@aztec/foundation 0.0.0-test.1 → 0.0.1-commit.1142ef1

package/dest/curves/bls12/point.js

@@ -0,0 +1,400 @@
+var _computedKey;
+/* eslint-disable camelcase */ import { bls12_381 } from '@noble/curves/bls12-381';
+import { inspect } from 'util';
+import { toBufferBE } from '../../bigint-buffer/index.js';
+import { randomBoolean } from '../../crypto/random/index.js';
+import { hexSchemaFor } from '../../schemas/utils.js';
+import { BufferReader, serializeToBuffer } from '../../serialize/index.js';
+import { bufferToHex, hexToBuffer } from '../../string/index.js';
+import { Fr } from '../bn254/field.js';
+import { BLS12Fq } from './field.js';
+_computedKey = inspect.custom;
+/**
+ * Represents a Point on an elliptic curve with x and y coordinates.
+ * The Point class provides methods for creating instances from different input types,
+ * converting instances to various output formats, and checking the equality of points.
+ * TODO(#7386): Clean up this class.
+ */ export class BLS12Point {
+    x;
+    y;
+    isInfinite;
+    static ZERO = new BLS12Point(BLS12Fq.ZERO, BLS12Fq.ZERO, true);
+    static ONE = new BLS12Point(new BLS12Fq(bls12_381.G1.CURVE.Gx), new BLS12Fq(bls12_381.G1.CURVE.Gy), false);
+    static SIZE_IN_BYTES = BLS12Fq.SIZE_IN_BYTES * 2;
+    static COMPRESSED_SIZE_IN_BYTES = BLS12Fq.SIZE_IN_BYTES;
+    static COMPRESSED_ZERO = setMask(Buffer.alloc(BLS12Fq.SIZE_IN_BYTES), {
+        infinity: true,
+        compressed: true
+    });
+    constructor(/**
+     * The point's x coordinate
+     */ x, /**
+     * The point's y coordinate
+     */ y, /**
+     * Whether the point is at infinity
+     */ isInfinite){
+        this.x = x;
+        this.y = y;
+        this.isInfinite = isInfinite;
+        if (!BLS12Point.isOnCurve(x, y)) {
+            throw new BLSPointNotOnCurveError(x, y);
+        }
+        if (isInfinite && !(x.equals(BLS12Fq.ZERO) && y.equals(BLS12Fq.ZERO))) {
+            throw new Error(`BLS12-381 G1 point ( ${x.toString()}, ${y.toString()} ) is not infinite.`);
+        }
+    }
+    toJSON() {
+        return this.toString();
+    }
+    [_computedKey]() {
+        return `BLS12Point {
+      x: ${inspect(this.x)},
+      y: ${inspect(this.y)},
+      isInfinite: ${inspect(this.isInfinite)},
+    }`;
+    }
+    static get schema() {
+        return hexSchemaFor(BLS12Point);
+    }
+    /**
+   * Generate a random Point instance.
+   *
+   * @returns A randomly generated Point instance.
+   */ static random() {
+        while(true){
+            try {
+                return BLS12Point.fromXAndSign(BLS12Fq.random(), randomBoolean());
+            } catch (e) {
+                if (!(e instanceof BLSPointNotOnCurveError)) {
+                    throw e;
+                }
+                continue;
+            }
+        }
+    }
+    /**
+   * Create a Point instance from a given buffer or BufferReader.
+   * The input 'buffer' should have exactly 96 bytes representing the x and y coordinates.
+   *
+   * @param buffer - The buffer or BufferReader containing the x and y coordinates of the point.
+   * @returns A Point instance.
+   */ static fromBuffer(buffer) {
+        const reader = BufferReader.asReader(buffer);
+        const [x, y] = [
+            BLS12Fq.fromBuffer(reader),
+            BLS12Fq.fromBuffer(reader)
+        ];
+        return new this(x, y, x.isZero() && y.isZero());
+    }
+    /**
+   * Create a Point instance from a hex-encoded string.
+   * The input should be prefixed with '0x' or not, and have exactly 128 hex characters representing the x and y coordinates.
+   * Throws an error if the input length is invalid or coordinate values are out of range.
+   *
+   * @param str - The hex-encoded string representing the Point coordinates.
+   * @returns A Point instance.
+   */ static fromString(str) {
+        return this.fromBuffer(hexToBuffer(str));
+    }
+    /**
+   * Create a compressed buffer instance from a point.
+   * @dev NOTE: The compression standard for BLS12-381 differs from BN curves. Instead of
+   * one is_positive flag, we have three flags to prepend:
+   * - is_compressed: indicator that the point is compressed
+   * - is_infinity: whether the point the point at infinity
+   * - is_greater: only set if is_compressed && !is_infinity && y > (p - 1)/2
+   * See https://github.com/arkworks-rs/algebra/blob/master/curves/bls12_381/src/curves/g1.rs -> serialize_with_mode() -> encoding
+   * and noble-curves/src/bls12-381.ts -> setMask()
+   * @dev Most of the logic below is taken from noble-curves/src/bls12-381.ts -> toBytes()
+   * @param point A BLS12Point instance.
+   * @returns The buffer containing the x coordinate and the flags of the y coordinate.
+   */ compress() {
+        if (this.isZero()) {
+            return BLS12Point.COMPRESSED_ZERO;
+        }
+        const isGreater = this.y.isNegative();
+        return setMask(toBufferBE(this.x.toBigInt(), BLS12Fq.SIZE_IN_BYTES), {
+            compressed: true,
+            sort: isGreater
+        });
+    }
+    /**
+   * Create a Point instance from a compressed buffer.
+   * @dev See compress() above for compression encoding for BLS12-381.
+   * @dev Most of the logic below is taken from noble-curves/src/bls12-381.ts -> fromBytes()
+   * @param buffer - The buffer containing the x coordinate and the flags of the y coordinate.
+   * @returns A BLS12Point instance.
+   */ static decompress(buffer) {
+        const { compressed, infinity, sort, value: decompressed } = parseMask(buffer);
+        if (decompressed.length === BLS12Fq.SIZE_IN_BYTES && compressed) {
+            const x = new BLS12Fq(decompressed);
+            if (infinity) {
+                if (!x.isZero()) {
+                    throw new Error('Non-empty compressed G1 point at infinity');
+                }
+                return new BLS12Point(x, BLS12Fq.ZERO, true);
+            }
+            let y = this.YFromX(x);
+            if (!y) {
+                throw new BLSPointNotOnCurveError(x);
+            }
+            if (y.isNegative() !== sort) {
+                y = y.negate();
+            }
+            return new BLS12Point(x, y, infinity);
+        } else {
+            throw new Error('Invalid compressed G1 point of BLS12-381');
+        }
+    }
+    /**
+   * Converts a Point to two BN254 Fr elements by storing its compressed form (48 bytes) as:
+   * +-------------------+------------------------+
+   * |      31 bytes     |         17 bytes       |
+   * +-------------------+------------------------+
+   * |  Field Element 1  |     Field Element 2    |
+   * |  [0][bytes 0-30]  |  [0...0][bytes 31-47]  |
+   * +-------------------+------------------------+
+   * Used in the rollup circuits to store blob commitments in the native field type. See blob.ts.
+   * @param point - A BLS12Point instance.
+   * @returns The point fields.
+   */ toBN254Fields() {
+        const compressed = this.compress();
+        return [
+            new Fr(compressed.subarray(0, 31)),
+            new Fr(compressed.subarray(31, 48))
+        ];
+    }
+    /**
+   * Creates a Point instance from 2 BN254 Fr fields as encoded in toBNFields() above.
+   * Used in the rollup circuits to store blob commitments in the native field type. See blob.ts.
+   * @param fields - The encoded BN254 fields.
+   * @returns The point fields.
+   */ static fromBN254Fields(fields) {
+        return BLS12Point.decompress(Buffer.concat([
+            fields[0].toBuffer().subarray(1),
+            fields[1].toBuffer().subarray(-17)
+        ]));
+    }
+    /**
+   * Creates a point from an array of 2 fields.
+   * @returns The point
+   */ static fromBLS12FqFields(fields) {
+        return new this(fields[0], fields[1], !fields[2].isEmpty());
+    }
+    /**
+   * Creates a point from @noble/curves projective point definition.
+   * @returns The point
+   */ static fromNobleProjectivePoint(point) {
+        const affine = point.toAffine();
+        return new BLS12Point(new BLS12Fq(affine.x), new BLS12Fq(affine.y), point.equals(bls12_381.G1.ProjectivePoint.ZERO));
+    }
+    /**
+   * Uses the x coordinate and isPositive flag (+/-) to reconstruct the point.
+   * @param x - The x coordinate of the point
+   * @param sign - The "sign" of the y coordinate - note that this is not a sign as is known in integer arithmetic.
+   * Instead it is a boolean flag that determines whether the y coordinate is <= (Fr.MODULUS - 1) / 2
+   * @returns The point as an array of 2 fields
+   */ static fromXAndSign(x, sign) {
+        const y = BLS12Point.YFromX(x);
+        if (y == null) {
+            throw new BLSPointNotOnCurveError(x);
+        }
+        const yPositiveBigInt = y.isNegative() ? BLS12Fq.MODULUS - y.toBigInt() : y.toBigInt();
+        const yNegativeBigInt = BLS12Fq.MODULUS - yPositiveBigInt;
+        // Choose the positive or negative root based on isPositive
+        const finalY = sign ? new BLS12Fq(yPositiveBigInt) : new BLS12Fq(yNegativeBigInt);
+        // Create and return the new Point
+        return new this(x, finalY, false);
+    }
+    /**
+   * @param x - The x coordinate of the point
+   * @returns y^2 such that y^2 = x^3 + 4
+   */ static YSquaredFromX(x) {
+        return new BLS12Fq(bls12_381.G1.weierstrassEquation(x.toBigInt()));
+    }
+    /**
+   * @param x - The x coordinate of the point
+   * @returns The y coordinate of the point, if it exists on BLS12-381
+   */ static YFromX(x) {
+        const ySquared = this.YSquaredFromX(x);
+        // y is then simply the square root. Note however that not all square roots exist in the field: if sqrt returns null
+        // then there is no point in the curve with this x coordinate.
+        return ySquared.sqrt();
+    }
+    /**
+   * @param x - The x coordinate of the point
+   * @param y - The y coordinate of the point
+   * @returns Whether the point exists on BLS12-381
+   */ static isOnCurve(x, y) {
+        if (x.isZero() && y.isZero()) {
+            // Representation of inf point
+            return true;
+        }
+        // The BLS12-381 equation is y^2 = x^3 + 4. We could use `YFromX` and then compare to `this.y`, but this would
+        // involve computing the square root of y, of which there are two possible valid values. This method is also faster.
+        const lhs = y.square();
+        const rhs = this.YSquaredFromX(x);
+        return lhs.equals(rhs);
+    }
+    /**
+   * Returns the contents of the point as an array of 2 fields.
+   * @returns The point as an array of 2 fields
+   */ toBLS12FqFields() {
+        return [
+            this.x,
+            this.y,
+            new BLS12Fq(this.isInfinite ? 1 : 0)
+        ];
+    }
+    /**
+   * Returns the x coordinate and the sign of the y coordinate.
+   * @dev The y sign can be determined by checking if the y coordinate is greater than half of the modulus.
+   * @returns The x coordinate and the sign of the y coordinate.
+   */ toXAndSign() {
+        return [
+            this.x,
+            !this.y.isNegative()
+        ];
+    }
+    /**
+   * Returns the contents of the point as BigInts.
+   * @returns The point as BigInts
+   */ toBigInts() {
+        return {
+            x: this.x.toBigInt(),
+            y: this.y.toBigInt(),
+            isInfinite: this.isInfinite ? 1n : 0n
+        };
+    }
+    /**
+   * Converts the Point instance to a Buffer representation of the coordinates.
+   * @returns A Buffer representation of the Point instance.
+   * @dev Note that toBuffer does not include the isInfinite flag and other serialization methods do (e.g. toBigInts).
+   */ toBuffer() {
+        const buf = serializeToBuffer([
+            this.x,
+            this.y
+        ]);
+        if (buf.length !== BLS12Point.SIZE_IN_BYTES) {
+            throw new Error(`Invalid buffer length for Point: ${buf.length}`);
+        }
+        return buf;
+    }
+    /**
+   * Convert the Point instance to a hexadecimal string representation.
+   * The output string is prefixed with '0x' and consists of exactly 128 hex characters,
+   * representing the concatenated x and y coordinates of the point.
+   *
+   * @returns A hex-encoded string representing the Point instance.
+   */ toString() {
+        return bufferToHex(this.toBuffer());
+    }
+    /**
+   * Check if two Point instances are equal by comparing their buffer values.
+   * Returns true if the buffer values are the same, and false otherwise.
+   *
+   * @param rhs - The Point instance to compare with the current instance.
+   * @returns A boolean indicating whether the two Point instances are equal.
+   */ equals(rhs) {
+        return this.x.equals(rhs.x) && this.y.equals(rhs.y);
+    }
+    /**
+   * Check whether the point is zero.
+   */ isZero() {
+        return this.x.isZero() && this.y.isZero();
+    }
+    /**
+   * Check if this is point at infinity.
+   * Check this is consistent with how bb is encoding the point at infinity
+   */ get inf() {
+        return this.isInfinite;
+    }
+    /** Arithmetic - wrapper around noble curves */ toNobleProjectivePoint() {
+        return bls12_381.G1.ProjectivePoint.fromAffine(this.toBigInts());
+    }
+    add(rhs) {
+        return BLS12Point.fromNobleProjectivePoint(this.toNobleProjectivePoint().add(rhs.toNobleProjectivePoint()));
+    }
+    negate() {
+        return new BLS12Point(this.x, this.y.negate(), this.isInfinite);
+    }
+    sub(rhs) {
+        return BLS12Point.fromNobleProjectivePoint(this.toNobleProjectivePoint().subtract(rhs.toNobleProjectivePoint()));
+    }
+    /**
+   * @dev From noble curves package:
+   * Constant time multiplication. Uses wNAF method. Windowed method may be 10% faster,
+   * but takes 2x longer to generate and consumes 2x memory.
+   * Uses precomputes when available, uses endomorphism for Koblitz curves.
+   * @param scalar by which the point would be multiplied
+   * @returns New point
+   */ mul(rhs) {
+        // Note: noble curves throws on 0
+        if (rhs.isZero()) {
+            return BLS12Point.ZERO;
+        }
+        return BLS12Point.fromNobleProjectivePoint(this.toNobleProjectivePoint().multiply(rhs.toBigInt()));
+    }
+    /**
+   * @dev From noble curves package:
+   * Non-constant-time multiplication. Uses double-and-add algorithm.
+   * It's faster, but should only be used when you don't care about an exposed private key e.g. sig verification, which works over *public* keys.
+   * @param scalar by which the point would be multiplied
+   * @returns New point
+   */ mulUnsafe(rhs) {
+        return BLS12Point.fromNobleProjectivePoint(this.toNobleProjectivePoint().multiplyUnsafe(rhs.toBigInt()));
+    }
+    /**
+   * @dev From noble curves package:
+   * Efficiently calculate `aP + bQ`. Unsafe, can expose private key, if used incorrectly.
+   * Not using Strauss-Shamir trick: precomputation tables are faster. The trick could be useful if both P and Q are not G (not in our case).
+   * @returns affine point
+   */ mulAndAddUnsafe(a, b, Q) {
+        const res = this.toNobleProjectivePoint().multiplyAndAddUnsafe(Q.toNobleProjectivePoint(), a.toBigInt(), b.toBigInt());
+        return res ? BLS12Point.fromNobleProjectivePoint(res) : BLS12Point.ZERO;
+    }
+}
+export class BLSPointNotOnCurveError extends Error {
+    constructor(x, y){
+        super('The given G1 point is not on the BLS12-381 curve: (' + x.toString() + ', ' + (y ? y.toString() : '') + ')');
+        this.name = 'NotOnCurveError';
+    }
+}
+/**
+ * Lifted from noble curves bls12_381 since it's not exposed. Sets the flags
+ * for BLS12-381 point compression.
+ * @dev 'sort' refers to 'is_greater' i.e. y > (p - 1)/2
+ */ function setMask(bytes, mask) {
+    if (bytes[0] & 0b1110_0000) {
+        throw new Error('setMask: non-empty mask');
+    }
+    if (mask.compressed) {
+        bytes[0] |= 0b1000_0000;
+    }
+    if (mask.infinity) {
+        bytes[0] |= 0b0100_0000;
+    }
+    if (mask.sort) {
+        bytes[0] |= 0b0010_0000;
+    }
+    return bytes;
+}
+/**
+ * Lifted from noble curves bls12_381 since it's not exposed. Reads the flags
+ * for BLS12-381 point compression.
+ * @dev 'sort' refers to 'is_greater' i.e. y > (p - 1)/2
+ */ function parseMask(bytes) {
+    // Copy, so we can remove mask data without affecting input bytes.
+    const value = Buffer.from(bytes);
+    const mask = value[0] & 0b1110_0000;
+    const compressed = !!(mask >> 7 & 1); // compression bit (0b1000_0000)
+    const infinity = !!(mask >> 6 & 1); // point at infinity bit (0b0100_0000)
+    const sort = !!(mask >> 5 & 1); // sort bit (0b0010_0000)
+    value[0] &= 0b0001_1111; // clear mask (zero first 3 bits)
+    return {
+        compressed,
+        infinity,
+        sort,
+        value
+    };
+}

package/dest/curves/bn254/field.d.ts

@@ -0,0 +1,180 @@
+import { inspect } from 'util';
+import { BufferReader } from '../../serialize/buffer_reader.js';
+/**
+ * Represents a field derived from BaseField.
+ */
+type DerivedField<T extends BaseField> = {
+    new (value: any): T;
+    /**
+     * All derived fields will specify a MODULUS.
+     */
+    MODULUS: bigint;
+};
+/**
+ * Base field class.
+ * Uses bigint as the internal representation.
+ * Buffers are generated on demand from the bigint value.
+ */
+declare abstract class BaseField {
+    static SIZE_IN_BYTES: number;
+    private readonly asBigInt;
+    /**
+     * Return bigint representation.
+     * @deprecated Just to get things compiling. Use toBigInt().
+     * */
+    get value(): bigint;
+    /** Returns the size in bytes. */
+    get size(): number;
+    protected constructor(value: number | bigint | boolean | BaseField | Buffer);
+    protected abstract modulus(): bigint;
+    /**
+     * Converts the bigint to a Buffer.
+     */
+    toBuffer(): Buffer;
+    toString(): `0x${string}`;
+    toBigInt(): bigint;
+    toBool(): boolean;
+    /**
+     * Converts this field to a number.
+     * Throws if the underlying value is greater than MAX_SAFE_INTEGER.
+     */
+    toNumber(): number;
+    /**
+     * Converts this field to a number.
+     * May cause loss of precision if the underlying value is greater than MAX_SAFE_INTEGER.
+     */
+    toNumberUnsafe(): number;
+    toShortString(): string;
+    equals(rhs: BaseField): boolean;
+    lt(rhs: BaseField): boolean;
+    cmp(rhs: BaseField): -1 | 0 | 1;
+    static cmp(lhs: BaseField, rhs: BaseField): -1 | 0 | 1;
+    isZero(): boolean;
+    isEmpty(): boolean;
+    toFriendlyJSON(): string;
+    toField(): this;
+}
+/**
+ * Constructs a field from a Buffer of BufferReader.
+ * It maybe not read the full 32 bytes if the Buffer is shorter, but it will padded in BaseField constructor.
+ */
+export declare function fromBuffer<T extends BaseField>(buffer: Buffer | BufferReader, f: DerivedField<T>): T;
+/** Branding to ensure fields are not interchangeable types. */
+export interface Fr {
+    /** Brand. */
+    _branding: 'Fr';
+}
+/**
+ * Fr field class.
+ * @dev This class is used to represent elements of BN254 scalar field or elements in the base field of Grumpkin.
+ * (Grumpkin's scalar field corresponds to BN254's base field and vice versa.)
+ */
+export declare class Fr extends BaseField {
+    static ZERO: Fr;
+    static ONE: Fr;
+    static MODULUS: bigint;
+    static MAX_FIELD_VALUE: Fr;
+    constructor(value: number | bigint | boolean | Fr | Buffer);
+    [inspect.custom](): string;
+    protected modulus(): bigint;
+    static random(): Fr;
+    static zero(): Fr;
+    static isZero(value: Fr): boolean;
+    static fromBuffer(buffer: Buffer | BufferReader): Fr;
+    static fromBufferReduce(buffer: Buffer): Fr;
+    /**
+     * Creates a Fr instance from a string.
+     * @param buf - the string to create a Fr from.
+     * @returns the Fr instance
+     * @remarks if the string only consists of numbers, we assume we are parsing a bigint,
+     * otherwise we require the hex string to be prepended with "0x", to ensure there is no misunderstanding
+     * as to what is being parsed.
+     */
+    static fromString(buf: string): Fr;
+    /**
+     * Creates a Fr instance from a hex string.
+     * @param buf - a hex encoded string.
+     * @returns the Fr instance
+     */
+    static fromHexString(buf: string): Fr;
+    /** Arithmetic */
+    add(rhs: Fr): Fr;
+    square(): Fr;
+    negate(): Fr;
+    sub(rhs: Fr): Fr;
+    mul(rhs: Fr): Fr;
+    div(rhs: Fr): Fr;
+    ediv(rhs: Fr): Fr;
+    /**
+     * Computes a square root of the field element.
+     * @returns A square root of the field element (null if it does not exist).
+     */
+    sqrt(): Promise<Fr | null>;
+    toJSON(): `0x${string}`;
+    /**
+     * Creates an Fr instance from a plain object without Zod validation.
+     * This method is optimized for performance and skips validation, making it suitable
+     * for deserializing trusted data (e.g., from C++ via MessagePack).
+     * Handles buffers, strings, numbers, bigints, or existing instances.
+     * @param obj - Plain object, buffer, string, number, bigint, boolean, or Fr instance
+     * @returns An Fr instance
+     */
+    static fromPlainObject(obj: any): Fr;
+    static get schema(): import("zod").ZodType<Fr, any, string>;
+}
+/**
+ * Branding to ensure fields are not interchangeable types.
+ */
+export interface Fq {
+    /** Brand. */
+    _branding: 'Fq';
+}
+/**
+ * Fq field class.
+ * @dev This class is used to represent elements of BN254 base field or elements in the scalar field of Grumpkin.
+ * (Grumpkin's scalar field corresponds to BN254's base field and vice versa.)
+ */
+export declare class Fq extends BaseField {
+    static ZERO: Fq;
+    static MODULUS: bigint;
+    private static HIGH_SHIFT;
+    private static LOW_MASK;
+    [inspect.custom](): string;
+    get lo(): Fr;
+    get hi(): Fr;
+    constructor(value: number | bigint | boolean | Fq | Buffer);
+    protected modulus(): bigint;
+    static random(): Fq;
+    static zero(): Fq;
+    static fromBuffer(buffer: Buffer | BufferReader): Fq;
+    static fromBufferReduce(buffer: Buffer): Fq;
+    /**
+     * Creates a Fq instance from a string.
+     * @param buf - the string to create a Fq from.
+     * @returns the Fq instance
+     * @remarks if the string only consists of numbers, we assume we are parsing a bigint,
+     * otherwise we require the hex string to be prepended with "0x", to ensure there is no misunderstanding
+     * as to what is being parsed.
+     */
+    static fromString(buf: string): Fq;
+    /**
+     * Creates a Fq instance from a hex string.
+     * @param buf - a hex encoded string.
+     * @returns the Fq instance
+     */
+    static fromHexString(buf: string): Fq;
+    static fromHighLow(high: Fr, low: Fr): Fq;
+    add(rhs: Fq): Fq;
+    /**
+     * Computes a square root of the field element.
+     * @returns A square root of the field element (null if it does not exist).
+     */
+    sqrt(): Promise<Fq | null>;
+    toJSON(): `0x${string}`;
+    toFields(): Fr[];
+    static get schema(): import("zod").ZodType<Fq, any, string>;
+}
+/** Wraps a function that returns a buffer so that all results are reduced into a field of the given type. */
+export declare function reduceFn<TInput, TField extends BaseField>(fn: (input: TInput) => Buffer, field: DerivedField<TField>): (input: TInput) => TField;
+export {};
+//# sourceMappingURL=data:application/json;base64,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

package/dest/curves/bn254/field.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field.d.ts","sourceRoot":"","sources":["../../../src/curves/bn254/field.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAK/B,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAKhE;;GAEG;AACH,KAAK,YAAY,CAAC,CAAC,SAAS,SAAS,IAAI;IACvC,KAAK,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC;IACpB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;GAIG;AACH,uBAAe,SAAS;IACtB,MAAM,CAAC,aAAa,SAAM;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC;;;SAGK;IACL,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,iCAAiC;IACjC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,SAAS,aAAa,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,EAmB1E;IAED,SAAS,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC;IAErC;;OAEG;IACH,QAAQ,IAAI,MAAM,CAEjB;IAED,QAAQ,IAAI,KAAK,MAAM,EAAE,CAExB;IAED,QAAQ,IAAI,MAAM,CAEjB;IAED,MAAM,IAAI,OAAO,CAEhB;IAED;;;OAGG;IACH,QAAQ,IAAI,MAAM,CAKjB;IAED;;;OAGG;IACH,cAAc,IAAI,MAAM,CAEvB;IAED,aAAa,IAAI,MAAM,CAGtB;IAED,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAE9B;IAED,EAAE,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAE1B;IAED,GAAG,CAAC,GAAG,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAG9B;IAED,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAErD;IAED,MAAM,IAAI,OAAO,CAEhB;IAED,OAAO,IAAI,OAAO,CAEjB;IAED,cAAc,IAAI,MAAM,CAEvB;IAED,OAAO,SAEN;CACF;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,KAGhG;AAiCD,+DAA+D;AAC/D,MAAM,WAAW,EAAE;IACjB,aAAa;IACb,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,qBAAa,EAAG,SAAQ,SAAS;IAC/B,MAAM,CAAC,IAAI,KAAc;IACzB,MAAM,CAAC,GAAG,KAAc;IACxB,MAAM,CAAC,OAAO,SAAuE;IACrF,MAAM,CAAC,eAAe,KAA6B;IAEnD,YAAY,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,EAAE,GAAG,MAAM,EAEzD;IAED,CAAC,OAAO,CAAC,MAAM,CAAC,WAEf;IAED,SAAS,CAAC,OAAO,WAEhB;IAED,MAAM,CAAC,MAAM,OAEZ;IAED,MAAM,CAAC,IAAI,OAEV;IAED,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,WAEtB;IAED,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,MAE9C;IAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,MAErC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,MAS5B;IAED;;;;OAIG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,MAE/B;IAED,iBAAiB;IAEjB,GAAG,CAAC,GAAG,EAAE,EAAE,MAEV;IAED,MAAM,OAEL;IAED,MAAM,OAEL;IAED,GAAG,CAAC,GAAG,EAAE,EAAE,MAGV;IAED,GAAG,CAAC,GAAG,EAAE,EAAE,MAEV;IAED,GAAG,CAAC,GAAG,EAAE,EAAE,MAOV;IAGD,IAAI,CAAC,GAAG,EAAE,EAAE,MAMX;IAED;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,CAS/B;IAED,MAAM,kBAEL;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAKnC;IAED,MAAM,KAAK,MAAM,2CAGhB;CACF;AAKD;;GAEG;AACH,MAAM,WAAW,EAAE;IACjB,aAAa;IACb,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,qBAAa,EAAG,SAAQ,SAAS;IAC/B,MAAM,CAAC,IAAI,KAAc;IACzB,MAAM,CAAC,OAAO,SAAuE;IACrF,OAAO,CAAC,MAAM,CAAC,UAAU,CAA6C;IACtE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA8B;IAErD,CAAC,OAAO,CAAC,MAAM,CAAC,WAEf;IAED,IAAI,EAAE,IAAI,EAAE,CAEX;IAED,IAAI,EAAE,IAAI,EAAE,CAEX;IAED,YAAY,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,EAAE,GAAG,MAAM,EAEzD;IAED,SAAS,CAAC,OAAO,WAEhB;IAED,MAAM,CAAC,MAAM,OAEZ;IAED,MAAM,CAAC,IAAI,OAEV;IAED,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,MAE9C;IAED,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,MAErC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,MAS5B;IAED;;;;OAIG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,MAE/B;IAED,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAExC;IAED,GAAG,CAAC,GAAG,EAAE,EAAE,MAEV;IAED;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,CAS/B;IAED,MAAM,kBAEL;IAED,QAAQ,SAKP;IAED,MAAM,KAAK,MAAM,2CAEhB;CACF;AAgCD,6GAA6G;AAC7G,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,SAAS,SAAS,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,6BAEpH"}