  >();\n  readonly #waitingAuth = new Set<string>();\n  #sub: { close: (reason?: string) => void } | undefined;\n  #open = false;\n  #serial = 0;\n  #idPrefix = Math.random().toString(36).slice(2, 9);\n  #cachedRemotePubkey: string | undefined;\n\n  private constructor(\n    clientSecret: SecretKey,\n    pointer: BunkerPointer,\n    pool: Nip46Transport,\n    ownsPool: boolean,\n    opts: Nip46SignerOptions,\n  ) {\n    if (pointer.relays.length === 0) {\n      throw new Nip46Error(\"bunker pointer has no relays\");\n    }\n    this.#clientSecret = clientSecret;\n    this.#clientPubkey = getPublicKey(clientSecret);\n    this.#pointer = {\n      pubkey: pointer.pubkey.toLowerCase(),\n      relays: [...pointer.relays],\n      secret: pointer.secret,\n    };\n    this.#relays = [...pointer.relays];\n    this.#pool = pool;\n    this.#ownsPool = ownsPool;\n    this.#conversationKey = getConversationKey(clientSecret.bytes, this.#pointer.pubkey);\n    this.#onAuthUrl = opts.onAuthUrl;\n    this.#timeoutMs = opts.timeoutMs ?? 30_000;\n    this.#perms = opts.perms;\n    this.#metadata = opts.metadata;\n  }\n\n  get bunker(): Readonly<BunkerPointer> {\n    return {\n      pubkey: this.#pointer.pubkey,\n      relays: [...this.#relays],\n      secret: this.#pointer.secret,\n    };\n  }\n\n  get clientPublicKey(): string {\n    return this.#clientPubkey;\n  }\n\n  /**\n   * Subscribe to an already-known bunker pointer. Does not send the `connect` RPC\n   * (reconnect without a new handshake).\n   * Requires `clientSecretKey` — reconnect must reuse the original client identity.\n   */\n  static fromBunker(\n    pointer: BunkerPointer,\n    opts: Nip46SignerOptions & { clientSecretKey: SecretKey | Uint8Array | string },\n  ): Nip46Signer {\n    if (opts.clientSecretKey === undefined) {\n      throw new Nip46Error(\"fromBunker requires clientSecretKey\");\n    }\n    const resolved = applyPointerOpts(pointer, opts);\n    const sk = resolveClientSecret(opts.clientSecretKey);\n    const { pool, ownsPool } = resolveTransport(opts);\n    const signer = new Nip46Signer(sk, resolved, pool, ownsPool, opts);\n    signer.#startSubscription();\n    return signer;\n  }\n\n  /**\n   * Connect using a `bunker://` URL or pre-parsed pointer.\n   * Invalid strings throw. A NIP-05 identifier is not a bunker pointer.\n   * When both pointer and `opts.relays` are nonempty, unique `opts.relays` are appended.\n   */\n  static async connect(\n    input: string | BunkerPointer,\n    opts: Nip46SignerOptions = {},\n  ): Promise<Nip46Signer> {\n    const pointer = resolveBunkerPointer(input);\n    const signer = Nip46Signer.fromBunker(pointer, {\n      ...opts,\n      clientSecretKey: resolveClientSecret(opts.clientSecretKey),\n    });\n    try {\n      await signer.connectRemote();\n      try {\n        await signer.switchRelays();\n      } catch {\n        // Bunker may not implement switch_relays.\n      }\n      await signer.getPublicKey();\n      return signer;\n    } catch (err) {\n      await signer.close();\n      throw err;\n    }\n  }\n\n  /**\n   * Wait for a bunker to complete a client-initiated `nostrconnect://` handshake.\n   * Requires `clientSecretKey` whose pubkey matches the URI client pubkey\n   * (build the URI with {@link createNostrConnectURI} after generating keys).\n   */\n  static async fromNostrConnectURI(\n    connectionURI: string,\n    opts: Nip46SignerOptions & {\n      clientSecretKey: SecretKey | Uint8Array | string;\n      signal?: AbortSignal;\n      handshakeTimeoutMs?: number;\n    },\n  ): Promise<Nip46Signer> {\n    const params = parseNostrConnectURI(connectionURI);\n    const sk = resolveClientSecret(opts.clientSecretKey);\n    const clientPubkey = getPublicKey(sk);\n\n    if (clientPubkey !== params.clientPubkey) {\n      throw new Nip46Error(\"client secret key does not match nostrconnect client pubkey\");\n    }\n\n    const { pool, ownsPool } = resolveTransport(opts);\n    const handshakeTimeoutMs = opts.handshakeTimeoutMs ?? 300_000;\n\n    return new Promise((resolve, reject) => {\n      let settled = false;\n      const finish = (err?: Error, signer?: Nip46Signer) => {\n        if (settled) return;\n        settled = true;\n        clearTimeout(timer);\n        sub.close(err ? \"failed\" : \"connected\");\n        if (err) {\n          if (ownsPool) pool.close();\n          reject(err);\n        } else if (signer) {\n          resolve(signer);\n        }\n      };\n\n      const timer = setTimeout(() => {\n        finish(new Nip46Error(\"nostrconnect handshake timed out\"));\n      }, handshakeTimeoutMs);\n\n      const sub = pool.subscribe(\n        params.relays,\n        [{ kinds: [Kind.NostrConnect], \"#p\": [clientPubkey], limit: 0 }],\n        {\n          signal: opts.signal,\n          onevent: (event) => {\n            try {\n              const convKey = getConversationKey(sk.bytes, event.pubkey);\n              const payload = decrypt(event.content, convKey);\n              const response = decodeNip46Response(payload);\n              if (response.result !== params.secret) return;\n\n              const pointer: BunkerPointer = {\n                pubkey: event.pubkey.toLowerCase(),\n                relays: params.relays,\n                secret: params.secret,\n              };\n              const signer = new Nip46Signer(sk, pointer, pool, ownsPool, opts);\n              signer.#startSubscription();\n              void signer\n                .switchRelays()\n                .catch(() => undefined)\n                .then(() => signer.getPublicKey())\n                .then(() => finish(undefined, signer))\n                .catch((e) => finish(e instanceof Error ? e : new Nip46Error(String(e))));\n            } catch {\n              // ignore non-matching events\n            }\n          },\n          onclose: (reason) => {\n            if (reason !== \"connected\" && reason !== \"failed\") {\n              finish(new Nip46Error(`nostrconnect subscription closed: ${reason}`));\n            }\n          },\n        },\n      );\n    });\n  }\n\n  #startSubscription(): void {\n    this.#sub?.close();\n    this.#sub = this.#pool.subscribe(\n      this.#relays,\n      [\n        {\n          kinds: [Kind.NostrConnect],\n          authors: [this.#pointer.pubkey],\n          \"#p\": [this.#clientPubkey],\n          limit: 0,\n        },\n      ],\n      {\n        onevent: (event) => {\n          try {\n            const payload = decrypt(event.content, this.#conversationKey);\n            const { id, result, error } = decodeNip46Response(payload);\n\n            if (result === \"auth_url\" && this.#waitingAuth.has(id)) {\n              this.#waitingAuth.delete(id);\n              if (error) this.#onAuthUrl?.(error);\n              return;\n            }\n\n            const listener = this.#listeners.get(id);\n            if (!listener) return;\n            clearTimeout(listener.timer);\n            this.#listeners.delete(id);\n            this.#waitingAuth.delete(id);\n            if (error) listener.reject(new Nip46Error(error));\n            else if (result !== undefined) listener.resolve(result);\n            else listener.reject(new Nip46Error(\"empty NIP-46 response\"));\n          } catch {\n            // ignore decrypt failures from unrelated events\n          }\n        },\n        onclose: () => {\n          this.#sub = undefined;\n        },\n      },\n    );\n    this.#open = true;\n  }\n\n  async connectRemote(overrides?: { metadata?: ClientMetadata; perms?: string[] }): Promise<void> {\n    const metadata = overrides?.metadata ?? this.#metadata;\n    const perms = overrides?.perms ?? this.#perms;\n    const params = [this.#pointer.pubkey, this.#pointer.secret ?? \"\"];\n    if (perms?.length || metadata) {\n      params.push(perms?.length ? perms.join(\",\") : \"\");\n    }\n    if (metadata) {\n      params.push(JSON.stringify(metadata));\n    }\n    const result = await this.#sendRequest(\"connect\", params);\n    if (result === \"ack\") return;\n    if (this.#pointer.secret && result === this.#pointer.secret) return;\n    throw new Nip46Error(`connect result is not ack or secret: ${result}`);\n  }\n\n  /**\n   * Ask the bunker for its preferred relay list and resubscribe when it changes.\n   * Spec result is a JSON array of URLs, or `null` when nothing changes.\n   */\n  async switchRelays(): Promise<string[] | null> {\n    const resp = await this.#sendRequest(\"switch_relays\", []);\n    if (resp === \"null\") return null;\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(resp);\n    } catch (cause) {\n      throw new Nip46Error(\"invalid switch_relays JSON\", {\n        cause: cause instanceof Error ? cause : undefined,\n      });\n    }\n    if (\n      !Array.isArray(parsed) ||\n      parsed.length === 0 ||\n      !parsed.every((x) => typeof x === \"string\")\n    ) {\n      throw new Nip46Error(\"invalid switch_relays result\");\n    }\n    this.#relays = parsed;\n    this.#startSubscription();\n    return parsed;\n  }\n\n  /** Courtesy session teardown. Always closes the local signer afterwards. */\n  async logout(): Promise<void> {\n    try {\n      const resp = await this.#sendRequest(\"logout\", []);\n      if (resp !== \"ack\") throw new Nip46Error(`logout result is not ack: ${resp}`);\n    } finally {\n      await this.close();\n    }\n  }\n\n  async ping(): Promise<void> {\n    const resp = await this.#sendRequest(\"ping\", []);\n    if (resp !== \"pong\") throw new Nip46Error(`ping result is not pong: ${resp}`);\n  }\n\n  async getPublicKey(): Promise<string> {\n    if (!this.#cachedRemotePubkey) {\n      const pk = await this.#sendRequest(\"get_public_key\", []);\n      if (!isHex32(pk)) throw new Nip46Error(\"bunker returned invalid pubkey\");\n      this.#cachedRemotePubkey = pk.toLowerCase();\n    }\n    return this.#cachedRemotePubkey;\n  }\n\n  async signEvent(unsigned: UnsignedEvent): Promise<Event> {\n    const template: EventTemplate = {\n      kind: unsigned.kind,\n      tags: unsigned.tags,\n      content: unsigned.content,\n      created_at: unsigned.created_at,\n    };\n    const resp = await this.#sendRequest(\"sign_event\", [JSON.stringify(template)]);\n    let signed: unknown;\n    try {\n      signed = JSON.parse(resp);\n    } catch (cause) {\n      throw new Nip46Error(\"bunker returned invalid sign_event JSON\", {\n        cause: cause instanceof Error ? cause : undefined,\n      });\n    }\n    if (!validateSignedEvent(signed) || !verifyEvent(signed)) {\n      throw new Nip46Error(\"bunker returned improperly signed event\");\n    }\n    if (!signedMatchesUnsigned(signed, unsigned)) {\n      throw new Nip46Error(\"signed event does not match unsigned template\");\n    }\n    return signed;\n  }\n\n  async nip04Encrypt(peer: string, plaintext: string): Promise<string> {\n    return this.#sendRequest(\"nip04_encrypt\", [peer, plaintext]);\n  }\n\n  async nip04Decrypt(peer: string, ciphertext: string): Promise<string> {\n    return this.#sendRequest(\"nip04_decrypt\", [peer, ciphertext]);\n  }\n\n  async nip44Encrypt(peer: string, plaintext: string): Promise<string> {\n    return this.#sendRequest(\"nip44_encrypt\", [peer, plaintext]);\n  }\n\n  async nip44Decrypt(peer: string, payload: string): Promise<string> {\n    return this.#sendRequest(\"nip44_decrypt\", [peer, payload]);\n  }\n\n  async close(): Promise<void> {\n    this.#open = false;\n    for (const [, listener] of this.#listeners) {\n      clearTimeout(listener.timer);\n      listener.reject(new Nip46Error(\"signer closed\"));\n    }\n    this.#listeners.clear();\n    this.#sub?.close(\"signer closed\");\n    this.#sub = undefined;\n    if (this.#ownsPool) this.#pool.close();\n  }\n\n  async #sendRequest(method: string, params: string[]): Promise<string> {\n    if (!this.#open) throw new Nip46Error(\"signer is closed\");\n    if (!this.#sub) this.#startSubscription();\n\n    this.#serial += 1;\n    const id = `${this.#idPrefix}-${this.#serial}`;\n    const req: Nip46Request = { id, method, params };\n    const encrypted = encrypt(encodeNip46Request(req), this.#conversationKey);\n\n    const event = finalizeEvent(\n      {\n        kind: Kind.NostrConnect,\n        tags: [Tag.p(this.#pointer.pubkey)],\n        content: encrypted,\n        created_at: Math.floor(Date.now() / 1000),\n      },\n      this.#clientSecret,\n    );\n\n    const resultPromise = new Promise<string>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        this.#listeners.delete(id);\n        this.#waitingAuth.delete(id);\n        reject(new Nip46Error(`NIP-46 request timed out: ${method}`));\n      }, this.#timeoutMs);\n      this.#listeners.set(id, { resolve, reject, timer });\n      this.#waitingAuth.add(id);\n    });\n\n    await this.#pool.publish(this.#relays, event);\n    return resultPromise;\n  }\n}\n"],"mappings":";;;;;;;;;;AAQA,IAAa,aAAb,MAA+C;CAC7C;CACA,4BAAqB,IAAI,IAAwB;CAEjD,YAAY,WAAmD;EAC7D,KAAKA,QAAQ,qBAAqB,OAAO,YAAY,KAAK,cAAc,SAAS;CACnF;CAEA,IAAI,OAAa;EACf,OAAO,KAAKA;CACd;CAEA,MAAM,eAAgC;EACpC,OAAO,KAAKA,MAAM;CACpB;CAEA,MAAM,UAAU,UAAyC;EACvD,MAAM,WAAW,aAAa,KAAKA,MAAM,SAAS;EAClD,IAAI,SAAS,OAAO,YAAY,MAAM,UACpC,MAAM,IAAI,YAAY,6CAA6C;EAErE,OAAO,UAAU,UAAU,KAAKA,MAAM,SAAS;CACjD;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,OAAOE,QAAc,KAAKF,MAAM,UAAU,OAAO,MAAM,SAAS;CAClE;CAEA,MAAM,aAAa,MAAc,YAAqC;EACpE,OAAOG,QAAc,KAAKH,MAAM,UAAU,OAAO,MAAM,UAAU;CACnE;CAEA,iBAAiB,MAA0B;EACzC,MAAM,KAAK,KAAK,YAAY;EAC5B,IAAI,MAAM,KAAKC,UAAU,IAAI,EAAE;EAC/B,IAAI,CAAC,KAAK;GACR,MAAMG,mBAAyB,KAAKJ,MAAM,UAAU,OAAO,EAAE;GAC7D,KAAKC,UAAU,IAAI,IAAI,GAAG;EAC5B;EACA,OAAO;CACT;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,OAAOI,UAAc,WAAW,KAAKC,iBAAiB,IAAI,CAAC;CAC7D;CAEA,MAAM,aAAa,MAAc,SAAkC;EACjE,OAAOC,UAAc,SAAS,KAAKD,iBAAiB,IAAI,CAAC;CAC3D;AACF;;;;AC5BA,SAAgB,iBAA0C;CACxD,MAAM,IAAI;CACV,OAAO,EAAE,SAAS,EAAE,QAAQ;AAC9B;;AAGA,SAAgB,mBAA4B;CAC1C,MAAM,IAAI,eAAe;CACzB,OAAO,QAAQ,KAAK,OAAO,EAAE,iBAAiB,cAAc,OAAO,EAAE,cAAc,UAAU;AAC/F;;;;;AAMA,IAAa,cAAb,MAAgD;CAC9C;CAEA,YAAY,UAAwB;EAClC,KAAKE,YAAY;CACnB;CAEA,WAAwB;EACtB,MAAM,WAAW,KAAKA,aAAa,eAAe;EAClD,IAAI,CAAC,UACH,MAAM,IAAI,YAAY,sDAAsD;EAE9E,OAAO;CACT;CAEA,MAAM,eAAgC;EACpC,MAAM,KAAK,MAAM,KAAKC,SAAS,CAAC,CAAC,aAAa;EAC9C,IAAI,OAAO,OAAO,YAAY,GAAG,WAAW,IAC1C,MAAM,IAAI,YAAY,gDAAgD;EAExE,OAAO,GAAG,YAAY;CACxB;CAEA,MAAM,UAAU,UAAyC;EACvD,MAAM,WAAW,KAAKA,SAAS;EAC/B,MAAM,WAA0B;GAC9B,MAAM,SAAS;GACf,MAAM,SAAS,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,CAA0B;GAC9D,SAAS,SAAS;GAClB,YAAY,SAAS;EACvB;EAEA,MAAM,SAAS,MAAM,SAAS,UAAU,QAAQ;EAChD,IAAI,CAAC,oBAAoB,MAAM,GAC7B,MAAM,IAAI,YAAY,4CAA4C;EAEpE,IAAI,CAAC,YAAY,MAAM,GACrB,MAAM,IAAI,YAAY,mDAAmD;EAE3E,IAAI,CAAC,sBAAsB,QAAQ,QAAQ,GACzC,MAAM,IAAI,YAAY,sDAAsD;EAE9E,OAAO;CACT;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,MAAM,QAAQ,KAAKA,SAAS,CAAC,CAAC;EAC9B,IAAI,CAAC,OAAO,SAAS,MAAM,IAAI,YAAY,gDAAgD;EAC3F,OAAO,MAAM,QAAQ,MAAM,SAAS;CACtC;CAEA,MAAM,aAAa,MAAc,YAAqC;EACpE,MAAM,QAAQ,KAAKA,SAAS,CAAC,CAAC;EAC9B,IAAI,CAAC,OAAO,SAAS,MAAM,IAAI,YAAY,gDAAgD;EAC3F,OAAO,MAAM,QAAQ,MAAM,UAAU;CACvC;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,MAAM,QAAQ,KAAKA,SAAS,CAAC,CAAC;EAC9B,IAAI,CAAC,OAAO,SAAS,MAAM,IAAI,YAAY,gDAAgD;EAC3F,OAAO,MAAM,QAAQ,MAAM,SAAS;CACtC;CAEA,MAAM,aAAa,MAAc,SAAkC;EACjE,MAAM,QAAQ,KAAKA,SAAS,CAAC,CAAC;EAC9B,IAAI,CAAC,OAAO,SAAS,MAAM,IAAI,YAAY,gDAAgD;EAC3F,OAAO,MAAM,QAAQ,MAAM,OAAO;CACpC;AACF;;;ACvCA,SAAS,oBAAoB,KAAkD;CAC7E,IAAI,QAAQ,KAAA,GAAW,OAAO,UAAU,SAAS;CACjD,IAAI,eAAe,WAAW,OAAO;CACrC,IAAI,OAAO,QAAQ,UAAU,OAAO,UAAU,QAAQ,GAAG;CACzD,OAAO,UAAU,UAAU,GAAG;AAChC;AAEA,SAAS,iBAAiB,MAAuE;CAC/F,IAAI,KAAK,MAAM,OAAO;EAAE,MAAM,KAAK;EAAM,UAAU;CAAM;CACzD,IAAI,KAAK,YAAY,OAAO;EAAE,MAAM,KAAK,WAAW;EAAG,UAAU;CAAK;CACtE,MAAM,IAAI,WACR,8EACF;AACF;AAEA,SAAS,iBAAiB,SAAwB,MAAyC;CACzF,IAAI,OAAsB;EACxB,QAAQ,QAAQ,OAAO,YAAY;EACnC,QAAQ,CAAC,GAAG,QAAQ,MAAM;EAC1B,QAAQ,QAAQ;CAClB;CACA,IAAI,KAAK,WAAW,KAAA,KAAa,KAAK,UAAU,MAC9C,OAAO;EAAE,GAAG;EAAM,QAAQ,KAAK;CAAO;CAGxC,MAAM,SAAS,KAAK,OAAO,SAAS,IAAI,KAAK,SAAS,CAAC,GAAI,KAAK,UAAU,CAAC,CAAE;CAC7E,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,WAAW,iCAAiC;CAExD,IAAI,KAAK,OAAO,SAAS,KAAK,KAAK,QAAQ,QAAQ;EACjD,MAAM,SAAS,CAAC,GAAG,KAAK,MAAM;EAC9B,KAAK,MAAM,KAAK,KAAK,QACnB,IAAI,CAAC,OAAO,SAAS,CAAC,GAAG,OAAO,KAAK,CAAC;EAExC,OAAO;GAAE,GAAG;GAAM,QAAQ;EAAO;CACnC;CACA,OAAO;EAAE,GAAG;EAAM;CAAO;AAC3B;AAEA,SAAS,qBAAqB,OAA8C;CAC1E,IAAI,OAAO,UAAU,UACnB,OAAO;EACL,QAAQ,MAAM,OAAO,YAAY;EACjC,QAAQ,CAAC,GAAG,MAAM,MAAM;EACxB,QAAQ,MAAM;CAChB;CAGF,MAAM,SAAS,eAAe,KAAK;CACnC,IAAI,QAAQ,OAAO;CAEnB,MAAM,IAAI,WAAW,gEAAgE;AACvF;;;;;;AAOA,IAAa,cAAb,MAAa,YAAmC;CAC9C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,6BAAsB,IAAI,IAOxB;CACF,+BAAwB,IAAI,IAAY;CACxC;CACA,QAAQ;CACR,UAAU;CACV,YAAY,KAAK,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;CACjD;CAEA,YACE,cACA,SACA,MACA,UACA,MACA;EACA,IAAI,QAAQ,OAAO,WAAW,GAC5B,MAAM,IAAI,WAAW,8BAA8B;EAErD,KAAKG,gBAAgB;EACrB,KAAKC,gBAAgB,aAAa,YAAY;EAC9C,KAAKC,WAAW;GACd,QAAQ,QAAQ,OAAO,YAAY;GACnC,QAAQ,CAAC,GAAG,QAAQ,MAAM;GAC1B,QAAQ,QAAQ;EAClB;EACA,KAAKQ,UAAU,CAAC,GAAG,QAAQ,MAAM;EACjC,KAAKZ,QAAQ;EACb,KAAKC,YAAY;EACjB,KAAKI,mBAAmB,mBAAmB,aAAa,OAAO,KAAKD,SAAS,MAAM;EACnF,KAAKE,aAAa,KAAK;EACvB,KAAKC,aAAa,KAAK,aAAa;EACpC,KAAKC,SAAS,KAAK;EACnB,KAAKC,YAAY,KAAK;CACxB;CAEA,IAAI,SAAkC;EACpC,OAAO;GACL,QAAQ,KAAKL,SAAS;GACtB,QAAQ,CAAC,GAAG,KAAKQ,OAAO;GACxB,QAAQ,KAAKR,SAAS;EACxB;CACF;CAEA,IAAI,kBAA0B;EAC5B,OAAO,KAAKD;CACd;;;;;;CAOA,OAAO,WACL,SACA,MACa;EACb,IAAI,KAAK,oBAAoB,KAAA,GAC3B,MAAM,IAAI,WAAW,qCAAqC;EAE5D,MAAM,WAAW,iBAAiB,SAAS,IAAI;EAC/C,MAAM,KAAK,oBAAoB,KAAK,eAAe;EACnD,MAAM,EAAE,MAAM,aAAa,iBAAiB,IAAI;EAChD,MAAM,SAAS,IAAI,YAAY,IAAI,UAAU,MAAM,UAAU,IAAI;EACjE,OAAOU,mBAAmB;EAC1B,OAAO;CACT;;;;;;CAOA,aAAa,QACX,OACA,OAA2B,CAAC,GACN;EACtB,MAAM,UAAU,qBAAqB,KAAK;EAC1C,MAAM,SAAS,YAAY,WAAW,SAAS;GAC7C,GAAG;GACH,iBAAiB,oBAAoB,KAAK,eAAe;EAC3D,CAAC;EACD,IAAI;GACF,MAAM,OAAO,cAAc;GAC3B,IAAI;IACF,MAAM,OAAO,aAAa;GAC5B,QAAQ,CAER;GACA,MAAM,OAAO,aAAa;GAC1B,OAAO;EACT,SAAS,KAAK;GACZ,MAAM,OAAO,MAAM;GACnB,MAAM;EACR;CACF;;;;;;CAOA,aAAa,oBACX,eACA,MAKsB;EACtB,MAAM,SAAS,qBAAqB,aAAa;EACjD,MAAM,KAAK,oBAAoB,KAAK,eAAe;EACnD,MAAM,eAAe,aAAa,EAAE;EAEpC,IAAI,iBAAiB,OAAO,cAC1B,MAAM,IAAI,WAAW,6DAA6D;EAGpF,MAAM,EAAE,MAAM,aAAa,iBAAiB,IAAI;EAChD,MAAM,qBAAqB,KAAK,sBAAsB;EAEtD,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,IAAI,UAAU;GACd,MAAM,UAAU,KAAa,WAAyB;IACpD,IAAI,SAAS;IACb,UAAU;IACV,aAAa,KAAK;IAClB,IAAI,MAAM,MAAM,WAAW,WAAW;IACtC,IAAI,KAAK;KACP,IAAI,UAAU,KAAK,MAAM;KACzB,OAAO,GAAG;IACZ,OAAO,IAAI,QACT,QAAQ,MAAM;GAElB;GAEA,MAAM,QAAQ,iBAAiB;IAC7B,OAAO,IAAI,WAAW,kCAAkC,CAAC;GAC3D,GAAG,kBAAkB;GAErB,MAAM,MAAM,KAAK,UACf,OAAO,QACP,CAAC;IAAE,OAAO,CAAC,KAAK,YAAY;IAAG,MAAM,CAAC,YAAY;IAAG,OAAO;GAAE,CAAC,GAC/D;IACE,QAAQ,KAAK;IACb,UAAU,UAAU;KAClB,IAAI;MACF,MAAM,UAAU,mBAAmB,GAAG,OAAO,MAAM,MAAM;MACzD,MAAM,UAAUC,UAAQ,MAAM,SAAS,OAAO;MAE9C,IADiB,oBAAoB,OAC1B,CAAC,CAAC,WAAW,OAAO,QAAQ;MAEvC,MAAM,UAAyB;OAC7B,QAAQ,MAAM,OAAO,YAAY;OACjC,QAAQ,OAAO;OACf,QAAQ,OAAO;MACjB;MACA,MAAM,SAAS,IAAI,YAAY,IAAI,SAAS,MAAM,UAAU,IAAI;MAChE,OAAOD,mBAAmB;MAC1B,OACG,aAAa,CAAC,CACd,YAAY,KAAA,CAAS,CAAC,CACtB,WAAW,OAAO,aAAa,CAAC,CAAC,CACjC,WAAW,OAAO,KAAA,GAAW,MAAM,CAAC,CAAC,CACrC,OAAO,MAAM,OAAO,aAAa,QAAQ,IAAI,IAAI,WAAW,OAAO,CAAC,CAAC,CAAC,CAAC;KAC5E,QAAQ,CAER;IACF;IACA,UAAU,WAAW;KACnB,IAAI,WAAW,eAAe,WAAW,UACvC,OAAO,IAAI,WAAW,qCAAqC,QAAQ,CAAC;IAExE;GACF,CACF;EACF,CAAC;CACH;CAEA,qBAA2B;EACzB,KAAKE,MAAM,MAAM;EACjB,KAAKA,OAAO,KAAKf,MAAM,UACrB,KAAKY,SACL,CACE;GACE,OAAO,CAAC,KAAK,YAAY;GACzB,SAAS,CAAC,KAAKR,SAAS,MAAM;GAC9B,MAAM,CAAC,KAAKD,aAAa;GACzB,OAAO;EACT,CACF,GACA;GACE,UAAU,UAAU;IAClB,IAAI;KACF,MAAM,UAAUW,UAAQ,MAAM,SAAS,KAAKT,gBAAgB;KAC5D,MAAM,EAAE,IAAI,QAAQ,UAAU,oBAAoB,OAAO;KAEzD,IAAI,WAAW,cAAc,KAAKM,aAAa,IAAI,EAAE,GAAG;MACtD,KAAKA,aAAa,OAAO,EAAE;MAC3B,IAAI,OAAO,KAAKL,aAAa,KAAK;MAClC;KACF;KAEA,MAAM,WAAW,KAAKI,WAAW,IAAI,EAAE;KACvC,IAAI,CAAC,UAAU;KACf,aAAa,SAAS,KAAK;KAC3B,KAAKA,WAAW,OAAO,EAAE;KACzB,KAAKC,aAAa,OAAO,EAAE;KAC3B,IAAI,OAAO,SAAS,OAAO,IAAI,WAAW,KAAK,CAAC;UAC3C,IAAI,WAAW,KAAA,GAAW,SAAS,QAAQ,MAAM;UACjD,SAAS,OAAO,IAAI,WAAW,uBAAuB,CAAC;IAC9D,QAAQ,CAER;GACF;GACA,eAAe;IACb,KAAKI,OAAO,KAAA;GACd;EACF,CACF;EACA,KAAKC,QAAQ;CACf;CAEA,MAAM,cAAc,WAA4E;EAC9F,MAAM,WAAW,WAAW,YAAY,KAAKP;EAC7C,MAAM,QAAQ,WAAW,SAAS,KAAKD;EACvC,MAAM,SAAS,CAAC,KAAKJ,SAAS,QAAQ,KAAKA,SAAS,UAAU,EAAE;EAChE,IAAI,OAAO,UAAU,UACnB,OAAO,KAAK,OAAO,SAAS,MAAM,KAAK,GAAG,IAAI,EAAE;EAElD,IAAI,UACF,OAAO,KAAK,KAAK,UAAU,QAAQ,CAAC;EAEtC,MAAM,SAAS,MAAM,KAAKa,aAAa,WAAW,MAAM;EACxD,IAAI,WAAW,OAAO;EACtB,IAAI,KAAKb,SAAS,UAAU,WAAW,KAAKA,SAAS,QAAQ;EAC7D,MAAM,IAAI,WAAW,wCAAwC,QAAQ;CACvE;;;;;CAMA,MAAM,eAAyC;EAC7C,MAAM,OAAO,MAAM,KAAKa,aAAa,iBAAiB,CAAC,CAAC;EACxD,IAAI,SAAS,QAAQ,OAAO;EAC5B,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,IAAI;EAC1B,SAAS,OAAO;GACd,MAAM,IAAI,WAAW,8BAA8B,EACjD,OAAO,iBAAiB,QAAQ,QAAQ,KAAA,EAC1C,CAAC;EACH;EACA,IACE,CAAC,MAAM,QAAQ,MAAM,KACrB,OAAO,WAAW,KAClB,CAAC,OAAO,OAAO,MAAM,OAAO,MAAM,QAAQ,GAE1C,MAAM,IAAI,WAAW,8BAA8B;EAErD,KAAKL,UAAU;EACf,KAAKC,mBAAmB;EACxB,OAAO;CACT;;CAGA,MAAM,SAAwB;EAC5B,IAAI;GACF,MAAM,OAAO,MAAM,KAAKI,aAAa,UAAU,CAAC,CAAC;GACjD,IAAI,SAAS,OAAO,MAAM,IAAI,WAAW,6BAA6B,MAAM;EAC9E,UAAU;GACR,MAAM,KAAK,MAAM;EACnB;CACF;CAEA,MAAM,OAAsB;EAC1B,MAAM,OAAO,MAAM,KAAKA,aAAa,QAAQ,CAAC,CAAC;EAC/C,IAAI,SAAS,QAAQ,MAAM,IAAI,WAAW,4BAA4B,MAAM;CAC9E;CAEA,MAAM,eAAgC;EACpC,IAAI,CAAC,KAAKC,qBAAqB;GAC7B,MAAM,KAAK,MAAM,KAAKD,aAAa,kBAAkB,CAAC,CAAC;GACvD,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,IAAI,WAAW,gCAAgC;GACvE,KAAKC,sBAAsB,GAAG,YAAY;EAC5C;EACA,OAAO,KAAKA;CACd;CAEA,MAAM,UAAU,UAAyC;EACvD,MAAM,WAA0B;GAC9B,MAAM,SAAS;GACf,MAAM,SAAS;GACf,SAAS,SAAS;GAClB,YAAY,SAAS;EACvB;EACA,MAAM,OAAO,MAAM,KAAKD,aAAa,cAAc,CAAC,KAAK,UAAU,QAAQ,CAAC,CAAC;EAC7E,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,IAAI;EAC1B,SAAS,OAAO;GACd,MAAM,IAAI,WAAW,2CAA2C,EAC9D,OAAO,iBAAiB,QAAQ,QAAQ,KAAA,EAC1C,CAAC;EACH;EACA,IAAI,CAAC,oBAAoB,MAAM,KAAK,CAAC,YAAY,MAAM,GACrD,MAAM,IAAI,WAAW,yCAAyC;EAEhE,IAAI,CAAC,sBAAsB,QAAQ,QAAQ,GACzC,MAAM,IAAI,WAAW,+CAA+C;EAEtE,OAAO;CACT;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,OAAO,KAAKA,aAAa,iBAAiB,CAAC,MAAM,SAAS,CAAC;CAC7D;CAEA,MAAM,aAAa,MAAc,YAAqC;EACpE,OAAO,KAAKA,aAAa,iBAAiB,CAAC,MAAM,UAAU,CAAC;CAC9D;CAEA,MAAM,aAAa,MAAc,WAAoC;EACnE,OAAO,KAAKA,aAAa,iBAAiB,CAAC,MAAM,SAAS,CAAC;CAC7D;CAEA,MAAM,aAAa,MAAc,SAAkC;EACjE,OAAO,KAAKA,aAAa,iBAAiB,CAAC,MAAM,OAAO,CAAC;CAC3D;CAEA,MAAM,QAAuB;EAC3B,KAAKD,QAAQ;EACb,KAAK,MAAM,GAAG,aAAa,KAAKN,YAAY;GAC1C,aAAa,SAAS,KAAK;GAC3B,SAAS,OAAO,IAAI,WAAW,eAAe,CAAC;EACjD;EACA,KAAKA,WAAW,MAAM;EACtB,KAAKK,MAAM,MAAM,eAAe;EAChC,KAAKA,OAAO,KAAA;EACZ,IAAI,KAAKd,WAAW,KAAKD,MAAM,MAAM;CACvC;CAEA,MAAMiB,aAAa,QAAgB,QAAmC;EACpE,IAAI,CAAC,KAAKD,OAAO,MAAM,IAAI,WAAW,kBAAkB;EACxD,IAAI,CAAC,KAAKD,MAAM,KAAKF,mBAAmB;EAExC,KAAKM,WAAW;EAChB,MAAM,KAAK,GAAG,KAAKC,UAAU,GAAG,KAAKD;EAErC,MAAM,YAAYE,UAAQ,mBAAmB;GADjB;GAAI;GAAQ;EACO,CAAC,GAAG,KAAKhB,gBAAgB;EAExE,MAAM,QAAQ,cACZ;GACE,MAAM,KAAK;GACX,MAAM,CAAC,IAAI,EAAE,KAAKD,SAAS,MAAM,CAAC;GAClC,SAAS;GACT,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EAC1C,GACA,KAAKF,aACP;EAEA,MAAM,gBAAgB,IAAI,SAAiB,SAAS,WAAW;GAC7D,MAAM,QAAQ,iBAAiB;IAC7B,KAAKQ,WAAW,OAAO,EAAE;IACzB,KAAKC,aAAa,OAAO,EAAE;IAC3B,OAAO,IAAI,WAAW,6BAA6B,QAAQ,CAAC;GAC9D,GAAG,KAAKJ,UAAU;GAClB,KAAKG,WAAW,IAAI,IAAI;IAAE;IAAS;IAAQ;GAAM,CAAC;GAClD,KAAKC,aAAa,IAAI,EAAE;EAC1B,CAAC;EAED,MAAM,KAAKX,MAAM,QAAQ,KAAKY,SAAS,KAAK;EAC5C,OAAO;CACT;AACF"}