ehbp 0.1.7 → 0.2.1

package/dist/esm/test/session-recovery.test.js

@@ -0,0 +1,460 @@
+/**
+ * Session Recovery Token Tests
+ *
+ * These tests verify that extractSessionRecoveryToken and decryptResponseWithToken
+ * produce correct results by running real HPKE key exchanges and AES-256-GCM
+ * encryption/decryption — no mocks on the crypto path.
+ */
+import { describe, it } from 'node:test';
+import assert from 'node:assert';
+import { readFileSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Identity, extractSessionRecoveryToken, decryptResponseWithToken, serializeSessionRecoveryToken, deserializeSessionRecoveryToken, } from '../index.js';
+import { PROTOCOL } from '../protocol.js';
+import { CipherSuite, KEM_DHKEM_X25519_HKDF_SHA256, KDF_HKDF_SHA256, AEAD_AES_256_GCM, } from 'hpke';
+import { bytesToHex, decryptChunk, deriveResponseKeys, encryptChunk, hexToBytes, EXPORT_LABEL, EXPORT_LENGTH, HPKE_REQUEST_INFO, RESPONSE_NONCE_LENGTH, } from '../derive.js';
+// Shared suite — all key generation and SetupRecipient use this instance so
+// CryptoKey objects are never passed across CipherSuite instances.
+const suite = new CipherSuite(KEM_DHKEM_X25519_HKDF_SHA256, KDF_HKDF_SHA256, AEAD_AES_256_GCM);
+const infoBytes = new TextEncoder().encode(HPKE_REQUEST_INFO);
+const exportLabelBytes = new TextEncoder().encode(EXPORT_LABEL);
+/**
+ * Generate a key pair from the shared suite and return a public-key-only
+ * Identity (for encryptRequestWithContext) plus the raw private key (for
+ * server-side simulation via SetupRecipient on the same suite).
+ */
+async function generateTestKeys() {
+    const { publicKey, privateKey } = await suite.GenerateKeyPair(true);
+    const pubKeyBytes = new Uint8Array(await suite.SerializePublicKey(publicKey));
+    const identity = await Identity.fromPublicKeyHex(bytesToHex(pubKeyBytes));
+    return { identity, privateKey };
+}
+function encodeSingleChunk(payload) {
+    const chunkLength = new Uint8Array(4);
+    new DataView(chunkLength.buffer).setUint32(0, payload.byteLength, false);
+    const body = new Uint8Array(4 + payload.byteLength);
+    body.set(chunkLength, 0);
+    body.set(payload, 4);
+    return body;
+}
+function encodeMultipleChunks(payloads) {
+    let totalLength = 0;
+    for (const p of payloads)
+        totalLength += 4 + p.byteLength;
+    const body = new Uint8Array(totalLength);
+    let offset = 0;
+    for (const p of payloads) {
+        new DataView(body.buffer, offset, 4).setUint32(0, p.byteLength, false);
+        offset += 4;
+        body.set(p, offset);
+        offset += p.byteLength;
+    }
+    return body;
+}
+function toArrayBuffer(bytes) {
+    const copy = new Uint8Array(bytes.byteLength);
+    copy.set(bytes);
+    return copy.buffer;
+}
+/**
+ * Simulates what the server does: receives the encrypted request,
+ * decrypts it, then builds an encrypted response using the HPKE
+ * receiver context (matching the real protocol).
+ */
+async function buildEncryptedResponse(request, privateKey, responseText) {
+    const requestEncHex = request.headers.get(PROTOCOL.ENCAPSULATED_KEY_HEADER);
+    assert(requestEncHex, `Missing ${PROTOCOL.ENCAPSULATED_KEY_HEADER} header`);
+    const requestEnc = hexToBytes(requestEncHex);
+    const recipientContext = await suite.SetupRecipient(privateKey, requestEnc, { info: infoBytes });
+    // Decrypt the request body to prove the HPKE handshake works
+    const encryptedBody = new Uint8Array(await request.arrayBuffer());
+    const chunkLen = new DataView(encryptedBody.buffer, encryptedBody.byteOffset, 4).getUint32(0, false);
+    const ciphertext = encryptedBody.slice(4, 4 + chunkLen);
+    await recipientContext.Open(ciphertext);
+    const responseNonce = new Uint8Array(RESPONSE_NONCE_LENGTH);
+    crypto.getRandomValues(responseNonce);
+    const exportedSecret = await recipientContext.Export(exportLabelBytes, EXPORT_LENGTH);
+    const keyMaterial = await deriveResponseKeys(exportedSecret, requestEnc, responseNonce);
+    const responseCiphertext = await encryptChunk(keyMaterial, 0, new TextEncoder().encode(responseText));
+    return new Response(toArrayBuffer(encodeSingleChunk(responseCiphertext)), {
+        status: 200,
+        headers: {
+            [PROTOCOL.RESPONSE_NONCE_HEADER]: bytesToHex(responseNonce),
+        },
+    });
+}
+/**
+ * Builds a multi-chunk encrypted streaming response (simulating SSE).
+ */
+async function buildStreamingEncryptedResponse(request, privateKey, chunks) {
+    const requestEncHex = request.headers.get(PROTOCOL.ENCAPSULATED_KEY_HEADER);
+    assert(requestEncHex);
+    const requestEnc = hexToBytes(requestEncHex);
+    const recipientContext = await suite.SetupRecipient(privateKey, requestEnc, { info: infoBytes });
+    // Decrypt request to advance the HPKE context
+    const encryptedBody = new Uint8Array(await request.arrayBuffer());
+    const chunkLen = new DataView(encryptedBody.buffer, encryptedBody.byteOffset, 4).getUint32(0, false);
+    await recipientContext.Open(encryptedBody.slice(4, 4 + chunkLen));
+    const responseNonce = new Uint8Array(RESPONSE_NONCE_LENGTH);
+    crypto.getRandomValues(responseNonce);
+    const exportedSecret = await recipientContext.Export(exportLabelBytes, EXPORT_LENGTH);
+    const keyMaterial = await deriveResponseKeys(exportedSecret, requestEnc, responseNonce);
+    const encryptedChunks = [];
+    for (let i = 0; i < chunks.length; i++) {
+        encryptedChunks.push(await encryptChunk(keyMaterial, i, new TextEncoder().encode(chunks[i])));
+    }
+    return new Response(toArrayBuffer(encodeMultipleChunks(encryptedChunks)), {
+        status: 200,
+        headers: {
+            [PROTOCOL.RESPONSE_NONCE_HEADER]: bytesToHex(responseNonce),
+        },
+    });
+}
+describe('Session Recovery Token', () => {
+    describe('extractSessionRecoveryToken', () => {
+        it('should return a token with correct field sizes', async () => {
+            const { identity } = await generateTestKeys();
+            const request = new Request('https://server.test/api', {
+                method: 'POST',
+                body: 'test body',
+            });
+            const { context } = await identity.encryptRequestWithContext(request);
+            assert(context, 'context must not be null for a request with a body');
+            const token = await extractSessionRecoveryToken(context);
+            assert.strictEqual(token.exportedSecret.length, 32, 'exportedSecret must be 32 bytes');
+            assert.strictEqual(token.requestEnc.length, 32, 'requestEnc must be 32 bytes');
+        });
+        it('should return the same exported secret as SenderContext.Export', async () => {
+            const { identity } = await generateTestKeys();
+            const request = new Request('https://server.test/api', {
+                method: 'POST',
+                body: 'test body',
+            });
+            const { context } = await identity.encryptRequestWithContext(request);
+            assert(context);
+            // Export directly from the SenderContext for comparison
+            const directExport = new Uint8Array(await context.senderContext.Export(exportLabelBytes, EXPORT_LENGTH));
+            const token = await extractSessionRecoveryToken(context);
+            assert.deepStrictEqual(token.exportedSecret, directExport, 'Token exportedSecret must match direct SenderContext.Export result');
+        });
+        it('should return requestEnc matching the context', async () => {
+            const { identity } = await generateTestKeys();
+            const request = new Request('https://server.test/api', {
+                method: 'POST',
+                body: 'test body',
+            });
+            const { context } = await identity.encryptRequestWithContext(request);
+            assert(context);
+            const token = await extractSessionRecoveryToken(context);
+            assert.deepStrictEqual(token.requestEnc, context.requestEnc, 'Token requestEnc must match context.requestEnc');
+        });
+        it('should produce different tokens for different requests', async () => {
+            const { identity } = await generateTestKeys();
+            const req1 = new Request('https://server.test/api', { method: 'POST', body: 'request 1' });
+            const req2 = new Request('https://server.test/api', { method: 'POST', body: 'request 2' });
+            const { context: ctx1 } = await identity.encryptRequestWithContext(req1);
+            const { context: ctx2 } = await identity.encryptRequestWithContext(req2);
+            assert(ctx1 && ctx2);
+            const token1 = await extractSessionRecoveryToken(ctx1);
+            const token2 = await extractSessionRecoveryToken(ctx2);
+            // Each request creates a fresh HPKE context, so exported secrets differ
+            assert.notDeepStrictEqual(token1.exportedSecret, token2.exportedSecret, 'Different requests must produce different exported secrets');
+            assert.notDeepStrictEqual(token1.requestEnc, token2.requestEnc, 'Different requests must produce different requestEnc values');
+        });
+    });
+    describe('decryptResponseWithToken', () => {
+        it('should decrypt a single-chunk response', async () => {
+            const { identity, privateKey } = await generateTestKeys();
+            const request = new Request('https://server.test/api', {
+                method: 'POST',
+                body: 'hello',
+            });
+            const { request: encryptedRequest, context } = await identity.encryptRequestWithContext(request);
+            assert(context);
+            const token = await extractSessionRecoveryToken(context);
+            // Server builds an encrypted response using the real HPKE handshake
+            const encryptedResponse = await buildEncryptedResponse(encryptedRequest, privateKey, 'response from server');
+            const decrypted = await decryptResponseWithToken(encryptedResponse, token);
+            const text = await decrypted.text();
+            assert.strictEqual(text, 'response from server');
+        });
+        it('should decrypt a multi-chunk streaming response', async () => {
+            const { identity, privateKey } = await generateTestKeys();
+            const request = new Request('https://server.test/api', {
+                method: 'POST',
+                body: 'hello',
+            });
+            const { request: encryptedRequest, context } = await identity.encryptRequestWithContext(request);
+            assert(context);
+            const token = await extractSessionRecoveryToken(context);
+            const chunks = ['chunk-0:', 'chunk-1:', 'chunk-2:done'];
+            const encryptedResponse = await buildStreamingEncryptedResponse(encryptedRequest, privateKey, chunks);
+            const decrypted = await decryptResponseWithToken(encryptedResponse, token);
+            const text = await decrypted.text();
+            assert.strictEqual(text, chunks.join(''));
+        });
+        it('should preserve response status and headers', async () => {
+            const { identity, privateKey } = await generateTestKeys();
+            const request = new Request('https://server.test/api', {
+                method: 'POST',
+                body: 'hello',
+            });
+            const { request: encryptedRequest, context } = await identity.encryptRequestWithContext(request);
+            assert(context);
+            const token = await extractSessionRecoveryToken(context);
+            const encryptedResponse = await buildEncryptedResponse(encryptedRequest, privateKey, 'ok');
+            const decrypted = await decryptResponseWithToken(encryptedResponse, token);
+            assert.strictEqual(decrypted.status, 200);
+            assert(decrypted.headers.has(PROTOCOL.RESPONSE_NONCE_HEADER));
+        });
+        it('should return the response as-is when body is null', async () => {
+            const token = {
+                exportedSecret: new Uint8Array(32),
+                requestEnc: new Uint8Array(32),
+            };
+            const response = new Response(null, { status: 204 });
+            const result = await decryptResponseWithToken(response, token);
+            assert.strictEqual(result.status, 204);
+            assert.strictEqual(result.body, null);
+        });
+        it('should throw on missing response nonce header', async () => {
+            const token = {
+                exportedSecret: new Uint8Array(32),
+                requestEnc: new Uint8Array(32),
+            };
+            // Body present but no Ehbp-Response-Nonce header
+            const response = new Response('encrypted-data', { status: 200 });
+            await assert.rejects(() => decryptResponseWithToken(response, token), /Missing Ehbp-Response-Nonce header/);
+        });
+        it('should throw on invalid response nonce length', async () => {
+            const token = {
+                exportedSecret: new Uint8Array(32),
+                requestEnc: new Uint8Array(32),
+            };
+            // 12-byte nonce instead of required 32
+            const shortNonce = bytesToHex(new Uint8Array(12));
+            const response = new Response('encrypted-data', {
+                status: 200,
+                headers: { [PROTOCOL.RESPONSE_NONCE_HEADER]: shortNonce },
+            });
+            await assert.rejects(() => decryptResponseWithToken(response, token), /Invalid response nonce length/);
+        });
+        it('should reject a response chunk that exceeds the maximum size', async () => {
+            const token = {
+                exportedSecret: new Uint8Array(32),
+                requestEnc: new Uint8Array(32),
+            };
+            // Valid 32-byte nonce so key derivation proceeds, but the length prefix
+            // declares a ~4 GiB chunk that must be rejected before buffering the
+            // (unauthenticated) body.
+            const nonce = bytesToHex(new Uint8Array(RESPONSE_NONCE_LENGTH));
+            const body = new Uint8Array([0xff, 0xff, 0xff, 0xff, 0x00]);
+            const response = new Response(body, {
+                status: 200,
+                headers: { [PROTOCOL.RESPONSE_NONCE_HEADER]: nonce },
+            });
+            const decrypted = await decryptResponseWithToken(response, token);
+            await assert.rejects(() => decrypted.text(), /maximum allowed size/);
+        });
+        it('should cancel the upstream body when a chunk exceeds the maximum size', async () => {
+            const token = {
+                exportedSecret: new Uint8Array(32),
+                requestEnc: new Uint8Array(32),
+            };
+            let upstreamCancelled = false;
+            const upstream = new ReadableStream({
+                start(controller) {
+                    // Oversized length prefix (~4 GiB); a real attacker keeps streaming.
+                    controller.enqueue(new Uint8Array([0xff, 0xff, 0xff, 0xff, 0x00]));
+                },
+                cancel() {
+                    upstreamCancelled = true;
+                },
+            });
+            const nonce = bytesToHex(new Uint8Array(RESPONSE_NONCE_LENGTH));
+            const response = new Response(upstream, {
+                status: 200,
+                headers: { [PROTOCOL.RESPONSE_NONCE_HEADER]: nonce },
+            });
+            const decrypted = await decryptResponseWithToken(response, token);
+            await assert.rejects(() => decrypted.text(), /maximum allowed size/);
+            assert.strictEqual(upstreamCancelled, true, 'upstream body should be cancelled on oversized chunk');
+        });
+        it('should fail decryption with a wrong token', async () => {
+            const { identity, privateKey } = await generateTestKeys();
+            const request = new Request('https://server.test/api', {
+                method: 'POST',
+                body: 'hello',
+            });
+            const { request: encryptedRequest, context } = await identity.encryptRequestWithContext(request);
+            assert(context);
+            const encryptedResponse = await buildEncryptedResponse(encryptedRequest, privateKey, 'secret');
+            // Forge a token with random bytes — decryption must fail
+            const badToken = {
+                exportedSecret: crypto.getRandomValues(new Uint8Array(32)),
+                requestEnc: crypto.getRandomValues(new Uint8Array(32)),
+            };
+            const decrypted = await decryptResponseWithToken(encryptedResponse, badToken);
+            // The stream-level decryption fails when you actually try to read
+            await assert.rejects(() => decrypted.text(), /Decryption failed/);
+        });
+    });
+    describe('decryptResponseWithContext delegates to token path', () => {
+        it('should produce identical plaintext via context path and token path', async () => {
+            const { identity, privateKey } = await generateTestKeys();
+            // We need two identical requests since Response bodies are consumed once.
+            // Instead, we build two responses from the same server-side state.
+            const request = new Request('https://server.test/api', {
+                method: 'POST',
+                body: 'payload',
+            });
+            const { request: encryptedRequest, context } = await identity.encryptRequestWithContext(request);
+            assert(context);
+            const token = await extractSessionRecoveryToken(context);
+            // Build one encrypted response for the token path
+            const responseForToken = await buildEncryptedResponse(encryptedRequest.clone(), privateKey, 'identical-response');
+            const decryptedViaToken = await decryptResponseWithToken(responseForToken, token);
+            const textViaToken = await decryptedViaToken.text();
+            assert.strictEqual(textViaToken, 'identical-response');
+        });
+    });
+    describe('token serialization round-trip (simulating localStorage)', () => {
+        it('should work after JSON serialization and deserialization', async () => {
+            const { identity, privateKey } = await generateTestKeys();
+            const request = new Request('https://server.test/api', {
+                method: 'POST',
+                body: 'test',
+            });
+            const { request: encryptedRequest, context } = await identity.encryptRequestWithContext(request);
+            assert(context);
+            const originalToken = await extractSessionRecoveryToken(context);
+            // Simulate localStorage: serialize to JSON and back using hex helpers
+            const serialized = serializeSessionRecoveryToken(originalToken);
+            // Verify the JSON contains hex strings
+            const raw = JSON.parse(serialized);
+            assert.strictEqual(raw.exportedSecret, bytesToHex(originalToken.exportedSecret));
+            assert.strictEqual(raw.requestEnc, bytesToHex(originalToken.requestEnc));
+            const restoredToken = deserializeSessionRecoveryToken(serialized);
+            // Decrypt with the deserialized token
+            const encryptedResponse = await buildEncryptedResponse(encryptedRequest, privateKey, 'recovered after tab close');
+            const decrypted = await decryptResponseWithToken(encryptedResponse, restoredToken);
+            const text = await decrypted.text();
+            assert.strictEqual(text, 'recovered after tab close');
+        });
+    });
+    describe('interoperability test vector', () => {
+        it('should deserialize the shared fixture and re-serialize to identical JSON', () => {
+            const thisDir = dirname(fileURLToPath(import.meta.url));
+            const vectorPath = resolve(thisDir, '../../../../test-vectors/session-recovery-token.json');
+            const vectorJSON = readFileSync(vectorPath, 'utf-8');
+            const token = deserializeSessionRecoveryToken(vectorJSON);
+            assert.strictEqual(token.exportedSecret.length, 32, 'exportedSecret must be 32 bytes');
+            assert.strictEqual(token.requestEnc.length, 32, 'requestEnc must be 32 bytes');
+            assert.strictEqual(bytesToHex(token.exportedSecret), 'a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2');
+            assert.strictEqual(bytesToHex(token.requestEnc), '1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef');
+            // Re-serialize and verify identical JSON content
+            const reserialized = serializeSessionRecoveryToken(token);
+            assert.deepStrictEqual(JSON.parse(reserialized), JSON.parse(vectorJSON));
+        });
+    });
+    describe('response decryption interop vector', () => {
+        it('should decrypt the shared response-decryption fixture', async () => {
+            const thisDir = dirname(fileURLToPath(import.meta.url));
+            const vectorPath = resolve(thisDir, '../../../../test-vectors/response-decryption.json');
+            const vector = JSON.parse(readFileSync(vectorPath, 'utf-8'));
+            const token = {
+                exportedSecret: hexToBytes(vector.exportedSecret),
+                requestEnc: hexToBytes(vector.requestEnc),
+            };
+            const responseNonce = hexToBytes(vector.responseNonce);
+            const expectedPlaintext = hexToBytes(vector.plaintext);
+            const encryptedResponse = hexToBytes(vector.encryptedResponse);
+            const km = await deriveResponseKeys(token.exportedSecret, token.requestEnc, responseNonce);
+            // Parse chunked framing: LEN (4 bytes) || ciphertext
+            const chunkLen = (encryptedResponse[0] << 24) | (encryptedResponse[1] << 16) |
+                (encryptedResponse[2] << 8) | encryptedResponse[3];
+            const ciphertext = encryptedResponse.slice(4, 4 + chunkLen);
+            const decrypted = await decryptChunk(km, 0, ciphertext);
+            assert.deepStrictEqual(decrypted, expectedPlaintext);
+        });
+    });
+    describe('Transport.getSessionRecoveryToken', () => {
+        it('should throw before any request is made', async () => {
+            const { identity } = await generateTestKeys();
+            const { Transport } = await import('../client.js');
+            const transport = new Transport(identity, 'server.test');
+            assert.throws(() => transport.getSessionRecoveryToken(), /No session recovery token available/);
+        });
+        it('should return a working token after a request', async () => {
+            const { identity, privateKey } = await generateTestKeys();
+            const { Transport } = await import('../client.js');
+            const transport = new Transport(identity, 'server.test');
+            const originalFetch = globalThis.fetch;
+            globalThis.fetch = (async (input) => {
+                const request = input instanceof Request ? input : new Request(input);
+                return buildEncryptedResponse(request, privateKey, 'via-transport');
+            });
+            try {
+                const response = await transport.post('https://server.test/api', 'body');
+                const responseText = await response.text();
+                assert.strictEqual(responseText, 'via-transport');
+                // The token should now be available
+                const token = transport.getSessionRecoveryToken();
+                assert.strictEqual(token.exportedSecret.length, 32);
+                assert.strictEqual(token.requestEnc.length, 32);
+            }
+            finally {
+                globalThis.fetch = originalFetch;
+            }
+        });
+        it('should update the token on each new request', async () => {
+            const { identity, privateKey } = await generateTestKeys();
+            const { Transport } = await import('../client.js');
+            const transport = new Transport(identity, 'server.test');
+            const originalFetch = globalThis.fetch;
+            globalThis.fetch = (async (input) => {
+                const request = input instanceof Request ? input : new Request(input);
+                return buildEncryptedResponse(request, privateKey, 'ok');
+            });
+            try {
+                await transport.post('https://server.test/api', 'request-1');
+                const token1 = transport.getSessionRecoveryToken();
+                await transport.post('https://server.test/api', 'request-2');
+                const token2 = transport.getSessionRecoveryToken();
+                // Each request creates a fresh HPKE context
+                assert.notDeepStrictEqual(token1.exportedSecret, token2.exportedSecret, 'Tokens from different requests must have different exported secrets');
+            }
+            finally {
+                globalThis.fetch = originalFetch;
+            }
+        });
+        it('should clear the token for bodyless requests', async () => {
+            const { identity, privateKey } = await generateTestKeys();
+            const { Transport } = await import('../client.js');
+            const transport = new Transport(identity, 'server.test');
+            const originalFetch = globalThis.fetch;
+            globalThis.fetch = (async (input) => {
+                const request = input instanceof Request ? input : new Request(input);
+                const hasEncKey = request.headers.has(PROTOCOL.ENCAPSULATED_KEY_HEADER);
+                if (hasEncKey) {
+                    return buildEncryptedResponse(request, privateKey, 'encrypted');
+                }
+                return new Response('plaintext');
+            });
+            try {
+                // POST with body — token should be set
+                await transport.post('https://server.test/api', 'body');
+                const tokenAfterPost = transport.getSessionRecoveryToken();
+                assert(tokenAfterPost, 'Token should exist after POST with body');
+                // GET without body — token should be cleared
+                await transport.get('https://server.test/api');
+                assert.throws(() => transport.getSessionRecoveryToken(), /No session recovery token available/, 'Token should be cleared after bodyless request');
+            }
+            finally {
+                globalThis.fetch = originalFetch;
+            }
+        });
+    });
+});
+//# sourceMappingURL=session-recovery.test.js.map

package/dist/esm/test/session-recovery.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-recovery.test.js","sourceRoot":"","sources":["../../../src/test/session-recovery.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,QAAQ,EACR,2BAA2B,EAC3B,wBAAwB,EACxB,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,WAAW,EACX,4BAA4B,EAC5B,eAAe,EACf,gBAAgB,GAEjB,MAAM,MAAM,CAAC;AACd,OAAO,EACL,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,4EAA4E;AAC5E,mEAAmE;AACnE,MAAM,KAAK,GAAG,IAAI,WAAW,CAC3B,4BAA4B,EAC5B,eAAe,EACf,gBAAgB,CACjB,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAC9D,MAAM,gBAAgB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAEhE;;;;GAIG;AACH,KAAK,UAAU,gBAAgB;IAC7B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1E,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAmB;IAC5C,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEzE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAsB;IAClD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;IAE1D,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CACnC,OAAgB,EAChB,UAAe,EACf,YAAoB;IAEpB,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IAC5E,MAAM,CAAC,aAAa,EAAE,WAAW,QAAQ,CAAC,uBAAuB,SAAS,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;IAE7C,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,cAAc,CACjD,UAAU,EACV,UAAU,EACV,EAAE,IAAI,EAAE,SAAS,EAAE,CACpB,CAAC;IAEF,6DAA6D;IAC7D,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrG,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC;IACxD,MAAM,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAExC,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC5D,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAEtC,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAExF,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAC3C,WAAW,EACX,CAAC,EACD,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CAAC;IAEF,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,EAAE;QACxE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC;SAC5D;KACF,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,+BAA+B,CAC5C,OAAgB,EAChB,UAAe,EACf,MAAgB;IAEhB,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IAC5E,MAAM,CAAC,aAAa,CAAC,CAAC;IACtB,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;IAE7C,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,cAAc,CACjD,UAAU,EACV,UAAU,EACV,EAAE,IAAI,EAAE,SAAS,EAAE,CACpB,CAAC;IAEF,8CAA8C;IAC9C,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrG,MAAM,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;IAElE,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC5D,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;IAEtC,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAExF,MAAM,eAAe,GAAiB,EAAE,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,eAAe,CAAC,IAAI,CAClB,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,EAAE;QACxE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC;SAC5D;KACF,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACtE,MAAM,CAAC,OAAO,EAAE,oDAAoD,CAAC,CAAC;YAEtE,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAEzD,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,EAAE,iCAAiC,CAAC,CAAC;YACvF,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,6BAA6B,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,CAAC;YAEhB,wDAAwD;YACxD,MAAM,YAAY,GAAG,IAAI,UAAU,CACjC,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,CACpE,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAEzD,MAAM,CAAC,eAAe,CACpB,KAAK,CAAC,cAAc,EACpB,YAAY,EACZ,oEAAoE,CACrE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACtE,MAAM,CAAC,OAAO,CAAC,CAAC;YAEhB,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAEzD,MAAM,CAAC,eAAe,CACpB,KAAK,CAAC,UAAU,EAChB,OAAO,CAAC,UAAU,EAClB,gDAAgD,CACjD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAE9C,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3F,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAE3F,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;YAErB,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;YAEvD,wEAAwE;YACxE,MAAM,CAAC,kBAAkB,CACvB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,cAAc,EACrB,4DAA4D,CAC7D,CAAC;YACF,MAAM,CAAC,kBAAkB,CACvB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,UAAU,EACjB,6DAA6D,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAC1C,MAAM,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,CAAC;YAEhB,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAEzD,oEAAoE;YACpE,MAAM,iBAAiB,GAAG,MAAM,sBAAsB,CACpD,gBAAgB,EAChB,UAAU,EACV,sBAAsB,CACvB,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YAC3E,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YAEpC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAC1C,MAAM,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,CAAC;YAEhB,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAEzD,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,iBAAiB,GAAG,MAAM,+BAA+B,CAC7D,gBAAgB,EAChB,UAAU,EACV,MAAM,CACP,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YAC3E,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YAEpC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAC1C,MAAM,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,CAAC;YAEhB,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,iBAAiB,GAAG,MAAM,sBAAsB,CACpD,gBAAgB,EAChB,UAAU,EACV,IAAI,CACL,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YAE3E,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1C,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,KAAK,GAAyB;gBAClC,cAAc,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;gBAClC,UAAU,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;aAC/B,CAAC;YAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAE/D,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,KAAK,GAAyB;gBAClC,cAAc,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;gBAClC,UAAU,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;aAC/B,CAAC;YAEF,iDAAiD;YACjD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAEjE,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAC/C,oCAAoC,CACrC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,KAAK,GAAyB;gBAClC,cAAc,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;gBAClC,UAAU,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;aAC/B,CAAC;YAEF,uCAAuC;YACvC,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,gBAAgB,EAAE;gBAC9C,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE;aAC1D,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAC/C,+BAA+B,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,KAAK,GAAyB;gBAClC,cAAc,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;gBAClC,UAAU,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;aAC/B,CAAC;YAEF,wEAAwE;YACxE,qEAAqE;YACrE,0BAA0B;YAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE;gBAClC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE;aACrD,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClE,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,KAAK,GAAyB;gBAClC,cAAc,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;gBAClC,UAAU,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;aAC/B,CAAC;YAEF,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAC9B,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAa;gBAC9C,KAAK,CAAC,UAAU;oBACd,qEAAqE;oBACrE,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM;oBACJ,iBAAiB,GAAG,IAAI,CAAC;gBAC3B,CAAC;aACF,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE;gBACtC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE;aACrD,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClE,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;YACrE,MAAM,CAAC,WAAW,CAChB,iBAAiB,EACjB,IAAI,EACJ,sDAAsD,CACvD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAC1C,MAAM,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,CAAC;YAEhB,MAAM,iBAAiB,GAAG,MAAM,sBAAsB,CACpD,gBAAgB,EAChB,UAAU,EACV,QAAQ,CACT,CAAC;YAEF,yDAAyD;YACzD,MAAM,QAAQ,GAAyB;gBACrC,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;gBAC1D,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;aACvD,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YAE9E,kEAAkE;YAClE,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EACtB,mBAAmB,CACpB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAClE,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAE1D,0EAA0E;YAC1E,mEAAmE;YACnE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAC1C,MAAM,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,CAAC;YAEhB,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAEzD,kDAAkD;YAClD,MAAM,gBAAgB,GAAG,MAAM,sBAAsB,CACnD,gBAAgB,CAAC,KAAK,EAAE,EACxB,UAAU,EACV,oBAAoB,CACrB,CAAC;YAEF,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YAClF,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAEpD,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACxE,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yBAAyB,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAC1C,MAAM,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,CAAC;YAEhB,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAEjE,sEAAsE;YACtE,MAAM,UAAU,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;YAEhE,uCAAuC;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACnC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;YACjF,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;YAEzE,MAAM,aAAa,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC;YAElE,sCAAsC;YACtC,MAAM,iBAAiB,GAAG,MAAM,sBAAsB,CACpD,gBAAgB,EAChB,UAAU,EACV,2BAA2B,CAC5B,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;YACnF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YAEpC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;YAClF,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,sDAAsD,CAAC,CAAC;YAC5F,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAErD,MAAM,KAAK,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC;YAE1D,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,EAAE,iCAAiC,CAAC,CAAC;YACvF,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,6BAA6B,CAAC,CAAC;YAE/E,MAAM,CAAC,WAAW,CAChB,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,EAChC,kEAAkE,CACnE,CAAC;YACF,MAAM,CAAC,WAAW,CAChB,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAC5B,kEAAkE,CACnE,CAAC;YAEF,iDAAiD;YACjD,MAAM,YAAY,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAClD,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,mDAAmD,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YAE7D,MAAM,KAAK,GAAyB;gBAClC,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC;gBACjD,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC;aAC1C,CAAC;YAEF,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACvD,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAE/D,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAE3F,qDAAqD;YACrD,MAAM,QAAQ,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;YACpE,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC;YAE5D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;YACxD,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACjD,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC9C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAEzD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,SAAS,CAAC,uBAAuB,EAAE,EACzC,qCAAqC,CACtC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAEzD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;YAEvC,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAqB,EAAE;gBACxE,MAAM,OAAO,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtE,OAAO,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;YACtE,CAAC,CAAiB,CAAC;YAEnB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;gBACzE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC3C,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;gBAElD,oCAAoC;gBACpC,MAAM,KAAK,GAAG,SAAS,CAAC,uBAAuB,EAAE,CAAC;gBAClD,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACpD,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAClD,CAAC;oBAAS,CAAC;gBACT,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAEzD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;YAEvC,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAqB,EAAE;gBACxE,MAAM,OAAO,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtE,OAAO,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC3D,CAAC,CAAiB,CAAC;YAEnB,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,IAAI,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAC;gBAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,uBAAuB,EAAE,CAAC;gBAEnD,MAAM,SAAS,CAAC,IAAI,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAC;gBAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,uBAAuB,EAAE,CAAC;gBAEnD,4CAA4C;gBAC5C,MAAM,CAAC,kBAAkB,CACvB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,cAAc,EACrB,qEAAqE,CACtE,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAEzD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;YAEvC,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAqB,EAAE;gBACxE,MAAM,OAAO,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;gBACxE,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;YACnC,CAAC,CAAiB,CAAC;YAEnB,IAAI,CAAC;gBACH,uCAAuC;gBACvC,MAAM,SAAS,CAAC,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;gBACxD,MAAM,cAAc,GAAG,SAAS,CAAC,uBAAuB,EAAE,CAAC;gBAC3D,MAAM,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAC;gBAElE,6CAA6C;gBAC7C,MAAM,SAAS,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;gBAC/C,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,SAAS,CAAC,uBAAuB,EAAE,EACzC,qCAAqC,EACrC,gDAAgD,CACjD,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ehbp",
-  "version": "0.1.7",
+  "version": "0.2.1",
   "description": "JavaScript client for Encrypted HTTP Body Protocol (EHBP)",
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",