@sphereon/ssi-sdk-ext.identifier-resolution 0.28.1-feature.esm.cjs.9 → 0.28.1-feature.oyd.cmsm.improv.16

package/dist/functions/externalOIDFIdentifier.js

@@ -0,0 +1,106 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveExternalOIDFEntityIdIdentifier = resolveExternalOIDFEntityIdIdentifier;
+const ssi_sdk_agent_config_1 = require("@sphereon/ssi-sdk.agent-config");
+const u8a = __importStar(require("uint8arrays"));
+/**
+ * Resolves an OIDF Entity ID against multiple trust anchors to establish trusted relationships
+ *
+ * @param opts Configuration options containing the identifier to resolve and trust anchors to validate against
+ * @param context Agent context that must include the OIDF client plugin and JWT verification capabilities
+ *
+ * @returns Promise resolving to an ExternalIdentifierOIDFEntityIdResult containing:
+ *  - trustedAnchors: Record mapping trust anchors to their public key hexes
+ *  - errorList: Optional record of errors encountered per trust anchor
+ *  - jwks: Array of JWK information from the trust chain
+ *  - trustEstablished: Boolean indicating if any trust relationships were established
+ *
+ * @throws Error if trust anchors are missing or JWT verification plugin is not enabled
+ */
+function resolveExternalOIDFEntityIdIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        let { trustAnchors, identifier } = opts;
+        if (!trustAnchors || trustAnchors.length === 0) {
+            return Promise.reject(Error('ExternalIdentifierOIDFEntityIdOpts is missing the trustAnchors'));
+        }
+        if (!(0, ssi_sdk_agent_config_1.contextHasPlugin)(context, 'jwtVerifyJwsSignature')) {
+            return Promise.reject(Error('For OIDFEntityId resolving the agent needs to have the JwtService plugin enabled'));
+        }
+        const trustedAnchors = new Set();
+        const errorList = {};
+        const jwkInfos = [];
+        let payload;
+        for (const trustAnchor of trustAnchors) {
+            const resolveResult = yield context.agent.resolveTrustChain({
+                entityIdentifier: identifier,
+                trustAnchors: [trustAnchor],
+            });
+            if (resolveResult.error || !resolveResult.trustChain) {
+                errorList[trustAnchor] = (_a = resolveResult.errorMessage) !== null && _a !== void 0 ? _a : 'unspecified';
+            }
+            else {
+                const trustChain = resolveResult.trustChain.asJsReadonlyArrayView();
+                if (trustChain.length === 0) {
+                    errorList[trustAnchor] = 'Trust chain is empty';
+                    continue;
+                }
+                const jwt = trustChain[0];
+                const jwtVerifyResult = yield context.agent.jwtVerifyJwsSignature({ jws: jwt });
+                if (jwtVerifyResult.error || jwtVerifyResult.critical) {
+                    errorList[trustAnchor] = jwtVerifyResult.message;
+                    continue;
+                }
+                if (jwtVerifyResult.jws.signatures.length === 0) {
+                    errorList[trustAnchor] = 'No signature was present in the trust anchor JWS';
+                    continue;
+                }
+                payload = JSON.parse(u8a.toString(u8a.fromString(jwtVerifyResult.jws.payload, 'base64url')));
+                const signature = jwtVerifyResult.jws.signatures[0];
+                if (signature.identifier.jwks.length === 0) {
+                    errorList[trustAnchor] = 'No JWK was present in the trust anchor signature';
+                    continue;
+                }
+                if (jwkInfos.length === 0) {
+                    // We need the entity JWK only once
+                    jwkInfos.push(...signature.identifier.jwks);
+                }
+                trustedAnchors.add(trustAnchor);
+            }
+        }
+        return Object.assign(Object.assign({ method: 'entity_id', trustedAnchors: Array.from(trustedAnchors) }, (Object.keys(errorList).length > 0 && { errorList })), { jwks: jwkInfos, jwtPayload: payload, trustEstablished: trustedAnchors.size > 0 });
+    });
+}
+//# sourceMappingURL=externalOIDFIdentifier.js.map

package/dist/functions/externalOIDFIdentifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalOIDFIdentifier.js","sourceRoot":"","sources":["../../src/functions/externalOIDFIdentifier.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,sFAsEC;AAvFD,yEAAiE;AAEjE,iDAAkC;AAClC;;;;;;;;;;;;;GAaG;AACH,SAAsB,qCAAqC,CACzD,IAAwC,EACxC,OAAmC;;;QAEnC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;QAEvC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC,CAAA;QAChG,CAAC;QAED,IAAI,CAAC,IAAA,uCAAgB,EAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,CAAC;YACxD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAC,CAAA;QAClH,CAAC;QAED,MAAM,cAAc,GAAuB,IAAI,GAAG,EAAiB,CAAA;QACnE,MAAM,SAAS,GAAwC,EAAE,CAAA;QACzD,MAAM,QAAQ,GAA2B,EAAE,CAAA;QAE3C,IAAI,OAA+B,CAAA;QACnC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAC1D,gBAAgB,EAAE,UAAU;gBAC5B,YAAY,EAAE,CAAC,WAAW,CAAC;aAC5B,CAAC,CAAA;YAEF,IAAI,aAAa,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;gBACrD,SAAS,CAAC,WAAW,CAAC,GAAG,MAAA,aAAa,CAAC,YAAY,mCAAI,aAAa,CAAA;YACtE,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAA0B,aAAa,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAA;gBAC1F,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5B,SAAS,CAAC,WAAW,CAAC,GAAG,sBAAsB,CAAA;oBAC/C,SAAQ;gBACV,CAAC;gBAED,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;gBACzB,MAAM,eAAe,GAAyB,MAAM,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;gBAErG,IAAI,eAAe,CAAC,KAAK,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;oBACtD,SAAS,CAAC,WAAW,CAAC,GAAG,eAAe,CAAC,OAAO,CAAA;oBAChD,SAAQ;gBACV,CAAC;gBAED,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAChD,SAAS,CAAC,WAAW,CAAC,GAAG,kDAAkD,CAAA;oBAC3E,SAAQ;gBACV,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;gBAC5F,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;gBACnD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC3C,SAAS,CAAC,WAAW,CAAC,GAAG,kDAAkD,CAAA;oBAC3E,SAAQ;gBACV,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,mCAAmC;oBACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;gBAC7C,CAAC;gBACD,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACjC,CAAC;QACH,CAAC;QAED,qCACE,MAAM,EAAE,WAAW,EACnB,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IACvC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,KACvD,IAAI,EAAE,QAAQ,EACd,UAAU,EAAE,OAAO,EACnB,gBAAgB,EAAE,cAAc,CAAC,IAAI,GAAG,CAAC,IAC1C;IACH,CAAC;CAAA"}

package/dist/functions/index.d.ts

@@ -0,0 +1,5 @@
+export * from './managedIdentifierFunctions';
+export * from './externalIdentifierFunctions';
+export * from './externalOIDFIdentifier';
+export * from './LegacySupport';
+//# sourceMappingURL=index.d.ts.map

package/dist/functions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/functions/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAA;AAC5C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,0BAA0B,CAAA;AACxC,cAAc,iBAAiB,CAAA"}

package/dist/functions/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./managedIdentifierFunctions"), exports);
+__exportStar(require("./externalIdentifierFunctions"), exports);
+__exportStar(require("./externalOIDFIdentifier"), exports);
+__exportStar(require("./LegacySupport"), exports);
+//# sourceMappingURL=index.js.map

package/dist/functions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/functions/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+DAA4C;AAC5C,gEAA6C;AAC7C,2DAAwC;AACxC,kDAA+B"}

package/dist/functions/managedIdentifierFunctions.d.ts

@@ -0,0 +1,38 @@
+import { IAgentContext, IKeyManager } from '@veramo/core';
+import { IIdentifierResolution, ManagedIdentifierCoseKeyOpts, ManagedIdentifierCoseKeyResult, ManagedIdentifierDidOpts, ManagedIdentifierDidResult, ManagedIdentifierOID4VCIssuerOpts, ManagedIdentifierOID4VCIssuerResult, ManagedIdentifierJwkOpts, ManagedIdentifierJwkResult, ManagedIdentifierKeyOpts, ManagedIdentifierKeyResult, ManagedIdentifierKidOpts, ManagedIdentifierKidResult, ManagedIdentifierOptsOrResult, ManagedIdentifierResult, ManagedIdentifierX5cOpts, ManagedIdentifierX5cResult } from '../types';
+export declare function getManagedKidIdentifier(opts: ManagedIdentifierKidOpts, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierKidResult>;
+export declare function isManagedIdentifierResult(identifier: ManagedIdentifierOptsOrResult & {
+    crypto?: Crypto;
+}): identifier is ManagedIdentifierResult;
+/**
+ * Allows to get a managed identifier result in case identifier options are passed in, but returns the identifier directly in case results are passed in. This means resolution can have happened before, or happens in this method
+ * @param identifier
+ * @param context
+ */
+export declare function ensureManagedIdentifierResult(identifier: ManagedIdentifierOptsOrResult & {
+    crypto?: Crypto;
+}, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierResult>;
+/**
+ * This function is just a convenience function to get a common result. The user already apparently had a key, so could have called the kid version as well
+ * @param opts
+ * @param _context
+ */
+export declare function getManagedKeyIdentifier(opts: ManagedIdentifierKeyOpts, _context?: IAgentContext<any>): Promise<ManagedIdentifierKeyResult>;
+/**
+ * This function is just a convenience function to get a common result. The user already apparently had a key, so could have called the kid version as well
+ * @param opts
+ * @param context
+ */
+export declare function getManagedCoseKeyIdentifier(opts: ManagedIdentifierCoseKeyOpts, context: IAgentContext<any>): Promise<ManagedIdentifierCoseKeyResult>;
+export declare function getManagedDidIdentifier(opts: ManagedIdentifierDidOpts, context: IAgentContext<any>): Promise<ManagedIdentifierDidResult>;
+export declare function getManagedJwkIdentifier(opts: ManagedIdentifierJwkOpts, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierJwkResult>;
+export declare function getManagedX5cIdentifier(opts: ManagedIdentifierX5cOpts & {
+    crypto?: Crypto;
+}, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierX5cResult>;
+export declare function getManagedOID4VCIssuerIdentifier(opts: ManagedIdentifierOID4VCIssuerOpts, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierOID4VCIssuerResult>;
+export declare function getManagedIdentifier(opts: ManagedIdentifierOptsOrResult & {
+    crypto?: Crypto;
+}, context: IAgentContext<IKeyManager>): Promise<ManagedIdentifierResult>;
+export declare function managedIdentifierToKeyResult(identifier: ManagedIdentifierOptsOrResult, context: IAgentContext<IIdentifierResolution & IKeyManager>): Promise<ManagedIdentifierKeyResult>;
+export declare function managedIdentifierToJwk(identifier: ManagedIdentifierOptsOrResult, context: IAgentContext<IIdentifierResolution & IKeyManager>): Promise<ManagedIdentifierJwkResult>;
+//# sourceMappingURL=managedIdentifierFunctions.d.ts.map

package/dist/functions/managedIdentifierFunctions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managedIdentifierFunctions.d.ts","sourceRoot":"","sources":["../../src/functions/managedIdentifierFunctions.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAqB,WAAW,EAAE,MAAM,cAAc,CAAA;AAE5E,OAAO,EACL,qBAAqB,EAWrB,4BAA4B,EAC5B,8BAA8B,EAC9B,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,mCAAmC,EACnC,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,UAAU,CAAA;AAEjB,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAClC,OAAO,CAAC,0BAA0B,CAAC,CAsCrC;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,6BAA6B,GAAG;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,GACA,UAAU,IAAI,uBAAuB,CAEvC;AAED;;;;GAIG;AACH,wBAAsB,6BAA6B,CACjD,UAAU,EAAE,6BAA6B,GAAG;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,EACD,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAClC,OAAO,CAAC,uBAAuB,CAAC,CAGlC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,wBAAwB,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAuBhJ;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,GAC1B,OAAO,CAAC,8BAA8B,CAAC,CAwBzC;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAkD9I;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAClC,OAAO,CAAC,0BAA0B,CAAC,CAuBrC;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,wBAAwB,GAAG;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,EACD,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAClC,OAAO,CAAC,0BAA0B,CAAC,CAkCrC;AAED,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,iCAAiC,EACvC,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAClC,OAAO,CAAC,mCAAmC,CAAC,CAsC9C;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,6BAA6B,GAAG;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,EACD,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAClC,OAAO,CAAC,uBAAuB,CAAC,CA+BlC;AAED,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,6BAA6B,EACzC,OAAO,EAAE,aAAa,CAAC,qBAAqB,GAAG,WAAW,CAAC,GAC1D,OAAO,CAAC,0BAA0B,CAAC,CAWrC;AAED,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,6BAA6B,EACzC,OAAO,EAAE,aAAa,CAAC,qBAAqB,GAAG,WAAW,CAAC,GAC1D,OAAO,CAAC,0BAA0B,CAAC,CAUrC"}

package/dist/functions/managedIdentifierFunctions.js

@@ -0,0 +1,359 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getManagedKidIdentifier = getManagedKidIdentifier;
+exports.isManagedIdentifierResult = isManagedIdentifierResult;
+exports.ensureManagedIdentifierResult = ensureManagedIdentifierResult;
+exports.getManagedKeyIdentifier = getManagedKeyIdentifier;
+exports.getManagedCoseKeyIdentifier = getManagedCoseKeyIdentifier;
+exports.getManagedDidIdentifier = getManagedDidIdentifier;
+exports.getManagedJwkIdentifier = getManagedJwkIdentifier;
+exports.getManagedX5cIdentifier = getManagedX5cIdentifier;
+exports.getManagedOID4VCIssuerIdentifier = getManagedOID4VCIssuerIdentifier;
+exports.getManagedIdentifier = getManagedIdentifier;
+exports.managedIdentifierToKeyResult = managedIdentifierToKeyResult;
+exports.managedIdentifierToJwk = managedIdentifierToJwk;
+const ssi_sdk_ext_did_utils_1 = require("@sphereon/ssi-sdk-ext.did-utils");
+const ssi_sdk_ext_key_utils_1 = require("@sphereon/ssi-sdk-ext.key-utils");
+const ssi_sdk_ext_x509_utils_1 = require("@sphereon/ssi-sdk-ext.x509-utils");
+const ssi_sdk_agent_config_1 = require("@sphereon/ssi-sdk.agent-config");
+const pkijs_1 = require("pkijs");
+const types_1 = require("../types");
+function getManagedKidIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o;
+        const method = 'kid';
+        let key = undefined;
+        let issuer = undefined;
+        let kid = undefined;
+        if (!(0, ssi_sdk_agent_config_1.contextHasKeyManager)(context)) {
+            return Promise.reject(Error(`Cannot get Key/JWK identifier if KeyManager plugin is not enabled!`));
+        }
+        else if (opts.identifier.startsWith('did:')) {
+            const did = opts.identifier.split('#')[0];
+            const didIdentifier = yield getManagedDidIdentifier(Object.assign(Object.assign({}, opts), { method: 'did', identifier: did }), context);
+            key = didIdentifier.key;
+            issuer = didIdentifier.issuer;
+            kid = (_d = (_a = opts === null || opts === void 0 ? void 0 : opts.kid) !== null && _a !== void 0 ? _a : (_c = (_b = key.meta) === null || _b === void 0 ? void 0 : _b.verificationMethod) === null || _c === void 0 ? void 0 : _c.id) !== null && _d !== void 0 ? _d : didIdentifier.kid;
+        }
+        if (!key) {
+            key = yield context.agent.keyManagerGet({ kid: (_e = opts.kmsKeyRef) !== null && _e !== void 0 ? _e : opts.identifier });
+        }
+        const jwk = (0, ssi_sdk_ext_key_utils_1.toJwk)(key.publicKeyHex, key.type, { key });
+        const jwkThumbprint = (_g = (_f = key.meta) === null || _f === void 0 ? void 0 : _f.jwkThumbprint) !== null && _g !== void 0 ? _g : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        if (!kid) {
+            kid = (_m = (_l = (_h = opts.kid) !== null && _h !== void 0 ? _h : (_k = (_j = key.meta) === null || _j === void 0 ? void 0 : _j.verificationMethod) === null || _k === void 0 ? void 0 : _k.id) !== null && _l !== void 0 ? _l : key.kid) !== null && _m !== void 0 ? _m : jwkThumbprint;
+        }
+        if (!issuer) {
+            issuer = (_o = opts.issuer) !== null && _o !== void 0 ? _o : kid; // The different identifiers should set the value. Defaults to the kid
+        }
+        return {
+            method,
+            key,
+            identifier: opts.identifier,
+            jwk,
+            jwkThumbprint,
+            kid,
+            clientId: opts.clientId,
+            clientIdScheme: opts.clientIdScheme,
+            issuer,
+            kmsKeyRef: key.kid,
+            opts,
+        };
+    });
+}
+function isManagedIdentifierResult(identifier) {
+    return 'key' in identifier && 'kmsKeyRef' in identifier && 'method' in identifier && 'opts' in identifier && 'jwkThumbprint' in identifier;
+}
+/**
+ * Allows to get a managed identifier result in case identifier options are passed in, but returns the identifier directly in case results are passed in. This means resolution can have happened before, or happens in this method
+ * @param identifier
+ * @param context
+ */
+function ensureManagedIdentifierResult(identifier, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { lazyDisabled = false } = identifier;
+        return !lazyDisabled && isManagedIdentifierResult(identifier) ? identifier : yield getManagedIdentifier(identifier, context);
+    });
+}
+/**
+ * This function is just a convenience function to get a common result. The user already apparently had a key, so could have called the kid version as well
+ * @param opts
+ * @param _context
+ */
+function getManagedKeyIdentifier(opts, _context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g;
+        const method = 'key';
+        const key = opts.identifier;
+        if (opts.kmsKeyRef && opts.kmsKeyRef !== key.kid) {
+            return Promise.reject(Error(`Cannot get a managed key object by providing a key and a kmsKeyRef that are different.}`));
+        }
+        const jwk = (0, ssi_sdk_ext_key_utils_1.toJwk)(key.publicKeyHex, key.type, { key });
+        const jwkThumbprint = (_b = (_a = key.meta) === null || _a === void 0 ? void 0 : _a.jwkThumbprint) !== null && _b !== void 0 ? _b : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        const kid = (_f = (_c = opts.kid) !== null && _c !== void 0 ? _c : (_e = (_d = key.meta) === null || _d === void 0 ? void 0 : _d.verificationMethod) === null || _e === void 0 ? void 0 : _e.id) !== null && _f !== void 0 ? _f : jwkThumbprint;
+        const issuer = (_g = opts.issuer) !== null && _g !== void 0 ? _g : kid; // The different identifiers should set the value. Defaults to the kid
+        return {
+            method,
+            key,
+            identifier: key,
+            jwk,
+            jwkThumbprint,
+            kid,
+            issuer,
+            kmsKeyRef: key.kid,
+            clientId: opts.clientId,
+            clientIdScheme: opts.clientIdScheme,
+            opts,
+        };
+    });
+}
+/**
+ * This function is just a convenience function to get a common result. The user already apparently had a key, so could have called the kid version as well
+ * @param opts
+ * @param context
+ */
+function getManagedCoseKeyIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const method = 'cose_key';
+        const coseKey = opts.identifier;
+        if (!(0, ssi_sdk_agent_config_1.contextHasKeyManager)(context)) {
+            return Promise.reject(Error(`Cannot get Cose Key identifier if KeyManager plugin is not enabled!`));
+        }
+        const jwk = (0, ssi_sdk_ext_key_utils_1.coseKeyToJwk)(coseKey);
+        const jwkThumbprint = (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        const key = yield context.agent.keyManagerGet({ kid: (_a = opts.kmsKeyRef) !== null && _a !== void 0 ? _a : jwkThumbprint });
+        const kid = (_c = (_b = opts.kid) !== null && _b !== void 0 ? _b : coseKey.kid) !== null && _c !== void 0 ? _c : jwkThumbprint;
+        const issuer = opts.issuer;
+        return {
+            method,
+            key,
+            identifier: opts.identifier,
+            jwk,
+            jwkThumbprint,
+            kid,
+            issuer,
+            kmsKeyRef: key.kid,
+            clientId: opts.clientId,
+            clientIdScheme: opts.clientIdScheme,
+            opts,
+        };
+    });
+}
+function getManagedDidIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e, _f, _g;
+        const method = 'did';
+        if (!(0, ssi_sdk_agent_config_1.contextHasDidManager)(context)) {
+            return Promise.reject(Error(`Cannot get DID identifier if DID Manager plugin is not enabled!`));
+        }
+        let identifier;
+        if (typeof opts.identifier === 'string') {
+            identifier = yield context.agent.didManagerGet({ did: opts.identifier.split('#')[0] });
+        }
+        else {
+            identifier = opts.identifier;
+        }
+        const did = identifier.did;
+        const keys = identifier === null || identifier === void 0 ? void 0 : identifier.keys; // fixme: We really want to return the vmRelationship keys here actually
+        const extendedKey = yield (0, ssi_sdk_ext_did_utils_1.getFirstKeyWithRelation)(Object.assign(Object.assign({}, opts), { identifier, vmRelationship: (_a = opts.vmRelationship) !== null && _a !== void 0 ? _a : 'verificationMethod' }), context);
+        const key = extendedKey;
+        const controllerKeyId = identifier.controllerKeyId;
+        const jwk = (0, ssi_sdk_ext_key_utils_1.toJwk)(key.publicKeyHex, key.type, { key });
+        const jwkThumbprint = (_c = (_b = key.meta) === null || _b === void 0 ? void 0 : _b.jwkThumbprint) !== null && _c !== void 0 ? _c : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        let kid = (_d = opts.kid) !== null && _d !== void 0 ? _d : (_f = (_e = extendedKey.meta) === null || _e === void 0 ? void 0 : _e.verificationMethod) === null || _f === void 0 ? void 0 : _f.id;
+        if (!kid.startsWith(did)) {
+            // Make sure we create a fully qualified kid
+            const hash = kid.startsWith('#') ? '' : '#';
+            kid = `${did}${hash}${kid}`;
+        }
+        const issuer = (_g = opts.issuer) !== null && _g !== void 0 ? _g : did;
+        return {
+            method,
+            key,
+            did,
+            kmsKeyRef: key.kid,
+            jwk,
+            jwkThumbprint,
+            controllerKeyId,
+            kid,
+            keys,
+            issuer,
+            identifier,
+            clientId: opts.clientId,
+            clientIdScheme: opts.clientIdScheme,
+            opts,
+        };
+    });
+}
+function getManagedJwkIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d;
+        const method = 'jwk';
+        const { kid, issuer } = opts;
+        if (!(0, ssi_sdk_agent_config_1.contextHasKeyManager)(context)) {
+            return Promise.reject(Error(`Cannot get Key/JWK identifier if KeyManager plugin is not enabled!`));
+        }
+        const key = yield context.agent.keyManagerGet({ kid: (_a = opts.kmsKeyRef) !== null && _a !== void 0 ? _a : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk: opts.identifier }) });
+        const jwk = (_b = opts.identifier) !== null && _b !== void 0 ? _b : (0, ssi_sdk_ext_key_utils_1.toJwk)(key.publicKeyHex, key.type, { key });
+        const jwkThumbprint = (_d = (_c = key.meta) === null || _c === void 0 ? void 0 : _c.jwkThumbprint) !== null && _d !== void 0 ? _d : (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        // we explicitly do not set the kid and issuer, meaning it can remain null. Normally you do not provide a kid and issuer with Jwks.
+        return {
+            method,
+            key,
+            kmsKeyRef: key.kid,
+            identifier: jwk,
+            jwk,
+            jwkThumbprint,
+            kid,
+            issuer,
+            clientId: opts.clientId,
+            clientIdScheme: opts.clientIdScheme,
+            opts,
+        };
+    });
+}
+function getManagedX5cIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const { kid, issuer } = opts;
+        const method = 'x5c';
+        const x5c = opts.identifier;
+        if (x5c.length === 0) {
+            return Promise.reject(`Cannot resolve x5c when an empty x5c is passed in`);
+        }
+        else if (!(0, ssi_sdk_agent_config_1.contextHasKeyManager)(context)) {
+            return Promise.reject(Error(`Cannot get X5c identifier if KeyManager plugin is not enabled!`));
+        }
+        const cryptoImpl = (0, ssi_sdk_ext_key_utils_1.globalCrypto)(false, opts.crypto);
+        const certificate = (0, ssi_sdk_ext_x509_utils_1.pemOrDerToX509Certificate)(x5c[0]);
+        const cryptoEngine = new pkijs_1.CryptoEngine({ name: 'identifier_resolver_managed', crypto: cryptoImpl });
+        (0, pkijs_1.setEngine)(cryptoEngine.name, cryptoEngine);
+        const pk = yield certificate.getPublicKey(undefined, cryptoEngine);
+        const jwk = (yield cryptoEngine.subtle.exportKey('jwk', pk));
+        const jwkThumbprint = (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        const key = yield context.agent.keyManagerGet({ kid: (_a = opts.kmsKeyRef) !== null && _a !== void 0 ? _a : jwkThumbprint });
+        // we explicitly do not set the kid and issuer, meaning it can remain null. Normally you do not provide a kid and issuer with x5c.
+        return {
+            method,
+            x5c,
+            identifier: x5c,
+            certificate,
+            jwk,
+            jwkThumbprint,
+            key,
+            kmsKeyRef: key.kid,
+            kid,
+            issuer,
+            clientId: opts.clientId,
+            clientIdScheme: opts.clientIdScheme,
+            opts,
+        };
+    });
+}
+function getManagedOID4VCIssuerIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { identifier } = opts;
+        const method = 'oid4vci-issuer';
+        // FIXME: We need to eventually determine the JWK based on the issuer. Using a dummy JWK for now
+        const jwk = {
+            kty: 'RSA',
+            kid: 'dummy-jwk-for-vci-issuer-signing',
+            use: 'sig',
+            n: 'pjdss8ZaDfEH6K6U7GeW2nxDqR4IP049fk1fK0lndimbMMVBdPv_hSpm8T8EtBDxrUdi1OHZfMhUixGaut-3nQ4GG9nM249oxhCtxqqNvEXrmQRGqczyLxuh-fKn9Fg--hS9UpazHpfVAFnB5aCfXoNhPuI8oByyFKMKaOVgHNqP5NBEqabiLftZD3W_lsFCPGuzr4Vp0YS7zS2hDYScC2oOMu4rGU1LcMZf39p3153Cq7bS2Xh6Y-vw5pwzFYZdjQxDn8x8BG3fJ6j8TGLXQsbKH1218_HcUJRvMwdpbUQG5nvA2GXVqLqdwp054Lzk9_B_f1lVrmOKuHjTNHq48w',
+            e: 'AQAB',
+            d: 'ksDmucdMJXkFGZxiomNHnroOZxe8AmDLDGO1vhs-POa5PZM7mtUPonxwjVmthmpbZzla-kg55OFfO7YcXhg-Hm2OWTKwm73_rLh3JavaHjvBqsVKuorX3V3RYkSro6HyYIzFJ1Ek7sLxbjDRcDOj4ievSX0oN9l-JZhaDYlPlci5uJsoqro_YrE0PRRWVhtGynd-_aWgQv1YzkfZuMD-hJtDi1Im2humOWxA4eZrFs9eG-whXcOvaSwO4sSGbS99ecQZHM2TcdXeAs1PvjVgQ_dKnZlGN3lTWoWfQP55Z7Tgt8Nf1q4ZAKd-NlMe-7iqCFfsnFwXjSiaOa2CRGZn-Q',
+            p: '4A5nU4ahEww7B65yuzmGeCUUi8ikWzv1C81pSyUKvKzu8CX41hp9J6oRaLGesKImYiuVQK47FhZ--wwfpRwHvSxtNU9qXb8ewo-BvadyO1eVrIk4tNV543QlSe7pQAoJGkxCia5rfznAE3InKF4JvIlchyqs0RQ8wx7lULqwnn0',
+            q: 'ven83GM6SfrmO-TBHbjTk6JhP_3CMsIvmSdo4KrbQNvp4vHO3w1_0zJ3URkmkYGhz2tgPlfd7v1l2I6QkIh4Bumdj6FyFZEBpxjE4MpfdNVcNINvVj87cLyTRmIcaGxmfylY7QErP8GFA-k4UoH_eQmGKGK44TRzYj5hZYGWIC8',
+            dp: 'lmmU_AG5SGxBhJqb8wxfNXDPJjf__i92BgJT2Vp4pskBbr5PGoyV0HbfUQVMnw977RONEurkR6O6gxZUeCclGt4kQlGZ-m0_XSWx13v9t9DIbheAtgVJ2mQyVDvK4m7aRYlEceFh0PsX8vYDS5o1txgPwb3oXkPTtrmbAGMUBpE',
+            dq: 'mxRTU3QDyR2EnCv0Nl0TCF90oliJGAHR9HJmBe__EjuCBbwHfcT8OG3hWOv8vpzokQPRl5cQt3NckzX3fs6xlJN4Ai2Hh2zduKFVQ2p-AF2p6Yfahscjtq-GY9cB85NxLy2IXCC0PF--Sq9LOrTE9QV988SJy_yUrAjcZ5MmECk',
+            qi: 'ldHXIrEmMZVaNwGzDF9WG8sHj2mOZmQpw9yrjLK9hAsmsNr5LTyqWAqJIYZSwPTYWhY4nu2O0EY9G9uYiqewXfCKw_UngrJt8Xwfq1Zruz0YY869zPN4GiE9-9rzdZB33RBw8kIOquY3MK74FMwCihYx_LiU2YTHkaoJ3ncvtvg',
+        };
+        const jwkThumbprint = (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk });
+        const key = {
+            kid: 'dummy-key-for-vci-issuer-signing',
+            kms: 'local',
+            type: 'RSA',
+            publicKeyHex: '9a3f75b2e4d8b91128fc6e9a8f6782e5a4f1cba3718e58b5d0a789d6e5f52b3a',
+        };
+        return {
+            method,
+            identifier,
+            jwk,
+            jwkThumbprint,
+            key, // FIXME: We need construct a key as soon as we have the external VCI Issuer resolution
+            kmsKeyRef: identifier, // FIXME: We need use kmsKeyRef as soon as we have the external VCI Issuer resolution
+            issuer: identifier.replace('/.well-known/openid-credential-issuer', ''),
+            clientId: opts.clientId,
+            clientIdScheme: opts.clientIdScheme,
+            opts,
+        };
+    });
+}
+function getManagedIdentifier(opts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        let resolutionResult;
+        if (isManagedIdentifierResult(opts)) {
+            opts;
+        }
+        if ((0, types_1.isManagedIdentifierKidOpts)(opts)) {
+            resolutionResult = yield getManagedKidIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierDidOpts)(opts)) {
+            resolutionResult = yield getManagedDidIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierJwkOpts)(opts)) {
+            resolutionResult = yield getManagedJwkIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierX5cOpts)(opts)) {
+            resolutionResult = yield getManagedX5cIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierKeyOpts)(opts)) {
+            resolutionResult = yield getManagedKeyIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierCoseKeyOpts)(opts)) {
+            resolutionResult = yield getManagedCoseKeyIdentifier(opts, context);
+        }
+        else if ((0, types_1.isManagedIdentifierOID4VCIssuerOpts)(opts)) {
+            resolutionResult = yield getManagedOID4VCIssuerIdentifier(opts, context);
+        }
+        else {
+            return Promise.reject(Error(`Could not determine identifier method. Please provide explicitly`));
+        }
+        const { key } = resolutionResult;
+        if ((!key && !(0, types_1.isManagedIdentifierOID4VCIssuerOpts)(opts)) ||
+            ((0, types_1.isManagedIdentifierDidOpts)(opts) && (0, types_1.isManagedIdentifierDidResult)(resolutionResult) && !resolutionResult.identifier)) {
+            console.log(`Cannot find identifier`, opts.identifier);
+            return Promise.reject(`Cannot find identifier ${opts.identifier}`);
+        }
+        return resolutionResult;
+    });
+}
+function managedIdentifierToKeyResult(identifier, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const resolved = yield ensureManagedIdentifierResult(identifier, context);
+        if ((0, types_1.isManagedIdentifierKeyResult)(resolved)) {
+            return resolved;
+        }
+        return Object.assign(Object.assign({}, resolved), { method: 'key', identifier: resolved.key });
+    });
+}
+function managedIdentifierToJwk(identifier, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const resolved = yield ensureManagedIdentifierResult(identifier, context);
+        if ((0, types_1.isManagedIdentifierJwkResult)(resolved)) {
+            return resolved;
+        }
+        return Object.assign(Object.assign({}, resolved), { method: 'jwk', identifier: resolved.jwk });
+    });
+}
+//# sourceMappingURL=managedIdentifierFunctions.js.map

package/dist/functions/managedIdentifierFunctions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managedIdentifierFunctions.js","sourceRoot":"","sources":["../../src/functions/managedIdentifierFunctions.ts"],"names":[],"mappings":";;;;;;;;;;;AAqCA,0DAyCC;AAED,8DAMC;AAOD,sEAQC;AAOD,0DAuBC;AAOD,kEA2BC;AAED,0DAkDC;AAED,0DA0BC;AAED,0DAuCC;AAED,4EAyCC;AAED,oDAoCC;AAED,oEAcC;AAED,wDAaC;AA9YD,2EAAyE;AACzE,2EAA2G;AAC3G,6EAA4E;AAC5E,yEAA2F;AAG3F,iCAA+C;AAC/C,oCA4BiB;AAEjB,SAAsB,uBAAuB,CAC3C,IAA8B,EAC9B,OAAmC;;;QAEnC,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,IAAI,GAAG,GAAqB,SAAS,CAAA;QACrC,IAAI,MAAM,GAAuB,SAAS,CAAA;QAC1C,IAAI,GAAG,GAAuB,SAAS,CAAA;QACvC,IAAI,CAAC,IAAA,2CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC,CAAA;QACpG,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACzC,MAAM,aAAa,GAAG,MAAM,uBAAuB,iCAAK,IAAI,KAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAG,OAAO,CAAC,CAAA;YACvG,GAAG,GAAG,aAAa,CAAC,GAAG,CAAA;YACvB,MAAM,GAAG,aAAa,CAAC,MAAM,CAAA;YAC7B,GAAG,GAAG,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,mCAAK,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,kBAAkB,0CAAE,EAAa,mCAAI,aAAa,CAAC,GAAG,CAAA;QACtF,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAC,GAAG,EAAE,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAI,CAAC,UAAU,EAAC,CAAC,CAAA;QACnF,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,6BAAK,EAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtD,MAAM,aAAa,GAAG,MAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAwB,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,MAAA,MAAA,MAAA,IAAI,CAAC,GAAG,mCAAK,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,kBAAkB,0CAAE,EAAa,mCAAI,GAAG,CAAC,GAAG,mCAAI,aAAa,CAAA;QAC5F,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,MAAA,IAAI,CAAC,MAAM,mCAAI,GAAG,CAAA,CAAC,sEAAsE;QACpG,CAAC;QACD,OAAO;YACL,MAAM;YACN,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG;YACH,aAAa;YACb,GAAG;YACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM;YACN,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,IAAI;SACgC,CAAA;IACxC,CAAC;CAAA;AAED,SAAgB,yBAAyB,CACvC,UAEC;IAED,OAAO,KAAK,IAAI,UAAU,IAAI,WAAW,IAAI,UAAU,IAAI,QAAQ,IAAI,UAAU,IAAI,MAAM,IAAI,UAAU,IAAI,eAAe,IAAI,UAAU,CAAA;AAC5I,CAAC;AAED;;;;GAIG;AACH,SAAsB,6BAA6B,CACjD,UAEC,EACD,OAAmC;;QAEnC,MAAM,EAAE,YAAY,GAAG,KAAK,EAAE,GAAG,UAAU,CAAA;QAC3C,OAAO,CAAC,YAAY,IAAI,yBAAyB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9H,CAAC;CAAA;AAED;;;;GAIG;AACH,SAAsB,uBAAuB,CAAC,IAA8B,EAAE,QAA6B;;;QACzG,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,MAAM,GAAG,GAAS,IAAI,CAAC,UAAU,CAAA;QACjC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;YACjD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC,CAAA;QACzH,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,6BAAK,EAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtD,MAAM,aAAa,GAAG,MAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAwB,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,MAAM,GAAG,GAAG,MAAA,MAAA,IAAI,CAAC,GAAG,mCAAK,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,kBAAkB,0CAAE,EAAa,mCAAI,aAAa,CAAA;QACrF,MAAM,MAAM,GAAG,MAAA,IAAI,CAAC,MAAM,mCAAI,GAAG,CAAA,CAAC,sEAAsE;QACxG,OAAO;YACL,MAAM;YACN,GAAG;YACH,UAAU,EAAE,GAAG;YACf,GAAG;YACH,aAAa;YACb,GAAG;YACH,MAAM;YACN,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI;SACgC,CAAA;IACxC,CAAC;CAAA;AAED;;;;GAIG;AACH,SAAsB,2BAA2B,CAC/C,IAAkC,EAClC,OAA2B;;;QAE3B,MAAM,MAAM,GAAG,UAAU,CAAA;QACzB,MAAM,OAAO,GAAiB,IAAI,CAAC,UAAU,CAAA;QAC7C,IAAI,CAAC,IAAA,2CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC,CAAA;QACrG,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,oCAAY,EAAC,OAAO,CAAC,CAAA;QACjC,MAAM,aAAa,GAAG,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,MAAA,IAAI,CAAC,SAAS,mCAAI,aAAa,EAAE,CAAC,CAAA;QACvF,MAAM,GAAG,GAAG,MAAA,MAAA,IAAI,CAAC,GAAG,mCAAI,OAAO,CAAC,GAAG,mCAAI,aAAa,CAAA;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,OAAO;YACL,MAAM;YACN,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG;YACH,aAAa;YACb,GAAG;YACH,MAAM;YACN,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI;SACoC,CAAA;IAC5C,CAAC;CAAA;AAED,SAAsB,uBAAuB,CAAC,IAA8B,EAAE,OAA2B;;;QACvG,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,IAAI,CAAC,IAAA,2CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC,CAAA;QACjG,CAAC;QAED,IAAI,UAAuB,CAAA;QAC3B,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACxC,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACxF,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QAC9B,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAA;QAC1B,MAAM,IAAI,GAAG,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,IAAI,CAAA,CAAC,wEAAwE;QACtG,MAAM,WAAW,GAAG,MAAM,IAAA,+CAAuB,kCAE1C,IAAI,KACP,UAAU,EACV,cAAc,EAAE,MAAA,IAAI,CAAC,cAAc,mCAAI,oBAAoB,KAE7D,OAAO,CACR,CAAA;QACD,MAAM,GAAG,GAAG,WAAW,CAAA;QACvB,MAAM,eAAe,GAAG,UAAU,CAAC,eAAe,CAAA;QAClD,MAAM,GAAG,GAAG,IAAA,6BAAK,EAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACtD,MAAM,aAAa,GAAG,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAa,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAChF,IAAI,GAAG,GAAG,MAAA,IAAI,CAAC,GAAG,mCAAI,MAAA,MAAA,WAAW,CAAC,IAAI,0CAAE,kBAAkB,0CAAE,EAAE,CAAA;QAC9D,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,4CAA4C;YAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;YAC3C,GAAG,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,EAAE,CAAA;QAC7B,CAAC;QACD,MAAM,MAAM,GAAG,MAAA,IAAI,CAAC,MAAM,mCAAI,GAAG,CAAA;QACjC,OAAO;YACL,MAAM;YACN,GAAG;YACH,GAAG;YACH,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,GAAG;YACH,aAAa;YACb,eAAe;YACf,GAAG;YACH,IAAI;YACJ,MAAM;YACN,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI;SACL,CAAA;IACH,CAAC;CAAA;AAED,SAAsB,uBAAuB,CAC3C,IAA8B,EAC9B,OAAmC;;;QAEnC,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAC5B,IAAI,CAAC,IAAA,2CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1H,MAAM,GAAG,GAAG,MAAA,IAAI,CAAC,UAAU,mCAAI,IAAA,6BAAK,EAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QACzE,MAAM,aAAa,GAAG,MAAC,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAwB,mCAAI,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,mIAAmI;QACnI,OAAO;YACL,MAAM;YACN,GAAG;YACH,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,UAAU,EAAE,GAAG;YACf,GAAG;YACH,aAAa;YACb,GAAG;YACH,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI;SACgC,CAAA;IACxC,CAAC;CAAA;AAED,SAAsB,uBAAuB,CAC3C,IAEC,EACD,OAAmC;;;QAEnC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAA;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAA;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC,MAAM,CAAC,mDAAmD,CAAC,CAAA;QAC5E,CAAC;aAAM,IAAI,CAAC,IAAA,2CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC,CAAA;QAChG,CAAC;QACD,MAAM,UAAU,GAAG,IAAA,oCAAY,EAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,WAAW,GAAG,IAAA,kDAAyB,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACrD,MAAM,YAAY,GAAG,IAAI,oBAAY,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QAClG,IAAA,iBAAS,EAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;QAC1C,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAClE,MAAM,GAAG,GAAG,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAQ,CAAA;QACnE,MAAM,aAAa,GAAG,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,MAAA,IAAI,CAAC,SAAS,mCAAI,aAAa,EAAE,CAAC,CAAA;QACvF,kIAAkI;QAElI,OAAO;YACL,MAAM;YACN,GAAG;YACH,UAAU,EAAE,GAAG;YACf,WAAW;YACX,GAAG;YACH,aAAa;YACb,GAAG;YACH,SAAS,EAAE,GAAG,CAAC,GAAG;YAClB,GAAG;YACH,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI;SACgC,CAAA;IACxC,CAAC;CAAA;AAED,SAAsB,gCAAgC,CACpD,IAAuC,EACvC,OAAmC;;QAEnC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;QAC3B,MAAM,MAAM,GAAG,gBAAgB,CAAA;QAC/B,gGAAgG;QAChG,MAAM,GAAG,GAAG;YACV,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,kCAAkC;YACvC,GAAG,EAAE,KAAK;YACV,CAAC,EAAE,wVAAwV;YAC3V,CAAC,EAAE,MAAM;YACT,CAAC,EAAE,wVAAwV;YAC3V,CAAC,EAAE,6KAA6K;YAChL,CAAC,EAAE,6KAA6K;YAChL,EAAE,EAAE,6KAA6K;YACjL,EAAE,EAAE,6KAA6K;YACjL,EAAE,EAAE,6KAA6K;SAC3K,CAAA;QACR,MAAM,aAAa,GAAG,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAErD,MAAM,GAAG,GAAG;YACV,GAAG,EAAE,kCAAkC;YACvC,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,KAAK;YACX,YAAY,EAAE,kEAAkE;SACzE,CAAA;QAET,OAAO;YACL,MAAM;YACN,UAAU;YACV,GAAG;YACH,aAAa;YACb,GAAG,EAAE,uFAAuF;YAC5F,SAAS,EAAE,UAAU,EAAE,qFAAqF;YAC5G,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,uCAAuC,EAAE,EAAE,CAAC;YACvE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI;SACyC,CAAA;IACjD,CAAC;CAAA;AAED,SAAsB,oBAAoB,CACxC,IAEC,EACD,OAAmC;;QAEnC,IAAI,gBAAyC,CAAA;QAC7C,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,CAAA;QACN,CAAC;QACD,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YACrC,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAA,kCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,IAAA,sCAA8B,EAAC,IAAI,CAAC,EAAE,CAAC;YAChD,gBAAgB,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACrE,CAAC;aAAM,IAAI,IAAA,2CAAmC,EAAC,IAAI,CAAC,EAAE,CAAC;YACrD,gBAAgB,GAAG,MAAM,gCAAgC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1E,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC,CAAA;QAClG,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,GAAG,gBAAgB,CAAA;QAChC,IACE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAA,2CAAmC,EAAC,IAAI,CAAC,CAAC;YACpD,CAAC,IAAA,kCAA0B,EAAC,IAAI,CAAC,IAAI,IAAA,oCAA4B,EAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EACpH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACtD,OAAO,OAAO,CAAC,MAAM,CAAC,0BAA0B,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;QACpE,CAAC;QACD,OAAO,gBAAgB,CAAA;IACzB,CAAC;CAAA;AAED,SAAsB,4BAA4B,CAChD,UAAyC,EACzC,OAA2D;;QAE3D,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACzE,IAAI,IAAA,oCAA4B,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,QAAQ,CAAA;QACjB,CAAC;QAED,OAAO,gCACF,QAAQ,KACX,MAAM,EAAE,KAAK,EACb,UAAU,EAAE,QAAQ,CAAC,GAAG,GACY,CAAA;IACxC,CAAC;CAAA;AAED,SAAsB,sBAAsB,CAC1C,UAAyC,EACzC,OAA2D;;QAE3D,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACzE,IAAI,IAAA,oCAA4B,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,OAAO,gCACF,QAAQ,KACX,MAAM,EAAE,KAAK,EACb,UAAU,EAAE,QAAQ,CAAC,GAAG,GACY,CAAA;IACxC,CAAC;CAAA"}