@pagopa/io-react-native-wallet 2.4.2 → 2.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pagopa/io-react-native-wallet",
-  "version": "2.4.2",
+  "version": "2.5.0",
   "description": "Provide data structures, helpers and API for IO Wallet",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",
@@ -74,6 +74,7 @@
     "react": "19.0.0",
     "react-native": "0.78.3",
     "react-native-builder-bob": "^0.20.0",
+    "react-native-quick-crypto": "^0.7.17",
     "release-it": "^19.0.6",
     "typed-openapi": "^0.4.1",
     "typescript": "5.0.4"
@@ -83,7 +84,8 @@
     "@pagopa/io-react-native-iso18013": "*",
     "@pagopa/io-react-native-jwt": "*",
     "react": "*",
-    "react-native": "*"
+    "react-native": "*",
+    "react-native-quick-crypto": "*"
   },
   "engines": {
     "node": ">= 16.0.0"
@@ -134,6 +136,9 @@
     ]
   },
   "dependencies": {
+    "@sd-jwt/core": "^0.18.0",
+    "@sd-jwt/crypto-nodejs": "^0.18.0",
+    "@sd-jwt/types": "^0.18.0",
     "dcql": "^0.2.21",
     "js-base64": "^3.7.7",
     "js-sha256": "^0.9.0",

package/src/credential/issuance/07-verify-and-parse-credential.ts

@@ -3,17 +3,17 @@ import { type Out } from "../../utils/misc";
 import type { EvaluateIssuerTrust } from "./02-evaluate-issuer-trust";
 import { IoWalletError } from "../../utils/errors";
 import { SdJwt4VC, verify as verifySdJwt } from "../../sd-jwt";
-import { getValueFromDisclosures } from "../../sd-jwt/converters";
 import { isSameThumbprint, type JWK } from "../../utils/jwk";
 import type { ObtainCredential } from "./06-obtain-credential";
-import { verify as verifyMdoc } from "../../mdoc";
+import { getParsedCredentialClaimKey, verify as verifyMdoc } from "../../mdoc";
 import { MDOC_DEFAULT_NAMESPACE } from "../../mdoc/const";
-import { getParsedCredentialClaimKey } from "../../mdoc/utils";
 import { Logger, LogLevel } from "../../utils/logging";
 import { extractElementValueAsDate } from "../../mdoc/converter";
 import type { CBOR } from "@pagopa/io-react-native-iso18013";
 import type { PublicKey } from "@pagopa/io-react-native-crypto";
-import { createNestedProperty } from "../../utils/nestedProperty";
+import { type SDJwt, SDJwtInstance } from "@sd-jwt/core";
+import { digest } from "@sd-jwt/crypto-nodejs";
+import { isPathEqual, isPrefixOf } from "../../utils/parser";
 
 type IssuerConf = Out<EvaluateIssuerTrust>["issuerConf"];
 type CredentialConf =
@@ -60,112 +60,139 @@ type ParsedCredential = {
   };
 };
 
-// handy alias
-type DecodedSdJwtCredential = Out<typeof verifySdJwt> & {
-  sdJwt: SdJwt4VC;
-};
-
+/**
+ * Parse a Sd-Jwt credential according to the issuer configuration
+ * @param credentialConfig - the list of supported credentials, as defined in the issuer configuration with their claims metadata
+ * @param parsedCredentialRaw - the raw parsed credential
+ * @param ignoreMissingAttributes - skip error when attributes declared in the issuer configuration are not found within disclosures
+ * @param includeUndefinedAttributes - include attributes not explicitly declared in the issuer configuration
+ * @returns The parsed credential with attributes in plain value
+ */
 const parseCredentialSdJwt = (
-  // The credential configuration to use to parse the provided credential
   credentialConfig: CredentialConf,
-  { sdJwt, disclosures }: DecodedSdJwtCredential,
+  parsedCredentialRaw: Record<string, unknown>,
   ignoreMissingAttributes: boolean = false,
   includeUndefinedAttributes: boolean = false
 ): ParsedCredential => {
-  if (credentialConfig.format !== sdJwt.header.typ) {
-    const message = `Received credential is of an unknown type. Expected one of [${credentialConfig.format}], received '${sdJwt.header.typ}'`;
-    Logger.log(LogLevel.ERROR, message);
-    throw new IoWalletError(message);
-  }
+  const claimsMetadata = credentialConfig.claims || [];
 
-  if (!credentialConfig.claims) {
-    Logger.log(LogLevel.ERROR, "Missing claims in the credential subject");
-    throw new IoWalletError("Missing claims in the credential subject"); // TODO [SIW-1268]: should not be optional
-  }
-
-  const attrDefinitions = credentialConfig.claims;
-
-  // Validate that all attributes from the config exist in either disclosures OR payload
+  // Check that all mandatory attributes defined in the issuer configuration are present in the credential
   if (!ignoreMissingAttributes) {
-    const disclosedKeys = new Set(disclosures.map(([, name]) => name));
-    const payloadKeys = new Set(Object.keys(sdJwt.payload ?? {}));
-
-    const definedTopLevelKeys = new Set(
-      attrDefinitions.map((def) => def.path[0] as string)
+    const missingPaths: string[] = [];
+    const rootKeysToVerify = new Set(
+      claimsMetadata
+        .map((c) => c.path[0])
+        .filter((p): p is string => typeof p === "string")
     );
 
-    const missingKeys = [...definedTopLevelKeys].filter(
-      (key) => !disclosedKeys.has(key) && !payloadKeys.has(key)
-    );
+    for (const rootKey of rootKeysToVerify) {
+      if (!(rootKey in parsedCredentialRaw)) {
+        missingPaths.push(rootKey);
+      }
+    }
 
-    if (missingKeys.length > 0) {
+    if (missingPaths.length > 0) {
+      const missing = missingPaths.join(", ");
+      const received = Object.keys(parsedCredentialRaw).join(", ");
       throw new IoWalletError(
-        `Some attributes are missing in the credential. Missing: [${missingKeys.join(", ")}]`
+        `Some attributes are missing in the credential. Missing: [${missing}], received: [${received}]`
       );
     }
   }
 
-  const definedValues: ParsedCredential = {};
-
-  // Group all schema definitions by their top-level key
-  const groupedDefinitions = attrDefinitions.reduce(
-    (acc, def) => {
-      const key = def.path[0] as string;
-      const group = acc[key];
-      if (group) {
-        group.push(def);
-      } else {
-        acc[key] = [def];
-      }
-      return acc;
-    },
-    {} as Record<string, typeof attrDefinitions>
-  );
-
-  // Loop through each group
-  for (const topLevelKey in groupedDefinitions) {
-    const definitionsForThisKey = groupedDefinitions[topLevelKey];
+  /**
+   * Helper to find display metadata for any given path
+   */
+  const getDisplayNames = (
+    path: (string | number | null)[]
+  ): Record<string, string> | undefined => {
+    const match = claimsMetadata.find((c) => isPathEqual(c.path, path));
+    if (!match) return undefined;
+
+    const nameMap: Record<string, string> = {};
+    for (const entry of match.display) {
+      nameMap[entry.locale] = entry.name;
+    }
+    return nameMap;
+  };
 
-    if (!definitionsForThisKey) {
-      continue;
+  /**
+   * Recursive function to build the localized structure
+   */
+  const processLevel = (
+    currentData: unknown,
+    currentPath: (string | number | null)[]
+  ): unknown => {
+    // Handle Arrays
+    if (Array.isArray(currentData)) {
+      return currentData.map((item) =>
+        processLevel(item, [...currentPath, null])
+      );
     }
 
-    const disclosureForThisKey = disclosures.find(
-      ([, name]) => name === topLevelKey
-    );
+    // Handle Objects
+    if (typeof currentData !== "object" || currentData === null) {
+      return currentData;
+    }
 
-    if (!disclosureForThisKey) {
-      continue;
+    const dataObj = currentData as Record<string, unknown>;
+    const result: ParsedCredential = {};
+    const processedKeys = new Set<string | number>();
+
+    // Identify unique keys in config at this level
+    const configKeysAtThisLevel: (string | number)[] = [];
+    for (const claim of claimsMetadata) {
+      // Check if the claim path starts with the current path
+      if (isPrefixOf(currentPath, claim.path)) {
+        const nextPart = claim.path[currentPath.length];
+        if (
+          (typeof nextPart === "string" || typeof nextPart === "number") &&
+          !configKeysAtThisLevel.includes(nextPart)
+        ) {
+          configKeysAtThisLevel.push(nextPart);
+        }
+      }
     }
 
-    const disclosureValue = disclosureForThisKey[2];
+    // Process keys
+    for (const key of configKeysAtThisLevel) {
+      const stringKey = key.toString();
+      const dataValue = dataObj[stringKey];
+      if (dataValue === undefined) continue;
 
-    const tempObjectForGroup = definitionsForThisKey.reduce(
-      (acc, { path, display }) =>
-        createNestedProperty(acc, path, disclosureValue, display),
-      {}
-    );
+      const newPath = [...currentPath, key];
 
-    // Merge the fully constructed object into the final result
-    Object.assign(definedValues, tempObjectForGroup);
-  }
+      let localizedNames = getDisplayNames(newPath);
 
-  if (includeUndefinedAttributes) {
-    // attributes that are in the disclosure set
-    // but are not defined in the issuer configuration
-    const undefinedValues = Object.fromEntries(
-      disclosures
-        .filter((_) => !Object.keys(definedValues).includes(_[1]))
-        .map(([, key, value]) => [key, { value, name: key }])
-    );
+      // Fallback for arrays
+      if (!localizedNames && Array.isArray(dataValue)) {
+        localizedNames = getDisplayNames([...newPath, null]);
+      }
 
-    return {
-      ...definedValues,
-      ...undefinedValues,
-    };
-  }
+      result[stringKey] = {
+        name: localizedNames || stringKey,
+        value: processLevel(dataValue, newPath),
+      };
 
-  return definedValues;
+      processedKeys.add(key);
+    }
+
+    // Handle Undefined Attributes
+    if (includeUndefinedAttributes) {
+      for (const [key, value] of Object.entries(dataObj)) {
+        if (!processedKeys.has(key)) {
+          result[key] = {
+            name: key,
+            value: value,
+          };
+        }
+      }
+    }
+
+    return result;
+  };
+
+  return processLevel(parsedCredentialRaw, []) as ParsedCredential;
 };
 
 const parseCredentialMDoc = (
@@ -305,7 +332,8 @@ async function verifyCredentialSdJwt(
   rawCredential: string,
   issuerKeys: JWK[],
   holderBindingContext: CryptoContext
-): Promise<DecodedSdJwtCredential> {
+): Promise<SDJwt> {
+  // TODO: change verification using sd-jwt library with 1.3.x update
   const [decodedCredential, holderBindingKey] =
     // parallel for optimization
     await Promise.all([
@@ -320,8 +348,13 @@ async function verifyCredentialSdJwt(
     throw new IoWalletError(message);
   }
 
-  return decodedCredential;
+  const sdJwtInstance = new SDJwtInstance({
+    hasher: digest,
+  });
+
+  return await sdJwtInstance.decode(rawCredential);
 }
+
 /**
  * Given a credential, verify it's in the supported format
  * and the credential is correctly signed
@@ -396,26 +429,37 @@ const verifyAndParseCredentialSdJwt: VerifyAndParseCredential = async (
     throw new IoWalletError("Credential type not supported by the issuer");
   }
 
+  const parsedCredentialRaw = (await decoded.getClaims(digest)) as Record<
+    string,
+    unknown
+  >;
+
   const parsedCredential = parseCredentialSdJwt(
     credentialConfig,
-    decoded,
+    parsedCredentialRaw,
     ignoreMissingAttributes,
     includeUndefinedAttributes
   );
-  const maybeIssuedAt = getValueFromDisclosures(decoded.disclosures, "iat");
+
+  const issuedAt =
+    typeof parsedCredentialRaw.iat === "number"
+      ? new Date(parsedCredentialRaw.iat * 1000)
+      : undefined;
+
+  if (typeof parsedCredentialRaw.exp !== "number") {
+    throw new IoWalletError("Invalid or missing expiration claim (exp)");
+  }
+  const expiration = new Date(parsedCredentialRaw.exp * 1000);
 
   Logger.log(
     LogLevel.DEBUG,
-    `Parsed credential: ${JSON.stringify(parsedCredential)}\nIssued at: ${maybeIssuedAt}`
+    `Parsed credential: ${JSON.stringify(parsedCredential)}\nIssued at: ${issuedAt}`
   );
 
   return {
     parsedCredential,
-    expiration: new Date(decoded.sdJwt.payload.exp * 1000),
-    issuedAt:
-      typeof maybeIssuedAt === "number"
-        ? new Date(maybeIssuedAt * 1000)
-        : undefined,
+    expiration,
+    issuedAt,
   };
 };
 

package/src/sd-jwt/__test__/index.test.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { decode, disclose } from "../index";
 
-import { encodeBase64, decodeBase64 } from "@pagopa/io-react-native-jwt";
+import { decodeBase64, encodeBase64 } from "@pagopa/io-react-native-jwt";
 import { SdJwt4VC } from "../types";
 import { pid } from "../__mocks__/sd-jwt";
 

package/src/sd-jwt/index.ts

@@ -1,9 +1,12 @@
 import { z } from "zod";
 
-import { decode as decodeJwt } from "@pagopa/io-react-native-jwt";
-import { verify as verifyJwt } from "@pagopa/io-react-native-jwt";
-import { SignJWT, sha256ToBase64 } from "@pagopa/io-react-native-jwt";
-import { Disclosure, SdJwt4VC, type DisclosureWithEncoded } from "./types";
+import {
+  decode as decodeJwt,
+  sha256ToBase64,
+  SignJWT,
+  verify as verifyJwt,
+} from "@pagopa/io-react-native-jwt";
+import { Disclosure, type DisclosureWithEncoded, SdJwt4VC } from "./types";
 import { verifyDisclosure } from "./verifier";
 import type { JWK } from "../utils/jwk";
 import * as Errors from "./errors";
@@ -123,7 +126,6 @@ export const disclose = async (
 
   // compose the final disclosed token
   const disclosedToken = [rawSdJwt, ...filteredDisclosures].join("~");
-
   return { token: disclosedToken, paths };
 };
 

package/src/utils/parser.ts

@@ -0,0 +1,18 @@
+/**
+ * Helper to determine if two paths are equal (Supports string | number | null)
+ */
+export const isPathEqual = (
+  pathA: (string | number | null)[],
+  pathB: (string | number | null)[]
+): boolean =>
+  pathA.length === pathB.length && pathA.every((v, i) => v === pathB[i]);
+/**
+ * Helper to check if prefix is the start of fullPath
+ */
+export const isPrefixOf = (
+  prefix: (string | number | null)[],
+  fullPath: (string | number | null)[]
+): boolean => {
+  if (prefix.length >= fullPath.length) return false;
+  return prefix.every((v, i) => v === fullPath[i]);
+};

package/lib/commonjs/utils/nestedProperty.js

@@ -1,153 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.createNestedProperty = void 0;
-var _misc = require("./misc");
-// The data used to create localized names
-
-// The resulting object of localized names { en: "Name", it: "Nome" }
-
-// The core structure being built: a node containing the actual value and its localized names
-
-// A path can consist of object keys, array indices, or null for mapping
-
-// A union of all possible shapes. It can be a custom PropertyNode or a standard object/array structure
-
-// Helper to build localized names from the display data.
-const buildName = display => display.reduce((names, _ref) => {
-  let {
-    locale,
-    name
-  } = _ref;
-  return {
-    ...names,
-    [locale]: name
-  };
-}, {});
-
-// Handles the case where the path key is `null` (indicating an array)
-const handleNullKeyCase = (currentObject, rest, sourceValue, displayData) => {
-  if (!Array.isArray(sourceValue)) return currentObject;
-
-  // We assert the type here because we know this branch handles PropertyNodes
-  const node = currentObject;
-  const existingValue = Array.isArray(node.value) ? node.value : [];
-  const mappedArray = sourceValue.map((item, idx) =>
-  // When mapping over an array, recursively call with `skipMissingLeaves` set to `true`.
-  // This tells the function to skip optional keys inside these array objects.
-  createNestedProperty(existingValue[idx] || {}, rest, item, displayData, true));
-  return {
-    ...node,
-    value: mappedArray,
-    name: node.name ?? buildName(displayData)
-  };
-};
-
-// Handles the case where the path key is a string
-const handleStringKeyCase = (currentObject, key, rest, sourceValue, displayData, skipMissingLeaves) => {
-  let nextSourceValue = sourceValue;
-  const isLeaf = rest.length === 0;
-  if ((0, _misc.isObject)(sourceValue)) {
-    // Check if any remaining string keys in the path exist in current sourceValue
-    // This handles nested object paths (unlike arrays which use null in the path)
-    const hasRestKey = rest.some(r => typeof r === "string" && r in sourceValue);
-    if (hasRestKey) {
-      return handleRestKey(currentObject, key, rest, sourceValue, displayData);
-    }
-
-    // Skip processing when the key is not found within the claim object
-    if (!(key in sourceValue)) {
-      // If the flag is set (we're inside an array), skip the missing key completely.
-      if (skipMissingLeaves) {
-        return currentObject;
-      }
-
-      // If the flag is NOT set, create the empty placeholder
-      // so that its children can be attached later.
-      if (isLeaf) {
-        return {
-          ...currentObject,
-          [key]: {
-            value: {},
-            name: buildName(displayData)
-          }
-        };
-      }
-      // Skip processing when the key is not found within the claim object
-      return currentObject;
-    }
-    nextSourceValue = sourceValue[key];
-  }
-
-  // base case
-  if (isLeaf) {
-    return {
-      ...currentObject,
-      [key]: {
-        value: nextSourceValue,
-        name: buildName(displayData)
-      }
-    };
-  }
-
-  // recursive step
-  const nextObject = currentObject[key] || {};
-  return {
-    ...currentObject,
-    [key]: createNestedProperty(nextObject, rest, nextSourceValue, displayData, skipMissingLeaves)
-  };
-};
-
-// Handles the case where the path key is a number
-const handleNumberKeyCase = (currentObject, key, rest, sourceValue, displayData) => {
-  const newArray = Array.isArray(currentObject) ? [...currentObject] : [];
-  const nextValue = Array.isArray(sourceValue) ? sourceValue[key] : undefined;
-  newArray[key] = createNestedProperty(newArray[key] || {}, rest, nextValue, displayData);
-  return newArray;
-};
-
-/**
- * Recursively constructs a nested object with descriptive properties from a path.
- *
- * @param currentObject - The object or array being built upon.
- * @param path - The path segments to follow.
- * @param sourceValue - The raw value to place at the end of the path.
- * @param displayData - The data for generating localized names.
- * @param skipMissingLeaves - If true, skips optional keys when mapping over arrays.
- * @returns The new object or array structure.
- */
-const createNestedProperty = function (currentObject, path, sourceValue, displayData) {
-  let skipMissingLeaves = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : false;
-  const [key, ...rest] = path;
-  switch (true) {
-    case key === null:
-      return handleNullKeyCase(currentObject, rest, sourceValue, displayData);
-    case typeof key === "string":
-      return handleStringKeyCase(currentObject, key, rest, sourceValue, displayData, skipMissingLeaves);
-    case typeof key === "number":
-      return handleNumberKeyCase(currentObject, key, rest, sourceValue, displayData);
-    default:
-      return currentObject;
-  }
-};
-
-// Handles the case where the next key in the path exists in the source object
-exports.createNestedProperty = createNestedProperty;
-const handleRestKey = (currentObject, key, rest, sourceValue, displayData) => {
-  const currentNode = currentObject[key] ?? {};
-  const restKey = rest[0];
-  const nextSourceValue = sourceValue[restKey];
-  if (typeof nextSourceValue === "undefined") {
-    return currentObject;
-  }
-  return {
-    ...currentObject,
-    [key]: {
-      ...currentNode,
-      value: createNestedProperty(currentNode.value ?? {}, rest, nextSourceValue, displayData)
-    }
-  };
-};
-//# sourceMappingURL=nestedProperty.js.map

package/lib/commonjs/utils/nestedProperty.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_misc","require","buildName","display","reduce","names","_ref","locale","name","handleNullKeyCase","currentObject","rest","sourceValue","displayData","Array","isArray","node","existingValue","value","mappedArray","map","item","idx","createNestedProperty","handleStringKeyCase","key","skipMissingLeaves","nextSourceValue","isLeaf","length","isObject","hasRestKey","some","r","handleRestKey","nextObject","handleNumberKeyCase","newArray","nextValue","undefined","path","arguments","exports","currentNode","restKey"],"sourceRoot":"../../../src","sources":["utils/nestedProperty.ts"],"mappings":";;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AAEA;;AAGA;;AAGA;;AAMA;;AAGA;;AAGA;AACA,MAAMC,SAAS,GAAIC,OAAoB,IACrCA,OAAO,CAACC,MAAM,CACZ,CAACC,KAAK,EAAAC,IAAA;EAAA,IAAE;IAAEC,MAAM;IAAEC;EAAK,CAAC,GAAAF,IAAA;EAAA,OAAM;IAAE,GAAGD,KAAK;IAAE,CAACE,MAAM,GAAGC;EAAK,CAAC;AAAA,CAAC,EAC3D,CAAC,CACH,CAAC;;AAEH;AACA,MAAMC,iBAAiB,GAAGA,CACxBC,aAA8B,EAC9BC,IAAU,EACVC,WAAoB,EACpBC,WAAwB,KACJ;EACpB,IAAI,CAACC,KAAK,CAACC,OAAO,CAACH,WAAW,CAAC,EAAE,OAAOF,aAAa;;EAErD;EACA,MAAMM,IAAI,GAAGN,aAAiD;EAC9D,MAAMO,aAAa,GAAGH,KAAK,CAACC,OAAO,CAACC,IAAI,CAACE,KAAK,CAAC,GAAGF,IAAI,CAACE,KAAK,GAAG,EAAE;EAEjE,MAAMC,WAAW,GAAGP,WAAW,CAACQ,GAAG,CAAC,CAACC,IAAI,EAAEC,GAAG;EAC5C;EACA;EACAC,oBAAoB,CAClBN,aAAa,CAACK,GAAG,CAAC,IAAI,CAAC,CAAC,EACxBX,IAAI,EACJU,IAAI,EACJR,WAAW,EACX,IACF,CACF,CAAC;EAED,OAAO;IACL,GAAGG,IAAI;IACPE,KAAK,EAAEC,WAAW;IAClBX,IAAI,EAAEQ,IAAI,CAACR,IAAI,IAAIN,SAAS,CAACW,WAAW;EAC1C,CAAC;AACH,CAAC;;AAED;AACA,MAAMW,mBAAmB,GAAGA,CAC1Bd,aAA8B,EAC9Be,GAAW,EACXd,IAAU,EACVC,WAAoB,EACpBC,WAAwB,EACxBa,iBAA0B,KACN;EACpB,IAAIC,eAAe,GAAGf,WAAW;EACjC,MAAMgB,MAAM,GAAGjB,IAAI,CAACkB,MAAM,KAAK,CAAC;EAEhC,IAAI,IAAAC,cAAQ,EAAClB,WAAW,CAAC,EAAE;IACzB;IACA;IACA,MAAMmB,UAAU,GAAGpB,IAAI,CAACqB,IAAI,CACzBC,CAAC,IAAK,OAAOA,CAAC,KAAK,QAAQ,IAAIA,CAAC,IAAIrB,WACvC,CAAC;IAED,IAAImB,UAAU,EAAE;MACd,OAAOG,aAAa,CAACxB,aAAa,EAAEe,GAAG,EAAEd,IAAI,EAAEC,WAAW,EAAEC,WAAW,CAAC;IAC1E;;IAEA;IACA,IAAI,EAAEY,GAAG,IAAIb,WAAW,CAAC,EAAE;MACzB;MACA,IAAIc,iBAAiB,EAAE;QACrB,OAAOhB,aAAa;MACtB;;MAEA;MACA;MACA,IAAIkB,MAAM,EAAE;QACV,OAAO;UACL,GAAGlB,aAAa;UAChB,CAACe,GAAG,GAAG;YAAEP,KAAK,EAAE,CAAC,CAAC;YAAEV,IAAI,EAAEN,SAAS,CAACW,WAAW;UAAE;QACnD,CAAC;MACH;MACA;MACA,OAAOH,aAAa;IACtB;IAEAiB,eAAe,GAAGf,WAAW,CAACa,GAAG,CAAC;EACpC;;EAEA;EACA,IAAIG,MAAM,EAAE;IACV,OAAO;MACL,GAAGlB,aAAa;MAChB,CAACe,GAAG,GAAG;QAAEP,KAAK,EAAES,eAAe;QAAEnB,IAAI,EAAEN,SAAS,CAACW,WAAW;MAAE;IAChE,CAAC;EACH;;EAEA;EACA,MAAMsB,UAAU,GACbzB,aAAa,CAAqCe,GAAG,CAAC,IAAI,CAAC,CAAC;EAE/D,OAAO;IACL,GAAGf,aAAa;IAChB,CAACe,GAAG,GAAGF,oBAAoB,CACzBY,UAAU,EACVxB,IAAI,EACJgB,eAAe,EACfd,WAAW,EACXa,iBACF;EACF,CAAC;AACH,CAAC;;AAED;AACA,MAAMU,mBAAmB,GAAGA,CAC1B1B,aAA8B,EAC9Be,GAAW,EACXd,IAAU,EACVC,WAAoB,EACpBC,WAAwB,KACJ;EACpB,MAAMwB,QAAQ,GAAGvB,KAAK,CAACC,OAAO,CAACL,aAAa,CAAC,GAAG,CAAC,GAAGA,aAAa,CAAC,GAAG,EAAE;EACvE,MAAM4B,SAAS,GAAGxB,KAAK,CAACC,OAAO,CAACH,WAAW,CAAC,GAAGA,WAAW,CAACa,GAAG,CAAC,GAAGc,SAAS;EAE3EF,QAAQ,CAACZ,GAAG,CAAC,GAAGF,oBAAoB,CAClCc,QAAQ,CAACZ,GAAG,CAAC,IAAI,CAAC,CAAC,EACnBd,IAAI,EACJ2B,SAAS,EACTzB,WACF,CAAC;EACD,OAAOwB,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMd,oBAAoB,GAAG,SAAAA,CAClCb,aAA8B,EAC9B8B,IAAU,EACV5B,WAAoB,EACpBC,WAAwB,EAEJ;EAAA,IADpBa,iBAA0B,GAAAe,SAAA,CAAAZ,MAAA,QAAAY,SAAA,QAAAF,SAAA,GAAAE,SAAA,MAAG,KAAK;EAElC,MAAM,CAAChB,GAAG,EAAE,GAAGd,IAAI,CAAC,GAAG6B,IAAI;EAE3B,QAAQ,IAAI;IACV,KAAKf,GAAG,KAAK,IAAI;MACf,OAAOhB,iBAAiB,CAACC,aAAa,EAAEC,IAAI,EAAEC,WAAW,EAAEC,WAAW,CAAC;IAEzE,KAAK,OAAOY,GAAG,KAAK,QAAQ;MAC1B,OAAOD,mBAAmB,CACxBd,aAAa,EACbe,GAAG,EACHd,IAAI,EACJC,WAAW,EACXC,WAAW,EACXa,iBACF,CAAC;IAEH,KAAK,OAAOD,GAAG,KAAK,QAAQ;MAC1B,OAAOW,mBAAmB,CACxB1B,aAAa,EACbe,GAAG,EACHd,IAAI,EACJC,WAAW,EACXC,WACF,CAAC;IAEH;MACE,OAAOH,aAAa;EACxB;AACF,CAAC;;AAED;AAAAgC,OAAA,CAAAnB,oBAAA,GAAAA,oBAAA;AACA,MAAMW,aAAa,GAAGA,CACpBxB,aAAkC,EAClCe,GAAW,EACXd,IAAU,EACVC,WAAoC,EACpCC,WAAwB,KACJ;EACpB,MAAM8B,WAAW,GAAGjC,aAAa,CAACe,GAAG,CAAC,IAAI,CAAC,CAAC;EAC5C,MAAMmB,OAAO,GAAGjC,IAAI,CAAC,CAAC,CAAW;EACjC,MAAMgB,eAAe,GAAGf,WAAW,CAACgC,OAAO,CAAC;EAC5C,IAAI,OAAOjB,eAAe,KAAK,WAAW,EAAE;IAC1C,OAAOjB,aAAa;EACtB;EAEA,OAAO;IACL,GAAGA,aAAa;IAChB,CAACe,GAAG,GAAG;MACL,GAAGkB,WAAW;MACdzB,KAAK,EAAEK,oBAAoB,CACzBoB,WAAW,CAACzB,KAAK,IAAI,CAAC,CAAC,EACvBP,IAAI,EACJgB,eAAe,EACfd,WACF;IACF;EACF,CAAC;AACH,CAAC"}