@bifold/core 1.0.0

package/lib/commonjs/modules/openid/offerResolve.js

@@ -0,0 +1,189 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.acquirePreAuthorizedAccessToken = acquirePreAuthorizedAccessToken;
+exports.resolveOpenId4VciOffer = exports.receiveCredentialFromOpenId4VciOffer = exports.customCredentialBindingResolver = void 0;
+var _openid4vc = require("@credo-ts/openid4vc");
+var _core = require("@credo-ts/core");
+var _metadata = require("./metadata");
+const resolveOpenId4VciOffer = async ({
+  agent,
+  data,
+  uri,
+  authorization
+}) => {
+  let offerUri = uri;
+  if (!offerUri && data) {
+    // FIXME: Credo only support credential offer string, but we already parsed it before. So we construct an offer here
+    // but in the future we need to support the parsed offer in Credo directly
+    offerUri = `openid-credential-offer://credential_offer=${encodeURIComponent(JSON.stringify(data))}`;
+  } else if (!offerUri) {
+    throw new Error('either data or uri must be provided');
+  }
+  agent.config.logger.info(`Receiving openid uri ${offerUri}`, {
+    offerUri,
+    data: data,
+    uri: offerUri
+  });
+  const resolvedCredentialOffer = await agent.modules.openId4VcHolder.resolveCredentialOffer(offerUri);
+  if (authorization) {
+    throw new Error('Authorization flow is not supported yet as of Credo 0.5.13');
+  }
+  return resolvedCredentialOffer;
+};
+exports.resolveOpenId4VciOffer = resolveOpenId4VciOffer;
+async function acquirePreAuthorizedAccessToken({
+  agent,
+  resolvedCredentialOffer,
+  txCode
+}) {
+  return await agent.modules.openId4VcHolder.requestToken({
+    resolvedCredentialOffer,
+    txCode
+  });
+}
+const customCredentialBindingResolver = async ({
+  agent,
+  supportedDidMethods,
+  keyType,
+  supportsAllDidMethods,
+  supportsJwk,
+  credentialFormat,
+  supportedCredentialId,
+  resolvedCredentialOffer,
+  pidSchemes
+}) => {
+  // First, we try to pick a did method
+  // Prefer did:jwk, otherwise use did:key, otherwise use undefined
+  let didMethod = supportsAllDidMethods || supportedDidMethods !== null && supportedDidMethods !== void 0 && supportedDidMethods.includes('did:jwk') ? 'jwk' : supportedDidMethods !== null && supportedDidMethods !== void 0 && supportedDidMethods.includes('did:key') ? 'key' : undefined;
+
+  // If supportedDidMethods is undefined, and supportsJwk is false, we will default to did:key
+  // this is important as part of MATTR launchpad support which MUST use did:key but doesn't
+  // define which did methods they support
+  if (!supportedDidMethods && !supportsJwk) {
+    didMethod = 'key';
+  }
+  const offeredCredentialConfiguration = supportedCredentialId ? resolvedCredentialOffer.offeredCredentialConfigurations[supportedCredentialId] : undefined;
+  const shouldKeyBeHardwareBackedForMsoMdoc = (offeredCredentialConfiguration === null || offeredCredentialConfiguration === void 0 ? void 0 : offeredCredentialConfiguration.format) === _openid4vc.OpenId4VciCredentialFormatProfile.MsoMdoc && (pidSchemes === null || pidSchemes === void 0 ? void 0 : pidSchemes.msoMdocDoctypes.includes(offeredCredentialConfiguration.doctype));
+  const shouldKeyBeHardwareBackedForSdJwtVc = (offeredCredentialConfiguration === null || offeredCredentialConfiguration === void 0 ? void 0 : offeredCredentialConfiguration.format) === 'vc+sd-jwt' && (pidSchemes === null || pidSchemes === void 0 ? void 0 : pidSchemes.sdJwtVcVcts.includes(offeredCredentialConfiguration.vct));
+  const shouldKeyBeHardwareBacked = shouldKeyBeHardwareBackedForSdJwtVc || shouldKeyBeHardwareBackedForMsoMdoc;
+  if (!keyType) {
+    throw new Error('keyType is required!');
+  }
+  const key = await agent.wallet.createKey({
+    keyType,
+    keyBackend: shouldKeyBeHardwareBacked ? _core.KeyBackend.SecureElement : _core.KeyBackend.Software
+  });
+  if (didMethod) {
+    const didResult = await agent.dids.create({
+      method: didMethod,
+      options: {
+        key
+      }
+    });
+    if (didResult.didState.state !== 'finished') {
+      throw new Error('DID creation failed.');
+    }
+    let verificationMethodId;
+    if (didMethod === 'jwk') {
+      const didJwk = _core.DidJwk.fromDid(didResult.didState.did);
+      verificationMethodId = didJwk.verificationMethodId;
+    } else {
+      const didKey = _core.DidKey.fromDid(didResult.didState.did);
+      verificationMethodId = `${didKey.did}#${didKey.key.fingerprint}`;
+    }
+    return {
+      didUrl: verificationMethodId,
+      method: 'did'
+    };
+  }
+
+  // Otherwise we also support plain jwk for sd-jwt only
+  if (supportsJwk && (credentialFormat === _openid4vc.OpenId4VciCredentialFormatProfile.SdJwtVc || credentialFormat === _openid4vc.OpenId4VciCredentialFormatProfile.MsoMdoc)) {
+    return {
+      method: 'jwk',
+      jwk: (0, _core.getJwkFromKey)(key)
+    };
+  }
+  throw new Error(`No supported binding method could be found. Supported methods are did:key and did:jwk, or plain jwk for sd-jwt/mdoc. Issuer supports ${supportsJwk ? 'jwk, ' : ''}${(supportedDidMethods === null || supportedDidMethods === void 0 ? void 0 : supportedDidMethods.join(', ')) ?? 'Unknown'}`);
+};
+exports.customCredentialBindingResolver = customCredentialBindingResolver;
+const receiveCredentialFromOpenId4VciOffer = async ({
+  agent,
+  resolvedCredentialOffer,
+  accessToken,
+  credentialConfigurationIdsToRequest,
+  clientId,
+  pidSchemes
+}) => {
+  const offeredCredentialsToRequest = credentialConfigurationIdsToRequest ? resolvedCredentialOffer.offeredCredentials.filter(offered => credentialConfigurationIdsToRequest.includes(offered.id)) : [resolvedCredentialOffer.offeredCredentials[0]];
+  if (offeredCredentialsToRequest.length === 0) {
+    throw new Error(`Parameter 'credentialConfigurationIdsToRequest' with values ${credentialConfigurationIdsToRequest} is not a credential_configuration_id in the credential offer.`);
+  }
+  const credentials = await agent.modules.openId4VcHolder.requestCredentials({
+    resolvedCredentialOffer,
+    ...accessToken,
+    clientId,
+    credentialsToRequest: credentialConfigurationIdsToRequest,
+    verifyCredentialStatus: false,
+    allowedProofOfPossessionSignatureAlgorithms: [
+    // NOTE: MATTR launchpad for JFF MUST use EdDSA. So it is important that the default (first allowed one)
+    // is EdDSA. The list is ordered by preference, so if no suites are defined by the issuer, the first one
+    // will be used
+    _core.JwaSignatureAlgorithm.EdDSA, _core.JwaSignatureAlgorithm.ES256],
+    credentialBindingResolver: async ({
+      supportedDidMethods,
+      keyType,
+      supportsAllDidMethods,
+      supportsJwk,
+      credentialFormat,
+      supportedCredentialId
+    }) => {
+      return customCredentialBindingResolver({
+        agent,
+        supportedDidMethods,
+        keyType,
+        supportsAllDidMethods,
+        supportsJwk,
+        credentialFormat,
+        supportedCredentialId,
+        resolvedCredentialOffer,
+        pidSchemes
+      });
+    }
+  });
+
+  // We only support one credential for now
+  const [firstCredential] = credentials;
+  if (!firstCredential) throw new Error('Error retrieving credential using pre authorized flow: firstCredential undefined!.');
+  let record;
+  if (typeof firstCredential === 'string') {
+    throw new Error('Error retrieving credential using pre authorized flow: firstCredential is string.');
+  }
+  if ('compact' in firstCredential.credential) {
+    // TODO: add claimFormat to SdJwtVc
+    record = new _core.SdJwtVcRecord({
+      compactSdJwtVc: firstCredential.credential.compact
+    });
+  } else if (firstCredential.credential instanceof _core.Mdoc) {
+    record = new _core.MdocRecord({
+      mdoc: firstCredential.credential
+    });
+  } else {
+    record = new _core.W3cCredentialRecord({
+      credential: firstCredential.credential,
+      // We don't support expanded types right now, but would become problem when we support JSON-LD
+      tags: {}
+    });
+  }
+  const openId4VcMetadata = (0, _metadata.extractOpenId4VcCredentialMetadata)(resolvedCredentialOffer.offeredCredentials[0], {
+    id: resolvedCredentialOffer.metadata.issuer,
+    display: resolvedCredentialOffer.metadata.credentialIssuerMetadata.display
+  });
+  (0, _metadata.setOpenId4VcCredentialMetadata)(record, openId4VcMetadata);
+  return record;
+};
+exports.receiveCredentialFromOpenId4VciOffer = receiveCredentialFromOpenId4VciOffer;
+//# sourceMappingURL=offerResolve.js.map

package/lib/commonjs/modules/openid/offerResolve.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_openid4vc","require","_core","_metadata","resolveOpenId4VciOffer","agent","data","uri","authorization","offerUri","encodeURIComponent","JSON","stringify","Error","config","logger","info","resolvedCredentialOffer","modules","openId4VcHolder","resolveCredentialOffer","exports","acquirePreAuthorizedAccessToken","txCode","requestToken","customCredentialBindingResolver","supportedDidMethods","keyType","supportsAllDidMethods","supportsJwk","credentialFormat","supportedCredentialId","pidSchemes","didMethod","includes","undefined","offeredCredentialConfiguration","offeredCredentialConfigurations","shouldKeyBeHardwareBackedForMsoMdoc","format","OpenId4VciCredentialFormatProfile","MsoMdoc","msoMdocDoctypes","doctype","shouldKeyBeHardwareBackedForSdJwtVc","sdJwtVcVcts","vct","shouldKeyBeHardwareBacked","key","wallet","createKey","keyBackend","KeyBackend","SecureElement","Software","didResult","dids","create","method","options","didState","state","verificationMethodId","didJwk","DidJwk","fromDid","did","didKey","DidKey","fingerprint","didUrl","SdJwtVc","jwk","getJwkFromKey","join","receiveCredentialFromOpenId4VciOffer","accessToken","credentialConfigurationIdsToRequest","clientId","offeredCredentialsToRequest","offeredCredentials","filter","offered","id","length","credentials","requestCredentials","credentialsToRequest","verifyCredentialStatus","allowedProofOfPossessionSignatureAlgorithms","JwaSignatureAlgorithm","EdDSA","ES256","credentialBindingResolver","firstCredential","record","credential","SdJwtVcRecord","compactSdJwtVc","compact","Mdoc","MdocRecord","mdoc","W3cCredentialRecord","tags","openId4VcMetadata","extractOpenId4VcCredentialMetadata","metadata","issuer","display","credentialIssuerMetadata","setOpenId4VcCredentialMetadata"],"sourceRoot":"../../../../src","sources":["modules/openid/offerResolve.tsx"],"mappings":";;;;;;;AAAA,IAAAA,UAAA,GAAAC,OAAA;AAQA,IAAAC,KAAA,GAAAD,OAAA;AAgBA,IAAAE,SAAA,GAAAF,OAAA;AAEO,MAAMG,sBAAsB,GAAG,MAAAA,CAAO;EAC3CC,KAAK;EACLC,IAAI;EACJC,GAAG;EACHC;AAQF,CAAC,KAAiD;EAChD,IAAIC,QAAQ,GAAGF,GAAG;EAElB,IAAI,CAACE,QAAQ,IAAIH,IAAI,EAAE;IACrB;IACA;IACAG,QAAQ,GAAG,8CAA8CC,kBAAkB,CAACC,IAAI,CAACC,SAAS,CAACN,IAAI,CAAC,CAAC,EAAE;EACrG,CAAC,MAAM,IAAI,CAACG,QAAQ,EAAE;IACpB,MAAM,IAAII,KAAK,CAAC,qCAAqC,CAAC;EACxD;EAEAR,KAAK,CAACS,MAAM,CAACC,MAAM,CAACC,IAAI,CAAC,wBAAwBP,QAAQ,EAAE,EAAE;IAC3DA,QAAQ;IACRH,IAAI,EAAEA,IAAI;IACVC,GAAG,EAAEE;EACP,CAAC,CAAC;EAEF,MAAMQ,uBAAuB,GAAG,MAAMZ,KAAK,CAACa,OAAO,CAACC,eAAe,CAACC,sBAAsB,CAACX,QAAQ,CAAC;EAEpG,IAAID,aAAa,EAAE;IACjB,MAAM,IAAIK,KAAK,CAAC,4DAA4D,CAAC;EAC/E;EAEA,OAAOI,uBAAuB;AAChC,CAAC;AAAAI,OAAA,CAAAjB,sBAAA,GAAAA,sBAAA;AAEM,eAAekB,+BAA+BA,CAAC;EACpDjB,KAAK;EACLY,uBAAuB;EACvBM;AAKF,CAAC,EAAE;EACD,OAAO,MAAMlB,KAAK,CAACa,OAAO,CAACC,eAAe,CAACK,YAAY,CAAC;IACtDP,uBAAuB;IACvBM;EACF,CAAC,CAAC;AACJ;AAEO,MAAME,+BAA+B,GAAG,MAAAA,CAAO;EACpDpB,KAAK;EACLqB,mBAAmB;EACnBC,OAAO;EACPC,qBAAqB;EACrBC,WAAW;EACXC,gBAAgB;EAChBC,qBAAqB;EACrBd,uBAAuB;EACvBe;AAKF,CAAC,KAAgD;EAC/C;EACA;EACA,IAAIC,SAAoC,GACtCL,qBAAqB,IAAIF,mBAAmB,aAAnBA,mBAAmB,eAAnBA,mBAAmB,CAAEQ,QAAQ,CAAC,SAAS,CAAC,GAC7D,KAAK,GACLR,mBAAmB,aAAnBA,mBAAmB,eAAnBA,mBAAmB,CAAEQ,QAAQ,CAAC,SAAS,CAAC,GACxC,KAAK,GACLC,SAAS;;EAEf;EACA;EACA;EACA,IAAI,CAACT,mBAAmB,IAAI,CAACG,WAAW,EAAE;IACxCI,SAAS,GAAG,KAAK;EACnB;EAEA,MAAMG,8BAA8B,GAAGL,qBAAqB,GACxDd,uBAAuB,CAACoB,+BAA+B,CAACN,qBAAqB,CAAC,GAC9EI,SAAS;EAEb,MAAMG,mCAAmC,GACvC,CAAAF,8BAA8B,aAA9BA,8BAA8B,uBAA9BA,8BAA8B,CAAEG,MAAM,MAAKC,4CAAiC,CAACC,OAAO,KACpFT,UAAU,aAAVA,UAAU,uBAAVA,UAAU,CAAEU,eAAe,CAACR,QAAQ,CAACE,8BAA8B,CAACO,OAAO,CAAC;EAE9E,MAAMC,mCAAmC,GACvC,CAAAR,8BAA8B,aAA9BA,8BAA8B,uBAA9BA,8BAA8B,CAAEG,MAAM,MAAK,WAAW,KACtDP,UAAU,aAAVA,UAAU,uBAAVA,UAAU,CAAEa,WAAW,CAACX,QAAQ,CAACE,8BAA8B,CAACU,GAAG,CAAC;EAEtE,MAAMC,yBAAyB,GAAGH,mCAAmC,IAAIN,mCAAmC;EAE5G,IAAI,CAACX,OAAO,EAAE;IACZ,MAAM,IAAId,KAAK,CAAC,sBAAsB,CAAC;EACzC;EAEA,MAAMmC,GAAG,GAAG,MAAM3C,KAAK,CAAC4C,MAAM,CAACC,SAAS,CAAC;IACvCvB,OAAO;IACPwB,UAAU,EAAEJ,yBAAyB,GAAGK,gBAAU,CAACC,aAAa,GAAGD,gBAAU,CAACE;EAChF,CAAC,CAAC;EAEF,IAAIrB,SAAS,EAAE;IACb,MAAMsB,SAAS,GAAG,MAAMlD,KAAK,CAACmD,IAAI,CAACC,MAAM,CAA4C;MACnFC,MAAM,EAAEzB,SAAS;MACjB0B,OAAO,EAAE;QACPX;MACF;IACF,CAAC,CAAC;IAEF,IAAIO,SAAS,CAACK,QAAQ,CAACC,KAAK,KAAK,UAAU,EAAE;MAC3C,MAAM,IAAIhD,KAAK,CAAC,sBAAsB,CAAC;IACzC;IAEA,IAAIiD,oBAA4B;IAChC,IAAI7B,SAAS,KAAK,KAAK,EAAE;MACvB,MAAM8B,MAAM,GAAGC,YAAM,CAACC,OAAO,CAACV,SAAS,CAACK,QAAQ,CAACM,GAAG,CAAC;MACrDJ,oBAAoB,GAAGC,MAAM,CAACD,oBAAoB;IACpD,CAAC,MAAM;MACL,MAAMK,MAAM,GAAGC,YAAM,CAACH,OAAO,CAACV,SAAS,CAACK,QAAQ,CAACM,GAAG,CAAC;MACrDJ,oBAAoB,GAAG,GAAGK,MAAM,CAACD,GAAG,IAAIC,MAAM,CAACnB,GAAG,CAACqB,WAAW,EAAE;IAClE;IAEA,OAAO;MACLC,MAAM,EAAER,oBAAoB;MAC5BJ,MAAM,EAAE;IACV,CAAC;EACH;;EAEA;EACA,IACE7B,WAAW,KACVC,gBAAgB,KAAKU,4CAAiC,CAAC+B,OAAO,IAC7DzC,gBAAgB,KAAKU,4CAAiC,CAACC,OAAO,CAAC,EACjE;IACA,OAAO;MACLiB,MAAM,EAAE,KAAK;MACbc,GAAG,EAAE,IAAAC,mBAAa,EAACzB,GAAG;IACxB,CAAC;EACH;EAEA,MAAM,IAAInC,KAAK,CACb,wIACEgB,WAAW,GAAG,OAAO,GAAG,EAAE,GACzB,CAAAH,mBAAmB,aAAnBA,mBAAmB,uBAAnBA,mBAAmB,CAAEgD,IAAI,CAAC,IAAI,CAAC,KAAI,SAAS,EACjD,CAAC;AACH,CAAC;AAAArD,OAAA,CAAAI,+BAAA,GAAAA,+BAAA;AAEM,MAAMkD,oCAAoC,GAAG,MAAAA,CAAO;EACzDtE,KAAK;EACLY,uBAAuB;EACvB2D,WAAW;EACXC,mCAAmC;EACnCC,QAAQ;EACR9C;AAQF,CAAC,KAAK;EACJ,MAAM+C,2BAA2B,GAAGF,mCAAmC,GACnE5D,uBAAuB,CAAC+D,kBAAkB,CAACC,MAAM,CAAEC,OAAO,IACxDL,mCAAmC,CAAC3C,QAAQ,CAACgD,OAAO,CAACC,EAAE,CACzD,CAAC,GACD,CAAClE,uBAAuB,CAAC+D,kBAAkB,CAAC,CAAC,CAAC,CAAC;EAEnD,IAAID,2BAA2B,CAACK,MAAM,KAAK,CAAC,EAAE;IAC5C,MAAM,IAAIvE,KAAK,CACb,+DAA+DgE,mCAAmC,gEACpG,CAAC;EACH;EAEA,MAAMQ,WAAW,GAAG,MAAMhF,KAAK,CAACa,OAAO,CAACC,eAAe,CAACmE,kBAAkB,CAAC;IACzErE,uBAAuB;IACvB,GAAG2D,WAAW;IACdE,QAAQ;IACRS,oBAAoB,EAAEV,mCAAmC;IACzDW,sBAAsB,EAAE,KAAK;IAC7BC,2CAA2C,EAAE;IAC3C;IACA;IACA;IACAC,2BAAqB,CAACC,KAAK,EAC3BD,2BAAqB,CAACE,KAAK,CAC5B;IACDC,yBAAyB,EAAE,MAAAA,CAAO;MAChCnE,mBAAmB;MACnBC,OAAO;MACPC,qBAAqB;MACrBC,WAAW;MACXC,gBAAgB;MAChBC;IACkC,CAAC,KAAK;MACxC,OAAON,+BAA+B,CAAC;QACrCpB,KAAK;QACLqB,mBAAmB;QACnBC,OAAO;QACPC,qBAAqB;QACrBC,WAAW;QACXC,gBAAgB;QAChBC,qBAAqB;QACrBd,uBAAuB;QACvBe;MACF,CAAC,CAAC;IACJ;EACF,CAAC,CAAC;;EAEF;EACA,MAAM,CAAC8D,eAAe,CAAC,GAAGT,WAAW;EACrC,IAAI,CAACS,eAAe,EAClB,MAAM,IAAIjF,KAAK,CAAC,oFAAoF,CAAC;EAEvG,IAAIkF,MAAwD;EAE5D,IAAI,OAAOD,eAAe,KAAK,QAAQ,EAAE;IACvC,MAAM,IAAIjF,KAAK,CAAC,mFAAmF,CAAC;EACtG;EAEA,IAAI,SAAS,IAAIiF,eAAe,CAACE,UAAU,EAAE;IAC3C;IACAD,MAAM,GAAG,IAAIE,mBAAa,CAAC;MACzBC,cAAc,EAAEJ,eAAe,CAACE,UAAU,CAACG;IAC7C,CAAC,CAAC;EACJ,CAAC,MAAM,IAAIL,eAAe,CAACE,UAAU,YAAYI,UAAI,EAAE;IACrDL,MAAM,GAAG,IAAIM,gBAAU,CAAC;MACtBC,IAAI,EAAER,eAAe,CAACE;IACxB,CAAC,CAAC;EACJ,CAAC,MAAM;IACLD,MAAM,GAAG,IAAIQ,yBAAmB,CAAC;MAC/BP,UAAU,EAAEF,eAAe,CAACE,UAAwE;MACpG;MACAQ,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;EACJ;EAEA,MAAMC,iBAAiB,GAAG,IAAAC,4CAAkC,EAC1DzF,uBAAuB,CAAC+D,kBAAkB,CAAC,CAAC,CAAC,EAC7C;IACEG,EAAE,EAAElE,uBAAuB,CAAC0F,QAAQ,CAACC,MAAM;IAC3CC,OAAO,EAAE5F,uBAAuB,CAAC0F,QAAQ,CAACG,wBAAwB,CAACD;EACrE,CACF,CAAC;EAED,IAAAE,wCAA8B,EAAChB,MAAM,EAAEU,iBAAiB,CAAC;EAEzD,OAAOV,MAAM;AACf,CAAC;AAAA1E,OAAA,CAAAsD,oCAAA,GAAAA,oCAAA","ignoreList":[]}

package/lib/commonjs/modules/openid/resolverProof.js

@@ -0,0 +1,246 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.extractCertificateFromAuthorizationRequest = void 0;
+exports.fetchInvitationDataUrl = fetchInvitationDataUrl;
+exports.shareProof = exports.getCredentialsForProofRequest = void 0;
+exports.withTrustedCertificate = withTrustedCertificate;
+var _core = require("@credo-ts/core");
+var _queryString = _interopRequireDefault(require("query-string"));
+var _utils = require("./utils/utils");
+var _reactNative = require("react-native");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+function handleTextResponse(text) {
+  // If the text starts with 'ey' we assume it's a JWT and thus an OpenID authorization request
+  if (text.startsWith('ey')) {
+    return {
+      success: true,
+      result: {
+        format: 'parsed',
+        type: 'openid-authorization-request',
+        data: text
+      }
+    };
+  }
+
+  // Otherwise we still try to parse it as JSON
+  try {
+    const json = JSON.parse(text);
+    return handleJsonResponse(json);
+
+    // handel like above
+  } catch (error) {
+    throw new Error(`[handleTextResponse] Error:${error}`);
+  }
+}
+function handleJsonResponse(json) {
+  // We expect a JSON object
+  if (!json || typeof json !== 'object' || Array.isArray(json)) {
+    throw new Error('[handleJsonResponse] Invitation not recognized.');
+  }
+  if ('@type' in json) {
+    return {
+      success: true,
+      result: {
+        format: 'parsed',
+        type: 'didcomm',
+        data: json
+      }
+    };
+  }
+  if ('credential_issuer' in json) {
+    return {
+      success: true,
+      result: {
+        format: 'parsed',
+        type: 'openid-credential-offer',
+        data: json
+      }
+    };
+  }
+  throw new Error('[handleJsonResponse] Invitation not recognized.');
+}
+async function fetchInvitationDataUrl(dataUrl) {
+  // If we haven't had a response after 10 seconds, we will handle as if the invitation is not valid.
+  const abortController = new AbortController();
+  const timeout = setTimeout(() => abortController.abort(), 10000);
+  try {
+    // If we still don't know what type of invitation it is, we assume it is a URL that we need to fetch to retrieve the invitation.
+    const response = await fetch(dataUrl, {
+      headers: {
+        // for DIDComm out of band invitations we should include application/json
+        // but we are flexible and also want to support other types of invitations
+        // as e.g. the OpenID SIOP request is a signed encoded JWT string
+        Accept: 'application/json, text/plain, */*'
+      }
+    });
+    clearTimeout(timeout);
+    if (!response.ok) {
+      throw new Error('[retrieve_invitation_error] Unable to retrieve invitation.');
+    }
+    const contentType = response.headers.get('content-type');
+    if (contentType !== null && contentType !== void 0 && contentType.includes('application/json')) {
+      const json = await response.json();
+      return handleJsonResponse(json);
+    }
+    const text = await response.text();
+    return handleTextResponse(text);
+  } catch (error) {
+    clearTimeout(timeout);
+    throw new Error(`[retrieve_invitation_error] Unable to retrieve invitation: ${error}`);
+  }
+}
+const extractCertificateFromJwt = jwt => {
+  const jwtHeader = _core.Jwt.fromSerializedJwt(jwt).header;
+  return Array.isArray(jwtHeader.x5c) && typeof jwtHeader.x5c[0] === 'string' ? jwtHeader.x5c[0] : null;
+};
+
+/**
+ * This is a temp method to allow for untrusted certificates to still work with the wallet.
+ */
+const extractCertificateFromAuthorizationRequest = async ({
+  data,
+  uri
+}) => {
+  try {
+    if (data) {
+      return {
+        data,
+        certificate: extractCertificateFromJwt(data)
+      };
+    }
+    if (uri) {
+      const query = _queryString.default.parseUrl(uri).query;
+      if (query.request_uri && typeof query.request_uri === 'string') {
+        const result = await fetchInvitationDataUrl(query.request_uri);
+        if (result.success && result.result.type === 'openid-authorization-request' && typeof result.result.data === 'string') {
+          return {
+            data: result.result.data,
+            certificate: extractCertificateFromJwt(result.result.data)
+          };
+        }
+      } else if (query.request && typeof query.request === 'string') {
+        const _res = {
+          data: query.request,
+          certificate: extractCertificateFromJwt(query.request)
+        };
+        return _res;
+      }
+    }
+    return {
+      data: null,
+      certificate: null
+    };
+  } catch (error) {
+    return {
+      data: null,
+      certificate: null
+    };
+  }
+};
+exports.extractCertificateFromAuthorizationRequest = extractCertificateFromAuthorizationRequest;
+async function withTrustedCertificate(agent, certificate, method) {
+  const x509ModuleConfig = agent.dependencyManager.resolve(_core.X509ModuleConfig);
+  const currentTrustedCertificates = x509ModuleConfig.trustedCertificates ? [...x509ModuleConfig.trustedCertificates] : [];
+  try {
+    if (certificate) agent.x509.addTrustedCertificate(certificate);
+    return await method();
+  } finally {
+    if (certificate) x509ModuleConfig.setTrustedCertificates(currentTrustedCertificates);
+  }
+}
+
+//This settings should be moved to an injectable config
+const allowUntrustedCertificates = false;
+const getCredentialsForProofRequest = async ({
+  agent,
+  data,
+  uri
+}) => {
+  let requestUri = uri;
+  try {
+    const {
+      certificate = null,
+      data: newData = null
+    } = allowUntrustedCertificates ? await extractCertificateFromAuthorizationRequest({
+      data,
+      uri
+    }) : {};
+    if (newData) {
+      // FIXME: Credo only support request string, but we already parsed it before. So we construct an request here
+      // but in the future we need to support the parsed request in Credo directly
+      requestUri = `openid://?request=${encodeURIComponent(newData)}`;
+    } else if (uri) {
+      requestUri = uri;
+    } else {
+      throw new Error('Either data or uri must be provided');
+    }
+    agent.config.logger.info(`$$Receiving openid uri ${requestUri}`);
+
+    // Temp solution to add and remove the trusted certificate
+    const resolved = await withTrustedCertificate(agent, certificate, () => {
+      return agent.modules.openId4VcHolder.resolveSiopAuthorizationRequest(requestUri);
+    });
+    if (!resolved.presentationExchange) {
+      throw new Error('No presentation exchange found in authorization request.');
+    }
+    return {
+      ...resolved.presentationExchange,
+      authorizationRequest: resolved.authorizationRequest,
+      verifierHostName: resolved.authorizationRequest.responseURI ? (0, _utils.getHostNameFromUrl)(resolved.authorizationRequest.responseURI) : undefined,
+      createdAt: new Date(),
+      type: 'OpenId4VPRequestRecord'
+    };
+  } catch (err) {
+    agent.config.logger.error(`Parsing presentation request:  ${(err === null || err === void 0 ? void 0 : err.message) ?? err}`);
+    throw err;
+  }
+};
+exports.getCredentialsForProofRequest = getCredentialsForProofRequest;
+const shareProof = async ({
+  agent,
+  authorizationRequest,
+  credentialsForRequest,
+  selectedCredentials,
+  allowUntrustedCertificate = false
+}) => {
+  if (!credentialsForRequest.areRequirementsSatisfied) {
+    throw new Error('Requirements from proof request are not satisfied');
+  }
+
+  // Map all requirements and entries to a credential record. If a credential record for an
+  // input descriptor has been provided in `selectedCredentials` we will use that. Otherwise
+  // it will pick the first available credential.
+  const credentials = Object.fromEntries(credentialsForRequest.requirements.flatMap(requirement => requirement.submissionEntry.map(entry => {
+    const credentialId = selectedCredentials[entry.inputDescriptorId].id;
+    const credential = entry.verifiableCredentials.find(vc => vc.credentialRecord.id === credentialId) ?? entry.verifiableCredentials[0];
+    return [entry.inputDescriptorId, [credential.credentialRecord]];
+  })));
+  try {
+    // Temp solution to add and remove the trusted certicaite
+    const certificate = authorizationRequest.jwt && allowUntrustedCertificate ? extractCertificateFromJwt(authorizationRequest.jwt) : null;
+    const result = await withTrustedCertificate(agent, certificate, () => agent.modules.openId4VcHolder.acceptSiopAuthorizationRequest({
+      authorizationRequest,
+      presentationExchange: {
+        credentials
+      }
+    }));
+
+    // if redirect_uri is provided, open it in the browser
+    // Even if the response returned an error, we must open this uri
+    if (typeof result.serverResponse.body === 'object' && typeof result.serverResponse.body.redirect_uri === 'string') {
+      await _reactNative.Linking.openURL(result.serverResponse.body.redirect_uri);
+    }
+    if (result.serverResponse.status < 200 || result.serverResponse.status > 299) {
+      throw new Error(`Error while accepting authorization request. ${result.serverResponse.body}`);
+    }
+    return result;
+  } catch (error) {
+    // Handle biometric authentication errors
+    throw new Error(`Error accepting proof request. ${(error === null || error === void 0 ? void 0 : error.message) ?? error}`);
+  }
+};
+exports.shareProof = shareProof;
+//# sourceMappingURL=resolverProof.js.map

package/lib/commonjs/modules/openid/resolverProof.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_core","require","_queryString","_interopRequireDefault","_utils","_reactNative","e","__esModule","default","handleTextResponse","text","startsWith","success","result","format","type","data","json","JSON","parse","handleJsonResponse","error","Error","Array","isArray","fetchInvitationDataUrl","dataUrl","abortController","AbortController","timeout","setTimeout","abort","response","fetch","headers","Accept","clearTimeout","ok","contentType","get","includes","extractCertificateFromJwt","jwt","jwtHeader","Jwt","fromSerializedJwt","header","x5c","extractCertificateFromAuthorizationRequest","uri","certificate","query","q","parseUrl","request_uri","request","_res","exports","withTrustedCertificate","agent","method","x509ModuleConfig","dependencyManager","resolve","X509ModuleConfig","currentTrustedCertificates","trustedCertificates","x509","addTrustedCertificate","setTrustedCertificates","allowUntrustedCertificates","getCredentialsForProofRequest","requestUri","newData","encodeURIComponent","config","logger","info","resolved","modules","openId4VcHolder","resolveSiopAuthorizationRequest","presentationExchange","authorizationRequest","verifierHostName","responseURI","getHostNameFromUrl","undefined","createdAt","Date","err","message","shareProof","credentialsForRequest","selectedCredentials","allowUntrustedCertificate","areRequirementsSatisfied","credentials","Object","fromEntries","requirements","flatMap","requirement","submissionEntry","map","entry","credentialId","inputDescriptorId","id","credential","verifiableCredentials","find","vc","credentialRecord","acceptSiopAuthorizationRequest","serverResponse","body","redirect_uri","Linking","openURL","status"],"sourceRoot":"../../../../src","sources":["modules/openid/resolverProof.tsx"],"mappings":";;;;;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AAEA,IAAAC,YAAA,GAAAC,sBAAA,CAAAF,OAAA;AAEA,IAAAG,MAAA,GAAAH,OAAA;AAEA,IAAAI,YAAA,GAAAJ,OAAA;AAAsC,SAAAE,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEtC,SAASG,kBAAkBA,CAACC,IAAY,EAAyB;EAC/D;EACA,IAAIA,IAAI,CAACC,UAAU,CAAC,IAAI,CAAC,EAAE;IACzB,OAAO;MACLC,OAAO,EAAE,IAAI;MACbC,MAAM,EAAE;QACNC,MAAM,EAAE,QAAQ;QAChBC,IAAI,EAAE,8BAA8B;QACpCC,IAAI,EAAEN;MACR;IACF,CAAC;EACH;;EAEA;EACA,IAAI;IACF,MAAMO,IAAa,GAAGC,IAAI,CAACC,KAAK,CAACT,IAAI,CAAC;IACtC,OAAOU,kBAAkB,CAACH,IAAI,CAAC;;IAE/B;EACF,CAAC,CAAC,OAAOI,KAAK,EAAE;IACd,MAAM,IAAIC,KAAK,CAAC,8BAA8BD,KAAK,EAAE,CAAC;EACxD;AACF;AAEA,SAASD,kBAAkBA,CAACH,IAAa,EAAyB;EAChE;EACA,IAAI,CAACA,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,IAAIM,KAAK,CAACC,OAAO,CAACP,IAAI,CAAC,EAAE;IAC5D,MAAM,IAAIK,KAAK,CAAC,iDAAiD,CAAC;EACpE;EAEA,IAAI,OAAO,IAAIL,IAAI,EAAE;IACnB,OAAO;MACLL,OAAO,EAAE,IAAI;MACbC,MAAM,EAAE;QACNC,MAAM,EAAE,QAAQ;QAChBC,IAAI,EAAE,SAAS;QACfC,IAAI,EAAEC;MACR;IACF,CAAC;EACH;EAEA,IAAI,mBAAmB,IAAIA,IAAI,EAAE;IAC/B,OAAO;MACLL,OAAO,EAAE,IAAI;MACbC,MAAM,EAAE;QACNC,MAAM,EAAE,QAAQ;QAChBC,IAAI,EAAE,yBAAyB;QAC/BC,IAAI,EAAEC;MACR;IACF,CAAC;EACH;EAEA,MAAM,IAAIK,KAAK,CAAC,iDAAiD,CAAC;AACpE;AAEO,eAAeG,sBAAsBA,CAACC,OAAe,EAAkC;EAC5F;EACA,MAAMC,eAAe,GAAG,IAAIC,eAAe,CAAC,CAAC;EAC7C,MAAMC,OAAO,GAAGC,UAAU,CAAC,MAAMH,eAAe,CAACI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;EAEhE,IAAI;IACF;IACA,MAAMC,QAAQ,GAAG,MAAMC,KAAK,CAACP,OAAO,EAAE;MACpCQ,OAAO,EAAE;QACP;QACA;QACA;QACAC,MAAM,EAAE;MACV;IACF,CAAC,CAAC;IACFC,YAAY,CAACP,OAAO,CAAC;IACrB,IAAI,CAACG,QAAQ,CAACK,EAAE,EAAE;MAChB,MAAM,IAAIf,KAAK,CAAC,4DAA4D,CAAC;IAC/E;IAEA,MAAMgB,WAAW,GAAGN,QAAQ,CAACE,OAAO,CAACK,GAAG,CAAC,cAAc,CAAC;IACxD,IAAID,WAAW,aAAXA,WAAW,eAAXA,WAAW,CAAEE,QAAQ,CAAC,kBAAkB,CAAC,EAAE;MAC7C,MAAMvB,IAAa,GAAG,MAAMe,QAAQ,CAACf,IAAI,CAAC,CAAC;MAC3C,OAAOG,kBAAkB,CAACH,IAAI,CAAC;IACjC;IACA,MAAMP,IAAI,GAAG,MAAMsB,QAAQ,CAACtB,IAAI,CAAC,CAAC;IAClC,OAAOD,kBAAkB,CAACC,IAAI,CAAC;EACjC,CAAC,CAAC,OAAOW,KAAK,EAAE;IACde,YAAY,CAACP,OAAO,CAAC;IACrB,MAAM,IAAIP,KAAK,CAAC,8DAA8DD,KAAK,EAAE,CAAC;EACxF;AACF;AAEA,MAAMoB,yBAAyB,GAAIC,GAAW,IAAK;EACjD,MAAMC,SAAS,GAAGC,SAAG,CAACC,iBAAiB,CAACH,GAAG,CAAC,CAACI,MAAM;EACnD,OAAOvB,KAAK,CAACC,OAAO,CAACmB,SAAS,CAACI,GAAG,CAAC,IAAI,OAAOJ,SAAS,CAACI,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAGJ,SAAS,CAACI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI;AACvG,CAAC;;AAED;AACA;AACA;AACO,MAAMC,0CAA0C,GAAG,MAAAA,CAAO;EAC/DhC,IAAI;EACJiC;AAIF,CAAC,KAAmE;EAClE,IAAI;IACF,IAAIjC,IAAI,EAAE;MACR,OAAO;QACLA,IAAI;QACJkC,WAAW,EAAET,yBAAyB,CAACzB,IAAI;MAC7C,CAAC;IACH;IAEA,IAAIiC,GAAG,EAAE;MACP,MAAME,KAAK,GAAGC,oBAAC,CAACC,QAAQ,CAACJ,GAAG,CAAC,CAACE,KAAK;MACnC,IAAIA,KAAK,CAACG,WAAW,IAAI,OAAOH,KAAK,CAACG,WAAW,KAAK,QAAQ,EAAE;QAC9D,MAAMzC,MAAM,GAAG,MAAMY,sBAAsB,CAAC0B,KAAK,CAACG,WAAW,CAAC;QAC9D,IACEzC,MAAM,CAACD,OAAO,IACdC,MAAM,CAACA,MAAM,CAACE,IAAI,KAAK,8BAA8B,IACrD,OAAOF,MAAM,CAACA,MAAM,CAACG,IAAI,KAAK,QAAQ,EACtC;UACA,OAAO;YACLA,IAAI,EAAEH,MAAM,CAACA,MAAM,CAACG,IAAI;YACxBkC,WAAW,EAAET,yBAAyB,CAAC5B,MAAM,CAACA,MAAM,CAACG,IAAI;UAC3D,CAAC;QACH;MACF,CAAC,MAAM,IAAImC,KAAK,CAACI,OAAO,IAAI,OAAOJ,KAAK,CAACI,OAAO,KAAK,QAAQ,EAAE;QAC7D,MAAMC,IAAI,GAAG;UACXxC,IAAI,EAAEmC,KAAK,CAACI,OAAO;UACnBL,WAAW,EAAET,yBAAyB,CAACU,KAAK,CAACI,OAAO;QACtD,CAAC;QACD,OAAOC,IAAI;MACb;IACF;IACA,OAAO;MAAExC,IAAI,EAAE,IAAI;MAAEkC,WAAW,EAAE;IAAK,CAAC;EAC1C,CAAC,CAAC,OAAO7B,KAAK,EAAE;IACd,OAAO;MAAEL,IAAI,EAAE,IAAI;MAAEkC,WAAW,EAAE;IAAK,CAAC;EAC1C;AACF,CAAC;AAAAO,OAAA,CAAAT,0CAAA,GAAAA,0CAAA;AAEM,eAAeU,sBAAsBA,CAC1CC,KAAY,EACZT,WAA0B,EAC1BU,MAA4B,EAChB;EACZ,MAAMC,gBAAgB,GAAGF,KAAK,CAACG,iBAAiB,CAACC,OAAO,CAACC,sBAAgB,CAAC;EAC1E,MAAMC,0BAA0B,GAAGJ,gBAAgB,CAACK,mBAAmB,GACnE,CAAC,GAAGL,gBAAgB,CAACK,mBAAmB,CAAC,GACzC,EAAE;EAEN,IAAI;IACF,IAAIhB,WAAW,EAAES,KAAK,CAACQ,IAAI,CAACC,qBAAqB,CAAClB,WAAW,CAAC;IAC9D,OAAO,MAAMU,MAAM,CAAC,CAAC;EACvB,CAAC,SAAS;IACR,IAAIV,WAAW,EAAEW,gBAAgB,CAACQ,sBAAsB,CAACJ,0BAAsC,CAAC;EAClG;AACF;;AAEA;AACA,MAAMK,0BAA0B,GAAG,KAAK;AAEjC,MAAMC,6BAA6B,GAAG,MAAAA,CAAO;EAClDZ,KAAK;EACL3C,IAAI;EACJiC;AAQF,CAAC,KAAkD;EACjD,IAAIuB,UAAU,GAAGvB,GAAG;EAEpB,IAAI;IACF,MAAM;MAAEC,WAAW,GAAG,IAAI;MAAElC,IAAI,EAAEyD,OAAO,GAAG;IAAK,CAAC,GAAGH,0BAA0B,GAC3E,MAAMtB,0CAA0C,CAAC;MAAEhC,IAAI;MAAEiC;IAAI,CAAC,CAAC,GAC/D,CAAC,CAAC;IAEN,IAAIwB,OAAO,EAAE;MACX;MACA;MACAD,UAAU,GAAG,qBAAqBE,kBAAkB,CAACD,OAAO,CAAC,EAAE;IACjE,CAAC,MAAM,IAAIxB,GAAG,EAAE;MACduB,UAAU,GAAGvB,GAAG;IAClB,CAAC,MAAM;MACL,MAAM,IAAI3B,KAAK,CAAC,qCAAqC,CAAC;IACxD;IAEAqC,KAAK,CAACgB,MAAM,CAACC,MAAM,CAACC,IAAI,CAAC,0BAA0BL,UAAU,EAAE,CAAC;;IAEhE;IACA,MAAMM,QAAQ,GAAG,MAAMpB,sBAAsB,CAACC,KAAK,EAAET,WAAW,EAAE,MAAM;MACtE,OAAOS,KAAK,CAACoB,OAAO,CAACC,eAAe,CAACC,+BAA+B,CAACT,UAAU,CAAC;IAClF,CAAC,CAAC;IAEF,IAAI,CAACM,QAAQ,CAACI,oBAAoB,EAAE;MAClC,MAAM,IAAI5D,KAAK,CAAC,0DAA0D,CAAC;IAC7E;IAEA,OAAO;MACL,GAAGwD,QAAQ,CAACI,oBAAoB;MAChCC,oBAAoB,EAAEL,QAAQ,CAACK,oBAAoB;MACnDC,gBAAgB,EAAEN,QAAQ,CAACK,oBAAoB,CAACE,WAAW,GACvD,IAAAC,yBAAkB,EAACR,QAAQ,CAACK,oBAAoB,CAACE,WAAW,CAAC,GAC7DE,SAAS;MACbC,SAAS,EAAE,IAAIC,IAAI,CAAC,CAAC;MACrB1E,IAAI,EAAE;IACR,CAAC;EACH,CAAC,CAAC,OAAO2E,GAAG,EAAE;IACZ/B,KAAK,CAACgB,MAAM,CAACC,MAAM,CAACvD,KAAK,CAAC,kCAAkC,CAACqE,GAAG,aAAHA,GAAG,uBAAHA,GAAG,CAAYC,OAAO,KAAID,GAAG,EAAE,CAAC;IAC7F,MAAMA,GAAG;EACX;AACF,CAAC;AAAAjC,OAAA,CAAAc,6BAAA,GAAAA,6BAAA;AAEM,MAAMqB,UAAU,GAAG,MAAAA,CAAO;EAC/BjC,KAAK;EACLwB,oBAAoB;EACpBU,qBAAqB;EACrBC,mBAAmB;EACnBC,yBAAyB,GAAG;AAO9B,CAAC,KAAK;EACJ,IAAI,CAACF,qBAAqB,CAACG,wBAAwB,EAAE;IACnD,MAAM,IAAI1E,KAAK,CAAC,mDAAmD,CAAC;EACtE;;EAEA;EACA;EACA;EACA,MAAM2E,WAAW,GAAGC,MAAM,CAACC,WAAW,CACpCN,qBAAqB,CAACO,YAAY,CAACC,OAAO,CAAEC,WAAW,IACrDA,WAAW,CAACC,eAAe,CAACC,GAAG,CAAEC,KAAK,IAAK;IACzC,MAAMC,YAAY,GAAGZ,mBAAmB,CAACW,KAAK,CAACE,iBAAiB,CAAC,CAACC,EAAE;IACpE,MAAMC,UAAU,GACdJ,KAAK,CAACK,qBAAqB,CAACC,IAAI,CAAEC,EAAE,IAAKA,EAAE,CAACC,gBAAgB,CAACL,EAAE,KAAKF,YAAY,CAAC,IACjFD,KAAK,CAACK,qBAAqB,CAAC,CAAC,CAAC;IAEhC,OAAO,CAACL,KAAK,CAACE,iBAAiB,EAAE,CAACE,UAAU,CAACI,gBAAgB,CAAC,CAAC;EACjE,CAAC,CACH,CACF,CAAC;EAED,IAAI;IACF;IACA,MAAM/D,WAAW,GACfiC,oBAAoB,CAACzC,GAAG,IAAIqD,yBAAyB,GAAGtD,yBAAyB,CAAC0C,oBAAoB,CAACzC,GAAG,CAAC,GAAG,IAAI;IAEpH,MAAM7B,MAAM,GAAG,MAAM6C,sBAAsB,CAACC,KAAK,EAAET,WAAW,EAAE,MAC9DS,KAAK,CAACoB,OAAO,CAACC,eAAe,CAACkC,8BAA8B,CAAC;MAC3D/B,oBAAoB;MACpBD,oBAAoB,EAAE;QACpBe;MACF;IACF,CAAC,CACH,CAAC;;IAED;IACA;IACA,IAAI,OAAOpF,MAAM,CAACsG,cAAc,CAACC,IAAI,KAAK,QAAQ,IAAI,OAAOvG,MAAM,CAACsG,cAAc,CAACC,IAAI,CAACC,YAAY,KAAK,QAAQ,EAAE;MACjH,MAAMC,oBAAO,CAACC,OAAO,CAAC1G,MAAM,CAACsG,cAAc,CAACC,IAAI,CAACC,YAAY,CAAC;IAChE;IAEA,IAAIxG,MAAM,CAACsG,cAAc,CAACK,MAAM,GAAG,GAAG,IAAI3G,MAAM,CAACsG,cAAc,CAACK,MAAM,GAAG,GAAG,EAAE;MAC5E,MAAM,IAAIlG,KAAK,CAAC,gDAAgDT,MAAM,CAACsG,cAAc,CAACC,IAAI,EAAY,CAAC;IACzG;IAEA,OAAOvG,MAAM;EACf,CAAC,CAAC,OAAOQ,KAAK,EAAE;IACd;IACA,MAAM,IAAIC,KAAK,CAAC,kCAAkC,CAACD,KAAK,aAALA,KAAK,uBAALA,KAAK,CAAYsE,OAAO,KAAItE,KAAK,EAAE,CAAC;EACzF;AACF,CAAC;AAAAoC,OAAA,CAAAmC,UAAA,GAAAA,UAAA","ignoreList":[]}