@sphereon/ssi-sdk.ms-request-api 0.33.1-next.3 → 0.33.1-next.68

package/dist/index.js

@@ -1,27 +1,303 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+
+// plugin.schema.json
+var require_plugin_schema = __commonJS({
+  "plugin.schema.json"(exports, module) {
+    module.exports = {
+      IMsRequestApi: {
+        components: {
+          schemas: {
+            IClientIssueRequest: {
+              type: "object",
+              properties: {
+                authenticationInfo: {
+                  $ref: "#/components/schemas/IMsAuthenticationClientCredentialArgs"
+                },
+                clientIssuanceConfig: {
+                  $ref: "#/components/schemas/IClientIssuanceConfig"
+                },
+                claims: {
+                  $ref: "#/components/schemas/CredentialSubject"
+                }
+              },
+              required: ["authenticationInfo", "clientIssuanceConfig", "claims"],
+              additionalProperties: false
+            },
+            IMsAuthenticationClientCredentialArgs: {
+              type: "object",
+              properties: {
+                azClientId: {
+                  type: "string"
+                },
+                azTenantId: {
+                  type: "string"
+                },
+                azClientSecret: {
+                  type: "string"
+                },
+                credentialManifestUrl: {
+                  type: "string"
+                },
+                authority: {
+                  type: "string"
+                },
+                region: {
+                  type: "string"
+                },
+                scopes: {
+                  type: "array",
+                  items: {
+                    type: "string"
+                  }
+                },
+                skipCache: {
+                  type: "boolean"
+                },
+                piiLoggingEnabled: {
+                  type: "boolean"
+                },
+                logLevel: {
+                  $ref: "#/components/schemas/LogLevel"
+                }
+              },
+              required: ["azClientId", "azTenantId", "azClientSecret"],
+              additionalProperties: false,
+              description: "azClientId: clientId of the application you're trying to login azClientSecret: secret of the application you're trying to login azTenantId: your MS Azure tenantId credentialManifestUrl: url of your credential manifest. usually in following format:  https://beta.eu.did.msidentity.com/v1.0/<tenant_id>/verifiableCredential/contracts/<verifiable_credential_schema> authority: optional. if not provided, we'll use the azClientId to create the Tenanted format if provided should be one of these two formats:  - Tenanted: https://login.microsoftonline.com/{tenant}/, where {tenant} is either the GUID representing the tenant ID or a domain name associated with the tenant.  - Work and school accounts: https://login.microsoftonline.com/organizations/. region?: if present will use the provided, if not will make a request to determine the region scopes?: scopes that you want to access via this authentication skipCache?: whether to skip cache piiLoggingEnabled?: if not provided defaults to false logLevel?: can be one of these values:   Error = 0,   Warning = 1,   Info = 2,   Verbose = 3,   Trace = 4   if not provided defaults to LogLevel.Verbose"
+            },
+            LogLevel: {
+              type: "number",
+              enum: [0, 1, 2, 3, 4],
+              description: "Log message level."
+            },
+            IClientIssuanceConfig: {
+              type: "object",
+              properties: {
+                authority: {
+                  type: "string"
+                },
+                includeQRCode: {
+                  type: "boolean"
+                },
+                registration: {
+                  $ref: "#/components/schemas/Registration"
+                },
+                callback: {
+                  $ref: "#/components/schemas/Callback"
+                },
+                issuance: {
+                  $ref: "#/components/schemas/IClientIssuance"
+                }
+              },
+              required: ["authority", "includeQRCode", "registration", "callback", "issuance"],
+              additionalProperties: false
+            },
+            Registration: {
+              type: "object",
+              properties: {
+                clientName: {
+                  type: "string"
+                }
+              },
+              required: ["clientName"],
+              additionalProperties: false
+            },
+            Callback: {
+              type: "object",
+              properties: {
+                url: {
+                  type: "string"
+                },
+                state: {
+                  type: "string"
+                },
+                headers: {
+                  $ref: "#/components/schemas/Headers"
+                }
+              },
+              required: ["url", "state", "headers"],
+              additionalProperties: false
+            },
+            Headers: {
+              type: "object",
+              properties: {
+                apiKey: {
+                  type: "string"
+                }
+              },
+              required: ["apiKey"],
+              additionalProperties: false
+            },
+            IClientIssuance: {
+              type: "object",
+              properties: {
+                type: {
+                  type: "string"
+                },
+                manifest: {
+                  type: "string"
+                },
+                pin: {
+                  $ref: "#/components/schemas/Pin"
+                }
+              },
+              required: ["type", "manifest", "pin"],
+              additionalProperties: false
+            },
+            Pin: {
+              type: "object",
+              properties: {
+                value: {
+                  type: "string"
+                },
+                length: {
+                  type: "number"
+                }
+              },
+              required: ["value", "length"],
+              additionalProperties: false
+            },
+            CredentialSubject: {
+              type: "object"
+            },
+            IIssueRequestResponse: {
+              type: "object",
+              properties: {
+                id: {
+                  type: "string"
+                },
+                requestId: {
+                  type: "string"
+                },
+                url: {
+                  type: "string"
+                },
+                expiry: {
+                  type: "string",
+                  format: "date-time"
+                },
+                pin: {
+                  type: "string"
+                }
+              },
+              required: ["id", "requestId", "url", "expiry", "pin"],
+              additionalProperties: false
+            }
+          },
+          methods: {
+            issuanceRequestMsVc: {
+              description: "",
+              arguments: {
+                $ref: "#/components/schemas/IClientIssueRequest"
+              },
+              returnType: {
+                $ref: "#/components/schemas/IIssueRequestResponse"
+              }
+            }
+          }
+        }
+      }
+    };
+  }
+});
+
+// src/agent/MsRequestApi.ts
+import { assertEntraCredentialManifestUrlInCorrectRegion, determineMSAuthId, getMSClientCredentialAccessToken, newMSClientCredentialAuthenticator } from "@sphereon/ssi-sdk.ms-authenticator";
+
+// src/IssuerUtil.ts
+import { fetch } from "cross-fetch";
+async function fetchIssuanceRequestMs(issuanceInfo, accessToken, msIdentityHostName) {
+  const requestEndpoint = `${msIdentityHostName}${issuanceInfo.authenticationInfo.azTenantId}/verifiablecredentials/request`;
+  const payload = JSON.stringify(issuanceInfo.issuanceConfig);
+  const fetchOptions = {
+    method: "POST",
+    body: payload,
+    headers: {
+      "Content-Type": "application/json",
+      "Content-Length": payload.length.toString(),
+      Authorization: `Bearer ${accessToken}`
+    }
+  };
+  const response = await fetch(requestEndpoint, fetchOptions);
+  return await response.json();
+}
+__name(fetchIssuanceRequestMs, "fetchIssuanceRequestMs");
+function generatePin(digits) {
+  const add = 1;
+  let max = 12 - add;
+  max = Math.pow(10, digits + add);
+  const min = max / 10;
+  const number = Math.floor(Math.random() * (max - min + 1)) + min;
+  return ("" + number).substring(add);
+}
+__name(generatePin, "generatePin");
+
+// src/agent/MsRequestApi.ts
+var MsRequestApi = class {
+  static {
+    __name(this, "MsRequestApi");
+  }
+  clients = /* @__PURE__ */ new Map();
+  methods = {
+    issuanceRequestMsVc: this.issuanceRequestMsVc.bind(this)
+  };
+  /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */
+  async issuanceRequestMsVc(clientIssueRequest, context) {
+    const id = determineMSAuthId(clientIssueRequest.authenticationInfo);
+    if (!this.clients.has(id)) {
+      this.clients.set(id, await newMSClientCredentialAuthenticator(clientIssueRequest.authenticationInfo));
+    }
+    const clientInfo = this.clients.get(id);
+    if (!clientInfo) {
+      throw Error(`Could not get client from arguments for id: ${id}`);
+    }
+    const authResult = await getMSClientCredentialAccessToken(clientIssueRequest.authenticationInfo, {
+      confidentialClient: clientInfo.confidentialClient
+    });
+    const accessToken = authResult.accessToken;
+    const msIdentityHostName = await assertEntraCredentialManifestUrlInCorrectRegion(clientIssueRequest.authenticationInfo);
+    if (!clientIssueRequest.authenticationInfo.azTenantId) {
+      throw new Error("azTenantId is missing.");
     }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+    if (clientIssueRequest.clientIssuanceConfig.issuance.pin) {
+      clientIssueRequest.clientIssuanceConfig.issuance.pin.value = generatePin(clientIssueRequest.clientIssuanceConfig.issuance.pin.length);
+    }
+    const issuance = {
+      type: clientIssueRequest.clientIssuanceConfig.issuance.type,
+      manifest: clientIssueRequest.clientIssuanceConfig.issuance.manifest,
+      pin: clientIssueRequest.clientIssuanceConfig.issuance.pin,
+      claims: clientIssueRequest.claims
+    };
+    const issuanceConfig = {
+      authority: clientIssueRequest.clientIssuanceConfig.authority,
+      includeQRCode: clientIssueRequest.clientIssuanceConfig.includeQRCode,
+      registration: clientIssueRequest.clientIssuanceConfig.registration,
+      callback: clientIssueRequest.clientIssuanceConfig.callback,
+      issuance
+    };
+    const issueRequest = {
+      authenticationInfo: clientIssueRequest.authenticationInfo,
+      issuanceConfig
+    };
+    const resp = await fetchIssuanceRequestMs(issueRequest, accessToken, msIdentityHostName);
+    resp.id = issueRequest.issuanceConfig.callback.state;
+    if (issueRequest.issuanceConfig.issuance.pin) {
+      resp.pin = issueRequest.issuanceConfig.issuance.pin.value;
+    }
+    return resp;
+  }
+};
+
+// src/index.ts
+var schema = require_plugin_schema();
+export {
+  MsRequestApi,
+  fetchIssuanceRequestMs,
+  generatePin,
+  schema
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MsRequestApi = exports.schema = void 0;
-/**
- * @public
- */
-const schema = require('../plugin.schema.json');
-exports.schema = schema;
-var MsRequestApi_1 = require("./agent/MsRequestApi");
-Object.defineProperty(exports, "MsRequestApi", { enumerable: true, get: function () { return MsRequestApi_1.MsRequestApi; } });
-__exportStar(require("./types/IMsRequestApi"), exports);
-__exportStar(require("./IssuerUtil"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;GAEG;AACH,MAAM,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;AACtC,wBAAM;AACf,qDAAmD;AAA1C,4GAAA,YAAY,OAAA;AACrB,wDAAqC;AACrC,+CAA4B"}
+{"version":3,"sources":["../plugin.schema.json","../src/agent/MsRequestApi.ts","../src/IssuerUtil.ts","../src/index.ts"],"sourcesContent":["{\n  \"IMsRequestApi\": {\n    \"components\": {\n      \"schemas\": {\n        \"IClientIssueRequest\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"authenticationInfo\": {\n              \"$ref\": \"#/components/schemas/IMsAuthenticationClientCredentialArgs\"\n            },\n            \"clientIssuanceConfig\": {\n              \"$ref\": \"#/components/schemas/IClientIssuanceConfig\"\n            },\n            \"claims\": {\n              \"$ref\": \"#/components/schemas/CredentialSubject\"\n            }\n          },\n          \"required\": [\"authenticationInfo\", \"clientIssuanceConfig\", \"claims\"],\n          \"additionalProperties\": false\n        },\n        \"IMsAuthenticationClientCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"azClientId\": {\n              \"type\": \"string\"\n            },\n            \"azTenantId\": {\n              \"type\": \"string\"\n            },\n            \"azClientSecret\": {\n              \"type\": \"string\"\n            },\n            \"credentialManifestUrl\": {\n              \"type\": \"string\"\n            },\n            \"authority\": {\n              \"type\": \"string\"\n            },\n            \"region\": {\n              \"type\": \"string\"\n            },\n            \"scopes\": {\n              \"type\": \"array\",\n              \"items\": {\n                \"type\": \"string\"\n              }\n            },\n            \"skipCache\": {\n              \"type\": \"boolean\"\n            },\n            \"piiLoggingEnabled\": {\n              \"type\": \"boolean\"\n            },\n            \"logLevel\": {\n              \"$ref\": \"#/components/schemas/LogLevel\"\n            }\n          },\n          \"required\": [\"azClientId\", \"azTenantId\", \"azClientSecret\"],\n          \"additionalProperties\": false,\n          \"description\": \"azClientId: clientId of the application you're trying to login azClientSecret: secret of the application you're trying to login azTenantId: your MS Azure tenantId credentialManifestUrl: url of your credential manifest. usually in following format:  https://beta.eu.did.msidentity.com/v1.0/<tenant_id>/verifiableCredential/contracts/<verifiable_credential_schema> authority: optional. if not provided, we'll use the azClientId to create the Tenanted format if provided should be one of these two formats:  - Tenanted: https://login.microsoftonline.com/{tenant}/, where {tenant} is either the GUID representing the tenant ID or a domain name associated with the tenant.  - Work and school accounts: https://login.microsoftonline.com/organizations/. region?: if present will use the provided, if not will make a request to determine the region scopes?: scopes that you want to access via this authentication skipCache?: whether to skip cache piiLoggingEnabled?: if not provided defaults to false logLevel?: can be one of these values:   Error = 0,   Warning = 1,   Info = 2,   Verbose = 3,   Trace = 4   if not provided defaults to LogLevel.Verbose\"\n        },\n        \"LogLevel\": {\n          \"type\": \"number\",\n          \"enum\": [0, 1, 2, 3, 4],\n          \"description\": \"Log message level.\"\n        },\n        \"IClientIssuanceConfig\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"authority\": {\n              \"type\": \"string\"\n            },\n            \"includeQRCode\": {\n              \"type\": \"boolean\"\n            },\n            \"registration\": {\n              \"$ref\": \"#/components/schemas/Registration\"\n            },\n            \"callback\": {\n              \"$ref\": \"#/components/schemas/Callback\"\n            },\n            \"issuance\": {\n              \"$ref\": \"#/components/schemas/IClientIssuance\"\n            }\n          },\n          \"required\": [\"authority\", \"includeQRCode\", \"registration\", \"callback\", \"issuance\"],\n          \"additionalProperties\": false\n        },\n        \"Registration\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"clientName\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\"clientName\"],\n          \"additionalProperties\": false\n        },\n        \"Callback\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"url\": {\n              \"type\": \"string\"\n            },\n            \"state\": {\n              \"type\": \"string\"\n            },\n            \"headers\": {\n              \"$ref\": \"#/components/schemas/Headers\"\n            }\n          },\n          \"required\": [\"url\", \"state\", \"headers\"],\n          \"additionalProperties\": false\n        },\n        \"Headers\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"apiKey\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\"apiKey\"],\n          \"additionalProperties\": false\n        },\n        \"IClientIssuance\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"type\": {\n              \"type\": \"string\"\n            },\n            \"manifest\": {\n              \"type\": \"string\"\n            },\n            \"pin\": {\n              \"$ref\": \"#/components/schemas/Pin\"\n            }\n          },\n          \"required\": [\"type\", \"manifest\", \"pin\"],\n          \"additionalProperties\": false\n        },\n        \"Pin\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"value\": {\n              \"type\": \"string\"\n            },\n            \"length\": {\n              \"type\": \"number\"\n            }\n          },\n          \"required\": [\"value\", \"length\"],\n          \"additionalProperties\": false\n        },\n        \"CredentialSubject\": {\n          \"type\": \"object\"\n        },\n        \"IIssueRequestResponse\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"requestId\": {\n              \"type\": \"string\"\n            },\n            \"url\": {\n              \"type\": \"string\"\n            },\n            \"expiry\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            },\n            \"pin\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\"id\", \"requestId\", \"url\", \"expiry\", \"pin\"],\n          \"additionalProperties\": false\n        }\n      },\n      \"methods\": {\n        \"issuanceRequestMsVc\": {\n          \"description\": \"\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/IClientIssueRequest\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/IIssueRequestResponse\"\n          }\n        }\n      }\n    }\n  }\n}\n","import {\n  assertEntraCredentialManifestUrlInCorrectRegion,\n  IMSClientCredentialAuthInfo,\n  determineMSAuthId,\n  getMSClientCredentialAccessToken,\n  newMSClientCredentialAuthenticator,\n} from '@sphereon/ssi-sdk.ms-authenticator'\nimport { IAgentPlugin } from '@veramo/core'\nimport { fetchIssuanceRequestMs, generatePin } from '../IssuerUtil'\nimport {\n  IClientIssueRequest,\n  IIssueRequest,\n  IIssueRequestResponse,\n  IMsRequestApi,\n  IRequiredContext,\n  Issuance,\n  IssuanceConfig,\n} from '../types/IMsRequestApi'\n\n/**\n * {@inheritDoc IMsRequestApi}\n */\nexport class MsRequestApi implements IAgentPlugin {\n  private clients: Map<string, IMSClientCredentialAuthInfo> = new Map<string, IMSClientCredentialAuthInfo>()\n\n  readonly methods: IMsRequestApi = {\n    issuanceRequestMsVc: this.issuanceRequestMsVc.bind(this),\n  }\n\n  /** {@inheritDoc IMsRequestApi.issuanceRequestMsVc} */\n  private async issuanceRequestMsVc(clientIssueRequest: IClientIssueRequest, context: IRequiredContext): Promise<IIssueRequestResponse> {\n    const id = determineMSAuthId(clientIssueRequest.authenticationInfo)\n    if (!this.clients.has(id)) {\n      this.clients.set(id, await newMSClientCredentialAuthenticator(clientIssueRequest.authenticationInfo))\n    }\n    const clientInfo = this.clients.get(id)\n    if (!clientInfo) {\n      throw Error(`Could not get client from arguments for id: ${id}`)\n    }\n    const authResult = await getMSClientCredentialAccessToken(clientIssueRequest.authenticationInfo, {\n      confidentialClient: clientInfo.confidentialClient,\n    })\n    const accessToken = authResult.accessToken\n\n    const msIdentityHostName = await assertEntraCredentialManifestUrlInCorrectRegion(clientIssueRequest.authenticationInfo)\n\n    // Config Request and App Config File should be a parameter to this function\n    if (!clientIssueRequest.authenticationInfo.azTenantId) {\n      throw new Error('azTenantId is missing.')\n    }\n\n    // check if pin is required, if found make sure we set a new random pin\n    // pincode is only used when the payload contains claim value pairs which results in an IDTokenhint\n    if (clientIssueRequest.clientIssuanceConfig.issuance.pin) {\n      clientIssueRequest.clientIssuanceConfig.issuance.pin.value = generatePin(clientIssueRequest.clientIssuanceConfig.issuance.pin.length)\n    }\n\n    const issuance: Issuance = {\n      type: clientIssueRequest.clientIssuanceConfig.issuance.type,\n      manifest: clientIssueRequest.clientIssuanceConfig.issuance.manifest,\n      pin: clientIssueRequest.clientIssuanceConfig.issuance.pin,\n      claims: clientIssueRequest.claims,\n    }\n\n    const issuanceConfig: IssuanceConfig = {\n      authority: clientIssueRequest.clientIssuanceConfig.authority,\n      includeQRCode: clientIssueRequest.clientIssuanceConfig.includeQRCode,\n      registration: clientIssueRequest.clientIssuanceConfig.registration,\n      callback: clientIssueRequest.clientIssuanceConfig.callback,\n      issuance: issuance,\n    }\n    const issueRequest: IIssueRequest = {\n      authenticationInfo: clientIssueRequest.authenticationInfo,\n      issuanceConfig: issuanceConfig,\n    }\n\n    const resp = await fetchIssuanceRequestMs(issueRequest, accessToken, msIdentityHostName)\n\n    // the response from the VC Request API call is returned to the caller (the UI). It contains the URI to the request which Authenticator can download after\n    // it has scanned the QR code. If the payload requested the VC Request service to create the QR code that is returned as well\n    // the javascript in the UI will use that QR code to display it on the screen to the user.\n    resp.id = issueRequest.issuanceConfig.callback.state // add session id so browser can pull status\n    if (issueRequest.issuanceConfig.issuance.pin) {\n      resp.pin = issueRequest.issuanceConfig.issuance.pin.value // add pin code so browser can display it\n    }\n    return resp\n  }\n}\n","import { IIssueRequest, IIssueRequestResponse } from './types/IMsRequestApi'\n\nimport { fetch } from 'cross-fetch'\nexport async function fetchIssuanceRequestMs(\n  issuanceInfo: IIssueRequest,\n  accessToken: string,\n  msIdentityHostName: string,\n): Promise<IIssueRequestResponse> {\n  const requestEndpoint = `${msIdentityHostName}${issuanceInfo.authenticationInfo.azTenantId}/verifiablecredentials/request`\n\n  const payload = JSON.stringify(issuanceInfo.issuanceConfig)\n  const fetchOptions = {\n    method: 'POST',\n    body: payload,\n    headers: {\n      'Content-Type': 'application/json',\n      'Content-Length': payload.length.toString(),\n      Authorization: `Bearer ${accessToken}`,\n    },\n  }\n  const response = await fetch(requestEndpoint, fetchOptions)\n  return await response.json()\n}\n\nexport function generatePin(digits: number) {\n  const add = 1\n  let max = 12 - add\n  max = Math.pow(10, digits + add)\n  const min = max / 10 // Math.pow(10, n) basically\n  const number = Math.floor(Math.random() * (max - min + 1)) + min\n  return ('' + number).substring(add)\n}\n","/**\n * @public\n */\nconst schema = require('../plugin.schema.json')\nexport { schema }\nexport { MsRequestApi } from './agent/MsRequestApi'\nexport * from './types/IMsRequestApi'\nexport * from './IssuerUtil'\n"],"mappings":";;;;;;;;AAAA;AAAA;AAAA;AAAA,MACE,eAAiB;AAAA,QACf,YAAc;AAAA,UACZ,SAAW;AAAA,YACT,qBAAuB;AAAA,cACrB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,oBAAsB;AAAA,kBACpB,MAAQ;AAAA,gBACV;AAAA,gBACA,sBAAwB;AAAA,kBACtB,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,sBAAsB,wBAAwB,QAAQ;AAAA,cACnE,sBAAwB;AAAA,YAC1B;AAAA,YACA,uCAAyC;AAAA,cACvC,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,YAAc;AAAA,kBACZ,MAAQ;AAAA,gBACV;AAAA,gBACA,YAAc;AAAA,kBACZ,MAAQ;AAAA,gBACV;AAAA,gBACA,gBAAkB;AAAA,kBAChB,MAAQ;AAAA,gBACV;AAAA,gBACA,uBAAyB;AAAA,kBACvB,MAAQ;AAAA,gBACV;AAAA,gBACA,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,kBACR,OAAS;AAAA,oBACP,MAAQ;AAAA,kBACV;AAAA,gBACF;AAAA,gBACA,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,mBAAqB;AAAA,kBACnB,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,cAAc,cAAc,gBAAgB;AAAA,cACzD,sBAAwB;AAAA,cACxB,aAAe;AAAA,YACjB;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,cACR,MAAQ,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;AAAA,cACtB,aAAe;AAAA,YACjB;AAAA,YACA,uBAAyB;AAAA,cACvB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,eAAiB;AAAA,kBACf,MAAQ;AAAA,gBACV;AAAA,gBACA,cAAgB;AAAA,kBACd,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,aAAa,iBAAiB,gBAAgB,YAAY,UAAU;AAAA,cACjF,sBAAwB;AAAA,YAC1B;AAAA,YACA,cAAgB;AAAA,cACd,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,YAAc;AAAA,kBACZ,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,YAAY;AAAA,cACzB,sBAAwB;AAAA,YAC1B;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,gBACA,OAAS;AAAA,kBACP,MAAQ;AAAA,gBACV;AAAA,gBACA,SAAW;AAAA,kBACT,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,OAAO,SAAS,SAAS;AAAA,cACtC,sBAAwB;AAAA,YAC1B;AAAA,YACA,SAAW;AAAA,cACT,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,QAAQ;AAAA,cACrB,sBAAwB;AAAA,YAC1B;AAAA,YACA,iBAAmB;AAAA,cACjB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,MAAQ;AAAA,kBACN,MAAQ;AAAA,gBACV;AAAA,gBACA,UAAY;AAAA,kBACV,MAAQ;AAAA,gBACV;AAAA,gBACA,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,QAAQ,YAAY,KAAK;AAAA,cACtC,sBAAwB;AAAA,YAC1B;AAAA,YACA,KAAO;AAAA,cACL,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,OAAS;AAAA,kBACP,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,SAAS,QAAQ;AAAA,cAC9B,sBAAwB;AAAA,YAC1B;AAAA,YACA,mBAAqB;AAAA,cACnB,MAAQ;AAAA,YACV;AAAA,YACA,uBAAyB;AAAA,cACvB,MAAQ;AAAA,cACR,YAAc;AAAA,gBACZ,IAAM;AAAA,kBACJ,MAAQ;AAAA,gBACV;AAAA,gBACA,WAAa;AAAA,kBACX,MAAQ;AAAA,gBACV;AAAA,gBACA,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,gBACA,QAAU;AAAA,kBACR,MAAQ;AAAA,kBACR,QAAU;AAAA,gBACZ;AAAA,gBACA,KAAO;AAAA,kBACL,MAAQ;AAAA,gBACV;AAAA,cACF;AAAA,cACA,UAAY,CAAC,MAAM,aAAa,OAAO,UAAU,KAAK;AAAA,cACtD,sBAAwB;AAAA,YAC1B;AAAA,UACF;AAAA,UACA,SAAW;AAAA,YACT,qBAAuB;AAAA,cACrB,aAAe;AAAA,cACf,WAAa;AAAA,gBACX,MAAQ;AAAA,cACV;AAAA,cACA,YAAc;AAAA,gBACZ,MAAQ;AAAA,cACV;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;;;ACjMA,SACEA,iDAEAC,mBACAC,kCACAC,0CACK;;;ACJP,SAASC,aAAa;AACtB,eAAsBC,uBACpBC,cACAC,aACAC,oBAA0B;AAE1B,QAAMC,kBAAkB,GAAGD,kBAAAA,GAAqBF,aAAaI,mBAAmBC,UAAU;AAE1F,QAAMC,UAAUC,KAAKC,UAAUR,aAAaS,cAAc;AAC1D,QAAMC,eAAe;IACnBC,QAAQ;IACRC,MAAMN;IACNO,SAAS;MACP,gBAAgB;MAChB,kBAAkBP,QAAQQ,OAAOC,SAAQ;MACzCC,eAAe,UAAUf,WAAAA;IAC3B;EACF;AACA,QAAMgB,WAAW,MAAMC,MAAMf,iBAAiBO,YAAAA;AAC9C,SAAO,MAAMO,SAASE,KAAI;AAC5B;AAnBsBpB;AAqBf,SAASqB,YAAYC,QAAc;AACxC,QAAMC,MAAM;AACZ,MAAIC,MAAM,KAAKD;AACfC,QAAMC,KAAKC,IAAI,IAAIJ,SAASC,GAAAA;AAC5B,QAAMI,MAAMH,MAAM;AAClB,QAAMI,SAASH,KAAKI,MAAMJ,KAAKK,OAAM,KAAMN,MAAMG,MAAM,EAAA,IAAMA;AAC7D,UAAQ,KAAKC,QAAQG,UAAUR,GAAAA;AACjC;AAPgBF;;;ADFT,IAAMW,eAAN,MAAMA;EAtBb,OAsBaA;;;EACHC,UAAoD,oBAAIC,IAAAA;EAEvDC,UAAyB;IAChCC,qBAAqB,KAAKA,oBAAoBC,KAAK,IAAI;EACzD;;EAGA,MAAcD,oBAAoBE,oBAAyCC,SAA2D;AACpI,UAAMC,KAAKC,kBAAkBH,mBAAmBI,kBAAkB;AAClE,QAAI,CAAC,KAAKT,QAAQU,IAAIH,EAAAA,GAAK;AACzB,WAAKP,QAAQW,IAAIJ,IAAI,MAAMK,mCAAmCP,mBAAmBI,kBAAkB,CAAA;IACrG;AACA,UAAMI,aAAa,KAAKb,QAAQc,IAAIP,EAAAA;AACpC,QAAI,CAACM,YAAY;AACf,YAAME,MAAM,+CAA+CR,EAAAA,EAAI;IACjE;AACA,UAAMS,aAAa,MAAMC,iCAAiCZ,mBAAmBI,oBAAoB;MAC/FS,oBAAoBL,WAAWK;IACjC,CAAA;AACA,UAAMC,cAAcH,WAAWG;AAE/B,UAAMC,qBAAqB,MAAMC,gDAAgDhB,mBAAmBI,kBAAkB;AAGtH,QAAI,CAACJ,mBAAmBI,mBAAmBa,YAAY;AACrD,YAAM,IAAIP,MAAM,wBAAA;IAClB;AAIA,QAAIV,mBAAmBkB,qBAAqBC,SAASC,KAAK;AACxDpB,yBAAmBkB,qBAAqBC,SAASC,IAAIC,QAAQC,YAAYtB,mBAAmBkB,qBAAqBC,SAASC,IAAIG,MAAM;IACtI;AAEA,UAAMJ,WAAqB;MACzBK,MAAMxB,mBAAmBkB,qBAAqBC,SAASK;MACvDC,UAAUzB,mBAAmBkB,qBAAqBC,SAASM;MAC3DL,KAAKpB,mBAAmBkB,qBAAqBC,SAASC;MACtDM,QAAQ1B,mBAAmB0B;IAC7B;AAEA,UAAMC,iBAAiC;MACrCC,WAAW5B,mBAAmBkB,qBAAqBU;MACnDC,eAAe7B,mBAAmBkB,qBAAqBW;MACvDC,cAAc9B,mBAAmBkB,qBAAqBY;MACtDC,UAAU/B,mBAAmBkB,qBAAqBa;MAClDZ;IACF;AACA,UAAMa,eAA8B;MAClC5B,oBAAoBJ,mBAAmBI;MACvCuB;IACF;AAEA,UAAMM,OAAO,MAAMC,uBAAuBF,cAAclB,aAAaC,kBAAAA;AAKrEkB,SAAK/B,KAAK8B,aAAaL,eAAeI,SAASI;AAC/C,QAAIH,aAAaL,eAAeR,SAASC,KAAK;AAC5Ca,WAAKb,MAAMY,aAAaL,eAAeR,SAASC,IAAIC;IACtD;AACA,WAAOY;EACT;AACF;;;AEpFA,IAAMG,SAASC;","names":["assertEntraCredentialManifestUrlInCorrectRegion","determineMSAuthId","getMSClientCredentialAccessToken","newMSClientCredentialAuthenticator","fetch","fetchIssuanceRequestMs","issuanceInfo","accessToken","msIdentityHostName","requestEndpoint","authenticationInfo","azTenantId","payload","JSON","stringify","issuanceConfig","fetchOptions","method","body","headers","length","toString","Authorization","response","fetch","json","generatePin","digits","add","max","Math","pow","min","number","floor","random","substring","MsRequestApi","clients","Map","methods","issuanceRequestMsVc","bind","clientIssueRequest","context","id","determineMSAuthId","authenticationInfo","has","set","newMSClientCredentialAuthenticator","clientInfo","get","Error","authResult","getMSClientCredentialAccessToken","confidentialClient","accessToken","msIdentityHostName","assertEntraCredentialManifestUrlInCorrectRegion","azTenantId","clientIssuanceConfig","issuance","pin","value","generatePin","length","type","manifest","claims","issuanceConfig","authority","includeQRCode","registration","callback","issueRequest","resp","fetchIssuanceRequestMs","state","schema","require"]}

package/package.json

@@ -1,30 +1,41 @@
 {
   "name": "@sphereon/ssi-sdk.ms-request-api",
-  "version": "0.33.1-next.3+fd1a6fba",
+  "version": "0.33.1-next.68+b6c8b366",
   "source": "src/index.ts",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    "react-native": "./dist/index.js",
+    "import": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "require": {
+      "types": "./dist/index.d.cts",
+      "require": "./dist/index.cjs"
+    }
+  },
   "veramo": {
     "pluginInterfaces": {
       "IMsRequestApi": "./src/types/IMsRequestApi.ts"
     }
   },
   "scripts": {
-    "build": "tsc --build",
-    "build:clean": "tsc --build --clean && tsc --build",
+    "build": "tsup --config ../../tsup.config.ts --tsconfig ../../tsconfig.tsup.json",
     "generate-plugin-schema": "ts-node ../../packages/dev/bin/sphereon.js dev generate-plugin-schema"
   },
   "dependencies": {
-    "@sphereon/ssi-sdk.ms-authenticator": "0.33.1-next.3+fd1a6fba",
+    "@sphereon/ssi-sdk.ms-authenticator": "0.33.1-next.68+b6c8b366",
     "@veramo/core": "4.2.0",
     "cross-fetch": "^3.1.8"
   },
   "devDependencies": {
-    "@sphereon/ssi-sdk.agent-config": "0.33.1-next.3+fd1a6fba",
-    "@sphereon/ssi-sdk.credential-store": "0.33.1-next.3+fd1a6fba",
+    "@sphereon/ssi-sdk.agent-config": "0.33.1-next.68+b6c8b366",
+    "@sphereon/ssi-sdk.credential-store": "0.33.1-next.68+b6c8b366",
     "@types/express": "^4.17.21",
     "@types/express-session": "^1.18.0",
-    "@types/jest": "^27.5.2",
     "@types/node": "^20.17.1",
     "@types/uuid": "^9.0.8",
     "@veramo/data-store": "4.2.0",
@@ -32,17 +43,15 @@
     "@veramo/remote-server": "4.2.0",
     "express": "^4.19.2",
     "express-session": "^1.18.0",
-    "jest": "^27.5.1",
     "prettier": "^2.8.8",
     "sqlite3": "^5.1.7",
-    "ts-jest": "^27.1.5",
-    "typeorm": "^0.3.21",
-    "typescript": "5.4.2",
+    "typeorm": "0.3.20",
+    "typescript": "5.8.3",
     "uuid": "^9.0.1"
   },
   "files": [
-    "dist/**/*",
-    "src/**/*",
+    "dist",
+    "src",
     "README.md",
     "plugin.schema.json",
     "LICENSE"
@@ -65,6 +74,5 @@
     "API",
     "Issuer"
   ],
-  "nx": {},
-  "gitHead": "fd1a6fba306a83a73ff7c531db87fa207dbf436d"
+  "gitHead": "b6c8b36636fa3777494f55860d6a75f2e5a5611e"
 }

package/plugin.schema.json

@@ -15,11 +15,8 @@
               "$ref": "#/components/schemas/CredentialSubject"
             }
           },
-          "required": [
-            "authenticationInfo",
-            "clientIssuanceConfig",
-            "claims"
-          ]
+          "required": ["authenticationInfo", "clientIssuanceConfig", "claims"],
+          "additionalProperties": false
         },
         "IMsAuthenticationClientCredentialArgs": {
           "type": "object",
@@ -58,22 +55,13 @@
               "$ref": "#/components/schemas/LogLevel"
             }
           },
-          "required": [
-            "azClientId",
-            "azTenantId",
-            "azClientSecret"
-          ],
+          "required": ["azClientId", "azTenantId", "azClientSecret"],
+          "additionalProperties": false,
           "description": "azClientId: clientId of the application you're trying to login azClientSecret: secret of the application you're trying to login azTenantId: your MS Azure tenantId credentialManifestUrl: url of your credential manifest. usually in following format:  https://beta.eu.did.msidentity.com/v1.0/<tenant_id>/verifiableCredential/contracts/<verifiable_credential_schema> authority: optional. if not provided, we'll use the azClientId to create the Tenanted format if provided should be one of these two formats:  - Tenanted: https://login.microsoftonline.com/{tenant}/, where {tenant} is either the GUID representing the tenant ID or a domain name associated with the tenant.  - Work and school accounts: https://login.microsoftonline.com/organizations/. region?: if present will use the provided, if not will make a request to determine the region scopes?: scopes that you want to access via this authentication skipCache?: whether to skip cache piiLoggingEnabled?: if not provided defaults to false logLevel?: can be one of these values:   Error = 0,   Warning = 1,   Info = 2,   Verbose = 3,   Trace = 4   if not provided defaults to LogLevel.Verbose"
         },
         "LogLevel": {
           "type": "number",
-          "enum": [
-            0,
-            1,
-            2,
-            3,
-            4
-          ],
+          "enum": [0, 1, 2, 3, 4],
           "description": "Log message level."
         },
         "IClientIssuanceConfig": {
@@ -95,13 +83,8 @@
               "$ref": "#/components/schemas/IClientIssuance"
             }
           },
-          "required": [
-            "authority",
-            "includeQRCode",
-            "registration",
-            "callback",
-            "issuance"
-          ]
+          "required": ["authority", "includeQRCode", "registration", "callback", "issuance"],
+          "additionalProperties": false
         },
         "Registration": {
           "type": "object",
@@ -110,9 +93,8 @@
               "type": "string"
             }
           },
-          "required": [
-            "clientName"
-          ]
+          "required": ["clientName"],
+          "additionalProperties": false
         },
         "Callback": {
           "type": "object",
@@ -127,11 +109,8 @@
               "$ref": "#/components/schemas/Headers"
             }
           },
-          "required": [
-            "url",
-            "state",
-            "headers"
-          ]
+          "required": ["url", "state", "headers"],
+          "additionalProperties": false
         },
         "Headers": {
           "type": "object",
@@ -140,9 +119,8 @@
               "type": "string"
             }
           },
-          "required": [
-            "apiKey"
-          ]
+          "required": ["apiKey"],
+          "additionalProperties": false
         },
         "IClientIssuance": {
           "type": "object",
@@ -157,11 +135,8 @@
               "$ref": "#/components/schemas/Pin"
             }
           },
-          "required": [
-            "type",
-            "manifest",
-            "pin"
-          ]
+          "required": ["type", "manifest", "pin"],
+          "additionalProperties": false
         },
         "Pin": {
           "type": "object",
@@ -173,10 +148,8 @@
               "type": "number"
             }
           },
-          "required": [
-            "value",
-            "length"
-          ]
+          "required": ["value", "length"],
+          "additionalProperties": false
         },
         "CredentialSubject": {
           "type": "object"
@@ -201,13 +174,8 @@
               "type": "string"
             }
           },
-          "required": [
-            "id",
-            "requestId",
-            "url",
-            "expiry",
-            "pin"
-          ]
+          "required": ["id", "requestId", "url", "expiry", "pin"],
+          "additionalProperties": false
         }
       },
       "methods": {
@@ -223,4 +191,4 @@
       }
     }
   }
-}
+}

package/dist/IssuerUtil.d.ts

@@ -1,4 +0,0 @@
-import { IIssueRequest, IIssueRequestResponse } from './types/IMsRequestApi';
-export declare function fetchIssuanceRequestMs(issuanceInfo: IIssueRequest, accessToken: string, msIdentityHostName: string): Promise<IIssueRequestResponse>;
-export declare function generatePin(digits: number): string;
-//# sourceMappingURL=IssuerUtil.d.ts.map

package/dist/IssuerUtil.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"IssuerUtil.d.ts","sourceRoot":"","sources":["../src/IssuerUtil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAG5E,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,aAAa,EAC3B,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,qBAAqB,CAAC,CAehC;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,UAOzC"}

package/dist/IssuerUtil.js

@@ -1,40 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fetchIssuanceRequestMs = fetchIssuanceRequestMs;
-exports.generatePin = generatePin;
-const cross_fetch_1 = require("cross-fetch");
-function fetchIssuanceRequestMs(issuanceInfo, accessToken, msIdentityHostName) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const requestEndpoint = `${msIdentityHostName}${issuanceInfo.authenticationInfo.azTenantId}/verifiablecredentials/request`;
-        const payload = JSON.stringify(issuanceInfo.issuanceConfig);
-        const fetchOptions = {
-            method: 'POST',
-            body: payload,
-            headers: {
-                'Content-Type': 'application/json',
-                'Content-Length': payload.length.toString(),
-                Authorization: `Bearer ${accessToken}`,
-            },
-        };
-        const response = yield (0, cross_fetch_1.fetch)(requestEndpoint, fetchOptions);
-        return yield response.json();
-    });
-}
-function generatePin(digits) {
-    const add = 1;
-    let max = 12 - add;
-    max = Math.pow(10, digits + add);
-    const min = max / 10; // Math.pow(10, n) basically
-    const number = Math.floor(Math.random() * (max - min + 1)) + min;
-    return ('' + number).substring(add);
-}
-//# sourceMappingURL=IssuerUtil.js.map

package/dist/IssuerUtil.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"IssuerUtil.js","sourceRoot":"","sources":["../src/IssuerUtil.ts"],"names":[],"mappings":";;;;;;;;;;;AAGA,wDAmBC;AAED,kCAOC;AA7BD,6CAAmC;AACnC,SAAsB,sBAAsB,CAC1C,YAA2B,EAC3B,WAAmB,EACnB,kBAA0B;;QAE1B,MAAM,eAAe,GAAG,GAAG,kBAAkB,GAAG,YAAY,CAAC,kBAAkB,CAAC,UAAU,gCAAgC,CAAA;QAE1H,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;QAC3D,MAAM,YAAY,GAAG;YACnB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO;YACb,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC3C,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAK,EAAC,eAAe,EAAE,YAAY,CAAC,CAAA;QAC3D,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;CAAA;AAED,SAAgB,WAAW,CAAC,MAAc;IACxC,MAAM,GAAG,GAAG,CAAC,CAAA;IACb,IAAI,GAAG,GAAG,EAAE,GAAG,GAAG,CAAA;IAClB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,GAAG,CAAC,CAAA;IAChC,MAAM,GAAG,GAAG,GAAG,GAAG,EAAE,CAAA,CAAC,4BAA4B;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAA;IAChE,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;AACrC,CAAC"}