@bitgo/sdk-core 38.8.0 → 38.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/src/account-lib/baseCoin/enum.d.ts +4 -1
- package/dist/src/account-lib/baseCoin/enum.d.ts.map +1 -1
- package/dist/src/account-lib/baseCoin/enum.js +7 -1
- package/dist/src/bitgo/keychain/iKeychains.d.ts +2 -0
- package/dist/src/bitgo/keychain/iKeychains.d.ts.map +1 -1
- package/dist/src/bitgo/keychain/iKeychains.js +1 -1
- package/dist/src/bitgo/pendingApproval/pendingApproval.d.ts.map +1 -1
- package/dist/src/bitgo/pendingApproval/pendingApproval.js +9 -2
- package/dist/src/bitgo/safe/index.d.ts +1 -0
- package/dist/src/bitgo/safe/index.d.ts.map +1 -1
- package/dist/src/bitgo/safe/index.js +2 -1
- package/dist/src/bitgo/safe/safeDerivation.d.ts +11 -0
- package/dist/src/bitgo/safe/safeDerivation.d.ts.map +1 -0
- package/dist/src/bitgo/safe/safeDerivation.js +39 -0
- package/dist/src/bitgo/wallet/iWallet.d.ts +3 -0
- package/dist/src/bitgo/wallet/iWallet.d.ts.map +1 -1
- package/dist/src/bitgo/wallet/iWallet.js +1 -1
- package/dist/src/bitgo/wallet/index.d.ts +1 -0
- package/dist/src/bitgo/wallet/index.d.ts.map +1 -1
- package/dist/src/bitgo/wallet/index.js +2 -1
- package/dist/src/bitgo/wallet/safeKeychain.d.ts +52 -0
- package/dist/src/bitgo/wallet/safeKeychain.d.ts.map +1 -0
- package/dist/src/bitgo/wallet/safeKeychain.js +97 -0
- package/dist/src/bitgo/wallet/wallet.d.ts +3 -0
- package/dist/src/bitgo/wallet/wallet.d.ts.map +1 -1
- package/dist/src/bitgo/wallet/wallet.js +54 -17
- package/dist/test/unit/bitgo/wallet/safeGetUserPrv.d.ts +5 -0
- package/dist/test/unit/bitgo/wallet/safeGetUserPrv.d.ts.map +1 -0
- package/dist/test/unit/bitgo/wallet/safeGetUserPrv.js +614 -0
- package/dist/tsconfig.tsbuildinfo +1 -1
- package/package.json +5 -5
|
@@ -0,0 +1,614 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
/**
|
|
37
|
+
* @prettier
|
|
38
|
+
*/
|
|
39
|
+
require("should");
|
|
40
|
+
const sinon = __importStar(require("sinon"));
|
|
41
|
+
const src_1 = require("../../../../src");
|
|
42
|
+
require('should-sinon');
|
|
43
|
+
describe('WCN-1200 safe child getUserPrv root-fetch detour', function () {
|
|
44
|
+
const prv = 'xprv9s21ZrQH143K3hekyNj7TciR4XNYe1kMj68W2ipjJGNHETWP7o42AjDnSPgKhdZ4x8NBAvaL72RrXjuXNdmkMqLERZza73oYugGtbLFXG8g';
|
|
45
|
+
// Soft deriveKeyWithSeedBip32(prv, '123') — must NOT be used for safe owners.
|
|
46
|
+
const softDerivedPrv = 'xprv9yoG67Td11uwjXwbV8zEmrySVXERu5FZAsLD9suBeEJbgJqANs8Yng5dEJoii7hag5JermK6PbfxgDmSzW7ewWeLmeJEkmPfmZUSLdETtHx';
|
|
47
|
+
const hardened = (0, src_1.deriveSafeChildHardenedFromXprv)(prv, '123');
|
|
48
|
+
const passphrase = 'test-passphrase';
|
|
49
|
+
const rootKeyId = 'root-key-id';
|
|
50
|
+
let mockBitGo;
|
|
51
|
+
let mockBaseCoin;
|
|
52
|
+
let keychainsGetStub;
|
|
53
|
+
let encryptStub;
|
|
54
|
+
let decryptStub;
|
|
55
|
+
const baseWalletData = {
|
|
56
|
+
id: 'wallet-id',
|
|
57
|
+
coin: 'tbtc',
|
|
58
|
+
keys: ['user-key', 'backup-key', 'bitgo-key'],
|
|
59
|
+
type: 'hot',
|
|
60
|
+
multisigType: 'onchain',
|
|
61
|
+
enterprise: 'ent-id',
|
|
62
|
+
};
|
|
63
|
+
beforeEach(function () {
|
|
64
|
+
keychainsGetStub = sinon.stub();
|
|
65
|
+
encryptStub = sinon.stub();
|
|
66
|
+
decryptStub = sinon.stub();
|
|
67
|
+
mockBitGo = {
|
|
68
|
+
encrypt: encryptStub,
|
|
69
|
+
decrypt: decryptStub,
|
|
70
|
+
url: sinon.stub().returns('https://test.bitgo.com/'),
|
|
71
|
+
setRequestTracer: sinon.stub(),
|
|
72
|
+
};
|
|
73
|
+
mockBaseCoin = {
|
|
74
|
+
getChain: sinon.stub().returns('tbtc'),
|
|
75
|
+
getFamily: sinon.stub().returns('btc'),
|
|
76
|
+
getFullName: sinon.stub().returns('Test Bitcoin'),
|
|
77
|
+
keychains: sinon.stub().returns({
|
|
78
|
+
get: keychainsGetStub,
|
|
79
|
+
getKeysForSigning: sinon.stub().resolves([]),
|
|
80
|
+
}),
|
|
81
|
+
deriveKeyWithSeed: sinon.stub().callsFake(({ key, seed }) => {
|
|
82
|
+
if (key === prv && seed === '123') {
|
|
83
|
+
return { key: softDerivedPrv, derivationPath: 'm/999999/...' };
|
|
84
|
+
}
|
|
85
|
+
return { key: `derived(${key},${seed})`, derivationPath: 'm/0' };
|
|
86
|
+
}),
|
|
87
|
+
url: sinon.stub().callsFake((path) => `https://test.bitgo.com/api/v2/tbtc${path}`),
|
|
88
|
+
supportsStaking: sinon.stub().returns(false),
|
|
89
|
+
supportsTss: sinon.stub().returns(false),
|
|
90
|
+
getMPCAlgorithm: sinon.stub(),
|
|
91
|
+
keyIdsForSigning: sinon.stub().returns([0, 1, 2]),
|
|
92
|
+
};
|
|
93
|
+
decryptStub.callsFake(({ input, password }) => {
|
|
94
|
+
if (password !== passphrase) {
|
|
95
|
+
return null;
|
|
96
|
+
}
|
|
97
|
+
if (typeof input === 'string' && input.startsWith('enc:')) {
|
|
98
|
+
return input.slice(4);
|
|
99
|
+
}
|
|
100
|
+
return null;
|
|
101
|
+
});
|
|
102
|
+
});
|
|
103
|
+
afterEach(function () {
|
|
104
|
+
sinon.restore();
|
|
105
|
+
});
|
|
106
|
+
function makeWallet(overrides = {}) {
|
|
107
|
+
return new src_1.Wallet(mockBitGo, mockBaseCoin, {
|
|
108
|
+
...baseWalletData,
|
|
109
|
+
...overrides,
|
|
110
|
+
});
|
|
111
|
+
}
|
|
112
|
+
describe('safeDerivation', function () {
|
|
113
|
+
it('builds the hardened path from the mint index', function () {
|
|
114
|
+
(0, src_1.getSafeHardenedDerivationPath)(123).should.eql("m/999999'/123'");
|
|
115
|
+
(0, src_1.getSafeHardenedDerivationPath)('0').should.eql("m/999999'/0'");
|
|
116
|
+
});
|
|
117
|
+
it('rejects a non-integer index', function () {
|
|
118
|
+
(() => (0, src_1.getSafeHardenedDerivationPath)('abc')).should.throw(/Invalid safe derivation index/);
|
|
119
|
+
});
|
|
120
|
+
it('hardened-derives a child that differs from soft deriveKeyWithSeed', function () {
|
|
121
|
+
hardened.derivationPath.should.eql("m/999999'/123'");
|
|
122
|
+
hardened.prv.should.not.eql(softDerivedPrv);
|
|
123
|
+
hardened.prv.should.eql('xprv9wMxE3idjgW7UoSodEZgYpy7aSzt32GC7j63s277VwkRbVvnkRubmFqZ4UUghHVTaSbdHZA3NM8FuwH4CoTQzaVzzUh1BwKcNYn17NczoQy');
|
|
124
|
+
hardened.pub.should.eql('xpub6AMJdZFXa44QhHXGjG6guxur8UqNSUz3Ux1efQWj4HHQUJFwHyDrK4A2ukru4QZ9PfhTYbPLBNYFL7gbdhTidSppW1aQ9QgYPT5cBFmoDEu');
|
|
125
|
+
});
|
|
126
|
+
});
|
|
127
|
+
describe('fetchRootKeychainForSafeChild', function () {
|
|
128
|
+
it('throws when child keychain has no parent', async function () {
|
|
129
|
+
await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
|
|
130
|
+
id: 'child-key',
|
|
131
|
+
type: 'independent',
|
|
132
|
+
pub: 'child-pub',
|
|
133
|
+
}).should.be.rejectedWith('childKeychain.parent is required to fetch the root keychain');
|
|
134
|
+
keychainsGetStub.notCalled.should.be.true();
|
|
135
|
+
});
|
|
136
|
+
it('throws InvalidRootKeychainSourceError when root source is backup', async function () {
|
|
137
|
+
keychainsGetStub.resolves({
|
|
138
|
+
id: rootKeyId,
|
|
139
|
+
source: 'backup',
|
|
140
|
+
encryptedPrv: 'enc:root',
|
|
141
|
+
type: 'independent',
|
|
142
|
+
pub: 'root-pub',
|
|
143
|
+
});
|
|
144
|
+
await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
|
|
145
|
+
id: 'child-key',
|
|
146
|
+
parent: rootKeyId,
|
|
147
|
+
type: 'independent',
|
|
148
|
+
pub: 'child-pub',
|
|
149
|
+
}).should.be.rejectedWith(src_1.InvalidRootKeychainSourceError);
|
|
150
|
+
});
|
|
151
|
+
it('returns the root keychain when source is user', async function () {
|
|
152
|
+
const root = {
|
|
153
|
+
id: rootKeyId,
|
|
154
|
+
source: 'user',
|
|
155
|
+
encryptedPrv: 'enc:root',
|
|
156
|
+
type: 'independent',
|
|
157
|
+
pub: 'root-pub',
|
|
158
|
+
};
|
|
159
|
+
keychainsGetStub.resolves(root);
|
|
160
|
+
const result = await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
|
|
161
|
+
id: 'child-key',
|
|
162
|
+
parent: rootKeyId,
|
|
163
|
+
type: 'independent',
|
|
164
|
+
pub: 'child-pub',
|
|
165
|
+
});
|
|
166
|
+
result.should.eql(root);
|
|
167
|
+
});
|
|
168
|
+
it('throws when root keychain has no encryptedPrv', async function () {
|
|
169
|
+
keychainsGetStub.resolves({
|
|
170
|
+
id: rootKeyId,
|
|
171
|
+
source: 'user',
|
|
172
|
+
type: 'independent',
|
|
173
|
+
pub: 'root-pub',
|
|
174
|
+
});
|
|
175
|
+
await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
|
|
176
|
+
id: 'child-key',
|
|
177
|
+
parent: rootKeyId,
|
|
178
|
+
type: 'independent',
|
|
179
|
+
pub: 'child-pub',
|
|
180
|
+
}).should.be.rejectedWith(/does not have property encryptedPrv/);
|
|
181
|
+
});
|
|
182
|
+
});
|
|
183
|
+
describe('getUserPrv', function () {
|
|
184
|
+
it('throws when keychain has no encryptedPrv on a non-safe wallet', async function () {
|
|
185
|
+
const wallet = makeWallet();
|
|
186
|
+
await wallet
|
|
187
|
+
.getUserPrv({
|
|
188
|
+
keychain: {
|
|
189
|
+
id: 'child-key',
|
|
190
|
+
pub: 'pub',
|
|
191
|
+
type: 'independent',
|
|
192
|
+
},
|
|
193
|
+
walletPassphrase: passphrase,
|
|
194
|
+
})
|
|
195
|
+
.should.be.rejectedWith('keychain does not have property encryptedPrv');
|
|
196
|
+
});
|
|
197
|
+
it('throws for a non-safe wallet even when keychain has parent', async function () {
|
|
198
|
+
const wallet = makeWallet();
|
|
199
|
+
await wallet
|
|
200
|
+
.getUserPrv({
|
|
201
|
+
keychain: {
|
|
202
|
+
id: 'child-key',
|
|
203
|
+
pub: 'pub',
|
|
204
|
+
type: 'independent',
|
|
205
|
+
parent: rootKeyId,
|
|
206
|
+
},
|
|
207
|
+
walletPassphrase: passphrase,
|
|
208
|
+
})
|
|
209
|
+
.should.be.rejectedWith('keychain does not have property encryptedPrv');
|
|
210
|
+
keychainsGetStub.notCalled.should.be.true();
|
|
211
|
+
});
|
|
212
|
+
it('throws for a safe wallet when keychain has no parent', async function () {
|
|
213
|
+
const wallet = makeWallet({ safeId: 'safe-id-1' });
|
|
214
|
+
await wallet
|
|
215
|
+
.getUserPrv({
|
|
216
|
+
keychain: {
|
|
217
|
+
id: 'child-key',
|
|
218
|
+
pub: 'pub',
|
|
219
|
+
type: 'independent',
|
|
220
|
+
},
|
|
221
|
+
walletPassphrase: passphrase,
|
|
222
|
+
})
|
|
223
|
+
.should.be.rejectedWith('keychain does not have property encryptedPrv');
|
|
224
|
+
keychainsGetStub.notCalled.should.be.true();
|
|
225
|
+
});
|
|
226
|
+
it('fetches root and hardened-derives child key for safe owner', async function () {
|
|
227
|
+
const wallet = makeWallet({ safeId: 'safe-id-1' });
|
|
228
|
+
keychainsGetStub.resolves({
|
|
229
|
+
id: rootKeyId,
|
|
230
|
+
source: 'user',
|
|
231
|
+
encryptedPrv: `enc:${prv}`,
|
|
232
|
+
type: 'independent',
|
|
233
|
+
pub: 'root-pub',
|
|
234
|
+
});
|
|
235
|
+
const result = await wallet.getUserPrv({
|
|
236
|
+
keychain: {
|
|
237
|
+
id: 'child-key',
|
|
238
|
+
pub: hardened.pub,
|
|
239
|
+
type: 'independent',
|
|
240
|
+
parent: rootKeyId,
|
|
241
|
+
derivedFromParentWithSeed: '123',
|
|
242
|
+
},
|
|
243
|
+
walletPassphrase: passphrase,
|
|
244
|
+
});
|
|
245
|
+
result.should.eql(hardened.prv);
|
|
246
|
+
result.should.not.eql(softDerivedPrv);
|
|
247
|
+
keychainsGetStub.calledOnceWithExactly({ id: rootKeyId }).should.be.true();
|
|
248
|
+
mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
|
|
249
|
+
});
|
|
250
|
+
it('throws when onchain safe owner is missing derivedFromParentWithSeed', async function () {
|
|
251
|
+
const wallet = makeWallet({ safeId: 'safe-id-1' });
|
|
252
|
+
keychainsGetStub.resolves({
|
|
253
|
+
id: rootKeyId,
|
|
254
|
+
source: 'user',
|
|
255
|
+
encryptedPrv: `enc:${prv}`,
|
|
256
|
+
type: 'independent',
|
|
257
|
+
pub: 'root-pub',
|
|
258
|
+
});
|
|
259
|
+
await wallet
|
|
260
|
+
.getUserPrv({
|
|
261
|
+
keychain: {
|
|
262
|
+
id: 'child-key',
|
|
263
|
+
pub: hardened.pub,
|
|
264
|
+
type: 'independent',
|
|
265
|
+
parent: rootKeyId,
|
|
266
|
+
},
|
|
267
|
+
walletPassphrase: passphrase,
|
|
268
|
+
})
|
|
269
|
+
.should.be.rejectedWith(/missing derivedFromParentWithSeed/);
|
|
270
|
+
});
|
|
271
|
+
it('fails closed for TSS safe owner instead of returning the root prv', async function () {
|
|
272
|
+
const wallet = makeWallet({ safeId: 'safe-id-1', multisigType: 'tss' });
|
|
273
|
+
await wallet
|
|
274
|
+
.getUserPrv({
|
|
275
|
+
keychain: {
|
|
276
|
+
id: 'child-key',
|
|
277
|
+
pub: 'unrelated-child-pub',
|
|
278
|
+
type: 'tss',
|
|
279
|
+
parent: rootKeyId,
|
|
280
|
+
derivedFromParentWithSeed: '123',
|
|
281
|
+
commonKeychain: 'ck',
|
|
282
|
+
},
|
|
283
|
+
walletPassphrase: passphrase,
|
|
284
|
+
})
|
|
285
|
+
.should.be.rejectedWith(src_1.SafeOwnerSigningNotImplementedError);
|
|
286
|
+
keychainsGetStub.notCalled.should.be.true();
|
|
287
|
+
mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
|
|
288
|
+
});
|
|
289
|
+
it('fails closed for ed25519 onchain safe owner instead of BIP32-deriving', async function () {
|
|
290
|
+
mockBaseCoin.getFamily.returns('xlm');
|
|
291
|
+
const wallet = makeWallet({ safeId: 'safe-id-1', coin: 'txlm' });
|
|
292
|
+
await wallet
|
|
293
|
+
.getUserPrv({
|
|
294
|
+
keychain: {
|
|
295
|
+
id: 'child-key',
|
|
296
|
+
pub: 'child-pub',
|
|
297
|
+
type: 'independent',
|
|
298
|
+
parent: rootKeyId,
|
|
299
|
+
derivedFromParentWithSeed: '123',
|
|
300
|
+
},
|
|
301
|
+
walletPassphrase: passphrase,
|
|
302
|
+
})
|
|
303
|
+
.should.be.rejectedWith(src_1.SafeOwnerSigningNotImplementedError);
|
|
304
|
+
keychainsGetStub.notCalled.should.be.true();
|
|
305
|
+
mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
|
|
306
|
+
});
|
|
307
|
+
it('aborts locally when derived pub does not match registered child pub', async function () {
|
|
308
|
+
const wallet = makeWallet({ safeId: 'safe-id-1' });
|
|
309
|
+
keychainsGetStub.resolves({
|
|
310
|
+
id: rootKeyId,
|
|
311
|
+
source: 'user',
|
|
312
|
+
encryptedPrv: `enc:${prv}`,
|
|
313
|
+
type: 'independent',
|
|
314
|
+
pub: 'root-pub',
|
|
315
|
+
});
|
|
316
|
+
await wallet
|
|
317
|
+
.getUserPrv({
|
|
318
|
+
keychain: {
|
|
319
|
+
id: 'child-key',
|
|
320
|
+
pub: 'xpub-wrong-registered-key',
|
|
321
|
+
type: 'independent',
|
|
322
|
+
parent: rootKeyId,
|
|
323
|
+
derivedFromParentWithSeed: '123',
|
|
324
|
+
},
|
|
325
|
+
walletPassphrase: passphrase,
|
|
326
|
+
})
|
|
327
|
+
.should.be.rejectedWith(src_1.SafeDerivedPublicKeyMismatchError);
|
|
328
|
+
});
|
|
329
|
+
it('decrypts child encryptedPrv as-is for wallet sharee (hardened child prv)', async function () {
|
|
330
|
+
const childPrv = 'child-level-prv';
|
|
331
|
+
const wallet = makeWallet({ safeId: 'safe-id-1' });
|
|
332
|
+
const result = await wallet.getUserPrv({
|
|
333
|
+
keychain: {
|
|
334
|
+
id: 'child-key',
|
|
335
|
+
pub: 'child-pub',
|
|
336
|
+
type: 'independent',
|
|
337
|
+
parent: rootKeyId,
|
|
338
|
+
derivedFromParentWithSeed: '123',
|
|
339
|
+
encryptedPrv: `enc:${childPrv}`,
|
|
340
|
+
},
|
|
341
|
+
walletPassphrase: passphrase,
|
|
342
|
+
});
|
|
343
|
+
result.should.eql(childPrv);
|
|
344
|
+
keychainsGetStub.notCalled.should.be.true();
|
|
345
|
+
mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
|
|
346
|
+
});
|
|
347
|
+
it('does not auto-populate coldDerivationSeed when explicit prv and encryptedPrv are present', async function () {
|
|
348
|
+
const childPrv = 'child-level-prv';
|
|
349
|
+
const wallet = makeWallet({ safeId: 'safe-id-1' });
|
|
350
|
+
const result = await wallet.getUserPrv({
|
|
351
|
+
prv: childPrv,
|
|
352
|
+
keychain: {
|
|
353
|
+
id: 'child-key',
|
|
354
|
+
pub: 'child-pub',
|
|
355
|
+
type: 'independent',
|
|
356
|
+
parent: rootKeyId,
|
|
357
|
+
derivedFromParentWithSeed: '123',
|
|
358
|
+
encryptedPrv: `enc:${childPrv}`,
|
|
359
|
+
},
|
|
360
|
+
});
|
|
361
|
+
result.should.eql(childPrv);
|
|
362
|
+
mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
|
|
363
|
+
});
|
|
364
|
+
it('still auto-populates coldDerivationSeed for SMC with params.prv and no encryptedPrv', async function () {
|
|
365
|
+
const wallet = makeWallet();
|
|
366
|
+
const result = await wallet.getUserPrv({
|
|
367
|
+
prv,
|
|
368
|
+
keychain: {
|
|
369
|
+
id: 'smc-key',
|
|
370
|
+
pub: 'smc-pub',
|
|
371
|
+
type: 'independent',
|
|
372
|
+
derivedFromParentWithSeed: '123',
|
|
373
|
+
},
|
|
374
|
+
});
|
|
375
|
+
result.should.eql(softDerivedPrv);
|
|
376
|
+
mockBaseCoin.deriveKeyWithSeed.calledOnce.should.be.true();
|
|
377
|
+
});
|
|
378
|
+
it('does not apply an explicit coldDerivationSeed after decrypting encryptedPrv', async function () {
|
|
379
|
+
const wallet = makeWallet();
|
|
380
|
+
const childPrv = prv;
|
|
381
|
+
const result = await wallet.getUserPrv({
|
|
382
|
+
keychain: {
|
|
383
|
+
id: 'smc-key',
|
|
384
|
+
pub: 'smc-pub',
|
|
385
|
+
type: 'independent',
|
|
386
|
+
encryptedPrv: `enc:${childPrv}`,
|
|
387
|
+
},
|
|
388
|
+
walletPassphrase: passphrase,
|
|
389
|
+
coldDerivationSeed: '123',
|
|
390
|
+
});
|
|
391
|
+
result.should.eql(childPrv);
|
|
392
|
+
mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
|
|
393
|
+
});
|
|
394
|
+
it('throws encryptedPrv error before walletPassphrase when both are missing', async function () {
|
|
395
|
+
const wallet = makeWallet();
|
|
396
|
+
await wallet
|
|
397
|
+
.getUserPrv({
|
|
398
|
+
keychain: {
|
|
399
|
+
id: 'child-key',
|
|
400
|
+
pub: 'pub',
|
|
401
|
+
type: 'independent',
|
|
402
|
+
},
|
|
403
|
+
})
|
|
404
|
+
.should.be.rejectedWith('keychain does not have property encryptedPrv');
|
|
405
|
+
});
|
|
406
|
+
});
|
|
407
|
+
describe('getEncryptedUserKeychain', function () {
|
|
408
|
+
it('still fails for a safe owner so wallet sharing cannot obtain root material', async function () {
|
|
409
|
+
const wallet = makeWallet({ safeId: 'safe-id-1' });
|
|
410
|
+
keychainsGetStub.resolves({
|
|
411
|
+
id: 'user-key',
|
|
412
|
+
pub: 'child-pub',
|
|
413
|
+
type: 'independent',
|
|
414
|
+
parent: rootKeyId,
|
|
415
|
+
derivedFromParentWithSeed: '123',
|
|
416
|
+
});
|
|
417
|
+
await wallet.getEncryptedUserKeychain().should.be.rejectedWith(src_1.MissingEncryptedKeychainError);
|
|
418
|
+
keychainsGetStub.called.should.be.true();
|
|
419
|
+
});
|
|
420
|
+
});
|
|
421
|
+
describe('signing guards', function () {
|
|
422
|
+
it('getUserKeyAndSignTssTransaction allows safe child keychain without encryptedPrv', async function () {
|
|
423
|
+
const wallet = makeWallet({
|
|
424
|
+
safeId: 'safe-id-1',
|
|
425
|
+
multisigType: 'tss',
|
|
426
|
+
type: 'hot',
|
|
427
|
+
});
|
|
428
|
+
const childKeychain = {
|
|
429
|
+
id: 'child-key',
|
|
430
|
+
pub: 'child-pub',
|
|
431
|
+
type: 'tss',
|
|
432
|
+
parent: rootKeyId,
|
|
433
|
+
commonKeychain: 'ck',
|
|
434
|
+
};
|
|
435
|
+
keychainsGetStub.resolves({
|
|
436
|
+
id: rootKeyId,
|
|
437
|
+
source: 'user',
|
|
438
|
+
encryptedPrv: `enc:${prv}`,
|
|
439
|
+
type: 'independent',
|
|
440
|
+
pub: 'root-pub',
|
|
441
|
+
});
|
|
442
|
+
mockBaseCoin.keychains.returns({
|
|
443
|
+
get: keychainsGetStub,
|
|
444
|
+
getKeysForSigning: sinon.stub().resolves([childKeychain]),
|
|
445
|
+
});
|
|
446
|
+
const signStub = sinon.stub(src_1.Wallet.prototype, 'signTransaction').resolves({ txHex: 'signed' });
|
|
447
|
+
const result = await wallet.getUserKeyAndSignTssTransaction({
|
|
448
|
+
txRequestId: 'tx-req',
|
|
449
|
+
walletPassphrase: passphrase,
|
|
450
|
+
});
|
|
451
|
+
result.should.eql({ txHex: 'signed' });
|
|
452
|
+
signStub.calledOnce.should.be.true();
|
|
453
|
+
const signArgs = signStub.firstCall.args[0];
|
|
454
|
+
signArgs.keychain.should.eql(childKeychain);
|
|
455
|
+
});
|
|
456
|
+
it('getUserKeyAndSignTssTransaction rejects wrong passphrase early for safe child wallets', async function () {
|
|
457
|
+
const wallet = makeWallet({
|
|
458
|
+
safeId: 'safe-id-1',
|
|
459
|
+
multisigType: 'tss',
|
|
460
|
+
type: 'hot',
|
|
461
|
+
});
|
|
462
|
+
const childKeychain = {
|
|
463
|
+
id: 'child-key',
|
|
464
|
+
pub: 'child-pub',
|
|
465
|
+
type: 'tss',
|
|
466
|
+
parent: rootKeyId,
|
|
467
|
+
commonKeychain: 'ck',
|
|
468
|
+
};
|
|
469
|
+
keychainsGetStub.resolves({
|
|
470
|
+
id: rootKeyId,
|
|
471
|
+
source: 'user',
|
|
472
|
+
encryptedPrv: `enc:${prv}`,
|
|
473
|
+
type: 'independent',
|
|
474
|
+
pub: 'root-pub',
|
|
475
|
+
});
|
|
476
|
+
mockBaseCoin.keychains.returns({
|
|
477
|
+
get: keychainsGetStub,
|
|
478
|
+
getKeysForSigning: sinon.stub().resolves([childKeychain]),
|
|
479
|
+
});
|
|
480
|
+
const signStub = sinon.stub(src_1.Wallet.prototype, 'signTransaction');
|
|
481
|
+
await wallet
|
|
482
|
+
.getUserKeyAndSignTssTransaction({
|
|
483
|
+
txRequestId: 'tx-req',
|
|
484
|
+
walletPassphrase: 'wrong-passphrase',
|
|
485
|
+
})
|
|
486
|
+
.should.be.rejectedWith(src_1.IncorrectPasswordError);
|
|
487
|
+
signStub.notCalled.should.be.true();
|
|
488
|
+
keychainsGetStub.calledOnce.should.be.true();
|
|
489
|
+
});
|
|
490
|
+
it('signTransaction does not pass the root prv into TSS signing for a safe owner', async function () {
|
|
491
|
+
const wallet = makeWallet({
|
|
492
|
+
safeId: 'safe-id-1',
|
|
493
|
+
multisigType: 'tss',
|
|
494
|
+
type: 'hot',
|
|
495
|
+
});
|
|
496
|
+
const childKeychain = {
|
|
497
|
+
id: 'child-key',
|
|
498
|
+
pub: 'child-pub',
|
|
499
|
+
type: 'tss',
|
|
500
|
+
parent: rootKeyId,
|
|
501
|
+
commonKeychain: 'ck',
|
|
502
|
+
};
|
|
503
|
+
keychainsGetStub.resolves({
|
|
504
|
+
id: rootKeyId,
|
|
505
|
+
source: 'user',
|
|
506
|
+
encryptedPrv: `enc:${prv}`,
|
|
507
|
+
type: 'independent',
|
|
508
|
+
pub: 'root-pub',
|
|
509
|
+
});
|
|
510
|
+
mockBaseCoin.keychains.returns({
|
|
511
|
+
get: keychainsGetStub,
|
|
512
|
+
getKeysForSigning: sinon.stub().resolves([childKeychain]),
|
|
513
|
+
});
|
|
514
|
+
mockBaseCoin.presignTransaction = sinon.stub().callsFake(async (params) => params);
|
|
515
|
+
mockBaseCoin.getMPCAlgorithm = sinon.stub().returns('eddsa');
|
|
516
|
+
const signTssStub = sinon.stub(src_1.Wallet.prototype, 'signTransactionTss').resolves({ txHex: 'signed' });
|
|
517
|
+
await wallet
|
|
518
|
+
.signTransaction({
|
|
519
|
+
walletPassphrase: passphrase,
|
|
520
|
+
txPrebuild: { txRequestId: 'tx-req' },
|
|
521
|
+
})
|
|
522
|
+
.should.be.rejectedWith(src_1.SafeOwnerSigningNotImplementedError);
|
|
523
|
+
signTssStub.notCalled.should.be.true();
|
|
524
|
+
});
|
|
525
|
+
});
|
|
526
|
+
});
|
|
527
|
+
describe('WCN-1200 recreateAndSignTSSTransaction safe path', function () {
|
|
528
|
+
afterEach(function () {
|
|
529
|
+
sinon.restore();
|
|
530
|
+
});
|
|
531
|
+
function makePendingApproval(wallet) {
|
|
532
|
+
const recreateTxRequest = sinon.stub().resolves({
|
|
533
|
+
apiVersion: 'lite',
|
|
534
|
+
txRequestId: 'tx-req',
|
|
535
|
+
unsignedTxs: [{ serializedTxHex: 'deadbeef', signableHex: 'ab', derivationPath: 'm/0' }],
|
|
536
|
+
transactions: [],
|
|
537
|
+
});
|
|
538
|
+
const pendingApproval = new src_1.PendingApproval({}, wallet.baseCoin, {
|
|
539
|
+
id: 'pa0',
|
|
540
|
+
txRequestId: 'tx-req',
|
|
541
|
+
info: { type: 'transactionRequest', transactionRequest: { recipients: [], coinSpecific: {} } },
|
|
542
|
+
state: 'pending',
|
|
543
|
+
creator: 'test',
|
|
544
|
+
}, wallet);
|
|
545
|
+
pendingApproval.tssUtils = { recreateTxRequest };
|
|
546
|
+
return { pendingApproval, recreateTxRequest };
|
|
547
|
+
}
|
|
548
|
+
it('uses getUserPrv for the safe owner (minter) instead of getPrv', async function () {
|
|
549
|
+
const childUserKeychain = {
|
|
550
|
+
id: 'child-key',
|
|
551
|
+
pub: 'child-pub',
|
|
552
|
+
type: 'tss',
|
|
553
|
+
parent: 'root-key-id',
|
|
554
|
+
derivedFromParentWithSeed: 'seed',
|
|
555
|
+
};
|
|
556
|
+
const getKeysForSigning = sinon.stub().resolves([childUserKeychain]);
|
|
557
|
+
const getUserPrv = sinon.stub().resolves('decryptedPrv');
|
|
558
|
+
const getPrv = sinon.stub().resolves('should-not-be-called');
|
|
559
|
+
const wallet = {
|
|
560
|
+
safeId: () => 'safe-id-1',
|
|
561
|
+
getUserPrv,
|
|
562
|
+
getPrv,
|
|
563
|
+
baseCoin: {
|
|
564
|
+
keychains: () => ({ getKeysForSigning }),
|
|
565
|
+
supportsTss: () => true,
|
|
566
|
+
getMPCAlgorithm: () => 'eddsa',
|
|
567
|
+
},
|
|
568
|
+
multisigTypeVersion: () => undefined,
|
|
569
|
+
};
|
|
570
|
+
const { pendingApproval, recreateTxRequest } = makePendingApproval(wallet);
|
|
571
|
+
const result = await pendingApproval.recreateAndSignTSSTransaction({ walletPassphrase: 'pass' }, new src_1.RequestTracer());
|
|
572
|
+
result.should.eql({ txHex: 'deadbeef' });
|
|
573
|
+
getPrv.notCalled.should.be.true();
|
|
574
|
+
getKeysForSigning.calledOnce.should.be.true();
|
|
575
|
+
getUserPrv
|
|
576
|
+
.calledOnceWithExactly({
|
|
577
|
+
keychain: childUserKeychain,
|
|
578
|
+
walletPassphrase: 'pass',
|
|
579
|
+
})
|
|
580
|
+
.should.be.true();
|
|
581
|
+
recreateTxRequest.calledOnce.should.be.true();
|
|
582
|
+
});
|
|
583
|
+
it('uses getPrv for a safe wallet sharee (child encryptedPrv already present)', async function () {
|
|
584
|
+
const childUserKeychain = {
|
|
585
|
+
id: 'child-key',
|
|
586
|
+
pub: 'child-pub',
|
|
587
|
+
type: 'tss',
|
|
588
|
+
parent: 'root-key-id',
|
|
589
|
+
derivedFromParentWithSeed: 'seed',
|
|
590
|
+
encryptedPrv: 'enc:sharee-prv',
|
|
591
|
+
};
|
|
592
|
+
const getKeysForSigning = sinon.stub().resolves([childUserKeychain]);
|
|
593
|
+
const getUserPrv = sinon.stub().resolves('should-not-be-called');
|
|
594
|
+
const getPrv = sinon.stub().resolves('sharee-prv');
|
|
595
|
+
const wallet = {
|
|
596
|
+
safeId: () => 'safe-id-1',
|
|
597
|
+
getUserPrv,
|
|
598
|
+
getPrv,
|
|
599
|
+
baseCoin: {
|
|
600
|
+
keychains: () => ({ getKeysForSigning }),
|
|
601
|
+
supportsTss: () => true,
|
|
602
|
+
getMPCAlgorithm: () => 'eddsa',
|
|
603
|
+
},
|
|
604
|
+
multisigTypeVersion: () => undefined,
|
|
605
|
+
};
|
|
606
|
+
const { pendingApproval, recreateTxRequest } = makePendingApproval(wallet);
|
|
607
|
+
const result = await pendingApproval.recreateAndSignTSSTransaction({ walletPassphrase: 'pass' }, new src_1.RequestTracer());
|
|
608
|
+
result.should.eql({ txHex: 'deadbeef' });
|
|
609
|
+
getUserPrv.notCalled.should.be.true();
|
|
610
|
+
getPrv.calledOnceWithExactly({ walletPassphrase: 'pass' }).should.be.true();
|
|
611
|
+
recreateTxRequest.calledOnce.should.be.true();
|
|
612
|
+
});
|
|
613
|
+
});
|
|
614
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2FmZUdldFVzZXJQcnYuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi90ZXN0L3VuaXQvYml0Z28vd2FsbGV0L3NhZmVHZXRVc2VyUHJ2LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0FBQUE7O0dBRUc7QUFDSCxrQkFBZ0I7QUFDaEIsNkNBQStCO0FBQy9CLHlDQVl5QjtBQUd6QixPQUFPLENBQUMsY0FBYyxDQUFDLENBQUM7QUFFeEIsUUFBUSxDQUFDLGtEQUFrRCxFQUFFO0lBQzNELE1BQU0sR0FBRyxHQUNQLGlIQUFpSCxDQUFDO0lBQ3BILDhFQUE4RTtJQUM5RSxNQUFNLGNBQWMsR0FDbEIsaUhBQWlILENBQUM7SUFDcEgsTUFBTSxRQUFRLEdBQUcsSUFBQSxxQ0FBK0IsRUFBQyxHQUFHLEVBQUUsS0FBSyxDQUFDLENBQUM7SUFDN0QsTUFBTSxVQUFVLEdBQUcsaUJBQWlCLENBQUM7SUFDckMsTUFBTSxTQUFTLEdBQUcsYUFBYSxDQUFDO0lBRWhDLElBQUksU0FBYyxDQUFDO0lBQ25CLElBQUksWUFBaUIsQ0FBQztJQUN0QixJQUFJLGdCQUFpQyxDQUFDO0lBQ3RDLElBQUksV0FBNEIsQ0FBQztJQUNqQyxJQUFJLFdBQTRCLENBQUM7SUFFakMsTUFBTSxjQUFjLEdBQUc7UUFDckIsRUFBRSxFQUFFLFdBQVc7UUFDZixJQUFJLEVBQUUsTUFBTTtRQUNaLElBQUksRUFBRSxDQUFDLFVBQVUsRUFBRSxZQUFZLEVBQUUsV0FBVyxDQUFDO1FBQzdDLElBQUksRUFBRSxLQUFLO1FBQ1gsWUFBWSxFQUFFLFNBQVM7UUFDdkIsVUFBVSxFQUFFLFFBQVE7S0FDckIsQ0FBQztJQUVGLFVBQVUsQ0FBQztRQUNULGdCQUFnQixHQUFHLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUNoQyxXQUFXLEdBQUcsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDO1FBQzNCLFdBQVcsR0FBRyxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUM7UUFFM0IsU0FBUyxHQUFHO1lBQ1YsT0FBTyxFQUFFLFdBQVc7WUFDcEIsT0FBTyxFQUFFLFdBQVc7WUFDcEIsR0FBRyxFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxPQUFPLENBQUMseUJBQXlCLENBQUM7WUFDcEQsZ0JBQWdCLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRTtTQUMvQixDQUFDO1FBRUYsWUFBWSxHQUFHO1lBQ2IsUUFBUSxFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxPQUFPLENBQUMsTUFBTSxDQUFDO1lBQ3RDLFNBQVMsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQztZQUN0QyxXQUFXLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLE9BQU8sQ0FBQyxjQUFjLENBQUM7WUFDakQsU0FBUyxFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxPQUFPLENBQUM7Z0JBQzlCLEdBQUcsRUFBRSxnQkFBZ0I7Z0JBQ3JCLGlCQUFpQixFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDO2FBQzdDLENBQUM7WUFDRixpQkFBaUIsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsU0FBUyxDQUFDLENBQUMsRUFBRSxHQUFHLEVBQUUsSUFBSSxFQUFpQyxFQUFFLEVBQUU7Z0JBQ3pGLElBQUksR0FBRyxLQUFLLEdBQUcsSUFBSSxJQUFJLEtBQUssS0FBSyxFQUFFLENBQUM7b0JBQ2xDLE9BQU8sRUFBRSxHQUFHLEVBQUUsY0FBYyxFQUFFLGNBQWMsRUFBRSxjQUFjLEVBQUUsQ0FBQztnQkFDakUsQ0FBQztnQkFDRCxPQUFPLEVBQUUsR0FBRyxFQUFFLFdBQVcsR0FBRyxJQUFJLElBQUksR0FBRyxFQUFFLGNBQWMsRUFBRSxLQUFLLEVBQUUsQ0FBQztZQUNuRSxDQUFDLENBQUM7WUFDRixHQUFHLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLFNBQVMsQ0FBQyxDQUFDLElBQVksRUFBRSxFQUFFLENBQUMscUNBQXFDLElBQUksRUFBRSxDQUFDO1lBQzFGLGVBQWUsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQztZQUM1QyxXQUFXLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUM7WUFDeEMsZUFBZSxFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUU7WUFDN0IsZ0JBQWdCLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUM7U0FDbEQsQ0FBQztRQUVGLFdBQVcsQ0FBQyxTQUFTLENBQUMsQ0FBQyxFQUFFLEtBQUssRUFBRSxRQUFRLEVBQXVDLEVBQUUsRUFBRTtZQUNqRixJQUFJLFFBQVEsS0FBSyxVQUFVLEVBQUUsQ0FBQztnQkFDNUIsT0FBTyxJQUFJLENBQUM7WUFDZCxDQUFDO1lBQ0QsSUFBSSxPQUFPLEtBQUssS0FBSyxRQUFRLElBQUksS0FBSyxDQUFDLFVBQVUsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDO2dCQUMxRCxPQUFPLEtBQUssQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUM7WUFDeEIsQ0FBQztZQUNELE9BQU8sSUFBSSxDQUFDO1FBQ2QsQ0FBQyxDQUFDLENBQUM7SUFDTCxDQUFDLENBQUMsQ0FBQztJQUVILFNBQVMsQ0FBQztRQUNSLEtBQUssQ0FBQyxPQUFPLEVBQUUsQ0FBQztJQUNsQixDQUFDLENBQUMsQ0FBQztJQUVILFNBQVMsVUFBVSxDQUFDLFlBQXFDLEVBQUU7UUFDekQsT0FBTyxJQUFJLFlBQU0sQ0FBQyxTQUFTLEVBQUUsWUFBbUMsRUFBRTtZQUNoRSxHQUFHLGNBQWM7WUFDakIsR0FBRyxTQUFTO1NBQ2IsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVELFFBQVEsQ0FBQyxnQkFBZ0IsRUFBRTtRQUN6QixFQUFFLENBQUMsOENBQThDLEVBQUU7WUFDakQsSUFBQSxtQ0FBNkIsRUFBQyxHQUFHLENBQUMsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLGdCQUFnQixDQUFDLENBQUM7WUFDaEUsSUFBQSxtQ0FBNkIsRUFBQyxHQUFHLENBQUMsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLGNBQWMsQ0FBQyxDQUFDO1FBQ2hFLENBQUMsQ0FBQyxDQUFDO1FBRUgsRUFBRSxDQUFDLDZCQUE2QixFQUFFO1lBQ2hDLENBQUMsR0FBRyxFQUFFLENBQUMsSUFBQSxtQ0FBNkIsRUFBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsK0JBQStCLENBQUMsQ0FBQztRQUM3RixDQUFDLENBQUMsQ0FBQztRQUVILEVBQUUsQ0FBQyxtRUFBbUUsRUFBRTtZQUN0RSxRQUFRLENBQUMsY0FBYyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsZ0JBQWdCLENBQUMsQ0FBQztZQUNyRCxRQUFRLENBQUMsR0FBRyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLGNBQWMsQ0FBQyxDQUFDO1lBQzVDLFFBQVEsQ0FBQyxHQUFHLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FDckIsaUhBQWlILENBQ2xILENBQUM7WUFDRixRQUFRLENBQUMsR0FBRyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQ3JCLGlIQUFpSCxDQUNsSCxDQUFDO1FBQ0osQ0FBQyxDQUFDLENBQUM7SUFDTCxDQUFDLENBQUMsQ0FBQztJQUVILFFBQVEsQ0FBQywrQkFBK0IsRUFBRTtRQUN4QyxFQUFFLENBQUMsMENBQTBDLEVBQUUsS0FBSztZQUNsRCxNQUFNLElBQUEsbUNBQTZCLEVBQUMsWUFBWSxDQUFDLFNBQVMsRUFBRSxFQUFFO2dCQUM1RCxFQUFFLEVBQUUsV0FBVztnQkFDZixJQUFJLEVBQUUsYUFBYTtnQkFDbkIsR0FBRyxFQUFFLFdBQVc7YUFDakIsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsWUFBWSxDQUFDLDZEQUE2RCxDQUFDLENBQUM7WUFDekYsZ0JBQWdCLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDOUMsQ0FBQyxDQUFDLENBQUM7UUFFSCxFQUFFLENBQUMsa0VBQWtFLEVBQUUsS0FBSztZQUMxRSxnQkFBZ0IsQ0FBQyxRQUFRLENBQUM7Z0JBQ3hCLEVBQUUsRUFBRSxTQUFTO2dCQUNiLE1BQU0sRUFBRSxRQUFRO2dCQUNoQixZQUFZLEVBQUUsVUFBVTtnQkFDeEIsSUFBSSxFQUFFLGFBQWE7Z0JBQ25CLEdBQUcsRUFBRSxVQUFVO2FBQ2hCLENBQUMsQ0FBQztZQUVILE1BQU0sSUFBQSxtQ0FBNkIsRUFBQyxZQUFZLENBQUMsU0FBUyxFQUFFLEVBQUU7Z0JBQzVELEVBQUUsRUFBRSxXQUFXO2dCQUNmLE1BQU0sRUFBRSxTQUFTO2dCQUNqQixJQUFJLEVBQUUsYUFBYTtnQkFDbkIsR0FBRyxFQUFFLFdBQVc7YUFDakIsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsWUFBWSxDQUFDLG9DQUE4QixDQUFDLENBQUM7UUFDNUQsQ0FBQyxDQUFDLENBQUM7UUFFSCxFQUFFLENBQUMsK0NBQStDLEVBQUUsS0FBSztZQUN2RCxNQUFNLElBQUksR0FBRztnQkFDWCxFQUFFLEVBQUUsU0FBUztnQkFDYixNQUFNLEVBQUUsTUFBTTtnQkFDZCxZQUFZLEVBQUUsVUFBVTtnQkFDeEIsSUFBSSxFQUFFLGFBQWE7Z0JBQ25CLEdBQUcsRUFBRSxVQUFVO2FBQ2hCLENBQUM7WUFDRixnQkFBZ0IsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLENBQUM7WUFFaEMsTUFBTSxNQUFNLEdBQUcsTUFBTSxJQUFBLG1DQUE2QixFQUFDLFlBQVksQ0FBQyxTQUFTLEVBQUUsRUFBRTtnQkFDM0UsRUFBRSxFQUFFLFdBQVc7Z0JBQ2YsTUFBTSxFQUFFLFNBQVM7Z0JBQ2pCLElBQUksRUFBRSxhQUFhO2dCQUNuQixHQUFHLEVBQUUsV0FBVzthQUNqQixDQUFDLENBQUM7WUFDSCxNQUFNLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsQ0FBQztRQUMxQixDQUFDLENBQUMsQ0FBQztRQUVILEVBQUUsQ0FBQywrQ0FBK0MsRUFBRSxLQUFLO1lBQ3ZELGdCQUFnQixDQUFDLFFBQVEsQ0FBQztnQkFDeEIsRUFBRSxFQUFFLFNBQVM7Z0JBQ2IsTUFBTSxFQUFFLE1BQU07Z0JBQ2QsSUFBSSxFQUFFLGFBQWE7Z0JBQ25CLEdBQUcsRUFBRSxVQUFVO2FBQ2hCLENBQUMsQ0FBQztZQUVILE1BQU0sSUFBQSxtQ0FBNkIsRUFBQyxZQUFZLENBQUMsU0FBUyxFQUFFLEVBQUU7Z0JBQzVELEVBQUUsRUFBRSxXQUFXO2dCQUNmLE1BQU0sRUFBRSxTQUFTO2dCQUNqQixJQUFJLEVBQUUsYUFBYTtnQkFDbkIsR0FBRyxFQUFFLFdBQVc7YUFDakIsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsWUFBWSxDQUFDLHFDQUFxQyxDQUFDLENBQUM7UUFDbkUsQ0FBQyxDQUFDLENBQUM7SUFDTCxDQUFDLENBQUMsQ0FBQztJQUVILFFBQVEsQ0FBQyxZQUFZLEVBQUU7UUFDckIsRUFBRSxDQUFDLCtEQUErRCxFQUFFLEtBQUs7WUFDdkUsTUFBTSxNQUFNLEdBQUcsVUFBVSxFQUFFLENBQUM7WUFDNUIsTUFBTSxNQUFNO2lCQUNULFVBQVUsQ0FBQztnQkFDVixRQUFRLEVBQUU7b0JBQ1IsRUFBRSxFQUFFLFdBQVc7b0JBQ2YsR0FBRyxFQUFFLEtBQUs7b0JBQ1YsSUFBSSxFQUFFLGFBQWE7aUJBQ3BCO2dCQUNELGdCQUFnQixFQUFFLFVBQVU7YUFDN0IsQ0FBQztpQkFDRCxNQUFNLENBQUMsRUFBRSxDQUFDLFlBQVksQ0FBQyw4Q0FBOEMsQ0FBQyxDQUFDO1FBQzVFLENBQUMsQ0FBQyxDQUFDO1FBRUgsRUFBRSxDQUFDLDREQUE0RCxFQUFFLEtBQUs7WUFDcEUsTUFBTSxNQUFNLEdBQUcsVUFBVSxFQUFFLENBQUM7WUFDNUIsTUFBTSxNQUFNO2lCQUNULFVBQVUsQ0FBQztnQkFDVixRQUFRLEVBQUU7b0JBQ1IsRUFBRSxFQUFFLFdBQVc7b0JBQ2YsR0FBRyxFQUFFLEtBQUs7b0JBQ1YsSUFBSSxFQUFFLGFBQWE7b0JBQ25CLE1BQU0sRUFBRSxTQUFTO2lCQUNsQjtnQkFDRCxnQkFBZ0IsRUFBRSxVQUFVO2FBQzdCLENBQUM7aUJBQ0QsTUFBTSxDQUFDLEVBQUUsQ0FBQyxZQUFZLENBQUMsOENBQThDLENBQUMsQ0FBQztZQUMxRSxnQkFBZ0IsQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUM5QyxDQUFDLENBQUMsQ0FBQztRQUVILEVBQUUsQ0FBQyxzREFBc0QsRUFBRSxLQUFLO1lBQzlELE1BQU0sTUFBTSxHQUFHLFVBQVUsQ0FBQyxFQUFFLE1BQU0sRUFBRSxXQUFXLEVBQUUsQ0FBQyxDQUFDO1lBQ25ELE1BQU0sTUFBTTtpQkFDVCxVQUFVLENBQUM7Z0JBQ1YsUUFBUSxFQUFFO29CQUNSLEVBQUUsRUFBRSxXQUFXO29CQUNmLEdBQUcsRUFBRSxLQUFLO29CQUNWLElBQUksRUFBRSxhQUFhO2lCQUNwQjtnQkFDRCxnQkFBZ0IsRUFBRSxVQUFVO2FBQzdCLENBQUM7aUJBQ0QsTUFBTSxDQUFDLEVBQUUsQ0FBQyxZQUFZLENBQUMsOENBQThDLENBQUMsQ0FBQztZQUMxRSxnQkFBZ0IsQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUM5QyxDQUFDLENBQUMsQ0FBQztRQUVILEVBQUUsQ0FBQyw0REFBNEQsRUFBRSxLQUFLO1lBQ3BFLE1BQU0sTUFBTSxHQUFHLFVBQVUsQ0FBQyxFQUFFLE1BQU0sRUFBRSxXQUFXLEVBQUUsQ0FBQyxDQUFDO1lBQ25ELGdCQUFnQixDQUFDLFFBQVEsQ0FBQztnQkFDeEIsRUFBRSxFQUFFLFNBQVM7Z0JBQ2IsTUFBTSxFQUFFLE1BQU07Z0JBQ2QsWUFBWSxFQUFFLE9BQU8sR0FBRyxFQUFFO2dCQUMxQixJQUFJLEVBQUUsYUFBYTtnQkFDbkIsR0FBRyxFQUFFLFVBQVU7YUFDaEIsQ0FBQyxDQUFDO1lBRUgsTUFBTSxNQUFNLEdBQUcsTUFBTSxNQUFNLENBQUMsVUFBVSxDQUFDO2dCQUNyQyxRQUFRLEVBQUU7b0JBQ1IsRUFBRSxFQUFFLFdBQVc7b0JBQ2YsR0FBRyxFQUFFLFFBQVEsQ0FBQyxHQUFHO29CQUNqQixJQUFJLEVBQUUsYUFBYTtvQkFDbkIsTUFBTSxFQUFFLFNBQVM7b0JBQ2pCLHlCQUF5QixFQUFFLEtBQUs7aUJBQ2pDO2dCQUNELGdCQUFnQixFQUFFLFVBQVU7YUFDN0IsQ0FBQyxDQUFDO1lBRUgsTUFBTSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsUUFBUSxDQUFDLEdBQUcsQ0FBQyxDQUFDO1lBQ2hDLE1BQU0sQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLEdBQUcsQ0FBQyxjQUFjLENBQUMsQ0FBQztZQUN0QyxnQkFBZ0IsQ0FBQyxxQkFBcUIsQ0FBQyxFQUFFLEVBQUUsRUFBRSxTQUFTLEVBQUUsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7WUFDM0UsWUFBWSxDQUFDLGlCQUFpQixDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLElBQUksRUFBRSxDQUFDO1FBQzVELENBQUMsQ0FBQyxDQUFDO1FBRUgsRUFBRSxDQUFDLHFFQUFxRSxFQUFFLEtBQUs7WUFDN0UsTUFBTSxNQUFNLEdBQUcsVUFBVSxDQUFDLEVBQUUsTUFBTSxFQUFFLFdBQVcsRUFBRSxDQUFDLENBQUM7WUFDbkQsZ0JBQWdCLENBQUMsUUFBUSxDQUFDO2dCQUN4QixFQUFFLEVBQUUsU0FBUztnQkFDYixNQUFNLEVBQUUsTUFBTTtnQkFDZCxZQUFZLEVBQUUsT0FBTyxHQUFHLEVBQUU7Z0JBQzFCLElBQUksRUFBRSxhQUFhO2dCQUNuQixHQUFHLEVBQUUsVUFBVTthQUNoQixDQUFDLENBQUM7WUFFSCxNQUFNLE1BQU07aUJBQ1QsVUFBVSxDQUFDO2dCQUNWLFFBQVEsRUFBRTtvQkFDUixFQUFFLEVBQUUsV0FBVztvQkFDZixHQUFHLEVBQUUsUUFBUSxDQUFDLEdBQUc7b0JBQ2pCLElBQUksRUFBRSxhQUFhO29CQUNuQixNQUFNLEVBQUUsU0FBUztpQkFDbEI7Z0JBQ0QsZ0JBQWdCLEVBQUUsVUFBVTthQUM3QixDQUFDO2lCQUNELE1BQU0sQ0FBQyxFQUFFLENBQUMsWUFBWSxDQUFDLG1DQUFtQyxDQUFDLENBQUM7UUFDakUsQ0FBQyxDQUFDLENBQUM7UUFFSCxFQUFFLENBQUMsbUVBQW1FLEVBQUUsS0FBSztZQUMzRSxNQUFNLE1BQU0sR0FBRyxVQUFVLENBQUMsRUFBRSxNQUFNLEVBQUUsV0FBVyxFQUFFLFlBQVksRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDO1lBRXhFLE1BQU0sTUFBTTtpQkFDVCxVQUFVLENBQUM7Z0JBQ1YsUUFBUSxFQUFFO29CQUNSLEVBQUUsRUFBRSxXQUFXO29CQUNmLEdBQUcsRUFBRSxxQkFBcUI7b0JBQzFCLElBQUksRUFBRSxLQUFLO29CQUNYLE1BQU0sRUFBRSxTQUFTO29CQUNqQix5QkFBeUIsRUFBRSxLQUFLO29CQUNoQyxjQUFjLEVBQUUsSUFBSTtpQkFDckI7Z0JBQ0QsZ0JBQWdCLEVBQUUsVUFBVTthQUM3QixDQUFDO2lCQUNELE1BQU0sQ0FBQyxFQUFFLENBQUMsWUFBWSxDQUFDLHlDQUFtQyxDQUFDLENBQUM7WUFDL0QsZ0JBQWdCLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7WUFDNUMsWUFBWSxDQUFDLGlCQUFpQixDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLElBQUksRUFBRSxDQUFDO1FBQzVELENBQUMsQ0FBQyxDQUFDO1FBRUgsRUFBRSxDQUFDLHVFQUF1RSxFQUFFLEtBQUs7WUFDL0UsWUFBWSxDQUFDLFNBQVMsQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLENBQUM7WUFDdEMsTUFBTSxNQUFNLEdBQUcsVUFBVSxDQUFDLEVBQUUsTUFBTSxFQUFFLFdBQVcsRUFBRSxJQUFJLEVBQUUsTUFBTSxFQUFFLENBQUMsQ0FBQztZQUVqRSxNQUFNLE1BQU07aUJBQ1QsVUFBVSxDQUFDO2dCQUNWLFFBQVEsRUFBRTtvQkFDUixFQUFFLEVBQUUsV0FBVztvQkFDZixHQUFHLEVBQUUsV0FBVztvQkFDaEIsSUFBSSxFQUFFLGFBQWE7b0JBQ25CLE1BQU0sRUFBRSxTQUFTO29CQUNqQix5QkFBeUIsRUFBRSxLQUFLO2lCQUNqQztnQkFDRCxnQkFBZ0IsRUFBRSxVQUFVO2FBQzdCLENBQUM7aUJBQ0QsTUFBTSxDQUFDLEVBQUUsQ0FBQyxZQUFZLENBQUMseUNBQW1DLENBQUMsQ0FBQztZQUMvRCxnQkFBZ0IsQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztZQUM1QyxZQUFZLENBQUMsaUJBQWlCLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDNUQsQ0FBQyxDQUFDLENBQUM7UUFFSCxFQUFFLENBQUMscUVBQXFFLEVBQUUsS0FBSztZQUM3RSxNQUFNLE1BQU0sR0FBRyxVQUFVLENBQUMsRUFBRSxNQUFNLEVBQUUsV0FBVyxFQUFFLENBQUMsQ0FBQztZQUNuRCxnQkFBZ0IsQ0FBQyxRQUFRLENBQUM7Z0JBQ3hCLEVBQUUsRUFBRSxTQUFTO2dCQUNiLE1BQU0sRUFBRSxNQUFNO2dCQUNkLFlBQVksRUFBRSxPQUFPLEdBQUcsRUFBRTtnQkFDMUIsSUFBSSxFQUFFLGFBQWE7Z0JBQ25CLEdBQUcsRUFBRSxVQUFVO2FBQ2hCLENBQUMsQ0FBQztZQUVILE1BQU0sTUFBTTtpQkFDVCxVQUFVLENBQUM7Z0JBQ1YsUUFBUSxFQUFFO29CQUNSLEVBQUUsRUFBRSxXQUFXO29CQUNmLEdBQUcsRUFBRSwyQkFBMkI7b0JBQ2hDLElBQUksRUFBRSxhQUFhO29CQUNuQixNQUFNLEVBQUUsU0FBUztvQkFDakIseUJBQXlCLEVBQUUsS0FBSztpQkFDakM7Z0JBQ0QsZ0JBQWdCLEVBQUUsVUFBVTthQUM3QixDQUFDO2lCQUNELE1BQU0sQ0FBQyxFQUFFLENBQUMsWUFBWSxDQUFDLHVDQUFpQyxDQUFDLENBQUM7UUFDL0QsQ0FBQyxDQUFDLENBQUM7UUFFSCxFQUFFLENBQUMsMEVBQTBFLEVBQUUsS0FBSztZQUNsRixNQUFNLFFBQVEsR0FBRyxpQkFBaUIsQ0FBQztZQUNuQyxNQUFNLE1BQU0sR0FBRyxVQUFVLENBQUMsRUFBRSxNQUFNLEVBQUUsV0FBVyxFQUFFLENBQUMsQ0FBQztZQUVuRCxNQUFNLE1BQU0sR0FBRyxNQUFNLE1BQU0sQ0FBQyxVQUFVLENBQUM7Z0JBQ3JDLFFBQVEsRUFBRTtvQkFDUixFQUFFLEVBQUUsV0FBVztvQkFDZixHQUFHLEVBQUUsV0FBVztvQkFDaEIsSUFBSSxFQUFFLGFBQWE7b0JBQ25CLE1BQU0sRUFBRSxTQUFTO29CQUNqQix5QkFBeUIsRUFBRSxLQUFLO29CQUNoQyxZQUFZLEVBQUUsT0FBTyxRQUFRLEVBQUU7aUJBQ2hDO2dCQUNELGdCQUFnQixFQUFFLFVBQVU7YUFDN0IsQ0FBQyxDQUFDO1lBRUgsTUFBTSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsUUFBUSxDQUFDLENBQUM7WUFDNUIsZ0JBQWdCLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7WUFDNUMsWUFBWSxDQUFDLGlCQUFpQixDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLElBQUksRUFBRSxDQUFDO1FBQzVELENBQUMsQ0FBQyxDQUFDO1FBRUgsRUFBRSxDQUFDLDBGQUEwRixFQUFFLEtBQUs7WUFDbEcsTUFBTSxRQUFRLEdBQUcsaUJBQWlCLENBQUM7WUFDbkMsTUFBTSxNQUFNLEdBQUcsVUFBVSxDQUFDLEVBQUUsTUFBTSxFQUFFLFdBQVcsRUFBRSxDQUFDLENBQUM7WUFFbkQsTUFBTSxNQUFNLEdBQUcsTUFBTSxNQUFNLENBQUMsVUFBVSxDQUFDO2dCQUNyQyxHQUFHLEVBQUUsUUFBUTtnQkFDYixRQUFRLEVBQUU7b0JBQ1IsRUFBRSxFQUFFLFdBQVc7b0JBQ2YsR0FBRyxFQUFFLFdBQVc7b0JBQ2hCLElBQUksRUFBRSxhQUFhO29CQUNuQixNQUFNLEVBQUUsU0FBUztvQkFDakIseUJBQXlCLEVBQUUsS0FBSztvQkFDaEMsWUFBWSxFQUFFLE9BQU8sUUFBUSxFQUFFO2lCQUNoQzthQUNGLENBQUMsQ0FBQztZQUVILE1BQU0sQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLFFBQVEsQ0FBQyxDQUFDO1lBQzVCLFlBQVksQ0FBQyxpQkFBaUIsQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUM1RCxDQUFDLENBQUMsQ0FBQztRQUVILEVBQUUsQ0FBQyxxRkFBcUYsRUFBRSxLQUFLO1lBQzdGLE1BQU0sTUFBTSxHQUFHLFVBQVUsRUFBRSxDQUFDO1lBRTVCLE1BQU0sTUFBTSxHQUFHLE1BQU0sTUFBTSxDQUFDLFVBQVUsQ0FBQztnQkFDckMsR0FBRztnQkFDSCxRQUFRLEVBQUU7b0JBQ1IsRUFBRSxFQUFFLFNBQVM7b0JBQ2IsR0FBRyxFQUFFLFNBQVM7b0JBQ2QsSUFBSSxFQUFFLGFBQWE7b0JBQ25CLHlCQUF5QixFQUFFLEtBQUs7aUJBQ2pDO2FBQ0YsQ0FBQyxDQUFDO1lBRUgsTUFBTSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsY0FBYyxDQUFDLENBQUM7WUFDbEMsWUFBWSxDQUFDLGlCQUFpQixDQUFDLFVBQVUsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLElBQUksRUFBRSxDQUFDO1FBQzdELENBQUMsQ0FBQyxDQUFDO1FBRUgsRUFBRSxDQUFDLDZFQUE2RSxFQUFFLEtBQUs7WUFDckYsTUFBTSxNQUFNLEdBQUcsVUFBVSxFQUFFLENBQUM7WUFDNUIsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDO1lBRXJCLE1BQU0sTUFBTSxHQUFHLE1BQU0sTUFBTSxDQUFDLFVBQVUsQ0FBQztnQkFDckMsUUFBUSxFQUFFO29CQUNSLEVBQUUsRUFBRSxTQUFTO29CQUNiLEdBQUcsRUFBRSxTQUFTO29CQUNkLElBQUksRUFBRSxhQUFhO29CQUNuQixZQUFZLEVBQUUsT0FBTyxRQUFRLEVBQUU7aUJBQ2hDO2dCQUNELGdCQUFnQixFQUFFLFVBQVU7Z0JBQzVCLGtCQUFrQixFQUFFLEtBQUs7YUFDMUIsQ0FBQyxDQUFDO1lBRUgsTUFBTSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsUUFBUSxDQUFDLENBQUM7WUFDNUIsWUFBWSxDQUFDLGlCQUFpQixDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLElBQUksRUFBRSxDQUFDO1FBQzVELENBQUMsQ0FBQyxDQUFDO1FBRUgsRUFBRSxDQUFDLHlFQUF5RSxFQUFFLEtBQUs7WUFDakYsTUFBTSxNQUFNLEdBQUcsVUFBVSxFQUFFLENBQUM7WUFDNUIsTUFBTSxNQUFNO2lCQUNULFVBQVUsQ0FBQztnQkFDVixRQUFRLEVBQUU7b0JBQ1IsRUFBRSxFQUFFLFdBQVc7b0JBQ2YsR0FBRyxFQUFFLEtBQUs7b0JBQ1YsSUFBSSxFQUFFLGFBQWE7aUJBQ3BCO2FBQ0YsQ0FBQztpQkFDRCxNQUFNLENBQUMsRUFBRSxDQUFDLFlBQVksQ0FBQyw4Q0FBOEMsQ0FBQyxDQUFDO1FBQzVFLENBQUMsQ0FBQyxDQUFDO0lBQ0wsQ0FBQyxDQUFDLENBQUM7SUFFSCxRQUFRLENBQUMsMEJBQTBCLEVBQUU7UUFDbkMsRUFBRSxDQUFDLDRFQUE0RSxFQUFFLEtBQUs7WUFDcEYsTUFBTSxNQUFNLEdBQUcsVUFBVSxDQUFDLEVBQUUsTUFBTSxFQUFFLFdBQVcsRUFBRSxDQUFDLENBQUM7WUFDbkQsZ0JBQWdCLENBQUMsUUFBUSxDQUFDO2dCQUN4QixFQUFFLEVBQUUsVUFBVTtnQkFDZCxHQUFHLEVBQUUsV0FBVztnQkFDaEIsSUFBSSxFQUFFLGFBQWE7Z0JBQ25CLE1BQU0sRUFBRSxTQUFTO2dCQUNqQix5QkFBeUIsRUFBRSxLQUFLO2FBQ2pDLENBQUMsQ0FBQztZQUVILE1BQU0sTUFBTSxDQUFDLHdCQUF3QixFQUFFLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxZQUFZLENBQUMsbUNBQTZCLENBQUMsQ0FBQztZQUM5RixnQkFBZ0IsQ0FBQyxNQUFNLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUMzQyxDQUFDLENBQUMsQ0FBQztJQUNMLENBQUMsQ0FBQyxDQUFDO0lBRUgsUUFBUSxDQUFDLGdCQUFnQixFQUFFO1FBQ3pCLEVBQUUsQ0FBQyxpRkFBaUYsRUFBRSxLQUFLO1lBQ3pGLE1BQU0sTUFBTSxHQUFHLFVBQVUsQ0FBQztnQkFDeEIsTUFBTSxFQUFFLFdBQVc7Z0JBQ25CLFlBQVksRUFBRSxLQUFLO2dCQUNuQixJQUFJLEVBQUUsS0FBSzthQUNaLENBQUMsQ0FBQztZQUNILE1BQU0sYUFBYSxHQUFHO2dCQUNwQixFQUFFLEVBQUUsV0FBVztnQkFDZixHQUFHLEVBQUUsV0FBVztnQkFDaEIsSUFBSSxFQUFFLEtBQWM7Z0JBQ3BCLE1BQU0sRUFBRSxTQUFTO2dCQUNqQixjQUFjLEVBQUUsSUFBSTthQUNyQixDQUFDO1lBQ0YsZ0JBQWdCLENBQUMsUUFBUSxDQUFDO2dCQUN4QixFQUFFLEVBQUUsU0FBUztnQkFDYixNQUFNLEVBQUUsTUFBTTtnQkFDZCxZQUFZLEVBQUUsT0FBTyxHQUFHLEVBQUU7Z0JBQzFCLElBQUksRUFBRSxhQUFhO2dCQUNuQixHQUFHLEVBQUUsVUFBVTthQUNoQixDQUFDLENBQUM7WUFDSCxZQUFZLENBQUMsU0FBUyxDQUFDLE9BQU8sQ0FBQztnQkFDN0IsR0FBRyxFQUFFLGdCQUFnQjtnQkFDckIsaUJBQWlCLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLFFBQVEsQ0FBQyxDQUFDLGFBQWEsQ0FBQyxDQUFDO2FBQzFELENBQUMsQ0FBQztZQUNILE1BQU0sUUFBUSxHQUFHLEtBQUssQ0FBQyxJQUFJLENBQUMsWUFBTSxDQUFDLFNBQVMsRUFBRSxpQkFBaUIsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxFQUFFLEtBQUssRUFBRSxRQUFRLEVBQVMsQ0FBQyxDQUFDO1lBRXRHLE1BQU0sTUFBTSxHQUFHLE1BQU0sTUFBTSxDQUFDLCtCQUErQixDQUFDO2dCQUMxRCxXQUFXLEVBQUUsUUFBUTtnQkFDckIsZ0JBQWdCLEVBQUUsVUFBVTthQUM3QixDQUFDLENBQUM7WUFFSCxNQUFNLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxFQUFFLEtBQUssRUFBRSxRQUFRLEVBQUUsQ0FBQyxDQUFDO1lBQ3ZDLFFBQVEsQ0FBQyxVQUFVLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztZQUNyQyxNQUFNLFFBQVEsR0FBRyxRQUFRLENBQUMsU0FBUyxDQUFDLElBQUksQ0FBQyxDQUFDLENBQXVDLENBQUM7WUFDbEYsUUFBUSxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLGFBQWEsQ0FBQyxDQUFDO1FBQzlDLENBQUMsQ0FBQyxDQUFDO1FBRUgsRUFBRSxDQUFDLHVGQUF1RixFQUFFLEtBQUs7WUFDL0YsTUFBTSxNQUFNLEdBQUcsVUFBVSxDQUFDO2dCQUN4QixNQUFNLEVBQUUsV0FBVztnQkFDbkIsWUFBWSxFQUFFLEtBQUs7Z0JBQ25CLElBQUksRUFBRSxLQUFLO2FBQ1osQ0FBQyxDQUFDO1lBQ0gsTUFBTSxhQUFhLEdBQUc7Z0JBQ3BCLEVBQUUsRUFBRSxXQUFXO2dCQUNmLEdBQUcsRUFBRSxXQUFXO2dCQUNoQixJQUFJLEVBQUUsS0FBYztnQkFDcEIsTUFBTSxFQUFFLFNBQVM7Z0JBQ2pCLGNBQWMsRUFBRSxJQUFJO2FBQ3JCLENBQUM7WUFDRixnQkFBZ0IsQ0FBQyxRQUFRLENBQUM7Z0JBQ3hCLEVBQUUsRUFBRSxTQUFTO2dCQUNiLE1BQU0sRUFBRSxNQUFNO2dCQUNkLFlBQVksRUFBRSxPQUFPLEdBQUcsRUFBRTtnQkFDMUIsSUFBSSxFQUFFLGFBQWE7Z0JBQ25CLEdBQUcsRUFBRSxVQUFVO2FBQ2hCLENBQUMsQ0FBQztZQUNILFlBQVksQ0FBQyxTQUFTLENBQUMsT0FBTyxDQUFDO2dCQUM3QixHQUFHLEVBQUUsZ0JBQWdCO2dCQUNyQixpQkFBaUIsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsUUFBUSxDQUFDLENBQUMsYUFBYSxDQUFDLENBQUM7YUFDMUQsQ0FBQyxDQUFDO1lBQ0gsTUFBTSxRQUFRLEdBQUcsS0FBSyxDQUFDLElBQUksQ0FBQyxZQUFNLENBQUMsU0FBUyxFQUFFLGlCQUFpQixDQUFDLENBQUM7WUFFakUsTUFBTSxNQUFNO2lCQUNULCtCQUErQixDQUFDO2dCQUMvQixXQUFXLEVBQUUsUUFBUTtnQkFDckIsZ0JBQWdCLEVBQUUsa0JBQWtCO2FBQ3JDLENBQUM7aUJBQ0QsTUFBTSxDQUFDLEVBQUUsQ0FBQyxZQUFZLENBQUMsNEJBQXNCLENBQUMsQ0FBQztZQUVsRCxRQUFRLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7WUFDcEMsZ0JBQWdCLENBQUMsVUFBVSxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDL0MsQ0FBQyxDQUFDLENBQUM7UUFFSCxFQUFFLENBQUMsOEVBQThFLEVBQUUsS0FBSztZQUN0RixNQUFNLE1BQU0sR0FBRyxVQUFVLENBQUM7Z0JBQ3hCLE1BQU0sRUFBRSxXQUFXO2dCQUNuQixZQUFZLEVBQUUsS0FBSztnQkFDbkIsSUFBSSxFQUFFLEtBQUs7YUFDWixDQUFDLENBQUM7WUFDSCxNQUFNLGFBQWEsR0FBRztnQkFDcEIsRUFBRSxFQUFFLFdBQVc7Z0JBQ2YsR0FBRyxFQUFFLFdBQVc7Z0JBQ2hCLElBQUksRUFBRSxLQUFjO2dCQUNwQixNQUFNLEVBQUUsU0FBUztnQkFDakIsY0FBYyxFQUFFLElBQUk7YUFDckIsQ0FBQztZQUNGLGdCQUFnQixDQUFDLFFBQVEsQ0FBQztnQkFDeEIsRUFBRSxFQUFFLFNBQVM7Z0JBQ2IsTUFBTSxFQUFFLE1BQU07Z0JBQ2QsWUFBWSxFQUFFLE9BQU8sR0FBRyxFQUFFO2dCQUMxQixJQUFJLEVBQUUsYUFBYTtnQkFDbkIsR0FBRyxFQUFFLFVBQVU7YUFDaEIsQ0FBQyxDQUFDO1lBQ0gsWUFBWSxDQUFDLFNBQVMsQ0FBQyxPQUFPLENBQUM7Z0JBQzdCLEdBQUcsRUFBRSxnQkFBZ0I7Z0JBQ3JCLGlCQUFpQixFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxRQUFRLENBQUMsQ0FBQyxhQUFhLENBQUMsQ0FBQzthQUMxRCxDQUFDLENBQUM7WUFDSCxZQUFZLENBQUMsa0JBQWtCLEdBQUcsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLFNBQVMsQ0FBQyxLQUFLLEVBQUUsTUFBVyxFQUFFLEVBQUUsQ0FBQyxNQUFNLENBQUMsQ0FBQztZQUN4RixZQUFZLENBQUMsZUFBZSxHQUFHLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLENBQUM7WUFDN0QsTUFBTSxXQUFXLEdBQUcsS0FBSyxDQUFDLElBQUksQ0FBQyxZQUFNLENBQUMsU0FBZ0IsRUFBRSxvQkFBb0IsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxFQUFFLEtBQUssRUFBRSxRQUFRLEVBQUUsQ0FBQyxDQUFDO1lBRTVHLE1BQU0sTUFBTTtpQkFDVCxlQUFlLENBQUM7Z0JBQ2YsZ0JBQWdCLEVBQUUsVUFBVTtnQkFDNUIsVUFBVSxFQUFFLEVBQUUsV0FBVyxFQUFFLFFBQVEsRUFBRTthQUN0QyxDQUFDO2lCQUNELE1BQU0sQ0FBQyxFQUFFLENBQUMsWUFBWSxDQUFDLHlDQUFtQyxDQUFDLENBQUM7WUFDL0QsV0FBVyxDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLElBQUksRUFBRSxDQUFDO1FBQ3pDLENBQUMsQ0FBQyxDQUFDO0lBQ0wsQ0FBQyxDQUFDLENBQUM7QUFDTCxDQUFDLENBQUMsQ0FBQztBQUVILFFBQVEsQ0FBQyxrREFBa0QsRUFBRTtJQUMzRCxTQUFTLENBQUM7UUFDUixLQUFLLENBQUMsT0FBTyxFQUFFLENBQUM7SUFDbEIsQ0FBQyxDQUFDLENBQUM7SUFFSCxTQUFTLG1CQUFtQixDQUFDLE1BQVc7UUFDdEMsTUFBTSxpQkFBaUIsR0FBRyxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsUUFBUSxDQUFDO1lBQzlDLFVBQVUsRUFBRSxNQUFNO1lBQ2xCLFdBQVcsRUFBRSxRQUFRO1lBQ3JCLFdBQVcsRUFBRSxDQUFDLEVBQUUsZUFBZSxFQUFFLFVBQVUsRUFBRSxXQUFXLEVBQUUsSUFBSSxFQUFFLGNBQWMsRUFBRSxLQUFLLEVBQUUsQ0FBQztZQUN4RixZQUFZLEVBQUUsRUFBRTtTQUNqQixDQUFDLENBQUM7UUFDSCxNQUFNLGVBQWUsR0FBRyxJQUFJLHFCQUFlLENBQ3pDLEVBQVMsRUFDVCxNQUFNLENBQUMsUUFBUSxFQUNmO1lBQ0UsRUFBRSxFQUFFLEtBQUs7WUFDVCxXQUFXLEVBQUUsUUFBUTtZQUNyQixJQUFJLEVBQUUsRUFBRSxJQUFJLEVBQUUsb0JBQW9CLEVBQUUsa0JBQWtCLEVBQUUsRUFBRSxVQUFVLEVBQUUsRUFBRSxFQUFFLFlBQVksRUFBRSxFQUFFLEVBQUUsRUFBRTtZQUM5RixLQUFLLEVBQUUsU0FBUztZQUNoQixPQUFPLEVBQUUsTUFBTTtTQUNULEVBQ1IsTUFBTSxDQUNQLENBQUM7UUFDRCxlQUF1QixDQUFDLFFBQVEsR0FBRyxFQUFFLGlCQUFpQixFQUFFLENBQUM7UUFDMUQsT0FBTyxFQUFFLGVBQWUsRUFBRSxpQkFBaUIsRUFBRSxDQUFDO0lBQ2hELENBQUM7SUFFRCxFQUFFLENBQUMsK0RBQStELEVBQUUsS0FBSztRQUN2RSxNQUFNLGlCQUFpQixHQUFHO1lBQ3hCLEVBQUUsRUFBRSxXQUFXO1lBQ2YsR0FBRyxFQUFFLFdBQVc7WUFDaEIsSUFBSSxFQUFFLEtBQUs7WUFDWCxNQUFNLEVBQUUsYUFBYTtZQUNyQix5QkFBeUIsRUFBRSxNQUFNO1NBQ2xDLENBQUM7UUFDRixNQUFNLGlCQUFpQixHQUFHLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxRQUFRLENBQUMsQ0FBQyxpQkFBaUIsQ0FBQyxDQUFDLENBQUM7UUFDckUsTUFBTSxVQUFVLEdBQUcsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLFFBQVEsQ0FBQyxjQUFjLENBQUMsQ0FBQztRQUN6RCxNQUFNLE1BQU0sR0FBRyxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsUUFBUSxDQUFDLHNCQUFzQixDQUFDLENBQUM7UUFDN0QsTUFBTSxNQUFNLEdBQVE7WUFDbEIsTUFBTSxFQUFFLEdBQUcsRUFBRSxDQUFDLFdBQVc7WUFDekIsVUFBVTtZQUNWLE1BQU07WUFDTixRQUFRLEVBQUU7Z0JBQ1IsU0FBUyxFQUFFLEdBQUcsRUFBRSxDQUFDLENBQUMsRUFBRSxpQkFBaUIsRUFBRSxDQUFDO2dCQUN4QyxXQUFXLEVBQUUsR0FBRyxFQUFFLENBQUMsSUFBSTtnQkFDdkIsZUFBZSxFQUFFLEdBQUcsRUFBRSxDQUFDLE9BQU87YUFDL0I7WUFDRCxtQkFBbUIsRUFBRSxHQUFHLEVBQUUsQ0FBQyxTQUFTO1NBQ3JDLENBQUM7UUFDRixNQUFNLEVBQUUsZUFBZSxFQUFFLGlCQUFpQixFQUFFLEdBQUcsbUJBQW1CLENBQUMsTUFBTSxDQUFDLENBQUM7UUFFM0UsTUFBTSxNQUFNLEdBQUcsTUFBTSxlQUFlLENBQUMsNkJBQTZCLENBQ2hFLEVBQUUsZ0JBQWdCLEVBQUUsTUFBTSxFQUFFLEVBQzVCLElBQUksbUJBQWEsRUFBRSxDQUNwQixDQUFDO1FBRUYsTUFBTSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsRUFBRSxLQUFLLEVBQUUsVUFBVSxFQUFFLENBQUMsQ0FBQztRQUN6QyxNQUFNLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDbEMsaUJBQWlCLENBQUMsVUFBVSxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDOUMsVUFBVTthQUNQLHFCQUFxQixDQUFDO1lBQ3JCLFFBQVEsRUFBRSxpQkFBaUI7WUFDM0IsZ0JBQWdCLEVBQUUsTUFBTTtTQUN6QixDQUFDO2FBQ0QsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUNwQixpQkFBaUIsQ0FBQyxVQUFVLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztJQUNoRCxDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQywyRUFBMkUsRUFBRSxLQUFLO1FBQ25GLE1BQU0saUJBQWlCLEdBQUc7WUFDeEIsRUFBRSxFQUFFLFdBQVc7WUFDZixHQUFHLEVBQUUsV0FBVztZQUNoQixJQUFJLEVBQUUsS0FBSztZQUNYLE1BQU0sRUFBRSxhQUFhO1lBQ3JCLHlCQUF5QixFQUFFLE1BQU07WUFDakMsWUFBWSxFQUFFLGdCQUFnQjtTQUMvQixDQUFDO1FBQ0YsTUFBTSxpQkFBaUIsR0FBRyxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsUUFBUSxDQUFDLENBQUMsaUJBQWlCLENBQUMsQ0FBQyxDQUFDO1FBQ3JFLE1BQU0sVUFBVSxHQUFHLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxRQUFRLENBQUMsc0JBQXNCLENBQUMsQ0FBQztRQUNqRSxNQUFNLE1BQU0sR0FBRyxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsUUFBUSxDQUFDLFlBQVksQ0FBQyxDQUFDO1FBQ25ELE1BQU0sTUFBTSxHQUFRO1lBQ2xCLE1BQU0sRUFBRSxHQUFHLEVBQUUsQ0FBQyxXQUFXO1lBQ3pCLFVBQVU7WUFDVixNQUFNO1lBQ04sUUFBUSxFQUFFO2dCQUNSLFNBQVMsRUFBRSxHQUFHLEVBQUUsQ0FBQyxDQUFDLEVBQUUsaUJBQWlCLEVBQUUsQ0FBQztnQkFDeEMsV0FBVyxFQUFFLEdBQUcsRUFBRSxDQUFDLElBQUk7Z0JBQ3ZCLGVBQWUsRUFBRSxHQUFHLEVBQUUsQ0FBQyxPQUFPO2FBQy9CO1lBQ0QsbUJBQW1CLEVBQUUsR0FBRyxFQUFFLENBQUMsU0FBUztTQUNyQyxDQUFDO1FBQ0YsTUFBTSxFQUFFLGVBQWUsRUFBRSxpQkFBaUIsRUFBRSxHQUFHLG1CQUFtQixDQUFDLE1BQU0sQ0FBQyxDQUFDO1FBRTNFLE1BQU0sTUFBTSxHQUFHLE1BQU0sZUFBZSxDQUFDLDZCQUE2QixDQUNoRSxFQUFFLGdCQUFnQixFQUFFLE1BQU0sRUFBRSxFQUM1QixJQUFJLG1CQUFhLEVBQUUsQ0FDcEIsQ0FBQztRQUVGLE1BQU0sQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLEVBQUUsS0FBSyxFQUFFLFVBQVUsRUFBRSxDQUFDLENBQUM7UUFDekMsVUFBVSxDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLElBQUksRUFBRSxDQUFDO1FBQ3RDLE1BQU0sQ0FBQyxxQkFBcUIsQ0FBQyxFQUFFLGdCQUFnQixFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUM1RSxpQkFBaUIsQ0FBQyxVQUFVLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUUsQ0FBQztJQUNoRCxDQUFDLENBQUMsQ0FBQztBQUNMLENBQUMsQ0FBQyxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiLyoqXG4gKiBAcHJldHRpZXJcbiAqL1xuaW1wb3J0ICdzaG91bGQnO1xuaW1wb3J0ICogYXMgc2lub24gZnJvbSAnc2lub24nO1xuaW1wb3J0IHtcbiAgZGVyaXZlU2FmZUNoaWxkSGFyZGVuZWRGcm9tWHBydixcbiAgZmV0Y2hSb290S2V5Y2hhaW5Gb3JTYWZlQ2hpbGQsXG4gIGdldFNhZmVIYXJkZW5lZERlcml2YXRpb25QYXRoLFxuICBJbmNvcnJlY3RQYXNzd29yZEVycm9yLFxuICBJbnZhbGlkUm9vdEtleWNoYWluU291cmNlRXJyb3IsXG4gIE1pc3NpbmdFbmNyeXB0ZWRLZXljaGFpbkVycm9yLFxuICBQZW5kaW5nQXBwcm92YWwsXG4gIFJlcXVlc3RUcmFjZXIsXG4gIFNhZmVEZXJpdmVkUHVibGljS2V5TWlzbWF0Y2hFcnJvcixcbiAgU2FmZU93bmVyU2lnbmluZ05vdEltcGxlbWVudGVkRXJyb3IsXG4gIFdhbGxldCxcbn0gZnJvbSAnLi4vLi4vLi4vLi4vc3JjJztcbmltcG9ydCB7IEJhc2VDb2luIH0gZnJvbSAnLi4vLi4vLi4vLi4vc3JjL2JpdGdvL2Jhc2VDb2luJztcblxucmVxdWlyZSgnc2hvdWxkLXNpbm9uJyk7XG5cbmRlc2NyaWJlKCdXQ04tMTIwMCBzYWZlIGNoaWxkIGdldFVzZXJQcnYgcm9vdC1mZXRjaCBkZXRvdXInLCBmdW5jdGlvbiAoKSB7XG4gIGNvbnN0IHBydiA9XG4gICAgJ3hwcnY5czIxWnJRSDE0M0szaGVreU5qN1RjaVI0WE5ZZTFrTWo2OFcyaXBqSkdOSEVUV1A3bzQyQWpEblNQZ0toZFo0eDhOQkF2YUw3MlJyWGp1WE5kbWtNcUxFUlp6YTczb1l1Z0d0YkxGWEc4Zyc7XG4gIC8vIFNvZnQgZGVyaXZlS2V5V2l0aFNlZWRCaXAzMihwcnYsICcxMjMnKSDigJQgbXVzdCBOT1QgYmUgdXNlZCBmb3Igc2FmZSBvd25lcnMuXG4gIGNvbnN0IHNvZnREZXJpdmVkUHJ2ID1cbiAgICAneHBydjl5b0c2N1RkMTF1d2pYd2JWOHpFbXJ5U1ZYRVJ1NUZaQXNMRDlzdUJlRUpiZ0pxQU5zOFluZzVkRUpvaWk3aGFnNUplcm1LNlBiZnhnRG1Telc3ZXdXZUxtZUpFa21QZm1aVVNMZEVUdEh4JztcbiAgY29uc3QgaGFyZGVuZWQgPSBkZXJpdmVTYWZlQ2hpbGRIYXJkZW5lZEZyb21YcHJ2KHBydiwgJzEyMycpO1xuICBjb25zdCBwYXNzcGhyYXNlID0gJ3Rlc3QtcGFzc3BocmFzZSc7XG4gIGNvbnN0IHJvb3RLZXlJZCA9ICdyb290LWtleS1pZCc7XG5cbiAgbGV0IG1vY2tCaXRHbzogYW55O1xuICBsZXQgbW9ja0Jhc2VDb2luOiBhbnk7XG4gIGxldCBrZXljaGFpbnNHZXRTdHViOiBzaW5vbi5TaW5vblN0dWI7XG4gIGxldCBlbmNyeXB0U3R1Yjogc2lub24uU2lub25TdHViO1xuICBsZXQgZGVjcnlwdFN0dWI6IHNpbm9uLlNpbm9uU3R1YjtcblxuICBjb25zdCBiYXNlV2FsbGV0RGF0YSA9IHtcbiAgICBpZDogJ3dhbGxldC1pZCcsXG4gICAgY29pbjogJ3RidGMnLFxuICAgIGtleXM6IFsndXNlci1rZXknLCAnYmFja3VwLWtleScsICdiaXRnby1rZXknXSxcbiAgICB0eXBlOiAnaG90JyxcbiAgICBtdWx0aXNpZ1R5cGU6ICdvbmNoYWluJyxcbiAgICBlbnRlcnByaXNlOiAnZW50LWlkJyxcbiAgfTtcblxuICBiZWZvcmVFYWNoKGZ1bmN0aW9uICgpIHtcbiAgICBrZXljaGFpbnNHZXRTdHViID0gc2lub24uc3R1YigpO1xuICAgIGVuY3J5cHRTdHViID0gc2lub24uc3R1YigpO1xuICAgIGRlY3J5cHRTdHViID0gc2lub24uc3R1YigpO1xuXG4gICAgbW9ja0JpdEdvID0ge1xuICAgICAgZW5jcnlwdDogZW5jcnlwdFN0dWIsXG4gICAgICBkZWNyeXB0OiBkZWNyeXB0U3R1YixcbiAgICAgIHVybDogc2lub24uc3R1YigpLnJldHVybnMoJ2h0dHBzOi8vdGVzdC5iaXRnby5jb20vJyksXG4gICAgICBzZXRSZXF1ZXN0VHJhY2VyOiBzaW5vbi5zdHViKCksXG4gICAgfTtcblxuICAgIG1vY2tCYXNlQ29pbiA9IHtcbiAgICAgIGdldENoYWluOiBzaW5vbi5zdHViKCkucmV0dXJucygndGJ0YycpLFxuICAgICAgZ2V0RmFtaWx5OiBzaW5vbi5zdHViKCkucmV0dXJucygnYnRjJyksXG4gICAgICBnZXRGdWxsTmFtZTogc2lub24uc3R1YigpLnJldHVybnMoJ1Rlc3QgQml0Y29pbicpLFxuICAgICAga2V5Y2hhaW5zOiBzaW5vbi5zdHViKCkucmV0dXJucyh7XG4gICAgICAgIGdldDoga2V5Y2hhaW5zR2V0U3R1YixcbiAgICAgICAgZ2V0S2V5c0ZvclNpZ25pbmc6IHNpbm9uLnN0dWIoKS5yZXNvbHZlcyhbXSksXG4gICAgICB9KSxcbiAgICAgIGRlcml2ZUtleVdpdGhTZWVkOiBzaW5vbi5zdHViKCkuY2FsbHNGYWtlKCh7IGtleSwgc2VlZCB9OiB7IGtleTogc3RyaW5nOyBzZWVkOiBzdHJpbmcgfSkgPT4ge1xuICAgICAgICBpZiAoa2V5ID09PSBwcnYgJiYgc2VlZCA9PT0gJzEyMycpIHtcbiAgICAgICAgICByZXR1cm4geyBrZXk6IHNvZnREZXJpdmVkUHJ2LCBkZXJpdmF0aW9uUGF0aDogJ20vOTk5OTk5Ly4uLicgfTtcbiAgICAgICAgfVxuICAgICAgICByZXR1cm4geyBrZXk6IGBkZXJpdmVkKCR7a2V5fSwke3NlZWR9KWAsIGRlcml2YXRpb25QYXRoOiAnbS8wJyB9O1xuICAgICAgfSksXG4gICAgICB1cmw6IHNpbm9uLnN0dWIoKS5jYWxsc0Zha2UoKHBhdGg6IHN0cmluZykgPT4gYGh0dHBzOi8vdGVzdC5iaXRnby5jb20vYXBpL3YyL3RidGMke3BhdGh9YCksXG4gICAgICBzdXBwb3J0c1N0YWtpbmc6IHNpbm9uLnN0dWIoKS5yZXR1cm5zKGZhbHNlKSxcbiAgICAgIHN1cHBvcnRzVHNzOiBzaW5vbi5zdHViKCkucmV0dXJucyhmYWxzZSksXG4gICAgICBnZXRNUENBbGdvcml0aG06IHNpbm9uLnN0dWIoKSxcbiAgICAgIGtleUlkc0ZvclNpZ25pbmc6IHNpbm9uLnN0dWIoKS5yZXR1cm5zKFswLCAxLCAyXSksXG4gICAgfTtcblxuICAgIGRlY3J5cHRTdHViLmNhbGxzRmFrZSgoeyBpbnB1dCwgcGFzc3dvcmQgfTogeyBpbnB1dDogc3RyaW5nOyBwYXNzd29yZDogc3RyaW5nIH0pID0+IHtcbiAgICAgIGlmIChwYXNzd29yZCAhPT0gcGFzc3BocmFzZSkge1xuICAgICAgICByZXR1cm4gbnVsbDtcbiAgICAgIH1cbiAgICAgIGlmICh0eXBlb2YgaW5wdXQgPT09ICdzdHJpbmcnICYmIGlucHV0LnN0YXJ0c1dpdGgoJ2VuYzonKSkge1xuICAgICAgICByZXR1cm4gaW5wdXQuc2xpY2UoNCk7XG4gICAgICB9XG4gICAgICByZXR1cm4gbnVsbDtcbiAgICB9KTtcbiAgfSk7XG5cbiAgYWZ0ZXJFYWNoKGZ1bmN0aW9uICgpIHtcbiAgICBzaW5vbi5yZXN0b3JlKCk7XG4gIH0pO1xuXG4gIGZ1bmN0aW9uIG1ha2VXYWxsZXQob3ZlcnJpZGVzOiBSZWNvcmQ8c3RyaW5nLCB1bmtub3duPiA9IHt9KTogV2FsbGV0IHtcbiAgICByZXR1cm4gbmV3IFdhbGxldChtb2NrQml0R28sIG1vY2tCYXNlQ29pbiBhcyB1bmtub3duIGFzIEJhc2VDb2luLCB7XG4gICAgICAuLi5iYXNlV2FsbGV0RGF0YSxcbiAgICAgIC4uLm92ZXJyaWRlcyxcbiAgICB9KTtcbiAgfVxuXG4gIGRlc2NyaWJlKCdzYWZlRGVyaXZhdGlvbicsIGZ1bmN0aW9uICgpIHtcbiAgICBpdCgnYnVpbGRzIHRoZSBoYXJkZW5lZCBwYXRoIGZyb20gdGhlIG1pbnQgaW5kZXgnLCBmdW5jdGlvbiAoKSB7XG4gICAgICBnZXRTYWZlSGFyZGVuZWREZXJpdmF0aW9uUGF0aCgxMjMpLnNob3VsZC5lcWwoXCJtLzk5OTk5OScvMTIzJ1wiKTtcbiAgICAgIGdldFNhZmVIYXJkZW5lZERlcml2YXRpb25QYXRoKCcwJykuc2hvdWxkLmVxbChcIm0vOTk5OTk5Jy8wJ1wiKTtcbiAgICB9KTtcblxuICAgIGl0KCdyZWplY3RzIGEgbm9uLWludGVnZXIgaW5kZXgnLCBmdW5jdGlvbiAoKSB7XG4gICAgICAoKCkgPT4gZ2V0U2FmZUhhcmRlbmVkRGVyaXZhdGlvblBhdGgoJ2FiYycpKS5zaG91bGQudGhyb3coL0ludmFsaWQgc2FmZSBkZXJpdmF0aW9uIGluZGV4Lyk7XG4gICAgfSk7XG5cbiAgICBpdCgnaGFyZGVuZWQtZGVyaXZlcyBhIGNoaWxkIHRoYXQgZGlmZmVycyBmcm9tIHNvZnQgZGVyaXZlS2V5V2l0aFNlZWQnLCBmdW5jdGlvbiAoKSB7XG4gICAgICBoYXJkZW5lZC5kZXJpdmF0aW9uUGF0aC5zaG91bGQuZXFsKFwibS85OTk5OTknLzEyMydcIik7XG4gICAgICBoYXJkZW5lZC5wcnYuc2hvdWxkLm5vdC5lcWwoc29mdERlcml2ZWRQcnYpO1xuICAgICAgaGFyZGVuZWQucHJ2LnNob3VsZC5lcWwoXG4gICAgICAgICd4cHJ2OXdNeEUzaWRqZ1c3VW9Tb2RFWmdZcHk3YVN6dDMyR0M3ajYzczI3N1Z3a1JiVnZua1J1Ym1GcVo0VVVnaEhWVGFTYmRIWkEzTk04RnV3SDRDb1RRemFWenpVaDFCd0tjTlluMTdOY3pvUXknXG4gICAgICApO1xuICAgICAgaGFyZGVuZWQucHViLnNob3VsZC5lcWwoXG4gICAgICAgICd4cHViNkFNSmRaRlhhNDRRaEhYR2pHNmd1eHVyOFVxTlNVejNVeDFlZlFXajRISFFVSkZ3SHlEcks0QTJ1a3J1NFFaOVBmaFRZYlBMQk5ZRkw3Z2JkaFRpZFNwcFcxYVE5UWdZUFQ1Y0JGbW9ERXUnXG4gICAgICApO1xuICAgIH0pO1xuICB9KTtcblxuICBkZXNjcmliZSgnZmV0Y2hSb290S2V5Y2hhaW5Gb3JTYWZlQ2hpbGQnLCBmdW5jdGlvbiAoKSB7XG4gICAgaXQoJ3Rocm93cyB3aGVuIGNoaWxkIGtleWNoYWluIGhhcyBubyBwYXJlbnQnLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBhd2FpdCBmZXRjaFJvb3RLZXljaGFpbkZvclNhZmVDaGlsZChtb2NrQmFzZUNvaW4ua2V5Y2hhaW5zKCksIHtcbiAgICAgICAgaWQ6ICdjaGlsZC1rZXknLFxuICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICBwdWI6ICdjaGlsZC1wdWInLFxuICAgICAgfSkuc2hvdWxkLmJlLnJlamVjdGVkV2l0aCgnY2hpbGRLZXljaGFpbi5wYXJlbnQgaXMgcmVxdWlyZWQgdG8gZmV0Y2ggdGhlIHJvb3Qga2V5Y2hhaW4nKTtcbiAgICAgIGtleWNoYWluc0dldFN0dWIubm90Q2FsbGVkLnNob3VsZC5iZS50cnVlKCk7XG4gICAgfSk7XG5cbiAgICBpdCgndGhyb3dzIEludmFsaWRSb290S2V5Y2hhaW5Tb3VyY2VFcnJvciB3aGVuIHJvb3Qgc291cmNlIGlzIGJhY2t1cCcsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICAgIGtleWNoYWluc0dldFN0dWIucmVzb2x2ZXMoe1xuICAgICAgICBpZDogcm9vdEtleUlkLFxuICAgICAgICBzb3VyY2U6ICdiYWNrdXAnLFxuICAgICAgICBlbmNyeXB0ZWRQcnY6ICdlbmM6cm9vdCcsXG4gICAgICAgIHR5cGU6ICdpbmRlcGVuZGVudCcsXG4gICAgICAgIHB1YjogJ3Jvb3QtcHViJyxcbiAgICAgIH0pO1xuXG4gICAgICBhd2FpdCBmZXRjaFJvb3RLZXljaGFpbkZvclNhZmVDaGlsZChtb2NrQmFzZUNvaW4ua2V5Y2hhaW5zKCksIHtcbiAgICAgICAgaWQ6ICdjaGlsZC1rZXknLFxuICAgICAgICBwYXJlbnQ6IHJvb3RLZXlJZCxcbiAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgcHViOiAnY2hpbGQtcHViJyxcbiAgICAgIH0pLnNob3VsZC5iZS5yZWplY3RlZFdpdGgoSW52YWxpZFJvb3RLZXljaGFpblNvdXJjZUVycm9yKTtcbiAgICB9KTtcblxuICAgIGl0KCdyZXR1cm5zIHRoZSByb290IGtleWNoYWluIHdoZW4gc291cmNlIGlzIHVzZXInLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBjb25zdCByb290ID0ge1xuICAgICAgICBpZDogcm9vdEtleUlkLFxuICAgICAgICBzb3VyY2U6ICd1c2VyJyxcbiAgICAgICAgZW5jcnlwdGVkUHJ2OiAnZW5jOnJvb3QnLFxuICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICBwdWI6ICdyb290LXB1YicsXG4gICAgICB9O1xuICAgICAga2V5Y2hhaW5zR2V0U3R1Yi5yZXNvbHZlcyhyb290KTtcblxuICAgICAgY29uc3QgcmVzdWx0ID0gYXdhaXQgZmV0Y2hSb290S2V5Y2hhaW5Gb3JTYWZlQ2hpbGQobW9ja0Jhc2VDb2luLmtleWNoYWlucygpLCB7XG4gICAgICAgIGlkOiAnY2hpbGQta2V5JyxcbiAgICAgICAgcGFyZW50OiByb290S2V5SWQsXG4gICAgICAgIHR5cGU6ICdpbmRlcGVuZGVudCcsXG4gICAgICAgIHB1YjogJ2NoaWxkLXB1YicsXG4gICAgICB9KTtcbiAgICAgIHJlc3VsdC5zaG91bGQuZXFsKHJvb3QpO1xuICAgIH0pO1xuXG4gICAgaXQoJ3Rocm93cyB3aGVuIHJvb3Qga2V5Y2hhaW4gaGFzIG5vIGVuY3J5cHRlZFBydicsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICAgIGtleWNoYWluc0dldFN0dWIucmVzb2x2ZXMoe1xuICAgICAgICBpZDogcm9vdEtleUlkLFxuICAgICAgICBzb3VyY2U6ICd1c2VyJyxcbiAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgcHViOiAncm9vdC1wdWInLFxuICAgICAgfSk7XG5cbiAgICAgIGF3YWl0IGZldGNoUm9vdEtleWNoYWluRm9yU2FmZUNoaWxkKG1vY2tCYXNlQ29pbi5rZXljaGFpbnMoKSwge1xuICAgICAgICBpZDogJ2NoaWxkLWtleScsXG4gICAgICAgIHBhcmVudDogcm9vdEtleUlkLFxuICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICBwdWI6ICdjaGlsZC1wdWInLFxuICAgICAgfSkuc2hvdWxkLmJlLnJlamVjdGVkV2l0aCgvZG9lcyBub3QgaGF2ZSBwcm9wZXJ0eSBlbmNyeXB0ZWRQcnYvKTtcbiAgICB9KTtcbiAgfSk7XG5cbiAgZGVzY3JpYmUoJ2dldFVzZXJQcnYnLCBmdW5jdGlvbiAoKSB7XG4gICAgaXQoJ3Rocm93cyB3aGVuIGtleWNoYWluIGhhcyBubyBlbmNyeXB0ZWRQcnYgb24gYSBub24tc2FmZSB3YWxsZXQnLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBjb25zdCB3YWxsZXQgPSBtYWtlV2FsbGV0KCk7XG4gICAgICBhd2FpdCB3YWxsZXRcbiAgICAgICAgLmdldFVzZXJQcnYoe1xuICAgICAgICAgIGtleWNoYWluOiB7XG4gICAgICAgICAgICBpZDogJ2NoaWxkLWtleScsXG4gICAgICAgICAgICBwdWI6ICdwdWInLFxuICAgICAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgICB9LFxuICAgICAgICAgIHdhbGxldFBhc3NwaHJhc2U6IHBhc3NwaHJhc2UsXG4gICAgICAgIH0pXG4gICAgICAgIC5zaG91bGQuYmUucmVqZWN0ZWRXaXRoKCdrZXljaGFpbiBkb2VzIG5vdCBoYXZlIHByb3BlcnR5IGVuY3J5cHRlZFBydicpO1xuICAgIH0pO1xuXG4gICAgaXQoJ3Rocm93cyBmb3IgYSBub24tc2FmZSB3YWxsZXQgZXZlbiB3aGVuIGtleWNoYWluIGhhcyBwYXJlbnQnLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBjb25zdCB3YWxsZXQgPSBtYWtlV2FsbGV0KCk7XG4gICAgICBhd2FpdCB3YWxsZXRcbiAgICAgICAgLmdldFVzZXJQcnYoe1xuICAgICAgICAgIGtleWNoYWluOiB7XG4gICAgICAgICAgICBpZDogJ2NoaWxkLWtleScsXG4gICAgICAgICAgICBwdWI6ICdwdWInLFxuICAgICAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgICAgIHBhcmVudDogcm9vdEtleUlkLFxuICAgICAgICAgIH0sXG4gICAgICAgICAgd2FsbGV0UGFzc3BocmFzZTogcGFzc3BocmFzZSxcbiAgICAgICAgfSlcbiAgICAgICAgLnNob3VsZC5iZS5yZWplY3RlZFdpdGgoJ2tleWNoYWluIGRvZXMgbm90IGhhdmUgcHJvcGVydHkgZW5jcnlwdGVkUHJ2Jyk7XG4gICAgICBrZXljaGFpbnNHZXRTdHViLm5vdENhbGxlZC5zaG91bGQuYmUudHJ1ZSgpO1xuICAgIH0pO1xuXG4gICAgaXQoJ3Rocm93cyBmb3IgYSBzYWZlIHdhbGxldCB3aGVuIGtleWNoYWluIGhhcyBubyBwYXJlbnQnLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBjb25zdCB3YWxsZXQgPSBtYWtlV2FsbGV0KHsgc2FmZUlkOiAnc2FmZS1pZC0xJyB9KTtcbiAgICAgIGF3YWl0IHdhbGxldFxuICAgICAgICAuZ2V0VXNlclBydih7XG4gICAgICAgICAga2V5Y2hhaW46IHtcbiAgICAgICAgICAgIGlkOiAnY2hpbGQta2V5JyxcbiAgICAgICAgICAgIHB1YjogJ3B1YicsXG4gICAgICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICAgIH0sXG4gICAgICAgICAgd2FsbGV0UGFzc3BocmFzZTogcGFzc3BocmFzZSxcbiAgICAgICAgfSlcbiAgICAgICAgLnNob3VsZC5iZS5yZWplY3RlZFdpdGgoJ2tleWNoYWluIGRvZXMgbm90IGhhdmUgcHJvcGVydHkgZW5jcnlwdGVkUHJ2Jyk7XG4gICAgICBrZXljaGFpbnNHZXRTdHViLm5vdENhbGxlZC5zaG91bGQuYmUudHJ1ZSgpO1xuICAgIH0pO1xuXG4gICAgaXQoJ2ZldGNoZXMgcm9vdCBhbmQgaGFyZGVuZWQtZGVyaXZlcyBjaGlsZCBrZXkgZm9yIHNhZmUgb3duZXInLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBjb25zdCB3YWxsZXQgPSBtYWtlV2FsbGV0KHsgc2FmZUlkOiAnc2FmZS1pZC0xJyB9KTtcbiAgICAgIGtleWNoYWluc0dldFN0dWIucmVzb2x2ZXMoe1xuICAgICAgICBpZDogcm9vdEtleUlkLFxuICAgICAgICBzb3VyY2U6ICd1c2VyJyxcbiAgICAgICAgZW5jcnlwdGVkUHJ2OiBgZW5jOiR7cHJ2fWAsXG4gICAgICAgIHR5cGU6ICdpbmRlcGVuZGVudCcsXG4gICAgICAgIHB1YjogJ3Jvb3QtcHViJyxcbiAgICAgIH0pO1xuXG4gICAgICBjb25zdCByZXN1bHQgPSBhd2FpdCB3YWxsZXQuZ2V0VXNlclBydih7XG4gICAgICAgIGtleWNoYWluOiB7XG4gICAgICAgICAgaWQ6ICdjaGlsZC1rZXknLFxuICAgICAgICAgIHB1YjogaGFyZGVuZWQucHViLFxuICAgICAgICAgIHR5cGU6ICdpbmRlcGVuZGVudCcsXG4gICAgICAgICAgcGFyZW50OiByb290S2V5SWQsXG4gICAgICAgICAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZDogJzEyMycsXG4gICAgICAgIH0sXG4gICAgICAgIHdhbGxldFBhc3NwaHJhc2U6IHBhc3NwaHJhc2UsXG4gICAgICB9KTtcblxuICAgICAgcmVzdWx0LnNob3VsZC5lcWwoaGFyZGVuZWQucHJ2KTtcbiAgICAgIHJlc3VsdC5zaG91bGQubm90LmVxbChzb2Z0RGVyaXZlZFBydik7XG4gICAgICBrZXljaGFpbnNHZXRTdHViLmNhbGxlZE9uY2VXaXRoRXhhY3RseSh7IGlkOiByb290S2V5SWQgfSkuc2hvdWxkLmJlLnRydWUoKTtcbiAgICAgIG1vY2tCYXNlQ29pbi5kZXJpdmVLZXlXaXRoU2VlZC5ub3RDYWxsZWQuc2hvdWxkLmJlLnRydWUoKTtcbiAgICB9KTtcblxuICAgIGl0KCd0aHJvd3Mgd2hlbiBvbmNoYWluIHNhZmUgb3duZXIgaXMgbWlzc2luZyBkZXJpdmVkRnJvbVBhcmVudFdpdGhTZWVkJywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgICAgY29uc3Qgd2FsbGV0ID0gbWFrZVdhbGxldCh7IHNhZmVJZDogJ3NhZmUtaWQtMScgfSk7XG4gICAgICBrZXljaGFpbnNHZXRTdHViLnJlc29sdmVzKHtcbiAgICAgICAgaWQ6IHJvb3RLZXlJZCxcbiAgICAgICAgc291cmNlOiAndXNlcicsXG4gICAgICAgIGVuY3J5cHRlZFBydjogYGVuYzoke3Bydn1gLFxuICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICBwdWI6ICdyb290LXB1YicsXG4gICAgICB9KTtcblxuICAgICAgYXdhaXQgd2FsbGV0XG4gICAgICAgIC5nZXRVc2VyUHJ2KHtcbiAgICAgICAgICBrZXljaGFpbjoge1xuICAgICAgICAgICAgaWQ6ICdjaGlsZC1rZXknLFxuICAgICAgICAgICAgcHViOiBoYXJkZW5lZC5wdWIsXG4gICAgICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICAgICAgcGFyZW50OiByb290S2V5SWQsXG4gICAgICAgICAgfSxcbiAgICAgICAgICB3YWxsZXRQYXNzcGhyYXNlOiBwYXNzcGhyYXNlLFxuICAgICAgICB9KVxuICAgICAgICAuc2hvdWxkLmJlLnJlamVjdGVkV2l0aCgvbWlzc2luZyBkZXJpdmVkRnJvbVBhcmVudFdpdGhTZWVkLyk7XG4gICAgfSk7XG5cbiAgICBpdCgnZmFpbHMgY2xvc2VkIGZvciBUU1Mgc2FmZSBvd25lciBpbnN0ZWFkIG9mIHJldHVybmluZyB0aGUgcm9vdCBwcnYnLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBjb25zdCB3YWxsZXQgPSBtYWtlV2FsbGV0KHsgc2FmZUlkOiAnc2FmZS1pZC0xJywgbXVsdGlzaWdUeXBlOiAndHNzJyB9KTtcblxuICAgICAgYXdhaXQgd2FsbGV0XG4gICAgICAgIC5nZXRVc2VyUHJ2KHtcbiAgICAgICAgICBrZXljaGFpbjoge1xuICAgICAgICAgICAgaWQ6ICdjaGlsZC1rZXknLFxuICAgICAgICAgICAgcHViOiAndW5yZWxhdGVkLWNoaWxkLXB1YicsXG4gICAgICAgICAgICB0eXBlOiAndHNzJyxcbiAgICAgICAgICAgIHBhcmVudDogcm9vdEtleUlkLFxuICAgICAgICAgICAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZDogJzEyMycsXG4gICAgICAgICAgICBjb21tb25LZXljaGFpbjogJ2NrJyxcbiAgICAgICAgICB9LFxuICAgICAgICAgIHdhbGxldFBhc3NwaHJhc2U6IHBhc3NwaHJhc2UsXG4gICAgICAgIH0pXG4gICAgICAgIC5zaG91bGQuYmUucmVqZWN0ZWRXaXRoKFNhZmVPd25lclNpZ25pbmdOb3RJbXBsZW1lbnRlZEVycm9yKTtcbiAgICAgIGtleWNoYWluc0dldFN0dWIubm90Q2FsbGVkLnNob3VsZC5iZS50cnVlKCk7XG4gICAgICBtb2NrQmFzZUNvaW4uZGVyaXZlS2V5V2l0aFNlZWQubm90Q2FsbGVkLnNob3VsZC5iZS50cnVlKCk7XG4gICAgfSk7XG5cbiAgICBpdCgnZmFpbHMgY2xvc2VkIGZvciBlZDI1NTE5IG9uY2hhaW4gc2FmZSBvd25lciBpbnN0ZWFkIG9mIEJJUDMyLWRlcml2aW5nJywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgICAgbW9ja0Jhc2VDb2luLmdldEZhbWlseS5yZXR1cm5zKCd4bG0nKTtcbiAgICAgIGNvbnN0IHdhbGxldCA9IG1ha2VXYWxsZXQoeyBzYWZlSWQ6ICdzYWZlLWlkLTEnLCBjb2luOiAndHhsbScgfSk7XG5cbiAgICAgIGF3YWl0IHdhbGxldFxuICAgICAgICAuZ2V0VXNlclBydih7XG4gICAgICAgICAga2V5Y2hhaW46IHtcbiAgICAgICAgICAgIGlkOiAnY2hpbGQta2V5JyxcbiAgICAgICAgICAgIHB1YjogJ2NoaWxkLXB1YicsXG4gICAgICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICAgICAgcGFyZW50OiByb290S2V5SWQsXG4gICAgICAgICAgICBkZXJpdmVkRnJvbVBhcmVudFdpdGhTZWVkOiAnMTIzJyxcbiAgICAgICAgICB9LFxuICAgICAgICAgIHdhbGxldFBhc3NwaHJhc2U6IHBhc3NwaHJhc2UsXG4gICAgICAgIH0pXG4gICAgICAgIC5zaG91bGQuYmUucmVqZWN0ZWRXaXRoKFNhZmVPd25lclNpZ25pbmdOb3RJbXBsZW1lbnRlZEVycm9yKTtcbiAgICAgIGtleWNoYWluc0dldFN0dWIubm90Q2FsbGVkLnNob3VsZC5iZS50cnVlKCk7XG4gICAgICBtb2NrQmFzZUNvaW4uZGVyaXZlS2V5V2l0aFNlZWQubm90Q2FsbGVkLnNob3VsZC5iZS50cnVlKCk7XG4gICAgfSk7XG5cbiAgICBpdCgnYWJvcnRzIGxvY2FsbHkgd2hlbiBkZXJpdmVkIHB1YiBkb2VzIG5vdCBtYXRjaCByZWdpc3RlcmVkIGNoaWxkIHB1YicsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICAgIGNvbnN0IHdhbGxldCA9IG1ha2VXYWxsZXQoeyBzYWZlSWQ6ICdzYWZlLWlkLTEnIH0pO1xuICAgICAga2V5Y2hhaW5zR2V0U3R1Yi5yZXNvbHZlcyh7XG4gICAgICAgIGlkOiByb290S2V5SWQsXG4gICAgICAgIHNvdXJjZTogJ3VzZXInLFxuICAgICAgICBlbmNyeXB0ZWRQcnY6IGBlbmM6JHtwcnZ9YCxcbiAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgcHViOiAncm9vdC1wdWInLFxuICAgICAgfSk7XG5cbiAgICAgIGF3YWl0IHdhbGxldFxuICAgICAgICAuZ2V0VXNlclBydih7XG4gICAgICAgICAga2V5Y2hhaW46IHtcbiAgICAgICAgICAgIGlkOiAnY2hpbGQta2V5JyxcbiAgICAgICAgICAgIHB1YjogJ3hwdWItd3JvbmctcmVnaXN0ZXJlZC1rZXknLFxuICAgICAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgICAgIHBhcmVudDogcm9vdEtleUlkLFxuICAgICAgICAgICAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZDogJzEyMycsXG4gICAgICAgICAgfSxcbiAgICAgICAgICB3YWxsZXRQYXNzcGhyYXNlOiBwYXNzcGhyYXNlLFxuICAgICAgICB9KVxuICAgICAgICAuc2hvdWxkLmJlLnJlamVjdGVkV2l0aChTYWZlRGVyaXZlZFB1YmxpY0tleU1pc21hdGNoRXJyb3IpO1xuICAgIH0pO1xuXG4gICAgaXQoJ2RlY3J5cHRzIGNoaWxkIGVuY3J5cHRlZFBydiBhcy1pcyBmb3Igd2FsbGV0IHNoYXJlZSAoaGFyZGVuZWQgY2hpbGQgcHJ2KScsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICAgIGNvbnN0IGNoaWxkUHJ2ID0gJ2NoaWxkLWxldmVsLXBydic7XG4gICAgICBjb25zdCB3YWxsZXQgPSBtYWtlV2FsbGV0KHsgc2FmZUlkOiAnc2FmZS1pZC0xJyB9KTtcblxuICAgICAgY29uc3QgcmVzdWx0ID0gYXdhaXQgd2FsbGV0LmdldFVzZXJQcnYoe1xuICAgICAgICBrZXljaGFpbjoge1xuICAgICAgICAgIGlkOiAnY2hpbGQta2V5JyxcbiAgICAgICAgICBwdWI6ICdjaGlsZC1wdWInLFxuICAgICAgICAgIHR5cGU6ICdpbmRlcGVuZGVudCcsXG4gICAgICAgICAgcGFyZW50OiByb290S2V5SWQsXG4gICAgICAgICAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZDogJzEyMycsXG4gICAgICAgICAgZW5jcnlwdGVkUHJ2OiBgZW5jOiR7Y2hpbGRQcnZ9YCxcbiAgICAgICAgfSxcbiAgICAgICAgd2FsbGV0UGFzc3BocmFzZTogcGFzc3BocmFzZSxcbiAgICAgIH0pO1xuXG4gICAgICByZXN1bHQuc2hvdWxkLmVxbChjaGlsZFBydik7XG4gICAgICBrZXljaGFpbnNHZXRTdHViLm5vdENhbGxlZC5zaG91bGQuYmUudHJ1ZSgpO1xuICAgICAgbW9ja0Jhc2VDb2luLmRlcml2ZUtleVdpdGhTZWVkLm5vdENhbGxlZC5zaG91bGQuYmUudHJ1ZSgpO1xuICAgIH0pO1xuXG4gICAgaXQoJ2RvZXMgbm90IGF1dG8tcG9wdWxhdGUgY29sZERlcml2YXRpb25TZWVkIHdoZW4gZXhwbGljaXQgcHJ2IGFuZCBlbmNyeXB0ZWRQcnYgYXJlIHByZXNlbnQnLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBjb25zdCBjaGlsZFBydiA9ICdjaGlsZC1sZXZlbC1wcnYnO1xuICAgICAgY29uc3Qgd2FsbGV0ID0gbWFrZVdhbGxldCh7IHNhZmVJZDogJ3NhZmUtaWQtMScgfSk7XG5cbiAgICAgIGNvbnN0IHJlc3VsdCA9IGF3YWl0IHdhbGxldC5nZXRVc2VyUHJ2KHtcbiAgICAgICAgcHJ2OiBjaGlsZFBydixcbiAgICAgICAga2V5Y2hhaW46IHtcbiAgICAgICAgICBpZDogJ2NoaWxkLWtleScsXG4gICAgICAgICAgcHViOiAnY2hpbGQtcHViJyxcbiAgICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICAgIHBhcmVudDogcm9vdEtleUlkLFxuICAgICAgICAgIGRlcml2ZWRGcm9tUGFyZW50V2l0aFNlZWQ6ICcxMjMnLFxuICAgICAgICAgIGVuY3J5cHRlZFBydjogYGVuYzoke2NoaWxkUHJ2fWAsXG4gICAgICAgIH0sXG4gICAgICB9KTtcblxuICAgICAgcmVzdWx0LnNob3VsZC5lcWwoY2hpbGRQcnYpO1xuICAgICAgbW9ja0Jhc2VDb2luLmRlcml2ZUtleVdpdGhTZWVkLm5vdENhbGxlZC5zaG91bGQuYmUudHJ1ZSgpO1xuICAgIH0pO1xuXG4gICAgaXQoJ3N0aWxsIGF1dG8tcG9wdWxhdGVzIGNvbGREZXJpdmF0aW9uU2VlZCBmb3IgU01DIHdpdGggcGFyYW1zLnBydiBhbmQgbm8gZW5jcnlwdGVkUHJ2JywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgICAgY29uc3Qgd2FsbGV0ID0gbWFrZVdhbGxldCgpO1xuXG4gICAgICBjb25zdCByZXN1bHQgPSBhd2FpdCB3YWxsZXQuZ2V0VXNlclBydih7XG4gICAgICAgIHBydixcbiAgICAgICAga2V5Y2hhaW46IHtcbiAgICAgICAgICBpZDogJ3NtYy1rZXknLFxuICAgICAgICAgIHB1YjogJ3NtYy1wdWInLFxuICAgICAgICAgIHR5cGU6ICdpbmRlcGVuZGVudCcsXG4gICAgICAgICAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZDogJzEyMycsXG4gICAgICAgIH0sXG4gICAgICB9KTtcblxuICAgICAgcmVzdWx0LnNob3VsZC5lcWwoc29mdERlcml2ZWRQcnYpO1xuICAgICAgbW9ja0Jhc2VDb2luLmRlcml2ZUtleVdpdGhTZWVkLmNhbGxlZE9uY2Uuc2hvdWxkLmJlLnRydWUoKTtcbiAgICB9KTtcblxuICAgIGl0KCdkb2VzIG5vdCBhcHBseSBhbiBleHBsaWNpdCBjb2xkRGVyaXZhdGlvblNlZWQgYWZ0ZXIgZGVjcnlwdGluZyBlbmNyeXB0ZWRQcnYnLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgICBjb25zdCB3YWxsZXQgPSBtYWtlV2FsbGV0KCk7XG4gICAgICBjb25zdCBjaGlsZFBydiA9IHBydjtcblxuICAgICAgY29uc3QgcmVzdWx0ID0gYXdhaXQgd2FsbGV0LmdldFVzZXJQcnYoe1xuICAgICAgICBrZXljaGFpbjoge1xuICAgICAgICAgIGlkOiAnc21jLWtleScsXG4gICAgICAgICAgcHViOiAnc21jLXB1YicsXG4gICAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgICBlbmNyeXB0ZWRQcnY6IGBlbmM6JHtjaGlsZFBydn1gLFxuICAgICAgICB9LFxuICAgICAgICB3YWxsZXRQYXNzcGhyYXNlOiBwYXNzcGhyYXNlLFxuICAgICAgICBjb2xkRGVyaXZhdGlvblNlZWQ6ICcxMjMnLFxuICAgICAgfSk7XG5cbiAgICAgIHJlc3VsdC5zaG91bGQuZXFsKGNoaWxkUHJ2KTtcbiAgICAgIG1vY2tCYXNlQ29pbi5kZXJpdmVLZXlXaXRoU2VlZC5ub3RDYWxsZWQuc2hvdWxkLmJlLnRydWUoKTtcbiAgICB9KTtcblxuICAgIGl0KCd0aHJvd3MgZW5jcnlwdGVkUHJ2IGVycm9yIGJlZm9yZSB3YWxsZXRQYXNzcGhyYXNlIHdoZW4gYm90aCBhcmUgbWlzc2luZycsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICAgIGNvbnN0IHdhbGxldCA9IG1ha2VXYWxsZXQoKTtcbiAgICAgIGF3YWl0IHdhbGxldFxuICAgICAgICAuZ2V0VXNlclBydih7XG4gICAgICAgICAga2V5Y2hhaW46IHtcbiAgICAgICAgICAgIGlkOiAnY2hpbGQta2V5JyxcbiAgICAgICAgICAgIHB1YjogJ3B1YicsXG4gICAgICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICAgIH0sXG4gICAgICAgIH0pXG4gICAgICAgIC5zaG91bGQuYmUucmVqZWN0ZWRXaXRoKCdrZXljaGFpbiBkb2VzIG5vdCBoYXZlIHByb3BlcnR5IGVuY3J5cHRlZFBydicpO1xuICAgIH0pO1xuICB9KTtcblxuICBkZXNjcmliZSgnZ2V0RW5jcnlwdGVkVXNlcktleWNoYWluJywgZnVuY3Rpb24gKCkge1xuICAgIGl0KCdzdGlsbCBmYWlscyBmb3IgYSBzYWZlIG93bmVyIHNvIHdhbGxldCBzaGFyaW5nIGNhbm5vdCBvYnRhaW4gcm9vdCBtYXRlcmlhbCcsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICAgIGNvbnN0IHdhbGxldCA9IG1ha2VXYWxsZXQoeyBzYWZlSWQ6ICdzYWZlLWlkLTEnIH0pO1xuICAgICAga2V5Y2hhaW5zR2V0U3R1Yi5yZXNvbHZlcyh7XG4gICAgICAgIGlkOiAndXNlci1rZXknLFxuICAgICAgICBwdWI6ICdjaGlsZC1wdWInLFxuICAgICAgICB0eXBlOiAnaW5kZXBlbmRlbnQnLFxuICAgICAgICBwYXJlbnQ6IHJvb3RLZXlJZCxcbiAgICAgICAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZDogJzEyMycsXG4gICAgICB9KTtcblxuICAgICAgYXdhaXQgd2FsbGV0LmdldEVuY3J5cHRlZFVzZXJLZXljaGFpbigpLnNob3VsZC5iZS5yZWplY3RlZFdpdGgoTWlzc2luZ0VuY3J5cHRlZEtleWNoYWluRXJyb3IpO1xuICAgICAga2V5Y2hhaW5zR2V0U3R1Yi5jYWxsZWQuc2hvdWxkLmJlLnRydWUoKTtcbiAgICB9KTtcbiAgfSk7XG5cbiAgZGVzY3JpYmUoJ3NpZ25pbmcgZ3VhcmRzJywgZnVuY3Rpb24gKCkge1xuICAgIGl0KCdnZXRVc2VyS2V5QW5kU2lnblRzc1RyYW5zYWN0aW9uIGFsbG93cyBzYWZlIGNoaWxkIGtleWNoYWluIHdpdGhvdXQgZW5jcnlwdGVkUHJ2JywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgICAgY29uc3Qgd2FsbGV0ID0gbWFrZVdhbGxldCh7XG4gICAgICAgIHNhZmVJZDogJ3NhZmUtaWQtMScsXG4gICAgICAgIG11bHRpc2lnVHlwZTogJ3RzcycsXG4gICAgICAgIHR5cGU6ICdob3QnLFxuICAgICAgfSk7XG4gICAgICBjb25zdCBjaGlsZEtleWNoYWluID0ge1xuICAgICAgICBpZDogJ2NoaWxkLWtleScsXG4gICAgICAgIHB1YjogJ2NoaWxkLXB1YicsXG4gICAgICAgIHR5cGU6ICd0c3MnIGFzIGNvbnN0LFxuICAgICAgICBwYXJlbnQ6IHJvb3RLZXlJZCxcbiAgICAgICAgY29tbW9uS2V5Y2hhaW46ICdjaycsXG4gICAgICB9O1xuICAgICAga2V5Y2hhaW5zR2V0U3R1Yi5yZXNvbHZlcyh7XG4gICAgICAgIGlkOiByb290S2V5SWQsXG4gICAgICAgIHNvdXJjZTogJ3VzZXInLFxuICAgICAgICBlbmNyeXB0ZWRQcnY6IGBlbmM6JHtwcnZ9YCxcbiAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgcHViOiAncm9vdC1wdWInLFxuICAgICAgfSk7XG4gICAgICBtb2NrQmFzZUNvaW4ua2V5Y2hhaW5zLnJldHVybnMoe1xuICAgICAgICBnZXQ6IGtleWNoYWluc0dldFN0dWIsXG4gICAgICAgIGdldEtleXNGb3JTaWduaW5nOiBzaW5vbi5zdHViKCkucmVzb2x2ZXMoW2NoaWxkS2V5Y2hhaW5dKSxcbiAgICAgIH0pO1xuICAgICAgY29uc3Qgc2lnblN0dWIgPSBzaW5vbi5zdHViKFdhbGxldC5wcm90b3R5cGUsICdzaWduVHJhbnNhY3Rpb24nKS5yZXNvbHZlcyh7IHR4SGV4OiAnc2lnbmVkJyB9IGFzIGFueSk7XG5cbiAgICAgIGNvbnN0IHJlc3VsdCA9IGF3YWl0IHdhbGxldC5nZXRVc2VyS2V5QW5kU2lnblRzc1RyYW5zYWN0aW9uKHtcbiAgICAgICAgdHhSZXF1ZXN0SWQ6ICd0eC1yZXEnLFxuICAgICAgICB3YWxsZXRQYXNzcGhyYXNlOiBwYXNzcGhyYXNlLFxuICAgICAgfSk7XG5cbiAgICAgIHJlc3VsdC5zaG91bGQuZXFsKHsgdHhIZXg6ICdzaWduZWQnIH0pO1xuICAgICAgc2lnblN0dWIuY2FsbGVkT25jZS5zaG91bGQuYmUudHJ1ZSgpO1xuICAgICAgY29uc3Qgc2lnbkFyZ3MgPSBzaWduU3R1Yi5maXJzdENhbGwuYXJnc1swXSBhcyB7IGtleWNoYWluOiB0eXBlb2YgY2hpbGRLZXljaGFpbiB9O1xuICAgICAgc2lnbkFyZ3Mua2V5Y2hhaW4uc2hvdWxkLmVxbChjaGlsZEtleWNoYWluKTtcbiAgICB9KTtcblxuICAgIGl0KCdnZXRVc2VyS2V5QW5kU2lnblRzc1RyYW5zYWN0aW9uIHJlamVjdHMgd3JvbmcgcGFzc3BocmFzZSBlYXJseSBmb3Igc2FmZSBjaGlsZCB3YWxsZXRzJywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgICAgY29uc3Qgd2FsbGV0ID0gbWFrZVdhbGxldCh7XG4gICAgICAgIHNhZmVJZDogJ3NhZmUtaWQtMScsXG4gICAgICAgIG11bHRpc2lnVHlwZTogJ3RzcycsXG4gICAgICAgIHR5cGU6ICdob3QnLFxuICAgICAgfSk7XG4gICAgICBjb25zdCBjaGlsZEtleWNoYWluID0ge1xuICAgICAgICBpZDogJ2NoaWxkLWtleScsXG4gICAgICAgIHB1YjogJ2NoaWxkLXB1YicsXG4gICAgICAgIHR5cGU6ICd0c3MnIGFzIGNvbnN0LFxuICAgICAgICBwYXJlbnQ6IHJvb3RLZXlJZCxcbiAgICAgICAgY29tbW9uS2V5Y2hhaW46ICdjaycsXG4gICAgICB9O1xuICAgICAga2V5Y2hhaW5zR2V0U3R1Yi5yZXNvbHZlcyh7XG4gICAgICAgIGlkOiByb290S2V5SWQsXG4gICAgICAgIHNvdXJjZTogJ3VzZXInLFxuICAgICAgICBlbmNyeXB0ZWRQcnY6IGBlbmM6JHtwcnZ9YCxcbiAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgcHViOiAncm9vdC1wdWInLFxuICAgICAgfSk7XG4gICAgICBtb2NrQmFzZUNvaW4ua2V5Y2hhaW5zLnJldHVybnMoe1xuICAgICAgICBnZXQ6IGtleWNoYWluc0dldFN0dWIsXG4gICAgICAgIGdldEtleXNGb3JTaWduaW5nOiBzaW5vbi5zdHViKCkucmVzb2x2ZXMoW2NoaWxkS2V5Y2hhaW5dKSxcbiAgICAgIH0pO1xuICAgICAgY29uc3Qgc2lnblN0dWIgPSBzaW5vbi5zdHViKFdhbGxldC5wcm90b3R5cGUsICdzaWduVHJhbnNhY3Rpb24nKTtcblxuICAgICAgYXdhaXQgd2FsbGV0XG4gICAgICAgIC5nZXRVc2VyS2V5QW5kU2lnblRzc1RyYW5zYWN0aW9uKHtcbiAgICAgICAgICB0eFJlcXVlc3RJZDogJ3R4LXJlcScsXG4gICAgICAgICAgd2FsbGV0UGFzc3BocmFzZTogJ3dyb25nLXBhc3NwaHJhc2UnLFxuICAgICAgICB9KVxuICAgICAgICAuc2hvdWxkLmJlLnJlamVjdGVkV2l0aChJbmNvcnJlY3RQYXNzd29yZEVycm9yKTtcblxuICAgICAgc2lnblN0dWIubm90Q2FsbGVkLnNob3VsZC5iZS50cnVlKCk7XG4gICAgICBrZXljaGFpbnNHZXRTdHViLmNhbGxlZE9uY2Uuc2hvdWxkLmJlLnRydWUoKTtcbiAgICB9KTtcblxuICAgIGl0KCdzaWduVHJhbnNhY3Rpb24gZG9lcyBub3QgcGFzcyB0aGUgcm9vdCBwcnYgaW50byBUU1Mgc2lnbmluZyBmb3IgYSBzYWZlIG93bmVyJywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgICAgY29uc3Qgd2FsbGV0ID0gbWFrZVdhbGxldCh7XG4gICAgICAgIHNhZmVJZDogJ3NhZmUtaWQtMScsXG4gICAgICAgIG11bHRpc2lnVHlwZTogJ3RzcycsXG4gICAgICAgIHR5cGU6ICdob3QnLFxuICAgICAgfSk7XG4gICAgICBjb25zdCBjaGlsZEtleWNoYWluID0ge1xuICAgICAgICBpZDogJ2NoaWxkLWtleScsXG4gICAgICAgIHB1YjogJ2NoaWxkLXB1YicsXG4gICAgICAgIHR5cGU6ICd0c3MnIGFzIGNvbnN0LFxuICAgICAgICBwYXJlbnQ6IHJvb3RLZXlJZCxcbiAgICAgICAgY29tbW9uS2V5Y2hhaW46ICdjaycsXG4gICAgICB9O1xuICAgICAga2V5Y2hhaW5zR2V0U3R1Yi5yZXNvbHZlcyh7XG4gICAgICAgIGlkOiByb290S2V5SWQsXG4gICAgICAgIHNvdXJjZTogJ3VzZXInLFxuICAgICAgICBlbmNyeXB0ZWRQcnY6IGBlbmM6JHtwcnZ9YCxcbiAgICAgICAgdHlwZTogJ2luZGVwZW5kZW50JyxcbiAgICAgICAgcHViOiAncm9vdC1wdWInLFxuICAgICAgfSk7XG4gICAgICBtb2NrQmFzZUNvaW4ua2V5Y2hhaW5zLnJldHVybnMoe1xuICAgICAgICBnZXQ6IGtleWNoYWluc0dldFN0dWIsXG4gICAgICAgIGdldEtleXNGb3JTaWduaW5nOiBzaW5vbi5zdHViKCkucmVzb2x2ZXMoW2NoaWxkS2V5Y2hhaW5dKSxcbiAgICAgIH0pO1xuICAgICAgbW9ja0Jhc2VDb2luLnByZXNpZ25UcmFuc2FjdGlvbiA9IHNpbm9uLnN0dWIoKS5jYWxsc0Zha2UoYXN5bmMgKHBhcmFtczogYW55KSA9PiBwYXJhbXMpO1xuICAgICAgbW9ja0Jhc2VDb2luLmdldE1QQ0FsZ29yaXRobSA9IHNpbm9uLnN0dWIoKS5yZXR1cm5zKCdlZGRzYScpO1xuICAgICAgY29uc3Qgc2lnblRzc1N0dWIgPSBzaW5vbi5zdHViKFdhbGxldC5wcm90b3R5cGUgYXMgYW55LCAnc2lnblRyYW5zYWN0aW9uVHNzJykucmVzb2x2ZXMoeyB0eEhleDogJ3NpZ25lZCcgfSk7XG5cbiAgICAgIGF3YWl0IHdhbGxldFxuICAgICAgICAuc2lnblRyYW5zYWN0aW9uKHtcbiAgICAgICAgICB3YWxsZXRQYXNzcGhyYXNlOiBwYXNzcGhyYXNlLFxuICAgICAgICAgIHR4UHJlYnVpbGQ6IHsgdHhSZXF1ZXN0SWQ6ICd0eC1yZXEnIH0sXG4gICAgICAgIH0pXG4gICAgICAgIC5zaG91bGQuYmUucmVqZWN0ZWRXaXRoKFNhZmVPd25lclNpZ25pbmdOb3RJbXBsZW1lbnRlZEVycm9yKTtcbiAgICAgIHNpZ25Uc3NTdHViLm5vdENhbGxlZC5zaG91bGQuYmUudHJ1ZSgpO1xuICAgIH0pO1xuICB9KTtcbn0pO1xuXG5kZXNjcmliZSgnV0NOLTEyMDAgcmVjcmVhdGVBbmRTaWduVFNTVHJhbnNhY3Rpb24gc2FmZSBwYXRoJywgZnVuY3Rpb24gKCkge1xuICBhZnRlckVhY2goZnVuY3Rpb24gKCkge1xuICAgIHNpbm9uLnJlc3RvcmUoKTtcbiAgfSk7XG5cbiAgZnVuY3Rpb24gbWFrZVBlbmRpbmdBcHByb3ZhbCh3YWxsZXQ6IGFueSkge1xuICAgIGNvbnN0IHJlY3JlYXRlVHhSZXF1ZXN0ID0gc2lub24uc3R1YigpLnJlc29sdmVzKHtcbiAgICAgIGFwaVZlcnNpb246ICdsaXRlJyxcbiAgICAgIHR4UmVxdWVzdElkOiAndHgtcmVxJyxcbiAgICAgIHVuc2lnbmVkVHhzOiBbeyBzZXJpYWxpemVkVHhIZXg6ICdkZWFkYmVlZicsIHNpZ25hYmxlSGV4OiAnYWInLCBkZXJpdmF0aW9uUGF0aDogJ20vMCcgfV0sXG4gICAgICB0cmFuc2FjdGlvbnM6IFtdLFxuICAgIH0pO1xuICAgIGNvbnN0IHBlbmRpbmdBcHByb3ZhbCA9IG5ldyBQZW5kaW5nQXBwcm92YWwoXG4gICAgICB7fSBhcyBhbnksXG4gICAgICB3YWxsZXQuYmFzZUNvaW4sXG4gICAgICB7XG4gICAgICAgIGlkOiAncGEwJyxcbiAgICAgICAgdHhSZXF1ZXN0SWQ6ICd0eC1yZXEnLFxuICAgICAgICBpbmZvOiB7IHR5cGU6ICd0cmFuc2FjdGlvblJlcXVlc3QnLCB0cmFuc2FjdGlvblJlcXVlc3Q6IHsgcmVjaXBpZW50czogW10sIGNvaW5TcGVjaWZpYzoge30gfSB9LFxuICAgICAgICBzdGF0ZTogJ3BlbmRpbmcnLFxuICAgICAgICBjcmVhdG9yOiAndGVzdCcsXG4gICAgICB9IGFzIGFueSxcbiAgICAgIHdhbGxldFxuICAgICk7XG4gICAgKHBlbmRpbmdBcHByb3ZhbCBhcyBhbnkpLnRzc1V0aWxzID0geyByZWNyZWF0ZVR4UmVxdWVzdCB9O1xuICAgIHJldHVybiB7IHBlbmRpbmdBcHByb3ZhbCwgcmVjcmVhdGVUeFJlcXVlc3QgfTtcbiAgfVxuXG4gIGl0KCd1c2VzIGdldFVzZXJQcnYgZm9yIHRoZSBzYWZlIG93bmVyIChtaW50ZXIpIGluc3RlYWQgb2YgZ2V0UHJ2JywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IGNoaWxkVXNlcktleWNoYWluID0ge1xuICAgICAgaWQ6ICdjaGlsZC1rZXknLFxuICAgICAgcHViOiAnY2hpbGQtcHViJyxcbiAgICAgIHR5cGU6ICd0c3MnLFxuICAgICAgcGFyZW50OiAncm9vdC1rZXktaWQnLFxuICAgICAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZDogJ3NlZWQnLFxuICAgIH07XG4gICAgY29uc3QgZ2V0S2V5c0ZvclNpZ25pbmcgPSBzaW5vbi5zdHViKCkucmVzb2x2ZXMoW2NoaWxkVXNlcktleWNoYWluXSk7XG4gICAgY29uc3QgZ2V0VXNlclBydiA9IHNpbm9uLnN0dWIoKS5yZXNvbHZlcygnZGVjcnlwdGVkUHJ2Jyk7XG4gICAgY29uc3QgZ2V0UHJ2ID0gc2lub24uc3R1YigpLnJlc29sdmVzKCdzaG91bGQtbm90LWJlLWNhbGxlZCcpO1xuICAgIGNvbnN0IHdhbGxldDogYW55ID0ge1xuICAgICAgc2FmZUlkOiAoKSA9PiAnc2FmZS1pZC0xJyxcbiAgICAgIGdldFVzZXJQcnYsXG4gICAgICBnZXRQcnYsXG4gICAgICBiYXNlQ29pbjoge1xuICAgICAgICBrZXljaGFpbnM6ICgpID0+ICh7IGdldEtleXNGb3JTaWduaW5nIH0pLFxuICAgICAgICBzdXBwb3J0c1RzczogKCkgPT4gdHJ1ZSxcbiAgICAgICAgZ2V0TVBDQWxnb3JpdGhtOiAoKSA9PiAnZWRkc2EnLFxuICAgICAgfSxcbiAgICAgIG11bHRpc2lnVHlwZVZlcnNpb246ICgpID0+IHVuZGVmaW5lZCxcbiAgICB9O1xuICAgIGNvbnN0IHsgcGVuZGluZ0FwcHJvdmFsLCByZWNyZWF0ZVR4UmVxdWVzdCB9ID0gbWFrZVBlbmRpbmdBcHByb3ZhbCh3YWxsZXQpO1xuXG4gICAgY29uc3QgcmVzdWx0ID0gYXdhaXQgcGVuZGluZ0FwcHJvdmFsLnJlY3JlYXRlQW5kU2lnblRTU1RyYW5zYWN0aW9uKFxuICAgICAgeyB3YWxsZXRQYXNzcGhyYXNlOiAncGFzcycgfSxcbiAgICAgIG5ldyBSZXF1ZXN0VHJhY2VyKClcbiAgICApO1xuXG4gICAgcmVzdWx0LnNob3VsZC5lcWwoeyB0eEhleDogJ2RlYWRiZWVmJyB9KTtcbiAgICBnZXRQcnYubm90Q2FsbGVkLnNob3VsZC5iZS50cnVlKCk7XG4gICAgZ2V0S2V5c0ZvclNpZ25pbmcuY2FsbGVkT25jZS5zaG91bGQuYmUudHJ1ZSgpO1xuICAgIGdldFVzZXJQcnZcbiAgICAgIC5jYWxsZWRPbmNlV2l0aEV4YWN0bHkoe1xuICAgICAgICBrZXljaGFpbjogY2hpbGRVc2VyS2V5Y2hhaW4sXG4gICAgICAgIHdhbGxldFBhc3NwaHJhc2U6ICdwYXNzJyxcbiAgICAgIH0pXG4gICAgICAuc2hvdWxkLmJlLnRydWUoKTtcbiAgICByZWNyZWF0ZVR4UmVxdWVzdC5jYWxsZWRPbmNlLnNob3VsZC5iZS50cnVlKCk7XG4gIH0pO1xuXG4gIGl0KCd1c2VzIGdldFBydiBmb3IgYSBzYWZlIHdhbGxldCBzaGFyZWUgKGNoaWxkIGVuY3J5cHRlZFBydiBhbHJlYWR5IHByZXNlbnQpJywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IGNoaWxkVXNlcktleWNoYWluID0ge1xuICAgICAgaWQ6ICdjaGlsZC1rZXknLFxuICAgICAgcHViOiAnY2hpbGQtcHViJyxcbiAgICAgIHR5cGU6ICd0c3MnLFxuICAgICAgcGFyZW50OiAncm9vdC1rZXktaWQnLFxuICAgICAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZDogJ3NlZWQnLFxuICAgICAgZW5jcnlwdGVkUHJ2OiAnZW5jOnNoYXJlZS1wcnYnLFxuICAgIH07XG4gICAgY29uc3QgZ2V0S2V5c0ZvclNpZ25pbmcgPSBzaW5vbi5zdHViKCkucmVzb2x2ZXMoW2NoaWxkVXNlcktleWNoYWluXSk7XG4gICAgY29uc3QgZ2V0VXNlclBydiA9IHNpbm9uLnN0dWIoKS5yZXNvbHZlcygnc2hvdWxkLW5vdC1iZS1jYWxsZWQnKTtcbiAgICBjb25zdCBnZXRQcnYgPSBzaW5vbi5zdHViKCkucmVzb2x2ZXMoJ3NoYXJlZS1wcnYnKTtcbiAgICBjb25zdCB3YWxsZXQ6IGFueSA9IHtcbiAgICAgIHNhZmVJZDogKCkgPT4gJ3NhZmUtaWQtMScsXG4gICAgICBnZXRVc2VyUHJ2LFxuICAgICAgZ2V0UHJ2LFxuICAgICAgYmFzZUNvaW46IHtcbiAgICAgICAga2V5Y2hhaW5zOiAoKSA9PiAoeyBnZXRLZXlzRm9yU2lnbmluZyB9KSxcbiAgICAgICAgc3VwcG9ydHNUc3M6ICgpID0+IHRydWUsXG4gICAgICAgIGdldE1QQ0FsZ29yaXRobTogKCkgPT4gJ2VkZHNhJyxcbiAgICAgIH0sXG4gICAgICBtdWx0aXNpZ1R5cGVWZXJzaW9uOiAoKSA9PiB1bmRlZmluZWQsXG4gICAgfTtcbiAgICBjb25zdCB7IHBlbmRpbmdBcHByb3ZhbCwgcmVjcmVhdGVUeFJlcXVlc3QgfSA9IG1ha2VQZW5kaW5nQXBwcm92YWwod2FsbGV0KTtcblxuICAgIGNvbnN0IHJlc3VsdCA9IGF3YWl0IHBlbmRpbmdBcHByb3ZhbC5yZWNyZWF0ZUFuZFNpZ25UU1NUcmFuc2FjdGlvbihcbiAgICAgIHsgd2FsbGV0UGFzc3BocmFzZTogJ3Bhc3MnIH0sXG4gICAgICBuZXcgUmVxdWVzdFRyYWNlcigpXG4gICAgKTtcblxuICAgIHJlc3VsdC5zaG91bGQuZXFsKHsgdHhIZXg6ICdkZWFkYmVlZicgfSk7XG4gICAgZ2V0VXNlclBydi5ub3RDYWxsZWQuc2hvdWxkLmJlLnRydWUoKTtcbiAgICBnZXRQcnYuY2FsbGVkT25jZVdpdGhFeGFjdGx5KHsgd2FsbGV0UGFzc3BocmFzZTogJ3Bhc3MnIH0pLnNob3VsZC5iZS50cnVlKCk7XG4gICAgcmVjcmVhdGVUeFJlcXVlc3QuY2FsbGVkT25jZS5zaG91bGQuYmUudHJ1ZSgpO1xuICB9KTtcbn0pO1xuIl19
|