homebridge-intratone 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 jtoucas-DIMO
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,175 @@
-# Temporary Holding Version
+# homebridge-intratone
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Homebridge dynamic-platform plugin that opens **Intratone / Cogelec** doors and gates from
+HomeKit and Matter, using the same REST calls as the official app. Every door your account can
+open over the API (`data`/4G mobipass and `ble` modes) becomes a HomeKit lock (or garage door)
+and, on a bridge with Matter enabled, a Matter door lock for Google Home, Alexa, SmartThings or
+Apple Home.
+
+Phase 1 covers remote opening only. Doorbell, video and two-way audio (SIP + FCM) are not
+implemented.
+
+> **Unofficial.** This plugin is not affiliated with or endorsed by Intratone or Cogelec. It
+> talks to the private API of their app, which can change or stop working at any time.
+
+## How it works
+
+- Registers as a device with `POST /api/auth/device` and keeps the 7-day JWT fresh. It checks
+  every 12 h, refreshes when less than a day is left, and refreshes once on a refused call.
+  Concurrent callers share a single refresh.
+- Lists doors with `GET /api/access` at startup and then every hour (configurable). Doors are
+  added and removed as residences change. An empty list never removes existing doors, so a
+  server hiccup can't wipe your HomeKit rooms and automations.
+- Opens with `POST /api/access/open/clemobil` (`phonenumber`, `access_id`). This endpoint also
+  handles `data` and `ble` doors.
+- `clemobil` (2G) doors are skipped. The app opens those by placing a GSM call, which a server
+  can't do.
+- The open is a stateless pulse with no real door state to read. A lock shows **Unlocked** for
+  `pulse_seconds`, then returns to **Locked**. A failed open goes straight back to Locked and
+  logs the HTTP status and body.
+- On HTTP 429 the plugin backs off, honouring `Retry-After` or else waiting 1 min, doubling up
+  to 15 min, and sends nothing during the backoff.
+
+## Install
+
+In the Homebridge UI, open **Plugins**, search for **intratone** and click **Install**. This
+works the same in the official `homebridge/homebridge` Docker image (Synology, Unraid, …).
+
+Without the UI:
+
+```bash
+npm install -g homebridge-intratone
+```
+
+Then fill in the plugin settings (see below) and enable **child bridge** for it (plugin
+settings → *Bridge Settings*), so a fault here can't take the main bridge down.
+
+### Configuration
+
+```json
+{
+  "platform": "Intratone",
+  "name": "Intratone",
+  "app_id": "<from the official app>",
+  "app_token": "<from the official app>",
+  "tel": "0612345678",
+  "indicatif": "33",
+  "service": "lock",
+  "_bridge": { "username": "0E:9A:…", "port": 51830 }
+}
+```
+
+| key                      | default  | notes |
+| ------------------------ | -------- | ----- |
+| `app_id`, `app_token`    | required | Hardcoded in the official app and not shipped with this plugin. See [Getting app_id and app_token](#getting-app_id-and-app_token). |
+| `tel`                    | required | Phone number of the Intratone account. National (`06…`) or international (`+33 6…`). Several spellings are tried, and the one that works is remembered. |
+| `indicatif`              | `33`     | Country code. |
+| `device_id`              | generated | Leave empty to generate a UUID that is stored and reused forever. Set it to reuse an existing phone's registration (`device_id` claim of that phone's JWT). |
+| `service`                | `lock`   | `lock` (LockMechanism) or `garage` (GarageDoorOpener). |
+| `pulse_seconds`          | `2`      | How long a door shows as unlocked/open after a successful open. |
+| `access_refresh_minutes` | `60`     | How often the door list is re-fetched. |
+| `user_agent`             | `ios`    | `ios` or `android` client identity. |
+| `app_version`            | `4.6.4`  | `appversion` sent at login. |
+| `debug`                  | `false`  | Logs every request and response at info level, plus the raw door list once at startup. Tokens, app credentials and your phone number are masked. |
+
+### Matter
+
+Needs Homebridge 2. In the plugin settings, open *Bridge Settings*, tick **Enable Matter**,
+pick a free Matter port, save and restart the child bridge. The Matter QR code and pairing code
+then appear in the same *Bridge Settings* dialog; scan them from Google Home, Alexa, SmartThings
+or any other Matter controller. Several controllers can share the same pairing.
+
+- Every door becomes a Matter **door lock**, whatever `service` is set to: Matter controllers
+  have no gate opener. *Unlock* opens the door; it shows unlocked for `pulse_seconds`, then
+  locked again. A failed open is reported to the controller as an error.
+- HomeKit keeps working on the same bridge. Pairing the Matter bridge into Apple Home as well
+  would show every door twice, so use Matter for the other ecosystems, or turn HomeKit off for
+  this bridge if you only want Matter.
+- Some controllers restrict unlocking a door lock by voice, or ask for a PIN that this plugin
+  doesn't provide. Unlocking from the controller's app is unaffected.
+- Homebridge's Matter support is experimental and not CSA certified, so controllers may warn
+  about an uncertified accessory while pairing.
+
+The plugin keeps `device_id` and the current JWT in
+`<homebridge storage>/intratone/<hash>.json` (mode 0600). Delete that file only if you want to
+register as a new device.
+
+### Getting app_id and app_token
+
+The official app sends both values only when it logs in (`POST /api/auth/device`). To read
+them, capture your own phone's traffic with an HTTPS proxy such as
+[mitmproxy](https://mitmproxy.org/):
+
+1. Route the phone through the proxy and trust the proxy's certificate on the phone.
+2. Make the app log in. It does this on its own about once a week, when its token expires, or
+   at once after you delete and reinstall it and register again.
+3. In the capture, open the `POST https://sip.intratone.info/api/auth/device` request. Its
+   form body contains `app_id` and `app_token`, plus the `device_id` and `tel` the app uses.
+
+Reusing that `device_id` makes Homebridge act as your phone, so you don't need a mobipass
+transfer. A capture contains live tokens: keep it private and delete it when you're done.
+
+## Mobipass: taking the door key
+
+Mobipass is single-owner: the key that opens `data` doors lives on one device at a time. If
+another phone holds it, `GET /api/access` returns nothing. The log then says
+*"The mobipass key for this account is active on another device"* and no door is exposed.
+
+Transfer it with the bundled CLI. Run it as the user Homebridge runs as, so it uses the same
+device_id and JWT:
+
+```bash
+sudo -u homebridge homebridge-intratone activate -U /var/lib/homebridge
+```
+
+```bash
+sudo -u homebridge homebridge-intratone verify --otp 123456 -U /var/lib/homebridge
+```
+
+`activate` texts a code to the account phone. `verify` moves the key to Homebridge and
+**revokes remote opening on the phone that held it**. The doors appear at the next access
+refresh, or straight away if you restart the child bridge.
+
+Other CLI commands:
+
+| command | what it does |
+| ------- | ------------ |
+| `status` | Stored device_id, JWT expiry, last known mobipass flags |
+| `login` | Authenticate now and print the mobipass flags |
+| `list` | Every access, with ✔ openable / ✘ skipped and the reason |
+| `open <access_id>` | Open one door from the shell, for testing |
+
+Add `--debug` to any command to see the requests (tokens masked). Without `-U`, the CLI reads
+`~/.homebridge/config.json`.
+
+In the `homebridge/homebridge` Docker image, run the CLI from the Homebridge UI terminal:
+
+```bash
+cd /homebridge && npx homebridge-intratone status -U /homebridge
+```
+
+## Development
+
+```bash
+npm install
+```
+
+```bash
+npm test
+```
+
+```bash
+npm run build
+```
+
+`npm run lint` and `npm run typecheck` are also available. Link the build into a local
+Homebridge with `npm link`.
+
+The API notes come from the open-source Home Assistant integration
+[GuiHash/ha-intratone](https://github.com/GuiHash/ha-intratone) and from a capture of the iOS
+app. The server returns `openmode` in upper case (`["DATA"]`), and the plugin compares modes
+case-insensitively.
+
+## License
+
+[MIT](LICENSE)

package/config.schema.json

@@ -0,0 +1,108 @@
+{
+  "pluginAlias": "Intratone",
+  "pluginType": "platform",
+  "singular": true,
+  "strictValidation": false,
+  "headerDisplay": "Opens Intratone / Cogelec doors from HomeKit. Run this plugin as a **child bridge**. If the mobipass key is held by another phone, transfer it with `homebridge-intratone activate` then `homebridge-intratone verify --otp <code>` (see README).",
+  "schema": {
+    "type": "object",
+    "properties": {
+      "name": {
+        "title": "Name",
+        "type": "string",
+        "default": "Intratone",
+        "required": true
+      },
+      "app_id": {
+        "title": "App ID",
+        "description": "Application id embedded in the official Intratone app.",
+        "type": "string",
+        "required": true
+      },
+      "app_token": {
+        "title": "App token",
+        "description": "Application token embedded in the official Intratone app.",
+        "type": "string",
+        "required": true
+      },
+      "tel": {
+        "title": "Phone number",
+        "description": "Phone number tied to the Intratone account, e.g. 0612345678.",
+        "type": "string",
+        "required": true
+      },
+      "indicatif": {
+        "title": "Country code",
+        "type": "string",
+        "default": "33",
+        "pattern": "^[0-9]{1,4}$"
+      },
+      "device_id": {
+        "title": "Device ID",
+        "description": "Leave empty to generate one and keep it forever. To reuse an existing phone's registration, paste its device_id (found in its JWT).",
+        "type": "string",
+        "pattern": "^$|^[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}$"
+      },
+      "service": {
+        "title": "HomeKit service",
+        "description": "HomeKit only. Over Matter every door is a door lock.",
+        "type": "string",
+        "default": "lock",
+        "oneOf": [
+          { "title": "Lock (recommended)", "enum": ["lock"] },
+          { "title": "Garage door", "enum": ["garage"] }
+        ]
+      },
+      "pulse_seconds": {
+        "title": "Pulse duration (s)",
+        "description": "How long the door shows as unlocked/open after a successful command.",
+        "type": "number",
+        "default": 2,
+        "minimum": 1,
+        "maximum": 30
+      },
+      "access_refresh_minutes": {
+        "title": "Access list refresh (min)",
+        "description": "How often the list of doors is re-fetched to add or remove accessories.",
+        "type": "integer",
+        "default": 60,
+        "minimum": 15,
+        "maximum": 1440
+      },
+      "user_agent": {
+        "title": "Client identity",
+        "type": "string",
+        "default": "ios",
+        "oneOf": [
+          { "title": "iOS app", "enum": ["ios"] },
+          { "title": "Android app", "enum": ["android"] }
+        ]
+      },
+      "app_version": {
+        "title": "App version sent to the server",
+        "type": "string",
+        "default": "4.6.4"
+      },
+      "debug": {
+        "title": "Debug logging",
+        "description": "Logs request/response bodies (tokens masked) at info level.",
+        "type": "boolean",
+        "default": false
+      }
+    }
+  },
+  "layout": [
+    "name",
+    { "key": "app_id", "type": "password" },
+    { "key": "app_token", "type": "password" },
+    { "type": "flex", "flex-flow": "row wrap", "items": ["indicatif", "tel"] },
+    "service",
+    "pulse_seconds",
+    {
+      "type": "fieldset",
+      "title": "Advanced",
+      "expandable": true,
+      "items": ["device_id", "access_refresh_minutes", "user_agent", "app_version", "debug"]
+    }
+  ]
+}

package/dist/accessAccessory.js

@@ -0,0 +1,133 @@
+import { describeError } from './util.js';
+/** HomeKit names must start and end with a letter or digit and avoid most punctuation. */
+export function homeKitName(name) {
+    const cleaned = name
+        .replace(/[^\p{L}\p{N} '’.,-]/gu, ' ')
+        .replace(/\s+/g, ' ')
+        .replace(/^[^\p{L}\p{N}]+|[^\p{L}\p{N}]+$/gu, '');
+    return cleaned || 'Intratone door';
+}
+/** Prefix with the residence only when several residences would otherwise be ambiguous. */
+export function accessDisplayName(access, withResidence) {
+    return homeKitName(withResidence && access.residence ? `${access.residence} ${access.name}` : access.name);
+}
+/**
+ * One Intratone access as a stateless pulse: the server gives no door state, so we show
+ * "unlocked/open" for `pulseMs` after a successful open and "locked/closed" otherwise.
+ */
+export class AccessAccessory {
+    accessory;
+    deps;
+    service;
+    access;
+    phase = 'closed';
+    pulseTimer;
+    constructor(accessory, access, displayName, deps) {
+        this.accessory = accessory;
+        this.deps = deps;
+        const { Service, Characteristic } = deps.api.hap;
+        this.access = access;
+        const [wanted, unwanted] = deps.kind === 'garage'
+            ? [Service.GarageDoorOpener, Service.LockMechanism]
+            : [Service.LockMechanism, Service.GarageDoorOpener];
+        const stale = accessory.getService(unwanted);
+        if (stale) {
+            accessory.removeService(stale);
+        }
+        this.service = accessory.getService(wanted) ?? accessory.addService(wanted, displayName);
+        if (deps.kind === 'garage') {
+            this.service.getCharacteristic(Characteristic.CurrentDoorState).onGet(() => this.currentValue());
+            this.service.getCharacteristic(Characteristic.TargetDoorState)
+                .onGet(() => this.targetValue())
+                .onSet((value) => this.onTargetSet(value));
+            this.service.getCharacteristic(Characteristic.ObstructionDetected).onGet(() => false);
+        }
+        else {
+            this.service.getCharacteristic(Characteristic.LockCurrentState).onGet(() => this.currentValue());
+            this.service.getCharacteristic(Characteristic.LockTargetState)
+                .onGet(() => this.targetValue())
+                .onSet((value) => this.onTargetSet(value));
+        }
+        this.update(access, displayName);
+        this.push();
+    }
+    update(access, displayName) {
+        const { Service, Characteristic } = this.deps.api.hap;
+        this.access = access;
+        this.accessory.context.access = access;
+        this.accessory.getService(Service.AccessoryInformation)
+            ?.setCharacteristic(Characteristic.Manufacturer, 'Intratone')
+            .setCharacteristic(Characteristic.Model, `Access (${access.primaryMode.toUpperCase()})`)
+            .setCharacteristic(Characteristic.SerialNumber, access.id);
+        this.service.setCharacteristic(Characteristic.Name, displayName);
+    }
+    dispose() {
+        clearTimeout(this.pulseTimer);
+    }
+    onTargetSet(value) {
+        const { Characteristic } = this.deps.api.hap;
+        const wantsOpen = this.deps.kind === 'garage'
+            ? value === Characteristic.TargetDoorState.OPEN
+            : value === Characteristic.LockTargetState.UNSECURED;
+        if (wantsOpen) {
+            this.trigger();
+        }
+        else if (this.phase === 'open') {
+            // "Lock" pressed while the pulse is still showing: nothing to send, just settle.
+            clearTimeout(this.pulseTimer);
+            this.setPhase('closed');
+        }
+    }
+    /** Returns immediately so HomeKit shows "Unlocking…"; the outcome is pushed as state. */
+    trigger() {
+        if (this.phase !== 'closed') {
+            return; // A double tap while opening or showing open sends nothing more.
+        }
+        const name = this.accessory.displayName;
+        this.setPhase('opening');
+        this.deps.log.info(`${name}: opening`);
+        this.deps.open(this.access).then(() => {
+            this.deps.log.info(`${name}: opened`);
+            this.setPhase('open');
+            this.pulseTimer = setTimeout(() => this.setPhase('closed'), this.deps.pulseMs);
+        }, (error) => {
+            this.deps.log.error(`${name}: open failed: ${describeError(error)}`);
+            this.setPhase('closed');
+        });
+    }
+    setPhase(phase) {
+        this.phase = phase;
+        this.push();
+    }
+    push() {
+        const { Characteristic } = this.deps.api.hap;
+        if (this.deps.kind === 'garage') {
+            this.service.updateCharacteristic(Characteristic.TargetDoorState, this.targetValue());
+            this.service.updateCharacteristic(Characteristic.CurrentDoorState, this.currentValue());
+            this.service.updateCharacteristic(Characteristic.ObstructionDetected, false);
+        }
+        else {
+            this.service.updateCharacteristic(Characteristic.LockTargetState, this.targetValue());
+            this.service.updateCharacteristic(Characteristic.LockCurrentState, this.currentValue());
+        }
+    }
+    currentValue() {
+        const { Characteristic } = this.deps.api.hap;
+        if (this.deps.kind === 'garage') {
+            const { CLOSED, OPENING, OPEN } = Characteristic.CurrentDoorState;
+            return this.phase === 'open' ? OPEN : this.phase === 'opening' ? OPENING : CLOSED;
+        }
+        const { SECURED, UNSECURED } = Characteristic.LockCurrentState;
+        return this.phase === 'open' ? UNSECURED : SECURED;
+    }
+    targetValue() {
+        const { Characteristic } = this.deps.api.hap;
+        if (this.deps.kind === 'garage') {
+            const { CLOSED, OPEN } = Characteristic.TargetDoorState;
+            return this.phase === 'closed' ? CLOSED : OPEN;
+        }
+        const { SECURED, UNSECURED } = Characteristic.LockTargetState;
+        return this.phase === 'closed' ? SECURED : UNSECURED;
+    }
+}
+//# sourceMappingURL=accessAccessory.js.map

package/dist/accessAccessory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessAccessory.js","sourceRoot":"","sources":["../src/accessAccessory.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAc1C,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,IAAI;SACjB,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC;SACrC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO,OAAO,IAAI,gBAAgB,CAAC;AACrC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,aAAsB;IACtE,OAAO,WAAW,CAAC,aAAa,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7G,CAAC;AAID;;;GAGG;AACH,MAAM,OAAO,eAAe;IAOP;IAGA;IATF,OAAO,CAAU;IAC1B,MAAM,CAAS;IACf,KAAK,GAAU,QAAQ,CAAC;IACxB,UAAU,CAAkB;IAEpC,YACmB,SAA2C,EAC5D,MAAc,EACd,WAAmB,EACF,IAAyB;QAHzB,cAAS,GAAT,SAAS,CAAkC;QAG3C,SAAI,GAAJ,IAAI,CAAqB;QAE1C,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC/C,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,aAAa,CAAC;YACnD,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,KAAK,EAAE,CAAC;YACV,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAEzF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACjG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,eAAe,CAAC;iBAC3D,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;iBAC/B,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACjG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,eAAe,CAAC;iBAC3D,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;iBAC/B,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,WAAmB;QACxC,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,oBAAoB,CAAC;YACrD,EAAE,iBAAiB,CAAC,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC;aAC5D,iBAAiB,CAAC,cAAc,CAAC,KAAK,EAAE,WAAW,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC;aACvF,iBAAiB,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAEO,WAAW,CAAC,KAA0B;QAC5C,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC3C,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,eAAe,CAAC,IAAI;YAC/C,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC;QAEvD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACjC,iFAAiF;YACjF,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,yFAAyF;IACjF,OAAO;QACb,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,iEAAiE;QAC3E,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9B,GAAG,EAAE;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjF,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,kBAAkB,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,KAAY;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,IAAI;QACV,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,gBAAgB,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACxF,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,gBAAgB,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,gBAAgB,CAAC;YAClE,OAAO,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACpF,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,gBAAgB,CAAC;QAC/D,OAAO,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACrD,CAAC;IAEO,WAAW;QACjB,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,eAAe,CAAC;YACxD,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,eAAe,CAAC;QAC9D,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;CACF"}

package/dist/cli.js

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { parseArgs } from 'node:util';
+import { openAccount, parseSettings } from './config.js';
+import { decodeJwtPayload } from './intratoneClient.js';
+import { PLATFORM_NAME } from './settings.js';
+import { describeError, isRecord, str } from './util.js';
+const USAGE = `Usage: homebridge-intratone <command> [options]
+
+Commands:
+  status               Show the stored device_id, JWT expiry and mobipass flags
+  login                Authenticate now (auth/device) and show the mobipass flags
+  list                 List accesses and whether each can be opened here
+  open <access_id>     Open one access (to test without HomeKit)
+  activate             Start a mobipass transfer: texts a code to the account phone
+  verify --otp <code>  Finish the transfer. Revokes remote opening on the previous device
+
+Options:
+  -U, --user-storage-path <dir>  Homebridge storage directory (default ~/.homebridge)
+  -c, --config <file>            config.json to read (default <storage>/config.json)
+      --otp <code>               SMS code for verify
+      --debug                    Print requests and responses (tokens masked)
+  -h, --help                     Show this help
+
+Run it as the user Homebridge runs as (e.g. sudo -u homebridge …), so it shares the
+plugin's stored device_id and JWT.`;
+function loadPlatformBlock(configPath) {
+    const config = JSON.parse(readFileSync(configPath, 'utf8'));
+    const platforms = isRecord(config) && Array.isArray(config.platforms) ? config.platforms : [];
+    const block = platforms.find((platform) => isRecord(platform) && platform.platform === PLATFORM_NAME);
+    if (!block) {
+        throw new Error(`No "${PLATFORM_NAME}" platform block in ${configPath}`);
+    }
+    return block;
+}
+function formatFlags(flags) {
+    const verdict = flags.mobipassCompatible && !flags.mobipass
+        ? 'key is held by another device: run `activate` then `verify --otp <code>`'
+        : flags.mobipass
+            ? 'key is active on this device'
+            : 'account is not mobipass-only';
+    return [
+        `  openingaccess        ${flags.openingAccess}`,
+        `  access_refresh       ${flags.accessRefresh}`,
+        `  mobipass_compatible  ${flags.mobipassCompatible}`,
+        `  mobipass             ${flags.mobipass}`,
+        `  → ${verdict}`,
+    ].join('\n');
+}
+function printAccesses(accesses) {
+    if (!accesses.openable.length && !accesses.skipped.length) {
+        console.log('No accesses returned.');
+        return;
+    }
+    for (const access of accesses.openable) {
+        console.log(`  ✔ ${access.id.padEnd(10)} ${access.residence} / ${access.name}  [${access.modes.join(',')}]`);
+    }
+    for (const skipped of accesses.skipped) {
+        console.log(`  ✘ ${(skipped.id || '?').padEnd(10)} ${skipped.residence} / ${skipped.name}  [${skipped.mode || 'none'}: ${skipped.reason}]`);
+    }
+}
+async function run(command, args, otp, account) {
+    const { client, store } = account;
+    switch (command) {
+        case 'status': {
+            console.log(`device_id   ${account.deviceId}${account.generatedDeviceId ? ' (just generated)' : ''}`);
+            console.log(`state file  ${store.file}`);
+            const session = client.currentSession;
+            if (!session) {
+                console.log('session     none (run `login`)');
+                return;
+            }
+            const claims = decodeJwtPayload(session.jwt) ?? {};
+            const valid = client.hasValidSession() ? 'valid' : 'EXPIRED';
+            console.log(`session     ${valid} until ${new Date(session.expiresAt).toISOString()}`);
+            console.log(`smartphone  ${session.smartphoneId ?? str(claims.id)}  (JWT device "${str(claims.device)}")`);
+            if (str(claims.device_id) && str(claims.device_id) !== account.deviceId) {
+                console.log(`WARNING     JWT device_id ${str(claims.device_id)} differs from ${account.deviceId}`);
+            }
+            console.log(`mobipass flags (from the last login):\n${formatFlags(session.flags)}`);
+            return;
+        }
+        case 'login': {
+            const session = await client.refresh();
+            console.log(`Authenticated; JWT valid until ${new Date(session.expiresAt).toISOString()}`);
+            console.log(formatFlags(session.flags));
+            return;
+        }
+        case 'list': {
+            printAccesses((await client.listAccesses()).accesses);
+            return;
+        }
+        case 'open': {
+            const id = args[0];
+            if (!id) {
+                throw new Error('open needs an access_id (see `list`)');
+            }
+            const { accesses } = await client.listAccesses();
+            const access = accesses.openable.find((candidate) => candidate.id === id);
+            if (!access) {
+                throw new Error(`Access ${id} is not in the openable list (see \`list\`)`);
+            }
+            await client.open(access);
+            console.log(`Opened ${access.residence} / ${access.name}`);
+            return;
+        }
+        case 'activate': {
+            const result = await client.mobipassActivate();
+            console.log(`${result.code ?? 'OK'}: an SMS code is on its way to the account phone.`);
+            console.log('Finish with: homebridge-intratone verify --otp <code>');
+            console.log('Verifying moves the key here and revokes remote opening on the device that holds it now.');
+            return;
+        }
+        case 'verify': {
+            if (!otp) {
+                throw new Error('verify needs --otp <code>');
+            }
+            const result = await client.mobipassVerify(otp);
+            console.log(`${result.code ?? 'OK'}: mobipass transferred to this device.`);
+            const session = await client.refresh();
+            console.log(formatFlags(session.flags));
+            printAccesses((await client.listAccesses()).accesses);
+            console.log('Homebridge picks the doors up at its next access refresh, or restart the child bridge now.');
+            return;
+        }
+        default:
+            throw new Error(`Unknown command "${command}"\n\n${USAGE}`);
+    }
+}
+async function main() {
+    const { values, positionals } = parseArgs({
+        allowPositionals: true,
+        options: {
+            'user-storage-path': { type: 'string', short: 'U' },
+            config: { type: 'string', short: 'c' },
+            otp: { type: 'string' },
+            debug: { type: 'boolean' },
+            help: { type: 'boolean', short: 'h' },
+        },
+    });
+    const [command, ...args] = positionals;
+    if (values.help || !command) {
+        console.log(USAGE);
+        return values.help ? 0 : 1;
+    }
+    const configPath = values.config
+        ? resolve(values.config)
+        : join(resolve(values['user-storage-path'] ?? join(homedir(), '.homebridge')), 'config.json');
+    const storagePath = values['user-storage-path'] ? resolve(values['user-storage-path']) : dirname(configPath);
+    const { settings, errors } = parseSettings(loadPlatformBlock(configPath));
+    if (!settings) {
+        throw new Error(`Invalid ${PLATFORM_NAME} config in ${configPath}: ${errors.join('; ')}`);
+    }
+    const debug = values.debug || settings.debug;
+    const account = openAccount(settings, storagePath, {
+        debug: debug ? (message) => console.error(`[debug] ${message}`) : undefined,
+    });
+    await run(command, args, values.otp, account);
+    return 0;
+}
+main().then((code) => {
+    process.exitCode = code;
+}, (error) => {
+    console.error(`Error: ${describeError(error)}`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAgB,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAuC,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEzD,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;mCAkBqB,CAAC;AAEpC,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,MAAM,KAAK,GAAY,SAAS,CAAC,IAAI,CAAC,CAAC,QAAiB,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC;IACxH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,OAAO,aAAa,uBAAuB,UAAU,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,QAAQ;QACzD,CAAC,CAAC,0EAA0E;QAC5E,CAAC,CAAC,KAAK,CAAC,QAAQ;YACd,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,8BAA8B,CAAC;IACrC,OAAO;QACL,0BAA0B,KAAK,CAAC,aAAa,EAAE;QAC/C,0BAA0B,KAAK,CAAC,aAAa,EAAE;QAC/C,0BAA0B,KAAK,CAAC,kBAAkB,EAAE;QACpD,0BAA0B,KAAK,CAAC,QAAQ,EAAE;QAC1C,OAAO,OAAO,EAAE;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAAoB;IACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/G,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,SAAS,MAAM,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,IAAI,IAAI,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9I,CAAC;AACH,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,OAAe,EAAE,IAAc,EAAE,GAAuB,EAAE,OAAgB;IAC3F,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAClC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,kBAAkB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3G,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACxE,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrG,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,0CAA0C,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3F,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,aAAa,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,6CAA6C,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,mDAAmD,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,0FAA0F,CAAC,CAAC;YACxG,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,wCAAwC,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxC,aAAa,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAC;YAC1G,OAAO;QACT,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,QAAQ,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QACxC,gBAAgB,EAAE,IAAI;QACtB,OAAO,EAAE;YACP,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YACnD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YACtC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACtC;KACF,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC;IACvC,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM;QAC9B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAChG,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE7G,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,WAAW,aAAa,cAAc,UAAU,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,WAAW,EAAE;QACjD,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC5E,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE;IACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,UAAU,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CACF,CAAC"}