@bsv/sdk 1.2.20 → 1.2.22

package/dist/esm/src/auth/Peer.js

@@ -0,0 +1,533 @@
+import { SessionManager } from './SessionManager.js';
+import { createNonce, verifyNonce, getVerifiableCertificates, validateCertificates } from './utils/index.js';
+import { Random, Utils } from '../../mod.js';
+const AUTH_VERSION = '0.1';
+/**
+ * Represents a peer capable of performing mutual authentication.
+ * Manages sessions, handles authentication handshakes, certificate requests and responses,
+ * and sending and receiving general messages over a transport layer.
+ */
+export class Peer {
+    sessionManager;
+    transport;
+    wallet;
+    certificatesToRequest;
+    onGeneralMessageReceivedCallbacks = new Map();
+    onCertificatesReceivedCallbacks = new Map();
+    onCertificateRequestReceivedCallbacks = new Map();
+    onInitialResponseReceivedCallbacks = new Map();
+    // Single shared counter for all callback types
+    callbackIdCounter = 0;
+    /**
+     * Creates a new Peer instance
+     *
+     * @param {Wallet} wallet - The wallet instance used for cryptographic operations.
+     * @param {Transport} transport - The transport mechanism used for sending and receiving messages.
+     * @param {RequestedCertificateSet} [certificatesToRequest] - Optional set of certificates to request from a peer during the initial handshake.
+     * @param {SessionManager} [sessionManager] - Optional SessionManager to be used for managing peer sessions.
+     */
+    constructor(wallet, transport, certificatesToRequest, sessionManager) {
+        this.wallet = wallet;
+        this.transport = transport;
+        this.certificatesToRequest = certificatesToRequest ?? { certifiers: [], types: {} };
+        this.transport.onData(this.handleIncomingMessage.bind(this));
+        this.sessionManager = sessionManager || new SessionManager();
+    }
+    /**
+     * Sends a general message to a peer, and initiates a handshake if necessary.
+     *
+     * @param {number[]} message - The message payload to send.
+     * @param {string} [identityKey] - The identity public key of the peer. If not provided, a handshake will be initiated.
+     * @returns {Promise<void>}
+     * @throws Will throw an error if the message fails to send.
+     */
+    async toPeer(message, identityKey, maxWaitTime) {
+        const peerSession = await this.getAuthenticatedSession(identityKey, maxWaitTime);
+        // Prepare the general message
+        const requestNonce = Utils.toBase64(Random(32));
+        const { signature } = await this.wallet.createSignature({
+            data: message,
+            protocolID: [2, 'auth message signature'],
+            keyID: `${requestNonce} ${peerSession.peerNonce}`,
+            counterparty: peerSession.peerIdentityKey
+        });
+        const generalMessage = {
+            version: AUTH_VERSION,
+            messageType: 'general',
+            identityKey: (await this.wallet.getPublicKey({ identityKey: true })).publicKey,
+            nonce: requestNonce,
+            yourNonce: peerSession.peerNonce,
+            payload: message,
+            signature
+        };
+        try {
+            await this.transport.send(generalMessage);
+        }
+        catch (error) {
+            const e = new Error(`Failed to send message to peer ${peerSession.peerIdentityKey}: ${error.message}`);
+            e.stack = error.stack;
+            throw e;
+        }
+    }
+    /**
+    * Sends a request for certificates to a peer.
+    * This method allows a peer to dynamically request specific certificates after
+    * an initial handshake or message has been exchanged.
+    *
+    * @param {RequestedCertificateSet} certificatesToRequest - Specifies the certifiers and types of certificates required from the peer.
+    * @param {string} [identityKey] - The identity public key of the peer. If not provided, the current session identity is used.
+    * @param {number} [maxWaitTime=10000] - Maximum time in milliseconds to wait for the peer session to be authenticated.
+    * @returns {Promise<void>} Resolves if the certificate request message is successfully sent.
+    * @throws Will throw an error if the peer session is not authenticated or if sending the request fails.
+    */
+    async requestCertificates(certificatesToRequest, identityKey, maxWaitTime = 10000) {
+        const peerSession = await this.getAuthenticatedSession(identityKey, maxWaitTime);
+        // Prepare the general message
+        const requestNonce = Utils.toBase64(Random(32));
+        const { signature } = await this.wallet.createSignature({
+            data: Utils.toArray(JSON.stringify(certificatesToRequest), 'utf8'),
+            protocolID: [2, 'auth message signature'],
+            keyID: `${requestNonce} ${peerSession.peerNonce}`,
+            counterparty: peerSession.peerIdentityKey
+        });
+        const certRequestMessage = {
+            version: AUTH_VERSION,
+            messageType: 'certificateRequest',
+            identityKey: (await this.wallet.getPublicKey({ identityKey: true })).publicKey,
+            nonce: requestNonce,
+            initialNonce: peerSession.sessionNonce,
+            yourNonce: peerSession.peerNonce,
+            requestedCertificates: certificatesToRequest,
+            signature
+        };
+        try {
+            await this.transport.send(certRequestMessage);
+        }
+        catch (error) {
+            throw new Error(`Failed to send certificate request message to peer ${peerSession.peerIdentityKey}: ${error.message}`);
+        }
+    }
+    /**
+     * Retrieves an authenticated session for a given peer identity. If no session exists
+     * or the session is not authenticated, initiates a handshake to create or authenticate the session.
+     *
+     * @param {string} [identityKey] - The identity public key of the peer. If provided, it attempts
+     * to retrieve an existing session associated with this identity.
+     * @param {number} [maxWaitTime] - The maximum time in milliseconds to wait for the handshake
+     * to complete if a new session is required. Defaults to a pre-defined timeout if not specified.
+     * @returns {Promise<PeerSession>} - A promise that resolves with an authenticated `PeerSession`.
+     * @throws {Error} - Throws an error if the transport is not connected or if the handshake fails.
+     */
+    async getAuthenticatedSession(identityKey, maxWaitTime) {
+        if (!this.transport) {
+            throw new Error('Peer transport is not connected!');
+        }
+        let peerSession = identityKey ? this.sessionManager.getSession(identityKey) : undefined;
+        if (!peerSession || !peerSession.isAuthenticated) {
+            const sessionNonce = await this.initiateHandshake(identityKey, maxWaitTime);
+            peerSession = this.sessionManager.getSession(identityKey || sessionNonce);
+            if (!peerSession.isAuthenticated) {
+                throw new Error('Unable to establish mutual authentication with peer!');
+            }
+        }
+        return peerSession;
+    }
+    /**
+     * Registers a callback to listen for general messages from peers.
+     *
+     * @param {(senderPublicKey: string, payload: number[]) => void} callback - The function to call when a general message is received.
+     * @returns {number} The ID of the callback listener.
+     */
+    listenForGeneralMessages(callback) {
+        const callbackID = this.callbackIdCounter++;
+        this.onGeneralMessageReceivedCallbacks.set(callbackID, callback);
+        return callbackID;
+    }
+    /**
+     * Removes a general message listener.
+     *
+     * @param {number} callbackID - The ID of the callback to remove.
+     */
+    stopListeningForGeneralMessages(callbackID) {
+        this.onGeneralMessageReceivedCallbacks.delete(callbackID);
+    }
+    /**
+     * Registers a callback to listen for certificates received from peers.
+     *
+     * @param {(certs: VerifiableCertificate[]) => void} callback - The function to call when certificates are received.
+     * @returns {number} The ID of the callback listener.
+     */
+    listenForCertificatesReceived(callback) {
+        const callbackID = this.callbackIdCounter++;
+        this.onCertificatesReceivedCallbacks.set(callbackID, callback);
+        return callbackID;
+    }
+    /**
+     * Cancels and unsubscribes a certificatesReceived listener.
+     *
+     * @param {number} callbackID - The ID of the certificates received callback to cancel.
+     */
+    stopListeningForCertificatesReceived(callbackID) {
+        this.onCertificatesReceivedCallbacks.delete(callbackID);
+    }
+    /**
+     * Registers a callback to listen for certificates requested from peers.
+     *
+     * @param {(requestedCertificates: RequestedCertificateSet) => void} callback - The function to call when a certificate request is received
+     * @returns {number} The ID of the callback listener.
+     */
+    listenForCertificatesRequested(callback) {
+        const callbackID = this.callbackIdCounter++;
+        this.onCertificateRequestReceivedCallbacks.set(callbackID, callback);
+        return callbackID;
+    }
+    /**
+     * Cancels and unsubscribes a certificatesRequested listener.
+     *
+     * @param {number} callbackID - The ID of the requested certificates callback to cancel.
+     */
+    stopListeningForCertificatesRequested(callbackID) {
+        this.onCertificateRequestReceivedCallbacks.delete(callbackID);
+    }
+    /**
+     * Initiates the mutual authentication handshake with a peer.
+     *
+     * @private
+     * @param {string} [identityKey] - The identity public key of the peer.
+     * @returns {Promise<string>} A promise that resolves to the session nonce.
+     */
+    async initiateHandshake(identityKey, maxWaitTime = 10000) {
+        const sessionNonce = await createNonce(this.wallet); // Initial request nonce
+        this.sessionManager.addSession({
+            isAuthenticated: false,
+            sessionNonce,
+            peerIdentityKey: identityKey
+        });
+        const initialRequest = {
+            version: AUTH_VERSION,
+            messageType: 'initialRequest',
+            identityKey: (await this.wallet.getPublicKey({ identityKey: true })).publicKey,
+            initialNonce: sessionNonce,
+            requestedCertificates: this.certificatesToRequest
+        };
+        await this.transport.send(initialRequest);
+        return await this.waitForInitialResponse(sessionNonce, maxWaitTime);
+    }
+    /**
+     * Waits for the initial response from the peer after sending an initial handshake request message.
+     *
+     * @param {string} sessionNonce - The session nonce created in the initial request.
+     * @returns {Promise<string>} A promise that resolves with the session nonce when the initial response is received.
+     */
+    async waitForInitialResponse(sessionNonce, maxWaitTime = 10000) {
+        return await new Promise((resolve, reject) => {
+            const callbackID = this.listenForInitialResponse(sessionNonce, (sessionNonce) => {
+                clearTimeout(timeoutHandle);
+                this.stopListeningForInitialResponses(callbackID);
+                resolve(sessionNonce);
+            });
+            const timeoutHandle = setTimeout(() => {
+                this.stopListeningForInitialResponses(callbackID);
+                reject(new Error('Initial response timed out.'));
+            }, maxWaitTime);
+        });
+    }
+    /**
+     * Adds a listener for an initial response message matching a specific initial nonce.
+     *
+     * @private
+     * @param {string} sessionNonce - The session nonce to match.
+     * @param {(sessionNonce: string) => void} callback - The callback to invoke when the initial response is received.
+     * @returns {number} The ID of the callback listener.
+     */
+    listenForInitialResponse(sessionNonce, callback) {
+        const callbackID = this.callbackIdCounter++;
+        this.onInitialResponseReceivedCallbacks.set(callbackID, { callback, sessionNonce });
+        return callbackID;
+    }
+    /**
+     * Removes a listener for initial responses.
+     *
+     * @private
+     * @param {number} callbackID - The ID of the callback to remove.
+     */
+    stopListeningForInitialResponses(callbackID) {
+        this.onInitialResponseReceivedCallbacks.delete(callbackID);
+    }
+    /**
+     * Handles incoming messages from the transport.
+     *
+     * @param {AuthMessage} message - The incoming message to process.
+     * @returns {Promise<void>}
+     */
+    async handleIncomingMessage(message) {
+        if (!message.version || message.version !== AUTH_VERSION) {
+            console.error(`Invalid message auth version! Received: ${message.version}, expected: ${AUTH_VERSION}`);
+            return;
+        }
+        switch (message.messageType) {
+            case 'initialRequest':
+                await this.processInitialRequest(message);
+                break;
+            case 'initialResponse':
+                await this.processInitialResponse(message);
+                break;
+            case 'certificateRequest':
+                await this.processCertificateRequest(message);
+                break;
+            case 'certificateResponse':
+                await this.processCertificateResponse(message);
+                break;
+            case 'general':
+                await this.processGeneralMessage(message);
+                break;
+            default:
+                console.error(`Unknown message type of ${message.messageType} from ${message.identityKey}`);
+        }
+    }
+    /**
+     * Processes an initial request message from a peer.
+     *
+     * @param {AuthMessage} message - The incoming initial request message.
+     * @returns {Promise<void>}
+     */
+    async processInitialRequest(message) {
+        if (!message.identityKey || !message.initialNonce) {
+            throw new Error('Missing required fields in initialResponse message.');
+        }
+        // Create an initial session nonce
+        const sessionNonce = await createNonce(this.wallet);
+        this.sessionManager.addSession({
+            isAuthenticated: true,
+            sessionNonce,
+            peerNonce: message.initialNonce,
+            peerIdentityKey: message.identityKey
+        });
+        // Handle initial certificate requests
+        let certificatesToInclude;
+        if (message.requestedCertificates?.certifiers?.length > 0) {
+            if (this.onCertificateRequestReceivedCallbacks.size > 0) {
+                // The application wants to handle certificate requests
+                this.onCertificateRequestReceivedCallbacks.forEach(callback => {
+                    callback(message.identityKey, message.requestedCertificates);
+                });
+            }
+            else {
+                // Attempt to find exact matching certificates to return automatically to save round trips
+                certificatesToInclude = await getVerifiableCertificates(this.wallet, message.requestedCertificates, message.identityKey);
+            }
+        }
+        // Create the signature for the message
+        const { signature } = await this.wallet.createSignature({
+            data: Utils.toArray(message.initialNonce + sessionNonce, 'base64'),
+            protocolID: [2, 'auth message signature'],
+            keyID: `${message.initialNonce} ${sessionNonce}`,
+            counterparty: message.identityKey
+        });
+        const initialResponseMessage = {
+            version: AUTH_VERSION,
+            messageType: 'initialResponse',
+            identityKey: (await this.wallet.getPublicKey({ identityKey: true })).publicKey,
+            initialNonce: sessionNonce,
+            yourNonce: message.initialNonce,
+            certificates: certificatesToInclude,
+            requestedCertificates: this.certificatesToRequest,
+            signature
+        };
+        await this.transport.send(initialResponseMessage);
+    }
+    /**
+     * Processes an initial response message from a peer.
+     *
+     * @private
+     * @param {AuthMessage} message - The incoming initial response message.
+     * @returns {Promise<void>}
+     * @throws Will throw an error if nonce verification or signature verification fails.
+     */
+    async processInitialResponse(message) {
+        const validNonce = await verifyNonce(message.yourNonce, this.wallet);
+        if (!validNonce) {
+            throw new Error(`Initial response nonce verification failed from peer: ${message.identityKey}`);
+        }
+        const peerSession = this.sessionManager.getSession(message.yourNonce);
+        if (!peerSession) {
+            throw new Error(`Peer session not found for peer: ${message.identityKey}`);
+        }
+        // Validate message signature
+        const { valid } = await this.wallet.verifySignature({
+            data: Utils.toArray(peerSession.sessionNonce + message.initialNonce, 'base64'),
+            signature: message.signature,
+            protocolID: [2, 'auth message signature'],
+            keyID: `${peerSession.sessionNonce} ${message.initialNonce}`,
+            counterparty: message.identityKey
+        });
+        if (!valid) {
+            throw new Error(`Unable to verify initial response signature for peer: ${message.identityKey}`);
+        }
+        // After signature and nonce verification is complete, the peer is considered authenticated
+        // Save the peer's identity key and initial nonce
+        // This allows future requests to be linked to the same session
+        peerSession.peerNonce = message.initialNonce;
+        peerSession.peerIdentityKey = message.identityKey;
+        peerSession.isAuthenticated = true;
+        // Run update to ensure lookup is available by both peerIdentityKey and sessionNonce
+        this.sessionManager.updateSession(peerSession);
+        // Process certificates received
+        if (this.certificatesToRequest?.certifiers?.length && message.certificates?.length) {
+            await validateCertificates(this.wallet, message, this.certificatesToRequest);
+            this.onCertificatesReceivedCallbacks.forEach(callback => callback(message.identityKey, message.certificates));
+        }
+        this.onInitialResponseReceivedCallbacks.forEach((entry) => {
+            if (entry && entry.sessionNonce === peerSession.sessionNonce) {
+                entry.callback(peerSession.sessionNonce);
+            }
+        });
+        // Check if the peer requested certificates from us
+        if (message.requestedCertificates?.certifiers?.length > 0) {
+            if (this.onCertificateRequestReceivedCallbacks.size > 0) {
+                // Application wants to handle certificate requests
+                this.onCertificateRequestReceivedCallbacks.forEach(callback => {
+                    callback(message.identityKey, message.requestedCertificates);
+                });
+            }
+            else {
+                // Attempt to find exact matching certificates to respond automatically and save round trips
+                const verifiableCertificates = await getVerifiableCertificates(this.wallet, message.requestedCertificates, message.identityKey);
+                await this.sendCertificateResponse(message.identityKey, verifiableCertificates);
+            }
+        }
+    }
+    /**
+     * Processes an incoming certificate request message from a peer.
+     * Verifies the nonce and signature to ensure the authenticity of the request,
+     * then initiates a response with any requested certificates that are available.
+     *
+     * @param {AuthMessage} message - The certificate request message received from the peer.
+     * @throws {Error} Throws an error if nonce verification fails, or the message signature is invalid.
+     */
+    async processCertificateRequest(message) {
+        const validNonce = await verifyNonce(message.yourNonce, this.wallet);
+        if (!validNonce) {
+            throw new Error(`Unable to verify nonce for certificate request message from: ${message.identityKey}`);
+        }
+        const peerSession = this.sessionManager.getSession(message.yourNonce);
+        const { valid } = await this.wallet.verifySignature({
+            data: Utils.toArray(JSON.stringify(message.requestedCertificates), 'utf8'),
+            signature: message.signature,
+            protocolID: [2, 'auth message signature'],
+            keyID: `${message.nonce} ${peerSession.sessionNonce}`,
+            counterparty: peerSession.peerIdentityKey
+        });
+        if (!valid) {
+            throw new Error(`Invalid signature in certificate request message from ${peerSession.peerIdentityKey}`);
+        }
+        if (message.requestedCertificates?.certifiers?.length > 0) {
+            if (this.onCertificateRequestReceivedCallbacks.size > 0) {
+                // Application wants to handle certificate requests
+                this.onCertificateRequestReceivedCallbacks.forEach(callback => {
+                    callback(message.identityKey, message.requestedCertificates);
+                });
+            }
+            else {
+                // Attempt to find exact matching certificates to respond automatically and save round trips
+                const verifiableCertificates = await getVerifiableCertificates(this.wallet, message.requestedCertificates, message.identityKey);
+                await this.sendCertificateResponse(message.identityKey, verifiableCertificates);
+            }
+        }
+    }
+    /**
+     * Sends a certificate response message containing the specified certificates to a peer.
+     *
+     * @param {string} verifierIdentityKey - The identity key of the peer requesting the certificates.
+     * @param {VerifiableCertificate[]} certificates - The list of certificates to be included in the response.
+     * @returns {Promise<void>} - A promise that resolves once the certificate response has been sent successfully.
+     *
+     * @throws {Error} Throws an error if the peer session could not be authenticated or if message signing fails.
+     */
+    async sendCertificateResponse(verifierIdentityKey, certificates) {
+        const peerSession = await this.getAuthenticatedSession(verifierIdentityKey);
+        const requestNonce = Utils.toBase64(Random(32));
+        const { signature } = await this.wallet.createSignature({
+            data: Utils.toArray(JSON.stringify(certificates), 'utf8'),
+            protocolID: [2, 'auth message signature'],
+            keyID: `${requestNonce} ${peerSession.peerNonce}`,
+            counterparty: peerSession.peerIdentityKey
+        });
+        const certificateResponse = {
+            version: AUTH_VERSION,
+            messageType: 'certificateResponse',
+            identityKey: (await this.wallet.getPublicKey({ identityKey: true })).publicKey,
+            nonce: requestNonce,
+            initialNonce: peerSession.sessionNonce,
+            yourNonce: peerSession.peerNonce,
+            certificates,
+            signature
+        };
+        try {
+            await this.transport.send(certificateResponse);
+        }
+        catch (error) {
+            throw new Error(`Failed to send certificate response message to peer ${peerSession.peerIdentityKey}: ${error.message}`);
+        }
+    }
+    /**
+     * Processes a certificate response message from a peer.
+     *
+     * @private
+     * @param {AuthMessage} message - The incoming certificate response message.
+     * @returns {Promise<void>}
+     * @throws Will throw an error if nonce verification or signature verification fails.
+     */
+    async processCertificateResponse(message) {
+        const validNonce = await verifyNonce(message.yourNonce, this.wallet);
+        if (!validNonce) {
+            throw new Error(`Unable to verify nonce for certificate response from: ${message.identityKey}!`);
+        }
+        const peerSession = this.sessionManager.getSession(message.yourNonce);
+        // Validate message signature
+        const { valid } = await this.wallet.verifySignature({
+            data: Utils.toArray(JSON.stringify(message.certificates), 'utf8'),
+            signature: message.signature,
+            protocolID: [2, 'auth message signature'],
+            keyID: `${message.nonce} ${peerSession.sessionNonce}`,
+            counterparty: message.identityKey
+        });
+        if (!valid) {
+            throw new Error(`Unable to verify certificate response signature for peer: ${message.identityKey}`);
+        }
+        // Process and verify any certificates received
+        await validateCertificates(this.wallet, message, message.requestedCertificates);
+        this.onCertificatesReceivedCallbacks.forEach(callback => {
+            callback(message.identityKey, message.certificates);
+        });
+    }
+    /**
+     * Processes a general message from a peer.
+     *
+     * @private
+     * @param {AuthMessage} message - The incoming general message.
+     * @returns {Promise<void>}
+     * @throws Will throw an error if nonce verification or signature verification fails.
+     */
+    async processGeneralMessage(message) {
+        const validNonce = await verifyNonce(message.yourNonce, this.wallet);
+        if (!validNonce) {
+            throw new Error(`Unable to verify nonce for general message from: ${message.identityKey}`);
+        }
+        const peerSession = this.sessionManager.getSession(message.yourNonce);
+        const { valid } = await this.wallet.verifySignature({
+            data: message.payload,
+            signature: message.signature,
+            protocolID: [2, 'auth message signature'],
+            keyID: `${message.nonce} ${peerSession.sessionNonce}`,
+            counterparty: peerSession.peerIdentityKey
+        });
+        if (!valid) {
+            throw new Error(`Invalid signature in generalMessage from ${peerSession.peerIdentityKey}`);
+        }
+        this.onGeneralMessageReceivedCallbacks.forEach(callback => {
+            callback(message.identityKey, message.payload);
+        });
+    }
+}
+//# sourceMappingURL=Peer.js.map

package/dist/esm/src/auth/Peer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Peer.js","sourceRoot":"","sources":["../../../../src/auth/Peer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAG5G,OAAO,EAAE,MAAM,EAAE,KAAK,EAAU,MAAM,cAAc,CAAA;AAEpD,MAAM,YAAY,GAAG,KAAK,CAAA;AAE1B;;;;GAIG;AACH,MAAM,OAAO,IAAI;IACR,cAAc,CAAgB;IACpB,SAAS,CAAW;IACpB,MAAM,CAAQ;IAC/B,qBAAqB,CAAyB;IAC7B,iCAAiC,GAAsE,IAAI,GAAG,EAAE,CAAA;IAChH,+BAA+B,GAAmF,IAAI,GAAG,EAAE,CAAA;IAC3H,qCAAqC,GAAmG,IAAI,GAAG,EAAE,CAAA;IACjJ,kCAAkC,GAAsF,IAAI,GAAG,EAAE,CAAA;IAElJ,+CAA+C;IACvC,iBAAiB,GAAW,CAAC,CAAA;IAErC;;;;;;;OAOG;IACH,YACE,MAAc,EACd,SAAoB,EACpB,qBAA+C,EAC/C,cAA+B;QAE/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACnF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAC5D,IAAI,CAAC,cAAc,GAAG,cAAc,IAAI,IAAI,cAAc,EAAE,CAAA;IAC9D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAE,OAAiB,EAAE,WAAoB,EAAE,WAAoB;QACzE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;QAEhF,8BAA8B;QAC9B,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YACtD,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC;YACzC,KAAK,EAAE,GAAG,YAAY,IAAI,WAAW,CAAC,SAAS,EAAE;YACjD,YAAY,EAAE,WAAW,CAAC,eAAe;SAC1C,CAAC,CAAA;QAEF,MAAM,cAAc,GAAgB;YAClC,OAAO,EAAE,YAAY;YACrB,WAAW,EAAE,SAAS;YACtB,WAAW,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9E,KAAK,EAAE,YAAY;YACnB,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,OAAO;YAChB,SAAS;SACV,CAAA;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,kCAAkC,WAAW,CAAC,eAAe,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YACtG,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YACrB,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED;;;;;;;;;;MAUE;IACF,KAAK,CAAC,mBAAmB,CAAE,qBAA8C,EAAE,WAAoB,EAAE,WAAW,GAAG,KAAK;QAClH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;QAEhF,8BAA8B;QAC9B,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YACtD,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;YAClE,UAAU,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC;YACzC,KAAK,EAAE,GAAG,YAAY,IAAI,WAAW,CAAC,SAAS,EAAE;YACjD,YAAY,EAAE,WAAW,CAAC,eAAe;SAC1C,CAAC,CAAA;QAEF,MAAM,kBAAkB,GAAgB;YACtC,OAAO,EAAE,YAAY;YACrB,WAAW,EAAE,oBAAoB;YACjC,WAAW,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9E,KAAK,EAAE,YAAY;YACnB,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,qBAAqB,EAAE,qBAAqB;YAC5C,SAAS;SACV,CAAA;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sDAAsD,WAAW,CAAC,eAAe,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACxH,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,uBAAuB,CAAE,WAAoB,EAAE,WAAoB;QACvE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QAED,IAAI,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACvF,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YAC3E,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,WAAW,IAAI,YAAY,CAAC,CAAA;YACzE,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;YACzE,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAA;IACpB,CAAC;IAED;;;;;OAKG;IACH,wBAAwB,CAAE,QAA8D;QACtF,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAC3C,IAAI,CAAC,iCAAiC,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QAChE,OAAO,UAAU,CAAA;IACnB,CAAC;IAED;;;;OAIG;IACH,+BAA+B,CAAE,UAAkB;QACjD,IAAI,CAAC,iCAAiC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC3D,CAAC;IAED;;;;;OAKG;IACH,6BAA6B,CAAE,QAA2E;QACxG,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAC3C,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QAC9D,OAAO,UAAU,CAAA;IACnB,CAAC;IAED;;;;OAIG;IACH,oCAAoC,CAAE,UAAkB;QACtD,IAAI,CAAC,+BAA+B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACzD,CAAC;IAED;;;;;OAKG;IACH,8BAA8B,CAAE,QAA2F;QACzH,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAC3C,IAAI,CAAC,qCAAqC,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACpE,OAAO,UAAU,CAAA;IACnB,CAAC;IAED;;;;OAIG;IACH,qCAAqC,CAAE,UAAkB;QACvD,IAAI,CAAC,qCAAqC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,iBAAiB,CAAE,WAAoB,EAAE,WAAW,GAAG,KAAK;QACxE,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,CAAC,wBAAwB;QAC5E,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC;YAC7B,eAAe,EAAE,KAAK;YACtB,YAAY;YACZ,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAA;QAEF,MAAM,cAAc,GAAgB;YAClC,OAAO,EAAE,YAAY;YACrB,WAAW,EAAE,gBAAgB;YAC7B,WAAW,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9E,YAAY,EAAE,YAAY;YAC1B,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;SAClD,CAAA;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACzC,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAA;IACrE,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,sBAAsB,CAAE,YAAoB,EAAE,WAAW,GAAG,KAAK;QAC7E,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,CAAC,YAAY,EAAE,EAAE;gBAC9E,YAAY,CAAC,aAAa,CAAC,CAAA;gBAC3B,IAAI,CAAC,gCAAgC,CAAC,UAAU,CAAC,CAAA;gBACjD,OAAO,CAAC,YAAY,CAAC,CAAA;YACvB,CAAC,CAAC,CAAA;YAEF,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpC,IAAI,CAAC,gCAAgC,CAAC,UAAU,CAAC,CAAA;gBACjD,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAA;YAClD,CAAC,EAAE,WAAW,CAAC,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,wBAAwB,CAAE,YAAoB,EAAE,QAAwC;QAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAC3C,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAA;QACnF,OAAO,UAAU,CAAA;IACnB,CAAC;IAED;;;;;OAKG;IACK,gCAAgC,CAAE,UAAkB;QAC1D,IAAI,CAAC,kCAAkC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC5D,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,qBAAqB,CAAE,OAAoB;QACvD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YACzD,OAAO,CAAC,KAAK,CAAC,2CAA2C,OAAO,CAAC,OAAO,eAAe,YAAY,EAAE,CAAC,CAAA;YACtG,OAAM;QACR,CAAC;QAED,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,gBAAgB;gBACnB,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAA;gBACzC,MAAK;YACP,KAAK,iBAAiB;gBACpB,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAA;gBAC1C,MAAK;YACP,KAAK,oBAAoB;gBACvB,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAA;gBAC7C,MAAK;YACP,KAAK,qBAAqB;gBACxB,MAAM,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAA;gBAC9C,MAAK;YACP,KAAK,SAAS;gBACZ,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAA;gBACzC,MAAK;YACP;gBACE,OAAO,CAAC,KAAK,CAAC,2BAA2B,OAAO,CAAC,WAAW,SAAS,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QAC/F,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,qBAAqB,CAAE,OAAoB;QAC/C,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC;QAED,kCAAkC;QAClC,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnD,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC;YAC7B,eAAe,EAAE,IAAI;YACrB,YAAY;YACZ,SAAS,EAAE,OAAO,CAAC,YAAY;YAC/B,eAAe,EAAE,OAAO,CAAC,WAAW;SACrC,CAAC,CAAA;QAEF,sCAAsC;QACtC,IAAI,qBAAqB,CAAA;QACzB,IAAI,OAAO,CAAC,qBAAqB,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,qCAAqC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACxD,uDAAuD;gBACvD,IAAI,CAAC,qCAAqC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;oBAC5D,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;gBAC9D,CAAC,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,0FAA0F;gBAC1F,qBAAqB,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;YAC1H,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YACtD,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,GAAG,YAAY,EAAE,QAAQ,CAAC;YAClE,UAAU,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC;YACzC,KAAK,EAAE,GAAG,OAAO,CAAC,YAAY,IAAI,YAAY,EAAE;YAChD,YAAY,EAAE,OAAO,CAAC,WAAW;SAClC,CAAC,CAAA;QAEF,MAAM,sBAAsB,GAAgB;YAC1C,OAAO,EAAE,YAAY;YACrB,WAAW,EAAE,iBAAiB;YAC9B,WAAW,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9E,YAAY,EAAE,YAAY;YAC1B,SAAS,EAAE,OAAO,CAAC,YAAY;YAC/B,YAAY,EAAE,qBAAqB;YACnC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;YACjD,SAAS;SACV,CAAA;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IACnD,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,sBAAsB,CAAE,OAAoB;QACxD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACpE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QACjG,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACrE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QAC5E,CAAC;QAED,6BAA6B;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAClD,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;YAC9E,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC;YACzC,KAAK,EAAE,GAAG,WAAW,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,EAAE;YAC5D,YAAY,EAAE,OAAO,CAAC,WAAW;SAClC,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QACjG,CAAC;QAED,2FAA2F;QAC3F,iDAAiD;QACjD,+DAA+D;QAC/D,WAAW,CAAC,SAAS,GAAG,OAAO,CAAC,YAAY,CAAA;QAC5C,WAAW,CAAC,eAAe,GAAG,OAAO,CAAC,WAAW,CAAA;QACjD,WAAW,CAAC,eAAe,GAAG,IAAI,CAAA;QAClC,oFAAoF;QACpF,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;QAE9C,gCAAgC;QAChC,IAAI,IAAI,CAAC,qBAAqB,EAAE,UAAU,EAAE,MAAM,IAAI,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YACnF,MAAM,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAA;YAE5E,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CACtD,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CACpD,CAAA;QACH,CAAC;QAED,IAAI,CAAC,kCAAkC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACxD,IAAI,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW,CAAC,YAAY,EAAE,CAAC;gBAC7D,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,mDAAmD;QACnD,IAAI,OAAO,CAAC,qBAAqB,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,qCAAqC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACxD,mDAAmD;gBACnD,IAAI,CAAC,qCAAqC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;oBAC5D,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;gBAC9D,CAAC,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,4FAA4F;gBAC5F,MAAM,sBAAsB,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;gBAC/H,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAA;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,yBAAyB,CAAE,OAAoB;QAC3D,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACpE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gEAAgE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QACxG,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAErE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAClD,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;YAC1E,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC;YACzC,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,YAAY,EAAE;YACrD,YAAY,EAAE,WAAW,CAAC,eAAe;SAC1C,CAAC,CAAA;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,yDAAyD,WAAW,CAAC,eAAe,EAAE,CAAC,CAAA;QACzG,CAAC;QAED,IAAI,OAAO,CAAC,qBAAqB,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,qCAAqC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACxD,mDAAmD;gBACnD,IAAI,CAAC,qCAAqC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;oBAC5D,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;gBAC9D,CAAC,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,4FAA4F;gBAC5F,MAAM,sBAAsB,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;gBAC/H,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAA;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,uBAAuB,CAC3B,mBAA2B,EAC3B,YAAqC;QAErC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAA;QAC3E,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YACtD,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;YACzD,UAAU,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC;YACzC,KAAK,EAAE,GAAG,YAAY,IAAI,WAAW,CAAC,SAAS,EAAE;YACjD,YAAY,EAAE,WAAW,CAAC,eAAe;SAC1C,CAAC,CAAA;QAEF,MAAM,mBAAmB,GAAgB;YACvC,OAAO,EAAE,YAAY;YACrB,WAAW,EAAE,qBAAqB;YAClC,WAAW,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9E,KAAK,EAAE,YAAY;YACnB,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,YAAY;YACZ,SAAS;SACV,CAAA;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,uDAAuD,WAAW,CAAC,eAAe,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACzH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,0BAA0B,CACtC,OAAoB;QAEpB,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACpE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,CAAC,WAAW,GAAG,CAAC,CAAA;QAClG,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAErE,6BAA6B;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAClD,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;YACjE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC;YACzC,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,YAAY,EAAE;YACrD,YAAY,EAAE,OAAO,CAAC,WAAW;SAClC,CAAC,CAAA;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,6DAA6D,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QACrG,CAAC;QAED,+CAA+C;QAC/C,MAAM,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAE/E,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YACtD,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,qBAAqB,CAAE,OAAoB;QACvD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACpE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oDAAoD,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAErE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAClD,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC;YACzC,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,YAAY,EAAE;YACrD,YAAY,EAAE,WAAW,CAAC,eAAe;SAC1C,CAAC,CAAA;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4CAA4C,WAAW,CAAC,eAAe,EAAE,CAAC,CAAA;QAC5F,CAAC;QAED,IAAI,CAAC,iCAAiC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YACxD,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/esm/src/auth/SessionManager.js

@@ -0,0 +1,63 @@
+/**
+ * Manages sessions for peers, allowing sessions to be added, retrieved, updated, and removed
+ * by relevant identifiers (sessionNonce and peerIdentityKey).
+ */
+export class SessionManager {
+    identifierToSession;
+    constructor() {
+        this.identifierToSession = new Map();
+    }
+    /**
+     * Adds a session to the manager, associating it with relevant identifiers for retrieval.
+     *
+     * @param {PeerSession} session - The peer session to add.
+     */
+    addSession(session) {
+        if (!session.sessionNonce && !session.peerIdentityKey) {
+            throw new Error('Invalid session: at least one of sessionNonce or peerIdentityKey is required.');
+        }
+        if (session.sessionNonce) {
+            this.identifierToSession.set(session.sessionNonce, session);
+        }
+        if (session.peerIdentityKey) {
+            this.identifierToSession.set(session.peerIdentityKey, session);
+        }
+    }
+    /**
+    * Updates a session in the manager, ensuring that all identifiers are correctly associated.
+    *
+    * @param {PeerSession} session - The peer session to update.
+    */
+    updateSession(session) {
+        this.removeSession(session);
+        this.addSession(session);
+    }
+    /**
+     * Retrieves a session based on a given identifier.
+     *
+     * @param {string} identifier - The identifier for the session (sessionNonce or peerIdentityKey).
+     * @returns {PeerSession | undefined} - The matching peer session, or undefined if not found.
+     */
+    getSession(identifier) {
+        return this.identifierToSession.get(identifier);
+    }
+    /**
+     * Removes a session from the manager by clearing all associated identifiers.
+     *
+     * @param {PeerSession} session - The peer session to remove.
+     */
+    removeSession(session) {
+        this.identifierToSession.delete(session.sessionNonce);
+        this.identifierToSession.delete(session.peerIdentityKey);
+    }
+    /**
+     * Checks if a session exists based on a given identifier.
+     *
+     * @param {string} identifier - The identifier to check.
+     * @returns {boolean} - True if the session exists, false otherwise.
+     */
+    hasSession(identifier) {
+        return this.identifierToSession.has(identifier);
+    }
+}
+//# sourceMappingURL=SessionManager.js.map

package/dist/esm/src/auth/SessionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionManager.js","sourceRoot":"","sources":["../../../../src/auth/SessionManager.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,cAAc;IACR,mBAAmB,CAA0B;IAE9D;QACE,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC3D,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAE,OAAoB;QAC9B,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAA;QAClG,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAC7D,CAAC;QACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IAED;;;;MAIE;IACF,aAAa,CAAE,OAAoB;QACjC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QAC3B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAE,UAAkB;QAC5B,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACjD,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAE,OAAoB;QACjC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QACrD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAC1D,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAE,UAAkB;QAC5B,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACjD,CAAC;CACF"}

package/dist/esm/src/auth/{Certificate.js → certificates/Certificate.js}

@@ -1,5 +1,4 @@
-import { Utils } from '../primitives/index.js';
-import ProtoWallet from '../wallet/ProtoWallet.js';
+import { Utils, ProtoWallet } from '../../../mod.js';
 /**
  * Represents an Identity Certificate as per the Wallet interface specifications.
  *

package/dist/esm/src/auth/certificates/Certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Certificate.js","sourceRoot":"","sources":["../../../../../src/auth/certificates/Certificate.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EAOL,WAAW,EACZ,MAAM,iBAAiB,CAAA;AAExB;;;;GAIG;AACH,MAAM,CAAC,OAAO,OAAO,WAAW;IAC9B;;OAEG;IACH,IAAI,CAAc;IAElB;;OAEG;IACH,YAAY,CAAc;IAE1B;;OAEG;IACH,OAAO,CAAW;IAElB;;OAEG;IACH,SAAS,CAAW;IAEpB;;OAEG;IACH,kBAAkB,CAAgB;IAElC;;OAEG;IACH,MAAM,CAAkD;IAExD;;MAEE;IACF,SAAS,CAAY;IAErB;;;;;;;;;;OAUG;IACH,YACE,IAAkB,EAClB,YAA0B,EAC1B,OAAkB,EAClB,SAAoB,EACpB,kBAAkC,EAClC,MAAwD,EACxD,SAAqB;QAErB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAA;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAA4B,IAAI;QACpC,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;QAEjC,sCAAsC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACpD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAEvB,8CAA8C;QAC9C,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;QACpE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAE/B,gDAAgD;QAChD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACvD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAE1B,kDAAkD;QAClD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAC3D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QAE5B,gDAAgD;QAChD,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACvB,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;QAE1C,eAAe;QACf,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAChD,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QAC1C,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,YAAY,EAAE,CAAC;YACnD,aAAa;YACb,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YACvD,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YAC5C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;YAE5B,cAAc;YACd,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzD,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;YAC7C,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;QAC/B,CAAC;QAED,8BAA8B;QAC9B,IAAI,gBAAgB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC3D,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YAC5C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,EAAE,CAAA;IACzB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,OAAO,CAAC,GAAa;QAC1B,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAEpC,YAAY;QACZ,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QAEtC,oBAAoB;QACpB,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACzC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;QAEtD,0BAA0B;QAC1B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAEzC,4BAA4B;QAC5B,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QAE7C,0BAA0B;QAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACnC,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;QAC1C,MAAM,kBAAkB,GAAG,GAAG,IAAI,IAAI,WAAW,EAAE,CAAA;QAEnD,cAAc;QACd,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;QACxC,MAAM,MAAM,GAAqD,EAAE,CAAA;QACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,aAAa;YACb,MAAM,eAAe,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;YAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YACnD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;YAE9C,cAAc;YACd,MAAM,gBAAgB,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;YAC/C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACrD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;YAEhD,MAAM,CAAC,SAAS,CAAC,GAAG,UAAU,CAAA;QAChC,CAAC;QAED,4BAA4B;QAC5B,IAAI,SAA6B,CAAA;QACjC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;YAClB,MAAM,eAAe,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;YAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YACnD,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QACzC,CAAC;QAED,OAAO,IAAI,WAAW,CACpB,IAAI,EACJ,YAAY,EACZ,OAAO,EACP,SAAS,EACT,kBAAkB,EAClB,MAAM,EACN,SAAS,CACV,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAA;QAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,mDAAmD;QAE9F,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC;YAC/C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;YAC/C,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,CAAC,CAAC,EAAE,uBAAuB,CAAC;YACxC,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE;YAC1C,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,sDAAsD;SACpF,CAAC,CAAA;QACF,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA,CAAC,qCAAqC;QACxE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC;YACpD,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,CAAC,CAAC,EAAE,uBAAuB,CAAC;YACxC,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE;SAC3C,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC;CACF"}