@hpke/cose 0.0.0-stage → 0.0.1

package/esm/src/coseKey.d.ts

@@ -0,0 +1,56 @@
+/** COSE key type values. */
+export declare const CoseKty: {
+    readonly OKP: 1;
+    readonly EC2: 2;
+};
+export type CoseKty = (typeof CoseKty)[keyof typeof CoseKty];
+/** COSE EC curve identifiers. */
+export declare const CoseCrv: {
+    readonly P256: 1;
+    readonly P384: 2;
+    readonly P521: 3;
+    readonly X25519: 4;
+    readonly X448: 5;
+};
+export type CoseCrv = (typeof CoseCrv)[keyof typeof CoseCrv];
+/**
+ * Parse a CBOR-encoded COSE_Key and extract the raw private key bytes (d parameter).
+ * Validates kty, crv, key length consistency.
+ *
+ * @param coseKeyBytes CBOR-encoded COSE_Key.
+ * @returns The raw private key bytes.
+ */
+export declare function extractPrivateKeyBytes(coseKeyBytes: Uint8Array): Uint8Array;
+/**
+ * Parse a CBOR-encoded COSE_Key and extract the raw public key bytes.
+ * Validates kty, crv, key length consistency.
+ *
+ * For EC2 keys (P-256/P-384/P-521): returns uncompressed point (0x04 || x || y).
+ * For OKP keys (X25519/X448): returns x coordinate.
+ *
+ * @param coseKeyBytes CBOR-encoded COSE_Key.
+ * @returns The raw public key bytes.
+ */
+export declare function extractPublicKeyBytes(coseKeyBytes: Uint8Array): Uint8Array;
+/**
+ * Get the curve identifier from a CBOR-encoded COSE_Key.
+ * Validates kty/crv consistency.
+ *
+ * @param coseKeyBytes CBOR-encoded COSE_Key.
+ * @returns The COSE curve identifier.
+ */
+export declare function extractCurve(coseKeyBytes: Uint8Array): CoseCrv;
+/** Options for building a COSE_Key. */
+export interface CoseKeyBuildOptions {
+    kid?: Uint8Array;
+    alg?: number;
+}
+/**
+ * Build a CBOR-encoded COSE_Key for an EC2 key (P-256/P-384/P-521).
+ */
+export declare function buildEc2CoseKey(crv: CoseCrv, x: Uint8Array, y: Uint8Array, d?: Uint8Array, options?: CoseKeyBuildOptions): Uint8Array;
+/**
+ * Build a CBOR-encoded COSE_Key for an OKP key (X25519/X448).
+ */
+export declare function buildOkpCoseKey(crv: CoseCrv, x: Uint8Array, d?: Uint8Array, options?: CoseKeyBuildOptions): Uint8Array;
+//# sourceMappingURL=coseKey.d.ts.map

package/esm/src/coseKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coseKey.d.ts","sourceRoot":"","sources":["../../src/src/coseKey.ts"],"names":[],"mappings":"AAiBA,4BAA4B;AAC5B,eAAO,MAAM,OAAO;;;CAGV,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,OAAO,OAAO,CAAC,CAAC;AAE7D,iCAAiC;AACjC,eAAO,MAAM,OAAO;;;;;;CAMV,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,OAAO,OAAO,CAAC,CAAC;AA6F7D;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,UAAU,GAAG,UAAU,CAQ3E;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,UAAU,GAAG,UAAU,CAsB1E;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAG9D;AAED,uCAAuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,CAAC,EAAE,UAAU,EACb,CAAC,EAAE,UAAU,EACb,CAAC,CAAC,EAAE,UAAU,EACd,OAAO,CAAC,EAAE,mBAAmB,GAC5B,UAAU,CAgBZ;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,CAAC,EAAE,UAAU,EACb,CAAC,CAAC,EAAE,UAAU,EACd,OAAO,CAAC,EAAE,mBAAmB,GAC5B,UAAU,CAeZ"}

package/esm/src/coseKey.js

@@ -0,0 +1,185 @@
+import { encode } from "./cbor/encoder.js";
+import { decode } from "./cbor/decoder.js";
+import { CoseError } from "./errors.js";
+/** COSE_Key parameter labels (RFC 9052 / RFC 9053). */
+const KeyLabel = {
+    KTY: 1,
+    KID: 2,
+    ALG: 3,
+    KEY_OPS: 4,
+    CRV: -1,
+    X: -2,
+    Y: -3,
+    D: -4,
+};
+/** COSE key type values. */
+export const CoseKty = {
+    OKP: 1,
+    EC2: 2,
+};
+/** COSE EC curve identifiers. */
+export const CoseCrv = {
+    P256: 1,
+    P384: 2,
+    P521: 3,
+    X25519: 4,
+    X448: 5,
+};
+/** Expected coordinate sizes per curve. */
+const CRV_KEY_SIZES = {
+    [CoseCrv.P256]: 32,
+    [CoseCrv.P384]: 48,
+    [CoseCrv.P521]: 66,
+    [CoseCrv.X25519]: 32,
+    [CoseCrv.X448]: 56,
+};
+/** Valid kty for each curve. */
+const CRV_KTY = {
+    [CoseCrv.P256]: CoseKty.EC2,
+    [CoseCrv.P384]: CoseKty.EC2,
+    [CoseCrv.P521]: CoseKty.EC2,
+    [CoseCrv.X25519]: CoseKty.OKP,
+    [CoseCrv.X448]: CoseKty.OKP,
+};
+/** COSE key_ops values relevant to HPKE. */
+const KeyOps = {
+    DERIVE_BITS: 8,
+};
+function parseCoseKeyMap(coseKeyBytes) {
+    const map = decode(coseKeyBytes);
+    if (!(map instanceof Map)) {
+        throw new CoseError("COSE_Key is not a CBOR map");
+    }
+    const kty = map.get(KeyLabel.KTY);
+    if (typeof kty !== "number" || (kty !== CoseKty.OKP && kty !== CoseKty.EC2)) {
+        throw new CoseError(`Invalid or unsupported kty: ${kty} (expected OKP=1 or EC2=2)`);
+    }
+    const crv = map.get(KeyLabel.CRV);
+    if (typeof crv !== "number" || !(crv in CRV_KTY)) {
+        throw new CoseError(`Invalid or unsupported crv: ${crv}`);
+    }
+    // Validate kty/crv consistency
+    const expectedKty = CRV_KTY[crv];
+    if (kty !== expectedKty) {
+        throw new CoseError(`kty/crv mismatch: kty=${kty} but crv=${crv} requires kty=${expectedKty}`);
+    }
+    // Validate key_ops if present
+    const keyOps = map.get(KeyLabel.KEY_OPS);
+    if (keyOps !== undefined) {
+        if (!Array.isArray(keyOps)) {
+            throw new CoseError("key_ops must be an array");
+        }
+        const hasD = map.has(KeyLabel.D);
+        if (hasD) {
+            // Private key: key_ops MUST include "derive bits" (8)
+            if (!keyOps.includes(KeyOps.DERIVE_BITS)) {
+                throw new CoseError("Private key key_ops must include 'derive bits' (8)");
+            }
+        }
+    }
+    return { map, kty: kty, crv: crv };
+}
+function validateCoordinateSize(name, data, crv) {
+    const expected = CRV_KEY_SIZES[crv];
+    if (expected !== undefined && data.length !== expected) {
+        throw new CoseError(`${name} length ${data.length} does not match crv expectation ${expected}`);
+    }
+}
+/**
+ * Parse a CBOR-encoded COSE_Key and extract the raw private key bytes (d parameter).
+ * Validates kty, crv, key length consistency.
+ *
+ * @param coseKeyBytes CBOR-encoded COSE_Key.
+ * @returns The raw private key bytes.
+ */
+export function extractPrivateKeyBytes(coseKeyBytes) {
+    const { map, crv } = parseCoseKeyMap(coseKeyBytes);
+    const d = map.get(KeyLabel.D);
+    if (!(d instanceof Uint8Array)) {
+        throw new CoseError("COSE_Key does not contain a private key (d)");
+    }
+    validateCoordinateSize("d", d, crv);
+    return d;
+}
+/**
+ * Parse a CBOR-encoded COSE_Key and extract the raw public key bytes.
+ * Validates kty, crv, key length consistency.
+ *
+ * For EC2 keys (P-256/P-384/P-521): returns uncompressed point (0x04 || x || y).
+ * For OKP keys (X25519/X448): returns x coordinate.
+ *
+ * @param coseKeyBytes CBOR-encoded COSE_Key.
+ * @returns The raw public key bytes.
+ */
+export function extractPublicKeyBytes(coseKeyBytes) {
+    const { map, kty, crv } = parseCoseKeyMap(coseKeyBytes);
+    const x = map.get(KeyLabel.X);
+    if (!(x instanceof Uint8Array)) {
+        throw new CoseError("COSE_Key does not contain x coordinate");
+    }
+    validateCoordinateSize("x", x, crv);
+    if (kty === CoseKty.EC2) {
+        const y = map.get(KeyLabel.Y);
+        if (!(y instanceof Uint8Array)) {
+            throw new CoseError("EC2 COSE_Key does not contain y coordinate");
+        }
+        validateCoordinateSize("y", y, crv);
+        const result = new Uint8Array(1 + x.length + y.length);
+        result[0] = 0x04;
+        result.set(x, 1);
+        result.set(y, 1 + x.length);
+        return result;
+    }
+    // OKP: raw x coordinate
+    return x;
+}
+/**
+ * Get the curve identifier from a CBOR-encoded COSE_Key.
+ * Validates kty/crv consistency.
+ *
+ * @param coseKeyBytes CBOR-encoded COSE_Key.
+ * @returns The COSE curve identifier.
+ */
+export function extractCurve(coseKeyBytes) {
+    const { crv } = parseCoseKeyMap(coseKeyBytes);
+    return crv;
+}
+/**
+ * Build a CBOR-encoded COSE_Key for an EC2 key (P-256/P-384/P-521).
+ */
+export function buildEc2CoseKey(crv, x, y, d, options) {
+    const map = new Map();
+    map.set(KeyLabel.KTY, CoseKty.EC2);
+    if (options?.kid) {
+        map.set(KeyLabel.KID, options.kid);
+    }
+    if (options?.alg !== undefined) {
+        map.set(KeyLabel.ALG, options.alg);
+    }
+    map.set(KeyLabel.CRV, crv);
+    map.set(KeyLabel.X, x);
+    map.set(KeyLabel.Y, y);
+    if (d) {
+        map.set(KeyLabel.D, d);
+    }
+    return encode(map);
+}
+/**
+ * Build a CBOR-encoded COSE_Key for an OKP key (X25519/X448).
+ */
+export function buildOkpCoseKey(crv, x, d, options) {
+    const map = new Map();
+    map.set(KeyLabel.KTY, CoseKty.OKP);
+    if (options?.kid) {
+        map.set(KeyLabel.KID, options.kid);
+    }
+    if (options?.alg !== undefined) {
+        map.set(KeyLabel.ALG, options.alg);
+    }
+    map.set(KeyLabel.CRV, crv);
+    map.set(KeyLabel.X, x);
+    if (d) {
+        map.set(KeyLabel.D, d);
+    }
+    return encode(map);
+}

package/esm/src/encrypt.d.ts

@@ -0,0 +1,155 @@
+import type { CipherSuite } from "@hpke/core";
+import { type ContentAlg, type CoseHpkeAlg } from "./alg.js";
+/**
+ * Content encryption interface for Layer 0.
+ * Each factory provides the appropriate implementation
+ * (e.g. AES-GCM via WebCrypto, ChaCha20/Poly1305).
+ */
+export interface ContentCrypto {
+    seal(key: Uint8Array, nonce: Uint8Array, plaintext: Uint8Array, aad: Uint8Array): Promise<Uint8Array>;
+    open(key: Uint8Array, nonce: Uint8Array, ciphertext: Uint8Array, aad: Uint8Array): Promise<Uint8Array>;
+}
+/** A recipient descriptor for CoseEncrypt.seal(). */
+export interface CoseRecipient {
+    /** The recipient's public key. */
+    recipientPublicKey: CryptoKey;
+    /** Key identifier for the recipient (bstr per RFC 9052). */
+    kid?: Uint8Array;
+    /** Extra info embedded in Recipient_structure. */
+    extraInfo?: Uint8Array;
+    /**
+     * HPKE AAD for this recipient (Layer 1).
+     * Per draft-ietf-cose-hpke-27, this SHOULD be empty. Only use for
+     * special cases where additional authenticated data is needed at the
+     * key-wrapping layer. Defaults to empty.
+     */
+    aad?: Uint8Array;
+    /** Pre-shared key for PSK mode. */
+    psk?: {
+        id: Uint8Array;
+        key: Uint8Array;
+    };
+}
+/** Options for CoseEncrypt.seal(). */
+export interface CoseEncryptSealOptions {
+    /** External AAD for Layer 0 content encryption. */
+    externalAad?: Uint8Array;
+    /** If true, output is wrapped in CBOR Tag 96 (COSE_Encrypt). */
+    tagged?: boolean;
+}
+/** Options for CoseEncrypt.open(). */
+export interface CoseEncryptOpenOptions {
+    /** External AAD for Layer 0 content decryption. */
+    externalAad?: Uint8Array;
+    /** Extra info for Recipient_structure. */
+    extraInfo?: Uint8Array;
+    /**
+     * HPKE AAD for this recipient (Layer 1).
+     * Per draft-ietf-cose-hpke-27, this SHOULD be empty. Only use for
+     * special cases where additional authenticated data is needed at the
+     * key-wrapping layer. Defaults to empty.
+     */
+    aad?: Uint8Array;
+    /** Pre-shared key for PSK mode. */
+    psk?: {
+        id: Uint8Array;
+        key: Uint8Array;
+    };
+    /** Key identifier to match against recipient protected headers. */
+    kid?: Uint8Array;
+    /**
+     * Detached ciphertext for open(). When provided, the ciphertext field
+     * in the COSE structure (which should be null) is replaced by this value.
+     */
+    detachedPayload?: Uint8Array;
+}
+/** Result of a detached seal operation. */
+export interface CoseEncryptDetachedResult {
+    /** CBOR-encoded COSE_Encrypt with null ciphertext. */
+    message: Uint8Array;
+    /** The ciphertext transported separately. */
+    payload: Uint8Array;
+}
+/**
+ * COSE_Encrypt (Key Encryption) using HPKE.
+ *
+ * Implements draft-ietf-cose-hpke-27 Section 3.3 (HPKE Key Encryption Mode).
+ */
+export interface CoseEncrypt {
+    /** The underlying HPKE CipherSuite. */
+    readonly suite: CipherSuite;
+    /**
+     * Generate a KEM key pair.
+     */
+    generateKemKeyPair(): Promise<CryptoKeyPair>;
+    /**
+     * Encrypt plaintext into a CBOR-encoded COSE_Encrypt structure.
+     */
+    seal(recipients: CoseRecipient[], plaintext: Uint8Array, options?: CoseEncryptSealOptions): Promise<Uint8Array>;
+    /**
+     * Encrypt plaintext into a detached COSE_Encrypt structure.
+     * The ciphertext field is null; the actual payload is returned separately.
+     */
+    sealDetached(recipients: CoseRecipient[], plaintext: Uint8Array, options?: CoseEncryptSealOptions): Promise<CoseEncryptDetachedResult>;
+    /**
+     * Decrypt a CBOR-encoded COSE_Encrypt structure.
+     * For detached payloads, pass the ciphertext via options.detachedPayload.
+     */
+    open(recipientKey: CryptoKeyPair | CryptoKey, data: Uint8Array, options?: CoseEncryptOpenOptions): Promise<Uint8Array>;
+    /**
+     * Import a public key from a CBOR-encoded COSE_Key.
+     * Validates kty, crv, and key length.
+     */
+    importPublicCoseKey(coseKeyBytes: Uint8Array): Promise<CryptoKey>;
+    /**
+     * Import a private key from a CBOR-encoded COSE_Key.
+     * Validates kty, crv, and key length.
+     */
+    importPrivateCoseKey(coseKeyBytes: Uint8Array): Promise<CryptoKey>;
+}
+/** @internal */
+export declare class CoseEncryptImpl implements CoseEncrypt {
+    private _suite;
+    private _alg;
+    private _contentAlg;
+    private _contentCrypto;
+    /**
+     * @param suite The HPKE CipherSuite to use for key wrapping.
+     * @param alg A COSE HPKE algorithm identifier for Key Encryption (46-53).
+     * @param contentAlg The content encryption algorithm (A128GCM=1, A256GCM=3, or CHACHA20POLY1305=24).
+     * @param contentCrypto Content encryption implementation for Layer 0.
+     */
+    constructor(suite: CipherSuite, alg: CoseHpkeAlg, contentAlg: ContentAlg, contentCrypto: ContentCrypto);
+    /** The underlying HPKE CipherSuite. */
+    get suite(): CipherSuite;
+    /**
+     * Generate a KEM key pair.
+     */
+    generateKemKeyPair(): Promise<CryptoKeyPair>;
+    /**
+     * Encrypt plaintext into a CBOR-encoded COSE_Encrypt structure.
+     *
+     * @param recipients One or more recipient descriptors.
+     * @param plaintext The data to encrypt.
+     * @param options Optional seal parameters.
+     * @returns CBOR-encoded COSE_Encrypt.
+     */
+    seal(recipients: CoseRecipient[], plaintext: Uint8Array, options?: CoseEncryptSealOptions): Promise<Uint8Array>;
+    sealDetached(recipients: CoseRecipient[], plaintext: Uint8Array, options?: CoseEncryptSealOptions): Promise<CoseEncryptDetachedResult>;
+    private _sealInner;
+    /**
+     * Decrypt a CBOR-encoded COSE_Encrypt structure.
+     *
+     * @param recipientKey The recipient's key pair or private key.
+     * @param data CBOR-encoded COSE_Encrypt.
+     * @param options Optional parameters.
+     * @returns Decrypted plaintext.
+     */
+    open(recipientKey: CryptoKeyPair | CryptoKey, data: Uint8Array, options?: CoseEncryptOpenOptions): Promise<Uint8Array>;
+    private _contentEncrypt;
+    private _contentDecrypt;
+    private _wrapCek;
+    importPublicCoseKey(coseKeyBytes: Uint8Array): Promise<CryptoKey>;
+    importPrivateCoseKey(coseKeyBytes: Uint8Array): Promise<CryptoKey>;
+}
+//# sourceMappingURL=encrypt.d.ts.map

package/esm/src/encrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/src/encrypt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9C,OAAO,EACL,KAAK,UAAU,EAGf,KAAK,WAAW,EAEjB,MAAM,UAAU,CAAC;AAmBlB;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CACF,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,UAAU,EACrB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,IAAI,CACF,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,EACjB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB;AAED,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,kBAAkB,EAAE,SAAS,CAAC;IAC9B,4DAA4D;IAC5D,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,kDAAkD;IAClD,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,mCAAmC;IACnC,GAAG,CAAC,EAAE;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;CAC3C;AAED,sCAAsC;AACtC,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,gEAAgE;IAChE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,sCAAsC;AACtC,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,mCAAmC;IACnC,GAAG,CAAC,EAAE;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;IAC1C,mEAAmE;IACnE,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;;OAGG;IACH,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B;AAED,2CAA2C;AAC3C,MAAM,WAAW,yBAAyB;IACxC,sDAAsD;IACtD,OAAO,EAAE,UAAU,CAAC;IACpB,6CAA6C;IAC7C,OAAO,EAAE,UAAU,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAE5B;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IAE7C;;OAEG;IACH,IAAI,CACF,UAAU,EAAE,aAAa,EAAE,EAC3B,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvB;;;OAGG;IACH,YAAY,CACV,UAAU,EAAE,aAAa,EAAE,EAC3B,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAEtC;;;OAGG;IACH,IAAI,CACF,YAAY,EAAE,aAAa,GAAG,SAAS,EACvC,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvB;;;OAGG;IACH,mBAAmB,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAElE;;;OAGG;IACH,oBAAoB,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CACpE;AAED,gBAAgB;AAChB,qBAAa,eAAgB,YAAW,WAAW;IACjD,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,cAAc,CAAgB;IAEtC;;;;;OAKG;gBAED,KAAK,EAAE,WAAW,EAClB,GAAG,EAAE,WAAW,EAChB,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa;IAa9B,uCAAuC;IACvC,IAAI,KAAK,IAAI,WAAW,CAEvB;IAED;;OAEG;IACG,kBAAkB,IAAI,OAAO,CAAC,aAAa,CAAC;IAIlD;;;;;;;OAOG;IACG,IAAI,CACR,UAAU,EAAE,aAAa,EAAE,EAC3B,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,UAAU,CAAC;IAchB,YAAY,CAChB,UAAU,EAAE,aAAa,EAAE,EAC3B,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,yBAAyB,CAAC;YAcvB,UAAU;IAwCxB;;;;;;;OAOG;IACG,IAAI,CACR,YAAY,EAAE,aAAa,GAAG,SAAS,EACvC,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,UAAU,CAAC;YAyJR,eAAe;YASf,eAAe;YASf,QAAQ;IAmDhB,mBAAmB,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IASjE,oBAAoB,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAQzE"}