@miradexio/client 0.1.0

package/dist/atomic-swap/monero-sweep/index.js

@@ -0,0 +1,415 @@
+/**
+ * Monero sweep protocol for atomic swaps — fully client-side.
+ *
+ * After the maker redeems BTC, the server reveals s_a (its key share).
+ * This module combines s_a + s_b to derive the full Monero spend key,
+ * fetches the lock transaction directly from public monerod nodes,
+ * selects decoys, builds construction data, signs via WASM, and
+ * broadcasts the raw transaction — all without server involvement
+ * beyond the initial key share retrieval.
+ *
+ * The private key s_b never leaves this process.
+ */
+import { Point } from '@noble/ed25519';
+import { bytesToHex } from '@noble/hashes/utils.js';
+import { noopLogger } from '../../interfaces/logger.js';
+import { delay } from '../../lib/delay.js';
+import { VerificationError } from '../../types/index.js';
+import { addScalars, hexToBytes, bytesToHex as scalarBytesToHex, bytesToBigInt, } from '../../lib/crypto/scalars.js';
+import { wipe } from '../../lib/crypto/bytes.js';
+import { ensureWasm, deriveKeyImages, signSweepTx, selectDecoys, computeCommitmentMask, decryptAmount, verifyCommitment, } from '../../lib/crypto/wasm.js';
+import { verifySweepTx } from '../../lib/monero/verify-sweep.js';
+import { scanTransactionOutputs, hexToScalar } from '../../lib/monero/output-scanner.js';
+import { fetchTransaction, fetchOutputKeys, fetchOutputDistribution, fetchFeeEstimate, broadcastTransaction, MAINNET_NODES, STAGENET_NODES, } from '../../lib/monero/rpc.js';
+/**
+ * Normalise both the snake_case (s_a_hex) and camelCase (sAHex) shapes the
+ * sidecar may emit into one strongly-typed record. Unknown fields are dropped.
+ */
+function parseSweepOutputs(pd) {
+    if (!pd || typeof pd !== 'object') {
+        return { sAHex: undefined, vHex: undefined, lockTxHash: undefined, lockAddress: undefined, serverReceiveAddr: undefined };
+    }
+    const rec = pd;
+    const pick = (...keys) => {
+        for (const k of keys) {
+            const v = rec[k];
+            if (typeof v === 'string' && v.length > 0)
+                return v;
+        }
+        return undefined;
+    };
+    return {
+        sAHex: pick('s_a_hex', 'sAHex'),
+        vHex: pick('v_hex', 'vHex'),
+        lockTxHash: pick('lock_tx_hash', 'lockTxHash'),
+        lockAddress: pick('monero_lock_address', 'moneroLockAddress'),
+        serverReceiveAddr: pick('receive_address', 'receiveAddress'),
+    };
+}
+const SWEEP_SYNC_TIMEOUT_MS = 120_000;
+const SWEEP_RETRY_INTERVAL_MS = 15_000;
+const SWEEP_ACTION_TIMEOUT_MS = 120_000;
+/** Max attempts for the full sweep (scan → decoys → sign → broadcast).
+ *  Retries cover transient monerod failures and intermittent `invalid_input`
+ *  caused by unlucky decoy selection. */
+const SWEEP_MAX_ATTEMPTS = 15;
+/** Backoff between sweep retries (doubles each attempt, capped at 60s). */
+const SWEEP_RETRY_BASE_MS = 5_000;
+/** Estimated tx size for fee calculation (1-in/2-out CLSAG + BP+, ring size 16).
+ *  Measured from actual signed transactions: ~3200 bytes. */
+const ESTIMATED_TX_SIZE = 3200;
+/** Fallback fee per byte if get_fee_estimate RPC is unavailable.
+ *  Uses the Monero default normal priority from cryptonote_config.h. */
+const FALLBACK_FEE_PER_BYTE = 23_000;
+/** Ring size for CLSAG + Bulletproofs+ (current Monero network). */
+const RING_SIZE = 16;
+import { validateRingMembers } from './ring-select.js';
+import { isRetryableSweepError } from './errors.js';
+export async function sweepMonero(api, params) {
+    const { swapId, s_b, receiveAddress, onProgress, logger: log = noopLogger } = params;
+    onProgress?.('Loading sweep module...');
+    log.info({ swapId }, 'Sweep: loading monero-sweep-wasm');
+    await ensureWasm();
+    log.info({ swapId }, 'Sweep: WASM module loaded');
+    onProgress?.('Loading sweep data from server...');
+    log.info({ swapId }, 'Sweep step 1: requesting redemption keys from server');
+    const syncStart = Date.now();
+    let sAHex;
+    let vHex;
+    let lockTxHash;
+    let lockAddress;
+    let serverReceiveAddr;
+    while (true) {
+        const outputsAction = await api.executeAction(swapId, { type: 'get-outputs' }, SWEEP_ACTION_TIMEOUT_MS);
+        const sweepData = parseSweepOutputs(outputsAction.protocolData);
+        sAHex = sweepData.sAHex;
+        vHex = sweepData.vHex;
+        lockTxHash = sweepData.lockTxHash;
+        lockAddress = sweepData.lockAddress;
+        serverReceiveAddr = sweepData.serverReceiveAddr;
+        if (sAHex && vHex && lockTxHash)
+            break;
+        if (Date.now() - syncStart >= SWEEP_SYNC_TIMEOUT_MS) {
+            log.error({ swapId, elapsed: Date.now() - syncStart }, 'Sweep key retrieval timed out');
+            throw new Error('Sweep key retrieval timed out');
+        }
+        onProgress?.('Waiting for sweep data...');
+        log.debug({ swapId, elapsed: Date.now() - syncStart, hasSA: !!sAHex, hasV: !!vHex, hasHash: !!lockTxHash }, 'Not ready, retrying');
+        await delay(SWEEP_RETRY_INTERVAL_MS);
+    }
+    if (!lockAddress)
+        throw new Error('Server did not return monero_lock_address');
+    if (serverReceiveAddr && serverReceiveAddr !== receiveAddress) {
+        throw new Error('Receive address mismatch — keystore and server disagree on XMR destination');
+    }
+    const s_a = hexToBytes(sAHex);
+    // AV-invariant C.5: the sidecar's s_a must multiply to S_a_monero before
+    // we combine it with s_b. Wrong s_a signs the sweep with a wrong key and
+    // silently produces a tx that cannot spend the joint output.
+    {
+        const s_aScalar = bytesToBigInt(s_a);
+        const s_aPoint = Point.BASE.multiply(s_aScalar);
+        const expectedS_aBytes = Point.fromHex(params.expectedSAMonero).toBytes();
+        if (bytesToHex(s_aPoint.toBytes()) !== bytesToHex(expectedS_aBytes)) {
+            throw new VerificationError('E_S_A_MISMATCH', 's_a returned by sidecar does not match S_a_monero, aborting sweep');
+        }
+    }
+    const v = hexToBytes(vHex);
+    const s_full = addScalars(s_a, s_b);
+    const spendKeyHex = scalarBytesToHex(s_full);
+    const viewKeyHex = scalarBytesToHex(v);
+    // AV-G.2: zero the individual share now that the combined key is derived.
+    wipe(s_a);
+    wipe(s_full);
+    const spendPubScalar = hexToScalar(spendKeyHex);
+    const spendPub = Point.BASE.multiply(spendPubScalar);
+    const spendPubHex = bytesToHex(spendPub.toBytes());
+    // Detect network from lock address prefix
+    const isMainnet = lockAddress.startsWith('4');
+    const monerodConfig = {
+        nodes: params.monerodNodes ?? (isMainnet ? [...MAINNET_NODES] : [...STAGENET_NODES]),
+        logger: log,
+    };
+    log.info({
+        swapId,
+        lockTxHash,
+        lockAddress,
+        network: isMainnet ? 'mainnet' : 'stagenet',
+        nodeCount: monerodConfig.nodes.length,
+    }, 'Sweep step 1 complete: keys received, scanning lock tx');
+    // Retry on transient network errors and intermittent `invalid_input`
+    // (caused by unlucky decoy selection on stagenet).
+    let lastSweepError;
+    for (let attempt = 0; attempt < SWEEP_MAX_ATTEMPTS; attempt++) {
+        try {
+            const result = await sweepScanSignBroadcast({
+                swapId, monerodConfig, lockTxHash, viewKeyHex, spendKeyHex,
+                spendPubHex, receiveAddress, api, log, onProgress,
+                unlockWindowBlocks: params.unlockWindowBlocks,
+            });
+            return result;
+        }
+        catch (err) {
+            lastSweepError = err;
+            const msg = err instanceof Error ? err.message : String(err);
+            const isRetryable = isRetryableSweepError(msg);
+            log.warn({ swapId, attempt: attempt + 1, maxAttempts: SWEEP_MAX_ATTEMPTS, error: msg, isRetryable }, isRetryable
+                ? 'Sweep attempt failed (retryable) — will retry'
+                : 'Sweep attempt failed (non-retryable)');
+            if (!isRetryable)
+                break;
+            if (attempt < SWEEP_MAX_ATTEMPTS - 1) {
+                const backoffMs = Math.min(SWEEP_RETRY_BASE_MS * (2 ** attempt), 60_000);
+                onProgress?.(`Sweep failed, retrying in ${Math.round(backoffMs / 1000)}s...`);
+                await delay(backoffMs);
+            }
+        }
+    }
+    throw lastSweepError ?? new Error('Sweep failed after all attempts');
+}
+/** Errors that warrant a retry (network failures + intermittent daemon rejections). */
+/** Steps 2–5: fetch lock tx → select decoys → sign → broadcast. */
+async function sweepScanSignBroadcast(ctx) {
+    const { swapId, monerodConfig, lockTxHash, viewKeyHex, spendKeyHex, spendPubHex, receiveAddress, api, log, onProgress, unlockWindowBlocks, } = ctx;
+    const buildDecoyInput = (distribution) => JSON.stringify(unlockWindowBlocks === undefined
+        ? { distribution }
+        : { distribution, unlock_window_blocks: unlockWindowBlocks });
+    onProgress?.('Scanning lock transaction...');
+    log.info({ swapId, lockTxHash }, 'Sweep step 2: fetching lock tx from monerod');
+    const fetched = await fetchTransaction(monerodConfig, lockTxHash);
+    log.info({
+        swapId,
+        confirmations: fetched.confirmations,
+        blockHeight: fetched.blockHeight,
+        outputCount: fetched.txJson.vout.length,
+        outputIndicesCount: fetched.outputIndices.length,
+    }, 'Lock tx fetched, scanning outputs');
+    const scannedOutputs = scanTransactionOutputs({
+        txJson: fetched.txJson,
+        globalOutputIndices: fetched.outputIndices,
+        viewKeyHex,
+        spendPubHex,
+        computeMask: computeCommitmentMask,
+        decryptAmountFn: decryptAmount,
+        logger: log,
+    });
+    if (scannedOutputs.length === 0) {
+        throw new Error('No outputs found at lock address — output scanning failed');
+    }
+    const realOutput = scannedOutputs[0];
+    if (!realOutput)
+        throw new Error('Scanned output is undefined');
+    log.info({
+        swapId,
+        outputIndex: realOutput.outputIndex,
+        globalOutputIndex: realOutput.globalOutputIndex,
+        amount: realOutput.amount.toString(),
+        amountXmr: (Number(realOutput.amount) / 1e12).toFixed(12),
+        rctMaskLen: realOutput.rctMask.length,
+    }, 'Sweep step 2 complete: real output found');
+    onProgress?.('Selecting decoys...');
+    log.info({ swapId }, 'Sweep step 3: selecting decoys via WASM');
+    // Fetch cumulative output distribution for gamma selection
+    const distribution = await fetchOutputDistribution(monerodConfig);
+    log.info({ swapId, distributionLen: distribution.length }, 'Output distribution fetched');
+    // Select decoys via WASM (gamma distribution matching wallet2)
+    const decoyResultJson = selectDecoys(realOutput.globalOutputIndex, buildDecoyInput(distribution), RING_SIZE);
+    const decoyResult = JSON.parse(decoyResultJson);
+    log.info({
+        swapId,
+        ringSize: decoyResult.indices.length,
+        realIndexInRing: decoyResult.real_index_in_ring,
+        firstIndices: decoyResult.indices.slice(0, 4).map(String),
+    }, 'Decoys selected');
+    // Fetch ring member public keys + commitments from monerod, validating
+    // each candidate ring is usable for CLSAG (reject torsion/identity keys —
+    // matches monero-oxide wallet2 select_n). On invalid ring, re-pick decoys
+    // and retry. Bumped from 5 → 50 because regtest's auto-miner constantly
+    // produces immature coinbase outputs at the chain tip; the gamma decoy
+    // distribution is recency-biased so a fresh draw can land 2-5 immature
+    // members per ring. Each retry is one monerod RPC + WASM decoy re-pick
+    // (~5ms), so 50 attempts per outer call is still under a second. Mainnet
+    // chains rarely need more than a couple of retries.
+    onProgress?.('Fetching ring member keys...');
+    const MAX_RING_RETRIES = 50;
+    let currentDecoyResult = decoyResult;
+    let ringMemberKeys = await fetchOutputKeys(monerodConfig, currentDecoyResult.indices);
+    for (let ringAttempt = 0; ringAttempt < MAX_RING_RETRIES; ringAttempt++) {
+        const invalidMembers = validateRingMembers(ringMemberKeys, log);
+        if (invalidMembers.length === 0)
+            break;
+        log.warn({
+            swapId,
+            attempt: ringAttempt + 1,
+            invalidCount: invalidMembers.length,
+            invalidIndices: invalidMembers.map((m) => m.ringIndex),
+        }, 'Ring contains invalid members (torsion/identity) — re-selecting decoys');
+        if (ringAttempt === MAX_RING_RETRIES - 1) {
+            throw new Error(`Failed to find valid ring after ${MAX_RING_RETRIES} attempts — ` +
+                `${invalidMembers.length} invalid members on last attempt`);
+        }
+        const retryDecoyJson = selectDecoys(realOutput.globalOutputIndex, buildDecoyInput(distribution), RING_SIZE);
+        currentDecoyResult = JSON.parse(retryDecoyJson);
+        ringMemberKeys = await fetchOutputKeys(monerodConfig, currentDecoyResult.indices);
+    }
+    const finalDecoyResult = currentDecoyResult;
+    log.info({ swapId, ringMemberCount: ringMemberKeys.length }, 'Ring member keys fetched (all valid)');
+    // Verify our commitment matches on-chain (debug check)
+    const realRingMember = ringMemberKeys[finalDecoyResult.real_index_in_ring];
+    if (realRingMember) {
+        const commitmentMatch = verifyCommitment(viewKeyHex, realOutput.txPublicKey, realOutput.outputIndex, realOutput.amount, realRingMember.mask);
+        log.info({
+            swapId,
+            commitmentMatch,
+            onChainMask: realRingMember.mask.slice(0, 16) + '...',
+            computedMask: realOutput.rctMask.slice(0, 16) + '...',
+            amount: realOutput.amount.toString(),
+        }, commitmentMatch
+            ? 'Commitment verification PASSED — mask + amount match on-chain'
+            : 'Commitment verification FAILED — mask derivation is wrong');
+        if (!commitmentMatch) {
+            throw new Error('Commitment verification failed: computed mask + amount does not match on-chain commitment. ' +
+                'The sweep transaction would be rejected.');
+        }
+    }
+    // Get fee estimate from monerod (adjusts based on mempool, like Feather wallet)
+    let feePerByte = FALLBACK_FEE_PER_BYTE;
+    let quantizationMask = 10_000;
+    try {
+        const estimate = await fetchFeeEstimate(monerodConfig);
+        feePerByte = estimate.feePerByte;
+        quantizationMask = estimate.quantizationMask || 10_000;
+        log.info({ swapId, feePerByte, quantizationMask }, 'Fee estimate received from monerod');
+    }
+    catch (err) {
+        log.warn({ swapId, error: err instanceof Error ? err.message : String(err) }, 'Fee estimate failed, using fallback');
+    }
+    // Fee = fee_per_byte * estimated_tx_size, rounded up to quantization mask
+    let networkFee = feePerByte * ESTIMATED_TX_SIZE;
+    if (quantizationMask > 0) {
+        networkFee = Math.ceil(networkFee / quantizationMask) * quantizationMask;
+    }
+    log.info({ swapId, feePerByte, estimatedTxSize: ESTIMATED_TX_SIZE, networkFee, quantizationMask }, 'Fee calculated');
+    const destinationAmount = Number(realOutput.amount) - networkFee;
+    if (destinationAmount <= 0) {
+        throw new Error(`Output amount ${realOutput.amount.toString()} is less than network fee ${String(networkFee)}`);
+    }
+    const structuredOutput = {
+        one_time_public_key: realOutput.oneTimePublicKey,
+        tx_public_key: realOutput.txPublicKey,
+        output_index: realOutput.outputIndex,
+        global_output_index: realOutput.globalOutputIndex,
+        amount: Number(realOutput.amount),
+        rct_mask: realOutput.rctMask,
+        additional_tx_keys: [],
+        subaddr_major: 0,
+        subaddr_minor: 0,
+    };
+    const constructionData = {
+        inputs: [
+            {
+                ring_members: ringMemberKeys.map((rm) => ({
+                    public_key: rm.key,
+                    commitment: rm.mask,
+                })),
+                real_output_index: finalDecoyResult.real_index_in_ring,
+                real_output: structuredOutput,
+                key_offsets: [...finalDecoyResult.indices],
+            },
+        ],
+        destination: {
+            address: receiveAddress,
+            amount: destinationAmount,
+        },
+        fee: networkFee,
+        tx_extra: '',
+        rct_type: 6,
+    };
+    log.info({
+        swapId,
+        inputCount: constructionData.inputs.length,
+        destinationAmount,
+        networkFee,
+        ringSize: ringMemberKeys.length,
+        rctType: 6,
+    }, 'Construction data built');
+    onProgress?.('Verifying transaction...');
+    log.info({ swapId }, 'Sweep step 4: verifying + signing');
+    const verification = verifySweepTx(constructionData, receiveAddress, log);
+    if (!verification.valid) {
+        throw new Error(`Sweep verification failed: ${verification.reason}`);
+    }
+    log.info({
+        swapId,
+        amount: verification.amount,
+        fee: verification.fee,
+        amountXmr: (Number(BigInt(verification.amount)) / 1e12).toFixed(12),
+    }, 'Sweep tx verified — signing via WASM');
+    // Derive key images (needed internally by sign_sweep_tx)
+    onProgress?.('Signing sweep transaction...');
+    const keyImagesJson = deriveKeyImages(JSON.stringify([structuredOutput]), viewKeyHex, spendKeyHex);
+    log.debug({ swapId, keyImagesJson: keyImagesJson.slice(0, 60) + '...' }, 'Key images derived');
+    // Sign
+    const rawTxHex = signSweepTx(JSON.stringify(constructionData), spendKeyHex, viewKeyHex);
+    log.info({ swapId, rawTxLen: rawTxHex.length, rawTxPrefix: rawTxHex.slice(0, 32) + '...' }, 'Transaction signed');
+    // Diagnostic: dump full construction data for debugging invalid_input
+    log.info({
+        swapId,
+        realOutput: {
+            oneTimePublicKey: structuredOutput.one_time_public_key,
+            txPublicKey: structuredOutput.tx_public_key,
+            outputIndex: structuredOutput.output_index,
+            globalOutputIndex: structuredOutput.global_output_index,
+            amount: structuredOutput.amount,
+            rctMask: structuredOutput.rct_mask,
+        },
+        realRingMemberKey: ringMemberKeys[finalDecoyResult.real_index_in_ring]?.key,
+        realRingMemberMask: ringMemberKeys[finalDecoyResult.real_index_in_ring]?.mask,
+        realIndexInRing: finalDecoyResult.real_index_in_ring,
+        keyImage: JSON.parse(keyImagesJson)[0]?.key_image,
+        allIndices: finalDecoyResult.indices,
+        fee: constructionData.fee,
+        destinationAmount: constructionData.destination.amount,
+    }, 'Sweep diagnostic: full construction data');
+    // Dump the full signed tx for external decoding if broadcast fails
+    log.debug({ swapId, rawTxHex }, 'Full signed transaction hex');
+    onProgress?.('Broadcasting sweep transaction...');
+    log.info({ swapId }, 'Sweep step 5: broadcasting to monerod');
+    const broadcastResult = await broadcastTransaction(monerodConfig, rawTxHex);
+    if (broadcastResult.alreadySpent) {
+        // Key image already used — we must have broadcast this in a previous attempt.
+        // Only we have the spend key, so this is our own prior transaction.
+        log.info({ swapId }, 'Sweep tx already broadcast (double_spend) — prior attempt succeeded');
+    }
+    else {
+        log.info({ swapId, txHash: broadcastResult.txHash, status: broadcastResult.status }, 'Sweep tx broadcast to network');
+    }
+    // Notify server that sweep is complete. This updates the DB status to
+    // 'completed' so the poll loop stops triggering duplicate sweep attempts.
+    // Retry a few times — without this the swap stays in 'sending' forever.
+    const sweepTxHash = broadcastResult.txHash || `sweep-${swapId}`;
+    for (let notifyAttempt = 0; notifyAttempt < 3; notifyAttempt++) {
+        try {
+            await api.executeAction(swapId, { type: 'sweep-complete', txHash: sweepTxHash }, 15_000);
+            log.info({ swapId, txHash: sweepTxHash }, 'Server notified of sweep completion');
+            break;
+        }
+        catch (err) {
+            log.warn({ swapId, attempt: notifyAttempt + 1, error: err instanceof Error ? err.message : String(err) }, 'Server notification failed, retrying');
+            if (notifyAttempt < 2) {
+                await delay(3_000);
+            }
+        }
+    }
+    const sweepAmount = String(destinationAmount);
+    onProgress?.('Sweep complete');
+    log.info({
+        swapId,
+        txHash: sweepTxHash,
+        amount: sweepAmount,
+        amountXmr: (destinationAmount / 1e12).toFixed(12),
+        alreadySpent: broadcastResult.alreadySpent,
+    }, broadcastResult.alreadySpent ? 'Sweep already completed (prior broadcast)' : 'Sweep broadcast complete');
+    return { txHash: sweepTxHash, amount: sweepAmount };
+}
+//# sourceMappingURL=index.js.map

package/dist/atomic-swap/monero-sweep/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/atomic-swap/monero-sweep/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EACL,UAAU,EACV,UAAU,EACV,UAAU,IAAI,gBAAgB,EAC9B,aAAa,GACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AACjD,OAAO,EACL,UAAU,EACV,eAAe,EACf,WAAW,EACX,YAAY,EACZ,qBAAqB,EACrB,aAAa,EACb,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACzF,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,cAAc,GACf,MAAM,yBAAyB,CAAC;AAWjC;;;GAGG;AACH,SAAS,iBAAiB,CAAC,EAAW;IACpC,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;IAC5H,CAAC;IACD,MAAM,GAAG,GAAG,EAA6B,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,GAAG,IAAuB,EAAsB,EAAE;QAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;QAC/B,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAC3B,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC;QAC9C,WAAW,EAAE,IAAI,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;QAC7D,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;KAC7D,CAAC;AACJ,CAAC;AAiCD,MAAM,qBAAqB,GAAG,OAAO,CAAC;AACtC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AACxC;;yCAEyC;AACzC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,2EAA2E;AAC3E,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC;6DAC6D;AAC7D,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B;wEACwE;AACxE,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,oEAAoE;AACpE,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAc,EAAE,MAAmB;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;IAErF,UAAU,EAAE,CAAC,yBAAyB,CAAC,CAAC;IACxC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC;IACzD,MAAM,UAAU,EAAE,CAAC;IACnB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;IAElD,UAAU,EAAE,CAAC,mCAAmC,CAAC,CAAC;IAClD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,sDAAsD,CAAC,CAAC;IAE7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,KAAyB,CAAC;IAC9B,IAAI,IAAwB,CAAC;IAC7B,IAAI,UAA8B,CAAC;IACnC,IAAI,WAA+B,CAAC;IACpC,IAAI,iBAAqC,CAAC;IAE1C,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,aAAa,GAAuB,MAAM,GAAG,CAAC,aAAa,CAC/D,MAAM,EACN,EAAE,IAAI,EAAE,aAAa,EAAE,EACvB,uBAAuB,CACxB,CAAC;QAEF,MAAM,SAAS,GAAG,iBAAiB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAChE,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QACxB,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACtB,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;QAClC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QACpC,iBAAiB,GAAG,SAAS,CAAC,iBAAiB,CAAC;QAEhD,IAAI,KAAK,IAAI,IAAI,IAAI,UAAU;YAAE,MAAM;QAEvC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,qBAAqB,EAAE,CAAC;YACpD,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,UAAU,EAAE,CAAC,2BAA2B,CAAC,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,qBAAqB,CAAC,CAAC;QACnI,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/E,IAAI,iBAAiB,IAAI,iBAAiB,KAAK,cAAc,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,yEAAyE;IACzE,yEAAyE;IACzE,6DAA6D;IAC7D,CAAC;QACC,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1E,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,iBAAiB,CACzB,gBAAgB,EAChB,mEAAmE,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACvC,0EAA0E;IAC1E,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,MAAM,CAAC,CAAC;IAEb,MAAM,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAEnD,0CAA0C;IAC1C,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAkB;QACnC,KAAK,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC;QACpF,MAAM,EAAE,GAAG;KACZ,CAAC;IAEF,GAAG,CAAC,IAAI,CACN;QACE,MAAM;QACN,UAAU;QACV,WAAW;QACX,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;QAC3C,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM;KACtC,EACD,wDAAwD,CACzD,CAAC;IAEF,qEAAqE;IACrE,mDAAmD;IACnD,IAAI,cAAuB,CAAC;IAC5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,kBAAkB,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;gBAC1C,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW;gBAC1D,WAAW,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU;gBACjD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;aAC9C,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,GAAG,GAAG,CAAC;YACrB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAE/C,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,EAC1F,WAAW;gBACT,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,sCAAsC,CAC3C,CAAC;YAEF,IAAI,CAAC,WAAW;gBAAE,MAAM;YAExB,IAAI,OAAO,GAAG,kBAAkB,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;gBACzE,UAAU,EAAE,CAAC,6BAA6B,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9E,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,cAAc,IAAI,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACvE,CAAC;AAED,uFAAuF;AAEvF,mEAAmE;AACnE,KAAK,UAAU,sBAAsB,CAAC,GAYrC;IACC,MAAM,EACJ,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EACvE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,kBAAkB,GACzD,GAAG,GAAG,CAAC;IACR,MAAM,eAAe,GAAG,CAAC,YAA+B,EAAU,EAAE,CAClE,IAAI,CAAC,SAAS,CACZ,kBAAkB,KAAK,SAAS;QAC9B,CAAC,CAAC,EAAE,YAAY,EAAE;QAClB,CAAC,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAC/D,CAAC;IAEJ,UAAU,EAAE,CAAC,8BAA8B,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,6CAA6C,CAAC,CAAC;IAEhF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAElE,GAAG,CAAC,IAAI,CACN;QACE,MAAM;QACN,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;QACvC,kBAAkB,EAAE,OAAO,CAAC,aAAa,CAAC,MAAM;KACjD,EACD,mCAAmC,CACpC,CAAC;IAEF,MAAM,cAAc,GAAG,sBAAsB,CAAC;QAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,mBAAmB,EAAE,OAAO,CAAC,aAAa;QAC1C,UAAU;QACV,WAAW;QACX,WAAW,EAAE,qBAAqB;QAClC,eAAe,EAAE,aAAa;QAC9B,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;IAEH,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAEhE,GAAG,CAAC,IAAI,CACN;QACE,MAAM;QACN,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE;QACpC,SAAS,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM;KACtC,EACD,0CAA0C,CAC3C,CAAC;IAEF,UAAU,EAAE,CAAC,qBAAqB,CAAC,CAAC;IACpC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,yCAAyC,CAAC,CAAC;IAEhE,2DAA2D;IAC3D,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,aAAa,CAAC,CAAC;IAClE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC;IAE1F,+DAA+D;IAC/D,MAAM,eAAe,GAAG,YAAY,CAClC,UAAU,CAAC,iBAAiB,EAC5B,eAAe,CAAC,YAAY,CAAC,EAC7B,SAAS,CACV,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAG7C,CAAC;IAEF,GAAG,CAAC,IAAI,CACN;QACE,MAAM;QACN,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM;QACpC,eAAe,EAAE,WAAW,CAAC,kBAAkB;QAC/C,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;KAC1D,EACD,iBAAiB,CAClB,CAAC;IAEF,uEAAuE;IACvE,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,oDAAoD;IACpD,UAAU,EAAE,CAAC,8BAA8B,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,EAAE,CAAC;IAC5B,IAAI,kBAAkB,GAAG,WAAW,CAAC;IACrC,IAAI,cAAc,GAAG,MAAM,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtF,KAAK,IAAI,WAAW,GAAG,CAAC,EAAE,WAAW,GAAG,gBAAgB,EAAE,WAAW,EAAE,EAAE,CAAC;QACxE,MAAM,cAAc,GAAG,mBAAmB,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAEvC,GAAG,CAAC,IAAI,CACN;YACE,MAAM;YACN,OAAO,EAAE,WAAW,GAAG,CAAC;YACxB,YAAY,EAAE,cAAc,CAAC,MAAM;YACnC,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SACvD,EACD,wEAAwE,CACzE,CAAC;QAEF,IAAI,WAAW,KAAK,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,mCAAmC,gBAAgB,cAAc;gBACjE,GAAG,cAAc,CAAC,MAAM,kCAAkC,CAC3D,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,YAAY,CACjC,UAAU,CAAC,iBAAiB,EAC5B,eAAe,CAAC,YAAY,CAAC,EAC7B,SAAS,CACV,CAAC;QACF,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAG7C,CAAC;QACF,cAAc,GAAG,MAAM,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;IAE5C,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,CAAC,MAAM,EAAE,EAClD,sCAAsC,CACvC,CAAC;IAEF,uDAAuD;IACvD,MAAM,cAAc,GAAG,cAAc,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAC3E,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,eAAe,GAAG,gBAAgB,CACtC,UAAU,EACV,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,MAAM,EACjB,cAAc,CAAC,IAAI,CACpB,CAAC;QACF,GAAG,CAAC,IAAI,CACN;YACE,MAAM;YACN,eAAe;YACf,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;YACrD,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;YACrD,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE;SACrC,EACD,eAAe;YACb,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,2DAA2D,CAChE,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,6FAA6F;gBAC7F,0CAA0C,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,IAAI,UAAU,GAAG,qBAAqB,CAAC;IACvC,IAAI,gBAAgB,GAAG,MAAM,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACvD,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACjC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,IAAI,MAAM,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,oCAAoC,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACnE,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,IAAI,UAAU,GAAG,UAAU,GAAG,iBAAiB,CAAC;IAChD,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,GAAG,gBAAgB,CAAC;IAC3E,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAErH,MAAM,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;IAEjE,IAAI,iBAAiB,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,6BAA6B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,MAAM,gBAAgB,GAAG;QACvB,mBAAmB,EAAE,UAAU,CAAC,gBAAgB;QAChD,aAAa,EAAE,UAAU,CAAC,WAAW;QACrC,YAAY,EAAE,UAAU,CAAC,WAAW;QACpC,mBAAmB,EAAE,UAAU,CAAC,iBAAiB;QACjD,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QACjC,QAAQ,EAAE,UAAU,CAAC,OAAO;QAC5B,kBAAkB,EAAE,EAAc;QAClC,aAAa,EAAE,CAAC;QAChB,aAAa,EAAE,CAAC;KACjB,CAAC;IAEF,MAAM,gBAAgB,GAAG;QACvB,MAAM,EAAE;YACN;gBACE,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBACxC,UAAU,EAAE,EAAE,CAAC,GAAG;oBAClB,UAAU,EAAE,EAAE,CAAC,IAAI;iBACpB,CAAC,CAAC;gBACH,iBAAiB,EAAE,gBAAgB,CAAC,kBAAkB;gBACtD,WAAW,EAAE,gBAAgB;gBAC7B,WAAW,EAAE,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC;aAC3C;SACF;QACD,WAAW,EAAE;YACX,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,iBAAiB;SAC1B;QACD,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,CAAC;KACZ,CAAC;IAEF,GAAG,CAAC,IAAI,CACN;QACE,MAAM;QACN,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM;QAC1C,iBAAiB;QACjB,UAAU;QACV,QAAQ,EAAE,cAAc,CAAC,MAAM;QAC/B,OAAO,EAAE,CAAC;KACX,EACD,yBAAyB,CAC1B,CAAC;IAEF,UAAU,EAAE,CAAC,0BAA0B,CAAC,CAAC;IACzC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAG,aAAa,CAAC,gBAAgB,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,GAAG,CAAC,IAAI,CACN;QACE,MAAM;QACN,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,GAAG,EAAE,YAAY,CAAC,GAAG;QACrB,SAAS,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACpE,EACD,sCAAsC,CACvC,CAAC;IAEF,yDAAyD;IACzD,UAAU,EAAE,CAAC,8BAA8B,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,eAAe,CACnC,IAAI,CAAC,SAAS,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAClC,UAAU,EACV,WAAW,CACZ,CAAC;IACF,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAE/F,OAAO;IACP,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACxF,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,EACjF,oBAAoB,CACrB,CAAC;IAEF,sEAAsE;IACtE,GAAG,CAAC,IAAI,CACN;QACE,MAAM;QACN,UAAU,EAAE;YACV,gBAAgB,EAAE,gBAAgB,CAAC,mBAAmB;YACtD,WAAW,EAAE,gBAAgB,CAAC,aAAa;YAC3C,WAAW,EAAE,gBAAgB,CAAC,YAAY;YAC1C,iBAAiB,EAAE,gBAAgB,CAAC,mBAAmB;YACvD,MAAM,EAAE,gBAAgB,CAAC,MAAM;YAC/B,OAAO,EAAE,gBAAgB,CAAC,QAAQ;SACnC;QACD,iBAAiB,EAAE,cAAc,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,GAAG;QAC3E,kBAAkB,EAAE,cAAc,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,IAAI;QAC7E,eAAe,EAAE,gBAAgB,CAAC,kBAAkB;QACpD,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS;QACjD,UAAU,EAAE,gBAAgB,CAAC,OAAO;QACpC,GAAG,EAAE,gBAAgB,CAAC,GAAG;QACzB,iBAAiB,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM;KACvD,EACD,0CAA0C,CAC3C,CAAC;IAEF,mEAAmE;IACnE,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,6BAA6B,CAAC,CAAC;IAE/D,UAAU,EAAE,CAAC,mCAAmC,CAAC,CAAC;IAClD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAC;IAE9D,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAE5E,IAAI,eAAe,CAAC,YAAY,EAAE,CAAC;QACjC,8EAA8E;QAC9E,oEAAoE;QACpE,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,EACV,qEAAqE,CACtE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,EAC1E,+BAA+B,CAChC,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,IAAI,SAAS,MAAM,EAAE,CAAC;IAChE,KAAK,IAAI,aAAa,GAAG,CAAC,EAAE,aAAa,GAAG,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,aAAa,CACrB,MAAM,EACN,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,EAC/C,MAAM,CACP,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,qCAAqC,CAAC,CAAC;YACjF,MAAM;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC/F,sCAAsC,CACvC,CAAC;YACF,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC9C,UAAU,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAI,CACN;QACE,MAAM;QACN,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,YAAY,EAAE,eAAe,CAAC,YAAY;KAC3C,EACD,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,0BAA0B,CACxG,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACtD,CAAC"}

package/dist/atomic-swap/monero-sweep/ring-select.d.ts

@@ -0,0 +1,12 @@
+import type { Logger } from '../../interfaces/logger.js';
+import type { OutputKeyInfo } from '../../lib/monero/rpc.js';
+export interface InvalidRingMember {
+    readonly ringIndex: number;
+    readonly reason: string;
+}
+/**
+ * Validate a ring's output keys, commitment points, and unlock state.
+ * Returns the indices that must be replaced before signing.
+ */
+export declare function validateRingMembers(members: readonly OutputKeyInfo[], log: Logger): InvalidRingMember[];
+//# sourceMappingURL=ring-select.d.ts.map

package/dist/atomic-swap/monero-sweep/ring-select.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ring-select.d.ts","sourceRoot":"","sources":["../../../src/atomic-swap/monero-sweep/ring-select.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,aAAa,EAAE,EACjC,GAAG,EAAE,MAAM,GACV,iBAAiB,EAAE,CA0CrB"}

package/dist/atomic-swap/monero-sweep/ring-select.js

@@ -0,0 +1,61 @@
+/**
+ * Ring-member validation for CLSAG signing.
+ *
+ * Each ring member must satisfy three conditions before we sign with it:
+ *   1. The output public key decompresses to a valid ed25519 point and is
+ *      not the identity.
+ *   2. The Pedersen commitment decompresses to a valid ed25519 point.
+ *   3. The output is *unlocked* — monerod returns `unlocked: false` for
+ *      coinbase outputs that have not yet cleared their 60-block lock window
+ *      (`CRYPTONOTE_MINED_MONEY_UNLOCK_WINDOW`) or RingCT outputs younger
+ *      than `DEFAULT_TX_SPENDABLE_AGE` blocks.
+ *
+ * Picking a locked ring member is the most common cause of a daemon
+ * `[flags: invalid_input]` rejection at broadcast time. wallet2 catches this
+ * via `get_outs.unlocked`; we do the same here, then re-roll the entire ring
+ * if any slot is invalid.
+ */
+import { Point } from '@noble/ed25519';
+const IDENTITY_HEX = '01' + '00'.repeat(31);
+/**
+ * Validate a ring's output keys, commitment points, and unlock state.
+ * Returns the indices that must be replaced before signing.
+ */
+export function validateRingMembers(members, log) {
+    const invalid = [];
+    for (let i = 0; i < members.length; i++) {
+        const member = members[i];
+        if (!member)
+            continue;
+        try {
+            Point.fromHex(member.key);
+            if (member.key === IDENTITY_HEX) {
+                invalid.push({ ringIndex: i, reason: 'identity key' });
+                continue;
+            }
+        }
+        catch {
+            invalid.push({ ringIndex: i, reason: 'invalid key point' });
+            continue;
+        }
+        try {
+            Point.fromHex(member.mask);
+        }
+        catch {
+            invalid.push({ ringIndex: i, reason: 'invalid commitment point' });
+            continue;
+        }
+        if (member.unlocked === false) {
+            invalid.push({
+                ringIndex: i,
+                reason: `output not yet unlocked (height=${String(member.height)})`,
+            });
+            continue;
+        }
+    }
+    if (invalid.length > 0) {
+        log.warn({ invalidCount: invalid.length, details: invalid }, 'Ring contains invalid members');
+    }
+    return invalid;
+}
+//# sourceMappingURL=ring-select.js.map

package/dist/atomic-swap/monero-sweep/ring-select.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ring-select.js","sourceRoot":"","sources":["../../../src/atomic-swap/monero-sweep/ring-select.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AASvC,MAAM,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAiC,EACjC,GAAW;IAEX,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,IAAI,CAAC;YACH,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;gBACvD,SAAS;YACX,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,mCAAmC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;aACpE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CACN,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAClD,+BAA+B,CAChC,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/atomic-swap/presign.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Client-side pre-signing for non-custodial atomic swaps.
+ *
+ * Constructs the same Bitcoin transactions (TxCancel, TxPunish, TxEarlyRefund,
+ * TxRedeem) that the Rust sidecar builds, computes their BIP143 segwit sighashes,
+ * and signs them with Bob's secret key `b` — all client-side. The server never
+ * sees `b`.
+ *
+ * The miniscript `c:and_v(v:pk(A),pk_k(B))` compiles to:
+ *   <A> OP_CHECKSIGVERIFY <B> OP_CHECKSIG
+ *
+ * This is the witness script for the 2-of-2 P2WSH used in TxLock and TxCancel.
+ */
+import type { ProtocolParams, PreSigs, FeePolicy, AmnestyPolicy, DustPolicy } from '../types/index.js';
+export type NetworkName = 'mainnet' | 'testnet' | 'regtest' | 'regtest';
+export interface ComputePreSigsParams {
+    readonly bHex: string;
+    readonly signedPsbtBase64: string;
+    readonly protocolParams: ProtocolParams;
+    readonly refundAddress: string;
+    readonly network: NetworkName;
+    readonly amnestyPolicy?: AmnestyPolicy;
+    readonly feePolicy?: FeePolicy;
+    readonly dustPolicy?: DustPolicy;
+}
+export interface ComputeRedeemDigestParams {
+    readonly signedPsbtBase64: string;
+    readonly protocolParams: ProtocolParams;
+    readonly bPubHex: string;
+    readonly network: NetworkName;
+    readonly feePolicy?: FeePolicy;
+    readonly dustPolicy?: DustPolicy;
+}
+/**
+ * Derive the canonical 2-of-2 P2WSH lock address from Alice's and Bob's
+ * compressed secp256k1 public keys. Callers must compare this against any
+ * sidecar-claimed lock address before signing.
+ *
+ * @param params.aHex Alice's 33-byte compressed secp256k1 public key (hex).
+ * @param params.bHex Bob's 33-byte compressed secp256k1 public key (hex).
+ * @param params.network `'mainnet'` or `'testnet'`; selects the bech32 HRP.
+ * @returns The bech32 P2WSH address derived from `(A, B)`.
+ * @throws {VerificationError} `E_LOCK_SCRIPT` if p2wsh derivation fails.
+ * @security Closes AV-B.1 / AV-C.1 — always prefer this over a sidecar-supplied address.
+ */
+export declare function deriveLockAddress(params: {
+    readonly aHex: string;
+    readonly bHex: string;
+    readonly network: NetworkName;
+}): string;
+/**
+ * Build the 2-of-2 witness script: <A> OP_CHECKSIGVERIFY <B> OP_CHECKSIG
+ *
+ * This matches the Rust miniscript `c:and_v(v:pk(A),pk_k(B))`.
+ * A and B are 33-byte compressed secp256k1 public keys (hex).
+ */
+export declare function buildMultisigWitnessScript(aHex: string, bHex: string): Buffer;
+/**
+ * Compute the 3 pre-signatures (TxCancel, TxPunish, TxEarlyRefund) for a client-side swap.
+ *
+ * These are standard ECDSA signatures that the sidecar sends to Alice in Message4.
+ * The TxRedeem encrypted signature is computed separately (requires WASM adaptor crypto).
+ *
+ * @param params - All parameters needed for pre-signature computation
+ * @returns 3 hex-encoded compact ECDSA signatures (64 bytes each)
+ */
+export declare function computePreSigs(params: ComputePreSigsParams): PreSigs;
+/**
+ * Compute the TxRedeem BIP143 sighash digest.
+ *
+ * The client uses this digest with WASM `encsign_digest(b, S_a_bitcoin, digest)`
+ * to produce the adaptor-encrypted signature for Alice.
+ *
+ * @param params - All parameters needed for redeem digest computation
+ * @returns Hex-encoded sighash (32 bytes)
+ */
+export declare function computeRedeemDigest(params: ComputeRedeemDigestParams): string;
+export interface ComputeRedeemDigestFromTxHexParams {
+    readonly lockTxRawHex: string;
+    readonly protocolParams: ProtocolParams;
+    readonly bPubHex: string;
+    readonly network: NetworkName;
+    readonly feePolicy?: FeePolicy;
+    readonly dustPolicy?: DustPolicy;
+}
+/**
+ * Recompute the TxRedeem BIP143 sighash from a raw, already-broadcast TxLock
+ * rather than a signed PSBT. Used on the resume path: when the driver comes
+ * up after a restart, `signedPsbtBase64` is no longer in memory, but the
+ * lock tx is permanently on-chain and any `BlockchainDataProvider` can
+ * return its raw hex.
+ *
+ * Produces a byte-identical digest to `computeRedeemDigest` for the same
+ * underlying transaction.
+ *
+ * @security Preserves Fix 1 / AV-B.2 guarantees on resume — the digest is
+ * still derived independently from chain data; the caller CT-compares the
+ * result against the sidecar's claimed digest.
+ */
+export declare function computeRedeemDigestFromTxHex(params: ComputeRedeemDigestFromTxHexParams): string;
+//# sourceMappingURL=presign.d.ts.map

package/dist/atomic-swap/presign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presign.d.ts","sourceRoot":"","sources":["../../src/atomic-swap/presign.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAkBvG,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAUxE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC;AAuED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B,GAAG,MAAM,CAQT;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAc7E;AA+DD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CA0PpE;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,GAAG,MAAM,CAa7E;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,kCAAkC,GACzC,MAAM,CAUR"}