@varco/client 0.1.0

package/dist/transport-noble.js

@@ -0,0 +1,257 @@
+// WebCrypto-free twin of RelayTransport for runtimes without crypto.subtle
+// (e.g. Pebble PKJS). Same wire behaviour, primitives from @noble/*.
+import { gcm } from "@noble/ciphers/aes.js";
+import { ed25519 } from "@noble/curves/ed25519";
+import { p256 } from "@noble/curves/p256.js";
+import { hkdf } from "@noble/hashes/hkdf.js";
+import { sha256 } from "@noble/hashes/sha2";
+import { b64urlDecode, b64urlEncode, canonicalJson } from "./encoding.js";
+import { closeError, envelopeLane } from "./transport.js";
+// Pure-JS UTF-8: PKJS has no TextEncoder/TextDecoder.
+function utf8Encode(value) {
+    const out = [];
+    for (let i = 0; i < value.length; i += 1) {
+        const code = value.codePointAt(i);
+        if (code > 0xffff)
+            i += 1;
+        if (code < 0x80)
+            out.push(code);
+        else if (code < 0x800)
+            out.push(0xc0 | (code >> 6), 0x80 | (code & 0x3f));
+        else if (code < 0x10000)
+            out.push(0xe0 | (code >> 12), 0x80 | ((code >> 6) & 0x3f), 0x80 | (code & 0x3f));
+        else
+            out.push(0xf0 | (code >> 18), 0x80 | ((code >> 12) & 0x3f), 0x80 | ((code >> 6) & 0x3f), 0x80 | (code & 0x3f));
+    }
+    return Uint8Array.from(out);
+}
+function utf8Decode(bytes) {
+    let out = "";
+    let i = 0;
+    while (i < bytes.length) {
+        const b = bytes[i];
+        let code;
+        if (b < 0x80) {
+            code = b;
+            i += 1;
+        }
+        else if (b < 0xe0) {
+            code = ((b & 0x1f) << 6) | (bytes[i + 1] & 0x3f);
+            i += 2;
+        }
+        else if (b < 0xf0) {
+            code = ((b & 0x0f) << 12) | ((bytes[i + 1] & 0x3f) << 6) | (bytes[i + 2] & 0x3f);
+            i += 3;
+        }
+        else {
+            code = ((b & 0x07) << 18) | ((bytes[i + 1] & 0x3f) << 12) | ((bytes[i + 2] & 0x3f) << 6) | (bytes[i + 3] & 0x3f);
+            i += 4;
+        }
+        out += String.fromCodePoint(code);
+    }
+    return out;
+}
+// DER SubjectPublicKeyInfo header for a P-256 uncompressed point.
+const SPKI_P256_PREFIX = Uint8Array.from([
+    0x30, 0x59, 0x30, 0x13, 0x06, 0x07, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, 0x01,
+    0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07, 0x03, 0x42, 0x00,
+]);
+function spkiWrap(rawPoint) {
+    const out = new Uint8Array(SPKI_P256_PREFIX.length + rawPoint.length);
+    out.set(SPKI_P256_PREFIX);
+    out.set(rawPoint, SPKI_P256_PREFIX.length);
+    return out;
+}
+function spkiUnwrap(spki) {
+    if (spki.length < 91 || spki[spki.length - 65] !== 0x04)
+        throw new Error("Bad server public key");
+    return spki.slice(spki.length - 65);
+}
+function defaultRandomBytes(n) {
+    const cryptoLike = globalThis.crypto;
+    if (!cryptoLike?.getRandomValues)
+        throw new Error("No secure randomness available: pass a randomBytes option");
+    const out = new Uint8Array(n);
+    cryptoLike.getRandomValues(out);
+    return out;
+}
+function wsUrl(base, authorityId) {
+    const clean = base.replace(/\/$/, "");
+    return `${clean}/consumer/${encodeURIComponent(authorityId)}`;
+}
+function nonce(value) {
+    const out = new Uint8Array(12);
+    new DataView(out.buffer).setUint32(8, value, false);
+    return out;
+}
+function deriveSessionKeys(privateKey, serverPoint, authorityId) {
+    // X coordinate only: matches WebCrypto ECDH deriveBits(256).
+    const shared = p256.getSharedSecret(privateKey, serverPoint).slice(1);
+    const salt = b64urlDecode(authorityId);
+    return {
+        send: hkdf(sha256, shared, salt, utf8Encode("varco-session-c2s-v1"), 32),
+        recv: hkdf(sha256, shared, salt, utf8Encode("varco-session-s2c-v1"), 32),
+        channelBinding: b64urlEncode(hkdf(sha256, shared, salt, utf8Encode("varco-channel-binding-v1"), 32)),
+    };
+}
+export class NobleRelayTransport {
+    bridgeUrl;
+    authorityId;
+    ws = null;
+    keys = null;
+    sendNonce = 0;
+    recvNonce = 0;
+    pending = new Map();
+    eventHandler = null;
+    closeHandler = null;
+    ready = null;
+    closed = false;
+    requestTimeoutMs;
+    randomBytes;
+    constructor(bridgeUrl, authorityId, options = {}) {
+        this.bridgeUrl = bridgeUrl;
+        this.authorityId = authorityId;
+        this.requestTimeoutMs = options.requestTimeoutMs ?? 30_000;
+        this.randomBytes = options.randomBytes ?? defaultRandomBytes;
+    }
+    onEvent(handler) { this.eventHandler = handler; }
+    onClose(handler) { this.closeHandler = handler; }
+    async channelBinding() {
+        await this.ensureConnected();
+        return this.keys.channelBinding;
+    }
+    async request(message) {
+        await this.ensureConnected();
+        const requestId = message.request_id ?? b64urlEncode(this.randomBytes(8));
+        const withId = { ...message, request_id: requestId };
+        const encrypted = this.encrypt(withId);
+        this.ws?.send(JSON.stringify(encrypted));
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(requestId);
+                reject(new Error(`Varco request timed out: ${String(message.type)}`));
+            }, this.requestTimeoutMs);
+            this.pending.set(requestId, { resolve, reject, timer });
+        });
+    }
+    async close() {
+        this.closed = true;
+        this.ws?.close();
+        this.failPending(new Error("Varco transport closed"));
+    }
+    failPending(err) {
+        for (const entry of this.pending.values()) {
+            clearTimeout(entry.timer);
+            entry.reject(err);
+        }
+        this.pending.clear();
+    }
+    async ensureConnected() {
+        if (this.closed)
+            throw new Error("Varco transport closed");
+        if (!this.ready)
+            this.ready = this.connect();
+        await this.ready;
+    }
+    generatePrivateKey() {
+        // p256.utils.randomSecretKey needs global crypto; sample from the injected
+        // source instead, rejecting out-of-range scalars.
+        for (;;) {
+            const candidate = this.randomBytes(32);
+            if (p256.utils.isValidSecretKey(candidate))
+                return candidate;
+        }
+    }
+    async connect() {
+        const privateKey = this.generatePrivateKey();
+        const clientPub = b64urlEncode(spkiWrap(p256.getPublicKey(privateKey, false)));
+        const ws = new WebSocket(wsUrl(this.bridgeUrl, this.authorityId));
+        this.ws = ws;
+        await new Promise((resolve, reject) => {
+            ws.onopen = () => ws.send(JSON.stringify({ type: "client_hello", client_pub: clientPub }));
+            ws.onerror = () => reject(new Error("Varco WebSocket failed"));
+            ws.onclose = () => reject(new Error("Varco WebSocket closed during handshake"));
+            ws.onmessage = (event) => {
+                try {
+                    const outer = JSON.parse(String(event.data));
+                    const payload = outer.payload ?? outer;
+                    if (payload.type === "server_hello") {
+                        const serverPubBytes = b64urlDecode(payload.server_pub);
+                        const transcript = new Uint8Array(utf8Encode("varco-server-hello-v1\0").length + b64urlDecode(clientPub).length + 1 + serverPubBytes.length);
+                        let offset = 0;
+                        const prefix = utf8Encode("varco-server-hello-v1\0");
+                        transcript.set(prefix, offset);
+                        offset += prefix.length;
+                        const clientBytes = b64urlDecode(clientPub);
+                        transcript.set(clientBytes, offset);
+                        offset += clientBytes.length;
+                        transcript[offset] = 0;
+                        offset += 1;
+                        transcript.set(serverPubBytes, offset);
+                        if (!ed25519.verify(b64urlDecode(payload.signature), transcript, b64urlDecode(this.authorityId)))
+                            throw new Error("Bad authority signature");
+                        this.keys = deriveSessionKeys(privateKey, spkiUnwrap(serverPubBytes), this.authorityId);
+                        ws.onmessage = (messageEvent) => {
+                            this.handleMessage(String(messageEvent.data)).catch((err) => {
+                                this.failPending(err instanceof Error ? err : new Error(String(err)));
+                                ws.close();
+                            });
+                        };
+                        ws.onclose = (closeEvent) => {
+                            const code = closeEvent?.code;
+                            const wasClosed = this.closed;
+                            this.closed = true;
+                            this.failPending(closeError(code));
+                            if (!wasClosed && code !== 4405)
+                                this.closeHandler?.();
+                        };
+                        resolve();
+                    }
+                }
+                catch (err) {
+                    reject(err);
+                }
+            };
+        });
+    }
+    encrypt(payload) {
+        if (!this.keys)
+            throw new Error("Varco session is not ready");
+        const n = nonce(this.sendNonce++);
+        const body = gcm(this.keys.send, n).encrypt(utf8Encode(canonicalJson(payload)));
+        const envelope = { type: "ciphertext", nonce: b64urlEncode(n), body: b64urlEncode(body) };
+        const lane = envelopeLane(payload.type);
+        if (lane)
+            envelope.lane = lane;
+        return envelope;
+    }
+    decrypt(envelope) {
+        if (!this.keys)
+            throw new Error("Varco session is not ready");
+        const n = b64urlDecode(envelope.nonce);
+        const expected = nonce(this.recvNonce++);
+        if (n.some((value, index) => value !== expected[index]))
+            throw new Error("Unexpected nonce");
+        const plaintext = gcm(this.keys.recv, n).decrypt(b64urlDecode(envelope.body));
+        return JSON.parse(utf8Decode(plaintext));
+    }
+    async handleMessage(data) {
+        const outer = JSON.parse(data);
+        if (outer.type === "relay_disabled")
+            throw new Error("Bridge is signaling-only: P2P required but unavailable");
+        const payload = this.decrypt(outer.payload ?? outer);
+        const requestId = payload.request_id;
+        if (requestId && this.pending.has(requestId)) {
+            const pending = this.pending.get(requestId);
+            this.pending.delete(requestId);
+            clearTimeout(pending.timer);
+            if (payload.type === "error")
+                pending.reject(Object.assign(new Error(payload.message), { code: payload.code }));
+            else
+                pending.resolve(payload);
+            return;
+        }
+        this.eventHandler?.(payload);
+    }
+}
+//# sourceMappingURL=transport-noble.js.map

package/dist/transport-noble.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-noble.js","sourceRoot":"","sources":["../src/transport-noble.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,qEAAqE;AACrE,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG1D,sDAAsD;AACtD,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QACnC,IAAI,IAAI,GAAG,MAAM;YAAE,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,GAAG,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC3B,IAAI,IAAI,GAAG,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;aACrE,IAAI,IAAI,GAAG,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;;YACrG,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,CAAC,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;aAC9B,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;aAC3E,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;aAC3G,CAAC;YAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAClI,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC;IACvC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC5E,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CAC7E,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,QAAoB;IACpC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,gBAAgB,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1B,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AACtC,CAAC;AAID,SAAS,kBAAkB,CAAC,CAAS;IACnC,MAAM,UAAU,GAAI,UAA+E,CAAC,MAAM,CAAC;IAC3G,IAAI,CAAC,UAAU,EAAE,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,WAAmB;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,GAAG,KAAK,aAAa,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAID,SAAS,iBAAiB,CAAC,UAAsB,EAAE,WAAuB,EAAE,WAAmB;IAC7F,6DAA6D;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC;QACxE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC;QACxE,cAAc,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,0BAA0B,CAAC,EAAE,EAAE,CAAC,CAAC;KACrG,CAAC;AACJ,CAAC;AAID,MAAM,OAAO,mBAAmB;IAaV;IAA2B;IAZvC,EAAE,GAAqB,IAAI,CAAC;IAC5B,IAAI,GAAuB,IAAI,CAAC;IAChC,SAAS,GAAG,CAAC,CAAC;IACd,SAAS,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,IAAI,GAAG,EAAiH,CAAC;IACnI,YAAY,GAAkC,IAAI,CAAC;IACnD,YAAY,GAAwB,IAAI,CAAC;IACzC,KAAK,GAAyB,IAAI,CAAC;IACnC,MAAM,GAAG,KAAK,CAAC;IACf,gBAAgB,CAAS;IACzB,WAAW,CAAc;IAEjC,YAAoB,SAAiB,EAAU,WAAmB,EAAE,UAAsC,EAAE;QAAxF,cAAS,GAAT,SAAS,CAAQ;QAAU,gBAAW,GAAX,WAAW,CAAQ;QAChE,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;QAC3D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,OAA6B,IAAU,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC;IAE7E,OAAO,CAAC,OAAmB,IAAU,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC;IAEnE,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,IAAK,CAAC,cAAc,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAgC;QAC5C,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAI,OAAO,CAAC,UAAiC,IAAI,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACxD,CAAC;IAEO,WAAW,CAAC,GAAU;QAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAEO,kBAAkB;QACxB,2EAA2E;QAC3E,kDAAkD;QAClD,SAAS,CAAC;YACR,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAC3F,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;YAC/D,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;YAChF,EAAE,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE;gBACvB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC;oBACvC,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;wBACpC,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;wBACxD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;wBAC7I,IAAI,MAAM,GAAG,CAAC,CAAC;wBACf,MAAM,MAAM,GAAG,UAAU,CAAC,yBAAyB,CAAC,CAAC;wBAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;wBAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;wBAC9G,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;wBAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;wBAAC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC;wBAC/G,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAAC,MAAM,IAAI,CAAC,CAAC;wBACpC,UAAU,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;wBACvC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;wBAC7I,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC,UAAU,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;wBACxF,EAAE,CAAC,SAAS,GAAG,CAAC,YAAY,EAAE,EAAE;4BAC9B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gCAC1D,IAAI,CAAC,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gCACtE,EAAE,CAAC,KAAK,EAAE,CAAC;4BACb,CAAC,CAAC,CAAC;wBACL,CAAC,CAAC;wBACF,EAAE,CAAC,OAAO,GAAG,CAAC,UAAU,EAAE,EAAE;4BAC1B,MAAM,IAAI,GAAI,UAAqC,EAAE,IAAI,CAAC;4BAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;4BAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;4BACnB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;4BACnC,IAAI,CAAC,SAAS,IAAI,IAAI,KAAK,IAAI;gCAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;wBACzD,CAAC,CAAC;wBACF,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBAAC,MAAM,CAAC,GAAY,CAAC,CAAC;gBAAC,CAAC;YACzC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,OAAgC;QAC9C,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,QAAQ,GAA2B,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI;YAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QAC/B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,OAAO,CAAC,QAAa;QAC3B,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAY;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;;gBAC3G,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/transport.d.ts

@@ -0,0 +1,29 @@
+import type { VarcoTransport } from "./types.js";
+export declare function envelopeLane(payloadType: unknown): "signaling" | null;
+export declare function closeError(code: number | undefined): Error;
+export declare class RelayTransport implements VarcoTransport {
+    private bridgeUrl;
+    private authorityId;
+    private requestTimeoutMs;
+    private ws;
+    private keys;
+    private sendNonce;
+    private recvNonce;
+    private pending;
+    private eventHandler;
+    private closeHandler;
+    private ready;
+    private closed;
+    constructor(bridgeUrl: string, authorityId: string, requestTimeoutMs?: number);
+    onEvent(handler: (event: any) => void): void;
+    onClose(handler: () => void): void;
+    channelBinding(): Promise<string>;
+    request(message: Record<string, unknown>): Promise<any>;
+    close(): Promise<void>;
+    private failPending;
+    private ensureConnected;
+    private connect;
+    private encrypt;
+    private decrypt;
+    private handleMessage;
+}

package/dist/transport.js

@@ -0,0 +1,195 @@
+import { ed25519 } from "@noble/curves/ed25519";
+import { b64urlDecode, b64urlEncode, canonicalJson, utf8 } from "./encoding.js";
+import { randomId } from "./identity.js";
+function bufferSource(bytes) {
+    return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+}
+function wsUrl(base, authorityId) {
+    const clean = base.replace(/\/$/, "");
+    return `${clean}/consumer/${encodeURIComponent(authorityId)}`;
+}
+async function importServerPublic(spki) {
+    return crypto.subtle.importKey("spki", bufferSource(b64urlDecode(spki)), { name: "ECDH", namedCurve: "P-256" }, false, []);
+}
+async function exportPublic(key) {
+    return b64urlEncode(new Uint8Array(await crypto.subtle.exportKey("spki", key)));
+}
+async function deriveHkdf(material, authorityId, info, usage) {
+    return crypto.subtle.deriveKey({ name: "HKDF", hash: "SHA-256", salt: bufferSource(b64urlDecode(authorityId)), info: bufferSource(utf8(info)) }, material, { name: "AES-GCM", length: 256 }, false, usage);
+}
+async function deriveSessionKeys(privateKey, publicKey, authorityId) {
+    const bits = await crypto.subtle.deriveBits({ name: "ECDH", public: publicKey }, privateKey, 256);
+    const material = await crypto.subtle.importKey("raw", bits, "HKDF", false, ["deriveKey", "deriveBits"]);
+    const send = await deriveHkdf(material, authorityId, "varco-session-c2s-v1", ["encrypt"]);
+    const recv = await deriveHkdf(material, authorityId, "varco-session-s2c-v1", ["decrypt"]);
+    const bindingBits = await crypto.subtle.deriveBits({ name: "HKDF", hash: "SHA-256", salt: bufferSource(b64urlDecode(authorityId)), info: bufferSource(utf8("varco-channel-binding-v1")) }, material, 256);
+    return { send, recv, channelBinding: b64urlEncode(new Uint8Array(bindingBits)) };
+}
+// Message types relayed even by a signaling-only bridge: pairing, session
+// auth, and WebRTC negotiation. The lane tag is envelope metadata the bridge
+// can see; it carries no plaintext and grants no permissions.
+const SIGNALING_TYPES = new Set(["access_request", "authenticate", "webrtc_offer", "webrtc_ice"]);
+const SIGNALING_ONLY_ERROR = "Bridge is signaling-only: P2P required but unavailable";
+export function envelopeLane(payloadType) {
+    return SIGNALING_TYPES.has(String(payloadType)) ? "signaling" : null;
+}
+export function closeError(code) {
+    return new Error(code === 4405 ? SIGNALING_ONLY_ERROR : "Varco transport closed");
+}
+function nonce(value) {
+    const out = new Uint8Array(12);
+    new DataView(out.buffer).setUint32(8, value, false);
+    return out;
+}
+export class RelayTransport {
+    bridgeUrl;
+    authorityId;
+    requestTimeoutMs;
+    ws = null;
+    keys = null;
+    sendNonce = 0;
+    recvNonce = 0;
+    pending = new Map();
+    eventHandler = null;
+    closeHandler = null;
+    ready = null;
+    closed = false;
+    constructor(bridgeUrl, authorityId, requestTimeoutMs = 30_000) {
+        this.bridgeUrl = bridgeUrl;
+        this.authorityId = authorityId;
+        this.requestTimeoutMs = requestTimeoutMs;
+    }
+    onEvent(handler) { this.eventHandler = handler; }
+    onClose(handler) { this.closeHandler = handler; }
+    async channelBinding() {
+        await this.ensureConnected();
+        return this.keys.channelBinding;
+    }
+    async request(message) {
+        await this.ensureConnected();
+        const requestId = message.request_id ?? randomId(8);
+        const withId = { ...message, request_id: requestId };
+        const encrypted = await this.encrypt(withId);
+        this.ws?.send(JSON.stringify(encrypted));
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(requestId);
+                reject(new Error(`Varco request timed out: ${String(message.type)}`));
+            }, this.requestTimeoutMs);
+            this.pending.set(requestId, { resolve, reject, timer });
+        });
+    }
+    async close() {
+        this.closed = true;
+        this.ws?.close();
+        this.failPending(new Error("Varco transport closed"));
+    }
+    failPending(err) {
+        for (const entry of this.pending.values()) {
+            clearTimeout(entry.timer);
+            entry.reject(err);
+        }
+        this.pending.clear();
+    }
+    async ensureConnected() {
+        if (this.closed)
+            throw new Error("Varco transport closed");
+        if (!this.ready)
+            this.ready = this.connect();
+        await this.ready;
+    }
+    async connect() {
+        const ecdh = await crypto.subtle.generateKey({ name: "ECDH", namedCurve: "P-256" }, true, ["deriveBits"]);
+        const clientPub = await exportPublic(ecdh.publicKey);
+        const ws = new WebSocket(wsUrl(this.bridgeUrl, this.authorityId));
+        this.ws = ws;
+        await new Promise((resolve, reject) => {
+            ws.onopen = () => ws.send(JSON.stringify({ type: "client_hello", client_pub: clientPub }));
+            ws.onerror = () => reject(new Error("Varco WebSocket failed"));
+            ws.onclose = () => reject(new Error("Varco WebSocket closed during handshake"));
+            ws.onmessage = async (event) => {
+                try {
+                    const outer = JSON.parse(String(event.data));
+                    const payload = outer.payload ?? outer;
+                    if (payload.type === "server_hello") {
+                        const serverPubBytes = b64urlDecode(payload.server_pub);
+                        const transcript = new Uint8Array(utf8("varco-server-hello-v1\0").length + b64urlDecode(clientPub).length + 1 + serverPubBytes.length);
+                        let offset = 0;
+                        const prefix = utf8("varco-server-hello-v1\0");
+                        transcript.set(prefix, offset);
+                        offset += prefix.length;
+                        const clientBytes = b64urlDecode(clientPub);
+                        transcript.set(clientBytes, offset);
+                        offset += clientBytes.length;
+                        transcript[offset] = 0;
+                        offset += 1;
+                        transcript.set(serverPubBytes, offset);
+                        if (!ed25519.verify(b64urlDecode(payload.signature), transcript, b64urlDecode(this.authorityId)))
+                            throw new Error("Bad authority signature");
+                        this.keys = await deriveSessionKeys(ecdh.privateKey, await importServerPublic(payload.server_pub), this.authorityId);
+                        ws.onmessage = (messageEvent) => {
+                            this.handleMessage(String(messageEvent.data)).catch((err) => {
+                                this.failPending(err instanceof Error ? err : new Error(String(err)));
+                                ws.close();
+                            });
+                        };
+                        ws.onclose = (closeEvent) => {
+                            const code = closeEvent?.code;
+                            const wasClosed = this.closed;
+                            this.closed = true;
+                            this.failPending(closeError(code));
+                            // Signaling-only rejection (4405) and explicit close() are final;
+                            // anything else is a network drop the owner may want to recover from.
+                            if (!wasClosed && code !== 4405)
+                                this.closeHandler?.();
+                        };
+                        resolve();
+                    }
+                }
+                catch (err) {
+                    reject(err);
+                }
+            };
+        });
+    }
+    async encrypt(payload) {
+        if (!this.keys)
+            throw new Error("Varco session is not ready");
+        const n = nonce(this.sendNonce++);
+        const body = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv: bufferSource(n) }, this.keys.send, bufferSource(utf8(canonicalJson(payload)))));
+        const envelope = { type: "ciphertext", nonce: b64urlEncode(n), body: b64urlEncode(body) };
+        const lane = envelopeLane(payload.type);
+        if (lane)
+            envelope.lane = lane;
+        return envelope;
+    }
+    async decrypt(envelope) {
+        if (!this.keys)
+            throw new Error("Varco session is not ready");
+        const n = b64urlDecode(envelope.nonce);
+        const expected = nonce(this.recvNonce++);
+        if (n.some((value, index) => value !== expected[index]))
+            throw new Error("Unexpected nonce");
+        const plaintext = await crypto.subtle.decrypt({ name: "AES-GCM", iv: bufferSource(n) }, this.keys.recv, bufferSource(b64urlDecode(envelope.body)));
+        return JSON.parse(new TextDecoder().decode(plaintext));
+    }
+    async handleMessage(data) {
+        const outer = JSON.parse(data);
+        if (outer.type === "relay_disabled")
+            throw new Error(SIGNALING_ONLY_ERROR);
+        const payload = await this.decrypt(outer.payload ?? outer);
+        const requestId = payload.request_id;
+        if (requestId && this.pending.has(requestId)) {
+            const pending = this.pending.get(requestId);
+            this.pending.delete(requestId);
+            clearTimeout(pending.timer);
+            if (payload.type === "error")
+                pending.reject(Object.assign(new Error(payload.message), { code: payload.code }));
+            else
+                pending.resolve(payload);
+            return;
+        }
+        this.eventHandler?.(payload);
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC,SAAS,YAAY,CAAC,KAAiB;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAgB,CAAC;AAClG,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,WAAmB;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,GAAG,KAAK,aAAa,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAC7H,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAc;IACxC,OAAO,YAAY,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAmB,EAAE,WAAmB,EAAE,IAAY,EAAE,KAAiB;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAChH,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,KAAK,CACN,CAAC;AACJ,CAAC;AAID,KAAK,UAAU,iBAAiB,CAAC,UAAqB,EAAE,SAAoB,EAAE,WAAmB;IAC/F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IACxG,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1F,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAChD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,EAAE,EACtI,QAAQ,EACR,GAAG,CACJ,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,0EAA0E;AAC1E,6EAA6E;AAC7E,8DAA8D;AAC9D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AAClG,MAAM,oBAAoB,GAAG,wDAAwD,CAAC;AAEtF,MAAM,UAAU,YAAY,CAAC,WAAoB;IAC/C,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAwB;IACjD,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,cAAc;IAWL;IAA2B;IAA6B;IAVpE,EAAE,GAAqB,IAAI,CAAC;IAC5B,IAAI,GAAuB,IAAI,CAAC;IAChC,SAAS,GAAG,CAAC,CAAC;IACd,SAAS,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,IAAI,GAAG,EAAiH,CAAC;IACnI,YAAY,GAAkC,IAAI,CAAC;IACnD,YAAY,GAAwB,IAAI,CAAC;IACzC,KAAK,GAAyB,IAAI,CAAC;IACnC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAoB,SAAiB,EAAU,WAAmB,EAAU,mBAAmB,MAAM;QAAjF,cAAS,GAAT,SAAS,CAAQ;QAAU,gBAAW,GAAX,WAAW,CAAQ;QAAU,qBAAgB,GAAhB,gBAAgB,CAAS;IAAG,CAAC;IAEzG,OAAO,CAAC,OAA6B,IAAU,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC;IAE7E,OAAO,CAAC,OAAmB,IAAU,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC;IAEnE,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,IAAK,CAAC,cAAc,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAgC;QAC5C,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAI,OAAO,CAAC,UAAiC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACxD,CAAC;IAEO,WAAW,CAAC,GAAU;QAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1G,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAC3F,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;YAC/D,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;YAChF,EAAE,CAAC,SAAS,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC7B,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC;oBACvC,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;wBACpC,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;wBACxD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;wBACvI,IAAI,MAAM,GAAG,CAAC,CAAC;wBACf,MAAM,MAAM,GAAG,IAAI,CAAC,yBAAyB,CAAC,CAAC;wBAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;wBAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;wBACxG,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;wBAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;wBAAC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC;wBAC/G,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAAC,MAAM,IAAI,CAAC,CAAC;wBACpC,UAAU,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;wBACvC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;wBAC7I,IAAI,CAAC,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;wBACrH,EAAE,CAAC,SAAS,GAAG,CAAC,YAAY,EAAE,EAAE;4BAC9B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gCAC1D,IAAI,CAAC,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gCACtE,EAAE,CAAC,KAAK,EAAE,CAAC;4BACb,CAAC,CAAC,CAAC;wBACL,CAAC,CAAC;wBACF,EAAE,CAAC,OAAO,GAAG,CAAC,UAAU,EAAE,EAAE;4BAC1B,MAAM,IAAI,GAAI,UAAqC,EAAE,IAAI,CAAC;4BAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;4BAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;4BACnB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;4BACnC,kEAAkE;4BAClE,sEAAsE;4BACtE,IAAI,CAAC,SAAS,IAAI,IAAI,KAAK,IAAI;gCAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;wBACzD,CAAC,CAAC;wBACF,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBAAC,MAAM,CAAC,GAAY,CAAC,CAAC;gBAAC,CAAC;YACzC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,OAAgC;QACpD,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/J,MAAM,QAAQ,GAA2B,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAClH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI;YAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QAC/B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAa;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAY;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;;gBAC3G,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF"}