@bsv/wallet-toolbox 1.3.21 → 1.3.22

package/mobile/out/src/SimpleWalletManager.d.ts

@@ -0,0 +1,169 @@
+import { WalletInterface, OriginatorDomainNameStringUnder250Bytes, GetPublicKeyArgs, GetPublicKeyResult, RevealCounterpartyKeyLinkageArgs, RevealCounterpartyKeyLinkageResult, RevealSpecificKeyLinkageArgs, RevealSpecificKeyLinkageResult, WalletEncryptArgs, WalletEncryptResult, WalletDecryptArgs, WalletDecryptResult, CreateHmacArgs, CreateHmacResult, VerifyHmacArgs, VerifyHmacResult, CreateSignatureArgs, CreateSignatureResult, VerifySignatureArgs, VerifySignatureResult, CreateActionArgs, CreateActionResult, SignActionArgs, SignActionResult, AbortActionArgs, AbortActionResult, ListActionsArgs, ListActionsResult, InternalizeActionArgs, InternalizeActionResult, ListOutputsArgs, ListOutputsResult, RelinquishOutputArgs, RelinquishOutputResult, AcquireCertificateArgs, AcquireCertificateResult, ListCertificatesArgs, ListCertificatesResult, ProveCertificateArgs, ProveCertificateResult, RelinquishCertificateArgs, RelinquishCertificateResult, DiscoverByIdentityKeyArgs, DiscoverByAttributesArgs, DiscoverCertificatesResult, AuthenticatedResult, GetHeightResult, GetHeaderArgs, GetHeaderResult, GetNetworkResult, GetVersionResult } from '@bsv/sdk';
+import { PrivilegedKeyManager } from './sdk/PrivilegedKeyManager';
+/**
+ * SimpleWalletManager is a slimmed-down wallet manager that only requires two things to authenticate:
+ *  1. A primary key (32 bytes), which represents the core secret for the wallet.
+ *  2. A privileged key manager (an instance of `PrivilegedKeyManager`), responsible for
+ *     more sensitive operations.
+ *
+ * Once both pieces are provided (or if a snapshot containing the primary key is loaded,
+ * and the privileged key manager is provided separately), the wallet becomes authenticated.
+ *
+ * After authentication, calls to the standard wallet methods (`createAction`, `signAction`, etc.)
+ * are proxied to an underlying `WalletInterface` instance returned by a user-supplied `walletBuilder`.
+ *
+ * **Important**: This manager does not handle user password flows, recovery, or on-chain
+ * token management. It is a straightforward wrapper that ensures the user has provided
+ * both their main secret (primary key) and a privileged key manager before allowing usage.
+ *
+ * It also prevents calls from the special "admin originator" from being used externally.
+ * (Any call that tries to use the admin originator as its originator, other than the manager itself,
+ * will result in an error, ensuring that only internal operations can use that originator.)
+ *
+ * The manager can also save and load snapshots of its state. In this simplified version,
+ * the snapshot only contains the primary key. If you load a snapshot, you still need to
+ * re-provide the privileged key manager to complete authentication.
+ */
+export declare class SimpleWalletManager implements WalletInterface {
+    /**
+     * Whether the user is currently authenticated (meaning both the primary key
+     * and privileged key manager have been provided).
+     */
+    authenticated: boolean;
+    /**
+     * The domain name of the administrative originator (wallet operator / vendor, or your own).
+     */
+    private adminOriginator;
+    /**
+     * A function that, given the user's primary key and privileged key manager,
+     * returns a new `WalletInterface` instance that handles the actual signing,
+     * encryption, transaction building, etc.
+     */
+    private walletBuilder;
+    /**
+     * The underlying wallet instance that is built once authenticated.
+     */
+    private underlying?;
+    /**
+     * The privileged key manager, responsible for sensitive tasks.
+     */
+    private underlyingPrivilegedKeyManager?;
+    /**
+     * The primary key (32 bytes) that unlocks the wallet functionality.
+     */
+    private primaryKey?;
+    /**
+     * Constructs a new `SimpleWalletManager`.
+     *
+     * @param adminOriginator The domain name of the administrative originator.
+     * @param walletBuilder   A function that, given a primary key and privileged key manager,
+     *                        returns a fully functional `WalletInterface`.
+     * @param stateSnapshot   If provided, a previously saved snapshot of the wallet's state.
+     *                        If the snapshot contains a primary key, it will be loaded immediately
+     *                        (though you will still need to provide a privileged key manager to authenticate).
+     */
+    constructor(adminOriginator: OriginatorDomainNameStringUnder250Bytes, walletBuilder: (primaryKey: number[], privilegedKeyManager: PrivilegedKeyManager) => Promise<WalletInterface>, stateSnapshot?: number[]);
+    /**
+     * Provides the primary key (32 bytes) needed for authentication.
+     * If a privileged key manager has already been provided, we attempt to build
+     * the underlying wallet. Otherwise, we wait until the manager is also provided.
+     *
+     * @param key A 32-byte primary key.
+     */
+    providePrimaryKey(key: number[]): Promise<void>;
+    /**
+     * Provides the privileged key manager needed for sensitive tasks.
+     * If a primary key has already been provided (or loaded from a snapshot),
+     * we attempt to build the underlying wallet. Otherwise, we wait until the key is provided.
+     *
+     * @param manager An instance of `PrivilegedKeyManager`.
+     */
+    providePrivilegedKeyManager(manager: PrivilegedKeyManager): Promise<void>;
+    /**
+     * Internal method that checks if we have both the primary key and privileged manager.
+     * If so, we build the underlying wallet instance and become authenticated.
+     */
+    private tryBuildUnderlying;
+    /**
+     * Destroys the underlying wallet, returning to a default (unauthenticated) state.
+     *
+     * This clears the primary key, the privileged key manager, and the `authenticated` flag.
+     */
+    destroy(): void;
+    /**
+     * Saves the current wallet state (including just the primary key)
+     * into an encrypted snapshot. This snapshot can be stored and later
+     * passed to `loadSnapshot` to restore the primary key (and partially authenticate).
+     *
+     * **Note**: The snapshot does NOT include the privileged key manager.
+     * You must still provide that separately after loading the snapshot
+     * in order to complete authentication.
+     *
+     * @remarks
+     * Storing the snapshot (which contains the primary key) provides a significant
+     * portion of the wallet's secret material. It must be protected carefully.
+     *
+     * @returns A byte array representing the encrypted snapshot.
+     * @throws {Error} if no primary key is currently set.
+     */
+    saveSnapshot(): number[];
+    /**
+     * Loads a previously saved state snapshot (produced by `saveSnapshot`).
+     * This will restore the primary key but will **not** restore the privileged key manager
+     * (that must be provided separately to complete authentication).
+     *
+     * @param snapshot A byte array that was previously returned by `saveSnapshot`.
+     * @throws {Error} If the snapshot format is invalid or decryption fails.
+     */
+    loadSnapshot(snapshot: number[]): Promise<void>;
+    /**
+     * Returns whether the user is currently authenticated (the wallet has a primary key
+     * and a privileged key manager). If not authenticated, an error is thrown.
+     *
+     * @param _ Not used in this manager.
+     * @param originator The originator domain, which must not be the admin originator.
+     * @throws If not authenticated, or if the originator is the admin.
+     */
+    isAuthenticated(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<AuthenticatedResult>;
+    /**
+     * Blocks until the user is authenticated (by providing primaryKey and privileged manager).
+     * If not authenticated yet, it waits until that occurs.
+     *
+     * @param _ Not used in this manager.
+     * @param originator The originator domain, which must not be the admin originator.
+     * @throws If the originator is the admin.
+     */
+    waitForAuthentication(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<AuthenticatedResult>;
+    getPublicKey(args: GetPublicKeyArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetPublicKeyResult>;
+    revealCounterpartyKeyLinkage(args: RevealCounterpartyKeyLinkageArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<RevealCounterpartyKeyLinkageResult>;
+    revealSpecificKeyLinkage(args: RevealSpecificKeyLinkageArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<RevealSpecificKeyLinkageResult>;
+    encrypt(args: WalletEncryptArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<WalletEncryptResult>;
+    decrypt(args: WalletDecryptArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<WalletDecryptResult>;
+    createHmac(args: CreateHmacArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<CreateHmacResult>;
+    verifyHmac(args: VerifyHmacArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<VerifyHmacResult>;
+    createSignature(args: CreateSignatureArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<CreateSignatureResult>;
+    verifySignature(args: VerifySignatureArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<VerifySignatureResult>;
+    createAction(args: CreateActionArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<CreateActionResult>;
+    signAction(args: SignActionArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<SignActionResult>;
+    abortAction(args: AbortActionArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<AbortActionResult>;
+    listActions(args: ListActionsArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<ListActionsResult>;
+    internalizeAction(args: InternalizeActionArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<InternalizeActionResult>;
+    listOutputs(args: ListOutputsArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<ListOutputsResult>;
+    relinquishOutput(args: RelinquishOutputArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<RelinquishOutputResult>;
+    acquireCertificate(args: AcquireCertificateArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<AcquireCertificateResult>;
+    listCertificates(args: ListCertificatesArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<ListCertificatesResult>;
+    proveCertificate(args: ProveCertificateArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<ProveCertificateResult>;
+    relinquishCertificate(args: RelinquishCertificateArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<RelinquishCertificateResult>;
+    discoverByIdentityKey(args: DiscoverByIdentityKeyArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<DiscoverCertificatesResult>;
+    discoverByAttributes(args: DiscoverByAttributesArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<DiscoverCertificatesResult>;
+    getHeight(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetHeightResult>;
+    getHeaderForHeight(args: GetHeaderArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetHeaderResult>;
+    getNetwork(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetNetworkResult>;
+    getVersion(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetVersionResult>;
+    /**
+     * A small helper that throws if the user is not authenticated or if the
+     * provided originator is the admin (which is not permitted externally).
+     */
+    private ensureCanCall;
+}
+//# sourceMappingURL=SimpleWalletManager.d.ts.map

package/mobile/out/src/SimpleWalletManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SimpleWalletManager.d.ts","sourceRoot":"","sources":["../../../src/SimpleWalletManager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,uCAAuC,EACvC,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,EAChC,kCAAkC,EAClC,4BAA4B,EAC5B,8BAA8B,EAC9B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAKjB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAEjE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,mBAAoB,YAAW,eAAe;IACzD;;;OAGG;IACH,aAAa,EAAE,OAAO,CAAA;IAEtB;;OAEG;IACH,OAAO,CAAC,eAAe,CAAyC;IAEhE;;;;OAIG;IACH,OAAO,CAAC,aAAa,CAAgG;IAErH;;OAEG;IACH,OAAO,CAAC,UAAU,CAAC,CAAiB;IAEpC;;OAEG;IACH,OAAO,CAAC,8BAA8B,CAAC,CAAsB;IAE7D;;OAEG;IACH,OAAO,CAAC,UAAU,CAAC,CAAU;IAE7B;;;;;;;;;OASG;gBAED,eAAe,EAAE,uCAAuC,EACxD,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,oBAAoB,KAAK,OAAO,CAAC,eAAe,CAAC,EAC7G,aAAa,CAAC,EAAE,MAAM,EAAE;IAW1B;;;;;;OAMG;IACG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrD;;;;;;OAMG;IACG,2BAA2B,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/E;;;OAGG;YACW,kBAAkB;IAYhC;;;;OAIG;IACH,OAAO,IAAI,IAAI;IAOf;;;;;;;;;;;;;;;OAeG;IACH,YAAY,IAAI,MAAM,EAAE;IA6BxB;;;;;;;OAOG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCrD;;;;;;;OAOG;IACG,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,uCAAuC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAKhH;;;;;;;OAOG;IACG,qBAAqB,CACzB,CAAC,EAAE,EAAE,EACL,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,mBAAmB,CAAC;IAUzB,YAAY,CAChB,IAAI,EAAE,gBAAgB,EACtB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,kBAAkB,CAAC;IAKxB,4BAA4B,CAChC,IAAI,EAAE,gCAAgC,EACtC,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,kCAAkC,CAAC;IAKxC,wBAAwB,CAC5B,IAAI,EAAE,4BAA4B,EAClC,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,8BAA8B,CAAC;IAKpC,OAAO,CACX,IAAI,EAAE,iBAAiB,EACvB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,mBAAmB,CAAC;IAKzB,OAAO,CACX,IAAI,EAAE,iBAAiB,EACvB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,mBAAmB,CAAC;IAKzB,UAAU,CACd,IAAI,EAAE,cAAc,EACpB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,gBAAgB,CAAC;IAKtB,UAAU,CACd,IAAI,EAAE,cAAc,EACpB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,gBAAgB,CAAC;IAKtB,eAAe,CACnB,IAAI,EAAE,mBAAmB,EACzB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,qBAAqB,CAAC;IAK3B,eAAe,CACnB,IAAI,EAAE,mBAAmB,EACzB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,qBAAqB,CAAC;IAK3B,YAAY,CAChB,IAAI,EAAE,gBAAgB,EACtB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,kBAAkB,CAAC;IAKxB,UAAU,CACd,IAAI,EAAE,cAAc,EACpB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,gBAAgB,CAAC;IAKtB,WAAW,CACf,IAAI,EAAE,eAAe,EACrB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,iBAAiB,CAAC;IAKvB,WAAW,CACf,IAAI,EAAE,eAAe,EACrB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,iBAAiB,CAAC;IAKvB,iBAAiB,CACrB,IAAI,EAAE,qBAAqB,EAC3B,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,uBAAuB,CAAC;IAK7B,WAAW,CACf,IAAI,EAAE,eAAe,EACrB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,iBAAiB,CAAC;IAKvB,gBAAgB,CACpB,IAAI,EAAE,oBAAoB,EAC1B,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,sBAAsB,CAAC;IAK5B,kBAAkB,CACtB,IAAI,EAAE,sBAAsB,EAC5B,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,wBAAwB,CAAC;IAK9B,gBAAgB,CACpB,IAAI,EAAE,oBAAoB,EAC1B,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,sBAAsB,CAAC;IAK5B,gBAAgB,CACpB,IAAI,EAAE,oBAAoB,EAC1B,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,sBAAsB,CAAC;IAK5B,qBAAqB,CACzB,IAAI,EAAE,yBAAyB,EAC/B,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,2BAA2B,CAAC;IAKjC,qBAAqB,CACzB,IAAI,EAAE,yBAAyB,EAC/B,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,0BAA0B,CAAC;IAKhC,oBAAoB,CACxB,IAAI,EAAE,wBAAwB,EAC9B,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,0BAA0B,CAAC;IAKhC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,uCAAuC,GAAG,OAAO,CAAC,eAAe,CAAC;IAKhG,kBAAkB,CACtB,IAAI,EAAE,aAAa,EACnB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,eAAe,CAAC;IAKrB,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,uCAAuC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKlG,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,uCAAuC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKxG;;;OAGG;IACH,OAAO,CAAC,aAAa;CAQtB"}

package/mobile/out/src/SimpleWalletManager.js

@@ -0,0 +1,315 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SimpleWalletManager = void 0;
+const sdk_1 = require("@bsv/sdk");
+/**
+ * SimpleWalletManager is a slimmed-down wallet manager that only requires two things to authenticate:
+ *  1. A primary key (32 bytes), which represents the core secret for the wallet.
+ *  2. A privileged key manager (an instance of `PrivilegedKeyManager`), responsible for
+ *     more sensitive operations.
+ *
+ * Once both pieces are provided (or if a snapshot containing the primary key is loaded,
+ * and the privileged key manager is provided separately), the wallet becomes authenticated.
+ *
+ * After authentication, calls to the standard wallet methods (`createAction`, `signAction`, etc.)
+ * are proxied to an underlying `WalletInterface` instance returned by a user-supplied `walletBuilder`.
+ *
+ * **Important**: This manager does not handle user password flows, recovery, or on-chain
+ * token management. It is a straightforward wrapper that ensures the user has provided
+ * both their main secret (primary key) and a privileged key manager before allowing usage.
+ *
+ * It also prevents calls from the special "admin originator" from being used externally.
+ * (Any call that tries to use the admin originator as its originator, other than the manager itself,
+ * will result in an error, ensuring that only internal operations can use that originator.)
+ *
+ * The manager can also save and load snapshots of its state. In this simplified version,
+ * the snapshot only contains the primary key. If you load a snapshot, you still need to
+ * re-provide the privileged key manager to complete authentication.
+ */
+class SimpleWalletManager {
+    /**
+     * Constructs a new `SimpleWalletManager`.
+     *
+     * @param adminOriginator The domain name of the administrative originator.
+     * @param walletBuilder   A function that, given a primary key and privileged key manager,
+     *                        returns a fully functional `WalletInterface`.
+     * @param stateSnapshot   If provided, a previously saved snapshot of the wallet's state.
+     *                        If the snapshot contains a primary key, it will be loaded immediately
+     *                        (though you will still need to provide a privileged key manager to authenticate).
+     */
+    constructor(adminOriginator, walletBuilder, stateSnapshot) {
+        this.authenticated = false;
+        this.adminOriginator = adminOriginator;
+        this.walletBuilder = walletBuilder;
+        if (stateSnapshot) {
+            this.loadSnapshot(stateSnapshot);
+        }
+    }
+    /**
+     * Provides the primary key (32 bytes) needed for authentication.
+     * If a privileged key manager has already been provided, we attempt to build
+     * the underlying wallet. Otherwise, we wait until the manager is also provided.
+     *
+     * @param key A 32-byte primary key.
+     */
+    async providePrimaryKey(key) {
+        this.primaryKey = key;
+        await this.tryBuildUnderlying();
+    }
+    /**
+     * Provides the privileged key manager needed for sensitive tasks.
+     * If a primary key has already been provided (or loaded from a snapshot),
+     * we attempt to build the underlying wallet. Otherwise, we wait until the key is provided.
+     *
+     * @param manager An instance of `PrivilegedKeyManager`.
+     */
+    async providePrivilegedKeyManager(manager) {
+        this.underlyingPrivilegedKeyManager = manager;
+        await this.tryBuildUnderlying();
+    }
+    /**
+     * Internal method that checks if we have both the primary key and privileged manager.
+     * If so, we build the underlying wallet instance and become authenticated.
+     */
+    async tryBuildUnderlying() {
+        if (this.authenticated) {
+            throw new Error('The user is already authenticated.');
+        }
+        if (!this.primaryKey || !this.underlyingPrivilegedKeyManager) {
+            return;
+        }
+        // Build the underlying wallet:
+        this.underlying = await this.walletBuilder(this.primaryKey, this.underlyingPrivilegedKeyManager);
+        this.authenticated = true;
+    }
+    /**
+     * Destroys the underlying wallet, returning to a default (unauthenticated) state.
+     *
+     * This clears the primary key, the privileged key manager, and the `authenticated` flag.
+     */
+    destroy() {
+        this.underlying = undefined;
+        this.underlyingPrivilegedKeyManager = undefined;
+        this.authenticated = false;
+        this.primaryKey = undefined;
+    }
+    /**
+     * Saves the current wallet state (including just the primary key)
+     * into an encrypted snapshot. This snapshot can be stored and later
+     * passed to `loadSnapshot` to restore the primary key (and partially authenticate).
+     *
+     * **Note**: The snapshot does NOT include the privileged key manager.
+     * You must still provide that separately after loading the snapshot
+     * in order to complete authentication.
+     *
+     * @remarks
+     * Storing the snapshot (which contains the primary key) provides a significant
+     * portion of the wallet's secret material. It must be protected carefully.
+     *
+     * @returns A byte array representing the encrypted snapshot.
+     * @throws {Error} if no primary key is currently set.
+     */
+    saveSnapshot() {
+        if (!this.primaryKey) {
+            throw new Error('No primary key is set; cannot save snapshot.');
+        }
+        // Generate a random snapshot encryption key:
+        const snapshotKey = (0, sdk_1.Random)(32);
+        // For this simple wallet manager, we only store the primary key.
+        const writer = new sdk_1.Utils.Writer();
+        // Write a 1-byte version:
+        writer.writeUInt8(1);
+        // Write a varint length and then the primary key bytes:
+        writer.writeVarIntNum(this.primaryKey.length);
+        writer.write(this.primaryKey);
+        const snapshotPreimage = writer.toArray();
+        // Encrypt the data with the snapshotKey:
+        const encryptedPayload = new sdk_1.SymmetricKey(snapshotKey).encrypt(snapshotPreimage);
+        // Build the final snapshot: [ snapshotKey (32 bytes) + encryptedPayload ]
+        const snapshotWriter = new sdk_1.Utils.Writer();
+        snapshotWriter.write(snapshotKey);
+        snapshotWriter.write(encryptedPayload);
+        return snapshotWriter.toArray();
+    }
+    /**
+     * Loads a previously saved state snapshot (produced by `saveSnapshot`).
+     * This will restore the primary key but will **not** restore the privileged key manager
+     * (that must be provided separately to complete authentication).
+     *
+     * @param snapshot A byte array that was previously returned by `saveSnapshot`.
+     * @throws {Error} If the snapshot format is invalid or decryption fails.
+     */
+    async loadSnapshot(snapshot) {
+        try {
+            const reader = new sdk_1.Utils.Reader(snapshot);
+            // First 32 bytes is the snapshotKey:
+            const snapshotKey = reader.read(32);
+            // The rest is the encrypted payload:
+            const encryptedPayload = reader.read();
+            // Decrypt the payload with the snapshotKey:
+            const decrypted = new sdk_1.SymmetricKey(snapshotKey).decrypt(encryptedPayload);
+            const payloadReader = new sdk_1.Utils.Reader(decrypted);
+            // Check version:
+            const version = payloadReader.readUInt8();
+            if (version !== 1) {
+                throw new Error(`Unsupported snapshot version: ${version}`);
+            }
+            // Read the varint length and the primary key:
+            const pkLength = payloadReader.readVarIntNum();
+            const pk = payloadReader.read(pkLength);
+            this.primaryKey = pk;
+            // Attempt to build the underlying wallet if the privileged manager is already provided:
+            await this.tryBuildUnderlying();
+        }
+        catch (error) {
+            throw new Error(`Failed to load snapshot: ${error.message}`);
+        }
+    }
+    /**
+     * Returns whether the user is currently authenticated (the wallet has a primary key
+     * and a privileged key manager). If not authenticated, an error is thrown.
+     *
+     * @param _ Not used in this manager.
+     * @param originator The originator domain, which must not be the admin originator.
+     * @throws If not authenticated, or if the originator is the admin.
+     */
+    async isAuthenticated(_, originator) {
+        this.ensureCanCall(originator);
+        return { authenticated: true };
+    }
+    /**
+     * Blocks until the user is authenticated (by providing primaryKey and privileged manager).
+     * If not authenticated yet, it waits until that occurs.
+     *
+     * @param _ Not used in this manager.
+     * @param originator The originator domain, which must not be the admin originator.
+     * @throws If the originator is the admin.
+     */
+    async waitForAuthentication(_, originator) {
+        if (originator === this.adminOriginator) {
+            throw new Error('External applications cannot use the admin originator.');
+        }
+        while (!this.authenticated) {
+            await new Promise(resolve => setTimeout(resolve, 100));
+        }
+        return { authenticated: true };
+    }
+    async getPublicKey(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.getPublicKey(args, originator);
+    }
+    async revealCounterpartyKeyLinkage(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.revealCounterpartyKeyLinkage(args, originator);
+    }
+    async revealSpecificKeyLinkage(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.revealSpecificKeyLinkage(args, originator);
+    }
+    async encrypt(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.encrypt(args, originator);
+    }
+    async decrypt(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.decrypt(args, originator);
+    }
+    async createHmac(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.createHmac(args, originator);
+    }
+    async verifyHmac(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.verifyHmac(args, originator);
+    }
+    async createSignature(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.createSignature(args, originator);
+    }
+    async verifySignature(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.verifySignature(args, originator);
+    }
+    async createAction(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.createAction(args, originator);
+    }
+    async signAction(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.signAction(args, originator);
+    }
+    async abortAction(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.abortAction(args, originator);
+    }
+    async listActions(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.listActions(args, originator);
+    }
+    async internalizeAction(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.internalizeAction(args, originator);
+    }
+    async listOutputs(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.listOutputs(args, originator);
+    }
+    async relinquishOutput(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.relinquishOutput(args, originator);
+    }
+    async acquireCertificate(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.acquireCertificate(args, originator);
+    }
+    async listCertificates(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.listCertificates(args, originator);
+    }
+    async proveCertificate(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.proveCertificate(args, originator);
+    }
+    async relinquishCertificate(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.relinquishCertificate(args, originator);
+    }
+    async discoverByIdentityKey(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.discoverByIdentityKey(args, originator);
+    }
+    async discoverByAttributes(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.discoverByAttributes(args, originator);
+    }
+    async getHeight(_, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.getHeight({}, originator);
+    }
+    async getHeaderForHeight(args, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.getHeaderForHeight(args, originator);
+    }
+    async getNetwork(_, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.getNetwork({}, originator);
+    }
+    async getVersion(_, originator) {
+        this.ensureCanCall(originator);
+        return this.underlying.getVersion({}, originator);
+    }
+    /**
+     * A small helper that throws if the user is not authenticated or if the
+     * provided originator is the admin (which is not permitted externally).
+     */
+    ensureCanCall(originator) {
+        if (originator === this.adminOriginator) {
+            throw new Error('External applications cannot use the admin originator.');
+        }
+        if (!this.authenticated) {
+            throw new Error('User is not authenticated.');
+        }
+    }
+}
+exports.SimpleWalletManager = SimpleWalletManager;
+//# sourceMappingURL=SimpleWalletManager.js.map

package/mobile/out/src/SimpleWalletManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SimpleWalletManager.js","sourceRoot":"","sources":["../../../src/SimpleWalletManager.ts"],"names":[],"mappings":";;;AAAA,kCAwDiB;AAGjB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,mBAAmB;IAkC9B;;;;;;;;;OASG;IACH,YACE,eAAwD,EACxD,aAA6G,EAC7G,aAAwB;QAExB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAA;QAC1B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAA;QACtC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;QAElC,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,GAAa;QACnC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAA;QACrB,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAA;IACjC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,2BAA2B,CAAC,OAA6B;QAC7D,IAAI,CAAC,8BAA8B,GAAG,OAAO,CAAA;QAC7C,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAA;IACjC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,kBAAkB;QAC9B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC;YAC7D,OAAM;QACR,CAAC;QACD,+BAA+B;QAC/B,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAChG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;IAC3B,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC3B,IAAI,CAAC,8BAA8B,GAAG,SAAS,CAAA;QAC/C,IAAI,CAAC,aAAa,GAAG,KAAK,CAAA;QAC1B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;IAC7B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;QAED,6CAA6C;QAC7C,MAAM,WAAW,GAAG,IAAA,YAAM,EAAC,EAAE,CAAC,CAAA;QAE9B,iEAAiE;QACjE,MAAM,MAAM,GAAG,IAAI,WAAK,CAAC,MAAM,EAAE,CAAA;QACjC,0BAA0B;QAC1B,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACpB,wDAAwD;QACxD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAE7B,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;QAEzC,yCAAyC;QACzC,MAAM,gBAAgB,GAAG,IAAI,kBAAY,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAa,CAAA;QAE5F,0EAA0E;QAC1E,MAAM,cAAc,GAAG,IAAI,WAAK,CAAC,MAAM,EAAE,CAAA;QACzC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACjC,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;QAEtC,OAAO,cAAc,CAAC,OAAO,EAAE,CAAA;IACjC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,QAAkB;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,WAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAEzC,qCAAqC;YACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAEnC,qCAAqC;YACrC,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;YAEtC,4CAA4C;YAC5C,MAAM,SAAS,GAAG,IAAI,kBAAY,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAa,CAAA;YAErF,MAAM,aAAa,GAAG,IAAI,WAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAEjD,iBAAiB;YACjB,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;YACzC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAA;YAC7D,CAAC;YAED,8CAA8C;YAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,EAAE,CAAA;YAC9C,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAEvC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAA;YAEpB,wFAAwF;YACxF,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAA;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,4BAA6B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;QACzE,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CAAC,CAAK,EAAE,UAAoD;QAC/E,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;IAChC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,qBAAqB,CACzB,CAAK,EACL,UAAoD;QAEpD,IAAI,UAAU,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;QACxD,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAsB,EACtB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACxD,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,IAAsC,EACtC,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,4BAA4B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACxE,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,IAAkC,EAClC,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAAuB,EACvB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAAuB,EACvB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,UAAU,CACd,IAAoB,EACpB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,UAAU,CACd,IAAoB,EACpB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,IAAyB,EACzB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,IAAyB,EACzB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,IAAsB,EACtB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACxD,CAAC;IAED,KAAK,CAAC,UAAU,CACd,IAAoB,EACpB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,WAAW,CACf,IAAqB,EACrB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,WAAW,CACf,IAAqB,EACrB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,IAA2B,EAC3B,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,WAAW,CACf,IAAqB,EACrB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,IAA0B,EAC1B,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,IAA4B,EAC5B,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,IAA0B,EAC1B,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,IAA0B,EAC1B,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,IAA+B,EAC/B,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,IAA+B,EAC/B,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,IAA8B,EAC9B,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAChE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,CAAK,EAAE,UAAoD;QACzE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,IAAmB,EACnB,UAAoD;QAEpD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,CAAK,EAAE,UAAoD;QAC1E,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,CAAK,EAAE,UAAoD;QAC1E,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,UAAW,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IACpD,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,UAAoD;QACxE,IAAI,UAAU,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;CACF;AA1bD,kDA0bC"}