@bitgo-beta/sdk-lib-mpc 8.2.0-beta.212 → 8.2.0-beta.2120

package/dist/src/tss/redpallas-mps/rerand.js

@@ -0,0 +1,330 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedPallasRerand = void 0;
+const assert_1 = __importDefault(require("assert"));
+const types_1 = require("./types");
+/**
+ * RedPallas (Zcash Ironwood) key re-randomization implementation using @bitgo/wasm-mps.
+ *
+ * As of `@bitgo/wasm-mps` 1.17.0, key re-randomization has moved out of DSG and into
+ * this separate `rerand` protocol: DSG no longer randomizes the key it signs with.
+ * A rerand session MUST run before every RedPallas DSG, between the same 2 parties
+ * that will then sign:
+ *
+ * - Round 0 (local): each party commits to a fresh random randomizer.
+ * - Round 1 (commit): each party broadcasts its commitment.
+ * - Round 2 (open): each party broadcasts its randomizer and blind, bound to the
+ *   session id. Both parties then locally verify the openings and apply the same
+ *   tweak `alpha = hash(Σ randomizers)`: `d_i += alpha`, `pk += G·alpha`.
+ *
+ * The output `RedPallasRerandShare` is a rerandomized keyshare (`share`), the
+ * rerandomized public key (`pk`) and the tweak scalar (`alpha`). `share` is what
+ * goes into `RedPallasDSG.initDsg`; the resulting DSG signature verifies under
+ * `rk == pk`, and `alpha` is only available here — not from the DSG result.
+ *
+ * Signing a stored DKG keyshare directly (without rerand) still yields a valid
+ * signature, but under the bare DKG public key with the same `rk` every time; the
+ * rerand → DSG sequence is the supported path.
+ *
+ * Mirrors the structure of `RedPallasDSG` (see `./dsg.ts`): lazy web/node WASM
+ * loading, explicit round state bytes persisted between rounds, hard-coded 2-of-3
+ * with a single counterpart, and the same 2-message `handleIncomingMessages`
+ * contract (own + counterpart; own is filtered out internally).
+ *
+ * @example
+ * ```typescript
+ * const rerand = new RedPallasRerand(0);  // partyIdx 0
+ * await rerand.initRerand(keyShare, 2);  // counterpart is party 2
+ * const msg1 = rerand.getFirstMessage();
+ * const msg2 = rerand.handleIncomingMessages([msg1, peerMsg1]);  // emits rerand msg2
+ * rerand.handleIncomingMessages([msg2[0], peerMsg2]);  // completes rerand
+ * const { keyShare, pk, alpha } = rerand.getRerandomizedKeyShare();
+ * const dsg = new RedPallasDSG(0);
+ * await dsg.initDsg(keyShare, message, 2);  // DSG verifies under rk == pk
+ * ```
+ */
+class RedPallasRerand {
+    constructor(partyIdx) {
+        this.otherPartyIdx = null;
+        /** Opaque bincode-serialised Keyshare from a prior DKG (already derived, if applicable) */
+        this.keyShare = null;
+        /** Serialised round state bytes returned by the previous round function */
+        this.rerandStateBytes = null;
+        /** Final rerandomized share bundle, available after WaitMsg2 -> Complete */
+        this.rerandResult = null;
+        /** Lazily loaded WASM module */
+        this.wasmMps = null;
+        this.rerandState = types_1.RedPallasRerandState.Uninitialized;
+        this.partyIdx = partyIdx;
+    }
+    getState() {
+        return this.rerandState;
+    }
+    getPartyIdx() {
+        return this.partyIdx;
+    }
+    getOtherPartyIdx() {
+        return this.otherPartyIdx;
+    }
+    async loadWasmMps() {
+        if (!this.wasmMps) {
+            if (typeof window !== 'undefined' &&
+                /* checks for electron processes */
+                !window.process &&
+                !window.process?.['type']) {
+                // Browser: web build has explicit init() — guaranteed ready after await
+                // eslint-disable-next-line import/no-internal-modules -- @bitgo/wasm-mps exposes environment-specific subpath exports.
+                const webWasm = await Promise.resolve().then(() => __importStar(require('@bitgo/wasm-mps/web')));
+                await webWasm.default();
+                this.wasmMps = webWasm;
+            }
+            else {
+                // Node.js: dynamic import() rewritten to require() by tsc → CJS build → readFileSync
+                this.wasmMps = await Promise.resolve().then(() => __importStar(require('@bitgo/wasm-mps')));
+            }
+        }
+    }
+    getWasmMps() {
+        if (!this.wasmMps) {
+            throw Error('WASM module not loaded');
+        }
+        return this.wasmMps;
+    }
+    /**
+     * Initialises the rerand session. The keyshare must come from a prior DKG run (and,
+     * if a derived key is being used, from the subsequent platform-side derivation
+     * process), and `otherPartyIdx` must be the single counterpart who will then co-sign
+     * (via DSG) with this party. Rerand and DSG must use the same 2 parties.
+     *
+     * @param keyShare - Opaque bincode-serialised Keyshare bytes from `RedPallasDKG.getKeyShare()`.
+     * @param otherPartyIdx - Party index of the single counterpart in this rerand session.
+     *   Must differ from this party's own `partyIdx` and be in `[0, 2]`.
+     */
+    async initRerand(keyShare, otherPartyIdx) {
+        await this.loadWasmMps();
+        if (!keyShare || keyShare.length === 0) {
+            throw Error('Missing or invalid keyShare');
+        }
+        if (this.partyIdx < 0 || this.partyIdx > 2) {
+            throw Error(`Invalid partyIdx ${this.partyIdx}: must be in [0, 2]`);
+        }
+        if (otherPartyIdx < 0 || otherPartyIdx > 2 || otherPartyIdx === this.partyIdx) {
+            throw Error(`Invalid otherPartyIdx ${otherPartyIdx}: must be in [0, 2] and != partyIdx`);
+        }
+        this.keyShare = keyShare;
+        this.otherPartyIdx = otherPartyIdx;
+        this.rerandState = types_1.RedPallasRerandState.Init;
+    }
+    /**
+     * Runs round 0 of the rerand protocol (local). Returns this party's broadcast
+     * message (a commitment to a fresh random randomizer). Stores the round state
+     * bytes internally for the next round.
+     */
+    getFirstMessage() {
+        if (this.rerandState !== types_1.RedPallasRerandState.Init) {
+            throw Error('Rerand session not initialized');
+        }
+        (0, assert_1.default)(this.keyShare, 'keyShare must be set after initRerand');
+        const wasm = this.getWasmMps();
+        let result;
+        try {
+            result = wasm.redpallas_rerand_round0_process(this.keyShare);
+        }
+        catch (err) {
+            throw new Error(`Error while creating the first message from party ${this.partyIdx}: ${err}`);
+        }
+        this.rerandStateBytes = Buffer.from(result.state);
+        this.rerandState = types_1.RedPallasRerandState.WaitMsg1;
+        return { payload: new Uint8Array(result.msg), from: this.partyIdx };
+    }
+    /**
+     * Handles incoming messages for the current round and advances the protocol.
+     *
+     * - In `WaitMsg1`: runs round 1 (commit), returns this party's round 2 broadcast
+     *   (its randomizer and blind).
+     * - In `WaitMsg2`: runs round 2 (open + local tweak), completes rerand, returns `[]`.
+     *
+     * The caller passes both messages (own + counterpart) for symmetry with
+     * `RedPallasDSG.handleIncomingMessages`. Own message is filtered out internally;
+     * only the counterpart's payload is forwarded to the WASM round function.
+     *
+     * @param messagesForIthRound - Both messages for this round (own + counterpart).
+     */
+    handleIncomingMessages(messagesForIthRound) {
+        if (this.rerandState === types_1.RedPallasRerandState.Complete) {
+            throw Error('Rerand session already completed');
+        }
+        if (this.rerandState === types_1.RedPallasRerandState.Uninitialized) {
+            throw Error('Rerand session not initialized');
+        }
+        if (this.rerandState === types_1.RedPallasRerandState.Init) {
+            throw Error('Rerand session must call getFirstMessage() before handling incoming messages. Call getFirstMessage() first.');
+        }
+        if (messagesForIthRound.length !== 2) {
+            throw Error('Invalid number of messages for the round. Expected 2 messages (own + counterpart) for 2-of-3 rerand');
+        }
+        const peerMessages = messagesForIthRound.filter((m) => m.from !== this.partyIdx);
+        if (peerMessages.length !== 1) {
+            throw Error(`Expected exactly 1 counterpart message; got ${peerMessages.length}`);
+        }
+        const peerMsg = peerMessages[0];
+        if (peerMsg.from !== this.otherPartyIdx) {
+            throw Error(`Unexpected counterpart party index: got ${peerMsg.from}, expected ${this.otherPartyIdx}`);
+        }
+        const peerPayload = Buffer.from(peerMsg.payload);
+        const wasm = this.getWasmMps();
+        if (this.rerandState === types_1.RedPallasRerandState.WaitMsg1) {
+            (0, assert_1.default)(this.rerandStateBytes, 'rerandStateBytes must be set in WaitMsg1');
+            let result;
+            try {
+                result = wasm.redpallas_rerand_round1_process(peerPayload, this.rerandStateBytes);
+            }
+            catch (err) {
+                throw new Error(`Error while creating messages from party ${this.partyIdx}, round ${this.rerandState}: ${err}`);
+            }
+            this.rerandStateBytes = Buffer.from(result.state);
+            this.rerandState = types_1.RedPallasRerandState.WaitMsg2;
+            return [{ payload: new Uint8Array(result.msg), from: this.partyIdx }];
+        }
+        if (this.rerandState === types_1.RedPallasRerandState.WaitMsg2) {
+            (0, assert_1.default)(this.rerandStateBytes, 'rerandStateBytes must be set in WaitMsg2');
+            let result;
+            try {
+                result = wasm.redpallas_rerand_round2_process(peerPayload, this.rerandStateBytes);
+            }
+            catch (err) {
+                throw new Error(`Error while creating messages from party ${this.partyIdx}, round ${this.rerandState}: ${err}`);
+            }
+            this.rerandResult = {
+                keyShare: Buffer.from(result.share),
+                pk: Buffer.from(result.pk),
+                alpha: Buffer.from(result.alpha),
+            };
+            this.rerandStateBytes = null;
+            this.rerandState = types_1.RedPallasRerandState.Complete;
+            return [];
+        }
+        throw Error('Unexpected rerand state');
+    }
+    /**
+     * Returns the rerandomized share bundle produced by round 2: the rerandomized
+     * keyshare `keyShare` (to be passed to `RedPallasDSG.initDsg`), the rerandomized
+     * public key `pk` (the DSG result's `rk` equals it), and the 32-byte tweak scalar
+     * `alpha` (fresh per rerand session, identical on both parties).
+     */
+    getRerandomizedKeyShare() {
+        if (!this.rerandResult) {
+            throw Error('Rerand session has not produced a rerandomized key share yet');
+        }
+        return this.rerandResult;
+    }
+    /**
+     * Exports the current session state as a JSON string for persistence.
+     * Includes the opaque round state bytes plus everything needed to re-enter the
+     * protocol after a restart (keyshare, counterpart).
+     */
+    getSession() {
+        if (this.rerandState === types_1.RedPallasRerandState.Complete) {
+            throw Error('Rerand session is complete. Exporting the session is not allowed.');
+        }
+        if (this.rerandState === types_1.RedPallasRerandState.Uninitialized) {
+            throw Error('Rerand session not initialized');
+        }
+        if (this.rerandState === types_1.RedPallasRerandState.Init) {
+            throw Error('Rerand session must produce its first message before exporting.');
+        }
+        return JSON.stringify({
+            rerandStateBytes: this.rerandStateBytes?.toString('base64') ?? null,
+            rerandRound: this.rerandState,
+            keyShare: this.keyShare?.toString('base64') ?? null,
+            partyIdx: this.partyIdx,
+            otherPartyIdx: this.otherPartyIdx,
+        });
+    }
+    /**
+     * Restores a previously exported session. Allows the protocol to continue from
+     * where it left off, as if the round state was loaded from a database.
+     */
+    async restoreSession(session) {
+        await this.loadWasmMps();
+        const data = JSON.parse(session);
+        if (!Object.values(types_1.RedPallasRerandState).includes(data.rerandRound)) {
+            throw Error(`Invalid rerandRound in session: ${data.rerandRound}`);
+        }
+        if (data.rerandRound === types_1.RedPallasRerandState.Uninitialized || data.rerandRound === types_1.RedPallasRerandState.Init) {
+            throw Error(`Cannot restore rerand session in state ${data.rerandRound}`);
+        }
+        if (data.rerandRound === types_1.RedPallasRerandState.Complete) {
+            throw Error('Rerand session is complete. Restoring the session is not allowed.');
+        }
+        if (typeof data.partyIdx !== 'number' || data.partyIdx < 0 || data.partyIdx > 2) {
+            throw Error(`Invalid partyIdx in session: ${data.partyIdx}`);
+        }
+        if (typeof data.otherPartyIdx !== 'number' ||
+            data.otherPartyIdx < 0 ||
+            data.otherPartyIdx > 2 ||
+            data.otherPartyIdx === data.partyIdx) {
+            throw Error(`Invalid otherPartyIdx in session: ${data.otherPartyIdx}`);
+        }
+        if (this.partyIdx !== data.partyIdx) {
+            throw Error(`Session partyIdx ${data.partyIdx} does not match instance ${this.partyIdx}`);
+        }
+        if (typeof data.rerandStateBytes !== 'string' || data.rerandStateBytes.length === 0) {
+            throw Error(`Round ${data.rerandRound} requires rerandStateBytes`);
+        }
+        if (typeof data.keyShare !== 'string' || data.keyShare.length === 0) {
+            throw Error('Restored session missing keyShare');
+        }
+        const rerandStateBytes = Buffer.from(data.rerandStateBytes, 'base64');
+        const keyShare = Buffer.from(data.keyShare, 'base64');
+        if (rerandStateBytes.length === 0) {
+            throw Error(`Round ${data.rerandRound} requires rerandStateBytes`);
+        }
+        if (keyShare.length === 0) {
+            throw Error('Restored session missing keyShare');
+        }
+        this.rerandStateBytes = rerandStateBytes;
+        this.rerandState = data.rerandRound;
+        this.keyShare = keyShare;
+        this.partyIdx = data.partyIdx;
+        this.otherPartyIdx = data.otherPartyIdx;
+    }
+}
+exports.RedPallasRerand = RedPallasRerand;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/tss/redpallas-mps/types.d.ts

@@ -0,0 +1,120 @@
+import * as t from 'io-ts';
+export declare const RedPallasReducedKeyShareType: t.TypeC<{
+    keyShare: t.ArrayC<t.NumberC>;
+    pub: t.ArrayC<t.NumberC>;
+}>;
+export type RedPallasReducedKeyShare = t.TypeOf<typeof RedPallasReducedKeyShareType>;
+/**
+ * Represents the state of a RedPallas DKG (Distributed Key Generation) session.
+ *
+ * Unlike the EdDSA MPS `DkgState`, there is no `Share` state: `redpallas_dkg_round2_process`
+ * returns a `MsgDerivationInit` (msg/pk/share/state) directly, completing the DKG session in
+ * one step. Key derivation (ask/nk/rivk/ivks) is a separate, subsequent, platform-side-only
+ * process (`redpallas_derivation_process`) not modelled here.
+ */
+export declare enum RedPallasDkgState {
+    /** DKG session has not been initialized */
+    Uninitialized = "Uninitialized",
+    /** DKG session has been initialized (Init state in WASM) */
+    Init = "Init",
+    /** DKG session is waiting for first message (WaitMsg1 state in WASM) */
+    WaitMsg1 = "WaitMsg1",
+    /** DKG session is waiting for second message (WaitMsg2 state in WASM) */
+    WaitMsg2 = "WaitMsg2",
+    /** DKG session has completed successfully and key shares are available */
+    Complete = "Complete"
+}
+/**
+ * Represents the state of a RedPallas DSG (Distributed Sign Generation) session.
+ *
+ * Mirrors the EdDSA MPS `DsgState`, except `redpallas_dsg_round0_process` does not take a
+ * derivation path: RedPallas key derivation (ask/nk/rivk/ivks) happens separately, upstream,
+ * as part of DKG (see `RedPallasDkgState`); the DSG round functions only ever operate on an
+ * already-derived (or root) `Keyshare`. The keyshare passed to DSG must come from a prior
+ * `RedPallasRerand` session (see `RedPallasRerandState`).
+ */
+export declare enum RedPallasDsgState {
+    /** DSG session has not been initialized */
+    Uninitialized = "Uninitialized",
+    /** initDsg() has been called; ready for getFirstMessage() */
+    Init = "Init",
+    /** R0 broadcast emitted; waiting for counterpart's R0 broadcast (SignMsg1) */
+    WaitMsg1 = "WaitMsg1",
+    /** R1 broadcast emitted; waiting for counterpart's R1 broadcast (SignMsg2) */
+    WaitMsg2 = "WaitMsg2",
+    /** R2 broadcast emitted; waiting for counterpart's R2 broadcast (SignMsg3, the partial sig) */
+    WaitMsg3 = "WaitMsg3",
+    /** Final RedPallas signature (signature/rk) is available via getSignature() */
+    Complete = "Complete"
+}
+/**
+ * Represents the state of a RedPallas rerand (key re-randomization) session.
+ *
+ * A rerand session must run before every RedPallas DSG, between the same 2 parties
+ * that will then sign. Since `@bitgo/wasm-mps` 1.17.0, DSG no longer randomizes the
+ * key it signs with; the randomizer (`alpha`) is produced here instead.
+ */
+export declare enum RedPallasRerandState {
+    /** Rerand session has not been initialized */
+    Uninitialized = "Uninitialized",
+    /** initRerand() has been called; ready for getFirstMessage() */
+    Init = "Init",
+    /** R0 (local commitment) emitted; waiting for counterpart's R0 broadcast (commitment) */
+    WaitMsg1 = "WaitMsg1",
+    /** R1 broadcast emitted; waiting for counterpart's R1 broadcast (randomizer + blind opening) */
+    WaitMsg2 = "WaitMsg2",
+    /** Rerandomized key share (keyShare/pk/alpha) is available via getRerandomizedKeyShare() */
+    Complete = "Complete"
+}
+/**
+ * The final output of a RedPallas rerand session.
+ *
+ * - `keyShare` is the rerandomized keyshare to be passed to `RedPallasDSG.initDsg`.
+ * - `pk` is the rerandomized public key; the DSG result's `rk` equals it, and the DSG
+ *   signature verifies under it.
+ * - `alpha` is the 32-byte tweak scalar applied to both the DKG keyshares and the DKG
+ *   public key (`pk = pk_dkg + [alpha]G`). It is fresh per rerand session and identical
+ *   on both parties. Since the rerand protocol moved out of DSG (wasm-mps 1.17.0), this
+ *   is the only place `alpha` is exposed.
+ */
+export interface RedPallasRerandResult {
+    keyShare: Buffer;
+    pk: Buffer;
+    alpha: Buffer;
+}
+/**
+ * The final output of a RedPallas DSG session.
+ *
+ * - `signature` is the 64-byte raw Schnorr (RedPallas) signature.
+ * - `rk` is the rerandomized verification key that the signature must be verified against
+ *   (i.e. `redpallas_verify(rk, signature, message)`), not the DKG public key. DSG does
+ *   not randomize the key it signs with: `rk` equals the `pk` of the rerandomized
+ *   keyshare the DSG session was initialized with (see `RedPallasRerandResult`), and
+ *   the corresponding `alpha` is available from that rerand result.
+ */
+export interface RedPallasSignatureResult {
+    signature: Buffer;
+    rk: Buffer;
+}
+/** A PGP detached-signed message by a party.
+ * `message` is the raw payload encoded as base64.
+ * `signature` is an armored PGP detached signature over those bytes.
+ */
+export interface MPSSignedMessage {
+    message: string;
+    signature: string;
+}
+export interface Message<T> {
+    payload: T;
+    from: number;
+}
+export type SerializedMessage = Message<string>;
+export type SerializedMessages = Message<string>[];
+export type DeserializedMessage = Message<Uint8Array>;
+export type DeserializedMessages = Message<Uint8Array>[];
+export declare function serializeMessage(msg: DeserializedMessage): SerializedMessage;
+export declare function deserializeMessage(msg: SerializedMessage): DeserializedMessage;
+export declare function serializeMessages(msgs: DeserializedMessages): SerializedMessages;
+export declare function deserializeMessages(msgs: SerializedMessages): DeserializedMessages;
+export declare function getDecodedReducedKeyShare(reducedKeyShare: Buffer | Uint8Array): RedPallasReducedKeyShare;
+//# sourceMappingURL=types.d.ts.map

package/dist/src/tss/redpallas-mps/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/tss/redpallas-mps/types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,CAAC,MAAM,OAAO,CAAC;AAE3B,eAAO,MAAM,4BAA4B;;;EAGvC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErF;;;;;;;GAOG;AACH,oBAAY,iBAAiB;IAC3B,2CAA2C;IAC3C,aAAa,kBAAkB;IAC/B,4DAA4D;IAC5D,IAAI,SAAS;IACb,wEAAwE;IACxE,QAAQ,aAAa;IACrB,yEAAyE;IACzE,QAAQ,aAAa;IACrB,0EAA0E;IAC1E,QAAQ,aAAa;CACtB;AAED;;;;;;;;GAQG;AACH,oBAAY,iBAAiB;IAC3B,2CAA2C;IAC3C,aAAa,kBAAkB;IAC/B,6DAA6D;IAC7D,IAAI,SAAS;IACb,8EAA8E;IAC9E,QAAQ,aAAa;IACrB,8EAA8E;IAC9E,QAAQ,aAAa;IACrB,+FAA+F;IAC/F,QAAQ,aAAa;IACrB,+EAA+E;IAC/E,QAAQ,aAAa;CACtB;AAED;;;;;;GAMG;AACH,oBAAY,oBAAoB;IAC9B,8CAA8C;IAC9C,aAAa,kBAAkB;IAC/B,gEAAgE;IAChE,IAAI,SAAS;IACb,yFAAyF;IACzF,QAAQ,aAAa;IACrB,gGAAgG;IAChG,QAAQ,aAAa;IACrB,4FAA4F;IAC5F,QAAQ,aAAa;CACtB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,OAAO,CAAC,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAEhD,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AAEnD,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtD,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;AAEzD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,GAAG,iBAAiB,CAE5E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,GAAG,mBAAmB,CAE9E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,GAAG,kBAAkB,CAEhF;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG,oBAAoB,CAElF;AAED,wBAAgB,yBAAyB,CAAC,eAAe,EAAE,MAAM,GAAG,UAAU,GAAG,wBAAwB,CAMxG"}