@project-chip/matter.js 0.2.0 → 0.3.0

package/dist/cjs/certificate/AttestationCertificateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AttestationCertificateManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/AttestationCertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAenD,qBAAa,6BAA6B;IAiBlC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAhB7B,OAAO,CAAC,SAAS,CAAa;IAI9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAGzB;IACF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA2B;IAC5D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuD;IACxF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,iBAAiB,CAAK;gBAGT,QAAQ,EAAE,QAAQ;IAKvC,UAAU;IAIV,SAAS,CAAC,SAAS,EAAE,MAAM;;;;IAW3B,OAAO,CAAC,eAAe;IA+BvB,OAAO,CAAC,eAAe;IA+BvB,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;CA+B7E"}

package/dist/cjs/certificate/AttestationCertificateManager.js

@@ -0,0 +1,146 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AttestationCertificateManager = void 0;
+const ChipPAAuthorities_js_1 = require("./ChipPAAuthorities.js");
+const CertificateManager_js_1 = require("./CertificateManager.js");
+const Crypto_js_1 = require("../crypto/Crypto.js");
+const Time_js_1 = require("../time/Time.js");
+const ByteArray_js_1 = require("../util/ByteArray.js");
+function getPaiCommonName(vendorId, productId) {
+    return `node-matter Dev PAI 0x${vendorId.id.toString(16).toUpperCase()} ${productId === undefined ? 'no PID' : `0x${productId.toString(16).toUpperCase()}`}`;
+}
+function getDacCommonName(vendorId, productId) {
+    return `node-matter Dev DAC 0x${vendorId.id.toString(16).toUpperCase()}/0x${productId.toString(16).toUpperCase()}`;
+}
+function getPaaCommonName() {
+    // Do not change this because we use the official Matter Test PAA and the certificate uses this name!
+    return "Matter Test PAA";
+}
+class AttestationCertificateManager {
+    constructor(vendorId) {
+        this.vendorId = vendorId;
+        this.paaCertId = BigInt(0);
+        // We use the official PAA cert for now because else pairing with Chip tool do not work because
+        // only this one is the Certificate store
+        this.paaKeyPair = {
+            privateKey: ChipPAAuthorities_js_1.TestCert_PAA_NoVID_PrivateKey,
+            publicKey: ChipPAAuthorities_js_1.TestCert_PAA_NoVID_PublicKey
+        };
+        this.paaKeyIdentifier = ChipPAAuthorities_js_1.TestCert_PAA_NoVID_SKID;
+        this.paiCertId = BigInt(1);
+        this.paiKeyPair = Crypto_js_1.Crypto.createKeyPair();
+        this.paiKeyIdentifier = Crypto_js_1.Crypto.hash(this.paiKeyPair.publicKey).slice(0, 20);
+        this.nextCertificateId = 2;
+        this.paiCertBytes = this.generatePAICert(vendorId);
+    }
+    getPAICert() {
+        return this.paiCertBytes;
+    }
+    getDACert(productId) {
+        const dacKeyPair = Crypto_js_1.Crypto.createKeyPair();
+        return {
+            keyPair: dacKeyPair,
+            dac: this.generateDaCert(dacKeyPair.publicKey, this.vendorId, productId)
+        };
+    }
+    // Method unused for now because we use the official Matter Test PAA, but is functional
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore
+    generatePAACert(vendorId) {
+        const now = Time_js_1.Time.get().now();
+        const unsignedCertificate = {
+            serialNumber: ByteArray_js_1.ByteArray.of(Number(this.paaCertId)),
+            signatureAlgorithm: 1 /* EcdsaWithSHA256 */,
+            publicKeyAlgorithm: 1 /* EC */,
+            ellipticCurveIdentifier: 1 /* P256v1 */,
+            issuer: {
+                commonName: getPaaCommonName(),
+                vendorId: vendorId,
+            },
+            notBefore: (0, CertificateManager_js_1.jsToMatterDate)(now, -1),
+            notAfter: (0, CertificateManager_js_1.jsToMatterDate)(now, 10),
+            subject: {
+                commonName: getPaaCommonName(),
+                vendorId: vendorId,
+            },
+            ellipticCurvePublicKey: this.paaKeyPair.publicKey,
+            extensions: {
+                basicConstraints: {
+                    isCa: true,
+                    pathLen: 1
+                },
+                keyUsage: 96,
+                subjectKeyIdentifier: this.paaKeyIdentifier,
+                authorityKeyIdentifier: this.paaKeyIdentifier,
+            }
+        };
+        return CertificateManager_js_1.CertificateManager.paaCertToAsn1(unsignedCertificate, this.paaKeyPair);
+    }
+    generatePAICert(vendorId, productId) {
+        const now = Time_js_1.Time.get().now();
+        const unsignedCertificate = {
+            serialNumber: ByteArray_js_1.ByteArray.of(Number(this.paiCertId)),
+            signatureAlgorithm: 1 /* EcdsaWithSHA256 */,
+            publicKeyAlgorithm: 1 /* EC */,
+            ellipticCurveIdentifier: 1 /* P256v1 */,
+            issuer: {
+                commonName: getPaaCommonName(),
+            },
+            notBefore: (0, CertificateManager_js_1.jsToMatterDate)(now, -1),
+            notAfter: (0, CertificateManager_js_1.jsToMatterDate)(now, 10),
+            subject: {
+                commonName: getPaiCommonName(vendorId, productId),
+                vendorId: vendorId,
+                productId: productId,
+            },
+            ellipticCurvePublicKey: this.paiKeyPair.publicKey,
+            extensions: {
+                basicConstraints: {
+                    isCa: true,
+                    pathLen: 0
+                },
+                keyUsage: 96,
+                subjectKeyIdentifier: this.paiKeyIdentifier,
+                authorityKeyIdentifier: this.paaKeyIdentifier,
+            },
+        };
+        return CertificateManager_js_1.CertificateManager.paiCertToAsn1(unsignedCertificate, this.paaKeyPair);
+    }
+    generateDaCert(publicKey, vendorId, productId) {
+        const now = Time_js_1.Time.get().now();
+        const certId = this.nextCertificateId++;
+        const unsignedCertificate = {
+            serialNumber: ByteArray_js_1.ByteArray.of(certId),
+            signatureAlgorithm: 1 /* EcdsaWithSHA256 */,
+            publicKeyAlgorithm: 1 /* EC */,
+            ellipticCurveIdentifier: 1 /* P256v1 */,
+            notBefore: (0, CertificateManager_js_1.jsToMatterDate)(now, -1),
+            notAfter: (0, CertificateManager_js_1.jsToMatterDate)(now, 10),
+            issuer: {
+                commonName: getPaiCommonName(vendorId),
+                vendorId: vendorId,
+            },
+            subject: {
+                commonName: getDacCommonName(vendorId, productId),
+                vendorId: vendorId,
+                productId: productId,
+            },
+            ellipticCurvePublicKey: publicKey,
+            extensions: {
+                basicConstraints: {
+                    isCa: false
+                },
+                keyUsage: 1,
+                subjectKeyIdentifier: Crypto_js_1.Crypto.hash(publicKey).slice(0, 20),
+                authorityKeyIdentifier: this.paiKeyIdentifier,
+            },
+        };
+        return CertificateManager_js_1.CertificateManager.daCertToAsn1(unsignedCertificate, this.paiKeyPair);
+    }
+}
+exports.AttestationCertificateManager = AttestationCertificateManager;

package/dist/cjs/certificate/CertificateManager.d.ts

@@ -0,0 +1,202 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { KeyPair } from "../crypto/Crypto.js";
+import { ByteArray } from "../util/ByteArray.js";
+import { NodeId } from "../datatype/NodeId.js";
+import { VendorId } from "../datatype/VendorId.js";
+import { TypeFromSchema } from "../tlv/TlvSchema.js";
+export declare function matterToJsDate(date: number): Date;
+export declare function jsToMatterDate(date: Date, addYears?: number): number;
+/** commonName = ASN.1 OID 2.5.4.3 */
+export declare const CommonName_X520: (name: string) => any[];
+/** matter-node-id = ASN.1 OID 1.3.6.1.4.1.37244.1.1 */
+export declare const NodeId_Matter: (nodeId: NodeId) => any[];
+/** matter-rcac-id = ASN.1 OID 1.3.6.1.4.1.37244.1.4 */
+export declare const RcacId_Matter: (id: bigint | number) => any[];
+/** matter-fabric-id = ASN.1 OID 1.3.6.1.4.1.37244.1.5 */
+export declare const FabricId_Matter: (id: bigint | number) => any[];
+/** matter-oid-vid = ASN.1 OID 1.3.6.1.4.1.37244.2.1 */
+export declare const VendorId_Matter: (vendorId: VendorId) => any[];
+/** matter-oid-pid = ASN.1 OID 1.3.6.1.4.1.3724 4.2.2 */
+export declare const ProductId_Matter: (id: number) => any[];
+export declare const TlvRootCertificate: import("../tlv/TlvObject.js").ObjectSchema<{
+    serialNumber: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    signatureAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    issuer: import("../tlv/TlvObject.js").FieldType<{
+        issuerRcacId?: number | bigint | undefined;
+    }>;
+    notBefore: import("../tlv/TlvObject.js").FieldType<number>;
+    notAfter: import("../tlv/TlvObject.js").FieldType<number>;
+    subject: import("../tlv/TlvObject.js").FieldType<{
+        rcacId: number | bigint;
+    }>;
+    publicKeyAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurveIdentifier: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurvePublicKey: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    extensions: import("../tlv/TlvObject.js").FieldType<{
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number | undefined;
+        };
+        keyUsage: number;
+        subjectKeyIdentifier: Uint8Array;
+        authorityKeyIdentifier: Uint8Array;
+        extendedKeyUsage?: number[] | undefined;
+        futureExtension?: Uint8Array | undefined;
+    }>;
+    signature: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+export declare const TlvOperationalCertificate: import("../tlv/TlvObject.js").ObjectSchema<{
+    serialNumber: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    signatureAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    issuer: import("../tlv/TlvObject.js").FieldType<{
+        issuerRcacId?: number | bigint | undefined;
+    }>;
+    notBefore: import("../tlv/TlvObject.js").FieldType<number>;
+    notAfter: import("../tlv/TlvObject.js").FieldType<number>;
+    subject: import("../tlv/TlvObject.js").FieldType<{
+        fabricId: number | bigint;
+        nodeId: NodeId;
+    }>;
+    publicKeyAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurveIdentifier: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurvePublicKey: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    extensions: import("../tlv/TlvObject.js").FieldType<{
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number | undefined;
+        };
+        keyUsage: number;
+        subjectKeyIdentifier: Uint8Array;
+        authorityKeyIdentifier: Uint8Array;
+        extendedKeyUsage?: number[] | undefined;
+        futureExtension?: Uint8Array | undefined;
+    }>;
+    signature: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+export interface DeviceAttestationCertificate {
+    serialNumber: ByteArray;
+    signatureAlgorithm: number;
+    issuer: {
+        commonName: string;
+        productId?: number;
+        vendorId: VendorId;
+    };
+    notBefore: number;
+    notAfter: number;
+    subject: {
+        commonName: string;
+        productId: number;
+        vendorId: VendorId;
+    };
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: ByteArray;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: number;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: ByteArray;
+        authorityKeyIdentifier: ByteArray;
+        futureExtension?: ByteArray;
+    };
+    signature: ByteArray;
+}
+export interface ProductAttestationIntermediateCertificate {
+    serialNumber: ByteArray;
+    signatureAlgorithm: number;
+    issuer: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    notBefore: number;
+    notAfter: number;
+    subject: {
+        commonName: string;
+        productId?: number;
+        vendorId: VendorId;
+    };
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: ByteArray;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: number;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: ByteArray;
+        authorityKeyIdentifier: ByteArray;
+        futureExtension?: ByteArray;
+    };
+    signature: ByteArray;
+}
+export interface ProductAttestationAuthorityCertificate {
+    serialNumber: ByteArray;
+    signatureAlgorithm: number;
+    issuer: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    notBefore: number;
+    notAfter: number;
+    subject: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: ByteArray;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: number;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: ByteArray;
+        authorityKeyIdentifier?: ByteArray;
+        futureExtension?: ByteArray;
+    };
+    signature: ByteArray;
+}
+export declare const TlvCertificationDeclaration: import("../tlv/TlvObject.js").ObjectSchema<{
+    formatVersion: import("../tlv/TlvObject.js").FieldType<number>;
+    vendorId: import("../tlv/TlvObject.js").FieldType<VendorId>;
+    produceIdArray: import("../tlv/TlvObject.js").FieldType<number[]>;
+    deviceTypeId: import("../tlv/TlvObject.js").FieldType<number>;
+    certificateId: import("../tlv/TlvObject.js").FieldType<string>;
+    securityLevel: import("../tlv/TlvObject.js").FieldType<number>;
+    securityInformation: import("../tlv/TlvObject.js").FieldType<number>;
+    versionNumber: import("../tlv/TlvObject.js").FieldType<number>;
+    certificationType: import("../tlv/TlvObject.js").FieldType<number>;
+    dacOriginVendorId: import("../tlv/TlvObject.js").OptionalFieldType<VendorId>;
+    dacOriginProductId: import("../tlv/TlvObject.js").OptionalFieldType<number>;
+    authorizedPaaList: import("../tlv/TlvObject.js").OptionalFieldType<Uint8Array[]>;
+}>;
+export type RootCertificate = TypeFromSchema<typeof TlvRootCertificate>;
+export type OperationalCertificate = TypeFromSchema<typeof TlvOperationalCertificate>;
+type Unsigned<Type> = {
+    [Property in keyof Type as Exclude<Property, "signature">]: Type[Property];
+};
+export declare class CertificateManager {
+    static rootCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { rcacId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<RootCertificate>): Uint8Array;
+    static nocCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { fabricId, nodeId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<OperationalCertificate>): Uint8Array;
+    static daCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName: subjectCommonName, vendorId: subjectVendorId, productId: subjectProductId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<DeviceAttestationCertificate>, keys: KeyPair): Uint8Array;
+    static paiCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId, productId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<ProductAttestationIntermediateCertificate>, keys: KeyPair): Uint8Array;
+    static paaCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<ProductAttestationAuthorityCertificate>, keys: KeyPair): Uint8Array;
+    static CertificationDeclarationToAsn1(eContent: ByteArray, subjectKeyIdentifier: ByteArray, privateKey: ByteArray): Uint8Array;
+    static validateRootCertificate(rootCert: RootCertificate): void;
+    static validateNocCertificate(rootCert: RootCertificate, nocCert: OperationalCertificate): void;
+    static createCertificateSigningRequest(keys: KeyPair): Uint8Array;
+    static getPublicKeyFromCsr(csr: ByteArray): Uint8Array;
+}
+export {};
+//# sourceMappingURL=CertificateManager.d.ts.map

package/dist/cjs/certificate/CertificateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/CertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,OAAO,EAAU,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAa,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAe,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAMhE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAUrD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,QAE1C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,SAAI,UAEtD;AAgBD,qCAAqC;AACrC,eAAO,MAAM,eAAe,SAAU,MAAM,UAA2C,CAAC;AAExF,uDAAuD;AACvD,eAAO,MAAM,aAAa,WAAY,MAAM,UAA4E,CAAC;AAEzH,uDAAuD;AACvD,eAAO,MAAM,aAAa,OAAQ,MAAM,GAAG,MAAM,UAAqE,CAAC;AAEvH,yDAAyD;AACzD,eAAO,MAAM,eAAe,OAAQ,MAAM,GAAG,MAAM,UAAqE,CAAC;AAEzH,uDAAuD;AACvD,eAAO,MAAM,eAAe,aAAc,QAAQ,UAAgF,CAAC;AAEnI,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,OAAQ,MAAM,UAAuE,CAAC;AAEnH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;EA0B7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BpC,CAAC;AAEH,MAAM,WAAW,4BAA4B;IACzC,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAA;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,SAAS,CAAC;IAClC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAA;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,SAAS,CAAC;QAChC,sBAAsB,EAAE,SAAS,CAAC;QAClC,eAAe,CAAC,EAAE,SAAS,CAAC;KAC/B,CAAC;IACF,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,yCAAyC;IACtD,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAA;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,SAAS,CAAC;IAClC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAA;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,SAAS,CAAC;QAChC,sBAAsB,EAAE,SAAS,CAAC;QAClC,eAAe,CAAC,EAAE,SAAS,CAAC;KAC/B,CAAA;IACD,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,sCAAsC;IACnD,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAA;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,SAAS,CAAC;IAClC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAA;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,SAAS,CAAC;QAChC,sBAAsB,CAAC,EAAE,SAAS,CAAC;QACnC,eAAe,CAAC,EAAE,SAAS,CAAC;KAC/B,CAAA;IACD,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;EAatC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,cAAc,CAAC,OAAO,yBAAyB,CAAC,CAAC;AACtF,KAAK,QAAQ,CAAC,IAAI,IAAI;KAAG,QAAQ,IAAI,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;CAAE,CAAC;AAErG,qBAAa,kBAAkB;IAC3B,MAAM,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,eAAe,CAAC;IAyB3N,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,sBAAsB,CAAC;IA2B3O,MAAM,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,OAAO;IAmC9W,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,yCAAyC,CAAC,EAAE,IAAI,EAAE,OAAO;IAoCtU,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,sCAAsC,CAAC,EAAE,IAAI,EAAE,OAAO;IAkCxT,MAAM,CAAC,8BAA8B,CAAC,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS;IAiBjH,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,eAAe;IAIxD,MAAM,CAAC,sBAAsB,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB;IAIxF,MAAM,CAAC,+BAA+B,CAAC,IAAI,EAAE,OAAO;IAepD,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS;CAyB5C"}