@bsv/wallet-toolbox-client 2.4.4 → 2.4.20

package/out/src/monitor/tasks/WalletMonitorTask.js

@@ -1,42 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WalletMonitorTask = void 0;
-/**
- * A monitor task performs some periodic or state triggered maintenance function
- * on the data managed by a wallet (Bitcoin UTXO manager, aka wallet)
- *
- * The monitor maintains a collection of tasks.
- *
- * It runs each task's non-asynchronous trigger to determine if the runTask method needs to run.
- *
- * Tasks that need to be run are run consecutively by awaiting their async runTask override method.
- *
- * The monitor then waits a fixed interval before repeating...
- *
- * Tasks may use the monitor_events table to persist their execution history.
- * This is done by accessing the wathman.storage object.
- */
-class WalletMonitorTask {
-    monitor;
-    name;
-    /**
-     * Set by monitor each time runTask completes
-     */
-    lastRunMsecsSinceEpoch = 0;
-    storage;
-    constructor(monitor, name) {
-        this.monitor = monitor;
-        this.name = name;
-        this.storage = monitor.storage;
-    }
-    /**
-     * Override to handle async task setup configuration.
-     *
-     * Called before first call to `trigger`
-     */
-    async asyncSetup() {
-        // Default no-op; override in subclasses that require async setup
-    }
-}
-exports.WalletMonitorTask = WalletMonitorTask;
-//# sourceMappingURL=WalletMonitorTask.js.map

package/out/src/monitor/tasks/WalletMonitorTask.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"WalletMonitorTask.js","sourceRoot":"","sources":["../../../../../src/monitor/tasks/WalletMonitorTask.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;GAcG;AAEH,MAAsB,iBAAiB;IAS5B;IACA;IATT;;OAEG;IACH,sBAAsB,GAAG,CAAC,CAAA;IAE1B,OAAO,CAAgB;IAEvB,YACS,OAAgB,EAChB,IAAY;QADZ,YAAO,GAAP,OAAO,CAAS;QAChB,SAAI,GAAJ,IAAI,CAAQ;QAEnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;IAChC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,iEAAiE;IACnE,CAAC;CAQF;AA9BD,8CA8BC"}

package/out/src/sdk/ActionBatch.interfaces.d.ts

@@ -1,105 +0,0 @@
-import type { TXIDHexString, Validation } from '@bsv/sdk';
-import type { TableOutput, TableOutputBasket } from '../storage/schema/tables';
-import type { StorageCreateActionResult, StorageFeeModel, StorageProcessActionResults } from './WalletStorage.interfaces';
-/** Internal Wallet Toolbox capabilities. These do not extend the BRC-100 wallet interface. */
-export interface StorageCapabilities {
-    actionBatch?: {
-        version: 1;
-        maxInlineBytes: number;
-        maxBlobBytes: number;
-        maxConcurrentUploads: number;
-        leaseMs: number;
-        hardLifetimeMs: number;
-    };
-}
-export interface ActionBatchFundingOutput extends TableOutput {
-    sourceTransaction?: number[] | Uint8Array;
-}
-export interface BeginActionBatchArgs {
-    batchId: string;
-    firstAction: Validation.ValidCreateActionArgs;
-}
-export interface BeginActionBatchResult {
-    batchId: string;
-    expiresAt: string;
-    hardExpiresAt: string;
-    changeBasket: TableOutputBasket;
-    feeModel: StorageFeeModel;
-    commissionSatoshis: number;
-    commissionPubKeyHex?: string;
-    availableChangeCount: number;
-    reservedOutputs: ActionBatchFundingOutput[];
-    explicitOutputs: ActionBatchFundingOutput[];
-    inputBeef?: number[] | Uint8Array;
-}
-export interface ExtendActionBatchArgs {
-    batchId: string;
-    targetSatoshis: number;
-    requestedOutputs: number;
-    explicitOutpoints: Array<{
-        txid: string;
-        vout: number;
-    }>;
-    includeSourceTransactions: boolean;
-}
-export interface ExtendActionBatchResult {
-    expiresAt: string;
-    reservedOutputs: ActionBatchFundingOutput[];
-    explicitOutputs: ActionBatchFundingOutput[];
-    inputBeef?: number[] | Uint8Array;
-}
-export interface RenewActionBatchResult {
-    expiresAt: string;
-}
-export interface ActionBatchCommitMetadata {
-    description: string;
-    labels: string[];
-    isNoSend: boolean;
-    isDelayed: boolean;
-    inputs: Validation.ValidCreateActionInput[];
-    outputs: Validation.ValidCreateActionOutput[];
-}
-export interface ActionBatchCommitAction {
-    reference: string;
-    txid: TXIDHexString;
-    rawTx?: number[] | Uint8Array;
-    rawTxDigest?: string;
-    /** Content-addressed locking scripts aligned to plan.outputs for compact workspaces. */
-    lockingScriptDigests?: Array<string | undefined>;
-    plan: StorageCreateActionResult;
-    metadata: ActionBatchCommitMetadata;
-    commissionKeyOffset?: string;
-}
-export interface ActionBatchManifest {
-    batchId: string;
-    digest: string;
-    actions: ActionBatchCommitAction[];
-    /** Content-addressed blobs carried in the commit request when the batch is below the inline limit. */
-    inlineBlobs?: Record<string, number[] | Uint8Array>;
-    /** Physical chunk digests for logical blobs larger than the provider's advertised blob limit. */
-    blobChunks?: Record<string, string[]>;
-    dependencyBeef?: number[] | Uint8Array;
-    dependencyBeefDigest?: string;
-    sendWith: TXIDHexString[];
-    isDelayed: boolean;
-}
-export interface PrepareActionBatchCommitResult {
-    missingDigests: string[];
-    maxBlobBytes: number;
-    maxConcurrentUploads: number;
-}
-export interface PutActionBatchBlobArgs {
-    batchId: string;
-    digest: string;
-    bytes: number[] | Uint8Array;
-}
-export interface CommitActionBatchResult extends StorageProcessActionResults {
-    batchId: string;
-    manifestDigest: string;
-    committedTxids: TXIDHexString[];
-    alreadyCommitted: boolean;
-}
-export interface AbortActionBatchResult {
-    aborted: boolean;
-}
-//# sourceMappingURL=ActionBatch.interfaces.d.ts.map

package/out/src/sdk/ActionBatch.interfaces.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ActionBatch.interfaces.d.ts","sourceRoot":"","sources":["../../../../src/sdk/ActionBatch.interfaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC9E,OAAO,KAAK,EAAE,yBAAyB,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAEzH,8FAA8F;AAC9F,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,CAAC,CAAA;QACV,cAAc,EAAE,MAAM,CAAA;QACtB,YAAY,EAAE,MAAM,CAAA;QACpB,oBAAoB,EAAE,MAAM,CAAA;QAC5B,OAAO,EAAE,MAAM,CAAA;QACf,cAAc,EAAE,MAAM,CAAA;KACvB,CAAA;CACF;AAED,MAAM,WAAW,wBAAyB,SAAQ,WAAW;IAC3D,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU,CAAA;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,UAAU,CAAC,qBAAqB,CAAA;CAC9C;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,iBAAiB,CAAA;IAC/B,QAAQ,EAAE,eAAe,CAAA;IACzB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,eAAe,EAAE,wBAAwB,EAAE,CAAA;IAC3C,eAAe,EAAE,wBAAwB,EAAE,CAAA;IAC3C,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU,CAAA;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxD,yBAAyB,EAAE,OAAO,CAAA;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,wBAAwB,EAAE,CAAA;IAC3C,eAAe,EAAE,wBAAwB,EAAE,CAAA;IAC3C,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU,CAAA;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;IACjB,SAAS,EAAE,OAAO,CAAA;IAClB,MAAM,EAAE,UAAU,CAAC,sBAAsB,EAAE,CAAA;IAC3C,OAAO,EAAE,UAAU,CAAC,uBAAuB,EAAE,CAAA;CAC9C;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,aAAa,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,wFAAwF;IACxF,oBAAoB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAChD,IAAI,EAAE,yBAAyB,CAAA;IAC/B,QAAQ,EAAE,yBAAyB,CAAA;IACnC,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,uBAAuB,EAAE,CAAA;IAClC,sGAAsG;IACtG,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAA;IACnD,iGAAiG;IACjG,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU,CAAA;IACtC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,8BAA8B;IAC7C,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAA;CAC7B;AAED,MAAM,WAAW,uBAAwB,SAAQ,2BAA2B;IAC1E,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,aAAa,EAAE,CAAA;IAC/B,gBAAgB,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAA;CACjB"}

package/out/src/sdk/ActionBatch.interfaces.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=ActionBatch.interfaces.js.map

package/out/src/sdk/ActionBatch.interfaces.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ActionBatch.interfaces.js","sourceRoot":"","sources":["../../../../src/sdk/ActionBatch.interfaces.ts"],"names":[],"mappings":""}

package/out/src/sdk/CertOpsWallet.d.ts

@@ -1,7 +0,0 @@
-import { GetPublicKeyArgs, GetPublicKeyResult, OriginatorDomainNameStringUnder250Bytes, WalletDecryptArgs, WalletDecryptResult, WalletEncryptArgs, WalletEncryptResult } from '@bsv/sdk';
-export interface CertOpsWallet {
-    getPublicKey: (args: GetPublicKeyArgs, originator?: OriginatorDomainNameStringUnder250Bytes) => Promise<GetPublicKeyResult>;
-    encrypt: (args: WalletEncryptArgs, originator?: OriginatorDomainNameStringUnder250Bytes) => Promise<WalletEncryptResult>;
-    decrypt: (args: WalletDecryptArgs, originator?: OriginatorDomainNameStringUnder250Bytes) => Promise<WalletDecryptResult>;
-}
-//# sourceMappingURL=CertOpsWallet.d.ts.map

package/out/src/sdk/CertOpsWallet.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CertOpsWallet.d.ts","sourceRoot":"","sources":["../../../../src/sdk/CertOpsWallet.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,uCAAuC,EACvC,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,UAAU,CAAA;AAEjB,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,CACZ,IAAI,EAAE,gBAAgB,EACtB,UAAU,CAAC,EAAE,uCAAuC,KACjD,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAChC,OAAO,EAAE,CAAC,IAAI,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,uCAAuC,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACxH,OAAO,EAAE,CAAC,IAAI,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,uCAAuC,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACzH"}

package/out/src/sdk/CertOpsWallet.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=CertOpsWallet.js.map

package/out/src/sdk/CertOpsWallet.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CertOpsWallet.js","sourceRoot":"","sources":["../../../../src/sdk/CertOpsWallet.ts"],"names":[],"mappings":""}

package/out/src/sdk/PrivilegedKeyManager.d.ts

@@ -1,125 +0,0 @@
-import { PrivateKey, CreateHmacArgs, CreateHmacResult, CreateSignatureArgs, CreateSignatureResult, GetPublicKeyArgs, ProtoWallet, PubKeyHex, RevealCounterpartyKeyLinkageArgs, RevealCounterpartyKeyLinkageResult, RevealSpecificKeyLinkageArgs, RevealSpecificKeyLinkageResult, VerifyHmacArgs, VerifyHmacResult, VerifySignatureArgs, VerifySignatureResult, WalletDecryptArgs, WalletDecryptResult, WalletEncryptArgs, WalletEncryptResult } from '@bsv/sdk';
-/**
- * PrivilegedKeyManager
- *
- * This class manages a privileged (i.e., very sensitive) private key, obtained from
- * an external function (`keyGetter`), which might be backed by HSMs, secure enclaves,
- * or other secure storage. The manager retains the key in memory only for a limited
- * duration (`retentionPeriod`), uses XOR-based chunk-splitting obfuscation, and
- * includes decoy data to raise the difficulty of discovering the real key in memory.
- *
- * IMPORTANT: While these measures raise the bar for attackers, JavaScript environments
- * do not provide perfect in-memory secrecy.
- */
-export declare class PrivilegedKeyManager implements ProtoWallet {
-    /**
-     * Function that will retrieve the PrivateKey from a secure environment,
-     * e.g., an HSM or secure enclave. The reason for key usage is passed in
-     * to help with user consent, auditing, and access policy checks.
-     */
-    private readonly keyGetter;
-    /**
-     * Time (in ms) for which the obfuscated key remains in memory
-     * before being automatically destroyed.
-     */
-    private readonly retentionPeriod;
-    /**
-     * A list of dynamically generated property names used to store
-     * real key chunks (XORed with random pads).
-     */
-    private chunkPropNames;
-    /**
-     * A list of dynamically generated property names used to store
-     * the random pads that correspond to the real key chunks.
-     */
-    private chunkPadPropNames;
-    /**
-     * A list of decoy property names that will be removed
-     * when the real key is destroyed.
-     */
-    private decoyPropNamesDestroy;
-    /**
-     * A list of decoy property names that remain in memory
-     * even after the real key is destroyed (just to cause confusion).
-     */
-    private readonly decoyPropNamesRemain;
-    /**
-     * Handle to the timer that will remove the key from memory
-     * after the retention period. If the key is refreshed again
-     * within that period, the timer is cleared and re-set.
-     */
-    private destroyTimer;
-    /**
-     * Number of chunks to split the 32-byte key into.
-     * Adjust to increase or decrease obfuscation complexity.
-     */
-    private readonly CHUNK_COUNT;
-    /**
-     * @param keyGetter - Asynchronous function that retrieves the PrivateKey from a secure environment.
-     * @param retentionPeriod - Time in milliseconds to retain the obfuscated key in memory before zeroizing.
-     */
-    constructor(keyGetter: (reason: string) => Promise<PrivateKey>, retentionPeriod?: number);
-    /**
-     * Safely destroys the in-memory obfuscated key material by zeroizing
-     * and deleting related fields. Also destroys some (but not all) decoy
-     * properties to further confuse an attacker.
-     */
-    destroyKey(): void;
-    /**
-     * Re/sets the destruction timer that removes the key from memory
-     * after `retentionPeriod` ms. If a timer is already running, it
-     * is cleared and re-set. This ensures the key remains in memory
-     * for exactly the desired window after its most recent acquisition.
-     */
-    private scheduleKeyDestruction;
-    /**
-     * XOR-based obfuscation on a per-chunk basis.
-     * This function takes two equal-length byte arrays
-     * and returns the XOR combination.
-     */
-    private xorBytes;
-    /**
-     * Splits the 32-byte key into `this.CHUNK_COUNT` smaller chunks
-     * (mostly equal length; the last chunk picks up leftover bytes
-     * if 32 is not evenly divisible).
-     */
-    private splitKeyIntoChunks;
-    /**
-     * Reassembles the chunks from the dynamic properties, XORs them
-     * with their corresponding pads, and returns a single 32-byte
-     * Uint8Array representing the raw key.
-     */
-    private reassembleKeyFromChunks;
-    /**
-     * Generates a random property name to store key chunks or decoy data.
-     */
-    private generateRandomPropName;
-    /**
-     * Forces a PrivateKey to be represented as exactly 32 bytes, left-padding
-     * with zeros if its numeric value has fewer than 32 bytes.
-     */
-    private get32ByteRepresentation;
-    /**
-     * Returns the privileged key needed to perform cryptographic operations.
-     * Uses in-memory chunk-based obfuscation if the key was already fetched.
-     * Otherwise, it calls out to `keyGetter`, splits the 32-byte representation
-     * of the key, XORs each chunk with a random pad, and stores them under
-     * dynamic property names. Also populates new decoy properties.
-     *
-     * @param reason - The reason for why the key is needed, passed to keyGetter.
-     * @returns The PrivateKey object needed for cryptographic operations.
-     */
-    private getPrivilegedKey;
-    getPublicKey(args: GetPublicKeyArgs): Promise<{
-        publicKey: PubKeyHex;
-    }>;
-    revealCounterpartyKeyLinkage(args: RevealCounterpartyKeyLinkageArgs): Promise<RevealCounterpartyKeyLinkageResult>;
-    revealSpecificKeyLinkage(args: RevealSpecificKeyLinkageArgs): Promise<RevealSpecificKeyLinkageResult>;
-    encrypt(args: WalletEncryptArgs): Promise<WalletEncryptResult>;
-    decrypt(args: WalletDecryptArgs): Promise<WalletDecryptResult>;
-    createHmac(args: CreateHmacArgs): Promise<CreateHmacResult>;
-    verifyHmac(args: VerifyHmacArgs): Promise<VerifyHmacResult>;
-    createSignature(args: CreateSignatureArgs): Promise<CreateSignatureResult>;
-    verifySignature(args: VerifySignatureArgs): Promise<VerifySignatureResult>;
-}
-//# sourceMappingURL=PrivilegedKeyManager.d.ts.map

package/out/src/sdk/PrivilegedKeyManager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PrivilegedKeyManager.d.ts","sourceRoot":"","sources":["../../../../src/sdk/PrivilegedKeyManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,SAAS,EACT,gCAAgC,EAChC,kCAAkC,EAClC,4BAA4B,EAC5B,8BAA8B,EAC9B,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,UAAU,CAAA;AAEjB;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAqB,YAAW,WAAW;IACtD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IAEnE;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IAExC;;;OAGG;IACH,OAAO,CAAC,cAAc,CAAe;IAErC;;;OAGG;IACH,OAAO,CAAC,iBAAiB,CAAe;IAExC;;;OAGG;IACH,OAAO,CAAC,qBAAqB,CAAe;IAE5C;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAe;IAEpD;;;;OAIG;IACH,OAAO,CAAC,YAAY,CAAK;IAEzB;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAI;IAEhC;;;OAGG;gBACU,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE,eAAe,SAAU;IAa1F;;;;OAIG;IACH,UAAU,IAAK,IAAI;IA+CnB;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAS9B;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IAQhB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAa1B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAoC/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;;;;;;;;OASG;YACW,gBAAgB;IA4DxB,YAAY,CAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,SAAS,CAAA;KAAE,CAAC;IAIxE,4BAA4B,CAChC,IAAI,EAAE,gCAAgC,GACrC,OAAO,CAAC,kCAAkC,CAAC;IAMxC,wBAAwB,CAAE,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAItG,OAAO,CAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI/D,OAAO,CAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI/D,UAAU,CAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5D,UAAU,CAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5D,eAAe,CAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI3E,eAAe,CAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAGlF"}

package/out/src/sdk/PrivilegedKeyManager.js

@@ -1,320 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PrivilegedKeyManager = void 0;
-const sdk_1 = require("@bsv/sdk");
-/**
- * PrivilegedKeyManager
- *
- * This class manages a privileged (i.e., very sensitive) private key, obtained from
- * an external function (`keyGetter`), which might be backed by HSMs, secure enclaves,
- * or other secure storage. The manager retains the key in memory only for a limited
- * duration (`retentionPeriod`), uses XOR-based chunk-splitting obfuscation, and
- * includes decoy data to raise the difficulty of discovering the real key in memory.
- *
- * IMPORTANT: While these measures raise the bar for attackers, JavaScript environments
- * do not provide perfect in-memory secrecy.
- */
-class PrivilegedKeyManager {
-    /**
-     * Function that will retrieve the PrivateKey from a secure environment,
-     * e.g., an HSM or secure enclave. The reason for key usage is passed in
-     * to help with user consent, auditing, and access policy checks.
-     */
-    keyGetter;
-    /**
-     * Time (in ms) for which the obfuscated key remains in memory
-     * before being automatically destroyed.
-     */
-    retentionPeriod;
-    /**
-     * A list of dynamically generated property names used to store
-     * real key chunks (XORed with random pads).
-     */
-    chunkPropNames = [];
-    /**
-     * A list of dynamically generated property names used to store
-     * the random pads that correspond to the real key chunks.
-     */
-    chunkPadPropNames = [];
-    /**
-     * A list of decoy property names that will be removed
-     * when the real key is destroyed.
-     */
-    decoyPropNamesDestroy = [];
-    /**
-     * A list of decoy property names that remain in memory
-     * even after the real key is destroyed (just to cause confusion).
-     */
-    decoyPropNamesRemain = [];
-    /**
-     * Handle to the timer that will remove the key from memory
-     * after the retention period. If the key is refreshed again
-     * within that period, the timer is cleared and re-set.
-     */
-    destroyTimer;
-    /**
-     * Number of chunks to split the 32-byte key into.
-     * Adjust to increase or decrease obfuscation complexity.
-     */
-    CHUNK_COUNT = 4;
-    /**
-     * @param keyGetter - Asynchronous function that retrieves the PrivateKey from a secure environment.
-     * @param retentionPeriod - Time in milliseconds to retain the obfuscated key in memory before zeroizing.
-     */
-    constructor(keyGetter, retentionPeriod = 120_000) {
-        this.keyGetter = keyGetter;
-        this.retentionPeriod = retentionPeriod;
-        // Initialize some random decoy properties that always remain:
-        for (let i = 0; i < 2; i++) {
-            const propName = this.generateRandomPropName();
-            this[propName] = Uint8Array.from((0, sdk_1.Random)(16));
-            this.decoyPropNamesRemain.push(propName);
-        }
-    }
-    /**
-     * Safely destroys the in-memory obfuscated key material by zeroizing
-     * and deleting related fields. Also destroys some (but not all) decoy
-     * properties to further confuse an attacker.
-     */
-    destroyKey() {
-        try {
-            // Zero out real chunk data
-            for (const name of this.chunkPropNames) {
-                const data = this[name];
-                if (data != null) {
-                    data.fill(0);
-                }
-                // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
-                delete this[name];
-            }
-            for (const name of this.chunkPadPropNames) {
-                const data = this[name];
-                if (data != null) {
-                    data.fill(0);
-                }
-                // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
-                delete this[name];
-            }
-            // Destroy some decoys
-            for (const name of this.decoyPropNamesDestroy) {
-                const data = this[name];
-                if (data != null) {
-                    data.fill(0);
-                }
-                // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
-                delete this[name];
-            }
-            // Clear arrays of property names
-            this.chunkPropNames = [];
-            this.chunkPadPropNames = [];
-            this.decoyPropNamesDestroy = [];
-        }
-        catch (_intentionallyIgnored) {
-            // Best-effort memory zeroing: if an individual property is already gone or the
-            // fill/delete throws (e.g. frozen object in a test harness), we must still reach
-            // the finally block to clear the destruction timer.  Propagating here would leave
-            // the timer running and risk a second (no-op) destruction attempt.
-        }
-        finally {
-            if (this.destroyTimer != null) {
-                clearTimeout(this.destroyTimer);
-                this.destroyTimer = undefined;
-            }
-        }
-    }
-    /**
-     * Re/sets the destruction timer that removes the key from memory
-     * after `retentionPeriod` ms. If a timer is already running, it
-     * is cleared and re-set. This ensures the key remains in memory
-     * for exactly the desired window after its most recent acquisition.
-     */
-    scheduleKeyDestruction() {
-        if (this.destroyTimer != null) {
-            clearTimeout(this.destroyTimer);
-        }
-        this.destroyTimer = setTimeout(() => {
-            this.destroyKey();
-        }, this.retentionPeriod);
-    }
-    /**
-     * XOR-based obfuscation on a per-chunk basis.
-     * This function takes two equal-length byte arrays
-     * and returns the XOR combination.
-     */
-    xorBytes(a, b) {
-        const out = new Uint8Array(a.length);
-        for (let i = 0; i < a.length; i++) {
-            out[i] = a[i] ^ b[i];
-        }
-        return out;
-    }
-    /**
-     * Splits the 32-byte key into `this.CHUNK_COUNT` smaller chunks
-     * (mostly equal length; the last chunk picks up leftover bytes
-     * if 32 is not evenly divisible).
-     */
-    splitKeyIntoChunks(keyBytes) {
-        const chunkSize = Math.floor(keyBytes.length / this.CHUNK_COUNT);
-        const chunks = [];
-        let offset = 0;
-        for (let i = 0; i < this.CHUNK_COUNT; i++) {
-            const size = i === this.CHUNK_COUNT - 1 ? keyBytes.length - offset : chunkSize;
-            chunks.push(keyBytes.slice(offset, offset + size));
-            offset += size;
-        }
-        return chunks;
-    }
-    /**
-     * Reassembles the chunks from the dynamic properties, XORs them
-     * with their corresponding pads, and returns a single 32-byte
-     * Uint8Array representing the raw key.
-     */
-    reassembleKeyFromChunks() {
-        try {
-            const chunkArrays = [];
-            for (let i = 0; i < this.chunkPropNames.length; i++) {
-                const chunkEnc = this[this.chunkPropNames[i]];
-                const chunkPad = this[this.chunkPadPropNames[i]];
-                if (chunkEnc == null || chunkPad == null || chunkEnc.length !== chunkPad.length) {
-                    return null;
-                }
-                const rawChunk = this.xorBytes(chunkEnc, chunkPad);
-                chunkArrays.push(rawChunk);
-            }
-            // Concat them back to a single 32-byte array:
-            const totalLength = chunkArrays.reduce((sum, c) => sum + c.length, 0);
-            if (totalLength !== 32) {
-                // We only handle 32-byte keys
-                return null;
-            }
-            const rawKey = new Uint8Array(totalLength);
-            let offset = 0;
-            for (const chunk of chunkArrays) {
-                rawKey.set(chunk, offset);
-                offset += chunk.length;
-                // Attempt to zero the ephemeral chunk
-                chunk.fill(0);
-            }
-            return rawKey;
-        }
-        catch (_intentionallyIgnored) {
-            // Reassembly failed due to a missing property or type mismatch (e.g. the key was
-            // already destroyed or was never stored).  Returning null signals "no key available"
-            // to the caller, which will prompt re-authentication — propagating the raw error
-            // would leak internal obfuscation details and bypass that recovery path.
-            return null;
-        }
-    }
-    /**
-     * Generates a random property name to store key chunks or decoy data.
-     */
-    generateRandomPropName() {
-        // E.g., 8 random hex characters for the property name
-        const randomHex = sdk_1.Utils.toHex((0, sdk_1.Random)(4));
-        const extraBytes = (0, sdk_1.Random)(3);
-        const extraNum = ((extraBytes[0] << 16) | (extraBytes[1] << 8) | extraBytes[2]) % 1000000;
-        return `_${randomHex}_${extraNum}`;
-    }
-    /**
-     * Forces a PrivateKey to be represented as exactly 32 bytes, left-padding
-     * with zeros if its numeric value has fewer than 32 bytes.
-     */
-    get32ByteRepresentation(privKey) {
-        // The internal "toArray()" can be up to 32 bytes, but sometimes fewer
-        // if the numeric value has leading zeros.
-        const buf = privKey.toArray();
-        if (buf.length > 32) {
-            throw new Error('PrivilegedKeyManager: Expected a 32-byte key, but got more.');
-        }
-        // Left-pad with zeros if needed
-        const keyBytes = new Uint8Array(32);
-        keyBytes.set(buf, 32 - buf.length);
-        return keyBytes;
-    }
-    /**
-     * Returns the privileged key needed to perform cryptographic operations.
-     * Uses in-memory chunk-based obfuscation if the key was already fetched.
-     * Otherwise, it calls out to `keyGetter`, splits the 32-byte representation
-     * of the key, XORs each chunk with a random pad, and stores them under
-     * dynamic property names. Also populates new decoy properties.
-     *
-     * @param reason - The reason for why the key is needed, passed to keyGetter.
-     * @returns The PrivateKey object needed for cryptographic operations.
-     */
-    async getPrivilegedKey(reason) {
-        // If we already have chunk properties, try reassemble
-        if (this.chunkPropNames.length > 0 && this.chunkPadPropNames.length > 0) {
-            const rawKeyBytes = this.reassembleKeyFromChunks();
-            if (rawKeyBytes?.length === 32) {
-                // Convert 32 raw bytes back to a PrivateKey
-                // (Leading zeros are preserved, but PrivateKey() will parse it as a big integer.)
-                const hexKey = sdk_1.Utils.toHex([...rawKeyBytes]); // 64 hex chars
-                rawKeyBytes.fill(0); // Zero ephemeral copy
-                this.scheduleKeyDestruction();
-                return new sdk_1.PrivateKey(hexKey, 'hex');
-            }
-        }
-        // Otherwise, fetch a fresh key from the secure environment
-        const fetchedKey = await this.keyGetter(reason);
-        // Force 32‑byte representation (left-pad if necessary)
-        const keyBytes = this.get32ByteRepresentation(fetchedKey);
-        // Clean up any old data first (in case we had something stale)
-        this.destroyKey();
-        // Split the key
-        const chunks = this.splitKeyIntoChunks(keyBytes);
-        // Store new chunk data under random property names
-        for (const chunk of chunks) {
-            const chunkProp = this.generateRandomPropName();
-            const padProp = this.generateRandomPropName();
-            this.chunkPropNames.push(chunkProp);
-            this.chunkPadPropNames.push(padProp);
-            // Generate random pad of the same length as the chunk
-            const pad = Uint8Array.from((0, sdk_1.Random)(chunk.length));
-            // XOR the chunk to obfuscate
-            const obf = this.xorBytes(chunk, pad);
-            this[chunkProp] = obf;
-            this[padProp] = pad;
-        }
-        // Generate some decoy properties that will be destroyed with the key
-        for (let i = 0; i < 2; i++) {
-            const decoyProp = this.generateRandomPropName();
-            this[decoyProp] = Uint8Array.from((0, sdk_1.Random)(32));
-            this.decoyPropNamesDestroy.push(decoyProp);
-        }
-        // Zero out ephemeral original
-        keyBytes.fill(0);
-        // Schedule destruction
-        this.scheduleKeyDestruction();
-        // Return the newly fetched key as a normal PrivateKey
-        return fetchedKey;
-    }
-    async getPublicKey(args) {
-        return await new sdk_1.ProtoWallet(await this.getPrivilegedKey(args.privilegedReason)).getPublicKey(args);
-    }
-    async revealCounterpartyKeyLinkage(args) {
-        return await new sdk_1.ProtoWallet(await this.getPrivilegedKey(args.privilegedReason)).revealCounterpartyKeyLinkage(args);
-    }
-    async revealSpecificKeyLinkage(args) {
-        return await new sdk_1.ProtoWallet(await this.getPrivilegedKey(args.privilegedReason)).revealSpecificKeyLinkage(args);
-    }
-    async encrypt(args) {
-        return await new sdk_1.ProtoWallet(await this.getPrivilegedKey(args.privilegedReason)).encrypt(args);
-    }
-    async decrypt(args) {
-        return await new sdk_1.ProtoWallet(await this.getPrivilegedKey(args.privilegedReason)).decrypt(args);
-    }
-    async createHmac(args) {
-        return await new sdk_1.ProtoWallet(await this.getPrivilegedKey(args.privilegedReason)).createHmac(args);
-    }
-    async verifyHmac(args) {
-        return await new sdk_1.ProtoWallet(await this.getPrivilegedKey(args.privilegedReason)).verifyHmac(args);
-    }
-    async createSignature(args) {
-        return await new sdk_1.ProtoWallet(await this.getPrivilegedKey(args.privilegedReason)).createSignature(args);
-    }
-    async verifySignature(args) {
-        return await new sdk_1.ProtoWallet(await this.getPrivilegedKey(args.privilegedReason)).verifySignature(args);
-    }
-}
-exports.PrivilegedKeyManager = PrivilegedKeyManager;
-//# sourceMappingURL=PrivilegedKeyManager.js.map

package/out/src/sdk/PrivilegedKeyManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PrivilegedKeyManager.js","sourceRoot":"","sources":["../../../../src/sdk/PrivilegedKeyManager.ts"],"names":[],"mappings":";;;AAAA,kCAuBiB;AAEjB;;;;;;;;;;;GAWG;AACH,MAAa,oBAAoB;IAC/B;;;;OAIG;IACc,SAAS,CAAyC;IAEnE;;;OAGG;IACc,eAAe,CAAQ;IAExC;;;OAGG;IACK,cAAc,GAAa,EAAE,CAAA;IAErC;;;OAGG;IACK,iBAAiB,GAAa,EAAE,CAAA;IAExC;;;OAGG;IACK,qBAAqB,GAAa,EAAE,CAAA;IAE5C;;;OAGG;IACc,oBAAoB,GAAa,EAAE,CAAA;IAEpD;;;;OAIG;IACK,YAAY,CAAK;IAEzB;;;OAGG;IACc,WAAW,GAAG,CAAC,CAAA;IAEhC;;;OAGG;IACH,YAAa,SAAkD,EAAE,eAAe,GAAG,OAAO;QACxF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAA;QAEtC,8DAA8D;QAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAE7C;YAAC,IAAY,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,CAAA;YACtD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,IAAI,CAAC;YACH,2BAA2B;YAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvC,MAAM,IAAI,GAA4B,IAAY,CAAC,IAAI,CAAC,CAAA;gBACxD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;oBACjB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACd,CAAC;gBACD,gEAAgE;gBAChE,OAAQ,IAAY,CAAC,IAAI,CAAC,CAAA;YAC5B,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC1C,MAAM,IAAI,GAA4B,IAAY,CAAC,IAAI,CAAC,CAAA;gBACxD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;oBACjB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACd,CAAC;gBACD,gEAAgE;gBAChE,OAAQ,IAAY,CAAC,IAAI,CAAC,CAAA;YAC5B,CAAC;YAED,sBAAsB;YACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAA4B,IAAY,CAAC,IAAI,CAAC,CAAA;gBACxD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;oBACjB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACd,CAAC;gBACD,gEAAgE;gBAChE,OAAQ,IAAY,CAAC,IAAI,CAAC,CAAA;YAC5B,CAAC;YAED,iCAAiC;YACjC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAA;YACxB,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAA;YAC3B,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAA;QACjC,CAAC;QAAC,OAAO,qBAAqB,EAAE,CAAC;YAC/B,+EAA+E;YAC/E,iFAAiF;YACjF,kFAAkF;YAClF,mEAAmE;QACrE,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;gBAC9B,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;gBAC/B,IAAI,CAAC,YAAY,GAAG,SAAS,CAAA;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,sBAAsB;QAC5B,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACjC,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,UAAU,EAAE,CAAA;QACnB,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;IAC1B,CAAC;IAED;;;;OAIG;IACK,QAAQ,CAAE,CAAa,EAAE,CAAa;QAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACtB,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED;;;;OAIG;IACK,kBAAkB,CAAE,QAAoB;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAA;QAChE,MAAM,MAAM,GAAiB,EAAE,CAAA;QAC/B,IAAI,MAAM,GAAG,CAAC,CAAA;QAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;YAC9E,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAA;YAClD,MAAM,IAAI,IAAI,CAAA;QAChB,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;OAIG;IACK,uBAAuB;QAC7B,IAAI,CAAC;YACH,MAAM,WAAW,GAAiB,EAAE,CAAA;YACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAI,IAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAe,CAAA;gBACpE,MAAM,QAAQ,GAAI,IAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAe,CAAA;gBACvE,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAChF,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAClD,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC5B,CAAC;YACD,8CAA8C;YAC9C,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;YACrE,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;gBACvB,8BAA8B;gBAC9B,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAA;YAC1C,IAAI,MAAM,GAAG,CAAC,CAAA;YACd,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;gBACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA;gBACtB,sCAAsC;gBACtC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACf,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,qBAAqB,EAAE,CAAC;YAC/B,iFAAiF;YACjF,qFAAqF;YACrF,iFAAiF;YACjF,yEAAyE;YACzE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC5B,sDAAsD;QACtD,MAAM,SAAS,GAAG,WAAK,CAAC,KAAK,CAAC,IAAA,YAAM,EAAC,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,UAAU,GAAG,IAAA,YAAM,EAAC,CAAC,CAAC,CAAA;QAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAA;QACzF,OAAO,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAA;IACpC,CAAC;IAED;;;OAGG;IACK,uBAAuB,CAAE,OAAmB;QAClD,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;QAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAChF,CAAC;QACD,gCAAgC;QAChC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;QACnC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;QAClC,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,gBAAgB,CAAE,MAAc;QAC5C,sDAAsD;QACtD,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,WAAW,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAA;YAClD,IAAI,WAAW,EAAE,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC/B,4CAA4C;gBAC5C,kFAAkF;gBAClF,MAAM,MAAM,GAAG,WAAK,CAAC,KAAK,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAA,CAAC,eAAe;gBAC5D,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,sBAAsB;gBAC1C,IAAI,CAAC,sBAAsB,EAAE,CAAA;gBAC7B,OAAO,IAAI,gBAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YACtC,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAE/C,uDAAuD;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAA;QAEzD,+DAA+D;QAC/D,IAAI,CAAC,UAAU,EAAE,CAAA;QAEjB,gBAAgB;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAEhD,mDAAmD;QACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAA;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAA;YAC7C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACnC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAEpC,sDAAsD;YACtD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAA,YAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;YACjD,6BAA6B;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAGpC;YAAC,IAAY,CAAC,SAAS,CAAC,GAAG,GAAG,CAC9B;YAAC,IAAY,CAAC,OAAO,CAAC,GAAG,GAAG,CAAA;QAC/B,CAAC;QAED,qEAAqE;QACrE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAC9C;YAAC,IAAY,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAA,YAAM,EAAC,EAAE,CAAC,CAAC,CAAA;YACvD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC5C,CAAC;QAED,8BAA8B;QAC9B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAEhB,uBAAuB;QACvB,IAAI,CAAC,sBAAsB,EAAE,CAAA;QAE7B,sDAAsD;QACtD,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,YAAY,CAAE,IAAsB;QACxC,OAAO,MAAM,IAAI,iBAAW,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAA0B,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC/G,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,IAAsC;QAEtC,OAAO,MAAM,IAAI,iBAAW,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAA0B,CAAC,CAAC,CAAC,4BAA4B,CACrH,IAAI,CACL,CAAA;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAE,IAAkC;QAChE,OAAO,MAAM,IAAI,iBAAW,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAA0B,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAA;IAC3H,CAAC;IAED,KAAK,CAAC,OAAO,CAAE,IAAuB;QACpC,OAAO,MAAM,IAAI,iBAAW,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1G,CAAC;IAED,KAAK,CAAC,OAAO,CAAE,IAAuB;QACpC,OAAO,MAAM,IAAI,iBAAW,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1G,CAAC;IAED,KAAK,CAAC,UAAU,CAAE,IAAoB;QACpC,OAAO,MAAM,IAAI,iBAAW,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAA0B,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAC7G,CAAC;IAED,KAAK,CAAC,UAAU,CAAE,IAAoB;QACpC,OAAO,MAAM,IAAI,iBAAW,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAA0B,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAC7G,CAAC;IAED,KAAK,CAAC,eAAe,CAAE,IAAyB;QAC9C,OAAO,MAAM,IAAI,iBAAW,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAA0B,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAClH,CAAC;IAED,KAAK,CAAC,eAAe,CAAE,IAAyB;QAC9C,OAAO,MAAM,IAAI,iBAAW,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAA0B,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAClH,CAAC;CACF;AAxVD,oDAwVC"}