@idos-network/client 1.5.0 → 2.2.0

package/README.md

@@ -28,6 +28,8 @@ import {
 
 const idOSClientWithoutSigner = await createIDOSClient({
   nodeUrl: "https://nodes.idos.network",
+  // Must share KGW's session-cookie Domain (typically same host as nodeUrl).
+  blobGatewayUrl: "https://blob-gateway.idos.network",
   enclaveOptions: {
     container: "#idosContainer",
   },
@@ -53,14 +55,6 @@ const credentials = await loggedInClient.filterCredentials({
   },
 });
 
-// If we found a credentials which we can use, we will ask user for AccessGrant
-// which we later can use in our consumer to get the users data
-const ag = await loggedInClient.requestAccessGrant(credentials[0].id, {
-  consumerAuthPublicKey: "CONSUMER_PUBLIC_KEY",
-  consumerEncryptionPublicKey: "CONSUMER_ENC_PUBLIC_KEY",
-  lockedUntil: lockedUntil: Math.floor(Date.now() / 1000) + 90 * 24 * 60 * 60, // 3 months from now
-});
-
 // Also when the user is logged in, we can ask him to add another wallet
 // wallet type is required.
 await loggedInClient.addWallet({
@@ -73,6 +67,18 @@ await loggedInClient.addWallet({
 });
 ```
 
+### Request an access grant
+
+The logged-in user issues the shared copy (ephemeral user-side signing key). No original-issuer secret is required.
+
+```typescript
+const ag = await loggedInClient.requestAccessGrant(credentials[0].id, {
+  consumerAuthPublicKey: "CONSUMER_PUBLIC_KEY",
+  consumerEncryptionPublicKey: "CONSUMER_ENC_PUBLIC_KEY",
+  lockedUntil: Math.floor(Date.now() / 1000) + 90 * 24 * 60 * 60, // 3 months from now
+});
+```
+
 ### Supported Wallet Types
 
 - `"evm"` - Ethereum Virtual Machine compatible wallets (Ethereum, Polygon, etc.)
@@ -94,7 +100,7 @@ For complete documentation, examples, and implementation guides:
 - **Profile & Session Lifecycle** - Check profile existence, attach a wallet signer, and log users in/out
 - **Enclave-Backed Encryption** - Generate user encryption profiles and decrypt credential content safely via the enclave
 - **Credential Access & Filtering** - Fetch credentials, read decrypted content, and filter by issuer, level, and field rules
-- **Credential Sharing Flows** - Request DAG/DWG messages, create access grants, and share credentials with controlled lock times
+- **Credential Sharing Flows** - Request DWG messages, create access grants, and share credentials with controlled lock times
 - **Wallet Management** - Add, list, and remove wallets (single or batch), including MPC-aware wallet synchronization
 - **Multi-Chain Wallet Support** - Works with EVM, NEAR, XRPL, and Stellar wallet types
 

package/dist/index.d.ts

@@ -1,10 +1,11 @@
-import { recordFilter } from "@idos-network/credentials/utils";
+import { Addon, BaseLevel, recordFilter } from "@idos-network/credentials/utils";
 import { KwilActionClient, Wallet, signNearMessage } from "@idos-network/kwil-infra";
-import { AddAttributeInput, AddWalletInput, DagMessageInput, GetAccessGrantsGrantedInput, GetWalletsOutput, ShareCredentialInput, WalletType, idOSCredential, idOSCredentialListItem, idOSDelegatedWriteGrant, idOSGrant, idOSUser, idOSUserAttribute, idOSWallet } from "@idos-network/kwil-infra/actions";
+import { AddAttributeInput, AddWalletInput, AddWalletMessageInput, DelegatedWriteGrantBaseParams, GetAccessGrantsGrantedInput, GetWalletsOutput, SharePreliminaryCredentialInput, WalletType, idOSCredential, idOSCredentialListItem, idOSDelegatedWriteGrant, idOSGrant, idOSUser, idOSUserAttribute, idOSWallet, toDelegatedWriteGrantBaseParams } from "@idos-network/kwil-infra/actions";
+import { KwilSigner } from "@idos-network/kwil-js";
+import { BlobGateway } from "@idos-network/utils/blob-gateway";
 import { Store } from "@idos-network/utils/store";
 import { BaseProvider, EnclaveOptions, EncryptionPasswordStore, PublicEncryptionProfile } from "@idos-network/enclave";
-import { KwilSigner } from "@idos-network/kwil-js";
-import { idOSCredential as idOSCredential$1 } from "@idos-network/credentials/types";
+import { idOSCredentialRecord } from "@idos-network/credentials/types";
 import { AddAddressMessageToSign, AddAddressSignatureMessage, RemoveAddressMessageToSign, RemoveAddressSignatureMessage } from "@idos-network/enclave/mpc";
 //#region src/enclave/iframe-enclave.d.ts
 interface IframeEnclaveOptions extends EnclaveOptions {
@@ -12,7 +13,7 @@ interface IframeEnclaveOptions extends EnclaveOptions {
   url?: string;
   throwOnUserCancelUnlock?: boolean;
 }
-declare class IframeEnclave extends BaseProvider<IframeEnclaveOptions> {
+export declare class IframeEnclave extends BaseProvider<IframeEnclaveOptions> {
   private container;
   private iframe;
   private hostUrl;
@@ -20,17 +21,20 @@ declare class IframeEnclave extends BaseProvider<IframeEnclaveOptions> {
   constructor(options: IframeEnclaveOptions);
   /** @see parent method */
   load(): Promise<void>;
-  /** @override parent method to call iframe */
+  /**
+   * Embedding pages cannot reset enclave storage. The iframe rejects `reset`
+   * because it deletes every idOS-* key with no origin check.
+   */
   reset(): Promise<void>;
   /** @override parent method to call iframe */
   reconfigure(options?: Omit<IframeEnclaveOptions, "container" | "url">): Promise<void>;
   /** @override parent method to call iframe */
   confirm(message: string): Promise<boolean>;
   /** @override parent method to call iframe */
-  filterCredentials(credentials: idOSCredential$1[], privateFieldFilters: {
+  filterCredentials(credentials: idOSCredentialRecord[], privateFieldFilters: {
     pick: Record<string, unknown[]>;
     omit: Record<string, unknown[]>;
-  }): Promise<idOSCredential$1[]>;
+  }): Promise<idOSCredentialRecord[]>;
   /** @override parent method to call iframe */
   encrypt(message: Uint8Array, receiverPublicKey: Uint8Array): Promise<{
     content: Uint8Array;
@@ -56,35 +60,43 @@ declare class IframeEnclave extends BaseProvider<IframeEnclaveOptions> {
 //#endregion
 //#region src/index.d.ts
 type Properties<T> = { [K in keyof T as Exclude<T[K], Function> extends never ? never : K]: T[K]; };
-type idOSClient = idOSClientConfiguration | idOSClientIdle | idOSClientWithUserSigner | idOSClientLoggedIn;
-declare class idOSClientConfiguration<Provider extends BaseProvider = IframeEnclave> {
+export type idOSClient = idOSClientConfiguration | idOSClientIdle | idOSClientWithUserSigner | idOSClientLoggedIn;
+export declare class idOSClientConfiguration<Provider extends BaseProvider = IframeEnclave> {
   readonly state: "configuration";
   readonly chainId?: string;
   readonly nodeUrl: string;
+  readonly blobGatewayUrl?: string;
   readonly enclaveOptions: Omit<Provider["options"], "mode">;
   readonly store: Store;
   readonly enclaveProvider: BaseProvider;
   constructor(params: {
     chainId?: string;
     nodeUrl: string;
+    /**
+     * Optional blob gateway base URL. Defaults to `nodeUrl`.
+     * In the browser this must share KGW's session-cookie Domain
+     * (typically the same host), because reads use `credentials: "include"`.
+     */
+    blobGatewayUrl?: string;
     enclaveOptions: Omit<Provider["options"], "mode">;
     enclaveProvider?: new (options: Omit<Provider["options"], "mode">) => Provider;
     store?: Store;
   });
   createClient(): Promise<idOSClientIdle>;
 }
-declare class idOSClientIdle {
+export declare class idOSClientIdle {
   readonly state: "idle";
   readonly store: Store;
   readonly kwilClient: KwilActionClient;
   readonly enclaveProvider: BaseProvider;
-  constructor(store: Store, kwilClient: KwilActionClient, enclaveProvider: BaseProvider);
+  readonly blobGateway: BlobGateway;
+  constructor(store: Store, kwilClient: KwilActionClient, enclaveProvider: BaseProvider, blobGateway: BlobGateway);
   static fromConfig(params: idOSClientConfiguration<BaseProvider>): Promise<idOSClientIdle>;
   addressHasProfile(address: string): Promise<boolean>;
   withUserSigner(_signer: Wallet): Promise<idOSClientWithUserSigner>;
   logOut(): Promise<idOSClientIdle>;
 }
-declare class idOSClientWithUserSigner implements Omit<Properties<idOSClientIdle>, "state"> {
+export declare class idOSClientWithUserSigner implements Omit<Properties<idOSClientIdle>, "state"> {
   readonly state: "with-user-signer";
   readonly store: Store;
   readonly kwilClient: KwilActionClient;
@@ -94,13 +106,15 @@ declare class idOSClientWithUserSigner implements Omit<Properties<idOSClientIdle
   readonly walletIdentifier: string;
   readonly walletPublicKey: string | undefined;
   readonly walletType: WalletType;
-  constructor(idOSClientIdle: idOSClientIdle, signer: Wallet, kwilSigner: KwilSigner, walletIdentifier: string, walletPublicKey: string | undefined, walletType: WalletType);
+  readonly blobGateway: BlobGateway;
+  constructor(idOSClientIdle: idOSClientIdle, signer: Wallet, kwilSigner: KwilSigner, walletIdentifier: string, walletPublicKey: string | undefined, walletType: WalletType, blobGateway: BlobGateway);
   logOut(): Promise<idOSClientIdle>;
   hasProfile(): Promise<boolean>;
   createUserEncryptionProfile(userId: string, forceEncryptionPasswordStore?: EncryptionPasswordStore): Promise<PublicEncryptionProfile>;
   logIn(): Promise<idOSClientLoggedIn>;
 }
-declare class idOSClientLoggedIn implements Omit<Properties<idOSClientWithUserSigner>, "state"> {
+export declare class idOSClientLoggedIn implements Omit<Properties<idOSClientWithUserSigner>, "state"> {
+  #private;
   readonly state: "logged-in";
   readonly store: Store;
   readonly kwilClient: KwilActionClient;
@@ -111,21 +125,24 @@ declare class idOSClientLoggedIn implements Omit<Properties<idOSClientWithUserSi
   readonly walletPublicKey: string | undefined;
   readonly walletType: WalletType;
   readonly user: idOSUser;
+  readonly blobGateway: BlobGateway;
   constructor(idOSClientWithUserSigner: idOSClientWithUserSigner, user: idOSUser);
   logOut(): Promise<idOSClientIdle>;
   requestDWGMessage(params: idOSDelegatedWriteGrant): Promise<string>;
+  createCredential(publicNotes: string, plaintextContent: Uint8Array<ArrayBufferLike>, issuerSigningSecretKey?: Uint8Array): Promise<Omit<idOSCredential, "user_id" | "content" | "inserter_type" | "inserter_id">>;
   removeCredential(id: string): Promise<{
     id: string;
   }>;
   getCredentialById(id: string): Promise<idOSCredential | undefined>;
-  shareCredential(credential: ShareCredentialInput): Promise<ShareCredentialInput>;
+  shareCredential(credential: SharePreliminaryCredentialInput): Promise<SharePreliminaryCredentialInput>;
   getAllCredentials(): Promise<idOSCredentialListItem[]>;
   getAccessGrantsOwned(): Promise<idOSGrant[]>;
   getAttributes(): Promise<idOSUserAttribute[]>;
   createAttribute(attribute: AddAttributeInput): Promise<AddAttributeInput>;
   getCredentialContentSha256Hash(id: string): Promise<string>;
   getCredentialContent(id: string): Promise<string>;
-  requestDAGMessage(params: DagMessageInput): Promise<string>;
+  getCredentialWithEncryptedContent(id: string): Promise<idOSCredential>;
+  getCredentialSharedContent(id: string): Promise<string>;
   getGrants(params: Partial<GetAccessGrantsGrantedInput>): Promise<{
     grants: idOSGrant[];
     totalCount: number;
@@ -136,6 +153,7 @@ declare class idOSClientLoggedIn implements Omit<Properties<idOSClientWithUserSi
   revokeAccessGrant(id: string): Promise<{
     id: string;
   }>;
+  addWalletMessage(params: AddWalletMessageInput): Promise<string>;
   addWallet(params: AddWalletInput): Promise<AddWalletInput>;
   getWallets(): Promise<GetWalletsOutput[]>;
   removeWallet(id: string): Promise<{
@@ -155,20 +173,26 @@ declare class idOSClientLoggedIn implements Omit<Properties<idOSClientWithUserSi
       omit: Parameters<typeof recordFilter>[2];
     };
     credentialLevelOrHigherFilter?: {
-      userLevel: "basic" | "plus";
-      requiredAddons: ("liveness" | "email" | "phoneNumber")[];
+      userLevel: BaseLevel;
+      requiredAddons: Addon[];
     };
   }): Promise<idOSCredentialListItem[]>;
   requestAccessGrant(credentialId: string, { consumerEncryptionPublicKey, consumerAuthPublicKey, lockedUntil }: {
     consumerEncryptionPublicKey: string;
     consumerAuthPublicKey: string;
     lockedUntil?: number;
-  }): Promise<ShareCredentialInput>;
+  }): Promise<SharePreliminaryCredentialInput>;
 }
-declare function createIDOSClient(params: {
+export declare function createIDOSClient(params: {
   nodeUrl: string;
+  /**
+   * Optional blob gateway base URL. Defaults to `nodeUrl`.
+   * In the browser this must share KGW's session-cookie Domain
+   * (typically the same host), because reads use `credentials: "include"`.
+   */
+  blobGatewayUrl?: string;
   enclaveOptions: Omit<IframeEnclave["options"], "mode">;
 }): idOSClientConfiguration<IframeEnclave>;
 //#endregion
-export { IframeEnclave, createIDOSClient, idOSClient, idOSClientConfiguration, idOSClientIdle, idOSClientLoggedIn, idOSClientWithUserSigner, type idOSCredential, type idOSCredentialListItem, type idOSDelegatedWriteGrant, type idOSGrant, type idOSUser, type idOSUserAttribute, type idOSWallet, signNearMessage };
+export { type DelegatedWriteGrantBaseParams, type idOSCredential, type idOSCredentialListItem, type idOSDelegatedWriteGrant, type idOSGrant, type idOSUser, type idOSUserAttribute, type idOSWallet, signNearMessage, toDelegatedWriteGrantBaseParams };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/enclave/iframe-enclave.ts","../src/index.ts"],"mappings":";;;;;;;;;UAgBiB,6BAA6B;EAC5C;EACA;EACA;;cAGW,sBAAsB,aAAa;UACtC;UACA;UACA;UACA;EAER,YAAY,SAAS;;EAcrB,QAAc;;EAed,SAAe;;EAKf,YAAkB,UAAS,KAAK,6CAAkD;;EAMlF,QAAc,kBAAkB;;EAchC,kBACE,aAAa,oBACb;IAAuB,MAAM;IAA2B,MAAM;MAC7D,QAAQ;;EAKX,QACE,SAAS,YACT,mBAAmB,aAClB;IAAU,SAAS;IAAY,oBAAoB;;;EAKtD,QACE,SAAS,YACT,iBAAiB,aAChB,QAAQ,WAAW;;EAKtB,+BAAqC;;EAarC,+BAAqC,QAAQ;EAU7C,wBACE,iBACA,+BACA,2BACC,QAAQ;EAIX,2BACE,iBACA,+BACA,8BACC,QAAQ;EASX,sBACE,gBACA,SAAS,4BACT,oBACC;EAIH,2BACE,gBACA,SAAS,+BACT,oBACC;UAIW;UA2DN;UAKA;UAKM;UAyBN;UAKM;;;;KCtMX,WAAW,QAEb,WAAW,KAAK,QAAQ,EAAE,IAAI,kCAAkC,IAAI,EAAE;KAG7D,aACR,0BACA,iBACA,2BACA;cAES,wBAAwB,iBAAiB,eAAe;WAC1D;WACA;WACA;WACA,gBAAgB,KAAK;WACrB,OAAO;WACP,iBAAiB;EAE1B,YAAY;IACV;IACA;IACA,gBAAgB,KAAK;IACrB,uBAAuB,SAAS,KAAK,iCAAiC;IACtE,QAAQ;;EAqBV,gBAAsB,QAAQ;;cAKnB;WACF;WACA,OAAO;WACP,YAAY;WACZ,iBAAiB;EAE1B,YAAY,OAAO,OAAO,YAAY,kBAAkB,iBAAiB;SAO5D,WAAW,QAAQ,wBAAwB,gBAAgB,QAAQ;EAWhF,kBAAwB,kBAAkB;EAI1C,eAAqB,SAAS,SAAS,QAAQ;EA8B/C,UAAgB,QAAQ;;cAKb,oCAAoC,KAAK,WAAW;WACtD;WACA,OAAO;WACP,YAAY;WACZ,iBAAiB;WACjB,QAAQ;WACR,YAAY;WACZ;WACA;WACA,YAAY;EAErB,YACE,gBAAgB,gBAChB,QAAQ,QACR,YAAY,YACZ,0BACA,qCACA,YAAY;EAed,UAAgB,QAAQ;EAKxB,cAAoB;EAMpB,4BACE,gBACA,+BAA+B,0BAC9B,QAAQ;EAcX,SAAe,QAAQ;;cAmBZ,8BAA8B,KAAK,WAAW;WAChD;WACA,OAAO;WACP,YAAY;WACZ,iBAAiB;WACjB,QAAQ;WACR,YAAY;WACZ;WACA;WACA,YAAY;WACZ,MAAM;EAEf,YAAY,0BAA0B,0BAA0B,MAAM;EAatE,UAAgB,QAAQ;EAKxB,kBAAwB,QAAQ,0BAA0B;EAI1D,iBAAuB,aAAa;IAAU;;EAK9C,kBAAwB,aAAa,QAAQ;EAI7C,gBAAsB,YAAY,uBAAuB,QAAQ;EAKjE,qBAA2B,QAAQ;EAInC,wBAA8B,QAAQ;EAItC,iBAAuB,QAAQ;EAI/B,gBAAsB,WAAW,oBAAoB,QAAQ;EAK7D,+BAAqC,aAAa;EAelD,qBAA2B,aAAa;EAexC,kBAAwB,QAAQ,kBAAkB;EAIlD,UACE,QAAQ,QAAQ,+BACf;IAAU,QAAQ;IAAa;;EAOlC,WAAiB,QAAQ,mBAAmB,QAAQ;EAKpD,kBAAwB;EAMxB,oBAA0B,aAAa,QAAQ;EAI/C,kBAAwB,aAAa;IAAU;;EAK/C,UAAgB,QAAQ,iBAAiB,QAAQ;EAsCjD,cAAoB,QAAQ;EAI5B,aAAmB,aAAa;IAAU;;EAqC1C,cAAoB,gBAAgB;EAQpC,kBAAwB;IACtB;MACE;;IAEF;MACE,MAAM,kBAAkB;MACxB,MAAM,kBAAkB;;IAE1B;MACE,MAAM,kBAAkB;MACxB,MAAM,kBAAkB;;IAE1B;MACE;MACA;;MAEA,QAAQ;EAuFZ,mBACE,wBAEE,6BACA,uBACA;IAEA;IACA;IACA;MAED,QAAQ;;iBAqDG,iBAAiB;EAC/B;EACA,gBAAgB,KAAK;IACnB,wBAAwB"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/enclave/iframe-enclave.ts","../src/index.ts"],"mappings":";;;;;;;;;;UAgBiB,6BAA6B;EAC5C;EACA;EACA;;qBAGW,sBAAsB,aAAa;UACtC;UACA;UACA;UACA;EAER,YAAY,SAAS;;EAcrB,QAAc;;;;;EAkBd,SAAe;;EAKf,YAAkB,UAAS,KAAK,6CAAkD;;EAMlF,QAAc,kBAAkB;;EAchC,kBACE,aAAa,wBACb;IAAuB,MAAM;IAA2B,MAAM;MAC7D,QAAQ;;EAKX,QACE,SAAS,YACT,mBAAmB,aAClB;IAAU,SAAS;IAAY,oBAAoB;;;EAKtD,QACE,SAAS,YACT,iBAAiB,aAChB,QAAQ,WAAW;;EAKtB,+BAAqC;;EAarC,+BAAqC,QAAQ;EAU7C,wBACE,iBACA,+BACA,2BACC,QAAQ;EAIX,2BACE,iBACA,+BACA,8BACC,QAAQ;EASX,sBACE,gBACA,SAAS,4BACT,oBACC;EAIH,2BACE,gBACA,SAAS,+BACT,oBACC;UAIW;UA2DN;UAKA;UAKM;UAyBN;UAKM;;;;KCvLX,WAAW,QAEb,WAAW,KAAK,QAAQ,EAAE,IAAI,kCAAkC,IAAI,EAAE;YAiD7D,aACR,0BACA,iBACA,2BACA;qBAES,wBAAwB,iBAAiB,eAAe;WAC1D;WACA;WACA;WACA;WACA,gBAAgB,KAAK;WACrB,OAAO;WACP,iBAAiB;EAE1B,YAAY;IACV;IACA;;;;;;IAMA;IACA,gBAAgB,KAAK;IACrB,uBAAuB,SAAS,KAAK,iCAAiC;IACtE,QAAQ;;EAsBV,gBAAsB,QAAQ;;qBAKnB;WACF;WACA,OAAO;WACP,YAAY;WACZ,iBAAiB;WACjB,aAAa;EAEtB,YACE,OAAO,OACP,YAAY,kBACZ,iBAAiB,cACjB,aAAa;SASF,WAAW,QAAQ,wBAAwB,gBAAgB,QAAQ;EAkBhF,kBAAwB,kBAAkB;EAI1C,eAAqB,SAAS,SAAS,QAAQ;EA+B/C,UAAgB,QAAQ;;qBAKb,oCAAoC,KAAK,WAAW;WACtD;WACA,OAAO;WACP,YAAY;WACZ,iBAAiB;WACjB,QAAQ;WACR,YAAY;WACZ;WACA;WACA,YAAY;WACZ,aAAa;EAEtB,YACE,gBAAgB,gBAChB,QAAQ,QACR,YAAY,YACZ,0BACA,qCACA,YAAY,YACZ,aAAa;EAgBf,UAAgB,QAAQ;EAWxB,cAAoB;EAMpB,4BACE,gBACA,+BAA+B,0BAC9B,QAAQ;EAcX,SAAe,QAAQ;;qBAmBZ,8BAA8B,KAAK,WAAW;;WAChD;WACA,OAAO;WACP,YAAY;WACZ,iBAAiB;WACjB,QAAQ;WACR,YAAY;WACZ;WACA;WACA,YAAY;WACZ,MAAM;WACN,aAAa;EAEtB,YAAY,0BAA0B,0BAA0B,MAAM;EActE,UAAgB,QAAQ;EAWxB,kBAAwB,QAAQ,0BAA0B;EAI1D,iBACE,qBACA,kBAAkB,WAAW,kBAE7B,yBAAyB,aACxB,QAAQ,KAAK;EA0ChB,iBAAuB,aAAa;IAAU;;EAiB9C,kBAAwB,aAAa,QAAQ;EAI7C,gBACE,YAAY,kCACX,QAAQ;EAKX,qBAA2B,QAAQ;EAInC,wBAA8B,QAAQ;EAItC,iBAAuB,QAAQ;EAI/B,gBAAsB,WAAW,oBAAoB,QAAQ;EAK7D,+BAAqC,aAAa;EASlD,qBAA2B,aAAa;EASxC,kCAAwC,aAAa,QAAQ;EAM7D,2BAAiC,aAAa;EAS9C,UACE,QAAQ,QAAQ,+BACf;IAAU,QAAQ;IAAa;;EAOlC,WAAiB,QAAQ,mBAAmB,QAAQ;EAKpD,kBAAwB;EAMxB,oBAA0B,aAAa,QAAQ;EAI/C,kBAAwB,aAAa;IAAU;;EAK/C,iBAAuB,QAAQ,wBAAwB;EAKvD,UAAgB,QAAQ,iBAAiB,QAAQ;EAsCjD,cAAoB,QAAQ;EAI5B,aAAmB,aAAa;IAAU;;EAqC1C,cAAoB,gBAAgB;EAQpC,kBAAwB;IACtB;MACE;;IAEF;MACE,MAAM,kBAAkB;MACxB,MAAM,kBAAkB;;IAE1B;MACE,MAAM,kBAAkB;MACxB,MAAM,kBAAkB;;IAE1B;MACE,WAAW;MACX,gBAAgB;;MAEhB,QAAQ;EAyFZ,mBACE,wBAEE,6BACA,uBACA;IAEA;IACA;IACA;MAED,QAAQ;;wBA8FG,iBAAiB;EAC/B;;;;;;EAMA;EACA,gBAAgB,KAAK;IACnB,wBAAwB"}