@sidhujag/sysweb3-keyring 2.1.10 → 2.1.12

package/esm/private-records.js

@@ -58,13 +58,16 @@ async function profileId(key, guard) {
     guard();
     return `0x${Buffer.from(bits).toString('hex')}`;
 }
-async function domainKey(key, domain, guard) {
-    const derived = await cryptoProvider().subtle.deriveKey({
+function domainParameters(domain) {
+    return {
         name: 'HKDF',
         hash: 'SHA-256',
         salt: bufferSource(encoder.encode(NAMESPACE)),
         info: bufferSource(encoder.encode(JSON.stringify([NAMESPACE, 'encryption-key', domain]))),
-    }, key, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+    };
+}
+async function domainKey(key, domain, guard) {
+    const derived = await cryptoProvider().subtle.deriveKey(domainParameters(domain), key, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
     guard();
     return derived;
 }
@@ -77,6 +80,15 @@ export async function privateRecordProfileId(secret, guard) {
     return profileId(await importRoot(secret, guard), guard);
 }
 export async function encryptPrivateRecordBytes(secret, params, guard) {
+    return encryptRecord(params, guard, async (domain) => {
+        const key = await importRoot(secret, guard);
+        return {
+            profile: await profileId(key, guard),
+            aesKey: await domainKey(key, domain, guard),
+        };
+    });
+}
+async function encryptRecord(params, guard, keys) {
     const domain = label(params.domain);
     const recordId = label(params.recordId);
     if (!(params.plaintext instanceof Uint8Array) ||
@@ -86,9 +98,8 @@ export async function encryptPrivateRecordBytes(secret, params, guard) {
     // Own the input before the first await; caller mutations cannot change it.
     const plaintext = new Uint8Array(params.plaintext);
     try {
-        const key = await importRoot(secret, guard);
-        const profile = await profileId(key, guard);
-        const aesKey = await domainKey(key, domain, guard);
+        const { profile, aesKey } = await keys(domain);
+        guard();
         const nonce = cryptoProvider().getRandomValues(new Uint8Array(NONCE_BYTES));
         const encrypted = await cryptoProvider().subtle.encrypt({
             name: 'AES-GCM',
@@ -111,6 +122,15 @@ export async function encryptPrivateRecordBytes(secret, params, guard) {
     }
 }
 export async function decryptPrivateRecordBytes(secret, params, guard) {
+    return decryptRecord(params, guard, async (domain) => {
+        const key = await importRoot(secret, guard);
+        return {
+            profile: await profileId(key, guard),
+            aesKey: await domainKey(key, domain, guard),
+        };
+    });
+}
+async function decryptRecord(params, guard, keys) {
     const domain = label(params.domain);
     const recordId = label(params.recordId);
     // Copy primitive fields before awaiting. No caller-owned object is retained.
@@ -127,12 +147,11 @@ export async function decryptPrivateRecordBytes(secret, params, guard) {
     }
     const nonce = decodeBase64(envelope.nonce, NONCE_BYTES, NONCE_BYTES);
     const ciphertext = decodeBase64(envelope.ciphertext, TAG_BYTES, MAX_PRIVATE_RECORD_BYTES + TAG_BYTES);
-    const key = await importRoot(secret, guard);
-    const profile = await profileId(key, guard);
+    const { profile, aesKey } = await keys(domain);
+    guard();
     if (profile !== envelope.profileId) {
         throw new Error('Private record profile mismatch');
     }
-    const aesKey = await domainKey(key, domain, guard);
     let plaintext;
     try {
         plaintext = new Uint8Array(await cryptoProvider().subtle.decrypt({
@@ -150,4 +169,260 @@ export async function decryptPrivateRecordBytes(secret, params, guard) {
         throw new Error('Private record authentication failed');
     }
 }
+const recordAccessOwners = new WeakMap();
+/** Canonical exact set, used only to retrieve a previously granted capability. */
+export function privateRecordDomainSet(domains) {
+    if (!Array.isArray(domains) || domains.length === 0 || domains.length > 8)
+        throw new Error('Invalid record domains');
+    const names = [];
+    for (let i = 0; i < domains.length; i++) {
+        const item = Object.getOwnPropertyDescriptor(domains, String(i));
+        if (!item || !('value' in item))
+            throw new Error('Invalid record domains');
+        names.push(label(item.value));
+    }
+    if (new Set(names).size !== names.length)
+        throw new Error('Invalid record domains');
+    return JSON.stringify(names.sort());
+}
+function checkRecordOwner(owner) {
+    if (!owner.active)
+        throw new Error('Record access retired');
+    const result = owner.guard();
+    if (result !== undefined) {
+        void Promise.resolve(result).catch(() => undefined);
+        throw new Error('Record access requires a synchronous owner guard');
+    }
+    if (!owner.active)
+        throw new Error('Record access retired');
+}
+function bindRecordAccess(owner) {
+    const check = () => checkRecordOwner(owner);
+    const keyFor = async (domain) => {
+        check();
+        const aesKey = owner.keys.get(domain);
+        if (!aesKey)
+            throw new Error('Record domain not authorized');
+        return { profile: owner.profile, aesKey };
+    };
+    const access = Object.freeze({
+        async getPrivateRecordProfileId() {
+            check();
+            return owner.profile;
+        },
+        encryptPrivateRecord: (params) => encryptRecord(params, check, keyFor),
+        decryptPrivateRecord: (params) => decryptRecord(params, check, keyFor),
+        dispose() {
+            owner.active = false;
+            owner.keys.clear();
+        },
+    });
+    recordAccessOwners.set(access, owner);
+    return access;
+}
+/** Internal cache inspection; key material is never returned. */
+export function activePrivateRecordDomainSet(access, authority) {
+    const owner = recordAccessOwners.get(access);
+    if (!owner?.active)
+        return null;
+    if (owner.authority !== authority)
+        throw new Error('Record access owner mismatch');
+    checkRecordOwner(owner);
+    return owner.domainSet;
+}
+/** Internal transfer policy; callers cannot upgrade an existing grant. */
+export function privateRecordAccessCanTransfer(access, authority) {
+    const owner = recordAccessOwners.get(access);
+    if (!owner?.active)
+        return false;
+    if (owner.authority !== authority)
+        throw new Error('Record access owner mismatch');
+    checkRecordOwner(owner);
+    return owner.transferable;
+}
+/** Internal trusted SDK transfer. Old methods/dispose cannot affect the moved keys. */
+export function transferPrivateRecordAccess(access, sourceAuthority, targetAuthority, guard) {
+    const owner = recordAccessOwners.get(access);
+    if (!owner ||
+        owner.authority !== sourceAuthority ||
+        !targetAuthority ||
+        typeof targetAuthority !== 'object')
+        throw new Error('Record access owner mismatch');
+    checkRecordOwner(owner);
+    if (!owner.transferable)
+        throw new Error('Record access cannot transfer');
+    const keys = owner.keys;
+    const next = bindRecordAccess({
+        active: true,
+        domainSet: owner.domainSet,
+        guard,
+        keys,
+        profile: owner.profile,
+        transferable: true,
+        authority: targetAuthority,
+    });
+    owner.keys = new Map();
+    owner.active = false;
+    return next;
+}
+/** Derive only the named record keys, then release the root. No key export or derivation surface escapes. */
+export async function createPrivateRecordAccess(secret, domains, options, guard, authority) {
+    if (!authority || typeof authority !== 'object')
+        throw new Error('Record access owner is required');
+    const transfer = options &&
+        typeof options === 'object' &&
+        Reflect.ownKeys(options).length === 1
+        ? Object.getOwnPropertyDescriptor(options, 'transferable')
+        : undefined;
+    if (!transfer ||
+        !('value' in transfer) ||
+        typeof transfer.value !== 'boolean')
+        throw new Error('Explicit record transfer policy is required');
+    const domainSet = privateRecordDomainSet(domains);
+    const names = JSON.parse(domainSet);
+    const owner = {
+        active: true,
+        domainSet,
+        guard,
+        keys: new Map(),
+        profile: '',
+        transferable: transfer.value,
+        authority,
+    };
+    const check = () => checkRecordOwner(owner);
+    check();
+    let root;
+    try {
+        root = await importRoot(secret, check);
+        owner.profile = await profileId(root, check);
+        for (const domain of names) {
+            owner.keys.set(domain, await domainKey(root, domain, check));
+            check();
+        }
+        return bindRecordAccess(owner);
+    }
+    catch (error) {
+        owner.active = false;
+        owner.keys.clear();
+        throw error;
+    }
+    finally {
+        root = undefined;
+    }
+}
+// This separate HKDF domain cannot decrypt the vault. Checkpoints contain only
+// explicitly selected record-domain keys, never the mnemonic or vault key.
+// No compatibility fallback to the previous password-wrapped checkpoint.
+const PUBLIC_SESSION_DOMAIN = 'sysweb3.public-view.v1';
+const CHECKPOINT_HEADER = new Uint8Array([0x50, 0x56, 0x43, 1]);
+const CHECKPOINT_FIXED_BYTES = 4 + 32 + 32 + 32 + 1;
+const sameBytes = (left, right) => {
+    let difference = left.length ^ right.length;
+    for (let i = 0; i < left.length; i++)
+        difference |= left[i] ^ (right[i] ?? 0);
+    return difference === 0;
+};
+function checkpointContext(context) {
+    if (!/^[0-9a-f]{64}$/.test(context.walletBindingId) ||
+        !/^[0-9a-f]{64}$/.test(context.pairFingerprint) ||
+        !(context.stateDigest instanceof Uint8Array) ||
+        context.stateDigest.length !== 32)
+        throw new Error('Invalid public record checkpoint context');
+    return JSON.parse(privateRecordDomainSet(context.domains));
+}
+/** Internal sealing only. No record key or extractable CryptoKey leaves this module. */
+export async function sealPublicRecordCheckpoint(rootSecret, wrappingSecret, context, guard) {
+    const domains = checkpointContext(context);
+    const payload = new Uint8Array(CHECKPOINT_FIXED_BYTES +
+        domains.reduce((size, domain) => size + 1 + domain.length + 32, 0));
+    let derived;
+    try {
+        const root = await importRoot(rootSecret, guard);
+        payload.set(CHECKPOINT_HEADER);
+        payload.set(Buffer.from(context.pairFingerprint, 'hex'), 4);
+        payload.set(context.stateDigest, 36);
+        payload.set(Buffer.from((await profileId(root, guard)).slice(2), 'hex'), 68);
+        payload[100] = domains.length;
+        let offset = CHECKPOINT_FIXED_BYTES;
+        for (const domain of domains) {
+            const name = encoder.encode(domain);
+            payload[offset++] = name.length;
+            payload.set(name, offset);
+            offset += name.length;
+            // Same v1 HKDF inputs as domainKey, imported non-extractably on restore.
+            derived = new Uint8Array(await cryptoProvider().subtle.deriveBits(domainParameters(domain), root, 256));
+            guard();
+            payload.set(derived, offset);
+            offset += 32;
+            derived.fill(0);
+            derived = undefined;
+        }
+        return await encryptPrivateRecordBytes(wrappingSecret, {
+            domain: PUBLIC_SESSION_DOMAIN,
+            recordId: context.walletBindingId,
+            plaintext: payload,
+        }, guard);
+    }
+    finally {
+        derived?.fill(0);
+        payload.fill(0);
+    }
+}
+/** Internal restore imports only the sealed exact domain set as non-extractable keys. */
+export async function restorePublicRecordCheckpoint(wrappingSecret, envelope, context, guard, authority) {
+    const domains = checkpointContext(context);
+    const owner = {
+        active: true,
+        domainSet: privateRecordDomainSet(domains),
+        keys: new Map(),
+        guard,
+        profile: '',
+        transferable: true,
+        authority,
+    };
+    let payload, material;
+    try {
+        payload = await decryptPrivateRecordBytes(wrappingSecret, {
+            domain: PUBLIC_SESSION_DOMAIN,
+            recordId: context.walletBindingId,
+            envelope,
+        }, guard);
+        if (payload.length < CHECKPOINT_FIXED_BYTES ||
+            !sameBytes(payload.subarray(0, 4), CHECKPOINT_HEADER) ||
+            !sameBytes(payload.subarray(4, 36), new Uint8Array(Buffer.from(context.pairFingerprint, 'hex'))) ||
+            !sameBytes(payload.subarray(36, 68), context.stateDigest) ||
+            payload[100] !== domains.length)
+            throw new Error('Public session checkpoint context changed');
+        owner.profile = `0x${Buffer.from(payload.subarray(68, 100)).toString('hex')}`;
+        let offset = CHECKPOINT_FIXED_BYTES;
+        for (const domain of domains) {
+            const length = payload[offset++];
+            if (length !== domain.length ||
+                offset + length + 32 > payload.length ||
+                !sameBytes(payload.subarray(offset, offset + length), encoder.encode(domain)))
+                throw new Error('Public session checkpoint domains changed');
+            offset += length;
+            material = new Uint8Array(payload.subarray(offset, offset + 32));
+            offset += 32;
+            const key = await cryptoProvider().subtle.importKey('raw', bufferSource(material), { name: 'AES-GCM' }, false, ['encrypt', 'decrypt']);
+            material.fill(0);
+            material = undefined;
+            guard();
+            owner.keys.set(domain, key);
+        }
+        if (offset !== payload.length)
+            throw new Error('Invalid public session checkpoint');
+        guard();
+        return bindRecordAccess(owner);
+    }
+    catch (error) {
+        owner.active = false;
+        owner.keys.clear();
+        throw error;
+    }
+    finally {
+        payload?.fill(0);
+        material?.fill(0);
+    }
+}
 //# sourceMappingURL=private-records.js.map

package/esm/private-records.js.map

@@ -1 +1 @@
-{"version":3,"file":"private-records.js","sourceRoot":"","sources":["../../src/private-records.ts"],"names":[],"mappings":"AAsBA,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAElD,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAC9C,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,WAAW,GAAG,cAAc,CAAC;AACnC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC;AACnC,MAAM,MAAM,GACV,kEAAkE,CAAC;AAGrE,6EAA6E;AAC7E,0EAA0E;AAC1E,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAgB,EAAE,CACvD,KAAgC,CAAC;AAEnC,SAAS,cAAc;IACrB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,8BAA8B;QAC7C,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QACxB,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IAC3D,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QACrC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,IACE,KAAK,CAAC,MAAM,GAAG,GAAG;QAClB,KAAK,CAAC,MAAM,GAAG,GAAG;QAClB,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAkB,EAClB,KAAY;IAEZ,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,SAAS,CACjD,KAAK,EACL,YAAY,CAAC,MAAM,CAAC,EACpB,MAAM,EACN,KAAK,EACL,CAAC,YAAY,EAAE,WAAW,CAAC,CAC5B,CAAC;IACF,KAAK,EAAE,CAAC;IACR,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAc,EAAE,KAAY;IACnD,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,UAAU,CACnD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,EAAE,YAAY,CAChB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAC1D;KACF,EACD,GAAG,EACH,GAAG,CACJ,CAAC;IACF,KAAK,EAAE,CAAC;IACR,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAc,EACd,MAAc,EACd,KAAY;IAEZ,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,SAAS,CACrD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,EAAE,YAAY,CAChB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,CACtE;KACF,EACD,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IACF,KAAK,EAAE,CAAC;IACR,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,QAAgB,EAAE,OAAe;IACvE,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAkB,EAClB,KAAY;IAEZ,OAAO,SAAS,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAkB,EAClB,MAAmC,EACnC,KAAY;IAEZ,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,IACE,CAAC,CAAC,MAAM,CAAC,SAAS,YAAY,UAAU,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,wBAAwB,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,2EAA2E;IAC3E,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,OAAO,CACrD;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC;YACvB,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,YAAY,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;SACxE,EACD,MAAM,EACN,YAAY,CAAC,SAAS,CAAC,CACxB,CAAC;QACF,KAAK,EAAE,CAAC;QACR,OAAO;YACL,OAAO,EAAE,CAAC;YACV,MAAM;YACN,QAAQ;YACR,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;YAC1B,UAAU,EAAE,YAAY,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;SACpD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAkB,EAClB,MAAmC,EACnC,KAAY;IAEZ,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC3D,IACE,CAAC,QAAQ;QACT,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAClC,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,QAAQ,CAAC,MAAM,KAAK,MAAM;QAC1B,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE;QAChC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,YAAY,CAC7B,QAAQ,CAAC,UAAU,EACnB,SAAS,EACT,wBAAwB,GAAG,SAAS,CACrC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,SAAiC,CAAC;IACtC,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,UAAU,CACxB,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,OAAO,CACnC;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC;YACvB,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,YAAY,CAC1B,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAC1C;SACF,EACD,MAAM,EACN,YAAY,CAAC,UAAU,CAAC,CACzB,CACF,CAAC;QACF,KAAK,EAAE,CAAC;QACR,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,KAAK,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}
+{"version":3,"file":"private-records.js","sourceRoot":"","sources":["../../src/private-records.ts"],"names":[],"mappings":"AAsCA,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAElD,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAC9C,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,WAAW,GAAG,cAAc,CAAC;AACnC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC;AACnC,MAAM,MAAM,GACV,kEAAkE,CAAC;AAGrE,6EAA6E;AAC7E,0EAA0E;AAC1E,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAgB,EAAE,CACvD,KAAgC,CAAC;AAEnC,SAAS,cAAc;IACrB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,8BAA8B;QAC7C,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QACxB,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IAC3D,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QACrC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EACnB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,IACE,KAAK,CAAC,MAAM,GAAG,GAAG;QAClB,KAAK,CAAC,MAAM,GAAG,GAAG;QAClB,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAkB,EAClB,KAAY;IAEZ,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,SAAS,CACjD,KAAK,EACL,YAAY,CAAC,MAAM,CAAC,EACpB,MAAM,EACN,KAAK,EACL,CAAC,YAAY,EAAE,WAAW,CAAC,CAC5B,CAAC;IACF,KAAK,EAAE,CAAC;IACR,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAc,EAAE,KAAY;IACnD,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,UAAU,CACnD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,EAAE,YAAY,CAChB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAC1D;KACF,EACD,GAAG,EACH,GAAG,CACJ,CAAC;IACF,KAAK,EAAE,CAAC;IACR,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,EAAE,YAAY,CAChB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,CACtE;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAc,EACd,MAAc,EACd,KAAY;IAEZ,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,SAAS,CACrD,gBAAgB,CAAC,MAAM,CAAC,EACxB,GAAG,EACH,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IACF,KAAK,EAAE,CAAC;IACR,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,QAAgB,EAAE,OAAe;IACvE,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAkB,EAClB,KAAY;IAEZ,OAAO,SAAS,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAkB,EAClB,MAAmC,EACnC,KAAY;IAEZ,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC;YACpC,MAAM,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC;SAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAGD,KAAK,UAAU,aAAa,CAC1B,MAAmC,EACnC,KAAY,EACZ,IAA4C;IAE5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,IACE,CAAC,CAAC,MAAM,CAAC,SAAS,YAAY,UAAU,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,wBAAwB,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,2EAA2E;IAC3E,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,KAAK,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,OAAO,CACrD;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC;YACvB,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,YAAY,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;SACxE,EACD,MAAM,EACN,YAAY,CAAC,SAAS,CAAC,CACxB,CAAC;QACF,KAAK,EAAE,CAAC;QACR,OAAO;YACL,OAAO,EAAE,CAAC;YACV,MAAM;YACN,QAAQ;YACR,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;YAC1B,UAAU,EAAE,YAAY,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;SACpD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAkB,EAClB,MAAmC,EACnC,KAAY;IAEZ,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC;YACpC,MAAM,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC;SAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAmC,EACnC,KAAY,EACZ,IAA4C;IAE5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC3D,IACE,CAAC,QAAQ;QACT,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAClC,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,QAAQ,CAAC,MAAM,KAAK,MAAM;QAC1B,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE;QAChC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,YAAY,CAC7B,QAAQ,CAAC,UAAU,EACnB,SAAS,EACT,wBAAwB,GAAG,SAAS,CACrC,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,EAAE,CAAC;IACR,IAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,SAAiC,CAAC;IACtC,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,UAAU,CACxB,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,OAAO,CACnC;YACE,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC;YACvB,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,YAAY,CAC1B,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAC1C;SACF,EACD,MAAM,EACN,YAAY,CAAC,UAAU,CAAC,CACzB,CACF,CAAC;QACF,KAAK,EAAE,CAAC;QACR,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,KAAK,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAWD,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAGnC,CAAC;AAEJ,kFAAkF;AAClF,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QACtC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACtC,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAwB;IAChD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAY,KAAK,CAAC,KAAK,EAAE,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC9D,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAwB;IAChD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAsB,EAAE;QAC1D,KAAK,EAAE,CAAC;QACR,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,MAAM,GAAyB,MAAM,CAAC,MAAM,CAAC;QACjD,KAAK,CAAC,yBAAyB;YAC7B,KAAK,EAAE,CAAC;YACR,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QACD,oBAAoB,EAAE,CAAC,MAAmC,EAAE,EAAE,CAC5D,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;QACtC,oBAAoB,EAAE,CAAC,MAAmC,EAAE,EAAE,CAC5D,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;QACtC,OAAO;YACL,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;IACH,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,4BAA4B,CAC1C,MAA4B,EAC5B,SAAiB;IAEjB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAC/B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,SAAS,CAAC;AACzB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,8BAA8B,CAC5C,MAA4B,EAC5B,SAAiB;IAEjB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAC/B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,YAAY,CAAC;AAC5B,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,2BAA2B,CACzC,MAA4B,EAC5B,eAAuB,EACvB,eAAuB,EACvB,KAAY;IAEZ,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IACE,CAAC,KAAK;QACN,KAAK,CAAC,SAAS,KAAK,eAAe;QACnC,CAAC,eAAe;QAChB,OAAO,eAAe,KAAK,QAAQ;QAEnC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,gBAAgB,CAAC;QAC5B,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,IAAI;QACJ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,eAAe;KAC3B,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;IACvB,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAkB,EAClB,OAA0B,EAC1B,OAAmC,EACnC,KAAY,EACZ,SAAiB;IAEjB,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,QAAQ,GACZ,OAAO;QACP,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,cAAc,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC;IAChB,IACE,CAAC,QAAQ;QACT,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC;QACtB,OAAO,QAAQ,CAAC,KAAK,KAAK,SAAS;QAEnC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAsB;QAC/B,MAAM,EAAE,IAAI;QACZ,SAAS;QACT,KAAK;QACL,IAAI,EAAE,IAAI,GAAG,EAAE;QACf,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,QAAQ,CAAC,KAAK;QAC5B,SAAS;KACV,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,IAA2B,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,KAAK,CAAC,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7D,KAAK,EAAE,CAAC;QACV,CAAC;QACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AACvD,MAAM,iBAAiB,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChE,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAOpD,MAAM,SAAS,GAAG,CAAC,IAAgB,EAAE,KAAiB,EAAE,EAAE;IACxD,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,OAAO,UAAU,KAAK,CAAC,CAAC;AAC1B,CAAC,CAAC;AACF,SAAS,iBAAiB,CAAC,OAAsC;IAC/D,IACE,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QAC/C,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QAC/C,CAAC,CAAC,OAAO,CAAC,WAAW,YAAY,UAAU,CAAC;QAC5C,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,EAAE;QAEjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAa,CAAC;AACzE,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAAsB,EACtB,cAA0B,EAC1B,OAAsC,EACtC,KAAY;IAEZ,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,UAAU,CAC5B,sBAAsB;QACpB,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC,CACrE,CAAC;IACF,IAAI,OAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAC3D,EAAE,CACH,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,GAAG,sBAAsB,CAAC;QACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1B,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;YACtB,yEAAyE;YACzE,OAAO,GAAG,IAAI,UAAU,CACtB,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,UAAU,CACtC,gBAAgB,CAAC,MAAM,CAAC,EACxB,IAAI,EACJ,GAAG,CACJ,CACF,CAAC;YACF,KAAK,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,yBAAyB,CACpC,cAAc,EACd;YACE,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,OAAO,CAAC,eAAe;YACjC,SAAS,EAAE,OAAO;SACnB,EACD,KAAK,CACN,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,cAA0B,EAC1B,QAAiC,EACjC,OAAsC,EACtC,KAAY,EACZ,SAAiB;IAEjB,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAsB;QAC/B,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC;QAC1C,IAAI,EAAE,IAAI,GAAG,EAAE;QACf,KAAK;QACL,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,SAAS;KACV,CAAC;IACF,IAAI,OAA+B,EAAE,QAAgC,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,yBAAyB,CACvC,cAAc,EACd;YACE,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,OAAO,CAAC,eAAe;YACjC,QAAQ;SACT,EACD,KAAK,CACN,CAAC;QACF,IACE,OAAO,CAAC,MAAM,GAAG,sBAAsB;YACvC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,iBAAiB,CAAC;YACrD,CAAC,SAAS,CACR,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EACvB,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAC5D;YACD,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM;YAE/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,KAAK,CAAC,OAAO,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAClE,KAAK,CACN,EAAE,CAAC;QACJ,IAAI,MAAM,GAAG,sBAAsB,CAAC;QACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACjC,IACE,MAAM,KAAK,MAAM,CAAC,MAAM;gBACxB,MAAM,GAAG,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM;gBACrC,CAAC,SAAS,CACR,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EACzC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CACvB;gBAED,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,MAAM,IAAI,MAAM,CAAC;YACjB,QAAQ,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;YACjE,MAAM,IAAI,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,SAAS,CACjD,KAAK,EACL,YAAY,CAAC,QAAQ,CAAC,EACtB,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,QAAQ,GAAG,SAAS,CAAC;YACrB,KAAK,EAAE,CAAC;YACR,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,CAAC,MAAM;YAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,KAAK,EAAE,CAAC;QACR,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/esm/public-session.js

@@ -0,0 +1,65 @@
+import { privateRecordDomainSet } from './private-records';
+export const MAX_PUBLIC_SESSION_STATE_BYTES = 4 * 1024 * 1024;
+export function capturePublicSessionKey(value) {
+    if (!(value instanceof Uint8Array))
+        throw new TypeError('Invalid public session key');
+    const key = new Uint8Array(value);
+    // A caller may shadow length on a typed array or its subclass. Validate the
+    // owned plain copy, whose actual byte count is used by the crypto provider.
+    if (key.length !== 32) {
+        key.fill(0);
+        throw new TypeError('Invalid public session key');
+    }
+    return key;
+}
+export function capturePublicSessionRequest(input) {
+    if (!input || typeof input !== 'object')
+        throw new Error('Invalid public session request');
+    const fields = Object.getOwnPropertyDescriptors(input);
+    for (const name of ['walletBindingId', 'publicState', 'recordDomains']) {
+        if (!fields[name] || !('value' in fields[name]))
+            throw new Error('Invalid public session request');
+    }
+    const walletBindingId = fields.walletBindingId.value;
+    const state = fields.publicState.value;
+    if (typeof walletBindingId !== 'string' ||
+        !/^[0-9a-f]{64}$/.test(walletBindingId) ||
+        !(state instanceof Uint8Array) ||
+        state.length === 0 ||
+        state.length > MAX_PUBLIC_SESSION_STATE_BYTES)
+        throw new Error('Invalid public session request');
+    const domains = JSON.parse(privateRecordDomainSet(fields.recordDomains.value));
+    return Object.freeze({
+        walletBindingId,
+        publicState: new Uint8Array(state),
+        recordDomains: Object.freeze(domains),
+    });
+}
+export function capturePublicSessionCheckpoint(input) {
+    const descriptor = Object.getOwnPropertyDescriptor(input, 'checkpoint');
+    if (!descriptor || !('value' in descriptor))
+        throw new Error('Invalid public session checkpoint');
+    const value = descriptor.value;
+    if (!value || typeof value !== 'object')
+        throw new Error('Invalid public session checkpoint');
+    const fields = Object.getOwnPropertyDescriptors(value);
+    const names = [
+        'version',
+        'domain',
+        'recordId',
+        'profileId',
+        'nonce',
+        'ciphertext',
+    ];
+    if (Reflect.ownKeys(fields).length !== names.length ||
+        names.some((name) => !fields[name] || !('value' in fields[name])))
+        throw new Error('Invalid public session checkpoint');
+    return Object.freeze(Object.fromEntries(names.map((name) => [name, fields[name].value])));
+}
+export async function publicSessionStateDigest(state, guard) {
+    guard();
+    const digest = new Uint8Array(await globalThis.crypto.subtle.digest('SHA-256', state));
+    guard();
+    return digest;
+}
+//# sourceMappingURL=public-session.js.map

package/esm/public-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-session.js","sourceRoot":"","sources":["../../src/public-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAmB3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9D,MAAM,UAAU,uBAAuB,CAAC,KAAiB;IACvD,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAqC;IAErC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QACrC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,CAAC,iBAAiB,EAAE,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;IACvC,IACE,OAAO,eAAe,KAAK,QAAQ;QACnC,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC;QACvC,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAC9B,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,8BAA8B;QAE7C,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAa,IAAI,CAAC,KAAK,CAClC,sBAAsB,CAAC,MAAM,CAAC,aAAc,CAAC,KAAM,CAAC,CACrD,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,eAAe;QACf,WAAW,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC;QAClC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAkC;IAElC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QACrC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG;QACZ,SAAS;QACT,QAAQ;QACR,UAAU;QACV,WAAW;QACX,OAAO;QACP,YAAY;KACb,CAAC;IACF,IACE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC/C,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAEjE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC9B,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAiB,EACjB,KAAiB;IAEjB,KAAK,EAAE,CAAC;IACR,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CACnC,SAAS,EACT,KAAgC,CACjC,CACF,CAAC;IACF,KAAK,EAAE,CAAC;IACR,OAAO,MAAM,CAAC;AAChB,CAAC"}