@libp2p/keychain 3.0.8 → 4.0.0

package/dist/src/index.js

@@ -22,7 +22,7 @@
  *
  * The **key id** is the SHA-256 [multihash](https://github.com/multiformats/multihash) of its public key.
  *
- * The *public key* is a [protobuf encoding](https://github.com/libp2p/js-libp2p-crypto/blob/master/src/keys/keys.proto.js) containing a type and the [DER encoding](https://en.wikipedia.org/wiki/X.690) of the PKCS [SubjectPublicKeyInfo](https://www.ietf.org/rfc/rfc3279.txt).
+ * The *public key* is a [protobuf encoding](https://github.com/libp2p/js-libp2p/blob/main/packages/crypto/src/keys/keys.proto.js) containing a type and the [DER encoding](https://en.wikipedia.org/wiki/X.690) of the PKCS [SubjectPublicKeyInfo](https://www.ietf.org/rfc/rfc3279.txt).
  *
  * ## Private key storage
  *
@@ -49,498 +49,10 @@
  *
  * A key benefit is that now the key chain can be used in browser with the [js-datastore-level](https://github.com/ipfs/js-datastore-level) implementation.
  */
-/* eslint max-nested-callbacks: ["error", 5] */
-import { pbkdf2, randomBytes } from '@libp2p/crypto';
-import { generateKeyPair, importKey, unmarshalPrivateKey } from '@libp2p/crypto/keys';
-import { CodeError } from '@libp2p/interface/errors';
-import { logger } from '@libp2p/logger';
-import { peerIdFromKeys } from '@libp2p/peer-id';
-import { Key } from 'interface-datastore/key';
-import mergeOptions from 'merge-options';
-import sanitize from 'sanitize-filename';
-import { fromString as uint8ArrayFromString } from 'uint8arrays/from-string';
-import { toString as uint8ArrayToString } from 'uint8arrays/to-string';
-import { codes } from './errors.js';
-const log = logger('libp2p:keychain');
-const keyPrefix = '/pkcs8/';
-const infoPrefix = '/info/';
-const privates = new WeakMap();
-// NIST SP 800-132
-const NIST = {
-    minKeyLength: 112 / 8,
-    minSaltLength: 128 / 8,
-    minIterationCount: 1000
-};
-const defaultOptions = {
-    // See https://cryptosense.com/parametesr-choice-for-pbkdf2/
-    dek: {
-        keyLength: 512 / 8,
-        iterationCount: 10000,
-        salt: 'you should override this value with a crypto secure random number',
-        hash: 'sha2-512'
-    }
-};
-function validateKeyName(name) {
-    if (name == null) {
-        return false;
-    }
-    if (typeof name !== 'string') {
-        return false;
-    }
-    return name === sanitize(name.trim()) && name.length > 0;
-}
-/**
- * Throws an error after a delay
- *
- * This assumes than an error indicates that the keychain is under attack. Delay returning an
- * error to make brute force attacks harder.
- */
-async function randomDelay() {
-    const min = 200;
-    const max = 1000;
-    const delay = Math.random() * (max - min) + min;
-    await new Promise(resolve => setTimeout(resolve, delay));
-}
-/**
- * Converts a key name into a datastore name
- */
-function DsName(name) {
-    return new Key(keyPrefix + name);
-}
-/**
- * Converts a key name into a datastore info name
- */
-function DsInfoName(name) {
-    return new Key(infoPrefix + name);
-}
-/**
- * Manages the lifecycle of a key. Keys are encrypted at rest using PKCS #8.
- *
- * A key in the store has two entries
- * - '/info/*key-name*', contains the KeyInfo for the key
- * - '/pkcs8/*key-name*', contains the PKCS #8 for the key
- *
- */
-export class DefaultKeyChain {
-    components;
-    init;
-    /**
-     * Creates a new instance of a key chain
-     */
-    constructor(components, init) {
-        this.components = components;
-        this.init = mergeOptions(defaultOptions, init);
-        // Enforce NIST SP 800-132
-        if (this.init.pass != null && this.init.pass?.length < 20) {
-            throw new Error('pass must be least 20 characters');
-        }
-        if (this.init.dek?.keyLength != null && this.init.dek.keyLength < NIST.minKeyLength) {
-            throw new Error(`dek.keyLength must be least ${NIST.minKeyLength} bytes`);
-        }
-        if (this.init.dek?.salt?.length != null && this.init.dek.salt.length < NIST.minSaltLength) {
-            throw new Error(`dek.saltLength must be least ${NIST.minSaltLength} bytes`);
-        }
-        if (this.init.dek?.iterationCount != null && this.init.dek.iterationCount < NIST.minIterationCount) {
-            throw new Error(`dek.iterationCount must be least ${NIST.minIterationCount}`);
-        }
-        const dek = this.init.pass != null && this.init.dek?.salt != null
-            ? pbkdf2(this.init.pass, this.init.dek?.salt, this.init.dek?.iterationCount, this.init.dek?.keyLength, this.init.dek?.hash)
-            : '';
-        privates.set(this, { dek });
-    }
-    /**
-     * Generates the options for a keychain.  A random salt is produced.
-     *
-     * @returns {object}
-     */
-    static generateOptions() {
-        const options = Object.assign({}, defaultOptions);
-        const saltLength = Math.ceil(NIST.minSaltLength / 3) * 3; // no base64 padding
-        options.dek.salt = uint8ArrayToString(randomBytes(saltLength), 'base64');
-        return options;
-    }
-    /**
-     * Gets an object that can encrypt/decrypt protected data.
-     * The default options for a keychain.
-     *
-     * @returns {object}
-     */
-    static get options() {
-        return defaultOptions;
-    }
-    /**
-     * Create a new key.
-     *
-     * @param {string} name - The local key name; cannot already exist.
-     * @param {string} type - One of the key types; 'rsa'.
-     * @param {number} [size = 2048] - The key size in bits. Used for rsa keys only
-     */
-    async createKey(name, type, size = 2048) {
-        if (!validateKeyName(name) || name === 'self') {
-            await randomDelay();
-            throw new CodeError('Invalid key name', codes.ERR_INVALID_KEY_NAME);
-        }
-        if (typeof type !== 'string') {
-            await randomDelay();
-            throw new CodeError('Invalid key type', codes.ERR_INVALID_KEY_TYPE);
-        }
-        const dsname = DsName(name);
-        const exists = await this.components.datastore.has(dsname);
-        if (exists) {
-            await randomDelay();
-            throw new CodeError('Key name already exists', codes.ERR_KEY_ALREADY_EXISTS);
-        }
-        switch (type.toLowerCase()) {
-            case 'rsa':
-                if (!Number.isSafeInteger(size) || size < 2048) {
-                    await randomDelay();
-                    throw new CodeError('Invalid RSA key size', codes.ERR_INVALID_KEY_SIZE);
-                }
-                break;
-            default:
-                break;
-        }
-        let keyInfo;
-        try {
-            const keypair = await generateKeyPair(type, size);
-            const kid = await keypair.id();
-            const cached = privates.get(this);
-            if (cached == null) {
-                throw new CodeError('dek missing', codes.ERR_INVALID_PARAMETERS);
-            }
-            const dek = cached.dek;
-            const pem = await keypair.export(dek);
-            keyInfo = {
-                name,
-                id: kid
-            };
-            const batch = this.components.datastore.batch();
-            batch.put(dsname, uint8ArrayFromString(pem));
-            batch.put(DsInfoName(name), uint8ArrayFromString(JSON.stringify(keyInfo)));
-            await batch.commit();
-        }
-        catch (err) {
-            await randomDelay();
-            throw err;
-        }
-        return keyInfo;
-    }
-    /**
-     * List all the keys.
-     *
-     * @returns {Promise<KeyInfo[]>}
-     */
-    async listKeys() {
-        const query = {
-            prefix: infoPrefix
-        };
-        const info = [];
-        for await (const value of this.components.datastore.query(query)) {
-            info.push(JSON.parse(uint8ArrayToString(value.value)));
-        }
-        return info;
-    }
-    /**
-     * Find a key by it's id
-     */
-    async findKeyById(id) {
-        try {
-            const keys = await this.listKeys();
-            const key = keys.find((k) => k.id === id);
-            if (key == null) {
-                throw new CodeError(`Key with id '${id}' does not exist.`, codes.ERR_KEY_NOT_FOUND);
-            }
-            return key;
-        }
-        catch (err) {
-            await randomDelay();
-            throw err;
-        }
-    }
-    /**
-     * Find a key by it's name.
-     *
-     * @param {string} name - The local key name.
-     * @returns {Promise<KeyInfo>}
-     */
-    async findKeyByName(name) {
-        if (!validateKeyName(name)) {
-            await randomDelay();
-            throw new CodeError(`Invalid key name '${name}'`, codes.ERR_INVALID_KEY_NAME);
-        }
-        const dsname = DsInfoName(name);
-        try {
-            const res = await this.components.datastore.get(dsname);
-            return JSON.parse(uint8ArrayToString(res));
-        }
-        catch (err) {
-            await randomDelay();
-            log.error(err);
-            throw new CodeError(`Key '${name}' does not exist.`, codes.ERR_KEY_NOT_FOUND);
-        }
-    }
-    /**
-     * Remove an existing key.
-     *
-     * @param {string} name - The local key name; must already exist.
-     * @returns {Promise<KeyInfo>}
-     */
-    async removeKey(name) {
-        if (!validateKeyName(name) || name === 'self') {
-            await randomDelay();
-            throw new CodeError(`Invalid key name '${name}'`, codes.ERR_INVALID_KEY_NAME);
-        }
-        const dsname = DsName(name);
-        const keyInfo = await this.findKeyByName(name);
-        const batch = this.components.datastore.batch();
-        batch.delete(dsname);
-        batch.delete(DsInfoName(name));
-        await batch.commit();
-        return keyInfo;
-    }
-    /**
-     * Rename a key
-     *
-     * @param {string} oldName - The old local key name; must already exist.
-     * @param {string} newName - The new local key name; must not already exist.
-     * @returns {Promise<KeyInfo>}
-     */
-    async renameKey(oldName, newName) {
-        if (!validateKeyName(oldName) || oldName === 'self') {
-            await randomDelay();
-            throw new CodeError(`Invalid old key name '${oldName}'`, codes.ERR_OLD_KEY_NAME_INVALID);
-        }
-        if (!validateKeyName(newName) || newName === 'self') {
-            await randomDelay();
-            throw new CodeError(`Invalid new key name '${newName}'`, codes.ERR_NEW_KEY_NAME_INVALID);
-        }
-        const oldDsname = DsName(oldName);
-        const newDsname = DsName(newName);
-        const oldInfoName = DsInfoName(oldName);
-        const newInfoName = DsInfoName(newName);
-        const exists = await this.components.datastore.has(newDsname);
-        if (exists) {
-            await randomDelay();
-            throw new CodeError(`Key '${newName}' already exists`, codes.ERR_KEY_ALREADY_EXISTS);
-        }
-        try {
-            const pem = await this.components.datastore.get(oldDsname);
-            const res = await this.components.datastore.get(oldInfoName);
-            const keyInfo = JSON.parse(uint8ArrayToString(res));
-            keyInfo.name = newName;
-            const batch = this.components.datastore.batch();
-            batch.put(newDsname, pem);
-            batch.put(newInfoName, uint8ArrayFromString(JSON.stringify(keyInfo)));
-            batch.delete(oldDsname);
-            batch.delete(oldInfoName);
-            await batch.commit();
-            return keyInfo;
-        }
-        catch (err) {
-            await randomDelay();
-            throw err;
-        }
-    }
-    /**
-     * Export an existing key as a PEM encrypted PKCS #8 string
-     */
-    async exportKey(name, password) {
-        if (!validateKeyName(name)) {
-            await randomDelay();
-            throw new CodeError(`Invalid key name '${name}'`, codes.ERR_INVALID_KEY_NAME);
-        }
-        if (password == null) {
-            await randomDelay();
-            throw new CodeError('Password is required', codes.ERR_PASSWORD_REQUIRED);
-        }
-        const dsname = DsName(name);
-        try {
-            const res = await this.components.datastore.get(dsname);
-            const pem = uint8ArrayToString(res);
-            const cached = privates.get(this);
-            if (cached == null) {
-                throw new CodeError('dek missing', codes.ERR_INVALID_PARAMETERS);
-            }
-            const dek = cached.dek;
-            const privateKey = await importKey(pem, dek);
-            const keyString = await privateKey.export(password);
-            return keyString;
-        }
-        catch (err) {
-            await randomDelay();
-            throw err;
-        }
-    }
-    /**
-     * Export an existing key as a PeerId
-     */
-    async exportPeerId(name) {
-        const password = 'temporary-password';
-        const pem = await this.exportKey(name, password);
-        const privateKey = await importKey(pem, password);
-        return peerIdFromKeys(privateKey.public.bytes, privateKey.bytes);
-    }
-    /**
-     * Import a new key from a PEM encoded PKCS #8 string
-     *
-     * @param {string} name - The local key name; must not already exist.
-     * @param {string} pem - The PEM encoded PKCS #8 string
-     * @param {string} password - The password.
-     * @returns {Promise<KeyInfo>}
-     */
-    async importKey(name, pem, password) {
-        if (!validateKeyName(name) || name === 'self') {
-            await randomDelay();
-            throw new CodeError(`Invalid key name '${name}'`, codes.ERR_INVALID_KEY_NAME);
-        }
-        if (pem == null) {
-            await randomDelay();
-            throw new CodeError('PEM encoded key is required', codes.ERR_PEM_REQUIRED);
-        }
-        const dsname = DsName(name);
-        const exists = await this.components.datastore.has(dsname);
-        if (exists) {
-            await randomDelay();
-            throw new CodeError(`Key '${name}' already exists`, codes.ERR_KEY_ALREADY_EXISTS);
-        }
-        let privateKey;
-        try {
-            privateKey = await importKey(pem, password);
-        }
-        catch (err) {
-            await randomDelay();
-            throw new CodeError('Cannot read the key, most likely the password is wrong', codes.ERR_CANNOT_READ_KEY);
-        }
-        let kid;
-        try {
-            kid = await privateKey.id();
-            const cached = privates.get(this);
-            if (cached == null) {
-                throw new CodeError('dek missing', codes.ERR_INVALID_PARAMETERS);
-            }
-            const dek = cached.dek;
-            pem = await privateKey.export(dek);
-        }
-        catch (err) {
-            await randomDelay();
-            throw err;
-        }
-        const keyInfo = {
-            name,
-            id: kid
-        };
-        const batch = this.components.datastore.batch();
-        batch.put(dsname, uint8ArrayFromString(pem));
-        batch.put(DsInfoName(name), uint8ArrayFromString(JSON.stringify(keyInfo)));
-        await batch.commit();
-        return keyInfo;
-    }
-    /**
-     * Import a peer key
-     */
-    async importPeer(name, peer) {
-        try {
-            if (!validateKeyName(name)) {
-                throw new CodeError(`Invalid key name '${name}'`, codes.ERR_INVALID_KEY_NAME);
-            }
-            if (peer == null) {
-                throw new CodeError('PeerId is required', codes.ERR_MISSING_PRIVATE_KEY);
-            }
-            if (peer.privateKey == null) {
-                throw new CodeError('PeerId.privKey is required', codes.ERR_MISSING_PRIVATE_KEY);
-            }
-            const privateKey = await unmarshalPrivateKey(peer.privateKey);
-            const dsname = DsName(name);
-            const exists = await this.components.datastore.has(dsname);
-            if (exists) {
-                await randomDelay();
-                throw new CodeError(`Key '${name}' already exists`, codes.ERR_KEY_ALREADY_EXISTS);
-            }
-            const cached = privates.get(this);
-            if (cached == null) {
-                throw new CodeError('dek missing', codes.ERR_INVALID_PARAMETERS);
-            }
-            const dek = cached.dek;
-            const pem = await privateKey.export(dek);
-            const keyInfo = {
-                name,
-                id: peer.toString()
-            };
-            const batch = this.components.datastore.batch();
-            batch.put(dsname, uint8ArrayFromString(pem));
-            batch.put(DsInfoName(name), uint8ArrayFromString(JSON.stringify(keyInfo)));
-            await batch.commit();
-            return keyInfo;
-        }
-        catch (err) {
-            await randomDelay();
-            throw err;
-        }
-    }
-    /**
-     * Gets the private key as PEM encoded PKCS #8 string
-     */
-    async getPrivateKey(name) {
-        if (!validateKeyName(name)) {
-            await randomDelay();
-            throw new CodeError(`Invalid key name '${name}'`, codes.ERR_INVALID_KEY_NAME);
-        }
-        try {
-            const dsname = DsName(name);
-            const res = await this.components.datastore.get(dsname);
-            return uint8ArrayToString(res);
-        }
-        catch (err) {
-            await randomDelay();
-            log.error(err);
-            throw new CodeError(`Key '${name}' does not exist.`, codes.ERR_KEY_NOT_FOUND);
-        }
-    }
-    /**
-     * Rotate keychain password and re-encrypt all associated keys
-     */
-    async rotateKeychainPass(oldPass, newPass) {
-        if (typeof oldPass !== 'string') {
-            await randomDelay();
-            throw new CodeError(`Invalid old pass type '${typeof oldPass}'`, codes.ERR_INVALID_OLD_PASS_TYPE);
-        }
-        if (typeof newPass !== 'string') {
-            await randomDelay();
-            throw new CodeError(`Invalid new pass type '${typeof newPass}'`, codes.ERR_INVALID_NEW_PASS_TYPE);
-        }
-        if (newPass.length < 20) {
-            await randomDelay();
-            throw new CodeError(`Invalid pass length ${newPass.length}`, codes.ERR_INVALID_PASS_LENGTH);
-        }
-        log('recreating keychain');
-        const cached = privates.get(this);
-        if (cached == null) {
-            throw new CodeError('dek missing', codes.ERR_INVALID_PARAMETERS);
-        }
-        const oldDek = cached.dek;
-        this.init.pass = newPass;
-        const newDek = newPass != null && this.init.dek?.salt != null
-            ? pbkdf2(newPass, this.init.dek.salt, this.init.dek?.iterationCount, this.init.dek?.keyLength, this.init.dek?.hash)
-            : '';
-        privates.set(this, { dek: newDek });
-        const keys = await this.listKeys();
-        for (const key of keys) {
-            const res = await this.components.datastore.get(DsName(key.name));
-            const pem = uint8ArrayToString(res);
-            const privateKey = await importKey(pem, oldDek);
-            const password = newDek.toString();
-            const keyAsPEM = await privateKey.export(password);
-            // Update stored key
-            const batch = this.components.datastore.batch();
-            const keyInfo = {
-                name: key.name,
-                id: key.id
-            };
-            batch.put(DsName(key.name), uint8ArrayFromString(keyAsPEM));
-            batch.put(DsInfoName(key.name), uint8ArrayFromString(JSON.stringify(keyInfo)));
-            await batch.commit();
-        }
-        log('keychain reconstructed');
-    }
+import { DefaultKeychain } from './keychain.js';
+export function keychain(init = {}) {
+    return (components) => {
+        return new DefaultKeychain(components, init);
+    };
 }
 //# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,+CAA+C;AAE/C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAA;AAC7C,OAAO,YAAY,MAAM,eAAe,CAAA;AACxC,OAAO,QAAQ,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAMnC,MAAM,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAA;AAcrC,MAAM,SAAS,GAAG,SAAS,CAAA;AAC3B,MAAM,UAAU,GAAG,QAAQ,CAAA;AAC3B,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA2B,CAAA;AAEvD,kBAAkB;AAClB,MAAM,IAAI,GAAG;IACX,YAAY,EAAE,GAAG,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,GAAG,CAAC;IACtB,iBAAiB,EAAE,IAAI;CACxB,CAAA;AAED,MAAM,cAAc,GAAG;IACrB,4DAA4D;IAC5D,GAAG,EAAE;QACH,SAAS,EAAE,GAAG,GAAG,CAAC;QAClB,cAAc,EAAE,KAAK;QACrB,IAAI,EAAE,mEAAmE;QACzE,IAAI,EAAE,UAAU;KACjB;CACF,CAAA;AAED,SAAS,eAAe,CAAE,IAAY;IACpC,IAAI,IAAI,IAAI,IAAI,EAAE;QAChB,OAAO,KAAK,CAAA;KACb;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;QAC5B,OAAO,KAAK,CAAA;KACb;IACD,OAAO,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW;IACxB,MAAM,GAAG,GAAG,GAAG,CAAA;IACf,MAAM,GAAG,GAAG,IAAI,CAAA;IAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,CAAA;IAE/C,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,MAAM,CAAE,IAAY;IAC3B,OAAO,IAAI,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;AAClC,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAE,IAAY;IAC/B,OAAO,IAAI,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;AACnC,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IACT,UAAU,CAAoB;IAC9B,IAAI,CAAc;IAEnC;;OAEG;IACH,YAAa,UAA8B,EAAE,IAAkB;QAC7D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;QAE9C,0BAA0B;QAC1B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,EAAE,EAAE;YACzD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;SACpD;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE;YACnF,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,YAAY,QAAQ,CAAC,CAAA;SAC1E;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE;YACzF,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,aAAa,QAAQ,CAAC,CAAA;SAC5E;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE;YAClG,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAA;SAC9E;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI;YAC/D,CAAC,CAAC,MAAM,CACN,IAAI,CAAC,IAAI,CAAC,IAAI,EACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EACnB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EACxB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;YACtB,CAAC,CAAC,EAAE,CAAA;QAEN,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7B,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,eAAe;QACpB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA,CAAC,oBAAoB;QAC7E,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,kBAAkB,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAA;QACxE,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;;;;OAKG;IACH,MAAM,KAAK,OAAO;QAChB,OAAO,cAAc,CAAA;IACvB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAE,IAAY,EAAE,IAAa,EAAE,IAAI,GAAG,IAAI;QACvD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE;YAC7C,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;SACpE;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;YAC5B,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;SACpE;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1D,IAAI,MAAM,EAAE;YACV,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,yBAAyB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;SAC7E;QAED,QAAQ,IAAI,CAAC,WAAW,EAAE,EAAE;YAC1B,KAAK,KAAK;gBACR,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,EAAE;oBAC9C,MAAM,WAAW,EAAE,CAAA;oBACnB,MAAM,IAAI,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;iBACxE;gBACD,MAAK;YACP;gBACE,MAAK;SACR;QAED,IAAI,OAAO,CAAA;QACX,IAAI;YACF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACjD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,CAAA;YAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAEjC,IAAI,MAAM,IAAI,IAAI,EAAE;gBAClB,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;aACjE;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;YACtB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACrC,OAAO,GAAG;gBACR,IAAI;gBACJ,EAAE,EAAE,GAAG;aACR,CAAA;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;YAC/C,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAA;YAC5C,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAE1E,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;SACrB;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,GAAG,CAAA;SACV;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,UAAU;SACnB,CAAA;QAED,MAAM,IAAI,GAAG,EAAE,CAAA;QACf,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAChE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;SACvD;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAE,EAAU;QAC3B,IAAI;YACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YAEzC,IAAI,GAAG,IAAI,IAAI,EAAE;gBACf,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;aACpF;YAED,OAAO,GAAG,CAAA;SACX;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,GAAG,CAAA;SACV;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAE,IAAY;QAC/B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE;YAC1B,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,qBAAqB,IAAI,GAAG,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;SAC9E;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACvD,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAA;SAC3C;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,WAAW,EAAE,CAAA;YACnB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACd,MAAM,IAAI,SAAS,CAAC,QAAQ,IAAI,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;SAC9E;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAE,IAAY;QAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE;YAC7C,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,qBAAqB,IAAI,GAAG,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;SAC9E;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;QAC/C,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACpB,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;QACpB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAE,OAAe,EAAE,OAAe;QAC/C,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,MAAM,EAAE;YACnD,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,yBAAyB,OAAO,GAAG,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAA;SACzF;QACD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,MAAM,EAAE;YACnD,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,yBAAyB,OAAO,GAAG,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAA;SACzF;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QAEvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7D,IAAI,MAAM,EAAE;YACV,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,QAAQ,OAAO,kBAAkB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;SACrF;QAED,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAE5D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAA;YACnD,OAAO,CAAC,IAAI,GAAG,OAAO,CAAA;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;YAC/C,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;YACzB,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YACrE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACvB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YACzB,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;YACpB,OAAO,OAAO,CAAA;SACf;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,GAAG,CAAA;SACV;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAE,IAAY,EAAE,QAAgB;QAC7C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE;YAC1B,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,qBAAqB,IAAI,GAAG,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;SAC9E;QACD,IAAI,QAAQ,IAAI,IAAI,EAAE;YACpB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAA;SACzE;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3B,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACvD,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;YACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAEjC,IAAI,MAAM,IAAI,IAAI,EAAE;gBAClB,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;aACjE;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;YACtB,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAC5C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAEnD,OAAO,SAAS,CAAA;SACjB;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,GAAG,CAAA;SACV;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAE,IAAY;QAC9B,MAAM,QAAQ,GAAG,oBAAoB,CAAA;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAChD,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QAEjD,OAAO,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IAClE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CAAE,IAAY,EAAE,GAAW,EAAE,QAAgB;QAC1D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE;YAC7C,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,qBAAqB,IAAI,GAAG,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;SAC9E;QACD,IAAI,GAAG,IAAI,IAAI,EAAE;YACf,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,6BAA6B,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAA;SAC3E;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1D,IAAI,MAAM,EAAE;YACV,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,QAAQ,IAAI,kBAAkB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;SAClF;QAED,IAAI,UAAU,CAAA;QACd,IAAI;YACF,UAAU,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;SAC5C;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,wDAAwD,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAA;SACzG;QAED,IAAI,GAAG,CAAA;QACP,IAAI;YACF,GAAG,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,CAAA;YAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAEjC,IAAI,MAAM,IAAI,IAAI,EAAE;gBAClB,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;aACjE;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;YACtB,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;SACnC;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,GAAG,CAAA;SACV;QAED,MAAM,OAAO,GAAG;YACd,IAAI;YACJ,EAAE,EAAE,GAAG;SACR,CAAA;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;QAC/C,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5C,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC1E,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;QAEpB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAE,IAAY,EAAE,IAAY;QAC1C,IAAI;YACF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE;gBAC1B,MAAM,IAAI,SAAS,CAAC,qBAAqB,IAAI,GAAG,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;aAC9E;YACD,IAAI,IAAI,IAAI,IAAI,EAAE;gBAChB,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAA;aACzE;YACD,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE;gBAC3B,MAAM,IAAI,SAAS,CAAC,4BAA4B,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAA;aACjF;YAED,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAE7D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;YAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC1D,IAAI,MAAM,EAAE;gBACV,MAAM,WAAW,EAAE,CAAA;gBACnB,MAAM,IAAI,SAAS,CAAC,QAAQ,IAAI,kBAAkB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;aAClF;YAED,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAEjC,IAAI,MAAM,IAAI,IAAI,EAAE;gBAClB,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;aACjE;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;YACtB,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACxC,MAAM,OAAO,GAAY;gBACvB,IAAI;gBACJ,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE;aACpB,CAAA;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;YAC/C,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAA;YAC5C,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAC1E,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;YACpB,OAAO,OAAO,CAAA;SACf;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,GAAG,CAAA;SACV;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAE,IAAY;QAC/B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE;YAC1B,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,qBAAqB,IAAI,GAAG,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;SAC9E;QAED,IAAI;YACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;YAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACvD,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA;SAC/B;QAAC,OAAO,GAAQ,EAAE;YACjB,MAAM,WAAW,EAAE,CAAA;YACnB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACd,MAAM,IAAI,SAAS,CAAC,QAAQ,IAAI,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;SAC9E;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAE,OAAe,EAAE,OAAe;QACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;YAC/B,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,0BAA0B,OAAO,OAAO,GAAG,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAA;SAClG;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;YAC/B,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,0BAA0B,OAAO,OAAO,GAAG,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAA;SAClG;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE;YACvB,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,IAAI,SAAS,CAAC,uBAAuB,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAA;SAC5F;QACD,GAAG,CAAC,qBAAqB,CAAC,CAAA;QAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEjC,IAAI,MAAM,IAAI,IAAI,EAAE;YAClB,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;SACjE;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAA;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAA;QACxB,MAAM,MAAM,GAAG,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI;YAC3D,CAAC,CAAC,MAAM,CACN,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAClB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EACxB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;YACtB,CAAC,CAAC,EAAE,CAAA;QACN,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;YACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;YACjE,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;YACnC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;YAClC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAElD,oBAAoB;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;YAC/C,MAAM,OAAO,GAAG;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,EAAE,EAAE,GAAG,CAAC,EAAE;aACX,CAAA;YACD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC3D,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAC9E,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;SACrB;QACD,GAAG,CAAC,wBAAwB,CAAC,CAAA;IAC/B,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAoK/C,MAAM,UAAU,QAAQ,CAAE,OAAqB,EAAE;IAC/C,OAAO,CAAC,UAA8B,EAAE,EAAE;QACxC,OAAO,IAAI,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IAC9C,CAAC,CAAA;AACH,CAAC"}

package/dist/src/keychain.d.ts

@@ -0,0 +1,111 @@
+import type { KeychainComponents, KeychainInit, Keychain, KeyInfo } from './index.js';
+import type { KeyType, PeerId } from '@libp2p/interface';
+declare const defaultOptions: {
+    dek: {
+        keyLength: number;
+        iterationCount: number;
+        salt: string;
+        hash: string;
+    };
+};
+/**
+ * Manages the lifecycle of a key. Keys are encrypted at rest using PKCS #8.
+ *
+ * A key in the store has two entries
+ * - '/info/*key-name*', contains the KeyInfo for the key
+ * - '/pkcs8/*key-name*', contains the PKCS #8 for the key
+ *
+ */
+export declare class DefaultKeychain implements Keychain {
+    private readonly components;
+    private readonly init;
+    private readonly log;
+    /**
+     * Creates a new instance of a key chain
+     */
+    constructor(components: KeychainComponents, init: KeychainInit);
+    /**
+     * Generates the options for a keychain.  A random salt is produced.
+     *
+     * @returns {object}
+     */
+    static generateOptions(): KeychainInit;
+    /**
+     * Gets an object that can encrypt/decrypt protected data.
+     * The default options for a keychain.
+     *
+     * @returns {object}
+     */
+    static get options(): typeof defaultOptions;
+    /**
+     * Create a new key.
+     *
+     * @param {string} name - The local key name; cannot already exist.
+     * @param {string} type - One of the key types; 'rsa'.
+     * @param {number} [size = 2048] - The key size in bits. Used for rsa keys only
+     */
+    createKey(name: string, type: KeyType, size?: number): Promise<KeyInfo>;
+    /**
+     * List all the keys.
+     *
+     * @returns {Promise<KeyInfo[]>}
+     */
+    listKeys(): Promise<KeyInfo[]>;
+    /**
+     * Find a key by it's id
+     */
+    findKeyById(id: string): Promise<KeyInfo>;
+    /**
+     * Find a key by it's name.
+     *
+     * @param {string} name - The local key name.
+     * @returns {Promise<KeyInfo>}
+     */
+    findKeyByName(name: string): Promise<KeyInfo>;
+    /**
+     * Remove an existing key.
+     *
+     * @param {string} name - The local key name; must already exist.
+     * @returns {Promise<KeyInfo>}
+     */
+    removeKey(name: string): Promise<KeyInfo>;
+    /**
+     * Rename a key
+     *
+     * @param {string} oldName - The old local key name; must already exist.
+     * @param {string} newName - The new local key name; must not already exist.
+     * @returns {Promise<KeyInfo>}
+     */
+    renameKey(oldName: string, newName: string): Promise<KeyInfo>;
+    /**
+     * Export an existing key as a PEM encrypted PKCS #8 string
+     */
+    exportKey(name: string, password: string): Promise<string>;
+    /**
+     * Export an existing key as a PeerId
+     */
+    exportPeerId(name: string): Promise<PeerId>;
+    /**
+     * Import a new key from a PEM encoded PKCS #8 string
+     *
+     * @param {string} name - The local key name; must not already exist.
+     * @param {string} pem - The PEM encoded PKCS #8 string
+     * @param {string} password - The password.
+     * @returns {Promise<KeyInfo>}
+     */
+    importKey(name: string, pem: string, password: string): Promise<KeyInfo>;
+    /**
+     * Import a peer key
+     */
+    importPeer(name: string, peer: PeerId): Promise<KeyInfo>;
+    /**
+     * Gets the private key as PEM encoded PKCS #8 string
+     */
+    getPrivateKey(name: string): Promise<string>;
+    /**
+     * Rotate keychain password and re-encrypt all associated keys
+     */
+    rotateKeychainPass(oldPass: string, newPass: string): Promise<void>;
+}
+export {};
+//# sourceMappingURL=keychain.d.ts.map

package/dist/src/keychain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../../src/keychain.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACrF,OAAO,KAAK,EAAU,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAahE,QAAA,MAAM,cAAc;;;;;;;CAQnB,CAAA;AAwCD;;;;;;;GAOG;AACH,qBAAa,eAAgB,YAAW,QAAQ;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAE5B;;OAEG;gBACU,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY;IA+B/D;;;;OAIG;IACH,MAAM,CAAC,eAAe,IAAK,YAAY;IAOvC;;;;;OAKG;IACH,MAAM,KAAK,OAAO,IAAK,OAAO,cAAc,CAE3C;IAED;;;;;;OAMG;IACG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IA0D5E;;;;OAIG;IACG,QAAQ,IAAK,OAAO,CAAC,OAAO,EAAE,CAAC;IAarC;;OAEG;IACG,WAAW,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBhD;;;;;OAKG;IACG,aAAa,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiBpD;;;;;OAKG;IACG,SAAS,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAchD;;;;;;OAMG;IACG,SAAS,CAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuCpE;;OAEG;IACG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA+BjE;;OAEG;IACG,YAAY,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQlD;;;;;;;OAOG;IACG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoD/E;;OAEG;IACG,UAAU,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4C/D;;OAEG;IACG,aAAa,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBnD;;OAEG;IACG,kBAAkB,CAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAmD3E"}