@0xpolygonid/js-sdk 1.0.0-beta.0

package/dist/cjs/identity/identity-wallet.js

@@ -0,0 +1,422 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityWallet = void 0;
+const kms_1 = require("../kms");
+const js_iden3_core_1 = require("@iden3/js-iden3-core");
+const js_crypto_1 = require("@iden3/js-crypto");
+const js_merkletree_1 = require("@iden3/js-merkletree");
+const common_1 = require("./common");
+const uuid = __importStar(require("uuid"));
+const schema_processor_1 = require("../schema-processor");
+const mt_1 = require("../storage/entities/mt");
+const provider_helpers_1 = require("../kms/provider-helpers");
+const loaders_1 = require("../loaders");
+const verifiable_1 = require("../verifiable");
+const revocation_1 = require("../credentials/revocation");
+/**
+ * @public
+ * Wallet instance to manage the digital identity based on iden3 protocol
+ * allows to: create identity/profile, sign payloads (bigint / bytes), generate keys,
+ * generate Merkle tree proofs of inclusion / non-inclusion to Merkle trees, issue credentials with a BJJSignature and Iden3SparseMerkleTree Proofs,
+ * revoke credentials, add credentials to Merkle trees, push states to reverse hash service
+ *
+ *
+ * @export
+ * @beta
+ * @class IdentityWallet - class
+ * @beta
+ * @implements implements IIdentityWallet interface
+ */
+class IdentityWallet {
+    /**
+     * Constructs a new instance of the `IdentityWallet` class
+     *
+     * @param {KMS} _kms - Key Management System that allows signing data with BJJ key
+     * @param {IDataStorage} _storage - data storage to access credential / identity / Merkle tree data
+     * @param {ICredentialWallet} _credentialWallet - credential wallet instance to quickly access credential CRUD functionality
+     * @public
+     */
+    constructor(_kms, _storage, _credentialWallet) {
+        this._kms = _kms;
+        this._storage = _storage;
+        this._credentialWallet = _credentialWallet;
+    }
+    /**
+     * {@inheritDoc IIdentityWallet.createIdentity}
+     */
+    async createIdentity(hostUrl, opts) {
+        const tmpIdentifier = uuid.v4();
+        await this._storage.mt.createIdentityMerkleTrees(tmpIdentifier);
+        if (!opts) {
+            opts = {
+                method: js_iden3_core_1.DidMethod.Iden3,
+                blockchain: js_iden3_core_1.Blockchain.Polygon,
+                networkId: js_iden3_core_1.NetworkId.Mumbai
+            };
+        }
+        opts.seed = opts.seed ?? (0, provider_helpers_1.getRandomBytes)(32);
+        const keyID = await this._kms.createKeyFromSeed(kms_1.KmsKeyType.BabyJubJub, opts.seed);
+        const pubKey = await this._kms.publicKey(keyID);
+        const schemaHash = js_iden3_core_1.SchemaHash.authSchemaHash;
+        const authClaim = js_iden3_core_1.Claim.newClaim(schemaHash, js_iden3_core_1.ClaimOptions.withIndexDataInts(pubKey.p[0], pubKey.p[1]), js_iden3_core_1.ClaimOptions.withRevocationNonce(BigInt(0)));
+        const revNonce = 0;
+        authClaim.setRevocationNonce(BigInt(revNonce));
+        await this._storage.mt.addToMerkleTree(tmpIdentifier, mt_1.MerkleTreeType.Claims, authClaim.hiHv().hi, authClaim.hiHv().hv);
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(tmpIdentifier, mt_1.MerkleTreeType.Claims);
+        const currentState = await (0, js_merkletree_1.hashElems)([
+            claimsTree.root.bigInt(),
+            js_merkletree_1.ZERO_HASH.bigInt(),
+            js_merkletree_1.ZERO_HASH.bigInt()
+        ]);
+        const didType = (0, js_iden3_core_1.buildDIDType)(opts.method, opts.blockchain, opts.networkId);
+        const identifier = js_iden3_core_1.Id.idGenesisFromIdenState(didType, currentState.bigInt());
+        const did = js_iden3_core_1.DID.parseFromId(identifier);
+        await this._storage.mt.bindMerkleTreeToNewIdentifier(tmpIdentifier, did.toString());
+        const schema = JSON.parse(verifiable_1.VerifiableConstants.AUTH.AUTH_BJJ_CREDENTIAL_SCHEMA_JSON);
+        const authData = authClaim.getExpirationDate();
+        const expiration = authData ? (0, js_iden3_core_1.getUnixTimestamp)(authData) : 0;
+        const request = {
+            credentialSchema: verifiable_1.VerifiableConstants.AUTH.AUTH_BJJ_CREDENTIAL_SCHEMA_JSON_URL,
+            type: verifiable_1.VerifiableConstants.AUTH.AUTH_BJJ_CREDENTIAL_TYPE,
+            credentialSubject: {
+                x: pubKey.p[0].toString(),
+                y: pubKey.p[1].toString()
+            },
+            subjectPosition: (0, common_1.subjectPositionIndex)(authClaim.getIdPosition()),
+            version: 0,
+            expiration,
+            revNonce: revNonce
+        };
+        hostUrl = hostUrl.replace(/\/$/, '');
+        let credential = new verifiable_1.W3CCredential();
+        try {
+            credential = this._credentialWallet.createCredential(hostUrl, did, request, schema, opts.rhsUrl);
+        }
+        catch (e) {
+            throw new Error('Error create Iden3Credential');
+        }
+        const index = authClaim.hIndex();
+        const { proof } = await claimsTree.generateProof(index, claimsTree.root);
+        const claimsTreeHex = claimsTree.root.hex();
+        const stateHex = currentState.hex();
+        const mtpProof = new verifiable_1.Iden3SparseMerkleTreeProof({
+            type: verifiable_1.ProofType.Iden3SparseMerkleTreeProof,
+            mtp: proof,
+            issuerData: new verifiable_1.IssuerData({
+                id: did.toString(),
+                state: {
+                    rootOfRoots: js_merkletree_1.ZERO_HASH.hex(),
+                    revocationTreeRoot: js_merkletree_1.ZERO_HASH.hex(),
+                    claimsTreeRoot: claimsTreeHex,
+                    value: stateHex
+                },
+                authCoreClaim: authClaim.hex(),
+                credentialStatus: credential.credentialStatus,
+                mtp: proof
+            }),
+            coreClaim: authClaim.hex()
+        });
+        credential.proof = [mtpProof];
+        await this._storage.identity.saveIdentity({
+            identifier: did.toString(),
+            state: currentState,
+            published: false,
+            genesis: true
+        });
+        await this._credentialWallet.save(credential);
+        return {
+            did,
+            credential
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.createProfile} */
+    async createProfile(did, nonce, verifier) {
+        const id = did.id;
+        const identityProfiles = await this._storage.identity.getProfilesByGenesisIdentifier(did.toString());
+        const existingProfile = identityProfiles.find((p) => p.nonce == nonce || p.verifier == verifier);
+        if (existingProfile) {
+            throw new Error('profile with given nonce or verifier already exists');
+        }
+        const profile = js_iden3_core_1.Id.profileId(id, BigInt(nonce));
+        const profileDID = js_iden3_core_1.DID.parseFromId(profile);
+        await this._storage.identity.saveProfile({
+            id: profileDID.toString(),
+            nonce,
+            genesisIdentifier: did.toString(),
+            verifier
+        });
+        return profileDID;
+    }
+    /** {@inheritDoc IIdentityWallet.generateKey} */
+    async generateKey(keyType) {
+        const key = await this._kms.createKeyFromSeed(keyType, (0, provider_helpers_1.getRandomBytes)(32));
+        return key;
+    }
+    /** {@inheritDoc IIdentityWallet.getDIDTreeModel} */
+    async getDIDTreeModel(did) {
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), mt_1.MerkleTreeType.Claims);
+        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), mt_1.MerkleTreeType.Revocations);
+        const rootsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), mt_1.MerkleTreeType.Roots);
+        const state = await (0, js_merkletree_1.hashElems)([
+            claimsTree.root.bigInt(),
+            revocationTree.root.bigInt(),
+            rootsTree.root.bigInt()
+        ]);
+        return {
+            state,
+            claimsTree,
+            revocationTree,
+            rootsTree
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.generateClaimMtp} */
+    async generateCredentialMtp(did, credential, treeState) {
+        const coreClaim = await this.getCoreClaimFromCredential(credential);
+        const treesModel = await this.getDIDTreeModel(did);
+        const claimsTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), mt_1.MerkleTreeType.Claims);
+        const { proof } = await claimsTree.generateProof(coreClaim.hIndex(), treeState ? treeState.claimsRoot : treesModel.claimsTree.root);
+        return {
+            proof,
+            treeState: treeState ?? {
+                state: treesModel.state,
+                claimsRoot: treesModel.claimsTree.root,
+                rootOfRoots: treesModel.rootsTree.root,
+                revocationRoot: treesModel.revocationTree.root
+            }
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.generateNonRevocationMtp} */
+    async generateNonRevocationMtp(did, credential, treeState) {
+        const coreClaim = await this.getCoreClaimFromCredential(credential);
+        const revNonce = coreClaim.getRevocationNonce();
+        const treesModel = await this.getDIDTreeModel(did);
+        const revocationTree = await this._storage.mt.getMerkleTreeByIdentifierAndType(did.toString(), mt_1.MerkleTreeType.Revocations);
+        const { proof } = await revocationTree.generateProof(revNonce, treeState ? treeState.revocationRoot : treesModel.revocationTree.root);
+        return {
+            proof,
+            treeState: treeState ?? {
+                state: treesModel.state,
+                claimsRoot: treesModel.claimsTree.root,
+                rootOfRoots: treesModel.rootsTree.root,
+                revocationRoot: treesModel.revocationTree.root
+            }
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.sign} */
+    async sign(message, credential) {
+        const keyKMSId = this.getKMSIdByAuthCredential(credential);
+        const payload = js_crypto_1.poseidon.hashBytes(message);
+        const signature = await this._kms.sign(keyKMSId, js_iden3_core_1.BytesHelper.intToBytes(payload));
+        return js_crypto_1.Signature.newFromCompressed(signature);
+    }
+    /** {@inheritDoc IIdentityWallet.signChallenge} */
+    async signChallenge(challenge, credential) {
+        const keyKMSId = this.getKMSIdByAuthCredential(credential);
+        const signature = await this._kms.sign(keyKMSId, js_iden3_core_1.BytesHelper.intToBytes(challenge));
+        return js_crypto_1.Signature.newFromCompressed(signature);
+    }
+    /** {@inheritDoc IIdentityWallet.issueCredential} */
+    async issueCredential(issuerDID, req, hostUrl, opts) {
+        if (!opts) {
+            opts = {
+                withRHS: ''
+            };
+        }
+        hostUrl = hostUrl.replace(/\/$/, '');
+        const schema = await new loaders_1.UniversalSchemaLoader('ipfs.io').load(req.credentialSchema);
+        const jsonSchema = JSON.parse(new TextDecoder().decode(schema));
+        let credential = new verifiable_1.W3CCredential();
+        let revNonce = 0;
+        if (!req.revNonce) {
+            req.revNonce = Math.round(Math.random() * 10000);
+        }
+        req.subjectPosition = req.subjectPosition ?? verifiable_1.SubjectPosition.Index;
+        revNonce = req.revNonce;
+        try {
+            credential = this._credentialWallet.createCredential(hostUrl, issuerDID, req, jsonSchema, opts.withRHS);
+        }
+        catch (e) {
+            throw new Error('Error create Iden3Credential');
+        }
+        const issuerAuthBJJCredential = await this._credentialWallet.getAuthBJJCredential(issuerDID);
+        const coreClaimOpts = {
+            revNonce: revNonce,
+            subjectPosition: req.subjectPosition,
+            merklizedRootPosition: this.defineMTRootPosition(jsonSchema, req.merklizedRootPosition),
+            updatable: false,
+            version: 0
+        };
+        const coreClaim = await new schema_processor_1.Parser().parseClaim(credential, `${jsonSchema.$metadata.uris['jsonLdContext']}#${req.type}`, schema, coreClaimOpts);
+        const { hi, hv } = coreClaim.hiHv();
+        const coreClaimHash = js_crypto_1.poseidon.hash([hi, hv]);
+        const keyKMSId = this.getKMSIdByAuthCredential(issuerAuthBJJCredential);
+        const signature = await this._kms.sign(keyKMSId, js_iden3_core_1.BytesHelper.intToBytes(coreClaimHash));
+        if (!issuerAuthBJJCredential.proof) {
+            throw new Error('issuer auth credential must have proof');
+        }
+        const mtpAuthBJJProof = issuerAuthBJJCredential.proof[0];
+        const sigProof = {
+            type: verifiable_1.ProofType.BJJSignature,
+            issuerData: new verifiable_1.IssuerData({
+                id: issuerDID.toString(),
+                state: mtpAuthBJJProof.issuerData.state,
+                authCoreClaim: mtpAuthBJJProof.coreClaim,
+                mtp: mtpAuthBJJProof.mtp,
+                credentialStatus: mtpAuthBJJProof.issuerData.credentialStatus
+            }),
+            coreClaim: coreClaim.hex(),
+            signature: js_crypto_1.Hex.encodeString(signature)
+        };
+        credential.proof = [sigProof];
+        return credential;
+    }
+    /** {@inheritDoc IIdentityWallet.revokeCredential} */
+    async revokeCredential(issuerDID, credential) {
+        const issuerTree = await this.getDIDTreeModel(issuerDID);
+        const coreClaim = credential.getCoreClaimFromProof(verifiable_1.ProofType.BJJSignature);
+        if (!coreClaim) {
+            throw new Error('credential must have coreClaim representation in the signature proof');
+        }
+        const nonce = coreClaim.getRevocationNonce();
+        await issuerTree.revocationTree.add(nonce, BigInt(0));
+        return Number(BigInt.asUintN(64, nonce));
+    }
+    /** {@inheritDoc IIdentityWallet.addCredentialsToMerkleTree} */
+    async addCredentialsToMerkleTree(credentials, issuerDID) {
+        const oldIssuerTree = await this.getDIDTreeModel(issuerDID);
+        const oldTreeState = {
+            revocationRoot: oldIssuerTree.revocationTree.root,
+            claimsRoot: oldIssuerTree.claimsTree.root,
+            state: oldIssuerTree.state,
+            rootOfRoots: oldIssuerTree.rootsTree.root
+        };
+        for (let index = 0; index < credentials.length; index++) {
+            const credential = credentials[index];
+            // credential must have a bjj signature proof
+            const coreClaim = await credential.getCoreClaimFromProof(verifiable_1.ProofType.BJJSignature);
+            if (!coreClaim) {
+                throw new Error('credential must have coreClaim representation in the signature proof');
+            }
+            await this._storage.mt.addToMerkleTree(issuerDID.toString(), mt_1.MerkleTreeType.Claims, coreClaim.hIndex(), coreClaim.hValue());
+        }
+        const newIssuerTreeState = await this.getDIDTreeModel(issuerDID);
+        await this._storage.mt.addToMerkleTree(issuerDID.toString(), mt_1.MerkleTreeType.Roots, newIssuerTreeState.claimsTree.root.bigInt(), BigInt(0));
+        const newIssuerTreeStateWithROR = await this.getDIDTreeModel(issuerDID);
+        return {
+            credentials,
+            newTreeState: {
+                revocationRoot: newIssuerTreeStateWithROR.revocationTree.root,
+                claimsRoot: newIssuerTreeStateWithROR.claimsTree.root,
+                state: newIssuerTreeStateWithROR.state,
+                rootOfRoots: newIssuerTreeStateWithROR.rootsTree.root
+            },
+            oldTreeState: oldTreeState
+        };
+    }
+    /** {@inheritDoc IIdentityWallet.generateIden3SparseMerkleTreeProof} */
+    async generateIden3SparseMerkleTreeProof(issuerDID, credentials, txId, blockNumber, blockTimestamp) {
+        for (let index = 0; index < credentials.length; index++) {
+            const credential = credentials[index];
+            const mtpWithProof = await this.generateCredentialMtp(issuerDID, credential);
+            // credential must have a bjj signature proof
+            const coreClaim = credential.getCoreClaimFromProof(verifiable_1.ProofType.BJJSignature);
+            if (!coreClaim) {
+                throw new Error('credential must have coreClaim representation in the signature proof');
+            }
+            const mtpProof = new verifiable_1.Iden3SparseMerkleTreeProof({
+                type: verifiable_1.ProofType.Iden3SparseMerkleTreeProof,
+                mtp: mtpWithProof.proof,
+                issuerData: new verifiable_1.IssuerData({
+                    id: issuerDID.toString(),
+                    state: {
+                        claimsTreeRoot: mtpWithProof.treeState.claimsRoot.hex(),
+                        revocationTreeRoot: mtpWithProof.treeState.revocationRoot.hex(),
+                        rootOfRoots: mtpWithProof.treeState.rootOfRoots.hex(),
+                        value: mtpWithProof.treeState.state.hex(),
+                        txId,
+                        blockNumber,
+                        blockTimestamp
+                    },
+                    mtp: mtpWithProof.proof
+                }),
+                coreClaim: coreClaim.hex()
+            });
+            if (Array.isArray(credentials[index].proof)) {
+                credentials[index].proof.push(mtpProof);
+            }
+            else {
+                credentials[index].proof = mtpProof;
+            }
+        }
+        return credentials;
+    }
+    /** {@inheritDoc IIdentityWallet.publishStateToRHS} */
+    async publishStateToRHS(issuerDID, rhsURL, revokedNonces) {
+        const treeState = await this.getDIDTreeModel(issuerDID);
+        await (0, revocation_1.pushHashesToRHS)(treeState.state, {
+            revocationTree: treeState.revocationTree,
+            claimsTree: treeState.claimsTree,
+            state: treeState.state,
+            rootsTree: treeState.rootsTree
+        }, rhsURL, revokedNonces);
+    }
+    getKMSIdByAuthCredential(credential) {
+        if (credential.type.indexOf('AuthBJJCredential') === -1) {
+            throw new Error("can't sign with not AuthBJJCredential credential");
+        }
+        const x = credential.credentialSubject['x'];
+        const y = credential.credentialSubject['y'];
+        const pb = new js_crypto_1.PublicKey([BigInt(x), BigInt(y)]);
+        const kp = (0, provider_helpers_1.keyPath)(kms_1.KmsKeyType.BabyJubJub, pb.hex());
+        return { type: kms_1.KmsKeyType.BabyJubJub, id: kp };
+    }
+    defineMTRootPosition(schema, position) {
+        if (schema.$metadata?.serialization) {
+            return '';
+        }
+        if (position) {
+            return position;
+        }
+        return verifiable_1.MerklizedRootPosition.Index;
+    }
+    async getCoreClaimFromCredential(credential) {
+        const coreClaimFromSigProof = credential.getCoreClaimFromProof(verifiable_1.ProofType.BJJSignature);
+        const coreClaimFromMtpProof = credential.getCoreClaimFromProof(verifiable_1.ProofType.Iden3SparseMerkleTreeProof);
+        if (coreClaimFromMtpProof &&
+            coreClaimFromSigProof &&
+            coreClaimFromMtpProof.hex() !== coreClaimFromSigProof.hex()) {
+            throw new Error('core claim representations is set in both proofs but they are not equal');
+        }
+        if (!coreClaimFromMtpProof && !coreClaimFromSigProof) {
+            throw new Error('core claim is not set in credential proofs');
+        }
+        //eslint-disable-next-line  @typescript-eslint/no-non-null-assertion
+        const coreClaim = coreClaimFromMtpProof ?? coreClaimFromSigProof;
+        return coreClaim;
+    }
+}
+exports.IdentityWallet = IdentityWallet;
+//# sourceMappingURL=identity-wallet.js.map

package/dist/cjs/identity/identity-wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-wallet.js","sourceRoot":"","sources":["../../../src/identity/identity-wallet.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,gCAAmD;AACnD,wDAY8B;AAC9B,gDAAuE;AACvE,wDAA4D;AAE5D,qCAAgD;AAChD,2CAA6B;AAC7B,0DAA2E;AAE3E,+CAAwD;AACxD,8DAAkE;AAClE,wCAAmD;AACnD,8CAUuB;AAEvB,0DAAwE;AA6NxE;;;;;;;;;;;;;GAaG;AACH,MAAa,cAAc;IACzB;;;;;;;OAOG;IACH,YACmB,IAAS,EACT,QAAsB,EACtB,iBAAoC;QAFpC,SAAI,GAAJ,IAAI,CAAK;QACT,aAAQ,GAAR,QAAQ,CAAc;QACtB,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,OAAe,EACf,IAA8B;QAE9B,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAEhC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC;QAEhE,IAAI,CAAC,IAAI,EAAE;YACT,IAAI,GAAG;gBACL,MAAM,EAAE,yBAAS,CAAC,KAAK;gBACvB,UAAU,EAAE,0BAAU,CAAC,OAAO;gBAC9B,SAAS,EAAE,yBAAS,CAAC,MAAM;aAC5B,CAAC;SACH;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAA,iCAAc,EAAC,EAAE,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAU,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,0BAAU,CAAC,cAAc,CAAC;QAE7C,MAAM,SAAS,GAAG,qBAAK,CAAC,QAAQ,CAC9B,UAAU,EACV,4BAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACxD,4BAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAC5C,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,CAAC;QACnB,SAAS,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE/C,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,CACpC,aAAa,EACb,mBAAc,CAAC,MAAM,EACrB,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,EACnB,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CACpB,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CACxE,aAAa,EACb,mBAAc,CAAC,MAAM,CACtB,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,IAAA,yBAAS,EAAC;YACnC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACxB,yBAAS,CAAC,MAAM,EAAE;YAClB,yBAAS,CAAC,MAAM,EAAE;SACnB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAA,4BAAY,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,kBAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,mBAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAExC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,6BAA6B,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gCAAmB,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAEpF,MAAM,QAAQ,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAA,gCAAgB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,MAAM,OAAO,GAAsB;YACjC,gBAAgB,EAAE,gCAAmB,CAAC,IAAI,CAAC,mCAAmC;YAC9E,IAAI,EAAE,gCAAmB,CAAC,IAAI,CAAC,wBAAwB;YACvD,iBAAiB,EAAE;gBACjB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;gBACzB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;aAC1B;YACD,eAAe,EAAE,IAAA,6BAAoB,EAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAChE,OAAO,EAAE,CAAC;YACV,UAAU;YACV,QAAQ,EAAE,QAAQ;SACnB,CAAC;QAEF,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAErC,IAAI,UAAU,GAAkB,IAAI,0BAAa,EAAE,CAAC;QACpD,IAAI;YACF,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAClD,OAAO,EACP,GAAG,EACH,OAAO,EACP,MAAM,EACN,IAAI,CAAC,MAAM,CACZ,CAAC;SACH;QAAC,OAAO,CAAC,EAAE;YACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;SACjD;QAED,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;QAEjC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAEzE,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAA+B,IAAI,uCAA0B,CAAC;YAC1E,IAAI,EAAE,sBAAS,CAAC,0BAA0B;YAC1C,GAAG,EAAE,KAAK;YACV,UAAU,EAAE,IAAI,uBAAU,CAAC;gBACzB,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE;gBAClB,KAAK,EAAE;oBACL,WAAW,EAAE,yBAAS,CAAC,GAAG,EAAE;oBAC5B,kBAAkB,EAAE,yBAAS,CAAC,GAAG,EAAE;oBACnC,cAAc,EAAE,aAAa;oBAC7B,KAAK,EAAE,QAAQ;iBAChB;gBACD,aAAa,EAAE,SAAS,CAAC,GAAG,EAAE;gBAC9B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,GAAG,EAAE,KAAK;aACX,CAAC;YACF,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAC;QAEH,UAAU,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;YACxC,UAAU,EAAE,GAAG,CAAC,QAAQ,EAAE;YAC1B,KAAK,EAAE,YAAY;YACnB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE9C,OAAO;YACL,GAAG;YACH,UAAU;SACX,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,KAAa,EAAE,QAAgB;QAC3D,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QAElB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,8BAA8B,CAClF,GAAG,CAAC,QAAQ,EAAE,CACf,CAAC;QAEF,MAAM,eAAe,GAAG,gBAAgB,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAClD,CAAC;QACF,IAAI,eAAe,EAAE;YACnB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;SACxE;QAED,MAAM,OAAO,GAAG,kBAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,mBAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;YACvC,EAAE,EAAE,UAAU,CAAC,QAAQ,EAAE;YACzB,KAAK;YACL,iBAAiB,EAAE,GAAG,CAAC,QAAQ,EAAE;YACjC,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,WAAW,CAAC,OAAmB;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAA,iCAAc,EAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,eAAe,CAAC,GAAQ;QAC5B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CACxE,GAAG,CAAC,QAAQ,EAAE,EACd,mBAAc,CAAC,MAAM,CACtB,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CAC5E,GAAG,CAAC,QAAQ,EAAE,EACd,mBAAc,CAAC,WAAW,CAC3B,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CACvE,GAAG,CAAC,QAAQ,EAAE,EACd,mBAAc,CAAC,KAAK,CACrB,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAA,yBAAS,EAAC;YAC5B,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;YACxB,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE;YAC5B,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK;YACL,UAAU;YACV,cAAc;YACd,SAAS;SACV,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,qBAAqB,CACzB,GAAQ,EACR,UAAyB,EACzB,SAAqB;QAErB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAEpE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CACxE,GAAG,CAAC,QAAQ,EAAE,EACd,mBAAc,CAAC,MAAM,CACtB,CAAC;QAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,CAAC,aAAa,CAC9C,SAAS,CAAC,MAAM,EAAE,EAClB,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAC9D,CAAC;QAEF,OAAO;YACL,KAAK;YACL,SAAS,EAAE,SAAS,IAAI;gBACtB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI;gBACtC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;gBACtC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,IAAI;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,wBAAwB,CAC5B,GAAQ,EACR,UAAyB,EACzB,SAAqB;QAErB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAEpE,MAAM,QAAQ,GAAG,SAAS,CAAC,kBAAkB,EAAE,CAAC;QAEhD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,gCAAgC,CAC5E,GAAG,CAAC,QAAQ,EAAE,EACd,mBAAc,CAAC,WAAW,CAC3B,CAAC;QAEF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,aAAa,CAClD,QAAQ,EACR,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CACtE,CAAC;QAEF,OAAO;YACL,KAAK;YACL,SAAS,EAAE,SAAS,IAAI;gBACtB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI;gBACtC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;gBACtC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,IAAI;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,IAAI,CAAC,OAAmB,EAAE,UAAyB;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,oBAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAElF,OAAO,qBAAS,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,UAAyB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAE3D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAEpF,OAAO,qBAAS,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,eAAe,CACnB,SAAc,EACd,GAAsB,EACtB,OAAe,EACf,IAA6B;QAE7B,IAAI,CAAC,IAAI,EAAE;YACT,IAAI,GAAG;gBACL,OAAO,EAAE,EAAE;aACZ,CAAC;SACH;QACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,IAAI,+BAAqB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAErF,MAAM,UAAU,GAAe,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAE5E,IAAI,UAAU,GAAkB,IAAI,0BAAa,EAAE,CAAC;QAEpD,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;YACjB,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;SAClD;QACD,GAAG,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,IAAI,4BAAe,CAAC,KAAK,CAAC;QAEnE,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAExB,IAAI;YACF,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAClD,OAAO,EACP,SAAS,EACT,GAAG,EACH,UAAU,EACV,IAAI,CAAC,OAAO,CACb,CAAC;SACH;QAAC,OAAO,CAAC,EAAE;YACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;SACjD;QAED,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAE7F,MAAM,aAAa,GAAqB;YACtC,QAAQ,EAAE,QAAQ;YAClB,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,qBAAqB,EAAE,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,qBAAqB,CAAC;YACvF,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,CAAC;SACX,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,yBAAM,EAAE,CAAC,UAAU,CAC7C,UAAU,EACV,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,EAC3D,MAAM,EACN,aAAa,CACd,CAAC;QAEF,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QAEpC,MAAM,aAAa,GAAG,oBAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,uBAAuB,CAAC,CAAC;QAExE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QAExF,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;SAC3D;QACD,MAAM,eAAe,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAA+B,CAAC;QAEvF,MAAM,QAAQ,GAA0B;YACtC,IAAI,EAAE,sBAAS,CAAC,YAAY;YAC5B,UAAU,EAAE,IAAI,uBAAU,CAAC;gBACzB,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE;gBACxB,KAAK,EAAE,eAAe,CAAC,UAAU,CAAC,KAAK;gBACvC,aAAa,EAAE,eAAe,CAAC,SAAS;gBACxC,GAAG,EAAE,eAAe,CAAC,GAAG;gBACxB,gBAAgB,EAAE,eAAe,CAAC,UAAU,CAAC,gBAAgB;aAC9D,CAAC;YACF,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE;YAC1B,SAAS,EAAE,eAAG,CAAC,YAAY,CAAC,SAAS,CAAC;SACvC,CAAC;QACF,UAAU,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE9B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,gBAAgB,CAAC,SAAc,EAAE,UAAyB;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEzD,MAAM,SAAS,GAAG,UAAU,CAAC,qBAAqB,CAAC,sBAAS,CAAC,YAAY,CAAC,CAAC;QAE3E,IAAI,CAAC,SAAS,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;SACzF;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,kBAAkB,EAAE,CAAC;QAE7C,MAAM,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEtD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,0BAA0B,CAC9B,WAA4B,EAC5B,SAAc;QAEd,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5D,MAAM,YAAY,GAAc;YAC9B,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,IAAI;YACjD,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI;YACzC,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,WAAW,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;SAC1C,CAAC;QAEF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACvD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAEtC,6CAA6C;YAC7C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,qBAAqB,CAAC,sBAAS,CAAC,YAAY,CAAC,CAAC;YAEjF,IAAI,CAAC,SAAS,EAAE;gBACd,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;aACzF;YAED,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,CACpC,SAAS,CAAC,QAAQ,EAAE,EACpB,mBAAc,CAAC,MAAM,EACrB,SAAS,CAAC,MAAM,EAAE,EAClB,SAAS,CAAC,MAAM,EAAE,CACnB,CAAC;SACH;QAED,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEjE,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,CACpC,SAAS,CAAC,QAAQ,EAAE,EACpB,mBAAc,CAAC,KAAK,EACpB,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,EAC3C,MAAM,CAAC,CAAC,CAAC,CACV,CAAC;QACF,MAAM,yBAAyB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAExE,OAAO;YACL,WAAW;YACX,YAAY,EAAE;gBACZ,cAAc,EAAE,yBAAyB,CAAC,cAAc,CAAC,IAAI;gBAC7D,UAAU,EAAE,yBAAyB,CAAC,UAAU,CAAC,IAAI;gBACrD,KAAK,EAAE,yBAAyB,CAAC,KAAK;gBACtC,WAAW,EAAE,yBAAyB,CAAC,SAAS,CAAC,IAAI;aACtD;YACD,YAAY,EAAE,YAAY;SAC3B,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,kCAAkC,CACtC,SAAc,EACd,WAA4B,EAC5B,IAAY,EACZ,WAAoB,EACpB,cAAuB;QAEvB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACvD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAEtC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAE7E,6CAA6C;YAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,qBAAqB,CAAC,sBAAS,CAAC,YAAY,CAAC,CAAC;YAE3E,IAAI,CAAC,SAAS,EAAE;gBACd,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;aACzF;YAED,MAAM,QAAQ,GAA+B,IAAI,uCAA0B,CAAC;gBAC1E,IAAI,EAAE,sBAAS,CAAC,0BAA0B;gBAC1C,GAAG,EAAE,YAAY,CAAC,KAAK;gBACvB,UAAU,EAAE,IAAI,uBAAU,CAAC;oBACzB,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE;oBACxB,KAAK,EAAE;wBACL,cAAc,EAAE,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE;wBACvD,kBAAkB,EAAE,YAAY,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE;wBAC/D,WAAW,EAAE,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE;wBACrD,KAAK,EAAE,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE;wBACzC,IAAI;wBACJ,WAAW;wBACX,cAAc;qBACf;oBACD,GAAG,EAAE,YAAY,CAAC,KAAK;iBACxB,CAAC;gBACF,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE;aAC3B,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE;gBAC1C,WAAW,CAAC,KAAK,CAAC,CAAC,KAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aACxD;iBAAM;gBACL,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC;aACrC;SACF;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,iBAAiB,CAAC,SAAc,EAAE,MAAc,EAAE,aAAwB;QAC9E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAExD,MAAM,IAAA,4BAAe,EACnB,SAAS,CAAC,KAAK,EACf;YACE,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,EACD,MAAM,EACN,aAAa,CACd,CAAC;IACJ,CAAC;IAEO,wBAAwB,CAAC,UAAyB;QACxD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE;YACvD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;SACrE;QACD,MAAM,CAAC,GAAG,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAsB,CAAC;QACjE,MAAM,CAAC,GAAG,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAsB,CAAC;QAEjE,MAAM,EAAE,GAAc,IAAI,qBAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,IAAA,0BAAO,EAAC,gBAAU,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,gBAAU,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAEO,oBAAoB,CAAC,MAAkB,EAAE,QAAiB;QAChE,IAAI,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE;YACnC,OAAO,EAAE,CAAC;SACX;QACD,IAAI,QAAQ,EAAE;YACZ,OAAO,QAAQ,CAAC;SACjB;QACD,OAAO,kCAAqB,CAAC,KAAK,CAAC;IACrC,CAAC;IAEM,KAAK,CAAC,0BAA0B,CAAC,UAAyB;QAC/D,MAAM,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC,sBAAS,CAAC,YAAY,CAAC,CAAC;QAEvF,MAAM,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAC5D,sBAAS,CAAC,0BAA0B,CACrC,CAAC;QAEF,IACE,qBAAqB;YACrB,qBAAqB;YACrB,qBAAqB,CAAC,GAAG,EAAE,KAAK,qBAAqB,CAAC,GAAG,EAAE,EAC3D;YACA,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;SAC5F;QACD,IAAI,CAAC,qBAAqB,IAAI,CAAC,qBAAqB,EAAE;YACpD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC/D;QAED,oEAAoE;QACpE,MAAM,SAAS,GAAG,qBAAqB,IAAI,qBAAsB,CAAC;QAElE,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA/iBD,wCA+iBC"}

package/dist/cjs/identity/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./identity-wallet"), exports);
+__exportStar(require("../auth/auth"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/identity/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,+CAA6B"}

package/dist/cjs/index.js

@@ -0,0 +1,42 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.core = void 0;
+__exportStar(require("./identity"), exports);
+__exportStar(require("./credentials"), exports);
+__exportStar(require("./kms"), exports);
+__exportStar(require("./storage"), exports);
+__exportStar(require("./verifiable"), exports);
+__exportStar(require("./schema-processor"), exports);
+__exportStar(require("./proof"), exports);
+__exportStar(require("./iden3comm"), exports);
+__exportStar(require("./circuits"), exports);
+__exportStar(require("./loaders"), exports);
+const core = __importStar(require("@iden3/js-iden3-core"));
+exports.core = core;
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,gDAA8B;AAC9B,wCAAsB;AACtB,4CAA0B;AAC1B,+CAA6B;AAC7B,qDAAmC;AACnC,0CAAwB;AACxB,8CAA4B;AAC5B,6CAA2B;AAC3B,4CAA0B;AAC1B,2DAA6C;AACpC,oBAAI"}

package/dist/cjs/kms/bjj-provider.js

@@ -0,0 +1,101 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BjjProvider = void 0;
+const js_crypto_1 = require("@iden3/js-crypto");
+const js_iden3_core_1 = require("@iden3/js-iden3-core");
+const providerHelpers = __importStar(require("./provider-helpers"));
+/**
+ * Provider for Baby Jub Jub keys
+ * @beta
+ * @export
+ * @beta
+ * @class BjjProvider
+ * @implements implements IKeyProvider interface
+ */
+class BjjProvider {
+    /**
+     * Creates an instance of BjjProvider.
+     * @param {KmsKeyType} keyType - kms key type
+     * @param {AbstractPrivateKeyStore} keyStore - key store for kms
+     */
+    constructor(keyType, keyStore) {
+        this.keyType = keyType;
+        this.keyStore = keyStore;
+    }
+    /**
+     * generates a baby jub jub key from a seed phrase
+     * @param {Uint8Array} seed - byte array seed
+     * @returns kms key identifier
+     */
+    async newPrivateKeyFromSeed(seed) {
+        const newKey = new Uint8Array(32);
+        newKey.set(Uint8Array.from(seed), 0);
+        newKey.fill(seed.length, 32, 0);
+        const privateKey = new js_crypto_1.PrivateKey(seed);
+        const publicKey = privateKey.public();
+        const kmsId = {
+            type: this.keyType,
+            id: providerHelpers.keyPath(this.keyType, publicKey.hex())
+        };
+        await this.keyStore.import({ alias: kmsId.id, key: privateKey.hex() });
+        return kmsId;
+    }
+    /**
+     * Gets public key by kmsKeyId
+     *
+     * @param {KmsKeyId} keyId - key identifier
+     */
+    async publicKey(keyId) {
+        const privateKey = await this.privateKey(keyId);
+        return privateKey.public();
+    }
+    /**
+     * signs prepared payload of size,
+     * with a key id
+     *
+     * @param {KmsKeyId} keyId  - key identifier
+     * @param {Uint8Array} data - data to sign (32 bytes)
+     * @returns Uint8Array signature
+     */
+    async sign(keyId, data) {
+        if (data.length != 32) {
+            throw new Error('data to sign is too large');
+        }
+        const i = js_iden3_core_1.BytesHelper.bytesToInt(data);
+        if (!(0, js_iden3_core_1.checkBigIntInField)(i)) {
+            throw new Error('data to sign is too large');
+        }
+        const privateKey = await this.privateKey(keyId);
+        const signature = privateKey.signPoseidon(i);
+        return signature.compress();
+    }
+    async privateKey(keyId) {
+        const privateKeyHex = await this.keyStore.get({ alias: keyId.id });
+        return new js_crypto_1.PrivateKey(js_crypto_1.Hex.decodeString(privateKeyHex));
+    }
+}
+exports.BjjProvider = BjjProvider;
+//# sourceMappingURL=bjj-provider.js.map

package/dist/cjs/kms/bjj-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bjj-provider.js","sourceRoot":"","sources":["../../../src/kms/bjj-provider.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,gDAA8D;AAC9D,wDAAuE;AAIvE,oEAAsD;AAEtD;;;;;;;GAOG;AACH,MAAa,WAAW;IAOtB;;;;OAIG;IACH,YAAY,OAAmB,EAAE,QAAiC;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,IAAgB;QAC1C,MAAM,MAAM,GAAe,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,UAAU,GAAe,IAAI,sBAAU,CAAC,IAAI,CAAC,CAAC;QAEpD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QAEtC,MAAM,KAAK,GAAG;YACZ,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,EAAE,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC;SAC3D,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAEvE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,KAAe;QAC7B,MAAM,UAAU,GAAe,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,IAAgB;QAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;SAC9C;QAED,MAAM,CAAC,GAAG,2BAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAA,kCAAkB,EAAC,CAAC,CAAC,EAAE;YAC1B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;SAC9C;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE7C,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,KAAe;QACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnE,OAAO,IAAI,sBAAU,CAAC,eAAG,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AA7ED,kCA6EC"}

package/dist/cjs/kms/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./kms"), exports);
+__exportStar(require("./bjj-provider"), exports);
+__exportStar(require("./store"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/kms/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/kms/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wCAAsB;AACtB,iDAA+B;AAC/B,0CAAwB"}