@digitalworld/digital-world-sdk 16.0.0

package/lib/cjs/base/asset.js

@@ -0,0 +1,261 @@
+'use strict';
+
+var buffer = require('buffer');
+var util = require('./util/util.js');
+var curr_generated = require('./generated/curr_generated.js');
+var keypair = require('./keypair.js');
+var strkey = require('./strkey.js');
+var hashing = require('./hashing.js');
+
+const AssetType = {
+  native: "native",
+  credit4: "credit_alphanum4",
+  credit12: "credit_alphanum12",
+  liquidityPoolShares: "liquidity_pool_shares"
+};
+function asciiCompare(a, b) {
+  return buffer.Buffer.compare(buffer.Buffer.from(a, "ascii"), buffer.Buffer.from(b, "ascii"));
+}
+class Asset {
+  /** The asset code. */
+  code;
+  /** The account ID of the issuer. Undefined for the native asset. */
+  issuer;
+  /**
+   * @param code - The asset code.
+   * @param issuer - The account ID of the issuer.
+   */
+  constructor(code, issuer) {
+    if (!/^[a-zA-Z0-9]{1,12}$/.test(code)) {
+      throw new Error(
+        "Asset code is invalid (maximum alphanumeric, 12 characters at max)"
+      );
+    }
+    if (String(code).toLowerCase() !== "native" && !issuer) {
+      throw new Error("Issuer cannot be null");
+    }
+    if (issuer && !strkey.StrKey.isValidEd25519PublicKey(issuer)) {
+      throw new Error("Issuer is invalid");
+    }
+    if (String(code).toLowerCase() === "native") {
+      this.code = "NATIVE";
+    } else {
+      this.code = code;
+    }
+    this.issuer = issuer;
+  }
+  /**
+   * Returns an asset object for the native asset.
+   */
+  static native() {
+    return new Asset("NATIVE");
+  }
+  /**
+   * Returns an asset object from its XDR object representation.
+   * @param assetXdr - The asset xdr object.
+   */
+  static fromOperation(assetXdr) {
+    let anum;
+    let code;
+    let issuer;
+    switch (assetXdr.switch()) {
+      case curr_generated.default.AssetType.assetTypeNative():
+        return this.native();
+      case curr_generated.default.AssetType.assetTypeCreditAlphanum4():
+        anum = assetXdr.alphaNum4();
+        issuer = strkey.StrKey.encodeEd25519PublicKey(anum.issuer().ed25519());
+        code = util.trimEnd(anum.assetCode().toString(), "\0");
+        return new this(code, issuer);
+      case curr_generated.default.AssetType.assetTypeCreditAlphanum12():
+        anum = assetXdr.alphaNum12();
+        issuer = strkey.StrKey.encodeEd25519PublicKey(anum.issuer().ed25519());
+        code = util.trimEnd(anum.assetCode().toString(), "\0");
+        return new this(code, issuer);
+      default:
+        throw new Error(`Invalid asset type: ${assetXdr.switch().name}`);
+    }
+  }
+  /**
+   * Returns the xdr.Asset object for this asset.
+   */
+  toXDRObject() {
+    return this._toXDRObject(curr_generated.default.Asset);
+  }
+  /**
+   * Returns the xdr.ChangeTrustAsset object for this asset.
+   */
+  toChangeTrustXDRObject() {
+    return this._toXDRObject(curr_generated.default.ChangeTrustAsset);
+  }
+  /**
+   * Returns the xdr.TrustLineAsset object for this asset.
+   */
+  toTrustLineXDRObject() {
+    return this._toXDRObject(curr_generated.default.TrustLineAsset);
+  }
+  /**
+   * Returns the would-be contract ID (`C...` format) for this asset on a given
+   * network.
+   *
+   * @param networkPassphrase - indicates which network the contract
+   *    ID should refer to, since every network will have a unique ID for the
+   *    same contract (see {@link Networks} for options)
+   *
+   * **Warning:** This makes no guarantee that this contract actually *exists*.
+   */
+  contractId(networkPassphrase) {
+    const networkId = hashing.hash(buffer.Buffer.from(networkPassphrase));
+    const preimage = curr_generated.default.HashIdPreimage.envelopeTypeContractId(
+      new curr_generated.default.HashIdPreimageContractId({
+        networkId,
+        contractIdPreimage: curr_generated.default.ContractIdPreimage.contractIdPreimageFromAsset(
+          this.toXDRObject()
+        )
+      })
+    );
+    return strkey.StrKey.encodeContract(hashing.hash(preimage.toXDR()));
+  }
+  /**
+   * Returns the xdr object for this asset.
+   * @param xdrAsset - The xdr asset constructor.
+   */
+  _toXDRObject(xdrAsset) {
+    if (this.isNative()) {
+      return xdrAsset.assetTypeNative();
+    }
+    if (!this.issuer) {
+      throw new Error("Issuer cannot be null for non-native asset");
+    }
+    let xdrType;
+    let xdrTypeString;
+    if (this.code.length <= 4) {
+      xdrType = curr_generated.default.AlphaNum4;
+      xdrTypeString = "assetTypeCreditAlphanum4";
+    } else {
+      xdrType = curr_generated.default.AlphaNum12;
+      xdrTypeString = "assetTypeCreditAlphanum12";
+    }
+    const padLength = this.code.length <= 4 ? 4 : 12;
+    const paddedCode = this.code.padEnd(padLength, "\0");
+    const assetType = new xdrType({
+      assetCode: paddedCode,
+      issuer: keypair.Keypair.fromPublicKey(this.issuer).xdrAccountId()
+    });
+    return new xdrAsset(xdrTypeString, assetType);
+  }
+  /**
+   * Returns the asset code
+   */
+  getCode() {
+    return String(this.code);
+  }
+  /**
+   * Returns the asset issuer
+   */
+  getIssuer() {
+    if (this.issuer === void 0) {
+      return void 0;
+    }
+    return String(this.issuer);
+  }
+  /**
+   * @see [Assets concept](https://docs.digitalworld.global/docs/glossary/assets/)
+   * Returns the asset type. Can be one of following types:
+   *
+   *  - `native`,
+   *  - `credit_alphanum4`,
+   *  - `credit_alphanum12`
+   * @throws Throws `Error` if asset type is unsupported.
+   */
+  getAssetType() {
+    switch (this.getRawAssetType().value) {
+      case curr_generated.default.AssetType.assetTypeNative().value:
+        return AssetType.native;
+      case curr_generated.default.AssetType.assetTypeCreditAlphanum4().value:
+        return AssetType.credit4;
+      case curr_generated.default.AssetType.assetTypeCreditAlphanum12().value:
+        return AssetType.credit12;
+      default:
+        throw new Error(
+          "Supported asset types are: native, credit_alphanum4, credit_alphanum12"
+        );
+    }
+  }
+  /**
+   * Returns the raw XDR representation of the asset type
+   */
+  getRawAssetType() {
+    if (this.isNative()) {
+      return curr_generated.default.AssetType.assetTypeNative();
+    }
+    if (this.code.length <= 4) {
+      return curr_generated.default.AssetType.assetTypeCreditAlphanum4();
+    }
+    return curr_generated.default.AssetType.assetTypeCreditAlphanum12();
+  }
+  /**
+   * Returns true if this asset object is the native asset.
+   */
+  isNative() {
+    return !this.issuer;
+  }
+  /**
+   * Returns true if this asset equals the given asset.
+   *
+   * @param asset - Asset to compare
+   */
+  equals(asset) {
+    return this.code === asset.getCode() && this.issuer === asset.getIssuer();
+  }
+  /**
+   * Returns a string representation of this asset.
+   *
+   * Native assets return `"native"`. Non-native assets return `"code:issuer"`.
+   */
+  toString() {
+    if (this.isNative()) {
+      return "native";
+    }
+    return `${this.getCode()}:${this.getIssuer()}`;
+  }
+  /**
+   * Compares two assets according to the criteria:
+   *
+   *  1. First compare the type (`native < alphanum4 < alphanum12`).
+   *  2. If the types are equal, compare the assets codes.
+   *  3. If the asset codes are equal, compare the issuers.
+   *
+   * @param assetA - the first asset
+   * @param assetB - the second asset
+   */
+  static compare(assetA, assetB) {
+    if (!assetA || !(assetA instanceof Asset)) {
+      throw new Error("assetA is invalid");
+    }
+    if (!assetB || !(assetB instanceof Asset)) {
+      throw new Error("assetB is invalid");
+    }
+    if (assetA.equals(assetB)) {
+      return 0;
+    }
+    const xdrAtype = assetA.getRawAssetType().value;
+    const xdrBtype = assetB.getRawAssetType().value;
+    if (xdrAtype !== xdrBtype) {
+      return xdrAtype < xdrBtype ? -1 : 1;
+    }
+    const result = asciiCompare(assetA.getCode(), assetB.getCode());
+    if (result !== 0) {
+      return result;
+    }
+    const issuerA = assetA.getIssuer();
+    const issuerB = assetB.getIssuer();
+    if (issuerA === void 0 || issuerB === void 0) {
+      throw new Error("Issuer is undefined for non-native asset");
+    }
+    return asciiCompare(issuerA, issuerB);
+  }
+}
+
+exports.Asset = Asset;
+exports.AssetType = AssetType;
+//# sourceMappingURL=asset.js.map

package/lib/cjs/base/asset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset.js","sources":["../../../src/base/asset.ts"],"sourcesContent":["import { trimEnd } from \"./util/util.js\";\nimport xdr from \"./xdr.js\";\nimport { Keypair } from \"./keypair.js\";\nimport { StrKey } from \"./strkey.js\";\nimport { hash } from \"./hashing.js\";\n\nexport const AssetType = {\n  native: \"native\",\n  credit4: \"credit_alphanum4\",\n  credit12: \"credit_alphanum12\",\n  liquidityPoolShares: \"liquidity_pool_shares\",\n} as const;\nexport type AssetType = (typeof AssetType)[keyof typeof AssetType];\n// Namespace merge so `AssetType.native` etc. can be used in type positions,\n// matching the public API shape consumers depended on.\n\nexport namespace AssetType {\n  export type native = \"native\";\n  export type credit4 = \"credit_alphanum4\";\n  export type credit12 = \"credit_alphanum12\";\n  export type liquidityPoolShares = \"liquidity_pool_shares\";\n}\n\ninterface XdrAssetConstructor<T> {\n  assetTypeNative(): T;\n  new (type: string, value: xdr.AlphaNum4 | xdr.AlphaNum12): T;\n}\n\n/**\n * Compares two ASCII strings in lexographic order with uppercase precedence.\n *\n * @param a - the first string to compare\n * @param b - the second string to compare\n */\nfunction asciiCompare(a: string, b: string): -1 | 0 | 1 {\n  return Buffer.compare(Buffer.from(a, \"ascii\"), Buffer.from(b, \"ascii\"));\n}\n\n/**\n * Asset class represents an asset, either the native asset (`NATIVE`)\n * or an asset code / issuer account ID pair.\n *\n * An asset describes an asset code and issuer pair. In the case of the native\n * asset NATIVE, the issuer will be undefined.\n */\nexport class Asset {\n  /** The asset code. */\n  readonly code: string;\n  /** The account ID of the issuer. Undefined for the native asset. */\n  readonly issuer: string | undefined;\n\n  /**\n   * @param code - The asset code.\n   * @param issuer - The account ID of the issuer.\n   */\n  constructor(code: string, issuer?: string) {\n    if (!/^[a-zA-Z0-9]{1,12}$/.test(code)) {\n      throw new Error(\n        \"Asset code is invalid (maximum alphanumeric, 12 characters at max)\",\n      );\n    }\n    if (String(code).toLowerCase() !== \"native\" && !issuer) {\n      throw new Error(\"Issuer cannot be null\");\n    }\n    if (issuer && !StrKey.isValidEd25519PublicKey(issuer)) {\n      throw new Error(\"Issuer is invalid\");\n    }\n\n    if (String(code).toLowerCase() === \"native\") {\n      // transform all nATIVE, Native, etc. variants -> NATIVE\n      this.code = \"NATIVE\";\n    } else {\n      this.code = code;\n    }\n\n    this.issuer = issuer;\n  }\n\n  /**\n   * Returns an asset object for the native asset.\n   */\n  static native(): Asset {\n    return new Asset(\"NATIVE\");\n  }\n\n  /**\n   * Returns an asset object from its XDR object representation.\n   * @param assetXdr - The asset xdr object.\n   */\n  static fromOperation(assetXdr: xdr.Asset): Asset {\n    let anum;\n    let code: string;\n    let issuer: string;\n    switch (assetXdr.switch()) {\n      case xdr.AssetType.assetTypeNative():\n        return this.native();\n      case xdr.AssetType.assetTypeCreditAlphanum4():\n        anum = assetXdr.alphaNum4();\n        issuer = StrKey.encodeEd25519PublicKey(anum.issuer().ed25519());\n        code = trimEnd(anum.assetCode().toString(), \"\\0\") as string;\n        return new this(code, issuer);\n      case xdr.AssetType.assetTypeCreditAlphanum12():\n        anum = assetXdr.alphaNum12();\n        issuer = StrKey.encodeEd25519PublicKey(anum.issuer().ed25519());\n        code = trimEnd(anum.assetCode().toString(), \"\\0\") as string;\n        return new this(code, issuer);\n      default:\n        throw new Error(`Invalid asset type: ${assetXdr.switch().name}`);\n    }\n  }\n\n  /**\n   * Returns the xdr.Asset object for this asset.\n   */\n  toXDRObject(): xdr.Asset {\n    return this._toXDRObject(xdr.Asset);\n  }\n\n  /**\n   * Returns the xdr.ChangeTrustAsset object for this asset.\n   */\n  toChangeTrustXDRObject(): xdr.ChangeTrustAsset {\n    return this._toXDRObject(xdr.ChangeTrustAsset);\n  }\n\n  /**\n   * Returns the xdr.TrustLineAsset object for this asset.\n   */\n  toTrustLineXDRObject(): xdr.TrustLineAsset {\n    return this._toXDRObject(xdr.TrustLineAsset);\n  }\n\n  /**\n   * Returns the would-be contract ID (`C...` format) for this asset on a given\n   * network.\n   *\n   * @param networkPassphrase - indicates which network the contract\n   *    ID should refer to, since every network will have a unique ID for the\n   *    same contract (see {@link Networks} for options)\n   *\n   * **Warning:** This makes no guarantee that this contract actually *exists*.\n   */\n  contractId(networkPassphrase: string): string {\n    const networkId = hash(Buffer.from(networkPassphrase));\n    const preimage = xdr.HashIdPreimage.envelopeTypeContractId(\n      new xdr.HashIdPreimageContractId({\n        networkId,\n        contractIdPreimage: xdr.ContractIdPreimage.contractIdPreimageFromAsset(\n          this.toXDRObject(),\n        ),\n      }),\n    );\n\n    return StrKey.encodeContract(hash(preimage.toXDR()));\n  }\n\n  /**\n   * Returns the xdr object for this asset.\n   * @param xdrAsset - The xdr asset constructor.\n   */\n  private _toXDRObject<T>(xdrAsset: XdrAssetConstructor<T>): T {\n    if (this.isNative()) {\n      return xdrAsset.assetTypeNative();\n    }\n\n    // This should never happen because the constructor should throw an error if the issuer is null for a non-native asset, but we check here just to be safe.\n    if (!this.issuer) {\n      throw new Error(\"Issuer cannot be null for non-native asset\");\n    }\n\n    let xdrType;\n    let xdrTypeString: string;\n    if (this.code.length <= 4) {\n      xdrType = xdr.AlphaNum4;\n      xdrTypeString = \"assetTypeCreditAlphanum4\";\n    } else {\n      xdrType = xdr.AlphaNum12;\n      xdrTypeString = \"assetTypeCreditAlphanum12\";\n    }\n\n    // pad code with null bytes if necessary\n    const padLength = this.code.length <= 4 ? 4 : 12;\n    const paddedCode = this.code.padEnd(padLength, \"\\0\");\n\n    const assetType = new xdrType({\n      assetCode: paddedCode,\n      issuer: Keypair.fromPublicKey(this.issuer).xdrAccountId(),\n    });\n\n    return new xdrAsset(xdrTypeString, assetType);\n  }\n\n  /**\n   * Returns the asset code\n   */\n  getCode(): string {\n    return String(this.code);\n  }\n\n  /**\n   * Returns the asset issuer\n   */\n  getIssuer(): string | undefined {\n    if (this.issuer === undefined) {\n      return undefined;\n    }\n    return String(this.issuer);\n  }\n\n  /**\n   * @see [Assets concept](https://docs.digitalworld.global/docs/glossary/assets/)\n   * Returns the asset type. Can be one of following types:\n   *\n   *  - `native`,\n   *  - `credit_alphanum4`,\n   *  - `credit_alphanum12`\n   * @throws Throws `Error` if asset type is unsupported.\n   */\n  getAssetType(): AssetType {\n    switch (this.getRawAssetType().value) {\n      case xdr.AssetType.assetTypeNative().value:\n        return AssetType.native;\n      case xdr.AssetType.assetTypeCreditAlphanum4().value:\n        return AssetType.credit4;\n      case xdr.AssetType.assetTypeCreditAlphanum12().value:\n        return AssetType.credit12;\n      default:\n        throw new Error(\n          \"Supported asset types are: native, credit_alphanum4, credit_alphanum12\",\n        );\n    }\n  }\n\n  /**\n   * Returns the raw XDR representation of the asset type\n   */\n  getRawAssetType(): xdr.AssetType {\n    if (this.isNative()) {\n      return xdr.AssetType.assetTypeNative();\n    }\n\n    if (this.code.length <= 4) {\n      return xdr.AssetType.assetTypeCreditAlphanum4();\n    }\n\n    return xdr.AssetType.assetTypeCreditAlphanum12();\n  }\n\n  /**\n   * Returns true if this asset object is the native asset.\n   */\n  isNative(): boolean {\n    return !this.issuer;\n  }\n\n  /**\n   * Returns true if this asset equals the given asset.\n   *\n   * @param asset - Asset to compare\n   */\n  equals(asset: Asset): boolean {\n    return this.code === asset.getCode() && this.issuer === asset.getIssuer();\n  }\n\n  /**\n   * Returns a string representation of this asset.\n   *\n   * Native assets return `\"native\"`. Non-native assets return `\"code:issuer\"`.\n   */\n  toString(): string {\n    if (this.isNative()) {\n      return \"native\";\n    }\n\n    return `${this.getCode()}:${this.getIssuer()}`;\n  }\n\n  /**\n   * Compares two assets according to the criteria:\n   *\n   *  1. First compare the type (`native < alphanum4 < alphanum12`).\n   *  2. If the types are equal, compare the assets codes.\n   *  3. If the asset codes are equal, compare the issuers.\n   *\n   * @param assetA - the first asset\n   * @param assetB - the second asset\n   */\n  static compare(assetA: Asset, assetB: Asset): -1 | 0 | 1 {\n    if (!assetA || !(assetA instanceof Asset)) {\n      throw new Error(\"assetA is invalid\");\n    }\n    if (!assetB || !(assetB instanceof Asset)) {\n      throw new Error(\"assetB is invalid\");\n    }\n\n    if (assetA.equals(assetB)) {\n      return 0;\n    }\n\n    // Compare asset types.\n    const xdrAtype = assetA.getRawAssetType().value;\n    const xdrBtype = assetB.getRawAssetType().value;\n    if (xdrAtype !== xdrBtype) {\n      return xdrAtype < xdrBtype ? -1 : 1;\n    }\n\n    // Compare asset codes.\n    const result = asciiCompare(assetA.getCode(), assetB.getCode());\n    if (result !== 0) {\n      return result;\n    }\n\n    // Compare asset issuers.\n    const issuerA = assetA.getIssuer();\n    const issuerB = assetB.getIssuer();\n\n    if (issuerA === undefined || issuerB === undefined) {\n      throw new Error(\"Issuer is undefined for non-native asset\");\n    }\n    return asciiCompare(issuerA, issuerB);\n  }\n}\n"],"names":["Buffer","StrKey","xdr","trimEnd","hash","Keypair"],"mappings":";;;;;;;;;AAMO,MAAM,SAAA,GAAY;AAAA,EACvB,MAAA,EAAQ,QAAA;AAAA,EACR,OAAA,EAAS,kBAAA;AAAA,EACT,QAAA,EAAU,mBAAA;AAAA,EACV,mBAAA,EAAqB;AACvB;AAuBA,SAAS,YAAA,CAAa,GAAW,CAAA,EAAuB;AACtD,EAAA,OAAOA,aAAA,CAAO,OAAA,CAAQA,aAAA,CAAO,IAAA,CAAK,CAAA,EAAG,OAAO,CAAA,EAAGA,aAAA,CAAO,IAAA,CAAK,CAAA,EAAG,OAAO,CAAC,CAAA;AACxE;AASO,MAAM,KAAA,CAAM;AAAA;AAAA,EAER,IAAA;AAAA;AAAA,EAEA,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMT,WAAA,CAAY,MAAc,MAAA,EAAiB;AACzC,IAAA,IAAI,CAAC,qBAAA,CAAsB,IAAA,CAAK,IAAI,CAAA,EAAG;AACrC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,OAAO,IAAI,CAAA,CAAE,aAAY,KAAM,QAAA,IAAY,CAAC,MAAA,EAAQ;AACtD,MAAA,MAAM,IAAI,MAAM,uBAAuB,CAAA;AAAA,IACzC;AACA,IAAA,IAAI,MAAA,IAAU,CAACC,aAAA,CAAO,uBAAA,CAAwB,MAAM,CAAA,EAAG;AACrD,MAAA,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAAA,IACrC;AAEA,IAAA,IAAI,MAAA,CAAO,IAAI,CAAA,CAAE,WAAA,OAAkB,QAAA,EAAU;AAE3C,MAAA,IAAA,CAAK,IAAA,GAAO,QAAA;AAAA,IACd,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,IACd;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,MAAA,GAAgB;AACrB,IAAA,OAAO,IAAI,MAAM,QAAQ,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OAAO,cAAc,QAAA,EAA4B;AAC/C,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,MAAA;AACJ,IAAA,QAAQ,QAAA,CAAS,QAAO;AAAG,MACzB,KAAKC,sBAAA,CAAI,SAAA,CAAU,eAAA,EAAgB;AACjC,QAAA,OAAO,KAAK,MAAA,EAAO;AAAA,MACrB,KAAKA,sBAAA,CAAI,SAAA,CAAU,wBAAA,EAAyB;AAC1C,QAAA,IAAA,GAAO,SAAS,SAAA,EAAU;AAC1B,QAAA,MAAA,GAASD,cAAO,sBAAA,CAAuB,IAAA,CAAK,MAAA,EAAO,CAAE,SAAS,CAAA;AAC9D,QAAA,IAAA,GAAOE,aAAQ,IAAA,CAAK,SAAA,EAAU,CAAE,QAAA,IAAY,IAAI,CAAA;AAChD,QAAA,OAAO,IAAI,IAAA,CAAK,IAAA,EAAM,MAAM,CAAA;AAAA,MAC9B,KAAKD,sBAAA,CAAI,SAAA,CAAU,yBAAA,EAA0B;AAC3C,QAAA,IAAA,GAAO,SAAS,UAAA,EAAW;AAC3B,QAAA,MAAA,GAASD,cAAO,sBAAA,CAAuB,IAAA,CAAK,MAAA,EAAO,CAAE,SAAS,CAAA;AAC9D,QAAA,IAAA,GAAOE,aAAQ,IAAA,CAAK,SAAA,EAAU,CAAE,QAAA,IAAY,IAAI,CAAA;AAChD,QAAA,OAAO,IAAI,IAAA,CAAK,IAAA,EAAM,MAAM,CAAA;AAAA,MAC9B;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,SAAS,MAAA,EAAO,CAAE,IAAI,CAAA,CAAE,CAAA;AAAA;AACnE,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,WAAA,GAAyB;AACvB,IAAA,OAAO,IAAA,CAAK,YAAA,CAAaD,sBAAA,CAAI,KAAK,CAAA;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKA,sBAAA,GAA+C;AAC7C,IAAA,OAAO,IAAA,CAAK,YAAA,CAAaA,sBAAA,CAAI,gBAAgB,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,oBAAA,GAA2C;AACzC,IAAA,OAAO,IAAA,CAAK,YAAA,CAAaA,sBAAA,CAAI,cAAc,CAAA;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,WAAW,iBAAA,EAAmC;AAC5C,IAAA,MAAM,SAAA,GAAYE,YAAA,CAAKJ,aAAA,CAAO,IAAA,CAAK,iBAAiB,CAAC,CAAA;AACrD,IAAA,MAAM,QAAA,GAAWE,uBAAI,cAAA,CAAe,sBAAA;AAAA,MAClC,IAAIA,uBAAI,wBAAA,CAAyB;AAAA,QAC/B,SAAA;AAAA,QACA,kBAAA,EAAoBA,uBAAI,kBAAA,CAAmB,2BAAA;AAAA,UACzC,KAAK,WAAA;AAAY;AACnB,OACD;AAAA,KACH;AAEA,IAAA,OAAOD,cAAO,cAAA,CAAeG,YAAA,CAAK,QAAA,CAAS,KAAA,EAAO,CAAC,CAAA;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,aAAgB,QAAA,EAAqC;AAC3D,IAAA,IAAI,IAAA,CAAK,UAAS,EAAG;AACnB,MAAA,OAAO,SAAS,eAAA,EAAgB;AAAA,IAClC;AAGA,IAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAChB,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AAEA,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI,aAAA;AACJ,IAAA,IAAI,IAAA,CAAK,IAAA,CAAK,MAAA,IAAU,CAAA,EAAG;AACzB,MAAA,OAAA,GAAUF,sBAAA,CAAI,SAAA;AACd,MAAA,aAAA,GAAgB,0BAAA;AAAA,IAClB,CAAA,MAAO;AACL,MAAA,OAAA,GAAUA,sBAAA,CAAI,UAAA;AACd,MAAA,aAAA,GAAgB,2BAAA;AAAA,IAClB;AAGA,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,IAAA,CAAK,MAAA,IAAU,IAAI,CAAA,GAAI,EAAA;AAC9C,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,WAAW,IAAI,CAAA;AAEnD,IAAA,MAAM,SAAA,GAAY,IAAI,OAAA,CAAQ;AAAA,MAC5B,SAAA,EAAW,UAAA;AAAA,MACX,QAAQG,eAAA,CAAQ,aAAA,CAAc,IAAA,CAAK,MAAM,EAAE,YAAA;AAAa,KACzD,CAAA;AAED,IAAA,OAAO,IAAI,QAAA,CAAS,aAAA,EAAe,SAAS,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,OAAA,GAAkB;AAChB,IAAA,OAAO,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAgC;AAC9B,IAAA,IAAI,IAAA,CAAK,WAAW,MAAA,EAAW;AAC7B,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,MAAA,CAAO,KAAK,MAAM,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,YAAA,GAA0B;AACxB,IAAA,QAAQ,IAAA,CAAK,eAAA,EAAgB,CAAE,KAAA;AAAO,MACpC,KAAKH,sBAAA,CAAI,SAAA,CAAU,eAAA,EAAgB,CAAE,KAAA;AACnC,QAAA,OAAO,SAAA,CAAU,MAAA;AAAA,MACnB,KAAKA,sBAAA,CAAI,SAAA,CAAU,wBAAA,EAAyB,CAAE,KAAA;AAC5C,QAAA,OAAO,SAAA,CAAU,OAAA;AAAA,MACnB,KAAKA,sBAAA,CAAI,SAAA,CAAU,yBAAA,EAA0B,CAAE,KAAA;AAC7C,QAAA,OAAO,SAAA,CAAU,QAAA;AAAA,MACnB;AACE,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SACF;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,eAAA,GAAiC;AAC/B,IAAA,IAAI,IAAA,CAAK,UAAS,EAAG;AACnB,MAAA,OAAOA,sBAAA,CAAI,UAAU,eAAA,EAAgB;AAAA,IACvC;AAEA,IAAA,IAAI,IAAA,CAAK,IAAA,CAAK,MAAA,IAAU,CAAA,EAAG;AACzB,MAAA,OAAOA,sBAAA,CAAI,UAAU,wBAAA,EAAyB;AAAA,IAChD;AAEA,IAAA,OAAOA,sBAAA,CAAI,UAAU,yBAAA,EAA0B;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA,GAAoB;AAClB,IAAA,OAAO,CAAC,IAAA,CAAK,MAAA;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,KAAA,EAAuB;AAC5B,IAAA,OAAO,IAAA,CAAK,SAAS,KAAA,CAAM,OAAA,MAAa,IAAA,CAAK,MAAA,KAAW,MAAM,SAAA,EAAU;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,QAAA,GAAmB;AACjB,IAAA,IAAI,IAAA,CAAK,UAAS,EAAG;AACnB,MAAA,OAAO,QAAA;AAAA,IACT;AAEA,IAAA,OAAO,GAAG,IAAA,CAAK,OAAA,EAAS,CAAA,CAAA,EAAI,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAO,OAAA,CAAQ,MAAA,EAAe,MAAA,EAA2B;AACvD,IAAA,IAAI,CAAC,MAAA,IAAU,EAAE,MAAA,YAAkB,KAAA,CAAA,EAAQ;AACzC,MAAA,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAAA,IACrC;AACA,IAAA,IAAI,CAAC,MAAA,IAAU,EAAE,MAAA,YAAkB,KAAA,CAAA,EAAQ;AACzC,MAAA,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAAA,IACrC;AAEA,IAAA,IAAI,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,EAAG;AACzB,MAAA,OAAO,CAAA;AAAA,IACT;AAGA,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,eAAA,EAAgB,CAAE,KAAA;AAC1C,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,eAAA,EAAgB,CAAE,KAAA;AAC1C,IAAA,IAAI,aAAa,QAAA,EAAU;AACzB,MAAA,OAAO,QAAA,GAAW,WAAW,EAAA,GAAK,CAAA;AAAA,IACpC;AAGA,IAAA,MAAM,SAAS,YAAA,CAAa,MAAA,CAAO,SAAQ,EAAG,MAAA,CAAO,SAAS,CAAA;AAC9D,IAAA,IAAI,WAAW,CAAA,EAAG;AAChB,MAAA,OAAO,MAAA;AAAA,IACT;AAGA,IAAA,MAAM,OAAA,GAAU,OAAO,SAAA,EAAU;AACjC,IAAA,MAAM,OAAA,GAAU,OAAO,SAAA,EAAU;AAEjC,IAAA,IAAI,OAAA,KAAY,MAAA,IAAa,OAAA,KAAY,MAAA,EAAW;AAClD,MAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,IAC5D;AACA,IAAA,OAAO,YAAA,CAAa,SAAS,OAAO,CAAA;AAAA,EACtC;AACF;;;;;"}

package/lib/cjs/base/auth.js

@@ -0,0 +1,244 @@
+'use strict';
+
+var buffer = require('buffer');
+var curr_generated = require('./generated/curr_generated.js');
+var keypair = require('./keypair.js');
+var strkey = require('./strkey.js');
+var hashing = require('./hashing.js');
+var address = require('./address.js');
+var scval = require('./scval.js');
+
+function toBuffer(value) {
+  if (value instanceof ArrayBuffer) {
+    return buffer.Buffer.from(new Uint8Array(value));
+  }
+  return buffer.Buffer.from(value);
+}
+async function authorizeEntry(entry, signer, validUntilLedgerSeq, networkPassphrase, forAddress) {
+  if (entry.credentials().switch().value === curr_generated.default.SorobanCredentialsType.sorobanCredentialsSourceAccount().value) {
+    return entry;
+  }
+  const clone = curr_generated.default.SorobanAuthorizationEntry.fromXDR(entry.toXDR());
+  const credentials = clone.credentials();
+  const addrAuth = getAddressCredentials(credentials);
+  if (addrAuth === null) {
+    throw new Error(`unsupported credential type ${credentials.switch().name}`);
+  }
+  addrAuth.signatureExpirationLedger(validUntilLedgerSeq);
+  const preimage = buildAuthorizationEntryPreimage(
+    clone,
+    validUntilLedgerSeq,
+    networkPassphrase
+  );
+  const payload = hashing.hash(preimage.toXDR());
+  let signature;
+  let publicKey;
+  if (typeof signer === "function") {
+    const sigResult = await signer(preimage);
+    if (sigResult !== null && typeof sigResult === "object" && "signature" in sigResult) {
+      signature = toBuffer(sigResult.signature);
+      publicKey = sigResult.publicKey;
+    } else {
+      signature = toBuffer(sigResult);
+      publicKey = address.Address.fromScAddress(addrAuth.address()).toString();
+    }
+  } else {
+    signature = toBuffer(signer.sign(payload));
+    publicKey = signer.publicKey();
+  }
+  if (!keypair.Keypair.fromPublicKey(publicKey).verify(payload, signature)) {
+    throw new Error(`signature doesn't match payload`);
+  }
+  const sigScVal = scval.nativeToScVal(
+    {
+      public_key: strkey.StrKey.decodeEd25519PublicKey(publicKey),
+      signature
+    },
+    {
+      type: {
+        public_key: ["symbol", null],
+        signature: ["symbol", null]
+      }
+    }
+  );
+  const signatureScVal = curr_generated.default.ScVal.scvVec([sigScVal]);
+  const targets = forAddress === void 0 ? [addrAuth] : collectSignatureNodes(credentials).filter(
+    (node) => address.Address.fromScAddress(node.address()).toString() === forAddress
+  );
+  if (targets.length === 0) {
+    throw new Error(
+      `the authorization entry has no credential node for address ${forAddress}`
+    );
+  }
+  targets.forEach((node) => node.signature(signatureScVal));
+  return clone;
+}
+function authorizeInvocation(params) {
+  const {
+    signer,
+    validUntilLedgerSeq,
+    invocation,
+    networkPassphrase,
+    publicKey = "",
+    authV2 = false
+  } = params;
+  const kp = keypair.Keypair.random().rawPublicKey();
+  const nonce = new curr_generated.default.Int64(bytesToInt64(kp));
+  const pk = publicKey || (signer instanceof keypair.Keypair ? signer.publicKey() : null);
+  if (!pk) {
+    throw new Error(`authorizeInvocation requires publicKey parameter`);
+  }
+  const addressCredentials = new curr_generated.default.SorobanAddressCredentials({
+    address: new address.Address(pk).toScAddress(),
+    nonce,
+    signatureExpirationLedger: 0,
+    // replaced
+    signature: curr_generated.default.ScVal.scvVec([])
+    // replaced
+  });
+  const entry = new curr_generated.default.SorobanAuthorizationEntry({
+    rootInvocation: invocation,
+    credentials: authV2 ? curr_generated.default.SorobanCredentials.sorobanCredentialsAddressV2(addressCredentials) : curr_generated.default.SorobanCredentials.sorobanCredentialsAddress(addressCredentials)
+  });
+  return authorizeEntry(entry, signer, validUntilLedgerSeq, networkPassphrase);
+}
+function buildAuthorizationEntryPreimage(entry, validUntilLedgerSeq, networkPassphrase) {
+  const credentials = entry.credentials();
+  const addrAuth = getAddressCredentials(credentials);
+  if (addrAuth === null) {
+    throw new Error(
+      `cannot build a signature payload for credential type ${credentials.switch().name}`
+    );
+  }
+  const networkId = hashing.hash(buffer.Buffer.from(networkPassphrase));
+  switch (credentials.switch().value) {
+    // legacy address credentials are not address-bound
+    case curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddress().value:
+      return curr_generated.default.HashIdPreimage.envelopeTypeSorobanAuthorization(
+        new curr_generated.default.HashIdPreimageSorobanAuthorization({
+          networkId,
+          nonce: addrAuth.nonce(),
+          invocation: entry.rootInvocation(),
+          signatureExpirationLedger: validUntilLedgerSeq
+        })
+      );
+    // ADDRESS_V2 and ADDRESS_WITH_DELEGATES bind the address into the signed
+    // payload via the WithAddress preimage (CAP-71)
+    case curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddressV2().value:
+    case curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddressWithDelegates().value:
+      return curr_generated.default.HashIdPreimage.envelopeTypeSorobanAuthorizationWithAddress(
+        new curr_generated.default.HashIdPreimageSorobanAuthorizationWithAddress({
+          networkId,
+          nonce: addrAuth.nonce(),
+          invocation: entry.rootInvocation(),
+          address: addrAuth.address(),
+          signatureExpirationLedger: validUntilLedgerSeq
+        })
+      );
+    default:
+      throw new Error(
+        `unsupported credential type ${credentials.switch().name}`
+      );
+  }
+}
+function buildWithDelegatesEntry(params) {
+  const { entry, validUntilLedgerSeq, delegates, signature } = params;
+  const credentials = entry.credentials();
+  const addrAuth = getAddressCredentials(credentials);
+  if (addrAuth === null || credentials.switch().value === curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddressWithDelegates().value) {
+    throw new Error(
+      `buildWithDelegatesEntry expects ADDRESS or ADDRESS_V2 credentials, got ${credentials.switch().name}`
+    );
+  }
+  return new curr_generated.default.SorobanAuthorizationEntry({
+    rootInvocation: entry.rootInvocation(),
+    credentials: curr_generated.default.SorobanCredentials.sorobanCredentialsAddressWithDelegates(
+      new curr_generated.default.SorobanAddressCredentialsWithDelegates({
+        addressCredentials: new curr_generated.default.SorobanAddressCredentials({
+          address: addrAuth.address(),
+          nonce: addrAuth.nonce(),
+          signatureExpirationLedger: validUntilLedgerSeq,
+          signature: signature ?? curr_generated.default.ScVal.scvVoid()
+        }),
+        delegates: buildDelegateNodes(delegates)
+      })
+    )
+  });
+}
+function buildDelegateNodes(delegates) {
+  const nodes = delegates.map(
+    (delegate) => new curr_generated.default.SorobanDelegateSignature({
+      address: new address.Address(delegate.address).toScAddress(),
+      signature: delegate.signature ?? curr_generated.default.ScVal.scvVoid(),
+      nestedDelegates: buildDelegateNodes(delegate.nestedDelegates ?? [])
+    })
+  );
+  nodes.sort(
+    (a, b) => buffer.Buffer.compare(a.address().toXDR(), b.address().toXDR())
+  );
+  for (let i = 1; i < nodes.length; i++) {
+    if (buffer.Buffer.compare(
+      nodes[i - 1].address().toXDR(),
+      nodes[i].address().toXDR()
+    ) === 0) {
+      throw new Error(
+        `duplicate delegate address ${address.Address.fromScAddress(
+          nodes[i].address()
+        ).toString()}`
+      );
+    }
+  }
+  return nodes;
+}
+function getAddressCredentials(credentials) {
+  switch (credentials.switch().value) {
+    case curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddress().value:
+      return credentials.address();
+    case curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddressV2().value:
+      return credentials.addressV2();
+    case curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddressWithDelegates().value:
+      return credentials.addressWithDelegates().addressCredentials();
+    default:
+      return null;
+  }
+}
+function collectSignatureNodes(credentials) {
+  switch (credentials.switch().value) {
+    case curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddress().value:
+      return [credentials.address()];
+    case curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddressV2().value:
+      return [credentials.addressV2()];
+    case curr_generated.default.SorobanCredentialsType.sorobanCredentialsAddressWithDelegates().value: {
+      const withDelegates = credentials.addressWithDelegates();
+      const nodes = [withDelegates.addressCredentials()];
+      const walk = (delegates) => {
+        delegates.forEach((delegate) => {
+          nodes.push(delegate);
+          walk(delegate.nestedDelegates());
+        });
+      };
+      walk(withDelegates.delegates());
+      return nodes;
+    }
+    default:
+      return [];
+  }
+}
+function bytesToInt64(bytes) {
+  const buf = bytes.subarray(0, 8);
+  if (buf.length < 8) {
+    throw new Error(
+      `need at least 8 bytes to convert to Int64, got ${bytes.length}`
+    );
+  }
+  const view = new DataView(buf.buffer, buf.byteOffset, 8);
+  const value = view.getBigInt64(0, false);
+  return value;
+}
+
+exports.authorizeEntry = authorizeEntry;
+exports.authorizeInvocation = authorizeInvocation;
+exports.buildAuthorizationEntryPreimage = buildAuthorizationEntryPreimage;
+exports.buildWithDelegatesEntry = buildWithDelegatesEntry;
+exports.getAddressCredentials = getAddressCredentials;
+//# sourceMappingURL=auth.js.map

package/lib/cjs/base/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sources":["../../../src/base/auth.ts"],"sourcesContent":["import xdr from \"./xdr.js\";\n\nimport { Keypair } from \"./keypair.js\";\nimport { StrKey } from \"./strkey.js\";\n\nimport type { Networks } from \"./network.js\";\nimport { hash } from \"./hashing.js\";\n\nimport { Address } from \"./address.js\";\nimport { nativeToScVal } from \"./scval.js\";\n\ntype BufferLike = ArrayBuffer | Buffer | Uint8Array;\n\nfunction toBuffer(value: BufferLike): Buffer {\n  if (value instanceof ArrayBuffer) {\n    return Buffer.from(new Uint8Array(value));\n  }\n  return Buffer.from(value);\n}\n\n/**\n * A callback for signing an XDR structure representing all of the details\n * necessary to authorize an invocation tree.\n *\n * @param preimage - the entire authorization envelope whose hash you should\n *    sign, so that you can inspect the entire structure if necessary (rather\n *    than blindly signing a hash)\n *\n * @returns the signature of the raw payload (which is the sha256 hash of the\n *    preimage bytes, so `hash(preimage.toXDR())`) either naked, implying it is\n *    signed by the key corresponding to the public key in the entry you pass to\n *    {@link authorizeEntry} (decipherable from its\n *    `credentials().address().address()`), or alongside an explicit `publicKey`.\n */\nexport type SigningCallback = (\n  preimage: xdr.HashIdPreimage,\n) => Promise<BufferLike | { signature: BufferLike; publicKey: string }>;\n\n/**\n * Actually authorizes an existing authorization entry using the given\n * credentials and expiration details, returning a signed copy.\n *\n * This \"fills out\" the authorization entry with a signature, indicating to the\n * {@link Operation.invokeHostFunction} its attached to that:\n *   - a particular identity (i.e. signing {@link Keypair} or other signer)\n *   - approving the execution of an invocation tree (i.e. a simulation-acquired\n *     {@link xdr.SorobanAuthorizedInvocation} or otherwise built)\n *   - on a particular network (uniquely identified by its passphrase, see\n *     {@link Networks})\n *   - until a particular ledger sequence is reached.\n *\n * This one lets you pass either a {@link Keypair} (or, more accurately,\n * anything with a `sign(Buffer): Buffer` method) or a callback function (see\n * {@link SigningCallback}) to handle signing the envelope hash.\n *\n * @param entry - an unsigned authorization entry\n * @param signer - either a {@link Keypair} instance or a function which takes a\n *    {@link xdr.HashIdPreimageSorobanAuthorization} input payload and returns\n *    EITHER\n *\n *      (a) an object containing a `signature` of the hash of the raw payload\n *          bytes as a Buffer-like and a `publicKey` string representing who just\n *          created this signature, or\n *      (b) just the naked signature of the hash of the raw payload bytes (where\n *          the signing key is implied to be the address in the `entry`).\n *\n *    The latter option (b) is JUST for backwards compatibility and will be\n *    removed in the future.\n * @param validUntilLedgerSeq - the (exclusive) future ledger sequence number\n *    until which this authorization entry should be valid (if\n *    `currentLedgerSeq==validUntil`, this is expired)\n * @param networkPassphrase - the network passphrase is incorporated into the\n *    signature (see {@link Networks} for options)\n *\n * If using the `SigningCallback` variation, the signer is assumed to be\n * the entry's credential address unless you use the variant that returns\n * the object.\n *\n * @param forAddress - which credential node the signature should be written\n *    to. Only relevant for `SOROBAN_CREDENTIALS_ADDRESS_WITH_DELEGATES`, where\n *    a single entry can be signed by the top-level account and/or any of its\n *    (possibly nested) delegates. Per CAP-71-01 every one of these signers\n *    signs the *same* payload (bound to the top-level address), so the\n *    signature produced here is written to whichever node(s) carry\n *    `forAddress`. When omitted, the signature is written to the top-level\n *    credentials, which preserves the behavior for `SOROBAN_CREDENTIALS_ADDRESS`\n *    / `SOROBAN_CREDENTIALS_ADDRESS_V2` and for accounts whose signing key\n *    differs from the credential address (e.g. multisig).\n *\n * @see authorizeInvocation\n * @example\n * ```ts\n * import {\n *   SorobanRpc,\n *   Transaction,\n *   Networks,\n *   authorizeEntry\n * } from '@stellar/stellar-sdk';\n *\n * // Assume signPayloadCallback is a well-formed signing callback.\n * //\n * // It might, for example, pop up a modal from a browser extension, send the\n * // transaction to a third-party service for signing, or just do simple\n * // signing via Keypair like it does here:\n * function signPayloadCallback(payload) {\n *    return signer.sign(hash(payload.toXDR()));\n * }\n *\n * function multiPartyAuth(\n *    server: SorobanRpc.Server,\n *    // assume this involves multi-party auth\n *    tx: Transaction,\n * ) {\n *    return server\n *      .simulateTransaction(tx)\n *      .then((simResult) => {\n *          tx.operations[0].auth.map(entry =>\n *            authorizeEntry(\n *              entry,\n *              signPayloadCallback,\n *              currentLedger + 1000,\n *              Networks.TESTNET)\n *          );\n *\n *          return server.prepareTransaction(tx, simResult);\n *      })\n *      .then((preppedTx) => {\n *        preppedTx.sign(source);\n *        return server.sendTransaction(preppedTx);\n *      });\n * }\n * ```\n */\nexport async function authorizeEntry(\n  entry: xdr.SorobanAuthorizationEntry,\n  signer: Keypair | SigningCallback,\n  validUntilLedgerSeq: number,\n  networkPassphrase: string,\n  forAddress?: string,\n): Promise<xdr.SorobanAuthorizationEntry> {\n  // no-op if it's source account auth\n  if (\n    entry.credentials().switch().value ===\n    xdr.SorobanCredentialsType.sorobanCredentialsSourceAccount().value\n  ) {\n    return entry;\n  }\n\n  const clone = xdr.SorobanAuthorizationEntry.fromXDR(entry.toXDR());\n  const credentials = clone.credentials();\n  const addrAuth = getAddressCredentials(credentials);\n  if (addrAuth === null) {\n    // We should have already returned if the credentials were source account credentials,\n    // so if we can't get address credentials out of this, it's an unsupported credential type.\n    throw new Error(`unsupported credential type ${credentials.switch().name}`);\n  }\n\n  // Set the expiration before building the preimage, so the hash that gets\n  // signed commits to the same expiration ledger stored in the credentials.\n  // Otherwise the network reconstructs the preimage from the (updated)\n  // credentials and the signature no longer matches.\n  addrAuth.signatureExpirationLedger(validUntilLedgerSeq);\n\n  const preimage = buildAuthorizationEntryPreimage(\n    clone,\n    validUntilLedgerSeq,\n    networkPassphrase,\n  );\n\n  const payload = hash(preimage.toXDR());\n\n  let signature: Buffer;\n  let publicKey: string;\n  if (typeof signer === \"function\") {\n    const sigResult = await signer(preimage);\n    if (\n      sigResult !== null &&\n      typeof sigResult === \"object\" &&\n      \"signature\" in sigResult\n    ) {\n      signature = toBuffer(sigResult.signature);\n      publicKey = sigResult.publicKey;\n    } else {\n      // if using the deprecated form, assume it's for the entry\n      signature = toBuffer(sigResult);\n      publicKey = Address.fromScAddress(addrAuth.address()).toString();\n    }\n  } else {\n    signature = toBuffer(signer.sign(payload));\n    publicKey = signer.publicKey();\n  }\n\n  if (!Keypair.fromPublicKey(publicKey).verify(payload, signature)) {\n    throw new Error(`signature doesn't match payload`);\n  }\n\n  // This structure is defined here:\n  // https://soroban.stellar.org/docs/fundamentals-and-concepts/invoking-contracts-with-transactions#stellar-account-signatures\n  //\n  // Encoding a contract structure as an ScVal means the map keys are supposed\n  // to be symbols, hence the forced typing here.\n  const sigScVal = nativeToScVal(\n    {\n      public_key: StrKey.decodeEd25519PublicKey(publicKey),\n      signature,\n    },\n    {\n      type: {\n        public_key: [\"symbol\", null],\n        signature: [\"symbol\", null],\n      },\n    },\n  );\n\n  const signatureScVal = xdr.ScVal.scvVec([sigScVal]);\n\n  // CAP-71-01: the signature payload is shared across the top-level address\n  // and every (possibly nested) delegate, so this signer's signature is\n  // written to whichever credential node(s) carry `forAddress`. When no\n  // `forAddress` is given we fall back to the top-level credentials, which\n  // preserves the behavior for ADDRESS / ADDRESS_V2 and for accounts whose\n  // signing key differs from the credential address (e.g. multisig).\n  const targets: SignableCredential[] =\n    forAddress === undefined\n      ? [addrAuth]\n      : collectSignatureNodes(credentials).filter(\n          (node) =>\n            Address.fromScAddress(node.address()).toString() === forAddress,\n        );\n\n  if (targets.length === 0) {\n    throw new Error(\n      `the authorization entry has no credential node for address ${forAddress}`,\n    );\n  }\n\n  targets.forEach((node) => node.signature(signatureScVal));\n  return clone;\n}\n\nexport interface AuthorizeInvocationParams {\n  signer: Keypair | SigningCallback;\n  validUntilLedgerSeq: number;\n  invocation: xdr.SorobanAuthorizedInvocation;\n  networkPassphrase: string;\n  publicKey?: string;\n  /**\n   * Build `SOROBAN_CREDENTIALS_ADDRESS_V2` (CAP-71) credentials instead of the\n   * legacy `SOROBAN_CREDENTIALS_ADDRESS`. V2 credentials bind the address into\n   * the signed payload but are only valid on networks that have activated\n   * CAP-71, so leave this off until the activation vote passes for your target\n   * network. The default flips to `true` once V2 becomes mandatory.\n   * @defaultValue false\n   */\n  authV2?: boolean;\n}\n/**\n * This builds an entry from scratch, allowing you to express authorization as a\n * function of:\n *   - a particular identity (i.e. signing {@link Keypair} or other signer)\n *   - approving the execution of an invocation tree (i.e. a simulation-acquired\n *     {@link xdr.SorobanAuthorizedInvocation} or otherwise built)\n *   - on a particular network (uniquely identified by its passphrase, see\n *     {@link Networks})\n *   - until a particular ledger sequence is reached.\n *\n * This is in contrast to {@link authorizeEntry}, which signs an existing entry.\n *\n * @param params - the parameters for building and signing the authorization\n *   - `signer`: either a {@link Keypair} instance (or anything with a\n *    `.sign(buf): Buffer-like` method) or a function which takes a payload (a\n *    {@link xdr.HashIdPreimageSorobanAuthorization} instance) input and returns\n *    the signature of the hash of the raw payload bytes (where the signing key\n *    should correspond to the address in the `entry`)\n *   - `validUntilLedgerSeq`: the (exclusive) future ledger sequence\n *    number until which this authorization entry should be valid (if\n *    `currentLedgerSeq==validUntilLedgerSeq`, this is expired)\n *   - `invocation`: the invocation tree that we're authorizing\n *    (likely, this comes from transaction simulation)\n *   - `networkPassphrase`: the network passphrase is incorporated into\n *    the signature (see {@link Networks} for options)\n *   - `publicKey`: the public identity of the signer (when providing a\n *    {@link Keypair} to `signer`, this can be omitted, as it just uses\n *    {@link Keypair.publicKey})\n *   - `authV2`: build `SOROBAN_CREDENTIALS_ADDRESS_V2` (CAP-71) credentials\n *    rather than the legacy `SOROBAN_CREDENTIALS_ADDRESS`. Defaults to `false`;\n *    only enable it for networks that have activated CAP-71.\n *\n * @see authorizeEntry\n */\nexport function authorizeInvocation(\n  params: AuthorizeInvocationParams,\n): Promise<xdr.SorobanAuthorizationEntry> {\n  const {\n    signer,\n    validUntilLedgerSeq,\n    invocation,\n    networkPassphrase,\n    publicKey = \"\",\n    authV2 = false,\n  } = params;\n  // We use keypairs as a source of randomness for the nonce to avoid mucking\n  // with any crypto dependencies. Note that this just has to be random and\n  // unique, not cryptographically secure, so it's fine.\n  const kp = Keypair.random().rawPublicKey();\n  const nonce = new xdr.Int64(bytesToInt64(kp));\n\n  const pk =\n    publicKey || (signer instanceof Keypair ? signer.publicKey() : null);\n  if (!pk) {\n    throw new Error(`authorizeInvocation requires publicKey parameter`);\n  }\n\n  // V1 and V2 carry the identical SorobanAddressCredentials payload; only the\n  // credential union arm differs. authorizeEntry picks the matching signature\n  // preimage (legacy vs. address-bound) off whichever arm we build here.\n  const addressCredentials = new xdr.SorobanAddressCredentials({\n    address: new Address(pk).toScAddress(),\n    nonce,\n    signatureExpirationLedger: 0, // replaced\n    signature: xdr.ScVal.scvVec([]), // replaced\n  });\n\n  const entry = new xdr.SorobanAuthorizationEntry({\n    rootInvocation: invocation,\n    credentials: authV2\n      ? xdr.SorobanCredentials.sorobanCredentialsAddressV2(addressCredentials)\n      : xdr.SorobanCredentials.sorobanCredentialsAddress(addressCredentials),\n  });\n\n  return authorizeEntry(entry, signer, validUntilLedgerSeq, networkPassphrase);\n}\n\n/**\n * Builds the {@link xdr.HashIdPreimage} whose hash a signer must sign to\n * authorize `entry`. This is the low-level signature payload used by\n * {@link authorizeEntry}, exposed for callers that drive signing themselves —\n * most notably for `SOROBAN_CREDENTIALS_ADDRESS_WITH_DELEGATES`, where the\n * client (not simulation) decides which delegates sign and how.\n *\n * For `SOROBAN_CREDENTIALS_ADDRESS` this is the legacy, non-address-bound\n * `ENVELOPE_TYPE_SOROBAN_AUTHORIZATION` preimage. For `SOROBAN_CREDENTIALS_ADDRESS_V2`\n * and `SOROBAN_CREDENTIALS_ADDRESS_WITH_DELEGATES` it is the address-bound\n * `ENVELOPE_TYPE_SOROBAN_AUTHORIZATION_WITH_ADDRESS` preimage (CAP-71). For the\n * delegates variant this single payload — bound to the *top-level* address — is\n * what the top-level account and every (nested) delegate each sign.\n *\n * To get the raw bytes to sign, hash the XDR: `hash(preimage.toXDR())`.\n *\n * @param entry - the authorization entry to build the payload for\n * @param validUntilLedgerSeq - the expiration ledger committed into the payload\n *    (must match the `signatureExpirationLedger` on the credentials you submit)\n * @param networkPassphrase - the network passphrase mixed into the payload\n * @throws `Error` if `entry` carries source-account or otherwise non-address\n *    credentials\n */\nexport function buildAuthorizationEntryPreimage(\n  entry: xdr.SorobanAuthorizationEntry,\n  validUntilLedgerSeq: number,\n  networkPassphrase: string,\n): xdr.HashIdPreimage {\n  const credentials = entry.credentials();\n  const addrAuth = getAddressCredentials(credentials);\n  if (addrAuth === null) {\n    throw new Error(\n      `cannot build a signature payload for credential type ${credentials.switch().name}`,\n    );\n  }\n\n  const networkId = hash(Buffer.from(networkPassphrase));\n\n  switch (credentials.switch().value) {\n    // legacy address credentials are not address-bound\n    case xdr.SorobanCredentialsType.sorobanCredentialsAddress().value:\n      return xdr.HashIdPreimage.envelopeTypeSorobanAuthorization(\n        new xdr.HashIdPreimageSorobanAuthorization({\n          networkId,\n          nonce: addrAuth.nonce(),\n          invocation: entry.rootInvocation(),\n          signatureExpirationLedger: validUntilLedgerSeq,\n        }),\n      );\n\n    // ADDRESS_V2 and ADDRESS_WITH_DELEGATES bind the address into the signed\n    // payload via the WithAddress preimage (CAP-71)\n    case xdr.SorobanCredentialsType.sorobanCredentialsAddressV2().value:\n    case xdr.SorobanCredentialsType.sorobanCredentialsAddressWithDelegates()\n      .value:\n      return xdr.HashIdPreimage.envelopeTypeSorobanAuthorizationWithAddress(\n        new xdr.HashIdPreimageSorobanAuthorizationWithAddress({\n          networkId,\n          nonce: addrAuth.nonce(),\n          invocation: entry.rootInvocation(),\n          address: addrAuth.address(),\n          signatureExpirationLedger: validUntilLedgerSeq,\n        }),\n      );\n\n    default:\n      throw new Error(\n        `unsupported credential type ${credentials.switch().name}`,\n      );\n  }\n}\n\n/**\n * A delegate signer to attach to a\n * `SOROBAN_CREDENTIALS_ADDRESS_WITH_DELEGATES` entry via\n * {@link buildWithDelegatesEntry}.\n */\nexport interface DelegateSignature {\n  /** the delegate's address (`G…` account or `C…` contract). */\n  address: string;\n  /**\n   * the delegate's signature value. Defaults to a `scvVoid` placeholder, which\n   * you can fill afterwards with {@link authorizeEntry} (passing this address\n   * as `forAddress`) or by editing the entry directly.\n   */\n  signature?: xdr.ScVal;\n  /** signers this delegate in turn delegates to (recursive). */\n  nestedDelegates?: DelegateSignature[];\n}\n\n/** Parameters for {@link buildWithDelegatesEntry}. */\nexport interface BuildWithDelegatesParams {\n  /**\n   * an existing `SOROBAN_CREDENTIALS_ADDRESS` or\n   * `SOROBAN_CREDENTIALS_ADDRESS_V2` entry — typically one returned by\n   * simulation — whose address credentials should be wrapped.\n   */\n  entry: xdr.SorobanAuthorizationEntry;\n  /** the expiration ledger sequence stored on the top-level credentials. */\n  validUntilLedgerSeq: number;\n  /** the delegate signers to attach. */\n  delegates: DelegateSignature[];\n  /**\n   * the top-level account's signature. Defaults to `scvVoid`, which is valid\n   * for accounts that authorize purely via delegated signers (CAP-71-01).\n   */\n  signature?: xdr.ScVal;\n}\n\n/**\n * Builds a `SOROBAN_CREDENTIALS_ADDRESS_WITH_DELEGATES` authorization entry by\n * wrapping the address credentials of an existing `ADDRESS`/`ADDRESS_V2` entry\n * (e.g. one returned by simulation) together with a caller-provided set of\n * delegate signers.\n *\n * Simulation never emits the delegates variant on its own — which accounts use\n * delegated authentication is account-specific policy known only to the client\n * (much like a multisig policy). This helper just assembles the wrapper XDR;\n * you supply the delegate tree (addresses and, optionally, signatures). To\n * produce the signatures, build the shared payload with\n * {@link buildAuthorizationEntryPreimage} on the returned entry and sign it,\n * or fill each node afterwards with {@link authorizeEntry} (passing the\n * signer's address as `forAddress`).\n *\n * Each delegates array (the top-level set and every `nestedDelegates`) is\n * sorted by address in ascending order, and duplicate addresses within an array\n * are rejected, as the protocol requires (CAP-71-01) — otherwise the host\n * rejects the entry.\n *\n * @param params - see {@link BuildWithDelegatesParams}\n * @throws `Error` if `entry` is not an `ADDRESS`/`ADDRESS_V2` entry, or if any\n *    delegates array contains a duplicate address.\n */\nexport function buildWithDelegatesEntry(\n  params: BuildWithDelegatesParams,\n): xdr.SorobanAuthorizationEntry {\n  const { entry, validUntilLedgerSeq, delegates, signature } = params;\n  const credentials = entry.credentials();\n  const addrAuth = getAddressCredentials(credentials);\n  if (\n    addrAuth === null ||\n    credentials.switch().value ===\n      xdr.SorobanCredentialsType.sorobanCredentialsAddressWithDelegates().value\n  ) {\n    throw new Error(\n      `buildWithDelegatesEntry expects ADDRESS or ADDRESS_V2 credentials, got ${\n        credentials.switch().name\n      }`,\n    );\n  }\n\n  return new xdr.SorobanAuthorizationEntry({\n    rootInvocation: entry.rootInvocation(),\n    credentials: xdr.SorobanCredentials.sorobanCredentialsAddressWithDelegates(\n      new xdr.SorobanAddressCredentialsWithDelegates({\n        addressCredentials: new xdr.SorobanAddressCredentials({\n          address: addrAuth.address(),\n          nonce: addrAuth.nonce(),\n          signatureExpirationLedger: validUntilLedgerSeq,\n          signature: signature ?? xdr.ScVal.scvVoid(),\n        }),\n        delegates: buildDelegateNodes(delegates),\n      }),\n    ),\n  });\n}\n\n/**\n * Recursively converts {@link DelegateSignature} descriptors into\n * {@link xdr.SorobanDelegateSignature} nodes, sorting each level by address and\n * rejecting duplicates (CAP-71-01).\n */\nfunction buildDelegateNodes(\n  delegates: DelegateSignature[],\n): xdr.SorobanDelegateSignature[] {\n  const nodes = delegates.map(\n    (delegate) =>\n      new xdr.SorobanDelegateSignature({\n        address: new Address(delegate.address).toScAddress(),\n        signature: delegate.signature ?? xdr.ScVal.scvVoid(),\n        nestedDelegates: buildDelegateNodes(delegate.nestedDelegates ?? []),\n      }),\n  );\n\n  nodes.sort((a, b) =>\n    Buffer.compare(a.address().toXDR(), b.address().toXDR()),\n  );\n\n  for (let i = 1; i < nodes.length; i++) {\n    if (\n      Buffer.compare(\n        nodes[i - 1].address().toXDR(),\n        nodes[i].address().toXDR(),\n      ) === 0\n    ) {\n      throw new Error(\n        `duplicate delegate address ${Address.fromScAddress(\n          nodes[i].address(),\n        ).toString()}`,\n      );\n    }\n  }\n\n  return nodes;\n}\n\n/**\n * Internal helper — intentionally NOT re-exported from `base/index.js`, so it\n * is not part of the public SDK API. Shared with the contract package, which\n * imports it directly from this module. If a public need arises, add it to the\n * explicit auth re-exports in `base/index.ts`.\n *\n * Extracts the {@link xdr.SorobanAddressCredentials} from any address-based\n * Soroban credential, regardless of which credential type variant is used.\n *\n * This unifies access across `SOROBAN_CREDENTIALS_ADDRESS`,\n * `SOROBAN_CREDENTIALS_ADDRESS_V2` (which carries identical fields but binds\n * the address into the signature payload), and\n * `SOROBAN_CREDENTIALS_ADDRESS_WITH_DELEGATES` (which wraps the same address\n * credentials alongside a set of delegate signatures).\n *\n * @param credentials - the credentials to inspect\n * @returns the inner address credentials, or `null` for source-account\n *    credentials (which carry no address payload)\n */\nexport function getAddressCredentials(\n  credentials: xdr.SorobanCredentials,\n): xdr.SorobanAddressCredentials | null {\n  switch (credentials.switch().value) {\n    case xdr.SorobanCredentialsType.sorobanCredentialsAddress().value:\n      return credentials.address();\n    case xdr.SorobanCredentialsType.sorobanCredentialsAddressV2().value:\n      return credentials.addressV2();\n    case xdr.SorobanCredentialsType.sorobanCredentialsAddressWithDelegates()\n      .value:\n      return credentials.addressWithDelegates().addressCredentials();\n    default:\n      return null;\n  }\n}\n\n/**\n * The common shape of every node in an authorization entry that can carry a\n * signature: the top-level {@link xdr.SorobanAddressCredentials} and, for the\n * delegates variant, each {@link xdr.SorobanDelegateSignature}. Both expose an\n * `address()` and a `signature()` accessor.\n */\ninterface SignableCredential {\n  address(value?: xdr.ScAddress): xdr.ScAddress;\n  signature(value?: xdr.ScVal): xdr.ScVal;\n}\n\n/**\n * Internal helper. Returns every node in an address-based credential that can\n * carry a signature, in a stable order: the top-level address credentials\n * first, then (only for `SOROBAN_CREDENTIALS_ADDRESS_WITH_DELEGATES`) the\n * delegates and their nested delegates, depth-first. Returns an empty array\n * for source-account credentials, which carry no signature.\n *\n * Per CAP-71-01 all of these nodes commit to the same payload (the one bound to\n * the top-level address), so the caller can fill any of them with a signature\n * produced from that shared payload.\n */\nfunction collectSignatureNodes(\n  credentials: xdr.SorobanCredentials,\n): SignableCredential[] {\n  switch (credentials.switch().value) {\n    case xdr.SorobanCredentialsType.sorobanCredentialsAddress().value:\n      return [credentials.address()];\n    case xdr.SorobanCredentialsType.sorobanCredentialsAddressV2().value:\n      return [credentials.addressV2()];\n    case xdr.SorobanCredentialsType.sorobanCredentialsAddressWithDelegates()\n      .value: {\n      const withDelegates = credentials.addressWithDelegates();\n      const nodes: SignableCredential[] = [withDelegates.addressCredentials()];\n      const walk = (delegates: xdr.SorobanDelegateSignature[]) => {\n        delegates.forEach((delegate) => {\n          nodes.push(delegate);\n          walk(delegate.nestedDelegates());\n        });\n      };\n      walk(withDelegates.delegates());\n      return nodes;\n    }\n    default:\n      return [];\n  }\n}\n\nfunction bytesToInt64(bytes: Uint8Array): bigint {\n  const buf = bytes.subarray(0, 8);\n  if (buf.length < 8) {\n    throw new Error(\n      `need at least 8 bytes to convert to Int64, got ${bytes.length}`,\n    );\n  }\n  const view = new DataView(buf.buffer, buf.byteOffset, 8);\n  const value = view.getBigInt64(0, false);\n\n  return value;\n}\n"],"names":["Buffer","xdr","hash","Address","Keypair","nativeToScVal","StrKey"],"mappings":";;;;;;;;;;AAaA,SAAS,SAAS,KAAA,EAA2B;AAC3C,EAAA,IAAI,iBAAiB,WAAA,EAAa;AAChC,IAAA,OAAOA,aAAA,CAAO,IAAA,CAAK,IAAI,UAAA,CAAW,KAAK,CAAC,CAAA;AAAA,EAC1C;AACA,EAAA,OAAOA,aAAA,CAAO,KAAK,KAAK,CAAA;AAC1B;AAmHA,eAAsB,cAAA,CACpB,KAAA,EACA,MAAA,EACA,mBAAA,EACA,mBACA,UAAA,EACwC;AAExC,EAAA,IACE,KAAA,CAAM,WAAA,EAAY,CAAE,MAAA,EAAO,CAAE,UAC7BC,sBAAA,CAAI,sBAAA,CAAuB,+BAAA,EAAgC,CAAE,KAAA,EAC7D;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,QAAQA,sBAAA,CAAI,yBAAA,CAA0B,OAAA,CAAQ,KAAA,CAAM,OAAO,CAAA;AACjE,EAAA,MAAM,WAAA,GAAc,MAAM,WAAA,EAAY;AACtC,EAAA,MAAM,QAAA,GAAW,sBAAsB,WAAW,CAAA;AAClD,EAAA,IAAI,aAAa,IAAA,EAAM;AAGrB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,YAAY,MAAA,EAAO,CAAE,IAAI,CAAA,CAAE,CAAA;AAAA,EAC5E;AAMA,EAAA,QAAA,CAAS,0BAA0B,mBAAmB,CAAA;AAEtD,EAAA,MAAM,QAAA,GAAW,+BAAA;AAAA,IACf,KAAA;AAAA,IACA,mBAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,OAAA,GAAUC,YAAA,CAAK,QAAA,CAAS,KAAA,EAAO,CAAA;AAErC,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI,OAAO,WAAW,UAAA,EAAY;AAChC,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,QAAQ,CAAA;AACvC,IAAA,IACE,cAAc,IAAA,IACd,OAAO,SAAA,KAAc,QAAA,IACrB,eAAe,SAAA,EACf;AACA,MAAA,SAAA,GAAY,QAAA,CAAS,UAAU,SAAS,CAAA;AACxC,MAAA,SAAA,GAAY,SAAA,CAAU,SAAA;AAAA,IACxB,CAAA,MAAO;AAEL,MAAA,SAAA,GAAY,SAAS,SAAS,CAAA;AAC9B,MAAA,SAAA,GAAYC,gBAAQ,aAAA,CAAc,QAAA,CAAS,OAAA,EAAS,EAAE,QAAA,EAAS;AAAA,IACjE;AAAA,EACF,CAAA,MAAO;AACL,IAAA,SAAA,GAAY,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAC,CAAA;AACzC,IAAA,SAAA,GAAY,OAAO,SAAA,EAAU;AAAA,EAC/B;AAEA,EAAA,IAAI,CAACC,gBAAQ,aAAA,CAAc,SAAS,EAAE,MAAA,CAAO,OAAA,EAAS,SAAS,CAAA,EAAG;AAChE,IAAA,MAAM,IAAI,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAAA,EACnD;AAOA,EAAA,MAAM,QAAA,GAAWC,mBAAA;AAAA,IACf;AAAA,MACE,UAAA,EAAYC,aAAA,CAAO,sBAAA,CAAuB,SAAS,CAAA;AAAA,MACnD;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM;AAAA,QACJ,UAAA,EAAY,CAAC,QAAA,EAAU,IAAI,CAAA;AAAA,QAC3B,SAAA,EAAW,CAAC,QAAA,EAAU,IAAI;AAAA;AAC5B;AACF,GACF;AAEA,EAAA,MAAM,iBAAiBL,sBAAA,CAAI,KAAA,CAAM,MAAA,CAAO,CAAC,QAAQ,CAAC,CAAA;AAQlD,EAAA,MAAM,OAAA,GACJ,eAAe,MAAA,GACX,CAAC,QAAQ,CAAA,GACT,qBAAA,CAAsB,WAAW,CAAA,CAAE,MAAA;AAAA,IACjC,CAAC,SACCE,eAAA,CAAQ,aAAA,CAAc,KAAK,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS,KAAM;AAAA,GACzD;AAEN,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,8DAA8D,UAAU,CAAA;AAAA,KAC1E;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,QAAQ,CAAC,IAAA,KAAS,IAAA,CAAK,SAAA,CAAU,cAAc,CAAC,CAAA;AACxD,EAAA,OAAO,KAAA;AACT;AAoDO,SAAS,oBACd,MAAA,EACwC;AACxC,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,mBAAA;AAAA,IACA,UAAA;AAAA,IACA,iBAAA;AAAA,IACA,SAAA,GAAY,EAAA;AAAA,IACZ,MAAA,GAAS;AAAA,GACX,GAAI,MAAA;AAIJ,EAAA,MAAM,EAAA,GAAKC,eAAA,CAAQ,MAAA,EAAO,CAAE,YAAA,EAAa;AACzC,EAAA,MAAM,QAAQ,IAAIH,sBAAA,CAAI,KAAA,CAAM,YAAA,CAAa,EAAE,CAAC,CAAA;AAE5C,EAAA,MAAM,KACJ,SAAA,KAAc,MAAA,YAAkBG,eAAA,GAAU,MAAA,CAAO,WAAU,GAAI,IAAA,CAAA;AACjE,EAAA,IAAI,CAAC,EAAA,EAAI;AACP,IAAA,MAAM,IAAI,MAAM,CAAA,gDAAA,CAAkD,CAAA;AAAA,EACpE;AAKA,EAAA,MAAM,kBAAA,GAAqB,IAAIH,sBAAA,CAAI,yBAAA,CAA0B;AAAA,IAC3D,OAAA,EAAS,IAAIE,eAAA,CAAQ,EAAE,EAAE,WAAA,EAAY;AAAA,IACrC,KAAA;AAAA,IACA,yBAAA,EAA2B,CAAA;AAAA;AAAA,IAC3B,SAAA,EAAWF,sBAAA,CAAI,KAAA,CAAM,MAAA,CAAO,EAAE;AAAA;AAAA,GAC/B,CAAA;AAED,EAAA,MAAM,KAAA,GAAQ,IAAIA,sBAAA,CAAI,yBAAA,CAA0B;AAAA,IAC9C,cAAA,EAAgB,UAAA;AAAA,IAChB,WAAA,EAAa,MAAA,GACTA,sBAAA,CAAI,kBAAA,CAAmB,2BAAA,CAA4B,kBAAkB,CAAA,GACrEA,sBAAA,CAAI,kBAAA,CAAmB,yBAAA,CAA0B,kBAAkB;AAAA,GACxE,CAAA;AAED,EAAA,OAAO,cAAA,CAAe,KAAA,EAAO,MAAA,EAAQ,mBAAA,EAAqB,iBAAiB,CAAA;AAC7E;AAyBO,SAAS,+BAAA,CACd,KAAA,EACA,mBAAA,EACA,iBAAA,EACoB;AACpB,EAAA,MAAM,WAAA,GAAc,MAAM,WAAA,EAAY;AACtC,EAAA,MAAM,QAAA,GAAW,sBAAsB,WAAW,CAAA;AAClD,EAAA,IAAI,aAAa,IAAA,EAAM;AACrB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,qDAAA,EAAwD,WAAA,CAAY,MAAA,EAAO,CAAE,IAAI,CAAA;AAAA,KACnF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAYC,YAAA,CAAKF,aAAA,CAAO,IAAA,CAAK,iBAAiB,CAAC,CAAA;AAErD,EAAA,QAAQ,WAAA,CAAY,MAAA,EAAO,CAAE,KAAA;AAAO;AAAA,IAElC,KAAKC,sBAAA,CAAI,sBAAA,CAAuB,yBAAA,EAA0B,CAAE,KAAA;AAC1D,MAAA,OAAOA,uBAAI,cAAA,CAAe,gCAAA;AAAA,QACxB,IAAIA,uBAAI,kCAAA,CAAmC;AAAA,UACzC,SAAA;AAAA,UACA,KAAA,EAAO,SAAS,KAAA,EAAM;AAAA,UACtB,UAAA,EAAY,MAAM,cAAA,EAAe;AAAA,UACjC,yBAAA,EAA2B;AAAA,SAC5B;AAAA,OACH;AAAA;AAAA;AAAA,IAIF,KAAKA,sBAAA,CAAI,sBAAA,CAAuB,2BAAA,EAA4B,CAAE,KAAA;AAAA,IAC9D,KAAKA,sBAAA,CAAI,sBAAA,CAAuB,sCAAA,EAAuC,CACpE,KAAA;AACD,MAAA,OAAOA,uBAAI,cAAA,CAAe,2CAAA;AAAA,QACxB,IAAIA,uBAAI,6CAAA,CAA8C;AAAA,UACpD,SAAA;AAAA,UACA,KAAA,EAAO,SAAS,KAAA,EAAM;AAAA,UACtB,UAAA,EAAY,MAAM,cAAA,EAAe;AAAA,UACjC,OAAA,EAAS,SAAS,OAAA,EAAQ;AAAA,UAC1B,yBAAA,EAA2B;AAAA,SAC5B;AAAA,OACH;AAAA,IAEF;AACE,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,4BAAA,EAA+B,WAAA,CAAY,MAAA,EAAO,CAAE,IAAI,CAAA;AAAA,OAC1D;AAAA;AAEN;AA+DO,SAAS,wBACd,MAAA,EAC+B;AAC/B,EAAA,MAAM,EAAE,KAAA,EAAO,mBAAA,EAAqB,SAAA,EAAW,WAAU,GAAI,MAAA;AAC7D,EAAA,MAAM,WAAA,GAAc,MAAM,WAAA,EAAY;AACtC,EAAA,MAAM,QAAA,GAAW,sBAAsB,WAAW,CAAA;AAClD,EAAA,IACE,QAAA,KAAa,IAAA,IACb,WAAA,CAAY,MAAA,EAAO,CAAE,UACnBA,sBAAA,CAAI,sBAAA,CAAuB,sCAAA,EAAuC,CAAE,KAAA,EACtE;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,uEAAA,EACE,WAAA,CAAY,MAAA,EAAO,CAAE,IACvB,CAAA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,IAAIA,uBAAI,yBAAA,CAA0B;AAAA,IACvC,cAAA,EAAgB,MAAM,cAAA,EAAe;AAAA,IACrC,WAAA,EAAaA,uBAAI,kBAAA,CAAmB,sCAAA;AAAA,MAClC,IAAIA,uBAAI,sCAAA,CAAuC;AAAA,QAC7C,kBAAA,EAAoB,IAAIA,sBAAA,CAAI,yBAAA,CAA0B;AAAA,UACpD,OAAA,EAAS,SAAS,OAAA,EAAQ;AAAA,UAC1B,KAAA,EAAO,SAAS,KAAA,EAAM;AAAA,UACtB,yBAAA,EAA2B,mBAAA;AAAA,UAC3B,SAAA,EAAW,SAAA,IAAaA,sBAAA,CAAI,KAAA,CAAM,OAAA;AAAQ,SAC3C,CAAA;AAAA,QACD,SAAA,EAAW,mBAAmB,SAAS;AAAA,OACxC;AAAA;AACH,GACD,CAAA;AACH;AAOA,SAAS,mBACP,SAAA,EACgC;AAChC,EAAA,MAAM,QAAQ,SAAA,CAAU,GAAA;AAAA,IACtB,CAAC,QAAA,KACC,IAAIA,sBAAA,CAAI,wBAAA,CAAyB;AAAA,MAC/B,SAAS,IAAIE,eAAA,CAAQ,QAAA,CAAS,OAAO,EAAE,WAAA,EAAY;AAAA,MACnD,SAAA,EAAW,QAAA,CAAS,SAAA,IAAaF,sBAAA,CAAI,MAAM,OAAA,EAAQ;AAAA,MACnD,eAAA,EAAiB,kBAAA,CAAmB,QAAA,CAAS,eAAA,IAAmB,EAAE;AAAA,KACnE;AAAA,GACL;AAEA,EAAA,KAAA,CAAM,IAAA;AAAA,IAAK,CAAC,CAAA,EAAG,CAAA,KACbD,aAAA,CAAO,QAAQ,CAAA,CAAE,OAAA,EAAQ,CAAE,KAAA,EAAM,EAAG,CAAA,CAAE,OAAA,EAAQ,CAAE,OAAO;AAAA,GACzD;AAEA,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,IAAA,IACEA,aAAA,CAAO,OAAA;AAAA,MACL,MAAM,CAAA,GAAI,CAAC,CAAA,CAAE,OAAA,GAAU,KAAA,EAAM;AAAA,MAC7B,KAAA,CAAM,CAAC,CAAA,CAAE,OAAA,GAAU,KAAA;AAAM,UACrB,CAAA,EACN;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,8BAA8BG,eAAA,CAAQ,aAAA;AAAA,UACpC,KAAA,CAAM,CAAC,CAAA,CAAE,OAAA;AAAQ,SACnB,CAAE,UAAU,CAAA;AAAA,OACd;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,KAAA;AACT;AAqBO,SAAS,sBACd,WAAA,EACsC;AACtC,EAAA,QAAQ,WAAA,CAAY,MAAA,EAAO,CAAE,KAAA;AAAO,IAClC,KAAKF,sBAAA,CAAI,sBAAA,CAAuB,yBAAA,EAA0B,CAAE,KAAA;AAC1D,MAAA,OAAO,YAAY,OAAA,EAAQ;AAAA,IAC7B,KAAKA,sBAAA,CAAI,sBAAA,CAAuB,2BAAA,EAA4B,CAAE,KAAA;AAC5D,MAAA,OAAO,YAAY,SAAA,EAAU;AAAA,IAC/B,KAAKA,sBAAA,CAAI,sBAAA,CAAuB,sCAAA,EAAuC,CACpE,KAAA;AACD,MAAA,OAAO,WAAA,CAAY,oBAAA,EAAqB,CAAE,kBAAA,EAAmB;AAAA,IAC/D;AACE,MAAA,OAAO,IAAA;AAAA;AAEb;AAwBA,SAAS,sBACP,WAAA,EACsB;AACtB,EAAA,QAAQ,WAAA,CAAY,MAAA,EAAO,CAAE,KAAA;AAAO,IAClC,KAAKA,sBAAA,CAAI,sBAAA,CAAuB,yBAAA,EAA0B,CAAE,KAAA;AAC1D,MAAA,OAAO,CAAC,WAAA,CAAY,OAAA,EAAS,CAAA;AAAA,IAC/B,KAAKA,sBAAA,CAAI,sBAAA,CAAuB,2BAAA,EAA4B,CAAE,KAAA;AAC5D,MAAA,OAAO,CAAC,WAAA,CAAY,SAAA,EAAW,CAAA;AAAA,IACjC,KAAKA,sBAAA,CAAI,sBAAA,CAAuB,sCAAA,GAC7B,KAAA,EAAO;AACR,MAAA,MAAM,aAAA,GAAgB,YAAY,oBAAA,EAAqB;AACvD,MAAA,MAAM,KAAA,GAA8B,CAAC,aAAA,CAAc,kBAAA,EAAoB,CAAA;AACvE,MAAA,MAAM,IAAA,GAAO,CAAC,SAAA,KAA8C;AAC1D,QAAA,SAAA,CAAU,OAAA,CAAQ,CAAC,QAAA,KAAa;AAC9B,UAAA,KAAA,CAAM,KAAK,QAAQ,CAAA;AACnB,UAAA,IAAA,CAAK,QAAA,CAAS,iBAAiB,CAAA;AAAA,QACjC,CAAC,CAAA;AAAA,MACH,CAAA;AACA,MAAA,IAAA,CAAK,aAAA,CAAc,WAAW,CAAA;AAC9B,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,IACA;AACE,MAAA,OAAO,EAAC;AAAA;AAEd;AAEA,SAAS,aAAa,KAAA,EAA2B;AAC/C,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,QAAA,CAAS,CAAA,EAAG,CAAC,CAAA;AAC/B,EAAA,IAAI,GAAA,CAAI,SAAS,CAAA,EAAG;AAClB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,+CAAA,EAAkD,MAAM,MAAM,CAAA;AAAA,KAChE;AAAA,EACF;AACA,EAAA,MAAM,OAAO,IAAI,QAAA,CAAS,IAAI,MAAA,EAAQ,GAAA,CAAI,YAAY,CAAC,CAAA;AACvD,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,WAAA,CAAY,CAAA,EAAG,KAAK,CAAA;AAEvC,EAAA,OAAO,KAAA;AACT;;;;;;;;"}