@cmdoss/memwal-sdk 0.6.0

package/dist/client/namespaces/consolidated/SecurityNamespace.js

@@ -0,0 +1,522 @@
+/**
+ * Security Namespace - Consolidated Security & Access Control
+ *
+ * Merges functionality from:
+ * - EncryptionNamespace: SEAL-based encryption/decryption
+ * - PermissionsNamespace: OAuth-style access control
+ * - ContextNamespace: App context (MemoryCap) management
+ *
+ * Provides a unified interface for all security operations.
+ *
+ * Key features:
+ * - SEAL encryption with identity-based access control
+ * - Decryption with capability-based or legacy allowlist patterns
+ * - App contexts (MemoryCap) for app-scoped data
+ * - OAuth-style permission grants and revocations
+ *
+ * @module client/namespaces/consolidated
+ */
+import { CapabilityService } from '../../../services/CapabilityService.js';
+// ============================================================================
+// Sub-Namespaces
+// ============================================================================
+/**
+ * Context sub-namespace for app context management
+ */
+class ContextSubNamespace {
+    constructor(services) {
+        this.services = services;
+        this.capService = null;
+        const suiClient = this.services.config.sui?.client;
+        const packageId = this.services.config.sui?.packageId;
+        if (suiClient && packageId) {
+            this.capService = new CapabilityService({ suiClient, packageId });
+        }
+    }
+    ensureService() {
+        if (!this.capService) {
+            throw new Error('CapabilityService not initialized. Check Sui configuration.');
+        }
+        return this.capService;
+    }
+    /**
+     * Create a new context for an app
+     *
+     * @param appId - Application identifier (e.g., "MEMO", "HEALTH", "FINANCE")
+     * @returns Created context (MemoryCap)
+     *
+     * @example
+     * ```typescript
+     * const memoContext = await pdw.security.context.create('MEMO');
+     * ```
+     */
+    async create(appId) {
+        const service = this.ensureService();
+        const signer = this.services.config.signer.getSigner();
+        return await service.create({ appId }, signer);
+    }
+    /**
+     * Get context by app ID
+     *
+     * @param appId - Application identifier
+     * @returns Context or null if not found
+     */
+    async get(appId) {
+        const service = this.ensureService();
+        return await service.get(this.services.config.userAddress, appId);
+    }
+    /**
+     * Get or create context for an app
+     *
+     * @param appId - Application identifier
+     * @returns Existing or newly created context
+     *
+     * @example
+     * ```typescript
+     * const ctx = await pdw.security.context.getOrCreate('MEMO');
+     * ```
+     */
+    async getOrCreate(appId) {
+        const service = this.ensureService();
+        const signer = this.services.config.signer.getSigner();
+        return await service.getOrCreate({ appId, userAddress: this.services.config.userAddress }, signer);
+    }
+    /**
+     * List all contexts owned by the user
+     *
+     * @returns Array of contexts (MemoryCaps)
+     */
+    async list() {
+        const service = this.ensureService();
+        return await service.list({ userAddress: this.services.config.userAddress });
+    }
+    /**
+     * Delete a context (burns the capability)
+     *
+     * Warning: This permanently revokes access to all memories
+     * encrypted with this context's key.
+     *
+     * @param appId - Application identifier
+     */
+    async delete(appId) {
+        const service = this.ensureService();
+        const signer = this.services.config.signer.getSigner();
+        const cap = await service.get(this.services.config.userAddress, appId);
+        if (!cap) {
+            throw new Error(`Context not found for appId: ${appId}`);
+        }
+        await service.burn({ capId: cap.id }, signer);
+    }
+    /**
+     * Transfer context to another user
+     *
+     * @param appId - Application identifier
+     * @param recipient - Recipient's Sui address
+     */
+    async transfer(appId, recipient) {
+        const service = this.ensureService();
+        const signer = this.services.config.signer.getSigner();
+        const cap = await service.get(this.services.config.userAddress, appId);
+        if (!cap) {
+            throw new Error(`Context not found for appId: ${appId}`);
+        }
+        await service.transfer({ capId: cap.id, recipient }, signer);
+    }
+    /**
+     * Check if context exists for an app
+     *
+     * @param appId - Application identifier
+     * @returns True if context exists
+     */
+    async exists(appId) {
+        const service = this.ensureService();
+        return await service.hasCapability(this.services.config.userAddress, appId);
+    }
+    /**
+     * Get SEAL key ID for a context
+     *
+     * @param appId - Application identifier
+     * @returns Key ID as hex string
+     */
+    async getKeyId(appId) {
+        const service = this.ensureService();
+        const cap = await service.get(this.services.config.userAddress, appId);
+        if (!cap)
+            return null;
+        return service.computeKeyId(cap);
+    }
+    /**
+     * Get all app IDs for user's contexts
+     *
+     * @returns Array of app IDs
+     */
+    async getAppIds() {
+        const contexts = await this.list();
+        return contexts.map(ctx => ctx.appId);
+    }
+}
+/**
+ * Permissions sub-namespace for OAuth-style access control
+ */
+class PermissionsSubNamespace {
+    constructor(services) {
+        this.services = services;
+    }
+    /**
+     * Request user consent for data access
+     *
+     * @param appId - Application identifier
+     * @param scopes - Requested permission scopes
+     * @param purpose - Purpose description
+     * @returns Consent request record
+     */
+    async request(appId, scopes, purpose) {
+        if (!this.services.permissions) {
+            throw new Error('Permission service not configured.');
+        }
+        return await this.services.permissions.requestConsent({
+            requesterWallet: appId,
+            targetWallet: this.services.config.userAddress,
+            scopes,
+            purpose
+        });
+    }
+    /**
+     * Grant permissions to an app
+     *
+     * @param appId - Application to grant access
+     * @param scopes - Scopes to grant
+     * @param expiresAt - Optional expiration timestamp
+     * @returns Access grant record
+     *
+     * @example
+     * ```typescript
+     * await pdw.security.permissions.grant('HEALTH_APP', ['read', 'write']);
+     * ```
+     */
+    async grant(appId, scopes, expiresAt) {
+        if (!this.services.permissions) {
+            throw new Error('Permission service not configured.');
+        }
+        return await this.services.permissions.grantPermissions(this.services.config.userAddress, {
+            requestingWallet: appId,
+            targetWallet: this.services.config.userAddress,
+            scopes,
+            expiresAt,
+            signer: this.services.config.signer.getSigner()
+        });
+    }
+    /**
+     * Revoke permission scope from an app
+     *
+     * @param appId - Application to revoke from
+     * @param scope - Scope to revoke
+     * @returns Success status
+     *
+     * @example
+     * ```typescript
+     * await pdw.security.permissions.revoke('HEALTH_APP', 'write');
+     * ```
+     */
+    async revoke(appId, scope) {
+        if (!this.services.permissions) {
+            throw new Error('Permission service not configured.');
+        }
+        return await this.services.permissions.revokePermissions(this.services.config.userAddress, {
+            requestingWallet: appId,
+            targetWallet: this.services.config.userAddress,
+            scope,
+            signer: this.services.config.signer.getSigner()
+        });
+    }
+    /**
+     * Check if app has specific permission
+     *
+     * @param appId - Application to check
+     * @param scope - Scope to check
+     * @returns True if permission exists and valid
+     */
+    async check(appId, scope) {
+        if (!this.services.permissions) {
+            throw new Error('Permission service not configured.');
+        }
+        return await this.services.permissions.checkPermission(appId, scope, this.services.config.userAddress);
+    }
+    /**
+     * List all permission grants for the current user
+     *
+     * @returns Array of active grants
+     */
+    async list() {
+        if (!this.services.permissions) {
+            throw new Error('Permission service not configured.');
+        }
+        const grants = await this.services.permissions.getGrantsByUser(this.services.config.userAddress);
+        const now = Date.now();
+        return grants.filter(g => !g.expiresAt || g.expiresAt > now);
+    }
+    /**
+     * Get pending consent requests
+     *
+     * @returns Array of pending consent requests
+     */
+    async getPending() {
+        if (!this.services.permissions) {
+            throw new Error('Permission service not configured.');
+        }
+        const consents = await this.services.permissions.getPendingConsents(this.services.config.userAddress);
+        return consents.map(c => ({
+            ...c,
+            requestId: c.requestId || `req_${Date.now()}`,
+            createdAt: c.createdAt || Date.now(),
+            updatedAt: c.updatedAt || Date.now(),
+            status: c.status || 'pending'
+        }));
+    }
+    /**
+     * Approve a consent request
+     *
+     * @param consentId - Consent request ID
+     * @returns Access grant
+     */
+    async approve(consentId) {
+        if (!this.services.permissions) {
+            throw new Error('Permission service not configured.');
+        }
+        const consents = await this.getPending();
+        const consent = consents.find(c => c.requestId === consentId);
+        if (!consent) {
+            throw new Error(`Consent request ${consentId} not found`);
+        }
+        return await this.services.permissions.approveConsent(this.services.config.userAddress, consent, consent.targetWallet);
+    }
+    /**
+     * Deny a consent request
+     *
+     * @param consentId - Consent request ID
+     * @returns Success status
+     */
+    async deny(consentId) {
+        if (!this.services.permissions) {
+            throw new Error('Permission service not configured.');
+        }
+        const consents = await this.getPending();
+        const consent = consents.find(c => c.requestId === consentId);
+        if (!consent) {
+            throw new Error(`Consent request ${consentId} not found`);
+        }
+        return await this.services.permissions.denyConsent(this.services.config.userAddress, consent);
+    }
+}
+// ============================================================================
+// Security Namespace
+// ============================================================================
+/**
+ * Security Namespace - Unified Security Operations
+ *
+ * Consolidates encryption, decryption, permissions, and context management.
+ *
+ * @example
+ * ```typescript
+ * // Encrypt data
+ * const { encryptedData, backupKey } = await pdw.security.encrypt(data);
+ *
+ * // Decrypt data
+ * const decrypted = await pdw.security.decrypt({ encryptedData });
+ *
+ * // Manage app contexts
+ * const ctx = await pdw.security.context.getOrCreate('MEMO');
+ *
+ * // Grant permissions
+ * await pdw.security.permissions.grant('APP_ID', ['read', 'write']);
+ * ```
+ */
+export class SecurityNamespace {
+    constructor(services) {
+        this.services = services;
+        this._context = new ContextSubNamespace(services);
+        this._permissions = new PermissionsSubNamespace(services);
+    }
+    // ==========================================================================
+    // Sub-Namespaces
+    // ==========================================================================
+    /**
+     * App context (MemoryCap) management
+     */
+    get context() {
+        return this._context;
+    }
+    /**
+     * OAuth-style permission management
+     */
+    get permissions() {
+        return this._permissions;
+    }
+    // ==========================================================================
+    // Encryption Operations (from EncryptionNamespace)
+    // ==========================================================================
+    /**
+     * Encrypt data using SEAL
+     *
+     * NOTE: This uses userAddress as identity. For capability pattern,
+     * use encryptWithKeyId() instead.
+     *
+     * @param data - Data to encrypt
+     * @param threshold - Min key servers required (default: 2)
+     * @returns Encrypted data and backup key
+     *
+     * @example
+     * ```typescript
+     * const encoder = new TextEncoder();
+     * const data = encoder.encode('sensitive data');
+     * const { encryptedData, backupKey } = await pdw.security.encrypt(data);
+     * ```
+     */
+    async encrypt(data, threshold = 2) {
+        if (!this.services.encryption) {
+            throw new Error('Encryption service not configured. Initialize with encryption config.');
+        }
+        const result = await this.services.encryption.encrypt(data, this.services.config.userAddress, threshold);
+        return {
+            encryptedData: result.encryptedObject,
+            backupKey: result.backupKey
+        };
+    }
+    /**
+     * Encrypt data using SEAL with capability-based key ID
+     *
+     * Use this for capability pattern where keyId = keccak256(owner || nonce).
+     * The keyId MUST match what's passed to seal_approve during decryption.
+     *
+     * @param data - Data to encrypt
+     * @param keyId - Key ID bytes (compute with computeKeyId())
+     * @param threshold - Min key servers required (default: 2)
+     * @returns Encrypted data and backup key
+     *
+     * @example
+     * ```typescript
+     * const keyId = pdw.security.computeKeyId(ownerAddress, nonce);
+     * const { encryptedData } = await pdw.security.encryptWithKeyId(data, keyId);
+     * ```
+     */
+    async encryptWithKeyId(data, keyId, threshold = 2) {
+        if (!this.services.encryption) {
+            throw new Error('Encryption service not configured. Initialize with encryption config.');
+        }
+        const keyIdHex = '0x' + Array.from(keyId).map(b => b.toString(16).padStart(2, '0')).join('');
+        const result = await this.services.encryption.encrypt(data, keyIdHex, threshold);
+        return {
+            encryptedData: result.encryptedObject,
+            backupKey: result.backupKey
+        };
+    }
+    /**
+     * Decrypt SEAL-encrypted data
+     *
+     * Supports two access control patterns:
+     * 1. Capability pattern (recommended): Pass memoryCapId and keyId
+     * 2. Legacy allowlist pattern: Only requestingWallet needed
+     *
+     * @param options - Decryption options
+     * @returns Decrypted data
+     *
+     * @example
+     * ```typescript
+     * // Capability-based decryption
+     * const decrypted = await pdw.security.decrypt({
+     *   encryptedData,
+     *   memoryCapId: cap.id,
+     *   keyId: keyIdBytes
+     * });
+     *
+     * // Or simple decryption (legacy)
+     * const decrypted = await pdw.security.decrypt({ encryptedData });
+     * ```
+     */
+    async decrypt(options) {
+        if (!this.services.encryption) {
+            throw new Error('Encryption service not configured.');
+        }
+        return await this.services.encryption.decrypt({
+            encryptedContent: options.encryptedData,
+            userAddress: this.services.config.userAddress,
+            sessionKey: options.sessionKey,
+            requestingWallet: options.requestingWallet || this.services.config.userAddress,
+            memoryCapId: options.memoryCapId,
+            keyId: options.keyId
+        });
+    }
+    /**
+     * Compute SEAL key_id from owner and nonce
+     *
+     * Use this to compute the key_id needed for capability-based encryption/decryption.
+     * The nonce comes from the MemoryCap object on-chain.
+     *
+     * @param ownerAddress - Owner's Sui address
+     * @param nonce - Nonce from MemoryCap object (32 bytes)
+     * @returns key_id bytes for SEAL operations
+     *
+     * @example
+     * ```typescript
+     * const ctx = await pdw.security.context.get('MEMO');
+     * const keyId = pdw.security.computeKeyId(userAddress, ctx.nonce);
+     * ```
+     */
+    computeKeyId(ownerAddress, nonce) {
+        if (!this.services.encryption) {
+            throw new Error('Encryption service not configured.');
+        }
+        return this.services.encryption.computeKeyId(ownerAddress, nonce);
+    }
+    // ==========================================================================
+    // Session Key Management
+    // ==========================================================================
+    /**
+     * Create session key for SEAL operations
+     *
+     * @param signer - Optional signer (keypair or signPersonalMessage function)
+     * @returns Session key
+     */
+    async createSessionKey(signer) {
+        if (!this.services.encryption) {
+            throw new Error('Encryption service not configured.');
+        }
+        return await this.services.encryption.createSessionKey(this.services.config.userAddress, signer);
+    }
+    /**
+     * Get or create session key (cached)
+     *
+     * @returns Cached or new session key
+     */
+    async getSessionKey() {
+        if (!this.services.encryption) {
+            throw new Error('Encryption service not configured.');
+        }
+        return await this.services.encryption.getOrCreateSessionKey(this.services.config.userAddress);
+    }
+    /**
+     * Export session key for persistence
+     *
+     * @param sessionKey - Session key to export
+     * @returns Serialized session key
+     */
+    async exportSessionKey(sessionKey) {
+        if (!this.services.encryption) {
+            throw new Error('Encryption service not configured.');
+        }
+        return await this.services.encryption.exportSessionKey(sessionKey);
+    }
+    /**
+     * Import previously exported session key
+     *
+     * @param exportedKey - Serialized session key
+     * @returns Session key instance
+     */
+    async importSessionKey(exportedKey) {
+        if (!this.services.encryption) {
+            throw new Error('Encryption service not configured.');
+        }
+        return await this.services.encryption.importSessionKey(exportedKey, this.services.config.userAddress);
+    }
+}
+//# sourceMappingURL=SecurityNamespace.js.map

package/dist/client/namespaces/consolidated/SecurityNamespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityNamespace.js","sourceRoot":"","sources":["../../../../src/client/namespaces/consolidated/SecurityNamespace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAUH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAqCxE,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,mBAAmB;IAGvB,YAAoB,QAA0B;QAA1B,aAAQ,GAAR,QAAQ,CAAkB;QAFtC,eAAU,GAA6B,IAAI,CAAC;QAGlD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC;QAEtD,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,iBAAiB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACvD,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACvD,OAAO,MAAM,OAAO,CAAC,WAAW,CAC9B,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EACxD,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,SAAiB;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,OAAO,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,uBAAuB;IAC3B,YAAoB,QAA0B;QAA1B,aAAQ,GAAR,QAAQ,CAAkB;IAAG,CAAC;IAElD;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CACX,KAAa,EACb,MAAyB,EACzB,OAAe;QAEf,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC;YACpD,eAAe,EAAE,KAAK;YACtB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW;YAC9C,MAAM;YACN,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,KAAK,CACT,KAAa,EACb,MAAyB,EACzB,SAAkB;QAElB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CACrD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAChC;YACE,gBAAgB,EAAE,KAAK;YACvB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW;YAC9C,MAAM;YACN,SAAS;YACT,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAAsB;QAChD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,iBAAiB,CACtD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAChC;YACE,gBAAgB,EAAE,KAAK;YACvB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW;YAC9C,KAAK;YACL,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAAsB;QAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CACpD,KAAK,EACL,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CACjC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CACjC,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CACjE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CACjC,CAAC;QACF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,CAAC;YACJ,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE;YAC7C,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;SAC9B,CAAC,CAA2B,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,YAAY,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAChC,OAAc,EACd,OAAO,CAAC,YAAY,CACrB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,YAAY,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAChD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAChC,OAAc,CACf,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,iBAAiB;IAI5B,YAAoB,QAA0B;QAA1B,aAAQ,GAAR,QAAQ,CAAkB;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAED,6EAA6E;IAC7E,iBAAiB;IACjB,6EAA6E;IAE7E;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,6EAA6E;IAC7E,mDAAmD;IACnD,6EAA6E;IAE7E;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,OAAO,CAAC,IAAgB,EAAE,YAAoB,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CACnD,IAAI,EACJ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAChC,SAAS,CACV,CAAC;QACF,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,eAAe;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,gBAAgB,CAAC,IAAgB,EAAE,KAAiB,EAAE,YAAoB,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjF,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,eAAe;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAC5C,gBAAgB,EAAE,OAAO,CAAC,aAAa;YACvC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW;YAC7C,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW;YAC9E,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,YAAY,CAAC,YAAoB,EAAE,KAAiB;QAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,6EAA6E;IAC7E,yBAAyB;IACzB,6EAA6E;IAE7E;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAGtB;QACC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CACpD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAChC,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CACzD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CACjC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAsB;QAC3C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CACpD,WAAW,EACX,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CACjC,CAAC;IACJ,CAAC;CACF"}