@fairmint/canton-node-sdk 0.0.209 → 0.0.211

package/build/src/utils/external-signing/canton-protocol.js

@@ -0,0 +1,339 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeEd25519PublicKeyForCanton = normalizeEd25519PublicKeyForCanton;
+exports.extractRawEd25519PublicKey = extractRawEd25519PublicKey;
+exports.deriveSolanaAddressFromEd25519PublicKeyBase64 = deriveSolanaAddressFromEd25519PublicKeyBase64;
+exports.deriveCantonEd25519PublicKeyFingerprint = deriveCantonEd25519PublicKeyFingerprint;
+exports.buildExternalPartyId = buildExternalPartyId;
+exports.extractPublicKeyFingerprint = extractPublicKeyFingerprint;
+exports.assertCantonPartyMatchesPublicKey = assertCantonPartyMatchesPublicKey;
+exports.normalizeCantonHashToHex = normalizeCantonHashToHex;
+exports.assertCantonSha256MultihashHex = assertCantonSha256MultihashHex;
+exports.hashHexToBase64 = hashHexToBase64;
+exports.assertCantonHashSignature = assertCantonHashSignature;
+exports.assertEd25519Signature = assertEd25519Signature;
+exports.canonicalizeCantonProtocolPayload = canonicalizeCantonProtocolPayload;
+exports.hashCantonProtocolPayload = hashCantonProtocolPayload;
+exports.buildCantonPrepareToken = buildCantonPrepareToken;
+exports.assertCantonPrepareToken = assertCantonPrepareToken;
+exports.hashPreparedTransaction = hashPreparedTransaction;
+exports.preparedTransactionHashToHex = preparedTransactionHashToHex;
+const node_crypto_1 = require("node:crypto");
+const errors_1 = require("../../core/errors");
+const utils_1 = require("../../core/utils");
+const stellar_utils_1 = require("./stellar-utils");
+const ED25519_DER_X509_PREFIX_HEX = '302a300506032b6570032100';
+const ED25519_DER_X509_PREFIX = Buffer.from(ED25519_DER_X509_PREFIX_HEX, 'hex');
+const ED25519_RAW_PUBLIC_KEY_LENGTH = 32;
+const ED25519_DER_X509_PUBLIC_KEY_LENGTH = ED25519_DER_X509_PREFIX.length + ED25519_RAW_PUBLIC_KEY_LENGTH;
+const CANTON_PUBLIC_KEY_FINGERPRINT_HASH_PURPOSE = 12;
+const CANTON_SHA256_MULTIHASH_PREFIX_HEX = '1220';
+const CANTON_SHA256_MULTIHASH_BYTE_LENGTH = 34;
+const CANTON_SHA256_MULTIHASH_HEX_LENGTH = CANTON_SHA256_MULTIHASH_BYTE_LENGTH * 2;
+const ED25519_FIELD_PRIME_LE = Buffer.from('edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f', 'hex');
+const ED25519_SMALL_ORDER_PUBLIC_KEYS_HEX = new Set([
+    '0000000000000000000000000000000000000000000000000000000000000000',
+    '0100000000000000000000000000000000000000000000000000000000000000',
+    'ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f',
+    'edffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f',
+    'c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39cccecfd7792ac037a900',
+    'c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39cccecfd7792ac037a980',
+    '26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05',
+    '26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85',
+]);
+const SOLANA_BASE58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+/** Normalizes a raw or DER-wrapped Ed25519 public key into Canton's DER X.509 SubjectPublicKeyInfo base64 format. */
+function normalizeEd25519PublicKeyForCanton(publicKeyBase64) {
+    return (0, stellar_utils_1.wrapEd25519PublicKeyInDER)(extractRawEd25519PublicKey(publicKeyBase64)).toString('base64');
+}
+/** Extracts and validates the raw 32-byte Ed25519 public key from raw or DER X.509 base64 input. */
+function extractRawEd25519PublicKey(publicKeyBase64) {
+    const key = decodeBase64(publicKeyBase64, 'publicKeyBase64');
+    if (key.length === ED25519_RAW_PUBLIC_KEY_LENGTH) {
+        assertCanonicalEd25519PublicKey(key);
+        return key;
+    }
+    if (isEd25519DerX509PublicKey(key)) {
+        const rawKey = key.subarray(ED25519_DER_X509_PREFIX.length);
+        assertCanonicalEd25519PublicKey(rawKey);
+        return rawKey;
+    }
+    throw invalidEd25519PublicKeyLength(key.length);
+}
+/** Converts a raw or DER-wrapped Ed25519 public key into the equivalent Solana address. */
+function deriveSolanaAddressFromEd25519PublicKeyBase64(publicKeyBase64) {
+    return encodeSolanaBase58(extractRawEd25519PublicKey(publicKeyBase64));
+}
+/** Derives the Canton fingerprint suffix for an Ed25519 external-party key. */
+function deriveCantonEd25519PublicKeyFingerprint(publicKeyBase64) {
+    const rawPublicKey = extractRawEd25519PublicKey(publicKeyBase64);
+    const purpose = Buffer.alloc(4);
+    purpose.writeInt32BE(CANTON_PUBLIC_KEY_FINGERPRINT_HASH_PURPOSE);
+    const digest = (0, node_crypto_1.createHash)('sha256').update(purpose).update(rawPublicKey).digest('hex');
+    return `${CANTON_SHA256_MULTIHASH_PREFIX_HEX}${digest}`;
+}
+/** Builds a deterministic external party id from a party hint/prefix and a Canton public-key fingerprint. */
+function buildExternalPartyId(partyHint, publicKeyFingerprint) {
+    const normalizedHint = partyHint.trim();
+    if (!normalizedHint) {
+        throw new errors_1.ValidationError('partyHint is required');
+    }
+    if (normalizedHint.includes('::')) {
+        throw new errors_1.ValidationError('partyHint cannot include the reserved "::" separator', { partyHint });
+    }
+    const fingerprint = assertCantonSha256MultihashHex(publicKeyFingerprint);
+    return `${normalizedHint}::${fingerprint}`;
+}
+/** Extracts the public-key fingerprint suffix from a Canton party id. */
+function extractPublicKeyFingerprint(partyId) {
+    return extractCantonPartyFingerprint(partyId, () => new errors_1.ValidationError('Expected a Canton party ID with one public key fingerprint suffix', { partyId }));
+}
+/**
+ * Verifies that a party id fingerprint and optional caller-supplied fingerprint match a submitted Ed25519 public key.
+ *
+ * Returns the derived fingerprint when the party/key binding is valid.
+ */
+function assertCantonPartyMatchesPublicKey(input) {
+    const partyFingerprint = extractPublicKeyFingerprint(input.partyId);
+    const keyFingerprint = deriveCantonEd25519PublicKeyFingerprint(input.publicKeyBase64);
+    const suppliedFingerprint = input.publicKeyFingerprint?.trim();
+    if (suppliedFingerprint && suppliedFingerprint !== keyFingerprint) {
+        throw new errors_1.ValidationError('Submitted public key fingerprint does not match the public key', {
+            suppliedFingerprint,
+            keyFingerprint,
+        });
+    }
+    if (partyFingerprint !== keyFingerprint) {
+        throw new errors_1.ValidationError('Canton party ID does not match the submitted public key', {
+            partyFingerprint,
+            keyFingerprint,
+        });
+    }
+    return keyFingerprint;
+}
+/** Converts a Canton hash from hex, base64, or base64url into lowercase hex. */
+function normalizeCantonHashToHex(hash, operation = 'operation') {
+    const normalized = hash.trim();
+    if (isCantonSha256MultihashHex(normalized)) {
+        return normalized.toLowerCase();
+    }
+    const base64 = normalized.replace(/-/g, '+').replace(/_/g, '/');
+    if (!/^[A-Za-z0-9+/]+={0,2}$/.test(base64) || base64.length % 4 === 1) {
+        throw invalidCantonHash(operation);
+    }
+    const paddedBase64 = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=');
+    const decoded = Buffer.from(paddedBase64, 'base64');
+    if (!decoded.length || decoded.toString('base64').replace(/=+$/, '') !== base64.replace(/=+$/, '')) {
+        throw invalidCantonHash(operation);
+    }
+    assertCantonSha256Multihash(decoded, operation);
+    return decoded.toString('hex');
+}
+/** Validates and lowercases a submitted Canton SHA-256 multihash hex value. */
+function assertCantonSha256MultihashHex(value) {
+    const normalized = value.trim();
+    if (!isCantonSha256MultihashHex(normalized)) {
+        throw new errors_1.ValidationError('Expected a Canton SHA-256 multihash hex string', { value });
+    }
+    return normalized.toLowerCase();
+}
+/** Converts a hex-encoded hash into base64 bytes for browser wallet signing. */
+function hashHexToBase64(hashHex) {
+    return decodeHashHex(hashHex).toString('base64');
+}
+/** Verifies an Ed25519 signature over a hex-encoded Canton hash. */
+function assertCantonHashSignature(input) {
+    assertEd25519Signature({
+        publicKeyBase64: input.publicKeyBase64,
+        payload: decodeHashHex(input.hashHex),
+        signatureBase64: input.signatureBase64,
+        failureMessage: 'Invalid Canton hash signature',
+    });
+}
+/** Verifies an Ed25519 signature against a raw payload using a raw or DER-wrapped public key. */
+function assertEd25519Signature(input) {
+    const derPublicKey = decodeBase64(normalizeEd25519PublicKeyForCanton(input.publicKeyBase64), 'publicKeyBase64');
+    const signature = decodeBase64(input.signatureBase64, 'signatureBase64');
+    const payload = normalizeSignaturePayload(input.payload);
+    const verified = (0, node_crypto_1.verify)(null, payload, { key: derPublicKey, format: 'der', type: 'spki' }, signature);
+    if (!verified) {
+        throw new errors_1.ValidationError(input.failureMessage ?? 'Invalid Ed25519 signature');
+    }
+}
+/** Produces stable JSON for token/signature payloads by sorting object keys and omitting undefined values. */
+function canonicalizeCantonProtocolPayload(payload) {
+    return JSON.stringify(normalizeCantonProtocolPayload(payload));
+}
+/** Hashes a canonicalized protocol payload with SHA-256. */
+function hashCantonProtocolPayload(payload) {
+    return (0, node_crypto_1.createHash)('sha256').update(canonicalizeCantonProtocolPayload(payload), 'utf8').digest('hex');
+}
+/** Builds an HMAC-bound token for a prepared Canton transaction or topology payload. */
+function buildCantonPrepareToken(secret, payload) {
+    assertNonEmptyPrepareTokenSecret(secret);
+    const encodedPayload = Buffer.from(canonicalizeCantonProtocolPayload(payload)).toString('base64url');
+    const signature = (0, node_crypto_1.createHmac)('sha256', secret).update(encodedPayload).digest('base64url');
+    return `${encodedPayload}.${signature}`;
+}
+/** Verifies that a submitted prepare token exactly binds to the expected prepared Canton payload. */
+function assertCantonPrepareToken(secret, token, expectedPayload) {
+    assertNonEmptyPrepareTokenSecret(secret);
+    const expectedToken = buildCantonPrepareToken(secret, expectedPayload);
+    const actual = Buffer.from(token);
+    const expected = Buffer.from(expectedToken);
+    if (actual.length !== expected.length || !(0, node_crypto_1.timingSafeEqual)(actual, expected)) {
+        throw new errors_1.ValidationError('Prepared Canton transaction token does not match the submitted details. Prepare a fresh transaction and sign it again');
+    }
+}
+function assertNonEmptyPrepareTokenSecret(secret) {
+    if (!secret.trim()) {
+        throw new errors_1.ValidationError('Prepare token secret is required');
+    }
+}
+/** Computes the SHA-256 hex digest of a base64 prepared transaction blob for token binding. */
+function hashPreparedTransaction(preparedTransaction) {
+    return (0, node_crypto_1.createHash)('sha256').update(preparedTransaction).digest('hex');
+}
+/** Converts a base64/base64url prepared transaction hash returned by interactive submission into lowercase hex. */
+function preparedTransactionHashToHex(hashBase64, operation = 'interactive submission prepare') {
+    const normalized = hashBase64.trim().replace(/-/g, '+').replace(/_/g, '/');
+    if (!/^[A-Za-z0-9+/]+={0,2}$/.test(normalized) || normalized.length % 4 === 1) {
+        throw new errors_1.OperationError(`Canton ${operation} response did not include a valid prepared hash`, errors_1.OperationErrorCode.TRANSACTION_FAILED);
+    }
+    const padded = normalized.padEnd(normalized.length + ((4 - (normalized.length % 4)) % 4), '=');
+    const decoded = Buffer.from(padded, 'base64');
+    if (!decoded.length || decoded.toString('base64').replace(/=+$/, '') !== normalized.replace(/=+$/, '')) {
+        throw new errors_1.OperationError(`Canton ${operation} response did not include a valid prepared hash`, errors_1.OperationErrorCode.TRANSACTION_FAILED);
+    }
+    return decoded.toString('hex');
+}
+function normalizeSignaturePayload(payload) {
+    if (typeof payload === 'string') {
+        return Buffer.from(payload, 'utf8');
+    }
+    return Buffer.from(payload);
+}
+function isCantonSha256MultihashHex(value) {
+    return (value.length === CANTON_SHA256_MULTIHASH_HEX_LENGTH &&
+        value.toLowerCase().startsWith(CANTON_SHA256_MULTIHASH_PREFIX_HEX) &&
+        /^[0-9a-fA-F]+$/.test(value));
+}
+function assertCantonSha256Multihash(hash, operation) {
+    if (hash.length !== CANTON_SHA256_MULTIHASH_BYTE_LENGTH ||
+        hash.subarray(0, 2).toString('hex') !== CANTON_SHA256_MULTIHASH_PREFIX_HEX) {
+        throw invalidCantonHash(operation);
+    }
+}
+function invalidCantonHash(operation) {
+    return new errors_1.OperationError(`Canton ${operation} response did not include a valid SHA-256 multihash`, errors_1.OperationErrorCode.TRANSACTION_FAILED);
+}
+function decodeBase64(value, label) {
+    const normalized = value.trim().replace(/-/g, '+').replace(/_/g, '/');
+    if (!/^[A-Za-z0-9+/]+={0,2}$/.test(normalized) || normalized.length % 4 === 1) {
+        throw new errors_1.ValidationError(`${label} must be base64-encoded`, { [label]: value });
+    }
+    const padded = normalized.padEnd(normalized.length + ((4 - (normalized.length % 4)) % 4), '=');
+    const decoded = Buffer.from(padded, 'base64');
+    if (decoded.toString('base64').replace(/=+$/, '') !== normalized.replace(/=+$/, '')) {
+        throw new errors_1.ValidationError(`${label} must be base64-encoded`, { [label]: value });
+    }
+    return decoded;
+}
+function decodeHashHex(hashHex) {
+    const normalized = hashHex.trim();
+    if (!/^[0-9a-fA-F]+$/.test(normalized) || normalized.length % 2 !== 0) {
+        throw new errors_1.ValidationError('Expected a hex-encoded Canton hash', { hashHex });
+    }
+    return Buffer.from(normalized, 'hex');
+}
+function encodeSolanaBase58(bytes) {
+    const digits = [];
+    for (const byte of bytes) {
+        let carry = byte;
+        for (let index = 0; index < digits.length; index += 1) {
+            const currentDigit = digits[index] ?? 0;
+            const value = currentDigit * 256 + carry;
+            digits[index] = value % 58;
+            carry = Math.floor(value / 58);
+        }
+        while (carry > 0) {
+            digits.push(carry % 58);
+            carry = Math.floor(carry / 58);
+        }
+    }
+    let leadingZeroes = 0;
+    while (leadingZeroes < bytes.length && bytes[leadingZeroes] === 0) {
+        leadingZeroes += 1;
+    }
+    return (SOLANA_BASE58_ALPHABET.charAt(0).repeat(leadingZeroes) +
+        digits
+            .reverse()
+            .map((digit) => SOLANA_BASE58_ALPHABET.charAt(digit))
+            .join(''));
+}
+function isEd25519DerX509PublicKey(key) {
+    return (key.length === ED25519_DER_X509_PUBLIC_KEY_LENGTH &&
+        key.subarray(0, ED25519_DER_X509_PREFIX.length).equals(ED25519_DER_X509_PREFIX));
+}
+function assertCanonicalEd25519PublicKey(rawPublicKey) {
+    if (ED25519_SMALL_ORDER_PUBLIC_KEYS_HEX.has(rawPublicKey.toString('hex').toLowerCase())) {
+        throw new errors_1.ValidationError('Invalid Ed25519 public key');
+    }
+    const encodedY = Buffer.from(rawPublicKey);
+    encodedY[31] = (encodedY[31] ?? 0) & 0x7f;
+    if (compareLittleEndian(encodedY, ED25519_FIELD_PRIME_LE) >= 0) {
+        throw new errors_1.ValidationError('Invalid Ed25519 public key');
+    }
+}
+function compareLittleEndian(left, right) {
+    for (let index = Math.max(left.length, right.length) - 1; index >= 0; index -= 1) {
+        const leftByte = left[index] ?? 0;
+        const rightByte = right[index] ?? 0;
+        if (leftByte !== rightByte)
+            return leftByte - rightByte;
+    }
+    return 0;
+}
+function invalidEd25519PublicKeyLength(length) {
+    return new errors_1.ValidationError(`Invalid Ed25519 public key length: ${length}; expected raw 32 bytes or DER-wrapped 44 bytes`, {
+        actualLength: length,
+        expectedRawLength: ED25519_RAW_PUBLIC_KEY_LENGTH,
+        expectedDerLength: ED25519_DER_X509_PUBLIC_KEY_LENGTH,
+    });
+}
+function extractCantonPartyFingerprint(partyId, createError) {
+    const trimmed = partyId.trim();
+    const separatorIndex = trimmed.indexOf('::');
+    if (separatorIndex <= 0 || separatorIndex !== trimmed.lastIndexOf('::')) {
+        throw createError();
+    }
+    const fingerprint = trimmed.slice(separatorIndex + 2).trim();
+    if (!fingerprint) {
+        throw createError();
+    }
+    return fingerprint;
+}
+function normalizeCantonProtocolPayload(payload) {
+    if (payload === undefined)
+        return null;
+    if (payload === null || typeof payload === 'string' || typeof payload === 'boolean') {
+        return payload;
+    }
+    if (typeof payload === 'number') {
+        if (!Number.isFinite(payload)) {
+            throw new errors_1.ValidationError('Canton protocol payload contains a non-finite number');
+        }
+        return payload;
+    }
+    if (Array.isArray(payload)) {
+        return payload.map((item) => normalizeCantonProtocolPayload(item));
+    }
+    if ((0, utils_1.isRecord)(payload)) {
+        return Object.fromEntries(Object.entries(payload)
+            .filter(([, value]) => value !== undefined)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([key, value]) => [key, normalizeCantonProtocolPayload(value)]));
+    }
+    throw new errors_1.ValidationError('Canton protocol payload contains an unsupported value');
+}
+//# sourceMappingURL=canton-protocol.js.map

package/build/src/utils/external-signing/canton-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canton-protocol.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/canton-protocol.ts"],"names":[],"mappings":";;AA8CA,gFAEC;AAGD,gEAYC;AAGD,sGAEC;AAGD,0FAMC;AAGD,oDAUC;AAGD,kEAKC;AAOD,8EAkBC;AAGD,4DAkBC;AAGD,wEAMC;AAGD,0CAEC;AAGD,8DAOC;AAGD,wDAQC;AAGD,8EAEC;AAGD,8DAEC;AAGD,0DAKC;AAGD,4DAcC;AASD,0DAEC;AAGD,oEAiBC;AArPD,6CAAwG;AACxG,8CAAwF;AACxF,4CAA4C;AAC5C,mDAA4D;AAE5D,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAC/D,MAAM,uBAAuB,GAAG,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;AAChF,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,kCAAkC,GAAG,uBAAuB,CAAC,MAAM,GAAG,6BAA6B,CAAC;AAC1G,MAAM,0CAA0C,GAAG,EAAE,CAAC;AACtD,MAAM,kCAAkC,GAAG,MAAM,CAAC;AAClD,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAC/C,MAAM,kCAAkC,GAAG,mCAAmC,GAAG,CAAC,CAAC;AACnF,MAAM,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,CAAC;AACtH,MAAM,mCAAmC,GAAG,IAAI,GAAG,CAAC;IAClD,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;CACnE,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG,4DAA4D,CAAC;AAqB5F,qHAAqH;AACrH,SAAgB,kCAAkC,CAAC,eAAuB;IACxE,OAAO,IAAA,yCAAyB,EAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACnG,CAAC;AAED,oGAAoG;AACpG,SAAgB,0BAA0B,CAAC,eAAuB;IAChE,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QACjD,+BAA+B,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,yBAAyB,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC5D,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,2FAA2F;AAC3F,SAAgB,6CAA6C,CAAC,eAAuB;IACnF,OAAO,kBAAkB,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,+EAA+E;AAC/E,SAAgB,uCAAuC,CAAC,eAAuB;IAC7E,MAAM,YAAY,GAAG,0BAA0B,CAAC,eAAe,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,YAAY,CAAC,0CAA0C,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvF,OAAO,GAAG,kCAAkC,GAAG,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED,6GAA6G;AAC7G,SAAgB,oBAAoB,CAAC,SAAiB,EAAE,oBAA4B;IAClF,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,wBAAe,CAAC,uBAAuB,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,wBAAe,CAAC,sDAAsD,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,WAAW,GAAG,8BAA8B,CAAC,oBAAoB,CAAC,CAAC;IACzE,OAAO,GAAG,cAAc,KAAK,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED,yEAAyE;AACzE,SAAgB,2BAA2B,CAAC,OAAe;IACzD,OAAO,6BAA6B,CAClC,OAAO,EACP,GAAG,EAAE,CAAC,IAAI,wBAAe,CAAC,mEAAmE,EAAE,EAAE,OAAO,EAAE,CAAC,CAC5G,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,iCAAiC,CAAC,KAAgC;IAChF,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,uCAAuC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACtF,MAAM,mBAAmB,GAAG,KAAK,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAE/D,IAAI,mBAAmB,IAAI,mBAAmB,KAAK,cAAc,EAAE,CAAC;QAClE,MAAM,IAAI,wBAAe,CAAC,gEAAgE,EAAE;YAC1F,mBAAmB;YACnB,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IACD,IAAI,gBAAgB,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,wBAAe,CAAC,yDAAyD,EAAE;YACnF,gBAAgB;YAChB,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,gFAAgF;AAChF,SAAgB,wBAAwB,CAAC,IAAY,EAAE,SAAS,GAAG,WAAW;IAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,UAAU,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;QACnG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IACD,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,+EAA+E;AAC/E,SAAgB,8BAA8B,CAAC,KAAa;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,wBAAe,CAAC,gDAAgD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,UAAU,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,gFAAgF;AAChF,SAAgB,eAAe,CAAC,OAAe;IAC7C,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,oEAAoE;AACpE,SAAgB,yBAAyB,CAAC,KAA+B;IACvE,sBAAsB,CAAC;QACrB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;QACrC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,cAAc,EAAE,+BAA+B;KAChD,CAAC,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,SAAgB,sBAAsB,CAAC,KAA4B;IACjE,MAAM,YAAY,GAAG,YAAY,CAAC,kCAAkC,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAChH,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAA,oBAAsB,EAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;IACtH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,wBAAe,CAAC,KAAK,CAAC,cAAc,IAAI,2BAA2B,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,SAAgB,iCAAiC,CAAC,OAAgB;IAChE,OAAO,IAAI,CAAC,SAAS,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,4DAA4D;AAC5D,SAAgB,yBAAyB,CAAC,OAAgB;IACxD,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iCAAiC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvG,CAAC;AAED,wFAAwF;AACxF,SAAgB,uBAAuB,CAAC,MAAc,EAAE,OAAgC;IACtF,gCAAgC,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1F,OAAO,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED,qGAAqG;AACrG,SAAgB,wBAAwB,CACtC,MAAc,EACd,KAAa,EACb,eAAwC;IAExC,gCAAgC,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,uBAAuB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAA,6BAAe,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,wBAAe,CACvB,uHAAuH,CACxH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CAAC,MAAc;IACtD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,wBAAe,CAAC,kCAAkC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAgB,uBAAuB,CAAC,mBAA2B;IACjE,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,mHAAmH;AACnH,SAAgB,4BAA4B,CAAC,UAAkB,EAAE,SAAS,GAAG,gCAAgC;IAC3G,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,uBAAc,CACtB,UAAU,SAAS,iDAAiD,EACpE,2BAAkB,CAAC,kBAAkB,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,uBAAc,CACtB,UAAU,SAAS,iDAAiD,EACpE,2BAAkB,CAAC,kBAAkB,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAqC;IACtE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa;IAC/C,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,kCAAkC;QACnD,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,kCAAkC,CAAC;QAClE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY,EAAE,SAAiB;IAClE,IACE,IAAI,CAAC,MAAM,KAAK,mCAAmC;QACnD,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,kCAAkC,EAC1E,CAAC;QACD,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,OAAO,IAAI,uBAAc,CACvB,UAAU,SAAS,qDAAqD,EACxE,2BAAkB,CAAC,kBAAkB,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,wBAAe,CAAC,GAAG,KAAK,yBAAyB,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,wBAAe,CAAC,GAAG,KAAK,yBAAyB,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,wBAAe,CAAC,oCAAoC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,YAAY,GAAG,GAAG,GAAG,KAAK,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;YAC3B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YACxB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,OAAO,aAAa,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,aAAa,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,CACL,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QACtD,MAAM;aACH,OAAO,EAAE;aACT,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;aACpD,IAAI,CAAC,EAAE,CAAC,CACZ,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,OAAO,CACL,GAAG,CAAC,MAAM,KAAK,kCAAkC;QACjD,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAChF,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CAAC,YAAoB;IAC3D,IAAI,mCAAmC,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,wBAAe,CAAC,4BAA4B,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3C,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC1C,IAAI,mBAAmB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,wBAAe,CAAC,4BAA4B,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,GAAG,SAAS,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAc;IACnD,OAAO,IAAI,wBAAe,CACxB,sCAAsC,MAAM,iDAAiD,EAC7F;QACE,YAAY,EAAE,MAAM;QACpB,iBAAiB,EAAE,6BAA6B;QAChD,iBAAiB,EAAE,kCAAkC;KACtD,CACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAe,EAAE,WAAwB;IAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,cAAc,IAAI,CAAC,IAAI,cAAc,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,8BAA8B,CAAC,OAAgB;IACtD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,SAAS,EAAE,CAAC;QACpF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,wBAAe,CAAC,sDAAsD,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAA,gBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;aAC1C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,wBAAe,CAAC,uDAAuD,CAAC,CAAC;AACrF,CAAC"}

package/build/src/utils/external-signing/execute-external-transaction.d.ts

@@ -10,6 +10,10 @@ export interface ExecuteExternalTransactionOptions {
     readonly hashingSchemeVersion?: string;
     readonly deduplicationPeriod?: InteractiveSubmissionExecuteRequest['deduplicationPeriod'];
 }
+export interface ExecuteExternalTransactionAndWaitResult {
+    readonly updateId: string;
+    readonly raw: Record<string, unknown>;
+}
 /**
  * Executes an interactive submission after offline signing (`interactiveSubmissionExecute`).
  *
@@ -17,4 +21,11 @@ export interface ExecuteExternalTransactionOptions {
  * @returns Validator response payload from interactive submission execute
  */
 export declare function executeExternalTransaction(options: ExecuteExternalTransactionOptions): Promise<InteractiveSubmissionExecuteResponse>;
+/**
+ * Executes an interactive submission and waits for the resulting update id.
+ *
+ * This uses Ledger JSON API's `executeAndWait` endpoint, which is useful for applications that need to link users to a
+ * transaction/update explorer after an externally signed submission.
+ */
+export declare function executeExternalTransactionAndWait(options: ExecuteExternalTransactionOptions): Promise<ExecuteExternalTransactionAndWaitResult>;
 //# sourceMappingURL=execute-external-transaction.d.ts.map

package/build/src/utils/external-signing/execute-external-transaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute-external-transaction.d.ts","sourceRoot":"","sources":["../../../../src/utils/external-signing/execute-external-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EAC1C,MAAM,kEAAkE,CAAC;AAE1E,MAAM,MAAM,cAAc,GAAG,mCAAmC,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1G,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mCAAmC,CAAC,qBAAqB,CAAC,CAAC;CAC3F;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,oCAAoC,CAAC,CAe/C"}
+{"version":3,"file":"execute-external-transaction.d.ts","sourceRoot":"","sources":["../../../../src/utils/external-signing/execute-external-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EAC1C,MAAM,kEAAkE,CAAC;AAG1E,MAAM,MAAM,cAAc,GAAG,mCAAmC,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1G,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mCAAmC,CAAC,qBAAqB,CAAC,CAAC;CAC3F;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,oCAAoC,CAAC,CAE/C;AAED;;;;;GAKG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,uCAAuC,CAAC,CAclD"}

package/build/src/utils/external-signing/execute-external-transaction.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.executeExternalTransaction = executeExternalTransaction;
+exports.executeExternalTransactionAndWait = executeExternalTransactionAndWait;
+const canton_response_utils_1 = require("../canton-response-utils");
 /**
  * Executes an interactive submission after offline signing (`interactiveSubmissionExecute`).
  *
@@ -8,7 +10,27 @@ exports.executeExternalTransaction = executeExternalTransaction;
  * @returns Validator response payload from interactive submission execute
  */
 async function executeExternalTransaction(options) {
-    return options.ledgerClient.interactiveSubmissionExecute({
+    return options.ledgerClient.interactiveSubmissionExecute(buildExecuteExternalTransactionRequest(options));
+}
+/**
+ * Executes an interactive submission and waits for the resulting update id.
+ *
+ * This uses Ledger JSON API's `executeAndWait` endpoint, which is useful for applications that need to link users to a
+ * transaction/update explorer after an externally signed submission.
+ */
+async function executeExternalTransactionAndWait(options) {
+    const raw = await options.ledgerClient.makePostRequest(`${options.ledgerClient.getApiUrl()}/v2/interactive-submission/executeAndWait`, buildExecuteExternalTransactionRequest(options), {
+        contentType: 'application/json',
+        includeBearerToken: true,
+    });
+    const updateId = (0, canton_response_utils_1.readRequiredString)(raw, 'updateId', 'interactive submission executeAndWait');
+    return {
+        updateId,
+        raw: (0, canton_response_utils_1.objectOrEmpty)(raw),
+    };
+}
+function buildExecuteExternalTransactionRequest(options) {
+    return {
         userId: options.userId,
         preparedTransaction: options.preparedTransaction,
         hashingSchemeVersion: options.hashingSchemeVersion ?? 'HASHING_SCHEME_VERSION_V2',
@@ -21,6 +43,6 @@ async function executeExternalTransaction(options) {
         partySignatures: {
             signatures: [...options.partySignatures],
         },
-    });
+    };
 }
 //# sourceMappingURL=execute-external-transaction.js.map

package/build/src/utils/external-signing/execute-external-transaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"execute-external-transaction.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/execute-external-transaction.ts"],"names":[],"mappings":";;AAwBA,gEAiBC;AAvBD;;;;;GAKG;AACI,KAAK,UAAU,0BAA0B,CAC9C,OAA0C;IAE1C,OAAO,OAAO,CAAC,YAAY,CAAC,4BAA4B,CAAC;QACvD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,2BAA2B;QACjF,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI;YAClD,qBAAqB,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC3B;SACF;QACD,eAAe,EAAE;YACf,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;SACzC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"execute-external-transaction.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/execute-external-transaction.ts"],"names":[],"mappings":";;AA8BA,gEAIC;AAQD,8EAgBC;AArDD,oEAA6E;AAmB7E;;;;;GAKG;AACI,KAAK,UAAU,0BAA0B,CAC9C,OAA0C;IAE1C,OAAO,OAAO,CAAC,YAAY,CAAC,4BAA4B,CAAC,sCAAsC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,iCAAiC,CACrD,OAA0C;IAE1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,eAAe,CACpD,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,2CAA2C,EAC9E,sCAAsC,CAAC,OAAO,CAAC,EAC/C;QACE,WAAW,EAAE,kBAAkB;QAC/B,kBAAkB,EAAE,IAAI;KACzB,CACF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,0CAAkB,EAAC,GAAG,EAAE,UAAU,EAAE,uCAAuC,CAAC,CAAC;IAC9F,OAAO;QACL,QAAQ;QACR,GAAG,EAAE,IAAA,qCAAa,EAAC,GAAG,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,sCAAsC,CAC7C,OAA0C;IAE1C,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,2BAA2B;QACjF,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI;YAClD,qBAAqB,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC3B;SACF;QACD,eAAe,EAAE;YACf,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;SACzC;KACF,CAAC;AACJ,CAAC"}

package/build/src/utils/external-signing/external-party-onboarding.d.ts

@@ -0,0 +1,65 @@
+import { type LedgerJsonApiClient } from '../../clients/ledger-json-api';
+export declare const CANTON_DER_X509_PUBLIC_KEY_FORMAT = "CRYPTO_KEY_FORMAT_DER_X509_SUBJECT_PUBLIC_KEY_INFO";
+export declare const CANTON_EC_CURVE25519_PUBLIC_KEY_SPEC = "SIGNING_KEY_SPEC_EC_CURVE25519";
+export declare const CANTON_RAW_SIGNATURE_FORMAT = "SIGNATURE_FORMAT_RAW";
+export declare const CANTON_ED25519_SIGNATURE_ALGORITHM = "SIGNING_ALGORITHM_SPEC_ED25519";
+export declare const DEFAULT_CANTON_IDENTITY_PROVIDER_ID = "";
+export interface PrepareExternalPartyOnboardingOptions {
+    readonly ledgerClient: LedgerJsonApiClient;
+    readonly synchronizerId: string;
+    readonly partyHint: string;
+    readonly publicKeyBase64: string;
+}
+export interface PreparedExternalPartyOnboarding {
+    readonly partyId: string;
+    readonly publicKeyFingerprint: string;
+    readonly multiHashHex: string;
+    readonly synchronizerId: string;
+    readonly topologyTransactions: readonly string[];
+    readonly publicKeyFormat: typeof CANTON_DER_X509_PUBLIC_KEY_FORMAT;
+    readonly signingAlgorithmSpec: typeof CANTON_ED25519_SIGNATURE_ALGORITHM;
+    readonly raw: unknown;
+}
+export interface SubmitExternalPartyOnboardingOptions {
+    readonly ledgerClient: LedgerJsonApiClient;
+    readonly synchronizerId: string;
+    readonly partyId: string;
+    readonly publicKeyBase64: string;
+    readonly multiHashHex: string;
+    readonly topologyTransactions: readonly string[];
+    readonly multiHashSignatureBase64: string;
+    readonly publicKeyFingerprint?: string | null;
+    readonly identityProviderId?: string;
+    /**
+     * Treat a 409 allocation conflict as success when the party already exists and the party details endpoint confirms
+     * it.
+     */
+    readonly allowAlreadyExists?: boolean;
+}
+export interface SubmittedExternalPartyOnboarding {
+    readonly partyId: string;
+    readonly raw: Record<string, unknown>;
+    readonly alreadyExisted: boolean;
+}
+/**
+ * Prepares external-party topology for a raw or DER-wrapped Ed25519 public key.
+ *
+ * The caller should ask the end-user wallet to sign `multiHashHex` before calling {@link submitExternalPartyOnboarding}.
+ */
+export declare function prepareExternalPartyOnboarding(options: PrepareExternalPartyOnboardingOptions): Promise<PreparedExternalPartyOnboarding>;
+/** Verifies the end-user Ed25519 signature and submits prepared external-party topology to Canton. */
+export declare function submitExternalPartyOnboarding(options: SubmitExternalPartyOnboardingOptions): Promise<SubmittedExternalPartyOnboarding>;
+/** Lists party ids whose suffix matches the supplied Ed25519 public key fingerprint. */
+export declare function listExternalPartyIdsForPublicKey(ledgerClient: LedgerJsonApiClient, publicKeyBase64: string): Promise<{
+    readonly publicKeyFingerprint: string;
+    readonly parties: readonly string[];
+    readonly raw: unknown;
+}>;
+/** Checks one exact external-party id built from party hint and public key. */
+export declare function getExternalPartyIdForHintAndPublicKey(ledgerClient: LedgerJsonApiClient, partyHint: string, publicKeyBase64: string, identityProviderId?: string): Promise<{
+    readonly publicKeyFingerprint: string;
+    readonly partyId: string;
+    readonly exists: boolean;
+    readonly raw: unknown;
+}>;
+//# sourceMappingURL=external-party-onboarding.d.ts.map

package/build/src/utils/external-signing/external-party-onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-party-onboarding.d.ts","sourceRoot":"","sources":["../../../../src/utils/external-signing/external-party-onboarding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAgBzE,eAAO,MAAM,iCAAiC,uDAAuD,CAAC;AACtG,eAAO,MAAM,oCAAoC,mCAAmC,CAAC;AACrF,eAAO,MAAM,2BAA2B,yBAAyB,CAAC;AAClE,eAAO,MAAM,kCAAkC,mCAAmC,CAAC;AACnF,eAAO,MAAM,mCAAmC,KAAK,CAAC;AAEtD,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,OAAO,iCAAiC,CAAC;IACnE,QAAQ,CAAC,oBAAoB,EAAE,OAAO,kCAAkC,CAAC;IACzE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACvC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,qCAAqC,GAC7C,OAAO,CAAC,+BAA+B,CAAC,CAkC1C;AAED,sGAAsG;AACtG,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,gCAAgC,CAAC,CA6D3C;AAED,wFAAwF;AACxF,wBAAsB,gCAAgC,CACpD,YAAY,EAAE,mBAAmB,EACjC,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC;IACT,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB,CAAC,CAQD;AAED,+EAA+E;AAC/E,wBAAsB,qCAAqC,CACzD,YAAY,EAAE,mBAAmB,EACjC,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,EACvB,kBAAkB,SAAsC,GACvD,OAAO,CAAC;IACT,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB,CAAC,CAsBD"}