@soropass/core 0.1.0

package/dist/sign.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/webauthn/signature.ts","../src/internal/bytes.ts","../src/webauthn/payload.ts","../src/internal/encoding.ts","../src/webauthn/clientData.ts","../src/internal/cbor.ts","../src/webauthn/authData.ts","../src/webauthn/verify.ts","../src/ceremonies/random.ts","../src/ceremonies/browserClient.ts","../src/ceremonies/browserSigner.ts","../src/soroban/preimage.ts","../src/soroban/assemble.ts","../src/soroban/smartWallet.ts","../src/soroban/sign.ts","../src/soroban/signer.ts","../src/soroban/checkAuth.ts","../src/adapters/direct.ts","../src/soroban/submit.ts"],"names":["p256","sha256","xdr","hash","nativeToScVal","Contract","rpc","TransactionBuilder","Keypair"],"mappings":";;;;;;;AAoBO,IAAM,QAAA,GAAN,MAAM,SAAA,SAAiB,KAAA,CAAM;AAAA,EACzB,IAAA;AAAA,EACS,IAAA,GAAO,UAAA;AAAA,EAEzB,WAAA,CAAY,IAAA,EAAoB,OAAA,EAAkB,OAAA,EAA+B;AAC/E,IAAA,KAAA,CAAM,OAAA,IAAW,MAAM,OAAO,CAAA;AAC9B,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAGZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,SAAA,CAAS,SAAS,CAAA;AAAA,EAChD;AACF,CAAA;;;AC3BA,IAAM,cAAA,GAAiB,EAAA;AAUhB,SAAS,aAAa,GAAA,EAA6B;AACxD,EAAA,IAAI,GAAA,CAAI,SAAS,cAAA,EAAgB;AAC/B,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,uBAAA;AAAA,MACA,CAAA,iBAAA,EAAoB,GAAA,CAAI,MAAM,CAAA,oBAAA,EAAuB,cAAc,CAAA;AAAA,KACrE;AAAA,EACF;AACA,EAAA,IAAI;AACF,IAAA,OAAOA,SAAA,CAAK,SAAA,CAAU,OAAA,CAAQ,GAAG,EAAE,iBAAA,EAAkB;AAAA,EACvD,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,QAAA,CAAS,uBAAA,EAAyB,+BAAA,EAAiC,EAAE,OAAO,CAAA;AAAA,EACxF;AACF;AAEA,SAAS,oBAAoB,gBAAA,EAAoC;AAC/D,EAAA,IAAI,gBAAA,CAAiB,WAAW,EAAA,EAAI;AAClC,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,uBAAA;AAAA,MACA,CAAA,wCAAA,EAA2C,iBAAiB,MAAM,CAAA;AAAA,KACpE;AAAA,EACF;AACF;AAGO,SAAS,OAAO,gBAAA,EAAuC;AAC5D,EAAA,mBAAA,CAAoB,gBAAgB,CAAA;AACpC,EAAA,OAAO,CAACA,SAAA,CAAK,SAAA,CAAU,WAAA,CAAY,gBAAgB,EAAE,QAAA,EAAS;AAChE;AASO,SAAS,cAAc,gBAAA,EAA0C;AACtE,EAAA,mBAAA,CAAoB,gBAAgB,CAAA;AACpC,EAAA,OAAOA,UAAK,SAAA,CAAU,WAAA,CAAY,gBAAgB,CAAA,CAAE,UAAA,GAAa,iBAAA,EAAkB;AACrF;AAGO,SAAS,iBAAiB,GAAA,EAA6B;AAC5D,EAAA,OAAO,aAAA,CAAc,YAAA,CAAa,GAAG,CAAC,CAAA;AACxC;;;ACzDO,SAAS,eAAe,MAAA,EAAkC;AAC/D,EAAA,MAAM,KAAA,GAAQ,OAAO,MAAA,CAAO,CAAC,GAAG,CAAA,KAAM,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAC,CAAA;AACrD,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,KAAK,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,IAAA,GAAA,CAAI,GAAA,CAAI,GAAG,MAAM,CAAA;AACjB,IAAA,MAAA,IAAU,CAAA,CAAE,MAAA;AAAA,EACd;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,UAAA,CAAW,GAAe,CAAA,EAAwB;AAChE,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,QAAQ,CAAA,IAAK,CAAA,EAAG,IAAA,IAAA,CAAS,CAAA,CAAE,CAAC,CAAA,IAAK,CAAA,KAAM,CAAA,CAAE,CAAC,CAAA,IAAK,CAAA,CAAA;AACrE,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;;;ACTO,SAAS,yBAAyB,KAAA,EAG1B;AACb,EAAA,MAAM,cAAA,GAAiBC,aAAA,CAAO,KAAA,CAAM,cAAc,CAAA;AAClD,EAAA,OAAOA,aAAA,CAAO,WAAA,CAAY,KAAA,CAAM,iBAAA,EAAmB,cAAc,CAAC,CAAA;AACpE;;;ACRO,SAAS,iBAAiB,KAAA,EAA2B;AAC1D,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAO,MAAA,IAAU,MAAA,CAAO,aAAa,IAAI,CAAA;AAC5D,EAAA,OAAO,IAAA,CAAK,MAAM,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/E;AAGO,SAAS,iBAAiB,KAAA,EAAwC;AACvE,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,GAAG,CAAA;AACzD,EAAA,MAAM,MAAA,GAAS,SAAS,GAAA,CAAI,MAAA,CAAA,CAAQ,IAAK,MAAA,CAAO,MAAA,GAAS,KAAM,CAAC,CAAA;AAChE,EAAA,MAAM,MAAA,GAAS,KAAK,MAAM,CAAA;AAC1B,EAAA,MAAM,MAAM,IAAI,UAAA,CAAW,IAAI,WAAA,CAAY,MAAA,CAAO,MAAM,CAAC,CAAA;AACzD,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,IAAK,CAAA,EAAG,GAAA,CAAI,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AACvE,EAAA,OAAO,GAAA;AACT;AAEO,SAAS,YAAY,IAAA,EAA0B;AACpD,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAI,CAAA;AACtC;AAEO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA;AACvC;;;AChBO,SAAS,gBAAgB,SAAA,EAA+B;AAC7D,EAAA,OAAO,iBAAiB,SAAS,CAAA;AACnC;AAGO,SAAS,gBAAgB,SAAA,EAA+B;AAC7D,EAAA,OAAO,iBAAiB,SAAS,CAAA;AACnC;AAGO,SAAS,oBAAoB,cAAA,EAAwC;AAC1E,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,WAAA,CAAY,cAAc,CAAC,CAAA;AAAA,EAC9C,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,QAAA,CAAS,2BAAA,EAA6B,kCAAA,EAAoC,EAAE,OAAO,CAAA;AAAA,EAC/F;AACA,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,KAAQ,IAAA,EAAM;AAC3C,IAAA,MAAM,IAAI,QAAA,CAAS,2BAAA,EAA6B,qCAAqC,CAAA;AAAA,EACvF;AACA,EAAA,MAAM,GAAA,GAAM,GAAA;AACZ,EAAA,MAAM,EAAE,IAAA,EAAM,SAAA,EAAW,MAAA,EAAQ,aAAY,GAAI,GAAA;AACjD,EAAA,IAAI,OAAO,SAAS,QAAA,IAAY,OAAO,cAAc,QAAA,IAAY,OAAO,WAAW,QAAA,EAAU;AAC3F,IAAA,MAAM,IAAI,QAAA,CAAS,2BAAA,EAA6B,2CAA2C,CAAA;AAAA,EAC7F;AACA,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,SAAA;AAAA,IACA,MAAA;AAAA,IACA,WAAA,EAAa,OAAO,WAAA,KAAgB,SAAA,GAAY,WAAA,GAAc;AAAA,GAChE;AACF;AAOO,SAAS,oBAAA,CACd,gBACA,QAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,oBAAoB,cAAc,CAAA;AAC/C,EAAA,IAAI,IAAA,CAAK,SAAS,cAAA,EAAgB;AAChC,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,2BAAA;AAAA,MACA,CAAA,qBAAA,EAAwB,KAAK,IAAI,CAAA,uBAAA;AAAA,KACnC;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,MAAM,IAAI,QAAA,CAAS,MAAA,GAAS,CAAC,QAAA,CAAS,MAAM,CAAA;AACnF,EAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA,EAAG;AAClC,IAAA,MAAM,IAAI,QAAA,CAAS,iBAAA,EAAmB,CAAA,QAAA,EAAW,IAAA,CAAK,MAAM,CAAA,UAAA,EAAa,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,EAChG;AACA,EAAA,IAAI,IAAA,CAAK,SAAA,KAAc,QAAA,CAAS,SAAA,EAAW;AACzC,IAAA,MAAM,IAAI,QAAA,CAAS,oBAAA,EAAsB,kDAAkD,CAAA;AAAA,EAC7F;AACA,EAAA,OAAO,IAAA;AACT;;;ACpDA,SAAS,MAAA,CAAO,OAAmB,KAAA,EAAuB;AACxD,EAAA,MAAM,KAAA,GAAQ,MAAM,KAAK,CAAA;AACzB,EAAA,IAAI,UAAU,MAAA,EAAW,MAAM,IAAI,KAAA,CAAM,CAAA,sCAAA,EAAyC,KAAK,CAAA,CAAE,CAAA;AACzF,EAAA,OAAO,KAAA;AACT;AAGA,IAAM,SAAA,GAAY,EAAA;AAEX,SAAS,UAAA,CAAW,KAAA,EAAmB,MAAA,GAAS,CAAA,EAAG,QAAQ,CAAA,EAAY;AAC5E,EAAA,IAAI,KAAA,GAAQ,SAAA,EAAW,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAC7E,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,EAAO,MAAM,CAAA;AAClC,EAAA,MAAM,QAAQ,KAAA,IAAS,CAAA;AACvB,EAAA,MAAM,OAAO,KAAA,GAAQ,EAAA;AACrB,EAAA,IAAI,MAAM,MAAA,GAAS,CAAA;AAEnB,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI,OAAO,EAAA,EAAI;AACb,IAAA,QAAA,GAAW,IAAA;AAAA,EACb,CAAA,MAAA,IAAW,SAAS,EAAA,EAAI;AACtB,IAAA,QAAA,GAAW,MAAA,CAAO,OAAO,GAAG,CAAA;AAC5B,IAAA,GAAA,IAAO,CAAA;AAAA,EACT,CAAA,MAAA,IAAW,SAAS,EAAA,EAAI;AACtB,IAAA,QAAA,GAAY,MAAA,CAAO,OAAO,GAAG,CAAA,IAAK,IAAK,MAAA,CAAO,KAAA,EAAO,MAAM,CAAC,CAAA;AAC5D,IAAA,GAAA,IAAO,CAAA;AAAA,EACT,CAAA,MAAA,IAAW,SAAS,EAAA,EAAI;AACtB,IAAA,QAAA,GACE,MAAA,CAAO,OAAO,GAAG,CAAA,GAAI,YACpB,MAAA,CAAO,KAAA,EAAO,MAAM,CAAC,CAAA,IAAK,OAC1B,MAAA,CAAO,KAAA,EAAO,MAAM,CAAC,CAAA,IAAK,KAC3B,MAAA,CAAO,KAAA,EAAO,MAAM,CAAC,CAAA;AACvB,IAAA,GAAA,IAAO,CAAA;AAAA,EACT,CAAA,MAAO;AACL,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mDAAA,EAAsD,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,EAC/E;AAEA,EAAA,QAAQ,KAAA;AAAO,IACb,KAAK,CAAA;AACH,MAAA,OAAO,EAAE,KAAA,EAAO,QAAA,EAAU,MAAA,EAAQ,MAAM,MAAA,EAAO;AAAA,IACjD,KAAK,CAAA;AACH,MAAA,OAAO,EAAE,KAAA,EAAO,EAAA,GAAK,QAAA,EAAU,MAAA,EAAQ,MAAM,MAAA,EAAO;AAAA,IACtD,KAAK,CAAA,EAAG;AAEN,MAAA,MAAM,MAAM,GAAA,GAAM,QAAA;AAClB,MAAA,IAAI,MAAM,KAAA,CAAM,MAAA,EAAQ,MAAM,IAAI,MAAM,iCAAiC,CAAA;AACzE,MAAA,OAAO,EAAE,OAAO,KAAA,CAAM,KAAA,CAAM,KAAK,GAAG,CAAA,EAAG,MAAA,EAAQ,GAAA,GAAM,MAAA,EAAO;AAAA,IAC9D;AAAA,IACA,KAAK,CAAA,EAAG;AAEN,MAAA,MAAM,MAAM,GAAA,GAAM,QAAA;AAClB,MAAA,IAAI,MAAM,KAAA,CAAM,MAAA,EAAQ,MAAM,IAAI,MAAM,iCAAiC,CAAA;AACzE,MAAA,OAAO,EAAE,KAAA,EAAO,IAAI,WAAA,GAAc,MAAA,CAAO,KAAA,CAAM,KAAA,CAAM,GAAA,EAAK,GAAG,CAAC,CAAA,EAAG,MAAA,EAAQ,MAAM,MAAA,EAAO;AAAA,IACxF;AAAA,IACA,KAAK,CAAA,EAAG;AAEN,MAAA,MAAM,QAAqB,EAAC;AAC5B,MAAA,IAAI,MAAA,GAAS,GAAA;AACb,MAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,KAAK,CAAA,EAAG;AACpC,QAAA,MAAM,IAAA,GAAO,UAAA,CAAW,KAAA,EAAO,MAAA,EAAQ,QAAQ,CAAC,CAAA;AAChD,QAAA,KAAA,CAAM,IAAA,CAAK,KAAK,KAAK,CAAA;AACrB,QAAA,MAAA,IAAU,IAAA,CAAK,MAAA;AAAA,MACjB;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,MAAA,EAAQ,SAAS,MAAA,EAAO;AAAA,IACjD;AAAA,IACA,KAAK,CAAA,EAAG;AAEN,MAAA,MAAM,GAAA,uBAAmB,GAAA,EAAI;AAC7B,MAAA,IAAI,MAAA,GAAS,GAAA;AACb,MAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,EAAU,KAAK,CAAA,EAAG;AACpC,QAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,MAAA,EAAQ,QAAQ,CAAC,CAAA;AAC/C,QAAA,MAAA,IAAU,GAAA,CAAI,MAAA;AACd,QAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,MAAA,EAAQ,QAAQ,CAAC,CAAA;AAC/C,QAAA,MAAA,IAAU,GAAA,CAAI,MAAA;AACd,QAAA,IAAI,OAAO,GAAA,CAAI,KAAA,KAAU,YAAY,OAAO,GAAA,CAAI,UAAU,QAAA,EAAU;AAClE,UAAA,MAAM,IAAI,MAAM,gCAAgC,CAAA;AAAA,QAClD;AACA,QAAA,IAAI,GAAA,CAAI,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA,EAAG;AACtB,UAAA,MAAM,IAAI,MAAM,yCAAyC,CAAA;AAAA,QAC3D;AACA,QAAA,GAAA,CAAI,GAAA,CAAI,GAAA,CAAI,KAAA,EAAO,GAAA,CAAI,KAAK,CAAA;AAAA,MAC9B;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,GAAA,EAAK,MAAA,EAAQ,SAAS,MAAA,EAAO;AAAA,IAC/C;AAAA,IACA;AACE,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,KAAK,CAAA,CAAE,CAAA;AAAA;AAE7D;;;ACvEA,IAAM,UAAA,GAAa,EAAA;AAGZ,SAAS,uBAAuB,QAAA,EAA+C;AACpF,EAAA,IAAI,QAAA,CAAS,SAAS,UAAA,EAAY;AAChC,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,2BAAA;AAAA,MACA,CAAA,qBAAA,EAAwB,QAAA,CAAS,MAAM,CAAA,0BAAA,EAA6B,UAAU,CAAA;AAAA,KAChF;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,IAAI,QAAA,CAAS,QAAA,CAAS,QAAQ,QAAA,CAAS,UAAA,EAAY,SAAS,UAAU,CAAA;AACnF,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACrC,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,EAAE,CAAA,IAAK,CAAA;AAC7B,EAAA,MAAM,KAAA,GAAgC;AAAA,IACpC,EAAA,EAAA,CAAK,OAAO,CAAA,MAAU,CAAA;AAAA,IACtB,EAAA,EAAA,CAAK,OAAO,CAAA,MAAU,CAAA;AAAA,IACtB,EAAA,EAAA,CAAK,OAAO,CAAA,MAAU,CAAA;AAAA,IACtB,EAAA,EAAA,CAAK,OAAO,EAAA,MAAU,CAAA;AAAA,IACtB,EAAA,EAAA,CAAK,OAAO,EAAA,MAAU,CAAA;AAAA,IACtB,EAAA,EAAA,CAAK,OAAO,GAAA,MAAU,CAAA;AAAA,IACtB;AAAA,GACF;AACA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,EAAA,EAAI,KAAK,CAAA;AAE1C,EAAA,MAAM,MAAA,GAAkC,EAAE,QAAA,EAAU,KAAA,EAAO,SAAA,EAAU;AAErE,EAAA,IAAI,MAAM,EAAA,EAAI;AACZ,IAAA,IAAI,QAAA,CAAS,SAAS,EAAA,EAAI;AACxB,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,2BAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAA,CAAO,MAAA,GAAS,QAAA,CAAS,KAAA,CAAM,EAAA,EAAI,EAAE,CAAA;AACrC,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,SAAA,CAAU,EAAA,EAAI,KAAK,CAAA;AAC7C,IAAA,MAAM,YAAY,EAAA,GAAK,YAAA;AACvB,IAAA,IAAI,QAAA,CAAS,SAAS,SAAA,EAAW;AAC/B,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,2BAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAA,CAAO,YAAA,GAAe,QAAA,CAAS,KAAA,CAAM,EAAA,EAAI,SAAS,CAAA;AAGlD,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,SAAS,CAAA;AACrC,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,UAAA,CAAW,MAAM,CAAC,CAAA;AACrC,IAAA,MAAA,CAAO,mBAAA,GAAsB,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA;AAAA,EACnD;AAEA,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,cAAA,CAAe,UAAsB,IAAA,EAAoB;AACvE,EAAA,MAAM,MAAA,GAAS,sBAAA,CAAuB,QAAQ,CAAA,CAAE,QAAA;AAChD,EAAA,MAAM,QAAA,GAAWA,aAAA,CAAO,WAAA,CAAY,IAAI,CAAC,CAAA;AACzC,EAAA,IAAI,CAAC,UAAA,CAAW,MAAA,EAAQ,QAAQ,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,gBAAA;AAAA,MACA,sDAAsD,IAAI,CAAA,EAAA;AAAA,KAC5D;AAAA,EACF;AACF;AC7EO,SAAS,yBAAyB,KAAA,EAAsC;AAC7E,EAAA,MAAM,OAAA,GAAU,yBAAyB,KAAK,CAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,MAAM,SAAA,CAAU,MAAA,KAAW,KAAK,KAAA,CAAM,SAAA,GAAY,YAAA,CAAa,KAAA,CAAM,SAAS,CAAA;AAG9F,EAAA,OAAOD,SAAAA,CAAK,MAAA,CAAO,OAAA,EAAS,OAAA,EAAS,KAAA,CAAM,SAAA,EAAW,EAAE,IAAA,EAAM,KAAA,EAAO,MAAA,EAAQ,SAAA,EAAW,CAAA;AAC1F;;;AClBO,SAAS,YAAY,MAAA,EAAyC;AACnE,EAAA,MAAM,YAAY,UAAA,CAAW,MAAA;AAC7B,EAAA,IAAI,OAAO,SAAA,EAAW,eAAA,KAAoB,UAAA,EAAY;AACpD,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,2BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,MAAM,MAAM,IAAI,UAAA,CAAW,IAAI,WAAA,CAAY,MAAM,CAAC,CAAA;AAClD,EAAA,SAAA,CAAU,gBAAgB,GAAG,CAAA;AAC7B,EAAA,OAAO,GAAA;AACT;;;ACAA,SAAS,WAAW,KAAA,EAA0B;AAC5C,EAAA,IAAI,KAAA,YAAiB,UAAU,OAAO,KAAA;AACtC,EAAA,MAAM,IAAA,GACJ,OAAO,KAAA,KAAU,QAAA,IAAY,UAAU,IAAA,IAAQ,MAAA,IAAU,KAAA,GACpD,KAAA,CAA6B,IAAA,GAC9B,MAAA;AACN,EAAA,IAAI,SAAS,iBAAA,EAAmB;AAC9B,IAAA,OAAO,IAAI,QAAA,CAAS,gBAAA,EAAkB,qCAAqC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EAC7F;AACA,EAAA,MAAM,OAAA,GAAU,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,yBAAA;AAGzD,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,KAAS,QAAA,GAAW,GAAG,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAA,GAAK,OAAA;AAClE,EAAA,OAAO,IAAI,QAAA,CAAS,2BAAA,EAA6B,QAAQ,EAAE,KAAA,EAAO,OAAO,CAAA;AAC3E;AAGO,SAAS,qBAAA,GAAwC;AACtD,EAAA,MAAM,WAAA,GAAe,WAAyC,SAAA,EAAW,WAAA;AACzE,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,QAAA,CAAS,2BAAA,EAA6B,sCAAsC,CAAA;AAAA,EACxF;AACA,EAAA,OAAO;AAAA,IACL,MAAM,OAAO,OAAA,EAAgF;AAC3F,MAAA,MAAM,SAAA,GAAgD;AAAA,QACpD,SAAA,EAAW,gBAAA,CAAiB,OAAA,CAAQ,SAAS,CAAA;AAAA,QAC7C,IAAI,OAAA,CAAQ,EAAA;AAAA,QACZ,IAAA,EAAM;AAAA,UACJ,EAAA,EAAI,gBAAA,CAAiB,OAAA,CAAQ,IAAA,CAAK,EAAE,CAAA;AAAA,UACpC,IAAA,EAAM,QAAQ,IAAA,CAAK,IAAA;AAAA,UACnB,WAAA,EAAa,QAAQ,IAAA,CAAK;AAAA,SAC5B;AAAA,QACA,kBAAkB,OAAA,CAAQ,gBAAA;AAAA,QAC1B,wBAAwB,OAAA,CAAQ,sBAAA;AAAA,QAChC,aAAa,OAAA,CAAQ,WAAA;AAAA,QACrB,SAAS,OAAA,CAAQ;AAAA,OACnB;AACA,MAAA,IAAI,UAAA;AACJ,MAAA,IAAI;AACF,QAAA,UAAA,GAAc,MAAM,WAAA,CAAY,MAAA,CAAO,EAAE,WAAW,CAAA;AAAA,MACtD,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,WAAW,KAAK,CAAA;AAAA,MACxB;AACA,MAAA,IAAI,CAAC,UAAA,EAAY,MAAM,IAAI,QAAA,CAAS,kBAAkB,mCAAmC,CAAA;AACzF,MAAA,MAAM,WAAW,UAAA,CAAW,QAAA;AAC5B,MAAA,OAAO;AAAA,QACL,IAAI,UAAA,CAAW,EAAA;AAAA,QACf,KAAA,EAAO,IAAI,UAAA,CAAW,UAAA,CAAW,KAAK,CAAA;AAAA,QACtC,iBAAA,EAAmB,IAAI,UAAA,CAAW,QAAA,CAAS,iBAAiB;AAAA,OAC9D;AAAA,IACF,CAAA;AAAA,IACA,MAAM,IAAI,OAAA,EAAyD;AACjE,MAAA,MAAM,SAAA,GAA+C;AAAA,QACnD,MAAM,OAAA,CAAQ,IAAA;AAAA,QACd,SAAA,EAAW,QAAQ,SAAA,GAAY,IAAI,WAAW,OAAA,CAAQ,SAAS,CAAA,GAAI,WAAA,CAAY,EAAE,CAAA;AAAA,QACjF,mBAAmB,OAAA,CAAQ,gBAAA,IAAoB,EAAC,EAAG,GAAA,CAAI,CAAC,EAAA,MAAQ;AAAA,UAC9D,IAAA,EAAM,YAAA;AAAA,UACN,EAAA,EAAI,iBAAiB,EAAE;AAAA,SACzB,CAAE,CAAA;AAAA,QACF,kBAAkB,OAAA,CAAQ;AAAA,OAC5B;AACA,MAAA,MAAM,OAAA,GAAoC,EAAE,SAAA,EAAU;AACtD,MAAA,IAAI,OAAA,CAAQ,SAAA,EAAW,OAAA,CAAQ,SAAA,GAAY,OAAA,CAAQ,SAAA;AACnD,MAAA,IAAI,UAAA;AACJ,MAAA,IAAI;AACF,QAAA,UAAA,GAAc,MAAM,WAAA,CAAY,GAAA,CAAI,OAAO,CAAA;AAAA,MAC7C,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,WAAW,KAAK,CAAA;AAAA,MACxB;AACA,MAAA,IAAI,CAAC,UAAA,EAAY,MAAM,IAAI,QAAA,CAAS,kBAAkB,yBAAyB,CAAA;AAC/E,MAAA,MAAM,WAAW,UAAA,CAAW,QAAA;AAC5B,MAAA,OAAO;AAAA,QACL,IAAI,UAAA,CAAW,EAAA;AAAA,QACf,KAAA,EAAO,IAAI,UAAA,CAAW,UAAA,CAAW,KAAK,CAAA;AAAA,QACtC,iBAAA,EAAmB,IAAI,UAAA,CAAW,QAAA,CAAS,iBAAiB,CAAA;AAAA,QAC5D,cAAA,EAAgB,IAAI,UAAA,CAAW,QAAA,CAAS,cAAc,CAAA;AAAA,QACtD,SAAA,EAAW,IAAI,UAAA,CAAW,QAAA,CAAS,SAAS;AAAA,OAC9C;AAAA,IACF;AAAA,GACF;AACF;;;ACjEO,SAAS,qBAAqB,OAAA,EAAsD;AACzF,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,QAAA,IAAY,qBAAA,EAAsB;AAC3D,EAAA,OAAO,OAAO,SAAA,KAAgD;AAC5D,IAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,GAAA,CAAI;AAAA,MACnC,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,SAAA,EAAW,iBAAiB,SAAS,CAAA;AAAA,MACrC,gBAAA,EAAkB,OAAA,CAAQ,gBAAA,IAAoB,EAAC;AAAA,MAC/C,gBAAA,EAAkB,QAAQ,gBAAA,IAAoB;AAAA,KAC/C,CAAA;AACD,IAAA,OAAO;AAAA,MACL,mBAAmB,SAAA,CAAU,iBAAA;AAAA,MAC7B,gBAAgB,SAAA,CAAU,cAAA;AAAA,MAC1B,WAAW,SAAA,CAAU,SAAA;AAAA,MACrB,cAAc,SAAA,CAAU;AAAA,KAC1B;AAAA,EACF,CAAA;AACF;ACtCO,SAAS,uBAAA,CACd,OACA,iBAAA,EACY;AACZ,EAAA,MAAM,WAAA,GAAc,MAAM,WAAA,EAAY;AACtC,EAAA,IAAI,WAAA,CAAY,MAAA,EAAO,CAAE,IAAA,KAAS,2BAAA,EAA6B;AAC7D,IAAA,MAAM,IAAI,QAAA,CAAS,sBAAA,EAAwB,+CAA+C,CAAA;AAAA,EAC5F;AACA,EAAA,MAAM,OAAA,GAAU,YAAY,OAAA,EAAQ;AACpC,EAAA,MAAM,QAAA,GAAWE,eAAI,cAAA,CAAe,gCAAA;AAAA,IAClC,IAAIA,eAAI,kCAAA,CAAmC;AAAA,MACzC,SAAA,EAAW,MAAA,CAAO,IAAA,CAAKC,eAAA,CAAK,MAAA,CAAO,KAAK,WAAA,CAAY,iBAAiB,CAAC,CAAC,CAAC,CAAA;AAAA,MACxE,KAAA,EAAO,QAAQ,KAAA,EAAM;AAAA,MACrB,yBAAA,EAA2B,QAAQ,yBAAA,EAA0B;AAAA,MAC7D,UAAA,EAAY,MAAM,cAAA;AAAe,KAClC;AAAA,GACH;AACA,EAAA,OAAO,IAAI,UAAA,CAAWA,eAAA,CAAK,QAAA,CAAS,KAAA,EAAO,CAAC,CAAA;AAC9C;AAGO,SAAS,kBAAA,CACd,OACA,iBAAA,EACQ;AACR,EAAA,OAAO,gBAAA,CAAiB,uBAAA,CAAwB,KAAA,EAAO,iBAAiB,CAAC,CAAA;AAC3E;ACtBO,SAAS,qBAAA,CACd,OACA,SAAA,EAC+B;AAC/B,EAAA,KAAA,CAAM,aAAY,CAAE,OAAA,GAAU,SAAA,CAAU,mBAAA,CAAoB,SAAS,CAAC,CAAA;AACtE,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,oBAAoB,SAAA,EAAuC;AACzE,EAAA,OAAOD,cAAAA,CAAI,MAAM,MAAA,CAAO;AAAA,IACtB,UAAA,CAAW,oBAAA,EAAsB,SAAA,CAAU,iBAAiB,CAAA;AAAA,IAC5D,UAAA,CAAW,kBAAA,EAAoB,SAAA,CAAU,cAAc,CAAA;AAAA,IACvD,UAAA,CAAW,WAAA,EAAa,SAAA,CAAU,SAAS;AAAA,GAC5C,CAAA;AACH;AAEA,SAAS,UAAA,CAAW,MAAc,KAAA,EAAmC;AACnE,EAAA,OAAO,IAAIA,eAAI,UAAA,CAAW;AAAA,IACxB,GAAA,EAAKA,cAAAA,CAAI,KAAA,CAAM,SAAA,CAAU,IAAI,CAAA;AAAA,IAC7B,KAAKA,cAAAA,CAAI,KAAA,CAAM,SAAS,MAAA,CAAO,IAAA,CAAK,KAAK,CAAC;AAAA,GAC3C,CAAA;AACH;ACdO,SAAS,oBAAoB,YAAA,EAAqC;AACvE,EAAA,OAAOA,cAAAA,CAAI,MAAM,MAAA,CAAO;AAAA,IACtBA,cAAAA,CAAI,KAAA,CAAM,SAAA,CAAU,WAAW,CAAA;AAAA,IAC/BA,eAAI,KAAA,CAAM,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,YAAY,CAAC;AAAA,GAC7C,CAAA;AACH;AAGO,SAAS,iCAAiC,SAAA,EAAuC;AACtF,EAAA,OAAOA,cAAAA,CAAI,KAAA,CAAM,MAAA,CAAO,CAACA,cAAAA,CAAI,KAAA,CAAM,SAAA,CAAU,WAAW,CAAA,EAAG,mBAAA,CAAoB,SAAS,CAAC,CAAC,CAAA;AAC5F;AAEA,SAAS,mBAAmB,GAAA,EAA0D;AACpF,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,EAAI;AACpB,EAAA,IAAI,CAAC,GAAA,IAAO,GAAA,CAAI,MAAA,GAAS,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,QAAA,CAAS,sBAAA,EAAwB,4CAA4C,CAAA;AAAA,EACzF;AACA,EAAA,MAAM,UAAU,GAAA,CAAI,CAAC,CAAA,CAAG,GAAA,GAAM,QAAA,EAAS;AACvC,EAAA,MAAM,EAAA,GAAK,IAAI,CAAC,CAAA;AAGhB,EAAA,MAAM,UACJ,EAAA,CAAG,MAAA,EAAO,CAAE,IAAA,KAAS,aAAa,IAAI,UAAA,CAAW,EAAA,CAAG,KAAA,EAAO,CAAA,GAAI,IAAI,UAAA,CAAW,EAAA,CAAG,OAAO,CAAA;AAC1F,EAAA,OAAO,EAAE,SAAS,OAAA,EAAQ;AAC5B;AAEA,SAAS,YAAA,CAAa,GAAe,CAAA,EAAuB;AAC1D,EAAA,MAAM,IAAI,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,MAAA,EAAQ,EAAE,MAAM,CAAA;AACrC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,IAAI,CAAA,CAAE,CAAC,CAAA,KAAM,CAAA,CAAE,CAAC,CAAA,EAAG,OAAO,CAAA,CAAE,CAAC,CAAA,GAAK,CAAA,CAAE,CAAC,IAAK,EAAA,GAAK,CAAA;AAAA,EACjD;AACA,EAAA,OAAO,CAAA,CAAE,SAAS,CAAA,CAAE,MAAA;AACtB;AAgBO,SAAS,qBAAA,CAAsB,GAAc,CAAA,EAAsB;AACxE,EAAA,MAAM,EAAA,GAAK,mBAAmB,CAAC,CAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,mBAAmB,CAAC,CAAA;AAC/B,EAAA,IAAI,EAAA,CAAG,YAAY,EAAA,CAAG,OAAA,SAAgB,EAAA,CAAG,OAAA,GAAU,EAAA,CAAG,OAAA,GAAU,EAAA,GAAK,CAAA;AACrE,EAAA,OAAO,YAAA,CAAa,EAAA,CAAG,OAAA,EAAS,EAAA,CAAG,OAAO,CAAA;AAC5C;AAaO,SAAS,gCAAA,CACd,OACA,SAAA,EAC+B;AAC/B,EAAA,MAAM,WAAA,GAAc,MAAM,WAAA,EAAY;AACtC,EAAA,IAAI,WAAA,CAAY,MAAA,EAAO,CAAE,IAAA,KAAS,2BAAA,EAA6B;AAC7D,IAAA,MAAM,IAAI,QAAA,CAAS,sBAAA,EAAwB,+CAA+C,CAAA;AAAA,EAC5F;AACA,EAAA,MAAM,GAAA,GAAM,mBAAA,CAAoB,SAAA,CAAU,YAAY,CAAA;AACtD,EAAA,MAAM,QAAA,GAAW,IAAIA,cAAAA,CAAI,UAAA,CAAW,EAAE,KAAK,GAAA,EAAK,gCAAA,CAAiC,SAAS,CAAA,EAAG,CAAA;AAE7F,EAAA,MAAM,OAAA,GAAU,WAAA,CAAY,OAAA,EAAQ,CAAE,SAAA,EAAU;AAChD,EAAA,IAAI,UAAA;AACJ,EAAA,QAAQ,OAAA,CAAQ,MAAA,EAAO,CAAE,IAAA;AAAM,IAC7B,KAAK,SAAA;AACH,MAAA,UAAA,GAAa,CAAC,QAAQ,CAAA;AACtB,MAAA;AAAA,IACF,KAAK,QAAA,EAAU;AAEb,MAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,EAAI,GAAI,CAAC,CAAA,EAAG,GAAA,MAAS,EAAC;AAC/C,MAAA,UAAA,GAAa,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,KAAM,qBAAA,CAAsB,EAAE,GAAA,EAAI,EAAG,GAAG,CAAA,KAAM,CAAC,CAAA;AAC7E,MAAA,UAAA,CAAW,KAAK,QAAQ,CAAA;AACxB,MAAA;AAAA,IACF;AAAA,IACA;AACE,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,sBAAA;AAAA,QACA;AAAA,OACF;AAAA;AAEJ,EAAA,UAAA,CAAW,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,qBAAA,CAAsB,CAAA,CAAE,GAAA,EAAI,EAAG,CAAA,CAAE,GAAA,EAAK,CAAC,CAAA;AACjE,EAAA,WAAA,CAAY,OAAA,EAAQ,CAAE,SAAA,CAAUA,cAAAA,CAAI,KAAA,CAAM,MAAA,CAAO,CAACA,cAAAA,CAAI,KAAA,CAAM,MAAA,CAAO,UAAU,CAAC,CAAC,CAAC,CAAA;AAChF,EAAA,OAAO,KAAA;AACT;;;AC/CA,SAAS,kBAAA,CACP,SAAA,EACA,SAAA,EACA,MAAA,EACM;AAEN,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI,MAAA,CAAO,WAAW,MAAA,EAAW;AAC/B,IAAA,UAAA,GAAa,oBAAA,CAAqB,UAAU,cAAA,EAAgB;AAAA,MAC1D,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf;AAAA,KACD,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,UAAA,GAAa,mBAAA,CAAoB,UAAU,cAAc,CAAA;AACzD,IAAA,IAAI,UAAA,CAAW,SAAS,cAAA,EAAgB;AACtC,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,2BAAA;AAAA,QACA,CAAA,qBAAA,EAAwB,WAAW,IAAI,CAAA,uBAAA;AAAA,OACzC;AAAA,IACF;AACA,IAAA,IAAI,UAAA,CAAW,cAAc,SAAA,EAAW;AACtC,MAAA,MAAM,IAAI,QAAA,CAAS,oBAAA,EAAsB,mDAAmD,CAAA;AAAA,IAC9F;AAAA,EACF;AACA,EAAA,IAAI,UAAA,CAAW,WAAA,KAAgB,IAAA,IAAQ,CAAC,OAAO,gBAAA,EAAkB;AAC/D,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,iBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,sBAAA,CAAuB,SAAA,CAAU,iBAAiB,CAAA;AACjE,EAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,EAAA,EAAI;AACpB,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,2BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,MAAA,CAAO,uBAAA,IAA2B,CAAC,MAAA,CAAO,MAAM,EAAA,EAAI;AACtD,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,2BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,MAAA,CAAO,SAAS,MAAA,EAAW;AAC7B,IAAA,cAAA,CAAe,SAAA,CAAU,iBAAA,EAAmB,MAAA,CAAO,IAAI,CAAA;AAAA,EACzD;AACA,EAAA,IAAI,MAAA,CAAO,cAAc,MAAA,EAAW;AAClC,IAAA,MAAM,KAAK,wBAAA,CAAyB;AAAA,MAClC,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,mBAAmB,SAAA,CAAU,iBAAA;AAAA,MAC7B,gBAAgB,SAAA,CAAU,cAAA;AAAA,MAC1B,WAAW,SAAA,CAAU;AAAA,KACtB,CAAA;AACD,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,sBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,gBAAA,CACb,OACA,OAAA,EACe;AAGf,EAAA,IAAI,OAAA,CAAQ,8BAA8B,MAAA,EAAW;AACnD,IAAA,MAAM,KAAA,GAAQ,MAAM,WAAA,EAAY;AAChC,IAAA,IAAI,KAAA,CAAM,MAAA,EAAO,CAAE,IAAA,KAAS,2BAAA,EAA6B;AACvD,MAAA,KAAA,CAAM,OAAA,EAAQ,CAAE,yBAAA,CAA0B,OAAA,CAAQ,yBAAyB,CAAA;AAAA,IAC7E;AAAA,EACF;AACA,EAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,KAAA,EAAO,OAAA,CAAQ,iBAAiB,CAAA;AACrE,EAAA,MAAM,SAAA,GAAY,MAAM,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAA;AAC9C,EAAA,IAAI,QAAQ,MAAA,EAAQ,kBAAA,CAAmB,SAAA,EAAW,SAAA,EAAW,QAAQ,MAAM,CAAA;AAC3E,EAAA,MAAM,SAAA,GACJ,UAAU,SAAA,CAAU,MAAA,KAAW,KAAK,SAAA,CAAU,SAAA,GAAY,gBAAA,CAAiB,SAAA,CAAU,SAAS,CAAA;AAChG,EAAA,MAAM,UAAA,GAAa;AAAA,IACjB,cAAc,SAAA,CAAU,YAAA;AAAA,IACxB,mBAAmB,SAAA,CAAU,iBAAA;AAAA,IAC7B,gBAAgB,SAAA,CAAU,cAAA;AAAA,IAC1B;AAAA,GACF;AACA,EAAA,IAAI,OAAA,CAAQ,WAAW,cAAA,EAAgB;AACrC,IAAA,gCAAA,CAAiC,OAAO,UAAU,CAAA;AAAA,EACpD,CAAA,MAAO;AACL,IAAA,qBAAA,CAAsB,OAAO,UAAU,CAAA;AAAA,EACzC;AACF;AAOA,eAAsB,aAAA,CACpB,UACA,OAAA,EACiB;AACjB,EAAA,MAAM,KAAA,GAAQA,cAAAA,CAAI,yBAAA,CAA0B,OAAA,CAAQ,UAAU,QAAQ,CAAA;AACtE,EAAA,MAAM,gBAAA,CAAiB,OAAO,OAAO,CAAA;AACrC,EAAA,OAAO,KAAA,CAAM,MAAM,QAAQ,CAAA;AAC7B;AAQA,SAAS,qBAAqB,QAAA,EAAoD;AAChF,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,MAAA,EAAO,CAAE,IAAA;AAC/B,EAAA,IAAI,IAAA,KAAS,kBAAkB,OAAO,QAAA,CAAS,IAAG,CAAE,EAAA,GAAK,UAAA,EAAW;AACpE,EAAA,IAAI,SAAS,uBAAA,EAAyB;AACpC,IAAA,MAAM,QAAQ,QAAA,CAAS,OAAA,EAAQ,CAAE,EAAA,GAAK,OAAA,EAAQ;AAC9C,IAAA,IAAI,KAAA,CAAM,MAAA,EAAO,CAAE,IAAA,KAAS,gBAAA,EAAkB;AAC5C,MAAA,MAAM,IAAI,QAAA;AAAA,QACR,sBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,KAAA,CAAM,EAAA,EAAG,CAAE,EAAA,GAAK,UAAA,EAAW;AAAA,EACpC;AACA,EAAA,MAAM,IAAI,QAAA;AAAA,IACR,sBAAA;AAAA,IACA,+CAA+C,IAAI,CAAA,2BAAA;AAAA,GACrD;AACF;AAOA,eAAsB,eAAA,CAAgB,OAAe,OAAA,EAA8C;AACjG,EAAA,MAAM,QAAA,GAAWA,cAAAA,CAAI,mBAAA,CAAoB,OAAA,CAAQ,OAAO,QAAQ,CAAA;AAChE,EAAA,KAAA,MAAW,EAAA,IAAM,oBAAA,CAAqB,QAAQ,CAAA,EAAG;AAC/C,IAAA,IAAI,GAAG,IAAA,EAAK,CAAE,MAAA,EAAO,CAAE,SAAS,oBAAA,EAAsB;AACtD,IAAA,MAAM,UAAU,EAAA,CAAG,IAAA,EAAK,CAAE,oBAAA,GAAuB,IAAA,EAAK;AACtD,IAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,MAAA,IAAI,MAAM,WAAA,EAAY,CAAE,MAAA,EAAO,CAAE,SAAS,2BAAA,EAA6B;AACvE,MAAA,MAAM,gBAAA,CAAiB,OAAO,OAAO,CAAA;AAAA,IACvC;AAAA,EACF;AACA,EAAA,OAAO,QAAA,CAAS,MAAM,QAAQ,CAAA;AAChC;ACpLA,SAAS,SAAA,GAAuB;AAC9B,EAAA,OAAOA,cAAAA,CAAI,MAAM,MAAA,CAAO,CAACA,eAAI,KAAA,CAAM,OAAA,EAAS,CAAC,CAAA;AAC/C;AAGA,SAAS,gBAAgB,UAAA,EAAyC;AAChE,EAAA,IAAI,UAAA,KAAe,MAAA,EAAW,OAAO,SAAA,EAAU;AAC/C,EAAA,MAAM,EAAA,GAAK,OAAO,UAAU,CAAA;AAC5B,EAAA,IAAI,KAAK,EAAA,EAAI;AACX,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,sBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,OAAOA,cAAAA,CAAI,KAAA,CAAM,MAAA,CAAO,CAACE,wBAAA,CAAc,EAAA,EAAI,EAAE,IAAA,EAAM,KAAA,EAAO,CAAC,CAAC,CAAA;AAC9D;AAGA,SAAS,YAAA,CAAa,UAAyB,YAAA,EAAyB;AACtE,EAAA,OAAOF,cAAAA,CAAI,MAAM,MAAA,CAAO,CAACA,eAAI,KAAA,CAAM,SAAA,CAAU,OAAO,CAAC,CAAC,CAAA;AACxD;AAQO,SAAS,qBAAqB,IAAA,EAAsC;AACzE,EAAA,IAAI,IAAA,CAAK,YAAA,CAAa,MAAA,KAAW,CAAA,EAAG;AAClC,IAAA,MAAM,IAAI,QAAA,CAAS,sBAAA,EAAwB,2CAA2C,CAAA;AAAA,EACxF;AACA,EAAA,IAAI,IAAA,CAAK,UAAU,MAAA,KAAW,EAAA,IAAM,KAAK,SAAA,CAAU,CAAC,MAAM,CAAA,EAAM;AAC9D,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,oBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,OAAOA,cAAAA,CAAI,MAAM,MAAA,CAAO;AAAA,IACtBA,cAAAA,CAAI,KAAA,CAAM,SAAA,CAAU,WAAW,CAAA;AAAA,IAC/BA,eAAI,KAAA,CAAM,QAAA,CAAS,OAAO,IAAA,CAAK,IAAA,CAAK,YAAY,CAAC,CAAA;AAAA,IACjDA,eAAI,KAAA,CAAM,QAAA,CAAS,OAAO,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AAAA,IAC9C,eAAA,CAAgB,KAAK,UAAU,CAAA;AAAA;AAAA,IAC/B,SAAA,EAAU;AAAA;AAAA,IACV,YAAA,CAAa,KAAK,OAAO;AAAA;AAAA,GAC1B,CAAA;AACH;AAEA,SAAS,YAAA,CAAa,UAAA,EAAoB,MAAA,EAAA,GAAmB,IAAA,EAAkC;AAC7F,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI;AACF,IAAA,QAAA,GAAW,IAAIG,oBAAS,UAAU,CAAA;AAAA,EACpC,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,QAAA,CAAS,sBAAA,EAAwB,CAAA,kCAAA,EAAqC,UAAU,CAAA,CAAA,CAAA,EAAK;AAAA,MAC7F;AAAA,KACD,CAAA;AAAA,EACH;AACA,EAAA,OAAO,QAAA,CAAS,IAAA,CAAK,MAAA,EAAQ,GAAG,IAAI,CAAA;AACtC;AAgBO,SAAS,wBAAwB,OAAA,EAA+C;AACrF,EAAA,MAAM,WAAA,GACJ,QAAQ,MAAA,YAAkBH,cAAAA,CAAI,QAAQ,OAAA,CAAQ,MAAA,GAAS,oBAAA,CAAqB,OAAA,CAAQ,MAAM,CAAA;AAC5F,EAAA,OAAO,YAAA,CAAa,OAAA,CAAQ,gBAAA,EAAkB,YAAA,EAAc,WAAW,CAAA;AACzE;AASO,SAAS,2BAA2B,OAAA,EAAkD;AAC3F,EAAA,IAAI,OAAA,CAAQ,YAAA,CAAa,MAAA,KAAW,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,QAAA,CAAS,sBAAA,EAAwB,iDAAiD,CAAA;AAAA,EAC9F;AACA,EAAA,OAAO,YAAA;AAAA,IACL,OAAA,CAAQ,gBAAA;AAAA,IACR,eAAA;AAAA,IACA,mBAAA,CAAoB,QAAQ,YAAY;AAAA,GAC1C;AACF;AC3HA,SAAS,KAAK,MAAA,EAAiC;AAC7C,EAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,gBAAgB,KAAA,EAAO,cAAA,EAAgB,OAAO,MAAA,EAAO;AAChF;AAOA,SAAS,wBAAA,CACP,SAAA,EACA,SAAA,EACA,gBAAA,EACoF;AACpF,EAAA,MAAM,KAAA,GAAQ,CAAC,IAAA,KAAyC;AACtD,IAAA,MAAM,CAAA,GAAI,SAAA,CAAU,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,EAAI,CAAE,GAAA,EAAI,CAAE,QAAA,EAAS,KAAM,IAAI,CAAA;AACjE,IAAA,OAAO,CAAA,GAAI,IAAI,UAAA,CAAW,CAAA,CAAE,KAAI,CAAE,KAAA,EAAO,CAAA,GAAI,MAAA;AAAA,EAC/C,CAAA;AACA,EAAA,MAAM,iBAAA,GAAoB,MAAM,oBAAoB,CAAA;AACpD,EAAA,MAAM,cAAA,GAAiB,MAAM,kBAAkB,CAAA;AAC/C,EAAA,MAAM,SAAA,GAAY,MAAM,WAAW,CAAA;AACnC,EAAA,IAAI,CAAC,iBAAA,IAAqB,CAAC,cAAA,IAAkB,CAAC,SAAA,EAAW;AACvD,IAAA,OAAO,EAAE,IAAI,KAAA,EAAO,cAAA,EAAgB,OAAO,cAAA,EAAgB,KAAA,EAAO,QAAQ,gBAAA,EAAiB;AAAA,EAC7F;AACA,EAAA,IAAI,SAAA,CAAU,WAAW,EAAA,EAAI;AAC3B,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,cAAA,EAAgB,KAAA;AAAA,MAChB,cAAA,EAAgB,KAAA;AAAA,MAChB,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AACA,EAAA,IAAI,cAAA,GAAiB,KAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,WAAA,CAAY,cAAc,CAAC,CAAA;AAClD,IAAA,cAAA,GAAiB,GAAA,CAAI,SAAA,KAAc,gBAAA,CAAiB,gBAAgB,CAAA;AAAA,EACtE,CAAA,CAAA,MAAQ;AACN,IAAA,cAAA,GAAiB,KAAA;AAAA,EACnB;AAEA,EAAA,MAAM,SAASD,aAAA,CAAO,WAAA,CAAY,mBAAmBA,aAAA,CAAO,cAAc,CAAC,CAAC,CAAA;AAC5E,EAAA,MAAM,cAAA,GAAiBD,SAAAA,CAAK,MAAA,CAAO,SAAA,EAAW,QAAQ,SAAA,EAAW;AAAA,IAC/D,IAAA,EAAM,KAAA;AAAA,IACN,MAAA,EAAQ;AAAA,GACT,CAAA;AACD,EAAA,OAAO,EAAE,EAAA,EAAI,cAAA,IAAkB,cAAA,EAAgB,gBAAgB,cAAA,EAAe;AAChF;AAWO,SAAS,kBAAA,CACd,KAAA,EACA,SAAA,EACA,iBAAA,EACiB;AACjB,EAAA,IAAI,MAAM,WAAA,EAAY,CAAE,MAAA,EAAO,CAAE,SAAS,2BAAA,EAA6B;AACrE,IAAA,OAAO,KAAK,wBAAwB,CAAA;AAAA,EACtC;AAGA,EAAA,MAAM,SAAA,GAAY,MAAM,WAAA,EAAY,CAAE,SAAQ,CAAE,SAAA,GAAY,GAAA,EAAI;AAChE,EAAA,IAAI,CAAC,SAAA,EAAW,OAAO,IAAA,CAAK,2CAA2C,CAAA;AAEvE,EAAA,MAAM,gBAAA,GAAmB,uBAAA,CAAwB,KAAA,EAAO,iBAAiB,CAAA;AACzE,EAAA,MAAM,CAAA,GAAI,wBAAA,CAAyB,SAAA,EAAW,SAAA,EAAW,gBAAgB,CAAA;AACzE,EAAA,OAAO,EAAE,SAAS,CAAA,CAAE,EAAA,EAAI,gBAAgB,CAAA,CAAE,cAAA,EAAgB,cAAA,EAAgB,CAAA,CAAE,cAAA,EAAe;AAC7F;AAgBO,SAAS,6BAAA,CACd,KAAA,EACA,YAAA,EACA,iBAAA,EAC4B;AAC5B,EAAA,IAAI,MAAM,WAAA,EAAY,CAAE,MAAA,EAAO,CAAE,SAAS,2BAAA,EAA6B;AACrE,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,SAAS,EAAC,EAAG,QAAQ,wBAAA,EAAyB;AAAA,EACzE;AACA,EAAA,MAAM,MAAM,KAAA,CAAM,WAAA,EAAY,CAAE,OAAA,GAAU,SAAA,EAAU;AACpD,EAAA,MAAM,GAAA,GAAM,GAAA,CAAI,MAAA,EAAO,CAAE,IAAA,KAAS,QAAA,GAAW,GAAA,CAAI,GAAA,EAAI,GAAI,CAAC,CAAA,EAAG,GAAA,EAAI,GAAI,MAAA;AACrE,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,SAAS,EAAC,EAAG,QAAQ,wCAAA,EAAyC;AAAA,EACzF;AACA,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,CAAA,EAAG,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,OAAA,EAAS,EAAC,EAAG,MAAA,EAAQ,sBAAA,EAAuB;AAE3F,EAAA,MAAM,gBAAA,GAAmB,uBAAA,CAAwB,KAAA,EAAO,iBAAiB,CAAA;AACzE,EAAA,MAAM,UAAiD,EAAC;AACxD,EAAA,IAAI,KAAA,GAAQ,IAAA;AAEZ,EAAA,KAAA,MAAW,KAAK,GAAA,EAAK;AACnB,IAAA,MAAM,MAAA,GAAS,CAAA,CAAE,GAAA,EAAI,CAAE,GAAA,EAAI;AAC3B,IAAA,MAAM,OAAA,GAAU,MAAA,GAAS,CAAC,CAAA,EAAG,KAAA,EAAM;AACnC,IAAA,MAAM,YAAA,GAAe,UAAU,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA,GAAI,EAAA;AAEtE,IAAA,MAAM,SAAA,GAAY,EAAE,GAAA,EAAI,CAAE,KAAI,GAAI,CAAC,GAAG,GAAA,EAAI;AAC1C,IAAA,MAAM,SAAA,GAAY,aAAa,YAAY,CAAA;AAC3C,IAAA,IAAI,CAAC,SAAA,IAAa,CAAC,SAAA,EAAW;AAC5B,MAAA,KAAA,GAAQ,KAAA;AACR,MAAA,OAAA,CAAQ,KAAK,EAAE,YAAA,EAAc,gBAAgB,KAAA,EAAO,cAAA,EAAgB,OAAO,CAAA;AAC3E,MAAA;AAAA,IACF;AACA,IAAA,MAAM,CAAA,GAAI,wBAAA,CAAyB,SAAA,EAAW,SAAA,EAAW,gBAAgB,CAAA;AACzE,IAAA,IAAI,CAAC,CAAA,CAAE,EAAA,EAAI,KAAA,GAAQ,KAAA;AACnB,IAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,MACX,YAAA;AAAA,MACA,gBAAgB,CAAA,CAAE,cAAA;AAAA,MAClB,gBAAgB,CAAA,CAAE;AAAA,KACnB,CAAA;AAAA,EACH;AACA,EAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,OAAA,EAAQ;AACnC;AC9HO,SAAS,iBAAiB,OAAA,EAAqD;AACpF,EAAA,MAAM,MAAA,GAAS,IAAIM,cAAA,CAAI,MAAA,CAAO,QAAQ,MAAA,EAAQ;AAAA,IAC5C,WAAW,OAAA,CAAQ,SAAA,IAAa,OAAA,CAAQ,MAAA,CAAO,WAAW,SAAS;AAAA,GACpE,CAAA;AACD,EAAA,MAAM,QAAA,GAAW,QAAQ,YAAA,IAAgB,EAAA;AACzC,EAAA,MAAM,UAAA,GAAa,QAAQ,cAAA,IAAkB,GAAA;AAC7C,EAAA,OAAO;AAAA,IACL,MAAM,KAAK,WAAA,EAA4C;AACrD,MAAA,MAAM,EAAA,GAAKC,6BAAA,CAAmB,OAAA,CAAQ,WAAA,EAAa,QAAQ,iBAAiB,CAAA;AAC5E,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,MAAM,MAAA,CAAO,eAAA,CAAgB,EAAE,CAAA;AAAA,MACxC,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,IAAI,QAAA,CAAS,eAAA,EAAiB,6CAAA,EAA+C;AAAA,UACjF;AAAA,SACD,CAAA;AAAA,MACH;AACA,MAAA,IAAI,IAAA,CAAK,WAAW,OAAA,EAAS;AAC3B,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ,QAAA;AAAA,UACR,MAAM,IAAA,CAAK,IAAA;AAAA,UACX,cAAA,EAAgB,IAAA,CAAK,WAAA,EAAa,KAAA,CAAM,QAAQ;AAAA,SAClD;AAAA,MACF;AAEA,MAAA,IAAI,KAAA;AACJ,MAAA,IAAI;AACF,QAAA,KAAA,GAAQ,MAAM,MAAA,CAAO,eAAA,CAAgB,IAAA,CAAK,IAAA,EAAM;AAAA,UAC9C,QAAA;AAAA,UACA,eAAe,MAAM;AAAA,SACtB,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,IAAI,QAAA;AAAA,UACR,eAAA;AAAA,UACA,eAAe,IAAA,CAAK,IAAI,CAAA,yBAAA,EAA4B,MAAA,CAAO,QAAQ,CAAC,CAAA,MAAA,CAAA;AAAA,UACpE,EAAE,KAAA;AAAM,SACV;AAAA,MACF;AACA,MAAA,IAAI,KAAA,CAAM,MAAA,KAAWD,cAAA,CAAI,GAAA,CAAI,qBAAqB,SAAA,EAAW;AAC3D,QAAA,MAAM,IAAI,QAAA;AAAA,UACR,eAAA;AAAA,UACA,eAAe,IAAA,CAAK,IAAI,CAAA,uBAAA,EAA0B,MAAA,CAAO,QAAQ,CAAC,CAAA,MAAA;AAAA,SACpE;AAAA,MACF;AACA,MAAA,MAAM,OAAA,GAAU,KAAA,CAAM,MAAA,KAAWA,cAAA,CAAI,IAAI,oBAAA,CAAqB,OAAA;AAC9D,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,UAAU,SAAA,GAAY,QAAA;AAAA,QAC9B,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,WAAA,EAAa,OAAA,GAAW,KAAA,CAAoC,WAAA,GAAc;AAAA,OAC5E;AAAA,IACF;AAAA,GACF;AACF;;;ACzCA,IAAM,yBAAA,GAA4B,EAAA;AAoBlC,eAAsB,kBAAkB,OAAA,EAA0D;AAChG,EAAA,MAAM,MAAA,GAAS,IAAIA,cAAAA,CAAI,MAAA,CAAO,QAAQ,MAAA,EAAQ;AAAA,IAC5C,WAAW,OAAA,CAAQ,SAAA,IAAa,OAAA,CAAQ,MAAA,CAAO,WAAW,SAAS;AAAA,GACpE,CAAA;AACD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAASE,kBAAA,CAAQ,UAAA,CAAW,OAAA,CAAQ,YAAY,CAAA;AAAA,EAClD,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,QAAA,CAAS,sBAAA,EAAwB,2BAAA,EAA6B,EAAE,OAAO,CAAA;AAAA,EACnF;AAEA,EAAA,MAAM,UAAU,MAAM,MAAA,CAAO,UAAA,CAAW,MAAA,CAAO,WAAW,CAAA;AAC1D,EAAA,MAAM,EAAA,GAAK,IAAID,6BAAAA,CAAmB,OAAA,EAAS;AAAA,IACzC,GAAA,EAAK,QAAQ,GAAA,IAAO,SAAA;AAAA,IACpB,mBAAmB,OAAA,CAAQ;AAAA,GAC5B,CAAA,CACE,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA,CAC9B,UAAA,CAAW,OAAA,CAAQ,cAAA,IAAkB,GAAG,CAAA,CACxC,KAAA,EAAM;AAET,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,mBAAA,CAAoB,EAAE,CAAA;AAClD,EAAA,IAAI,CAACD,cAAAA,CAAI,GAAA,CAAI,mBAAA,CAAoB,MAAM,CAAA,EAAG;AACxC,IAAA,MAAM,SAAS,OAAA,IAAW,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,GAAI,0BAAA;AAC1D,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,sBAAA;AAAA,MACA,CAAA,mCAAA,EAAsC,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,KAC5D;AAAA,EACF;AACA,EAAA,MAAM,WAAWA,cAAAA,CAAI,mBAAA,CAAoB,EAAA,EAAI,MAAM,EAAE,KAAA,EAAM;AAE3D,EAAA,MAAM,6BACH,MAAM,MAAA,CAAO,iBAAgB,EAAG,QAAA,IAChC,QAAQ,+BAAA,IAAmC,yBAAA,CAAA;AAC9C,EAAA,MAAM,aAAA,GAAgB,MAAM,eAAA,CAAgB,QAAA,CAAS,OAAM,EAAG;AAAA,IAC5D,mBAAmB,OAAA,CAAQ,iBAAA;AAAA,IAC3B,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,MAAA,EAAQ,cAAA;AAAA,IACR,yBAAA;AAAA,IACA,QAAQ,OAAA,CAAQ;AAAA,GACjB,CAAA;AAED,EAAA,MAAM,QAAA,GAAWC,6BAAAA,CAAmB,OAAA,CAAQ,aAAA,EAAe,QAAQ,iBAAiB,CAAA;AACpF,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,mBAAA,CAAoB,QAAQ,CAAA;AACxD,EAAA,IAAI,CAACD,cAAAA,CAAI,GAAA,CAAI,mBAAA,CAAoB,MAAM,CAAA,EAAG;AACxC,IAAA,MAAM,SAAS,OAAA,IAAW,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,GAAI,0BAAA;AAC1D,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,sBAAA;AAAA,MACA,CAAA,qEAAA,EAAwE,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,KAC9F;AAAA,EACF;AAEA,EAAA,MAAM,UAAUA,cAAAA,CAAI,mBAAA,CAAoB,QAAA,EAAU,MAAM,EAAE,KAAA,EAAM;AAChE,EAAA,OAAA,CAAQ,KAAK,MAAM,CAAA;AACnB,EAAA,MAAM,UAAA,GACJ,OAAA,CAAQ,UAAA,IACR,gBAAA,CAAiB;AAAA,IACf,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,mBAAmB,OAAA,CAAQ,iBAAA;AAAA,IAC3B,WAAW,OAAA,CAAQ;AAAA,GACpB,CAAA;AACH,EAAA,OAAO,UAAA,CAAW,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,CAAA;AACxC","file":"sign.cjs","sourcesContent":["/**\n * The frozen taxonomy of error codes the SDK can throw. This union is\n * deliberately closed — every failure path maps to exactly one of these.\n */\nexport const KIT_ERROR_CODES = Object.freeze([\n  'USER_CANCELLED',\n  'ES256_NOT_SUPPORTED',\n  'RP_ID_MISMATCH',\n  'ORIGIN_MISMATCH',\n  'CHALLENGE_MISMATCH',\n  'INVALID_SIGNATURE_DER',\n  'INVALID_PUBLIC_KEY',\n  'CONTRACT_AUTH_FAILED',\n  'NETWORK_ERROR',\n  'UNSUPPORTED_AUTHENTICATOR',\n] as const);\n\nexport type KitErrorCode = (typeof KIT_ERROR_CODES)[number];\n\n/** Structured error carrying a machine-readable {@link KitErrorCode}. */\nexport class KitError extends Error {\n  readonly code: KitErrorCode;\n  override readonly name = 'KitError';\n\n  constructor(code: KitErrorCode, message?: string, options?: { cause?: unknown }) {\n    super(message ?? code, options);\n    this.code = code;\n    // Restore the prototype chain so `instanceof KitError` works after\n    // down-level transpilation to CJS.\n    Object.setPrototypeOf(this, KitError.prototype);\n  }\n}\n\nexport function isKitError(value: unknown): value is KitError {\n  return value instanceof KitError;\n}\n","import { p256 } from '@noble/curves/nist';\nimport { KitError } from '../errors';\n\n/** Maximum DER length of a P-256 ECDSA signature: SEQ + two 33-byte INTEGERs. */\nconst MAX_DER_LENGTH = 72;\n\n/**\n * Convert an ASN.1 DER ECDSA signature to the 64-byte raw `R‖S` form Soroban's\n * `secp256r1_verify` expects, using noble's audited DER parser (R and S are\n * left-padded to 32 bytes big-endian). Rejects malformed or over-long input.\n *\n * Note: this does NOT enforce low-S — that normalization is added in S04\n * (YK-430). The output here mirrors the signature exactly as parsed.\n */\nexport function derToCompact(der: Uint8Array): Uint8Array {\n  if (der.length > MAX_DER_LENGTH) {\n    throw new KitError(\n      'INVALID_SIGNATURE_DER',\n      `DER signature is ${der.length} bytes, exceeds max ${MAX_DER_LENGTH}`,\n    );\n  }\n  try {\n    return p256.Signature.fromDER(der).toCompactRawBytes();\n  } catch (cause) {\n    throw new KitError('INVALID_SIGNATURE_DER', 'failed to parse DER signature', { cause });\n  }\n}\n\nfunction assertCompactLength(compactSignature: Uint8Array): void {\n  if (compactSignature.length !== 64) {\n    throw new KitError(\n      'INVALID_SIGNATURE_DER',\n      `compact signature must be 64 bytes, got ${compactSignature.length}`,\n    );\n  }\n}\n\n/** True if a 64-byte compact signature is in canonical low-S form (S ≤ n/2). */\nexport function isLowS(compactSignature: Uint8Array): boolean {\n  assertCompactLength(compactSignature);\n  return !p256.Signature.fromCompact(compactSignature).hasHighS();\n}\n\n/**\n * Normalize a 64-byte compact signature to canonical low-S: if S > n/2, replace\n * S with n − S (anchor LOW_S_NORMALIZATION, invariant #2). ~50% of Apple Touch\n * ID / Face ID assertions are high-S and Soroban's `secp256r1_verify` does not\n * enforce low-S, so the SDK MUST emit low-S before a signature reaches a\n * contract. Idempotent: low-S input is returned unchanged.\n */\nexport function normalizeLowS(compactSignature: Uint8Array): Uint8Array {\n  assertCompactLength(compactSignature);\n  return p256.Signature.fromCompact(compactSignature).normalizeS().toCompactRawBytes();\n}\n\n/** DER → 64-byte canonical low-S compact — the conversion the signing ceremony uses. */\nexport function derToCompactLowS(der: Uint8Array): Uint8Array {\n  return normalizeLowS(derToCompact(der));\n}\n","/** Concatenate byte arrays into one. */\nexport function concatBytes(...arrays: Uint8Array[]): Uint8Array {\n  const total = arrays.reduce((n, a) => n + a.length, 0);\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const a of arrays) {\n    out.set(a, offset);\n    offset += a.length;\n  }\n  return out;\n}\n\n/** Length-safe, constant-time-ish byte equality. */\nexport function equalBytes(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i += 1) diff |= (a[i] ?? 0) ^ (b[i] ?? 0);\n  return diff === 0;\n}\n\nexport function bytesToHex(bytes: Uint8Array): string {\n  let hex = '';\n  for (const byte of bytes) hex += byte.toString(16).padStart(2, '0');\n  return hex;\n}\n","import { sha256 } from '../internal/sha256';\nimport { concatBytes } from '../internal/bytes';\n\n/**\n * Reconstruct the 32-byte payload the authenticator signed and that Soroban's\n * `__check_auth` re-derives on-chain:\n *\n *   SHA256( authenticatorData ‖ SHA256(clientDataJSON) )\n */\nexport function reconstructSignedPayload(input: {\n  authenticatorData: Uint8Array;\n  clientDataJSON: Uint8Array;\n}): Uint8Array {\n  const clientDataHash = sha256(input.clientDataJSON);\n  return sha256(concatBytes(input.authenticatorData, clientDataHash));\n}\n","/**\n * Isomorphic base64url + UTF-8 codecs. `atob`/`btoa`/`TextEncoder`/`TextDecoder`\n * are globals in modern browsers and Node >= 16, so no platform branch is\n * needed and nothing is bundled.\n */\n\n/** Encode bytes as unpadded base64url. */\nexport function bytesToBase64Url(bytes: Uint8Array): string {\n  let binary = '';\n  for (const byte of bytes) binary += String.fromCharCode(byte);\n  return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n}\n\n/** Decode base64 or base64url (padding optional) to bytes. */\nexport function base64UrlToBytes(input: string): Uint8Array<ArrayBuffer> {\n  const base64 = input.replace(/-/g, '+').replace(/_/g, '/');\n  const padded = base64 + '='.repeat((4 - (base64.length % 4)) % 4);\n  const binary = atob(padded);\n  const out = new Uint8Array(new ArrayBuffer(binary.length));\n  for (let i = 0; i < binary.length; i += 1) out[i] = binary.charCodeAt(i);\n  return out;\n}\n\nexport function utf8ToBytes(text: string): Uint8Array {\n  return new TextEncoder().encode(text);\n}\n\nexport function bytesToUtf8(bytes: Uint8Array): string {\n  return new TextDecoder().decode(bytes);\n}\n","import { KitError } from '../errors';\nimport { base64UrlToBytes, bytesToBase64Url, bytesToUtf8 } from '../internal/encoding';\n\n/** The subset of clientDataJSON fields we rely on. */\nexport interface ClientData {\n  type: string;\n  /** base64url-encoded challenge as embedded by the client. */\n  challenge: string;\n  origin: string;\n  crossOrigin?: boolean;\n}\n\n/** Encode a raw challenge as the base64url string embedded in clientDataJSON. */\nexport function encodeChallenge(challenge: Uint8Array): string {\n  return bytesToBase64Url(challenge);\n}\n\n/** Decode the base64url challenge embedded in clientDataJSON back to bytes. */\nexport function decodeChallenge(challenge: string): Uint8Array {\n  return base64UrlToBytes(challenge);\n}\n\n/** Parse clientDataJSON bytes into a typed, validated-shape object. */\nexport function parseClientDataJSON(clientDataJSON: Uint8Array): ClientData {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(bytesToUtf8(clientDataJSON));\n  } catch (cause) {\n    throw new KitError('UNSUPPORTED_AUTHENTICATOR', 'clientDataJSON is not valid JSON', { cause });\n  }\n  if (typeof raw !== 'object' || raw === null) {\n    throw new KitError('UNSUPPORTED_AUTHENTICATOR', 'clientDataJSON is not a JSON object');\n  }\n  const obj = raw as Record<string, unknown>;\n  const { type, challenge, origin, crossOrigin } = obj;\n  if (typeof type !== 'string' || typeof challenge !== 'string' || typeof origin !== 'string') {\n    throw new KitError('UNSUPPORTED_AUTHENTICATOR', 'clientDataJSON is missing required fields');\n  }\n  return {\n    type,\n    challenge,\n    origin,\n    crossOrigin: typeof crossOrigin === 'boolean' ? crossOrigin : undefined,\n  };\n}\n\n/**\n * Parse and verify clientDataJSON for an authentication (`webauthn.get`)\n * assertion: the ceremony type, the origin (exact match against one or more\n * allowed origins), and the embedded challenge (base64url string).\n */\nexport function verifyClientDataJSON(\n  clientDataJSON: Uint8Array,\n  expected: { origin: string | string[]; challenge: string },\n): ClientData {\n  const data = parseClientDataJSON(clientDataJSON);\n  if (data.type !== 'webauthn.get') {\n    throw new KitError(\n      'UNSUPPORTED_AUTHENTICATOR',\n      `clientDataJSON.type \"${data.type}\" is not \"webauthn.get\"`,\n    );\n  }\n  const allowed = Array.isArray(expected.origin) ? expected.origin : [expected.origin];\n  if (!allowed.includes(data.origin)) {\n    throw new KitError('ORIGIN_MISMATCH', `origin \"${data.origin}\" not in [${allowed.join(', ')}]`);\n  }\n  if (data.challenge !== expected.challenge) {\n    throw new KitError('CHALLENGE_MISMATCH', 'clientDataJSON challenge does not match expected');\n  }\n  return data;\n}\n","/**\n * A minimal CBOR (RFC 8949) decoder — only the major types WebAuthn needs:\n * unsigned ints, negative ints, byte strings, text strings, arrays and maps,\n * with 1/2/4-byte length prefixes. Indefinite lengths, tags, floats and\n * 8-byte lengths are intentionally unsupported (COSE keys and attestation\n * objects never use them) and throw. This keeps the SDK dependency-free while\n * staying robust — it is fully fixture-tested. It replaces passkey-kit's\n * hardcoded byte-offset scanning, which had no bounds checks.\n */\nexport type CborValue = number | bigint | Uint8Array | string | CborValue[] | CborMap;\nexport type CborMap = Map<number | string, CborValue>;\n\ninterface Decoded {\n  value: CborValue;\n  /** Total bytes consumed starting at the requested offset. */\n  length: number;\n}\n\nfunction byteAt(bytes: Uint8Array, index: number): number {\n  const value = bytes[index];\n  if (value === undefined) throw new Error(`CBOR: unexpected end of input at byte ${index}`);\n  return value;\n}\n\n/** Decode the first CBOR item at `offset`, returning its value and byte length. */\nconst MAX_DEPTH = 16; // COSE keys / attestation objects nest at most ~3 levels.\n\nexport function decodeCbor(bytes: Uint8Array, offset = 0, depth = 0): Decoded {\n  if (depth > MAX_DEPTH) throw new Error('CBOR: maximum nesting depth exceeded');\n  const first = byteAt(bytes, offset);\n  const major = first >> 5;\n  const info = first & 0x1f;\n  let pos = offset + 1;\n\n  let argument: number;\n  if (info < 24) {\n    argument = info;\n  } else if (info === 24) {\n    argument = byteAt(bytes, pos);\n    pos += 1;\n  } else if (info === 25) {\n    argument = (byteAt(bytes, pos) << 8) | byteAt(bytes, pos + 1);\n    pos += 2;\n  } else if (info === 26) {\n    argument =\n      byteAt(bytes, pos) * 0x1000000 +\n      (byteAt(bytes, pos + 1) << 16) +\n      (byteAt(bytes, pos + 2) << 8) +\n      byteAt(bytes, pos + 3);\n    pos += 4;\n  } else {\n    throw new Error(`CBOR: unsupported length encoding (additional info ${info})`);\n  }\n\n  switch (major) {\n    case 0: // unsigned integer\n      return { value: argument, length: pos - offset };\n    case 1: // negative integer\n      return { value: -1 - argument, length: pos - offset };\n    case 2: {\n      // byte string\n      const end = pos + argument;\n      if (end > bytes.length) throw new Error('CBOR: byte string exceeds input');\n      return { value: bytes.slice(pos, end), length: end - offset };\n    }\n    case 3: {\n      // text string (UTF-8)\n      const end = pos + argument;\n      if (end > bytes.length) throw new Error('CBOR: text string exceeds input');\n      return { value: new TextDecoder().decode(bytes.slice(pos, end)), length: end - offset };\n    }\n    case 4: {\n      // array\n      const items: CborValue[] = [];\n      let cursor = pos;\n      for (let i = 0; i < argument; i += 1) {\n        const item = decodeCbor(bytes, cursor, depth + 1);\n        items.push(item.value);\n        cursor += item.length;\n      }\n      return { value: items, length: cursor - offset };\n    }\n    case 5: {\n      // map\n      const map: CborMap = new Map();\n      let cursor = pos;\n      for (let i = 0; i < argument; i += 1) {\n        const key = decodeCbor(bytes, cursor, depth + 1);\n        cursor += key.length;\n        const val = decodeCbor(bytes, cursor, depth + 1);\n        cursor += val.length;\n        if (typeof key.value !== 'number' && typeof key.value !== 'string') {\n          throw new Error('CBOR: unsupported map key type');\n        }\n        if (map.has(key.value)) {\n          throw new Error('CBOR: duplicate map key (non-canonical)');\n        }\n        map.set(key.value, val.value);\n      }\n      return { value: map, length: cursor - offset };\n    }\n    default:\n      throw new Error(`CBOR: unsupported major type ${major}`);\n  }\n}\n\nexport function decodeCborFirst(bytes: Uint8Array): CborValue {\n  return decodeCbor(bytes, 0).value;\n}\n","import { KitError } from '../errors';\nimport { decodeCbor } from '../internal/cbor';\nimport { sha256 } from '../internal/sha256';\nimport { equalBytes } from '../internal/bytes';\nimport { utf8ToBytes } from '../internal/encoding';\n\nexport interface AuthenticatorDataFlags {\n  /** User Present */\n  up: boolean;\n  /** User Verified */\n  uv: boolean;\n  /** Backup Eligible */\n  be: boolean;\n  /** Backup State */\n  bs: boolean;\n  /** Attested credential data present */\n  at: boolean;\n  /** Extension data present */\n  ed: boolean;\n  /** Raw flags byte. */\n  bits: number;\n}\n\nexport interface ParsedAuthenticatorData {\n  rpIdHash: Uint8Array;\n  flags: AuthenticatorDataFlags;\n  signCount: number;\n  aaguid?: Uint8Array;\n  credentialId?: Uint8Array;\n  /** Raw CBOR-encoded COSE public key (exact bytes), if attested data present. */\n  credentialPublicKey?: Uint8Array;\n}\n\nconst MIN_LENGTH = 37; // rpIdHash(32) + flags(1) + signCount(4)\n\n/** Parse the authenticatorData byte structure (WebAuthn §6.1). */\nexport function parseAuthenticatorData(authData: Uint8Array): ParsedAuthenticatorData {\n  if (authData.length < MIN_LENGTH) {\n    throw new KitError(\n      'UNSUPPORTED_AUTHENTICATOR',\n      `authenticatorData is ${authData.length} bytes, expected at least ${MIN_LENGTH}`,\n    );\n  }\n  const view = new DataView(authData.buffer, authData.byteOffset, authData.byteLength);\n  const rpIdHash = authData.slice(0, 32);\n  const bits = authData[32] ?? 0;\n  const flags: AuthenticatorDataFlags = {\n    up: (bits & 0x01) !== 0,\n    uv: (bits & 0x04) !== 0,\n    be: (bits & 0x08) !== 0,\n    bs: (bits & 0x10) !== 0,\n    at: (bits & 0x40) !== 0,\n    ed: (bits & 0x80) !== 0,\n    bits,\n  };\n  const signCount = view.getUint32(33, false);\n\n  const result: ParsedAuthenticatorData = { rpIdHash, flags, signCount };\n\n  if (flags.at) {\n    if (authData.length < 55) {\n      throw new KitError(\n        'UNSUPPORTED_AUTHENTICATOR',\n        'authenticatorData truncated in attested data',\n      );\n    }\n    result.aaguid = authData.slice(37, 53);\n    const credIdLength = view.getUint16(53, false);\n    const credIdEnd = 55 + credIdLength;\n    if (authData.length < credIdEnd) {\n      throw new KitError(\n        'UNSUPPORTED_AUTHENTICATOR',\n        'authenticatorData truncated in credentialId',\n      );\n    }\n    result.credentialId = authData.slice(55, credIdEnd);\n    // The COSE public key is the next CBOR item; capture its exact bytes so we\n    // stop cleanly before any extension data (when flags.ed is set).\n    const rest = authData.slice(credIdEnd);\n    const { length } = decodeCbor(rest, 0);\n    result.credentialPublicKey = rest.slice(0, length);\n  }\n\n  return result;\n}\n\n/** Verify that authenticatorData's rpIdHash equals SHA-256(rpId). */\nexport function verifyRpIdHash(authData: Uint8Array, rpId: string): void {\n  const actual = parseAuthenticatorData(authData).rpIdHash;\n  const expected = sha256(utf8ToBytes(rpId));\n  if (!equalBytes(actual, expected)) {\n    throw new KitError(\n      'RP_ID_MISMATCH',\n      `authenticatorData rpIdHash does not match SHA-256(\"${rpId}\")`,\n    );\n  }\n}\n","import { p256 } from '@noble/curves/nist';\nimport { reconstructSignedPayload } from './payload';\nimport { derToCompact } from './signature';\n\nexport interface VerifyAssertionInput {\n  /** SEC-1 uncompressed public key (65 bytes, `0x04 ‖ X ‖ Y`). */\n  publicKey: Uint8Array;\n  authenticatorData: Uint8Array;\n  clientDataJSON: Uint8Array;\n  /** DER-encoded (≤72 B) or already-compact (64 B) signature. */\n  signature: Uint8Array;\n}\n\n/**\n * Verify a WebAuthn assertion the way the on-chain `secp256r1_verify` does:\n * reconstruct `SHA256(authData ‖ SHA256(cdj))` and check ECDSA. `lowS: false`\n * mirrors the host function, which does NOT enforce low-S (we normalize\n * separately before submitting — see S04/YK-430).\n */\nexport function verifyAssertionSignature(input: VerifyAssertionInput): boolean {\n  const payload = reconstructSignedPayload(input);\n  const compact = input.signature.length === 64 ? input.signature : derToCompact(input.signature);\n  // `format: 'compact'` pins the 64-byte interpretation — without it noble tries\n  // DER-first and could misread a compact signature that happens to start 0x30.\n  return p256.verify(compact, payload, input.publicKey, { lowS: false, format: 'compact' });\n}\n","import { KitError } from '../errors';\n\n/**\n * Cryptographically-random bytes, isomorphic (browser + Node global crypto).\n * Throws instead of silently returning all-zero bytes when no secure RNG is\n * present — an all-zero challenge would be catastrophic, not a soft fallback.\n */\nexport function randomBytes(length: number): Uint8Array<ArrayBuffer> {\n  const webcrypto = globalThis.crypto as Crypto | undefined;\n  if (typeof webcrypto?.getRandomValues !== 'function') {\n    throw new KitError(\n      'UNSUPPORTED_AUTHENTICATOR',\n      'no secure random source (globalThis.crypto.getRandomValues) is available in this environment',\n    );\n  }\n  const out = new Uint8Array(new ArrayBuffer(length));\n  webcrypto.getRandomValues(out);\n  return out;\n}\n","import { KitError } from '../errors';\nimport { base64UrlToBytes } from '../internal/encoding';\nimport type { PublicKeyCredentialCreationOptionsJSON } from '../webauthn/createOptions';\nimport { randomBytes } from './random';\nimport type {\n  CredentialStorage,\n  WebAuthnClient,\n  WebAuthnCreateResult,\n  WebAuthnGetOptions,\n  WebAuthnGetResult,\n} from './types';\n\n/**\n * Map a `navigator.credentials` rejection to a `KitError`. Dismissing the OS\n * passkey sheet rejects with a `NotAllowedError` (a DOMException) — surface that\n * as `USER_CANCELLED` so the UI shows the true \"you cancelled\" copy instead of\n * the generic unsupported-authenticator fallback (S20 / S04 polish).\n */\nfunction asKitError(error: unknown): KitError {\n  if (error instanceof KitError) return error;\n  const name =\n    typeof error === 'object' && error !== null && 'name' in error\n      ? (error as { name?: unknown }).name\n      : undefined;\n  if (name === 'NotAllowedError') {\n    return new KitError('USER_CANCELLED', 'The passkey prompt was dismissed.', { cause: error });\n  }\n  const message = error instanceof Error ? error.message : 'WebAuthn request failed';\n  // Preserve the original DOMException name (e.g. InvalidStateError / ConstraintError)\n  // in the message so diagnostics show the true cause, not just the generic bucket.\n  const detail = typeof name === 'string' ? `${name}: ${message}` : message;\n  return new KitError('UNSUPPORTED_AUTHENTICATOR', detail, { cause: error });\n}\n\n/** The browser `WebAuthnClient` backed by `navigator.credentials`. */\nexport function browserWebAuthnClient(): WebAuthnClient {\n  const credentials = (globalThis as { navigator?: Navigator }).navigator?.credentials;\n  if (!credentials) {\n    throw new KitError('UNSUPPORTED_AUTHENTICATOR', 'navigator.credentials is unavailable');\n  }\n  return {\n    async create(options: PublicKeyCredentialCreationOptionsJSON): Promise<WebAuthnCreateResult> {\n      const publicKey: PublicKeyCredentialCreationOptions = {\n        challenge: base64UrlToBytes(options.challenge),\n        rp: options.rp,\n        user: {\n          id: base64UrlToBytes(options.user.id),\n          name: options.user.name,\n          displayName: options.user.displayName,\n        },\n        pubKeyCredParams: options.pubKeyCredParams,\n        authenticatorSelection: options.authenticatorSelection,\n        attestation: options.attestation,\n        timeout: options.timeout,\n      };\n      let credential: PublicKeyCredential | null;\n      try {\n        credential = (await credentials.create({ publicKey })) as PublicKeyCredential | null;\n      } catch (error) {\n        throw asKitError(error);\n      }\n      if (!credential) throw new KitError('USER_CANCELLED', 'credential creation returned null');\n      const response = credential.response as AuthenticatorAttestationResponse;\n      return {\n        id: credential.id,\n        rawId: new Uint8Array(credential.rawId),\n        attestationObject: new Uint8Array(response.attestationObject),\n      };\n    },\n    async get(options: WebAuthnGetOptions): Promise<WebAuthnGetResult> {\n      const publicKey: PublicKeyCredentialRequestOptions = {\n        rpId: options.rpId,\n        challenge: options.challenge ? new Uint8Array(options.challenge) : randomBytes(32),\n        allowCredentials: (options.allowCredentials ?? []).map((id) => ({\n          type: 'public-key',\n          id: base64UrlToBytes(id),\n        })),\n        userVerification: options.userVerification,\n      };\n      const request: CredentialRequestOptions = { publicKey };\n      if (options.mediation) request.mediation = options.mediation;\n      let credential: PublicKeyCredential | null;\n      try {\n        credential = (await credentials.get(request)) as PublicKeyCredential | null;\n      } catch (error) {\n        throw asKitError(error);\n      }\n      if (!credential) throw new KitError('USER_CANCELLED', 'assertion returned null');\n      const response = credential.response as AuthenticatorAssertionResponse;\n      return {\n        id: credential.id,\n        rawId: new Uint8Array(credential.rawId),\n        authenticatorData: new Uint8Array(response.authenticatorData),\n        clientDataJSON: new Uint8Array(response.clientDataJSON),\n        signature: new Uint8Array(response.signature),\n      };\n    },\n  };\n}\n\n/** localStorage-backed credential store, with an in-memory fallback (Node/SSR). */\nexport function defaultCredentialStorage(): CredentialStorage {\n  const key = (rpId: string): string => `stellar-passkey:${rpId}`;\n  const ls = (globalThis as { localStorage?: Storage }).localStorage;\n  if (ls) {\n    return {\n      get: (rpId) => ls.getItem(key(rpId)),\n      set: (rpId, credentialId) => {\n        ls.setItem(key(rpId), credentialId);\n      },\n    };\n  }\n  const memory = new Map<string, string>();\n  return {\n    get: (rpId) => memory.get(rpId) ?? null,\n    set: (rpId, credentialId) => {\n      memory.set(rpId, credentialId);\n    },\n  };\n}\n","import { base64UrlToBytes } from '../internal/encoding';\nimport type { AssertionResult, WebAuthnSigner } from '../soroban/sign';\nimport { browserWebAuthnClient } from './browserClient';\nimport type { WebAuthnClient } from './types';\n\nexport interface BrowserPasskeySignerOptions {\n  /** The Relying Party ID (your site's registrable domain). */\n  rpId: string;\n  /**\n   * Restrict the prompt to specific credential ids (base64url) — pass the\n   * `credentialId` from `create` / `connect` so the OS offers the right passkey.\n   * Omit (or leave empty) for a discoverable prompt over any resident passkey.\n   */\n  allowCredentials?: string[];\n  userVerification?: 'discouraged' | 'preferred' | 'required';\n  /** Inject a custom client (tests / non-browser). Defaults to `browserWebAuthnClient()`. */\n  webauthn?: WebAuthnClient;\n}\n\n/**\n * Adapt `navigator.credentials.get` into the `WebAuthnSigner` that\n * `signTransaction` / `signAuthEntry` expect — so wiring a passkey is one line:\n *\n * ```ts\n * const sign = browserPasskeySigner({ rpId, allowCredentials: [credentialId] });\n * const signedXdr = await signTransaction(txXdr, { networkPassphrase, sign });\n * ```\n *\n * The SDK hands the signer a base64url challenge (the Soroban auth preimage);\n * this decodes it to the raw bytes WebAuthn signs over, runs the assertion, and\n * returns the fields the auth assembler needs. The DER signature is low-S\n * normalized downstream (invariant #2) — nothing here weakens that.\n */\nexport function browserPasskeySigner(options: BrowserPasskeySignerOptions): WebAuthnSigner {\n  const webauthn = options.webauthn ?? browserWebAuthnClient();\n  return async (challenge: string): Promise<AssertionResult> => {\n    const assertion = await webauthn.get({\n      rpId: options.rpId,\n      challenge: base64UrlToBytes(challenge),\n      allowCredentials: options.allowCredentials ?? [],\n      userVerification: options.userVerification ?? 'preferred',\n    });\n    return {\n      authenticatorData: assertion.authenticatorData,\n      clientDataJSON: assertion.clientDataJSON,\n      signature: assertion.signature,\n      credentialId: assertion.rawId,\n    };\n  };\n}\n","import { xdr, hash } from '@stellar/stellar-sdk';\nimport { KitError } from '../errors';\nimport { bytesToBase64Url, utf8ToBytes } from '../internal/encoding';\n\n/**\n * Compute the auth-entry preimage hash that `__check_auth` reconstructs and that\n * becomes the WebAuthn `challenge`:\n *   SHA256( XDR( HashIdPreimage::SorobanAuthorization{ networkId, nonce,\n *   signatureExpirationLedger, invocation } ) )\n * where networkId = SHA256(networkPassphrase).\n */\nexport function authEntryChallengeBytes(\n  entry: xdr.SorobanAuthorizationEntry,\n  networkPassphrase: string,\n): Uint8Array {\n  const credentials = entry.credentials();\n  if (credentials.switch().name !== 'sorobanCredentialsAddress') {\n    throw new KitError('CONTRACT_AUTH_FAILED', 'auth entry has no address credentials to sign');\n  }\n  const address = credentials.address();\n  const preimage = xdr.HashIdPreimage.envelopeTypeSorobanAuthorization(\n    new xdr.HashIdPreimageSorobanAuthorization({\n      networkId: Buffer.from(hash(Buffer.from(utf8ToBytes(networkPassphrase)))),\n      nonce: address.nonce(),\n      signatureExpirationLedger: address.signatureExpirationLedger(),\n      invocation: entry.rootInvocation(),\n    }),\n  );\n  return new Uint8Array(hash(preimage.toXDR()));\n}\n\n/** The base64url challenge string the authenticator signs (43 chars). */\nexport function authEntryChallenge(\n  entry: xdr.SorobanAuthorizationEntry,\n  networkPassphrase: string,\n): string {\n  return bytesToBase64Url(authEntryChallengeBytes(entry, networkPassphrase));\n}\n","import { xdr } from '@stellar/stellar-sdk';\nimport type { AssertionResult } from './sign';\n\n/**\n * Set an address-credential auth entry's signature to the `Secp256r1Signature`\n * struct the on-chain `__check_auth` consumes:\n *\n *   ScVal::Map { authenticator_data: Bytes, client_data_json: Bytes, signature: BytesN<64> }\n *\n * Map keys are alphabetical, so the ScMap is canonically sorted as Soroban\n * requires. `signature` MUST already be 64-byte low-S compact (`signAuthEntry`\n * normalizes before calling this). This is the exact shape the audited\n * webauthn-verifier reference expects — proven on testnet by the on-chain\n * integration test (scripts/onchain-e2e.ts).\n */\nexport function applyAssertionToEntry(\n  entry: xdr.SorobanAuthorizationEntry,\n  assertion: AssertionResult,\n): xdr.SorobanAuthorizationEntry {\n  entry.credentials().address().signature(buildSignatureScVal(assertion));\n  return entry;\n}\n\n/** The `Secp256r1Signature` ScVal — a contracttype struct → sorted ScMap. */\nexport function buildSignatureScVal(assertion: AssertionResult): xdr.ScVal {\n  return xdr.ScVal.scvMap([\n    bytesField('authenticator_data', assertion.authenticatorData),\n    bytesField('client_data_json', assertion.clientDataJSON),\n    bytesField('signature', assertion.signature),\n  ]);\n}\n\nfunction bytesField(name: string, bytes: Uint8Array): xdr.ScMapEntry {\n  return new xdr.ScMapEntry({\n    key: xdr.ScVal.scvSymbol(name),\n    val: xdr.ScVal.scvBytes(Buffer.from(bytes)),\n  });\n}\n","import { xdr } from '@stellar/stellar-sdk';\nimport { KitError } from '../errors';\nimport { buildSignatureScVal } from './assemble';\nimport type { AssertionResult } from './sign';\n\n/**\n * The passkey-kit / `webauthn-wallet` smart-wallet ABI target.\n *\n * Our own single-signer account declares `type Signature = Secp256r1Signature`\n * and consumes the bare struct (see `assemble.ts`). passkey-kit's smart-wallet\n * declares `type Signature = Signatures`, so authorizing it needs the assertion\n * wrapped as `Signatures(Map<SignerKey, Signature>)`. The exact shape, the raw-\n * credential-id key, and the canonical map ordering below are confirmed by\n * kalepail (passkey-kit author) in issue #32 against v1 / v0.13.0 (Protocol 27,\n * independently audited); the wire shape is unchanged from v0.12.\n */\n\n/**\n * `SignerKey::Secp256r1(Bytes)` → `scvVec([Symbol(\"Secp256r1\"), Bytes(rawId)])`.\n * The key is the RAW WebAuthn credential-id bytes (base64url-decoded `rawId`):\n * never hashed, never the UTF-8 of the base64url string, and never the public\n * key — the SEC-1 public key lives in `SignerVal` on-chain, not in the key.\n */\nexport function buildSignerKeyScVal(credentialId: Uint8Array): xdr.ScVal {\n  return xdr.ScVal.scvVec([\n    xdr.ScVal.scvSymbol('Secp256r1'),\n    xdr.ScVal.scvBytes(Buffer.from(credentialId)),\n  ]);\n}\n\n/** `Signature::Secp256r1(Secp256r1Signature)` → `scvVec([Symbol(\"Secp256r1\"), <bare struct map>])`. */\nexport function buildSmartWalletSignatureVariant(assertion: AssertionResult): xdr.ScVal {\n  return xdr.ScVal.scvVec([xdr.ScVal.scvSymbol('Secp256r1'), buildSignatureScVal(assertion)]);\n}\n\nfunction decomposeSignerKey(key: xdr.ScVal): { variant: string; payload: Uint8Array } {\n  const vec = key.vec();\n  if (!vec || vec.length < 2) {\n    throw new KitError('CONTRACT_AUTH_FAILED', 'malformed SignerKey (expected an enum vec)');\n  }\n  const variant = vec[0]!.sym().toString();\n  const el = vec[1]!;\n  // Secp256r1(Bytes) and Ed25519(BytesN<32>) are scvBytes; Policy(Address) falls\n  // back to its XDR bytes (rare in a passkey SDK — see the ordering note below).\n  const payload =\n    el.switch().name === 'scvBytes' ? new Uint8Array(el.bytes()) : new Uint8Array(el.toXDR());\n  return { variant, payload };\n}\n\nfunction compareBytes(a: Uint8Array, b: Uint8Array): number {\n  const n = Math.min(a.length, b.length);\n  for (let i = 0; i < n; i++) {\n    if (a[i] !== b[i]) return a[i]! < b[i]! ? -1 : 1;\n  }\n  return a.length - b.length;\n}\n\n/**\n * Canonical Soroban-host ordering for `SignerKey` map keys. The host requires\n * `Map<SignerKey, _>` entries sorted by ScVal `Ord` — an **element-wise byte\n * comparison**, NOT a length-major XDR-hex / `localeCompare` string sort. This is\n * the one correctness landmine kalepail flagged in #32: passkey-kit v1 replaced\n * its old string sort with exactly this because the old approach could mis-order\n * same-variant keys of differing length, producing a map the host rejects.\n *\n * We compare the enum variant symbol first, then the payload bytes element-wise,\n * so homogeneous `Secp256r1` keys (the multi-passkey case) sort purely by their\n * raw credential-id bytes. (Ordering across mixed variant types relies on the\n * variant names being capitalized single words, which matches the host's symbol\n * order; a Policy/Address-keyed multi-sig is out of scope for this passkey SDK.)\n */\nexport function compareSignerKeyScVal(a: xdr.ScVal, b: xdr.ScVal): number {\n  const ka = decomposeSignerKey(a);\n  const kb = decomposeSignerKey(b);\n  if (ka.variant !== kb.variant) return ka.variant < kb.variant ? -1 : 1;\n  return compareBytes(ka.payload, kb.payload);\n}\n\n/**\n * Assemble/merge a passkey assertion into an address-credential auth entry as the\n * smart-wallet `Signatures(Map<SignerKey, Signature>)` wire shape\n * (`ScVal::Vec([ScVal::Map(...)])`). `assertion.signature` MUST already be 64-byte\n * low-S compact (`signAuthEntry` normalizes first). Existing map entries — a\n * partially-signed multi-sig entry — are preserved; an entry for the same signer\n * key is replaced; then the whole map is canonically sorted.\n *\n * Use this for the passkey-kit / webauthn-wallet ABI. For our own single-signer\n * account (`type Signature = Secp256r1Signature`) use `applyAssertionToEntry`.\n */\nexport function applyAssertionToSmartWalletEntry(\n  entry: xdr.SorobanAuthorizationEntry,\n  assertion: AssertionResult,\n): xdr.SorobanAuthorizationEntry {\n  const credentials = entry.credentials();\n  if (credentials.switch().name !== 'sorobanCredentialsAddress') {\n    throw new KitError('CONTRACT_AUTH_FAILED', 'auth entry has no address credentials to sign');\n  }\n  const key = buildSignerKeyScVal(assertion.credentialId);\n  const newEntry = new xdr.ScMapEntry({ key, val: buildSmartWalletSignatureVariant(assertion) });\n\n  const current = credentials.address().signature();\n  let mapEntries: xdr.ScMapEntry[];\n  switch (current.switch().name) {\n    case 'scvVoid':\n      mapEntries = [newEntry];\n      break;\n    case 'scvVec': {\n      // Preserve any existing signatures (partial multi-sig); replace same key.\n      const existing = current.vec()?.[0]?.map() ?? [];\n      mapEntries = existing.filter((e) => compareSignerKeyScVal(e.key(), key) !== 0);\n      mapEntries.push(newEntry);\n      break;\n    }\n    default:\n      throw new KitError(\n        'CONTRACT_AUTH_FAILED',\n        'unexpected existing signature shape for a smart-wallet entry',\n      );\n  }\n  mapEntries.sort((a, b) => compareSignerKeyScVal(a.key(), b.key()));\n  credentials.address().signature(xdr.ScVal.scvVec([xdr.ScVal.scvMap(mapEntries)]));\n  return entry;\n}\n","import { xdr } from '@stellar/stellar-sdk';\nimport { KitError } from '../errors';\nimport { derToCompactLowS } from '../webauthn/signature';\nimport { parseClientDataJSON, verifyClientDataJSON, type ClientData } from '../webauthn/clientData';\nimport { parseAuthenticatorData, verifyRpIdHash } from '../webauthn/authData';\nimport { verifyAssertionSignature } from '../webauthn/verify';\nimport { authEntryChallenge } from './preimage';\nimport { applyAssertionToEntry } from './assemble';\nimport { applyAssertionToSmartWalletEntry } from './smartWallet';\n\n/**\n * Which contract ABI the assembled signature targets:\n *  - `single-signer` (default): the bare `Secp256r1Signature` struct our own\n *    webauthn-account consumes (`type Signature = Secp256r1Signature`).\n *  - `smart-wallet`: passkey-kit's `Signatures(Map<SignerKey, Signature>)`\n *    (`type Signature = Signatures`) — see `smartWallet.ts` / kalepail #32.\n * Both reuse the identical low-S, field-packing, and challenge-binding core;\n * only the outer wrapper differs, so the two stay separate ABI targets behind\n * one signing interface.\n */\nexport type WalletTarget = 'single-signer' | 'smart-wallet';\n\n/** The raw WebAuthn assertion a signer returns for a given challenge. */\nexport interface AssertionResult {\n  authenticatorData: Uint8Array;\n  clientDataJSON: Uint8Array;\n  /** DER-encoded (≤72B) or already-compact (64B) ECDSA signature. */\n  signature: Uint8Array;\n  /** base64url credential id → the SignerKey. */\n  credentialId: Uint8Array;\n}\n\n/** Produce a WebAuthn assertion over the base64url `challenge` (e.g. navigator.credentials.get). */\nexport type WebAuthnSigner = (challenge: string) => Promise<AssertionResult> | AssertionResult;\n\n/**\n * Opt-in pre-flight validation of the returned assertion, run BEFORE the entry\n * is assembled and submitted. On-chain `__check_auth` is the real gate, but\n * catching these client-side turns an opaque on-chain failure into a typed\n * `KitError` at the call site. Providing this object always enforces the\n * `webauthn.get` type, the User-Present (UP) flag (required by passkey-kit v1),\n * and challenge-binding; `rpId` / `origin` / `publicKey` add their checks when\n * supplied. Omit the object entirely to skip pre-flight (the default).\n */\nexport interface SignVerifyOptions {\n  /** Verify `authenticatorData.rpIdHash === SHA-256(rpId)`. */\n  rpId?: string;\n  /** Verify `clientDataJSON.origin` is one of these exact origins. */\n  origin?: string | string[];\n  /** SEC-1 (65-byte) public key → verify the ECDSA assertion signature. */\n  publicKey?: Uint8Array;\n  /** Also require the User-Verified (UV) flag (biometric / PIN). Default false. */\n  requireUserVerification?: boolean;\n  /** Allow an assertion made in a cross-origin context (crossOrigin=true). Default false. */\n  allowCrossOrigin?: boolean;\n}\n\nexport interface SorobanSignOptions {\n  networkPassphrase: string;\n  sign: WebAuthnSigner;\n  /** Contract ABI to assemble for. Defaults to `single-signer` (our account). */\n  target?: WalletTarget;\n  /** Opt-in pre-flight assertion validation. Omit to skip. */\n  verify?: SignVerifyOptions;\n  /**\n   * Stamp this `signatureExpirationLedger` onto every address-credential auth\n   * entry BEFORE the challenge is computed, so the signature binds the exact\n   * expiration the contract re-derives in `__check_auth`. Needed for smart-wallet\n   * writes (add/remove signer) where the caller learns the ledger at sign time;\n   * omit when the entry already carries the intended expiration.\n   */\n  signatureExpirationLedger?: number;\n}\n\n/** Validate an assertion against the expected challenge + RP context. Throws KitError. */\nfunction preflightAssertion(\n  assertion: AssertionResult,\n  challenge: string,\n  verify: SignVerifyOptions,\n): void {\n  // Ceremony type + challenge-binding (+ origin when provided).\n  let clientData: ClientData;\n  if (verify.origin !== undefined) {\n    clientData = verifyClientDataJSON(assertion.clientDataJSON, {\n      origin: verify.origin,\n      challenge,\n    });\n  } else {\n    clientData = parseClientDataJSON(assertion.clientDataJSON);\n    if (clientData.type !== 'webauthn.get') {\n      throw new KitError(\n        'UNSUPPORTED_AUTHENTICATOR',\n        `clientDataJSON.type \"${clientData.type}\" is not \"webauthn.get\"`,\n      );\n    }\n    if (clientData.challenge !== challenge) {\n      throw new KitError('CHALLENGE_MISMATCH', 'assertion challenge does not match the auth entry');\n    }\n  }\n  if (clientData.crossOrigin === true && !verify.allowCrossOrigin) {\n    throw new KitError(\n      'ORIGIN_MISMATCH',\n      'assertion was made in a cross-origin context (crossOrigin=true)',\n    );\n  }\n  // User-Present is mandatory (passkey-kit v1 hardening); UV is opt-in.\n  const parsed = parseAuthenticatorData(assertion.authenticatorData);\n  if (!parsed.flags.up) {\n    throw new KitError(\n      'UNSUPPORTED_AUTHENTICATOR',\n      'assertion is missing the User-Present (UP) flag',\n    );\n  }\n  if (verify.requireUserVerification && !parsed.flags.uv) {\n    throw new KitError(\n      'UNSUPPORTED_AUTHENTICATOR',\n      'assertion is missing the required User-Verified (UV) flag',\n    );\n  }\n  if (verify.rpId !== undefined) {\n    verifyRpIdHash(assertion.authenticatorData, verify.rpId);\n  }\n  if (verify.publicKey !== undefined) {\n    const ok = verifyAssertionSignature({\n      publicKey: verify.publicKey,\n      authenticatorData: assertion.authenticatorData,\n      clientDataJSON: assertion.clientDataJSON,\n      signature: assertion.signature,\n    });\n    if (!ok) {\n      throw new KitError(\n        'CONTRACT_AUTH_FAILED',\n        'assertion signature failed pre-flight verification',\n      );\n    }\n  }\n}\n\nasync function signEntryInPlace(\n  entry: xdr.SorobanAuthorizationEntry,\n  options: SorobanSignOptions,\n): Promise<void> {\n  // Stamp the expiration first: the challenge preimage includes\n  // signatureExpirationLedger, so it must be final before we compute it.\n  if (options.signatureExpirationLedger !== undefined) {\n    const creds = entry.credentials();\n    if (creds.switch().name === 'sorobanCredentialsAddress') {\n      creds.address().signatureExpirationLedger(options.signatureExpirationLedger);\n    }\n  }\n  const challenge = authEntryChallenge(entry, options.networkPassphrase);\n  const assertion = await options.sign(challenge);\n  if (options.verify) preflightAssertion(assertion, challenge, options.verify);\n  const signature =\n    assertion.signature.length === 64 ? assertion.signature : derToCompactLowS(assertion.signature);\n  const normalized = {\n    credentialId: assertion.credentialId,\n    authenticatorData: assertion.authenticatorData,\n    clientDataJSON: assertion.clientDataJSON,\n    signature,\n  };\n  if (options.target === 'smart-wallet') {\n    applyAssertionToSmartWalletEntry(entry, normalized);\n  } else {\n    applyAssertionToEntry(entry, normalized);\n  }\n}\n\n/**\n * Sign a single `SorobanAuthorizationEntry` (base64 XDR): compute the challenge,\n * obtain a WebAuthn assertion, low-S-normalize, and assemble the contract\n * signature. Returns the signed entry as base64 XDR.\n */\nexport async function signAuthEntry(\n  entryXdr: string,\n  options: SorobanSignOptions,\n): Promise<string> {\n  const entry = xdr.SorobanAuthorizationEntry.fromXDR(entryXdr, 'base64');\n  await signEntryInPlace(entry, options);\n  return entry.toXDR('base64');\n}\n\n/**\n * The operations whose Soroban auth entries we sign, for a v1 or a fee-bump\n * envelope. (Sign the Soroban auth entries before adding classic tx signatures\n * or fee-bumping; a fee-bump around an already-classic-signed inner tx is the\n * caller's sequencing concern.)\n */\nfunction operationsForSigning(envelope: xdr.TransactionEnvelope): xdr.Operation[] {\n  const kind = envelope.switch().name;\n  if (kind === 'envelopeTypeTx') return envelope.v1().tx().operations();\n  if (kind === 'envelopeTypeTxFeeBump') {\n    const inner = envelope.feeBump().tx().innerTx();\n    if (inner.switch().name !== 'envelopeTypeTx') {\n      throw new KitError(\n        'CONTRACT_AUTH_FAILED',\n        'signTransaction: fee-bump inner transaction is not a v1 transaction',\n      );\n    }\n    return inner.v1().tx().operations();\n  }\n  throw new KitError(\n    'CONTRACT_AUTH_FAILED',\n    `signTransaction: unsupported envelope type \"${kind}\" (expected v1 or fee-bump)`,\n  );\n}\n\n/**\n * Sign every address-credential Soroban auth entry carried by the InvokeHostFunction\n * operations of a transaction (base64 XDR envelope — v1 or fee-bump). Returns the\n * signed envelope XDR.\n */\nexport async function signTransaction(txXdr: string, options: SorobanSignOptions): Promise<string> {\n  const envelope = xdr.TransactionEnvelope.fromXDR(txXdr, 'base64');\n  for (const op of operationsForSigning(envelope)) {\n    if (op.body().switch().name !== 'invokeHostFunction') continue;\n    const entries = op.body().invokeHostFunctionOp().auth();\n    for (const entry of entries) {\n      if (entry.credentials().switch().name !== 'sorobanCredentialsAddress') continue;\n      await signEntryInPlace(entry, options);\n    }\n  }\n  return envelope.toXDR('base64');\n}\n","import { Contract, nativeToScVal, xdr } from '@stellar/stellar-sdk';\nimport { KitError } from '../errors';\nimport { buildSignerKeyScVal } from './smartWallet';\n\n/**\n * passkey-kit v1 (v0.13.0, Protocol 27) smart-wallet SIGNER encoders — the WRITE\n * path (what `add_signer` / `remove_signer` consume), complementing\n * `smartWallet.ts` (the signature READ path the wallet's `__check_auth` reads).\n *\n * A signer is added on-chain as\n *\n *   Signer::Secp256r1(Bytes id, BytesN<65> public_key,\n *                     SignerExpiration, SignerLimits, SignerStorage)\n *\n * which `process_signer` reduces to `SignerKey::Secp256r1(id) ->\n * SignerVal::Secp256r1(public_key, ..)`: the raw credential id is the key, the\n * SEC-1 public key lives in the value. Shape + field order confirmed by kalepail\n * (passkey-kit author) in issue #32 and proven on testnet against the audited v1\n * wasm (`scripts/smartwallet-v1-e2e.ts`).\n *\n * v1 note: `SignerExpiration` is a UNIX-seconds `u64` timestamp (Protocol 27),\n * NOT a ledger sequence as in the pre-v1 kit.\n */\n\n/** `SignerStorage` — where the contract persists the signer entry. */\nexport type SignerStorage = 'Persistent' | 'Temporary';\n\nexport interface Secp256r1SignerSpec {\n  /** Raw WebAuthn credential-id bytes (base64url-decoded `rawId`) — becomes the SignerKey. */\n  credentialId: Uint8Array;\n  /** SEC-1 uncompressed public key (65 bytes, `0x04 ‖ X ‖ Y`) — stored in SignerVal. */\n  publicKey: Uint8Array;\n  /**\n   * `SignerExpiration` — a UNIX-seconds timestamp (v1 / Protocol 27) after which\n   * the signer stops being valid. Omit for `None` (a non-expiring signer, the\n   * usual choice for a recovery / second device).\n   */\n  expiration?: number | bigint;\n  /** `SignerStorage` — defaults to `Persistent`. */\n  storage?: SignerStorage;\n}\n\n/** A tuple-struct `Option` field set to `None` → `scvVec([Void])`. */\nfunction noneTuple(): xdr.ScVal {\n  return xdr.ScVal.scvVec([xdr.ScVal.scvVoid()]);\n}\n\n/** `SignerExpiration(Option<u64>)` — `None` or `Some(unixSeconds)`. */\nfunction expirationScVal(expiration?: number | bigint): xdr.ScVal {\n  if (expiration === undefined) return noneTuple();\n  const ts = BigInt(expiration);\n  if (ts < 0n) {\n    throw new KitError(\n      'CONTRACT_AUTH_FAILED',\n      'signer expiration must be a non-negative UNIX-seconds timestamp (v1)',\n    );\n  }\n  return xdr.ScVal.scvVec([nativeToScVal(ts, { type: 'u64' })]);\n}\n\n/** `SignerStorage::Persistent | Temporary` → `scvVec([Symbol(variant)])`. */\nfunction storageScVal(storage: SignerStorage = 'Persistent'): xdr.ScVal {\n  return xdr.ScVal.scvVec([xdr.ScVal.scvSymbol(storage)]);\n}\n\n/**\n * Encode a `Signer::Secp256r1(..)` for `add_signer`. `SignerLimits` is always\n * `None` (unrestricted) — policy/limited signers are out of scope for this\n * minimal passkey SDK. Validates the credential id and the SEC-1 public key so a\n * malformed signer can never be handed to the contract.\n */\nexport function buildSecp256r1Signer(spec: Secp256r1SignerSpec): xdr.ScVal {\n  if (spec.credentialId.length === 0) {\n    throw new KitError('CONTRACT_AUTH_FAILED', 'buildSecp256r1Signer: empty credential id');\n  }\n  if (spec.publicKey.length !== 65 || spec.publicKey[0] !== 0x04) {\n    throw new KitError(\n      'INVALID_PUBLIC_KEY',\n      'buildSecp256r1Signer: publicKey must be a 65-byte SEC-1 uncompressed point (0x04-prefixed)',\n    );\n  }\n  return xdr.ScVal.scvVec([\n    xdr.ScVal.scvSymbol('Secp256r1'),\n    xdr.ScVal.scvBytes(Buffer.from(spec.credentialId)),\n    xdr.ScVal.scvBytes(Buffer.from(spec.publicKey)),\n    expirationScVal(spec.expiration), // SignerExpiration\n    noneTuple(), // SignerLimits(None)\n    storageScVal(spec.storage), // SignerStorage\n  ]);\n}\n\nfunction contractCall(contractId: string, method: string, ...args: xdr.ScVal[]): xdr.Operation {\n  let contract: Contract;\n  try {\n    contract = new Contract(contractId);\n  } catch (cause) {\n    throw new KitError('CONTRACT_AUTH_FAILED', `invalid smart-wallet contract id \"${contractId}\"`, {\n      cause,\n    });\n  }\n  return contract.call(method, ...args);\n}\n\nexport interface BuildAddSignerOptions {\n  /** The smart-wallet C-address the signer is being added to. */\n  walletContractId: string;\n  /** The signer to add — a `Secp256r1SignerSpec`, or a pre-built `Signer` ScVal. */\n  signer: Secp256r1SignerSpec | xdr.ScVal;\n}\n\n/**\n * Build the `wallet.add_signer(signer)` invocation. The resulting invoke-host\n * operation requires the wallet's OWN auth: an EXISTING signer authorizes adding\n * the new one, which is what keeps a lost device from locking the user out.\n * Sign the produced transaction's auth entry with\n * `signTransaction(.., { target: 'smart-wallet' })`.\n */\nexport function buildAddSignerOperation(options: BuildAddSignerOptions): xdr.Operation {\n  const signerScVal =\n    options.signer instanceof xdr.ScVal ? options.signer : buildSecp256r1Signer(options.signer);\n  return contractCall(options.walletContractId, 'add_signer', signerScVal);\n}\n\nexport interface BuildRemoveSignerOptions {\n  walletContractId: string;\n  /** Raw credential-id bytes of the signer to remove (its `SignerKey`). */\n  credentialId: Uint8Array;\n}\n\n/** Build the `wallet.remove_signer(SignerKey::Secp256r1(id))` invocation (wallet-authorized). */\nexport function buildRemoveSignerOperation(options: BuildRemoveSignerOptions): xdr.Operation {\n  if (options.credentialId.length === 0) {\n    throw new KitError('CONTRACT_AUTH_FAILED', 'buildRemoveSignerOperation: empty credential id');\n  }\n  return contractCall(\n    options.walletContractId,\n    'remove_signer',\n    buildSignerKeyScVal(options.credentialId),\n  );\n}\n","import { xdr } from '@stellar/stellar-sdk';\nimport { p256 } from '@noble/curves/nist';\nimport { sha256 } from '../internal/sha256';\nimport { concatBytes } from '../internal/bytes';\nimport { bytesToBase64Url, bytesToUtf8 } from '../internal/encoding';\nimport { authEntryChallengeBytes } from './preimage';\n\nexport interface CheckAuthResult {\n  success: boolean;\n  /** clientDataJSON.challenge === base64url(preimage hash). */\n  challengeBound: boolean;\n  /** secp256r1_verify over SHA256(authData ‖ SHA256(cdj)) passed. */\n  signatureValid: boolean;\n  reason?: string;\n}\n\nfunction fail(reason: string): CheckAuthResult {\n  return { success: false, challengeBound: false, signatureValid: false, reason };\n}\n\n/**\n * Verify a bare `Secp256r1Signature` ScMap ({ authenticator_data,\n * client_data_json, signature }) against a public key + the expected signature\n * payload. Shared by the single-signer and smart-wallet reference verifiers.\n */\nfunction verifySecp256r1StructMap(\n  structMap: xdr.ScMapEntry[],\n  publicKey: Uint8Array,\n  signaturePayload: Uint8Array,\n): { ok: boolean; challengeBound: boolean; signatureValid: boolean; reason?: string } {\n  const field = (name: string): Uint8Array | undefined => {\n    const e = structMap.find((x) => x.key().sym().toString() === name);\n    return e ? new Uint8Array(e.val().bytes()) : undefined;\n  };\n  const authenticatorData = field('authenticator_data');\n  const clientDataJSON = field('client_data_json');\n  const signature = field('signature');\n  if (!authenticatorData || !clientDataJSON || !signature) {\n    return { ok: false, challengeBound: false, signatureValid: false, reason: 'missing fields' };\n  }\n  if (signature.length !== 64) {\n    return {\n      ok: false,\n      challengeBound: false,\n      signatureValid: false,\n      reason: 'not 64-byte compact',\n    };\n  }\n  let challengeBound = false;\n  try {\n    const cdj = JSON.parse(bytesToUtf8(clientDataJSON)) as { challenge?: string };\n    challengeBound = cdj.challenge === bytesToBase64Url(signaturePayload);\n  } catch {\n    challengeBound = false;\n  }\n  // Host fn semantics: no low-S enforcement (lowS:false), compact format.\n  const digest = sha256(concatBytes(authenticatorData, sha256(clientDataJSON)));\n  const signatureValid = p256.verify(signature, digest, publicKey, {\n    lowS: false,\n    format: 'compact',\n  });\n  return { ok: challengeBound && signatureValid, challengeBound, signatureValid };\n}\n\n/**\n * A faithful JavaScript model of the on-chain `__check_auth` (kalepail\n * `webauthn-wallet` `verify.rs`): reconstruct `SHA256(authenticator_data ‖\n * SHA256(client_data_json))`, run `secp256r1_verify` (which does NOT enforce\n * low-S — hence the client-side normalization), and assert challenge-binding\n * (`clientDataJSON.challenge === base64url(signature_payload)`). Lets us prove\n * the assembly without a live Soroban RPC; the real on-chain run is exercised\n * by the kit integration (S17) and the demo (S21).\n */\nexport function referenceCheckAuth(\n  entry: xdr.SorobanAuthorizationEntry,\n  publicKey: Uint8Array,\n  networkPassphrase: string,\n): CheckAuthResult {\n  if (entry.credentials().switch().name !== 'sorobanCredentialsAddress') {\n    return fail('no address credentials');\n  }\n  // The signature is the Secp256r1Signature struct directly: a sorted ScMap\n  // { authenticator_data, client_data_json, signature } (see assemble.ts).\n  const structMap = entry.credentials().address().signature().map();\n  if (!structMap) return fail('signature is not a Secp256r1Signature map');\n\n  const signaturePayload = authEntryChallengeBytes(entry, networkPassphrase);\n  const r = verifySecp256r1StructMap(structMap, publicKey, signaturePayload);\n  return { success: r.ok, challengeBound: r.challengeBound, signatureValid: r.signatureValid };\n}\n\nexport interface SmartWalletCheckAuthResult {\n  success: boolean;\n  signers: { credentialId: string; challengeBound: boolean; signatureValid: boolean }[];\n  reason?: string;\n}\n\n/**\n * A reference model of passkey-kit's smart-wallet `__check_auth`: unwrap the\n * `Signatures(Map<SignerKey, Signature>)` value (`ScVal::Vec([ScVal::Map(...)])`),\n * and for each `SignerKey::Secp256r1(id) => Signature::Secp256r1(struct)` entry,\n * look up that credential id's SEC-1 public key and verify the struct. Succeeds\n * only when the map is non-empty and every signer verifies + is challenge-bound.\n * `publicKeyFor` receives the lowercase-hex credential id.\n */\nexport function referenceSmartWalletCheckAuth(\n  entry: xdr.SorobanAuthorizationEntry,\n  publicKeyFor: (credentialIdHex: string) => Uint8Array | undefined,\n  networkPassphrase: string,\n): SmartWalletCheckAuthResult {\n  if (entry.credentials().switch().name !== 'sorobanCredentialsAddress') {\n    return { success: false, signers: [], reason: 'no address credentials' };\n  }\n  const sig = entry.credentials().address().signature();\n  const map = sig.switch().name === 'scvVec' ? sig.vec()?.[0]?.map() : undefined;\n  if (!map) {\n    return { success: false, signers: [], reason: 'signature is not a Signatures(Map) vec' };\n  }\n  if (map.length === 0) return { success: false, signers: [], reason: 'empty signatures map' };\n\n  const signaturePayload = authEntryChallengeBytes(entry, networkPassphrase);\n  const signers: SmartWalletCheckAuthResult['signers'] = [];\n  let allOk = true;\n\n  for (const e of map) {\n    const keyVec = e.key().vec();\n    const idBytes = keyVec?.[1]?.bytes();\n    const credentialId = idBytes ? Buffer.from(idBytes).toString('hex') : '';\n    // Signature::Secp256r1(struct) → scvVec([Symbol, structMap]).\n    const structMap = e.val().vec()?.[1]?.map();\n    const publicKey = publicKeyFor(credentialId);\n    if (!structMap || !publicKey) {\n      allOk = false;\n      signers.push({ credentialId, challengeBound: false, signatureValid: false });\n      continue;\n    }\n    const r = verifySecp256r1StructMap(structMap, publicKey, signaturePayload);\n    if (!r.ok) allOk = false;\n    signers.push({\n      credentialId,\n      challengeBound: r.challengeBound,\n      signatureValid: r.signatureValid,\n    });\n  }\n  return { success: allOk, signers };\n}\n","import { rpc, TransactionBuilder } from '@stellar/stellar-sdk';\nimport { KitError } from '../errors';\nimport type { SubmissionAdapter, SubmitResult } from './types';\n\nexport interface DirectSubmissionOptions {\n  rpcUrl: string;\n  networkPassphrase: string;\n  allowHttp?: boolean;\n  /** Max confirmation-poll attempts before failing with NETWORK_ERROR (default 30). */\n  pollAttempts?: number;\n  /** Delay between confirmation polls, in ms (default 1000). */\n  pollIntervalMs?: number;\n}\n\n/**\n * Default, zero-infra submission: send straight to soroban-rpc and poll. No\n * relayer, no API key. Swappable with `launchtube`/`openzeppelinRelayer` with\n * zero ceremony changes (same `SubmissionAdapter` shape).\n */\nexport function directSubmission(options: DirectSubmissionOptions): SubmissionAdapter {\n  const server = new rpc.Server(options.rpcUrl, {\n    allowHttp: options.allowHttp ?? options.rpcUrl.startsWith('http://'),\n  });\n  const attempts = options.pollAttempts ?? 30;\n  const intervalMs = options.pollIntervalMs ?? 1000;\n  return {\n    async send(signedTxXdr: string): Promise<SubmitResult> {\n      const tx = TransactionBuilder.fromXDR(signedTxXdr, options.networkPassphrase);\n      let sent;\n      try {\n        sent = await server.sendTransaction(tx);\n      } catch (cause) {\n        throw new KitError('NETWORK_ERROR', 'failed to submit transaction to soroban-rpc', {\n          cause,\n        });\n      }\n      if (sent.status === 'ERROR') {\n        return {\n          status: 'FAILED',\n          hash: sent.hash,\n          errorResultXdr: sent.errorResult?.toXDR('base64'),\n        };\n      }\n      // Bounded polling: give up (NETWORK_ERROR) instead of hanging forever.\n      let final;\n      try {\n        final = await server.pollTransaction(sent.hash, {\n          attempts,\n          sleepStrategy: () => intervalMs,\n        });\n      } catch (cause) {\n        throw new KitError(\n          'NETWORK_ERROR',\n          `transaction ${sent.hash} was not confirmed after ${String(attempts)} polls`,\n          { cause },\n        );\n      }\n      if (final.status === rpc.Api.GetTransactionStatus.NOT_FOUND) {\n        throw new KitError(\n          'NETWORK_ERROR',\n          `transaction ${sent.hash} still NOT_FOUND after ${String(attempts)} polls`,\n        );\n      }\n      const success = final.status === rpc.Api.GetTransactionStatus.SUCCESS;\n      return {\n        status: success ? 'SUCCESS' : 'FAILED',\n        hash: sent.hash,\n        returnValue: success ? (final as { returnValue?: unknown }).returnValue : undefined,\n      };\n    },\n  };\n}\n","import { Keypair, TransactionBuilder, rpc, xdr } from '@stellar/stellar-sdk';\nimport { KitError } from '../errors';\nimport { directSubmission } from '../adapters/direct';\nimport type { SubmissionAdapter, SubmitResult } from '../adapters/types';\nimport { signTransaction, type SignVerifyOptions, type WebAuthnSigner } from './sign';\n\nexport interface SendSmartWalletTxOptions {\n  /** The single wallet-authorized invocation to run (SAC transfer, contract call, add_signer, …). */\n  operation: xdr.Operation;\n  networkPassphrase: string;\n  rpcUrl: string;\n  /**\n   * Secret of the funded classic account that pays the fee + sequences the tx. The\n   * passkey provides the wallet's AUTH; this only sponsors the envelope\n   * (ephemeral/friendbot-funded in a demo; a relayer key otherwise).\n   */\n  sourceSecret: string;\n  /** The wallet's passkey signer that authorizes the invocation. */\n  sign: WebAuthnSigner;\n  /** Where the signed tx is submitted. Defaults to `direct` (soroban-rpc). */\n  submission?: SubmissionAdapter;\n  /** Opt-in pre-flight validation of the authorizing assertion. */\n  verify?: SignVerifyOptions;\n  fee?: string;\n  timeoutSeconds?: number;\n  /** Ledgers ahead of `latestLedger` to expire the auth signature at (default 60). */\n  signatureExpirationLedgerOffset?: number;\n  allowHttp?: boolean;\n}\n\nconst DEFAULT_EXPIRATION_OFFSET = 60;\n\n/**\n * Sign and submit a single passkey-authorized smart-wallet transaction — the\n * general primitive behind every smart-wallet action (payment, contract call,\n * add/remove signer). The full dance:\n *\n *   1. recording sim → assemble (discovers the wallet's auth requirement);\n *   2. sign the wallet auth entry with the passkey (smart-wallet Signatures map),\n *      binding the expiration ledger the contract re-derives;\n *   3. enforcing re-sim of the SIGNED tx — recording auth never runs the custom\n *      account's `__check_auth`, so it misses the signer-storage reads and\n *      under-counts instructions; the enforcing pass yields the true footprint +\n *      resources, and doubles as a client-side proof the auth is accepted;\n *   4. pay the fee from the classic source and submit via the pluggable adapter.\n *\n * tx.fee + sorobanData are outside the auth preimage, so re-assembling with the\n * enforcing resources never invalidates the signature. Throws a typed KitError on\n * any simulation/validation failure.\n */\nexport async function sendSmartWalletTx(options: SendSmartWalletTxOptions): Promise<SubmitResult> {\n  const server = new rpc.Server(options.rpcUrl, {\n    allowHttp: options.allowHttp ?? options.rpcUrl.startsWith('http://'),\n  });\n  let source: Keypair;\n  try {\n    source = Keypair.fromSecret(options.sourceSecret);\n  } catch (cause) {\n    throw new KitError('CONTRACT_AUTH_FAILED', 'invalid fee-source secret', { cause });\n  }\n\n  const account = await server.getAccount(source.publicKey());\n  const tx = new TransactionBuilder(account, {\n    fee: options.fee ?? '2000000',\n    networkPassphrase: options.networkPassphrase,\n  })\n    .addOperation(options.operation)\n    .setTimeout(options.timeoutSeconds ?? 120)\n    .build();\n\n  const recSim = await server.simulateTransaction(tx);\n  if (!rpc.Api.isSimulationSuccess(recSim)) {\n    const detail = 'error' in recSim ? String(recSim.error) : 'unknown simulation error';\n    throw new KitError(\n      'CONTRACT_AUTH_FAILED',\n      `smart-wallet tx simulation failed: ${detail.slice(0, 300)}`,\n    );\n  }\n  const prepared = rpc.assembleTransaction(tx, recSim).build();\n\n  const signatureExpirationLedger =\n    (await server.getLatestLedger()).sequence +\n    (options.signatureExpirationLedgerOffset ?? DEFAULT_EXPIRATION_OFFSET);\n  const signedAuthXdr = await signTransaction(prepared.toXDR(), {\n    networkPassphrase: options.networkPassphrase,\n    sign: options.sign,\n    target: 'smart-wallet',\n    signatureExpirationLedger,\n    verify: options.verify,\n  });\n\n  const signedTx = TransactionBuilder.fromXDR(signedAuthXdr, options.networkPassphrase);\n  const enfSim = await server.simulateTransaction(signedTx);\n  if (!rpc.Api.isSimulationSuccess(enfSim)) {\n    const detail = 'error' in enfSim ? String(enfSim.error) : 'unknown simulation error';\n    throw new KitError(\n      'CONTRACT_AUTH_FAILED',\n      `signed smart-wallet tx failed enforcing simulation (auth rejected?): ${detail.slice(0, 300)}`,\n    );\n  }\n\n  const finalTx = rpc.assembleTransaction(signedTx, enfSim).build();\n  finalTx.sign(source);\n  const submission =\n    options.submission ??\n    directSubmission({\n      rpcUrl: options.rpcUrl,\n      networkPassphrase: options.networkPassphrase,\n      allowHttp: options.allowHttp,\n    });\n  return submission.send(finalTx.toXDR());\n}\n"]}

package/dist/sign.d.cts

@@ -0,0 +1,143 @@
+export { S as SmartWalletCheckAuthResult, d as decodeChallenge, e as encodeChallenge, p as parseAuthenticatorData, b as parseClientDataJSON, r as referenceCheckAuth, c as referenceSmartWalletCheckAuth, v as verifyAssertionSignature, f as verifyClientDataJSON, g as verifyRpIdHash } from './checkAuth-C2AcXqFe.cjs';
+import { b as WebAuthnSigner, A as AssertionResult } from './sign-Cfg0NM0T.cjs';
+export { S as SignVerifyOptions, a as SorobanSignOptions, W as WalletTarget, s as signAuthEntry, c as signTransaction } from './sign-Cfg0NM0T.cjs';
+import { W as WebAuthnClient } from './types--WNl-Sda.cjs';
+import { xdr } from '@stellar/stellar-sdk';
+export { B as BuildAddSignerOptions, a as BuildRemoveSignerOptions, S as Secp256r1SignerSpec, b as SendSmartWalletTxOptions, c as SignerStorage, d as buildAddSignerOperation, e as buildRemoveSignerOperation, f as buildSecp256r1Signer, s as sendSmartWalletTx } from './submit-BDKADQq0.cjs';
+
+/**
+ * Convert an ASN.1 DER ECDSA signature to the 64-byte raw `R‖S` form Soroban's
+ * `secp256r1_verify` expects, using noble's audited DER parser (R and S are
+ * left-padded to 32 bytes big-endian). Rejects malformed or over-long input.
+ *
+ * Note: this does NOT enforce low-S — that normalization is added in S04
+ * (YK-430). The output here mirrors the signature exactly as parsed.
+ */
+declare function derToCompact(der: Uint8Array): Uint8Array;
+/** True if a 64-byte compact signature is in canonical low-S form (S ≤ n/2). */
+declare function isLowS(compactSignature: Uint8Array): boolean;
+/**
+ * Normalize a 64-byte compact signature to canonical low-S: if S > n/2, replace
+ * S with n − S (anchor LOW_S_NORMALIZATION, invariant #2). ~50% of Apple Touch
+ * ID / Face ID assertions are high-S and Soroban's `secp256r1_verify` does not
+ * enforce low-S, so the SDK MUST emit low-S before a signature reaches a
+ * contract. Idempotent: low-S input is returned unchanged.
+ */
+declare function normalizeLowS(compactSignature: Uint8Array): Uint8Array;
+/** DER → 64-byte canonical low-S compact — the conversion the signing ceremony uses. */
+declare function derToCompactLowS(der: Uint8Array): Uint8Array;
+
+/**
+ * Reconstruct the 32-byte payload the authenticator signed and that Soroban's
+ * `__check_auth` re-derives on-chain:
+ *
+ *   SHA256( authenticatorData ‖ SHA256(clientDataJSON) )
+ */
+declare function reconstructSignedPayload(input: {
+    authenticatorData: Uint8Array;
+    clientDataJSON: Uint8Array;
+}): Uint8Array;
+
+interface BrowserPasskeySignerOptions {
+    /** The Relying Party ID (your site's registrable domain). */
+    rpId: string;
+    /**
+     * Restrict the prompt to specific credential ids (base64url) — pass the
+     * `credentialId` from `create` / `connect` so the OS offers the right passkey.
+     * Omit (or leave empty) for a discoverable prompt over any resident passkey.
+     */
+    allowCredentials?: string[];
+    userVerification?: 'discouraged' | 'preferred' | 'required';
+    /** Inject a custom client (tests / non-browser). Defaults to `browserWebAuthnClient()`. */
+    webauthn?: WebAuthnClient;
+}
+/**
+ * Adapt `navigator.credentials.get` into the `WebAuthnSigner` that
+ * `signTransaction` / `signAuthEntry` expect — so wiring a passkey is one line:
+ *
+ * ```ts
+ * const sign = browserPasskeySigner({ rpId, allowCredentials: [credentialId] });
+ * const signedXdr = await signTransaction(txXdr, { networkPassphrase, sign });
+ * ```
+ *
+ * The SDK hands the signer a base64url challenge (the Soroban auth preimage);
+ * this decodes it to the raw bytes WebAuthn signs over, runs the assertion, and
+ * returns the fields the auth assembler needs. The DER signature is low-S
+ * normalized downstream (invariant #2) — nothing here weakens that.
+ */
+declare function browserPasskeySigner(options: BrowserPasskeySignerOptions): WebAuthnSigner;
+
+/**
+ * Compute the auth-entry preimage hash that `__check_auth` reconstructs and that
+ * becomes the WebAuthn `challenge`:
+ *   SHA256( XDR( HashIdPreimage::SorobanAuthorization{ networkId, nonce,
+ *   signatureExpirationLedger, invocation } ) )
+ * where networkId = SHA256(networkPassphrase).
+ */
+declare function authEntryChallengeBytes(entry: xdr.SorobanAuthorizationEntry, networkPassphrase: string): Uint8Array;
+/** The base64url challenge string the authenticator signs (43 chars). */
+declare function authEntryChallenge(entry: xdr.SorobanAuthorizationEntry, networkPassphrase: string): string;
+
+/**
+ * Set an address-credential auth entry's signature to the `Secp256r1Signature`
+ * struct the on-chain `__check_auth` consumes:
+ *
+ *   ScVal::Map { authenticator_data: Bytes, client_data_json: Bytes, signature: BytesN<64> }
+ *
+ * Map keys are alphabetical, so the ScMap is canonically sorted as Soroban
+ * requires. `signature` MUST already be 64-byte low-S compact (`signAuthEntry`
+ * normalizes before calling this). This is the exact shape the audited
+ * webauthn-verifier reference expects — proven on testnet by the on-chain
+ * integration test (scripts/onchain-e2e.ts).
+ */
+declare function applyAssertionToEntry(entry: xdr.SorobanAuthorizationEntry, assertion: AssertionResult): xdr.SorobanAuthorizationEntry;
+
+/**
+ * The passkey-kit / `webauthn-wallet` smart-wallet ABI target.
+ *
+ * Our own single-signer account declares `type Signature = Secp256r1Signature`
+ * and consumes the bare struct (see `assemble.ts`). passkey-kit's smart-wallet
+ * declares `type Signature = Signatures`, so authorizing it needs the assertion
+ * wrapped as `Signatures(Map<SignerKey, Signature>)`. The exact shape, the raw-
+ * credential-id key, and the canonical map ordering below are confirmed by
+ * kalepail (passkey-kit author) in issue #32 against v1 / v0.13.0 (Protocol 27,
+ * independently audited); the wire shape is unchanged from v0.12.
+ */
+/**
+ * `SignerKey::Secp256r1(Bytes)` → `scvVec([Symbol("Secp256r1"), Bytes(rawId)])`.
+ * The key is the RAW WebAuthn credential-id bytes (base64url-decoded `rawId`):
+ * never hashed, never the UTF-8 of the base64url string, and never the public
+ * key — the SEC-1 public key lives in `SignerVal` on-chain, not in the key.
+ */
+declare function buildSignerKeyScVal(credentialId: Uint8Array): xdr.ScVal;
+/** `Signature::Secp256r1(Secp256r1Signature)` → `scvVec([Symbol("Secp256r1"), <bare struct map>])`. */
+declare function buildSmartWalletSignatureVariant(assertion: AssertionResult): xdr.ScVal;
+/**
+ * Canonical Soroban-host ordering for `SignerKey` map keys. The host requires
+ * `Map<SignerKey, _>` entries sorted by ScVal `Ord` — an **element-wise byte
+ * comparison**, NOT a length-major XDR-hex / `localeCompare` string sort. This is
+ * the one correctness landmine kalepail flagged in #32: passkey-kit v1 replaced
+ * its old string sort with exactly this because the old approach could mis-order
+ * same-variant keys of differing length, producing a map the host rejects.
+ *
+ * We compare the enum variant symbol first, then the payload bytes element-wise,
+ * so homogeneous `Secp256r1` keys (the multi-passkey case) sort purely by their
+ * raw credential-id bytes. (Ordering across mixed variant types relies on the
+ * variant names being capitalized single words, which matches the host's symbol
+ * order; a Policy/Address-keyed multi-sig is out of scope for this passkey SDK.)
+ */
+declare function compareSignerKeyScVal(a: xdr.ScVal, b: xdr.ScVal): number;
+/**
+ * Assemble/merge a passkey assertion into an address-credential auth entry as the
+ * smart-wallet `Signatures(Map<SignerKey, Signature>)` wire shape
+ * (`ScVal::Vec([ScVal::Map(...)])`). `assertion.signature` MUST already be 64-byte
+ * low-S compact (`signAuthEntry` normalizes first). Existing map entries — a
+ * partially-signed multi-sig entry — are preserved; an entry for the same signer
+ * key is replaced; then the whole map is canonically sorted.
+ *
+ * Use this for the passkey-kit / webauthn-wallet ABI. For our own single-signer
+ * account (`type Signature = Secp256r1Signature`) use `applyAssertionToEntry`.
+ */
+declare function applyAssertionToSmartWalletEntry(entry: xdr.SorobanAuthorizationEntry, assertion: AssertionResult): xdr.SorobanAuthorizationEntry;
+
+export { type BrowserPasskeySignerOptions, applyAssertionToEntry, applyAssertionToSmartWalletEntry, authEntryChallenge, authEntryChallengeBytes, browserPasskeySigner, buildSignerKeyScVal, buildSmartWalletSignatureVariant, compareSignerKeyScVal, derToCompact, derToCompactLowS, isLowS, normalizeLowS, reconstructSignedPayload };

package/dist/sign.d.ts

@@ -0,0 +1,143 @@
+export { S as SmartWalletCheckAuthResult, d as decodeChallenge, e as encodeChallenge, p as parseAuthenticatorData, b as parseClientDataJSON, r as referenceCheckAuth, c as referenceSmartWalletCheckAuth, v as verifyAssertionSignature, f as verifyClientDataJSON, g as verifyRpIdHash } from './checkAuth-C2AcXqFe.js';
+import { b as WebAuthnSigner, A as AssertionResult } from './sign-Cfg0NM0T.js';
+export { S as SignVerifyOptions, a as SorobanSignOptions, W as WalletTarget, s as signAuthEntry, c as signTransaction } from './sign-Cfg0NM0T.js';
+import { W as WebAuthnClient } from './types--WNl-Sda.js';
+import { xdr } from '@stellar/stellar-sdk';
+export { B as BuildAddSignerOptions, a as BuildRemoveSignerOptions, S as Secp256r1SignerSpec, b as SendSmartWalletTxOptions, c as SignerStorage, d as buildAddSignerOperation, e as buildRemoveSignerOperation, f as buildSecp256r1Signer, s as sendSmartWalletTx } from './submit-BO0Nh49I.js';
+
+/**
+ * Convert an ASN.1 DER ECDSA signature to the 64-byte raw `R‖S` form Soroban's
+ * `secp256r1_verify` expects, using noble's audited DER parser (R and S are
+ * left-padded to 32 bytes big-endian). Rejects malformed or over-long input.
+ *
+ * Note: this does NOT enforce low-S — that normalization is added in S04
+ * (YK-430). The output here mirrors the signature exactly as parsed.
+ */
+declare function derToCompact(der: Uint8Array): Uint8Array;
+/** True if a 64-byte compact signature is in canonical low-S form (S ≤ n/2). */
+declare function isLowS(compactSignature: Uint8Array): boolean;
+/**
+ * Normalize a 64-byte compact signature to canonical low-S: if S > n/2, replace
+ * S with n − S (anchor LOW_S_NORMALIZATION, invariant #2). ~50% of Apple Touch
+ * ID / Face ID assertions are high-S and Soroban's `secp256r1_verify` does not
+ * enforce low-S, so the SDK MUST emit low-S before a signature reaches a
+ * contract. Idempotent: low-S input is returned unchanged.
+ */
+declare function normalizeLowS(compactSignature: Uint8Array): Uint8Array;
+/** DER → 64-byte canonical low-S compact — the conversion the signing ceremony uses. */
+declare function derToCompactLowS(der: Uint8Array): Uint8Array;
+
+/**
+ * Reconstruct the 32-byte payload the authenticator signed and that Soroban's
+ * `__check_auth` re-derives on-chain:
+ *
+ *   SHA256( authenticatorData ‖ SHA256(clientDataJSON) )
+ */
+declare function reconstructSignedPayload(input: {
+    authenticatorData: Uint8Array;
+    clientDataJSON: Uint8Array;
+}): Uint8Array;
+
+interface BrowserPasskeySignerOptions {
+    /** The Relying Party ID (your site's registrable domain). */
+    rpId: string;
+    /**
+     * Restrict the prompt to specific credential ids (base64url) — pass the
+     * `credentialId` from `create` / `connect` so the OS offers the right passkey.
+     * Omit (or leave empty) for a discoverable prompt over any resident passkey.
+     */
+    allowCredentials?: string[];
+    userVerification?: 'discouraged' | 'preferred' | 'required';
+    /** Inject a custom client (tests / non-browser). Defaults to `browserWebAuthnClient()`. */
+    webauthn?: WebAuthnClient;
+}
+/**
+ * Adapt `navigator.credentials.get` into the `WebAuthnSigner` that
+ * `signTransaction` / `signAuthEntry` expect — so wiring a passkey is one line:
+ *
+ * ```ts
+ * const sign = browserPasskeySigner({ rpId, allowCredentials: [credentialId] });
+ * const signedXdr = await signTransaction(txXdr, { networkPassphrase, sign });
+ * ```
+ *
+ * The SDK hands the signer a base64url challenge (the Soroban auth preimage);
+ * this decodes it to the raw bytes WebAuthn signs over, runs the assertion, and
+ * returns the fields the auth assembler needs. The DER signature is low-S
+ * normalized downstream (invariant #2) — nothing here weakens that.
+ */
+declare function browserPasskeySigner(options: BrowserPasskeySignerOptions): WebAuthnSigner;
+
+/**
+ * Compute the auth-entry preimage hash that `__check_auth` reconstructs and that
+ * becomes the WebAuthn `challenge`:
+ *   SHA256( XDR( HashIdPreimage::SorobanAuthorization{ networkId, nonce,
+ *   signatureExpirationLedger, invocation } ) )
+ * where networkId = SHA256(networkPassphrase).
+ */
+declare function authEntryChallengeBytes(entry: xdr.SorobanAuthorizationEntry, networkPassphrase: string): Uint8Array;
+/** The base64url challenge string the authenticator signs (43 chars). */
+declare function authEntryChallenge(entry: xdr.SorobanAuthorizationEntry, networkPassphrase: string): string;
+
+/**
+ * Set an address-credential auth entry's signature to the `Secp256r1Signature`
+ * struct the on-chain `__check_auth` consumes:
+ *
+ *   ScVal::Map { authenticator_data: Bytes, client_data_json: Bytes, signature: BytesN<64> }
+ *
+ * Map keys are alphabetical, so the ScMap is canonically sorted as Soroban
+ * requires. `signature` MUST already be 64-byte low-S compact (`signAuthEntry`
+ * normalizes before calling this). This is the exact shape the audited
+ * webauthn-verifier reference expects — proven on testnet by the on-chain
+ * integration test (scripts/onchain-e2e.ts).
+ */
+declare function applyAssertionToEntry(entry: xdr.SorobanAuthorizationEntry, assertion: AssertionResult): xdr.SorobanAuthorizationEntry;
+
+/**
+ * The passkey-kit / `webauthn-wallet` smart-wallet ABI target.
+ *
+ * Our own single-signer account declares `type Signature = Secp256r1Signature`
+ * and consumes the bare struct (see `assemble.ts`). passkey-kit's smart-wallet
+ * declares `type Signature = Signatures`, so authorizing it needs the assertion
+ * wrapped as `Signatures(Map<SignerKey, Signature>)`. The exact shape, the raw-
+ * credential-id key, and the canonical map ordering below are confirmed by
+ * kalepail (passkey-kit author) in issue #32 against v1 / v0.13.0 (Protocol 27,
+ * independently audited); the wire shape is unchanged from v0.12.
+ */
+/**
+ * `SignerKey::Secp256r1(Bytes)` → `scvVec([Symbol("Secp256r1"), Bytes(rawId)])`.
+ * The key is the RAW WebAuthn credential-id bytes (base64url-decoded `rawId`):
+ * never hashed, never the UTF-8 of the base64url string, and never the public
+ * key — the SEC-1 public key lives in `SignerVal` on-chain, not in the key.
+ */
+declare function buildSignerKeyScVal(credentialId: Uint8Array): xdr.ScVal;
+/** `Signature::Secp256r1(Secp256r1Signature)` → `scvVec([Symbol("Secp256r1"), <bare struct map>])`. */
+declare function buildSmartWalletSignatureVariant(assertion: AssertionResult): xdr.ScVal;
+/**
+ * Canonical Soroban-host ordering for `SignerKey` map keys. The host requires
+ * `Map<SignerKey, _>` entries sorted by ScVal `Ord` — an **element-wise byte
+ * comparison**, NOT a length-major XDR-hex / `localeCompare` string sort. This is
+ * the one correctness landmine kalepail flagged in #32: passkey-kit v1 replaced
+ * its old string sort with exactly this because the old approach could mis-order
+ * same-variant keys of differing length, producing a map the host rejects.
+ *
+ * We compare the enum variant symbol first, then the payload bytes element-wise,
+ * so homogeneous `Secp256r1` keys (the multi-passkey case) sort purely by their
+ * raw credential-id bytes. (Ordering across mixed variant types relies on the
+ * variant names being capitalized single words, which matches the host's symbol
+ * order; a Policy/Address-keyed multi-sig is out of scope for this passkey SDK.)
+ */
+declare function compareSignerKeyScVal(a: xdr.ScVal, b: xdr.ScVal): number;
+/**
+ * Assemble/merge a passkey assertion into an address-credential auth entry as the
+ * smart-wallet `Signatures(Map<SignerKey, Signature>)` wire shape
+ * (`ScVal::Vec([ScVal::Map(...)])`). `assertion.signature` MUST already be 64-byte
+ * low-S compact (`signAuthEntry` normalizes first). Existing map entries — a
+ * partially-signed multi-sig entry — are preserved; an entry for the same signer
+ * key is replaced; then the whole map is canonically sorted.
+ *
+ * Use this for the passkey-kit / webauthn-wallet ABI. For our own single-signer
+ * account (`type Signature = Secp256r1Signature`) use `applyAssertionToEntry`.
+ */
+declare function applyAssertionToSmartWalletEntry(entry: xdr.SorobanAuthorizationEntry, assertion: AssertionResult): xdr.SorobanAuthorizationEntry;
+
+export { type BrowserPasskeySignerOptions, applyAssertionToEntry, applyAssertionToSmartWalletEntry, authEntryChallenge, authEntryChallengeBytes, browserPasskeySigner, buildSignerKeyScVal, buildSmartWalletSignatureVariant, compareSignerKeyScVal, derToCompact, derToCompactLowS, isLowS, normalizeLowS, reconstructSignedPayload };

package/dist/sign.js

@@ -0,0 +1,8 @@
+export { browserPasskeySigner, referenceCheckAuth, referenceSmartWalletCheckAuth } from './chunk-LM2AZXKZ.js';
+export { buildAddSignerOperation, buildRemoveSignerOperation, buildSecp256r1Signer, sendSmartWalletTx } from './chunk-UV5HORMF.js';
+export { applyAssertionToEntry, applyAssertionToSmartWalletEntry, authEntryChallenge, authEntryChallengeBytes, buildSignerKeyScVal, buildSmartWalletSignatureVariant, compareSignerKeyScVal, derToCompact, derToCompactLowS, isLowS, normalizeLowS, reconstructSignedPayload, signAuthEntry, signTransaction, verifyAssertionSignature } from './chunk-BIRF5I6I.js';
+export { decodeChallenge, encodeChallenge, parseAuthenticatorData, parseClientDataJSON, verifyClientDataJSON, verifyRpIdHash } from './chunk-JNJ2FY45.js';
+import './chunk-LB4HOTLV.js';
+import './chunk-AMYFJQAC.js';
+//# sourceMappingURL=sign.js.map
+//# sourceMappingURL=sign.js.map

package/dist/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"sign.js"}