@sempdev/semp 0.4.3

package/dist/handshake/driver.d.ts

@@ -0,0 +1,126 @@
+/**
+ * Handshake client driver per HANDSHAKE.md §2.
+ *
+ * Drives one transport through the v1 handshake flow:
+ *
+ *   1. Generate a client ephemeral X25519 keypair and a 32-byte
+ *      client nonce.
+ *   2. Build and send INIT (capabilities, ephemeral pub, nonce,
+ *      transport identifier).
+ *   3. Receive RESPONSE. Verify the server signature with the
+ *      pinned domain pub. Pull the server's ephemeral, server
+ *      nonce, and session_id.
+ *   4. Compute the X25519 shared secret. Derive the five SEMP
+ *      session keys via HKDF-SHA-512 with salt =
+ *      `client_nonce || server_nonce`.
+ *   5. Compute the confirmation hash over canonical(INIT) ||
+ *      canonical(RESPONSE).
+ *   6. Build and send CONFIRM with the confirmation hash and an
+ *      opaque identity_proof (the v1 driver leaves identity_proof
+ *      empty; a future revision will bind a per-session identity
+ *      claim there per §2.5).
+ *   7. Receive ACCEPTED (or REJECTED). On REJECTED, surface the
+ *      reason_code as a typed error.
+ *
+ * The PQ suite path is structurally identical; only the KEM is
+ * different. The v1 driver supports the baseline suite end to end;
+ * PQ requires hooking the hybrid KEM in step 4 and is left as a
+ * straightforward extension.
+ *
+ * @module
+ */
+import { type SessionKeys } from "../crypto/index.js";
+import { Session } from "../session/index.js";
+import type { Transport } from "../transport/index.js";
+import { type Capabilities } from "./messages.js";
+/** Configuration for the client side of a handshake. */
+export interface ClientConfig {
+    /** Algorithm suite to negotiate. v1 driver: "x25519-chacha20-poly1305". */
+    suite: "x25519-chacha20-poly1305";
+    /** Capability set to advertise. */
+    capabilities: Capabilities;
+    /** Transport identifier ("ws", "h2", "quic"). Echoed in INIT. */
+    transport: string;
+    /**
+     * Server domain signing public key (32-byte Ed25519). Pre-shared
+     * via discovery; the client uses it to verify the server's
+     * RESPONSE and ACCEPTED signatures.
+     */
+    serverDomainPub: Uint8Array;
+    /**
+     * Optional pre-generated client ephemeral. If omitted, the driver
+     * generates a fresh keypair via globalThis.crypto. Tests pin this
+     * to make the run deterministic.
+     */
+    clientEphemeralPriv?: Uint8Array;
+    /**
+     * Optional client nonce. If omitted, the driver generates 32
+     * bytes of fresh entropy.
+     */
+    clientNonce?: Uint8Array;
+    /**
+     * Optional identity-proof material. When supplied, the driver
+     * constructs a proper §2.5.2 block: identity_signature over
+     * SEMP-IDENTITY: || session_id || confirmation_hash, then
+     * AEAD-Seal under K_enc_c2s with AAD = session_id.
+     *
+     * When omitted (the default), the driver leaves identity_proof
+     * empty — the higher-level client wraps runClient with its
+     * own auth supply.
+     */
+    identity?: {
+        clientId: string;
+        /** Full address: user@domain. */
+        clientIdentity: string;
+        /** 32-byte Ed25519 secret seed for the long-term identity key. */
+        longTermSeed: Uint8Array;
+        /** Fingerprint of the long-term public key. */
+        longTermKeyId: string;
+        /**
+         * Optional 12-byte AEAD nonce for deterministic tests. Production
+         * callers omit this and let the driver source fresh entropy.
+         */
+        proofNonce?: Uint8Array;
+    };
+}
+/**
+ * Outcome of a successful handshake. The lower-level driver returns
+ * the bare ClientSession structure; {@link runClient} wraps it in
+ * a {@link Session} object that owns the transport.
+ */
+export interface ClientSession {
+    sessionId: string;
+    sessionTTL: number;
+    permissions: string[];
+    keys: SessionKeys;
+    /** Server identity proof from the RESPONSE (forwarded for higher layers). */
+    serverIdentityProofKeyId: string;
+    /** Server identity proof signature (opaque base64; per-application). */
+    serverIdentityProofSignature: string;
+    /** ACCEPTED extensions echoed back from the server. */
+    extensions: Record<string, unknown>;
+    /** Optional resumption ticket for later resume. */
+    resumptionTicket?: {
+        value: string;
+        expires_at: string;
+    };
+}
+/** Error thrown when the server rejects the handshake. */
+export declare class HandshakeRejectedError extends Error {
+    readonly sessionId: string;
+    readonly reasonCode: string;
+    readonly reason: string | undefined;
+    constructor(sessionId: string, reasonCode: string, reason: string | undefined);
+}
+/**
+ * Drive a handshake to completion over `transport`. Resolves with a
+ * {@link Session} that owns `transport` and the derived session
+ * keys; rejects with {@link HandshakeRejectedError} on a server
+ * REJECTED, or a generic Error on protocol violation.
+ *
+ * On error the transport is closed so the peer's pending `receive`
+ * unblocks. Successful completion leaves the transport owned by
+ * the returned Session — closing the Session closes the transport.
+ */
+export declare function runClient(transport: Transport, config: ClientConfig): Promise<Session>;
+//# sourceMappingURL=driver.d.ts.map

package/dist/handshake/driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../src/handshake/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EACL,KAAK,WAAW,EAKjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIvD,OAAO,EAEL,KAAK,YAAY,EAQlB,MAAM,eAAe,CAAC;AAEvB,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC3B,2EAA2E;IAC3E,KAAK,EAAE,0BAA0B,CAAC;IAClC,mCAAmC;IACnC,YAAY,EAAE,YAAY,CAAC;IAC3B,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,eAAe,EAAE,UAAU,CAAC;IAC5B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,UAAU,CAAC;IACjC;;;OAGG;IACH,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,iCAAiC;QACjC,cAAc,EAAE,MAAM,CAAC;QACvB,kEAAkE;QAClE,YAAY,EAAE,UAAU,CAAC;QACzB,+CAA+C;QAC/C,aAAa,EAAE,MAAM,CAAC;QACtB;;;WAGG;QACH,UAAU,CAAC,EAAE,UAAU,CAAC;KACzB,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,6EAA6E;IAC7E,wBAAwB,EAAE,MAAM,CAAC;IACjC,wEAAwE;IACxE,4BAA4B,EAAE,MAAM,CAAC;IACrC,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,mDAAmD;IACnD,gBAAgB,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1D;AAED,0DAA0D;AAC1D,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;gBACxB,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS;CAM9E;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAC7B,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,OAAO,CAAC,CA6BlB"}

package/dist/handshake/driver.js

@@ -0,0 +1,251 @@
+/**
+ * Handshake client driver per HANDSHAKE.md §2.
+ *
+ * Drives one transport through the v1 handshake flow:
+ *
+ *   1. Generate a client ephemeral X25519 keypair and a 32-byte
+ *      client nonce.
+ *   2. Build and send INIT (capabilities, ephemeral pub, nonce,
+ *      transport identifier).
+ *   3. Receive RESPONSE. Verify the server signature with the
+ *      pinned domain pub. Pull the server's ephemeral, server
+ *      nonce, and session_id.
+ *   4. Compute the X25519 shared secret. Derive the five SEMP
+ *      session keys via HKDF-SHA-512 with salt =
+ *      `client_nonce || server_nonce`.
+ *   5. Compute the confirmation hash over canonical(INIT) ||
+ *      canonical(RESPONSE).
+ *   6. Build and send CONFIRM with the confirmation hash and an
+ *      opaque identity_proof (the v1 driver leaves identity_proof
+ *      empty; a future revision will bind a per-session identity
+ *      claim there per §2.5).
+ *   7. Receive ACCEPTED (or REJECTED). On REJECTED, surface the
+ *      reason_code as a typed error.
+ *
+ * The PQ suite path is structurally identical; only the KEM is
+ * different. The v1 driver supports the baseline suite end to end;
+ * PQ requires hooking the hybrid KEM in step 4 and is left as a
+ * straightforward extension.
+ *
+ * @module
+ */
+import { marshal as canonicalMarshal } from "../canonical/index.js";
+import { deriveSessionKeysWithResumption, newHKDFSHA512, x25519Agree, x25519PublicKey, } from "../crypto/index.js";
+import { fingerprint, verify as ed25519Verify } from "../keys/index.js";
+import { Session } from "../session/index.js";
+import { confirmationHash } from "./confirm.js";
+import { composeIdentityProof } from "./identity.js";
+import { HandshakePrefix, buildConfirm, buildInit, } from "./messages.js";
+/** Error thrown when the server rejects the handshake. */
+export class HandshakeRejectedError extends Error {
+    sessionId;
+    reasonCode;
+    reason;
+    constructor(sessionId, reasonCode, reason) {
+        super(`handshake rejected: ${reasonCode}${reason !== undefined ? ` (${reason})` : ""}`);
+        this.sessionId = sessionId;
+        this.reasonCode = reasonCode;
+        this.reason = reason;
+    }
+}
+/**
+ * Drive a handshake to completion over `transport`. Resolves with a
+ * {@link Session} that owns `transport` and the derived session
+ * keys; rejects with {@link HandshakeRejectedError} on a server
+ * REJECTED, or a generic Error on protocol violation.
+ *
+ * On error the transport is closed so the peer's pending `receive`
+ * unblocks. Successful completion leaves the transport owned by
+ * the returned Session — closing the Session closes the transport.
+ */
+export async function runClient(transport, config) {
+    if (config.suite !== "x25519-chacha20-poly1305") {
+        throw new Error(`handshake: v1 driver only supports baseline suite, got ${config.suite}`);
+    }
+    try {
+        const result = await runClientInner(transport, config);
+        return new Session({
+            role: "client",
+            sessionId: result.sessionId,
+            sessionTTL: result.sessionTTL,
+            establishedAt: new Date(),
+            permissions: result.permissions,
+            keys: result.keys,
+            transport,
+            ...(result.resumptionTicket !== undefined
+                ? { resumptionTicket: result.resumptionTicket }
+                : {}),
+            serverIdentityProofKeyId: result.serverIdentityProofKeyId,
+            serverIdentityProofSignature: result.serverIdentityProofSignature,
+            extensions: result.extensions,
+        });
+    }
+    catch (err) {
+        try {
+            await transport.close();
+        }
+        catch {
+            // already closed
+        }
+        throw err;
+    }
+}
+async function runClientInner(transport, config) {
+    // Step 1: ephemeral + nonce.
+    const ephPriv = config.clientEphemeralPriv ?? randomBytes(32);
+    const ephPub = x25519PublicKey(ephPriv);
+    const clientNonce = config.clientNonce ?? randomBytes(32);
+    const ephKeyId = fingerprint(ephPub);
+    // Step 2: INIT.
+    const init = buildInit({
+        nonce: base64Encode(clientNonce),
+        transport: config.transport,
+        clientEphemeralKey: {
+            algorithm: config.suite,
+            key: base64Encode(ephPub),
+            key_id: ephKeyId,
+        },
+        capabilities: config.capabilities,
+    });
+    const initCanonical = canonicalMarshal(init);
+    await transport.send(initCanonical);
+    // Step 3: RESPONSE.
+    const respBytes = await receiveOrThrow(transport, "response");
+    const respMsg = parseHandshakeMessage(respBytes);
+    if (respMsg.step === "rejected") {
+        const rej = respMsg;
+        throw new HandshakeRejectedError(rej.session_id, rej.reason_code, rej.reason);
+    }
+    if (respMsg.step !== "response") {
+        throw new Error(`handshake: expected step="response", got "${respMsg.step}"`);
+    }
+    const resp = respMsg;
+    verifyServerSignature(resp, "server_signature", config.serverDomainPub);
+    const serverNonce = base64Decode(resp.server_nonce);
+    const serverEphPub = base64Decode(resp.server_ephemeral_key.key);
+    // Step 4: derive session keys.
+    const sharedSecret = x25519Agree(ephPriv, serverEphPub);
+    const kdf = newHKDFSHA512();
+    const keys = deriveSessionKeysWithResumption(kdf, sharedSecret, clientNonce, serverNonce);
+    // Step 5: confirmation hash.
+    const respCanonical = canonicalMarshal(resp);
+    const confirmHashBytes = confirmationHash(initCanonical, respCanonical);
+    // Step 6: CONFIRM. If `config.identity` is supplied, build the
+    // §2.5.2 encrypted proof block; otherwise leave identity_proof
+    // empty (the spec permits a placeholder for tests that don't
+    // exercise identity verification).
+    let identityProofB64 = "";
+    if (config.identity !== undefined) {
+        identityProofB64 = composeIdentityProof({
+            clientId: config.identity.clientId,
+            clientIdentity: config.identity.clientIdentity,
+            clientLongTermSeed: config.identity.longTermSeed,
+            clientLongTermKeyId: config.identity.longTermKeyId,
+            sessionId: resp.session_id,
+            confirmationHash: confirmHashBytes,
+            encC2S: keys.encC2S,
+            ...(config.identity.proofNonce !== undefined
+                ? { proofNonce: config.identity.proofNonce }
+                : {}),
+        }).identityProofB64;
+    }
+    const confirm = buildConfirm({
+        sessionId: resp.session_id,
+        confirmationHashB64: base64Encode(confirmHashBytes),
+        identityProofB64,
+    });
+    await transport.send(canonicalMarshal(confirm));
+    // Step 7: ACCEPTED (or REJECTED).
+    const acceptedBytes = await receiveOrThrow(transport, "accepted");
+    const acceptedMsg = parseHandshakeMessage(acceptedBytes);
+    if (acceptedMsg.step === "rejected") {
+        const rej = acceptedMsg;
+        throw new HandshakeRejectedError(rej.session_id, rej.reason_code, rej.reason);
+    }
+    if (acceptedMsg.step !== "accepted") {
+        throw new Error(`handshake: expected step="accepted", got "${acceptedMsg.step}"`);
+    }
+    const accepted = acceptedMsg;
+    verifyServerSignature(accepted, "server_signature", config.serverDomainPub);
+    return {
+        sessionId: accepted.session_id,
+        sessionTTL: accepted.session_ttl,
+        permissions: accepted.permissions,
+        keys,
+        serverIdentityProofKeyId: resp.server_identity_proof.key_id,
+        serverIdentityProofSignature: resp.server_identity_proof.signature,
+        extensions: accepted.extensions,
+        ...(accepted.resumption_ticket !== undefined
+            ? { resumptionTicket: accepted.resumption_ticket }
+            : {}),
+    };
+}
+// ---------------------------------------------------------------------------
+// Internals
+async function receiveOrThrow(transport, expected) {
+    const msg = await transport.receive();
+    if (msg === null) {
+        throw new Error(`handshake: connection closed waiting for ${expected}`);
+    }
+    return msg;
+}
+function parseHandshakeMessage(bytes) {
+    const text = new TextDecoder().decode(bytes);
+    const obj = JSON.parse(text);
+    if (obj.type !== "SEMP_HANDSHAKE") {
+        throw new Error(`handshake: expected type=SEMP_HANDSHAKE, got "${obj.type ?? "?"}"`);
+    }
+    if (typeof obj.step !== "string") {
+        throw new Error("handshake: missing step field");
+    }
+    return obj;
+}
+function verifyServerSignature(message, signatureField, serverDomainPub) {
+    const sigB64 = message[signatureField];
+    if (typeof sigB64 !== "string" || sigB64 === "") {
+        throw new Error(`handshake: ${signatureField} missing or empty`);
+    }
+    // Re-canonicalize with the signature blanked, prepend the
+    // SEMP-HANDSHAKE: prefix, verify.
+    const clone = JSON.parse(JSON.stringify(message));
+    clone[signatureField] = "";
+    const canonical = canonicalMarshal(clone);
+    const signingInput = concat(new TextEncoder().encode(HandshakePrefix), canonical);
+    const sig = base64Decode(sigB64);
+    if (!ed25519Verify(serverDomainPub, sig, signingInput)) {
+        throw new Error(`handshake: ${signatureField} did not verify under server domain key`);
+    }
+}
+function randomBytes(n) {
+    const out = new Uint8Array(n);
+    globalThis.crypto.getRandomValues(out);
+    return out;
+}
+function concat(a, b) {
+    const out = new Uint8Array(a.length + b.length);
+    out.set(a, 0);
+    out.set(b, a.length);
+    return out;
+}
+function base64Encode(b) {
+    if (typeof Buffer !== "undefined") {
+        return Buffer.from(b).toString("base64");
+    }
+    let bin = "";
+    for (let i = 0; i < b.length; i++) {
+        bin += String.fromCharCode(b[i] ?? 0);
+    }
+    return btoa(bin);
+}
+function base64Decode(s) {
+    if (typeof Buffer !== "undefined") {
+        return new Uint8Array(Buffer.from(s, "base64"));
+    }
+    const bin = atob(s);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++) {
+        out[i] = bin.charCodeAt(i);
+    }
+    return out;
+}
+//# sourceMappingURL=driver.js.map

package/dist/handshake/driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.js","sourceRoot":"","sources":["../../src/handshake/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAEL,+BAA+B,EAC/B,aAAa,EACb,WAAW,EACX,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAG9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAOL,eAAe,EACf,YAAY,EACZ,SAAS,GACV,MAAM,eAAe,CAAC;AAyEvB,0DAA0D;AAC1D,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,MAAM,CAAqB;IACpC,YAAY,SAAiB,EAAE,UAAkB,EAAE,MAA0B;QAC3E,KAAK,CAAC,uBAAuB,UAAU,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAoB,EACpB,MAAoB;IAEpB,IAAI,MAAM,CAAC,KAAK,KAAK,0BAA0B,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,0DAA0D,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,OAAO,IAAI,OAAO,CAAC;YACjB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,IAAI,IAAI,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS;YACT,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;YACP,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;YACzD,4BAA4B,EAAE,MAAM,CAAC,4BAA4B;YACjE,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,SAAoB,EACpB,MAAoB;IAGpB,6BAA6B;IAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAErC,gBAAgB;IAChB,MAAM,IAAI,GAAgB,SAAS,CAAC;QAClC,KAAK,EAAE,YAAY,CAAC,WAAW,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,kBAAkB,EAAE;YAClB,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,QAAQ;SACjB;QACD,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEpC,oBAAoB;IACpB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,OAA0B,CAAC;QACvC,MAAM,IAAI,sBAAsB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,6CAA6C,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,OAA0B,CAAC;IACxC,qBAAqB,CACnB,IAA0C,EAC1C,kBAAkB,EAClB,MAAM,CAAC,eAAe,CACvB,CAAC;IAEF,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAEjE,+BAA+B;IAC/B,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,+BAA+B,CAC1C,GAAG,EACH,YAAY,EACZ,WAAW,EACX,WAAW,CACZ,CAAC;IAEF,6BAA6B;IAC7B,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAExE,+DAA+D;IAC/D,+DAA+D;IAC/D,6DAA6D;IAC7D,mCAAmC;IACnC,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,gBAAgB,GAAG,oBAAoB,CAAC;YACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;YAClC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;YAC9C,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;YAChD,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;YAClD,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,gBAAgB,EAAE,gBAAgB;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC,gBAAgB,CAAC;IACtB,CAAC;IACD,MAAM,OAAO,GAAmB,YAAY,CAAC;QAC3C,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,mBAAmB,EAAE,YAAY,CAAC,gBAAgB,CAAC;QACnD,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhD,kCAAkC;IAClC,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,WAA8B,CAAC;QAC3C,MAAM,IAAI,sBAAsB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,6CAA6C,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,WAA8B,CAAC;IAChD,qBAAqB,CACnB,QAA8C,EAC9C,kBAAkB,EAClB,MAAM,CAAC,eAAe,CACvB,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,UAAU;QAC9B,UAAU,EAAE,QAAQ,CAAC,WAAW;QAChC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,IAAI;QACJ,wBAAwB,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM;QAC3D,4BAA4B,EAAE,IAAI,CAAC,qBAAqB,CAAC,SAAS;QAClE,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,GAAG,CAAC,QAAQ,CAAC,iBAAiB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,iBAAiB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,YAAY;AAEZ,KAAK,UAAU,cAAc,CAAC,SAAoB,EAAE,QAAgB;IAClE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;IACtC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAiB;IAC9C,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqC,CAAC;IACjE,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,iDAAiD,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAuB,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAgC,EAChC,cAAsB,EACtB,eAA2B;IAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,cAAc,cAAc,mBAAmB,CAAC,CAAC;IACnE,CAAC;IACD,0DAA0D;IAC1D,kCAAkC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAA4B,CAAC;IAC7E,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,cAAc,cAAc,yCAAyC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,CAAa,EAAE,CAAa;IAC1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}