whale-code 6.5.5 → 6.5.7

package/dist/node/portal/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","names":["createInterface","ROLE_CAPABILITIES","admin","member","viewer","approvalCache","Map","approvalTtlMs","setApprovalTtl","minutes","getCacheKey","requesterNodeId","storeId","cacheApproval","capabilities","set","expiresAt","Date","now","getCachedApproval","key","entry","get","delete","clearApprovalCache","clear","getAllowedCapabilities","role","requested","allowed","filter","c","includes","requiresApproval","promptApproval","request","caps","join","from","requester_hostname","requester_node_id","Promise","resolve","rl","input","process","stdin","output","stderr","write","requester_role","timeout","setTimeout","close","once","line","clearTimeout","answer","trim","toLowerCase","checkPermission","autoAcceptAdmins","accepted","length","reason","cached","allCached","every","isTTY","undefined"],"sources":["../../../src/node/portal/permissions.ts"],"sourcesContent":["/**\n * Portal Permissions — role checks, approval prompts, and approval cache.\n *\n * Permission model:\n *   Admin  → all capabilities, auto-accept\n *   Member → shell + file + clipboard, requires first-connect approval\n *   Viewer → screen (view only) + file pull, always requires approval\n */\n\nimport { createInterface } from \"node:readline\";\nimport type { ChannelType, PortalRequest } from \"./protocol.js\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport type Role = \"admin\" | \"member\" | \"viewer\";\n\ninterface ApprovalCacheEntry {\n  requesterNodeId: string;\n  capabilities: ChannelType[];\n  expiresAt: number;\n}\n\n// ============================================================================\n// CAPABILITY MATRIX\n// ============================================================================\n\nconst ROLE_CAPABILITIES: Record<Role, ChannelType[]> = {\n  admin:  [\"shell\", \"file\", \"clipboard\", \"forward\", \"screen\"],\n  member: [\"shell\", \"file\", \"clipboard\"],\n  viewer: [\"screen\", \"file\"], // file = pull only, enforced at channel level\n};\n\n// ============================================================================\n// APPROVAL CACHE\n// ============================================================================\n\nconst approvalCache = new Map<string, ApprovalCacheEntry>();\nlet approvalTtlMs = 60 * 60 * 1000; // default 1 hour\n\nexport function setApprovalTtl(minutes: number): void {\n  approvalTtlMs = minutes * 60 * 1000;\n}\n\nfunction getCacheKey(requesterNodeId: string, storeId: string): string {\n  return `${storeId}:${requesterNodeId}`;\n}\n\nexport function cacheApproval(requesterNodeId: string, storeId: string, capabilities: ChannelType[]): void {\n  approvalCache.set(getCacheKey(requesterNodeId, storeId), {\n    requesterNodeId,\n    capabilities,\n    expiresAt: Date.now() + approvalTtlMs,\n  });\n}\n\nexport function getCachedApproval(requesterNodeId: string, storeId: string): ChannelType[] | null {\n  const key = getCacheKey(requesterNodeId, storeId);\n  const entry = approvalCache.get(key);\n  if (!entry) return null;\n  if (Date.now() > entry.expiresAt) {\n    approvalCache.delete(key);\n    return null;\n  }\n  return entry.capabilities;\n}\n\nexport function clearApprovalCache(): void {\n  approvalCache.clear();\n}\n\n// ============================================================================\n// PERMISSION CHECKS\n// ============================================================================\n\n/**\n * Check if a role can access the requested capabilities.\n * Returns the subset of capabilities that are allowed.\n */\nexport function getAllowedCapabilities(role: Role, requested: ChannelType[]): ChannelType[] {\n  const allowed = ROLE_CAPABILITIES[role];\n  return requested.filter(c => allowed.includes(c));\n}\n\n/**\n * Check if a role requires interactive approval.\n */\nexport function requiresApproval(role: Role): boolean {\n  return role !== \"admin\";\n}\n\n// ============================================================================\n// APPROVAL PROMPT\n// ============================================================================\n\n/**\n * Show an interactive approval prompt on the target node's terminal.\n * Returns true if accepted, false if denied.\n */\nexport async function promptApproval(request: PortalRequest): Promise<boolean> {\n  const caps = request.capabilities.join(\", \");\n  const from = request.requester_hostname || request.requester_node_id;\n\n  return new Promise((resolve) => {\n    const rl = createInterface({\n      input: process.stdin,\n      output: process.stderr, // use stderr so it doesn't interfere with stdout piping\n    });\n\n    process.stderr.write(\n      `\\n[portal] Connection request from \"${from}\" (${request.requester_role})\\n` +\n      `  Capabilities: ${caps}\\n` +\n      `  [A]ccept / [D]eny: `\n    );\n\n    const timeout = setTimeout(() => {\n      process.stderr.write(\"\\n[portal] Approval timed out, denying.\\n\");\n      rl.close();\n      resolve(false);\n    }, 30_000);\n\n    rl.once(\"line\", (line) => {\n      clearTimeout(timeout);\n      rl.close();\n      const answer = line.trim().toLowerCase();\n      resolve(answer === \"a\" || answer === \"accept\" || answer === \"y\" || answer === \"yes\");\n    });\n  });\n}\n\n/**\n * Decide whether to accept a portal request.\n * For admins: auto-accept. For others: check cache, then prompt.\n */\nexport async function checkPermission(\n  request: PortalRequest,\n  storeId: string,\n  autoAcceptAdmins: boolean,\n): Promise<{ accepted: boolean; reason?: string }> {\n  const role = (request.requester_role || \"member\") as Role;\n\n  // Admin auto-accept\n  if (role === \"admin\" && autoAcceptAdmins) {\n    return { accepted: true };\n  }\n\n  // Check capability restrictions\n  const allowed = getAllowedCapabilities(role, request.capabilities);\n  if (allowed.length === 0) {\n    return { accepted: false, reason: `Role \"${role}\" has no access to requested capabilities` };\n  }\n\n  // Check approval cache\n  const cached = getCachedApproval(request.requester_node_id, storeId);\n  if (cached) {\n    const allCached = request.capabilities.every(c => cached.includes(c));\n    if (allCached) {\n      return { accepted: true };\n    }\n  }\n\n  // Interactive prompt (if terminal available)\n  if (process.stdin.isTTY) {\n    const accepted = await promptApproval(request);\n    if (accepted) {\n      cacheApproval(request.requester_node_id, storeId, allowed);\n    }\n    return { accepted, reason: accepted ? undefined : \"Denied by user\" };\n  }\n\n  // Headless mode — deny unless cached\n  return { accepted: false, reason: \"No interactive terminal for approval (headless mode)\" };\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,eAAe,QAAQ,eAAe;;AAG/C;AACA;AACA;;AAUA;AACA;AACA;;AAEA,MAAMC,iBAA8C,GAAG;EACrDC,KAAK,EAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC3DC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC;EACtCC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAE;AAC9B,CAAC;;AAED;AACA;AACA;;AAEA,MAAMC,aAAa,GAAG,IAAIC,GAAG,CAA6B,CAAC;AAC3D,IAAIC,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;;AAEpC,OAAO,SAASC,cAAcA,CAACC,OAAe,EAAQ;EACpDF,aAAa,GAAGE,OAAO,GAAG,EAAE,GAAG,IAAI;AACrC;AAEA,SAASC,WAAWA,CAACC,eAAuB,EAAEC,OAAe,EAAU;EACrE,OAAO,GAAGA,OAAO,IAAID,eAAe,EAAE;AACxC;AAEA,OAAO,SAASE,aAAaA,CAACF,eAAuB,EAAEC,OAAe,EAAEE,YAA2B,EAAQ;EACzGT,aAAa,CAACU,GAAG,CAACL,WAAW,CAACC,eAAe,EAAEC,OAAO,CAAC,EAAE;IACvDD,eAAe;IACfG,YAAY;IACZE,SAAS,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGX;EAC1B,CAAC,CAAC;AACJ;AAEA,OAAO,SAASY,iBAAiBA,CAACR,eAAuB,EAAEC,OAAe,EAAwB;EAChG,MAAMQ,GAAG,GAAGV,WAAW,CAACC,eAAe,EAAEC,OAAO,CAAC;EACjD,MAAMS,KAAK,GAAGhB,aAAa,CAACiB,GAAG,CAACF,GAAG,CAAC;EACpC,IAAI,CAACC,KAAK,EAAE,OAAO,IAAI;EACvB,IAAIJ,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGG,KAAK,CAACL,SAAS,EAAE;IAChCX,aAAa,CAACkB,MAAM,CAACH,GAAG,CAAC;IACzB,OAAO,IAAI;EACb;EACA,OAAOC,KAAK,CAACP,YAAY;AAC3B;AAEA,OAAO,SAASU,kBAAkBA,CAAA,EAAS;EACzCnB,aAAa,CAACoB,KAAK,CAAC,CAAC;AACvB;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASC,sBAAsBA,CAACC,IAAU,EAAEC,SAAwB,EAAiB;EAC1F,MAAMC,OAAO,GAAG5B,iBAAiB,CAAC0B,IAAI,CAAC;EACvC,OAAOC,SAAS,CAACE,MAAM,CAACC,CAAC,IAAIF,OAAO,CAACG,QAAQ,CAACD,CAAC,CAAC,CAAC;AACnD;;AAEA;AACA;AACA;AACA,OAAO,SAASE,gBAAgBA,CAACN,IAAU,EAAW;EACpD,OAAOA,IAAI,KAAK,OAAO;AACzB;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAeO,cAAcA,CAACC,OAAsB,EAAoB;EAC7E,MAAMC,IAAI,GAAGD,OAAO,CAACrB,YAAY,CAACuB,IAAI,CAAC,IAAI,CAAC;EAC5C,MAAMC,IAAI,GAAGH,OAAO,CAACI,kBAAkB,IAAIJ,OAAO,CAACK,iBAAiB;EAEpE,OAAO,IAAIC,OAAO,CAAEC,OAAO,IAAK;IAC9B,MAAMC,EAAE,GAAG3C,eAAe,CAAC;MACzB4C,KAAK,EAAEC,OAAO,CAACC,KAAK;MACpBC,MAAM,EAAEF,OAAO,CAACG,MAAM,CAAE;IAC1B,CAAC,CAAC;IAEFH,OAAO,CAACG,MAAM,CAACC,KAAK,CAClB,uCAAuCX,IAAI,MAAMH,OAAO,CAACe,cAAc,KAAK,GAC5E,mBAAmBd,IAAI,IAAI,GAC3B,uBACF,CAAC;IAED,MAAMe,OAAO,GAAGC,UAAU,CAAC,MAAM;MAC/BP,OAAO,CAACG,MAAM,CAACC,KAAK,CAAC,2CAA2C,CAAC;MACjEN,EAAE,CAACU,KAAK,CAAC,CAAC;MACVX,OAAO,CAAC,KAAK,CAAC;IAChB,CAAC,EAAE,MAAM,CAAC;IAEVC,EAAE,CAACW,IAAI,CAAC,MAAM,EAAGC,IAAI,IAAK;MACxBC,YAAY,CAACL,OAAO,CAAC;MACrBR,EAAE,CAACU,KAAK,CAAC,CAAC;MACV,MAAMI,MAAM,GAAGF,IAAI,CAACG,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MACxCjB,OAAO,CAACe,MAAM,KAAK,GAAG,IAAIA,MAAM,KAAK,QAAQ,IAAIA,MAAM,KAAK,GAAG,IAAIA,MAAM,KAAK,KAAK,CAAC;IACtF,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAeG,eAAeA,CACnCzB,OAAsB,EACtBvB,OAAe,EACfiD,gBAAyB,EACwB;EACjD,MAAMlC,IAAI,GAAIQ,OAAO,CAACe,cAAc,IAAI,QAAiB;;EAEzD;EACA,IAAIvB,IAAI,KAAK,OAAO,IAAIkC,gBAAgB,EAAE;IACxC,OAAO;MAAEC,QAAQ,EAAE;IAAK,CAAC;EAC3B;;EAEA;EACA,MAAMjC,OAAO,GAAGH,sBAAsB,CAACC,IAAI,EAAEQ,OAAO,CAACrB,YAAY,CAAC;EAClE,IAAIe,OAAO,CAACkC,MAAM,KAAK,CAAC,EAAE;IACxB,OAAO;MAAED,QAAQ,EAAE,KAAK;MAAEE,MAAM,EAAE,SAASrC,IAAI;IAA4C,CAAC;EAC9F;;EAEA;EACA,MAAMsC,MAAM,GAAG9C,iBAAiB,CAACgB,OAAO,CAACK,iBAAiB,EAAE5B,OAAO,CAAC;EACpE,IAAIqD,MAAM,EAAE;IACV,MAAMC,SAAS,GAAG/B,OAAO,CAACrB,YAAY,CAACqD,KAAK,CAACpC,CAAC,IAAIkC,MAAM,CAACjC,QAAQ,CAACD,CAAC,CAAC,CAAC;IACrE,IAAImC,SAAS,EAAE;MACb,OAAO;QAAEJ,QAAQ,EAAE;MAAK,CAAC;IAC3B;EACF;;EAEA;EACA,IAAIjB,OAAO,CAACC,KAAK,CAACsB,KAAK,EAAE;IACvB,MAAMN,QAAQ,GAAG,MAAM5B,cAAc,CAACC,OAAO,CAAC;IAC9C,IAAI2B,QAAQ,EAAE;MACZjD,aAAa,CAACsB,OAAO,CAACK,iBAAiB,EAAE5B,OAAO,EAAEiB,OAAO,CAAC;IAC5D;IACA,OAAO;MAAEiC,QAAQ;MAAEE,MAAM,EAAEF,QAAQ,GAAGO,SAAS,GAAG;IAAiB,CAAC;EACtE;;EAEA;EACA,OAAO;IAAEP,QAAQ,EAAE,KAAK;IAAEE,MAAM,EAAE;EAAuD,CAAC;AAC5F","ignoreList":[]}

package/dist/node/portal/portal-target.d.ts

@@ -0,0 +1,16 @@
+import type { ScreenCaptureService } from "../remote-desktop/index.js";
+import type { NodeConfig } from "../config.js";
+import { PortalSession } from "./session.js";
+import type { PortalStream } from "./stream.js";
+import type { SynPayload, PortalRequest } from "./protocol.js";
+export interface TargetConfig {
+    nodeConfig: NodeConfig;
+    autoAcceptAdmins: boolean;
+    maxSessions: number;
+    receiveDir?: string;
+    screenCapture?: ScreenCaptureService | null;
+}
+/** Handle an incoming portal request on the target side */
+export declare function handlePortalRequest(request: PortalRequest, config: TargetConfig, sessions: Map<string, PortalSession>, sendBinary: (data: Buffer) => void, sendJson: (msg: Record<string, unknown>) => void): Promise<void>;
+/** Route an incoming stream to the appropriate handler */
+export declare function handleIncomingStream(stream: PortalStream, meta: SynPayload, config: TargetConfig): void;

package/dist/node/portal/portal-target.js

@@ -0,0 +1,102 @@
+// portal-target.ts — Target-side portal request handling and stream routing
+// Extracted from portal/index.ts for modularity.
+
+import { PortalSession } from "./session.js";
+import { handleShell } from "./shell.js";
+import { handleFilePush, handleFilePull } from "./transfer.js";
+import { handleForward } from "./forward.js";
+import { handleScreen } from "./screen.js";
+import { handleClipboard } from "./clipboard.js";
+import { checkPermission } from "./permissions.js";
+/** Handle an incoming portal request on the target side */
+export async function handlePortalRequest(request, config, sessions, sendBinary, sendJson) {
+  if (sessions.size >= config.maxSessions) {
+    sendJson({
+      type: "portal_reject",
+      session_id: request.session_id,
+      reason: `Max sessions reached (${config.maxSessions})`
+    });
+    return;
+  }
+
+  // Check permissions
+  const {
+    accepted,
+    reason
+  } = await checkPermission(request, config.nodeConfig.store_id, config.autoAcceptAdmins);
+  if (!accepted) {
+    sendJson({
+      type: "portal_reject",
+      session_id: request.session_id,
+      reason: reason || "Permission denied"
+    });
+    return;
+  }
+
+  // Create session (responder side)
+  const os = await import("node:os");
+  const session = new PortalSession({
+    sessionId: request.session_id,
+    isInitiator: false,
+    targetNodeId: request.requester_node_id,
+    targetHostname: request.requester_hostname,
+    sendBinary,
+    sendJson
+  });
+  sessions.set(request.session_id, session);
+
+  // Handle incoming streams (shell, file, etc.)
+  session.on("stream", (stream, meta) => {
+    handleIncomingStream(stream, meta, config);
+  });
+
+  // Accept
+  session.accept();
+  sendJson({
+    type: "portal_accept",
+    session_id: request.session_id,
+    hostname: os.hostname()
+  });
+
+  // Cleanup on close
+  session.on("close", () => {
+    sessions.delete(request.session_id);
+  });
+  console.log(`[portal] Accepted session ${request.session_id.slice(0, 8)} from ${request.requester_hostname}`);
+}
+
+/** Route an incoming stream to the appropriate handler */
+export function handleIncomingStream(stream, meta, config) {
+  switch (meta.channel) {
+    case "shell":
+      handleShell(stream, meta).catch(err => {
+        console.error("[portal:shell]", err.message);
+      });
+      break;
+    case "file":
+      if ("direction" in meta) {
+        if (meta.direction === "push") {
+          handleFilePush(stream, meta, config.receiveDir).catch(err => {
+            console.error("[portal:file:push]", err.message);
+          });
+        } else {
+          handleFilePull(stream, meta).catch(err => {
+            console.error("[portal:file:pull]", err.message);
+          });
+        }
+      }
+      break;
+    case "forward":
+      handleForward(stream, meta);
+      break;
+    case "screen":
+      handleScreen(stream, meta, config.screenCapture || null);
+      break;
+    case "clipboard":
+      handleClipboard(stream, meta);
+      break;
+    default:
+      stream.destroy(new Error(`Unknown channel type: ${meta.channel}`));
+  }
+}
+//# sourceMappingURL=portal-target.js.map

package/dist/node/portal/portal-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal-target.js","names":["PortalSession","handleShell","handleFilePush","handleFilePull","handleForward","handleScreen","handleClipboard","checkPermission","handlePortalRequest","request","config","sessions","sendBinary","sendJson","size","maxSessions","type","session_id","reason","accepted","nodeConfig","store_id","autoAcceptAdmins","os","session","sessionId","isInitiator","targetNodeId","requester_node_id","targetHostname","requester_hostname","set","on","stream","meta","handleIncomingStream","accept","hostname","delete","console","log","slice","channel","catch","err","error","message","direction","receiveDir","screenCapture","destroy","Error"],"sources":["../../../src/node/portal/portal-target.ts"],"sourcesContent":["// portal-target.ts — Target-side portal request handling and stream routing\n// Extracted from portal/index.ts for modularity.\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport type { ScreenCaptureService } from \"../remote-desktop/index.js\";\nimport type { NodeConfig } from \"../config.js\";\nimport { PortalSession } from \"./session.js\";\nimport { handleShell } from \"./shell.js\";\nimport { handleFilePush, handleFilePull } from \"./transfer.js\";\nimport { handleForward } from \"./forward.js\";\nimport { handleScreen } from \"./screen.js\";\nimport { handleClipboard } from \"./clipboard.js\";\nimport { checkPermission } from \"./permissions.js\";\nimport type { PortalStream } from \"./stream.js\";\nimport type { SynPayload, PortalRequest } from \"./protocol.js\";\n\nexport interface TargetConfig {\n  nodeConfig: NodeConfig;\n  autoAcceptAdmins: boolean;\n  maxSessions: number;\n  receiveDir?: string;\n  screenCapture?: ScreenCaptureService | null;\n}\n\n/** Handle an incoming portal request on the target side */\nexport async function handlePortalRequest(\n  request: PortalRequest,\n  config: TargetConfig,\n  sessions: Map<string, PortalSession>,\n  sendBinary: (data: Buffer) => void,\n  sendJson: (msg: Record<string, unknown>) => void,\n): Promise<void> {\n  if (sessions.size >= config.maxSessions) {\n    sendJson({\n      type: \"portal_reject\",\n      session_id: request.session_id,\n      reason: `Max sessions reached (${config.maxSessions})`,\n    });\n    return;\n  }\n\n  // Check permissions\n  const { accepted, reason } = await checkPermission(\n    request,\n    config.nodeConfig.store_id,\n    config.autoAcceptAdmins,\n  );\n\n  if (!accepted) {\n    sendJson({\n      type: \"portal_reject\",\n      session_id: request.session_id,\n      reason: reason || \"Permission denied\",\n    });\n    return;\n  }\n\n  // Create session (responder side)\n  const os = await import(\"node:os\");\n  const session = new PortalSession({\n    sessionId: request.session_id,\n    isInitiator: false,\n    targetNodeId: request.requester_node_id,\n    targetHostname: request.requester_hostname,\n    sendBinary,\n    sendJson,\n  });\n\n  sessions.set(request.session_id, session);\n\n  // Handle incoming streams (shell, file, etc.)\n  session.on(\"stream\", (stream: PortalStream, meta: SynPayload) => {\n    handleIncomingStream(stream, meta, config);\n  });\n\n  // Accept\n  session.accept();\n  sendJson({\n    type: \"portal_accept\",\n    session_id: request.session_id,\n    hostname: os.hostname(),\n  });\n\n  // Cleanup on close\n  session.on(\"close\", () => {\n    sessions.delete(request.session_id);\n  });\n\n  console.log(`[portal] Accepted session ${request.session_id.slice(0, 8)} from ${request.requester_hostname}`);\n}\n\n/** Route an incoming stream to the appropriate handler */\nexport function handleIncomingStream(\n  stream: PortalStream,\n  meta: SynPayload,\n  config: TargetConfig,\n): void {\n  switch (meta.channel) {\n    case \"shell\":\n      handleShell(stream, meta).catch(err => {\n        console.error(\"[portal:shell]\", err.message);\n      });\n      break;\n\n    case \"file\":\n      if (\"direction\" in meta) {\n        if (meta.direction === \"push\") {\n          handleFilePush(stream, meta, config.receiveDir).catch(err => {\n            console.error(\"[portal:file:push]\", err.message);\n          });\n        } else {\n          handleFilePull(stream, meta).catch(err => {\n            console.error(\"[portal:file:pull]\", err.message);\n          });\n        }\n      }\n      break;\n\n    case \"forward\":\n      handleForward(stream, meta);\n      break;\n\n    case \"screen\":\n      handleScreen(stream, meta, config.screenCapture || null);\n      break;\n\n    case \"clipboard\":\n      handleClipboard(stream, meta);\n      break;\n\n    default:\n      stream.destroy(new Error(`Unknown channel type: ${(meta as any).channel}`));\n  }\n}\n"],"mappings":"AAAA;AACA;;AAKA,SAASA,aAAa,QAAQ,cAAc;AAC5C,SAASC,WAAW,QAAQ,YAAY;AACxC,SAASC,cAAc,EAAEC,cAAc,QAAQ,eAAe;AAC9D,SAASC,aAAa,QAAQ,cAAc;AAC5C,SAASC,YAAY,QAAQ,aAAa;AAC1C,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,eAAe,QAAQ,kBAAkB;AAYlD;AACA,OAAO,eAAeC,mBAAmBA,CACvCC,OAAsB,EACtBC,MAAoB,EACpBC,QAAoC,EACpCC,UAAkC,EAClCC,QAAgD,EACjC;EACf,IAAIF,QAAQ,CAACG,IAAI,IAAIJ,MAAM,CAACK,WAAW,EAAE;IACvCF,QAAQ,CAAC;MACPG,IAAI,EAAE,eAAe;MACrBC,UAAU,EAAER,OAAO,CAACQ,UAAU;MAC9BC,MAAM,EAAE,yBAAyBR,MAAM,CAACK,WAAW;IACrD,CAAC,CAAC;IACF;EACF;;EAEA;EACA,MAAM;IAAEI,QAAQ;IAAED;EAAO,CAAC,GAAG,MAAMX,eAAe,CAChDE,OAAO,EACPC,MAAM,CAACU,UAAU,CAACC,QAAQ,EAC1BX,MAAM,CAACY,gBACT,CAAC;EAED,IAAI,CAACH,QAAQ,EAAE;IACbN,QAAQ,CAAC;MACPG,IAAI,EAAE,eAAe;MACrBC,UAAU,EAAER,OAAO,CAACQ,UAAU;MAC9BC,MAAM,EAAEA,MAAM,IAAI;IACpB,CAAC,CAAC;IACF;EACF;;EAEA;EACA,MAAMK,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC;EAClC,MAAMC,OAAO,GAAG,IAAIxB,aAAa,CAAC;IAChCyB,SAAS,EAAEhB,OAAO,CAACQ,UAAU;IAC7BS,WAAW,EAAE,KAAK;IAClBC,YAAY,EAAElB,OAAO,CAACmB,iBAAiB;IACvCC,cAAc,EAAEpB,OAAO,CAACqB,kBAAkB;IAC1ClB,UAAU;IACVC;EACF,CAAC,CAAC;EAEFF,QAAQ,CAACoB,GAAG,CAACtB,OAAO,CAACQ,UAAU,EAAEO,OAAO,CAAC;;EAEzC;EACAA,OAAO,CAACQ,EAAE,CAAC,QAAQ,EAAE,CAACC,MAAoB,EAAEC,IAAgB,KAAK;IAC/DC,oBAAoB,CAACF,MAAM,EAAEC,IAAI,EAAExB,MAAM,CAAC;EAC5C,CAAC,CAAC;;EAEF;EACAc,OAAO,CAACY,MAAM,CAAC,CAAC;EAChBvB,QAAQ,CAAC;IACPG,IAAI,EAAE,eAAe;IACrBC,UAAU,EAAER,OAAO,CAACQ,UAAU;IAC9BoB,QAAQ,EAAEd,EAAE,CAACc,QAAQ,CAAC;EACxB,CAAC,CAAC;;EAEF;EACAb,OAAO,CAACQ,EAAE,CAAC,OAAO,EAAE,MAAM;IACxBrB,QAAQ,CAAC2B,MAAM,CAAC7B,OAAO,CAACQ,UAAU,CAAC;EACrC,CAAC,CAAC;EAEFsB,OAAO,CAACC,GAAG,CAAC,6BAA6B/B,OAAO,CAACQ,UAAU,CAACwB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,SAAShC,OAAO,CAACqB,kBAAkB,EAAE,CAAC;AAC/G;;AAEA;AACA,OAAO,SAASK,oBAAoBA,CAClCF,MAAoB,EACpBC,IAAgB,EAChBxB,MAAoB,EACd;EACN,QAAQwB,IAAI,CAACQ,OAAO;IAClB,KAAK,OAAO;MACVzC,WAAW,CAACgC,MAAM,EAAEC,IAAI,CAAC,CAACS,KAAK,CAACC,GAAG,IAAI;QACrCL,OAAO,CAACM,KAAK,CAAC,gBAAgB,EAAED,GAAG,CAACE,OAAO,CAAC;MAC9C,CAAC,CAAC;MACF;IAEF,KAAK,MAAM;MACT,IAAI,WAAW,IAAIZ,IAAI,EAAE;QACvB,IAAIA,IAAI,CAACa,SAAS,KAAK,MAAM,EAAE;UAC7B7C,cAAc,CAAC+B,MAAM,EAAEC,IAAI,EAAExB,MAAM,CAACsC,UAAU,CAAC,CAACL,KAAK,CAACC,GAAG,IAAI;YAC3DL,OAAO,CAACM,KAAK,CAAC,oBAAoB,EAAED,GAAG,CAACE,OAAO,CAAC;UAClD,CAAC,CAAC;QACJ,CAAC,MAAM;UACL3C,cAAc,CAAC8B,MAAM,EAAEC,IAAI,CAAC,CAACS,KAAK,CAACC,GAAG,IAAI;YACxCL,OAAO,CAACM,KAAK,CAAC,oBAAoB,EAAED,GAAG,CAACE,OAAO,CAAC;UAClD,CAAC,CAAC;QACJ;MACF;MACA;IAEF,KAAK,SAAS;MACZ1C,aAAa,CAAC6B,MAAM,EAAEC,IAAI,CAAC;MAC3B;IAEF,KAAK,QAAQ;MACX7B,YAAY,CAAC4B,MAAM,EAAEC,IAAI,EAAExB,MAAM,CAACuC,aAAa,IAAI,IAAI,CAAC;MACxD;IAEF,KAAK,WAAW;MACd3C,eAAe,CAAC2B,MAAM,EAAEC,IAAI,CAAC;MAC7B;IAEF;MACED,MAAM,CAACiB,OAAO,CAAC,IAAIC,KAAK,CAAC,yBAA0BjB,IAAI,CAASQ,OAAO,EAAE,CAAC,CAAC;EAC/E;AACF","ignoreList":[]}

package/dist/node/portal/protocol-frames.d.ts

@@ -0,0 +1,33 @@
+import { type Frame, type SynPayload } from "./protocol.js";
+export declare function encodeFrame(frame: Frame): Buffer;
+export declare function encodeRelayEnvelope(sessionUuid: Buffer, innerFrame: Buffer): Buffer;
+export interface DecodeResult {
+    frame: Frame;
+    bytesConsumed: number;
+}
+/**
+ * Try to decode a frame from the buffer. Returns null if not enough data.
+ */
+export declare function decodeFrame(buf: Buffer, offset?: number): DecodeResult | null;
+/**
+ * Parse a relay envelope. Returns session UUID and inner frame buffer.
+ */
+export declare function decodeRelayEnvelope(buf: Buffer): {
+    sessionUuid: Buffer;
+    innerFrame: Buffer;
+} | null;
+/**
+ * Convert a UUID string (with dashes) to a 16-byte buffer.
+ */
+export declare function uuidToBuffer(uuid: string): Buffer;
+/**
+ * Convert a 16-byte buffer to a UUID string (with dashes).
+ */
+export declare function bufferToUuid(buf: Buffer): string;
+export declare function makeDataFrame(streamId: number, data: Buffer): Buffer;
+export declare function makeSynFrame(streamId: number, payload: SynPayload): Buffer;
+export declare function makeAckFrame(streamId: number): Buffer;
+export declare function makeFinFrame(streamId: number): Buffer;
+export declare function makeRstFrame(streamId: number, reason?: string): Buffer;
+export declare function makePingFrame(): Buffer;
+export declare function makePongFrame(): Buffer;

package/dist/node/portal/protocol-frames.js

@@ -0,0 +1,170 @@
+// protocol-frames.ts — Frame encoding/decoding and helper constructors
+// Extracted from protocol.ts for modularity.
+
+import { PROTOCOL_VERSION, HEADER_SIZE, MAX_PAYLOAD_SIZE, PORTAL_MARKER, SESSION_UUID_SIZE, RELAY_HEADER_SIZE, FrameType, FrameFlag } from "./protocol.js";
+
+// ============================================================================
+// ENCODING
+// ============================================================================
+
+export function encodeFrame(frame) {
+  const payloadLen = frame.payload.length;
+  if (payloadLen > MAX_PAYLOAD_SIZE) {
+    throw new Error(`Payload too large: ${payloadLen} > ${MAX_PAYLOAD_SIZE}`);
+  }
+  const buf = Buffer.allocUnsafe(HEADER_SIZE + payloadLen);
+  buf[0] = frame.version;
+  buf[1] = frame.type;
+  buf.writeUInt16BE(frame.flags, 2);
+  buf.writeUInt32BE(frame.streamId, 4);
+  buf.writeUInt32BE(payloadLen, 8);
+  if (payloadLen > 0) {
+    frame.payload.copy(buf, HEADER_SIZE);
+  }
+  return buf;
+}
+export function encodeRelayEnvelope(sessionUuid, innerFrame) {
+  const buf = Buffer.allocUnsafe(RELAY_HEADER_SIZE + innerFrame.length);
+  buf[0] = PORTAL_MARKER;
+  sessionUuid.copy(buf, 1);
+  innerFrame.copy(buf, RELAY_HEADER_SIZE);
+  return buf;
+}
+
+// ============================================================================
+// DECODING
+// ============================================================================
+
+/**
+ * Try to decode a frame from the buffer. Returns null if not enough data.
+ */
+export function decodeFrame(buf, offset = 0) {
+  const remaining = buf.length - offset;
+  if (remaining < HEADER_SIZE) return null;
+  const version = buf[offset];
+  const type = buf[offset + 1];
+  const flags = buf.readUInt16BE(offset + 2);
+  const streamId = buf.readUInt32BE(offset + 4);
+  const payloadLen = buf.readUInt32BE(offset + 8);
+  if (payloadLen > MAX_PAYLOAD_SIZE) {
+    throw new Error(`Invalid payload length: ${payloadLen}`);
+  }
+  const totalLen = HEADER_SIZE + payloadLen;
+  if (remaining < totalLen) return null;
+  const payload = Buffer.allocUnsafe(payloadLen);
+  buf.copy(payload, 0, offset + HEADER_SIZE, offset + totalLen);
+  return {
+    frame: {
+      version,
+      type,
+      flags,
+      streamId,
+      payload
+    },
+    bytesConsumed: totalLen
+  };
+}
+
+/**
+ * Parse a relay envelope. Returns session UUID and inner frame buffer.
+ */
+export function decodeRelayEnvelope(buf) {
+  if (buf.length < RELAY_HEADER_SIZE) return null;
+  if (buf[0] !== PORTAL_MARKER) return null;
+  const sessionUuid = Buffer.allocUnsafe(SESSION_UUID_SIZE);
+  buf.copy(sessionUuid, 0, 1, 1 + SESSION_UUID_SIZE);
+  const innerFrame = Buffer.allocUnsafe(buf.length - RELAY_HEADER_SIZE);
+  buf.copy(innerFrame, 0, RELAY_HEADER_SIZE);
+  return {
+    sessionUuid,
+    innerFrame
+  };
+}
+
+// ============================================================================
+// UUID HELPERS
+// ============================================================================
+
+/**
+ * Convert a UUID string (with dashes) to a 16-byte buffer.
+ */
+export function uuidToBuffer(uuid) {
+  return Buffer.from(uuid.replace(/-/g, ""), "hex");
+}
+
+/**
+ * Convert a 16-byte buffer to a UUID string (with dashes).
+ */
+export function bufferToUuid(buf) {
+  const hex = buf.toString("hex");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+
+// ============================================================================
+// FRAME CONSTRUCTORS
+// ============================================================================
+
+export function makeDataFrame(streamId, data) {
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.DATA,
+    flags: 0,
+    streamId,
+    payload: data
+  });
+}
+export function makeSynFrame(streamId, payload) {
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.SYN,
+    flags: FrameFlag.SYN,
+    streamId,
+    payload: Buffer.from(JSON.stringify(payload))
+  });
+}
+export function makeAckFrame(streamId) {
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.ACK,
+    flags: FrameFlag.ACK,
+    streamId,
+    payload: Buffer.alloc(0)
+  });
+}
+export function makeFinFrame(streamId) {
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.FIN,
+    flags: FrameFlag.FIN,
+    streamId,
+    payload: Buffer.alloc(0)
+  });
+}
+export function makeRstFrame(streamId, reason = "") {
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.RST,
+    flags: 0,
+    streamId,
+    payload: reason ? Buffer.from(reason) : Buffer.alloc(0)
+  });
+}
+export function makePingFrame() {
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.PING,
+    flags: 0,
+    streamId: 0,
+    payload: Buffer.alloc(0)
+  });
+}
+export function makePongFrame() {
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.PONG,
+    flags: 0,
+    streamId: 0,
+    payload: Buffer.alloc(0)
+  });
+}
+//# sourceMappingURL=protocol-frames.js.map

package/dist/node/portal/protocol-frames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-frames.js","names":["PROTOCOL_VERSION","HEADER_SIZE","MAX_PAYLOAD_SIZE","PORTAL_MARKER","SESSION_UUID_SIZE","RELAY_HEADER_SIZE","FrameType","FrameFlag","encodeFrame","frame","payloadLen","payload","length","Error","buf","Buffer","allocUnsafe","version","type","writeUInt16BE","flags","writeUInt32BE","streamId","copy","encodeRelayEnvelope","sessionUuid","innerFrame","decodeFrame","offset","remaining","readUInt16BE","readUInt32BE","totalLen","bytesConsumed","decodeRelayEnvelope","uuidToBuffer","uuid","from","replace","bufferToUuid","hex","toString","slice","makeDataFrame","data","DATA","makeSynFrame","SYN","JSON","stringify","makeAckFrame","ACK","alloc","makeFinFrame","FIN","makeRstFrame","reason","RST","makePingFrame","PING","makePongFrame","PONG"],"sources":["../../../src/node/portal/protocol-frames.ts"],"sourcesContent":["// protocol-frames.ts — Frame encoding/decoding and helper constructors\n// Extracted from protocol.ts for modularity.\n\nimport {\n  PROTOCOL_VERSION,\n  HEADER_SIZE,\n  MAX_PAYLOAD_SIZE,\n  PORTAL_MARKER,\n  SESSION_UUID_SIZE,\n  RELAY_HEADER_SIZE,\n  FrameType,\n  FrameFlag,\n  type Frame,\n  type SynPayload,\n} from \"./protocol.js\";\n\n// ============================================================================\n// ENCODING\n// ============================================================================\n\nexport function encodeFrame(frame: Frame): Buffer {\n  const payloadLen = frame.payload.length;\n  if (payloadLen > MAX_PAYLOAD_SIZE) {\n    throw new Error(`Payload too large: ${payloadLen} > ${MAX_PAYLOAD_SIZE}`);\n  }\n\n  const buf = Buffer.allocUnsafe(HEADER_SIZE + payloadLen);\n  buf[0] = frame.version;\n  buf[1] = frame.type;\n  buf.writeUInt16BE(frame.flags, 2);\n  buf.writeUInt32BE(frame.streamId, 4);\n  buf.writeUInt32BE(payloadLen, 8);\n  if (payloadLen > 0) {\n    frame.payload.copy(buf, HEADER_SIZE);\n  }\n  return buf;\n}\n\nexport function encodeRelayEnvelope(sessionUuid: Buffer, innerFrame: Buffer): Buffer {\n  const buf = Buffer.allocUnsafe(RELAY_HEADER_SIZE + innerFrame.length);\n  buf[0] = PORTAL_MARKER;\n  sessionUuid.copy(buf, 1);\n  innerFrame.copy(buf, RELAY_HEADER_SIZE);\n  return buf;\n}\n\n// ============================================================================\n// DECODING\n// ============================================================================\n\nexport interface DecodeResult {\n  frame: Frame;\n  bytesConsumed: number;\n}\n\n/**\n * Try to decode a frame from the buffer. Returns null if not enough data.\n */\nexport function decodeFrame(buf: Buffer, offset = 0): DecodeResult | null {\n  const remaining = buf.length - offset;\n  if (remaining < HEADER_SIZE) return null;\n\n  const version = buf[offset];\n  const type = buf[offset + 1] as FrameType;\n  const flags = buf.readUInt16BE(offset + 2);\n  const streamId = buf.readUInt32BE(offset + 4);\n  const payloadLen = buf.readUInt32BE(offset + 8);\n\n  if (payloadLen > MAX_PAYLOAD_SIZE) {\n    throw new Error(`Invalid payload length: ${payloadLen}`);\n  }\n\n  const totalLen = HEADER_SIZE + payloadLen;\n  if (remaining < totalLen) return null;\n\n  const payload = Buffer.allocUnsafe(payloadLen);\n  buf.copy(payload, 0, offset + HEADER_SIZE, offset + totalLen);\n\n  return {\n    frame: { version, type, flags, streamId, payload },\n    bytesConsumed: totalLen,\n  };\n}\n\n/**\n * Parse a relay envelope. Returns session UUID and inner frame buffer.\n */\nexport function decodeRelayEnvelope(buf: Buffer): { sessionUuid: Buffer; innerFrame: Buffer } | null {\n  if (buf.length < RELAY_HEADER_SIZE) return null;\n  if (buf[0] !== PORTAL_MARKER) return null;\n\n  const sessionUuid = Buffer.allocUnsafe(SESSION_UUID_SIZE);\n  buf.copy(sessionUuid, 0, 1, 1 + SESSION_UUID_SIZE);\n\n  const innerFrame = Buffer.allocUnsafe(buf.length - RELAY_HEADER_SIZE);\n  buf.copy(innerFrame, 0, RELAY_HEADER_SIZE);\n\n  return { sessionUuid, innerFrame };\n}\n\n// ============================================================================\n// UUID HELPERS\n// ============================================================================\n\n/**\n * Convert a UUID string (with dashes) to a 16-byte buffer.\n */\nexport function uuidToBuffer(uuid: string): Buffer {\n  return Buffer.from(uuid.replace(/-/g, \"\"), \"hex\");\n}\n\n/**\n * Convert a 16-byte buffer to a UUID string (with dashes).\n */\nexport function bufferToUuid(buf: Buffer): string {\n  const hex = buf.toString(\"hex\");\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n\n// ============================================================================\n// FRAME CONSTRUCTORS\n// ============================================================================\n\nexport function makeDataFrame(streamId: number, data: Buffer): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.DATA,\n    flags: 0,\n    streamId,\n    payload: data,\n  });\n}\n\nexport function makeSynFrame(streamId: number, payload: SynPayload): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.SYN,\n    flags: FrameFlag.SYN,\n    streamId,\n    payload: Buffer.from(JSON.stringify(payload)),\n  });\n}\n\nexport function makeAckFrame(streamId: number): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.ACK,\n    flags: FrameFlag.ACK,\n    streamId,\n    payload: Buffer.alloc(0),\n  });\n}\n\nexport function makeFinFrame(streamId: number): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.FIN,\n    flags: FrameFlag.FIN,\n    streamId,\n    payload: Buffer.alloc(0),\n  });\n}\n\nexport function makeRstFrame(streamId: number, reason = \"\"): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.RST,\n    flags: 0,\n    streamId,\n    payload: reason ? Buffer.from(reason) : Buffer.alloc(0),\n  });\n}\n\nexport function makePingFrame(): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.PING,\n    flags: 0,\n    streamId: 0,\n    payload: Buffer.alloc(0),\n  });\n}\n\nexport function makePongFrame(): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.PONG,\n    flags: 0,\n    streamId: 0,\n    payload: Buffer.alloc(0),\n  });\n}\n"],"mappings":"AAAA;AACA;;AAEA,SACEA,gBAAgB,EAChBC,WAAW,EACXC,gBAAgB,EAChBC,aAAa,EACbC,iBAAiB,EACjBC,iBAAiB,EACjBC,SAAS,EACTC,SAAS,QAGJ,eAAe;;AAEtB;AACA;AACA;;AAEA,OAAO,SAASC,WAAWA,CAACC,KAAY,EAAU;EAChD,MAAMC,UAAU,GAAGD,KAAK,CAACE,OAAO,CAACC,MAAM;EACvC,IAAIF,UAAU,GAAGR,gBAAgB,EAAE;IACjC,MAAM,IAAIW,KAAK,CAAC,sBAAsBH,UAAU,MAAMR,gBAAgB,EAAE,CAAC;EAC3E;EAEA,MAAMY,GAAG,GAAGC,MAAM,CAACC,WAAW,CAACf,WAAW,GAAGS,UAAU,CAAC;EACxDI,GAAG,CAAC,CAAC,CAAC,GAAGL,KAAK,CAACQ,OAAO;EACtBH,GAAG,CAAC,CAAC,CAAC,GAAGL,KAAK,CAACS,IAAI;EACnBJ,GAAG,CAACK,aAAa,CAACV,KAAK,CAACW,KAAK,EAAE,CAAC,CAAC;EACjCN,GAAG,CAACO,aAAa,CAACZ,KAAK,CAACa,QAAQ,EAAE,CAAC,CAAC;EACpCR,GAAG,CAACO,aAAa,CAACX,UAAU,EAAE,CAAC,CAAC;EAChC,IAAIA,UAAU,GAAG,CAAC,EAAE;IAClBD,KAAK,CAACE,OAAO,CAACY,IAAI,CAACT,GAAG,EAAEb,WAAW,CAAC;EACtC;EACA,OAAOa,GAAG;AACZ;AAEA,OAAO,SAASU,mBAAmBA,CAACC,WAAmB,EAAEC,UAAkB,EAAU;EACnF,MAAMZ,GAAG,GAAGC,MAAM,CAACC,WAAW,CAACX,iBAAiB,GAAGqB,UAAU,CAACd,MAAM,CAAC;EACrEE,GAAG,CAAC,CAAC,CAAC,GAAGX,aAAa;EACtBsB,WAAW,CAACF,IAAI,CAACT,GAAG,EAAE,CAAC,CAAC;EACxBY,UAAU,CAACH,IAAI,CAACT,GAAG,EAAET,iBAAiB,CAAC;EACvC,OAAOS,GAAG;AACZ;;AAEA;AACA;AACA;;AAOA;AACA;AACA;AACA,OAAO,SAASa,WAAWA,CAACb,GAAW,EAAEc,MAAM,GAAG,CAAC,EAAuB;EACxE,MAAMC,SAAS,GAAGf,GAAG,CAACF,MAAM,GAAGgB,MAAM;EACrC,IAAIC,SAAS,GAAG5B,WAAW,EAAE,OAAO,IAAI;EAExC,MAAMgB,OAAO,GAAGH,GAAG,CAACc,MAAM,CAAC;EAC3B,MAAMV,IAAI,GAAGJ,GAAG,CAACc,MAAM,GAAG,CAAC,CAAc;EACzC,MAAMR,KAAK,GAAGN,GAAG,CAACgB,YAAY,CAACF,MAAM,GAAG,CAAC,CAAC;EAC1C,MAAMN,QAAQ,GAAGR,GAAG,CAACiB,YAAY,CAACH,MAAM,GAAG,CAAC,CAAC;EAC7C,MAAMlB,UAAU,GAAGI,GAAG,CAACiB,YAAY,CAACH,MAAM,GAAG,CAAC,CAAC;EAE/C,IAAIlB,UAAU,GAAGR,gBAAgB,EAAE;IACjC,MAAM,IAAIW,KAAK,CAAC,2BAA2BH,UAAU,EAAE,CAAC;EAC1D;EAEA,MAAMsB,QAAQ,GAAG/B,WAAW,GAAGS,UAAU;EACzC,IAAImB,SAAS,GAAGG,QAAQ,EAAE,OAAO,IAAI;EAErC,MAAMrB,OAAO,GAAGI,MAAM,CAACC,WAAW,CAACN,UAAU,CAAC;EAC9CI,GAAG,CAACS,IAAI,CAACZ,OAAO,EAAE,CAAC,EAAEiB,MAAM,GAAG3B,WAAW,EAAE2B,MAAM,GAAGI,QAAQ,CAAC;EAE7D,OAAO;IACLvB,KAAK,EAAE;MAAEQ,OAAO;MAAEC,IAAI;MAAEE,KAAK;MAAEE,QAAQ;MAAEX;IAAQ,CAAC;IAClDsB,aAAa,EAAED;EACjB,CAAC;AACH;;AAEA;AACA;AACA;AACA,OAAO,SAASE,mBAAmBA,CAACpB,GAAW,EAAsD;EACnG,IAAIA,GAAG,CAACF,MAAM,GAAGP,iBAAiB,EAAE,OAAO,IAAI;EAC/C,IAAIS,GAAG,CAAC,CAAC,CAAC,KAAKX,aAAa,EAAE,OAAO,IAAI;EAEzC,MAAMsB,WAAW,GAAGV,MAAM,CAACC,WAAW,CAACZ,iBAAiB,CAAC;EACzDU,GAAG,CAACS,IAAI,CAACE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAGrB,iBAAiB,CAAC;EAElD,MAAMsB,UAAU,GAAGX,MAAM,CAACC,WAAW,CAACF,GAAG,CAACF,MAAM,GAAGP,iBAAiB,CAAC;EACrES,GAAG,CAACS,IAAI,CAACG,UAAU,EAAE,CAAC,EAAErB,iBAAiB,CAAC;EAE1C,OAAO;IAAEoB,WAAW;IAAEC;EAAW,CAAC;AACpC;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA,OAAO,SAASS,YAAYA,CAACC,IAAY,EAAU;EACjD,OAAOrB,MAAM,CAACsB,IAAI,CAACD,IAAI,CAACE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC;AACnD;;AAEA;AACA;AACA;AACA,OAAO,SAASC,YAAYA,CAACzB,GAAW,EAAU;EAChD,MAAM0B,GAAG,GAAG1B,GAAG,CAAC2B,QAAQ,CAAC,KAAK,CAAC;EAC/B,OAAO,GAAGD,GAAG,CAACE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAIF,GAAG,CAACE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIF,GAAG,CAACE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIF,GAAG,CAACE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIF,GAAG,CAACE,KAAK,CAAC,EAAE,CAAC,EAAE;AAC5G;;AAEA;AACA;AACA;;AAEA,OAAO,SAASC,aAAaA,CAACrB,QAAgB,EAAEsB,IAAY,EAAU;EACpE,OAAOpC,WAAW,CAAC;IACjBS,OAAO,EAAEjB,gBAAgB;IACzBkB,IAAI,EAAEZ,SAAS,CAACuC,IAAI;IACpBzB,KAAK,EAAE,CAAC;IACRE,QAAQ;IACRX,OAAO,EAAEiC;EACX,CAAC,CAAC;AACJ;AAEA,OAAO,SAASE,YAAYA,CAACxB,QAAgB,EAAEX,OAAmB,EAAU;EAC1E,OAAOH,WAAW,CAAC;IACjBS,OAAO,EAAEjB,gBAAgB;IACzBkB,IAAI,EAAEZ,SAAS,CAACyC,GAAG;IACnB3B,KAAK,EAAEb,SAAS,CAACwC,GAAG;IACpBzB,QAAQ;IACRX,OAAO,EAAEI,MAAM,CAACsB,IAAI,CAACW,IAAI,CAACC,SAAS,CAACtC,OAAO,CAAC;EAC9C,CAAC,CAAC;AACJ;AAEA,OAAO,SAASuC,YAAYA,CAAC5B,QAAgB,EAAU;EACrD,OAAOd,WAAW,CAAC;IACjBS,OAAO,EAAEjB,gBAAgB;IACzBkB,IAAI,EAAEZ,SAAS,CAAC6C,GAAG;IACnB/B,KAAK,EAAEb,SAAS,CAAC4C,GAAG;IACpB7B,QAAQ;IACRX,OAAO,EAAEI,MAAM,CAACqC,KAAK,CAAC,CAAC;EACzB,CAAC,CAAC;AACJ;AAEA,OAAO,SAASC,YAAYA,CAAC/B,QAAgB,EAAU;EACrD,OAAOd,WAAW,CAAC;IACjBS,OAAO,EAAEjB,gBAAgB;IACzBkB,IAAI,EAAEZ,SAAS,CAACgD,GAAG;IACnBlC,KAAK,EAAEb,SAAS,CAAC+C,GAAG;IACpBhC,QAAQ;IACRX,OAAO,EAAEI,MAAM,CAACqC,KAAK,CAAC,CAAC;EACzB,CAAC,CAAC;AACJ;AAEA,OAAO,SAASG,YAAYA,CAACjC,QAAgB,EAAEkC,MAAM,GAAG,EAAE,EAAU;EAClE,OAAOhD,WAAW,CAAC;IACjBS,OAAO,EAAEjB,gBAAgB;IACzBkB,IAAI,EAAEZ,SAAS,CAACmD,GAAG;IACnBrC,KAAK,EAAE,CAAC;IACRE,QAAQ;IACRX,OAAO,EAAE6C,MAAM,GAAGzC,MAAM,CAACsB,IAAI,CAACmB,MAAM,CAAC,GAAGzC,MAAM,CAACqC,KAAK,CAAC,CAAC;EACxD,CAAC,CAAC;AACJ;AAEA,OAAO,SAASM,aAAaA,CAAA,EAAW;EACtC,OAAOlD,WAAW,CAAC;IACjBS,OAAO,EAAEjB,gBAAgB;IACzBkB,IAAI,EAAEZ,SAAS,CAACqD,IAAI;IACpBvC,KAAK,EAAE,CAAC;IACRE,QAAQ,EAAE,CAAC;IACXX,OAAO,EAAEI,MAAM,CAACqC,KAAK,CAAC,CAAC;EACzB,CAAC,CAAC;AACJ;AAEA,OAAO,SAASQ,aAAaA,CAAA,EAAW;EACtC,OAAOpD,WAAW,CAAC;IACjBS,OAAO,EAAEjB,gBAAgB;IACzBkB,IAAI,EAAEZ,SAAS,CAACuD,IAAI;IACpBzC,KAAK,EAAE,CAAC;IACRE,QAAQ,EAAE,CAAC;IACXX,OAAO,EAAEI,MAAM,CAACqC,KAAK,CAAC,CAAC;EACzB,CAAC,CAAC;AACJ","ignoreList":[]}