werift 0.22.9 → 0.24.0

package/lib/webrtc/src/transport/dtls.js

@@ -5,11 +5,33 @@ const x509_1 = require("@fidm/x509");
 const crypto_1 = require("crypto");
 const promises_1 = require("timers/promises");
 const common_1 = require("../imports/common");
+const helper_1 = require("../helper");
 const dtls_1 = require("../imports/dtls");
 const rtp_1 = require("../imports/rtp");
 const stats_1 = require("../media/stats");
 const utils_1 = require("../utils");
 const log = (0, rtp_1.debug)("werift:packages/webrtc/src/transport/dtls.ts");
+function formatDtlsVersion(version) {
+    if (!version) {
+        return;
+    }
+    if (version.major === 0xfe && version.minor === 0xfd) {
+        return "DTLS 1.2";
+    }
+    if (version.major === 0xfe && version.minor === 0xff) {
+        return "DTLS 1.0";
+    }
+}
+function formatSrtpCipher(profile) {
+    switch (profile) {
+        case 0x0001:
+            return "AES_CM_128_HMAC_SHA1_80";
+        case 0x0007:
+            return "AEAD_AES_128_GCM";
+        default:
+            return;
+    }
+}
 class RTCDtlsTransport {
     constructor(config, iceTransport, localCertificate, srtpProfiles = []) {
         Object.defineProperty(this, "config", {
@@ -133,19 +155,53 @@ class RTCDtlsTransport {
             writable: true,
             value: new common_1.Event()
         });
+        Object.defineProperty(this, "events", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new helper_1.EventTarget()
+        });
+        Object.defineProperty(this, "onstatechange", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "remoteParameters", {
             enumerable: true,
             configurable: true,
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "addEventListener", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: (type, listener, options) => {
+                this.events.addEventListener(type, listener, options);
+            }
+        });
+        Object.defineProperty(this, "removeEventListener", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: (type, listener) => {
+                this.events.removeEventListener(type, listener);
+            }
+        });
+        Object.defineProperty(this, "dispatchEvent", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: (event) => this.events.dispatchEvent(event)
+        });
         Object.defineProperty(this, "sendData", {
             enumerable: true,
             configurable: true,
             writable: true,
             value: async (data) => {
-                if (this.config.debug.outboundPacketLoss &&
-                    this.config.debug.outboundPacketLoss / 100 < Math.random()) {
+                if (this.config.debug?.outboundPacketLoss &&
+                    this.config.debug?.outboundPacketLoss / 100 < Math.random()) {
                     return;
                 }
                 if (!this.dtls) {
@@ -177,13 +233,21 @@ class RTCDtlsTransport {
         return this.localCertificatePromise;
     }
     setRemoteParams(remoteParameters) {
-        this.remoteParameters = remoteParameters;
+        const fingerprints = deduplicateFingerprints([
+            ...(this.remoteParameters?.fingerprints ?? []),
+            ...remoteParameters.fingerprints,
+        ]);
+        const role = remoteParameters.role === "auto" && this.remoteParameters?.role
+            ? this.remoteParameters.role
+            : remoteParameters.role;
+        this.remoteParameters = new RTCDtlsParameters(fingerprints, role);
     }
     async start() {
         if (this.state !== "new") {
             throw new Error("state must be new");
         }
-        if (this.remoteParameters?.fingerprints.length === 0) {
+        if (!this.remoteParameters ||
+            this.remoteParameters.fingerprints.length === 0) {
             throw new Error("remote fingerprint not exist");
         }
         if (this.role === "auto") {
@@ -204,7 +268,7 @@ class RTCDtlsTransport {
                     transport: createIceTransport(this.iceTransport.connection),
                     srtpProfiles: this.srtpProfiles,
                     extendedMasterSecret: true,
-                    // certificateRequest: true,
+                    certificateRequest: true,
                 });
             }
             else {
@@ -218,14 +282,16 @@ class RTCDtlsTransport {
                 });
             }
             this.dtls.onData.subscribe((buf) => {
-                if (this.config.debug.inboundPacketLoss &&
-                    this.config.debug.inboundPacketLoss / 100 < Math.random()) {
+                if (this.config.debug?.inboundPacketLoss &&
+                    this.config.debug?.inboundPacketLoss / 100 < Math.random()) {
                     return;
                 }
                 this.dataReceiver(buf);
             });
             this.dtls.onClose.subscribe(() => {
-                this.setState("closed");
+                if (this.state !== "failed") {
+                    this.setState("closed");
+                }
             });
             this.dtls.onConnect.once(r);
             this.dtls.onError.once((error) => {
@@ -242,16 +308,56 @@ class RTCDtlsTransport {
                 });
             }
         });
+        try {
+            this.verifyRemoteCertificateFingerprint();
+        }
+        catch (error) {
+            this.setState("failed");
+            this.dtls?.close();
+            throw error;
+        }
         if (this.srtpProfiles.length > 0) {
             this.startSrtp();
         }
-        this.dtls.onConnect.subscribe(() => {
-            this.updateSrtpSession();
-            this.setState("connected");
-        });
         this.setState("connected");
         log("dtls connected");
     }
+    verifyRemoteCertificateFingerprint() {
+        if (!this.remoteParameters ||
+            this.remoteParameters.fingerprints.length === 0) {
+            throw new Error("remote fingerprint not exist");
+        }
+        const remoteCertificate = this.dtls?.remoteCertificate;
+        if (!remoteCertificate) {
+            throw new Error("remote certificate not available");
+        }
+        const supportedFingerprints = this.remoteParameters.fingerprints.flatMap(({ algorithm, value }) => {
+            const normalizedAlgorithm = (0, utils_1.normalizeFingerprintAlgorithm)(algorithm);
+            if (!normalizedAlgorithm) {
+                return [];
+            }
+            const normalizedValue = (0, utils_1.normalizeFingerprintValue)(value);
+            if (!normalizedValue) {
+                throw new Error("remote fingerprint value is empty");
+            }
+            return [{ normalizedAlgorithm, normalizedValue }];
+        });
+        if (supportedFingerprints.length === 0) {
+            throw new Error("no supported remote fingerprint algorithms");
+        }
+        const preferredAlgorithm = selectPreferredFingerprintAlgorithm(supportedFingerprints);
+        const expectedFingerprints = supportedFingerprints.filter(({ normalizedAlgorithm }) => normalizedAlgorithm === preferredAlgorithm);
+        const actualFingerprints = expectedFingerprints.reduce((acc, { normalizedAlgorithm }) => {
+            if (!acc.has(normalizedAlgorithm)) {
+                acc.set(normalizedAlgorithm, (0, utils_1.normalizeFingerprintValue)((0, utils_1.fingerprint)(remoteCertificate, normalizedAlgorithm)));
+            }
+            return acc;
+        }, new Map());
+        const matched = expectedFingerprints.some(({ normalizedAlgorithm, normalizedValue }) => actualFingerprints.get(normalizedAlgorithm) === normalizedValue);
+        if (!matched) {
+            throw new Error("remote certificate fingerprint mismatch");
+        }
+    }
     updateSrtpSession() {
         if (!this.dtls)
             throw new Error();
@@ -279,8 +385,8 @@ class RTCDtlsTransport {
         this.srtpStarted = true;
         this.updateSrtpSession();
         this.iceTransport.connection.onData.subscribe((data) => {
-            if (this.config.debug.inboundPacketLoss &&
-                this.config.debug.inboundPacketLoss / 100 < Math.random()) {
+            if (this.config.debug?.inboundPacketLoss &&
+                this.config.debug?.inboundPacketLoss / 100 < Math.random()) {
                 return;
             }
             if (!(0, rtp_1.isMedia)(data))
@@ -289,8 +395,25 @@ class RTCDtlsTransport {
             this.bytesReceived += data.length;
             this.packetsReceived++;
             if ((0, rtp_1.isRtcp)(data)) {
-                const dec = this.srtcp.decrypt(data);
-                const rtcpPackets = rtp_1.RtcpPacketConverter.deSerialize(dec);
+                let dec;
+                try {
+                    dec = this.srtcp.decrypt(data);
+                }
+                catch (error) {
+                    if (error instanceof rtp_1.SrtpAuthenticationError) {
+                        log("dropping invalid SRTCP packet", error);
+                        return;
+                    }
+                    throw error;
+                }
+                let rtcpPackets;
+                try {
+                    rtcpPackets = rtp_1.RtcpPacketConverter.deSerialize(dec);
+                }
+                catch (error) {
+                    log("dropping malformed SRTCP packet", error);
+                    return;
+                }
                 for (const rtcp of rtcpPackets) {
                     try {
                         this.onRtcp.execute(rtcp);
@@ -301,8 +424,25 @@ class RTCDtlsTransport {
                 }
             }
             else {
-                const dec = this.srtp.decrypt(data);
-                const rtp = rtp_1.RtpPacket.deSerialize(dec);
+                let dec;
+                try {
+                    dec = this.srtp.decrypt(data);
+                }
+                catch (error) {
+                    if (error instanceof rtp_1.SrtpAuthenticationError) {
+                        log("dropping invalid SRTP packet", error);
+                        return;
+                    }
+                    throw error;
+                }
+                let rtp;
+                try {
+                    rtp = rtp_1.RtpPacket.deSerialize(dec);
+                }
+                catch (error) {
+                    log("dropping malformed SRTP packet", error);
+                    return;
+                }
                 try {
                     this.onRtp.execute(rtp);
                 }
@@ -315,8 +455,8 @@ class RTCDtlsTransport {
     async sendRtp(payload, header) {
         try {
             const enc = this.srtp.encrypt(payload, header);
-            if (this.config.debug.outboundPacketLoss &&
-                this.config.debug.outboundPacketLoss / 100 < Math.random()) {
+            if (this.config.debug?.outboundPacketLoss &&
+                this.config.debug?.outboundPacketLoss / 100 < Math.random()) {
                 return enc.length;
             }
             // Track statistics
@@ -333,8 +473,8 @@ class RTCDtlsTransport {
     async sendRtcp(packets) {
         const payload = Buffer.concat(packets.map((packet) => packet.serialize()));
         const enc = this.srtcp.encrypt(payload);
-        if (this.config.debug.outboundPacketLoss &&
-            this.config.debug.outboundPacketLoss / 100 < Math.random()) {
+        if (this.config.debug?.outboundPacketLoss &&
+            this.config.debug?.outboundPacketLoss / 100 < Math.random()) {
             return enc.length;
         }
         // Track statistics
@@ -342,19 +482,22 @@ class RTCDtlsTransport {
         this.packetsSent++;
         await this.iceTransport.connection.send(enc).catch(() => { });
     }
-    setState(state) {
+    setState(state, emitEvent = true) {
         if (state != this.state) {
             this.state = state;
             this.onStateChange.execute(state);
+            if (emitEvent) {
+                this.onstatechange?.();
+                this.events.emit("statechange");
+            }
         }
     }
     async stop() {
-        this.setState("closed");
+        this.setState("closed", false);
         // todo impl send alert
         await this.iceTransport.stop();
     }
-    async getStats() {
-        const timestamp = (0, stats_1.getStatsTimestamp)();
+    async getStats(timestamp = (0, stats_1.getStatsTimestamp)()) {
         const stats = [];
         const transportId = (0, stats_1.generateStatsId)("transport", this.id);
         // Transport stats
@@ -368,16 +511,24 @@ class RTCDtlsTransport {
             packetsReceived: this.packetsReceived,
             dtlsState: this.state,
             iceState: this.iceTransport.state,
+            iceRole: this.iceTransport.role === "unknown"
+                ? undefined
+                : this.iceTransport.role,
+            iceLocalUsernameFragment: this.iceTransport.localParameters.usernameFragment,
             selectedCandidatePairId: this.iceTransport.connection.nominated
-                ? (0, stats_1.generateStatsId)("candidate-pair", this.iceTransport.connection.nominated.localCandidate.foundation, this.iceTransport.connection.nominated.remoteCandidate.foundation)
+                ? (0, stats_1.generateStatsId)("candidate-pair", this.iceTransport.connection.nominated.id)
                 : undefined,
             localCertificateId: this.localCertificate
-                ? (0, stats_1.generateStatsId)("certificate", "local")
+                ? (0, stats_1.generateStatsId)("certificate", this.id, "local")
                 : undefined,
-            remoteCertificateId: this.remoteParameters
-                ? (0, stats_1.generateStatsId)("certificate", "remote")
+            remoteCertificateId: this.dtls?.remoteCertificate
+                ? (0, stats_1.generateStatsId)("certificate", this.id, "remote")
                 : undefined,
             dtlsRole: this.role === "auto" ? undefined : this.role,
+            tlsVersion: formatDtlsVersion(this.dtls?.dtls.version),
+            dtlsCipher: this.dtls?.cipher.cipher?.name,
+            srtpCipher: formatSrtpCipher(this.dtls?.srtp.srtpProfile),
+            iceRestarts: this.iceTransport.iceRestarts,
         };
         stats.push(transportStats);
         // Certificate stats
@@ -386,7 +537,7 @@ class RTCDtlsTransport {
             if (fingerprints.length > 0) {
                 const certStats = {
                     type: "certificate",
-                    id: (0, stats_1.generateStatsId)("certificate", "local"),
+                    id: (0, stats_1.generateStatsId)("certificate", this.id, "local"),
                     timestamp,
                     fingerprint: fingerprints[0].value,
                     fingerprintAlgorithm: fingerprints[0].algorithm,
@@ -396,19 +547,20 @@ class RTCDtlsTransport {
             }
         }
         if (this.remoteParameters &&
-            this.remoteParameters.fingerprints.length > 0) {
+            this.remoteParameters.fingerprints.length > 0 &&
+            this.dtls?.remoteCertificate) {
             const certStats = {
                 type: "certificate",
-                id: (0, stats_1.generateStatsId)("certificate", "remote"),
+                id: (0, stats_1.generateStatsId)("certificate", this.id, "remote"),
                 timestamp,
                 fingerprint: this.remoteParameters.fingerprints[0].value,
                 fingerprintAlgorithm: this.remoteParameters.fingerprints[0].algorithm,
-                base64Certificate: "", // Remote certificate content not available
+                base64Certificate: Buffer.from(this.dtls.remoteCertificate).toString("base64"),
             };
             stats.push(certStats);
         }
         // Get ICE stats
-        const iceStats = await this.iceTransport.getStats();
+        const iceStats = await this.iceTransport.getStats(timestamp, transportId);
         stats.push(...iceStats);
         return stats;
     }
@@ -492,6 +644,27 @@ class RTCDtlsParameters {
     }
 }
 exports.RTCDtlsParameters = RTCDtlsParameters;
+const deduplicateFingerprints = (fingerprints) => {
+    const seen = new Set();
+    return fingerprints.filter(({ algorithm, value }) => {
+        const key = `${(0, utils_1.normalizeFingerprintAlgorithm)(algorithm) ?? algorithm.trim().toLowerCase()}:${(0, utils_1.normalizeFingerprintValue)(value)}`;
+        if (seen.has(key)) {
+            return false;
+        }
+        seen.add(key);
+        return true;
+    });
+};
+const preferredFingerprintAlgorithms = [
+    "sha512",
+    "sha384",
+    "sha256",
+    "sha224",
+    "sha1",
+];
+const selectPreferredFingerprintAlgorithm = (fingerprints) => {
+    return (preferredFingerprintAlgorithms.find((algorithm) => fingerprints.some(({ normalizedAlgorithm }) => normalizedAlgorithm === algorithm)) ?? fingerprints[0].normalizedAlgorithm);
+};
 class IceTransport {
     constructor(ice) {
         Object.defineProperty(this, "ice", {

package/lib/webrtc/src/transport/dtls.js.map

@@ -1 +1 @@
-{"version":3,"file":"dtls.js","sourceRoot":"","sources":["../../../../src/transport/dtls.ts"],"names":[],"mappings":";;;AAAA,qCAAqD;AAErD,mCAAoC;AACpC,8CAA6C;AAC7C,8CAA0D;AAG1D,0CASyB;AAEzB,wCAawB;AACxB,0CAQwB;AAExB,oCAA+C;AAG/C,MAAM,GAAG,GAAG,IAAA,WAAK,EAAC,8CAA8C,CAAC,CAAC;AASlE,MAAa,gBAAgB;IA0B3B,YACW,MAAkB,EAClB,YAA6B,EAC/B,gBAAiC,EACvB,eAA8B,EAAE;QAHjD;;;;mBAAS,MAAM;WAAY;QAC3B;;;;mBAAS,YAAY;WAAiB;QACtC;;;;mBAAO,gBAAgB;WAAiB;QACxC;;;;mBAAiB,YAAY;WAAoB;QA7BnD;;;;mBAAK,IAAA,mBAAU,GAAE,CAAC,QAAQ,EAAE;WAAC;QAC7B;;;;mBAAmB,KAAK;WAAC;QACzB;;;;mBAAiB,MAAM;WAAC;QACxB;;;;mBAAc,KAAK;WAAC;QACpB;;;;mBAA0B,CAAC;WAAC;QAE5B,sBAAsB;QACf;;;;mBAAY,CAAC;WAAC;QACd;;;;mBAAgB,CAAC;WAAC;QAClB;;;;mBAAc,CAAC;WAAC;QAChB;;;;mBAAkB,CAAC;WAAC;QAE3B;;;;mBAAsC,GAAG,EAAE,GAAE,CAAC;WAAC;QAC/C;;;;;WAAkB;QAClB;;;;;WAAmB;QACnB;;;;;WAAqB;QAEZ;;;;mBAAgB,IAAI,cAAK,EAAe;WAAC;QACzC;;;;mBAAS,IAAI,cAAK,EAAgB;WAAC;QACnC;;;;mBAAQ,IAAI,cAAK,EAAe;WAAC;QAIlC;;;;;WAAqC;QAsMpC;;;;mBAAW,KAAK,EAAE,IAAY,EAAE,EAAE;gBACzC,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB;oBACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAC1D,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAC1C,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;WAAC;QA1MA,IAAI,CAAC,gBAAgB,KAArB,IAAI,CAAC,gBAAgB,GAAK,gBAAgB,CAAC,gBAAgB,EAAC;IAC9D,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,iBAAiB,CAC1B,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,EACpE,IAAI,CAAC,IAAI,CACV,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,gBAAgB;QAC3B,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAC/B,CAAC;QAED,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,uBAAuB,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,uBAAuB,GAAG,CAAC,KAAK,IAAI,EAAE;YACzC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,GACtC,MAAM,oBAAa,CAAC,kCAAkC,CACpD;gBACE,SAAS,EAAE,yBAAkB,CAAC,OAAO;gBACrC,IAAI,EAAE,oBAAa,CAAC,QAAQ;aAC7B,EACD,0BAAmB,CAAC,YAAY,CACjC,CAAC;YACJ,IAAI,CAAC,gBAAgB,GAAG,IAAI,cAAc,CACxC,MAAM,EACN,OAAO,EACP,aAAa,CACd,CAAC;YACF,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAC/B,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,IAAI,CAAC,uBAAuB,CAAC;IACtC,CAAC;IAED,eAAe,CAAC,gBAAmC;QACjD,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAE5B,MAAM,IAAI,OAAO,CAAO,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAU,CAAC;oBACzB,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO;oBACpC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU;oBACtC,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa;oBACnD,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;oBAC3D,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,oBAAoB,EAAE,IAAI;oBAC1B,4BAA4B;iBAC7B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAU,CAAC;oBACzB,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO;oBACpC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU;oBACtC,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa;oBACnD,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;oBAC3D,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,oBAAoB,EAAE,IAAI;iBAC3B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;gBACjC,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB;oBACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EACzD,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE;gBAC/B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC/B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACxB,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;gBAC1B,CAAC,CAAC,KAAK,CAAC,CAAC;YACX,CAAC,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,IAAI,YAAY,iBAAU,EAAE,CAAC;gBACpC,MAAM,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACxB,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;oBAClC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACX,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAK,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3B,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxB,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QACD,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QAEtC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,GAClD,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAA,eAAS,EAAC,OAAO,CAAC,EAAE,IAAA,gBAAU,EAAC,OAAO,CAAC,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG;YACb,IAAI,EAAE;gBACJ,cAAc,EAAE,QAAQ;gBACxB,eAAe,EAAE,SAAS;gBAC1B,eAAe,EAAE,SAAS;gBAC1B,gBAAgB,EAAE,UAAU;aAC7B;YACD,OAAO;SACR,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,kBAAY,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;YACrD,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB;gBACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EACzD,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAA,aAAO,EAAC,IAAI,CAAC;gBAAE,OAAO;YAE3B,iCAAiC;YACjC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC;YAClC,IAAI,CAAC,eAAe,EAAE,CAAC;YAEvB,IAAI,IAAA,YAAM,EAAC,IAAI,CAAC,EAAE,CAAC;gBACjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,WAAW,GAAG,yBAAmB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACzD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,IAAI,CAAC;wBACH,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC5B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpC,MAAM,GAAG,GAAG,eAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAgBD,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,MAAiB;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE/C,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB;gBACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAC1D,CAAC;gBACD,OAAO,GAAG,CAAC,MAAM,CAAC;YACpB,CAAC;YAED,mBAAmB;YACnB,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC;YAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;YAEnB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC7D,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YAC7B,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAqB;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAExC,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAC1D,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,QAAQ,CAAC,KAAgB;QAC/B,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxB,uBAAuB;QACvB,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,SAAS,GAAG,IAAA,yBAAiB,GAAE,CAAC;QACtC,MAAM,KAAK,GAAe,EAAE,CAAC;QAE7B,MAAM,WAAW,GAAG,IAAA,uBAAe,EAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE1D,kBAAkB;QAClB,MAAM,cAAc,GAAsB;YACxC,IAAI,EAAE,WAAW;YACjB,EAAE,EAAE,WAAW;YACf,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;YACjC,uBAAuB,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS;gBAC7D,CAAC,CAAC,IAAA,uBAAe,EACb,gBAAgB,EAChB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,EAChE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,CAClE;gBACH,CAAC,CAAC,SAAS;YACb,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,CAAC,CAAC,IAAA,uBAAe,EAAC,aAAa,EAAE,OAAO,CAAC;gBACzC,CAAC,CAAC,SAAS;YACb,mBAAmB,EAAE,IAAI,CAAC,gBAAgB;gBACxC,CAAC,CAAC,IAAA,uBAAe,EAAC,aAAa,EAAE,QAAQ,CAAC;gBAC1C,CAAC,CAAC,SAAS;YACb,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;SACvD,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE3B,oBAAoB;QACpB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;YAC7D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAwB;oBACrC,IAAI,EAAE,aAAa;oBACnB,EAAE,EAAE,IAAA,uBAAe,EAAC,aAAa,EAAE,OAAO,CAAC;oBAC3C,SAAS;oBACT,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK;oBAClC,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC/C,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAC5B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAC9B,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBACrB,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,IACE,IAAI,CAAC,gBAAgB;YACrB,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAC7C,CAAC;YACD,MAAM,SAAS,GAAwB;gBACrC,IAAI,EAAE,aAAa;gBACnB,EAAE,EAAE,IAAA,uBAAe,EAAC,aAAa,EAAE,QAAQ,CAAC;gBAC5C,SAAS;gBACT,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK;gBACxD,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrE,iBAAiB,EAAE,EAAE,EAAE,2CAA2C;aACnE,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAED,gBAAgB;QAChB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAExB,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA3WD,4CA2WC;AAEY,QAAA,UAAU,GAAG;IACxB,KAAK;IACL,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,QAAQ;CACA,CAAC;AAKX,MAAa,cAAc;IAIzB,YACE,aAAqB,EACd,OAAe,EACf,aAA4B;QADnC;;;;mBAAO,OAAO;WAAQ;QACtB;;;;mBAAO,aAAa;WAAe;QANrC;;;;;WAAkB;QAClB;;;;;WAAmB;QAOjB,MAAM,IAAI,GAAG,kBAAW,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,iBAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED,eAAe;QACb,OAAO;YACL,IAAI,kBAAkB,CACpB,SAAS,EACT,IAAA,mBAAW,EACT,kBAAW,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAClD,QAAQ,CACT,CACF;SACF,CAAC;IACJ,CAAC;CACF;AAzBD,wCAyBC;AAQD,MAAa,kBAAkB;IAC7B,YACS,SAAiB,EACjB,KAAa;QADpB;;;;mBAAO,SAAS;WAAQ;QACxB;;;;mBAAO,KAAK;WAAQ;IACnB,CAAC;CACL;AALD,gDAKC;AAED,MAAa,iBAAiB;IAC5B,YACS,eAAqC,EAAE,EACvC,IAAkC;QADzC;;;;mBAAO,YAAY;WAA2B;QAC9C;;;;mBAAO,IAAI;WAA8B;IACxC,CAAC;CACL;AALD,8CAKC;AAED,MAAM,YAAY;IAEhB,YAAoB,GAAkB;QAA1B;;;;mBAAQ,GAAG;WAAe;QADtC;;;;mBAAkB,KAAK;WAAC;QAUxB;;;;mBAAgC,GAAG,EAAE,GAAE,CAAC;WAAC;QAMzC;;;;mBAAe,KAAK;WAAC;QAEZ;;;;mBAAO,CAAC,IAAY,EAAE,EAAE;gBAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;WAAC;QAlBA,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3B,IAAI,IAAA,cAAM,EAAC,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAGD,IAAI,OAAO;QACT,OAAO,EAAiB,CAAC;IAC3B,CAAC;IAQD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,CAAC,GAAkB,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC","sourcesContent":["import { Certificate, PrivateKey } from \"@fidm/x509\";\n\nimport { randomUUID } from \"crypto\";\nimport { setTimeout } from \"timers/promises\";\nimport { Event, type Transport } from \"../imports/common\";\n\nimport type { AddressInfo } from \"net\";\nimport {\n  CipherContext,\n  DtlsClient,\n  DtlsServer,\n  type DtlsSocket,\n  HashAlgorithm,\n  NamedCurveAlgorithm,\n  SignatureAlgorithm,\n  type SignatureHash,\n} from \"../imports/dtls\";\nimport type { IceConnection } from \"../imports/ice\";\nimport {\n  type RtcpPacket,\n  RtcpPacketConverter,\n  type RtpHeader,\n  RtpPacket,\n  SrtcpSession,\n  type SrtpProfile,\n  SrtpSession,\n  debug,\n  isMedia,\n  isRtcp,\n  keyLength,\n  saltLength,\n} from \"../imports/rtp\";\nimport {\n  type RTCCertificateStats,\n  type RTCIceCandidatePairStats,\n  type RTCIceCandidateStats,\n  type RTCStats,\n  type RTCTransportStats,\n  generateStatsId,\n  getStatsTimestamp,\n} from \"../media/stats\";\nimport type { PeerConfig } from \"../peerConnection\";\nimport { fingerprint, isDtls } from \"../utils\";\nimport type { RTCIceTransport } from \"./ice\";\n\nconst log = debug(\"werift:packages/webrtc/src/transport/dtls.ts\");\n\nexport interface DtlsTransportStats {\n  bytesSent: number;\n  bytesReceived: number;\n  packetsSent: number;\n  packetsReceived: number;\n}\n\nexport class RTCDtlsTransport implements DtlsTransportStats {\n  id = randomUUID().toString();\n  state: DtlsState = \"new\";\n  role: DtlsRole = \"auto\";\n  srtpStarted = false;\n  transportSequenceNumber = 0;\n\n  // Statistics tracking\n  public bytesSent = 0;\n  public bytesReceived = 0;\n  public packetsSent = 0;\n  public packetsReceived = 0;\n\n  dataReceiver: (buf: Buffer) => void = () => {};\n  dtls?: DtlsSocket;\n  srtp!: SrtpSession;\n  srtcp!: SrtcpSession;\n\n  readonly onStateChange = new Event<[DtlsState]>();\n  readonly onRtcp = new Event<[RtcpPacket]>();\n  readonly onRtp = new Event<[RtpPacket]>();\n\n  static localCertificate?: RTCCertificate;\n  static localCertificatePromise?: Promise<RTCCertificate>;\n  private remoteParameters?: RTCDtlsParameters;\n\n  constructor(\n    readonly config: PeerConfig,\n    readonly iceTransport: RTCIceTransport,\n    public localCertificate?: RTCCertificate,\n    private readonly srtpProfiles: SrtpProfile[] = [],\n  ) {\n    this.localCertificate ??= RTCDtlsTransport.localCertificate;\n  }\n\n  get localParameters() {\n    return new RTCDtlsParameters(\n      this.localCertificate ? this.localCertificate.getFingerprints() : [],\n      this.role,\n    );\n  }\n\n  static async SetupCertificate() {\n    if (this.localCertificate) {\n      return this.localCertificate;\n    }\n\n    if (this.localCertificatePromise) {\n      return this.localCertificatePromise;\n    }\n\n    this.localCertificatePromise = (async () => {\n      const { certPem, keyPem, signatureHash } =\n        await CipherContext.createSelfSignedCertificateWithKey(\n          {\n            signature: SignatureAlgorithm.ecdsa_3,\n            hash: HashAlgorithm.sha256_4,\n          },\n          NamedCurveAlgorithm.secp256r1_23,\n        );\n      this.localCertificate = new RTCCertificate(\n        keyPem,\n        certPem,\n        signatureHash,\n      );\n      return this.localCertificate;\n    })();\n\n    return this.localCertificatePromise;\n  }\n\n  setRemoteParams(remoteParameters: RTCDtlsParameters) {\n    this.remoteParameters = remoteParameters;\n  }\n\n  async start() {\n    if (this.state !== \"new\") {\n      throw new Error(\"state must be new\");\n    }\n    if (this.remoteParameters?.fingerprints.length === 0) {\n      throw new Error(\"remote fingerprint not exist\");\n    }\n\n    if (this.role === \"auto\") {\n      if (this.iceTransport.role === \"controlling\") {\n        this.role = \"server\";\n      } else {\n        this.role = \"client\";\n      }\n    }\n\n    this.setState(\"connecting\");\n\n    await new Promise<void>(async (r, f) => {\n      if (this.role === \"server\") {\n        this.dtls = new DtlsServer({\n          cert: this.localCertificate?.certPem,\n          key: this.localCertificate?.privateKey,\n          signatureHash: this.localCertificate?.signatureHash,\n          transport: createIceTransport(this.iceTransport.connection),\n          srtpProfiles: this.srtpProfiles,\n          extendedMasterSecret: true,\n          // certificateRequest: true,\n        });\n      } else {\n        this.dtls = new DtlsClient({\n          cert: this.localCertificate?.certPem,\n          key: this.localCertificate?.privateKey,\n          signatureHash: this.localCertificate?.signatureHash,\n          transport: createIceTransport(this.iceTransport.connection),\n          srtpProfiles: this.srtpProfiles,\n          extendedMasterSecret: true,\n        });\n      }\n      this.dtls.onData.subscribe((buf) => {\n        if (\n          this.config.debug.inboundPacketLoss &&\n          this.config.debug.inboundPacketLoss / 100 < Math.random()\n        ) {\n          return;\n        }\n        this.dataReceiver(buf);\n      });\n      this.dtls.onClose.subscribe(() => {\n        this.setState(\"closed\");\n      });\n      this.dtls.onConnect.once(r);\n      this.dtls.onError.once((error) => {\n        this.setState(\"failed\");\n        log(\"dtls failed\", error);\n        f(error);\n      });\n\n      if (this.dtls instanceof DtlsClient) {\n        await setTimeout(100);\n        this.dtls.connect().catch((error) => {\n          this.setState(\"failed\");\n          log(\"dtls connect failed\", error);\n          f(error);\n        });\n      }\n    });\n\n    if (this.srtpProfiles.length > 0) {\n      this.startSrtp();\n    }\n    this.dtls!.onConnect.subscribe(() => {\n      this.updateSrtpSession();\n      this.setState(\"connected\");\n    });\n    this.setState(\"connected\");\n\n    log(\"dtls connected\");\n  }\n\n  updateSrtpSession() {\n    if (!this.dtls) throw new Error();\n\n    const profile = this.dtls.srtp.srtpProfile;\n    if (!profile) {\n      throw new Error(\"need srtpProfile\");\n    }\n    log(\"selected SRTP Profile\", profile);\n\n    const { localKey, localSalt, remoteKey, remoteSalt } =\n      this.dtls.extractSessionKeys(keyLength(profile), saltLength(profile));\n\n    const config = {\n      keys: {\n        localMasterKey: localKey,\n        localMasterSalt: localSalt,\n        remoteMasterKey: remoteKey,\n        remoteMasterSalt: remoteSalt,\n      },\n      profile,\n    };\n    this.srtp = new SrtpSession(config);\n    this.srtcp = new SrtcpSession(config);\n  }\n\n  startSrtp() {\n    if (this.srtpStarted) return;\n    this.srtpStarted = true;\n\n    this.updateSrtpSession();\n\n    this.iceTransport.connection.onData.subscribe((data) => {\n      if (\n        this.config.debug.inboundPacketLoss &&\n        this.config.debug.inboundPacketLoss / 100 < Math.random()\n      ) {\n        return;\n      }\n\n      if (!isMedia(data)) return;\n\n      // Track received data statistics\n      this.bytesReceived += data.length;\n      this.packetsReceived++;\n\n      if (isRtcp(data)) {\n        const dec = this.srtcp.decrypt(data);\n        const rtcpPackets = RtcpPacketConverter.deSerialize(dec);\n        for (const rtcp of rtcpPackets) {\n          try {\n            this.onRtcp.execute(rtcp);\n          } catch (error) {\n            log(\"RTCP error\", error);\n          }\n        }\n      } else {\n        const dec = this.srtp.decrypt(data);\n        const rtp = RtpPacket.deSerialize(dec);\n        try {\n          this.onRtp.execute(rtp);\n        } catch (error) {\n          log(\"RTP error\", error);\n        }\n      }\n    });\n  }\n\n  readonly sendData = async (data: Buffer) => {\n    if (\n      this.config.debug.outboundPacketLoss &&\n      this.config.debug.outboundPacketLoss / 100 < Math.random()\n    ) {\n      return;\n    }\n\n    if (!this.dtls) {\n      throw new Error(\"dtls not established\");\n    }\n    await this.dtls.send(data);\n  };\n\n  async sendRtp(payload: Buffer, header: RtpHeader): Promise<number> {\n    try {\n      const enc = this.srtp.encrypt(payload, header);\n\n      if (\n        this.config.debug.outboundPacketLoss &&\n        this.config.debug.outboundPacketLoss / 100 < Math.random()\n      ) {\n        return enc.length;\n      }\n\n      // Track statistics\n      this.bytesSent += enc.length;\n      this.packetsSent++;\n\n      await this.iceTransport.connection.send(enc).catch(() => {});\n      return enc.length;\n    } catch (error) {\n      log(\"failed to send\", error);\n      return 0;\n    }\n  }\n\n  async sendRtcp(packets: RtcpPacket[]) {\n    const payload = Buffer.concat(packets.map((packet) => packet.serialize()));\n    const enc = this.srtcp.encrypt(payload);\n\n    if (\n      this.config.debug.outboundPacketLoss &&\n      this.config.debug.outboundPacketLoss / 100 < Math.random()\n    ) {\n      return enc.length;\n    }\n\n    // Track statistics\n    this.bytesSent += enc.length;\n    this.packetsSent++;\n\n    await this.iceTransport.connection.send(enc).catch(() => {});\n  }\n\n  private setState(state: DtlsState) {\n    if (state != this.state) {\n      this.state = state;\n      this.onStateChange.execute(state);\n    }\n  }\n\n  async stop() {\n    this.setState(\"closed\");\n    // todo impl send alert\n    await this.iceTransport.stop();\n  }\n\n  async getStats(): Promise<RTCStats[]> {\n    const timestamp = getStatsTimestamp();\n    const stats: RTCStats[] = [];\n\n    const transportId = generateStatsId(\"transport\", this.id);\n\n    // Transport stats\n    const transportStats: RTCTransportStats = {\n      type: \"transport\",\n      id: transportId,\n      timestamp,\n      bytesSent: this.bytesSent,\n      bytesReceived: this.bytesReceived,\n      packetsSent: this.packetsSent,\n      packetsReceived: this.packetsReceived,\n      dtlsState: this.state,\n      iceState: this.iceTransport.state,\n      selectedCandidatePairId: this.iceTransport.connection.nominated\n        ? generateStatsId(\n            \"candidate-pair\",\n            this.iceTransport.connection.nominated.localCandidate.foundation,\n            this.iceTransport.connection.nominated.remoteCandidate.foundation,\n          )\n        : undefined,\n      localCertificateId: this.localCertificate\n        ? generateStatsId(\"certificate\", \"local\")\n        : undefined,\n      remoteCertificateId: this.remoteParameters\n        ? generateStatsId(\"certificate\", \"remote\")\n        : undefined,\n      dtlsRole: this.role === \"auto\" ? undefined : this.role,\n    };\n    stats.push(transportStats);\n\n    // Certificate stats\n    if (this.localCertificate) {\n      const fingerprints = this.localCertificate.getFingerprints();\n      if (fingerprints.length > 0) {\n        const certStats: RTCCertificateStats = {\n          type: \"certificate\",\n          id: generateStatsId(\"certificate\", \"local\"),\n          timestamp,\n          fingerprint: fingerprints[0].value,\n          fingerprintAlgorithm: fingerprints[0].algorithm,\n          base64Certificate: Buffer.from(\n            this.localCertificate.certPem,\n          ).toString(\"base64\"),\n        };\n        stats.push(certStats);\n      }\n    }\n\n    if (\n      this.remoteParameters &&\n      this.remoteParameters.fingerprints.length > 0\n    ) {\n      const certStats: RTCCertificateStats = {\n        type: \"certificate\",\n        id: generateStatsId(\"certificate\", \"remote\"),\n        timestamp,\n        fingerprint: this.remoteParameters.fingerprints[0].value,\n        fingerprintAlgorithm: this.remoteParameters.fingerprints[0].algorithm,\n        base64Certificate: \"\", // Remote certificate content not available\n      };\n      stats.push(certStats);\n    }\n\n    // Get ICE stats\n    const iceStats = await this.iceTransport.getStats();\n    stats.push(...iceStats);\n\n    return stats;\n  }\n}\n\nexport const DtlsStates = [\n  \"new\",\n  \"connecting\",\n  \"connected\",\n  \"closed\",\n  \"failed\",\n] as const;\nexport type DtlsState = (typeof DtlsStates)[number];\n\nexport type DtlsRole = \"auto\" | \"server\" | \"client\";\n\nexport class RTCCertificate {\n  publicKey: string;\n  privateKey: string;\n\n  constructor(\n    privateKeyPem: string,\n    public certPem: string,\n    public signatureHash: SignatureHash,\n  ) {\n    const cert = Certificate.fromPEM(Buffer.from(certPem));\n    this.publicKey = cert.publicKey.toPEM();\n    this.privateKey = PrivateKey.fromPEM(Buffer.from(privateKeyPem)).toPEM();\n  }\n\n  getFingerprints(): RTCDtlsFingerprint[] {\n    return [\n      new RTCDtlsFingerprint(\n        \"sha-256\",\n        fingerprint(\n          Certificate.fromPEM(Buffer.from(this.certPem)).raw,\n          \"sha256\",\n        ),\n      ),\n    ];\n  }\n}\n\nexport type DtlsKeys = {\n  certPem: string;\n  keyPem: string;\n  signatureHash: SignatureHash;\n};\n\nexport class RTCDtlsFingerprint {\n  constructor(\n    public algorithm: string,\n    public value: string,\n  ) {}\n}\n\nexport class RTCDtlsParameters {\n  constructor(\n    public fingerprints: RTCDtlsFingerprint[] = [],\n    public role: \"auto\" | \"client\" | \"server\",\n  ) {}\n}\n\nclass IceTransport implements Transport {\n  closed: boolean = false;\n  constructor(private ice: IceConnection) {\n    ice.onData.subscribe((buf) => {\n      if (isDtls(buf)) {\n        if (this.onData) {\n          this.onData(buf);\n        }\n      }\n    });\n  }\n  onData: (buf: Buffer) => void = () => {};\n\n  get address() {\n    return {} as AddressInfo;\n  }\n\n  type: string = \"ice\";\n\n  readonly send = (data: Buffer) => {\n    return this.ice.send(data);\n  };\n\n  async close() {\n    this.closed = true;\n    this.ice.close();\n  }\n}\n\nconst createIceTransport = (ice: IceConnection) => new IceTransport(ice);\n"]}
+{"version":3,"file":"dtls.js","sourceRoot":"","sources":["../../../../src/transport/dtls.ts"],"names":[],"mappings":";;;AAAA,qCAAqD;AAErD,mCAAoC;AACpC,8CAA6C;AAC7C,8CAA0D;AAG1D,sCAA0D;AAC1D,0CASyB;AAEzB,wCAcwB;AACxB,0CAQwB;AAExB,oCAKkB;AAGlB,MAAM,GAAG,GAAG,IAAA,WAAK,EAAC,8CAA8C,CAAC,CAAC;AAElE,SAAS,iBAAiB,CAAC,OAG1B;IACC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACrD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACrD,OAAO,UAAU,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgB;IACxC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,yBAAyB,CAAC;QACnC,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC;QAC5B;YACE,OAAO;IACX,CAAC;AACH,CAAC;AASD,MAAa,gBAAgB;IA4B3B,YACW,MAA+B,EAC/B,YAA6B,EAC/B,gBAAiC,EACvB,eAA8B,EAAE;QAHjD;;;;mBAAS,MAAM;WAAyB;QACxC;;;;mBAAS,YAAY;WAAiB;QACtC;;;;mBAAO,gBAAgB;WAAiB;QACxC;;;;mBAAiB,YAAY;WAAoB;QA/BnD;;;;mBAAK,IAAA,mBAAU,GAAE,CAAC,QAAQ,EAAE;WAAC;QAC7B;;;;mBAAmB,KAAK;WAAC;QACzB;;;;mBAAiB,MAAM;WAAC;QACxB;;;;mBAAc,KAAK;WAAC;QACpB;;;;mBAA0B,CAAC;WAAC;QAE5B,sBAAsB;QACf;;;;mBAAY,CAAC;WAAC;QACd;;;;mBAAgB,CAAC;WAAC;QAClB;;;;mBAAc,CAAC;WAAC;QAChB;;;;mBAAkB,CAAC;WAAC;QAE3B;;;;mBAAsC,GAAG,EAAE,GAAE,CAAC;WAAC;QAC/C;;;;;WAAkB;QAClB;;;;;WAAmB;QACnB;;;;;WAAqB;QAEZ;;;;mBAAgB,IAAI,cAAK,EAAe;WAAC;QACzC;;;;mBAAS,IAAI,cAAK,EAAgB;WAAC;QACnC;;;;mBAAQ,IAAI,cAAK,EAAe;WAAC;QACzB;;;;mBAAS,IAAI,oBAAc,EAAE;WAAC;QAC/C;;;;;WAA2B;QAInB;;;;;WAAqC;QAW7C;;;;mBAAmB,CACjB,IAAY,EACZ,QAAkC,EAClC,OAAsC,EACtC,EAAE;gBACF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACxD,CAAC;WAAC;QAEF;;;;mBAAsB,CAAC,IAAY,EAAE,QAAkC,EAAE,EAAE;gBACzE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;WAAC;QAEF;;;;mBAAgB,CAAC,KAAuB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;WAAC;QA4SrE;;;;mBAAW,KAAK,EAAE,IAAY,EAAE,EAAE;gBACzC,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB;oBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAC3D,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAC1C,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;WAAC;QAvUA,IAAI,CAAC,gBAAgB,KAArB,IAAI,CAAC,gBAAgB,GAAK,gBAAgB,CAAC,gBAAgB,EAAC;IAC9D,CAAC;IAgBD,IAAI,eAAe;QACjB,OAAO,IAAI,iBAAiB,CAC1B,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,EACpE,IAAI,CAAC,IAAI,CACV,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,gBAAgB;QAC3B,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAC/B,CAAC;QAED,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,uBAAuB,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,uBAAuB,GAAG,CAAC,KAAK,IAAI,EAAE;YACzC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,GACtC,MAAM,oBAAa,CAAC,kCAAkC,CACpD;gBACE,SAAS,EAAE,yBAAkB,CAAC,OAAO;gBACrC,IAAI,EAAE,oBAAa,CAAC,QAAQ;aAC7B,EACD,0BAAmB,CAAC,YAAY,CACjC,CAAC;YACJ,IAAI,CAAC,gBAAgB,GAAG,IAAI,cAAc,CACxC,MAAM,EACN,OAAO,EACP,aAAa,CACd,CAAC;YACF,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAC/B,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,IAAI,CAAC,uBAAuB,CAAC;IACtC,CAAC;IAED,eAAe,CAAC,gBAAmC;QACjD,MAAM,YAAY,GAAG,uBAAuB,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,IAAI,EAAE,CAAC;YAC9C,GAAG,gBAAgB,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,MAAM,IAAI,GACR,gBAAgB,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,IAAI;YAC7D,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI;YAC5B,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,gBAAgB,GAAG,IAAI,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,IACE,CAAC,IAAI,CAAC,gBAAgB;YACtB,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAE5B,MAAM,IAAI,OAAO,CAAO,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAU,CAAC;oBACzB,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO;oBACpC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU;oBACtC,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa;oBACnD,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;oBAC3D,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,oBAAoB,EAAE,IAAI;oBAC1B,kBAAkB,EAAE,IAAI;iBACzB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAU,CAAC;oBACzB,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO;oBACpC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU;oBACtC,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa;oBACnD,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;oBAC3D,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,oBAAoB,EAAE,IAAI;iBAC3B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;gBACjC,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB;oBACpC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAC1D,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE;gBAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC/B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACxB,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;gBAC1B,CAAC,CAAC,KAAK,CAAC,CAAC;YACX,CAAC,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,IAAI,YAAY,iBAAU,EAAE,CAAC;gBACpC,MAAM,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACxB,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;oBAClC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACX,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,IAAI,CAAC,kCAAkC,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACnB,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3B,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxB,CAAC;IAEO,kCAAkC;QACxC,IACE,CAAC,IAAI,CAAC,gBAAgB;YACtB,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACvD,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,qBAAqB,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CACtE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;YACvB,MAAM,mBAAmB,GAAG,IAAA,qCAA6B,EAAC,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,eAAe,GAAG,IAAA,iCAAyB,EAAC,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YAED,OAAO,CAAC,EAAE,mBAAmB,EAAE,eAAe,EAAE,CAAC,CAAC;QACpD,CAAC,CACF,CAAC;QACF,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,kBAAkB,GAAG,mCAAmC,CAC5D,qBAAqB,CACtB,CAAC;QACF,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,MAAM,CACvD,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,mBAAmB,KAAK,kBAAkB,CACxE,CAAC;QAEF,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,MAAM,CACpD,CAAC,GAAG,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE;YAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAClC,GAAG,CAAC,GAAG,CACL,mBAAmB,EACnB,IAAA,iCAAyB,EACvB,IAAA,mBAAW,EAAC,iBAAiB,EAAE,mBAAmB,CAAC,CACpD,CACF,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,EACD,IAAI,GAAG,EAAkB,CAC1B,CAAC;QAEF,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CACvC,CAAC,EAAE,mBAAmB,EAAE,eAAe,EAAE,EAAE,EAAE,CAC3C,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,eAAe,CAClE,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QACD,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QAEtC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,GAClD,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAA,eAAS,EAAC,OAAO,CAAC,EAAE,IAAA,gBAAU,EAAC,OAAO,CAAC,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG;YACb,IAAI,EAAE;gBACJ,cAAc,EAAE,QAAQ;gBACxB,eAAe,EAAE,SAAS;gBAC1B,eAAe,EAAE,SAAS;gBAC1B,gBAAgB,EAAE,UAAU;aAC7B;YACD,OAAO;SACR,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,kBAAY,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;YACrD,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB;gBACpC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAC1D,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAA,aAAO,EAAC,IAAI,CAAC;gBAAE,OAAO;YAE3B,iCAAiC;YACjC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC;YAClC,IAAI,CAAC,eAAe,EAAE,CAAC;YAEvB,IAAI,IAAA,YAAM,EAAC,IAAI,CAAC,EAAE,CAAC;gBACjB,IAAI,GAAW,CAAC;gBAChB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,6BAAuB,EAAE,CAAC;wBAC7C,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;wBAC5C,OAAO;oBACT,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,WAAW,CAAC;gBAChB,IAAI,CAAC;oBACH,WAAW,GAAG,yBAAmB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;oBAC9C,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,IAAI,CAAC;wBACH,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC5B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAW,CAAC;gBAChB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,6BAAuB,EAAE,CAAC;wBAC7C,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;wBAC3C,OAAO;oBACT,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,GAAG,CAAC;gBACR,IAAI,CAAC;oBACH,GAAG,GAAG,eAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACnC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;oBAC7C,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAgBD,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,MAAiB;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE/C,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB;gBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAC3D,CAAC;gBACD,OAAO,GAAG,CAAC,MAAM,CAAC;YACpB,CAAC;YAED,mBAAmB;YACnB,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC;YAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;YAEnB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC7D,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YAC7B,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAqB;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAExC,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAC3D,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,QAAQ,CAAC,KAAgB,EAAE,SAAS,GAAG,IAAI;QACjD,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,uBAAuB;QACvB,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAA,yBAAiB,GAAE;QAC5C,MAAM,KAAK,GAAe,EAAE,CAAC;QAE7B,MAAM,WAAW,GAAG,IAAA,uBAAe,EAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE1D,kBAAkB;QAClB,MAAM,cAAc,GAAsB;YACxC,IAAI,EAAE,WAAW;YACjB,EAAE,EAAE,WAAW;YACf,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK;YACjC,OAAO,EACL,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,SAAS;gBAClC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,wBAAwB,EACtB,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,gBAAgB;YACpD,uBAAuB,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS;gBAC7D,CAAC,CAAC,IAAA,uBAAe,EACb,gBAAgB,EAChB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAC1C;gBACH,CAAC,CAAC,SAAS;YACb,kBAAkB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,CAAC,CAAC,IAAA,uBAAe,EAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC;gBAClD,CAAC,CAAC,SAAS;YACb,mBAAmB,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB;gBAC/C,CAAC,CAAC,IAAA,uBAAe,EAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;gBACnD,CAAC,CAAC,SAAS;YACb,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;YACtD,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;YACtD,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI;YAC1C,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC;YACzD,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW;SAC3C,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE3B,oBAAoB;QACpB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;YAC7D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAwB;oBACrC,IAAI,EAAE,aAAa;oBACnB,EAAE,EAAE,IAAA,uBAAe,EAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC;oBACpD,SAAS;oBACT,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK;oBAClC,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC/C,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAC5B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAC9B,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBACrB,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,IACE,IAAI,CAAC,gBAAgB;YACrB,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAC7C,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAC5B,CAAC;YACD,MAAM,SAAS,GAAwB;gBACrC,IAAI,EAAE,aAAa;gBACnB,EAAE,EAAE,IAAA,uBAAe,EAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;gBACrD,SAAS;gBACT,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK;gBACxD,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAClE,QAAQ,CACT;aACF,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAED,gBAAgB;QAChB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAExB,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAzfD,4CAyfC;AAEY,QAAA,UAAU,GAAG;IACxB,KAAK;IACL,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,QAAQ;CACA,CAAC;AAKX,MAAa,cAAc;IAIzB,YACE,aAAqB,EACd,OAAe,EACf,aAA4B;QADnC;;;;mBAAO,OAAO;WAAQ;QACtB;;;;mBAAO,aAAa;WAAe;QANrC;;;;;WAAkB;QAClB;;;;;WAAmB;QAOjB,MAAM,IAAI,GAAG,kBAAW,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,iBAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED,eAAe;QACb,OAAO;YACL,IAAI,kBAAkB,CACpB,SAAS,EACT,IAAA,mBAAW,EACT,kBAAW,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAClD,QAAQ,CACT,CACF;SACF,CAAC;IACJ,CAAC;CACF;AAzBD,wCAyBC;AAQD,MAAa,kBAAkB;IAC7B,YACS,SAAiB,EACjB,KAAa;QADpB;;;;mBAAO,SAAS;WAAQ;QACxB;;;;mBAAO,KAAK;WAAQ;IACnB,CAAC;CACL;AALD,gDAKC;AAED,MAAa,iBAAiB;IAC5B,YACS,eAAqC,EAAE,EACvC,IAAkC;QADzC;;;;mBAAO,YAAY;WAA2B;QAC9C;;;;mBAAO,IAAI;WAA8B;IACxC,CAAC;CACL;AALD,8CAKC;AAED,MAAM,uBAAuB,GAAG,CAAC,YAAkC,EAAE,EAAE;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,GACV,IAAA,qCAA6B,EAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAC1E,IAAI,IAAA,iCAAyB,EAAC,KAAK,CAAC,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG;IACrC,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,mCAAmC,GAAG,CAC1C,YAA+C,EAC/C,EAAE;IACF,OAAO,CACL,8BAA8B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,YAAY,CAAC,IAAI,CACf,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,mBAAmB,KAAK,SAAS,CAC/D,CACF,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,mBAAmB,CACzC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY;IAEhB,YAAoB,GAAkB;QAA1B;;;;mBAAQ,GAAG;WAAe;QADtC;;;;mBAAkB,KAAK;WAAC;QAUxB;;;;mBAAgC,GAAG,EAAE,GAAE,CAAC;WAAC;QAMzC;;;;mBAAe,KAAK;WAAC;QAEZ;;;;mBAAO,CAAC,IAAY,EAAE,EAAE;gBAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;WAAC;QAlBA,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3B,IAAI,IAAA,cAAM,EAAC,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAGD,IAAI,OAAO;QACT,OAAO,EAAiB,CAAC;IAC3B,CAAC;IAQD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,CAAC,GAAkB,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC","sourcesContent":["import { Certificate, PrivateKey } from \"@fidm/x509\";\n\nimport { randomUUID } from \"crypto\";\nimport { setTimeout } from \"timers/promises\";\nimport { Event, type Transport } from \"../imports/common\";\n\nimport type { AddressInfo } from \"net\";\nimport { EventTarget as DomEventTarget } from \"../helper\";\nimport {\n  CipherContext,\n  DtlsClient,\n  DtlsServer,\n  type DtlsSocket,\n  HashAlgorithm,\n  NamedCurveAlgorithm,\n  SignatureAlgorithm,\n  type SignatureHash,\n} from \"../imports/dtls\";\nimport type { IceConnection } from \"../imports/ice\";\nimport {\n  type RtcpPacket,\n  RtcpPacketConverter,\n  type RtpHeader,\n  RtpPacket,\n  SrtcpSession,\n  SrtpAuthenticationError,\n  type SrtpProfile,\n  SrtpSession,\n  debug,\n  isMedia,\n  isRtcp,\n  keyLength,\n  saltLength,\n} from \"../imports/rtp\";\nimport {\n  type RTCCertificateStats,\n  type RTCIceCandidatePairStats,\n  type RTCIceCandidateStats,\n  type RTCStats,\n  type RTCTransportStats,\n  generateStatsId,\n  getStatsTimestamp,\n} from \"../media/stats\";\nimport type { DebugConfig } from \"../peerConnection\";\nimport {\n  fingerprint,\n  isDtls,\n  normalizeFingerprintAlgorithm,\n  normalizeFingerprintValue,\n} from \"../utils\";\nimport type { RTCIceTransport } from \"./ice\";\n\nconst log = debug(\"werift:packages/webrtc/src/transport/dtls.ts\");\n\nfunction formatDtlsVersion(version?: {\n  major: number;\n  minor: number;\n}) {\n  if (!version) {\n    return;\n  }\n\n  if (version.major === 0xfe && version.minor === 0xfd) {\n    return \"DTLS 1.2\";\n  }\n  if (version.major === 0xfe && version.minor === 0xff) {\n    return \"DTLS 1.0\";\n  }\n}\n\nfunction formatSrtpCipher(profile?: number) {\n  switch (profile) {\n    case 0x0001:\n      return \"AES_CM_128_HMAC_SHA1_80\";\n    case 0x0007:\n      return \"AEAD_AES_128_GCM\";\n    default:\n      return;\n  }\n}\n\nexport interface DtlsTransportStats {\n  bytesSent: number;\n  bytesReceived: number;\n  packetsSent: number;\n  packetsReceived: number;\n}\n\nexport class RTCDtlsTransport implements DtlsTransportStats {\n  id = randomUUID().toString();\n  state: DtlsState = \"new\";\n  role: DtlsRole = \"auto\";\n  srtpStarted = false;\n  transportSequenceNumber = 0;\n\n  // Statistics tracking\n  public bytesSent = 0;\n  public bytesReceived = 0;\n  public packetsSent = 0;\n  public packetsReceived = 0;\n\n  dataReceiver: (buf: Buffer) => void = () => {};\n  dtls?: DtlsSocket;\n  srtp!: SrtpSession;\n  srtcp!: SrtcpSession;\n\n  readonly onStateChange = new Event<[DtlsState]>();\n  readonly onRtcp = new Event<[RtcpPacket]>();\n  readonly onRtp = new Event<[RtpPacket]>();\n  private readonly events = new DomEventTarget();\n  onstatechange?: () => void;\n\n  static localCertificate?: RTCCertificate;\n  static localCertificatePromise?: Promise<RTCCertificate>;\n  private remoteParameters?: RTCDtlsParameters;\n\n  constructor(\n    readonly config: { debug?: DebugConfig },\n    readonly iceTransport: RTCIceTransport,\n    public localCertificate?: RTCCertificate,\n    private readonly srtpProfiles: SrtpProfile[] = [],\n  ) {\n    this.localCertificate ??= RTCDtlsTransport.localCertificate;\n  }\n\n  addEventListener = (\n    type: string,\n    listener: (...args: any[]) => void,\n    options?: boolean | { once?: boolean },\n  ) => {\n    this.events.addEventListener(type, listener, options);\n  };\n\n  removeEventListener = (type: string, listener: (...args: any[]) => void) => {\n    this.events.removeEventListener(type, listener);\n  };\n\n  dispatchEvent = (event: globalThis.Event) => this.events.dispatchEvent(event);\n\n  get localParameters() {\n    return new RTCDtlsParameters(\n      this.localCertificate ? this.localCertificate.getFingerprints() : [],\n      this.role,\n    );\n  }\n\n  static async SetupCertificate() {\n    if (this.localCertificate) {\n      return this.localCertificate;\n    }\n\n    if (this.localCertificatePromise) {\n      return this.localCertificatePromise;\n    }\n\n    this.localCertificatePromise = (async () => {\n      const { certPem, keyPem, signatureHash } =\n        await CipherContext.createSelfSignedCertificateWithKey(\n          {\n            signature: SignatureAlgorithm.ecdsa_3,\n            hash: HashAlgorithm.sha256_4,\n          },\n          NamedCurveAlgorithm.secp256r1_23,\n        );\n      this.localCertificate = new RTCCertificate(\n        keyPem,\n        certPem,\n        signatureHash,\n      );\n      return this.localCertificate;\n    })();\n\n    return this.localCertificatePromise;\n  }\n\n  setRemoteParams(remoteParameters: RTCDtlsParameters) {\n    const fingerprints = deduplicateFingerprints([\n      ...(this.remoteParameters?.fingerprints ?? []),\n      ...remoteParameters.fingerprints,\n    ]);\n    const role =\n      remoteParameters.role === \"auto\" && this.remoteParameters?.role\n        ? this.remoteParameters.role\n        : remoteParameters.role;\n    this.remoteParameters = new RTCDtlsParameters(fingerprints, role);\n  }\n\n  async start() {\n    if (this.state !== \"new\") {\n      throw new Error(\"state must be new\");\n    }\n    if (\n      !this.remoteParameters ||\n      this.remoteParameters.fingerprints.length === 0\n    ) {\n      throw new Error(\"remote fingerprint not exist\");\n    }\n\n    if (this.role === \"auto\") {\n      if (this.iceTransport.role === \"controlling\") {\n        this.role = \"server\";\n      } else {\n        this.role = \"client\";\n      }\n    }\n\n    this.setState(\"connecting\");\n\n    await new Promise<void>(async (r, f) => {\n      if (this.role === \"server\") {\n        this.dtls = new DtlsServer({\n          cert: this.localCertificate?.certPem,\n          key: this.localCertificate?.privateKey,\n          signatureHash: this.localCertificate?.signatureHash,\n          transport: createIceTransport(this.iceTransport.connection),\n          srtpProfiles: this.srtpProfiles,\n          extendedMasterSecret: true,\n          certificateRequest: true,\n        });\n      } else {\n        this.dtls = new DtlsClient({\n          cert: this.localCertificate?.certPem,\n          key: this.localCertificate?.privateKey,\n          signatureHash: this.localCertificate?.signatureHash,\n          transport: createIceTransport(this.iceTransport.connection),\n          srtpProfiles: this.srtpProfiles,\n          extendedMasterSecret: true,\n        });\n      }\n      this.dtls.onData.subscribe((buf) => {\n        if (\n          this.config.debug?.inboundPacketLoss &&\n          this.config.debug?.inboundPacketLoss / 100 < Math.random()\n        ) {\n          return;\n        }\n        this.dataReceiver(buf);\n      });\n      this.dtls.onClose.subscribe(() => {\n        if (this.state !== \"failed\") {\n          this.setState(\"closed\");\n        }\n      });\n      this.dtls.onConnect.once(r);\n      this.dtls.onError.once((error) => {\n        this.setState(\"failed\");\n        log(\"dtls failed\", error);\n        f(error);\n      });\n\n      if (this.dtls instanceof DtlsClient) {\n        await setTimeout(100);\n        this.dtls.connect().catch((error) => {\n          this.setState(\"failed\");\n          log(\"dtls connect failed\", error);\n          f(error);\n        });\n      }\n    });\n\n    try {\n      this.verifyRemoteCertificateFingerprint();\n    } catch (error) {\n      this.setState(\"failed\");\n      this.dtls?.close();\n      throw error;\n    }\n\n    if (this.srtpProfiles.length > 0) {\n      this.startSrtp();\n    }\n    this.setState(\"connected\");\n\n    log(\"dtls connected\");\n  }\n\n  private verifyRemoteCertificateFingerprint() {\n    if (\n      !this.remoteParameters ||\n      this.remoteParameters.fingerprints.length === 0\n    ) {\n      throw new Error(\"remote fingerprint not exist\");\n    }\n\n    const remoteCertificate = this.dtls?.remoteCertificate;\n    if (!remoteCertificate) {\n      throw new Error(\"remote certificate not available\");\n    }\n\n    const supportedFingerprints = this.remoteParameters.fingerprints.flatMap(\n      ({ algorithm, value }) => {\n        const normalizedAlgorithm = normalizeFingerprintAlgorithm(algorithm);\n        if (!normalizedAlgorithm) {\n          return [];\n        }\n\n        const normalizedValue = normalizeFingerprintValue(value);\n        if (!normalizedValue) {\n          throw new Error(\"remote fingerprint value is empty\");\n        }\n\n        return [{ normalizedAlgorithm, normalizedValue }];\n      },\n    );\n    if (supportedFingerprints.length === 0) {\n      throw new Error(\"no supported remote fingerprint algorithms\");\n    }\n\n    const preferredAlgorithm = selectPreferredFingerprintAlgorithm(\n      supportedFingerprints,\n    );\n    const expectedFingerprints = supportedFingerprints.filter(\n      ({ normalizedAlgorithm }) => normalizedAlgorithm === preferredAlgorithm,\n    );\n\n    const actualFingerprints = expectedFingerprints.reduce(\n      (acc, { normalizedAlgorithm }) => {\n        if (!acc.has(normalizedAlgorithm)) {\n          acc.set(\n            normalizedAlgorithm,\n            normalizeFingerprintValue(\n              fingerprint(remoteCertificate, normalizedAlgorithm),\n            ),\n          );\n        }\n        return acc;\n      },\n      new Map<string, string>(),\n    );\n\n    const matched = expectedFingerprints.some(\n      ({ normalizedAlgorithm, normalizedValue }) =>\n        actualFingerprints.get(normalizedAlgorithm) === normalizedValue,\n    );\n\n    if (!matched) {\n      throw new Error(\"remote certificate fingerprint mismatch\");\n    }\n  }\n\n  updateSrtpSession() {\n    if (!this.dtls) throw new Error();\n\n    const profile = this.dtls.srtp.srtpProfile;\n    if (!profile) {\n      throw new Error(\"need srtpProfile\");\n    }\n    log(\"selected SRTP Profile\", profile);\n\n    const { localKey, localSalt, remoteKey, remoteSalt } =\n      this.dtls.extractSessionKeys(keyLength(profile), saltLength(profile));\n\n    const config = {\n      keys: {\n        localMasterKey: localKey,\n        localMasterSalt: localSalt,\n        remoteMasterKey: remoteKey,\n        remoteMasterSalt: remoteSalt,\n      },\n      profile,\n    };\n    this.srtp = new SrtpSession(config);\n    this.srtcp = new SrtcpSession(config);\n  }\n\n  startSrtp() {\n    if (this.srtpStarted) return;\n    this.srtpStarted = true;\n\n    this.updateSrtpSession();\n\n    this.iceTransport.connection.onData.subscribe((data) => {\n      if (\n        this.config.debug?.inboundPacketLoss &&\n        this.config.debug?.inboundPacketLoss / 100 < Math.random()\n      ) {\n        return;\n      }\n\n      if (!isMedia(data)) return;\n\n      // Track received data statistics\n      this.bytesReceived += data.length;\n      this.packetsReceived++;\n\n      if (isRtcp(data)) {\n        let dec: Buffer;\n        try {\n          dec = this.srtcp.decrypt(data);\n        } catch (error) {\n          if (error instanceof SrtpAuthenticationError) {\n            log(\"dropping invalid SRTCP packet\", error);\n            return;\n          }\n          throw error;\n        }\n        let rtcpPackets;\n        try {\n          rtcpPackets = RtcpPacketConverter.deSerialize(dec);\n        } catch (error) {\n          log(\"dropping malformed SRTCP packet\", error);\n          return;\n        }\n        for (const rtcp of rtcpPackets) {\n          try {\n            this.onRtcp.execute(rtcp);\n          } catch (error) {\n            log(\"RTCP error\", error);\n          }\n        }\n      } else {\n        let dec: Buffer;\n        try {\n          dec = this.srtp.decrypt(data);\n        } catch (error) {\n          if (error instanceof SrtpAuthenticationError) {\n            log(\"dropping invalid SRTP packet\", error);\n            return;\n          }\n          throw error;\n        }\n        let rtp;\n        try {\n          rtp = RtpPacket.deSerialize(dec);\n        } catch (error) {\n          log(\"dropping malformed SRTP packet\", error);\n          return;\n        }\n        try {\n          this.onRtp.execute(rtp);\n        } catch (error) {\n          log(\"RTP error\", error);\n        }\n      }\n    });\n  }\n\n  readonly sendData = async (data: Buffer) => {\n    if (\n      this.config.debug?.outboundPacketLoss &&\n      this.config.debug?.outboundPacketLoss / 100 < Math.random()\n    ) {\n      return;\n    }\n\n    if (!this.dtls) {\n      throw new Error(\"dtls not established\");\n    }\n    await this.dtls.send(data);\n  };\n\n  async sendRtp(payload: Buffer, header: RtpHeader): Promise<number> {\n    try {\n      const enc = this.srtp.encrypt(payload, header);\n\n      if (\n        this.config.debug?.outboundPacketLoss &&\n        this.config.debug?.outboundPacketLoss / 100 < Math.random()\n      ) {\n        return enc.length;\n      }\n\n      // Track statistics\n      this.bytesSent += enc.length;\n      this.packetsSent++;\n\n      await this.iceTransport.connection.send(enc).catch(() => {});\n      return enc.length;\n    } catch (error) {\n      log(\"failed to send\", error);\n      return 0;\n    }\n  }\n\n  async sendRtcp(packets: RtcpPacket[]) {\n    const payload = Buffer.concat(packets.map((packet) => packet.serialize()));\n    const enc = this.srtcp.encrypt(payload);\n\n    if (\n      this.config.debug?.outboundPacketLoss &&\n      this.config.debug?.outboundPacketLoss / 100 < Math.random()\n    ) {\n      return enc.length;\n    }\n\n    // Track statistics\n    this.bytesSent += enc.length;\n    this.packetsSent++;\n\n    await this.iceTransport.connection.send(enc).catch(() => {});\n  }\n\n  private setState(state: DtlsState, emitEvent = true) {\n    if (state != this.state) {\n      this.state = state;\n      this.onStateChange.execute(state);\n      if (emitEvent) {\n        this.onstatechange?.();\n        this.events.emit(\"statechange\");\n      }\n    }\n  }\n\n  async stop() {\n    this.setState(\"closed\", false);\n    // todo impl send alert\n    await this.iceTransport.stop();\n  }\n\n  async getStats(timestamp = getStatsTimestamp()): Promise<RTCStats[]> {\n    const stats: RTCStats[] = [];\n\n    const transportId = generateStatsId(\"transport\", this.id);\n\n    // Transport stats\n    const transportStats: RTCTransportStats = {\n      type: \"transport\",\n      id: transportId,\n      timestamp,\n      bytesSent: this.bytesSent,\n      bytesReceived: this.bytesReceived,\n      packetsSent: this.packetsSent,\n      packetsReceived: this.packetsReceived,\n      dtlsState: this.state,\n      iceState: this.iceTransport.state,\n      iceRole:\n        this.iceTransport.role === \"unknown\"\n          ? undefined\n          : this.iceTransport.role,\n      iceLocalUsernameFragment:\n        this.iceTransport.localParameters.usernameFragment,\n      selectedCandidatePairId: this.iceTransport.connection.nominated\n        ? generateStatsId(\n            \"candidate-pair\",\n            this.iceTransport.connection.nominated.id,\n          )\n        : undefined,\n      localCertificateId: this.localCertificate\n        ? generateStatsId(\"certificate\", this.id, \"local\")\n        : undefined,\n      remoteCertificateId: this.dtls?.remoteCertificate\n        ? generateStatsId(\"certificate\", this.id, \"remote\")\n        : undefined,\n      dtlsRole: this.role === \"auto\" ? undefined : this.role,\n      tlsVersion: formatDtlsVersion(this.dtls?.dtls.version),\n      dtlsCipher: this.dtls?.cipher.cipher?.name,\n      srtpCipher: formatSrtpCipher(this.dtls?.srtp.srtpProfile),\n      iceRestarts: this.iceTransport.iceRestarts,\n    };\n    stats.push(transportStats);\n\n    // Certificate stats\n    if (this.localCertificate) {\n      const fingerprints = this.localCertificate.getFingerprints();\n      if (fingerprints.length > 0) {\n        const certStats: RTCCertificateStats = {\n          type: \"certificate\",\n          id: generateStatsId(\"certificate\", this.id, \"local\"),\n          timestamp,\n          fingerprint: fingerprints[0].value,\n          fingerprintAlgorithm: fingerprints[0].algorithm,\n          base64Certificate: Buffer.from(\n            this.localCertificate.certPem,\n          ).toString(\"base64\"),\n        };\n        stats.push(certStats);\n      }\n    }\n\n    if (\n      this.remoteParameters &&\n      this.remoteParameters.fingerprints.length > 0 &&\n      this.dtls?.remoteCertificate\n    ) {\n      const certStats: RTCCertificateStats = {\n        type: \"certificate\",\n        id: generateStatsId(\"certificate\", this.id, \"remote\"),\n        timestamp,\n        fingerprint: this.remoteParameters.fingerprints[0].value,\n        fingerprintAlgorithm: this.remoteParameters.fingerprints[0].algorithm,\n        base64Certificate: Buffer.from(this.dtls.remoteCertificate).toString(\n          \"base64\",\n        ),\n      };\n      stats.push(certStats);\n    }\n\n    // Get ICE stats\n    const iceStats = await this.iceTransport.getStats(timestamp, transportId);\n    stats.push(...iceStats);\n\n    return stats;\n  }\n}\n\nexport const DtlsStates = [\n  \"new\",\n  \"connecting\",\n  \"connected\",\n  \"closed\",\n  \"failed\",\n] as const;\nexport type DtlsState = (typeof DtlsStates)[number];\n\nexport type DtlsRole = \"auto\" | \"server\" | \"client\";\n\nexport class RTCCertificate {\n  publicKey: string;\n  privateKey: string;\n\n  constructor(\n    privateKeyPem: string,\n    public certPem: string,\n    public signatureHash: SignatureHash,\n  ) {\n    const cert = Certificate.fromPEM(Buffer.from(certPem));\n    this.publicKey = cert.publicKey.toPEM();\n    this.privateKey = PrivateKey.fromPEM(Buffer.from(privateKeyPem)).toPEM();\n  }\n\n  getFingerprints(): RTCDtlsFingerprint[] {\n    return [\n      new RTCDtlsFingerprint(\n        \"sha-256\",\n        fingerprint(\n          Certificate.fromPEM(Buffer.from(this.certPem)).raw,\n          \"sha256\",\n        ),\n      ),\n    ];\n  }\n}\n\nexport type DtlsKeys = {\n  certPem: string;\n  keyPem: string;\n  signatureHash: SignatureHash;\n};\n\nexport class RTCDtlsFingerprint {\n  constructor(\n    public algorithm: string,\n    public value: string,\n  ) {}\n}\n\nexport class RTCDtlsParameters {\n  constructor(\n    public fingerprints: RTCDtlsFingerprint[] = [],\n    public role: \"auto\" | \"client\" | \"server\",\n  ) {}\n}\n\nconst deduplicateFingerprints = (fingerprints: RTCDtlsFingerprint[]) => {\n  const seen = new Set<string>();\n  return fingerprints.filter(({ algorithm, value }) => {\n    const key = `${\n      normalizeFingerprintAlgorithm(algorithm) ?? algorithm.trim().toLowerCase()\n    }:${normalizeFingerprintValue(value)}`;\n    if (seen.has(key)) {\n      return false;\n    }\n    seen.add(key);\n    return true;\n  });\n};\n\nconst preferredFingerprintAlgorithms = [\n  \"sha512\",\n  \"sha384\",\n  \"sha256\",\n  \"sha224\",\n  \"sha1\",\n] as const;\n\nconst selectPreferredFingerprintAlgorithm = (\n  fingerprints: { normalizedAlgorithm: string }[],\n) => {\n  return (\n    preferredFingerprintAlgorithms.find((algorithm) =>\n      fingerprints.some(\n        ({ normalizedAlgorithm }) => normalizedAlgorithm === algorithm,\n      ),\n    ) ?? fingerprints[0].normalizedAlgorithm\n  );\n};\n\nclass IceTransport implements Transport {\n  closed: boolean = false;\n  constructor(private ice: IceConnection) {\n    ice.onData.subscribe((buf) => {\n      if (isDtls(buf)) {\n        if (this.onData) {\n          this.onData(buf);\n        }\n      }\n    });\n  }\n  onData: (buf: Buffer) => void = () => {};\n\n  get address() {\n    return {} as AddressInfo;\n  }\n\n  type: string = \"ice\";\n\n  readonly send = (data: Buffer) => {\n    return this.ice.send(data);\n  };\n\n  async close() {\n    this.closed = true;\n    this.ice.close();\n  }\n}\n\nconst createIceTransport = (ice: IceConnection) => new IceTransport(ice);\n"]}

package/lib/webrtc/src/transport/ice.d.ts

@@ -28,16 +28,34 @@ export declare class RTCIceTransport {
     readonly id: string;
     connection: IceConnection;
     state: RTCIceConnectionState;
+    readonly component = "rtp";
+    iceRestarts: number;
     private waitStart?;
     private renominating;
-    readonly onStateChange: Event<["disconnected" | "closed" | "completed" | "new" | "connected" | "failed" | "checking"]>;
+    private readonly events;
+    onstatechange?: () => void;
+    ongatheringstatechange?: () => void;
+    readonly onStateChange: Event<["closed" | "disconnected" | "completed" | "new" | "connected" | "failed" | "checking"]>;
     readonly onIceCandidate: Event<[IceCandidate | undefined]>;
     readonly onNegotiationNeeded: Event<[]>;
     constructor(iceGather: RTCIceGatherer);
-    get role(): "controlling" | "controlled";
+    addEventListener: (type: string, listener: (...args: any[]) => void, options?: boolean | {
+        once?: boolean;
+    }) => void;
+    removeEventListener: (type: string, listener: (...args: any[]) => void) => void;
+    dispatchEvent: (event: globalThis.Event) => boolean;
+    get role(): "unknown" | "controlling" | "controlled";
     get gatheringState(): "complete" | "new" | "gathering";
     get localCandidates(): IceCandidate[];
     get localParameters(): RTCIceParameters;
+    getRemoteCandidates(): RTCIceCandidate[];
+    getLocalCandidates(): RTCIceCandidate[];
+    getSelectedCandidatePair(): {
+        local: RTCIceCandidate;
+        remote: RTCIceCandidate;
+    } | null;
+    getLocalParameters(): RTCIceParameters;
+    getRemoteParameters(): RTCIceParameters | null;
     private setState;
     gather(): Promise<void>;
     addRemoteCandidate: (candidate?: IceCandidate) => Promise<void> | undefined;
@@ -45,7 +63,7 @@ export declare class RTCIceTransport {
     restart(): void;
     start(): Promise<void>;
     stop(): Promise<void>;
-    getStats(): Promise<RTCStats[]>;
+    getStats(timestamp?: number, transportId?: string): Promise<RTCStats[]>;
 }
 export declare const IceTransportStates: readonly ["new", "checking", "connected", "completed", "disconnected", "failed", "closed"];
 export type RTCIceConnectionState = (typeof IceTransportStates)[number];