@sempdev/semp 0.4.3

package/dist/discovery/lookup.js

@@ -0,0 +1,121 @@
+/**
+ * SEMP_DISCOVERY signed lookup per DISCOVERY.md §4.
+ *
+ * Wire shape:
+ *   - Request body: `{type, step="request", version, id, timestamp,
+ *     addresses, extensions?}`
+ *   - Response body: `{type, step="response", version, id, timestamp,
+ *     results, signature, extensions?}`
+ *
+ * The response is signed by the answering server's domain signing
+ * key with the `SEMP-DISCOVERY:` prefix per ENVELOPE.md §4.3.
+ *
+ * @module
+ */
+import { signSignedDoc, verifySignedDoc } from "../keys/index.js";
+/** Wire-level constants. */
+export const DiscoveryMessageType = "SEMP_DISCOVERY";
+export const DiscoveryStepRequest = "request";
+export const DiscoveryStepResponse = "response";
+export const DiscoveryRecordVersion = "1.0.0";
+export const DiscoverySignaturePrefix = "SEMP-DISCOVERY:";
+/** Sign a {@link DiscoveryResponse} under the answering domain's signing key. */
+export function signDiscoveryResponse(resp, domainPriv, domainKeyId) {
+    if (domainKeyId === "") {
+        throw new Error("discovery: empty domain key_id");
+    }
+    validateDiscoveryResponse(resp, { skipSignatureCheck: true });
+    resp.signature.algorithm = "ed25519";
+    resp.signature.key_id = domainKeyId;
+    resp.signature.value = "";
+    const { signedJSON, signatureB64 } = signSignedDoc({
+        preSignJSON: resp,
+        seed: domainPriv,
+        signaturePath: "signature.value",
+        prefix: DiscoverySignaturePrefix,
+    });
+    resp.signature.value = signedJSON.signature.value;
+    return signatureB64;
+}
+/** Verify a {@link DiscoveryResponse} under the answering domain's public key. */
+export function verifyDiscoveryResponse(resp, domainPub) {
+    validateDiscoveryResponse(resp);
+    if (resp.signature.value === "") {
+        return false;
+    }
+    const { ok } = verifySignedDoc({
+        signedJSON: resp,
+        publicKey: domainPub,
+        signaturePath: "signature.value",
+        prefix: DiscoverySignaturePrefix,
+    });
+    return ok;
+}
+/** Structural validation of a {@link DiscoveryRequest}. Throws on first violation. */
+export function validateDiscoveryRequest(req) {
+    if (req.type !== DiscoveryMessageType) {
+        throw new Error(`discovery: request type ${JSON.stringify(req.type)}, want ${DiscoveryMessageType}`);
+    }
+    if (req.step !== DiscoveryStepRequest) {
+        throw new Error(`discovery: request step ${JSON.stringify(req.step)}, want ${DiscoveryStepRequest}`);
+    }
+    for (const f of ["version", "id", "timestamp"]) {
+        if (typeof req[f] !== "string" || req[f] === "") {
+            throw new Error(`discovery: request missing ${f}`);
+        }
+    }
+    if (Number.isNaN(Date.parse(req.timestamp))) {
+        throw new Error("discovery: request timestamp is not ISO 8601");
+    }
+    if (!Array.isArray(req.addresses) || req.addresses.length === 0) {
+        throw new Error("discovery: request addresses must be a non-empty array");
+    }
+    for (let i = 0; i < req.addresses.length; i++) {
+        if (typeof req.addresses[i] !== "string" || req.addresses[i] === "") {
+            throw new Error(`discovery: request addresses[${i}] missing`);
+        }
+    }
+}
+/** Structural validation of a {@link DiscoveryResponse}. Throws on first violation. */
+export function validateDiscoveryResponse(resp, opts = {}) {
+    if (resp.type !== DiscoveryMessageType) {
+        throw new Error(`discovery: response type ${JSON.stringify(resp.type)}, want ${DiscoveryMessageType}`);
+    }
+    if (resp.step !== DiscoveryStepResponse) {
+        throw new Error(`discovery: response step ${JSON.stringify(resp.step)}, want ${DiscoveryStepResponse}`);
+    }
+    for (const f of ["version", "id", "timestamp"]) {
+        if (typeof resp[f] !== "string" || resp[f] === "") {
+            throw new Error(`discovery: response missing ${f}`);
+        }
+    }
+    if (Number.isNaN(Date.parse(resp.timestamp))) {
+        throw new Error("discovery: response timestamp is not ISO 8601");
+    }
+    if (!Array.isArray(resp.results)) {
+        throw new Error("discovery: response results must be an array");
+    }
+    for (let i = 0; i < resp.results.length; i++) {
+        const r = resp.results[i];
+        if (typeof r.address !== "string" || r.address === "") {
+            throw new Error(`discovery: response results[${i}] missing address`);
+        }
+        if (r.status !== "found" &&
+            r.status !== "not_found" &&
+            r.status !== "unsupported" &&
+            r.status !== "rate_limited" &&
+            r.status !== "deferred") {
+            throw new Error(`discovery: response results[${i}] status ${JSON.stringify(r.status)} is invalid`);
+        }
+        if (!Number.isInteger(r.ttl) || r.ttl < 0) {
+            throw new Error(`discovery: response results[${i}] ttl ${r.ttl} MUST be >= 0`);
+        }
+    }
+    if (typeof resp.signature?.value !== "string") {
+        throw new Error("discovery: response signature.value must be a string");
+    }
+    if (!opts.skipSignatureCheck && resp.signature.value === "") {
+        throw new Error("discovery: response is unsigned");
+    }
+}
+//# sourceMappingURL=lookup.js.map

package/dist/discovery/lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.js","sourceRoot":"","sources":["../../src/discovery/lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAElE,4BAA4B;AAC5B,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAqD1D,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CACnC,IAAuB,EACvB,UAAsB,EACtB,WAAmB;IAEnB,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,yBAAyB,CAAC,IAAI,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;IACrC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,WAAW,CAAC;IACpC,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;IAC1B,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC;QACjD,WAAW,EAAE,IAA0C;QACvD,IAAI,EAAE,UAAU;QAChB,aAAa,EAAE,iBAAiB;QAChC,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,KAAK,GAAI,UAAU,CAAC,SAA+B,CAAC,KAAK,CAAC;IACzE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CACrC,IAAuB,EACvB,SAAqB;IAErB,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC;QAC7B,UAAU,EAAE,IAA0C;QACtD,SAAS,EAAE,SAAS;QACpB,aAAa,EAAE,iBAAiB;QAChC,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,wBAAwB,CAAC,GAAqB;IAC5D,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,oBAAoB,EAAE,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,oBAAoB,EAAE,CACpF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAU,EAAE,CAAC;QACxD,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,WAAW,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,yBAAyB,CACvC,IAAuB,EACvB,OAAyC,EAAE;IAE3C,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,oBAAoB,EAAE,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,qBAAqB,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAU,EAAE,CAAC;QACxD,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;QACvE,CAAC;QACD,IACE,CAAC,CAAC,MAAM,KAAK,OAAO;YACpB,CAAC,CAAC,MAAM,KAAK,WAAW;YACxB,CAAC,CAAC,MAAM,KAAK,aAAa;YAC1B,CAAC,CAAC,MAAM,KAAK,cAAc;YAC3B,CAAC,CAAC,MAAM,KAAK,UAAU,EACvB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+BAA+B,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/discovery/onion.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Tor onion-service domain validation per DISCOVERY.md §2.5.1.
+ *
+ * v2 onion addresses (16-character labels) are cryptographically
+ * deprecated and MUST NOT be used. Only v3 (56-character base32
+ * labels) is permitted by the spec.
+ *
+ * @module
+ */
+/** The label that marks a Tor onion-service domain. */
+export declare const OnionSuffix = ".onion";
+/** Character count of a v3 onion-service identifier (the only permitted version). */
+export declare const OnionV3LabelLength = 56;
+/**
+ * Whether `d` ends in `.onion`. Case-insensitive per the standard
+ * convention for the `.onion` TLD.
+ */
+export declare function isOnionDomain(d: string): boolean;
+/**
+ * Validate `d` as a Tor v3 onion domain. Throws on the first
+ * violation; returns nothing on success.
+ *
+ * Rejects:
+ *  - non-`.onion` domains
+ *  - empty labels
+ *  - v2 (16-char) onion addresses (cryptographically deprecated)
+ *  - any other length than 56 chars
+ *  - any character outside the v3 base32 alphabet (`a-z` + `2-7`)
+ *
+ * Multi-label onion domains (`sub.<v3-label>.onion`) are accepted
+ * when the rightmost label before `.onion` is the v3 identifier.
+ */
+export declare function validateOnionDomain(d: string): void;
+//# sourceMappingURL=onion.d.ts.map

package/dist/discovery/onion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onion.d.ts","sourceRoot":"","sources":["../../src/discovery/onion.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,uDAAuD;AACvD,eAAO,MAAM,WAAW,WAAW,CAAC;AAEpC,qFAAqF;AACrF,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CA+BnD"}

package/dist/discovery/onion.js

@@ -0,0 +1,61 @@
+/**
+ * Tor onion-service domain validation per DISCOVERY.md §2.5.1.
+ *
+ * v2 onion addresses (16-character labels) are cryptographically
+ * deprecated and MUST NOT be used. Only v3 (56-character base32
+ * labels) is permitted by the spec.
+ *
+ * @module
+ */
+/** The label that marks a Tor onion-service domain. */
+export const OnionSuffix = ".onion";
+/** Character count of a v3 onion-service identifier (the only permitted version). */
+export const OnionV3LabelLength = 56;
+/**
+ * Whether `d` ends in `.onion`. Case-insensitive per the standard
+ * convention for the `.onion` TLD.
+ */
+export function isOnionDomain(d) {
+    return d.toLowerCase().endsWith(OnionSuffix);
+}
+/**
+ * Validate `d` as a Tor v3 onion domain. Throws on the first
+ * violation; returns nothing on success.
+ *
+ * Rejects:
+ *  - non-`.onion` domains
+ *  - empty labels
+ *  - v2 (16-char) onion addresses (cryptographically deprecated)
+ *  - any other length than 56 chars
+ *  - any character outside the v3 base32 alphabet (`a-z` + `2-7`)
+ *
+ * Multi-label onion domains (`sub.<v3-label>.onion`) are accepted
+ * when the rightmost label before `.onion` is the v3 identifier.
+ */
+export function validateOnionDomain(d) {
+    if (!isOnionDomain(d)) {
+        throw new Error("discovery: not an .onion domain");
+    }
+    const lower = d.toLowerCase();
+    const trimmed = lower.slice(0, lower.length - OnionSuffix.length);
+    if (trimmed === "") {
+        throw new Error("discovery: .onion domain has empty label");
+    }
+    const labels = trimmed.split(".");
+    const onionLabel = labels[labels.length - 1] ?? "";
+    if (onionLabel.length === 16) {
+        throw new Error("discovery: version-2 .onion addresses are not supported; use a v3 address (56-character label)");
+    }
+    if (onionLabel.length !== OnionV3LabelLength) {
+        throw new Error("discovery: .onion label is not a valid v3 identifier (expected 56 characters)");
+    }
+    for (let i = 0; i < onionLabel.length; i++) {
+        const c = onionLabel.charCodeAt(i);
+        const isLower = c >= 0x61 /* a */ && c <= 0x7a /* z */;
+        const isDigit2to7 = c >= 0x32 /* 2 */ && c <= 0x37 /* 7 */;
+        if (!isLower && !isDigit2to7) {
+            throw new Error("discovery: .onion label contains characters outside the v3 base32 alphabet");
+        }
+    }
+}
+//# sourceMappingURL=onion.js.map

package/dist/discovery/onion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onion.js","sourceRoot":"","sources":["../../src/discovery/onion.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,uDAAuD;AACvD,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC;AAEpC,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC;QACvD,MAAM,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC;QAC3D,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/discovery/partition.d.ts

@@ -0,0 +1,96 @@
+/**
+ * User-partitioning strategy per DISCOVERY.md §2.4.
+ *
+ * Large domains advertise a partition strategy via a
+ * `_semp-partition.<domain>` TXT record. Three strategies are
+ * defined: `alpha` (split alphabetically), `hash` (SHA-256 mod N),
+ * and `lookup` (delegate to a designated partition server).
+ *
+ * @module
+ */
+import { type DNSLookup } from "./dns.js";
+/** Partition strategy enum per §2.4. */
+export type PartitionStrategy = "alpha" | "hash" | "lookup";
+/** Inclusive lowercase ASCII range mapped to a server hostname. */
+export interface AlphaRange {
+    /** Inclusive starting char code in `[a, z]`. */
+    start_char: string;
+    /** Inclusive ending char code in `[a, z]`. */
+    end_char: string;
+    server?: string;
+}
+/** Parsed `_semp-partition.<domain>` TXT record. */
+export interface PartitionConfig {
+    /** SEMP partition protocol version. Always `"semp1"` for the initial spec revision. */
+    version: string;
+    strategy: PartitionStrategy;
+    /** Number of partition servers. Used only by `hash`. */
+    servers?: number;
+    /** Hash algorithm for `hash`. Defaults to `"sha256"` if empty. */
+    algorithm?: string;
+    /** Domain this config applies to. */
+    domain: string;
+    /**
+     * If non-empty, overrides the default 26-letter mapping for
+     * `alpha`. Each entry maps a contiguous range of first-characters
+     * to a server hostname. The default mapping splits `a-z` into
+     * roughly equal groups of `servers` size and resolves via
+     * `_semp-partition-<range>.<domain>` SRV records.
+     */
+    alpha_ranges?: AlphaRange[];
+}
+/**
+ * Construct the even-split default ranges used by the §2.4 example:
+ * 4 ranges covering `a-f`, `g-m`, `n-s`, `t-z` when `servers === 4`.
+ * Generalized to any server count `>= 1`.
+ */
+export declare function defaultAlphaRanges(servers: number): AlphaRange[];
+/**
+ * Callback used by `strategy === "lookup"`. Queries the partition
+ * lookup server (published at `_semp-partition-lookup.<domain>` SRV)
+ * and returns the hostname of the delivery server that handles
+ * `address`. The discovery package does not prescribe the wire
+ * format of the lookup query — DISCOVERY.md §2.4 says "the
+ * partition server address is published as a separate SRV record"
+ * and leaves the query protocol to the implementation.
+ */
+export type PartitionLookupFunc = (address: string) => Promise<string>;
+/** Inputs to {@link resolvePartition}. */
+export interface PartitionResolverConfig {
+    /**
+     * DNS lookup backend. Required for `alpha` and `hash` (to resolve
+     * `_semp-partition-<X>.<domain>` SRV records). Unused by
+     * `lookup`.
+     */
+    dns?: DNSLookup;
+    /** Required for `strategy === "lookup"`. Ignored otherwise. */
+    lookupFunc?: PartitionLookupFunc;
+}
+/**
+ * Return the SEMP server hostname that handles `address` according
+ * to `config`.
+ *
+ *   - `alpha`: extract the first character of the local part, map
+ *     it to the range containing it, and return the server for that
+ *     range. If `config.alpha_ranges` is empty, resolve via
+ *     `_semp-partition-<start>-<end>.<domain>` SRV.
+ *   - `hash`: compute `SHA-256(address) mod config.servers` to get
+ *     an index, then resolve via `_semp-partition-<index>.<domain>`
+ *     SRV.
+ *   - `lookup`: delegate to `resolverConfig.lookupFunc`.
+ */
+export declare function resolvePartition(config: PartitionConfig, resolverConfig: PartitionResolverConfig, address: string): Promise<string>;
+/**
+ * Parse a `_semp-partition.<domain>` TXT record value into a
+ * {@link PartitionConfig}. The format follows the same
+ * semicolon-separated `key=value` convention as the discovery TXT
+ * record:
+ *
+ * ```
+ * "v=semp1;strategy=hash;servers=8;algorithm=sha256"
+ * ```
+ *
+ * Unknown keys are silently ignored for forward compatibility.
+ */
+export declare function parsePartitionTXT(domain: string, txt: string): PartitionConfig;
+//# sourceMappingURL=partition.d.ts.map

package/dist/discovery/partition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partition.d.ts","sourceRoot":"","sources":["../../src/discovery/partition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C,wCAAwC;AACxC,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5D,mEAAmE;AACnE,MAAM,WAAW,UAAU;IACzB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC;CAC7B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,CA2BhE;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEvE,0CAA0C;AAC1C,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,eAAe,EACvB,cAAc,EAAE,uBAAuB,EACvC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAmBjB;AA+ID;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,eAAe,CAyDjB"}

package/dist/discovery/partition.js

@@ -0,0 +1,247 @@
+/**
+ * User-partitioning strategy per DISCOVERY.md §2.4.
+ *
+ * Large domains advertise a partition strategy via a
+ * `_semp-partition.<domain>` TXT record. Three strategies are
+ * defined: `alpha` (split alphabetically), `hash` (SHA-256 mod N),
+ * and `lookup` (delegate to a designated partition server).
+ *
+ * @module
+ */
+import { sha256 } from "@noble/hashes/sha2.js";
+import {} from "./dns.js";
+/**
+ * Construct the even-split default ranges used by the §2.4 example:
+ * 4 ranges covering `a-f`, `g-m`, `n-s`, `t-z` when `servers === 4`.
+ * Generalized to any server count `>= 1`.
+ */
+export function defaultAlphaRanges(servers) {
+    if (servers <= 0) {
+        return [];
+    }
+    if (servers > 26) {
+        servers = 26;
+    }
+    const out = [];
+    const charsPerServer = Math.floor(26 / servers);
+    const remainder = 26 % servers;
+    let start = 0x61; // 'a'
+    for (let i = 0; i < servers; i++) {
+        let width = charsPerServer;
+        if (i < remainder) {
+            width += 1;
+        }
+        let end = start + width - 1;
+        if (end > 0x7a) {
+            end = 0x7a;
+        }
+        out.push({
+            start_char: String.fromCharCode(start),
+            end_char: String.fromCharCode(end),
+        });
+        start = end + 1;
+    }
+    return out;
+}
+/**
+ * Return the SEMP server hostname that handles `address` according
+ * to `config`.
+ *
+ *   - `alpha`: extract the first character of the local part, map
+ *     it to the range containing it, and return the server for that
+ *     range. If `config.alpha_ranges` is empty, resolve via
+ *     `_semp-partition-<start>-<end>.<domain>` SRV.
+ *   - `hash`: compute `SHA-256(address) mod config.servers` to get
+ *     an index, then resolve via `_semp-partition-<index>.<domain>`
+ *     SRV.
+ *   - `lookup`: delegate to `resolverConfig.lookupFunc`.
+ */
+export async function resolvePartition(config, resolverConfig, address) {
+    if (address === "") {
+        throw new Error("discovery: empty address");
+    }
+    switch (config.strategy) {
+        case "alpha":
+            return resolveAlpha(config, resolverConfig, address);
+        case "hash":
+            return resolveHash(config, resolverConfig, address);
+        case "lookup":
+            if (resolverConfig.lookupFunc === undefined) {
+                throw new Error("discovery: strategy=lookup requires a lookupFunc");
+            }
+            return resolverConfig.lookupFunc(address);
+        default:
+            throw new Error(`discovery: unknown partition strategy ${JSON.stringify(config.strategy)}`);
+    }
+}
+async function resolveAlpha(config, resolverConfig, address) {
+    const local = localPart(address);
+    if (local === "") {
+        throw new Error("discovery: address has no local part");
+    }
+    const firstChar = firstLowerChar(local);
+    // Fast path: pre-resolved alpha_ranges with non-empty server.
+    if (config.alpha_ranges !== undefined && config.alpha_ranges.length > 0) {
+        for (const r of config.alpha_ranges) {
+            if (firstChar >= r.start_char.charCodeAt(0) &&
+                firstChar <= r.end_char.charCodeAt(0)) {
+                if (r.server !== undefined && r.server !== "") {
+                    return r.server;
+                }
+                // Fall through to SRV path with this range's bounds.
+                return resolveSRV(resolverConfig, config.domain, `semp-partition-${r.start_char}-${r.end_char}`);
+            }
+        }
+        // Fallback: non-alphabetic first character → last range.
+        const last = config.alpha_ranges[config.alpha_ranges.length - 1];
+        if (last.server !== undefined && last.server !== "") {
+            return last.server;
+        }
+        return resolveSRV(resolverConfig, config.domain, `semp-partition-${last.start_char}-${last.end_char}`);
+    }
+    // DNS path: construct ranges from defaultAlphaRanges and resolve
+    // each range's SRV record.
+    const ranges = defaultAlphaRanges(config.servers ?? 0);
+    if (ranges.length === 0) {
+        throw new Error("discovery: alpha partition requires at least one server");
+    }
+    let matched = ranges[ranges.length - 1]; // default to last
+    for (const r of ranges) {
+        if (firstChar >= r.start_char.charCodeAt(0) &&
+            firstChar <= r.end_char.charCodeAt(0)) {
+            matched = r;
+            break;
+        }
+    }
+    return resolveSRV(resolverConfig, config.domain, `semp-partition-${matched.start_char}-${matched.end_char}`);
+}
+async function resolveHash(config, resolverConfig, address) {
+    const servers = config.servers ?? 0;
+    if (servers <= 0) {
+        throw new Error("discovery: hash partition requires servers > 0");
+    }
+    const sum = sha256(new TextEncoder().encode(address.toLowerCase()));
+    // Use the first 8 bytes as a big-endian uint64 for the mod
+    // operation. Fits in a safe-integer when `servers` is small.
+    let big = 0n;
+    for (let i = 0; i < 8; i++) {
+        big = (big << 8n) | BigInt(sum[i] ?? 0);
+    }
+    const idx = big % BigInt(servers);
+    return resolveSRV(resolverConfig, config.domain, `semp-partition-${idx.toString()}`);
+}
+async function resolveSRV(resolverConfig, domain, service) {
+    if (resolverConfig.dns === undefined) {
+        throw new Error("discovery: DNS lookup not configured");
+    }
+    const name = `_${service}._tcp.${domain}`;
+    const records = await resolverConfig.dns.lookupSRV(name);
+    if (records.length === 0) {
+        throw new Error(`discovery: no SRV records for ${name}`);
+    }
+    let best = records[0];
+    for (let i = 1; i < records.length; i++) {
+        if (records[i].priority < best.priority) {
+            best = records[i];
+        }
+    }
+    return best.target.replace(/\.$/, "");
+}
+/** Extract the part before the last `@` in `address`. */
+function localPart(address) {
+    const i = address.lastIndexOf("@");
+    if (i < 0) {
+        return address;
+    }
+    return address.slice(0, i);
+}
+/**
+ * First character of `s` lowercased if it is a lowercase ASCII
+ * letter, or `~` (the highest printable ASCII, which sorts after
+ * `z`) as a fallback for non-alphabetic first characters. Forces
+ * non-alpha users into the last range.
+ */
+function firstLowerChar(s) {
+    if (s.length === 0) {
+        return 0x7e; // '~'
+    }
+    let c = s.charCodeAt(0);
+    // We can't see surrogate pairs as anything other than non-alpha;
+    // a non-BMP first char hits the fallback below.
+    if (c >= 0x41 /* A */ && c <= 0x5a /* Z */) {
+        c += 0x61 - 0x41;
+    }
+    if (c >= 0x61 /* a */ && c <= 0x7a /* z */) {
+        return c;
+    }
+    return 0x7e; // '~'
+}
+/**
+ * Parse a `_semp-partition.<domain>` TXT record value into a
+ * {@link PartitionConfig}. The format follows the same
+ * semicolon-separated `key=value` convention as the discovery TXT
+ * record:
+ *
+ * ```
+ * "v=semp1;strategy=hash;servers=8;algorithm=sha256"
+ * ```
+ *
+ * Unknown keys are silently ignored for forward compatibility.
+ */
+export function parsePartitionTXT(domain, txt) {
+    if (txt.trim() === "") {
+        throw new Error("discovery: empty partition TXT record");
+    }
+    const cfg = {
+        version: "",
+        strategy: "alpha",
+        domain,
+    };
+    for (const kv of txt.split(";")) {
+        const trimmed = kv.trim();
+        const eq = trimmed.indexOf("=");
+        if (eq < 0) {
+            continue;
+        }
+        const key = trimmed.slice(0, eq).trim();
+        const val = trimmed.slice(eq + 1).trim();
+        switch (key) {
+            case "v":
+                cfg.version = val;
+                break;
+            case "strategy":
+                if (val !== "alpha" && val !== "hash" && val !== "lookup") {
+                    throw new Error(`discovery: invalid partition strategy ${JSON.stringify(val)}`);
+                }
+                cfg.strategy = val;
+                break;
+            case "servers": {
+                let n = 0;
+                for (let i = 0; i < val.length; i++) {
+                    const c = val.charCodeAt(i);
+                    if (c < 0x30 || c > 0x39) {
+                        throw new Error(`discovery: invalid servers count ${JSON.stringify(val)}`);
+                    }
+                    n = n * 10 + (c - 0x30);
+                }
+                cfg.servers = n;
+                break;
+            }
+            case "algorithm":
+                cfg.algorithm = val;
+                break;
+            default:
+                // unknown key — skip (forward compat).
+                break;
+        }
+    }
+    if (cfg.version === "") {
+        throw new Error("discovery: partition TXT missing version (v=)");
+    }
+    // Strategy was defaulted to "alpha"; it must be set explicitly.
+    if (!txt.includes("strategy=")) {
+        throw new Error("discovery: partition TXT missing strategy");
+    }
+    return cfg;
+}
+//# sourceMappingURL=partition.js.map

package/dist/discovery/partition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partition.js","sourceRoot":"","sources":["../../src/discovery/partition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAkB,MAAM,UAAU,CAAC;AAmC1C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;QACjB,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC;IAC/B,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,IAAI,KAAK,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;YAClB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,IAAI,GAAG,GAAG,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;YACf,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;YACtC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC;SACnC,CAAC,CAAC;QACH,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAyBD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAuB,EACvB,cAAuC,EACvC,OAAe;IAEf,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QACvD,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QACtD,KAAK,QAAQ;YACX,IAAI,cAAc,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC5C;YACE,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC3E,CAAC;IACN,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAAuB,EACvB,cAAuC,EACvC,OAAe;IAEf,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAExC,8DAA8D;IAC9D,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACpC,IACE,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;gBACvC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EACrC,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;oBAC9C,OAAO,CAAC,CAAC,MAAM,CAAC;gBAClB,CAAC;gBACD,qDAAqD;gBACrD,OAAO,UAAU,CACf,cAAc,EACd,MAAM,CAAC,MAAM,EACb,kBAAkB,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,EAAE,CAC/C,CAAC;YACJ,CAAC;QACH,CAAC;QACD,yDAAyD;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAClE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QACD,OAAO,UAAU,CACf,cAAc,EACd,MAAM,CAAC,MAAM,EACb,kBAAkB,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,CACrD,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,2BAA2B;IAC3B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,kBAAkB;IAC5D,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IACE,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;YACvC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EACrC,CAAC;YACD,OAAO,GAAG,CAAC,CAAC;YACZ,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CACf,cAAc,EACd,MAAM,CAAC,MAAM,EACb,kBAAkB,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE,CAC3D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,MAAuB,EACvB,cAAuC,EACvC,OAAe;IAEf,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IACpC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACpE,2DAA2D;IAC3D,6DAA6D;IAC7D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,UAAU,CACf,cAAc,EACd,MAAM,CAAC,MAAM,EACb,kBAAkB,GAAG,CAAC,QAAQ,EAAE,EAAE,CACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,cAAuC,EACvC,MAAc,EACd,OAAe;IAEf,IAAI,cAAc,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,OAAO,SAAS,MAAM,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,yDAAyD;AACzD,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,CAAC,MAAM;IACrB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxB,iEAAiE;IACjE,gDAAgD;IAChD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3C,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,MAAM;AACrB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,GAAW;IAEX,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GAAoB;QAC3B,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,OAAO;QACjB,MAAM;KACP,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,GAAG;gBACN,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC;gBAClB,MAAM;YACR,KAAK,UAAU;gBACb,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAC/D,CAAC;gBACJ,CAAC;gBACD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC;gBACnB,MAAM;YACR,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACpC,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAC5B,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;wBACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC7E,CAAC;oBACD,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC1B,CAAC;gBACD,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;gBAChB,MAAM;YACR,CAAC;YACD,KAAK,WAAW;gBACd,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC;gBACpB,MAAM;YACR;gBACE,uCAAuC;gBACvC,MAAM;QACV,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,gEAAgE;IAChE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}