morok-bot-sdk 1.0.1

package/dist/crypto/group-secret-cipher.js

@@ -0,0 +1,69 @@
+import { webcrypto } from 'node:crypto';
+const subtle = webcrypto.subtle;
+export const GROUP_SECRET_BYTES = 32;
+export const GROUP_SECRET_IV_BYTES = 12;
+export const GROUP_SECRET_EPOCH_HEADER = 4;
+export function groupSecretAad(conversationId, version) {
+    if (!Number.isInteger(conversationId) || conversationId < 1) {
+        throw new Error(`group-secret-cipher: bad conversationId ${conversationId}`);
+    }
+    if (!Number.isInteger(version) || version < 0) {
+        throw new Error(`group-secret-cipher: bad version ${version}`);
+    }
+    return new TextEncoder().encode(`morok-group-secret-${conversationId}-v${version}`);
+}
+async function importKey(raw, usages) {
+    if (raw.byteLength !== GROUP_SECRET_BYTES) {
+        throw new Error(`group-secret-cipher: secret must be ${GROUP_SECRET_BYTES} bytes; got ${raw.byteLength}`);
+    }
+    return subtle.importKey('raw', raw, { name: 'AES-GCM' }, false, usages);
+}
+export async function sealEpochKey(args) {
+    if (args.epochKey.byteLength !== GROUP_SECRET_BYTES) {
+        throw new Error(`group-secret-cipher: epoch key must be ${GROUP_SECRET_BYTES} bytes; got ${args.epochKey.byteLength}`);
+    }
+    if (!Number.isInteger(args.predictedEpoch) || args.predictedEpoch < 0 || args.predictedEpoch > 0xffffffff) {
+        throw new Error(`group-secret-cipher: predictedEpoch out of range: ${args.predictedEpoch}`);
+    }
+    const plaintext = new Uint8Array(GROUP_SECRET_EPOCH_HEADER + GROUP_SECRET_BYTES);
+    new DataView(plaintext.buffer).setUint32(0, args.predictedEpoch >>> 0, false);
+    plaintext.set(args.epochKey, GROUP_SECRET_EPOCH_HEADER);
+    const aad = groupSecretAad(args.conversationId, args.version);
+    const key = await importKey(args.groupSecret, ['encrypt']);
+    const iv = webcrypto.getRandomValues(new Uint8Array(GROUP_SECRET_IV_BYTES));
+    const ct = await subtle.encrypt({ name: 'AES-GCM', iv, additionalData: aad }, key, plaintext);
+    plaintext.fill(0);
+    return {
+        ciphertext: Buffer.from(ct).toString('base64'),
+        iv: Buffer.from(iv).toString('base64'),
+    };
+}
+export async function unsealEpochKey(args) {
+    const iv = Buffer.from(args.ivBase64, 'base64');
+    if (iv.byteLength !== GROUP_SECRET_IV_BYTES) {
+        throw new Error(`group-secret-cipher: sealed iv must be ${GROUP_SECRET_IV_BYTES} bytes; got ${iv.byteLength}`);
+    }
+    const ct = Buffer.from(args.ciphertextBase64, 'base64');
+    const aad = groupSecretAad(args.conversationId, args.version);
+    const key = await importKey(args.groupSecret, ['decrypt']);
+    let pt;
+    try {
+        pt = await subtle.decrypt({ name: 'AES-GCM', iv, additionalData: aad }, key, ct);
+    }
+    catch (err) {
+        throw new Error(`group-secret-cipher: unseal v${args.version} for conv ${args.conversationId} failed (tag mismatch or wrong secret): ${err.message}`);
+    }
+    const raw = new Uint8Array(pt);
+    if (raw.byteLength === GROUP_SECRET_BYTES) {
+        return raw;
+    }
+    if (raw.byteLength !== GROUP_SECRET_BYTES + GROUP_SECRET_EPOCH_HEADER) {
+        throw new Error(`group-secret-cipher: unwrapped epoch key has unexpected length ${raw.byteLength}`);
+    }
+    const innerEpoch = new DataView(raw.buffer, raw.byteOffset, raw.byteLength).getUint32(0, false);
+    if (args.expectedEpoch !== undefined && innerEpoch !== args.expectedEpoch) {
+        throw new Error(`group-secret-cipher: inner epoch ${innerEpoch} does not match expected ${args.expectedEpoch}`);
+    }
+    return raw.subarray(GROUP_SECRET_EPOCH_HEADER);
+}
+//# sourceMappingURL=group-secret-cipher.js.map

package/dist/crypto/group-secret-cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-secret-cipher.js","sourceRoot":"","sources":["../../src/crypto/group-secret-cipher.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;AAI/B,MAAM,CAAC,MAAM,kBAAkB,GAAU,EAAE,CAAA;AAC3C,MAAM,CAAC,MAAM,qBAAqB,GAAO,EAAE,CAAA;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAA;AAG1C,MAAM,UAAU,cAAc,CAAC,cAAsB,EAAE,OAAe;IAClE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,cAAc,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,sBAAsB,cAAc,KAAK,OAAO,EAAE,CAAC,CAAA;AACvF,CAAC;AAGD,KAAK,UAAU,SAAS,CAAC,GAAe,EAAE,MAAkB;IACxD,IAAI,GAAG,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,uCAAuC,kBAAkB,eAAe,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;IAC7G,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;AAC3E,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAMlC;IACG,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,0CAA0C,kBAAkB,eAAe,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;IAC1H,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,GAAG,UAAU,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/F,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,yBAAyB,GAAG,kBAAkB,CAAC,CAAA;IAChF,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7E,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAA;IAEvD,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAC7D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IAC1D,MAAM,EAAE,GAAI,SAAS,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAA;IAC5E,MAAM,EAAE,GAAI,MAAM,MAAM,CAAC,OAAO,CAC5B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,EAC5C,GAAG,EACH,SAAS,CACZ,CAAA;IAED,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,OAAO;QACH,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9C,EAAE,EAAU,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjD,CAAA;AACL,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAOpC;IACG,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC/C,IAAI,EAAE,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0CAA0C,qBAAqB,eAAe,EAAE,CAAC,UAAU,EAAE,CAAC,CAAA;IAClH,CAAC;IACD,MAAM,EAAE,GAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAC7D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IAE1D,IAAI,EAAe,CAAA;IACnB,IAAI,CAAC;QACD,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CACrB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,EAC5C,GAAG,EACH,EAAE,CACL,CAAA;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACX,gCAAgC,IAAI,CAAC,OAAO,aAAa,IAAI,CAAC,cAAc,2CAA4C,GAAa,CAAC,OAAO,EAAE,CAClJ,CAAA;IACL,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAC9B,IAAI,GAAG,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;QAExC,OAAO,GAAG,CAAA;IACd,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,kBAAkB,GAAG,yBAAyB,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACX,kEAAkE,GAAG,CAAC,UAAU,EAAE,CACrF,CAAA;IACL,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC/F,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACX,oCAAoC,UAAU,4BAA4B,IAAI,CAAC,aAAa,EAAE,CACjG,CAAA;IACL,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAA;AAClD,CAAC"}

package/dist/crypto/group-secret-store.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Per-conversation group_secret state on disk at {stateDir}/group-secrets/<conversationId>.json
+ * Same disk layout and locking as channel-key-store, with "version" in place of "epoch"
+ * Persisted because the bot needs old versions to re-seal historical epochs after a rotate
+ * and to unseal old sealed bundles, a restart re-reads from disk
+ *   { "currentVersion": N, "secrets": { "0": "<b64 32 bytes>", ... } }
+ */
+import type { SdkLogger } from '../types.js';
+export interface GroupSecretState {
+    currentVersion: number;
+    /** version (int as decimal string) -> base64(32 bytes) */
+    secrets: Record<string, string>;
+}
+export declare class GroupSecretStore {
+    private readonly logger?;
+    private readonly dir;
+    private readonly chains;
+    constructor(stateDir: string, logger?: SdkLogger | undefined);
+    init(): Promise<void>;
+    load(conversationId: number): Promise<GroupSecretState | null>;
+    /** Merge (version, base64-secret) pairs. currentVersion tracks max. Creates the file if missing */
+    mergeVersions(conversationId: number, entries: Array<{
+        version: number;
+        secretBase64: string;
+    }>): Promise<GroupSecretState>;
+    /** Returns a fresh 32-byte copy, or null. Same isolation as ChannelKeyStore.getSecret */
+    getSecret(conversationId: number, version: number): Promise<Uint8Array | null>;
+    drop(conversationId: number): Promise<void>;
+    private pathFor;
+    private loadInner;
+    private parseState;
+    private saveInner;
+    private withLock;
+}
+//# sourceMappingURL=group-secret-store.d.ts.map

package/dist/crypto/group-secret-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-secret-store.d.ts","sourceRoot":"","sources":["../../src/crypto/group-secret-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,KAAK,EAAE,SAAS,EAAE,MAA4C,aAAa,CAAA;AAGlF,MAAM,WAAW,gBAAgB;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAGD,qBAAa,gBAAgB;IAIK,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAHtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;gBAEjD,QAAQ,EAAE,MAAM,EAAmB,MAAM,CAAC,EAAE,SAAS,YAAA;IAK3D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrB,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAKpE,mGAAmG;IAC7F,aAAa,CACf,cAAc,EAAE,MAAM,EACtB,OAAO,EAAS,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,GACjE,OAAO,CAAC,gBAAgB,CAAC;IA+B5B,yFAAyF;IACnF,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAa9E,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjD,OAAO,CAAC,OAAO;YAQD,SAAS;IAuBvB,OAAO,CAAC,UAAU;YAYJ,SAAS;IAUvB,OAAO,CAAC,QAAQ;CAWnB"}

package/dist/crypto/group-secret-store.js

@@ -0,0 +1,149 @@
+import { mkdir, readFile, rename, writeFile, unlink, readdir } from 'node:fs/promises';
+import { randomBytes } from 'node:crypto';
+import { join, dirname } from 'node:path';
+import { GROUP_SECRET_BYTES } from './group-secret-cipher.js';
+export class GroupSecretStore {
+    logger;
+    dir;
+    chains = new Map();
+    constructor(stateDir, logger) {
+        this.logger = logger;
+        this.dir = join(stateDir, 'group-secrets');
+    }
+    async init() {
+        await mkdir(this.dir, { recursive: true, mode: 0o700 });
+        let entries = [];
+        try {
+            entries = await readdir(this.dir);
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            if (e.includes('.tmp.')) {
+                try {
+                    await unlink(join(this.dir, e));
+                }
+                catch { }
+            }
+        }
+    }
+    async load(conversationId) {
+        return this.withLock(conversationId, () => this.loadInner(conversationId));
+    }
+    async mergeVersions(conversationId, entries) {
+        if (entries.length === 0) {
+            const existing = await this.load(conversationId);
+            return existing ?? { currentVersion: -1, secrets: {} };
+        }
+        for (const e of entries) {
+            if (!Number.isInteger(e.version) || e.version < 0 || e.version > 0xffffffff) {
+                throw new Error(`group-secret-store: bad version ${e.version}`);
+            }
+            const raw = Buffer.from(e.secretBase64, 'base64');
+            if (raw.byteLength !== GROUP_SECRET_BYTES) {
+                throw new Error(`group-secret-store: secret for v${e.version} decodes to ${raw.byteLength} bytes; expected ${GROUP_SECRET_BYTES}`);
+            }
+        }
+        return this.withLock(conversationId, async () => {
+            const cur = await this.loadInner(conversationId);
+            const next = cur
+                ? { currentVersion: cur.currentVersion, secrets: { ...cur.secrets } }
+                : { currentVersion: -1, secrets: {} };
+            for (const e of entries) {
+                next.secrets[String(e.version)] = e.secretBase64;
+                if (e.version > next.currentVersion)
+                    next.currentVersion = e.version;
+            }
+            await this.saveInner(conversationId, next);
+            return next;
+        });
+    }
+    async getSecret(conversationId, version) {
+        const state = await this.load(conversationId);
+        if (!state)
+            return null;
+        const b64 = state.secrets[String(version)];
+        if (!b64)
+            return null;
+        const raw = Buffer.from(b64, 'base64');
+        if (raw.byteLength !== GROUP_SECRET_BYTES)
+            return null;
+        const out = new Uint8Array(GROUP_SECRET_BYTES);
+        out.set(raw);
+        return out;
+    }
+    async drop(conversationId) {
+        return this.withLock(conversationId, async () => {
+            const p = this.pathFor(conversationId);
+            try {
+                await unlink(p);
+            }
+            catch { }
+        });
+    }
+    pathFor(conversationId) {
+        if (!Number.isInteger(conversationId) || conversationId < 1) {
+            throw new Error(`group-secret-store: bad conversationId ${conversationId}`);
+        }
+        return join(this.dir, `${conversationId}.json`);
+    }
+    async loadInner(conversationId) {
+        const p = this.pathFor(conversationId);
+        let raw;
+        try {
+            raw = await readFile(p, 'utf8');
+        }
+        catch (err) {
+            if (err?.code === 'ENOENT')
+                return null;
+            throw err;
+        }
+        try {
+            return this.parseState(raw);
+        }
+        catch (err) {
+            const quarantined = `${p}.corrupt-${Date.now()}`;
+            try {
+                await rename(p, quarantined);
+            }
+            catch { }
+            this.logger?.warn({ conversationId, err: err.message, quarantined }, '[group-secret-store] quarantined corrupt state');
+            return null;
+        }
+    }
+    parseState(raw) {
+        const obj = JSON.parse(raw);
+        if (!obj || typeof obj !== 'object')
+            throw new Error('not an object');
+        if (typeof obj.currentVersion !== 'number')
+            throw new Error('missing currentVersion');
+        if (!obj.secrets || typeof obj.secrets !== 'object')
+            throw new Error('missing secrets');
+        for (const k of Object.keys(obj.secrets)) {
+            if (typeof obj.secrets[k] !== 'string')
+                throw new Error(`v${k} not a string`);
+        }
+        return obj;
+    }
+    async saveInner(conversationId, state) {
+        const p = this.pathFor(conversationId);
+        const tmp = `${p}.tmp.${randomBytes(4).toString('hex')}`;
+        await mkdir(dirname(p), { recursive: true, mode: 0o700 });
+        const json = JSON.stringify(state);
+        await writeFile(tmp, json, { mode: 0o600 });
+        await rename(tmp, p);
+    }
+    withLock(conversationId, fn) {
+        const prev = this.chains.get(conversationId) ?? Promise.resolve();
+        const next = prev.then(fn, fn);
+        const cleanup = next.finally(() => {
+            if (this.chains.get(conversationId) === cleanup) {
+                this.chains.delete(conversationId);
+            }
+        });
+        this.chains.set(conversationId, cleanup);
+        return next;
+    }
+}
+//# sourceMappingURL=group-secret-store.js.map

package/dist/crypto/group-secret-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-secret-store.js","sourceRoot":"","sources":["../../src/crypto/group-secret-store.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACtF,OAAO,EAAE,WAAW,EAAE,MAA+C,aAAa,CAAA;AAClF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAA6C,WAAW,CAAA;AAEhF,OAAO,EAAE,kBAAkB,EAAE,MAAwC,0BAA0B,CAAA;AAW/F,MAAM,OAAO,gBAAgB;IAIsB;IAH9B,GAAG,CAAQ;IACX,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAA;IAE7D,YAAY,QAAgB,EAAmB,MAAkB;QAAlB,WAAM,GAAN,MAAM,CAAY;QAC7D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;IAC9C,CAAC;IAGD,KAAK,CAAC,IAAI;QACN,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACvD,IAAI,OAAO,GAAa,EAAE,CAAA;QAC1B,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAM;QAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAc,CAAC;YAClE,CAAC;QACL,CAAC;IACL,CAAC;IAGD,KAAK,CAAC,IAAI,CAAC,cAAsB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAA;IAC9E,CAAC;IAID,KAAK,CAAC,aAAa,CACf,cAAsB,EACtB,OAAgE;QAEhE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAChD,OAAO,QAAQ,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QAC1D,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;YACnE,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;YACjD,IAAI,GAAG,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACX,mCAAmC,CAAC,CAAC,OAAO,eAAe,GAAG,CAAC,UAAU,oBAAoB,kBAAkB,EAAE,CACpH,CAAA;YACL,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YAChD,MAAM,IAAI,GAAqB,GAAG;gBAC9B,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE;gBACrE,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;YACzC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,CAAA;gBAChD,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,cAAc;oBAAE,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,OAAO,CAAA;YACxE,CAAC;YACD,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;YAC1C,OAAO,IAAI,CAAA;QACf,CAAC,CAAC,CAAA;IACN,CAAC;IAID,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,OAAe;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC7C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACtC,IAAI,GAAG,CAAC,UAAU,KAAK,kBAAkB;YAAE,OAAO,IAAI,CAAA;QACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAA;QAC9C,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACZ,OAAO,GAAG,CAAA;IACd,CAAC;IAGD,KAAK,CAAC,IAAI,CAAC,cAAsB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;YACtC,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAuB,CAAC;QAC3D,CAAC,CAAC,CAAA;IACN,CAAC;IAKO,OAAO,CAAC,cAAsB;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,cAAc,EAAE,CAAC,CAAA;QAC/E,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,OAAO,CAAC,CAAA;IACnD,CAAC;IAGO,KAAK,CAAC,SAAS,CAAC,cAAsB;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QACtC,IAAI,GAAW,CAAA;QACf,IAAI,CAAC;YACD,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACnC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,IAAK,GAAyB,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAC9D,MAAM,GAAG,CAAA;QACb,CAAC;QACD,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;YAChD,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAmB,CAAC;YAChE,IAAI,CAAC,MAAM,EAAE,IAAI,CACb,EAAE,cAAc,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,WAAW,EAAE,EAC5D,gDAAgD,CACnD,CAAA;YACD,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAGO,UAAU,CAAC,GAAW;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QACrE,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QACrF,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACvF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACjF,CAAC;QACD,OAAO,GAAuB,CAAA;IAClC,CAAC;IAGO,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,KAAuB;QACnE,MAAM,CAAC,GAAK,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;QACxD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3C,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACxB,CAAC;IAGO,QAAQ,CAAI,cAAsB,EAAE,EAAoB;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAA;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;YACtC,CAAC;QACL,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QACxC,OAAO,IAAI,CAAA;IACf,CAAC;CACJ"}

package/dist/crypto/signal.d.ts

@@ -0,0 +1,81 @@
+/**
+ * libsignal wrapper. Exposes only what the SDK uses: encrypt/decrypt, processPreKeyBundle for first
+ * contact with a new peer device, and mintOneTimePreKey/mintSignedPreKey for replenish
+ * libsignal-protocol-typescript picks up node:crypto via globalThis.crypto on Node 22+, no setWebCrypto
+ */
+import type { FileSignalStore } from './stores.js';
+import type { SdkLogger } from '../types.js';
+/** Prekey bundle from GET /prekeys/:userId/:deviceId */
+export interface PreKeyBundle {
+    userId: number;
+    deviceId: number;
+    registrationId: number;
+    identityKey: string;
+    signedPreKey: {
+        keyId: number;
+        publicKey: string;
+        signature: string;
+    };
+    oneTimePreKey: null | {
+        keyId: number;
+        publicKey: string;
+    };
+    accountSigningKey?: string | null;
+    deviceCertificate?: string | null;
+}
+export declare class SignalEngine {
+    private readonly store;
+    private readonly logger?;
+    /**
+     * Per-(peerUserId.peerDeviceId) serialisation around every session-mutating libsignal call
+     * (encrypt, decrypt, processPreKeyBundle)
+     * Without it, concurrent calls to the same device race the on-disk ratchet record and corrupt the session
+     * One shared lock map so encrypt blocks decrypt and the reverse for the same address
+     */
+    private peerChains;
+    constructor(store: FileSignalStore, logger?: SdkLogger | undefined);
+    /** Run `fn` chained after any in-flight task for the same peer-device
+     * The get-and-set of the chain tail is synchronous so two callers in the same tick can't both see an empty prev */
+    withPeerLock<T>(peerUserId: number, peerDeviceId: number, fn: () => Promise<T>): Promise<T>;
+    /**
+     * Encrypt bytes for a peer device. Returns a Signal envelope:
+     *   { type: 1, body }  WhisperMessage (continuing ratchet)
+     *   { type: 3, body }  PreKeySignalMessage (first frame, peer installs the session on receive)
+     *
+     * libsignal's MessageType.body is a binary string (charCodes 0-255 per byte),
+     * the wire format is base64 so we re-encode
+     * The caller must processPreKeyBundle the address first for a fresh session
+     */
+    encrypt(peerUserId: number, peerDeviceId: number, plaintext: Uint8Array): Promise<{
+        type: 1 | 3;
+        body: string;
+    }>;
+    /**
+     * Decrypt an incoming envelope. Type-3 frames install the session on first receive (X3DH receiver path)
+     * ciphertextBody is base64 from the wire, decode to ArrayBuffer before handing to libsignal
+     * Passing it with 'binary' encoding makes libsignal read the base64 chars as bytes and corrupt everything
+     */
+    decrypt(peerUserId: number, peerDeviceId: number, messageType: number, ciphertextBody: string): Promise<Uint8Array>;
+    /** Install a Signal session from a fresh prekey bundle. Don't call this with an open session,
+     *  it overwrites the ratchet state, check hasOpenSession first
+     *
+     *  Encrypt-side cross-signing gate: if the bundle carries both an account signing key and a per-device cert,
+     *  the cert is verified over the canonical (userId,deviceId,identityKey) message before any session state is written
+     *  A present-but-invalid cert is refused (tampered bundle or server identity injection)
+     *  NULL on either side falls through to TOFU, and a curve-wrapper fault also returns 'uncertified',
+     *  so a crypto-init failure never cuts the bot off */
+    processPreKeyBundle(bundle: PreKeyBundle): Promise<void>;
+    hasOpenSession(peerUserId: number, peerDeviceId: number): Promise<boolean>;
+    /** Generate a one-time prekey, persist locally, return the public half + keyId for upload */
+    mintOneTimePreKey(keyId: number): Promise<{
+        keyId: number;
+        publicKey: string;
+    }>;
+    /** Generate a signed prekey, sign with the bot's identity key, persist, return the public + signature for upload */
+    mintSignedPreKey(keyId: number): Promise<{
+        keyId: number;
+        publicKey: string;
+        signature: string;
+    }>;
+}
+//# sourceMappingURL=signal.d.ts.map

package/dist/crypto/signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal.d.ts","sourceRoot":"","sources":["../../src/crypto/signal.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAY,aAAa,CAAA;AAclD,wDAAwD;AACxD,MAAM,WAAW,YAAY;IACzB,MAAM,EAAU,MAAM,CAAA;IACtB,QAAQ,EAAQ,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,EAAK,MAAM,CAAA;IACtB,YAAY,EAAE;QACV,KAAK,EAAM,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,aAAa,EAAE,IAAI,GAAG;QAClB,KAAK,EAAM,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAGD,qBAAa,YAAY;IAUjB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAV5B;;;;;OAKG;IACH,OAAO,CAAC,UAAU,CAAsC;gBAGnC,KAAK,EAAG,eAAe,EACvB,MAAM,CAAC,EAAE,SAAS,YAAA;IAGvC;uHACmH;IACnH,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAY3F;;;;;;;;OAQG;IACG,OAAO,CACT,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAChE,OAAO,CAAC;QAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAYzC;;;;OAIG;IACG,OAAO,CACT,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EACxC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAC5C,OAAO,CAAC,UAAU,CAAC;IAoCtB;;;;;;;0DAOsD;IAChD,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCxD,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQhF,6FAA6F;IACvF,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IASrF,oHAAoH;IAC9G,gBAAgB,CAClB,KAAK,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAetE"}

package/dist/crypto/signal.js

@@ -0,0 +1,125 @@
+import { KeyHelper, SessionBuilder, SessionCipher, SignalProtocolAddress, } from '@privacyresearch/libsignal-protocol-typescript';
+import { verifyPeerCert } from './cross-signing.js';
+function toArrayBuffer(b64) {
+    const buf = Buffer.from(b64, 'base64');
+    return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
+}
+function fromArrayBuffer(buf) {
+    return Buffer.from(buf).toString('base64');
+}
+export class SignalEngine {
+    store;
+    logger;
+    peerChains = new Map();
+    constructor(store, logger) {
+        this.store = store;
+        this.logger = logger;
+    }
+    withPeerLock(peerUserId, peerDeviceId, fn) {
+        const key = `${peerUserId}.${peerDeviceId}`;
+        const prev = this.peerChains.get(key) ?? Promise.resolve();
+        const next = prev.then(fn, fn);
+        const tail = next.catch(() => { });
+        this.peerChains.set(key, tail);
+        void tail.then(() => { if (this.peerChains.get(key) === tail)
+            this.peerChains.delete(key); });
+        return next;
+    }
+    async encrypt(peerUserId, peerDeviceId, plaintext) {
+        const cipher = new SessionCipher(this.store, addr(peerUserId, peerDeviceId));
+        const msg = await cipher.encrypt(plaintext.buffer.slice(plaintext.byteOffset, plaintext.byteOffset + plaintext.byteLength));
+        const t = msg.type === 3 ? 3 : 1;
+        const body = msg.body
+            ? Buffer.from(msg.body, 'binary').toString('base64')
+            : '';
+        return { type: t, body };
+    }
+    async decrypt(peerUserId, peerDeviceId, messageType, ciphertextBody) {
+        const cipher = new SessionCipher(this.store, addr(peerUserId, peerDeviceId));
+        const buf = Buffer.from(ciphertextBody, 'base64');
+        const ab = buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
+        let plaintext;
+        if (messageType === 3) {
+            const peerAddr = `${peerUserId}.${peerDeviceId}`;
+            const before = await this.store.peekPeerIdentity(peerAddr);
+            plaintext = await cipher.decryptPreKeyWhisperMessage(ab);
+            if (before !== undefined) {
+                const after = await this.store.peekPeerIdentity(peerAddr);
+                if (after === undefined || !Buffer.from(before).equals(Buffer.from(after))) {
+                    this.logger?.warn({ peerUserId, peerDeviceId }, '[signal] PEER IDENTITY CHANGED on a type-3 frame: a KNOWN peer presented a ' +
+                        'new identity key and the session was silently re-pinned. This is a legit ' +
+                        'reinstall/rotation OR a malicious-server impersonation attempt, verify before ' +
+                        'trusting subsequent messages from this peer.');
+                }
+            }
+        }
+        else if (messageType === 1) {
+            plaintext = await cipher.decryptWhisperMessage(ab);
+        }
+        else {
+            throw new Error(`unsupported DM message type ${messageType} (expected 1 or 3)`);
+        }
+        return new Uint8Array(plaintext);
+    }
+    async processPreKeyBundle(bundle) {
+        const certStatus = await verifyPeerCert({
+            userId: bundle.userId,
+            deviceId: bundle.deviceId,
+            identityKeyB64: bundle.identityKey,
+            accountSigningKey: bundle.accountSigningKey,
+            deviceCertificate: bundle.deviceCertificate,
+        }, this.logger);
+        if (certStatus === 'invalid') {
+            throw new Error(`processPreKeyBundle: peer ${bundle.userId}.${bundle.deviceId} presented an INVALID ` +
+                `cross-signing certificate - refusing to open a session (tampered bundle or server ` +
+                `identity injection)`);
+        }
+        const builder = new SessionBuilder(this.store, addr(bundle.userId, bundle.deviceId));
+        const device = {
+            identityKey: toArrayBuffer(bundle.identityKey),
+            registrationId: bundle.registrationId,
+            signedPreKey: {
+                keyId: bundle.signedPreKey.keyId,
+                publicKey: toArrayBuffer(bundle.signedPreKey.publicKey),
+                signature: toArrayBuffer(bundle.signedPreKey.signature),
+            },
+            preKey: bundle.oneTimePreKey ? {
+                keyId: bundle.oneTimePreKey.keyId,
+                publicKey: toArrayBuffer(bundle.oneTimePreKey.publicKey),
+            } : undefined,
+        };
+        await builder.processPreKey(device);
+    }
+    async hasOpenSession(peerUserId, peerDeviceId) {
+        const cipher = new SessionCipher(this.store, addr(peerUserId, peerDeviceId));
+        return cipher.hasOpenSession();
+    }
+    async mintOneTimePreKey(keyId) {
+        const kp = await KeyHelper.generatePreKey(keyId);
+        await this.store.storePreKey(kp.keyId, kp.keyPair);
+        return {
+            keyId: kp.keyId,
+            publicKey: fromArrayBuffer(kp.keyPair.pubKey),
+        };
+    }
+    async mintSignedPreKey(keyId) {
+        const idPair = await this.store.getIdentityKeyPair();
+        if (!idPair)
+            throw new Error('identity key pair missing - bot state not imported');
+        const spk = await KeyHelper.generateSignedPreKey(idPair, keyId);
+        await this.store.storeSignedPreKeyFull({
+            keyId: spk.keyId,
+            keyPair: spk.keyPair,
+            signature: spk.signature,
+        });
+        return {
+            keyId: spk.keyId,
+            publicKey: fromArrayBuffer(spk.keyPair.pubKey),
+            signature: fromArrayBuffer(spk.signature),
+        };
+    }
+}
+function addr(userId, deviceId) {
+    return new SignalProtocolAddress(String(userId), deviceId);
+}
+//# sourceMappingURL=signal.js.map

package/dist/crypto/signal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal.js","sourceRoot":"","sources":["../../src/crypto/signal.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,SAAS,EACT,cAAc,EACd,aAAa,EACb,qBAAqB,GAGxB,MAAM,gDAAgD,CAAA;AAIvD,OAAO,EAAE,cAAc,EAAE,MAAY,oBAAoB,CAAA;AAGzD,SAAS,aAAa,CAAC,GAAW;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACtC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAgB,CAAA;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,GAAgB;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAC9C,CAAC;AAuBD,MAAM,OAAO,YAAY;IAUA;IACA;IAJb,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAA;IAExD,YACqB,KAAuB,EACvB,MAAkB;QADlB,UAAK,GAAL,KAAK,CAAkB;QACvB,WAAM,GAAN,MAAM,CAAY;IACpC,CAAC;IAIJ,YAAY,CAAI,UAAkB,EAAE,YAAoB,EAAE,EAAoB;QAC1E,MAAM,GAAG,GAAI,GAAG,UAAU,IAAI,YAAY,EAAE,CAAA;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAE9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAE9B,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QAC5F,OAAO,IAAI,CAAA;IACf,CAAC;IAWD,KAAK,CAAC,OAAO,CACT,UAAkB,EAAE,YAAoB,EAAE,SAAqB;QAE/D,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAA;QAC5E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CACnD,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CACrD,CAAC,CAAA;QACjB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI;YACjB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACpD,CAAC,CAAC,EAAE,CAAA;QACR,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAA;IAC5B,CAAC;IAOD,KAAK,CAAC,OAAO,CACT,UAAkB,EAAE,YAAoB,EACxC,WAAmB,EAAE,cAAsB;QAE3C,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAA;QAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;QACjD,MAAM,EAAE,GAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAgB,CAAA;QAC5F,IAAI,SAAsB,CAAA;QAC1B,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YAQpB,MAAM,QAAQ,GAAG,GAAG,UAAU,IAAI,YAAY,EAAE,CAAA;YAChD,MAAM,MAAM,GAAK,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YAC5D,SAAS,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAA;YACxD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;gBACzD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACzE,IAAI,CAAC,MAAM,EAAE,IAAI,CACb,EAAE,UAAU,EAAE,YAAY,EAAE,EAC5B,6EAA6E;wBAC7E,2EAA2E;wBAC3E,gFAAgF;wBAChF,8CAA8C,CACjD,CAAA;gBACL,CAAC;YACL,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YAC3B,SAAS,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAA;QACtD,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,KAAK,CAAC,+BAA+B,WAAW,oBAAoB,CAAC,CAAA;QACnF,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAA;IACpC,CAAC;IAUD,KAAK,CAAC,mBAAmB,CAAC,MAAoB;QAC1C,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC;YACpC,MAAM,EAAa,MAAM,CAAC,MAAM;YAChC,QAAQ,EAAW,MAAM,CAAC,QAAQ;YAClC,cAAc,EAAK,MAAM,CAAC,WAAW;YACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC9C,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACf,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACX,6BAA6B,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,wBAAwB;gBACrF,oFAAoF;gBACpF,qBAAqB,CACxB,CAAA;QACL,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QACpF,MAAM,MAAM,GAA4B;YACpC,WAAW,EAAK,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC;YACjD,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE;gBACV,KAAK,EAAM,MAAM,CAAC,YAAY,CAAC,KAAK;gBACpC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;gBACvD,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;aAC1D;YACD,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC3B,KAAK,EAAM,MAAM,CAAC,aAAa,CAAC,KAAK;gBACrC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;aAC3D,CAAC,CAAC,CAAC,SAAS;SAChB,CAAA;QACD,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,YAAoB;QACzD,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAA;QAC5E,OAAO,MAAM,CAAC,cAAc,EAAE,CAAA;IAClC,CAAC;IAMD,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACjC,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;QAChD,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;QAClD,OAAO;YACH,KAAK,EAAM,EAAE,CAAC,KAAK;YACnB,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SAChD,CAAA;IACL,CAAC;IAGD,KAAK,CAAC,gBAAgB,CAClB,KAAa;QAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAA;QACpD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QAClF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,oBAAoB,CAAC,MAAqB,EAAE,KAAK,CAAC,CAAA;QAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC;YACnC,KAAK,EAAM,GAAG,CAAC,KAAK;YACpB,OAAO,EAAI,GAAG,CAAC,OAAO;YACtB,SAAS,EAAE,GAAG,CAAC,SAAS;SAC3B,CAAC,CAAA;QACF,OAAO;YACH,KAAK,EAAM,GAAG,CAAC,KAAK;YACpB,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9C,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;SAC5C,CAAA;IACL,CAAC;CACJ;AAGD,SAAS,IAAI,CAAC,MAAc,EAAE,QAAgB;IAC1C,OAAO,IAAI,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAA;AAC9D,CAAC"}

package/dist/crypto/stores.d.ts

@@ -0,0 +1,130 @@
+/**
+ * File-backed Signal Protocol stores. Implements libsignal's StorageType on a directory layout
+ * Atomic writes (write-then-rename) so a crash mid-update can't corrupt state
+ * fsck on boot moves broken session/prekey files to quarantine/ so one bad file doesn't refuse the whole bot
+ *
+ * Layout under stateDir:
+ *   identity.json                              own keypair + reg id + ids
+ *   state.json                                 bookkeeping (SPK rotation ts, next ids)
+ *   sessions/<userId>.<deviceId>.json          per-peer-device session
+ *   prekeys/signed-<keyId>.json                signed prekeys
+ *   prekeys/onetime-<keyId>.json               one-time prekeys
+ *   identity-cache/<userId>.<deviceId>.json    peer identity for TOFU
+ *   quarantine/                                moved here on parse failure
+ *
+ * Everything created 0o700 / 0o600, anyone with read on this dir can impersonate the bot
+ */
+import type { Direction, KeyPairType, SessionRecordType, StorageType } from '@privacyresearch/libsignal-protocol-typescript';
+interface SerializedKeyPair {
+    pub: string;
+    priv: string;
+}
+export interface PersistedIdentity {
+    identityKeyPair: SerializedKeyPair;
+    registrationId: number;
+    /** Set on first /auth/bot-session, absent before first start */
+    userId?: number;
+    /** Always 1 for bots */
+    deviceId?: number;
+    accountSigningKey?: SerializedKeyPair;
+}
+interface PersistedState {
+    /** Unix ms of last signed-prekey rotation. 0 = never */
+    lastSignedPreKeyRotationMs: number;
+    /** Next OTPK id to mint. Monotonic */
+    nextOneTimePreKeyId: number;
+    /** Next signed-prekey id, bumps every rotation */
+    nextSignedPreKeyId: number;
+}
+export interface FsckResult {
+    quarantinedSessions: string[];
+    quarantinedPreKeys: string[];
+}
+declare const DIRECTION_ENUM: {
+    readonly SENDING: 1;
+    readonly RECEIVING: 2;
+};
+export declare class FileSignalStore implements StorageType {
+    private readonly stateDir;
+    readonly Direction: typeof DIRECTION_ENUM;
+    private identityCache?;
+    private stateCache?;
+    constructor(stateDir: string);
+    /** Create the directory tree with safe perms. Idempotent */
+    ensureLayout(): Promise<void>;
+    /**
+     * Idempotent import of a parsed .morokbot. A no-op if identity.json already exists with matching userId/regId,
+     * throws if the stateDir holds a different bot
+     *
+     * Write order matters: state.json, signed prekey, OTPKs, then identity.json
+     * last identity.json is the "import complete" marker, a crash before it lands makes the next start re-import
+     */
+    importInitial(opts: {
+        botUserId: number;
+        registrationId: number;
+        deviceId: number;
+        identityKeyPair: SerializedKeyPair;
+        accountSigningKey?: SerializedKeyPair;
+        signedPreKey: {
+            keyId: number;
+            pub: string;
+            priv: string;
+            signature: string;
+        };
+        oneTimePreKeys: Array<{
+            keyId: number;
+            pub: string;
+            priv: string;
+        }>;
+    }): Promise<void>;
+    /**
+     * Walk sessions and prekeys, move anything that fails to parse to quarantine/
+     * The bot keeps booting, a lost session re-X3DHs when the peer next sends
+     */
+    fsck(): Promise<FsckResult>;
+    getIdentityKeyPair(): Promise<KeyPairType | undefined>;
+    getLocalRegistrationId(): Promise<number | undefined>;
+    /** TOFU, first sight of a peer's identity key is accepted and later changes are rejected
+     * A rejected identity surfaces as a silent decrypt failure, the SDK installs a fresh session
+     * from the peer's next PreKeySignalMessage */
+    isTrustedIdentity(identifier: string, identityKey: ArrayBuffer, _direction: Direction): Promise<boolean>;
+    saveIdentity(encodedAddress: string, publicKey: ArrayBuffer, _nonblockingApproval?: boolean): Promise<boolean>;
+    /** Public read of a peer's currently-pinned identity (no TOFU logic), so SignalEngine.decrypt can detect
+     *  a silent type-3 re-pin. The vendored libsignal type-3 receiver path doesn't enforce the changed-identity check
+     *  (it calls isTrustedIdentity without awaiting), the encrypt path does
+     *  Returns undefined for a never-seen peer */
+    peekPeerIdentity(encodedAddress: string): Promise<ArrayBuffer | undefined>;
+    loadSession(encodedAddress: string): Promise<SessionRecordType | undefined>;
+    storeSession(encodedAddress: string, record: SessionRecordType): Promise<void>;
+    loadPreKey(keyId: number | string): Promise<KeyPairType | undefined>;
+    storePreKey(keyId: number | string, keyPair: KeyPairType): Promise<void>;
+    removePreKey(keyId: number | string): Promise<void>;
+    loadSignedPreKey(keyId: number | string): Promise<KeyPairType | undefined>;
+    storeSignedPreKey(keyId: number | string, keyPair: KeyPairType): Promise<void>;
+    removeSignedPreKey(keyId: number | string): Promise<void>;
+    /** Write full SPK record including signature (for replenish) */
+    storeSignedPreKeyFull(rec: {
+        keyId: number;
+        keyPair: KeyPairType;
+        signature: ArrayBuffer;
+    }): Promise<void>;
+    getSignedPreKeyRecord(keyId: number): Promise<{
+        keyId: number;
+        pub: string;
+        priv: string;
+        signature?: string;
+    } | undefined>;
+    listOneTimePreKeyIds(): Promise<number[]>;
+    loadState(): Promise<PersistedState>;
+    patchState(patch: Partial<PersistedState>): Promise<void>;
+    private loadPersistedIdentity;
+    private loadPeerIdentity;
+    private identityFile;
+    private stateFile;
+    private sessionFile;
+    private identityCacheFile;
+    private signedPreKeyFile;
+    private oneTimePreKeyFile;
+}
+export {};
+//# sourceMappingURL=stores.d.ts.map

package/dist/crypto/stores.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stores.d.ts","sourceRoot":"","sources":["../../src/crypto/stores.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,KAAK,EACR,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,EACzD,MAAM,gDAAgD,CAAA;AAGvD,UAAU,iBAAiB;IACvB,GAAG,EAAG,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACf;AAoDD,MAAM,WAAW,iBAAiB;IAC9B,eAAe,EAAI,iBAAiB,CAAA;IACpC,cAAc,EAAK,MAAM,CAAA;IACzB,gEAAgE;IAChE,MAAM,CAAC,EAAY,MAAM,CAAA;IACzB,wBAAwB;IACxB,QAAQ,CAAC,EAAU,MAAM,CAAA;IACzB,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;CACxC;AAED,UAAU,cAAc;IACpB,wDAAwD;IACxD,0BAA0B,EAAE,MAAM,CAAA;IAClC,sCAAsC;IACtC,mBAAmB,EAAS,MAAM,CAAA;IAClC,kDAAkD;IAClD,kBAAkB,EAAU,MAAM,CAAA;CACrC;AAED,MAAM,WAAW,UAAU;IACvB,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,kBAAkB,EAAG,MAAM,EAAE,CAAA;CAChC;AAGD,QAAA,MAAM,cAAc;;;CAGV,CAAA;AAGV,qBAAa,eAAgB,YAAW,WAAW;IAMnC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IALrC,QAAQ,CAAC,SAAS,EAAE,OAAO,cAAc,CAAiB;IAE1D,OAAO,CAAC,aAAa,CAAC,CAAmB;IACzC,OAAO,CAAC,UAAU,CAAC,CAAmB;gBAET,QAAQ,EAAE,MAAM;IAG7C,4DAA4D;IACtD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAMnC;;;;;;OAMG;IACG,aAAa,CAAC,IAAI,EAAE;QACtB,SAAS,EAAU,MAAM,CAAA;QACzB,cAAc,EAAK,MAAM,CAAA;QACzB,QAAQ,EAAW,MAAM,CAAA;QACzB,eAAe,EAAI,iBAAiB,CAAA;QACpC,iBAAiB,CAAC,EAAC,iBAAiB,CAAA;QACpC,YAAY,EAAE;YACV,KAAK,EAAM,MAAM,CAAA;YACjB,GAAG,EAAQ,MAAM,CAAA;YACjB,IAAI,EAAO,MAAM,CAAA;YACjB,SAAS,EAAE,MAAM,CAAA;SACpB,CAAA;QACD,cAAc,EAAE,KAAK,CAAC;YAClB,KAAK,EAAE,MAAM,CAAA;YACb,GAAG,EAAI,MAAM,CAAA;YACb,IAAI,EAAG,MAAM,CAAA;SAChB,CAAC,CAAA;KACL,GAAG,OAAO,CAAC,IAAI,CAAC;IA+DjB;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;IAuC3B,kBAAkB,IAAI,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAMtD,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI3D;;kDAE8C;IACxC,iBAAiB,CACnB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,WAAW,EACxB,UAAU,EAAE,SAAS,GACtB,OAAO,CAAC,OAAO,CAAC;IAMb,YAAY,CACd,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,WAAW,EACtB,oBAAoB,CAAC,EAAE,OAAO,GAC/B,OAAO,CAAC,OAAO,CAAC;IAanB;;;kDAG8C;IACxC,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAO1E,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAK3E,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9E,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAOpE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxE,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnD,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAO1E,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAY9E,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/D,gEAAgE;IAC1D,qBAAqB,CAAC,GAAG,EAAE;QAC7B,KAAK,EAAM,MAAM,CAAA;QACjB,OAAO,EAAI,WAAW,CAAA;QACtB,SAAS,EAAE,WAAW,CAAA;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQX,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAC/D,GAAG,SAAS,CAAC;IAIR,oBAAoB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAUzC,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC;IAiBpC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;YAUjD,qBAAqB;YAOrB,gBAAgB;IAS9B,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,WAAW;IAGnB,OAAO,CAAC,iBAAiB;IAGzB,OAAO,CAAC,gBAAgB;IAGxB,OAAO,CAAC,iBAAiB;CAG5B"}