edgeaegis 2026.10.1

package/tools/.build/scr/core/version.d.ts

@@ -0,0 +1 @@
+export declare const SHIELD_VERSION = "2026.10.1";

package/tools/.build/scr/core/version.js

@@ -0,0 +1,3 @@
+// Generated from package.json by tools/sync-version.mjs.
+export const SHIELD_VERSION = "2026.10.1";
+//# sourceMappingURL=version.js.map

package/tools/.build/scr/core/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../../scr/core/version.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC"}

package/tools/.build/scr/http-boundary/index.d.ts

@@ -0,0 +1,19 @@
+export { parseStrictJson } from "./json.js";
+export interface BoundaryLimits {
+    maxBodyBytes: number;
+    maxUrlBytes: number;
+    maxHeaderBytes: number;
+    maxHeaders: number;
+    bodyTimeoutMs: number;
+}
+export declare const defaultLimits: BoundaryLimits;
+export declare function limitsWith(input?: Partial<BoundaryLimits>): BoundaryLimits;
+/** Must run BEFORE constructing a URL/Request when the host exposes the original target. */
+export declare function canonicalPath(target: string): string;
+/** Raw framing inspection is available ONLY to the local Node adapter, not to Web Request. */
+export declare function checkRawHeaders(raw: readonly string[]): void;
+export declare function checkBoundary(request: Request, limits: BoundaryLimits, publicHosts: readonly string[], rawTarget?: string, mode?: "http" | "websocket"): {
+    url: URL;
+    path: string;
+};
+export declare function readBody(request: Request, limits: BoundaryLimits): Promise<Uint8Array>;

package/tools/.build/scr/http-boundary/index.js

@@ -0,0 +1,173 @@
+import { requireInteger, ShieldError } from "../core/types.js";
+export { parseStrictJson } from "./json.js";
+export const defaultLimits = {
+    maxBodyBytes: 262144,
+    maxUrlBytes: 8192,
+    maxHeaderBytes: 16384,
+    maxHeaders: 64,
+    bodyTimeoutMs: 5000,
+};
+export function limitsWith(input = {}) {
+    const limits = { ...defaultLimits, ...input };
+    requireInteger(limits.maxBodyBytes, 0, 16_777_216, "maxBodyBytes");
+    requireInteger(limits.maxUrlBytes, 256, 65536, "maxUrlBytes");
+    requireInteger(limits.maxHeaderBytes, 256, 65536, "maxHeaderBytes");
+    requireInteger(limits.maxHeaders, 1, 256, "maxHeaders");
+    requireInteger(limits.bodyTimeoutMs, 1, 60000, "bodyTimeoutMs");
+    return limits;
+}
+/** Must run BEFORE constructing a URL/Request when the host exposes the original target. */
+export function canonicalPath(target) {
+    const path = target.split("?", 1)[0] ?? "";
+    if (!path.startsWith("/") || path.startsWith("//") || /[\\;#\u0000-\u0020\u007f]/.test(path))
+        throw new ShieldError("ambiguous-path");
+    if (/%(?:2f|5c|25|2e|00|3f|23|3b)/i.test(path))
+        throw new ShieldError("ambiguous-path-encoding");
+    let decoded;
+    try {
+        decoded = decodeURIComponent(path);
+    }
+    catch {
+        throw new ShieldError("invalid-path-encoding");
+    }
+    if (decoded.includes("//") ||
+        /(?:^|\/)\.{1,2}(?:\/|$)/.test(decoded) ||
+        /[\\;#?\u0000-\u0020\u007f]/.test(decoded) ||
+        decoded !== decoded.normalize("NFC"))
+        throw new ShieldError("ambiguous-path");
+    return decoded;
+}
+/** Raw framing inspection is available ONLY to the local Node adapter, not to Web Request. */
+export function checkRawHeaders(raw) {
+    if (raw.length > 128)
+        throw new ShieldError("too-many-raw-headers", 431);
+    const seen = new Set();
+    for (let i = 0; i < raw.length; i += 2) {
+        const name = (raw[i] ?? "").toLowerCase();
+        const value = raw[i + 1] ?? "";
+        if (!/^[!#$%&'*+.^_`|~0-9a-z-]+$/.test(name) ||
+            /[\u0000-\u0008\u000a-\u001f\u007f]/.test(value))
+            throw new ShieldError("invalid-raw-header");
+        if (seen.has(name) &&
+            ["host", "content-length", "transfer-encoding", "authorization"].includes(name))
+            throw new ShieldError("duplicate-security-header");
+        seen.add(name);
+    }
+    if (seen.has("content-length") && seen.has("transfer-encoding"))
+        throw new ShieldError("ambiguous-framing");
+}
+export function checkBoundary(request, limits, publicHosts, rawTarget, mode = "http") {
+    if (new TextEncoder().encode(request.url).length > limits.maxUrlBytes)
+        throw new ShieldError("url-too-large", 414);
+    const url = new URL(request.url);
+    if (!["https:", "http:"].includes(url.protocol) ||
+        url.username ||
+        url.password ||
+        !publicHosts.includes(url.host))
+        throw new ShieldError("untrusted-host", 421);
+    if (request.headers.has("host") && request.headers.get("host") !== url.host)
+        throw new ShieldError("host-mismatch", 421);
+    if (rawTarget !== undefined)
+        canonicalPath(rawTarget);
+    const path = canonicalPath(url.pathname);
+    try {
+        decodeURIComponent(url.search);
+    }
+    catch {
+        throw new ShieldError("invalid-query-encoding");
+    }
+    if ([...url.searchParams].length > 128)
+        throw new ShieldError("too-many-query-fields");
+    let headerBytes = 0;
+    let headerCount = 0;
+    for (const [name, value] of request.headers) {
+        headerCount++;
+        headerBytes += new TextEncoder().encode(name + value).length + 4;
+        if (/[\u0000-\u0008\u000a-\u001f\u007f]/.test(value))
+            throw new ShieldError("invalid-header");
+    }
+    if (headerBytes > limits.maxHeaderBytes || headerCount > limits.maxHeaders)
+        throw new ShieldError("headers-too-large", 431);
+    const cl = request.headers.get("content-length");
+    const te = request.headers.get("transfer-encoding");
+    if (request.headers.has("expect") || request.headers.has("trailer"))
+        throw new ShieldError("unsupported-expect-or-trailers", 417);
+    if (["GET", "HEAD"].includes(request.method) && (te !== null || Number(cl ?? "0") > 0))
+        throw new ShieldError("body-not-allowed-for-method");
+    if (te && (cl !== null || te.toLowerCase() !== "chunked"))
+        throw new ShieldError("ambiguous-framing");
+    if (cl !== null && (!/^(0|[1-9][0-9]*)$/.test(cl) || !Number.isSafeInteger(Number(cl))))
+        throw new ShieldError("invalid-content-length");
+    if (cl !== null && Number(cl) > limits.maxBodyBytes)
+        throw new ShieldError("body-too-large", 413);
+    const connection = request.headers.get("connection");
+    if (connection
+        ?.split(",")
+        .some((s) => !["close", "keep-alive", ...(mode === "websocket" ? ["upgrade"] : [])].includes(s.trim().toLowerCase())))
+        throw new ShieldError("unsafe-connection-header");
+    if ((request.headers.has("upgrade") && mode !== "websocket") ||
+        request.method === "CONNECT" ||
+        request.method === "TRACE")
+        throw new ShieldError("unsupported-protocol", 405);
+    if (mode === "websocket" &&
+        (request.method !== "GET" ||
+            request.headers.get("upgrade")?.toLowerCase() !== "websocket" ||
+            request.headers.get("sec-websocket-version") !== "13" ||
+            !/^[A-Za-z0-9+/]{22}==$/.test(request.headers.get("sec-websocket-key") ?? "") ||
+            te !== null ||
+            Number(cl ?? "0") !== 0))
+        throw new ShieldError("invalid-websocket-handshake", 400);
+    if (request.headers.has("content-encoding") &&
+        request.headers.get("content-encoding") !== "identity")
+        throw new ShieldError("unsupported-content-encoding", 415);
+    return { url, path };
+}
+export async function readBody(request, limits) {
+    if (!request.body) {
+        if (Number(request.headers.get("content-length") ?? "0") !== 0)
+            throw new ShieldError("body-length-mismatch");
+        return new Uint8Array();
+    }
+    const reader = request.body.getReader();
+    let timer;
+    const chunks = [];
+    let size = 0;
+    try {
+        const timeout = new Promise((_, reject) => {
+            timer = setTimeout(() => reject(new ShieldError("body-timeout", 408)), limits.bodyTimeoutMs);
+        });
+        await Promise.race([
+            (async () => {
+                while (true) {
+                    const item = await reader.read();
+                    if (item.done)
+                        break;
+                    size += item.value.byteLength;
+                    if (size > limits.maxBodyBytes)
+                        throw new ShieldError("body-too-large", 413);
+                    chunks.push(item.value.slice());
+                }
+            })(),
+            timeout,
+        ]);
+    }
+    catch (error) {
+        void reader.cancel().catch(() => { });
+        throw error;
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+    const cl = request.headers.get("content-length");
+    if (cl !== null && Number(cl) !== size)
+        throw new ShieldError("body-length-mismatch");
+    const body = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+        body.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return body;
+}
+//# sourceMappingURL=index.js.map

package/tools/.build/scr/http-boundary/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../scr/http-boundary/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAS5C,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,IAAI;IACjB,cAAc,EAAE,KAAK;IACrB,UAAU,EAAE,EAAE;IACd,aAAa,EAAE,IAAI;CACpB,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,KAAK,GAA4B,EAAE;IAC5D,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,KAAK,EAAE,CAAC;IAC9C,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACnE,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAC9D,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACpE,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IACxD,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1F,MAAM,IAAI,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC1C,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACjG,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC;IACD,IACE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QACvC,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1C,OAAO,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;QAEpC,MAAM,IAAI,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,GAAsB;IACpD,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,IACE,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;YAEhD,MAAM,IAAI,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAC9C,IACE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACd,CAAC,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAE/E,MAAM,IAAI,WAAW,CAAC,2BAA2B,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC7D,MAAM,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAgB,EAChB,MAAsB,EACtB,WAA8B,EAC9B,SAAkB,EAClB,IAAI,GAAyB,MAAM;IAEnC,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW;QACnE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IACE,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3C,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAE/B,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI;QACzE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,SAAS;QAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,uBAAuB,CAAC,CAAC;IACvF,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5C,WAAW,EAAE,CAAC;QACd,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACjE,IAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,WAAW,GAAG,MAAM,CAAC,cAAc,IAAI,WAAW,GAAG,MAAM,CAAC,UAAU;QACxE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QACjE,MAAM,IAAI,WAAW,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACpF,MAAM,IAAI,WAAW,CAAC,6BAA6B,CAAC,CAAC;IACvD,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;QACvD,MAAM,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC7C,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,CAAC;IAClD,IAAI,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY;QAAE,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACrD,IACE,UAAU;QACR,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,IAAI,CACH,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC7E,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CACvB,CACJ;QAEH,MAAM,IAAI,WAAW,CAAC,0BAA0B,CAAC,CAAC;IACpD,IACE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC;QACxD,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,OAAO,CAAC,MAAM,KAAK,OAAO;QAE1B,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IACrD,IACE,IAAI,KAAK,WAAW;QACpB,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK;YACvB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW;YAC7D,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,IAAI;YACrD,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC7E,EAAE,KAAK,IAAI;YACX,MAAM,CAAC,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAE1B,MAAM,IAAI,WAAW,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAC5D,IACE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,UAAU;QAEtD,MAAM,IAAI,WAAW,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,MAAsB;IACrE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC;YAC5D,MAAM,IAAI,WAAW,CAAC,sBAAsB,CAAC,CAAC;QAChD,OAAO,IAAI,UAAU,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACxC,IAAI,KAAgD,CAAC;IACrD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,CAAC,KAAK,IAAI,EAAE;gBACV,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjC,IAAI,IAAI,CAAC,IAAI;wBAAE,MAAM;oBACrB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC9B,IAAI,IAAI,GAAG,MAAM,CAAC,YAAY;wBAAE,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;oBAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC,CAAC,EAAE;YACJ,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,WAAW,CAAC,sBAAsB,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/tools/.build/scr/http-boundary/json.d.ts

@@ -0,0 +1,2 @@
+/** Reject parser differentials: duplicate object keys, non-finite numbers and excessive nesting. */
+export declare function parseStrictJson(text: string): unknown;

package/tools/.build/scr/http-boundary/json.js

@@ -0,0 +1,90 @@
+import { ShieldError } from "../core/types.js";
+/** Reject parser differentials: duplicate object keys, non-finite numbers and excessive nesting. */
+export function parseStrictJson(text) {
+    let offset = 0;
+    let nodes = 0;
+    const ws = () => {
+        while (/[\x20\t\r\n]/.test(text[offset] ?? "!"))
+            offset++;
+    };
+    const fail = () => {
+        throw new ShieldError("ambiguous-or-invalid-json");
+    };
+    function string() {
+        const start = offset;
+        if (text[offset++] !== '"')
+            return fail();
+        while (offset < text.length) {
+            const c = text[offset++];
+            if (c === '"') {
+                try {
+                    return JSON.parse(text.slice(start, offset));
+                }
+                catch {
+                    return fail();
+                }
+            }
+            if (c === "\\")
+                offset++;
+        }
+        return fail();
+    }
+    function value(depth) {
+        if (depth > 32 || ++nodes > 16384)
+            fail();
+        ws();
+        const c = text[offset];
+        if (c === '"') {
+            string();
+            return;
+        }
+        if (c === "{" || c === "[") {
+            const object = c === "{";
+            const close = object ? "}" : "]";
+            const keys = new Set();
+            offset++;
+            ws();
+            if (text[offset] === close) {
+                offset++;
+                return;
+            }
+            while (true) {
+                if (object) {
+                    ws();
+                    const key = string();
+                    if (keys.has(key))
+                        fail();
+                    keys.add(key);
+                    ws();
+                    if (text[offset++] !== ":")
+                        fail();
+                }
+                value(depth + 1);
+                ws();
+                if (text[offset] === close) {
+                    offset++;
+                    return;
+                }
+                if (text[offset++] !== ",")
+                    fail();
+            }
+        }
+        const token = /^(?:true|false|null|-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?)/.exec(text.slice(offset))?.[0];
+        if (!token)
+            throw new ShieldError("ambiguous-or-invalid-json");
+        if (/^-?[0-9]/.test(token) && !Number.isFinite(Number(token)))
+            fail();
+        offset += token.length;
+    }
+    value(0);
+    ws();
+    if (offset !== text.length)
+        fail();
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return fail();
+    }
+}
+//# sourceMappingURL=json.js.map

package/tools/.build/scr/http-boundary/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../../../scr/http-boundary/json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,oGAAoG;AACpG,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,EAAE,GAAG,GAAG,EAAE;QACd,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,EAAE,CAAC;IAC5D,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,GAAU,EAAE;QACvB,MAAM,IAAI,WAAW,CAAC,2BAA2B,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,SAAS,MAAM;QACb,MAAM,KAAK,GAAG,MAAM,CAAC;QACrB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1C,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAW,CAAC;gBACzD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,KAAK,IAAI;gBAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,SAAS,KAAK,CAAC,KAAa;QAC1B,IAAI,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,GAAG,KAAK;YAAE,IAAI,EAAE,CAAC;QAC1C,EAAE,EAAE,CAAC;QACL,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,MAAM,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,MAAM,EAAE,CAAC;YACT,EAAE,EAAE,CAAC;YACL,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC3B,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,MAAM,EAAE,CAAC;oBACX,EAAE,EAAE,CAAC;oBACL,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;oBACrB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,IAAI,EAAE,CAAC;oBAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,EAAE,EAAE,CAAC;oBACL,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,GAAG;wBAAE,IAAI,EAAE,CAAC;gBACrC,CAAC;gBACD,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACjB,EAAE,EAAE,CAAC;gBACL,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC3B,MAAM,EAAE,CAAC;oBACT,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,GAAG;oBAAE,IAAI,EAAE,CAAC;YACrC,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,2EAA2E,CAAC,IAAI,CAC5F,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CACnB,EAAE,CAAC,CAAC,CAAC,CAAC;QACP,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,2BAA2B,CAAC,CAAC;QAC/D,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAE,IAAI,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,CAAC,CAAC,CAAC;IACT,EAAE,EAAE,CAAC;IACL,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/tools/.build/scr/origin/relay.d.ts

@@ -0,0 +1,20 @@
+export interface ReplayStore {
+    claim(id: string, expiresAt: number): Promise<boolean>;
+}
+export declare function createRelayTransport(options: {
+    endpoint: string;
+    serverPublicKey: JsonWebKey;
+    authenticationKey: string;
+    maxBytes?: number;
+    fetch?: typeof fetch;
+    now?: () => number;
+}): Promise<(input: RequestInfo | URL, init?: RequestInit) => Promise<Response>>;
+export declare function createRelayServer(options: {
+    serverPrivateKey: JsonWebKey;
+    authenticationKey: string;
+    originToken: string;
+    business: (request: Request) => Promise<Response>;
+    replay: ReplayStore;
+    maxBytes?: number;
+    now?: () => number;
+}): Promise<(request: Request) => Promise<Response>>;

package/tools/.build/scr/origin/relay.js

@@ -0,0 +1,221 @@
+import { stableJson } from "../core/types.js";
+const encoder = new TextEncoder(), decoder = new TextDecoder("utf-8", { fatal: true });
+const bytes = (value) => value;
+function b64(value) {
+    let text = "";
+    for (let i = 0; i < value.length; i += 8192)
+        text += String.fromCharCode(...value.subarray(i, i + 8192));
+    return btoa(text).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+function unb64(value, limit) {
+    if (typeof value !== "string" ||
+        value.length > Math.ceil((limit * 4) / 3) + 4 ||
+        !/^[\w-]*$/.test(value))
+        throw new Error("Invalid relay encoding");
+    const binary = atob(value.replaceAll("-", "+").replaceAll("_", "/"));
+    if (binary.length > limit)
+        throw new Error("Relay value exceeds limit");
+    return Uint8Array.from(binary, (c) => c.charCodeAt(0));
+}
+async function readBytes(response, limit) {
+    if (!response.body)
+        return new Uint8Array();
+    const reader = response.body.getReader(), chunks = [];
+    let length = 0;
+    let timer;
+    const timeout = new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new Error("Relay read deadline exceeded")), 10000);
+    });
+    try {
+        while (true) {
+            const item = await Promise.race([reader.read(), timeout]);
+            if (item.done)
+                break;
+            length += item.value.length;
+            if (length > limit)
+                throw new Error("Relay body exceeds limit");
+            chunks.push(item.value);
+        }
+    }
+    catch (error) {
+        void reader.cancel().catch(() => { });
+        throw error;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    const result = new Uint8Array(length);
+    let offset = 0;
+    for (const chunk of chunks) {
+        result.set(chunk, offset);
+        offset += chunk.length;
+    }
+    return result;
+}
+function bodyLimit(value) {
+    const limit = value ?? 8 * 1024 * 1024;
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 16 * 1024 * 1024)
+        throw new Error("Relay byte limit must be 1..16777216");
+    return limit;
+}
+function exact(value, length) {
+    const decoded = unb64(value, length);
+    if (decoded.length !== length)
+        throw new Error("Invalid relay field length");
+    return decoded;
+}
+async function macKey(secret) {
+    if (!/^[\w-]{43,256}$/.test(secret))
+        throw new Error("Relay authentication key must be random base64url");
+    return crypto.subtle.importKey("raw", bytes(unb64(secret, 192)), { name: "HMAC", hash: "SHA-256" }, false, ["sign", "verify"]);
+}
+async function publicKey(jwk) {
+    if (jwk?.kty !== "EC" || jwk.crv !== "P-256" || jwk.d !== undefined)
+        throw new Error("Relay requires a public P-256 key");
+    return crypto.subtle.importKey("jwk", jwk, { name: "ECDH", namedCurve: "P-256" }, false, []);
+}
+async function keys(privateKey, publicKey, salt) {
+    const shared = await crypto.subtle.deriveBits({ name: "ECDH", public: publicKey }, privateKey, 256);
+    const material = await crypto.subtle.importKey("raw", shared, "HKDF", false, ["deriveKey"]);
+    const derive = (direction) => crypto.subtle.deriveKey({
+        name: "HKDF",
+        hash: "SHA-256",
+        salt: bytes(salt),
+        info: bytes(encoder.encode(`edgeshield-relay:v1:${direction}`)),
+    }, material, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+    return { request: await derive("request"), response: await derive("response") };
+}
+function headers(input) {
+    return [...input]
+        .filter(([key]) => key !== "set-cookie")
+        .concat(input.getSetCookie().map((value) => ["set-cookie", value]));
+}
+export async function createRelayTransport(options) {
+    const endpoint = new URL(options.endpoint);
+    if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.hash)
+        throw new Error("Relay requires an exact HTTPS endpoint");
+    const server = await publicKey(options.serverPublicKey), authentication = await macKey(options.authenticationKey), limit = bodyLimit(options.maxBytes), transport = options.fetch ?? fetch, now = options.now ?? Date.now;
+    return async (input, init) => {
+        const request = new Request(input, init), target = new URL(request.url);
+        if (target.origin !== "https://origin.internal")
+            throw new Error("Relay target is outside the private business origin");
+        const pair = await crypto.subtle.generateKey({ name: "ECDH", namedCurve: "P-256" }, true, [
+            "deriveBits",
+        ]);
+        const salt = crypto.getRandomValues(new Uint8Array(32)), session = await keys(pair.privateKey, server, salt);
+        const meta = {
+            v: 1,
+            id: crypto.randomUUID(),
+            at: now(),
+            epk: await crypto.subtle.exportKey("jwk", pair.publicKey),
+            salt: b64(salt),
+        };
+        const aad = encoder.encode(stableJson(meta)), nonce = crypto.getRandomValues(new Uint8Array(12));
+        const plain = encoder.encode(JSON.stringify({
+            method: request.method,
+            target: target.pathname + target.search,
+            headers: headers(request.headers),
+            body: b64(await readBytes(request, limit)),
+        }));
+        if (plain.length > limit * 2 + 65536)
+            throw new Error("Relay payload exceeds limit");
+        const ciphertext = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv: bytes(nonce), additionalData: bytes(aad) }, session.request, bytes(plain)));
+        const packet = { ...meta, nonce: b64(nonce), body: b64(ciphertext) };
+        const signature = b64(new Uint8Array(await crypto.subtle.sign("HMAC", authentication, bytes(encoder.encode(stableJson(packet))))));
+        const response = await transport(endpoint, {
+            method: "POST",
+            redirect: "manual",
+            signal: request.signal,
+            headers: { "content-type": "application/vnd.edgeshield.relay+json" },
+            body: JSON.stringify({ ...packet, signature }),
+        });
+        if (!response.ok)
+            throw new Error(`Relay endpoint rejected request (${response.status})`);
+        const envelope = JSON.parse(decoder.decode(await readBytes(response, limit * 3 + 262144)));
+        if (envelope.v !== 1 || envelope.id !== meta.id)
+            throw new Error("Relay response binding mismatch");
+        const decoded = await crypto.subtle.decrypt({
+            name: "AES-GCM",
+            iv: bytes(exact(envelope.nonce, 12)),
+            additionalData: bytes(encoder.encode(stableJson({ v: 1, id: meta.id, direction: "response" }))),
+        }, session.response, bytes(unb64(envelope.body, limit * 2 + 65536)));
+        const result = JSON.parse(decoder.decode(decoded));
+        if (!Number.isInteger(result.status) ||
+            result.status < 200 ||
+            result.status > 599 ||
+            !Array.isArray(result.headers))
+            throw new Error("Invalid relay response");
+        const body = unb64(result.body, limit);
+        return new Response(request.method === "HEAD" || [204, 205, 304].includes(result.status)
+            ? null
+            : body, { status: result.status, headers: result.headers });
+    };
+}
+export async function createRelayServer(options) {
+    const privateKey = await crypto.subtle.importKey("jwk", options.serverPrivateKey, { name: "ECDH", namedCurve: "P-256" }, false, ["deriveBits"]), authentication = await macKey(options.authenticationKey), limit = bodyLimit(options.maxBytes), now = options.now ?? Date.now;
+    return async (request) => {
+        try {
+            if (request.method !== "POST")
+                return new Response(null, { status: 405 });
+            const packet = JSON.parse(decoder.decode(await readBytes(request, limit * 3 + 262144)));
+            const { signature, ...signed } = packet;
+            if (packet.v !== 1 ||
+                typeof packet.id !== "string" ||
+                !/^[a-f\d-]{36}$/i.test(packet.id) ||
+                !Number.isSafeInteger(packet.at) ||
+                Math.abs(now() - packet.at) > 30000 ||
+                Object.keys(packet).some((key) => !["v", "id", "at", "epk", "salt", "nonce", "body", "signature"].includes(key)))
+                throw new Error("Invalid relay envelope");
+            if (!(await crypto.subtle.verify("HMAC", authentication, bytes(exact(signature, 32)), bytes(encoder.encode(stableJson(signed))))))
+                throw new Error("Relay authentication failed");
+            if (!(await options.replay.claim(packet.id, packet.at + 60000)))
+                throw new Error("Relay request replayed");
+            const meta = { v: 1, id: packet.id, at: packet.at, epk: packet.epk, salt: packet.salt }, session = await keys(privateKey, await publicKey(packet.epk), exact(packet.salt, 32));
+            const plain = await crypto.subtle.decrypt({
+                name: "AES-GCM",
+                iv: bytes(exact(packet.nonce, 12)),
+                additionalData: bytes(encoder.encode(stableJson(meta))),
+            }, session.request, bytes(unb64(packet.body, limit * 2 + 65536)));
+            const decoded = JSON.parse(decoder.decode(plain));
+            if (typeof decoded.method !== "string" ||
+                !["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"].includes(decoded.method) ||
+                typeof decoded.target !== "string" ||
+                !decoded.target.startsWith("/") ||
+                decoded.target.startsWith("//") ||
+                /[\r\n#]/.test(decoded.target) ||
+                !Array.isArray(decoded.headers) ||
+                decoded.headers.length > 128)
+                throw new Error("Invalid relay request target");
+            const target = new URL(decoded.target, "https://origin.internal");
+            if (target.origin !== "https://origin.internal")
+                throw new Error("Invalid relay authority");
+            const payload = unb64(decoded.body, limit), requestHeaders = new Headers(decoded.headers);
+            const expected = await crypto.subtle.digest("SHA-256", bytes(encoder.encode(options.originToken))), provided = await crypto.subtle.digest("SHA-256", bytes(encoder.encode(requestHeaders.get("x-shield-origin-auth") ?? "")));
+            if (b64(new Uint8Array(expected)) !== b64(new Uint8Array(provided)))
+                throw new Error("Untrusted relay origin credential");
+            const response = await options.business(new Request(target, {
+                method: decoded.method,
+                headers: requestHeaders,
+                ...(!["GET", "HEAD"].includes(decoded.method) && payload.length
+                    ? { body: payload }
+                    : {}),
+            }));
+            const body = encoder.encode(JSON.stringify({
+                status: response.status,
+                headers: headers(response.headers),
+                body: b64(await readBytes(response, limit)),
+            }));
+            const nonce = crypto.getRandomValues(new Uint8Array(12));
+            const cipher = await crypto.subtle.encrypt({
+                name: "AES-GCM",
+                iv: bytes(nonce),
+                additionalData: bytes(encoder.encode(stableJson({ v: 1, id: packet.id, direction: "response" }))),
+            }, session.response, bytes(body));
+            return Response.json({ v: 1, id: packet.id, nonce: b64(nonce), body: b64(new Uint8Array(cipher)) }, { headers: { "cache-control": "no-store" } });
+        }
+        catch {
+            return Response.json({ error: "relay_request_rejected" }, { status: 403, headers: { "cache-control": "no-store" } });
+        }
+    };
+}
+//# sourceMappingURL=relay.js.map

package/tools/.build/scr/origin/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../../../../scr/origin/relay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI9C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,EAC/B,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAE,EAAE,CAAC,KAAqB,CAAC;AAC3D,SAAS,GAAG,CAAC,KAAiB;IAC5B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI;QACzC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AACD,SAAS,KAAK,CAAC,KAAa,EAAE,KAAa;IACzC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;QAC7C,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAEvB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AACD,KAAK,UAAU,SAAS,CAAC,QAA4B,EAAE,KAAa;IAClE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EACtC,MAAM,GAAiB,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,IAAI,MAAM,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,SAAS,CAAC,KAAyB;IAC1C,MAAM,KAAK,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QACvE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,KAAK,CAAC,KAAa,EAAE,MAAc;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,MAAc;IAClC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,SAAS,CAAC,GAAe;IACtC,IAAI,GAAG,EAAE,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS;QACjE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAC/F,CAAC;AACD,KAAK,UAAU,IAAI,CAAC,UAAqB,EAAE,SAAoB,EAAE,IAAgB;IAC/E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC3C,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EACnC,UAAU,EACV,GAAG,CACJ,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAE,EAAE,CACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CACrB;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QACjB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;KAChE,EACD,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;AAClF,CAAC;AACD,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,CAAC,GAAG,KAAK,CAAC;SACd,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,YAAY,CAAC;SACvC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,CAAqB,CAAC,CAAC,CAAC;AAC5F,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAO1C;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI;QAC3F,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,EACrD,cAAc,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EACxD,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EACnC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,EAClC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAChC,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,EACtC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB;YAC7C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE;YACxF,YAAY;SACb,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,EACrD,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG;YACX,CAAC,EAAE,CAAC;YACJ,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,EAAE,EAAE,GAAG,EAAE;YACT,GAAG,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;YACzD,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;SAChB,CAAC;QACF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAC1C,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAC1B,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM;YACvC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YACjC,IAAI,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;SAC3C,CAAC,CACH,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,GAAG,CAAC,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrF,MAAM,UAAU,GAAG,IAAI,UAAU,CAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EACjE,OAAO,CAAC,OAAO,EACf,KAAK,CAAC,KAAK,CAAC,CACb,CACF,CAAC;QACF,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,GAAG,CACnB,IAAI,UAAU,CACZ,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAC5F,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,EAAE,cAAc,EAAE,uCAAuC,EAAE;YACpE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3F,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;YAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzC;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpC,cAAc,EAAE,KAAK,CACnB,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CACzE;SACF,EACD,OAAO,CAAC,QAAQ,EAChB,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAC/C,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;YAChC,MAAM,CAAC,MAAM,GAAG,GAAG;YACnB,MAAM,CAAC,MAAM,GAAG,GAAG;YACnB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAE9B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,IAAI,QAAQ,CACjB,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAClE,CAAC,CAAC,IAAI;YACN,CAAC,CAAE,IAAiB,EACtB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CACnD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAQvC;IACC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C,KAAK,EACL,OAAO,CAAC,gBAAgB,EACxB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,KAAK,EACL,CAAC,YAAY,CAAC,CACf,EACD,cAAc,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EACxD,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EACnC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAChC,OAAO,KAAK,EAAE,OAAgB,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;YACxC,IACE,MAAM,CAAC,CAAC,KAAK,CAAC;gBACd,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;gBAC7B,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK;gBACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CACvF;gBAED,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,IACE,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC1B,MAAM,EACN,cAAc,EACd,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAC3B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAC1C,CAAC;gBAEF,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EACrF,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACxF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACvC;gBACE,IAAI,EAAE,SAAS;gBACf,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAClC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;aACxD,EACD,OAAO,CAAC,OAAO,EACf,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAC7C,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAClD,IACE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAClC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;gBACtF,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAClC,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC/B,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC/B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC/B,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;gBAE5B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;YAClE,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EACxC,cAAc,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAC3C,EACD,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACnC,SAAS,EACT,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,CACxE,CAAC;YACJ,IAAI,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACjE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CACrC,IAAI,OAAO,CAAC,MAAM,EAAE;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,cAAc;gBACvB,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM;oBAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,OAAmB,EAAE;oBAC/B,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CACH,CAAC;YACF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CACzB,IAAI,CAAC,SAAS,CAAC;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAClC,IAAI,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;aAC5C,CAAC,CACH,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxC;gBACE,IAAI,EAAE,SAAS;gBACf,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;gBAChB,cAAc,EAAE,KAAK,CACnB,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAC3E;aACF,EACD,OAAO,CAAC,QAAQ,EAChB,KAAK,CAAC,IAAI,CAAC,CACZ,CAAC;YACF,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAC7E,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAC7C,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,KAAK,EAAE,wBAAwB,EAAE,EACnC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/tools/.build/scr/origin/replay-node.d.ts

@@ -0,0 +1,8 @@
+export declare class SqliteReplayStore {
+    private capacity;
+    private now;
+    private database;
+    constructor(path: string, capacity?: number, now?: () => number);
+    claim(id: string, expiresAt: number): Promise<boolean>;
+    close(): void;
+}

package/tools/.build/scr/origin/replay-node.js

@@ -0,0 +1,36 @@
+import { DatabaseSync } from "node:sqlite";
+export class SqliteReplayStore {
+    capacity;
+    now;
+    database;
+    constructor(path, capacity = 4096, now = Date.now) {
+        this.capacity = capacity;
+        this.now = now;
+        this.database = new DatabaseSync(path);
+        this.database.exec("PRAGMA journal_mode=WAL; CREATE TABLE IF NOT EXISTS replay (id TEXT PRIMARY KEY, expires INTEGER NOT NULL); CREATE INDEX IF NOT EXISTS expiry ON replay(expires)");
+    }
+    async claim(id, expiresAt) {
+        this.database.exec("BEGIN IMMEDIATE");
+        try {
+            this.database.prepare("DELETE FROM replay WHERE expires <= ?").run(this.now());
+            if (this.database.prepare("SELECT id FROM replay WHERE id=?").get(id)) {
+                this.database.exec("COMMIT");
+                return false;
+            }
+            const count = this.database.prepare("SELECT count(*) AS n FROM replay").get();
+            if (count.n >= this.capacity)
+                throw new Error("Relay replay store capacity exceeded");
+            this.database.prepare("INSERT INTO replay VALUES (?,?)").run(id, expiresAt);
+            this.database.exec("COMMIT");
+            return true;
+        }
+        catch (error) {
+            this.database.exec("ROLLBACK");
+            throw error;
+        }
+    }
+    close() {
+        this.database.close();
+    }
+}
+//# sourceMappingURL=replay-node.js.map

package/tools/.build/scr/origin/replay-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-node.js","sourceRoot":"","sources":["../../../../scr/origin/replay-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,MAAM,OAAO,iBAAiB;IAIlB,QAAQ;IACR,GAAG;IAJL,QAAQ,CAAe;IAC/B,YACE,IAAY,EACJ,QAAQ,GAAG,IAAI,EACf,GAAG,GAAG,IAAI,CAAC,GAAG;wBADd,QAAQ;mBACR,GAAG;QAEX,IAAI,CAAC,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,kKAAkK,CACnK,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,SAAiB;QACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/E,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAE1E,CAAC;YACF,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACtF,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAC5E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF"}