livekit-client 1.12.1 → 1.12.2

package/dist/livekit-client.e2ee.worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"livekit-client.e2ee.worker.js","sources":["../node_modules/loglevel/lib/loglevel.js","../src/logger.ts","../src/e2ee/constants.ts","../src/room/errors.ts","../src/e2ee/errors.ts","../node_modules/eventemitter3/index.js","../src/e2ee/types.ts","../src/room/track/options.ts","../src/e2ee/utils.ts","../src/e2ee/worker/FrameCryptor.ts","../src/e2ee/worker/ParticipantKeyHandler.ts","../src/e2ee/worker/e2ee.worker.ts"],"sourcesContent":["/*\n* loglevel - https://github.com/pimterry/loglevel\n*\n* Copyright (c) 2013 Tim Perry\n* Licensed under the MIT license.\n*/\n(function (root, definition) {\n    \"use strict\";\n    if (typeof define === 'function' && define.amd) {\n        define(definition);\n    } else if (typeof module === 'object' && module.exports) {\n        module.exports = definition();\n    } else {\n        root.log = definition();\n    }\n}(this, function () {\n    \"use strict\";\n\n    // Slightly dubious tricks to cut down minimized file size\n    var noop = function() {};\n    var undefinedType = \"undefined\";\n    var isIE = (typeof window !== undefinedType) && (typeof window.navigator !== undefinedType) && (\n        /Trident\\/|MSIE /.test(window.navigator.userAgent)\n    );\n\n    var logMethods = [\n        \"trace\",\n        \"debug\",\n        \"info\",\n        \"warn\",\n        \"error\"\n    ];\n\n    // Cross-browser bind equivalent that works at least back to IE6\n    function bindMethod(obj, methodName) {\n        var method = obj[methodName];\n        if (typeof method.bind === 'function') {\n            return method.bind(obj);\n        } else {\n            try {\n                return Function.prototype.bind.call(method, obj);\n            } catch (e) {\n                // Missing bind shim or IE8 + Modernizr, fallback to wrapping\n                return function() {\n                    return Function.prototype.apply.apply(method, [obj, arguments]);\n                };\n            }\n        }\n    }\n\n    // Trace() doesn't print the message in IE, so for that case we need to wrap it\n    function traceForIE() {\n        if (console.log) {\n            if (console.log.apply) {\n                console.log.apply(console, arguments);\n            } else {\n                // In old IE, native console methods themselves don't have apply().\n                Function.prototype.apply.apply(console.log, [console, arguments]);\n            }\n        }\n        if (console.trace) console.trace();\n    }\n\n    // Build the best logging method possible for this env\n    // Wherever possible we want to bind, not wrap, to preserve stack traces\n    function realMethod(methodName) {\n        if (methodName === 'debug') {\n            methodName = 'log';\n        }\n\n        if (typeof console === undefinedType) {\n            return false; // No method possible, for now - fixed later by enableLoggingWhenConsoleArrives\n        } else if (methodName === 'trace' && isIE) {\n            return traceForIE;\n        } else if (console[methodName] !== undefined) {\n            return bindMethod(console, methodName);\n        } else if (console.log !== undefined) {\n            return bindMethod(console, 'log');\n        } else {\n            return noop;\n        }\n    }\n\n    // These private functions always need `this` to be set properly\n\n    function replaceLoggingMethods(level, loggerName) {\n        /*jshint validthis:true */\n        for (var i = 0; i < logMethods.length; i++) {\n            var methodName = logMethods[i];\n            this[methodName] = (i < level) ?\n                noop :\n                this.methodFactory(methodName, level, loggerName);\n        }\n\n        // Define log.log as an alias for log.debug\n        this.log = this.debug;\n    }\n\n    // In old IE versions, the console isn't present until you first open it.\n    // We build realMethod() replacements here that regenerate logging methods\n    function enableLoggingWhenConsoleArrives(methodName, level, loggerName) {\n        return function () {\n            if (typeof console !== undefinedType) {\n                replaceLoggingMethods.call(this, level, loggerName);\n                this[methodName].apply(this, arguments);\n            }\n        };\n    }\n\n    // By default, we use closely bound real methods wherever possible, and\n    // otherwise we wait for a console to appear, and then try again.\n    function defaultMethodFactory(methodName, level, loggerName) {\n        /*jshint validthis:true */\n        return realMethod(methodName) ||\n               enableLoggingWhenConsoleArrives.apply(this, arguments);\n    }\n\n    function Logger(name, defaultLevel, factory) {\n      var self = this;\n      var currentLevel;\n      defaultLevel = defaultLevel == null ? \"WARN\" : defaultLevel;\n\n      var storageKey = \"loglevel\";\n      if (typeof name === \"string\") {\n        storageKey += \":\" + name;\n      } else if (typeof name === \"symbol\") {\n        storageKey = undefined;\n      }\n\n      function persistLevelIfPossible(levelNum) {\n          var levelName = (logMethods[levelNum] || 'silent').toUpperCase();\n\n          if (typeof window === undefinedType || !storageKey) return;\n\n          // Use localStorage if available\n          try {\n              window.localStorage[storageKey] = levelName;\n              return;\n          } catch (ignore) {}\n\n          // Use session cookie as fallback\n          try {\n              window.document.cookie =\n                encodeURIComponent(storageKey) + \"=\" + levelName + \";\";\n          } catch (ignore) {}\n      }\n\n      function getPersistedLevel() {\n          var storedLevel;\n\n          if (typeof window === undefinedType || !storageKey) return;\n\n          try {\n              storedLevel = window.localStorage[storageKey];\n          } catch (ignore) {}\n\n          // Fallback to cookies if local storage gives us nothing\n          if (typeof storedLevel === undefinedType) {\n              try {\n                  var cookie = window.document.cookie;\n                  var location = cookie.indexOf(\n                      encodeURIComponent(storageKey) + \"=\");\n                  if (location !== -1) {\n                      storedLevel = /^([^;]+)/.exec(cookie.slice(location))[1];\n                  }\n              } catch (ignore) {}\n          }\n\n          // If the stored level is not valid, treat it as if nothing was stored.\n          if (self.levels[storedLevel] === undefined) {\n              storedLevel = undefined;\n          }\n\n          return storedLevel;\n      }\n\n      function clearPersistedLevel() {\n          if (typeof window === undefinedType || !storageKey) return;\n\n          // Use localStorage if available\n          try {\n              window.localStorage.removeItem(storageKey);\n              return;\n          } catch (ignore) {}\n\n          // Use session cookie as fallback\n          try {\n              window.document.cookie =\n                encodeURIComponent(storageKey) + \"=; expires=Thu, 01 Jan 1970 00:00:00 UTC\";\n          } catch (ignore) {}\n      }\n\n      /*\n       *\n       * Public logger API - see https://github.com/pimterry/loglevel for details\n       *\n       */\n\n      self.name = name;\n\n      self.levels = { \"TRACE\": 0, \"DEBUG\": 1, \"INFO\": 2, \"WARN\": 3,\n          \"ERROR\": 4, \"SILENT\": 5};\n\n      self.methodFactory = factory || defaultMethodFactory;\n\n      self.getLevel = function () {\n          return currentLevel;\n      };\n\n      self.setLevel = function (level, persist) {\n          if (typeof level === \"string\" && self.levels[level.toUpperCase()] !== undefined) {\n              level = self.levels[level.toUpperCase()];\n          }\n          if (typeof level === \"number\" && level >= 0 && level <= self.levels.SILENT) {\n              currentLevel = level;\n              if (persist !== false) {  // defaults to true\n                  persistLevelIfPossible(level);\n              }\n              replaceLoggingMethods.call(self, level, name);\n              if (typeof console === undefinedType && level < self.levels.SILENT) {\n                  return \"No console available for logging\";\n              }\n          } else {\n              throw \"log.setLevel() called with invalid level: \" + level;\n          }\n      };\n\n      self.setDefaultLevel = function (level) {\n          defaultLevel = level;\n          if (!getPersistedLevel()) {\n              self.setLevel(level, false);\n          }\n      };\n\n      self.resetLevel = function () {\n          self.setLevel(defaultLevel, false);\n          clearPersistedLevel();\n      };\n\n      self.enableAll = function(persist) {\n          self.setLevel(self.levels.TRACE, persist);\n      };\n\n      self.disableAll = function(persist) {\n          self.setLevel(self.levels.SILENT, persist);\n      };\n\n      // Initialize with the right level\n      var initialLevel = getPersistedLevel();\n      if (initialLevel == null) {\n          initialLevel = defaultLevel;\n      }\n      self.setLevel(initialLevel, false);\n    }\n\n    /*\n     *\n     * Top-level API\n     *\n     */\n\n    var defaultLogger = new Logger();\n\n    var _loggersByName = {};\n    defaultLogger.getLogger = function getLogger(name) {\n        if ((typeof name !== \"symbol\" && typeof name !== \"string\") || name === \"\") {\n          throw new TypeError(\"You must supply a name when creating a logger.\");\n        }\n\n        var logger = _loggersByName[name];\n        if (!logger) {\n          logger = _loggersByName[name] = new Logger(\n            name, defaultLogger.getLevel(), defaultLogger.methodFactory);\n        }\n        return logger;\n    };\n\n    // Grab the current global log variable in case of overwrite\n    var _log = (typeof window !== undefinedType) ? window.log : undefined;\n    defaultLogger.noConflict = function() {\n        if (typeof window !== undefinedType &&\n               window.log === defaultLogger) {\n            window.log = _log;\n        }\n\n        return defaultLogger;\n    };\n\n    defaultLogger.getLoggers = function getLoggers() {\n        return _loggersByName;\n    };\n\n    // ES6 default export, for compatibility\n    defaultLogger['default'] = defaultLogger;\n\n    return defaultLogger;\n}));\n","import * as log from 'loglevel';\n\nexport enum LogLevel {\n  trace = 0,\n  debug = 1,\n  info = 2,\n  warn = 3,\n  error = 4,\n  silent = 5,\n}\n\ntype LogLevelString = keyof typeof LogLevel;\n\ntype StructuredLogger = {\n  trace: (msg: string, context?: object) => void;\n  debug: (msg: string, context?: object) => void;\n  info: (msg: string, context?: object) => void;\n  warn: (msg: string, context?: object) => void;\n  error: (msg: string, context?: object) => void;\n  setDefaultLevel: (level: log.LogLevelDesc) => void;\n};\n\nconst livekitLogger = log.getLogger('livekit');\n\nlivekitLogger.setDefaultLevel(LogLevel.info);\n\nexport default livekitLogger as StructuredLogger;\n\nexport function setLogLevel(level: LogLevel | LogLevelString, loggerName?: 'livekit' | 'lk-e2ee') {\n  if (loggerName) {\n    log.getLogger(loggerName).setLevel(level);\n  }\n  for (const logger of Object.values(log.getLoggers())) {\n    logger.setLevel(level);\n  }\n}\n\nexport type LogExtension = (level: LogLevel, msg: string, context?: object) => void;\n\n/**\n * use this to hook into the logging function to allow sending internal livekit logs to third party services\n * if set, the browser logs will lose their stacktrace information (see https://github.com/pimterry/loglevel#writing-plugins)\n */\nexport function setLogExtension(extension: LogExtension) {\n  const originalFactory = livekitLogger.methodFactory;\n\n  livekitLogger.methodFactory = (methodName, configLevel, loggerName) => {\n    const rawMethod = originalFactory(methodName, configLevel, loggerName);\n\n    const logLevel = LogLevel[methodName as LogLevelString];\n    const needLog = logLevel >= configLevel && logLevel < LogLevel.silent;\n\n    return (msg, context?: [msg: string, context: object]) => {\n      if (context) rawMethod(msg, context);\n      else rawMethod(msg);\n      if (needLog) {\n        extension(logLevel, msg, context);\n      }\n    };\n  };\n  livekitLogger.setLevel(livekitLogger.getLevel()); // Be sure to call setLevel method in order to apply plugin\n}\n\nexport const workerLogger = log.getLogger('lk-e2ee') as StructuredLogger;\n","import type { KeyProviderOptions } from './types';\n\nexport const ENCRYPTION_ALGORITHM = 'AES-GCM';\n\n// We use a ringbuffer of keys so we can change them and still decode packets that were\n// encrypted with an old key. We use a size of 16 which corresponds to the four bits\n// in the frame trailer.\nexport const KEYRING_SIZE = 16;\n\n// We copy the first bytes of the VP8 payload unencrypted.\n// For keyframes this is 10 bytes, for non-keyframes (delta) 3. See\n//   https://tools.ietf.org/html/rfc6386#section-9.1\n// This allows the bridge to continue detecting keyframes (only one byte needed in the JVB)\n// and is also a bit easier for the VP8 decoder (i.e. it generates funny garbage pictures\n// instead of being unable to decode).\n// This is a bit for show and we might want to reduce to 1 unconditionally in the final version.\n//\n// For audio (where frame.type is not set) we do not encrypt the opus TOC byte:\n//   https://tools.ietf.org/html/rfc6716#section-3.1\nexport const UNENCRYPTED_BYTES = {\n  key: 10,\n  delta: 3,\n  audio: 1, // frame.type is not set on audio, so this is set manually\n  empty: 0,\n} as const;\n\n/* We use a 12 byte bit IV. This is signalled in plain together with the\n packet. See https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/encrypt#parameters */\nexport const IV_LENGTH = 12;\n\n// flag set to indicate that e2ee has been setup for sender/receiver;\nexport const E2EE_FLAG = 'lk_e2ee';\n\nexport const SALT = 'LKFrameEncryptionKey';\n\nexport const KEY_PROVIDER_DEFAULTS: KeyProviderOptions = {\n  sharedKey: false,\n  ratchetSalt: SALT,\n  ratchetWindowSize: 8,\n} as const;\n","export class LivekitError extends Error {\n  code: number;\n\n  constructor(code: number, message?: string) {\n    super(message || 'an error has occured');\n    this.code = code;\n  }\n}\n\nexport const enum ConnectionErrorReason {\n  NotAllowed,\n  ServerUnreachable,\n  InternalError,\n  Cancelled,\n}\n\nexport class ConnectionError extends LivekitError {\n  status?: number;\n\n  reason?: ConnectionErrorReason;\n\n  constructor(message?: string, reason?: ConnectionErrorReason, status?: number) {\n    super(1, message);\n    this.status = status;\n    this.reason = reason;\n  }\n}\n\nexport class DeviceUnsupportedError extends LivekitError {\n  constructor(message?: string) {\n    super(21, message ?? 'device is unsupported');\n  }\n}\n\nexport class TrackInvalidError extends LivekitError {\n  constructor(message?: string) {\n    super(20, message ?? 'track is invalid');\n  }\n}\n\nexport class UnsupportedServer extends LivekitError {\n  constructor(message?: string) {\n    super(10, message ?? 'unsupported server');\n  }\n}\n\nexport class UnexpectedConnectionState extends LivekitError {\n  constructor(message?: string) {\n    super(12, message ?? 'unexpected connection state');\n  }\n}\n\nexport class NegotiationError extends LivekitError {\n  constructor(message?: string) {\n    super(13, message ?? 'unable to negotiate');\n  }\n}\n\nexport class PublishDataError extends LivekitError {\n  constructor(message?: string) {\n    super(13, message ?? 'unable to publish data');\n  }\n}\n\nexport enum MediaDeviceFailure {\n  // user rejected permissions\n  PermissionDenied = 'PermissionDenied',\n  // device is not available\n  NotFound = 'NotFound',\n  // device is in use. On Windows, only a single tab may get access to a device at a time.\n  DeviceInUse = 'DeviceInUse',\n  Other = 'Other',\n}\n\nexport namespace MediaDeviceFailure {\n  export function getFailure(error: any): MediaDeviceFailure | undefined {\n    if (error && 'name' in error) {\n      if (error.name === 'NotFoundError' || error.name === 'DevicesNotFoundError') {\n        return MediaDeviceFailure.NotFound;\n      }\n      if (error.name === 'NotAllowedError' || error.name === 'PermissionDeniedError') {\n        return MediaDeviceFailure.PermissionDenied;\n      }\n      if (error.name === 'NotReadableError' || error.name === 'TrackStartError') {\n        return MediaDeviceFailure.DeviceInUse;\n      }\n      return MediaDeviceFailure.Other;\n    }\n  }\n}\n","import { LivekitError } from '../room/errors';\n\nexport enum CryptorErrorReason {\n  InvalidKey = 0,\n  MissingKey = 1,\n  InternalError = 2,\n}\n\nexport class CryptorError extends LivekitError {\n  reason: CryptorErrorReason;\n\n  constructor(message?: string, reason: CryptorErrorReason = CryptorErrorReason.InternalError) {\n    super(40, message);\n    this.reason = reason;\n  }\n}\n","'use strict';\n\nvar has = Object.prototype.hasOwnProperty\n  , prefix = '~';\n\n/**\n * Constructor to create a storage for our `EE` objects.\n * An `Events` instance is a plain object whose properties are event names.\n *\n * @constructor\n * @private\n */\nfunction Events() {}\n\n//\n// We try to not inherit from `Object.prototype`. In some engines creating an\n// instance in this way is faster than calling `Object.create(null)` directly.\n// If `Object.create(null)` is not supported we prefix the event names with a\n// character to make sure that the built-in object properties are not\n// overridden or used as an attack vector.\n//\nif (Object.create) {\n  Events.prototype = Object.create(null);\n\n  //\n  // This hack is needed because the `__proto__` property is still inherited in\n  // some old browsers like Android 4, iPhone 5.1, Opera 11 and Safari 5.\n  //\n  if (!new Events().__proto__) prefix = false;\n}\n\n/**\n * Representation of a single event listener.\n *\n * @param {Function} fn The listener function.\n * @param {*} context The context to invoke the listener with.\n * @param {Boolean} [once=false] Specify if the listener is a one-time listener.\n * @constructor\n * @private\n */\nfunction EE(fn, context, once) {\n  this.fn = fn;\n  this.context = context;\n  this.once = once || false;\n}\n\n/**\n * Add a listener for a given event.\n *\n * @param {EventEmitter} emitter Reference to the `EventEmitter` instance.\n * @param {(String|Symbol)} event The event name.\n * @param {Function} fn The listener function.\n * @param {*} context The context to invoke the listener with.\n * @param {Boolean} once Specify if the listener is a one-time listener.\n * @returns {EventEmitter}\n * @private\n */\nfunction addListener(emitter, event, fn, context, once) {\n  if (typeof fn !== 'function') {\n    throw new TypeError('The listener must be a function');\n  }\n\n  var listener = new EE(fn, context || emitter, once)\n    , evt = prefix ? prefix + event : event;\n\n  if (!emitter._events[evt]) emitter._events[evt] = listener, emitter._eventsCount++;\n  else if (!emitter._events[evt].fn) emitter._events[evt].push(listener);\n  else emitter._events[evt] = [emitter._events[evt], listener];\n\n  return emitter;\n}\n\n/**\n * Clear event by name.\n *\n * @param {EventEmitter} emitter Reference to the `EventEmitter` instance.\n * @param {(String|Symbol)} evt The Event name.\n * @private\n */\nfunction clearEvent(emitter, evt) {\n  if (--emitter._eventsCount === 0) emitter._events = new Events();\n  else delete emitter._events[evt];\n}\n\n/**\n * Minimal `EventEmitter` interface that is molded against the Node.js\n * `EventEmitter` interface.\n *\n * @constructor\n * @public\n */\nfunction EventEmitter() {\n  this._events = new Events();\n  this._eventsCount = 0;\n}\n\n/**\n * Return an array listing the events for which the emitter has registered\n * listeners.\n *\n * @returns {Array}\n * @public\n */\nEventEmitter.prototype.eventNames = function eventNames() {\n  var names = []\n    , events\n    , name;\n\n  if (this._eventsCount === 0) return names;\n\n  for (name in (events = this._events)) {\n    if (has.call(events, name)) names.push(prefix ? name.slice(1) : name);\n  }\n\n  if (Object.getOwnPropertySymbols) {\n    return names.concat(Object.getOwnPropertySymbols(events));\n  }\n\n  return names;\n};\n\n/**\n * Return the listeners registered for a given event.\n *\n * @param {(String|Symbol)} event The event name.\n * @returns {Array} The registered listeners.\n * @public\n */\nEventEmitter.prototype.listeners = function listeners(event) {\n  var evt = prefix ? prefix + event : event\n    , handlers = this._events[evt];\n\n  if (!handlers) return [];\n  if (handlers.fn) return [handlers.fn];\n\n  for (var i = 0, l = handlers.length, ee = new Array(l); i < l; i++) {\n    ee[i] = handlers[i].fn;\n  }\n\n  return ee;\n};\n\n/**\n * Return the number of listeners listening to a given event.\n *\n * @param {(String|Symbol)} event The event name.\n * @returns {Number} The number of listeners.\n * @public\n */\nEventEmitter.prototype.listenerCount = function listenerCount(event) {\n  var evt = prefix ? prefix + event : event\n    , listeners = this._events[evt];\n\n  if (!listeners) return 0;\n  if (listeners.fn) return 1;\n  return listeners.length;\n};\n\n/**\n * Calls each of the listeners registered for a given event.\n *\n * @param {(String|Symbol)} event The event name.\n * @returns {Boolean} `true` if the event had listeners, else `false`.\n * @public\n */\nEventEmitter.prototype.emit = function emit(event, a1, a2, a3, a4, a5) {\n  var evt = prefix ? prefix + event : event;\n\n  if (!this._events[evt]) return false;\n\n  var listeners = this._events[evt]\n    , len = arguments.length\n    , args\n    , i;\n\n  if (listeners.fn) {\n    if (listeners.once) this.removeListener(event, listeners.fn, undefined, true);\n\n    switch (len) {\n      case 1: return listeners.fn.call(listeners.context), true;\n      case 2: return listeners.fn.call(listeners.context, a1), true;\n      case 3: return listeners.fn.call(listeners.context, a1, a2), true;\n      case 4: return listeners.fn.call(listeners.context, a1, a2, a3), true;\n      case 5: return listeners.fn.call(listeners.context, a1, a2, a3, a4), true;\n      case 6: return listeners.fn.call(listeners.context, a1, a2, a3, a4, a5), true;\n    }\n\n    for (i = 1, args = new Array(len -1); i < len; i++) {\n      args[i - 1] = arguments[i];\n    }\n\n    listeners.fn.apply(listeners.context, args);\n  } else {\n    var length = listeners.length\n      , j;\n\n    for (i = 0; i < length; i++) {\n      if (listeners[i].once) this.removeListener(event, listeners[i].fn, undefined, true);\n\n      switch (len) {\n        case 1: listeners[i].fn.call(listeners[i].context); break;\n        case 2: listeners[i].fn.call(listeners[i].context, a1); break;\n        case 3: listeners[i].fn.call(listeners[i].context, a1, a2); break;\n        case 4: listeners[i].fn.call(listeners[i].context, a1, a2, a3); break;\n        default:\n          if (!args) for (j = 1, args = new Array(len -1); j < len; j++) {\n            args[j - 1] = arguments[j];\n          }\n\n          listeners[i].fn.apply(listeners[i].context, args);\n      }\n    }\n  }\n\n  return true;\n};\n\n/**\n * Add a listener for a given event.\n *\n * @param {(String|Symbol)} event The event name.\n * @param {Function} fn The listener function.\n * @param {*} [context=this] The context to invoke the listener with.\n * @returns {EventEmitter} `this`.\n * @public\n */\nEventEmitter.prototype.on = function on(event, fn, context) {\n  return addListener(this, event, fn, context, false);\n};\n\n/**\n * Add a one-time listener for a given event.\n *\n * @param {(String|Symbol)} event The event name.\n * @param {Function} fn The listener function.\n * @param {*} [context=this] The context to invoke the listener with.\n * @returns {EventEmitter} `this`.\n * @public\n */\nEventEmitter.prototype.once = function once(event, fn, context) {\n  return addListener(this, event, fn, context, true);\n};\n\n/**\n * Remove the listeners of a given event.\n *\n * @param {(String|Symbol)} event The event name.\n * @param {Function} fn Only remove the listeners that match this function.\n * @param {*} context Only remove the listeners that have this context.\n * @param {Boolean} once Only remove one-time listeners.\n * @returns {EventEmitter} `this`.\n * @public\n */\nEventEmitter.prototype.removeListener = function removeListener(event, fn, context, once) {\n  var evt = prefix ? prefix + event : event;\n\n  if (!this._events[evt]) return this;\n  if (!fn) {\n    clearEvent(this, evt);\n    return this;\n  }\n\n  var listeners = this._events[evt];\n\n  if (listeners.fn) {\n    if (\n      listeners.fn === fn &&\n      (!once || listeners.once) &&\n      (!context || listeners.context === context)\n    ) {\n      clearEvent(this, evt);\n    }\n  } else {\n    for (var i = 0, events = [], length = listeners.length; i < length; i++) {\n      if (\n        listeners[i].fn !== fn ||\n        (once && !listeners[i].once) ||\n        (context && listeners[i].context !== context)\n      ) {\n        events.push(listeners[i]);\n      }\n    }\n\n    //\n    // Reset the array, or remove it completely if we have no more listeners.\n    //\n    if (events.length) this._events[evt] = events.length === 1 ? events[0] : events;\n    else clearEvent(this, evt);\n  }\n\n  return this;\n};\n\n/**\n * Remove all listeners, or those of the specified event.\n *\n * @param {(String|Symbol)} [event] The event name.\n * @returns {EventEmitter} `this`.\n * @public\n */\nEventEmitter.prototype.removeAllListeners = function removeAllListeners(event) {\n  var evt;\n\n  if (event) {\n    evt = prefix ? prefix + event : event;\n    if (this._events[evt]) clearEvent(this, evt);\n  } else {\n    this._events = new Events();\n    this._eventsCount = 0;\n  }\n\n  return this;\n};\n\n//\n// Alias methods names because people roll like that.\n//\nEventEmitter.prototype.off = EventEmitter.prototype.removeListener;\nEventEmitter.prototype.addListener = EventEmitter.prototype.on;\n\n//\n// Expose the prefix.\n//\nEventEmitter.prefixed = prefix;\n\n//\n// Allow `EventEmitter` to be imported as module namespace.\n//\nEventEmitter.EventEmitter = EventEmitter;\n\n//\n// Expose the module.\n//\nif ('undefined' !== typeof module) {\n  module.exports = EventEmitter;\n}\n","import type Participant from '../room/participant/Participant';\nimport type { VideoCodec } from '../room/track/options';\nimport type { BaseKeyProvider } from './KeyProvider';\nimport type { CryptorError } from './errors';\n\nexport interface BaseMessage {\n  kind: string;\n  data?: unknown;\n}\n\nexport interface InitMessage extends BaseMessage {\n  kind: 'init';\n  data: {\n    keyProviderOptions: KeyProviderOptions;\n  };\n}\n\nexport interface SetKeyMessage extends BaseMessage {\n  kind: 'setKey';\n  data: {\n    participantId?: string;\n    key: CryptoKey;\n    keyIndex?: number;\n  };\n}\n\nexport interface RTPVideoMapMessage extends BaseMessage {\n  kind: 'setRTPMap';\n  data: {\n    map: Map<number, VideoCodec>;\n  };\n}\n\nexport interface EncodeMessage extends BaseMessage {\n  kind: 'decode' | 'encode';\n  data: {\n    participantId: string;\n    readableStream: ReadableStream;\n    writableStream: WritableStream;\n    trackId: string;\n    codec?: VideoCodec;\n  };\n}\n\nexport interface RemoveTransformMessage extends BaseMessage {\n  kind: 'removeTransform';\n  data: {\n    participantId: string;\n    trackId: string;\n  };\n}\n\nexport interface UpdateCodecMessage extends BaseMessage {\n  kind: 'updateCodec';\n  data: {\n    participantId: string;\n    trackId: string;\n    codec: VideoCodec;\n  };\n}\n\nexport interface RatchetRequestMessage extends BaseMessage {\n  kind: 'ratchetRequest';\n  data: {\n    participantId: string | undefined;\n    keyIndex?: number;\n  };\n}\n\nexport interface RatchetMessage extends BaseMessage {\n  kind: 'ratchetKey';\n  data: {\n    // participantId: string | undefined;\n    keyIndex?: number;\n    material: CryptoKey;\n  };\n}\n\nexport interface ErrorMessage extends BaseMessage {\n  kind: 'error';\n  data: {\n    error: Error;\n  };\n}\n\nexport interface EnableMessage extends BaseMessage {\n  kind: 'enable';\n  data: {\n    // if no participant id is set it indicates publisher encryption enable/disable\n    participantId?: string;\n    enabled: boolean;\n  };\n}\n\nexport type E2EEWorkerMessage =\n  | InitMessage\n  | SetKeyMessage\n  | EncodeMessage\n  | ErrorMessage\n  | EnableMessage\n  | RemoveTransformMessage\n  | RTPVideoMapMessage\n  | UpdateCodecMessage\n  | RatchetRequestMessage\n  | RatchetMessage;\n\nexport type KeySet = { material: CryptoKey; encryptionKey: CryptoKey };\n\nexport type KeyProviderOptions = {\n  sharedKey: boolean;\n  ratchetSalt: string;\n  ratchetWindowSize: number;\n};\n\nexport type KeyProviderCallbacks = {\n  setKey: (keyInfo: KeyInfo) => void;\n  ratchetRequest: (participantId?: string, keyIndex?: number) => void;\n  /** currently only emitted for local participant */\n  keyRatcheted: (material: CryptoKey, keyIndex?: number) => void;\n};\n\nexport type ParticipantKeyHandlerCallbacks = {\n  keyRatcheted: (material: CryptoKey, keyIndex?: number, participantId?: string) => void;\n};\n\nexport type E2EEManagerCallbacks = {\n  participantEncryptionStatusChanged: (enabled: boolean, participant?: Participant) => void;\n  encryptionError: (error: Error) => void;\n};\n\nexport const EncryptionEvent = {\n  ParticipantEncryptionStatusChanged: 'participantEncryptionStatusChanged',\n  Error: 'encryptionError',\n} as const;\n\nexport type CryptorCallbacks = {\n  cryptorError: (error: CryptorError) => void;\n};\n\nexport const CryptorEvent = {\n  Error: 'cryptorError',\n} as const;\n\nexport type KeyInfo = {\n  key: CryptoKey;\n  participantId?: string;\n  keyIndex?: number;\n};\n\nexport type E2EEOptions = {\n  keyProvider: BaseKeyProvider;\n  worker: Worker;\n};\n\nexport type DecodeRatchetOptions = {\n  /** attempts  */\n  ratchetCount: number;\n  /** ratcheted key to try */\n  encryptionKey?: CryptoKey;\n};\n","import type { Track } from './Track';\n\nexport interface TrackPublishDefaults {\n  /**\n   * encoding parameters for camera track\n   */\n  videoEncoding?: VideoEncoding;\n\n  /**\n   * @experimental\n   */\n  backupCodec?: { codec: BackupVideoCodec; encoding: VideoEncoding } | false;\n\n  /**\n   * encoding parameters for screen share track\n   */\n  screenShareEncoding?: VideoEncoding;\n\n  /**\n   * codec, defaults to vp8; for svc codecs, auto enable vp8\n   * as backup. (TBD)\n   */\n  videoCodec?: VideoCodec;\n\n  /**\n   * max audio bitrate, defaults to [[AudioPresets.music]]\n   * @deprecated use `audioPreset` instead\n   */\n  audioBitrate?: number;\n\n  /**\n   * which audio preset should be used for publishing (audio) tracks\n   * defaults to [[AudioPresets.music]]\n   */\n  audioPreset?: AudioPreset;\n\n  /**\n   * dtx (Discontinuous Transmission of audio), enabled by default for mono tracks.\n   */\n  dtx?: boolean;\n\n  /**\n   * red (Redundant Audio Data), enabled by default for mono tracks.\n   */\n  red?: boolean;\n\n  /**\n   * publish track in stereo mode (or set to false to disable). defaults determined by capture channel count.\n   */\n  forceStereo?: boolean;\n\n  /**\n   * use simulcast, defaults to true.\n   * When using simulcast, LiveKit will publish up to three versions of the stream\n   * at various resolutions.\n   */\n  simulcast?: boolean;\n\n  /**\n   * scalability mode for svc codecs, defaults to 'L3T3'.\n   * for svc codecs, simulcast is disabled.\n   */\n  scalabilityMode?: ScalabilityMode;\n\n  /**\n   * Up to two additional simulcast layers to publish in addition to the original\n   * Track.\n   * When left blank, it defaults to h180, h360.\n   * If a SVC codec is used (VP9 or AV1), this field has no effect.\n   *\n   * To publish three total layers, you would specify:\n   * {\n   *   videoEncoding: {...}, // encoding of the primary layer\n   *   videoSimulcastLayers: [\n   *     VideoPresets.h540,\n   *     VideoPresets.h216,\n   *   ],\n   * }\n   */\n  videoSimulcastLayers?: Array<VideoPreset>;\n\n  /**\n   * custom video simulcast layers for screen tracks\n   * Note: the layers need to be ordered from lowest to highest quality\n   */\n  screenShareSimulcastLayers?: Array<VideoPreset>;\n\n  /**\n   * For local tracks, stop the underlying MediaStreamTrack when the track is muted (or paused)\n   * on some platforms, this option is necessary to disable the microphone recording indicator.\n   * Note: when this is enabled, and BT devices are connected, they will transition between\n   * profiles (e.g. HFP to A2DP) and there will be an audible difference in playback.\n   *\n   * defaults to false\n   */\n  stopMicTrackOnMute?: boolean;\n}\n\n/**\n * Options when publishing tracks\n */\nexport interface TrackPublishOptions extends TrackPublishDefaults {\n  /**\n   * set a track name\n   */\n  name?: string;\n\n  /**\n   * Source of track, camera, microphone, or screen\n   */\n  source?: Track.Source;\n}\n\nexport interface CreateLocalTracksOptions {\n  /**\n   * audio track options, true to create with defaults. false if audio shouldn't be created\n   * default true\n   */\n  audio?: boolean | AudioCaptureOptions;\n\n  /**\n   * video track options, true to create with defaults. false if video shouldn't be created\n   * default true\n   */\n  video?: boolean | VideoCaptureOptions;\n}\n\nexport interface VideoCaptureOptions {\n  /**\n   * A ConstrainDOMString object specifying a device ID or an array of device\n   * IDs which are acceptable and/or required.\n   */\n  deviceId?: ConstrainDOMString;\n\n  /**\n   * a facing or an array of facings which are acceptable and/or required.\n   */\n  facingMode?: 'user' | 'environment' | 'left' | 'right';\n\n  resolution?: VideoResolution;\n}\n\nexport interface ScreenShareCaptureOptions {\n  /**\n   * true to capture audio shared. browser support for audio capturing in\n   * screenshare is limited: https://developer.mozilla.org/en-US/docs/Web/API/MediaDevices/getDisplayMedia#browser_compatibility\n   */\n  audio?: boolean | AudioCaptureOptions;\n\n  /** capture resolution, defaults to full HD */\n  resolution?: VideoResolution;\n\n  /** a CaptureController object instance containing methods that can be used to further manipulate the capture session if included. */\n  controller?: unknown; // TODO replace type with CaptureController once it lands in TypeScript\n\n  /** specifies whether the browser should allow the user to select the current tab for capture */\n  selfBrowserSurface?: 'include' | 'exclude';\n\n  /** specifies whether the browser should display a control to allow the user to dynamically switch the shared tab during screen-sharing. */\n  surfaceSwitching?: 'include' | 'exclude';\n\n  /** specifies whether the browser should include the system audio among the possible audio sources offered to the user */\n  systemAudio?: 'include' | 'exclude';\n\n  /**\n   * Experimental option to control whether the audio playing in a tab will continue to be played out of a user's\n   * local speakers when the tab is captured.\n   */\n  suppressLocalAudioPlayback?: boolean;\n}\n\nexport interface AudioCaptureOptions {\n  /**\n   * specifies whether automatic gain control is preferred and/or required\n   */\n  autoGainControl?: ConstrainBoolean;\n\n  /**\n   * the channel count or range of channel counts which are acceptable and/or required\n   */\n  channelCount?: ConstrainULong;\n\n  /**\n   * A ConstrainDOMString object specifying a device ID or an array of device\n   * IDs which are acceptable and/or required.\n   */\n  deviceId?: ConstrainDOMString;\n\n  /**\n   * whether or not echo cancellation is preferred and/or required\n   */\n  echoCancellation?: ConstrainBoolean;\n\n  /**\n   * the latency or range of latencies which are acceptable and/or required.\n   */\n  latency?: ConstrainDouble;\n\n  /**\n   * whether noise suppression is preferred and/or required.\n   */\n  noiseSuppression?: ConstrainBoolean;\n\n  /**\n   * the sample rate or range of sample rates which are acceptable and/or required.\n   */\n  sampleRate?: ConstrainULong;\n\n  /**\n   * sample size or range of sample sizes which are acceptable and/or required.\n   */\n  sampleSize?: ConstrainULong;\n}\n\nexport interface AudioOutputOptions {\n  /**\n   * deviceId to output audio\n   *\n   * Only supported on browsers where `setSinkId` is available\n   */\n  deviceId?: string;\n}\n\nexport interface VideoResolution {\n  width: number;\n  height: number;\n  frameRate?: number;\n  aspectRatio?: number;\n}\n\nexport interface VideoEncoding {\n  maxBitrate: number;\n  maxFramerate?: number;\n  priority?: RTCPriorityType;\n}\n\nexport class VideoPreset {\n  encoding: VideoEncoding;\n\n  width: number;\n\n  height: number;\n\n  constructor(\n    width: number,\n    height: number,\n    maxBitrate: number,\n    maxFramerate?: number,\n    priority?: RTCPriorityType,\n  ) {\n    this.width = width;\n    this.height = height;\n    this.encoding = {\n      maxBitrate,\n      maxFramerate,\n      priority,\n    };\n  }\n\n  get resolution(): VideoResolution {\n    return {\n      width: this.width,\n      height: this.height,\n      frameRate: this.encoding.maxFramerate,\n      aspectRatio: this.width / this.height,\n    };\n  }\n}\n\nexport interface AudioPreset {\n  maxBitrate: number;\n  priority?: RTCPriorityType;\n}\n\nconst backupCodecs = ['vp8', 'h264'] as const;\n\nexport const videoCodecs = ['vp8', 'h264', 'vp9', 'av1'] as const;\n\nexport type VideoCodec = (typeof videoCodecs)[number];\n\nexport type BackupVideoCodec = (typeof backupCodecs)[number];\n\nexport function isBackupCodec(codec: string): codec is BackupVideoCodec {\n  return !!backupCodecs.find((backup) => backup === codec);\n}\n\nexport function isCodecEqual(c1: string | undefined, c2: string | undefined): boolean {\n  return (\n    c1?.toLowerCase().replace(/audio\\/|video\\//y, '') ===\n    c2?.toLowerCase().replace(/audio\\/|video\\//y, '')\n  );\n}\n\n/**\n * scalability modes for svc, only supprot l3t3 now.\n */\nexport type ScalabilityMode = 'L3T3' | 'L3T3_KEY';\n\nexport namespace AudioPresets {\n  export const telephone: AudioPreset = {\n    maxBitrate: 12_000,\n  };\n  export const speech: AudioPreset = {\n    maxBitrate: 20_000,\n  };\n  export const music: AudioPreset = {\n    maxBitrate: 32_000,\n  };\n  export const musicStereo: AudioPreset = {\n    maxBitrate: 48_000,\n  };\n  export const musicHighQuality: AudioPreset = {\n    maxBitrate: 64_000,\n  };\n  export const musicHighQualityStereo: AudioPreset = {\n    maxBitrate: 96_000,\n  };\n}\n\n/**\n * Sane presets for video resolution/encoding\n */\nexport const VideoPresets = {\n  h90: new VideoPreset(160, 90, 60_000, 15),\n  h180: new VideoPreset(320, 180, 120_000, 15),\n  h216: new VideoPreset(384, 216, 180_000, 15),\n  h360: new VideoPreset(640, 360, 300_000, 20),\n  h540: new VideoPreset(960, 540, 600_000, 25),\n  h720: new VideoPreset(1280, 720, 1_700_000, 30),\n  h1080: new VideoPreset(1920, 1080, 3_000_000, 30),\n  h1440: new VideoPreset(2560, 1440, 5_000_000, 30),\n  h2160: new VideoPreset(3840, 2160, 8_000_000, 30),\n} as const;\n\n/**\n * Four by three presets\n */\nexport const VideoPresets43 = {\n  h120: new VideoPreset(160, 120, 80_000, 15),\n  h180: new VideoPreset(240, 180, 100_000, 15),\n  h240: new VideoPreset(320, 240, 150_000, 15),\n  h360: new VideoPreset(480, 360, 225_000, 20),\n  h480: new VideoPreset(640, 480, 300_000, 20),\n  h540: new VideoPreset(720, 540, 450_000, 25),\n  h720: new VideoPreset(960, 720, 1_500_000, 30),\n  h1080: new VideoPreset(1440, 1080, 2_500_000, 30),\n  h1440: new VideoPreset(1920, 1440, 3_500_000, 30),\n} as const;\n\nexport const ScreenSharePresets = {\n  h360fps3: new VideoPreset(640, 360, 200_000, 3, 'medium'),\n  h720fps5: new VideoPreset(1280, 720, 400_000, 5, 'medium'),\n  h720fps15: new VideoPreset(1280, 720, 1_000_000, 15, 'medium'),\n  h1080fps15: new VideoPreset(1920, 1080, 1_500_000, 15, 'medium'),\n  h1080fps30: new VideoPreset(1920, 1080, 3_000_000, 30, 'medium'),\n} as const;\n","import { videoCodecs } from '../room/track/options';\nimport type { VideoCodec } from '../room/track/options';\nimport { ENCRYPTION_ALGORITHM } from './constants';\n\nexport function isE2EESupported() {\n  return isInsertableStreamSupported() || isScriptTransformSupported();\n}\n\nexport function isScriptTransformSupported() {\n  // @ts-ignore\n  return typeof window.RTCRtpScriptTransform !== 'undefined';\n}\n\nexport function isInsertableStreamSupported() {\n  return (\n    typeof window.RTCRtpSender !== 'undefined' &&\n    // @ts-ignore\n    typeof window.RTCRtpSender.prototype.createEncodedStreams !== 'undefined'\n  );\n}\n\nexport function isVideoFrame(\n  frame: RTCEncodedAudioFrame | RTCEncodedVideoFrame,\n): frame is RTCEncodedVideoFrame {\n  return 'type' in frame;\n}\n\nexport async function importKey(\n  keyBytes: Uint8Array | ArrayBuffer,\n  algorithm: string | { name: string } = { name: ENCRYPTION_ALGORITHM },\n  usage: 'derive' | 'encrypt' = 'encrypt',\n) {\n  // https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey\n  return crypto.subtle.importKey(\n    'raw',\n    keyBytes,\n    algorithm,\n    false,\n    usage === 'derive' ? ['deriveBits', 'deriveKey'] : ['encrypt', 'decrypt'],\n  );\n}\n\nexport async function createKeyMaterialFromString(password: string) {\n  let enc = new TextEncoder();\n\n  const keyMaterial = await crypto.subtle.importKey(\n    'raw',\n    enc.encode(password),\n    {\n      name: 'PBKDF2',\n    },\n    false,\n    ['deriveBits', 'deriveKey'],\n  );\n\n  return keyMaterial;\n}\n\nfunction getAlgoOptions(algorithmName: string, salt: string) {\n  const textEncoder = new TextEncoder();\n  const encodedSalt = textEncoder.encode(salt);\n  switch (algorithmName) {\n    case 'HKDF':\n      return {\n        name: 'HKDF',\n        salt: encodedSalt,\n        hash: 'SHA-256',\n        info: new ArrayBuffer(128),\n      };\n    case 'PBKDF2': {\n      return {\n        name: 'PBKDF2',\n        salt: encodedSalt,\n        hash: 'SHA-256',\n        iterations: 100000,\n      };\n    }\n    default:\n      throw new Error(`algorithm ${algorithmName} is currently unsupported`);\n  }\n}\n\n/**\n * Derives a set of keys from the master key.\n * See https://tools.ietf.org/html/draft-omara-sframe-00#section-4.3.1\n */\nexport async function deriveKeys(material: CryptoKey, salt: string) {\n  const algorithmOptions = getAlgoOptions(material.algorithm.name, salt);\n\n  // https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/deriveKey#HKDF\n  // https://developer.mozilla.org/en-US/docs/Web/API/HkdfParams\n  const encryptionKey = await crypto.subtle.deriveKey(\n    algorithmOptions,\n    material,\n    {\n      name: ENCRYPTION_ALGORITHM,\n      length: 128,\n    },\n    false,\n    ['encrypt', 'decrypt'],\n  );\n\n  return { material, encryptionKey };\n}\n\nexport function createE2EEKey(): Uint8Array {\n  return window.crypto.getRandomValues(new Uint8Array(32));\n}\n\nexport function mimeTypeToVideoCodecString(mimeType: string) {\n  const codec = mimeType.split('/')[1].toLowerCase() as VideoCodec;\n  if (!videoCodecs.includes(codec)) {\n    throw Error(`Video codec not supported: ${codec}`);\n  }\n  return codec;\n}\n\n/**\n * Ratchets a key. See\n * https://tools.ietf.org/html/draft-omara-sframe-00#section-4.3.5.1\n */\nexport async function ratchet(material: CryptoKey, salt: string): Promise<ArrayBuffer> {\n  const algorithmOptions = getAlgoOptions(material.algorithm.name, salt);\n\n  // https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/deriveBits\n  return crypto.subtle.deriveBits(algorithmOptions, material, 256);\n}\n","/* eslint-disable @typescript-eslint/no-unused-vars */\n// TODO code inspired by https://github.com/webrtc/samples/blob/gh-pages/src/content/insertable-streams/endtoend-encryption/js/worker.js\nimport EventEmitter from 'eventemitter3';\nimport { workerLogger } from '../../logger';\nimport type { VideoCodec } from '../../room/track/options';\nimport { ENCRYPTION_ALGORITHM, IV_LENGTH, UNENCRYPTED_BYTES } from '../constants';\nimport { CryptorError, CryptorErrorReason } from '../errors';\nimport {\n  CryptorCallbacks,\n  CryptorEvent,\n  DecodeRatchetOptions,\n  KeyProviderOptions,\n  KeySet,\n} from '../types';\nimport { deriveKeys, isVideoFrame } from '../utils';\nimport type { ParticipantKeyHandler } from './ParticipantKeyHandler';\n\nexport interface FrameCryptorConstructor {\n  new (opts?: unknown): BaseFrameCryptor;\n}\n\nexport interface TransformerInfo {\n  readable: ReadableStream;\n  writable: WritableStream;\n  transformer: TransformStream;\n  abortController: AbortController;\n}\n\nexport class BaseFrameCryptor extends EventEmitter<CryptorCallbacks> {\n  encodeFunction(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    controller: TransformStreamDefaultController,\n  ): Promise<any> {\n    throw Error('not implemented for subclass');\n  }\n\n  decodeFunction(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    controller: TransformStreamDefaultController,\n  ): Promise<any> {\n    throw Error('not implemented for subclass');\n  }\n}\n\n/**\n * Cryptor is responsible for en-/decrypting media frames.\n * Each Cryptor instance is responsible for en-/decrypting a single mediaStreamTrack.\n */\nexport class FrameCryptor extends BaseFrameCryptor {\n  private sendCounts: Map<number, number>;\n\n  private participantId: string | undefined;\n\n  private trackId: string | undefined;\n\n  private keys: ParticipantKeyHandler;\n\n  private videoCodec?: VideoCodec;\n\n  private rtpMap: Map<number, VideoCodec>;\n\n  private keyProviderOptions: KeyProviderOptions;\n\n  /**\n   * used for detecting server injected unencrypted frames\n   */\n  private unencryptedFrameByteTrailer: Uint8Array;\n\n  constructor(opts: {\n    keys: ParticipantKeyHandler;\n    participantId: string;\n    keyProviderOptions: KeyProviderOptions;\n    unencryptedFrameBytes?: Uint8Array;\n  }) {\n    super();\n    this.sendCounts = new Map();\n    this.keys = opts.keys;\n    this.participantId = opts.participantId;\n    this.rtpMap = new Map();\n    this.keyProviderOptions = opts.keyProviderOptions;\n    this.unencryptedFrameByteTrailer =\n      opts.unencryptedFrameBytes ?? new TextEncoder().encode('LKROCKS');\n  }\n\n  /**\n   * Assign a different participant to the cryptor.\n   * useful for transceiver re-use\n   * @param id\n   * @param keys\n   */\n  setParticipant(id: string, keys: ParticipantKeyHandler) {\n    this.participantId = id;\n    this.keys = keys;\n  }\n\n  unsetParticipant() {\n    this.participantId = undefined;\n  }\n\n  getParticipantId() {\n    return this.participantId;\n  }\n\n  getTrackId() {\n    return this.trackId;\n  }\n\n  /**\n   * Update the video codec used by the mediaStreamTrack\n   * @param codec\n   */\n  setVideoCodec(codec: VideoCodec) {\n    this.videoCodec = codec;\n  }\n\n  /**\n   * rtp payload type map used for figuring out codec of payload type when encoding\n   * @param map\n   */\n  setRtpMap(map: Map<number, VideoCodec>) {\n    this.rtpMap = map;\n  }\n\n  setupTransform(\n    operation: 'encode' | 'decode',\n    readable: ReadableStream,\n    writable: WritableStream,\n    trackId: string,\n    codec?: VideoCodec,\n  ) {\n    if (codec) {\n      console.info('setting codec on cryptor to', codec);\n      this.videoCodec = codec;\n    }\n    const transformFn = operation === 'encode' ? this.encodeFunction : this.decodeFunction;\n    const transformStream = new TransformStream({\n      transform: transformFn.bind(this),\n    });\n\n    readable\n      .pipeThrough(transformStream)\n      .pipeTo(writable)\n      .catch((e) => {\n        console.error(e);\n        this.emit('cryptorError', e instanceof CryptorError ? e : new CryptorError(e.message));\n      });\n    this.trackId = trackId;\n  }\n\n  /**\n   * Function that will be injected in a stream and will encrypt the given encoded frames.\n   *\n   * @param {RTCEncodedVideoFrame|RTCEncodedAudioFrame} encodedFrame - Encoded video frame.\n   * @param {TransformStreamDefaultController} controller - TransportStreamController.\n   *\n   * The VP8 payload descriptor described in\n   * https://tools.ietf.org/html/rfc7741#section-4.2\n   * is part of the RTP packet and not part of the frame and is not controllable by us.\n   * This is fine as the SFU keeps having access to it for routing.\n   *\n   * The encrypted frame is formed as follows:\n   * 1) Find unencrypted byte length, depending on the codec, frame type and kind.\n   * 2) Form the GCM IV for the frame as described above.\n   * 3) Encrypt the rest of the frame using AES-GCM.\n   * 4) Allocate space for the encrypted frame.\n   * 5) Copy the unencrypted bytes to the start of the encrypted frame.\n   * 6) Append the ciphertext to the encrypted frame.\n   * 7) Append the IV.\n   * 8) Append a single byte for the key identifier.\n   * 9) Enqueue the encrypted frame for sending.\n   */\n  async encodeFunction(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    controller: TransformStreamDefaultController,\n  ) {\n    if (\n      !this.keys.isEnabled() ||\n      // skip for encryption for empty dtx frames\n      encodedFrame.data.byteLength === 0\n    ) {\n      return controller.enqueue(encodedFrame);\n    }\n\n    const { encryptionKey } = this.keys.getKeySet();\n    const keyIndex = this.keys.getCurrentKeyIndex();\n\n    if (encryptionKey) {\n      const iv = this.makeIV(\n        encodedFrame.getMetadata().synchronizationSource ?? -1,\n        encodedFrame.timestamp,\n      );\n\n      // Thіs is not encrypted and contains the VP8 payload descriptor or the Opus TOC byte.\n      const frameHeader = new Uint8Array(\n        encodedFrame.data,\n        0,\n        this.getUnencryptedBytes(encodedFrame),\n      );\n\n      // Frame trailer contains the R|IV_LENGTH and key index\n      const frameTrailer = new Uint8Array(2);\n\n      frameTrailer[0] = IV_LENGTH;\n      frameTrailer[1] = keyIndex;\n\n      // Construct frame trailer. Similar to the frame header described in\n      // https://tools.ietf.org/html/draft-omara-sframe-00#section-4.2\n      // but we put it at the end.\n      //\n      // ---------+-------------------------+-+---------+----\n      // payload  |IV...(length = IV_LENGTH)|R|IV_LENGTH|KID |\n      // ---------+-------------------------+-+---------+----\n      try {\n        const cipherText = await crypto.subtle.encrypt(\n          {\n            name: ENCRYPTION_ALGORITHM,\n            iv,\n            additionalData: new Uint8Array(encodedFrame.data, 0, frameHeader.byteLength),\n          },\n          encryptionKey,\n          new Uint8Array(encodedFrame.data, this.getUnencryptedBytes(encodedFrame)),\n        );\n\n        const newData = new ArrayBuffer(\n          frameHeader.byteLength + cipherText.byteLength + iv.byteLength + frameTrailer.byteLength,\n        );\n        const newUint8 = new Uint8Array(newData);\n\n        newUint8.set(frameHeader); // copy first bytes.\n        newUint8.set(new Uint8Array(cipherText), frameHeader.byteLength); // add ciphertext.\n        newUint8.set(new Uint8Array(iv), frameHeader.byteLength + cipherText.byteLength); // append IV.\n        newUint8.set(frameTrailer, frameHeader.byteLength + cipherText.byteLength + iv.byteLength); // append frame trailer.\n\n        encodedFrame.data = newData;\n\n        return controller.enqueue(encodedFrame);\n      } catch (e: any) {\n        // TODO: surface this to the app.\n        workerLogger.error(e);\n      }\n    } else {\n      this.emit(\n        CryptorEvent.Error,\n        new CryptorError(`encryption key missing for encoding`, CryptorErrorReason.MissingKey),\n      );\n    }\n  }\n\n  /**\n   * Function that will be injected in a stream and will decrypt the given encoded frames.\n   *\n   * @param {RTCEncodedVideoFrame|RTCEncodedAudioFrame} encodedFrame - Encoded video frame.\n   * @param {TransformStreamDefaultController} controller - TransportStreamController.\n   */\n  async decodeFunction(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    controller: TransformStreamDefaultController,\n  ) {\n    if (\n      !this.keys.isEnabled() ||\n      // skip for decryption for empty dtx frames\n      encodedFrame.data.byteLength === 0 ||\n      // skip decryption if frame is server injected\n      isFrameServerInjected(encodedFrame.data, this.unencryptedFrameByteTrailer)\n    ) {\n      return controller.enqueue(encodedFrame);\n    }\n    const data = new Uint8Array(encodedFrame.data);\n    const keyIndex = data[encodedFrame.data.byteLength - 1];\n\n    if (this.keys.getKeySet(keyIndex) && this.keys.hasValidKey) {\n      try {\n        const decodedFrame = await this.decryptFrame(encodedFrame, keyIndex);\n        if (decodedFrame) {\n          return controller.enqueue(decodedFrame);\n        }\n      } catch (error) {\n        if (error instanceof CryptorError && error.reason === CryptorErrorReason.InvalidKey) {\n          if (this.keys.hasValidKey) {\n            workerLogger.warn('invalid key');\n            this.emit(\n              CryptorEvent.Error,\n              new CryptorError(\n                `invalid key for participant ${this.participantId}`,\n                CryptorErrorReason.InvalidKey,\n              ),\n            );\n            this.keys.hasValidKey = false;\n          }\n        } else {\n          workerLogger.warn('decoding frame failed', { error });\n        }\n      }\n    }\n\n    return controller.enqueue(encodedFrame);\n  }\n\n  /**\n   * Function that will decrypt the given encoded frame. If the decryption fails, it will\n   * ratchet the key for up to RATCHET_WINDOW_SIZE times.\n   */\n  async decryptFrame(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    keyIndex: number,\n    initialMaterial: KeySet | undefined = undefined,\n    ratchetOpts: DecodeRatchetOptions = { ratchetCount: 0 },\n  ): Promise<RTCEncodedVideoFrame | RTCEncodedAudioFrame | undefined> {\n    const keySet = this.keys.getKeySet(keyIndex);\n\n    // Construct frame trailer. Similar to the frame header described in\n    // https://tools.ietf.org/html/draft-omara-sframe-00#section-4.2\n    // but we put it at the end.\n    //\n    // ---------+-------------------------+-+---------+----\n    // payload  |IV...(length = IV_LENGTH)|R|IV_LENGTH|KID |\n    // ---------+-------------------------+-+---------+----\n\n    try {\n      const frameHeader = new Uint8Array(\n        encodedFrame.data,\n        0,\n        this.getUnencryptedBytes(encodedFrame),\n      );\n      const frameTrailer = new Uint8Array(encodedFrame.data, encodedFrame.data.byteLength - 2, 2);\n\n      const ivLength = frameTrailer[0];\n      const iv = new Uint8Array(\n        encodedFrame.data,\n        encodedFrame.data.byteLength - ivLength - frameTrailer.byteLength,\n        ivLength,\n      );\n\n      const cipherTextStart = frameHeader.byteLength;\n      const cipherTextLength =\n        encodedFrame.data.byteLength -\n        (frameHeader.byteLength + ivLength + frameTrailer.byteLength);\n\n      const plainText = await crypto.subtle.decrypt(\n        {\n          name: ENCRYPTION_ALGORITHM,\n          iv,\n          additionalData: new Uint8Array(encodedFrame.data, 0, frameHeader.byteLength),\n        },\n        ratchetOpts.encryptionKey ?? keySet.encryptionKey,\n        new Uint8Array(encodedFrame.data, cipherTextStart, cipherTextLength),\n      );\n\n      const newData = new ArrayBuffer(frameHeader.byteLength + plainText.byteLength);\n      const newUint8 = new Uint8Array(newData);\n\n      newUint8.set(new Uint8Array(encodedFrame.data, 0, frameHeader.byteLength));\n      newUint8.set(new Uint8Array(plainText), frameHeader.byteLength);\n\n      encodedFrame.data = newData;\n\n      return encodedFrame;\n    } catch (error: any) {\n      if (this.keyProviderOptions.ratchetWindowSize > 0) {\n        if (ratchetOpts.ratchetCount < this.keyProviderOptions.ratchetWindowSize) {\n          workerLogger.debug(\n            `ratcheting key attempt ${ratchetOpts.ratchetCount} of ${\n              this.keyProviderOptions.ratchetWindowSize\n            }, for kind ${encodedFrame instanceof RTCEncodedAudioFrame ? 'audio' : 'video'}`,\n          );\n\n          let ratchetedKeySet: KeySet | undefined;\n          if (keySet === this.keys.getKeySet(keyIndex)) {\n            // only ratchet if the currently set key is still the same as the one used to decrypt this frame\n            // if not, it might be that a different frame has already ratcheted and we try with that one first\n            const newMaterial = await this.keys.ratchetKey(keyIndex, false);\n\n            ratchetedKeySet = await deriveKeys(newMaterial, this.keyProviderOptions.ratchetSalt);\n          }\n\n          const frame = await this.decryptFrame(encodedFrame, keyIndex, initialMaterial || keySet, {\n            ratchetCount: ratchetOpts.ratchetCount + 1,\n            encryptionKey: ratchetedKeySet?.encryptionKey,\n          });\n          if (frame && ratchetedKeySet) {\n            this.keys.setKeySet(ratchetedKeySet, keyIndex, true);\n            // decryption was successful, set the new key index to reflect the ratcheted key set\n            this.keys.setCurrentKeyIndex(keyIndex);\n          }\n          return frame;\n        } else {\n          /**\n           * Since the key it is first send and only afterwards actually used for encrypting, there were\n           * situations when the decrypting failed due to the fact that the received frame was not encrypted\n           * yet and ratcheting, of course, did not solve the problem. So if we fail RATCHET_WINDOW_SIZE times,\n           * we come back to the initial key.\n           */\n          if (initialMaterial) {\n            workerLogger.debug('resetting to initial material');\n            this.keys.setKeyFromMaterial(initialMaterial.material, keyIndex);\n          }\n\n          this.keys.hasValidKey = false;\n\n          workerLogger.warn('maximum ratchet attempts exceeded, resetting key');\n          this.emit(\n            CryptorEvent.Error,\n            new CryptorError(\n              `valid key missing for participant ${this.participantId}`,\n              CryptorErrorReason.MissingKey,\n            ),\n          );\n        }\n      } else {\n        throw new CryptorError(\n          'Decryption failed, most likely because of an invalid key',\n          CryptorErrorReason.InvalidKey,\n        );\n      }\n    }\n  }\n\n  /**\n   * Construct the IV used for AES-GCM and sent (in plain) with the packet similar to\n   * https://tools.ietf.org/html/rfc7714#section-8.1\n   * It concatenates\n   * - the 32 bit synchronization source (SSRC) given on the encoded frame,\n   * - the 32 bit rtp timestamp given on the encoded frame,\n   * - a send counter that is specific to the SSRC. Starts at a random number.\n   * The send counter is essentially the pictureId but we currently have to implement this ourselves.\n   * There is no XOR with a salt. Note that this IV leaks the SSRC to the receiver but since this is\n   * randomly generated and SFUs may not rewrite this is considered acceptable.\n   * The SSRC is used to allow demultiplexing multiple streams with the same key, as described in\n   *   https://tools.ietf.org/html/rfc3711#section-4.1.1\n   * The RTP timestamp is 32 bits and advances by the codec clock rate (90khz for video, 48khz for\n   * opus audio) every second. For video it rolls over roughly every 13 hours.\n   * The send counter will advance at the frame rate (30fps for video, 50fps for 20ms opus audio)\n   * every second. It will take a long time to roll over.\n   *\n   * See also https://developer.mozilla.org/en-US/docs/Web/API/AesGcmParams\n   */\n  private makeIV(synchronizationSource: number, timestamp: number) {\n    const iv = new ArrayBuffer(IV_LENGTH);\n    const ivView = new DataView(iv);\n\n    // having to keep our own send count (similar to a picture id) is not ideal.\n    if (!this.sendCounts.has(synchronizationSource)) {\n      // Initialize with a random offset, similar to the RTP sequence number.\n      this.sendCounts.set(synchronizationSource, Math.floor(Math.random() * 0xffff));\n    }\n\n    const sendCount = this.sendCounts.get(synchronizationSource) ?? 0;\n\n    ivView.setUint32(0, synchronizationSource);\n    ivView.setUint32(4, timestamp);\n    ivView.setUint32(8, timestamp - (sendCount % 0xffff));\n\n    this.sendCounts.set(synchronizationSource, sendCount + 1);\n\n    return iv;\n  }\n\n  getUnencryptedBytes(frame: RTCEncodedVideoFrame | RTCEncodedAudioFrame): number {\n    if (isVideoFrame(frame)) {\n      let detectedCodec = this.getVideoCodec(frame) ?? this.videoCodec;\n\n      if (detectedCodec === 'av1' || detectedCodec === 'vp9') {\n        throw new Error(`${detectedCodec} is not yet supported for end to end encryption`);\n      }\n\n      if (detectedCodec === 'vp8') {\n        return UNENCRYPTED_BYTES[frame.type];\n      }\n\n      const data = new Uint8Array(frame.data);\n      try {\n        const naluIndices = findNALUIndices(data);\n\n        // if the detected codec is undefined we test whether it _looks_ like a h264 frame as a best guess\n        const isH264 =\n          detectedCodec === 'h264' ||\n          naluIndices.some((naluIndex) =>\n            [NALUType.SLICE_IDR, NALUType.SLICE_NON_IDR].includes(parseNALUType(data[naluIndex])),\n          );\n\n        if (isH264) {\n          for (const index of naluIndices) {\n            let type = parseNALUType(data[index]);\n            switch (type) {\n              case NALUType.SLICE_IDR:\n              case NALUType.SLICE_NON_IDR:\n                return index + 2;\n              default:\n                break;\n            }\n          }\n          throw new TypeError('Could not find NALU');\n        }\n      } catch (e) {\n        // no op, we just continue and fallback to vp8\n      }\n\n      return UNENCRYPTED_BYTES[frame.type];\n    } else {\n      return UNENCRYPTED_BYTES.audio;\n    }\n  }\n\n  /**\n   * inspects frame payloadtype if available and maps it to the codec specified in rtpMap\n   */\n  getVideoCodec(frame: RTCEncodedVideoFrame): VideoCodec | undefined {\n    if (this.rtpMap.size === 0) {\n      return undefined;\n    }\n    // @ts-expect-error payloadType is not yet part of the typescript definition and currently not supported in Safari\n    const payloadType = frame.getMetadata().payloadType;\n    const codec = payloadType ? this.rtpMap.get(payloadType) : undefined;\n    return codec;\n  }\n}\n\n/**\n * Slice the NALUs present in the supplied buffer, assuming it is already byte-aligned\n * code adapted from https://github.com/medooze/h264-frame-parser/blob/main/lib/NalUnits.ts to return indices only\n */\nexport function findNALUIndices(stream: Uint8Array): number[] {\n  const result: number[] = [];\n  let start = 0,\n    pos = 0,\n    searchLength = stream.length - 2;\n  while (pos < searchLength) {\n    // skip until end of current NALU\n    while (\n      pos < searchLength &&\n      !(stream[pos] === 0 && stream[pos + 1] === 0 && stream[pos + 2] === 1)\n    )\n      pos++;\n    if (pos >= searchLength) pos = stream.length;\n    // remove trailing zeros from current NALU\n    let end = pos;\n    while (end > start && stream[end - 1] === 0) end--;\n    // save current NALU\n    if (start === 0) {\n      if (end !== start) throw TypeError('byte stream contains leading data');\n    } else {\n      result.push(start);\n    }\n    // begin new NALU\n    start = pos = pos + 3;\n  }\n  return result;\n}\n\nexport function parseNALUType(startByte: number): NALUType {\n  return startByte & kNaluTypeMask;\n}\n\nconst kNaluTypeMask = 0x1f;\n\nexport enum NALUType {\n  /** Coded slice of a non-IDR picture */\n  SLICE_NON_IDR = 1,\n  /** Coded slice data partition A */\n  SLICE_PARTITION_A = 2,\n  /** Coded slice data partition B */\n  SLICE_PARTITION_B = 3,\n  /** Coded slice data partition C */\n  SLICE_PARTITION_C = 4,\n  /** Coded slice of an IDR picture */\n  SLICE_IDR = 5,\n  /** Supplemental enhancement information */\n  SEI = 6,\n  /** Sequence parameter set */\n  SPS = 7,\n  /** Picture parameter set */\n  PPS = 8,\n  /** Access unit delimiter */\n  AUD = 9,\n  /** End of sequence */\n  END_SEQ = 10,\n  /** End of stream */\n  END_STREAM = 11,\n  /** Filler data */\n  FILLER_DATA = 12,\n  /** Sequence parameter set extension */\n  SPS_EXT = 13,\n  /** Prefix NAL unit */\n  PREFIX_NALU = 14,\n  /** Subset sequence parameter set */\n  SUBSET_SPS = 15,\n  /** Depth parameter set */\n  DPS = 16,\n\n  // 17, 18 reserved\n\n  /** Coded slice of an auxiliary coded picture without partitioning */\n  SLICE_AUX = 19,\n  /** Coded slice extension */\n  SLICE_EXT = 20,\n  /** Coded slice extension for a depth view component or a 3D-AVC texture view component */\n  SLICE_LAYER_EXT = 21,\n\n  // 22, 23 reserved\n}\n\n/**\n * we use a magic frame trailer to detect whether a frame is injected\n * by the livekit server and thus to be treated as unencrypted\n * @internal\n */\nexport function isFrameServerInjected(frameData: ArrayBuffer, trailerBytes: Uint8Array): boolean {\n  const frameTrailer = new Uint8Array(\n    frameData.slice(frameData.byteLength - trailerBytes.byteLength),\n  );\n  return trailerBytes.every((value, index) => value === frameTrailer[index]);\n}\n","import EventEmitter from 'eventemitter3';\nimport { workerLogger } from '../../logger';\nimport { KEYRING_SIZE } from '../constants';\nimport type { KeyProviderOptions, KeySet, ParticipantKeyHandlerCallbacks } from '../types';\nimport { deriveKeys, importKey, ratchet } from '../utils';\n\n// TODO ParticipantKeyHandlers currently don't get destroyed on participant disconnect\n// we could do this by having a separate worker message on participant disconnected.\n\n/**\n * ParticipantKeyHandler is responsible for providing a cryptor instance with the\n * en-/decryption key of a participant. It assumes that all tracks of a specific participant\n * are encrypted with the same key.\n * Additionally it exposes a method to ratchet a key which can be used by the cryptor either automatically\n * if decryption fails or can be triggered manually on both sender and receiver side.\n *\n */\nexport class ParticipantKeyHandler extends EventEmitter<ParticipantKeyHandlerCallbacks> {\n  private currentKeyIndex: number;\n\n  private cryptoKeyRing: Array<KeySet>;\n\n  private enabled: boolean;\n\n  private keyProviderOptions: KeyProviderOptions;\n\n  private ratchetPromiseMap: Map<number, Promise<CryptoKey>>;\n\n  private participantId: string | undefined;\n\n  hasValidKey: boolean;\n\n  constructor(\n    participantId: string | undefined,\n    isEnabled: boolean,\n    keyProviderOptions: KeyProviderOptions,\n  ) {\n    super();\n    this.currentKeyIndex = 0;\n    this.cryptoKeyRing = new Array(KEYRING_SIZE);\n    this.enabled = isEnabled;\n    this.keyProviderOptions = keyProviderOptions;\n    this.ratchetPromiseMap = new Map();\n    this.participantId = participantId;\n    this.hasValidKey = false;\n  }\n\n  setEnabled(enabled: boolean) {\n    this.enabled = enabled;\n  }\n\n  /**\n   * Ratchets the current key (or the one at keyIndex if provided) and\n   * returns the ratcheted material\n   * if `setKey` is true (default), it will also set the ratcheted key directly on the crypto key ring\n   * @param keyIndex\n   * @param setKey\n   */\n  ratchetKey(keyIndex?: number, setKey = true): Promise<CryptoKey> {\n    const currentKeyIndex = (keyIndex ??= this.getCurrentKeyIndex());\n\n    const existingPromise = this.ratchetPromiseMap.get(currentKeyIndex);\n    if (typeof existingPromise !== 'undefined') {\n      return existingPromise;\n    }\n    const ratchetPromise = new Promise<CryptoKey>(async (resolve, reject) => {\n      try {\n        const currentMaterial = this.getKeySet(currentKeyIndex).material;\n        const newMaterial = await importKey(\n          await ratchet(currentMaterial, this.keyProviderOptions.ratchetSalt),\n          currentMaterial.algorithm.name,\n          'derive',\n        );\n\n        if (setKey) {\n          this.setKeyFromMaterial(newMaterial, currentKeyIndex, true);\n        }\n        this.emit('keyRatcheted', newMaterial, keyIndex, this.participantId);\n        resolve(newMaterial);\n      } catch (e) {\n        reject(e);\n      } finally {\n        this.ratchetPromiseMap.delete(currentKeyIndex);\n      }\n    });\n    this.ratchetPromiseMap.set(currentKeyIndex, ratchetPromise);\n    return ratchetPromise;\n  }\n\n  /**\n   * takes in a key material with `deriveBits` and `deriveKey` set as key usages\n   * and derives encryption keys from the material and sets it on the key ring buffer\n   * together with the material\n   * also resets the valid key property and updates the currentKeyIndex\n   */\n  async setKey(material: CryptoKey, keyIndex = 0) {\n    await this.setKeyFromMaterial(material, keyIndex);\n    this.hasValidKey = true;\n  }\n\n  /**\n   * takes in a key material with `deriveBits` and `deriveKey` set as key usages\n   * and derives encryption keys from the material and sets it on the key ring buffer\n   * together with the material\n   * also updates the currentKeyIndex\n   */\n  async setKeyFromMaterial(material: CryptoKey, keyIndex = 0, emitRatchetEvent = false) {\n    workerLogger.debug('setting new key');\n    if (keyIndex >= 0) {\n      this.currentKeyIndex = keyIndex % this.cryptoKeyRing.length;\n    }\n    const keySet = await deriveKeys(material, this.keyProviderOptions.ratchetSalt);\n    this.setKeySet(keySet, this.currentKeyIndex, emitRatchetEvent);\n  }\n\n  async setKeySet(keySet: KeySet, keyIndex: number, emitRatchetEvent = false) {\n    this.cryptoKeyRing[keyIndex % this.cryptoKeyRing.length] = keySet;\n    if (emitRatchetEvent) {\n      this.emit('keyRatcheted', keySet.material, keyIndex, this.participantId);\n    }\n  }\n\n  async setCurrentKeyIndex(index: number) {\n    this.currentKeyIndex = index % this.cryptoKeyRing.length;\n    this.hasValidKey = true;\n  }\n\n  isEnabled() {\n    return this.enabled;\n  }\n\n  getCurrentKeyIndex() {\n    return this.currentKeyIndex;\n  }\n\n  /**\n   * returns currently used KeySet or the one at `keyIndex` if provided\n   * @param keyIndex\n   * @returns\n   */\n  getKeySet(keyIndex?: number) {\n    return this.cryptoKeyRing[keyIndex ?? this.currentKeyIndex];\n  }\n}\n","import { workerLogger } from '../../logger';\nimport { KEY_PROVIDER_DEFAULTS } from '../constants';\nimport { CryptorErrorReason } from '../errors';\nimport type {\n  E2EEWorkerMessage,\n  EnableMessage,\n  ErrorMessage,\n  KeyProviderOptions,\n  RatchetMessage,\n  RatchetRequestMessage,\n} from '../types';\nimport { FrameCryptor } from './FrameCryptor';\nimport { ParticipantKeyHandler } from './ParticipantKeyHandler';\n\nconst participantCryptors: FrameCryptor[] = [];\nconst participantKeys: Map<string, ParticipantKeyHandler> = new Map();\n\nlet publishCryptors: FrameCryptor[] = [];\nlet publisherKeys: ParticipantKeyHandler;\n\nlet isEncryptionEnabled: boolean = false;\n\nlet useSharedKey: boolean = false;\n\nlet sharedKey: CryptoKey | undefined;\n\nlet keyProviderOptions: KeyProviderOptions = KEY_PROVIDER_DEFAULTS;\n\nworkerLogger.setDefaultLevel('info');\n\nonmessage = (ev) => {\n  const { kind, data }: E2EEWorkerMessage = ev.data;\n\n  switch (kind) {\n    case 'init':\n      workerLogger.info('worker initialized');\n      keyProviderOptions = data.keyProviderOptions;\n      useSharedKey = !!data.keyProviderOptions.sharedKey;\n      // acknowledge init successful\n      const enableMsg: EnableMessage = {\n        kind: 'enable',\n        data: { enabled: isEncryptionEnabled },\n      };\n      publisherKeys = new ParticipantKeyHandler(undefined, isEncryptionEnabled, keyProviderOptions);\n      publisherKeys.on('keyRatcheted', emitRatchetedKeys);\n      postMessage(enableMsg);\n      break;\n    case 'enable':\n      setEncryptionEnabled(data.enabled, data.participantId);\n      workerLogger.info('updated e2ee enabled status');\n      // acknowledge enable call successful\n      postMessage(ev.data);\n      break;\n    case 'decode':\n      let cryptor = getTrackCryptor(data.participantId, data.trackId);\n      cryptor.setupTransform(\n        kind,\n        data.readableStream,\n        data.writableStream,\n        data.trackId,\n        data.codec,\n      );\n      break;\n    case 'encode':\n      let pubCryptor = getPublisherCryptor(data.trackId);\n      pubCryptor.setupTransform(\n        kind,\n        data.readableStream,\n        data.writableStream,\n        data.trackId,\n        data.codec,\n      );\n      break;\n    case 'setKey':\n      if (useSharedKey) {\n        workerLogger.debug('set shared key');\n        setSharedKey(data.key, data.keyIndex);\n      } else if (data.participantId) {\n        getParticipantKeyHandler(data.participantId).setKey(data.key, data.keyIndex);\n      } else {\n        workerLogger.error('no participant Id was provided and shared key usage is disabled');\n      }\n      break;\n    case 'removeTransform':\n      unsetCryptorParticipant(data.trackId);\n      break;\n    case 'updateCodec':\n      getTrackCryptor(data.participantId, data.trackId).setVideoCodec(data.codec);\n      break;\n    case 'setRTPMap':\n      publishCryptors.forEach((cr) => {\n        cr.setRtpMap(data.map);\n      });\n      break;\n    case 'ratchetRequest':\n      handleRatchetRequest(data);\n    default:\n      break;\n  }\n};\n\nasync function handleRatchetRequest(data: RatchetRequestMessage['data']) {\n  const keyHandler = getParticipantKeyHandler(data.participantId);\n  await keyHandler.ratchetKey(data.keyIndex);\n  keyHandler.hasValidKey = true;\n}\n\nfunction getTrackCryptor(participantId: string, trackId: string) {\n  let cryptor = participantCryptors.find((c) => c.getTrackId() === trackId);\n  if (!cryptor) {\n    workerLogger.info('creating new cryptor for', { participantId });\n    if (!keyProviderOptions) {\n      throw Error('Missing keyProvider options');\n    }\n    cryptor = new FrameCryptor({\n      participantId,\n      keys: getParticipantKeyHandler(participantId),\n      keyProviderOptions,\n    });\n\n    setupCryptorErrorEvents(cryptor);\n    participantCryptors.push(cryptor);\n  } else if (participantId !== cryptor.getParticipantId()) {\n    // assign new participant id to track cryptor and pass in correct key handler\n    cryptor.setParticipant(participantId, getParticipantKeyHandler(participantId));\n  }\n  if (sharedKey) {\n  }\n  return cryptor;\n}\n\nfunction getParticipantKeyHandler(participantId?: string) {\n  if (!participantId) {\n    return publisherKeys!;\n  }\n  let keys = participantKeys.get(participantId);\n  if (!keys) {\n    keys = new ParticipantKeyHandler(participantId, true, keyProviderOptions);\n    if (sharedKey) {\n      keys.setKey(sharedKey);\n    }\n    participantKeys.set(participantId, keys);\n  }\n  return keys;\n}\n\nfunction unsetCryptorParticipant(trackId: string) {\n  participantCryptors.find((c) => c.getTrackId() === trackId)?.unsetParticipant();\n}\n\nfunction getPublisherCryptor(trackId: string) {\n  let publishCryptor = publishCryptors.find((cryptor) => cryptor.getTrackId() === trackId);\n  if (!publishCryptor) {\n    if (!keyProviderOptions) {\n      throw new TypeError('Missing keyProvider options');\n    }\n    publishCryptor = new FrameCryptor({\n      keys: publisherKeys!,\n      participantId: 'publisher',\n      keyProviderOptions,\n    });\n    setupCryptorErrorEvents(publishCryptor);\n    publishCryptors.push(publishCryptor);\n  }\n  return publishCryptor;\n}\n\nfunction setEncryptionEnabled(enable: boolean, participantId?: string) {\n  if (!participantId) {\n    isEncryptionEnabled = enable;\n    publisherKeys.setEnabled(enable);\n  } else {\n    getParticipantKeyHandler(participantId).setEnabled(enable);\n  }\n}\n\nfunction setSharedKey(key: CryptoKey, index?: number) {\n  workerLogger.debug('setting shared key');\n  sharedKey = key;\n  publisherKeys?.setKey(key, index);\n  for (const [, keyHandler] of participantKeys) {\n    keyHandler.setKey(key, index);\n  }\n}\n\nfunction setupCryptorErrorEvents(cryptor: FrameCryptor) {\n  cryptor.on('cryptorError', (error) => {\n    const msg: ErrorMessage = {\n      kind: 'error',\n      data: { error: new Error(`${CryptorErrorReason[error.reason]}: ${error.message}`) },\n    };\n    postMessage(msg);\n  });\n}\n\nfunction emitRatchetedKeys(material: CryptoKey, keyIndex?: number) {\n  const msg: RatchetMessage = {\n    kind: `ratchetKey`,\n    data: {\n      // participantId,\n      keyIndex,\n      material,\n    },\n  };\n  postMessage(msg);\n}\n\n// Operations using RTCRtpScriptTransform.\n// @ts-ignore\nif (self.RTCTransformEvent) {\n  workerLogger.debug('setup transform event');\n  // @ts-ignore\n  self.onrtctransform = (event) => {\n    const transformer = event.transformer;\n    workerLogger.debug('transformer', transformer);\n    transformer.handled = true;\n    const { kind, participantId, trackId, codec } = transformer.options;\n    const cryptor =\n      kind === 'encode' ? getPublisherCryptor(trackId) : getTrackCryptor(participantId, trackId);\n    workerLogger.debug('transform', { codec });\n    cryptor.setupTransform(kind, transformer.readable, transformer.writable, trackId, codec);\n  };\n}\n"],"names":["root","definition","this","noop","undefinedType","isIE","window","navigator","test","userAgent","logMethods","bindMethod","obj","methodName","method","bind","Function","prototype","call","e","apply","arguments","traceForIE","console","log","trace","replaceLoggingMethods","level","loggerName","i","length","methodFactory","debug","enableLoggingWhenConsoleArrives","defaultMethodFactory","undefined","realMethod","Logger","name","defaultLevel","factory","currentLevel","self","storageKey","getPersistedLevel","storedLevel","localStorage","ignore","cookie","document","location","indexOf","encodeURIComponent","exec","slice","levels","TRACE","DEBUG","INFO","WARN","ERROR","SILENT","getLevel","setLevel","persist","toUpperCase","levelNum","levelName","persistLevelIfPossible","setDefaultLevel","resetLevel","removeItem","clearPersistedLevel","enableAll","disableAll","initialLevel","defaultLogger","_loggersByName","getLogger","TypeError","logger","_log","noConflict","getLoggers","exports","module","LogLevel","info","workerLogger","ENCRYPTION_ALGORITHM","UNENCRYPTED_BYTES","key","delta","audio","empty","KEY_PROVIDER_DEFAULTS","sharedKey","ratchetSalt","ratchetWindowSize","LivekitError","Error","constructor","code","message","super","MediaDeviceFailure","CryptorErrorReason","getFailure","error","NotFound","PermissionDenied","DeviceInUse","Other","CryptorError","reason","InternalError","has","Object","hasOwnProperty","prefix","Events","EE","fn","context","once","addListener","emitter","event","listener","evt","_events","push","_eventsCount","clearEvent","EventEmitter","create","__proto__","eventNames","events","names","getOwnPropertySymbols","concat","listeners","handlers","l","ee","Array","listenerCount","emit","a1","a2","a3","a4","a5","args","len","removeListener","j","on","removeAllListeners","off","prefixed","CryptorEvent","AudioPresets","getAlgoOptions","algorithmName","salt","encodedSalt","TextEncoder","encode","hash","ArrayBuffer","iterations","deriveKeys","material","algorithmOptions","algorithm","encryptionKey","crypto","subtle","deriveKey","telephone","maxBitrate","speech","music","musicStereo","musicHighQuality","musicHighQualityStereo","BaseFrameCryptor","encodeFunction","encodedFrame","controller","decodeFunction","FrameCryptor","opts","sendCounts","Map","keys","participantId","rtpMap","keyProviderOptions","unencryptedFrameByteTrailer","_a","unencryptedFrameBytes","setParticipant","id","unsetParticipant","getParticipantId","getTrackId","trackId","setVideoCodec","codec","videoCodec","setRtpMap","map","setupTransform","operation","readable","writable","transformFn","transformStream","TransformStream","transform","pipeThrough","pipeTo","catch","isEnabled","data","byteLength","enqueue","getKeySet","keyIndex","getCurrentKeyIndex","iv","makeIV","getMetadata","synchronizationSource","timestamp","frameHeader","Uint8Array","getUnencryptedBytes","frameTrailer","cipherText","encrypt","additionalData","newData","newUint8","set","MissingKey","frameData","trailerBytes","every","value","index","isFrameServerInjected","hasValidKey","decodedFrame","decryptFrame","InvalidKey","warn","initialMaterial","ratchetOpts","ratchetCount","keySet","ivLength","cipherTextStart","cipherTextLength","plainText","decrypt","ratchetedKeySet","RTCEncodedAudioFrame","newMaterial","ratchetKey","frame","setKeySet","setCurrentKeyIndex","setKeyFromMaterial","ivView","DataView","Math","floor","random","sendCount","get","setUint32","isVideoFrame","detectedCodec","getVideoCodec","type","naluIndices","stream","result","start","pos","searchLength","end","findNALUIndices","some","naluIndex","NALUType","SLICE_IDR","SLICE_NON_IDR","includes","parseNALUType","size","payloadType","startByte","kNaluTypeMask","ParticipantKeyHandler","currentKeyIndex","cryptoKeyRing","enabled","ratchetPromiseMap","setEnabled","setKey","existingPromise","ratchetPromise","Promise","resolve","reject","__awaiter","currentMaterial","keyBytes","usage","importKey","deriveBits","ratchet","delete","emitRatchetEvent","participantCryptors","participantKeys","publisherKeys","publishCryptors","isEncryptionEnabled","useSharedKey","getTrackCryptor","cryptor","find","c","getParticipantKeyHandler","setupCryptorErrorEvents","getPublisherCryptor","publishCryptor","msg","kind","postMessage","emitRatchetedKeys","onmessage","ev","enableMsg","enable","readableStream","writableStream","keyHandler","setSharedKey","forEach","cr","handleRatchetRequest","RTCTransformEvent","onrtctransform","transformer","handled","options"],"mappings":"+nBAMWA,EAAMC,iBAAND,EASTE,EATeD,EAST,WAIJ,IAAIE,EAAO,aACPC,EAAgB,YAChBC,SAAeC,SAAWF,UAA0BE,OAAOC,YAAcH,GACzE,kBAAkBI,KAAKF,OAAOC,UAAUE,WAGxCC,EAAa,CACb,QACA,QACA,OACA,OACA,SAIJ,SAASC,EAAWC,EAAKC,GACrB,IAAIC,EAASF,EAAIC,GACjB,GAA2B,mBAAhBC,EAAOC,KACd,OAAOD,EAAOC,KAAKH,GAEnB,IACI,OAAOI,SAASC,UAAUF,KAAKG,KAAKJ,EAAQF,EAC/C,CAAC,MAAOO,GAEL,OAAO,WACH,OAAOH,SAASC,UAAUG,MAAMA,MAAMN,EAAQ,CAACF,EAAKS,YAE3D,CAER,CAGD,SAASC,IACDC,QAAQC,MACJD,QAAQC,IAAIJ,MACZG,QAAQC,IAAIJ,MAAMG,QAASF,WAG3BL,SAASC,UAAUG,MAAMA,MAAMG,QAAQC,IAAK,CAACD,QAASF,aAG1DE,QAAQE,OAAOF,QAAQE,OAC9B,CAwBD,SAASC,EAAsBC,EAAOC,GAElC,IAAK,IAAIC,EAAI,EAAGA,EAAInB,EAAWoB,OAAQD,IAAK,CACxC,IAAIhB,EAAaH,EAAWmB,GAC5B3B,KAAKW,GAAegB,EAAIF,EACpBxB,EACAD,KAAK6B,cAAclB,EAAYc,EAAOC,EAC7C,CAGD1B,KAAKsB,IAAMtB,KAAK8B,KACnB,CAID,SAASC,EAAgCpB,EAAYc,EAAOC,GACxD,OAAO,kBACQL,UAAYnB,IACnBsB,EAAsBR,KAAKhB,KAAMyB,EAAOC,GACxC1B,KAAKW,GAAYO,MAAMlB,KAAMmB,YAGxC,CAID,SAASa,EAAqBrB,EAAYc,EAAOC,GAE7C,OAhDJ,SAAoBf,GAKhB,MAJmB,UAAfA,IACAA,EAAa,cAGNU,UAAYnB,IAEG,UAAfS,GAA0BR,EAC1BiB,OACwBa,IAAxBZ,QAAQV,GACRF,EAAWY,QAASV,QACJsB,IAAhBZ,QAAQC,IACRb,EAAWY,QAAS,OAEpBpB,EAEd,CAgCUiC,CAAWvB,IACXoB,EAAgCb,MAAMlB,KAAMmB,UACtD,CAED,SAASgB,EAAOC,EAAMC,EAAcC,GAClC,IACIC,EADAC,EAAOxC,KAEXqC,EAA+B,MAAhBA,EAAuB,OAASA,EAE/C,IAAII,EAAa,WAyBjB,SAASC,IACL,IAAIC,EAEJ,UAAWvC,SAAWF,GAAkBuC,EAAxC,CAEA,IACIE,EAAcvC,OAAOwC,aAAaH,EAChD,CAAY,MAAOI,GAAU,CAGnB,UAAWF,IAAgBzC,EACvB,IACI,IAAI4C,EAAS1C,OAAO2C,SAASD,OACzBE,EAAWF,EAAOG,QAClBC,mBAAmBT,GAAc,MACnB,IAAdO,IACAL,EAAc,WAAWQ,KAAKL,EAAOM,MAAMJ,IAAW,GAE5E,CAAgB,MAAOH,GAAU,CAQvB,YAJiCZ,IAA7BO,EAAKa,OAAOV,KACZA,OAAcV,GAGXU,CAvB6C,CAwBvD,CAnDmB,iBAATP,EACTK,GAAc,IAAML,EACK,iBAATA,IAChBK,OAAaR,GAwEfO,EAAKJ,KAAOA,EAEZI,EAAKa,OAAS,CAAEC,MAAS,EAAGC,MAAS,EAAGC,KAAQ,EAAGC,KAAQ,EACvDC,MAAS,EAAGC,OAAU,GAE1BnB,EAAKX,cAAgBS,GAAWN,EAEhCQ,EAAKoB,SAAW,WACZ,OAAOrB,GAGXC,EAAKqB,SAAW,SAAUpC,EAAOqC,GAI7B,GAHqB,iBAAVrC,QAA2DQ,IAArCO,EAAKa,OAAO5B,EAAMsC,iBAC/CtC,EAAQe,EAAKa,OAAO5B,EAAMsC,kBAET,iBAAVtC,GAAsBA,GAAS,GAAKA,GAASe,EAAKa,OAAOM,QAUhE,KAAM,6CAA+ClC,EAJrD,GALAc,EAAed,GACC,IAAZqC,GAtFZ,SAAgCE,GAC5B,IAAIC,GAAazD,EAAWwD,IAAa,UAAUD,cAEnD,UAAW3D,SAAWF,GAAkBuC,EAAxC,CAGA,IAEI,YADArC,OAAOwC,aAAaH,GAAcwB,EAEhD,CAAY,MAAOpB,GAAU,CAGnB,IACIzC,OAAO2C,SAASD,OACdI,mBAAmBT,GAAc,IAAMwB,EAAY,GACnE,CAAY,MAAOpB,GAAU,CAZiC,CAavD,CAuEWqB,CAAuBzC,GAE3BD,EAAsBR,KAAKwB,EAAMf,EAAOW,UAC7Bf,UAAYnB,GAAiBuB,EAAQe,EAAKa,OAAOM,OACxD,MAAO,oCAOnBnB,EAAK2B,gBAAkB,SAAU1C,GAC7BY,EAAeZ,EACViB,KACDF,EAAKqB,SAASpC,GAAO,IAI7Be,EAAK4B,WAAa,WACd5B,EAAKqB,SAASxB,GAAc,GA3DhC,WACI,UAAWjC,SAAWF,GAAkBuC,EAAxC,CAGA,IAEI,YADArC,OAAOwC,aAAayB,WAAW5B,EAE7C,CAAY,MAAOI,GAAU,CAGnB,IACIzC,OAAO2C,SAASD,OACdI,mBAAmBT,GAAc,0CACjD,CAAY,MAAOI,GAAU,CAZiC,CAavD,CA8CGyB,IAGJ9B,EAAK+B,UAAY,SAAST,GACtBtB,EAAKqB,SAASrB,EAAKa,OAAOC,MAAOQ,IAGrCtB,EAAKgC,WAAa,SAASV,GACvBtB,EAAKqB,SAASrB,EAAKa,OAAOM,OAAQG,IAItC,IAAIW,EAAe/B,IACC,MAAhB+B,IACAA,EAAepC,GAEnBG,EAAKqB,SAASY,GAAc,EAC7B,CAQD,IAAIC,EAAgB,IAAIvC,EAEpBwC,EAAiB,CAAA,EACrBD,EAAcE,UAAY,SAAmBxC,GACzC,GAAqB,iBAATA,GAAqC,iBAATA,GAA+B,KAATA,EAC5D,MAAM,IAAIyC,UAAU,kDAGtB,IAAIC,EAASH,EAAevC,GAK5B,OAJK0C,IACHA,EAASH,EAAevC,GAAQ,IAAID,EAClCC,EAAMsC,EAAcd,WAAYc,EAAc7C,gBAE3CiD,GAIX,IAAIC,SAAe3E,SAAWF,EAAiBE,OAAOkB,SAAMW,EAiB5D,OAhBAyC,EAAcM,WAAa,WAMvB,cALW5E,SAAWF,GACfE,OAAOkB,MAAQoD,IAClBtE,OAAOkB,IAAMyD,GAGVL,GAGXA,EAAcO,WAAa,WACvB,OAAON,GAIXD,EAAuB,QAAIA,EAEpBA,CACX,QA9RoDQ,QAC5CC,EAAAD,QAAiBnF,IAEjBD,EAAKwB,IAAMvB,QCXPqF,eAAZ,SAAYA,GACVA,EAAAA,EAAA,MAAA,GAAA,QACAA,EAAAA,EAAA,MAAA,GAAA,QACAA,EAAAA,EAAA,KAAA,GAAA,OACAA,EAAAA,EAAA,KAAA,GAAA,OACAA,EAAAA,EAAA,MAAA,GAAA,QACAA,EAAAA,EAAA,OAAA,GAAA,QACD,CAPD,CAAYA,IAAAA,EAOX,CAAA,IAaqB9D,EAAAA,UAAc,WAEtB6C,gBAAgBiB,EAASC,MAuChC,MAAMC,EAAehE,EAAasD,UAAC,WC7D7BW,EAAuB,UAiBvBC,EAAoB,CAC/BC,IAAK,GACLC,MAAO,EACPC,MAAO,EACPC,MAAO,GAYIC,EAA4C,CACvDC,WAAW,EACXC,YAJkB,uBAKlBC,kBAAmB,GCtCf,MAAOC,UAAqBC,MAGhCC,YAAYC,EAAcC,GACxBC,MAAMD,GAAW,wBACjBrG,KAAKoG,KAAOA,CACd,EA0DF,IAAYG,EC9DAC,GD8DZ,SAAYD,GAEVA,EAAA,iBAAA,mBAEAA,EAAA,SAAA,WAEAA,EAAA,YAAA,cACAA,EAAA,MAAA,OACD,CARD,CAAYA,IAAAA,EAQX,CAAA,IAED,SAAiBA,GACCA,EAAAE,WAAhB,SAA2BC,GACzB,GAAIA,GAAS,SAAUA,EACrB,MAAmB,kBAAfA,EAAMtE,MAA2C,yBAAfsE,EAAMtE,KACnCmE,EAAmBI,SAET,oBAAfD,EAAMtE,MAA6C,0BAAfsE,EAAMtE,KACrCmE,EAAmBK,iBAET,qBAAfF,EAAMtE,MAA8C,oBAAfsE,EAAMtE,KACtCmE,EAAmBM,YAErBN,EAAmBO,KAE9B,CACD,CAfD,CAAiBP,IAAAA,EAehB,CAAA,ICvFD,SAAYC,GACVA,EAAAA,EAAA,WAAA,GAAA,aACAA,EAAAA,EAAA,WAAA,GAAA,aACAA,EAAAA,EAAA,cAAA,GAAA,eACD,CAJD,CAAYA,IAAAA,EAIX,CAAA,IAEK,MAAOO,UAAqBd,EAGhCE,YAAYE,GAA+E,IAA7DW,EAA6B7F,UAAAS,OAAAT,QAAAc,IAAAd,UAAAc,GAAAd,UAAAqF,GAAAA,EAAmBS,cAC5EX,MAAM,GAAID,GACVrG,KAAKgH,OAASA,CAChB,kCCZF,IAAIE,EAAMC,OAAOpG,UAAUqG,eACvBC,EAAS,IASb,SAASC,IAAW,CA4BpB,SAASC,EAAGC,EAAIC,EAASC,GACvB1H,KAAKwH,GAAKA,EACVxH,KAAKyH,QAAUA,EACfzH,KAAK0H,KAAOA,IAAQ,CACtB,CAaA,SAASC,EAAYC,EAASC,EAAOL,EAAIC,EAASC,GAChD,GAAkB,mBAAPF,EACT,MAAM,IAAI3C,UAAU,mCAGtB,IAAIiD,EAAW,IAAIP,EAAGC,EAAIC,GAAWG,EAASF,GAC1CK,EAAMV,EAASA,EAASQ,EAAQA,EAMpC,OAJKD,EAAQI,QAAQD,GACXH,EAAQI,QAAQD,GAAKP,GAC1BI,EAAQI,QAAQD,GAAO,CAACH,EAAQI,QAAQD,GAAMD,GADhBF,EAAQI,QAAQD,GAAKE,KAAKH,IADlCF,EAAQI,QAAQD,GAAOD,EAAUF,EAAQM,gBAI7DN,CACT,CASA,SAASO,EAAWP,EAASG,GACI,KAAzBH,EAAQM,aAAoBN,EAAQI,QAAU,IAAIV,SAC5CM,EAAQI,QAAQD,EAC9B,CASA,SAASK,IACPpI,KAAKgI,QAAU,IAAIV,EACnBtH,KAAKkI,aAAe,CACtB,CAzEIf,OAAOkB,SACTf,EAAOvG,UAAYoG,OAAOkB,OAAO,OAM5B,IAAIf,GAASgB,YAAWjB,GAAS,IA2ExCe,EAAarH,UAAUwH,WAAa,WAClC,IACIC,EACApG,EAFAqG,EAAQ,GAIZ,GAA0B,IAAtBzI,KAAKkI,aAAoB,OAAOO,EAEpC,IAAKrG,KAASoG,EAASxI,KAAKgI,QACtBd,EAAIlG,KAAKwH,EAAQpG,IAAOqG,EAAMR,KAAKZ,EAASjF,EAAKgB,MAAM,GAAKhB,GAGlE,OAAI+E,OAAOuB,sBACFD,EAAME,OAAOxB,OAAOuB,sBAAsBF,IAG5CC,GAUTL,EAAarH,UAAU6H,UAAY,SAAmBf,GACpD,IAAIE,EAAMV,EAASA,EAASQ,EAAQA,EAChCgB,EAAW7I,KAAKgI,QAAQD,GAE5B,IAAKc,EAAU,MAAO,GACtB,GAAIA,EAASrB,GAAI,MAAO,CAACqB,EAASrB,IAElC,IAAK,IAAI7F,EAAI,EAAGmH,EAAID,EAASjH,OAAQmH,EAAK,IAAIC,MAAMF,GAAInH,EAAImH,EAAGnH,IAC7DoH,EAAGpH,GAAKkH,EAASlH,GAAG6F,GAGtB,OAAOuB,GAUTX,EAAarH,UAAUkI,cAAgB,SAAuBpB,GAC5D,IAAIE,EAAMV,EAASA,EAASQ,EAAQA,EAChCe,EAAY5I,KAAKgI,QAAQD,GAE7B,OAAKa,EACDA,EAAUpB,GAAW,EAClBoB,EAAUhH,OAFM,GAYzBwG,EAAarH,UAAUmI,KAAO,SAAcrB,EAAOsB,EAAIC,EAAIC,EAAIC,EAAIC,GACjE,IAAIxB,EAAMV,EAASA,EAASQ,EAAQA,EAEpC,IAAK7H,KAAKgI,QAAQD,GAAM,OAAO,EAE/B,IAEIyB,EACA7H,EAHAiH,EAAY5I,KAAKgI,QAAQD,GACzB0B,EAAMtI,UAAUS,OAIpB,GAAIgH,EAAUpB,GAAI,CAGhB,OAFIoB,EAAUlB,MAAM1H,KAAK0J,eAAe7B,EAAOe,EAAUpB,QAAIvF,GAAW,GAEhEwH,GACN,KAAK,EAAG,OAAOb,EAAUpB,GAAGxG,KAAK4H,EAAUnB,UAAU,EACrD,KAAK,EAAG,OAAOmB,EAAUpB,GAAGxG,KAAK4H,EAAUnB,QAAS0B,IAAK,EACzD,KAAK,EAAG,OAAOP,EAAUpB,GAAGxG,KAAK4H,EAAUnB,QAAS0B,EAAIC,IAAK,EAC7D,KAAK,EAAG,OAAOR,EAAUpB,GAAGxG,KAAK4H,EAAUnB,QAAS0B,EAAIC,EAAIC,IAAK,EACjE,KAAK,EAAG,OAAOT,EAAUpB,GAAGxG,KAAK4H,EAAUnB,QAAS0B,EAAIC,EAAIC,EAAIC,IAAK,EACrE,KAAK,EAAG,OAAOV,EAAUpB,GAAGxG,KAAK4H,EAAUnB,QAAS0B,EAAIC,EAAIC,EAAIC,EAAIC,IAAK,EAG3E,IAAK5H,EAAI,EAAG6H,EAAO,IAAIR,MAAMS,EAAK,GAAI9H,EAAI8H,EAAK9H,IAC7C6H,EAAK7H,EAAI,GAAKR,UAAUQ,GAG1BiH,EAAUpB,GAAGtG,MAAM0H,EAAUnB,QAAS+B,EAC1C,KAAS,CACL,IACIG,EADA/H,EAASgH,EAAUhH,OAGvB,IAAKD,EAAI,EAAGA,EAAIC,EAAQD,IAGtB,OAFIiH,EAAUjH,GAAG+F,MAAM1H,KAAK0J,eAAe7B,EAAOe,EAAUjH,GAAG6F,QAAIvF,GAAW,GAEtEwH,GACN,KAAK,EAAGb,EAAUjH,GAAG6F,GAAGxG,KAAK4H,EAAUjH,GAAG8F,SAAU,MACpD,KAAK,EAAGmB,EAAUjH,GAAG6F,GAAGxG,KAAK4H,EAAUjH,GAAG8F,QAAS0B,GAAK,MACxD,KAAK,EAAGP,EAAUjH,GAAG6F,GAAGxG,KAAK4H,EAAUjH,GAAG8F,QAAS0B,EAAIC,GAAK,MAC5D,KAAK,EAAGR,EAAUjH,GAAG6F,GAAGxG,KAAK4H,EAAUjH,GAAG8F,QAAS0B,EAAIC,EAAIC,GAAK,MAChE,QACE,IAAKG,EAAM,IAAKG,EAAI,EAAGH,EAAO,IAAIR,MAAMS,EAAK,GAAIE,EAAIF,EAAKE,IACxDH,EAAKG,EAAI,GAAKxI,UAAUwI,GAG1Bf,EAAUjH,GAAG6F,GAAGtG,MAAM0H,EAAUjH,GAAG8F,QAAS+B,GAGnD,CAED,OAAO,GAYTpB,EAAarH,UAAU6I,GAAK,SAAY/B,EAAOL,EAAIC,GACjD,OAAOE,EAAY3H,KAAM6H,EAAOL,EAAIC,GAAS,IAY/CW,EAAarH,UAAU2G,KAAO,SAAcG,EAAOL,EAAIC,GACrD,OAAOE,EAAY3H,KAAM6H,EAAOL,EAAIC,GAAS,IAa/CW,EAAarH,UAAU2I,eAAiB,SAAwB7B,EAAOL,EAAIC,EAASC,GAClF,IAAIK,EAAMV,EAASA,EAASQ,EAAQA,EAEpC,IAAK7H,KAAKgI,QAAQD,GAAM,OAAO/H,KAC/B,IAAKwH,EAEH,OADAW,EAAWnI,KAAM+H,GACV/H,KAGT,IAAI4I,EAAY5I,KAAKgI,QAAQD,GAE7B,GAAIa,EAAUpB,GAEVoB,EAAUpB,KAAOA,GACfE,IAAQkB,EAAUlB,MAClBD,GAAWmB,EAAUnB,UAAYA,GAEnCU,EAAWnI,KAAM+H,OAEd,CACL,IAAK,IAAIpG,EAAI,EAAG6G,EAAS,GAAI5G,EAASgH,EAAUhH,OAAQD,EAAIC,EAAQD,KAEhEiH,EAAUjH,GAAG6F,KAAOA,GACnBE,IAASkB,EAAUjH,GAAG+F,MACtBD,GAAWmB,EAAUjH,GAAG8F,UAAYA,IAErCe,EAAOP,KAAKW,EAAUjH,IAOtB6G,EAAO5G,OAAQ5B,KAAKgI,QAAQD,GAAyB,IAAlBS,EAAO5G,OAAe4G,EAAO,GAAKA,EACpEL,EAAWnI,KAAM+H,EACvB,CAED,OAAO/H,MAUToI,EAAarH,UAAU8I,mBAAqB,SAA4BhC,GACtE,IAAIE,EAUJ,OARIF,GACFE,EAAMV,EAASA,EAASQ,EAAQA,EAC5B7H,KAAKgI,QAAQD,IAAMI,EAAWnI,KAAM+H,KAExC/H,KAAKgI,QAAU,IAAIV,EACnBtH,KAAKkI,aAAe,GAGflI,MAMToI,EAAarH,UAAU+I,IAAM1B,EAAarH,UAAU2I,eACpDtB,EAAarH,UAAU4G,YAAcS,EAAarH,UAAU6I,GAK5DxB,EAAa2B,SAAW1C,EAKxBe,EAAaA,aAAeA,EAM1BjD,EAAAD,QAAiBkD,yBCnMZ,MAAM4B,EACJ,eC8JH,IAAWC,EChPjB,SAASC,EAAeC,EAAuBC,GAC7C,MACMC,GADc,IAAIC,aACQC,OAAOH,GACvC,OAAQD,GACN,IAAK,OACH,MAAO,CACL/H,KAAM,OACNgI,KAAMC,EACNG,KAAM,UACNnF,KAAM,IAAIoF,YAAY,MAE1B,IAAK,SACH,MAAO,CACLrI,KAAM,SACNgI,KAAMC,EACNG,KAAM,UACNE,WAAY,KAGhB,QACE,MAAM,IAAIxE,MAAK,aAAAyC,OAAcwB,gCAEnC,CAMsB,SAAAQ,EAAWC,EAAqBR,4CACpD,MAAMS,EAAmBX,EAAeU,EAASE,UAAU1I,KAAMgI,GAI3DW,QAAsBC,OAAOC,OAAOC,UACxCL,EACAD,EACA,CACExI,KAAMmD,EACN3D,OAAQ,MAEV,EACA,CAAC,UAAW,YAGd,MAAO,CAAEgJ,WAAUG,gBACrB,GAAC,EDmMD,SAAiBd,GACFA,EAAAkB,UAAyB,CACpCC,WAAY,MAEDnB,EAAAoB,OAAsB,CACjCD,WAAY,KAEDnB,EAAAqB,MAAqB,CAChCF,WAAY,MAEDnB,EAAAsB,YAA2B,CACtCH,WAAY,MAEDnB,EAAAuB,iBAAgC,CAC3CJ,WAAY,MAEDnB,EAAAwB,uBAAsC,CACjDL,WAAY,KAEf,CAnBD,CAAiBnB,IAAAA,EAmBhB,CAAA,IEjSK,MAAOyB,UAAyBtD,EACpCuD,eACEC,EACAC,GAEA,MAAM3F,MAAM,+BACd,CAEA4F,eACEF,EACAC,GAEA,MAAM3F,MAAM,+BACd,EAOI,MAAO6F,UAAqBL,EAoBhCvF,YAAY6F,SAMV1F,QACAtG,KAAKiM,WAAa,IAAIC,IACtBlM,KAAKmM,KAAOH,EAAKG,KACjBnM,KAAKoM,cAAgBJ,EAAKI,cAC1BpM,KAAKqM,OAAS,IAAIH,IAClBlM,KAAKsM,mBAAqBN,EAAKM,mBAC/BtM,KAAKuM,4BACuB,QAA1BC,EAAAR,EAAKS,6BAAqB,IAAAD,EAAAA,GAAI,IAAIlC,aAAcC,OAAO,UAC3D,CAQAmC,eAAeC,EAAYR,GACzBnM,KAAKoM,cAAgBO,EACrB3M,KAAKmM,KAAOA,CACd,CAEAS,mBACE5M,KAAKoM,mBAAgBnK,CACvB,CAEA4K,mBACE,OAAO7M,KAAKoM,aACd,CAEAU,aACE,OAAO9M,KAAK+M,OACd,CAMAC,cAAcC,GACZjN,KAAKkN,WAAaD,CACpB,CAMAE,UAAUC,GACRpN,KAAKqM,OAASe,CAChB,CAEAC,eACEC,EACAC,EACAC,EACAT,EACAE,GAEIA,IACF5L,QAAQgE,KAAK,8BAA+B4H,GAC5CjN,KAAKkN,WAAaD,GAEpB,MAAMQ,EAA4B,WAAdH,EAAyBtN,KAAK2L,eAAiB3L,KAAK8L,eAClE4B,EAAkB,IAAIC,gBAAgB,CAC1CC,UAAWH,EAAY5M,KAAKb,QAG9BuN,EACGM,YAAYH,GACZI,OAAON,GACPO,OAAO9M,IACNI,QAAQqF,MAAMzF,GACdjB,KAAKkJ,KAAK,eAAgBjI,aAAa8F,EAAe9F,EAAI,IAAI8F,EAAa9F,EAAEoF,SAAS,IAE1FrG,KAAK+M,QAAUA,CACjB,CAwBMpB,eACJC,EACAC,kDAEA,IACG7L,KAAKmM,KAAK6B,aAEsB,IAAjCpC,EAAaqC,KAAKC,WAElB,OAAOrC,EAAWsC,QAAQvC,GAG5B,MAAMb,cAAEA,GAAkB/K,KAAKmM,KAAKiC,YAC9BC,EAAWrO,KAAKmM,KAAKmC,qBAE3B,GAAIvD,EAAe,CACjB,MAAMwD,EAAKvO,KAAKwO,eACdhC,EAAAZ,EAAa6C,cAAcC,sCAA0B,EACrD9C,EAAa+C,WAITC,EAAc,IAAIC,WACtBjD,EAAaqC,KACb,EACAjO,KAAK8O,oBAAoBlD,IAIrBmD,EAAe,IAAIF,WAAW,GAEpCE,EAAa,GP9KM,GO+KnBA,EAAa,GAAKV,EASlB,IACE,MAAMW,QAAmBhE,OAAOC,OAAOgE,QACrC,CACE7M,KAAMmD,EACNgJ,KACAW,eAAgB,IAAIL,WAAWjD,EAAaqC,KAAM,EAAGW,EAAYV,aAEnEnD,EACA,IAAI8D,WAAWjD,EAAaqC,KAAMjO,KAAK8O,oBAAoBlD,KAGvDuD,EAAU,IAAI1E,YAClBmE,EAAYV,WAAac,EAAWd,WAAaK,EAAGL,WAAaa,EAAab,YAE1EkB,EAAW,IAAIP,WAAWM,GAShC,OAPAC,EAASC,IAAIT,GACbQ,EAASC,IAAI,IAAIR,WAAWG,GAAaJ,EAAYV,YACrDkB,EAASC,IAAI,IAAIR,WAAWN,GAAKK,EAAYV,WAAac,EAAWd,YACrEkB,EAASC,IAAIN,EAAcH,EAAYV,WAAac,EAAWd,WAAaK,EAAGL,YAE/EtC,EAAaqC,KAAOkB,EAEbtD,EAAWsC,QAAQvC,EAC3B,CAAC,MAAO3K,GAEPqE,EAAaoB,MAAMzF,EACpB,CACF,MACCjB,KAAKkJ,KACHc,EACA,IAAIjD,EAAoDP,sCAAAA,EAAmB8I,eAGhF,CAQKxD,eACJF,EACAC,4CAEA,IACG7L,KAAKmM,KAAK6B,aAEsB,IAAjCpC,EAAaqC,KAAKC,YAyVR,SAAsBqB,EAAwBC,GAC5D,MAAMT,EAAe,IAAIF,WACvBU,EAAUnM,MAAMmM,EAAUrB,WAAasB,EAAatB,aAEtD,OAAOsB,EAAaC,OAAM,CAACC,EAAOC,IAAUD,IAAUX,EAAaY,IACrE,CA5VMC,CAAsBhE,EAAaqC,KAAMjO,KAAKuM,6BAE9C,OAAOV,EAAWsC,QAAQvC,GAE5B,MACMyC,EADO,IAAIQ,WAAWjD,EAAaqC,MACnBrC,EAAaqC,KAAKC,WAAa,GAErD,GAAIlO,KAAKmM,KAAKiC,UAAUC,IAAarO,KAAKmM,KAAK0D,YAC7C,IACE,MAAMC,QAAqB9P,KAAK+P,aAAanE,EAAcyC,GAC3D,GAAIyB,EACF,OAAOjE,EAAWsC,QAAQ2B,EAE7B,CAAC,MAAOpJ,GACHA,aAAiBK,GAAgBL,EAAMM,SAAWR,EAAmBwJ,WACnEhQ,KAAKmM,KAAK0D,cACZvK,EAAa2K,KAAK,eAClBjQ,KAAKkJ,KACHc,EACA,IAAIjD,EAAY,+BAAA4B,OACiB3I,KAAKoM,eACpC5F,EAAmBwJ,aAGvBhQ,KAAKmM,KAAK0D,aAAc,GAG1BvK,EAAa2K,KAAK,wBAAyB,CAAEvJ,SAEhD,CAGH,OAAOmF,EAAWsC,QAAQvC,EAC5B,GAAC,CAMKmE,aACJnE,EACAyC,GAEuD,IADvD6B,EAAA/O,UAAAS,OAAA,QAAAK,IAAAd,UAAA,GAAAA,UAAA,QAAsCc,EACtCkO,EAAoChP,UAAAS,OAAAT,QAAAc,IAAAd,UAAAc,GAAAd,UAAA,GAAA,CAAEiP,aAAc,kDAEpD,MAAMC,EAASrQ,KAAKmM,KAAKiC,UAAUC,GAUnC,IACE,MAAMO,EAAc,IAAIC,WACtBjD,EAAaqC,KACb,EACAjO,KAAK8O,oBAAoBlD,IAErBmD,EAAe,IAAIF,WAAWjD,EAAaqC,KAAMrC,EAAaqC,KAAKC,WAAa,EAAG,GAEnFoC,EAAWvB,EAAa,GACxBR,EAAK,IAAIM,WACbjD,EAAaqC,KACbrC,EAAaqC,KAAKC,WAAaoC,EAAWvB,EAAab,WACvDoC,GAGIC,EAAkB3B,EAAYV,WAC9BsC,EACJ5E,EAAaqC,KAAKC,YACjBU,EAAYV,WAAaoC,EAAWvB,EAAab,YAE9CuC,QAAkBzF,OAAOC,OAAOyF,QACpC,CACEtO,KAAMmD,EACNgJ,KACAW,eAAgB,IAAIL,WAAWjD,EAAaqC,KAAM,EAAGW,EAAYV,qBAEnE1B,EAAA2D,EAAYpF,6BAAiBsF,EAAOtF,cACpC,IAAI8D,WAAWjD,EAAaqC,KAAMsC,EAAiBC,IAG/CrB,EAAU,IAAI1E,YAAYmE,EAAYV,WAAauC,EAAUvC,YAC7DkB,EAAW,IAAIP,WAAWM,GAOhC,OALAC,EAASC,IAAI,IAAIR,WAAWjD,EAAaqC,KAAM,EAAGW,EAAYV,aAC9DkB,EAASC,IAAI,IAAIR,WAAW4B,GAAY7B,EAAYV,YAEpDtC,EAAaqC,KAAOkB,EAEbvD,CACR,CAAC,MAAOlF,GACP,KAAI1G,KAAKsM,mBAAmBtG,kBAAoB,GAmD9C,MAAM,IAAIe,EACR,2DACAP,EAAmBwJ,YApDrB,GAAIG,EAAYC,aAAepQ,KAAKsM,mBAAmBtG,kBAAmB,CAOxE,IAAI2K,EACJ,GAPArL,EAAaxD,MAAK,0BAAA6G,OACUwH,EAAYC,aAAY,QAAAzH,OAChD3I,KAAKsM,mBAAmBtG,kBAC1B,eAAA2C,OAAciD,aAAwBgF,qBAAuB,QAAU,UAIrEP,IAAWrQ,KAAKmM,KAAKiC,UAAUC,GAAW,CAG5C,MAAMwC,QAAoB7Q,KAAKmM,KAAK2E,WAAWzC,GAAU,GAEzDsC,QAAwBhG,EAAWkG,EAAa7Q,KAAKsM,mBAAmBvG,YACzE,CAED,MAAMgL,QAAc/Q,KAAK+P,aAAanE,EAAcyC,EAAU6B,GAAmBG,EAAQ,CACvFD,aAAcD,EAAYC,aAAe,EACzCrF,cAAe4F,aAAA,EAAAA,EAAiB5F,gBAOlC,OALIgG,GAASJ,IACX3Q,KAAKmM,KAAK6E,UAAUL,EAAiBtC,GAAU,GAE/CrO,KAAKmM,KAAK8E,mBAAmB5C,IAExB0C,CACR,CAOKb,IACF5K,EAAaxD,MAAM,iCACnB9B,KAAKmM,KAAK+E,mBAAmBhB,EAAgBtF,SAAUyD,IAGzDrO,KAAKmM,KAAK0D,aAAc,EAExBvK,EAAa2K,KAAK,oDAClBjQ,KAAKkJ,KACHc,EACA,IAAIjD,EAAY,qCAAA4B,OACuB3I,KAAKoM,eAC1C5F,EAAmB8I,YAU5B,IACF,CAqBOd,OAAOE,EAA+BC,SAC5C,MAAMJ,EAAK,IAAI9D,YPzZM,IO0Zf0G,EAAS,IAAIC,SAAS7C,GAGvBvO,KAAKiM,WAAW/E,IAAIwH,IAEvB1O,KAAKiM,WAAWoD,IAAIX,EAAuB2C,KAAKC,MAAsB,MAAhBD,KAAKE,WAG7D,MAAMC,EAAsD,QAA1ChF,EAAAxM,KAAKiM,WAAWwF,IAAI/C,UAAsB,IAAAlC,EAAAA,EAAI,EAQhE,OANA2E,EAAOO,UAAU,EAAGhD,GACpByC,EAAOO,UAAU,EAAG/C,GACpBwC,EAAOO,UAAU,EAAG/C,EAAa6C,EAAY,OAE7CxR,KAAKiM,WAAWoD,IAAIX,EAAuB8C,EAAY,GAEhDjD,CACT,CAEAO,oBAAoBiC,SAClB,GDrbE,SACJA,GAEA,MAAO,SAAUA,CACnB,CCibQY,CAAaZ,GAAQ,CACvB,IAAIa,EAAyC,QAAzBpF,EAAAxM,KAAK6R,cAAcd,UAAM,IAAAvE,EAAAA,EAAIxM,KAAKkN,WAEtD,GAAsB,QAAlB0E,GAA6C,QAAlBA,EAC7B,MAAM,IAAI1L,MAAK,GAAAyC,OAAIiJ,sDAGrB,GAAsB,QAAlBA,EACF,OAAOpM,EAAkBuL,EAAMe,MAGjC,MAAM7D,EAAO,IAAIY,WAAWkC,EAAM9C,MAClC,IACE,MAAM8D,EAkDR,SAA0BC,GAC9B,MAAMC,EAAmB,GACzB,IAAIC,EAAQ,EACVC,EAAM,EACNC,EAAeJ,EAAOpQ,OAAS,EACjC,KAAOuQ,EAAMC,GAAc,CAEzB,KACED,EAAMC,IACY,IAAhBJ,EAAOG,IAAkC,IAApBH,EAAOG,EAAM,IAAgC,IAApBH,EAAOG,EAAM,KAE7DA,IACEA,GAAOC,IAAcD,EAAMH,EAAOpQ,QAEtC,IAAIyQ,EAAMF,EACV,KAAOE,EAAMH,GAA6B,IAApBF,EAAOK,EAAM,IAAUA,IAE7C,GAAc,IAAVH,GACF,GAAIG,IAAQH,EAAO,MAAMrN,UAAU,0CAEnCoN,EAAOhK,KAAKiK,GAGdA,EAAQC,GAAY,CACrB,CACD,OAAOF,CACT,CA5E4BK,CAAgBrE,GASpC,GALoB,SAAlB2D,GACAG,EAAYQ,MAAMC,GAChB,CAACC,EAASC,UAAWD,EAASE,eAAeC,SAASC,EAAc5E,EAAKuE,OAGjE,CACV,IAAK,MAAM7C,KAASoC,EAAa,CAE/B,OADWc,EAAc5E,EAAK0B,KAE5B,KAAK8C,EAASC,UACd,KAAKD,EAASE,cACZ,OAAOhD,EAAQ,EAIpB,CACD,MAAM,IAAI9K,UAAU,sBACrB,CACF,CAAC,MAAO5D,GACP,CAGF,OAAOuE,EAAkBuL,EAAMe,KAChC,CACC,OAAOtM,EAAkBG,KAE7B,CAKAkM,cAAcd,GACZ,GAAyB,IAArB/Q,KAAKqM,OAAOyG,KACd,OAGF,MAAMC,EAAchC,EAAMtC,cAAcsE,YAExC,OADcA,EAAc/S,KAAKqM,OAAOoF,IAAIsB,QAAe9Q,CAE7D,EAmCI,SAAU4Q,EAAcG,GAC5B,OAAOA,EAAYC,CACrB,CAEA,MAAMA,EAAgB,GAEtB,IAAYR,GAAZ,SAAYA,GAEVA,EAAAA,EAAA,cAAA,GAAA,gBAEAA,EAAAA,EAAA,kBAAA,GAAA,oBAEAA,EAAAA,EAAA,kBAAA,GAAA,oBAEAA,EAAAA,EAAA,kBAAA,GAAA,oBAEAA,EAAAA,EAAA,UAAA,GAAA,YAEAA,EAAAA,EAAA,IAAA,GAAA,MAEAA,EAAAA,EAAA,IAAA,GAAA,MAEAA,EAAAA,EAAA,IAAA,GAAA,MAEAA,EAAAA,EAAA,IAAA,GAAA,MAEAA,EAAAA,EAAA,QAAA,IAAA,UAEAA,EAAAA,EAAA,WAAA,IAAA,aAEAA,EAAAA,EAAA,YAAA,IAAA,cAEAA,EAAAA,EAAA,QAAA,IAAA,UAEAA,EAAAA,EAAA,YAAA,IAAA,cAEAA,EAAAA,EAAA,WAAA,IAAA,aAEAA,EAAAA,EAAA,IAAA,IAAA,MAKAA,EAAAA,EAAA,UAAA,IAAA,YAEAA,EAAAA,EAAA,UAAA,IAAA,YAEAA,EAAAA,EAAA,gBAAA,IAAA,iBAGD,CA5CD,CAAYA,IAAAA,EA4CX,CAAA,ICtkBK,MAAOS,UAA8B9K,EAezCjC,YACEiG,EACA4B,EACA1B,GAEAhG,QACAtG,KAAKmT,gBAAkB,EACvBnT,KAAKoT,cAAgB,IAAIpK,MRhCD,IQiCxBhJ,KAAKqT,QAAUrF,EACfhO,KAAKsM,mBAAqBA,EAC1BtM,KAAKsT,kBAAoB,IAAIpH,IAC7BlM,KAAKoM,cAAgBA,EACrBpM,KAAK6P,aAAc,CACrB,CAEA0D,WAAWF,GACTrT,KAAKqT,QAAUA,CACjB,CASAvC,WAAWzC,GAAgC,IAAbmF,IAAMrS,UAAAS,OAAA,QAAAK,IAAAd,UAAA,KAAAA,UAAA,GAClC,MAAMgS,EAAmB9E,QAAAA,EAAAA,EAAarO,KAAKsO,qBAErCmF,EAAkBzT,KAAKsT,kBAAkB7B,IAAI0B,GACnD,QAA+B,IAApBM,EACT,OAAOA,EAET,MAAMC,EAAiB,IAAIC,SAAmB,CAAOC,EAASC,IAAUC,EAAA9T,UAAA,OAAA,GAAA,YACtE,IACE,MAAM+T,EAAkB/T,KAAKoO,UAAU+E,GAAiBvI,SAClDiG,QFzCQ,SACpBmD,GAEuC,IADvClJ,EAAA3J,UAAAS,OAAAT,QAAAc,IAAAd,UAAAc,GAAAd,UAAuC,GAAA,CAAEiB,KAAMmD,GAC/C0O,yDAA8B,mDAG9B,OAAOjJ,OAAOC,OAAOiJ,UACnB,MACAF,EACAlJ,GACA,EACU,WAAVmJ,EAAqB,CAAC,aAAc,aAAe,CAAC,UAAW,WAEnE,GAAC,CE4BiCC,OFqDZ,SAAQtJ,EAAqBR,4CACjD,MAAMS,EAAmBX,EAAeU,EAASE,UAAU1I,KAAMgI,GAGjE,OAAOY,OAAOC,OAAOkJ,WAAWtJ,EAAkBD,EAAU,IAC9D,GAAC,CEzDewJ,CAAQL,EAAiB/T,KAAKsM,mBAAmBvG,aACvDgO,EAAgBjJ,UAAU1I,KAC1B,UAGEoR,GACFxT,KAAKkR,mBAAmBL,EAAasC,GAAiB,GAExDnT,KAAKkJ,KAAK,eAAgB2H,EAAaxC,EAAUrO,KAAKoM,eACtDwH,EAAQ/C,EACT,CAAC,MAAO5P,GACP4S,EAAO5S,EACR,CAAS,QACRjB,KAAKsT,kBAAkBe,OAAOlB,EAC/B,CACF,MAED,OADAnT,KAAKsT,kBAAkBjE,IAAI8D,EAAiBO,GACrCA,CACT,CAQMF,OAAO5I,GAAiC,IAAZyD,EAAQlN,UAAAS,OAAA,QAAAK,IAAAd,UAAA,GAAAA,UAAA,GAAG,iDACrCnB,KAAKkR,mBAAmBtG,EAAUyD,GACxCrO,KAAK6P,aAAc,CACrB,GAAC,CAQKqB,mBAAmBtG,GAA2D,IAAtCyD,EAAQlN,UAAAS,OAAA,QAAAK,IAAAd,UAAA,GAAAA,UAAA,GAAG,EAAGmT,EAAgBnT,UAAAS,OAAA,QAAAK,IAAAd,UAAA,IAAAA,UAAA,4CAC1EmE,EAAaxD,MAAM,mBACfuM,GAAY,IACdrO,KAAKmT,gBAAkB9E,EAAWrO,KAAKoT,cAAcxR,QAEvD,MAAMyO,QAAe1F,EAAWC,EAAU5K,KAAKsM,mBAAmBvG,aAClE/F,KAAKgR,UAAUX,EAAQrQ,KAAKmT,gBAAiBmB,EAC/C,GAAC,CAEKtD,UAAUX,EAAgBhC,GAA0C,IAAxBiG,EAAgBnT,UAAAS,OAAA,QAAAK,IAAAd,UAAA,IAAAA,UAAA,4CAChEnB,KAAKoT,cAAc/E,EAAWrO,KAAKoT,cAAcxR,QAAUyO,EACvDiE,GACFtU,KAAKkJ,KAAK,eAAgBmH,EAAOzF,SAAUyD,EAAUrO,KAAKoM,cAE9D,GAAC,CAEK6E,mBAAmBtB,4CACvB3P,KAAKmT,gBAAkBxD,EAAQ3P,KAAKoT,cAAcxR,OAClD5B,KAAK6P,aAAc,CACrB,GAAC,CAED7B,YACE,OAAOhO,KAAKqT,OACd,CAEA/E,qBACE,OAAOtO,KAAKmT,eACd,CAOA/E,UAAUC,GACR,OAAOrO,KAAKoT,cAAc/E,QAAAA,EAAYrO,KAAKmT,gBAC7C,EChIF,MAAMoB,EAAsC,GACtCC,EAAsD,IAAItI,IAEhE,IACIuI,EAMA3O,EAPA4O,EAAkC,GAGlCC,GAA+B,EAE/BC,GAAwB,EAIxBtI,EAAyCzG,EAiF7C,SAASgP,EAAgBzI,EAAuBW,GAC9C,IAAI+H,EAAUP,EAAoBQ,MAAMC,GAAMA,EAAElI,eAAiBC,IACjE,GAAK+H,EAaM1I,IAAkB0I,EAAQjI,oBAEnCiI,EAAQpI,eAAeN,EAAe6I,EAAyB7I,QAfnD,CAEZ,GADA9G,EAAaD,KAAK,2BAA4B,CAAE+G,mBAC3CE,EACH,MAAMpG,MAAM,+BAEd4O,EAAU,IAAI/I,EAAa,CACzBK,gBACAD,KAAM8I,EAAyB7I,GAC/BE,uBAGF4I,EAAwBJ,GACxBP,EAAoBtM,KAAK6M,EAC1B,CAMD,OAAOA,CACT,CAEA,SAASG,EAAyB7I,GAChC,IAAKA,EACH,OAAOqI,EAET,IAAItI,EAAOqI,EAAgB/C,IAAIrF,GAQ/B,OAPKD,IACHA,EAAO,IAAI+G,EAAsB9G,GAAe,EAAME,GAClDxG,GACFqG,EAAKqH,OAAO1N,GAEd0O,EAAgBnF,IAAIjD,EAAeD,IAE9BA,CACT,CAMA,SAASgJ,EAAoBpI,GAC3B,IAAIqI,EAAiBV,EAAgBK,MAAMD,GAAYA,EAAQhI,eAAiBC,IAChF,IAAKqI,EAAgB,CACnB,IAAK9I,EACH,MAAM,IAAIzH,UAAU,+BAEtBuQ,EAAiB,IAAIrJ,EAAa,CAChCI,KAAMsI,EACNrI,cAAe,YACfE,uBAEF4I,EAAwBE,GACxBV,EAAgBzM,KAAKmN,EACtB,CACD,OAAOA,CACT,CAoBA,SAASF,EAAwBJ,GAC/BA,EAAQlL,GAAG,gBAAiBlD,IAC1B,MAAM2O,EAAoB,CACxBC,KAAM,QACNrH,KAAM,CAAEvH,MAAO,IAAIR,SAAKyC,OAAInC,EAAmBE,EAAMM,QAAO2B,MAAAA,OAAKjC,EAAML,YAEzEkP,YAAYF,EAAI,GAEpB,CAEA,SAASG,EAAkB5K,EAAqByD,GAS9CkH,YAR4B,CAC1BD,KAAkB,aAClBrH,KAAM,CAEJI,WACAzD,aAIN,CAjLAtF,EAAanB,gBAAgB,QAE7BsR,UAAaC,IACX,MAAMJ,KAAEA,EAAIrH,KAAEA,GAA4ByH,EAAGzH,KAE7C,OAAQqH,GACN,IAAK,OACHhQ,EAAaD,KAAK,sBAClBiH,EAAqB2B,EAAK3B,mBAC1BsI,IAAiB3G,EAAK3B,mBAAmBxG,UAEzC,MAAM6P,EAA2B,CAC/BL,KAAM,SACNrH,KAAM,CAAEoF,QAASsB,IAEnBF,EAAgB,IAAIvB,OAAsBjR,EAAW0S,EAAqBrI,GAC1EmI,EAAc7K,GAAG,eAAgB4L,GACjCD,YAAYI,GACZ,MACF,IAAK,SAwHqBC,EAvHH3H,EAAKoF,SAuHejH,EAvHN6B,EAAK7B,eA4H1C6I,EAAyB7I,GAAemH,WAAWqC,IAHnDjB,EAAsBiB,EACtBnB,EAAclB,WAAWqC,IAzHvBtQ,EAAaD,KAAK,+BAElBkQ,YAAYG,EAAGzH,MACf,MACF,IAAK,SACW4G,EAAgB5G,EAAK7B,cAAe6B,EAAKlB,SAC/CM,eACNiI,EACArH,EAAK4H,eACL5H,EAAK6H,eACL7H,EAAKlB,QACLkB,EAAKhB,OAEP,MACF,IAAK,SACckI,EAAoBlH,EAAKlB,SAC/BM,eACTiI,EACArH,EAAK4H,eACL5H,EAAK6H,eACL7H,EAAKlB,QACLkB,EAAKhB,OAEP,MACF,IAAK,SACC2H,GACFtP,EAAaxD,MAAM,kBAqG3B,SAAsB2D,EAAgBkK,GACpCrK,EAAaxD,MAAM,sBACnBgE,EAAYL,EACZgP,SAAAA,EAAejB,OAAO/N,EAAKkK,GAC3B,IAAK,MAAM,CAAGoG,KAAevB,EAC3BuB,EAAWvC,OAAO/N,EAAKkK,EAE3B,CA3GQqG,CAAa/H,EAAKxI,IAAKwI,EAAKI,WACnBJ,EAAK7B,cACd6I,EAAyBhH,EAAK7B,eAAeoH,OAAOvF,EAAKxI,IAAKwI,EAAKI,UAEnE/I,EAAaoB,MAAM,mEAErB,MACF,IAAK,kBA+DwBqG,EA9DHkB,EAAKlB,QA+D4B,QAA7DP,EAAA+H,EAAoBQ,MAAMC,GAAMA,EAAElI,eAAiBC,WAAU,IAAAP,GAAAA,EAAAI,mBA9DzD,MACF,IAAK,cACHiI,EAAgB5G,EAAK7B,cAAe6B,EAAKlB,SAASC,cAAciB,EAAKhB,OACrE,MACF,IAAK,YACHyH,EAAgBuB,SAASC,IACvBA,EAAG/I,UAAUc,EAAKb,IAAI,IAExB,MACF,IAAK,kBAOT,SAAoCa,qCAClC,MAAM8H,EAAad,EAAyBhH,EAAK7B,qBAC3C2J,EAAWjF,WAAW7C,EAAKI,UACjC0H,EAAWlG,aAAc,CAC3B,GAAC,CAVKsG,CAAqBlI,GAmD3B,IAAiClB,IAqBH6I,EAAiBxJ,CArE5C,EA+GC5J,KAAK4T,oBACP9Q,EAAaxD,MAAM,yBAEnBU,KAAK6T,eAAkBxO,IACrB,MAAMyO,EAAczO,EAAMyO,YAC1BhR,EAAaxD,MAAM,cAAewU,GAClCA,EAAYC,SAAU,EACtB,MAAMjB,KAAEA,EAAIlJ,cAAEA,EAAaW,QAAEA,EAAOE,MAAEA,GAAUqJ,EAAYE,QACtD1B,EACK,WAATQ,EAAoBH,EAAoBpI,GAAW8H,EAAgBzI,EAAeW,GACpFzH,EAAaxD,MAAM,YAAa,CAAEmL,UAClC6H,EAAQzH,eAAeiI,EAAMgB,EAAY/I,SAAU+I,EAAY9I,SAAUT,EAASE,EAAM","x_google_ignoreList":[0,5]}
+{"version":3,"file":"livekit-client.e2ee.worker.js","sources":["../node_modules/loglevel/lib/loglevel.js","../src/logger.ts","../src/e2ee/constants.ts","../src/room/errors.ts","../src/e2ee/errors.ts","../node_modules/events/events.js","../src/e2ee/types.ts","../src/room/track/options.ts","../src/e2ee/utils.ts","../src/e2ee/worker/FrameCryptor.ts","../src/e2ee/worker/ParticipantKeyHandler.ts","../src/e2ee/worker/e2ee.worker.ts"],"sourcesContent":["/*\n* loglevel - https://github.com/pimterry/loglevel\n*\n* Copyright (c) 2013 Tim Perry\n* Licensed under the MIT license.\n*/\n(function (root, definition) {\n    \"use strict\";\n    if (typeof define === 'function' && define.amd) {\n        define(definition);\n    } else if (typeof module === 'object' && module.exports) {\n        module.exports = definition();\n    } else {\n        root.log = definition();\n    }\n}(this, function () {\n    \"use strict\";\n\n    // Slightly dubious tricks to cut down minimized file size\n    var noop = function() {};\n    var undefinedType = \"undefined\";\n    var isIE = (typeof window !== undefinedType) && (typeof window.navigator !== undefinedType) && (\n        /Trident\\/|MSIE /.test(window.navigator.userAgent)\n    );\n\n    var logMethods = [\n        \"trace\",\n        \"debug\",\n        \"info\",\n        \"warn\",\n        \"error\"\n    ];\n\n    // Cross-browser bind equivalent that works at least back to IE6\n    function bindMethod(obj, methodName) {\n        var method = obj[methodName];\n        if (typeof method.bind === 'function') {\n            return method.bind(obj);\n        } else {\n            try {\n                return Function.prototype.bind.call(method, obj);\n            } catch (e) {\n                // Missing bind shim or IE8 + Modernizr, fallback to wrapping\n                return function() {\n                    return Function.prototype.apply.apply(method, [obj, arguments]);\n                };\n            }\n        }\n    }\n\n    // Trace() doesn't print the message in IE, so for that case we need to wrap it\n    function traceForIE() {\n        if (console.log) {\n            if (console.log.apply) {\n                console.log.apply(console, arguments);\n            } else {\n                // In old IE, native console methods themselves don't have apply().\n                Function.prototype.apply.apply(console.log, [console, arguments]);\n            }\n        }\n        if (console.trace) console.trace();\n    }\n\n    // Build the best logging method possible for this env\n    // Wherever possible we want to bind, not wrap, to preserve stack traces\n    function realMethod(methodName) {\n        if (methodName === 'debug') {\n            methodName = 'log';\n        }\n\n        if (typeof console === undefinedType) {\n            return false; // No method possible, for now - fixed later by enableLoggingWhenConsoleArrives\n        } else if (methodName === 'trace' && isIE) {\n            return traceForIE;\n        } else if (console[methodName] !== undefined) {\n            return bindMethod(console, methodName);\n        } else if (console.log !== undefined) {\n            return bindMethod(console, 'log');\n        } else {\n            return noop;\n        }\n    }\n\n    // These private functions always need `this` to be set properly\n\n    function replaceLoggingMethods(level, loggerName) {\n        /*jshint validthis:true */\n        for (var i = 0; i < logMethods.length; i++) {\n            var methodName = logMethods[i];\n            this[methodName] = (i < level) ?\n                noop :\n                this.methodFactory(methodName, level, loggerName);\n        }\n\n        // Define log.log as an alias for log.debug\n        this.log = this.debug;\n    }\n\n    // In old IE versions, the console isn't present until you first open it.\n    // We build realMethod() replacements here that regenerate logging methods\n    function enableLoggingWhenConsoleArrives(methodName, level, loggerName) {\n        return function () {\n            if (typeof console !== undefinedType) {\n                replaceLoggingMethods.call(this, level, loggerName);\n                this[methodName].apply(this, arguments);\n            }\n        };\n    }\n\n    // By default, we use closely bound real methods wherever possible, and\n    // otherwise we wait for a console to appear, and then try again.\n    function defaultMethodFactory(methodName, level, loggerName) {\n        /*jshint validthis:true */\n        return realMethod(methodName) ||\n               enableLoggingWhenConsoleArrives.apply(this, arguments);\n    }\n\n    function Logger(name, defaultLevel, factory) {\n      var self = this;\n      var currentLevel;\n      defaultLevel = defaultLevel == null ? \"WARN\" : defaultLevel;\n\n      var storageKey = \"loglevel\";\n      if (typeof name === \"string\") {\n        storageKey += \":\" + name;\n      } else if (typeof name === \"symbol\") {\n        storageKey = undefined;\n      }\n\n      function persistLevelIfPossible(levelNum) {\n          var levelName = (logMethods[levelNum] || 'silent').toUpperCase();\n\n          if (typeof window === undefinedType || !storageKey) return;\n\n          // Use localStorage if available\n          try {\n              window.localStorage[storageKey] = levelName;\n              return;\n          } catch (ignore) {}\n\n          // Use session cookie as fallback\n          try {\n              window.document.cookie =\n                encodeURIComponent(storageKey) + \"=\" + levelName + \";\";\n          } catch (ignore) {}\n      }\n\n      function getPersistedLevel() {\n          var storedLevel;\n\n          if (typeof window === undefinedType || !storageKey) return;\n\n          try {\n              storedLevel = window.localStorage[storageKey];\n          } catch (ignore) {}\n\n          // Fallback to cookies if local storage gives us nothing\n          if (typeof storedLevel === undefinedType) {\n              try {\n                  var cookie = window.document.cookie;\n                  var location = cookie.indexOf(\n                      encodeURIComponent(storageKey) + \"=\");\n                  if (location !== -1) {\n                      storedLevel = /^([^;]+)/.exec(cookie.slice(location))[1];\n                  }\n              } catch (ignore) {}\n          }\n\n          // If the stored level is not valid, treat it as if nothing was stored.\n          if (self.levels[storedLevel] === undefined) {\n              storedLevel = undefined;\n          }\n\n          return storedLevel;\n      }\n\n      function clearPersistedLevel() {\n          if (typeof window === undefinedType || !storageKey) return;\n\n          // Use localStorage if available\n          try {\n              window.localStorage.removeItem(storageKey);\n              return;\n          } catch (ignore) {}\n\n          // Use session cookie as fallback\n          try {\n              window.document.cookie =\n                encodeURIComponent(storageKey) + \"=; expires=Thu, 01 Jan 1970 00:00:00 UTC\";\n          } catch (ignore) {}\n      }\n\n      /*\n       *\n       * Public logger API - see https://github.com/pimterry/loglevel for details\n       *\n       */\n\n      self.name = name;\n\n      self.levels = { \"TRACE\": 0, \"DEBUG\": 1, \"INFO\": 2, \"WARN\": 3,\n          \"ERROR\": 4, \"SILENT\": 5};\n\n      self.methodFactory = factory || defaultMethodFactory;\n\n      self.getLevel = function () {\n          return currentLevel;\n      };\n\n      self.setLevel = function (level, persist) {\n          if (typeof level === \"string\" && self.levels[level.toUpperCase()] !== undefined) {\n              level = self.levels[level.toUpperCase()];\n          }\n          if (typeof level === \"number\" && level >= 0 && level <= self.levels.SILENT) {\n              currentLevel = level;\n              if (persist !== false) {  // defaults to true\n                  persistLevelIfPossible(level);\n              }\n              replaceLoggingMethods.call(self, level, name);\n              if (typeof console === undefinedType && level < self.levels.SILENT) {\n                  return \"No console available for logging\";\n              }\n          } else {\n              throw \"log.setLevel() called with invalid level: \" + level;\n          }\n      };\n\n      self.setDefaultLevel = function (level) {\n          defaultLevel = level;\n          if (!getPersistedLevel()) {\n              self.setLevel(level, false);\n          }\n      };\n\n      self.resetLevel = function () {\n          self.setLevel(defaultLevel, false);\n          clearPersistedLevel();\n      };\n\n      self.enableAll = function(persist) {\n          self.setLevel(self.levels.TRACE, persist);\n      };\n\n      self.disableAll = function(persist) {\n          self.setLevel(self.levels.SILENT, persist);\n      };\n\n      // Initialize with the right level\n      var initialLevel = getPersistedLevel();\n      if (initialLevel == null) {\n          initialLevel = defaultLevel;\n      }\n      self.setLevel(initialLevel, false);\n    }\n\n    /*\n     *\n     * Top-level API\n     *\n     */\n\n    var defaultLogger = new Logger();\n\n    var _loggersByName = {};\n    defaultLogger.getLogger = function getLogger(name) {\n        if ((typeof name !== \"symbol\" && typeof name !== \"string\") || name === \"\") {\n          throw new TypeError(\"You must supply a name when creating a logger.\");\n        }\n\n        var logger = _loggersByName[name];\n        if (!logger) {\n          logger = _loggersByName[name] = new Logger(\n            name, defaultLogger.getLevel(), defaultLogger.methodFactory);\n        }\n        return logger;\n    };\n\n    // Grab the current global log variable in case of overwrite\n    var _log = (typeof window !== undefinedType) ? window.log : undefined;\n    defaultLogger.noConflict = function() {\n        if (typeof window !== undefinedType &&\n               window.log === defaultLogger) {\n            window.log = _log;\n        }\n\n        return defaultLogger;\n    };\n\n    defaultLogger.getLoggers = function getLoggers() {\n        return _loggersByName;\n    };\n\n    // ES6 default export, for compatibility\n    defaultLogger['default'] = defaultLogger;\n\n    return defaultLogger;\n}));\n","import * as log from 'loglevel';\n\nexport enum LogLevel {\n  trace = 0,\n  debug = 1,\n  info = 2,\n  warn = 3,\n  error = 4,\n  silent = 5,\n}\n\ntype LogLevelString = keyof typeof LogLevel;\n\ntype StructuredLogger = {\n  trace: (msg: string, context?: object) => void;\n  debug: (msg: string, context?: object) => void;\n  info: (msg: string, context?: object) => void;\n  warn: (msg: string, context?: object) => void;\n  error: (msg: string, context?: object) => void;\n  setDefaultLevel: (level: log.LogLevelDesc) => void;\n};\n\nconst livekitLogger = log.getLogger('livekit');\n\nlivekitLogger.setDefaultLevel(LogLevel.info);\n\nexport default livekitLogger as StructuredLogger;\n\nexport function setLogLevel(level: LogLevel | LogLevelString, loggerName?: 'livekit' | 'lk-e2ee') {\n  if (loggerName) {\n    log.getLogger(loggerName).setLevel(level);\n  }\n  for (const logger of Object.values(log.getLoggers())) {\n    logger.setLevel(level);\n  }\n}\n\nexport type LogExtension = (level: LogLevel, msg: string, context?: object) => void;\n\n/**\n * use this to hook into the logging function to allow sending internal livekit logs to third party services\n * if set, the browser logs will lose their stacktrace information (see https://github.com/pimterry/loglevel#writing-plugins)\n */\nexport function setLogExtension(extension: LogExtension) {\n  const originalFactory = livekitLogger.methodFactory;\n\n  livekitLogger.methodFactory = (methodName, configLevel, loggerName) => {\n    const rawMethod = originalFactory(methodName, configLevel, loggerName);\n\n    const logLevel = LogLevel[methodName as LogLevelString];\n    const needLog = logLevel >= configLevel && logLevel < LogLevel.silent;\n\n    return (msg, context?: [msg: string, context: object]) => {\n      if (context) rawMethod(msg, context);\n      else rawMethod(msg);\n      if (needLog) {\n        extension(logLevel, msg, context);\n      }\n    };\n  };\n  livekitLogger.setLevel(livekitLogger.getLevel()); // Be sure to call setLevel method in order to apply plugin\n}\n\nexport const workerLogger = log.getLogger('lk-e2ee') as StructuredLogger;\n","import type { KeyProviderOptions } from './types';\n\nexport const ENCRYPTION_ALGORITHM = 'AES-GCM';\n\n// We use a ringbuffer of keys so we can change them and still decode packets that were\n// encrypted with an old key. We use a size of 16 which corresponds to the four bits\n// in the frame trailer.\nexport const KEYRING_SIZE = 16;\n\n// How many consecutive frames can fail decrypting before a particular key gets marked as invalid\nexport const DECRYPTION_FAILURE_TOLERANCE = 10;\n\n// We copy the first bytes of the VP8 payload unencrypted.\n// For keyframes this is 10 bytes, for non-keyframes (delta) 3. See\n//   https://tools.ietf.org/html/rfc6386#section-9.1\n// This allows the bridge to continue detecting keyframes (only one byte needed in the JVB)\n// and is also a bit easier for the VP8 decoder (i.e. it generates funny garbage pictures\n// instead of being unable to decode).\n// This is a bit for show and we might want to reduce to 1 unconditionally in the final version.\n//\n// For audio (where frame.type is not set) we do not encrypt the opus TOC byte:\n//   https://tools.ietf.org/html/rfc6716#section-3.1\nexport const UNENCRYPTED_BYTES = {\n  key: 10,\n  delta: 3,\n  audio: 1, // frame.type is not set on audio, so this is set manually\n  empty: 0,\n} as const;\n\n/* We use a 12 byte bit IV. This is signalled in plain together with the\n packet. See https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/encrypt#parameters */\nexport const IV_LENGTH = 12;\n\n// flag set to indicate that e2ee has been setup for sender/receiver;\nexport const E2EE_FLAG = 'lk_e2ee';\n\nexport const SALT = 'LKFrameEncryptionKey';\n\nexport const KEY_PROVIDER_DEFAULTS: KeyProviderOptions = {\n  sharedKey: false,\n  ratchetSalt: SALT,\n  ratchetWindowSize: 8,\n  failureTolerance: DECRYPTION_FAILURE_TOLERANCE,\n} as const;\n","export class LivekitError extends Error {\n  code: number;\n\n  constructor(code: number, message?: string) {\n    super(message || 'an error has occured');\n    this.code = code;\n  }\n}\n\nexport const enum ConnectionErrorReason {\n  NotAllowed,\n  ServerUnreachable,\n  InternalError,\n  Cancelled,\n}\n\nexport class ConnectionError extends LivekitError {\n  status?: number;\n\n  reason?: ConnectionErrorReason;\n\n  constructor(message?: string, reason?: ConnectionErrorReason, status?: number) {\n    super(1, message);\n    this.status = status;\n    this.reason = reason;\n  }\n}\n\nexport class DeviceUnsupportedError extends LivekitError {\n  constructor(message?: string) {\n    super(21, message ?? 'device is unsupported');\n  }\n}\n\nexport class TrackInvalidError extends LivekitError {\n  constructor(message?: string) {\n    super(20, message ?? 'track is invalid');\n  }\n}\n\nexport class UnsupportedServer extends LivekitError {\n  constructor(message?: string) {\n    super(10, message ?? 'unsupported server');\n  }\n}\n\nexport class UnexpectedConnectionState extends LivekitError {\n  constructor(message?: string) {\n    super(12, message ?? 'unexpected connection state');\n  }\n}\n\nexport class NegotiationError extends LivekitError {\n  constructor(message?: string) {\n    super(13, message ?? 'unable to negotiate');\n  }\n}\n\nexport class PublishDataError extends LivekitError {\n  constructor(message?: string) {\n    super(13, message ?? 'unable to publish data');\n  }\n}\n\nexport enum MediaDeviceFailure {\n  // user rejected permissions\n  PermissionDenied = 'PermissionDenied',\n  // device is not available\n  NotFound = 'NotFound',\n  // device is in use. On Windows, only a single tab may get access to a device at a time.\n  DeviceInUse = 'DeviceInUse',\n  Other = 'Other',\n}\n\nexport namespace MediaDeviceFailure {\n  export function getFailure(error: any): MediaDeviceFailure | undefined {\n    if (error && 'name' in error) {\n      if (error.name === 'NotFoundError' || error.name === 'DevicesNotFoundError') {\n        return MediaDeviceFailure.NotFound;\n      }\n      if (error.name === 'NotAllowedError' || error.name === 'PermissionDeniedError') {\n        return MediaDeviceFailure.PermissionDenied;\n      }\n      if (error.name === 'NotReadableError' || error.name === 'TrackStartError') {\n        return MediaDeviceFailure.DeviceInUse;\n      }\n      return MediaDeviceFailure.Other;\n    }\n  }\n}\n","import { LivekitError } from '../room/errors';\n\nexport enum CryptorErrorReason {\n  InvalidKey = 0,\n  MissingKey = 1,\n  InternalError = 2,\n}\n\nexport class CryptorError extends LivekitError {\n  reason: CryptorErrorReason;\n\n  constructor(message?: string, reason: CryptorErrorReason = CryptorErrorReason.InternalError) {\n    super(40, message);\n    this.reason = reason;\n  }\n}\n","// Copyright Joyent, Inc. and other Node contributors.\n//\n// Permission is hereby granted, free of charge, to any person obtaining a\n// copy of this software and associated documentation files (the\n// \"Software\"), to deal in the Software without restriction, including\n// without limitation the rights to use, copy, modify, merge, publish,\n// distribute, sublicense, and/or sell copies of the Software, and to permit\n// persons to whom the Software is furnished to do so, subject to the\n// following conditions:\n//\n// The above copyright notice and this permission notice shall be included\n// in all copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS\n// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\n// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN\n// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,\n// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR\n// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE\n// USE OR OTHER DEALINGS IN THE SOFTWARE.\n\n'use strict';\n\nvar R = typeof Reflect === 'object' ? Reflect : null\nvar ReflectApply = R && typeof R.apply === 'function'\n  ? R.apply\n  : function ReflectApply(target, receiver, args) {\n    return Function.prototype.apply.call(target, receiver, args);\n  }\n\nvar ReflectOwnKeys\nif (R && typeof R.ownKeys === 'function') {\n  ReflectOwnKeys = R.ownKeys\n} else if (Object.getOwnPropertySymbols) {\n  ReflectOwnKeys = function ReflectOwnKeys(target) {\n    return Object.getOwnPropertyNames(target)\n      .concat(Object.getOwnPropertySymbols(target));\n  };\n} else {\n  ReflectOwnKeys = function ReflectOwnKeys(target) {\n    return Object.getOwnPropertyNames(target);\n  };\n}\n\nfunction ProcessEmitWarning(warning) {\n  if (console && console.warn) console.warn(warning);\n}\n\nvar NumberIsNaN = Number.isNaN || function NumberIsNaN(value) {\n  return value !== value;\n}\n\nfunction EventEmitter() {\n  EventEmitter.init.call(this);\n}\nmodule.exports = EventEmitter;\nmodule.exports.once = once;\n\n// Backwards-compat with node 0.10.x\nEventEmitter.EventEmitter = EventEmitter;\n\nEventEmitter.prototype._events = undefined;\nEventEmitter.prototype._eventsCount = 0;\nEventEmitter.prototype._maxListeners = undefined;\n\n// By default EventEmitters will print a warning if more than 10 listeners are\n// added to it. This is a useful default which helps finding memory leaks.\nvar defaultMaxListeners = 10;\n\nfunction checkListener(listener) {\n  if (typeof listener !== 'function') {\n    throw new TypeError('The \"listener\" argument must be of type Function. Received type ' + typeof listener);\n  }\n}\n\nObject.defineProperty(EventEmitter, 'defaultMaxListeners', {\n  enumerable: true,\n  get: function() {\n    return defaultMaxListeners;\n  },\n  set: function(arg) {\n    if (typeof arg !== 'number' || arg < 0 || NumberIsNaN(arg)) {\n      throw new RangeError('The value of \"defaultMaxListeners\" is out of range. It must be a non-negative number. Received ' + arg + '.');\n    }\n    defaultMaxListeners = arg;\n  }\n});\n\nEventEmitter.init = function() {\n\n  if (this._events === undefined ||\n      this._events === Object.getPrototypeOf(this)._events) {\n    this._events = Object.create(null);\n    this._eventsCount = 0;\n  }\n\n  this._maxListeners = this._maxListeners || undefined;\n};\n\n// Obviously not all Emitters should be limited to 10. This function allows\n// that to be increased. Set to zero for unlimited.\nEventEmitter.prototype.setMaxListeners = function setMaxListeners(n) {\n  if (typeof n !== 'number' || n < 0 || NumberIsNaN(n)) {\n    throw new RangeError('The value of \"n\" is out of range. It must be a non-negative number. Received ' + n + '.');\n  }\n  this._maxListeners = n;\n  return this;\n};\n\nfunction _getMaxListeners(that) {\n  if (that._maxListeners === undefined)\n    return EventEmitter.defaultMaxListeners;\n  return that._maxListeners;\n}\n\nEventEmitter.prototype.getMaxListeners = function getMaxListeners() {\n  return _getMaxListeners(this);\n};\n\nEventEmitter.prototype.emit = function emit(type) {\n  var args = [];\n  for (var i = 1; i < arguments.length; i++) args.push(arguments[i]);\n  var doError = (type === 'error');\n\n  var events = this._events;\n  if (events !== undefined)\n    doError = (doError && events.error === undefined);\n  else if (!doError)\n    return false;\n\n  // If there is no 'error' event listener then throw.\n  if (doError) {\n    var er;\n    if (args.length > 0)\n      er = args[0];\n    if (er instanceof Error) {\n      // Note: The comments on the `throw` lines are intentional, they show\n      // up in Node's output if this results in an unhandled exception.\n      throw er; // Unhandled 'error' event\n    }\n    // At least give some kind of context to the user\n    var err = new Error('Unhandled error.' + (er ? ' (' + er.message + ')' : ''));\n    err.context = er;\n    throw err; // Unhandled 'error' event\n  }\n\n  var handler = events[type];\n\n  if (handler === undefined)\n    return false;\n\n  if (typeof handler === 'function') {\n    ReflectApply(handler, this, args);\n  } else {\n    var len = handler.length;\n    var listeners = arrayClone(handler, len);\n    for (var i = 0; i < len; ++i)\n      ReflectApply(listeners[i], this, args);\n  }\n\n  return true;\n};\n\nfunction _addListener(target, type, listener, prepend) {\n  var m;\n  var events;\n  var existing;\n\n  checkListener(listener);\n\n  events = target._events;\n  if (events === undefined) {\n    events = target._events = Object.create(null);\n    target._eventsCount = 0;\n  } else {\n    // To avoid recursion in the case that type === \"newListener\"! Before\n    // adding it to the listeners, first emit \"newListener\".\n    if (events.newListener !== undefined) {\n      target.emit('newListener', type,\n                  listener.listener ? listener.listener : listener);\n\n      // Re-assign `events` because a newListener handler could have caused the\n      // this._events to be assigned to a new object\n      events = target._events;\n    }\n    existing = events[type];\n  }\n\n  if (existing === undefined) {\n    // Optimize the case of one listener. Don't need the extra array object.\n    existing = events[type] = listener;\n    ++target._eventsCount;\n  } else {\n    if (typeof existing === 'function') {\n      // Adding the second element, need to change to array.\n      existing = events[type] =\n        prepend ? [listener, existing] : [existing, listener];\n      // If we've already got an array, just append.\n    } else if (prepend) {\n      existing.unshift(listener);\n    } else {\n      existing.push(listener);\n    }\n\n    // Check for listener leak\n    m = _getMaxListeners(target);\n    if (m > 0 && existing.length > m && !existing.warned) {\n      existing.warned = true;\n      // No error code for this since it is a Warning\n      // eslint-disable-next-line no-restricted-syntax\n      var w = new Error('Possible EventEmitter memory leak detected. ' +\n                          existing.length + ' ' + String(type) + ' listeners ' +\n                          'added. Use emitter.setMaxListeners() to ' +\n                          'increase limit');\n      w.name = 'MaxListenersExceededWarning';\n      w.emitter = target;\n      w.type = type;\n      w.count = existing.length;\n      ProcessEmitWarning(w);\n    }\n  }\n\n  return target;\n}\n\nEventEmitter.prototype.addListener = function addListener(type, listener) {\n  return _addListener(this, type, listener, false);\n};\n\nEventEmitter.prototype.on = EventEmitter.prototype.addListener;\n\nEventEmitter.prototype.prependListener =\n    function prependListener(type, listener) {\n      return _addListener(this, type, listener, true);\n    };\n\nfunction onceWrapper() {\n  if (!this.fired) {\n    this.target.removeListener(this.type, this.wrapFn);\n    this.fired = true;\n    if (arguments.length === 0)\n      return this.listener.call(this.target);\n    return this.listener.apply(this.target, arguments);\n  }\n}\n\nfunction _onceWrap(target, type, listener) {\n  var state = { fired: false, wrapFn: undefined, target: target, type: type, listener: listener };\n  var wrapped = onceWrapper.bind(state);\n  wrapped.listener = listener;\n  state.wrapFn = wrapped;\n  return wrapped;\n}\n\nEventEmitter.prototype.once = function once(type, listener) {\n  checkListener(listener);\n  this.on(type, _onceWrap(this, type, listener));\n  return this;\n};\n\nEventEmitter.prototype.prependOnceListener =\n    function prependOnceListener(type, listener) {\n      checkListener(listener);\n      this.prependListener(type, _onceWrap(this, type, listener));\n      return this;\n    };\n\n// Emits a 'removeListener' event if and only if the listener was removed.\nEventEmitter.prototype.removeListener =\n    function removeListener(type, listener) {\n      var list, events, position, i, originalListener;\n\n      checkListener(listener);\n\n      events = this._events;\n      if (events === undefined)\n        return this;\n\n      list = events[type];\n      if (list === undefined)\n        return this;\n\n      if (list === listener || list.listener === listener) {\n        if (--this._eventsCount === 0)\n          this._events = Object.create(null);\n        else {\n          delete events[type];\n          if (events.removeListener)\n            this.emit('removeListener', type, list.listener || listener);\n        }\n      } else if (typeof list !== 'function') {\n        position = -1;\n\n        for (i = list.length - 1; i >= 0; i--) {\n          if (list[i] === listener || list[i].listener === listener) {\n            originalListener = list[i].listener;\n            position = i;\n            break;\n          }\n        }\n\n        if (position < 0)\n          return this;\n\n        if (position === 0)\n          list.shift();\n        else {\n          spliceOne(list, position);\n        }\n\n        if (list.length === 1)\n          events[type] = list[0];\n\n        if (events.removeListener !== undefined)\n          this.emit('removeListener', type, originalListener || listener);\n      }\n\n      return this;\n    };\n\nEventEmitter.prototype.off = EventEmitter.prototype.removeListener;\n\nEventEmitter.prototype.removeAllListeners =\n    function removeAllListeners(type) {\n      var listeners, events, i;\n\n      events = this._events;\n      if (events === undefined)\n        return this;\n\n      // not listening for removeListener, no need to emit\n      if (events.removeListener === undefined) {\n        if (arguments.length === 0) {\n          this._events = Object.create(null);\n          this._eventsCount = 0;\n        } else if (events[type] !== undefined) {\n          if (--this._eventsCount === 0)\n            this._events = Object.create(null);\n          else\n            delete events[type];\n        }\n        return this;\n      }\n\n      // emit removeListener for all listeners on all events\n      if (arguments.length === 0) {\n        var keys = Object.keys(events);\n        var key;\n        for (i = 0; i < keys.length; ++i) {\n          key = keys[i];\n          if (key === 'removeListener') continue;\n          this.removeAllListeners(key);\n        }\n        this.removeAllListeners('removeListener');\n        this._events = Object.create(null);\n        this._eventsCount = 0;\n        return this;\n      }\n\n      listeners = events[type];\n\n      if (typeof listeners === 'function') {\n        this.removeListener(type, listeners);\n      } else if (listeners !== undefined) {\n        // LIFO order\n        for (i = listeners.length - 1; i >= 0; i--) {\n          this.removeListener(type, listeners[i]);\n        }\n      }\n\n      return this;\n    };\n\nfunction _listeners(target, type, unwrap) {\n  var events = target._events;\n\n  if (events === undefined)\n    return [];\n\n  var evlistener = events[type];\n  if (evlistener === undefined)\n    return [];\n\n  if (typeof evlistener === 'function')\n    return unwrap ? [evlistener.listener || evlistener] : [evlistener];\n\n  return unwrap ?\n    unwrapListeners(evlistener) : arrayClone(evlistener, evlistener.length);\n}\n\nEventEmitter.prototype.listeners = function listeners(type) {\n  return _listeners(this, type, true);\n};\n\nEventEmitter.prototype.rawListeners = function rawListeners(type) {\n  return _listeners(this, type, false);\n};\n\nEventEmitter.listenerCount = function(emitter, type) {\n  if (typeof emitter.listenerCount === 'function') {\n    return emitter.listenerCount(type);\n  } else {\n    return listenerCount.call(emitter, type);\n  }\n};\n\nEventEmitter.prototype.listenerCount = listenerCount;\nfunction listenerCount(type) {\n  var events = this._events;\n\n  if (events !== undefined) {\n    var evlistener = events[type];\n\n    if (typeof evlistener === 'function') {\n      return 1;\n    } else if (evlistener !== undefined) {\n      return evlistener.length;\n    }\n  }\n\n  return 0;\n}\n\nEventEmitter.prototype.eventNames = function eventNames() {\n  return this._eventsCount > 0 ? ReflectOwnKeys(this._events) : [];\n};\n\nfunction arrayClone(arr, n) {\n  var copy = new Array(n);\n  for (var i = 0; i < n; ++i)\n    copy[i] = arr[i];\n  return copy;\n}\n\nfunction spliceOne(list, index) {\n  for (; index + 1 < list.length; index++)\n    list[index] = list[index + 1];\n  list.pop();\n}\n\nfunction unwrapListeners(arr) {\n  var ret = new Array(arr.length);\n  for (var i = 0; i < ret.length; ++i) {\n    ret[i] = arr[i].listener || arr[i];\n  }\n  return ret;\n}\n\nfunction once(emitter, name) {\n  return new Promise(function (resolve, reject) {\n    function errorListener(err) {\n      emitter.removeListener(name, resolver);\n      reject(err);\n    }\n\n    function resolver() {\n      if (typeof emitter.removeListener === 'function') {\n        emitter.removeListener('error', errorListener);\n      }\n      resolve([].slice.call(arguments));\n    };\n\n    eventTargetAgnosticAddListener(emitter, name, resolver, { once: true });\n    if (name !== 'error') {\n      addErrorHandlerIfEventEmitter(emitter, errorListener, { once: true });\n    }\n  });\n}\n\nfunction addErrorHandlerIfEventEmitter(emitter, handler, flags) {\n  if (typeof emitter.on === 'function') {\n    eventTargetAgnosticAddListener(emitter, 'error', handler, flags);\n  }\n}\n\nfunction eventTargetAgnosticAddListener(emitter, name, listener, flags) {\n  if (typeof emitter.on === 'function') {\n    if (flags.once) {\n      emitter.once(name, listener);\n    } else {\n      emitter.on(name, listener);\n    }\n  } else if (typeof emitter.addEventListener === 'function') {\n    // EventTarget does not have `error` event semantics like Node\n    // EventEmitters, we do not listen for `error` events here.\n    emitter.addEventListener(name, function wrapListener(arg) {\n      // IE does not have builtin `{ once: true }` support so we\n      // have to do it manually.\n      if (flags.once) {\n        emitter.removeEventListener(name, wrapListener);\n      }\n      listener(arg);\n    });\n  } else {\n    throw new TypeError('The \"emitter\" argument must be of type EventEmitter. Received type ' + typeof emitter);\n  }\n}\n","import type Participant from '../room/participant/Participant';\nimport type { VideoCodec } from '../room/track/options';\nimport type { BaseKeyProvider } from './KeyProvider';\nimport type { CryptorError } from './errors';\n\nexport interface BaseMessage {\n  kind: string;\n  data?: unknown;\n}\n\nexport interface InitMessage extends BaseMessage {\n  kind: 'init';\n  data: {\n    keyProviderOptions: KeyProviderOptions;\n  };\n}\n\nexport interface SetKeyMessage extends BaseMessage {\n  kind: 'setKey';\n  data: {\n    participantId?: string;\n    key: CryptoKey;\n    keyIndex?: number;\n  };\n}\n\nexport interface RTPVideoMapMessage extends BaseMessage {\n  kind: 'setRTPMap';\n  data: {\n    map: Map<number, VideoCodec>;\n  };\n}\n\nexport interface EncodeMessage extends BaseMessage {\n  kind: 'decode' | 'encode';\n  data: {\n    participantId: string;\n    readableStream: ReadableStream;\n    writableStream: WritableStream;\n    trackId: string;\n    codec?: VideoCodec;\n  };\n}\n\nexport interface RemoveTransformMessage extends BaseMessage {\n  kind: 'removeTransform';\n  data: {\n    participantId: string;\n    trackId: string;\n  };\n}\n\nexport interface UpdateCodecMessage extends BaseMessage {\n  kind: 'updateCodec';\n  data: {\n    participantId: string;\n    trackId: string;\n    codec: VideoCodec;\n  };\n}\n\nexport interface RatchetRequestMessage extends BaseMessage {\n  kind: 'ratchetRequest';\n  data: {\n    participantId: string | undefined;\n    keyIndex?: number;\n  };\n}\n\nexport interface RatchetMessage extends BaseMessage {\n  kind: 'ratchetKey';\n  data: {\n    // participantId: string | undefined;\n    keyIndex?: number;\n    material: CryptoKey;\n  };\n}\n\nexport interface ErrorMessage extends BaseMessage {\n  kind: 'error';\n  data: {\n    error: Error;\n  };\n}\n\nexport interface EnableMessage extends BaseMessage {\n  kind: 'enable';\n  data: {\n    // if no participant id is set it indicates publisher encryption enable/disable\n    participantId?: string;\n    enabled: boolean;\n  };\n}\n\nexport type E2EEWorkerMessage =\n  | InitMessage\n  | SetKeyMessage\n  | EncodeMessage\n  | ErrorMessage\n  | EnableMessage\n  | RemoveTransformMessage\n  | RTPVideoMapMessage\n  | UpdateCodecMessage\n  | RatchetRequestMessage\n  | RatchetMessage;\n\nexport type KeySet = { material: CryptoKey; encryptionKey: CryptoKey };\n\nexport type KeyProviderOptions = {\n  sharedKey: boolean;\n  ratchetSalt: string;\n  ratchetWindowSize: number;\n  failureTolerance: number;\n};\n\nexport type KeyProviderCallbacks = {\n  setKey: (keyInfo: KeyInfo) => void;\n  ratchetRequest: (participantId?: string, keyIndex?: number) => void;\n  /** currently only emitted for local participant */\n  keyRatcheted: (material: CryptoKey, keyIndex?: number) => void;\n};\n\nexport type ParticipantKeyHandlerCallbacks = {\n  keyRatcheted: (material: CryptoKey, keyIndex?: number, participantId?: string) => void;\n};\n\nexport type E2EEManagerCallbacks = {\n  participantEncryptionStatusChanged: (enabled: boolean, participant?: Participant) => void;\n  encryptionError: (error: Error) => void;\n};\n\nexport const EncryptionEvent = {\n  ParticipantEncryptionStatusChanged: 'participantEncryptionStatusChanged',\n  Error: 'encryptionError',\n} as const;\n\nexport type CryptorCallbacks = {\n  cryptorError: (error: CryptorError) => void;\n};\n\nexport const CryptorEvent = {\n  Error: 'cryptorError',\n} as const;\n\nexport type KeyInfo = {\n  key: CryptoKey;\n  participantId?: string;\n  keyIndex?: number;\n};\n\nexport type E2EEOptions = {\n  keyProvider: BaseKeyProvider;\n  worker: Worker;\n};\n\nexport type DecodeRatchetOptions = {\n  /** attempts  */\n  ratchetCount: number;\n  /** ratcheted key to try */\n  encryptionKey?: CryptoKey;\n};\n","import type { Track } from './Track';\n\nexport interface TrackPublishDefaults {\n  /**\n   * encoding parameters for camera track\n   */\n  videoEncoding?: VideoEncoding;\n\n  /**\n   * @experimental\n   */\n  backupCodec?: { codec: BackupVideoCodec; encoding: VideoEncoding } | false;\n\n  /**\n   * encoding parameters for screen share track\n   */\n  screenShareEncoding?: VideoEncoding;\n\n  /**\n   * codec, defaults to vp8; for svc codecs, auto enable vp8\n   * as backup. (TBD)\n   */\n  videoCodec?: VideoCodec;\n\n  /**\n   * max audio bitrate, defaults to [[AudioPresets.music]]\n   * @deprecated use `audioPreset` instead\n   */\n  audioBitrate?: number;\n\n  /**\n   * which audio preset should be used for publishing (audio) tracks\n   * defaults to [[AudioPresets.music]]\n   */\n  audioPreset?: AudioPreset;\n\n  /**\n   * dtx (Discontinuous Transmission of audio), enabled by default for mono tracks.\n   */\n  dtx?: boolean;\n\n  /**\n   * red (Redundant Audio Data), enabled by default for mono tracks.\n   */\n  red?: boolean;\n\n  /**\n   * publish track in stereo mode (or set to false to disable). defaults determined by capture channel count.\n   */\n  forceStereo?: boolean;\n\n  /**\n   * use simulcast, defaults to true.\n   * When using simulcast, LiveKit will publish up to three versions of the stream\n   * at various resolutions.\n   */\n  simulcast?: boolean;\n\n  /**\n   * scalability mode for svc codecs, defaults to 'L3T3'.\n   * for svc codecs, simulcast is disabled.\n   */\n  scalabilityMode?: ScalabilityMode;\n\n  /**\n   * Up to two additional simulcast layers to publish in addition to the original\n   * Track.\n   * When left blank, it defaults to h180, h360.\n   * If a SVC codec is used (VP9 or AV1), this field has no effect.\n   *\n   * To publish three total layers, you would specify:\n   * {\n   *   videoEncoding: {...}, // encoding of the primary layer\n   *   videoSimulcastLayers: [\n   *     VideoPresets.h540,\n   *     VideoPresets.h216,\n   *   ],\n   * }\n   */\n  videoSimulcastLayers?: Array<VideoPreset>;\n\n  /**\n   * custom video simulcast layers for screen tracks\n   * Note: the layers need to be ordered from lowest to highest quality\n   */\n  screenShareSimulcastLayers?: Array<VideoPreset>;\n\n  /**\n   * For local tracks, stop the underlying MediaStreamTrack when the track is muted (or paused)\n   * on some platforms, this option is necessary to disable the microphone recording indicator.\n   * Note: when this is enabled, and BT devices are connected, they will transition between\n   * profiles (e.g. HFP to A2DP) and there will be an audible difference in playback.\n   *\n   * defaults to false\n   */\n  stopMicTrackOnMute?: boolean;\n}\n\n/**\n * Options when publishing tracks\n */\nexport interface TrackPublishOptions extends TrackPublishDefaults {\n  /**\n   * set a track name\n   */\n  name?: string;\n\n  /**\n   * Source of track, camera, microphone, or screen\n   */\n  source?: Track.Source;\n}\n\nexport interface CreateLocalTracksOptions {\n  /**\n   * audio track options, true to create with defaults. false if audio shouldn't be created\n   * default true\n   */\n  audio?: boolean | AudioCaptureOptions;\n\n  /**\n   * video track options, true to create with defaults. false if video shouldn't be created\n   * default true\n   */\n  video?: boolean | VideoCaptureOptions;\n}\n\nexport interface VideoCaptureOptions {\n  /**\n   * A ConstrainDOMString object specifying a device ID or an array of device\n   * IDs which are acceptable and/or required.\n   */\n  deviceId?: ConstrainDOMString;\n\n  /**\n   * a facing or an array of facings which are acceptable and/or required.\n   */\n  facingMode?: 'user' | 'environment' | 'left' | 'right';\n\n  resolution?: VideoResolution;\n}\n\nexport interface ScreenShareCaptureOptions {\n  /**\n   * true to capture audio shared. browser support for audio capturing in\n   * screenshare is limited: https://developer.mozilla.org/en-US/docs/Web/API/MediaDevices/getDisplayMedia#browser_compatibility\n   */\n  audio?: boolean | AudioCaptureOptions;\n\n  /**\n   * only allows for 'true' and chrome allows for additional options to be passed in\n   * https://developer.chrome.com/docs/web-platform/screen-sharing-controls/#displaySurface\n   */\n  video?: true | { displaySurface?: 'window' | 'browser' | 'monitor' };\n\n  /** capture resolution, defaults to full HD */\n  resolution?: VideoResolution;\n\n  /** a CaptureController object instance containing methods that can be used to further manipulate the capture session if included. */\n  controller?: unknown; // TODO replace type with CaptureController once it lands in TypeScript\n\n  /** specifies whether the browser should allow the user to select the current tab for capture */\n  selfBrowserSurface?: 'include' | 'exclude';\n\n  /** specifies whether the browser should display a control to allow the user to dynamically switch the shared tab during screen-sharing. */\n  surfaceSwitching?: 'include' | 'exclude';\n\n  /** specifies whether the browser should include the system audio among the possible audio sources offered to the user */\n  systemAudio?: 'include' | 'exclude';\n\n  /**\n   * Experimental option to control whether the audio playing in a tab will continue to be played out of a user's\n   * local speakers when the tab is captured.\n   */\n  suppressLocalAudioPlayback?: boolean;\n}\n\nexport interface AudioCaptureOptions {\n  /**\n   * specifies whether automatic gain control is preferred and/or required\n   */\n  autoGainControl?: ConstrainBoolean;\n\n  /**\n   * the channel count or range of channel counts which are acceptable and/or required\n   */\n  channelCount?: ConstrainULong;\n\n  /**\n   * A ConstrainDOMString object specifying a device ID or an array of device\n   * IDs which are acceptable and/or required.\n   */\n  deviceId?: ConstrainDOMString;\n\n  /**\n   * whether or not echo cancellation is preferred and/or required\n   */\n  echoCancellation?: ConstrainBoolean;\n\n  /**\n   * the latency or range of latencies which are acceptable and/or required.\n   */\n  latency?: ConstrainDouble;\n\n  /**\n   * whether noise suppression is preferred and/or required.\n   */\n  noiseSuppression?: ConstrainBoolean;\n\n  /**\n   * the sample rate or range of sample rates which are acceptable and/or required.\n   */\n  sampleRate?: ConstrainULong;\n\n  /**\n   * sample size or range of sample sizes which are acceptable and/or required.\n   */\n  sampleSize?: ConstrainULong;\n}\n\nexport interface AudioOutputOptions {\n  /**\n   * deviceId to output audio\n   *\n   * Only supported on browsers where `setSinkId` is available\n   */\n  deviceId?: string;\n}\n\nexport interface VideoResolution {\n  width: number;\n  height: number;\n  frameRate?: number;\n  aspectRatio?: number;\n}\n\nexport interface VideoEncoding {\n  maxBitrate: number;\n  maxFramerate?: number;\n  priority?: RTCPriorityType;\n}\n\nexport class VideoPreset {\n  encoding: VideoEncoding;\n\n  width: number;\n\n  height: number;\n\n  constructor(\n    width: number,\n    height: number,\n    maxBitrate: number,\n    maxFramerate?: number,\n    priority?: RTCPriorityType,\n  ) {\n    this.width = width;\n    this.height = height;\n    this.encoding = {\n      maxBitrate,\n      maxFramerate,\n      priority,\n    };\n  }\n\n  get resolution(): VideoResolution {\n    return {\n      width: this.width,\n      height: this.height,\n      frameRate: this.encoding.maxFramerate,\n      aspectRatio: this.width / this.height,\n    };\n  }\n}\n\nexport interface AudioPreset {\n  maxBitrate: number;\n  priority?: RTCPriorityType;\n}\n\nconst backupCodecs = ['vp8', 'h264'] as const;\n\nexport const videoCodecs = ['vp8', 'h264', 'vp9', 'av1'] as const;\n\nexport type VideoCodec = (typeof videoCodecs)[number];\n\nexport type BackupVideoCodec = (typeof backupCodecs)[number];\n\nexport function isBackupCodec(codec: string): codec is BackupVideoCodec {\n  return !!backupCodecs.find((backup) => backup === codec);\n}\n\nexport function isCodecEqual(c1: string | undefined, c2: string | undefined): boolean {\n  return (\n    c1?.toLowerCase().replace(/audio\\/|video\\//y, '') ===\n    c2?.toLowerCase().replace(/audio\\/|video\\//y, '')\n  );\n}\n\n/**\n * scalability modes for svc, only supprot l3t3 now.\n */\nexport type ScalabilityMode = 'L3T3' | 'L3T3_KEY';\n\nexport namespace AudioPresets {\n  export const telephone: AudioPreset = {\n    maxBitrate: 12_000,\n  };\n  export const speech: AudioPreset = {\n    maxBitrate: 20_000,\n  };\n  export const music: AudioPreset = {\n    maxBitrate: 32_000,\n  };\n  export const musicStereo: AudioPreset = {\n    maxBitrate: 48_000,\n  };\n  export const musicHighQuality: AudioPreset = {\n    maxBitrate: 64_000,\n  };\n  export const musicHighQualityStereo: AudioPreset = {\n    maxBitrate: 96_000,\n  };\n}\n\n/**\n * Sane presets for video resolution/encoding\n */\nexport const VideoPresets = {\n  h90: new VideoPreset(160, 90, 60_000, 15),\n  h180: new VideoPreset(320, 180, 120_000, 15),\n  h216: new VideoPreset(384, 216, 180_000, 15),\n  h360: new VideoPreset(640, 360, 300_000, 20),\n  h540: new VideoPreset(960, 540, 600_000, 25),\n  h720: new VideoPreset(1280, 720, 1_700_000, 30),\n  h1080: new VideoPreset(1920, 1080, 3_000_000, 30),\n  h1440: new VideoPreset(2560, 1440, 5_000_000, 30),\n  h2160: new VideoPreset(3840, 2160, 8_000_000, 30),\n} as const;\n\n/**\n * Four by three presets\n */\nexport const VideoPresets43 = {\n  h120: new VideoPreset(160, 120, 80_000, 15),\n  h180: new VideoPreset(240, 180, 100_000, 15),\n  h240: new VideoPreset(320, 240, 150_000, 15),\n  h360: new VideoPreset(480, 360, 225_000, 20),\n  h480: new VideoPreset(640, 480, 300_000, 20),\n  h540: new VideoPreset(720, 540, 450_000, 25),\n  h720: new VideoPreset(960, 720, 1_500_000, 30),\n  h1080: new VideoPreset(1440, 1080, 2_500_000, 30),\n  h1440: new VideoPreset(1920, 1440, 3_500_000, 30),\n} as const;\n\nexport const ScreenSharePresets = {\n  h360fps3: new VideoPreset(640, 360, 200_000, 3, 'medium'),\n  h720fps5: new VideoPreset(1280, 720, 400_000, 5, 'medium'),\n  h720fps15: new VideoPreset(1280, 720, 1_000_000, 15, 'medium'),\n  h1080fps15: new VideoPreset(1920, 1080, 1_500_000, 15, 'medium'),\n  h1080fps30: new VideoPreset(1920, 1080, 3_000_000, 30, 'medium'),\n} as const;\n","import { videoCodecs } from '../room/track/options';\nimport type { VideoCodec } from '../room/track/options';\nimport { ENCRYPTION_ALGORITHM } from './constants';\n\nexport function isE2EESupported() {\n  return isInsertableStreamSupported() || isScriptTransformSupported();\n}\n\nexport function isScriptTransformSupported() {\n  // @ts-ignore\n  return typeof window.RTCRtpScriptTransform !== 'undefined';\n}\n\nexport function isInsertableStreamSupported() {\n  return (\n    typeof window.RTCRtpSender !== 'undefined' &&\n    // @ts-ignore\n    typeof window.RTCRtpSender.prototype.createEncodedStreams !== 'undefined'\n  );\n}\n\nexport function isVideoFrame(\n  frame: RTCEncodedAudioFrame | RTCEncodedVideoFrame,\n): frame is RTCEncodedVideoFrame {\n  return 'type' in frame;\n}\n\nexport async function importKey(\n  keyBytes: Uint8Array | ArrayBuffer,\n  algorithm: string | { name: string } = { name: ENCRYPTION_ALGORITHM },\n  usage: 'derive' | 'encrypt' = 'encrypt',\n) {\n  // https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey\n  return crypto.subtle.importKey(\n    'raw',\n    keyBytes,\n    algorithm,\n    false,\n    usage === 'derive' ? ['deriveBits', 'deriveKey'] : ['encrypt', 'decrypt'],\n  );\n}\n\nexport async function createKeyMaterialFromString(password: string) {\n  let enc = new TextEncoder();\n\n  const keyMaterial = await crypto.subtle.importKey(\n    'raw',\n    enc.encode(password),\n    {\n      name: 'PBKDF2',\n    },\n    false,\n    ['deriveBits', 'deriveKey'],\n  );\n\n  return keyMaterial;\n}\n\nfunction getAlgoOptions(algorithmName: string, salt: string) {\n  const textEncoder = new TextEncoder();\n  const encodedSalt = textEncoder.encode(salt);\n  switch (algorithmName) {\n    case 'HKDF':\n      return {\n        name: 'HKDF',\n        salt: encodedSalt,\n        hash: 'SHA-256',\n        info: new ArrayBuffer(128),\n      };\n    case 'PBKDF2': {\n      return {\n        name: 'PBKDF2',\n        salt: encodedSalt,\n        hash: 'SHA-256',\n        iterations: 100000,\n      };\n    }\n    default:\n      throw new Error(`algorithm ${algorithmName} is currently unsupported`);\n  }\n}\n\n/**\n * Derives a set of keys from the master key.\n * See https://tools.ietf.org/html/draft-omara-sframe-00#section-4.3.1\n */\nexport async function deriveKeys(material: CryptoKey, salt: string) {\n  const algorithmOptions = getAlgoOptions(material.algorithm.name, salt);\n\n  // https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/deriveKey#HKDF\n  // https://developer.mozilla.org/en-US/docs/Web/API/HkdfParams\n  const encryptionKey = await crypto.subtle.deriveKey(\n    algorithmOptions,\n    material,\n    {\n      name: ENCRYPTION_ALGORITHM,\n      length: 128,\n    },\n    false,\n    ['encrypt', 'decrypt'],\n  );\n\n  return { material, encryptionKey };\n}\n\nexport function createE2EEKey(): Uint8Array {\n  return window.crypto.getRandomValues(new Uint8Array(32));\n}\n\nexport function mimeTypeToVideoCodecString(mimeType: string) {\n  const codec = mimeType.split('/')[1].toLowerCase() as VideoCodec;\n  if (!videoCodecs.includes(codec)) {\n    throw Error(`Video codec not supported: ${codec}`);\n  }\n  return codec;\n}\n\n/**\n * Ratchets a key. See\n * https://tools.ietf.org/html/draft-omara-sframe-00#section-4.3.5.1\n */\nexport async function ratchet(material: CryptoKey, salt: string): Promise<ArrayBuffer> {\n  const algorithmOptions = getAlgoOptions(material.algorithm.name, salt);\n\n  // https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/deriveBits\n  return crypto.subtle.deriveBits(algorithmOptions, material, 256);\n}\n","/* eslint-disable @typescript-eslint/no-unused-vars */\n// TODO code inspired by https://github.com/webrtc/samples/blob/gh-pages/src/content/insertable-streams/endtoend-encryption/js/worker.js\nimport { EventEmitter } from 'events';\nimport type TypedEventEmitter from 'typed-emitter';\nimport { workerLogger } from '../../logger';\nimport type { VideoCodec } from '../../room/track/options';\nimport { ENCRYPTION_ALGORITHM, IV_LENGTH, UNENCRYPTED_BYTES } from '../constants';\nimport { CryptorError, CryptorErrorReason } from '../errors';\nimport {\n  CryptorCallbacks,\n  CryptorEvent,\n  DecodeRatchetOptions,\n  KeyProviderOptions,\n  KeySet,\n} from '../types';\nimport { deriveKeys, isVideoFrame } from '../utils';\nimport type { ParticipantKeyHandler } from './ParticipantKeyHandler';\n\nexport interface FrameCryptorConstructor {\n  new (opts?: unknown): BaseFrameCryptor;\n}\n\nexport interface TransformerInfo {\n  readable: ReadableStream;\n  writable: WritableStream;\n  transformer: TransformStream;\n  abortController: AbortController;\n}\n\nexport class BaseFrameCryptor extends (EventEmitter as new () => TypedEventEmitter<CryptorCallbacks>) {\n  encodeFunction(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    controller: TransformStreamDefaultController,\n  ): Promise<any> {\n    throw Error('not implemented for subclass');\n  }\n\n  decodeFunction(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    controller: TransformStreamDefaultController,\n  ): Promise<any> {\n    throw Error('not implemented for subclass');\n  }\n}\n\n/**\n * Cryptor is responsible for en-/decrypting media frames.\n * Each Cryptor instance is responsible for en-/decrypting a single mediaStreamTrack.\n */\nexport class FrameCryptor extends BaseFrameCryptor {\n  private sendCounts: Map<number, number>;\n\n  private participantId: string | undefined;\n\n  private trackId: string | undefined;\n\n  private keys: ParticipantKeyHandler;\n\n  private videoCodec?: VideoCodec;\n\n  private rtpMap: Map<number, VideoCodec>;\n\n  private keyProviderOptions: KeyProviderOptions;\n\n  /**\n   * used for detecting server injected unencrypted frames\n   */\n  private unencryptedFrameByteTrailer: Uint8Array;\n\n  constructor(opts: {\n    keys: ParticipantKeyHandler;\n    participantId: string;\n    keyProviderOptions: KeyProviderOptions;\n    unencryptedFrameBytes?: Uint8Array;\n  }) {\n    super();\n    this.sendCounts = new Map();\n    this.keys = opts.keys;\n    this.participantId = opts.participantId;\n    this.rtpMap = new Map();\n    this.keyProviderOptions = opts.keyProviderOptions;\n    this.unencryptedFrameByteTrailer =\n      opts.unencryptedFrameBytes ?? new TextEncoder().encode('LKROCKS');\n  }\n\n  /**\n   * Assign a different participant to the cryptor.\n   * useful for transceiver re-use\n   * @param id\n   * @param keys\n   */\n  setParticipant(id: string, keys: ParticipantKeyHandler) {\n    this.participantId = id;\n    this.keys = keys;\n  }\n\n  unsetParticipant() {\n    this.participantId = undefined;\n  }\n\n  getParticipantId() {\n    return this.participantId;\n  }\n\n  getTrackId() {\n    return this.trackId;\n  }\n\n  /**\n   * Update the video codec used by the mediaStreamTrack\n   * @param codec\n   */\n  setVideoCodec(codec: VideoCodec) {\n    this.videoCodec = codec;\n  }\n\n  /**\n   * rtp payload type map used for figuring out codec of payload type when encoding\n   * @param map\n   */\n  setRtpMap(map: Map<number, VideoCodec>) {\n    this.rtpMap = map;\n  }\n\n  setupTransform(\n    operation: 'encode' | 'decode',\n    readable: ReadableStream,\n    writable: WritableStream,\n    trackId: string,\n    codec?: VideoCodec,\n  ) {\n    if (codec) {\n      console.info('setting codec on cryptor to', codec);\n      this.videoCodec = codec;\n    }\n    const transformFn = operation === 'encode' ? this.encodeFunction : this.decodeFunction;\n    const transformStream = new TransformStream({\n      transform: transformFn.bind(this),\n    });\n\n    readable\n      .pipeThrough(transformStream)\n      .pipeTo(writable)\n      .catch((e) => {\n        console.error(e);\n        this.emit('cryptorError', e instanceof CryptorError ? e : new CryptorError(e.message));\n      });\n    this.trackId = trackId;\n  }\n\n  /**\n   * Function that will be injected in a stream and will encrypt the given encoded frames.\n   *\n   * @param {RTCEncodedVideoFrame|RTCEncodedAudioFrame} encodedFrame - Encoded video frame.\n   * @param {TransformStreamDefaultController} controller - TransportStreamController.\n   *\n   * The VP8 payload descriptor described in\n   * https://tools.ietf.org/html/rfc7741#section-4.2\n   * is part of the RTP packet and not part of the frame and is not controllable by us.\n   * This is fine as the SFU keeps having access to it for routing.\n   *\n   * The encrypted frame is formed as follows:\n   * 1) Find unencrypted byte length, depending on the codec, frame type and kind.\n   * 2) Form the GCM IV for the frame as described above.\n   * 3) Encrypt the rest of the frame using AES-GCM.\n   * 4) Allocate space for the encrypted frame.\n   * 5) Copy the unencrypted bytes to the start of the encrypted frame.\n   * 6) Append the ciphertext to the encrypted frame.\n   * 7) Append the IV.\n   * 8) Append a single byte for the key identifier.\n   * 9) Enqueue the encrypted frame for sending.\n   */\n  async encodeFunction(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    controller: TransformStreamDefaultController,\n  ) {\n    if (\n      !this.keys.isEnabled() ||\n      // skip for encryption for empty dtx frames\n      encodedFrame.data.byteLength === 0\n    ) {\n      return controller.enqueue(encodedFrame);\n    }\n\n    const { encryptionKey } = this.keys.getKeySet();\n    const keyIndex = this.keys.getCurrentKeyIndex();\n\n    if (encryptionKey) {\n      const iv = this.makeIV(\n        encodedFrame.getMetadata().synchronizationSource ?? -1,\n        encodedFrame.timestamp,\n      );\n\n      // Thіs is not encrypted and contains the VP8 payload descriptor or the Opus TOC byte.\n      const frameHeader = new Uint8Array(\n        encodedFrame.data,\n        0,\n        this.getUnencryptedBytes(encodedFrame),\n      );\n\n      // Frame trailer contains the R|IV_LENGTH and key index\n      const frameTrailer = new Uint8Array(2);\n\n      frameTrailer[0] = IV_LENGTH;\n      frameTrailer[1] = keyIndex;\n\n      // Construct frame trailer. Similar to the frame header described in\n      // https://tools.ietf.org/html/draft-omara-sframe-00#section-4.2\n      // but we put it at the end.\n      //\n      // ---------+-------------------------+-+---------+----\n      // payload  |IV...(length = IV_LENGTH)|R|IV_LENGTH|KID |\n      // ---------+-------------------------+-+---------+----\n      try {\n        const cipherText = await crypto.subtle.encrypt(\n          {\n            name: ENCRYPTION_ALGORITHM,\n            iv,\n            additionalData: new Uint8Array(encodedFrame.data, 0, frameHeader.byteLength),\n          },\n          encryptionKey,\n          new Uint8Array(encodedFrame.data, this.getUnencryptedBytes(encodedFrame)),\n        );\n\n        const newData = new ArrayBuffer(\n          frameHeader.byteLength + cipherText.byteLength + iv.byteLength + frameTrailer.byteLength,\n        );\n        const newUint8 = new Uint8Array(newData);\n\n        newUint8.set(frameHeader); // copy first bytes.\n        newUint8.set(new Uint8Array(cipherText), frameHeader.byteLength); // add ciphertext.\n        newUint8.set(new Uint8Array(iv), frameHeader.byteLength + cipherText.byteLength); // append IV.\n        newUint8.set(frameTrailer, frameHeader.byteLength + cipherText.byteLength + iv.byteLength); // append frame trailer.\n\n        encodedFrame.data = newData;\n\n        return controller.enqueue(encodedFrame);\n      } catch (e: any) {\n        // TODO: surface this to the app.\n        workerLogger.error(e);\n      }\n    } else {\n      this.emit(\n        CryptorEvent.Error,\n        new CryptorError(`encryption key missing for encoding`, CryptorErrorReason.MissingKey),\n      );\n    }\n  }\n\n  /**\n   * Function that will be injected in a stream and will decrypt the given encoded frames.\n   *\n   * @param {RTCEncodedVideoFrame|RTCEncodedAudioFrame} encodedFrame - Encoded video frame.\n   * @param {TransformStreamDefaultController} controller - TransportStreamController.\n   */\n  async decodeFunction(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    controller: TransformStreamDefaultController,\n  ) {\n    if (\n      !this.keys.isEnabled() ||\n      // skip for decryption for empty dtx frames\n      encodedFrame.data.byteLength === 0 ||\n      // skip decryption if frame is server injected\n      isFrameServerInjected(encodedFrame.data, this.unencryptedFrameByteTrailer)\n    ) {\n      return controller.enqueue(encodedFrame);\n    }\n    const data = new Uint8Array(encodedFrame.data);\n    const keyIndex = data[encodedFrame.data.byteLength - 1];\n\n    if (this.keys.getKeySet(keyIndex) && this.keys.hasValidKey) {\n      try {\n        const decodedFrame = await this.decryptFrame(encodedFrame, keyIndex);\n        this.keys.decryptionSuccess();\n        if (decodedFrame) {\n          return controller.enqueue(decodedFrame);\n        }\n      } catch (error) {\n        if (error instanceof CryptorError && error.reason === CryptorErrorReason.InvalidKey) {\n          if (this.keys.hasValidKey) {\n            workerLogger.warn('invalid key');\n            this.emit(\n              CryptorEvent.Error,\n              new CryptorError(\n                `invalid key for participant ${this.participantId}`,\n                CryptorErrorReason.InvalidKey,\n              ),\n            );\n            this.keys.decryptionFailure();\n          }\n        } else {\n          workerLogger.warn('decoding frame failed', { error });\n        }\n      }\n    }\n\n    return controller.enqueue(encodedFrame);\n  }\n\n  /**\n   * Function that will decrypt the given encoded frame. If the decryption fails, it will\n   * ratchet the key for up to RATCHET_WINDOW_SIZE times.\n   */\n  async decryptFrame(\n    encodedFrame: RTCEncodedVideoFrame | RTCEncodedAudioFrame,\n    keyIndex: number,\n    initialMaterial: KeySet | undefined = undefined,\n    ratchetOpts: DecodeRatchetOptions = { ratchetCount: 0 },\n  ): Promise<RTCEncodedVideoFrame | RTCEncodedAudioFrame | undefined> {\n    const keySet = this.keys.getKeySet(keyIndex);\n\n    // Construct frame trailer. Similar to the frame header described in\n    // https://tools.ietf.org/html/draft-omara-sframe-00#section-4.2\n    // but we put it at the end.\n    //\n    // ---------+-------------------------+-+---------+----\n    // payload  |IV...(length = IV_LENGTH)|R|IV_LENGTH|KID |\n    // ---------+-------------------------+-+---------+----\n\n    try {\n      const frameHeader = new Uint8Array(\n        encodedFrame.data,\n        0,\n        this.getUnencryptedBytes(encodedFrame),\n      );\n      const frameTrailer = new Uint8Array(encodedFrame.data, encodedFrame.data.byteLength - 2, 2);\n\n      const ivLength = frameTrailer[0];\n      const iv = new Uint8Array(\n        encodedFrame.data,\n        encodedFrame.data.byteLength - ivLength - frameTrailer.byteLength,\n        ivLength,\n      );\n\n      const cipherTextStart = frameHeader.byteLength;\n      const cipherTextLength =\n        encodedFrame.data.byteLength -\n        (frameHeader.byteLength + ivLength + frameTrailer.byteLength);\n\n      const plainText = await crypto.subtle.decrypt(\n        {\n          name: ENCRYPTION_ALGORITHM,\n          iv,\n          additionalData: new Uint8Array(encodedFrame.data, 0, frameHeader.byteLength),\n        },\n        ratchetOpts.encryptionKey ?? keySet.encryptionKey,\n        new Uint8Array(encodedFrame.data, cipherTextStart, cipherTextLength),\n      );\n\n      const newData = new ArrayBuffer(frameHeader.byteLength + plainText.byteLength);\n      const newUint8 = new Uint8Array(newData);\n\n      newUint8.set(new Uint8Array(encodedFrame.data, 0, frameHeader.byteLength));\n      newUint8.set(new Uint8Array(plainText), frameHeader.byteLength);\n\n      encodedFrame.data = newData;\n\n      return encodedFrame;\n    } catch (error: any) {\n      if (this.keyProviderOptions.ratchetWindowSize > 0) {\n        if (ratchetOpts.ratchetCount < this.keyProviderOptions.ratchetWindowSize) {\n          workerLogger.debug(\n            `ratcheting key attempt ${ratchetOpts.ratchetCount} of ${\n              this.keyProviderOptions.ratchetWindowSize\n            }, for kind ${encodedFrame instanceof RTCEncodedAudioFrame ? 'audio' : 'video'}`,\n          );\n\n          let ratchetedKeySet: KeySet | undefined;\n          if (keySet === this.keys.getKeySet(keyIndex)) {\n            // only ratchet if the currently set key is still the same as the one used to decrypt this frame\n            // if not, it might be that a different frame has already ratcheted and we try with that one first\n            const newMaterial = await this.keys.ratchetKey(keyIndex, false);\n\n            ratchetedKeySet = await deriveKeys(newMaterial, this.keyProviderOptions.ratchetSalt);\n          }\n\n          const frame = await this.decryptFrame(encodedFrame, keyIndex, initialMaterial || keySet, {\n            ratchetCount: ratchetOpts.ratchetCount + 1,\n            encryptionKey: ratchetedKeySet?.encryptionKey,\n          });\n          if (frame && ratchetedKeySet) {\n            this.keys.setKeySet(ratchetedKeySet, keyIndex, true);\n            // decryption was successful, set the new key index to reflect the ratcheted key set\n            this.keys.setCurrentKeyIndex(keyIndex);\n          }\n          return frame;\n        } else {\n          /**\n           * Since the key it is first send and only afterwards actually used for encrypting, there were\n           * situations when the decrypting failed due to the fact that the received frame was not encrypted\n           * yet and ratcheting, of course, did not solve the problem. So if we fail RATCHET_WINDOW_SIZE times,\n           * we come back to the initial key.\n           */\n          if (initialMaterial) {\n            workerLogger.debug('resetting to initial material');\n            this.keys.setKeyFromMaterial(initialMaterial.material, keyIndex);\n          }\n\n          workerLogger.warn('maximum ratchet attempts exceeded, resetting key');\n          this.emit(\n            CryptorEvent.Error,\n            new CryptorError(\n              `valid key missing for participant ${this.participantId}`,\n              CryptorErrorReason.MissingKey,\n            ),\n          );\n        }\n      } else {\n        throw new CryptorError(\n          'Decryption failed, most likely because of an invalid key',\n          CryptorErrorReason.InvalidKey,\n        );\n      }\n    }\n  }\n\n  /**\n   * Construct the IV used for AES-GCM and sent (in plain) with the packet similar to\n   * https://tools.ietf.org/html/rfc7714#section-8.1\n   * It concatenates\n   * - the 32 bit synchronization source (SSRC) given on the encoded frame,\n   * - the 32 bit rtp timestamp given on the encoded frame,\n   * - a send counter that is specific to the SSRC. Starts at a random number.\n   * The send counter is essentially the pictureId but we currently have to implement this ourselves.\n   * There is no XOR with a salt. Note that this IV leaks the SSRC to the receiver but since this is\n   * randomly generated and SFUs may not rewrite this is considered acceptable.\n   * The SSRC is used to allow demultiplexing multiple streams with the same key, as described in\n   *   https://tools.ietf.org/html/rfc3711#section-4.1.1\n   * The RTP timestamp is 32 bits and advances by the codec clock rate (90khz for video, 48khz for\n   * opus audio) every second. For video it rolls over roughly every 13 hours.\n   * The send counter will advance at the frame rate (30fps for video, 50fps for 20ms opus audio)\n   * every second. It will take a long time to roll over.\n   *\n   * See also https://developer.mozilla.org/en-US/docs/Web/API/AesGcmParams\n   */\n  private makeIV(synchronizationSource: number, timestamp: number) {\n    const iv = new ArrayBuffer(IV_LENGTH);\n    const ivView = new DataView(iv);\n\n    // having to keep our own send count (similar to a picture id) is not ideal.\n    if (!this.sendCounts.has(synchronizationSource)) {\n      // Initialize with a random offset, similar to the RTP sequence number.\n      this.sendCounts.set(synchronizationSource, Math.floor(Math.random() * 0xffff));\n    }\n\n    const sendCount = this.sendCounts.get(synchronizationSource) ?? 0;\n\n    ivView.setUint32(0, synchronizationSource);\n    ivView.setUint32(4, timestamp);\n    ivView.setUint32(8, timestamp - (sendCount % 0xffff));\n\n    this.sendCounts.set(synchronizationSource, sendCount + 1);\n\n    return iv;\n  }\n\n  getUnencryptedBytes(frame: RTCEncodedVideoFrame | RTCEncodedAudioFrame): number {\n    if (isVideoFrame(frame)) {\n      let detectedCodec = this.getVideoCodec(frame) ?? this.videoCodec;\n\n      if (detectedCodec === 'av1' || detectedCodec === 'vp9') {\n        throw new Error(`${detectedCodec} is not yet supported for end to end encryption`);\n      }\n\n      if (detectedCodec === 'vp8') {\n        return UNENCRYPTED_BYTES[frame.type];\n      }\n\n      const data = new Uint8Array(frame.data);\n      try {\n        const naluIndices = findNALUIndices(data);\n\n        // if the detected codec is undefined we test whether it _looks_ like a h264 frame as a best guess\n        const isH264 =\n          detectedCodec === 'h264' ||\n          naluIndices.some((naluIndex) =>\n            [NALUType.SLICE_IDR, NALUType.SLICE_NON_IDR].includes(parseNALUType(data[naluIndex])),\n          );\n\n        if (isH264) {\n          for (const index of naluIndices) {\n            let type = parseNALUType(data[index]);\n            switch (type) {\n              case NALUType.SLICE_IDR:\n              case NALUType.SLICE_NON_IDR:\n                return index + 2;\n              default:\n                break;\n            }\n          }\n          throw new TypeError('Could not find NALU');\n        }\n      } catch (e) {\n        // no op, we just continue and fallback to vp8\n      }\n\n      return UNENCRYPTED_BYTES[frame.type];\n    } else {\n      return UNENCRYPTED_BYTES.audio;\n    }\n  }\n\n  /**\n   * inspects frame payloadtype if available and maps it to the codec specified in rtpMap\n   */\n  getVideoCodec(frame: RTCEncodedVideoFrame): VideoCodec | undefined {\n    if (this.rtpMap.size === 0) {\n      return undefined;\n    }\n    // @ts-expect-error payloadType is not yet part of the typescript definition and currently not supported in Safari\n    const payloadType = frame.getMetadata().payloadType;\n    const codec = payloadType ? this.rtpMap.get(payloadType) : undefined;\n    return codec;\n  }\n}\n\n/**\n * Slice the NALUs present in the supplied buffer, assuming it is already byte-aligned\n * code adapted from https://github.com/medooze/h264-frame-parser/blob/main/lib/NalUnits.ts to return indices only\n */\nexport function findNALUIndices(stream: Uint8Array): number[] {\n  const result: number[] = [];\n  let start = 0,\n    pos = 0,\n    searchLength = stream.length - 2;\n  while (pos < searchLength) {\n    // skip until end of current NALU\n    while (\n      pos < searchLength &&\n      !(stream[pos] === 0 && stream[pos + 1] === 0 && stream[pos + 2] === 1)\n    )\n      pos++;\n    if (pos >= searchLength) pos = stream.length;\n    // remove trailing zeros from current NALU\n    let end = pos;\n    while (end > start && stream[end - 1] === 0) end--;\n    // save current NALU\n    if (start === 0) {\n      if (end !== start) throw TypeError('byte stream contains leading data');\n    } else {\n      result.push(start);\n    }\n    // begin new NALU\n    start = pos = pos + 3;\n  }\n  return result;\n}\n\nexport function parseNALUType(startByte: number): NALUType {\n  return startByte & kNaluTypeMask;\n}\n\nconst kNaluTypeMask = 0x1f;\n\nexport enum NALUType {\n  /** Coded slice of a non-IDR picture */\n  SLICE_NON_IDR = 1,\n  /** Coded slice data partition A */\n  SLICE_PARTITION_A = 2,\n  /** Coded slice data partition B */\n  SLICE_PARTITION_B = 3,\n  /** Coded slice data partition C */\n  SLICE_PARTITION_C = 4,\n  /** Coded slice of an IDR picture */\n  SLICE_IDR = 5,\n  /** Supplemental enhancement information */\n  SEI = 6,\n  /** Sequence parameter set */\n  SPS = 7,\n  /** Picture parameter set */\n  PPS = 8,\n  /** Access unit delimiter */\n  AUD = 9,\n  /** End of sequence */\n  END_SEQ = 10,\n  /** End of stream */\n  END_STREAM = 11,\n  /** Filler data */\n  FILLER_DATA = 12,\n  /** Sequence parameter set extension */\n  SPS_EXT = 13,\n  /** Prefix NAL unit */\n  PREFIX_NALU = 14,\n  /** Subset sequence parameter set */\n  SUBSET_SPS = 15,\n  /** Depth parameter set */\n  DPS = 16,\n\n  // 17, 18 reserved\n\n  /** Coded slice of an auxiliary coded picture without partitioning */\n  SLICE_AUX = 19,\n  /** Coded slice extension */\n  SLICE_EXT = 20,\n  /** Coded slice extension for a depth view component or a 3D-AVC texture view component */\n  SLICE_LAYER_EXT = 21,\n\n  // 22, 23 reserved\n}\n\n/**\n * we use a magic frame trailer to detect whether a frame is injected\n * by the livekit server and thus to be treated as unencrypted\n * @internal\n */\nexport function isFrameServerInjected(frameData: ArrayBuffer, trailerBytes: Uint8Array): boolean {\n  const frameTrailer = new Uint8Array(\n    frameData.slice(frameData.byteLength - trailerBytes.byteLength),\n  );\n  return trailerBytes.every((value, index) => value === frameTrailer[index]);\n}\n","import { EventEmitter } from 'events';\nimport type TypedEventEmitter from 'typed-emitter';\nimport { workerLogger } from '../../logger';\nimport { KEYRING_SIZE } from '../constants';\nimport type { KeyProviderOptions, KeySet, ParticipantKeyHandlerCallbacks } from '../types';\nimport { deriveKeys, importKey, ratchet } from '../utils';\n\n// TODO ParticipantKeyHandlers currently don't get destroyed on participant disconnect\n// we could do this by having a separate worker message on participant disconnected.\n\n/**\n * ParticipantKeyHandler is responsible for providing a cryptor instance with the\n * en-/decryption key of a participant. It assumes that all tracks of a specific participant\n * are encrypted with the same key.\n * Additionally it exposes a method to ratchet a key which can be used by the cryptor either automatically\n * if decryption fails or can be triggered manually on both sender and receiver side.\n *\n */\nexport class ParticipantKeyHandler extends (EventEmitter as new () => TypedEventEmitter<ParticipantKeyHandlerCallbacks>) {\n  private currentKeyIndex: number;\n\n  private cryptoKeyRing: Array<KeySet>;\n\n  private enabled: boolean;\n\n  private keyProviderOptions: KeyProviderOptions;\n\n  private ratchetPromiseMap: Map<number, Promise<CryptoKey>>;\n\n  private participantId: string | undefined;\n\n  private decryptionFailureCount = 0;\n\n  private _hasValidKey: boolean = true;\n\n  get hasValidKey() {\n    return this._hasValidKey;\n  }\n\n  constructor(\n    participantId: string | undefined,\n    isEnabled: boolean,\n    keyProviderOptions: KeyProviderOptions,\n  ) {\n    super();\n    this.currentKeyIndex = 0;\n    this.cryptoKeyRing = new Array(KEYRING_SIZE);\n    this.enabled = isEnabled;\n    this.keyProviderOptions = keyProviderOptions;\n    this.ratchetPromiseMap = new Map();\n    this.participantId = participantId;\n    this.resetKeyStatus();\n  }\n\n  setEnabled(enabled: boolean) {\n    this.enabled = enabled;\n  }\n\n  decryptionFailure() {\n    if (this.keyProviderOptions.failureTolerance < 0) {\n      return;\n    }\n    this.decryptionFailureCount += 1;\n\n    if (this.decryptionFailureCount > this.keyProviderOptions.failureTolerance) {\n      this._hasValidKey = false;\n    }\n  }\n\n  decryptionSuccess() {\n    this.resetKeyStatus();\n  }\n\n  /**\n   * Call this after user initiated ratchet or a new key has been set in order to make sure to mark potentially\n   * invalid keys as valid again\n   */\n  resetKeyStatus() {\n    this.decryptionFailureCount = 0;\n    this._hasValidKey = true;\n  }\n\n  /**\n   * Ratchets the current key (or the one at keyIndex if provided) and\n   * returns the ratcheted material\n   * if `setKey` is true (default), it will also set the ratcheted key directly on the crypto key ring\n   * @param keyIndex\n   * @param setKey\n   */\n  ratchetKey(keyIndex?: number, setKey = true): Promise<CryptoKey> {\n    const currentKeyIndex = (keyIndex ??= this.getCurrentKeyIndex());\n\n    const existingPromise = this.ratchetPromiseMap.get(currentKeyIndex);\n    if (typeof existingPromise !== 'undefined') {\n      return existingPromise;\n    }\n    const ratchetPromise = new Promise<CryptoKey>(async (resolve, reject) => {\n      try {\n        const currentMaterial = this.getKeySet(currentKeyIndex).material;\n        const newMaterial = await importKey(\n          await ratchet(currentMaterial, this.keyProviderOptions.ratchetSalt),\n          currentMaterial.algorithm.name,\n          'derive',\n        );\n\n        if (setKey) {\n          this.setKeyFromMaterial(newMaterial, currentKeyIndex, true);\n        }\n        this.emit('keyRatcheted', newMaterial, keyIndex, this.participantId);\n        resolve(newMaterial);\n      } catch (e) {\n        reject(e);\n      } finally {\n        this.ratchetPromiseMap.delete(currentKeyIndex);\n      }\n    });\n    this.ratchetPromiseMap.set(currentKeyIndex, ratchetPromise);\n    return ratchetPromise;\n  }\n\n  /**\n   * takes in a key material with `deriveBits` and `deriveKey` set as key usages\n   * and derives encryption keys from the material and sets it on the key ring buffer\n   * together with the material\n   * also resets the valid key property and updates the currentKeyIndex\n   */\n  async setKey(material: CryptoKey, keyIndex = 0) {\n    await this.setKeyFromMaterial(material, keyIndex);\n    this.resetKeyStatus();\n  }\n\n  /**\n   * takes in a key material with `deriveBits` and `deriveKey` set as key usages\n   * and derives encryption keys from the material and sets it on the key ring buffer\n   * together with the material\n   * also updates the currentKeyIndex\n   */\n  async setKeyFromMaterial(material: CryptoKey, keyIndex = 0, emitRatchetEvent = false) {\n    workerLogger.debug('setting new key');\n    if (keyIndex >= 0) {\n      this.currentKeyIndex = keyIndex % this.cryptoKeyRing.length;\n    }\n    const keySet = await deriveKeys(material, this.keyProviderOptions.ratchetSalt);\n    this.setKeySet(keySet, this.currentKeyIndex, emitRatchetEvent);\n  }\n\n  async setKeySet(keySet: KeySet, keyIndex: number, emitRatchetEvent = false) {\n    this.cryptoKeyRing[keyIndex % this.cryptoKeyRing.length] = keySet;\n    if (emitRatchetEvent) {\n      this.emit('keyRatcheted', keySet.material, keyIndex, this.participantId);\n    }\n  }\n\n  async setCurrentKeyIndex(index: number) {\n    this.currentKeyIndex = index % this.cryptoKeyRing.length;\n    this.resetKeyStatus();\n  }\n\n  isEnabled() {\n    return this.enabled;\n  }\n\n  getCurrentKeyIndex() {\n    return this.currentKeyIndex;\n  }\n\n  /**\n   * returns currently used KeySet or the one at `keyIndex` if provided\n   * @param keyIndex\n   * @returns\n   */\n  getKeySet(keyIndex?: number) {\n    return this.cryptoKeyRing[keyIndex ?? this.currentKeyIndex];\n  }\n}\n","import { workerLogger } from '../../logger';\nimport { KEY_PROVIDER_DEFAULTS } from '../constants';\nimport { CryptorErrorReason } from '../errors';\nimport type {\n  E2EEWorkerMessage,\n  EnableMessage,\n  ErrorMessage,\n  KeyProviderOptions,\n  RatchetMessage,\n  RatchetRequestMessage,\n} from '../types';\nimport { FrameCryptor } from './FrameCryptor';\nimport { ParticipantKeyHandler } from './ParticipantKeyHandler';\n\nconst participantCryptors: FrameCryptor[] = [];\nconst participantKeys: Map<string, ParticipantKeyHandler> = new Map();\n\nlet publishCryptors: FrameCryptor[] = [];\nlet publisherKeys: ParticipantKeyHandler;\n\nlet isEncryptionEnabled: boolean = false;\n\nlet useSharedKey: boolean = false;\n\nlet sharedKey: CryptoKey | undefined;\n\nlet keyProviderOptions: KeyProviderOptions = KEY_PROVIDER_DEFAULTS;\n\nworkerLogger.setDefaultLevel('info');\n\nonmessage = (ev) => {\n  const { kind, data }: E2EEWorkerMessage = ev.data;\n\n  switch (kind) {\n    case 'init':\n      workerLogger.info('worker initialized');\n      keyProviderOptions = data.keyProviderOptions;\n      useSharedKey = !!data.keyProviderOptions.sharedKey;\n      // acknowledge init successful\n      const enableMsg: EnableMessage = {\n        kind: 'enable',\n        data: { enabled: isEncryptionEnabled },\n      };\n      publisherKeys = new ParticipantKeyHandler(undefined, isEncryptionEnabled, keyProviderOptions);\n      publisherKeys.on('keyRatcheted', emitRatchetedKeys);\n      postMessage(enableMsg);\n      break;\n    case 'enable':\n      setEncryptionEnabled(data.enabled, data.participantId);\n      workerLogger.info('updated e2ee enabled status');\n      // acknowledge enable call successful\n      postMessage(ev.data);\n      break;\n    case 'decode':\n      let cryptor = getTrackCryptor(data.participantId, data.trackId);\n      cryptor.setupTransform(\n        kind,\n        data.readableStream,\n        data.writableStream,\n        data.trackId,\n        data.codec,\n      );\n      break;\n    case 'encode':\n      let pubCryptor = getPublisherCryptor(data.trackId);\n      pubCryptor.setupTransform(\n        kind,\n        data.readableStream,\n        data.writableStream,\n        data.trackId,\n        data.codec,\n      );\n      break;\n    case 'setKey':\n      if (useSharedKey) {\n        workerLogger.debug('set shared key');\n        setSharedKey(data.key, data.keyIndex);\n      } else if (data.participantId) {\n        getParticipantKeyHandler(data.participantId).setKey(data.key, data.keyIndex);\n      } else {\n        workerLogger.error('no participant Id was provided and shared key usage is disabled');\n      }\n      break;\n    case 'removeTransform':\n      unsetCryptorParticipant(data.trackId);\n      break;\n    case 'updateCodec':\n      getTrackCryptor(data.participantId, data.trackId).setVideoCodec(data.codec);\n      break;\n    case 'setRTPMap':\n      publishCryptors.forEach((cr) => {\n        cr.setRtpMap(data.map);\n      });\n      break;\n    case 'ratchetRequest':\n      handleRatchetRequest(data);\n    default:\n      break;\n  }\n};\n\nasync function handleRatchetRequest(data: RatchetRequestMessage['data']) {\n  const keyHandler = getParticipantKeyHandler(data.participantId);\n  await keyHandler.ratchetKey(data.keyIndex);\n  keyHandler.resetKeyStatus();\n}\n\nfunction getTrackCryptor(participantId: string, trackId: string) {\n  let cryptor = participantCryptors.find((c) => c.getTrackId() === trackId);\n  if (!cryptor) {\n    workerLogger.info('creating new cryptor for', { participantId });\n    if (!keyProviderOptions) {\n      throw Error('Missing keyProvider options');\n    }\n    cryptor = new FrameCryptor({\n      participantId,\n      keys: getParticipantKeyHandler(participantId),\n      keyProviderOptions,\n    });\n\n    setupCryptorErrorEvents(cryptor);\n    participantCryptors.push(cryptor);\n  } else if (participantId !== cryptor.getParticipantId()) {\n    // assign new participant id to track cryptor and pass in correct key handler\n    cryptor.setParticipant(participantId, getParticipantKeyHandler(participantId));\n  }\n  if (sharedKey) {\n  }\n  return cryptor;\n}\n\nfunction getParticipantKeyHandler(participantId?: string) {\n  if (!participantId) {\n    return publisherKeys!;\n  }\n  let keys = participantKeys.get(participantId);\n  if (!keys) {\n    keys = new ParticipantKeyHandler(participantId, true, keyProviderOptions);\n    if (sharedKey) {\n      keys.setKey(sharedKey);\n    }\n    participantKeys.set(participantId, keys);\n  }\n  return keys;\n}\n\nfunction unsetCryptorParticipant(trackId: string) {\n  participantCryptors.find((c) => c.getTrackId() === trackId)?.unsetParticipant();\n}\n\nfunction getPublisherCryptor(trackId: string) {\n  let publishCryptor = publishCryptors.find((cryptor) => cryptor.getTrackId() === trackId);\n  if (!publishCryptor) {\n    if (!keyProviderOptions) {\n      throw new TypeError('Missing keyProvider options');\n    }\n    publishCryptor = new FrameCryptor({\n      keys: publisherKeys!,\n      participantId: 'publisher',\n      keyProviderOptions,\n    });\n    setupCryptorErrorEvents(publishCryptor);\n    publishCryptors.push(publishCryptor);\n  }\n  return publishCryptor;\n}\n\nfunction setEncryptionEnabled(enable: boolean, participantId?: string) {\n  if (!participantId) {\n    isEncryptionEnabled = enable;\n    publisherKeys.setEnabled(enable);\n  } else {\n    getParticipantKeyHandler(participantId).setEnabled(enable);\n  }\n}\n\nfunction setSharedKey(key: CryptoKey, index?: number) {\n  workerLogger.debug('setting shared key');\n  sharedKey = key;\n  publisherKeys?.setKey(key, index);\n  for (const [, keyHandler] of participantKeys) {\n    keyHandler.setKey(key, index);\n  }\n}\n\nfunction setupCryptorErrorEvents(cryptor: FrameCryptor) {\n  cryptor.on('cryptorError', (error) => {\n    const msg: ErrorMessage = {\n      kind: 'error',\n      data: { error: new Error(`${CryptorErrorReason[error.reason]}: ${error.message}`) },\n    };\n    postMessage(msg);\n  });\n}\n\nfunction emitRatchetedKeys(material: CryptoKey, keyIndex?: number) {\n  const msg: RatchetMessage = {\n    kind: `ratchetKey`,\n    data: {\n      // participantId,\n      keyIndex,\n      material,\n    },\n  };\n  postMessage(msg);\n}\n\n// Operations using RTCRtpScriptTransform.\n// @ts-ignore\nif (self.RTCTransformEvent) {\n  workerLogger.debug('setup transform event');\n  // @ts-ignore\n  self.onrtctransform = (event) => {\n    const transformer = event.transformer;\n    workerLogger.debug('transformer', transformer);\n    transformer.handled = true;\n    const { kind, participantId, trackId, codec } = transformer.options;\n    const cryptor =\n      kind === 'encode' ? getPublisherCryptor(trackId) : getTrackCryptor(participantId, trackId);\n    workerLogger.debug('transform', { codec });\n    cryptor.setupTransform(kind, transformer.readable, transformer.writable, trackId, codec);\n  };\n}\n"],"names":["root","definition","this","noop","undefinedType","isIE","window","navigator","test","userAgent","logMethods","bindMethod","obj","methodName","method","bind","Function","prototype","call","e","apply","arguments","traceForIE","console","log","trace","replaceLoggingMethods","level","loggerName","i","length","methodFactory","debug","enableLoggingWhenConsoleArrives","defaultMethodFactory","undefined","realMethod","Logger","name","defaultLevel","factory","currentLevel","self","storageKey","getPersistedLevel","storedLevel","localStorage","ignore","cookie","document","location","indexOf","encodeURIComponent","exec","slice","levels","TRACE","DEBUG","INFO","WARN","ERROR","SILENT","getLevel","setLevel","persist","toUpperCase","levelNum","levelName","persistLevelIfPossible","setDefaultLevel","resetLevel","removeItem","clearPersistedLevel","enableAll","disableAll","initialLevel","defaultLogger","_loggersByName","getLogger","TypeError","logger","_log","noConflict","getLoggers","exports","module","LogLevel","info","workerLogger","ENCRYPTION_ALGORITHM","UNENCRYPTED_BYTES","key","delta","audio","empty","KEY_PROVIDER_DEFAULTS","sharedKey","ratchetSalt","ratchetWindowSize","failureTolerance","LivekitError","Error","constructor","code","message","super","MediaDeviceFailure","CryptorErrorReason","getFailure","error","NotFound","PermissionDenied","DeviceInUse","Other","CryptorError","reason","InternalError","ReflectOwnKeys","R","Reflect","ReflectApply","target","receiver","args","ownKeys","Object","getOwnPropertySymbols","getOwnPropertyNames","concat","NumberIsNaN","Number","isNaN","value","EventEmitter","init","eventsModule","once","emitter","Promise","resolve","reject","errorListener","err","removeListener","resolver","eventTargetAgnosticAddListener","handler","flags","on","addErrorHandlerIfEventEmitter","_events","_eventsCount","_maxListeners","defaultMaxListeners","checkListener","listener","_getMaxListeners","that","_addListener","type","prepend","m","events","existing","warning","create","newListener","emit","unshift","push","warned","w","String","count","warn","onceWrapper","fired","wrapFn","_onceWrap","state","wrapped","_listeners","unwrap","evlistener","arr","ret","Array","unwrapListeners","arrayClone","listenerCount","n","copy","addEventListener","wrapListener","arg","removeEventListener","defineProperty","enumerable","get","set","RangeError","getPrototypeOf","setMaxListeners","getMaxListeners","doError","er","context","len","listeners","addListener","prependListener","prependOnceListener","list","position","originalListener","shift","index","pop","spliceOne","off","removeAllListeners","keys","rawListeners","eventNames","CryptorEvent","AudioPresets","getAlgoOptions","algorithmName","salt","encodedSalt","TextEncoder","encode","hash","ArrayBuffer","iterations","deriveKeys","material","algorithmOptions","algorithm","encryptionKey","crypto","subtle","deriveKey","telephone","maxBitrate","speech","music","musicStereo","musicHighQuality","musicHighQualityStereo","BaseFrameCryptor","encodeFunction","encodedFrame","controller","decodeFunction","FrameCryptor","opts","sendCounts","Map","participantId","rtpMap","keyProviderOptions","unencryptedFrameByteTrailer","_a","unencryptedFrameBytes","setParticipant","id","unsetParticipant","getParticipantId","getTrackId","trackId","setVideoCodec","codec","videoCodec","setRtpMap","map","setupTransform","operation","readable","writable","transformFn","transformStream","TransformStream","transform","pipeThrough","pipeTo","catch","isEnabled","data","byteLength","enqueue","getKeySet","keyIndex","getCurrentKeyIndex","iv","makeIV","getMetadata","synchronizationSource","timestamp","frameHeader","Uint8Array","getUnencryptedBytes","frameTrailer","cipherText","encrypt","additionalData","newData","newUint8","MissingKey","frameData","trailerBytes","every","isFrameServerInjected","hasValidKey","decodedFrame","decryptFrame","decryptionSuccess","InvalidKey","decryptionFailure","initialMaterial","ratchetOpts","ratchetCount","keySet","ivLength","cipherTextStart","cipherTextLength","plainText","decrypt","ratchetedKeySet","RTCEncodedAudioFrame","newMaterial","ratchetKey","frame","setKeySet","setCurrentKeyIndex","setKeyFromMaterial","ivView","DataView","has","Math","floor","random","sendCount","setUint32","isVideoFrame","detectedCodec","getVideoCodec","naluIndices","stream","result","start","pos","searchLength","end","findNALUIndices","some","naluIndex","NALUType","SLICE_IDR","SLICE_NON_IDR","includes","parseNALUType","size","payloadType","startByte","kNaluTypeMask","ParticipantKeyHandler","_hasValidKey","decryptionFailureCount","currentKeyIndex","cryptoKeyRing","enabled","ratchetPromiseMap","resetKeyStatus","setEnabled","setKey","existingPromise","ratchetPromise","__awaiter","currentMaterial","keyBytes","usage","importKey","deriveBits","ratchet","delete","emitRatchetEvent","participantCryptors","participantKeys","publisherKeys","publishCryptors","isEncryptionEnabled","useSharedKey","getTrackCryptor","cryptor","find","c","getParticipantKeyHandler","setupCryptorErrorEvents","getPublisherCryptor","publishCryptor","msg","kind","postMessage","emitRatchetedKeys","onmessage","ev","enableMsg","enable","readableStream","writableStream","keyHandler","setSharedKey","forEach","cr","handleRatchetRequest","RTCTransformEvent","onrtctransform","event","transformer","handled","options"],"mappings":"sYAMWA,EAAMC,kKAAND,EASTE,EATeD,EAST,WAIJ,IAAIE,EAAO,aACPC,EAAgB,YAChBC,SAAeC,SAAWF,UAA0BE,OAAOC,YAAcH,GACzE,kBAAkBI,KAAKF,OAAOC,UAAUE,WAGxCC,EAAa,CACb,QACA,QACA,OACA,OACA,SAIJ,SAASC,EAAWC,EAAKC,GACrB,IAAIC,EAASF,EAAIC,GACjB,GAA2B,mBAAhBC,EAAOC,KACd,OAAOD,EAAOC,KAAKH,GAEnB,IACI,OAAOI,SAASC,UAAUF,KAAKG,KAAKJ,EAAQF,EAC/C,CAAC,MAAOO,GAEL,OAAO,WACH,OAAOH,SAASC,UAAUG,MAAMA,MAAMN,EAAQ,CAACF,EAAKS,YAE3D,CAER,CAGD,SAASC,IACDC,QAAQC,MACJD,QAAQC,IAAIJ,MACZG,QAAQC,IAAIJ,MAAMG,QAASF,WAG3BL,SAASC,UAAUG,MAAMA,MAAMG,QAAQC,IAAK,CAACD,QAASF,aAG1DE,QAAQE,OAAOF,QAAQE,OAC9B,CAwBD,SAASC,EAAsBC,EAAOC,GAElC,IAAK,IAAIC,EAAI,EAAGA,EAAInB,EAAWoB,OAAQD,IAAK,CACxC,IAAIhB,EAAaH,EAAWmB,GAC5B3B,KAAKW,GAAegB,EAAIF,EACpBxB,EACAD,KAAK6B,cAAclB,EAAYc,EAAOC,EAC7C,CAGD1B,KAAKsB,IAAMtB,KAAK8B,KACnB,CAID,SAASC,EAAgCpB,EAAYc,EAAOC,GACxD,OAAO,kBACQL,UAAYnB,IACnBsB,EAAsBR,KAAKhB,KAAMyB,EAAOC,GACxC1B,KAAKW,GAAYO,MAAMlB,KAAMmB,YAGxC,CAID,SAASa,EAAqBrB,EAAYc,EAAOC,GAE7C,OAhDJ,SAAoBf,GAKhB,MAJmB,UAAfA,IACAA,EAAa,cAGNU,UAAYnB,IAEG,UAAfS,GAA0BR,EAC1BiB,OACwBa,IAAxBZ,QAAQV,GACRF,EAAWY,QAASV,QACJsB,IAAhBZ,QAAQC,IACRb,EAAWY,QAAS,OAEpBpB,EAEd,CAgCUiC,CAAWvB,IACXoB,EAAgCb,MAAMlB,KAAMmB,UACtD,CAED,SAASgB,EAAOC,EAAMC,EAAcC,GAClC,IACIC,EADAC,EAAOxC,KAEXqC,EAA+B,MAAhBA,EAAuB,OAASA,EAE/C,IAAII,EAAa,WAyBjB,SAASC,IACL,IAAIC,EAEJ,UAAWvC,SAAWF,GAAkBuC,EAAxC,CAEA,IACIE,EAAcvC,OAAOwC,aAAaH,EAChD,CAAY,MAAOI,GAAU,CAGnB,UAAWF,IAAgBzC,EACvB,IACI,IAAI4C,EAAS1C,OAAO2C,SAASD,OACzBE,EAAWF,EAAOG,QAClBC,mBAAmBT,GAAc,MACnB,IAAdO,IACAL,EAAc,WAAWQ,KAAKL,EAAOM,MAAMJ,IAAW,GAE5E,CAAgB,MAAOH,GAAU,CAQvB,YAJiCZ,IAA7BO,EAAKa,OAAOV,KACZA,OAAcV,GAGXU,CAvB6C,CAwBvD,CAnDmB,iBAATP,EACTK,GAAc,IAAML,EACK,iBAATA,IAChBK,OAAaR,GAwEfO,EAAKJ,KAAOA,EAEZI,EAAKa,OAAS,CAAEC,MAAS,EAAGC,MAAS,EAAGC,KAAQ,EAAGC,KAAQ,EACvDC,MAAS,EAAGC,OAAU,GAE1BnB,EAAKX,cAAgBS,GAAWN,EAEhCQ,EAAKoB,SAAW,WACZ,OAAOrB,GAGXC,EAAKqB,SAAW,SAAUpC,EAAOqC,GAI7B,GAHqB,iBAAVrC,QAA2DQ,IAArCO,EAAKa,OAAO5B,EAAMsC,iBAC/CtC,EAAQe,EAAKa,OAAO5B,EAAMsC,kBAET,iBAAVtC,GAAsBA,GAAS,GAAKA,GAASe,EAAKa,OAAOM,QAUhE,KAAM,6CAA+ClC,EAJrD,GALAc,EAAed,GACC,IAAZqC,GAtFZ,SAAgCE,GAC5B,IAAIC,GAAazD,EAAWwD,IAAa,UAAUD,cAEnD,UAAW3D,SAAWF,GAAkBuC,EAAxC,CAGA,IAEI,YADArC,OAAOwC,aAAaH,GAAcwB,EAEhD,CAAY,MAAOpB,GAAU,CAGnB,IACIzC,OAAO2C,SAASD,OACdI,mBAAmBT,GAAc,IAAMwB,EAAY,GACnE,CAAY,MAAOpB,GAAU,CAZiC,CAavD,CAuEWqB,CAAuBzC,GAE3BD,EAAsBR,KAAKwB,EAAMf,EAAOW,UAC7Bf,UAAYnB,GAAiBuB,EAAQe,EAAKa,OAAOM,OACxD,MAAO,oCAOnBnB,EAAK2B,gBAAkB,SAAU1C,GAC7BY,EAAeZ,EACViB,KACDF,EAAKqB,SAASpC,GAAO,IAI7Be,EAAK4B,WAAa,WACd5B,EAAKqB,SAASxB,GAAc,GA3DhC,WACI,UAAWjC,SAAWF,GAAkBuC,EAAxC,CAGA,IAEI,YADArC,OAAOwC,aAAayB,WAAW5B,EAE7C,CAAY,MAAOI,GAAU,CAGnB,IACIzC,OAAO2C,SAASD,OACdI,mBAAmBT,GAAc,0CACjD,CAAY,MAAOI,GAAU,CAZiC,CAavD,CA8CGyB,IAGJ9B,EAAK+B,UAAY,SAAST,GACtBtB,EAAKqB,SAASrB,EAAKa,OAAOC,MAAOQ,IAGrCtB,EAAKgC,WAAa,SAASV,GACvBtB,EAAKqB,SAASrB,EAAKa,OAAOM,OAAQG,IAItC,IAAIW,EAAe/B,IACC,MAAhB+B,IACAA,EAAepC,GAEnBG,EAAKqB,SAASY,GAAc,EAC7B,CAQD,IAAIC,EAAgB,IAAIvC,EAEpBwC,EAAiB,CAAA,EACrBD,EAAcE,UAAY,SAAmBxC,GACzC,GAAqB,iBAATA,GAAqC,iBAATA,GAA+B,KAATA,EAC5D,MAAM,IAAIyC,UAAU,kDAGtB,IAAIC,EAASH,EAAevC,GAK5B,OAJK0C,IACHA,EAASH,EAAevC,GAAQ,IAAID,EAClCC,EAAMsC,EAAcd,WAAYc,EAAc7C,gBAE3CiD,GAIX,IAAIC,SAAe3E,SAAWF,EAAiBE,OAAOkB,SAAMW,EAiB5D,OAhBAyC,EAAcM,WAAa,WAMvB,cALW5E,SAAWF,GACfE,OAAOkB,MAAQoD,IAClBtE,OAAOkB,IAAMyD,GAGVL,GAGXA,EAAcO,WAAa,WACvB,OAAON,GAIXD,EAAuB,QAAIA,EAEpBA,CACX,QA9RoDQ,QAC5CC,EAAAD,QAAiBnF,IAEjBD,EAAKwB,IAAMvB,QCXPqF,eAAZ,SAAYA,GACVA,EAAAA,EAAA,MAAA,GAAA,QACAA,EAAAA,EAAA,MAAA,GAAA,QACAA,EAAAA,EAAA,KAAA,GAAA,OACAA,EAAAA,EAAA,KAAA,GAAA,OACAA,EAAAA,EAAA,MAAA,GAAA,QACAA,EAAAA,EAAA,OAAA,GAAA,QACD,CAPD,CAAYA,IAAAA,EAOX,CAAA,IAaqB9D,EAAAA,UAAc,WAEtB6C,gBAAgBiB,EAASC,MAuChC,MAAMC,EAAehE,EAAasD,UAAC,WC7D7BW,EAAuB,UAoBvBC,EAAoB,CAC/BC,IAAK,GACLC,MAAO,EACPC,MAAO,EACPC,MAAO,GAYIC,EAA4C,CACvDC,WAAW,EACXC,YAJkB,uBAKlBC,kBAAmB,EACnBC,iBAhC0C,ICVtC,MAAOC,UAAqBC,MAGhCC,YAAYC,EAAcC,GACxBC,MAAMD,GAAW,wBACjBtG,KAAKqG,KAAOA,CACd,EA0DF,IAAYG,EC9DAC,GD8DZ,SAAYD,GAEVA,EAAA,iBAAA,mBAEAA,EAAA,SAAA,WAEAA,EAAA,YAAA,cACAA,EAAA,MAAA,OACD,CARD,CAAYA,IAAAA,EAQX,CAAA,IAED,SAAiBA,GACCA,EAAAE,WAAhB,SAA2BC,GACzB,GAAIA,GAAS,SAAUA,EACrB,MAAmB,kBAAfA,EAAMvE,MAA2C,yBAAfuE,EAAMvE,KACnCoE,EAAmBI,SAET,oBAAfD,EAAMvE,MAA6C,0BAAfuE,EAAMvE,KACrCoE,EAAmBK,iBAET,qBAAfF,EAAMvE,MAA8C,oBAAfuE,EAAMvE,KACtCoE,EAAmBM,YAErBN,EAAmBO,KAE9B,CACD,CAfD,CAAiBP,IAAAA,EAehB,CAAA,ICvFD,SAAYC,GACVA,EAAAA,EAAA,WAAA,GAAA,aACAA,EAAAA,EAAA,WAAA,GAAA,aACAA,EAAAA,EAAA,cAAA,GAAA,eACD,CAJD,CAAYA,IAAAA,EAIX,CAAA,IAEK,MAAOO,UAAqBd,EAGhCE,YAAYE,GAA+E,IAA7DW,EAA6B9F,UAAAS,OAAAT,QAAAc,IAAAd,UAAAc,GAAAd,UAAAsF,GAAAA,EAAmBS,cAC5EX,MAAM,GAAID,GACVtG,KAAKiH,OAASA,CAChB,MCgBEE,iBAPAC,EAAuB,iBAAZC,QAAuBA,QAAU,KAC5CC,EAAeF,GAAwB,mBAAZA,EAAElG,MAC7BkG,EAAElG,MACF,SAAsBqG,EAAQC,EAAUC,GACxC,OAAO3G,SAASC,UAAUG,MAAMF,KAAKuG,EAAQC,EAAUC,EACxD,EAIDN,EADEC,GAA0B,mBAAdA,EAAEM,QACCN,EAAEM,QACVC,OAAOC,sBACC,SAAwBL,GACvC,OAAOI,OAAOE,oBAAoBN,GAC/BO,OAAOH,OAAOC,sBAAsBL,KAGxB,SAAwBA,GACvC,OAAOI,OAAOE,oBAAoBN,IAQtC,IAAIQ,EAAcC,OAAOC,OAAS,SAAqBC,GACrD,OAAOA,GAAUA,CACnB,EAEA,SAASC,IACPA,EAAaC,KAAKpH,KAAKhB,KACzB,CACAqI,EAAcnD,QAAGiD,EACEE,EAAAnD,QAAAoD,KAwYnB,SAAcC,EAASnG,GACrB,OAAO,IAAIoG,SAAQ,SAAUC,EAASC,GACpC,SAASC,EAAcC,GACrBL,EAAQM,eAAezG,EAAM0G,GAC7BJ,EAAOE,EACR,CAED,SAASE,IAC+B,mBAA3BP,EAAQM,gBACjBN,EAAQM,eAAe,QAASF,GAElCF,EAAQ,GAAGrF,MAAMpC,KAAKG,WAC5B,CAEI4H,EAA+BR,EAASnG,EAAM0G,EAAU,CAAER,MAAM,IACnD,UAATlG,GAMR,SAAuCmG,EAASS,EAASC,GAC7B,mBAAfV,EAAQW,IACjBH,EAA+BR,EAAS,QAASS,EAASC,EAE9D,CATME,CAA8BZ,EAASI,EAAe,CAAEL,MAAM,GAEpE,GACA,EAxZAH,EAAaA,aAAeA,EAE5BA,EAAapH,UAAUqI,aAAUnH,EACjCkG,EAAapH,UAAUsI,aAAe,EACtClB,EAAapH,UAAUuI,mBAAgBrH,EAIvC,IAAIsH,EAAsB,GAE1B,SAASC,EAAcC,GACrB,GAAwB,mBAAbA,EACT,MAAM,IAAI5E,UAAU,0EAA4E4E,EAEpG,CAoCA,SAASC,EAAiBC,GACxB,YAA2B1H,IAAvB0H,EAAKL,cACAnB,EAAaoB,oBACfI,EAAKL,aACd,CAkDA,SAASM,EAAarC,EAAQsC,EAAMJ,EAAUK,GAC5C,IAAIC,EACAC,EACAC,EA1HsBC,EAgJ1B,GApBAV,EAAcC,QAGCxH,KADf+H,EAASzC,EAAO6B,UAEdY,EAASzC,EAAO6B,QAAUzB,OAAOwC,OAAO,MACxC5C,EAAO8B,aAAe,SAIKpH,IAAvB+H,EAAOI,cACT7C,EAAO8C,KAAK,cAAeR,EACfJ,EAASA,SAAWA,EAASA,SAAWA,GAIpDO,EAASzC,EAAO6B,SAElBa,EAAWD,EAAOH,SAGH5H,IAAbgI,EAEFA,EAAWD,EAAOH,GAAQJ,IACxBlC,EAAO8B,kBAeT,GAbwB,mBAAbY,EAETA,EAAWD,EAAOH,GAChBC,EAAU,CAACL,EAAUQ,GAAY,CAACA,EAAUR,GAErCK,EACTG,EAASK,QAAQb,GAEjBQ,EAASM,KAAKd,IAIhBM,EAAIL,EAAiBnC,IACb,GAAK0C,EAASrI,OAASmI,IAAME,EAASO,OAAQ,CACpDP,EAASO,QAAS,EAGlB,IAAIC,EAAI,IAAItE,MAAM,+CACE8D,EAASrI,OAAS,IAAM8I,OAAOb,GADjC,qEAIlBY,EAAErI,KAAO,8BACTqI,EAAElC,QAAUhB,EACZkD,EAAEZ,KAAOA,EACTY,EAAEE,MAAQV,EAASrI,OA7KGsI,EA8KHO,EA7KnBpJ,SAAWA,QAAQuJ,MAAMvJ,QAAQuJ,KAAKV,EA8KvC,CAGH,OAAO3C,CACT,CAaA,SAASsD,IACP,IAAK7K,KAAK8K,MAGR,OAFA9K,KAAKuH,OAAOsB,eAAe7I,KAAK6J,KAAM7J,KAAK+K,QAC3C/K,KAAK8K,OAAQ,EACY,IAArB3J,UAAUS,OACL5B,KAAKyJ,SAASzI,KAAKhB,KAAKuH,QAC1BvH,KAAKyJ,SAASvI,MAAMlB,KAAKuH,OAAQpG,UAE5C,CAEA,SAAS6J,EAAUzD,EAAQsC,EAAMJ,GAC/B,IAAIwB,EAAQ,CAAEH,OAAO,EAAOC,YAAQ9I,EAAWsF,OAAQA,EAAQsC,KAAMA,EAAMJ,SAAUA,GACjFyB,EAAUL,EAAYhK,KAAKoK,GAG/B,OAFAC,EAAQzB,SAAWA,EACnBwB,EAAMF,OAASG,EACRA,CACT,CAyHA,SAASC,EAAW5D,EAAQsC,EAAMuB,GAChC,IAAIpB,EAASzC,EAAO6B,QAEpB,QAAenH,IAAX+H,EACF,MAAO,GAET,IAAIqB,EAAarB,EAAOH,GACxB,YAAmB5H,IAAfoJ,EACK,GAEiB,mBAAfA,EACFD,EAAS,CAACC,EAAW5B,UAAY4B,GAAc,CAACA,GAElDD,EAsDT,SAAyBE,GAEvB,IADA,IAAIC,EAAM,IAAIC,MAAMF,EAAI1J,QACfD,EAAI,EAAGA,EAAI4J,EAAI3J,SAAUD,EAChC4J,EAAI5J,GAAK2J,EAAI3J,GAAG8H,UAAY6B,EAAI3J,GAElC,OAAO4J,CACT,CA3DIE,CAAgBJ,GAAcK,EAAWL,EAAYA,EAAWzJ,OACpE,CAmBA,SAAS+J,EAAc9B,GACrB,IAAIG,EAAShK,KAAKoJ,QAElB,QAAenH,IAAX+H,EAAsB,CACxB,IAAIqB,EAAarB,EAAOH,GAExB,GAA0B,mBAAfwB,EACT,OAAO,EACF,QAAmBpJ,IAAfoJ,EACT,OAAOA,EAAWzJ,MAErB,CAED,OAAO,CACT,CAMA,SAAS8J,EAAWJ,EAAKM,GAEvB,IADA,IAAIC,EAAO,IAAIL,MAAMI,GACZjK,EAAI,EAAGA,EAAIiK,IAAKjK,EACvBkK,EAAKlK,GAAK2J,EAAI3J,GAChB,OAAOkK,CACT,CA2CA,SAAS9C,EAA+BR,EAASnG,EAAMqH,EAAUR,GAC/D,GAA0B,mBAAfV,EAAQW,GACbD,EAAMX,KACRC,EAAQD,KAAKlG,EAAMqH,GAEnBlB,EAAQW,GAAG9G,EAAMqH,OAEd,IAAwC,mBAA7BlB,EAAQuD,iBAYxB,MAAM,IAAIjH,UAAU,6EAA+E0D,GATnGA,EAAQuD,iBAAiB1J,GAAM,SAAS2J,EAAaC,GAG/C/C,EAAMX,MACRC,EAAQ0D,oBAAoB7J,EAAM2J,GAEpCtC,EAASuC,EACf,GAGG,CACH,CAraArE,OAAOuE,eAAe/D,EAAc,sBAAuB,CACzDgE,YAAY,EACZC,IAAK,WACH,OAAO7C,CACR,EACD8C,IAAK,SAASL,GACZ,GAAmB,iBAARA,GAAoBA,EAAM,GAAKjE,EAAYiE,GACpD,MAAM,IAAIM,WAAW,kGAAoGN,EAAM,KAEjIzC,EAAsByC,CACvB,IAGH7D,EAAaC,KAAO,gBAEGnG,IAAjBjC,KAAKoJ,SACLpJ,KAAKoJ,UAAYzB,OAAO4E,eAAevM,MAAMoJ,UAC/CpJ,KAAKoJ,QAAUzB,OAAOwC,OAAO,MAC7BnK,KAAKqJ,aAAe,GAGtBrJ,KAAKsJ,cAAgBtJ,KAAKsJ,oBAAiBrH,CAC7C,EAIAkG,EAAapH,UAAUyL,gBAAkB,SAAyBZ,GAChE,GAAiB,iBAANA,GAAkBA,EAAI,GAAK7D,EAAY6D,GAChD,MAAM,IAAIU,WAAW,gFAAkFV,EAAI,KAG7G,OADA5L,KAAKsJ,cAAgBsC,EACd5L,IACT,EAQAmI,EAAapH,UAAU0L,gBAAkB,WACvC,OAAO/C,EAAiB1J,KAC1B,EAEAmI,EAAapH,UAAUsJ,KAAO,SAAcR,GAE1C,IADA,IAAIpC,EAAO,GACF9F,EAAI,EAAGA,EAAIR,UAAUS,OAAQD,IAAK8F,EAAK8C,KAAKpJ,UAAUQ,IAC/D,IAAI+K,EAAoB,UAAT7C,EAEXG,EAAShK,KAAKoJ,QAClB,QAAenH,IAAX+H,EACF0C,EAAWA,QAA4BzK,IAAjB+H,EAAOrD,WAC1B,IAAK+F,EACR,OAAO,EAGT,GAAIA,EAAS,CACX,IAAIC,EAGJ,GAFIlF,EAAK7F,OAAS,IAChB+K,EAAKlF,EAAK,IACRkF,aAAcxG,MAGhB,MAAMwG,EAGR,IAAI/D,EAAM,IAAIzC,MAAM,oBAAsBwG,EAAK,KAAOA,EAAGrG,QAAU,IAAM,KAEzE,MADAsC,EAAIgE,QAAUD,EACR/D,CACP,CAED,IAAII,EAAUgB,EAAOH,GAErB,QAAgB5H,IAAZ+G,EACF,OAAO,EAET,GAAuB,mBAAZA,EACT1B,EAAa0B,EAAShJ,KAAMyH,OAE5B,KAAIoF,EAAM7D,EAAQpH,OACdkL,EAAYpB,EAAW1C,EAAS6D,GACpC,IAASlL,EAAI,EAAGA,EAAIkL,IAAOlL,EACzB2F,EAAawF,EAAUnL,GAAI3B,KAAMyH,EAHX,CAM1B,OAAO,CACT,EAgEAU,EAAapH,UAAUgM,YAAc,SAAqBlD,EAAMJ,GAC9D,OAAOG,EAAa5J,KAAM6J,EAAMJ,GAAU,EAC5C,EAEAtB,EAAapH,UAAUmI,GAAKf,EAAapH,UAAUgM,YAEnD5E,EAAapH,UAAUiM,gBACnB,SAAyBnD,EAAMJ,GAC7B,OAAOG,EAAa5J,KAAM6J,EAAMJ,GAAU,EAChD,EAoBAtB,EAAapH,UAAUuH,KAAO,SAAcuB,EAAMJ,GAGhD,OAFAD,EAAcC,GACdzJ,KAAKkJ,GAAGW,EAAMmB,EAAUhL,KAAM6J,EAAMJ,IAC7BzJ,IACT,EAEAmI,EAAapH,UAAUkM,oBACnB,SAA6BpD,EAAMJ,GAGjC,OAFAD,EAAcC,GACdzJ,KAAKgN,gBAAgBnD,EAAMmB,EAAUhL,KAAM6J,EAAMJ,IAC1CzJ,IACb,EAGAmI,EAAapH,UAAU8H,eACnB,SAAwBgB,EAAMJ,GAC5B,IAAIyD,EAAMlD,EAAQmD,EAAUxL,EAAGyL,EAK/B,GAHA5D,EAAcC,QAGCxH,KADf+H,EAAShK,KAAKoJ,SAEZ,OAAOpJ,KAGT,QAAaiC,KADbiL,EAAOlD,EAAOH,IAEZ,OAAO7J,KAET,GAAIkN,IAASzD,GAAYyD,EAAKzD,WAAaA,EACb,KAAtBzJ,KAAKqJ,aACTrJ,KAAKoJ,QAAUzB,OAAOwC,OAAO,cAEtBH,EAAOH,GACVG,EAAOnB,gBACT7I,KAAKqK,KAAK,iBAAkBR,EAAMqD,EAAKzD,UAAYA,SAElD,GAAoB,mBAATyD,EAAqB,CAGrC,IAFAC,GAAY,EAEPxL,EAAIuL,EAAKtL,OAAS,EAAGD,GAAK,EAAGA,IAChC,GAAIuL,EAAKvL,KAAO8H,GAAYyD,EAAKvL,GAAG8H,WAAaA,EAAU,CACzD2D,EAAmBF,EAAKvL,GAAG8H,SAC3B0D,EAAWxL,EACX,KACD,CAGH,GAAIwL,EAAW,EACb,OAAOnN,KAEQ,IAAbmN,EACFD,EAAKG,QAiIf,SAAmBH,EAAMI,GACvB,KAAOA,EAAQ,EAAIJ,EAAKtL,OAAQ0L,IAC9BJ,EAAKI,GAASJ,EAAKI,EAAQ,GAC7BJ,EAAKK,KACP,CAnIUC,CAAUN,EAAMC,GAGE,IAAhBD,EAAKtL,SACPoI,EAAOH,GAAQqD,EAAK,SAEQjL,IAA1B+H,EAAOnB,gBACT7I,KAAKqK,KAAK,iBAAkBR,EAAMuD,GAAoB3D,EACzD,CAED,OAAOzJ,IACb,EAEAmI,EAAapH,UAAU0M,IAAMtF,EAAapH,UAAU8H,eAEpDV,EAAapH,UAAU2M,mBACnB,SAA4B7D,GAC1B,IAAIiD,EAAW9C,EAAQrI,EAGvB,QAAeM,KADf+H,EAAShK,KAAKoJ,SAEZ,OAAOpJ,KAGT,QAA8BiC,IAA1B+H,EAAOnB,eAUT,OATyB,IAArB1H,UAAUS,QACZ5B,KAAKoJ,QAAUzB,OAAOwC,OAAO,MAC7BnK,KAAKqJ,aAAe,QACMpH,IAAjB+H,EAAOH,KACY,KAAtB7J,KAAKqJ,aACTrJ,KAAKoJ,QAAUzB,OAAOwC,OAAO,aAEtBH,EAAOH,IAEX7J,KAIT,GAAyB,IAArBmB,UAAUS,OAAc,CAC1B,IACI6D,EADAkI,EAAOhG,OAAOgG,KAAK3D,GAEvB,IAAKrI,EAAI,EAAGA,EAAIgM,EAAK/L,SAAUD,EAEjB,oBADZ8D,EAAMkI,EAAKhM,KAEX3B,KAAK0N,mBAAmBjI,GAK1B,OAHAzF,KAAK0N,mBAAmB,kBACxB1N,KAAKoJ,QAAUzB,OAAOwC,OAAO,MAC7BnK,KAAKqJ,aAAe,EACbrJ,IACR,CAID,GAAyB,mBAFzB8M,EAAY9C,EAAOH,IAGjB7J,KAAK6I,eAAegB,EAAMiD,QACrB,QAAkB7K,IAAd6K,EAET,IAAKnL,EAAImL,EAAUlL,OAAS,EAAGD,GAAK,EAAGA,IACrC3B,KAAK6I,eAAegB,EAAMiD,EAAUnL,IAIxC,OAAO3B,IACb,EAmBAmI,EAAapH,UAAU+L,UAAY,SAAmBjD,GACpD,OAAOsB,EAAWnL,KAAM6J,GAAM,EAChC,EAEA1B,EAAapH,UAAU6M,aAAe,SAAsB/D,GAC1D,OAAOsB,EAAWnL,KAAM6J,GAAM,EAChC,EAEA1B,EAAawD,cAAgB,SAASpD,EAASsB,GAC7C,MAAqC,mBAA1BtB,EAAQoD,cACVpD,EAAQoD,cAAc9B,GAEtB8B,EAAc3K,KAAKuH,EAASsB,EAEvC,EAEA1B,EAAapH,UAAU4K,cAAgBA,EAiBvCxD,EAAapH,UAAU8M,WAAa,WAClC,OAAO7N,KAAKqJ,aAAe,EAAIlC,EAAenH,KAAKoJ,SAAW,EAChE,kBC7RO,MAAM0E,EACJ,eCmKH,IAAWC,ECtPjB,SAASC,EAAeC,EAAuBC,GAC7C,MACMC,GADc,IAAIC,aACQC,OAAOH,GACvC,OAAQD,GACN,IAAK,OACH,MAAO,CACL7L,KAAM,OACN8L,KAAMC,EACNG,KAAM,UACNjJ,KAAM,IAAIkJ,YAAY,MAE1B,IAAK,SACH,MAAO,CACLnM,KAAM,SACN8L,KAAMC,EACNG,KAAM,UACNE,WAAY,KAGhB,QACE,MAAM,IAAIrI,MAAK,aAAA2B,OAAcmG,gCAEnC,CAMsB,SAAAQ,EAAWC,EAAqBR,4CACpD,MAAMS,EAAmBX,EAAeU,EAASE,UAAUxM,KAAM8L,GAI3DW,QAAsBC,OAAOC,OAAOC,UACxCL,EACAD,EACA,CACEtM,KAAMmD,EACN3D,OAAQ,MAEV,EACA,CAAC,UAAW,YAGd,MAAO,CAAE8M,WAAUG,gBACrB,GAAC,EDyMD,SAAiBd,GACFA,EAAAkB,UAAyB,CACpCC,WAAY,MAEDnB,EAAAoB,OAAsB,CACjCD,WAAY,KAEDnB,EAAAqB,MAAqB,CAChCF,WAAY,MAEDnB,EAAAsB,YAA2B,CACtCH,WAAY,MAEDnB,EAAAuB,iBAAgC,CAC3CJ,WAAY,MAEDnB,EAAAwB,uBAAsC,CACjDL,WAAY,KAEf,CAnBD,CAAiBnB,IAAAA,EAmBhB,CAAA,IEtSK,MAAOyB,UAA0BrH,EAAAA,aACrCsH,eACEC,EACAC,GAEA,MAAMxJ,MAAM,+BACd,CAEAyJ,eACEF,EACAC,GAEA,MAAMxJ,MAAM,+BACd,EAOI,MAAO0J,UAAqBL,EAoBhCpJ,YAAY0J,SAMVvJ,QACAvG,KAAK+P,WAAa,IAAIC,IACtBhQ,KAAK2N,KAAOmC,EAAKnC,KACjB3N,KAAKiQ,cAAgBH,EAAKG,cAC1BjQ,KAAKkQ,OAAS,IAAIF,IAClBhQ,KAAKmQ,mBAAqBL,EAAKK,mBAC/BnQ,KAAKoQ,4BACuB,QAA1BC,EAAAP,EAAKQ,6BAAqB,IAAAD,EAAAA,GAAI,IAAIjC,aAAcC,OAAO,UAC3D,CAQAkC,eAAeC,EAAY7C,GACzB3N,KAAKiQ,cAAgBO,EACrBxQ,KAAK2N,KAAOA,CACd,CAEA8C,mBACEzQ,KAAKiQ,mBAAgBhO,CACvB,CAEAyO,mBACE,OAAO1Q,KAAKiQ,aACd,CAEAU,aACE,OAAO3Q,KAAK4Q,OACd,CAMAC,cAAcC,GACZ9Q,KAAK+Q,WAAaD,CACpB,CAMAE,UAAUC,GACRjR,KAAKkQ,OAASe,CAChB,CAEAC,eACEC,EACAC,EACAC,EACAT,EACAE,GAEIA,IACFzP,QAAQgE,KAAK,8BAA+ByL,GAC5C9Q,KAAK+Q,WAAaD,GAEpB,MAAMQ,EAA4B,WAAdH,EAAyBnR,KAAKyP,eAAiBzP,KAAK4P,eAClE2B,EAAkB,IAAIC,gBAAgB,CAC1CC,UAAWH,EAAYzQ,KAAKb,QAG9BoR,EACGM,YAAYH,GACZI,OAAON,GACPO,OAAO3Q,IACNI,QAAQsF,MAAM1F,GACdjB,KAAKqK,KAAK,eAAgBpJ,aAAa+F,EAAe/F,EAAI,IAAI+F,EAAa/F,EAAEqF,SAAS,IAE1FtG,KAAK4Q,QAAUA,CACjB,CAwBMnB,eACJC,EACAC,kDAEA,IACG3P,KAAK2N,KAAKkE,aAEsB,IAAjCnC,EAAaoC,KAAKC,WAElB,OAAOpC,EAAWqC,QAAQtC,GAG5B,MAAMb,cAAEA,GAAkB7O,KAAK2N,KAAKsE,YAC9BC,EAAWlS,KAAK2N,KAAKwE,qBAE3B,GAAItD,EAAe,CACjB,MAAMuD,EAAKpS,KAAKqS,eACdhC,EAAAX,EAAa4C,cAAcC,sCAA0B,EACrD7C,EAAa8C,WAITC,EAAc,IAAIC,WACtBhD,EAAaoC,KACb,EACA9R,KAAK2S,oBAAoBjD,IAIrBkD,EAAe,IAAIF,WAAW,GAEpCE,EAAa,GP5KM,GO6KnBA,EAAa,GAAKV,EASlB,IACE,MAAMW,QAAmB/D,OAAOC,OAAO+D,QACrC,CACE1Q,KAAMmD,EACN6M,KACAW,eAAgB,IAAIL,WAAWhD,EAAaoC,KAAM,EAAGW,EAAYV,aAEnElD,EACA,IAAI6D,WAAWhD,EAAaoC,KAAM9R,KAAK2S,oBAAoBjD,KAGvDsD,EAAU,IAAIzE,YAClBkE,EAAYV,WAAac,EAAWd,WAAaK,EAAGL,WAAaa,EAAab,YAE1EkB,EAAW,IAAIP,WAAWM,GAShC,OAPAC,EAAS5G,IAAIoG,GACbQ,EAAS5G,IAAI,IAAIqG,WAAWG,GAAaJ,EAAYV,YACrDkB,EAAS5G,IAAI,IAAIqG,WAAWN,GAAKK,EAAYV,WAAac,EAAWd,YACrEkB,EAAS5G,IAAIuG,EAAcH,EAAYV,WAAac,EAAWd,WAAaK,EAAGL,YAE/ErC,EAAaoC,KAAOkB,EAEbrD,EAAWqC,QAAQtC,EAC3B,CAAC,MAAOzO,GAEPqE,EAAaqB,MAAM1F,EACpB,CACF,MACCjB,KAAKqK,KACHyD,EACA,IAAI9G,EAAoDP,sCAAAA,EAAmByM,eAGhF,CAQKtD,eACJF,EACAC,4CAEA,IACG3P,KAAK2N,KAAKkE,aAEsB,IAAjCnC,EAAaoC,KAAKC,YAwVR,SAAsBoB,EAAwBC,GAC5D,MAAMR,EAAe,IAAIF,WACvBS,EAAU/P,MAAM+P,EAAUpB,WAAaqB,EAAarB,aAEtD,OAAOqB,EAAaC,OAAM,CAACnL,EAAOoF,IAAUpF,IAAU0K,EAAatF,IACrE,CA3VMgG,CAAsB5D,EAAaoC,KAAM9R,KAAKoQ,6BAE9C,OAAOT,EAAWqC,QAAQtC,GAE5B,MACMwC,EADO,IAAIQ,WAAWhD,EAAaoC,MACnBpC,EAAaoC,KAAKC,WAAa,GAErD,GAAI/R,KAAK2N,KAAKsE,UAAUC,IAAalS,KAAK2N,KAAK4F,YAC7C,IACE,MAAMC,QAAqBxT,KAAKyT,aAAa/D,EAAcwC,GAE3D,GADAlS,KAAK2N,KAAK+F,oBACNF,EACF,OAAO7D,EAAWqC,QAAQwB,EAE7B,CAAC,MAAO7M,GACHA,aAAiBK,GAAgBL,EAAMM,SAAWR,EAAmBkN,WACnE3T,KAAK2N,KAAK4F,cACZjO,EAAasF,KAAK,eAClB5K,KAAKqK,KACHyD,EACA,IAAI9G,EAAY,+BAAAc,OACiB9H,KAAKiQ,eACpCxJ,EAAmBkN,aAGvB3T,KAAK2N,KAAKiG,qBAGZtO,EAAasF,KAAK,wBAAyB,CAAEjE,SAEhD,CAGH,OAAOgJ,EAAWqC,QAAQtC,EAC5B,GAAC,CAMK+D,aACJ/D,EACAwC,GAEuD,IADvD2B,EAAA1S,UAAAS,OAAA,QAAAK,IAAAd,UAAA,GAAAA,UAAA,QAAsCc,EACtC6R,EAAoC3S,UAAAS,OAAAT,QAAAc,IAAAd,UAAAc,GAAAd,UAAA,GAAA,CAAE4S,aAAc,kDAEpD,MAAMC,EAAShU,KAAK2N,KAAKsE,UAAUC,GAUnC,IACE,MAAMO,EAAc,IAAIC,WACtBhD,EAAaoC,KACb,EACA9R,KAAK2S,oBAAoBjD,IAErBkD,EAAe,IAAIF,WAAWhD,EAAaoC,KAAMpC,EAAaoC,KAAKC,WAAa,EAAG,GAEnFkC,EAAWrB,EAAa,GACxBR,EAAK,IAAIM,WACbhD,EAAaoC,KACbpC,EAAaoC,KAAKC,WAAakC,EAAWrB,EAAab,WACvDkC,GAGIC,EAAkBzB,EAAYV,WAC9BoC,EACJzE,EAAaoC,KAAKC,YACjBU,EAAYV,WAAakC,EAAWrB,EAAab,YAE9CqC,QAAkBtF,OAAOC,OAAOsF,QACpC,CACEjS,KAAMmD,EACN6M,KACAW,eAAgB,IAAIL,WAAWhD,EAAaoC,KAAM,EAAGW,EAAYV,qBAEnE1B,EAAAyD,EAAYjF,6BAAiBmF,EAAOnF,cACpC,IAAI6D,WAAWhD,EAAaoC,KAAMoC,EAAiBC,IAG/CnB,EAAU,IAAIzE,YAAYkE,EAAYV,WAAaqC,EAAUrC,YAC7DkB,EAAW,IAAIP,WAAWM,GAOhC,OALAC,EAAS5G,IAAI,IAAIqG,WAAWhD,EAAaoC,KAAM,EAAGW,EAAYV,aAC9DkB,EAAS5G,IAAI,IAAIqG,WAAW0B,GAAY3B,EAAYV,YAEpDrC,EAAaoC,KAAOkB,EAEbtD,CACR,CAAC,MAAO/I,GACP,KAAI3G,KAAKmQ,mBAAmBnK,kBAAoB,GAiD9C,MAAM,IAAIgB,EACR,2DACAP,EAAmBkN,YAlDrB,GAAIG,EAAYC,aAAe/T,KAAKmQ,mBAAmBnK,kBAAmB,CAOxE,IAAIsO,EACJ,GAPAhP,EAAaxD,MAAK,0BAAAgG,OACUgM,EAAYC,aAAY,QAAAjM,OAChD9H,KAAKmQ,mBAAmBnK,kBAC1B,eAAA8B,OAAc4H,aAAwB6E,qBAAuB,QAAU,UAIrEP,IAAWhU,KAAK2N,KAAKsE,UAAUC,GAAW,CAG5C,MAAMsC,QAAoBxU,KAAK2N,KAAK8G,WAAWvC,GAAU,GAEzDoC,QAAwB7F,EAAW+F,EAAaxU,KAAKmQ,mBAAmBpK,YACzE,CAED,MAAM2O,QAAc1U,KAAKyT,aAAa/D,EAAcwC,EAAU2B,GAAmBG,EAAQ,CACvFD,aAAcD,EAAYC,aAAe,EACzClF,cAAeyF,aAAA,EAAAA,EAAiBzF,gBAOlC,OALI6F,GAASJ,IACXtU,KAAK2N,KAAKgH,UAAUL,EAAiBpC,GAAU,GAE/ClS,KAAK2N,KAAKiH,mBAAmB1C,IAExBwC,CACR,CAOKb,IACFvO,EAAaxD,MAAM,iCACnB9B,KAAK2N,KAAKkH,mBAAmBhB,EAAgBnF,SAAUwD,IAGzD5M,EAAasF,KAAK,oDAClB5K,KAAKqK,KACHyD,EACA,IAAI9G,EAAY,qCAAAc,OACuB9H,KAAKiQ,eAC1CxJ,EAAmByM,YAU5B,IACF,CAqBOb,OAAOE,EAA+BC,SAC5C,MAAMJ,EAAK,IAAI7D,YPtZM,IOuZfuG,EAAS,IAAIC,SAAS3C,GAGvBpS,KAAK+P,WAAWiF,IAAIzC,IAEvBvS,KAAK+P,WAAW1D,IAAIkG,EAAuB0C,KAAKC,MAAsB,MAAhBD,KAAKE,WAG7D,MAAMC,EAAsD,QAA1C/E,EAAArQ,KAAK+P,WAAW3D,IAAImG,UAAsB,IAAAlC,EAAAA,EAAI,EAQhE,OANAyE,EAAOO,UAAU,EAAG9C,GACpBuC,EAAOO,UAAU,EAAG7C,GACpBsC,EAAOO,UAAU,EAAG7C,EAAa4C,EAAY,OAE7CpV,KAAK+P,WAAW1D,IAAIkG,EAAuB6C,EAAY,GAEhDhD,CACT,CAEAO,oBAAoB+B,SAClB,GDrbE,SACJA,GAEA,MAAO,SAAUA,CACnB,CCibQY,CAAaZ,GAAQ,CACvB,IAAIa,EAAyC,QAAzBlF,EAAArQ,KAAKwV,cAAcd,UAAM,IAAArE,EAAAA,EAAIrQ,KAAK+Q,WAEtD,GAAsB,QAAlBwE,GAA6C,QAAlBA,EAC7B,MAAM,IAAIpP,MAAK,GAAA2B,OAAIyN,sDAGrB,GAAsB,QAAlBA,EACF,OAAO/P,EAAkBkP,EAAM7K,MAGjC,MAAMiI,EAAO,IAAIY,WAAWgC,EAAM5C,MAClC,IACE,MAAM2D,EAkDR,SAA0BC,GAC9B,MAAMC,EAAmB,GACzB,IAAIC,EAAQ,EACVC,EAAM,EACNC,EAAeJ,EAAO9T,OAAS,EACjC,KAAOiU,EAAMC,GAAc,CAEzB,KACED,EAAMC,IACY,IAAhBJ,EAAOG,IAAkC,IAApBH,EAAOG,EAAM,IAAgC,IAApBH,EAAOG,EAAM,KAE7DA,IACEA,GAAOC,IAAcD,EAAMH,EAAO9T,QAEtC,IAAImU,EAAMF,EACV,KAAOE,EAAMH,GAA6B,IAApBF,EAAOK,EAAM,IAAUA,IAE7C,GAAc,IAAVH,GACF,GAAIG,IAAQH,EAAO,MAAM/Q,UAAU,0CAEnC8Q,EAAOpL,KAAKqL,GAGdA,EAAQC,GAAY,CACrB,CACD,OAAOF,CACT,CA5E4BK,CAAgBlE,GASpC,GALoB,SAAlByD,GACAE,EAAYQ,MAAMC,GAChB,CAACC,EAASC,UAAWD,EAASE,eAAeC,SAASC,EAAczE,EAAKoE,OAGjE,CACV,IAAK,MAAM5I,KAASmI,EAAa,CAE/B,OADWc,EAAczE,EAAKxE,KAE5B,KAAK6I,EAASC,UACd,KAAKD,EAASE,cACZ,OAAO/I,EAAQ,EAIpB,CACD,MAAM,IAAIzI,UAAU,sBACrB,CACF,CAAC,MAAO5D,GACP,CAGF,OAAOuE,EAAkBkP,EAAM7K,KAChC,CACC,OAAOrE,EAAkBG,KAE7B,CAKA6P,cAAcd,GACZ,GAAyB,IAArB1U,KAAKkQ,OAAOsG,KACd,OAGF,MAAMC,EAAc/B,EAAMpC,cAAcmE,YAExC,OADcA,EAAczW,KAAKkQ,OAAO9D,IAAIqK,QAAexU,CAE7D,EAmCI,SAAUsU,EAAcG,GAC5B,OAAOA,EAAYC,CACrB,CAEA,MAAMA,EAAgB,GAEtB,IAAYR,GAAZ,SAAYA,GAEVA,EAAAA,EAAA,cAAA,GAAA,gBAEAA,EAAAA,EAAA,kBAAA,GAAA,oBAEAA,EAAAA,EAAA,kBAAA,GAAA,oBAEAA,EAAAA,EAAA,kBAAA,GAAA,oBAEAA,EAAAA,EAAA,UAAA,GAAA,YAEAA,EAAAA,EAAA,IAAA,GAAA,MAEAA,EAAAA,EAAA,IAAA,GAAA,MAEAA,EAAAA,EAAA,IAAA,GAAA,MAEAA,EAAAA,EAAA,IAAA,GAAA,MAEAA,EAAAA,EAAA,QAAA,IAAA,UAEAA,EAAAA,EAAA,WAAA,IAAA,aAEAA,EAAAA,EAAA,YAAA,IAAA,cAEAA,EAAAA,EAAA,QAAA,IAAA,UAEAA,EAAAA,EAAA,YAAA,IAAA,cAEAA,EAAAA,EAAA,WAAA,IAAA,aAEAA,EAAAA,EAAA,IAAA,IAAA,MAKAA,EAAAA,EAAA,UAAA,IAAA,YAEAA,EAAAA,EAAA,UAAA,IAAA,YAEAA,EAAAA,EAAA,gBAAA,IAAA,iBAGD,CA5CD,CAAYA,IAAAA,EA4CX,CAAA,ICrkBK,MAAOS,UAA+BzO,EAAAA,aAiBtCoL,kBACF,OAAOvT,KAAK6W,YACd,CAEAzQ,YACE6J,EACA4B,EACA1B,GAEA5J,QAbMvG,KAAsB8W,uBAAG,EAEzB9W,KAAY6W,cAAY,EAY9B7W,KAAK+W,gBAAkB,EACvB/W,KAAKgX,cAAgB,IAAIxL,MRvCD,IQwCxBxL,KAAKiX,QAAUpF,EACf7R,KAAKmQ,mBAAqBA,EAC1BnQ,KAAKkX,kBAAoB,IAAIlH,IAC7BhQ,KAAKiQ,cAAgBA,EACrBjQ,KAAKmX,gBACP,CAEAC,WAAWH,GACTjX,KAAKiX,QAAUA,CACjB,CAEArD,oBACM5T,KAAKmQ,mBAAmBlK,iBAAmB,IAG/CjG,KAAK8W,wBAA0B,EAE3B9W,KAAK8W,uBAAyB9W,KAAKmQ,mBAAmBlK,mBACxDjG,KAAK6W,cAAe,GAExB,CAEAnD,oBACE1T,KAAKmX,gBACP,CAMAA,iBACEnX,KAAK8W,uBAAyB,EAC9B9W,KAAK6W,cAAe,CACtB,CASApC,WAAWvC,GAAgC,IAAbmF,IAAMlW,UAAAS,OAAA,QAAAK,IAAAd,UAAA,KAAAA,UAAA,GAClC,MAAM4V,EAAmB7E,QAAAA,EAAAA,EAAalS,KAAKmS,qBAErCmF,EAAkBtX,KAAKkX,kBAAkB9K,IAAI2K,GACnD,QAA+B,IAApBO,EACT,OAAOA,EAET,MAAMC,EAAiB,IAAI/O,SAAmB,CAAOC,EAASC,IAAU8O,EAAAxX,UAAA,OAAA,GAAA,YACtE,IACE,MAAMyX,EAAkBzX,KAAKiS,UAAU8E,GAAiBrI,SAClD8F,QFxEQ,SACpBkD,GAEuC,IADvC9I,EAAAzN,UAAAS,OAAAT,QAAAc,IAAAd,UAAAc,GAAAd,UAAuC,GAAA,CAAEiB,KAAMmD,GAC/CoS,yDAA8B,mDAG9B,OAAO7I,OAAOC,OAAO6I,UACnB,MACAF,EACA9I,GACA,EACU,WAAV+I,EAAqB,CAAC,aAAc,aAAe,CAAC,UAAW,WAEnE,GAAC,CE2DiCC,OFsBZ,SAAQlJ,EAAqBR,4CACjD,MAAMS,EAAmBX,EAAeU,EAASE,UAAUxM,KAAM8L,GAGjE,OAAOY,OAAOC,OAAO8I,WAAWlJ,EAAkBD,EAAU,IAC9D,GAAC,CE1BeoJ,CAAQL,EAAiBzX,KAAKmQ,mBAAmBpK,aACvD0R,EAAgB7I,UAAUxM,KAC1B,UAGEiV,GACFrX,KAAK6U,mBAAmBL,EAAauC,GAAiB,GAExD/W,KAAKqK,KAAK,eAAgBmK,EAAatC,EAAUlS,KAAKiQ,eACtDxH,EAAQ+L,EACT,CAAC,MAAOvT,GACPyH,EAAOzH,EACR,CAAS,QACRjB,KAAKkX,kBAAkBa,OAAOhB,EAC/B,CACF,MAED,OADA/W,KAAKkX,kBAAkB7K,IAAI0K,EAAiBQ,GACrCA,CACT,CAQMF,OAAO3I,GAAiC,IAAZwD,EAAQ/Q,UAAAS,OAAA,QAAAK,IAAAd,UAAA,GAAAA,UAAA,GAAG,iDACrCnB,KAAK6U,mBAAmBnG,EAAUwD,GACxClS,KAAKmX,gBACP,GAAC,CAQKtC,mBAAmBnG,GAA2D,IAAtCwD,EAAQ/Q,UAAAS,OAAA,QAAAK,IAAAd,UAAA,GAAAA,UAAA,GAAG,EAAG6W,EAAgB7W,UAAAS,OAAA,QAAAK,IAAAd,UAAA,IAAAA,UAAA,4CAC1EmE,EAAaxD,MAAM,mBACfoQ,GAAY,IACdlS,KAAK+W,gBAAkB7E,EAAWlS,KAAKgX,cAAcpV,QAEvD,MAAMoS,QAAevF,EAAWC,EAAU1O,KAAKmQ,mBAAmBpK,aAClE/F,KAAK2U,UAAUX,EAAQhU,KAAK+W,gBAAiBiB,EAC/C,GAAC,CAEKrD,UAAUX,EAAgB9B,GAA0C,IAAxB8F,EAAgB7W,UAAAS,OAAA,QAAAK,IAAAd,UAAA,IAAAA,UAAA,4CAChEnB,KAAKgX,cAAc9E,EAAWlS,KAAKgX,cAAcpV,QAAUoS,EACvDgE,GACFhY,KAAKqK,KAAK,eAAgB2J,EAAOtF,SAAUwD,EAAUlS,KAAKiQ,cAE9D,GAAC,CAEK2E,mBAAmBtH,4CACvBtN,KAAK+W,gBAAkBzJ,EAAQtN,KAAKgX,cAAcpV,OAClD5B,KAAKmX,gBACP,GAAC,CAEDtF,YACE,OAAO7R,KAAKiX,OACd,CAEA9E,qBACE,OAAOnS,KAAK+W,eACd,CAOA9E,UAAUC,GACR,OAAOlS,KAAKgX,cAAc9E,QAAAA,EAAYlS,KAAK+W,gBAC7C,EC/JF,MAAMkB,EAAsC,GACtCC,EAAsD,IAAIlI,IAEhE,IACImI,EAMArS,EAPAsS,EAAkC,GAGlCC,GAA+B,EAE/BC,GAAwB,EAIxBnI,EAAyCtK,EAiF7C,SAAS0S,EAAgBtI,EAAuBW,GAC9C,IAAI4H,EAAUP,EAAoBQ,MAAMC,GAAMA,EAAE/H,eAAiBC,IACjE,GAAK4H,EAaMvI,IAAkBuI,EAAQ9H,oBAEnC8H,EAAQjI,eAAeN,EAAe0I,EAAyB1I,QAfnD,CAEZ,GADA3K,EAAaD,KAAK,2BAA4B,CAAE4K,mBAC3CE,EACH,MAAMhK,MAAM,+BAEdqS,EAAU,IAAI3I,EAAa,CACzBI,gBACAtC,KAAMgL,EAAyB1I,GAC/BE,uBAGFyI,GAAwBJ,GACxBP,EAAoB1N,KAAKiO,EAC1B,CAMD,OAAOA,CACT,CAEA,SAASG,EAAyB1I,GAChC,IAAKA,EACH,OAAOkI,EAET,IAAIxK,EAAOuK,EAAgB9L,IAAI6D,GAQ/B,OAPKtC,IACHA,EAAO,IAAIiJ,EAAsB3G,GAAe,EAAME,GAClDrK,GACF6H,EAAK0J,OAAOvR,GAEdoS,EAAgB7L,IAAI4D,EAAetC,IAE9BA,CACT,CAMA,SAASkL,EAAoBjI,GAC3B,IAAIkI,EAAiBV,EAAgBK,MAAMD,GAAYA,EAAQ7H,eAAiBC,IAChF,IAAKkI,EAAgB,CACnB,IAAK3I,EACH,MAAM,IAAItL,UAAU,+BAEtBiU,EAAiB,IAAIjJ,EAAa,CAChClC,KAAMwK,EACNlI,cAAe,YACfE,uBAEFyI,GAAwBE,GACxBV,EAAgB7N,KAAKuO,EACtB,CACD,OAAOA,CACT,CAoBA,SAASF,GAAwBJ,GAC/BA,EAAQtP,GAAG,gBAAiBvC,IAC1B,MAAMoS,EAAoB,CACxBC,KAAM,QACNlH,KAAM,CAAEnL,MAAO,IAAIR,SAAK2B,OAAIrB,EAAmBE,EAAMM,QAAOa,MAAAA,OAAKnB,EAAML,YAEzE2S,YAAYF,EAAI,GAEpB,CAEA,SAASG,GAAkBxK,EAAqBwD,GAS9C+G,YAR4B,CAC1BD,KAAkB,aAClBlH,KAAM,CAEJI,WACAxD,aAIN,CAjLApJ,EAAanB,gBAAgB,QAE7BgV,UAAaC,IACX,MAAMJ,KAAEA,EAAIlH,KAAEA,GAA4BsH,EAAGtH,KAE7C,OAAQkH,GACN,IAAK,OACH1T,EAAaD,KAAK,sBAClB8K,EAAqB2B,EAAK3B,mBAC1BmI,IAAiBxG,EAAK3B,mBAAmBrK,UAEzC,MAAMuT,EAA2B,CAC/BL,KAAM,SACNlH,KAAM,CAAEmF,QAASoB,IAEnBF,EAAgB,IAAIvB,OAAsB3U,EAAWoW,EAAqBlI,GAC1EgI,EAAcjP,GAAG,eAAgBgQ,IACjCD,YAAYI,GACZ,MACF,IAAK,SAwHqBC,EAvHHxH,EAAKmF,SAuHehH,EAvHN6B,EAAK7B,eA4H1C0I,EAAyB1I,GAAemH,WAAWkC,IAHnDjB,EAAsBiB,EACtBnB,EAAcf,WAAWkC,IAzHvBhU,EAAaD,KAAK,+BAElB4T,YAAYG,EAAGtH,MACf,MACF,IAAK,SACWyG,EAAgBzG,EAAK7B,cAAe6B,EAAKlB,SAC/CM,eACN8H,EACAlH,EAAKyH,eACLzH,EAAK0H,eACL1H,EAAKlB,QACLkB,EAAKhB,OAEP,MACF,IAAK,SACc+H,EAAoB/G,EAAKlB,SAC/BM,eACT8H,EACAlH,EAAKyH,eACLzH,EAAK0H,eACL1H,EAAKlB,QACLkB,EAAKhB,OAEP,MACF,IAAK,SACCwH,GACFhT,EAAaxD,MAAM,kBAqG3B,SAAsB2D,EAAgB6H,GACpChI,EAAaxD,MAAM,sBACnBgE,EAAYL,EACZ0S,SAAAA,EAAed,OAAO5R,EAAK6H,GAC3B,IAAK,MAAM,CAAGmM,KAAevB,EAC3BuB,EAAWpC,OAAO5R,EAAK6H,EAE3B,CA3GQoM,CAAa5H,EAAKrM,IAAKqM,EAAKI,WACnBJ,EAAK7B,cACd0I,EAAyB7G,EAAK7B,eAAeoH,OAAOvF,EAAKrM,IAAKqM,EAAKI,UAEnE5M,EAAaqB,MAAM,mEAErB,MACF,IAAK,kBA+DwBiK,EA9DHkB,EAAKlB,QA+D4B,QAA7DP,EAAA4H,EAAoBQ,MAAMC,GAAMA,EAAE/H,eAAiBC,WAAU,IAAAP,GAAAA,EAAAI,mBA9DzD,MACF,IAAK,cACH8H,EAAgBzG,EAAK7B,cAAe6B,EAAKlB,SAASC,cAAciB,EAAKhB,OACrE,MACF,IAAK,YACHsH,EAAgBuB,SAASC,IACvBA,EAAG5I,UAAUc,EAAKb,IAAI,IAExB,MACF,IAAK,kBAOT,SAAoCa,qCAClC,MAAM2H,EAAad,EAAyB7G,EAAK7B,qBAC3CwJ,EAAWhF,WAAW3C,EAAKI,UACjCuH,EAAWtC,gBACb,GAAC,CAVK0C,CAAqB/H,GAmD3B,IAAiClB,IAqBH0I,EAAiBrJ,CArE5C,EA+GCzN,KAAKsX,oBACPxU,EAAaxD,MAAM,yBAEnBU,KAAKuX,eAAkBC,IACrB,MAAMC,EAAcD,EAAMC,YAC1B3U,EAAaxD,MAAM,cAAemY,GAClCA,EAAYC,SAAU,EACtB,MAAMlB,KAAEA,EAAI/I,cAAEA,EAAaW,QAAEA,EAAOE,MAAEA,GAAUmJ,EAAYE,QACtD3B,EACK,WAATQ,EAAoBH,EAAoBjI,GAAW2H,EAAgBtI,EAAeW,GACpFtL,EAAaxD,MAAM,YAAa,CAAEgP,UAClC0H,EAAQtH,eAAe8H,EAAMiB,EAAY7I,SAAU6I,EAAY5I,SAAUT,EAASE,EAAM","x_google_ignoreList":[0,5]}