@bitgo-beta/sdk-lib-mpc 8.2.0-beta.209 → 8.2.0-beta.2090

package/dist/src/tss/eddsa-mps/commsLayer.js

@@ -0,0 +1,96 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detachSignMpsMessage = detachSignMpsMessage;
+exports.verifyMpsMessage = verifyMpsMessage;
+exports.extractEd25519PublicKey = extractEd25519PublicKey;
+exports.extractEd25519KeyPair = extractEd25519KeyPair;
+const pgp = __importStar(require("openpgp"));
+/**
+ * PGP detached-signs raw WASM bytes with the given private key.
+ * Returns an MPSSignedMessage with the base64-encoded payload and armored signature.
+ */
+async function detachSignMpsMessage(rawBytes, signingKey) {
+    const signature = await pgp.sign({
+        message: await pgp.createMessage({ binary: rawBytes }),
+        signingKeys: signingKey,
+        detached: true,
+    });
+    return {
+        message: Buffer.from(rawBytes).toString('base64'),
+        signature: signature,
+    };
+}
+/**
+ * Verifies a PGP detached signature on an MPSSignedMessage and returns the decoded raw bytes.
+ * Throws if the signature is invalid or not present.
+ */
+async function verifyMpsMessage(msg, verificationKey) {
+    const rawBytes = Buffer.from(msg.message, 'base64');
+    const result = await pgp.verify({
+        message: await pgp.createMessage({ binary: rawBytes }),
+        signature: await pgp.readSignature({ armoredSignature: msg.signature }),
+        verificationKeys: verificationKey,
+        expectSigned: true,
+    });
+    await result.signatures[0].verified;
+    return rawBytes;
+}
+/**
+ * Extracts the X25519 public key bytes from a GPG key's encryption subkey.
+ * Works for both public-only and private keys — use this for third-party keys (e.g. BitGo's).
+ *
+ * @param key - A GPG key with an X25519 encryption subkey.
+ * @returns 32-byte X25519 public key.
+ */
+async function extractEd25519PublicKey(key) {
+    const { keyPacket } = await key.getEncryptionKey();
+    return Buffer.from(keyPacket.publicParams.Q).subarray(1);
+}
+/**
+ * Extracts the X25519 public and private key bytes from a GPG ed25519 private key's
+ * encryption subkey. Encapsulates the keyPacket internals and the little-endian scalar
+ * reversal in one place so sdk-core only deals with plain Buffers.
+ *
+ * @param privateKey - An ed25519 GPG private key with an X25519 encryption subkey.
+ * @returns  [pk, sk] — 32-byte X25519 public key and private scalar.
+ */
+async function extractEd25519KeyPair(privateKey) {
+    const encKey = await privateKey.getEncryptionKey();
+    const pk = Buffer.from(encKey.keyPacket.publicParams.Q).subarray(1);
+    const sk = Buffer.from(encKey.keyPacket.privateParams.d).reverse();
+    return [pk, sk];
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/tss/eddsa-mps/derive.d.ts

@@ -0,0 +1,34 @@
+import type { DeserializedMessage, DeserializedMessages } from './types';
+export declare enum DeriveState {
+    Uninitialized = "Uninitialized",
+    WaitMsg1 = "WaitMsg1",
+    WaitMsg2 = "WaitMsg2",
+    Complete = "Complete"
+}
+/** Two-party hardened Ed25519 derivation using the root signing and VRF shares. */
+export declare class Derive {
+    private readonly n;
+    private readonly t;
+    private readonly partyIdx;
+    private readonly rootKeyShare;
+    private readonly vrfKeyShare;
+    private readonly path;
+    private state;
+    private peerIdx;
+    private stateBytes;
+    private keyShare;
+    private pk;
+    private chaincode;
+    private wasmMps;
+    constructor(n: number, t: number, partyIdx: number, rootKeyShare: Buffer, vrfKeyShare: Buffer, path: string);
+    private loadWasmMps;
+    /** Emits this party's round-zero message. Both parties must use the same hardened path. */
+    initDerive(): Promise<DeserializedMessage>;
+    /** Each round consumes exactly one message from the same other party. */
+    handleIncomingMessages(messages: DeserializedMessages): DeserializedMessages;
+    getKeyShare(): Buffer;
+    getCommonKeychain(): string;
+    /** CBOR signing share only: VRF material must never be carried into the child key card. */
+    getReducedKeyShare(): Buffer;
+}
+//# sourceMappingURL=derive.d.ts.map

package/dist/src/tss/eddsa-mps/derive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.d.ts","sourceRoot":"","sources":["../../../../src/tss/eddsa-mps/derive.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAwB,MAAM,SAAS,CAAC;AAM/F,oBAAY,WAAW;IACrB,aAAa,kBAAkB;IAC/B,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;CACtB;AAED,mFAAmF;AACnF,qBAAa,MAAM;IAUf,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClB,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAdvB,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,EAAE,CAAuB;IACjC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,OAAO,CAAwB;gBAGpB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM;YAGjB,WAAW;IAczB,2FAA2F;IACrF,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IA+ChD,yEAAyE;IACzE,sBAAsB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,oBAAoB;IA2D5E,WAAW,IAAI,MAAM;IAOrB,iBAAiB,IAAI,MAAM;IAO3B,2FAA2F;IAC3F,kBAAkB,IAAI,MAAM;CAW7B"}

package/dist/src/tss/eddsa-mps/derive.js

@@ -0,0 +1,198 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Derive = exports.DeriveState = void 0;
+const cbor_x_1 = require("cbor-x");
+var DeriveState;
+(function (DeriveState) {
+    DeriveState["Uninitialized"] = "Uninitialized";
+    DeriveState["WaitMsg1"] = "WaitMsg1";
+    DeriveState["WaitMsg2"] = "WaitMsg2";
+    DeriveState["Complete"] = "Complete";
+})(DeriveState || (exports.DeriveState = DeriveState = {}));
+/** Two-party hardened Ed25519 derivation using the root signing and VRF shares. */
+class Derive {
+    constructor(n, t, partyIdx, rootKeyShare, vrfKeyShare, path) {
+        this.n = n;
+        this.t = t;
+        this.partyIdx = partyIdx;
+        this.rootKeyShare = rootKeyShare;
+        this.vrfKeyShare = vrfKeyShare;
+        this.path = path;
+        this.state = DeriveState.Uninitialized;
+        this.peerIdx = null;
+        this.stateBytes = null;
+        this.keyShare = null;
+        this.pk = null;
+        this.chaincode = null;
+        this.wasmMps = null;
+    }
+    async loadWasmMps() {
+        if (!this.wasmMps) {
+            if (typeof window !== 'undefined' && !window.process && !window.process?.['type']) {
+                // eslint-disable-next-line import/no-internal-modules -- @bitgo/wasm-mps exposes environment-specific subpath exports.
+                const webWasm = await Promise.resolve().then(() => __importStar(require('@bitgo/wasm-mps/web')));
+                await webWasm.default();
+                this.wasmMps = webWasm;
+            }
+            else {
+                this.wasmMps = await Promise.resolve().then(() => __importStar(require('@bitgo/wasm-mps')));
+            }
+        }
+        return this.wasmMps;
+    }
+    /** Emits this party's round-zero message. Both parties must use the same hardened path. */
+    async initDerive() {
+        if (this.state !== DeriveState.Uninitialized) {
+            throw Error('Derive session already initialized');
+        }
+        if (this.n !== 3 ||
+            this.t !== 2 ||
+            !Number.isInteger(this.partyIdx) ||
+            this.partyIdx < 0 ||
+            this.partyIdx >= this.n) {
+            throw Error('Invalid parameters for 2-of-3 derivation');
+        }
+        if (!Buffer.isBuffer(this.rootKeyShare) ||
+            !this.rootKeyShare.length ||
+            !Buffer.isBuffer(this.vrfKeyShare) ||
+            !this.vrfKeyShare.length) {
+            throw Error('Missing or invalid signing or VRF key share');
+        }
+        const segments = /^m((?:\/(?:0|[1-9]\d*)')+)$/.exec(this.path);
+        if (!segments ||
+            segments[1]
+                .split('/')
+                .slice(1)
+                .some((segment) => Number(segment.slice(0, -1)) > 0x7fffffff)) {
+            throw Error('Expected a hardened derivation path');
+        }
+        const wasm = await this.loadWasmMps();
+        if (this.state !== DeriveState.Uninitialized) {
+            throw Error('Derive session already initialized');
+        }
+        const result = wasm.ed25519_hard_derive_round0_process(this.vrfKeyShare, this.rootKeyShare, this.path);
+        try {
+            const payload = new Uint8Array(result.msg);
+            this.stateBytes = Buffer.from(result.state);
+            this.state = DeriveState.WaitMsg1;
+            return { from: this.partyIdx, payload };
+        }
+        finally {
+            result.free();
+        }
+    }
+    /** Each round consumes exactly one message from the same other party. */
+    handleIncomingMessages(messages) {
+        if (this.state === DeriveState.Uninitialized ||
+            this.state === DeriveState.Complete ||
+            !this.stateBytes ||
+            !this.wasmMps) {
+            throw Error('Derive session is not awaiting a peer message');
+        }
+        if (!Array.isArray(messages) || messages.length !== 1) {
+            throw Error('Expected exactly one peer message for derivation');
+        }
+        const [message] = messages;
+        if (!message ||
+            !Number.isInteger(message.from) ||
+            message.from < 0 ||
+            message.from >= this.n ||
+            message.from === this.partyIdx ||
+            (this.peerIdx !== null && message.from !== this.peerIdx) ||
+            !(message.payload instanceof Uint8Array) ||
+            message.payload.length === 0) {
+            throw Error('Invalid derivation peer message');
+        }
+        if (this.state === DeriveState.WaitMsg1) {
+            const result = this.wasmMps.ed25519_hard_derive_round1_process(message.payload, this.stateBytes);
+            try {
+                const payload = new Uint8Array(result.msg);
+                const nextState = Buffer.from(result.state);
+                this.stateBytes = nextState;
+                this.peerIdx = message.from;
+                this.state = DeriveState.WaitMsg2;
+                return [{ from: this.partyIdx, payload }];
+            }
+            finally {
+                result.free();
+            }
+        }
+        const result = this.wasmMps.ed25519_hard_derive_round2_process(message.payload, this.stateBytes);
+        try {
+            const keyShare = Buffer.from(result.share);
+            const pk = Buffer.from(result.pk);
+            const chaincode = Buffer.from(result.chaincode);
+            if (!keyShare.length || pk.length !== 32 || chaincode.length !== 32) {
+                throw Error('Invalid derived signing share');
+            }
+            this.keyShare = keyShare;
+            this.pk = pk;
+            this.chaincode = chaincode;
+            this.stateBytes = null;
+            this.state = DeriveState.Complete;
+            return [];
+        }
+        finally {
+            result.free();
+        }
+    }
+    getKeyShare() {
+        if (!this.keyShare) {
+            throw Error('Derive session is not complete');
+        }
+        return this.keyShare;
+    }
+    getCommonKeychain() {
+        if (!this.pk || !this.chaincode) {
+            throw Error('Derive session is not complete');
+        }
+        return this.pk.toString('hex') + this.chaincode.toString('hex');
+    }
+    /** CBOR signing share only: VRF material must never be carried into the child key card. */
+    getReducedKeyShare() {
+        if (!this.keyShare || !this.pk || !this.chaincode) {
+            throw Error('Derive session is not complete');
+        }
+        const reducedKeyShare = {
+            keyShare: Array.from(this.keyShare),
+            pub: Array.from(this.pk),
+            rootChainCode: Array.from(this.chaincode),
+        };
+        return Buffer.from((0, cbor_x_1.encode)(reducedKeyShare));
+    }
+}
+exports.Derive = Derive;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/tss/eddsa-mps/dkg.d.ts

@@ -0,0 +1,109 @@
+import type { VrfKeygenSession as EddsaVrfKeygenSession } from '@silencelaboratories/eddsa-wasm-node';
+import type { VrfKeygenSession as EddsaVrfWebKeygenSession } from '@silencelaboratories/eddsa-wasm-web';
+import { DeserializedMessage, DeserializedMessages, DkgState, EddsaRetrofitData } from './types';
+export type { EddsaVrfKeygenSession, EddsaVrfWebKeygenSession };
+/**
+ * EdDSA Distributed Key Generation (DKG) implementation using @bitgo/wasm-mps.
+ *
+ * State is explicit: each round function returns `{ msg, state }` bytes.
+ * The state bytes are stored between rounds and passed to the next round function,
+ * mirroring the server-side persistence pattern (state would be serialised to DB).
+ *
+ * @example
+ * ```typescript
+ * const dkg = new DKG(3, 2, 0);
+ * // X25519 keys come from GPG encryption subkeys (extracted by the orchestrator)
+ * await dkg.initDkg(myX25519PrivKey, [otherParty1X25519PubKey, otherParty2X25519PubKey]);
+ * const msg1 = dkg.getFirstMessage();
+ * const msg2s = dkg.handleIncomingMessages(allThreeMsg1s);
+ * dkg.handleIncomingMessages(allThreeMsg2s);  // completes DKG
+ * const keyShare = dkg.getKeyShare();
+ * ```
+ */
+export declare class DKG {
+    protected n: number;
+    protected t: number;
+    protected partyIdx: number;
+    /** Private X25519 key (from GPG encryption subkey) */
+    private decryptionKey;
+    /** Other parties' X25519 public keys (from their GPG encryption subkeys), sorted by party index */
+    private otherPubKeys;
+    /** Serialised round state bytes returned by the previous round function */
+    private dkgStateBytes;
+    /** Opaque bincode-serialised keyshare from round2 */
+    private keyShare;
+    /** 32-byte Ed25519 public key from round2 */
+    private sharePk;
+    /** 32-byte chain code from round2 */
+    private shareChaincode;
+    /** Lazily loaded WASM module */
+    private wasmMps;
+    /** Optional MPCv1 retrofit data; when set, round0 uses ed25519_dkg_round0_import */
+    private retrofitData;
+    protected dkgState: DkgState;
+    constructor(n: number, t: number, partyIdx: number, retrofitData?: EddsaRetrofitData);
+    private loadWasmMps;
+    private getWasmMps;
+    getState(): DkgState;
+    /**
+     * Initialises the DKG session with this party's X25519 private key and the other parties'
+     * X25519 public keys. Keys are extracted from GPG encryption subkeys by the orchestrator.
+     *
+     * @param decryptionKey - This party's 32-byte X25519 private key (GPG enc subkey private part).
+     * @param otherEncPublicKeys - Other parties' 32-byte X25519 public keys, sorted by ascending
+     *   party index (excluding own). For a 3-party setup, this is [party_A_pub, party_B_pub].
+     */
+    initDkg(decryptionKey: Buffer, otherEncPublicKeys: Buffer[]): Promise<void>;
+    /**
+     * Runs round0 of the DKG protocol. Returns this party's broadcast message.
+     * Stores the round state bytes internally for the next round.
+     *
+     * @param dkgSeed - Optional 32-byte seed for deterministic DKG output (testing only).
+     */
+    getFirstMessage(dkgSeed?: Buffer): DeserializedMessage;
+    /**
+     * Handles incoming messages from all parties and advances the protocol.
+     *
+     * - In WaitMsg1: runs round1, returns this party's round1 broadcast message.
+     * - In WaitMsg2: runs round2, completes DKG, returns [].
+     *
+     * The caller passes all n messages (including own); own message is filtered
+     * out internally. Other parties' messages are sorted by ascending party index,
+     * matching the ordering expected by @bitgo/wasm-mps.
+     *
+     * @param messagesForIthRound - All n messages for this round (including own).
+     */
+    handleIncomingMessages(messagesForIthRound: DeserializedMessages): DeserializedMessages;
+    /**
+     * Returns the opaque bincode-serialised keyshare produced by round2.
+     * This is used as input to the signing protocol.
+     */
+    getKeyShare(): Buffer;
+    /**
+     * Returns the 32-byte Ed25519 public key agreed by all parties during DKG.
+     */
+    getSharePublicKey(): Buffer;
+    /**
+     * Returns the 128-char hex common keychain: 64-char public key + 64-char chain code.
+     * This matches the format expected by address derivation (Eddsa.deriveUnhardened).
+     */
+    getCommonKeychain(): string;
+    /**
+     * Returns a CBOR-encoded ReducedKeyShare buffer containing the party's opaque
+     * signing key share in the `keyShare` field. This buffer is private key material.
+     * The caller encrypts it and stores it as `reducedEncryptedPrv` on the key card QR code.
+     */
+    getReducedKeyShare(): Buffer;
+    /**
+     * Exports the current session state as a JSON string for persistence.
+     * Includes: round state bytes, current DKG round, decryption key, other parties' pub keys.
+     * This mirrors what a server would store in a database between API rounds.
+     */
+    getSession(): string;
+    /**
+     * Restores a previously exported session. Allows the protocol to continue
+     * from where it left off, as if the round state was loaded from a database.
+     */
+    restoreSession(session: string): void;
+}
+//# sourceMappingURL=dkg.d.ts.map

package/dist/src/tss/eddsa-mps/dkg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg.d.ts","sourceRoot":"","sources":["../../../../src/tss/eddsa-mps/dkg.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,IAAI,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AACtG,OAAO,KAAK,EAAE,gBAAgB,IAAI,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAGxG,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,QAAQ,EAAwB,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAKvH,YAAY,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,CAAC;AAEhE;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,GAAG;IACd,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE3B,sDAAsD;IACtD,OAAO,CAAC,aAAa,CAAuB;IAC5C,mGAAmG;IACnG,OAAO,CAAC,YAAY,CAAyB;IAC7C,2EAA2E;IAC3E,OAAO,CAAC,aAAa,CAAuB;IAC5C,qDAAqD;IACrD,OAAO,CAAC,QAAQ,CAAuB;IACvC,6CAA6C;IAC7C,OAAO,CAAC,OAAO,CAAuB;IACtC,qCAAqC;IACrC,OAAO,CAAC,cAAc,CAAuB;IAC7C,gCAAgC;IAChC,OAAO,CAAC,OAAO,CAAwB;IACvC,oFAAoF;IACpF,OAAO,CAAC,YAAY,CAAgC;IAEpD,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAA0B;gBAE1C,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,iBAAiB;YAOtE,WAAW;IAoBzB,OAAO,CAAC,UAAU;IAOlB,QAAQ,IAAI,QAAQ;IAIpB;;;;;;;OAOG;IACG,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjF;;;;;OAKG;IACH,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAgCtD;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,oBAAoB,GAAG,oBAAoB;IAuDvF;;;OAGG;IACH,WAAW,IAAI,MAAM;IAOrB;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAO3B;;;OAGG;IACH,iBAAiB,IAAI,MAAM;IAO3B;;;;OAIG;IACH,kBAAkB,IAAI,MAAM;IAY5B;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAgBpB;;;OAGG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAQtC"}