@interop/did-web-resolver 4.0.0 → 6.0.0

package/README.md

@@ -1,6 +1,6 @@
 # `did:web` Resolver _(@interop/did-web-resolver)_
 
-[![Node.js CI](https://github.com/interop-alliance/did-web-resolver/workflows/Node.js%20CI/badge.svg)](https://github.com/interop-alliance/did-web-resolver/actions?query=workflow%3A%22Node.js+CI%22)
+[![CI](https://github.com/interop-alliance/did-web-resolver/workflows/CI/badge.svg)](https://github.com/interop-alliance/did-web-resolver/actions?query=workflow%3A%22CI%22)
 [![NPM Version](https://img.shields.io/npm/v/@interop/did-web-resolver.svg)](https://npm.im/@interop/did-web-resolver)
 
 > A did:web method Decentralized Identifier (DID) resolver for the did-io library.
@@ -36,8 +36,7 @@ Other implementations:
 ### Initializing
 
 ```js
-import { Ed25519VerificationKey2020 }
-  from '@digitalcredentials/ed25519-verification-key-2020'
+import { Ed25519VerificationKey } from '@interop/ed25519-verification-key'
 import { X25519KeyAgreementKey2020 }
   from '@digitalcredentials/x25519-key-agreement-key-2020'
 import { CryptoLD } from 'crypto-ld'
@@ -45,17 +44,21 @@ import { CryptoLD } from 'crypto-ld'
 import * as didWeb from '@interop/did-web-resolver'
 
 const cryptoLd = new CryptoLD()
-cryptoLd.use(Ed25519VerificationKey2020)
+cryptoLd.use(Ed25519VerificationKey)
 cryptoLd.use(X25519KeyAgreementKey2020)
 
 const didWebDriver = didWeb.driver({ cryptoLd })
 
 // Optionally use it with the CachedResolver from did-io
-import {CachedResolver} from '@digitalcredentials/did-io';
+import { CachedResolver } from '@interop/did-io'
 const resolver = new CachedResolver()
 resolver.use(didWebDriver)
 ```
 
+> **Note:** Ed25519 verification methods are now serialized in
+> [Multikey](https://www.w3.org/TR/cid-1.0/#Multikey) format (`type: 'Multikey'`),
+> via `@interop/ed25519-verification-key`.
+
 ### Generating a new DID
 
 #### Generating from seed
@@ -78,7 +81,7 @@ const { didDocument, keyPairs, methodFor } = await didWebDriver.generate({ url,
   id: 'did:web:example.com',
   assertionMethod: [{
     id: 'did:web:example.com#z6MkmDMjfkjs9XPCN1LfoQQRHz1mJ8PEdiVYC66XKhj3wGyB',
-    type: 'Ed25519VerificationKey2020',
+    type: 'Multikey',
     controller: 'did:web:example.com',
     publicKeyMultibase: 'z6MkmDMjfkjs9XPCN1LfoQQRHz1mJ8PEdiVYC66XKhj3wGyB'
   }]
@@ -101,25 +104,25 @@ const { didDocument, keyPairs, methodFor } = await didWebDriver.generate()
   id: 'did:web:example.com',
   capabilityInvocation: [{
     id: 'did:web:example.com#z6MkqUiWi2o5V5oDEVzqszpkDhzeJ2o9Z4zVyTWeASqgrgti',
-    type: 'Ed25519VerificationKey2020',
+    type: 'Multikey',
     controller: 'did:web:example.com',
     publicKeyMultibase: 'zC2TU7nYe9YJk81A9CRruNcSeUTXJ9Bk9HSbiLAsfwU7L'
   }],
   authentication: [{
     id: 'did:web:example.com#z6MksjNYAxjiTrhPFx9Ljk3SVowEtFXhFqLdsMKJHV4KrcDT',
-    type: 'Ed25519VerificationKey2020',
+    type: 'Multikey',
     controller: 'did:web:example.com',
     publicKeyMultibase: 'zEH7VaiVH8KCv9TJe4B5beiPF4gFqqx6HBLQNTD6JwPS5'
   }],
   assertionMethod: [{
     id: 'did:web:example.com#z6MkiyYa5mG4moiHrmXQea8bNvdEWRWi3KuouHqoiknGf7xV',
-    type: 'Ed25519VerificationKey2020',
+    type: 'Multikey',
     controller: 'did:web:example.com',
     publicKeyMultibase: 'z5XHXVX1dSGDpkGghy1AkXq5EgrErdSfTDGvstUpFjuB7'
   }],
   capabilityDelegation: [{
     id: 'did:web:example.com#z6MknmeMZEXLhS6g2p6YPHkQG4PkNsJev652CqnsArPm3dZa',
-    type: 'Ed25519VerificationKey2020',
+    type: 'Multikey',
     controller: 'did:web:example.com',
     publicKeyMultibase: 'z9KPJxzGuMtcCvKFqhinZQxqkZJ2oWCpfWpswLaRk8QnC'
   }],
@@ -134,15 +137,38 @@ const { didDocument, keyPairs, methodFor } = await didWebDriver.generate()
 
 ## Install
 
+- Node.js 24+ is recommended.
+
+To install via PNPM:
+
+```bash
+pnpm install @interop/did-web-resolver
+```
+
+To install locally (for development):
+
 ```bash
 git clone https://github.com/interop-alliance/did-web-resolver.git
 cd did-web-resolver
-npm install
+pnpm install
+```
+
+### React Native
+
+This library uses the global WHATWG `URL` API, which is available natively in
+Node.js and browsers. React Native's built-in `URL` is not spec-compliant (in
+particular it does not support property setters such as `url.pathname = ...`,
+which this library relies on). React Native consumers must install
+[`react-native-url-polyfill`](https://www.npmjs.com/package/react-native-url-polyfill)
+and import it before using this library:
+
+```js
+import 'react-native-url-polyfill/auto'
 ```
 
 ## Contribute
 
-* Coding Style: [Standard.js](https://standardjs.com/)
+* Coding Style: [Prettier](https://prettier.io/) + [ESLint](https://eslint.org/)
 * Docs: JSDoc
 * Readme: [standard-readme](https://github.com/RichardLitt/standard-readme)
 

package/dist/DidWebResolver.d.ts

@@ -0,0 +1,267 @@
+export declare function didFromUrl({ url }?: {
+    url?: string;
+}): string;
+export declare function urlFromDid({ did }: {
+    did: string | undefined;
+}): string;
+/**
+ * Returns the subnode of a DID document identified by `id`, with the
+ * appropriate `@context` attached. Searches `verificationMethod` first, then
+ * any other top-level node (e.g. `service`), so it can dereference keys *and*
+ * non-key subnodes.
+ *
+ * @param options {object} - Options hashmap.
+ * @param options.didDocument {object} - The DID Document to search.
+ * @param options.id {string} - The full id of the subnode to return.
+ *
+ * @returns {object} The matched subnode, cloned, with `@context`.
+ */
+export declare function getNode({ didDocument, id }: {
+    didDocument: any;
+    id: string;
+}): any;
+interface VerificationMethodEntry {
+    keyPair: any;
+    fragment?: string;
+    purposes?: string[];
+    serialization?: string;
+}
+export declare class DidWebResolver {
+    method: string;
+    allowList: string[];
+    fetchOptions: any;
+    logger: any;
+    _allowedKeyTypes: Map<string, {
+        fromMultibase: any;
+        generate?: any;
+    }>;
+    /**
+     * @param options {object} - Options hashmap.
+     * @param [options.allowList] {string[]} - Hosts permitted as fetch targets
+     *   (SSRF gate). Empty/absent means no restriction.
+     * @param [options.fetchOptions] {object} - Network limits passed to the http
+     *   client (`size` in bytes, `timeout` in ms).
+     * @param [options.logger] {object} - Logger object (with .info, .error, etc).
+     */
+    constructor({ allowList, fetchOptions, logger }?: {
+        allowList?: string[];
+        fetchOptions?: any;
+        logger?: any;
+    });
+    /**
+     * Registers a key suite this driver may handle when generating documents and
+     * rebuilding key pairs from plain descriptions.
+     *
+     * Preferred form: pass a `keyPairClass` exposing static `multibaseHeader`,
+     * `from`, and (optionally) `generate`. The driver reads the header off the
+     * class, so callers need not know the literal value.
+     *
+     * Lower-level form: pass `multibaseMultikeyHeader` plus a `fromMultibase`
+     * deserializer. Suites registered this way support resolution/rebuilding but
+     * not `generate()`.
+     *
+     * @param options {object} - Options hashmap.
+     * @param [options.keyPairClass] {Function} - A KeyPair suite class.
+     * @param [options.multibaseMultikeyHeader] {string} - Multibase header.
+     * @param [options.fromMultibase] {Function} - `{publicKeyMultibase}` to key.
+     */
+    use({ keyPairClass, multibaseMultikeyHeader, fromMultibase }?: {
+        keyPairClass?: any;
+        multibaseMultikeyHeader?: string;
+        fromMultibase?: any;
+    }): void;
+    /**
+     * Adds a single verification method to a DID document: exports the key's
+     * public node, assigns it the id `${did}#${fragment}`, pushes it into
+     * `verificationMethod`, references it under each requested purpose, and
+     * accumulates the key's `@context`.
+     *
+     * This is the foundational document-building primitive; it works on a freshly
+     * created document or on one fetched and republished with rotated keys.
+     *
+     * @param options {object} - Options hashmap.
+     * @param options.didDocument {object} - Document to mutate (must have `id`).
+     * @param options.keyPair {object} - A registered key suite instance.
+     * @param [options.keyPairs] {Map} - Optional key-id to key-pair map to update.
+     * @param [options.fragment] {string} - Author-chosen fragment (defaults to
+     *   the key fingerprint).
+     * @param [options.purposes] {string[]} - Verification relationships to wire.
+     * @param [options.serialization] {string} - `'multibase'` (default); `'jwk'`
+     *   is reserved for when key suites expose JWK export.
+     *
+     * @returns {object} The mutated DID document.
+     */
+    addVerificationMethod({ didDocument, keyPairs, keyPair, fragment, purposes, serialization }: {
+        didDocument: any;
+        keyPairs?: Map<string, any>;
+        keyPair: any;
+        fragment?: string;
+        purposes?: string[];
+        serialization?: string;
+    }): any;
+    /**
+     * Generates a new `did:web` DID Document.
+     *
+     * @example
+     *   const { didDocument, keyPairs } = await didWeb.generate({
+     *     url: 'https://example.com', verificationKeyPair
+     *   })
+     *   didDocument.id // -> 'did:web:example.com'
+     *
+     * Either an `id` or a `url` is required. For the single-key common case, pass
+     * a `verificationKeyPair` (or `seed`/`keyType` to generate one from a
+     * registered suite) and optionally a `keyAgreementKeyPair`. For multi-key
+     * documents, pass `verificationMethods`.
+     *
+     * @param options {object} - Options hashmap.
+     * @param [options.id] {string} - A did:web DID (else derived from `url`).
+     * @param [options.url] {string} - HTTPS url of the DID document.
+     * @param [options.seed] {string|Uint8Array} - Secret seed to derive a key.
+     * @param [options.keyType] {Function|string} - Which registered suite to
+     *   generate with (a key class or its multibase header).
+     * @param [options.verificationKeyPair] {object} - A pre-made verification key.
+     * @param [options.keyAgreementKeyPair] {object} - A pre-made keyAgreement key.
+     * @param [options.verificationMethods] {Array} - Multi-key entries, each
+     *   `{ keyPair, fragment?, purposes?, serialization? }`.
+     *
+     * @returns {Promise<{didDocument: object, keyPairs: Map, methodFor: Function}>}
+     */
+    generate({ id, url, seed, keyType, verificationKeyPair, keyAgreementKeyPair, verificationMethods }?: {
+        id?: string;
+        url?: string;
+        seed?: string | Uint8Array;
+        keyType?: any;
+        verificationKeyPair?: any;
+        keyAgreementKeyPair?: any;
+        verificationMethods?: VerificationMethodEntry[];
+    }): Promise<{
+        didDocument: any;
+        keyPairs: Map<string, any>;
+        methodFor: (options: {
+            purpose: string;
+        }) => any;
+    }>;
+    /**
+     * Generates a `did:web` DID Document from existing key pairs. A `url` or `id`
+     * is required (unlike `did:key`, a `did:web` identifier is not derivable from
+     * key material alone).
+     *
+     * @param options {object} - Options hashmap.
+     * @param [options.url] {string} - HTTPS url of the DID document.
+     * @param [options.id] {string} - A did:web DID.
+     * @param [options.verificationKeyPair] {object} - A verification KeyPair.
+     * @param [options.keyAgreementKeyPair] {object} - A keyAgreement KeyPair.
+     *
+     * @returns {Promise<{didDocument: object, keyPairs: Map, methodFor: Function}>}
+     */
+    fromKeyPair({ url, id, verificationKeyPair, keyAgreementKeyPair }?: {
+        url?: string;
+        id?: string;
+        verificationKeyPair?: any;
+        keyAgreementKeyPair?: any;
+    }): Promise<{
+        didDocument: any;
+        keyPairs: Map<string, any>;
+        methodFor: (options: {
+            purpose: string;
+        }) => any;
+    }>;
+    /**
+     * Converts a public key description to a `did:web` DID Document. A `url` or
+     * `id` is required. Unlike `generate()`, no `keyPairs` map is returned.
+     *
+     * @param options {object} - Options hashmap.
+     * @param [options.url] {string} - HTTPS url of the DID document.
+     * @param [options.id] {string} - A did:web DID.
+     * @param options.publicKeyDescription {object} - A key pair instance or a
+     *   plain public key description (e.g. from a KMS).
+     *
+     * @returns {Promise<{didDocument: object}>}
+     */
+    publicKeyToDidDoc({ url, id, publicKeyDescription }?: {
+        url?: string;
+        id?: string;
+        publicKeyDescription?: any;
+    }): Promise<{
+        didDocument: any;
+    }>;
+    /**
+     * Computes the id of a given key pair (used by `did-io` drivers). For
+     * `did:web` the id depends on the document's DID, so the key pair must
+     * already carry an `id` or a `controller`.
+     *
+     * @param options {object} - Options hashmap.
+     * @param options.keyPair {object} - The key pair.
+     *
+     * @returns {Promise<string>} The key's id.
+     */
+    computeId({ keyPair }: {
+        keyPair: any;
+    }): Promise<string>;
+    /**
+     * Fetches a `did:web` DID Document for a given DID, or dereferences a subnode
+     * when the DID carries a `#fragment`. Applies the SSRF allow list, network
+     * limits, and verifies that the fetched document's `id` matches the DID.
+     *
+     * @param options {object} - Options hashmap.
+     * @param [options.did] {string} - For example, 'did:web:example.com'.
+     * @param [options.url] {string} - Alias for `did`, for readability.
+     * @param [options.agent] {object} - Optional agent to customize network
+     *   behavior in Node.js (such as `rejectUnauthorized: false`).
+     * @param [options.fetchOptions] {object} - Per-request network limits,
+     *   merged over the driver's defaults.
+     * @param [options.logger] {object} - Logger object.
+     *
+     * @throws {Error}
+     *
+     * @returns {Promise<object>} The DID Document, or a public key / subnode.
+     */
+    get({ did, url, agent, fetchOptions, logger }?: {
+        did?: string;
+        url?: string;
+        agent?: any;
+        fetchOptions?: any;
+        logger?: any;
+        [key: string]: unknown;
+    }): Promise<object>;
+    /**
+     * Returns the public key (verification method) object for a given DID
+     * Document and purpose. Useful in conjunction with a `.get()` call.
+     *
+     * @param options {object} - Options hashmap.
+     * @param options.didDocument {object} - DID Document (retrieved via a
+     *   `.get()` or from some other source).
+     * @param options.purpose {string} - Verification method purpose, such as
+     *   'authentication', 'assertionMethod', 'keyAgreement' and so on.
+     *
+     * @returns {object} The public key object (without a `@context`).
+     */
+    publicMethodFor({ didDocument, purpose }: {
+        didDocument: any;
+        purpose: string;
+    }): any;
+    /**
+     * Generates a verification key pair from a registered suite.
+     *
+     * @param options {object} - Options hashmap.
+     * @param [options.seed] {string|Uint8Array} - Secret seed.
+     * @param [options.keyType] {Function|string} - Which registered suite to use.
+     *
+     * @returns {Promise<object>} The generated key pair.
+     */
+    _generateKeyPair({ seed, keyType }?: {
+        seed?: string | Uint8Array;
+        keyType?: any;
+    }): Promise<any>;
+    /**
+     * Resolves a key pair instance from either a live key pair (with `.export`)
+     * or a plain public key description (rebuilt via the registry).
+     *
+     * @param description {object} - A key pair instance or key description.
+     *
+     * @returns {Promise<object>} A live key pair instance.
+     */
+    _toKeyPair(description: any): Promise<any>;
+}
+export {};
+//# sourceMappingURL=DidWebResolver.d.ts.map

package/dist/DidWebResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DidWebResolver.d.ts","sourceRoot":"","sources":["../src/DidWebResolver.ts"],"names":[],"mappings":"AAmBA,wBAAgB,UAAU,CAAE,EAAE,GAAG,EAAE,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,MAAM,CAmClE;AAED,wBAAgB,UAAU,CAAE,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,MAAM,CAgCxE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,OAAO,CACrB,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE;IAAE,WAAW,EAAE,GAAG,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACpD,GAAG,CA2BL;AAED,UAAU,uBAAuB;IAC/B,OAAO,EAAE,GAAG,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,qBAAa,cAAc;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,YAAY,EAAE,GAAG,CAAA;IACjB,MAAM,EAAE,GAAG,CAAA;IACX,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,aAAa,EAAE,GAAG,CAAC;QAAC,QAAQ,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,CAAA;IAE5E;;;;;;;OAOG;gBACU,EACX,SAAc,EACd,YAAkC,EAClC,MAAgB,EACjB,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,GAAG,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAO;IAQlE;;;;;;;;;;;;;;;;OAgBG;IACH,GAAG,CAAE,EAAE,YAAY,EAAE,uBAAuB,EAAE,aAAa,EAAE,GAC7D;QAAE,YAAY,CAAC,EAAE,GAAG,CAAC;QAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,GAAG,CAAA;KAAO,GAC/E,IAAI;IA0BP;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,qBAAqB,CAAE,EACrB,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAA2B,EACrE,aAA2B,EAC5B,EAAE;QACD,WAAW,EAAE,GAAG,CAAC;QAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAAC,OAAO,EAAE,GAAG,CAAC;QAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAC/D,GAAG,GAAG;IAsCP;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,QAAQ,CAAE,EACd,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAChE,mBAAmB,EACpB,GAAE;QACD,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;QACtD,OAAO,CAAC,EAAE,GAAG,CAAC;QAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC;QAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC;QACpE,mBAAmB,CAAC,EAAE,uBAAuB,EAAE,CAAA;KAC3C,GAAG,OAAO,CAAC;QACf,WAAW,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7C,SAAS,EAAE,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,KAAK,GAAG,CAAA;KACjD,CAAC;IAoDF;;;;;;;;;;;;OAYG;IACG,WAAW,CAAE,EACjB,GAAG,EAAE,EAAE,EAAE,mBAAmB,EAAE,mBAAmB,EAClD,GAAE;QACD,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC;QACrD,mBAAmB,CAAC,EAAE,GAAG,CAAA;KACrB,GAAG,OAAO,CAAC;QACf,WAAW,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7C,SAAS,EAAE,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,KAAK,GAAG,CAAA;KACjD,CAAC;IAYF;;;;;;;;;;;OAWG;IACG,iBAAiB,CAAE,EACvB,GAAG,EAAE,EAAE,EAAE,oBAAoB,EAC9B,GAAE;QACD,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,GAAG,CAAA;KACjD,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,GAAG,CAAA;KAAE,CAAC;IAetC;;;;;;;;;OASG;IACG,SAAS,CAAE,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE,GAAG,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAWhE;;;;;;;;;;;;;;;;;OAiBG;IACG,GAAG,CAAE,EACT,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAiB,EAAE,MAAoB,EACzD,GAAE;QACD,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,GAAG,CAAC;QAAC,YAAY,CAAC,EAAE,GAAG,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAC;QAC1E,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC;IAyCxB;;;;;;;;;;;OAWG;IACH,eAAe,CAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;QAAE,WAAW,EAAE,GAAG,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,GAAG;IActF;;;;;;;;OAQG;IACG,gBAAgB,CACpB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAO,GACpE,OAAO,CAAC,GAAG,CAAC;IA0Bf;;;;;;;OAOG;IACG,UAAU,CAAE,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;CAkBlD"}