@fhevm/sdk 0.0.1 → 1.0.0-alpha.1

package/_cjs/core/kms/KmsSigncryptedShares-p.js

@@ -0,0 +1,94 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _KmsSigncryptedSharesImpl_metadata, _KmsSigncryptedSharesImpl_shares;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createKmsSigncryptedShares = createKmsSigncryptedShares;
+exports.getShares = getShares;
+exports.getMetadata = getMetadata;
+const KmsSignersContext_p_js_1 = require("../host-contracts/KmsSignersContext-p.js");
+const string_js_1 = require("../base/string.js");
+const kmsExtraData_js_1 = require("./kmsExtraData.js");
+const readKmsSignersContext_p_js_1 = require("../host-contracts/readKmsSignersContext-p.js");
+const PRIVATE_KMS_SIGNCRYPTED_SHARES_TOKEN = Symbol('KmsSigncryptedShares.token');
+const GET_METADATA_FUNC = Symbol('KmsSigncryptedShares.getMetadata');
+const GET_SHARES_FUNC = Symbol('KmsSigncryptedShares.getShares');
+class KmsSigncryptedSharesImpl {
+    constructor(metadata, shares) {
+        _KmsSigncryptedSharesImpl_metadata.set(this, void 0);
+        _KmsSigncryptedSharesImpl_shares.set(this, void 0);
+        __classPrivateFieldSet(this, _KmsSigncryptedSharesImpl_metadata, {
+            kmsSignersContext: metadata.kmsSignersContext,
+            eip712Domain: metadata.eip712Domain,
+            eip712Signature: metadata.eip712Signature,
+            eip712SignerAddress: metadata.eip712SignerAddress,
+            handles: [...metadata.handles],
+        }, "f");
+        Object.freeze(__classPrivateFieldGet(this, _KmsSigncryptedSharesImpl_metadata, "f"));
+        Object.freeze(__classPrivateFieldGet(this, _KmsSigncryptedSharesImpl_metadata, "f").handles);
+        __classPrivateFieldSet(this, _KmsSigncryptedSharesImpl_shares, [...shares], "f");
+        Object.freeze(__classPrivateFieldGet(this, _KmsSigncryptedSharesImpl_shares, "f"));
+        __classPrivateFieldGet(this, _KmsSigncryptedSharesImpl_shares, "f").forEach((share) => Object.freeze(share));
+    }
+    [(_KmsSigncryptedSharesImpl_metadata = new WeakMap(), _KmsSigncryptedSharesImpl_shares = new WeakMap(), GET_SHARES_FUNC)](token) {
+        if (token !== PRIVATE_KMS_SIGNCRYPTED_SHARES_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        return __classPrivateFieldGet(this, _KmsSigncryptedSharesImpl_shares, "f");
+    }
+    [GET_METADATA_FUNC](token) {
+        if (token !== PRIVATE_KMS_SIGNCRYPTED_SHARES_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        return __classPrivateFieldGet(this, _KmsSigncryptedSharesImpl_metadata, "f");
+    }
+}
+function assertUniformExtraData(shares) {
+    const firstShare = shares[0];
+    if (firstShare === undefined) {
+        throw new Error('Expected at least one signcrypted share.');
+    }
+    const firstExtraData = firstShare.extraData;
+    for (let i = 1; i < shares.length; i++) {
+        const share = shares[i];
+        if (share !== undefined && share.extraData !== firstExtraData) {
+            throw new Error(`Mismatched extraData across shares: share[0]="${firstExtraData}" vs share[${i}]="${share.extraData}".`);
+        }
+    }
+    return firstExtraData;
+}
+async function createKmsSigncryptedShares(context, parameters) {
+    const { metadata, shares } = parameters;
+    (0, KmsSignersContext_p_js_1.assertIsKmsSignersContext)(metadata.kmsSignersContext, {});
+    const relayerExtraData = (0, string_js_1.ensure0x)(assertUniformExtraData(shares));
+    (0, kmsExtraData_js_1.assertIsKmsExtraData)(relayerExtraData, {});
+    const reconciledKmsSignersContext = await (0, readKmsSignersContext_p_js_1.reconcileKmsSignersContext)(context, {
+        address: context.chain.fhevm.contracts.kmsVerifier.address,
+        relayerExtraData,
+        requestedKmsSignersContext: metadata.kmsSignersContext,
+        mode: 'loose',
+    });
+    return new KmsSigncryptedSharesImpl({ ...metadata, kmsSignersContext: reconciledKmsSignersContext }, shares);
+}
+function getShares(signcryptedShares) {
+    if (!(signcryptedShares instanceof KmsSigncryptedSharesImpl)) {
+        throw new Error('Invalid KmsSigncryptedShares');
+    }
+    return signcryptedShares[GET_SHARES_FUNC](PRIVATE_KMS_SIGNCRYPTED_SHARES_TOKEN);
+}
+function getMetadata(signcryptedShares) {
+    if (!(signcryptedShares instanceof KmsSigncryptedSharesImpl)) {
+        throw new Error('Invalid KmsSigncryptedShares');
+    }
+    return signcryptedShares[GET_METADATA_FUNC](PRIVATE_KMS_SIGNCRYPTED_SHARES_TOKEN);
+}
+//# sourceMappingURL=KmsSigncryptedShares-p.js.map

package/_cjs/core/kms/KmsSigncryptedShares-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KmsSigncryptedShares-p.js","sourceRoot":"","sources":["../../../core/kms/KmsSigncryptedShares-p.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AA0GA,gEAuCC;AAQD,8BAKC;AAKD,kCAKC;AAlKD,qFAAqF;AACrF,iDAA6C;AAC7C,uDAAyD;AACzD,6FAA0F;AAI1F,MAAM,oCAAoC,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAElF,MAAM,iBAAiB,GAAG,MAAM,CAAC,kCAAkC,CAAC,CAAC;AACrE,MAAM,eAAe,GAAG,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAcjE,MAAM,wBAAwB;IAK5B,YAAY,QAAsC,EAAE,MAAsC;QAHjF,qDAAwC;QACxC,mDAAwC;QAG/C,uBAAA,IAAI,sCAAa;YACf,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;SAC/B,MAAA,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,uBAAA,IAAI,0CAAU,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,uBAAA,IAAI,0CAAU,CAAC,OAAO,CAAC,CAAC;QAEtC,uBAAA,IAAI,oCAAW,CAAC,GAAG,MAAM,CAAC,MAAA,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,uBAAA,IAAI,wCAAQ,CAAC,CAAC;QAC5B,uBAAA,IAAI,wCAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IAEM,wGAAC,eAAe,EAAC,CAAC,KAAa;QACpC,IAAI,KAAK,KAAK,oCAAoC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,uBAAA,IAAI,wCAAQ,CAAC;IACtB,CAAC;IAEM,CAAC,iBAAiB,CAAC,CAAC,KAAa;QACtC,IAAI,KAAK,KAAK,oCAAoC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,uBAAA,IAAI,0CAAU,CAAC;IACxB,CAAC;CACF;AAaD,SAAS,sBAAsB,CAAC,MAAsC;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CACb,iDAAiD,cAAc,cAAc,CAAC,MAAM,KAAK,CAAC,SAAS,IAAI,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAYM,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,UAGC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IAiBxC,IAAA,kDAAyB,EAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAG1D,MAAM,gBAAgB,GAAa,IAAA,oBAAQ,EAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,IAAA,sCAAoB,EAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAG3C,MAAM,2BAA2B,GAAsB,MAAM,IAAA,uDAA0B,EAAC,OAAO,EAAE;QAC/F,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;QAChF,gBAAgB;QAChB,0BAA0B,EAAE,QAAQ,CAAC,iBAAiB;QACtD,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,OAAO,IAAI,wBAAwB,CAAC,EAAE,GAAG,QAAQ,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,EAAE,MAAM,CAAC,CAAC;AAC/G,CAAC;AAQD,SAAgB,SAAS,CAAC,iBAAuC;IAC/D,IAAI,CAAC,CAAC,iBAAiB,YAAY,wBAAwB,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,iBAAiB,CAAC,eAAe,CAAC,CAAC,oCAAoC,CAAC,CAAC;AAClF,CAAC;AAKD,SAAgB,WAAW,CAAC,iBAAuC;IACjE,IAAI,CAAC,CAAC,iBAAiB,YAAY,wBAAwB,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,oCAAoC,CAAC,CAAC;AACpF,CAAC"}

package/_cjs/core/kms/PublicDecryptionProof-p.js

@@ -0,0 +1,95 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _PublicDecryptionProofImpl_decryptionProof, _PublicDecryptionProofImpl_orderedClearValues, _PublicDecryptionProofImpl_orderedAbiEncodedClearValues, _PublicDecryptionProofImpl_extraData;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PublicDecryptionProofImpl = void 0;
+exports.createPublicDecryptionProof = createPublicDecryptionProof;
+const bytes_js_1 = require("../base/bytes.js");
+const ClearValue_js_1 = require("../handle/ClearValue.js");
+const FheType_js_1 = require("../handle/FheType.js");
+const KmsSignersContext_p_js_1 = require("../host-contracts/KmsSignersContext-p.js");
+const verifyKmsPublicDecryptEip712_p_js_1 = require("./verifyKmsPublicDecryptEip712-p.js");
+const PRIVATE_TOKEN = Symbol('PublicDecryptionProof.token');
+class PublicDecryptionProofImpl {
+    constructor(privateToken, parameters) {
+        _PublicDecryptionProofImpl_decryptionProof.set(this, void 0);
+        _PublicDecryptionProofImpl_orderedClearValues.set(this, void 0);
+        _PublicDecryptionProofImpl_orderedAbiEncodedClearValues.set(this, void 0);
+        _PublicDecryptionProofImpl_extraData.set(this, void 0);
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        if (parameters.orderedClearValues.length === 0) {
+            throw new Error('PublicDecryptionProof requires at least one clear value');
+        }
+        __classPrivateFieldSet(this, _PublicDecryptionProofImpl_decryptionProof, parameters.decryptionProof, "f");
+        __classPrivateFieldSet(this, _PublicDecryptionProofImpl_orderedClearValues, Object.freeze([...parameters.orderedClearValues]), "f");
+        __classPrivateFieldSet(this, _PublicDecryptionProofImpl_extraData, parameters.extraData, "f");
+        __classPrivateFieldSet(this, _PublicDecryptionProofImpl_orderedAbiEncodedClearValues, parameters.orderedAbiEncodedClearValues, "f");
+    }
+    get decryptionProof() {
+        return __classPrivateFieldGet(this, _PublicDecryptionProofImpl_decryptionProof, "f");
+    }
+    get orderedClearValues() {
+        return __classPrivateFieldGet(this, _PublicDecryptionProofImpl_orderedClearValues, "f");
+    }
+    get orderedAbiEncodedClearValues() {
+        return __classPrivateFieldGet(this, _PublicDecryptionProofImpl_orderedAbiEncodedClearValues, "f");
+    }
+    get extraData() {
+        return __classPrivateFieldGet(this, _PublicDecryptionProofImpl_extraData, "f");
+    }
+}
+exports.PublicDecryptionProofImpl = PublicDecryptionProofImpl;
+_PublicDecryptionProofImpl_decryptionProof = new WeakMap(), _PublicDecryptionProofImpl_orderedClearValues = new WeakMap(), _PublicDecryptionProofImpl_orderedAbiEncodedClearValues = new WeakMap(), _PublicDecryptionProofImpl_extraData = new WeakMap();
+Object.freeze(PublicDecryptionProofImpl);
+Object.freeze(PublicDecryptionProofImpl.prototype);
+async function createPublicDecryptionProof(context, parameters) {
+    await (0, verifyKmsPublicDecryptEip712_p_js_1.verifyKmsPublicDecryptEip712)(context, parameters);
+    const { orderedHandles: orderedEncryptedValues, orderedAbiEncodedClearValues, kmsPublicDecryptEIP712Signatures, kmsSignersContext, originToken, } = parameters;
+    const extraData = (0, KmsSignersContext_p_js_1.kmsSignersContextToExtraData)(kmsSignersContext);
+    const signedExtraData = extraData === '0x00' ? '0x' : extraData;
+    const packedNumSigners = context.runtime.ethereum.encodePacked({
+        types: ['uint8'],
+        values: [kmsPublicDecryptEIP712Signatures.length],
+    });
+    const packedSignatures = context.runtime.ethereum.encodePacked({
+        types: Array(kmsPublicDecryptEIP712Signatures.length).fill('bytes'),
+        values: kmsPublicDecryptEIP712Signatures,
+    });
+    const decryptionProof = (0, bytes_js_1.concatBytesHex)([packedNumSigners, packedSignatures, signedExtraData]);
+    const orderedAbiTypes = orderedEncryptedValues.map((h) => h.solidityPrimitiveTypeName);
+    const decoded = context.runtime.ethereum.decode({
+        types: orderedAbiTypes,
+        encodedData: orderedAbiEncodedClearValues,
+    });
+    if (decoded.length !== orderedEncryptedValues.length) {
+        throw new Error('Invalid decrypted result.');
+    }
+    const orderedValues = orderedEncryptedValues.map((h, index) => (0, FheType_js_1.toClearValueType)(h.fheType, decoded[index]));
+    const orderedDecryptedFhevmHandles = (0, ClearValue_js_1.createClearValueArray)({
+        orderedHandles: orderedEncryptedValues,
+        orderedValues,
+        originToken,
+    });
+    const orderedAbiEncodedDecryptedFhevmHandles = (0, ClearValue_js_1.abiEncodeClearValues)(context, {
+        orderedClearValues: orderedDecryptedFhevmHandles,
+    });
+    return new PublicDecryptionProofImpl(PRIVATE_TOKEN, {
+        decryptionProof: decryptionProof,
+        orderedClearValues: orderedDecryptedFhevmHandles,
+        orderedAbiEncodedClearValues: orderedAbiEncodedDecryptedFhevmHandles.abiEncodedClearValues,
+        extraData: signedExtraData,
+    });
+}
+//# sourceMappingURL=PublicDecryptionProof-p.js.map

package/_cjs/core/kms/PublicDecryptionProof-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicDecryptionProof-p.js","sourceRoot":"","sources":["../../../core/kms/PublicDecryptionProof-p.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAoGA,kEAgFC;AA5KD,+CAAkD;AAClD,2DAAsF;AACtF,qDAAwD;AACxD,qFAAwF;AACxF,2FAAmF;AAInF,MAAM,aAAa,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;AAS5D,MAAa,yBAAyB;IAQpC,YACE,YAAoB,EACpB,UAKC;QAbM,6DAA2B;QAC3B,gEAAuD;QACvD,0EAAwC;QAExC,uDAAqB;QAW5B,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,UAAU,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,uBAAA,IAAI,8CAAoB,UAAU,CAAC,eAAe,MAAA,CAAC;QACnD,uBAAA,IAAI,iDAAuB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAsC,MAAA,CAAC;QAClH,uBAAA,IAAI,wCAAc,UAAU,CAAC,SAAS,MAAA,CAAC;QACvC,uBAAA,IAAI,2DAAiC,UAAU,CAAC,4BAA4B,MAAA,CAAC;IAC/E,CAAC;IAMD,IAAW,eAAe;QACxB,OAAO,uBAAA,IAAI,kDAAiB,CAAC;IAC/B,CAAC;IAED,IAAW,kBAAkB;QAC3B,OAAO,uBAAA,IAAI,qDAAoB,CAAC;IAClC,CAAC;IAED,IAAW,4BAA4B;QACrC,OAAO,uBAAA,IAAI,+DAA8B,CAAC;IAC5C,CAAC;IAED,IAAW,SAAS;QAClB,OAAO,uBAAA,IAAI,4CAAW,CAAC;IACzB,CAAC;CACF;AAhDD,8DAgDC;;AAED,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;AACzC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;AAwB5C,KAAK,UAAU,2BAA2B,CAC/C,OAAgB,EAChB,UAAsB;IAGtB,MAAM,IAAA,gEAA4B,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAExD,MAAM,EACJ,cAAc,EAAE,sBAAsB,EACtC,4BAA4B,EAC5B,gCAAgC,EAChC,iBAAiB,EACjB,WAAW,GACZ,GAAG,UAAU,CAAC;IAMf,MAAM,SAAS,GAAG,IAAA,qDAA4B,EAAC,iBAAiB,CAAC,CAAC;IAQlE,MAAM,eAAe,GAAG,SAAS,KAAM,MAAmB,CAAC,CAAC,CAAE,IAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAM5F,MAAM,gBAAgB,GAAa,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QACvE,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,MAAM,EAAE,CAAC,gCAAgC,CAAC,MAAM,CAAC;KAClD,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC7D,KAAK,EAAE,KAAK,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAa;QAC/E,MAAM,EAAE,gCAAgC;KACzC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAa,IAAA,yBAAc,EAAC,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;IAMxG,MAAM,eAAe,GAAgC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;IAEpH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9C,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,4BAA4B;KAC1C,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,aAAa,GAAqB,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAC9E,IAAA,6BAAgB,EAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAC5C,CAAC;IAEF,MAAM,4BAA4B,GAAG,IAAA,qCAAqB,EAAC;QACzD,cAAc,EAAE,sBAAsB;QACtC,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,sCAAsC,GAAG,IAAA,oCAAoB,EAAC,OAAO,EAAE;QAC3E,kBAAkB,EAAE,4BAA4B;KACjD,CAAC,CAAC;IAEH,OAAO,IAAI,yBAAyB,CAAC,aAAa,EAAE;QAClD,eAAe,EAAE,eAAe;QAChC,kBAAkB,EAAE,4BAA4B;QAChD,4BAA4B,EAAE,sCAAsC,CAAC,qBAAqB;QAC1F,SAAS,EAAE,eAAe;KAC3B,CAAC,CAAC;AACL,CAAC"}

package/_cjs/core/kms/PublicDecryptionProof.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isPublicDecryptionProof = isPublicDecryptionProof;
+const PublicDecryptionProof_p_js_1 = require("./PublicDecryptionProof-p.js");
+function isPublicDecryptionProof(value) {
+    return value instanceof PublicDecryptionProof_p_js_1.PublicDecryptionProofImpl;
+}
+//# sourceMappingURL=PublicDecryptionProof.js.map

package/_cjs/core/kms/PublicDecryptionProof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicDecryptionProof.js","sourceRoot":"","sources":["../../../core/kms/PublicDecryptionProof.ts"],"names":[],"mappings":";;AAOA,0DAEC;AARD,6EAAyE;AAMzE,SAAgB,uBAAuB,CAAC,KAAc;IACpD,OAAO,KAAK,YAAY,sDAAyB,CAAC;AACpD,CAAC"}

package/_cjs/core/kms/SignedDecryptionPermit-p.js

@@ -0,0 +1,230 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _SignedDecryptionPermitBaseImpl_eip712, _SignedDecryptionPermitBaseImpl_signature, _SignedDecryptionPermitBaseImpl_signerAddress;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializeSignedDecryptionPermitToJSON = serializeSignedDecryptionPermitToJSON;
+exports.isSignedDecryptionPermit = isSignedDecryptionPermit;
+exports.assertIsSignedDecryptionPermit = assertIsSignedDecryptionPermit;
+exports.assertPermitIncludesContractAddresses = assertPermitIncludesContractAddresses;
+exports.signDecryptionPermit = signDecryptionPermit;
+exports.parseSignedDecryptionPermit = parseSignedDecryptionPermit;
+const verifyKmsUserDecryptEip712_js_1 = require("../utils-p/decrypt/verifyKmsUserDecryptEip712.js");
+const verifyKmsDelegatedUserDecryptEip712_js_1 = require("../utils-p/decrypt/verifyKmsDelegatedUserDecryptEip712.js");
+const record_js_1 = require("../base/record.js");
+const bytes_js_1 = require("../base/bytes.js");
+const InvalidTypeError_js_1 = require("../base/errors/InvalidTypeError.js");
+const address_js_1 = require("../base/address.js");
+const createKmsUserDecryptEip712_js_1 = require("./createKmsUserDecryptEip712.js");
+const createKmsDelegatedUserDecryptEip712_js_1 = require("./createKmsDelegatedUserDecryptEip712.js");
+const string_js_1 = require("../base/string.js");
+const TransportKeypair_p_js_1 = require("./TransportKeypair-p.js");
+const utils_js_1 = require("./utils.js");
+const readKmsSignersContext_p_js_1 = require("../host-contracts/readKmsSignersContext-p.js");
+const KmsSignersContext_p_js_1 = require("../host-contracts/KmsSignersContext-p.js");
+const kmsExtraData_js_1 = require("./kmsExtraData.js");
+const PRIVATE_TOKEN = Symbol('SignedDecryptionPermit.token');
+const MAX_USER_DECRYPT_DURATION_DAYS = 365;
+const MAX_USER_DECRYPT_CONTRACT_ADDRESSES = 10;
+class SignedDecryptionPermitBaseImpl {
+    constructor(privateToken, parameters) {
+        _SignedDecryptionPermitBaseImpl_eip712.set(this, void 0);
+        _SignedDecryptionPermitBaseImpl_signature.set(this, void 0);
+        _SignedDecryptionPermitBaseImpl_signerAddress.set(this, void 0);
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        __classPrivateFieldSet(this, _SignedDecryptionPermitBaseImpl_eip712, parameters.eip712, "f");
+        __classPrivateFieldSet(this, _SignedDecryptionPermitBaseImpl_signature, parameters.signature, "f");
+        __classPrivateFieldSet(this, _SignedDecryptionPermitBaseImpl_signerAddress, parameters.signerAddress, "f");
+    }
+    get eip712() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitBaseImpl_eip712, "f");
+    }
+    get signature() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitBaseImpl_signature, "f");
+    }
+    get signerAddress() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitBaseImpl_signerAddress, "f");
+    }
+    assertNotExpired() {
+        (0, utils_js_1.assertKmsEIP712DeadlineValidity)(__classPrivateFieldGet(this, _SignedDecryptionPermitBaseImpl_eip712, "f").message, MAX_USER_DECRYPT_DURATION_DAYS);
+    }
+    assertMatchesKmsContext(kmsSignersContext) {
+        const expectedExtraData = (0, KmsSignersContext_p_js_1.kmsSignersContextToExtraData)(kmsSignersContext);
+        if (expectedExtraData !== __classPrivateFieldGet(this, _SignedDecryptionPermitBaseImpl_eip712, "f").message.extraData) {
+            throw new Error(`Invalid permit: extraData "${__classPrivateFieldGet(this, _SignedDecryptionPermitBaseImpl_eip712, "f").message.extraData}" does not match expected "${expectedExtraData}" from KmsSignersContext.`);
+        }
+    }
+    get e2eTransportPublicKey() {
+        return __classPrivateFieldGet(this, _SignedDecryptionPermitBaseImpl_eip712, "f").message.publicKey;
+    }
+    get kmsContextId() {
+        return (0, kmsExtraData_js_1.fromKmsExtraData)(__classPrivateFieldGet(this, _SignedDecryptionPermitBaseImpl_eip712, "f").message.extraData).kmsContextId;
+    }
+}
+_SignedDecryptionPermitBaseImpl_eip712 = new WeakMap(), _SignedDecryptionPermitBaseImpl_signature = new WeakMap(), _SignedDecryptionPermitBaseImpl_signerAddress = new WeakMap();
+function serializeSignedDecryptionPermitToJSON(permit) {
+    assertIsSignedDecryptionPermit(permit, {});
+    return {
+        eip712: permit.eip712,
+        signature: permit.signature,
+        signerAddress: permit.signerAddress,
+    };
+}
+class SignedSelfDecryptionPermitImpl extends SignedDecryptionPermitBaseImpl {
+    get eip712() {
+        return super.eip712;
+    }
+    get encryptedDataOwnerAddress() {
+        return this.signerAddress;
+    }
+    get isDelegated() {
+        return false;
+    }
+}
+class SignedDelegatedDecryptionPermitImpl extends SignedDecryptionPermitBaseImpl {
+    get eip712() {
+        return super.eip712;
+    }
+    get encryptedDataOwnerAddress() {
+        return this.eip712.message.delegatorAddress;
+    }
+    get isDelegated() {
+        return true;
+    }
+}
+Object.freeze(SignedDecryptionPermitBaseImpl);
+Object.freeze(SignedDecryptionPermitBaseImpl.prototype);
+Object.freeze(SignedSelfDecryptionPermitImpl);
+Object.freeze(SignedSelfDecryptionPermitImpl.prototype);
+Object.freeze(SignedDelegatedDecryptionPermitImpl);
+Object.freeze(SignedDelegatedDecryptionPermitImpl.prototype);
+function isSignedDecryptionPermit(value) {
+    return value instanceof SignedDecryptionPermitBaseImpl;
+}
+function assertIsSignedDecryptionPermit(value, options) {
+    if (!isSignedDecryptionPermit(value)) {
+        throw new InvalidTypeError_js_1.InvalidTypeError({
+            subject: options.subject,
+            type: typeof value,
+            expectedType: 'SignedDecryptionPermit',
+        }, options);
+    }
+}
+function assertPermitIncludesContractAddresses(permit, contractAddresses) {
+    const permitAddresses = permit.eip712.message.contractAddresses;
+    for (const address of contractAddresses) {
+        if (!permitAddresses.some((a) => a.toLowerCase() === address.toLowerCase())) {
+            throw Error(`contract address ${address} is not listed in the permit's contractAddresses`);
+        }
+    }
+}
+async function _createSignedDecryptionPermit(context, parameters) {
+    const { signerAddress, eip712, signature } = parameters;
+    if (eip712.message.contractAddresses.length === 0) {
+        throw Error('contractAddresses is empty');
+    }
+    if (eip712.message.contractAddresses.length > MAX_USER_DECRYPT_CONTRACT_ADDRESSES) {
+        throw Error(`contractAddresses max length of ${MAX_USER_DECRYPT_CONTRACT_ADDRESSES} exceeded`);
+    }
+    if (Number(eip712.message.durationDays) > MAX_USER_DECRYPT_DURATION_DAYS) {
+        throw Error(`durationDays is above max duration of ${MAX_USER_DECRYPT_DURATION_DAYS}`);
+    }
+    if (eip712.primaryType === 'UserDecryptRequestVerification') {
+        await (0, verifyKmsUserDecryptEip712_js_1.verifyKmsUserDecryptEip712)(context, {
+            signer: signerAddress,
+            message: eip712.message,
+            signature,
+        });
+        return new SignedSelfDecryptionPermitImpl(PRIVATE_TOKEN, parameters);
+    }
+    else {
+        await (0, verifyKmsDelegatedUserDecryptEip712_js_1.verifyKmsDelegatedUserDecryptEip712)(context, {
+            signer: signerAddress,
+            message: eip712.message,
+            signature,
+        });
+        return new SignedDelegatedDecryptionPermitImpl(PRIVATE_TOKEN, parameters);
+    }
+}
+async function signDecryptionPermit(context, parameters) {
+    const kmsSignersContext = await (0, readKmsSignersContext_p_js_1.readKmsSignersContext)(context, {
+        address: context.chain.fhevm.contracts.kmsVerifier.address,
+    });
+    const extraData = (0, KmsSignersContext_p_js_1.kmsSignersContextToExtraData)(kmsSignersContext);
+    const { contractAddresses, startTimestamp, durationDays, signerAddress: signerAddressArg, transportKeypair, signer, delegatorAddress, } = parameters;
+    (0, TransportKeypair_p_js_1.assertIsTransportKeypair)(transportKeypair, {});
+    (0, address_js_1.assertIsAddress)(signerAddressArg, {});
+    if (delegatorAddress !== undefined) {
+        (0, address_js_1.assertIsAddress)(delegatorAddress, {});
+        if (signerAddressArg.toLowerCase() === delegatorAddress.toLowerCase()) {
+            throw new Error('signerAddress and delegatorAddress must be different. ' +
+                'Use a non-delegated permit to decrypt your own values.');
+        }
+    }
+    const signerAddress = (0, address_js_1.addressToChecksummedAddress)(signerAddressArg);
+    const commonMessage = {
+        verifyingContractAddressDecryption: context.chain.fhevm.gateway.contracts.decryption.address,
+        chainId: context.chain.id,
+        contractAddresses,
+        durationDays,
+        startTimestamp,
+        extraData,
+        publicKey: transportKeypair.publicKey,
+    };
+    const eip712 = delegatorAddress !== undefined
+        ? (0, createKmsDelegatedUserDecryptEip712_js_1.createKmsDelegatedUserDecryptEip712)({
+            ...commonMessage,
+            delegatorAddress,
+        })
+        : (0, createKmsUserDecryptEip712_js_1.createKmsUserDecryptEip712)(commonMessage);
+    const signature = await context.runtime.ethereum.signTypedData(signer, {
+        account: signerAddress,
+        ...eip712,
+    });
+    return await _createSignedDecryptionPermit(context, {
+        signature,
+        signerAddress,
+        eip712,
+    });
+}
+async function parseSignedDecryptionPermit(context, transportKeypair, permit) {
+    (0, TransportKeypair_p_js_1.assertIsTransportKeypair)(transportKeypair, {});
+    const permitName = 'permit';
+    const options = {};
+    (0, record_js_1.assertRecordNonNullableProperty)(permit, 'eip712', permitName, options);
+    (0, bytes_js_1.assertRecordBytes65HexProperty)(permit, 'signature', permitName, options);
+    (0, address_js_1.assertRecordAddressProperty)(permit, 'signerAddress', permitName, options);
+    const eip712 = permit.eip712;
+    (0, string_js_1.assertRecordStringProperty)(eip712, 'primaryType', `${permitName}.eip712`, options);
+    const primaryType = eip712.primaryType;
+    if (primaryType === 'UserDecryptRequestVerification') {
+        (0, createKmsUserDecryptEip712_js_1.assertIsKmsUserDecryptEip712)(eip712, `${permitName}.eip712`, options);
+    }
+    else if (primaryType === 'DelegatedUserDecryptRequestVerification') {
+        (0, createKmsDelegatedUserDecryptEip712_js_1.assertIsKmsDelegatedUserDecryptEip712)(eip712, `${permitName}.eip712`, options);
+    }
+    else {
+        throw new Error(`Unknown permit primaryType: ${primaryType}`);
+    }
+    if (eip712.message.publicKey.toLowerCase() !== transportKeypair.publicKey.toLowerCase()) {
+        throw new Error("The permit's publicKey does not match the E2eTransportKeypair's publicKey. " +
+            'Ensure the permit was signed with the same keypair.');
+    }
+    return await _createSignedDecryptionPermit(context, {
+        signature: permit.signature,
+        eip712,
+        signerAddress: (0, address_js_1.addressToChecksummedAddress)(permit.signerAddress),
+    });
+}
+//# sourceMappingURL=SignedDecryptionPermit-p.js.map

package/_cjs/core/kms/SignedDecryptionPermit-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedDecryptionPermit-p.js","sourceRoot":"","sources":["../../../core/kms/SignedDecryptionPermit-p.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAiJA,sFAWC;AAsDD,4DAEC;AAGD,wEAcC;AAMD,sFAUC;AA+FD,oDA+DC;AAMD,kEA2CC;AAjbD,oGAA8F;AAC9F,sHAAgH;AAChH,iDAAoE;AACpE,+CAAkE;AAClE,4EAAsE;AACtE,mDAA+G;AAC/G,mFAA2G;AAC3G,qGAGkD;AAClD,iDAA+D;AAC/D,mEAA0F;AAC1F,yCAA6D;AAC7D,6FAAqF;AACrF,qFAAwF;AACxF,uDAAqD;AAIrD,MAAM,aAAa,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAC7D,MAAM,8BAA8B,GAAG,GAAiB,CAAC;AACzD,MAAM,mCAAmC,GAAG,EAAiB,CAAC;AAoB9D,MAAe,8BAA8B;IAK3C,YACE,YAAoB,EACpB,UAIC;QAVM,yDAA8D;QAC9D,4DAAuB;QACvB,gEAAmC;QAU1C,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,uBAAA,IAAI,0CAAW,UAAU,CAAC,MAAM,MAAA,CAAC;QACjC,uBAAA,IAAI,6CAAc,UAAU,CAAC,SAAS,MAAA,CAAC;QACvC,uBAAA,IAAI,iDAAkB,UAAU,CAAC,aAAa,MAAA,CAAC;IACjD,CAAC;IAED,IAAW,MAAM;QACf,OAAO,uBAAA,IAAI,8CAAQ,CAAC;IACtB,CAAC;IAED,IAAW,SAAS;QAClB,OAAO,uBAAA,IAAI,iDAAW,CAAC;IACzB,CAAC;IAED,IAAW,aAAa;QACtB,OAAO,uBAAA,IAAI,qDAAe,CAAC;IAC7B,CAAC;IAKM,gBAAgB;QACrB,IAAA,0CAA+B,EAAC,uBAAA,IAAI,8CAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACxF,CAAC;IAmBM,uBAAuB,CAAC,iBAAoC;QACjE,MAAM,iBAAiB,GAAG,IAAA,qDAA4B,EAAC,iBAAiB,CAAC,CAAC;QAC1E,IAAI,iBAAiB,KAAK,uBAAA,IAAI,8CAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,8BAA8B,uBAAA,IAAI,8CAAQ,CAAC,OAAO,CAAC,SAAS,8BAA8B,iBAAiB,2BAA2B,CACvI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAW,qBAAqB;QAC9B,OAAO,uBAAA,IAAI,8CAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;IACxC,CAAC;IAED,IAAW,YAAY;QACrB,OAAO,IAAA,kCAAgB,EAAC,uBAAA,IAAI,8CAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC;IACvE,CAAC;CACF;;AAWD,SAAgB,qCAAqC,CAAC,MAA8B;IAKlF,8BAA8B,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAC;AACJ,CAAC;AAMD,MAAM,8BAA+B,SAAQ,8BAA8B;IACzE,IAAoB,MAAM;QACxB,OAAO,KAAK,CAAC,MAA8B,CAAC;IAC9C,CAAC;IAED,IAAoB,yBAAyB;QAC3C,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAoB,WAAW;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAMD,MAAM,mCACJ,SAAQ,8BAA8B;IAGtC,IAAoB,MAAM;QACxB,OAAO,KAAK,CAAC,MAAuC,CAAC;IACvD,CAAC;IAED,IAAoB,yBAAyB;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC9C,CAAC;IAED,IAAoB,WAAW;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAID,MAAM,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,CAAC,mCAAmC,CAAC,SAAS,CAAC,CAAC;AAM7D,SAAgB,wBAAwB,CAAC,KAAc;IACrD,OAAO,KAAK,YAAY,8BAA8B,CAAC;AACzD,CAAC;AAGD,SAAgB,8BAA8B,CAC5C,KAAc,EACd,OAAmD;IAEnD,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,sCAAgB,CACxB;YACE,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,KAAK;YAClB,YAAY,EAAE,wBAAwB;SACvC,EACD,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC;AAMD,SAAgB,qCAAqC,CACnD,MAA8B,EAC9B,iBAAoC;IAEpC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAChE,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC5E,MAAM,KAAK,CAAC,oBAAoB,OAAO,kDAAkD,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;AACH,CAAC;AAMD,KAAK,UAAU,6BAA6B,CAC1C,OAAuE,EACvE,UAIC;IAED,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;IAExD,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,mCAAmC,EAAE,CAAC;QAClF,MAAM,KAAK,CAAC,mCAAmC,mCAAmC,WAAW,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,8BAA8B,EAAE,CAAC;QACzE,MAAM,KAAK,CAAC,yCAAyC,8BAA8B,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,KAAK,gCAAgC,EAAE,CAAC;QAC5D,MAAM,IAAA,0DAA0B,EAAC,OAAO,EAAE;YACxC,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS;SACV,CAAC,CAAC;QACH,OAAO,IAAI,8BAA8B,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,MAAM,IAAA,4EAAmC,EAAC,OAAO,EAAE;YACjD,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS;SACV,CAAC,CAAC;QACH,OAAO,IAAI,mCAAmC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAoDM,KAAK,UAAU,oBAAoB,CACxC,OAAoC,EACpC,UAA0C;IAE1C,MAAM,iBAAiB,GAAG,MAAM,IAAA,kDAAqB,EAAC,OAAO,EAAE;QAC7D,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAA6B;KACjF,CAAC,CAAC;IAEH,MAAM,SAAS,GAAa,IAAA,qDAA4B,EAAC,iBAAiB,CAAC,CAAC;IAE5E,MAAM,EACJ,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,aAAa,EAAE,gBAAgB,EAC/B,gBAAgB,EAChB,MAAM,EACN,gBAAgB,GACjB,GAAG,UAAU,CAAC;IAEf,IAAA,gDAAwB,EAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAA,4BAAe,EAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAEtC,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,IAAA,4BAAe,EAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,gBAAgB,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CACb,wDAAwD;gBACtD,wDAAwD,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAA,wCAA2B,EAAC,gBAAgB,CAAC,CAAC;IAEpE,MAAM,aAAa,GAAG;QACpB,kCAAkC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAA6B;QAClH,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,iBAAiB;QACjB,YAAY;QACZ,cAAc;QACd,SAAS;QACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;KACtC,CAAC;IAEF,MAAM,MAAM,GACV,gBAAgB,KAAK,SAAS;QAC5B,CAAC,CAAC,IAAA,4EAAmC,EAAC;YAClC,GAAG,aAAa;YAChB,gBAAgB;SACjB,CAAC;QACJ,CAAC,CAAC,IAAA,0DAA0B,EAAC,aAAa,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE;QACrE,OAAO,EAAE,aAAa;QACtB,GAAG,MAAM;KACV,CAAC,CAAC;IAEH,OAAO,MAAM,6BAA6B,CAAC,OAAO,EAAE;QAClD,SAAS;QACT,aAAa;QACb,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAMM,KAAK,UAAU,2BAA2B,CAC/C,OAKC,EACD,gBAAkC,EAClC,MAAe;IAEf,IAAA,gDAAwB,EAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,QAAQ,CAAC;IAC5B,MAAM,OAAO,GAAG,EAAE,CAAC;IAEnB,IAAA,2CAA+B,EAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvE,IAAA,yCAA8B,EAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACzE,IAAA,wCAA2B,EAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAA,sCAA0B,EAAC,MAAM,EAAE,aAAa,EAAE,GAAG,UAAU,SAAS,EAAE,OAAO,CAAC,CAAC;IACnF,MAAM,WAAW,GAAI,MAAkC,CAAC,WAAW,CAAC;IAEpE,IAAI,WAAW,KAAK,gCAAgC,EAAE,CAAC;QACrD,IAAA,4DAA4B,EAAC,MAAM,EAAE,GAAG,UAAU,SAAS,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,WAAW,KAAK,yCAAyC,EAAE,CAAC;QACrE,IAAA,8EAAqC,EAAC,MAAM,EAAE,GAAG,UAAU,SAAS,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,qDAAqD,CACxD,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,6BAA6B,CAAC,OAAO,EAAE;QAClD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM;QACN,aAAa,EAAE,IAAA,wCAA2B,EAAC,MAAM,CAAC,aAAa,CAAC;KACjE,CAAC,CAAC;AACL,CAAC"}

package/_cjs/core/kms/TransportKeypair-p.js

@@ -0,0 +1,153 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _TransportKeypairImpl_publicKeyBytesHex, _TransportKeypairImpl_privateKeyBytes, _TransportKeypairImpl_runtime, _TransportKeypairImpl_tkmsPrivateKey;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isTransportKeypair = isTransportKeypair;
+exports.assertIsTransportKeypair = assertIsTransportKeypair;
+exports.generateTransportKeypair = generateTransportKeypair;
+exports.toTransportKeypair = toTransportKeypair;
+exports.serializeTransportKeypair = serializeTransportKeypair;
+exports.transportKeypairToTkmsPrivateKey = transportKeypairToTkmsPrivateKey;
+const bytes_js_1 = require("../base/bytes.js");
+const InvalidTypeError_js_1 = require("../base/errors/InvalidTypeError.js");
+const record_js_1 = require("../base/record.js");
+const CoreFhevmRuntime_p_js_1 = require("../runtime/CoreFhevmRuntime-p.js");
+const verifyTkmsPublicKey_js_1 = require("../utils-p/decrypt/verifyTkmsPublicKey.js");
+const PRIVATE_TOKEN = Symbol('TransportKeypair.token');
+const GetTkmsPrivateKeyFn = Symbol();
+const SerializeFn = Symbol();
+class TransportKeypairImpl {
+    constructor(privateToken, runtime, parameters) {
+        _TransportKeypairImpl_publicKeyBytesHex.set(this, void 0);
+        _TransportKeypairImpl_privateKeyBytes.set(this, void 0);
+        _TransportKeypairImpl_runtime.set(this, void 0);
+        _TransportKeypairImpl_tkmsPrivateKey.set(this, void 0);
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        __classPrivateFieldSet(this, _TransportKeypairImpl_runtime, new WeakRef(runtime), "f");
+        __classPrivateFieldSet(this, _TransportKeypairImpl_publicKeyBytesHex, parameters.publicKeyBytesHex, "f");
+        __classPrivateFieldSet(this, _TransportKeypairImpl_privateKeyBytes, parameters.privateKeyBytes, "f");
+        __classPrivateFieldSet(this, _TransportKeypairImpl_tkmsPrivateKey, parameters.tkmsPrivateKey, "f");
+    }
+    get publicKey() {
+        return __classPrivateFieldGet(this, _TransportKeypairImpl_publicKeyBytesHex, "f");
+    }
+    async [(_TransportKeypairImpl_publicKeyBytesHex = new WeakMap(), _TransportKeypairImpl_privateKeyBytes = new WeakMap(), _TransportKeypairImpl_runtime = new WeakMap(), _TransportKeypairImpl_tkmsPrivateKey = new WeakMap(), GetTkmsPrivateKeyFn)](privateToken, expectedRuntime) {
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        if (expectedRuntime !== __classPrivateFieldGet(this, _TransportKeypairImpl_runtime, "f").deref()) {
+            throw new Error('Invalid runtime');
+        }
+        if (__classPrivateFieldGet(this, _TransportKeypairImpl_tkmsPrivateKey, "f") !== undefined) {
+            return __classPrivateFieldGet(this, _TransportKeypairImpl_tkmsPrivateKey, "f");
+        }
+        const runtimeWithDecrypt = (0, CoreFhevmRuntime_p_js_1.asFhevmRuntimeWith)(expectedRuntime, 'decrypt');
+        __classPrivateFieldSet(this, _TransportKeypairImpl_tkmsPrivateKey, await runtimeWithDecrypt.decrypt.deserializeTkmsPrivateKey({
+            tkmsPrivateKeyBytes: __classPrivateFieldGet(this, _TransportKeypairImpl_privateKeyBytes, "f"),
+        }), "f");
+        await (0, verifyTkmsPublicKey_js_1.verifyTkmsPublicKey)({ runtime: runtimeWithDecrypt }, {
+            tkmsPrivateKey: __classPrivateFieldGet(this, _TransportKeypairImpl_tkmsPrivateKey, "f"),
+            tkmsPublicKeyBytesHex: __classPrivateFieldGet(this, _TransportKeypairImpl_publicKeyBytesHex, "f"),
+        });
+        return __classPrivateFieldGet(this, _TransportKeypairImpl_tkmsPrivateKey, "f");
+    }
+    [SerializeFn](privateToken) {
+        if (privateToken !== PRIVATE_TOKEN) {
+            throw new Error('Unauthorized');
+        }
+        return {
+            publicKey: __classPrivateFieldGet(this, _TransportKeypairImpl_publicKeyBytesHex, "f"),
+            privateKey: (0, bytes_js_1.bytesToHexLarge)(__classPrivateFieldGet(this, _TransportKeypairImpl_privateKeyBytes, "f"), false),
+        };
+    }
+    toJSON() {
+        return { publicKey: __classPrivateFieldGet(this, _TransportKeypairImpl_publicKeyBytesHex, "f") };
+    }
+}
+Object.freeze(TransportKeypairImpl);
+Object.freeze(TransportKeypairImpl.prototype);
+function isTransportKeypair(value) {
+    return value instanceof TransportKeypairImpl;
+}
+function assertIsTransportKeypair(value, options) {
+    if (!isTransportKeypair(value)) {
+        throw new InvalidTypeError_js_1.InvalidTypeError({
+            subject: options.subject,
+            type: typeof value,
+            expectedType: 'TransportKeypair',
+        }, options);
+    }
+}
+async function generateTransportKeypair(context) {
+    const tkmsPrivateKey = await context.runtime.decrypt.generateTkmsPrivateKey();
+    const tkmsPrivateKeyBytes = await context.runtime.decrypt.serializeTkmsPrivateKey({ tkmsPrivateKey });
+    const tkmsPublicKeyBytesHex = await context.runtime.decrypt.getTkmsPublicKeyHex({
+        tkmsPrivateKey,
+    });
+    return new TransportKeypairImpl(PRIVATE_TOKEN, context.runtime, {
+        privateKeyBytes: tkmsPrivateKeyBytes,
+        publicKeyBytesHex: tkmsPublicKeyBytesHex,
+        tkmsPrivateKey,
+    });
+}
+async function toTransportKeypair(context, value) {
+    if (isTransportKeypair(value)) {
+        await value[GetTkmsPrivateKeyFn](PRIVATE_TOKEN, context.runtime);
+        return value;
+    }
+    const name = 'TransportKeypair';
+    const options = {};
+    (0, record_js_1.assertRecordNonNullableProperty)(value, 'publicKey', name, {
+        expectedType: 'Bytes | BytesHex',
+        ...options,
+    });
+    (0, record_js_1.assertRecordNonNullableProperty)(value, 'privateKey', name, {
+        expectedType: 'Bytes | BytesHex',
+        ...options,
+    });
+    const rawPublicKey = value.publicKey;
+    const rawPrivateKey = value.privateKey;
+    (0, bytes_js_1.assertIsBytesOrBytesHex)(rawPublicKey, { subject: `${name}.publicKey` });
+    (0, bytes_js_1.assertIsBytesOrBytesHex)(rawPrivateKey, { subject: `${name}.privateKey` });
+    const tkmsPrivateKeyBytes = typeof rawPrivateKey === 'string' ? (0, bytes_js_1.hexToBytesFaster)(rawPrivateKey, { strict: true }) : rawPrivateKey;
+    const tkmsPublicKeyBytesHex = typeof rawPublicKey === 'string' ? rawPublicKey : (0, bytes_js_1.bytesToHexLarge)(rawPublicKey, false);
+    let tkmsPrivateKey;
+    let runtimeWithDecrypt;
+    try {
+        runtimeWithDecrypt = (0, CoreFhevmRuntime_p_js_1.asFhevmRuntimeWith)(context.runtime, 'decrypt');
+    }
+    catch {
+    }
+    if (runtimeWithDecrypt !== undefined) {
+        tkmsPrivateKey = await runtimeWithDecrypt.decrypt.deserializeTkmsPrivateKey({
+            tkmsPrivateKeyBytes,
+        });
+        await (0, verifyTkmsPublicKey_js_1.verifyTkmsPublicKey)({ runtime: runtimeWithDecrypt }, { tkmsPrivateKey, tkmsPublicKeyBytesHex });
+    }
+    return new TransportKeypairImpl(PRIVATE_TOKEN, context.runtime, {
+        privateKeyBytes: tkmsPrivateKeyBytes,
+        publicKeyBytesHex: tkmsPublicKeyBytesHex,
+        tkmsPrivateKey,
+    });
+}
+function serializeTransportKeypair(value) {
+    assertIsTransportKeypair(value, {});
+    return value[SerializeFn](PRIVATE_TOKEN);
+}
+async function transportKeypairToTkmsPrivateKey(context, value) {
+    assertIsTransportKeypair(value, {});
+    return await value[GetTkmsPrivateKeyFn](PRIVATE_TOKEN, context.runtime);
+}
+//# sourceMappingURL=TransportKeypair-p.js.map

package/_cjs/core/kms/TransportKeypair-p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TransportKeypair-p.js","sourceRoot":"","sources":["../../../core/kms/TransportKeypair-p.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AA+IA,gDAEC;AAKD,4DAcC;AAKD,4DAWC;AAWD,gDAwDC;AASD,8DAMC;AASD,4EAMC;AAjRD,+CAA8F;AAC9F,4EAAsE;AACtE,iDAAoE;AACpE,4EAAsE;AACtE,sFAAgF;AAIhF,MAAM,aAAa,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAsBvD,MAAM,mBAAmB,GAAG,MAAM,EAAE,CAAC;AACrC,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC;AAE7B,MAAM,oBAAoB;IASxB,YACE,YAAoB,EACpB,OAAqB,EACrB,UAIC;QAbM,0DAA6B;QAC7B,wDAAwB;QAExB,gDAAgC;QACzC,uDAA4C;QAW1C,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,uBAAA,IAAI,iCAAY,IAAI,OAAO,CAAC,OAAO,CAAC,MAAA,CAAC;QACrC,uBAAA,IAAI,2CAAsB,UAAU,CAAC,iBAAiB,MAAA,CAAC;QACvD,uBAAA,IAAI,yCAAoB,UAAU,CAAC,eAAe,MAAA,CAAC;QACnD,uBAAA,IAAI,wCAAmB,UAAU,CAAC,cAAc,MAAA,CAAC;IACnD,CAAC;IAED,IAAW,SAAS;QAClB,OAAO,uBAAA,IAAI,+CAAmB,CAAC;IACjC,CAAC;IAaD,KAAK,CAAC,uNAAC,mBAAmB,EAAC,CAAC,YAAoB,EAAE,eAA6B;QAC7E,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QAGD,IAAI,eAAe,KAAK,uBAAA,IAAI,qCAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,uBAAA,IAAI,4CAAgB,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,uBAAA,IAAI,4CAAgB,CAAC;QAC9B,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAA,0CAAkB,EAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QAE1E,uBAAA,IAAI,wCAAmB,MAAM,kBAAkB,CAAC,OAAO,CAAC,yBAAyB,CAAC;YAChF,mBAAmB,EAAE,uBAAA,IAAI,6CAAiB;SAC3C,CAAC,MAAA,CAAC;QAGH,MAAM,IAAA,4CAAmB,EACvB,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAC/B;YACE,cAAc,EAAE,uBAAA,IAAI,4CAAgB;YACpC,qBAAqB,EAAE,uBAAA,IAAI,+CAAmB;SAC/C,CACF,CAAC;QAEF,OAAO,uBAAA,IAAI,4CAAgB,CAAC;IAC9B,CAAC;IAOD,CAAC,WAAW,CAAC,CAAC,YAAoB;QAIhC,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,OAAO;YACL,SAAS,EAAE,uBAAA,IAAI,+CAAmB;YAClC,UAAU,EAAE,IAAA,0BAAe,EAAC,uBAAA,IAAI,6CAAiB,EAAE,KAAK,CAAY;SACrE,CAAC;IACJ,CAAC;IAMM,MAAM;QACX,OAAO,EAAE,SAAS,EAAE,uBAAA,IAAI,+CAAmB,EAAE,CAAC;IAChD,CAAC;CACF;AAED,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;AAK9C,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,OAAO,KAAK,YAAY,oBAAoB,CAAC;AAC/C,CAAC;AAKD,SAAgB,wBAAwB,CACtC,KAAc,EACd,OAAmD;IAEnD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,sCAAgB,CACxB;YACE,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,KAAK;YAClB,YAAY,EAAE,kBAAkB;SACjC,EACD,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC;AAKM,KAAK,UAAU,wBAAwB,CAAC,OAA0C;IACvF,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAC9E,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IACtG,MAAM,qBAAqB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9E,cAAc;KACf,CAAC,CAAC;IACH,OAAO,IAAI,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE;QAC9D,eAAe,EAAE,mBAAmB;QACpC,iBAAiB,EAAE,qBAAqB;QACxC,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAWM,KAAK,UAAU,kBAAkB,CACtC,OAA2C,EAC3C,KAAc;IAEd,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAE9B,MAAO,KAA8B,CAAC,mBAAmB,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC;IAChC,MAAM,OAAO,GAAG,EAAE,CAAC;IAEnB,IAAA,2CAA+B,EAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE;QACxD,YAAY,EAAE,kBAAkB;QAChC,GAAG,OAAO;KACX,CAAC,CAAC;IACH,IAAA,2CAA+B,EAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;QACzD,YAAY,EAAE,kBAAkB;QAChC,GAAG,OAAO;KACX,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC;IACrC,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC;IAEvC,IAAA,kCAAuB,EAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC,CAAC;IACxE,IAAA,kCAAuB,EAAC,aAAa,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,aAAa,EAAE,CAAC,CAAC;IAE1E,MAAM,mBAAmB,GACvB,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,2BAAgB,EAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAExG,MAAM,qBAAqB,GACzB,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAA,0BAAe,EAAC,YAAY,EAAE,KAAK,CAAY,CAAC;IAEpG,IAAI,cAA0C,CAAC;IAG/C,IAAI,kBAA2C,CAAC;IAChD,IAAI,CAAC;QACH,kBAAkB,GAAG,IAAA,0CAAkB,EAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;IAED,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,yBAAyB,CAAC;YAC1E,mBAAmB;SACpB,CAAC,CAAC;QACH,MAAM,IAAA,4CAAmB,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE;QAC9D,eAAe,EAAE,mBAAmB;QACpC,iBAAiB,EAAE,qBAAqB;QACxC,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AASD,SAAgB,yBAAyB,CAAC,KAAuB;IAI/D,wBAAwB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,OAAQ,KAA8B,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,CAAC;AACrE,CAAC;AASM,KAAK,UAAU,gCAAgC,CACpD,OAA2C,EAC3C,KAAuB;IAEvB,wBAAwB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,OAAO,MAAO,KAA8B,CAAC,mBAAmB,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AACpG,CAAC"}