@nmshd/consumption 7.0.0-openid4vc.2 → 7.0.0-openid4vc.3

package/dist/modules/openid4vc/local/EnmeshedHolderKeyManagmentService.js

@@ -0,0 +1,364 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnmshedHolderKeyManagmentService = void 0;
+const elliptic_1 = require("elliptic");
+const libsodium_wrappers_1 = __importDefault(require("libsodium-wrappers"));
+const sjcl_1 = __importDefault(require("sjcl"));
+class EnmshedHolderKeyManagmentService {
+    static { this.backend = "fakeKeyManagementService"; }
+    constructor() {
+        this.backend = EnmshedHolderKeyManagmentService.backend;
+        this.b64url = (bytes) => libsodium_wrappers_1.default.to_base64(bytes, libsodium_wrappers_1.default.base64_variants.URLSAFE_NO_PADDING);
+        this.b64urlDecode = (b64url) => libsodium_wrappers_1.default.from_base64(b64url, libsodium_wrappers_1.default.base64_variants.URLSAFE_NO_PADDING);
+        // please note: we cannot use buffer here - because it is not available in the browser
+        // and yes it could be pollyfilled but that extends the bundle size for no good reason
+        this.buf2hex = (bytes) => {
+            return Array.from(bytes)
+                .map((b) => b.toString(16).padStart(2, "0"))
+                .join("");
+        };
+        this.hex2buf = (hex) => {
+            const bytes = new Uint8Array(hex.length / 2);
+            for (let i = 0; i < bytes.length; i++) {
+                bytes[i] = parseInt(hex.substring(i * 2, i * 2 + 2), 16);
+            }
+            return bytes;
+        };
+        if (globalThis.fakeKeyStorage) {
+            this.keystore = globalThis.fakeKeyStorage;
+        }
+        else {
+            this.keystore = new Map();
+        }
+        this.updateGlobalInstance(this.keystore);
+    }
+    updateGlobalInstance(storrage) {
+        // console.log(`FKM: updating global instance ${JSON.stringify(Array.from(storrage.entries()))}`);
+        globalThis.fakeKeyStorage = storrage;
+        // console.log(`FKM: global instance state ${JSON.stringify(Array.from((globalThis as any).fakeKeyStorage.entries()))}`);
+    }
+    isOperationSupported(agentContext, operation) {
+        agentContext.config.logger.debug(`EKM: Checking if operation is supported: ${JSON.stringify(operation)}`);
+        if (operation.operation === "createKey") {
+            if (operation.type.kty === "OKP") {
+                return true;
+            }
+            if (operation.type.kty === "EC" && operation.type.crv === "P-256") {
+                return true;
+            }
+            return false;
+        }
+        if (operation.operation === "verify" && operation.algorithm === "ES256") {
+            return true;
+        }
+        if (operation.operation === "sign" && (operation.algorithm === "EdDSA" || operation.algorithm === "ES256")) {
+            return true;
+        }
+        if (operation.operation === "randomBytes") {
+            return true;
+        }
+        if (operation.operation === "deleteKey") {
+            return true;
+        }
+        if (operation.operation === "encrypt") {
+            return true;
+        }
+        return false;
+    }
+    getPublicKey(agentContext, keyId) {
+        const keyPair = this.keystore.get(keyId);
+        if (!keyPair) {
+            agentContext.config.logger.error(`EKM: Key with id ${keyId} not found`);
+            throw new Error(`Key with id ${keyId} not found`);
+        }
+        return Promise.resolve(JSON.parse(keyPair).publicKey);
+    }
+    async createKey(agentContext, options) {
+        options.keyId ??= "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, function (c) {
+            // Use libsodium's randombytes_uniform for secure random number generation
+            const r = libsodium_wrappers_1.default.randombytes_uniform(16);
+            const v = c === "x" ? r : (r & 0x3) | 0x8;
+            return v.toString(16);
+        });
+        agentContext.config.logger.debug(`EKM: Creating key with id ${options.keyId} and type ${JSON.stringify(options.type)}`);
+        if (options.type.kty === "EC" && options.type.crv === "P-256") {
+            // Use P-256 (aka secp256r1)
+            const ec = new elliptic_1.ec("p256");
+            const key = ec.genKeyPair();
+            // Public JWK
+            const publicJwk = {
+                kty: "EC", // Elliptic Curve
+                crv: "P-256",
+                x: this.b64url(new Uint8Array(key.getPublic().getX().toArray())),
+                y: this.b64url(new Uint8Array(key.getPublic().getY().toArray()))
+            };
+            // Private JWK
+            const privateJwk = {
+                ...publicJwk,
+                d: this.b64url(new Uint8Array(key.getPrivate().toArray()))
+            };
+            const jwkKeyPair = {
+                publicKey: publicJwk,
+                privateKey: privateJwk,
+                keyType: "EC"
+            };
+            agentContext.config.logger.debug(`EKM: Created EC key pair with id ${options.keyId}`);
+            // store the key pair in the keystore
+            this.keystore.set(options.keyId, JSON.stringify(jwkKeyPair));
+            this.updateGlobalInstance(this.keystore);
+            return await Promise.resolve({
+                keyId: options.keyId,
+                publicJwk: publicJwk
+            });
+        }
+        await libsodium_wrappers_1.default.ready;
+        const sodium = libsodium_wrappers_1.default;
+        const { keyType, publicKey, privateKey } = sodium.crypto_sign_keypair();
+        agentContext.config.logger.debug(`EKM: Created OKP key pair with id ${options.keyId} and keyType ${keyType}`);
+        const seed = privateKey.slice(0, sodium.crypto_sign_SEEDBYTES);
+        // Public JWK
+        const publicJwk = {
+            kty: "OKP", // Octet Key Pair
+            crv: "Ed25519",
+            x: this.b64url(publicKey)
+        };
+        // Private JWK
+        const privateJwk = {
+            ...publicJwk,
+            d: this.b64url(seed)
+        };
+        const jwkKeyPair = {
+            publicKey: publicJwk,
+            privateKey: privateJwk,
+            keyType: "OKP"
+        };
+        // store the key pair in the keystore
+        this.keystore.set(options.keyId, JSON.stringify(jwkKeyPair));
+        this.updateGlobalInstance(this.keystore);
+        return await Promise.resolve({
+            keyId: options.keyId,
+            publicJwk: publicJwk
+        });
+    }
+    importKey(agentContext, options) {
+        agentContext.config.logger.debug(`EKM: Importing key with  ${JSON.stringify(options)}`);
+        throw new Error("Method not implemented.");
+    }
+    deleteKey(agentContext, options) {
+        if (this.keystore.has(options.keyId)) {
+            agentContext.config.logger.debug(`EKM: Deleting key with id ${options.keyId}`);
+            this.keystore.delete(options.keyId);
+            this.updateGlobalInstance(this.keystore);
+            return Promise.resolve(true);
+        }
+        throw new Error(`key with id ${options.keyId} not found. and cannot be deleted`);
+    }
+    async sign(agentContext, options) {
+        agentContext.config.logger.debug(`EKM: Signing data with key id ${options.keyId} using algorithm ${options.algorithm}`);
+        const stringifiedKeyPair = this.keystore.get(options.keyId);
+        if (!stringifiedKeyPair) {
+            throw new Error(`Key with id ${options.keyId} not found`);
+        }
+        const { privateKey, publicKey } = JSON.parse(stringifiedKeyPair);
+        if (options.algorithm === "ES256") {
+            // Use P-256 (aka secp256r1)
+            const ec = new elliptic_1.ec("p256");
+            if (!privateKey.d) {
+                throw new Error("Private JWK does not contain 'd' parameter");
+            }
+            const priv = this.buf2hex(this.b64urlDecode(privateKey.d));
+            const key = ec.keyFromPrivate(priv, "hex");
+            // we need to hash the data using SHA-256
+            const dataHash = ec.hash().update(options.data).digest();
+            const signature = key.sign(dataHash);
+            const r = new Uint8Array(signature.r.toArray());
+            const s = new Uint8Array(signature.s.toArray());
+            const signatureBytes = new Uint8Array(r.length + s.length);
+            signatureBytes.set(r);
+            signatureBytes.set(s, r.length);
+            return await Promise.resolve({
+                signature: signatureBytes
+            });
+        }
+        await libsodium_wrappers_1.default.ready;
+        const sodium = libsodium_wrappers_1.default;
+        const decode = (bytes) => sodium.from_base64(bytes, sodium.base64_variants.URLSAFE_NO_PADDING);
+        // get the priavte key bytes
+        if (privateKey.d === undefined) {
+            throw new Error("Private key does not contain 'd' parameter");
+        }
+        const privateKeyBytes = decode(privateKey.d);
+        // get the public key bytes
+        if (publicKey.x === undefined) {
+            throw new Error("Public key does not contain 'x' parameter");
+        }
+        const publicKeyBytes = decode(publicKey.x);
+        // combine the key bytes to a full private key
+        const fullPrivateKeyBytes = new Uint8Array(privateKeyBytes.length + publicKeyBytes.length);
+        fullPrivateKeyBytes.set(privateKeyBytes);
+        fullPrivateKeyBytes.set(publicKeyBytes, privateKeyBytes.length);
+        // and use it to sign the data
+        const signature = sodium.crypto_sign_detached(options.data, fullPrivateKeyBytes);
+        return {
+            signature: signature
+        };
+    }
+    verify(agentContext, options) {
+        agentContext.config.logger.debug(`EKM: Verifying signature with key id ${options.key.keyId} using algorithm ${options.algorithm}`);
+        // Use P-256 (aka secp256r1)
+        const ec = new elliptic_1.ec("p256");
+        if (!options.key.publicJwk) {
+            throw new Error("Public JWK is undefined");
+        }
+        if (options.key.publicJwk.kty !== "EC") {
+            throw new Error("Public JWK does not contain 'x' or 'y' parameter");
+        }
+        const x = options.key.publicJwk.x;
+        const y = options.key.publicJwk.y;
+        const pub = { x: this.buf2hex(this.b64urlDecode(x)), y: this.buf2hex(this.b64urlDecode(y)) };
+        const key = ec.keyFromPublic(pub, "hex");
+        const signatureBytes = options.signature;
+        const r = signatureBytes.subarray(0, 32);
+        const s = signatureBytes.subarray(32, 64);
+        const signature = { r: this.buf2hex(r), s: this.buf2hex(s) };
+        // we need to hash the data using SHA-256
+        const dataHash = ec.hash().update(options.data).digest();
+        try {
+            const verified = key.verify(dataHash, signature);
+            return Promise.resolve({ verified: verified });
+        }
+        catch (e) {
+            agentContext.config.logger.error(`EKM: Error during signature verification: ${e}`);
+            throw e;
+        }
+    }
+    ecdhEs(localKeyId, remotePublicJWK) {
+        const keyPairString = this.keystore.get(localKeyId);
+        if (!keyPairString) {
+            throw new Error(`Key with id ${localKeyId} not found`);
+        }
+        const localKeyPair = JSON.parse(keyPairString);
+        if (localKeyPair.keyType !== "EC") {
+            throw new Error("Key type is not EC");
+        }
+        const ec = new elliptic_1.ec("p256");
+        if (localKeyPair.privateKey.d === undefined) {
+            throw new Error("Local private key does not contain 'd' parameter");
+        }
+        const localPriv = ec.keyFromPrivate(this.buf2hex(this.b64urlDecode(localKeyPair.privateKey.d)), "hex");
+        // the remote jwk is base64url encoded - we again decode and transform to hex to receive a fitting public key
+        const remoteBasePoint = ec.keyFromPublic({
+            x: this.buf2hex(this.b64urlDecode(remotePublicJWK.x)),
+            y: this.buf2hex(this.b64urlDecode(remotePublicJWK.y))
+        }, "hex");
+        const sharedSecret = localPriv.derive(remoteBasePoint.getPublic());
+        const sharedBytes = new Uint8Array(sharedSecret.toArray("be"));
+        return sharedBytes;
+    }
+    // UTF-8 encode helper
+    utf8(str) {
+        return new TextEncoder().encode(str);
+    }
+    // Concat Uint8Arrays
+    concat(...arrays) {
+        const total = arrays.reduce((sum, a) => sum + a.length, 0);
+        const out = new Uint8Array(total);
+        let offset = 0;
+        for (const a of arrays) {
+            out.set(a, offset);
+            offset += a.length;
+        }
+        return out;
+    }
+    // Encode a 32-bit big-endian length prefix
+    lenPrefix(data) {
+        const buf = new Uint8Array(4 + data.length);
+        const view = new DataView(buf.buffer);
+        view.setUint32(0, data.length, false); // big-endian
+        buf.set(data, 4);
+        return buf;
+    }
+    concatKdf(sharedSecret, keyLength, algorithmDescriptor, keyAgreement) {
+        if (keyAgreement.apu === undefined) {
+            throw new Error("Key agreement apu is undefined");
+        }
+        if (keyAgreement.apv === undefined) {
+            throw new Error("Key agreement apv is undefined");
+        }
+        const algId = this.lenPrefix(this.utf8(algorithmDescriptor));
+        const partyU = this.lenPrefix(keyAgreement.apu);
+        const partyV = this.lenPrefix(keyAgreement.apv);
+        const suppPubInfo = new Uint8Array(4);
+        new DataView(suppPubInfo.buffer).setUint32(0, keyLength, false);
+        const suppPrivInfo = new Uint8Array(0);
+        const otherInfo = this.concat(algId, partyU, partyV, suppPubInfo, suppPrivInfo);
+        const counter = new Uint8Array([0, 0, 0, 1]);
+        const input = this.concat(counter, sharedSecret, otherInfo);
+        // Hash with SHA-256 (SJCL)
+        const inputHex = this.buf2hex(input);
+        const inputBits = sjcl_1.default.codec.hex.toBits(inputHex);
+        const hashBits = sjcl_1.default.hash.sha256.hash(inputBits);
+        const hashHex = sjcl_1.default.codec.hex.fromBits(hashBits);
+        const hashBuf = this.hex2buf(hashHex);
+        // Truncate to desired key length
+        return hashBuf.subarray(0, keyLength / 8);
+    }
+    encrypt(agentContext, options) {
+        try {
+            // encryption via A-256-GCM
+            // we will call the services side bob and the incoming side alice
+            if (options.key.keyAgreement === undefined) {
+                throw new Error("Key agreement is undefined");
+            }
+            if (options.key.keyAgreement.keyId === undefined) {
+                throw new Error("Key agreement keyId is undefined");
+            }
+            // 1. derive the shared secret via ECDH-ES
+            const sharedSecret = this.ecdhEs(options.key.keyAgreement.keyId, options.key.keyAgreement.externalPublicJwk);
+            agentContext.config.logger.debug(`EKM: Derived shared secret for encryption using ECDH-ES`);
+            // 2. Concat KDF to form the final key
+            const derivedKey = this.concatKdf(sharedSecret, 256, "A256GCM", options.key.keyAgreement);
+            // 3. Encrypt the data via AES-256-GCM using libsodium
+            // create nonce
+            const iv = crypto.getRandomValues(new Uint8Array(12));
+            // transform to bit arrays for sjcl
+            const keyBits = sjcl_1.default.codec.hex.toBits(this.buf2hex(derivedKey));
+            const dataBits = sjcl_1.default.codec.hex.toBits(this.buf2hex(options.data));
+            const ivBits = sjcl_1.default.codec.hex.toBits(this.buf2hex(iv));
+            // do not forget to add the additional authenticated data
+            const aadBits = "aad" in options.encryption && options.encryption.aad ? sjcl_1.default.codec.hex.toBits(this.buf2hex(options.encryption.aad)) : [];
+            // setup aes
+            const aes = new sjcl_1.default.cipher.aes(keyBits);
+            // encrypt
+            const cyphertextBits = sjcl_1.default.mode.gcm.encrypt(aes, dataBits, ivBits, aadBits, 128);
+            // transform back to byte array
+            const cyphertextBuf = this.hex2buf(sjcl_1.default.codec.hex.fromBits(cyphertextBits));
+            // In SJCL, GCM output = ciphertext || tag
+            const cyphertext = cyphertextBuf.subarray(0, cyphertextBuf.length - 16);
+            const tag = cyphertextBuf.subarray(cyphertextBuf.length - 16);
+            const returnValue = {
+                encrypted: cyphertext,
+                iv: iv,
+                tag: tag
+            };
+            return Promise.resolve(returnValue);
+        }
+        catch (e) {
+            agentContext.config.logger.error(`EKM: Error during encryption: ${e}`);
+            throw e;
+        }
+    }
+    decrypt(agentContext, options) {
+        agentContext.config.logger.debug(`EKM: Decrypting data with key id ${options.key.keyId} using options ${options}`);
+        throw new Error("Method not implemented.");
+    }
+    randomBytes(agentContext, options) {
+        agentContext.config.logger.debug(`EKM: Generating ${options.length} random bytes`);
+        return libsodium_wrappers_1.default.randombytes_buf(options.length); // Uint8Array
+    }
+}
+exports.EnmshedHolderKeyManagmentService = EnmshedHolderKeyManagmentService;
+//# sourceMappingURL=EnmeshedHolderKeyManagmentService.js.map

package/dist/modules/openid4vc/local/EnmeshedHolderKeyManagmentService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnmeshedHolderKeyManagmentService.js","sourceRoot":"","sources":["../../../../src/modules/openid4vc/local/EnmeshedHolderKeyManagmentService.ts"],"names":[],"mappings":";;;;;;AAuBA,uCAAoC;AACpC,4EAAyC;AACzC,gDAAwB;AAQxB,MAAa,gCAAgC;aAClB,YAAO,GAAG,0BAA0B,AAA7B,CAA8B;IAuB5D;QArBgB,YAAO,GAAG,gCAAgC,CAAC,OAAO,CAAC;QAGlD,WAAM,GAAG,CAAC,KAAiB,EAAE,EAAE,CAAC,4BAAO,CAAC,SAAS,CAAC,KAAK,EAAE,4BAAO,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;QACrG,iBAAY,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,4BAAO,CAAC,WAAW,CAAC,MAAM,EAAE,4BAAO,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;QAE5H,sFAAsF;QACtF,sFAAsF;QACrE,YAAO,GAAG,CAAC,KAAiB,EAAE,EAAE;YAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;iBACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;iBAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC,CAAC;QACe,YAAO,GAAG,CAAC,GAAW,EAAE,EAAE;YACvC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC;QAGE,IAAK,UAAkB,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAI,UAAkB,CAAC,cAAc,CAAC;QACvD,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAEM,oBAAoB,CAAC,QAA6B;QACrD,kGAAkG;QACjG,UAAkB,CAAC,cAAc,GAAG,QAAQ,CAAC;QAC9C,yHAAyH;IAC7H,CAAC;IAEM,oBAAoB,CAAC,YAA0B,EAAE,SAAuB;QAC3E,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1G,IAAI,SAAS,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACtC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC;YAChB,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC;YAChB,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,KAAK,OAAO,IAAI,SAAS,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC;YACzG,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IACM,YAAY,CAAC,YAA0B,EAAE,KAAa;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,KAAK,YAAY,CAAC,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC,SAAyB,CAAC,CAAC;IAC1F,CAAC;IACM,KAAK,CAAC,SAAS,CAAgC,YAA0B,EAAE,OAAkC;QAChH,OAAO,CAAC,KAAK,KAAK,sCAAsC,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC;YACjF,0EAA0E;YAC1E,MAAM,CAAC,GAAG,4BAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;YAC1C,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,OAAO,CAAC,KAAK,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAExH,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC5D,4BAA4B;YAC5B,MAAM,EAAE,GAAG,IAAI,aAAE,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC;YAE5B,aAAa;YACb,MAAM,SAAS,GAAG;gBACd,GAAG,EAAE,IAAI,EAAE,iBAAiB;gBAC5B,GAAG,EAAE,OAAO;gBACZ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;aACnE,CAAC;YAEF,cAAc;YACd,MAAM,UAAU,GAAG;gBACf,GAAG,SAAS;gBACZ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;aAC7D,CAAC;YAEF,MAAM,UAAU,GAAG;gBACf,SAAS,EAAE,SAAS;gBACpB,UAAU,EAAE,UAAU;gBACtB,OAAO,EAAE,IAAI;aAChB,CAAC;YAEF,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YACtF,qCAAqC;YACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;YAE7D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC;gBACzB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,SAAyB;aACX,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,4BAAO,CAAC,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,4BAAO,CAAC;QAEvB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACxE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,OAAO,CAAC,KAAK,gBAAgB,OAAO,EAAE,CAAC,CAAC;QAC9G,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAE/D,aAAa;QACb,MAAM,SAAS,GAAG;YACd,GAAG,EAAE,KAAK,EAAE,iBAAiB;YAC7B,GAAG,EAAE,SAAS;YACd,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SAC5B,CAAC;QAEF,cAAc;QACd,MAAM,UAAU,GAAG;YACf,GAAG,SAAS;YACZ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;SACvB,CAAC;QAEF,MAAM,UAAU,GAAG;YACf,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,KAAK;SACjB,CAAC;QAEF,qCAAqC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,SAAyB;SACX,CAAC,CAAC;IACnC,CAAC;IACM,SAAS,CAA4B,YAA0B,EAAE,OAAiC;QACrG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;IACM,SAAS,CAAC,YAA0B,EAAE,OAA4B;QACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,CAAC,KAAK,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACM,KAAK,CAAC,IAAI,CAAC,YAA0B,EAAE,OAAuB;QACjE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,OAAO,CAAC,KAAK,oBAAoB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAExH,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,CAAC,KAAK,YAAY,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAe,CAAC;QAE/E,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAChC,4BAA4B;YAC5B,MAAM,EAAE,GAAG,IAAI,aAAE,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAE3C,yCAAyC;YACzC,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YAC3D,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACtB,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAEhC,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC;gBACzB,SAAS,EAAE,cAAc;aACX,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,4BAAO,CAAC,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,4BAAO,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;QACvG,4BAA4B;QAC5B,IAAI,UAAU,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAE7C,2BAA2B;QAC3B,IAAI,SAAS,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAE3C,8CAA8C;QAC9C,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC,eAAe,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC3F,mBAAmB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACzC,mBAAmB,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;QAEhE,8BAA8B;QAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAEjF,OAAO;YACH,SAAS,EAAE,SAAS;SACvB,CAAC;IACN,CAAC;IAEM,MAAM,CAAC,YAA0B,EAAE,OAAyB;QAC/D,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,OAAO,CAAC,GAAG,CAAC,KAAK,oBAAoB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACnI,4BAA4B;QAC5B,MAAM,EAAE,GAAG,IAAI,aAAE,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEzC,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;QACzC,MAAM,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAE7D,yCAAyC;QACzC,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzD,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACjD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAqB,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,EAAE,CAAC,CAAC;YACnF,MAAM,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,UAAkB,EAAE,eAAoB;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,YAAY,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAe,CAAC;QAC7D,IAAI,YAAY,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,aAAE,CAAC,MAAM,CAAC,CAAC;QAE1B,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,SAAS,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvG,6GAA6G;QAC7G,MAAM,eAAe,GAAG,EAAE,CAAC,aAAa,CACpC;YACI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACrD,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;SACxD,EACD,KAAK,CACR,CAAC;QAEF,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,OAAO,WAAW,CAAC;IACvB,CAAC;IAED,sBAAsB;IACd,IAAI,CAAC,GAAW;QACpB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,qBAAqB;IACb,MAAM,CAAC,GAAG,MAAoB;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACnB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;QACvB,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,2CAA2C;IACnC,SAAS,CAAC,IAAgB;QAC9B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa;QACpD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjB,OAAO,GAAG,CAAC;IACf,CAAC;IAEO,SAAS,CAAC,YAAwB,EAAE,SAAiB,EAAE,mBAA2B,EAAE,YAAiB;QACzG,IAAI,YAAY,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAEhD,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAE5D,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,cAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,cAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEtC,iCAAiC;QACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAEM,OAAO,CAAC,YAA0B,EAAE,OAA0B;QACjE,IAAI,CAAC;YACD,2BAA2B;YAC3B,iEAAiE;YACjE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACxD,CAAC;YAED,0CAA0C;YAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;YAC7G,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC5F,sCAAsC;YACtC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1F,sDAAsD;YAEtD,eAAe;YACf,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,mCAAmC;YACnC,MAAM,OAAO,GAAG,cAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,cAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,cAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACvD,yDAAyD;YACzD,MAAM,OAAO,GAAG,KAAK,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,cAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzI,YAAY;YACZ,MAAM,GAAG,GAAG,IAAI,cAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzC,UAAU;YACV,MAAM,cAAc,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YAElF,+BAA+B;YAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,cAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;YAC5E,0CAA0C;YAC1C,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;YACxE,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;YAE9D,MAAM,WAAW,GAAG;gBAChB,SAAS,EAAE,UAAU;gBACrB,EAAE,EAAE,EAAE;gBACN,GAAG,EAAE,GAAG;aACX,CAAC;YAEF,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC;YACvE,MAAM,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IAEM,OAAO,CAAC,YAA0B,EAAE,OAA0B;QACjE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,CAAC,GAAG,CAAC,KAAK,kBAAkB,OAAO,EAAE,CAAC,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;IACM,WAAW,CAAC,YAA0B,EAAE,OAA8B;QACzE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC;QACnF,OAAO,4BAAO,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa;IACjE,CAAC;;AAxZL,4EAyZC"}

package/dist/modules/openid4vc/local/{FakeStorageService.d.ts → EnmeshedStorageService.d.ts}

@@ -1,12 +1,19 @@
 import { AgentContext, BaseRecord, BaseRecordConstructor, Query, QueryOptions, StorageService } from "@credo-ts/core";
-export declare class FakeStorageService<T extends BaseRecord> implements StorageService<T> {
-    storrage: Map<string, string>;
+import { AccountController } from "@nmshd/transport";
+import { AttributesController } from "../../attributes/AttributesController";
+export declare class EnmeshedStorageService<T extends BaseRecord> implements StorageService<T> {
+    accountController: AccountController;
+    attributeController: AttributesController;
+    storrage: Map<string, T>;
+    constructor(accountController: AccountController, attributeController: AttributesController);
     save(agentContext: AgentContext, record: T): Promise<void>;
+    saveWithDisplay(agentContext: AgentContext, value: string, type: string, displayInformation: string, title: string): Promise<any>;
     update(agentContext: AgentContext, record: T): Promise<void>;
     delete(agentContext: AgentContext, record: T): Promise<void>;
     deleteById(agentContext: AgentContext, recordClass: BaseRecordConstructor<T>, id: string): Promise<void>;
     getById(agentContext: AgentContext, recordClass: BaseRecordConstructor<T>, id: string): Promise<T>;
     getAll(agentContext: AgentContext, recordClass: BaseRecordConstructor<T>): Promise<T[]>;
+    getAllAsAttributes(agentContext: AgentContext, recordClass: BaseRecordConstructor<T>): Promise<any[]>;
     findByQuery(agentContext: AgentContext, recordClass: BaseRecordConstructor<T>, query: Query<T>, queryOptions?: QueryOptions): Promise<T[]>;
 }
-//# sourceMappingURL=FakeStorageService.d.ts.map
+//# sourceMappingURL=EnmeshedStorageService.d.ts.map

package/dist/modules/openid4vc/local/EnmeshedStorageService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnmeshedStorageService.d.ts","sourceRoot":"","sources":["../../../../src/modules/openid4vc/local/EnmeshedStorageService.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,YAAY,EACZ,UAAU,EACV,qBAAqB,EAMrB,KAAK,EACL,YAAY,EAEZ,cAAc,EAIjB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E,qBACa,sBAAsB,CAAC,CAAC,SAAS,UAAU,CAAE,YAAW,cAAc,CAAC,CAAC,CAAC;IAIvE,iBAAiB,EAAE,iBAAiB;IACpC,mBAAmB,EAAE,oBAAoB;IAJ7C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAwB;gBAG5C,iBAAiB,EAAE,iBAAiB,EACpC,mBAAmB,EAAE,oBAAoB;IAGvC,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAmC1D,eAAe,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAmBjI,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB5D,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAS5D,UAAU,CAAC,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxG,OAAO,CAAC,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAiBlG,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IA0CvF,kBAAkB,CAAC,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAMrG,WAAW,CAAC,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;CAkC1J"}

package/dist/modules/openid4vc/local/EnmeshedStorageService.js

@@ -0,0 +1,218 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnmeshedStorageService = void 0;
+const core_1 = require("@credo-ts/core");
+const content_1 = require("@nmshd/content");
+const core_types_1 = require("@nmshd/core-types");
+const transport_1 = require("@nmshd/transport");
+const AttributesController_1 = require("../../attributes/AttributesController");
+let EnmeshedStorageService = class EnmeshedStorageService {
+    constructor(accountController, attributeController) {
+        this.accountController = accountController;
+        this.attributeController = attributeController;
+        this.storrage = new Map();
+    }
+    async save(agentContext, record) {
+        if (record.id === "STORAGE_VERSION_RECORD_ID") {
+            this.storrage.set(record.id, record);
+            return;
+        }
+        if (record.type === "DidRecord") {
+            this.storrage.set(record.id, record);
+            return;
+        }
+        let value = record.encoded;
+        if (typeof value !== "string") {
+            agentContext.config.logger.warn(`Record is not a string, serializing to JSON`);
+            value = JSON.stringify(value);
+        }
+        const owner = this.accountController.identity.address;
+        agentContext.config.logger.debug(`Saving record with id ${record.id} and value ${value}`);
+        const identityAttribute = content_1.IdentityAttribute.from({
+            value: {
+                "@type": "VerifiableCredential",
+                title: record.credential?.payload?.vct ?? "Credential",
+                value: value,
+                type: record.type
+            },
+            owner: owner
+        });
+        const result = await this.attributeController.createRepositoryAttribute({
+            content: identityAttribute
+        });
+        agentContext.config.logger.debug(`Saved record: ${JSON.stringify(result)}`);
+        return await Promise.resolve();
+    }
+    async saveWithDisplay(agentContext, value, type, displayInformation, title) {
+        const owner = this.accountController.identity.address;
+        const identityAttribute = content_1.IdentityAttribute.from({
+            value: {
+                "@type": "VerifiableCredential",
+                value: value,
+                type: type,
+                displayInformation: displayInformation,
+                title: title
+            },
+            owner: owner
+        });
+        const result = await this.attributeController.createRepositoryAttribute({
+            content: identityAttribute
+        });
+        agentContext.config.logger.debug(`Saved record: ${JSON.stringify(result)}`);
+        return await Promise.resolve(result);
+    }
+    async update(agentContext, record) {
+        agentContext.config.logger.debug(`Updating record with id ${record.id}`);
+        const value = core_1.JsonTransformer.serialize(record);
+        const owner = this.accountController.identity.address;
+        const oldAttribute = await this.attributeController.getLocalAttribute(core_types_1.CoreId.from(record.id));
+        if (!oldAttribute)
+            throw new Error(`Attribute with id ${record.id} not found`);
+        const identityAttribute = content_1.IdentityAttribute.from({
+            value: {
+                "@type": "VerifiableCredential",
+                value: value,
+                title: "Employee ID Card",
+                displayInformation: oldAttribute.content.value.displayInformation
+            },
+            owner: owner
+        });
+        await this.attributeController.createRepositoryAttribute({
+            content: identityAttribute,
+            id: core_types_1.CoreId.from(record.id)
+        });
+        return await Promise.resolve();
+    }
+    async delete(agentContext, record) {
+        agentContext.config.logger.debug(`Deleting record with id ${record.id}`);
+        const attribute = await this.attributeController.getLocalAttribute(core_types_1.CoreId.from(record.id));
+        if (attribute === undefined) {
+            throw new Error(`Attribute with id ${record.id} not found`);
+        }
+        await this.attributeController.deleteAttribute(attribute);
+    }
+    async deleteById(agentContext, recordClass, id) {
+        agentContext.config.logger.debug(`Deleting record with id ${id} - with record class ${recordClass.name}`);
+        const attribute = await this.attributeController.getLocalAttribute(core_types_1.CoreId.from(id));
+        if (attribute === undefined) {
+            throw new Error(`Attribute with id ${id} not found`);
+        }
+        await this.attributeController.deleteAttribute(attribute);
+    }
+    async getById(agentContext, recordClass, id) {
+        if (this.storrage.has(id)) {
+            const record = this.storrage.get(id);
+            if (!record)
+                throw new Error(`Record with id ${id} not found`);
+            return record;
+        }
+        agentContext.config.logger.debug(`Getting record with id ${id}`);
+        const attribute = await this.attributeController.getLocalAttribute(core_types_1.CoreId.from(id));
+        // parse the value field of attribute as JSON into T
+        if (attribute === undefined) {
+            throw new Error(`Attribute with id ${id} not found`);
+        }
+        const record = core_1.JsonTransformer.deserialize(attribute.content.value.value, recordClass);
+        return record;
+    }
+    async getAll(agentContext, recordClass) {
+        const records = [];
+        const attributes = await this.attributeController.getLocalAttributes({ "content.value.@type": "VerifiableCredential", shareInfo: { $exists: false } });
+        for (const attribute of attributes) {
+            // TODO: Correct casting
+            const type = attribute.content.value.type;
+            let record;
+            if (type === core_1.ClaimFormat.SdJwtDc.toString() && recordClass.name === core_1.SdJwtVcRecord.name) {
+                record = new core_1.SdJwtVcRecord({ id: attribute.content.id, compactSdJwtVc: attribute.content.value.value });
+            }
+            else if (type === core_1.ClaimFormat.MsoMdoc.toString() && recordClass.name === core_1.MdocRecord.name) {
+                record = new core_1.MdocRecord({ id: attribute.content.id, mdoc: core_1.Mdoc.fromBase64Url(attribute.content.value.value) });
+            }
+            else if (type === core_1.ClaimFormat.SdJwtW3cVc.toString() && recordClass.name === core_1.W3cCredentialRecord.name) {
+                const credential = core_1.W3cJwtVerifiableCredential.fromSerializedJwt(attribute.content.value.value);
+                record = new core_1.W3cCredentialRecord({
+                    id: attribute.content.id,
+                    credential: credential,
+                    tags: {}
+                });
+            }
+            else {
+                agentContext.config.logger.info(`Skipping attribute with id ${attribute.id} and type ${type} as it does not match record class ${recordClass.name}`);
+                continue;
+            }
+            if (attribute.content.value.key !== undefined) {
+                // TODO: Remove as this is only a workaround for demo purposes
+                agentContext.config.logger.info("Found keys to possibly import");
+                const parsed = JSON.parse(attribute.content.value.key);
+                for (const [k, v] of parsed) {
+                    const currentKeys = globalThis.fakeKeyStorage;
+                    if (!currentKeys.has(k)) {
+                        globalThis.fakeKeyStorage.set(k, v);
+                        agentContext.config.logger.info(`Added key ${k} to fake keystore`);
+                    }
+                    else {
+                        agentContext.config.logger.info(`Key ${k} already in fake keystore`);
+                    }
+                }
+            }
+            records.push(record);
+        }
+        return records;
+    }
+    // should only be used for exporting data out of the credo environment
+    async getAllAsAttributes(agentContext, recordClass) {
+        agentContext.config.logger.debug(`Getting all records of type ${recordClass.name}`);
+        const attributes = await this.attributeController.getLocalAttributes({ "content.value.@type": "VerifiableCredential", shareInfo: { $exists: false } });
+        return attributes;
+    }
+    async findByQuery(agentContext, recordClass, query, queryOptions) {
+        agentContext.config.logger.debug(`Finding records by query ${JSON.stringify(query)} and options ${JSON.stringify(queryOptions)}`);
+        const records = [];
+        for (const record of await this.getAll(agentContext, recordClass)) {
+            let match = true;
+            for (const [key, value] of Object.entries(query)) {
+                if (record[key] !== value) {
+                    match = false;
+                    break;
+                }
+            }
+            if (match) {
+                records.push(record);
+            }
+        }
+        if (records.length === 0) {
+            // try to recover over local storrage - temporary fix
+            for (const record of this.storrage.values()) {
+                let match = true;
+                // there may be keys labeled with an $or - solve them accordingly
+                // TODO: $or and other operators not yet supported
+                for (const [key, value] of Object.entries(query)) {
+                    if (record[key] !== value) {
+                        match = false;
+                        break;
+                    }
+                }
+                if (match) {
+                    records.push(record);
+                }
+            }
+        }
+        return records;
+    }
+};
+exports.EnmeshedStorageService = EnmeshedStorageService;
+exports.EnmeshedStorageService = EnmeshedStorageService = __decorate([
+    (0, core_1.injectable)(),
+    __metadata("design:paramtypes", [transport_1.AccountController,
+        AttributesController_1.AttributesController])
+], EnmeshedStorageService);
+//# sourceMappingURL=EnmeshedStorageService.js.map