@hashgraphonline/standards-sdk 0.1.190 → 0.1.191

package/dist/es/standards-sdk.es224.js

@@ -1,187 +1,199 @@
-import { creditBalanceResponseSchema, creditProvidersResponseSchema, hbarPurchaseIntentResponseSchema, creditPurchaseResponseSchema, x402MinimumsResponseSchema, x402CreditPurchaseResponseSchema } from "./standards-sdk.es177.js";
-import { normalizeHexPrivateKey } from "./standards-sdk.es228.js";
-import { optionalImport } from "./standards-sdk.es207.js";
-async function getCreditsBalance(client, params = {}) {
-  const query = new URLSearchParams();
-  const normalizedAccountId = params.accountId?.trim();
-  if (normalizedAccountId) {
-    query.set("accountId", normalizedAccountId);
-  }
-  const suffix = query.size > 0 ? `?${query.toString()}` : "";
-  const raw = await client.requestJson(`/credits/balance${suffix}`, {
-    method: "GET"
-  });
-  return client.parseWithSchema(
-    raw,
-    creditBalanceResponseSchema,
-    "credit balance response"
-  );
-}
-async function getCreditProviders(client) {
-  const raw = await client.requestJson("/credits/providers", {
-    method: "GET"
+import { Buffer } from "buffer";
+import { secp256k1 } from "@noble/curves/secp256k1.js";
+import { registerEncryptionKeyResponseSchema } from "./standards-sdk.es178.js";
+import { optionalImport } from "./standards-sdk.es210.js";
+const getFs = async () => {
+  const fsModule = await optionalImport("node:fs") ?? await optionalImport("fs");
+  if (fsModule && typeof fsModule.existsSync === "function" && typeof fsModule.readFileSync === "function" && typeof fsModule.writeFileSync === "function" && typeof fsModule.appendFileSync === "function") {
+    return fsModule;
+  }
+  return null;
+};
+const getNodePath = async () => {
+  const pathModule = await optionalImport("node:path") ?? await optionalImport("path");
+  if (pathModule && typeof pathModule.resolve === "function") {
+    return pathModule;
+  }
+  return null;
+};
+const getNodeCrypto = async () => {
+  const cryptoModule = await optionalImport("node:crypto") ?? await optionalImport("crypto");
+  if (cryptoModule && typeof cryptoModule.randomBytes === "function") {
+    return cryptoModule;
+  }
+  return null;
+};
+async function registerEncryptionKey(client, payload) {
+  const raw = await client.requestJson("/encryption/keys", {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: payload
   });
   return client.parseWithSchema(
     raw,
-    creditProvidersResponseSchema,
-    "credit providers response"
+    registerEncryptionKeyResponseSchema,
+    "register encryption key response"
   );
 }
-async function createHbarPurchaseIntent(client, payload) {
-  const body = {};
-  const normalizedAccountId = payload.accountId?.trim();
-  if (normalizedAccountId) {
-    body.accountId = normalizedAccountId;
-  }
-  if (payload.credits !== void 0) {
-    body.credits = payload.credits;
-  }
-  if (payload.hbarAmount !== void 0) {
-    body.hbarAmount = payload.hbarAmount;
-  }
-  if (payload.memo?.trim()) {
-    body.memo = payload.memo.trim();
-  }
-  const raw = await client.requestJson(
-    "/credits/payments/hbar/intent",
-    {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body
+function normalizeAutoRegisterIdentity(config) {
+  const identity = {};
+  if (config.uaid) {
+    identity.uaid = config.uaid;
+  }
+  if (config.ledgerAccountId) {
+    identity.ledgerAccountId = config.ledgerAccountId;
+    if (config.ledgerNetwork) {
+      identity.ledgerNetwork = config.ledgerNetwork;
     }
-  );
-  return client.parseWithSchema(
-    raw,
-    hbarPurchaseIntentResponseSchema,
-    "hbar purchase intent response"
-  );
+  }
+  if (config.email) {
+    identity.email = config.email;
+  }
+  if (identity.uaid || identity.ledgerAccountId || identity.email) {
+    return identity;
+  }
+  return null;
 }
-async function loadX402Dependencies(client) {
-  const [{ default: axios }, x402Axios, x402Types] = await Promise.all([
-    import("axios"),
-    optionalImport("x402-axios"),
-    optionalImport("x402/types")
-  ]);
-  if (!x402Axios || !x402Types) {
-    throw new Error(
-      "x402-axios and x402/types are required for X402 flows. Install them to enable ledger payments."
-    );
+function derivePublicKeyFromPrivateKey(client, privateKey) {
+  const normalized = client.hexToBuffer(privateKey);
+  const publicKey = secp256k1.getPublicKey(normalized, true);
+  return Buffer.from(publicKey).toString("hex");
+}
+async function resolveAutoRegisterKeyMaterial(client, config) {
+  if (config.publicKey?.trim()) {
+    return { publicKey: config.publicKey.trim() };
   }
-  const withPaymentInterceptor = x402Axios.withPaymentInterceptor;
-  const decodePaymentResponse = x402Axios.decodeXPaymentResponse;
-  const createX402Signer = x402Types.createSigner;
-  const createPaymentClient = (walletClient) => {
-    const axiosClient = axios.create({
-      baseURL: client.baseUrl,
-      headers: {
-        ...client.getDefaultHeaders(),
-        "content-type": "application/json"
-      }
+  let privateKey = config.privateKey?.trim();
+  const envVar = config.envVar ?? "RB_ENCRYPTION_PRIVATE_KEY";
+  if (!privateKey && envVar && process?.env?.[envVar]?.trim()) {
+    privateKey = process.env[envVar]?.trim();
+  }
+  if (!privateKey && config.generateIfMissing) {
+    const pair = await client.generateEncryptionKeyPair({
+      keyType: config.keyType ?? "secp256k1",
+      envVar,
+      envPath: config.envPath,
+      overwrite: config.overwriteEnv
     });
-    const paymentClient = withPaymentInterceptor(axiosClient, walletClient);
-    return paymentClient;
-  };
-  return { createPaymentClient, decodePaymentResponse, createX402Signer };
-}
-function calculateHbarAmountParam(hbarAmount) {
-  const tinybars = Math.ceil(hbarAmount * 1e8);
-  if (tinybars <= 0) {
-    throw new Error("Calculated purchase amount must be positive");
+    return { publicKey: pair.publicKey, privateKey: pair.privateKey };
+  }
+  if (privateKey) {
+    const publicKey = derivePublicKeyFromPrivateKey(client, privateKey);
+    return { publicKey, privateKey };
   }
-  return tinybars / 1e8;
+  return null;
 }
-async function purchaseCreditsWithHbar(client, params) {
-  const body = {
-    accountId: params.accountId,
-    payerKey: params.privateKey,
-    hbarAmount: calculateHbarAmountParam(params.hbarAmount)
-  };
-  if (params.memo) {
-    body.memo = params.memo;
+async function autoRegisterEncryptionKey(client, config) {
+  const identity = normalizeAutoRegisterIdentity(config);
+  if (!identity) {
+    throw new Error(
+      "Auto-registration requires uaid, ledgerAccountId, or email"
+    );
   }
-  if (params.metadata) {
-    body.metadata = params.metadata;
+  const material = await resolveAutoRegisterKeyMaterial(client, config);
+  if (!material) {
+    throw new Error(
+      "Unable to resolve encryption public key for auto-registration"
+    );
   }
-  const raw = await client.requestJson("/credits/purchase", {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body
+  await registerEncryptionKey(client, {
+    keyType: config.keyType ?? "secp256k1",
+    publicKey: material.publicKey,
+    ...identity
   });
-  return client.parseWithSchema(
-    raw,
-    creditPurchaseResponseSchema,
-    "credit purchase response"
-  );
+  return material;
 }
-async function getX402Minimums(client) {
-  const raw = await client.requestJson(
-    "/credits/purchase/x402/minimums",
-    { method: "GET" }
-  );
-  return client.parseWithSchema(
-    raw,
-    x402MinimumsResponseSchema,
-    "x402 minimums response"
-  );
+async function ensureAgentEncryptionKey(client, options) {
+  return autoRegisterEncryptionKey(client, {
+    ...options,
+    uaid: options.uaid
+  });
 }
-async function purchaseCreditsWithX402(client, params) {
-  const { createPaymentClient, decodePaymentResponse } = await loadX402Dependencies(client);
-  if (!Number.isFinite(params.credits) || params.credits <= 0) {
-    throw new Error("credits must be a positive number");
+function createEncryptionApi(client) {
+  return {
+    registerKey: (payload) => registerEncryptionKey(client, payload),
+    generateEphemeralKeyPair: () => client.createEphemeralKeyPair(),
+    deriveSharedSecret: (options) => client.deriveSharedSecret(options),
+    encryptCipherEnvelope: (options) => client.buildCipherEnvelope(options),
+    decryptCipherEnvelope: (options) => client.openCipherEnvelope(options),
+    ensureAgentKey: (options) => ensureAgentEncryptionKey(client, options)
+  };
+}
+async function bootstrapEncryptionOptions(client, options) {
+  if (!options?.autoRegister || options.autoRegister.enabled === false) {
+    return null;
   }
-  if (params.usdAmount !== void 0 && (!Number.isFinite(params.usdAmount) || params.usdAmount <= 0)) {
-    throw new Error("usdAmount must be a positive number when provided");
+  return autoRegisterEncryptionKey(client, options.autoRegister);
+}
+async function generateEncryptionKeyPair(client, options = {}) {
+  client.assertNodeRuntime("generateEncryptionKeyPair");
+  const keyType = options.keyType ?? "secp256k1";
+  if (keyType !== "secp256k1") {
+    throw new Error("Only secp256k1 key generation is supported currently");
   }
-  const body = {
-    accountId: params.accountId,
-    credits: params.credits
-  };
-  if (params.usdAmount !== void 0) {
-    body.usdAmount = params.usdAmount;
+  const cryptoModule = await getNodeCrypto();
+  if (!cryptoModule) {
+    throw new Error(
+      "Node.js crypto module is not available; cannot generate encryption key pair"
+    );
   }
-  if (params.description) {
-    body.description = params.description;
+  const privateKeyBytes = cryptoModule.randomBytes(32);
+  const privateKey = Buffer.from(privateKeyBytes).toString("hex");
+  const publicKeyBytes = secp256k1.getPublicKey(privateKeyBytes, true);
+  const publicKey = Buffer.from(publicKeyBytes).toString("hex");
+  const envVar = options.envVar ?? "RB_ENCRYPTION_PRIVATE_KEY";
+  const pathModule = options.envPath ? await getNodePath() : null;
+  const resolvedPath = options.envPath && pathModule ? pathModule.resolve(options.envPath) : void 0;
+  if (options.envPath && !resolvedPath) {
+    throw new Error(
+      "Node.js path module is not available; cannot resolve encryption key env path"
+    );
   }
-  if (params.metadata) {
-    body.metadata = params.metadata;
+  if (resolvedPath) {
+    const fsModule = await getFs();
+    if (!fsModule) {
+      throw new Error(
+        "File system module is not available; cannot write encryption key env file"
+      );
+    }
+    const envLine = `${envVar}=${privateKey}`;
+    if (fsModule.existsSync(resolvedPath)) {
+      const content = fsModule.readFileSync(resolvedPath, "utf-8");
+      const lineRegex = new RegExp(`^${envVar}=.*$`, "m");
+      if (lineRegex.test(content)) {
+        if (!options.overwrite) {
+          throw new Error(
+            `${envVar} already exists in ${resolvedPath}; set overwrite=true to replace it`
+          );
+        }
+        const updated = content.replace(lineRegex, envLine);
+        fsModule.writeFileSync(resolvedPath, updated);
+      } else {
+        const needsNewline = !content.endsWith("\n");
+        fsModule.appendFileSync(
+          resolvedPath,
+          `${needsNewline ? "\n" : ""}${envLine}
+`
+        );
+      }
+    } else {
+      fsModule.writeFileSync(resolvedPath, `${envLine}
+`);
+    }
   }
-  const paymentClient = createPaymentClient(params.walletClient);
-  const response = await paymentClient.post("/credits/purchase/x402", body);
-  const parsed = client.parseWithSchema(
-    response.data,
-    x402CreditPurchaseResponseSchema,
-    "x402 credit purchase response"
-  );
-  const responseHeaders = response.headers ?? {};
-  const paymentHeader = typeof responseHeaders["x-payment-response"] === "string" ? responseHeaders["x-payment-response"] : void 0;
-  const decodedPayment = paymentHeader !== void 0 ? decodePaymentResponse(paymentHeader) : void 0;
   return {
-    ...parsed,
-    paymentResponseHeader: paymentHeader,
-    paymentResponse: decodedPayment
+    privateKey,
+    publicKey,
+    envPath: resolvedPath,
+    envVar
   };
 }
-async function buyCreditsWithX402(client, params) {
-  const network = params.network ?? "base";
-  const { createX402Signer } = await loadX402Dependencies(client);
-  const normalizedKey = normalizeHexPrivateKey(params.evmPrivateKey);
-  const walletClient = await createX402Signer(network, normalizedKey);
-  return purchaseCreditsWithX402(client, {
-    accountId: params.accountId,
-    credits: params.credits,
-    usdAmount: params.usdAmount,
-    description: params.description,
-    metadata: params.metadata,
-    walletClient
-  });
-}
 export {
-  buyCreditsWithX402,
-  createHbarPurchaseIntent,
-  getCreditProviders,
-  getCreditsBalance,
-  getX402Minimums,
-  purchaseCreditsWithHbar,
-  purchaseCreditsWithX402
+  autoRegisterEncryptionKey,
+  bootstrapEncryptionOptions,
+  createEncryptionApi,
+  ensureAgentEncryptionKey,
+  generateEncryptionKeyPair,
+  registerEncryptionKey
 };
 //# sourceMappingURL=standards-sdk.es224.js.map

package/dist/es/standards-sdk.es224.js.map

@@ -1 +1 @@
-{"version":3,"file":"standards-sdk.es224.js","sources":["../../src/services/registry-broker/client/credits.ts"],"sourcesContent":["import type {\n  CreditBalanceResponse,\n  CreditProvidersResponse,\n  CreditPurchaseResponse,\n  HbarPurchaseIntentRequest,\n  HbarPurchaseIntentResponse,\n  JsonObject,\n  JsonValue,\n  X402CreditPurchaseResponse,\n  X402MinimumsResponse,\n} from '../types';\nimport {\n  creditBalanceResponseSchema,\n  creditProvidersResponseSchema,\n  creditPurchaseResponseSchema,\n  hbarPurchaseIntentResponseSchema,\n  x402CreditPurchaseResponseSchema,\n  x402MinimumsResponseSchema,\n} from '../schemas';\nimport type { RegistryBrokerClient } from './base-client';\nimport { normalizeHexPrivateKey, type X402NetworkId } from './utils';\nimport { optionalImport } from '../../../utils/dynamic-import';\n\ntype PaymentHeaders = Record<string, string | string[] | undefined>;\ntype PaymentClient = {\n  post: (\n    url: string,\n    body: JsonObject,\n  ) => Promise<{ data: JsonValue; headers?: PaymentHeaders }>;\n};\n\nexport interface PurchaseCreditsWithX402Params {\n  accountId: string;\n  credits: number;\n  usdAmount?: number;\n  description?: string;\n  metadata?: JsonObject;\n  walletClient: object;\n}\n\nexport interface BuyCreditsWithX402Params {\n  accountId: string;\n  credits: number;\n  usdAmount?: number;\n  description?: string;\n  metadata?: JsonObject;\n  evmPrivateKey: string;\n  network?: X402NetworkId;\n  rpcUrl?: string;\n}\n\nexport type X402PurchaseResult = X402CreditPurchaseResponse & {\n  paymentResponseHeader?: string;\n  paymentResponse?: unknown;\n};\n\nexport async function getCreditsBalance(\n  client: RegistryBrokerClient,\n  params: { accountId?: string } = {},\n): Promise<CreditBalanceResponse> {\n  const query = new URLSearchParams();\n  const normalizedAccountId = params.accountId?.trim();\n  if (normalizedAccountId) {\n    query.set('accountId', normalizedAccountId);\n  }\n  const suffix = query.size > 0 ? `?${query.toString()}` : '';\n  const raw = await client.requestJson<JsonValue>(`/credits/balance${suffix}`, {\n    method: 'GET',\n  });\n  return client.parseWithSchema(\n    raw,\n    creditBalanceResponseSchema,\n    'credit balance response',\n  );\n}\n\nexport async function getCreditProviders(\n  client: RegistryBrokerClient,\n): Promise<CreditProvidersResponse> {\n  const raw = await client.requestJson<JsonValue>('/credits/providers', {\n    method: 'GET',\n  });\n  return client.parseWithSchema(\n    raw,\n    creditProvidersResponseSchema,\n    'credit providers response',\n  );\n}\n\nexport async function createHbarPurchaseIntent(\n  client: RegistryBrokerClient,\n  payload: HbarPurchaseIntentRequest,\n): Promise<HbarPurchaseIntentResponse> {\n  const body: JsonObject = {};\n  const normalizedAccountId = payload.accountId?.trim();\n  if (normalizedAccountId) {\n    body.accountId = normalizedAccountId;\n  }\n  if (payload.credits !== undefined) {\n    body.credits = payload.credits;\n  }\n  if (payload.hbarAmount !== undefined) {\n    body.hbarAmount = payload.hbarAmount;\n  }\n  if (payload.memo?.trim()) {\n    body.memo = payload.memo.trim();\n  }\n\n  const raw = await client.requestJson<JsonValue>(\n    '/credits/payments/hbar/intent',\n    {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body,\n    },\n  );\n  return client.parseWithSchema(\n    raw,\n    hbarPurchaseIntentResponseSchema,\n    'hbar purchase intent response',\n  );\n}\n\ntype LoadX402DependenciesResult = {\n  createPaymentClient: (walletClient: object) => PaymentClient;\n  decodePaymentResponse: (value: string) => unknown;\n  createX402Signer: (\n    network: X402NetworkId,\n    privateKey: `0x${string}`,\n  ) => Promise<object>;\n};\n\nasync function loadX402Dependencies(\n  client: RegistryBrokerClient,\n): Promise<LoadX402DependenciesResult> {\n  type X402AxiosModule = {\n    withPaymentInterceptor: (client: unknown, walletClient: object) => unknown;\n    decodeXPaymentResponse: (value: string) => unknown;\n  };\n  type X402TypesModule = {\n    createSigner: (\n      network: X402NetworkId,\n      privateKey: `0x${string}`,\n    ) => Promise<object>;\n  };\n\n  const [{ default: axios }, x402Axios, x402Types] = await Promise.all([\n    import('axios'),\n    optionalImport<X402AxiosModule>('x402-axios'),\n    optionalImport<X402TypesModule>('x402/types'),\n  ]);\n\n  if (!x402Axios || !x402Types) {\n    throw new Error(\n      'x402-axios and x402/types are required for X402 flows. Install them to enable ledger payments.',\n    );\n  }\n\n  const withPaymentInterceptor = x402Axios.withPaymentInterceptor;\n  const decodePaymentResponse = x402Axios.decodeXPaymentResponse;\n  const createX402Signer = x402Types.createSigner;\n\n  const createPaymentClient = (walletClient: object): PaymentClient => {\n    const axiosClient = axios.create({\n      baseURL: client.baseUrl,\n      headers: {\n        ...client.getDefaultHeaders(),\n        'content-type': 'application/json',\n      },\n    });\n    const paymentClient = withPaymentInterceptor(axiosClient, walletClient);\n    return paymentClient as PaymentClient;\n  };\n\n  return { createPaymentClient, decodePaymentResponse, createX402Signer };\n}\n\nfunction calculateHbarAmountParam(hbarAmount: number): number {\n  const tinybars = Math.ceil(hbarAmount * 1e8);\n  if (tinybars <= 0) {\n    throw new Error('Calculated purchase amount must be positive');\n  }\n  return tinybars / 1e8;\n}\n\nexport async function purchaseCreditsWithHbar(\n  client: RegistryBrokerClient,\n  params: {\n    accountId: string;\n    privateKey: string;\n    hbarAmount: number;\n    memo?: string;\n    metadata?: JsonObject;\n  },\n): Promise<CreditPurchaseResponse> {\n  const body: JsonObject = {\n    accountId: params.accountId,\n    payerKey: params.privateKey,\n    hbarAmount: calculateHbarAmountParam(params.hbarAmount),\n  };\n\n  if (params.memo) {\n    body.memo = params.memo;\n  }\n\n  if (params.metadata) {\n    body.metadata = params.metadata;\n  }\n\n  const raw = await client.requestJson<JsonValue>('/credits/purchase', {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body,\n  });\n\n  return client.parseWithSchema(\n    raw,\n    creditPurchaseResponseSchema,\n    'credit purchase response',\n  );\n}\n\nexport async function getX402Minimums(\n  client: RegistryBrokerClient,\n): Promise<X402MinimumsResponse> {\n  const raw = await client.requestJson<JsonValue>(\n    '/credits/purchase/x402/minimums',\n    { method: 'GET' },\n  );\n  return client.parseWithSchema(\n    raw,\n    x402MinimumsResponseSchema,\n    'x402 minimums response',\n  );\n}\n\nexport async function purchaseCreditsWithX402(\n  client: RegistryBrokerClient,\n  params: PurchaseCreditsWithX402Params,\n): Promise<X402PurchaseResult> {\n  const { createPaymentClient, decodePaymentResponse } =\n    await loadX402Dependencies(client);\n\n  if (!Number.isFinite(params.credits) || params.credits <= 0) {\n    throw new Error('credits must be a positive number');\n  }\n  if (\n    params.usdAmount !== undefined &&\n    (!Number.isFinite(params.usdAmount) || params.usdAmount <= 0)\n  ) {\n    throw new Error('usdAmount must be a positive number when provided');\n  }\n\n  const body: JsonObject = {\n    accountId: params.accountId,\n    credits: params.credits,\n  };\n\n  if (params.usdAmount !== undefined) {\n    body.usdAmount = params.usdAmount;\n  }\n  if (params.description) {\n    body.description = params.description;\n  }\n  if (params.metadata) {\n    body.metadata = params.metadata;\n  }\n\n  const paymentClient = createPaymentClient(params.walletClient);\n\n  const response = await paymentClient.post('/credits/purchase/x402', body);\n\n  const parsed = client.parseWithSchema(\n    response.data,\n    x402CreditPurchaseResponseSchema,\n    'x402 credit purchase response',\n  );\n\n  const responseHeaders = response.headers ?? {};\n  const paymentHeader =\n    typeof responseHeaders['x-payment-response'] === 'string'\n      ? responseHeaders['x-payment-response']\n      : undefined;\n  const decodedPayment =\n    paymentHeader !== undefined\n      ? decodePaymentResponse(paymentHeader)\n      : undefined;\n\n  return {\n    ...parsed,\n    paymentResponseHeader: paymentHeader,\n    paymentResponse: decodedPayment,\n  };\n}\n\nexport async function buyCreditsWithX402(\n  client: RegistryBrokerClient,\n  params: BuyCreditsWithX402Params,\n): Promise<X402PurchaseResult> {\n  const network: X402NetworkId = params.network ?? 'base';\n  const { createX402Signer } = await loadX402Dependencies(client);\n  const normalizedKey = normalizeHexPrivateKey(params.evmPrivateKey);\n  const walletClient = await createX402Signer(network, normalizedKey);\n\n  return purchaseCreditsWithX402(client, {\n    accountId: params.accountId,\n    credits: params.credits,\n    usdAmount: params.usdAmount,\n    description: params.description,\n    metadata: params.metadata,\n    walletClient,\n  });\n}\n"],"names":[],"mappings":";;;AAwDA,eAAsB,kBACpB,QACA,SAAiC,IACD;AAChC,QAAM,QAAQ,IAAI,gBAAA;AAClB,QAAM,sBAAsB,OAAO,WAAW,KAAA;AAC9C,MAAI,qBAAqB;AACvB,UAAM,IAAI,aAAa,mBAAmB;AAAA,EAC5C;AACA,QAAM,SAAS,MAAM,OAAO,IAAI,IAAI,MAAM,UAAU,KAAK;AACzD,QAAM,MAAM,MAAM,OAAO,YAAuB,mBAAmB,MAAM,IAAI;AAAA,IAC3E,QAAQ;AAAA,EAAA,CACT;AACD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,mBACpB,QACkC;AAClC,QAAM,MAAM,MAAM,OAAO,YAAuB,sBAAsB;AAAA,IACpE,QAAQ;AAAA,EAAA,CACT;AACD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,yBACpB,QACA,SACqC;AACrC,QAAM,OAAmB,CAAA;AACzB,QAAM,sBAAsB,QAAQ,WAAW,KAAA;AAC/C,MAAI,qBAAqB;AACvB,SAAK,YAAY;AAAA,EACnB;AACA,MAAI,QAAQ,YAAY,QAAW;AACjC,SAAK,UAAU,QAAQ;AAAA,EACzB;AACA,MAAI,QAAQ,eAAe,QAAW;AACpC,SAAK,aAAa,QAAQ;AAAA,EAC5B;AACA,MAAI,QAAQ,MAAM,QAAQ;AACxB,SAAK,OAAO,QAAQ,KAAK,KAAA;AAAA,EAC3B;AAEA,QAAM,MAAM,MAAM,OAAO;AAAA,IACvB;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,MAC3B;AAAA,IAAA;AAAA,EACF;AAEF,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAWA,eAAe,qBACb,QACqC;AAYrC,QAAM,CAAC,EAAE,SAAS,MAAA,GAAS,WAAW,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,IACnE,OAAO,OAAO;AAAA,IACd,eAAgC,YAAY;AAAA,IAC5C,eAAgC,YAAY;AAAA,EAAA,CAC7C;AAED,MAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,QAAM,yBAAyB,UAAU;AACzC,QAAM,wBAAwB,UAAU;AACxC,QAAM,mBAAmB,UAAU;AAEnC,QAAM,sBAAsB,CAAC,iBAAwC;AACnE,UAAM,cAAc,MAAM,OAAO;AAAA,MAC/B,SAAS,OAAO;AAAA,MAChB,SAAS;AAAA,QACP,GAAG,OAAO,kBAAA;AAAA,QACV,gBAAgB;AAAA,MAAA;AAAA,IAClB,CACD;AACD,UAAM,gBAAgB,uBAAuB,aAAa,YAAY;AACtE,WAAO;AAAA,EACT;AAEA,SAAO,EAAE,qBAAqB,uBAAuB,iBAAA;AACvD;AAEA,SAAS,yBAAyB,YAA4B;AAC5D,QAAM,WAAW,KAAK,KAAK,aAAa,GAAG;AAC3C,MAAI,YAAY,GAAG;AACjB,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AACA,SAAO,WAAW;AACpB;AAEA,eAAsB,wBACpB,QACA,QAOiC;AACjC,QAAM,OAAmB;AAAA,IACvB,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,YAAY,yBAAyB,OAAO,UAAU;AAAA,EAAA;AAGxD,MAAI,OAAO,MAAM;AACf,SAAK,OAAO,OAAO;AAAA,EACrB;AAEA,MAAI,OAAO,UAAU;AACnB,SAAK,WAAW,OAAO;AAAA,EACzB;AAEA,QAAM,MAAM,MAAM,OAAO,YAAuB,qBAAqB;AAAA,IACnE,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,IAC3B;AAAA,EAAA,CACD;AAED,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,gBACpB,QAC+B;AAC/B,QAAM,MAAM,MAAM,OAAO;AAAA,IACvB;AAAA,IACA,EAAE,QAAQ,MAAA;AAAA,EAAM;AAElB,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,wBACpB,QACA,QAC6B;AAC7B,QAAM,EAAE,qBAAqB,sBAAA,IAC3B,MAAM,qBAAqB,MAAM;AAEnC,MAAI,CAAC,OAAO,SAAS,OAAO,OAAO,KAAK,OAAO,WAAW,GAAG;AAC3D,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,MACE,OAAO,cAAc,WACpB,CAAC,OAAO,SAAS,OAAO,SAAS,KAAK,OAAO,aAAa,IAC3D;AACA,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,OAAmB;AAAA,IACvB,WAAW,OAAO;AAAA,IAClB,SAAS,OAAO;AAAA,EAAA;AAGlB,MAAI,OAAO,cAAc,QAAW;AAClC,SAAK,YAAY,OAAO;AAAA,EAC1B;AACA,MAAI,OAAO,aAAa;AACtB,SAAK,cAAc,OAAO;AAAA,EAC5B;AACA,MAAI,OAAO,UAAU;AACnB,SAAK,WAAW,OAAO;AAAA,EACzB;AAEA,QAAM,gBAAgB,oBAAoB,OAAO,YAAY;AAE7D,QAAM,WAAW,MAAM,cAAc,KAAK,0BAA0B,IAAI;AAExE,QAAM,SAAS,OAAO;AAAA,IACpB,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EAAA;AAGF,QAAM,kBAAkB,SAAS,WAAW,CAAA;AAC5C,QAAM,gBACJ,OAAO,gBAAgB,oBAAoB,MAAM,WAC7C,gBAAgB,oBAAoB,IACpC;AACN,QAAM,iBACJ,kBAAkB,SACd,sBAAsB,aAAa,IACnC;AAEN,SAAO;AAAA,IACL,GAAG;AAAA,IACH,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,EAAA;AAErB;AAEA,eAAsB,mBACpB,QACA,QAC6B;AAC7B,QAAM,UAAyB,OAAO,WAAW;AACjD,QAAM,EAAE,iBAAA,IAAqB,MAAM,qBAAqB,MAAM;AAC9D,QAAM,gBAAgB,uBAAuB,OAAO,aAAa;AACjE,QAAM,eAAe,MAAM,iBAAiB,SAAS,aAAa;AAElE,SAAO,wBAAwB,QAAQ;AAAA,IACrC,WAAW,OAAO;AAAA,IAClB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,UAAU,OAAO;AAAA,IACjB;AAAA,EAAA,CACD;AACH;"}
+{"version":3,"file":"standards-sdk.es224.js","sources":["../../src/services/registry-broker/client/encryption.ts"],"sourcesContent":["import { Buffer } from 'buffer';\nimport { secp256k1 } from '@noble/curves/secp256k1.js';\nimport type {\n  AutoRegisterEncryptionKeyOptions,\n  CipherEnvelope,\n  ClientEncryptionOptions,\n  DecryptCipherEnvelopeOptions,\n  DeriveSharedSecretOptions,\n  EncryptCipherEnvelopeOptions,\n  EphemeralKeyPair,\n  EnsureAgentKeyOptions,\n  RegisterEncryptionKeyPayload,\n  RegisterEncryptionKeyResponse,\n  SharedSecretInput,\n} from '../types';\nimport { registerEncryptionKeyResponseSchema } from '../schemas';\nimport { optionalImport } from '../../../utils/dynamic-import';\nimport type {\n  RegistryBrokerClient,\n  GenerateEncryptionKeyPairOptions,\n} from './base-client';\n\ntype FsModule = {\n  existsSync: (path: string) => boolean;\n  readFileSync: (path: string, encoding: BufferEncoding) => string;\n  writeFileSync: (path: string, data: string) => void;\n  appendFileSync: (path: string, data: string) => void;\n};\n\ntype NodePathModule = {\n  resolve: (...segments: string[]) => string;\n};\n\ntype NodeCryptoModule = {\n  randomBytes: (size: number) => Buffer;\n};\n\nconst getFs = async (): Promise<FsModule | null> => {\n  const fsModule =\n    (await optionalImport<Partial<FsModule>>('node:fs')) ??\n    (await optionalImport<Partial<FsModule>>('fs'));\n\n  if (\n    fsModule &&\n    typeof fsModule.existsSync === 'function' &&\n    typeof fsModule.readFileSync === 'function' &&\n    typeof fsModule.writeFileSync === 'function' &&\n    typeof fsModule.appendFileSync === 'function'\n  ) {\n    return fsModule as FsModule;\n  }\n\n  return null;\n};\n\nconst getNodePath = async (): Promise<NodePathModule | null> => {\n  const pathModule =\n    (await optionalImport<Partial<NodePathModule>>('node:path')) ??\n    (await optionalImport<Partial<NodePathModule>>('path'));\n  if (pathModule && typeof pathModule.resolve === 'function') {\n    return pathModule as NodePathModule;\n  }\n  return null;\n};\n\nconst getNodeCrypto = async (): Promise<NodeCryptoModule | null> => {\n  const cryptoModule =\n    (await optionalImport<Partial<NodeCryptoModule>>('node:crypto')) ??\n    (await optionalImport<Partial<NodeCryptoModule>>('crypto'));\n  if (cryptoModule && typeof cryptoModule.randomBytes === 'function') {\n    return cryptoModule as NodeCryptoModule;\n  }\n  return null;\n};\n\nexport interface RegistryBrokerEncryptionApi {\n  registerKey: (\n    payload: RegisterEncryptionKeyPayload,\n  ) => Promise<RegisterEncryptionKeyResponse>;\n  generateEphemeralKeyPair: () => EphemeralKeyPair;\n  deriveSharedSecret: (options: DeriveSharedSecretOptions) => Buffer;\n  encryptCipherEnvelope: (\n    options: EncryptCipherEnvelopeOptions,\n  ) => CipherEnvelope;\n  decryptCipherEnvelope: (options: DecryptCipherEnvelopeOptions) => string;\n  ensureAgentKey: (\n    options: EnsureAgentKeyOptions,\n  ) => Promise<{ publicKey: string; privateKey?: string }>;\n}\n\nexport async function registerEncryptionKey(\n  client: RegistryBrokerClient,\n  payload: RegisterEncryptionKeyPayload,\n): Promise<RegisterEncryptionKeyResponse> {\n  const raw = await client.requestJson('/encryption/keys', {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body: payload,\n  });\n  return client.parseWithSchema(\n    raw,\n    registerEncryptionKeyResponseSchema,\n    'register encryption key response',\n  );\n}\n\nfunction normalizeAutoRegisterIdentity(\n  config: AutoRegisterEncryptionKeyOptions,\n): Pick<\n  RegisterEncryptionKeyPayload,\n  'uaid' | 'ledgerAccountId' | 'ledgerNetwork' | 'email'\n> | null {\n  const identity: Pick<\n    RegisterEncryptionKeyPayload,\n    'uaid' | 'ledgerAccountId' | 'ledgerNetwork' | 'email'\n  > = {};\n  if (config.uaid) {\n    identity.uaid = config.uaid;\n  }\n  if (config.ledgerAccountId) {\n    identity.ledgerAccountId = config.ledgerAccountId;\n    if (config.ledgerNetwork) {\n      identity.ledgerNetwork = config.ledgerNetwork;\n    }\n  }\n  if (config.email) {\n    identity.email = config.email;\n  }\n  if (identity.uaid || identity.ledgerAccountId || identity.email) {\n    return identity;\n  }\n  return null;\n}\n\nfunction derivePublicKeyFromPrivateKey(\n  client: RegistryBrokerClient,\n  privateKey: string,\n): string {\n  const normalized = client.hexToBuffer(privateKey);\n  const publicKey = secp256k1.getPublicKey(normalized, true);\n  return Buffer.from(publicKey).toString('hex');\n}\n\nasync function resolveAutoRegisterKeyMaterial(\n  client: RegistryBrokerClient,\n  config: AutoRegisterEncryptionKeyOptions,\n): Promise<{ publicKey: string; privateKey?: string } | null> {\n  if (config.publicKey?.trim()) {\n    return { publicKey: config.publicKey.trim() };\n  }\n  let privateKey = config.privateKey?.trim();\n  const envVar = config.envVar ?? 'RB_ENCRYPTION_PRIVATE_KEY';\n  if (!privateKey && envVar && process?.env?.[envVar]?.trim()) {\n    privateKey = process.env[envVar]?.trim();\n  }\n  if (!privateKey && config.generateIfMissing) {\n    const pair = await client.generateEncryptionKeyPair({\n      keyType: config.keyType ?? 'secp256k1',\n      envVar,\n      envPath: config.envPath,\n      overwrite: config.overwriteEnv,\n    });\n    return { publicKey: pair.publicKey, privateKey: pair.privateKey };\n  }\n  if (privateKey) {\n    const publicKey = derivePublicKeyFromPrivateKey(client, privateKey);\n    return { publicKey, privateKey };\n  }\n  return null;\n}\n\nexport async function autoRegisterEncryptionKey(\n  client: RegistryBrokerClient,\n  config: AutoRegisterEncryptionKeyOptions,\n): Promise<{ publicKey: string; privateKey?: string }> {\n  const identity = normalizeAutoRegisterIdentity(config);\n  if (!identity) {\n    throw new Error(\n      'Auto-registration requires uaid, ledgerAccountId, or email',\n    );\n  }\n  const material = await resolveAutoRegisterKeyMaterial(client, config);\n  if (!material) {\n    throw new Error(\n      'Unable to resolve encryption public key for auto-registration',\n    );\n  }\n  await registerEncryptionKey(client, {\n    keyType: config.keyType ?? 'secp256k1',\n    publicKey: material.publicKey,\n    ...identity,\n  });\n  return material;\n}\n\nexport async function ensureAgentEncryptionKey(\n  client: RegistryBrokerClient,\n  options: EnsureAgentKeyOptions,\n): Promise<{ publicKey: string; privateKey?: string }> {\n  return autoRegisterEncryptionKey(client, {\n    ...options,\n    uaid: options.uaid,\n    enabled: true,\n  });\n}\n\nexport function createEncryptionApi(\n  client: RegistryBrokerClient,\n): RegistryBrokerEncryptionApi {\n  return {\n    registerKey: (payload: RegisterEncryptionKeyPayload) =>\n      registerEncryptionKey(client, payload),\n    generateEphemeralKeyPair: () => client.createEphemeralKeyPair(),\n    deriveSharedSecret: (options: DeriveSharedSecretOptions) =>\n      client.deriveSharedSecret(options),\n    encryptCipherEnvelope: (options: EncryptCipherEnvelopeOptions) =>\n      client.buildCipherEnvelope(options),\n    decryptCipherEnvelope: (options: DecryptCipherEnvelopeOptions) =>\n      client.openCipherEnvelope(options),\n    ensureAgentKey: (options: EnsureAgentKeyOptions) =>\n      ensureAgentEncryptionKey(client, options),\n  };\n}\n\nexport async function bootstrapEncryptionOptions(\n  client: RegistryBrokerClient,\n  options?: ClientEncryptionOptions,\n): Promise<{ publicKey: string; privateKey?: string } | null> {\n  if (!options?.autoRegister || options.autoRegister.enabled === false) {\n    return null;\n  }\n  return autoRegisterEncryptionKey(client, options.autoRegister);\n}\n\nexport async function generateEncryptionKeyPair(\n  client: RegistryBrokerClient,\n  options: GenerateEncryptionKeyPairOptions = {},\n): Promise<{\n  privateKey: string;\n  publicKey: string;\n  envPath?: string;\n  envVar: string;\n}> {\n  client.assertNodeRuntime('generateEncryptionKeyPair');\n\n  const keyType = options.keyType ?? 'secp256k1';\n  if (keyType !== 'secp256k1') {\n    throw new Error('Only secp256k1 key generation is supported currently');\n  }\n\n  const cryptoModule = await getNodeCrypto();\n  if (!cryptoModule) {\n    throw new Error(\n      'Node.js crypto module is not available; cannot generate encryption key pair',\n    );\n  }\n  const privateKeyBytes = cryptoModule.randomBytes(32);\n  const privateKey = Buffer.from(privateKeyBytes).toString('hex');\n  const publicKeyBytes = secp256k1.getPublicKey(privateKeyBytes, true);\n  const publicKey = Buffer.from(publicKeyBytes).toString('hex');\n\n  const envVar = options.envVar ?? 'RB_ENCRYPTION_PRIVATE_KEY';\n  const pathModule = options.envPath ? await getNodePath() : null;\n  const resolvedPath =\n    options.envPath && pathModule\n      ? pathModule.resolve(options.envPath)\n      : undefined;\n\n  if (options.envPath && !resolvedPath) {\n    throw new Error(\n      'Node.js path module is not available; cannot resolve encryption key env path',\n    );\n  }\n\n  if (resolvedPath) {\n    const fsModule = await getFs();\n\n    if (!fsModule) {\n      throw new Error(\n        'File system module is not available; cannot write encryption key env file',\n      );\n    }\n\n    const envLine = `${envVar}=${privateKey}`;\n    if (fsModule.existsSync(resolvedPath)) {\n      const content = fsModule.readFileSync(resolvedPath, 'utf-8');\n      const lineRegex = new RegExp(`^${envVar}=.*$`, 'm');\n      if (lineRegex.test(content)) {\n        if (!options.overwrite) {\n          throw new Error(\n            `${envVar} already exists in ${resolvedPath}; set overwrite=true to replace it`,\n          );\n        }\n        const updated = content.replace(lineRegex, envLine);\n        fsModule.writeFileSync(resolvedPath, updated);\n      } else {\n        const needsNewline = !content.endsWith('\\n');\n        fsModule.appendFileSync(\n          resolvedPath,\n          `${needsNewline ? '\\n' : ''}${envLine}\\n`,\n        );\n      }\n    } else {\n      fsModule.writeFileSync(resolvedPath, `${envLine}\\n`);\n    }\n  }\n\n  return {\n    privateKey,\n    publicKey,\n    envPath: resolvedPath,\n    envVar,\n  };\n}\n"],"names":[],"mappings":";;;;AAqCA,MAAM,QAAQ,YAAsC;AAClD,QAAM,WACH,MAAM,eAAkC,SAAS,KACjD,MAAM,eAAkC,IAAI;AAE/C,MACE,YACA,OAAO,SAAS,eAAe,cAC/B,OAAO,SAAS,iBAAiB,cACjC,OAAO,SAAS,kBAAkB,cAClC,OAAO,SAAS,mBAAmB,YACnC;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,MAAM,cAAc,YAA4C;AAC9D,QAAM,aACH,MAAM,eAAwC,WAAW,KACzD,MAAM,eAAwC,MAAM;AACvD,MAAI,cAAc,OAAO,WAAW,YAAY,YAAY;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,MAAM,gBAAgB,YAA8C;AAClE,QAAM,eACH,MAAM,eAA0C,aAAa,KAC7D,MAAM,eAA0C,QAAQ;AAC3D,MAAI,gBAAgB,OAAO,aAAa,gBAAgB,YAAY;AAClE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAiBA,eAAsB,sBACpB,QACA,SACwC;AACxC,QAAM,MAAM,MAAM,OAAO,YAAY,oBAAoB;AAAA,IACvD,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,IAC3B,MAAM;AAAA,EAAA,CACP;AACD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,SAAS,8BACP,QAIO;AACP,QAAM,WAGF,CAAA;AACJ,MAAI,OAAO,MAAM;AACf,aAAS,OAAO,OAAO;AAAA,EACzB;AACA,MAAI,OAAO,iBAAiB;AAC1B,aAAS,kBAAkB,OAAO;AAClC,QAAI,OAAO,eAAe;AACxB,eAAS,gBAAgB,OAAO;AAAA,IAClC;AAAA,EACF;AACA,MAAI,OAAO,OAAO;AAChB,aAAS,QAAQ,OAAO;AAAA,EAC1B;AACA,MAAI,SAAS,QAAQ,SAAS,mBAAmB,SAAS,OAAO;AAC/D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,8BACP,QACA,YACQ;AACR,QAAM,aAAa,OAAO,YAAY,UAAU;AAChD,QAAM,YAAY,UAAU,aAAa,YAAY,IAAI;AACzD,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,KAAK;AAC9C;AAEA,eAAe,+BACb,QACA,QAC4D;AAC5D,MAAI,OAAO,WAAW,QAAQ;AAC5B,WAAO,EAAE,WAAW,OAAO,UAAU,OAAK;AAAA,EAC5C;AACA,MAAI,aAAa,OAAO,YAAY,KAAA;AACpC,QAAM,SAAS,OAAO,UAAU;AAChC,MAAI,CAAC,cAAc,UAAU,SAAS,MAAM,MAAM,GAAG,QAAQ;AAC3D,iBAAa,QAAQ,IAAI,MAAM,GAAG,KAAA;AAAA,EACpC;AACA,MAAI,CAAC,cAAc,OAAO,mBAAmB;AAC3C,UAAM,OAAO,MAAM,OAAO,0BAA0B;AAAA,MAClD,SAAS,OAAO,WAAW;AAAA,MAC3B;AAAA,MACA,SAAS,OAAO;AAAA,MAChB,WAAW,OAAO;AAAA,IAAA,CACnB;AACD,WAAO,EAAE,WAAW,KAAK,WAAW,YAAY,KAAK,WAAA;AAAA,EACvD;AACA,MAAI,YAAY;AACd,UAAM,YAAY,8BAA8B,QAAQ,UAAU;AAClE,WAAO,EAAE,WAAW,WAAA;AAAA,EACtB;AACA,SAAO;AACT;AAEA,eAAsB,0BACpB,QACA,QACqD;AACrD,QAAM,WAAW,8BAA8B,MAAM;AACrD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AACA,QAAM,WAAW,MAAM,+BAA+B,QAAQ,MAAM;AACpE,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AACA,QAAM,sBAAsB,QAAQ;AAAA,IAClC,SAAS,OAAO,WAAW;AAAA,IAC3B,WAAW,SAAS;AAAA,IACpB,GAAG;AAAA,EAAA,CACJ;AACD,SAAO;AACT;AAEA,eAAsB,yBACpB,QACA,SACqD;AACrD,SAAO,0BAA0B,QAAQ;AAAA,IACvC,GAAG;AAAA,IACH,MAAM,QAAQ;AAAA,EAEhB,CAAC;AACH;AAEO,SAAS,oBACd,QAC6B;AAC7B,SAAO;AAAA,IACL,aAAa,CAAC,YACZ,sBAAsB,QAAQ,OAAO;AAAA,IACvC,0BAA0B,MAAM,OAAO,uBAAA;AAAA,IACvC,oBAAoB,CAAC,YACnB,OAAO,mBAAmB,OAAO;AAAA,IACnC,uBAAuB,CAAC,YACtB,OAAO,oBAAoB,OAAO;AAAA,IACpC,uBAAuB,CAAC,YACtB,OAAO,mBAAmB,OAAO;AAAA,IACnC,gBAAgB,CAAC,YACf,yBAAyB,QAAQ,OAAO;AAAA,EAAA;AAE9C;AAEA,eAAsB,2BACpB,QACA,SAC4D;AAC5D,MAAI,CAAC,SAAS,gBAAgB,QAAQ,aAAa,YAAY,OAAO;AACpE,WAAO;AAAA,EACT;AACA,SAAO,0BAA0B,QAAQ,QAAQ,YAAY;AAC/D;AAEA,eAAsB,0BACpB,QACA,UAA4C,IAM3C;AACD,SAAO,kBAAkB,2BAA2B;AAEpD,QAAM,UAAU,QAAQ,WAAW;AACnC,MAAI,YAAY,aAAa;AAC3B,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AAEA,QAAM,eAAe,MAAM,cAAA;AAC3B,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AACA,QAAM,kBAAkB,aAAa,YAAY,EAAE;AACnD,QAAM,aAAa,OAAO,KAAK,eAAe,EAAE,SAAS,KAAK;AAC9D,QAAM,iBAAiB,UAAU,aAAa,iBAAiB,IAAI;AACnE,QAAM,YAAY,OAAO,KAAK,cAAc,EAAE,SAAS,KAAK;AAE5D,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,aAAa,QAAQ,UAAU,MAAM,gBAAgB;AAC3D,QAAM,eACJ,QAAQ,WAAW,aACf,WAAW,QAAQ,QAAQ,OAAO,IAClC;AAEN,MAAI,QAAQ,WAAW,CAAC,cAAc;AACpC,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,MAAI,cAAc;AAChB,UAAM,WAAW,MAAM,MAAA;AAEvB,QAAI,CAAC,UAAU;AACb,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAAA,IAEJ;AAEA,UAAM,UAAU,GAAG,MAAM,IAAI,UAAU;AACvC,QAAI,SAAS,WAAW,YAAY,GAAG;AACrC,YAAM,UAAU,SAAS,aAAa,cAAc,OAAO;AAC3D,YAAM,YAAY,IAAI,OAAO,IAAI,MAAM,QAAQ,GAAG;AAClD,UAAI,UAAU,KAAK,OAAO,GAAG;AAC3B,YAAI,CAAC,QAAQ,WAAW;AACtB,gBAAM,IAAI;AAAA,YACR,GAAG,MAAM,sBAAsB,YAAY;AAAA,UAAA;AAAA,QAE/C;AACA,cAAM,UAAU,QAAQ,QAAQ,WAAW,OAAO;AAClD,iBAAS,cAAc,cAAc,OAAO;AAAA,MAC9C,OAAO;AACL,cAAM,eAAe,CAAC,QAAQ,SAAS,IAAI;AAC3C,iBAAS;AAAA,UACP;AAAA,UACA,GAAG,eAAe,OAAO,EAAE,GAAG,OAAO;AAAA;AAAA,QAAA;AAAA,MAEzC;AAAA,IACF,OAAO;AACL,eAAS,cAAc,cAAc,GAAG,OAAO;AAAA,CAAI;AAAA,IACrD;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,EAAA;AAEJ;"}