@enbox/dwn-sdk-js 0.0.1

package/dist/esm/tests/features/owner-delegated-grant.spec.js

@@ -0,0 +1,584 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import chaiAsPromised from 'chai-as-promised';
+import minimalProtocolDefinition from '../vectors/protocol-definitions/minimal.json' assert { type: 'json' };
+import sinon from 'sinon';
+import chai, { expect } from 'chai';
+import { DataStream } from '../../src/utils/data-stream.js';
+import { Dwn } from '../../src/dwn.js';
+import { DwnErrorCode } from '../../src/core/dwn-error.js';
+import { Jws } from '../../src/utils/jws.js';
+import { PermissionGrant } from '../../src/protocols/permission-grant.js';
+import { RecordsWrite } from '../../src/interfaces/records-write.js';
+import { TestDataGenerator } from '../utils/test-data-generator.js';
+import { TestEventStream } from '../test-event-stream.js';
+import { TestStores } from '../test-stores.js';
+import { Time } from '../../src/utils/time.js';
+import { DidKey, UniversalResolver } from '@enbox/dids';
+import { DwnInterfaceName, DwnMethodName, Encoder, PermissionsProtocol, ProtocolsConfigure } from '../../src/index.js';
+chai.use(chaiAsPromised);
+export function testOwnerDelegatedGrant() {
+    describe('owner delegated grant', () => __awaiter(this, void 0, void 0, function* () {
+        let didResolver;
+        let messageStore;
+        let dataStore;
+        let resumableTaskStore;
+        let eventLog;
+        let eventStream;
+        let dwn;
+        // important to follow the `before` and `after` pattern to initialize and clean the stores in tests
+        // so that different test suites can reuse the same backend store for testing
+        before(() => __awaiter(this, void 0, void 0, function* () {
+            didResolver = new UniversalResolver({ didResolvers: [DidKey] });
+            const stores = TestStores.get();
+            messageStore = stores.messageStore;
+            dataStore = stores.dataStore;
+            resumableTaskStore = stores.resumableTaskStore;
+            eventLog = stores.eventLog;
+            eventStream = TestEventStream.get();
+            dwn = yield Dwn.create({ didResolver, messageStore, dataStore, eventLog, eventStream, resumableTaskStore });
+        }));
+        beforeEach(() => __awaiter(this, void 0, void 0, function* () {
+            sinon.restore(); // wipe all previous stubs/spies/mocks/fakes
+            // clean up before each test rather than after so that a test does not depend on other tests to do the clean up
+            yield messageStore.clear();
+            yield dataStore.clear();
+            yield resumableTaskStore.clear();
+            yield eventLog.clear();
+        }));
+        after(() => __awaiter(this, void 0, void 0, function* () {
+            yield dwn.close();
+        }));
+        describe('RecordsWrite.parse()', () => __awaiter(this, void 0, void 0, function* () {
+            it('should throw if a message invokes an owner-delegated grant (ID) but the owner-delegated grant is not given', () => __awaiter(this, void 0, void 0, function* () {
+                const alice = yield TestDataGenerator.generatePersona();
+                const bob = yield TestDataGenerator.generatePersona();
+                const appX = yield TestDataGenerator.generatePersona();
+                // Alice grants App X to write as her for the chat protocol
+                const scope = {
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                    protocol: 'chat'
+                };
+                const grantToAppX = yield PermissionsProtocol.createGrant({
+                    delegated: true, // this is a delegated grant
+                    dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                    description: 'Allow App X to write as me in chat protocol',
+                    grantedTo: appX.did,
+                    scope,
+                    signer: Jws.createSigner(alice)
+                });
+                // Bob creates a RecordsWrite message
+                const recordsWrite = yield RecordsWrite.create({
+                    signer: Jws.createSigner(bob),
+                    dataFormat: 'application/octet-stream',
+                    data: TestDataGenerator.randomBytes(10),
+                });
+                // App X signs over Bob's RecordsWrite as DWN owner but does not include the delegated grant (we remove it below)
+                yield recordsWrite.signAsOwnerDelegate(Jws.createSigner(appX), grantToAppX.dataEncodedMessage);
+                delete recordsWrite.message.authorization.ownerDelegatedGrant; // intentionally remove `ownerDelegatedGrant`
+                const parsePromise = RecordsWrite.parse(recordsWrite.message);
+                yield expect(parsePromise).to.be.rejectedWith(DwnErrorCode.RecordsOwnerDelegatedGrantAndIdExistenceMismatch);
+            }));
+            it('should throw if a message includes an owner-delegated grant but does not reference it in owner signature', () => __awaiter(this, void 0, void 0, function* () {
+                const alice = yield TestDataGenerator.generatePersona();
+                const bob = yield TestDataGenerator.generatePersona();
+                const appX = yield TestDataGenerator.generatePersona();
+                // Alice grants App X to write as her for the chat protocol
+                const scope = {
+                    interface: DwnInterfaceName.Records,
+                    method: DwnMethodName.Write,
+                    protocol: 'chat'
+                };
+                const grantToAppX = yield PermissionsProtocol.createGrant({
+                    delegated: true, // this is a delegated grant
+                    dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                    description: 'Allow App X to write as me in chat protocol',
+                    grantedTo: appX.did,
+                    scope,
+                    signer: Jws.createSigner(alice)
+                });
+                // Bob creates a RecordsWrite message
+                const recordsWrite = yield RecordsWrite.create({
+                    signer: Jws.createSigner(bob),
+                    dataFormat: 'application/octet-stream',
+                    data: TestDataGenerator.randomBytes(10),
+                });
+                // App X attempts to sign over Bob's RecordsWrite as the DWN owner by including an owner-delegated grant
+                // but does not reference the grant ID in owner signature (we remove it below)
+                yield recordsWrite.signAsOwnerDelegate(Jws.createSigner(appX), grantToAppX.dataEncodedMessage);
+                const ownerSignaturePayloadCopy = Object.assign({}, recordsWrite.ownerSignaturePayload);
+                delete ownerSignaturePayloadCopy.delegatedGrantId; // intentionally remove `delegatedGrantId` in ownerSignature
+                recordsWrite.message.authorization.ownerSignature.payload = Encoder.stringToBase64Url(JSON.stringify(ownerSignaturePayloadCopy));
+                const parsePromise = RecordsWrite.parse(recordsWrite.message);
+                yield expect(parsePromise).to.be.rejectedWith(DwnErrorCode.RecordsOwnerDelegatedGrantAndIdExistenceMismatch);
+            }));
+        }));
+        it('should only allow correct entity invoking an owner-delegated grant to write', () => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            // scenario:
+            // 1. Alice installs a protocol
+            // 2. Alice creates a delegated grant for app X to write in the protocol
+            // 3. A third party (Bob) authors a RecordsWrite
+            // 4. Sanity test that Bob's RecordsWrite cannot be written to Alice's DWN by itself
+            // 5. Verify that App Y cannot write Bob's message in Alice's DWN by invoking the delegated grant for App X.
+            // 6. Verify that App X can successfully write Bob's message in Alice's DWN by invoking an owner-delegated grant
+            // 7. Sanity verify the RecordsWrite written by App X
+            const alice = yield TestDataGenerator.generateDidKeyPersona();
+            const bob = yield TestDataGenerator.generateDidKeyPersona();
+            const appX = yield TestDataGenerator.generateDidKeyPersona();
+            const appY = yield TestDataGenerator.generateDidKeyPersona();
+            // 1. Alice installs a protocol
+            const protocolDefinition = minimalProtocolDefinition;
+            const protocol = minimalProtocolDefinition.protocol;
+            const protocolsConfig = yield ProtocolsConfigure.create({
+                signer: Jws.createSigner(alice),
+                definition: protocolDefinition
+            });
+            const protocolsConfigureReply = yield dwn.processMessage(alice.did, protocolsConfig.message);
+            expect(protocolsConfigureReply.status.code).to.equal(202);
+            // 2. Alice creates a delegated grant for app X to write in the protocol
+            const scope = {
+                interface: DwnInterfaceName.Records,
+                method: DwnMethodName.Write,
+                protocol
+            };
+            const appXGrant = yield PermissionsProtocol.createGrant({
+                delegated: true, // this is a delegated grant
+                dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                grantedTo: appX.did,
+                scope: scope,
+                signer: Jws.createSigner(alice)
+            });
+            // 3. A third party (Bob) authors a RecordsWrite
+            const bobRecordsWriteBytes = new TextEncoder().encode('message from Bob');
+            const bobRecordsWrite = yield RecordsWrite.create({
+                signer: Jws.createSigner(bob),
+                protocol,
+                protocolPath: 'foo', // this comes from `types` in protocol definition
+                dataFormat: 'any-format',
+                data: bobRecordsWriteBytes
+            });
+            // 4. Sanity test that Bob's RecordsWrite cannot be written to Alice's DWN by itself
+            const unauthorizedRecordsWriteReply = yield dwn.processMessage(alice.did, bobRecordsWrite.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(unauthorizedRecordsWriteReply.status.code).to.equal(401);
+            // 5. Verify that App Y cannot write Bob's message in Alice's DWN by invoking the delegated grant for App X.
+            const appYAugmentedWrite = yield RecordsWrite.parse(bobRecordsWrite.message);
+            yield appYAugmentedWrite.signAsOwnerDelegate(Jws.createSigner(appY), appXGrant.dataEncodedMessage);
+            const appYWriteReply = yield dwn.processMessage(alice.did, appYAugmentedWrite.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(appYWriteReply.status.code).to.equal(400);
+            expect(appYWriteReply.status.detail).to.contain(DwnErrorCode.RecordsOwnerDelegatedGrantGrantedToAndOwnerSignatureMismatch);
+            // 6. Verify that App X can successfully write Bob's message in Alice's DWN by invoking an owner-delegated grant
+            const appXAugmentedWrite = yield RecordsWrite.parse(bobRecordsWrite.message);
+            yield appXAugmentedWrite.signAsOwnerDelegate(Jws.createSigner(appX), appXGrant.dataEncodedMessage);
+            const appXWriteReply = yield dwn.processMessage(alice.did, appXAugmentedWrite.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(appXWriteReply.status.code).to.equal(202);
+            // 7. Sanity verify the RecordsWrite written by App X
+            const recordsQuery = yield TestDataGenerator.generateRecordsQuery({
+                author: alice,
+                filter: { protocol }
+            });
+            const recordsQueryReply = yield dwn.processMessage(alice.did, recordsQuery.message);
+            expect(recordsQueryReply.status.code).to.equal(200);
+            expect((_a = recordsQueryReply.entries) === null || _a === void 0 ? void 0 : _a.length).to.equal(1);
+            const fetchedEntry = recordsQueryReply.entries[0];
+            expect(fetchedEntry.encodedData).to.equal(Encoder.bytesToBase64Url(bobRecordsWriteBytes));
+            const fetchedRecordsWrite = yield RecordsWrite.parse(fetchedEntry);
+            expect(fetchedRecordsWrite.author).to.equal(bob.did);
+        }));
+        it('should not allow entity using a non-delegated grant as an owner-delegated grant to invoke write', () => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            // scenario:
+            // 1. Alice installs a protocol
+            // 2. Alice creates a non-delegated grant for app X to write in the protocol
+            // 3. A third party (Bob) authors a RecordsWrite
+            // 4. Verify that App X cannot write Bob's message in Alice's DWN by invoking an non-delegated grant
+            // 5. Sanity verify the RecordsWrite is not written by App X
+            const alice = yield TestDataGenerator.generateDidKeyPersona();
+            const bob = yield TestDataGenerator.generateDidKeyPersona();
+            const appX = yield TestDataGenerator.generateDidKeyPersona();
+            // 1. Alice installs a protocol
+            const protocolDefinition = minimalProtocolDefinition;
+            const protocol = minimalProtocolDefinition.protocol;
+            const protocolsConfig = yield ProtocolsConfigure.create({
+                signer: Jws.createSigner(alice),
+                definition: protocolDefinition
+            });
+            const protocolsConfigureReply = yield dwn.processMessage(alice.did, protocolsConfig.message);
+            expect(protocolsConfigureReply.status.code).to.equal(202);
+            // 2. Alice creates a non-delegated grant for app X to write in the protocol
+            const scope = {
+                interface: DwnInterfaceName.Records,
+                method: DwnMethodName.Write,
+                protocol
+            };
+            const appXGrant = yield PermissionsProtocol.createGrant({
+                // delegated   : true, // intentionally commented out to show that this is not a delegated grant
+                dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                grantedTo: appX.did,
+                scope: scope,
+                signer: Jws.createSigner(alice)
+            });
+            // 3. A third party (Bob) authors a RecordsWrite
+            const bobRecordsWriteBytes = new TextEncoder().encode('message from Bob');
+            const bobRecordsWrite = yield RecordsWrite.create({
+                signer: Jws.createSigner(bob),
+                protocol,
+                protocolPath: 'foo', // this comes from `types` in protocol definition
+                dataFormat: 'any-format',
+                data: bobRecordsWriteBytes
+            });
+            // 4. Verify that App X cannot write Bob's message in Alice's DWN by invoking an non-delegated grant
+            const appXAugmentedWrite = yield RecordsWrite.parse(bobRecordsWrite.message);
+            yield appXAugmentedWrite.signAsOwnerDelegate(Jws.createSigner(appX), appXGrant.dataEncodedMessage);
+            const appXWriteReply = yield dwn.processMessage(alice.did, appXAugmentedWrite.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(appXWriteReply.status.code).to.equal(400);
+            expect(appXWriteReply.status.detail).to.contain(DwnErrorCode.RecordsOwnerDelegatedGrantNotADelegatedGrant);
+            // 5. Sanity verify the RecordsWrite is not written by App X
+            const recordsQuery = yield TestDataGenerator.generateRecordsQuery({
+                author: alice,
+                filter: { protocol }
+            });
+            const recordsQueryReply = yield dwn.processMessage(alice.did, recordsQuery.message);
+            expect(recordsQueryReply.status.code).to.equal(200);
+            expect((_a = recordsQueryReply.entries) === null || _a === void 0 ? void 0 : _a.length).to.equal(0);
+        }));
+        it('should fail if owner-delegated grant invoked for write has a mismatching interface method or protocol scope', () => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            // scenario:
+            // 1. Alice installs a protocol
+            // 2. Alice creates a delegated grant for app X to read in the protocol
+            // 3. Alice creates a delegated grant for app X to write in another random protocol
+            // 4. A third party (Bob) authors a RecordsWrite
+            // 5. Verify that App X cannot write Bob's message in Alice's DWN by invoking a delegated grant for RecordsRead
+            // 6. Verify that App X cannot write Bob's message in Alice's DWN by invoking a delegated grant for writing in another random protocol
+            // 7. Sanity verify the RecordsWrite is not written by App X
+            const alice = yield TestDataGenerator.generateDidKeyPersona();
+            const bob = yield TestDataGenerator.generateDidKeyPersona();
+            const appX = yield TestDataGenerator.generateDidKeyPersona();
+            // 1. Alice installs a protocol
+            const protocolDefinition = minimalProtocolDefinition;
+            const protocol = minimalProtocolDefinition.protocol;
+            const protocolsConfig = yield ProtocolsConfigure.create({
+                signer: Jws.createSigner(alice),
+                definition: protocolDefinition
+            });
+            const protocolsConfigureReply = yield dwn.processMessage(alice.did, protocolsConfig.message);
+            expect(protocolsConfigureReply.status.code).to.equal(202);
+            // 2. Alice creates a delegated grant for app X to read in the protocol
+            const readScope = {
+                interface: DwnInterfaceName.Records,
+                method: DwnMethodName.Read,
+                protocol
+            };
+            const appXGrantToRead = yield PermissionsProtocol.createGrant({
+                delegated: true,
+                dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                grantedTo: appX.did,
+                scope: readScope,
+                signer: Jws.createSigner(alice)
+            });
+            // 3. Alice creates a delegated grant for app X to write in another random protocol
+            const randomProtocolWriteScope = {
+                interface: DwnInterfaceName.Records,
+                method: DwnMethodName.Write,
+                protocol: `random-protocol`
+            };
+            const appXGrantToWriteInRandomProtocol = yield PermissionsProtocol.createGrant({
+                delegated: true,
+                dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                grantedTo: appX.did,
+                scope: randomProtocolWriteScope,
+                signer: Jws.createSigner(alice)
+            });
+            // 4. A third party (Bob) authors a RecordsWrite
+            const bobRecordsWriteBytes = new TextEncoder().encode('message from Bob');
+            const bobRecordsWrite = yield RecordsWrite.create({
+                signer: Jws.createSigner(bob),
+                protocol,
+                protocolPath: 'foo', // this comes from `types` in protocol definition
+                dataFormat: 'any-format',
+                data: bobRecordsWriteBytes
+            });
+            // 5. Verify that App X cannot write Bob's message in Alice's DWN by invoking a delegated grant for RecordsRead
+            const appXAugmentedWrite = yield RecordsWrite.parse(bobRecordsWrite.message);
+            yield appXAugmentedWrite.signAsOwnerDelegate(Jws.createSigner(appX), appXGrantToRead.dataEncodedMessage);
+            const appXWriteReply = yield dwn.processMessage(alice.did, appXAugmentedWrite.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(appXWriteReply.status.code).to.equal(401);
+            expect(appXWriteReply.status.detail).to.contain(DwnErrorCode.GrantAuthorizationMethodMismatch);
+            // 6. Verify that App X cannot write Bob's message in Alice's DWN by invoking a delegated grant for writing in another random protocol
+            const appXAugmentedWrite2 = yield RecordsWrite.parse(bobRecordsWrite.message);
+            yield appXAugmentedWrite2.signAsOwnerDelegate(Jws.createSigner(appX), appXGrantToWriteInRandomProtocol.dataEncodedMessage);
+            const appXWriteReply2 = yield dwn.processMessage(alice.did, appXAugmentedWrite2.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(appXWriteReply2.status.code).to.equal(401);
+            expect(appXWriteReply2.status.detail).to.contain(DwnErrorCode.RecordsGrantAuthorizationScopeProtocolMismatch);
+            // 7. Sanity verify the RecordsWrite is not written by App X
+            const recordsQuery = yield TestDataGenerator.generateRecordsQuery({
+                author: alice,
+                filter: { protocol }
+            });
+            const recordsQueryReply = yield dwn.processMessage(alice.did, recordsQuery.message);
+            expect(recordsQueryReply.status.code).to.equal(200);
+            expect((_a = recordsQueryReply.entries) === null || _a === void 0 ? void 0 : _a.length).to.equal(0);
+        }));
+        it('should fail RecordsWrite if presented with an owner-delegated grant with invalid grantor signature', () => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            // scenario:
+            // 1. Alice installs a protocol
+            // 2. Alice creates a delegated grant for App X to write as Alice, but with invalid signature
+            // 3. A third party (Bob) authors a RecordsWrite
+            // 4. Verify that App X cannot write Bob's message in Alice's DWN by invoking an owner-delegated grant with invalid signature
+            // 5. Sanity verify the RecordsWrite is not written by App X
+            const alice = yield TestDataGenerator.generateDidKeyPersona();
+            const bob = yield TestDataGenerator.generateDidKeyPersona();
+            const appX = yield TestDataGenerator.generateDidKeyPersona();
+            // 1. Alice installs a protocol
+            const protocolDefinition = minimalProtocolDefinition;
+            const protocol = minimalProtocolDefinition.protocol;
+            const protocolsConfig = yield ProtocolsConfigure.create({
+                signer: Jws.createSigner(alice),
+                definition: protocolDefinition
+            });
+            const protocolsConfigureReply = yield dwn.processMessage(alice.did, protocolsConfig.message);
+            expect(protocolsConfigureReply.status.code).to.equal(202);
+            // 2. Alice creates a delegated grant for App X to write as Alice, but with invalid signature
+            const scope = {
+                interface: DwnInterfaceName.Records,
+                method: DwnMethodName.Write,
+                protocol
+            };
+            const appXGrant = yield PermissionsProtocol.createGrant({
+                delegated: true,
+                dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                grantedTo: appX.did,
+                scope: scope,
+                signer: Jws.createSigner(alice)
+            });
+            const appXGrantMessage = appXGrant.dataEncodedMessage;
+            appXGrantMessage.authorization.signature.signatures[0].signature = yield TestDataGenerator.randomSignatureString();
+            // 3. A third party (Bob) authors a RecordsWrite
+            const bobRecordsWriteBytes = new TextEncoder().encode('message from Bob');
+            const bobRecordsWrite = yield RecordsWrite.create({
+                signer: Jws.createSigner(bob),
+                protocol,
+                protocolPath: 'foo', // this comes from `types` in protocol definition
+                dataFormat: 'any-format',
+                data: bobRecordsWriteBytes
+            });
+            // 4. Verify that App X cannot write Bob's message in Alice's DWN by invoking an owner-delegated grant with invalid signature
+            const appXAugmentedWrite = yield RecordsWrite.parse(bobRecordsWrite.message);
+            yield appXAugmentedWrite.signAsOwnerDelegate(Jws.createSigner(appX), appXGrantMessage);
+            const appXWriteReply = yield dwn.processMessage(alice.did, appXAugmentedWrite.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(appXWriteReply.status.code).to.equal(401);
+            expect(appXWriteReply.status.detail).to.contain(DwnErrorCode.GeneralJwsVerifierInvalidSignature);
+            // 5. Sanity verify the RecordsWrite is not written by App X
+            const recordsQuery = yield TestDataGenerator.generateRecordsQuery({
+                author: alice,
+                filter: { protocol }
+            });
+            const recordsQueryReply = yield dwn.processMessage(alice.did, recordsQuery.message);
+            expect(recordsQueryReply.status.code).to.equal(200);
+            expect((_a = recordsQueryReply.entries) === null || _a === void 0 ? void 0 : _a.length).to.equal(0);
+        }));
+        it('should fail RecordsWrite if grant ID in owner signature payload and CID of owner-delegated grant are mismatching', () => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            // scenario:
+            // 1. Alice installs a protocol
+            // 2. Creates two delegated grant for App X to write as Alice
+            // 3. A third party (Bob) authors a RecordsWrite
+            // 4. Verify that App X cannot write Bob's message in Alice's DWN by invoking an owner-delegated grant with the wrong ID
+            // 5. Sanity verify the RecordsWrite is not written by App X
+            const alice = yield TestDataGenerator.generateDidKeyPersona();
+            const bob = yield TestDataGenerator.generateDidKeyPersona();
+            const appX = yield TestDataGenerator.generateDidKeyPersona();
+            // 1. Alice installs a protocol
+            const protocolDefinition = minimalProtocolDefinition;
+            const protocol = minimalProtocolDefinition.protocol;
+            const protocolsConfig = yield ProtocolsConfigure.create({
+                signer: Jws.createSigner(alice),
+                definition: protocolDefinition
+            });
+            const protocolsConfigureReply = yield dwn.processMessage(alice.did, protocolsConfig.message);
+            expect(protocolsConfigureReply.status.code).to.equal(202);
+            // 2. Creates two delegated grant for App X to write as Alice
+            const scope = {
+                interface: DwnInterfaceName.Records,
+                method: DwnMethodName.Write,
+                protocol
+            };
+            const appXGrant = yield PermissionsProtocol.createGrant({
+                delegated: true,
+                dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                grantedTo: appX.did,
+                scope: scope,
+                signer: Jws.createSigner(alice)
+            });
+            yield Time.minimalSleep();
+            const appXGrant2 = yield PermissionsProtocol.createGrant({
+                delegated: true,
+                dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                grantedTo: appX.did,
+                scope: scope,
+                signer: Jws.createSigner(alice)
+            });
+            // 3. A third party (Bob) authors a RecordsWrite
+            const bobRecordsWriteBytes = new TextEncoder().encode('message from Bob');
+            const bobRecordsWrite = yield RecordsWrite.create({
+                signer: Jws.createSigner(bob),
+                protocol,
+                protocolPath: 'foo', // this comes from `types` in protocol definition
+                dataFormat: 'any-format',
+                data: bobRecordsWriteBytes
+            });
+            // 4. Verify that App X cannot write Bob's message in Alice's DWN by invoking an owner-delegated grant with the wrong ID
+            const appXAugmentedWrite = yield RecordsWrite.parse(bobRecordsWrite.message);
+            yield appXAugmentedWrite.signAsOwnerDelegate(Jws.createSigner(appX), appXGrant.dataEncodedMessage);
+            appXAugmentedWrite.message.authorization.ownerDelegatedGrant = appXGrant2.dataEncodedMessage; // intentionally have a mismatching grant
+            const appXWriteReply = yield dwn.processMessage(alice.did, appXAugmentedWrite.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(appXWriteReply.status.code).to.equal(400);
+            expect(appXWriteReply.status.detail).to.contain(DwnErrorCode.RecordsOwnerDelegatedGrantCidMismatch);
+            // 5. Sanity verify the RecordsWrite is not written by App X
+            const recordsQuery = yield TestDataGenerator.generateRecordsQuery({
+                author: alice,
+                filter: { protocol }
+            });
+            const recordsQueryReply = yield dwn.processMessage(alice.did, recordsQuery.message);
+            expect(recordsQueryReply.status.code).to.equal(200);
+            expect((_a = recordsQueryReply.entries) === null || _a === void 0 ? void 0 : _a.length).to.equal(0);
+        }));
+        it('should fail RecordsWrite if owner-delegated grant is revoked', () => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            // scenario:
+            // 1. Alice installs a protocol
+            // 2. Alice creates a delegated grant for App X to write as Alice
+            // 3. Alice revokes the grant
+            // 4. A third party (Bob) authors a RecordsWrite
+            // 5. Verify that App X cannot write Bob's message in Alice's DWN by invoking a revoked owner-delegated grant
+            // 6. Sanity verify the RecordsWrite is not written by App X
+            const alice = yield TestDataGenerator.generateDidKeyPersona();
+            const bob = yield TestDataGenerator.generateDidKeyPersona();
+            const appX = yield TestDataGenerator.generateDidKeyPersona();
+            // 1. Alice installs a protocol
+            const protocolDefinition = minimalProtocolDefinition;
+            const protocol = minimalProtocolDefinition.protocol;
+            const protocolsConfig = yield ProtocolsConfigure.create({
+                signer: Jws.createSigner(alice),
+                definition: protocolDefinition
+            });
+            const protocolsConfigureReply = yield dwn.processMessage(alice.did, protocolsConfig.message);
+            expect(protocolsConfigureReply.status.code).to.equal(202);
+            // 2. Alice creates a delegated grant for App X to write as Alice
+            const scope = {
+                interface: DwnInterfaceName.Records,
+                method: DwnMethodName.Write,
+                protocol
+            };
+            const appXGrant = yield PermissionsProtocol.createGrant({
+                delegated: true,
+                dateExpires: Time.createOffsetTimestamp({ seconds: 100 }),
+                grantedTo: appX.did,
+                scope: scope,
+                signer: Jws.createSigner(alice)
+            });
+            const grantDataStream = DataStream.fromBytes(appXGrant.permissionGrantBytes);
+            const permissionGrantWriteReply = yield dwn.processMessage(alice.did, appXGrant.recordsWrite.message, { dataStream: grantDataStream });
+            expect(permissionGrantWriteReply.status.code).to.equal(202);
+            // 3. Alice revokes the grant
+            const permissionRevoke = yield PermissionsProtocol.createRevocation({
+                signer: Jws.createSigner(alice),
+                grant: yield PermissionGrant.parse(appXGrant.dataEncodedMessage),
+            });
+            const revocationDataStream = DataStream.fromBytes(permissionRevoke.permissionRevocationBytes);
+            const permissionRevokeReply = yield dwn.processMessage(alice.did, permissionRevoke.recordsWrite.message, { dataStream: revocationDataStream });
+            expect(permissionRevokeReply.status.code).to.equal(202);
+            // 4. A third party (Bob) authors a RecordsWrite
+            const bobRecordsWriteBytes = new TextEncoder().encode('message from Bob');
+            const bobRecordsWrite = yield RecordsWrite.create({
+                signer: Jws.createSigner(bob),
+                protocol,
+                protocolPath: 'foo', // this comes from `types` in protocol definition
+                dataFormat: 'any-format',
+                data: bobRecordsWriteBytes
+            });
+            // 5. Verify that App X cannot write Bob's message in Alice's DWN by invoking a revoked owner-delegated grant
+            const appXAugmentedWrite = yield RecordsWrite.parse(bobRecordsWrite.message);
+            yield appXAugmentedWrite.signAsOwnerDelegate(Jws.createSigner(appX), appXGrant.dataEncodedMessage);
+            const appXWriteReply = yield dwn.processMessage(alice.did, appXAugmentedWrite.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(appXWriteReply.status.code).to.equal(401);
+            expect(appXWriteReply.status.detail).to.contain(DwnErrorCode.GrantAuthorizationGrantRevoked);
+            // 6. Sanity verify the RecordsWrite is not written by App X
+            const recordsQuery = yield TestDataGenerator.generateRecordsQuery({
+                author: alice,
+                filter: { protocol }
+            });
+            const recordsQueryReply = yield dwn.processMessage(alice.did, recordsQuery.message);
+            expect(recordsQueryReply.status.code).to.equal(200);
+            expect((_a = recordsQueryReply.entries) === null || _a === void 0 ? void 0 : _a.length).to.equal(0);
+        }));
+        it('should fail RecordsWrite if owner-delegated grant is expired', () => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            // scenario:
+            // 1. Alice installs a protocol
+            // 2. Alice creates a delegated grant for App X to write as Alice, but make it expired
+            // 3. A third party (Bob) authors a RecordsWrite
+            // 4. Verify that App X cannot write Bob's message in Alice's DWN by invoking an expired owner-delegated grant
+            // 5. Sanity verify the RecordsWrite is not written by App X
+            const alice = yield TestDataGenerator.generateDidKeyPersona();
+            const bob = yield TestDataGenerator.generateDidKeyPersona();
+            const appX = yield TestDataGenerator.generateDidKeyPersona();
+            // 1. Alice installs a protocol
+            const protocolDefinition = minimalProtocolDefinition;
+            const protocol = minimalProtocolDefinition.protocol;
+            const protocolsConfig = yield ProtocolsConfigure.create({
+                signer: Jws.createSigner(alice),
+                definition: protocolDefinition
+            });
+            const protocolsConfigureReply = yield dwn.processMessage(alice.did, protocolsConfig.message);
+            expect(protocolsConfigureReply.status.code).to.equal(202);
+            // 2. Alice creates a delegated grant for App X to write as Alice, but make it expired
+            const scope = {
+                interface: DwnInterfaceName.Records,
+                method: DwnMethodName.Write,
+                protocol
+            };
+            const appXGrant = yield PermissionsProtocol.createGrant({
+                delegated: true,
+                dateExpires: Time.getCurrentTimestamp(), // intentionally set to current time to make it expired immediately
+                grantedTo: appX.did,
+                scope: scope,
+                signer: Jws.createSigner(alice)
+            });
+            // 3. A third party (Bob) authors a RecordsWrite
+            const bobRecordsWriteBytes = new TextEncoder().encode('message from Bob');
+            const bobRecordsWrite = yield RecordsWrite.create({
+                signer: Jws.createSigner(bob),
+                protocol,
+                protocolPath: 'foo', // this comes from `types` in protocol definition
+                dataFormat: 'any-format',
+                data: bobRecordsWriteBytes
+            });
+            // 4. Verify that App X cannot write Bob's message in Alice's DWN by invoking an expired owner-delegated grant
+            const appXAugmentedWrite = yield RecordsWrite.parse(bobRecordsWrite.message);
+            yield appXAugmentedWrite.signAsOwnerDelegate(Jws.createSigner(appX), appXGrant.dataEncodedMessage);
+            const appXWriteReply = yield dwn.processMessage(alice.did, appXAugmentedWrite.message, { dataStream: DataStream.fromBytes(bobRecordsWriteBytes) });
+            expect(appXWriteReply.status.code).to.equal(401);
+            expect(appXWriteReply.status.detail).to.contain(DwnErrorCode.GrantAuthorizationGrantExpired);
+            // 5. Sanity verify the RecordsWrite is not written by App X
+            const recordsQuery = yield TestDataGenerator.generateRecordsQuery({
+                author: alice,
+                filter: { protocol }
+            });
+            const recordsQueryReply = yield dwn.processMessage(alice.did, recordsQuery.message);
+            expect(recordsQueryReply.status.code).to.equal(200);
+            expect((_a = recordsQueryReply.entries) === null || _a === void 0 ? void 0 : _a.length).to.equal(0);
+        }));
+    }));
+}
+//# sourceMappingURL=owner-delegated-grant.spec.js.map

package/dist/esm/tests/features/owner-delegated-grant.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-delegated-grant.spec.js","sourceRoot":"","sources":["../../../../tests/features/owner-delegated-grant.spec.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,cAAc,MAAM,kBAAkB,CAAC;AAC9C,OAAO,yBAAyB,MAAM,8CAA8C,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;AAC7G,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEvH,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAEzB,MAAM,UAAU,uBAAuB;IACrC,QAAQ,CAAC,uBAAuB,EAAE,GAAS,EAAE;QAC3C,IAAI,WAAwB,CAAC;QAC7B,IAAI,YAA0B,CAAC;QAC/B,IAAI,SAAoB,CAAC;QACzB,IAAI,kBAAsC,CAAC;QAC3C,IAAI,QAAkB,CAAC;QACvB,IAAI,WAAwB,CAAC;QAC7B,IAAI,GAAQ,CAAC;QAEb,mGAAmG;QACnG,6EAA6E;QAC7E,MAAM,CAAC,GAAS,EAAE;YAChB,WAAW,GAAG,IAAI,iBAAiB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAChC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YACnC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC7B,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;YAC/C,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC3B,WAAW,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC;YAEpC,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9G,CAAC,CAAA,CAAC,CAAC;QAEH,UAAU,CAAC,GAAS,EAAE;YACpB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,4CAA4C;YAE7D,+GAA+G;YAC/G,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,kBAAkB,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC,CAAA,CAAC,CAAC;QAEH,KAAK,CAAC,GAAS,EAAE;YACf,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,CAAA,CAAC,CAAC;QAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAS,EAAE;YAC1C,EAAE,CAAC,4GAA4G,EAAE,GAAS,EAAE;gBAC1H,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAEvD,2DAA2D;gBAC3D,MAAM,KAAK,GAAoB;oBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;oBAC/B,QAAQ,EAAI,MAAM;iBACnB,CAAC;gBACF,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACxD,SAAS,EAAK,IAAI,EAAE,4BAA4B;oBAChD,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;oBAC1D,WAAW,EAAG,6CAA6C;oBAC3D,SAAS,EAAK,IAAI,CAAC,GAAG;oBACtB,KAAK;oBACL,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;iBACtC,CAAC,CAAC;gBAEH,qCAAqC;gBACrC,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;oBAC7C,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;oBAClC,UAAU,EAAG,0BAA0B;oBACvC,IAAI,EAAS,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;iBAC/C,CAAC,CAAC;gBAEH,iHAAiH;gBACjH,MAAM,YAAY,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;gBAE/F,OAAO,YAAY,CAAC,OAAO,CAAC,aAAc,CAAC,mBAAmB,CAAC,CAAC,6CAA6C;gBAC7G,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAE9D,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,gDAAgD,CAAC,CAAC;YAC/G,CAAC,CAAA,CAAC,CAAC;YAEH,EAAE,CAAC,0GAA0G,EAAE,GAAS,EAAE;gBACxH,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,CAAC;gBAEvD,2DAA2D;gBAC3D,MAAM,KAAK,GAAoB;oBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;oBAC/B,QAAQ,EAAI,MAAM;iBACnB,CAAC;gBACF,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;oBACxD,SAAS,EAAK,IAAI,EAAE,4BAA4B;oBAChD,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;oBAC1D,WAAW,EAAG,6CAA6C;oBAC3D,SAAS,EAAK,IAAI,CAAC,GAAG;oBACtB,KAAK;oBACL,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;iBACtC,CAAC,CAAC;gBAEH,qCAAqC;gBACrC,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;oBAC7C,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;oBAClC,UAAU,EAAG,0BAA0B;oBACvC,IAAI,EAAS,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;iBAC/C,CAAC,CAAC;gBAEH,wGAAwG;gBACxG,8EAA8E;gBAC9E,MAAM,YAAY,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;gBAE/F,MAAM,yBAAyB,qBAAQ,YAAY,CAAC,qBAAqB,CAAE,CAAC;gBAC5E,OAAO,yBAAyB,CAAC,gBAAgB,CAAC,CAAC,4DAA4D;gBAC/G,YAAY,CAAC,OAAO,CAAC,aAAc,CAAC,cAAe,CAAC,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBACnI,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAE9D,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,gDAAgD,CAAC,CAAC;YAC/G,CAAC,CAAA,CAAC,CAAC;QACL,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,6EAA6E,EAAE,GAAS,EAAE;;YAC3F,YAAY;YACZ,+BAA+B;YAC/B,wEAAwE;YACxE,gDAAgD;YAChD,oFAAoF;YACpF,4GAA4G;YAC5G,gHAAgH;YAChH,qDAAqD;YACrD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAE7D,+BAA+B;YAC/B,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;YACrD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC;YACpD,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBACtD,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,UAAU,EAAG,kBAAkB;aAChC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7F,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE1D,wEAAwE;YACxE,MAAM,KAAK,GAAoB;gBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;gBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;gBAC/B,QAAQ;aACT,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACtD,SAAS,EAAK,IAAI,EAAE,4BAA4B;gBAChD,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC1D,SAAS,EAAK,IAAI,CAAC,GAAG;gBACtB,KAAK,EAAS,KAAK;gBACnB,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YAEH,gDAAgD;YAChD,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAChD,MAAM,EAAS,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;gBACpC,QAAQ;gBACR,YAAY,EAAG,KAAK,EAAE,iDAAiD;gBACvE,UAAU,EAAK,YAAY;gBAC3B,IAAI,EAAW,oBAAoB;aACpC,CAAC,CAAC;YAEH,oFAAoF;YACpF,MAAM,6BAA6B,GAAG,MAAM,GAAG,CAAC,cAAc,CAC5D,KAAK,CAAC,GAAG,EACT,eAAe,CAAC,OAAO,EACvB,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,6BAA6B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAEhE,4GAA4G;YAC5G,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;YACnG,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,cAAc,CAC7C,KAAK,CAAC,GAAG,EACT,kBAAkB,CAAC,OAAO,EAC1B,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,4DAA4D,CAAC,CAAC;YAE3H,gHAAgH;YAChH,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;YAEnG,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,cAAc,CAC7C,KAAK,CAAC,GAAG,EACT,kBAAkB,CAAC,OAAO,EAC1B,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAEjD,qDAAqD;YACrD,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,oBAAoB,CAAC;gBAChE,MAAM,EAAG,KAAK;gBACd,MAAM,EAAG,EAAE,QAAQ,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACpF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,CAAC,MAAA,iBAAiB,CAAC,OAAO,0CAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAEtD,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAE1F,MAAM,mBAAmB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACnE,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,iGAAiG,EAAE,GAAS,EAAE;;YAC/G,YAAY;YACZ,+BAA+B;YAC/B,4EAA4E;YAC5E,gDAAgD;YAChD,oGAAoG;YACpG,4DAA4D;YAC5D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAE7D,+BAA+B;YAC/B,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;YACrD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC;YACpD,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBACtD,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,UAAU,EAAG,kBAAkB;aAChC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7F,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE1D,4EAA4E;YAC5E,MAAM,KAAK,GAAoB;gBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;gBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;gBAC/B,QAAQ;aACT,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACtD,gGAAgG;gBAChG,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC1D,SAAS,EAAK,IAAI,CAAC,GAAG;gBACtB,KAAK,EAAS,KAAK;gBACnB,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YAEH,gDAAgD;YAChD,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAChD,MAAM,EAAS,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;gBACpC,QAAQ;gBACR,YAAY,EAAG,KAAK,EAAE,iDAAiD;gBACvE,UAAU,EAAK,YAAY;gBAC3B,IAAI,EAAW,oBAAoB;aACpC,CAAC,CAAC;YAEH,oGAAoG;YACpG,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,kBAAkB,CAAC,mBAAmB,CAC1C,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EACtB,SAAS,CAAC,kBAAkB,CAC7B,CAAC;YAEF,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,cAAc,CAC7C,KAAK,CAAC,GAAG,EACT,kBAAkB,CAAC,OAAO,EAC1B,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,4CAA4C,CAAC,CAAC;YAE3G,4DAA4D;YAC5D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,oBAAoB,CAAC;gBAChE,MAAM,EAAG,KAAK;gBACd,MAAM,EAAG,EAAE,QAAQ,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACpF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,CAAC,MAAA,iBAAiB,CAAC,OAAO,0CAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,6GAA6G,EAAE,GAAS,EAAE;;YAC3H,YAAY;YACZ,+BAA+B;YAC/B,uEAAuE;YACvE,mFAAmF;YACnF,gDAAgD;YAChD,+GAA+G;YAC/G,sIAAsI;YACtI,4DAA4D;YAC5D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAE7D,+BAA+B;YAC/B,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;YACrD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC;YACpD,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBACtD,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,UAAU,EAAG,kBAAkB;aAChC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7F,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE1D,uEAAuE;YACvE,MAAM,SAAS,GAAoB;gBACjC,SAAS,EAAG,gBAAgB,CAAC,OAAO;gBACpC,MAAM,EAAM,aAAa,CAAC,IAAI;gBAC9B,QAAQ;aACT,CAAC;YAEF,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBAC5D,SAAS,EAAK,IAAI;gBAClB,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC1D,SAAS,EAAK,IAAI,CAAC,GAAG;gBACtB,KAAK,EAAS,SAAS;gBACvB,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YAEH,mFAAmF;YACnF,MAAM,wBAAwB,GAAoB;gBAChD,SAAS,EAAG,gBAAgB,CAAC,OAAO;gBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;gBAC/B,QAAQ,EAAI,iBAAiB;aAC9B,CAAC;YAEF,MAAM,gCAAgC,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBAC7E,SAAS,EAAK,IAAI;gBAClB,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC1D,SAAS,EAAK,IAAI,CAAC,GAAG;gBACtB,KAAK,EAAS,wBAAwB;gBACtC,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YAEH,gDAAgD;YAChD,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAChD,MAAM,EAAS,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;gBACpC,QAAQ;gBACR,YAAY,EAAG,KAAK,EAAE,iDAAiD;gBACvE,UAAU,EAAK,YAAY;gBAC3B,IAAI,EAAW,oBAAoB;aACpC,CAAC,CAAC;YAEH,+GAA+G;YAC/G,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,kBAAkB,CAAC,mBAAmB,CAC1C,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EACtB,eAAe,CAAC,kBAAkB,CACnC,CAAC;YAEF,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,cAAc,CAC7C,KAAK,CAAC,GAAG,EACT,kBAAkB,CAAC,OAAO,EAC1B,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,gCAAgC,CAAC,CAAC;YAE/F,sIAAsI;YACtI,MAAM,mBAAmB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC9E,MAAM,mBAAmB,CAAC,mBAAmB,CAC3C,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EACtB,gCAAgC,CAAC,kBAAkB,CACpD,CAAC;YAEF,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,cAAc,CAC9C,KAAK,CAAC,GAAG,EACT,mBAAmB,CAAC,OAAO,EAC3B,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,8CAA8C,CAAC,CAAC;YAE9G,4DAA4D;YAC5D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,oBAAoB,CAAC;gBAChE,MAAM,EAAG,KAAK;gBACd,MAAM,EAAG,EAAE,QAAQ,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACpF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,CAAC,MAAA,iBAAiB,CAAC,OAAO,0CAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,oGAAoG,EAAE,GAAS,EAAE;;YAClH,YAAY;YACZ,+BAA+B;YAC/B,6FAA6F;YAC7F,gDAAgD;YAChD,6HAA6H;YAC7H,4DAA4D;YAC5D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAE7D,+BAA+B;YAC/B,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;YACrD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC;YACpD,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBACtD,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,UAAU,EAAG,kBAAkB;aAChC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7F,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE1D,6FAA6F;YAC7F,MAAM,KAAK,GAAoB;gBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;gBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;gBAC/B,QAAQ;aACT,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACtD,SAAS,EAAK,IAAI;gBAClB,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC1D,SAAS,EAAK,IAAI,CAAC,GAAG;gBACtB,KAAK,EAAS,KAAK;gBACnB,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG,SAAS,CAAC,kBAAkB,CAAC;YACtD,gBAAgB,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAEnH,gDAAgD;YAChD,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAChD,MAAM,EAAS,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;gBACpC,QAAQ;gBACR,YAAY,EAAG,KAAK,EAAE,iDAAiD;gBACvE,UAAU,EAAK,YAAY;gBAC3B,IAAI,EAAW,oBAAoB;aACpC,CAAC,CAAC;YAEH,6HAA6H;YAC7H,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAEvF,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,cAAc,CAC7C,KAAK,CAAC,GAAG,EACT,kBAAkB,CAAC,OAAO,EAC1B,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,kCAAkC,CAAC,CAAC;YAEjG,4DAA4D;YAC5D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,oBAAoB,CAAC;gBAChE,MAAM,EAAG,KAAK;gBACd,MAAM,EAAG,EAAE,QAAQ,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACpF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,CAAC,MAAA,iBAAiB,CAAC,OAAO,0CAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,kHAAkH,EAAE,GAAS,EAAE;;YAChI,YAAY;YACZ,+BAA+B;YAC/B,6DAA6D;YAC7D,gDAAgD;YAChD,wHAAwH;YACxH,4DAA4D;YAC5D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAE7D,+BAA+B;YAC/B,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;YACrD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC;YACpD,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBACtD,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,UAAU,EAAG,kBAAkB;aAChC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7F,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE1D,6DAA6D;YAC7D,MAAM,KAAK,GAAoB;gBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;gBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;gBAC/B,QAAQ;aACT,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACtD,SAAS,EAAK,IAAI;gBAClB,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC1D,SAAS,EAAK,IAAI,CAAC,GAAG;gBACtB,KAAK,EAAS,KAAK;gBACnB,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAE1B,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACvD,SAAS,EAAK,IAAI;gBAClB,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC1D,SAAS,EAAK,IAAI,CAAC,GAAG;gBACtB,KAAK,EAAS,KAAK;gBACnB,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YAEH,gDAAgD;YAChD,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAChD,MAAM,EAAS,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;gBACpC,QAAQ;gBACR,YAAY,EAAG,KAAK,EAAE,iDAAiD;gBACvE,UAAU,EAAK,YAAY;gBAC3B,IAAI,EAAW,oBAAoB;aACpC,CAAC,CAAC;YAEH,wHAAwH;YACxH,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;YAEnG,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC,yCAAyC;YAEvI,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,cAAc,CAC7C,KAAK,CAAC,GAAG,EACT,kBAAkB,CAAC,OAAO,EAC1B,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,qCAAqC,CAAC,CAAC;YAEpG,4DAA4D;YAC5D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,oBAAoB,CAAC;gBAChE,MAAM,EAAG,KAAK;gBACd,MAAM,EAAG,EAAE,QAAQ,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACpF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,CAAC,MAAA,iBAAiB,CAAC,OAAO,0CAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,GAAS,EAAE;;YAC5E,YAAY;YACZ,+BAA+B;YAC/B,iEAAiE;YACjE,6BAA6B;YAC7B,gDAAgD;YAChD,6GAA6G;YAC7G,4DAA4D;YAC5D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAE7D,+BAA+B;YAC/B,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;YACrD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC;YACpD,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBACtD,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,UAAU,EAAG,kBAAkB;aAChC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7F,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE1D,iEAAiE;YACjE,MAAM,KAAK,GAAoB;gBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;gBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;gBAC/B,QAAQ;aACT,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACtD,SAAS,EAAK,IAAI;gBAClB,WAAW,EAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC1D,SAAS,EAAK,IAAI,CAAC,GAAG;gBACtB,KAAK,EAAS,KAAK;gBACnB,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAC7E,MAAM,yBAAyB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;YACvI,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE5D,6BAA6B;YAC7B,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,gBAAgB,CAAC;gBAClE,MAAM,EAAG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBAChC,KAAK,EAAI,MAAM,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAC;aACnE,CAAC,CAAC;YACH,MAAM,oBAAoB,GAAG,UAAU,CAAC,SAAS,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;YAC9F,MAAM,qBAAqB,GAAG,MAAM,GAAG,CAAC,cAAc,CACpD,KAAK,CAAC,GAAG,EACT,gBAAgB,CAAC,YAAY,CAAC,OAAO,EACrC,EAAE,UAAU,EAAE,oBAAoB,EAAE,CACrC,CAAC;YACF,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAExD,gDAAgD;YAChD,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAChD,MAAM,EAAS,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;gBACpC,QAAQ;gBACR,YAAY,EAAG,KAAK,EAAE,iDAAiD;gBACvE,UAAU,EAAK,YAAY;gBAC3B,IAAI,EAAW,oBAAoB;aACpC,CAAC,CAAC;YAEH,6GAA6G;YAC7G,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;YAEnG,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,cAAc,CAC7C,KAAK,CAAC,GAAG,EACT,kBAAkB,CAAC,OAAO,EAC1B,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;YAE7F,4DAA4D;YAC5D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,oBAAoB,CAAC;gBAChE,MAAM,EAAG,KAAK;gBACd,MAAM,EAAG,EAAE,QAAQ,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACpF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,CAAC,MAAA,iBAAiB,CAAC,OAAO,0CAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAA,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,GAAS,EAAE;;YAC5E,YAAY;YACZ,+BAA+B;YAC/B,sFAAsF;YACtF,gDAAgD;YAChD,8GAA8G;YAC9G,4DAA4D;YAC5D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,qBAAqB,EAAE,CAAC;YAE7D,+BAA+B;YAC/B,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;YACrD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC;YACpD,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC;gBACtD,MAAM,EAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,UAAU,EAAG,kBAAkB;aAChC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7F,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE1D,sFAAsF;YACtF,MAAM,KAAK,GAAoB;gBAC7B,SAAS,EAAG,gBAAgB,CAAC,OAAO;gBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;gBAC/B,QAAQ;aACT,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC;gBACtD,SAAS,EAAK,IAAI;gBAClB,WAAW,EAAG,IAAI,CAAC,mBAAmB,EAAE,EAAE,mEAAmE;gBAC7G,SAAS,EAAK,IAAI,CAAC,GAAG;gBACtB,KAAK,EAAS,KAAK;gBACnB,MAAM,EAAQ,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YAEH,gDAAgD;YAChD,MAAM,oBAAoB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAChD,MAAM,EAAS,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC;gBACpC,QAAQ;gBACR,YAAY,EAAG,KAAK,EAAE,iDAAiD;gBACvE,UAAU,EAAK,YAAY;gBAC3B,IAAI,EAAW,oBAAoB;aACpC,CAAC,CAAC;YAEH,8GAA8G;YAC9G,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;YAEnG,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,cAAc,CAC7C,KAAK,CAAC,GAAG,EACT,kBAAkB,CAAC,OAAO,EAC1B,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAC3D,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;YAE7F,4DAA4D;YAC5D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,oBAAoB,CAAC;gBAChE,MAAM,EAAG,KAAK;gBACd,MAAM,EAAG,EAAE,QAAQ,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACpF,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,CAAC,MAAA,iBAAiB,CAAC,OAAO,0CAAE,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAA,CAAC,CAAC;IACL,CAAC,CAAA,CAAC,CAAC;AACL,CAAC"}