@0xkey-io/core 0.1.0

package/dist/__stampers__/api/base.mjs

@@ -0,0 +1,100 @@
+import { isWeb, isReactNative } from '../../utils.mjs';
+import { IndexedDbStamper } from './web/stamper.mjs';
+import { ZeroXKeyError, ZeroXKeyErrorCodes } from '@0xkey-io/sdk-types';
+import { SignatureFormat } from '@0xkey-io/api-key-stamper';
+
+/**
+ * Cross-platform API key stamper.
+ *
+ * - This stamper uses indexedDB on web and keychain on react-native to securely stamp ZeroXKey requests.
+ * - ***Only supports P-256 ECDSA key pairs.***
+ */
+class CrossPlatformApiKeyStamper {
+    constructor(storageManager) {
+        this.storageManager = storageManager;
+        // Use init method to set up the stamper based on the platform. It's async, so can't be done in the constructor.
+    }
+    async init() {
+        if (isWeb()) {
+            this.stamper = new IndexedDbStamper();
+        }
+        else if (isReactNative()) {
+            try {
+                // Dynamic import to prevent bundling the native module in web environments.
+                const { ReactNativeKeychainStamper } = await import('./mobile/stamper.mjs');
+                this.stamper = new ReactNativeKeychainStamper();
+            }
+            catch (error) {
+                throw new ZeroXKeyError(`Failed to load keychain stamper for react-native`, ZeroXKeyErrorCodes.INITIALIZE_CLIENT_ERROR, error);
+            }
+        }
+        else {
+            throw new ZeroXKeyError("Unsupported platform for API key stamper", ZeroXKeyErrorCodes.UNSUPPORTED_PLATFORM);
+        }
+    }
+    listKeyPairs() {
+        if (!this.stamper) {
+            throw new ZeroXKeyError("Stamper is not initialized. Please call .init() before calling this method.", ZeroXKeyErrorCodes.CLIENT_NOT_INITIALIZED);
+        }
+        return this.stamper.listKeyPairs();
+    }
+    createKeyPair(externalKeyPair) {
+        if (!this.stamper) {
+            throw new ZeroXKeyError("Stamper is not initialized. Please call .init() before calling this method.", ZeroXKeyErrorCodes.CLIENT_NOT_INITIALIZED);
+        }
+        return this.stamper.createKeyPair(externalKeyPair);
+    }
+    deleteKeyPair(publicKeyHex) {
+        if (!this.stamper) {
+            throw new ZeroXKeyError("Stamper is not initialized. Please call .init() before calling this method.", ZeroXKeyErrorCodes.CLIENT_NOT_INITIALIZED);
+        }
+        // If the deleted key pair is the temporary one, clear it.
+        if (this.temporaryPublicKey === publicKeyHex) {
+            this.temporaryPublicKey = undefined;
+        }
+        return this.stamper.deleteKeyPair(publicKeyHex);
+    }
+    // This allows forcing a specific public key to find the key pair for stamping. The key pair must already exist in indexedDB / Keychain.
+    // This is useful if you need to stamp with a specific key pair without having an active session.
+    // See "signUpWithPasskey" function in core.ts for usage
+    setTemporaryPublicKey(publicKeyHex) {
+        this.temporaryPublicKey = publicKeyHex;
+    }
+    getTemporaryPublicKey() {
+        return this.temporaryPublicKey;
+    }
+    clearTemporaryPublicKey() {
+        this.temporaryPublicKey = undefined;
+    }
+    async stamp(payload) {
+        if (!this.stamper) {
+            throw new ZeroXKeyError("Stamper is not initialized. Please call .init() before calling this method.", ZeroXKeyErrorCodes.CLIENT_NOT_INITIALIZED);
+        }
+        let publicKeyHex = this.temporaryPublicKey;
+        if (!publicKeyHex) {
+            const session = await this.storageManager.getActiveSession();
+            if (!session) {
+                throw new ZeroXKeyError("No active session or token available.", ZeroXKeyErrorCodes.NO_SESSION_FOUND);
+            }
+            publicKeyHex = session.publicKey;
+        }
+        return this.stamper.stamp(payload, publicKeyHex);
+    }
+    async sign(payload, format = SignatureFormat.Der) {
+        if (!this.stamper) {
+            throw new ZeroXKeyError("Stamper is not initialized. Please call .init() before calling this method.", ZeroXKeyErrorCodes.CLIENT_NOT_INITIALIZED);
+        }
+        let publicKeyHex = this.temporaryPublicKey;
+        if (!publicKeyHex) {
+            const session = await this.storageManager.getActiveSession();
+            if (!session) {
+                throw new ZeroXKeyError("No active session or token available.", ZeroXKeyErrorCodes.NO_SESSION_FOUND);
+            }
+            publicKeyHex = session.publicKey;
+        }
+        return this.stamper.sign(payload, publicKeyHex, format);
+    }
+}
+
+export { CrossPlatformApiKeyStamper };
+//# sourceMappingURL=base.mjs.map

package/dist/__stampers__/api/base.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.mjs","sources":["../../../src/__stampers__/api/base.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;AAWA;;;;;AAKG;MACU,0BAA0B,CAAA;AAGrC,IAAA,WAAA,CAAoB,cAA2B,EAAA;QAA3B,IAAA,CAAA,cAAc,GAAd,cAAc;;IAElC;AAEA,IAAA,MAAM,IAAI,GAAA;QACR,IAAI,KAAK,EAAE,EAAE;AACX,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,EAAE;QACvC;aAAO,IAAI,aAAa,EAAE,EAAE;AAC1B,YAAA,IAAI;;gBAEF,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,OAAO,sBAAkB,CAAC;AACvE,gBAAA,IAAI,CAAC,OAAO,GAAG,IAAI,0BAA0B,EAAE;YACjD;YAAE,OAAO,KAAK,EAAE;gBACd,MAAM,IAAI,aAAa,CACrB,CAAA,gDAAA,CAAkD,EAClD,kBAAkB,CAAC,uBAAuB,EAC1C,KAAK,CACN;YACH;QACF;aAAO;YACL,MAAM,IAAI,aAAa,CACrB,0CAA0C,EAC1C,kBAAkB,CAAC,oBAAoB,CACxC;QACH;IACF;IAEA,YAAY,GAAA;AACV,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACjB,MAAM,IAAI,aAAa,CACrB,6EAA6E,EAC7E,kBAAkB,CAAC,sBAAsB,CAC1C;QACH;AACA,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;IACpC;AAEA,IAAA,aAAa,CACX,eAA2E,EAAA;AAE3E,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACjB,MAAM,IAAI,aAAa,CACrB,6EAA6E,EAC7E,kBAAkB,CAAC,sBAAsB,CAC1C;QACH;QACA,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC;IACpD;AAEA,IAAA,aAAa,CAAC,YAAoB,EAAA;AAChC,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACjB,MAAM,IAAI,aAAa,CACrB,6EAA6E,EAC7E,kBAAkB,CAAC,sBAAsB,CAC1C;QACH;;AAEA,QAAA,IAAI,IAAI,CAAC,kBAAkB,KAAK,YAAY,EAAE;AAC5C,YAAA,IAAI,CAAC,kBAAkB,GAAG,SAAS;QACrC;QACA,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC;IACjD;;;;AAKA,IAAA,qBAAqB,CAAC,YAAgC,EAAA;AACpD,QAAA,IAAI,CAAC,kBAAkB,GAAG,YAAY;IACxC;IAEA,qBAAqB,GAAA;QACnB,OAAO,IAAI,CAAC,kBAAkB;IAChC;IAEA,uBAAuB,GAAA;AACrB,QAAA,IAAI,CAAC,kBAAkB,GAAG,SAAS;IACrC;IAEA,MAAM,KAAK,CAAC,OAAe,EAAA;AACzB,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACjB,MAAM,IAAI,aAAa,CACrB,6EAA6E,EAC7E,kBAAkB,CAAC,sBAAsB,CAC1C;QACH;AACA,QAAA,IAAI,YAAY,GAAG,IAAI,CAAC,kBAAkB;QAC1C,IAAI,CAAC,YAAY,EAAE;YACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE;YAC5D,IAAI,CAAC,OAAO,EAAE;gBACZ,MAAM,IAAI,aAAa,CACrB,uCAAuC,EACvC,kBAAkB,CAAC,gBAAgB,CACpC;YACH;AACA,YAAA,YAAY,GAAG,OAAO,CAAC,SAAU;QACnC;QAEA,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC;IAClD;IAEA,MAAM,IAAI,CACR,OAAe,EACf,MAAA,GAA0B,eAAe,CAAC,GAAG,EAAA;AAE7C,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACjB,MAAM,IAAI,aAAa,CACrB,6EAA6E,EAC7E,kBAAkB,CAAC,sBAAsB,CAC1C;QACH;AACA,QAAA,IAAI,YAAY,GAAG,IAAI,CAAC,kBAAkB;QAC1C,IAAI,CAAC,YAAY,EAAE;YACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE;YAC5D,IAAI,CAAC,OAAO,EAAE;gBACZ,MAAM,IAAI,aAAa,CACrB,uCAAuC,EACvC,kBAAkB,CAAC,gBAAgB,CACpC;YACH;AACA,YAAA,YAAY,GAAG,OAAO,CAAC,SAAU;QACnC;AAEA,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC;IACzD;AACD;;;;"}

package/dist/__stampers__/api/mobile/stamper.d.ts

@@ -0,0 +1,15 @@
+import { SignatureFormat } from "@0xkey-io/api-key-stamper";
+import type { TStamp, ApiKeyStamperBase } from "../../../__types__";
+export declare class ReactNativeKeychainStamper implements ApiKeyStamperBase {
+    private serviceName;
+    listKeyPairs(): Promise<string[]>;
+    createKeyPair(externalKeyPair?: {
+        publicKey: string;
+        privateKey: string;
+    }): Promise<string>;
+    deleteKeyPair(publicKeyHex: string): Promise<void>;
+    private getPrivateKey;
+    stamp(payload: string, publicKeyHex: string): Promise<TStamp>;
+    sign(payload: string, publicKeyHex: string, format: SignatureFormat): Promise<string>;
+}
+//# sourceMappingURL=stamper.d.ts.map

package/dist/__stampers__/api/mobile/stamper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stamper.d.ts","sourceRoot":"","sources":["../../../../src/__stampers__/api/mobile/stamper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE3E,OAAO,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAsBpE,qBAAa,0BAA2B,YAAW,iBAAiB;IAClE,OAAO,CAAC,WAAW;IAIb,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAOjC,aAAa,CAAC,eAAe,CAAC,EAAE;QACpC,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,MAAM,CAAC;IAsBb,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAY1C,aAAa;IAyBrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAa7D,IAAI,CACR,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,MAAM,CAAC;CAoBnB"}

package/dist/__stampers__/api/mobile/stamper.js

@@ -0,0 +1,119 @@
+'use strict';
+
+var apiKeyStamper = require('@0xkey-io/api-key-stamper');
+var crypto = require('@0xkey-io/crypto');
+
+let Keychain;
+try {
+    Keychain = require("react-native-keychain");
+}
+catch {
+    throw new Error("Please install react-native-keychain in your app to use ReactNativeKeychainStamper");
+}
+// In versions <=1.8.0, keys were stored using just the publicKey as the keychain service name
+// This caused `listKeyPairs()` to return ALL keychain entries (including non-ZeroXKey ones),
+// which meant `clearUnusedKeyPairs()` would delete the user's own keychain data
+//
+// To fix this, we now prefix all ZeroXKey-managed keys with this constant to scope them
+// properly to ZeroXKey. Methods that read or delete keys still fall back to the unprefixed
+// service name to migrate legacy keys. This fallback can be removed once we're confident
+// all users have  migrated to the prefixed format
+const ZEROXKEY_KEY_PREFIX = "com.0xkey.keypair:";
+class ReactNativeKeychainStamper {
+    serviceName(publicKeyHex) {
+        return `${ZEROXKEY_KEY_PREFIX}${publicKeyHex}`;
+    }
+    async listKeyPairs() {
+        const allServices = await Keychain.getAllGenericPasswordServices();
+        return allServices
+            .filter((service) => service.startsWith(ZEROXKEY_KEY_PREFIX))
+            .map((service) => service.slice(ZEROXKEY_KEY_PREFIX.length));
+    }
+    async createKeyPair(externalKeyPair) {
+        let privateKey;
+        let publicKey;
+        if (externalKeyPair) {
+            privateKey = externalKeyPair.privateKey;
+            publicKey = externalKeyPair.publicKey;
+        }
+        else {
+            const pair = crypto.generateP256KeyPair();
+            privateKey = pair.privateKey;
+            publicKey = pair.publicKey;
+        }
+        // we store in Keychain with a
+        // ZeroXKey-specific service prefix
+        await Keychain.setGenericPassword(publicKey, privateKey, {
+            service: this.serviceName(publicKey),
+        });
+        return publicKey;
+    }
+    async deleteKeyPair(publicKeyHex) {
+        // we check if the key exists under the prefixed service name
+        // - if it exists, we delete that
+        // - otherwise, we assume it's a legacy (unprefixed) key and try to delete that
+        const hasPrefixed = await Keychain.getGenericPassword({
+            service: this.serviceName(publicKeyHex),
+        });
+        await Keychain.resetGenericPassword({
+            service: hasPrefixed ? this.serviceName(publicKeyHex) : publicKeyHex,
+        });
+    }
+    async getPrivateKey(publicKeyHex) {
+        // we check if the key exists under the prefixed service name
+        // - if it exists, we return the private key
+        // - otherwise, we assume it's a legacy (unprefixed) key, migrate it
+        //   to the prefixed format, and return the private key
+        const prefixedCreds = await Keychain.getGenericPassword({
+            service: this.serviceName(publicKeyHex),
+        });
+        if (prefixedCreds)
+            return prefixedCreds.password;
+        // we fall back to the unprefixed (legacy) service name
+        const creds = await Keychain.getGenericPassword({
+            service: publicKeyHex,
+        });
+        if (!creds)
+            return null;
+        // migrate the legacy key to the prefixed format so it's properly scoped going forward
+        await Keychain.setGenericPassword(creds.username, creds.password, {
+            service: this.serviceName(publicKeyHex),
+        });
+        await Keychain.resetGenericPassword({ service: publicKeyHex });
+        return creds.password;
+    }
+    async stamp(payload, publicKeyHex) {
+        const privateKey = await this.getPrivateKey(publicKeyHex);
+        if (!privateKey) {
+            throw new Error(`No private key found for public key: ${publicKeyHex}`);
+        }
+        const stamper = new apiKeyStamper.ApiKeyStamper({
+            apiPublicKey: publicKeyHex,
+            apiPrivateKey: privateKey,
+        });
+        const { stampHeaderName, stampHeaderValue } = await stamper.stamp(payload);
+        return { stampHeaderName, stampHeaderValue };
+    }
+    async sign(payload, publicKeyHex, format) {
+        const privateKey = await this.getPrivateKey(publicKeyHex);
+        if (!privateKey) {
+            throw new Error(`No private key found for public key: ${publicKeyHex}`);
+        }
+        const stamper = new apiKeyStamper.ApiKeyStamper({
+            apiPublicKey: publicKeyHex,
+            apiPrivateKey: privateKey,
+        });
+        switch (format) {
+            case apiKeyStamper.SignatureFormat.Raw: {
+                return stamper.sign(payload, apiKeyStamper.SignatureFormat.Raw);
+            }
+            case apiKeyStamper.SignatureFormat.Der:
+                return stamper.sign(payload, apiKeyStamper.SignatureFormat.Der);
+            default:
+                throw new Error(`Unsupported signature format: ${format}`);
+        }
+    }
+}
+
+exports.ReactNativeKeychainStamper = ReactNativeKeychainStamper;
+//# sourceMappingURL=stamper.js.map

package/dist/__stampers__/api/mobile/stamper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stamper.js","sources":["../../../../src/__stampers__/api/mobile/stamper.ts"],"sourcesContent":[null],"names":["generateP256KeyPair","ApiKeyStamper","SignatureFormat"],"mappings":";;;;;AAIA,IAAI,QAAgD;AAEpD,IAAI;AACF,IAAA,QAAQ,GAAG,OAAO,CAAC,uBAAuB,CAAC;AAC7C;AAAE,MAAM;AACN,IAAA,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF;AACH;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,mBAAmB,GAAG,oBAAoB;MAEnC,0BAA0B,CAAA;AAC7B,IAAA,WAAW,CAAC,YAAoB,EAAA;AACtC,QAAA,OAAO,CAAA,EAAG,mBAAmB,CAAA,EAAG,YAAY,EAAE;IAChD;AAEA,IAAA,MAAM,YAAY,GAAA;AAChB,QAAA,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,6BAA6B,EAAE;AAClE,QAAA,OAAO;AACJ,aAAA,MAAM,CAAC,CAAC,OAAe,KAAK,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC;AACnE,aAAA,GAAG,CAAC,CAAC,OAAe,KAAK,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxE;IAEA,MAAM,aAAa,CAAC,eAGnB,EAAA;AACC,QAAA,IAAI,UAAkB;AACtB,QAAA,IAAI,SAAiB;QAErB,IAAI,eAAe,EAAE;AACnB,YAAA,UAAU,GAAG,eAAe,CAAC,UAAU;AACvC,YAAA,SAAS,GAAG,eAAe,CAAC,SAAS;QACvC;aAAO;AACL,YAAA,MAAM,IAAI,GAAGA,0BAAmB,EAAE;AAClC,YAAA,UAAU,GAAG,IAAI,CAAC,UAAU;AAC5B,YAAA,SAAS,GAAG,IAAI,CAAC,SAAS;QAC5B;;;AAIA,QAAA,MAAM,QAAQ,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE;AACvD,YAAA,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;AACrC,SAAA,CAAC;AAEF,QAAA,OAAO,SAAS;IAClB;IAEA,MAAM,aAAa,CAAC,YAAoB,EAAA;;;;AAItC,QAAA,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC;AACpD,YAAA,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;AACxC,SAAA,CAAC;QACF,MAAM,QAAQ,CAAC,oBAAoB,CAAC;AAClC,YAAA,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,YAAY;AACrE,SAAA,CAAC;IACJ;IAEQ,MAAM,aAAa,CAAC,YAAoB,EAAA;;;;;AAK9C,QAAA,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC;AACtD,YAAA,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;AACxC,SAAA,CAAC;AACF,QAAA,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC,QAAQ;;AAGhD,QAAA,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC;AAC9C,YAAA,OAAO,EAAE,YAAY;AACtB,SAAA,CAAC;AACF,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,IAAI;;QAGvB,MAAM,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;AAChE,YAAA,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;AACxC,SAAA,CAAC;QACF,MAAM,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAE9D,OAAO,KAAK,CAAC,QAAQ;IACvB;AAEA,IAAA,MAAM,KAAK,CAAC,OAAe,EAAE,YAAoB,EAAA;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;QACzD,IAAI,CAAC,UAAU,EAAE;AACf,YAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,YAAY,CAAA,CAAE,CAAC;QACzE;AACA,QAAA,MAAM,OAAO,GAAG,IAAIC,2BAAa,CAAC;AAChC,YAAA,YAAY,EAAE,YAAY;AAC1B,YAAA,aAAa,EAAE,UAAU;AAC1B,SAAA,CAAC;AACF,QAAA,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;AAC1E,QAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE;IAC9C;AAEA,IAAA,MAAM,IAAI,CACR,OAAe,EACf,YAAoB,EACpB,MAAuB,EAAA;QAEvB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;QACzD,IAAI,CAAC,UAAU,EAAE;AACf,YAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,YAAY,CAAA,CAAE,CAAC;QACzE;AACA,QAAA,MAAM,OAAO,GAAG,IAAIA,2BAAa,CAAC;AAChC,YAAA,YAAY,EAAE,YAAY;AAC1B,YAAA,aAAa,EAAE,UAAU;AAC1B,SAAA,CAAC;QAEF,QAAQ,MAAM;AACZ,YAAA,KAAKC,6BAAe,CAAC,GAAG,EAAE;gBACxB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAEA,6BAAe,CAAC,GAAG,CAAC;YACnD;YACA,KAAKA,6BAAe,CAAC,GAAG;gBACtB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAEA,6BAAe,CAAC,GAAG,CAAC;AACnD,YAAA;AACE,gBAAA,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAA,CAAE,CAAC;;IAEhE;AACD;;;;"}

package/dist/__stampers__/api/mobile/stamper.mjs

@@ -0,0 +1,117 @@
+import { ApiKeyStamper, SignatureFormat } from '@0xkey-io/api-key-stamper';
+import { generateP256KeyPair } from '@0xkey-io/crypto';
+
+let Keychain;
+try {
+    Keychain = require("react-native-keychain");
+}
+catch {
+    throw new Error("Please install react-native-keychain in your app to use ReactNativeKeychainStamper");
+}
+// In versions <=1.8.0, keys were stored using just the publicKey as the keychain service name
+// This caused `listKeyPairs()` to return ALL keychain entries (including non-ZeroXKey ones),
+// which meant `clearUnusedKeyPairs()` would delete the user's own keychain data
+//
+// To fix this, we now prefix all ZeroXKey-managed keys with this constant to scope them
+// properly to ZeroXKey. Methods that read or delete keys still fall back to the unprefixed
+// service name to migrate legacy keys. This fallback can be removed once we're confident
+// all users have  migrated to the prefixed format
+const ZEROXKEY_KEY_PREFIX = "com.0xkey.keypair:";
+class ReactNativeKeychainStamper {
+    serviceName(publicKeyHex) {
+        return `${ZEROXKEY_KEY_PREFIX}${publicKeyHex}`;
+    }
+    async listKeyPairs() {
+        const allServices = await Keychain.getAllGenericPasswordServices();
+        return allServices
+            .filter((service) => service.startsWith(ZEROXKEY_KEY_PREFIX))
+            .map((service) => service.slice(ZEROXKEY_KEY_PREFIX.length));
+    }
+    async createKeyPair(externalKeyPair) {
+        let privateKey;
+        let publicKey;
+        if (externalKeyPair) {
+            privateKey = externalKeyPair.privateKey;
+            publicKey = externalKeyPair.publicKey;
+        }
+        else {
+            const pair = generateP256KeyPair();
+            privateKey = pair.privateKey;
+            publicKey = pair.publicKey;
+        }
+        // we store in Keychain with a
+        // ZeroXKey-specific service prefix
+        await Keychain.setGenericPassword(publicKey, privateKey, {
+            service: this.serviceName(publicKey),
+        });
+        return publicKey;
+    }
+    async deleteKeyPair(publicKeyHex) {
+        // we check if the key exists under the prefixed service name
+        // - if it exists, we delete that
+        // - otherwise, we assume it's a legacy (unprefixed) key and try to delete that
+        const hasPrefixed = await Keychain.getGenericPassword({
+            service: this.serviceName(publicKeyHex),
+        });
+        await Keychain.resetGenericPassword({
+            service: hasPrefixed ? this.serviceName(publicKeyHex) : publicKeyHex,
+        });
+    }
+    async getPrivateKey(publicKeyHex) {
+        // we check if the key exists under the prefixed service name
+        // - if it exists, we return the private key
+        // - otherwise, we assume it's a legacy (unprefixed) key, migrate it
+        //   to the prefixed format, and return the private key
+        const prefixedCreds = await Keychain.getGenericPassword({
+            service: this.serviceName(publicKeyHex),
+        });
+        if (prefixedCreds)
+            return prefixedCreds.password;
+        // we fall back to the unprefixed (legacy) service name
+        const creds = await Keychain.getGenericPassword({
+            service: publicKeyHex,
+        });
+        if (!creds)
+            return null;
+        // migrate the legacy key to the prefixed format so it's properly scoped going forward
+        await Keychain.setGenericPassword(creds.username, creds.password, {
+            service: this.serviceName(publicKeyHex),
+        });
+        await Keychain.resetGenericPassword({ service: publicKeyHex });
+        return creds.password;
+    }
+    async stamp(payload, publicKeyHex) {
+        const privateKey = await this.getPrivateKey(publicKeyHex);
+        if (!privateKey) {
+            throw new Error(`No private key found for public key: ${publicKeyHex}`);
+        }
+        const stamper = new ApiKeyStamper({
+            apiPublicKey: publicKeyHex,
+            apiPrivateKey: privateKey,
+        });
+        const { stampHeaderName, stampHeaderValue } = await stamper.stamp(payload);
+        return { stampHeaderName, stampHeaderValue };
+    }
+    async sign(payload, publicKeyHex, format) {
+        const privateKey = await this.getPrivateKey(publicKeyHex);
+        if (!privateKey) {
+            throw new Error(`No private key found for public key: ${publicKeyHex}`);
+        }
+        const stamper = new ApiKeyStamper({
+            apiPublicKey: publicKeyHex,
+            apiPrivateKey: privateKey,
+        });
+        switch (format) {
+            case SignatureFormat.Raw: {
+                return stamper.sign(payload, SignatureFormat.Raw);
+            }
+            case SignatureFormat.Der:
+                return stamper.sign(payload, SignatureFormat.Der);
+            default:
+                throw new Error(`Unsupported signature format: ${format}`);
+        }
+    }
+}
+
+export { ReactNativeKeychainStamper };
+//# sourceMappingURL=stamper.mjs.map

package/dist/__stampers__/api/mobile/stamper.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"stamper.mjs","sources":["../../../../src/__stampers__/api/mobile/stamper.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAIA,IAAI,QAAgD;AAEpD,IAAI;AACF,IAAA,QAAQ,GAAG,OAAO,CAAC,uBAAuB,CAAC;AAC7C;AAAE,MAAM;AACN,IAAA,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF;AACH;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,mBAAmB,GAAG,oBAAoB;MAEnC,0BAA0B,CAAA;AAC7B,IAAA,WAAW,CAAC,YAAoB,EAAA;AACtC,QAAA,OAAO,CAAA,EAAG,mBAAmB,CAAA,EAAG,YAAY,EAAE;IAChD;AAEA,IAAA,MAAM,YAAY,GAAA;AAChB,QAAA,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,6BAA6B,EAAE;AAClE,QAAA,OAAO;AACJ,aAAA,MAAM,CAAC,CAAC,OAAe,KAAK,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC;AACnE,aAAA,GAAG,CAAC,CAAC,OAAe,KAAK,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxE;IAEA,MAAM,aAAa,CAAC,eAGnB,EAAA;AACC,QAAA,IAAI,UAAkB;AACtB,QAAA,IAAI,SAAiB;QAErB,IAAI,eAAe,EAAE;AACnB,YAAA,UAAU,GAAG,eAAe,CAAC,UAAU;AACvC,YAAA,SAAS,GAAG,eAAe,CAAC,SAAS;QACvC;aAAO;AACL,YAAA,MAAM,IAAI,GAAG,mBAAmB,EAAE;AAClC,YAAA,UAAU,GAAG,IAAI,CAAC,UAAU;AAC5B,YAAA,SAAS,GAAG,IAAI,CAAC,SAAS;QAC5B;;;AAIA,QAAA,MAAM,QAAQ,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE;AACvD,YAAA,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;AACrC,SAAA,CAAC;AAEF,QAAA,OAAO,SAAS;IAClB;IAEA,MAAM,aAAa,CAAC,YAAoB,EAAA;;;;AAItC,QAAA,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC;AACpD,YAAA,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;AACxC,SAAA,CAAC;QACF,MAAM,QAAQ,CAAC,oBAAoB,CAAC;AAClC,YAAA,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,YAAY;AACrE,SAAA,CAAC;IACJ;IAEQ,MAAM,aAAa,CAAC,YAAoB,EAAA;;;;;AAK9C,QAAA,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC;AACtD,YAAA,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;AACxC,SAAA,CAAC;AACF,QAAA,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC,QAAQ;;AAGhD,QAAA,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC;AAC9C,YAAA,OAAO,EAAE,YAAY;AACtB,SAAA,CAAC;AACF,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,IAAI;;QAGvB,MAAM,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;AAChE,YAAA,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;AACxC,SAAA,CAAC;QACF,MAAM,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAE9D,OAAO,KAAK,CAAC,QAAQ;IACvB;AAEA,IAAA,MAAM,KAAK,CAAC,OAAe,EAAE,YAAoB,EAAA;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;QACzD,IAAI,CAAC,UAAU,EAAE;AACf,YAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,YAAY,CAAA,CAAE,CAAC;QACzE;AACA,QAAA,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;AAChC,YAAA,YAAY,EAAE,YAAY;AAC1B,YAAA,aAAa,EAAE,UAAU;AAC1B,SAAA,CAAC;AACF,QAAA,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;AAC1E,QAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE;IAC9C;AAEA,IAAA,MAAM,IAAI,CACR,OAAe,EACf,YAAoB,EACpB,MAAuB,EAAA;QAEvB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;QACzD,IAAI,CAAC,UAAU,EAAE;AACf,YAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,YAAY,CAAA,CAAE,CAAC;QACzE;AACA,QAAA,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;AAChC,YAAA,YAAY,EAAE,YAAY;AAC1B,YAAA,aAAa,EAAE,UAAU;AAC1B,SAAA,CAAC;QAEF,QAAQ,MAAM;AACZ,YAAA,KAAK,eAAe,CAAC,GAAG,EAAE;gBACxB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC;YACnD;YACA,KAAK,eAAe,CAAC,GAAG;gBACtB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC;AACnD,YAAA;AACE,gBAAA,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAA,CAAE,CAAC;;IAEhE;AACD;;;;"}

package/dist/__stampers__/api/web/stamper.d.ts

@@ -0,0 +1,14 @@
+import type { TStamp, ApiKeyStamperBase } from "../../../__types__";
+import { SignatureFormat } from "@0xkey-io/api-key-stamper";
+export declare class IndexedDbStamper implements ApiKeyStamperBase {
+    constructor();
+    private openDb;
+    private storeKeyPair;
+    private getPrivateKey;
+    listKeyPairs(): Promise<string[]>;
+    createKeyPair(externalKeyPair?: CryptoKeyPair): Promise<string>;
+    deleteKeyPair(publicKeyHex: string): Promise<void>;
+    sign(payload: string, publicKeyHex: string, format: SignatureFormat): Promise<string>;
+    stamp(payload: string, publicKeyHex: string): Promise<TStamp>;
+}
+//# sourceMappingURL=stamper.d.ts.map

package/dist/__stampers__/api/web/stamper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stamper.d.ts","sourceRoot":"","sources":["../../../../src/__stampers__/api/web/stamper.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAyE5D,qBAAa,gBAAiB,YAAW,iBAAiB;;YAO1C,MAAM;YAcN,YAAY;YAkBZ,aAAa;IAiBrB,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAiBjC,aAAa,CAAC,eAAe,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAyB/D,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAclD,IAAI,CACR,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,MAAM,CAAC;IAoBZ,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAgBpE"}

package/dist/__stampers__/api/web/stamper.js

@@ -0,0 +1,201 @@
+'use strict';
+
+var encoding = require('@0xkey-io/encoding');
+var utils = require('../../../utils.js');
+var apiKeyStamper = require('@0xkey-io/api-key-stamper');
+
+const DB_NAME = "ZeroXKeyStamperDB";
+const DB_STORE = "KeyStore";
+const stampHeaderName = "X-Stamp";
+/**
+ * `SubtleCrypto.sign(...)` outputs signature in IEEE P1363 format:
+ * - https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/sign#ecdsa
+ *
+ * ZeroXKey expects the signature encoding to be DER-encoded ASN.1.
+ *
+ * Code modified from https://github.com/google/tink/blob/6f74b99a2bfe6677e3670799116a57268fd067fa/javascript/subtle/elliptic_curves.ts#L114
+ *
+ * Transform an ECDSA signature in IEEE 1363 encoding to DER encoding.
+ *
+ * @param ieee the ECDSA signature in IEEE encoding
+ * @return ECDSA signature in DER encoding
+ */
+function convertEcdsaIeee1363ToDer(ieee) {
+    if (ieee.length % 2 != 0 || ieee.length == 0 || ieee.length > 132) {
+        throw new Error("Invalid IEEE P1363 signature encoding. Length: " + ieee.length);
+    }
+    const r = toUnsignedBigNum(ieee.subarray(0, ieee.length / 2));
+    const s = toUnsignedBigNum(ieee.subarray(ieee.length / 2, ieee.length));
+    let offset = 0;
+    const length = 1 + 1 + r.length + 1 + 1 + s.length;
+    let der;
+    if (length >= 128) {
+        der = new Uint8Array(length + 3);
+        der[offset++] = 48;
+        der[offset++] = 128 + 1;
+        der[offset++] = length;
+    }
+    else {
+        der = new Uint8Array(length + 2);
+        der[offset++] = 48;
+        der[offset++] = length;
+    }
+    der[offset++] = 2;
+    der[offset++] = r.length;
+    der.set(r, offset);
+    offset += r.length;
+    der[offset++] = 2;
+    der[offset++] = s.length;
+    der.set(s, offset);
+    return der;
+}
+/**
+ * Code modified from https://github.com/google/tink/blob/6f74b99a2bfe6677e3670799116a57268fd067fa/javascript/subtle/elliptic_curves.ts#L311
+ *
+ * Transform a big integer in big endian to minimal unsigned form which has
+ * no extra zero at the beginning except when the highest bit is set.
+ */
+function toUnsignedBigNum(bytes) {
+    let start = 0;
+    while (start < bytes.length && bytes[start] == 0) {
+        start++;
+    }
+    if (start == bytes.length) {
+        start = bytes.length - 1;
+    }
+    let extraZero = 0;
+    if ((bytes[start] & 128) == 128) {
+        extraZero = 1;
+    }
+    const res = new Uint8Array(bytes.length - start + extraZero);
+    res.set(bytes.subarray(start), extraZero);
+    return res;
+}
+class IndexedDbStamper {
+    constructor() {
+        if (typeof window === "undefined") {
+            throw new Error("IndexedDB is only available in the browser");
+        }
+    }
+    async openDb() {
+        return new Promise((resolve, reject) => {
+            const request = indexedDB.open(DB_NAME, 1);
+            request.onupgradeneeded = (event) => {
+                const db = event.target.result;
+                if (!db.objectStoreNames.contains(DB_STORE)) {
+                    db.createObjectStore(DB_STORE);
+                }
+            };
+            request.onsuccess = () => resolve(request.result);
+            request.onerror = () => reject(request.error);
+        });
+    }
+    async storeKeyPair(publicKeyHex, privateKey) {
+        const db = await this.openDb();
+        return new Promise((resolve, reject) => {
+            const tx = db.transaction(DB_STORE, "readwrite");
+            const store = tx.objectStore(DB_STORE);
+            store.put(privateKey, publicKeyHex);
+            tx.oncomplete = () => {
+                db.close();
+                resolve();
+            };
+            tx.onerror = () => reject(tx.error);
+            tx.onabort = () => reject(tx.error);
+        });
+    }
+    async getPrivateKey(publicKeyHex) {
+        const db = await this.openDb();
+        return new Promise((resolve, reject) => {
+            const tx = db.transaction(DB_STORE, "readonly");
+            const store = tx.objectStore(DB_STORE);
+            const request = store.get(publicKeyHex);
+            request.onsuccess = () => {
+                db.close();
+                resolve(request.result || null);
+            };
+            request.onerror = () => {
+                db.close();
+                reject(request.error);
+            };
+        });
+    }
+    async listKeyPairs() {
+        const db = await this.openDb();
+        return new Promise((resolve, reject) => {
+            const tx = db.transaction(DB_STORE, "readonly");
+            const store = tx.objectStore(DB_STORE);
+            const request = store.getAllKeys();
+            request.onsuccess = () => {
+                db.close();
+                resolve(request.result);
+            };
+            request.onerror = () => {
+                db.close();
+                reject(request.error);
+            };
+        });
+    }
+    async createKeyPair(externalKeyPair) {
+        let privateKey;
+        let publicKey;
+        if (externalKeyPair) {
+            await utils.assertValidP256ECDSAKeyPair(externalKeyPair);
+            privateKey = externalKeyPair.privateKey;
+            publicKey = externalKeyPair.publicKey;
+        }
+        else {
+            const keyPair = await crypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-256" }, false, // Non-extractable private key
+            ["sign", "verify"]);
+            privateKey = keyPair.privateKey;
+            publicKey = keyPair.publicKey;
+        }
+        const rawPubKey = new Uint8Array(await crypto.subtle.exportKey("raw", publicKey));
+        const compressedPubKey = encoding.pointEncode(rawPubKey);
+        const compressedHex = encoding.uint8ArrayToHexString(compressedPubKey);
+        await this.storeKeyPair(compressedHex, privateKey);
+        return compressedHex;
+    }
+    async deleteKeyPair(publicKeyHex) {
+        const db = await this.openDb();
+        return new Promise((resolve, reject) => {
+            const tx = db.transaction(DB_STORE, "readwrite");
+            const store = tx.objectStore(DB_STORE);
+            store.delete(publicKeyHex);
+            tx.oncomplete = () => {
+                db.close();
+                resolve();
+            };
+            tx.onerror = () => reject(tx.error);
+        });
+    }
+    async sign(payload, publicKeyHex, format) {
+        const privateKey = await this.getPrivateKey(publicKeyHex);
+        if (!privateKey) {
+            throw new Error("Key not found for publicKey: " + publicKeyHex);
+        }
+        const encodedPayload = new TextEncoder().encode(payload);
+        const signatureIeee1363 = await crypto.subtle.sign({ name: "ECDSA", hash: { name: "SHA-256" } }, privateKey, encodedPayload);
+        if (format === apiKeyStamper.SignatureFormat.Raw) {
+            return encoding.uint8ArrayToHexString(new Uint8Array(signatureIeee1363));
+        }
+        else {
+            return encoding.uint8ArrayToHexString(convertEcdsaIeee1363ToDer(new Uint8Array(signatureIeee1363)));
+        }
+    }
+    async stamp(payload, publicKeyHex) {
+        const signature = await this.sign(payload, publicKeyHex, apiKeyStamper.SignatureFormat.Der);
+        const stamp = {
+            publicKey: publicKeyHex,
+            scheme: "SIGNATURE_SCHEME_TK_API_P256",
+            signature,
+        };
+        return {
+            stampHeaderName,
+            stampHeaderValue: encoding.stringToBase64urlString(JSON.stringify(stamp)),
+        };
+    }
+}
+
+exports.IndexedDbStamper = IndexedDbStamper;
+//# sourceMappingURL=stamper.js.map

package/dist/__stampers__/api/web/stamper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stamper.js","sources":["../../../../src/__stampers__/api/web/stamper.ts"],"sourcesContent":[null],"names":["assertValidP256ECDSAKeyPair","pointEncode","uint8ArrayToHexString","SignatureFormat","stringToBase64urlString"],"mappings":";;;;;;AASA,MAAM,OAAO,GAAG,mBAAmB;AACnC,MAAM,QAAQ,GAAG,UAAU;AAC3B,MAAM,eAAe,GAAG,SAAS;AAEjC;;;;;;;;;;;;AAYG;AACH,SAAS,yBAAyB,CAAC,IAAgB,EAAA;IACjD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;QACjE,MAAM,IAAI,KAAK,CACb,iDAAiD,GAAG,IAAI,CAAC,MAAM,CAChE;IACH;AACA,IAAA,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7D,IAAA,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvE,IAAI,MAAM,GAAG,CAAC;AACd,IAAA,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;AAClD,IAAA,IAAI,GAAe;AACnB,IAAA,IAAI,MAAM,IAAI,GAAG,EAAE;QACjB,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;AAChC,QAAA,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QAClB,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC;AACvB,QAAA,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM;IACxB;SAAO;QACL,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;AAChC,QAAA,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;AAClB,QAAA,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM;IACxB;AACA,IAAA,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC;IACjB,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM;AACxB,IAAA,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;AAClB,IAAA,MAAM,IAAI,CAAC,CAAC,MAAM;AAClB,IAAA,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC;IACjB,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM;AACxB,IAAA,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;AAClB,IAAA,OAAO,GAAG;AACZ;AAEA;;;;;AAKG;AACH,SAAS,gBAAgB,CAAC,KAAiB,EAAA;IACzC,IAAI,KAAK,GAAG,CAAC;AACb,IAAA,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;AAChD,QAAA,KAAK,EAAE;IACT;AACA,IAAA,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE;AACzB,QAAA,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;IAC1B;IACA,IAAI,SAAS,GAAG,CAAC;IACjB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAE,GAAG,GAAG,KAAK,GAAG,EAAE;QAChC,SAAS,GAAG,CAAC;IACf;AACA,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AAC5D,IAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;AACzC,IAAA,OAAO,GAAG;AACZ;MAEa,gBAAgB,CAAA;AAC3B,IAAA,WAAA,GAAA;AACE,QAAA,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AACjC,YAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC;QAC/D;IACF;AAEQ,IAAA,MAAM,MAAM,GAAA;QAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;YACrC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AAC1C,YAAA,OAAO,CAAC,eAAe,GAAG,CAAC,KAAK,KAAI;AAClC,gBAAA,MAAM,EAAE,GAAI,KAAK,CAAC,MAA2B,CAAC,MAAM;gBACpD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;AAC3C,oBAAA,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC;gBAChC;AACF,YAAA,CAAC;AACD,YAAA,OAAO,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;AACjD,YAAA,OAAO,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;AAC/C,QAAA,CAAC,CAAC;IACJ;AAEQ,IAAA,MAAM,YAAY,CACxB,YAAoB,EACpB,UAAqB,EAAA;AAErB,QAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC;YAChD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;AACtC,YAAA,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC;AACnC,YAAA,EAAE,CAAC,UAAU,GAAG,MAAK;gBACnB,EAAE,CAAC,KAAK,EAAE;AACV,gBAAA,OAAO,EAAE;AACX,YAAA,CAAC;AACD,YAAA,EAAE,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC;AACnC,YAAA,EAAE,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC;AACrC,QAAA,CAAC,CAAC;IACJ;IAEQ,MAAM,aAAa,CAAC,YAAoB,EAAA;AAC9C,QAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC/C,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;YACtC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;AACvC,YAAA,OAAO,CAAC,SAAS,GAAG,MAAK;gBACvB,EAAE,CAAC,KAAK,EAAE;AACV,gBAAA,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;AACjC,YAAA,CAAC;AACD,YAAA,OAAO,CAAC,OAAO,GAAG,MAAK;gBACrB,EAAE,CAAC,KAAK,EAAE;AACV,gBAAA,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;AACvB,YAAA,CAAC;AACH,QAAA,CAAC,CAAC;IACJ;AAEA,IAAA,MAAM,YAAY,GAAA;AAChB,QAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC/C,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;AACtC,YAAA,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,EAAE;AAClC,YAAA,OAAO,CAAC,SAAS,GAAG,MAAK;gBACvB,EAAE,CAAC,KAAK,EAAE;AACV,gBAAA,OAAO,CAAC,OAAO,CAAC,MAAkB,CAAC;AACrC,YAAA,CAAC;AACD,YAAA,OAAO,CAAC,OAAO,GAAG,MAAK;gBACrB,EAAE,CAAC,KAAK,EAAE;AACV,gBAAA,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;AACvB,YAAA,CAAC;AACH,QAAA,CAAC,CAAC;IACJ;IAEA,MAAM,aAAa,CAAC,eAA+B,EAAA;AACjD,QAAA,IAAI,UAAqB;AACzB,QAAA,IAAI,SAAoB;QACxB,IAAI,eAAe,EAAE;AACnB,YAAA,MAAMA,iCAA2B,CAAC,eAAe,CAAC;AAClD,YAAA,UAAU,GAAG,eAAe,CAAC,UAAU;AACvC,YAAA,SAAS,GAAG,eAAe,CAAC,SAAS;QACvC;aAAO;YACL,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,KAAK;AACL,YAAA,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB;AACD,YAAA,UAAU,GAAG,OAAO,CAAC,UAAU;AAC/B,YAAA,SAAS,GAAG,OAAO,CAAC,SAAS;QAC/B;AACA,QAAA,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAChD;AACD,QAAA,MAAM,gBAAgB,GAAGC,oBAAW,CAAC,SAAS,CAAC;AAC/C,QAAA,MAAM,aAAa,GAAGC,8BAAqB,CAAC,gBAAgB,CAAC;QAC7D,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,UAAU,CAAC;AAClD,QAAA,OAAO,aAAa;IACtB;IAEA,MAAM,aAAa,CAAC,YAAoB,EAAA;AACtC,QAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC;YAChD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;AACtC,YAAA,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;AAC1B,YAAA,EAAE,CAAC,UAAU,GAAG,MAAK;gBACnB,EAAE,CAAC,KAAK,EAAE;AACV,gBAAA,OAAO,EAAE;AACX,YAAA,CAAC;AACD,YAAA,EAAE,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC;AACrC,QAAA,CAAC,CAAC;IACJ;AAEA,IAAA,MAAM,IAAI,CACR,OAAe,EACf,YAAoB,EACpB,MAAuB,EAAA;QAEvB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;QACzD,IAAI,CAAC,UAAU,EAAE;AACf,YAAA,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,YAAY,CAAC;QACjE;QACA,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;QACxD,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAChD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAC5C,UAAU,EACV,cAAc,CACf;AACD,QAAA,IAAI,MAAM,KAAKC,6BAAe,CAAC,GAAG,EAAE;YAClC,OAAOD,8BAAqB,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACjE;aAAO;YACL,OAAOA,8BAAqB,CAC1B,yBAAyB,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAC7D;QACH;IACF;AAEA,IAAA,MAAM,KAAK,CAAC,OAAe,EAAE,YAAoB,EAAA;AAC/C,QAAA,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAC/B,OAAO,EACP,YAAY,EACZC,6BAAe,CAAC,GAAG,CACpB;AACD,QAAA,MAAM,KAAK,GAAG;AACZ,YAAA,SAAS,EAAE,YAAY;AACvB,YAAA,MAAM,EAAE,8BAA8B;YACtC,SAAS;SACV;QACD,OAAO;YACL,eAAe;YACf,gBAAgB,EAAEC,gCAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;SACjE;IACH;AACD;;;;"}