@odatano/core 0.3.26 → 0.3.27

package/srv/cardano-sign-service.js

@@ -13,18 +13,44 @@ const hsm_signer_1 = require("./blockchain/signing/hsm-signer");
 const signing_helper_1 = require("./utils/signing-helper");
 const { SELECT, UPDATE } = cds_1.default.ql;
 const logger = cds_1.default.log('CardanoSignService');
+/**
+ * Verify that a build exists and, when an address is provided, that it matches
+ * the build's senderAddress. Always fetches the build from DB.
+ */
+async function verifyBuildOwnership(req, db, buildId, address, TransactionBuilds, actionName) {
+    const build = await db.run(SELECT.one.from(TransactionBuilds).where({ id: buildId }));
+    if (!build)
+        (0, errors_1.rejectInvalid)(req, actionName, 'Build not found', 'buildId');
+    if (address && build.senderAddress !== address) {
+        (0, errors_1.rejectInvalid)(req, actionName, 'Address does not match build owner', 'address');
+    }
+    return build;
+}
 /**
  * Check if a signing request has expired and update its status.
  * @returns true if expired, false otherwise
  */
 async function checkAndExpireSigningRequest(db, signingRequest, SigningRequests) {
-    if (new Date(signingRequest.expiresAt) < new Date()) {
-        await db.run(UPDATE.entity(SigningRequests).set({ status: 'expired' }).where({ id: signingRequest.id }));
+    const now = new Date().toISOString();
+    const result = await db.run(UPDATE.entity(SigningRequests)
+        .set({ status: 'expired' })
+        .where({ id: signingRequest.id, expiresAt: { '<=': now } }));
+    if (result > 0) {
         signingRequest.status = 'expired';
         return true;
     }
     return false;
 }
+/**
+ * Enforce HSM role check if hsm.requiresRole is configured.
+ * Rejects with 403 if the user lacks the required role.
+ */
+function enforceHsmRole(req, actionName) {
+    const hsmConfig = (0, server_1.getHsmConfig)();
+    if (hsmConfig?.requiresRole && !req.user?.is(hsmConfig.requiresRole)) {
+        req.reject(403, `Action '${actionName}' requires role '${hsmConfig.requiresRole}'`);
+    }
+}
 /**
  * Cardano Sign Service Implementation
  * Handles transaction signing operations & some additional data queries.
@@ -33,21 +59,21 @@ module.exports = (srv) => {
     logger.info('Module loaded - registering handlers');
     const { SigningRequests, AddressSigningRequests, TransactionBuilds, } = require('#cds-models/CardanoSignService');
     /**
-     * before-READ handler for SigningRequests: lazy expiration check
-     * Updates status to 'expired' if expiresAt has passed (for pending requests)
+     * before-READ handler for SigningRequests: bulk expiration check
+     * Atomically expires all pending requests past their TTL (handles both single and collection reads)
+     * Throttled to run at most once per 60 seconds to avoid write amplification on every READ.
      */
-    srv.before('READ', SigningRequests, async (req) => {
-        // Expiration check runs on single-entity reads (where ID is provided)
-        if (req.params && req.params.length > 0) {
-            const { id } = req.params[0];
-            if (id) {
-                const db = await cds_1.default.connect.to('db');
-                const signingRequest = await db.run(SELECT.one.from(SigningRequests).where({ id }));
-                if (signingRequest && signingRequest.status === 'pending') {
-                    await checkAndExpireSigningRequest(db, signingRequest, SigningRequests);
-                }
-            }
-        }
+    let lastExpiryCheck = 0;
+    const EXPIRY_CHECK_INTERVAL_MS = 60_000;
+    srv.before('READ', SigningRequests, async () => {
+        const now = Date.now();
+        if (now - lastExpiryCheck < EXPIRY_CHECK_INTERVAL_MS)
+            return;
+        lastExpiryCheck = now;
+        const db = await cds_1.default.connect.to('db');
+        await db.run(UPDATE.entity(SigningRequests)
+            .set({ status: 'expired' })
+            .where({ status: 'pending', expiresAt: { '<=': new Date().toISOString() } }));
     });
     /**
      * Create a new signing request for external signing
@@ -114,14 +140,20 @@ module.exports = (srv) => {
      */
     srv.on('VerifySignature', async (req) => {
         logger.debug('VerifySignature Action handler called');
-        const { signingRequestId, signedTxCbor, signerType, signerInfo } = req.data;
+        const { signingRequestId, signedTxCbor, signerType, signerInfo, address } = req.data;
         const errors = (0, validators_1.validateTransactionInputs)({ signingRequestId, signedTxCbor }, ['signingRequestId', 'signedTxCbor']);
         (0, errors_1.throwIfValidationErrors)(req, 'VerifySignature', errors);
+        if (address && !(0, validators_1.isValidBech32Address)(address))
+            (0, errors_1.rejectInvalid)(req, 'VerifySignature', 'Invalid bech32 address format', 'address');
         return (0, backend_request_handler_1.handleRequest)(req, async (db) => {
             // Fetch the signing request (@from already validated by framework)
             const signingRequest = await db.run(SELECT.one.from(SigningRequests).where({ id: signingRequestId }));
             if (!signingRequest)
                 (0, errors_1.rejectInvalid)(req, 'VerifySignature', 'Signing request not found', 'signingRequestId');
+            // Ownership check: verify address matches build owner (defense-in-depth)
+            if (address && signingRequest.build_id) {
+                await verifyBuildOwnership(req, db, signingRequest.build_id, address, TransactionBuilds, 'VerifySignature');
+            }
             // Check if expired
             if (await checkAndExpireSigningRequest(db, signingRequest, SigningRequests)) {
                 (0, errors_1.rejectInvalid)(req, 'VerifySignature', 'Signing request has expired', 'signingRequestId');
@@ -168,20 +200,38 @@ module.exports = (srv) => {
      */
     srv.on('SubmitVerifiedTransaction', async (req) => {
         logger.debug('SubmitVerifiedTransaction Action handler called');
-        const { signingRequestId, signedTxCbor, signerType, signerInfo } = req.data;
+        const { signingRequestId, signedTxCbor, signerType, signerInfo, address } = req.data;
         const errors = (0, validators_1.validateTransactionInputs)({ signingRequestId, signedTxCbor }, ['signingRequestId', 'signedTxCbor']);
         (0, errors_1.throwIfValidationErrors)(req, 'SubmitVerifiedTransaction', errors);
+        if (address && !(0, validators_1.isValidBech32Address)(address))
+            (0, errors_1.rejectInvalid)(req, 'SubmitVerifiedTransaction', 'Invalid bech32 address format', 'address');
         return (0, backend_request_handler_1.handleRequest)(req, async (db) => {
-            const signingRequest = await db.run(SELECT.one.from(SigningRequests).where({ id: signingRequestId }));
-            if (!signingRequest)
-                (0, errors_1.rejectInvalid)(req, 'SubmitVerifiedTransaction', 'Signing request not found', 'signingRequestId');
-            // Check if expired
-            if (await checkAndExpireSigningRequest(db, signingRequest, SigningRequests)) {
-                (0, errors_1.rejectInvalid)(req, 'SubmitVerifiedTransaction', 'Signing request has expired', 'signingRequestId');
+            // Atomically claim the signing request by transitioning status to 'submitting'.
+            // This prevents concurrent calls from both passing the status check and double-submitting.
+            const now = new Date().toISOString();
+            const claimed = await db.run(UPDATE.entity(SigningRequests)
+                .set({ status: 'submitting' })
+                .where({
+                id: signingRequestId,
+                status: { in: ['pending', 'verified'] },
+                expiresAt: { '>': now },
+            }));
+            if (claimed === 0) {
+                // Claim failed — fetch to provide a specific error message
+                const existing = await db.run(SELECT.one.from(SigningRequests).where({ id: signingRequestId }));
+                if (!existing)
+                    (0, errors_1.rejectInvalid)(req, 'SubmitVerifiedTransaction', 'Signing request not found', 'signingRequestId');
+                if (existing.expiresAt <= now) {
+                    await db.run(UPDATE.entity(SigningRequests).set({ status: 'expired' }).where({ id: signingRequestId }));
+                    (0, errors_1.rejectInvalid)(req, 'SubmitVerifiedTransaction', 'Signing request has expired', 'signingRequestId');
+                }
+                (0, errors_1.rejectInvalid)(req, 'SubmitVerifiedTransaction', `Signing request status is '${existing.status}', expected 'pending' or 'verified'`, 'signingRequestId');
             }
-            // Status check: only pending or verified requests can be submitted
-            if (signingRequest.status !== 'pending' && signingRequest.status !== 'verified') {
-                (0, errors_1.rejectInvalid)(req, 'SubmitVerifiedTransaction', `Signing request status is '${signingRequest.status}', expected 'pending' or 'verified'`, 'signingRequestId');
+            // Re-fetch the full record (now with status='submitting')
+            const signingRequest = await db.run(SELECT.one.from(SigningRequests).where({ id: signingRequestId }));
+            // Ownership check: verify address matches build owner (defense-in-depth)
+            if (address && signingRequest.build_id) {
+                await verifyBuildOwnership(req, db, signingRequest.build_id, address, TransactionBuilds, 'SubmitVerifiedTransaction');
             }
             // Check if build association exists
             if (!signingRequest.build_id) {
@@ -258,20 +308,26 @@ module.exports = (srv) => {
      */
     srv.on('SignWithHsm', async (req) => {
         logger.debug('SignWithHsm Action handler called');
-        const { buildId } = req.data;
+        enforceHsmRole(req, 'SignWithHsm');
+        const { buildId, address } = req.data;
         // Validate input
         const errors = (0, validators_1.validateTransactionInputs)({ buildId }, ['buildId']);
         (0, errors_1.throwIfValidationErrors)(req, 'SignWithHsm', errors);
+        if (address && !(0, validators_1.isValidBech32Address)(address))
+            (0, errors_1.rejectInvalid)(req, 'SignWithHsm', 'Invalid bech32 address format', 'address');
         // Check HSM is available (before handleRequest — same pattern as validation)
         const hsmSigner = (0, hsm_signer_1.getHsmSigner)();
         if (!hsmSigner || !hsmSigner.isConnected()) {
             (0, errors_1.rejectInvalid)(req, 'SignWithHsm', 'HSM is not configured or not connected', 'hsm');
         }
         return (0, backend_request_handler_1.handleRequest)(req, async (db) => {
-            // 1. Fetch the build
-            const build = await db.run(SELECT.one.from(TransactionBuilds).where({ id: buildId }));
-            if (!build)
-                (0, errors_1.rejectInvalid)(req, 'SignWithHsm', 'Build not found', 'buildId');
+            // 1. Fetch the build (with ownership check)
+            const build = await verifyBuildOwnership(req, db, buildId, address, TransactionBuilds, 'SignWithHsm');
+            // HSM can only sign builds for its own address
+            const hsmAddress = hsmSigner.getAddress();
+            if (build.senderAddress !== hsmAddress) {
+                (0, errors_1.rejectInvalid)(req, 'SignWithHsm', `Build sender '${build.senderAddress}' does not match HSM address '${hsmAddress}'`, 'buildId');
+            }
             // 2. Create signing request internally (reuse external signer module)
             const signerModule = (0, external_signer_1.getExternalSignerModule)();
             const signingPayload = signerModule.createSigningRequest(build.id, build.unsignedTxCbor, build.txBodyHash, build.network, 'HSM signing');
@@ -315,20 +371,26 @@ module.exports = (srv) => {
      */
     srv.on('SignAndSubmitWithHsm', async (req) => {
         logger.debug('SignAndSubmitWithHsm Action handler called');
-        const { buildId } = req.data;
+        enforceHsmRole(req, 'SignAndSubmitWithHsm');
+        const { buildId, address } = req.data;
         // Validate input
         const errors = (0, validators_1.validateTransactionInputs)({ buildId }, ['buildId']);
         (0, errors_1.throwIfValidationErrors)(req, 'SignAndSubmitWithHsm', errors);
+        if (address && !(0, validators_1.isValidBech32Address)(address))
+            (0, errors_1.rejectInvalid)(req, 'SignAndSubmitWithHsm', 'Invalid bech32 address format', 'address');
         // Check HSM is available
         const hsmSigner = (0, hsm_signer_1.getHsmSigner)();
         if (!hsmSigner || !hsmSigner.isConnected()) {
             (0, errors_1.rejectInvalid)(req, 'SignAndSubmitWithHsm', 'HSM is not configured or not connected', 'hsm');
         }
         return (0, backend_request_handler_1.handleRequest)(req, async (db) => {
-            // 1. Fetch the build
-            const build = await db.run(SELECT.one.from(TransactionBuilds).where({ id: buildId }));
-            if (!build)
-                (0, errors_1.rejectInvalid)(req, 'SignAndSubmitWithHsm', 'Build not found', 'buildId');
+            // 1. Fetch the build (with ownership check)
+            const build = await verifyBuildOwnership(req, db, buildId, address, TransactionBuilds, 'SignAndSubmitWithHsm');
+            // HSM can only sign builds for its own address
+            const hsmAddress = hsmSigner.getAddress();
+            if (build.senderAddress !== hsmAddress) {
+                (0, errors_1.rejectInvalid)(req, 'SignAndSubmitWithHsm', `Build sender '${build.senderAddress}' does not match HSM address '${hsmAddress}'`, 'buildId');
+            }
             // 2. Create signing request
             const signerModule = (0, external_signer_1.getExternalSignerModule)();
             const signingPayload = signerModule.createSigningRequest(build.id, build.unsignedTxCbor, build.txBodyHash, build.network, 'HSM signing + submit');
@@ -338,10 +400,17 @@ module.exports = (srv) => {
             });
             // 3. Sign with HSM
             const signedTxCbor = hsmSigner.signTransaction(build.unsignedTxCbor, build.txBodyHash);
-            // 4. Verify HSM signature (non-throwing — HSM is server-side trusted)
+            // 4. Verify HSM signature — reject if invalid before submitting
             const verificationResult = signerModule.verifySignedTransaction(signedTxCbor, build.txBodyHash);
             const hsmStatus = hsmSigner.getStatus();
             const hsmKeyIdentifier = hsmStatus.keyLabel || hsmStatus.keyId || 'unknown';
+            if (!verificationResult.isValid) {
+                logger.error({
+                    signingRequestId: signingRequestRecord.id,
+                    hsmKey: hsmKeyIdentifier,
+                }, 'HSM signature verification failed — aborting submission');
+                (0, errors_1.rejectInvalid)(req, 'SignAndSubmitWithHsm', 'HSM signature verification failed', 'signedTxCbor');
+            }
             logger.info({
                 signingRequestId: signingRequestRecord.id,
                 witnessCount: verificationResult.witnessCount,
@@ -378,6 +447,7 @@ module.exports = (srv) => {
      * Returns null fields if HSM is not configured.
      */
     srv.on('GetHsmStatus', async (_req) => {
+        enforceHsmRole(_req, 'GetHsmStatus');
         const hsmSigner = (0, hsm_signer_1.getHsmSigner)();
         if (!hsmSigner) {
             return {

package/srv/cardano-sign-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"cardano-sign-service.js","sourceRoot":"","sources":["cardano-sign-service.ts"],"names":[],"mappings":";;;;;AAAA,mDAAwC;AACxC,6EAA+D;AAC/D,2CAAsF;AACtF,mDAAqF;AACrF,qCAA+D;AAC/D,0EAA+E;AAC/E,gEAA+D;AAC/D,2DAA2F;AAC3F,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAG,CAAC,EAAE,CAAC;AAElC,MAAM,MAAM,GAAG,aAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAE7C;;;GAGG;AACH,KAAK,UAAU,4BAA4B,CACzC,EAAO,EAAE,cAAmB,EAAE,eAAoB;IAElD,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QACpD,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzG,cAAc,CAAC,MAAM,GAAG,SAAS,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,OAAO,GAAG,CAAC,GAAgB,EAAE,EAAE;IACpC,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAEpD,MAAM,EACJ,eAAe,EACb,sBAAsB,EACtB,iBAAiB,GACpB,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAE9C;;;OAGG;IACH,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QACzD,sEAAsE;QACtE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAmB,CAAC;YAC/C,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE,GAAG,MAAM,aAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBACpF,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC1D,MAAM,4BAA4B,CAAC,EAAE,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAGH;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QACpD,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3D,MAAM,EAAE,OAAO,EAAG,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEvC,kBAAkB;QAClB,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,IAAA,gCAAuB,EAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAE7D,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,kBAAkB;YAClB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK;gBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;YAErF,yDAAyD;YACzD,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,GAAG,CAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CACjF,CAAC;YACF,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,oCAAoC,CAAC,CAAC;gBACrG,OAAO,eAAe,CAAC;YACzB,CAAC;YAED,sDAAsD;YACtD,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,cAAc,GAAG,YAAY,CAAC,oBAAoB,CACtD,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,OAAO,EACb,OAAO,CACR,CAAC;YAEF,kCAAkC;YAClC,MAAM,oBAAoB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBAC/E,OAAO;gBACP,cAAc;aACf,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;YAE/F,OAAO,oBAAoB,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QACjD,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxD,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtC,kBAAkB;QAClB,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrF,IAAA,gCAAuB,EAAC,GAAG,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAE1D,uDAAuD;QACvD,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,cAAc;gBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;YAE9G,+CAA+C;YAC/C,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,4BAA4B,CAAC,EAAE,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;YAC1E,CAAC;YAED,OAAO,cAAc,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QAC/C,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACtD,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE5E,MAAM,MAAM,GAAG,IAAA,sCAAyB,EACtC,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAClC,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACrC,CAAC;QACF,IAAA,gCAAuB,EAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAExD,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,mEAAmE;YACnE,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,cAAc;gBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;YAE5G,mBAAmB;YACnB,IAAI,MAAM,4BAA4B,CAAC,EAAE,EAAE,cAAc,EAAE,eAAe,CAAC,EAAE,CAAC;gBAC5E,IAAA,sBAAa,EAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;YAC3F,CAAC;YAED,sDAAsD;YACtD,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAA,sBAAa,EAAC,GAAG,EAAE,iBAAiB,EAAE,8BAA8B,cAAc,CAAC,MAAM,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;YACxI,CAAC;YAED,8FAA8F;YAC9F,IAAI,gBAAwB,CAAC;YAC7B,IAAI,IAAA,iCAAgB,EAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,oEAAoE;gBACpE,gBAAgB,GAAG,IAAA,gDAA+B,EAAC,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;gBAChG,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EAAE,iEAAiE,CAAC,CAAC;YACxG,CAAC;iBAAM,CAAC;gBACN,4DAA4D;gBAC5D,gBAAgB,GAAG,YAAY,CAAC;YAClC,CAAC;YAED,uBAAuB;YACvB,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,uBAAuB,CAAC,gBAAgB,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;YAEjG,8EAA8E;YAC9E,MAAM,kBAAkB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE;gBACpF,gBAAgB;gBAChB,YAAY,EAAE,gBAAgB;gBAC9B,kBAAkB,EAAE,MAAM;gBAC1B,UAAU;gBACV,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB;gBAChB,cAAc,EAAE,kBAAkB,CAAC,EAAE;gBACrC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,EAAE,kCAAkC,CAAC,CAAC;YAEvC,OAAO,kBAAkB,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,EAAE,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QACzD,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAChE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE5E,MAAM,MAAM,GAAG,IAAA,sCAAyB,EACtC,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAClC,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACrC,CAAC;QACF,IAAA,gCAAuB,EAAC,GAAG,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAElE,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,cAAc;gBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;YAEtH,mBAAmB;YACnB,IAAI,MAAM,4BAA4B,CAAC,EAAE,EAAE,cAAc,EAAE,eAAe,CAAC,EAAE,CAAC;gBAC5E,IAAA,sBAAa,EAAC,GAAG,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;YACrG,CAAC;YAED,mEAAmE;YACnE,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAChF,IAAA,sBAAa,EAAC,GAAG,EAAE,2BAA2B,EAAE,8BAA8B,cAAc,CAAC,MAAM,qCAAqC,EAAE,kBAAkB,CAAC,CAAC;YAChK,CAAC;YAED,oCAAoC;YACpC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;gBAC7B,IAAA,sBAAa,EAAC,GAAG,EAAE,2BAA2B,EAAE,yCAAyC,EAAE,kBAAkB,CAAC,CAAC;YACjH,CAAC;YAED,8FAA8F;YAC9F,IAAI,gBAAwB,CAAC;YAC7B,IAAI,IAAA,iCAAgB,EAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,oEAAoE;gBACpE,gBAAgB,GAAG,IAAA,gDAA+B,EAAC,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;gBAChG,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EAAE,gDAAgD,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACN,4DAA4D;gBAC5D,gBAAgB,GAAG,YAAY,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EAAE,wCAAwC,CAAC,CAAC;YAC/E,CAAC;YAED,uCAAuC;YACvC,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,kBAAkB,GAAG,YAAY,CAAC,aAAa,CAAC,gBAAgB,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;YAEnG,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB;gBAChB,YAAY,EAAE,kBAAkB,CAAC,YAAY;gBAC7C,OAAO,EAAE,kBAAkB,CAAC,eAAe;aAC5C,EAAE,gDAAgD,CAAC,CAAC;YAErD,uBAAuB;YACvB,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC;YACzC,MAAM,IAAA,yBAAgB,GAAE,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,8CAA8C,CAAC,CAAC;YAExE,sCAAsC;YACtC,MAAM,gBAAgB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,kCAAkC,CAAC,EAAE,EAAE;gBACxF,gBAAgB;gBAChB,OAAO,EAAE,cAAc,CAAC,QAAQ;gBAChC,gBAAgB;gBAChB,MAAM;gBACN,kBAAkB;gBAClB,UAAU;gBACV,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB;gBAChB,YAAY,EAAE,gBAAgB,CAAC,EAAE;gBACjC,MAAM;aACP,EAAE,+CAA+C,CAAC,CAAC;YAEpD,OAAO,gBAAgB,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,EAAE,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QAC3D,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC7B,uCAAuC;QACvC,IAAI,CAAC,OAAO;YAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,6BAA6B,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAA,iCAAoB,EAAC,OAAO,CAAC;YAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,SAAS,CAAC,CAAC;QAClI,iDAAiD;QACjD,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,iDAAiD;IACjD,8EAA8E;IAE9E;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QAC3C,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE7B,iBAAiB;QACjB,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,IAAA,gCAAuB,EAAC,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QAEpD,6EAA6E;QAC7E,MAAM,SAAS,GAAG,IAAA,yBAAY,GAAE,CAAC;QACjC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3C,IAAA,sBAAa,EAAC,GAAG,EAAE,aAAa,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,qBAAqB;YACrB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK;gBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;YAE5E,sEAAsE;YACtE,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,cAAc,GAAG,YAAY,CAAC,oBAAoB,CACtD,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,CAC/E,CAAC;YAEF,MAAM,oBAAoB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBAC/E,OAAO;gBACP,cAAc;aACf,CAAC,CAAC;YAEH,mBAAmB;YACnB,MAAM,YAAY,GAAG,SAAU,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAExF,2EAA2E;YAC3E,MAAM,kBAAkB,GAAG,YAAY,CAAC,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAEhG,MAAM,SAAS,GAAG,SAAU,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,gBAAgB,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC;YAE5E,0BAA0B;YAC1B,MAAM,IAAA,0BAAiB,GAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE;gBACzD,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,YAAY;gBACZ,kBAAkB;gBAClB,UAAU,EAAE,KAAK;gBACjB,UAAU,EAAE,YAAY,gBAAgB,EAAE;aAC3C,CAAC,CAAC;YAEH,4BAA4B;YAC5B,MAAM,EAAE,CAAC,GAAG,CACV,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;iBAC3B,GAAG,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;iBACnC,KAAK,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAC1C,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO;gBACP,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,OAAO,EAAE,kBAAkB,CAAC,OAAO;gBACnC,MAAM,EAAE,gBAAgB;aACzB,EAAE,6BAA6B,CAAC,CAAC;YAElC,iCAAiC;YACjC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QACpD,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3D,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE7B,iBAAiB;QACjB,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,IAAA,gCAAuB,EAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAE7D,yBAAyB;QACzB,MAAM,SAAS,GAAG,IAAA,yBAAY,GAAE,CAAC;QACjC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3C,IAAA,sBAAa,EAAC,GAAG,EAAE,sBAAsB,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAAC;QAC9F,CAAC;QAED,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,qBAAqB;YACrB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK;gBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;YAErF,4BAA4B;YAC5B,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,cAAc,GAAG,YAAY,CAAC,oBAAoB,CACtD,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,sBAAsB,CACxF,CAAC;YAEF,MAAM,oBAAoB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBAC/E,OAAO;gBACP,cAAc;aACf,CAAC,CAAC;YAEH,mBAAmB;YACnB,MAAM,YAAY,GAAG,SAAU,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAExF,sEAAsE;YACtE,MAAM,kBAAkB,GAAG,YAAY,CAAC,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAEhG,MAAM,SAAS,GAAG,SAAU,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,gBAAgB,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC;YAE5E,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,YAAY,EAAE,kBAAkB,CAAC,YAAY;gBAC7C,MAAM,EAAE,gBAAgB;aACzB,EAAE,oDAAoD,CAAC,CAAC;YAEzD,0BAA0B;YAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;YAChC,MAAM,IAAA,yBAAgB,GAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,gDAAgD,CAAC,CAAC;YAE1E,+CAA+C;YAC/C,MAAM,gBAAgB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,kCAAkC,CAAC,EAAE,EAAE;gBACxF,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,OAAO;gBACP,gBAAgB,EAAE,YAAY;gBAC9B,MAAM;gBACN,kBAAkB;gBAClB,UAAU,EAAE,KAAK;gBACjB,UAAU,EAAE,YAAY,gBAAgB,EAAE;aAC3C,CAAC,CAAC;YAEH,qBAAqB;YACrB,MAAM,EAAE,CAAC,GAAG,CACV,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;iBAC3B,GAAG,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;iBACnC,KAAK,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAC1C,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,YAAY,EAAE,gBAAgB,CAAC,EAAE;gBACjC,MAAM;aACP,EAAE,0DAA0D,CAAC,CAAC;YAE/D,OAAO,gBAAgB,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;QAC7C,MAAM,SAAS,GAAG,IAAA,yBAAY,GAAE,CAAC;QACjC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,IAAI;gBACnB,cAAc,EAAE,IAAI;aACrB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;YAC3C,cAAc,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;SACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}
+{"version":3,"file":"cardano-sign-service.js","sourceRoot":"","sources":["cardano-sign-service.ts"],"names":[],"mappings":";;;;;AAAA,mDAAwC;AACxC,6EAA+D;AAC/D,2CAAsF;AACtF,mDAAqF;AACrF,qCAA6E;AAC7E,0EAA+E;AAC/E,gEAA+D;AAC/D,2DAA2F;AAC3F,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAG,CAAC,EAAE,CAAC;AAElC,MAAM,MAAM,GAAG,aAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAE7C;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CACjC,GAAY,EAAE,EAAO,EAAE,OAAe,EAAE,OAA2B,EAAE,iBAAsB,EAAE,UAAkB;IAE/G,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK;QAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,OAAO,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;QAC/C,IAAA,sBAAa,EAAC,GAAG,EAAE,UAAU,EAAE,oCAAoC,EAAE,SAAS,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,4BAA4B,CACzC,EAAO,EAAE,cAAmB,EAAE,eAAoB;IAElD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CACzB,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;SAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SAC1B,KAAK,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAC9D,CAAC;IACF,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,cAAc,CAAC,MAAM,GAAG,SAAS,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAY,EAAE,UAAkB;IACtD,MAAM,SAAS,GAAG,IAAA,qBAAY,GAAE,CAAC;IACjC,IAAI,SAAS,EAAE,YAAY,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,UAAU,oBAAoB,SAAS,CAAC,YAAY,GAAG,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,OAAO,GAAG,CAAC,GAAgB,EAAE,EAAE;IACpC,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAEpD,MAAM,EACJ,eAAe,EACb,sBAAsB,EACtB,iBAAiB,GACpB,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAE9C;;;;OAIG;IACH,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,wBAAwB,GAAG,MAAM,CAAC;IAExC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,eAAe,GAAG,wBAAwB;YAAE,OAAO;QAC7D,eAAe,GAAG,GAAG,CAAC;QAEtB,MAAM,EAAE,GAAG,MAAM,aAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,EAAE,CAAC,GAAG,CACV,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;aAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;aAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAC/E,CAAC;IACJ,CAAC,CAAC,CAAC;IAGH;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QACpD,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3D,MAAM,EAAE,OAAO,EAAG,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEvC,kBAAkB;QAClB,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,IAAA,gCAAuB,EAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAE7D,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,kBAAkB;YAClB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK;gBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;YAErF,yDAAyD;YACzD,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,GAAG,CAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CACjF,CAAC;YACF,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,oCAAoC,CAAC,CAAC;gBACrG,OAAO,eAAe,CAAC;YACzB,CAAC;YAED,sDAAsD;YACtD,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,cAAc,GAAG,YAAY,CAAC,oBAAoB,CACtD,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,OAAO,EACb,OAAO,CACR,CAAC;YAEF,kCAAkC;YAClC,MAAM,oBAAoB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBAC/E,OAAO;gBACP,cAAc;aACf,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;YAE/F,OAAO,oBAAoB,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QACjD,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxD,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtC,kBAAkB;QAClB,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrF,IAAA,gCAAuB,EAAC,GAAG,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAE1D,uDAAuD;QACvD,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,cAAc;gBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;YAE9G,+CAA+C;YAC/C,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,4BAA4B,CAAC,EAAE,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;YAC1E,CAAC;YAED,OAAO,cAAc,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QAC/C,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACtD,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAErF,MAAM,MAAM,GAAG,IAAA,sCAAyB,EACtC,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAClC,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACrC,CAAC;QACF,IAAA,gCAAuB,EAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,OAAO,IAAI,CAAC,IAAA,iCAAoB,EAAC,OAAO,CAAC;YAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,SAAS,CAAC,CAAC;QAEjI,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,mEAAmE;YACnE,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,cAAc;gBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;YAE5G,yEAAyE;YACzE,IAAI,OAAO,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;gBACvC,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;YAC9G,CAAC;YAED,mBAAmB;YACnB,IAAI,MAAM,4BAA4B,CAAC,EAAE,EAAE,cAAc,EAAE,eAAe,CAAC,EAAE,CAAC;gBAC5E,IAAA,sBAAa,EAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;YAC3F,CAAC;YAED,sDAAsD;YACtD,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAA,sBAAa,EAAC,GAAG,EAAE,iBAAiB,EAAE,8BAA8B,cAAc,CAAC,MAAM,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;YACxI,CAAC;YAED,8FAA8F;YAC9F,IAAI,gBAAwB,CAAC;YAC7B,IAAI,IAAA,iCAAgB,EAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,oEAAoE;gBACpE,gBAAgB,GAAG,IAAA,gDAA+B,EAAC,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;gBAChG,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EAAE,iEAAiE,CAAC,CAAC;YACxG,CAAC;iBAAM,CAAC;gBACN,4DAA4D;gBAC5D,gBAAgB,GAAG,YAAY,CAAC;YAClC,CAAC;YAED,uBAAuB;YACvB,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,uBAAuB,CAAC,gBAAgB,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;YAEjG,8EAA8E;YAC9E,MAAM,kBAAkB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE;gBACpF,gBAAgB;gBAChB,YAAY,EAAE,gBAAgB;gBAC9B,kBAAkB,EAAE,MAAM;gBAC1B,UAAU;gBACV,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB;gBAChB,cAAc,EAAE,kBAAkB,CAAC,EAAE;gBACrC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,EAAE,kCAAkC,CAAC,CAAC;YAEvC,OAAO,kBAAkB,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,EAAE,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QACzD,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAChE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAErF,MAAM,MAAM,GAAG,IAAA,sCAAyB,EACtC,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAClC,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACrC,CAAC;QACF,IAAA,gCAAuB,EAAC,GAAG,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,OAAO,IAAI,CAAC,IAAA,iCAAoB,EAAC,OAAO,CAAC;YAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,2BAA2B,EAAE,+BAA+B,EAAE,SAAS,CAAC,CAAC;QAE3I,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,gFAAgF;YAChF,2FAA2F;YAC3F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,GAAG,CAC1B,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;iBAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;iBAC7B,KAAK,CAAC;gBACL,EAAE,EAAE,gBAAgB;gBACpB,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;gBACvC,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;aACxB,CAAC,CACL,CAAC;YAEF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,2DAA2D;gBAC3D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;gBAChG,IAAI,CAAC,QAAQ;oBAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;gBAChH,IAAI,QAAQ,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;oBAC9B,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;oBACxG,IAAA,sBAAa,EAAC,GAAG,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;gBACrG,CAAC;gBACD,IAAA,sBAAa,EAAC,GAAG,EAAE,2BAA2B,EAAE,8BAA8B,QAAQ,CAAC,MAAM,qCAAqC,EAAE,kBAAkB,CAAC,CAAC;YAC1J,CAAC;YAED,0DAA0D;YAC1D,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YAEtG,yEAAyE;YACzE,IAAI,OAAO,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;gBACvC,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;YACxH,CAAC;YAED,oCAAoC;YACpC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;gBAC7B,IAAA,sBAAa,EAAC,GAAG,EAAE,2BAA2B,EAAE,yCAAyC,EAAE,kBAAkB,CAAC,CAAC;YACjH,CAAC;YAED,8FAA8F;YAC9F,IAAI,gBAAwB,CAAC;YAC7B,IAAI,IAAA,iCAAgB,EAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,oEAAoE;gBACpE,gBAAgB,GAAG,IAAA,gDAA+B,EAAC,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;gBAChG,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EAAE,gDAAgD,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACN,4DAA4D;gBAC5D,gBAAgB,GAAG,YAAY,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EAAE,wCAAwC,CAAC,CAAC;YAC/E,CAAC;YAED,uCAAuC;YACvC,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,kBAAkB,GAAG,YAAY,CAAC,aAAa,CAAC,gBAAgB,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;YAEnG,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB;gBAChB,YAAY,EAAE,kBAAkB,CAAC,YAAY;gBAC7C,OAAO,EAAE,kBAAkB,CAAC,eAAe;aAC5C,EAAE,gDAAgD,CAAC,CAAC;YAErD,uBAAuB;YACvB,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC;YACzC,MAAM,IAAA,yBAAgB,GAAE,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,8CAA8C,CAAC,CAAC;YAExE,sCAAsC;YACtC,MAAM,gBAAgB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,kCAAkC,CAAC,EAAE,EAAE;gBACxF,gBAAgB;gBAChB,OAAO,EAAE,cAAc,CAAC,QAAQ;gBAChC,gBAAgB;gBAChB,MAAM;gBACN,kBAAkB;gBAClB,UAAU;gBACV,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB;gBAChB,YAAY,EAAE,gBAAgB,CAAC,EAAE;gBACjC,MAAM;aACP,EAAE,+CAA+C,CAAC,CAAC;YAEpD,OAAO,gBAAgB,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,EAAE,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QAC3D,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC7B,uCAAuC;QACvC,IAAI,CAAC,OAAO;YAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,6BAA6B,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAA,iCAAoB,EAAC,OAAO,CAAC;YAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,SAAS,CAAC,CAAC;QAClI,iDAAiD;QACjD,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,iDAAiD;IACjD,8EAA8E;IAE9E;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QAC3C,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClD,cAAc,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACnC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtC,iBAAiB;QACjB,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,IAAA,gCAAuB,EAAC,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,OAAO,IAAI,CAAC,IAAA,iCAAoB,EAAC,OAAO,CAAC;YAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,aAAa,EAAE,+BAA+B,EAAE,SAAS,CAAC,CAAC;QAE7H,6EAA6E;QAC7E,MAAM,SAAS,GAAG,IAAA,yBAAY,GAAE,CAAC;QACjC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3C,IAAA,sBAAa,EAAC,GAAG,EAAE,aAAa,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,4CAA4C;YAC5C,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;YAEtG,+CAA+C;YAC/C,MAAM,UAAU,GAAG,SAAU,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;gBACvC,IAAA,sBAAa,EAAC,GAAG,EAAE,aAAa,EAAE,iBAAiB,KAAK,CAAC,aAAa,iCAAiC,UAAU,GAAG,EAAE,SAAS,CAAC,CAAC;YACnI,CAAC;YAED,sEAAsE;YACtE,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,cAAc,GAAG,YAAY,CAAC,oBAAoB,CACtD,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,CAC/E,CAAC;YAEF,MAAM,oBAAoB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBAC/E,OAAO;gBACP,cAAc;aACf,CAAC,CAAC;YAEH,mBAAmB;YACnB,MAAM,YAAY,GAAG,SAAU,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAExF,2EAA2E;YAC3E,MAAM,kBAAkB,GAAG,YAAY,CAAC,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAEhG,MAAM,SAAS,GAAG,SAAU,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,gBAAgB,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC;YAE5E,0BAA0B;YAC1B,MAAM,IAAA,0BAAiB,GAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE;gBACzD,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,YAAY;gBACZ,kBAAkB;gBAClB,UAAU,EAAE,KAAK;gBACjB,UAAU,EAAE,YAAY,gBAAgB,EAAE;aAC3C,CAAC,CAAC;YAEH,4BAA4B;YAC5B,MAAM,EAAE,CAAC,GAAG,CACV,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;iBAC3B,GAAG,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;iBACnC,KAAK,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAC1C,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO;gBACP,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,OAAO,EAAE,kBAAkB,CAAC,OAAO;gBACnC,MAAM,EAAE,gBAAgB;aACzB,EAAE,6BAA6B,CAAC,CAAC;YAElC,iCAAiC;YACjC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;QACpD,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3D,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QAC5C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtC,iBAAiB;QACjB,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,IAAA,gCAAuB,EAAC,GAAG,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,OAAO,IAAI,CAAC,IAAA,iCAAoB,EAAC,OAAO,CAAC;YAAE,IAAA,sBAAa,EAAC,GAAG,EAAE,sBAAsB,EAAE,+BAA+B,EAAE,SAAS,CAAC,CAAC;QAEtI,yBAAyB;QACzB,MAAM,SAAS,GAAG,IAAA,yBAAY,GAAE,CAAC;QACjC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3C,IAAA,sBAAa,EAAC,GAAG,EAAE,sBAAsB,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAAC;QAC9F,CAAC;QAED,OAAO,IAAA,uCAAa,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,4CAA4C;YAC5C,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;YAE/G,+CAA+C;YAC/C,MAAM,UAAU,GAAG,SAAU,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;gBACvC,IAAA,sBAAa,EAAC,GAAG,EAAE,sBAAsB,EAAE,iBAAiB,KAAK,CAAC,aAAa,iCAAiC,UAAU,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5I,CAAC;YAED,4BAA4B;YAC5B,MAAM,YAAY,GAAG,IAAA,yCAAuB,GAAE,CAAC;YAC/C,MAAM,cAAc,GAAG,YAAY,CAAC,oBAAoB,CACtD,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,sBAAsB,CACxF,CAAC;YAEF,MAAM,oBAAoB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBAC/E,OAAO;gBACP,cAAc;aACf,CAAC,CAAC;YAEH,mBAAmB;YACnB,MAAM,YAAY,GAAG,SAAU,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAExF,gEAAgE;YAChE,MAAM,kBAAkB,GAAG,YAAY,CAAC,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAEhG,MAAM,SAAS,GAAG,SAAU,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,gBAAgB,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC;YAE5E,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC;oBACX,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;oBACzC,MAAM,EAAE,gBAAgB;iBACzB,EAAE,yDAAyD,CAAC,CAAC;gBAC9D,IAAA,sBAAa,EAAC,GAAG,EAAE,sBAAsB,EAAE,mCAAmC,EAAE,cAAc,CAAC,CAAC;YAClG,CAAC;YAED,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,YAAY,EAAE,kBAAkB,CAAC,YAAY;gBAC7C,MAAM,EAAE,gBAAgB;aACzB,EAAE,oDAAoD,CAAC,CAAC;YAEzD,0BAA0B;YAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC;YAChC,MAAM,IAAA,yBAAgB,GAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,gDAAgD,CAAC,CAAC;YAE1E,+CAA+C;YAC/C,MAAM,gBAAgB,GAAG,MAAM,IAAA,0BAAiB,GAAE,CAAC,kCAAkC,CAAC,EAAE,EAAE;gBACxF,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,OAAO;gBACP,gBAAgB,EAAE,YAAY;gBAC9B,MAAM;gBACN,kBAAkB;gBAClB,UAAU,EAAE,KAAK;gBACjB,UAAU,EAAE,YAAY,gBAAgB,EAAE;aAC3C,CAAC,CAAC;YAEH,qBAAqB;YACrB,MAAM,EAAE,CAAC,GAAG,CACV,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;iBAC3B,GAAG,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;iBACnC,KAAK,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAC1C,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC;gBACV,gBAAgB,EAAE,oBAAoB,CAAC,EAAE;gBACzC,YAAY,EAAE,gBAAgB,CAAC,EAAE;gBACjC,MAAM;aACP,EAAE,0DAA0D,CAAC,CAAC;YAE/D,OAAO,gBAAgB,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;QAC7C,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,IAAA,yBAAY,GAAE,CAAC;QACjC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,IAAI;gBACnB,cAAc,EAAE,IAAI;aACrB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;YAC3C,cAAc,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;SACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/srv/cardano-tx-service.cds

@@ -8,7 +8,11 @@ using {Bech32, Lovelace} from '../db/types';
  * Handles transaction building and submission operations.
  * Separate from the read-only CardanoODataService to provide
  * clear separation between general query and command operations.
+ *
+ * Security note: see CardanoODataService (cardano-service.cds) for the rationale
+ * on service-level auth without per-resource ownership enforcement.
  */
+@requires: 'authenticated-user'
 service CardanoTransactionService @(impl: './cardano-tx-service') {
     // ---------------------------------------------------------------------------
     // Entity Projections - Transaction Building & Submission