@0xpolygonid/js-sdk 1.0.0-beta.0

package/dist/esm/identity/identity-wallet.js

@@ -0,0 +1,395 @@
+import { KmsKeyType } from '../kms';
+import { Blockchain, buildDIDType, BytesHelper, Claim, ClaimOptions, DID, DidMethod, getUnixTimestamp, Id, NetworkId, SchemaHash } from '@iden3/js-iden3-core';
+import { Hex, poseidon, PublicKey, Signature } from '@iden3/js-crypto';
+import { hashElems, ZERO_HASH } from '@iden3/js-merkletree';
+import { subjectPositionIndex } from './common';
+import * as uuid from 'uuid';
+import { Parser } from '../schema-processor';
+import { MerkleTreeType } from '../storage/entities/mt';
+import { getRandomBytes, keyPath } from '../kms/provider-helpers';
+import { UniversalSchemaLoader } from '../loaders';
+import { VerifiableConstants, MerklizedRootPosition, SubjectPosition, W3CCredential, Iden3SparseMerkleTreeProof, ProofType, IssuerData } from '../verifiable';
+import { pushHashesToRHS } from '../credentials/revocation';
+/**
+ * @public
+ * Wallet instance to manage the digital identity based on iden3 protocol
+ * allows to: create identity/profile, sign payloads (bigint / bytes), generate keys,
+ * generate Merkle tree proofs of inclusion / non-inclusion to Merkle trees, issue credentials with a BJJSignature and Iden3SparseMerkleTree Proofs,
+ * revoke credentials, add credentials to Merkle trees, push states to reverse hash service
+ *
+ *
+ * @export
+ * @beta
+ * @class IdentityWallet - class
+ * @beta
+ * @implements implements IIdentityWallet interface
+ */
+export class IdentityWallet {
+    /**
+     * Constructs a new instance of the `IdentityWallet` class
+     *
+     * @param {KMS} _kms - Key Management System that allows signing data with BJJ key
+     * @param {IDataStorage} _storage - data storage to access credential / identity / Merkle tree data
+     * @param {ICredentialWallet} _credentialWallet - credential wallet instance to quickly access credential CRUD functionality
+     * @public
+     */
+    constructor(_kms, _storage, _credentialWallet) {
+        this._kms = _kms;
+        this._storage = _storage;
+        this._credentialWallet = _credentialWallet;
+    }
+    /**
+     * {@inheritDoc IIdentityWallet.createIdentity}
+     */
+    async createIdentity(hostUrl, opts) {
+        const tmpIdentifier = uuid.v4();
+        await this._storage.mt.createIdentityMerkleTrees(tmpIdentifier);
+        if (!opts) {
+            opts = {
+                method: DidMethod.Iden3,
+                blockchain: Blockchain.Polygon,
+                networkId: NetworkId.Mumbai
+            };
+        }
+        opts.seed = opts.seed ?? getRandomBytes(32);
+        const keyID = await this._kms.createKeyFromSeed(KmsKeyType.BabyJubJub, opts.seed);
+        const pubKey = await this._kms.publicKey(keyID);
+        const schemaHash = SchemaHash.authSchemaHash;
+        const authClaim = Claim.newClaim(schemaHash, ClaimOptions.withIndexDataInts(pubKey.p[0], pubKey.p[1]), ClaimOptions.withRevocationNonce(BigInt(0)));
+        const revNonce = 0;
+        authClaim.setRevocationNonce(BigInt(revNonce));
+        await this._storage.mt.addToMerkleTree(tmpIdentifier, MerkleTreeType.Claims, authClaim.hiHv().hi, authClaim.hiHv().hv);
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(tmpIdentifier, MerkleTreeType.Claims);
+        const currentState = await hashElems([
+            claimsTree.root.bigInt(),
+            ZERO_HASH.bigInt(),
+            ZERO_HASH.bigInt()
+        ]);
+        const didType = buildDIDType(opts.method, opts.blockchain, opts.networkId);
+        const identifier = Id.idGenesisFromIdenState(didType, currentState.bigInt());
+        const did = DID.parseFromId(identifier);
+        await this._storage.mt.bindMerkleTreeToNewIdentifier(tmpIdentifier, did.toString());
+        const schema = JSON.parse(VerifiableConstants.AUTH.AUTH_BJJ_CREDENTIAL_SCHEMA_JSON);
+        const authData = authClaim.getExpirationDate();
+        const expiration = authData ? getUnixTimestamp(authData) : 0;
+        const request = {
+            credentialSchema: VerifiableConstants.AUTH.AUTH_BJJ_CREDENTIAL_SCHEMA_JSON_URL,
+            type: VerifiableConstants.AUTH.AUTH_BJJ_CREDENTIAL_TYPE,
+            credentialSubject: {
+                x: pubKey.p[0].toString(),
+                y: pubKey.p[1].toString()
+            },
+            subjectPosition: subjectPositionIndex(authClaim.getIdPosition()),
+            version: 0,
+            expiration,
+            revNonce: revNonce
+        };
+        hostUrl = hostUrl.replace(/\/$/, '');
+        let credential = new W3CCredential();
+        try {
+            credential = this._credentialWallet.createCredential(hostUrl, did, request, schema, opts.rhsUrl);
+        }
+        catch (e) {
+            throw new Error('Error create Iden3Credential');
+        }
+        const index = authClaim.hIndex();
+        const { proof } = await claimsTree.generateProof(index, claimsTree.root);
+        const claimsTreeHex = claimsTree.root.hex();
+        const stateHex = currentState.hex();
+        const mtpProof = new Iden3SparseMerkleTreeProof({
+            type: ProofType.Iden3SparseMerkleTreeProof,
+            mtp: proof,
+            issuerData: new IssuerData({
+                id: did.toString(),
+                state: {
+                    rootOfRoots: ZERO_HASH.hex(),
+                    revocationTreeRoot: ZERO_HASH.hex(),
+                    claimsTreeRoot: claimsTreeHex,
+                    value: stateHex
+                },
+                authCoreClaim: authClaim.hex(),
+                credentialStatus: credential.credentialStatus,
+                mtp: proof
+            }),
+            coreClaim: authClaim.hex()
+        });
+        credential.proof = [mtpProof];
+        await this._storage.identity.saveIdentity({
+            identifier: did.toString(),
+            state: currentState,
+            published: false,
+            genesis: true
+        });
+        await this._credentialWallet.save(credential);
+        return {
+            did,
+            credential
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.createProfile} */
+    async createProfile(did, nonce, verifier) {
+        const id = did.id;
+        const identityProfiles = await this._storage.identity.getProfilesByGenesisIdentifier(did.toString());
+        const existingProfile = identityProfiles.find((p) => p.nonce == nonce || p.verifier == verifier);
+        if (existingProfile) {
+            throw new Error('profile with given nonce or verifier already exists');
+        }
+        const profile = Id.profileId(id, BigInt(nonce));
+        const profileDID = DID.parseFromId(profile);
+        await this._storage.identity.saveProfile({
+            id: profileDID.toString(),
+            nonce,
+            genesisIdentifier: did.toString(),
+            verifier
+        });
+        return profileDID;
+    }
+    /** {@inheritDoc IIdentityWallet.generateKey} */
+    async generateKey(keyType) {
+        const key = await this._kms.createKeyFromSeed(keyType, getRandomBytes(32));
+        return key;
+    }
+    /** {@inheritDoc IIdentityWallet.getDIDTreeModel} */
+    async getDIDTreeModel(did) {
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), MerkleTreeType.Claims);
+        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), MerkleTreeType.Revocations);
+        const rootsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), MerkleTreeType.Roots);
+        const state = await hashElems([
+            claimsTree.root.bigInt(),
+            revocationTree.root.bigInt(),
+            rootsTree.root.bigInt()
+        ]);
+        return {
+            state,
+            claimsTree,
+            revocationTree,
+            rootsTree
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.generateClaimMtp} */
+    async generateCredentialMtp(did, credential, treeState) {
+        const coreClaim = await this.getCoreClaimFromCredential(credential);
+        const treesModel = await this.getDIDTreeModel(did);
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), MerkleTreeType.Claims);
+        const { proof } = await claimsTree.generateProof(coreClaim.hIndex(), treeState ? treeState.claimsRoot : treesModel.claimsTree.root);
+        return {
+            proof,
+            treeState: treeState ?? {
+                state: treesModel.state,
+                claimsRoot: treesModel.claimsTree.root,
+                rootOfRoots: treesModel.rootsTree.root,
+                revocationRoot: treesModel.revocationTree.root
+            }
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.generateNonRevocationMtp} */
+    async generateNonRevocationMtp(did, credential, treeState) {
+        const coreClaim = await this.getCoreClaimFromCredential(credential);
+        const revNonce = coreClaim.getRevocationNonce();
+        const treesModel = await this.getDIDTreeModel(did);
+        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), MerkleTreeType.Revocations);
+        const { proof } = await revocationTree.generateProof(revNonce, treeState ? treeState.revocationRoot : treesModel.revocationTree.root);
+        return {
+            proof,
+            treeState: treeState ?? {
+                state: treesModel.state,
+                claimsRoot: treesModel.claimsTree.root,
+                rootOfRoots: treesModel.rootsTree.root,
+                revocationRoot: treesModel.revocationTree.root
+            }
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.sign} */
+    async sign(message, credential) {
+        const keyKMSId = this.getKMSIdByAuthCredential(credential);
+        const payload = poseidon.hashBytes(message);
+        const signature = await this._kms.sign(keyKMSId, BytesHelper.intToBytes(payload));
+        return Signature.newFromCompressed(signature);
+    }
+    /** {@inheritDoc IIdentityWallet.signChallenge} */
+    async signChallenge(challenge, credential) {
+        const keyKMSId = this.getKMSIdByAuthCredential(credential);
+        const signature = await this._kms.sign(keyKMSId, BytesHelper.intToBytes(challenge));
+        return Signature.newFromCompressed(signature);
+    }
+    /** {@inheritDoc IIdentityWallet.issueCredential} */
+    async issueCredential(issuerDID, req, hostUrl, opts) {
+        if (!opts) {
+            opts = {
+                withRHS: ''
+            };
+        }
+        hostUrl = hostUrl.replace(/\/$/, '');
+        const schema = await new UniversalSchemaLoader('ipfs.io').load(req.credentialSchema);
+        const jsonSchema = JSON.parse(new TextDecoder().decode(schema));
+        let credential = new W3CCredential();
+        let revNonce = 0;
+        if (!req.revNonce) {
+            req.revNonce = Math.round(Math.random() * 10000);
+        }
+        req.subjectPosition = req.subjectPosition ?? SubjectPosition.Index;
+        revNonce = req.revNonce;
+        try {
+            credential = this._credentialWallet.createCredential(hostUrl, issuerDID, req, jsonSchema, opts.withRHS);
+        }
+        catch (e) {
+            throw new Error('Error create Iden3Credential');
+        }
+        const issuerAuthBJJCredential = await this._credentialWallet.getAuthBJJCredential(issuerDID);
+        const coreClaimOpts = {
+            revNonce: revNonce,
+            subjectPosition: req.subjectPosition,
+            merklizedRootPosition: this.defineMTRootPosition(jsonSchema, req.merklizedRootPosition),
+            updatable: false,
+            version: 0
+        };
+        const coreClaim = await new Parser().parseClaim(credential, `${jsonSchema.$metadata.uris['jsonLdContext']}#${req.type}`, schema, coreClaimOpts);
+        const { hi, hv } = coreClaim.hiHv();
+        const coreClaimHash = poseidon.hash([hi, hv]);
+        const keyKMSId = this.getKMSIdByAuthCredential(issuerAuthBJJCredential);
+        const signature = await this._kms.sign(keyKMSId, BytesHelper.intToBytes(coreClaimHash));
+        if (!issuerAuthBJJCredential.proof) {
+            throw new Error('issuer auth credential must have proof');
+        }
+        const mtpAuthBJJProof = issuerAuthBJJCredential.proof[0];
+        const sigProof = {
+            type: ProofType.BJJSignature,
+            issuerData: new IssuerData({
+                id: issuerDID.toString(),
+                state: mtpAuthBJJProof.issuerData.state,
+                authCoreClaim: mtpAuthBJJProof.coreClaim,
+                mtp: mtpAuthBJJProof.mtp,
+                credentialStatus: mtpAuthBJJProof.issuerData.credentialStatus
+            }),
+            coreClaim: coreClaim.hex(),
+            signature: Hex.encodeString(signature)
+        };
+        credential.proof = [sigProof];
+        return credential;
+    }
+    /** {@inheritDoc IIdentityWallet.revokeCredential} */
+    async revokeCredential(issuerDID, credential) {
+        const issuerTree = await this.getDIDTreeModel(issuerDID);
+        const coreClaim = credential.getCoreClaimFromProof(ProofType.BJJSignature);
+        if (!coreClaim) {
+            throw new Error('credential must have coreClaim representation in the signature proof');
+        }
+        const nonce = coreClaim.getRevocationNonce();
+        await issuerTree.revocationTree.add(nonce, BigInt(0));
+        return Number(BigInt.asUintN(64, nonce));
+    }
+    /** {@inheritDoc IIdentityWallet.addCredentialsToMerkleTree} */
+    async addCredentialsToMerkleTree(credentials, issuerDID) {
+        const oldIssuerTree = await this.getDIDTreeModel(issuerDID);
+        const oldTreeState = {
+            revocationRoot: oldIssuerTree.revocationTree.root,
+            claimsRoot: oldIssuerTree.claimsTree.root,
+            state: oldIssuerTree.state,
+            rootOfRoots: oldIssuerTree.rootsTree.root
+        };
+        for (let index = 0; index < credentials.length; index++) {
+            const credential = credentials[index];
+            // credential must have a bjj signature proof
+            const coreClaim = await credential.getCoreClaimFromProof(ProofType.BJJSignature);
+            if (!coreClaim) {
+                throw new Error('credential must have coreClaim representation in the signature proof');
+            }
+            await this._storage.mt.addToMerkleTree(issuerDID.toString(), MerkleTreeType.Claims, coreClaim.hIndex(), coreClaim.hValue());
+        }
+        const newIssuerTreeState = await this.getDIDTreeModel(issuerDID);
+        await this._storage.mt.addToMerkleTree(issuerDID.toString(), MerkleTreeType.Roots, newIssuerTreeState.claimsTree.root.bigInt(), BigInt(0));
+        const newIssuerTreeStateWithROR = await this.getDIDTreeModel(issuerDID);
+        return {
+            credentials,
+            newTreeState: {
+                revocationRoot: newIssuerTreeStateWithROR.revocationTree.root,
+                claimsRoot: newIssuerTreeStateWithROR.claimsTree.root,
+                state: newIssuerTreeStateWithROR.state,
+                rootOfRoots: newIssuerTreeStateWithROR.rootsTree.root
+            },
+            oldTreeState: oldTreeState
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.generateIden3SparseMerkleTreeProof} */
+    async generateIden3SparseMerkleTreeProof(issuerDID, credentials, txId, blockNumber, blockTimestamp) {
+        for (let index = 0; index < credentials.length; index++) {
+            const credential = credentials[index];
+            const mtpWithProof = await this.generateCredentialMtp(issuerDID, credential);
+            // credential must have a bjj signature proof
+            const coreClaim = credential.getCoreClaimFromProof(ProofType.BJJSignature);
+            if (!coreClaim) {
+                throw new Error('credential must have coreClaim representation in the signature proof');
+            }
+            const mtpProof = new Iden3SparseMerkleTreeProof({
+                type: ProofType.Iden3SparseMerkleTreeProof,
+                mtp: mtpWithProof.proof,
+                issuerData: new IssuerData({
+                    id: issuerDID.toString(),
+                    state: {
+                        claimsTreeRoot: mtpWithProof.treeState.claimsRoot.hex(),
+                        revocationTreeRoot: mtpWithProof.treeState.revocationRoot.hex(),
+                        rootOfRoots: mtpWithProof.treeState.rootOfRoots.hex(),
+                        value: mtpWithProof.treeState.state.hex(),
+                        txId,
+                        blockNumber,
+                        blockTimestamp
+                    },
+                    mtp: mtpWithProof.proof
+                }),
+                coreClaim: coreClaim.hex()
+            });
+            if (Array.isArray(credentials[index].proof)) {
+                credentials[index].proof.push(mtpProof);
+            }
+            else {
+                credentials[index].proof = mtpProof;
+            }
+        }
+        return credentials;
+    }
+    /** {@inheritDoc IIdentityWallet.publishStateToRHS} */
+    async publishStateToRHS(issuerDID, rhsURL, revokedNonces) {
+        const treeState = await this.getDIDTreeModel(issuerDID);
+        await pushHashesToRHS(treeState.state, {
+            revocationTree: treeState.revocationTree,
+            claimsTree: treeState.claimsTree,
+            state: treeState.state,
+            rootsTree: treeState.rootsTree
+        }, rhsURL, revokedNonces);
+    }
+    getKMSIdByAuthCredential(credential) {
+        if (credential.type.indexOf('AuthBJJCredential') === -1) {
+            throw new Error("can't sign with not AuthBJJCredential credential");
+        }
+        const x = credential.credentialSubject['x'];
+        const y = credential.credentialSubject['y'];
+        const pb = new PublicKey([BigInt(x), BigInt(y)]);
+        const kp = keyPath(KmsKeyType.BabyJubJub, pb.hex());
+        return { type: KmsKeyType.BabyJubJub, id: kp };
+    }
+    defineMTRootPosition(schema, position) {
+        if (schema.$metadata?.serialization) {
+            return '';
+        }
+        if (position) {
+            return position;
+        }
+        return MerklizedRootPosition.Index;
+    }
+    async getCoreClaimFromCredential(credential) {
+        const coreClaimFromSigProof = credential.getCoreClaimFromProof(ProofType.BJJSignature);
+        const coreClaimFromMtpProof = credential.getCoreClaimFromProof(ProofType.Iden3SparseMerkleTreeProof);
+        if (coreClaimFromMtpProof &&
+            coreClaimFromSigProof &&
+            coreClaimFromMtpProof.hex() !== coreClaimFromSigProof.hex()) {
+            throw new Error('core claim representations is set in both proofs but they are not equal');
+        }
+        if (!coreClaimFromMtpProof && !coreClaimFromSigProof) {
+            throw new Error('core claim is not set in credential proofs');
+        }
+        //eslint-disable-next-line  @typescript-eslint/no-non-null-assertion
+        const coreClaim = coreClaimFromMtpProof ?? coreClaimFromSigProof;
+        return coreClaim;
+    }
+}
+//# sourceMappingURL=identity-wallet.js.map

package/dist/esm/identity/identity-wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-wallet.js","sourceRoot":"","sources":["../../../src/identity/identity-wallet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnD,OAAO,EACL,UAAU,EACV,YAAY,EACZ,WAAW,EACX,KAAK,EACL,YAAY,EACZ,GAAG,EACH,SAAS,EACT,gBAAgB,EAChB,EAAE,EACF,SAAS,EACT,UAAU,EACX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAc,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EACL,mBAAmB,EAEnB,qBAAqB,EACrB,eAAe,EACf,aAAa,EAEb,0BAA0B,EAC1B,SAAS,EACT,UAAU,EACX,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,eAAe,EAAc,MAAM,2BAA2B,CAAC;AA6NxE;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,cAAc;IACzB;;;;;;;OAOG;IACH,YACmB,IAAS,EACT,QAAsB,EACtB,iBAAoC;QAFpC,SAAI,GAAJ,IAAI,CAAK;QACT,aAAQ,GAAR,QAAQ,CAAc;QACtB,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAe,EACf,IAA8B;QAE9B,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAEhC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;QAEhE,IAAI,CAAC,IAAI,EAAE;YACT,IAAI,GAAG;gBACL,MAAM,EAAE,SAAS,CAAC,KAAK;gBACvB,UAAU,EAAE,UAAU,CAAC,OAAO;gBAC9B,SAAS,EAAE,SAAS,CAAC,MAAM;aAC5B,CAAC;SACH;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,UAAU,CAAC,cAAc,CAAC;QAE7C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAC9B,UAAU,EACV,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACxD,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAC5C,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,CAAC;QACnB,SAAS,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE/C,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,CACpC,aAAa,EACb,cAAc,CAAC,MAAM,EACrB,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,EACnB,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CACpB,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CACxE,aAAa,EACb,cAAc,CAAC,MAAM,CACtB,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACxB,SAAS,CAAC,MAAM,EAAE;YAClB,SAAS,CAAC,MAAM,EAAE;SACnB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAExC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,6BAA6B,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAEpF,MAAM,QAAQ,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,MAAM,OAAO,GAAsB;YACjC,gBAAgB,EAAE,mBAAmB,CAAC,IAAI,CAAC,mCAAmC;YAC9E,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,wBAAwB;YACvD,iBAAiB,EAAE;gBACjB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;gBACzB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;aAC1B;YACD,eAAe,EAAE,oBAAoB,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAChE,OAAO,EAAE,CAAC;YACV,UAAU;YACV,QAAQ,EAAE,QAAQ;SACnB,CAAC;QAEF,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAErC,IAAI,UAAU,GAAkB,IAAI,aAAa,EAAE,CAAC;QACpD,IAAI;YACF,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAClD,OAAO,EACP,GAAG,EACH,OAAO,EACP,MAAM,EACN,IAAI,CAAC,MAAM,CACZ,CAAC;SACH;QAAC,OAAO,CAAC,EAAE;YACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;SACjD;QAED,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;QAEjC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAEzE,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAA+B,IAAI,0BAA0B,CAAC;YAC1E,IAAI,EAAE,SAAS,CAAC,0BAA0B;YAC1C,GAAG,EAAE,KAAK;YACV,UAAU,EAAE,IAAI,UAAU,CAAC;gBACzB,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE;gBAClB,KAAK,EAAE;oBACL,WAAW,EAAE,SAAS,CAAC,GAAG,EAAE;oBAC5B,kBAAkB,EAAE,SAAS,CAAC,GAAG,EAAE;oBACnC,cAAc,EAAE,aAAa;oBAC7B,KAAK,EAAE,QAAQ;iBAChB;gBACD,aAAa,EAAE,SAAS,CAAC,GAAG,EAAE;gBAC9B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,GAAG,EAAE,KAAK;aACX,CAAC;YACF,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAC;QAEH,UAAU,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;YACxC,UAAU,EAAE,GAAG,CAAC,QAAQ,EAAE;YAC1B,KAAK,EAAE,YAAY;YACnB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE9C,OAAO;YACL,GAAG;YACH,UAAU;SACX,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,KAAa,EAAE,QAAgB;QAC3D,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QAElB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,8BAA8B,CAClF,GAAG,CAAC,QAAQ,EAAE,CACf,CAAC;QAEF,MAAM,eAAe,GAAG,gBAAgB,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAClD,CAAC;QACF,IAAI,eAAe,EAAE;YACnB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;SACxE;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;YACvC,EAAE,EAAE,UAAU,CAAC,QAAQ,EAAE;YACzB,KAAK;YACL,iBAAiB,EAAE,GAAG,CAAC,QAAQ,EAAE;YACjC,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,WAAW,CAAC,OAAmB;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,eAAe,CAAC,GAAQ;QAC5B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CACxE,GAAG,CAAC,QAAQ,EAAE,EACd,cAAc,CAAC,MAAM,CACtB,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CAC5E,GAAG,CAAC,QAAQ,EAAE,EACd,cAAc,CAAC,WAAW,CAC3B,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CACvE,GAAG,CAAC,QAAQ,EAAE,EACd,cAAc,CAAC,KAAK,CACrB,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC;YAC5B,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACxB,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE;YAC5B,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK;YACL,UAAU;YACV,cAAc;YACd,SAAS;SACV,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,qBAAqB,CACzB,GAAQ,EACR,UAAyB,EACzB,SAAqB;QAErB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAEpE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CACxE,GAAG,CAAC,QAAQ,EAAE,EACd,cAAc,CAAC,MAAM,CACtB,CAAC;QAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,CAAC,aAAa,CAC9C,SAAS,CAAC,MAAM,EAAE,EAClB,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAC9D,CAAC;QAEF,OAAO;YACL,KAAK;YACL,SAAS,EAAE,SAAS,IAAI;gBACtB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI;gBACtC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;gBACtC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,IAAI;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,wBAAwB,CAC5B,GAAQ,EACR,UAAyB,EACzB,SAAqB;QAErB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAEpE,MAAM,QAAQ,GAAG,SAAS,CAAC,kBAAkB,EAAE,CAAC;QAEhD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CAC5E,GAAG,CAAC,QAAQ,EAAE,EACd,cAAc,CAAC,WAAW,CAC3B,CAAC;QAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,aAAa,CAClD,QAAQ,EACR,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CACtE,CAAC;QAEF,OAAO;YACL,KAAK;YACL,SAAS,EAAE,SAAS,IAAI;gBACtB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI;gBACtC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;gBACtC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,IAAI;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,IAAI,CAAC,OAAmB,EAAE,UAAyB;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAElF,OAAO,SAAS,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,UAAyB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAE3D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAEpF,OAAO,SAAS,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,eAAe,CACnB,SAAc,EACd,GAAsB,EACtB,OAAe,EACf,IAA6B;QAE7B,IAAI,CAAC,IAAI,EAAE;YACT,IAAI,GAAG;gBACL,OAAO,EAAE,EAAE;aACZ,CAAC;SACH;QACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAErF,MAAM,UAAU,GAAe,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAE5E,IAAI,UAAU,GAAkB,IAAI,aAAa,EAAE,CAAC;QAEpD,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;YACjB,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;SAClD;QACD,GAAG,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,IAAI,eAAe,CAAC,KAAK,CAAC;QAEnE,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAExB,IAAI;YACF,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAClD,OAAO,EACP,SAAS,EACT,GAAG,EACH,UAAU,EACV,IAAI,CAAC,OAAO,CACb,CAAC;SACH;QAAC,OAAO,CAAC,EAAE;YACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;SACjD;QAED,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAE7F,MAAM,aAAa,GAAqB;YACtC,QAAQ,EAAE,QAAQ;YAClB,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,qBAAqB,EAAE,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,qBAAqB,CAAC;YACvF,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,CAAC;SACX,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC,UAAU,CAC7C,UAAU,EACV,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,EAC3D,MAAM,EACN,aAAa,CACd,CAAC;QAEF,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QAEpC,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,uBAAuB,CAAC,CAAC;QAExE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QAExF,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;SAC3D;QACD,MAAM,eAAe,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAA+B,CAAC;QAEvF,MAAM,QAAQ,GAA0B;YACtC,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,UAAU,EAAE,IAAI,UAAU,CAAC;gBACzB,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE;gBACxB,KAAK,EAAE,eAAe,CAAC,UAAU,CAAC,KAAK;gBACvC,aAAa,EAAE,eAAe,CAAC,SAAS;gBACxC,GAAG,EAAE,eAAe,CAAC,GAAG;gBACxB,gBAAgB,EAAE,eAAe,CAAC,UAAU,CAAC,gBAAgB;aAC9D,CAAC;YACF,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE;YAC1B,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;SACvC,CAAC;QACF,UAAU,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE9B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,gBAAgB,CAAC,SAAc,EAAE,UAAyB;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEzD,MAAM,SAAS,GAAG,UAAU,CAAC,qBAAqB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAE3E,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;SACzF;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,kBAAkB,EAAE,CAAC;QAE7C,MAAM,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEtD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,0BAA0B,CAC9B,WAA4B,EAC5B,SAAc;QAEd,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5D,MAAM,YAAY,GAAc;YAC9B,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,IAAI;YACjD,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI;YACzC,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,WAAW,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;SAC1C,CAAC;QAEF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACvD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAEtC,6CAA6C;YAC7C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,qBAAqB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAEjF,IAAI,CAAC,SAAS,EAAE;gBACd,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;aACzF;YAED,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,CACpC,SAAS,CAAC,QAAQ,EAAE,EACpB,cAAc,CAAC,MAAM,EACrB,SAAS,CAAC,MAAM,EAAE,EAClB,SAAS,CAAC,MAAM,EAAE,CACnB,CAAC;SACH;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEjE,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,CACpC,SAAS,CAAC,QAAQ,EAAE,EACpB,cAAc,CAAC,KAAK,EACpB,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,EAC3C,MAAM,CAAC,CAAC,CAAC,CACV,CAAC;QACF,MAAM,yBAAyB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAExE,OAAO;YACL,WAAW;YACX,YAAY,EAAE;gBACZ,cAAc,EAAE,yBAAyB,CAAC,cAAc,CAAC,IAAI;gBAC7D,UAAU,EAAE,yBAAyB,CAAC,UAAU,CAAC,IAAI;gBACrD,KAAK,EAAE,yBAAyB,CAAC,KAAK;gBACtC,WAAW,EAAE,yBAAyB,CAAC,SAAS,CAAC,IAAI;aACtD;YACD,YAAY,EAAE,YAAY;SAC3B,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,kCAAkC,CACtC,SAAc,EACd,WAA4B,EAC5B,IAAY,EACZ,WAAoB,EACpB,cAAuB;QAEvB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACvD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAEtC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAE7E,6CAA6C;YAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,qBAAqB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAE3E,IAAI,CAAC,SAAS,EAAE;gBACd,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;aACzF;YAED,MAAM,QAAQ,GAA+B,IAAI,0BAA0B,CAAC;gBAC1E,IAAI,EAAE,SAAS,CAAC,0BAA0B;gBAC1C,GAAG,EAAE,YAAY,CAAC,KAAK;gBACvB,UAAU,EAAE,IAAI,UAAU,CAAC;oBACzB,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE;oBACxB,KAAK,EAAE;wBACL,cAAc,EAAE,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE;wBACvD,kBAAkB,EAAE,YAAY,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE;wBAC/D,WAAW,EAAE,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE;wBACrD,KAAK,EAAE,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE;wBACzC,IAAI;wBACJ,WAAW;wBACX,cAAc;qBACf;oBACD,GAAG,EAAE,YAAY,CAAC,KAAK;iBACxB,CAAC;gBACF,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE;aAC3B,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE;gBAC1C,WAAW,CAAC,KAAK,CAAC,CAAC,KAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aACxD;iBAAM;gBACL,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC;aACrC;SACF;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,iBAAiB,CAAC,SAAc,EAAE,MAAc,EAAE,aAAwB;QAC9E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAExD,MAAM,eAAe,CACnB,SAAS,CAAC,KAAK,EACf;YACE,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,EACD,MAAM,EACN,aAAa,CACd,CAAC;IACJ,CAAC;IAEO,wBAAwB,CAAC,UAAyB;QACxD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE;YACvD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;SACrE;QACD,MAAM,CAAC,GAAG,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAsB,CAAC;QACjE,MAAM,CAAC,GAAG,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAsB,CAAC;QAEjE,MAAM,EAAE,GAAc,IAAI,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAEO,oBAAoB,CAAC,MAAkB,EAAE,QAAiB;QAChE,IAAI,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE;YACnC,OAAO,EAAE,CAAC;SACX;QACD,IAAI,QAAQ,EAAE;YACZ,OAAO,QAAQ,CAAC;SACjB;QACD,OAAO,qBAAqB,CAAC,KAAK,CAAC;IACrC,CAAC;IAEM,KAAK,CAAC,0BAA0B,CAAC,UAAyB;QAC/D,MAAM,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAEvF,MAAM,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAC5D,SAAS,CAAC,0BAA0B,CACrC,CAAC;QAEF,IACE,qBAAqB;YACrB,qBAAqB;YACrB,qBAAqB,CAAC,GAAG,EAAE,KAAK,qBAAqB,CAAC,GAAG,EAAE,EAC3D;YACA,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;SAC5F;QACD,IAAI,CAAC,qBAAqB,IAAI,CAAC,qBAAqB,EAAE;YACpD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC/D;QAED,oEAAoE;QACpE,MAAM,SAAS,GAAG,qBAAqB,IAAI,qBAAsB,CAAC;QAElE,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/esm/identity/index.js

@@ -0,0 +1,3 @@
+export * from './identity-wallet';
+export * from '../auth/auth';
+//# sourceMappingURL=index.js.map

package/dist/esm/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/identity/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC"}

package/dist/esm/index.js

@@ -0,0 +1,13 @@
+export * from './identity';
+export * from './credentials';
+export * from './kms';
+export * from './storage';
+export * from './verifiable';
+export * from './schema-processor';
+export * from './proof';
+export * from './iden3comm';
+export * from './circuits';
+export * from './loaders';
+import * as core from '@iden3/js-iden3-core';
+export { core };
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,OAAO,CAAC;AACtB,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,CAAC"}

package/dist/esm/kms/bjj-provider.js

@@ -0,0 +1,74 @@
+import { Hex, PrivateKey } from '@iden3/js-crypto';
+import { BytesHelper, checkBigIntInField } from '@iden3/js-iden3-core';
+import * as providerHelpers from './provider-helpers';
+/**
+ * Provider for Baby Jub Jub keys
+ * @beta
+ * @export
+ * @beta
+ * @class BjjProvider
+ * @implements implements IKeyProvider interface
+ */
+export class BjjProvider {
+    /**
+     * Creates an instance of BjjProvider.
+     * @param {KmsKeyType} keyType - kms key type
+     * @param {AbstractPrivateKeyStore} keyStore - key store for kms
+     */
+    constructor(keyType, keyStore) {
+        this.keyType = keyType;
+        this.keyStore = keyStore;
+    }
+    /**
+     * generates a baby jub jub key from a seed phrase
+     * @param {Uint8Array} seed - byte array seed
+     * @returns kms key identifier
+     */
+    async newPrivateKeyFromSeed(seed) {
+        const newKey = new Uint8Array(32);
+        newKey.set(Uint8Array.from(seed), 0);
+        newKey.fill(seed.length, 32, 0);
+        const privateKey = new PrivateKey(seed);
+        const publicKey = privateKey.public();
+        const kmsId = {
+            type: this.keyType,
+            id: providerHelpers.keyPath(this.keyType, publicKey.hex())
+        };
+        await this.keyStore.import({ alias: kmsId.id, key: privateKey.hex() });
+        return kmsId;
+    }
+    /**
+     * Gets public key by kmsKeyId
+     *
+     * @param {KmsKeyId} keyId - key identifier
+     */
+    async publicKey(keyId) {
+        const privateKey = await this.privateKey(keyId);
+        return privateKey.public();
+    }
+    /**
+     * signs prepared payload of size,
+     * with a key id
+     *
+     * @param {KmsKeyId} keyId  - key identifier
+     * @param {Uint8Array} data - data to sign (32 bytes)
+     * @returns Uint8Array signature
+     */
+    async sign(keyId, data) {
+        if (data.length != 32) {
+            throw new Error('data to sign is too large');
+        }
+        const i = BytesHelper.bytesToInt(data);
+        if (!checkBigIntInField(i)) {
+            throw new Error('data to sign is too large');
+        }
+        const privateKey = await this.privateKey(keyId);
+        const signature = privateKey.signPoseidon(i);
+        return signature.compress();
+    }
+    async privateKey(keyId) {
+        const privateKeyHex = await this.keyStore.get({ alias: keyId.id });
+        return new PrivateKey(Hex.decodeString(privateKeyHex));
+    }
+}
+//# sourceMappingURL=bjj-provider.js.map

package/dist/esm/kms/bjj-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bjj-provider.js","sourceRoot":"","sources":["../../../src/kms/bjj-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,UAAU,EAAa,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAIvE,OAAO,KAAK,eAAe,MAAM,oBAAoB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IAOtB;;;;OAIG;IACH,YAAY,OAAmB,EAAE,QAAiC;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,IAAgB;QAC1C,MAAM,MAAM,GAAe,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,UAAU,GAAe,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QAEpD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QAEtC,MAAM,KAAK,GAAG;YACZ,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,EAAE,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC;SAC3D,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAEvE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,KAAe;QAC7B,MAAM,UAAU,GAAe,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,IAAgB;QAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;SAC9C;QAED,MAAM,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE;YAC1B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;SAC9C;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE7C,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,KAAe;QACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnE,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/esm/kms/index.js

@@ -0,0 +1,4 @@
+export * from './kms';
+export * from './bjj-provider';
+export * from './store';
+//# sourceMappingURL=index.js.map

package/dist/esm/kms/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/kms/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAC;AACtB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC"}

package/dist/esm/kms/kms.js

@@ -0,0 +1,70 @@
+/**
+ * Key management system class contains different key providers.
+ * allows to register custom provider, create key, get public key and sign
+ *
+ * @beta
+ * @export
+ * @class KMS - class
+ */
+export class KMS {
+    constructor() {
+        this.registry = {
+            BJJ: null,
+            ETH: null
+        };
+    }
+    /**
+     * register key provider in the KMS
+     *
+     * @param {KmsKeyType} keyType - kms key type
+     * @param {IKeyProvider} keyProvider - key provider implementation
+     */
+    registerKeyProvider(keyType, keyProvider) {
+        if (this.registry[keyType]) {
+            throw new Error('present keyType');
+        }
+        this.registry[keyType] = keyProvider;
+    }
+    /**
+     * generates a new key and returns it kms key id
+     *
+     * @param {KmsKeyType} keyType
+     * @param {Uint8Array} bytes
+     * @returns kms key id
+     */
+    async createKeyFromSeed(keyType, bytes) {
+        const keyProvider = this.registry[keyType];
+        if (!keyProvider) {
+            throw new Error(`keyProvider not found for: ${keyType}`);
+        }
+        return keyProvider.newPrivateKeyFromSeed(bytes);
+    }
+    /**
+     * gets public key for key id
+     *
+     * @param {KmsKeyId} keyId -- key id
+     * @returns public key
+     */
+    async publicKey(keyId) {
+        const keyProvider = this.registry[keyId.type];
+        if (!keyProvider) {
+            throw new Error(`keyProvider not found for: ${keyId.type}`);
+        }
+        return keyProvider.publicKey(keyId);
+    }
+    /**
+     * sign Uint8Array with giv KmsKeyIden
+     *
+     * @param {KmsKeyId} keyId - key id
+     * @param {Uint8Array} data - prepared data bytes
+     * @returns `Promise<Uint8Array>` - return signature
+     */
+    async sign(keyId, data) {
+        const keyProvider = this.registry[keyId.type];
+        if (!keyProvider) {
+            throw new Error(`keyProvider not found for: ${keyId.type}`);
+        }
+        return keyProvider.sign(keyId, data);
+    }
+}
+//# sourceMappingURL=kms.js.map

package/dist/esm/kms/kms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kms.js","sourceRoot":"","sources":["../../../src/kms/kms.ts"],"names":[],"mappings":"AAuCA;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG;IAAhB;QACU,aAAQ,GAEZ;YACF,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,IAAI;SACV,CAAC;IA4DJ,CAAC;IA1DC;;;;;OAKG;IACH,mBAAmB,CAAC,OAAmB,EAAE,WAAyB;QAChE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;YAC1B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;SACpC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAmB,EAAE,KAAiB;QAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;SAC1D;QACD,OAAO,WAAW,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,KAAe;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;SAC7D;QAED,OAAO,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,IAAgB;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;SAC7D;QAED,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/esm/kms/provider-helpers.js

@@ -0,0 +1,44 @@
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const { randomBytes } = require('crypto');
+/**
+ * builds key path
+ *
+ * @export
+ * @param {KmsKeyType} keyType - key type
+ * @param {string} keyID - key id
+ * @returns string path
+ */
+export function keyPath(keyType, keyID) {
+    const basePath = '';
+    return basePath + String(keyType) + ':' + keyID;
+}
+/**
+ * generates Uint8Array with random bytes of size n
+ *
+ * @export
+ * @param {number} n - size of array
+ * @returns Uint8Array
+ */
+export function getRandomBytes(n) {
+    let array = new Uint8Array(n);
+    const isBrowser = typeof window !== 'undefined';
+    if (isBrowser) {
+        // Browser
+        if (typeof globalThis.crypto !== 'undefined') {
+            // Supported
+            globalThis.crypto.getRandomValues(array);
+        }
+        else {
+            // fallback
+            for (let i = 0; i < n; i++) {
+                array[i] = (Math.random() * 4294967296) >>> 0;
+            }
+        }
+    }
+    else {
+        // NodeJS
+        array = randomBytes(32);
+    }
+    return array;
+}
+//# sourceMappingURL=provider-helpers.js.map