@coinbase/cdp-sdk 1.1.1 → 1.2.0

package/_esm/auth/utils/jwt.js

@@ -0,0 +1,199 @@
+import * as crypto from "crypto";
+import { createPrivateKey } from "crypto";
+import { SignJWT, importPKCS8, importJWK } from "jose";
+import { InvalidWalletSecretFormatError, UndefinedWalletSecretError } from "../errors.js";
+/**
+ * Generates a JWT (also known as a Bearer token) for authenticating with Coinbase's REST APIs.
+ * Supports both EC (ES256) and Ed25519 (EdDSA) keys.
+ *
+ * @param options - The configuration options for generating the JWT
+ * @returns The generated JWT (Bearer token) string
+ * @throws {Error} If required parameters are missing, invalid, or if JWT signing fails
+ */
+export async function generateJwt(options) {
+    // Validate required parameters
+    if (!options.apiKeyId) {
+        throw new Error("Key name is required");
+    }
+    if (!options.apiKeySecret) {
+        throw new Error("Private key is required");
+    }
+    if (!options.requestMethod || !options.requestHost || !options.requestPath) {
+        throw new Error("Request details (method, host, path) are required");
+    }
+    const now = Math.floor(Date.now() / 1000);
+    const expiresIn = options.expiresIn || 120; // Default to 120 seconds if not specified
+    const uri = `${options.requestMethod} ${options.requestHost}${options.requestPath}`;
+    // Prepare the JWT payload
+    const claims = {
+        sub: options.apiKeyId,
+        iss: "cdp",
+        aud: ["cdp_service"],
+        uris: [uri],
+    };
+    // Generate random nonce for the header
+    const randomNonce = nonce();
+    // Determine if we're using EC or Edwards key based on the key format
+    if (isValidECKey(options.apiKeySecret)) {
+        return await buildECJWT(options.apiKeySecret, options.apiKeyId, claims, now, expiresIn, randomNonce);
+    }
+    else if (isValidEd25519Key(options.apiKeySecret)) {
+        return await buildEdwardsJWT(options.apiKeySecret, options.apiKeyId, claims, now, expiresIn, randomNonce);
+    }
+    else {
+        throw new Error("Invalid key format - must be either PEM EC key or base64 Ed25519 key");
+    }
+}
+/**
+ * Generates a wallet authentication JWT for the given API endpoint URL.
+ * Used for authenticating with specific endpoints that require wallet authentication.
+ *
+ * @param options - The configuration options for generating the JWT
+ * @returns The generated JWT (Bearer token) string
+ * @throws {UndefinedWalletSecretError} If the Wallet Secret is not defined.
+ * @throws {InvalidWalletSecretFormatError} If the private key is not in the correct format or signing fails.
+ */
+export async function generateWalletJwt(options) {
+    if (!options.walletSecret) {
+        throw new UndefinedWalletSecretError("Wallet Secret is not defined");
+    }
+    const uri = `${options.requestMethod} ${options.requestHost}${options.requestPath}`;
+    const now = Math.floor(Date.now() / 1000);
+    const claims = {
+        uris: [uri],
+    };
+    if (Object.keys(options.requestData).length > 0) {
+        claims.req = options.requestData;
+    }
+    try {
+        const ecKey = createPrivateKey({
+            key: options.walletSecret,
+            format: "der",
+            type: "pkcs8",
+            encoding: "base64",
+        });
+        return await new SignJWT(claims)
+            .setProtectedHeader({ alg: "ES256", typ: "JWT" })
+            .setIssuedAt(now)
+            .setNotBefore(now)
+            .setJti(nonce())
+            .sign(ecKey);
+    }
+    catch (error) {
+        throw new InvalidWalletSecretFormatError("Could not create the EC key: " + error);
+    }
+}
+/**
+ * Determines if a string could be a valid Ed25519 key
+ *
+ * @param str - The string to test
+ * @returns True if the string could be a valid Ed25519 key, false otherwise
+ */
+function isValidEd25519Key(str) {
+    try {
+        const decoded = Buffer.from(str, "base64");
+        return decoded.length === 64;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Determines if a string is a valid EC private key in PEM format
+ *
+ * @param str - The string to test
+ * @returns True if the string is a valid EC private key in PEM format
+ */
+function isValidECKey(str) {
+    try {
+        // Attempt to create a private key object - will throw if invalid
+        const key = createPrivateKey(str);
+        // Check if it's an EC key by examining its asymmetric key type
+        return key.asymmetricKeyType === "ec";
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Builds a JWT using an EC key.
+ *
+ * @param privateKey - The EC private key in PEM format
+ * @param keyName - The key name/ID
+ * @param claims - The JWT claims
+ * @param now - Current timestamp in seconds
+ * @param expiresIn - Number of seconds until the token expires
+ * @param nonce - Random nonce for the JWT header
+ * @returns A JWT token signed with an EC key
+ * @throws {Error} If key conversion, import, or signing fails
+ */
+async function buildECJWT(privateKey, keyName, claims, now, expiresIn, nonce) {
+    try {
+        // Convert to PKCS8 format
+        const keyObj = createPrivateKey(privateKey);
+        const pkcs8Key = keyObj.export({ type: "pkcs8", format: "pem" }).toString();
+        // Import the key for signing
+        const ecKey = await importPKCS8(pkcs8Key, "ES256");
+        // Sign and return the JWT
+        return await new SignJWT(claims)
+            .setProtectedHeader({ alg: "ES256", kid: keyName, typ: "JWT", nonce })
+            .setIssuedAt(Math.floor(now))
+            .setNotBefore(Math.floor(now))
+            .setExpirationTime(Math.floor(now + expiresIn))
+            .sign(ecKey);
+    }
+    catch (error) {
+        throw new Error(`Failed to generate EC JWT: ${error.message}`);
+    }
+}
+/**
+ * Builds a JWT using an Ed25519 key.
+ *
+ * @param privateKey - The Ed25519 private key in base64 format
+ * @param keyName - The key name/ID
+ * @param claims - The JWT claims
+ * @param now - Current timestamp in seconds
+ * @param expiresIn - Number of seconds until the token expires
+ * @param nonce - Random nonce for the JWT header
+ * @returns A JWT token using an Ed25519 key
+ * @throws {Error} If key parsing, import, or signing fails
+ */
+async function buildEdwardsJWT(privateKey, keyName, claims, now, expiresIn, nonce) {
+    try {
+        // Decode the base64 key (expecting 64 bytes: 32 for seed + 32 for public key)
+        const decoded = Buffer.from(privateKey, "base64");
+        if (decoded.length !== 64) {
+            throw new Error("Invalid Ed25519 key length");
+        }
+        const seed = decoded.subarray(0, 32);
+        const publicKey = decoded.subarray(32);
+        // Create JWK from the key components
+        const jwk = {
+            kty: "OKP",
+            crv: "Ed25519",
+            d: seed.toString("base64url"),
+            x: publicKey.toString("base64url"),
+        };
+        // Import the key for signing
+        const key = await importJWK(jwk, "EdDSA");
+        // Sign and return the JWT
+        return await new SignJWT(claims)
+            .setProtectedHeader({ alg: "EdDSA", kid: keyName, typ: "JWT", nonce })
+            .setIssuedAt(Math.floor(now))
+            .setNotBefore(Math.floor(now))
+            .setExpirationTime(Math.floor(now + expiresIn))
+            .sign(key);
+    }
+    catch (error) {
+        throw new Error(`Failed to generate Ed25519 JWT: ${error.message}`);
+    }
+}
+/**
+ * Generates a random nonce for the JWT.
+ *
+ * @returns {string} The generated nonce.
+ */
+function nonce() {
+    return crypto.randomBytes(16).toString("hex");
+}
+//# sourceMappingURL=jwt.js.map

package/_esm/auth/utils/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../auth/utils/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAc,MAAM,MAAM,CAAC;AAEnE,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAmF1F;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAmB;IACnD,+BAA+B;IAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,0CAA0C;IACtF,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEpF,0BAA0B;IAC1B,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,CAAC,aAAa,CAAC;QACpB,IAAI,EAAE,CAAC,GAAG,CAAC;KACZ,CAAC;IAEF,uCAAuC;IACvC,MAAM,WAAW,GAAG,KAAK,EAAE,CAAC;IAE5B,qEAAqE;IACrE,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,OAAO,MAAM,UAAU,CACrB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,QAAQ,EAChB,MAAM,EACN,GAAG,EACH,SAAS,EACT,WAAW,CACZ,CAAC;IACJ,CAAC;SAAM,IAAI,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACnD,OAAO,MAAM,eAAe,CAC1B,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,QAAQ,EAChB,MAAM,EACN,GAAG,EACH,SAAS,EACT,WAAW,CACZ,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAyB;IAC/D,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,IAAI,0BAA0B,CAAC,8BAA8B,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAe;QACzB,IAAI,EAAE,CAAC,GAAG,CAAC;KACZ,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC7B,GAAG,EAAE,OAAO,CAAC,YAAY;YACzB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;aAC7B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aAChD,WAAW,CAAC,GAAG,CAAC;aAChB,YAAY,CAAC,GAAG,CAAC;aACjB,MAAM,CAAC,KAAK,EAAE,CAAC;aACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,8BAA8B,CAAC,+BAA+B,GAAG,KAAK,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,MAAM,KAAK,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,iEAAiE;QACjE,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAClC,+DAA+D;QAC/D,OAAO,GAAG,CAAC,iBAAiB,KAAK,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,UAAU,CACvB,UAAkB,EAClB,OAAe,EACf,MAAkB,EAClB,GAAW,EACX,SAAiB,EACjB,KAAa;IAEb,IAAI,CAAC;QACH,0BAA0B;QAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAE5E,6BAA6B;QAC7B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEnD,0BAA0B;QAC1B,OAAO,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;aAC7B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;aACrE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aAC5B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aAC7B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;aAC9C,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8BAA+B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,OAAe,EACf,MAAkB,EAClB,GAAW,EACX,SAAiB,EACjB,KAAa;IAEb,IAAI,CAAC;QACH,8EAA8E;QAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAEvC,qCAAqC;QACrC,MAAM,GAAG,GAAG;YACV,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,SAAS;YACd,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7B,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;SACnC,CAAC;QAEF,6BAA6B;QAC7B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE1C,0BAA0B;QAC1B,OAAO,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;aAC7B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;aACrE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aAC5B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aAC7B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;aAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mCAAoC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,KAAK;IACZ,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC"}

package/_esm/client/cdp.js

@@ -0,0 +1,95 @@
+import { CdpOpenApiClient } from "../openapi-client/index.js";
+import { version } from "../version.js";
+import { EvmClient } from "./evm/evm.js";
+import { SolanaClient } from "./solana/solana.js";
+/**
+ * The main client for interacting with the CDP API.
+ */
+export class CdpClient {
+    /** Namespace containing all EVM methods. */
+    evm;
+    /** Namespace containing all Solana methods. */
+    solana;
+    /**
+     * The CdpClient is the main class for interacting with the CDP API.
+     *
+     * There are a few required parameters that are configured in the [CDP Portal](https://portal.cdp.coinbase.com/projects/api-keys):
+     * - **CDP Secret API Key** (`apiKeyId` & `apiKeySecret`): These are used to authenticate requests to the entire suite of
+     *   APIs offered on Coinbase Developer Platform.
+     *   [Read more about CDP API keys](https://docs.cdp.coinbase.com/get-started/docs/cdp-api-keys).
+     * - **Wallet Secret** (`walletSecret`): This secret is used specifically to authenticate requests to `POST`, and `DELETE`
+     *   endpoints in the EVM and Solana Account APIs.
+     *
+     * These parameters can be set as environment variables:
+     * ```
+     * CDP_API_KEY_ID=your-api-key-id
+     * CDP_API_KEY_SECRET=your-api-key-secret
+     * CDP_WALLET_SECRET=your-wallet-secret
+     * ```
+     *
+     * Or passed as options to the constructor:
+     *
+     * ```typescript
+     * const cdp = new CdpClient({
+     *   apiKeyId: "your-api-key-id",
+     *   apiKeySecret: "your-api-key-secret",
+     *   walletSecret: "your-wallet-secret",
+     * });
+     * ```
+     *
+     * The CdpClient is namespaced by chain type: `evm` or `solana`.
+     *
+     * As an example, to create a new EVM account, use `cdp.evm.createAccount()`.
+     *
+     * To create a new Solana account, use `cdp.solana.createAccount()`.
+     *
+     * @param {CdpClientOptions} [options] - Configuration options for the CdpClient.
+     */
+    constructor(options = {}) {
+        const apiKeyId = options.apiKeyId ?? process.env.CDP_API_KEY_ID ?? process.env.CDP_API_KEY_NAME;
+        const apiKeySecret = options.apiKeySecret ?? process.env.CDP_API_KEY_SECRET;
+        const walletSecret = options.walletSecret ?? process.env.CDP_WALLET_SECRET;
+        if (!apiKeyId || !apiKeySecret) {
+            throw new Error(`
+\nMissing required CDP Secret API Key configuration parameters.
+
+You can set them as environment variables:
+
+CDP_API_KEY_ID=your-api-key-id
+CDP_API_KEY_SECRET=your-api-key-secret
+
+You can also pass them as options to the constructor:
+
+const cdp = new CdpClient({
+  apiKeyId: "your-api-key-id",
+  apiKeySecret: "your-api-key-secret",
+});
+
+If you're performing write operations, make sure to also set your wallet secret:
+
+CDP_WALLET_SECRET=your-wallet-secret
+
+This is also available as an option to the constructor:
+
+const cdp = new CdpClient({
+  apiKeyId: "your-api-key-id",
+  apiKeySecret: "your-api-key-secret",
+  walletSecret: "your-wallet-secret",
+});
+
+For more information, see: https://github.com/coinbase/cdp-sdk/blob/main/typescript/README.md#api-keys.
+`);
+        }
+        CdpOpenApiClient.configure({
+            ...options,
+            apiKeyId,
+            apiKeySecret,
+            walletSecret,
+            source: "sdk",
+            sourceVersion: version,
+        });
+        this.evm = new EvmClient();
+        this.solana = new SolanaClient();
+    }
+}
+//# sourceMappingURL=cdp.js.map

package/_esm/client/cdp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp.js","sourceRoot":"","sources":["../../client/cdp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAelD;;GAEG;AACH,MAAM,OAAO,SAAS;IACpB,4CAA4C;IACrC,GAAG,CAAY;IAEtB,+CAA+C;IACxC,MAAM,CAAe;IAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACH,YAAY,UAA4B,EAAE;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAChG,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC5E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAE3E,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BrB,CAAC,CAAC;QACC,CAAC;QAED,gBAAgB,CAAC,SAAS,CAAC;YACzB,GAAG,OAAO;YACV,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,MAAM,EAAE,KAAK;YACb,aAAa,EAAE,OAAO;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IACnC,CAAC;CACF"}