@credo-ts/core 0.6.1-pr-2091-20241119140918 → 0.6.1

package/build/crypto/JwsService.js

@@ -1,213 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JwsService = void 0;
-const error_1 = require("../error");
-const x509_1 = require("../modules/x509");
-const plugins_1 = require("../plugins");
-const utils_1 = require("../utils");
-const error_2 = require("../wallet/error");
-const X509Service_1 = require("./../modules/x509/X509Service");
-const JwsTypes_1 = require("./JwsTypes");
-const jwk_1 = require("./jose/jwk");
-const jwt_1 = require("./jose/jwt");
-let JwsService = class JwsService {
-    async createJwsBase(agentContext, options) {
-        const { jwk, alg, x5c } = options.protectedHeaderOptions;
-        const keyJwk = (0, jwk_1.getJwkFromKey)(options.key);
-        // Make sure the options.x5c and x5c from protectedHeader are the same.
-        if (x5c) {
-            const certificate = X509Service_1.X509Service.getLeafCertificate(agentContext, { certificateChain: x5c });
-            if (certificate.publicKey.keyType !== options.key.keyType ||
-                !certificate.publicKey.publicKey.equals(options.key.publicKey)) {
-                throw new error_1.CredoError(`Protected header x5c does not match key for signing.`);
-            }
-        }
-        // Make sure the options.key and jwk from protectedHeader are the same.
-        if (jwk && (jwk.key.keyType !== options.key.keyType || !jwk.key.publicKey.equals(options.key.publicKey))) {
-            throw new error_1.CredoError(`Protected header JWK does not match key for signing.`);
-        }
-        // Validate the options.key used for signing against the jws options
-        // We use keyJwk instead of jwk, as the user could also use kid instead of jwk
-        if (keyJwk && !keyJwk.supportsSignatureAlgorithm(alg)) {
-            throw new error_1.CredoError(`alg '${alg}' is not a valid JWA signature algorithm for this jwk with keyType ${keyJwk.keyType}. Supported algorithms are ${keyJwk.supportedSignatureAlgorithms.join(', ')}`);
-        }
-        const payload = options.payload instanceof jwt_1.JwtPayload ? utils_1.JsonEncoder.toBuffer(options.payload.toJson()) : options.payload;
-        const base64Payload = utils_1.TypedArrayEncoder.toBase64URL(payload);
-        const base64UrlProtectedHeader = utils_1.JsonEncoder.toBase64URL(this.buildProtected(options.protectedHeaderOptions));
-        const signature = utils_1.TypedArrayEncoder.toBase64URL(await agentContext.wallet.sign({
-            data: utils_1.TypedArrayEncoder.fromString(`${base64UrlProtectedHeader}.${base64Payload}`),
-            key: options.key,
-        }));
-        return {
-            base64Payload,
-            base64UrlProtectedHeader,
-            signature,
-        };
-    }
-    async createJws(agentContext, { payload, key, header, protectedHeaderOptions }) {
-        const { base64UrlProtectedHeader, signature, base64Payload } = await this.createJwsBase(agentContext, {
-            payload,
-            key,
-            protectedHeaderOptions,
-        });
-        return {
-            protected: base64UrlProtectedHeader,
-            signature,
-            header,
-            payload: base64Payload,
-        };
-    }
-    /**
-     *  @see {@link https://www.rfc-editor.org/rfc/rfc7515#section-3.1}
-     * */
-    async createJwsCompact(agentContext, { payload, key, protectedHeaderOptions }) {
-        const { base64Payload, base64UrlProtectedHeader, signature } = await this.createJwsBase(agentContext, {
-            payload,
-            key,
-            protectedHeaderOptions,
-        });
-        return `${base64UrlProtectedHeader}.${base64Payload}.${signature}`;
-    }
-    /**
-     * Verify a JWS
-     */
-    async verifyJws(agentContext, { jws, jwkResolver, trustedCertificates }) {
-        let signatures = [];
-        let payload;
-        if (typeof jws === 'string') {
-            if (!JwsTypes_1.JWS_COMPACT_FORMAT_MATCHER.test(jws))
-                throw new error_1.CredoError(`Invalid JWS compact format for value '${jws}'.`);
-            const [protectedHeader, _payload, signature] = jws.split('.');
-            payload = _payload;
-            signatures.push({
-                header: {},
-                protected: protectedHeader,
-                signature,
-            });
-        }
-        else if ('signatures' in jws) {
-            signatures = jws.signatures;
-            payload = jws.payload;
-        }
-        else {
-            signatures.push(jws);
-            payload = jws.payload;
-        }
-        if (signatures.length === 0) {
-            throw new error_1.CredoError('Unable to verify JWS, no signatures present in JWS.');
-        }
-        const jwsFlattened = {
-            signatures,
-            payload,
-        };
-        const signerKeys = [];
-        for (const jws of signatures) {
-            const protectedJson = utils_1.JsonEncoder.fromBase64(jws.protected);
-            if (!(0, utils_1.isJsonObject)(protectedJson)) {
-                throw new error_1.CredoError('Unable to verify JWS, protected header is not a valid JSON object.');
-            }
-            if (!protectedJson.alg || typeof protectedJson.alg !== 'string') {
-                throw new error_1.CredoError('Unable to verify JWS, protected header alg is not provided or not a string.');
-            }
-            const jwk = await this.jwkFromJws(agentContext, {
-                jws,
-                payload,
-                protectedHeader: Object.assign(Object.assign({}, protectedJson), { alg: protectedJson.alg }),
-                jwkResolver,
-                trustedCertificates,
-            });
-            if (!jwk.supportsSignatureAlgorithm(protectedJson.alg)) {
-                throw new error_1.CredoError(`alg '${protectedJson.alg}' is not a valid JWA signature algorithm for this jwk with keyType ${jwk.keyType}. Supported algorithms are ${jwk.supportedSignatureAlgorithms.join(', ')}`);
-            }
-            const data = utils_1.TypedArrayEncoder.fromString(`${jws.protected}.${payload}`);
-            const signature = utils_1.TypedArrayEncoder.fromBase64(jws.signature);
-            signerKeys.push(jwk.key);
-            try {
-                const isValid = await agentContext.wallet.verify({ key: jwk.key, data, signature });
-                if (!isValid) {
-                    return {
-                        isValid: false,
-                        signerKeys: [],
-                        jws: jwsFlattened,
-                    };
-                }
-            }
-            catch (error) {
-                // WalletError probably means signature verification failed. Would be useful to add
-                // more specific error type in wallet.verify method
-                if (error instanceof error_2.WalletError) {
-                    return {
-                        isValid: false,
-                        signerKeys: [],
-                        jws: jwsFlattened,
-                    };
-                }
-                throw error;
-            }
-        }
-        return { isValid: true, signerKeys, jws: jwsFlattened };
-    }
-    buildProtected(options) {
-        var _a;
-        if ([options.jwk, options.kid, options.x5c].filter(Boolean).length != 1) {
-            throw new error_1.CredoError('Only one of JWK, kid or x5c can and must be provided.');
-        }
-        return Object.assign(Object.assign({}, options), { alg: options.alg, jwk: (_a = options.jwk) === null || _a === void 0 ? void 0 : _a.toJson(), kid: options.kid });
-    }
-    async jwkFromJws(agentContext, options) {
-        const { protectedHeader, jwkResolver, jws, payload, trustedCertificates: trustedCertificatesFromOptions } = options;
-        if ([protectedHeader.jwk, protectedHeader.kid, protectedHeader.x5c].filter(Boolean).length > 1) {
-            throw new error_1.CredoError('Only one of jwk, kid and x5c headers can and must be provided.');
-        }
-        if (protectedHeader.x5c) {
-            if (!Array.isArray(protectedHeader.x5c) ||
-                protectedHeader.x5c.some((certificate) => typeof certificate !== 'string')) {
-                throw new error_1.CredoError('x5c header is not a valid JSON array of string.');
-            }
-            const trustedCertificatesFromConfig = agentContext.dependencyManager.resolve(x509_1.X509ModuleConfig).trustedCertificates;
-            const trustedCertificates = [...(trustedCertificatesFromConfig !== null && trustedCertificatesFromConfig !== void 0 ? trustedCertificatesFromConfig : []), ...(trustedCertificatesFromOptions !== null && trustedCertificatesFromOptions !== void 0 ? trustedCertificatesFromOptions : [])];
-            if (trustedCertificates.length === 0) {
-                throw new error_1.CredoError(`trustedCertificates is required when the JWS protected header contains an 'x5c' property.`);
-            }
-            await X509Service_1.X509Service.validateCertificateChain(agentContext, {
-                certificateChain: protectedHeader.x5c,
-                trustedCertificates: trustedCertificates, // Already validated that it has at least one certificate
-            });
-            const certificate = X509Service_1.X509Service.getLeafCertificate(agentContext, { certificateChain: protectedHeader.x5c });
-            return (0, jwk_1.getJwkFromKey)(certificate.publicKey);
-        }
-        // Jwk
-        if (protectedHeader.jwk) {
-            if (!(0, utils_1.isJsonObject)(protectedHeader.jwk))
-                throw new error_1.CredoError('JWK is not a valid JSON object.');
-            return (0, jwk_1.getJwkFromJson)(protectedHeader.jwk);
-        }
-        if (!jwkResolver) {
-            throw new error_1.CredoError(`jwkResolver is required when the JWS protected header does not contain a 'jwk' property.`);
-        }
-        try {
-            const jwk = await jwkResolver({
-                jws,
-                protectedHeader,
-                payload,
-            });
-            return jwk;
-        }
-        catch (error) {
-            throw new error_1.CredoError(`Error when resolving JWK for JWS in jwkResolver. ${error.message}`, {
-                cause: error,
-            });
-        }
-    }
-};
-exports.JwsService = JwsService;
-exports.JwsService = JwsService = __decorate([
-    (0, plugins_1.injectable)()
-], JwsService);
-//# sourceMappingURL=JwsService.js.map

package/build/crypto/JwsService.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"JwsService.js","sourceRoot":"","sources":["../../src/crypto/JwsService.ts"],"names":[],"mappings":";;;;;;;;;AAaA,oCAAqC;AACrC,0CAAkD;AAClD,wCAAuC;AACvC,oCAAuE;AACvE,2CAA6C;AAE7C,+DAA2D;AAC3D,yCAAuD;AACvD,oCAA0D;AAC1D,oCAAuC;AAGhC,IAAM,UAAU,GAAhB,MAAM,UAAU;IACb,KAAK,CAAC,aAAa,CAAC,YAA0B,EAAE,OAA6B;QACnF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAA;QACxD,MAAM,MAAM,GAAG,IAAA,mBAAa,EAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAEzC,uEAAuE;QACvE,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,WAAW,GAAG,yBAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3F,IACE,WAAW,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,OAAO;gBACrD,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAC9D,CAAC;gBACD,MAAM,IAAI,kBAAU,CAAC,sDAAsD,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACzG,MAAM,IAAI,kBAAU,CAAC,sDAAsD,CAAC,CAAA;QAC9E,CAAC;QAED,oEAAoE;QACpE,8EAA8E;QAC9E,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,kBAAU,CAClB,QAAQ,GAAG,sEACT,MAAM,CAAC,OACT,8BAA8B,MAAM,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GACX,OAAO,CAAC,OAAO,YAAY,gBAAU,CAAC,CAAC,CAAC,mBAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;QAE1G,MAAM,aAAa,GAAG,yBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QAC5D,MAAM,wBAAwB,GAAG,mBAAW,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAA;QAE7G,MAAM,SAAS,GAAG,yBAAiB,CAAC,WAAW,CAC7C,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;YAC7B,IAAI,EAAE,yBAAiB,CAAC,UAAU,CAAC,GAAG,wBAAwB,IAAI,aAAa,EAAE,CAAC;YAClF,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CACH,CAAA;QAED,OAAO;YACL,aAAa;YACb,wBAAwB;YACxB,SAAS;SACV,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,YAA0B,EAC1B,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAoB;QAElE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE;YACpG,OAAO;YACP,GAAG;YACH,sBAAsB;SACvB,CAAC,CAAA;QAEF,OAAO;YACL,SAAS,EAAE,wBAAwB;YACnC,SAAS;YACT,MAAM;YACN,OAAO,EAAE,aAAa;SACvB,CAAA;IACH,CAAC;IAED;;SAEK;IACE,KAAK,CAAC,gBAAgB,CAC3B,YAA0B,EAC1B,EAAE,OAAO,EAAE,GAAG,EAAE,sBAAsB,EAA2B;QAEjE,MAAM,EAAE,aAAa,EAAE,wBAAwB,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE;YACpG,OAAO;YACP,GAAG;YACH,sBAAsB;SACvB,CAAC,CAAA;QACF,OAAO,GAAG,wBAAwB,IAAI,aAAa,IAAI,SAAS,EAAE,CAAA;IACpE,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CACpB,YAA0B,EAC1B,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAoB;QAE3D,IAAI,UAAU,GAAwB,EAAE,CAAA;QACxC,IAAI,OAAe,CAAA;QAEnB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,qCAA0B,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,kBAAU,CAAC,yCAAyC,GAAG,IAAI,CAAC,CAAA;YAEjH,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAE7D,OAAO,GAAG,QAAQ,CAAA;YAClB,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,EAAE;gBACV,SAAS,EAAE,eAAe;gBAC1B,SAAS;aACV,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;YAC/B,UAAU,GAAG,GAAG,CAAC,UAAU,CAAA;YAC3B,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;QACvB,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACpB,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;QACvB,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,kBAAU,CAAC,qDAAqD,CAAC,CAAA;QAC7E,CAAC;QAED,MAAM,YAAY,GAAG;YACnB,UAAU;YACV,OAAO;SACqB,CAAA;QAE9B,MAAM,UAAU,GAAU,EAAE,CAAA;QAC5B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,aAAa,GAAG,mBAAW,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAE3D,IAAI,CAAC,IAAA,oBAAY,EAAC,aAAa,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,kBAAU,CAAC,oEAAoE,CAAC,CAAA;YAC5F,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,OAAO,aAAa,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAChE,MAAM,IAAI,kBAAU,CAAC,6EAA6E,CAAC,CAAA;YACrG,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE;gBAC9C,GAAG;gBACH,OAAO;gBACP,eAAe,kCACV,aAAa,KAChB,GAAG,EAAE,aAAa,CAAC,GAAG,GACvB;gBACD,WAAW;gBACX,mBAAmB;aACpB,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,kBAAU,CAClB,QAAQ,aAAa,CAAC,GAAG,sEACvB,GAAG,CAAC,OACN,8BAA8B,GAAG,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAA;YACH,CAAC;YAED,MAAM,IAAI,GAAG,yBAAiB,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC,CAAA;YACxE,MAAM,SAAS,GAAG,yBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC7D,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAExB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;gBAEnF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,UAAU,EAAE,EAAE;wBACd,GAAG,EAAE,YAAY;qBAClB,CAAA;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,mFAAmF;gBACnF,mDAAmD;gBACnD,IAAI,KAAK,YAAY,mBAAW,EAAE,CAAC;oBACjC,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,UAAU,EAAE,EAAE;wBACd,GAAG,EAAE,YAAY;qBAClB,CAAA;gBACH,CAAC;gBAED,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,CAAA;IACzD,CAAC;IAEO,cAAc,CAAC,OAAkC;;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,kBAAU,CAAC,uDAAuD,CAAC,CAAA;QAC/E,CAAC;QAED,uCACK,OAAO,KACV,GAAG,EAAE,OAAO,CAAC,GAAG,EAChB,GAAG,EAAE,MAAA,OAAO,CAAC,GAAG,0CAAE,MAAM,EAAE,EAC1B,GAAG,EAAE,OAAO,CAAC,GAAG,IACjB;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,YAA0B,EAC1B,OAMC;QAED,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,GAAG,OAAO,CAAA;QAEnH,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/F,MAAM,IAAI,kBAAU,CAAC,gEAAgE,CAAC,CAAA;QACxF,CAAC;QAED,IAAI,eAAe,CAAC,GAAG,EAAE,CAAC;YACxB,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC;gBACnC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,EAC1E,CAAC;gBACD,MAAM,IAAI,kBAAU,CAAC,iDAAiD,CAAC,CAAA;YACzE,CAAC;YAED,MAAM,6BAA6B,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC,mBAAmB,CAAA;YAClH,MAAM,mBAAmB,GAAG,CAAC,GAAG,CAAC,6BAA6B,aAA7B,6BAA6B,cAA7B,6BAA6B,GAAI,EAAE,CAAC,EAAE,GAAG,CAAC,8BAA8B,aAA9B,8BAA8B,cAA9B,8BAA8B,GAAI,EAAE,CAAC,CAAC,CAAA;YACjH,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,kBAAU,CAClB,2FAA2F,CAC5F,CAAA;YACH,CAAC;YAED,MAAM,yBAAW,CAAC,wBAAwB,CAAC,YAAY,EAAE;gBACvD,gBAAgB,EAAE,eAAe,CAAC,GAAG;gBACrC,mBAAmB,EAAE,mBAA4C,EAAE,yDAAyD;aAC7H,CAAC,CAAA;YAEF,MAAM,WAAW,GAAG,yBAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE,EAAE,gBAAgB,EAAE,eAAe,CAAC,GAAG,EAAE,CAAC,CAAA;YAC3G,OAAO,IAAA,mBAAa,EAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QAC7C,CAAC;QAED,MAAM;QACN,IAAI,eAAe,CAAC,GAAG,EAAE,CAAC;YACxB,IAAI,CAAC,IAAA,oBAAY,EAAC,eAAe,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,kBAAU,CAAC,iCAAiC,CAAC,CAAA;YAC/F,OAAO,IAAA,oBAAc,EAAC,eAAe,CAAC,GAAc,CAAC,CAAA;QACvD,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAU,CAAC,0FAA0F,CAAC,CAAA;QAClH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC;gBAC5B,GAAG;gBACH,eAAe;gBACf,OAAO;aACR,CAAC,CAAA;YAEF,OAAO,GAAG,CAAA;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAU,CAAC,oDAAoD,KAAK,CAAC,OAAO,EAAE,EAAE;gBACxF,KAAK,EAAE,KAAK;aACb,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAtQY,gCAAU;qBAAV,UAAU;IADtB,IAAA,oBAAU,GAAE;GACA,UAAU,CAsQtB"}

package/build/crypto/JwsTypes.d.ts

@@ -1,52 +0,0 @@
-import type { JwaSignatureAlgorithm } from './jose/jwa';
-import type { Jwk } from './jose/jwk';
-export type Kid = string;
-export interface JwsProtectedHeaderOptions {
-    alg: JwaSignatureAlgorithm | string;
-    kid?: Kid;
-    jwk?: Jwk;
-    x5c?: string[];
-    [key: string]: unknown;
-}
-export interface JwsGeneralFormat {
-    /**
-     * unprotected header
-     */
-    header: Record<string, unknown>;
-    /**
-     * Base64url encoded signature
-     */
-    signature: string;
-    /**
-     * Base64url encoded protected header
-     */
-    protected: string;
-    /**
-     * Base64url encoded payload
-     */
-    payload: string;
-}
-export interface JwsFlattenedFormat {
-    /**
-     * Base64url encoded payload
-     */
-    payload: string;
-    /**
-     * List of JWS signatures over the payload
-     *
-     * The items in this array do not contain the payload.
-     */
-    signatures: JwsDetachedFormat[];
-}
-/**
- * JWS Compact Serialization
- *
- * @see https://tools.ietf.org/html/rfc7515#section-7.1
- */
-export type JwsCompactFormat = string;
-export type Jws = JwsGeneralFormat | JwsFlattenedFormat | JwsCompactFormat;
-export type JwsDetachedFormat = Omit<JwsGeneralFormat, 'payload'>;
-export interface JwsFlattenedDetachedFormat {
-    signatures: JwsDetachedFormat[];
-}
-export declare const JWS_COMPACT_FORMAT_MATCHER: RegExp;

package/build/crypto/JwsTypes.js

@@ -1,5 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JWS_COMPACT_FORMAT_MATCHER = void 0;
-exports.JWS_COMPACT_FORMAT_MATCHER = /^[A-Za-z0-9-_=]+\.[A-Za-z0-9-_=]+\.?[A-Za-z0-9-_.+/=]*$/;
-//# sourceMappingURL=JwsTypes.js.map

package/build/crypto/JwsTypes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"JwsTypes.js","sourceRoot":"","sources":["../../src/crypto/JwsTypes.ts"],"names":[],"mappings":";;;AAgEa,QAAA,0BAA0B,GAAG,yDAAyD,CAAA"}

package/build/crypto/Key.d.ts

@@ -1,16 +0,0 @@
-import type { KeyType } from './KeyType';
-import { Buffer } from '../utils';
-export declare class Key {
-    readonly publicKey: Buffer;
-    readonly keyType: KeyType;
-    constructor(publicKey: Uint8Array, keyType: KeyType);
-    static fromPublicKey(publicKey: Uint8Array, keyType: KeyType): Key;
-    static fromPublicKeyBase58(publicKey: string, keyType: KeyType): Key;
-    static fromFingerprint(fingerprint: string): Key;
-    get prefixedPublicKey(): Buffer;
-    get fingerprint(): string;
-    get publicKeyBase58(): string;
-    get supportsEncrypting(): boolean;
-    get supportsSigning(): boolean;
-    private toJSON;
-}

package/build/crypto/Key.js

@@ -1,55 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Key = void 0;
-const utils_1 = require("../utils");
-const keyUtils_1 = require("./keyUtils");
-const multiCodecKey_1 = require("./multiCodecKey");
-class Key {
-    constructor(publicKey, keyType) {
-        this.publicKey = utils_1.Buffer.from(publicKey);
-        this.keyType = keyType;
-    }
-    static fromPublicKey(publicKey, keyType) {
-        return new Key(utils_1.Buffer.from(publicKey), keyType);
-    }
-    static fromPublicKeyBase58(publicKey, keyType) {
-        const publicKeyBytes = utils_1.TypedArrayEncoder.fromBase58(publicKey);
-        return Key.fromPublicKey(publicKeyBytes, keyType);
-    }
-    static fromFingerprint(fingerprint) {
-        const { data } = utils_1.MultiBaseEncoder.decode(fingerprint);
-        const [code, byteLength] = utils_1.VarintEncoder.decode(data);
-        const publicKey = utils_1.Buffer.from(data.slice(byteLength));
-        const keyType = (0, multiCodecKey_1.getKeyTypeByMultiCodecPrefix)(code);
-        return new Key(publicKey, keyType);
-    }
-    get prefixedPublicKey() {
-        const multiCodecPrefix = (0, multiCodecKey_1.getMultiCodecPrefixByKeyType)(this.keyType);
-        // Create Buffer with length of the prefix bytes, then use varint to fill the prefix bytes
-        const prefixBytes = utils_1.VarintEncoder.encode(multiCodecPrefix);
-        // Combine prefix with public key
-        return utils_1.Buffer.concat([prefixBytes, this.publicKey]);
-    }
-    get fingerprint() {
-        return `z${utils_1.TypedArrayEncoder.toBase58(this.prefixedPublicKey)}`;
-    }
-    get publicKeyBase58() {
-        return utils_1.TypedArrayEncoder.toBase58(this.publicKey);
-    }
-    get supportsEncrypting() {
-        return (0, keyUtils_1.isEncryptionSupportedForKeyType)(this.keyType);
-    }
-    get supportsSigning() {
-        return (0, keyUtils_1.isSigningSupportedForKeyType)(this.keyType);
-    }
-    // We return an object structure based on the key, so that when this object is
-    // serialized to JSON it will be nicely formatted instead of the bytes printed
-    toJSON() {
-        return {
-            keyType: this.keyType,
-            publicKeyBase58: this.publicKeyBase58,
-        };
-    }
-}
-exports.Key = Key;
-//# sourceMappingURL=Key.js.map

package/build/crypto/Key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Key.js","sourceRoot":"","sources":["../../src/crypto/Key.ts"],"names":[],"mappings":";;;AAEA,oCAAqF;AAErF,yCAA0F;AAC1F,mDAA4F;AAE5F,MAAa,GAAG;IAId,YAAmB,SAAqB,EAAE,OAAgB;QACxD,IAAI,CAAC,SAAS,GAAG,cAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAEM,MAAM,CAAC,aAAa,CAAC,SAAqB,EAAE,OAAgB;QACjE,OAAO,IAAI,GAAG,CAAC,cAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAA;IACjD,CAAC;IAEM,MAAM,CAAC,mBAAmB,CAAC,SAAiB,EAAE,OAAgB;QACnE,MAAM,cAAc,GAAG,yBAAiB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAE9D,OAAO,GAAG,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IACnD,CAAC;IAEM,MAAM,CAAC,eAAe,CAAC,WAAmB;QAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,wBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACrD,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,qBAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAErD,MAAM,SAAS,GAAG,cAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;QACrD,MAAM,OAAO,GAAG,IAAA,4CAA4B,EAAC,IAAI,CAAC,CAAA;QAElD,OAAO,IAAI,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACpC,CAAC;IAED,IAAW,iBAAiB;QAC1B,MAAM,gBAAgB,GAAG,IAAA,4CAA4B,EAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAEnE,0FAA0F;QAC1F,MAAM,WAAW,GAAG,qBAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;QAE1D,iCAAiC;QACjC,OAAO,cAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACrD,CAAC;IAED,IAAW,WAAW;QACpB,OAAO,IAAI,yBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAA;IACjE,CAAC;IAED,IAAW,eAAe;QACxB,OAAO,yBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC;IAED,IAAW,kBAAkB;QAC3B,OAAO,IAAA,0CAA+B,EAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtD,CAAC;IAED,IAAW,eAAe;QACxB,OAAO,IAAA,uCAA4B,EAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnD,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IACtE,MAAM;QACZ,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAA;IACH,CAAC;CACF;AA/DD,kBA+DC"}

package/build/crypto/KeyBackend.d.ts

@@ -1,19 +0,0 @@
-export declare enum KeyBackend {
-    /**
-     *
-     * Generate a key using common software-based implementations.
-     * Key material will be instantiated in memory.
-     *
-     * Supported for almost all, if not all, key types.
-     *
-     */
-    Software = "Software",
-    /**
-     *
-     * Generate a key within the secure element of the device.
-     *
-     * For now, this is only supported using Aries Askar in iOS or Android for `KeyType.P256`.
-     *
-     */
-    SecureElement = "SecureElement"
-}

package/build/crypto/KeyBackend.js

@@ -1,24 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.KeyBackend = void 0;
-var KeyBackend;
-(function (KeyBackend) {
-    /**
-     *
-     * Generate a key using common software-based implementations.
-     * Key material will be instantiated in memory.
-     *
-     * Supported for almost all, if not all, key types.
-     *
-     */
-    KeyBackend["Software"] = "Software";
-    /**
-     *
-     * Generate a key within the secure element of the device.
-     *
-     * For now, this is only supported using Aries Askar in iOS or Android for `KeyType.P256`.
-     *
-     */
-    KeyBackend["SecureElement"] = "SecureElement";
-})(KeyBackend || (exports.KeyBackend = KeyBackend = {}));
-//# sourceMappingURL=KeyBackend.js.map

package/build/crypto/KeyBackend.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"KeyBackend.js","sourceRoot":"","sources":["../../src/crypto/KeyBackend.ts"],"names":[],"mappings":";;;AAAA,IAAY,UAmBX;AAnBD,WAAY,UAAU;IACpB;;;;;;;OAOG;IACH,mCAAqB,CAAA;IAErB;;;;;;OAMG;IACH,6CAA+B,CAAA;AACjC,CAAC,EAnBW,UAAU,0BAAV,UAAU,QAmBrB"}

package/build/crypto/KeyType.d.ts

@@ -1,11 +0,0 @@
-export declare enum KeyType {
-    Ed25519 = "ed25519",
-    Bls12381g1g2 = "bls12381g1g2",
-    Bls12381g1 = "bls12381g1",
-    Bls12381g2 = "bls12381g2",
-    X25519 = "x25519",
-    P256 = "p256",
-    P384 = "p384",
-    P521 = "p521",
-    K256 = "k256"
-}

package/build/crypto/KeyType.js

@@ -1,16 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.KeyType = void 0;
-var KeyType;
-(function (KeyType) {
-    KeyType["Ed25519"] = "ed25519";
-    KeyType["Bls12381g1g2"] = "bls12381g1g2";
-    KeyType["Bls12381g1"] = "bls12381g1";
-    KeyType["Bls12381g2"] = "bls12381g2";
-    KeyType["X25519"] = "x25519";
-    KeyType["P256"] = "p256";
-    KeyType["P384"] = "p384";
-    KeyType["P521"] = "p521";
-    KeyType["K256"] = "k256";
-})(KeyType || (exports.KeyType = KeyType = {}));
-//# sourceMappingURL=KeyType.js.map

package/build/crypto/KeyType.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"KeyType.js","sourceRoot":"","sources":["../../src/crypto/KeyType.ts"],"names":[],"mappings":";;;AAAA,IAAY,OAUX;AAVD,WAAY,OAAO;IACjB,8BAAmB,CAAA;IACnB,wCAA6B,CAAA;IAC7B,oCAAyB,CAAA;IACzB,oCAAyB,CAAA;IACzB,4BAAiB,CAAA;IACjB,wBAAa,CAAA;IACb,wBAAa,CAAA;IACb,wBAAa,CAAA;IACb,wBAAa,CAAA;AACf,CAAC,EAVW,OAAO,uBAAP,OAAO,QAUlB"}

package/build/crypto/WalletKeyPair.d.ts

@@ -1,107 +0,0 @@
-import type { Key } from './Key';
-import type { LdKeyPairOptions } from '../modules/vc/data-integrity/models/LdKeyPair';
-import type { Wallet } from '../wallet';
-import { VerificationMethod } from '../modules/dids';
-interface WalletKeyPairOptions extends LdKeyPairOptions {
-    wallet: Wallet;
-    key: Key;
-}
-export declare function createWalletKeyPairClass(wallet: Wallet): {
-    new (options: WalletKeyPairOptions): {
-        wallet: Wallet;
-        key: Key;
-        type: string;
-        fingerprint(): string;
-        verifyFingerprint(fingerprint: string): boolean;
-        /**
-         * This method returns a wrapped wallet.sign method. The method is being wrapped so we can covert between Uint8Array and Buffer. This is to make it compatible with the external signature libraries.
-         */
-        signer(): {
-            sign: (data: {
-                data: Uint8Array | Uint8Array[];
-            }) => Promise<Uint8Array>;
-        };
-        /**
-         * This method returns a wrapped wallet.verify method. The method is being wrapped so we can covert between Uint8Array and Buffer. This is to make it compatible with the external signature libraries.
-         */
-        verifier(): {
-            verify: (data: {
-                data: Uint8Array | Uint8Array[];
-                signature: Uint8Array;
-            }) => Promise<boolean>;
-        };
-        readonly publicKeyBuffer: Uint8Array;
-        readonly id: string;
-        readonly controller: string;
-        export(publicKey?: boolean, privateKey?: boolean): {
-            id: string;
-            type: string;
-            controller: string;
-        };
-    };
-    generate(): Promise<{
-        wallet: Wallet;
-        key: Key;
-        type: string;
-        fingerprint(): string;
-        verifyFingerprint(fingerprint: string): boolean;
-        /**
-         * This method returns a wrapped wallet.sign method. The method is being wrapped so we can covert between Uint8Array and Buffer. This is to make it compatible with the external signature libraries.
-         */
-        signer(): {
-            sign: (data: {
-                data: Uint8Array | Uint8Array[];
-            }) => Promise<Uint8Array>;
-        };
-        /**
-         * This method returns a wrapped wallet.verify method. The method is being wrapped so we can covert between Uint8Array and Buffer. This is to make it compatible with the external signature libraries.
-         */
-        verifier(): {
-            verify: (data: {
-                data: Uint8Array | Uint8Array[];
-                signature: Uint8Array;
-            }) => Promise<boolean>;
-        };
-        readonly publicKeyBuffer: Uint8Array;
-        readonly id: string;
-        readonly controller: string;
-        export(publicKey?: boolean, privateKey?: boolean): {
-            id: string;
-            type: string;
-            controller: string;
-        };
-    }>;
-    from(verificationMethod: VerificationMethod): Promise<{
-        wallet: Wallet;
-        key: Key;
-        type: string;
-        fingerprint(): string;
-        verifyFingerprint(fingerprint: string): boolean;
-        /**
-         * This method returns a wrapped wallet.sign method. The method is being wrapped so we can covert between Uint8Array and Buffer. This is to make it compatible with the external signature libraries.
-         */
-        signer(): {
-            sign: (data: {
-                data: Uint8Array | Uint8Array[];
-            }) => Promise<Uint8Array>;
-        };
-        /**
-         * This method returns a wrapped wallet.verify method. The method is being wrapped so we can covert between Uint8Array and Buffer. This is to make it compatible with the external signature libraries.
-         */
-        verifier(): {
-            verify: (data: {
-                data: Uint8Array | Uint8Array[];
-                signature: Uint8Array;
-            }) => Promise<boolean>;
-        };
-        readonly publicKeyBuffer: Uint8Array;
-        readonly id: string;
-        readonly controller: string;
-        export(publicKey?: boolean, privateKey?: boolean): {
-            id: string;
-            type: string;
-            controller: string;
-        };
-    }>;
-};
-export {};

package/build/crypto/WalletKeyPair.js

@@ -1,94 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createWalletKeyPairClass = createWalletKeyPairClass;
-const dids_1 = require("../modules/dids");
-const keyDidMapping_1 = require("../modules/dids/domain/key-type/keyDidMapping");
-const LdKeyPair_1 = require("../modules/vc/data-integrity/models/LdKeyPair");
-const utils_1 = require("../utils");
-const MessageValidator_1 = require("../utils/MessageValidator");
-const buffer_1 = require("../utils/buffer");
-function createWalletKeyPairClass(wallet) {
-    return class WalletKeyPair extends LdKeyPair_1.LdKeyPair {
-        constructor(options) {
-            super(options);
-            this.wallet = options.wallet;
-            this.key = options.key;
-            this.type = options.key.keyType;
-        }
-        static async generate() {
-            throw new Error('Not implemented');
-        }
-        fingerprint() {
-            throw new Error('Method not implemented.');
-        }
-        // eslint-disable-next-line @typescript-eslint/no-unused-vars
-        verifyFingerprint(fingerprint) {
-            throw new Error('Method not implemented.');
-        }
-        static async from(verificationMethod) {
-            const vMethod = utils_1.JsonTransformer.fromJSON(verificationMethod, dids_1.VerificationMethod);
-            MessageValidator_1.MessageValidator.validateSync(vMethod);
-            const key = (0, keyDidMapping_1.getKeyFromVerificationMethod)(vMethod);
-            return new WalletKeyPair({
-                id: vMethod.id,
-                controller: vMethod.controller,
-                wallet: wallet,
-                key: key,
-            });
-        }
-        /**
-         * This method returns a wrapped wallet.sign method. The method is being wrapped so we can covert between Uint8Array and Buffer. This is to make it compatible with the external signature libraries.
-         */
-        signer() {
-            // wrap function for conversion
-            const wrappedSign = async (data) => {
-                let converted = [];
-                // convert uint8array to buffer
-                if (Array.isArray(data.data)) {
-                    converted = data.data.map((d) => buffer_1.Buffer.from(d));
-                }
-                else {
-                    converted = buffer_1.Buffer.from(data.data);
-                }
-                // sign
-                const result = await wallet.sign({
-                    data: converted,
-                    key: this.key,
-                });
-                // convert result buffer to uint8array
-                return Uint8Array.from(result);
-            };
-            return {
-                sign: wrappedSign.bind(this),
-            };
-        }
-        /**
-         * This method returns a wrapped wallet.verify method. The method is being wrapped so we can covert between Uint8Array and Buffer. This is to make it compatible with the external signature libraries.
-         */
-        verifier() {
-            const wrappedVerify = async (data) => {
-                let converted = [];
-                // convert uint8array to buffer
-                if (Array.isArray(data.data)) {
-                    converted = data.data.map((d) => buffer_1.Buffer.from(d));
-                }
-                else {
-                    converted = buffer_1.Buffer.from(data.data);
-                }
-                // verify
-                return wallet.verify({
-                    data: converted,
-                    signature: buffer_1.Buffer.from(data.signature),
-                    key: this.key,
-                });
-            };
-            return {
-                verify: wrappedVerify.bind(this),
-            };
-        }
-        get publicKeyBuffer() {
-            return new Uint8Array(this.key.publicKey);
-        }
-    };
-}
-//# sourceMappingURL=WalletKeyPair.js.map

package/build/crypto/WalletKeyPair.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"WalletKeyPair.js","sourceRoot":"","sources":["../../src/crypto/WalletKeyPair.ts"],"names":[],"mappings":";;AAgBA,4DAwGC;AApHD,0CAAoD;AACpD,iFAA4F;AAC5F,6EAAyE;AACzE,oCAA0C;AAC1C,gEAA4D;AAC5D,4CAAwC;AAOxC,SAAgB,wBAAwB,CAAC,MAAc;IACrD,OAAO,MAAM,aAAc,SAAQ,qBAAS;QAK1C,YAAmB,OAA6B;YAC9C,KAAK,CAAC,OAAO,CAAC,CAAA;YACd,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;YACtB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAA;QACjC,CAAC;QAEM,MAAM,CAAC,KAAK,CAAC,QAAQ;YAC1B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;QAEM,WAAW;YAChB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;QAC5C,CAAC;QAED,6DAA6D;QACtD,iBAAiB,CAAC,WAAmB;YAC1C,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;QAC5C,CAAC;QAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAsC;YAC7D,MAAM,OAAO,GAAG,uBAAe,CAAC,QAAQ,CAAC,kBAAkB,EAAE,yBAAkB,CAAC,CAAA;YAChF,mCAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YACtC,MAAM,GAAG,GAAG,IAAA,4CAA4B,EAAC,OAAO,CAAC,CAAA;YAEjD,OAAO,IAAI,aAAa,CAAC;gBACvB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,GAAG;aACT,CAAC,CAAA;QACJ,CAAC;QAED;;WAEG;QACI,MAAM;YACX,+BAA+B;YAC/B,MAAM,WAAW,GAAG,KAAK,EAAE,IAAyC,EAAuB,EAAE;gBAC3F,IAAI,SAAS,GAAsB,EAAE,CAAA;gBAErC,+BAA+B;gBAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;gBAClD,CAAC;qBAAM,CAAC;oBACN,SAAS,GAAG,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACpC,CAAC;gBAED,OAAO;gBACP,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;oBAC/B,IAAI,EAAE,SAAS;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAA;gBAEF,sCAAsC;gBACtC,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAChC,CAAC,CAAA;YAED,OAAO;gBACL,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;aAC7B,CAAA;QACH,CAAC;QAED;;WAEG;QACI,QAAQ;YAGb,MAAM,aAAa,GAAG,KAAK,EAAE,IAG5B,EAAoB,EAAE;gBACrB,IAAI,SAAS,GAAsB,EAAE,CAAA;gBAErC,+BAA+B;gBAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;gBAClD,CAAC;qBAAM,CAAC;oBACN,SAAS,GAAG,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACpC,CAAC;gBAED,SAAS;gBACT,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtC,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAA;YACJ,CAAC,CAAA;YACD,OAAO;gBACL,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;aACjC,CAAA;QACH,CAAC;QAED,IAAW,eAAe;YACxB,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC3C,CAAC;KACF,CAAA;AACH,CAAC"}