@zapo-js/fake-server 0.3.0

package/dist/protocol/signal/fake-peer-key-bundle.js

@@ -0,0 +1,29 @@
+"use strict";
+/** Generates Signal prekey bundles for fake peers. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateFakePeerKeyBundle = generateFakePeerKeyBundle;
+const crypto_1 = require("../../transport/crypto");
+async function generateFakePeerKeyBundle(options = {}) {
+    const identityKeyPair = options.identityKeyPair ?? (await crypto_1.X25519.generateKeyPair());
+    const signedPreKeyKeyPair = await crypto_1.X25519.generateKeyPair();
+    const signedPreKeyId = options.signedPreKeyId ?? 1;
+    const signedPreKeySerialized = (0, crypto_1.toSerializedPubKey)(signedPreKeyKeyPair.pubKey);
+    const signedPreKeySignature = await (0, crypto_1.xeddsaSign)(identityKeyPair.privKey, signedPreKeySerialized);
+    const oneTimeCount = options.oneTimePreKeyCount ?? 4;
+    const firstId = options.firstOneTimePreKeyId ?? 1;
+    const oneTimePreKeys = await Promise.all(Array.from({ length: oneTimeCount }, async (_, idx) => ({
+        id: firstId + idx,
+        keyPair: await crypto_1.X25519.generateKeyPair()
+    })));
+    return {
+        registrationId: options.registrationId ?? Math.floor(Math.random() * 0x3fff) + 1,
+        identityKeyPair,
+        signedPreKey: {
+            id: signedPreKeyId,
+            keyPair: signedPreKeyKeyPair,
+            signature: signedPreKeySignature
+        },
+        oneTimePreKeys
+    };
+}
+//# sourceMappingURL=fake-peer-key-bundle.js.map

package/dist/protocol/signal/fake-peer-key-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-peer-key-bundle.js","sourceRoot":"","sources":["../../../src/protocol/signal/fake-peer-key-bundle.ts"],"names":[],"mappings":";AAAA,sDAAsD;;AA0BtD,8DA4BC;AApDD,mDAAmG;AAwB5F,KAAK,UAAU,yBAAyB,CAC3C,UAA4C,EAAE;IAE9C,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,MAAM,eAAM,CAAC,eAAe,EAAE,CAAC,CAAA;IACnF,MAAM,mBAAmB,GAAG,MAAM,eAAM,CAAC,eAAe,EAAE,CAAA;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAA;IAClD,MAAM,sBAAsB,GAAG,IAAA,2BAAkB,EAAC,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC7E,MAAM,qBAAqB,GAAG,MAAM,IAAA,mBAAU,EAAC,eAAe,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAA;IAE/F,MAAM,YAAY,GAAG,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,oBAAoB,IAAI,CAAC,CAAA;IACjD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACpD,EAAE,EAAE,OAAO,GAAG,GAAG;QACjB,OAAO,EAAE,MAAM,eAAM,CAAC,eAAe,EAAE;KAC1C,CAAC,CAAC,CACN,CAAA;IAED,OAAO;QACH,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;QAChF,eAAe;QACf,YAAY,EAAE;YACV,EAAE,EAAE,cAAc;YAClB,OAAO,EAAE,mBAAmB;YAC5B,SAAS,EAAE,qBAAqB;SACnC;QACD,cAAc;KACjB,CAAA;AACL,CAAC"}

package/dist/protocol/signal/fake-peer-recv-session.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Fake-peer-side Signal Protocol RECEIVE session.
+ *
+ * Decrypts inbound `PreKeySignalMessage` (`pkmsg`) and `SignalMessage`
+ * (`msg`) ciphertexts the real `WaClient` sends to the peer. Pairs with
+ * `FakePeerSession` (the encrypter half) so a fake peer can carry both
+ * sides of a 1:1 signal conversation.
+ *
+ * Sources:
+ *   /deobfuscated/WASignal/WASignalWhitepaper.js
+ *     (initiateSessionIncoming, deriveMsgKey)
+ *   /deobfuscated/WASignal/WASignalCipher.js
+ *   /deobfuscated/pb/WASignalWhisperTextProtocol_pb.js
+ *
+ * Cross-checked against the lib's `initiateSessionIncoming` /
+ * `decryptMsg` (`src/signal/session/SignalSession.ts`,
+ * `src/signal/session/SignalRatchet.ts`).
+ *
+ * Scope: a single chain of pkmsg + subsequent msgs from the client. We
+ * do NOT implement the full Double Ratchet rotation across multiple
+ * client→server message bursts (no recv-chain-replace on new ratchet
+ * keys). The first message uses the "Bob role" X3DH and after that we
+ * keep deriving from the same chain key. This is enough for tests that
+ * send 1-N messages in the same chain, which covers the common
+ * outbound-test scenario.
+ */
+import type { FakePeerKeyBundle } from './fake-peer-key-bundle';
+export declare class FakePeerRecvSessionError extends Error {
+    constructor(message: string);
+}
+/**
+ * Per-(remote-identity) recv state on the fake peer side.
+ *
+ * The session is bootstrapped lazily on the first inbound `pkmsg` for
+ * a given remote identity, and reused for subsequent `msg` ciphertexts
+ * in the same Double Ratchet chain.
+ */
+export declare class FakePeerRecvSession {
+    private readonly keyBundle;
+    /** 33-byte serialized remote identity pubkey (set on first pkmsg). */
+    private remoteIdentityPub;
+    private recvChain;
+    /** Root key from the X3DH derivation, used for the first DR step. */
+    private bootstrapRootKey;
+    constructor(keyBundle: FakePeerKeyBundle);
+    /**
+     * Decrypts a `<enc type="pkmsg"/>` payload. Bootstraps the recv
+     * session via the X3DH responder ("Bob") flow on the first call,
+     * then derives the message key and returns the (still padded)
+     * plaintext bytes.
+     */
+    decryptPreKeyMessage(envelope: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Decrypts a `<enc type="msg"/>` payload. Requires the recv chain
+     * to have been established by a prior `decryptPreKeyMessage` call.
+     */
+    decryptMessage(envelope: Uint8Array): Promise<Uint8Array>;
+    private decryptInnerSignalMessage;
+}
+//# sourceMappingURL=fake-peer-recv-session.d.ts.map

package/dist/protocol/signal/fake-peer-recv-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-peer-recv-session.d.ts","sourceRoot":"","sources":["../../../src/protocol/signal/fake-peer-recv-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAgBH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAQ/D,qBAAa,wBAAyB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAIrC;AASD;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,sEAAsE;IACtE,OAAO,CAAC,iBAAiB,CAA0B;IACnD,OAAO,CAAC,SAAS,CAAyB;IAC1C,qEAAqE;IACrE,OAAO,CAAC,gBAAgB,CAA0B;gBAE/B,SAAS,EAAE,iBAAiB;IAI/C;;;;;OAKG;IACU,oBAAoB,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAgE5E;;;OAGG;IACU,cAAc,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YASxD,yBAAyB;CAyG1C"}

package/dist/protocol/signal/fake-peer-recv-session.js

@@ -0,0 +1,284 @@
+"use strict";
+/**
+ * Fake-peer-side Signal Protocol RECEIVE session.
+ *
+ * Decrypts inbound `PreKeySignalMessage` (`pkmsg`) and `SignalMessage`
+ * (`msg`) ciphertexts the real `WaClient` sends to the peer. Pairs with
+ * `FakePeerSession` (the encrypter half) so a fake peer can carry both
+ * sides of a 1:1 signal conversation.
+ *
+ * Sources:
+ *   /deobfuscated/WASignal/WASignalWhitepaper.js
+ *     (initiateSessionIncoming, deriveMsgKey)
+ *   /deobfuscated/WASignal/WASignalCipher.js
+ *   /deobfuscated/pb/WASignalWhisperTextProtocol_pb.js
+ *
+ * Cross-checked against the lib's `initiateSessionIncoming` /
+ * `decryptMsg` (`src/signal/session/SignalSession.ts`,
+ * `src/signal/session/SignalRatchet.ts`).
+ *
+ * Scope: a single chain of pkmsg + subsequent msgs from the client. We
+ * do NOT implement the full Double Ratchet rotation across multiple
+ * client→server message bursts (no recv-chain-replace on new ratchet
+ * keys). The first message uses the "Bob role" X3DH and after that we
+ * keep deriving from the same chain key. This is enough for tests that
+ * send 1-N messages in the same chain, which covers the common
+ * outbound-test scenario.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FakePeerRecvSession = exports.FakePeerRecvSessionError = void 0;
+const crypto_1 = require("../../transport/crypto");
+const protos_1 = require("../../transport/protos");
+const SIGNAL_VERSION = 3;
+const SIGNAL_MAC_SIZE = 8;
+const SIGNAL_PREFIX_FF = new Uint8Array(32).fill(0xff);
+const MESSAGE_KEY_LABEL = new Uint8Array([1]);
+const CHAIN_KEY_LABEL = new Uint8Array([2]);
+class FakePeerRecvSessionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'FakePeerRecvSessionError';
+    }
+}
+exports.FakePeerRecvSessionError = FakePeerRecvSessionError;
+/**
+ * Per-(remote-identity) recv state on the fake peer side.
+ *
+ * The session is bootstrapped lazily on the first inbound `pkmsg` for
+ * a given remote identity, and reused for subsequent `msg` ciphertexts
+ * in the same Double Ratchet chain.
+ */
+class FakePeerRecvSession {
+    constructor(keyBundle) {
+        /** 33-byte serialized remote identity pubkey (set on first pkmsg). */
+        this.remoteIdentityPub = null;
+        this.recvChain = null;
+        /** Root key from the X3DH derivation, used for the first DR step. */
+        this.bootstrapRootKey = null;
+        this.keyBundle = keyBundle;
+    }
+    /**
+     * Decrypts a `<enc type="pkmsg"/>` payload. Bootstraps the recv
+     * session via the X3DH responder ("Bob") flow on the first call,
+     * then derives the message key and returns the (still padded)
+     * plaintext bytes.
+     */
+    async decryptPreKeyMessage(envelope) {
+        const body = readVersionedBody(envelope, 0);
+        const preKeyMessage = protos_1.proto.PreKeySignalMessage.decode(body);
+        const baseKey = requireBytes(preKeyMessage.baseKey, 'baseKey');
+        const remoteIdentity = requireBytes(preKeyMessage.identityKey, 'identityKey');
+        const innerMessage = requireBytes(preKeyMessage.message, 'message');
+        const signedPreKeyId = preKeyMessage.signedPreKeyId;
+        if (signedPreKeyId === null || signedPreKeyId === undefined) {
+            throw new FakePeerRecvSessionError('PreKeySignalMessage missing signedPreKeyId');
+        }
+        if (signedPreKeyId !== this.keyBundle.signedPreKey.id) {
+            throw new FakePeerRecvSessionError(`signedPreKeyId mismatch: got ${signedPreKeyId}, expected ${this.keyBundle.signedPreKey.id}`);
+        }
+        const oneTimePreKeyId = preKeyMessage.preKeyId;
+        let oneTimePrivKey = null;
+        if (oneTimePreKeyId !== null && oneTimePreKeyId !== undefined) {
+            const oneTimeKeyEntry = this.keyBundle.oneTimePreKeys.find((entry) => entry.id === oneTimePreKeyId);
+            if (!oneTimeKeyEntry) {
+                throw new FakePeerRecvSessionError(`unknown one-time preKeyId ${oneTimePreKeyId}`);
+            }
+            oneTimePrivKey = oneTimeKeyEntry.keyPair.privKey;
+        }
+        // Bob-role X3DH:
+        //   DH1 = ECDH(signedPreKey.priv, remote.identityPub)
+        //   DH2 = ECDH(identity.priv, baseKey)
+        //   DH3 = ECDH(signedPreKey.priv, baseKey)
+        //   DH4 = ECDH(oneTimePreKey.priv, baseKey)  [optional]
+        const remoteIdentityRaw = (0, crypto_1.toRawPubKey)(remoteIdentity);
+        const baseKeyRaw = (0, crypto_1.toRawPubKey)(baseKey);
+        const signedPriv = this.keyBundle.signedPreKey.keyPair.privKey;
+        const identityPriv = this.keyBundle.identityKeyPair.privKey;
+        const [dh1, dh2, dh3, dh4] = await Promise.all([
+            crypto_1.X25519.scalarMult(signedPriv, remoteIdentityRaw),
+            crypto_1.X25519.scalarMult(identityPriv, baseKeyRaw),
+            crypto_1.X25519.scalarMult(signedPriv, baseKeyRaw),
+            oneTimePrivKey
+                ? crypto_1.X25519.scalarMult(oneTimePrivKey, baseKeyRaw)
+                : Promise.resolve(null)
+        ]);
+        const sharedParts = [SIGNAL_PREFIX_FF, dh1, dh2, dh3];
+        if (dh4)
+            sharedParts.push(dh4);
+        const shared = concatBytes(sharedParts);
+        const [rootKey] = await (0, crypto_1.hkdfSplit)(shared, null, 'WhisperText');
+        // The first inbound message kicks the Double Ratchet once: the
+        // inner SignalMessage carries Alice's fresh sendRatchet pubkey,
+        // which we mix with our signedPreKey privkey via calculateRatchet
+        // to derive the recv chain key. (See SignalSession.calculateRatchet
+        // and decryptMsgFromSession in the lib.)
+        this.remoteIdentityPub = (0, crypto_1.toSerializedPubKey)(remoteIdentity);
+        this.bootstrapRootKey = rootKey;
+        return this.decryptInnerSignalMessage(innerMessage, true);
+    }
+    /**
+     * Decrypts a `<enc type="msg"/>` payload. Requires the recv chain
+     * to have been established by a prior `decryptPreKeyMessage` call.
+     */
+    async decryptMessage(envelope) {
+        if (!this.recvChain) {
+            throw new FakePeerRecvSessionError('recv session is not initialized — call decryptPreKeyMessage first');
+        }
+        return this.decryptInnerSignalMessage(envelope, false);
+    }
+    async decryptInnerSignalMessage(signalMessageBytes, isBootstrap) {
+        if (signalMessageBytes.byteLength < 1 + SIGNAL_MAC_SIZE) {
+            throw new FakePeerRecvSessionError('signal message too short');
+        }
+        const versionByte = signalMessageBytes[0];
+        if (versionByte >>> 4 !== SIGNAL_VERSION) {
+            throw new FakePeerRecvSessionError(`unsupported signal version ${versionByte >>> 4}`);
+        }
+        const macStart = signalMessageBytes.byteLength - SIGNAL_MAC_SIZE;
+        const versionedBody = signalMessageBytes.subarray(0, macStart);
+        const macBytes = signalMessageBytes.subarray(macStart);
+        const protoBody = versionedBody.subarray(1);
+        const signalMessage = protos_1.proto.SignalMessage.decode(protoBody);
+        const ratchetKey = requireBytes(signalMessage.ratchetKey, 'ratchetKey');
+        const counter = signalMessage.counter;
+        if (counter === null || counter === undefined) {
+            throw new FakePeerRecvSessionError('SignalMessage missing counter');
+        }
+        const ciphertext = requireBytes(signalMessage.ciphertext, 'ciphertext');
+        // Bootstrap or reuse the recv chain.
+        if (isBootstrap) {
+            if (!this.bootstrapRootKey) {
+                throw new FakePeerRecvSessionError('bootstrap rootKey missing');
+            }
+            // Mirror the lib's `calculateRatchet`:
+            //   sharedSecret = ECDH(signedPreKey.priv, alice.ratchetPub)
+            //   [_, chainKey] = HKDF(sharedSecret, rootKey, "WhisperRatchet")
+            const ratchetRaw = (0, crypto_1.toRawPubKey)(ratchetKey);
+            const ratchetShared = await crypto_1.X25519.scalarMult(this.keyBundle.signedPreKey.keyPair.privKey, ratchetRaw);
+            const [, chainKey] = await (0, crypto_1.hkdfSplit)(ratchetShared, this.bootstrapRootKey, 'WhisperRatchet');
+            this.recvChain = {
+                ratchetPubKey: (0, crypto_1.toSerializedPubKey)(ratchetKey),
+                chainKey,
+                nextIndex: 0
+            };
+            this.bootstrapRootKey = null;
+        }
+        else if (!this.recvChain) {
+            throw new FakePeerRecvSessionError('recv chain not bootstrapped');
+        }
+        else if (!uint8Equal(this.recvChain.ratchetPubKey, (0, crypto_1.toSerializedPubKey)(ratchetKey))) {
+            throw new FakePeerRecvSessionError('recv chain ratchet rotation is not implemented in the fake peer');
+        }
+        // Walk the chain forward to the requested counter (no out-of-order).
+        if (counter < this.recvChain.nextIndex) {
+            throw new FakePeerRecvSessionError(`out-of-order recv counter ${counter} < ${this.recvChain.nextIndex}`);
+        }
+        let chainKey = this.recvChain.chainKey;
+        let messageKey = null;
+        let nextIndex = this.recvChain.nextIndex;
+        while (nextIndex <= counter) {
+            const derived = await deriveMessageKey(chainKey);
+            chainKey = derived.nextChainKey;
+            if (nextIndex === counter) {
+                messageKey = derived.messageKey;
+            }
+            nextIndex += 1;
+        }
+        if (!messageKey) {
+            throw new FakePeerRecvSessionError('failed to derive message key');
+        }
+        this.recvChain = {
+            ratchetPubKey: this.recvChain.ratchetPubKey,
+            chainKey,
+            nextIndex
+        };
+        // Verify MAC.
+        if (!this.remoteIdentityPub) {
+            throw new FakePeerRecvSessionError('remoteIdentityPub not set');
+        }
+        const localPub = (0, crypto_1.toSerializedPubKey)(this.keyBundle.identityKeyPair.pubKey);
+        const macInput = concatBytes([this.remoteIdentityPub, localPub, versionedBody]);
+        const macKeyHandle = await (0, crypto_1.importHmacKey)(messageKey.macKey);
+        const expectedFullMac = await (0, crypto_1.hmacSign)(macKeyHandle, macInput);
+        const expectedMac = expectedFullMac.subarray(0, SIGNAL_MAC_SIZE);
+        if (!uint8Equal(expectedMac, macBytes)) {
+            throw new FakePeerRecvSessionError('signal message MAC mismatch');
+        }
+        // Decrypt the AES-CBC ciphertext.
+        const cipherKeyHandle = await (0, crypto_1.importAesCbcKey)(messageKey.cipherKey);
+        const padded = await (0, crypto_1.aesCbcDecrypt)(cipherKeyHandle, messageKey.iv, ciphertext);
+        return unpadPkcs7(padded);
+    }
+}
+exports.FakePeerRecvSession = FakePeerRecvSession;
+async function deriveMessageKey(chainKey) {
+    const hmacKey = await (0, crypto_1.importHmacKey)(chainKey);
+    const [messageInputKey, nextChainRaw] = await Promise.all([
+        (0, crypto_1.hmacSign)(hmacKey, MESSAGE_KEY_LABEL),
+        (0, crypto_1.hmacSign)(hmacKey, CHAIN_KEY_LABEL)
+    ]);
+    const expanded = await (0, crypto_1.hkdf)(messageInputKey, null, 'WhisperMessageKeys', 80);
+    return {
+        nextChainKey: nextChainRaw.subarray(0, 32),
+        messageKey: {
+            cipherKey: expanded.subarray(0, 32),
+            macKey: expanded.subarray(32, 64),
+            iv: expanded.subarray(64, 80)
+        }
+    };
+}
+function readVersionedBody(envelope, suffixLength) {
+    if (envelope.byteLength < 1) {
+        throw new FakePeerRecvSessionError('signal envelope is empty');
+    }
+    const version = envelope[0] >>> 4;
+    if (version !== SIGNAL_VERSION) {
+        throw new FakePeerRecvSessionError(`unsupported signal version ${version}`);
+    }
+    const bodyEnd = envelope.byteLength - suffixLength;
+    if (bodyEnd <= 1) {
+        throw new FakePeerRecvSessionError('invalid signal envelope length');
+    }
+    return envelope.subarray(1, bodyEnd);
+}
+function unpadPkcs7(padded) {
+    if (padded.byteLength === 0)
+        return padded;
+    const padLen = padded[padded.byteLength - 1];
+    if (padLen === 0 || padLen > 16)
+        return padded;
+    if (padLen > padded.byteLength)
+        return padded;
+    return padded.subarray(0, padded.byteLength - padLen);
+}
+function uint8Equal(a, b) {
+    if (a.byteLength !== b.byteLength)
+        return false;
+    for (let i = 0; i < a.byteLength; i += 1) {
+        if (a[i] !== b[i])
+            return false;
+    }
+    return true;
+}
+function concatBytes(parts) {
+    let total = 0;
+    for (const p of parts)
+        total += p.byteLength;
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const p of parts) {
+        out.set(p, offset);
+        offset += p.byteLength;
+    }
+    return out;
+}
+function requireBytes(value, label) {
+    if (!value)
+        throw new FakePeerRecvSessionError(`${label} missing`);
+    return value;
+}
+// CryptoKey is referenced via the `CryptoKey` type-only import above.
+// The `void` is just to satisfy ts(6133) in case the file is compiled
+// without consumers.
+void null;
+//# sourceMappingURL=fake-peer-recv-session.js.map

package/dist/protocol/signal/fake-peer-recv-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-peer-recv-session.js","sourceRoot":"","sources":["../../../src/protocol/signal/fake-peer-recv-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AAEH,mDAW+B;AAC/B,mDAA8C;AAI9C,MAAM,cAAc,GAAG,CAAC,CAAA;AACxB,MAAM,eAAe,GAAG,CAAC,CAAA;AACzB,MAAM,gBAAgB,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACtD,MAAM,iBAAiB,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC7C,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAE3C,MAAa,wBAAyB,SAAQ,KAAK;IAC/C,YAAmB,OAAe;QAC9B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;IAC1C,CAAC;CACJ;AALD,4DAKC;AASD;;;;;;GAMG;AACH,MAAa,mBAAmB;IAQ5B,YAAmB,SAA4B;QAN/C,sEAAsE;QAC9D,sBAAiB,GAAsB,IAAI,CAAA;QAC3C,cAAS,GAAqB,IAAI,CAAA;QAC1C,qEAAqE;QAC7D,qBAAgB,GAAsB,IAAI,CAAA;QAG9C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC9B,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,oBAAoB,CAAC,QAAoB;QAClD,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC3C,MAAM,aAAa,GAAG,cAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAC9D,MAAM,cAAc,GAAG,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QAC7E,MAAM,YAAY,GAAG,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QACnE,MAAM,cAAc,GAAG,aAAa,CAAC,cAAc,CAAA;QACnD,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,wBAAwB,CAAC,4CAA4C,CAAC,CAAA;QACpF,CAAC;QACD,IAAI,cAAc,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,wBAAwB,CAC9B,gCAAgC,cAAc,cAAc,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,CAC/F,CAAA;QACL,CAAC;QAED,MAAM,eAAe,GAAG,aAAa,CAAC,QAAQ,CAAA;QAC9C,IAAI,cAAc,GAAsB,IAAI,CAAA;QAC5C,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CACtD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,eAAe,CAC1C,CAAA;YACD,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnB,MAAM,IAAI,wBAAwB,CAC9B,6BAA6B,eAAe,EAAE,CACjD,CAAA;YACL,CAAC;YACD,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAA;QACpD,CAAC;QAED,iBAAiB;QACjB,sDAAsD;QACtD,uCAAuC;QACvC,2CAA2C;QAC3C,wDAAwD;QACxD,MAAM,iBAAiB,GAAG,IAAA,oBAAW,EAAC,cAAc,CAAC,CAAA;QACrD,MAAM,UAAU,GAAG,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAA;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAA;QAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAA;QAE3D,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,eAAM,CAAC,UAAU,CAAC,UAAU,EAAE,iBAAiB,CAAC;YAChD,eAAM,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC;YAC3C,eAAM,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC;YACzC,cAAc;gBACV,CAAC,CAAC,eAAM,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC;gBAC/C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAoB,IAAI,CAAC;SACjD,CAAC,CAAA;QACF,MAAM,WAAW,GAAiB,CAAC,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QACnE,IAAI,GAAG;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;QAEvC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAA,kBAAS,EAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QAC9D,+DAA+D;QAC/D,gEAAgE;QAChE,kEAAkE;QAClE,oEAAoE;QACpE,yCAAyC;QACzC,IAAI,CAAC,iBAAiB,GAAG,IAAA,2BAAkB,EAAC,cAAc,CAAC,CAAA;QAC3D,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAA;QAE/B,OAAO,IAAI,CAAC,yBAAyB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IAC7D,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,cAAc,CAAC,QAAoB;QAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,wBAAwB,CAC9B,mEAAmE,CACtE,CAAA;QACL,CAAC;QACD,OAAO,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC1D,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACnC,kBAA8B,EAC9B,WAAoB;QAEpB,IAAI,kBAAkB,CAAC,UAAU,GAAG,CAAC,GAAG,eAAe,EAAE,CAAC;YACtD,MAAM,IAAI,wBAAwB,CAAC,0BAA0B,CAAC,CAAA;QAClE,CAAC;QACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACzC,IAAI,WAAW,KAAK,CAAC,KAAK,cAAc,EAAE,CAAC;YACvC,MAAM,IAAI,wBAAwB,CAC9B,8BAA8B,WAAW,KAAK,CAAC,EAAE,CACpD,CAAA;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,GAAG,eAAe,CAAA;QAChE,MAAM,aAAa,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC9D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACtD,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QAE3C,MAAM,aAAa,GAAG,cAAK,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QACvE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAA;QACrC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,wBAAwB,CAAC,+BAA+B,CAAC,CAAA;QACvE,CAAC;QACD,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QAEvE,qCAAqC;QACrC,IAAI,WAAW,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,CAAC,CAAA;YACnE,CAAC;YACD,uCAAuC;YACvC,6DAA6D;YAC7D,kEAAkE;YAClE,MAAM,UAAU,GAAG,IAAA,oBAAW,EAAC,UAAU,CAAC,CAAA;YAC1C,MAAM,aAAa,GAAG,MAAM,eAAM,CAAC,UAAU,CACzC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAC3C,UAAU,CACb,CAAA;YACD,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAA,kBAAS,EAChC,aAAa,EACb,IAAI,CAAC,gBAAgB,EACrB,gBAAgB,CACnB,CAAA;YACD,IAAI,CAAC,SAAS,GAAG;gBACb,aAAa,EAAE,IAAA,2BAAkB,EAAC,UAAU,CAAC;gBAC7C,QAAQ;gBACR,SAAS,EAAE,CAAC;aACf,CAAA;YACD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;QAChC,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,wBAAwB,CAAC,6BAA6B,CAAC,CAAA;QACrE,CAAC;aAAM,IACH,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAA,2BAAkB,EAAC,UAAU,CAAC,CAAC,EAC3E,CAAC;YACC,MAAM,IAAI,wBAAwB,CAC9B,iEAAiE,CACpE,CAAA;QACL,CAAC;QAED,qEAAqE;QACrE,IAAI,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,wBAAwB,CAC9B,6BAA6B,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CACvE,CAAA;QACL,CAAC;QACD,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAA;QACtC,IAAI,UAAU,GACV,IAAI,CAAA;QACR,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAA;QACxC,OAAO,SAAS,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YAChD,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAA;YAC/B,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;gBACxB,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;YACnC,CAAC;YACD,SAAS,IAAI,CAAC,CAAA;QAClB,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,wBAAwB,CAAC,8BAA8B,CAAC,CAAA;QACtE,CAAC;QACD,IAAI,CAAC,SAAS,GAAG;YACb,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa;YAC3C,QAAQ;YACR,SAAS;SACZ,CAAA;QAED,cAAc;QACd,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC1B,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,CAAC,CAAA;QACnE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,2BAAkB,EAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QAC1E,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAA;QAC/E,MAAM,YAAY,GAAG,MAAM,IAAA,sBAAa,EAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC3D,MAAM,eAAe,GAAG,MAAM,IAAA,iBAAQ,EAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;QAC9D,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;QAChE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,wBAAwB,CAAC,6BAA6B,CAAC,CAAA;QACrE,CAAC;QAED,kCAAkC;QAClC,MAAM,eAAe,GAAG,MAAM,IAAA,wBAAe,EAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACnE,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAa,EAAC,eAAe,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QAC9E,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;CACJ;AAxMD,kDAwMC;AAQD,KAAK,UAAU,gBAAgB,CAC3B,QAAoB;IAKpB,MAAM,OAAO,GAAG,MAAM,IAAA,sBAAa,EAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,IAAA,iBAAQ,EAAC,OAAO,EAAE,iBAAiB,CAAC;QACpC,IAAA,iBAAQ,EAAC,OAAO,EAAE,eAAe,CAAC;KACrC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,MAAM,IAAA,aAAI,EAAC,eAAe,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAA;IAC5E,OAAO;QACH,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1C,UAAU,EAAE;YACR,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;YACjC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;SAChC;KACJ,CAAA;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAoB,EAAE,YAAoB;IACjE,IAAI,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,wBAAwB,CAAC,0BAA0B,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QAC7B,MAAM,IAAI,wBAAwB,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,GAAG,YAAY,CAAA;IAClD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,wBAAwB,CAAC,gCAAgC,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,MAAkB;IAClC,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAA;IAC5C,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,EAAE;QAAE,OAAO,MAAM,CAAA;IAC9C,IAAI,MAAM,GAAG,MAAM,CAAC,UAAU;QAAE,OAAO,MAAM,CAAA;IAC7C,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC5C,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;IACnC,CAAC;IACD,OAAO,IAAI,CAAA;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAA4B;IAC7C,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,KAAK,IAAI,CAAC,CAAC,UAAU,CAAA;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QAClB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAA;IAC1B,CAAC;IACD,OAAO,GAAG,CAAA;AACd,CAAC;AAED,SAAS,YAAY,CACjB,KAAoC,EACpC,KAAa;IAEb,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,wBAAwB,CAAC,GAAG,KAAK,UAAU,CAAC,CAAA;IAClE,OAAO,KAAK,CAAA;AAChB,CAAC;AAED,sEAAsE;AACtE,sEAAsE;AACtE,qBAAqB;AACrB,KAAM,IAAoC,CAAA"}

package/dist/protocol/signal/fake-peer-session.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Fake-peer-side Signal Protocol session.
+ *
+ * This is the encrypter half: a fake peer (acting as "Alice") sends messages
+ * to the real `WaClient` (acting as "Bob"). It implements just enough of
+ * the WhatsApp Web Signal Protocol to:
+ *
+ *   1. Run X3DH against the client's prekey bundle (captured from the
+ *      client's PreKey upload IQ).
+ *   2. Maintain a sending chain key.
+ *   3. Encrypt a plaintext into a `PreKeySignalMessage` (first message)
+ *      or `SignalMessage` (subsequent messages).
+ *
+ * Sources:
+ *   /deobfuscated/WASignal/WASignalWhitepaper.js          (X3DH inputs)
+ *   /deobfuscated/WASignal/WASignalSessions.js            (session structure)
+ *   /deobfuscated/WASignal/WASignalCipher.js              (encrypt path)
+ *   /deobfuscated/pb/WASignalWhisperTextProtocol_pb.js    (protobuf shapes)
+ *
+ * Cross-checked against the lib's `initiateSessionOutgoing` /
+ * `encryptMsg` (`src/signal/session/SignalSession.ts`,
+ * `src/signal/session/SignalRatchet.ts`) — the byte-level recipe is the
+ * same; the only difference is that this fake-peer implementation does
+ * **not** persist sessions or implement the receive ratchet (the fake
+ * server doesn't need to handle inbound messages from the real client to
+ * make Phase 8 work).
+ */
+import { type CryptoKey, type SignalKeyPair } from '../../transport/crypto';
+import type { ClientPreKeyBundle } from './prekey-upload';
+export interface FakePeerIdentity {
+    /** Long-term identity keypair. */
+    readonly identityKeyPair: SignalKeyPair;
+    /** Registration id used in PreKeySignalMessage. */
+    readonly registrationId: number;
+}
+export declare function generateFakePeerIdentity(): Promise<FakePeerIdentity>;
+export declare class FakePeerSession {
+    private readonly identity;
+    /** 33-byte serialized peer (local) static identity public key. */
+    private readonly localPub;
+    /** 33-byte serialized client (remote) static identity public key. */
+    private readonly remotePub;
+    private sendChain;
+    private rootKey;
+    private firstMessageHeader;
+    private constructor();
+    get registrationId(): number;
+    /**
+     * Initiates a new outgoing session against the client's prekey bundle.
+     *
+     * Mirrors the X3DH initiator path of `initiateSessionOutgoing` (lib)
+     * and the deobfuscated `WASignalSessions.initiateSessionOutgoing`:
+     *
+     *   localOneTimeBase = generate ephemeral keypair (Alice's "base key")
+     *
+     *   DH1 = ECDH(local.identity.priv, remote.signedPreKey.pub)
+     *   DH2 = ECDH(localOneTimeBase.priv, remote.identity.pub)
+     *   DH3 = ECDH(localOneTimeBase.priv, remote.signedPreKey.pub)
+     *   DH4 = ECDH(localOneTimeBase.priv, remote.oneTimePreKey.pub)  [optional]
+     *
+     *   secret = 0xFF*32 || DH1 || DH2 || DH3 || [DH4]
+     *   [rootKey, chainKey] = HKDF_split(secret, salt=null, info="WhisperText")
+     *
+     *   Then a single send-ratchet kick:
+     *     sendRatchetKeyPair = generateKeyPair()
+     *     sharedSecret = ECDH(sendRatchetKeyPair.priv, remoteRatchetKey)
+     *     [rootKey, chainKey] = HKDF_split(sharedSecret, salt=rootKey, info="WhisperRatchet")
+     *
+     *   Where remoteRatchetKey = remote.signedPreKey.pub (no separate
+     *   ratchet key in the upload IQ — this matches the lib's behavior).
+     */
+    static initiate(identity: FakePeerIdentity, bundle: ClientPreKeyBundle, oneTimePreKey?: {
+        readonly keyId: number;
+        readonly publicKey: Uint8Array;
+    }): Promise<FakePeerSession>;
+    /**
+     * Encrypts a plaintext message and returns either a `pkmsg` (first
+     * message in the session — wraps the SignalMessage in a
+     * PreKeySignalMessage envelope) or `msg` (subsequent messages).
+     */
+    encrypt(plaintext: Uint8Array): Promise<{
+        readonly type: 'pkmsg' | 'msg';
+        readonly ciphertext: Uint8Array;
+    }>;
+}
+export type { CryptoKey };
+//# sourceMappingURL=fake-peer-session.d.ts.map

package/dist/protocol/signal/fake-peer-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-peer-session.d.ts","sourceRoot":"","sources":["../../../src/protocol/signal/fake-peer-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAEH,KAAK,SAAS,EAOd,KAAK,aAAa,EAIrB,MAAM,wBAAwB,CAAA;AAG/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAQzD,MAAM,WAAW,gBAAgB;IAC7B,kCAAkC;IAClC,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAA;IACvC,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAClC;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAM1E;AAmBD,qBAAa,eAAe;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,kEAAkE;IAClE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAY;IACrC,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,OAAO,CAAY;IAC3B,OAAO,CAAC,kBAAkB,CAA4B;IAEtD,OAAO;IAgBP,IAAW,cAAc,IAAI,MAAM,CAElC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;WACiB,QAAQ,CACxB,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,kBAAkB,EAC1B,aAAa,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;KAAE,GAC3E,OAAO,CAAC,eAAe,CAAC;IA0D3B;;;;OAIG;IACU,OAAO,CAChB,SAAS,EAAE,UAAU,GACtB,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,KAAK,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC;CAoDlF;AA4CD,YAAY,EAAE,SAAS,EAAE,CAAA"}