@bsv/wallet-toolbox 1.1.23 → 1.1.25

package/out/src/__tests/WalletPermissionsManager.tokens.test.js

@@ -0,0 +1,460 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const globals_1 = require("@jest/globals");
+const WalletPermissionsManager_fixtures_1 = require("./WalletPermissionsManager.fixtures");
+const WalletPermissionsManager_1 = require("../WalletPermissionsManager");
+// Re-mock @bsv/sdk with our fixture classes (MockTransaction, MockLockingScript, etc.)
+globals_1.jest.mock('@bsv/sdk', () => WalletPermissionsManager_fixtures_1.MockedBSV_SDK);
+(0, globals_1.describe)('WalletPermissionsManager - On-Chain Token Creation, Renewal & Revocation', () => {
+    let underlying;
+    let manager;
+    (0, globals_1.beforeEach)(() => {
+        // Fresh mock wallet before each test
+        underlying = (0, WalletPermissionsManager_fixtures_1.mockUnderlyingWallet)();
+        manager = new WalletPermissionsManager_1.WalletPermissionsManager(underlying, 'admin.domain.com');
+    });
+    (0, globals_1.afterEach)(() => {
+        globals_1.jest.clearAllMocks();
+    });
+    /* ------------------------------------------------------------------------
+     *  1) UNIT TESTS: buildPushdropFields() correctness
+     * ------------------------------------------------------------------------
+     *   We directly call the manager’s internal buildPushdropFields(...) via
+     *   a cast to "any" so we can test each permission type’s field ordering,
+     *   encryption calls, and final arrays.
+     * ------------------------------------------------------------------------
+     */
+    (0, globals_1.describe)('buildPushdropFields() - unit tests for each permission type', () => {
+        // We’ll cast the manager to `any` to access the private method.
+        const privateManager = () => manager;
+        (0, globals_1.it)('should build correct fields for a protocol token (DPACP)', async () => {
+            const request = {
+                type: 'protocol',
+                originator: 'some-app.com',
+                privileged: true,
+                protocolID: [2, 'myProto'],
+                counterparty: 'some-other-pubkey',
+                reason: 'test-protocol-creation'
+            };
+            const expiry = 1234567890;
+            // Because manager.encryptPermissionTokenField calls underlying.encrypt,
+            // we can observe how many times it's called & with what plaintext.
+            underlying.encrypt.mockClear();
+            const fields = await privateManager().buildPushdropFields(request, expiry);
+            // We expect 6 encryption calls (domain, expiry, privileged, secLevel, protoName, cpty).
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(6);
+            // The final array must have length=6
+            (0, globals_1.expect)(fields).toHaveLength(6);
+            // Confirm the 1st call was the domain
+            (0, globals_1.expect)(underlying.encrypt.mock.calls[0][0].plaintext).toEqual(globals_1.expect.arrayContaining([...'some-app.com'].map(c => c.charCodeAt(0))));
+            // Confirm the 2nd call was the expiry, as a string
+            (0, globals_1.expect)(underlying.encrypt.mock.calls[1][0].plaintext).toEqual(globals_1.expect.arrayContaining([...'1234567890'].map(c => c.charCodeAt(0))));
+            // 3rd => privileged? 'true'
+            (0, globals_1.expect)(underlying.encrypt.mock.calls[2][0].plaintext).toEqual(globals_1.expect.arrayContaining([...'true'].map(c => c.charCodeAt(0))));
+            // 4th => security level => '2'
+            (0, globals_1.expect)(underlying.encrypt.mock.calls[3][0].plaintext).toEqual(globals_1.expect.arrayContaining([...'2'].map(c => c.charCodeAt(0))));
+            // 5th => protoName => 'myProto'
+            (0, globals_1.expect)(underlying.encrypt.mock.calls[4][0].plaintext).toEqual(globals_1.expect.arrayContaining([...'myProto'].map(c => c.charCodeAt(0))));
+            // 6th => counterparty => 'some-other-pubkey'
+            (0, globals_1.expect)(underlying.encrypt.mock.calls[5][0].plaintext).toEqual(globals_1.expect.arrayContaining([...'some-other-pubkey'].map(c => c.charCodeAt(0))));
+        });
+        (0, globals_1.it)('should build correct fields for a basket token (DBAP)', async () => {
+            const request = {
+                type: 'basket',
+                originator: 'origin.example',
+                basket: 'someBasket',
+                reason: 'basket usage'
+            };
+            const expiry = 999999999;
+            underlying.encrypt.mockClear();
+            const fields = await privateManager().buildPushdropFields(request, expiry);
+            // We expect 3 encryption calls: domain, expiry, basket
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(3);
+            (0, globals_1.expect)(fields).toHaveLength(3);
+        });
+        (0, globals_1.it)('should build correct fields for a certificate token (DCAP)', async () => {
+            const request = {
+                type: 'certificate',
+                originator: 'cert-user.org',
+                privileged: false,
+                certificate: {
+                    verifier: '02abcdef...',
+                    certType: 'KYC',
+                    fields: ['name', 'dob']
+                },
+                reason: 'certificate usage'
+            };
+            const expiry = 2222222222;
+            underlying.encrypt.mockClear();
+            const fields = await privateManager().buildPushdropFields(request, expiry);
+            // DP = domain, expiry, privileged, certType, fieldsJson, verifier
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(6);
+            (0, globals_1.expect)(fields).toHaveLength(6);
+            // 5th encryption call is the fields JSON => ["name","dob"]
+            const fifthCallPlaintext = underlying.encrypt.mock.calls[4][0].plaintext;
+            const str = String.fromCharCode(...fifthCallPlaintext);
+            (0, globals_1.expect)(str).toContain('"name"');
+            (0, globals_1.expect)(str).toContain('"dob"');
+        });
+        (0, globals_1.it)('should build correct fields for a spending token (DSAP)', async () => {
+            const request = {
+                type: 'spending',
+                originator: 'money-spender.com',
+                spending: { satoshis: 5000 },
+                reason: 'monthly spending'
+            };
+            const expiry = 0; // DSAP typically not time-limited, but manager can pass 0.
+            underlying.encrypt.mockClear();
+            const fields = await privateManager().buildPushdropFields(request, expiry, 
+            /*amount=*/ 10000);
+            // For DSAP: domain + authorizedAmount (2 fields)
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(2);
+            (0, globals_1.expect)(fields).toHaveLength(2);
+            // The second encryption call is '10000'
+            const secondPlaintext = underlying.encrypt.mock.calls[1][0].plaintext;
+            const asString = String.fromCharCode(...secondPlaintext);
+            (0, globals_1.expect)(asString).toBe('10000');
+        });
+    });
+    /* ------------------------------------------------------------------------
+     *  2) INTEGRATION TESTS: Token Creation
+     * ------------------------------------------------------------------------
+     *  We'll simulate a user request flow, then call `grantPermission` with
+     *  ephemeral=false to see if createAction is called with the correct script,
+     *  basket name, tags, etc. We also decode the script to confirm it has the
+     *  correct (encrypted) fields.
+     * ------------------------------------------------------------------------
+     */
+    (0, globals_1.describe)('Token Creation - integration tests', () => {
+        (0, globals_1.it)('should create a new protocol token with the correct basket, script, and tags', async () => {
+            // 1) Simulate the manager having an active request for a protocol token.
+            const request = {
+                type: 'protocol',
+                originator: 'app.example',
+                privileged: false,
+                protocolID: [1, 'testProto'],
+                counterparty: 'self',
+                reason: 'Need protocol usage'
+            };
+            // We'll emulate that the manager queued it:
+            const key = manager.buildRequestKey(request);
+            manager.activeRequests.set(key, {
+                request,
+                pending: [{ resolve: () => { }, reject: () => { } }]
+            });
+            // 2) Grant the permission with ephemeral=false => must create the token
+            underlying.createAction.mockClear();
+            await manager.grantPermission({
+                requestID: key,
+                expiry: 999999, // set some expiry
+                ephemeral: false
+            });
+            // 3) Expect createAction to have been called once with a single output
+            (0, globals_1.expect)(underlying.createAction).toHaveBeenCalledTimes(1);
+            const actionArgs = underlying.createAction.mock.calls[0][0];
+            (0, globals_1.expect)(actionArgs.outputs).toHaveLength(1);
+            // The basket name must be "admin protocol-permission" as per BASKET_MAP
+            (0, globals_1.expect)(actionArgs.outputs[0].basket).toBe('admin protocol-permission');
+            // The tags must contain e.g. "originator app.example", "protocolName testProto", etc.
+            const outputTags = actionArgs.outputs[0].tags;
+            (0, globals_1.expect)(outputTags).toEqual(globals_1.expect.arrayContaining([
+                'originator app.example',
+                'privileged false',
+                'protocolName testProto',
+                'protocolSecurityLevel 1',
+                'counterparty self'
+            ]));
+            // The lockingScript is built by "PushDrop.lock(...)" with 6 fields
+            const lockingScriptHex = actionArgs.outputs[0].lockingScript;
+            (0, globals_1.expect)(lockingScriptHex).toBeTruthy();
+            // Because we’re using our mock pushdrop, we might see an empty decode.
+            // In a real environment, you would decode and confirm the fields. Here we just confirm
+            // that the manager called the underlying encrypt 6 times, plus the script creation.
+            // Two more encrypt calls should have been made within createAction (metadata encryption
+            // of the top-level Action description, and the output's description) for a total of 8.
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(8);
+        });
+        (0, globals_1.it)('should create a new basket token (DBAP)', async () => {
+            const request = {
+                type: 'basket',
+                originator: 'shopper.com',
+                basket: 'myBasket',
+                reason: 'I want to store items'
+            };
+            const key = manager.buildRequestKey(request);
+            manager.activeRequests.set(key, {
+                request,
+                pending: [{ resolve() { }, reject() { } }]
+            });
+            underlying.createAction.mockClear();
+            await manager.grantPermission({
+                requestID: key,
+                ephemeral: false,
+                expiry: 123456789
+            });
+            (0, globals_1.expect)(underlying.createAction).toHaveBeenCalledTimes(1);
+            const { outputs } = underlying.createAction.mock.calls[0][0];
+            (0, globals_1.expect)(outputs).toHaveLength(1);
+            // "admin basket-access"
+            (0, globals_1.expect)(outputs[0].basket).toBe('admin basket-access');
+            (0, globals_1.expect)(outputs[0].tags).toEqual(globals_1.expect.arrayContaining(['originator shopper.com', 'basket myBasket']));
+            // 3 fields => domain, expiry, basket, plus two metadata calls (description, outputDescription)
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(5);
+        });
+        (0, globals_1.it)('should create a new certificate token (DCAP)', async () => {
+            const request = {
+                type: 'certificate',
+                originator: 'org.certs',
+                privileged: true,
+                certificate: {
+                    verifier: '02cccccc',
+                    certType: 'KYC',
+                    fields: ['name', 'id', 'photo']
+                },
+                reason: 'Present KYC docs'
+            };
+            const key = manager.buildRequestKey(request);
+            manager.activeRequests.set(key, {
+                request,
+                pending: [{ resolve() { }, reject() { } }]
+            });
+            underlying.createAction.mockClear();
+            await manager.grantPermission({
+                requestID: key,
+                ephemeral: false,
+                expiry: 44444444
+            });
+            (0, globals_1.expect)(underlying.createAction).toHaveBeenCalledTimes(1);
+            const { outputs } = underlying.createAction.mock.calls[0][0];
+            (0, globals_1.expect)(outputs[0].basket).toBe('admin certificate-access');
+            (0, globals_1.expect)(outputs[0].tags).toEqual(globals_1.expect.arrayContaining([
+                'originator org.certs',
+                'privileged true',
+                'type KYC',
+                'verifier 02cccccc'
+            ]));
+            // DP = domain, expiry, privileged, certType, fieldsJson, verifier => 6 encryption calls
+            // Two additional ones for metadata encryption (action description, output description) for 8 total.
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(8);
+        });
+        (0, globals_1.it)('should create a new spending authorization token (DSAP)', async () => {
+            const request = {
+                type: 'spending',
+                originator: 'spender.com',
+                spending: {
+                    satoshis: 9999
+                }
+            };
+            const key = manager.buildRequestKey(request);
+            manager.activeRequests.set(key, {
+                request,
+                pending: [{ resolve() { }, reject() { } }]
+            });
+            underlying.createAction.mockClear();
+            // We'll set "amount=20000" as the monthly limit
+            await manager.grantPermission({
+                requestID: key,
+                ephemeral: false,
+                amount: 20000
+            });
+            (0, globals_1.expect)(underlying.createAction).toHaveBeenCalledTimes(1);
+            const { outputs } = underlying.createAction.mock.calls[0][0];
+            // "admin spending-authorization"
+            (0, globals_1.expect)(outputs[0].basket).toBe('admin spending-authorization');
+            (0, globals_1.expect)(outputs[0].tags).toEqual(globals_1.expect.arrayContaining(['originator spender.com']));
+            // domain, amount => 2 calls, plus two metadata encryption calls (description, outputDescription)
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(4);
+        });
+    });
+    /* ------------------------------------------------------------------------
+     *  3) INTEGRATION TESTS: Token Renewal
+     * ------------------------------------------------------------------------
+     *   We test that renewing a token:
+     *     - Spends the old token with createAction input referencing oldToken.txid/index
+     *     - Produces a new token output in the same transaction with updated fields
+     * ------------------------------------------------------------------------
+     */
+    (0, globals_1.describe)('Token Renewal - integration tests', () => {
+        (0, globals_1.it)('should spend the old token input and create a new protocol token output with updated expiry', async () => {
+            // Suppose the user has an old protocol token:
+            const oldToken = {
+                txid: 'oldTokenTX',
+                outputIndex: 2,
+                outputScript: '76a914...ac', // not used by the mock
+                satoshis: 1,
+                originator: 'some-site.io',
+                expiry: 222222,
+                privileged: false,
+                securityLevel: 1,
+                protocol: 'coolProto',
+                counterparty: 'self'
+            };
+            // The user’s request to renew:
+            const request = {
+                type: 'protocol',
+                originator: 'some-site.io',
+                privileged: false,
+                protocolID: [1, 'coolProto'],
+                counterparty: 'self',
+                renewal: true,
+                previousToken: oldToken
+            };
+            // Manager normally calls requestPermissionFlow, but let's skip ahead:
+            // We'll place the request in activeRequests:
+            const key = manager.buildRequestKey(request);
+            manager.activeRequests.set(key, {
+                request,
+                pending: [{ resolve() { }, reject() { } }]
+            });
+            // Clear the mock calls, then renew with ephemeral=false
+            underlying.createAction.mockClear();
+            await manager.grantPermission({
+                requestID: key,
+                ephemeral: false,
+                expiry: 999999 // new expiry
+            });
+            // We expect createAction with:
+            //  - 1 input referencing oldToken "oldTokenTX.2"
+            //  - 1 output with the new script
+            (0, globals_1.expect)(underlying.createAction).toHaveBeenCalledTimes(1);
+            const createArgs = underlying.createAction.mock.calls[0][0];
+            (0, globals_1.expect)(createArgs.inputs).toHaveLength(1);
+            (0, globals_1.expect)(createArgs.inputs[0].outpoint).toBe('oldTokenTX.2');
+            (0, globals_1.expect)(createArgs.outputs).toHaveLength(1);
+            // The new basket is still "admin protocol-permission"
+            (0, globals_1.expect)(createArgs.outputs[0].basket).toBe('admin protocol-permission');
+            // And we must confirm "renew" means 6 encryption calls again
+            // Metadata encryption means three extra calls (inputDescription, outputDescription, and Action description)
+            // this means a total of 9.
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(9);
+        });
+        (0, globals_1.it)('should allow updating the authorizedAmount in DSAP renewal', async () => {
+            const oldToken = {
+                txid: 'dsap-old-tx',
+                outputIndex: 0,
+                outputScript: 'sample script',
+                satoshis: 1,
+                originator: 'spenderX.com',
+                authorizedAmount: 10000,
+                expiry: 0
+            };
+            const request = {
+                type: 'spending',
+                originator: 'spenderX.com',
+                spending: { satoshis: 3000 },
+                renewal: true,
+                previousToken: oldToken
+            };
+            const key = manager.buildRequestKey(request);
+            manager.activeRequests.set(key, {
+                request,
+                pending: [{ resolve() { }, reject() { } }]
+            });
+            underlying.createAction.mockClear();
+            // Renew with new monthly limit 50000
+            await manager.grantPermission({
+                requestID: key,
+                amount: 50000,
+                ephemeral: false
+            });
+            // check
+            const { inputs, outputs } = underlying.createAction.mock.calls[0][0];
+            (0, globals_1.expect)(inputs).toHaveLength(1);
+            (0, globals_1.expect)(inputs[0].outpoint).toBe('dsap-old-tx.0');
+            (0, globals_1.expect)(outputs).toHaveLength(1);
+            (0, globals_1.expect)(outputs[0].basket).toBe('admin spending-authorization');
+            // domain + new authorizedAmount => 2 encryption calls
+            // For metadata encryption, we have an input description, an output description, and a top-level description.
+            // This makes for a total of 5 calls.
+            (0, globals_1.expect)(underlying.encrypt).toHaveBeenCalledTimes(5);
+            // The second call’s plaintext should be "50000"
+            const secondPlaintext = underlying.encrypt.mock.calls[1][0].plaintext;
+            const asStr = String.fromCharCode(...secondPlaintext);
+            (0, globals_1.expect)(asStr).toBe('50000');
+        });
+    });
+    /* ------------------------------------------------------------------------
+     *  4) INTEGRATION TESTS: Token Revocation
+     * ------------------------------------------------------------------------
+     *   - Revoking a token means we build a transaction that consumes the old
+     *     token UTXO with no replacement output.
+     *   - Then we typically call signAction to finalize. The old token is no
+     *     longer listed as an unspent output.
+     * ------------------------------------------------------------------------
+     */
+    (0, globals_1.describe)('Token Revocation - integration tests', () => {
+        (0, globals_1.it)('should create a transaction that consumes (spends) the old token with no new outputs', async () => {
+            // A sample old token
+            const oldToken = {
+                txid: 'revocableToken.txid',
+                outputIndex: 1,
+                outputScript: 'fakePushdropScript',
+                satoshis: 1,
+                originator: 'shopper.com',
+                basketName: 'myBasket',
+                expiry: 1111111111
+            };
+            underlying.createAction.mockClear();
+            underlying.signAction.mockClear();
+            await manager.revokePermission(oldToken);
+            // 1) The manager calls createAction with an input referencing oldToken
+            (0, globals_1.expect)(underlying.createAction).toHaveBeenCalledTimes(1);
+            const createArgs = underlying.createAction.mock.calls[0][0];
+            (0, globals_1.expect)(createArgs.inputs).toHaveLength(1);
+            (0, globals_1.expect)(createArgs.inputs[0].outpoint).toBe('revocableToken.txid.1');
+            // No new outputs => final array is empty
+            (0, globals_1.expect)(createArgs.outputs || []).toHaveLength(0);
+            // 2) The manager then calls signAction to finalize the spending
+            (0, globals_1.expect)(underlying.signAction).toHaveBeenCalledTimes(1);
+            const signArgs = underlying.signAction.mock.calls[0][0];
+            // signArgs.reference should be the same from createAction’s result
+            (0, globals_1.expect)(signArgs.reference).toBe('mockReference');
+            // The “spends” object should have an unlockingScript at index 0.
+            (0, globals_1.expect)(signArgs.spends).toHaveProperty('0.unlockingScript');
+            // The content can be a mock, we just check it’s not empty
+            (0, globals_1.expect)(signArgs.spends[0].unlockingScript).toBeDefined();
+        });
+        (0, globals_1.it)('should remove the old token from listing after revocation', async () => {
+            // 1) Setup the underlying wallet to initially return the old token in listOutputs
+            const oldToken = {
+                txid: 'aaaa1111',
+                outputIndex: 0,
+                outputScript: 'some script',
+                satoshis: 1,
+                originator: 'example.com',
+                expiry: 999999,
+                basketName: 'myBasket'
+            };
+            // We mock listOutputs so that it returns the old token before revocation
+            underlying.listOutputs.mockResolvedValueOnce({
+                totalOutputs: 1,
+                outputs: [
+                    {
+                        outpoint: 'aaaa1111.0',
+                        lockingScript: 'some script',
+                        satoshis: 1,
+                        tags: ['originator example.com', 'basket myBasket']
+                    }
+                ]
+            });
+            // Confirm the manager sees it in listBasketAccess
+            const tokensBefore = await manager.listBasketAccess({
+                originator: 'example.com'
+            });
+            (0, globals_1.expect)(tokensBefore).toHaveLength(1);
+            (0, globals_1.expect)(tokensBefore[0].txid).toBe('aaaa1111');
+            // 2) Revoke the token
+            await manager.revokePermission(oldToken);
+            // 3) After revocation, mock the underlying wallet to show zero outputs
+            underlying.listOutputs.mockResolvedValue({
+                totalOutputs: 0,
+                outputs: []
+            });
+            const tokensAfter = await manager.listBasketAccess({
+                originator: 'example.com'
+            });
+            (0, globals_1.expect)(tokensAfter).toHaveLength(0);
+        });
+    });
+});
+//# sourceMappingURL=WalletPermissionsManager.tokens.test.js.map

package/out/src/__tests/WalletPermissionsManager.tokens.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WalletPermissionsManager.tokens.test.js","sourceRoot":"","sources":["../../../src/__tests/WalletPermissionsManager.tokens.test.ts"],"names":[],"mappings":";;AAAA,2CAOsB;AACtB,2FAG4C;AAC5C,0EAIoC;AAEpC,uFAAuF;AACvF,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,iDAAa,CAAC,CAAA;AAE1C,IAAA,kBAAQ,EAAC,0EAA0E,EAAE,GAAG,EAAE;IACxF,IAAI,UAAmD,CAAA;IACvD,IAAI,OAAiC,CAAA;IAErC,IAAA,oBAAU,EAAC,GAAG,EAAE;QACd,qCAAqC;QACrC,UAAU,GAAG,IAAA,wDAAoB,GAAE,CAAA;QACnC,OAAO,GAAG,IAAI,mDAAwB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,IAAA,mBAAS,EAAC,GAAG,EAAE;QACb,cAAI,CAAC,aAAa,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF;;;;;;;OAOG;IAEH,IAAA,kBAAQ,EAAC,6DAA6D,EAAE,GAAG,EAAE;QAC3E,gEAAgE;QAChE,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,OAAc,CAAA;QAE3C,IAAA,YAAE,EAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,cAAc;gBAC1B,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC;gBAC1B,YAAY,EAAE,mBAAmB;gBACjC,MAAM,EAAE,wBAAwB;aACjC,CAAA;YACD,MAAM,MAAM,GAAG,UAAU,CAAA;YAEzB,wEAAwE;YACxE,mEAAmE;YACnE,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,CAAA;YAE9B,MAAM,MAAM,GAAe,MAAM,cAAc,EAAE,CAAC,mBAAmB,CACnE,OAAO,EACP,MAAM,CACP,CAAA;YAED,wFAAwF;YACxF,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAEnD,qCAAqC;YACrC,IAAA,gBAAM,EAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YAE9B,sCAAsC;YACtC,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAC3D,gBAAM,CAAC,eAAe,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CACtE,CAAA;YAED,mDAAmD;YACnD,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAC3D,gBAAM,CAAC,eAAe,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CACpE,CAAA;YAED,4BAA4B;YAC5B,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAC3D,gBAAM,CAAC,eAAe,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAC9D,CAAA;YAED,+BAA+B;YAC/B,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAC3D,gBAAM,CAAC,eAAe,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3D,CAAA;YAED,gCAAgC;YAChC,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAC3D,gBAAM,CAAC,eAAe,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CACjE,CAAA;YAED,6CAA6C;YAC7C,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAC3D,gBAAM,CAAC,eAAe,CACpB,CAAC,GAAG,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CACnD,CACF,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,IAAA,YAAE,EAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,gBAAgB;gBAC5B,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,cAAc;aACvB,CAAA;YACD,MAAM,MAAM,GAAG,SAAS,CAAA;YAExB,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,CAAA;YAE9B,MAAM,MAAM,GAAe,MAAM,cAAc,EAAE,CAAC,mBAAmB,CACnE,OAAO,EACP,MAAM,CACP,CAAA;YAED,uDAAuD;YACvD,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACnD,IAAA,gBAAM,EAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;QAEF,IAAA,YAAE,EAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,KAAK;gBACjB,WAAW,EAAE;oBACX,QAAQ,EAAE,aAAa;oBACvB,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;iBACxB;gBACD,MAAM,EAAE,mBAAmB;aAC5B,CAAA;YACD,MAAM,MAAM,GAAG,UAAU,CAAA;YAEzB,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,CAAA;YAE9B,MAAM,MAAM,GAAe,MAAM,cAAc,EAAE,CAAC,mBAAmB,CACnE,OAAO,EACP,MAAM,CACP,CAAA;YAED,kEAAkE;YAClE,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACnD,IAAA,gBAAM,EAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YAE9B,2DAA2D;YAC3D,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACxE,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,kBAAkB,CAAC,CAAA;YACtD,IAAA,gBAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC/B,IAAA,gBAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;QAEF,IAAA,YAAE,EAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,mBAAmB;gBAC/B,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC5B,MAAM,EAAE,kBAAkB;aAC3B,CAAA;YACD,MAAM,MAAM,GAAG,CAAC,CAAA,CAAC,2DAA2D;YAE5E,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,CAAA;YAE9B,MAAM,MAAM,GAAe,MAAM,cAAc,EAAE,CAAC,mBAAmB,CACnE,OAAO,EACP,MAAM;YACN,WAAW,CAAC,KAAK,CAClB,CAAA;YAED,iDAAiD;YACjD,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACnD,IAAA,gBAAM,EAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YAE9B,wCAAwC;YACxC,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,CAAC,CAAA;YACxD,IAAA,gBAAM,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF;;;;;;;;OAQG;IAEH,IAAA,kBAAQ,EAAC,oCAAoC,EAAE,GAAG,EAAE;QAClD,IAAA,YAAE,EAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;YAC5F,yEAAyE;YACzE,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,aAAa;gBACzB,UAAU,EAAE,KAAK;gBACjB,UAAU,EAAE,CAAC,CAAC,EAAE,WAAW,CAAC;gBAC5B,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,qBAAqB;aAC9B,CAAA;YAED,4CAA4C;YAC5C,MAAM,GAAG,GAAI,OAAe,CAAC,eAAe,CAAC,OAAO,CAAC,CACpD;YAAC,OAAe,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;gBACxC,OAAO;gBACP,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;aACnD,CAAC,CAAA;YAEF,wEAAwE;YACxE,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,CAAA;YACnC,MAAM,OAAO,CAAC,eAAe,CAAC;gBAC5B,SAAS,EAAE,GAAG;gBACd,MAAM,EAAE,MAAM,EAAE,kBAAkB;gBAClC,SAAS,EAAE,KAAK;aACjB,CAAC,CAAA;YAEF,uEAAuE;YACvE,IAAA,gBAAM,EAAC,UAAU,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACxD,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3D,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YAE1C,wEAAwE;YACxE,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;YAEtE,sFAAsF;YACtF,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC7C,IAAA,gBAAM,EAAC,UAAU,CAAC,CAAC,OAAO,CACxB,gBAAM,CAAC,eAAe,CAAC;gBACrB,wBAAwB;gBACxB,kBAAkB;gBAClB,wBAAwB;gBACxB,yBAAyB;gBACzB,mBAAmB;aACpB,CAAC,CACH,CAAA;YAED,mEAAmE;YACnE,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAA;YAC5D,IAAA,gBAAM,EAAC,gBAAgB,CAAC,CAAC,UAAU,EAAE,CAAA;YAErC,uEAAuE;YACvE,uFAAuF;YACvF,oFAAoF;YACpF,wFAAwF;YACxF,uFAAuF;YACvF,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,IAAA,YAAE,EAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,aAAa;gBACzB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,uBAAuB;aAChC,CAAA;YACD,MAAM,GAAG,GAAI,OAAe,CAAC,eAAe,CAAC,OAAO,CAAC,CACpD;YAAC,OAAe,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;gBACxC,OAAO;gBACP,OAAO,EAAE,CAAC,EAAE,OAAO,KAAI,CAAC,EAAE,MAAM,KAAI,CAAC,EAAE,CAAC;aACzC,CAAC,CAAA;YAEF,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,CAAA;YAEnC,MAAM,OAAO,CAAC,eAAe,CAAC;gBAC5B,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAA;YACF,IAAA,gBAAM,EAAC,UAAU,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAExD,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5D,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YAC/B,wBAAwB;YACxB,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;YACrD,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC7B,gBAAM,CAAC,eAAe,CAAC,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAAC,CACtE,CAAA;YACD,+FAA+F;YAC/F,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,IAAA,YAAE,EAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,WAAW;gBACvB,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE;oBACX,QAAQ,EAAE,UAAU;oBACpB,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;iBAChC;gBACD,MAAM,EAAE,kBAAkB;aAC3B,CAAA;YACD,MAAM,GAAG,GAAI,OAAe,CAAC,eAAe,CAAC,OAAO,CAAC,CACpD;YAAC,OAAe,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;gBACxC,OAAO;gBACP,OAAO,EAAE,CAAC,EAAE,OAAO,KAAI,CAAC,EAAE,MAAM,KAAI,CAAC,EAAE,CAAC;aACzC,CAAC,CAAA;YAEF,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,CAAA;YAEnC,MAAM,OAAO,CAAC,eAAe,CAAC;gBAC5B,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;YAEF,IAAA,gBAAM,EAAC,UAAU,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACxD,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5D,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;YAC1D,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC7B,gBAAM,CAAC,eAAe,CAAC;gBACrB,sBAAsB;gBACtB,iBAAiB;gBACjB,UAAU;gBACV,mBAAmB;aACpB,CAAC,CACH,CAAA;YACD,wFAAwF;YACxF,oGAAoG;YACpG,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,IAAA,YAAE,EAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,aAAa;gBACzB,QAAQ,EAAE;oBACR,QAAQ,EAAE,IAAI;iBACf;aACF,CAAA;YACD,MAAM,GAAG,GAAI,OAAe,CAAC,eAAe,CAAC,OAAO,CAAC,CACpD;YAAC,OAAe,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;gBACxC,OAAO;gBACP,OAAO,EAAE,CAAC,EAAE,OAAO,KAAI,CAAC,EAAE,MAAM,KAAI,CAAC,EAAE,CAAC;aACzC,CAAC,CAAA;YAEF,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,CAAA;YAEnC,gDAAgD;YAChD,MAAM,OAAO,CAAC,eAAe,CAAC;gBAC5B,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;YAEF,IAAA,gBAAM,EAAC,UAAU,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACxD,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5D,iCAAiC;YACjC,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;YAC9D,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC7B,gBAAM,CAAC,eAAe,CAAC,CAAC,wBAAwB,CAAC,CAAC,CACnD,CAAA;YACD,iGAAiG;YACjG,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF;;;;;;;OAOG;IAEH,IAAA,kBAAQ,EAAC,mCAAmC,EAAE,GAAG,EAAE;QACjD,IAAA,YAAE,EAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;YAC3G,8CAA8C;YAC9C,MAAM,QAAQ,GAAoB;gBAChC,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,CAAC;gBACd,YAAY,EAAE,aAAa,EAAE,uBAAuB;gBACpD,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,cAAc;gBAC1B,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,KAAK;gBACjB,aAAa,EAAE,CAAC;gBAChB,QAAQ,EAAE,WAAW;gBACrB,YAAY,EAAE,MAAM;aACrB,CAAA;YAED,+BAA+B;YAC/B,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,cAAc;gBAC1B,UAAU,EAAE,KAAK;gBACjB,UAAU,EAAE,CAAC,CAAC,EAAE,WAAW,CAAC;gBAC5B,YAAY,EAAE,MAAM;gBACpB,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,QAAQ;aACxB,CAAA;YAED,sEAAsE;YACtE,6CAA6C;YAC7C,MAAM,GAAG,GAAI,OAAe,CAAC,eAAe,CAAC,OAAO,CAAC,CACpD;YAAC,OAAe,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;gBACxC,OAAO;gBACP,OAAO,EAAE,CAAC,EAAE,OAAO,KAAI,CAAC,EAAE,MAAM,KAAI,CAAC,EAAE,CAAC;aACzC,CAAC,CAAA;YAEF,wDAAwD;YACxD,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,CAAA;YAEnC,MAAM,OAAO,CAAC,eAAe,CAAC;gBAC5B,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,MAAM,CAAC,aAAa;aAC7B,CAAC,CAAA;YAEF,+BAA+B;YAC/B,iDAAiD;YACjD,kCAAkC;YAClC,IAAA,gBAAM,EAAC,UAAU,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACxD,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3D,IAAA,gBAAM,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACzC,IAAA,gBAAM,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAC1D,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YAC1C,sDAAsD;YACtD,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;YAEtE,6DAA6D;YAC7D,4GAA4G;YAC5G,2BAA2B;YAC3B,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,IAAA,YAAE,EAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,QAAQ,GAAoB;gBAChC,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,CAAC;gBACd,YAAY,EAAE,eAAe;gBAC7B,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,cAAc;gBAC1B,gBAAgB,EAAE,KAAK;gBACvB,MAAM,EAAE,CAAC;aACV,CAAA;YACD,MAAM,OAAO,GAAsB;gBACjC,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,cAAc;gBAC1B,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC5B,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,QAAQ;aACxB,CAAA;YACD,MAAM,GAAG,GAAI,OAAe,CAAC,eAAe,CAAC,OAAO,CAAC,CACpD;YAAC,OAAe,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;gBACxC,OAAO;gBACP,OAAO,EAAE,CAAC,EAAE,OAAO,KAAI,CAAC,EAAE,MAAM,KAAI,CAAC,EAAE,CAAC;aACzC,CAAC,CAAA;YAEF,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,CAAA;YAEnC,qCAAqC;YACrC,MAAM,OAAO,CAAC,eAAe,CAAC;gBAC5B,SAAS,EAAE,GAAG;gBACd,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,KAAK;aACjB,CAAC,CAAA;YAEF,QAAQ;YACR,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACpE,IAAA,gBAAM,EAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YAC9B,IAAA,gBAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YAEhD,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YAC/B,IAAA,gBAAM,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;YAE9D,sDAAsD;YACtD,6GAA6G;YAC7G,qCAAqC;YACrC,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACnD,gDAAgD;YAChD,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACrE,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,eAAe,CAAC,CAAA;YACrD,IAAA,gBAAM,EAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF;;;;;;;;OAQG;IAEH,IAAA,kBAAQ,EAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,IAAA,YAAE,EAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;YACpG,qBAAqB;YACrB,MAAM,QAAQ,GAAoB;gBAChC,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,CAAC;gBACd,YAAY,EAAE,oBAAoB;gBAClC,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,aAAa;gBACzB,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAE,UAAU;aACnB,CAAA;YAED,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,CAAA;YACnC,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,CAAA;YAEjC,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YAExC,uEAAuE;YACvE,IAAA,gBAAM,EAAC,UAAU,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACxD,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3D,IAAA,gBAAM,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACzC,IAAA,gBAAM,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;YAEnE,yCAAyC;YACzC,IAAA,gBAAM,EAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YAEhD,gEAAgE;YAChE,IAAA,gBAAM,EAAC,UAAU,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACvD,mEAAmE;YACnE,IAAA,gBAAM,EAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YAEhD,iEAAiE;YACjE,IAAA,gBAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAA;YAC3D,0DAA0D;YAC1D,IAAA,gBAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1D,CAAC,CAAC,CAAA;QAEF,IAAA,YAAE,EAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,kFAAkF;YAClF,MAAM,QAAQ,GAAoB;gBAChC,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,CAAC;gBACd,YAAY,EAAE,aAAa;gBAC3B,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,aAAa;gBACzB,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,UAAU;aACvB,CAAA;YACD,yEAAyE;YACzE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC;gBAC3C,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE;oBACP;wBACE,QAAQ,EAAE,YAAY;wBACtB,aAAa,EAAE,aAAa;wBAC5B,QAAQ,EAAE,CAAC;wBACX,IAAI,EAAE,CAAC,wBAAwB,EAAE,iBAAiB,CAAC;qBACpD;iBACF;aACF,CAAC,CAAA;YAEF,kDAAkD;YAClD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC;gBAClD,UAAU,EAAE,aAAa;aAC1B,CAAC,CAAA;YACF,IAAA,gBAAM,EAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACpC,IAAA,gBAAM,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAE7C,sBAAsB;YACtB,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YAExC,uEAAuE;YACvE,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC;gBACvC,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,EAAE;aACZ,CAAC,CAAA;YAEF,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC;gBACjD,UAAU,EAAE,aAAa;aAC1B,CAAC,CAAA;YACF,IAAA,gBAAM,EAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/out/src/index.all.d.ts

@@ -1,11 +1,19 @@
 export * as sdk from './sdk/index';
 export * from './utility/index.all';
 export * from './Wallet';
-export { SetupClient, KeyPairAddress, SetupEnv, SetupWalletArgs, SetupWallet, SetupWalletClient, SetupWalletClientArgs } from './SetupClient';
 export * from './Setup';
 export * from './signer/WalletSigner';
 export * from './storage/index.all';
 export * from './services/Services';
 export * from './monitor/Monitor';
 export * from './monitor/MonitorDaemon';
+export * from './WalletPermissionsManager';
+export * from './CWIStyleWalletManager';
+export * from './WalletAuthenticationManager';
+export * from './sdk/PrivilegedKeyManager';
+export * from './SimpleWalletManager';
+export * from './wab-client/WABClient';
+export * from './wab-client/auth-method-interactors/TwilioPhoneInteractor';
+export * from './wab-client/auth-method-interactors/PersonaIDInteractor';
+export * from './wab-client/auth-method-interactors/AuthMethodInteractor';
 //# sourceMappingURL=index.all.d.ts.map

package/out/src/index.all.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.all.d.ts","sourceRoot":"","sources":["../../src/index.all.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,UAAU,CAAA;AACxB,OAAO,EACL,WAAW,EACX,cAAc,EACd,QAAQ,EACR,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,eAAe,CAAA;AACtB,cAAc,SAAS,CAAA;AACvB,cAAc,uBAAuB,CAAA;AACrC,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,yBAAyB,CAAA"}
+{"version":3,"file":"index.all.d.ts","sourceRoot":"","sources":["../../src/index.all.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAClC,cAAc,qBAAqB,CAAA;AACnC,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,uBAAuB,CAAA;AACrC,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,yBAAyB,CAAA;AACvC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,yBAAyB,CAAA;AACvC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AACtC,cAAc,4DAA4D,CAAA;AAC1E,cAAc,0DAA0D,CAAA;AACxE,cAAc,2DAA2D,CAAA"}

package/out/src/index.all.js

@@ -36,16 +36,23 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SetupClient = exports.sdk = void 0;
+exports.sdk = void 0;
 exports.sdk = __importStar(require("./sdk/index"));
 __exportStar(require("./utility/index.all"), exports);
 __exportStar(require("./Wallet"), exports);
-var SetupClient_1 = require("./SetupClient");
-Object.defineProperty(exports, "SetupClient", { enumerable: true, get: function () { return SetupClient_1.SetupClient; } });
 __exportStar(require("./Setup"), exports);
 __exportStar(require("./signer/WalletSigner"), exports);
 __exportStar(require("./storage/index.all"), exports);
 __exportStar(require("./services/Services"), exports);
 __exportStar(require("./monitor/Monitor"), exports);
 __exportStar(require("./monitor/MonitorDaemon"), exports);
+__exportStar(require("./WalletPermissionsManager"), exports);
+__exportStar(require("./CWIStyleWalletManager"), exports);
+__exportStar(require("./WalletAuthenticationManager"), exports);
+__exportStar(require("./sdk/PrivilegedKeyManager"), exports);
+__exportStar(require("./SimpleWalletManager"), exports);
+__exportStar(require("./wab-client/WABClient"), exports);
+__exportStar(require("./wab-client/auth-method-interactors/TwilioPhoneInteractor"), exports);
+__exportStar(require("./wab-client/auth-method-interactors/PersonaIDInteractor"), exports);
+__exportStar(require("./wab-client/auth-method-interactors/AuthMethodInteractor"), exports);
 //# sourceMappingURL=index.all.js.map

package/out/src/index.all.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.all.js","sourceRoot":"","sources":["../../src/index.all.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAkC;AAClC,sDAAmC;AACnC,2CAAwB;AACxB,6CAQsB;AAPpB,0GAAA,WAAW,OAAA;AAQb,0CAAuB;AACvB,wDAAqC;AACrC,sDAAmC;AACnC,sDAAmC;AACnC,oDAAiC;AACjC,0DAAuC"}
+{"version":3,"file":"index.all.js","sourceRoot":"","sources":["../../src/index.all.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAkC;AAClC,sDAAmC;AACnC,2CAAwB;AACxB,0CAAuB;AACvB,wDAAqC;AACrC,sDAAmC;AACnC,sDAAmC;AACnC,oDAAiC;AACjC,0DAAuC;AACvC,6DAA0C;AAC1C,0DAAuC;AACvC,gEAA6C;AAC7C,6DAA0C;AAC1C,wDAAqC;AACrC,yDAAsC;AACtC,6FAA0E;AAC1E,2FAAwE;AACxE,4FAAyE"}

package/out/src/index.client.d.ts

@@ -1,9 +1,17 @@
 export * as sdk from './sdk/index';
 export * from './utility/index.client';
 export * from './Wallet';
-export { SetupClient } from './SetupClient';
 export * from './signer/WalletSigner';
 export * from './storage/index.client';
 export * from './services/Services';
 export * from './monitor/Monitor';
+export * from './WalletPermissionsManager';
+export * from './CWIStyleWalletManager';
+export * from './WalletAuthenticationManager';
+export * from './sdk/PrivilegedKeyManager';
+export * from './SimpleWalletManager';
+export * from './wab-client/WABClient';
+export * from './wab-client/auth-method-interactors/TwilioPhoneInteractor';
+export * from './wab-client/auth-method-interactors/PersonaIDInteractor';
+export * from './wab-client/auth-method-interactors/AuthMethodInteractor';
 //# sourceMappingURL=index.client.d.ts.map

package/out/src/index.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../src/index.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAClC,cAAc,wBAAwB,CAAA;AACtC,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../src/index.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAA;AAClC,cAAc,wBAAwB,CAAA;AACtC,cAAc,UAAU,CAAA;AACxB,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,yBAAyB,CAAA;AACvC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,4BAA4B,CAAA;AAC1C,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AACtC,cAAc,4DAA4D,CAAA;AAC1E,cAAc,0DAA0D,CAAA;AACxE,cAAc,2DAA2D,CAAA"}

package/out/src/index.client.js

@@ -36,14 +36,21 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SetupClient = exports.sdk = void 0;
+exports.sdk = void 0;
 exports.sdk = __importStar(require("./sdk/index"));
 __exportStar(require("./utility/index.client"), exports);
 __exportStar(require("./Wallet"), exports);
-var SetupClient_1 = require("./SetupClient");
-Object.defineProperty(exports, "SetupClient", { enumerable: true, get: function () { return SetupClient_1.SetupClient; } });
 __exportStar(require("./signer/WalletSigner"), exports);
 __exportStar(require("./storage/index.client"), exports);
 __exportStar(require("./services/Services"), exports);
 __exportStar(require("./monitor/Monitor"), exports);
+__exportStar(require("./WalletPermissionsManager"), exports);
+__exportStar(require("./CWIStyleWalletManager"), exports);
+__exportStar(require("./WalletAuthenticationManager"), exports);
+__exportStar(require("./sdk/PrivilegedKeyManager"), exports);
+__exportStar(require("./SimpleWalletManager"), exports);
+__exportStar(require("./wab-client/WABClient"), exports);
+__exportStar(require("./wab-client/auth-method-interactors/TwilioPhoneInteractor"), exports);
+__exportStar(require("./wab-client/auth-method-interactors/PersonaIDInteractor"), exports);
+__exportStar(require("./wab-client/auth-method-interactors/AuthMethodInteractor"), exports);
 //# sourceMappingURL=index.client.js.map

package/out/src/index.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.client.js","sourceRoot":"","sources":["../../src/index.client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAkC;AAClC,yDAAsC;AACtC,2CAAwB;AACxB,6CAA2C;AAAlC,0GAAA,WAAW,OAAA;AACpB,wDAAqC;AACrC,yDAAsC;AACtC,sDAAmC;AACnC,oDAAiC"}
+{"version":3,"file":"index.client.js","sourceRoot":"","sources":["../../src/index.client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAkC;AAClC,yDAAsC;AACtC,2CAAwB;AACxB,wDAAqC;AACrC,yDAAsC;AACtC,sDAAmC;AACnC,oDAAiC;AACjC,6DAA0C;AAC1C,0DAAuC;AACvC,gEAA6C;AAC7C,6DAA0C;AAC1C,wDAAqC;AACrC,yDAAsC;AACtC,6FAA0E;AAC1E,2FAAwE;AACxE,4FAAyE"}

package/out/src/utility/identityUtils.d.ts

@@ -0,0 +1,31 @@
+import { LookupAnswer, VerifiableCertificate, LookupResolver, DiscoverCertificatesResult, IdentityCertificate, IdentityCertifier, Base64String } from '@bsv/sdk';
+import { TrustSettings } from '../WalletSettingsManager';
+export interface ExtendedVerifiableCertificate extends IdentityCertificate {
+    certifierInfo: IdentityCertifier;
+    publiclyRevealedKeyring: Record<string, Base64String>;
+}
+/**
+ * Transforms an array of VerifiableCertificate instances according to the trust settings.
+ * Only certificates whose grouped total trust meets the threshold are returned,
+ * and each certificate is augmented with a certifierInfo property.
+ *
+ * @param trustSettings - the user's trust settings including trustLevel and trusted certifiers.
+ * @param certificates - an array of VerifiableCertificate objects.
+ * @returns a DiscoverCertificatesResult with totalCertificates and ordered certificates.
+ */
+export declare const transformVerifiableCertificatesWithTrust: (trustSettings: TrustSettings, certificates: VerifiableCertificate[]) => DiscoverCertificatesResult;
+/**
+ * Performs an identity overlay service lookup query and returns the parsed results
+ *
+ * @param query
+ * @returns
+ */
+export declare const queryOverlay: (query: unknown, resolver: LookupResolver) => Promise<VerifiableCertificate[]>;
+/**
+ * Internal func: Parse the returned UTXOs Decrypt and verify the certificates and signatures Return the set of identity keys, certificates and decrypted certificate fields
+ *
+ * @param {Output[]} outputs
+ * @returns {Promise<VerifiableCertificate[]>}
+ */
+export declare const parseResults: (lookupResult: LookupAnswer) => Promise<VerifiableCertificate[]>;
+//# sourceMappingURL=identityUtils.d.ts.map