@enbox/agent 0.0.1

package/dist/cjs/package.json

@@ -0,0 +1 @@
+{"type": "commonjs"}

package/dist/esm/agent-did-resolver-cache.js

@@ -0,0 +1,87 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { DidResolverCacheLevel } from '@enbox/dids';
+import { logger } from '@enbox/common';
+/**
+ * AgentDidResolverCache keeps a stale copy of the Agent's managed Identity DIDs and only evicts and refreshes upon a successful resolution.
+ * This allows for quick and offline access to the internal DIDs used by the agent.
+ */
+export class AgentDidResolverCache extends DidResolverCacheLevel {
+    constructor({ agent, db, location, ttl }) {
+        super({ db, location, ttl });
+        /** A map of DIDs that are currently in-flight. This helps avoid going into an infinite loop */
+        this._resolving = new Map();
+        this._agent = agent;
+    }
+    get agent() {
+        if (!this._agent) {
+            throw new Error('Agent not initialized');
+        }
+        return this._agent;
+    }
+    set agent(agent) {
+        this._agent = agent;
+    }
+    /**
+     * Get the DID resolution result from the cache for the given DID.
+     *
+     * If the DID is managed by the agent, or is the agent's own DID, it will not evict it from the cache until a new resolution is successful.
+     * This is done to achieve quick and offline access to the agent's own managed DIDs.
+     */
+    get(did) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const str = yield this.cache.get(did);
+                const cachedResult = JSON.parse(str);
+                if (!this._resolving.has(did) && Date.now() >= cachedResult.ttlMillis) {
+                    this._resolving.set(did, true);
+                    // if a DID is stored in the DID Store, then we don't want to evict it from the cache until we have a successful resolution
+                    // upon a successful resolution, we will update both the storage and the cache with the newly resolved Document.
+                    const storedDid = yield this.agent.did.get({ didUri: did, tenant: this.agent.agentDid.uri });
+                    if ('undefined' !== typeof storedDid) {
+                        try {
+                            const result = yield this.agent.did.resolve(did);
+                            // if the resolution was successful, update the stored DID with the new Document
+                            if (!result.didResolutionMetadata.error && result.didDocument) {
+                                const portableDid = Object.assign(Object.assign({}, storedDid), { document: result.didDocument, metadata: result.didDocumentMetadata });
+                                try {
+                                    // this will throw an error if the DID is not managed by the agent, or there is no difference between the stored and resolved DID
+                                    // We don't publish the DID in this case, as it was received by the resolver.
+                                    yield this.agent.did.update({ portableDid, tenant: this.agent.agentDid.uri, publish: false });
+                                }
+                                catch (error) {
+                                    // if the error is not due to no changes detected, log the error
+                                    if (error.message && !error.message.includes('No changes detected, update aborted')) {
+                                        logger.error(`Error updating DID: ${error.message}`);
+                                    }
+                                }
+                            }
+                        }
+                        finally {
+                            this._resolving.delete(did);
+                        }
+                    }
+                    else {
+                        this._resolving.delete(did);
+                        this.cache.nextTick(() => this.cache.del(did));
+                    }
+                }
+                return cachedResult.value;
+            }
+            catch (error) {
+                if (error.notFound) {
+                    return;
+                }
+                throw error;
+            }
+        });
+    }
+}
+//# sourceMappingURL=agent-did-resolver-cache.js.map

package/dist/esm/agent-did-resolver-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-did-resolver-cache.js","sourceRoot":"","sources":["../../src/agent-did-resolver-cache.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAyC,qBAAqB,EAA+B,MAAM,aAAa,CAAC;AAExH,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAGvC;;;GAGG;AACH,MAAM,OAAO,qBAAsB,SAAQ,qBAAqB;IAa9D,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAA+D;QACnG,KAAK,CAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAJhC,+FAA+F;QACvF,eAAU,GAAyB,IAAI,GAAG,EAAE,CAAC;QAInD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,IAAI,KAAK;QACP,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;SAC1C;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,IAAI,KAAK,CAAC,KAAwB;QAChC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACG,GAAG,CAAC,GAAW;;YACnB,IAAI;gBACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACtC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,YAAY,CAAC,SAAS,EAAE;oBACrE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBAE/B,2HAA2H;oBAC3H,gHAAgH;oBAChH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC7F,IAAI,WAAW,KAAM,OAAO,SAAS,EAAE;wBACrC,IAAI;4BACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;4BAEjD,gFAAgF;4BAChF,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE;gCAE7D,MAAM,WAAW,mCACZ,SAAS,KACZ,QAAQ,EAAG,MAAM,CAAC,WAAW,EAC7B,QAAQ,EAAG,MAAM,CAAC,mBAAmB,GACtC,CAAC;gCAEF,IAAI;oCACF,iIAAiI;oCACjI,6EAA6E;oCAC7E,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;iCAC/F;gCAAC,OAAM,KAAU,EAAE;oCAClB,gEAAgE;oCAChE,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE;wCACnF,MAAM,CAAC,KAAK,CAAC,uBAAuB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;qCACtD;iCACF;6BACF;yBACF;gCAAS;4BACR,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;yBAC7B;qBACF;yBAAM;wBACL,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;qBAChD;iBACF;gBACD,OAAO,YAAY,CAAC,KAAK,CAAC;aAC3B;YAAC,OAAM,KAAU,EAAE;gBAClB,IAAI,KAAK,CAAC,QAAQ,EAAE;oBAClB,OAAO;iBACR;gBACD,MAAM,KAAK,CAAC;aACb;QACH,CAAC;KAAA;CACF"}

package/dist/esm/bearer-identity.js

@@ -0,0 +1,41 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+/**
+ * Represents a Web5 Identity with its DID and metadata.
+ */
+export class BearerIdentity {
+    constructor({ did, metadata }) {
+        this.did = did;
+        this.metadata = metadata;
+    }
+    /**
+     * Converts a `BearerIdentity` object to a portable format containing the DID and metadata
+     * associated with the Identity.
+     *
+     * @example
+     * ```ts
+     * // Assuming `identity` is an instance of BearerIdentity.
+     * const portableIdentity = await identity.export();
+     * // portableIdentity now contains the and metadata.
+     * ```
+     *
+     * @returns A `PortableIdentity` containing the DID and metadata associated with the
+     *          `BearerIdentity`.
+     */
+    export() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return {
+                portableDid: yield this.did.export(),
+                metadata: Object.assign({}, this.metadata),
+            };
+        });
+    }
+}
+//# sourceMappingURL=bearer-identity.js.map

package/dist/esm/bearer-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer-identity.js","sourceRoot":"","sources":["../../src/bearer-identity.ts"],"names":[],"mappings":";;;;;;;;;AAGA;;GAEG;AACH,MAAM,OAAO,cAAc;IAOzB,YAAY,EAAE,GAAG,EAAE,QAAQ,EAG1B;QACC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACU,MAAM;;YACjB,OAAO;gBACL,WAAW,EAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;gBACrC,QAAQ,oBAAW,IAAI,CAAC,QAAQ,CAAE;aACnC,CAAC;QACJ,CAAC;KAAA;CACF"}

package/dist/esm/connect.js

@@ -0,0 +1,191 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { Oidc, } from './oidc.js';
+import { pollWithTtl } from './utils.js';
+import { Convert, logger } from '@enbox/common';
+import { CryptoUtils } from '@enbox/crypto';
+import { DidJwk } from '@enbox/dids';
+import { DwnInterfaceName, DwnMethodName } from '@enbox/dwn-sdk-js';
+/**
+ * Initiates the wallet connect process. Used when a client wants to obtain
+ * a did from a provider.
+ */
+function initClient({ displayName, connectServerUrl, walletUri, permissionRequests, onWalletUriReady, validatePin, }) {
+    return __awaiter(this, void 0, void 0, function* () {
+        // ephemeral client did for ECDH, signing, verification
+        // TODO: use separate keys for ECDH vs. sign/verify. could maybe use secp256k1.
+        const clientDid = yield DidJwk.create();
+        // TODO: properly implement PKCE. this implementation is lacking server side validations and more.
+        // https://github.com/TBD54566975/web5-js/issues/829
+        // Derive the code challenge based on the code verifier
+        // const { codeChallengeBytes, codeChallengeBase64Url } =
+        //   await Oidc.generateCodeChallenge();
+        const encryptionKey = CryptoUtils.randomBytes(32);
+        // build callback URL to pass into the auth request
+        const callbackEndpoint = Oidc.buildOidcUrl({
+            baseURL: connectServerUrl,
+            endpoint: 'callback',
+        });
+        // build the PAR request
+        const request = yield Oidc.createAuthRequest({
+            client_id: clientDid.uri,
+            scope: 'openid did:jwk',
+            redirect_uri: callbackEndpoint,
+            // custom properties:
+            // code_challenge        : codeChallengeBase64Url,
+            // code_challenge_method : 'S256',
+            permissionRequests: permissionRequests,
+            displayName,
+        });
+        // Sign the Request Object using the Client DID's signing key.
+        const requestJwt = yield Oidc.signJwt({
+            did: clientDid,
+            data: request,
+        });
+        if (!requestJwt) {
+            throw new Error('Unable to sign requestObject');
+        }
+        // Encrypt the Request Object JWT using the code challenge.
+        const requestObjectJwe = yield Oidc.encryptAuthRequest({
+            jwt: requestJwt,
+            encryptionKey,
+        });
+        // Convert the encrypted Request Object to URLSearchParams for form encoding.
+        const formEncodedRequest = new URLSearchParams({
+            request: requestObjectJwe,
+        });
+        const pushedAuthorizationRequestEndpoint = Oidc.buildOidcUrl({
+            baseURL: connectServerUrl,
+            endpoint: 'pushedAuthorizationRequest',
+        });
+        const parResponse = yield fetch(pushedAuthorizationRequestEndpoint, {
+            body: formEncodedRequest,
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+        });
+        if (!parResponse.ok) {
+            throw new Error(`${parResponse.status}: ${parResponse.statusText}`);
+        }
+        const parData = yield parResponse.json();
+        // a deeplink to a web5 compatible wallet. if the wallet scans this link it should receive
+        // a route to its web5 connect provider flow and the params of where to fetch the auth request.
+        logger.log(`Wallet URI: ${walletUri}`);
+        const generatedWalletUri = new URL(walletUri);
+        generatedWalletUri.searchParams.set('request_uri', parData.request_uri);
+        generatedWalletUri.searchParams.set('encryption_key', Convert.uint8Array(encryptionKey).toBase64Url());
+        // call user's callback so they can send the URI to the wallet as they see fit
+        onWalletUriReady(generatedWalletUri.toString());
+        const tokenUrl = Oidc.buildOidcUrl({
+            baseURL: connectServerUrl,
+            endpoint: 'token',
+            tokenParam: request.state,
+        });
+        // subscribe to receiving a response from the wallet with default TTL. receive ciphertext of {@link Web5ConnectAuthResponse}
+        const authResponse = yield pollWithTtl(() => fetch(tokenUrl));
+        if (authResponse) {
+            const jwe = yield (authResponse === null || authResponse === void 0 ? void 0 : authResponse.text());
+            // get the pin from the user and use it as AAD to decrypt
+            const pin = yield validatePin();
+            const jwt = yield Oidc.decryptAuthResponse(clientDid, jwe, pin);
+            const verifiedAuthResponse = (yield Oidc.verifyJwt({
+                jwt,
+            }));
+            return {
+                delegateGrants: verifiedAuthResponse.delegateGrants,
+                delegatePortableDid: verifiedAuthResponse.delegatePortableDid,
+                connectedDid: verifiedAuthResponse.iss,
+            };
+        }
+    });
+}
+/**
+ * Creates a set of Dwn Permission Scopes to request for a given protocol.
+ *
+ * If no permissions are provided, the default is to request all relevant record permissions (write, read, delete, query, subscribe).
+ * 'configure' is not included by default, as this gives the application a lot of control over the protocol.
+ */
+function createPermissionRequestForProtocol({ definition, permissions }) {
+    const requests = [];
+    // Add the ability to query for the specific protocol
+    requests.push({
+        protocol: definition.protocol,
+        interface: DwnInterfaceName.Protocols,
+        method: DwnMethodName.Query,
+    });
+    // In order to enable sync, we must request permissions for `MessagesQuery`, `MessagesRead` and `MessagesSubscribe`
+    requests.push({
+        protocol: definition.protocol,
+        interface: DwnInterfaceName.Messages,
+        method: DwnMethodName.Read,
+    }, {
+        protocol: definition.protocol,
+        interface: DwnInterfaceName.Messages,
+        method: DwnMethodName.Query,
+    }, {
+        protocol: definition.protocol,
+        interface: DwnInterfaceName.Messages,
+        method: DwnMethodName.Subscribe,
+    });
+    // We also request any additional permissions the user has requested for this protocol
+    for (const permission of permissions) {
+        switch (permission) {
+            case 'write':
+                requests.push({
+                    protocol: definition.protocol,
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                });
+                break;
+            case 'read':
+                requests.push({
+                    protocol: definition.protocol,
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Read,
+                });
+                break;
+            case 'delete':
+                requests.push({
+                    protocol: definition.protocol,
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Delete,
+                });
+                break;
+            case 'query':
+                requests.push({
+                    protocol: definition.protocol,
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Query,
+                });
+                break;
+            case 'subscribe':
+                requests.push({
+                    protocol: definition.protocol,
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Subscribe,
+                });
+                break;
+            case 'configure':
+                requests.push({
+                    protocol: definition.protocol,
+                    interface: DwnInterfaceName.Protocols,
+                    method: DwnMethodName.Configure,
+                });
+                break;
+        }
+    }
+    return {
+        protocolDefinition: definition,
+        permissionScopes: requests,
+    };
+}
+export const WalletConnect = { initClient, createPermissionRequestForProtocol };
+//# sourceMappingURL=connect.js.map

package/dist/esm/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/connect.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,EACL,IAAI,GACL,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEpE;;;GAGG;AACH,SAAe,UAAU,CAAC,EACxB,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,GACU;;QACrB,uDAAuD;QACvD,+EAA+E;QAC/E,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAExC,kGAAkG;QAClG,oDAAoD;QACpD,uDAAuD;QACvD,yDAAyD;QACzD,wCAAwC;QACxC,MAAM,aAAa,GAAG,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAElD,mDAAmD;QACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC;YACzC,OAAO,EAAI,gBAAgB;YAC3B,QAAQ,EAAG,UAAU;SACtB,CAAC,CAAC;QAEH,wBAAwB;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC;YAC3C,SAAS,EAAY,SAAS,CAAC,GAAG;YAClC,KAAK,EAAgB,gBAAgB;YACrC,YAAY,EAAS,gBAAgB;YACrC,qBAAqB;YACrB,kDAAkD;YAClD,kCAAkC;YAClC,kBAAkB,EAAG,kBAAkB;YACvC,WAAW;SACZ,CAAC,CAAC;QAEH,8DAA8D;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACpC,GAAG,EAAI,SAAS;YAChB,IAAI,EAAG,OAAO;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;SACjD;QACD,2DAA2D;QAC3D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC;YACrD,GAAG,EAAE,UAAU;YACf,aAAa;SACd,CAAC,CAAC;QAEH,6EAA6E;QAC7E,MAAM,kBAAkB,GAAG,IAAI,eAAe,CAAC;YAC7C,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;QAEH,MAAM,kCAAkC,GAAG,IAAI,CAAC,YAAY,CAAC;YAC3D,OAAO,EAAI,gBAAgB;YAC3B,QAAQ,EAAG,4BAA4B;SACxC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;YAClE,IAAI,EAAM,kBAAkB;YAC5B,MAAM,EAAI,MAAM;YAChB,OAAO,EAAG;gBACR,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE;YACnB,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;SACrE;QAED,MAAM,OAAO,GAAuB,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QAE7D,0FAA0F;QAC1F,+FAA+F;QAC/F,MAAM,CAAC,GAAG,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;QACvC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACxE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CACjC,gBAAgB,EAChB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAChD,CAAC;QAEF,8EAA8E;QAC9E,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;YACjC,OAAO,EAAM,gBAAgB;YAC7B,QAAQ,EAAK,OAAO;YACpB,UAAU,EAAG,OAAO,CAAC,KAAK;SAC3B,CAAC,CAAC;QAEH,4HAA4H;QAC5H,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE9D,IAAI,YAAY,EAAE;YAChB,MAAM,GAAG,GAAG,MAAM,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,IAAI,EAAE,CAAA,CAAC;YAEvC,yDAAyD;YACzD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAChE,MAAM,oBAAoB,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC;gBACjD,GAAG;aACJ,CAAC,CAA4B,CAAC;YAE/B,OAAO;gBACL,cAAc,EAAQ,oBAAoB,CAAC,cAAc;gBACzD,mBAAmB,EAAG,oBAAoB,CAAC,mBAAmB;gBAC9D,YAAY,EAAU,oBAAoB,CAAC,GAAG;aAC/C,CAAC;SACH;IACH,CAAC;CAAA;AA8ED;;;;;GAKG;AACH,SAAS,kCAAkC,CAAC,EAAE,UAAU,EAAE,WAAW,EAA6B;IAChG,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,qDAAqD;IACrD,QAAQ,CAAC,IAAI,CAAC;QACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,SAAS;QACtC,MAAM,EAAM,aAAa,CAAC,KAAK;KAChC,CAAC,CAAC;IAEH,mHAAmH;IACnH,QAAQ,CAAC,IAAI,CAAC;QACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,QAAQ;QACrC,MAAM,EAAM,aAAa,CAAC,IAAI;KAC/B,EAAE;QACD,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,QAAQ;QACrC,MAAM,EAAM,aAAa,CAAC,KAAK;KAChC,EAAE;QACD,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,QAAQ;QACrC,MAAM,EAAM,aAAa,CAAC,SAAS;KACpC,CAAC,CAAC;IAEH,sFAAsF;IACtF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;QACpC,QAAQ,UAAU,EAAE;YAClB,KAAK,OAAO;gBACV,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;iBAChC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,MAAM;gBACT,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,IAAI;iBAC/B,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,QAAQ;gBACX,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,MAAM;iBACjC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,OAAO;gBACV,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;iBAChC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,WAAW;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,SAAS;iBACpC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,WAAW;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,SAAS;oBACtC,MAAM,EAAM,aAAa,CAAC,SAAS;iBACpC,CAAC,CAAC;gBACH,MAAM;SACT;KACF;IAED,OAAO;QACL,kBAAkB,EAAG,UAAU;QAC/B,gBAAgB,EAAK,QAAQ;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,UAAU,EAAE,kCAAkC,EAAE,CAAC"}