@bitgo-beta/sdk-lib-mpc 8.2.0-beta.208 → 8.2.0-beta.2080

package/dist/src/tss/ecdsa-dkls/derive.js

@@ -0,0 +1,329 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Derive = exports.DeriveState = void 0;
+const cbor_x_1 = require("cbor-x");
+const buffer_1 = require("buffer");
+const DERIVE_SEED_LENGTH = 32;
+var DeriveState;
+(function (DeriveState) {
+    DeriveState[DeriveState["Uninitialized"] = 0] = "Uninitialized";
+    DeriveState[DeriveState["Round1"] = 1] = "Round1";
+    DeriveState[DeriveState["Round2"] = 2] = "Round2";
+    DeriveState[DeriveState["Complete"] = 3] = "Complete";
+    DeriveState[DeriveState["InvalidState"] = 4] = "InvalidState";
+})(DeriveState || (exports.DeriveState = DeriveState = {}));
+/**
+ * Round driver for the DKLS23 hard-derivation protocol (Ristretto VRF backed),
+ * which derives a child signing keyshare from a root keyshare and its VRF keyshare.
+ *
+ * Each session is a 2-party threshold protocol between this party and one partner:
+ * every round accepts exactly two broadcast messages — this party's own (created by
+ * `initDerive()` and re-fed automatically) and the partner's. A ceremony runs one
+ * `Derive` per SDK party, each paired with the BitGo party:
+ *
+ * - Round 1 (`WaitMsg1`): consume `{own msg1, partner msg1}`, emit own broadcast msg2.
+ * - Round 2 (`WaitMsg2`): consume `{own msg2, partner msg2}`, finalize the session
+ *   and extract the derived DKLS `Keyshare`.
+ *
+ * The session is seeded from the decrypted root blob: the DKLS signing keyshare and
+ * the Ristretto VRF keyshare produced by root keygen, plus the child's hardened
+ * derivation path.
+ *
+ * Party indices follow the MPCv2 convention: 0 = user, 1 = backup, 2 = bitgo.
+ */
+class Derive {
+    constructor(n, t, partyIdx, rootKeyShare, vrfKeyShare, path, seed, vrfWasm) {
+        this.deriveState = DeriveState.Uninitialized;
+        this.n = n;
+        this.t = t;
+        this.partyIdx = partyIdx;
+        this.rootKeyShare = rootKeyShare;
+        this.vrfKeyShare = vrfKeyShare;
+        this.path = path;
+        this.seed = seed;
+        this.vrfWasm = vrfWasm ?? null;
+        this.deriveSessionBytes = new Uint8Array(0);
+    }
+    async loadVrfWasm() {
+        if (!this.vrfWasm) {
+            this.vrfWasm = await Promise.resolve().then(() => __importStar(require('@silencelaboratories/dkls-wasm-ll-vrf-node')));
+        }
+    }
+    getVrfWasm() {
+        if (!this.vrfWasm) {
+            throw Error('VRF wasm not loaded');
+        }
+        return this.vrfWasm;
+    }
+    _restoreSession() {
+        if (!this.deriveSession) {
+            this.deriveSession = this.getVrfWasm().HardDeriveSession.fromBytes(this.deriveSessionBytes);
+        }
+    }
+    /**
+     * Re-derive the round state from the wasm session bytes instead of trusting a
+     * caller-supplied enum. The wasm embeds the round tag (`WaitMsg1`/`WaitMsg2`,
+     * then a `Share` payload once finalized) for exactly this reason.
+     */
+    _deserializeState() {
+        if (!this.deriveSession) {
+            throw Error('Session not initialized');
+        }
+        const decoded = (0, cbor_x_1.decode)(this.deriveSession.toBytes());
+        const round = decoded?.inner?.round;
+        if (round === 'WaitMsg1') {
+            this.deriveState = DeriveState.Round1;
+        }
+        else if (round === 'WaitMsg2') {
+            this.deriveState = DeriveState.Round2;
+        }
+        else if (decoded?.inner?.state?.Share !== undefined || this.deriveSession.isFinished()) {
+            this.deriveState = DeriveState.Complete;
+        }
+        else {
+            this.deriveState = DeriveState.InvalidState;
+            throw Error(`Invalid State: ${JSON.stringify(round)}`);
+        }
+    }
+    /**
+     * Create this party's first hard-derive message (broadcast). Seeds the wasm
+     * session from the root keyshare, VRF keyshare and derivation path.
+     */
+    async initDerive() {
+        if (!this.vrfWasm) {
+            await this.loadVrfWasm();
+        }
+        if (this.t > this.n || this.partyIdx >= this.n) {
+            throw Error('Invalid parameters for hard derive');
+        }
+        if (this.deriveState !== DeriveState.Uninitialized) {
+            throw Error('Hard derive session already initialized');
+        }
+        if (this.seed && this.seed.length !== DERIVE_SEED_LENGTH) {
+            throw Error(`Seed should be ${DERIVE_SEED_LENGTH} bytes, got ${this.seed.length}.`);
+        }
+        if (typeof window !== 'undefined' &&
+            /* checks for electron processes */
+            !window.process &&
+            !window.process?.['type']) {
+            /* This is only needed for browsers/web because it uses fetch to resolve the wasm asset for the web */
+            const initVrf = await Promise.resolve().then(() => __importStar(require('@silencelaboratories/dkls-wasm-ll-vrf-web')));
+            await initVrf.default();
+        }
+        const { HardDeriveSession, Keyshare, VrfKeyshare } = this.getVrfWasm();
+        const rootKeyShare = Keyshare.fromBytes(this.rootKeyShare);
+        if (rootKeyShare.partyId !== this.partyIdx) {
+            throw Error(`Party index: ${this.partyIdx} does not match root key share partyId: ${rootKeyShare.partyId}`);
+        }
+        const vrfKeyShare = VrfKeyshare.fromBytes(this.vrfKeyShare);
+        if (vrfKeyShare.partyId !== this.partyIdx) {
+            throw Error(`Party index: ${this.partyIdx} does not match VRF key share partyId: ${vrfKeyShare.partyId}`);
+        }
+        this.deriveSession = this.seed
+            ? new HardDeriveSession(rootKeyShare, vrfKeyShare, this.path, new Uint8Array(this.seed))
+            : new HardDeriveSession(rootKeyShare, vrfKeyShare, this.path);
+        try {
+            const message = this.deriveSession.createFirstMessage();
+            // Copy the payload out before freeing the wasm message object.
+            const payload = new Uint8Array(message.payload);
+            const from = message.from_id;
+            message.free();
+            this.ownMsg1 = payload;
+            this.deriveSessionBytes = this.deriveSession.toBytes();
+            this._deserializeState();
+            return { payload, from };
+        }
+        catch (e) {
+            throw Error(`Error while creating the first hard-derive message from party ${this.partyIdx}: ${e}`);
+        }
+    }
+    /**
+     * Process the messages this party holds for the current round and return this
+     * party's messages for the next round. Callers pass the partner's broadcast
+     * message only; this party's own message is re-fed automatically because the
+     * wasm session validates the sender set as `{self, partner}`.
+     *
+     * - Round 1 (WaitMsg1): consumes `{own msg1, partner msg1}` and emits this
+     *   party's broadcast msg2.
+     * - Round 2 (WaitMsg2): consumes `{own msg2, partner msg2}` and finalizes the
+     *   session, returning no messages.
+     */
+    handleIncomingMessages(messagesForIthRound) {
+        this._restoreSession();
+        if (!this.deriveSession) {
+            throw Error('Session not initialized');
+        }
+        const { Message } = this.getVrfWasm();
+        let nextRoundMessages = [];
+        const nextRoundDeserializedMessages = { broadcastMessages: [], p2pMessages: [] };
+        try {
+            switch (this.deriveState) {
+                case DeriveState.Round1: {
+                    const partnerMessages = messagesForIthRound.broadcastMessages.filter((m) => m.from !== this.partyIdx);
+                    if (partnerMessages.length !== 1 || !this.ownMsg1) {
+                        throw Error('Expected exactly one broadcast message from the derive partner in round 1');
+                    }
+                    nextRoundMessages = this.deriveSession.handleMessages([
+                        new Message(this.ownMsg1, this.partyIdx),
+                        new Message(partnerMessages[0].payload, partnerMessages[0].from),
+                    ]);
+                    this._deserializeState();
+                    break;
+                }
+                case DeriveState.Round2: {
+                    const partnerMessages = messagesForIthRound.broadcastMessages.filter((m) => m.from !== this.partyIdx);
+                    if (partnerMessages.length !== 1 || !this.ownMsg2) {
+                        throw Error('Expected exactly one broadcast message from the derive partner in round 2');
+                    }
+                    nextRoundMessages = this.deriveSession.handleMessages([
+                        new Message(this.ownMsg2, this.partyIdx),
+                        new Message(partnerMessages[0].payload, partnerMessages[0].from),
+                    ]);
+                    // handleMessages() consumes the session; keyshare() extracts the derived share.
+                    const keyShare = this.deriveSession.keyshare();
+                    this.keyShareBuff = buffer_1.Buffer.from(keyShare.toBytes());
+                    keyShare.free();
+                    this.deriveState = DeriveState.Complete;
+                    return nextRoundDeserializedMessages;
+                }
+                default:
+                    throw Error(`Invalid hard-derive state: ${this.deriveState}`);
+            }
+            nextRoundDeserializedMessages.broadcastMessages = nextRoundMessages
+                .filter((m) => m.to_id === undefined)
+                .map((m) => ({ payload: new Uint8Array(m.payload), from: m.from_id }));
+            nextRoundDeserializedMessages.p2pMessages = nextRoundMessages
+                .filter((m) => m.to_id !== undefined)
+                .map((m) => ({ payload: new Uint8Array(m.payload), from: m.from_id, to: m.to_id }));
+            // The round-1 output is this party's msg2, re-fed into the session on round 2.
+            const ownMsg2 = nextRoundDeserializedMessages.broadcastMessages.find((m) => m.from === this.partyIdx);
+            if (ownMsg2) {
+                this.ownMsg2 = ownMsg2.payload;
+            }
+            return nextRoundDeserializedMessages;
+        }
+        catch (e) {
+            throw Error(`Error while creating hard-derive messages from party ${this.partyIdx}, state ${this.deriveState}: ${e}`);
+        }
+        finally {
+            nextRoundMessages.forEach((m) => m.free());
+            // keyshare() consumed (and deallocated) the session on round 2; only persist
+            // mid-protocol session bytes while the session object still exists.
+            if (this.deriveState !== DeriveState.Complete && this.deriveSession) {
+                this.deriveSessionBytes = this.deriveSession.toBytes();
+            }
+            this.deriveSession = undefined;
+        }
+    }
+    /**
+     * Get the derived DKLS keyshare bytes (CBOR `Keyshare`) once the derive is
+     * complete. This buffer is private key material.
+     */
+    getKeyShare() {
+        if (!this.keyShareBuff) {
+            throw Error('Can not get key share, hard derive is not complete yet.');
+        }
+        return this.keyShareBuff;
+    }
+    /**
+     * Returns a CBOR-encoded ReducedKeyShare buffer containing the derived party's
+     * private scalar (s_i) in the `prv` field. This buffer is private key material;
+     * the caller encrypts it as `reducedEncryptedPrv`, matching `Dkg.getReducedKeyShare`.
+     */
+    getReducedKeyShare() {
+        if (!this.keyShareBuff) {
+            throw Error('Can not get key share, hard derive is not complete yet.');
+        }
+        const decodedKeyshare = (0, cbor_x_1.decode)(this.keyShareBuff);
+        const reducedKeyShare = {
+            bigSList: decodedKeyshare.big_s_list,
+            xList: decodedKeyshare.x_i_list,
+            rootChainCode: decodedKeyshare.root_chain_code,
+            prv: decodedKeyshare.s_i,
+            pub: decodedKeyshare.public_key,
+        };
+        return buffer_1.Buffer.from((0, cbor_x_1.encode)(reducedKeyShare));
+    }
+    /**
+     * Get the current session data that can be used to restore the session later.
+     *
+     * The returned session bytes are secret key material — they carry this party's
+     * root keyshares. They must never be logged or persisted in the clear; the
+     * caller encrypts them exactly like the key share itself.
+     */
+    getSessionData() {
+        const sessionData = {
+            deriveSessionBytes: this.deriveSessionBytes,
+            deriveState: this.deriveState,
+        };
+        if (this.keyShareBuff) {
+            sessionData.keyShareBuff = this.keyShareBuff;
+        }
+        if (this.ownMsg1) {
+            sessionData.ownMsg1 = this.ownMsg1;
+        }
+        if (this.ownMsg2) {
+            sessionData.ownMsg2 = this.ownMsg2;
+        }
+        return sessionData;
+    }
+    /**
+     * Restore a session snapshot captured after initDerive() or round 1 processing.
+     * Do not call this before initDerive() has created session bytes.
+     * The round state is re-derived from the wasm session bytes, not the caller enum.
+     */
+    static async restoreSession(n, t, partyIdx, rootKeyShare, vrfKeyShare, path, sessionData, seed, vrfWasm) {
+        const derive = new Derive(n, t, partyIdx, rootKeyShare, vrfKeyShare, path, seed, vrfWasm);
+        if (!derive.vrfWasm) {
+            await derive.loadVrfWasm();
+        }
+        derive.deriveSessionBytes = sessionData.deriveSessionBytes;
+        if (sessionData.keyShareBuff) {
+            derive.keyShareBuff = sessionData.keyShareBuff;
+        }
+        if (sessionData.ownMsg1) {
+            derive.ownMsg1 = sessionData.ownMsg1;
+        }
+        if (sessionData.ownMsg2) {
+            derive.ownMsg2 = sessionData.ownMsg2;
+        }
+        derive._restoreSession();
+        derive._deserializeState();
+        return derive;
+    }
+}
+exports.Derive = Derive;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVyaXZlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3Rzcy9lY2RzYS1ka2xzL2Rlcml2ZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFTQSxtQ0FBd0M7QUFDeEMsbUNBQWdDO0FBWWhDLE1BQU0sa0JBQWtCLEdBQUcsRUFBRSxDQUFDO0FBSTlCLElBQVksV0FNWDtBQU5ELFdBQVksV0FBVztJQUNyQiwrREFBYSxDQUFBO0lBQ2IsaURBQU0sQ0FBQTtJQUNOLGlEQUFNLENBQUE7SUFDTixxREFBUSxDQUFBO0lBQ1IsNkRBQVksQ0FBQTtBQUNkLENBQUMsRUFOVyxXQUFXLDJCQUFYLFdBQVcsUUFNdEI7QUFZRDs7Ozs7Ozs7Ozs7Ozs7Ozs7O0dBa0JHO0FBQ0gsTUFBYSxNQUFNO0lBa0JqQixZQUNFLENBQVMsRUFDVCxDQUFTLEVBQ1QsUUFBZ0IsRUFDaEIsWUFBb0IsRUFDcEIsV0FBbUIsRUFDbkIsSUFBZ0IsRUFDaEIsSUFBYSxFQUNiLE9BQTBCO1FBZmxCLGdCQUFXLEdBQWdCLFdBQVcsQ0FBQyxhQUFhLENBQUM7UUFpQjdELElBQUksQ0FBQyxDQUFDLEdBQUcsQ0FBQyxDQUFDO1FBQ1gsSUFBSSxDQUFDLENBQUMsR0FBRyxDQUFDLENBQUM7UUFDWCxJQUFJLENBQUMsUUFBUSxHQUFHLFFBQVEsQ0FBQztRQUN6QixJQUFJLENBQUMsWUFBWSxHQUFHLFlBQVksQ0FBQztRQUNqQyxJQUFJLENBQUMsV0FBVyxHQUFHLFdBQVcsQ0FBQztRQUMvQixJQUFJLENBQUMsSUFBSSxHQUFHLElBQUksQ0FBQztRQUNqQixJQUFJLENBQUMsSUFBSSxHQUFHLElBQUksQ0FBQztRQUNqQixJQUFJLENBQUMsT0FBTyxHQUFHLE9BQU8sSUFBSSxJQUFJLENBQUM7UUFDL0IsSUFBSSxDQUFDLGtCQUFrQixHQUFHLElBQUksVUFBVSxDQUFDLENBQUMsQ0FBQyxDQUFDO0lBQzlDLENBQUM7SUFFTyxLQUFLLENBQUMsV0FBVztRQUN2QixJQUFJLENBQUMsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO1lBQ2xCLElBQUksQ0FBQyxPQUFPLEdBQUcsd0RBQWEsNENBQTRDLEdBQUMsQ0FBQztRQUM1RSxDQUFDO0lBQ0gsQ0FBQztJQUVPLFVBQVU7UUFDaEIsSUFBSSxDQUFDLElBQUksQ0FBQyxPQUFPLEVBQUUsQ0FBQztZQUNsQixNQUFNLEtBQUssQ0FBQyxxQkFBcUIsQ0FBQyxDQUFDO1FBQ3JDLENBQUM7UUFDRCxPQUFPLElBQUksQ0FBQyxPQUFPLENBQUM7SUFDdEIsQ0FBQztJQUVPLGVBQWU7UUFDckIsSUFBSSxDQUFDLElBQUksQ0FBQyxhQUFhLEVBQUUsQ0FBQztZQUN4QixJQUFJLENBQUMsYUFBYSxHQUFHLElBQUksQ0FBQyxVQUFVLEVBQUUsQ0FBQyxpQkFBaUIsQ0FBQyxTQUFTLENBQUMsSUFBSSxDQUFDLGtCQUFrQixDQUFDLENBQUM7UUFDOUYsQ0FBQztJQUNILENBQUM7SUFFRDs7OztPQUlHO0lBQ0ssaUJBQWlCO1FBQ3ZCLElBQUksQ0FBQyxJQUFJLENBQUMsYUFBYSxFQUFFLENBQUM7WUFDeEIsTUFBTSxLQUFLLENBQUMseUJBQXlCLENBQUMsQ0FBQztRQUN6QyxDQUFDO1FBQ0QsTUFBTSxPQUFPLEdBQUcsSUFBQSxlQUFNLEVBQUMsSUFBSSxDQUFDLGFBQWEsQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO1FBQ3JELE1BQU0sS0FBSyxHQUFHLE9BQU8sRUFBRSxLQUFLLEVBQUUsS0FBSyxDQUFDO1FBQ3BDLElBQUksS0FBSyxLQUFLLFVBQVUsRUFBRSxDQUFDO1lBQ3pCLElBQUksQ0FBQyxXQUFXLEdBQUcsV0FBVyxDQUFDLE1BQU0sQ0FBQztRQUN4QyxDQUFDO2FBQU0sSUFBSSxLQUFLLEtBQUssVUFBVSxFQUFFLENBQUM7WUFDaEMsSUFBSSxDQUFDLFdBQVcsR0FBRyxXQUFXLENBQUMsTUFBTSxDQUFDO1FBQ3hDLENBQUM7YUFBTSxJQUFJLE9BQU8sRUFBRSxLQUFLLEVBQUUsS0FBSyxFQUFFLEtBQUssS0FBSyxTQUFTLElBQUksSUFBSSxDQUFDLGFBQWEsQ0FBQyxVQUFVLEVBQUUsRUFBRSxDQUFDO1lBQ3pGLElBQUksQ0FBQyxXQUFXLEdBQUcsV0FBVyxDQUFDLFFBQVEsQ0FBQztRQUMxQyxDQUFDO2FBQU0sQ0FBQztZQUNOLElBQUksQ0FBQyxXQUFXLEdBQUcsV0FBVyxDQUFDLFlBQVksQ0FBQztZQUM1QyxNQUFNLEtBQUssQ0FBQyxrQkFBa0IsSUFBSSxDQUFDLFNBQVMsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDLENBQUM7UUFDekQsQ0FBQztJQUNILENBQUM7SUFFRDs7O09BR0c7SUFDSCxLQUFLLENBQUMsVUFBVTtRQUNkLElBQUksQ0FBQyxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7WUFDbEIsTUFBTSxJQUFJLENBQUMsV0FBVyxFQUFFLENBQUM7UUFDM0IsQ0FBQztRQUNELElBQUksSUFBSSxDQUFDLENBQUMsR0FBRyxJQUFJLENBQUMsQ0FBQyxJQUFJLElBQUksQ0FBQyxRQUFRLElBQUksSUFBSSxDQUFDLENBQUMsRUFBRSxDQUFDO1lBQy9DLE1BQU0sS0FBSyxDQUFDLG9DQUFvQyxDQUFDLENBQUM7UUFDcEQsQ0FBQztRQUNELElBQUksSUFBSSxDQUFDLFdBQVcsS0FBSyxXQUFXLENBQUMsYUFBYSxFQUFFLENBQUM7WUFDbkQsTUFBTSxLQUFLLENBQUMseUNBQXlDLENBQUMsQ0FBQztRQUN6RCxDQUFDO1FBQ0QsSUFBSSxJQUFJLENBQUMsSUFBSSxJQUFJLElBQUksQ0FBQyxJQUFJLENBQUMsTUFBTSxLQUFLLGtCQUFrQixFQUFFLENBQUM7WUFDekQsTUFBTSxLQUFLLENBQUMsa0JBQWtCLGtCQUFrQixlQUFlLElBQUksQ0FBQyxJQUFJLENBQUMsTUFBTSxHQUFHLENBQUMsQ0FBQztRQUN0RixDQUFDO1FBQ0QsSUFDRSxPQUFPLE1BQU0sS0FBSyxXQUFXO1lBQzdCLG1DQUFtQztZQUNuQyxDQUFDLE1BQU0sQ0FBQyxPQUFPO1lBQ2YsQ0FBQyxNQUFNLENBQUMsT0FBTyxFQUFFLENBQUMsTUFBTSxDQUFDLEVBQ3pCLENBQUM7WUFDRCxzR0FBc0c7WUFDdEcsTUFBTSxPQUFPLEdBQUcsd0RBQWEsMkNBQTJDLEdBQUMsQ0FBQztZQUMxRSxNQUFNLE9BQU8sQ0FBQyxPQUFPLEVBQUUsQ0FBQztRQUMxQixDQUFDO1FBQ0QsTUFBTSxFQUFFLGlCQUFpQixFQUFFLFFBQVEsRUFBRSxXQUFXLEVBQUUsR0FBRyxJQUFJLENBQUMsVUFBVSxFQUFFLENBQUM7UUFDdkUsTUFBTSxZQUFZLEdBQUcsUUFBUSxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsWUFBWSxDQUFDLENBQUM7UUFDM0QsSUFBSSxZQUFZLENBQUMsT0FBTyxLQUFLLElBQUksQ0FBQyxRQUFRLEVBQUUsQ0FBQztZQUMzQyxNQUFNLEtBQUssQ0FBQyxnQkFBZ0IsSUFBSSxDQUFDLFFBQVEsMkNBQTJDLFlBQVksQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO1FBQzlHLENBQUM7UUFDRCxNQUFNLFdBQVcsR0FBRyxXQUFXLENBQUMsU0FBUyxDQUFDLElBQUksQ0FBQyxXQUFXLENBQUMsQ0FBQztRQUM1RCxJQUFJLFdBQVcsQ0FBQyxPQUFPLEtBQUssSUFBSSxDQUFDLFFBQVEsRUFBRSxDQUFDO1lBQzFDLE1BQU0sS0FBSyxDQUFDLGdCQUFnQixJQUFJLENBQUMsUUFBUSwwQ0FBMEMsV0FBVyxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUM7UUFDNUcsQ0FBQztRQUNELElBQUksQ0FBQyxhQUFhLEdBQUcsSUFBSSxDQUFDLElBQUk7WUFDNUIsQ0FBQyxDQUFDLElBQUksaUJBQWlCLENBQUMsWUFBWSxFQUFFLFdBQVcsRUFBRSxJQUFJLENBQUMsSUFBSSxFQUFFLElBQUksVUFBVSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsQ0FBQztZQUN4RixDQUFDLENBQUMsSUFBSSxpQkFBaUIsQ0FBQyxZQUFZLEVBQUUsV0FBVyxFQUFFLElBQUksQ0FBQyxJQUFJLENBQUMsQ0FBQztRQUNoRSxJQUFJLENBQUM7WUFDSCxNQUFNLE9BQU8sR0FBRyxJQUFJLENBQUMsYUFBYSxDQUFDLGtCQUFrQixFQUFFLENBQUM7WUFDeEQsK0RBQStEO1lBQy9ELE1BQU0sT0FBTyxHQUFHLElBQUksVUFBVSxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztZQUNoRCxNQUFNLElBQUksR0FBRyxPQUFPLENBQUMsT0FBTyxDQUFDO1lBQzdCLE9BQU8sQ0FBQyxJQUFJLEVBQUUsQ0FBQztZQUNmLElBQUksQ0FBQyxPQUFPLEdBQUcsT0FBTyxDQUFDO1lBQ3ZCLElBQUksQ0FBQyxrQkFBa0IsR0FBRyxJQUFJLENBQUMsYUFBYSxDQUFDLE9BQU8sRUFBRSxDQUFDO1lBQ3ZELElBQUksQ0FBQyxpQkFBaUIsRUFBRSxDQUFDO1lBQ3pCLE9BQU8sRUFBRSxPQUFPLEVBQUUsSUFBSSxFQUFFLENBQUM7UUFDM0IsQ0FBQztRQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7WUFDWCxNQUFNLEtBQUssQ0FBQyxpRUFBaUUsSUFBSSxDQUFDLFFBQVEsS0FBSyxDQUFDLEVBQUUsQ0FBQyxDQUFDO1FBQ3RHLENBQUM7SUFDSCxDQUFDO0lBRUQ7Ozs7Ozs7Ozs7T0FVRztJQUNILHNCQUFzQixDQUFDLG1CQUF5QztRQUM5RCxJQUFJLENBQUMsZUFBZSxFQUFFLENBQUM7UUFDdkIsSUFBSSxDQUFDLElBQUksQ0FBQyxhQUFhLEVBQUUsQ0FBQztZQUN4QixNQUFNLEtBQUssQ0FBQyx5QkFBeUIsQ0FBQyxDQUFDO1FBQ3pDLENBQUM7UUFDRCxNQUFNLEVBQUUsT0FBTyxFQUFFLEdBQUcsSUFBSSxDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ3RDLElBQUksaUJBQWlCLEdBQXFCLEVBQUUsQ0FBQztRQUM3QyxNQUFNLDZCQUE2QixHQUF5QixFQUFFLGlCQUFpQixFQUFFLEVBQUUsRUFBRSxXQUFXLEVBQUUsRUFBRSxFQUFFLENBQUM7UUFDdkcsSUFBSSxDQUFDO1lBQ0gsUUFBUSxJQUFJLENBQUMsV0FBVyxFQUFFLENBQUM7Z0JBQ3pCLEtBQUssV0FBVyxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUM7b0JBQ3hCLE1BQU0sZUFBZSxHQUFHLG1CQUFtQixDQUFDLGlCQUFpQixDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLElBQUksS0FBSyxJQUFJLENBQUMsUUFBUSxDQUFDLENBQUM7b0JBQ3RHLElBQUksZUFBZSxDQUFDLE1BQU0sS0FBSyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7d0JBQ2xELE1BQU0sS0FBSyxDQUFDLDJFQUEyRSxDQUFDLENBQUM7b0JBQzNGLENBQUM7b0JBQ0QsaUJBQWlCLEdBQUcsSUFBSSxDQUFDLGFBQWEsQ0FBQyxjQUFjLENBQUM7d0JBQ3BELElBQUksT0FBTyxDQUFDLElBQUksQ0FBQyxPQUFPLEVBQUUsSUFBSSxDQUFDLFFBQVEsQ0FBQzt3QkFDeEMsSUFBSSxPQUFPLENBQUMsZUFBZSxDQUFDLENBQUMsQ0FBQyxDQUFDLE9BQU8sRUFBRSxlQUFlLENBQUMsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDO3FCQUNqRSxDQUFDLENBQUM7b0JBQ0gsSUFBSSxDQUFDLGlCQUFpQixFQUFFLENBQUM7b0JBQ3pCLE1BQU07Z0JBQ1IsQ0FBQztnQkFDRCxLQUFLLFdBQVcsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDO29CQUN4QixNQUFNLGVBQWUsR0FBRyxtQkFBbUIsQ0FBQyxpQkFBaUIsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxJQUFJLEtBQUssSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO29CQUN0RyxJQUFJLGVBQWUsQ0FBQyxNQUFNLEtBQUssQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO3dCQUNsRCxNQUFNLEtBQUssQ0FBQywyRUFBMkUsQ0FBQyxDQUFDO29CQUMzRixDQUFDO29CQUNELGlCQUFpQixHQUFHLElBQUksQ0FBQyxhQUFhLENBQUMsY0FBYyxDQUFDO3dCQUNwRCxJQUFJLE9BQU8sQ0FBQyxJQUFJLENBQUMsT0FBTyxFQUFFLElBQUksQ0FBQyxRQUFRLENBQUM7d0JBQ3hDLElBQUksT0FBTyxDQUFDLGVBQWUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxPQUFPLEVBQUUsZUFBZSxDQUFDLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQztxQkFDakUsQ0FBQyxDQUFDO29CQUNILGdGQUFnRjtvQkFDaEYsTUFBTSxRQUFRLEdBQUcsSUFBSSxDQUFDLGFBQWEsQ0FBQyxRQUFRLEVBQUUsQ0FBQztvQkFDL0MsSUFBSSxDQUFDLFlBQVksR0FBRyxlQUFNLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO29CQUNwRCxRQUFRLENBQUMsSUFBSSxFQUFFLENBQUM7b0JBQ2hCLElBQUksQ0FBQyxXQUFXLEdBQUcsV0FBVyxDQUFDLFFBQVEsQ0FBQztvQkFDeEMsT0FBTyw2QkFBNkIsQ0FBQztnQkFDdkMsQ0FBQztnQkFDRDtvQkFDRSxNQUFNLEtBQUssQ0FBQyw4QkFBOEIsSUFBSSxDQUFDLFdBQVcsRUFBRSxDQUFDLENBQUM7WUFDbEUsQ0FBQztZQUVELDZCQUE2QixDQUFDLGlCQUFpQixHQUFHLGlCQUFpQjtpQkFDaEUsTUFBTSxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsS0FBSyxLQUFLLFNBQVMsQ0FBQztpQkFDcEMsR0FBRyxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLEVBQUUsT0FBTyxFQUFFLElBQUksVUFBVSxDQUFDLENBQUMsQ0FBQyxPQUFPLENBQUMsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUMsQ0FBQztZQUN6RSw2QkFBNkIsQ0FBQyxXQUFXLEdBQUcsaUJBQWlCO2lCQUMxRCxNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQTJDLEVBQUUsQ0FBQyxDQUFDLENBQUMsS0FBSyxLQUFLLFNBQVMsQ0FBQztpQkFDN0UsR0FBRyxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLEVBQUUsT0FBTyxFQUFFLElBQUksVUFBVSxDQUFDLENBQUMsQ0FBQyxPQUFPLENBQUMsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDLE9BQU8sRUFBRSxFQUFFLEVBQUUsQ0FBQyxDQUFDLEtBQUssRUFBRSxDQUFDLENBQUMsQ0FBQztZQUN0RiwrRUFBK0U7WUFDL0UsTUFBTSxPQUFPLEdBQUcsNkJBQTZCLENBQUMsaUJBQWlCLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsSUFBSSxLQUFLLElBQUksQ0FBQyxRQUFRLENBQUMsQ0FBQztZQUN0RyxJQUFJLE9BQU8sRUFBRSxDQUFDO2dCQUNaLElBQUksQ0FBQyxPQUFPLEdBQUcsT0FBTyxDQUFDLE9BQU8sQ0FBQztZQUNqQyxDQUFDO1lBQ0QsT0FBTyw2QkFBNkIsQ0FBQztRQUN2QyxDQUFDO1FBQUMsT0FBTyxDQUFDLEVBQUUsQ0FBQztZQUNYLE1BQU0sS0FBSyxDQUNULHdEQUF3RCxJQUFJLENBQUMsUUFBUSxXQUFXLElBQUksQ0FBQyxXQUFXLEtBQUssQ0FBQyxFQUFFLENBQ3pHLENBQUM7UUFDSixDQUFDO2dCQUFTLENBQUM7WUFDVCxpQkFBaUIsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxJQUFJLEVBQUUsQ0FBQyxDQUFDO1lBQzNDLDZFQUE2RTtZQUM3RSxvRUFBb0U7WUFDcEUsSUFBSSxJQUFJLENBQUMsV0FBVyxLQUFLLFdBQVcsQ0FBQyxRQUFRLElBQUksSUFBSSxDQUFDLGFBQWEsRUFBRSxDQUFDO2dCQUNwRSxJQUFJLENBQUMsa0JBQWtCLEdBQUcsSUFBSSxDQUFDLGFBQWEsQ0FBQyxPQUFPLEVBQUUsQ0FBQztZQUN6RCxDQUFDO1lBQ0QsSUFBSSxDQUFDLGFBQWEsR0FBRyxTQUFTLENBQUM7UUFDakMsQ0FBQztJQUNILENBQUM7SUFFRDs7O09BR0c7SUFDSCxXQUFXO1FBQ1QsSUFBSSxDQUFDLElBQUksQ0FBQyxZQUFZLEVBQUUsQ0FBQztZQUN2QixNQUFNLEtBQUssQ0FBQyx5REFBeUQsQ0FBQyxDQUFDO1FBQ3pFLENBQUM7UUFDRCxPQUFPLElBQUksQ0FBQyxZQUFZLENBQUM7SUFDM0IsQ0FBQztJQUVEOzs7O09BSUc7SUFDSCxrQkFBa0I7UUFDaEIsSUFBSSxDQUFDLElBQUksQ0FBQyxZQUFZLEVBQUUsQ0FBQztZQUN2QixNQUFNLEtBQUssQ0FBQyx5REFBeUQsQ0FBQyxDQUFDO1FBQ3pFLENBQUM7UUFDRCxNQUFNLGVBQWUsR0FBRyxJQUFBLGVBQU0sRUFBQyxJQUFJLENBQUMsWUFBWSxDQUFDLENBQUM7UUFDbEQsTUFBTSxlQUFlLEdBQW9CO1lBQ3ZDLFFBQVEsRUFBRSxlQUFlLENBQUMsVUFBVTtZQUNwQyxLQUFLLEVBQUUsZUFBZSxDQUFDLFFBQVE7WUFDL0IsYUFBYSxFQUFFLGVBQWUsQ0FBQyxlQUFlO1lBQzlDLEdBQUcsRUFBRSxlQUFlLENBQUMsR0FBRztZQUN4QixHQUFHLEVBQUUsZUFBZSxDQUFDLFVBQVU7U0FDaEMsQ0FBQztRQUNGLE9BQU8sZUFBTSxDQUFDLElBQUksQ0FBQyxJQUFBLGVBQU0sRUFBQyxlQUFlLENBQUMsQ0FBQyxDQUFDO0lBQzlDLENBQUM7SUFFRDs7Ozs7O09BTUc7SUFDSCxjQUFjO1FBQ1osTUFBTSxXQUFXLEdBQXNCO1lBQ3JDLGtCQUFrQixFQUFFLElBQUksQ0FBQyxrQkFBa0I7WUFDM0MsV0FBVyxFQUFFLElBQUksQ0FBQyxXQUFXO1NBQzlCLENBQUM7UUFDRixJQUFJLElBQUksQ0FBQyxZQUFZLEVBQUUsQ0FBQztZQUN0QixXQUFXLENBQUMsWUFBWSxHQUFHLElBQUksQ0FBQyxZQUFZLENBQUM7UUFDL0MsQ0FBQztRQUNELElBQUksSUFBSSxDQUFDLE9BQU8sRUFBRSxDQUFDO1lBQ2pCLFdBQVcsQ0FBQyxPQUFPLEdBQUcsSUFBSSxDQUFDLE9BQU8sQ0FBQztRQUNyQyxDQUFDO1FBQ0QsSUFBSSxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7WUFDakIsV0FBVyxDQUFDLE9BQU8sR0FBRyxJQUFJLENBQUMsT0FBTyxDQUFDO1FBQ3JDLENBQUM7UUFDRCxPQUFPLFdBQVcsQ0FBQztJQUNyQixDQUFDO0lBRUQ7Ozs7T0FJRztJQUNILE1BQU0sQ0FBQyxLQUFLLENBQUMsY0FBYyxDQUN6QixDQUFTLEVBQ1QsQ0FBUyxFQUNULFFBQWdCLEVBQ2hCLFlBQW9CLEVBQ3BCLFdBQW1CLEVBQ25CLElBQWdCLEVBQ2hCLFdBQThCLEVBQzlCLElBQWEsRUFDYixPQUEwQjtRQUUxQixNQUFNLE1BQU0sR0FBRyxJQUFJLE1BQU0sQ0FBQyxDQUFDLEVBQUUsQ0FBQyxFQUFFLFFBQVEsRUFBRSxZQUFZLEVBQUUsV0FBVyxFQUFFLElBQUksRUFBRSxJQUFJLEVBQUUsT0FBTyxDQUFDLENBQUM7UUFDMUYsSUFBSSxDQUFDLE1BQU0sQ0FBQyxPQUFPLEVBQUUsQ0FBQztZQUNwQixNQUFNLE1BQU0sQ0FBQyxXQUFXLEVBQUUsQ0FBQztRQUM3QixDQUFDO1FBQ0QsTUFBTSxDQUFDLGtCQUFrQixHQUFHLFdBQVcsQ0FBQyxrQkFBa0IsQ0FBQztRQUMzRCxJQUFJLFdBQVcsQ0FBQyxZQUFZLEVBQUUsQ0FBQztZQUM3QixNQUFNLENBQUMsWUFBWSxHQUFHLFdBQVcsQ0FBQyxZQUFZLENBQUM7UUFDakQsQ0FBQztRQUNELElBQUksV0FBVyxDQUFDLE9BQU8sRUFBRSxDQUFDO1lBQ3hCLE1BQU0sQ0FBQyxPQUFPLEdBQUcsV0FBVyxDQUFDLE9BQU8sQ0FBQztRQUN2QyxDQUFDO1FBQ0QsSUFBSSxXQUFXLENBQUMsT0FBTyxFQUFFLENBQUM7WUFDeEIsTUFBTSxDQUFDLE9BQU8sR0FBRyxXQUFXLENBQUMsT0FBTyxDQUFDO1FBQ3ZDLENBQUM7UUFDRCxNQUFNLENBQUMsZUFBZSxFQUFFLENBQUM7UUFDekIsTUFBTSxDQUFDLGlCQUFpQixFQUFFLENBQUM7UUFDM0IsT0FBTyxNQUFNLENBQUM7SUFDaEIsQ0FBQztDQUNGO0FBaFRELHdCQWdUQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB0eXBlIHtcbiAgSGFyZERlcml2ZVNlc3Npb24gYXMgRGtsc0hhcmREZXJpdmVTZXNzaW9uLFxuICBNZXNzYWdlIGFzIFZyZldhc21NZXNzYWdlLFxuICBWcmZLZXlnZW5TZXNzaW9uIGFzIERrbHNWcmZLZXlnZW5TZXNzaW9uLFxufSBmcm9tICdAc2lsZW5jZWxhYm9yYXRvcmllcy9ka2xzLXdhc20tbGwtdnJmLW5vZGUnO1xuaW1wb3J0IHR5cGUge1xuICBIYXJkRGVyaXZlU2Vzc2lvbiBhcyBEa2xzVnJmV2ViSGFyZERlcml2ZVNlc3Npb24sXG4gIFZyZktleWdlblNlc3Npb24gYXMgRGtsc1ZyZldlYktleWdlblNlc3Npb24sXG59IGZyb20gJ0BzaWxlbmNlbGFib3JhdG9yaWVzL2RrbHMtd2FzbS1sbC12cmYtd2ViJztcbmltcG9ydCB7IGRlY29kZSwgZW5jb2RlIH0gZnJvbSAnY2Jvci14JztcbmltcG9ydCB7IEJ1ZmZlciB9IGZyb20gJ2J1ZmZlcic7XG5pbXBvcnQgeyBEZXNlcmlhbGl6ZWRCcm9hZGNhc3RNZXNzYWdlLCBEZXNlcmlhbGl6ZWRNZXNzYWdlcywgUmVkdWNlZEtleVNoYXJlIH0gZnJvbSAnLi90eXBlcyc7XG5cbi8vIFBsYXRmb3JtLXNwZWNpZmljIG1vZHVsZXMgdGhhdCBkbyBub3QgZXhpc3QgZXZlcnl3aGVyZTogdGhlIG5vZGUvd2ViL2J1bmRsZXIgd2FzbVxuLy8gdmFyaWFudHMgYXJlIG11dHVhbGx5IGV4Y2x1c2l2ZSBhbmQgc2VsZWN0ZWQgYXQgcnVudGltZSAobm9kZSBwcm9jZXNzIHZzIGJyb3dzZXIgdnNcbi8vIGJ1bmRsZXIpLiBTdGF0aWMgaW1wb3J0cyB3b3VsZCBsb2FkIHRoZSB3cm9uZyBwbGF0Zm9ybSdzIHdhc20gYmluZGluZywgc28gYm90aCB0aGVcbi8vIHR5cGUgYWxpYXNlcyBiZWxvdyBhbmQgdGhlIGxhenkgYGF3YWl0IGltcG9ydCgpYCBjYWxscyBhcmUgZGVsaWJlcmF0ZS5cbnR5cGUgTm9kZVZyZldhc21lciA9IHR5cGVvZiBpbXBvcnQoJ0BzaWxlbmNlbGFib3JhdG9yaWVzL2RrbHMtd2FzbS1sbC12cmYtbm9kZScpO1xudHlwZSBXZWJWcmZXYXNtZXIgPSB0eXBlb2YgaW1wb3J0KCdAc2lsZW5jZWxhYm9yYXRvcmllcy9ka2xzLXdhc20tbGwtdnJmLXdlYicpO1xudHlwZSBCdW5kbGVyVnJmV2FzbWVyID0gdHlwZW9mIGltcG9ydCgnQHNpbGVuY2VsYWJvcmF0b3JpZXMvZGtscy13YXNtLWxsLXZyZi1idW5kbGVyJyk7XG5cbnR5cGUgVnJmV2FzbSA9IE5vZGVWcmZXYXNtZXIgfCBXZWJWcmZXYXNtZXIgfCBCdW5kbGVyVnJmV2FzbWVyO1xuY29uc3QgREVSSVZFX1NFRURfTEVOR1RIID0gMzI7XG5cbmV4cG9ydCB0eXBlIHsgRGtsc0hhcmREZXJpdmVTZXNzaW9uLCBEa2xzVnJmV2ViSGFyZERlcml2ZVNlc3Npb24sIERrbHNWcmZLZXlnZW5TZXNzaW9uLCBEa2xzVnJmV2ViS2V5Z2VuU2Vzc2lvbiB9O1xuXG5leHBvcnQgZW51bSBEZXJpdmVTdGF0ZSB7XG4gIFVuaW5pdGlhbGl6ZWQsXG4gIFJvdW5kMSxcbiAgUm91bmQyLFxuICBDb21wbGV0ZSxcbiAgSW52YWxpZFN0YXRlLFxufVxuXG5leHBvcnQgaW50ZXJmYWNlIERlcml2ZVNlc3Npb25EYXRhIHtcbiAgZGVyaXZlU2Vzc2lvbkJ5dGVzOiBVaW50OEFycmF5O1xuICBkZXJpdmVTdGF0ZTogRGVyaXZlU3RhdGU7XG4gIGtleVNoYXJlQnVmZj86IEJ1ZmZlcjtcbiAgLy8gVGhpcyBwYXJ0eSdzIG93biBwcm90b2NvbCBtZXNzYWdlcywgcmUtZmVkIGludG8gdGhlIHNlc3Npb24gb24gdGhlIG5leHQgcm91bmRcbiAgLy8gYmVjYXVzZSB0aGUgd2FzbSBzZXNzaW9uIHZhbGlkYXRlcyB0aGUgc2VuZGVyIHNldCBhZ2FpbnN0IHtzZWxmLCBwYXJ0bmVyfS5cbiAgb3duTXNnMT86IFVpbnQ4QXJyYXk7XG4gIG93bk1zZzI/OiBVaW50OEFycmF5O1xufVxuXG4vKipcbiAqIFJvdW5kIGRyaXZlciBmb3IgdGhlIERLTFMyMyBoYXJkLWRlcml2YXRpb24gcHJvdG9jb2wgKFJpc3RyZXR0byBWUkYgYmFja2VkKSxcbiAqIHdoaWNoIGRlcml2ZXMgYSBjaGlsZCBzaWduaW5nIGtleXNoYXJlIGZyb20gYSByb290IGtleXNoYXJlIGFuZCBpdHMgVlJGIGtleXNoYXJlLlxuICpcbiAqIEVhY2ggc2Vzc2lvbiBpcyBhIDItcGFydHkgdGhyZXNob2xkIHByb3RvY29sIGJldHdlZW4gdGhpcyBwYXJ0eSBhbmQgb25lIHBhcnRuZXI6XG4gKiBldmVyeSByb3VuZCBhY2NlcHRzIGV4YWN0bHkgdHdvIGJyb2FkY2FzdCBtZXNzYWdlcyDigJQgdGhpcyBwYXJ0eSdzIG93biAoY3JlYXRlZCBieVxuICogYGluaXREZXJpdmUoKWAgYW5kIHJlLWZlZCBhdXRvbWF0aWNhbGx5KSBhbmQgdGhlIHBhcnRuZXIncy4gQSBjZXJlbW9ueSBydW5zIG9uZVxuICogYERlcml2ZWAgcGVyIFNESyBwYXJ0eSwgZWFjaCBwYWlyZWQgd2l0aCB0aGUgQml0R28gcGFydHk6XG4gKlxuICogLSBSb3VuZCAxIChgV2FpdE1zZzFgKTogY29uc3VtZSBge293biBtc2cxLCBwYXJ0bmVyIG1zZzF9YCwgZW1pdCBvd24gYnJvYWRjYXN0IG1zZzIuXG4gKiAtIFJvdW5kIDIgKGBXYWl0TXNnMmApOiBjb25zdW1lIGB7b3duIG1zZzIsIHBhcnRuZXIgbXNnMn1gLCBmaW5hbGl6ZSB0aGUgc2Vzc2lvblxuICogICBhbmQgZXh0cmFjdCB0aGUgZGVyaXZlZCBES0xTIGBLZXlzaGFyZWAuXG4gKlxuICogVGhlIHNlc3Npb24gaXMgc2VlZGVkIGZyb20gdGhlIGRlY3J5cHRlZCByb290IGJsb2I6IHRoZSBES0xTIHNpZ25pbmcga2V5c2hhcmUgYW5kXG4gKiB0aGUgUmlzdHJldHRvIFZSRiBrZXlzaGFyZSBwcm9kdWNlZCBieSByb290IGtleWdlbiwgcGx1cyB0aGUgY2hpbGQncyBoYXJkZW5lZFxuICogZGVyaXZhdGlvbiBwYXRoLlxuICpcbiAqIFBhcnR5IGluZGljZXMgZm9sbG93IHRoZSBNUEN2MiBjb252ZW50aW9uOiAwID0gdXNlciwgMSA9IGJhY2t1cCwgMiA9IGJpdGdvLlxuICovXG5leHBvcnQgY2xhc3MgRGVyaXZlIHtcbiAgcHJvdGVjdGVkIGRlcml2ZVNlc3Npb246IERrbHNIYXJkRGVyaXZlU2Vzc2lvbiB8IERrbHNWcmZXZWJIYXJkRGVyaXZlU2Vzc2lvbiB8IHVuZGVmaW5lZDtcbiAgcHJvdGVjdGVkIGRlcml2ZVNlc3Npb25CeXRlczogVWludDhBcnJheTtcbiAgcHJvdGVjdGVkIGtleVNoYXJlQnVmZjogQnVmZmVyIHwgdW5kZWZpbmVkO1xuICBwcm90ZWN0ZWQgbjogbnVtYmVyO1xuICBwcm90ZWN0ZWQgdDogbnVtYmVyO1xuICBwcm90ZWN0ZWQgcGFydHlJZHg6IG51bWJlcjtcbiAgcHJvdGVjdGVkIHJvb3RLZXlTaGFyZTogQnVmZmVyO1xuICBwcm90ZWN0ZWQgdnJmS2V5U2hhcmU6IEJ1ZmZlcjtcbiAgcHJvdGVjdGVkIHBhdGg6IFVpbnQ4QXJyYXk7XG4gIHByb3RlY3RlZCBzZWVkOiBCdWZmZXIgfCB1bmRlZmluZWQ7XG4gIHByb3RlY3RlZCBkZXJpdmVTdGF0ZTogRGVyaXZlU3RhdGUgPSBEZXJpdmVTdGF0ZS5VbmluaXRpYWxpemVkO1xuICBwcm90ZWN0ZWQgdnJmV2FzbTogVnJmV2FzbSB8IG51bGw7XG4gIC8vIFRoaXMgcGFydHkncyBvd24gcHJvdG9jb2wgbWVzc2FnZXMsIHJlLWZlZCBpbnRvIHRoZSBzZXNzaW9uIG9uIHRoZSBuZXh0IHJvdW5kOlxuICAvLyB0aGUgd2FzbSBoYXJkLWRlcml2ZSBzZXNzaW9uIHZhbGlkYXRlcyB0aGUgc2VuZGVyIHNldCBhZ2FpbnN0IHtzZWxmLCBwYXJ0bmVyfS5cbiAgcHJvdGVjdGVkIG93bk1zZzE6IFVpbnQ4QXJyYXkgfCB1bmRlZmluZWQ7XG4gIHByb3RlY3RlZCBvd25Nc2cyOiBVaW50OEFycmF5IHwgdW5kZWZpbmVkO1xuXG4gIGNvbnN0cnVjdG9yKFxuICAgIG46IG51bWJlcixcbiAgICB0OiBudW1iZXIsXG4gICAgcGFydHlJZHg6IG51bWJlcixcbiAgICByb290S2V5U2hhcmU6IEJ1ZmZlcixcbiAgICB2cmZLZXlTaGFyZTogQnVmZmVyLFxuICAgIHBhdGg6IFVpbnQ4QXJyYXksXG4gICAgc2VlZD86IEJ1ZmZlcixcbiAgICB2cmZXYXNtPzogQnVuZGxlclZyZldhc21lclxuICApIHtcbiAgICB0aGlzLm4gPSBuO1xuICAgIHRoaXMudCA9IHQ7XG4gICAgdGhpcy5wYXJ0eUlkeCA9IHBhcnR5SWR4O1xuICAgIHRoaXMucm9vdEtleVNoYXJlID0gcm9vdEtleVNoYXJlO1xuICAgIHRoaXMudnJmS2V5U2hhcmUgPSB2cmZLZXlTaGFyZTtcbiAgICB0aGlzLnBhdGggPSBwYXRoO1xuICAgIHRoaXMuc2VlZCA9IHNlZWQ7XG4gICAgdGhpcy52cmZXYXNtID0gdnJmV2FzbSA/PyBudWxsO1xuICAgIHRoaXMuZGVyaXZlU2Vzc2lvbkJ5dGVzID0gbmV3IFVpbnQ4QXJyYXkoMCk7XG4gIH1cblxuICBwcml2YXRlIGFzeW5jIGxvYWRWcmZXYXNtKCk6IFByb21pc2U8dm9pZD4ge1xuICAgIGlmICghdGhpcy52cmZXYXNtKSB7XG4gICAgICB0aGlzLnZyZldhc20gPSBhd2FpdCBpbXBvcnQoJ0BzaWxlbmNlbGFib3JhdG9yaWVzL2RrbHMtd2FzbS1sbC12cmYtbm9kZScpO1xuICAgIH1cbiAgfVxuXG4gIHByaXZhdGUgZ2V0VnJmV2FzbSgpIHtcbiAgICBpZiAoIXRoaXMudnJmV2FzbSkge1xuICAgICAgdGhyb3cgRXJyb3IoJ1ZSRiB3YXNtIG5vdCBsb2FkZWQnKTtcbiAgICB9XG4gICAgcmV0dXJuIHRoaXMudnJmV2FzbTtcbiAgfVxuXG4gIHByaXZhdGUgX3Jlc3RvcmVTZXNzaW9uKCkge1xuICAgIGlmICghdGhpcy5kZXJpdmVTZXNzaW9uKSB7XG4gICAgICB0aGlzLmRlcml2ZVNlc3Npb24gPSB0aGlzLmdldFZyZldhc20oKS5IYXJkRGVyaXZlU2Vzc2lvbi5mcm9tQnl0ZXModGhpcy5kZXJpdmVTZXNzaW9uQnl0ZXMpO1xuICAgIH1cbiAgfVxuXG4gIC8qKlxuICAgKiBSZS1kZXJpdmUgdGhlIHJvdW5kIHN0YXRlIGZyb20gdGhlIHdhc20gc2Vzc2lvbiBieXRlcyBpbnN0ZWFkIG9mIHRydXN0aW5nIGFcbiAgICogY2FsbGVyLXN1cHBsaWVkIGVudW0uIFRoZSB3YXNtIGVtYmVkcyB0aGUgcm91bmQgdGFnIChgV2FpdE1zZzFgL2BXYWl0TXNnMmAsXG4gICAqIHRoZW4gYSBgU2hhcmVgIHBheWxvYWQgb25jZSBmaW5hbGl6ZWQpIGZvciBleGFjdGx5IHRoaXMgcmVhc29uLlxuICAgKi9cbiAgcHJpdmF0ZSBfZGVzZXJpYWxpemVTdGF0ZSgpIHtcbiAgICBpZiAoIXRoaXMuZGVyaXZlU2Vzc2lvbikge1xuICAgICAgdGhyb3cgRXJyb3IoJ1Nlc3Npb24gbm90IGluaXRpYWxpemVkJyk7XG4gICAgfVxuICAgIGNvbnN0IGRlY29kZWQgPSBkZWNvZGUodGhpcy5kZXJpdmVTZXNzaW9uLnRvQnl0ZXMoKSk7XG4gICAgY29uc3Qgcm91bmQgPSBkZWNvZGVkPy5pbm5lcj8ucm91bmQ7XG4gICAgaWYgKHJvdW5kID09PSAnV2FpdE1zZzEnKSB7XG4gICAgICB0aGlzLmRlcml2ZVN0YXRlID0gRGVyaXZlU3RhdGUuUm91bmQxO1xuICAgIH0gZWxzZSBpZiAocm91bmQgPT09ICdXYWl0TXNnMicpIHtcbiAgICAgIHRoaXMuZGVyaXZlU3RhdGUgPSBEZXJpdmVTdGF0ZS5Sb3VuZDI7XG4gICAgfSBlbHNlIGlmIChkZWNvZGVkPy5pbm5lcj8uc3RhdGU/LlNoYXJlICE9PSB1bmRlZmluZWQgfHwgdGhpcy5kZXJpdmVTZXNzaW9uLmlzRmluaXNoZWQoKSkge1xuICAgICAgdGhpcy5kZXJpdmVTdGF0ZSA9IERlcml2ZVN0YXRlLkNvbXBsZXRlO1xuICAgIH0gZWxzZSB7XG4gICAgICB0aGlzLmRlcml2ZVN0YXRlID0gRGVyaXZlU3RhdGUuSW52YWxpZFN0YXRlO1xuICAgICAgdGhyb3cgRXJyb3IoYEludmFsaWQgU3RhdGU6ICR7SlNPTi5zdHJpbmdpZnkocm91bmQpfWApO1xuICAgIH1cbiAgfVxuXG4gIC8qKlxuICAgKiBDcmVhdGUgdGhpcyBwYXJ0eSdzIGZpcnN0IGhhcmQtZGVyaXZlIG1lc3NhZ2UgKGJyb2FkY2FzdCkuIFNlZWRzIHRoZSB3YXNtXG4gICAqIHNlc3Npb24gZnJvbSB0aGUgcm9vdCBrZXlzaGFyZSwgVlJGIGtleXNoYXJlIGFuZCBkZXJpdmF0aW9uIHBhdGguXG4gICAqL1xuICBhc3luYyBpbml0RGVyaXZlKCk6IFByb21pc2U8RGVzZXJpYWxpemVkQnJvYWRjYXN0TWVzc2FnZT4ge1xuICAgIGlmICghdGhpcy52cmZXYXNtKSB7XG4gICAgICBhd2FpdCB0aGlzLmxvYWRWcmZXYXNtKCk7XG4gICAgfVxuICAgIGlmICh0aGlzLnQgPiB0aGlzLm4gfHwgdGhpcy5wYXJ0eUlkeCA+PSB0aGlzLm4pIHtcbiAgICAgIHRocm93IEVycm9yKCdJbnZhbGlkIHBhcmFtZXRlcnMgZm9yIGhhcmQgZGVyaXZlJyk7XG4gICAgfVxuICAgIGlmICh0aGlzLmRlcml2ZVN0YXRlICE9PSBEZXJpdmVTdGF0ZS5VbmluaXRpYWxpemVkKSB7XG4gICAgICB0aHJvdyBFcnJvcignSGFyZCBkZXJpdmUgc2Vzc2lvbiBhbHJlYWR5IGluaXRpYWxpemVkJyk7XG4gICAgfVxuICAgIGlmICh0aGlzLnNlZWQgJiYgdGhpcy5zZWVkLmxlbmd0aCAhPT0gREVSSVZFX1NFRURfTEVOR1RIKSB7XG4gICAgICB0aHJvdyBFcnJvcihgU2VlZCBzaG91bGQgYmUgJHtERVJJVkVfU0VFRF9MRU5HVEh9IGJ5dGVzLCBnb3QgJHt0aGlzLnNlZWQubGVuZ3RofS5gKTtcbiAgICB9XG4gICAgaWYgKFxuICAgICAgdHlwZW9mIHdpbmRvdyAhPT0gJ3VuZGVmaW5lZCcgJiZcbiAgICAgIC8qIGNoZWNrcyBmb3IgZWxlY3Ryb24gcHJvY2Vzc2VzICovXG4gICAgICAhd2luZG93LnByb2Nlc3MgJiZcbiAgICAgICF3aW5kb3cucHJvY2Vzcz8uWyd0eXBlJ11cbiAgICApIHtcbiAgICAgIC8qIFRoaXMgaXMgb25seSBuZWVkZWQgZm9yIGJyb3dzZXJzL3dlYiBiZWNhdXNlIGl0IHVzZXMgZmV0Y2ggdG8gcmVzb2x2ZSB0aGUgd2FzbSBhc3NldCBmb3IgdGhlIHdlYiAqL1xuICAgICAgY29uc3QgaW5pdFZyZiA9IGF3YWl0IGltcG9ydCgnQHNpbGVuY2VsYWJvcmF0b3JpZXMvZGtscy13YXNtLWxsLXZyZi13ZWInKTtcbiAgICAgIGF3YWl0IGluaXRWcmYuZGVmYXVsdCgpO1xuICAgIH1cbiAgICBjb25zdCB7IEhhcmREZXJpdmVTZXNzaW9uLCBLZXlzaGFyZSwgVnJmS2V5c2hhcmUgfSA9IHRoaXMuZ2V0VnJmV2FzbSgpO1xuICAgIGNvbnN0IHJvb3RLZXlTaGFyZSA9IEtleXNoYXJlLmZyb21CeXRlcyh0aGlzLnJvb3RLZXlTaGFyZSk7XG4gICAgaWYgKHJvb3RLZXlTaGFyZS5wYXJ0eUlkICE9PSB0aGlzLnBhcnR5SWR4KSB7XG4gICAgICB0aHJvdyBFcnJvcihgUGFydHkgaW5kZXg6ICR7dGhpcy5wYXJ0eUlkeH0gZG9lcyBub3QgbWF0Y2ggcm9vdCBrZXkgc2hhcmUgcGFydHlJZDogJHtyb290S2V5U2hhcmUucGFydHlJZH1gKTtcbiAgICB9XG4gICAgY29uc3QgdnJmS2V5U2hhcmUgPSBWcmZLZXlzaGFyZS5mcm9tQnl0ZXModGhpcy52cmZLZXlTaGFyZSk7XG4gICAgaWYgKHZyZktleVNoYXJlLnBhcnR5SWQgIT09IHRoaXMucGFydHlJZHgpIHtcbiAgICAgIHRocm93IEVycm9yKGBQYXJ0eSBpbmRleDogJHt0aGlzLnBhcnR5SWR4fSBkb2VzIG5vdCBtYXRjaCBWUkYga2V5IHNoYXJlIHBhcnR5SWQ6ICR7dnJmS2V5U2hhcmUucGFydHlJZH1gKTtcbiAgICB9XG4gICAgdGhpcy5kZXJpdmVTZXNzaW9uID0gdGhpcy5zZWVkXG4gICAgICA/IG5ldyBIYXJkRGVyaXZlU2Vzc2lvbihyb290S2V5U2hhcmUsIHZyZktleVNoYXJlLCB0aGlzLnBhdGgsIG5ldyBVaW50OEFycmF5KHRoaXMuc2VlZCkpXG4gICAgICA6IG5ldyBIYXJkRGVyaXZlU2Vzc2lvbihyb290S2V5U2hhcmUsIHZyZktleVNoYXJlLCB0aGlzLnBhdGgpO1xuICAgIHRyeSB7XG4gICAgICBjb25zdCBtZXNzYWdlID0gdGhpcy5kZXJpdmVTZXNzaW9uLmNyZWF0ZUZpcnN0TWVzc2FnZSgpO1xuICAgICAgLy8gQ29weSB0aGUgcGF5bG9hZCBvdXQgYmVmb3JlIGZyZWVpbmcgdGhlIHdhc20gbWVzc2FnZSBvYmplY3QuXG4gICAgICBjb25zdCBwYXlsb2FkID0gbmV3IFVpbnQ4QXJyYXkobWVzc2FnZS5wYXlsb2FkKTtcbiAgICAgIGNvbnN0IGZyb20gPSBtZXNzYWdlLmZyb21faWQ7XG4gICAgICBtZXNzYWdlLmZyZWUoKTtcbiAgICAgIHRoaXMub3duTXNnMSA9IHBheWxvYWQ7XG4gICAgICB0aGlzLmRlcml2ZVNlc3Npb25CeXRlcyA9IHRoaXMuZGVyaXZlU2Vzc2lvbi50b0J5dGVzKCk7XG4gICAgICB0aGlzLl9kZXNlcmlhbGl6ZVN0YXRlKCk7XG4gICAgICByZXR1cm4geyBwYXlsb2FkLCBmcm9tIH07XG4gICAgfSBjYXRjaCAoZSkge1xuICAgICAgdGhyb3cgRXJyb3IoYEVycm9yIHdoaWxlIGNyZWF0aW5nIHRoZSBmaXJzdCBoYXJkLWRlcml2ZSBtZXNzYWdlIGZyb20gcGFydHkgJHt0aGlzLnBhcnR5SWR4fTogJHtlfWApO1xuICAgIH1cbiAgfVxuXG4gIC8qKlxuICAgKiBQcm9jZXNzIHRoZSBtZXNzYWdlcyB0aGlzIHBhcnR5IGhvbGRzIGZvciB0aGUgY3VycmVudCByb3VuZCBhbmQgcmV0dXJuIHRoaXNcbiAgICogcGFydHkncyBtZXNzYWdlcyBmb3IgdGhlIG5leHQgcm91bmQuIENhbGxlcnMgcGFzcyB0aGUgcGFydG5lcidzIGJyb2FkY2FzdFxuICAgKiBtZXNzYWdlIG9ubHk7IHRoaXMgcGFydHkncyBvd24gbWVzc2FnZSBpcyByZS1mZWQgYXV0b21hdGljYWxseSBiZWNhdXNlIHRoZVxuICAgKiB3YXNtIHNlc3Npb24gdmFsaWRhdGVzIHRoZSBzZW5kZXIgc2V0IGFzIGB7c2VsZiwgcGFydG5lcn1gLlxuICAgKlxuICAgKiAtIFJvdW5kIDEgKFdhaXRNc2cxKTogY29uc3VtZXMgYHtvd24gbXNnMSwgcGFydG5lciBtc2cxfWAgYW5kIGVtaXRzIHRoaXNcbiAgICogICBwYXJ0eSdzIGJyb2FkY2FzdCBtc2cyLlxuICAgKiAtIFJvdW5kIDIgKFdhaXRNc2cyKTogY29uc3VtZXMgYHtvd24gbXNnMiwgcGFydG5lciBtc2cyfWAgYW5kIGZpbmFsaXplcyB0aGVcbiAgICogICBzZXNzaW9uLCByZXR1cm5pbmcgbm8gbWVzc2FnZXMuXG4gICAqL1xuICBoYW5kbGVJbmNvbWluZ01lc3NhZ2VzKG1lc3NhZ2VzRm9ySXRoUm91bmQ6IERlc2VyaWFsaXplZE1lc3NhZ2VzKTogRGVzZXJpYWxpemVkTWVzc2FnZXMge1xuICAgIHRoaXMuX3Jlc3RvcmVTZXNzaW9uKCk7XG4gICAgaWYgKCF0aGlzLmRlcml2ZVNlc3Npb24pIHtcbiAgICAgIHRocm93IEVycm9yKCdTZXNzaW9uIG5vdCBpbml0aWFsaXplZCcpO1xuICAgIH1cbiAgICBjb25zdCB7IE1lc3NhZ2UgfSA9IHRoaXMuZ2V0VnJmV2FzbSgpO1xuICAgIGxldCBuZXh0Um91bmRNZXNzYWdlczogVnJmV2FzbU1lc3NhZ2VbXSA9IFtdO1xuICAgIGNvbnN0IG5leHRSb3VuZERlc2VyaWFsaXplZE1lc3NhZ2VzOiBEZXNlcmlhbGl6ZWRNZXNzYWdlcyA9IHsgYnJvYWRjYXN0TWVzc2FnZXM6IFtdLCBwMnBNZXNzYWdlczogW10gfTtcbiAgICB0cnkge1xuICAgICAgc3dpdGNoICh0aGlzLmRlcml2ZVN0YXRlKSB7XG4gICAgICAgIGNhc2UgRGVyaXZlU3RhdGUuUm91bmQxOiB7XG4gICAgICAgICAgY29uc3QgcGFydG5lck1lc3NhZ2VzID0gbWVzc2FnZXNGb3JJdGhSb3VuZC5icm9hZGNhc3RNZXNzYWdlcy5maWx0ZXIoKG0pID0+IG0uZnJvbSAhPT0gdGhpcy5wYXJ0eUlkeCk7XG4gICAgICAgICAgaWYgKHBhcnRuZXJNZXNzYWdlcy5sZW5ndGggIT09IDEgfHwgIXRoaXMub3duTXNnMSkge1xuICAgICAgICAgICAgdGhyb3cgRXJyb3IoJ0V4cGVjdGVkIGV4YWN0bHkgb25lIGJyb2FkY2FzdCBtZXNzYWdlIGZyb20gdGhlIGRlcml2ZSBwYXJ0bmVyIGluIHJvdW5kIDEnKTtcbiAgICAgICAgICB9XG4gICAgICAgICAgbmV4dFJvdW5kTWVzc2FnZXMgPSB0aGlzLmRlcml2ZVNlc3Npb24uaGFuZGxlTWVzc2FnZXMoW1xuICAgICAgICAgICAgbmV3IE1lc3NhZ2UodGhpcy5vd25Nc2cxLCB0aGlzLnBhcnR5SWR4KSxcbiAgICAgICAgICAgIG5ldyBNZXNzYWdlKHBhcnRuZXJNZXNzYWdlc1swXS5wYXlsb2FkLCBwYXJ0bmVyTWVzc2FnZXNbMF0uZnJvbSksXG4gICAgICAgICAgXSk7XG4gICAgICAgICAgdGhpcy5fZGVzZXJpYWxpemVTdGF0ZSgpO1xuICAgICAgICAgIGJyZWFrO1xuICAgICAgICB9XG4gICAgICAgIGNhc2UgRGVyaXZlU3RhdGUuUm91bmQyOiB7XG4gICAgICAgICAgY29uc3QgcGFydG5lck1lc3NhZ2VzID0gbWVzc2FnZXNGb3JJdGhSb3VuZC5icm9hZGNhc3RNZXNzYWdlcy5maWx0ZXIoKG0pID0+IG0uZnJvbSAhPT0gdGhpcy5wYXJ0eUlkeCk7XG4gICAgICAgICAgaWYgKHBhcnRuZXJNZXNzYWdlcy5sZW5ndGggIT09IDEgfHwgIXRoaXMub3duTXNnMikge1xuICAgICAgICAgICAgdGhyb3cgRXJyb3IoJ0V4cGVjdGVkIGV4YWN0bHkgb25lIGJyb2FkY2FzdCBtZXNzYWdlIGZyb20gdGhlIGRlcml2ZSBwYXJ0bmVyIGluIHJvdW5kIDInKTtcbiAgICAgICAgICB9XG4gICAgICAgICAgbmV4dFJvdW5kTWVzc2FnZXMgPSB0aGlzLmRlcml2ZVNlc3Npb24uaGFuZGxlTWVzc2FnZXMoW1xuICAgICAgICAgICAgbmV3IE1lc3NhZ2UodGhpcy5vd25Nc2cyLCB0aGlzLnBhcnR5SWR4KSxcbiAgICAgICAgICAgIG5ldyBNZXNzYWdlKHBhcnRuZXJNZXNzYWdlc1swXS5wYXlsb2FkLCBwYXJ0bmVyTWVzc2FnZXNbMF0uZnJvbSksXG4gICAgICAgICAgXSk7XG4gICAgICAgICAgLy8gaGFuZGxlTWVzc2FnZXMoKSBjb25zdW1lcyB0aGUgc2Vzc2lvbjsga2V5c2hhcmUoKSBleHRyYWN0cyB0aGUgZGVyaXZlZCBzaGFyZS5cbiAgICAgICAgICBjb25zdCBrZXlTaGFyZSA9IHRoaXMuZGVyaXZlU2Vzc2lvbi5rZXlzaGFyZSgpO1xuICAgICAgICAgIHRoaXMua2V5U2hhcmVCdWZmID0gQnVmZmVyLmZyb20oa2V5U2hhcmUudG9CeXRlcygpKTtcbiAgICAgICAgICBrZXlTaGFyZS5mcmVlKCk7XG4gICAgICAgICAgdGhpcy5kZXJpdmVTdGF0ZSA9IERlcml2ZVN0YXRlLkNvbXBsZXRlO1xuICAgICAgICAgIHJldHVybiBuZXh0Um91bmREZXNlcmlhbGl6ZWRNZXNzYWdlcztcbiAgICAgICAgfVxuICAgICAgICBkZWZhdWx0OlxuICAgICAgICAgIHRocm93IEVycm9yKGBJbnZhbGlkIGhhcmQtZGVyaXZlIHN0YXRlOiAke3RoaXMuZGVyaXZlU3RhdGV9YCk7XG4gICAgICB9XG5cbiAgICAgIG5leHRSb3VuZERlc2VyaWFsaXplZE1lc3NhZ2VzLmJyb2FkY2FzdE1lc3NhZ2VzID0gbmV4dFJvdW5kTWVzc2FnZXNcbiAgICAgICAgLmZpbHRlcigobSkgPT4gbS50b19pZCA9PT0gdW5kZWZpbmVkKVxuICAgICAgICAubWFwKChtKSA9PiAoeyBwYXlsb2FkOiBuZXcgVWludDhBcnJheShtLnBheWxvYWQpLCBmcm9tOiBtLmZyb21faWQgfSkpO1xuICAgICAgbmV4dFJvdW5kRGVzZXJpYWxpemVkTWVzc2FnZXMucDJwTWVzc2FnZXMgPSBuZXh0Um91bmRNZXNzYWdlc1xuICAgICAgICAuZmlsdGVyKChtKTogbSBpcyBWcmZXYXNtTWVzc2FnZSAmIHsgdG9faWQ6IG51bWJlciB9ID0+IG0udG9faWQgIT09IHVuZGVmaW5lZClcbiAgICAgICAgLm1hcCgobSkgPT4gKHsgcGF5bG9hZDogbmV3IFVpbnQ4QXJyYXkobS5wYXlsb2FkKSwgZnJvbTogbS5mcm9tX2lkLCB0bzogbS50b19pZCB9KSk7XG4gICAgICAvLyBUaGUgcm91bmQtMSBvdXRwdXQgaXMgdGhpcyBwYXJ0eSdzIG1zZzIsIHJlLWZlZCBpbnRvIHRoZSBzZXNzaW9uIG9uIHJvdW5kIDIuXG4gICAgICBjb25zdCBvd25Nc2cyID0gbmV4dFJvdW5kRGVzZXJpYWxpemVkTWVzc2FnZXMuYnJvYWRjYXN0TWVzc2FnZXMuZmluZCgobSkgPT4gbS5mcm9tID09PSB0aGlzLnBhcnR5SWR4KTtcbiAgICAgIGlmIChvd25Nc2cyKSB7XG4gICAgICAgIHRoaXMub3duTXNnMiA9IG93bk1zZzIucGF5bG9hZDtcbiAgICAgIH1cbiAgICAgIHJldHVybiBuZXh0Um91bmREZXNlcmlhbGl6ZWRNZXNzYWdlcztcbiAgICB9IGNhdGNoIChlKSB7XG4gICAgICB0aHJvdyBFcnJvcihcbiAgICAgICAgYEVycm9yIHdoaWxlIGNyZWF0aW5nIGhhcmQtZGVyaXZlIG1lc3NhZ2VzIGZyb20gcGFydHkgJHt0aGlzLnBhcnR5SWR4fSwgc3RhdGUgJHt0aGlzLmRlcml2ZVN0YXRlfTogJHtlfWBcbiAgICAgICk7XG4gICAgfSBmaW5hbGx5IHtcbiAgICAgIG5leHRSb3VuZE1lc3NhZ2VzLmZvckVhY2goKG0pID0+IG0uZnJlZSgpKTtcbiAgICAgIC8vIGtleXNoYXJlKCkgY29uc3VtZWQgKGFuZCBkZWFsbG9jYXRlZCkgdGhlIHNlc3Npb24gb24gcm91bmQgMjsgb25seSBwZXJzaXN0XG4gICAgICAvLyBtaWQtcHJvdG9jb2wgc2Vzc2lvbiBieXRlcyB3aGlsZSB0aGUgc2Vzc2lvbiBvYmplY3Qgc3RpbGwgZXhpc3RzLlxuICAgICAgaWYgKHRoaXMuZGVyaXZlU3RhdGUgIT09IERlcml2ZVN0YXRlLkNvbXBsZXRlICYmIHRoaXMuZGVyaXZlU2Vzc2lvbikge1xuICAgICAgICB0aGlzLmRlcml2ZVNlc3Npb25CeXRlcyA9IHRoaXMuZGVyaXZlU2Vzc2lvbi50b0J5dGVzKCk7XG4gICAgICB9XG4gICAgICB0aGlzLmRlcml2ZVNlc3Npb24gPSB1bmRlZmluZWQ7XG4gICAgfVxuICB9XG5cbiAgLyoqXG4gICAqIEdldCB0aGUgZGVyaXZlZCBES0xTIGtleXNoYXJlIGJ5dGVzIChDQk9SIGBLZXlzaGFyZWApIG9uY2UgdGhlIGRlcml2ZSBpc1xuICAgKiBjb21wbGV0ZS4gVGhpcyBidWZmZXIgaXMgcHJpdmF0ZSBrZXkgbWF0ZXJpYWwuXG4gICAqL1xuICBnZXRLZXlTaGFyZSgpOiBCdWZmZXIge1xuICAgIGlmICghdGhpcy5rZXlTaGFyZUJ1ZmYpIHtcbiAgICAgIHRocm93IEVycm9yKCdDYW4gbm90IGdldCBrZXkgc2hhcmUsIGhhcmQgZGVyaXZlIGlzIG5vdCBjb21wbGV0ZSB5ZXQuJyk7XG4gICAgfVxuICAgIHJldHVybiB0aGlzLmtleVNoYXJlQnVmZjtcbiAgfVxuXG4gIC8qKlxuICAgKiBSZXR1cm5zIGEgQ0JPUi1lbmNvZGVkIFJlZHVjZWRLZXlTaGFyZSBidWZmZXIgY29udGFpbmluZyB0aGUgZGVyaXZlZCBwYXJ0eSdzXG4gICAqIHByaXZhdGUgc2NhbGFyIChzX2kpIGluIHRoZSBgcHJ2YCBmaWVsZC4gVGhpcyBidWZmZXIgaXMgcHJpdmF0ZSBrZXkgbWF0ZXJpYWw7XG4gICAqIHRoZSBjYWxsZXIgZW5jcnlwdHMgaXQgYXMgYHJlZHVjZWRFbmNyeXB0ZWRQcnZgLCBtYXRjaGluZyBgRGtnLmdldFJlZHVjZWRLZXlTaGFyZWAuXG4gICAqL1xuICBnZXRSZWR1Y2VkS2V5U2hhcmUoKTogQnVmZmVyIHtcbiAgICBpZiAoIXRoaXMua2V5U2hhcmVCdWZmKSB7XG4gICAgICB0aHJvdyBFcnJvcignQ2FuIG5vdCBnZXQga2V5IHNoYXJlLCBoYXJkIGRlcml2ZSBpcyBub3QgY29tcGxldGUgeWV0LicpO1xuICAgIH1cbiAgICBjb25zdCBkZWNvZGVkS2V5c2hhcmUgPSBkZWNvZGUodGhpcy5rZXlTaGFyZUJ1ZmYpO1xuICAgIGNvbnN0IHJlZHVjZWRLZXlTaGFyZTogUmVkdWNlZEtleVNoYXJlID0ge1xuICAgICAgYmlnU0xpc3Q6IGRlY29kZWRLZXlzaGFyZS5iaWdfc19saXN0LFxuICAgICAgeExpc3Q6IGRlY29kZWRLZXlzaGFyZS54X2lfbGlzdCxcbiAgICAgIHJvb3RDaGFpbkNvZGU6IGRlY29kZWRLZXlzaGFyZS5yb290X2NoYWluX2NvZGUsXG4gICAgICBwcnY6IGRlY29kZWRLZXlzaGFyZS5zX2ksXG4gICAgICBwdWI6IGRlY29kZWRLZXlzaGFyZS5wdWJsaWNfa2V5LFxuICAgIH07XG4gICAgcmV0dXJuIEJ1ZmZlci5mcm9tKGVuY29kZShyZWR1Y2VkS2V5U2hhcmUpKTtcbiAgfVxuXG4gIC8qKlxuICAgKiBHZXQgdGhlIGN1cnJlbnQgc2Vzc2lvbiBkYXRhIHRoYXQgY2FuIGJlIHVzZWQgdG8gcmVzdG9yZSB0aGUgc2Vzc2lvbiBsYXRlci5cbiAgICpcbiAgICogVGhlIHJldHVybmVkIHNlc3Npb24gYnl0ZXMgYXJlIHNlY3JldCBrZXkgbWF0ZXJpYWwg4oCUIHRoZXkgY2FycnkgdGhpcyBwYXJ0eSdzXG4gICAqIHJvb3Qga2V5c2hhcmVzLiBUaGV5IG11c3QgbmV2ZXIgYmUgbG9nZ2VkIG9yIHBlcnNpc3RlZCBpbiB0aGUgY2xlYXI7IHRoZVxuICAgKiBjYWxsZXIgZW5jcnlwdHMgdGhlbSBleGFjdGx5IGxpa2UgdGhlIGtleSBzaGFyZSBpdHNlbGYuXG4gICAqL1xuICBnZXRTZXNzaW9uRGF0YSgpOiBEZXJpdmVTZXNzaW9uRGF0YSB7XG4gICAgY29uc3Qgc2Vzc2lvbkRhdGE6IERlcml2ZVNlc3Npb25EYXRhID0ge1xuICAgICAgZGVyaXZlU2Vzc2lvbkJ5dGVzOiB0aGlzLmRlcml2ZVNlc3Npb25CeXRlcyxcbiAgICAgIGRlcml2ZVN0YXRlOiB0aGlzLmRlcml2ZVN0YXRlLFxuICAgIH07XG4gICAgaWYgKHRoaXMua2V5U2hhcmVCdWZmKSB7XG4gICAgICBzZXNzaW9uRGF0YS5rZXlTaGFyZUJ1ZmYgPSB0aGlzLmtleVNoYXJlQnVmZjtcbiAgICB9XG4gICAgaWYgKHRoaXMub3duTXNnMSkge1xuICAgICAgc2Vzc2lvbkRhdGEub3duTXNnMSA9IHRoaXMub3duTXNnMTtcbiAgICB9XG4gICAgaWYgKHRoaXMub3duTXNnMikge1xuICAgICAgc2Vzc2lvbkRhdGEub3duTXNnMiA9IHRoaXMub3duTXNnMjtcbiAgICB9XG4gICAgcmV0dXJuIHNlc3Npb25EYXRhO1xuICB9XG5cbiAgLyoqXG4gICAqIFJlc3RvcmUgYSBzZXNzaW9uIHNuYXBzaG90IGNhcHR1cmVkIGFmdGVyIGluaXREZXJpdmUoKSBvciByb3VuZCAxIHByb2Nlc3NpbmcuXG4gICAqIERvIG5vdCBjYWxsIHRoaXMgYmVmb3JlIGluaXREZXJpdmUoKSBoYXMgY3JlYXRlZCBzZXNzaW9uIGJ5dGVzLlxuICAgKiBUaGUgcm91bmQgc3RhdGUgaXMgcmUtZGVyaXZlZCBmcm9tIHRoZSB3YXNtIHNlc3Npb24gYnl0ZXMsIG5vdCB0aGUgY2FsbGVyIGVudW0uXG4gICAqL1xuICBzdGF0aWMgYXN5bmMgcmVzdG9yZVNlc3Npb24oXG4gICAgbjogbnVtYmVyLFxuICAgIHQ6IG51bWJlcixcbiAgICBwYXJ0eUlkeDogbnVtYmVyLFxuICAgIHJvb3RLZXlTaGFyZTogQnVmZmVyLFxuICAgIHZyZktleVNoYXJlOiBCdWZmZXIsXG4gICAgcGF0aDogVWludDhBcnJheSxcbiAgICBzZXNzaW9uRGF0YTogRGVyaXZlU2Vzc2lvbkRhdGEsXG4gICAgc2VlZD86IEJ1ZmZlcixcbiAgICB2cmZXYXNtPzogQnVuZGxlclZyZldhc21lclxuICApOiBQcm9taXNlPERlcml2ZT4ge1xuICAgIGNvbnN0IGRlcml2ZSA9IG5ldyBEZXJpdmUobiwgdCwgcGFydHlJZHgsIHJvb3RLZXlTaGFyZSwgdnJmS2V5U2hhcmUsIHBhdGgsIHNlZWQsIHZyZldhc20pO1xuICAgIGlmICghZGVyaXZlLnZyZldhc20pIHtcbiAgICAgIGF3YWl0IGRlcml2ZS5sb2FkVnJmV2FzbSgpO1xuICAgIH1cbiAgICBkZXJpdmUuZGVyaXZlU2Vzc2lvbkJ5dGVzID0gc2Vzc2lvbkRhdGEuZGVyaXZlU2Vzc2lvbkJ5dGVzO1xuICAgIGlmIChzZXNzaW9uRGF0YS5rZXlTaGFyZUJ1ZmYpIHtcbiAgICAgIGRlcml2ZS5rZXlTaGFyZUJ1ZmYgPSBzZXNzaW9uRGF0YS5rZXlTaGFyZUJ1ZmY7XG4gICAgfVxuICAgIGlmIChzZXNzaW9uRGF0YS5vd25Nc2cxKSB7XG4gICAgICBkZXJpdmUub3duTXNnMSA9IHNlc3Npb25EYXRhLm93bk1zZzE7XG4gICAgfVxuICAgIGlmIChzZXNzaW9uRGF0YS5vd25Nc2cyKSB7XG4gICAgICBkZXJpdmUub3duTXNnMiA9IHNlc3Npb25EYXRhLm93bk1zZzI7XG4gICAgfVxuICAgIGRlcml2ZS5fcmVzdG9yZVNlc3Npb24oKTtcbiAgICBkZXJpdmUuX2Rlc2VyaWFsaXplU3RhdGUoKTtcbiAgICByZXR1cm4gZGVyaXZlO1xuICB9XG59XG4iXX0=

package/dist/src/tss/ecdsa-dkls/dkg.d.ts

@@ -0,0 +1,64 @@
+import type { KeygenSession, Keyshare } from '@silencelaboratories/dkls-wasm-ll-node';
+import type { VrfKeygenSession as DklsVrfKeygenSession } from '@silencelaboratories/dkls-wasm-ll-vrf-node';
+import type { VrfKeygenSession as DklsVrfWebKeygenSession } from '@silencelaboratories/dkls-wasm-ll-vrf-web';
+import { DeserializedBroadcastMessage, DeserializedMessages, DkgState, RetrofitData } from './types';
+type NodeWasmer = typeof import('@silencelaboratories/dkls-wasm-ll-node');
+type WebWasmer = typeof import('@silencelaboratories/dkls-wasm-ll-web');
+type BundlerWasmer = typeof import('@silencelaboratories/dkls-wasm-ll-bundler');
+type DklsWasm = NodeWasmer | WebWasmer | BundlerWasmer;
+export type { DklsVrfKeygenSession, DklsVrfWebKeygenSession };
+export interface DkgSessionData {
+    dkgSessionBytes: Uint8Array;
+    dkgState: DkgState;
+    chainCodeCommitment?: Uint8Array;
+    keyShareBuff?: Buffer;
+}
+export declare class Dkg {
+    protected dkgSession: KeygenSession | undefined;
+    protected dkgSessionBytes: Uint8Array;
+    protected dkgKeyShare: Keyshare;
+    protected keyShareBuff: Buffer;
+    protected n: number;
+    protected t: number;
+    protected seed: Buffer | undefined;
+    protected chainCodeCommitment: Uint8Array | undefined;
+    protected partyIdx: number;
+    protected dkgState: DkgState;
+    protected dklsKeyShareRetrofitObject: Keyshare | undefined;
+    protected retrofitData: RetrofitData | undefined;
+    protected dklsWasm: DklsWasm | null;
+    constructor(n: number, t: number, partyIdx: number, seed?: Buffer, retrofitData?: RetrofitData, dklsWasm?: BundlerWasmer);
+    private loadDklsWasm;
+    private getDklsWasm;
+    private _restoreSession;
+    private _createDKLsRetrofitKeyShare;
+    private _deserializeState;
+    initDkg(): Promise<DeserializedBroadcastMessage>;
+    getKeyShare(): Buffer;
+    /**
+     * Returns a CBOR-encoded ReducedKeyShare buffer containing the party's private
+     * scalar (s_i) in the `prv` field. This buffer is private key material.
+     * The caller encrypts it and stores it as `reducedEncryptedPrv` on the key card QR code.
+     */
+    getReducedKeyShare(): Buffer;
+    handleIncomingMessages(messagesForIthRound: DeserializedMessages): DeserializedMessages;
+    /**
+     * Get the current session data that can be used to restore the session later
+     * @returns The current session data
+     */
+    getSessionData(): DkgSessionData;
+    /**
+     * Restore a DKG session from previous session data
+     * Note: This should not be used for Round 1 as that's the initialization phase
+     * @param n Number of parties
+     * @param t Threshold
+     * @param partyIdx Party index
+     * @param sessionData Previous session data
+     * @param seed Optional seed
+     * @param retrofitData Optional retrofit data
+     * @param dklsWasm Optional DKLS wasm instance
+     * @returns A new DKG instance with the restored session
+     */
+    static restoreSession(n: number, t: number, partyIdx: number, sessionData: DkgSessionData, seed?: Buffer, retrofitData?: RetrofitData, dklsWasm?: BundlerWasmer): Promise<Dkg>;
+}
+//# sourceMappingURL=dkg.d.ts.map

package/dist/src/tss/ecdsa-dkls/dkg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg.d.ts","sourceRoot":"","sources":["../../../../src/tss/ecdsa-dkls/dkg.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAW,MAAM,wCAAwC,CAAC;AAC/F,OAAO,KAAK,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAC3G,OAAO,KAAK,EAAE,gBAAgB,IAAI,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AAK7G,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,QAAQ,EAAmB,YAAY,EAAE,MAAM,SAAS,CAAC;AAEtH,KAAK,UAAU,GAAG,cAAc,wCAAwC,CAAC,CAAC;AAC1E,KAAK,SAAS,GAAG,cAAc,uCAAuC,CAAC,CAAC;AACxE,KAAK,aAAa,GAAG,cAAc,2CAA2C,CAAC,CAAC;AAEhF,KAAK,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;AACvD,YAAY,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,UAAU,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,mBAAmB,CAAC,EAAE,UAAU,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,GAAG;IACd,SAAS,CAAC,UAAU,EAAE,aAAa,GAAG,SAAS,CAAC;IAChD,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC;IACtC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC;IAChC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,SAAS,CAAC,mBAAmB,EAAE,UAAU,GAAG,SAAS,CAAC;IACtD,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAA0B;IACtD,SAAS,CAAC,0BAA0B,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3D,SAAS,CAAC,YAAY,EAAE,YAAY,GAAG,SAAS,CAAC;IACjD,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;gBAGlC,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,YAAY,EAC3B,QAAQ,CAAC,EAAE,aAAa;YAWZ,YAAY;IAM1B,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,2BAA2B;IAuCnC,OAAO,CAAC,iBAAiB;IA4BnB,OAAO,IAAI,OAAO,CAAC,4BAA4B,CAAC;IA+CtD,WAAW,IAAI,MAAM;IAOrB;;;;OAIG;IACH,kBAAkB,IAAI,MAAM;IAgB5B,sBAAsB,CAAC,mBAAmB,EAAE,oBAAoB,GAAG,oBAAoB;IAqFvF;;;OAGG;IACH,cAAc,IAAI,cAAc;IAiBhC;;;;;;;;;;;OAWG;WACU,cAAc,CACzB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,cAAc,EAC3B,IAAI,CAAC,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,YAAY,EAC3B,QAAQ,CAAC,EAAE,aAAa,GACvB,OAAO,CAAC,GAAG,CAAC;CAwBhB"}