@dynamic-labs-wallet/browser 1.0.14 → 1.0.16

package/index.cjs

@@ -101,32 +101,6 @@ const ARGON2_HASH_LENGTH = 32;
  */ const PBKDF2_ITERATIONS_V1 = 100000;
 const PBKDF2_ITERATIONS_V2 = 1000000;
 
-/**
- * Derives a key using Argon2id algorithm
- * @param params - Key derivation parameters
- * @param encryptionConfig - Encryption configuration
- * @returns Promise<CryptoKey>
- */ const deriveArgon2Key = async ({ password, salt }, encryptionConfig)=>{
-    const argon2id = await loadArgon2idWasm();
-    const argon2Config = encryptionConfig;
-    const passwordBytes = new TextEncoder().encode(password);
-    const hash = argon2id({
-        password: passwordBytes,
-        salt: salt,
-        parallelism: argon2Config.parallelism || ARGON2_PARALLELISM,
-        passes: argon2Config.iterations,
-        memorySize: argon2Config.memorySize || ARGON2_MEMORY_SIZE,
-        tagLength: argon2Config.hashLength || ARGON2_HASH_LENGTH
-    });
-    return crypto.subtle.importKey('raw', new Uint8Array(hash), {
-        name: encryptionConfig.algorithm,
-        length: encryptionConfig.algorithmLength
-    }, false, [
-        'encrypt',
-        'decrypt'
-    ]);
-};
-
 /**
  * Encryption configuration for each version
  */ const ENCRYPTION_VERSIONS = {
@@ -179,6 +153,48 @@ const PBKDF2_ITERATIONS_V2 = 1000000;
     return config.keyDerivation === ARGON2_ALGORITHM;
 };
 
+/**
+ * Derives the raw Argon2id hash bytes for the given params/config.
+ *
+ * Exposed separately from {@link deriveArgon2Key} for the backup self-test's
+ * determinism probe: it lets the caller derive twice from identical inputs and
+ * diff the results to detect Argon2id non-determinism (suspected on
+ * memory-constrained clients). The raw bytes are AES key material and must
+ * never be logged or persisted — keep them in-process.
+ */ const deriveRawArgon2Bytes = async ({ password, salt }, encryptionConfig)=>{
+    const argon2id = await loadArgon2idWasm();
+    const argon2Config = encryptionConfig;
+    const passwordBytes = new TextEncoder().encode(password);
+    const hash = argon2id({
+        password: passwordBytes,
+        salt: salt,
+        parallelism: argon2Config.parallelism || ARGON2_PARALLELISM,
+        passes: argon2Config.iterations,
+        memorySize: argon2Config.memorySize || ARGON2_MEMORY_SIZE,
+        tagLength: argon2Config.hashLength || ARGON2_HASH_LENGTH
+    });
+    return new Uint8Array(hash);
+};
+/**
+ * Derives a key using Argon2id algorithm
+ * @param params - Key derivation parameters
+ * @param encryptionConfig - Encryption configuration
+ * @returns Promise<CryptoKey>
+ */ const deriveArgon2Key = async (params, encryptionConfig, // In-process hook receiving the raw derived bytes (key material — never log).
+// Lets the backup self-test reuse the keys it already derives instead of
+// running extra Argon2 derivations to detect drift.
+onRawKey)=>{
+    const hash = await deriveRawArgon2Bytes(params, encryptionConfig);
+    onRawKey == null ? void 0 : onRawKey(hash);
+    return crypto.subtle.importKey('raw', new Uint8Array(hash), {
+        name: encryptionConfig.algorithm,
+        length: encryptionConfig.algorithmLength
+    }, false, [
+        'encrypt',
+        'decrypt'
+    ]);
+};
+
 /**
  * Utility functions for encryption operations
  * These functions are separated to avoid circular dependencies
@@ -253,18 +269,20 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
  */ const isInvalidPasswordError = (error)=>error instanceof Error && error.name === 'OperationError';
 /**
  * Get the appropriate key derivation function based on the encryption config
- */ const getKey = async (params, encryptionConfig)=>{
+ */ const getKey = async (params, encryptionConfig, onRawKey)=>{
     // Use Argon2 for v3, PBKDF2 for v1 and v2
     if (encryptionConfig.keyDerivation === ARGON2_ALGORITHM) {
-        return deriveArgon2Key(params, encryptionConfig);
+        return deriveArgon2Key(params, encryptionConfig, onRawKey);
     } else {
+        // PBKDF2 derives a non-extractable CryptoKey directly, so raw bytes are
+        // unavailable; the hook simply doesn't fire (drift probe is v3-only anyway).
         return derivePBKDF2Key(params, encryptionConfig);
     }
 };
 /**
  * Encrypts data using the specified encryption version.
  * Always uses the latest encryption configuration for new encryptions by default.
- */ const encryptData = async ({ data, password, version = ENCRYPTION_VERSION_CURRENT })=>{
+ */ const encryptData = async ({ data, password, version = ENCRYPTION_VERSION_CURRENT, onRawKey })=>{
     const encryptionConfig = getEncryptionConfig(version);
     try {
         // Generate a random salt and IV
@@ -273,7 +291,7 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
         const key = await getKey({
             password,
             salt
-        }, encryptionConfig);
+        }, encryptionConfig, onRawKey);
         // Convert the input string to bytes
         const dataBytes = new TextEncoder().encode(data);
         // Encrypt the data
@@ -298,7 +316,7 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
  * Uses the version field from the data to determine encryption parameters.
  * Falls back to legacy version for backward compatibility if no version is specified.
  * For v3 (Argon2), retries with parallelism=1 if an OperationError occurs.
- */ const decryptData = async ({ data, password })=>{
+ */ const decryptData = async ({ data, password, onRawKey })=>{
     const { salt, iv, cipher, version } = data;
     // Ensure proper base64 padding for all values
     const paddedSalt = ensureBase64Padding(salt);
@@ -313,7 +331,7 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
         const key = await getKey({
             password,
             salt: saltBytes
-        }, encryptionConfig);
+        }, encryptionConfig, onRawKey);
         const decryptedData = await crypto.subtle.decrypt({
             name: AES_GCM_ALGORITHM,
             iv: ivBytes
@@ -332,7 +350,7 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
                 const key = await getKey({
                     password,
                     salt: saltBytes
-                }, modifiedConfig);
+                }, modifiedConfig, onRawKey);
                 const decryptedData = await crypto.subtle.decrypt({
                     name: AES_GCM_ALGORITHM,
                     iv: ivBytes
@@ -1782,12 +1800,21 @@ const logError = ({ message, error, context, level = 'error' })=>{
         return;
     }
     const resolvedLevel = isExpectedUserError(error) ? 'info' : level;
+    // Surface the unwrapped `cause` (name only — never its raw fields, which may
+    // carry key material). Errors like EncryptionSelfTestFailedError wrap the real
+    // failure (e.g. KeyShareDecryptionError) as `cause`; without this the original
+    // failure mode is invisible in logs.
+    const cause = error instanceof Error ? error.cause : undefined;
     core.Logger[resolvedLevel]('[DynamicWaasWalletClient] Error in browser client', {
         message,
         error: error instanceof Error ? {
             name: error.name,
             message: error.message
         } : String(error),
+        cause: cause instanceof Error ? {
+            name: cause.name,
+            message: cause.message
+        } : undefined,
         context
     });
 };
@@ -4720,12 +4747,17 @@ class DynamicWalletClient {
     // AES-GCM authenticates the ciphertext, so a wrong key fails to decrypt
     // rather than returning corrupted plaintext — "decrypt did not throw" is a
     // sufficient guarantee the cipher is recoverable.
-    async assertEncryptionRoundTrip({ password, encrypted, walletId, accountAddress }) {
+    async assertEncryptionRoundTrip({ password, encrypted, encryptKeyBytes, walletId, accountAddress }) {
         if (!encrypted) return;
+        // Capture the decrypt-side derived key (envId path only) so a failure can be
+        // diffed against the encrypt key without any extra Argon2 derivation.
+        let decryptKeyBytes;
+        const onRawKey = password ? undefined : (k)=>decryptKeyBytes != null ? decryptKeyBytes : decryptKeyBytes = k;
         try {
             await this.decryptKeyShare({
                 keyShare: encrypted,
-                password
+                password,
+                onRawKey
             });
         } catch (error) {
             // Only a genuine ciphertext-integrity failure (AES-GCM auth failure /
@@ -4737,6 +4769,15 @@ class DynamicWalletClient {
             // transient network error, so rethrow it as-is rather than masking it
             // behind "backup aborted" — it stays visible in logs and stays retryable.
             if (error instanceof InvalidPasswordError || error instanceof KeyShareDecryptionError) {
+                this.logSelfTestDiagnostics({
+                    encrypted,
+                    password,
+                    walletId,
+                    accountAddress,
+                    cause: error,
+                    encryptKeyBytes,
+                    decryptKeyBytes
+                });
                 throw new EncryptionSelfTestFailedError({
                     walletId,
                     accountAddress,
@@ -4746,11 +4787,82 @@ class DynamicWalletClient {
             throw error;
         }
     }
-    async encryptKeyShare({ keyShare, password }) {
+    /**
+   * Diagnostics for backup self-test failures. ONLY runs on the envId-default
+   * path (no user password): envId is public, so the salt/iv/version emitted
+   * here are non-secret.
+   *
+   * Reuses the encrypt- and decrypt-side keys that the backup already derived
+   * (no extra Argon2 work — important, since the failing clients are the
+   * memory-constrained ones) and logs the byte-wise XOR of the two: equal keys
+   * give an all-zero diff, any non-zero byte localises the Argon2id drift that
+   * broke this round-trip. The XOR of two unknown keys is not usable key
+   * material, and the raw keys are never logged.
+   */ logSelfTestDiagnostics({ encrypted, password, walletId, accountAddress, cause, encryptKeyBytes, decryptKeyBytes }) {
+        // Hard gate: a user-supplied password must never reach these logs, even
+        // derived or diffed. Only the public-envId path is instrumented.
+        if (password) return;
+        try {
+            const decoded = JSON.parse(Buffer.from(encrypted, 'base64').toString());
+            var _decoded_version;
+            const version = (_decoded_version = decoded.version) != null ? _decoded_version : 'unknown';
+            const config = getEncryptionConfig(version);
+            const toHex = (a)=>Array.from(a, (b)=>b.toString(16).padStart(2, '0')).join('');
+            // Diff the two real derivations when both were captured (v3/Argon2 only —
+            // PBKDF2 keys are non-extractable so no bytes are available).
+            let drift;
+            if (encryptKeyBytes && decryptKeyBytes) {
+                const len = Math.min(encryptKeyBytes.length, decryptKeyBytes.length);
+                const xor = new Uint8Array(len);
+                const driftPositions = [];
+                for(let i = 0; i < len; i++){
+                    xor[i] = encryptKeyBytes[i] ^ decryptKeyBytes[i];
+                    if (xor[i] !== 0) driftPositions.push(i);
+                }
+                drift = {
+                    keyLength: len,
+                    keyDriftXor: toHex(xor),
+                    keyDriftByteCount: driftPositions.length,
+                    keyDriftPositions: driftPositions
+                };
+            }
+            this.logger.error('[keyshare-selftest] self-test failed', _extends({
+                walletId,
+                accountAddress,
+                environmentId: this.environmentId,
+                userId: this.userId,
+                version,
+                salt: decoded.salt,
+                iv: decoded.iv,
+                saltLength: base64ToBytes(ensureBase64Padding(decoded.salt)).length,
+                cipherLength: base64ToBytes(ensureBase64Padding(decoded.cipher)).length,
+                causeName: cause instanceof Error ? cause.name : undefined,
+                causeContext: cause instanceof KeyShareDecryptionError ? cause.context : undefined,
+                // Whether both real keys were available to diff (false ⇒ non-v3 or a key wasn't captured).
+                keyDriftAvailable: !!drift
+            }, drift, {
+                argon2: isArgon2Config(config) ? {
+                    memorySize: config.memorySize,
+                    iterations: config.iterations,
+                    parallelism: config.parallelism,
+                    hashLength: config.hashLength
+                } : undefined
+            }));
+        } catch (diagError) {
+            // Diagnostics must never mask the real failure.
+            this.logger.warn('[keyshare-selftest] diagnostics failed to run', {
+                walletId,
+                accountAddress,
+                error: diagError instanceof Error ? diagError.message : String(diagError)
+            });
+        }
+    }
+    async encryptKeyShare({ keyShare, password, onRawKey }) {
         const serializedKeyShare = JSON.stringify(keyShare);
         const encryptedKeyShare = await encryptData({
             data: serializedKeyShare,
-            password: password != null ? password : this.environmentId
+            password: password != null ? password : this.environmentId,
+            onRawKey
         });
         this.logPasswordSharePresence(password, 'encrypt');
         // stringify the encrypted key share, convert to base64, and store it
@@ -5132,12 +5244,24 @@ class DynamicWalletClient {
             }
             const bitcoinConfig = this.getBitcoinConfigForChain(walletData.chainName, accountAddress);
             const isPasswordEncrypted = shouldValidatePassword(password, this.environmentId);
+            // On the envId-default path, capture each share's derived encrypt key
+            // (keyed by its ciphertext blob) so the self-test can diff it against the
+            // decrypt key it derives — detecting Argon2id drift with NO extra
+            // derivations. Skipped entirely when a user password is set; keys are
+            // in-process only and cleared right after the self-test.
+            const encryptKeyByBlob = isPasswordEncrypted ? undefined : new Map();
             // Pre-encrypt all shares once, with retry to handle transient WebCrypto errors.
             // This avoids re-running expensive Argon2id key derivation on every retry attempt.
-            const encryptWithRetry = (keyShare)=>retryPromise(()=>this.encryptKeyShare({
+            const encryptWithRetry = (keyShare)=>retryPromise(async ()=>{
+                    let rawKey;
+                    const blob = await this.encryptKeyShare({
                         keyShare,
-                        password
-                    }), {
+                        password,
+                        onRawKey: encryptKeyByBlob ? (k)=>rawKey = k : undefined
+                    });
+                    if (encryptKeyByBlob && rawKey) encryptKeyByBlob.set(blob, rawKey);
+                    return blob;
+                }, {
                     maxAttempts: 3,
                     operationName: 'encrypt key share'
                 });
@@ -5160,12 +5284,19 @@ class DynamicWalletClient {
             var _preEncryptedDynamicShares_;
             // Fail fast before any upload if the just-written cipher can't be read
             // back with the same key material. Runs once per backup, not per share.
-            await this.assertEncryptionRoundTrip({
-                password,
-                encrypted: (_preEncryptedDynamicShares_ = preEncryptedDynamicShares[0]) != null ? _preEncryptedDynamicShares_ : (_preEncryptedCloudShares_ = preEncryptedCloudShares[0]) == null ? void 0 : _preEncryptedCloudShares_.encrypted[0],
-                walletId: walletData.walletId,
-                accountAddress
-            });
+            const selfTestBlob = (_preEncryptedDynamicShares_ = preEncryptedDynamicShares[0]) != null ? _preEncryptedDynamicShares_ : (_preEncryptedCloudShares_ = preEncryptedCloudShares[0]) == null ? void 0 : _preEncryptedCloudShares_.encrypted[0];
+            try {
+                await this.assertEncryptionRoundTrip({
+                    password,
+                    encrypted: selfTestBlob,
+                    encryptKeyBytes: selfTestBlob ? encryptKeyByBlob == null ? void 0 : encryptKeyByBlob.get(selfTestBlob) : undefined,
+                    walletId: walletData.walletId,
+                    accountAddress
+                });
+            } finally{
+                // Drop captured key material promptly regardless of outcome.
+                encryptKeyByBlob == null ? void 0 : encryptKeyByBlob.clear();
+            }
             // Step 1: Upload shares in parallel, each with its own retry
             const uploadPromises = [];
             if (distribution.clientShares.length > 0) {
@@ -5321,6 +5452,7 @@ class DynamicWalletClient {
             }));
             return backupData;
         } catch (error) {
+            var _error_cause_context;
             const errorReason = classifyPasswordBackupError(error);
             const logFn = isUserActionablePasswordBackupErrorReason(errorReason) ? this.logger.warn : this.logger.error;
             logFn.call(this.logger, '[backupSharesWithDistribution] failed', _extends({}, logContext, {
@@ -5328,7 +5460,11 @@ class DynamicWalletClient {
                 errorReason,
                 errorName: error instanceof Error ? error.name : undefined,
                 errorMessage: error instanceof Error ? error.message : String(error),
-                errorStack: error instanceof Error ? error.stack : undefined
+                errorStack: error instanceof Error ? error.stack : undefined,
+                // Unwrap the wrapped cause (name only — never raw fields) so self-test
+                // failures show the underlying KeyShareDecryptionError / kdfVersion.
+                errorCauseName: error instanceof Error && error.cause instanceof Error ? error.cause.name : undefined,
+                kdfVersion: error instanceof Error && error.cause instanceof KeyShareDecryptionError ? (_error_cause_context = error.cause.context) == null ? void 0 : _error_cause_context.kdfVersion : undefined
             }));
             logError({
                 message: 'Error in backupSharesWithDistribution',
@@ -5677,7 +5813,7 @@ class DynamicWalletClient {
             throw error;
         }
     }
-    async decryptKeyShare({ keyShare, password }) {
+    async decryptKeyShare({ keyShare, password, onRawKey }) {
         const decodedKeyShare = JSON.parse(Buffer.from(keyShare, 'base64').toString());
         // Track whether a user-supplied password was provided so we can emit a
         // distinct error class on failure. The default `environmentId` fallback is
@@ -5689,7 +5825,8 @@ class DynamicWalletClient {
         try {
             const decryptedKeyShare = await decryptData({
                 data: decodedKeyShare,
-                password: effectivePassword
+                password: effectivePassword,
+                onRawKey
             });
             this.logPasswordSharePresence(password, 'decrypt');
             this.logger.info('[keyshare-decryption] key share decrypted', {
@@ -6096,23 +6233,45 @@ class DynamicWalletClient {
    * @param params.googleDriveAccessToken - Optional Google OAuth access token. When provided, the SDK uses it directly
    *   instead of looking up the user's linked Google account and exchanging it for a token via the Dynamic backend.
    */ async backupKeySharesToGoogleDrive({ accountAddress, password, signedSessionId, googleDriveAccessToken }) {
-        const [updatedBackupServiceAuthToken, resolvedAccessToken] = await Promise.all([
-            this.apiClient.getBackupRelayToken({}),
-            this.preflightGoogleDriveBackup({
+        // Track whether the Drive token was supplied by the caller (external) or
+        // will be resolved from the user's stored OAuth account (stored_oauth), so
+        // backups using a token we don't control are auditable. Enum only — the
+        // token value itself is never logged.
+        const tokenSource = googleDriveAccessToken === undefined ? 'stored_oauth' : 'external';
+        let success = false;
+        try {
+            const [updatedBackupServiceAuthToken, resolvedAccessToken] = await Promise.all([
+                this.apiClient.getBackupRelayToken({}),
+                this.preflightGoogleDriveBackup({
+                    accountAddress,
+                    googleDriveAccessToken
+                })
+            ]);
+            this.apiClient.syncBackupServiceAuthToken(updatedBackupServiceAuthToken);
+            await this.backupKeySharesToCloudProvider({
                 accountAddress,
-                googleDriveAccessToken
-            })
-        ]);
-        this.apiClient.syncBackupServiceAuthToken(updatedBackupServiceAuthToken);
-        return this.backupKeySharesToCloudProvider({
-            accountAddress,
-            password,
-            signedSessionId,
-            backupLocation: core.BackupLocation.GOOGLE_DRIVE,
-            // Forward the resolved token so the downstream upload path doesn't
-            // re-fetch it via fetchGoogleDriveAccessToken.
-            googleDriveAccessToken: resolvedAccessToken
-        });
+                password,
+                signedSessionId,
+                backupLocation: core.BackupLocation.GOOGLE_DRIVE,
+                // Forward the resolved token so the downstream upload path doesn't
+                // re-fetch it via fetchGoogleDriveAccessToken.
+                googleDriveAccessToken: resolvedAccessToken
+            });
+            success = true;
+        } finally{
+            // Audit the token source for every attempt — success or failure — so
+            // misuse of an externally-supplied token (e.g. repeated failures) is
+            // traceable, not just completed backups. Enum only; the original error
+            // still propagates after this. Failures log at warn to surface them.
+            const logFn = success ? this.logger.info : this.logger.warn;
+            logFn.call(this.logger, '[DynamicWaasWalletClient] Google Drive backup token source', {
+                accountAddress,
+                environmentId: this.environmentId,
+                userId: this.userId,
+                tokenSource,
+                success
+            });
+        }
     }
     /**
    * Resolve the Google Drive OAuth access token (lazy-fetch via
@@ -7255,7 +7414,8 @@ class DynamicWalletClient {
             sdkVersion,
             forwardMPCClient,
             baseClientKeysharesRelayApiUrl,
-            logger: this.logger
+            logger: this.logger,
+            onUnauthorized: internalOptions == null ? void 0 : internalOptions.onUnauthorized
         });
         this.debug = Boolean(debug);
         this.featureFlags = featureFlags || {};

package/index.esm.js

@@ -102,32 +102,6 @@ const ARGON2_HASH_LENGTH = 32;
  */ const PBKDF2_ITERATIONS_V1 = 100000;
 const PBKDF2_ITERATIONS_V2 = 1000000;
 
-/**
- * Derives a key using Argon2id algorithm
- * @param params - Key derivation parameters
- * @param encryptionConfig - Encryption configuration
- * @returns Promise<CryptoKey>
- */ const deriveArgon2Key = async ({ password, salt }, encryptionConfig)=>{
-    const argon2id = await loadArgon2idWasm();
-    const argon2Config = encryptionConfig;
-    const passwordBytes = new TextEncoder().encode(password);
-    const hash = argon2id({
-        password: passwordBytes,
-        salt: salt,
-        parallelism: argon2Config.parallelism || ARGON2_PARALLELISM,
-        passes: argon2Config.iterations,
-        memorySize: argon2Config.memorySize || ARGON2_MEMORY_SIZE,
-        tagLength: argon2Config.hashLength || ARGON2_HASH_LENGTH
-    });
-    return crypto.subtle.importKey('raw', new Uint8Array(hash), {
-        name: encryptionConfig.algorithm,
-        length: encryptionConfig.algorithmLength
-    }, false, [
-        'encrypt',
-        'decrypt'
-    ]);
-};
-
 /**
  * Encryption configuration for each version
  */ const ENCRYPTION_VERSIONS = {
@@ -180,6 +154,48 @@ const PBKDF2_ITERATIONS_V2 = 1000000;
     return config.keyDerivation === ARGON2_ALGORITHM;
 };
 
+/**
+ * Derives the raw Argon2id hash bytes for the given params/config.
+ *
+ * Exposed separately from {@link deriveArgon2Key} for the backup self-test's
+ * determinism probe: it lets the caller derive twice from identical inputs and
+ * diff the results to detect Argon2id non-determinism (suspected on
+ * memory-constrained clients). The raw bytes are AES key material and must
+ * never be logged or persisted — keep them in-process.
+ */ const deriveRawArgon2Bytes = async ({ password, salt }, encryptionConfig)=>{
+    const argon2id = await loadArgon2idWasm();
+    const argon2Config = encryptionConfig;
+    const passwordBytes = new TextEncoder().encode(password);
+    const hash = argon2id({
+        password: passwordBytes,
+        salt: salt,
+        parallelism: argon2Config.parallelism || ARGON2_PARALLELISM,
+        passes: argon2Config.iterations,
+        memorySize: argon2Config.memorySize || ARGON2_MEMORY_SIZE,
+        tagLength: argon2Config.hashLength || ARGON2_HASH_LENGTH
+    });
+    return new Uint8Array(hash);
+};
+/**
+ * Derives a key using Argon2id algorithm
+ * @param params - Key derivation parameters
+ * @param encryptionConfig - Encryption configuration
+ * @returns Promise<CryptoKey>
+ */ const deriveArgon2Key = async (params, encryptionConfig, // In-process hook receiving the raw derived bytes (key material — never log).
+// Lets the backup self-test reuse the keys it already derives instead of
+// running extra Argon2 derivations to detect drift.
+onRawKey)=>{
+    const hash = await deriveRawArgon2Bytes(params, encryptionConfig);
+    onRawKey == null ? void 0 : onRawKey(hash);
+    return crypto.subtle.importKey('raw', new Uint8Array(hash), {
+        name: encryptionConfig.algorithm,
+        length: encryptionConfig.algorithmLength
+    }, false, [
+        'encrypt',
+        'decrypt'
+    ]);
+};
+
 /**
  * Utility functions for encryption operations
  * These functions are separated to avoid circular dependencies
@@ -254,18 +270,20 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
  */ const isInvalidPasswordError = (error)=>error instanceof Error && error.name === 'OperationError';
 /**
  * Get the appropriate key derivation function based on the encryption config
- */ const getKey = async (params, encryptionConfig)=>{
+ */ const getKey = async (params, encryptionConfig, onRawKey)=>{
     // Use Argon2 for v3, PBKDF2 for v1 and v2
     if (encryptionConfig.keyDerivation === ARGON2_ALGORITHM) {
-        return deriveArgon2Key(params, encryptionConfig);
+        return deriveArgon2Key(params, encryptionConfig, onRawKey);
     } else {
+        // PBKDF2 derives a non-extractable CryptoKey directly, so raw bytes are
+        // unavailable; the hook simply doesn't fire (drift probe is v3-only anyway).
         return derivePBKDF2Key(params, encryptionConfig);
     }
 };
 /**
  * Encrypts data using the specified encryption version.
  * Always uses the latest encryption configuration for new encryptions by default.
- */ const encryptData = async ({ data, password, version = ENCRYPTION_VERSION_CURRENT })=>{
+ */ const encryptData = async ({ data, password, version = ENCRYPTION_VERSION_CURRENT, onRawKey })=>{
     const encryptionConfig = getEncryptionConfig(version);
     try {
         // Generate a random salt and IV
@@ -274,7 +292,7 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
         const key = await getKey({
             password,
             salt
-        }, encryptionConfig);
+        }, encryptionConfig, onRawKey);
         // Convert the input string to bytes
         const dataBytes = new TextEncoder().encode(data);
         // Encrypt the data
@@ -299,7 +317,7 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
  * Uses the version field from the data to determine encryption parameters.
  * Falls back to legacy version for backward compatibility if no version is specified.
  * For v3 (Argon2), retries with parallelism=1 if an OperationError occurs.
- */ const decryptData = async ({ data, password })=>{
+ */ const decryptData = async ({ data, password, onRawKey })=>{
     const { salt, iv, cipher, version } = data;
     // Ensure proper base64 padding for all values
     const paddedSalt = ensureBase64Padding(salt);
@@ -314,7 +332,7 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
         const key = await getKey({
             password,
             salt: saltBytes
-        }, encryptionConfig);
+        }, encryptionConfig, onRawKey);
         const decryptedData = await crypto.subtle.decrypt({
             name: AES_GCM_ALGORITHM,
             iv: ivBytes
@@ -333,7 +351,7 @@ const KEY_SHARE_DECRYPTION_ERROR = 'Decryption failed.';
                 const key = await getKey({
                     password,
                     salt: saltBytes
-                }, modifiedConfig);
+                }, modifiedConfig, onRawKey);
                 const decryptedData = await crypto.subtle.decrypt({
                     name: AES_GCM_ALGORITHM,
                     iv: ivBytes
@@ -1783,12 +1801,21 @@ const logError = ({ message, error, context, level = 'error' })=>{
         return;
     }
     const resolvedLevel = isExpectedUserError(error) ? 'info' : level;
+    // Surface the unwrapped `cause` (name only — never its raw fields, which may
+    // carry key material). Errors like EncryptionSelfTestFailedError wrap the real
+    // failure (e.g. KeyShareDecryptionError) as `cause`; without this the original
+    // failure mode is invisible in logs.
+    const cause = error instanceof Error ? error.cause : undefined;
     Logger[resolvedLevel]('[DynamicWaasWalletClient] Error in browser client', {
         message,
         error: error instanceof Error ? {
             name: error.name,
             message: error.message
         } : String(error),
+        cause: cause instanceof Error ? {
+            name: cause.name,
+            message: cause.message
+        } : undefined,
         context
     });
 };
@@ -4721,12 +4748,17 @@ class DynamicWalletClient {
     // AES-GCM authenticates the ciphertext, so a wrong key fails to decrypt
     // rather than returning corrupted plaintext — "decrypt did not throw" is a
     // sufficient guarantee the cipher is recoverable.
-    async assertEncryptionRoundTrip({ password, encrypted, walletId, accountAddress }) {
+    async assertEncryptionRoundTrip({ password, encrypted, encryptKeyBytes, walletId, accountAddress }) {
         if (!encrypted) return;
+        // Capture the decrypt-side derived key (envId path only) so a failure can be
+        // diffed against the encrypt key without any extra Argon2 derivation.
+        let decryptKeyBytes;
+        const onRawKey = password ? undefined : (k)=>decryptKeyBytes != null ? decryptKeyBytes : decryptKeyBytes = k;
         try {
             await this.decryptKeyShare({
                 keyShare: encrypted,
-                password
+                password,
+                onRawKey
             });
         } catch (error) {
             // Only a genuine ciphertext-integrity failure (AES-GCM auth failure /
@@ -4738,6 +4770,15 @@ class DynamicWalletClient {
             // transient network error, so rethrow it as-is rather than masking it
             // behind "backup aborted" — it stays visible in logs and stays retryable.
             if (error instanceof InvalidPasswordError || error instanceof KeyShareDecryptionError) {
+                this.logSelfTestDiagnostics({
+                    encrypted,
+                    password,
+                    walletId,
+                    accountAddress,
+                    cause: error,
+                    encryptKeyBytes,
+                    decryptKeyBytes
+                });
                 throw new EncryptionSelfTestFailedError({
                     walletId,
                     accountAddress,
@@ -4747,11 +4788,82 @@ class DynamicWalletClient {
             throw error;
         }
     }
-    async encryptKeyShare({ keyShare, password }) {
+    /**
+   * Diagnostics for backup self-test failures. ONLY runs on the envId-default
+   * path (no user password): envId is public, so the salt/iv/version emitted
+   * here are non-secret.
+   *
+   * Reuses the encrypt- and decrypt-side keys that the backup already derived
+   * (no extra Argon2 work — important, since the failing clients are the
+   * memory-constrained ones) and logs the byte-wise XOR of the two: equal keys
+   * give an all-zero diff, any non-zero byte localises the Argon2id drift that
+   * broke this round-trip. The XOR of two unknown keys is not usable key
+   * material, and the raw keys are never logged.
+   */ logSelfTestDiagnostics({ encrypted, password, walletId, accountAddress, cause, encryptKeyBytes, decryptKeyBytes }) {
+        // Hard gate: a user-supplied password must never reach these logs, even
+        // derived or diffed. Only the public-envId path is instrumented.
+        if (password) return;
+        try {
+            const decoded = JSON.parse(Buffer.from(encrypted, 'base64').toString());
+            var _decoded_version;
+            const version = (_decoded_version = decoded.version) != null ? _decoded_version : 'unknown';
+            const config = getEncryptionConfig(version);
+            const toHex = (a)=>Array.from(a, (b)=>b.toString(16).padStart(2, '0')).join('');
+            // Diff the two real derivations when both were captured (v3/Argon2 only —
+            // PBKDF2 keys are non-extractable so no bytes are available).
+            let drift;
+            if (encryptKeyBytes && decryptKeyBytes) {
+                const len = Math.min(encryptKeyBytes.length, decryptKeyBytes.length);
+                const xor = new Uint8Array(len);
+                const driftPositions = [];
+                for(let i = 0; i < len; i++){
+                    xor[i] = encryptKeyBytes[i] ^ decryptKeyBytes[i];
+                    if (xor[i] !== 0) driftPositions.push(i);
+                }
+                drift = {
+                    keyLength: len,
+                    keyDriftXor: toHex(xor),
+                    keyDriftByteCount: driftPositions.length,
+                    keyDriftPositions: driftPositions
+                };
+            }
+            this.logger.error('[keyshare-selftest] self-test failed', _extends({
+                walletId,
+                accountAddress,
+                environmentId: this.environmentId,
+                userId: this.userId,
+                version,
+                salt: decoded.salt,
+                iv: decoded.iv,
+                saltLength: base64ToBytes(ensureBase64Padding(decoded.salt)).length,
+                cipherLength: base64ToBytes(ensureBase64Padding(decoded.cipher)).length,
+                causeName: cause instanceof Error ? cause.name : undefined,
+                causeContext: cause instanceof KeyShareDecryptionError ? cause.context : undefined,
+                // Whether both real keys were available to diff (false ⇒ non-v3 or a key wasn't captured).
+                keyDriftAvailable: !!drift
+            }, drift, {
+                argon2: isArgon2Config(config) ? {
+                    memorySize: config.memorySize,
+                    iterations: config.iterations,
+                    parallelism: config.parallelism,
+                    hashLength: config.hashLength
+                } : undefined
+            }));
+        } catch (diagError) {
+            // Diagnostics must never mask the real failure.
+            this.logger.warn('[keyshare-selftest] diagnostics failed to run', {
+                walletId,
+                accountAddress,
+                error: diagError instanceof Error ? diagError.message : String(diagError)
+            });
+        }
+    }
+    async encryptKeyShare({ keyShare, password, onRawKey }) {
         const serializedKeyShare = JSON.stringify(keyShare);
         const encryptedKeyShare = await encryptData({
             data: serializedKeyShare,
-            password: password != null ? password : this.environmentId
+            password: password != null ? password : this.environmentId,
+            onRawKey
         });
         this.logPasswordSharePresence(password, 'encrypt');
         // stringify the encrypted key share, convert to base64, and store it
@@ -5133,12 +5245,24 @@ class DynamicWalletClient {
             }
             const bitcoinConfig = this.getBitcoinConfigForChain(walletData.chainName, accountAddress);
             const isPasswordEncrypted = shouldValidatePassword(password, this.environmentId);
+            // On the envId-default path, capture each share's derived encrypt key
+            // (keyed by its ciphertext blob) so the self-test can diff it against the
+            // decrypt key it derives — detecting Argon2id drift with NO extra
+            // derivations. Skipped entirely when a user password is set; keys are
+            // in-process only and cleared right after the self-test.
+            const encryptKeyByBlob = isPasswordEncrypted ? undefined : new Map();
             // Pre-encrypt all shares once, with retry to handle transient WebCrypto errors.
             // This avoids re-running expensive Argon2id key derivation on every retry attempt.
-            const encryptWithRetry = (keyShare)=>retryPromise(()=>this.encryptKeyShare({
+            const encryptWithRetry = (keyShare)=>retryPromise(async ()=>{
+                    let rawKey;
+                    const blob = await this.encryptKeyShare({
                         keyShare,
-                        password
-                    }), {
+                        password,
+                        onRawKey: encryptKeyByBlob ? (k)=>rawKey = k : undefined
+                    });
+                    if (encryptKeyByBlob && rawKey) encryptKeyByBlob.set(blob, rawKey);
+                    return blob;
+                }, {
                     maxAttempts: 3,
                     operationName: 'encrypt key share'
                 });
@@ -5161,12 +5285,19 @@ class DynamicWalletClient {
             var _preEncryptedDynamicShares_;
             // Fail fast before any upload if the just-written cipher can't be read
             // back with the same key material. Runs once per backup, not per share.
-            await this.assertEncryptionRoundTrip({
-                password,
-                encrypted: (_preEncryptedDynamicShares_ = preEncryptedDynamicShares[0]) != null ? _preEncryptedDynamicShares_ : (_preEncryptedCloudShares_ = preEncryptedCloudShares[0]) == null ? void 0 : _preEncryptedCloudShares_.encrypted[0],
-                walletId: walletData.walletId,
-                accountAddress
-            });
+            const selfTestBlob = (_preEncryptedDynamicShares_ = preEncryptedDynamicShares[0]) != null ? _preEncryptedDynamicShares_ : (_preEncryptedCloudShares_ = preEncryptedCloudShares[0]) == null ? void 0 : _preEncryptedCloudShares_.encrypted[0];
+            try {
+                await this.assertEncryptionRoundTrip({
+                    password,
+                    encrypted: selfTestBlob,
+                    encryptKeyBytes: selfTestBlob ? encryptKeyByBlob == null ? void 0 : encryptKeyByBlob.get(selfTestBlob) : undefined,
+                    walletId: walletData.walletId,
+                    accountAddress
+                });
+            } finally{
+                // Drop captured key material promptly regardless of outcome.
+                encryptKeyByBlob == null ? void 0 : encryptKeyByBlob.clear();
+            }
             // Step 1: Upload shares in parallel, each with its own retry
             const uploadPromises = [];
             if (distribution.clientShares.length > 0) {
@@ -5322,6 +5453,7 @@ class DynamicWalletClient {
             }));
             return backupData;
         } catch (error) {
+            var _error_cause_context;
             const errorReason = classifyPasswordBackupError(error);
             const logFn = isUserActionablePasswordBackupErrorReason(errorReason) ? this.logger.warn : this.logger.error;
             logFn.call(this.logger, '[backupSharesWithDistribution] failed', _extends({}, logContext, {
@@ -5329,7 +5461,11 @@ class DynamicWalletClient {
                 errorReason,
                 errorName: error instanceof Error ? error.name : undefined,
                 errorMessage: error instanceof Error ? error.message : String(error),
-                errorStack: error instanceof Error ? error.stack : undefined
+                errorStack: error instanceof Error ? error.stack : undefined,
+                // Unwrap the wrapped cause (name only — never raw fields) so self-test
+                // failures show the underlying KeyShareDecryptionError / kdfVersion.
+                errorCauseName: error instanceof Error && error.cause instanceof Error ? error.cause.name : undefined,
+                kdfVersion: error instanceof Error && error.cause instanceof KeyShareDecryptionError ? (_error_cause_context = error.cause.context) == null ? void 0 : _error_cause_context.kdfVersion : undefined
             }));
             logError({
                 message: 'Error in backupSharesWithDistribution',
@@ -5678,7 +5814,7 @@ class DynamicWalletClient {
             throw error;
         }
     }
-    async decryptKeyShare({ keyShare, password }) {
+    async decryptKeyShare({ keyShare, password, onRawKey }) {
         const decodedKeyShare = JSON.parse(Buffer.from(keyShare, 'base64').toString());
         // Track whether a user-supplied password was provided so we can emit a
         // distinct error class on failure. The default `environmentId` fallback is
@@ -5690,7 +5826,8 @@ class DynamicWalletClient {
         try {
             const decryptedKeyShare = await decryptData({
                 data: decodedKeyShare,
-                password: effectivePassword
+                password: effectivePassword,
+                onRawKey
             });
             this.logPasswordSharePresence(password, 'decrypt');
             this.logger.info('[keyshare-decryption] key share decrypted', {
@@ -6097,23 +6234,45 @@ class DynamicWalletClient {
    * @param params.googleDriveAccessToken - Optional Google OAuth access token. When provided, the SDK uses it directly
    *   instead of looking up the user's linked Google account and exchanging it for a token via the Dynamic backend.
    */ async backupKeySharesToGoogleDrive({ accountAddress, password, signedSessionId, googleDriveAccessToken }) {
-        const [updatedBackupServiceAuthToken, resolvedAccessToken] = await Promise.all([
-            this.apiClient.getBackupRelayToken({}),
-            this.preflightGoogleDriveBackup({
+        // Track whether the Drive token was supplied by the caller (external) or
+        // will be resolved from the user's stored OAuth account (stored_oauth), so
+        // backups using a token we don't control are auditable. Enum only — the
+        // token value itself is never logged.
+        const tokenSource = googleDriveAccessToken === undefined ? 'stored_oauth' : 'external';
+        let success = false;
+        try {
+            const [updatedBackupServiceAuthToken, resolvedAccessToken] = await Promise.all([
+                this.apiClient.getBackupRelayToken({}),
+                this.preflightGoogleDriveBackup({
+                    accountAddress,
+                    googleDriveAccessToken
+                })
+            ]);
+            this.apiClient.syncBackupServiceAuthToken(updatedBackupServiceAuthToken);
+            await this.backupKeySharesToCloudProvider({
                 accountAddress,
-                googleDriveAccessToken
-            })
-        ]);
-        this.apiClient.syncBackupServiceAuthToken(updatedBackupServiceAuthToken);
-        return this.backupKeySharesToCloudProvider({
-            accountAddress,
-            password,
-            signedSessionId,
-            backupLocation: BackupLocation.GOOGLE_DRIVE,
-            // Forward the resolved token so the downstream upload path doesn't
-            // re-fetch it via fetchGoogleDriveAccessToken.
-            googleDriveAccessToken: resolvedAccessToken
-        });
+                password,
+                signedSessionId,
+                backupLocation: BackupLocation.GOOGLE_DRIVE,
+                // Forward the resolved token so the downstream upload path doesn't
+                // re-fetch it via fetchGoogleDriveAccessToken.
+                googleDriveAccessToken: resolvedAccessToken
+            });
+            success = true;
+        } finally{
+            // Audit the token source for every attempt — success or failure — so
+            // misuse of an externally-supplied token (e.g. repeated failures) is
+            // traceable, not just completed backups. Enum only; the original error
+            // still propagates after this. Failures log at warn to surface them.
+            const logFn = success ? this.logger.info : this.logger.warn;
+            logFn.call(this.logger, '[DynamicWaasWalletClient] Google Drive backup token source', {
+                accountAddress,
+                environmentId: this.environmentId,
+                userId: this.userId,
+                tokenSource,
+                success
+            });
+        }
     }
     /**
    * Resolve the Google Drive OAuth access token (lazy-fetch via
@@ -7256,7 +7415,8 @@ class DynamicWalletClient {
             sdkVersion,
             forwardMPCClient,
             baseClientKeysharesRelayApiUrl,
-            logger: this.logger
+            logger: this.logger,
+            onUnauthorized: internalOptions == null ? void 0 : internalOptions.onUnauthorized
         });
         this.debug = Boolean(debug);
         this.featureFlags = featureFlags || {};

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@dynamic-labs-wallet/browser",
-  "version": "1.0.14",
+  "version": "1.0.16",
   "license": "Licensed under the Dynamic Labs, Inc. Terms Of Service (https://www.dynamic.xyz/terms-conditions)",
   "type": "module",
   "dependencies": {
-    "@dynamic-labs-wallet/core": "1.0.14",
+    "@dynamic-labs-wallet/core": "1.0.16",
     "@dynamic-labs-wallet/forward-mpc-client": "0.10.1",
-    "@dynamic-labs-wallet/primitives": "1.0.14",
+    "@dynamic-labs-wallet/primitives": "1.0.16",
     "@dynamic-labs/sdk-api-core": "^0.0.984",
     "argon2id": "1.0.1",
     "axios": "1.16.0",

package/src/backup/encryption/argon2.d.ts

@@ -1,10 +1,20 @@
 import type { EncryptionConfig } from './config.js';
 import type { KeyDerivationParams } from './types.js';
+/**
+ * Derives the raw Argon2id hash bytes for the given params/config.
+ *
+ * Exposed separately from {@link deriveArgon2Key} for the backup self-test's
+ * determinism probe: it lets the caller derive twice from identical inputs and
+ * diff the results to detect Argon2id non-determinism (suspected on
+ * memory-constrained clients). The raw bytes are AES key material and must
+ * never be logged or persisted — keep them in-process.
+ */
+export declare const deriveRawArgon2Bytes: ({ password, salt }: KeyDerivationParams, encryptionConfig: EncryptionConfig) => Promise<Uint8Array>;
 /**
  * Derives a key using Argon2id algorithm
  * @param params - Key derivation parameters
  * @param encryptionConfig - Encryption configuration
  * @returns Promise<CryptoKey>
  */
-export declare const deriveArgon2Key: ({ password, salt }: KeyDerivationParams, encryptionConfig: EncryptionConfig) => Promise<CryptoKey>;
+export declare const deriveArgon2Key: (params: KeyDerivationParams, encryptionConfig: EncryptionConfig, onRawKey?: (raw: Uint8Array) => void) => Promise<CryptoKey>;
 //# sourceMappingURL=argon2.d.ts.map

package/src/backup/encryption/argon2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"argon2.d.ts","sourceRoot":"","sources":["../../../src/backup/encryption/argon2.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,KAAK,EAA0B,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,eAAe,uBACN,mBAAmB,oBACrB,gBAAgB,KACjC,OAAO,CAAC,SAAS,CAyBnB,CAAC"}
+{"version":3,"file":"argon2.d.ts","sourceRoot":"","sources":["../../../src/backup/encryption/argon2.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,KAAK,EAA0B,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE9E;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,uBACX,mBAAmB,oBACrB,gBAAgB,KACjC,OAAO,CAAC,UAAU,CAgBpB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,WAClB,mBAAmB,oBACT,gBAAgB,aAIvB,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,KACnC,OAAO,CAAC,SAAS,CAcnB,CAAC"}

package/src/backup/encryption/core.d.ts

@@ -32,10 +32,12 @@ export declare class KeyShareDecryptionError extends Error {
  * Encrypts data using the specified encryption version.
  * Always uses the latest encryption configuration for new encryptions by default.
  */
-export declare const encryptData: ({ data, password, version, }: {
+export declare const encryptData: ({ data, password, version, onRawKey, }: {
     data: string;
     password: string;
     version?: string;
+    /** In-process hook receiving the raw derived key bytes — key material, never log. */
+    onRawKey?: (raw: Uint8Array) => void;
 }) => Promise<EncryptedData>;
 /**
  * Decrypts data with version-based configuration.
@@ -43,9 +45,11 @@ export declare const encryptData: ({ data, password, version, }: {
  * Falls back to legacy version for backward compatibility if no version is specified.
  * For v3 (Argon2), retries with parallelism=1 if an OperationError occurs.
  */
-export declare const decryptData: ({ data, password }: {
+export declare const decryptData: ({ data, password, onRawKey, }: {
     data: DecryptionData;
     password: string;
+    /** In-process hook receiving the raw derived key bytes — key material, never log. */
+    onRawKey?: (raw: Uint8Array) => void;
 }) => Promise<string>;
 /**
  * Gets encryption metadata for a specific version.

package/src/backup/encryption/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/backup/encryption/core.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAMpE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAuB,MAAM,YAAY,CAAC;AAGrF,eAAO,MAAM,sBAAsB,mFAAmF,CAAC;AAEvH,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C;AAED,eAAO,MAAM,0BAA0B,uBAAuB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,SAAgB,OAAO,CAAC,EAAE,yBAAyB,CAAC;gBAExC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,yBAAyB,CAAA;KAAE;CAU/E;AAoBD;;;GAGG;AACH,eAAO,MAAM,WAAW,iCAIrB;IACD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,KAAG,OAAO,CAAC,aAAa,CA2BxB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,WAAW,uBAA8B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,KAAG,OAAO,CAAC,MAAM,CAyDhH,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,+BAA+B,YAAa,MAAM,KAAG,kBAmBjE,CAAC"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/backup/encryption/core.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAMpE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAuB,MAAM,YAAY,CAAC;AAGrF,eAAO,MAAM,sBAAsB,mFAAmF,CAAC;AAEvH,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C;AAED,eAAO,MAAM,0BAA0B,uBAAuB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,SAAgB,OAAO,CAAC,EAAE,yBAAyB,CAAC;gBAExC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,yBAAyB,CAAA;KAAE;CAU/E;AA0BD;;;GAGG;AACH,eAAO,MAAM,WAAW,2CAKrB;IACD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;CACtC,KAAG,OAAO,CAAC,aAAa,CA2BxB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,WAAW,kCAIrB;IACD,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;CACtC,KAAG,OAAO,CAAC,MAAM,CAyDjB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,+BAA+B,YAAa,MAAM,KAAG,kBAmBjE,CAAC"}

package/src/client.d.ts

@@ -18,6 +18,12 @@ export interface DynamicWalletClientInternalOptions {
      */
     getSignedSessionId?: () => Promise<string>;
     createWaasSDKContainer?: CreateWaasSDKContainer;
+    /**
+     * Invoked when a backend call returns 401. Passed via internalOptions (not
+     * props) because the per-chain wallet clients forward internalOptions to
+     * `super` verbatim, whereas they only forward an explicit subset of props.
+     */
+    onUnauthorized?: () => void;
 }
 export declare class DynamicWalletClient {
     environmentId: string;
@@ -418,9 +424,24 @@ export declare class DynamicWalletClient {
         rawPublicKey: EcdsaPublicKey | Uint8Array | string | undefined;
     }>;
     private assertEncryptionRoundTrip;
-    encryptKeyShare({ keyShare, password }: {
+    /**
+     * Diagnostics for backup self-test failures. ONLY runs on the envId-default
+     * path (no user password): envId is public, so the salt/iv/version emitted
+     * here are non-secret.
+     *
+     * Reuses the encrypt- and decrypt-side keys that the backup already derived
+     * (no extra Argon2 work — important, since the failing clients are the
+     * memory-constrained ones) and logs the byte-wise XOR of the two: equal keys
+     * give an all-zero diff, any non-zero byte localises the Argon2id drift that
+     * broke this round-trip. The XOR of two unknown keys is not usable key
+     * material, and the raw keys are never logged.
+     */
+    private logSelfTestDiagnostics;
+    encryptKeyShare({ keyShare, password, onRawKey, }: {
         keyShare: ClientKeyShare;
         password?: string;
+        /** In-process hook receiving the raw derived key bytes — key material, never log. */
+        onRawKey?: (raw: Uint8Array) => void;
     }): Promise<string>;
     /**
      * helper function to store encrypted backup by wallet from iframe local storage
@@ -590,9 +611,11 @@ export declare class DynamicWalletClient {
         signedSessionId: string;
         passwordUpdateBatchId?: string;
     }): Promise<void>;
-    decryptKeyShare({ keyShare, password }: {
+    decryptKeyShare({ keyShare, password, onRawKey, }: {
         keyShare: string;
         password?: string;
+        /** In-process hook receiving the raw derived key bytes — key material, never log. */
+        onRawKey?: (raw: Uint8Array) => void;
     }): Promise<ClientKeyShare>;
     /**
      * Validates that the provided password is consistent with existing encrypted wallets.

package/src/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../packages/src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,cAAc,EAGd,WAAW,EACX,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,QAAQ,EACR,cAAc,EACd,gBAAgB,EAOhB,wBAAwB,EACxB,eAAe,EAWf,KAAK,oCAAoC,EAEzC,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,OAAO,EACZ,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EAExB,KAAK,sBAAsB,EAE5B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAoCnF,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAiBxF,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EASL,eAAe,EACf,KAAK,IAAI,EACT,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,YAAY,CAAC;AAgCpB,KAAK,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;AAEvD;;;GAGG;AACH,MAAM,WAAW,kCAAkC;IACjD,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;CACjD;AAED,qBAAa,mBAAmB;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IAEtB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAa;IACjD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAa;IAEpD,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAQ;IACrE,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACtC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAM;IAC3D,SAAS,CAAC,OAAO,EAAG,gBAAgB,CAAC;IACrC,SAAS,CAAC,aAAa,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,IAAI,CAAQ;IACjE,SAAS,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAQ;IAClD,SAAS,CAAC,iBAAiB,UAAS;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAM;IACzC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC7B,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAClD,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAM;IACpD,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM;IACjE,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAoC;IAIpE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAK;IAEnC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAuB;IAEtD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAwB;IAEpE;;;OAGG;YACW,sBAAsB;gBAalC,EACE,aAAa,EACb,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,KAAK,EACL,YAAY,EACZ,QAA0B,EAC1B,SAAqB,EACrB,sBAAsB,EAEtB,UAAU,EACV,gBAAgB,EAChB,8BAA8B,EAC9B,YAAY,EACZ,MAAM,GACP,EAAE,wBAAwB,EAC3B,eAAe,CAAC,EAAE,kCAAkC;IA6EtD;;OAEG;WACW,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAIlE;;OAEG;WACW,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAI3D;;OAEG;WACW,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAInE;;;;;;;;OAQG;WACW,aAAa,IAAI,IAAI;IAMnC;;;;OAIG;WACW,gBAAgB,IAAI,IAAI;IAKtC;;;OAGG;IACH,SAAS,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIhF;;;;OAIG;cACa,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAuBjH;;;OAGG;IACH,SAAS,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI;IAQpF,WAAW,IAAI,QAAQ;IAI9B;;;OAGG;IACU,sBAAsB;IAInC;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IA8BzB,iBAAiB,CAAC,SAAS,EAAE,MAAM;IA8CnC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAYxE;;OAEG;cACa,WAAW,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyB7E,sBAAsB,CAAC,EAC3B,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,aAAa,EACb,OAAO,EACP,kBAAkB,GACnB,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,kBAAkB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;KAC9F;IAqBK,sBAAsB,CAAC,EAC3B,SAAS,EACT,wBAAwB,EACxB,aAAa,GACd,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAmB/B,eAAe,CAAC,EACpB,SAAS,EACT,QAAQ,EACR,cAAc,EACd,aAAa,GACd,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,cAAc,CAAC;QACzB,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,GAAG,OAAO,CAAC,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IAiB7D;;;;;;;;;;;;;;OAcG;IACG,sBAAsB,CAAC,EAC3B,SAAS,EACT,MAAM,EACN,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EACxB,aAAa,EACb,gBAAgB,EAChB,YAAY,GACb,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,uBAAuB,EAAE,sBAAsB,EAAE,CAAC;QAClD,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,YAAY,CAAC;KAC7B,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;QAC/D,mBAAmB,EAAE,cAAc,EAAE,CAAC;QACtC,eAAe,EAAE,eAAe,CAAC;KAClC,CAAC;IAwEF,0EAA0E;IAC1E,OAAO,CAAC,oBAAoB;IAItB,YAAY,CAAC,EACjB,SAAS,EACT,MAAM,EAAE,aAAa,EACrB,eAAe,EAAE,sBAAsB,EACvC,uBAAuB,EACvB,wBAAwB,EACxB,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,WAAW,GACZ,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,uBAAuB,EAAE,sBAAsB,EAAE,CAAC;QAClD,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;KAC5E,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;QAC/D,mBAAmB,EAAE,cAAc,EAAE,CAAC;QACtC,eAAe,EAAE,eAAe,CAAC;KAClC,CAAC;IA0HI,MAAM,CAAC,IAAI,EAAE;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,kBAAkB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACxE,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;QAC/D,eAAe,EAAE,cAAc,EAAE,CAAC;KACnC,CAAC;YAkBY,gBAAgB;IA8HxB,mBAAmB,CAAC,IAAI,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,kBAAkB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACxE,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,4DAA4D;QAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;QAC/D,eAAe,EAAE,cAAc,EAAE,CAAC;KACnC,CAAC;YAeY,6BAA6B;IAqJrC,UAAU,CAAC,EACf,QAAQ,EACR,UAAU,EACV,OAAO,EACP,WAAW,EACX,QAAQ,EACR,mBAAmB,EACnB,MAAM,EACN,OAAO,EACP,OAAO,EACP,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,EAAE;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAC7B,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,kBAAkB,CAAC;QAC7B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B;IA2BD,OAAO,CAAC,2BAA2B;IAsCnC,OAAO,CAAC,qBAAqB;IAW7B,OAAO,CAAC,0BAA0B;IAO5B,oBAAoB,CAAC,EACzB,SAAS,EACT,OAAO,EACP,MAAM,EACN,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,aAAa,GACd,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,cAAc,CAAC;QACzB,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,gBAAgB,EAAE,aAAa,CAAC;QAChC,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,GAAG,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;IAiDlC,UAAU,CAAC,EACf,SAAS,EACT,OAAO,EACP,MAAM,EAAE,aAAa,EACrB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,cAAc,CAAC;QACzB,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B;;;;;WAKG;QACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;KACrC,GAAG,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;IAgHxC;;;;;;OAMG;YACW,0BAA0B;IAoDlC,IAAI,CAAC,EACT,cAAc,EACd,OAAO,EACP,SAAS,EACT,QAAoB,EACpB,WAAmB,EACnB,eAAe,EACf,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,OAAO,EACP,YAAY,EACZ,aAAa,GACd,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,OAAO,CAAC,EAAE,kBAAkB,CAAC;QAC7B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,GAAG,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;YAmB1B,YAAY;IAuMpB,0BAA0B,CAAC,EAC/B,cAAc,EACd,SAAS,EACT,QAAoB,EACpB,eAAe,EACf,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,YAAY,CAAC,EAAE,YAAY,CAAC;KAC7B;IAcD;;;;;;;;;OASG;IACH,OAAO,CAAC,gCAAgC;IAsDxC;;;OAGG;IACH,OAAO,CAAC,wBAAwB;YAclB,kCAAkC;YAoOlC,mBAAmB;IAQ3B,WAAW,CAAC,EAChB,SAAS,EACT,cAAc,EACd,aAAa,GACd,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,cAAc,CAAC;QAC/B,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B;IA2BD;;;;;;;;;;;;;OAaG;IACG,eAAe,CAAC,EACpB,SAAS,EACT,MAAM,EACN,cAAc,EACd,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,GAC7B,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,gBAAgB,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,2BAA2B,EAAE,wBAAwB,CAAC;QACtD,2BAA2B,EAAE,wBAAwB,CAAC;QACtD,4BAA4B,CAAC,EAAE,OAAO,CAAC;KACxC,GAAG,OAAO,CAAC;QACV,0BAA0B,EAAE,sBAAsB,EAAE,CAAC;QACrD,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC7B,uBAAuB,EAAE,MAAM,EAAE,CAAC;QAClC,uBAAuB,EAAE,cAAc,EAAE,CAAC;KAC3C,CAAC;IAgDI,OAAO,CAAC,EACZ,SAAS,EACT,cAAc,EACd,2BAA2B,EAC3B,2BAA2B,EAC3B,QAAoB,EACpB,eAAe,EACf,cAAmB,EACnB,4BAAoC,EACpC,QAAQ,EACR,mBAAmB,EACnB,gBAAwB,EACxB,sBAAsB,GACvB,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,2BAA2B,EAAE,wBAAwB,CAAC;QACtD,2BAA2B,EAAE,wBAAwB,CAAC;QACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;QAClC,4BAA4B,CAAC,EAAE,OAAO,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC;IAiCD,OAAO,CAAC,6BAA6B;YA0CvB,6BAA6B;IA4C3C,OAAO,CAAC,iCAAiC;IAyEzC,OAAO,CAAC,uBAAuB;IAqC/B,OAAO,CAAC,oCAAoC;YAkC9B,eAAe;YA+Zf,0BAA0B;IAwElC,iBAAiB,CAAC,EACtB,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB;IAyCK,gBAAgB,CAAC,EACrB,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB;IAyDD,OAAO,CAAC,kBAAkB;IAgBpB,SAAS,CAAC,EACd,cAAc,EACd,SAAS,EACT,aAAa,EACb,QAAoB,EACpB,eAAe,EACf,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,YAAY,CAAC,EAAE,YAAY,CAAC;KAC7B;;;cA8Ee,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS;cAsBrE,gBAAgB,CAC9B,SAAS,EAAE,SAAS,EACpB,qBAAqB,EAAE,cAAc,EACrC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM;cA0BH,0BAA0B,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB;IAgBzG,gBAAgB,CAAC,EACrB,SAAS,EACT,SAAS,EACT,cAAc,GACf,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;QACtC,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;KAChE,CAAC;YA0DY,yBAAyB;IAkCjC,eAAe,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;QAAE,QAAQ,EAAE,cAAc,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;IAY7F;;OAEG;YACW,kCAAkC;IAsChD;;;OAGG;IACG,6BAA6B,CAAC,EAAE,cAAc,EAAE,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAiC9G;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,wBAAwB,CAAC,EACjC,cAAc,EACd,QAAQ,EACR,SAAS,EACT,wBAAwB,EACxB,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,eAAoB,GACrB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC5B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC3C,GAAG,IAAI;IAwBR;;;OAGG;IACH;;OAEG;IACH,OAAO,CAAC,mBAAmB;YAgBb,gCAAgC;IAe9C;;;;;;;OAOG;IACG,2BAA2B,CAAC,EAChC,cAAc,EACd,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,cAAc,EAAE,CAAC;KACnC,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BjB;;;;;;;OAOG;YACW,iBAAiB;YAYjB,sBAAsB;YAuEtB,0BAA0B;IAqCxC;;;;;;;OAOG;YACW,4BAA4B;YAY5B,qBAAqB;YA4CrB,qBAAqB;IA4DnC,OAAO,CAAC,gCAAgC;IAsBlC,4BAA4B,CAAC,EACjC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,yBAAiC,EACjC,qBAAqB,EACrB,sBAAsB,GACvB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,iBAAiB,CAAC;QAChC,yBAAyB,CAAC,EAAE,OAAO,CAAC;QACpC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC;;;;;;;;8BA1lHA,CAAA;;;YAi5Ha,yBAAyB;IAiGvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,4BAA4B,CAAC,EACjC,cAAc,EACd,eAA2B,EAC3B,QAAoB,EACpB,eAAe,EACf,cAAmB,EACnB,iBAA6B,EAC7B,qBAAqB,EACrB,sBAAsB,GACvB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;QAClC,iBAAiB,CAAC,EAAE,cAAc,CAAC;QACnC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC;;;;;;;;;;8BAniIA,CAAA;;;YAioIa,mBAAmB;IAcjC,OAAO,CAAC,wBAAwB;IAehC,OAAO,CAAC,2BAA2B;IAWnC,OAAO,CAAC,2BAA2B;IAqB7B,cAAc,CAAC,EACnB,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,qBAAqB,GACtB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC;IAkDK,WAAW,CAAC,EAChB,cAAc,EACd,WAAW,EACX,eAAe,EACf,qBAAqB,GACtB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC;IAyCK,eAAe,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAuC/G;;;;;;;OAOG;IACH;;;;OAIG;YACW,sCAAsC;IA+DpD,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,sBAAsB;cAMd,uCAAuC,CAAC,EACtD,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCjB;;;;OAIG;cACa,iCAAiC,CAAC,EAChD,cAAc,EACd,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BjB;;;;;OAKG;YACW,8BAA8B;YAmC9B,2BAA2B;IAKzC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EACd,wBAAwB,EACxB,wBAAwB,EACxB,eAAe,EACf,UAAsB,GACvB,EAAE;QACD,wBAAwB,EAAE,kBAAkB,CAAC;QAC7C,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,eAAe,EAAE,eAAe,CAAC;QACjC,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG;QACF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAClD,kBAAkB,EAAE,MAAM,CAAC;KAC5B;IA2CK,8BAA8B,CAAC,EACnC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,eAAe,EACf,UAAsB,EACtB,oBAA2B,EAC3B,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,eAAe,CAAC;QACjC,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;YAcf,sCAAsC;IA4F9C,cAAc;IAmCpB;;;;OAIG;YACW,8BAA8B;IA0D5C;;;;;;;;;;;OAWG;IACG,4BAA4B,CAAC,EACjC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,sBAAsB,GACvB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBjB;;;;;;;;OAQG;YACW,0BAA0B;IAyCxC;;;;;;;;;OASG;IACG,uBAAuB,CAAC,EAC5B,cAAc,EACd,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC;IASjB;;;;;;;OAOG;YACW,qBAAqB;IA8BnC;;;;;;;;;;;;OAYG;YACW,4BAA4B;IAsD1C;;;;;;OAMG;YACW,uBAAuB;IAkC/B,oCAAoC,CAAC,EACzC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,sBAAsB,GACvB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyGX,qBAAqB,CAAC,EAC1B,cAAc,EACd,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB;IAmCK,kBAAkB,CAAC,EACvB,cAAc,EACd,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB;IAYD;;;;;OAKG;YACW,iBAAiB;IAsD/B;;;;OAIG;IACG,cAAc,CAAC,EACnB,cAAc,EACd,QAAoB,EACpB,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB;IAwBK,mBAAmB,CAAC,EAAE,cAAc,EAAE,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAK3F;;OAEG;IACG,4BAA4B,CAAC,EACjC,cAAc,EACd,eAAiD,GAClD,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,eAAe,CAAC;KACnC,GAAG,OAAO,CAAC,OAAO,CAAC;IAYpB;;OAEG;IACG,uCAAuC,CAAC,EAC5C,cAAc,EACd,eAAiD,GAClD,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,eAAe,CAAC;KACnC,GAAG,OAAO,CAAC,OAAO,CAAC;YAsBN,+BAA+B;IASvC,iCAAiC,CAAC,EAAE,cAAc,EAAE,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAwBtG,0BAA0B;IAYlC,SAAS,CAAC,EACd,cAAc,EACd,eAA8C,EAC9C,UAAsB,EACtB,QAAoB,EACpB,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,eAAe,CAAC;QAClC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAsL7B;;;;;;;;;;;;;;;OAeG;IACG,sBAAsB,CAAC,EAC3B,cAAc,EACd,eAAe,EACf,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA4ChC;;;;;OAKG;YACW,4BAA4B;IAgD1C;;;;;;;;OAQG;IACG,YAAY,CAAC,EACjB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmI7B;;OAEG;YACW,2BAA2B;IA8BnC,aAAa,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAI7C,UAAU;IAoFhB;;;OAGG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM;IAQzB,WAAW,CAAC,EAChB,QAAQ,EACR,wBAAwB,EACxB,SAAa,GACd,EAAE;QACD,QAAQ,EAAE,YAAY,CAAC;QACvB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB;IAsEK,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAiC/C,QAAQ,CACZ,QAAQ,CAAC,EAAE,YAAY,EACvB,wBAAwB,CAAC,EAAE,wBAAwB,GAClD,OAAO,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAQrC,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE;IAKrD;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,wBAAwB,EAAE,wBAAwB,GAAG,MAAM;IAKhG,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,wBAAwB,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IA0DpH,eAAe,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;CAQ3F"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../packages/src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,cAAc,EAGd,WAAW,EACX,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,QAAQ,EACR,cAAc,EACd,gBAAgB,EAOhB,wBAAwB,EACxB,eAAe,EAWf,KAAK,oCAAoC,EAEzC,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,OAAO,EACZ,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EAExB,KAAK,sBAAsB,EAE5B,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAsCnF,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAiBxF,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EASL,eAAe,EACf,KAAK,IAAI,EACT,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,YAAY,CAAC;AAgCpB,KAAK,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;AAEvD;;;GAGG;AACH,MAAM,WAAW,kCAAkC;IACjD,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,qBAAa,mBAAmB;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IAEtB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAa;IACjD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAa;IAEpD,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAQ;IACrE,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACtC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAM;IAC3D,SAAS,CAAC,OAAO,EAAG,gBAAgB,CAAC;IACrC,SAAS,CAAC,aAAa,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GAAG,IAAI,CAAQ;IACjE,SAAS,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAQ;IAClD,SAAS,CAAC,iBAAiB,UAAS;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAM;IACzC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC7B,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAClD,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAM;IACpD,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM;IACjE,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAoC;IAIpE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAK;IAEnC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAuB;IAEtD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAwB;IAEpE;;;OAGG;YACW,sBAAsB;gBAalC,EACE,aAAa,EACb,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,KAAK,EACL,YAAY,EACZ,QAA0B,EAC1B,SAAqB,EACrB,sBAAsB,EAEtB,UAAU,EACV,gBAAgB,EAChB,8BAA8B,EAC9B,YAAY,EACZ,MAAM,GACP,EAAE,wBAAwB,EAC3B,eAAe,CAAC,EAAE,kCAAkC;IA8EtD;;OAEG;WACW,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAIlE;;OAEG;WACW,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAI3D;;OAEG;WACW,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAInE;;;;;;;;OAQG;WACW,aAAa,IAAI,IAAI;IAMnC;;;;OAIG;WACW,gBAAgB,IAAI,IAAI;IAKtC;;;OAGG;IACH,SAAS,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIhF;;;;OAIG;cACa,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAuBjH;;;OAGG;IACH,SAAS,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI;IAQpF,WAAW,IAAI,QAAQ;IAI9B;;;OAGG;IACU,sBAAsB;IAInC;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IA8BzB,iBAAiB,CAAC,SAAS,EAAE,MAAM;IA8CnC,UAAU,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAYxE;;OAEG;cACa,WAAW,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyB7E,sBAAsB,CAAC,EAC3B,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,aAAa,EACb,OAAO,EACP,kBAAkB,GACnB,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,kBAAkB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;KAC9F;IAqBK,sBAAsB,CAAC,EAC3B,SAAS,EACT,wBAAwB,EACxB,aAAa,GACd,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAmB/B,eAAe,CAAC,EACpB,SAAS,EACT,QAAQ,EACR,cAAc,EACd,aAAa,GACd,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,cAAc,CAAC;QACzB,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,GAAG,OAAO,CAAC,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IAiB7D;;;;;;;;;;;;;;OAcG;IACG,sBAAsB,CAAC,EAC3B,SAAS,EACT,MAAM,EACN,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EACxB,aAAa,EACb,gBAAgB,EAChB,YAAY,GACb,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,uBAAuB,EAAE,sBAAsB,EAAE,CAAC;QAClD,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,YAAY,CAAC;KAC7B,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;QAC/D,mBAAmB,EAAE,cAAc,EAAE,CAAC;QACtC,eAAe,EAAE,eAAe,CAAC;KAClC,CAAC;IAwEF,0EAA0E;IAC1E,OAAO,CAAC,oBAAoB;IAItB,YAAY,CAAC,EACjB,SAAS,EACT,MAAM,EAAE,aAAa,EACrB,eAAe,EAAE,sBAAsB,EACvC,uBAAuB,EACvB,wBAAwB,EACxB,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,WAAW,GACZ,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,uBAAuB,EAAE,sBAAsB,EAAE,CAAC;QAClD,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;KAC5E,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;QAC/D,mBAAmB,EAAE,cAAc,EAAE,CAAC;QACtC,eAAe,EAAE,eAAe,CAAC;KAClC,CAAC;IA0HI,MAAM,CAAC,IAAI,EAAE;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,kBAAkB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACxE,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;QAC/D,eAAe,EAAE,cAAc,EAAE,CAAC;KACnC,CAAC;YAkBY,gBAAgB;IA8HxB,mBAAmB,CAAC,IAAI,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,kBAAkB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACxE,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,4DAA4D;QAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;QAC/D,eAAe,EAAE,cAAc,EAAE,CAAC;KACnC,CAAC;YAeY,6BAA6B;IAqJrC,UAAU,CAAC,EACf,QAAQ,EACR,UAAU,EACV,OAAO,EACP,WAAW,EACX,QAAQ,EACR,mBAAmB,EACnB,MAAM,EACN,OAAO,EACP,OAAO,EACP,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,EAAE;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAC7B,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,kBAAkB,CAAC;QAC7B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B;IA2BD,OAAO,CAAC,2BAA2B;IAsCnC,OAAO,CAAC,qBAAqB;IAW7B,OAAO,CAAC,0BAA0B;IAO5B,oBAAoB,CAAC,EACzB,SAAS,EACT,OAAO,EACP,MAAM,EACN,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,aAAa,GACd,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,cAAc,CAAC;QACzB,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,gBAAgB,EAAE,aAAa,CAAC;QAChC,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,GAAG,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;IAiDlC,UAAU,CAAC,EACf,SAAS,EACT,OAAO,EACP,MAAM,EAAE,aAAa,EACrB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,cAAc,CAAC;QACzB,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC;QACxC,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B;;;;;WAKG;QACH,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;KACrC,GAAG,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;IAgHxC;;;;;;OAMG;YACW,0BAA0B;IAoDlC,IAAI,CAAC,EACT,cAAc,EACd,OAAO,EACP,SAAS,EACT,QAAoB,EACpB,WAAmB,EACnB,eAAe,EACf,QAAQ,EACR,mBAAmB,EACnB,OAAO,EACP,OAAO,EACP,YAAY,EACZ,aAAa,GACd,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,OAAO,CAAC,EAAE,kBAAkB,CAAC;QAC7B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B,GAAG,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;YAmB1B,YAAY;IAuMpB,0BAA0B,CAAC,EAC/B,cAAc,EACd,SAAS,EACT,QAAoB,EACpB,eAAe,EACf,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,YAAY,CAAC,EAAE,YAAY,CAAC;KAC7B;IAcD;;;;;;;;;OASG;IACH,OAAO,CAAC,gCAAgC;IAsDxC;;;OAGG;IACH,OAAO,CAAC,wBAAwB;YAclB,kCAAkC;YAoOlC,mBAAmB;IAQ3B,WAAW,CAAC,EAChB,SAAS,EACT,cAAc,EACd,aAAa,GACd,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,cAAc,CAAC;QAC/B,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B;IA2BD;;;;;;;;;;;;;OAaG;IACG,eAAe,CAAC,EACpB,SAAS,EACT,MAAM,EACN,cAAc,EACd,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,GAC7B,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,gBAAgB,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,2BAA2B,EAAE,wBAAwB,CAAC;QACtD,2BAA2B,EAAE,wBAAwB,CAAC;QACtD,4BAA4B,CAAC,EAAE,OAAO,CAAC;KACxC,GAAG,OAAO,CAAC;QACV,0BAA0B,EAAE,sBAAsB,EAAE,CAAC;QACrD,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC7B,uBAAuB,EAAE,MAAM,EAAE,CAAC;QAClC,uBAAuB,EAAE,cAAc,EAAE,CAAC;KAC3C,CAAC;IAgDI,OAAO,CAAC,EACZ,SAAS,EACT,cAAc,EACd,2BAA2B,EAC3B,2BAA2B,EAC3B,QAAoB,EACpB,eAAe,EACf,cAAmB,EACnB,4BAAoC,EACpC,QAAQ,EACR,mBAAmB,EACnB,gBAAwB,EACxB,sBAAsB,GACvB,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,2BAA2B,EAAE,wBAAwB,CAAC;QACtD,2BAA2B,EAAE,wBAAwB,CAAC;QACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;QAClC,4BAA4B,CAAC,EAAE,OAAO,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC;IAiCD,OAAO,CAAC,6BAA6B;YA0CvB,6BAA6B;IA4C3C,OAAO,CAAC,iCAAiC;IAyEzC,OAAO,CAAC,uBAAuB;IAqC/B,OAAO,CAAC,oCAAoC;YAkC9B,eAAe;YA+Zf,0BAA0B;IAwElC,iBAAiB,CAAC,EACtB,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB;IAyCK,gBAAgB,CAAC,EACrB,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB;IAyDD,OAAO,CAAC,kBAAkB;IAgBpB,SAAS,CAAC,EACd,cAAc,EACd,SAAS,EACT,aAAa,EACb,QAAoB,EACpB,eAAe,EACf,QAAQ,EACR,mBAAmB,EACnB,YAAY,GACb,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,aAAa,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,YAAY,CAAC,EAAE,YAAY,CAAC;KAC7B;;;cA8Ee,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS;cAsBrE,gBAAgB,CAC9B,SAAS,EAAE,SAAS,EACpB,qBAAqB,EAAE,cAAc,EACrC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM;cA0BH,0BAA0B,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB;IAgBzG,gBAAgB,CAAC,EACrB,SAAS,EACT,SAAS,EACT,cAAc,GACf,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;QACtC,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;KAChE,CAAC;YA0DY,yBAAyB;IAkDvC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IAuFxB,eAAe,CAAC,EACpB,QAAQ,EACR,QAAQ,EACR,QAAQ,GACT,EAAE;QACD,QAAQ,EAAE,cAAc,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,qFAAqF;QACrF,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;KACtC;IAaD;;OAEG;YACW,kCAAkC;IAsChD;;;OAGG;IACG,6BAA6B,CAAC,EAAE,cAAc,EAAE,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAiC9G;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,wBAAwB,CAAC,EACjC,cAAc,EACd,QAAQ,EACR,SAAS,EACT,wBAAwB,EACxB,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,eAAoB,GACrB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,YAAY,CAAC;QAC5B,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC5B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC3C,GAAG,IAAI;IAwBR;;;OAGG;IACH;;OAEG;IACH,OAAO,CAAC,mBAAmB;YAgBb,gCAAgC;IAe9C;;;;;;;OAOG;IACG,2BAA2B,CAAC,EAChC,cAAc,EACd,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,cAAc,EAAE,CAAC;KACnC,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BjB;;;;;;;OAOG;YACW,iBAAiB;YAYjB,sBAAsB;YAuEtB,0BAA0B;IAqCxC;;;;;;;OAOG;YACW,4BAA4B;YAY5B,qBAAqB;YA4CrB,qBAAqB;IA4DnC,OAAO,CAAC,gCAAgC;IAsBlC,4BAA4B,CAAC,EACjC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,yBAAiC,EACjC,qBAAqB,EACrB,sBAAsB,GACvB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,iBAAiB,CAAC;QAChC,yBAAyB,CAAC,EAAE,OAAO,CAAC;QACpC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC;;;;;;;;8BAruH6B,CAAC;;;YAgkIjB,yBAAyB;IAiGvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,4BAA4B,CAAC,EACjC,cAAc,EACd,eAA2B,EAC3B,QAAoB,EACpB,eAAe,EACf,cAAmB,EACnB,iBAA6B,EAC7B,qBAAqB,EACrB,sBAAsB,GACvB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;QAClC,iBAAiB,CAAC,EAAE,cAAc,CAAC;QACnC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC;;;;;;;;;;8BAltI6B,CAAC;;;YAgzIjB,mBAAmB;IAcjC,OAAO,CAAC,wBAAwB;IAehC,OAAO,CAAC,2BAA2B;IAWnC,OAAO,CAAC,2BAA2B;IAqB7B,cAAc,CAAC,EACnB,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,qBAAqB,GACtB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC;IAkDK,WAAW,CAAC,EAChB,cAAc,EACd,WAAW,EACX,eAAe,EACf,qBAAqB,GACtB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC;IAyCK,eAAe,CAAC,EACpB,QAAQ,EACR,QAAQ,EACR,QAAQ,GACT,EAAE;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,qFAAqF;QACrF,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;KACtC,GAAG,OAAO,CAAC,cAAc,CAAC;IAwC3B;;;;;;;OAOG;IACH;;;;OAIG;YACW,sCAAsC;IA+DpD,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,sBAAsB;cAMd,uCAAuC,CAAC,EACtD,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCjB;;;;OAIG;cACa,iCAAiC,CAAC,EAChD,cAAc,EACd,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BjB;;;;;OAKG;YACW,8BAA8B;YAmC9B,2BAA2B;IAKzC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EACd,wBAAwB,EACxB,wBAAwB,EACxB,eAAe,EACf,UAAsB,GACvB,EAAE;QACD,wBAAwB,EAAE,kBAAkB,CAAC;QAC7C,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,eAAe,EAAE,eAAe,CAAC;QACjC,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG;QACF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAClD,kBAAkB,EAAE,MAAM,CAAC;KAC5B;IA2CK,8BAA8B,CAAC,EACnC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,eAAe,EACf,UAAsB,EACtB,oBAA2B,EAC3B,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,eAAe,CAAC;QACjC,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;YAcf,sCAAsC;IA4F9C,cAAc;IAmCpB;;;;OAIG;YACW,8BAA8B;IA0D5C;;;;;;;;;;;OAWG;IACG,4BAA4B,CAAC,EACjC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,sBAAsB,GACvB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyCjB;;;;;;;;OAQG;YACW,0BAA0B;IAyCxC;;;;;;;;;OASG;IACG,uBAAuB,CAAC,EAC5B,cAAc,EACd,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC;IASjB;;;;;;;OAOG;YACW,qBAAqB;IA8BnC;;;;;;;;;;;;OAYG;YACW,4BAA4B;IAsD1C;;;;;;OAMG;YACW,uBAAuB;IAkC/B,oCAAoC,CAAC,EACzC,cAAc,EACd,QAAQ,EACR,eAAe,EACf,sBAAsB,GACvB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyGX,qBAAqB,CAAC,EAC1B,cAAc,EACd,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB;IAmCK,kBAAkB,CAAC,EACvB,cAAc,EACd,QAAQ,EACR,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB;IAYD;;;;;OAKG;YACW,iBAAiB;IAsD/B;;;;OAIG;IACG,cAAc,CAAC,EACnB,cAAc,EACd,QAAoB,EACpB,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB;IAwBK,mBAAmB,CAAC,EAAE,cAAc,EAAE,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAK3F;;OAEG;IACG,4BAA4B,CAAC,EACjC,cAAc,EACd,eAAiD,GAClD,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,eAAe,CAAC;KACnC,GAAG,OAAO,CAAC,OAAO,CAAC;IAYpB;;OAEG;IACG,uCAAuC,CAAC,EAC5C,cAAc,EACd,eAAiD,GAClD,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,eAAe,CAAC;KACnC,GAAG,OAAO,CAAC,OAAO,CAAC;YAsBN,+BAA+B;IASvC,iCAAiC,CAAC,EAAE,cAAc,EAAE,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAwBtG,0BAA0B;IAYlC,SAAS,CAAC,EACd,cAAc,EACd,eAA8C,EAC9C,UAAsB,EACtB,QAAoB,EACpB,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,eAAe,CAAC;QAClC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAsL7B;;;;;;;;;;;;;;;OAeG;IACG,sBAAsB,CAAC,EAC3B,cAAc,EACd,eAAe,EACf,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA4ChC;;;;;OAKG;YACW,4BAA4B;IAgD1C;;;;;;;;OAQG;IACG,YAAY,CAAC,EACjB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmI7B;;OAEG;YACW,2BAA2B;IA8BnC,aAAa,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAI7C,UAAU;IAoFhB;;;OAGG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM;IAQzB,WAAW,CAAC,EAChB,QAAQ,EACR,wBAAwB,EACxB,SAAa,GACd,EAAE;QACD,QAAQ,EAAE,YAAY,CAAC;QACvB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB;IAsEK,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAiC/C,QAAQ,CACZ,QAAQ,CAAC,EAAE,YAAY,EACvB,wBAAwB,CAAC,EAAE,wBAAwB,GAClD,OAAO,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAQrC,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE;IAKrD;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,wBAAwB,EAAE,wBAAwB,GAAG,MAAM;IAKhG,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,wBAAwB,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IA0DpH,eAAe,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;CAQ3F"}

package/src/services/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/services/logger.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,QAAQ,wCAKlB;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1B,KAAG,IAYH,CAAC"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/services/logger.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,QAAQ,wCAKlB;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1B,KAAG,IAkBH,CAAC"}