@enbox/dids 0.0.4 → 0.0.6

package/dist/esm/methods/did-dht-dns.js

@@ -0,0 +1,455 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+import { AUTHORITATIVE_ANSWER } from '@dnsquery/dns-packet';
+import { computeJwkThumbprint } from '@enbox/crypto';
+import { Convert } from '@enbox/common';
+import { DidVerificationRelationship } from '../types/did-core.js';
+import { extractDidFragment } from '../utils.js';
+import { DidDhtRegisteredDidType, DidDhtRegisteredKeyType, DidDhtVerificationRelationship } from './did-dht-types.js';
+import { DidError, DidErrorCode } from '../did-error.js';
+import { keyConverter, validatePreviousDidProof } from './did-dht-utils.js';
+/**
+ * The version of the DID DHT specification that is implemented by this library.
+ */
+export const DID_DHT_SPECIFICATION_VERSION = 0;
+/**
+ * The default TTL for DNS records published to the DHT network.
+ *
+ * The recommended TTL value is 7200 seconds (2 hours) since it matches the default TTL for
+ * Mainline DHT records.
+ */
+export const DNS_RECORD_TTL = 7200;
+/**
+ * Character used to separate distinct elements or entries in the DNS packet representation
+ * of a DID Document.
+ */
+export const PROPERTY_SEPARATOR = ';';
+/**
+ * Character used to separate distinct values within a single element or entry in the DNS packet
+ * representation of a DID Document.
+ */
+export const VALUE_SEPARATOR = ',';
+/**
+ * Private helper that maps algorithm identifiers to their corresponding DID DHT
+ * {@link DidDhtRegisteredKeyType | registered key type}.
+ */
+export const AlgorithmToKeyTypeMap = {
+    Ed25519: DidDhtRegisteredKeyType.Ed25519,
+    ES256K: DidDhtRegisteredKeyType.secp256k1,
+    ES256: DidDhtRegisteredKeyType.secp256r1,
+    'P-256': DidDhtRegisteredKeyType.secp256r1,
+    secp256k1: DidDhtRegisteredKeyType.secp256k1,
+    secp256r1: DidDhtRegisteredKeyType.secp256r1,
+    X25519: DidDhtRegisteredKeyType.X25519,
+};
+/**
+ * Private helper that maps DID DHT registered key types to their corresponding default algorithm identifiers.
+ */
+export const KeyTypeToDefaultAlgorithmMap = {
+    [DidDhtRegisteredKeyType.Ed25519]: 'EdDSA',
+    [DidDhtRegisteredKeyType.secp256k1]: 'ES256K',
+    [DidDhtRegisteredKeyType.secp256r1]: 'ES256',
+    [DidDhtRegisteredKeyType.X25519]: 'ECDH-ES+A256KW',
+};
+/**
+ * Creates a TXT DNS answer record with the given name and data, using the standard DNS_RECORD_TTL.
+ *
+ * @param name - The DNS record name.
+ * @param data - The TXT record data (string or string array).
+ * @returns A TxtAnswer record.
+ */
+export function createTxtRecord(name, data) {
+    return {
+        type: 'TXT',
+        name,
+        ttl: DNS_RECORD_TTL,
+        data,
+    };
+}
+/**
+ * Decodes and parses the data value of a DNS TXT record into a string.
+ *
+ * @param txtData - The data value of a DNS TXT record.
+ * @returns A string representation of the TXT record data.
+ */
+export function parseTxtDataToString(txtData) {
+    if (typeof txtData === 'string') {
+        return txtData;
+    }
+    else if (txtData instanceof Uint8Array) {
+        return Convert.uint8Array(txtData).toString();
+    }
+    else if (Array.isArray(txtData)) {
+        return txtData.map((item) => parseTxtDataToString(item)).join('');
+    }
+    else {
+        throw new DidError(DidErrorCode.InternalError, 'Pkarr returned DNS TXT record with invalid data type');
+    }
+}
+/**
+ * Decodes and parses the data value of a DNS TXT record into a key-value object.
+ *
+ * @param txtData - The data value of a DNS TXT record.
+ * @returns An object containing the key/value pairs of the TXT record data.
+ */
+export function parseTxtDataToObject(txtData) {
+    return parseTxtDataToString(txtData).split(PROPERTY_SEPARATOR).reduce((acc, pair) => {
+        const [key, value] = pair.split('=');
+        acc[key] = value;
+        return acc;
+    }, {});
+}
+/**
+ * Splits a string into chunks of length 255 if the string exceeds length 255.
+ *
+ * @param data - The string to split into chunks.
+ * @returns The original string if its length is less than or equal to 255, otherwise an array of chunked strings.
+ */
+export function chunkDataIfNeeded(data) {
+    if (data.length <= 255) {
+        return data;
+    }
+    // Split the data into chunks of 255 characters.
+    const chunks = [];
+    for (let i = 0; i < data.length; i += 255) {
+        chunks.push(data.slice(i, i + 255)); // end index is ignored if it exceeds the length of the string
+    }
+    return chunks;
+}
+/**
+ * Converts a DNS packet to a DID document according to the DID DHT specification.
+ *
+ * @see {@link https://did-dht.com/#dids-as-dns-records | DID DHT Specification, § DIDs as DNS Records}
+ *
+ * @param params - The parameters to use when converting a DNS packet to a DID document.
+ * @param params.didUri - The DID URI of the DID document.
+ * @param params.dnsPacket - The DNS packet to convert to a DID document.
+ * @returns A Promise resolving to an object containing the DID document and its metadata.
+ */
+export function fromDnsPacket(_a) {
+    return __awaiter(this, arguments, void 0, function* ({ didUri, dnsPacket }) {
+        var _b, _c, _d;
+        // Begin constructing the DID Document.
+        const didDocument = { id: didUri };
+        // Since the DID document is being retrieved from the DHT, it is considered published.
+        const didDocumentMetadata = {
+            published: true
+        };
+        const idLookup = new Map();
+        for (const answer of (_b = dnsPacket === null || dnsPacket === void 0 ? void 0 : dnsPacket.answers) !== null && _b !== void 0 ? _b : []) {
+            // DID DHT properties are ONLY present in DNS TXT records.
+            if (answer.type !== 'TXT') {
+                continue;
+            }
+            // Get the DID DHT record identifier (e.g., k0, aka, did, etc.) from the DNS resource name.
+            const dnsRecordId = answer.name.split('.')[0].substring(1);
+            switch (true) {
+                // Process an also known as record.
+                case dnsRecordId.startsWith('aka'): {
+                    // Decode the DNS TXT record data value to a string.
+                    const data = parseTxtDataToString(answer.data);
+                    // Add the 'alsoKnownAs' property to the DID document.
+                    didDocument.alsoKnownAs = data.split(VALUE_SEPARATOR);
+                    break;
+                }
+                // Process a controller record.
+                case dnsRecordId.startsWith('cnt'): {
+                    // Decode the DNS TXT record data value to a string.
+                    const data = parseTxtDataToString(answer.data);
+                    // Add the 'controller' property to the DID document.
+                    didDocument.controller = data.includes(VALUE_SEPARATOR) ? data.split(VALUE_SEPARATOR) : data;
+                    break;
+                }
+                // Process verification methods.
+                case dnsRecordId.startsWith('k'): {
+                    // Get the key type (t), Base64URL-encoded public key (k), algorithm (a), and
+                    // optionally, controller (c) or Verification Method ID (id) from the decoded TXT record data.
+                    const { id, t, k, c, a: parsedAlg } = parseTxtDataToObject(answer.data);
+                    // Convert the public key from Base64URL format to a byte array.
+                    const publicKeyBytes = Convert.base64Url(k).toUint8Array();
+                    // Use the key type integer to look up the cryptographic curve name.
+                    const namedCurve = DidDhtRegisteredKeyType[Number(t)];
+                    // Convert the public key from a byte array to JWK format.
+                    const publicKey = yield keyConverter(namedCurve).bytesToPublicKey({ publicKeyBytes });
+                    publicKey.alg = parsedAlg || KeyTypeToDefaultAlgorithmMap[Number(t)];
+                    // TODO: when this is complete https://github.com/enboxorg/enbox/issues/638 then we can add this back and
+                    // update the test vectors kid back to '0'
+                    // if(dnsRecordId === 'k0') {
+                    //   publicKey.kid = '0';
+                    // }
+                    // Determine the Verification Method ID: '0' for the identity key,
+                    // the id from the TXT Data Object, or the JWK thumbprint if an explicity Verification Method ID not defined.
+                    const vmId = dnsRecordId === 'k0' ? '0' : id !== undefined ? id : yield computeJwkThumbprint({ jwk: publicKey });
+                    // Initialize the `verificationMethod` array if it does not already exist.
+                    (_c = didDocument.verificationMethod) !== null && _c !== void 0 ? _c : (didDocument.verificationMethod = []);
+                    // Prepend the DID URI to the ID fragment to form the full verification method ID.
+                    const methodId = `${didUri}#${vmId}`;
+                    // Add the verification method to the DID document.
+                    didDocument.verificationMethod.push({
+                        id: methodId,
+                        type: 'JsonWebKey',
+                        controller: c !== null && c !== void 0 ? c : didUri,
+                        publicKeyJwk: publicKey,
+                    });
+                    // Add a mapping from the DNS record ID (e.g., 'k0', 'k1', etc.) to the verification
+                    // method ID (e.g., 'did:dht:...#0', etc.).
+                    idLookup.set(dnsRecordId, methodId);
+                    break;
+                }
+                // Process services.
+                case dnsRecordId.startsWith('s'): {
+                    // Get the service ID fragment (id), type (t), service endpoint (se), and optionally,
+                    // other properties from the decoded TXT record data.
+                    const _e = parseTxtDataToObject(answer.data), { id, t, se } = _e, customProperties = __rest(_e, ["id", "t", "se"]);
+                    // if multi-values: 'a,b,c' -> ['a', 'b', 'c'], if single-value: 'a' -> ['a']
+                    // NOTE: The service endpoint technically can either be a string or an array of strings,
+                    // we enforce an array for single-value to simplify verification of vector 3 in the spec: https://did-dht.com/#vector-3
+                    const serviceEndpoint = se.includes(VALUE_SEPARATOR) ? se.split(VALUE_SEPARATOR) : [se];
+                    // Convert custom property values to either a string or an array of strings.
+                    const serviceProperties = Object.fromEntries(Object.entries(customProperties).map(([k, v]) => [k, v.includes(VALUE_SEPARATOR) ? v.split(VALUE_SEPARATOR) : v]));
+                    // Initialize the `service` array if it does not already exist.
+                    (_d = didDocument.service) !== null && _d !== void 0 ? _d : (didDocument.service = []);
+                    didDocument.service.push(Object.assign(Object.assign({}, serviceProperties), { id: `${didUri}#${id}`, type: t, serviceEndpoint }));
+                    break;
+                }
+                // Process DID DHT types.
+                case dnsRecordId.startsWith('typ'): {
+                    // Decode the DNS TXT record data value to an object.
+                    const { id: types } = parseTxtDataToObject(answer.data);
+                    // Add the DID DHT Registered DID Types represented as numbers to DID metadata.
+                    didDocumentMetadata.types = types.split(VALUE_SEPARATOR).map((typeInteger) => Number(typeInteger));
+                    break;
+                }
+                // Process root record.
+                case dnsRecordId.startsWith('did'): {
+                    // Helper function that maps verification relationship values to verification method IDs.
+                    const recordIdsToMethodIds = (data) => data
+                        .split(VALUE_SEPARATOR)
+                        .map((dnsRecordId) => idLookup.get(dnsRecordId))
+                        .filter((id) => typeof id === 'string');
+                    // Decode the DNS TXT record data and destructure verification relationship properties.
+                    const { auth, asm, del, inv, agm } = parseTxtDataToObject(answer.data);
+                    // Add the verification relationships, if any, to the DID document.
+                    if (auth) {
+                        didDocument.authentication = recordIdsToMethodIds(auth);
+                    }
+                    if (asm) {
+                        didDocument.assertionMethod = recordIdsToMethodIds(asm);
+                    }
+                    if (del) {
+                        didDocument.capabilityDelegation = recordIdsToMethodIds(del);
+                    }
+                    if (inv) {
+                        didDocument.capabilityInvocation = recordIdsToMethodIds(inv);
+                    }
+                    if (agm) {
+                        didDocument.keyAgreement = recordIdsToMethodIds(agm);
+                    }
+                    break;
+                }
+            }
+        }
+        return { didDocument, didDocumentMetadata, didResolutionMetadata: {} };
+    });
+}
+/**
+ * Converts a DID document to a DNS packet according to the DID DHT specification.
+ *
+ * @see {@link https://did-dht.com/#dids-as-dns-records | DID DHT Specification, § DIDs as DNS Records}
+ *
+ * @param params - The parameters to use when converting a DID document to a DNS packet.
+ * @param params.didDocument - The DID document to convert to a DNS packet.
+ * @param params.didMetadata - The DID metadata to include in the DNS packet.
+ * @param params.authoritativeGatewayUris - The URIs of the Authoritative Gateways to generate NS records from.
+ * @param params.previousDidProof - The signature proof that this DID is linked to the given previous DID.
+ * @returns A promise that resolves to a DNS packet.
+ */
+export function toDnsPacket(_a) {
+    return __awaiter(this, arguments, void 0, function* ({ didDocument, didMetadata, authoritativeGatewayUris, previousDidProof }) {
+        var _b, _c, _d, _e, _f;
+        const txtRecords = [];
+        const nsRecords = [];
+        const idLookup = new Map();
+        const serviceIds = [];
+        const verificationMethodIds = [];
+        // Add `_prv._did.` TXT record if previous DID proof is provided and valid.
+        if (previousDidProof !== undefined) {
+            const { signature, previousDid } = previousDidProof;
+            yield validatePreviousDidProof({
+                newDid: didDocument.id,
+                previousDidProof
+            });
+            txtRecords.push({
+                type: 'TXT',
+                name: '_prv._did.',
+                ttl: DNS_RECORD_TTL,
+                data: `id=${previousDid};s=${signature}`
+            });
+        }
+        // Add DNS TXT records if the DID document contains an `alsoKnownAs` property.
+        if (didDocument.alsoKnownAs) {
+            txtRecords.push({
+                type: 'TXT',
+                name: '_aka._did.',
+                ttl: DNS_RECORD_TTL,
+                data: didDocument.alsoKnownAs.join(VALUE_SEPARATOR)
+            });
+        }
+        // Add DNS TXT records if the DID document contains a `controller` property.
+        if (didDocument.controller) {
+            const controller = Array.isArray(didDocument.controller)
+                ? didDocument.controller.join(VALUE_SEPARATOR)
+                : didDocument.controller;
+            txtRecords.push({
+                type: 'TXT',
+                name: '_cnt._did.',
+                ttl: DNS_RECORD_TTL,
+                data: controller
+            });
+        }
+        // Add DNS TXT records for each verification method.
+        for (const [index, verificationMethod] of (_c = (_b = didDocument.verificationMethod) === null || _b === void 0 ? void 0 : _b.entries()) !== null && _c !== void 0 ? _c : []) {
+            const dnsRecordId = `k${index}`;
+            verificationMethodIds.push(dnsRecordId);
+            const methodId = verificationMethod.id.split('#').pop(); // Remove fragment prefix, if any.
+            idLookup.set(methodId, dnsRecordId);
+            const publicKey = verificationMethod.publicKeyJwk;
+            if (!((publicKey === null || publicKey === void 0 ? void 0 : publicKey.crv) && publicKey.crv in AlgorithmToKeyTypeMap)) {
+                throw new DidError(DidErrorCode.InvalidPublicKeyType, `Verification method '${verificationMethod.id}' contains an unsupported key type: ${(_d = publicKey === null || publicKey === void 0 ? void 0 : publicKey.crv) !== null && _d !== void 0 ? _d : 'undefined'}`);
+            }
+            // Use the public key's `crv` property to get the DID DHT key type.
+            const keyType = DidDhtRegisteredKeyType[publicKey.crv];
+            // Convert the public key from JWK format to a byte array.
+            const publicKeyBytes = yield keyConverter(publicKey.crv).publicKeyToBytes({ publicKey });
+            // Convert the public key from a byte array to Base64URL format.
+            const publicKeyBase64Url = Convert.uint8Array(publicKeyBytes).toBase64Url();
+            // Define the data for the DNS TXT record.
+            const txtData = [`t=${keyType}`, `k=${publicKeyBase64Url}`];
+            // if the methodId is not the identity key or a thumbprint, explicity define the id within the DNS TXT record.
+            // otherwise the id can be inferred from the thumbprint.
+            if (methodId !== '0' && (yield computeJwkThumbprint({ jwk: publicKey })) !== methodId) {
+                txtData.unshift(`id=${methodId}`);
+            }
+            // Only set the algorithm property (`a`) if it differs from the default algorithm for the key type.
+            if (publicKey.alg !== KeyTypeToDefaultAlgorithmMap[keyType]) {
+                txtData.push(`a=${publicKey.alg}`);
+            }
+            // Add the controller property, if set to a value other than the Identity Key (DID Subject).
+            if (verificationMethod.controller !== didDocument.id) {
+                txtData.push(`c=${verificationMethod.controller}`);
+            }
+            // Add a TXT record for the verification method.
+            txtRecords.push({
+                type: 'TXT',
+                name: `_${dnsRecordId}._did.`,
+                ttl: DNS_RECORD_TTL,
+                data: txtData.join(PROPERTY_SEPARATOR)
+            });
+        }
+        // Add DNS TXT records for each service.
+        (_e = didDocument.service) === null || _e === void 0 ? void 0 : _e.forEach((service, index) => {
+            const dnsRecordId = `s${index}`;
+            serviceIds.push(dnsRecordId);
+            let { id, type: t, serviceEndpoint: se } = service, customProperties = __rest(service, ["id", "type", "serviceEndpoint"]);
+            id = extractDidFragment(id);
+            se = Array.isArray(se) ? se.join(',') : se;
+            // Define the data for the DNS TXT record.
+            const txtData = Object.entries(Object.assign({ id, t, se }, customProperties)).map(([key, value]) => `${key}=${value}`);
+            const txtDataString = txtData.join(PROPERTY_SEPARATOR);
+            const data = chunkDataIfNeeded(txtDataString);
+            // Add a TXT record for the verification method.
+            txtRecords.push({
+                type: 'TXT',
+                name: `_${dnsRecordId}._did.`,
+                ttl: DNS_RECORD_TTL,
+                data
+            });
+        });
+        // Initialize the root DNS TXT record with the DID DHT specification version.
+        const rootRecord = [`v=${DID_DHT_SPECIFICATION_VERSION}`];
+        // Add verification methods to the root record.
+        if (verificationMethodIds.length) {
+            rootRecord.push(`vm=${verificationMethodIds.join(VALUE_SEPARATOR)}`);
+        }
+        // Add verification relationships to the root record.
+        Object.keys(DidVerificationRelationship).forEach((relationship) => {
+            var _a;
+            // Collect the verification method IDs for the given relationship.
+            const dnsRecordIds = (_a = didDocument[relationship]) === null || _a === void 0 ? void 0 : _a.map((id) => idLookup.get(id.split('#').pop()));
+            // If the relationship includes verification methods, add them to the root record.
+            if (dnsRecordIds) {
+                const recordName = DidDhtVerificationRelationship[relationship];
+                rootRecord.push(`${recordName}=${dnsRecordIds.join(VALUE_SEPARATOR)}`);
+            }
+        });
+        // Add services to the root record.
+        if (serviceIds.length) {
+            rootRecord.push(`svc=${serviceIds.join(VALUE_SEPARATOR)}`);
+        }
+        // If defined, add a DNS TXT record for each registered DID type.
+        if ((_f = didMetadata.types) === null || _f === void 0 ? void 0 : _f.length) {
+            // DID types can be specified as either a string or a number, so we need to normalize the
+            // values to integers.
+            const types = didMetadata.types;
+            const typeIntegers = types.map((type) => typeof type === 'string' ? DidDhtRegisteredDidType[type] : type);
+            txtRecords.push({
+                type: 'TXT',
+                name: '_typ._did.',
+                ttl: DNS_RECORD_TTL,
+                data: `id=${typeIntegers.join(VALUE_SEPARATOR)}`
+            });
+        }
+        // Add a DNS TXT record for the root record.
+        txtRecords.push({
+            type: 'TXT',
+            name: '_did.' + getUniqueDidSuffix(didDocument.id) + '.', // name of a Root Record MUST end in `<ID>.`
+            ttl: DNS_RECORD_TTL,
+            data: rootRecord.join(PROPERTY_SEPARATOR)
+        });
+        // Add an NS record for each authoritative gateway URI.
+        for (const gatewayUri of authoritativeGatewayUris || []) {
+            nsRecords.push({
+                type: 'NS',
+                name: '_did.' + getUniqueDidSuffix(didDocument.id) + '.', // name of an NS record a authoritative gateway MUST end in `<ID>.`
+                ttl: DNS_RECORD_TTL,
+                data: gatewayUri + '.'
+            });
+        }
+        // Create a DNS response packet with the authoritative answer flag set.
+        const dnsPacket = {
+            id: 0,
+            type: 'response',
+            flags: AUTHORITATIVE_ANSWER,
+            answers: [...txtRecords, ...nsRecords]
+        };
+        return dnsPacket;
+    });
+}
+/**
+ * Gets the unique portion of the DID identifier after the last `:` character.
+ * e.g. `did:dht:example` -> `example`
+ *
+ * @param did - The DID to extract the unique suffix from.
+ */
+function getUniqueDidSuffix(did) {
+    return did.split(':')[2];
+}
+//# sourceMappingURL=did-dht-dns.js.map

package/dist/esm/methods/did-dht-dns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"did-dht-dns.js","sourceRoot":"","sources":["../../../src/methods/did-dht-dns.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACtH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE5E;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,OAAO,EAAK,uBAAuB,CAAC,OAAO;IAC3C,MAAM,EAAM,uBAAuB,CAAC,SAAS;IAC7C,KAAK,EAAO,uBAAuB,CAAC,SAAS;IAC7C,OAAO,EAAK,uBAAuB,CAAC,SAAS;IAC7C,SAAS,EAAG,uBAAuB,CAAC,SAAS;IAC7C,SAAS,EAAG,uBAAuB,CAAC,SAAS;IAC7C,MAAM,EAAM,uBAAuB,CAAC,MAAM;CAClC,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAK,OAAO;IAC7C,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAG,QAAQ;IAC9C,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAG,OAAO;IAC7C,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAM,gBAAgB;CACvD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAuB;IACnE,OAAO;QACL,IAAI,EAAG,KAAK;QACZ,IAAI;QACJ,GAAG,EAAI,cAAc;QACrB,IAAI;KACL,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;SAAM,IAAI,OAAO,YAAY,UAAU,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAa,EAAU,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,sDAAsD,CAAC,CAAC;IACzG,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,GAA2B,EAAE,IAAY,EAA0B,EAAE;QAC1I,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACjB,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAA4B,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gDAAgD;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,8DAA8D;IACrG,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAgB,aAAa;yDAAC,EAAE,MAAM,EAAE,SAAS,EAGtD;;QACC,uCAAuC;QACvC,MAAM,WAAW,GAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QAEhD,sFAAsF;QACtF,MAAM,mBAAmB,GAAgB;YACvC,SAAS,EAAE,IAAI;SAChB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE3C,KAAK,MAAM,MAAM,IAAI,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,OAAO,mCAAI,EAAE,EAAE,CAAC;YAC9C,0DAA0D;YAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAEtC,2FAA2F;YAC3F,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAE3D,QAAQ,IAAI,EAAE,CAAC;gBACb,mCAAmC;gBACnC,KAAK,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACnC,oDAAoD;oBACpD,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAE/C,sDAAsD;oBACtD,WAAW,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;oBAEtD,MAAM;gBACR,CAAC;gBAED,+BAA+B;gBAC/B,KAAK,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACnC,oDAAoD;oBACpD,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAE/C,qDAAqD;oBACrD,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAE7F,MAAM;gBACR,CAAC;gBAED,gCAAgC;gBAChC,KAAK,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACjC,6EAA6E;oBAC7E,8FAA8F;oBAC9F,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAExE,gEAAgE;oBAChE,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;oBAE3D,oEAAoE;oBACpE,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBAEtD,0DAA0D;oBAC1D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;oBAEtF,SAAS,CAAC,GAAG,GAAG,SAAS,IAAI,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAA4B,CAAC,CAAC;oBAEhG,yGAAyG;oBACzG,0CAA0C;oBAC1C,6BAA6B;oBAC7B,yBAAyB;oBACzB,IAAI;oBAEJ,kEAAkE;oBAClE,6GAA6G;oBAC7G,MAAM,IAAI,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;oBAEjH,0EAA0E;oBAC1E,MAAA,WAAW,CAAC,kBAAkB,oCAA9B,WAAW,CAAC,kBAAkB,GAAK,EAAE,EAAC;oBAEtC,kFAAkF;oBAClF,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;oBAErC,mDAAmD;oBACnD,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC;wBAClC,EAAE,EAAa,QAAQ;wBACvB,IAAI,EAAW,YAAY;wBAC3B,UAAU,EAAK,CAAC,aAAD,CAAC,cAAD,CAAC,GAAI,MAAM;wBAC1B,YAAY,EAAG,SAAS;qBACzB,CAAC,CAAC;oBAEH,oFAAoF;oBACpF,2CAA2C;oBAC3C,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;oBAEpC,MAAM;gBACR,CAAC;gBAED,oBAAoB;gBACpB,KAAK,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACjC,qFAAqF;oBACrF,qDAAqD;oBACrD,MAAM,KAAqC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAtE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAA2D,EAAtD,gBAAgB,cAAhC,iBAAkC,CAAoC,CAAC;oBAE7E,6EAA6E;oBAC7E,wFAAwF;oBACxF,uHAAuH;oBACvH,MAAM,eAAe,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAExF,4EAA4E;oBAC5E,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAC/E,CAAC,CAAC,CAAC,EAAE,CAAC,CAAmB,EAA+B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3H,CAAC,CAAC;oBAEH,+DAA+D;oBAC/D,MAAA,WAAW,CAAC,OAAO,oCAAnB,WAAW,CAAC,OAAO,GAAK,EAAE,EAAC;oBAE3B,WAAW,CAAC,OAAO,CAAC,IAAI,iCACnB,iBAAiB,KACpB,EAAE,EAAK,GAAG,MAAM,IAAI,EAAE,EAAE,EACxB,IAAI,EAAG,CAAC,EACR,eAAe,IACf,CAAC;oBAEH,MAAM;gBACR,CAAC;gBAED,yBAAyB;gBACzB,KAAK,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACnC,qDAAqD;oBACrD,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAExD,+EAA+E;oBAC/E,mBAAmB,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,WAAmB,EAAU,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;oBAEnH,MAAM;gBACR,CAAC;gBAED,uBAAuB;gBACvB,KAAK,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACnC,yFAAyF;oBACzF,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAY,EAAE,CAAC,IAAI;yBAC1D,KAAK,CAAC,eAAe,CAAC;yBACtB,GAAG,CAAC,CAAC,WAAmB,EAAsB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;yBAC3E,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;oBAExD,uFAAuF;oBACvF,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAEvE,mEAAmE;oBACnE,IAAI,IAAI,EAAE,CAAC;wBAAA,WAAW,CAAC,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;oBAAA,CAAC;oBACpE,IAAI,GAAG,EAAE,CAAC;wBAAA,WAAW,CAAC,eAAe,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;oBAAA,CAAC;oBACnE,IAAI,GAAG,EAAE,CAAC;wBAAA,WAAW,CAAC,oBAAoB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;oBAAA,CAAC;oBACxE,IAAI,GAAG,EAAE,CAAC;wBAAA,WAAW,CAAC,oBAAoB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;oBAAA,CAAC;oBACxE,IAAI,GAAG,EAAE,CAAC;wBAAA,WAAW,CAAC,YAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;oBAAA,CAAC;oBAEhE,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAgB,WAAW;yDAAC,EAAE,WAAW,EAAE,WAAW,EAAE,wBAAwB,EAAE,gBAAgB,EAKvG;;QACC,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,qBAAqB,GAAa,EAAE,CAAC;QAE3C,2EAA2E;QAC3E,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC;YAEpD,MAAM,wBAAwB,CAAC;gBAC7B,MAAM,EAAE,WAAW,CAAC,EAAE;gBACtB,gBAAgB;aACjB,CAAC,CAAC;YAEH,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAG,KAAK;gBACZ,IAAI,EAAG,YAAY;gBACnB,GAAG,EAAI,cAAc;gBACrB,IAAI,EAAG,MAAM,WAAW,MAAM,SAAS,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QAED,8EAA8E;QAC9E,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;YAC5B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAG,KAAK;gBACZ,IAAI,EAAG,YAAY;gBACnB,GAAG,EAAI,cAAc;gBACrB,IAAI,EAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;QAED,4EAA4E;QAC5E,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC;gBACtD,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC9C,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAG,KAAK;gBACZ,IAAI,EAAG,YAAY;gBACnB,GAAG,EAAI,cAAc;gBACrB,IAAI,EAAG,UAAU;aAClB,CAAC,CAAC;QACL,CAAC;QAED,oDAAoD;QACpD,KAAK,MAAM,CAAC,KAAK,EAAE,kBAAkB,CAAC,IAAI,MAAA,MAAA,WAAW,CAAC,kBAAkB,0CAAE,OAAO,EAAE,mCAAI,EAAE,EAAE,CAAC;YAC1F,MAAM,WAAW,GAAG,IAAI,KAAK,EAAE,CAAC;YAChC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,CAAC,kCAAkC;YAC5F,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAEpC,MAAM,SAAS,GAAG,kBAAkB,CAAC,YAAY,CAAC;YAElD,IAAI,CAAC,CAAC,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,GAAG,KAAI,SAAS,CAAC,GAAG,IAAI,qBAAqB,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,oBAAoB,EAAE,wBAAwB,kBAAkB,CAAC,EAAE,uCAAuC,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,GAAG,mCAAI,WAAW,EAAE,CAAC,CAAC;YAC7K,CAAC;YAED,mEAAmE;YACnE,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAA2C,CAAC,CAAC;YAE/F,0DAA0D;YAC1D,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YAEzF,gEAAgE;YAChE,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;YAE5E,0CAA0C;YAC1C,MAAM,OAAO,GAAG,CAAC,KAAK,OAAO,EAAE,EAAE,KAAK,kBAAkB,EAAE,CAAC,CAAC;YAC5D,8GAA8G;YAC9G,wDAAwD;YACxD,IAAI,QAAQ,KAAK,GAAG,IAAI,CAAA,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,MAAK,QAAQ,EAAE,CAAC;gBACpF,OAAO,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC;YACpC,CAAC;YACD,mGAAmG;YACnG,IAAI,SAAS,CAAC,GAAG,KAAK,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,4FAA4F;YAC5F,IAAI,kBAAkB,CAAC,UAAU,KAAK,WAAW,CAAC,EAAE,EAAE,CAAC;gBAAA,OAAO,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC;YAAA,CAAC;YAE3G,gDAAgD;YAChD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAG,KAAK;gBACZ,IAAI,EAAG,IAAI,WAAW,QAAQ;gBAC9B,GAAG,EAAI,cAAc;gBACrB,IAAI,EAAG,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;QAED,wCAAwC;QACxC,MAAA,WAAW,CAAC,OAAO,0CAAE,OAAO,CAAC,CAAC,OAAmB,EAAE,KAAa,EAAQ,EAAE;YACxE,MAAM,WAAW,GAAG,IAAI,KAAK,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAE7B,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,eAAe,EAAE,EAAE,KAA0B,OAAO,EAA5B,gBAAgB,UAAK,OAAO,EAAnE,iCAAyD,CAAU,CAAC;YACxE,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAE,CAAC;YAC7B,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAE3C,0CAA0C;YAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,iBAAG,EAAE,EAAE,CAAC,EAAE,EAAE,IAAK,gBAAgB,EAAG,CAAC,GAAG,CACpE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAoB,EAAU,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAC/D,CAAC;YAEF,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;YAE9C,gDAAgD;YAChD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAG,KAAK;gBACZ,IAAI,EAAG,IAAI,WAAW,QAAQ;gBAC9B,GAAG,EAAI,cAAc;gBACrB,IAAI;aACL,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,6EAA6E;QAC7E,MAAM,UAAU,GAAa,CAAC,KAAK,6BAA6B,EAAE,CAAC,CAAC;QAEpE,+CAA+C;QAC/C,IAAI,qBAAqB,CAAC,MAAM,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,qDAAqD;QACrD,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,CAAC,YAAoB,EAAQ,EAAE;;YAC9E,kEAAkE;YAClE,MAAM,YAAY,GAAG,MAAC,WAAW,CAAC,YAAiC,CAA0B,0CACzF,GAAG,CAAC,CAAC,EAAU,EAAsB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,CAAC,CAAC;YAEhF,kFAAkF;YAClF,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,UAAU,GAAG,8BAA8B,CAAC,YAA2D,CAAC,CAAC;gBAC/G,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,mCAAmC;QACnC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtB,UAAU,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,iEAAiE;QACjE,IAAI,MAAA,WAAW,CAAC,KAAK,0CAAE,MAAM,EAAE,CAAC;YAC9B,yFAAyF;YACzF,sBAAsB;YACtB,MAAM,KAAK,GAAG,WAAW,CAAC,KAA2E,CAAC;YACtG,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAoE,EAA2B,EAAE,CAC/H,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAChE,CAAC;YAEF,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAG,KAAK;gBACZ,IAAI,EAAG,YAAY;gBACnB,GAAG,EAAI,cAAc;gBACrB,IAAI,EAAG,MAAM,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;QAED,4CAA4C;QAC5C,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAG,KAAK;YACZ,IAAI,EAAG,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,4CAA4C;YACvG,GAAG,EAAI,cAAc;YACrB,IAAI,EAAG,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC;SAC3C,CAAC,CAAC;QAEH,uDAAuD;QACvD,KAAK,MAAM,UAAU,IAAI,wBAAwB,IAAI,EAAE,EAAE,CAAC;YACxD,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAG,IAAI;gBACX,IAAI,EAAG,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,mEAAmE;gBAC9H,GAAG,EAAI,cAAc;gBACrB,IAAI,EAAG,UAAU,GAAG,GAAG;aACxB,CAAC,CAAC;QACL,CAAC;QAED,uEAAuE;QACvE,MAAM,SAAS,GAAW;YACxB,EAAE,EAAQ,CAAC;YACX,IAAI,EAAM,UAAU;YACpB,KAAK,EAAK,oBAAoB;YAC9B,OAAO,EAAG,CAAC,GAAG,UAAU,EAAE,GAAG,SAAS,CAAC;SACxC,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;CAAA;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC"}

package/dist/esm/methods/did-dht-pkarr.js

@@ -0,0 +1,168 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import bencode from 'bencode';
+import { Convert } from '@enbox/common';
+import { Ed25519 } from '@enbox/crypto';
+import { DidError, DidErrorCode } from '../did-error.js';
+import { decode as dnsPacketDecode, encode as dnsPacketEncode } from '@dnsquery/dns-packet';
+/**
+ * Constructs a Pkarr URL from public key bytes and a gateway URI.
+ *
+ * @param publicKeyBytes - The public key bytes to z-base-32 encode.
+ * @param gatewayUri - The gateway URI to use as the base URL.
+ * @returns The full Pkarr URL.
+ */
+function pkarrUrl(publicKeyBytes, gatewayUri) {
+    const identifier = Convert.uint8Array(publicKeyBytes).toBase32Z();
+    return new URL(identifier, gatewayUri).href;
+}
+/**
+ * Retrieves a signed BEP44 message from a DID DHT Gateway or Pkarr Relay server.
+ *
+ * @see {@link https://github.com/Nuhvi/pkarr/blob/main/design/relays.md | Pkarr Relay design}
+ *
+ * @param params - The parameters for the get operation.
+ * @param params.gatewayUri - The DID DHT Gateway or Pkarr Relay URI.
+ * @param params.publicKeyBytes - The public key bytes of the Identity Key, z-base-32 encoded.
+ * @returns A promise resolving to a BEP44 message containing the signed DNS packet.
+ */
+export function pkarrGet(_a) {
+    return __awaiter(this, arguments, void 0, function* ({ gatewayUri, publicKeyBytes }) {
+        // The identifier (key in the DHT) is the z-base-32 encoding of the Identity Key.
+        const identifier = Convert.uint8Array(publicKeyBytes).toBase32Z();
+        // Concatenate the gateway URI with the identifier to form the full URL.
+        const url = pkarrUrl(publicKeyBytes, gatewayUri);
+        // Transmit the Get request to the DID DHT Gateway or Pkarr Relay and get the response.
+        let response;
+        try {
+            response = yield fetch(url, { method: 'GET' });
+            if (!response.ok) {
+                throw new DidError(DidErrorCode.NotFound, `Pkarr record not found for: ${identifier}`);
+            }
+        }
+        catch (error) {
+            if (error instanceof DidError) {
+                throw error;
+            }
+            throw new DidError(DidErrorCode.InternalError, `Failed to fetch Pkarr record: ${error.message}`);
+        }
+        // Read the Fetch Response stream into a byte array.
+        const messageBytes = yield response.arrayBuffer();
+        if (!messageBytes) {
+            throw new DidError(DidErrorCode.NotFound, `Pkarr record not found for: ${identifier}`);
+        }
+        if (messageBytes.byteLength < 72) {
+            throw new DidError(DidErrorCode.InvalidDidDocumentLength, `Pkarr response must be at least 72 bytes but got: ${messageBytes.byteLength}`);
+        }
+        if (messageBytes.byteLength > 1072) {
+            throw new DidError(DidErrorCode.InvalidDidDocumentLength, `Pkarr response exceeds 1000 byte limit: ${messageBytes.byteLength}`);
+        }
+        // Decode the BEP44 message from the byte array.
+        const bep44Message = {
+            k: publicKeyBytes,
+            seq: Number(new DataView(messageBytes).getBigUint64(64)),
+            sig: new Uint8Array(messageBytes, 0, 64),
+            v: new Uint8Array(messageBytes, 72)
+        };
+        return bep44Message;
+    });
+}
+/**
+ * Publishes a signed BEP44 message to a DID DHT Gateway or Pkarr Relay server.
+ *
+ * @see {@link https://github.com/Nuhvi/pkarr/blob/main/design/relays.md | Pkarr Relay design}
+ *
+ * @param params - The parameters to use when publishing a signed BEP44 message to a Pkarr relay server.
+ * @param params.gatewayUri - The DID DHT Gateway or Pkarr Relay URI.
+ * @param params.bep44Message - The BEP44 message to be published, containing the signed DNS packet.
+ * @returns A promise resolving to `true` if the message was successfully published, otherwise `false`.
+ */
+export function pkarrPut(_a) {
+    return __awaiter(this, arguments, void 0, function* ({ gatewayUri, bep44Message }) {
+        // The identifier (key in the DHT) is the z-base-32 encoding of the Identity Key.
+        const identifier = Convert.uint8Array(bep44Message.k).toBase32Z();
+        // Concatenate the gateway URI with the identifier to form the full URL.
+        const url = pkarrUrl(bep44Message.k, gatewayUri);
+        // Construct the body of the request according to the Pkarr relay specification.
+        const body = new Uint8Array(bep44Message.v.length + 72);
+        body.set(bep44Message.sig, 0);
+        new DataView(body.buffer).setBigUint64(bep44Message.sig.length, BigInt(bep44Message.seq));
+        body.set(bep44Message.v, bep44Message.sig.length + 8);
+        // Transmit the Put request to the Pkarr relay and get the response.
+        let response;
+        try {
+            response = yield fetch(url, {
+                method: 'PUT',
+                headers: { 'Content-Type': 'application/octet-stream' },
+                body
+            });
+        }
+        catch (error) {
+            throw new DidError(DidErrorCode.InternalError, `Failed to put Pkarr record for identifier ${identifier}: ${error.message}`);
+        }
+        // Return `true` if the DHT request was successful, otherwise return `false`.
+        return response.ok;
+    });
+}
+/**
+ * Creates a BEP44 put message, which is used to publish a DID document to the DHT network.
+ *
+ * @param params - The parameters to use when creating the BEP44 put message.
+ * @param params.dnsPacket - The DNS packet to encode in the BEP44 message.
+ * @param params.publicKeyBytes - The public key bytes of the Identity Key.
+ * @param params.signer - Signer that can sign and verify data using the Identity Key.
+ * @returns A promise that resolves to a BEP44 put message.
+ */
+export function createBep44PutMessage(_a) {
+    return __awaiter(this, arguments, void 0, function* ({ dnsPacket, publicKeyBytes, signer }) {
+        // BEP44 requires that the sequence number be a monotoically increasing integer, so we use the
+        // current time in seconds since Unix epoch as a simple solution. Higher precision is not
+        // recommended since DID DHT documents are not expected to change frequently and there are
+        // small differences in system clocks that can cause issues if multiple clients are publishing
+        // updates to the same DID document.
+        const sequenceNumber = Math.ceil(Date.now() / 1000);
+        // Encode the DNS packet into a byte array containing a UDP payload.
+        const encodedDnsPacket = dnsPacketEncode(dnsPacket);
+        // Encode the sequence and DNS byte array to bencode format.
+        const bencodedData = bencode.encode({ seq: sequenceNumber, v: encodedDnsPacket }).subarray(1, -1);
+        if (bencodedData.length > 1000) {
+            throw new DidError(DidErrorCode.InvalidDidDocumentLength, `DNS packet exceeds the 1000 byte maximum size: ${bencodedData.length} bytes`);
+        }
+        // Sign the BEP44 message.
+        const signature = yield signer.sign({ data: bencodedData });
+        return { k: publicKeyBytes, seq: sequenceNumber, sig: signature, v: encodedDnsPacket };
+    });
+}
+/**
+ * Parses and verifies a BEP44 Get message, converting it to a DNS packet.
+ *
+ * @param params - The parameters to use when verifying and parsing the BEP44 Get response message.
+ * @param params.bep44Message - The BEP44 message to verify and parse.
+ * @returns A promise that resolves to a DNS packet.
+ */
+export function parseBep44GetMessage(_a) {
+    return __awaiter(this, arguments, void 0, function* ({ bep44Message }) {
+        // Convert the public key byte array to JWK format.
+        const publicKey = yield Ed25519.bytesToPublicKey({ publicKeyBytes: bep44Message.k });
+        // Encode the sequence and DNS byte array to bencode format.
+        const bencodedData = bencode.encode({ seq: bep44Message.seq, v: bep44Message.v }).subarray(1, -1);
+        // Verify the signature of the BEP44 message.
+        const isValid = yield Ed25519.verify({
+            key: publicKey,
+            signature: bep44Message.sig,
+            data: bencodedData
+        });
+        if (!isValid) {
+            throw new DidError(DidErrorCode.InvalidSignature, `Invalid signature for DHT BEP44 message`);
+        }
+        return dnsPacketDecode(bep44Message.v);
+    });
+}
+//# sourceMappingURL=did-dht-pkarr.js.map

package/dist/esm/methods/did-dht-pkarr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"did-dht-pkarr.js","sourceRoot":"","sources":["../../../src/methods/did-dht-pkarr.ts"],"names":[],"mappings":";;;;;;;;;AAKA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5F;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,cAA0B,EAAE,UAAkB;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,CAAC;IAClE,OAAO,IAAI,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAgB,QAAQ;yDAAC,EAAE,UAAU,EAAE,cAAc,EAG1D;QACC,iFAAiF;QACjF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,CAAC;QAElE,wEAAwE;QACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAEjD,uFAAuF;QACvF,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAE/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,+BAA+B,UAAU,EAAE,CAAC,CAAC;YACzF,CAAC;QAEH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;gBAAA,MAAM,KAAK,CAAC;YAAA,CAAC;YAC7C,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,oDAAoD;QACpD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAElD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,+BAA+B,UAAU,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,YAAY,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,wBAAwB,EAAE,qDAAqD,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5I,CAAC;QAED,IAAI,YAAY,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,wBAAwB,EAAE,2CAA2C,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC;QAClI,CAAC;QAED,gDAAgD;QAChD,MAAM,YAAY,GAAiB;YACjC,CAAC,EAAK,cAAc;YACpB,GAAG,EAAG,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACzD,GAAG,EAAG,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,CAAC,EAAK,IAAI,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC;SACvC,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,UAAgB,QAAQ;yDAAC,EAAE,UAAU,EAAE,YAAY,EAGxD;QACC,iFAAiF;QACjF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAElE,wEAAwE;QACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAEjD,gFAAgF;QAChF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEtD,oEAAoE;QACpE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAI,KAAK;gBACf,OAAO,EAAG,EAAE,cAAc,EAAE,0BAA0B,EAAE;gBACxD,IAAI;aACL,CAAC,CAAC;QAEL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,6CAA6C,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9H,CAAC;QAED,6EAA6E;QAC7E,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,UAAgB,qBAAqB;yDAAC,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAI9E;QACC,8FAA8F;QAC9F,yFAAyF;QACzF,0FAA0F;QAC1F,8FAA8F;QAC9F,oCAAoC;QACpC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEpD,oEAAoE;QACpE,MAAM,gBAAgB,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAEpD,4DAA4D;QAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAElG,IAAI,YAAY,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,wBAAwB,EAAE,kDAAkD,YAAY,CAAC,MAAM,QAAQ,CAAC,CAAC;QAC3I,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAE5D,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACzF,CAAC;CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAgB,oBAAoB;yDAAC,EAAE,YAAY,EAExD;QACC,mDAAmD;QACnD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;QAErF,4DAA4D;QAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAElG,6CAA6C;QAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;YACnC,GAAG,EAAS,SAAS;YACrB,SAAS,EAAG,YAAY,CAAC,GAAG;YAC5B,IAAI,EAAQ,YAAY;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;CAAA"}