onelobby 0.3.1 → 0.4.1

package/README.md

@@ -9,7 +9,7 @@ You need a OneLobby lobby server (the WebSocket URL, like `wss://lobby.example.c
 ## Use it from a `<script>` tag (no build tools)
 
 ```html
-<script src="https://cdn.jsdelivr.net/npm/onelobby@0.3.1/dist/onelobby.global.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/onelobby@0.4.1/dist/onelobby.global.min.js"></script>
 <script>
   const kit = new OneLobby.OneLobby({
     gameId: "com.you.yourgame",            // any unique name for your game
@@ -51,7 +51,7 @@ const lobby = await kit.host({ name: "My game", maxPlayers: 4 });
 console.log("Tell your friend this code:", formatCode(lobby.code));
 ```
 
-Without a bundler: `import { OneLobby } from "https://cdn.jsdelivr.net/npm/onelobby@0.3.1/dist/onelobby.bundle.mjs"`.
+Without a bundler: `import { OneLobby } from "https://cdn.jsdelivr.net/npm/onelobby@0.4.1/dist/onelobby.bundle.mjs"`.
 
 ## Made for players
 

package/dist/chunking.d.ts

@@ -2,6 +2,8 @@ import { type Message } from "./codec.js";
 /** Chunk body capacity: 16 KiB frame - 3 header - 8 chunk header, rounded down for headroom. */
 export declare const CHUNK_PAYLOAD = 16000;
 export declare function splitChunks(id: number, bytes: Uint8Array, size?: number): Message[];
+/** Most incomplete chunk sets one reassembler (one peer) holds at once; a new id past this evicts the oldest. */
+export declare const MAX_PARTIAL_SETS = 8;
 /** Reassembles chunked payloads by id. Duplicates are ignored; out-of-order chunks are fine. */
 export declare class Reassembler {
     private parts;
@@ -13,5 +15,7 @@ export declare class Reassembler {
         bytes: Uint8Array;
     }): Uint8Array | null;
     get pending(): number;
+    /** Bytes held across incomplete sets. */
+    get pendingBytes(): number;
     clear(): void;
 }

package/dist/chunking.js

@@ -17,15 +17,20 @@ export function splitChunks(id, bytes, size = CHUNK_PAYLOAD) {
     }
     return out;
 }
+/** Most incomplete chunk sets one reassembler (one peer) holds at once; a new id past this evicts the oldest. */
+export const MAX_PARTIAL_SETS = 8;
 /** Reassembles chunked payloads by id. Duplicates are ignored; out-of-order chunks are fine. */
 export class Reassembler {
-    parts = new Map();
+    parts = new Map(); // insertion order = oldest first
     /** Returns the full payload when the last chunk arrives, otherwise null. */
     push(chunk) {
         if (chunk.count === 0 || chunk.index >= chunk.count)
             return null;
         let e = this.parts.get(chunk.id);
         if (!e || e.count !== chunk.count) {
+            this.parts.delete(chunk.id);
+            while (this.parts.size >= MAX_PARTIAL_SETS)
+                this.parts.delete(this.parts.keys().next().value);
             e = { count: chunk.count, got: 0, parts: new Array(chunk.count), bytes: 0 };
             this.parts.set(chunk.id, e);
         }
@@ -38,8 +43,17 @@ export class Reassembler {
             this.parts.delete(chunk.id);
             throw new CodecError("too_long", `chunk set over ${MAX_REASSEMBLED_BYTES} bytes`);
         }
-        if (e.got < e.count)
+        if (e.got < e.count) {
+            // Many half-sent sets must not add up to more than one whole message: the oldest others go first.
+            while (this.pendingBytes > MAX_REASSEMBLED_BYTES && this.parts.size > 1) {
+                for (const id of this.parts.keys())
+                    if (id !== chunk.id) {
+                        this.parts.delete(id);
+                        break;
+                    }
+            }
             return null;
+        }
         this.parts.delete(chunk.id);
         const out = new Uint8Array(e.bytes);
         let pos = 0;
@@ -52,6 +66,13 @@ export class Reassembler {
     get pending() {
         return this.parts.size;
     }
+    /** Bytes held across incomplete sets. */
+    get pendingBytes() {
+        let n = 0;
+        for (const p of this.parts.values())
+            n += p.bytes;
+        return n;
+    }
     clear() {
         this.parts.clear();
     }

package/dist/chunking.js.map

@@ -1 +1 @@
-{"version":3,"file":"chunking.js","sourceRoot":"","sources":["../src/chunking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAgB,MAAM,YAAY,CAAC;AAE7E,gGAAgG;AAChG,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AAEnC,MAAM,UAAU,WAAW,CAAC,EAAU,EAAE,KAAiB,EAAE,IAAI,GAAG,aAAa;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,GAAG,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;IACjF,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,OAAO;YACb,EAAE;YACF,KAAK,EAAE,CAAC;YACR,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,gGAAgG;AAChG,MAAM,OAAO,WAAW;IACd,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE3C,4EAA4E;IAC5E,IAAI,CAAC,KAAsE;QACzE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACjE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YAClC,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACnC,CAAC,CAAC,GAAG,EAAE,CAAC;QACR,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,CAAC,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,kBAAkB,qBAAqB,QAAQ,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,CAAE,EAAE,GAAG,CAAC,CAAC;YACjB,GAAG,IAAI,CAAE,CAAC,MAAM,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IACD,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF","sourcesContent":["import { CodecError, MAX_REASSEMBLED_BYTES, type Message } from \"./codec.js\";\n\n/** Chunk body capacity: 16 KiB frame - 3 header - 8 chunk header, rounded down for headroom. */\nexport const CHUNK_PAYLOAD = 16000;\n\nexport function splitChunks(id: number, bytes: Uint8Array, size = CHUNK_PAYLOAD): Message[] {\n  const count = Math.max(1, Math.ceil(bytes.length / size));\n  if (count > 0xffff) throw new RangeError(\"payload needs more than 65535 chunks\");\n  const out: Message[] = [];\n  for (let i = 0; i < count; i++) {\n    out.push({\n      type: \"chunk\",\n      id,\n      index: i,\n      count,\n      bytes: bytes.subarray(i * size, Math.min(bytes.length, (i + 1) * size)),\n    });\n  }\n  return out;\n}\n\ninterface Partial {\n  count: number;\n  got: number;\n  parts: (Uint8Array | undefined)[];\n  bytes: number;\n}\n\n/** Reassembles chunked payloads by id. Duplicates are ignored; out-of-order chunks are fine. */\nexport class Reassembler {\n  private parts = new Map<number, Partial>();\n\n  /** Returns the full payload when the last chunk arrives, otherwise null. */\n  push(chunk: { id: number; index: number; count: number; bytes: Uint8Array }): Uint8Array | null {\n    if (chunk.count === 0 || chunk.index >= chunk.count) return null;\n    let e = this.parts.get(chunk.id);\n    if (!e || e.count !== chunk.count) {\n      e = { count: chunk.count, got: 0, parts: new Array(chunk.count), bytes: 0 };\n      this.parts.set(chunk.id, e);\n    }\n    if (e.parts[chunk.index]) return null;\n    e.parts[chunk.index] = chunk.bytes;\n    e.got++;\n    e.bytes += chunk.bytes.length;\n    if (e.bytes > MAX_REASSEMBLED_BYTES) {\n      this.parts.delete(chunk.id);\n      throw new CodecError(\"too_long\", `chunk set over ${MAX_REASSEMBLED_BYTES} bytes`);\n    }\n    if (e.got < e.count) return null;\n    this.parts.delete(chunk.id);\n    const out = new Uint8Array(e.bytes);\n    let pos = 0;\n    for (const p of e.parts) {\n      out.set(p!, pos);\n      pos += p!.length;\n    }\n    return out;\n  }\n\n  get pending(): number {\n    return this.parts.size;\n  }\n  clear(): void {\n    this.parts.clear();\n  }\n}\n"]}
+{"version":3,"file":"chunking.js","sourceRoot":"","sources":["../src/chunking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAgB,MAAM,YAAY,CAAC;AAE7E,gGAAgG;AAChG,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AAEnC,MAAM,UAAU,WAAW,CAAC,EAAU,EAAE,KAAiB,EAAE,IAAI,GAAG,aAAa;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,GAAG,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;IACjF,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,OAAO;YACb,EAAE;YACF,KAAK,EAAE,CAAC;YACR,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,iHAAiH;AACjH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,gGAAgG;AAChG,MAAM,OAAO,WAAW;IACd,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC,CAAC,iCAAiC;IAE7E,4EAA4E;IAC5E,IAAI,CAAC,KAAsE;QACzE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACjE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,gBAAgB;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;YAC/F,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACnC,CAAC,CAAC,GAAG,EAAE,CAAC;QACR,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,CAAC,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,kBAAkB,qBAAqB,QAAQ,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;YACpB,kGAAkG;YAClG,OAAO,IAAI,CAAC,YAAY,GAAG,qBAAqB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACxE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;oBAAE,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC;wBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;wBAAC,MAAM;oBAAC,CAAC;YAC5F,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,CAAE,EAAE,GAAG,CAAC,CAAC;YACjB,GAAG,IAAI,CAAE,CAAC,MAAM,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IACD,yCAAyC;IACzC,IAAI,YAAY;QACd,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF","sourcesContent":["import { CodecError, MAX_REASSEMBLED_BYTES, type Message } from \"./codec.js\";\n\n/** Chunk body capacity: 16 KiB frame - 3 header - 8 chunk header, rounded down for headroom. */\nexport const CHUNK_PAYLOAD = 16000;\n\nexport function splitChunks(id: number, bytes: Uint8Array, size = CHUNK_PAYLOAD): Message[] {\n  const count = Math.max(1, Math.ceil(bytes.length / size));\n  if (count > 0xffff) throw new RangeError(\"payload needs more than 65535 chunks\");\n  const out: Message[] = [];\n  for (let i = 0; i < count; i++) {\n    out.push({\n      type: \"chunk\",\n      id,\n      index: i,\n      count,\n      bytes: bytes.subarray(i * size, Math.min(bytes.length, (i + 1) * size)),\n    });\n  }\n  return out;\n}\n\ninterface Partial {\n  count: number;\n  got: number;\n  parts: (Uint8Array | undefined)[];\n  bytes: number;\n}\n\n/** Most incomplete chunk sets one reassembler (one peer) holds at once; a new id past this evicts the oldest. */\nexport const MAX_PARTIAL_SETS = 8;\n\n/** Reassembles chunked payloads by id. Duplicates are ignored; out-of-order chunks are fine. */\nexport class Reassembler {\n  private parts = new Map<number, Partial>(); // insertion order = oldest first\n\n  /** Returns the full payload when the last chunk arrives, otherwise null. */\n  push(chunk: { id: number; index: number; count: number; bytes: Uint8Array }): Uint8Array | null {\n    if (chunk.count === 0 || chunk.index >= chunk.count) return null;\n    let e = this.parts.get(chunk.id);\n    if (!e || e.count !== chunk.count) {\n      this.parts.delete(chunk.id);\n      while (this.parts.size >= MAX_PARTIAL_SETS) this.parts.delete(this.parts.keys().next().value!);\n      e = { count: chunk.count, got: 0, parts: new Array(chunk.count), bytes: 0 };\n      this.parts.set(chunk.id, e);\n    }\n    if (e.parts[chunk.index]) return null;\n    e.parts[chunk.index] = chunk.bytes;\n    e.got++;\n    e.bytes += chunk.bytes.length;\n    if (e.bytes > MAX_REASSEMBLED_BYTES) {\n      this.parts.delete(chunk.id);\n      throw new CodecError(\"too_long\", `chunk set over ${MAX_REASSEMBLED_BYTES} bytes`);\n    }\n    if (e.got < e.count) {\n      // Many half-sent sets must not add up to more than one whole message: the oldest others go first.\n      while (this.pendingBytes > MAX_REASSEMBLED_BYTES && this.parts.size > 1) {\n        for (const id of this.parts.keys()) if (id !== chunk.id) { this.parts.delete(id); break; }\n      }\n      return null;\n    }\n    this.parts.delete(chunk.id);\n    const out = new Uint8Array(e.bytes);\n    let pos = 0;\n    for (const p of e.parts) {\n      out.set(p!, pos);\n      pos += p!.length;\n    }\n    return out;\n  }\n\n  get pending(): number {\n    return this.parts.size;\n  }\n  /** Bytes held across incomplete sets. */\n  get pendingBytes(): number {\n    let n = 0;\n    for (const p of this.parts.values()) n += p.bytes;\n    return n;\n  }\n  clear(): void {\n    this.parts.clear();\n  }\n}\n"]}

package/dist/deflate.d.ts

@@ -1,4 +1,5 @@
 /** Optional zlib deflate for snapshots (CompressionStream where present; .NET ZLibStream is the matching side). */
 export declare function deflateAvailable(): boolean;
 export declare function deflate(bytes: Uint8Array): Promise<Uint8Array>;
-export declare function inflate(bytes: Uint8Array): Promise<Uint8Array>;
+/** Inflates at most `maxBytes` (default 64 MiB): a few KB can inflate to gigabytes. Over it rejects with CodecError too_long. */
+export declare function inflate(bytes: Uint8Array, maxBytes?: number): Promise<Uint8Array>;

package/dist/deflate.js

@@ -1,10 +1,11 @@
+import { CodecError, MAX_REASSEMBLED_BYTES } from "./codec.js";
 /** Optional zlib deflate for snapshots (CompressionStream where present; .NET ZLibStream is the matching side). */
 export function deflateAvailable() {
     return typeof CompressionStream !== "undefined" && typeof DecompressionStream !== "undefined";
 }
-async function pipe(bytes, stream) {
+async function pipe(bytes, stream, maxBytes = Infinity) {
     const w = stream.writable.getWriter();
-    void w.write(bytes).then(() => w.close());
+    void w.write(bytes).then(() => w.close()).catch(() => { });
     const chunks = [];
     const r = stream.readable.getReader();
     let total = 0;
@@ -14,6 +15,10 @@ async function pipe(bytes, stream) {
             break;
         chunks.push(value);
         total += value.length;
+        if (total > maxBytes) {
+            void r.cancel().catch(() => { });
+            throw new CodecError("too_long", `snapshot inflates to more than ${maxBytes} bytes`);
+        }
     }
     const out = new Uint8Array(total);
     let pos = 0;
@@ -26,7 +31,8 @@ async function pipe(bytes, stream) {
 export function deflate(bytes) {
     return pipe(bytes, new CompressionStream("deflate"));
 }
-export function inflate(bytes) {
-    return pipe(bytes, new DecompressionStream("deflate"));
+/** Inflates at most `maxBytes` (default 64 MiB): a few KB can inflate to gigabytes. Over it rejects with CodecError too_long. */
+export function inflate(bytes, maxBytes = MAX_REASSEMBLED_BYTES) {
+    return pipe(bytes, new DecompressionStream("deflate"), maxBytes);
 }
 //# sourceMappingURL=deflate.js.map

package/dist/deflate.js.map

@@ -1 +1 @@
-{"version":3,"file":"deflate.js","sourceRoot":"","sources":["../src/deflate.ts"],"names":[],"mappings":"AAAA,mHAAmH;AAEnH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,iBAAiB,KAAK,WAAW,IAAI,OAAO,mBAAmB,KAAK,WAAW,CAAC;AAChG,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,KAAiB,EAAE,MAAsF;IAC3H,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IACtC,KAAK,CAAC,CAAC,KAAK,CAAC,KAA2C,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAChF,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,IAAI;YAAE,MAAM;QAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAiB;IACvC,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,iBAAiB,CAAC,SAAS,CAAU,CAAC,CAAC;AAChE,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,KAAiB;IACvC,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,mBAAmB,CAAC,SAAS,CAAU,CAAC,CAAC;AAClE,CAAC","sourcesContent":["/** Optional zlib deflate for snapshots (CompressionStream where present; .NET ZLibStream is the matching side). */\n\nexport function deflateAvailable(): boolean {\n  return typeof CompressionStream !== \"undefined\" && typeof DecompressionStream !== \"undefined\";\n}\n\nasync function pipe(bytes: Uint8Array, stream: { readable: ReadableStream<Uint8Array>; writable: WritableStream<Uint8Array> }) {\n  const w = stream.writable.getWriter();\n  void w.write(bytes as unknown as Uint8Array<ArrayBuffer>).then(() => w.close());\n  const chunks: Uint8Array[] = [];\n  const r = stream.readable.getReader();\n  let total = 0;\n  for (;;) {\n    const { done, value } = await r.read();\n    if (done) break;\n    chunks.push(value);\n    total += value.length;\n  }\n  const out = new Uint8Array(total);\n  let pos = 0;\n  for (const c of chunks) {\n    out.set(c, pos);\n    pos += c.length;\n  }\n  return out;\n}\n\nexport function deflate(bytes: Uint8Array): Promise<Uint8Array> {\n  return pipe(bytes, new CompressionStream(\"deflate\") as never);\n}\nexport function inflate(bytes: Uint8Array): Promise<Uint8Array> {\n  return pipe(bytes, new DecompressionStream(\"deflate\") as never);\n}\n"]}
+{"version":3,"file":"deflate.js","sourceRoot":"","sources":["../src/deflate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAE/D,mHAAmH;AAEnH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,iBAAiB,KAAK,WAAW,IAAI,OAAO,mBAAmB,KAAK,WAAW,CAAC;AAChG,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,KAAiB,EACjB,MAAsF,EACtF,QAAQ,GAAG,QAAQ;IAEnB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IACtC,KAAK,CAAC,CAAC,KAAK,CAAC,KAA2C,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChG,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,IAAI;YAAE,MAAM;QAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACtB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChC,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,kCAAkC,QAAQ,QAAQ,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAiB;IACvC,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,iBAAiB,CAAC,SAAS,CAAU,CAAC,CAAC;AAChE,CAAC;AACD,iIAAiI;AACjI,MAAM,UAAU,OAAO,CAAC,KAAiB,EAAE,QAAQ,GAAG,qBAAqB;IACzE,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,mBAAmB,CAAC,SAAS,CAAU,EAAE,QAAQ,CAAC,CAAC;AAC5E,CAAC","sourcesContent":["import { CodecError, MAX_REASSEMBLED_BYTES } from \"./codec.js\";\n\n/** Optional zlib deflate for snapshots (CompressionStream where present; .NET ZLibStream is the matching side). */\n\nexport function deflateAvailable(): boolean {\n  return typeof CompressionStream !== \"undefined\" && typeof DecompressionStream !== \"undefined\";\n}\n\nasync function pipe(\n  bytes: Uint8Array,\n  stream: { readable: ReadableStream<Uint8Array>; writable: WritableStream<Uint8Array> },\n  maxBytes = Infinity,\n) {\n  const w = stream.writable.getWriter();\n  void w.write(bytes as unknown as Uint8Array<ArrayBuffer>).then(() => w.close()).catch(() => {});\n  const chunks: Uint8Array[] = [];\n  const r = stream.readable.getReader();\n  let total = 0;\n  for (;;) {\n    const { done, value } = await r.read();\n    if (done) break;\n    chunks.push(value);\n    total += value.length;\n    if (total > maxBytes) {\n      void r.cancel().catch(() => {});\n      throw new CodecError(\"too_long\", `snapshot inflates to more than ${maxBytes} bytes`);\n    }\n  }\n  const out = new Uint8Array(total);\n  let pos = 0;\n  for (const c of chunks) {\n    out.set(c, pos);\n    pos += c.length;\n  }\n  return out;\n}\n\nexport function deflate(bytes: Uint8Array): Promise<Uint8Array> {\n  return pipe(bytes, new CompressionStream(\"deflate\") as never);\n}\n/** Inflates at most `maxBytes` (default 64 MiB): a few KB can inflate to gigabytes. Over it rejects with CodecError too_long. */\nexport function inflate(bytes: Uint8Array, maxBytes = MAX_REASSEMBLED_BYTES): Promise<Uint8Array> {\n  return pipe(bytes, new DecompressionStream(\"deflate\") as never, maxBytes);\n}\n"]}

package/dist/direct/hub-host.d.ts

@@ -1,10 +1,21 @@
 import type { SocketLike } from "../transport.js";
 import { SignalingHub, type HubDeps, type HubOptions } from "./hub.js";
 import { PortMapper, type PortMapperOptions, type PortMapResult } from "./portmap.js";
+/**
+ * Whether a WebSocket handshake carrying `origin` is accepted. A web page can open a WebSocket to any address it can
+ * reach, so a browser's Origin must be one we expect: in `allowed` ("*" = all), the same host:port as the request's
+ * Host header (the page this host serves itself), or loopback (localhost, 127.0.0.1, [::1], any port). A request with
+ * no Origin header is a native client and never gets here.
+ */
+export declare function originAllowed(origin: string, host: string | undefined, allowed: readonly string[]): boolean;
 export declare class PortInUseError extends Error {
     readonly code = "port_in_use";
+    /** Windows reserved the port (EACCES: an excluded port range, often from Hyper-V, WSL or Docker); not another program. */
+    readonly reserved: boolean;
     constructor(port: number, detail: string);
 }
+/** The end of a `port_in_use` message: busy (another program) and reserved (Windows) need different fixes. */
+export declare function portFailureHint(anyBusy: boolean, anyReserved: boolean): string;
 /**
  * Runs a {@link SignalingHub} inside a Node process and listens for joiners' signaling WebSockets on TCP `port`: the
  * Node twin of C#'s `DirectHubHost` (docs/direct-ip.md s.2, s.5 step 3). A plain `net` server with a minimal HTTP/1.1
@@ -29,6 +40,11 @@ export declare class DirectHubHost {
      * `http://<host address>:<port>/` gets a page that joins with `kit.joinDirect(location.host)`. Null (default): 426.
      */
     http: HttpHandler | null;
+    /**
+     * Browser `Origin` values allowed to open a signaling socket, exact match, "*" for all. No Origin header (native
+     * clients), the host's own page (Origin equal to the request's Host) and localhost pages are always allowed.
+     */
+    allowedOrigins: string[];
     /** The bound TCP port (the requested one, or the one the OS picked for 0). */
     readonly port: number;
     portMapper: PortMapper | null;

package/dist/direct/hub-host.js

@@ -8,6 +8,28 @@ const WS_GUID = "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
 const MAX_HEADER_BYTES = 8192;
 const HANDSHAKE_TIMEOUT_MS = 5000;
 const STATUS_TEXT = { 200: "OK", 301: "Moved Permanently", 302: "Found", 404: "Not Found", 500: "Internal Server Error" };
+/**
+ * Whether a WebSocket handshake carrying `origin` is accepted. A web page can open a WebSocket to any address it can
+ * reach, so a browser's Origin must be one we expect: in `allowed` ("*" = all), the same host:port as the request's
+ * Host header (the page this host serves itself), or loopback (localhost, 127.0.0.1, [::1], any port). A request with
+ * no Origin header is a native client and never gets here.
+ */
+export function originAllowed(origin, host, allowed) {
+    if (allowed.includes("*") || allowed.includes(origin))
+        return true;
+    let u;
+    try {
+        u = new URL(origin);
+    }
+    catch {
+        return false;
+    }
+    if (u.protocol !== "http:" && u.protocol !== "https:")
+        return false;
+    if (u.hostname === "localhost" || u.hostname === "127.0.0.1" || u.hostname === "[::1]")
+        return true;
+    return host !== undefined && u.host.toLowerCase() === host.trim().toLowerCase();
+}
 /**
  * Rejects (EADDRINUSE) when another program holds IPv4 TCP or UDP `port`. Windows lets the dual-stack listener bind
  * over a program on 0.0.0.0 (every IPv4 joiner would then reach that program), and the peer links need UDP `port`
@@ -30,10 +52,22 @@ async function probeIPv4(port) {
 }
 export class PortInUseError extends Error {
     code = "port_in_use";
+    /** Windows reserved the port (EACCES: an excluded port range, often from Hyper-V, WSL or Docker); not another program. */
+    reserved;
     constructor(port, detail) {
-        super(`port_in_use: cannot listen on port ${port} (${detail}): is another copy of the game hosting?`);
+        const reserved = detail === "EACCES";
+        super(`port_in_use: cannot listen on port ${port} (${detail}): ${portFailureHint(!reserved, reserved)}`);
+        this.reserved = reserved;
     }
 }
+/** The end of a `port_in_use` message: busy (another program) and reserved (Windows) need different fixes. */
+export function portFailureHint(anyBusy, anyReserved) {
+    if (!anyReserved)
+        return "is another copy of the game hosting?";
+    if (!anyBusy)
+        return "Windows has reserved it (an excluded port range, often from Hyper-V, WSL or Docker); pick another port";
+    return "each one is busy or reserved by Windows (an excluded port range); is another copy of the game hosting?";
+}
 export class DirectHubHost {
     hub;
     /**
@@ -41,6 +75,11 @@ export class DirectHubHost {
      * `http://<host address>:<port>/` gets a page that joins with `kit.joinDirect(location.host)`. Null (default): 426.
      */
     http = null;
+    /**
+     * Browser `Origin` values allowed to open a signaling socket, exact match, "*" for all. No Origin header (native
+     * clients), the host's own page (Origin equal to the request's Host) and localhost pages are always allowed.
+     */
+    allowedOrigins = [];
     /** The bound TCP port (the requested one, or the one the OS picked for 0). */
     port;
     portMapper = null;
@@ -196,6 +235,11 @@ export class DirectHubHost {
             reply("426 Upgrade Required", "this port speaks WebSocket (OneLobby direct host)");
             return false;
         }
+        const origin = headers.get("origin");
+        if (origin !== undefined && !originAllowed(origin, headers.get("host"), this.allowedOrigins)) {
+            reply("403 Forbidden", "this origin may not join (OneLobby direct host)");
+            return false;
+        }
         const accept = createHash("sha1").update(key + WS_GUID).digest("base64");
         sock.write(`HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: ${accept}\r\n\r\n`);
         return true;

package/dist/direct/hub-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"hub-host.js","sourceRoot":"","sources":["../../src/direct/hub-host.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA+C,MAAM,UAAU,CAAC;AACvG,OAAO,EAAE,UAAU,EAA8C,MAAM,cAAc,CAAC;AAEtF,MAAM,OAAO,GAAG,sCAAsC,CAAC;AACvD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,WAAW,GAA2B,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC;AAElJ;;;;GAIG;AACH,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;QACzB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACpB,CAAC,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,GAAG,aAAa,CAAC;IAC9B,YAAY,IAAY,EAAE,MAAc;QACtC,KAAK,CAAC,sCAAsC,IAAI,KAAK,MAAM,yCAAyC,CAAC,CAAC;IACxG,CAAC;CACF;AAqBD,MAAM,OAAO,aAAa;IACf,GAAG,CAAe;IAC3B;;;OAGG;IACH,IAAI,GAAuB,IAAI,CAAC;IAChC,8EAA8E;IACrE,IAAI,CAAS;IACtB,UAAU,GAAsB,IAAI,CAAC;IACpB,MAAM,CAAS;IACf,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,MAAM,CAAiC;IACvC,eAAe,CAAS;IACjC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAoB,MAAc,EAAE,IAAY,EAAE,GAAiB,EAAE,eAAuB;QAC1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAA6B,EAAE,IAAkC;QACjG,MAAM,IAAI,GAAG,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,QAAkB,EAAE,EAAE,CACrD,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,CAAC,CAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE;gBAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACL,IAAI,CAAC;YACH,IAAI,IAAI,EAAE,IAAI;gBAAE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACtC,CAAC;gBACJ,IAAI,IAAI,KAAK,CAAC;oBAAE,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAK,CAA2B,CAAC,IAAI,KAAK,YAAY;wBAAE,MAAM,CAAC,CAAC;oBAChE,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,cAAc,CAAC,IAAI,EAAG,CAA2B,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9F,CAAC;IAED,qCAAqC;IACrC,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,4GAA4G;IAC5G,QAAQ,CAAC,OAA2B;QAClC,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,oHAAoH;IACpH,KAAK;QACH,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEO,OAAO,CAAiB;IAExB,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAChF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,sFAAsF;IAE9E,MAAM,CAAC,IAAY;QACzB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACZ,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO;YAC5E,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,8FAA8F;IACtF,SAAS,CAAC,IAAY,EAAE,IAAY;QAC1C,MAAM,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CAC7C,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,mDAAmD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC/I,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAC5C,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACtD,IAAI,IAAI,GAAqB,IAAI,CAAC;YAClC,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC5D,CAAC;YACD,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YACzE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,YAAY,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,qBAAqB,CAAC,CAAC,IAAI,MAAM;gBAC3F,mBAAmB,IAAI,CAAC,MAAM,6FAA6F,CAAC,CAAC;YAC/H,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;YACzC,KAAK,CAAC,sBAAsB,EAAE,mDAAmD,CAAC,CAAC;YACnF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,0GAA0G,MAAM,UAAU,CAAC,CAAC;QACvI,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,OAAe;QACnD,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;YAChC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;YAC5C,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,IAAI,GAAG,KAAK,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC;QACF,IAAI,OAAO,GAAmB,IAAI,CAAC;QACnC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,GAAG,OAAO,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE;YAC1D,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACzD,KAAK,EAAE,GAAG,EAAE;gBACV,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;gBAClB,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAChB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,IAAI,GAAG,KAAK,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,oHAAoH;AAEpH,2CAA2C;AAC3C,SAAS,KAAK,CAAC,MAAc,EAAE,OAAe;IAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC;QACxB,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YACd,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YACd,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACb,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACvB,CAAC;AASD,sHAAsH;AACtH,MAAM,WAAW;IASc;IAAqC;IAR1D,GAAG,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,GAAa,EAAE,CAAC;IACrB,SAAS,GAAG,CAAC,CAAC;IACd,SAAS,GAAG,KAAK,CAAC;IAClB,MAAM,GAAG,KAAK,CAAC;IACf,IAAI,GAAG,KAAK,CAAC;IACJ,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,YAA6B,UAAkB,EAAmB,IAAe;QAApD,eAAU,GAAV,UAAU,CAAQ;QAAmB,SAAI,GAAJ,IAAI,CAAW;IAAG,CAAC;IAErF,IAAI,CAAC,KAAa;QAChB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO;YAChC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC;YACzB,IAAI,EAAE,GAAG,IAAI;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;YACzE,IAAI,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC;YACpB,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO;gBAChC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC/B,GAAG,GAAG,CAAC,CAAC;YACV,CAAC;iBAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE;oBAAE,OAAO;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACxC,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAC7E,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,GAAG,GAAG,EAAE,CAAC;YACX,CAAC;YACD,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACrE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG;gBAAE,OAAO;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACnE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YAC5C,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,GAAG,IAAI,GAAG,GAAG,GAAG;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;gBACnE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBACjB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAClB,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,KAAK,GAAG;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5C,SAAS,CAAC,kCAAkC;YAC9C,CAAC;YACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,IAAI,IAAI,CAAC,SAAS;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;gBAClF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,MAAM,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,+CAA+C;YAC/E,CAAC;iBAAM,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;YAChG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;YACjC,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;gBACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBACpB,IAAI,IAAI;oBAAE,SAAS;gBACnB,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,IAAY,EAAE,GAAW;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,oHAAoH;AAEpH;;;GAGG;AACH,MAAM,OAAO,cAAc;IAUI;IAT7B,wFAAwF;IACxF,MAAM,CAAU,OAAO,GAAG,OAAO,CAAC;IAClC,UAAU,GAAG,CAAC,CAAC;IACf,MAAM,GAAyB,IAAI,CAAC;IACpC,SAAS,GAA4B,IAAI,CAAC;IAC1C,OAAO,GAA0B,IAAI,CAAC;IACtC,OAAO,GAA0B,IAAI,CAAC;IAC9B,OAAO,CAAiB;IAEhC,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;QAC5C,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CACjJ,IAAI,CAAC,MAAM,EAAE,CACd,CAAC;QACF,cAAc,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAY;QACf,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IAED,KAAK;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,OAAO,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAEO,MAAM;QACZ,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO;QAClC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpB,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC","sourcesContent":["/// <reference types=\"node\" />\nimport { createHash } from \"node:crypto\";\nimport { createSocket } from \"node:dgram\";\nimport { createServer, type Server, type Socket } from \"node:net\";\nimport type { SocketLike } from \"../transport.js\";\nimport { SignalingHub, directHubOptions, type HubDeps, type HubOptions, type Session } from \"./hub.js\";\nimport { PortMapper, type PortMapperOptions, type PortMapResult } from \"./portmap.js\";\n\nconst WS_GUID = \"258EAFA5-E914-47DA-95CA-C5AB0DC85B11\";\nconst MAX_HEADER_BYTES = 8192;\nconst HANDSHAKE_TIMEOUT_MS = 5000;\nconst STATUS_TEXT: Record<number, string> = { 200: \"OK\", 301: \"Moved Permanently\", 302: \"Found\", 404: \"Not Found\", 500: \"Internal Server Error\" };\n\n/**\n * Rejects (EADDRINUSE) when another program holds IPv4 TCP or UDP `port`. Windows lets the dual-stack listener bind\n * over a program on 0.0.0.0 (every IPv4 joiner would then reach that program), and the peer links need UDP `port`\n * too, so both are tried and released before the real listen.\n */\nasync function probeIPv4(port: number): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const s = createServer();\n    s.once(\"error\", reject);\n    s.listen({ port, host: \"0.0.0.0\", exclusive: true }, () => s.close(() => resolve()));\n  });\n  await new Promise<void>((resolve, reject) => {\n    const u = createSocket({ type: \"udp4\" });\n    u.once(\"error\", (e) => {\n      u.close();\n      reject(e);\n    });\n    u.bind({ port, address: \"0.0.0.0\", exclusive: true }, () => u.close(() => resolve()));\n  });\n}\n\nexport class PortInUseError extends Error {\n  readonly code = \"port_in_use\";\n  constructor(port: number, detail: string) {\n    super(`port_in_use: cannot listen on port ${port} (${detail}): is another copy of the game hosting?`);\n  }\n}\n\n/**\n * Runs a {@link SignalingHub} inside a Node process and listens for joiners' signaling WebSockets on TCP `port`: the\n * Node twin of C#'s `DirectHubHost` (docs/direct-ip.md s.2, s.5 step 3). A plain `net` server with a minimal HTTP/1.1\n * upgrade and RFC 6455 framing (text, close, ping/pong, fragments; client frames must be masked), so the package keeps\n * zero runtime dependencies. Any path upgrades; `GET /healthz` answers `ok`. The host's own client talks to the hub in\n * memory through {@link connectLocal}. `hub.tick()` runs once a second on an unref'd timer.\n */\n/** One plain-HTTP answer from the host's port, e.g. a browser join page. */\nexport interface HttpReply {\n  /** Default 200. */\n  status?: number;\n  /** Content-Type, e.g. \"text/html; charset=utf-8\". */\n  type: string;\n  body: string | Uint8Array;\n}\n\n/** Serves plain `GET` requests on the direct port (path without the query); null answers 404. */\nexport type HttpHandler = (path: string) => HttpReply | null;\n\nexport class DirectHubHost {\n  readonly hub: SignalingHub;\n  /**\n   * Plain `GET`s that are not WebSocket upgrades go here, so the host can serve its own join page: a browser opening\n   * `http://<host address>:<port>/` gets a page that joins with `kit.joinDirect(location.host)`. Null (default): 426.\n   */\n  http: HttpHandler | null = null;\n  /** The bound TCP port (the requested one, or the one the OS picked for 0). */\n  readonly port: number;\n  portMapper: PortMapper | null = null;\n  private readonly server: Server;\n  private readonly sockets = new Set<Socket>();\n  private readonly ticker: ReturnType<typeof setInterval>;\n  private readonly maxMessageBytes: number;\n  private closed = false;\n\n  private constructor(server: Server, port: number, hub: SignalingHub, maxMessageBytes: number) {\n    this.server = server;\n    this.port = port;\n    this.hub = hub;\n    this.maxMessageBytes = maxMessageBytes;\n    this.ticker = setInterval(() => this.hub.tick(), 1000);\n    this.ticker.unref?.();\n    server.on(\"connection\", (sock) => this.accept(sock));\n  }\n\n  /**\n   * Binds TCP `port` on every interface (IPv6 dual-stack where available). Hub options default to\n   * {@link directHubOptions} (one lobby, no codes, no ICE servers). Rejects with {@link PortInUseError}.\n   */\n  static async listen(port: number, options?: Partial<HubOptions>, deps?: HubDeps & { host?: string }): Promise<DirectHubHost> {\n    const opts = { ...directHubOptions(8), ...options };\n    const server = createServer({ noDelay: true });\n    const tryListen = (host: string, ipv6Only?: boolean) =>\n      new Promise<void>((resolve, reject) => {\n        const onError = (e: NodeJS.ErrnoException) => reject(e);\n        server.once(\"error\", onError);\n        server.listen({ port, host, ipv6Only }, () => {\n          server.off(\"error\", onError);\n          resolve();\n        });\n      });\n    try {\n      if (deps?.host) await tryListen(deps.host);\n      else {\n        if (port !== 0) await probeIPv4(port);\n        try {\n          await tryListen(\"::\", false);\n        } catch (e) {\n          if ((e as NodeJS.ErrnoException).code === \"EADDRINUSE\") throw e;\n          await tryListen(\"0.0.0.0\"); // no IPv6 on this machine\n        }\n      }\n    } catch (e) {\n      throw new PortInUseError(port, (e as NodeJS.ErrnoException).code ?? String(e));\n    }\n    const addr = server.address();\n    const bound = typeof addr === \"object\" && addr ? addr.port : port;\n    return new DirectHubHost(server, bound, new SignalingHub(opts, deps), opts.maxMessageBytes);\n  }\n\n  /** Joiner sockets currently open. */\n  get connectionCount(): number {\n    return this.sockets.size;\n  }\n\n  /**\n   * The host's own signaling socket: a WebSocket look-alike wired straight into the hub (no network). Pass it to the\n   * kit as `advanced.socketFactory: () => host.connectLocal()`.\n   */\n  connectLocal(): SocketLike {\n    return new LocalHubSocket(this.hub);\n  }\n\n  /** Asks the home router to forward TCP and UDP `port` here (UPnP, then NAT-PMP; docs/direct-ip.md s.2a). */\n  openPort(options?: PortMapperOptions): Promise<PortMapResult> {\n    if (this.portMapper) throw new Error(\"the port is already being opened\");\n    this.portMapper = new PortMapper(this.port, options);\n    return this.portMapper.open();\n  }\n\n  /** Stops listening, closes every joiner socket and removes the router mapping. Every call gets the same promise. */\n  close(): Promise<void> {\n    return (this.closing ??= this.closeOnce());\n  }\n\n  private closing?: Promise<void>;\n\n  private async closeOnce(): Promise<void> {\n    this.closed = true;\n    clearInterval(this.ticker);\n    const unmap = this.portMapper?.close();\n    for (const s of this.sockets) s.end(closeFrame(1001, \"host left\"));\n    await new Promise<void>((resolve) => this.server.close(() => resolve()));\n    setTimeout(() => { for (const s of this.sockets) s.destroy(); }, 300).unref?.();\n    await unmap;\n  }\n\n  // ---------------------------------------------------------------- one TCP connection\n\n  private accept(sock: Socket): void {\n    if (this.closed) {\n      sock.destroy();\n      return;\n    }\n    this.sockets.add(sock);\n    sock.on(\"close\", () => this.sockets.delete(sock));\n    sock.on(\"error\", () => {});\n    const ip = (sock.remoteAddress ?? \"\").replace(/^::ffff:/, \"\");\n    let head = Buffer.alloc(0);\n    const timer = setTimeout(() => sock.destroy(), HANDSHAKE_TIMEOUT_MS);\n    const onData = (chunk: Buffer) => {\n      head = Buffer.concat([head, chunk]);\n      const end = head.indexOf(\"\\r\\n\\r\\n\");\n      if (end < 0) {\n        if (head.length > MAX_HEADER_BYTES) sock.destroy();\n        return;\n      }\n      clearTimeout(timer);\n      sock.off(\"data\", onData);\n      const rest = head.subarray(end + 4);\n      if (!this.handshake(sock, head.subarray(0, end).toString(\"latin1\"))) return;\n      this.run(sock, ip, rest);\n    };\n    sock.on(\"data\", onData);\n  }\n\n  /** RFC 6455 s.4.2: answers 101 with Sec-WebSocket-Accept, or 200 for /healthz, or 400/426. */\n  private handshake(sock: Socket, head: string): boolean {\n    const [requestLine, ...lines] = head.split(\"\\r\\n\");\n    const headers = new Map<string, string>();\n    for (const l of lines) {\n      const i = l.indexOf(\":\");\n      if (i > 0) headers.set(l.slice(0, i).trim().toLowerCase(), l.slice(i + 1).trim());\n    }\n    const [method, path] = requestLine.split(\" \");\n    const reply = (status: string, body: string) =>\n      sock.end(`HTTP/1.1 ${status}\\r\\nContent-Type: text/plain\\r\\nContent-Length: ${Buffer.byteLength(body)}\\r\\nConnection: close\\r\\n\\r\\n${body}`);\n    if (method === \"GET\" && path === \"/healthz\") {\n      reply(\"200 OK\", \"ok\");\n      return false;\n    }\n    const key = headers.get(\"sec-websocket-key\");\n    const upgrade = /websocket/i.test(headers.get(\"upgrade\") ?? \"\");\n    if (method === \"GET\" && !upgrade && this.http && path) {\n      let page: HttpReply | null = null;\n      try {\n        page = this.http(path.split(\"?\")[0]);\n      } catch {\n        page = { status: 500, type: \"text/plain\", body: \"error\" };\n      }\n      const p = page ?? { status: 404, type: \"text/plain\", body: \"not found\" };\n      const body = typeof p.body === \"string\" ? Buffer.from(p.body, \"utf8\") : Buffer.from(p.body);\n      const status = p.status ?? 200;\n      sock.write(`HTTP/1.1 ${status} ${STATUS_TEXT[status] ?? \"OK\"}\\r\\nContent-Type: ${p.type}\\r\\n` +\n        `Content-Length: ${body.length}\\r\\nCache-Control: no-store\\r\\nX-Content-Type-Options: nosniff\\r\\nConnection: close\\r\\n\\r\\n`);\n      sock.end(body);\n      return false;\n    }\n    if (method !== \"GET\" || !upgrade || !key) {\n      reply(\"426 Upgrade Required\", \"this port speaks WebSocket (OneLobby direct host)\");\n      return false;\n    }\n    const accept = createHash(\"sha1\").update(key + WS_GUID).digest(\"base64\");\n    sock.write(`HTTP/1.1 101 Switching Protocols\\r\\nUpgrade: websocket\\r\\nConnection: Upgrade\\r\\nSec-WebSocket-Accept: ${accept}\\r\\n\\r\\n`);\n    return true;\n  }\n\n  private run(sock: Socket, ip: string, initial: Buffer): void {\n    let open = true;\n    const sendText = (text: string) => {\n      if (open && !sock.destroyed) sock.write(frame(0x1, Buffer.from(text, \"utf8\")));\n    };\n    const shut = (code: number, reason: string) => {\n      if (!open) return;\n      open = false;\n      if (!sock.destroyed) sock.end(closeFrame(code, reason));\n    };\n    let session: Session | null = null;\n    session = this.hub.connect(ip, sendText, () => shut(1000, \"closed by the hub\"));\n    if (!session) return;\n    const s = session;\n    const reader = new FrameReader(this.maxMessageBytes + 1024, {\n      text: (t) => this.hub.receive(s, t),\n      ping: (p) => !sock.destroyed && sock.write(frame(0xa, p)),\n      close: () => {\n        shut(1000, \"\");\n        this.hub.disconnect(s);\n      },\n      fail: (code, why) => {\n        shut(code, why);\n        this.hub.disconnect(s);\n      },\n    });\n    sock.on(\"data\", (b: Buffer) => reader.push(b));\n    sock.on(\"close\", () => {\n      open = false;\n      this.hub.disconnect(s);\n    });\n    if (initial.length) reader.push(initial);\n  }\n}\n\n// ------------------------------------------------------------------------------------------------ RFC 6455 framing\n\n/** One unmasked server frame (FIN set). */\nfunction frame(opcode: number, payload: Buffer): Buffer {\n  const n = payload.length;\n  const head = n < 126 ? Buffer.from([0x80 | opcode, n]) : n < 65536 ? Buffer.alloc(4) : Buffer.alloc(10);\n  if (n >= 126) {\n    head[0] = 0x80 | opcode;\n    if (n < 65536) {\n      head[1] = 126;\n      head.writeUInt16BE(n, 2);\n    } else {\n      head[1] = 127;\n      head.writeBigUInt64BE(BigInt(n), 2);\n    }\n  }\n  return Buffer.concat([head, payload]);\n}\n\nfunction closeFrame(code: number, reason: string): Buffer {\n  const r = Buffer.from(reason.slice(0, 100), \"utf8\");\n  const p = Buffer.alloc(2 + r.length);\n  p.writeUInt16BE(code, 0);\n  r.copy(p, 2);\n  return frame(0x8, p);\n}\n\ninterface FrameSink {\n  text(t: string): void;\n  ping(payload: Buffer): void;\n  close(): void;\n  fail(code: number, why: string): void;\n}\n\n/** Incremental client-frame parser: masked frames only, text messages (fragmented or not), control frames between. */\nclass FrameReader {\n  private buf: Buffer = Buffer.alloc(0);\n  private parts: Buffer[] = [];\n  private partBytes = 0;\n  private inMessage = false;\n  private binary = false;\n  private done = false;\n  private readonly utf8 = new TextDecoder(\"utf-8\", { fatal: true });\n\n  constructor(private readonly maxMessage: number, private readonly sink: FrameSink) {}\n\n  push(chunk: Buffer): void {\n    if (this.done) return;\n    this.buf = this.buf.length ? Buffer.concat([this.buf, chunk]) : chunk;\n    while (!this.done) {\n      if (this.buf.length < 2) return;\n      const b0 = this.buf[0];\n      const b1 = this.buf[1];\n      const fin = (b0 & 0x80) !== 0;\n      const opcode = b0 & 0x0f;\n      if (b0 & 0x70) return this.fail(1002, \"reserved bits set\");\n      if (!(b1 & 0x80)) return this.fail(1002, \"client frames must be masked\");\n      let len = b1 & 0x7f;\n      let off = 2;\n      if (len === 126) {\n        if (this.buf.length < 4) return;\n        len = this.buf.readUInt16BE(2);\n        off = 4;\n      } else if (len === 127) {\n        if (this.buf.length < 10) return;\n        const big = this.buf.readBigUInt64BE(2);\n        if (big > BigInt(this.maxMessage)) return this.fail(1009, \"message too big\");\n        len = Number(big);\n        off = 10;\n      }\n      if (len > this.maxMessage) return this.fail(1009, \"message too big\");\n      if (this.buf.length < off + 4 + len) return;\n      const mask = this.buf.subarray(off, off + 4);\n      const payload = Buffer.from(this.buf.subarray(off + 4, off + 4 + len));\n      for (let i = 0; i < payload.length; i++) payload[i] ^= mask[i & 3];\n      this.buf = this.buf.subarray(off + 4 + len);\n      if (opcode >= 0x8) {\n        if (!fin || len > 125) return this.fail(1002, \"bad control frame\");\n        if (opcode === 0x8) {\n          this.done = true;\n          this.sink.close();\n          return;\n        }\n        if (opcode === 0x9) this.sink.ping(payload);\n        continue; // pong or unknown control: ignore\n      }\n      if (opcode === 0x1 || opcode === 0x2) {\n        if (this.inMessage) return this.fail(1002, \"new message inside a fragmented one\");\n        this.inMessage = true;\n        this.binary = opcode === 0x2; // spec/signaling.md: binary frames are ignored\n      } else if (opcode !== 0x0 || !this.inMessage) return this.fail(1002, \"unexpected continuation\");\n      this.partBytes += payload.length;\n      if (this.partBytes > this.maxMessage) return this.fail(1009, \"message too big\");\n      if (!this.binary) this.parts.push(payload);\n      if (fin) {\n        const all = this.parts.length === 1 ? this.parts[0] : Buffer.concat(this.parts);\n        const skip = this.binary;\n        this.parts = [];\n        this.partBytes = 0;\n        this.inMessage = false;\n        this.binary = false;\n        if (skip) continue;\n        let text: string;\n        try {\n          text = this.utf8.decode(all);\n        } catch {\n          return this.fail(1007, \"invalid UTF-8\");\n        }\n        this.sink.text(text);\n      }\n    }\n  }\n\n  private fail(code: number, why: string): void {\n    this.done = true;\n    this.sink.fail(code, why);\n  }\n}\n\n// ------------------------------------------------------------------------------------------------ in-memory socket\n\n/**\n * The direct-IP host's own signaling socket (C#'s `HubSignalingSocket`): sends go straight into the hub; the hub's\n * replies are delivered on a microtask, so callbacks never run inside the hub.\n */\nexport class LocalHubSocket implements SocketLike {\n  /** Address the hub sees for the host itself (rate limits and kicks are per address). */\n  static readonly ADDRESS = \"local\";\n  readyState = 0;\n  onopen: SocketLike[\"onopen\"] = null;\n  onmessage: SocketLike[\"onmessage\"] = null;\n  onclose: SocketLike[\"onclose\"] = null;\n  onerror: SocketLike[\"onerror\"] = null;\n  private session: Session | null;\n\n  constructor(private readonly hub: SignalingHub) {\n    this.session = hub.connect(LocalHubSocket.ADDRESS, (text) => queueMicrotask(() => this.readyState === 1 && this.onmessage?.({ data: text })), () =>\n      this.finish(),\n    );\n    queueMicrotask(() => {\n      if (!this.session) {\n        this.finish();\n        return;\n      }\n      this.readyState = 1;\n      this.onopen?.();\n    });\n  }\n\n  send(data: string): void {\n    if (this.readyState === 1 && this.session) this.hub.receive(this.session, data);\n  }\n\n  close(): void {\n    const s = this.session;\n    const wasOpen = this.readyState === 1;\n    this.finish();\n    if (wasOpen && s) this.hub.disconnect(s);\n  }\n\n  private finish(): void {\n    if (this.readyState === 3) return;\n    this.readyState = 3;\n    queueMicrotask(() => this.onclose?.());\n  }\n}\n"]}
+{"version":3,"file":"hub-host.js","sourceRoot":"","sources":["../../src/direct/hub-host.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA+C,MAAM,UAAU,CAAC;AACvG,OAAO,EAAE,UAAU,EAA8C,MAAM,cAAc,CAAC;AAEtF,MAAM,OAAO,GAAG,sCAAsC,CAAC;AACvD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,WAAW,GAA2B,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC;AAElJ;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,IAAwB,EAAE,OAA0B;IAChG,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACpG,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;QACzB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACpB,CAAC,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,GAAG,aAAa,CAAC;IAC9B,0HAA0H;IACjH,QAAQ,CAAU;IAC3B,YAAY,IAAY,EAAE,MAAc;QACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,QAAQ,CAAC;QACrC,KAAK,CAAC,sCAAsC,IAAI,KAAK,MAAM,MAAM,eAAe,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzG,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,8GAA8G;AAC9G,MAAM,UAAU,eAAe,CAAC,OAAgB,EAAE,WAAoB;IACpE,IAAI,CAAC,WAAW;QAAE,OAAO,sCAAsC,CAAC;IAChE,IAAI,CAAC,OAAO;QAAE,OAAO,wGAAwG,CAAC;IAC9H,OAAO,wGAAwG,CAAC;AAClH,CAAC;AAqBD,MAAM,OAAO,aAAa;IACf,GAAG,CAAe;IAC3B;;;OAGG;IACH,IAAI,GAAuB,IAAI,CAAC;IAChC;;;OAGG;IACH,cAAc,GAAa,EAAE,CAAC;IAC9B,8EAA8E;IACrE,IAAI,CAAS;IACtB,UAAU,GAAsB,IAAI,CAAC;IACpB,MAAM,CAAS;IACf,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,MAAM,CAAiC;IACvC,eAAe,CAAS;IACjC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAoB,MAAc,EAAE,IAAY,EAAE,GAAiB,EAAE,eAAuB;QAC1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAA6B,EAAE,IAAkC;QACjG,MAAM,IAAI,GAAG,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,QAAkB,EAAE,EAAE,CACrD,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,CAAC,CAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE;gBAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACL,IAAI,CAAC;YACH,IAAI,IAAI,EAAE,IAAI;gBAAE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACtC,CAAC;gBACJ,IAAI,IAAI,KAAK,CAAC;oBAAE,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAK,CAA2B,CAAC,IAAI,KAAK,YAAY;wBAAE,MAAM,CAAC,CAAC;oBAChE,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,cAAc,CAAC,IAAI,EAAG,CAA2B,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9F,CAAC;IAED,qCAAqC;IACrC,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,4GAA4G;IAC5G,QAAQ,CAAC,OAA2B;QAClC,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,oHAAoH;IACpH,KAAK;QACH,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7C,CAAC;IAEO,OAAO,CAAiB;IAExB,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAChF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,sFAAsF;IAE9E,MAAM,CAAC,IAAY;QACzB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACZ,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO;YAC5E,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,8FAA8F;IACtF,SAAS,CAAC,IAAY,EAAE,IAAY;QAC1C,MAAM,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CAC7C,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,mDAAmD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC/I,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAC5C,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACtD,IAAI,IAAI,GAAqB,IAAI,CAAC;YAClC,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC5D,CAAC;YACD,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YACzE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,YAAY,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,qBAAqB,CAAC,CAAC,IAAI,MAAM;gBAC3F,mBAAmB,IAAI,CAAC,MAAM,6FAA6F,CAAC,CAAC;YAC/H,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;YACzC,KAAK,CAAC,sBAAsB,EAAE,mDAAmD,CAAC,CAAC;YACnF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7F,KAAK,CAAC,eAAe,EAAE,iDAAiD,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,0GAA0G,MAAM,UAAU,CAAC,CAAC;QACvI,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,OAAe;QACnD,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;YAChC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;YAC5C,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,IAAI,GAAG,KAAK,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC;QACF,IAAI,OAAO,GAAmB,IAAI,CAAC;QACnC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,GAAG,OAAO,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE;YAC1D,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACzD,KAAK,EAAE,GAAG,EAAE;gBACV,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;gBAClB,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAChB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,IAAI,GAAG,KAAK,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,oHAAoH;AAEpH,2CAA2C;AAC3C,SAAS,KAAK,CAAC,MAAc,EAAE,OAAe;IAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC;QACxB,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YACd,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YACd,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACb,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACvB,CAAC;AASD,sHAAsH;AACtH,MAAM,WAAW;IASc;IAAqC;IAR1D,GAAG,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,GAAa,EAAE,CAAC;IACrB,SAAS,GAAG,CAAC,CAAC;IACd,SAAS,GAAG,KAAK,CAAC;IAClB,MAAM,GAAG,KAAK,CAAC;IACf,IAAI,GAAG,KAAK,CAAC;IACJ,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,YAA6B,UAAkB,EAAmB,IAAe;QAApD,eAAU,GAAV,UAAU,CAAQ;QAAmB,SAAI,GAAJ,IAAI,CAAW;IAAG,CAAC;IAErF,IAAI,CAAC,KAAa;QAChB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO;YAChC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC;YACzB,IAAI,EAAE,GAAG,IAAI;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;YACzE,IAAI,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC;YACpB,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO;gBAChC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC/B,GAAG,GAAG,CAAC,CAAC;YACV,CAAC;iBAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE;oBAAE,OAAO;gBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACxC,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAC7E,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,GAAG,GAAG,EAAE,CAAC;YACX,CAAC;YACD,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACrE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG;gBAAE,OAAO;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACnE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YAC5C,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,GAAG,IAAI,GAAG,GAAG,GAAG;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;gBACnE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBACjB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAClB,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,KAAK,GAAG;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5C,SAAS,CAAC,kCAAkC;YAC9C,CAAC;YACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,IAAI,IAAI,CAAC,SAAS;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;gBAClF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,MAAM,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,+CAA+C;YAC/E,CAAC;iBAAM,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;YAChG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;YACjC,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;gBACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBACpB,IAAI,IAAI;oBAAE,SAAS;gBACnB,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,IAAY,EAAE,GAAW;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,oHAAoH;AAEpH;;;GAGG;AACH,MAAM,OAAO,cAAc;IAUI;IAT7B,wFAAwF;IACxF,MAAM,CAAU,OAAO,GAAG,OAAO,CAAC;IAClC,UAAU,GAAG,CAAC,CAAC;IACf,MAAM,GAAyB,IAAI,CAAC;IACpC,SAAS,GAA4B,IAAI,CAAC;IAC1C,OAAO,GAA0B,IAAI,CAAC;IACtC,OAAO,GAA0B,IAAI,CAAC;IAC9B,OAAO,CAAiB;IAEhC,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;QAC5C,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CACjJ,IAAI,CAAC,MAAM,EAAE,CACd,CAAC;QACF,cAAc,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAY;QACf,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IAED,KAAK;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,OAAO,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAEO,MAAM;QACZ,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO;QAClC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpB,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC","sourcesContent":["/// <reference types=\"node\" />\nimport { createHash } from \"node:crypto\";\nimport { createSocket } from \"node:dgram\";\nimport { createServer, type Server, type Socket } from \"node:net\";\nimport type { SocketLike } from \"../transport.js\";\nimport { SignalingHub, directHubOptions, type HubDeps, type HubOptions, type Session } from \"./hub.js\";\nimport { PortMapper, type PortMapperOptions, type PortMapResult } from \"./portmap.js\";\n\nconst WS_GUID = \"258EAFA5-E914-47DA-95CA-C5AB0DC85B11\";\nconst MAX_HEADER_BYTES = 8192;\nconst HANDSHAKE_TIMEOUT_MS = 5000;\nconst STATUS_TEXT: Record<number, string> = { 200: \"OK\", 301: \"Moved Permanently\", 302: \"Found\", 404: \"Not Found\", 500: \"Internal Server Error\" };\n\n/**\n * Whether a WebSocket handshake carrying `origin` is accepted. A web page can open a WebSocket to any address it can\n * reach, so a browser's Origin must be one we expect: in `allowed` (\"*\" = all), the same host:port as the request's\n * Host header (the page this host serves itself), or loopback (localhost, 127.0.0.1, [::1], any port). A request with\n * no Origin header is a native client and never gets here.\n */\nexport function originAllowed(origin: string, host: string | undefined, allowed: readonly string[]): boolean {\n  if (allowed.includes(\"*\") || allowed.includes(origin)) return true;\n  let u: URL;\n  try {\n    u = new URL(origin);\n  } catch {\n    return false;\n  }\n  if (u.protocol !== \"http:\" && u.protocol !== \"https:\") return false;\n  if (u.hostname === \"localhost\" || u.hostname === \"127.0.0.1\" || u.hostname === \"[::1]\") return true;\n  return host !== undefined && u.host.toLowerCase() === host.trim().toLowerCase();\n}\n\n/**\n * Rejects (EADDRINUSE) when another program holds IPv4 TCP or UDP `port`. Windows lets the dual-stack listener bind\n * over a program on 0.0.0.0 (every IPv4 joiner would then reach that program), and the peer links need UDP `port`\n * too, so both are tried and released before the real listen.\n */\nasync function probeIPv4(port: number): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const s = createServer();\n    s.once(\"error\", reject);\n    s.listen({ port, host: \"0.0.0.0\", exclusive: true }, () => s.close(() => resolve()));\n  });\n  await new Promise<void>((resolve, reject) => {\n    const u = createSocket({ type: \"udp4\" });\n    u.once(\"error\", (e) => {\n      u.close();\n      reject(e);\n    });\n    u.bind({ port, address: \"0.0.0.0\", exclusive: true }, () => u.close(() => resolve()));\n  });\n}\n\nexport class PortInUseError extends Error {\n  readonly code = \"port_in_use\";\n  /** Windows reserved the port (EACCES: an excluded port range, often from Hyper-V, WSL or Docker); not another program. */\n  readonly reserved: boolean;\n  constructor(port: number, detail: string) {\n    const reserved = detail === \"EACCES\";\n    super(`port_in_use: cannot listen on port ${port} (${detail}): ${portFailureHint(!reserved, reserved)}`);\n    this.reserved = reserved;\n  }\n}\n\n/** The end of a `port_in_use` message: busy (another program) and reserved (Windows) need different fixes. */\nexport function portFailureHint(anyBusy: boolean, anyReserved: boolean): string {\n  if (!anyReserved) return \"is another copy of the game hosting?\";\n  if (!anyBusy) return \"Windows has reserved it (an excluded port range, often from Hyper-V, WSL or Docker); pick another port\";\n  return \"each one is busy or reserved by Windows (an excluded port range); is another copy of the game hosting?\";\n}\n\n/**\n * Runs a {@link SignalingHub} inside a Node process and listens for joiners' signaling WebSockets on TCP `port`: the\n * Node twin of C#'s `DirectHubHost` (docs/direct-ip.md s.2, s.5 step 3). A plain `net` server with a minimal HTTP/1.1\n * upgrade and RFC 6455 framing (text, close, ping/pong, fragments; client frames must be masked), so the package keeps\n * zero runtime dependencies. Any path upgrades; `GET /healthz` answers `ok`. The host's own client talks to the hub in\n * memory through {@link connectLocal}. `hub.tick()` runs once a second on an unref'd timer.\n */\n/** One plain-HTTP answer from the host's port, e.g. a browser join page. */\nexport interface HttpReply {\n  /** Default 200. */\n  status?: number;\n  /** Content-Type, e.g. \"text/html; charset=utf-8\". */\n  type: string;\n  body: string | Uint8Array;\n}\n\n/** Serves plain `GET` requests on the direct port (path without the query); null answers 404. */\nexport type HttpHandler = (path: string) => HttpReply | null;\n\nexport class DirectHubHost {\n  readonly hub: SignalingHub;\n  /**\n   * Plain `GET`s that are not WebSocket upgrades go here, so the host can serve its own join page: a browser opening\n   * `http://<host address>:<port>/` gets a page that joins with `kit.joinDirect(location.host)`. Null (default): 426.\n   */\n  http: HttpHandler | null = null;\n  /**\n   * Browser `Origin` values allowed to open a signaling socket, exact match, \"*\" for all. No Origin header (native\n   * clients), the host's own page (Origin equal to the request's Host) and localhost pages are always allowed.\n   */\n  allowedOrigins: string[] = [];\n  /** The bound TCP port (the requested one, or the one the OS picked for 0). */\n  readonly port: number;\n  portMapper: PortMapper | null = null;\n  private readonly server: Server;\n  private readonly sockets = new Set<Socket>();\n  private readonly ticker: ReturnType<typeof setInterval>;\n  private readonly maxMessageBytes: number;\n  private closed = false;\n\n  private constructor(server: Server, port: number, hub: SignalingHub, maxMessageBytes: number) {\n    this.server = server;\n    this.port = port;\n    this.hub = hub;\n    this.maxMessageBytes = maxMessageBytes;\n    this.ticker = setInterval(() => this.hub.tick(), 1000);\n    this.ticker.unref?.();\n    server.on(\"connection\", (sock) => this.accept(sock));\n  }\n\n  /**\n   * Binds TCP `port` on every interface (IPv6 dual-stack where available). Hub options default to\n   * {@link directHubOptions} (one lobby, no codes, no ICE servers). Rejects with {@link PortInUseError}.\n   */\n  static async listen(port: number, options?: Partial<HubOptions>, deps?: HubDeps & { host?: string }): Promise<DirectHubHost> {\n    const opts = { ...directHubOptions(8), ...options };\n    const server = createServer({ noDelay: true });\n    const tryListen = (host: string, ipv6Only?: boolean) =>\n      new Promise<void>((resolve, reject) => {\n        const onError = (e: NodeJS.ErrnoException) => reject(e);\n        server.once(\"error\", onError);\n        server.listen({ port, host, ipv6Only }, () => {\n          server.off(\"error\", onError);\n          resolve();\n        });\n      });\n    try {\n      if (deps?.host) await tryListen(deps.host);\n      else {\n        if (port !== 0) await probeIPv4(port);\n        try {\n          await tryListen(\"::\", false);\n        } catch (e) {\n          if ((e as NodeJS.ErrnoException).code === \"EADDRINUSE\") throw e;\n          await tryListen(\"0.0.0.0\"); // no IPv6 on this machine\n        }\n      }\n    } catch (e) {\n      throw new PortInUseError(port, (e as NodeJS.ErrnoException).code ?? String(e));\n    }\n    const addr = server.address();\n    const bound = typeof addr === \"object\" && addr ? addr.port : port;\n    return new DirectHubHost(server, bound, new SignalingHub(opts, deps), opts.maxMessageBytes);\n  }\n\n  /** Joiner sockets currently open. */\n  get connectionCount(): number {\n    return this.sockets.size;\n  }\n\n  /**\n   * The host's own signaling socket: a WebSocket look-alike wired straight into the hub (no network). Pass it to the\n   * kit as `advanced.socketFactory: () => host.connectLocal()`.\n   */\n  connectLocal(): SocketLike {\n    return new LocalHubSocket(this.hub);\n  }\n\n  /** Asks the home router to forward TCP and UDP `port` here (UPnP, then NAT-PMP; docs/direct-ip.md s.2a). */\n  openPort(options?: PortMapperOptions): Promise<PortMapResult> {\n    if (this.portMapper) throw new Error(\"the port is already being opened\");\n    this.portMapper = new PortMapper(this.port, options);\n    return this.portMapper.open();\n  }\n\n  /** Stops listening, closes every joiner socket and removes the router mapping. Every call gets the same promise. */\n  close(): Promise<void> {\n    return (this.closing ??= this.closeOnce());\n  }\n\n  private closing?: Promise<void>;\n\n  private async closeOnce(): Promise<void> {\n    this.closed = true;\n    clearInterval(this.ticker);\n    const unmap = this.portMapper?.close();\n    for (const s of this.sockets) s.end(closeFrame(1001, \"host left\"));\n    await new Promise<void>((resolve) => this.server.close(() => resolve()));\n    setTimeout(() => { for (const s of this.sockets) s.destroy(); }, 300).unref?.();\n    await unmap;\n  }\n\n  // ---------------------------------------------------------------- one TCP connection\n\n  private accept(sock: Socket): void {\n    if (this.closed) {\n      sock.destroy();\n      return;\n    }\n    this.sockets.add(sock);\n    sock.on(\"close\", () => this.sockets.delete(sock));\n    sock.on(\"error\", () => {});\n    const ip = (sock.remoteAddress ?? \"\").replace(/^::ffff:/, \"\");\n    let head = Buffer.alloc(0);\n    const timer = setTimeout(() => sock.destroy(), HANDSHAKE_TIMEOUT_MS);\n    const onData = (chunk: Buffer) => {\n      head = Buffer.concat([head, chunk]);\n      const end = head.indexOf(\"\\r\\n\\r\\n\");\n      if (end < 0) {\n        if (head.length > MAX_HEADER_BYTES) sock.destroy();\n        return;\n      }\n      clearTimeout(timer);\n      sock.off(\"data\", onData);\n      const rest = head.subarray(end + 4);\n      if (!this.handshake(sock, head.subarray(0, end).toString(\"latin1\"))) return;\n      this.run(sock, ip, rest);\n    };\n    sock.on(\"data\", onData);\n  }\n\n  /** RFC 6455 s.4.2: answers 101 with Sec-WebSocket-Accept, or 200 for /healthz, or 400/426. */\n  private handshake(sock: Socket, head: string): boolean {\n    const [requestLine, ...lines] = head.split(\"\\r\\n\");\n    const headers = new Map<string, string>();\n    for (const l of lines) {\n      const i = l.indexOf(\":\");\n      if (i > 0) headers.set(l.slice(0, i).trim().toLowerCase(), l.slice(i + 1).trim());\n    }\n    const [method, path] = requestLine.split(\" \");\n    const reply = (status: string, body: string) =>\n      sock.end(`HTTP/1.1 ${status}\\r\\nContent-Type: text/plain\\r\\nContent-Length: ${Buffer.byteLength(body)}\\r\\nConnection: close\\r\\n\\r\\n${body}`);\n    if (method === \"GET\" && path === \"/healthz\") {\n      reply(\"200 OK\", \"ok\");\n      return false;\n    }\n    const key = headers.get(\"sec-websocket-key\");\n    const upgrade = /websocket/i.test(headers.get(\"upgrade\") ?? \"\");\n    if (method === \"GET\" && !upgrade && this.http && path) {\n      let page: HttpReply | null = null;\n      try {\n        page = this.http(path.split(\"?\")[0]);\n      } catch {\n        page = { status: 500, type: \"text/plain\", body: \"error\" };\n      }\n      const p = page ?? { status: 404, type: \"text/plain\", body: \"not found\" };\n      const body = typeof p.body === \"string\" ? Buffer.from(p.body, \"utf8\") : Buffer.from(p.body);\n      const status = p.status ?? 200;\n      sock.write(`HTTP/1.1 ${status} ${STATUS_TEXT[status] ?? \"OK\"}\\r\\nContent-Type: ${p.type}\\r\\n` +\n        `Content-Length: ${body.length}\\r\\nCache-Control: no-store\\r\\nX-Content-Type-Options: nosniff\\r\\nConnection: close\\r\\n\\r\\n`);\n      sock.end(body);\n      return false;\n    }\n    if (method !== \"GET\" || !upgrade || !key) {\n      reply(\"426 Upgrade Required\", \"this port speaks WebSocket (OneLobby direct host)\");\n      return false;\n    }\n    const origin = headers.get(\"origin\");\n    if (origin !== undefined && !originAllowed(origin, headers.get(\"host\"), this.allowedOrigins)) {\n      reply(\"403 Forbidden\", \"this origin may not join (OneLobby direct host)\");\n      return false;\n    }\n    const accept = createHash(\"sha1\").update(key + WS_GUID).digest(\"base64\");\n    sock.write(`HTTP/1.1 101 Switching Protocols\\r\\nUpgrade: websocket\\r\\nConnection: Upgrade\\r\\nSec-WebSocket-Accept: ${accept}\\r\\n\\r\\n`);\n    return true;\n  }\n\n  private run(sock: Socket, ip: string, initial: Buffer): void {\n    let open = true;\n    const sendText = (text: string) => {\n      if (open && !sock.destroyed) sock.write(frame(0x1, Buffer.from(text, \"utf8\")));\n    };\n    const shut = (code: number, reason: string) => {\n      if (!open) return;\n      open = false;\n      if (!sock.destroyed) sock.end(closeFrame(code, reason));\n    };\n    let session: Session | null = null;\n    session = this.hub.connect(ip, sendText, () => shut(1000, \"closed by the hub\"));\n    if (!session) return;\n    const s = session;\n    const reader = new FrameReader(this.maxMessageBytes + 1024, {\n      text: (t) => this.hub.receive(s, t),\n      ping: (p) => !sock.destroyed && sock.write(frame(0xa, p)),\n      close: () => {\n        shut(1000, \"\");\n        this.hub.disconnect(s);\n      },\n      fail: (code, why) => {\n        shut(code, why);\n        this.hub.disconnect(s);\n      },\n    });\n    sock.on(\"data\", (b: Buffer) => reader.push(b));\n    sock.on(\"close\", () => {\n      open = false;\n      this.hub.disconnect(s);\n    });\n    if (initial.length) reader.push(initial);\n  }\n}\n\n// ------------------------------------------------------------------------------------------------ RFC 6455 framing\n\n/** One unmasked server frame (FIN set). */\nfunction frame(opcode: number, payload: Buffer): Buffer {\n  const n = payload.length;\n  const head = n < 126 ? Buffer.from([0x80 | opcode, n]) : n < 65536 ? Buffer.alloc(4) : Buffer.alloc(10);\n  if (n >= 126) {\n    head[0] = 0x80 | opcode;\n    if (n < 65536) {\n      head[1] = 126;\n      head.writeUInt16BE(n, 2);\n    } else {\n      head[1] = 127;\n      head.writeBigUInt64BE(BigInt(n), 2);\n    }\n  }\n  return Buffer.concat([head, payload]);\n}\n\nfunction closeFrame(code: number, reason: string): Buffer {\n  const r = Buffer.from(reason.slice(0, 100), \"utf8\");\n  const p = Buffer.alloc(2 + r.length);\n  p.writeUInt16BE(code, 0);\n  r.copy(p, 2);\n  return frame(0x8, p);\n}\n\ninterface FrameSink {\n  text(t: string): void;\n  ping(payload: Buffer): void;\n  close(): void;\n  fail(code: number, why: string): void;\n}\n\n/** Incremental client-frame parser: masked frames only, text messages (fragmented or not), control frames between. */\nclass FrameReader {\n  private buf: Buffer = Buffer.alloc(0);\n  private parts: Buffer[] = [];\n  private partBytes = 0;\n  private inMessage = false;\n  private binary = false;\n  private done = false;\n  private readonly utf8 = new TextDecoder(\"utf-8\", { fatal: true });\n\n  constructor(private readonly maxMessage: number, private readonly sink: FrameSink) {}\n\n  push(chunk: Buffer): void {\n    if (this.done) return;\n    this.buf = this.buf.length ? Buffer.concat([this.buf, chunk]) : chunk;\n    while (!this.done) {\n      if (this.buf.length < 2) return;\n      const b0 = this.buf[0];\n      const b1 = this.buf[1];\n      const fin = (b0 & 0x80) !== 0;\n      const opcode = b0 & 0x0f;\n      if (b0 & 0x70) return this.fail(1002, \"reserved bits set\");\n      if (!(b1 & 0x80)) return this.fail(1002, \"client frames must be masked\");\n      let len = b1 & 0x7f;\n      let off = 2;\n      if (len === 126) {\n        if (this.buf.length < 4) return;\n        len = this.buf.readUInt16BE(2);\n        off = 4;\n      } else if (len === 127) {\n        if (this.buf.length < 10) return;\n        const big = this.buf.readBigUInt64BE(2);\n        if (big > BigInt(this.maxMessage)) return this.fail(1009, \"message too big\");\n        len = Number(big);\n        off = 10;\n      }\n      if (len > this.maxMessage) return this.fail(1009, \"message too big\");\n      if (this.buf.length < off + 4 + len) return;\n      const mask = this.buf.subarray(off, off + 4);\n      const payload = Buffer.from(this.buf.subarray(off + 4, off + 4 + len));\n      for (let i = 0; i < payload.length; i++) payload[i] ^= mask[i & 3];\n      this.buf = this.buf.subarray(off + 4 + len);\n      if (opcode >= 0x8) {\n        if (!fin || len > 125) return this.fail(1002, \"bad control frame\");\n        if (opcode === 0x8) {\n          this.done = true;\n          this.sink.close();\n          return;\n        }\n        if (opcode === 0x9) this.sink.ping(payload);\n        continue; // pong or unknown control: ignore\n      }\n      if (opcode === 0x1 || opcode === 0x2) {\n        if (this.inMessage) return this.fail(1002, \"new message inside a fragmented one\");\n        this.inMessage = true;\n        this.binary = opcode === 0x2; // spec/signaling.md: binary frames are ignored\n      } else if (opcode !== 0x0 || !this.inMessage) return this.fail(1002, \"unexpected continuation\");\n      this.partBytes += payload.length;\n      if (this.partBytes > this.maxMessage) return this.fail(1009, \"message too big\");\n      if (!this.binary) this.parts.push(payload);\n      if (fin) {\n        const all = this.parts.length === 1 ? this.parts[0] : Buffer.concat(this.parts);\n        const skip = this.binary;\n        this.parts = [];\n        this.partBytes = 0;\n        this.inMessage = false;\n        this.binary = false;\n        if (skip) continue;\n        let text: string;\n        try {\n          text = this.utf8.decode(all);\n        } catch {\n          return this.fail(1007, \"invalid UTF-8\");\n        }\n        this.sink.text(text);\n      }\n    }\n  }\n\n  private fail(code: number, why: string): void {\n    this.done = true;\n    this.sink.fail(code, why);\n  }\n}\n\n// ------------------------------------------------------------------------------------------------ in-memory socket\n\n/**\n * The direct-IP host's own signaling socket (C#'s `HubSignalingSocket`): sends go straight into the hub; the hub's\n * replies are delivered on a microtask, so callbacks never run inside the hub.\n */\nexport class LocalHubSocket implements SocketLike {\n  /** Address the hub sees for the host itself (rate limits and kicks are per address). */\n  static readonly ADDRESS = \"local\";\n  readyState = 0;\n  onopen: SocketLike[\"onopen\"] = null;\n  onmessage: SocketLike[\"onmessage\"] = null;\n  onclose: SocketLike[\"onclose\"] = null;\n  onerror: SocketLike[\"onerror\"] = null;\n  private session: Session | null;\n\n  constructor(private readonly hub: SignalingHub) {\n    this.session = hub.connect(LocalHubSocket.ADDRESS, (text) => queueMicrotask(() => this.readyState === 1 && this.onmessage?.({ data: text })), () =>\n      this.finish(),\n    );\n    queueMicrotask(() => {\n      if (!this.session) {\n        this.finish();\n        return;\n      }\n      this.readyState = 1;\n      this.onopen?.();\n    });\n  }\n\n  send(data: string): void {\n    if (this.readyState === 1 && this.session) this.hub.receive(this.session, data);\n  }\n\n  close(): void {\n    const s = this.session;\n    const wasOpen = this.readyState === 1;\n    this.finish();\n    if (wasOpen && s) this.hub.disconnect(s);\n  }\n\n  private finish(): void {\n    if (this.readyState === 3) return;\n    this.readyState = 3;\n    queueMicrotask(() => this.onclose?.());\n  }\n}\n"]}

package/dist/direct/hub.d.ts

@@ -103,6 +103,9 @@ declare class HubLobby {
     kicked: Set<string>;
     hostId: number;
     epoch: number;
+    /** Highest valid host_changed claim a member made while the host was still connected; applied when the host goes. */
+    pendingClaimPeer: number;
+    pendingClaimEpoch: number;
     nextPeerId: number;
     find(peerId: number): Member | undefined;
 }

package/dist/direct/hub.js

@@ -154,6 +154,9 @@ class HubLobby {
     kicked = new Set();
     hostId = 0;
     epoch = 0;
+    /** Highest valid host_changed claim a member made while the host was still connected; applied when the host goes. */
+    pendingClaimPeer = 0;
+    pendingClaimEpoch = 0;
     nextPeerId = 1;
     find(peerId) {
         return this.members.find((m) => m.peerId === peerId);
@@ -366,11 +369,14 @@ export class SignalingHub {
         const token = str(m, "resumeToken");
         const entry = token !== null ? this.tokens.get(token) : undefined;
         if (entry && entry.lobby.gameId === gameId && entry.lobby.netVersion === netVersion) {
-            // A token whose old socket is still open is a take-over: drop the old socket first (it detaches normally).
+            // Validate first: a live socket (take-over) or a detached seat still inside the resume window. Only a valid
+            // resume closes the old socket (it detaches normally, which starts the window anew).
             const old = entry.member.session;
-            if (old && old !== s)
-                this.closeSession(old);
-            if (entry.member.detachedAt > 0 && this.now() - entry.member.detachedAt < this.o.resumeWindowMs) {
+            const takeOver = old !== null && old !== undefined && old !== s;
+            const inWindow = entry.member.detachedAt > 0 && this.now() - entry.member.detachedAt < this.o.resumeWindowMs;
+            if (takeOver || inWindow) {
+                if (takeOver)
+                    this.closeSession(old);
                 resumed = entry.member;
                 rl = entry.lobby;
             }
@@ -735,8 +741,19 @@ export class SignalingHub {
         const epoch = int(m, "epoch");
         if (host !== me.peerId || epoch === null || epoch <= lobby.epoch)
             return;
+        if (this.o.singleLobby)
+            return; // direct lobbies have no migration: the host leaving ends the session
+        if (lobby.hostId !== me.peerId && lobby.find(lobby.hostId)?.session) {
+            // The host is still here, so a member cannot take over. Remember the best claim for when the host goes.
+            if (epoch > lobby.pendingClaimEpoch) {
+                lobby.pendingClaimPeer = me.peerId;
+                lobby.pendingClaimEpoch = epoch;
+            }
+            return;
+        }
         lobby.hostId = me.peerId;
         lobby.epoch = epoch;
+        lobby.pendingClaimPeer = lobby.pendingClaimEpoch = 0;
         this.broadcast(lobby, { t: "host_changed", hostId: lobby.hostId, epoch: lobby.epoch });
         this.logEvent("host_claim", lobby, s);
     }
@@ -773,7 +790,13 @@ export class SignalingHub {
     }
     /** Server mirror of the peer-side rule (s.9): new host is the lowest peerId still connected; epoch +1. */
     promoteHost(lobby, leavingId) {
-        let next = lobby.members.filter((x) => x.session && x.peerId !== leavingId).sort((a, b) => a.peerId - b.peerId)[0];
+        // A claim made while the old host was alive wins if its claimant is still connected.
+        const claimant = lobby.pendingClaimEpoch > lobby.epoch && lobby.pendingClaimPeer !== leavingId
+            ? lobby.members.find((x) => x.peerId === lobby.pendingClaimPeer && x.session)
+            : undefined;
+        const claimEpoch = lobby.pendingClaimEpoch;
+        lobby.pendingClaimPeer = lobby.pendingClaimEpoch = 0;
+        let next = claimant ?? lobby.members.filter((x) => x.session && x.peerId !== leavingId).sort((a, b) => a.peerId - b.peerId)[0];
         if (!next) {
             // Nobody connected. Keep a reserved host slot (it may resume); otherwise fall back to the lowest slot.
             if (lobby.find(leavingId))
@@ -783,7 +806,10 @@ export class SignalingHub {
                 return;
         }
         lobby.hostId = next.peerId;
-        lobby.epoch++;
+        if (claimant)
+            lobby.epoch = claimEpoch;
+        else
+            lobby.epoch++;
         this.broadcast(lobby, { t: "host_changed", hostId: next.peerId, epoch: lobby.epoch });
         const hs = next.session;
         if (hs)