@btc-vision/bitcoin 7.0.0-alpha.0 → 7.0.0-alpha.10

package/build/workers/WorkerSigningPool.sequential.js

@@ -0,0 +1,160 @@
+/**
+ * Sequential signing pool for environments without worker support (React Native).
+ *
+ * Signs inputs one-by-one on the main thread using the CryptoBackend
+ * from EccContext. Same API shape as WorkerSigningPool so consumers
+ * can swap transparently.
+ *
+ * @packageDocumentation
+ */
+import { SignatureType } from './types.js';
+import { EccContext } from '../ecc/context.js';
+/**
+ * Sequential signing pool — signs inputs one-by-one on the main thread.
+ *
+ * Provides the same public API as WorkerSigningPool but without any
+ * threading. Intended for React Native or other environments where
+ * Web Workers and worker_threads are unavailable.
+ *
+ * @example
+ * ```typescript
+ * import { SequentialSigningPool } from '@btc-vision/bitcoin/workers';
+ *
+ * const pool = SequentialSigningPool.getInstance();
+ * const result = await pool.signBatch(tasks, keyPair);
+ * ```
+ */
+export class SequentialSigningPool {
+    static #instance = null;
+    constructor(_config = {}) {
+        // Config accepted for API compatibility but not used —
+        // sequential pool has no workers to configure.
+    }
+    /**
+     * Number of workers — always 0 for sequential pool.
+     */
+    get workerCount() {
+        return 0;
+    }
+    /**
+     * Idle workers — always 0.
+     */
+    get idleWorkerCount() {
+        return 0;
+    }
+    /**
+     * Busy workers — always 0.
+     */
+    get busyWorkerCount() {
+        return 0;
+    }
+    /**
+     * Whether workers are preserved — always false (no workers to preserve).
+     */
+    get isPreservingWorkers() {
+        return false;
+    }
+    /**
+     * Gets the singleton instance.
+     */
+    static getInstance(config) {
+        if (!SequentialSigningPool.#instance) {
+            SequentialSigningPool.#instance = new SequentialSigningPool(config);
+        }
+        return SequentialSigningPool.#instance;
+    }
+    /**
+     * Resets the singleton instance (for testing).
+     */
+    static resetInstance() {
+        SequentialSigningPool.#instance = null;
+    }
+    /**
+     * No-op — no workers to preserve.
+     */
+    preserveWorkers() {
+        // No-op: no workers to preserve
+    }
+    /**
+     * No-op — no workers to release.
+     */
+    releaseWorkers() {
+        // No-op
+    }
+    /**
+     * No-op — no initialization required.
+     */
+    async initialize() {
+        // No-op: nothing to initialize
+    }
+    /**
+     * Signs tasks sequentially on the main thread.
+     */
+    // eslint-disable-next-line @typescript-eslint/require-await
+    async signBatch(tasks, keyPair) {
+        const startTime = performance.now();
+        if (tasks.length === 0) {
+            return {
+                success: true,
+                signatures: new Map(),
+                errors: new Map(),
+                durationMs: performance.now() - startTime,
+            };
+        }
+        const ecc = EccContext.get().lib;
+        const privateKey = keyPair.getPrivateKey();
+        const signatures = new Map();
+        const errors = new Map();
+        try {
+            for (const task of tasks) {
+                try {
+                    let signature;
+                    const hash = task.hash;
+                    const key = privateKey;
+                    if (task.signatureType === SignatureType.Schnorr) {
+                        signature = ecc.signSchnorr(hash, key);
+                    }
+                    else {
+                        signature = ecc.sign(hash, key);
+                    }
+                    signatures.set(task.inputIndex, {
+                        type: 'result',
+                        taskId: task.taskId,
+                        signature,
+                        inputIndex: task.inputIndex,
+                        publicKey: keyPair.publicKey,
+                        signatureType: task.signatureType,
+                        leafHash: task.leafHash,
+                    });
+                }
+                catch (err) {
+                    const message = err instanceof Error ? err.message : 'Signing failed';
+                    errors.set(task.inputIndex, message);
+                }
+            }
+        }
+        finally {
+            // SECURITY: Zero the private key
+            privateKey.fill(0);
+        }
+        return {
+            success: errors.size === 0,
+            signatures,
+            errors,
+            durationMs: performance.now() - startTime,
+        };
+    }
+    /**
+     * No-op — no workers to shut down.
+     */
+    async shutdown() {
+        // No-op: nothing to shut down
+    }
+    [Symbol.dispose]() {
+        void this.shutdown();
+    }
+    async [Symbol.asyncDispose]() {
+        await this.shutdown();
+    }
+}
+//# sourceMappingURL=WorkerSigningPool.sequential.js.map

package/build/workers/WorkerSigningPool.sequential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkerSigningPool.sequential.js","sourceRoot":"","sources":["../../src/workers/WorkerSigningPool.sequential.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,qBAAqB;IAC9B,MAAM,CAAC,SAAS,GAAiC,IAAI,CAAC;IAEtD,YAAoB,UAA4B,EAAE;QAC9C,uDAAuD;QACvD,+CAA+C;IACnD,CAAC;IAED;;OAEG;IACH,IAAW,WAAW;QAClB,OAAO,CAAC,CAAC;IACb,CAAC;IAED;;OAEG;IACH,IAAW,eAAe;QACtB,OAAO,CAAC,CAAC;IACb,CAAC;IAED;;OAEG;IACH,IAAW,eAAe;QACtB,OAAO,CAAC,CAAC;IACb,CAAC;IAED;;OAEG;IACH,IAAW,mBAAmB;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,WAAW,CAAC,MAAyB;QAC/C,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC;YACnC,qBAAqB,CAAC,SAAS,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,qBAAqB,CAAC,SAAS,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,aAAa;QACvB,qBAAqB,CAAC,SAAS,GAAG,IAAI,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,eAAe;QAClB,gCAAgC;IACpC,CAAC;IAED;;OAEG;IACI,cAAc;QACjB,QAAQ;IACZ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU;QACnB,+BAA+B;IACnC,CAAC;IAED;;OAEG;IACH,4DAA4D;IACrD,KAAK,CAAC,SAAS,CAClB,KAA6B,EAC7B,OAA8B;QAE9B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO;gBACH,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,IAAI,GAAG,EAAE;gBACrB,MAAM,EAAE,IAAI,GAAG,EAAE;gBACjB,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC5C,CAAC;QACN,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC;QACjC,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;QAE3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QAEzC,IAAI,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACD,IAAI,SAAqB,CAAC;oBAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAmB,CAAC;oBACtC,MAAM,GAAG,GAAG,UAAwB,CAAC;oBAErC,IAAI,IAAI,CAAC,aAAa,KAAK,aAAa,CAAC,OAAO,EAAE,CAAC;wBAC/C,SAAS,GAAG,GAAG,CAAC,WAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBAC5C,CAAC;yBAAM,CAAC;wBACJ,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBACpC,CAAC;oBAED,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE;wBAC5B,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,SAAS;wBACT,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,aAAa,EAAE,IAAI,CAAC,aAAa;wBACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBAC1B,CAAC,CAAC;gBACP,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACpB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;oBACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACzC,CAAC;YACL,CAAC;QACL,CAAC;gBAAS,CAAC;YACP,iCAAiC;YACjC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QAED,OAAO;YACH,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC;YAC1B,UAAU;YACV,MAAM;YACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;SAC5C,CAAC;IACN,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,QAAQ;QACjB,8BAA8B;IAClC,CAAC;IAEM,CAAC,MAAM,CAAC,OAAO,CAAC;QACnB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QAC9B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC"}

package/build/workers/WorkerSigningPool.worklet.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Worklet-based parallel signing pool for React Native.
+ *
+ * Uses `react-native-worklets` (Software Mansion v0.7+) to run signing
+ * operations in parallel across multiple worklet runtimes.
+ * Each runtime gets its own ECC module instance via eval of the bundled
+ * @noble/secp256k1 IIFE string.
+ *
+ * SECURITY ARCHITECTURE:
+ * - Private keys are cloned per-runtime (structuredClone semantics)
+ * - Keys are zeroed inside worklet AND in main thread finally block
+ * - Tainted runtimes (timeout) are replaced, not reused
+ *
+ * @packageDocumentation
+ */
+import type { ParallelSignerKeyPair, ParallelSigningResult, SigningTask, WorkerPoolConfig } from './types.js';
+/**
+ * Worklet-based parallel signing pool for React Native.
+ *
+ * Mirrors the API of WorkerSigningPool (browser) but uses
+ * `react-native-worklets` runtimes instead of Web Workers.
+ * `runOnRuntime()` returns a Promise directly — no postMessage protocol.
+ *
+ * @example
+ * ```typescript
+ * import { WorkletSigningPool } from '@btc-vision/bitcoin/workers';
+ *
+ * const pool = WorkletSigningPool.getInstance();
+ * pool.preserveWorkers();
+ *
+ * const result = await pool.signBatch(tasks, keyPair);
+ * await pool.shutdown();
+ * ```
+ */
+export declare class WorkletSigningPool {
+    #private;
+    private constructor();
+    /** Number of active runtimes. */
+    get workerCount(): number;
+    /** Idle runtimes (all non-tainted). */
+    get idleWorkerCount(): number;
+    /** Busy runtimes — always 0 outside of signBatch. */
+    get busyWorkerCount(): number;
+    /** Whether runtimes are preserved between batches. */
+    get isPreservingWorkers(): boolean;
+    /**
+     * Gets the singleton pool instance.
+     *
+     * @param config - Optional configuration (only used on first call)
+     */
+    static getInstance(config?: WorkerPoolConfig): WorkletSigningPool;
+    /** Resets the singleton instance (for testing). */
+    static resetInstance(): void;
+    /** Enable runtime preservation between signing batches. */
+    preserveWorkers(): void;
+    /** Disable runtime preservation. */
+    releaseWorkers(): void;
+    /**
+     * Initializes the worklet pool.
+     *
+     * Dynamically imports `react-native-worklets`, creates N runtimes,
+     * and injects the ECC bundle into each via eval.
+     *
+     * @throws If `react-native-worklets` is not installed or eval fails
+     */
+    initialize(): Promise<void>;
+    /**
+     * Signs a batch of tasks in parallel across worklet runtimes.
+     *
+     * SECURITY: Private keys are cloned per-runtime and zeroed both
+     * inside the worklet and in the main thread finally block.
+     */
+    signBatch(tasks: readonly SigningTask[], keyPair: ParallelSignerKeyPair): Promise<ParallelSigningResult>;
+    /** Shuts down all runtimes. */
+    shutdown(): Promise<void>;
+    [Symbol.dispose](): void;
+    [Symbol.asyncDispose](): Promise<void>;
+}
+//# sourceMappingURL=WorkerSigningPool.worklet.d.ts.map

package/build/workers/WorkerSigningPool.worklet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkerSigningPool.worklet.d.ts","sourceRoot":"","sources":["../../src/workers/WorkerSigningPool.worklet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACR,qBAAqB,EACrB,qBAAqB,EAErB,WAAW,EACX,gBAAgB,EACnB,MAAM,YAAY,CAAC;AAuCpB;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,kBAAkB;;IAmB3B,OAAO;IAKP,iCAAiC;IACjC,IAAW,WAAW,IAAI,MAAM,CAE/B;IAED,uCAAuC;IACvC,IAAW,eAAe,IAAI,MAAM,CAEnC;IAED,qDAAqD;IACrD,IAAW,eAAe,IAAI,MAAM,CAEnC;IAED,sDAAsD;IACtD,IAAW,mBAAmB,IAAI,OAAO,CAExC;IAED;;;;OAIG;WACW,WAAW,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,kBAAkB;IAOxE,mDAAmD;WACrC,aAAa,IAAI,IAAI;IAOnC,2DAA2D;IACpD,eAAe,IAAI,IAAI;IAI9B,oCAAoC;IAC7B,cAAc,IAAI,IAAI;IAI7B;;;;;;;OAOG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA2CxC;;;;;OAKG;IACU,SAAS,CAClB,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,OAAO,EAAE,qBAAqB,GAC/B,OAAO,CAAC,qBAAqB,CAAC;IAqFjC,+BAA+B;IAElB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAe/B,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI;IAIlB,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;CA0MtD"}

package/build/workers/WorkerSigningPool.worklet.js

@@ -0,0 +1,390 @@
+/**
+ * Worklet-based parallel signing pool for React Native.
+ *
+ * Uses `react-native-worklets` (Software Mansion v0.7+) to run signing
+ * operations in parallel across multiple worklet runtimes.
+ * Each runtime gets its own ECC module instance via eval of the bundled
+ * @noble/secp256k1 IIFE string.
+ *
+ * SECURITY ARCHITECTURE:
+ * - Private keys are cloned per-runtime (structuredClone semantics)
+ * - Keys are zeroed inside worklet AND in main thread finally block
+ * - Tainted runtimes (timeout) are replaced, not reused
+ *
+ * @packageDocumentation
+ */
+import { SignatureType } from './types.js';
+/**
+ * Default configuration for the worklet pool.
+ */
+const DEFAULT_CONFIG = {
+    workerCount: 4,
+    taskTimeoutMs: 30000,
+    maxKeyHoldTimeMs: 5000,
+    verifySignatures: true,
+    preserveWorkers: false,
+};
+/**
+ * Worklet-based parallel signing pool for React Native.
+ *
+ * Mirrors the API of WorkerSigningPool (browser) but uses
+ * `react-native-worklets` runtimes instead of Web Workers.
+ * `runOnRuntime()` returns a Promise directly — no postMessage protocol.
+ *
+ * @example
+ * ```typescript
+ * import { WorkletSigningPool } from '@btc-vision/bitcoin/workers';
+ *
+ * const pool = WorkletSigningPool.getInstance();
+ * pool.preserveWorkers();
+ *
+ * const result = await pool.signBatch(tasks, keyPair);
+ * await pool.shutdown();
+ * ```
+ */
+export class WorkletSigningPool {
+    static #instance = null;
+    #config;
+    #runtimes = [];
+    #workletsModule = null;
+    #eccBundleCode = null;
+    #preserveWorkers = false;
+    #nextRuntimeId = 0;
+    #initialized = false;
+    #shuttingDown = false;
+    /**
+     * Whether Uint8Array survives worklet boundary.
+     * Detected during initialize(); if false, we encode as number[].
+     */
+    #uint8ArraySupported = true;
+    constructor(config = {}) {
+        this.#config = { ...DEFAULT_CONFIG, ...config };
+        this.#preserveWorkers = this.#config.preserveWorkers;
+    }
+    /** Number of active runtimes. */
+    get workerCount() {
+        return this.#runtimes.length;
+    }
+    /** Idle runtimes (all non-tainted). */
+    get idleWorkerCount() {
+        return this.#runtimes.filter((r) => !r.tainted).length;
+    }
+    /** Busy runtimes — always 0 outside of signBatch. */
+    get busyWorkerCount() {
+        return 0;
+    }
+    /** Whether runtimes are preserved between batches. */
+    get isPreservingWorkers() {
+        return this.#preserveWorkers;
+    }
+    /**
+     * Gets the singleton pool instance.
+     *
+     * @param config - Optional configuration (only used on first call)
+     */
+    static getInstance(config) {
+        if (!WorkletSigningPool.#instance) {
+            WorkletSigningPool.#instance = new WorkletSigningPool(config);
+        }
+        return WorkletSigningPool.#instance;
+    }
+    /** Resets the singleton instance (for testing). */
+    static resetInstance() {
+        if (WorkletSigningPool.#instance) {
+            WorkletSigningPool.#instance.shutdown().catch(() => { });
+            WorkletSigningPool.#instance = null;
+        }
+    }
+    /** Enable runtime preservation between signing batches. */
+    preserveWorkers() {
+        this.#preserveWorkers = true;
+    }
+    /** Disable runtime preservation. */
+    releaseWorkers() {
+        this.#preserveWorkers = false;
+    }
+    /**
+     * Initializes the worklet pool.
+     *
+     * Dynamically imports `react-native-worklets`, creates N runtimes,
+     * and injects the ECC bundle into each via eval.
+     *
+     * @throws If `react-native-worklets` is not installed or eval fails
+     */
+    async initialize() {
+        if (this.#initialized) {
+            return;
+        }
+        if (this.#shuttingDown) {
+            throw new Error('Cannot initialize pool while shutting down');
+        }
+        // Lazy dynamic import — module loads even without the dep
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
+        const worklets = await import('react-native-worklets');
+        this.#workletsModule = worklets;
+        // Load ECC bundle
+        const { ECC_BUNDLE } = await import('./ecc-bundle.js');
+        this.#eccBundleCode = ECC_BUNDLE;
+        // Create runtimes and inject ECC
+        for (let i = 0; i < this.#config.workerCount; i++) {
+            await this.#createRuntime();
+        }
+        // Feature-detect Uint8Array support across worklet boundary
+        const firstRuntime = this.#runtimes[0];
+        if (firstRuntime) {
+            try {
+                const result = await this.#workletsModule.runOnRuntime(firstRuntime.runtime, () => {
+                    const arr = new Uint8Array([1, 2, 3]);
+                    return arr instanceof Uint8Array;
+                });
+                this.#uint8ArraySupported = result;
+            }
+            catch {
+                this.#uint8ArraySupported = false;
+            }
+        }
+        this.#initialized = true;
+    }
+    /**
+     * Signs a batch of tasks in parallel across worklet runtimes.
+     *
+     * SECURITY: Private keys are cloned per-runtime and zeroed both
+     * inside the worklet and in the main thread finally block.
+     */
+    async signBatch(tasks, keyPair) {
+        const startTime = performance.now();
+        if (!this.#initialized) {
+            await this.initialize();
+        }
+        if (tasks.length === 0) {
+            return {
+                success: true,
+                signatures: new Map(),
+                errors: new Map(),
+                durationMs: performance.now() - startTime,
+            };
+        }
+        // Distribute tasks round-robin
+        const runtimeCount = Math.min(this.#runtimes.length, tasks.length);
+        const taskBatches = Array.from({ length: runtimeCount }, () => []);
+        for (let i = 0; i < tasks.length; i++) {
+            const batch = taskBatches[i % runtimeCount];
+            const task = tasks[i];
+            if (batch && task) {
+                batch.push(task);
+            }
+        }
+        const privateKey = keyPair.getPrivateKey();
+        try {
+            const batchResults = await Promise.allSettled(taskBatches.map((batch, index) => this.#signBatchOnRuntime(batch, privateKey, keyPair.publicKey, index)));
+            const signatures = new Map();
+            const errors = new Map();
+            for (let i = 0; i < batchResults.length; i++) {
+                const result = batchResults[i];
+                if (!result)
+                    continue;
+                if (result.status === 'fulfilled') {
+                    for (const sig of result.value.signatures) {
+                        signatures.set(sig.inputIndex, sig);
+                    }
+                    for (const [idx, errMsg] of result.value.errors) {
+                        errors.set(idx, errMsg);
+                    }
+                }
+                else {
+                    const reason = result.reason;
+                    const errorMsg = reason?.message ?? 'Worklet batch signing failed';
+                    const failedBatch = taskBatches[i];
+                    if (failedBatch) {
+                        for (const task of failedBatch) {
+                            errors.set(task.inputIndex, errorMsg);
+                        }
+                    }
+                }
+            }
+            // Cleanup runtimes if not preserving
+            if (!this.#preserveWorkers) {
+                await this.shutdown();
+            }
+            return {
+                success: errors.size === 0,
+                signatures,
+                errors,
+                durationMs: performance.now() - startTime,
+            };
+        }
+        finally {
+            // SECURITY: Zero the key in main thread
+            privateKey.fill(0);
+        }
+    }
+    /** Shuts down all runtimes. */
+    // eslint-disable-next-line @typescript-eslint/require-await
+    async shutdown() {
+        if (this.#shuttingDown) {
+            return;
+        }
+        this.#shuttingDown = true;
+        // Worklet runtimes don't have a destroy() — clear references for GC
+        this.#runtimes.length = 0;
+        this.#workletsModule = null;
+        this.#eccBundleCode = null;
+        this.#initialized = false;
+        this.#shuttingDown = false;
+    }
+    [Symbol.dispose]() {
+        void this.shutdown();
+    }
+    async [Symbol.asyncDispose]() {
+        await this.shutdown();
+    }
+    /**
+     * Creates a new worklet runtime and injects the ECC bundle.
+     */
+    async #createRuntime() {
+        if (!this.#workletsModule || !this.#eccBundleCode) {
+            throw new Error('Worklets module or ECC bundle not loaded');
+        }
+        const id = this.#nextRuntimeId++;
+        const runtime = this.#workletsModule.createWorkletRuntime(`signing-runtime-${id}`);
+        // Inject ECC bundle into the worklet runtime.
+        // The bundle declares `var nobleBundle = (()=>{...})()` with "use strict",
+        // so a plain eval won't leak it to globalThis. We use `new Function` to
+        // execute the bundle and then explicitly assign the result.
+        const bundleCode = this.#eccBundleCode;
+        await this.#workletsModule.runOnRuntime(runtime, () => {
+            'worklet';
+            // eslint-disable-next-line @typescript-eslint/no-implied-eval
+            const fn = new Function(bundleCode + '; return nobleBundle;');
+            globalThis['nobleBundle'] = fn();
+        });
+        const pooled = { id, runtime, tainted: false };
+        this.#runtimes.push(pooled);
+        return pooled;
+    }
+    /**
+     * Replaces a tainted runtime with a fresh one.
+     */
+    async #replaceRuntime(pooled) {
+        const idx = this.#runtimes.indexOf(pooled);
+        if (idx >= 0) {
+            this.#runtimes.splice(idx, 1);
+        }
+        try {
+            await this.#createRuntime();
+        }
+        catch {
+            // If replacement fails, pool continues with fewer runtimes
+        }
+    }
+    /**
+     * Signs a batch of tasks on a specific runtime.
+     */
+    async #signBatchOnRuntime(tasks, privateKey, publicKey, runtimeIndex) {
+        if (tasks.length === 0) {
+            return { signatures: [], errors: new Map() };
+        }
+        const pooled = this.#runtimes[runtimeIndex];
+        if (!pooled || pooled.tainted) {
+            throw new Error(`Runtime ${runtimeIndex} unavailable or tainted`);
+        }
+        if (!this.#workletsModule) {
+            throw new Error('Worklets module not loaded');
+        }
+        // Prepare data for worklet transfer
+        const useArrayEncoding = !this.#uint8ArraySupported;
+        const keyData = useArrayEncoding
+            ? Array.from(privateKey)
+            : new Uint8Array(privateKey);
+        const taskData = tasks.map((t) => ({
+            taskId: t.taskId,
+            inputIndex: t.inputIndex,
+            hash: useArrayEncoding ? Array.from(t.hash) : new Uint8Array(t.hash),
+            signatureType: t.signatureType,
+            lowR: t.lowR,
+            sighashType: t.sighashType,
+            leafHash: t.leafHash
+                ? (useArrayEncoding ? Array.from(t.leafHash) : new Uint8Array(t.leafHash))
+                : undefined,
+        }));
+        const pubKeyData = useArrayEncoding
+            ? Array.from(publicKey)
+            : new Uint8Array(publicKey);
+        // Dispatch to worklet runtime with timeout
+        const signingPromise = this.#workletsModule.runOnRuntime(pooled.runtime, () => {
+            'worklet';
+            // Inside the worklet runtime, nobleBundle is available from init eval
+            // The bundled secp.sign() returns a compact 64-byte Uint8Array directly
+            // (not a Signature object). secp.schnorr.sign() also returns Uint8Array.
+            const eccModule = globalThis['nobleBundle'];
+            const toU8 = (data) => data instanceof Uint8Array ? data : new Uint8Array(data);
+            const privKey = toU8(keyData);
+            const results = [];
+            const errors = [];
+            try {
+                for (const task of taskData) {
+                    try {
+                        const hash = toU8(task.hash);
+                        let signature;
+                        if (task.signatureType === 1) {
+                            signature = eccModule.secp.schnorr.sign(hash, privKey);
+                        }
+                        else {
+                            // prehash: false — input is already a 32-byte hash
+                            signature = eccModule.secp.sign(hash, privKey, {
+                                lowS: true,
+                                prehash: false,
+                            });
+                        }
+                        const entry = {
+                            type: 'result',
+                            taskId: task.taskId,
+                            signature: Array.from(signature),
+                            inputIndex: task.inputIndex,
+                            publicKey: Array.from(toU8(pubKeyData)),
+                            signatureType: task.signatureType,
+                        };
+                        if (task.leafHash) {
+                            entry.leafHash = Array.from(toU8(task.leafHash));
+                        }
+                        results.push(entry);
+                    }
+                    catch (err) {
+                        const msg = err instanceof Error ? err.message : 'Signing failed';
+                        errors.push({ inputIndex: task.inputIndex, error: msg });
+                    }
+                }
+            }
+            finally {
+                // SECURITY: Zero key inside worklet
+                privKey.fill(0);
+            }
+            return { results, errors };
+        });
+        // Timeout guard
+        const timeoutPromise = new Promise((_resolve, reject) => {
+            setTimeout(() => {
+                pooled.tainted = true;
+                this.#replaceRuntime(pooled).catch(() => { });
+                reject(new Error(`Worklet signing timeout for ${tasks.length} tasks`));
+            }, this.#config.maxKeyHoldTimeMs);
+        });
+        const raw = await Promise.race([signingPromise, timeoutPromise]);
+        // Convert results back to proper types
+        const signatures = raw.results.map((r) => ({
+            type: 'result',
+            taskId: r.taskId,
+            signature: new Uint8Array(r.signature),
+            inputIndex: r.inputIndex,
+            publicKey: new Uint8Array(r.publicKey),
+            signatureType: r.signatureType,
+            leafHash: r.leafHash ? new Uint8Array(r.leafHash) : undefined,
+        }));
+        const errors = new Map();
+        for (const e of raw.errors) {
+            errors.set(e.inputIndex, e.error);
+        }
+        return { signatures, errors };
+    }
+}
+//# sourceMappingURL=WorkerSigningPool.worklet.js.map

package/build/workers/WorkerSigningPool.worklet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkerSigningPool.worklet.js","sourceRoot":"","sources":["../../src/workers/WorkerSigningPool.worklet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAkB3C;;GAEG;AACH,MAAM,cAAc,GAA+B;IAC/C,WAAW,EAAE,CAAC;IACd,aAAa,EAAE,KAAK;IACpB,gBAAgB,EAAE,IAAI;IACtB,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,KAAK;CACzB,CAAC;AAWF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,kBAAkB;IAC3B,MAAM,CAAC,SAAS,GAA8B,IAAI,CAAC;IAE1C,OAAO,CAA6B;IACpC,SAAS,GAAoB,EAAE,CAAC;IAEzC,eAAe,GAA0B,IAAI,CAAC;IAC9C,cAAc,GAAkB,IAAI,CAAC;IACrC,gBAAgB,GAAY,KAAK,CAAC;IAClC,cAAc,GAAW,CAAC,CAAC;IAC3B,YAAY,GAAY,KAAK,CAAC;IAC9B,aAAa,GAAY,KAAK,CAAC;IAE/B;;;OAGG;IACH,oBAAoB,GAAY,IAAI,CAAC;IAErC,YAAoB,SAA2B,EAAE;QAC7C,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAChD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;IACzD,CAAC;IAED,iCAAiC;IACjC,IAAW,WAAW;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IACjC,CAAC;IAED,uCAAuC;IACvC,IAAW,eAAe;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC3D,CAAC;IAED,qDAAqD;IACrD,IAAW,eAAe;QACtB,OAAO,CAAC,CAAC;IACb,CAAC;IAED,sDAAsD;IACtD,IAAW,mBAAmB;QAC1B,OAAO,IAAI,CAAC,gBAAgB,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,WAAW,CAAC,MAAyB;QAC/C,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC;YAChC,kBAAkB,CAAC,SAAS,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,kBAAkB,CAAC,SAAS,CAAC;IACxC,CAAC;IAED,mDAAmD;IAC5C,MAAM,CAAC,aAAa;QACvB,IAAI,kBAAkB,CAAC,SAAS,EAAE,CAAC;YAC/B,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxD,kBAAkB,CAAC,SAAS,GAAG,IAAI,CAAC;QACxC,CAAC;IACL,CAAC;IAED,2DAA2D;IACpD,eAAe;QAClB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IACjC,CAAC;IAED,oCAAoC;IAC7B,cAAc;QACjB,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,UAAU;QACnB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACX,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAClE,CAAC;QAED,0DAA0D;QAC1D,mEAAmE;QACnE,MAAM,QAAQ,GAAmB,MAAM,MAAM,CAAC,uBAAiC,CAAC,CAAC;QACjF,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAEhC,kBAAkB;QAClB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACvD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC;QAEjC,iCAAiC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChC,CAAC;QAED,4DAA4D;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,YAAY,EAAE,CAAC;YACf,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAClD,YAAY,CAAC,OAAO,EACpB,GAAG,EAAE;oBACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBACtC,OAAO,GAAG,YAAY,UAAU,CAAC;gBACrC,CAAC,CACJ,CAAC;gBACF,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACL,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC;YACtC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,SAAS,CAClB,KAA6B,EAC7B,OAA8B;QAE9B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO;gBACH,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,IAAI,GAAG,EAAE;gBACrB,MAAM,EAAE,IAAI,GAAG,EAAE;gBACjB,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC5C,CAAC;QACN,CAAC;QAED,+BAA+B;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,WAAW,GAAoB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAEpF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;QAE3C,IAAI,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,UAAU,CACzC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC7B,IAAI,CAAC,mBAAmB,CACpB,KAAK,EACL,UAAU,EACV,OAAO,CAAC,SAAS,EACjB,KAAK,CACR,CACJ,CACJ,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;YAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC/B,IAAI,CAAC,MAAM;oBAAE,SAAS;gBAEtB,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;wBACxC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;oBACxC,CAAC;oBACD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;wBAC9C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC5B,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,CAAC,MAA0C,CAAC;oBACjE,MAAM,QAAQ,GAAG,MAAM,EAAE,OAAO,IAAI,8BAA8B,CAAC;oBACnE,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;oBACnC,IAAI,WAAW,EAAE,CAAC;wBACd,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;4BAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;wBAC1C,CAAC;oBACL,CAAC;gBACL,CAAC;YACL,CAAC;YAED,qCAAqC;YACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,CAAC;YAED,OAAO;gBACH,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC;gBAC1B,UAAU;gBACV,MAAM;gBACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC5C,CAAC;QACN,CAAC;gBAAS,CAAC;YACP,wCAAwC;YACxC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,4DAA4D;IACrD,KAAK,CAAC,QAAQ;QACjB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO;QACX,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAE1B,oEAAoE;QACpE,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC/B,CAAC;IAEM,CAAC,MAAM,CAAC,OAAO,CAAC;QACnB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QAC9B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAChB,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAEnF,8CAA8C;QAC9C,2EAA2E;QAC3E,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC;QACvC,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE;YAClD,SAAS,CAAC;YACV,8DAA8D;YAC9D,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,GAAG,uBAAuB,CAAkB,CAAC;YAC9E,UAAsC,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAkB,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,MAAqB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACL,2DAA2D;QAC/D,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACrB,KAA6B,EAC7B,UAAsB,EACtB,SAAqB,EACrB,YAAoB;QAKpB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,yBAAyB,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAClD,CAAC;QAED,oCAAoC;QACpC,MAAM,gBAAgB,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACpD,MAAM,OAAO,GAA0B,gBAAgB;YACnD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACxB,CAAC,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;YACpE,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBAChB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC1E,CAAC,CAAC,SAAS;SAClB,CAAC,CAAC,CAAC;QAEJ,MAAM,UAAU,GAA0B,gBAAgB;YACtD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YACvB,CAAC,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QAEhC,2CAA2C;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CACpD,MAAM,CAAC,OAAO,EACd,GAAG,EAAE;YACD,SAAS,CAAC;YACV,sEAAsE;YACtE,wEAAwE;YACxE,yEAAyE;YACzE,MAAM,SAAS,GAAI,UAAsC,CAAC,aAAa,CAWtE,CAAC;YAEF,MAAM,IAAI,GAAG,CAAC,IAA2B,EAAc,EAAE,CACrD,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;YAE7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,MAAM,OAAO,GAQR,EAAE,CAAC;YACR,MAAM,MAAM,GAAiD,EAAE,CAAC;YAEhE,IAAI,CAAC;gBACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC7B,IAAI,SAAqB,CAAC;wBAE1B,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;4BAC3B,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;wBAC3D,CAAC;6BAAM,CAAC;4BACJ,mDAAmD;4BACnD,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE;gCAC3C,IAAI,EAAE,IAAI;gCACV,OAAO,EAAE,KAAK;6BACjB,CAAC,CAAC;wBACP,CAAC;wBAED,MAAM,KAAK,GAA6B;4BACpC,IAAI,EAAE,QAAiB;4BACvB,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;4BAChC,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;4BACvC,aAAa,EAAE,IAAI,CAAC,aAAa;yBACpC,CAAC;wBACF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;4BAChB,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;wBACrD,CAAC;wBACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACxB,CAAC;oBAAC,OAAO,GAAY,EAAE,CAAC;wBACpB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;wBAClE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC7D,CAAC;gBACL,CAAC;YACL,CAAC;oBAAS,CAAC;gBACP,oCAAoC;gBACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC,CACJ,CAAC;QAEF,gBAAgB;QAChB,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YAC3D,UAAU,CAAC,GAAG,EAAE;gBACZ,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC7C,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC;YAC3E,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;QAEjE,uCAAuC;QACvC,MAAM,UAAU,GAA2B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI,EAAE,QAAiB;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACtC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,SAAS,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACtC,aAAa,EAAE,CAAC,CAAC,aAA8B;YAC/C,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SAChE,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC"}