@bitgo-beta/sdk-core 8.2.1-beta.212 → 8.2.1-beta.2120

package/dist/test/unit/bitgo/utils/tss/eddsa/eddsaVrfMPCv2.js

@@ -0,0 +1,553 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert_1 = __importDefault(require("assert"));
+const pgp = __importStar(require("openpgp"));
+const sinon = __importStar(require("sinon"));
+const sdk_lib_mpc_1 = require("@bitgo-beta/sdk-lib-mpc");
+const public_types_1 = require("@bitgo/public-types");
+const cbor_x_1 = require("cbor-x");
+const t = __importStar(require("io-ts"));
+const src_1 = require("../../../../../../src");
+const codecs_1 = require("../../../../../../src/bitgo/utils/codecs");
+const keyShareEnvelope_1 = require("../../../../../../src/bitgo/utils/tss/keyShareEnvelope");
+const eddsaVrfMPCv2_1 = require("../../../../../../src/bitgo/utils/tss/eddsa/eddsaVrfMPCv2");
+const typesMPCv2_1 = require("../../../../../../src/bitgo/utils/tss/ecdsa/typesMPCv2");
+const opengpgUtils_1 = require("../../../../../../src/bitgo/utils/opengpgUtils");
+const Uint8ArrayCodec = new t.Type('Uint8Array', (value) => value instanceof Uint8Array, (value, context) => (value instanceof Uint8Array ? t.success(value) : t.failure(value, context)), t.identity);
+const VrfEnvelope = t.type({
+    version: t.literal(1),
+    prvKeyShare: Uint8ArrayCodec,
+    vrf: Uint8ArrayCodec,
+});
+function decodeVrfEnvelope(encoded) {
+    return (0, codecs_1.decodeWithCodec)(VrfEnvelope, (0, cbor_x_1.decode)(encoded), 'VRF key envelope');
+}
+function createKeychainFixture() {
+    const encryptedInputs = [];
+    const addedKeychains = [];
+    const post = sinon.stub();
+    const bitgo = {
+        getEnv: () => 'dev',
+        url: (path) => path,
+        post,
+        encrypt: async (params) => {
+            encryptedInputs.push(params.input);
+            return `encrypted:${params.input}`;
+        },
+    };
+    const keychains = {
+        add: async (params) => {
+            addedKeychains.push(params);
+            return { id: `${params.source}-child`, type: 'tss', encryptedPrv: params.encryptedPrv };
+        },
+    };
+    const baseCoin = {
+        keychains: () => keychains,
+        getChain: () => 'tsol',
+    };
+    return { bitgo, baseCoin, post, encryptedInputs, addedKeychains };
+}
+describe('EdDSA MPCv2 VRF root material', function () {
+    it('encodes signing and VRF shares in both full and reduced envelopes', function () {
+        const privateMaterial = Buffer.from('signing-share');
+        const reducedPrivateMaterial = Buffer.from('reduced-signing-share');
+        const vrfKeyShare = Buffer.from('vrf-share');
+        const { envelope, reducedEnvelope } = (0, keyShareEnvelope_1.buildSafeMpcKeyEnvelopes)(privateMaterial, reducedPrivateMaterial, vrfKeyShare);
+        const decodedEnvelope = decodeVrfEnvelope(envelope);
+        const decodedReducedEnvelope = decodeVrfEnvelope(reducedEnvelope);
+        assert_1.default.deepStrictEqual(Buffer.from(decodedEnvelope.prvKeyShare), privateMaterial);
+        assert_1.default.deepStrictEqual(Buffer.from(decodedEnvelope.vrf), vrfKeyShare);
+        assert_1.default.deepStrictEqual(Buffer.from(decodedReducedEnvelope.prvKeyShare), reducedPrivateMaterial);
+        assert_1.default.deepStrictEqual(Buffer.from(decodedReducedEnvelope.vrf), vrfKeyShare);
+    });
+    it('keeps ordinary MPCv2 participant material as bare base64', async function () {
+        const { bitgo, baseCoin, encryptedInputs, addedKeychains } = createKeychainFixture();
+        const utils = new src_1.EddsaMPCv2Utils(bitgo, baseCoin);
+        const privateMaterial = Buffer.from('signing-share');
+        const reducedPrivateMaterial = Buffer.from('reduced-signing-share');
+        await utils.createParticipantKeychain(typesMPCv2_1.MPCv2PartiesEnum.USER, 'common-keychain', privateMaterial, reducedPrivateMaterial, 'passphrase');
+        assert_1.default.deepStrictEqual(encryptedInputs, [
+            privateMaterial.toString('base64'),
+            reducedPrivateMaterial.toString('base64'),
+        ]);
+        assert_1.default.strictEqual(addedKeychains[0].encryptedPrv, `encrypted:${privateMaterial.toString('base64')}`);
+        assert_1.default.strictEqual(addedKeychains[0].safeId, undefined);
+    });
+    it('rejects a public-only backup outside a safe child derivation', async function () {
+        const { bitgo, baseCoin, encryptedInputs, addedKeychains } = createKeychainFixture();
+        const utils = new src_1.EddsaMPCv2Utils(bitgo, baseCoin);
+        await assert_1.default.rejects(utils.createParticipantKeychain(typesMPCv2_1.MPCv2PartiesEnum.BACKUP, 'common-keychain', undefined, undefined, 'passphrase'), /Private material is required for backup keychain/);
+        assert_1.default.deepStrictEqual(encryptedInputs, []);
+        assert_1.default.deepStrictEqual(addedKeychains, []);
+    });
+    it('encrypts the VRF envelope and tags the keychain with safeId', async function () {
+        const encryptedInputs = [];
+        const addedKeychains = [];
+        const bitgo = {
+            encrypt: async (params) => {
+                encryptedInputs.push(params.input);
+                return `encrypted:${params.input}`;
+            },
+        };
+        const keychains = {
+            add: async (params) => {
+                addedKeychains.push(params);
+                return { id: 'user-key' };
+            },
+        };
+        const baseCoin = {
+            keychains: () => keychains,
+        };
+        const utils = new src_1.EddsaMPCv2Utils(bitgo, baseCoin);
+        const { envelope, reducedEnvelope } = (0, keyShareEnvelope_1.buildSafeMpcKeyEnvelopes)(Buffer.from('signing-share'), Buffer.from('reduced-signing-share'), Buffer.from('vrf-share'));
+        await utils.createParticipantKeychain(typesMPCv2_1.MPCv2PartiesEnum.USER, 'common-keychain', envelope, reducedEnvelope, 'passphrase', undefined, undefined, undefined, undefined, 'safe-id');
+        assert_1.default.deepStrictEqual(encryptedInputs[0], envelope.toString('base64'));
+        assert_1.default.strictEqual(addedKeychains[0].safeId, 'safe-id');
+        const decoded = decodeVrfEnvelope(Buffer.from(encryptedInputs[0], 'base64'));
+        assert_1.default.deepStrictEqual(Buffer.from(decoded.vrf), Buffer.from('vrf-share'));
+    });
+    it('tags the BitGo keychain with safeId and does not encrypt', async function () {
+        const encryptedInputs = [];
+        const addedKeychains = [];
+        const bitgo = {
+            encrypt: async (params) => {
+                encryptedInputs.push(params.input);
+                return `encrypted:${params.input}`;
+            },
+        };
+        const keychains = {
+            add: async (params) => {
+                addedKeychains.push(params);
+                return { id: 'bitgo-key' };
+            },
+        };
+        const baseCoin = {
+            keychains: () => keychains,
+        };
+        const utils = new src_1.EddsaMPCv2Utils(bitgo, baseCoin);
+        await utils.createParticipantKeychain(typesMPCv2_1.MPCv2PartiesEnum.BITGO, 'common-keychain', undefined, undefined, undefined, undefined, undefined, undefined, undefined, 'safe-id');
+        assert_1.default.deepStrictEqual(encryptedInputs, []);
+        assert_1.default.strictEqual(addedKeychains[0].source, 'bitgo');
+        assert_1.default.strictEqual(addedKeychains[0].safeId, 'safe-id');
+        assert_1.default.strictEqual(addedKeychains[0].encryptedPrv, undefined);
+    });
+    describe('safe root keygen against the HSM contract', function () {
+        const KeyGenRequest = t.intersection([
+            t.type({ enterprise: t.string, type: t.string, curveType: t.string, round: t.string }),
+            t.partial({ safeId: t.string, payload: t.UnknownRecord }),
+        ]);
+        const R1Payload = t.intersection([
+            t.type({
+                userGpgPublicKey: t.string,
+                backupGpgPublicKey: t.string,
+                userMsg1: public_types_1.EddsaMPCv2SignedMessage,
+                backupMsg1: public_types_1.EddsaMPCv2SignedMessage,
+            }),
+            t.type({
+                userVrfMsg1: public_types_1.EddsaMPCv2SignedMessage,
+                backupVrfMsg1: public_types_1.EddsaMPCv2SignedMessage,
+            }),
+        ]);
+        const R2Payload = t.intersection([
+            t.type({ sessionId: t.string, userMsg2: public_types_1.EddsaMPCv2SignedMessage, backupMsg2: public_types_1.EddsaMPCv2SignedMessage }),
+            t.type({
+                userVrfMsg2: public_types_1.EddsaMPCv2SignedMessage,
+                backupVrfMsg2: public_types_1.EddsaMPCv2SignedMessage,
+            }),
+        ]);
+        let bitgoPrivateKey;
+        let bitgoPublicKey;
+        before(async function () {
+            const bitgoGpg = await (0, opengpgUtils_1.generateGPGKeyPair)('ed25519');
+            bitgoPrivateKey = await pgp.readPrivateKey({ armoredKey: bitgoGpg.privateKey });
+            bitgoPublicKey = await pgp.readKey({ armoredKey: bitgoGpg.publicKey });
+        });
+        afterEach(function () {
+            sinon.restore();
+        });
+        /** BitGo's side of the ceremony: signing DKG + VRF DKG, verifying every client signature like the HSM does. */
+        async function keygenWithHsmPeer(fault) {
+            const { bitgo, baseCoin, post, encryptedInputs, addedKeychains } = createKeychainFixture();
+            const utils = new eddsaVrfMPCv2_1.EddsaVrfMPCv2Utils(bitgo, baseCoin);
+            sinon.stub(utils, 'getBitgoGpgPubkeyBasedOnFeatureFlags').resolves({
+                mpcv2PublicKey: bitgoPublicKey,
+                eddsaMpcv2PublicKey: bitgoPublicKey,
+                redpallasMpcv2PublicKey: undefined,
+            });
+            const bitgoDkg = new sdk_lib_mpc_1.EddsaMPSDkg.DKG(3, 2, typesMPCv2_1.MPCv2PartiesEnum.BITGO);
+            const bitgoVrf = new sdk_lib_mpc_1.MpsVrf.VrfDkg(3, 2, typesMPCv2_1.MPCv2PartiesEnum.BITGO);
+            const requests = [];
+            let bitgoMsg2;
+            let userGpgKey;
+            let backupGpgKey;
+            let userCommitment;
+            let backupCommitment;
+            const signAsBitgo = (payload) => sdk_lib_mpc_1.MPSComms.detachSignMpsMessage(payload, bitgoPrivateKey);
+            const encryptTo = async (recipient, plaintext) => {
+                const { signature } = await signAsBitgo(plaintext);
+                const message = await pgp.encrypt({
+                    message: await pgp.createMessage({ binary: plaintext }),
+                    encryptionKeys: recipient,
+                    format: 'armored',
+                });
+                return {
+                    message,
+                    signature: fault === 'bitgo-vrf-opening-signature' ? (await signAsBitgo(new Uint8Array([9]))).signature : signature,
+                };
+            };
+            post.callsFake(() => ({
+                send: (rawBody) => ({
+                    result: async () => {
+                        const body = (0, codecs_1.decodeWithCodec)(KeyGenRequest, rawBody, 'EdDSA keygen request');
+                        assert_1.default.strictEqual(body.type, public_types_1.KeyGenTypeEnum.MPCv2);
+                        assert_1.default.strictEqual(body.curveType, public_types_1.KeyCurveEnum.EdDSA);
+                        // WP only reads safeId in round 1; round 2 is routed by the stored session.
+                        assert_1.default.strictEqual(body.safeId, body.round === public_types_1.MPCv2KeyGenStateEnum['MPCv2-R1'] ? 'safe-id' : undefined);
+                        requests.push({ round: body.round, ...body.payload });
+                        if (body.round === public_types_1.MPCv2KeyGenStateEnum['MPCv2-R1']) {
+                            const payload = (0, codecs_1.decodeWithCodec)(R1Payload, body.payload, 'EdDSA keygen round 1');
+                            userGpgKey = await pgp.readKey({ armoredKey: payload.userGpgPublicKey });
+                            backupGpgKey = await pgp.readKey({ armoredKey: payload.backupGpgPublicKey });
+                            const [userPk, backupPk] = await Promise.all([
+                                sdk_lib_mpc_1.MPSComms.extractEd25519PublicKey(userGpgKey),
+                                sdk_lib_mpc_1.MPSComms.extractEd25519PublicKey(backupGpgKey),
+                            ]);
+                            const [, bitgoSk] = await sdk_lib_mpc_1.MPSComms.extractEd25519KeyPair(bitgoPrivateKey);
+                            const userMsg1 = await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(payload.userMsg1, userGpgKey);
+                            const backupMsg1 = await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(payload.backupMsg1, backupGpgKey);
+                            // The VRF messages must be signed by the same party key as userMsg1/backupMsg1.
+                            userCommitment = new Uint8Array(await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(payload.userVrfMsg1, userGpgKey));
+                            backupCommitment = new Uint8Array(await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(payload.backupVrfMsg1, backupGpgKey));
+                            await assert_1.default.rejects(sdk_lib_mpc_1.MPSComms.verifyMpsMessage(payload.userVrfMsg1, backupGpgKey));
+                            await bitgoDkg.initDkg(bitgoSk, [userPk, backupPk]);
+                            const bitgoRawMsg1 = bitgoDkg.getFirstMessage();
+                            [bitgoMsg2] = bitgoDkg.handleIncomingMessages([
+                                { from: typesMPCv2_1.MPCv2PartiesEnum.USER, payload: new Uint8Array(userMsg1) },
+                                { from: typesMPCv2_1.MPCv2PartiesEnum.BACKUP, payload: new Uint8Array(backupMsg1) },
+                                bitgoRawMsg1,
+                            ]);
+                            const [bitgoVrfCommitment] = (await bitgoVrf.initDkg()).broadcastMessages;
+                            const signedVrfMsg1 = await signAsBitgo(bitgoVrfCommitment.payload);
+                            return {
+                                sessionId: 'session-id',
+                                bitgoMsg1: await signAsBitgo(bitgoRawMsg1.payload),
+                                bitgoVrfMsg1: fault === 'bitgo-vrf-msg1-signature'
+                                    ? { ...signedVrfMsg1, message: Buffer.from('tampered').toString('base64') }
+                                    : signedVrfMsg1,
+                            };
+                        }
+                        assert_1.default.strictEqual(body.round, public_types_1.MPCv2KeyGenStateEnum['MPCv2-R2']);
+                        const payload = (0, codecs_1.decodeWithCodec)(R2Payload, body.payload, 'EdDSA keygen round 2');
+                        assert_1.default.ok(userGpgKey && backupGpgKey && userCommitment && backupCommitment && bitgoMsg2);
+                        assert_1.default.deepStrictEqual(Object.keys(payload).sort(), [
+                            'backupMsg2',
+                            'backupVrfMsg2',
+                            'sessionId',
+                            'userMsg2',
+                            'userVrfMsg2',
+                        ]);
+                        const userMsg2 = await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(payload.userMsg2, userGpgKey);
+                        const backupMsg2 = await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(payload.backupMsg2, backupGpgKey);
+                        const userOpening = new Uint8Array(await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(payload.userVrfMsg2, userGpgKey));
+                        const backupOpening = new Uint8Array(await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(payload.backupVrfMsg2, backupGpgKey));
+                        bitgoDkg.handleIncomingMessages([
+                            { from: typesMPCv2_1.MPCv2PartiesEnum.USER, payload: new Uint8Array(userMsg2) },
+                            { from: typesMPCv2_1.MPCv2PartiesEnum.BACKUP, payload: new Uint8Array(backupMsg2) },
+                            bitgoMsg2,
+                        ]);
+                        const openings = await bitgoVrf.handleIncomingMessages({
+                            broadcastMessages: [
+                                { from: typesMPCv2_1.MPCv2PartiesEnum.USER, payload: userCommitment },
+                                { from: typesMPCv2_1.MPCv2PartiesEnum.BACKUP, payload: backupCommitment },
+                            ],
+                            p2pMessages: [],
+                        });
+                        const toUser = openings.p2pMessages.find(({ to }) => to === typesMPCv2_1.MPCv2PartiesEnum.USER);
+                        const toBackup = openings.p2pMessages.find(({ to }) => to === typesMPCv2_1.MPCv2PartiesEnum.BACKUP);
+                        assert_1.default.ok(toUser && toBackup);
+                        await bitgoVrf.handleIncomingMessages({
+                            broadcastMessages: [],
+                            p2pMessages: [
+                                { from: typesMPCv2_1.MPCv2PartiesEnum.USER, to: typesMPCv2_1.MPCv2PartiesEnum.BITGO, payload: userOpening },
+                                { from: typesMPCv2_1.MPCv2PartiesEnum.BACKUP, to: typesMPCv2_1.MPCv2PartiesEnum.BITGO, payload: backupOpening },
+                            ],
+                        });
+                        return {
+                            sessionId: payload.sessionId,
+                            commonPublicKeychain: bitgoDkg.getCommonKeychain(),
+                            bitgoMsg2: await signAsBitgo(bitgoMsg2.payload),
+                            ...(fault === 'missing-opening'
+                                ? {}
+                                : { bitgoVrfMsgToUser: await encryptTo(userGpgKey, toUser.payload) }),
+                            bitgoVrfMsgToBackup: await encryptTo(backupGpgKey, toBackup.payload),
+                        };
+                    },
+                }),
+            }));
+            await utils.createKeychains({
+                passphrase: 'passphrase',
+                enterprise: 'enterprise-id',
+                safeId: 'safe-id',
+            });
+            return { requests, encryptedInputs, addedKeychains };
+        }
+        it('signs VRF messages with the party keys and decrypts BitGo openings without handling the HSM VRF state', async function () {
+            const { requests, encryptedInputs, addedKeychains } = await keygenWithHsmPeer();
+            assert_1.default.deepStrictEqual(requests.map(({ round }) => round), [public_types_1.MPCv2KeyGenStateEnum['MPCv2-R1'], public_types_1.MPCv2KeyGenStateEnum['MPCv2-R2']]);
+            // WP keeps the HSM VRF state between rounds, so neither client round carries it.
+            for (const request of requests) {
+                assert_1.default.strictEqual('bitgoEncryptedVrfDkgState' in request, false);
+            }
+            // Both client roots end up with a signing share and a VRF share, tagged with the safe.
+            assert_1.default.deepStrictEqual(addedKeychains.map(({ source }) => source).sort(), ['backup', 'bitgo', 'user']);
+            for (const keychain of addedKeychains) {
+                assert_1.default.strictEqual(keychain.safeId, 'safe-id');
+            }
+            // User and backup each encrypt a full and a reduced envelope; every one carries a VRF share, and
+            // the two parties' shares differ. Order-independent: the roots are registered concurrently.
+            const vrfShares = new Set(encryptedInputs.map((input) => {
+                const { vrf, prvKeyShare } = decodeVrfEnvelope(Buffer.from(input, 'base64'));
+                assert_1.default.ok(vrf.length > 0);
+                assert_1.default.ok(prvKeyShare.length > 0);
+                return Buffer.from(vrf).toString('hex');
+            }));
+            assert_1.default.strictEqual(encryptedInputs.length, 4);
+            assert_1.default.strictEqual(vrfShares.size, 2);
+        });
+        it('rejects a BitGo VRF round 1 message whose signature does not verify', async function () {
+            await assert_1.default.rejects(keygenWithHsmPeer('bitgo-vrf-msg1-signature'), /signature|verification|signed/i);
+        });
+        it('rejects a BitGo VRF opening whose signature does not verify', async function () {
+            await assert_1.default.rejects(keygenWithHsmPeer('bitgo-vrf-opening-signature'), /signature|verification|signed/i);
+        });
+        it('fails when the HSM omits a BitGo VRF opening in round 2', async function () {
+            await assert_1.default.rejects(keygenWithHsmPeer('missing-opening'), /VRF message to user/);
+        });
+    });
+});
+describe('EdDSA safe-child MPS derivation', function () {
+    let userSigningShare;
+    let userVrfShare;
+    let bitgoSigningShare;
+    let bitgoVrfShare;
+    let bitgoPrivateKey;
+    let bitgoPublicKey;
+    const sessionId = 'derive-session';
+    const account = 7;
+    const path = (0, src_1.buildSafeBip44Path)(501, 'eddsaMpc', account);
+    const Request = t.intersection([
+        t.type({ enterprise: t.string, type: t.string, curveType: t.string, round: t.string, payload: t.unknown }),
+        t.partial({ safeId: t.string, coin: t.string }),
+    ]);
+    before(async function () {
+        const signing = await sdk_lib_mpc_1.MPSUtil.generateEdDsaDKGKeyShares();
+        const vrf = await sdk_lib_mpc_1.MpsVrfUtils.generateVrfDKGKeyShares();
+        userSigningShare = signing[typesMPCv2_1.MPCv2PartiesEnum.USER].getKeyShare();
+        bitgoSigningShare = signing[typesMPCv2_1.MPCv2PartiesEnum.BITGO].getKeyShare();
+        userVrfShare = vrf[typesMPCv2_1.MPCv2PartiesEnum.USER].getKeyShare();
+        bitgoVrfShare = vrf[typesMPCv2_1.MPCv2PartiesEnum.BITGO].getKeyShare();
+        const bitgoGpg = await (0, opengpgUtils_1.generateGPGKeyPair)('ed25519');
+        bitgoPrivateKey = await pgp.readPrivateKey({ armoredKey: bitgoGpg.privateKey });
+        bitgoPublicKey = await pgp.readKey({ armoredKey: bitgoGpg.publicKey });
+    });
+    async function deriveWithPeer(fault, recordedKeychains) {
+        const { bitgo, baseCoin, post, encryptedInputs, addedKeychains } = createKeychainFixture();
+        const utils = new eddsaVrfMPCv2_1.EddsaVrfMPCv2Utils(bitgo, baseCoin);
+        sinon.stub(utils, 'getBitgoGpgPubkeyBasedOnFeatureFlags').resolves({
+            mpcv2PublicKey: bitgoPublicKey,
+            eddsaMpcv2PublicKey: bitgoPublicKey,
+            redpallasMpcv2PublicKey: undefined,
+        });
+        const bitgoPeer = new sdk_lib_mpc_1.MpsDerive.Derive(3, 2, typesMPCv2_1.MPCv2PartiesEnum.BITGO, bitgoSigningShare, bitgoVrfShare, path);
+        let bitgoMsg2;
+        let userGpgPublicKey = '';
+        let rounds = 0;
+        post.callsFake((_url) => ({
+            send: (rawBody) => ({
+                result: async () => {
+                    const body = (0, codecs_1.decodeWithCodec)(Request, rawBody, 'EdDSA derive request');
+                    assert_1.default.strictEqual(_url, '/mpc/generatekey');
+                    assert_1.default.strictEqual(body.enterprise, 'enterprise-id');
+                    assert_1.default.strictEqual(body.coin, 'tsol');
+                    assert_1.default.strictEqual(body.type, public_types_1.KeyGenTypeEnum.MPCv2);
+                    assert_1.default.strictEqual(body.curveType, public_types_1.KeyCurveEnum.EdDSA);
+                    if (rounds++ === 0) {
+                        assert_1.default.strictEqual(body.round, public_types_1.MPCv2KeyGenStateEnum['MPCv2Derive-R1']);
+                        assert_1.default.strictEqual(body.safeId, 'safe-id');
+                        const request = (0, codecs_1.decodeWithCodec)(public_types_1.EddsaMPCv2DeriveRound1Request, body.payload, 'EdDSA derive round 1');
+                        assert_1.default.deepStrictEqual(Object.keys(request).sort(), [
+                            'parentKeyId',
+                            'path',
+                            'userGpgPublicKey',
+                            'userMsg1',
+                        ]);
+                        assert_1.default.strictEqual(request.parentKeyId, 'bitgo-root-id');
+                        assert_1.default.strictEqual(request.path, path);
+                        userGpgPublicKey = request.userGpgPublicKey;
+                        const userGpgKey = await pgp.readKey({ armoredKey: request.userGpgPublicKey });
+                        const userPayload = await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(request.userMsg1, userGpgKey);
+                        const bitgoFirst = await bitgoPeer.initDerive();
+                        const [outgoing] = bitgoPeer.handleIncomingMessages([
+                            { from: typesMPCv2_1.MPCv2PartiesEnum.USER, payload: new Uint8Array(userPayload) },
+                        ]);
+                        assert_1.default.ok(outgoing);
+                        bitgoMsg2 = outgoing.payload;
+                        const signed = await sdk_lib_mpc_1.MPSComms.detachSignMpsMessage(Buffer.from(bitgoFirst.payload), bitgoPrivateKey);
+                        return {
+                            sessionId,
+                            bitgoMsg1: fault === 'r1-signature' ? { ...signed, message: Buffer.from('tampered').toString('base64') } : signed,
+                        };
+                    }
+                    assert_1.default.strictEqual(rounds, 2);
+                    assert_1.default.strictEqual(body.round, public_types_1.MPCv2KeyGenStateEnum['MPCv2Derive-R2']);
+                    assert_1.default.strictEqual(body.safeId, 'safe-id');
+                    const request = (0, codecs_1.decodeWithCodec)(public_types_1.EddsaMPCv2DeriveRound2Request, body.payload, 'EdDSA derive round 2');
+                    assert_1.default.deepStrictEqual(Object.keys(request).sort(), ['sessionId', 'userMsg2']);
+                    assert_1.default.strictEqual(request.sessionId, sessionId);
+                    const userPayload = await sdk_lib_mpc_1.MPSComms.verifyMpsMessage(request.userMsg2, await pgp.readKey({ armoredKey: userGpgPublicKey }));
+                    assert_1.default.deepStrictEqual(bitgoPeer.handleIncomingMessages([{ from: typesMPCv2_1.MPCv2PartiesEnum.USER, payload: new Uint8Array(userPayload) }]), []);
+                    assert_1.default.ok(bitgoMsg2);
+                    const signed = await sdk_lib_mpc_1.MPSComms.detachSignMpsMessage(Buffer.from(bitgoMsg2), bitgoPrivateKey);
+                    const commonPublicKeychain = bitgoPeer.getCommonKeychain();
+                    return {
+                        sessionId: fault === 'session' ? 'different-session' : sessionId,
+                        commonPublicKeychain: fault === 'commonKeychain'
+                            ? `${commonPublicKeychain.slice(0, -1)}${commonPublicKeychain.endsWith('0') ? '1' : '0'}`
+                            : commonPublicKeychain,
+                        bitgoMsg2: fault === 'r2-signature' ? { ...signed, message: Buffer.from('tampered').toString('base64') } : signed,
+                    };
+                },
+            }),
+        }));
+        try {
+            const result = await utils.createSafeChildKeychains({
+                passphrase: 'passphrase',
+                enterprise: 'enterprise-id',
+                safeId: 'safe-id',
+                parentKeyId: 'bitgo-root-id',
+                path,
+                userRootKeyId: 'user-root-id',
+                backupRootKeyId: 'backup-root-id',
+                userRootKeyShare: userSigningShare,
+                userRootVrfKeyShare: userVrfShare,
+            });
+            return { result, encryptedInputs, addedKeychains, bitgoPeer, rounds };
+        }
+        finally {
+            recordedKeychains?.push(...addedKeychains);
+        }
+    }
+    afterEach(function () {
+        sinon.restore();
+    });
+    it('registers the child signing share and two public-only placeholders after the signed ceremony', async function () {
+        const { result, encryptedInputs, addedKeychains, bitgoPeer, rounds } = await deriveWithPeer();
+        assert_1.default.strictEqual(rounds, 2);
+        assert_1.default.deepStrictEqual(addedKeychains.map(({ source }) => source).sort(), ['backup', 'bitgo', 'user']);
+        assert_1.default.deepStrictEqual([result.userKeychain.id, result.backupKeychain.id, result.bitgoKeychain.id], ['user-child', 'backup-child', 'bitgo-child']);
+        for (const keychain of addedKeychains) {
+            assert_1.default.strictEqual(keychain.safeId, 'safe-id');
+            assert_1.default.strictEqual(keychain.derivedFromParentWithPath, path);
+            assert_1.default.strictEqual(keychain.commonKeychain, bitgoPeer.getCommonKeychain());
+            assert_1.default.strictEqual(keychain.keyType, 'tss');
+            assert_1.default.strictEqual(keychain.isMPCv2, true);
+        }
+        const userChild = addedKeychains.find(({ source }) => source === 'user');
+        const backupChild = addedKeychains.find(({ source }) => source === 'backup');
+        const bitgoChild = addedKeychains.find(({ source }) => source === 'bitgo');
+        assert_1.default.ok(userChild);
+        assert_1.default.ok(backupChild);
+        assert_1.default.ok(bitgoChild);
+        assert_1.default.strictEqual(userChild.parent, 'user-root-id');
+        assert_1.default.strictEqual(backupChild.parent, 'backup-root-id');
+        assert_1.default.strictEqual(bitgoChild.parent, 'bitgo-root-id');
+        assert_1.default.strictEqual(encryptedInputs.length, 2);
+        assert_1.default.strictEqual(userChild.encryptedPrv, `encrypted:${encryptedInputs[0]}`);
+        const signingShare = Buffer.from(result.userKeychain.encryptedPrv?.slice('encrypted:'.length) ?? '', 'base64');
+        assert_1.default.deepStrictEqual(signingShare, Buffer.from(encryptedInputs[0], 'base64'));
+        assert_1.default.notDeepStrictEqual(signingShare, userSigningShare);
+        assert_1.default.notDeepStrictEqual(signingShare, bitgoPeer.getKeyShare());
+        assert_1.default.strictEqual(userChild.reducedEncryptedPrv, undefined);
+        const reduced = result.userKeychain.reducedEncryptedPrv;
+        assert_1.default.ok(reduced);
+        const reducedShare = sdk_lib_mpc_1.MPSTypes.getDecodedReducedKeyShare(Buffer.from(reduced.slice('encrypted:'.length), 'base64'));
+        assert_1.default.deepStrictEqual(Buffer.from(reducedShare.keyShare), signingShare);
+        assert_1.default.strictEqual(Buffer.from(reducedShare.pub).toString('hex'), bitgoPeer.getCommonKeychain().slice(0, 64));
+        assert_1.default.throws(() => decodeVrfEnvelope(signingShare));
+        assert_1.default.strictEqual(backupChild.encryptedPrv, undefined);
+        assert_1.default.strictEqual(bitgoChild.encryptedPrv, undefined);
+    });
+    for (const badPath of ["m/7'", 'm/44/501/4/7', "m/44'/501'/0'/7'"]) {
+        it(`rejects the non-BIP44 path ${JSON.stringify(badPath)} before contacting WP`, async function () {
+            const { bitgo, baseCoin, post, addedKeychains } = createKeychainFixture();
+            const utils = new eddsaVrfMPCv2_1.EddsaVrfMPCv2Utils(bitgo, baseCoin);
+            await assert_1.default.rejects(utils.createSafeChildKeychains({
+                passphrase: 'passphrase',
+                enterprise: 'enterprise-id',
+                safeId: 'safe-id',
+                parentKeyId: 'bitgo-root-id',
+                path: badPath,
+                userRootKeyId: 'user-root-id',
+                backupRootKeyId: 'backup-root-id',
+                userRootKeyShare: userSigningShare,
+                userRootVrfKeyShare: userVrfShare,
+            }), /Invalid safe BIP44 path/);
+            assert_1.default.strictEqual(post.called, false);
+            assert_1.default.deepStrictEqual(addedKeychains, []);
+        });
+    }
+    const faults = [
+        'r1-signature',
+        'r2-signature',
+        'session',
+        'commonKeychain',
+    ];
+    for (const fault of faults) {
+        it(`rejects ${fault} before registering any child`, async function () {
+            const recordedKeychains = [];
+            await assert_1.default.rejects(() => deriveWithPeer(fault, recordedKeychains), fault === 'session'
+                ? /session id/i
+                : fault === 'commonKeychain'
+                    ? /common keychain/i
+                    : /signature|verification|signed/i);
+            assert_1.default.deepStrictEqual(recordedKeychains, []);
+        });
+    }
+});
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZWRkc2FWcmZNUEN2Mi5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uLy4uLy4uL3Rlc3QvdW5pdC9iaXRnby91dGlscy90c3MvZWRkc2EvZWRkc2FWcmZNUEN2Mi50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLG9EQUE0QjtBQUM1Qiw2Q0FBK0I7QUFDL0IsNkNBQStCO0FBQy9CLHlEQUFtSDtBQUNuSCxzREFPNkI7QUFDN0IsbUNBQWdDO0FBQ2hDLHlDQUEyQjtBQUUzQiwrQ0FPK0I7QUFDL0IscUVBQTJFO0FBQzNFLDZGQUFrRztBQUNsRyw2RkFBK0Y7QUFDL0YsdUZBQTBGO0FBQzFGLGlGQUFvRjtBQUVwRixNQUFNLGVBQWUsR0FBRyxJQUFJLENBQUMsQ0FBQyxJQUFJLENBQ2hDLFlBQVksRUFDWixDQUFDLEtBQUssRUFBdUIsRUFBRSxDQUFDLEtBQUssWUFBWSxVQUFVLEVBQzNELENBQUMsS0FBSyxFQUFFLE9BQU8sRUFBRSxFQUFFLENBQUMsQ0FBQyxLQUFLLFlBQVksVUFBVSxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLEtBQUssRUFBRSxPQUFPLENBQUMsQ0FBQyxFQUNoRyxDQUFDLENBQUMsUUFBUSxDQUNYLENBQUM7QUFFRixNQUFNLFdBQVcsR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDO0lBQ3pCLE9BQU8sRUFBRSxDQUFDLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQztJQUNyQixXQUFXLEVBQUUsZUFBZTtJQUM1QixHQUFHLEVBQUUsZUFBZTtDQUNyQixDQUFDLENBQUM7QUFjSCxTQUFTLGlCQUFpQixDQUFDLE9BQWU7SUFDeEMsT0FBTyxJQUFBLHdCQUFlLEVBQUMsV0FBVyxFQUFFLElBQUEsZUFBTSxFQUFDLE9BQU8sQ0FBQyxFQUFFLGtCQUFrQixDQUFDLENBQUM7QUFDM0UsQ0FBQztBQUVELFNBQVMscUJBQXFCO0lBQzVCLE1BQU0sZUFBZSxHQUFhLEVBQUUsQ0FBQztJQUNyQyxNQUFNLGNBQWMsR0FBMEIsRUFBRSxDQUFDO0lBQ2pELE1BQU0sSUFBSSxHQUFHLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQztJQUMxQixNQUFNLEtBQUssR0FBRztRQUNaLE1BQU0sRUFBRSxHQUFHLEVBQUUsQ0FBQyxLQUFLO1FBQ25CLEdBQUcsRUFBRSxDQUFDLElBQVksRUFBRSxFQUFFLENBQUMsSUFBSTtRQUMzQixJQUFJO1FBQ0osT0FBTyxFQUFFLEtBQUssRUFBRSxNQUF5QixFQUFtQixFQUFFO1lBQzVELGVBQWUsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLEtBQUssQ0FBQyxDQUFDO1lBQ25DLE9BQU8sYUFBYSxNQUFNLENBQUMsS0FBSyxFQUFFLENBQUM7UUFDckMsQ0FBQztLQUNzQixDQUFDO0lBQzFCLE1BQU0sU0FBUyxHQUFHO1FBQ2hCLEdBQUcsRUFBRSxLQUFLLEVBQUUsTUFBMkIsRUFBcUIsRUFBRTtZQUM1RCxjQUFjLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxDQUFDO1lBQzVCLE9BQU8sRUFBRSxFQUFFLEVBQUUsR0FBRyxNQUFNLENBQUMsTUFBTSxRQUFRLEVBQUUsSUFBSSxFQUFFLEtBQUssRUFBRSxZQUFZLEVBQUUsTUFBTSxDQUFDLFlBQVksRUFBRSxDQUFDO1FBQzFGLENBQUM7S0FDRixDQUFDO0lBQ0YsTUFBTSxRQUFRLEdBQUc7UUFDZixTQUFTLEVBQUUsR0FBRyxFQUFFLENBQUMsU0FBUztRQUMxQixRQUFRLEVBQUUsR0FBRyxFQUFFLENBQUMsTUFBTTtLQUNDLENBQUM7SUFDMUIsT0FBTyxFQUFFLEtBQUssRUFBRSxRQUFRLEVBQUUsSUFBSSxFQUFFLGVBQWUsRUFBRSxjQUFjLEVBQUUsQ0FBQztBQUNwRSxDQUFDO0FBRUQsUUFBUSxDQUFDLCtCQUErQixFQUFFO0lBQ3hDLEVBQUUsQ0FBQyxtRUFBbUUsRUFBRTtRQUN0RSxNQUFNLGVBQWUsR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLGVBQWUsQ0FBQyxDQUFDO1FBQ3JELE1BQU0sc0JBQXNCLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyx1QkFBdUIsQ0FBQyxDQUFDO1FBQ3BFLE1BQU0sV0FBVyxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsV0FBVyxDQUFDLENBQUM7UUFFN0MsTUFBTSxFQUFFLFFBQVEsRUFBRSxlQUFlLEVBQUUsR0FBRyxJQUFBLDJDQUF3QixFQUM1RCxlQUFlLEVBQ2Ysc0JBQXNCLEVBQ3RCLFdBQVcsQ0FDWixDQUFDO1FBQ0YsTUFBTSxlQUFlLEdBQUcsaUJBQWlCLENBQUMsUUFBUSxDQUFDLENBQUM7UUFDcEQsTUFBTSxzQkFBc0IsR0FBRyxpQkFBaUIsQ0FBQyxlQUFlLENBQUMsQ0FBQztRQUVsRSxnQkFBTSxDQUFDLGVBQWUsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLGVBQWUsQ0FBQyxXQUFXLENBQUMsRUFBRSxlQUFlLENBQUMsQ0FBQztRQUNsRixnQkFBTSxDQUFDLGVBQWUsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLGVBQWUsQ0FBQyxHQUFHLENBQUMsRUFBRSxXQUFXLENBQUMsQ0FBQztRQUN0RSxnQkFBTSxDQUFDLGVBQWUsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLHNCQUFzQixDQUFDLFdBQVcsQ0FBQyxFQUFFLHNCQUFzQixDQUFDLENBQUM7UUFDaEcsZ0JBQU0sQ0FBQyxlQUFlLENBQUMsTUFBTSxDQUFDLElBQUksQ0FBQyxzQkFBc0IsQ0FBQyxHQUFHLENBQUMsRUFBRSxXQUFXLENBQUMsQ0FBQztJQUMvRSxDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQywwREFBMEQsRUFBRSxLQUFLO1FBQ2xFLE1BQU0sRUFBRSxLQUFLLEVBQUUsUUFBUSxFQUFFLGVBQWUsRUFBRSxjQUFjLEVBQUUsR0FBRyxxQkFBcUIsRUFBRSxDQUFDO1FBQ3JGLE1BQU0sS0FBSyxHQUFHLElBQUkscUJBQWUsQ0FBQyxLQUFLLEVBQUUsUUFBUSxDQUFDLENBQUM7UUFDbkQsTUFBTSxlQUFlLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyxlQUFlLENBQUMsQ0FBQztRQUNyRCxNQUFNLHNCQUFzQixHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsdUJBQXVCLENBQUMsQ0FBQztRQUVwRSxNQUFNLEtBQUssQ0FBQyx5QkFBeUIsQ0FDbkMsNkJBQWdCLENBQUMsSUFBSSxFQUNyQixpQkFBaUIsRUFDakIsZUFBZSxFQUNmLHNCQUFzQixFQUN0QixZQUFZLENBQ2IsQ0FBQztRQUVGLGdCQUFNLENBQUMsZUFBZSxDQUFDLGVBQWUsRUFBRTtZQUN0QyxlQUFlLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQztZQUNsQyxzQkFBc0IsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDO1NBQzFDLENBQUMsQ0FBQztRQUNILGdCQUFNLENBQUMsV0FBVyxDQUFDLGNBQWMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxZQUFZLEVBQUUsYUFBYSxlQUFlLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxFQUFFLENBQUMsQ0FBQztRQUN0RyxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxjQUFjLENBQUMsQ0FBQyxDQUFDLENBQUMsTUFBTSxFQUFFLFNBQVMsQ0FBQyxDQUFDO0lBQzFELENBQUMsQ0FBQyxDQUFDO0lBRUgsRUFBRSxDQUFDLDhEQUE4RCxFQUFFLEtBQUs7UUFDdEUsTUFBTSxFQUFFLEtBQUssRUFBRSxRQUFRLEVBQUUsZUFBZSxFQUFFLGNBQWMsRUFBRSxHQUFHLHFCQUFxQixFQUFFLENBQUM7UUFDckYsTUFBTSxLQUFLLEdBQUcsSUFBSSxxQkFBZSxDQUFDLEtBQUssRUFBRSxRQUFRLENBQUMsQ0FBQztRQUVuRCxNQUFNLGdCQUFNLENBQUMsT0FBTyxDQUNsQixLQUFLLENBQUMseUJBQXlCLENBQUMsNkJBQWdCLENBQUMsTUFBTSxFQUFFLGlCQUFpQixFQUFFLFNBQVMsRUFBRSxTQUFTLEVBQUUsWUFBWSxDQUFDLEVBQy9HLGtEQUFrRCxDQUNuRCxDQUFDO1FBQ0YsZ0JBQU0sQ0FBQyxlQUFlLENBQUMsZUFBZSxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBQzVDLGdCQUFNLENBQUMsZUFBZSxDQUFDLGNBQWMsRUFBRSxFQUFFLENBQUMsQ0FBQztJQUM3QyxDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQyw2REFBNkQsRUFBRSxLQUFLO1FBQ3JFLE1BQU0sZUFBZSxHQUFhLEVBQUUsQ0FBQztRQUNyQyxNQUFNLGNBQWMsR0FBMEIsRUFBRSxDQUFDO1FBQ2pELE1BQU0sS0FBSyxHQUFHO1lBQ1osT0FBTyxFQUFFLEtBQUssRUFBRSxNQUF5QixFQUFtQixFQUFFO2dCQUM1RCxlQUFlLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsQ0FBQztnQkFDbkMsT0FBTyxhQUFhLE1BQU0sQ0FBQyxLQUFLLEVBQUUsQ0FBQztZQUNyQyxDQUFDO1NBQ3NCLENBQUM7UUFDMUIsTUFBTSxTQUFTLEdBQUc7WUFDaEIsR0FBRyxFQUFFLEtBQUssRUFBRSxNQUEyQixFQUFxQixFQUFFO2dCQUM1RCxjQUFjLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxDQUFDO2dCQUM1QixPQUFPLEVBQUUsRUFBRSxFQUFFLFVBQVUsRUFBeUIsQ0FBQztZQUNuRCxDQUFDO1NBQ0YsQ0FBQztRQUNGLE1BQU0sUUFBUSxHQUFHO1lBQ2YsU0FBUyxFQUFFLEdBQUcsRUFBRSxDQUFDLFNBQVM7U0FDSCxDQUFDO1FBQzFCLE1BQU0sS0FBSyxHQUFHLElBQUkscUJBQWUsQ0FBQyxLQUFLLEVBQUUsUUFBUSxDQUFDLENBQUM7UUFDbkQsTUFBTSxFQUFFLFFBQVEsRUFBRSxlQUFlLEVBQUUsR0FBRyxJQUFBLDJDQUF3QixFQUM1RCxNQUFNLENBQUMsSUFBSSxDQUFDLGVBQWUsQ0FBQyxFQUM1QixNQUFNLENBQUMsSUFBSSxDQUFDLHVCQUF1QixDQUFDLEVBQ3BDLE1BQU0sQ0FBQyxJQUFJLENBQUMsV0FBVyxDQUFDLENBQ3pCLENBQUM7UUFFRixNQUFNLEtBQUssQ0FBQyx5QkFBeUIsQ0FDbkMsNkJBQWdCLENBQUMsSUFBSSxFQUNyQixpQkFBaUIsRUFDakIsUUFBUSxFQUNSLGVBQWUsRUFDZixZQUFZLEVBQ1osU0FBUyxFQUNULFNBQVMsRUFDVCxTQUFTLEVBQ1QsU0FBUyxFQUNULFNBQVMsQ0FDVixDQUFDO1FBRUYsZ0JBQU0sQ0FBQyxlQUFlLENBQUMsZUFBZSxDQUFDLENBQUMsQ0FBQyxFQUFFLFFBQVEsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQztRQUN4RSxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxjQUFjLENBQUMsQ0FBQyxDQUFDLENBQUMsTUFBTSxFQUFFLFNBQVMsQ0FBQyxDQUFDO1FBQ3hELE1BQU0sT0FBTyxHQUFHLGlCQUFpQixDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsZUFBZSxDQUFDLENBQUMsQ0FBQyxFQUFFLFFBQVEsQ0FBQyxDQUFDLENBQUM7UUFDN0UsZ0JBQU0sQ0FBQyxlQUFlLENBQUMsTUFBTSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLEVBQUUsTUFBTSxDQUFDLElBQUksQ0FBQyxXQUFXLENBQUMsQ0FBQyxDQUFDO0lBQzdFLENBQUMsQ0FBQyxDQUFDO0lBRUgsRUFBRSxDQUFDLDBEQUEwRCxFQUFFLEtBQUs7UUFDbEUsTUFBTSxlQUFlLEdBQWEsRUFBRSxDQUFDO1FBQ3JDLE1BQU0sY0FBYyxHQUEwQixFQUFFLENBQUM7UUFDakQsTUFBTSxLQUFLLEdBQUc7WUFDWixPQUFPLEVBQUUsS0FBSyxFQUFFLE1BQXlCLEVBQW1CLEVBQUU7Z0JBQzVELGVBQWUsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLEtBQUssQ0FBQyxDQUFDO2dCQUNuQyxPQUFPLGFBQWEsTUFBTSxDQUFDLEtBQUssRUFBRSxDQUFDO1lBQ3JDLENBQUM7U0FDc0IsQ0FBQztRQUMxQixNQUFNLFNBQVMsR0FBRztZQUNoQixHQUFHLEVBQUUsS0FBSyxFQUFFLE1BQTJCLEVBQXFCLEVBQUU7Z0JBQzVELGNBQWMsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLENBQUM7Z0JBQzVCLE9BQU8sRUFBRSxFQUFFLEVBQUUsV0FBVyxFQUF5QixDQUFDO1lBQ3BELENBQUM7U0FDRixDQUFDO1FBQ0YsTUFBTSxRQUFRLEdBQUc7WUFDZixTQUFTLEVBQUUsR0FBRyxFQUFFLENBQUMsU0FBUztTQUNILENBQUM7UUFDMUIsTUFBTSxLQUFLLEdBQUcsSUFBSSxxQkFBZSxDQUFDLEtBQUssRUFBRSxRQUFRLENBQUMsQ0FBQztRQUVuRCxNQUFNLEtBQUssQ0FBQyx5QkFBeUIsQ0FDbkMsNkJBQWdCLENBQUMsS0FBSyxFQUN0QixpQkFBaUIsRUFDakIsU0FBUyxFQUNULFNBQVMsRUFDVCxTQUFTLEVBQ1QsU0FBUyxFQUNULFNBQVMsRUFDVCxTQUFTLEVBQ1QsU0FBUyxFQUNULFNBQVMsQ0FDVixDQUFDO1FBRUYsZ0JBQU0sQ0FBQyxlQUFlLENBQUMsZUFBZSxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBQzVDLGdCQUFNLENBQUMsV0FBVyxDQUFDLGNBQWMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsT0FBTyxDQUFDLENBQUM7UUFDdEQsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsY0FBYyxDQUFDLENBQUMsQ0FBQyxDQUFDLE1BQU0sRUFBRSxTQUFTLENBQUMsQ0FBQztRQUN4RCxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxjQUFjLENBQUMsQ0FBQyxDQUFDLENBQUMsWUFBWSxFQUFFLFNBQVMsQ0FBQyxDQUFDO0lBQ2hFLENBQUMsQ0FBQyxDQUFDO0lBRUgsUUFBUSxDQUFDLDJDQUEyQyxFQUFFO1FBQ3BELE1BQU0sYUFBYSxHQUFHLENBQUMsQ0FBQyxZQUFZLENBQUM7WUFDbkMsQ0FBQyxDQUFDLElBQUksQ0FBQyxFQUFFLFVBQVUsRUFBRSxDQUFDLENBQUMsTUFBTSxFQUFFLElBQUksRUFBRSxDQUFDLENBQUMsTUFBTSxFQUFFLFNBQVMsRUFBRSxDQUFDLENBQUMsTUFBTSxFQUFFLEtBQUssRUFBRSxDQUFDLENBQUMsTUFBTSxFQUFFLENBQUM7WUFDdEYsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUMsTUFBTSxFQUFFLE9BQU8sRUFBRSxDQUFDLENBQUMsYUFBYSxFQUFFLENBQUM7U0FDMUQsQ0FBQyxDQUFDO1FBQ0gsTUFBTSxTQUFTLEdBQUcsQ0FBQyxDQUFDLFlBQVksQ0FBQztZQUMvQixDQUFDLENBQUMsSUFBSSxDQUFDO2dCQUNMLGdCQUFnQixFQUFFLENBQUMsQ0FBQyxNQUFNO2dCQUMxQixrQkFBa0IsRUFBRSxDQUFDLENBQUMsTUFBTTtnQkFDNUIsUUFBUSxFQUFFLHNDQUF1QjtnQkFDakMsVUFBVSxFQUFFLHNDQUF1QjthQUNwQyxDQUFDO1lBQ0YsQ0FBQyxDQUFDLElBQUksQ0FBQztnQkFDTCxXQUFXLEVBQUUsc0NBQXVCO2dCQUNwQyxhQUFhLEVBQUUsc0NBQXVCO2FBQ3ZDLENBQUM7U0FDSCxDQUFDLENBQUM7UUFDSCxNQUFNLFNBQVMsR0FBRyxDQUFDLENBQUMsWUFBWSxDQUFDO1lBQy9CLENBQUMsQ0FBQyxJQUFJLENBQUMsRUFBRSxTQUFTLEVBQUUsQ0FBQyxDQUFDLE1BQU0sRUFBRSxRQUFRLEVBQUUsc0NBQXVCLEVBQUUsVUFBVSxFQUFFLHNDQUF1QixFQUFFLENBQUM7WUFDdkcsQ0FBQyxDQUFDLElBQUksQ0FBQztnQkFDTCxXQUFXLEVBQUUsc0NBQXVCO2dCQUNwQyxhQUFhLEVBQUUsc0NBQXVCO2FBQ3ZDLENBQUM7U0FDSCxDQUFDLENBQUM7UUFFSCxJQUFJLGVBQStCLENBQUM7UUFDcEMsSUFBSSxjQUF1QixDQUFDO1FBRTVCLE1BQU0sQ0FBQyxLQUFLO1lBQ1YsTUFBTSxRQUFRLEdBQUcsTUFBTSxJQUFBLGlDQUFrQixFQUFDLFNBQVMsQ0FBQyxDQUFDO1lBQ3JELGVBQWUsR0FBRyxNQUFNLEdBQUcsQ0FBQyxjQUFjLENBQUMsRUFBRSxVQUFVLEVBQUUsUUFBUSxDQUFDLFVBQVUsRUFBRSxDQUFDLENBQUM7WUFDaEYsY0FBYyxHQUFHLE1BQU0sR0FBRyxDQUFDLE9BQU8sQ0FBQyxFQUFFLFVBQVUsRUFBRSxRQUFRLENBQUMsU0FBUyxFQUFFLENBQUMsQ0FBQztRQUN6RSxDQUFDLENBQUMsQ0FBQztRQUVILFNBQVMsQ0FBQztZQUNSLEtBQUssQ0FBQyxPQUFPLEVBQUUsQ0FBQztRQUNsQixDQUFDLENBQUMsQ0FBQztRQUVILCtHQUErRztRQUMvRyxLQUFLLFVBQVUsaUJBQWlCLENBQzlCLEtBQXNGO1lBRXRGLE1BQU0sRUFBRSxLQUFLLEVBQUUsUUFBUSxFQUFFLElBQUksRUFBRSxlQUFlLEVBQUUsY0FBYyxFQUFFLEdBQUcscUJBQXFCLEVBQUUsQ0FBQztZQUMzRixNQUFNLEtBQUssR0FBRyxJQUFJLGtDQUFrQixDQUFDLEtBQUssRUFBRSxRQUFRLENBQUMsQ0FBQztZQUN0RCxLQUFLLENBQUMsSUFBSSxDQUFDLEtBQUssRUFBRSxzQ0FBc0MsQ0FBQyxDQUFDLFFBQVEsQ0FBQztnQkFDakUsY0FBYyxFQUFFLGNBQWM7Z0JBQzlCLG1CQUFtQixFQUFFLGNBQWM7Z0JBQ25DLHVCQUF1QixFQUFFLFNBQVM7YUFDbkMsQ0FBQyxDQUFDO1lBRUgsTUFBTSxRQUFRLEdBQUcsSUFBSSx5QkFBVyxDQUFDLEdBQUcsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxFQUFFLDZCQUFnQixDQUFDLEtBQUssQ0FBQyxDQUFDO1lBQ25FLE1BQU0sUUFBUSxHQUFHLElBQUksb0JBQU0sQ0FBQyxNQUFNLENBQUMsQ0FBQyxFQUFFLENBQUMsRUFBRSw2QkFBZ0IsQ0FBQyxLQUFLLENBQUMsQ0FBQztZQUNqRSxNQUFNLFFBQVEsR0FBOEIsRUFBRSxDQUFDO1lBQy9DLElBQUksU0FBbUQsQ0FBQztZQUN4RCxJQUFJLFVBQStCLENBQUM7WUFDcEMsSUFBSSxZQUFpQyxDQUFDO1lBQ3RDLElBQUksY0FBc0MsQ0FBQztZQUMzQyxJQUFJLGdCQUF3QyxDQUFDO1lBRTdDLE1BQU0sV0FBVyxHQUFHLENBQUMsT0FBbUIsRUFBRSxFQUFFLENBQUMsc0JBQVEsQ0FBQyxvQkFBb0IsQ0FBQyxPQUFPLEVBQUUsZUFBZSxDQUFDLENBQUM7WUFDckcsTUFBTSxTQUFTLEdBQUcsS0FBSyxFQUFFLFNBQWtCLEVBQUUsU0FBcUIsRUFBb0MsRUFBRTtnQkFDdEcsTUFBTSxFQUFFLFNBQVMsRUFBRSxHQUFHLE1BQU0sV0FBVyxDQUFDLFNBQVMsQ0FBQyxDQUFDO2dCQUNuRCxNQUFNLE9BQU8sR0FBRyxNQUFNLEdBQUcsQ0FBQyxPQUFPLENBQUM7b0JBQ2hDLE9BQU8sRUFBRSxNQUFNLEdBQUcsQ0FBQyxhQUFhLENBQUMsRUFBRSxNQUFNLEVBQUUsU0FBUyxFQUFFLENBQUM7b0JBQ3ZELGNBQWMsRUFBRSxTQUFTO29CQUN6QixNQUFNLEVBQUUsU0FBUztpQkFDbEIsQ0FBQyxDQUFDO2dCQUNILE9BQU87b0JBQ0wsT0FBTztvQkFDUCxTQUFTLEVBQ1AsS0FBSyxLQUFLLDZCQUE2QixDQUFDLENBQUMsQ0FBQyxDQUFDLE1BQU0sV0FBVyxDQUFDLElBQUksVUFBVSxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsU0FBUyxDQUFDLENBQUMsQ0FBQyxTQUFTO2lCQUMzRyxDQUFDO1lBQ0osQ0FBQyxDQUFDO1lBRUYsSUFBSSxDQUFDLFNBQVMsQ0FBQyxHQUFHLEVBQUUsQ0FBQyxDQUFDO2dCQUNwQixJQUFJLEVBQUUsQ0FBQyxPQUFnQixFQUFFLEVBQUUsQ0FBQyxDQUFDO29CQUMzQixNQUFNLEVBQUUsS0FBSyxJQUFJLEVBQUU7d0JBQ2pCLE1BQU0sSUFBSSxHQUFHLElBQUEsd0JBQWUsRUFBQyxhQUFhLEVBQUUsT0FBTyxFQUFFLHNCQUFzQixDQUFDLENBQUM7d0JBQzdFLGdCQUFNLENBQUMsV0FBVyxDQUFDLElBQUksQ0FBQyxJQUFJLEVBQUUsNkJBQWMsQ0FBQyxLQUFLLENBQUMsQ0FBQzt3QkFDcEQsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsSUFBSSxDQUFDLFNBQVMsRUFBRSwyQkFBWSxDQUFDLEtBQUssQ0FBQyxDQUFDO3dCQUN2RCw0RUFBNEU7d0JBQzVFLGdCQUFNLENBQUMsV0FBVyxDQUFDLElBQUksQ0FBQyxNQUFNLEVBQUUsSUFBSSxDQUFDLEtBQUssS0FBSyxtQ0FBb0IsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUMsU0FBUyxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUMsQ0FBQzt3QkFDekcsUUFBUSxDQUFDLElBQUksQ0FBQyxFQUFFLEtBQUssRUFBRSxJQUFJLENBQUMsS0FBSyxFQUFFLEdBQUcsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUM7d0JBRXRELElBQUksSUFBSSxDQUFDLEtBQUssS0FBSyxtQ0FBb0IsQ0FBQyxVQUFVLENBQUMsRUFBRSxDQUFDOzRCQUNwRCxNQUFNLE9BQU8sR0FBRyxJQUFBLHdCQUFlLEVBQUMsU0FBUyxFQUFFLElBQUksQ0FBQyxPQUFPLEVBQUUsc0JBQXNCLENBQUMsQ0FBQzs0QkFDakYsVUFBVSxHQUFHLE1BQU0sR0FBRyxDQUFDLE9BQU8sQ0FBQyxFQUFFLFVBQVUsRUFBRSxPQUFPLENBQUMsZ0JBQWdCLEVBQUUsQ0FBQyxDQUFDOzRCQUN6RSxZQUFZLEdBQUcsTUFBTSxHQUFHLENBQUMsT0FBTyxDQUFDLEVBQUUsVUFBVSxFQUFFLE9BQU8sQ0FBQyxrQkFBa0IsRUFBRSxDQUFDLENBQUM7NEJBQzdFLE1BQU0sQ0FBQyxNQUFNLEVBQUUsUUFBUSxDQUFDLEdBQUcsTUFBTSxPQUFPLENBQUMsR0FBRyxDQUFDO2dDQUMzQyxzQkFBUSxDQUFDLHVCQUF1QixDQUFDLFVBQVUsQ0FBQztnQ0FDNUMsc0JBQVEsQ0FBQyx1QkFBdUIsQ0FBQyxZQUFZLENBQUM7NkJBQy9DLENBQUMsQ0FBQzs0QkFDSCxNQUFNLENBQUMsRUFBRSxPQUFPLENBQUMsR0FBRyxNQUFNLHNCQUFRLENBQUMscUJBQXFCLENBQUMsZUFBZSxDQUFDLENBQUM7NEJBRTFFLE1BQU0sUUFBUSxHQUFHLE1BQU0sc0JBQVEsQ0FBQyxnQkFBZ0IsQ0FBQyxPQUFPLENBQUMsUUFBUSxFQUFFLFVBQVUsQ0FBQyxDQUFDOzRCQUMvRSxNQUFNLFVBQVUsR0FBRyxNQUFNLHNCQUFRLENBQUMsZ0JBQWdCLENBQUMsT0FBTyxDQUFDLFVBQVUsRUFBRSxZQUFZLENBQUMsQ0FBQzs0QkFDckYsZ0ZBQWdGOzRCQUNoRixjQUFjLEdBQUcsSUFBSSxVQUFVLENBQUMsTUFBTSxzQkFBUSxDQUFDLGdCQUFnQixDQUFDLE9BQU8sQ0FBQyxXQUFXLEVBQUUsVUFBVSxDQUFDLENBQUMsQ0FBQzs0QkFDbEcsZ0JBQWdCLEdBQUcsSUFBSSxVQUFVLENBQUMsTUFBTSxzQkFBUSxDQUFDLGdCQUFnQixDQUFDLE9BQU8sQ0FBQyxhQUFhLEVBQUUsWUFBWSxDQUFDLENBQUMsQ0FBQzs0QkFDeEcsTUFBTSxnQkFBTSxDQUFDLE9BQU8sQ0FBQyxzQkFBUSxDQUFDLGdCQUFnQixDQUFDLE9BQU8sQ0FBQyxXQUFXLEVBQUUsWUFBWSxDQUFDLENBQUMsQ0FBQzs0QkFFbkYsTUFBTSxRQUFRLENBQUMsT0FBTyxDQUFDLE9BQU8sRUFBRSxDQUFDLE1BQU0sRUFBRSxRQUFRLENBQUMsQ0FBQyxDQUFDOzRCQUNwRCxNQUFNLFlBQVksR0FBRyxRQUFRLENBQUMsZUFBZSxFQUFFLENBQUM7NEJBQ2hELENBQUMsU0FBUyxDQUFDLEdBQUcsUUFBUSxDQUFDLHNCQUFzQixDQUFDO2dDQUM1QyxFQUFFLElBQUksRUFBRSw2QkFBZ0IsQ0FBQyxJQUFJLEVBQUUsT0FBTyxFQUFFLElBQUksVUFBVSxDQUFDLFFBQVEsQ0FBQyxFQUFFO2dDQUNsRSxFQUFFLElBQUksRUFBRSw2QkFBZ0IsQ0FBQyxNQUFNLEVBQUUsT0FBTyxFQUFFLElBQUksVUFBVSxDQUFDLFVBQVUsQ0FBQyxFQUFFO2dDQUN0RSxZQUFZOzZCQUNiLENBQUMsQ0FBQzs0QkFFSCxNQUFNLENBQUMsa0JBQWtCLENBQUMsR0FBRyxDQUFDLE1BQU0sUUFBUSxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUMsaUJBQWlCLENBQUM7NEJBQzFFLE1BQU0sYUFBYSxHQUFHLE1BQU0sV0FBVyxDQUFDLGtCQUFrQixDQUFDLE9BQU8sQ0FBQyxDQUFDOzRCQUNwRSxPQUFPO2dDQUNMLFNBQVMsRUFBRSxZQUFZO2dDQUN2QixTQUFTLEVBQUUsTUFBTSxXQUFXLENBQUMsWUFBWSxDQUFDLE9BQU8sQ0FBQztnQ0FDbEQsWUFBWSxFQUNWLEtBQUssS0FBSywwQkFBMEI7b0NBQ2xDLENBQUMsQ0FBQyxFQUFFLEdBQUcsYUFBYSxFQUFFLE9BQU8sRUFBRSxNQUFNLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsRUFBRTtvQ0FDM0UsQ0FBQyxDQUFDLGFBQWE7NkJBQ3BCLENBQUM7d0JBQ0osQ0FBQzt3QkFFRCxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxJQUFJLENBQUMsS0FBSyxFQUFFLG1DQUFvQixDQUFDLFVBQVUsQ0FBQyxDQUFDLENBQUM7d0JBQ2pFLE1BQU0sT0FBTyxHQUFHLElBQUEsd0JBQWUsRUFBQyxTQUFTLEVBQUUsSUFBSSxDQUFDLE9BQU8sRUFBRSxzQkFBc0IsQ0FBQyxDQUFDO3dCQUNqRixnQkFBTSxDQUFDLEVBQUUsQ0FBQyxVQUFVLElBQUksWUFBWSxJQUFJLGNBQWMsSUFBSSxnQkFBZ0IsSUFBSSxTQUFTLENBQUMsQ0FBQzt3QkFDekYsZ0JBQU0sQ0FBQyxlQUFlLENBQUMsTUFBTSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsQ0FBQyxJQUFJLEVBQUUsRUFBRTs0QkFDbEQsWUFBWTs0QkFDWixlQUFlOzRCQUNmLFdBQVc7NEJBQ1gsVUFBVTs0QkFDVixhQUFhO3lCQUNkLENBQUMsQ0FBQzt3QkFFSCxNQUFNLFFBQVEsR0FBRyxNQUFNLHNCQUFRLENBQUMsZ0JBQWdCLENBQUMsT0FBTyxDQUFDLFFBQVEsRUFBRSxVQUFVLENBQUMsQ0FBQzt3QkFDL0UsTUFBTSxVQUFVLEdBQUcsTUFBTSxzQkFBUSxDQUFDLGdCQUFnQixDQUFDLE9BQU8sQ0FBQyxVQUFVLEVBQUUsWUFBWSxDQUFDLENBQUM7d0JBQ3JGLE1BQU0sV0FBVyxHQUFHLElBQUksVUFBVSxDQUFDLE1BQU0sc0JBQVEsQ0FBQyxnQkFBZ0IsQ0FBQyxPQUFPLENBQUMsV0FBVyxFQUFFLFVBQVUsQ0FBQyxDQUFDLENBQUM7d0JBQ3JHLE1BQU0sYUFBYSxHQUFHLElBQUksVUFBVSxDQUFDLE1BQU0sc0JBQVEsQ0FBQyxnQkFBZ0IsQ0FBQyxPQUFPLENBQUMsYUFBYSxFQUFFLFlBQVksQ0FBQyxDQUFDLENBQUM7d0JBRTNHLFFBQVEsQ0FBQyxzQkFBc0IsQ0FBQzs0QkFDOUIsRUFBRSxJQUFJLEVBQUUsNkJBQWdCLENBQUMsSUFBSSxFQUFFLE9BQU8sRUFBRSxJQUFJLFVBQVUsQ0FBQyxRQUFRLENBQUMsRUFBRTs0QkFDbEUsRUFBRSxJQUFJLEVBQUUsNkJBQWdCLENBQUMsTUFBTSxFQUFFLE9BQU8sRUFBRSxJQUFJLFVBQVUsQ0FBQyxVQUFVLENBQUMsRUFBRTs0QkFDdEUsU0FBUzt5QkFDVixDQUFDLENBQUM7d0JBRUgsTUFBTSxRQUFRLEdBQUcsTUFBTSxRQUFRLENBQUMsc0JBQXNCLENBQUM7NEJBQ3JELGlCQUFpQixFQUFFO2dDQUNqQixFQUFFLElBQUksRUFBRSw2QkFBZ0IsQ0FBQyxJQUFJLEVBQUUsT0FBTyxFQUFFLGNBQWMsRUFBRTtnQ0FDeEQsRUFBRSxJQUFJLEVBQUUsNkJBQWdCLENBQUMsTUFBTSxFQUFFLE9BQU8sRUFBRSxnQkFBZ0IsRUFBRTs2QkFDN0Q7NEJBQ0QsV0FBVyxFQUFFLEVBQUU7eUJBQ2hCLENBQUMsQ0FBQzt3QkFDSCxNQUFNLE1BQU0sR0FBRyxRQUFRLENBQUMsV0FBVyxDQUFDLElBQUksQ0FBQyxDQUFDLEVBQUUsRUFBRSxFQUFFLEVBQUUsRUFBRSxDQUFDLEVBQUUsS0FBSyw2QkFBZ0IsQ0FBQyxJQUFJLENBQUMsQ0FBQzt3QkFDbkYsTUFBTSxRQUFRLEdBQUcsUUFBUSxDQUFDLFdBQVcsQ0FBQyxJQUFJLENBQUMsQ0FBQyxFQUFFLEVBQUUsRUFBRSxFQUFFLEVBQUUsQ0FBQyxFQUFFLEtBQUssNkJBQWdCLENBQUMsTUFBTSxDQUFDLENBQUM7d0JBQ3ZGLGdCQUFNLENBQUMsRUFBRSxDQUFDLE1BQU0sSUFBSSxRQUFRLENBQUMsQ0FBQzt3QkFDOUIsTUFBTSxRQUFRLENBQUMsc0JBQXNCLENBQUM7NEJBQ3BDLGlCQUFpQixFQUFFLEVBQUU7NEJBQ3JCLFdBQVcsRUFBRTtnQ0FDWCxFQUFFLElBQUksRUFBRSw2QkFBZ0IsQ0FBQyxJQUFJLEVBQUUsRUFBRSxFQUFFLDZCQUFnQixDQUFDLEtBQUssRUFBRSxPQUFPLEVBQUUsV0FBVyxFQUFFO2dDQUNqRixFQUFFLElBQUksRUFBRSw2QkFBZ0IsQ0FBQyxNQUFNLEVBQUUsRUFBRSxFQUFFLDZCQUFnQixDQUFDLEtBQUssRUFBRSxPQUFPLEVBQUUsYUFBYSxFQUFFOzZCQUN0Rjt5QkFDRixDQUFDLENBQUM7d0JBRUgsT0FBTzs0QkFDTCxTQUFTLEVBQUUsT0FBTyxDQUFDLFNBQVM7NEJBQzVCLG9CQUFvQixFQUFFLFFBQVEsQ0FBQyxpQkFBaUIsRUFBRTs0QkFDbEQsU0FBUyxFQUFFLE1BQU0sV0FBVyxDQUFDLFNBQVMsQ0FBQyxPQUFPLENBQUM7NEJBQy9DLEdBQUcsQ0FBQyxLQUFLLEtBQUssaUJBQWlCO2dDQUM3QixDQUFDLENBQUMsRUFBRTtnQ0FDSixDQUFDLENBQUMsRUFBRSxpQkFBaUIsRUFBRSxNQUFNLFNBQVMsQ0FBQyxVQUFVLEVBQUUsTUFBTSxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7NEJBQ3ZFLG1CQUFtQixFQUFFLE1BQU0sU0FBUyxDQUFDLFlBQVksRUFBRSxRQUFRLENBQUMsT0FBTyxDQUFDO3lCQUNyRSxDQUFDO29CQUNKLENBQUM7aUJBQ0YsQ0FBQzthQUNILENBQUMsQ0FBQyxDQUFDO1lBRUosTUFBTSxLQUFLLENBQUMsZUFBZSxDQUFDO2dCQUMxQixVQUFVLEVBQUUsWUFBWTtnQkFDeEIsVUFBVSxFQUFFLGVBQWU7Z0JBQzNCLE1BQU0sRUFBRSxTQUFTO2FBQ2xCLENBQUMsQ0FBQztZQUNILE9BQU8sRUFBRSxRQUFRLEVBQUUsZUFBZSxFQUFFLGNBQWMsRUFBRSxDQUFDO1FBQ3ZELENBQUM7UUFFRCxFQUFFLENBQUMsdUdBQXVHLEVBQUUsS0FBSztZQUMvRyxNQUFNLEVBQUUsUUFBUSxFQUFFLGVBQWUsRUFBRSxjQUFjLEVBQUUsR0FBRyxNQUFNLGlCQUFpQixFQUFFLENBQUM7WUFFaEYsZ0JBQU0sQ0FBQyxlQUFlLENBQ3BCLFFBQVEsQ0FBQyxHQUFHLENBQUMsQ0FBQyxFQUFFLEtBQUssRUFBRSxFQUFFLEVBQUUsQ0FBQyxLQUFLLENBQUMsRUFDbEMsQ0FBQyxtQ0FBb0IsQ0FBQyxVQUFVLENBQUMsRUFBRSxtQ0FBb0IsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUNyRSxDQUFDO1lBQ0YsaUZBQWlGO1lBQ2pGLEtBQUssTUFBTSxPQUFPLElBQUksUUFBUSxFQUFFLENBQUM7Z0JBQy9CLGdCQUFNLENBQUMsV0FBVyxDQUFDLDJCQUEyQixJQUFJLE9BQU8sRUFBRSxLQUFLLENBQUMsQ0FBQztZQUNwRSxDQUFDO1lBRUQsdUZBQXVGO1lBQ3ZGLGdCQUFNLENBQUMsZUFBZSxDQUFDLGNBQWMsQ0FBQyxHQUFHLENBQUMsQ0FBQyxFQUFFLE1BQU0sRUFBRSxFQUFFLEVBQUUsQ0FBQyxNQUFNLENBQUMsQ0FBQyxJQUFJLEVBQUUsRUFBRSxDQUFDLFFBQVEsRUFBRSxPQUFPLEVBQUUsTUFBTSxDQUFDLENBQUMsQ0FBQztZQUN2RyxLQUFLLE1BQU0sUUFBUSxJQUFJLGNBQWMsRUFBRSxDQUFDO2dCQUN0QyxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxRQUFRLENBQUMsTUFBTSxFQUFFLFNBQVMsQ0FBQyxDQUFDO1lBQ2pELENBQUM7WUFDRCxpR0FBaUc7WUFDakcsNEZBQTRGO1lBQzVGLE1BQU0sU0FBUyxHQUFHLElBQUksR0FBRyxDQUN2QixlQUFlLENBQUMsR0FBRyxDQUFDLENBQUMsS0FBSyxFQUFFLEVBQUU7Z0JBQzVCLE1BQU0sRUFBRSxHQUFHLEVBQUUsV0FBVyxFQUFFLEdBQUcsaUJBQWlCLENBQUMsTUFBTSxDQUFDLElBQUksQ0FBQyxLQUFLLEVBQUUsUUFBUSxDQUFDLENBQUMsQ0FBQztnQkFDN0UsZ0JBQU0sQ0FBQyxFQUFFLENBQUMsR0FBRyxDQUFDLE1BQU0sR0FBRyxDQUFDLENBQUMsQ0FBQztnQkFDMUIsZ0JBQU0sQ0FBQyxFQUFFLENBQUMsV0FBVyxDQUFDLE1BQU0sR0FBRyxDQUFDLENBQUMsQ0FBQztnQkFDbEMsT0FBTyxNQUFNLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsQ0FBQztZQUMxQyxDQUFDLENBQUMsQ0FDSCxDQUFDO1lBQ0YsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsZUFBZSxDQUFDLE1BQU0sRUFBRSxDQUFDLENBQUMsQ0FBQztZQUM5QyxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxTQUFTLENBQUMsSUFBSSxFQUFFLENBQUMsQ0FBQyxDQUFDO1FBQ3hDLENBQUMsQ0FBQyxDQUFDO1FBRUgsRUFBRSxDQUFDLHFFQUFxRSxFQUFFLEtBQUs7WUFDN0UsTUFBTSxnQkFBTSxDQUFDLE9BQU8sQ0FBQyxpQkFBaUIsQ0FBQywwQkFBMEIsQ0FBQyxFQUFFLGdDQUFnQyxDQUFDLENBQUM7UUFDeEcsQ0FBQyxDQUFDLENBQUM7UUFFSCxFQUFFLENBQUMsNkRBQTZELEVBQUUsS0FBSztZQUNyRSxNQUFNLGdCQUFNLENBQUMsT0FBTyxDQUFDLGlCQUFpQixDQUFDLDZCQUE2QixDQUFDLEVBQUUsZ0NBQWdDLENBQUMsQ0FBQztRQUMzRyxDQUFDLENBQUMsQ0FBQztRQUVILEVBQUUsQ0FBQyx5REFBeUQsRUFBRSxLQUFLO1lBQ2pFLE1BQU0sZ0JBQU0sQ0FBQyxPQUFPLENBQUMsaUJBQWlCLENBQUMsaUJBQWlCLENBQUMsRUFBRSxxQkFBcUIsQ0FBQyxDQUFDO1FBQ3BGLENBQUMsQ0FBQyxDQUFDO0lBQ0wsQ0FBQyxDQUFDLENBQUM7QUFDTCxDQUFDLENBQUMsQ0FBQztBQUVILFFBQVEsQ0FBQyxpQ0FBaUMsRUFBRTtJQUMxQyxJQUFJLGdCQUF3QixDQUFDO0lBQzdCLElBQUksWUFBb0IsQ0FBQztJQUN6QixJQUFJLGlCQUF5QixDQUFDO0lBQzlCLElBQUksYUFBcUIsQ0FBQztJQUMxQixJQUFJLGVBQStCLENBQUM7SUFDcEMsSUFBSSxjQUF1QixDQUFDO0lBRTVCLE1BQU0sU0FBUyxHQUFHLGdCQUFnQixDQUFDO0lBQ25DLE1BQU0sT0FBTyxHQUFHLENBQUMsQ0FBQztJQUNsQixNQUFNLElBQUksR0FBRyxJQUFBLHdCQUFrQixFQUFDLEdBQUcsRUFBRSxVQUFVLEVBQUUsT0FBTyxDQUFDLENBQUM7SUFDMUQsTUFBTSxPQUFPLEdBQUcsQ0FBQyxDQUFDLFlBQVksQ0FBQztRQUM3QixDQUFDLENBQUMsSUFBSSxDQUFDLEVBQUUsVUFBVSxFQUFFLENBQUMsQ0FBQyxNQUFNLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQyxNQUFNLEVBQUUsU0FBUyxFQUFFLENBQUMsQ0FBQyxNQUFNLEVBQUUsS0FBSyxFQUFFLENBQUMsQ0FBQyxNQUFNLEVBQUUsT0FBTyxFQUFFLENBQUMsQ0FBQyxPQUFPLEVBQUUsQ0FBQztRQUMxRyxDQUFDLENBQUMsT0FBTyxDQUFDLEVBQUUsTUFBTSxFQUFFLENBQUMsQ0FBQyxNQUFNLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQztLQUNoRCxDQUFDLENBQUM7SUFFSCxNQUFNLENBQUMsS0FBSztRQUNWLE1BQU0sT0FBTyxHQUFHLE1BQU0scUJBQU8sQ0FBQyx5QkFBeUIsRUFBRSxDQUFDO1FBQzFELE1BQU0sR0FBRyxHQUFHLE1BQU0seUJBQVcsQ0FBQyx1QkFBdUIsRUFBRSxDQUFDO1FBQ3hELGdCQUFnQixHQUFHLE9BQU8sQ0FBQyw2QkFBZ0IsQ0FBQyxJQUFJLENBQUMsQ0FBQyxXQUFXLEVBQUUsQ0FBQztRQUNoRSxpQkFBaUIsR0FBRyxPQUFPLENBQUMsNkJBQWdCLENBQUMsS0FBSyxDQUFDLENBQUMsV0FBVyxFQUFFLENBQUM7UUFDbEUsWUFBWSxHQUFHLEdBQUcsQ0FBQyw2QkFBZ0IsQ0FBQyxJQUFJLENBQUMsQ0FBQyxXQUFXLEVBQUUsQ0FBQztRQUN4RCxhQUFhLEdBQUcsR0FBRyxDQUFDLDZCQUFnQixDQUFDLEtBQUssQ0FBQyxDQUFDLFdBQVcsRUFBRSxDQUFDO1FBQzFELE1BQU0sUUFBUSxHQUFHLE1BQU0sSUFBQSxpQ0FBa0IsRUFBQyxTQUFTLENBQUMsQ0FBQztRQUNyRCxlQUFlLEdBQUcsTUFBTSxHQUFHLENBQUMsY0FBYyxDQUFDLEVBQUUsVUFBVSxFQUFFLFFBQVEsQ0FBQyxVQUFVLEVBQUUsQ0FBQyxDQUFDO1FBQ2hGLGNBQWMsR0FBRyxNQUFNLEdBQUcsQ0FBQyxPQUFPLENBQUMsRUFBRSxVQUFVLEVBQUUsUUFBUSxDQUFDLFNBQVMsRUFBRSxDQUFDLENBQUM7SUFDekUsQ0FBQyxDQUFDLENBQUM7SUFFSCxLQUFLLFVBQVUsY0FBYyxDQUMzQixLQUFzRSxFQUN0RSxpQkFBeUM7UUFFekMsTUFBTSxFQUFFLEtBQUssRUFBRSxRQUFRLEVBQUUsSUFBSSxFQUFFLGVBQWUsRUFBRSxjQUFjLEVBQUUsR0FBRyxxQkFBcUIsRUFBRSxDQUFDO1FBQzNGLE1BQU0sS0FBSyxHQUFHLElBQUksa0NBQWtCLENBQUMsS0FBSyxFQUFFLFFBQVEsQ0FBQyxDQUFDO1FBQ3RELEtBQUssQ0FBQyxJQUFJLENBQUMsS0FBSyxFQUFFLHNDQUFzQyxDQUFDLENBQUMsUUFBUSxDQUFDO1lBQ2pFLGNBQWMsRUFBRSxjQUFjO1lBQzlCLG1CQUFtQixFQUFFLGNBQWM7WUFDbkMsdUJBQXVCLEVBQUUsU0FBUztTQUNuQyxDQUFDLENBQUM7UUFDSCxNQUFNLFNBQVMsR0FBRyxJQUFJLHVCQUFTLENBQUMsTUFBTSxDQUFDLENBQUMsRUFBRSxDQUFDLEVBQUUsNkJBQWdCLENBQUMsS0FBSyxFQUFFLGlCQUFpQixFQUFFLGFBQWEsRUFBRSxJQUFJLENBQUMsQ0FBQztRQUM3RyxJQUFJLFNBQWlDLENBQUM7UUFDdEMsSUFBSSxnQkFBZ0IsR0FBRyxFQUFFLENBQUM7UUFDMUIsSUFBSSxNQUFNLEdBQUcsQ0FBQyxDQUFDO1FBQ2YsSUFBSSxDQUFDLFNBQVMsQ0FBQyxDQUFDLElBQVksRUFBRSxFQUFFLENBQUMsQ0FBQztZQUNoQyxJQUFJLEVBQUUsQ0FBQyxPQUFnQixFQUFFLEVBQUUsQ0FBQyxDQUFDO2dCQUMzQixNQUFNLEVBQUUsS0FBSyxJQUFJLEVBQUU7b0JBQ2pCLE1BQU0sSUFBSSxHQUFHLElBQUEsd0JBQWUsRUFBQyxPQUFPLEVBQUUsT0FBTyxFQUFFLHNCQUFzQixDQUFDLENBQUM7b0JBQ3ZFLGdCQUFNLENBQUMsV0FBVyxDQUFDLElBQUksRUFBRSxrQkFBa0IsQ0FBQyxDQUFDO29CQUM3QyxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxJQUFJLENBQUMsVUFBVSxFQUFFLGVBQWUsQ0FBQyxDQUFDO29CQUNyRCxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxJQUFJLENBQUMsSUFBSSxFQUFFLE1BQU0sQ0FBQyxDQUFDO29CQUN0QyxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxJQUFJLENBQUMsSUFBSSxFQUFFLDZCQUFjLENBQUMsS0FBSyxDQUFDLENBQUM7b0JBQ3BELGdCQUFNLENBQUMsV0FBVyxDQUFDLElBQUksQ0FBQyxTQUFTLEVBQUUsMkJBQVksQ0FBQyxLQUFLLENBQUMsQ0FBQztvQkFDdkQsSUFBSSxNQUFNLEVBQUUsS0FBSyxDQUFDLEVBQUUsQ0FBQzt3QkFDbkIsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsSUFBSSxDQUFDLEtBQUssRUFBRSxtQ0FBb0IsQ0FBQyxnQkFBZ0IsQ0FBQyxDQUFDLENBQUM7d0JBQ3ZFLGdCQUFNLENBQUMsV0FBVyxDQUFDLElBQUksQ0FBQyxNQUFNLEVBQUUsU0FBUyxDQUFDLENBQUM7d0JBQzNDLE1BQU0sT0FBTyxHQUFHLElBQUEsd0JBQWUsRUFBQyw0Q0FBNkIsRUFBRSxJQUFJLENBQUMsT0FBTyxFQUFFLHNCQUFzQixDQUFDLENBQUM7d0JBQ3JHLGdCQUFNLENBQUMsZUFBZSxDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLENBQUMsSUFBSSxFQUFFLEVBQUU7NEJBQ2xELGFBQWE7NEJBQ2IsTUFBTTs0QkFDTixrQkFBa0I7NEJBQ2xCLFVBQVU7eUJBQ1gsQ0FBQyxDQUFDO3dCQUNILGdCQUFNLENBQUMsV0FBVyxDQUFDLE9BQU8sQ0FBQyxXQUFXLEVBQUUsZUFBZSxDQUFDLENBQUM7d0JBQ3pELGdCQUFNLENBQUMsV0FBVyxDQUFDLE9BQU8sQ0FBQyxJQUFJLEVBQUUsSUFBSSxDQUFDLENBQUM7d0JBQ3ZDLGdCQUFnQixHQUFHLE9BQU8sQ0FBQyxnQkFBZ0IsQ0FBQzt3QkFDNUMsTUFBTSxVQUFVLEdBQUcsTUFBTSxHQUFHLENBQUMsT0FBTyxDQUFDLEVBQUUsVUFBVSxFQUFFLE9BQU8sQ0FBQyxnQkFBZ0IsRUFBRSxDQUFDLENBQUM7d0JBQy9FLE1BQU0sV0FBVyxHQUFHLE1BQU0sc0JBQVEsQ0FBQyxnQkFBZ0IsQ0FBQyxPQUFPLENBQUMsUUFBUSxFQUFFLFVBQVUsQ0FBQyxDQUFDO3dCQUNsRixNQUFNLFVBQVUsR0FBRyxNQUFNLFNBQVMsQ0FBQyxVQUFVLEVBQUUsQ0FBQzt3QkFDaEQsTUFBTSxDQUFDLFFBQVEsQ0FBQyxHQUFHLFNBQVMsQ0FBQyxzQkFBc0IsQ0FBQzs0QkFDbEQsRUFBRSxJQUFJLEVBQUUsNkJBQWdCLENBQUMsSUFBSSxFQUFFLE9BQU8sRUFBRSxJQUFJLFVBQVUsQ0FBQyxXQUFXLENBQUMsRUFBRTt5QkFDdEUsQ0FBQyxDQUFDO3dCQUNILGdCQUFNLENBQUMsRUFBRSxDQUFDLFFBQVEsQ0FBQyxDQUFDO3dCQUNwQixTQUFTLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQzt3QkFDN0IsTUFBTSxNQUFNLEdBQUcsTUFBTSxzQkFBUSxDQUFDLG9CQUFvQixDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLE9BQU8sQ0FBQyxFQUFFLGVBQWUsQ0FBQyxDQUFDO3dCQUNyRyxPQUFPOzRCQUNMLFNBQVM7NEJBQ1QsU0FBUyxFQUNQLEtBQUssS0FBSyxjQUFjLENBQUMsQ0FBQyxDQUFDLEVBQUUsR0FBRyxNQUFNLEVBQUUsT0FBTyxFQUFFLE1BQU0sQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDLE1BQU07eUJBQ3pHLENBQUM7b0JBQ0osQ0FBQztvQkFDRCxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQUM7b0JBQzlCLGdCQUFNLENBQUMsV0FBVyxDQUFDLElBQUksQ0FBQyxLQUFLLEVBQUUsbUNBQW9CLENBQUMsZ0JBQWdCLENBQUMsQ0FBQyxDQUFDO29CQUN2RSxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxJQUFJLENBQUMsTUFBTSxFQUFFLFNBQVMsQ0FBQyxDQUFDO29CQUMzQyxNQUFNLE9BQU8sR0FBRyxJQUFBLHdCQUFlLEVBQUMsNENBQTZCLEVBQUUsSUFBSSxDQUFDLE9BQU8sRUFBRSxzQkFBc0IsQ0FBQyxDQUFDO29CQUNyRyxnQkFBTSxDQUFDLGVBQWUsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxDQUFDLElBQUksRUFBRSxFQUFFLENBQUMsV0FBVyxFQUFFLFVBQVUsQ0FBQyxDQUFDLENBQUM7b0JBQy9FLGdCQUFNLENBQUMsV0FBVyxDQUFDLE9BQU8sQ0FBQyxTQUFTLEVBQUUsU0FBUyxDQUFDLENBQUM7b0JBQ2pELE1BQU0sV0FBVyxHQUFHLE1BQU0sc0JBQVEsQ0FBQyxnQkFBZ0IsQ0FDakQsT0FBTyxDQUFDLFFBQVEsRUFDaEIsTUFBTSxHQUFHLENBQUMsT0FBTyxDQUFDLEVBQUUsVUFBVSxFQUFFLGdCQUFnQixFQUFFLENBQUMsQ0FDcEQsQ0FBQztvQkFDRixnQkFBTSxDQUFDLGVBQWUsQ0FDcEIsU0FBUyxDQUFDLHNCQUFzQixDQUFDLENBQUMsRUFBRSxJQUFJLEVBQUUsNkJBQWdCLENBQUMsSUFBSSxFQUFFLE9BQU8sRUFBRSxJQUFJLFVBQVUsQ0FBQyxXQUFXLENBQUMsRUFBRSxDQUFDLENBQUMsRUFDekcsRUFBRSxDQUNILENBQUM7b0JBQ0YsZ0JBQU0sQ0FBQyxFQUFFLENBQUMsU0FBUyxDQUFDLENBQUM7b0JBQ3JCLE1BQU0sTUFBTSxHQUFHLE1BQU0sc0JBQVEsQ0FBQyxvQkFBb0IsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxFQUFFLGVBQWUsQ0FBQyxDQUFDO29CQUM1RixNQUFNLG9CQUFvQixHQUFHLFNBQVMsQ0FBQyxpQkFBaUIsRUFBRSxDQUFDO29CQUMzRCxPQUFPO3dCQUNMLFNBQVMsRUFBRSxLQUFLLEtBQUssU0FBUyxDQUFDLENBQUMsQ0FBQyxtQkFBbUIsQ0FBQyxDQUFDLENBQUMsU0FBUzt3QkFDaEUsb0JBQW9CLEVBQ2xCLEtBQUssS0FBSyxnQkFBZ0I7NEJBQ3hCLENBQUMsQ0FBQyxHQUFHLG9CQUFvQixDQUFDLEtBQUssQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUMsR0FBRyxvQkFBb0IsQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsR0FBRyxFQUFFOzRCQUN6RixDQUFDLENBQUMsb0JBQW9CO3dCQUMxQixTQUFTLEVBQ1AsS0FBSyxLQUFLLGNBQWMsQ0FBQyxDQUFDLENBQUMsRUFBRSxHQUFHLE1BQU0sRUFBRSxPQUFPLEVBQUUsTUFBTSxDQUFDLElBQUksQ0FBQyxVQUFVLENBQUMsQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUMsTUFBTTtxQkFDekcsQ0FBQztnQkFDSixDQUFDO2FBQ0YsQ0FBQztTQUNILENBQUMsQ0FBQyxDQUFDO1FBRUosSUFBSSxDQUFDO1lBQ0gsTUFBTSxNQUFNLEdBQUcsTUFBTSxLQUFLLENBQUMsd0JBQXdCLENBQUM7Z0JBQ2xELFVBQVUsRUFBRSxZQUFZO2dCQUN4QixVQUFVLEVBQUUsZUFBZTtnQkFDM0IsTUFBTSxFQUFFLFNBQVM7Z0JBQ2pCLFdBQVcsRUFBRSxlQUFlO2dCQUM1QixJQUFJO2dCQUNKLGFBQWEsRUFBRSxjQUFjO2dCQUM3QixlQUFlLEVBQUUsZ0JBQWdCO2dCQUNqQyxnQkFBZ0IsRUFBRSxnQkFBZ0I7Z0JBQ2xDLG1CQUFtQixFQUFFLFlBQVk7YUFDbEMsQ0FBQyxDQUFDO1lBQ0gsT0FBTyxFQUFFLE1BQU0sRUFBRSxlQUFlLEVBQUUsY0FBYyxFQUFFLFNBQVMsRUFBRSxNQUFNLEVBQUUsQ0FBQztRQUN4RSxDQUFDO2dCQUFTLENBQUM7WUFDVCxpQkFBaUIsRUFBRSxJQUFJLENBQUMsR0FBRyxjQUFjLENBQUMsQ0FBQztRQUM3QyxDQUFDO0lBQ0gsQ0FBQztJQUVELFNBQVMsQ0FBQztRQUNSLEtBQUssQ0FBQyxPQUFPLEVBQUUsQ0FBQztJQUNsQixDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQyw4RkFBOEYsRUFBRSxLQUFLO1FBQ3RHLE1BQU0sRUFBRSxNQUFNLEVBQUUsZUFBZSxFQUFFLGNBQWMsRUFBRSxTQUFTLEVBQUUsTUFBTSxFQUFFLEdBQUcsTUFBTSxjQUFjLEVBQUUsQ0FBQztRQUM5RixnQkFBTSxDQUFDLFdBQVcsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQUM7UUFDOUIsZ0JBQU0sQ0FBQyxlQUFlLENBQUMsY0FBYyxDQUFDLEdBQUcsQ0FBQyxDQUFDLEVBQUUsTUFBTSxFQUFFLEVBQUUsRUFBRSxDQUFDLE1BQU0sQ0FBQyxDQUFDLElBQUksRUFBRSxFQUFFLENBQUMsUUFBUSxFQUFFLE9BQU8sRUFBRSxNQUFNLENBQUMsQ0FBQyxDQUFDO1FBQ3ZHLGdCQUFNLENBQUMsZUFBZSxDQUNwQixDQUFDLE1BQU0sQ0FBQyxZQUFZLENBQUMsRUFBRSxFQUFFLE1BQU0sQ0FBQyxjQUFjLENBQUMsRUFBRSxFQUFFLE1BQU0sQ0FBQyxhQUFhLENBQUMsRUFBRSxDQUFDLEVBQzNFLENBQUMsWUFBWSxFQUFFLGNBQWMsRUFBRSxhQUFhLENBQUMsQ0FDOUMsQ0FBQztRQUNGLEtBQUssTUFBTSxRQUFRLElBQUksY0FBYyxFQUFFLENBQUM7WUFDdEMsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsUUFBUSxDQUFDLE1BQU0sRUFBRSxTQUFTLENBQUMsQ0FBQztZQUMvQyxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxRQUFRLENBQUMseUJBQXlCLEVBQUUsSUFBSSxDQUFDLENBQUM7WUFDN0QsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsUUFBUSxDQUFDLGNBQWMsRUFBRSxTQUFTLENBQUMsaUJBQWlCLEVBQUUsQ0FBQyxDQUFDO1lBQzNFLGdCQUFNLENBQUMsV0FBVyxDQUFDLFFBQVEsQ0FBQyxPQUFPLEVBQUUsS0FBSyxDQUFDLENBQUM7WUFDNUMsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsUUFBUSxDQUFDLE9BQU8sRUFBRSxJQUFJLENBQUMsQ0FBQztRQUM3QyxDQUFDO1FBQ0QsTUFBTSxTQUFTLEdBQUcsY0FBYyxDQUFDLElBQUksQ0FBQyxDQUFDLEVBQUUsTUFBTSxFQUFFLEVBQUUsRUFBRSxDQUFDLE1BQU0sS0FBSyxNQUFNLENBQUMsQ0FBQztRQUN6RSxNQUFNLFdBQVcsR0FBRyxjQUFjLENBQUMsSUFBSSxDQUFDLENBQUMsRUFBRSxNQUFNLEVBQUUsRUFBRSxFQUFFLENBQUMsTUFBTSxLQUFLLFFBQVEsQ0FBQyxDQUFDO1FBQzdFLE1BQU0sVUFBVSxHQUFHLGNBQWMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxFQUFFLE1BQU0sRUFBRSxFQUFFLEVBQUUsQ0FBQyxNQUFNLEtBQUssT0FBTyxDQUFDLENBQUM7UUFDM0UsZ0JBQU0sQ0FBQyxFQUFFLENBQUMsU0FBUyxDQUFDLENBQUM7UUFDckIsZ0JBQU0sQ0FBQyxFQUFFLENBQUMsV0FBVyxDQUFDLENBQUM7UUFDdkIsZ0JBQU0sQ0FBQyxFQUFFLENBQUMsVUFBVSxDQUFDLENBQUM7UUFDdEIsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsU0FBUyxDQUFDLE1BQU0sRUFBRSxjQUFjLENBQUMsQ0FBQztRQUNyRCxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxXQUFXLENBQUMsTUFBTSxFQUFFLGdCQUFnQixDQUFDLENBQUM7UUFDekQsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsVUFBVSxDQUFDLE1BQU0sRUFBRSxlQUFlLENBQUMsQ0FBQztRQUN2RCxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxlQUFlLENBQUMsTUFBTSxFQUFFLENBQUMsQ0FBQyxDQUFDO1FBQzlDLGdCQUFNLENBQUMsV0FBVyxDQUFDLFNBQVMsQ0FBQyxZQUFZLEVBQUUsYUFBYSxlQUFlLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDO1FBQzlFLE1BQU0sWUFBWSxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLFlBQVksQ0FBQyxZQUFZLEVBQUUsS0FBSyxDQUFDLFlBQVksQ0FBQyxNQUFNLENBQUMsSUFBSSxFQUFFLEVBQUUsUUFBUSxDQUFDLENBQUM7UUFDL0csZ0JBQU0sQ0FBQyxlQUFlLENBQUMsWUFBWSxFQUFFLE1BQU0sQ0FBQyxJQUFJLENBQUMsZUFBZSxDQUFDLENBQUMsQ0FBQyxFQUFFLFFBQVEsQ0FBQyxDQUFDLENBQUM7UUFDaEYsZ0JBQU0sQ0FBQyxrQkFBa0IsQ0FBQyxZQUFZLEVBQUUsZ0JBQWdCLENBQUMsQ0FBQztRQUMxRCxnQkFBTSxDQUFDLGtCQUFrQixDQUFDLFlBQVksRUFBRSxTQUFTLENBQUMsV0FBVyxFQUFFLENBQUMsQ0FBQztRQUNqRSxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxTQUFTLENBQUMsbUJBQW1CLEVBQUUsU0FBUyxDQUFDLENBQUM7UUFDN0QsTUFBTSxPQUFPLEdBQUcsTUFBTSxDQUFDLFlBQVksQ0FBQyxtQkFBbUIsQ0FBQztRQUN4RCxnQkFBTSxDQUFDLEVBQUUsQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUNuQixNQUFNLFlBQVksR0FBRyxzQkFBUSxDQUFDLHlCQUF5QixDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQyxZQUFZLENBQUMsTUFBTSxDQUFDLEVBQUUsUUFBUSxDQUFDLENBQUMsQ0FBQztRQUNuSCxnQkFBTSxDQUFDLGVBQWUsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLFlBQVksQ0FBQyxRQUFRLENBQUMsRUFBRSxZQUFZLENBQUMsQ0FBQztRQUN6RSxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLFlBQVksQ0FBQyxHQUFHLENBQUMsQ0FBQyxRQUFRLENBQUMsS0FBSyxDQUFDLEVBQUUsU0FBUyxDQUFDLGlCQUFpQixFQUFFLENBQUMsS0FBSyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDO1FBQzlHLGdCQUFNLENBQUMsTUFBTSxDQUFDLEdBQUcsRUFBRSxDQUFDLGlCQUFpQixDQUFDLFlBQVksQ0FBQyxDQUFDLENBQUM7UUFDckQsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsV0FBVyxDQUFDLFlBQVksRUFBRSxTQUFTLENBQUMsQ0FBQztRQUN4RCxnQkFBTSxDQUFDLFdBQVcsQ0FBQyxVQUFVLENBQUMsWUFBWSxFQUFFLFNBQVMsQ0FBQyxDQUFDO0lBQ3pELENBQUMsQ0FBQyxDQUFDO0lBRUgsS0FBSyxNQUFNLE9BQU8sSUFBSSxDQUFDLE1BQU0sRUFBRSxjQUFjLEVBQUUsa0JBQWtCLENBQUMsRUFBRSxDQUFDO1FBQ25FLEVBQUUsQ0FBQyw4QkFBOEIsSUFBSSxDQUFDLFNBQVMsQ0FBQyxPQUFPLENBQUMsdUJBQXVCLEVBQUUsS0FBSztZQUNwRixNQUFNLEVBQUUsS0FBSyxFQUFFLFFBQVEsRUFBRSxJQUFJLEVBQUUsY0FBYyxFQUFFLEdBQUcscUJBQXFCLEVBQUUsQ0FBQztZQUMxRSxNQUFNLEtBQUssR0FBRyxJQUFJLGtDQUFrQixDQUFDLEtBQUssRUFBRSxRQUFRLENBQUMsQ0FBQztZQUV0RCxNQUFNLGdCQUFNLENBQUMsT0FBTyxDQUNsQixLQUFLLENBQUMsd0JBQXdCLENBQUM7Z0JBQzdCLFVBQVUsRUFBRSxZQUFZO2dCQUN4QixVQUFVLEVBQUUsZUFBZTtnQkFDM0IsTUFBTSxFQUFFLFNBQVM7Z0JBQ2pCLFdBQVcsRUFBRSxlQUFlO2dCQUM1QixJQUFJLEVBQUUsT0FBNEM7Z0JBQ2xELGFBQWEsRUFBRSxjQUFjO2dCQUM3QixlQUFlLEVBQUUsZ0JBQWdCO2dCQUNqQyxnQkFBZ0IsRUFBRSxnQkFBZ0I7Z0JBQ2xDLG1CQUFtQixFQUFFLFlBQVk7YUFDbEMsQ0FBQyxFQUNGLHlCQUF5QixDQUMxQixDQUFDO1lBQ0YsZ0JBQU0sQ0FBQyxXQUFXLENBQUMsSUFBSSxDQUFDLE1BQU0sRUFBRSxLQUFLLENBQUMsQ0FBQztZQUN2QyxnQkFBTSxDQUFDLGVBQWUsQ0FBQyxjQUFjLEVBQUUsRUFBRSxDQUFDLENBQUM7UUFDN0MsQ0FBQyxDQUFDLENBQUM7SUFDTCxDQUFDO0lBRUQsTUFBTSxNQUFNLEdBQTBFO1FBQ3BGLGNBQWM7UUFDZCxjQUFjO1FBQ2QsU0FBUztRQUNULGdCQUFnQjtLQUNqQixDQUFDO0lBQ0YsS0FBSyxNQUFNLEtBQUssSUFBSSxNQUFNLEVBQUUsQ0FBQztRQUMzQixFQUFFLENBQUMsV0FBVyxLQUFLLCtCQUErQixFQUFFLEtBQUs7WUFDdkQsTUFBTSxpQkFBaUIsR0FBMEIsRUFBRSxDQUFDO1lBQ3BELE1BQU0sZ0JBQU0sQ0FBQyxPQUFPLENBQ2xCLEdBQUcsRUFBRSxDQUFDLGNBQWMsQ0FBQyxLQUFLLEVBQUUsaUJBQWlCLENBQUMsRUFDOUMsS0FBSyxLQUFLLFNBQVM7Z0JBQ2pCLENBQUMsQ0FBQyxhQUFhO2dCQUNmLENBQUMsQ0FBQyxLQUFLLEtBQUssZ0JBQWdCO29CQUM1QixDQUFDLENBQUMsa0JBQWtCO29CQUNwQixDQUFDLENBQUMsZ0NBQWdDLENBQ3JDLENBQUM7WUFDRixnQkFBTSxDQUFDLGVBQWUsQ0FBQyxpQkFBaUIsRUFBRSxFQUFFLENBQUMsQ0FBQztRQUNoRCxDQUFDLENBQUMsQ0FBQztJQUNMLENBQUM7QUFDSCxDQUFDLENBQUMsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCBhc3NlcnQgZnJvbSAnYXNzZXJ0JztcbmltcG9ydCAqIGFzIHBncCBmcm9tICdvcGVucGdwJztcbmltcG9ydCAqIGFzIHNpbm9uIGZyb20gJ3Npbm9uJztcbmltcG9ydCB7IEVkZHNhTVBTRGtnLCBNUFNDb21tcywgTVBTVXRpbCwgTVBTVHlwZXMsIE1wc0Rlcml2ZSwgTXBzVnJmLCBNcHNWcmZVdGlscyB9IGZyb20gJ0BiaXRnby1iZXRhL3Nkay1saWItbXBjJztcbmltcG9ydCB7XG4gIEVkZHNhTVBDdjJEZXJpdmVSb3VuZDFSZXF1ZXN0LFxuICBFZGRzYU1QQ3YyRGVyaXZlUm91bmQyUmVxdWVzdCxcbiAgRWRkc2FNUEN2MlNpZ25lZE1lc3NhZ2UsXG4gIEtleUN1cnZlRW51bSxcbiAgS2V5R2VuVHlwZUVudW0sXG4gIE1QQ3YyS2V5R2VuU3RhdGVFbnVtLFxufSBmcm9tICdAYml0Z28vcHVibGljLXR5cGVzJztcbmltcG9ydCB7IGRlY29kZSB9IGZyb20gJ2Nib3IteCc7XG5pbXBvcnQgKiBhcyB0IGZyb20gJ2lvLXRzJztcblxuaW1wb3J0IHtcbiAgYnVpbGRTYWZlQmlwNDRQYXRoLFxuICBEZXJpdmVkRnJvbVBhcmVudFdpdGhIYXJkZW5lZFBhdGgsXG4gIEVkZHNhTVBDdjJVdGlscyxcbiAgQml0R29CYXNlLFxuICBJQmFzZUNvaW4sXG4gIEtleWNoYWluLFxufSBmcm9tICcuLi8uLi8uLi8uLi8uLi8uLi9zcmMnO1xuaW1wb3J0IHsgZGVjb2RlV2l0aENvZGVjIH0gZnJvbSAnLi4vLi4vLi4vLi4vLi4vLi4vc3JjL2JpdGdvL3V0aWxzL2NvZGVjcyc7XG5pbXBvcnQgeyBidWlsZFNhZmVNcGNLZXlFbnZlbG9wZXMgfSBmcm9tICcuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYml0Z28vdXRpbHMvdHNzL2tleVNoYXJlRW52ZWxvcGUnO1xuaW1wb3J0IHsgRWRkc2FWcmZNUEN2MlV0aWxzIH0gZnJvbSAnLi4vLi4vLi4vLi4vLi4vLi4vc3JjL2JpdGdvL3V0aWxzL3Rzcy9lZGRzYS9lZGRzYVZyZk1QQ3YyJztcbmltcG9ydCB7IE1QQ3YyUGFydGllc0VudW0gfSBmcm9tICcuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYml0Z28vdXRpbHMvdHNzL2VjZHNhL3R5cGVzTVBDdjInO1xuaW1wb3J0IHsgZ2VuZXJhdGVHUEdLZXlQYWlyIH0gZnJvbSAnLi4vLi4vLi4vLi4vLi4vLi4vc3JjL2JpdGdvL3V0aWxzL29wZW5ncGdVdGlscyc7XG5cbmNvbnN0IFVpbnQ4QXJyYXlDb2RlYyA9IG5ldyB0LlR5cGU8VWludDhBcnJheSwgVWludDhBcnJheSwgdW5rbm93bj4oXG4gICdVaW50OEFycmF5JyxcbiAgKHZhbHVlKTogdmFsdWUgaXMgVWludDhBcnJheSA9PiB2YWx1ZSBpbnN0YW5jZW9mIFVpbnQ4QXJyYXksXG4gICh2YWx1ZSwgY29udGV4dCkgPT4gKHZhbHVlIGluc3RhbmNlb2YgVWludDhBcnJheSA/IHQuc3VjY2Vzcyh2YWx1ZSkgOiB0LmZhaWx1cmUodmFsdWUsIGNvbnRleHQpKSxcbiAgdC5pZGVudGl0eVxuKTtcblxuY29uc3QgVnJmRW52ZWxvcGUgPSB0LnR5cGUoe1xuICB2ZXJzaW9uOiB0LmxpdGVyYWwoMSksXG4gIHBydktleVNoYXJlOiBVaW50OEFycmF5Q29kZWMsXG4gIHZyZjogVWludDhBcnJheUNvZGVjLFxufSk7XG5cbnR5cGUgQWRkZWRLZXljaGFpblBhcmFtcyA9IHtcbiAgc291cmNlPzogc3RyaW5nO1xuICBlbmNyeXB0ZWRQcnY/OiBzdHJpbmc7XG4gIHJlZHVjZWRFbmNyeXB0ZWRQcnY/OiBzdHJpbmc7XG4gIHNhZmVJZD86IHN0cmluZztcbiAgcGFyZW50Pzogc3RyaW5nO1xuICBkZXJpdmVkRnJvbVBhcmVudFdpdGhQYXRoPzogc3RyaW5nO1xuICBjb21tb25LZXljaGFpbj86IHN0cmluZztcbiAgaXNNUEN2Mj86IGJvb2xlYW47XG4gIGtleVR5cGU/OiBzdHJpbmc7XG59O1xuXG5mdW5jdGlvbiBkZWNvZGVWcmZFbnZlbG9wZShlbmNvZGVkOiBCdWZmZXIpOiB0LlR5cGVPZjx0eXBlb2YgVnJmRW52ZWxvcGU+IHtcbiAgcmV0dXJuIGRlY29kZVdpdGhDb2RlYyhWcmZFbnZlbG9wZSwgZGVjb2RlKGVuY29kZWQpLCAnVlJGIGtleSBlbnZlbG9wZScpO1xufVxuXG5mdW5jdGlvbiBjcmVhdGVLZXljaGFpbkZpeHR1cmUoKSB7XG4gIGNvbnN0IGVuY3J5cHRlZElucHV0czogc3RyaW5nW10gPSBbXTtcbiAgY29uc3QgYWRkZWRLZXljaGFpbnM6IEFkZGVkS2V5Y2hhaW5QYXJhbXNbXSA9IFtdO1xuICBjb25zdCBwb3N0ID0gc2lub24uc3R1YigpO1xuICBjb25zdCBiaXRnbyA9IHtcbiAgICBnZXRFbnY6ICgpID0+ICdkZXYnLFxuICAgIHVybDogKHBhdGg6IHN0cmluZykgPT4gcGF0aCxcbiAgICBwb3N0LFxuICAgIGVuY3J5cHQ6IGFzeW5jIChwYXJhbXM6IHsgaW5wdXQ6IHN0cmluZyB9KTogUHJvbWlzZTxzdHJpbmc+ID0+IHtcbiAgICAgIGVuY3J5cHRlZElucHV0cy5wdXNoKHBhcmFtcy5pbnB1dCk7XG4gICAgICByZXR1cm4gYGVuY3J5cHRlZDoke3BhcmFtcy5pbnB1dH1gO1xuICAgIH0sXG4gIH0gYXMgdW5rbm93biBhcyBCaXRHb0Jhc2U7XG4gIGNvbnN0IGtleWNoYWlucyA9IHtcbiAgICBhZGQ6IGFzeW5jIChwYXJhbXM6IEFkZGVkS2V5Y2hhaW5QYXJhbXMpOiBQcm9taXNlPEtleWNoYWluPiA9PiB7XG4gICAgICBhZGRlZEtleWNoYWlucy5wdXNoKHBhcmFtcyk7XG4gICAgICByZXR1cm4geyBpZDogYCR7cGFyYW1zLnNvdXJjZX0tY2hpbGRgLCB0eXBlOiAndHNzJywgZW5jcnlwdGVkUHJ2OiBwYXJhbXMuZW5jcnlwdGVkUHJ2IH07XG4gICAgfSxcbiAgfTtcbiAgY29uc3QgYmFzZUNvaW4gPSB7XG4gICAga2V5Y2hhaW5zOiAoKSA9PiBrZXljaGFpbnMsXG4gICAgZ2V0Q2hhaW46ICgpID0+ICd0c29sJyxcbiAgfSBhcyB1bmtub3duIGFzIElCYXNlQ29pbjtcbiAgcmV0dXJuIHsgYml0Z28sIGJhc2VDb2luLCBwb3N0LCBlbmNyeXB0ZWRJbnB1dHMsIGFkZGVkS2V5Y2hhaW5zIH07XG59XG5cbmRlc2NyaWJlKCdFZERTQSBNUEN2MiBWUkYgcm9vdCBtYXRlcmlhbCcsIGZ1bmN0aW9uICgpIHtcbiAgaXQoJ2VuY29kZXMgc2lnbmluZyBhbmQgVlJGIHNoYXJlcyBpbiBib3RoIGZ1bGwgYW5kIHJlZHVjZWQgZW52ZWxvcGVzJywgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IHByaXZhdGVNYXRlcmlhbCA9IEJ1ZmZlci5mcm9tKCdzaWduaW5nLXNoYXJlJyk7XG4gICAgY29uc3QgcmVkdWNlZFByaXZhdGVNYXRlcmlhbCA9IEJ1ZmZlci5mcm9tKCdyZWR1Y2VkLXNpZ25pbmctc2hhcmUnKTtcbiAgICBjb25zdCB2cmZLZXlTaGFyZSA9IEJ1ZmZlci5mcm9tKCd2cmYtc2hhcmUnKTtcblxuICAgIGNvbnN0IHsgZW52ZWxvcGUsIHJlZHVjZWRFbnZlbG9wZSB9ID0gYnVpbGRTYWZlTXBjS2V5RW52ZWxvcGVzKFxuICAgICAgcHJpdmF0ZU1hdGVyaWFsLFxuICAgICAgcmVkdWNlZFByaXZhdGVNYXRlcmlhbCxcbiAgICAgIHZyZktleVNoYXJlXG4gICAgKTtcbiAgICBjb25zdCBkZWNvZGVkRW52ZWxvcGUgPSBkZWNvZGVWcmZFbnZlbG9wZShlbnZlbG9wZSk7XG4gICAgY29uc3QgZGVjb2RlZFJlZHVjZWRFbnZlbG9wZSA9IGRlY29kZVZyZkVudmVsb3BlKHJlZHVjZWRFbnZlbG9wZSk7XG5cbiAgICBhc3NlcnQuZGVlcFN0cmljdEVxdWFsKEJ1ZmZlci5mcm9tKGRlY29kZWRFbnZlbG9wZS5wcnZLZXlTaGFyZSksIHByaXZhdGVNYXRlcmlhbCk7XG4gICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChCdWZmZXIuZnJvbShkZWNvZGVkRW52ZWxvcGUudnJmKSwgdnJmS2V5U2hhcmUpO1xuICAgIGFzc2VydC5kZWVwU3RyaWN0RXF1YWwoQnVmZmVyLmZyb20oZGVjb2RlZFJlZHVjZWRFbnZlbG9wZS5wcnZLZXlTaGFyZSksIHJlZHVjZWRQcml2YXRlTWF0ZXJpYWwpO1xuICAgIGFzc2VydC5kZWVwU3RyaWN0RXF1YWwoQnVmZmVyLmZyb20oZGVjb2RlZFJlZHVjZWRFbnZlbG9wZS52cmYpLCB2cmZLZXlTaGFyZSk7XG4gIH0pO1xuXG4gIGl0KCdrZWVwcyBvcmRpbmFyeSBNUEN2MiBwYXJ0aWNpcGFudCBtYXRlcmlhbCBhcyBiYXJlIGJhc2U2NCcsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICBjb25zdCB7IGJpdGdvLCBiYXNlQ29pbiwgZW5jcnlwdGVkSW5wdXRzLCBhZGRlZEtleWNoYWlucyB9ID0gY3JlYXRlS2V5Y2hhaW5GaXh0dXJlKCk7XG4gICAgY29uc3QgdXRpbHMgPSBuZXcgRWRkc2FNUEN2MlV0aWxzKGJpdGdvLCBiYXNlQ29pbik7XG4gICAgY29uc3QgcHJpdmF0ZU1hdGVyaWFsID0gQnVmZmVyLmZyb20oJ3NpZ25pbmctc2hhcmUnKTtcbiAgICBjb25zdCByZWR1Y2VkUHJpdmF0ZU1hdGVyaWFsID0gQnVmZmVyLmZyb20oJ3JlZHVjZWQtc2lnbmluZy1zaGFyZScpO1xuXG4gICAgYXdhaXQgdXRpbHMuY3JlYXRlUGFydGljaXBhbnRLZXljaGFpbihcbiAgICAgIE1QQ3YyUGFydGllc0VudW0uVVNFUixcbiAgICAgICdjb21tb24ta2V5Y2hhaW4nLFxuICAgICAgcHJpdmF0ZU1hdGVyaWFsLFxuICAgICAgcmVkdWNlZFByaXZhdGVNYXRlcmlhbCxcbiAgICAgICdwYXNzcGhyYXNlJ1xuICAgICk7XG5cbiAgICBhc3NlcnQuZGVlcFN0cmljdEVxdWFsKGVuY3J5cHRlZElucHV0cywgW1xuICAgICAgcHJpdmF0ZU1hdGVyaWFsLnRvU3RyaW5nKCdiYXNlNjQnKSxcbiAgICAgIHJlZHVjZWRQcml2YXRlTWF0ZXJpYWwudG9TdHJpbmcoJ2Jhc2U2NCcpLFxuICAgIF0pO1xuICAgIGFzc2VydC5zdHJpY3RFcXVhbChhZGRlZEtleWNoYWluc1swXS5lbmNyeXB0ZWRQcnYsIGBlbmNyeXB0ZWQ6JHtwcml2YXRlTWF0ZXJpYWwudG9TdHJpbmcoJ2Jhc2U2NCcpfWApO1xuICAgIGFzc2VydC5zdHJpY3RFcXVhbChhZGRlZEtleWNoYWluc1swXS5zYWZlSWQsIHVuZGVmaW5lZCk7XG4gIH0pO1xuXG4gIGl0KCdyZWplY3RzIGEgcHVibGljLW9ubHkgYmFja3VwIG91dHNpZGUgYSBzYWZlIGNoaWxkIGRlcml2YXRpb24nLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgY29uc3QgeyBiaXRnbywgYmFzZUNvaW4sIGVuY3J5cHRlZElucHV0cywgYWRkZWRLZXljaGFpbnMgfSA9IGNyZWF0ZUtleWNoYWluRml4dHVyZSgpO1xuICAgIGNvbnN0IHV0aWxzID0gbmV3IEVkZHNhTVBDdjJVdGlscyhiaXRnbywgYmFzZUNvaW4pO1xuXG4gICAgYXdhaXQgYXNzZXJ0LnJlamVjdHMoXG4gICAgICB1dGlscy5jcmVhdGVQYXJ0aWNpcGFudEtleWNoYWluKE1QQ3YyUGFydGllc0VudW0uQkFDS1VQLCAnY29tbW9uLWtleWNoYWluJywgdW5kZWZpbmVkLCB1bmRlZmluZWQsICdwYXNzcGhyYXNlJyksXG4gICAgICAvUHJpdmF0ZSBtYXRlcmlhbCBpcyByZXF1aXJlZCBmb3IgYmFja3VwIGtleWNoYWluL1xuICAgICk7XG4gICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChlbmNyeXB0ZWRJbnB1dHMsIFtdKTtcbiAgICBhc3NlcnQuZGVlcFN0cmljdEVxdWFsKGFkZGVkS2V5Y2hhaW5zLCBbXSk7XG4gIH0pO1xuXG4gIGl0KCdlbmNyeXB0cyB0aGUgVlJGIGVudmVsb3BlIGFuZCB0YWdzIHRoZSBrZXljaGFpbiB3aXRoIHNhZmVJZCcsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICBjb25zdCBlbmNyeXB0ZWRJbnB1dHM6IHN0cmluZ1tdID0gW107XG4gICAgY29uc3QgYWRkZWRLZXljaGFpbnM6IEFkZGVkS2V5Y2hhaW5QYXJhbXNbXSA9IFtdO1xuICAgIGNvbnN0IGJpdGdvID0ge1xuICAgICAgZW5jcnlwdDogYXN5bmMgKHBhcmFtczogeyBpbnB1dDogc3RyaW5nIH0pOiBQcm9taXNlPHN0cmluZz4gPT4ge1xuICAgICAgICBlbmNyeXB0ZWRJbnB1dHMucHVzaChwYXJhbXMuaW5wdXQpO1xuICAgICAgICByZXR1cm4gYGVuY3J5cHRlZDoke3BhcmFtcy5pbnB1dH1gO1xuICAgICAgfSxcbiAgICB9IGFzIHVua25vd24gYXMgQml0R29CYXNlO1xuICAgIGNvbnN0IGtleWNoYWlucyA9IHtcbiAgICAgIGFkZDogYXN5bmMgKHBhcmFtczogQWRkZWRLZXljaGFpblBhcmFtcyk6IFByb21pc2U8S2V5Y2hhaW4+ID0+IHtcbiAgICAgICAgYWRkZWRLZXljaGFpbnMucHVzaChwYXJhbXMpO1xuICAgICAgICByZXR1cm4geyBpZDogJ3VzZXIta2V5JyB9IGFzIHVua25vd24gYXMgS2V5Y2hhaW47XG4gICAgICB9LFxuICAgIH07XG4gICAgY29uc3QgYmFzZUNvaW4gPSB7XG4gICAgICBrZXljaGFpbnM6ICgpID0+IGtleWNoYWlucyxcbiAgICB9IGFzIHVua25vd24gYXMgSUJhc2VDb2luO1xuICAgIGNvbnN0IHV0aWxzID0gbmV3IEVkZHNhTVBDdjJVdGlscyhiaXRnbywgYmFzZUNvaW4pO1xuICAgIGNvbnN0IHsgZW52ZWxvcGUsIHJlZHVjZWRFbnZlbG9wZSB9ID0gYnVpbGRTYWZlTXBjS2V5RW52ZWxvcGVzKFxuICAgICAgQnVmZmVyLmZyb20oJ3NpZ25pbmctc2hhcmUnKSxcbiAgICAgIEJ1ZmZlci5mcm9tKCdyZWR1Y2VkLXNpZ25pbmctc2hhcmUnKSxcbiAgICAgIEJ1ZmZlci5mcm9tKCd2cmYtc2hhcmUnKVxuICAgICk7XG5cbiAgICBhd2FpdCB1dGlscy5jcmVhdGVQYXJ0aWNpcGFudEtleWNoYWluKFxuICAgICAgTVBDdjJQYXJ0aWVzRW51bS5VU0VSLFxuICAgICAgJ2NvbW1vbi1rZXljaGFpbicsXG4gICAgICBlbnZlbG9wZSxcbiAgICAgIHJlZHVjZWRFbnZlbG9wZSxcbiAgICAgICdwYXNzcGhyYXNlJyxcbiAgICAgIHVuZGVmaW5lZCxcbiAgICAgIHVuZGVmaW5lZCxcbiAgICAgIHVuZGVmaW5lZCxcbiAgICAgIHVuZGVmaW5lZCxcbiAgICAgICdzYWZlLWlkJ1xuICAgICk7XG5cbiAgICBhc3NlcnQuZGVlcFN0cmljdEVxdWFsKGVuY3J5cHRlZElucHV0c1swXSwgZW52ZWxvcGUudG9TdHJpbmcoJ2Jhc2U2NCcpKTtcbiAgICBhc3NlcnQuc3RyaWN0RXF1YWwoYWRkZWRLZXljaGFpbnNbMF0uc2FmZUlkLCAnc2FmZS1pZCcpO1xuICAgIGNvbnN0IGRlY29kZWQgPSBkZWNvZGVWcmZFbnZlbG9wZShCdWZmZXIuZnJvbShlbmNyeXB0ZWRJbnB1dHNbMF0sICdiYXNlNjQnKSk7XG4gICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChCdWZmZXIuZnJvbShkZWNvZGVkLnZyZiksIEJ1ZmZlci5mcm9tKCd2cmYtc2hhcmUnKSk7XG4gIH0pO1xuXG4gIGl0KCd0YWdzIHRoZSBCaXRHbyBrZXljaGFpbiB3aXRoIHNhZmVJZCBhbmQgZG9lcyBub3QgZW5jcnlwdCcsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICBjb25zdCBlbmNyeXB0ZWRJbnB1dHM6IHN0cmluZ1tdID0gW107XG4gICAgY29uc3QgYWRkZWRLZXljaGFpbnM6IEFkZGVkS2V5Y2hhaW5QYXJhbXNbXSA9IFtdO1xuICAgIGNvbnN0IGJpdGdvID0ge1xuICAgICAgZW5jcnlwdDogYXN5bmMgKHBhcmFtczogeyBpbnB1dDogc3RyaW5nIH0pOiBQcm9taXNlPHN0cmluZz4gPT4ge1xuICAgICAgICBlbmNyeXB0ZWRJbnB1dHMucHVzaChwYXJhbXMuaW5wdXQpO1xuICAgICAgICByZXR1cm4gYGVuY3J5cHRlZDoke3BhcmFtcy5pbnB1dH1gO1xuICAgICAgfSxcbiAgICB9IGFzIHVua25vd24gYXMgQml0R29CYXNlO1xuICAgIGNvbnN0IGtleWNoYWlucyA9IHtcbiAgICAgIGFkZDogYXN5bmMgKHBhcmFtczogQWRkZWRLZXljaGFpblBhcmFtcyk6IFByb21pc2U8S2V5Y2hhaW4+ID0+IHtcbiAgICAgICAgYWRkZWRLZXljaGFpbnMucHVzaChwYXJhbXMpO1xuICAgICAgICByZXR1cm4geyBpZDogJ2JpdGdvLWtleScgfSBhcyB1bmtub3duIGFzIEtleWNoYWluO1xuICAgICAgfSxcbiAgICB9O1xuICAgIGNvbnN0IGJhc2VDb2luID0ge1xuICAgICAga2V5Y2hhaW5zOiAoKSA9PiBrZXljaGFpbnMsXG4gICAgfSBhcyB1bmtub3duIGFzIElCYXNlQ29pbjtcbiAgICBjb25zdCB1dGlscyA9IG5ldyBFZGRzYU1QQ3YyVXRpbHMoYml0Z28sIGJhc2VDb2luKTtcblxuICAgIGF3YWl0IHV0aWxzLmNyZWF0ZVBhcnRpY2lwYW50S2V5Y2hhaW4oXG4gICAgICBNUEN2MlBhcnRpZXNFbnVtLkJJVEdPLFxuICAgICAgJ2NvbW1vbi1rZXljaGFpbicsXG4gICAgICB1bmRlZmluZWQsXG4gICAgICB1bmRlZmluZWQsXG4gICAgICB1bmRlZmluZWQsXG4gICAgICB1bmRlZmluZWQsXG4gICAgICB1bmRlZmluZWQsXG4gICAgICB1bmRlZmluZWQsXG4gICAgICB1bmRlZmluZWQsXG4gICAgICAnc2FmZS1pZCdcbiAgICApO1xuXG4gICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChlbmNyeXB0ZWRJbnB1dHMsIFtdKTtcbiAgICBhc3NlcnQuc3RyaWN0RXF1YWwoYWRkZWRLZXljaGFpbnNbMF0uc291cmNlLCAnYml0Z28nKTtcbiAgICBhc3NlcnQuc3RyaWN0RXF1YWwoYWRkZWRLZXljaGFpbnNbMF0uc2FmZUlkLCAnc2FmZS1pZCcpO1xuICAgIGFzc2VydC5zdHJpY3RFcXVhbChhZGRlZEtleWNoYWluc1swXS5lbmNyeXB0ZWRQcnYsIHVuZGVmaW5lZCk7XG4gIH0pO1xuXG4gIGRlc2NyaWJlKCdzYWZlIHJvb3Qga2V5Z2VuIGFnYWluc3QgdGhlIEhTTSBjb250cmFjdCcsIGZ1bmN0aW9uICgpIHtcbiAgICBjb25zdCBLZXlHZW5SZXF1ZXN0ID0gdC5pbnRlcnNlY3Rpb24oW1xuICAgICAgdC50eXBlKHsgZW50ZXJwcmlzZTogdC5zdHJpbmcsIHR5cGU6IHQuc3RyaW5nLCBjdXJ2ZVR5cGU6IHQuc3RyaW5nLCByb3VuZDogdC5zdHJpbmcgfSksXG4gICAgICB0LnBhcnRpYWwoeyBzYWZlSWQ6IHQuc3RyaW5nLCBwYXlsb2FkOiB0LlVua25vd25SZWNvcmQgfSksXG4gICAgXSk7XG4gICAgY29uc3QgUjFQYXlsb2FkID0gdC5pbnRlcnNlY3Rpb24oW1xuICAgICAgdC50eXBlKHtcbiAgICAgICAgdXNlckdwZ1B1YmxpY0tleTogdC5zdHJpbmcsXG4gICAgICAgIGJhY2t1cEdwZ1B1YmxpY0tleTogdC5zdHJpbmcsXG4gICAgICAgIHVzZXJNc2cxOiBFZGRzYU1QQ3YyU2lnbmVkTWVzc2FnZSxcbiAgICAgICAgYmFja3VwTXNnMTogRWRkc2FNUEN2MlNpZ25lZE1lc3NhZ2UsXG4gICAgICB9KSxcbiAgICAgIHQudHlwZSh7XG4gICAgICAgIHVzZXJWcmZNc2cxOiBFZGRzYU1QQ3YyU2lnbmVkTWVzc2FnZSxcbiAgICAgICAgYmFja3VwVnJmTXNnMTogRWRkc2FNUEN2MlNpZ25lZE1lc3NhZ2UsXG4gICAgICB9KSxcbiAgICBdKTtcbiAgICBjb25zdCBSMlBheWxvYWQgPSB0LmludGVyc2VjdGlvbihbXG4gICAgICB0LnR5cGUoeyBzZXNzaW9uSWQ6IHQuc3RyaW5nLCB1c2VyTXNnMjogRWRkc2FNUEN2MlNpZ25lZE1lc3NhZ2UsIGJhY2t1cE1zZzI6IEVkZHNhTVBDdjJTaWduZWRNZXNzYWdlIH0pLFxuICAgICAgdC50eXBlKHtcbiAgICAgICAgdXNlclZyZk1zZzI6IEVkZHNhTVBDdjJTaWduZWRNZXNzYWdlLFxuICAgICAgICBiYWNrdXBWcmZNc2cyOiBFZGRzYU1QQ3YyU2lnbmVkTWVzc2FnZSxcbiAgICAgIH0pLFxuICAgIF0pO1xuXG4gICAgbGV0IGJpdGdvUHJpdmF0ZUtleTogcGdwLlByaXZhdGVLZXk7XG4gICAgbGV0IGJpdGdvUHVibGljS2V5OiBwZ3AuS2V5O1xuXG4gICAgYmVmb3JlKGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICAgIGNvbnN0IGJpdGdvR3BnID0gYXdhaXQgZ2VuZXJhdGVHUEdLZXlQYWlyKCdlZDI1NTE5Jyk7XG4gICAgICBiaXRnb1ByaXZhdGVLZXkgPSBhd2FpdCBwZ3AucmVhZFByaXZhdGVLZXkoeyBhcm1vcmVkS2V5OiBiaXRnb0dwZy5wcml2YXRlS2V5IH0pO1xuICAgICAgYml0Z29QdWJsaWNLZXkgPSBhd2FpdCBwZ3AucmVhZEtleSh7IGFybW9yZWRLZXk6IGJpdGdvR3BnLnB1YmxpY0tleSB9KTtcbiAgICB9KTtcblxuICAgIGFmdGVyRWFjaChmdW5jdGlvbiAoKSB7XG4gICAgICBzaW5vbi5yZXN0b3JlKCk7XG4gICAgfSk7XG5cbiAgICAvKiogQml0R28ncyBzaWRlIG9mIHRoZSBjZXJlbW9ueTogc2lnbmluZyBES0cgKyBWUkYgREtHLCB2ZXJpZnlpbmcgZXZlcnkgY2xpZW50IHNpZ25hdHVyZSBsaWtlIHRoZSBIU00gZG9lcy4gKi9cbiAgICBhc3luYyBmdW5jdGlvbiBrZXlnZW5XaXRoSHNtUGVlcihcbiAgICAgIGZhdWx0PzogJ2JpdGdvLXZyZi1tc2cxLXNpZ25hdHVyZScgfCAnYml0Z28tdnJmLW9wZW5pbmctc2lnbmF0dXJlJyB8ICdtaXNzaW5nLW9wZW5pbmcnXG4gICAgKSB7XG4gICAgICBjb25zdCB7IGJpdGdvLCBiYXNlQ29pbiwgcG9zdCwgZW5jcnlwdGVkSW5wdXRzLCBhZGRlZEtleWNoYWlucyB9ID0gY3JlYXRlS2V5Y2hhaW5GaXh0dXJlKCk7XG4gICAgICBjb25zdCB1dGlscyA9IG5ldyBFZGRzYVZyZk1QQ3YyVXRpbHMoYml0Z28sIGJhc2VDb2luKTtcbiAgICAgIHNpbm9uLnN0dWIodXRpbHMsICdnZXRCaXRnb0dwZ1B1YmtleUJhc2VkT25GZWF0dXJlRmxhZ3MnKS5yZXNvbHZlcyh7XG4gICAgICAgIG1wY3YyUHVibGljS2V5OiBiaXRnb1B1YmxpY0tleSxcbiAgICAgICAgZWRkc2FNcGN2MlB1YmxpY0tleTogYml0Z29QdWJsaWNLZXksXG4gICAgICAgIHJlZHBhbGxhc01wY3YyUHVibGljS2V5OiB1bmRlZmluZWQsXG4gICAgICB9KTtcblxuICAgICAgY29uc3QgYml0Z29Ea2cgPSBuZXcgRWRkc2FNUFNEa2cuREtHKDMsIDIsIE1QQ3YyUGFydGllc0VudW0uQklUR08pO1xuICAgICAgY29uc3QgYml0Z29WcmYgPSBuZXcgTXBzVnJmLlZyZkRrZygzLCAyLCBNUEN2MlBhcnRpZXNFbnVtLkJJVEdPKTtcbiAgICAgIGNvbnN0IHJlcXVlc3RzOiBSZWNvcmQ8c3RyaW5nLCB1bmtub3duPltdID0gW107XG4gICAgICBsZXQgYml0Z29Nc2cyOiBNUFNUeXBlcy5EZXNlcmlhbGl6ZWRNZXNzYWdlIHwgdW5kZWZpbmVkO1xuICAgICAgbGV0IHVzZXJHcGdLZXk6IHBncC5LZXkgfCB1bmRlZmluZWQ7XG4gICAgICBsZXQgYmFja3VwR3BnS2V5OiBwZ3AuS2V5IHwgdW5kZWZpbmVkO1xuICAgICAgbGV0IHVzZXJDb21taXRtZW50OiBVaW50OEFycmF5IHwgdW5kZWZpbmVkO1xuICAgICAgbGV0IGJhY2t1cENvbW1pdG1lbnQ6IFVpbnQ4QXJyYXkgfCB1bmRlZmluZWQ7XG5cbiAgICAgIGNvbnN0IHNpZ25Bc0JpdGdvID0gKHBheWxvYWQ6IFVpbnQ4QXJyYXkpID0+IE1QU0NvbW1zLmRldGFjaFNpZ25NcHNNZXNzYWdlKHBheWxvYWQsIGJpdGdvUHJpdmF0ZUtleSk7XG4gICAgICBjb25zdCBlbmNyeXB0VG8gPSBhc3luYyAocmVjaXBpZW50OiBwZ3AuS2V5LCBwbGFpbnRleHQ6IFVpbnQ4QXJyYXkpOiBQcm9taXNlPEVkZHNhTVBDdjJTaWduZWRNZXNzYWdlPiA9PiB7XG4gICAgICAgIGNvbnN0IHsgc2lnbmF0dXJlIH0gPSBhd2FpdCBzaWduQXNCaXRnbyhwbGFpbnRleHQpO1xuICAgICAgICBjb25zdCBtZXNzYWdlID0gYXdhaXQgcGdwLmVuY3J5cHQoe1xuICAgICAgICAgIG1lc3NhZ2U6IGF3YWl0IHBncC5jcmVhdGVNZXNzYWdlKHsgYmluYXJ5OiBwbGFpbnRleHQgfSksXG4gICAgICAgICAgZW5jcnlwdGlvbktleXM6IHJlY2lwaWVudCxcbiAgICAgICAgICBmb3JtYXQ6ICdhcm1vcmVkJyxcbiAgICAgICAgfSk7XG4gICAgICAgIHJldHVybiB7XG4gICAgICAgICAgbWVzc2FnZSxcbiAgICAgICAgICBzaWduYXR1cmU6XG4gICAgICAgICAgICBmYXVsdCA9PT0gJ2JpdGdvLXZyZi1vcGVuaW5nLXNpZ25hdHVyZScgPyAoYXdhaXQgc2lnbkFzQml0Z28obmV3IFVpbnQ4QXJyYXkoWzldKSkpLnNpZ25hdHVyZSA6IHNpZ25hdHVyZSxcbiAgICAgICAgfTtcbiAgICAgIH07XG5cbiAgICAgIHBvc3QuY2FsbHNGYWtlKCgpID0+ICh7XG4gICAgICAgIHNlbmQ6IChyYXdCb2R5OiB1bmtub3duKSA9PiAoe1xuICAgICAgICAgIHJlc3VsdDogYXN5bmMgKCkgPT4ge1xuICAgICAgICAgICAgY29uc3QgYm9keSA9IGRlY29kZVdpdGhDb2RlYyhLZXlHZW5SZXF1ZXN0LCByYXdCb2R5LCAnRWREU0Ega2V5Z2VuIHJlcXVlc3QnKTtcbiAgICAgICAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChib2R5LnR5cGUsIEtleUdlblR5cGVFbnVtLk1QQ3YyKTtcbiAgICAgICAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChib2R5LmN1cnZlVHlwZSwgS2V5Q3VydmVFbnVtLkVkRFNBKTtcbiAgICAgICAgICAgIC8vIFdQIG9ubHkgcmVhZHMgc2FmZUlkIGluIHJvdW5kIDE7IHJvdW5kIDIgaXMgcm91dGVkIGJ5IHRoZSBzdG9yZWQgc2Vzc2lvbi5cbiAgICAgICAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChib2R5LnNhZmVJZCwgYm9keS5yb3VuZCA9PT0gTVBDdjJLZXlHZW5TdGF0ZUVudW1bJ01QQ3YyLVIxJ10gPyAnc2FmZS1pZCcgOiB1bmRlZmluZWQpO1xuICAgICAgICAgICAgcmVxdWVzdHMucHVzaCh7IHJvdW5kOiBib2R5LnJvdW5kLCAuLi5ib2R5LnBheWxvYWQgfSk7XG5cbiAgICAgICAgICAgIGlmIChib2R5LnJvdW5kID09PSBNUEN2MktleUdlblN0YXRlRW51bVsnTVBDdjItUjEnXSkge1xuICAgICAgICAgICAgICBjb25zdCBwYXlsb2FkID0gZGVjb2RlV2l0aENvZGVjKFIxUGF5bG9hZCwgYm9keS5wYXlsb2FkLCAnRWREU0Ega2V5Z2VuIHJvdW5kIDEnKTtcbiAgICAgICAgICAgICAgdXNlckdwZ0tleSA9IGF3YWl0IHBncC5yZWFkS2V5KHsgYXJtb3JlZEtleTogcGF5bG9hZC51c2VyR3BnUHVibGljS2V5IH0pO1xuICAgICAgICAgICAgICBiYWNrdXBHcGdLZXkgPSBhd2FpdCBwZ3AucmVhZEtleSh7IGFybW9yZWRLZXk6IHBheWxvYWQuYmFja3VwR3BnUHVibGljS2V5IH0pO1xuICAgICAgICAgICAgICBjb25zdCBbdXNlclBrLCBiYWNrdXBQa10gPSBhd2FpdCBQcm9taXNlLmFsbChbXG4gICAgICAgICAgICAgICAgTVBTQ29tbXMuZXh0cmFjdEVkMjU1MTlQdWJsaWNLZXkodXNlckdwZ0tleSksXG4gICAgICAgICAgICAgICAgTVBTQ29tbXMuZXh0cmFjdEVkMjU1MTlQdWJsaWNLZXkoYmFja3VwR3BnS2V5KSxcbiAgICAgICAgICAgICAgXSk7XG4gICAgICAgICAgICAgIGNvbnN0IFssIGJpdGdvU2tdID0gYXdhaXQgTVBTQ29tbXMuZXh0cmFjdEVkMjU1MTlLZXlQYWlyKGJpdGdvUHJpdmF0ZUtleSk7XG5cbiAgICAgICAgICAgICAgY29uc3QgdXNlck1zZzEgPSBhd2FpdCBNUFNDb21tcy52ZXJpZnlNcHNNZXNzYWdlKHBheWxvYWQudXNlck1zZzEsIHVzZXJHcGdLZXkpO1xuICAgICAgICAgICAgICBjb25zdCBiYWNrdXBNc2cxID0gYXdhaXQgTVBTQ29tbXMudmVyaWZ5TXBzTWVzc2FnZShwYXlsb2FkLmJhY2t1cE1zZzEsIGJhY2t1cEdwZ0tleSk7XG4gICAgICAgICAgICAgIC8vIFRoZSBWUkYgbWVzc2FnZXMgbXVzdCBiZSBzaWduZWQgYnkgdGhlIHNhbWUgcGFydHkga2V5IGFzIHVzZXJNc2cxL2JhY2t1cE1zZzEuXG4gICAgICAgICAgICAgIHVzZXJDb21taXRtZW50ID0gbmV3IFVpbnQ4QXJyYXkoYXdhaXQgTVBTQ29tbXMudmVyaWZ5TXBzTWVzc2FnZShwYXlsb2FkLnVzZXJWcmZNc2cxLCB1c2VyR3BnS2V5KSk7XG4gICAgICAgICAgICAgIGJhY2t1cENvbW1pdG1lbnQgPSBuZXcgVWludDhBcnJheShhd2FpdCBNUFNDb21tcy52ZXJpZnlNcHNNZXNzYWdlKHBheWxvYWQuYmFja3VwVnJmTXNnMSwgYmFja3VwR3BnS2V5KSk7XG4gICAgICAgICAgICAgIGF3YWl0IGFzc2VydC5yZWplY3RzKE1QU0NvbW1zLnZlcmlmeU1wc01lc3NhZ2UocGF5bG9hZC51c2VyVnJmTXNnMSwgYmFja3VwR3BnS2V5KSk7XG5cbiAgICAgICAgICAgICAgYXdhaXQgYml0Z29Ea2cuaW5pdERrZyhiaXRnb1NrLCBbdXNlclBrLCBiYWNrdXBQa10pO1xuICAgICAgICAgICAgICBjb25zdCBiaXRnb1Jhd01zZzEgPSBiaXRnb0RrZy5nZXRGaXJzdE1lc3NhZ2UoKTtcbiAgICAgICAgICAgICAgW2JpdGdvTXNnMl0gPSBiaXRnb0RrZy5oYW5kbGVJbmNvbWluZ01lc3NhZ2VzKFtcbiAgICAgICAgICAgICAgICB7IGZyb206IE1QQ3YyUGFydGllc0VudW0uVVNFUiwgcGF5bG9hZDogbmV3IFVpbnQ4QXJyYXkodXNlck1zZzEpIH0sXG4gICAgICAgICAgICAgICAgeyBmcm9tOiBNUEN2MlBhcnRpZXNFbnVtLkJBQ0tVUCwgcGF5bG9hZDogbmV3IFVpbnQ4QXJyYXkoYmFja3VwTXNnMSkgfSxcbiAgICAgICAgICAgICAgICBiaXRnb1Jhd01zZzEsXG4gICAgICAgICAgICAgIF0pO1xuXG4gICAgICAgICAgICAgIGNvbnN0IFtiaXRnb1ZyZkNvbW1pdG1lbnRdID0gKGF3YWl0IGJpdGdvVnJmLmluaXREa2coKSkuYnJvYWRjYXN0TWVzc2FnZXM7XG4gICAgICAgICAgICAgIGNvbnN0IHNpZ25lZFZyZk1zZzEgPSBhd2FpdCBzaWduQXNCaXRnbyhiaXRnb1ZyZkNvbW1pdG1lbnQucGF5bG9hZCk7XG4gICAgICAgICAgICAgIHJldHVybiB7XG4gICAgICAgICAgICAgICAgc2Vzc2lvbklkOiAnc2Vzc2lvbi1pZCcsXG4gICAgICAgICAgICAgICAgYml0Z29Nc2cxOiBhd2FpdCBzaWduQXNCaXRnbyhiaXRnb1Jhd01zZzEucGF5bG9hZCksXG4gICAgICAgICAgICAgICAgYml0Z29WcmZNc2cxOlxuICAgICAgICAgICAgICAgICAgZmF1bHQgPT09ICdiaXRnby12cmYtbXNnMS1zaWduYXR1cmUnXG4gICAgICAgICAgICAgICAgICAgID8geyAuLi5zaWduZWRWcmZNc2cxLCBtZXNzYWdlOiBCdWZmZXIuZnJvbSgndGFtcGVyZWQnKS50b1N0cmluZygnYmFzZTY0JykgfVxuICAgICAgICAgICAgICAgICAgICA6IHNpZ25lZFZyZk1zZzEsXG4gICAgICAgICAgICAgIH07XG4gICAgICAgICAgICB9XG5cbiAgICAgICAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChib2R5LnJvdW5kLCBNUEN2MktleUdlblN0YXRlRW51bVsnTVBDdjItUjInXSk7XG4gICAgICAgICAgICBjb25zdCBwYXlsb2FkID0gZGVjb2RlV2l0aENvZGVjKFIyUGF5bG9hZCwgYm9keS5wYXlsb2FkLCAnRWREU0Ega2V5Z2VuIHJvdW5kIDInKTtcbiAgICAgICAgICAgIGFzc2VydC5vayh1c2VyR3BnS2V5ICYmIGJhY2t1cEdwZ0tleSAmJiB1c2VyQ29tbWl0bWVudCAmJiBiYWNrdXBDb21taXRtZW50ICYmIGJpdGdvTXNnMik7XG4gICAgICAgICAgICBhc3NlcnQuZGVlcFN0cmljdEVxdWFsKE9iamVjdC5rZXlzKHBheWxvYWQpLnNvcnQoKSwgW1xuICAgICAgICAgICAgICAnYmFja3VwTXNnMicsXG4gICAgICAgICAgICAgICdiYWNrdXBWcmZNc2cyJyxcbiAgICAgICAgICAgICAgJ3Nlc3Npb25JZCcsXG4gICAgICAgICAgICAgICd1c2VyTXNnMicsXG4gICAgICAgICAgICAgICd1c2VyVnJmTXNnMicsXG4gICAgICAgICAgICBdKTtcblxuICAgICAgICAgICAgY29uc3QgdXNlck1zZzIgPSBhd2FpdCBNUFNDb21tcy52ZXJpZnlNcHNNZXNzYWdlKHBheWxvYWQudXNlck1zZzIsIHVzZXJHcGdLZXkpO1xuICAgICAgICAgICAgY29uc3QgYmFja3VwTXNnMiA9IGF3YWl0IE1QU0NvbW1zLnZlcmlmeU1wc01lc3NhZ2UocGF5bG9hZC5iYWNrdXBNc2cyLCBiYWNrdXBHcGdLZXkpO1xuICAgICAgICAgICAgY29uc3QgdXNlck9wZW5pbmcgPSBuZXcgVWludDhBcnJheShhd2FpdCBNUFNDb21tcy52ZXJpZnlNcHNNZXNzYWdlKHBheWxvYWQudXNlclZyZk1zZzIsIHVzZXJHcGdLZXkpKTtcbiAgICAgICAgICAgIGNvbnN0IGJhY2t1cE9wZW5pbmcgPSBuZXcgVWludDhBcnJheShhd2FpdCBNUFNDb21tcy52ZXJpZnlNcHNNZXNzYWdlKHBheWxvYWQuYmFja3VwVnJmTXNnMiwgYmFja3VwR3BnS2V5KSk7XG5cbiAgICAgICAgICAgIGJpdGdvRGtnLmhhbmRsZUluY29taW5nTWVzc2FnZXMoW1xuICAgICAgICAgICAgICB7IGZyb206IE1QQ3YyUGFydGllc0VudW0uVVNFUiwgcGF5bG9hZDogbmV3IFVpbnQ4QXJyYXkodXNlck1zZzIpIH0sXG4gICAgICAgICAgICAgIHsgZnJvbTogTVBDdjJQYXJ0aWVzRW51bS5CQUNLVVAsIHBheWxvYWQ6IG5ldyBVaW50OEFycmF5KGJhY2t1cE1zZzIpIH0sXG4gICAgICAgICAgICAgIGJpdGdvTXNnMixcbiAgICAgICAgICAgIF0pO1xuXG4gICAgICAgICAgICBjb25zdCBvcGVuaW5ncyA9IGF3YWl0IGJpdGdvVnJmLmhhbmRsZUluY29taW5nTWVzc2FnZXMoe1xuICAgICAgICAgICAgICBicm9hZGNhc3RNZXNzYWdlczogW1xuICAgICAgICAgICAgICAgIHsgZnJvbTogTVBDdjJQYXJ0aWVzRW51bS5VU0VSLCBwYXlsb2FkOiB1c2VyQ29tbWl0bWVudCB9LFxuICAgICAgICAgICAgICAgIHsgZnJvbTogTVBDdjJQYXJ0aWVzRW51bS5CQUNLVVAsIHBheWxvYWQ6IGJhY2t1cENvbW1pdG1lbnQgfSxcbiAgICAgICAgICAgICAgXSxcbiAgICAgICAgICAgICAgcDJwTWVzc2FnZXM6IFtdLFxuICAgICAgICAgICAgfSk7XG4gICAgICAgICAgICBjb25zdCB0b1VzZXIgPSBvcGVuaW5ncy5wMnBNZXNzYWdlcy5maW5kKCh7IHRvIH0pID0+IHRvID09PSBNUEN2MlBhcnRpZXNFbnVtLlVTRVIpO1xuICAgICAgICAgICAgY29uc3QgdG9CYWNrdXAgPSBvcGVuaW5ncy5wMnBNZXNzYWdlcy5maW5kKCh7IHRvIH0pID0+IHRvID09PSBNUEN2MlBhcnRpZXNFbnVtLkJBQ0tVUCk7XG4gICAgICAgICAgICBhc3NlcnQub2sodG9Vc2VyICYmIHRvQmFja3VwKTtcbiAgICAgICAgICAgIGF3YWl0IGJpdGdvVnJmLmhhbmRsZUluY29taW5nTWVzc2FnZXMoe1xuICAgICAgICAgICAgICBicm9hZGNhc3RNZXNzYWdlczogW10sXG4gICAgICAgICAgICAgIHAycE1lc3NhZ2VzOiBbXG4gICAgICAgICAgICAgICAgeyBmcm9tOiBNUEN2MlBhcnRpZXNFbnVtLlVTRVIsIHRvOiBNUEN2MlBhcnRpZXNFbnVtLkJJVEdPLCBwYXlsb2FkOiB1c2VyT3BlbmluZyB9LFxuICAgICAgICAgICAgICAgIHsgZnJvbTogTVBDdjJQYXJ0aWVzRW51bS5CQUNLVVAsIHRvOiBNUEN2MlBhcnRpZXNFbnVtLkJJVEdPLCBwYXlsb2FkOiBiYWNrdXBPcGVuaW5nIH0sXG4gICAgICAgICAgICAgIF0sXG4gICAgICAgICAgICB9KTtcblxuICAgICAgICAgICAgcmV0dXJuIHtcbiAgICAgICAgICAgICAgc2Vzc2lvbklkOiBwYXlsb2FkLnNlc3Npb25JZCxcbiAgICAgICAgICAgICAgY29tbW9uUHVibGljS2V5Y2hhaW46IGJpdGdvRGtnLmdldENvbW1vbktleWNoYWluKCksXG4gICAgICAgICAgICAgIGJpdGdvTXNnMjogYXdhaXQgc2lnbkFzQml0Z28oYml0Z29Nc2cyLnBheWxvYWQpLFxuICAgICAgICAgICAgICAuLi4oZmF1bHQgPT09ICdtaXNzaW5nLW9wZW5pbmcnXG4gICAgICAgICAgICAgICAgPyB7fVxuICAgICAgICAgICAgICAgIDogeyBiaXRnb1ZyZk1zZ1RvVXNlcjogYXdhaXQgZW5jcnlwdFRvKHVzZXJHcGdLZXksIHRvVXNlci5wYXlsb2FkKSB9KSxcbiAgICAgICAgICAgICAgYml0Z29WcmZNc2dUb0JhY2t1cDogYXdhaXQgZW5jcnlwdFRvKGJhY2t1cEdwZ0tleSwgdG9CYWNrdXAucGF5bG9hZCksXG4gICAgICAgICAgICB9O1xuICAgICAgICAgIH0sXG4gICAgICAgIH0pLFxuICAgICAgfSkpO1xuXG4gICAgICBhd2FpdCB1dGlscy5jcmVhdGVLZXljaGFpbnMoe1xuICAgICAgICBwYXNzcGhyYXNlOiAncGFzc3BocmFzZScsXG4gICAgICAgIGVudGVycHJpc2U6ICdlbnRlcnByaXNlLWlkJyxcbiAgICAgICAgc2FmZUlkOiAnc2FmZS1pZCcsXG4gICAgICB9KTtcbiAgICAgIHJldHVybiB7IHJlcXVlc3RzLCBlbmNyeXB0ZWRJbnB1dHMsIGFkZGVkS2V5Y2hhaW5zIH07XG4gICAgfVxuXG4gICAgaXQoJ3NpZ25zIFZSRiBtZXNzYWdlcyB3aXRoIHRoZSBwYXJ0eSBrZXlzIGFuZCBkZWNyeXB0cyBCaXRHbyBvcGVuaW5ncyB3aXRob3V0IGhhbmRsaW5nIHRoZSBIU00gVlJGIHN0YXRlJywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgICAgY29uc3QgeyByZXF1ZXN0cywgZW5jcnlwdGVkSW5wdXRzLCBhZGRlZEtleWNoYWlucyB9ID0gYXdhaXQga2V5Z2VuV2l0aEhzbVBlZXIoKTtcblxuICAgICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChcbiAgICAgICAgcmVxdWVzdHMubWFwKCh7IHJvdW5kIH0pID0+IHJvdW5kKSxcbiAgICAgICAgW01QQ3YyS2V5R2VuU3RhdGVFbnVtWydNUEN2Mi1SMSddLCBNUEN2MktleUdlblN0YXRlRW51bVsnTVBDdjItUjInXV1cbiAgICAgICk7XG4gICAgICAvLyBXUCBrZWVwcyB0aGUgSFNNIFZSRiBzdGF0ZSBiZXR3ZWVuIHJvdW5kcywgc28gbmVpdGhlciBjbGllbnQgcm91bmQgY2FycmllcyBpdC5cbiAgICAgIGZvciAoY29uc3QgcmVxdWVzdCBvZiByZXF1ZXN0cykge1xuICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwoJ2JpdGdvRW5jcnlwdGVkVnJmRGtnU3RhdGUnIGluIHJlcXVlc3QsIGZhbHNlKTtcbiAgICAgIH1cblxuICAgICAgLy8gQm90aCBjbGllbnQgcm9vdHMgZW5kIHVwIHdpdGggYSBzaWduaW5nIHNoYXJlIGFuZCBhIFZSRiBzaGFyZSwgdGFnZ2VkIHdpdGggdGhlIHNhZmUuXG4gICAgICBhc3NlcnQuZGVlcFN0cmljdEVxdWFsKGFkZGVkS2V5Y2hhaW5zLm1hcCgoeyBzb3VyY2UgfSkgPT4gc291cmNlKS5zb3J0KCksIFsnYmFja3VwJywgJ2JpdGdvJywgJ3VzZXInXSk7XG4gICAgICBmb3IgKGNvbnN0IGtleWNoYWluIG9mIGFkZGVkS2V5Y2hhaW5zKSB7XG4gICAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChrZXljaGFpbi5zYWZlSWQsICdzYWZlLWlkJyk7XG4gICAgICB9XG4gICAgICAvLyBVc2VyIGFuZCBiYWNrdXAgZWFjaCBlbmNyeXB0IGEgZnVsbCBhbmQgYSByZWR1Y2VkIGVudmVsb3BlOyBldmVyeSBvbmUgY2FycmllcyBhIFZSRiBzaGFyZSwgYW5kXG4gICAgICAvLyB0aGUgdHdvIHBhcnRpZXMnIHNoYXJlcyBkaWZmZXIuIE9yZGVyLWluZGVwZW5kZW50OiB0aGUgcm9vdHMgYXJlIHJlZ2lzdGVyZWQgY29uY3VycmVudGx5LlxuICAgICAgY29uc3QgdnJmU2hhcmVzID0gbmV3IFNldChcbiAgICAgICAgZW5jcnlwdGVkSW5wdXRzLm1hcCgoaW5wdXQpID0+IHtcbiAgICAgICAgICBjb25zdCB7IHZyZiwgcHJ2S2V5U2hhcmUgfSA9IGRlY29kZVZyZkVudmVsb3BlKEJ1ZmZlci5mcm9tKGlucHV0LCAnYmFzZTY0JykpO1xuICAgICAgICAgIGFzc2VydC5vayh2cmYubGVuZ3RoID4gMCk7XG4gICAgICAgICAgYXNzZXJ0Lm9rKHBydktleVNoYXJlLmxlbmd0aCA+IDApO1xuICAgICAgICAgIHJldHVybiBCdWZmZXIuZnJvbSh2cmYpLnRvU3RyaW5nKCdoZXgnKTtcbiAgICAgICAgfSlcbiAgICAgICk7XG4gICAgICBhc3NlcnQuc3RyaWN0RXF1YWwoZW5jcnlwdGVkSW5wdXRzLmxlbmd0aCwgNCk7XG4gICAgICBhc3NlcnQuc3RyaWN0RXF1YWwodnJmU2hhcmVzLnNpemUsIDIpO1xuICAgIH0pO1xuXG4gICAgaXQoJ3JlamVjdHMgYSBCaXRHbyBWUkYgcm91bmQgMSBtZXNzYWdlIHdob3NlIHNpZ25hdHVyZSBkb2VzIG5vdCB2ZXJpZnknLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBhd2FpdCBhc3NlcnQucmVqZWN0cyhrZXlnZW5XaXRoSHNtUGVlcignYml0Z28tdnJmLW1zZzEtc2lnbmF0dXJlJyksIC9zaWduYXR1cmV8dmVyaWZpY2F0aW9ufHNpZ25lZC9pKTtcbiAgICB9KTtcblxuICAgIGl0KCdyZWplY3RzIGEgQml0R28gVlJGIG9wZW5pbmcgd2hvc2Ugc2lnbmF0dXJlIGRvZXMgbm90IHZlcmlmeScsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICAgIGF3YWl0IGFzc2VydC5yZWplY3RzKGtleWdlbldpdGhIc21QZWVyKCdiaXRnby12cmYtb3BlbmluZy1zaWduYXR1cmUnKSwgL3NpZ25hdHVyZXx2ZXJpZmljYXRpb258c2lnbmVkL2kpO1xuICAgIH0pO1xuXG4gICAgaXQoJ2ZhaWxzIHdoZW4gdGhlIEhTTSBvbWl0cyBhIEJpdEdvIFZSRiBvcGVuaW5nIGluIHJvdW5kIDInLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBhd2FpdCBhc3NlcnQucmVqZWN0cyhrZXlnZW5XaXRoSHNtUGVlcignbWlzc2luZy1vcGVuaW5nJyksIC9WUkYgbWVzc2FnZSB0byB1c2VyLyk7XG4gICAgfSk7XG4gIH0pO1xufSk7XG5cbmRlc2NyaWJlKCdFZERTQSBzYWZlLWNoaWxkIE1QUyBkZXJpdmF0aW9uJywgZnVuY3Rpb24gKCkge1xuICBsZXQgdXNlclNpZ25pbmdTaGFyZTogQnVmZmVyO1xuICBsZXQgdXNlclZyZlNoYXJlOiBCdWZmZXI7XG4gIGxldCBiaXRnb1NpZ25pbmdTaGFyZTogQnVmZmVyO1xuICBsZXQgYml0Z29WcmZTaGFyZTogQnVmZmVyO1xuICBsZXQgYml0Z29Qcml2YXRlS2V5OiBwZ3AuUHJpdmF0ZUtleTtcbiAgbGV0IGJpdGdvUHVibGljS2V5OiBwZ3AuS2V5O1xuXG4gIGNvbnN0IHNlc3Npb25JZCA9ICdkZXJpdmUtc2Vzc2lvbic7XG4gIGNvbnN0IGFjY291bnQgPSA3O1xuICBjb25zdCBwYXRoID0gYnVpbGRTYWZlQmlwNDRQYXRoKDUwMSwgJ2VkZHNhTXBjJywgYWNjb3VudCk7XG4gIGNvbnN0IFJlcXVlc3QgPSB0LmludGVyc2VjdGlvbihbXG4gICAgdC50eXBlKHsgZW50ZXJwcmlzZTogdC5zdHJpbmcsIHR5cGU6IHQuc3RyaW5nLCBjdXJ2ZVR5cGU6IHQuc3RyaW5nLCByb3VuZDogdC5zdHJpbmcsIHBheWxvYWQ6IHQudW5rbm93biB9KSxcbiAgICB0LnBhcnRpYWwoeyBzYWZlSWQ6IHQuc3RyaW5nLCBjb2luOiB0LnN0cmluZyB9KSxcbiAgXSk7XG5cbiAgYmVmb3JlKGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICBjb25zdCBzaWduaW5nID0gYXdhaXQgTVBTVXRpbC5nZW5lcmF0ZUVkRHNhREtHS2V5U2hhcmVzKCk7XG4gICAgY29uc3QgdnJmID0gYXdhaXQgTXBzVnJmVXRpbHMuZ2VuZXJhdGVWcmZES0dLZXlTaGFyZXMoKTtcbiAgICB1c2VyU2lnbmluZ1NoYXJlID0gc2lnbmluZ1tNUEN2MlBhcnRpZXNFbnVtLlVTRVJdLmdldEtleVNoYXJlKCk7XG4gICAgYml0Z29TaWduaW5nU2hhcmUgPSBzaWduaW5nW01QQ3YyUGFydGllc0VudW0uQklUR09dLmdldEtleVNoYXJlKCk7XG4gICAgdXNlclZyZlNoYXJlID0gdnJmW01QQ3YyUGFydGllc0VudW0uVVNFUl0uZ2V0S2V5U2hhcmUoKTtcbiAgICBiaXRnb1ZyZlNoYXJlID0gdnJmW01QQ3YyUGFydGllc0VudW0uQklUR09dLmdldEtleVNoYXJlKCk7XG4gICAgY29uc3QgYml0Z29HcGcgPSBhd2FpdCBnZW5lcmF0ZUdQR0tleVBhaXIoJ2VkMjU1MTknKTtcbiAgICBiaXRnb1ByaXZhdGVLZXkgPSBhd2FpdCBwZ3AucmVhZFByaXZhdGVLZXkoeyBhcm1vcmVkS2V5OiBiaXRnb0dwZy5wcml2YXRlS2V5IH0pO1xuICAgIGJpdGdvUHVibGljS2V5ID0gYXdhaXQgcGdwLnJlYWRLZXkoeyBhcm1vcmVkS2V5OiBiaXRnb0dwZy5wdWJsaWNLZXkgfSk7XG4gIH0pO1xuXG4gIGFzeW5jIGZ1bmN0aW9uIGRlcml2ZVdpdGhQZWVyKFxuICAgIGZhdWx0PzogJ3IxLXNpZ25hdHVyZScgfCAncjItc2lnbmF0dXJlJyB8ICdzZXNzaW9uJyB8ICdjb21tb25LZXljaGFpbicsXG4gICAgcmVjb3JkZWRLZXljaGFpbnM/OiBBZGRlZEtleWNoYWluUGFyYW1zW11cbiAgKSB7XG4gICAgY29uc3QgeyBiaXRnbywgYmFzZUNvaW4sIHBvc3QsIGVuY3J5cHRlZElucHV0cywgYWRkZWRLZXljaGFpbnMgfSA9IGNyZWF0ZUtleWNoYWluRml4dHVyZSgpO1xuICAgIGNvbnN0IHV0aWxzID0gbmV3IEVkZHNhVnJmTVBDdjJVdGlscyhiaXRnbywgYmFzZUNvaW4pO1xuICAgIHNpbm9uLnN0dWIodXRpbHMsICdnZXRCaXRnb0dwZ1B1YmtleUJhc2VkT25GZWF0dXJlRmxhZ3MnKS5yZXNvbHZlcyh7XG4gICAgICBtcGN2MlB1YmxpY0tleTogYml0Z29QdWJsaWNLZXksXG4gICAgICBlZGRzYU1wY3YyUHVibGljS2V5OiBiaXRnb1B1YmxpY0tleSxcbiAgICAgIHJlZHBhbGxhc01wY3YyUHVibGljS2V5OiB1bmRlZmluZWQsXG4gICAgfSk7XG4gICAgY29uc3QgYml0Z29QZWVyID0gbmV3IE1wc0Rlcml2ZS5EZXJpdmUoMywgMiwgTVBDdjJQYXJ0aWVzRW51bS5CSVRHTywgYml0Z29TaWduaW5nU2hhcmUsIGJpdGdvVnJmU2hhcmUsIHBhdGgpO1xuICAgIGxldCBiaXRnb01zZzI6IFVpbnQ4QXJyYXkgfCB1bmRlZmluZWQ7XG4gICAgbGV0IHVzZXJHcGdQdWJsaWNLZXkgPSAnJztcbiAgICBsZXQgcm91bmRzID0gMDtcbiAgICBwb3N0LmNhbGxzRmFrZSgoX3VybDogc3RyaW5nKSA9PiAoe1xuICAgICAgc2VuZDogKHJhd0JvZHk6IHVua25vd24pID0+ICh7XG4gICAgICAgIHJlc3VsdDogYXN5bmMgKCkgPT4ge1xuICAgICAgICAgIGNvbnN0IGJvZHkgPSBkZWNvZGVXaXRoQ29kZWMoUmVxdWVzdCwgcmF3Qm9keSwgJ0VkRFNBIGRlcml2ZSByZXF1ZXN0Jyk7XG4gICAgICAgICAgYXNzZXJ0LnN0cmljdEVxdWFsKF91cmwsICcvbXBjL2dlbmVyYXRla2V5Jyk7XG4gICAgICAgICAgYXNzZXJ0LnN0cmljdEVxdWFsKGJvZHkuZW50ZXJwcmlzZSwgJ2VudGVycHJpc2UtaWQnKTtcbiAgICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwoYm9keS5jb2luLCAndHNvbCcpO1xuICAgICAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChib2R5LnR5cGUsIEtleUdlblR5cGVFbnVtLk1QQ3YyKTtcbiAgICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwoYm9keS5jdXJ2ZVR5cGUsIEtleUN1cnZlRW51bS5FZERTQSk7XG4gICAgICAgICAgaWYgKHJvdW5kcysrID09PSAwKSB7XG4gICAgICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwoYm9keS5yb3VuZCwgTVBDdjJLZXlHZW5TdGF0ZUVudW1bJ01QQ3YyRGVyaXZlLVIxJ10pO1xuICAgICAgICAgICAgYXNzZXJ0LnN0cmljdEVxdWFsKGJvZHkuc2FmZUlkLCAnc2FmZS1pZCcpO1xuICAgICAgICAgICAgY29uc3QgcmVxdWVzdCA9IGRlY29kZVdpdGhDb2RlYyhFZGRzYU1QQ3YyRGVyaXZlUm91bmQxUmVxdWVzdCwgYm9keS5wYXlsb2FkLCAnRWREU0EgZGVyaXZlIHJvdW5kIDEnKTtcbiAgICAgICAgICAgIGFzc2VydC5kZWVwU3RyaWN0RXF1YWwoT2JqZWN0LmtleXMocmVxdWVzdCkuc29ydCgpLCBbXG4gICAgICAgICAgICAgICdwYXJlbnRLZXlJZCcsXG4gICAgICAgICAgICAgICdwYXRoJyxcbiAgICAgICAgICAgICAgJ3VzZXJHcGdQdWJsaWNLZXknLFxuICAgICAgICAgICAgICAndXNlck1zZzEnLFxuICAgICAgICAgICAgXSk7XG4gICAgICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwocmVxdWVzdC5wYXJlbnRLZXlJZCwgJ2JpdGdvLXJvb3QtaWQnKTtcbiAgICAgICAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChyZXF1ZXN0LnBhdGgsIHBhdGgpO1xuICAgICAgICAgICAgdXNlckdwZ1B1YmxpY0tleSA9IHJlcXVlc3QudXNlckdwZ1B1YmxpY0tleTtcbiAgICAgICAgICAgIGNvbnN0IHVzZXJHcGdLZXkgPSBhd2FpdCBwZ3AucmVhZEtleSh7IGFybW9yZWRLZXk6IHJlcXVlc3QudXNlckdwZ1B1YmxpY0tleSB9KTtcbiAgICAgICAgICAgIGNvbnN0IHVzZXJQYXlsb2FkID0gYXdhaXQgTVBTQ29tbXMudmVyaWZ5TXBzTWVzc2FnZShyZXF1ZXN0LnVzZXJNc2cxLCB1c2VyR3BnS2V5KTtcbiAgICAgICAgICAgIGNvbnN0IGJpdGdvRmlyc3QgPSBhd2FpdCBiaXRnb1BlZXIuaW5pdERlcml2ZSgpO1xuICAgICAgICAgICAgY29uc3QgW291dGdvaW5nXSA9IGJpdGdvUGVlci5oYW5kbGVJbmNvbWluZ01lc3NhZ2VzKFtcbiAgICAgICAgICAgICAgeyBmcm9tOiBNUEN2MlBhcnRpZXNFbnVtLlVTRVIsIHBheWxvYWQ6IG5ldyBVaW50OEFycmF5KHVzZXJQYXlsb2FkKSB9LFxuICAgICAgICAgICAgXSk7XG4gICAgICAgICAgICBhc3NlcnQub2sob3V0Z29pbmcpO1xuICAgICAgICAgICAgYml0Z29Nc2cyID0gb3V0Z29pbmcucGF5bG9hZDtcbiAgICAgICAgICAgIGNvbnN0IHNpZ25lZCA9IGF3YWl0IE1QU0NvbW1zLmRldGFjaFNpZ25NcHNNZXNzYWdlKEJ1ZmZlci5mcm9tKGJpdGdvRmlyc3QucGF5bG9hZCksIGJpdGdvUHJpdmF0ZUtleSk7XG4gICAgICAgICAgICByZXR1cm4ge1xuICAgICAgICAgICAgICBzZXNzaW9uSWQsXG4gICAgICAgICAgICAgIGJpdGdvTXNnMTpcbiAgICAgICAgICAgICAgICBmYXVsdCA9PT0gJ3IxLXNpZ25hdHVyZScgPyB7IC4uLnNpZ25lZCwgbWVzc2FnZTogQnVmZmVyLmZyb20oJ3RhbXBlcmVkJykudG9TdHJpbmcoJ2Jhc2U2NCcpIH0gOiBzaWduZWQsXG4gICAgICAgICAgICB9O1xuICAgICAgICAgIH1cbiAgICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwocm91bmRzLCAyKTtcbiAgICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwoYm9keS5yb3VuZCwgTVBDdjJLZXlHZW5TdGF0ZUVudW1bJ01QQ3YyRGVyaXZlLVIyJ10pO1xuICAgICAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChib2R5LnNhZmVJZCwgJ3NhZmUtaWQnKTtcbiAgICAgICAgICBjb25zdCByZXF1ZXN0ID0gZGVjb2RlV2l0aENvZGVjKEVkZHNhTVBDdjJEZXJpdmVSb3VuZDJSZXF1ZXN0LCBib2R5LnBheWxvYWQsICdFZERTQSBkZXJpdmUgcm91bmQgMicpO1xuICAgICAgICAgIGFzc2VydC5kZWVwU3RyaWN0RXF1YWwoT2JqZWN0LmtleXMocmVxdWVzdCkuc29ydCgpLCBbJ3Nlc3Npb25JZCcsICd1c2VyTXNnMiddKTtcbiAgICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwocmVxdWVzdC5zZXNzaW9uSWQsIHNlc3Npb25JZCk7XG4gICAgICAgICAgY29uc3QgdXNlclBheWxvYWQgPSBhd2FpdCBNUFNDb21tcy52ZXJpZnlNcHNNZXNzYWdlKFxuICAgICAgICAgICAgcmVxdWVzdC51c2VyTXNnMixcbiAgICAgICAgICAgIGF3YWl0IHBncC5yZWFkS2V5KHsgYXJtb3JlZEtleTogdXNlckdwZ1B1YmxpY0tleSB9KVxuICAgICAgICAgICk7XG4gICAgICAgICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChcbiAgICAgICAgICAgIGJpdGdvUGVlci5oYW5kbGVJbmNvbWluZ01lc3NhZ2VzKFt7IGZyb206IE1QQ3YyUGFydGllc0VudW0uVVNFUiwgcGF5bG9hZDogbmV3IFVpbnQ4QXJyYXkodXNlclBheWxvYWQpIH1dKSxcbiAgICAgICAgICAgIFtdXG4gICAgICAgICAgKTtcbiAgICAgICAgICBhc3NlcnQub2soYml0Z29Nc2cyKTtcbiAgICAgICAgICBjb25zdCBzaWduZWQgPSBhd2FpdCBNUFNDb21tcy5kZXRhY2hTaWduTXBzTWVzc2FnZShCdWZmZXIuZnJvbShiaXRnb01zZzIpLCBiaXRnb1ByaXZhdGVLZXkpO1xuICAgICAgICAgIGNvbnN0IGNvbW1vblB1YmxpY0tleWNoYWluID0gYml0Z29QZWVyLmdldENvbW1vbktleWNoYWluKCk7XG4gICAgICAgICAgcmV0dXJuIHtcbiAgICAgICAgICAgIHNlc3Npb25JZDogZmF1bHQgPT09ICdzZXNzaW9uJyA/ICdkaWZmZXJlbnQtc2Vzc2lvbicgOiBzZXNzaW9uSWQsXG4gICAgICAgICAgICBjb21tb25QdWJsaWNLZXljaGFpbjpcbiAgICAgICAgICAgICAgZmF1bHQgPT09ICdjb21tb25LZXljaGFpbidcbiAgICAgICAgICAgICAgICA/IGAke2NvbW1vblB1YmxpY0tleWNoYWluLnNsaWNlKDAsIC0xKX0ke2NvbW1vblB1YmxpY0tleWNoYWluLmVuZHNXaXRoKCcwJykgPyAnMScgOiAnMCd9YFxuICAgICAgICAgICAgICAgIDogY29tbW9uUHVibGljS2V5Y2hhaW4sXG4gICAgICAgICAgICBiaXRnb01zZzI6XG4gICAgICAgICAgICAgIGZhdWx0ID09PSAncjItc2lnbmF0dXJlJyA/IHsgLi4uc2lnbmVkLCBtZXNzYWdlOiBCdWZmZXIuZnJvbSgndGFtcGVyZWQnKS50b1N0cmluZygnYmFzZTY0JykgfSA6IHNpZ25lZCxcbiAgICAgICAgICB9O1xuICAgICAgICB9LFxuICAgICAgfSksXG4gICAgfSkpO1xuXG4gICAgdHJ5IHtcbiAgICAgIGNvbnN0IHJlc3VsdCA9IGF3YWl0IHV0aWxzLmNyZWF0ZVNhZmVDaGlsZEtleWNoYWlucyh7XG4gICAgICAgIHBhc3NwaHJhc2U6ICdwYXNzcGhyYXNlJyxcbiAgICAgICAgZW50ZXJwcmlzZTogJ2VudGVycHJpc2UtaWQnLFxuICAgICAgICBzYWZlSWQ6ICdzYWZlLWlkJyxcbiAgICAgICAgcGFyZW50S2V5SWQ6ICdiaXRnby1yb290LWlkJyxcbiAgICAgICAgcGF0aCxcbiAgICAgICAgdXNlclJvb3RLZXlJZDogJ3VzZXItcm9vdC1pZCcsXG4gICAgICAgIGJhY2t1cFJvb3RLZXlJZDogJ2JhY2t1cC1yb290LWlkJyxcbiAgICAgICAgdXNlclJvb3RLZXlTaGFyZTogdXNlclNpZ25pbmdTaGFyZSxcbiAgICAgICAgdXNlclJvb3RWcmZLZXlTaGFyZTogdXNlclZyZlNoYXJlLFxuICAgICAgfSk7XG4gICAgICByZXR1cm4geyByZXN1bHQsIGVuY3J5cHRlZElucHV0cywgYWRkZWRLZXljaGFpbnMsIGJpdGdvUGVlciwgcm91bmRzIH07XG4gICAgfSBmaW5hbGx5IHtcbiAgICAgIHJlY29yZGVkS2V5Y2hhaW5zPy5wdXNoKC4uLmFkZGVkS2V5Y2hhaW5zKTtcbiAgICB9XG4gIH1cblxuICBhZnRlckVhY2goZnVuY3Rpb24gKCkge1xuICAgIHNpbm9uLnJlc3RvcmUoKTtcbiAgfSk7XG5cbiAgaXQoJ3JlZ2lzdGVycyB0aGUgY2hpbGQgc2lnbmluZyBzaGFyZSBhbmQgdHdvIHB1YmxpYy1vbmx5IHBsYWNlaG9sZGVycyBhZnRlciB0aGUgc2lnbmVkIGNlcmVtb255JywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IHsgcmVzdWx0LCBlbmNyeXB0ZWRJbnB1dHMsIGFkZGVkS2V5Y2hhaW5zLCBiaXRnb1BlZXIsIHJvdW5kcyB9ID0gYXdhaXQgZGVyaXZlV2l0aFBlZXIoKTtcbiAgICBhc3NlcnQuc3RyaWN0RXF1YWwocm91bmRzLCAyKTtcbiAgICBhc3NlcnQuZGVlcFN0cmljdEVxdWFsKGFkZGVkS2V5Y2hhaW5zLm1hcCgoeyBzb3VyY2UgfSkgPT4gc291cmNlKS5zb3J0KCksIFsnYmFja3VwJywgJ2JpdGdvJywgJ3VzZXInXSk7XG4gICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChcbiAgICAgIFtyZXN1bHQudXNlcktleWNoYWluLmlkLCByZXN1bHQuYmFja3VwS2V5Y2hhaW4uaWQsIHJlc3VsdC5iaXRnb0tleWNoYWluLmlkXSxcbiAgICAgIFsndXNlci1jaGlsZCcsICdiYWNrdXAtY2hpbGQnLCAnYml0Z28tY2hpbGQnXVxuICAgICk7XG4gICAgZm9yIChjb25zdCBrZXljaGFpbiBvZiBhZGRlZEtleWNoYWlucykge1xuICAgICAgYXNzZXJ0LnN0cmljdEVxdWFsKGtleWNoYWluLnNhZmVJZCwgJ3NhZmUtaWQnKTtcbiAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChrZXljaGFpbi5kZXJpdmVkRnJvbVBhcmVudFdpdGhQYXRoLCBwYXRoKTtcbiAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChrZXljaGFpbi5jb21tb25LZXljaGFpbiwgYml0Z29QZWVyLmdldENvbW1vbktleWNoYWluKCkpO1xuICAgICAgYXNzZXJ0LnN0cmljdEVxdWFsKGtleWNoYWluLmtleVR5cGUsICd0c3MnKTtcbiAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChrZXljaGFpbi5pc01QQ3YyLCB0cnVlKTtcbiAgICB9XG4gICAgY29uc3QgdXNlckNoaWxkID0gYWRkZWRLZXljaGFpbnMuZmluZCgoeyBzb3VyY2UgfSkgPT4gc291cmNlID09PSAndXNlcicpO1xuICAgIGNvbnN0IGJhY2t1cENoaWxkID0gYWRkZWRLZXljaGFpbnMuZmluZCgoeyBzb3VyY2UgfSkgPT4gc291cmNlID09PSAnYmFja3VwJyk7XG4gICAgY29uc3QgYml0Z29DaGlsZCA9IGFkZGVkS2V5Y2hhaW5zLmZpbmQoKHsgc291cmNlIH0pID0+IHNvdXJjZSA9PT0gJ2JpdGdvJyk7XG4gICAgYXNzZXJ0Lm9rKHVzZXJDaGlsZCk7XG4gICAgYXNzZXJ0Lm9rKGJhY2t1cENoaWxkKTtcbiAgICBhc3NlcnQub2soYml0Z29DaGlsZCk7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKHVzZXJDaGlsZC5wYXJlbnQsICd1c2VyLXJvb3QtaWQnKTtcbiAgICBhc3NlcnQuc3RyaWN0RXF1YWwoYmFja3VwQ2hpbGQucGFyZW50LCAnYmFja3VwLXJvb3QtaWQnKTtcbiAgICBhc3NlcnQuc3RyaWN0RXF1YWwoYml0Z29DaGlsZC5wYXJlbnQsICdiaXRnby1yb290LWlkJyk7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKGVuY3J5cHRlZElucHV0cy5sZW5ndGgsIDIpO1xuICAgIGFzc2VydC5zdHJpY3RFcXVhbCh1c2VyQ2hpbGQuZW5jcnlwdGVkUHJ2LCBgZW5jcnlwdGVkOiR7ZW5jcnlwdGVkSW5wdXRzWzBdfWApO1xuICAgIGNvbnN0IHNpZ25pbmdTaGFyZSA9IEJ1ZmZlci5mcm9tKHJlc3VsdC51c2VyS2V5Y2hhaW4uZW5jcnlwdGVkUHJ2Py5zbGljZSgnZW5jcnlwdGVkOicubGVuZ3RoKSA/PyAnJywgJ2Jhc2U2NCcpO1xuICAgIGFzc2VydC5kZWVwU3RyaWN0RXF1YWwoc2lnbmluZ1NoYXJlLCBCdWZmZXIuZnJvbShlbmNyeXB0ZWRJbnB1dHNbMF0sICdiYXNlNjQnKSk7XG4gICAgYXNzZXJ0Lm5vdERlZXBTdHJpY3RFcXVhbChzaWduaW5nU2hhcmUsIHVzZXJTaWduaW5nU2hhcmUpO1xuICAgIGFzc2VydC5ub3REZWVwU3RyaWN0RXF1YWwoc2lnbmluZ1NoYXJlLCBiaXRnb1BlZXIuZ2V0S2V5U2hhcmUoKSk7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKHVzZXJDaGlsZC5yZWR1Y2VkRW5jcnlwdGVkUHJ2LCB1bmRlZmluZWQpO1xuICAgIGNvbnN0IHJlZHVjZWQgPSByZXN1bHQudXNlcktleWNoYWluLnJlZHVjZWRFbmNyeXB0ZWRQcnY7XG4gICAgYXNzZXJ0Lm9rKHJlZHVjZWQpO1xuICAgIGNvbnN0IHJlZHVjZWRTaGFyZSA9IE1QU1R5cGVzLmdldERlY29kZWRSZWR1Y2VkS2V5U2hhcmUoQnVmZmVyLmZyb20ocmVkdWNlZC5zbGljZSgnZW5jcnlwdGVkOicubGVuZ3RoKSwgJ2Jhc2U2NCcpKTtcbiAgICBhc3NlcnQuZGVlcFN0cmljdEVxdWFsKEJ1ZmZlci5mcm9tKHJlZHVjZWRTaGFyZS5rZXlTaGFyZSksIHNpZ25pbmdTaGFyZSk7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKEJ1ZmZlci5mcm9tKHJlZHVjZWRTaGFyZS5wdWIpLnRvU3RyaW5nKCdoZXgnKSwgYml0Z29QZWVyLmdldENvbW1vbktleWNoYWluKCkuc2xpY2UoMCwgNjQpKTtcbiAgICBhc3NlcnQudGhyb3dzKCgpID0+IGRlY29kZVZyZkVudmVsb3BlKHNpZ25pbmdTaGFyZSkpO1xuICAgIGFzc2VydC5zdHJpY3RFcXVhbChiYWNrdXBDaGlsZC5lbmNyeXB0ZWRQcnYsIHVuZGVmaW5lZCk7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKGJpdGdvQ2hpbGQuZW5jcnlwdGVkUHJ2LCB1bmRlZmluZWQpO1xuICB9KTtcblxuICBmb3IgKGNvbnN0IGJhZFBhdGggb2YgW1wibS83J1wiLCAnbS80NC81MDEvNC83JywgXCJtLzQ0Jy81MDEnLzAnLzcnXCJdKSB7XG4gICAgaXQoYHJlamVjdHMgdGhlIG5vbi1CSVA0NCBwYXRoICR7SlNPTi5zdHJpbmdpZnkoYmFkUGF0aCl9IGJlZm9yZSBjb250YWN0aW5nIFdQYCwgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgICAgY29uc3QgeyBiaXRnbywgYmFzZUNvaW4sIHBvc3QsIGFkZGVkS2V5Y2hhaW5zIH0gPSBjcmVhdGVLZXljaGFpbkZpeHR1cmUoKTtcbiAgICAgIGNvbnN0IHV0aWxzID0gbmV3IEVkZHNhVnJmTVBDdjJVdGlscyhiaXRnbywgYmFzZUNvaW4pO1xuXG4gICAgICBhd2FpdCBhc3NlcnQucmVqZWN0cyhcbiAgICAgICAgdXRpbHMuY3JlYXRlU2FmZUNoaWxkS2V5Y2hhaW5zKHtcbiAgICAgICAgICBwYXNzcGhyYXNlOiAncGFzc3BocmFzZScsXG4gICAgICAgICAgZW50ZXJwcmlzZTogJ2VudGVycHJpc2UtaWQnLFxuICAgICAgICAgIHNhZmVJZDogJ3NhZmUtaWQnLFxuICAgICAgICAgIHBhcmVudEtleUlkOiAnYml0Z28tcm9vdC1pZCcsXG4gICAgICAgICAgcGF0aDogYmFkUGF0aCBhcyBEZXJpdmVkRnJvbVBhcmVudFdpdGhIYXJkZW5lZFBhdGgsXG4gICAgICAgICAgdXNlclJvb3RLZXlJZDogJ3VzZXItcm9vdC1pZCcsXG4gICAgICAgICAgYmFja3VwUm9vdEtleUlkOiAnYmFja3VwLXJvb3QtaWQnLFxuICAgICAgICAgIHVzZXJSb290S2V5U2hhcmU6IHVzZXJTaWduaW5nU2hhcmUsXG4gICAgICAgICAgdXNlclJvb3RWcmZLZXlTaGFyZTogdXNlclZyZlNoYXJlLFxuICAgICAgICB9KSxcbiAgICAgICAgL0ludmFsaWQgc2FmZSBCSVA0NCBwYXRoL1xuICAgICAgKTtcbiAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChwb3N0LmNhbGxlZCwgZmFsc2UpO1xuICAgICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChhZGRlZEtleWNoYWlucywgW10pO1xuICAgIH0pO1xuICB9XG5cbiAgY29uc3QgZmF1bHRzOiBBcnJheTwncjEtc2lnbmF0dXJlJyB8ICdyMi1zaWduYXR1cmUnIHwgJ3Nlc3Npb24nIHwgJ2NvbW1vbktleWNoYWluJz4gPSBbXG4gICAgJ3IxLXNpZ25hdHVyZScsXG4gICAgJ3IyLXNpZ25hdHVyZScsXG4gICAgJ3Nlc3Npb24nLFxuICAgICdjb21tb25LZXljaGFpbicsXG4gIF07XG4gIGZvciAoY29uc3QgZmF1bHQgb2YgZmF1bHRzKSB7XG4gICAgaXQoYHJlamVjdHMgJHtmYXVsdH0gYmVmb3JlIHJlZ2lzdGVyaW5nIGFueSBjaGlsZGAsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICAgIGNvbnN0IHJlY29yZGVkS2V5Y2hhaW5zOiBBZGRlZEtleWNoYWluUGFyYW1zW10gPSBbXTtcbiAgICAgIGF3YWl0IGFzc2VydC5yZWplY3RzKFxuICAgICAgICAoKSA9PiBkZXJpdmVXaXRoUGVlcihmYXVsdCwgcmVjb3JkZWRLZXljaGFpbnMpLFxuICAgICAgICBmYXVsdCA9PT0gJ3Nlc3Npb24nXG4gICAgICAgICAgPyAvc2Vzc2lvbiBpZC9pXG4gICAgICAgICAgOiBmYXVsdCA9PT0gJ2NvbW1vbktleWNoYWluJ1xuICAgICAgICAgID8gL2NvbW1vbiBrZXljaGFpbi9pXG4gICAgICAgICAgOiAvc2lnbmF0dXJlfHZlcmlmaWNhdGlvbnxzaWduZWQvaVxuICAgICAgKTtcbiAgICAgIGFzc2VydC5kZWVwU3RyaWN0RXF1YWwocmVjb3JkZWRLZXljaGFpbnMsIFtdKTtcbiAgICB9KTtcbiAgfVxufSk7XG4iXX0=