@tienne/gestalt 0.108.0 → 0.110.0

package/dist/src/peer/relay.js

@@ -0,0 +1,410 @@
+import { randomBytes } from 'node:crypto';
+import { existsSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { createServer as createHttpServer } from 'node:http';
+import { createServer as createHttpsServer } from 'node:https';
+import { isRawKey } from './keys.js';
+import { checkRosterUpdate, isAdmin, memberOf } from './roster.js';
+import { verifyText } from './seal.js';
+import { acceptUpgrade } from './ws.js';
+import { CLOSE_REJECTED, CLOSE_REMOVED, helloSigned } from './wire.js';
+import { errMessage } from './errors.js';
+/** 받는 쪽 소켓에 이만큼 넘게 밀려 있으면 그 연결을 끊는다. 안 읽는 기기 하나가 릴레이 메모리를 못 붙잡게 한다 */
+export const MAX_RELAY_BUFFERED_BYTES = 16 * 1024 * 1024;
+const MAX_JOIN_DATA = 16 * 1024;
+const MAX_JOINS_PER_CONN = 3;
+const MAX_QUEUED_JOINS = 64;
+const JOIN_QUEUE_TTL_MS = 24 * 60 * 60 * 1000;
+const MAX_ANNOUNCED_PER_CONN = 256;
+const SHARE_ID = /^[A-Za-z0-9_-]{1,64}$/;
+/**
+ * `gestalt peer relay`. 팀이 한 대 띄우는 WebSocket 중계 서버다.
+ *
+ * 기기 키로 서명한 challenge로 접속을 받고 명단에 없는 키는 member로 안 받는다. 명단 밖
+ * 키는 join 모드로만 붙어 초대한 관리자에게 봉인한 요청 하나를 넘길 수 있다.
+ *
+ * 대화 기록은 쌓지 않는다. 받는 기기가 없으면 실패로 답한다. 쌓아 두는 건 관리자가 오프라인일
+ * 때의 join 요청뿐이고 메모리에만 둔다.
+ */
+export class RelayServer {
+    options;
+    server = null;
+    roster = null;
+    conns = new Set();
+    members = new Map();
+    pending = new Map();
+    announced = new Map();
+    joinQueue = [];
+    pinger = null;
+    constructor(options) {
+        this.options = options;
+        if (!isRawKey(options.team))
+            throw new Error('팀 id 꼴이 아니에요 (43자 base64url)');
+    }
+    get port() {
+        const addr = this.server?.address();
+        return addr && typeof addr === 'object' ? addr.port : undefined;
+    }
+    get epoch() {
+        return this.roster?.roster.epoch ?? 0;
+    }
+    /** 지금 member로 붙어 있는 기기 id */
+    get onlineKeys() {
+        return [...this.members.keys()];
+    }
+    async start() {
+        this.loadRosterFile();
+        const handler = (_req, res) => {
+            res.writeHead(426, { 'Content-Type': 'text/plain; charset=utf-8' });
+            res.end('gestalt peer relay: WebSocket only\n');
+        };
+        const server = this.options.tls
+            ? createHttpsServer({ cert: this.options.tls.cert, key: this.options.tls.key }, handler)
+            : createHttpServer(handler);
+        server.on('upgrade', (req, socket, head) => {
+            const ws = acceptUpgrade(req, socket, head);
+            if (ws)
+                this.accept(ws);
+        });
+        server.on('clientError', (_err, socket) => socket.destroy());
+        this.server = server;
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            server.listen(this.options.port ?? 0, this.options.host ?? '0.0.0.0', () => {
+                server.off('error', reject);
+                server.on('error', (err) => process.stderr.write(`[peer-relay] ${err.message}\n`));
+                resolve();
+            });
+        });
+        this.pinger = setInterval(() => this.pingAll(), this.options.pingMs ?? 30_000);
+        this.pinger.unref();
+        return this.port;
+    }
+    async stop() {
+        if (this.pinger)
+            clearInterval(this.pinger);
+        this.pinger = null;
+        for (const c of this.conns)
+            c.ws.terminate(1001, 'relay stop');
+        this.conns.clear();
+        this.members.clear();
+        this.pending.clear();
+        this.announced.clear();
+        const server = this.server;
+        this.server = null;
+        if (!server)
+            return;
+        server.closeAllConnections?.();
+        await new Promise((resolve) => server.close(() => resolve()));
+    }
+    accept(ws) {
+        const conn = {
+            ws,
+            nonce: randomBytes(24).toString('base64url'),
+            member: false,
+            joins: 0,
+            alive: true,
+        };
+        this.conns.add(conn);
+        conn.timer = setTimeout(() => ws.close(CLOSE_REJECTED, 'hello timeout'), this.options.helloTimeoutMs ?? 10_000);
+        conn.timer.unref();
+        ws.on('pong', () => (conn.alive = true));
+        ws.on('message', (text) => {
+            this.options.onFrame?.('in', text);
+            try {
+                this.onMessage(conn, text);
+            }
+            catch (err) {
+                process.stderr.write(`[peer-relay] frame failed: ${errMessage(err)}\n`);
+                this.reject(conn, 'bad_frame', '프레임을 처리하지 못했어요');
+            }
+        });
+        ws.on('close', () => this.drop(conn));
+        this.send(conn, { t: 'challenge', nonce: conn.nonce });
+    }
+    onMessage(conn, text) {
+        let frame;
+        try {
+            frame = JSON.parse(text);
+        }
+        catch {
+            return this.reject(conn, 'bad_frame', 'JSON이 아니에요');
+        }
+        if (typeof frame !== 'object' || frame === null || typeof frame.t !== 'string') {
+            return this.reject(conn, 'bad_frame', 't가 없어요');
+        }
+        if (!conn.key) {
+            if (frame.t !== 'hello')
+                return this.reject(conn, 'bad_frame', 'hello부터 보내야 해요');
+            return this.hello(conn, frame);
+        }
+        if (!conn.member) {
+            if (frame.t === 'join')
+                return this.join(conn, frame);
+            return;
+        }
+        switch (frame.t) {
+            case 'send':
+                return this.forward(conn, frame);
+            case 'resolve': {
+                if (!Number.isSafeInteger(frame.id))
+                    return;
+                const owner = typeof frame.share === 'string' ? this.announced.get(frame.share) : undefined;
+                this.send(conn, { t: 'resolved', id: frame.id, owner: owner ?? null });
+                return;
+            }
+            case 'announce':
+                return this.announce(conn, frame.shares);
+            case 'roster': {
+                const verdict = this.acceptRoster(frame.roster);
+                if (!verdict.ok) {
+                    this.send(conn, { t: 'error', code: 'bad_signature', message: verdict.reason });
+                }
+                return;
+            }
+            default:
+                return;
+        }
+    }
+    hello(conn, frame) {
+        if (frame.team !== this.options.team)
+            return this.reject(conn, 'wrong_team', '다른 팀이에요');
+        if (frame.mode !== 'member' && frame.mode !== 'join') {
+            return this.reject(conn, 'bad_frame', 'mode가 틀렸어요');
+        }
+        if (!isRawKey(frame.key) ||
+            !verifyText(frame.key, helloSigned(frame.team, conn.nonce, frame.mode), frame.sig)) {
+            return this.reject(conn, 'bad_signature', 'hello 서명이 맞지 않아요');
+        }
+        if (conn.timer)
+            clearTimeout(conn.timer);
+        conn.key = frame.key;
+        conn.mode = frame.mode;
+        // 들고 온 명단이 더 새것이면 받는다. 낮거나 서명이 틀리면 조용히 버린다
+        if (frame.roster !== undefined)
+            this.acceptRoster(frame.roster);
+        const roster = this.roster;
+        if (roster && memberOf(roster.roster, frame.key)) {
+            this.admit(conn);
+            return;
+        }
+        if (frame.mode === 'member') {
+            if (!roster)
+                return this.reject(conn, 'no_roster', '릴레이가 아직 팀 명단을 못 받았어요');
+            return this.reject(conn, 'not_member', '명단에 없는 기기예요', CLOSE_REMOVED);
+        }
+        const prev = this.pending.get(frame.key);
+        if (prev)
+            prev.ws.close(4000, 'replaced');
+        this.pending.set(frame.key, conn);
+        conn.timer = setTimeout(() => conn.ws.close(CLOSE_REJECTED, 'join timeout'), this.options.joinTimeoutMs ?? 120_000);
+        conn.timer.unref();
+        this.send(conn, { t: 'pending' });
+    }
+    /** member로 올린다. 같은 기기의 이전 연결은 닫는다 */
+    admit(conn) {
+        const key = conn.key;
+        if (conn.timer)
+            clearTimeout(conn.timer);
+        if (this.pending.get(key) === conn)
+            this.pending.delete(key);
+        const prev = this.members.get(key);
+        if (prev && prev !== conn) {
+            this.members.delete(key);
+            prev.member = false;
+            prev.ws.close(4000, 'replaced');
+        }
+        conn.member = true;
+        this.members.set(key, conn);
+        this.send(conn, {
+            t: 'welcome',
+            roster: this.roster,
+            online: [...this.members.keys()].filter((k) => k !== key),
+        });
+        this.broadcast({ t: 'presence', key, online: true }, conn);
+        this.flushJoins(key);
+    }
+    forward(conn, frame) {
+        if (!Number.isSafeInteger(frame.id))
+            return;
+        const ack = (ok, error) => {
+            if (frame.ack === false)
+                return;
+            this.send(conn, { t: 'ack', id: frame.id, ok, ...(error ? { error } : {}) });
+        };
+        if (typeof frame.to !== 'string' || typeof frame.data !== 'string')
+            return ack(false, 'bad_frame');
+        const target = this.members.get(frame.to);
+        if (!target)
+            return ack(false, 'offline');
+        if (target.ws.bufferedAmount > MAX_RELAY_BUFFERED_BYTES) {
+            target.ws.terminate(1008, 'slow');
+            return ack(false, 'slow');
+        }
+        this.send(target, { t: 'recv', from: conn.key, data: frame.data });
+        ack(true);
+    }
+    announce(conn, shares) {
+        if (!Array.isArray(shares) || shares.length > MAX_ANNOUNCED_PER_CONN)
+            return;
+        const key = conn.key;
+        const wanted = new Set(shares.filter((s) => typeof s === 'string' && SHARE_ID.test(s)));
+        for (const [id, owner] of [...this.announced]) {
+            if (owner === key && !wanted.has(id))
+                this.announced.delete(id);
+        }
+        for (const id of wanted) {
+            const owner = this.announced.get(id);
+            // 먼저 알린 기기가 붙어 있으면 그대로 둔다. 남의 공유 id를 가로채지 못하게
+            if (owner && owner !== key && this.members.has(owner))
+                continue;
+            this.announced.set(id, key);
+        }
+    }
+    join(conn, frame) {
+        if (frame.t !== 'join')
+            return;
+        conn.joins++;
+        if (conn.joins > MAX_JOINS_PER_CONN) {
+            return this.reject(conn, 'rate_limited', 'join 요청이 너무 많아요');
+        }
+        const roster = this.roster;
+        if (!roster ||
+            typeof frame.to !== 'string' ||
+            !isAdmin(roster.roster, frame.to) ||
+            typeof frame.data !== 'string' ||
+            frame.data.length > MAX_JOIN_DATA) {
+            return;
+        }
+        const item = { to: frame.to, from: conn.key, data: frame.data, at: Date.now() };
+        const admin = this.members.get(frame.to);
+        if (admin) {
+            this.send(admin, { t: 'join', from: item.from, data: item.data });
+            return;
+        }
+        // 관리자가 오프라인이면 붙을 때까지 들고 있는다. 같은 기기가 다시 보내면 앞의 것을 바꾼다
+        this.joinQueue = this.joinQueue.filter((q) => !(q.from === item.from && q.to === item.to));
+        this.joinQueue.push(item);
+        if (this.joinQueue.length > MAX_QUEUED_JOINS)
+            this.joinQueue.shift();
+    }
+    flushJoins(key) {
+        const now = Date.now();
+        this.joinQueue = this.joinQueue.filter((q) => now - q.at < JOIN_QUEUE_TTL_MS);
+        const target = this.members.get(key);
+        if (!target)
+            return;
+        const mine = this.joinQueue.filter((q) => q.to === key);
+        this.joinQueue = this.joinQueue.filter((q) => q.to !== key);
+        for (const q of mine)
+            this.send(target, { t: 'join', from: q.from, data: q.data });
+    }
+    /**
+     * 명단을 받는다. 받으면 모두에게 돌리고 빠진 기기는 바로 끊고 명단에 새로 오른 join 연결은
+     * member로 올린다.
+     */
+    acceptRoster(incoming) {
+        const verdict = checkRosterUpdate(this.roster, incoming, {
+            team: this.options.team,
+            anchor: this.options.team,
+        });
+        if (!verdict.ok)
+            return verdict;
+        const roster = incoming;
+        this.roster = roster;
+        this.saveRosterFile();
+        for (const [key, conn] of [...this.members]) {
+            if (memberOf(roster.roster, key))
+                continue;
+            this.members.delete(key);
+            conn.member = false;
+            for (const [id, owner] of [...this.announced])
+                if (owner === key)
+                    this.announced.delete(id);
+            conn.ws.close(CLOSE_REMOVED, 'removed');
+            this.broadcast({ t: 'presence', key, online: false });
+        }
+        this.broadcast({ t: 'roster', roster });
+        for (const [key, conn] of [...this.pending]) {
+            if (memberOf(roster.roster, key))
+                this.admit(conn);
+        }
+        return verdict;
+    }
+    drop(conn) {
+        if (conn.timer)
+            clearTimeout(conn.timer);
+        this.conns.delete(conn);
+        const key = conn.key;
+        if (!key)
+            return;
+        if (this.pending.get(key) === conn)
+            this.pending.delete(key);
+        if (this.members.get(key) === conn) {
+            this.members.delete(key);
+            for (const [id, owner] of [...this.announced])
+                if (owner === key)
+                    this.announced.delete(id);
+            this.broadcast({ t: 'presence', key, online: false });
+        }
+    }
+    reject(conn, code, message, closeCode = CLOSE_REJECTED) {
+        this.send(conn, { t: 'error', code, message });
+        conn.ws.close(closeCode, code);
+    }
+    broadcast(frame, except) {
+        for (const c of this.members.values())
+            if (c !== except)
+                this.send(c, frame);
+    }
+    send(conn, frame) {
+        const text = JSON.stringify(frame);
+        this.options.onFrame?.('out', text);
+        conn.ws.send(text);
+    }
+    pingAll() {
+        for (const c of this.conns) {
+            if (!c.alive) {
+                c.ws.terminate(1006, 'no pong');
+                continue;
+            }
+            c.alive = false;
+            c.ws.ping();
+        }
+    }
+    loadRosterFile() {
+        const file = this.options.rosterFile;
+        if (!file || !existsSync(file))
+            return;
+        let saved;
+        try {
+            saved = JSON.parse(readFileSync(file, 'utf8'));
+        }
+        catch {
+            process.stderr.write(`[peer-relay] 명단 파일을 못 읽어 버려요: ${file}\n`);
+            return;
+        }
+        // 파일에 남은 명단도 서명을 다시 본다. 판의 차례는 처음 받는 것처럼 팀 id 서명만 믿는다
+        const verdict = checkRosterUpdate(null, saved, {
+            team: this.options.team,
+            anchor: this.options.team,
+        });
+        if (verdict.ok)
+            this.roster = saved;
+        else
+            process.stderr.write(`[peer-relay] 명단 파일을 버려요: ${verdict.reason}\n`);
+    }
+    saveRosterFile() {
+        const file = this.options.rosterFile;
+        if (!file || !this.roster)
+            return;
+        const tmp = `${file}.${process.pid}.tmp`;
+        try {
+            writeFileSync(tmp, JSON.stringify(this.roster) + '\n', { mode: 0o600 });
+            renameSync(tmp, file);
+        }
+        catch (err) {
+            process.stderr.write(`[peer-relay] 명단 파일을 못 썼어요: ${errMessage(err)}\n`);
+        }
+    }
+}
+//# sourceMappingURL=relay.js.map

package/dist/src/peer/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../../../src/peer/relay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EAAE,YAAY,IAAI,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAsCzC,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IAUO;IATrB,MAAM,GAAkB,IAAI,CAAC;IAC7B,MAAM,GAAwB,IAAI,CAAC;IACnC,KAAK,GAAG,IAAI,GAAG,EAAQ,CAAC;IACxB,OAAO,GAAG,IAAI,GAAG,EAAgB,CAAC;IAClC,OAAO,GAAG,IAAI,GAAG,EAAgB,CAAC;IAClC,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,SAAS,GAAiB,EAAE,CAAC;IAC7B,MAAM,GAA0B,IAAI,CAAC;IAE7C,YAA6B,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;QACtD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,IAAI;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACpC,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,6BAA6B;IAC7B,IAAI,UAAU;QACZ,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,CAAC,IAAqB,EAAE,GAAmB,EAAQ,EAAE;YACnE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACpE,GAAG,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG;YAC7B,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC;YACxF,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAoB,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;YAC1E,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,GAAG,EAAE;gBACzE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;gBACnF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,IAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM;YAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,MAAM,CAAC,EAAgB;QAC7B,MAAM,IAAI,GAAS;YACjB,EAAE;YACF,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5C,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,IAAI;SACZ,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,UAAU,CACrB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,eAAe,CAAC,EAC/C,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM,CACtC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;QACzC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE;YAChC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IAEO,SAAS,CAAC,IAAU,EAAE,IAAY;QACxC,IAAI,KAAkB,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,KAAK,CAAC,CAAC,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,KAAK,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnC,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAE,OAAO;gBAC5C,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC5F,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YACD,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3C,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,OAAO;YACT,CAAC;YACD;gBACE,OAAO;QACX,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAU,EAAE,KAA2C;QACnE,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACxF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;YACpB,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,EAClF,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAEvB,2CAA2C;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI;YAAE,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,UAAU,CACrB,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,cAAc,CAAC,EACnD,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CACtC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,qCAAqC;IAC7B,KAAK,CAAC,IAAU;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAI,CAAC;QACtB,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACd,CAAC,EAAE,SAAS;YACZ,MAAM,EAAE,IAAI,CAAC,MAAO;YACpB,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC;SAC1D,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAEO,OAAO,CAAC,IAAU,EAAE,KAA0C;QACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO;QAC5C,MAAM,GAAG,GAAG,CAAC,EAAW,EAAE,KAAc,EAAQ,EAAE;YAChD,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK;gBAAE,OAAO;YAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC,CAAC;QACF,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAChE,OAAO,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,EAAE,CAAC,cAAc,GAAG,wBAAwB,EAAE,CAAC;YACxD,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,GAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC,CAAC;IACZ,CAAC;IAEO,QAAQ,CAAC,IAAU,EAAE,MAAe;QAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB;YAAE,OAAO;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAI,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAC7E,CAAC;QACF,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrC,8CAA8C;YAC9C,IAAI,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YAChE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,IAAU,EAAE,KAAkB;QACzC,IAAI,KAAK,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,KAAK,GAAG,kBAAkB,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IACE,CAAC,MAAM;YACP,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;YAC5B,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,aAAa,EACjC,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAe,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,qDAAqD;QACrD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,gBAAgB;YAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACvE,CAAC;IAEO,UAAU,CAAC,GAAW;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,iBAAiB,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,QAAiB;QACpC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE;YACvD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC;QAChC,MAAM,MAAM,GAAG,QAAwB,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;gBAAE,SAAS;YAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAAE,IAAI,KAAK,KAAK,GAAG;oBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,IAAI,CAAC,IAAU;QACrB,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBAAE,IAAI,KAAK,KAAK,GAAG;oBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,MAAM,CACZ,IAAU,EACV,IAAoB,EACpB,OAAe,EACf,SAAS,GAAG,cAAc;QAE1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAEO,SAAS,CAAC,KAAkB,EAAE,MAAa;QACjD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,KAAK,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/E,CAAC;IAEO,IAAI,CAAC,IAAU,EAAE,KAAkB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAEO,OAAO;QACb,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;YAChB,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QACvC,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,IAAI,IAAI,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,sDAAsD;QACtD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE;YAC7C,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;SAC1B,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,EAAE;YAAE,IAAI,CAAC,MAAM,GAAG,KAAqB,CAAC;;YAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IAC5E,CAAC;IAEO,cAAc;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAClC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzC,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF"}

package/dist/src/peer/roster.d.ts

@@ -0,0 +1,89 @@
+import type { MachineKey } from './keys.js';
+/**
+ * 팀 명단. 관리자 키로 서명한 문서 하나이고 판(epoch) 번호가 있다.
+ *
+ * 팀 id는 팀을 만든 관리자의 기기 id다. 릴레이와 처음 명단을 받는 쪽은 이 id를 믿을
+ * 출발점으로 삼는다. 판을 올린 명단은 지금 들고 있는 명단의 관리자가 서명해야 받는다.
+ */
+export type Role = 'admin' | 'member';
+export interface RosterMember {
+    person: string;
+    /** 기기 id(Ed25519 공개키) */
+    machineKey: string;
+    /** X25519 공개키 */
+    boxKey: string;
+    role: Role;
+    addedAt: number;
+}
+export interface Roster {
+    v: 1;
+    team: string;
+    epoch: number;
+    /** 팀 릴레이 주소. `ws://` 또는 `wss://` */
+    relay: string;
+    members: RosterMember[];
+    issuedAt: number;
+    /** 서명한 관리자 기기 id */
+    issuer: string;
+}
+export interface SignedRoster {
+    roster: Roster;
+    sig: string;
+}
+export declare function isPersonName(value: unknown): value is string;
+export declare function isRelayUrl(value: unknown): value is string;
+export declare function signRoster(roster: Roster, key: MachineKey): SignedRoster;
+export declare function memberOf(roster: Roster, machineKey: string): RosterMember | undefined;
+export declare function isAdmin(roster: Roster, machineKey: string): boolean;
+export type RosterVerdict = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * 새 명단을 받을지 정한다.
+ *
+ * - 지금 명단이 없으면 `anchor`(팀 id나 초대한 관리자 id)가 서명하고 그 키가 새 명단의
+ *   관리자여야 한다.
+ * - 지금 명단이 있으면 판이 더 높고 지금 명단의 관리자가 서명해야 한다. 같은 판은 다시
+ *   받지 않는다 — 같은 판에 다른 내용을 서명해 돌리는 걸 막는다.
+ */
+export declare function checkRosterUpdate(current: SignedRoster | null, incoming: unknown, expect: {
+    team: string;
+    anchor: string;
+}): RosterVerdict;
+/** 같은 내용을 다시 서명하지 않고 한 판 올린 새 명단을 만든다 */
+export declare function nextRoster(current: Roster, members: RosterMember[], issuer: string, now?: number): Roster;
+/**
+ * 초대 코드. 관리자가 만들어 사람에게 건넨다. 1회용이고 24시간 유효하다.
+ * `secret`은 관리자 데몬만 들고 있다가 join 요청의 증명을 맞춰 본다.
+ */
+export interface Invite {
+    v: 1;
+    team: string;
+    relay: string;
+    /** 초대한 관리자 기기 id와 X25519 공개키. join 요청을 이 키에 봉인한다 */
+    admin: string;
+    adminBox: string;
+    id: string;
+    secret: string;
+    person: string;
+    expiresAt: number;
+}
+export declare function encodeInvite(invite: Invite): string;
+export declare function decodeInvite(code: string): Invite;
+/** join 요청에 싣는 증명. 초대 코드를 가진 사람만 만든다 */
+export declare function joinProofText(inviteId: string, machineKey: string, boxKey: string): string;
+/**
+ * 공유 링크. `gestalt://peer/<릴레이 호스트>/<공유 id>#<공유 키>`.
+ * 공유 키는 `#` 뒤라 릴레이로 안 간다.
+ */
+export interface ShareLink {
+    relayHost: string;
+    shareId: string;
+    shareKey: string;
+}
+export declare function formatShareLink(relayUrl: string, shareId: string, shareKey: string): string;
+export declare function parseShareLink(link: string): ShareLink;
+//# sourceMappingURL=roster.d.ts.map

package/dist/src/peer/roster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster.d.ts","sourceRoot":"","sources":["../../../src/peer/roster.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C;;;;;GAKG;AAEH,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEtC,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,MAAM;IACrB,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb;AAID,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE5D;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAQ1D;AAOD,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,YAAY,CAGxE;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAErF;AAED,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,YAAY,GAAG,IAAI,EAC5B,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC,aAAa,CA2Bf;AA4BD,yCAAyC;AACzC,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,YAAY,EAAE,EACvB,MAAM,EAAE,MAAM,EACd,GAAG,SAAa,GACf,MAAM,CAER;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAyBjD;AAED,wCAAwC;AACxC,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3F;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAItD"}