@icure/api 8.6.6 → 8.6.8

package/icc-x-api/crypto/ExtendedApisUtilsImpl.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExtendedApisUtilsImpl.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/ExtendedApisUtilsImpl.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,oCAYiB;AAEjB,2EAA6F;AAC7F,2EAAuE;AAIvE,wFAAoF;AAEpF,sDAA0F;AAC1F,qEAAiE;AAKjE,IAAO,WAAW,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACrD,IAAO,uBAAuB,GAAG,uCAAkB,CAAC,uBAAuB,CAAA;AAC3E,IAAO,2BAA2B,GAAG,uCAAkB,CAAC,2BAA2B,CAAA;AACnF,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACzD,2DAAuD;AAEvD;;;GAGG;AACH,MAAa,qBAAqB;IAChC,YACmB,UAA4B,EAC5B,YAA8B,EAC9B,yBAAoD,EACpD,wBAAkD,EAClD,OAAoB,EACpB,aAAsB;QALtB,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,8BAAyB,GAAzB,yBAAyB,CAA2B;QACpD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,YAAO,GAAP,OAAO,CAAa;QACpB,kBAAa,GAAb,aAAa,CAAS;IACtC,CAAC;IAEE,gBAAgB,CAAC,MAA+B,EAAE,WAAoB;;YAC1E,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CACpE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,aAAa,CAAC,CACxG,CAAA;QACH,CAAC;KAAA;IAEK,+BAA+B,CAAC,MAA+B;;YACnE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,EAAE,CACzC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,aAAa,CAAC,CACxG,CAAA;QACH,CAAC;KAAA;IAEK,WAAW,CAAC,MAA+B,EAAE,WAAoB;;YACrE,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CACpE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,QAAQ,CAAC,CACnG,CAAA;QACH,CAAC;KAAA;IAEK,0BAA0B,CAAC,MAA+B;;YAC9D,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,QAAQ,CAAC,CAAC,CAAA;QACjJ,CAAC;KAAA;IAEK,iBAAiB,CAAC,MAA+B,EAAE,WAAoB;;YAC3E,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CACpE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,cAAc,CAAC,CACzG,CAAA;QACH,CAAC;KAAA;IAEK,gCAAgC,CAAC,MAA+B;;YACpE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,EAAE,CACzC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,cAAc,CAAC,CACzG,CAAA;QACH,CAAC;KAAA;IAEK,cAAc,CAAC,MAA+B;;YAClD,OAAO,CACL,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC;gBACrI,WAAW,CAAC,KAAK,CAClB,CAAA;QACH,CAAC;KAAA;IAEK,sCAAsC,CAC1C,MAAS,EACT,UAAwC,EACxC,YAAgC,EAChC,qBAA2C,EAC3C,uBAAgC,EAChC,eAAkE,EAClE,uBAA2C;;;YAE3C,IAAI,CAAC,yCAAyC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,wCAAwC,cAAY,CAAA;YAC3H,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAA;YACzC,MAAM,SAAS,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACzG,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;YAChD,OAAO;gBACL,aAAa,EAAE,MAAM,IAAI,CAAC,wBAAwB,CAAC,sCAAsC,iCAElF,MAAM,KACT,iBAAiB,EAAE,qBAAqB,aAArB,qBAAqB,cAArB,qBAAqB,GAAI,EAAE,KAEhD,UAAU,EACV,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAChC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,EACpC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAC5B,eAAe,EACf,uBAAuB,CACxB;gBACD,gBAAgB,EAAE,SAAS;gBAC3B,QAAQ,EAAE,WAAW;aACtB,CAAA;QACH,CAAC;KAAA;IAEK,wCAAwC,CAC5C,YAA0C,EAC1C,eAUG,EACH,0BAA6G;;;YAkB7G,MAAM,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,wBAAwB,CACzH,YAAY,EACZ,eAAe,CAChB,CAAA;YACD,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,0BAA0B,CAAC,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACtI,MAAM,eAAe,GAAQ,EAAE,CAAA;YAC/B,MAAM,YAAY,GAYZ,EAAE,CAAA;YACR,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;gBAC5C,CAAC;gBACD,KAAK,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAA,MAAM,CAAC,gBAAgB,mCAAI,EAAE,CAAC,EAAE,CAAC;oBACpF,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAA;oBAC3C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAA;oBACjH,YAAY,CAAC,IAAI,CAAC;wBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU;wBACV,OAAO;wBACP,mBAAmB;wBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YACD,kHAAkH;YAClH,OAAO;gBACL,eAAe;gBACf,YAAY;gBACZ,qBAAqB;aACtB,CAAA;QACH,CAAC;KAAA;IAEK,kDAAkD,CACtD,YAA0C,EAC1C,eAUG,EACH,0BAAiH;;;YAkBjH,MAAM,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,wBAAwB,CACzH,YAAY,EACZ,eAAe,CAChB,CAAA;YACD,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,CAAC,CAAA;YAC/F,MAAM,YAAY,GAYZ,EAAE,CAAA;YACR,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,KAAK,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAA,MAAM,CAAC,gBAAgB,mCAAI,EAAE,CAAC,EAAE,CAAC;oBACpF,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAA;oBAC3C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAA;oBACjH,YAAY,CAAC,IAAI,CAAC;wBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU;wBACV,OAAO;wBACP,mBAAmB;wBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;iBAC7D,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;iBACxG,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAA;YACtI,OAAO;gBACL,iBAAiB,EAAE,kBAAkB;gBACrC,YAAY;gBACZ,qBAAqB;aACtB,CAAA;QACH,CAAC;KAAA;IAEa,wBAAwB,CACpC,YAA0C,EAC1C,eAUG;;;YAiBH,IAAI,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;gBACrF,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAA;YAClG,CAAC;YACD,MAAM,qBAAqB,GAAG,EAAsD,CAAA;YACpF,MAAM,6BAA6B,GAW/B,EAAE,CAAA;YACN,MAAM,qBAAqB,GAAa,EAAE,CAAA;YAC1C,KAAK,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,eAAe,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAA;gBAC1B,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;gBAC5G,MAAM,cAAc,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAA;gBACrD,MAAM,eAAe,GAAG,EAAiE,CAAA;gBACzF,MAAM,sBAAsB,GAStB,EAAE,CAAA;gBACR,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;gBACpG,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACpE,eAAe,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAA;oBAChE,sBAAsB,CAAC,IAAI,CAAC;wBAC1B,UAAU,EAAE,QAAQ;wBACpB,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC;wBACnC,mBAAmB,EAAE,IAAI;qBAC1B,CAAC,CAAA;gBACJ,CAAC;gBACD,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACvE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,8BAA8B,CAChF,cAAc,EACd,QAAQ,EACR,MAAA,WAAW,CAAC,cAAc,mCAAI,EAAE,EAChC,MAAA,WAAW,CAAC,mBAAmB,mCAAI,EAAE,EACrC,MAAA,WAAW,CAAC,oBAAoB,mCAAI,EAAE,EACtC,WAAW,CAAC,oBAAoB,CACjC,CAAA;wBACD,IAAI,OAAO,EAAE,CAAC;4BACZ,eAAe,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAA;4BAChE,sBAAsB,CAAC,IAAI,CAAC;gCAC1B,UAAU,EAAE,QAAQ;gCACpB,OAAO,EAAE,WAAW;gCACpB,mBAAmB,EAAE,KAAK;6BAC3B,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5C,MAAM,gCAAgC,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,0BAA0B,CAAC,cAAc,CAAC,CAAA;oBACxH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CACnI,CAAA;oBACD,MAAM,0BAA0B,GAAG,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE;wBAC3G,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;4BACzI,OAAO,CAAC,CAAC,CAAC,CAAA;wBACZ,CAAC;;4BAAM,OAAO,EAAE,CAAA;oBAClB,CAAC,CAAC,CAAA;oBACF,qBAAqB,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,0BAA0B,EAAE,CAAA;oBAC3F,6BAA6B,CAAC,QAAQ,CAAC,GAAG,sBAAsB,CAAA;gBAClE,CAAC;qBAAM,CAAC;oBACN,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACtC,CAAC;YACH,CAAC;YACD,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,CAAA;QACxF,CAAC;KAAA;IAEK,0CAA0C,CAC9C,MAAyD,EACzD,SAOC,EACD,0BAA6G;;;YAE7G,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;YACnE,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YACrE,MAAM,gBAAgB,GAOlB,EAAE,CAAA;YACN,KAAK,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvE,IAAI,CAAC,uBAAuB,CAAC,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,KAAK,+CAAsB,CAAC,QAAQ,EAAE,CAAC;oBAChH,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,CAAC,SAAS,CACtB,MAAM,CACP,8GAA8G,CAChH,CAAA;gBACH,CAAC;gBACD,IAAI,CAAC,wBAAwB,CAAC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,KAAK,+CAAsB,CAAC,QAAQ,EAAE,CAAC;oBAClH,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,CAAC,SAAS,CACtB,MAAM,CACP,kHAAkH,CACpH,CAAA;gBACH,CAAC;gBACD,gBAAgB,CAAC,UAAU,CAAC,GAAG;oBAC7B,cAAc,EAAE,MAAA,gBAAgB,CAAC,cAAc,mCAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBACnF,mBAAmB,EAAE,gBAAgB,CAAC,mBAAmB,KAAK,+CAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;oBACzH,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB,KAAK,+CAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB;oBAC5H,oBAAoB,EAAE,MAAA,gBAAgB,CAAC,oBAAoB,mCAAI,uBAAuB,CAAC,SAAS;iBACjG,CAAA;YACH,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wCAAwC,CACrE,MAAM,CAAC,IAAI,EACX;gBACE;oBACE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,gBAAgB;iBACjB;aACF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,CACrC,CAAA;YACD,IAAI,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAG,CAAC,EAAE,CAAC;gBAClE,OAAO,IAAI,gCAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjF,OAAO,IAAI,gCAAkB,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;YAC1D,MAAM,0BAA0B,GAAG,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;YAC/G,IAAI,0BAA0B,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxF,OAAO,CAAC,IAAI,CAAC,+CAA+C,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;gBACxG,OAAO,IAAI,gCAAkB,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/D,CAAC;YACD,OAAO,IAAI,gCAAkB,CAC3B,WAAW,CAAC,YAAY,EACxB,6CAA6C,MAAM,CAAC,MAAM,CAAC,EAAE,oCAAoC,CAClG,CAAA;QACH,CAAC;KAAA;IAEa,6BAA6B,CACzC,MAA+B,EAC/B,qBAOC;;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa;gBAClC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE;gBAC3D,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CAAA;YACrD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,QAAQ,CAAC,CAAA;YACjJ,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAC3F,MAAM,CAAC,MAAM,EACb,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,CAAA;YACD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAC5F,MAAM,CAAC,MAAM,EACb,SAAS,EACT,gDAAoB,CAAC,cAAc,CACpC,CAAA;YACD,MAAM,GAAG,GAAG,EAAkE,CAAA;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,KAAK,MAAM,eAAe,IAAI,SAAS,EAAE,CAAC;gBACxC,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,wCAAwC,CAClF,MAAM,EACN,MAAM,EACN,eAAe,EACf,qBAAqB,CAAC,eAAe,CAAC,EACtC,eAAe,EACf,oBAAoB,EACpB,qBAAqB,CACtB,CAAA;gBACD,IAAI,wBAAwB,EAAE,CAAC;oBAC7B,GAAG,CAAC,eAAe,CAAC,GAAG,wBAAwB,CAAA;gBACjD,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;IAEa,wCAAwC,CACpD,MAA+B,EAC/B,MAAc,EACd,YAAoB,EACpB,sBAOa,EACb,eAAwE,EACxE,oBAA6E,EAC7E,qBAA8E;;;YAE9E,qOAAqO;YACrO,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,mCAAmC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;YACpI,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAA;YAC7C,MAAM,YAAY,GAChB,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,YAAY,KAAK,MAAM;gBACpD,CAAC,CAAC,WAAW,CAAC,KAAK;gBACnB,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,oCAAoC,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;YAC5G,IAAI,CAAC,YAAY;gBAAE,OAAO,SAAS,CAAA;YACnC,MAAM,mBAAmB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAC7I,MAAM,wBAAwB,GAAG,oBAAoB;iBAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAC1B,MAAM,yBAAyB,GAAG,qBAAqB;iBACpD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAC1B,IAAI,gBAAgB,GAAa,EAAE,CAAA;YACnC,IAAI,qBAAqB,GAAa,EAAE,CAAA;YACxC,IAAI,sBAAsB,GAAa,EAAE,CAAA;YACzC,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,gDAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAClI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CACnB,CACF,CAAA;gBACD,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAChF,CAAC;YACD,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,gDAAoB,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CACvI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CACnB,CACF,CAAA;gBACD,qBAAqB,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/F,CAAC;YACD,IAAI,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,gDAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CACxI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CACnB,CACF,CAAA;gBACD,sBAAsB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAClG,CAAC;YACD,MAAM,wBAAwB,GAC5B,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE;gBAC3B,YAAY,KAAK,MAAM;gBACvB,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,oCAAoC,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;YAC3G,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,IAAI,wBAAwB,EAAE,CAAC;gBACrI,IAAI,oBAAiD,CAAA;gBACrD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;oBAC5B,oBAAoB,GAAG,2BAA2B,CAAC,IAAI,CAAA;gBACzD,CAAC;qBAAM,CAAC;oBACN,oBAAoB,GAAG,2BAA2B,CAAC,UAAU,CAAA,CAAC,+CAA+C;gBAC/G,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,8BAA8B,CACvE,MAAM,EACN,YAAY,EACZ,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,MAAA,sBAAsB,aAAtB,sBAAsB,uBAAtB,sBAAsB,CAAE,cAAc,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAC7F,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,CAAC,MAAA,sBAAsB,aAAtB,sBAAsB,uBAAtB,sBAAsB,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EACvG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,CAAC,MAAA,sBAAsB,aAAtB,sBAAsB,uBAAtB,sBAAsB,CAAE,oBAAoB,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EACzG,oBAAoB,CACrB,CAAA;YACH,CAAC;;gBAAM,OAAO,SAAS,CAAA;QACzB,CAAC;KAAA;IAEK,gBAAgB,CACpB,MAA+B,EAC/B,OAAiC,EACjC,SAAuE;;YAEvE,MAAM,SAAS,GAAgB,IAAI,GAAG,EAAE,CAAA;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACvG,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC1B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;wBACpB,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;4BACnE,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;gCAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;wBAC/E,CAAC;wBAAC,OAAO,CAAC,EAAE,CAAC;4BACX,OAAO,CAAC,IAAI,CAAC,mDAAmD,MAAM,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAA;wBACjH,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC,CAAA,CAAC,CAAA;YACF,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;YACrD,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,IAAI,EAAE,IAAA,aAAK,EAAC,OAAO,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;YACtD,CAAC;QACH,CAAC;KAAA;IAEK,aAAa,CACjB,MAAS,EACT,IAAkC,EAClC,OAAiC,EACjC,UAAqC;;YAErC,MAAM,2BAA2B,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC5F,IAAI,aAA4B,CAAA;YAChC,IAAI,CAAC,CAAC,2BAA2B,EAAE,CAAC;gBAClC,aAAa,GAAG,MAAM,UAAU,CAAC,2BAA2B,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,EAAE,IAAI,EAAE,CAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBAC5F,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,OAAO;4BACL,OAAO,EAAE;gCACP,aAAa,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC;gCAChE,aAAa,EAAE,aAAa;6BAC7B;yBACF,CAAA;oBACH,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAA;oBACpE,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC,CAAA,CAAC,CAAA;YACF,IAAI,SAAS,IAAI,IAAI;gBAAE,OAAO,SAAS,CAAC,OAAO,CAAA;YAC/C,MAAM,IAAI,KAAK,CAAC,0DAA0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACtG,CAAC;KAAA;IAEK,kBAAkB,CACtB,QAAa,EACb,UAAwC,EACxC,WAA6B;;;YAE7B,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAa,CAAA;YACpD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,gBAAgB,GAAG,MAAM,IAAA,qBAAa,EAAC,MAAM,EAAE,CAAO,SAAS,EAAE,EAAE;oBACvE,OAAO,IAAI,CAAA;gBACb,CAAC,CAAA,CAAC,CAAA;gBACF,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;oBAC7B,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAA;gBACxE,CAAC;YACH,CAAC;YACD,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAC3E,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,CAAC,CAAC,EAC3D,UAAU,EACV,CAAO,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACxB,8GAA8G;gBAC9G,gHAAgH;gBAChH,yFAAyF;gBACzF,MAAM,SAAS,GAAG,MAAM,IAAA,qBAAa,EAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;gBACzG,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;oBACtB,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAA;gBAC5C,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,CAAA;gBACb,CAAC;YACH,CAAC,CAAA,CACF,CAAA;YACD,MAAM,GAAG,GAAG,EAAE,CAAA;YACd,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,MAAA,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,mCAAI,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,CAAA;gBACrG,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;gBAChD,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;IAEK,cAAc,CAClB,aAAgD,EAChD,SAAqB,EACrB,8BAAuC;;YAEvC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;oBAChF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,eAAO,EAAC,8BAA8B,CAAC,CAAC,CAAC,IAAA,6BAAqB,EAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;gBAC3H,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;YAChB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;KAAA;IAEK,kBAAkB,CACtB,QAAa,EACb,UAAwC,EACxC,eAAwC,EACxC,gBAAyB,EACzB,iBAA0B,EAC1B,WAA6B;;;YAE7B,MAAM,qCAAqC,GAAQ,EAAE,CAAA;YACrD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,qCAAqC,CAAC,IAAI,CAAC,MAAA,CAAC,MAAM,IAAI,CAAC,+BAA+B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,mCAAI,MAAM,CAAC,CAAA;YACxH,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,qCAAqC,EAAE,UAAU,EAAE,CAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACnI,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,MAAM,IAAA,qBAAa,EACnC,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;4BACN,yEAAyE;4BACzE,MAAM,IAAI,GAAG,gBAAgB;gCAC3B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oCAC3B,OAAO,CAAC,YAAY,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;wCACtD,CAAC,CAAC,IAAA,WAAG,EAAC,IAAI,UAAU,CAAC,CAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wCAC5F,CAAC,CAAC,CAAC,CAAA;gCACP,CAAC,CAAC;gCACJ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;4BAEvB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAA,gBAAQ,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;wBAClE,CAAC,EACD,eAAe,EACf,UAAU,CACX,CAAA;wBACD,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAA;oBAC5C,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAA;oBACpE,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC,CAAA,CAAC,CAAA;YACF,IAAI,OAAO,CAAC,IAAI,IAAI,qCAAqC,CAAC,MAAM,EAAE,CAAC;gBACjE,IAAI,iBAAiB,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CACb,8BAA8B,qCAAqC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAY,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAG,CAAC,CAAC,CAAC,EAAE,CACpI,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,KAAK,MAAM,CAAC,IAAI,qCAAqC,EAAE,CAAC;wBACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,CAAC,EAAE,CAAC;4BACxB,MAAM,IAAA,qBAAa,EACjB,CAAC,EACD,CAAO,GAA2B,EAAE,EAAE;gCACpC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CACrH,CAAA;gCACD,IAAI,iBAAiB,EAAE,CAAC;oCACtB,MAAM,IAAI,KAAK,CACb,+FAA+F,IAAI,CAAC,SAAS,CAC3G,CAAC,CACF,iBAAiB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CACxC,CAAA;gCACH,CAAC;gCACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;4BAC5C,CAAC,CAAA,EACD,eAAe,EACf,QAAQ,CACT,CAAA;4BACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,EAAE,CAAC,CAAC,CAAA;wBACvB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,qCAAqC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,CAAE,CAAC,CAAA;QAC9E,CAAC;KAAA;IAEK,+BAA+B,CAA4B,MAAS,EAAE,UAAwC;;;YAClH,IAAI,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAA;YACjF,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,uDAAuD;oBACrD,kGAAkG,CACrG,CAAA;YACH,CAAC;YACD;;;eAGG;YACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAA,MAAM,CAAC,WAAW,mCAAI,EAAE,CAAC,CAAC,CAAA;YAC1E,MAAM,uBAAuB,GAAG,MAAM,CAAC,WAAW,CAChD,MAAM,CAAC,MAAM,CAAC,MAAA,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,eAAe,mCAAI,EAAE,CAAC;iBACvE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;iBACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;iBACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAC1C,CAAA;YACD,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,sCAAsC,iCAE1E,MAAM,KACT,iBAAiB,EAAE,MAAA,MAAM,CAAC,iBAAiB,mCAAI,EAAE,KAEnD,UAAU,EACV,EAAE,EACF,EAAE,EACF,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EACnD,uBAAuB,EACvB,SAAS,CACV,CAAA;QACH,CAAC;KAAA;IAEa,gBAAgB,CAC5B,qBAAoG;;YAEpG,MAAM,kBAAkB,GAAG,IAAI,CAAC,aAAa;gBAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE;gBAC3D,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CAAA;YACrD,OAAO,MAAM,qBAAqB,CAAC,kBAAkB,CAAC,CAAA;QACxD,CAAC;KAAA;IAEa,wBAAwB,CACpC,WAA+B,EAC/B,qBAAoG;;YAEpG,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa;gBAClC,CAAC,CAAC,WAAW;oBACX,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,mCAAmC,CAAC,WAAW,CAAC;oBAC1E,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE;gBAC7D,CAAC,CAAC,CAAC,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAA;YACtE,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC,CAAA;YAC5D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YACxD,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACjC,CAAC;KAAA;IAEa,YAAY,CAAC,GAAW;;YACpC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAA;YACpD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,cAAM,EAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;YAClF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,EAAE,CAAC,CAAC,CAAA;gBACpE,OAAO,SAAS,CAAA;YAClB,CAAC;QACH,CAAC;KAAA;IAEK,6BAA6B,CACjC,MAAS,EACT,UAAwC,EACxC,MAAwI;;YAExI,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC9G,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAE,EAAE,CAAA;YAC1C,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;KAAA;IAEK,iCAAiC,CACrC,QAAa,EACb,YAA0C,EAC1C,MAAwI;;YAExI,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,IAAI,GAAG,EAAE,CAAA;YAC1C,IAAI,oBAAoB,GAAG,QAAQ,CAAA;YACnC,IAAI,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,oBAAoB,CAAC,MAAM,EAAE,CAAC;gBACvF,OAAO,CAAC,KAAK,CAAC,iCAAiC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;gBACvF,oBAAoB,GAAG,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;YACnE,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAA;YAC3E,MAAM,2BAA2B,GAAG,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAG,EAAE,IAAI,GAAG,EAAU,CAA0B,CAAC,CAAC,CAAA;YAC5I,MAAM,6BAA6B,GAAG,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAG,EAAE,IAAI,GAAG,EAAU,CAA0B,CAAC,CAAC,CAAA;YAC9I,MAAM,OAAO,GAAG,IAAI,GAAG,EAAa,CAAA;YACpC,MAAM,qBAAqB,GAAG,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAG,EAAE,CAAC,CAAgB,CAAC,CAAC,CAAA;YAC5G,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAqB,CAAA;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;YAElC,SAAe,yCAAyC,CACtD,OAAyC,EACzC,yCAAkD;;oBAElD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;wBACvD,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAA;wBACjE,MAAM,mBAAmB,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;wBACjE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;4BACrB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gCAChC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gCACxB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oCAC9B,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,cAAM,EAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gCAC5E,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,IACE,yCAAyC;wBACzC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAC9F,CAAC;wBACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;4BAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,EAAG,CAAA;4BACzB,MAAM,kBAAkB,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAA;4BAChE,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gCAChC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAA;gCAC5D,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;gCAC1D,kBAAkB,CAAC,KAAK,EAAE,CAAA;gCAC1B,MAAM,YAAY,GAAG,MAAM,MAAM,CAC/B,MAAM,EACN,YAAY,EACZ,CAAC,GAAG,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAmC,EAAE,CAAC,CAAC;oCACnE,GAAG,EAAE,GAAG;oCACR,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAE;iCACjC,CAAC,CAAC,CACJ,CAAA;gCACD,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;oCACzB,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAA;oCACpC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,CAAA;gCAC3C,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;aAAA;YAED,MAAM,yCAAyC,CAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,wBAAwB,CAC3D,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACpC,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,EACD,KAAK,CACN,CAAA;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAA;YAClE,MAAM,yCAAyC,CAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,kCAAkC,CACrE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACpC,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,EACD,KAAK,CACN,CAAA;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAA;YAClE,MAAM,yCAAyC,CAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,8CAA8C,CACjF,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACpC,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,EACD,KAAK,CACN,CAAA;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAA;YAClE,MAAM,yCAAyC,CAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,4CAA4C,CAC/E,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACpC,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,EACD,KAAK,CACN,CAAA;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAA;YAClE,MAAM,yCAAyC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;YACzD,OAAO,OAAO,CAAA;QAChB,CAAC;KAAA;IAEO,WAAW,CAAI,MAAW;QAChC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7B,CAAC;IAEO,yCAAyC,CAAC,OAAe,EAAE,QAAa,EAAE,UAAkB,EAAE,UAAsB;QAC1H,IAAI,QAAQ;YAAE,OAAM;QAEpB,IAAI,OAAO,GAAG,kCAAkC,GAAG,UAAU,GAAG,gBAAgB,CAAA;QAEhF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,CAAA;gBACjC,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YAC7F,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;gBACZ,OAAO,IAAI,uDAAuD,GAAG,EAAE,CAAA;YACzE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,OAAO,GAAG,yBAAyB,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAA;IAC5G,CAAC;IAEO,4BAA4B,CAAC,MAAuB;QAC1D,IAAI,CAAC,8BAA8B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC;IAED,0BAA0B,CAAC,MAAuB;QAChD,OAAO,IAAI,CAAC,8BAA8B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC3D,CAAC;IAEO,8BAA8B,CAAC,MAAuB,EAAE,oBAA6B;QAC3F,MAAM,gBAAgB,GAAG,EAAE,CAAA;QAC3B,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACtG,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC3H,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC/G,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC3G,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACrH,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,oBAAoB,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,mHAAmH,gBAAgB,IAAI;oBACrI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CACvC,CAAA;YACH,CAAC;;gBAAM,OAAO,KAAK,CAAA;QACrB,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEK,8BAA8B,CAClC,MAAS,EACT,UAAwC,EACxC,0BAA6G;;YAE7G,IAAI,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;gBAAE,OAAO,SAAS,CAAA;YACtF,MAAM,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;YACzD,OAAO,CACL,MAAM,IAAI,CAAC,0CAA0C,CACnD,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAC5B;gBACE,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,EAAE;oBACjD,mBAAmB,EAAE,+CAAsB,CAAC,KAAK;oBACjD,oBAAoB,EAAE,+CAAsB,CAAC,KAAK;oBAClD,cAAc,EAAE,CAAC,oBAAoB,CAAC;oBACtC,oBAAoB,EAAE,uBAAuB,CAAC,SAAS;iBACxD;aACF,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,0BAA0B,CAAC,OAAO,CAAC,CACjD,CACF,CAAC,oBAAoB,CAAA;QACxB,CAAC;KAAA;IAEK,uBAAuB,CAAC,MAA+B,EAAE,WAAoB;;YACjF,OAAO,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7E,CAAC;KAAA;IAEK,wBAAwB,CAAC,MAA+B,EAAE,WAAoB;;YAClF,MAAM,iBAAiB,GAAG,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CAAA;YAC1F,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,mCAAmC,CAAC,iBAAiB,CAAC,CAAA;YACzG,MAAM,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;YAChI,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB,CAAC,CAAA;YAExF,IAAI,CAAC,gBAAgB;gBAAE,OAAO,EAAE,CAAA;YAChC,OAAO,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9I,CAAC;KAAA;IAEK,+BAA+B,CAAC,MAA+B;;YACnE,OAAO,CAAC,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9D,CAAC;KAAA;IAEK,6BAA6B,CAAC,MAA+B;;YACjE,OAAO,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACrE,CAAC;KAAA;IAEK,yBAAyB,CAAC,MAA+B,EAAE,MAAyB;;YACxF,IAAI,MAAM,IAAI,qCAAiB,CAAC,OAAO,EAAE,CAAC;gBACxC,OAAO,EAAE,CAAA;YACX,CAAC;iBAAM,IAAI,MAAM,IAAI,qCAAiB,CAAC,kBAAkB,EAAE,CAAC;gBAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBAClE,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAChF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;iBAAM,IAAI,MAAM,IAAI,qCAAiB,CAAC,kBAAkB,EAAE,CAAC;gBAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBAClE,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAChF,OAAO,GAAG,CAAA;YACZ,CAAC;iBAAM,IAAI,MAAM,IAAI,qCAAiB,CAAC,sBAAsB,EAAE,CAAC;gBAC9D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAA;gBAC5D,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;gBACtF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;iBAAM,IAAI,MAAM,IAAI,qCAAiB,CAAC,sBAAsB,EAAE,CAAC;gBAC9D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAA;gBAC5D,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;gBACtF,OAAO,GAAG,CAAA;YACZ,CAAC;iBAAM,IAAI,MAAM,YAAY,qCAAiB,CAAC,GAAG,EAAE,CAAC;gBACnD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;YACvC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;KAAA;IAEO,eAAe,CAA4B,QAAa;QAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAA;QAC1C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAA;YAChC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACd,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AAtgCD,sDAsgCC","sourcesContent":["import { EncryptedEntity, EncryptedEntityStub } from '../../icc-api/model/models'\nimport { IccDataOwnerXApi } from '../icc-data-owner-x-api'\nimport {\n  b2a,\n  decryptObject,\n  EncryptedEntityWithType,\n  EncryptedFieldsManifest,\n  encryptObject,\n  EntityWithDelegationTypeName,\n  hex2ua,\n  truncateTrailingNulls,\n  ua2ab,\n  ua2utf8,\n  utf8_2ua,\n} from '../utils'\nimport { CryptoPrimitives } from './CryptoPrimitives'\nimport { SecurityMetadataDecryptor, SecurityMetadataType } from './SecurityMetadataDecryptor'\nimport { SecureDelegation } from '../../icc-api/model/SecureDelegation'\nimport { ExtendedApisUtils } from './ExtendedApisUtils'\nimport { EntityShareOrMetadataUpdateRequest } from '../../icc-api/model/requests/EntityShareOrMetadataUpdateRequest'\nimport { EntityBulkShareResult } from '../../icc-api/model/requests/EntityBulkShareResult'\nimport { EntityShareRequest } from '../../icc-api/model/requests/EntityShareRequest'\nimport { SecureDelegationsManager } from './SecureDelegationsManager'\nimport { ShareResult, ShareResultFailure, ShareResultSuccess } from '../utils/ShareResult'\nimport { ShareMetadataBehaviour } from './ShareMetadataBehaviour'\nimport { IccUserXApi } from '../icc-user-x-api'\nimport { MinimalEntityBulkShareResult } from '../../icc-api/model/requests/MinimalEntityBulkShareResult'\nimport { BulkShareOrUpdateMetadataParams, EntityRequestInformation } from '../../icc-api/model/requests/BulkShareOrUpdateMetadataParams'\nimport * as _ from 'lodash'\nimport AccessLevel = SecureDelegation.AccessLevelEnum\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport RequestedPermissionInternal = EntityShareRequest.RequestedPermissionInternal\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { SecretIdUseOption } from './SecretIdUseOption'\n\n/**\n * @internal this class is for internal use only and may be changed without notice.\n * Methods to support extended apis.\n */\nexport class ExtendedApisUtilsImpl implements ExtendedApisUtils {\n  constructor(\n    private readonly primitives: CryptoPrimitives,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly securityMetadataDecryptor: SecurityMetadataDecryptor,\n    private readonly secureDelegationsManager: SecureDelegationsManager,\n    private readonly userApi: IccUserXApi,\n    private readonly useParentKeys: boolean\n  ) {}\n\n  async encryptionKeysOf(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string[]> {\n    return await this.decryptAndMergeHierarchy(dataOwnerId, (hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.EncryptionKey)\n    )\n  }\n\n  async encryptionKeysForHcpHierarchyOf(entity: EncryptedEntityWithType): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return this.decryptHierarchy((hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.EncryptionKey)\n    )\n  }\n\n  async secretIdsOf(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string[]> {\n    return await this.decryptAndMergeHierarchy(dataOwnerId, (hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.SecretId)\n    )\n  }\n\n  async secretIdsForHcpHierarchyOf(entity: EncryptedEntityWithType): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return this.decryptHierarchy((hierarchy) => this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.SecretId))\n  }\n\n  async owningEntityIdsOf(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string[]> {\n    return await this.decryptAndMergeHierarchy(dataOwnerId, (hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.OwningEntityId)\n    )\n  }\n\n  async owningEntityIdsForHcpHierarchyOf(entity: EncryptedEntityWithType): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return this.decryptHierarchy((hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.OwningEntityId)\n    )\n  }\n\n  async hasWriteAccess(entity: EncryptedEntityWithType): Promise<boolean> {\n    return (\n      (await this.securityMetadataDecryptor.getEntityAccessLevel(entity.entity, await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())) ===\n      AccessLevel.WRITE\n    )\n  }\n\n  async entityWithInitialisedEncryptedMetadata<T extends EncryptedEntity>(\n    entity: T,\n    entityType: EntityWithDelegationTypeName,\n    owningEntity: string | undefined,\n    owningEntitySecretIds: string[] | undefined,\n    initialiseEncryptionKey: boolean,\n    autoDelegations: { [p: string]: SecureDelegation.AccessLevelEnum },\n    alternateRootDelegation: string | undefined\n  ): Promise<{ updatedEntity: T; rawEncryptionKey: string | undefined; secretId: string }> {\n    this.throwDetailedExceptionForInvalidParameter('entity.id', entity.id, 'entityWithInitialisedEncryptedMetadata', arguments)\n    this.checkEmptyEncryptionMetadata(entity)\n    const newRawKey = initialiseEncryptionKey ? await this.primitives.AES.generateCryptoKey(true) : undefined\n    const newSecretId = this.primitives.randomUuid()\n    return {\n      updatedEntity: await this.secureDelegationsManager.entityWithInitialisedEncryptedMetadata(\n        {\n          ...entity,\n          secretForeignKeys: owningEntitySecretIds ?? [],\n        },\n        entityType,\n        newSecretId ? [newSecretId] : [],\n        !!owningEntity ? [owningEntity] : [],\n        newRawKey ? [newRawKey] : [],\n        autoDelegations,\n        alternateRootDelegation\n      ),\n      rawEncryptionKey: newRawKey,\n      secretId: newSecretId,\n    }\n  }\n\n  async bulkShareOrUpdateEncryptedEntityMetadata<T extends EncryptedEntityStub>(\n    entitiesType: EntityWithDelegationTypeName,\n    entitiesUpdates: {\n      entity: EncryptedEntityStub\n      dataForDelegates: {\n        [delegateId: string]: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n      }\n    }[],\n    doRequestBulkShareOrUpdate: (request: BulkShareOrUpdateMetadataParams) => Promise<EntityBulkShareResult<T>[]>\n  ): Promise<{\n    updatedEntities: T[]\n    unmodifiedEntitiesIds: string[]\n    updateErrors: {\n      entityId: string\n      delegateId: string\n      request?: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n      updatedForMigration: boolean\n      code?: number\n      reason?: string\n    }[]\n  }> {\n    const { allRequestsByEntityId, orderedRequestsInfoByEntityId, unmodifiedEntitiesIds } = await this.prepareBulkShareRequests(\n      entitiesType,\n      entitiesUpdates\n    )\n    const results =\n      Object.keys(allRequestsByEntityId).length > 0 ? await doRequestBulkShareOrUpdate({ requestsByEntityId: allRequestsByEntityId }) : []\n    const updatedEntities: T[] = []\n    const updateErrors: {\n      entityId: string\n      delegateId: string\n      request?: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n      updatedForMigration: boolean\n      code?: number\n      reason?: string\n    }[] = []\n    for (const result of results) {\n      if (result.updatedEntity) {\n        updatedEntities.push(result.updatedEntity)\n      }\n      for (const [errorRequestId, error] of Object.entries(result.rejectedRequests ?? {})) {\n        const requestIndex = Number(errorRequestId)\n        const { delegateId, request, updatedForMigration } = orderedRequestsInfoByEntityId[result.entityId][requestIndex]\n        updateErrors.push({\n          entityId: result.entityId,\n          delegateId,\n          request,\n          updatedForMigration,\n          code: error.code,\n          reason: error.reason,\n        })\n      }\n    }\n    // TODO implement auto-retry for failed requests if the shouldRetry flag in result.rejectedRequests is set to true\n    return {\n      updatedEntities,\n      updateErrors,\n      unmodifiedEntitiesIds,\n    }\n  }\n\n  async bulkShareOrUpdateEncryptedEntityMetadataNoEntities(\n    entitiesType: EntityWithDelegationTypeName,\n    entitiesUpdates: {\n      entity: EncryptedEntityStub\n      dataForDelegates: {\n        [delegateId: string]: {\n          shareSecretIds: string[]\n          shareEncryptionKeys: string[]\n          shareOwningEntityIds: string[]\n          requestedPermissions: EntityShareRequest.RequestedPermissionEnum\n        }\n      }\n    }[],\n    doRequestBulkShareOrUpdate: (request: BulkShareOrUpdateMetadataParams) => Promise<MinimalEntityBulkShareResult[]>\n  ): Promise<{\n    unmodifiedEntitiesIds: string[]\n    successfulUpdates: { entityId: string; delegateId: string }[]\n    updateErrors: {\n      entityId: string\n      delegateId: string\n      request?: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: EntityShareRequest.RequestedPermissionEnum\n      }\n      updatedForMigration: boolean\n      code?: number\n      reason?: string\n    }[]\n  }> {\n    const { allRequestsByEntityId, orderedRequestsInfoByEntityId, unmodifiedEntitiesIds } = await this.prepareBulkShareRequests(\n      entitiesType,\n      entitiesUpdates\n    )\n    const results = await doRequestBulkShareOrUpdate({ requestsByEntityId: allRequestsByEntityId })\n    const updateErrors: {\n      entityId: string\n      delegateId: string\n      request?: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n      updatedForMigration: boolean\n      code?: number\n      reason?: string\n    }[] = []\n    for (const result of results) {\n      for (const [errorRequestId, error] of Object.entries(result.rejectedRequests ?? {})) {\n        const requestIndex = Number(errorRequestId)\n        const { delegateId, request, updatedForMigration } = orderedRequestsInfoByEntityId[result.entityId][requestIndex]\n        updateErrors.push({\n          entityId: result.entityId,\n          delegateId,\n          request,\n          updatedForMigration,\n          code: error.code,\n          reason: error.reason,\n        })\n      }\n    }\n    const successfulRequests = Object.entries(allRequestsByEntityId)\n      .flatMap(([entityId, requests]) => Object.keys(requests).map((delegateId) => ({ entityId, delegateId })))\n      .filter(({ entityId, delegateId }) => !updateErrors.some((error) => error.entityId === entityId && error.delegateId === delegateId))\n    return {\n      successfulUpdates: successfulRequests,\n      updateErrors,\n      unmodifiedEntitiesIds,\n    }\n  }\n\n  private async prepareBulkShareRequests(\n    entitiesType: EntityWithDelegationTypeName,\n    entitiesUpdates: {\n      entity: EncryptedEntityStub\n      dataForDelegates: {\n        [delegateId: string]: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n      }\n    }[]\n  ): Promise<{\n    unmodifiedEntitiesIds: string[]\n    allRequestsByEntityId: { [entityId: string]: EntityRequestInformation }\n    orderedRequestsInfoByEntityId: {\n      [entityId: string]: {\n        delegateId: string\n        request?: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n        updatedForMigration: boolean\n      }[]\n    }\n  }> {\n    if (new Set(entitiesUpdates.map((e) => e.entity.id)).size !== entitiesUpdates.length) {\n      throw new Error('Duplicate requests: the same entity id is present more than once in the input')\n    }\n    const allRequestsByEntityId = {} as { [entityId: string]: EntityRequestInformation }\n    const orderedRequestsInfoByEntityId: {\n      [entityId: string]: {\n        delegateId: string\n        request?: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n        updatedForMigration: boolean\n      }[]\n    } = {}\n    const unmodifiedEntitiesIds: string[] = []\n    for (const { entity, dataForDelegates } of entitiesUpdates) {\n      const entityId = entity.id\n      if (!entityId) throw new Error('Share of an entity requires for the entity to already exist and have an id')\n      const entityWithType = { entity, type: entitiesType }\n      const currentRequests = {} as { [requestId: string]: EntityShareOrMetadataUpdateRequest }\n      const currentOrderedRequests: {\n        delegateId: string\n        request?: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n        updatedForMigration: boolean\n      }[] = []\n      const migrationRequests = await this.makeMigrationRequestsIfNeeded(entityWithType, dataForDelegates)\n      for (const [delegate, request] of Object.entries(migrationRequests)) {\n        currentRequests[String(currentOrderedRequests.length)] = request\n        currentOrderedRequests.push({\n          delegateId: delegate,\n          request: dataForDelegates[delegate],\n          updatedForMigration: true,\n        })\n      }\n      for (const [delegate, userRequest] of Object.entries(dataForDelegates)) {\n        if (!migrationRequests[delegate]) {\n          const request = await this.secureDelegationsManager.makeShareOrUpdateRequestParams(\n            entityWithType,\n            delegate,\n            userRequest.shareSecretIds ?? [],\n            userRequest.shareEncryptionKeys ?? [],\n            userRequest.shareOwningEntityIds ?? [],\n            userRequest.requestedPermissions\n          )\n          if (request) {\n            currentRequests[String(currentOrderedRequests.length)] = request\n            currentOrderedRequests.push({\n              delegateId: delegate,\n              request: userRequest,\n              updatedForMigration: false,\n            })\n          }\n        }\n      }\n      if (Object.keys(currentRequests).length > 0) {\n        const existingDelegationMembersDetails = await this.securityMetadataDecryptor.getDelegationMemberDetails(entityWithType)\n        const accessibleMembers = new Set(\n          this.useParentKeys ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds() : [await this.dataOwnerApi.getCurrentDataOwnerId()]\n        )\n        const potentialParentDelegations = Object.entries(existingDelegationMembersDetails).flatMap(([k, members]) => {\n          if ((!!members.delegate && accessibleMembers.has(members.delegate)) || (!!members.delegator && accessibleMembers.has(members.delegator))) {\n            return [k]\n          } else return []\n        })\n        allRequestsByEntityId[entityId] = { requests: currentRequests, potentialParentDelegations }\n        orderedRequestsInfoByEntityId[entityId] = currentOrderedRequests\n      } else {\n        unmodifiedEntitiesIds.push(entityId)\n      }\n    }\n    return { unmodifiedEntitiesIds, allRequestsByEntityId, orderedRequestsInfoByEntityId }\n  }\n\n  async simpleShareOrUpdateEncryptedEntityMetadata<T extends EncryptedEntityStub>(\n    entity: { entity: T; type: EntityWithDelegationTypeName },\n    delegates: {\n      [p: string]: {\n        shareSecretIds: string[] | undefined\n        shareEncryptionKeys: ShareMetadataBehaviour | undefined\n        shareOwningEntityIds: ShareMetadataBehaviour | undefined\n        requestedPermissions: EntityShareRequest.RequestedPermissionEnum | undefined\n      }\n    },\n    doRequestBulkShareOrUpdate: (request: BulkShareOrUpdateMetadataParams) => Promise<EntityBulkShareResult<T>[]>\n  ): Promise<ShareResult<T>> {\n    const availableEncryptionKeys = await this.encryptionKeysOf(entity)\n    const availableOwningEntityIds = await this.owningEntityIdsOf(entity)\n    const dataForDelegates: {\n      [delegateId: string]: {\n        shareSecretIds: string[]\n        shareEncryptionKeys: string[]\n        shareOwningEntityIds: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n    } = {}\n    for (const [delegateId, delegateRequests] of Object.entries(delegates)) {\n      if (!availableEncryptionKeys.length && delegateRequests.shareEncryptionKeys === ShareMetadataBehaviour.REQUIRED) {\n        throw new Error(\n          `Entity ${JSON.stringify(\n            entity\n          )} has no encryption keys or the current data owner can't access any encryption keys, but sharing is required.`\n        )\n      }\n      if (!availableOwningEntityIds.length && delegateRequests.shareOwningEntityIds === ShareMetadataBehaviour.REQUIRED) {\n        throw new Error(\n          `Entity ${JSON.stringify(\n            entity\n          )} has no owning entity ids or the current data owner can't access any owning entity ids, but sharing is required.`\n        )\n      }\n      dataForDelegates[delegateId] = {\n        shareSecretIds: delegateRequests.shareSecretIds ?? (await this.secretIdsOf(entity)),\n        shareEncryptionKeys: delegateRequests.shareEncryptionKeys === ShareMetadataBehaviour.NEVER ? [] : availableEncryptionKeys,\n        shareOwningEntityIds: delegateRequests.shareOwningEntityIds === ShareMetadataBehaviour.NEVER ? [] : availableOwningEntityIds,\n        requestedPermissions: delegateRequests.requestedPermissions ?? RequestedPermissionEnum.MAX_WRITE,\n      }\n    }\n    const shareResult = await this.bulkShareOrUpdateEncryptedEntityMetadata(\n      entity.type,\n      [\n        {\n          entity: entity.entity,\n          dataForDelegates,\n        },\n      ],\n      (x) => doRequestBulkShareOrUpdate(x)\n    )\n    if (shareResult.unmodifiedEntitiesIds.includes(entity.entity.id!)) {\n      return new ShareResultSuccess(entity.entity)\n    }\n    if (!shareResult.updateErrors.length && shareResult.updatedEntities.length === 1) {\n      return new ShareResultSuccess(shareResult.updatedEntities[0])\n    }\n    const requestedDelegates = new Set(Object.keys(delegates))\n    const errorsOfRequestedDelegates = shareResult.updateErrors.filter((x) => requestedDelegates.has(x.delegateId))\n    if (errorsOfRequestedDelegates.length === 0 && shareResult.updatedEntities.length === 1) {\n      console.warn(`Errors with migration of encrypted metadata ${JSON.stringify(shareResult.updateErrors)}.`)\n      return new ShareResultSuccess(shareResult.updatedEntities[0])\n    }\n    return new ShareResultFailure(\n      shareResult.updateErrors,\n      `There was an error sharing entity with id ${entity.entity.id}. Check the logs for more details.`\n    )\n  }\n\n  private async makeMigrationRequestsIfNeeded(\n    entity: EncryptedEntityWithType,\n    userRequestsForEntity: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n    }\n  ): Promise<{ [delegateId: string]: EntityShareOrMetadataUpdateRequest }> {\n    const hierarchy = this.useParentKeys\n      ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n      : [await this.dataOwnerApi.getCurrentDataOwnerId()]\n    const legacySecretIds = await this.securityMetadataDecryptor.decryptAllLegacyDelegations(entity.entity, hierarchy, SecurityMetadataType.SecretId)\n    const legacyEncryptionKeys = await this.securityMetadataDecryptor.decryptAllLegacyDelegations(\n      entity.entity,\n      hierarchy,\n      SecurityMetadataType.EncryptionKey\n    )\n    const legacyOwningEntityIds = await this.securityMetadataDecryptor.decryptAllLegacyDelegations(\n      entity.entity,\n      hierarchy,\n      SecurityMetadataType.OwningEntityId\n    )\n    const res = {} as { [delegateId: string]: EntityShareOrMetadataUpdateRequest }\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    for (const hierarchyMember of hierarchy) {\n      const hierarchyMemberMigration = await this.makeMigrationRequestForMemberOfHierarchy(\n        entity,\n        selfId,\n        hierarchyMember,\n        userRequestsForEntity[hierarchyMember],\n        legacySecretIds,\n        legacyEncryptionKeys,\n        legacyOwningEntityIds\n      )\n      if (hierarchyMemberMigration) {\n        res[hierarchyMember] = hierarchyMemberMigration\n      }\n    }\n    return res\n  }\n\n  private async makeMigrationRequestForMemberOfHierarchy(\n    entity: EncryptedEntityWithType,\n    selfId: string,\n    currMemberId: string,\n    userRequestForDelegate:\n      | {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n      | undefined,\n    legacySecretIds: { decrypted: string; dataOwnersWithAccess: string[] }[],\n    legacyEncryptionKeys: { decrypted: string; dataOwnersWithAccess: string[] }[],\n    legacyOwningEntityIds: { decrypted: string; dataOwnersWithAccess: string[] }[]\n  ): Promise<EntityShareOrMetadataUpdateRequest | undefined> {\n    // This implementation is very specific from migration from delegations to secure delegations. If in future we will have to migrate from secure delegations to something else, this method may need significant changes in its logic.\n    const subHierarchy = this.useParentKeys ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIdsFrom(currMemberId) : [currMemberId]\n    const subHierarchySet = new Set(subHierarchy)\n    const legacyAccess =\n      selfId === entity.entity.id && currMemberId === selfId\n        ? AccessLevel.WRITE\n        : await this.securityMetadataDecryptor.getEntityLegacyDelegationAccessLevel(entity.entity, subHierarchy)\n    if (!legacyAccess) return undefined\n    const selfLegacySecretIds = legacySecretIds.filter((x) => x.dataOwnersWithAccess.some((d) => subHierarchySet.has(d))).map((x) => x.decrypted)\n    const selfLegacyEncryptionKeys = legacyEncryptionKeys\n      .filter((x) => x.dataOwnersWithAccess.some((d) => subHierarchySet.has(d)))\n      .map((x) => x.decrypted)\n    const selfLegacyOwningEntityIds = legacyOwningEntityIds\n      .filter((x) => x.dataOwnersWithAccess.some((d) => subHierarchySet.has(d)))\n      .map((x) => x.decrypted)\n    let missingSecretIds: string[] = []\n    let missingEncryptionKeys: string[] = []\n    let missingOwningEntityIds: string[] = []\n    if (selfLegacySecretIds.length > 0) {\n      const currentSecretIds = new Set(\n        (await this.securityMetadataDecryptor.decryptAllSecureDelegations(entity.entity, [currMemberId], SecurityMetadataType.SecretId)).map(\n          (x) => x.decrypted\n        )\n      )\n      missingSecretIds = selfLegacySecretIds.filter((x) => !currentSecretIds.has(x))\n    }\n    if (selfLegacyEncryptionKeys.length > 0) {\n      const currentEncryptionKeys = new Set(\n        (await this.securityMetadataDecryptor.decryptAllSecureDelegations(entity.entity, [currMemberId], SecurityMetadataType.EncryptionKey)).map(\n          (x) => x.decrypted\n        )\n      )\n      missingEncryptionKeys = selfLegacyEncryptionKeys.filter((x) => !currentEncryptionKeys.has(x))\n    }\n    if (selfLegacyOwningEntityIds.length > 0) {\n      const currentOwningEntityIds = new Set(\n        (await this.securityMetadataDecryptor.decryptAllSecureDelegations(entity.entity, [currMemberId], SecurityMetadataType.OwningEntityId)).map(\n          (x) => x.decrypted\n        )\n      )\n      missingOwningEntityIds = selfLegacyOwningEntityIds.filter((x) => !currentOwningEntityIds.has(x))\n    }\n    const mustCreateRootDelegation =\n      selfId === entity.entity.id &&\n      currMemberId === selfId &&\n      !(await this.securityMetadataDecryptor.getEntitySecureDelegationAccessLevel(entity.entity, subHierarchy))\n    if (missingSecretIds.length > 0 || missingEncryptionKeys.length > 0 || missingOwningEntityIds.length > 0 || mustCreateRootDelegation) {\n      let requestedPermissions: RequestedPermissionInternal\n      if (currMemberId === selfId) {\n        requestedPermissions = RequestedPermissionInternal.ROOT\n      } else {\n        requestedPermissions = RequestedPermissionInternal.FULL_WRITE // Legacy permission if present is always write\n      }\n      return await this.secureDelegationsManager.makeShareOrUpdateRequestParams(\n        entity,\n        currMemberId,\n        Array.from(new Set([...missingSecretIds, ...(userRequestForDelegate?.shareSecretIds ?? [])])),\n        Array.from(new Set([...missingEncryptionKeys, ...(userRequestForDelegate?.shareEncryptionKeys ?? [])])),\n        Array.from(new Set([...missingOwningEntityIds, ...(userRequestForDelegate?.shareOwningEntityIds ?? [])])),\n        requestedPermissions\n      )\n    } else return undefined\n  }\n\n  async tryDecryptDataOf(\n    entity: EncryptedEntityWithType,\n    content: ArrayBuffer | Uint8Array,\n    validator: (decryptedData: ArrayBuffer) => Promise<boolean> | undefined\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    const triedKeys: Set<string> = new Set()\n    const result = await this.doIncrementallyDecryptingKeys(entity.entity, entity.type, async (e, t, keys) => {\n      for (const k of keys) {\n        if (!triedKeys.has(k.raw)) {\n          triedKeys.add(k.raw)\n          try {\n            const decrypted = await this.primitives.AES.decrypt(k.key, content)\n            if (!validator || (await validator(decrypted))) return { success: decrypted }\n          } catch (e) {\n            console.warn(`Error while attempting to decrypt attachment of ${entity.entity.id} with raw key ${k.raw}: ${e}`)\n          }\n        }\n      }\n      return null\n    })\n    if (result != null) {\n      return { data: result.success, wasDecrypted: true }\n    } else {\n      return { data: ua2ab(content), wasDecrypted: false }\n    }\n  }\n\n  async encryptDataOf<T extends EncryptedEntityStub>(\n    entity: T,\n    type: EntityWithDelegationTypeName,\n    content: ArrayBuffer | Uint8Array,\n    saveEntity: (entity: T) => Promise<T>\n  ): Promise<{ encryptedData: ArrayBuffer; updatedEntity: T | undefined }> {\n    const ensureInitialisedKeysResult = await this.ensureEncryptionKeysInitialised(entity, type)\n    let updatedEntity: T | undefined\n    if (!!ensureInitialisedKeysResult) {\n      updatedEntity = await saveEntity(ensureInitialisedKeysResult)\n    }\n    const encrypted = await this.doIncrementallyDecryptingKeys(entity, type, async (e, t, keys) => {\n      for (const k of keys) {\n        try {\n          return {\n            success: {\n              encryptedData: await this.primitives.AES.encrypt(k.key, content),\n              updatedEntity: updatedEntity,\n            },\n          }\n        } catch (e) {\n          console.warn(`Error while encrypting with raw key ${k.raw}: ${e}`)\n        }\n      }\n      return null\n    })\n    if (encrypted != null) return encrypted.success\n    throw new Error(`Could not extract any valid encryption keys for entity ${JSON.stringify(entity)}.`)\n  }\n\n  async tryDecryptEntities<T extends EncryptedEntity>(\n    entities: T[],\n    entityType: EntityWithDelegationTypeName,\n    constructor: (json: any) => T\n  ): Promise<{ entity: T; decrypted: boolean }[]> {\n    const nothingToDecryptResults = new Map<string, T>()\n    for (const entity of entities) {\n      const nothingToDecrypt = await decryptObject(entity, async (encrypted) => {\n        return null\n      })\n      if (nothingToDecrypt != null) {\n        nothingToDecryptResults.set(entity.id!, constructor(nothingToDecrypt))\n      }\n    }\n    const actuallyDecryptedResults = await this.doManyIncrementallyDecryptingKeys(\n      entities.filter((e) => !nothingToDecryptResults.has(e.id!)),\n      entityType,\n      async (entity, t, keys) => {\n        // The decrypt object will try all keys on each of the sub-objects; this is intentional because even though it\n        // shouldn't happen, but it is still possible that some entity could be accidentally merged badly and the merged\n        // entity has multiple encryptedSelf (on different sub-entities) that use different keys.\n        const decrypted = await decryptObject(entity, (encrypted) => this.tryDecryptJson(keys, encrypted, false))\n        if (decrypted != null) {\n          return { success: constructor(decrypted) }\n        } else {\n          return null\n        }\n      }\n    )\n    const res = []\n    for (const entity of entities) {\n      const decrypted = actuallyDecryptedResults.get(entity.id!) ?? nothingToDecryptResults.get(entity.id!)\n      if (!decrypted) {\n        res.push({ entity: entity, decrypted: false })\n      } else {\n        res.push({ entity: decrypted, decrypted: true })\n      }\n    }\n    return res\n  }\n\n  async tryDecryptJson(\n    potentialKeys: { key: CryptoKey; raw: string }[],\n    encrypted: Uint8Array,\n    truncateTrailingDecryptedNulls: boolean\n  ): Promise<{} | null> {\n    for (const key of potentialKeys) {\n      try {\n        const decrypted = await this.primitives.AES.decrypt(key.key, encrypted, key.raw)\n        return JSON.parse(ua2utf8(truncateTrailingDecryptedNulls ? truncateTrailingNulls(new Uint8Array(decrypted)) : decrypted))\n      } catch (e) {}\n    }\n    return null\n  }\n\n  async tryEncryptEntities<T extends EncryptedEntity>(\n    entities: T[],\n    entityType: EntityWithDelegationTypeName,\n    fieldsToEncrypt: EncryptedFieldsManifest,\n    encodeBinaryData: boolean,\n    requireEncryption: boolean,\n    constructor: (json: any) => T\n  ): Promise<T[]> {\n    const entitiesWithInitialisedEncryptionKeys: T[] = []\n    for (const entity of entities) {\n      entitiesWithInitialisedEncryptionKeys.push((await this.ensureEncryptionKeysInitialised(entity, entityType)) ?? entity)\n    }\n    const results = await this.doManyIncrementallyDecryptingKeys(entitiesWithInitialisedEncryptionKeys, entityType, async (e, t, keys) => {\n      for (const k of keys) {\n        try {\n          const encrypted = await encryptObject(\n            e,\n            (obj) => {\n              // TODO encoding of binary data should probably be applied to everything?\n              const json = encodeBinaryData\n                ? JSON.stringify(obj, (k, v) => {\n                    return v instanceof ArrayBuffer || ArrayBuffer.isView(v)\n                      ? b2a(new Uint8Array(v as ArrayBufferLike).reduce((d, b) => d + String.fromCharCode(b), ''))\n                      : v\n                  })\n                : JSON.stringify(obj)\n\n              return this.primitives.AES.encrypt(k.key, utf8_2ua(json), k.raw)\n            },\n            fieldsToEncrypt,\n            entityType\n          )\n          return { success: constructor(encrypted) }\n        } catch (e) {\n          console.warn(`Error while encrypting with raw key ${k.raw}: ${e}`)\n        }\n      }\n      return null\n    })\n    if (results.size != entitiesWithInitialisedEncryptionKeys.length) {\n      if (requireEncryption) {\n        throw new Error(\n          `Could not encrypt entities ${entitiesWithInitialisedEncryptionKeys.flatMap((e): string[] => (results.has(e.id!) ? [] : [e.id!]))}`\n        )\n      } else {\n        for (const e of entitiesWithInitialisedEncryptionKeys) {\n          if (!results.has(e.id!)) {\n            await encryptObject(\n              e,\n              async (obj: { [key: string]: any }) => {\n                const hasNonEmptyValues = Object.values(obj).some(\n                  (v) => v !== undefined && (typeof v !== 'object' || (Array.isArray(v) && v.length > 0) || Object.keys(v).length > 0)\n                )\n                if (hasNonEmptyValues) {\n                  throw new Error(\n                    `Impossible to modify encrypted content of an entity if no encryption key is known.\\nEntity: ${JSON.stringify(\n                      e\n                    )}\\nTo encrypt: ${JSON.stringify(obj)}`\n                  )\n                }\n                return Promise.resolve(new ArrayBuffer(1))\n              },\n              fieldsToEncrypt,\n              'entity'\n            )\n            results.set(e.id!, e)\n          }\n        }\n      }\n    }\n    return entitiesWithInitialisedEncryptionKeys.map((e) => results.get(e.id!)!)\n  }\n\n  async ensureEncryptionKeysInitialised<T extends EncryptedEntity>(entity: T, entityType: EntityWithDelegationTypeName): Promise<T | undefined> {\n    if (this.securityMetadataDecryptor.hasAnyEncryptionKeys(entity)) return undefined\n    if (!entity.rev) {\n      throw new Error(\n        'New encrypted entity is lacking encryption metadata. ' +\n          'Please instantiate new entities using the `newInstance` method from the respective extended api.'\n      )\n    }\n    /*\n     * Add encryption key and share with all auto-delegates already in legacy delegations.\n     * TODO disable this logic and simply throw error for post-2018 customers.\n     */\n    const existingDelegations = new Set(Object.keys(entity.delegations ?? {}))\n    const usersWithAccessToNewKey = Object.fromEntries(\n      Object.values((await this.userApi.getCurrentUser()).autoDelegations ?? {})\n        .flatMap((x) => x)\n        .filter((x) => existingDelegations.has(x))\n        .map((x) => [x, AccessLevelEnum.WRITE])\n    )\n    return await this.secureDelegationsManager.entityWithInitialisedEncryptedMetadata(\n      {\n        ...entity,\n        secretForeignKeys: entity.secretForeignKeys ?? [],\n      },\n      entityType,\n      [],\n      [],\n      [await this.primitives.AES.generateCryptoKey(true)],\n      usersWithAccessToNewKey,\n      undefined\n    )\n  }\n\n  private async decryptHierarchy(\n    decryptedDataProvider: (dataOwners: string[]) => Promise<{ ownerId: string; extracted: string[] }[]>\n  ): Promise<{ ownerId: string; extracted: string[] }[]> {\n    const canDecryptOwnerIds = this.useParentKeys\n      ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n      : [await this.dataOwnerApi.getCurrentDataOwnerId()]\n    return await decryptedDataProvider(canDecryptOwnerIds)\n  }\n\n  private async decryptAndMergeHierarchy(\n    dataOwnerId: string | undefined,\n    decryptedDataProvider: (dataOwners: string[]) => Promise<{ ownerId: string; extracted: string[] }[]>\n  ): Promise<string[]> {\n    const hierarchy = this.useParentKeys\n      ? dataOwnerId\n        ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIdsFrom(dataOwnerId)\n        : await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n      : [dataOwnerId ?? (await this.dataOwnerApi.getCurrentDataOwnerId())]\n    const decryptedData = await decryptedDataProvider(hierarchy)\n    const merged = decryptedData.flatMap((x) => x.extracted)\n    return this.deduplicate(merged)\n  }\n\n  private async tryImportKey(key: string): Promise<CryptoKey | undefined> {\n    if (!/^[0-9A-Fa-f\\-]+$/g.test(key)) return undefined\n    try {\n      return await this.primitives.AES.importKey('raw', hex2ua(key.replace(/-/g, '')))\n    } catch (e) {\n      console.warn(`Could not import key ${key} as an encryption key.`, e)\n      return undefined\n    }\n  }\n\n  async doIncrementallyDecryptingKeys<E extends EncryptedEntity | EncryptedEntityStub, T>(\n    entity: E,\n    entityType: EntityWithDelegationTypeName,\n    action: (entity: E, entityType: EntityWithDelegationTypeName, keys: { key: CryptoKey; raw: string }[]) => Promise<{ success: T } | null>\n  ): Promise<{ success: T } | null> {\n    const res = await this.doManyIncrementallyDecryptingKeys([entity], entityType, (e, t, ks) => action(e, t, ks))\n    if (res.has(entity.id!)) {\n      return { success: res.get(entity.id!)! }\n    } else {\n      return null\n    }\n  }\n\n  async doManyIncrementallyDecryptingKeys<E extends EncryptedEntity | EncryptedEntityStub, T>(\n    entities: E[],\n    entitiesType: EntityWithDelegationTypeName,\n    action: (entity: E, entityType: EntityWithDelegationTypeName, keys: { key: CryptoKey; raw: string }[]) => Promise<{ success: T } | null>\n  ): Promise<Map<string, T>> {\n    if (entities.length == 0) return new Map()\n    let deduplicatedEntities = entities\n    if (new Set(deduplicatedEntities.map((e) => e.id)).size != deduplicatedEntities.length) {\n      console.error(`Duplicate entries in entities ${deduplicatedEntities.map((x) => x.id)}`)\n      deduplicatedEntities = this.deduplicateById(deduplicatedEntities)\n    }\n\n    const hierarchy = await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n    const allExtractedKeysForEntities = Object.fromEntries(deduplicatedEntities.map((x) => [x.id!, new Set<string>()] as [string, Set<string>]))\n    const newlyExtractedKeysForEntities = Object.fromEntries(deduplicatedEntities.map((x) => [x.id!, new Set<string>()] as [string, Set<string>]))\n    const results = new Map<string, T>()\n    const remainingEntitiesById = Object.fromEntries(deduplicatedEntities.map((x) => [x.id!, x] as [string, E]))\n    const importedKeysByRaw = new Map<string, CryptoKey>()\n    const primitives = this.primitives\n\n    async function updateExtractedKeysAndDoActionIfNecessary(\n      newKeys: { [entityId: string]: string[] },\n      forceUpdateOnEntitiesWithNewExtractedKeys: boolean\n    ): Promise<void> {\n      for (const [entityId, keys] of Object.entries(newKeys)) {\n        const newlyExtractedSet = newlyExtractedKeysForEntities[entityId]\n        const alreadyExtractedSet = allExtractedKeysForEntities[entityId]\n        for (const k of keys) {\n          if (!alreadyExtractedSet.has(k)) {\n            newlyExtractedSet.add(k)\n            if (!importedKeysByRaw.has(k)) {\n              importedKeysByRaw.set(k, await primitives.AES.importKey('raw', hex2ua(k)))\n            }\n          }\n        }\n      }\n      if (\n        forceUpdateOnEntitiesWithNewExtractedKeys ||\n        Object.keys(remainingEntitiesById).every((eId) => newlyExtractedKeysForEntities[eId].size > 0)\n      ) {\n        for (const entity of Object.values(remainingEntitiesById)) {\n          const currId = entity.id!\n          const currNewlyExtracted = newlyExtractedKeysForEntities[currId]\n          if (currNewlyExtracted.size > 0) {\n            const currAllExtracted = allExtractedKeysForEntities[currId]\n            currNewlyExtracted.forEach((k) => currAllExtracted.add(k))\n            currNewlyExtracted.clear()\n            const actionResult = await action(\n              entity,\n              entitiesType,\n              [...currAllExtracted].map((raw): { raw: string; key: CryptoKey } => ({\n                raw: raw,\n                key: importedKeysByRaw.get(raw)!,\n              }))\n            )\n            if (actionResult != null) {\n              delete remainingEntitiesById[currId]\n              results.set(currId, actionResult.success)\n            }\n          }\n        }\n      }\n    }\n\n    await updateExtractedKeysAndDoActionIfNecessary(\n      await this.securityMetadataDecryptor.decryptLegacyDelegations(\n        Object.values(remainingEntitiesById),\n        hierarchy,\n        SecurityMetadataType.EncryptionKey\n      ),\n      false\n    )\n    if (Object.keys(remainingEntitiesById).length == 0) return results\n    await updateExtractedKeysAndDoActionIfNecessary(\n      await this.securityMetadataDecryptor.decryptSecureDelegationsUsingCache(\n        Object.values(remainingEntitiesById),\n        hierarchy,\n        SecurityMetadataType.EncryptionKey\n      ),\n      false\n    )\n    if (Object.keys(remainingEntitiesById).length == 0) return results\n    await updateExtractedKeysAndDoActionIfNecessary(\n      await this.securityMetadataDecryptor.decryptSecureDelegationsUsingKnownExchangeData(\n        Object.values(remainingEntitiesById),\n        hierarchy,\n        SecurityMetadataType.EncryptionKey\n      ),\n      false\n    )\n    if (Object.keys(remainingEntitiesById).length == 0) return results\n    await updateExtractedKeysAndDoActionIfNecessary(\n      await this.securityMetadataDecryptor.decryptSecureDelegationsUsingExchangeDataMap(\n        Object.values(remainingEntitiesById),\n        hierarchy,\n        SecurityMetadataType.EncryptionKey\n      ),\n      false\n    )\n    if (Object.keys(remainingEntitiesById).length == 0) return results\n    await updateExtractedKeysAndDoActionIfNecessary({}, true)\n    return results\n  }\n\n  private deduplicate<T>(values: T[]): T[] {\n    return [...new Set(values)]\n  }\n\n  private throwDetailedExceptionForInvalidParameter(argName: string, argValue: any, methodName: string, methodArgs: IArguments) {\n    if (argValue) return\n\n    let details = '\\nMethod name: icc-crypto-x-api.' + methodName + '()\\nArguments:'\n\n    if (methodArgs) {\n      try {\n        const argsArray = [...methodArgs]\n        argsArray.forEach((arg, index) => (details += '\\n[' + index + ']: ' + JSON.stringify(arg)))\n      } catch (ex) {\n        details += '; a problem occured while logging arguments details: ' + ex\n      }\n    }\n\n    throw new Error('### THIS SHOULD NOT HAPPEN: ' + argName + ' has an invalid value: ' + argValue + details)\n  }\n\n  private checkEmptyEncryptionMetadata(entity: EncryptedEntity) {\n    this.doCheckEmptyEncryptionMetadata(entity, true)\n  }\n\n  hasEmptyEncryptionMetadata(entity: EncryptedEntity): boolean {\n    return this.doCheckEmptyEncryptionMetadata(entity, false)\n  }\n\n  private doCheckEmptyEncryptionMetadata(entity: EncryptedEntity, throwErrorIfNonEmpty: boolean): boolean {\n    const existingMetadata = []\n    if (entity.delegations && Object.keys(entity.delegations).length) existingMetadata.push('delegations')\n    if (entity.cryptedForeignKeys && Object.keys(entity.cryptedForeignKeys).length) existingMetadata.push('cryptedForeignKeys')\n    if (entity.encryptionKeys && Object.keys(entity.encryptionKeys).length) existingMetadata.push('encryptionKeys')\n    if (entity.secretForeignKeys && entity.secretForeignKeys.length) existingMetadata.push('secretForeignKeys')\n    if (entity.securityMetadata && Object.keys(entity.securityMetadata).length) existingMetadata.push('securityMetadata')\n    if (existingMetadata.length > 0) {\n      if (throwErrorIfNonEmpty) {\n        throw new Error(\n          `Entity should have no encryption metadata on initialisation, but the following fields already have some values: ${existingMetadata}\\n` +\n            JSON.stringify(entity, undefined, 2)\n        )\n      } else return false\n    }\n    return true\n  }\n\n  async initialiseConfidentialSecretId<T extends EncryptedEntity>(\n    entity: T,\n    entityType: EntityWithDelegationTypeName,\n    doRequestBulkShareOrUpdate: (request: BulkShareOrUpdateMetadataParams) => Promise<EntityBulkShareResult<T>[]>\n  ): Promise<T | undefined> {\n    if (await this.getConfidentialSecretId({ entity, type: entityType })) return undefined\n    const confidentialSecretId = this.primitives.randomUuid()\n    return (\n      await this.simpleShareOrUpdateEncryptedEntityMetadata(\n        { entity, type: entityType },\n        {\n          [await this.dataOwnerApi.getCurrentDataOwnerId()]: {\n            shareEncryptionKeys: ShareMetadataBehaviour.NEVER,\n            shareOwningEntityIds: ShareMetadataBehaviour.NEVER,\n            shareSecretIds: [confidentialSecretId],\n            requestedPermissions: RequestedPermissionEnum.MAX_WRITE,\n          },\n        },\n        (request) => doRequestBulkShareOrUpdate(request)\n      )\n    ).updatedEntityOrThrow\n  }\n\n  async getConfidentialSecretId(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string | undefined> {\n    return this.getConfidentialSecretIds(entity, dataOwnerId).then((x) => x[0])\n  }\n\n  async getConfidentialSecretIds(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string[]> {\n    const chosenDataOwnerId = dataOwnerId ?? (await this.dataOwnerApi.getCurrentDataOwnerId())\n    const dataOwnerHierarchy = await this.dataOwnerApi.getCurrentDataOwnerHierarchyIdsFrom(chosenDataOwnerId)\n    const hierarchySecretIds = (await this.secretIdsForHcpHierarchyOf(entity)).filter((x) => dataOwnerHierarchy.includes(x.ownerId))\n    const keysForDataOwner = hierarchySecretIds.find((x) => x.ownerId === chosenDataOwnerId)\n\n    if (!keysForDataOwner) return []\n    return keysForDataOwner.extracted.filter((k) => !hierarchySecretIds.some((x) => x.ownerId !== chosenDataOwnerId && x.extracted.includes(k)))\n  }\n\n  async getAnySecretIdSharedWithParents(entity: EncryptedEntityWithType): Promise<string | undefined> {\n    return (await this.getSecretIdsSharedWithParents(entity))[0]\n  }\n\n  async getSecretIdsSharedWithParents(entity: EncryptedEntityWithType): Promise<string[]> {\n    return (await this.secretIdsForHcpHierarchyOf(entity))[0].extracted\n  }\n\n  async resolveSecretIdUseOptions(entity: EncryptedEntityWithType, option: SecretIdUseOption): Promise<string[]> {\n    if (option == SecretIdUseOption.UseNone) {\n      return []\n    } else if (option == SecretIdUseOption.UseAnyConfidential) {\n      const all = await this.getConfidentialSecretIds(entity, undefined)\n      if (all.length == 0) throw new Error(\"Couldn't find any confidential secret id\")\n      return [all[0]]\n    } else if (option == SecretIdUseOption.UseAllConfidential) {\n      const all = await this.getConfidentialSecretIds(entity, undefined)\n      if (all.length == 0) throw new Error(\"Couldn't find any confidential secret id\")\n      return all\n    } else if (option == SecretIdUseOption.UseAnySharedWithParent) {\n      const all = await this.getSecretIdsSharedWithParents(entity)\n      if (all.length == 0) throw new Error(\"Couldn't find any secret id shared with parent\")\n      return [all[0]]\n    } else if (option == SecretIdUseOption.UseAllSharedWithParent) {\n      const all = await this.getSecretIdsSharedWithParents(entity)\n      if (all.length == 0) throw new Error(\"Couldn't find any secret id shared with parent\")\n      return all\n    } else if (option instanceof SecretIdUseOption.Use) {\n      return [...new Set(option.secretIds)]\n    } else {\n      throw new Error(`Unrecognized SecretIdUseOption ${option}`)\n    }\n  }\n\n  private deduplicateById<E extends { id?: string }>(entities: E[]): E[] {\n    const seen = new Set<string | undefined>()\n    return entities.filter((e) => {\n      if (seen.has(e.id)) return false\n      seen.add(e.id)\n      return true\n    })\n  }\n}\n"]}
+{"version":3,"file":"ExtendedApisUtilsImpl.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/ExtendedApisUtilsImpl.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,oCAYiB;AAEjB,2EAA6F;AAC7F,2EAAuE;AAIvE,wFAAoF;AAEpF,sDAA0F;AAC1F,qEAAiE;AAKjE,IAAO,WAAW,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACrD,IAAO,uBAAuB,GAAG,uCAAkB,CAAC,uBAAuB,CAAA;AAC3E,IAAO,2BAA2B,GAAG,uCAAkB,CAAC,2BAA2B,CAAA;AACnF,IAAO,eAAe,GAAG,mCAAgB,CAAC,eAAe,CAAA;AACzD,2DAAuD;AAEvD;;;GAGG;AACH,MAAa,qBAAqB;IAChC,YACmB,UAA4B,EAC5B,YAA8B,EAC9B,yBAAoD,EACpD,wBAAkD,EAClD,OAAoB,EACpB,aAAsB;QALtB,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,8BAAyB,GAAzB,yBAAyB,CAA2B;QACpD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,YAAO,GAAP,OAAO,CAAa;QACpB,kBAAa,GAAb,aAAa,CAAS;IACtC,CAAC;IAEE,gBAAgB,CAAC,MAA+B,EAAE,WAAoB;;YAC1E,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CACpE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,aAAa,CAAC,CACxG,CAAA;QACH,CAAC;KAAA;IAEK,+BAA+B,CAAC,MAA+B;;YACnE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,EAAE,CACzC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,aAAa,CAAC,CACxG,CAAA;QACH,CAAC;KAAA;IAEK,WAAW,CAAC,MAA+B,EAAE,WAAoB;;YACrE,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CACpE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,QAAQ,CAAC,CACnG,CAAA;QACH,CAAC;KAAA;IAEK,0BAA0B,CAAC,MAA+B;;YAC9D,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,QAAQ,CAAC,CAAC,CAAA;QACjJ,CAAC;KAAA;IAEK,iBAAiB,CAAC,MAA+B,EAAE,WAAoB;;YAC3E,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CACpE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,cAAc,CAAC,CACzG,CAAA;QACH,CAAC;KAAA;IAEK,gCAAgC,CAAC,MAA+B;;YACpE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,EAAE,CACzC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,cAAc,CAAC,CACzG,CAAA;QACH,CAAC;KAAA;IAEK,cAAc,CAAC,MAA+B;;YAClD,OAAO,CACL,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC;gBACrI,WAAW,CAAC,KAAK,CAClB,CAAA;QACH,CAAC;KAAA;IAEK,sCAAsC,CAC1C,MAAS,EACT,UAAwC,EACxC,YAAgC,EAChC,qBAA2C,EAC3C,uBAAgC,EAChC,eAAkE,EAClE,uBAA2C;;;YAE3C,IAAI,CAAC,yCAAyC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,wCAAwC,cAAY,CAAA;YAC3H,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAA;YACzC,MAAM,SAAS,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACzG,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;YAChD,OAAO;gBACL,aAAa,EAAE,MAAM,IAAI,CAAC,wBAAwB,CAAC,sCAAsC,iCAElF,MAAM,KACT,iBAAiB,EAAE,qBAAqB,aAArB,qBAAqB,cAArB,qBAAqB,GAAI,EAAE,KAEhD,UAAU,EACV,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAChC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,EACpC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAC5B,eAAe,EACf,uBAAuB,CACxB;gBACD,gBAAgB,EAAE,SAAS;gBAC3B,QAAQ,EAAE,WAAW;aACtB,CAAA;QACH,CAAC;KAAA;IAEK,wCAAwC,CAC5C,YAA0C,EAC1C,eAUG,EACH,0BAA6G;;;YAkB7G,MAAM,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,wBAAwB,CACzH,YAAY,EACZ,eAAe,CAChB,CAAA;YACD,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,0BAA0B,CAAC,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACtI,MAAM,eAAe,GAAQ,EAAE,CAAA;YAC/B,MAAM,YAAY,GAYZ,EAAE,CAAA;YACR,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;gBAC5C,CAAC;gBACD,KAAK,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAA,MAAM,CAAC,gBAAgB,mCAAI,EAAE,CAAC,EAAE,CAAC;oBACpF,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAA;oBAC3C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAA;oBACjH,YAAY,CAAC,IAAI,CAAC;wBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU;wBACV,OAAO;wBACP,mBAAmB;wBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YACD,kHAAkH;YAClH,OAAO;gBACL,eAAe;gBACf,YAAY;gBACZ,qBAAqB;aACtB,CAAA;QACH,CAAC;KAAA;IAEK,kDAAkD,CACtD,YAA0C,EAC1C,eAUG,EACH,0BAAiH;;;YAkBjH,MAAM,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,wBAAwB,CACzH,YAAY,EACZ,eAAe,CAChB,CAAA;YACD,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,CAAC,CAAA;YAC/F,MAAM,YAAY,GAYZ,EAAE,CAAA;YACR,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,KAAK,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAA,MAAM,CAAC,gBAAgB,mCAAI,EAAE,CAAC,EAAE,CAAC;oBACpF,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAA;oBAC3C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAA;oBACjH,YAAY,CAAC,IAAI,CAAC;wBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU;wBACV,OAAO;wBACP,mBAAmB;wBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;iBAC7D,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;iBACxG,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAA;YACtI,OAAO;gBACL,iBAAiB,EAAE,kBAAkB;gBACrC,YAAY;gBACZ,qBAAqB;aACtB,CAAA;QACH,CAAC;KAAA;IAEa,wBAAwB,CACpC,YAA0C,EAC1C,eAUG;;;YAiBH,IAAI,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;gBACrF,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAA;YAClG,CAAC;YACD,MAAM,qBAAqB,GAAG,EAAsD,CAAA;YACpF,MAAM,6BAA6B,GAW/B,EAAE,CAAA;YACN,MAAM,qBAAqB,GAAa,EAAE,CAAA;YAC1C,KAAK,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,eAAe,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAA;gBAC1B,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;gBAC5G,MAAM,cAAc,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAA;gBACrD,MAAM,eAAe,GAAG,EAAiE,CAAA;gBACzF,MAAM,sBAAsB,GAStB,EAAE,CAAA;gBACR,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;gBACpG,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACpE,eAAe,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAA;oBAChE,sBAAsB,CAAC,IAAI,CAAC;wBAC1B,UAAU,EAAE,QAAQ;wBACpB,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC;wBACnC,mBAAmB,EAAE,IAAI;qBAC1B,CAAC,CAAA;gBACJ,CAAC;gBACD,KAAK,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACvE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,8BAA8B,CAChF,cAAc,EACd,QAAQ,EACR,MAAA,WAAW,CAAC,cAAc,mCAAI,EAAE,EAChC,MAAA,WAAW,CAAC,mBAAmB,mCAAI,EAAE,EACrC,MAAA,WAAW,CAAC,oBAAoB,mCAAI,EAAE,EACtC,WAAW,CAAC,oBAAoB,CACjC,CAAA;wBACD,IAAI,OAAO,EAAE,CAAC;4BACZ,eAAe,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAA;4BAChE,sBAAsB,CAAC,IAAI,CAAC;gCAC1B,UAAU,EAAE,QAAQ;gCACpB,OAAO,EAAE,WAAW;gCACpB,mBAAmB,EAAE,KAAK;6BAC3B,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5C,MAAM,gCAAgC,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,0BAA0B,CAAC,cAAc,CAAC,CAAA;oBACxH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CACnI,CAAA;oBACD,MAAM,0BAA0B,GAAG,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE;wBAC3G,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;4BACzI,OAAO,CAAC,CAAC,CAAC,CAAA;wBACZ,CAAC;;4BAAM,OAAO,EAAE,CAAA;oBAClB,CAAC,CAAC,CAAA;oBACF,qBAAqB,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,0BAA0B,EAAE,CAAA;oBAC3F,6BAA6B,CAAC,QAAQ,CAAC,GAAG,sBAAsB,CAAA;gBAClE,CAAC;qBAAM,CAAC;oBACN,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACtC,CAAC;YACH,CAAC;YACD,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,CAAA;QACxF,CAAC;KAAA;IAEK,0CAA0C,CAC9C,MAAyD,EACzD,SAOC,EACD,0BAA6G;;;YAE7G,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;YACnE,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YACrE,MAAM,gBAAgB,GAOlB,EAAE,CAAA;YACN,KAAK,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvE,IAAI,CAAC,uBAAuB,CAAC,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,KAAK,+CAAsB,CAAC,QAAQ,EAAE,CAAC;oBAChH,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,CAAC,SAAS,CACtB,MAAM,CACP,8GAA8G,CAChH,CAAA;gBACH,CAAC;gBACD,IAAI,CAAC,wBAAwB,CAAC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,KAAK,+CAAsB,CAAC,QAAQ,EAAE,CAAC;oBAClH,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,CAAC,SAAS,CACtB,MAAM,CACP,kHAAkH,CACpH,CAAA;gBACH,CAAC;gBACD,gBAAgB,CAAC,UAAU,CAAC,GAAG;oBAC7B,cAAc,EAAE,MAAA,gBAAgB,CAAC,cAAc,mCAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBACnF,mBAAmB,EAAE,gBAAgB,CAAC,mBAAmB,KAAK,+CAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;oBACzH,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB,KAAK,+CAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB;oBAC5H,oBAAoB,EAAE,MAAA,gBAAgB,CAAC,oBAAoB,mCAAI,uBAAuB,CAAC,SAAS;iBACjG,CAAA;YACH,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wCAAwC,CACrE,MAAM,CAAC,IAAI,EACX;gBACE;oBACE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,gBAAgB;iBACjB;aACF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,CACrC,CAAA;YACD,IAAI,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAG,CAAC,EAAE,CAAC;gBAClE,OAAO,IAAI,gCAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjF,OAAO,IAAI,gCAAkB,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;YAC1D,MAAM,0BAA0B,GAAG,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;YAC/G,IAAI,0BAA0B,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxF,OAAO,CAAC,IAAI,CAAC,+CAA+C,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;gBACxG,OAAO,IAAI,gCAAkB,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/D,CAAC;YACD,OAAO,IAAI,gCAAkB,CAC3B,WAAW,CAAC,YAAY,EACxB,6CAA6C,MAAM,CAAC,MAAM,CAAC,EAAE,oCAAoC,CAClG,CAAA;QACH,CAAC;KAAA;IAEa,6BAA6B,CACzC,MAA+B,EAC/B,qBAOC;;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa;gBAClC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE;gBAC3D,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CAAA;YACrD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,gDAAoB,CAAC,QAAQ,CAAC,CAAA;YACjJ,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAC3F,MAAM,CAAC,MAAM,EACb,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,CAAA;YACD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAC5F,MAAM,CAAC,MAAM,EACb,SAAS,EACT,gDAAoB,CAAC,cAAc,CACpC,CAAA;YACD,MAAM,GAAG,GAAG,EAAkE,CAAA;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAA;YAC9D,KAAK,MAAM,eAAe,IAAI,SAAS,EAAE,CAAC;gBACxC,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,wCAAwC,CAClF,MAAM,EACN,MAAM,EACN,eAAe,EACf,qBAAqB,CAAC,eAAe,CAAC,EACtC,eAAe,EACf,oBAAoB,EACpB,qBAAqB,CACtB,CAAA;gBACD,IAAI,wBAAwB,EAAE,CAAC;oBAC7B,GAAG,CAAC,eAAe,CAAC,GAAG,wBAAwB,CAAA;gBACjD,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;IAEa,wCAAwC,CACpD,MAA+B,EAC/B,MAAc,EACd,YAAoB,EACpB,sBAOa,EACb,eAAwE,EACxE,oBAA6E,EAC7E,qBAA8E;;;YAE9E,qOAAqO;YACrO,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,mCAAmC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;YACpI,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAA;YAC7C,MAAM,YAAY,GAChB,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,YAAY,KAAK,MAAM;gBACpD,CAAC,CAAC,WAAW,CAAC,KAAK;gBACnB,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,oCAAoC,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;YAC5G,IAAI,CAAC,YAAY;gBAAE,OAAO,SAAS,CAAA;YACnC,MAAM,mBAAmB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAC7I,MAAM,wBAAwB,GAAG,oBAAoB;iBAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAC1B,MAAM,yBAAyB,GAAG,qBAAqB;iBACpD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;iBACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YAC1B,IAAI,gBAAgB,GAAa,EAAE,CAAA;YACnC,IAAI,qBAAqB,GAAa,EAAE,CAAA;YACxC,IAAI,sBAAsB,GAAa,EAAE,CAAA;YACzC,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,gDAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAClI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CACnB,CACF,CAAA;gBACD,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAChF,CAAC;YACD,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,gDAAoB,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CACvI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CACnB,CACF,CAAA;gBACD,qBAAqB,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/F,CAAC;YACD,IAAI,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,gDAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CACxI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CACnB,CACF,CAAA;gBACD,sBAAsB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAClG,CAAC;YACD,MAAM,wBAAwB,GAC5B,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE;gBAC3B,YAAY,KAAK,MAAM;gBACvB,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,oCAAoC,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;YAC3G,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,IAAI,wBAAwB,EAAE,CAAC;gBACrI,IAAI,oBAAiD,CAAA;gBACrD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;oBAC5B,oBAAoB,GAAG,2BAA2B,CAAC,IAAI,CAAA;gBACzD,CAAC;qBAAM,CAAC;oBACN,oBAAoB,GAAG,2BAA2B,CAAC,UAAU,CAAA,CAAC,+CAA+C;gBAC/G,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,8BAA8B,CACvE,MAAM,EACN,YAAY,EACZ,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,MAAA,sBAAsB,aAAtB,sBAAsB,uBAAtB,sBAAsB,CAAE,cAAc,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAC7F,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,CAAC,MAAA,sBAAsB,aAAtB,sBAAsB,uBAAtB,sBAAsB,CAAE,mBAAmB,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EACvG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,CAAC,MAAA,sBAAsB,aAAtB,sBAAsB,uBAAtB,sBAAsB,CAAE,oBAAoB,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EACzG,oBAAoB,CACrB,CAAA;YACH,CAAC;;gBAAM,OAAO,SAAS,CAAA;QACzB,CAAC;KAAA;IAEK,gBAAgB,CACpB,MAA+B,EAC/B,OAAiC,EACjC,SAAuE;;YAEvE,MAAM,SAAS,GAAgB,IAAI,GAAG,EAAE,CAAA;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACvG,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC1B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;wBACpB,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;4BACnE,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;gCAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;wBAC/E,CAAC;wBAAC,OAAO,CAAC,EAAE,CAAC;4BACX,OAAO,CAAC,IAAI,CAAC,mDAAmD,MAAM,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAA;wBACjH,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC,CAAA,CAAC,CAAA;YACF,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;YACrD,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,IAAI,EAAE,IAAA,aAAK,EAAC,OAAO,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;YACtD,CAAC;QACH,CAAC;KAAA;IAEK,aAAa,CACjB,MAAS,EACT,IAAkC,EAClC,OAAiC,EACjC,UAAqC;;YAErC,MAAM,2BAA2B,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC5F,IAAI,aAA4B,CAAA;YAChC,IAAI,CAAC,CAAC,2BAA2B,EAAE,CAAC;gBAClC,aAAa,GAAG,MAAM,UAAU,CAAC,2BAA2B,CAAC,CAAA;YAC/D,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,EAAE,IAAI,EAAE,CAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBAC5F,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,OAAO;4BACL,OAAO,EAAE;gCACP,aAAa,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC;gCAChE,aAAa,EAAE,aAAa;6BAC7B;yBACF,CAAA;oBACH,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAA;oBACpE,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC,CAAA,CAAC,CAAA;YACF,IAAI,SAAS,IAAI,IAAI;gBAAE,OAAO,SAAS,CAAC,OAAO,CAAA;YAC/C,MAAM,IAAI,KAAK,CAAC,0DAA0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACtG,CAAC;KAAA;IAEK,kBAAkB,CACtB,QAAa,EACb,UAAwC,EACxC,WAA6B;;;YAE7B,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAa,CAAA;YACpD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,gBAAgB,GAAG,MAAM,IAAA,qBAAa,EAAC,MAAM,EAAE,CAAO,SAAS,EAAE,EAAE;oBACvE,OAAO,IAAI,CAAA;gBACb,CAAC,CAAA,CAAC,CAAA;gBACF,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;oBAC7B,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAA;gBACxE,CAAC;YACH,CAAC;YACD,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAC3E,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,CAAC,CAAC,EAC3D,UAAU,EACV,CAAO,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACxB,8GAA8G;gBAC9G,gHAAgH;gBAChH,yFAAyF;gBACzF,MAAM,SAAS,GAAG,MAAM,IAAA,qBAAa,EAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;gBACzG,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;oBACtB,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAA;gBAC5C,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,CAAA;gBACb,CAAC;YACH,CAAC,CAAA,CACF,CAAA;YACD,MAAM,GAAG,GAAG,EAAE,CAAA;YACd,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,MAAA,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,mCAAI,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,CAAA;gBACrG,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;gBAChD,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;KAAA;IAEK,cAAc,CAClB,aAAgD,EAChD,SAAqB,EACrB,8BAAuC;;YAEvC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;oBAChF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,eAAO,EAAC,8BAA8B,CAAC,CAAC,CAAC,IAAA,6BAAqB,EAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;gBAC3H,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;YAChB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;KAAA;IAEK,kBAAkB,CACtB,QAAa,EACb,UAAwC,EACxC,eAAwC,EACxC,gBAAyB,EACzB,iBAA0B,EAC1B,WAA6B;;;YAE7B,MAAM,qCAAqC,GAAQ,EAAE,CAAA;YACrD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,qCAAqC,CAAC,IAAI,CAAC,MAAA,CAAC,MAAM,IAAI,CAAC,+BAA+B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,mCAAI,MAAM,CAAC,CAAA;YACxH,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,qCAAqC,EAAE,UAAU,EAAE,CAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACnI,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,MAAM,IAAA,qBAAa,EACnC,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;4BACN,yEAAyE;4BACzE,MAAM,IAAI,GAAG,gBAAgB;gCAC3B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oCAC3B,OAAO,CAAC,YAAY,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;wCACtD,CAAC,CAAC,IAAA,WAAG,EAAC,IAAI,UAAU,CAAC,CAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wCAC5F,CAAC,CAAC,CAAC,CAAA;gCACP,CAAC,CAAC;gCACJ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;4BAEvB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAA,gBAAQ,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;wBAClE,CAAC,EACD,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,EAClE,eAAe,EACf,UAAU,CACX,CAAA;wBACD,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAA;oBAC5C,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAA;oBACpE,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC,CAAA,CAAC,CAAA;YACF,IAAI,OAAO,CAAC,IAAI,IAAI,qCAAqC,CAAC,MAAM,EAAE,CAAC;gBACjE,IAAI,iBAAiB,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CACb,8BAA8B,qCAAqC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAY,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAG,CAAC,CAAC,CAAC,EAAE,CACpI,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,KAAK,MAAM,CAAC,IAAI,qCAAqC,EAAE,CAAC;wBACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,CAAC,EAAE,CAAC;4BACxB,MAAM,IAAA,qBAAa,EACjB,CAAC,EACD,CAAO,GAA2B,EAAE,EAAE;gCACpC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CACrH,CAAA;gCACD,IAAI,iBAAiB,EAAE,CAAC;oCACtB,MAAM,IAAI,KAAK,CACb,+FAA+F,IAAI,CAAC,SAAS,CAC3G,CAAC,CACF,iBAAiB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CACxC,CAAA;gCACH,CAAC;gCACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;4BAC5C,CAAC,CAAA,EACD,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAC3B,eAAe,EACf,QAAQ,CACT,CAAA;4BACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,EAAE,CAAC,CAAC,CAAA;wBACvB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,qCAAqC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,CAAE,CAAC,CAAA;QAC9E,CAAC;KAAA;IAEK,+BAA+B,CAA4B,MAAS,EAAE,UAAwC;;;YAClH,IAAI,IAAI,CAAC,yBAAyB,CAAC,oBAAoB,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAA;YACjF,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,uDAAuD;oBACrD,kGAAkG,CACrG,CAAA;YACH,CAAC;YACD;;;eAGG;YACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAA,MAAM,CAAC,WAAW,mCAAI,EAAE,CAAC,CAAC,CAAA;YAC1E,MAAM,uBAAuB,GAAG,MAAM,CAAC,WAAW,CAChD,MAAM,CAAC,MAAM,CAAC,MAAA,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,eAAe,mCAAI,EAAE,CAAC;iBACvE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;iBACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;iBACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAC1C,CAAA;YACD,OAAO,MAAM,IAAI,CAAC,wBAAwB,CAAC,sCAAsC,iCAE1E,MAAM,KACT,iBAAiB,EAAE,MAAA,MAAM,CAAC,iBAAiB,mCAAI,EAAE,KAEnD,UAAU,EACV,EAAE,EACF,EAAE,EACF,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EACnD,uBAAuB,EACvB,SAAS,CACV,CAAA;QACH,CAAC;KAAA;IAEa,gBAAgB,CAC5B,qBAAoG;;YAEpG,MAAM,kBAAkB,GAAG,IAAI,CAAC,aAAa;gBAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE;gBAC3D,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CAAA;YACrD,OAAO,MAAM,qBAAqB,CAAC,kBAAkB,CAAC,CAAA;QACxD,CAAC;KAAA;IAEa,wBAAwB,CACpC,WAA+B,EAC/B,qBAAoG;;YAEpG,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa;gBAClC,CAAC,CAAC,WAAW;oBACX,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,mCAAmC,CAAC,WAAW,CAAC;oBAC1E,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE;gBAC7D,CAAC,CAAC,CAAC,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAA;YACtE,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC,CAAA;YAC5D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;YACxD,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QACjC,CAAC;KAAA;IAEa,YAAY,CAAC,GAAW;;YACpC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAA;YACpD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,cAAM,EAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;YAClF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,EAAE,CAAC,CAAC,CAAA;gBACpE,OAAO,SAAS,CAAA;YAClB,CAAC;QACH,CAAC;KAAA;IAEK,6BAA6B,CACjC,MAAS,EACT,UAAwC,EACxC,MAAwI;;YAExI,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC9G,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAE,EAAE,CAAA;YAC1C,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;KAAA;IAEK,iCAAiC,CACrC,QAAa,EACb,YAA0C,EAC1C,MAAwI;;YAExI,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,IAAI,GAAG,EAAE,CAAA;YAC1C,IAAI,oBAAoB,GAAG,QAAQ,CAAA;YACnC,IAAI,IAAI,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,oBAAoB,CAAC,MAAM,EAAE,CAAC;gBACvF,OAAO,CAAC,KAAK,CAAC,iCAAiC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;gBACvF,oBAAoB,GAAG,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;YACnE,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAA;YAC3E,MAAM,2BAA2B,GAAG,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAG,EAAE,IAAI,GAAG,EAAU,CAA0B,CAAC,CAAC,CAAA;YAC5I,MAAM,6BAA6B,GAAG,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAG,EAAE,IAAI,GAAG,EAAU,CAA0B,CAAC,CAAC,CAAA;YAC9I,MAAM,OAAO,GAAG,IAAI,GAAG,EAAa,CAAA;YACpC,MAAM,qBAAqB,GAAG,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAG,EAAE,CAAC,CAAgB,CAAC,CAAC,CAAA;YAC5G,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAqB,CAAA;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;YAElC,SAAe,yCAAyC,CACtD,OAAyC,EACzC,yCAAkD;;oBAElD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;wBACvD,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAA;wBACjE,MAAM,mBAAmB,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;wBACjE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;4BACrB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gCAChC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gCACxB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oCAC9B,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,cAAM,EAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gCAC5E,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,IACE,yCAAyC;wBACzC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAC9F,CAAC;wBACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;4BAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,EAAG,CAAA;4BACzB,MAAM,kBAAkB,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAA;4BAChE,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gCAChC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAA;gCAC5D,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;gCAC1D,kBAAkB,CAAC,KAAK,EAAE,CAAA;gCAC1B,MAAM,YAAY,GAAG,MAAM,MAAM,CAC/B,MAAM,EACN,YAAY,EACZ,CAAC,GAAG,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAmC,EAAE,CAAC,CAAC;oCACnE,GAAG,EAAE,GAAG;oCACR,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAE;iCACjC,CAAC,CAAC,CACJ,CAAA;gCACD,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;oCACzB,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAA;oCACpC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,CAAA;gCAC3C,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;aAAA;YAED,MAAM,yCAAyC,CAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,wBAAwB,CAC3D,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACpC,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,EACD,KAAK,CACN,CAAA;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAA;YAClE,MAAM,yCAAyC,CAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,kCAAkC,CACrE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACpC,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,EACD,KAAK,CACN,CAAA;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAA;YAClE,MAAM,yCAAyC,CAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,8CAA8C,CACjF,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACpC,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,EACD,KAAK,CACN,CAAA;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAA;YAClE,MAAM,yCAAyC,CAC7C,MAAM,IAAI,CAAC,yBAAyB,CAAC,4CAA4C,CAC/E,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACpC,SAAS,EACT,gDAAoB,CAAC,aAAa,CACnC,EACD,KAAK,CACN,CAAA;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAA;YAClE,MAAM,yCAAyC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;YACzD,OAAO,OAAO,CAAA;QAChB,CAAC;KAAA;IAEO,WAAW,CAAI,MAAW;QAChC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7B,CAAC;IAEO,yCAAyC,CAAC,OAAe,EAAE,QAAa,EAAE,UAAkB,EAAE,UAAsB;QAC1H,IAAI,QAAQ;YAAE,OAAM;QAEpB,IAAI,OAAO,GAAG,kCAAkC,GAAG,UAAU,GAAG,gBAAgB,CAAA;QAEhF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,CAAA;gBACjC,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YAC7F,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;gBACZ,OAAO,IAAI,uDAAuD,GAAG,EAAE,CAAA;YACzE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,OAAO,GAAG,yBAAyB,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAA;IAC5G,CAAC;IAEO,4BAA4B,CAAC,MAAuB;QAC1D,IAAI,CAAC,8BAA8B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC;IAED,0BAA0B,CAAC,MAAuB;QAChD,OAAO,IAAI,CAAC,8BAA8B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC3D,CAAC;IAEO,8BAA8B,CAAC,MAAuB,EAAE,oBAA6B;QAC3F,MAAM,gBAAgB,GAAG,EAAE,CAAA;QAC3B,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACtG,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC3H,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC/G,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC3G,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM;YAAE,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACrH,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,oBAAoB,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,mHAAmH,gBAAgB,IAAI;oBACrI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CACvC,CAAA;YACH,CAAC;;gBAAM,OAAO,KAAK,CAAA;QACrB,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEK,8BAA8B,CAClC,MAAS,EACT,UAAwC,EACxC,0BAA6G;;YAE7G,IAAI,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;gBAAE,OAAO,SAAS,CAAA;YACtF,MAAM,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAA;YACzD,OAAO,CACL,MAAM,IAAI,CAAC,0CAA0C,CACnD,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAC5B;gBACE,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,EAAE;oBACjD,mBAAmB,EAAE,+CAAsB,CAAC,KAAK;oBACjD,oBAAoB,EAAE,+CAAsB,CAAC,KAAK;oBAClD,cAAc,EAAE,CAAC,oBAAoB,CAAC;oBACtC,oBAAoB,EAAE,uBAAuB,CAAC,SAAS;iBACxD;aACF,EACD,CAAC,OAAO,EAAE,EAAE,CAAC,0BAA0B,CAAC,OAAO,CAAC,CACjD,CACF,CAAC,oBAAoB,CAAA;QACxB,CAAC;KAAA;IAEK,uBAAuB,CAAC,MAA+B,EAAE,WAAoB;;YACjF,OAAO,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7E,CAAC;KAAA;IAEK,wBAAwB,CAAC,MAA+B,EAAE,WAAoB;;YAClF,MAAM,iBAAiB,GAAG,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,CAAA;YAC1F,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,mCAAmC,CAAC,iBAAiB,CAAC,CAAA;YACzG,MAAM,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;YAChI,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB,CAAC,CAAA;YAExF,IAAI,CAAC,gBAAgB;gBAAE,OAAO,EAAE,CAAA;YAChC,OAAO,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9I,CAAC;KAAA;IAEK,+BAA+B,CAAC,MAA+B;;YACnE,OAAO,CAAC,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9D,CAAC;KAAA;IAEK,6BAA6B,CAAC,MAA+B;;YACjE,OAAO,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACrE,CAAC;KAAA;IAEK,yBAAyB,CAAC,MAA+B,EAAE,MAAyB;;YACxF,IAAI,MAAM,IAAI,qCAAiB,CAAC,OAAO,EAAE,CAAC;gBACxC,OAAO,EAAE,CAAA;YACX,CAAC;iBAAM,IAAI,MAAM,IAAI,qCAAiB,CAAC,kBAAkB,EAAE,CAAC;gBAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBAClE,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAChF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;iBAAM,IAAI,MAAM,IAAI,qCAAiB,CAAC,kBAAkB,EAAE,CAAC;gBAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBAClE,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBAChF,OAAO,GAAG,CAAA;YACZ,CAAC;iBAAM,IAAI,MAAM,IAAI,qCAAiB,CAAC,sBAAsB,EAAE,CAAC;gBAC9D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAA;gBAC5D,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;gBACtF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;iBAAM,IAAI,MAAM,IAAI,qCAAiB,CAAC,sBAAsB,EAAE,CAAC;gBAC9D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAA;gBAC5D,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;gBACtF,OAAO,GAAG,CAAA;YACZ,CAAC;iBAAM,IAAI,MAAM,YAAY,qCAAiB,CAAC,GAAG,EAAE,CAAC;gBACnD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;YACvC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;KAAA;IAEO,eAAe,CAA4B,QAAa;QAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAA;QAC1C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAA;YAChC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACd,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AAxgCD,sDAwgCC","sourcesContent":["import { EncryptedEntity, EncryptedEntityStub } from '../../icc-api/model/models'\nimport { IccDataOwnerXApi } from '../icc-data-owner-x-api'\nimport {\n  b2a,\n  decryptObject,\n  EncryptedEntityWithType,\n  EncryptedFieldsManifest,\n  encryptObject,\n  EntityWithDelegationTypeName,\n  hex2ua,\n  truncateTrailingNulls,\n  ua2ab,\n  ua2utf8,\n  utf8_2ua,\n} from '../utils'\nimport { CryptoPrimitives } from './CryptoPrimitives'\nimport { SecurityMetadataDecryptor, SecurityMetadataType } from './SecurityMetadataDecryptor'\nimport { SecureDelegation } from '../../icc-api/model/SecureDelegation'\nimport { ExtendedApisUtils } from './ExtendedApisUtils'\nimport { EntityShareOrMetadataUpdateRequest } from '../../icc-api/model/requests/EntityShareOrMetadataUpdateRequest'\nimport { EntityBulkShareResult } from '../../icc-api/model/requests/EntityBulkShareResult'\nimport { EntityShareRequest } from '../../icc-api/model/requests/EntityShareRequest'\nimport { SecureDelegationsManager } from './SecureDelegationsManager'\nimport { ShareResult, ShareResultFailure, ShareResultSuccess } from '../utils/ShareResult'\nimport { ShareMetadataBehaviour } from './ShareMetadataBehaviour'\nimport { IccUserXApi } from '../icc-user-x-api'\nimport { MinimalEntityBulkShareResult } from '../../icc-api/model/requests/MinimalEntityBulkShareResult'\nimport { BulkShareOrUpdateMetadataParams, EntityRequestInformation } from '../../icc-api/model/requests/BulkShareOrUpdateMetadataParams'\nimport * as _ from 'lodash'\nimport AccessLevel = SecureDelegation.AccessLevelEnum\nimport RequestedPermissionEnum = EntityShareRequest.RequestedPermissionEnum\nimport RequestedPermissionInternal = EntityShareRequest.RequestedPermissionInternal\nimport AccessLevelEnum = SecureDelegation.AccessLevelEnum\nimport { SecretIdUseOption } from './SecretIdUseOption'\n\n/**\n * @internal this class is for internal use only and may be changed without notice.\n * Methods to support extended apis.\n */\nexport class ExtendedApisUtilsImpl implements ExtendedApisUtils {\n  constructor(\n    private readonly primitives: CryptoPrimitives,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly securityMetadataDecryptor: SecurityMetadataDecryptor,\n    private readonly secureDelegationsManager: SecureDelegationsManager,\n    private readonly userApi: IccUserXApi,\n    private readonly useParentKeys: boolean\n  ) {}\n\n  async encryptionKeysOf(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string[]> {\n    return await this.decryptAndMergeHierarchy(dataOwnerId, (hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.EncryptionKey)\n    )\n  }\n\n  async encryptionKeysForHcpHierarchyOf(entity: EncryptedEntityWithType): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return this.decryptHierarchy((hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.EncryptionKey)\n    )\n  }\n\n  async secretIdsOf(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string[]> {\n    return await this.decryptAndMergeHierarchy(dataOwnerId, (hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.SecretId)\n    )\n  }\n\n  async secretIdsForHcpHierarchyOf(entity: EncryptedEntityWithType): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return this.decryptHierarchy((hierarchy) => this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.SecretId))\n  }\n\n  async owningEntityIdsOf(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string[]> {\n    return await this.decryptAndMergeHierarchy(dataOwnerId, (hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.OwningEntityId)\n    )\n  }\n\n  async owningEntityIdsForHcpHierarchyOf(entity: EncryptedEntityWithType): Promise<{ ownerId: string; extracted: string[] }[]> {\n    return this.decryptHierarchy((hierarchy) =>\n      this.securityMetadataDecryptor.decryptAll(entity.entity, hierarchy, SecurityMetadataType.OwningEntityId)\n    )\n  }\n\n  async hasWriteAccess(entity: EncryptedEntityWithType): Promise<boolean> {\n    return (\n      (await this.securityMetadataDecryptor.getEntityAccessLevel(entity.entity, await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds())) ===\n      AccessLevel.WRITE\n    )\n  }\n\n  async entityWithInitialisedEncryptedMetadata<T extends EncryptedEntity>(\n    entity: T,\n    entityType: EntityWithDelegationTypeName,\n    owningEntity: string | undefined,\n    owningEntitySecretIds: string[] | undefined,\n    initialiseEncryptionKey: boolean,\n    autoDelegations: { [p: string]: SecureDelegation.AccessLevelEnum },\n    alternateRootDelegation: string | undefined\n  ): Promise<{ updatedEntity: T; rawEncryptionKey: string | undefined; secretId: string }> {\n    this.throwDetailedExceptionForInvalidParameter('entity.id', entity.id, 'entityWithInitialisedEncryptedMetadata', arguments)\n    this.checkEmptyEncryptionMetadata(entity)\n    const newRawKey = initialiseEncryptionKey ? await this.primitives.AES.generateCryptoKey(true) : undefined\n    const newSecretId = this.primitives.randomUuid()\n    return {\n      updatedEntity: await this.secureDelegationsManager.entityWithInitialisedEncryptedMetadata(\n        {\n          ...entity,\n          secretForeignKeys: owningEntitySecretIds ?? [],\n        },\n        entityType,\n        newSecretId ? [newSecretId] : [],\n        !!owningEntity ? [owningEntity] : [],\n        newRawKey ? [newRawKey] : [],\n        autoDelegations,\n        alternateRootDelegation\n      ),\n      rawEncryptionKey: newRawKey,\n      secretId: newSecretId,\n    }\n  }\n\n  async bulkShareOrUpdateEncryptedEntityMetadata<T extends EncryptedEntityStub>(\n    entitiesType: EntityWithDelegationTypeName,\n    entitiesUpdates: {\n      entity: EncryptedEntityStub\n      dataForDelegates: {\n        [delegateId: string]: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n      }\n    }[],\n    doRequestBulkShareOrUpdate: (request: BulkShareOrUpdateMetadataParams) => Promise<EntityBulkShareResult<T>[]>\n  ): Promise<{\n    updatedEntities: T[]\n    unmodifiedEntitiesIds: string[]\n    updateErrors: {\n      entityId: string\n      delegateId: string\n      request?: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n      updatedForMigration: boolean\n      code?: number\n      reason?: string\n    }[]\n  }> {\n    const { allRequestsByEntityId, orderedRequestsInfoByEntityId, unmodifiedEntitiesIds } = await this.prepareBulkShareRequests(\n      entitiesType,\n      entitiesUpdates\n    )\n    const results =\n      Object.keys(allRequestsByEntityId).length > 0 ? await doRequestBulkShareOrUpdate({ requestsByEntityId: allRequestsByEntityId }) : []\n    const updatedEntities: T[] = []\n    const updateErrors: {\n      entityId: string\n      delegateId: string\n      request?: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n      updatedForMigration: boolean\n      code?: number\n      reason?: string\n    }[] = []\n    for (const result of results) {\n      if (result.updatedEntity) {\n        updatedEntities.push(result.updatedEntity)\n      }\n      for (const [errorRequestId, error] of Object.entries(result.rejectedRequests ?? {})) {\n        const requestIndex = Number(errorRequestId)\n        const { delegateId, request, updatedForMigration } = orderedRequestsInfoByEntityId[result.entityId][requestIndex]\n        updateErrors.push({\n          entityId: result.entityId,\n          delegateId,\n          request,\n          updatedForMigration,\n          code: error.code,\n          reason: error.reason,\n        })\n      }\n    }\n    // TODO implement auto-retry for failed requests if the shouldRetry flag in result.rejectedRequests is set to true\n    return {\n      updatedEntities,\n      updateErrors,\n      unmodifiedEntitiesIds,\n    }\n  }\n\n  async bulkShareOrUpdateEncryptedEntityMetadataNoEntities(\n    entitiesType: EntityWithDelegationTypeName,\n    entitiesUpdates: {\n      entity: EncryptedEntityStub\n      dataForDelegates: {\n        [delegateId: string]: {\n          shareSecretIds: string[]\n          shareEncryptionKeys: string[]\n          shareOwningEntityIds: string[]\n          requestedPermissions: EntityShareRequest.RequestedPermissionEnum\n        }\n      }\n    }[],\n    doRequestBulkShareOrUpdate: (request: BulkShareOrUpdateMetadataParams) => Promise<MinimalEntityBulkShareResult[]>\n  ): Promise<{\n    unmodifiedEntitiesIds: string[]\n    successfulUpdates: { entityId: string; delegateId: string }[]\n    updateErrors: {\n      entityId: string\n      delegateId: string\n      request?: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: EntityShareRequest.RequestedPermissionEnum\n      }\n      updatedForMigration: boolean\n      code?: number\n      reason?: string\n    }[]\n  }> {\n    const { allRequestsByEntityId, orderedRequestsInfoByEntityId, unmodifiedEntitiesIds } = await this.prepareBulkShareRequests(\n      entitiesType,\n      entitiesUpdates\n    )\n    const results = await doRequestBulkShareOrUpdate({ requestsByEntityId: allRequestsByEntityId })\n    const updateErrors: {\n      entityId: string\n      delegateId: string\n      request?: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n      updatedForMigration: boolean\n      code?: number\n      reason?: string\n    }[] = []\n    for (const result of results) {\n      for (const [errorRequestId, error] of Object.entries(result.rejectedRequests ?? {})) {\n        const requestIndex = Number(errorRequestId)\n        const { delegateId, request, updatedForMigration } = orderedRequestsInfoByEntityId[result.entityId][requestIndex]\n        updateErrors.push({\n          entityId: result.entityId,\n          delegateId,\n          request,\n          updatedForMigration,\n          code: error.code,\n          reason: error.reason,\n        })\n      }\n    }\n    const successfulRequests = Object.entries(allRequestsByEntityId)\n      .flatMap(([entityId, requests]) => Object.keys(requests).map((delegateId) => ({ entityId, delegateId })))\n      .filter(({ entityId, delegateId }) => !updateErrors.some((error) => error.entityId === entityId && error.delegateId === delegateId))\n    return {\n      successfulUpdates: successfulRequests,\n      updateErrors,\n      unmodifiedEntitiesIds,\n    }\n  }\n\n  private async prepareBulkShareRequests(\n    entitiesType: EntityWithDelegationTypeName,\n    entitiesUpdates: {\n      entity: EncryptedEntityStub\n      dataForDelegates: {\n        [delegateId: string]: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n      }\n    }[]\n  ): Promise<{\n    unmodifiedEntitiesIds: string[]\n    allRequestsByEntityId: { [entityId: string]: EntityRequestInformation }\n    orderedRequestsInfoByEntityId: {\n      [entityId: string]: {\n        delegateId: string\n        request?: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n        updatedForMigration: boolean\n      }[]\n    }\n  }> {\n    if (new Set(entitiesUpdates.map((e) => e.entity.id)).size !== entitiesUpdates.length) {\n      throw new Error('Duplicate requests: the same entity id is present more than once in the input')\n    }\n    const allRequestsByEntityId = {} as { [entityId: string]: EntityRequestInformation }\n    const orderedRequestsInfoByEntityId: {\n      [entityId: string]: {\n        delegateId: string\n        request?: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n        updatedForMigration: boolean\n      }[]\n    } = {}\n    const unmodifiedEntitiesIds: string[] = []\n    for (const { entity, dataForDelegates } of entitiesUpdates) {\n      const entityId = entity.id\n      if (!entityId) throw new Error('Share of an entity requires for the entity to already exist and have an id')\n      const entityWithType = { entity, type: entitiesType }\n      const currentRequests = {} as { [requestId: string]: EntityShareOrMetadataUpdateRequest }\n      const currentOrderedRequests: {\n        delegateId: string\n        request?: {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n        updatedForMigration: boolean\n      }[] = []\n      const migrationRequests = await this.makeMigrationRequestsIfNeeded(entityWithType, dataForDelegates)\n      for (const [delegate, request] of Object.entries(migrationRequests)) {\n        currentRequests[String(currentOrderedRequests.length)] = request\n        currentOrderedRequests.push({\n          delegateId: delegate,\n          request: dataForDelegates[delegate],\n          updatedForMigration: true,\n        })\n      }\n      for (const [delegate, userRequest] of Object.entries(dataForDelegates)) {\n        if (!migrationRequests[delegate]) {\n          const request = await this.secureDelegationsManager.makeShareOrUpdateRequestParams(\n            entityWithType,\n            delegate,\n            userRequest.shareSecretIds ?? [],\n            userRequest.shareEncryptionKeys ?? [],\n            userRequest.shareOwningEntityIds ?? [],\n            userRequest.requestedPermissions\n          )\n          if (request) {\n            currentRequests[String(currentOrderedRequests.length)] = request\n            currentOrderedRequests.push({\n              delegateId: delegate,\n              request: userRequest,\n              updatedForMigration: false,\n            })\n          }\n        }\n      }\n      if (Object.keys(currentRequests).length > 0) {\n        const existingDelegationMembersDetails = await this.securityMetadataDecryptor.getDelegationMemberDetails(entityWithType)\n        const accessibleMembers = new Set(\n          this.useParentKeys ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds() : [await this.dataOwnerApi.getCurrentDataOwnerId()]\n        )\n        const potentialParentDelegations = Object.entries(existingDelegationMembersDetails).flatMap(([k, members]) => {\n          if ((!!members.delegate && accessibleMembers.has(members.delegate)) || (!!members.delegator && accessibleMembers.has(members.delegator))) {\n            return [k]\n          } else return []\n        })\n        allRequestsByEntityId[entityId] = { requests: currentRequests, potentialParentDelegations }\n        orderedRequestsInfoByEntityId[entityId] = currentOrderedRequests\n      } else {\n        unmodifiedEntitiesIds.push(entityId)\n      }\n    }\n    return { unmodifiedEntitiesIds, allRequestsByEntityId, orderedRequestsInfoByEntityId }\n  }\n\n  async simpleShareOrUpdateEncryptedEntityMetadata<T extends EncryptedEntityStub>(\n    entity: { entity: T; type: EntityWithDelegationTypeName },\n    delegates: {\n      [p: string]: {\n        shareSecretIds: string[] | undefined\n        shareEncryptionKeys: ShareMetadataBehaviour | undefined\n        shareOwningEntityIds: ShareMetadataBehaviour | undefined\n        requestedPermissions: EntityShareRequest.RequestedPermissionEnum | undefined\n      }\n    },\n    doRequestBulkShareOrUpdate: (request: BulkShareOrUpdateMetadataParams) => Promise<EntityBulkShareResult<T>[]>\n  ): Promise<ShareResult<T>> {\n    const availableEncryptionKeys = await this.encryptionKeysOf(entity)\n    const availableOwningEntityIds = await this.owningEntityIdsOf(entity)\n    const dataForDelegates: {\n      [delegateId: string]: {\n        shareSecretIds: string[]\n        shareEncryptionKeys: string[]\n        shareOwningEntityIds: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n    } = {}\n    for (const [delegateId, delegateRequests] of Object.entries(delegates)) {\n      if (!availableEncryptionKeys.length && delegateRequests.shareEncryptionKeys === ShareMetadataBehaviour.REQUIRED) {\n        throw new Error(\n          `Entity ${JSON.stringify(\n            entity\n          )} has no encryption keys or the current data owner can't access any encryption keys, but sharing is required.`\n        )\n      }\n      if (!availableOwningEntityIds.length && delegateRequests.shareOwningEntityIds === ShareMetadataBehaviour.REQUIRED) {\n        throw new Error(\n          `Entity ${JSON.stringify(\n            entity\n          )} has no owning entity ids or the current data owner can't access any owning entity ids, but sharing is required.`\n        )\n      }\n      dataForDelegates[delegateId] = {\n        shareSecretIds: delegateRequests.shareSecretIds ?? (await this.secretIdsOf(entity)),\n        shareEncryptionKeys: delegateRequests.shareEncryptionKeys === ShareMetadataBehaviour.NEVER ? [] : availableEncryptionKeys,\n        shareOwningEntityIds: delegateRequests.shareOwningEntityIds === ShareMetadataBehaviour.NEVER ? [] : availableOwningEntityIds,\n        requestedPermissions: delegateRequests.requestedPermissions ?? RequestedPermissionEnum.MAX_WRITE,\n      }\n    }\n    const shareResult = await this.bulkShareOrUpdateEncryptedEntityMetadata(\n      entity.type,\n      [\n        {\n          entity: entity.entity,\n          dataForDelegates,\n        },\n      ],\n      (x) => doRequestBulkShareOrUpdate(x)\n    )\n    if (shareResult.unmodifiedEntitiesIds.includes(entity.entity.id!)) {\n      return new ShareResultSuccess(entity.entity)\n    }\n    if (!shareResult.updateErrors.length && shareResult.updatedEntities.length === 1) {\n      return new ShareResultSuccess(shareResult.updatedEntities[0])\n    }\n    const requestedDelegates = new Set(Object.keys(delegates))\n    const errorsOfRequestedDelegates = shareResult.updateErrors.filter((x) => requestedDelegates.has(x.delegateId))\n    if (errorsOfRequestedDelegates.length === 0 && shareResult.updatedEntities.length === 1) {\n      console.warn(`Errors with migration of encrypted metadata ${JSON.stringify(shareResult.updateErrors)}.`)\n      return new ShareResultSuccess(shareResult.updatedEntities[0])\n    }\n    return new ShareResultFailure(\n      shareResult.updateErrors,\n      `There was an error sharing entity with id ${entity.entity.id}. Check the logs for more details.`\n    )\n  }\n\n  private async makeMigrationRequestsIfNeeded(\n    entity: EncryptedEntityWithType,\n    userRequestsForEntity: {\n      [delegateId: string]: {\n        shareSecretIds?: string[]\n        shareEncryptionKeys?: string[]\n        shareOwningEntityIds?: string[]\n        requestedPermissions: RequestedPermissionEnum\n      }\n    }\n  ): Promise<{ [delegateId: string]: EntityShareOrMetadataUpdateRequest }> {\n    const hierarchy = this.useParentKeys\n      ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n      : [await this.dataOwnerApi.getCurrentDataOwnerId()]\n    const legacySecretIds = await this.securityMetadataDecryptor.decryptAllLegacyDelegations(entity.entity, hierarchy, SecurityMetadataType.SecretId)\n    const legacyEncryptionKeys = await this.securityMetadataDecryptor.decryptAllLegacyDelegations(\n      entity.entity,\n      hierarchy,\n      SecurityMetadataType.EncryptionKey\n    )\n    const legacyOwningEntityIds = await this.securityMetadataDecryptor.decryptAllLegacyDelegations(\n      entity.entity,\n      hierarchy,\n      SecurityMetadataType.OwningEntityId\n    )\n    const res = {} as { [delegateId: string]: EntityShareOrMetadataUpdateRequest }\n    const selfId = await this.dataOwnerApi.getCurrentDataOwnerId()\n    for (const hierarchyMember of hierarchy) {\n      const hierarchyMemberMigration = await this.makeMigrationRequestForMemberOfHierarchy(\n        entity,\n        selfId,\n        hierarchyMember,\n        userRequestsForEntity[hierarchyMember],\n        legacySecretIds,\n        legacyEncryptionKeys,\n        legacyOwningEntityIds\n      )\n      if (hierarchyMemberMigration) {\n        res[hierarchyMember] = hierarchyMemberMigration\n      }\n    }\n    return res\n  }\n\n  private async makeMigrationRequestForMemberOfHierarchy(\n    entity: EncryptedEntityWithType,\n    selfId: string,\n    currMemberId: string,\n    userRequestForDelegate:\n      | {\n          shareSecretIds?: string[]\n          shareEncryptionKeys?: string[]\n          shareOwningEntityIds?: string[]\n          requestedPermissions: RequestedPermissionEnum\n        }\n      | undefined,\n    legacySecretIds: { decrypted: string; dataOwnersWithAccess: string[] }[],\n    legacyEncryptionKeys: { decrypted: string; dataOwnersWithAccess: string[] }[],\n    legacyOwningEntityIds: { decrypted: string; dataOwnersWithAccess: string[] }[]\n  ): Promise<EntityShareOrMetadataUpdateRequest | undefined> {\n    // This implementation is very specific from migration from delegations to secure delegations. If in future we will have to migrate from secure delegations to something else, this method may need significant changes in its logic.\n    const subHierarchy = this.useParentKeys ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIdsFrom(currMemberId) : [currMemberId]\n    const subHierarchySet = new Set(subHierarchy)\n    const legacyAccess =\n      selfId === entity.entity.id && currMemberId === selfId\n        ? AccessLevel.WRITE\n        : await this.securityMetadataDecryptor.getEntityLegacyDelegationAccessLevel(entity.entity, subHierarchy)\n    if (!legacyAccess) return undefined\n    const selfLegacySecretIds = legacySecretIds.filter((x) => x.dataOwnersWithAccess.some((d) => subHierarchySet.has(d))).map((x) => x.decrypted)\n    const selfLegacyEncryptionKeys = legacyEncryptionKeys\n      .filter((x) => x.dataOwnersWithAccess.some((d) => subHierarchySet.has(d)))\n      .map((x) => x.decrypted)\n    const selfLegacyOwningEntityIds = legacyOwningEntityIds\n      .filter((x) => x.dataOwnersWithAccess.some((d) => subHierarchySet.has(d)))\n      .map((x) => x.decrypted)\n    let missingSecretIds: string[] = []\n    let missingEncryptionKeys: string[] = []\n    let missingOwningEntityIds: string[] = []\n    if (selfLegacySecretIds.length > 0) {\n      const currentSecretIds = new Set(\n        (await this.securityMetadataDecryptor.decryptAllSecureDelegations(entity.entity, [currMemberId], SecurityMetadataType.SecretId)).map(\n          (x) => x.decrypted\n        )\n      )\n      missingSecretIds = selfLegacySecretIds.filter((x) => !currentSecretIds.has(x))\n    }\n    if (selfLegacyEncryptionKeys.length > 0) {\n      const currentEncryptionKeys = new Set(\n        (await this.securityMetadataDecryptor.decryptAllSecureDelegations(entity.entity, [currMemberId], SecurityMetadataType.EncryptionKey)).map(\n          (x) => x.decrypted\n        )\n      )\n      missingEncryptionKeys = selfLegacyEncryptionKeys.filter((x) => !currentEncryptionKeys.has(x))\n    }\n    if (selfLegacyOwningEntityIds.length > 0) {\n      const currentOwningEntityIds = new Set(\n        (await this.securityMetadataDecryptor.decryptAllSecureDelegations(entity.entity, [currMemberId], SecurityMetadataType.OwningEntityId)).map(\n          (x) => x.decrypted\n        )\n      )\n      missingOwningEntityIds = selfLegacyOwningEntityIds.filter((x) => !currentOwningEntityIds.has(x))\n    }\n    const mustCreateRootDelegation =\n      selfId === entity.entity.id &&\n      currMemberId === selfId &&\n      !(await this.securityMetadataDecryptor.getEntitySecureDelegationAccessLevel(entity.entity, subHierarchy))\n    if (missingSecretIds.length > 0 || missingEncryptionKeys.length > 0 || missingOwningEntityIds.length > 0 || mustCreateRootDelegation) {\n      let requestedPermissions: RequestedPermissionInternal\n      if (currMemberId === selfId) {\n        requestedPermissions = RequestedPermissionInternal.ROOT\n      } else {\n        requestedPermissions = RequestedPermissionInternal.FULL_WRITE // Legacy permission if present is always write\n      }\n      return await this.secureDelegationsManager.makeShareOrUpdateRequestParams(\n        entity,\n        currMemberId,\n        Array.from(new Set([...missingSecretIds, ...(userRequestForDelegate?.shareSecretIds ?? [])])),\n        Array.from(new Set([...missingEncryptionKeys, ...(userRequestForDelegate?.shareEncryptionKeys ?? [])])),\n        Array.from(new Set([...missingOwningEntityIds, ...(userRequestForDelegate?.shareOwningEntityIds ?? [])])),\n        requestedPermissions\n      )\n    } else return undefined\n  }\n\n  async tryDecryptDataOf(\n    entity: EncryptedEntityWithType,\n    content: ArrayBuffer | Uint8Array,\n    validator: (decryptedData: ArrayBuffer) => Promise<boolean> | undefined\n  ): Promise<{ data: ArrayBuffer; wasDecrypted: boolean }> {\n    const triedKeys: Set<string> = new Set()\n    const result = await this.doIncrementallyDecryptingKeys(entity.entity, entity.type, async (e, t, keys) => {\n      for (const k of keys) {\n        if (!triedKeys.has(k.raw)) {\n          triedKeys.add(k.raw)\n          try {\n            const decrypted = await this.primitives.AES.decrypt(k.key, content)\n            if (!validator || (await validator(decrypted))) return { success: decrypted }\n          } catch (e) {\n            console.warn(`Error while attempting to decrypt attachment of ${entity.entity.id} with raw key ${k.raw}: ${e}`)\n          }\n        }\n      }\n      return null\n    })\n    if (result != null) {\n      return { data: result.success, wasDecrypted: true }\n    } else {\n      return { data: ua2ab(content), wasDecrypted: false }\n    }\n  }\n\n  async encryptDataOf<T extends EncryptedEntityStub>(\n    entity: T,\n    type: EntityWithDelegationTypeName,\n    content: ArrayBuffer | Uint8Array,\n    saveEntity: (entity: T) => Promise<T>\n  ): Promise<{ encryptedData: ArrayBuffer; updatedEntity: T | undefined }> {\n    const ensureInitialisedKeysResult = await this.ensureEncryptionKeysInitialised(entity, type)\n    let updatedEntity: T | undefined\n    if (!!ensureInitialisedKeysResult) {\n      updatedEntity = await saveEntity(ensureInitialisedKeysResult)\n    }\n    const encrypted = await this.doIncrementallyDecryptingKeys(entity, type, async (e, t, keys) => {\n      for (const k of keys) {\n        try {\n          return {\n            success: {\n              encryptedData: await this.primitives.AES.encrypt(k.key, content),\n              updatedEntity: updatedEntity,\n            },\n          }\n        } catch (e) {\n          console.warn(`Error while encrypting with raw key ${k.raw}: ${e}`)\n        }\n      }\n      return null\n    })\n    if (encrypted != null) return encrypted.success\n    throw new Error(`Could not extract any valid encryption keys for entity ${JSON.stringify(entity)}.`)\n  }\n\n  async tryDecryptEntities<T extends EncryptedEntity>(\n    entities: T[],\n    entityType: EntityWithDelegationTypeName,\n    constructor: (json: any) => T\n  ): Promise<{ entity: T; decrypted: boolean }[]> {\n    const nothingToDecryptResults = new Map<string, T>()\n    for (const entity of entities) {\n      const nothingToDecrypt = await decryptObject(entity, async (encrypted) => {\n        return null\n      })\n      if (nothingToDecrypt != null) {\n        nothingToDecryptResults.set(entity.id!, constructor(nothingToDecrypt))\n      }\n    }\n    const actuallyDecryptedResults = await this.doManyIncrementallyDecryptingKeys(\n      entities.filter((e) => !nothingToDecryptResults.has(e.id!)),\n      entityType,\n      async (entity, t, keys) => {\n        // The decrypt object will try all keys on each of the sub-objects; this is intentional because even though it\n        // shouldn't happen, but it is still possible that some entity could be accidentally merged badly and the merged\n        // entity has multiple encryptedSelf (on different sub-entities) that use different keys.\n        const decrypted = await decryptObject(entity, (encrypted) => this.tryDecryptJson(keys, encrypted, false))\n        if (decrypted != null) {\n          return { success: constructor(decrypted) }\n        } else {\n          return null\n        }\n      }\n    )\n    const res = []\n    for (const entity of entities) {\n      const decrypted = actuallyDecryptedResults.get(entity.id!) ?? nothingToDecryptResults.get(entity.id!)\n      if (!decrypted) {\n        res.push({ entity: entity, decrypted: false })\n      } else {\n        res.push({ entity: decrypted, decrypted: true })\n      }\n    }\n    return res\n  }\n\n  async tryDecryptJson(\n    potentialKeys: { key: CryptoKey; raw: string }[],\n    encrypted: Uint8Array,\n    truncateTrailingDecryptedNulls: boolean\n  ): Promise<{} | null> {\n    for (const key of potentialKeys) {\n      try {\n        const decrypted = await this.primitives.AES.decrypt(key.key, encrypted, key.raw)\n        return JSON.parse(ua2utf8(truncateTrailingDecryptedNulls ? truncateTrailingNulls(new Uint8Array(decrypted)) : decrypted))\n      } catch (e) {}\n    }\n    return null\n  }\n\n  async tryEncryptEntities<T extends EncryptedEntity>(\n    entities: T[],\n    entityType: EntityWithDelegationTypeName,\n    fieldsToEncrypt: EncryptedFieldsManifest,\n    encodeBinaryData: boolean,\n    requireEncryption: boolean,\n    constructor: (json: any) => T\n  ): Promise<T[]> {\n    const entitiesWithInitialisedEncryptionKeys: T[] = []\n    for (const entity of entities) {\n      entitiesWithInitialisedEncryptionKeys.push((await this.ensureEncryptionKeysInitialised(entity, entityType)) ?? entity)\n    }\n    const results = await this.doManyIncrementallyDecryptingKeys(entitiesWithInitialisedEncryptionKeys, entityType, async (e, t, keys) => {\n      for (const k of keys) {\n        try {\n          const encrypted = await encryptObject(\n            e,\n            (obj) => {\n              // TODO encoding of binary data should probably be applied to everything?\n              const json = encodeBinaryData\n                ? JSON.stringify(obj, (k, v) => {\n                    return v instanceof ArrayBuffer || ArrayBuffer.isView(v)\n                      ? b2a(new Uint8Array(v as ArrayBufferLike).reduce((d, b) => d + String.fromCharCode(b), ''))\n                      : v\n                  })\n                : JSON.stringify(obj)\n\n              return this.primitives.AES.encrypt(k.key, utf8_2ua(json), k.raw)\n            },\n            (encryptedSelf) => this.tryDecryptJson(keys, encryptedSelf, false),\n            fieldsToEncrypt,\n            entityType\n          )\n          return { success: constructor(encrypted) }\n        } catch (e) {\n          console.warn(`Error while encrypting with raw key ${k.raw}: ${e}`)\n        }\n      }\n      return null\n    })\n    if (results.size != entitiesWithInitialisedEncryptionKeys.length) {\n      if (requireEncryption) {\n        throw new Error(\n          `Could not encrypt entities ${entitiesWithInitialisedEncryptionKeys.flatMap((e): string[] => (results.has(e.id!) ? [] : [e.id!]))}`\n        )\n      } else {\n        for (const e of entitiesWithInitialisedEncryptionKeys) {\n          if (!results.has(e.id!)) {\n            await encryptObject(\n              e,\n              async (obj: { [key: string]: any }) => {\n                const hasNonEmptyValues = Object.values(obj).some(\n                  (v) => v !== undefined && (typeof v !== 'object' || (Array.isArray(v) && v.length > 0) || Object.keys(v).length > 0)\n                )\n                if (hasNonEmptyValues) {\n                  throw new Error(\n                    `Impossible to modify encrypted content of an entity if no encryption key is known.\\nEntity: ${JSON.stringify(\n                      e\n                    )}\\nTo encrypt: ${JSON.stringify(obj)}`\n                  )\n                }\n                return Promise.resolve(new ArrayBuffer(1))\n              },\n              () => Promise.resolve(null),\n              fieldsToEncrypt,\n              'entity'\n            )\n            results.set(e.id!, e)\n          }\n        }\n      }\n    }\n    return entitiesWithInitialisedEncryptionKeys.map((e) => results.get(e.id!)!)\n  }\n\n  async ensureEncryptionKeysInitialised<T extends EncryptedEntity>(entity: T, entityType: EntityWithDelegationTypeName): Promise<T | undefined> {\n    if (this.securityMetadataDecryptor.hasAnyEncryptionKeys(entity)) return undefined\n    if (!entity.rev) {\n      throw new Error(\n        'New encrypted entity is lacking encryption metadata. ' +\n          'Please instantiate new entities using the `newInstance` method from the respective extended api.'\n      )\n    }\n    /*\n     * Add encryption key and share with all auto-delegates already in legacy delegations.\n     * TODO disable this logic and simply throw error for post-2018 customers.\n     */\n    const existingDelegations = new Set(Object.keys(entity.delegations ?? {}))\n    const usersWithAccessToNewKey = Object.fromEntries(\n      Object.values((await this.userApi.getCurrentUser()).autoDelegations ?? {})\n        .flatMap((x) => x)\n        .filter((x) => existingDelegations.has(x))\n        .map((x) => [x, AccessLevelEnum.WRITE])\n    )\n    return await this.secureDelegationsManager.entityWithInitialisedEncryptedMetadata(\n      {\n        ...entity,\n        secretForeignKeys: entity.secretForeignKeys ?? [],\n      },\n      entityType,\n      [],\n      [],\n      [await this.primitives.AES.generateCryptoKey(true)],\n      usersWithAccessToNewKey,\n      undefined\n    )\n  }\n\n  private async decryptHierarchy(\n    decryptedDataProvider: (dataOwners: string[]) => Promise<{ ownerId: string; extracted: string[] }[]>\n  ): Promise<{ ownerId: string; extracted: string[] }[]> {\n    const canDecryptOwnerIds = this.useParentKeys\n      ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n      : [await this.dataOwnerApi.getCurrentDataOwnerId()]\n    return await decryptedDataProvider(canDecryptOwnerIds)\n  }\n\n  private async decryptAndMergeHierarchy(\n    dataOwnerId: string | undefined,\n    decryptedDataProvider: (dataOwners: string[]) => Promise<{ ownerId: string; extracted: string[] }[]>\n  ): Promise<string[]> {\n    const hierarchy = this.useParentKeys\n      ? dataOwnerId\n        ? await this.dataOwnerApi.getCurrentDataOwnerHierarchyIdsFrom(dataOwnerId)\n        : await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n      : [dataOwnerId ?? (await this.dataOwnerApi.getCurrentDataOwnerId())]\n    const decryptedData = await decryptedDataProvider(hierarchy)\n    const merged = decryptedData.flatMap((x) => x.extracted)\n    return this.deduplicate(merged)\n  }\n\n  private async tryImportKey(key: string): Promise<CryptoKey | undefined> {\n    if (!/^[0-9A-Fa-f\\-]+$/g.test(key)) return undefined\n    try {\n      return await this.primitives.AES.importKey('raw', hex2ua(key.replace(/-/g, '')))\n    } catch (e) {\n      console.warn(`Could not import key ${key} as an encryption key.`, e)\n      return undefined\n    }\n  }\n\n  async doIncrementallyDecryptingKeys<E extends EncryptedEntity | EncryptedEntityStub, T>(\n    entity: E,\n    entityType: EntityWithDelegationTypeName,\n    action: (entity: E, entityType: EntityWithDelegationTypeName, keys: { key: CryptoKey; raw: string }[]) => Promise<{ success: T } | null>\n  ): Promise<{ success: T } | null> {\n    const res = await this.doManyIncrementallyDecryptingKeys([entity], entityType, (e, t, ks) => action(e, t, ks))\n    if (res.has(entity.id!)) {\n      return { success: res.get(entity.id!)! }\n    } else {\n      return null\n    }\n  }\n\n  async doManyIncrementallyDecryptingKeys<E extends EncryptedEntity | EncryptedEntityStub, T>(\n    entities: E[],\n    entitiesType: EntityWithDelegationTypeName,\n    action: (entity: E, entityType: EntityWithDelegationTypeName, keys: { key: CryptoKey; raw: string }[]) => Promise<{ success: T } | null>\n  ): Promise<Map<string, T>> {\n    if (entities.length == 0) return new Map()\n    let deduplicatedEntities = entities\n    if (new Set(deduplicatedEntities.map((e) => e.id)).size != deduplicatedEntities.length) {\n      console.error(`Duplicate entries in entities ${deduplicatedEntities.map((x) => x.id)}`)\n      deduplicatedEntities = this.deduplicateById(deduplicatedEntities)\n    }\n\n    const hierarchy = await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n    const allExtractedKeysForEntities = Object.fromEntries(deduplicatedEntities.map((x) => [x.id!, new Set<string>()] as [string, Set<string>]))\n    const newlyExtractedKeysForEntities = Object.fromEntries(deduplicatedEntities.map((x) => [x.id!, new Set<string>()] as [string, Set<string>]))\n    const results = new Map<string, T>()\n    const remainingEntitiesById = Object.fromEntries(deduplicatedEntities.map((x) => [x.id!, x] as [string, E]))\n    const importedKeysByRaw = new Map<string, CryptoKey>()\n    const primitives = this.primitives\n\n    async function updateExtractedKeysAndDoActionIfNecessary(\n      newKeys: { [entityId: string]: string[] },\n      forceUpdateOnEntitiesWithNewExtractedKeys: boolean\n    ): Promise<void> {\n      for (const [entityId, keys] of Object.entries(newKeys)) {\n        const newlyExtractedSet = newlyExtractedKeysForEntities[entityId]\n        const alreadyExtractedSet = allExtractedKeysForEntities[entityId]\n        for (const k of keys) {\n          if (!alreadyExtractedSet.has(k)) {\n            newlyExtractedSet.add(k)\n            if (!importedKeysByRaw.has(k)) {\n              importedKeysByRaw.set(k, await primitives.AES.importKey('raw', hex2ua(k)))\n            }\n          }\n        }\n      }\n      if (\n        forceUpdateOnEntitiesWithNewExtractedKeys ||\n        Object.keys(remainingEntitiesById).every((eId) => newlyExtractedKeysForEntities[eId].size > 0)\n      ) {\n        for (const entity of Object.values(remainingEntitiesById)) {\n          const currId = entity.id!\n          const currNewlyExtracted = newlyExtractedKeysForEntities[currId]\n          if (currNewlyExtracted.size > 0) {\n            const currAllExtracted = allExtractedKeysForEntities[currId]\n            currNewlyExtracted.forEach((k) => currAllExtracted.add(k))\n            currNewlyExtracted.clear()\n            const actionResult = await action(\n              entity,\n              entitiesType,\n              [...currAllExtracted].map((raw): { raw: string; key: CryptoKey } => ({\n                raw: raw,\n                key: importedKeysByRaw.get(raw)!,\n              }))\n            )\n            if (actionResult != null) {\n              delete remainingEntitiesById[currId]\n              results.set(currId, actionResult.success)\n            }\n          }\n        }\n      }\n    }\n\n    await updateExtractedKeysAndDoActionIfNecessary(\n      await this.securityMetadataDecryptor.decryptLegacyDelegations(\n        Object.values(remainingEntitiesById),\n        hierarchy,\n        SecurityMetadataType.EncryptionKey\n      ),\n      false\n    )\n    if (Object.keys(remainingEntitiesById).length == 0) return results\n    await updateExtractedKeysAndDoActionIfNecessary(\n      await this.securityMetadataDecryptor.decryptSecureDelegationsUsingCache(\n        Object.values(remainingEntitiesById),\n        hierarchy,\n        SecurityMetadataType.EncryptionKey\n      ),\n      false\n    )\n    if (Object.keys(remainingEntitiesById).length == 0) return results\n    await updateExtractedKeysAndDoActionIfNecessary(\n      await this.securityMetadataDecryptor.decryptSecureDelegationsUsingKnownExchangeData(\n        Object.values(remainingEntitiesById),\n        hierarchy,\n        SecurityMetadataType.EncryptionKey\n      ),\n      false\n    )\n    if (Object.keys(remainingEntitiesById).length == 0) return results\n    await updateExtractedKeysAndDoActionIfNecessary(\n      await this.securityMetadataDecryptor.decryptSecureDelegationsUsingExchangeDataMap(\n        Object.values(remainingEntitiesById),\n        hierarchy,\n        SecurityMetadataType.EncryptionKey\n      ),\n      false\n    )\n    if (Object.keys(remainingEntitiesById).length == 0) return results\n    await updateExtractedKeysAndDoActionIfNecessary({}, true)\n    return results\n  }\n\n  private deduplicate<T>(values: T[]): T[] {\n    return [...new Set(values)]\n  }\n\n  private throwDetailedExceptionForInvalidParameter(argName: string, argValue: any, methodName: string, methodArgs: IArguments) {\n    if (argValue) return\n\n    let details = '\\nMethod name: icc-crypto-x-api.' + methodName + '()\\nArguments:'\n\n    if (methodArgs) {\n      try {\n        const argsArray = [...methodArgs]\n        argsArray.forEach((arg, index) => (details += '\\n[' + index + ']: ' + JSON.stringify(arg)))\n      } catch (ex) {\n        details += '; a problem occured while logging arguments details: ' + ex\n      }\n    }\n\n    throw new Error('### THIS SHOULD NOT HAPPEN: ' + argName + ' has an invalid value: ' + argValue + details)\n  }\n\n  private checkEmptyEncryptionMetadata(entity: EncryptedEntity) {\n    this.doCheckEmptyEncryptionMetadata(entity, true)\n  }\n\n  hasEmptyEncryptionMetadata(entity: EncryptedEntity): boolean {\n    return this.doCheckEmptyEncryptionMetadata(entity, false)\n  }\n\n  private doCheckEmptyEncryptionMetadata(entity: EncryptedEntity, throwErrorIfNonEmpty: boolean): boolean {\n    const existingMetadata = []\n    if (entity.delegations && Object.keys(entity.delegations).length) existingMetadata.push('delegations')\n    if (entity.cryptedForeignKeys && Object.keys(entity.cryptedForeignKeys).length) existingMetadata.push('cryptedForeignKeys')\n    if (entity.encryptionKeys && Object.keys(entity.encryptionKeys).length) existingMetadata.push('encryptionKeys')\n    if (entity.secretForeignKeys && entity.secretForeignKeys.length) existingMetadata.push('secretForeignKeys')\n    if (entity.securityMetadata && Object.keys(entity.securityMetadata).length) existingMetadata.push('securityMetadata')\n    if (existingMetadata.length > 0) {\n      if (throwErrorIfNonEmpty) {\n        throw new Error(\n          `Entity should have no encryption metadata on initialisation, but the following fields already have some values: ${existingMetadata}\\n` +\n            JSON.stringify(entity, undefined, 2)\n        )\n      } else return false\n    }\n    return true\n  }\n\n  async initialiseConfidentialSecretId<T extends EncryptedEntity>(\n    entity: T,\n    entityType: EntityWithDelegationTypeName,\n    doRequestBulkShareOrUpdate: (request: BulkShareOrUpdateMetadataParams) => Promise<EntityBulkShareResult<T>[]>\n  ): Promise<T | undefined> {\n    if (await this.getConfidentialSecretId({ entity, type: entityType })) return undefined\n    const confidentialSecretId = this.primitives.randomUuid()\n    return (\n      await this.simpleShareOrUpdateEncryptedEntityMetadata(\n        { entity, type: entityType },\n        {\n          [await this.dataOwnerApi.getCurrentDataOwnerId()]: {\n            shareEncryptionKeys: ShareMetadataBehaviour.NEVER,\n            shareOwningEntityIds: ShareMetadataBehaviour.NEVER,\n            shareSecretIds: [confidentialSecretId],\n            requestedPermissions: RequestedPermissionEnum.MAX_WRITE,\n          },\n        },\n        (request) => doRequestBulkShareOrUpdate(request)\n      )\n    ).updatedEntityOrThrow\n  }\n\n  async getConfidentialSecretId(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string | undefined> {\n    return this.getConfidentialSecretIds(entity, dataOwnerId).then((x) => x[0])\n  }\n\n  async getConfidentialSecretIds(entity: EncryptedEntityWithType, dataOwnerId?: string): Promise<string[]> {\n    const chosenDataOwnerId = dataOwnerId ?? (await this.dataOwnerApi.getCurrentDataOwnerId())\n    const dataOwnerHierarchy = await this.dataOwnerApi.getCurrentDataOwnerHierarchyIdsFrom(chosenDataOwnerId)\n    const hierarchySecretIds = (await this.secretIdsForHcpHierarchyOf(entity)).filter((x) => dataOwnerHierarchy.includes(x.ownerId))\n    const keysForDataOwner = hierarchySecretIds.find((x) => x.ownerId === chosenDataOwnerId)\n\n    if (!keysForDataOwner) return []\n    return keysForDataOwner.extracted.filter((k) => !hierarchySecretIds.some((x) => x.ownerId !== chosenDataOwnerId && x.extracted.includes(k)))\n  }\n\n  async getAnySecretIdSharedWithParents(entity: EncryptedEntityWithType): Promise<string | undefined> {\n    return (await this.getSecretIdsSharedWithParents(entity))[0]\n  }\n\n  async getSecretIdsSharedWithParents(entity: EncryptedEntityWithType): Promise<string[]> {\n    return (await this.secretIdsForHcpHierarchyOf(entity))[0].extracted\n  }\n\n  async resolveSecretIdUseOptions(entity: EncryptedEntityWithType, option: SecretIdUseOption): Promise<string[]> {\n    if (option == SecretIdUseOption.UseNone) {\n      return []\n    } else if (option == SecretIdUseOption.UseAnyConfidential) {\n      const all = await this.getConfidentialSecretIds(entity, undefined)\n      if (all.length == 0) throw new Error(\"Couldn't find any confidential secret id\")\n      return [all[0]]\n    } else if (option == SecretIdUseOption.UseAllConfidential) {\n      const all = await this.getConfidentialSecretIds(entity, undefined)\n      if (all.length == 0) throw new Error(\"Couldn't find any confidential secret id\")\n      return all\n    } else if (option == SecretIdUseOption.UseAnySharedWithParent) {\n      const all = await this.getSecretIdsSharedWithParents(entity)\n      if (all.length == 0) throw new Error(\"Couldn't find any secret id shared with parent\")\n      return [all[0]]\n    } else if (option == SecretIdUseOption.UseAllSharedWithParent) {\n      const all = await this.getSecretIdsSharedWithParents(entity)\n      if (all.length == 0) throw new Error(\"Couldn't find any secret id shared with parent\")\n      return all\n    } else if (option instanceof SecretIdUseOption.Use) {\n      return [...new Set(option.secretIds)]\n    } else {\n      throw new Error(`Unrecognized SecretIdUseOption ${option}`)\n    }\n  }\n\n  private deduplicateById<E extends { id?: string }>(entities: E[]): E[] {\n    const seen = new Set<string | undefined>()\n    return entities.filter((e) => {\n      if (seen.has(e.id)) return false\n      seen.add(e.id)\n      return true\n    })\n  }\n}\n"]}

package/icc-x-api/crypto/UserEncryptionKeysManager.js

@@ -238,9 +238,9 @@ class UserEncryptionKeysManager {
                 const currExternallyRecovered = this.ensureFingerprintKeys(recoveryAndVerificationResult[keyData.dowt.dataOwner.id].recoveredKeys);
                 for (const [fp, keyPair] of Object.entries(currExternallyRecovered)) {
                     const jwkPair = yield this.primitives.RSA.exportKeys(keyPair, 'jwk', 'jwk');
-                    yield this.icureStorage.saveKey(keyData.dowt.dataOwner.id, fp, jwkPair, true);
+                    yield this.icureStorage.saveKey(keyData.dowt.dataOwner.id, fp, jwkPair, currAuthenticity[fp] != undefined ? currAuthenticity[fp] : true);
                 }
-                const updatedVerifiedMap = yield this.icureStorage.saveSelfVerifiedKeys(keyData.dowt.dataOwner.id, [...Object.keys(currAuthenticity), ...Object.keys(currExternallyRecovered)].reduce((acc, currFp) => (Object.assign(Object.assign({}, acc), { [currFp]: currFp in currExternallyRecovered || currAuthenticity[currFp] })), {}));
+                const updatedVerifiedMap = yield this.icureStorage.saveSelfVerifiedKeys(keyData.dowt.dataOwner.id, [...Object.keys(currAuthenticity), ...Object.keys(currExternallyRecovered)].reduce((acc, currFp) => (Object.assign(Object.assign({}, acc), { [currFp]: currAuthenticity[currFp] != undefined ? currAuthenticity[currFp] : currFp in currExternallyRecovered ? true : undefined })), {}));
                 const keysWithExternallyRecovered = Object.assign(Object.assign({}, keyData.availableKeys), Object.fromEntries(Object.entries(currExternallyRecovered).map(([k, v]) => [k, { pair: v, isDevice: false }])));
                 let parentKeysForRecovery = {};
                 for (let j = 0; j < i; j++) {

package/icc-x-api/crypto/UserEncryptionKeysManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserEncryptionKeysManager.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/UserEncryptionKeysManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,+BAA2C;AAC3C,oCAAiC;AAEjC,mCAAuC;AAKvC,yEAA8F;AAgB9F,MAAM,8BAA8B,GAA4B,CAAC,CAAC,EAAE,EAAE,CACpE,OAAO,CAAC,OAAO,CACb,CAAC,CAAC,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,iCAAM,GAAG,KAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAG,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,IAAG,EAC3G,EAKC,CACF,CACF,CAAA;AAGH;;GAEG;AACH,MAAa,yBAAyB;IAKpC,YACmB,UAA4B,EAC5B,YAA8B,EAC9B,YAAgC,EAChC,WAAwB,EACxB,UAA4B,EAC5B,oBAA6B,EAC7B,gBAAkC,EAClC,eAAwB;QAPxB,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,iBAAY,GAAZ,YAAY,CAAoB;QAChC,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAkB;QAC5B,yBAAoB,GAApB,oBAAoB,CAAS;QAC7B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,oBAAe,GAAf,eAAe,CAAS;QAVnC,cAAS,GAA2F,SAAS,CAAA;IAWlH,CAAC;IAEJ;;;;;;;OAOG;IACG,wCAAwC;;YAU5C,IAAI,CAAC,iBAAiB,EAAE,CAAA;YACxB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAA;YAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC7I,MAAM,kBAAkB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YACnE,OAAO;gBACL,IAAI,EAAE;oBACJ,WAAW,EAAE,MAAM;oBACnB,IAAI,EAAE,QAAQ;iBACf;gBACD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACtC,WAAW,EAAE,CAAC;oBACd,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;iBAC9H,CAAC,CAAC;aACJ,CAAA;QACH,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,oCAAoC,CAAC,YAAqB;;YAC9D,IAAI,CAAC,iBAAiB,EAAE,CAAA;YACxB,IAAI,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC,MAAO,CAAC,CAAC,CAAA;YAC/D,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAA;YAChF,CAAC;YACD,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAO,OAAO,EAAE,EAAE,gDAAC,OAAA,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA,GAAA,CAAC,CAAC,CAAA;QAC5I,CAAC;KAAA;IAED;;;;;OAKG;IACG,6CAA6C;;YACjD,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC;iBAC3B,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;iBAC1D,GAAG,CAAC,CAAO,WAAW,EAAE,EAAE,gDAAC,OAAA,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA,GAAA,CAAC,CAC/G,CAAA;QACH,CAAC;KAAA;IAED;;;;OAIG;IACH,wBAAwB,CAAC,WAAmB;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAA;QAC3F,IAAI,aAAa;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAA;QACxD,IAAI,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QAC5D,OAAO,SAAS,CAAA;IAClB,CAAC;IAED;;;;;;OAMG;IACG,cAAc;;YAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,EACnG,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CACtE,CAAA;YACD,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAChG,CAAC;KAAA;IAED;;;;;OAKG;IACG,UAAU;;YACd,MAAM,IAAI,CAAC,UAAU,CAAC,8BAA8B,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;YAChH,CAAC,CAAC,CAAA;QACJ,CAAC;KAAA;IAED;;;;;;;;;OASG;IACH,mBAAmB;QACjB,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC,MAAO,CAAC,CAAA;QAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAE/C,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,IAAI,IAAA,qBAAa,EAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QACvF,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACrE,MAAM,WAAW,GAAG,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,UAAU,KAAI,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAE5H,SAAS,eAAe,CAAC,cAA0D;YACjF,OAAO,cAAc;iBAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,WAAW,CAAC;iBACtE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjB,oHAAoH;gBACpH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACpC,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC9D,CAAC;QACD,OAAO,CAAC,GAAG,WAAW,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IAC7I,CAAC;IAED;;;;OAIG;IACG,wBAAwB,CAAC,SAA0B;;YACvD,IAAI,CAAC,iBAAiB,EAAE,CAAA;YACxB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAU,CAAC,SAAS,CAAC,EAAG,CAAC,CAAA;YACpD,IAAI,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,2DAA2D,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;YACvI,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC9I,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAChI,CAAA;YACD,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,GAAG,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,SAAS,CAAC;gBAC1D,GAAG,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,SAAS,CAAC;aAC7D,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;gBAChB,MAAM,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAA;gBAC7B,OAAO,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACnE,CAAC,CAAC,CAAA;QACJ,CAAC;KAAA;IAED;;;;OAIG;IACH,iBAAiB;QACf,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACzD,uCACK,GAAG,GACH,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EACrC;QACH,CAAC,EAAE,EAA0C,CAAC,CAAA;IAChD,CAAC;IAEa,UAAU,CACtB,uBAAgD,EAChD,wBAAkD;;YAElD,wCAAwC;YACxC,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,4BAA4B,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;;gBACrG,IAAI,SAAS,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;oBAC9B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAA,SAAS,CAAC,WAAW,mCAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;wBACxD,MAAM,IAAI,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,qDAAqD,CAAC,CAAA;oBAClG,OAAO,SAAS,CAAC,SAAS,CAAA;gBAC5B,CAAC;gBACD,OAAO;oBACL,SAAS;oBACT,IAAI;iBACgB,CAAA;YACxB,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAG,CAAA;YAChC,MAAM,QAAQ,GAAG,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;gBACtB,IAAI,qBAAqB,GAAyE,EAAE,CAAA;gBACpG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3B,qBAAqB,mCAChB,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,GACzB,qBAAqB,CACzB,CAAA;gBACH,CAAC;gBACD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;gBACnF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAA;gBAC9D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,CAAA;gBACxF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;oBAC5B,GAAG,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC/D,GAAG,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;iBAClE,CAAC,CAAA;gBACF,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;oBAChE,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;gBAChE,CAAC,CAAC,CAAA;gBACF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAG,IAAA,qBAAa,EAAC,CAAC,CAAC,CAAC,0CAAE,QAAQ,MAAK,IAAI,CAAC,CAAA,EAAA,CACzG,CAAA;gBACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA;YAClI,MAAM,6BAA6B,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;gBACtH,CAAC,CAAC,MAAM,uBAAuB,CAAC,YAAY,CAAC;gBAC7C,CAAC,CAAC,MAAM,8BAA8B,CAAC,YAAY,CAAC,CAAA;YACtD,MAAM,SAAS,GAA6D,EAAE,CAAA;YAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;gBAC3B,MAAM,gBAAgB,GAAG,IAAI,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,CAAC,eAAe,CAAC,CAAA;gBAC9H,MAAM,uBAAuB,GAAG,IAAI,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,CAAC,aAAa,CAAC,CAAA;gBACnI,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;oBACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;oBAC3E,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;gBAChF,CAAC;gBACD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CACrE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,EAC1B,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAChF,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,iCACZ,GAAG,KACN,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,uBAAuB,IAAI,gBAAgB,CAAC,MAAM,CAAC,IACvE,EACF,EAAE,CACH,CACF,CAAA;gBACD,MAAM,2BAA2B,mCAC5B,OAAO,CAAC,aAAa,GACrB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAClH,CAAA;gBACD,IAAI,qBAAqB,GAAqE,EAAE,CAAA;gBAChG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3B,qBAAqB,mCAChB,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,GACzC,qBAAqB,CACzB,CAAA;gBACH,CAAC;gBACD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAC1D,OAAO,CAAC,IAAI,EACZ,IAAI,CAAC,sBAAsB,iCACtB,2BAA2B,GAC3B,qBAAqB,EACxB,CACH,CAAA;gBACD,MAAM,IAAI,mCACL,2BAA2B,GAC3B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAChH,CAAA;gBACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAA;YACnF,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACrH,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;YACnH,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;gBAC1B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAA;gBACnD,OAAO,SAAS,CAAA;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAA;gBACrD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,EAAE,mDAAmD,CAAC,CAAA;gBACpH,CAAC;qBAAM,IAAI,OAAO,QAAQ,IAAI,QAAQ,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAChE;;;;;;;;;uBASG;oBACH,IAAI,CAAC,IAAI,CAAC,eAAe;wBAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;oBAC3G,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;oBAC1B,OAAO,SAAS,CAAA;gBAClB,CAAC;qBAAM,CAAC;oBACN,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;oBACrG,2BAA2B;oBAC3B,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAA;oBAChE,IAAI,CAAC,SAAS,mCACT,SAAS,KACZ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,kCACf,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,KAChC,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAEpG,CAAA;oBACD,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,oBAAoB,EAAE,CAAA;gBACnF,CAAC;YACH,CAAC;QACH,CAAC;KAAA;IAEa,uBAAuB,CACnC,eAA+C,EAC/C,aAAgC;;;YAEhC,MAAM,OAAO,GAAG,eAAe,aAAf,eAAe,cAAf,eAAe,GAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,gBAAU,CAAC,MAAM,CAAC,CAAC,CAAA;YACjG,MAAM,YAAY,GAAG,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YAC3F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC3E,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;YAC7E,CAAC;YACD,MAAM,oBAAoB,GAAG,IAAA,qBAAa,EAAC,YAAY,CAAC,CAAA;YACxD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAC7B,aAAa,CAAC,SAAS,CAAC,EAAG,EAC3B,oBAAoB,EACpB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,EAC3D,IAAI,CACL,CAAA;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3G,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC;gBAChE,IAAI,kCACC,iCAAe,CAAC,aAAa,CAAC,aAAa,CAAC,SAAS,CAAC,KACzD,2BAA2B,EAAE,CAAC,GAAG,CAAC,MAAA,aAAa,CAAC,SAAS,CAAC,2BAA2B,mCAAI,EAAE,CAAC,EAAE,YAAY,CAAC,GAC5G;gBACD,IAAI,EAAE,aAAa,CAAC,IAAI;aACzB,CAAC,CAAA;YACF,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;QAChE,CAAC;KAAA;IAEa,cAAc,CAC1B,SAA4B,EAC5B,mBAAgD;;YAEhD,MAAM,8BAA8B,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE;gBACvG,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAyB,CAAC,CAAA;YAClE,CAAC,CAAC,CAAA;YACF,OAAO,MAAM,8BAA8B,CAAC,MAAM,CAAC,YAA8C,EAAE,iDAAzC,GAAG,EAAE,CAAC,UAAU,EAAE,kBAAkB,CAAC;gBAC7F,MAAM,UAAU,GAAG,MAAM,GAAG,CAAA;gBAC5B,IAAI,UAAU,GAAgE,SAAS,CAAA;gBACvF,IAAI,CAAC;oBACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAG,EAAE,kBAAkB,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;oBACjI,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;wBACpB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CACzD,KAAK,EACL,aAAa,CAAC,IAAI,CAAC,UAAU,EAC7B,KAAK,EACL,aAAa,CAAC,IAAI,CAAC,SAAS,EAC5B,UAAU,CACX,CAAA;wBACD,UAAU,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAA;oBACtE,CAAC;gBACH,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAA;gBACpE,CAAC;gBACD,OAAO,UAAU;oBACf,CAAC,iCACM,UAAU,KACb,CAAC,kBAAkB,CAAC,EAAE,UAAU,IAEpC,CAAC,CAAC,UAAU,CAAA;YAChB,CAAC,CAAA,EAAE,OAAO,CAAC,OAAO,CAAC,EAAsF,CAAC,CAAC,CAAA;QAC7G,CAAC;KAAA;IAEO,UAAU,CAChB,IAAsF,EACtF,eAAyD;QAEzD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CACtB,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,kCAAO,OAAO,KAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAG,EAAE,CAAC,MAAK,IAAI,IAA4B,CACjI,CACF,CAAA;IACH,CAAC;IAEO,sBAAsB,CAAC,QAAuE;QAGpG,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChG,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAClF,CAAC;IAEa,mBAAmB,CAC/B,SAA4B,EAC5B,aAAkE;;YAElE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;YAClF,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAG,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;YAC/H,CAAC;YACD,OAAO,aAAa,CAAA;QACtB,CAAC;KAAA;IAEa,qBAAqB,CACjC,SAA4B,EAC5B,aAAmF;;YAEnF,MAAM,mBAAmB,GAAG;gBAC1B,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,CAAC;gBACrH,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,CAAC;aAC1H,CAAA;YACD,MAAM,UAAU,GACd,mBAAmB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAClJ,MAAM,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACtD,IACE,sBAAsB,CAAC,MAAM,KAAK,mBAAmB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,MAAM;gBAC7G,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAC5E,CAAC;gBACD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,sBAAsB,iCAAM,UAAU,GAAK,aAAa,EAAG,CAAC,CAAA;gBACjI,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;oBACvD,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;gBAC5C,CAAC;YACH,CAAC;YACD,OAAO,UAAU,CAAA;QACnB,CAAC;KAAA;IAEO,qBAAqB,CAAI,GAAyC;QACxE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACvF,CAAC;IAEO,cAAc,CAAC,QAAuC;QAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAA;IACxE,CAAC;CACF;AA7bD,8DA6bC","sourcesContent":["import { DataOwnerOrStub, IccDataOwnerXApi } from '../icc-data-owner-x-api'\nimport { KeyPair, ShaVersion } from './RSA'\nimport { ua2hex } from '../utils'\nimport { IcureStorageFacade } from '../storage/IcureStorageFacade'\nimport { fingerprintV1 } from './utils'\nimport { CryptoPrimitives } from './CryptoPrimitives'\nimport { KeyRecovery } from './KeyRecovery'\nimport { CryptoStrategies } from './CryptoStrategies'\nimport { DataOwnerWithType } from '../../icc-api/model/DataOwnerWithType'\nimport { CryptoActorStub, CryptoActorStubWithType } from '../../icc-api/model/CryptoActorStub'\nimport { KeyPairRecoverer } from './KeyPairRecoverer'\n\ntype KeyPairData = { pair: KeyPair<CryptoKey>; isVerified: boolean; isDevice: boolean }\ntype KeyRecovererAndVerifier = (\n  keysData: {\n    dataOwner: DataOwnerWithType\n    unknownKeys: string[]\n    unavailableKeys: string[]\n  }[]\n) => Promise<{\n  [dataOwnerId: string]: {\n    recoveredKeys: { [keyPairFingerprint: string]: KeyPair<CryptoKey> }\n    keyAuthenticity: { [keyPairFingerprint: string]: boolean }\n  }\n}>\nconst nothingKeyRecovererAndVerifier: KeyRecovererAndVerifier = (x) =>\n  Promise.resolve(\n    x.reduce(\n      (acc, { dataOwner }) => ({ ...acc, [dataOwner.dataOwner.id!]: { recoveredKeys: {}, keyAuthenticity: {} } }),\n      {} as {\n        [dataOwnerId: string]: {\n          recoveredKeys: { [keyPairFingerprint: string]: KeyPair<CryptoKey> }\n          keyAuthenticity: { [keyPairFingerprint: string]: boolean }\n        }\n      }\n    )\n  )\ntype CurrentOwnerKeyGenerator = (self: DataOwnerWithType) => Promise<KeyPair<CryptoKey> | boolean | 'keyless'>\n\n/**\n * Allows to manage public and private keys for the current user and his parent hierarchy.\n */\nexport class UserEncryptionKeysManager {\n  private selfId: string | undefined\n  private selfLegacyPublicKey: string | undefined\n  private keysCache: { [selfOrParentId: string]: { [pubKeyFingerprint: string]: KeyPairData } } | undefined = undefined\n\n  constructor(\n    private readonly primitives: CryptoPrimitives,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly icureStorage: IcureStorageFacade,\n    private readonly keyRecovery: KeyRecovery,\n    private readonly strategies: CryptoStrategies,\n    private readonly initialiseParentKeys: boolean,\n    private readonly keypairRecoverer: KeyPairRecoverer,\n    private readonly selfIsAnonymous: boolean\n  ) {}\n\n  /**\n   * @internal\n   * Get all key pairs available for the current data owner and his parents.\n   * @return an object with:\n   * - `self` an object containing the current data owner id and the list of key pairs available for the current data owner with verification details.\n   * - `parents` the list of parents to the current data owner with the list of key pairs available for each parent. The list is ordered from the\n   *   topmost ancestor (at index 0) to the direct parent of the current data owner (at the last index, may be 0).\n   */\n  async getCurrentUserHierarchyAvailableKeypairs(): Promise<{\n    self: {\n      dataOwnerId: string\n      keys: { pair: KeyPair<CryptoKey>; verified: boolean }[]\n    }\n    parents: {\n      dataOwnerId: string\n      keys: { pair: KeyPair<CryptoKey>; verified: boolean }[]\n    }[]\n  }> {\n    this.ensureInitialised()\n    const hierarchy = await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n    const selfId = hierarchy[hierarchy.length - 1]\n    const selfKeys = Object.values(this.keysCache![selfId]).map(({ pair, isVerified, isDevice }) => ({ pair, verified: isVerified || isDevice }))\n    const remainingHierarchy = hierarchy.slice(0, hierarchy.length - 1)\n    return {\n      self: {\n        dataOwnerId: selfId,\n        keys: selfKeys,\n      },\n      parents: remainingHierarchy.map((x) => ({\n        dataOwnerId: x,\n        keys: Object.values(this.keysCache![x]).map(({ pair, isVerified, isDevice }) => ({ pair, verified: isVerified || isDevice })),\n      })),\n    }\n  }\n\n  /**\n   * Get the public keys of available key pairs for the current user in hex-encoded spki representation (uses cached keys: no request is done to the\n   * server).\n   * By setting {@link verifiedOnly} to true only the public keys for verified key pairs will be returned: these will include only key pairs created\n   * on this device or which have been verified using {@link CryptoStrategies} on this device.\n   * @param verifiedOnly if true only the verified public keys will be returned.\n   * @return the spki representation of public keys of available keypairs for the current user.\n   */\n  async getCurrentUserAvailablePublicKeysHex(verifiedOnly: boolean): Promise<string[]> {\n    this.ensureInitialised()\n    let selectedData = Object.values(this.keysCache![this.selfId!])\n    if (verifiedOnly) {\n      selectedData = selectedData.filter((data) => data.isVerified || data.isDevice)\n    }\n    return await Promise.all(selectedData.map(async (keyData) => ua2hex(await this.primitives.RSA.exportKey(keyData.pair.publicKey, 'spki'))))\n  }\n\n  /**\n   * Get the public keys of available key pairs for the current user and his parents in hex-encoded spki representation (uses cached keys: no request\n   * is done to the server).\n   * Note that this will also include unverified keys.\n   * @return the spki representation of public keys of available keypairs for the current user.\n   */\n  async getCurrentUserHierarchyAvailablePublicKeysHex(): Promise<string[]> {\n    return await Promise.all(\n      Object.values(this.keysCache!)\n        .flatMap((pairsForParent) => Object.values(pairsForParent))\n        .map(async (keyPairData) => ua2hex(await this.primitives.RSA.exportKey(keyPairData.pair.publicKey, 'spki')))\n    )\n  }\n\n  /**\n   * Get a key pair with the provided fingerprint if present.\n   * @param fingerprint a key-pair/public-key fingerprint\n   * @return the pair associated to the fingerprint and a boolean indicating if the pair is verified, if present, else undefined\n   */\n  getKeyPairForFingerprint(fingerprint: string): { pair: KeyPair<CryptoKey>; verified: boolean } | undefined {\n    const foundVerified = this.getSelfVerifiedKeys().find((x) => x.fingerprint === fingerprint)\n    if (foundVerified) return { pair: foundVerified.pair, verified: true }\n    const foundOther = this.getDecryptionKeys()[fingerprint]\n    if (foundOther) return { pair: foundOther, verified: false }\n    return undefined\n  }\n\n  /**\n   * @internal This method is intended for internal use only and may be changed without notice.\n   * Initializes all keys for the current data owner. This method needs to be called before any other method of this class can be used.\n   * @throws if the current user is not a data owner, or if there is no key and no new key could be created according to this manager crypt\n   * strategies.\n   * @return if a new key was created during initialisation the newly created key, else undefined.\n   */\n  async initialiseKeys(): Promise<{ newKeyPair: KeyPair<CryptoKey>; newKeyFingerprint: string } | undefined> {\n    const newKey = await this.doLoadKeys(\n      (x) => this.strategies.recoverAndVerifySelfHierarchyKeys(x, this.primitives, this.keypairRecoverer),\n      (x) => this.strategies.generateNewKeyForDataOwner(x, this.primitives)\n    )\n    return newKey ? { newKeyPair: newKey.pair, newKeyFingerprint: newKey.fingerprint } : undefined\n  }\n\n  /**\n   * @internal This method is intended for internal use only and may be changed without notice.\n   * Forces to reload keys for the current data owner. This could be useful if the data owner has logged in from another device in order to update the\n   * transfer keys.\n   * This method will complete only after keys have been reloaded successfully.\n   */\n  async reloadKeys(): Promise<void> {\n    await this.doLoadKeys(nothingKeyRecovererAndVerifier, (x) => {\n      throw new Error(\"Can't create new keys at reload time: it should have already been created on initialisation\")\n    })\n  }\n\n  /**\n   * @internal This method is intended for internal use only and may be changed without notice.\n   * Get all verified key pairs for the current data owner which can safely be used for encryption. This includes all key pairs created on the current\n   * device and all recovered key pairs which have been verified.\n   * The keys returned by this method will be in the following order:\n   * 1. Legacy key pair if it is verified\n   * 2. All device key pais, in alphabetical order according to the fingerprint\n   * 3. Other verified key pairs, in alphabetical order according to the fingerprint\n   * @return all verified keys, in order.\n   */\n  getSelfVerifiedKeys(): { fingerprint: string; pair: KeyPair<CryptoKey> }[] {\n    this.ensureInitialised()\n    const selfKeys = this.keysCache![this.selfId!]\n    const allKeysEntries = Object.entries(selfKeys)\n\n    const legacyKeyFp = this.selfLegacyPublicKey && fingerprintV1(this.selfLegacyPublicKey)\n    const legacyKeyData = legacyKeyFp ? selfKeys[legacyKeyFp] : undefined\n    const legacyEntry = legacyKeyData?.isVerified && legacyKeyFp ? [{ fingerprint: legacyKeyFp, pair: legacyKeyData.pair }] : []\n\n    function filteredEntries(filterFunction: (fp: string, data: KeyPairData) => boolean) {\n      return allKeysEntries\n        .filter(([fp, data]) => filterFunction(fp, data) && fp !== legacyKeyFp)\n        .sort(([a], [b]) => {\n          // need to make sure that the comparison is independent of the locale, but the actual ordering is not that important\n          return a == b ? 0 : a > b ? 1 : -1\n        })\n        .map(([fingerprint, { pair }]) => ({ fingerprint, pair }))\n    }\n    return [...legacyEntry, ...filteredEntries((_, data) => data.isDevice), ...filteredEntries((_, data) => !data.isDevice && data.isVerified)]\n  }\n\n  /**\n   * Get all verified keys for a member of the current data owner hierarchy in no particular order.\n   * @param dataOwner the current data owner or a member of his hierarchy.\n   * @throws if the provided data owner is not part of the current data owner hierarchy\n   */\n  async getVerifiedPublicKeysFor(dataOwner: DataOwnerOrStub): Promise<string[]> {\n    this.ensureInitialised()\n    const availableKeys = this.keysCache![dataOwner.id!]\n    if (!availableKeys) throw new Error(`Data owner ${dataOwner.id} is not part of the hierarchy of the current data owner ${this.selfId}`)\n    const availableVerifiedKeysFp = new Set(Object.entries(availableKeys).flatMap(([fp, info]) => (info.isVerified || info.isDevice ? [fp] : [])))\n    const otherVerifiedFp = new Set(\n      Object.entries(await this.icureStorage.loadSelfVerifiedKeys(dataOwner.id!)).flatMap(([fp, verified]) => (verified ? [fp] : []))\n    )\n    return Array.from([\n      ...this.dataOwnerApi.getHexPublicKeysWithSha1Of(dataOwner),\n      ...this.dataOwnerApi.getHexPublicKeysWithSha256Of(dataOwner),\n    ]).filter((key) => {\n      const fp = fingerprintV1(key)\n      return availableVerifiedKeysFp.has(fp) || otherVerifiedFp.has(fp)\n    })\n  }\n\n  /**\n   * @internal This method is intended for internal use only and may be changed without notice.\n   * Get all key pairs for the current data owner and his parents. These keys should be used only for decryption as they may have not been verified.\n   * @return all key pairs available for decryption.\n   */\n  getDecryptionKeys(): { [fingerprint: string]: KeyPair<CryptoKey> } {\n    this.ensureInitialised()\n    return Object.values(this.keysCache!).reduce((acc, curr) => {\n      return {\n        ...acc,\n        ...this.plainKeysByFingerprint(curr),\n      }\n    }, {} as { [fp: string]: KeyPair<CryptoKey> })\n  }\n\n  private async doLoadKeys(\n    keyRecovererAndVerifier: KeyRecovererAndVerifier,\n    currentOwnerKeyGenerator: CurrentOwnerKeyGenerator\n  ): Promise<{ pair: KeyPair<CryptoKey>; fingerprint: string } | undefined> {\n    // Load all keys for self from key store\n    const hierarchy = (await this.dataOwnerApi.getCurrentDataOwnerHierarchy()).map(({ dataOwner, type }) => {\n      if (dataOwner.publicKey == '') {\n        if (Object.entries(dataOwner.hcPartyKeys ?? {}).length > 0)\n          throw new Error(`Data owner ${dataOwner.id} has \"\" as public key but has non-empty hcPartyKeys`)\n        delete dataOwner.publicKey\n      }\n      return {\n        dataOwner,\n        type,\n      } as DataOwnerWithType\n    })\n    const self = hierarchy[hierarchy.length - 1]\n    this.selfId = self.dataOwner.id!\n    const keysData = []\n    const toInit = this.initialiseParentKeys ? hierarchy : [self]\n    for (let i = 0; i < toInit.length; i++) {\n      const dowt = toInit[i]\n      let parentKeysForRecovery: { [keyFp: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } } = {}\n      for (let j = 0; j < i; j++) {\n        parentKeysForRecovery = {\n          ...keysData[j].availableKeys,\n          ...parentKeysForRecovery,\n        }\n      }\n      const availableKeys = await this.loadAndRecoverKeysFor(dowt, parentKeysForRecovery)\n      const availableKeysFpSet = new Set(Object.keys(availableKeys))\n      const verifiedKeysMap = await this.icureStorage.loadSelfVerifiedKeys(dowt.dataOwner.id!)\n      const allPublicKeys = new Set([\n        ...this.dataOwnerApi.getHexPublicKeysWithSha1Of(dowt.dataOwner),\n        ...this.dataOwnerApi.getHexPublicKeysWithSha256Of(dowt.dataOwner),\n      ])\n      const unavailableKeys = Array.from(allPublicKeys).flatMap((key) => {\n        return availableKeysFpSet.has(fingerprintV1(key)) ? [] : [key]\n      })\n      const unknownKeys = Array.from(allPublicKeys).filter(\n        (x) => !(fingerprintV1(x) in verifiedKeysMap) && !(availableKeys?.[fingerprintV1(x)]?.isDevice === true)\n      )\n      keysData.push({ dowt, availableKeys, unavailableKeys, unknownKeys })\n    }\n    const recoveryInfo = keysData.map(({ dowt, unavailableKeys, unknownKeys }) => ({ dataOwner: dowt, unavailableKeys, unknownKeys }))\n    const recoveryAndVerificationResult = recoveryInfo.some((x) => x.unavailableKeys.length > 0 || x.unknownKeys.length > 0)\n      ? await keyRecovererAndVerifier(recoveryInfo)\n      : await nothingKeyRecovererAndVerifier(recoveryInfo)\n    const keysCache: { [dataOwnerId: string]: { [fp: string]: KeyPairData } } = {}\n    for (let i = 0; i < keysData.length; i++) {\n      const keyData = keysData[i]\n      const currAuthenticity = this.ensureFingerprintKeys(recoveryAndVerificationResult[keyData.dowt.dataOwner.id!].keyAuthenticity)\n      const currExternallyRecovered = this.ensureFingerprintKeys(recoveryAndVerificationResult[keyData.dowt.dataOwner.id!].recoveredKeys)\n      for (const [fp, keyPair] of Object.entries(currExternallyRecovered)) {\n        const jwkPair = await this.primitives.RSA.exportKeys(keyPair, 'jwk', 'jwk')\n        await this.icureStorage.saveKey(keyData.dowt.dataOwner.id!, fp, jwkPair, true)\n      }\n      const updatedVerifiedMap = await this.icureStorage.saveSelfVerifiedKeys(\n        keyData.dowt.dataOwner.id!,\n        [...Object.keys(currAuthenticity), ...Object.keys(currExternallyRecovered)].reduce(\n          (acc, currFp) => ({\n            ...acc,\n            [currFp]: currFp in currExternallyRecovered || currAuthenticity[currFp],\n          }),\n          {}\n        )\n      )\n      const keysWithExternallyRecovered = {\n        ...keyData.availableKeys,\n        ...Object.fromEntries(Object.entries(currExternallyRecovered).map(([k, v]) => [k, { pair: v, isDevice: false }])),\n      }\n      let parentKeysForRecovery: { [p: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } } = {}\n      for (let j = 0; j < i; j++) {\n        parentKeysForRecovery = {\n          ...keysCache[keysData[j].dowt.dataOwner.id!],\n          ...parentKeysForRecovery,\n        }\n      }\n      const additionallyRecovered = await this.recoverAndCacheKeys(\n        keyData.dowt,\n        this.plainKeysByFingerprint({\n          ...keysWithExternallyRecovered,\n          ...parentKeysForRecovery,\n        })\n      )\n      const keys = {\n        ...keysWithExternallyRecovered,\n        ...Object.fromEntries(Object.entries(additionallyRecovered).map(([k, v]) => [k, { pair: v, isDevice: false }])),\n      }\n      keysCache[keyData.dowt.dataOwner.id!] = this.verifyKeys(keys, updatedVerifiedMap)\n    }\n    if (Object.entries(keysCache).some(([ownerId, data]) => ownerId !== self.dataOwner.id && !this.hasVerifiedKey(data))) {\n      throw new Error('Some parent hcps have no verified keys: impossible to generate locally a new key for a parent.')\n    } else if (this.hasVerifiedKey(keysCache[self.dataOwner.id!])) {\n      this.keysCache = keysCache\n      this.selfLegacyPublicKey = self.dataOwner.publicKey\n      return undefined\n    } else {\n      const whatToDo = await currentOwnerKeyGenerator(self)\n      if (whatToDo === false) {\n        throw new Error(`No verified key found for ${self.dataOwner.id} and settings do not allow creation of a new key.`)\n      } else if (typeof whatToDo == 'string' && whatToDo == 'keyless') {\n        /*\n         * Currently non-anonymous data owners aren't allowed to use keyless mode.\n         * Today the delegator is not emitted in views and is not used for access control: an entity without delegation\n         * self->self but only a delegation self->other would not be searchable by nor accessible to an explicit data\n         * owner.\n         * This is not a problem for anonymous data owner, since search and access control use the secure delegation\n         * key.\n         * Since keyless api was designed for use by patients this is not an issue at the time, but if in future we need\n         * to support keyless api for explicit data owner before updating views we can add stubs to legacy delegations.\n         */\n        if (!this.selfIsAnonymous) throw new Error('Keyless api mode is available only for anonymous data owners.')\n        this.keysCache = keysCache\n        return undefined\n      } else {\n        const updateInfo = await this.createAndSaveNewKeyPair(whatToDo === true ? undefined : whatToDo, self)\n        // self may be outdated now\n        this.selfLegacyPublicKey = updateInfo.updatedSelf.stub.publicKey\n        this.keysCache = {\n          ...keysCache,\n          [self.dataOwner.id!]: {\n            ...keysCache[self.dataOwner.id!],\n            [updateInfo.publicKeyFingerprint]: { pair: updateInfo.keyPair, isDevice: true, isVerified: true },\n          },\n        }\n        return { pair: updateInfo.keyPair, fingerprint: updateInfo.publicKeyFingerprint }\n      }\n    }\n  }\n\n  private async createAndSaveNewKeyPair(\n    importedKeyPair: undefined | KeyPair<CryptoKey>,\n    selfDataOwner: DataOwnerWithType\n  ): Promise<{ publicKeyFingerprint: string; keyPair: KeyPair<CryptoKey>; updatedSelf: CryptoActorStubWithType }> {\n    const keyPair = importedKeyPair ?? (await this.primitives.RSA.generateKeyPair(ShaVersion.Sha256))\n    const publicKeyHex = ua2hex(await this.primitives.RSA.exportKey(keyPair.publicKey, 'spki'))\n    const jwKey = await this.primitives.RSA.exportKey(keyPair.publicKey, 'jwk')\n    if (jwKey.alg !== 'RSA-OAEP-256') {\n      throw new Error('Only keys generated with SHA-256 are currently supported')\n    }\n    const publicKeyFingerprint = fingerprintV1(publicKeyHex)\n    await this.icureStorage.saveKey(\n      selfDataOwner.dataOwner.id!,\n      publicKeyFingerprint,\n      await this.primitives.RSA.exportKeys(keyPair, 'jwk', 'jwk'),\n      true\n    )\n    await this.icureStorage.saveSelfVerifiedKeys(selfDataOwner.dataOwner.id!, { [publicKeyFingerprint]: true })\n    const updatedSelf = await this.dataOwnerApi.modifyCryptoActorStub({\n      stub: {\n        ...CryptoActorStub.fromDataOwner(selfDataOwner.dataOwner),\n        publicKeysForOaepWithSha256: [...(selfDataOwner.dataOwner.publicKeysForOaepWithSha256 ?? []), publicKeyHex],\n      },\n      type: selfDataOwner.type,\n    })\n    return { publicKeyFingerprint, keyPair: keyPair, updatedSelf }\n  }\n\n  private async loadStoredKeys(\n    dataOwner: DataOwnerWithType,\n    pubKeysFingerprints: { [key: string]: string[] }\n  ): Promise<{ [pubKeyFingerprint: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } }> {\n    const pubKeysFingerprintsWithVersion = Object.entries(pubKeysFingerprints).flatMap(([shaVersion, fps]) => {\n      return fps.map((fp) => [shaVersion, fp] as [ShaVersion, string])\n    })\n    return await pubKeysFingerprintsWithVersion.reduce(async (acc, [shaVersion, currentFingerprint]) => {\n      const awaitedAcc = await acc\n      let loadedPair: { pair: KeyPair<CryptoKey>; isDevice: boolean } | undefined = undefined\n      try {\n        const storedKeypair = await this.icureStorage.loadKey(dataOwner.dataOwner.id!, currentFingerprint, dataOwner.dataOwner.publicKey)\n        if (!!storedKeypair) {\n          const importedKey = await this.primitives.RSA.importKeyPair(\n            'jwk',\n            storedKeypair.pair.privateKey,\n            'jwk',\n            storedKeypair.pair.publicKey,\n            shaVersion\n          )\n          loadedPair = { pair: importedKey, isDevice: storedKeypair.isDevice }\n        }\n      } catch (e) {\n        console.warn('Error while loading keypair', currentFingerprint, e)\n      }\n      return loadedPair\n        ? {\n            ...awaitedAcc,\n            [currentFingerprint]: loadedPair,\n          }\n        : awaitedAcc\n    }, Promise.resolve({} as { [pubKeyFingerprint: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } }))\n  }\n\n  private verifyKeys(\n    keys: { [pubKeyFingerprint: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } },\n    verifiedKeysMap: { [pubKeyFingerprint: string]: boolean }\n  ): { [pubKeyFingerprint: string]: KeyPairData } {\n    return Object.fromEntries(\n      Object.entries(keys).map(\n        ([fp, keyData]) => [fp, { ...keyData, isVerified: keyData.isDevice || verifiedKeysMap?.[fp] === true }] as [string, KeyPairData]\n      )\n    )\n  }\n\n  private plainKeysByFingerprint(richKeys: { [pubKeyFingerprint: string]: { pair: KeyPair<CryptoKey> } }): {\n    [pubKeyFingerprint: string]: KeyPair<CryptoKey>\n  } {\n    return Object.fromEntries(Object.entries(richKeys).map(([fp, keyData]) => [fp, keyData.pair]))\n  }\n\n  private ensureInitialised() {\n    if (!this.keysCache) throw new Error('Key manager was not properly initialised')\n  }\n\n  private async recoverAndCacheKeys(\n    dataOwner: DataOwnerWithType,\n    availableKeys: { [pubKeyFingerprint: string]: KeyPair<CryptoKey> }\n  ): Promise<{ [p: string]: KeyPair<CryptoKey> }> {\n    const recoveredKeys = await this.keyRecovery.recoverKeys(dataOwner, availableKeys)\n    for (const [fp, pair] of Object.entries(recoveredKeys)) {\n      await this.icureStorage.saveKey(dataOwner.dataOwner.id!, fp, await this.primitives.RSA.exportKeys(pair, 'jwk', 'jwk'), false)\n    }\n    return recoveredKeys\n  }\n\n  private async loadAndRecoverKeysFor(\n    dataOwner: DataOwnerWithType,\n    ancestorsKeys: { [keyFp: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } }\n  ): Promise<{ [keyFp: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } }> {\n    const pubKeysFingerprints = {\n      'sha-1': [...new Set(this.dataOwnerApi.getHexPublicKeysWithSha1Of(dataOwner.dataOwner))].map((x) => fingerprintV1(x)),\n      'sha-256': [...new Set(this.dataOwnerApi.getHexPublicKeysWithSha256Of(dataOwner.dataOwner))].map((x) => fingerprintV1(x)),\n    }\n    const loadedKeys =\n      pubKeysFingerprints['sha-1'].length + pubKeysFingerprints['sha-256'].length > 0 ? await this.loadStoredKeys(dataOwner, pubKeysFingerprints) : {}\n    const loadedKeysFingerprints = Object.keys(loadedKeys)\n    if (\n      loadedKeysFingerprints.length !== pubKeysFingerprints['sha-1'].length + pubKeysFingerprints['sha-256'].length &&\n      (loadedKeysFingerprints.length > 0 || Object.keys(ancestorsKeys).length > 0)\n    ) {\n      const recoveredKeys = await this.recoverAndCacheKeys(dataOwner, this.plainKeysByFingerprint({ ...loadedKeys, ...ancestorsKeys }))\n      for (const [fp, pair] of Object.entries(recoveredKeys)) {\n        loadedKeys[fp] = { pair, isDevice: false }\n      }\n    }\n    return loadedKeys\n  }\n\n  private ensureFingerprintKeys<T>(obj: { [shouldBeFingerprint: string]: T }): { [definitelyFingerprint: string]: T } {\n    return Object.fromEntries(Object.entries(obj).map(([k, v]) => [fingerprintV1(k), v]))\n  }\n\n  private hasVerifiedKey(keysData: { [fp: string]: KeyPairData }) {\n    return Object.values(keysData).some((x) => x.isVerified || x.isDevice)\n  }\n}\n"]}
+{"version":3,"file":"UserEncryptionKeysManager.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/UserEncryptionKeysManager.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,+BAA2C;AAC3C,oCAAiC;AAEjC,mCAAuC;AAKvC,yEAA8F;AAgB9F,MAAM,8BAA8B,GAA4B,CAAC,CAAC,EAAE,EAAE,CACpE,OAAO,CAAC,OAAO,CACb,CAAC,CAAC,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,iCAAM,GAAG,KAAE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAG,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,IAAG,EAC3G,EAKC,CACF,CACF,CAAA;AAGH;;GAEG;AACH,MAAa,yBAAyB;IAKpC,YACmB,UAA4B,EAC5B,YAA8B,EAC9B,YAAgC,EAChC,WAAwB,EACxB,UAA4B,EAC5B,oBAA6B,EAC7B,gBAAkC,EAClC,eAAwB;QAPxB,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,iBAAY,GAAZ,YAAY,CAAoB;QAChC,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAkB;QAC5B,yBAAoB,GAApB,oBAAoB,CAAS;QAC7B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,oBAAe,GAAf,eAAe,CAAS;QAVnC,cAAS,GAA2F,SAAS,CAAA;IAWlH,CAAC;IAEJ;;;;;;;OAOG;IACG,wCAAwC;;YAU5C,IAAI,CAAC,iBAAiB,EAAE,CAAA;YACxB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAA;YAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC7I,MAAM,kBAAkB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YACnE,OAAO;gBACL,IAAI,EAAE;oBACJ,WAAW,EAAE,MAAM;oBACnB,IAAI,EAAE,QAAQ;iBACf;gBACD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACtC,WAAW,EAAE,CAAC;oBACd,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;iBAC9H,CAAC,CAAC;aACJ,CAAA;QACH,CAAC;KAAA;IAED;;;;;;;OAOG;IACG,oCAAoC,CAAC,YAAqB;;YAC9D,IAAI,CAAC,iBAAiB,EAAE,CAAA;YACxB,IAAI,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC,MAAO,CAAC,CAAC,CAAA;YAC/D,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAA;YAChF,CAAC;YACD,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAO,OAAO,EAAE,EAAE,gDAAC,OAAA,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA,GAAA,CAAC,CAAC,CAAA;QAC5I,CAAC;KAAA;IAED;;;;;OAKG;IACG,6CAA6C;;YACjD,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC;iBAC3B,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;iBAC1D,GAAG,CAAC,CAAO,WAAW,EAAE,EAAE,gDAAC,OAAA,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA,GAAA,CAAC,CAC/G,CAAA;QACH,CAAC;KAAA;IAED;;;;OAIG;IACH,wBAAwB,CAAC,WAAmB;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAA;QAC3F,IAAI,aAAa;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAA;QACxD,IAAI,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QAC5D,OAAO,SAAS,CAAA;IAClB,CAAC;IAED;;;;;;OAMG;IACG,cAAc;;YAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,EACnG,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CACtE,CAAA;YACD,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAChG,CAAC;KAAA;IAED;;;;;OAKG;IACG,UAAU;;YACd,MAAM,IAAI,CAAC,UAAU,CAAC,8BAA8B,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAA;YAChH,CAAC,CAAC,CAAA;QACJ,CAAC;KAAA;IAED;;;;;;;;;OASG;IACH,mBAAmB;QACjB,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC,MAAO,CAAC,CAAA;QAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAE/C,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,IAAI,IAAA,qBAAa,EAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QACvF,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACrE,MAAM,WAAW,GAAG,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,UAAU,KAAI,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAE5H,SAAS,eAAe,CAAC,cAA0D;YACjF,OAAO,cAAc;iBAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,WAAW,CAAC;iBACtE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjB,oHAAoH;gBACpH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACpC,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC9D,CAAC;QACD,OAAO,CAAC,GAAG,WAAW,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IAC7I,CAAC;IAED;;;;OAIG;IACG,wBAAwB,CAAC,SAA0B;;YACvD,IAAI,CAAC,iBAAiB,EAAE,CAAA;YACxB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAU,CAAC,SAAS,CAAC,EAAG,CAAC,CAAA;YACpD,IAAI,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,2DAA2D,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;YACvI,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAC9I,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAChI,CAAA;YACD,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,GAAG,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,SAAS,CAAC;gBAC1D,GAAG,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,SAAS,CAAC;aAC7D,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;gBAChB,MAAM,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAA;gBAC7B,OAAO,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACnE,CAAC,CAAC,CAAA;QACJ,CAAC;KAAA;IAED;;;;OAIG;IACH,iBAAiB;QACf,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACzD,uCACK,GAAG,GACH,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EACrC;QACH,CAAC,EAAE,EAA0C,CAAC,CAAA;IAChD,CAAC;IAEa,UAAU,CACtB,uBAAgD,EAChD,wBAAkD;;YAElD,wCAAwC;YACxC,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,4BAA4B,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;;gBACrG,IAAI,SAAS,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;oBAC9B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAA,SAAS,CAAC,WAAW,mCAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;wBACxD,MAAM,IAAI,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,qDAAqD,CAAC,CAAA;oBAClG,OAAO,SAAS,CAAC,SAAS,CAAA;gBAC5B,CAAC;gBACD,OAAO;oBACL,SAAS;oBACT,IAAI;iBACgB,CAAA;YACxB,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAG,CAAA;YAChC,MAAM,QAAQ,GAAG,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;gBACtB,IAAI,qBAAqB,GAAyE,EAAE,CAAA;gBACpG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3B,qBAAqB,mCAChB,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,GACzB,qBAAqB,CACzB,CAAA;gBACH,CAAC;gBACD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;gBACnF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAA;gBAC9D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,CAAA;gBACxF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;oBAC5B,GAAG,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC/D,GAAG,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;iBAClE,CAAC,CAAA;gBACF,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;oBAChE,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;gBAChE,CAAC,CAAC,CAAA;gBACF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAG,IAAA,qBAAa,EAAC,CAAC,CAAC,CAAC,0CAAE,QAAQ,MAAK,IAAI,CAAC,CAAA,EAAA,CACzG,CAAA;gBACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA;YAClI,MAAM,6BAA6B,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;gBACtH,CAAC,CAAC,MAAM,uBAAuB,CAAC,YAAY,CAAC;gBAC7C,CAAC,CAAC,MAAM,8BAA8B,CAAC,YAAY,CAAC,CAAA;YACtD,MAAM,SAAS,GAA6D,EAAE,CAAA;YAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;gBAC3B,MAAM,gBAAgB,GAAG,IAAI,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,CAAC,eAAe,CAAC,CAAA;gBAC9H,MAAM,uBAAuB,GAAG,IAAI,CAAC,qBAAqB,CAAC,6BAA6B,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,CAAC,aAAa,CAAC,CAAA;gBACnI,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;oBACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;oBAC3E,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,EAAE,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;gBAC3I,CAAC;gBACD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CACrE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,EAC1B,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAChF,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,iCACZ,GAAG,KACN,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IACjI,EACF,EAAE,CACH,CACF,CAAA;gBACD,MAAM,2BAA2B,mCAC5B,OAAO,CAAC,aAAa,GACrB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAClH,CAAA;gBACD,IAAI,qBAAqB,GAAqE,EAAE,CAAA;gBAChG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3B,qBAAqB,mCAChB,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,GACzC,qBAAqB,CACzB,CAAA;gBACH,CAAC;gBACD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAC1D,OAAO,CAAC,IAAI,EACZ,IAAI,CAAC,sBAAsB,iCACtB,2BAA2B,GAC3B,qBAAqB,EACxB,CACH,CAAA;gBACD,MAAM,IAAI,mCACL,2BAA2B,GAC3B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAChH,CAAA;gBACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAA;YACnF,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACrH,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;YACnH,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;gBAC1B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAA;gBACnD,OAAO,SAAS,CAAA;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAA;gBACrD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,EAAE,mDAAmD,CAAC,CAAA;gBACpH,CAAC;qBAAM,IAAI,OAAO,QAAQ,IAAI,QAAQ,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAChE;;;;;;;;;uBASG;oBACH,IAAI,CAAC,IAAI,CAAC,eAAe;wBAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;oBAC3G,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;oBAC1B,OAAO,SAAS,CAAA;gBAClB,CAAC;qBAAM,CAAC;oBACN,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;oBACrG,2BAA2B;oBAC3B,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAA;oBAChE,IAAI,CAAC,SAAS,mCACT,SAAS,KACZ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,kCACf,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAG,CAAC,KAChC,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAEpG,CAAA;oBACD,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,oBAAoB,EAAE,CAAA;gBACnF,CAAC;YACH,CAAC;QACH,CAAC;KAAA;IAEa,uBAAuB,CACnC,eAA+C,EAC/C,aAAgC;;;YAEhC,MAAM,OAAO,GAAG,eAAe,aAAf,eAAe,cAAf,eAAe,GAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,gBAAU,CAAC,MAAM,CAAC,CAAC,CAAA;YACjG,MAAM,YAAY,GAAG,IAAA,cAAM,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YAC3F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC3E,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;YAC7E,CAAC;YACD,MAAM,oBAAoB,GAAG,IAAA,qBAAa,EAAC,YAAY,CAAC,CAAA;YACxD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAC7B,aAAa,CAAC,SAAS,CAAC,EAAG,EAC3B,oBAAoB,EACpB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,EAC3D,IAAI,CACL,CAAA;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3G,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC;gBAChE,IAAI,kCACC,iCAAe,CAAC,aAAa,CAAC,aAAa,CAAC,SAAS,CAAC,KACzD,2BAA2B,EAAE,CAAC,GAAG,CAAC,MAAA,aAAa,CAAC,SAAS,CAAC,2BAA2B,mCAAI,EAAE,CAAC,EAAE,YAAY,CAAC,GAC5G;gBACD,IAAI,EAAE,aAAa,CAAC,IAAI;aACzB,CAAC,CAAA;YACF,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;QAChE,CAAC;KAAA;IAEa,cAAc,CAC1B,SAA4B,EAC5B,mBAAgD;;YAEhD,MAAM,8BAA8B,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE;gBACvG,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAyB,CAAC,CAAA;YAClE,CAAC,CAAC,CAAA;YACF,OAAO,MAAM,8BAA8B,CAAC,MAAM,CAAC,YAA8C,EAAE,iDAAzC,GAAG,EAAE,CAAC,UAAU,EAAE,kBAAkB,CAAC;gBAC7F,MAAM,UAAU,GAAG,MAAM,GAAG,CAAA;gBAC5B,IAAI,UAAU,GAAgE,SAAS,CAAA;gBACvF,IAAI,CAAC;oBACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAG,EAAE,kBAAkB,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;oBACjI,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;wBACpB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CACzD,KAAK,EACL,aAAa,CAAC,IAAI,CAAC,UAAU,EAC7B,KAAK,EACL,aAAa,CAAC,IAAI,CAAC,SAAS,EAC5B,UAAU,CACX,CAAA;wBACD,UAAU,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAA;oBACtE,CAAC;gBACH,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAA;gBACpE,CAAC;gBACD,OAAO,UAAU;oBACf,CAAC,iCACM,UAAU,KACb,CAAC,kBAAkB,CAAC,EAAE,UAAU,IAEpC,CAAC,CAAC,UAAU,CAAA;YAChB,CAAC,CAAA,EAAE,OAAO,CAAC,OAAO,CAAC,EAAsF,CAAC,CAAC,CAAA;QAC7G,CAAC;KAAA;IAEO,UAAU,CAChB,IAAsF,EACtF,eAAyD;QAEzD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CACtB,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,kCAAO,OAAO,KAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAG,EAAE,CAAC,MAAK,IAAI,IAA4B,CACjI,CACF,CAAA;IACH,CAAC;IAEO,sBAAsB,CAAC,QAAuE;QAGpG,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChG,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAClF,CAAC;IAEa,mBAAmB,CAC/B,SAA4B,EAC5B,aAAkE;;YAElE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;YAClF,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAG,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;YAC/H,CAAC;YACD,OAAO,aAAa,CAAA;QACtB,CAAC;KAAA;IAEa,qBAAqB,CACjC,SAA4B,EAC5B,aAAmF;;YAEnF,MAAM,mBAAmB,GAAG;gBAC1B,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,CAAC;gBACrH,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,CAAC;aAC1H,CAAA;YACD,MAAM,UAAU,GACd,mBAAmB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAClJ,MAAM,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACtD,IACE,sBAAsB,CAAC,MAAM,KAAK,mBAAmB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,MAAM;gBAC7G,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAC5E,CAAC;gBACD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,sBAAsB,iCAAM,UAAU,GAAK,aAAa,EAAG,CAAC,CAAA;gBACjI,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;oBACvD,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;gBAC5C,CAAC;YACH,CAAC;YACD,OAAO,UAAU,CAAA;QACnB,CAAC;KAAA;IAEO,qBAAqB,CAAI,GAAyC;QACxE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACvF,CAAC;IAEO,cAAc,CAAC,QAAuC;QAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAA;IACxE,CAAC;CACF;AA7bD,8DA6bC","sourcesContent":["import { DataOwnerOrStub, IccDataOwnerXApi } from '../icc-data-owner-x-api'\nimport { KeyPair, ShaVersion } from './RSA'\nimport { ua2hex } from '../utils'\nimport { IcureStorageFacade } from '../storage/IcureStorageFacade'\nimport { fingerprintV1 } from './utils'\nimport { CryptoPrimitives } from './CryptoPrimitives'\nimport { KeyRecovery } from './KeyRecovery'\nimport { CryptoStrategies } from './CryptoStrategies'\nimport { DataOwnerWithType } from '../../icc-api/model/DataOwnerWithType'\nimport { CryptoActorStub, CryptoActorStubWithType } from '../../icc-api/model/CryptoActorStub'\nimport { KeyPairRecoverer } from './KeyPairRecoverer'\n\ntype KeyPairData = { pair: KeyPair<CryptoKey>; isVerified: boolean; isDevice: boolean }\ntype KeyRecovererAndVerifier = (\n  keysData: {\n    dataOwner: DataOwnerWithType\n    unknownKeys: string[]\n    unavailableKeys: string[]\n  }[]\n) => Promise<{\n  [dataOwnerId: string]: {\n    recoveredKeys: { [keyPairFingerprint: string]: KeyPair<CryptoKey> }\n    keyAuthenticity: { [keyPairFingerprint: string]: boolean }\n  }\n}>\nconst nothingKeyRecovererAndVerifier: KeyRecovererAndVerifier = (x) =>\n  Promise.resolve(\n    x.reduce(\n      (acc, { dataOwner }) => ({ ...acc, [dataOwner.dataOwner.id!]: { recoveredKeys: {}, keyAuthenticity: {} } }),\n      {} as {\n        [dataOwnerId: string]: {\n          recoveredKeys: { [keyPairFingerprint: string]: KeyPair<CryptoKey> }\n          keyAuthenticity: { [keyPairFingerprint: string]: boolean }\n        }\n      }\n    )\n  )\ntype CurrentOwnerKeyGenerator = (self: DataOwnerWithType) => Promise<KeyPair<CryptoKey> | boolean | 'keyless'>\n\n/**\n * Allows to manage public and private keys for the current user and his parent hierarchy.\n */\nexport class UserEncryptionKeysManager {\n  private selfId: string | undefined\n  private selfLegacyPublicKey: string | undefined\n  private keysCache: { [selfOrParentId: string]: { [pubKeyFingerprint: string]: KeyPairData } } | undefined = undefined\n\n  constructor(\n    private readonly primitives: CryptoPrimitives,\n    private readonly dataOwnerApi: IccDataOwnerXApi,\n    private readonly icureStorage: IcureStorageFacade,\n    private readonly keyRecovery: KeyRecovery,\n    private readonly strategies: CryptoStrategies,\n    private readonly initialiseParentKeys: boolean,\n    private readonly keypairRecoverer: KeyPairRecoverer,\n    private readonly selfIsAnonymous: boolean\n  ) {}\n\n  /**\n   * @internal\n   * Get all key pairs available for the current data owner and his parents.\n   * @return an object with:\n   * - `self` an object containing the current data owner id and the list of key pairs available for the current data owner with verification details.\n   * - `parents` the list of parents to the current data owner with the list of key pairs available for each parent. The list is ordered from the\n   *   topmost ancestor (at index 0) to the direct parent of the current data owner (at the last index, may be 0).\n   */\n  async getCurrentUserHierarchyAvailableKeypairs(): Promise<{\n    self: {\n      dataOwnerId: string\n      keys: { pair: KeyPair<CryptoKey>; verified: boolean }[]\n    }\n    parents: {\n      dataOwnerId: string\n      keys: { pair: KeyPair<CryptoKey>; verified: boolean }[]\n    }[]\n  }> {\n    this.ensureInitialised()\n    const hierarchy = await this.dataOwnerApi.getCurrentDataOwnerHierarchyIds()\n    const selfId = hierarchy[hierarchy.length - 1]\n    const selfKeys = Object.values(this.keysCache![selfId]).map(({ pair, isVerified, isDevice }) => ({ pair, verified: isVerified || isDevice }))\n    const remainingHierarchy = hierarchy.slice(0, hierarchy.length - 1)\n    return {\n      self: {\n        dataOwnerId: selfId,\n        keys: selfKeys,\n      },\n      parents: remainingHierarchy.map((x) => ({\n        dataOwnerId: x,\n        keys: Object.values(this.keysCache![x]).map(({ pair, isVerified, isDevice }) => ({ pair, verified: isVerified || isDevice })),\n      })),\n    }\n  }\n\n  /**\n   * Get the public keys of available key pairs for the current user in hex-encoded spki representation (uses cached keys: no request is done to the\n   * server).\n   * By setting {@link verifiedOnly} to true only the public keys for verified key pairs will be returned: these will include only key pairs created\n   * on this device or which have been verified using {@link CryptoStrategies} on this device.\n   * @param verifiedOnly if true only the verified public keys will be returned.\n   * @return the spki representation of public keys of available keypairs for the current user.\n   */\n  async getCurrentUserAvailablePublicKeysHex(verifiedOnly: boolean): Promise<string[]> {\n    this.ensureInitialised()\n    let selectedData = Object.values(this.keysCache![this.selfId!])\n    if (verifiedOnly) {\n      selectedData = selectedData.filter((data) => data.isVerified || data.isDevice)\n    }\n    return await Promise.all(selectedData.map(async (keyData) => ua2hex(await this.primitives.RSA.exportKey(keyData.pair.publicKey, 'spki'))))\n  }\n\n  /**\n   * Get the public keys of available key pairs for the current user and his parents in hex-encoded spki representation (uses cached keys: no request\n   * is done to the server).\n   * Note that this will also include unverified keys.\n   * @return the spki representation of public keys of available keypairs for the current user.\n   */\n  async getCurrentUserHierarchyAvailablePublicKeysHex(): Promise<string[]> {\n    return await Promise.all(\n      Object.values(this.keysCache!)\n        .flatMap((pairsForParent) => Object.values(pairsForParent))\n        .map(async (keyPairData) => ua2hex(await this.primitives.RSA.exportKey(keyPairData.pair.publicKey, 'spki')))\n    )\n  }\n\n  /**\n   * Get a key pair with the provided fingerprint if present.\n   * @param fingerprint a key-pair/public-key fingerprint\n   * @return the pair associated to the fingerprint and a boolean indicating if the pair is verified, if present, else undefined\n   */\n  getKeyPairForFingerprint(fingerprint: string): { pair: KeyPair<CryptoKey>; verified: boolean } | undefined {\n    const foundVerified = this.getSelfVerifiedKeys().find((x) => x.fingerprint === fingerprint)\n    if (foundVerified) return { pair: foundVerified.pair, verified: true }\n    const foundOther = this.getDecryptionKeys()[fingerprint]\n    if (foundOther) return { pair: foundOther, verified: false }\n    return undefined\n  }\n\n  /**\n   * @internal This method is intended for internal use only and may be changed without notice.\n   * Initializes all keys for the current data owner. This method needs to be called before any other method of this class can be used.\n   * @throws if the current user is not a data owner, or if there is no key and no new key could be created according to this manager crypt\n   * strategies.\n   * @return if a new key was created during initialisation the newly created key, else undefined.\n   */\n  async initialiseKeys(): Promise<{ newKeyPair: KeyPair<CryptoKey>; newKeyFingerprint: string } | undefined> {\n    const newKey = await this.doLoadKeys(\n      (x) => this.strategies.recoverAndVerifySelfHierarchyKeys(x, this.primitives, this.keypairRecoverer),\n      (x) => this.strategies.generateNewKeyForDataOwner(x, this.primitives)\n    )\n    return newKey ? { newKeyPair: newKey.pair, newKeyFingerprint: newKey.fingerprint } : undefined\n  }\n\n  /**\n   * @internal This method is intended for internal use only and may be changed without notice.\n   * Forces to reload keys for the current data owner. This could be useful if the data owner has logged in from another device in order to update the\n   * transfer keys.\n   * This method will complete only after keys have been reloaded successfully.\n   */\n  async reloadKeys(): Promise<void> {\n    await this.doLoadKeys(nothingKeyRecovererAndVerifier, (x) => {\n      throw new Error(\"Can't create new keys at reload time: it should have already been created on initialisation\")\n    })\n  }\n\n  /**\n   * @internal This method is intended for internal use only and may be changed without notice.\n   * Get all verified key pairs for the current data owner which can safely be used for encryption. This includes all key pairs created on the current\n   * device and all recovered key pairs which have been verified.\n   * The keys returned by this method will be in the following order:\n   * 1. Legacy key pair if it is verified\n   * 2. All device key pais, in alphabetical order according to the fingerprint\n   * 3. Other verified key pairs, in alphabetical order according to the fingerprint\n   * @return all verified keys, in order.\n   */\n  getSelfVerifiedKeys(): { fingerprint: string; pair: KeyPair<CryptoKey> }[] {\n    this.ensureInitialised()\n    const selfKeys = this.keysCache![this.selfId!]\n    const allKeysEntries = Object.entries(selfKeys)\n\n    const legacyKeyFp = this.selfLegacyPublicKey && fingerprintV1(this.selfLegacyPublicKey)\n    const legacyKeyData = legacyKeyFp ? selfKeys[legacyKeyFp] : undefined\n    const legacyEntry = legacyKeyData?.isVerified && legacyKeyFp ? [{ fingerprint: legacyKeyFp, pair: legacyKeyData.pair }] : []\n\n    function filteredEntries(filterFunction: (fp: string, data: KeyPairData) => boolean) {\n      return allKeysEntries\n        .filter(([fp, data]) => filterFunction(fp, data) && fp !== legacyKeyFp)\n        .sort(([a], [b]) => {\n          // need to make sure that the comparison is independent of the locale, but the actual ordering is not that important\n          return a == b ? 0 : a > b ? 1 : -1\n        })\n        .map(([fingerprint, { pair }]) => ({ fingerprint, pair }))\n    }\n    return [...legacyEntry, ...filteredEntries((_, data) => data.isDevice), ...filteredEntries((_, data) => !data.isDevice && data.isVerified)]\n  }\n\n  /**\n   * Get all verified keys for a member of the current data owner hierarchy in no particular order.\n   * @param dataOwner the current data owner or a member of his hierarchy.\n   * @throws if the provided data owner is not part of the current data owner hierarchy\n   */\n  async getVerifiedPublicKeysFor(dataOwner: DataOwnerOrStub): Promise<string[]> {\n    this.ensureInitialised()\n    const availableKeys = this.keysCache![dataOwner.id!]\n    if (!availableKeys) throw new Error(`Data owner ${dataOwner.id} is not part of the hierarchy of the current data owner ${this.selfId}`)\n    const availableVerifiedKeysFp = new Set(Object.entries(availableKeys).flatMap(([fp, info]) => (info.isVerified || info.isDevice ? [fp] : [])))\n    const otherVerifiedFp = new Set(\n      Object.entries(await this.icureStorage.loadSelfVerifiedKeys(dataOwner.id!)).flatMap(([fp, verified]) => (verified ? [fp] : []))\n    )\n    return Array.from([\n      ...this.dataOwnerApi.getHexPublicKeysWithSha1Of(dataOwner),\n      ...this.dataOwnerApi.getHexPublicKeysWithSha256Of(dataOwner),\n    ]).filter((key) => {\n      const fp = fingerprintV1(key)\n      return availableVerifiedKeysFp.has(fp) || otherVerifiedFp.has(fp)\n    })\n  }\n\n  /**\n   * @internal This method is intended for internal use only and may be changed without notice.\n   * Get all key pairs for the current data owner and his parents. These keys should be used only for decryption as they may have not been verified.\n   * @return all key pairs available for decryption.\n   */\n  getDecryptionKeys(): { [fingerprint: string]: KeyPair<CryptoKey> } {\n    this.ensureInitialised()\n    return Object.values(this.keysCache!).reduce((acc, curr) => {\n      return {\n        ...acc,\n        ...this.plainKeysByFingerprint(curr),\n      }\n    }, {} as { [fp: string]: KeyPair<CryptoKey> })\n  }\n\n  private async doLoadKeys(\n    keyRecovererAndVerifier: KeyRecovererAndVerifier,\n    currentOwnerKeyGenerator: CurrentOwnerKeyGenerator\n  ): Promise<{ pair: KeyPair<CryptoKey>; fingerprint: string } | undefined> {\n    // Load all keys for self from key store\n    const hierarchy = (await this.dataOwnerApi.getCurrentDataOwnerHierarchy()).map(({ dataOwner, type }) => {\n      if (dataOwner.publicKey == '') {\n        if (Object.entries(dataOwner.hcPartyKeys ?? {}).length > 0)\n          throw new Error(`Data owner ${dataOwner.id} has \"\" as public key but has non-empty hcPartyKeys`)\n        delete dataOwner.publicKey\n      }\n      return {\n        dataOwner,\n        type,\n      } as DataOwnerWithType\n    })\n    const self = hierarchy[hierarchy.length - 1]\n    this.selfId = self.dataOwner.id!\n    const keysData = []\n    const toInit = this.initialiseParentKeys ? hierarchy : [self]\n    for (let i = 0; i < toInit.length; i++) {\n      const dowt = toInit[i]\n      let parentKeysForRecovery: { [keyFp: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } } = {}\n      for (let j = 0; j < i; j++) {\n        parentKeysForRecovery = {\n          ...keysData[j].availableKeys,\n          ...parentKeysForRecovery,\n        }\n      }\n      const availableKeys = await this.loadAndRecoverKeysFor(dowt, parentKeysForRecovery)\n      const availableKeysFpSet = new Set(Object.keys(availableKeys))\n      const verifiedKeysMap = await this.icureStorage.loadSelfVerifiedKeys(dowt.dataOwner.id!)\n      const allPublicKeys = new Set([\n        ...this.dataOwnerApi.getHexPublicKeysWithSha1Of(dowt.dataOwner),\n        ...this.dataOwnerApi.getHexPublicKeysWithSha256Of(dowt.dataOwner),\n      ])\n      const unavailableKeys = Array.from(allPublicKeys).flatMap((key) => {\n        return availableKeysFpSet.has(fingerprintV1(key)) ? [] : [key]\n      })\n      const unknownKeys = Array.from(allPublicKeys).filter(\n        (x) => !(fingerprintV1(x) in verifiedKeysMap) && !(availableKeys?.[fingerprintV1(x)]?.isDevice === true)\n      )\n      keysData.push({ dowt, availableKeys, unavailableKeys, unknownKeys })\n    }\n    const recoveryInfo = keysData.map(({ dowt, unavailableKeys, unknownKeys }) => ({ dataOwner: dowt, unavailableKeys, unknownKeys }))\n    const recoveryAndVerificationResult = recoveryInfo.some((x) => x.unavailableKeys.length > 0 || x.unknownKeys.length > 0)\n      ? await keyRecovererAndVerifier(recoveryInfo)\n      : await nothingKeyRecovererAndVerifier(recoveryInfo)\n    const keysCache: { [dataOwnerId: string]: { [fp: string]: KeyPairData } } = {}\n    for (let i = 0; i < keysData.length; i++) {\n      const keyData = keysData[i]\n      const currAuthenticity = this.ensureFingerprintKeys(recoveryAndVerificationResult[keyData.dowt.dataOwner.id!].keyAuthenticity)\n      const currExternallyRecovered = this.ensureFingerprintKeys(recoveryAndVerificationResult[keyData.dowt.dataOwner.id!].recoveredKeys)\n      for (const [fp, keyPair] of Object.entries(currExternallyRecovered)) {\n        const jwkPair = await this.primitives.RSA.exportKeys(keyPair, 'jwk', 'jwk')\n        await this.icureStorage.saveKey(keyData.dowt.dataOwner.id!, fp, jwkPair, currAuthenticity[fp] != undefined ? currAuthenticity[fp] : true)\n      }\n      const updatedVerifiedMap = await this.icureStorage.saveSelfVerifiedKeys(\n        keyData.dowt.dataOwner.id!,\n        [...Object.keys(currAuthenticity), ...Object.keys(currExternallyRecovered)].reduce(\n          (acc, currFp) => ({\n            ...acc,\n            [currFp]: currAuthenticity[currFp] != undefined ? currAuthenticity[currFp] : currFp in currExternallyRecovered ? true : undefined,\n          }),\n          {}\n        )\n      )\n      const keysWithExternallyRecovered = {\n        ...keyData.availableKeys,\n        ...Object.fromEntries(Object.entries(currExternallyRecovered).map(([k, v]) => [k, { pair: v, isDevice: false }])),\n      }\n      let parentKeysForRecovery: { [p: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } } = {}\n      for (let j = 0; j < i; j++) {\n        parentKeysForRecovery = {\n          ...keysCache[keysData[j].dowt.dataOwner.id!],\n          ...parentKeysForRecovery,\n        }\n      }\n      const additionallyRecovered = await this.recoverAndCacheKeys(\n        keyData.dowt,\n        this.plainKeysByFingerprint({\n          ...keysWithExternallyRecovered,\n          ...parentKeysForRecovery,\n        })\n      )\n      const keys = {\n        ...keysWithExternallyRecovered,\n        ...Object.fromEntries(Object.entries(additionallyRecovered).map(([k, v]) => [k, { pair: v, isDevice: false }])),\n      }\n      keysCache[keyData.dowt.dataOwner.id!] = this.verifyKeys(keys, updatedVerifiedMap)\n    }\n    if (Object.entries(keysCache).some(([ownerId, data]) => ownerId !== self.dataOwner.id && !this.hasVerifiedKey(data))) {\n      throw new Error('Some parent hcps have no verified keys: impossible to generate locally a new key for a parent.')\n    } else if (this.hasVerifiedKey(keysCache[self.dataOwner.id!])) {\n      this.keysCache = keysCache\n      this.selfLegacyPublicKey = self.dataOwner.publicKey\n      return undefined\n    } else {\n      const whatToDo = await currentOwnerKeyGenerator(self)\n      if (whatToDo === false) {\n        throw new Error(`No verified key found for ${self.dataOwner.id} and settings do not allow creation of a new key.`)\n      } else if (typeof whatToDo == 'string' && whatToDo == 'keyless') {\n        /*\n         * Currently non-anonymous data owners aren't allowed to use keyless mode.\n         * Today the delegator is not emitted in views and is not used for access control: an entity without delegation\n         * self->self but only a delegation self->other would not be searchable by nor accessible to an explicit data\n         * owner.\n         * This is not a problem for anonymous data owner, since search and access control use the secure delegation\n         * key.\n         * Since keyless api was designed for use by patients this is not an issue at the time, but if in future we need\n         * to support keyless api for explicit data owner before updating views we can add stubs to legacy delegations.\n         */\n        if (!this.selfIsAnonymous) throw new Error('Keyless api mode is available only for anonymous data owners.')\n        this.keysCache = keysCache\n        return undefined\n      } else {\n        const updateInfo = await this.createAndSaveNewKeyPair(whatToDo === true ? undefined : whatToDo, self)\n        // self may be outdated now\n        this.selfLegacyPublicKey = updateInfo.updatedSelf.stub.publicKey\n        this.keysCache = {\n          ...keysCache,\n          [self.dataOwner.id!]: {\n            ...keysCache[self.dataOwner.id!],\n            [updateInfo.publicKeyFingerprint]: { pair: updateInfo.keyPair, isDevice: true, isVerified: true },\n          },\n        }\n        return { pair: updateInfo.keyPair, fingerprint: updateInfo.publicKeyFingerprint }\n      }\n    }\n  }\n\n  private async createAndSaveNewKeyPair(\n    importedKeyPair: undefined | KeyPair<CryptoKey>,\n    selfDataOwner: DataOwnerWithType\n  ): Promise<{ publicKeyFingerprint: string; keyPair: KeyPair<CryptoKey>; updatedSelf: CryptoActorStubWithType }> {\n    const keyPair = importedKeyPair ?? (await this.primitives.RSA.generateKeyPair(ShaVersion.Sha256))\n    const publicKeyHex = ua2hex(await this.primitives.RSA.exportKey(keyPair.publicKey, 'spki'))\n    const jwKey = await this.primitives.RSA.exportKey(keyPair.publicKey, 'jwk')\n    if (jwKey.alg !== 'RSA-OAEP-256') {\n      throw new Error('Only keys generated with SHA-256 are currently supported')\n    }\n    const publicKeyFingerprint = fingerprintV1(publicKeyHex)\n    await this.icureStorage.saveKey(\n      selfDataOwner.dataOwner.id!,\n      publicKeyFingerprint,\n      await this.primitives.RSA.exportKeys(keyPair, 'jwk', 'jwk'),\n      true\n    )\n    await this.icureStorage.saveSelfVerifiedKeys(selfDataOwner.dataOwner.id!, { [publicKeyFingerprint]: true })\n    const updatedSelf = await this.dataOwnerApi.modifyCryptoActorStub({\n      stub: {\n        ...CryptoActorStub.fromDataOwner(selfDataOwner.dataOwner),\n        publicKeysForOaepWithSha256: [...(selfDataOwner.dataOwner.publicKeysForOaepWithSha256 ?? []), publicKeyHex],\n      },\n      type: selfDataOwner.type,\n    })\n    return { publicKeyFingerprint, keyPair: keyPair, updatedSelf }\n  }\n\n  private async loadStoredKeys(\n    dataOwner: DataOwnerWithType,\n    pubKeysFingerprints: { [key: string]: string[] }\n  ): Promise<{ [pubKeyFingerprint: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } }> {\n    const pubKeysFingerprintsWithVersion = Object.entries(pubKeysFingerprints).flatMap(([shaVersion, fps]) => {\n      return fps.map((fp) => [shaVersion, fp] as [ShaVersion, string])\n    })\n    return await pubKeysFingerprintsWithVersion.reduce(async (acc, [shaVersion, currentFingerprint]) => {\n      const awaitedAcc = await acc\n      let loadedPair: { pair: KeyPair<CryptoKey>; isDevice: boolean } | undefined = undefined\n      try {\n        const storedKeypair = await this.icureStorage.loadKey(dataOwner.dataOwner.id!, currentFingerprint, dataOwner.dataOwner.publicKey)\n        if (!!storedKeypair) {\n          const importedKey = await this.primitives.RSA.importKeyPair(\n            'jwk',\n            storedKeypair.pair.privateKey,\n            'jwk',\n            storedKeypair.pair.publicKey,\n            shaVersion\n          )\n          loadedPair = { pair: importedKey, isDevice: storedKeypair.isDevice }\n        }\n      } catch (e) {\n        console.warn('Error while loading keypair', currentFingerprint, e)\n      }\n      return loadedPair\n        ? {\n            ...awaitedAcc,\n            [currentFingerprint]: loadedPair,\n          }\n        : awaitedAcc\n    }, Promise.resolve({} as { [pubKeyFingerprint: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } }))\n  }\n\n  private verifyKeys(\n    keys: { [pubKeyFingerprint: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } },\n    verifiedKeysMap: { [pubKeyFingerprint: string]: boolean }\n  ): { [pubKeyFingerprint: string]: KeyPairData } {\n    return Object.fromEntries(\n      Object.entries(keys).map(\n        ([fp, keyData]) => [fp, { ...keyData, isVerified: keyData.isDevice || verifiedKeysMap?.[fp] === true }] as [string, KeyPairData]\n      )\n    )\n  }\n\n  private plainKeysByFingerprint(richKeys: { [pubKeyFingerprint: string]: { pair: KeyPair<CryptoKey> } }): {\n    [pubKeyFingerprint: string]: KeyPair<CryptoKey>\n  } {\n    return Object.fromEntries(Object.entries(richKeys).map(([fp, keyData]) => [fp, keyData.pair]))\n  }\n\n  private ensureInitialised() {\n    if (!this.keysCache) throw new Error('Key manager was not properly initialised')\n  }\n\n  private async recoverAndCacheKeys(\n    dataOwner: DataOwnerWithType,\n    availableKeys: { [pubKeyFingerprint: string]: KeyPair<CryptoKey> }\n  ): Promise<{ [p: string]: KeyPair<CryptoKey> }> {\n    const recoveredKeys = await this.keyRecovery.recoverKeys(dataOwner, availableKeys)\n    for (const [fp, pair] of Object.entries(recoveredKeys)) {\n      await this.icureStorage.saveKey(dataOwner.dataOwner.id!, fp, await this.primitives.RSA.exportKeys(pair, 'jwk', 'jwk'), false)\n    }\n    return recoveredKeys\n  }\n\n  private async loadAndRecoverKeysFor(\n    dataOwner: DataOwnerWithType,\n    ancestorsKeys: { [keyFp: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } }\n  ): Promise<{ [keyFp: string]: { pair: KeyPair<CryptoKey>; isDevice: boolean } }> {\n    const pubKeysFingerprints = {\n      'sha-1': [...new Set(this.dataOwnerApi.getHexPublicKeysWithSha1Of(dataOwner.dataOwner))].map((x) => fingerprintV1(x)),\n      'sha-256': [...new Set(this.dataOwnerApi.getHexPublicKeysWithSha256Of(dataOwner.dataOwner))].map((x) => fingerprintV1(x)),\n    }\n    const loadedKeys =\n      pubKeysFingerprints['sha-1'].length + pubKeysFingerprints['sha-256'].length > 0 ? await this.loadStoredKeys(dataOwner, pubKeysFingerprints) : {}\n    const loadedKeysFingerprints = Object.keys(loadedKeys)\n    if (\n      loadedKeysFingerprints.length !== pubKeysFingerprints['sha-1'].length + pubKeysFingerprints['sha-256'].length &&\n      (loadedKeysFingerprints.length > 0 || Object.keys(ancestorsKeys).length > 0)\n    ) {\n      const recoveredKeys = await this.recoverAndCacheKeys(dataOwner, this.plainKeysByFingerprint({ ...loadedKeys, ...ancestorsKeys }))\n      for (const [fp, pair] of Object.entries(recoveredKeys)) {\n        loadedKeys[fp] = { pair, isDevice: false }\n      }\n    }\n    return loadedKeys\n  }\n\n  private ensureFingerprintKeys<T>(obj: { [shouldBeFingerprint: string]: T }): { [definitelyFingerprint: string]: T } {\n    return Object.fromEntries(Object.entries(obj).map(([k, v]) => [fingerprintV1(k), v]))\n  }\n\n  private hasVerifiedKey(keysData: { [fp: string]: KeyPairData }) {\n    return Object.values(keysData).some((x) => x.isVerified || x.isDevice)\n  }\n}\n"]}