@bitgo-beta/sdk-core 8.2.1-beta.204 → 8.2.1-beta.2041

package/dist/src/bitgo/utils/tss/eddsa/typesEddsaMPCv2.js

@@ -0,0 +1,55 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateEddsaMPCv2KeyRequestResponse = exports.eddsaMPCv2VrfKeyGenResponseFields = exports.eddsaMPCv2VrfKeyGenRequestFields = exports.generateEddsaMPCv2KeyRequestBody = void 0;
+const t = __importStar(require("io-ts"));
+const public_types_1 = require("@bitgo/public-types");
+exports.generateEddsaMPCv2KeyRequestBody = t.union([public_types_1.EddsaMPCv2KeyGenRound1Request, public_types_1.EddsaMPCv2KeyGenRound2Request]);
+/** Opaque VRF DKG blobs carried by the existing MPS key-generation rounds. */
+exports.eddsaMPCv2VrfKeyGenRequestFields = t.partial({
+    userVrfMsg1: t.string,
+    backupVrfMsg1: t.string,
+    userVrfMsg2: t.string,
+    backupVrfMsg2: t.string,
+});
+exports.eddsaMPCv2VrfKeyGenResponseFields = t.partial({
+    bitgoVrfMsg1: t.string,
+    bitgoVrfMsg2: t.string,
+});
+exports.generateEddsaMPCv2KeyRequestResponse = t.union([
+    public_types_1.EddsaMPCv2KeyGenRound1Response,
+    public_types_1.EddsaMPCv2KeyGenRound2Response,
+]);
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/utils/tss/index.d.ts

@@ -1,6 +1,7 @@
 import TssUtils, { TssUtilsTypes, EddsaUtilsTypes } from './eddsa';
 export * as ECDSAUtils from './ecdsa';
 export * as EDDSAUtils from './eddsa';
+export * as RedpallasUtils from './redpallas';
 /** @deprecated use EDDSAUtils */
 export { TssUtils };
 /** @deprecated use EDDSAUtilsTypes */
@@ -10,4 +11,8 @@ export { EddsaUtilsTypes };
 export { ITssUtils, IEddsaUtils, TxRequest, EddsaUnsignedTransaction } from './eddsa';
 export * as BaseTssUtils from './baseTSSUtils';
 export * from './baseTypes';
+export * from './addressVerification';
+export * from './preHashedSignable';
+export * from './recipientUtils';
+export * from './signableConsistency';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/bitgo/utils/tss/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/bitgo/utils/tss/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;AACtC,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;AAEtC,iCAAiC;AACjC,OAAO,EAAE,QAAQ,EAAE,CAAC;AACpB,sCAAsC;AACtC,OAAO,EAAE,aAAa,EAAE,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,CAAC;AAG3B,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAEtF,OAAO,KAAK,YAAY,MAAM,gBAAgB,CAAC;AAC/C,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/bitgo/utils/tss/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;AACtC,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;AACtC,OAAO,KAAK,cAAc,MAAM,aAAa,CAAC;AAE9C,iCAAiC;AACjC,OAAO,EAAE,QAAQ,EAAE,CAAC;AACpB,sCAAsC;AACtC,OAAO,EAAE,aAAa,EAAE,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,CAAC;AAG3B,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAEtF,OAAO,KAAK,YAAY,MAAM,gBAAgB,CAAC;AAC/C,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC"}

package/dist/src/bitgo/utils/tss/index.js

@@ -1,7 +1,11 @@
 "use strict";
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
-    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
 }) : (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     o[k2] = m[k];
@@ -11,24 +15,39 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BaseTssUtils = exports.EddsaUtilsTypes = exports.TssUtilsTypes = exports.TssUtils = exports.EDDSAUtils = exports.ECDSAUtils = void 0;
+exports.BaseTssUtils = exports.EddsaUtilsTypes = exports.TssUtilsTypes = exports.TssUtils = exports.RedpallasUtils = exports.EDDSAUtils = exports.ECDSAUtils = void 0;
 const eddsa_1 = __importStar(require("./eddsa"));
 exports.TssUtils = eddsa_1.default;
 Object.defineProperty(exports, "TssUtilsTypes", { enumerable: true, get: function () { return eddsa_1.TssUtilsTypes; } });
 Object.defineProperty(exports, "EddsaUtilsTypes", { enumerable: true, get: function () { return eddsa_1.EddsaUtilsTypes; } });
 exports.ECDSAUtils = __importStar(require("./ecdsa"));
 exports.EDDSAUtils = __importStar(require("./eddsa"));
+exports.RedpallasUtils = __importStar(require("./redpallas"));
 exports.BaseTssUtils = __importStar(require("./baseTSSUtils"));
 __exportStar(require("./baseTypes"), exports);
-//# sourceMappingURL=data:application/json;base64,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
+__exportStar(require("./addressVerification"), exports);
+__exportStar(require("./preHashedSignable"), exports);
+__exportStar(require("./recipientUtils"), exports);
+__exportStar(require("./signableConsistency"), exports);
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/utils/tss/preHashedSignable.d.ts

@@ -0,0 +1,23 @@
+import { IBaseCoin } from '../../baseCoin';
+import { SignableTransaction } from './baseTypes';
+export interface CoinWithPreHashedSignable {
+    /**
+     * Returns true when the signableHex for this transaction is already the
+     * final signing hash (SHA-256 for Avalanche atomic txs), and the MPC
+     * signing flow should use it directly without additional hashing.
+     */
+    isSignablePreHashed(unsignedTx: SignableTransaction): boolean;
+}
+export declare function isCoinWithPreHashedSignable(coin: unknown): coin is CoinWithPreHashedSignable;
+/**
+ * Detect Avalanche atomic cross-chain transactions by codec prefix.
+ *
+ * Avalanche codec type IDs start with 0x00000000 (first 4 hex chars = '0000').
+ * Standard EVM RLP encoding starts with 0xf8xx — overlap is currently impossible.
+ *
+ * Note: The WP strips the '0x' prefix from serializedTxHex before storing,
+ * so we check for '0000' not '0x0000'.
+ */
+export declare function isAvalancheAtomicTx(unsignedTx: SignableTransaction): boolean;
+export declare function shouldUsePreHashedSignable(coin: IBaseCoin, unsignedTx: SignableTransaction): boolean;
+//# sourceMappingURL=preHashedSignable.d.ts.map

package/dist/src/bitgo/utils/tss/preHashedSignable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preHashedSignable.d.ts","sourceRoot":"","sources":["../../../../../src/bitgo/utils/tss/preHashedSignable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,mBAAmB,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,CAAC;CAC/D;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,yBAAyB,CAM5F;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,CAE5E;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,GAAG,OAAO,CAEpG"}

package/dist/src/bitgo/utils/tss/preHashedSignable.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isCoinWithPreHashedSignable = isCoinWithPreHashedSignable;
+exports.isAvalancheAtomicTx = isAvalancheAtomicTx;
+exports.shouldUsePreHashedSignable = shouldUsePreHashedSignable;
+function isCoinWithPreHashedSignable(coin) {
+    return (coin !== null &&
+        typeof coin === 'object' &&
+        typeof coin.isSignablePreHashed === 'function');
+}
+/**
+ * Detect Avalanche atomic cross-chain transactions by codec prefix.
+ *
+ * Avalanche codec type IDs start with 0x00000000 (first 4 hex chars = '0000').
+ * Standard EVM RLP encoding starts with 0xf8xx — overlap is currently impossible.
+ *
+ * Note: The WP strips the '0x' prefix from serializedTxHex before storing,
+ * so we check for '0000' not '0x0000'.
+ */
+function isAvalancheAtomicTx(unsignedTx) {
+    return unsignedTx.serializedTxHex.startsWith('0000');
+}
+function shouldUsePreHashedSignable(coin, unsignedTx) {
+    return isCoinWithPreHashedSignable(coin) && coin.isSignablePreHashed(unsignedTx);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/utils/tss/recipientUtils.d.ts

@@ -0,0 +1,41 @@
+import { TransactionParams } from '../../baseCoin';
+import { TxRequest } from './baseTypes';
+/**
+ * Transaction types that legitimately carry no explicit recipients.
+ * These are the intentType strings as stored in TxRequest.intent.intentType by WP.
+ * verifyTransaction handles no-recipient validation for these internally.
+ * Mirrors the bypass list in abstractEthLikeNewCoins.ts verifyTssTransaction.
+ *
+ * ECDSA types: acceleration, fillNonce, transferToken, tokenApproval, consolidate,
+ *              bridgeFunds, enableToken, customTx, wrapApprove, wrap, contractCall
+ * BSC/BNB delegation-based staking: delegate, undelegate, switchValidator
+ * CELO/ETH lock-based staking: stake, unstake, stakeWithCallData, unstakeWithCallData,
+ *              transferStake, increaseStake, goUnstake
+ * Claim rewards (BSC, CELO — TRX/SOL use EdDSA and are unaffected): claim, stakeClaimRewards
+ */
+export declare const NO_RECIPIENT_TX_TYPES: Set<string>;
+/**
+ * Resolves the effective txParams for TSS signing recipient verification.
+ *
+ * For smart contract interactions, recipients live in txRequest.intent.recipients
+ * (native amount = 0, so buildParams is empty). Falls back to intent recipients
+ * mapped to ITransactionRecipient shape when txParams.recipients is absent.
+ *
+ * tokenName is derived from tokenData.tokenName when present, otherwise from
+ * amount.symbol when chainName is provided and symbol differs from it.
+ *
+ * Staking intents (BSC delegate/undelegate, CELO stake/unstake, etc.) are
+ * identified generically by the presence of `stakingRequestId` on the intent —
+ * a required field on BaseStakeIntent in @bitgo/public-types. These intents
+ * have no txParams recipients by design; validation is done at the coin layer.
+ *
+ * Throws InvalidTransactionError if no recipients can be resolved and the
+ * transaction is not a known no-recipient type.
+ *
+ * @param txRequest - the transaction request containing the persisted intent
+ * @param txParams - the caller-supplied transaction parameters (may be undefined)
+ * @param chainName - the base chain name (e.g. 'sol', 'tsol') used to exclude
+ *   native-coin transfers from tokenName; pass baseCoin.getChain()
+ */
+export declare function resolveEffectiveTxParams(txRequest: TxRequest, txParams: TransactionParams | undefined, chainName?: string): TransactionParams;
+//# sourceMappingURL=recipientUtils.d.ts.map

package/dist/src/bitgo/utils/tss/recipientUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipientUtils.d.ts","sourceRoot":"","sources":["../../../../../src/bitgo/utils/tss/recipientUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EAAmB,SAAS,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,aAwEhC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,SAAS,CAAC,EAAE,MAAM,GACjB,iBAAiB,CA0DnB"}

package/dist/src/bitgo/utils/tss/recipientUtils.js

@@ -0,0 +1,154 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NO_RECIPIENT_TX_TYPES = void 0;
+exports.resolveEffectiveTxParams = resolveEffectiveTxParams;
+const errors_1 = require("../../errors");
+/**
+ * Transaction types that legitimately carry no explicit recipients.
+ * These are the intentType strings as stored in TxRequest.intent.intentType by WP.
+ * verifyTransaction handles no-recipient validation for these internally.
+ * Mirrors the bypass list in abstractEthLikeNewCoins.ts verifyTssTransaction.
+ *
+ * ECDSA types: acceleration, fillNonce, transferToken, tokenApproval, consolidate,
+ *              bridgeFunds, enableToken, customTx, wrapApprove, wrap, contractCall
+ * BSC/BNB delegation-based staking: delegate, undelegate, switchValidator
+ * CELO/ETH lock-based staking: stake, unstake, stakeWithCallData, unstakeWithCallData,
+ *              transferStake, increaseStake, goUnstake
+ * Claim rewards (BSC, CELO — TRX/SOL use EdDSA and are unaffected): claim, stakeClaimRewards
+ */
+exports.NO_RECIPIENT_TX_TYPES = new Set([
+    // ECDSA types
+    'acceleration',
+    'fillNonce',
+    'transferToken',
+    'tokenApproval',
+    'consolidate',
+    'bridgeFunds',
+    'enableToken',
+    'enabletoken',
+    'disabletoken',
+    'customTx',
+    // DeFi vault operations — recipients/calldata built server-side from defiParams
+    'defiApprove',
+    'defiDeposit',
+    'defiWithdraw',
+    // Native wrap/unwrap (WETH9 deposit()/withdraw()) — calldata and the WETH9
+    // address are resolved server-side from the vault binding, so no recipients.
+    // Registered in BOTH spellings on purpose: this set is matched against
+    // txParams.type, which is buildParams.type (camelCase, from wallet.sendMany),
+    // AND against intent.intentType (kebab-case, as WP persists it). Signing paths
+    // that carry no txParams — notably pendingApproval.approve() →
+    // recreateTxRequest() → signTxRequest() with no txParams — only ever see the
+    // kebab-case spelling.
+    'wrapNative',
+    'wrap-native',
+    'unwrapNative',
+    'unwrap-native',
+    // ERC-7984 shielding: approve/wrap calldata is built server-side from the wrap intent
+    'wrapApprove',
+    'wrap',
+    // Smart contract invocations with no explicit SDK-level recipients
+    'contractCall',
+    // BSC/BNB delegation-based staking — intentType strings from TxRequest.intent.intentType.
+    // Note: SOL solDelegateIntent also uses intentType "delegate".
+    'delegate',
+    'undelegate',
+    'switchValidator',
+    // CELO/ETH lock-based staking
+    'stake',
+    'unstake',
+    'stakeWithCallData',
+    'unstakeWithCallData',
+    'transferStake',
+    'increaseStake',
+    'goUnstake',
+    // Claim rewards — BSC and CELO (TRX/SOL/Cosmos use EdDSA, not affected by this guard)
+    'claim',
+    'stakeClaimRewards',
+    'createAccount',
+    'transferAccept',
+    'transferReject',
+    'transferOfferWithdrawn',
+    'cantonCommand',
+    'pledge',
+    // Avalanche / Flare cross-chain atomic imports — recipients are not supplied
+    // by the client because the import consumes UTXOs already owned by the
+    // wallet; the destination address is the wallet itself. WP issues these
+    // with intentType 'import' (P-chain) or 'importtoc' (C-chain).
+    'import',
+    'importtoc',
+    // SOL: deactivate stake account — no on-chain transfer recipient.
+    'deactivate',
+    // SOL: authorize stake account — no transfer recipient.
+    'authorize',
+]);
+/**
+ * Resolves the effective txParams for TSS signing recipient verification.
+ *
+ * For smart contract interactions, recipients live in txRequest.intent.recipients
+ * (native amount = 0, so buildParams is empty). Falls back to intent recipients
+ * mapped to ITransactionRecipient shape when txParams.recipients is absent.
+ *
+ * tokenName is derived from tokenData.tokenName when present, otherwise from
+ * amount.symbol when chainName is provided and symbol differs from it.
+ *
+ * Staking intents (BSC delegate/undelegate, CELO stake/unstake, etc.) are
+ * identified generically by the presence of `stakingRequestId` on the intent —
+ * a required field on BaseStakeIntent in @bitgo/public-types. These intents
+ * have no txParams recipients by design; validation is done at the coin layer.
+ *
+ * Throws InvalidTransactionError if no recipients can be resolved and the
+ * transaction is not a known no-recipient type.
+ *
+ * @param txRequest - the transaction request containing the persisted intent
+ * @param txParams - the caller-supplied transaction parameters (may be undefined)
+ * @param chainName - the base chain name (e.g. 'sol', 'tsol') used to exclude
+ *   native-coin transfers from tokenName; pass baseCoin.getChain()
+ */
+function resolveEffectiveTxParams(txRequest, txParams, chainName) {
+    const intentRecipients = txRequest.intent?.recipients?.map((intentRecipient) => {
+        // Prefer tokenData.tokenName; fall back to amount.symbol when chainName is
+        // provided and differs from it. When absent, skip the symbol fallback.
+        const { symbol } = intentRecipient.amount;
+        const tokenName = intentRecipient.tokenData?.tokenName ||
+            (chainName !== undefined && symbol && symbol !== chainName ? symbol : undefined);
+        return {
+            address: intentRecipient.address.address,
+            amount: intentRecipient.amount.value,
+            data: intentRecipient.data,
+            ...(tokenName && { tokenName }),
+        };
+    });
+    const effectiveTxParams = {
+        ...txParams,
+        recipients: txParams?.recipients?.length ? txParams.recipients : intentRecipients,
+    };
+    // Fall back to intent.intentType when txParams.type is not explicitly set.
+    // Staking wallets call signTransaction without txParams, so the type lives only in the intent.
+    const txType = effectiveTxParams.type ?? txRequest.intent?.intentType ?? '';
+    // Propagate the resolved type so downstream callers
+    if (!effectiveTxParams.type && txType) {
+        effectiveTxParams.type = txType;
+    }
+    // Propagate stakingRequestId from intent into effectiveTxParams so verifyTssTransaction
+    // overrides can bypass the no-recipient guard without needing access to txRequest directly.
+    const intentStakingRequestId = txRequest.intent?.stakingRequestId;
+    if (intentStakingRequestId && !effectiveTxParams.stakingRequestId) {
+        effectiveTxParams.stakingRequestId = intentStakingRequestId;
+    }
+    // All staking intents (BSC delegate/undelegate, CELO stake/unstake, etc.) carry
+    // stakingRequestId as a required field on BaseStakeIntent (@bitgo/public-types).
+    // Use its presence as a generic staking signal — no need to enumerate every intentType.
+    const isStakingIntent = !!txRequest.intent?.stakingRequestId;
+    // buildParams.type from the wallet UI is PascalCase ('Import'); intent.intentType from WP
+    // is lowercase ('import'). Either may be the source of truth depending on the signing path.
+    const intentType = txRequest.intent?.intentType ?? '';
+    if (!effectiveTxParams.recipients?.length &&
+        !isStakingIntent &&
+        !exports.NO_RECIPIENT_TX_TYPES.has(txType) &&
+        !exports.NO_RECIPIENT_TX_TYPES.has(intentType)) {
+        throw new errors_1.InvalidTransactionError('Recipient details are required to verify this transaction before signing. Pass txParams with at least one recipient.');
+    }
+    return effectiveTxParams;
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVjaXBpZW50VXRpbHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvYml0Z28vdXRpbHMvdHNzL3JlY2lwaWVudFV0aWxzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQWtIQSw0REE4REM7QUEvS0QseUNBQXVEO0FBR3ZEOzs7Ozs7Ozs7Ozs7R0FZRztBQUNVLFFBQUEscUJBQXFCLEdBQUcsSUFBSSxHQUFHLENBQUM7SUFDM0MsY0FBYztJQUNkLGNBQWM7SUFDZCxXQUFXO0lBQ1gsZUFBZTtJQUNmLGVBQWU7SUFDZixhQUFhO0lBQ2IsYUFBYTtJQUNiLGFBQWE7SUFDYixhQUFhO0lBQ2IsY0FBYztJQUNkLFVBQVU7SUFDVixnRkFBZ0Y7SUFDaEYsYUFBYTtJQUNiLGFBQWE7SUFDYixjQUFjO0lBQ2QsMkVBQTJFO0lBQzNFLDZFQUE2RTtJQUM3RSx1RUFBdUU7SUFDdkUsOEVBQThFO0lBQzlFLCtFQUErRTtJQUMvRSwrREFBK0Q7SUFDL0QsNkVBQTZFO0lBQzdFLHVCQUF1QjtJQUN2QixZQUFZO0lBQ1osYUFBYTtJQUNiLGNBQWM7SUFDZCxlQUFlO0lBQ2Ysc0ZBQXNGO0lBQ3RGLGFBQWE7SUFDYixNQUFNO0lBQ04sbUVBQW1FO0lBQ25FLGNBQWM7SUFFZCwwRkFBMEY7SUFDMUYsK0RBQStEO0lBQy9ELFVBQVU7SUFDVixZQUFZO0lBQ1osaUJBQWlCO0lBRWpCLDhCQUE4QjtJQUM5QixPQUFPO0lBQ1AsU0FBUztJQUNULG1CQUFtQjtJQUNuQixxQkFBcUI7SUFDckIsZUFBZTtJQUNmLGVBQWU7SUFDZixXQUFXO0lBRVgsc0ZBQXNGO0lBQ3RGLE9BQU87SUFDUCxtQkFBbUI7SUFFbkIsZUFBZTtJQUNmLGdCQUFnQjtJQUNoQixnQkFBZ0I7SUFDaEIsd0JBQXdCO0lBQ3hCLGVBQWU7SUFDZixRQUFRO0lBRVIsNkVBQTZFO0lBQzdFLHVFQUF1RTtJQUN2RSx3RUFBd0U7SUFDeEUsK0RBQStEO0lBQy9ELFFBQVE7SUFDUixXQUFXO0lBRVgsa0VBQWtFO0lBQ2xFLFlBQVk7SUFFWix3REFBd0Q7SUFDeEQsV0FBVztDQUNaLENBQUMsQ0FBQztBQUVIOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0dBc0JHO0FBQ0gsU0FBZ0Isd0JBQXdCLENBQ3RDLFNBQW9CLEVBQ3BCLFFBQXVDLEVBQ3ZDLFNBQWtCO0lBRWxCLE1BQU0sZ0JBQWdCLEdBQUksU0FBUyxDQUFDLE1BQTBCLEVBQUUsVUFBVSxFQUFFLEdBQUcsQ0FBQyxDQUFDLGVBQWUsRUFBRSxFQUFFO1FBQ2xHLDJFQUEyRTtRQUMzRSx1RUFBdUU7UUFDdkUsTUFBTSxFQUFFLE1BQU0sRUFBRSxHQUFHLGVBQWUsQ0FBQyxNQUFNLENBQUM7UUFDMUMsTUFBTSxTQUFTLEdBQ2IsZUFBZSxDQUFDLFNBQVMsRUFBRSxTQUFTO1lBQ3BDLENBQUMsU0FBUyxLQUFLLFNBQVMsSUFBSSxNQUFNLElBQUksTUFBTSxLQUFLLFNBQVMsQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUMsQ0FBQztRQUNuRixPQUFPO1lBQ0wsT0FBTyxFQUFFLGVBQWUsQ0FBQyxPQUFPLENBQUMsT0FBTztZQUN4QyxNQUFNLEVBQUUsZUFBZSxDQUFDLE1BQU0sQ0FBQyxLQUFLO1lBQ3BDLElBQUksRUFBRSxlQUFlLENBQUMsSUFBSTtZQUMxQixHQUFHLENBQUMsU0FBUyxJQUFJLEVBQUUsU0FBUyxFQUFFLENBQUM7U0FDaEMsQ0FBQztJQUNKLENBQUMsQ0FBQyxDQUFDO0lBRUgsTUFBTSxpQkFBaUIsR0FBc0I7UUFDM0MsR0FBRyxRQUFRO1FBQ1gsVUFBVSxFQUFFLFFBQVEsRUFBRSxVQUFVLEVBQUUsTUFBTSxDQUFDLENBQUMsQ0FBQyxRQUFRLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxnQkFBZ0I7S0FDbEYsQ0FBQztJQUVGLDJFQUEyRTtJQUMzRSwrRkFBK0Y7SUFDL0YsTUFBTSxNQUFNLEdBQUcsaUJBQWlCLENBQUMsSUFBSSxJQUFLLFNBQVMsQ0FBQyxNQUEwQixFQUFFLFVBQVUsSUFBSSxFQUFFLENBQUM7SUFFakcsb0RBQW9EO0lBQ3BELElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxJQUFJLElBQUksTUFBTSxFQUFFLENBQUM7UUFDdEMsaUJBQWlCLENBQUMsSUFBSSxHQUFHLE1BQU0sQ0FBQztJQUNsQyxDQUFDO0lBRUQsd0ZBQXdGO0lBQ3hGLDRGQUE0RjtJQUM1RixNQUFNLHNCQUFzQixHQUFJLFNBQVMsQ0FBQyxNQUEwQixFQUFFLGdCQUFnQixDQUFDO0lBQ3ZGLElBQUksc0JBQXNCLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxnQkFBZ0IsRUFBRSxDQUFDO1FBQ2xFLGlCQUFpQixDQUFDLGdCQUFnQixHQUFHLHNCQUFzQixDQUFDO0lBQzlELENBQUM7SUFFRCxnRkFBZ0Y7SUFDaEYsaUZBQWlGO0lBQ2pGLHdGQUF3RjtJQUN4RixNQUFNLGVBQWUsR0FBRyxDQUFDLENBQUUsU0FBUyxDQUFDLE1BQTBCLEVBQUUsZ0JBQWdCLENBQUM7SUFFbEYsMEZBQTBGO0lBQzFGLDRGQUE0RjtJQUM1RixNQUFNLFVBQVUsR0FBSSxTQUFTLENBQUMsTUFBMEIsRUFBRSxVQUFVLElBQUksRUFBRSxDQUFDO0lBRTNFLElBQ0UsQ0FBQyxpQkFBaUIsQ0FBQyxVQUFVLEVBQUUsTUFBTTtRQUNyQyxDQUFDLGVBQWU7UUFDaEIsQ0FBQyw2QkFBcUIsQ0FBQyxHQUFHLENBQUMsTUFBTSxDQUFDO1FBQ2xDLENBQUMsNkJBQXFCLENBQUMsR0FBRyxDQUFDLFVBQVUsQ0FBQyxFQUN0QyxDQUFDO1FBQ0QsTUFBTSxJQUFJLGdDQUF1QixDQUMvQixzSEFBc0gsQ0FDdkgsQ0FBQztJQUNKLENBQUM7SUFFRCxPQUFPLGlCQUFpQixDQUFDO0FBQzNCLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgeyBUcmFuc2FjdGlvblBhcmFtcyB9IGZyb20gJy4uLy4uL2Jhc2VDb2luJztcbmltcG9ydCB7IEludmFsaWRUcmFuc2FjdGlvbkVycm9yIH0gZnJvbSAnLi4vLi4vZXJyb3JzJztcbmltcG9ydCB7IFBvcHVsYXRlZEludGVudCwgVHhSZXF1ZXN0IH0gZnJvbSAnLi9iYXNlVHlwZXMnO1xuXG4vKipcbiAqIFRyYW5zYWN0aW9uIHR5cGVzIHRoYXQgbGVnaXRpbWF0ZWx5IGNhcnJ5IG5vIGV4cGxpY2l0IHJlY2lwaWVudHMuXG4gKiBUaGVzZSBhcmUgdGhlIGludGVudFR5cGUgc3RyaW5ncyBhcyBzdG9yZWQgaW4gVHhSZXF1ZXN0LmludGVudC5pbnRlbnRUeXBlIGJ5IFdQLlxuICogdmVyaWZ5VHJhbnNhY3Rpb24gaGFuZGxlcyBuby1yZWNpcGllbnQgdmFsaWRhdGlvbiBmb3IgdGhlc2UgaW50ZXJuYWxseS5cbiAqIE1pcnJvcnMgdGhlIGJ5cGFzcyBsaXN0IGluIGFic3RyYWN0RXRoTGlrZU5ld0NvaW5zLnRzIHZlcmlmeVRzc1RyYW5zYWN0aW9uLlxuICpcbiAqIEVDRFNBIHR5cGVzOiBhY2NlbGVyYXRpb24sIGZpbGxOb25jZSwgdHJhbnNmZXJUb2tlbiwgdG9rZW5BcHByb3ZhbCwgY29uc29saWRhdGUsXG4gKiAgICAgICAgICAgICAgYnJpZGdlRnVuZHMsIGVuYWJsZVRva2VuLCBjdXN0b21UeCwgd3JhcEFwcHJvdmUsIHdyYXAsIGNvbnRyYWN0Q2FsbFxuICogQlNDL0JOQiBkZWxlZ2F0aW9uLWJhc2VkIHN0YWtpbmc6IGRlbGVnYXRlLCB1bmRlbGVnYXRlLCBzd2l0Y2hWYWxpZGF0b3JcbiAqIENFTE8vRVRIIGxvY2stYmFzZWQgc3Rha2luZzogc3Rha2UsIHVuc3Rha2UsIHN0YWtlV2l0aENhbGxEYXRhLCB1bnN0YWtlV2l0aENhbGxEYXRhLFxuICogICAgICAgICAgICAgIHRyYW5zZmVyU3Rha2UsIGluY3JlYXNlU3Rha2UsIGdvVW5zdGFrZVxuICogQ2xhaW0gcmV3YXJkcyAoQlNDLCBDRUxPIOKAlCBUUlgvU09MIHVzZSBFZERTQSBhbmQgYXJlIHVuYWZmZWN0ZWQpOiBjbGFpbSwgc3Rha2VDbGFpbVJld2FyZHNcbiAqL1xuZXhwb3J0IGNvbnN0IE5PX1JFQ0lQSUVOVF9UWF9UWVBFUyA9IG5ldyBTZXQoW1xuICAvLyBFQ0RTQSB0eXBlc1xuICAnYWNjZWxlcmF0aW9uJyxcbiAgJ2ZpbGxOb25jZScsXG4gICd0cmFuc2ZlclRva2VuJyxcbiAgJ3Rva2VuQXBwcm92YWwnLFxuICAnY29uc29saWRhdGUnLFxuICAnYnJpZGdlRnVuZHMnLFxuICAnZW5hYmxlVG9rZW4nLFxuICAnZW5hYmxldG9rZW4nLFxuICAnZGlzYWJsZXRva2VuJyxcbiAgJ2N1c3RvbVR4JyxcbiAgLy8gRGVGaSB2YXVsdCBvcGVyYXRpb25zIOKAlCByZWNpcGllbnRzL2NhbGxkYXRhIGJ1aWx0IHNlcnZlci1zaWRlIGZyb20gZGVmaVBhcmFtc1xuICAnZGVmaUFwcHJvdmUnLFxuICAnZGVmaURlcG9zaXQnLFxuICAnZGVmaVdpdGhkcmF3JyxcbiAgLy8gTmF0aXZlIHdyYXAvdW53cmFwIChXRVRIOSBkZXBvc2l0KCkvd2l0aGRyYXcoKSkg4oCUIGNhbGxkYXRhIGFuZCB0aGUgV0VUSDlcbiAgLy8gYWRkcmVzcyBhcmUgcmVzb2x2ZWQgc2VydmVyLXNpZGUgZnJvbSB0aGUgdmF1bHQgYmluZGluZywgc28gbm8gcmVjaXBpZW50cy5cbiAgLy8gUmVnaXN0ZXJlZCBpbiBCT1RIIHNwZWxsaW5ncyBvbiBwdXJwb3NlOiB0aGlzIHNldCBpcyBtYXRjaGVkIGFnYWluc3RcbiAgLy8gdHhQYXJhbXMudHlwZSwgd2hpY2ggaXMgYnVpbGRQYXJhbXMudHlwZSAoY2FtZWxDYXNlLCBmcm9tIHdhbGxldC5zZW5kTWFueSksXG4gIC8vIEFORCBhZ2FpbnN0IGludGVudC5pbnRlbnRUeXBlIChrZWJhYi1jYXNlLCBhcyBXUCBwZXJzaXN0cyBpdCkuIFNpZ25pbmcgcGF0aHNcbiAgLy8gdGhhdCBjYXJyeSBubyB0eFBhcmFtcyDigJQgbm90YWJseSBwZW5kaW5nQXBwcm92YWwuYXBwcm92ZSgpIOKGklxuICAvLyByZWNyZWF0ZVR4UmVxdWVzdCgpIOKGkiBzaWduVHhSZXF1ZXN0KCkgd2l0aCBubyB0eFBhcmFtcyDigJQgb25seSBldmVyIHNlZSB0aGVcbiAgLy8ga2ViYWItY2FzZSBzcGVsbGluZy5cbiAgJ3dyYXBOYXRpdmUnLFxuICAnd3JhcC1uYXRpdmUnLFxuICAndW53cmFwTmF0aXZlJyxcbiAgJ3Vud3JhcC1uYXRpdmUnLFxuICAvLyBFUkMtNzk4NCBzaGllbGRpbmc6IGFwcHJvdmUvd3JhcCBjYWxsZGF0YSBpcyBidWlsdCBzZXJ2ZXItc2lkZSBmcm9tIHRoZSB3cmFwIGludGVudFxuICAnd3JhcEFwcHJvdmUnLFxuICAnd3JhcCcsXG4gIC8vIFNtYXJ0IGNvbnRyYWN0IGludm9jYXRpb25zIHdpdGggbm8gZXhwbGljaXQgU0RLLWxldmVsIHJlY2lwaWVudHNcbiAgJ2NvbnRyYWN0Q2FsbCcsXG5cbiAgLy8gQlNDL0JOQiBkZWxlZ2F0aW9uLWJhc2VkIHN0YWtpbmcg4oCUIGludGVudFR5cGUgc3RyaW5ncyBmcm9tIFR4UmVxdWVzdC5pbnRlbnQuaW50ZW50VHlwZS5cbiAgLy8gTm90ZTogU09MIHNvbERlbGVnYXRlSW50ZW50IGFsc28gdXNlcyBpbnRlbnRUeXBlIFwiZGVsZWdhdGVcIi5cbiAgJ2RlbGVnYXRlJyxcbiAgJ3VuZGVsZWdhdGUnLFxuICAnc3dpdGNoVmFsaWRhdG9yJyxcblxuICAvLyBDRUxPL0VUSCBsb2NrLWJhc2VkIHN0YWtpbmdcbiAgJ3N0YWtlJyxcbiAgJ3Vuc3Rha2UnLFxuICAnc3Rha2VXaXRoQ2FsbERhdGEnLFxuICAndW5zdGFrZVdpdGhDYWxsRGF0YScsXG4gICd0cmFuc2ZlclN0YWtlJyxcbiAgJ2luY3JlYXNlU3Rha2UnLFxuICAnZ29VbnN0YWtlJyxcblxuICAvLyBDbGFpbSByZXdhcmRzIOKAlCBCU0MgYW5kIENFTE8gKFRSWC9TT0wvQ29zbW9zIHVzZSBFZERTQSwgbm90IGFmZmVjdGVkIGJ5IHRoaXMgZ3VhcmQpXG4gICdjbGFpbScsXG4gICdzdGFrZUNsYWltUmV3YXJkcycsXG5cbiAgJ2NyZWF0ZUFjY291bnQnLFxuICAndHJhbnNmZXJBY2NlcHQnLFxuICAndHJhbnNmZXJSZWplY3QnLFxuICAndHJhbnNmZXJPZmZlcldpdGhkcmF3bicsXG4gICdjYW50b25Db21tYW5kJyxcbiAgJ3BsZWRnZScsXG5cbiAgLy8gQXZhbGFuY2hlIC8gRmxhcmUgY3Jvc3MtY2hhaW4gYXRvbWljIGltcG9ydHMg4oCUIHJlY2lwaWVudHMgYXJlIG5vdCBzdXBwbGllZFxuICAvLyBieSB0aGUgY2xpZW50IGJlY2F1c2UgdGhlIGltcG9ydCBjb25zdW1lcyBVVFhPcyBhbHJlYWR5IG93bmVkIGJ5IHRoZVxuICAvLyB3YWxsZXQ7IHRoZSBkZXN0aW5hdGlvbiBhZGRyZXNzIGlzIHRoZSB3YWxsZXQgaXRzZWxmLiBXUCBpc3N1ZXMgdGhlc2VcbiAgLy8gd2l0aCBpbnRlbnRUeXBlICdpbXBvcnQnIChQLWNoYWluKSBvciAnaW1wb3J0dG9jJyAoQy1jaGFpbikuXG4gICdpbXBvcnQnLFxuICAnaW1wb3J0dG9jJyxcblxuICAvLyBTT0w6IGRlYWN0aXZhdGUgc3Rha2UgYWNjb3VudCDigJQgbm8gb24tY2hhaW4gdHJhbnNmZXIgcmVjaXBpZW50LlxuICAnZGVhY3RpdmF0ZScsXG5cbiAgLy8gU09MOiBhdXRob3JpemUgc3Rha2UgYWNjb3VudCDigJQgbm8gdHJhbnNmZXIgcmVjaXBpZW50LlxuICAnYXV0aG9yaXplJyxcbl0pO1xuXG4vKipcbiAqIFJlc29sdmVzIHRoZSBlZmZlY3RpdmUgdHhQYXJhbXMgZm9yIFRTUyBzaWduaW5nIHJlY2lwaWVudCB2ZXJpZmljYXRpb24uXG4gKlxuICogRm9yIHNtYXJ0IGNvbnRyYWN0IGludGVyYWN0aW9ucywgcmVjaXBpZW50cyBsaXZlIGluIHR4UmVxdWVzdC5pbnRlbnQucmVjaXBpZW50c1xuICogKG5hdGl2ZSBhbW91bnQgPSAwLCBzbyBidWlsZFBhcmFtcyBpcyBlbXB0eSkuIEZhbGxzIGJhY2sgdG8gaW50ZW50IHJlY2lwaWVudHNcbiAqIG1hcHBlZCB0byBJVHJhbnNhY3Rpb25SZWNpcGllbnQgc2hhcGUgd2hlbiB0eFBhcmFtcy5yZWNpcGllbnRzIGlzIGFic2VudC5cbiAqXG4gKiB0b2tlbk5hbWUgaXMgZGVyaXZlZCBmcm9tIHRva2VuRGF0YS50b2tlbk5hbWUgd2hlbiBwcmVzZW50LCBvdGhlcndpc2UgZnJvbVxuICogYW1vdW50LnN5bWJvbCB3aGVuIGNoYWluTmFtZSBpcyBwcm92aWRlZCBhbmQgc3ltYm9sIGRpZmZlcnMgZnJvbSBpdC5cbiAqXG4gKiBTdGFraW5nIGludGVudHMgKEJTQyBkZWxlZ2F0ZS91bmRlbGVnYXRlLCBDRUxPIHN0YWtlL3Vuc3Rha2UsIGV0Yy4pIGFyZVxuICogaWRlbnRpZmllZCBnZW5lcmljYWxseSBieSB0aGUgcHJlc2VuY2Ugb2YgYHN0YWtpbmdSZXF1ZXN0SWRgIG9uIHRoZSBpbnRlbnQg4oCUXG4gKiBhIHJlcXVpcmVkIGZpZWxkIG9uIEJhc2VTdGFrZUludGVudCBpbiBAYml0Z28vcHVibGljLXR5cGVzLiBUaGVzZSBpbnRlbnRzXG4gKiBoYXZlIG5vIHR4UGFyYW1zIHJlY2lwaWVudHMgYnkgZGVzaWduOyB2YWxpZGF0aW9uIGlzIGRvbmUgYXQgdGhlIGNvaW4gbGF5ZXIuXG4gKlxuICogVGhyb3dzIEludmFsaWRUcmFuc2FjdGlvbkVycm9yIGlmIG5vIHJlY2lwaWVudHMgY2FuIGJlIHJlc29sdmVkIGFuZCB0aGVcbiAqIHRyYW5zYWN0aW9uIGlzIG5vdCBhIGtub3duIG5vLXJlY2lwaWVudCB0eXBlLlxuICpcbiAqIEBwYXJhbSB0eFJlcXVlc3QgLSB0aGUgdHJhbnNhY3Rpb24gcmVxdWVzdCBjb250YWluaW5nIHRoZSBwZXJzaXN0ZWQgaW50ZW50XG4gKiBAcGFyYW0gdHhQYXJhbXMgLSB0aGUgY2FsbGVyLXN1cHBsaWVkIHRyYW5zYWN0aW9uIHBhcmFtZXRlcnMgKG1heSBiZSB1bmRlZmluZWQpXG4gKiBAcGFyYW0gY2hhaW5OYW1lIC0gdGhlIGJhc2UgY2hhaW4gbmFtZSAoZS5nLiAnc29sJywgJ3Rzb2wnKSB1c2VkIHRvIGV4Y2x1ZGVcbiAqICAgbmF0aXZlLWNvaW4gdHJhbnNmZXJzIGZyb20gdG9rZW5OYW1lOyBwYXNzIGJhc2VDb2luLmdldENoYWluKClcbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIHJlc29sdmVFZmZlY3RpdmVUeFBhcmFtcyhcbiAgdHhSZXF1ZXN0OiBUeFJlcXVlc3QsXG4gIHR4UGFyYW1zOiBUcmFuc2FjdGlvblBhcmFtcyB8IHVuZGVmaW5lZCxcbiAgY2hhaW5OYW1lPzogc3RyaW5nXG4pOiBUcmFuc2FjdGlvblBhcmFtcyB7XG4gIGNvbnN0IGludGVudFJlY2lwaWVudHMgPSAodHhSZXF1ZXN0LmludGVudCBhcyBQb3B1bGF0ZWRJbnRlbnQpPy5yZWNpcGllbnRzPy5tYXAoKGludGVudFJlY2lwaWVudCkgPT4ge1xuICAgIC8vIFByZWZlciB0b2tlbkRhdGEudG9rZW5OYW1lOyBmYWxsIGJhY2sgdG8gYW1vdW50LnN5bWJvbCB3aGVuIGNoYWluTmFtZSBpc1xuICAgIC8vIHByb3ZpZGVkIGFuZCBkaWZmZXJzIGZyb20gaXQuIFdoZW4gYWJzZW50LCBza2lwIHRoZSBzeW1ib2wgZmFsbGJhY2suXG4gICAgY29uc3QgeyBzeW1ib2wgfSA9IGludGVudFJlY2lwaWVudC5hbW91bnQ7XG4gICAgY29uc3QgdG9rZW5OYW1lID1cbiAgICAgIGludGVudFJlY2lwaWVudC50b2tlbkRhdGE/LnRva2VuTmFtZSB8fFxuICAgICAgKGNoYWluTmFtZSAhPT0gdW5kZWZpbmVkICYmIHN5bWJvbCAmJiBzeW1ib2wgIT09IGNoYWluTmFtZSA/IHN5bWJvbCA6IHVuZGVmaW5lZCk7XG4gICAgcmV0dXJuIHtcbiAgICAgIGFkZHJlc3M6IGludGVudFJlY2lwaWVudC5hZGRyZXNzLmFkZHJlc3MsXG4gICAgICBhbW91bnQ6IGludGVudFJlY2lwaWVudC5hbW91bnQudmFsdWUsXG4gICAgICBkYXRhOiBpbnRlbnRSZWNpcGllbnQuZGF0YSxcbiAgICAgIC4uLih0b2tlbk5hbWUgJiYgeyB0b2tlbk5hbWUgfSksXG4gICAgfTtcbiAgfSk7XG5cbiAgY29uc3QgZWZmZWN0aXZlVHhQYXJhbXM6IFRyYW5zYWN0aW9uUGFyYW1zID0ge1xuICAgIC4uLnR4UGFyYW1zLFxuICAgIHJlY2lwaWVudHM6IHR4UGFyYW1zPy5yZWNpcGllbnRzPy5sZW5ndGggPyB0eFBhcmFtcy5yZWNpcGllbnRzIDogaW50ZW50UmVjaXBpZW50cyxcbiAgfTtcblxuICAvLyBGYWxsIGJhY2sgdG8gaW50ZW50LmludGVudFR5cGUgd2hlbiB0eFBhcmFtcy50eXBlIGlzIG5vdCBleHBsaWNpdGx5IHNldC5cbiAgLy8gU3Rha2luZyB3YWxsZXRzIGNhbGwgc2lnblRyYW5zYWN0aW9uIHdpdGhvdXQgdHhQYXJhbXMsIHNvIHRoZSB0eXBlIGxpdmVzIG9ubHkgaW4gdGhlIGludGVudC5cbiAgY29uc3QgdHhUeXBlID0gZWZmZWN0aXZlVHhQYXJhbXMudHlwZSA/PyAodHhSZXF1ZXN0LmludGVudCBhcyBQb3B1bGF0ZWRJbnRlbnQpPy5pbnRlbnRUeXBlID8/ICcnO1xuXG4gIC8vIFByb3BhZ2F0ZSB0aGUgcmVzb2x2ZWQgdHlwZSBzbyBkb3duc3RyZWFtIGNhbGxlcnNcbiAgaWYgKCFlZmZlY3RpdmVUeFBhcmFtcy50eXBlICYmIHR4VHlwZSkge1xuICAgIGVmZmVjdGl2ZVR4UGFyYW1zLnR5cGUgPSB0eFR5cGU7XG4gIH1cblxuICAvLyBQcm9wYWdhdGUgc3Rha2luZ1JlcXVlc3RJZCBmcm9tIGludGVudCBpbnRvIGVmZmVjdGl2ZVR4UGFyYW1zIHNvIHZlcmlmeVRzc1RyYW5zYWN0aW9uXG4gIC8vIG92ZXJyaWRlcyBjYW4gYnlwYXNzIHRoZSBuby1yZWNpcGllbnQgZ3VhcmQgd2l0aG91dCBuZWVkaW5nIGFjY2VzcyB0byB0eFJlcXVlc3QgZGlyZWN0bHkuXG4gIGNvbnN0IGludGVudFN0YWtpbmdSZXF1ZXN0SWQgPSAodHhSZXF1ZXN0LmludGVudCBhcyBQb3B1bGF0ZWRJbnRlbnQpPy5zdGFraW5nUmVxdWVzdElkO1xuICBpZiAoaW50ZW50U3Rha2luZ1JlcXVlc3RJZCAmJiAhZWZmZWN0aXZlVHhQYXJhbXMuc3Rha2luZ1JlcXVlc3RJZCkge1xuICAgIGVmZmVjdGl2ZVR4UGFyYW1zLnN0YWtpbmdSZXF1ZXN0SWQgPSBpbnRlbnRTdGFraW5nUmVxdWVzdElkO1xuICB9XG5cbiAgLy8gQWxsIHN0YWtpbmcgaW50ZW50cyAoQlNDIGRlbGVnYXRlL3VuZGVsZWdhdGUsIENFTE8gc3Rha2UvdW5zdGFrZSwgZXRjLikgY2FycnlcbiAgLy8gc3Rha2luZ1JlcXVlc3RJZCBhcyBhIHJlcXVpcmVkIGZpZWxkIG9uIEJhc2VTdGFrZUludGVudCAoQGJpdGdvL3B1YmxpYy10eXBlcykuXG4gIC8vIFVzZSBpdHMgcHJlc2VuY2UgYXMgYSBnZW5lcmljIHN0YWtpbmcgc2lnbmFsIOKAlCBubyBuZWVkIHRvIGVudW1lcmF0ZSBldmVyeSBpbnRlbnRUeXBlLlxuICBjb25zdCBpc1N0YWtpbmdJbnRlbnQgPSAhISh0eFJlcXVlc3QuaW50ZW50IGFzIFBvcHVsYXRlZEludGVudCk/LnN0YWtpbmdSZXF1ZXN0SWQ7XG5cbiAgLy8gYnVpbGRQYXJhbXMudHlwZSBmcm9tIHRoZSB3YWxsZXQgVUkgaXMgUGFzY2FsQ2FzZSAoJ0ltcG9ydCcpOyBpbnRlbnQuaW50ZW50VHlwZSBmcm9tIFdQXG4gIC8vIGlzIGxvd2VyY2FzZSAoJ2ltcG9ydCcpLiBFaXRoZXIgbWF5IGJlIHRoZSBzb3VyY2Ugb2YgdHJ1dGggZGVwZW5kaW5nIG9uIHRoZSBzaWduaW5nIHBhdGguXG4gIGNvbnN0IGludGVudFR5cGUgPSAodHhSZXF1ZXN0LmludGVudCBhcyBQb3B1bGF0ZWRJbnRlbnQpPy5pbnRlbnRUeXBlID8/ICcnO1xuXG4gIGlmIChcbiAgICAhZWZmZWN0aXZlVHhQYXJhbXMucmVjaXBpZW50cz8ubGVuZ3RoICYmXG4gICAgIWlzU3Rha2luZ0ludGVudCAmJlxuICAgICFOT19SRUNJUElFTlRfVFhfVFlQRVMuaGFzKHR4VHlwZSkgJiZcbiAgICAhTk9fUkVDSVBJRU5UX1RYX1RZUEVTLmhhcyhpbnRlbnRUeXBlKVxuICApIHtcbiAgICB0aHJvdyBuZXcgSW52YWxpZFRyYW5zYWN0aW9uRXJyb3IoXG4gICAgICAnUmVjaXBpZW50IGRldGFpbHMgYXJlIHJlcXVpcmVkIHRvIHZlcmlmeSB0aGlzIHRyYW5zYWN0aW9uIGJlZm9yZSBzaWduaW5nLiBQYXNzIHR4UGFyYW1zIHdpdGggYXQgbGVhc3Qgb25lIHJlY2lwaWVudC4nXG4gICAgKTtcbiAgfVxuXG4gIHJldHVybiBlZmZlY3RpdmVUeFBhcmFtcztcbn1cbiJdfQ==

package/dist/src/bitgo/utils/tss/redpallas/SMC/utils.d.ts

@@ -0,0 +1,29 @@
+import { RedpallasBitgoToOVC1Round1Response, RedpallasBitgoToOVC1Round2Response, RedpallasMPCv2KeyGenRound1Response, RedpallasMPCv2KeyGenRound2Response, RedpallasOVC1ToBitgoRound1Payload, RedpallasOVC2ToBitgoRound2Payload } from '@bitgo/public-types';
+import { IBaseCoin } from '../../../../baseCoin';
+import { BitGoBase } from '../../../../bitgoBase';
+import { Keychain } from '../../../..';
+import { RedpallasMPCv2KeyGenSendFn } from '../redpallasMPCv2KeyGenSender';
+/**
+ * Custodial (SMC/OVC) DKG-only key generation for the Zcash Orchard shielded pool (RedPallas).
+ *
+ * Mirrors for both custodial and SMC wallet
+ * ceremonies driven by external OVC (offline vault console) clients: round1/round2 payloads are
+ * relayed from OVC1/OVC2 to BitGo and back. There is no round3 (no signing) - RedPallas MPS DKG
+ * completes key generation in 2 online rounds, same as EdDSA MPS DKG.
+ */
+export declare class RedpallasMPCv2SMCUtils {
+    private bitgo;
+    private baseCoin;
+    private MPCv2Utils;
+    constructor(bitgo: BitGoBase, baseCoin: IBaseCoin);
+    keyGenRound1(enterprise: string, payload: RedpallasOVC1ToBitgoRound1Payload): Promise<RedpallasBitgoToOVC1Round1Response>;
+    keyGenRound2(enterprise: string, payload: RedpallasOVC2ToBitgoRound2Payload): Promise<RedpallasBitgoToOVC1Round2Response>;
+    keyGenRound1BySender(senderFn: RedpallasMPCv2KeyGenSendFn<RedpallasMPCv2KeyGenRound1Response>, payload: RedpallasOVC1ToBitgoRound1Payload): Promise<RedpallasBitgoToOVC1Round1Response>;
+    keyGenRound2BySender(senderFn: RedpallasMPCv2KeyGenSendFn<RedpallasMPCv2KeyGenRound2Response>, payload: RedpallasOVC2ToBitgoRound2Payload): Promise<RedpallasBitgoToOVC1Round2Response>;
+    uploadClientKeys(bitgoKeyId: string, userCommonKeychain: string, backupCommonKeychain: string): Promise<{
+        userKeychain: Keychain;
+        backupKeychain: Keychain;
+        bitgoKeychain: Keychain;
+    }>;
+}
+//# sourceMappingURL=utils.d.ts.map

package/dist/src/bitgo/utils/tss/redpallas/SMC/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../../../src/bitgo/utils/tss/redpallas/SMC/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,kCAAkC,EAClC,kCAAkC,EAElC,kCAAkC,EAClC,kCAAkC,EAClC,iCAAiC,EACjC,iCAAiC,EAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAgB,QAAQ,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,0BAA0B,EAAsC,MAAM,+BAA+B,CAAC;AAE/G;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IAGrB,OAAO,CAAC,KAAK;IAAa,OAAO,CAAC,QAAQ;IAFtD,OAAO,CAAC,UAAU,CAAsB;gBAEpB,KAAK,EAAE,SAAS,EAAU,QAAQ,EAAE,SAAS;IAIpD,YAAY,CACvB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,kCAAkC,CAAC;IAIjC,YAAY,CACvB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,kCAAkC,CAAC;IAIjC,oBAAoB,CAC/B,QAAQ,EAAE,0BAA0B,CAAC,kCAAkC,CAAC,EACxE,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,kCAAkC,CAAC;IAwCjC,oBAAoB,CAC/B,QAAQ,EAAE,0BAA0B,CAAC,kCAAkC,CAAC,EACxE,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,kCAAkC,CAAC;IAsDjC,gBAAgB,CAC3B,UAAU,EAAE,MAAM,EAClB,kBAAkB,EAAE,MAAM,EAC1B,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAAC;QAAE,YAAY,EAAE,QAAQ,CAAC;QAAC,cAAc,EAAE,QAAQ,CAAC;QAAC,aAAa,EAAE,QAAQ,CAAA;KAAE,CAAC;CA8B1F"}

package/dist/src/bitgo/utils/tss/redpallas/SMC/utils.js

@@ -0,0 +1,126 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedpallasMPCv2SMCUtils = void 0;
+const assert_1 = __importDefault(require("assert"));
+const public_types_1 = require("@bitgo/public-types");
+const __1 = require("../../../..");
+const redpallasMPCv2_1 = require("../redpallasMPCv2");
+const redpallasMPCv2KeyGenSender_1 = require("../redpallasMPCv2KeyGenSender");
+/**
+ * Custodial (SMC/OVC) DKG-only key generation for the Zcash Orchard shielded pool (RedPallas).
+ *
+ * Mirrors for both custodial and SMC wallet
+ * ceremonies driven by external OVC (offline vault console) clients: round1/round2 payloads are
+ * relayed from OVC1/OVC2 to BitGo and back. There is no round3 (no signing) - RedPallas MPS DKG
+ * completes key generation in 2 online rounds, same as EdDSA MPS DKG.
+ */
+class RedpallasMPCv2SMCUtils {
+    constructor(bitgo, baseCoin) {
+        this.bitgo = bitgo;
+        this.baseCoin = baseCoin;
+        this.MPCv2Utils = new redpallasMPCv2_1.RedpallasMPCv2Utils(bitgo, baseCoin);
+    }
+    async keyGenRound1(enterprise, payload) {
+        return this.keyGenRound1BySender((0, redpallasMPCv2KeyGenSender_1.RedpallasKeyGenSenderForEnterprise)(this.bitgo, enterprise), payload);
+    }
+    async keyGenRound2(enterprise, payload) {
+        return this.keyGenRound2BySender((0, redpallasMPCv2KeyGenSender_1.RedpallasKeyGenSenderForEnterprise)(this.bitgo, enterprise), payload);
+    }
+    async keyGenRound1BySender(senderFn, payload) {
+        (0, assert_1.default)(payload.state === public_types_1.RedpallasKeyCreationMPCv2StateEnum.WaitingForBitgoRound1Data, `Invalid state for round 1, expected: ${public_types_1.RedpallasKeyCreationMPCv2StateEnum.WaitingForBitgoRound1Data}, got: ${payload.state}`);
+        (0, __1.decodeOrElse)(public_types_1.RedpallasOVC1ToBitgoRound1Payload.name, public_types_1.RedpallasOVC1ToBitgoRound1Payload, payload, (errors) => {
+            throw new Error(`error(s) parsing payload: ${errors}`);
+        });
+        const ovc1 = payload.ovc[public_types_1.OVCIndexEnum.ONE];
+        const ovc2 = payload.ovc[public_types_1.OVCIndexEnum.TWO];
+        const result = await this.MPCv2Utils.sendKeyGenerationRound1BySender(senderFn, {
+            userGpgPublicKey: ovc1.gpgPubKey,
+            backupGpgPublicKey: ovc2.gpgPubKey,
+            userMsg1: ovc1.ovcMsg1,
+            backupMsg1: ovc2.ovcMsg1,
+        });
+        const response = {
+            state: public_types_1.RedpallasKeyCreationMPCv2StateEnum.WaitingForOVC1Round2Data,
+            tssVersion: payload.tssVersion,
+            walletType: payload.walletType,
+            coin: payload.coin,
+            ovc: payload.ovc,
+            platform: {
+                sessionId: result.sessionId,
+                bitgoMsg1: result.bitgoMsg1,
+            },
+        };
+        return (0, __1.decodeOrElse)(public_types_1.RedpallasBitgoToOVC1Round1Response.name, public_types_1.RedpallasBitgoToOVC1Round1Response, response, (errors) => {
+            throw new Error(`error(s) parsing response: ${errors}`);
+        });
+    }
+    async keyGenRound2BySender(senderFn, payload) {
+        (0, assert_1.default)(payload.state === public_types_1.RedpallasKeyCreationMPCv2StateEnum.WaitingForBitgoRound2Data, `Invalid state for round 2, expected: ${public_types_1.RedpallasKeyCreationMPCv2StateEnum.WaitingForBitgoRound2Data}, got: ${payload.state}`);
+        (0, __1.decodeOrElse)(public_types_1.RedpallasOVC2ToBitgoRound2Payload.name, public_types_1.RedpallasOVC2ToBitgoRound2Payload, payload, (errors) => {
+            throw new Error(`error(s) parsing payload: ${errors}`);
+        });
+        const ovc1 = payload.ovc[public_types_1.OVCIndexEnum.ONE];
+        const ovc2 = payload.ovc[public_types_1.OVCIndexEnum.TWO];
+        const sessionId = payload.platform.sessionId;
+        const result = await this.MPCv2Utils.sendKeyGenerationRound2BySender(senderFn, {
+            sessionId,
+            userMsg2: ovc1.ovcMsg2,
+            backupMsg2: ovc2.ovcMsg2,
+        });
+        assert_1.default.equal(sessionId, result.sessionId, 'Round 1 and round 2 session IDs do not match');
+        const keychains = this.baseCoin.keychains();
+        const bitgoKeychain = await keychains.add({
+            source: 'bitgo',
+            keyType: 'tss',
+            commonKeychain: result.commonPublicKeychain,
+            isMPCv2: true,
+        });
+        const response = {
+            state: public_types_1.RedpallasKeyCreationMPCv2StateEnum.WaitingForOVC1GenerateKey,
+            bitGoKeyId: bitgoKeychain.id,
+            tssVersion: payload.tssVersion,
+            walletType: payload.walletType,
+            coin: payload.coin,
+            ovc: payload.ovc,
+            platform: {
+                // sessionId/bitgoMsg1 carried over from payload.platform; safe because the assert
+                // above guarantees payload.platform.sessionId equals result.sessionId.
+                ...payload.platform,
+                commonPublicKeychain: result.commonPublicKeychain,
+                bitgoMsg2: result.bitgoMsg2,
+            },
+        };
+        return (0, __1.decodeOrElse)(public_types_1.RedpallasBitgoToOVC1Round2Response.name, public_types_1.RedpallasBitgoToOVC1Round2Response, response, (errors) => {
+            throw new Error(`error(s) parsing response: ${errors}`);
+        });
+    }
+    async uploadClientKeys(bitgoKeyId, userCommonKeychain, backupCommonKeychain) {
+        (0, assert_1.default)(userCommonKeychain === backupCommonKeychain, 'Common keychain mismatch between the user and backup keychains');
+        const keychains = this.baseCoin.keychains();
+        const bitgoKeychain = await keychains.get({ id: bitgoKeyId });
+        (0, assert_1.default)(bitgoKeychain, 'Keychain not found');
+        (0, assert_1.default)(bitgoKeychain.source === 'bitgo', 'The keychain is not a BitGo keychain');
+        (0, assert_1.default)(bitgoKeychain.type === 'tss', 'BitGo keychain is not a TSS keychain');
+        (0, assert_1.default)(bitgoKeychain.commonKeychain, 'BitGo keychain does not have a common keychain');
+        (0, assert_1.default)(bitgoKeychain.commonKeychain === userCommonKeychain, 'Common keychain mismatch between the OVCs and BitGo');
+        const userKeychainPromise = keychains.add({
+            source: 'user',
+            keyType: 'tss',
+            commonKeychain: userCommonKeychain,
+            isMPCv2: true,
+        });
+        const backupKeychainPromise = keychains.add({
+            source: 'backup',
+            keyType: 'tss',
+            commonKeychain: backupCommonKeychain,
+            isMPCv2: true,
+        });
+        const [userKeychain, backupKeychain] = await Promise.all([userKeychainPromise, backupKeychainPromise]);
+        return { userKeychain, backupKeychain, bitgoKeychain };
+    }
+}
+exports.RedpallasMPCv2SMCUtils = RedpallasMPCv2SMCUtils;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXRpbHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYml0Z28vdXRpbHMvdHNzL3JlZHBhbGxhcy9TTUMvdXRpbHMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7O0FBQUEsb0RBQTRCO0FBQzVCLHNEQVM2QjtBQUc3QixtQ0FBcUQ7QUFDckQsc0RBQXdEO0FBQ3hELDhFQUErRztBQUUvRzs7Ozs7OztHQU9HO0FBQ0gsTUFBYSxzQkFBc0I7SUFHakMsWUFBb0IsS0FBZ0IsRUFBVSxRQUFtQjtRQUE3QyxVQUFLLEdBQUwsS0FBSyxDQUFXO1FBQVUsYUFBUSxHQUFSLFFBQVEsQ0FBVztRQUMvRCxJQUFJLENBQUMsVUFBVSxHQUFHLElBQUksb0NBQW1CLENBQUMsS0FBSyxFQUFFLFFBQVEsQ0FBQyxDQUFDO0lBQzdELENBQUM7SUFFTSxLQUFLLENBQUMsWUFBWSxDQUN2QixVQUFrQixFQUNsQixPQUEwQztRQUUxQyxPQUFPLElBQUksQ0FBQyxvQkFBb0IsQ0FBQyxJQUFBLCtEQUFrQyxFQUFDLElBQUksQ0FBQyxLQUFLLEVBQUUsVUFBVSxDQUFDLEVBQUUsT0FBTyxDQUFDLENBQUM7SUFDeEcsQ0FBQztJQUVNLEtBQUssQ0FBQyxZQUFZLENBQ3ZCLFVBQWtCLEVBQ2xCLE9BQTBDO1FBRTFDLE9BQU8sSUFBSSxDQUFDLG9CQUFvQixDQUFDLElBQUEsK0RBQWtDLEVBQUMsSUFBSSxDQUFDLEtBQUssRUFBRSxVQUFVLENBQUMsRUFBRSxPQUFPLENBQUMsQ0FBQztJQUN4RyxDQUFDO0lBRU0sS0FBSyxDQUFDLG9CQUFvQixDQUMvQixRQUF3RSxFQUN4RSxPQUEwQztRQUUxQyxJQUFBLGdCQUFNLEVBQ0osT0FBTyxDQUFDLEtBQUssS0FBSyxpREFBa0MsQ0FBQyx5QkFBeUIsRUFDOUUsd0NBQXdDLGlEQUFrQyxDQUFDLHlCQUF5QixVQUFVLE9BQU8sQ0FBQyxLQUFLLEVBQUUsQ0FDOUgsQ0FBQztRQUNGLElBQUEsZ0JBQVksRUFBQyxnREFBaUMsQ0FBQyxJQUFJLEVBQUUsZ0RBQWlDLEVBQUUsT0FBTyxFQUFFLENBQUMsTUFBTSxFQUFFLEVBQUU7WUFDMUcsTUFBTSxJQUFJLEtBQUssQ0FBQyw2QkFBNkIsTUFBTSxFQUFFLENBQUMsQ0FBQztRQUN6RCxDQUFDLENBQUMsQ0FBQztRQUVILE1BQU0sSUFBSSxHQUFHLE9BQU8sQ0FBQyxHQUFHLENBQUMsMkJBQVksQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUMzQyxNQUFNLElBQUksR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLDJCQUFZLENBQUMsR0FBRyxDQUFDLENBQUM7UUFDM0MsTUFBTSxNQUFNLEdBQUcsTUFBTSxJQUFJLENBQUMsVUFBVSxDQUFDLCtCQUErQixDQUFDLFFBQVEsRUFBRTtZQUM3RSxnQkFBZ0IsRUFBRSxJQUFJLENBQUMsU0FBUztZQUNoQyxrQkFBa0IsRUFBRSxJQUFJLENBQUMsU0FBUztZQUNsQyxRQUFRLEVBQUUsSUFBSSxDQUFDLE9BQU87WUFDdEIsVUFBVSxFQUFFLElBQUksQ0FBQyxPQUFPO1NBQ3pCLENBQUMsQ0FBQztRQUVILE1BQU0sUUFBUSxHQUFHO1lBQ2YsS0FBSyxFQUFFLGlEQUFrQyxDQUFDLHdCQUF3QjtZQUNsRSxVQUFVLEVBQUUsT0FBTyxDQUFDLFVBQVU7WUFDOUIsVUFBVSxFQUFFLE9BQU8sQ0FBQyxVQUFVO1lBQzlCLElBQUksRUFBRSxPQUFPLENBQUMsSUFBSTtZQUNsQixHQUFHLEVBQUUsT0FBTyxDQUFDLEdBQUc7WUFDaEIsUUFBUSxFQUFFO2dCQUNSLFNBQVMsRUFBRSxNQUFNLENBQUMsU0FBUztnQkFDM0IsU0FBUyxFQUFFLE1BQU0sQ0FBQyxTQUFTO2FBQzVCO1NBQ0YsQ0FBQztRQUVGLE9BQU8sSUFBQSxnQkFBWSxFQUNqQixpREFBa0MsQ0FBQyxJQUFJLEVBQ3ZDLGlEQUFrQyxFQUNsQyxRQUFRLEVBQ1IsQ0FBQyxNQUFNLEVBQUUsRUFBRTtZQUNULE1BQU0sSUFBSSxLQUFLLENBQUMsOEJBQThCLE1BQU0sRUFBRSxDQUFDLENBQUM7UUFDMUQsQ0FBQyxDQUNGLENBQUM7SUFDSixDQUFDO0lBRU0sS0FBSyxDQUFDLG9CQUFvQixDQUMvQixRQUF3RSxFQUN4RSxPQUEwQztRQUUxQyxJQUFBLGdCQUFNLEVBQ0osT0FBTyxDQUFDLEtBQUssS0FBSyxpREFBa0MsQ0FBQyx5QkFBeUIsRUFDOUUsd0NBQXdDLGlEQUFrQyxDQUFDLHlCQUF5QixVQUFVLE9BQU8sQ0FBQyxLQUFLLEVBQUUsQ0FDOUgsQ0FBQztRQUNGLElBQUEsZ0JBQVksRUFBQyxnREFBaUMsQ0FBQyxJQUFJLEVBQUUsZ0RBQWlDLEVBQUUsT0FBTyxFQUFFLENBQUMsTUFBTSxFQUFFLEVBQUU7WUFDMUcsTUFBTSxJQUFJLEtBQUssQ0FBQyw2QkFBNkIsTUFBTSxFQUFFLENBQUMsQ0FBQztRQUN6RCxDQUFDLENBQUMsQ0FBQztRQUVILE1BQU0sSUFBSSxHQUFHLE9BQU8sQ0FBQyxHQUFHLENBQUMsMkJBQVksQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUMzQyxNQUFNLElBQUksR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLDJCQUFZLENBQUMsR0FBRyxDQUFDLENBQUM7UUFDM0MsTUFBTSxTQUFTLEdBQUcsT0FBTyxDQUFDLFFBQVEsQ0FBQyxTQUFTLENBQUM7UUFDN0MsTUFBTSxNQUFNLEdBQUcsTUFBTSxJQUFJLENBQUMsVUFBVSxDQUFDLCtCQUErQixDQUFDLFFBQVEsRUFBRTtZQUM3RSxTQUFTO1lBQ1QsUUFBUSxFQUFFLElBQUksQ0FBQyxPQUFPO1lBQ3RCLFVBQVUsRUFBRSxJQUFJLENBQUMsT0FBTztTQUN6QixDQUFDLENBQUM7UUFFSCxnQkFBTSxDQUFDLEtBQUssQ0FBQyxTQUFTLEVBQUUsTUFBTSxDQUFDLFNBQVMsRUFBRSw4Q0FBOEMsQ0FBQyxDQUFDO1FBRTFGLE1BQU0sU0FBUyxHQUFHLElBQUksQ0FBQyxRQUFRLENBQUMsU0FBUyxFQUFFLENBQUM7UUFDNUMsTUFBTSxhQUFhLEdBQUcsTUFBTSxTQUFTLENBQUMsR0FBRyxDQUFDO1lBQ3hDLE1BQU0sRUFBRSxPQUFPO1lBQ2YsT0FBTyxFQUFFLEtBQUs7WUFDZCxjQUFjLEVBQUUsTUFBTSxDQUFDLG9CQUFvQjtZQUMzQyxPQUFPLEVBQUUsSUFBSTtTQUNkLENBQUMsQ0FBQztRQUVILE1BQU0sUUFBUSxHQUFHO1lBQ2YsS0FBSyxFQUFFLGlEQUFrQyxDQUFDLHlCQUF5QjtZQUNuRSxVQUFVLEVBQUUsYUFBYSxDQUFDLEVBQUU7WUFDNUIsVUFBVSxFQUFFLE9BQU8sQ0FBQyxVQUFVO1lBQzlCLFVBQVUsRUFBRSxPQUFPLENBQUMsVUFBVTtZQUM5QixJQUFJLEVBQUUsT0FBTyxDQUFDLElBQUk7WUFDbEIsR0FBRyxFQUFFLE9BQU8sQ0FBQyxHQUFHO1lBQ2hCLFFBQVEsRUFBRTtnQkFDUixrRkFBa0Y7Z0JBQ2xGLHVFQUF1RTtnQkFDdkUsR0FBRyxPQUFPLENBQUMsUUFBUTtnQkFDbkIsb0JBQW9CLEVBQUUsTUFBTSxDQUFDLG9CQUFvQjtnQkFDakQsU0FBUyxFQUFFLE1BQU0sQ0FBQyxTQUFTO2FBQzVCO1NBQ0YsQ0FBQztRQUVGLE9BQU8sSUFBQSxnQkFBWSxFQUNqQixpREFBa0MsQ0FBQyxJQUFJLEVBQ3ZDLGlEQUFrQyxFQUNsQyxRQUFRLEVBQ1IsQ0FBQyxNQUFNLEVBQUUsRUFBRTtZQUNULE1BQU0sSUFBSSxLQUFLLENBQUMsOEJBQThCLE1BQU0sRUFBRSxDQUFDLENBQUM7UUFDMUQsQ0FBQyxDQUNGLENBQUM7SUFDSixDQUFDO0lBRU0sS0FBSyxDQUFDLGdCQUFnQixDQUMzQixVQUFrQixFQUNsQixrQkFBMEIsRUFDMUIsb0JBQTRCO1FBRTVCLElBQUEsZ0JBQU0sRUFDSixrQkFBa0IsS0FBSyxvQkFBb0IsRUFDM0MsZ0VBQWdFLENBQ2pFLENBQUM7UUFFRixNQUFNLFNBQVMsR0FBRyxJQUFJLENBQUMsUUFBUSxDQUFDLFNBQVMsRUFBRSxDQUFDO1FBQzVDLE1BQU0sYUFBYSxHQUFHLE1BQU0sU0FBUyxDQUFDLEdBQUcsQ0FBQyxFQUFFLEVBQUUsRUFBRSxVQUFVLEVBQUUsQ0FBQyxDQUFDO1FBQzlELElBQUEsZ0JBQU0sRUFBQyxhQUFhLEVBQUUsb0JBQW9CLENBQUMsQ0FBQztRQUM1QyxJQUFBLGdCQUFNLEVBQUMsYUFBYSxDQUFDLE1BQU0sS0FBSyxPQUFPLEVBQUUsc0NBQXNDLENBQUMsQ0FBQztRQUNqRixJQUFBLGdCQUFNLEVBQUMsYUFBYSxDQUFDLElBQUksS0FBSyxLQUFLLEVBQUUsc0NBQXNDLENBQUMsQ0FBQztRQUM3RSxJQUFBLGdCQUFNLEVBQUMsYUFBYSxDQUFDLGNBQWMsRUFBRSxnREFBZ0QsQ0FBQyxDQUFDO1FBQ3ZGLElBQUEsZ0JBQU0sRUFBQyxhQUFhLENBQUMsY0FBYyxLQUFLLGtCQUFrQixFQUFFLHFEQUFxRCxDQUFDLENBQUM7UUFFbkgsTUFBTSxtQkFBbUIsR0FBRyxTQUFTLENBQUMsR0FBRyxDQUFDO1lBQ3hDLE1BQU0sRUFBRSxNQUFNO1lBQ2QsT0FBTyxFQUFFLEtBQUs7WUFDZCxjQUFjLEVBQUUsa0JBQWtCO1lBQ2xDLE9BQU8sRUFBRSxJQUFJO1NBQ2QsQ0FBQyxDQUFDO1FBQ0gsTUFBTSxxQkFBcUIsR0FBRyxTQUFTLENBQUMsR0FBRyxDQUFDO1lBQzFDLE1BQU0sRUFBRSxRQUFRO1lBQ2hCLE9BQU8sRUFBRSxLQUFLO1lBQ2QsY0FBYyxFQUFFLG9CQUFvQjtZQUNwQyxPQUFPLEVBQUUsSUFBSTtTQUNkLENBQUMsQ0FBQztRQUVILE1BQU0sQ0FBQyxZQUFZLEVBQUUsY0FBYyxDQUFDLEdBQUcsTUFBTSxPQUFPLENBQUMsR0FBRyxDQUFDLENBQUMsbUJBQW1CLEVBQUUscUJBQXFCLENBQUMsQ0FBQyxDQUFDO1FBQ3ZHLE9BQU8sRUFBRSxZQUFZLEVBQUUsY0FBYyxFQUFFLGFBQWEsRUFBRSxDQUFDO0lBQ3pELENBQUM7Q0FDRjtBQTNKRCx3REEySkMiLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgYXNzZXJ0IGZyb20gJ2Fzc2VydCc7XG5pbXBvcnQge1xuICBPVkNJbmRleEVudW0sXG4gIFJlZHBhbGxhc0JpdGdvVG9PVkMxUm91bmQxUmVzcG9uc2UsXG4gIFJlZHBhbGxhc0JpdGdvVG9PVkMxUm91bmQyUmVzcG9uc2UsXG4gIFJlZHBhbGxhc0tleUNyZWF0aW9uTVBDdjJTdGF0ZUVudW0sXG4gIFJlZHBhbGxhc01QQ3YyS2V5R2VuUm91bmQxUmVzcG9uc2UsXG4gIFJlZHBhbGxhc01QQ3YyS2V5R2VuUm91bmQyUmVzcG9uc2UsXG4gIFJlZHBhbGxhc09WQzFUb0JpdGdvUm91bmQxUGF5bG9hZCxcbiAgUmVkcGFsbGFzT1ZDMlRvQml0Z29Sb3VuZDJQYXlsb2FkLFxufSBmcm9tICdAYml0Z28vcHVibGljLXR5cGVzJztcbmltcG9ydCB7IElCYXNlQ29pbiB9IGZyb20gJy4uLy4uLy4uLy4uL2Jhc2VDb2luJztcbmltcG9ydCB7IEJpdEdvQmFzZSB9IGZyb20gJy4uLy4uLy4uLy4uL2JpdGdvQmFzZSc7XG5pbXBvcnQgeyBkZWNvZGVPckVsc2UsIEtleWNoYWluIH0gZnJvbSAnLi4vLi4vLi4vLi4nO1xuaW1wb3J0IHsgUmVkcGFsbGFzTVBDdjJVdGlscyB9IGZyb20gJy4uL3JlZHBhbGxhc01QQ3YyJztcbmltcG9ydCB7IFJlZHBhbGxhc01QQ3YyS2V5R2VuU2VuZEZuLCBSZWRwYWxsYXNLZXlHZW5TZW5kZXJGb3JFbnRlcnByaXNlIH0gZnJvbSAnLi4vcmVkcGFsbGFzTVBDdjJLZXlHZW5TZW5kZXInO1xuXG4vKipcbiAqIEN1c3RvZGlhbCAoU01DL09WQykgREtHLW9ubHkga2V5IGdlbmVyYXRpb24gZm9yIHRoZSBaY2FzaCBPcmNoYXJkIHNoaWVsZGVkIHBvb2wgKFJlZFBhbGxhcykuXG4gKlxuICogTWlycm9ycyBmb3IgYm90aCBjdXN0b2RpYWwgYW5kIFNNQyB3YWxsZXRcbiAqIGNlcmVtb25pZXMgZHJpdmVuIGJ5IGV4dGVybmFsIE9WQyAob2ZmbGluZSB2YXVsdCBjb25zb2xlKSBjbGllbnRzOiByb3VuZDEvcm91bmQyIHBheWxvYWRzIGFyZVxuICogcmVsYXllZCBmcm9tIE9WQzEvT1ZDMiB0byBCaXRHbyBhbmQgYmFjay4gVGhlcmUgaXMgbm8gcm91bmQzIChubyBzaWduaW5nKSAtIFJlZFBhbGxhcyBNUFMgREtHXG4gKiBjb21wbGV0ZXMga2V5IGdlbmVyYXRpb24gaW4gMiBvbmxpbmUgcm91bmRzLCBzYW1lIGFzIEVkRFNBIE1QUyBES0cuXG4gKi9cbmV4cG9ydCBjbGFzcyBSZWRwYWxsYXNNUEN2MlNNQ1V0aWxzIHtcbiAgcHJpdmF0ZSBNUEN2MlV0aWxzOiBSZWRwYWxsYXNNUEN2MlV0aWxzO1xuXG4gIGNvbnN0cnVjdG9yKHByaXZhdGUgYml0Z286IEJpdEdvQmFzZSwgcHJpdmF0ZSBiYXNlQ29pbjogSUJhc2VDb2luKSB7XG4gICAgdGhpcy5NUEN2MlV0aWxzID0gbmV3IFJlZHBhbGxhc01QQ3YyVXRpbHMoYml0Z28sIGJhc2VDb2luKTtcbiAgfVxuXG4gIHB1YmxpYyBhc3luYyBrZXlHZW5Sb3VuZDEoXG4gICAgZW50ZXJwcmlzZTogc3RyaW5nLFxuICAgIHBheWxvYWQ6IFJlZHBhbGxhc09WQzFUb0JpdGdvUm91bmQxUGF5bG9hZFxuICApOiBQcm9taXNlPFJlZHBhbGxhc0JpdGdvVG9PVkMxUm91bmQxUmVzcG9uc2U+IHtcbiAgICByZXR1cm4gdGhpcy5rZXlHZW5Sb3VuZDFCeVNlbmRlcihSZWRwYWxsYXNLZXlHZW5TZW5kZXJGb3JFbnRlcnByaXNlKHRoaXMuYml0Z28sIGVudGVycHJpc2UpLCBwYXlsb2FkKTtcbiAgfVxuXG4gIHB1YmxpYyBhc3luYyBrZXlHZW5Sb3VuZDIoXG4gICAgZW50ZXJwcmlzZTogc3RyaW5nLFxuICAgIHBheWxvYWQ6IFJlZHBhbGxhc09WQzJUb0JpdGdvUm91bmQyUGF5bG9hZFxuICApOiBQcm9taXNlPFJlZHBhbGxhc0JpdGdvVG9PVkMxUm91bmQyUmVzcG9uc2U+IHtcbiAgICByZXR1cm4gdGhpcy5rZXlHZW5Sb3VuZDJCeVNlbmRlcihSZWRwYWxsYXNLZXlHZW5TZW5kZXJGb3JFbnRlcnByaXNlKHRoaXMuYml0Z28sIGVudGVycHJpc2UpLCBwYXlsb2FkKTtcbiAgfVxuXG4gIHB1YmxpYyBhc3luYyBrZXlHZW5Sb3VuZDFCeVNlbmRlcihcbiAgICBzZW5kZXJGbjogUmVkcGFsbGFzTVBDdjJLZXlHZW5TZW5kRm48UmVkcGFsbGFzTVBDdjJLZXlHZW5Sb3VuZDFSZXNwb25zZT4sXG4gICAgcGF5bG9hZDogUmVkcGFsbGFzT1ZDMVRvQml0Z29Sb3VuZDFQYXlsb2FkXG4gICk6IFByb21pc2U8UmVkcGFsbGFzQml0Z29Ub09WQzFSb3VuZDFSZXNwb25zZT4ge1xuICAgIGFzc2VydChcbiAgICAgIHBheWxvYWQuc3RhdGUgPT09IFJlZHBhbGxhc0tleUNyZWF0aW9uTVBDdjJTdGF0ZUVudW0uV2FpdGluZ0ZvckJpdGdvUm91bmQxRGF0YSxcbiAgICAgIGBJbnZhbGlkIHN0YXRlIGZvciByb3VuZCAxLCBleHBlY3RlZDogJHtSZWRwYWxsYXNLZXlDcmVhdGlvbk1QQ3YyU3RhdGVFbnVtLldhaXRpbmdGb3JCaXRnb1JvdW5kMURhdGF9LCBnb3Q6ICR7cGF5bG9hZC5zdGF0ZX1gXG4gICAgKTtcbiAgICBkZWNvZGVPckVsc2UoUmVkcGFsbGFzT1ZDMVRvQml0Z29Sb3VuZDFQYXlsb2FkLm5hbWUsIFJlZHBhbGxhc09WQzFUb0JpdGdvUm91bmQxUGF5bG9hZCwgcGF5bG9hZCwgKGVycm9ycykgPT4ge1xuICAgICAgdGhyb3cgbmV3IEVycm9yKGBlcnJvcihzKSBwYXJzaW5nIHBheWxvYWQ6ICR7ZXJyb3JzfWApO1xuICAgIH0pO1xuXG4gICAgY29uc3Qgb3ZjMSA9IHBheWxvYWQub3ZjW09WQ0luZGV4RW51bS5PTkVdO1xuICAgIGNvbnN0IG92YzIgPSBwYXlsb2FkLm92Y1tPVkNJbmRleEVudW0uVFdPXTtcbiAgICBjb25zdCByZXN1bHQgPSBhd2FpdCB0aGlzLk1QQ3YyVXRpbHMuc2VuZEtleUdlbmVyYXRpb25Sb3VuZDFCeVNlbmRlcihzZW5kZXJGbiwge1xuICAgICAgdXNlckdwZ1B1YmxpY0tleTogb3ZjMS5ncGdQdWJLZXksXG4gICAgICBiYWNrdXBHcGdQdWJsaWNLZXk6IG92YzIuZ3BnUHViS2V5LFxuICAgICAgdXNlck1zZzE6IG92YzEub3ZjTXNnMSxcbiAgICAgIGJhY2t1cE1zZzE6IG92YzIub3ZjTXNnMSxcbiAgICB9KTtcblxuICAgIGNvbnN0IHJlc3BvbnNlID0ge1xuICAgICAgc3RhdGU6IFJlZHBhbGxhc0tleUNyZWF0aW9uTVBDdjJTdGF0ZUVudW0uV2FpdGluZ0Zvck9WQzFSb3VuZDJEYXRhLFxuICAgICAgdHNzVmVyc2lvbjogcGF5bG9hZC50c3NWZXJzaW9uLFxuICAgICAgd2FsbGV0VHlwZTogcGF5bG9hZC53YWxsZXRUeXBlLFxuICAgICAgY29pbjogcGF5bG9hZC5jb2luLFxuICAgICAgb3ZjOiBwYXlsb2FkLm92YyxcbiAgICAgIHBsYXRmb3JtOiB7XG4gICAgICAgIHNlc3Npb25JZDogcmVzdWx0LnNlc3Npb25JZCxcbiAgICAgICAgYml0Z29Nc2cxOiByZXN1bHQuYml0Z29Nc2cxLFxuICAgICAgfSxcbiAgICB9O1xuXG4gICAgcmV0dXJuIGRlY29kZU9yRWxzZShcbiAgICAgIFJlZHBhbGxhc0JpdGdvVG9PVkMxUm91bmQxUmVzcG9uc2UubmFtZSxcbiAgICAgIFJlZHBhbGxhc0JpdGdvVG9PVkMxUm91bmQxUmVzcG9uc2UsXG4gICAgICByZXNwb25zZSxcbiAgICAgIChlcnJvcnMpID0+IHtcbiAgICAgICAgdGhyb3cgbmV3IEVycm9yKGBlcnJvcihzKSBwYXJzaW5nIHJlc3BvbnNlOiAke2Vycm9yc31gKTtcbiAgICAgIH1cbiAgICApO1xuICB9XG5cbiAgcHVibGljIGFzeW5jIGtleUdlblJvdW5kMkJ5U2VuZGVyKFxuICAgIHNlbmRlckZuOiBSZWRwYWxsYXNNUEN2MktleUdlblNlbmRGbjxSZWRwYWxsYXNNUEN2MktleUdlblJvdW5kMlJlc3BvbnNlPixcbiAgICBwYXlsb2FkOiBSZWRwYWxsYXNPVkMyVG9CaXRnb1JvdW5kMlBheWxvYWRcbiAgKTogUHJvbWlzZTxSZWRwYWxsYXNCaXRnb1RvT1ZDMVJvdW5kMlJlc3BvbnNlPiB7XG4gICAgYXNzZXJ0KFxuICAgICAgcGF5bG9hZC5zdGF0ZSA9PT0gUmVkcGFsbGFzS2V5Q3JlYXRpb25NUEN2MlN0YXRlRW51bS5XYWl0aW5nRm9yQml0Z29Sb3VuZDJEYXRhLFxuICAgICAgYEludmFsaWQgc3RhdGUgZm9yIHJvdW5kIDIsIGV4cGVjdGVkOiAke1JlZHBhbGxhc0tleUNyZWF0aW9uTVBDdjJTdGF0ZUVudW0uV2FpdGluZ0ZvckJpdGdvUm91bmQyRGF0YX0sIGdvdDogJHtwYXlsb2FkLnN0YXRlfWBcbiAgICApO1xuICAgIGRlY29kZU9yRWxzZShSZWRwYWxsYXNPVkMyVG9CaXRnb1JvdW5kMlBheWxvYWQubmFtZSwgUmVkcGFsbGFzT1ZDMlRvQml0Z29Sb3VuZDJQYXlsb2FkLCBwYXlsb2FkLCAoZXJyb3JzKSA9PiB7XG4gICAgICB0aHJvdyBuZXcgRXJyb3IoYGVycm9yKHMpIHBhcnNpbmcgcGF5bG9hZDogJHtlcnJvcnN9YCk7XG4gICAgfSk7XG5cbiAgICBjb25zdCBvdmMxID0gcGF5bG9hZC5vdmNbT1ZDSW5kZXhFbnVtLk9ORV07XG4gICAgY29uc3Qgb3ZjMiA9IHBheWxvYWQub3ZjW09WQ0luZGV4RW51bS5UV09dO1xuICAgIGNvbnN0IHNlc3Npb25JZCA9IHBheWxvYWQucGxhdGZvcm0uc2Vzc2lvbklkO1xuICAgIGNvbnN0IHJlc3VsdCA9IGF3YWl0IHRoaXMuTVBDdjJVdGlscy5zZW5kS2V5R2VuZXJhdGlvblJvdW5kMkJ5U2VuZGVyKHNlbmRlckZuLCB7XG4gICAgICBzZXNzaW9uSWQsXG4gICAgICB1c2VyTXNnMjogb3ZjMS5vdmNNc2cyLFxuICAgICAgYmFja3VwTXNnMjogb3ZjMi5vdmNNc2cyLFxuICAgIH0pO1xuXG4gICAgYXNzZXJ0LmVxdWFsKHNlc3Npb25JZCwgcmVzdWx0LnNlc3Npb25JZCwgJ1JvdW5kIDEgYW5kIHJvdW5kIDIgc2Vzc2lvbiBJRHMgZG8gbm90IG1hdGNoJyk7XG5cbiAgICBjb25zdCBrZXljaGFpbnMgPSB0aGlzLmJhc2VDb2luLmtleWNoYWlucygpO1xuICAgIGNvbnN0IGJpdGdvS2V5Y2hhaW4gPSBhd2FpdCBrZXljaGFpbnMuYWRkKHtcbiAgICAgIHNvdXJjZTogJ2JpdGdvJyxcbiAgICAgIGtleVR5cGU6ICd0c3MnLFxuICAgICAgY29tbW9uS2V5Y2hhaW46IHJlc3VsdC5jb21tb25QdWJsaWNLZXljaGFpbixcbiAgICAgIGlzTVBDdjI6IHRydWUsXG4gICAgfSk7XG5cbiAgICBjb25zdCByZXNwb25zZSA9IHtcbiAgICAgIHN0YXRlOiBSZWRwYWxsYXNLZXlDcmVhdGlvbk1QQ3YyU3RhdGVFbnVtLldhaXRpbmdGb3JPVkMxR2VuZXJhdGVLZXksXG4gICAgICBiaXRHb0tleUlkOiBiaXRnb0tleWNoYWluLmlkLFxuICAgICAgdHNzVmVyc2lvbjogcGF5bG9hZC50c3NWZXJzaW9uLFxuICAgICAgd2FsbGV0VHlwZTogcGF5bG9hZC53YWxsZXRUeXBlLFxuICAgICAgY29pbjogcGF5bG9hZC5jb2luLFxuICAgICAgb3ZjOiBwYXlsb2FkLm92YyxcbiAgICAgIHBsYXRmb3JtOiB7XG4gICAgICAgIC8vIHNlc3Npb25JZC9iaXRnb01zZzEgY2FycmllZCBvdmVyIGZyb20gcGF5bG9hZC5wbGF0Zm9ybTsgc2FmZSBiZWNhdXNlIHRoZSBhc3NlcnRcbiAgICAgICAgLy8gYWJvdmUgZ3VhcmFudGVlcyBwYXlsb2FkLnBsYXRmb3JtLnNlc3Npb25JZCBlcXVhbHMgcmVzdWx0LnNlc3Npb25JZC5cbiAgICAgICAgLi4ucGF5bG9hZC5wbGF0Zm9ybSxcbiAgICAgICAgY29tbW9uUHVibGljS2V5Y2hhaW46IHJlc3VsdC5jb21tb25QdWJsaWNLZXljaGFpbixcbiAgICAgICAgYml0Z29Nc2cyOiByZXN1bHQuYml0Z29Nc2cyLFxuICAgICAgfSxcbiAgICB9O1xuXG4gICAgcmV0dXJuIGRlY29kZU9yRWxzZShcbiAgICAgIFJlZHBhbGxhc0JpdGdvVG9PVkMxUm91bmQyUmVzcG9uc2UubmFtZSxcbiAgICAgIFJlZHBhbGxhc0JpdGdvVG9PVkMxUm91bmQyUmVzcG9uc2UsXG4gICAgICByZXNwb25zZSxcbiAgICAgIChlcnJvcnMpID0+IHtcbiAgICAgICAgdGhyb3cgbmV3IEVycm9yKGBlcnJvcihzKSBwYXJzaW5nIHJlc3BvbnNlOiAke2Vycm9yc31gKTtcbiAgICAgIH1cbiAgICApO1xuICB9XG5cbiAgcHVibGljIGFzeW5jIHVwbG9hZENsaWVudEtleXMoXG4gICAgYml0Z29LZXlJZDogc3RyaW5nLFxuICAgIHVzZXJDb21tb25LZXljaGFpbjogc3RyaW5nLFxuICAgIGJhY2t1cENvbW1vbktleWNoYWluOiBzdHJpbmdcbiAgKTogUHJvbWlzZTx7IHVzZXJLZXljaGFpbjogS2V5Y2hhaW47IGJhY2t1cEtleWNoYWluOiBLZXljaGFpbjsgYml0Z29LZXljaGFpbjogS2V5Y2hhaW4gfT4ge1xuICAgIGFzc2VydChcbiAgICAgIHVzZXJDb21tb25LZXljaGFpbiA9PT0gYmFja3VwQ29tbW9uS2V5Y2hhaW4sXG4gICAgICAnQ29tbW9uIGtleWNoYWluIG1pc21hdGNoIGJldHdlZW4gdGhlIHVzZXIgYW5kIGJhY2t1cCBrZXljaGFpbnMnXG4gICAgKTtcblxuICAgIGNvbnN0IGtleWNoYWlucyA9IHRoaXMuYmFzZUNvaW4ua2V5Y2hhaW5zKCk7XG4gICAgY29uc3QgYml0Z29LZXljaGFpbiA9IGF3YWl0IGtleWNoYWlucy5nZXQoeyBpZDogYml0Z29LZXlJZCB9KTtcbiAgICBhc3NlcnQoYml0Z29LZXljaGFpbiwgJ0tleWNoYWluIG5vdCBmb3VuZCcpO1xuICAgIGFzc2VydChiaXRnb0tleWNoYWluLnNvdXJjZSA9PT0gJ2JpdGdvJywgJ1RoZSBrZXljaGFpbiBpcyBub3QgYSBCaXRHbyBrZXljaGFpbicpO1xuICAgIGFzc2VydChiaXRnb0tleWNoYWluLnR5cGUgPT09ICd0c3MnLCAnQml0R28ga2V5Y2hhaW4gaXMgbm90IGEgVFNTIGtleWNoYWluJyk7XG4gICAgYXNzZXJ0KGJpdGdvS2V5Y2hhaW4uY29tbW9uS2V5Y2hhaW4sICdCaXRHbyBrZXljaGFpbiBkb2VzIG5vdCBoYXZlIGEgY29tbW9uIGtleWNoYWluJyk7XG4gICAgYXNzZXJ0KGJpdGdvS2V5Y2hhaW4uY29tbW9uS2V5Y2hhaW4gPT09IHVzZXJDb21tb25LZXljaGFpbiwgJ0NvbW1vbiBrZXljaGFpbiBtaXNtYXRjaCBiZXR3ZWVuIHRoZSBPVkNzIGFuZCBCaXRHbycpO1xuXG4gICAgY29uc3QgdXNlcktleWNoYWluUHJvbWlzZSA9IGtleWNoYWlucy5hZGQoe1xuICAgICAgc291cmNlOiAndXNlcicsXG4gICAgICBrZXlUeXBlOiAndHNzJyxcbiAgICAgIGNvbW1vbktleWNoYWluOiB1c2VyQ29tbW9uS2V5Y2hhaW4sXG4gICAgICBpc01QQ3YyOiB0cnVlLFxuICAgIH0pO1xuICAgIGNvbnN0IGJhY2t1cEtleWNoYWluUHJvbWlzZSA9IGtleWNoYWlucy5hZGQoe1xuICAgICAgc291cmNlOiAnYmFja3VwJyxcbiAgICAgIGtleVR5cGU6ICd0c3MnLFxuICAgICAgY29tbW9uS2V5Y2hhaW46IGJhY2t1cENvbW1vbktleWNoYWluLFxuICAgICAgaXNNUEN2MjogdHJ1ZSxcbiAgICB9KTtcblxuICAgIGNvbnN0IFt1c2VyS2V5Y2hhaW4sIGJhY2t1cEtleWNoYWluXSA9IGF3YWl0IFByb21pc2UuYWxsKFt1c2VyS2V5Y2hhaW5Qcm9taXNlLCBiYWNrdXBLZXljaGFpblByb21pc2VdKTtcbiAgICByZXR1cm4geyB1c2VyS2V5Y2hhaW4sIGJhY2t1cEtleWNoYWluLCBiaXRnb0tleWNoYWluIH07XG4gIH1cbn1cbiJdfQ==