@toon-protocol/connector 1.7.1

package/dist/wallet/wallet-security.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WalletSecurityManager = exports.SpendingLimitExceededError = void 0;
+class SpendingLimitExceededError extends Error {
+    constructor(limitType, limit, attempted) {
+        super(`${limitType} spending limit exceeded: ${attempted} > ${limit}`);
+        this.name = 'SpendingLimitExceededError';
+    }
+}
+exports.SpendingLimitExceededError = SpendingLimitExceededError;
+class WalletSecurityManager {
+    config;
+    fraudDetector;
+    logger;
+    db;
+    constructor(config, fraudDetector, logger, db) {
+        this.config = config;
+        this.fraudDetector = fraudDetector;
+        this.logger = logger;
+        this.db = db;
+    }
+    sanitizeWalletData(wallet) {
+        if (!wallet || typeof wallet !== 'object') {
+            return wallet;
+        }
+        const sanitized = { ...wallet };
+        delete sanitized.privateKey;
+        delete sanitized.mnemonic;
+        delete sanitized.seed;
+        delete sanitized.encryptionKey;
+        delete sanitized.secret;
+        if (sanitized.signer && typeof sanitized.signer === 'object') {
+            sanitized.signer = { ...sanitized.signer };
+            delete sanitized.signer.privateKey;
+            delete sanitized.signer.secret;
+        }
+        return sanitized;
+    }
+    async getSpendingLimits(agentId) {
+        if (this.config.spendingLimits.perAgent[agentId]) {
+            return this.config.spendingLimits.perAgent[agentId];
+        }
+        return this.config.spendingLimits.default;
+    }
+    async getDailySpending(agentId, token) {
+        if (!this.db) {
+            return 0n;
+        }
+        const oneDayAgo = Date.now() - 24 * 60 * 60 * 1000;
+        try {
+            const stmt = this.db.prepare(`
+        SELECT SUM(CAST(json_extract(details, '$.amount') AS INTEGER)) as total
+        FROM wallet_audit_log
+        WHERE agentId = ?
+          AND operation = 'payment_sent'
+          AND timestamp >= ?
+          AND json_extract(details, '$.token') = ?
+      `);
+            const result = stmt.get(agentId, oneDayAgo, token);
+            return BigInt(result?.total ?? 0);
+        }
+        catch (error) {
+            this.logger.warn({ error, agentId, token }, 'Failed to query daily spending');
+            return 0n;
+        }
+    }
+    async getMonthlySpending(agentId, token) {
+        if (!this.db) {
+            return 0n;
+        }
+        const thirtyDaysAgo = Date.now() - 30 * 24 * 60 * 60 * 1000;
+        try {
+            const stmt = this.db.prepare(`
+        SELECT SUM(CAST(json_extract(details, '$.amount') AS INTEGER)) as total
+        FROM wallet_audit_log
+        WHERE agentId = ?
+          AND operation = 'payment_sent'
+          AND timestamp >= ?
+          AND json_extract(details, '$.token') = ?
+      `);
+            const result = stmt.get(agentId, thirtyDaysAgo, token);
+            return BigInt(result?.total ?? 0);
+        }
+        catch (error) {
+            this.logger.warn({ error, agentId, token }, 'Failed to query monthly spending');
+            return 0n;
+        }
+    }
+    async validateTransaction(agentId, amount, token) {
+        try {
+            const limits = await this.getSpendingLimits(agentId);
+            if (amount > limits.maxTransactionSize) {
+                this.logger.warn({
+                    agentId,
+                    amount: amount.toString(),
+                    limit: limits.maxTransactionSize.toString(),
+                    token,
+                }, 'Transaction exceeds max transaction size limit');
+                return false;
+            }
+            const dailySpent = await this.getDailySpending(agentId, token);
+            if (dailySpent + amount > limits.dailyLimit) {
+                this.logger.warn({
+                    agentId,
+                    amount: amount.toString(),
+                    dailySpent: dailySpent.toString(),
+                    dailyLimit: limits.dailyLimit.toString(),
+                    token,
+                }, 'Transaction exceeds daily spending limit');
+                return false;
+            }
+            const monthlySpent = await this.getMonthlySpending(agentId, token);
+            if (monthlySpent + amount > limits.monthlyLimit) {
+                this.logger.warn({
+                    agentId,
+                    amount: amount.toString(),
+                    monthlySpent: monthlySpent.toString(),
+                    monthlyLimit: limits.monthlyLimit.toString(),
+                    token,
+                }, 'Transaction exceeds monthly spending limit');
+                return false;
+            }
+            const fraudCheck = await this.fraudDetector.analyzeTransaction({
+                agentId,
+                amount,
+                token,
+                timestamp: Date.now(),
+            });
+            if (fraudCheck.detected) {
+                this.logger.error({
+                    agentId,
+                    amount: amount.toString(),
+                    token,
+                    fraudReason: fraudCheck.reason,
+                    fraudScore: fraudCheck.score,
+                }, 'Transaction flagged as fraudulent');
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            this.logger.error({ error, agentId, amount: amount.toString(), token }, 'Error validating transaction');
+            return false;
+        }
+    }
+}
+exports.WalletSecurityManager = WalletSecurityManager;
+//# sourceMappingURL=wallet-security.js.map

package/dist/wallet/wallet-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-security.js","sourceRoot":"","sources":["../../src/wallet/wallet-security.ts"],"names":[],"mappings":";;;AA4EA,MAAa,0BAA2B,SAAQ,KAAK;IACnD,YAAY,SAAiB,EAAE,KAAa,EAAE,SAAiB;QAC7D,KAAK,CAAC,GAAG,SAAS,6BAA6B,SAAS,MAAM,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAMD,MAAa,qBAAqB;IACxB,MAAM,CAAiB;IACvB,aAAa,CAAgB;IAC7B,MAAM,CAAS;IACf,EAAE,CAAqB;IAE/B,YACE,MAAsB,EACtB,aAA4B,EAC5B,MAAc,EACd,EAAsB;QAEtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAUD,kBAAkB,CAAI,MAAS;QAC7B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC;QAChB,CAAC;QAGD,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,EAA6B,CAAC;QAG3D,OAAO,SAAS,CAAC,UAAU,CAAC;QAC5B,OAAO,SAAS,CAAC,QAAQ,CAAC;QAC1B,OAAO,SAAS,CAAC,IAAI,CAAC;QACtB,OAAO,SAAS,CAAC,aAAa,CAAC;QAC/B,OAAO,SAAS,CAAC,MAAM,CAAC;QAGxB,IAAI,SAAS,CAAC,MAAM,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7D,SAAS,CAAC,MAAM,GAAG,EAAE,GAAI,SAAS,CAAC,MAAkC,EAAE,CAAC;YACxE,OAAQ,SAAS,CAAC,MAAkC,CAAC,UAAU,CAAC;YAChE,OAAQ,SAAS,CAAC,MAAkC,CAAC,MAAM,CAAC;QAC9D,CAAC;QAED,OAAO,SAAc,CAAC;IACxB,CAAC;IASD,KAAK,CAAC,iBAAiB,CAAC,OAAe;QAErC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAGD,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC;IAC5C,CAAC;IAWD,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,KAAa;QACnD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QAGD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAEnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;OAO5B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAyC,CAAC;YAC3F,OAAO,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAC9E,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAWD,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,KAAa;QACrD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QAGD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;OAO5B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAExC,CAAC;YACd,OAAO,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,kCAAkC,CAAC,CAAC;YAChF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAWD,KAAK,CAAC,mBAAmB,CAAC,OAAe,EAAE,MAAc,EAAE,KAAa;QACtE,IAAI,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAGrD,IAAI,MAAM,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;oBACE,OAAO;oBACP,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,KAAK,EAAE,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE;oBAC3C,KAAK;iBACN,EACD,gDAAgD,CACjD,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAGD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;oBACE,OAAO;oBACP,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;oBACjC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE;oBACxC,KAAK;iBACN,EACD,0CAA0C,CAC3C,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAGD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnE,IAAI,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;oBACE,OAAO;oBACP,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;oBACrC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE;oBAC5C,KAAK;iBACN,EACD,4CAA4C,CAC7C,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAGD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC;gBAC7D,OAAO;gBACP,MAAM;gBACN,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf;oBACE,OAAO;oBACP,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,KAAK;oBACL,WAAW,EAAE,UAAU,CAAC,MAAM;oBAC9B,UAAU,EAAE,UAAU,CAAC,KAAK;iBAC7B,EACD,mCAAmC,CACpC,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAGD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,EACpD,8BAA8B,CAC/B,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAxOD,sDAwOC"}

package/dist/wallet/wallet-seed-manager.d.ts

@@ -0,0 +1,65 @@
+export interface KeyManager {
+    storeSecret(name: string, value: string): Promise<void>;
+    retrieveSecret(name: string): Promise<string>;
+    deleteSecret(name: string): Promise<void>;
+}
+export interface SeedConfig {
+    storageBackend: 'filesystem' | 'hsm';
+    storagePath?: string;
+    hsmConfig?: object;
+}
+export interface MasterSeed {
+    mnemonic: string;
+    seed: Buffer;
+    createdAt: number;
+    encryptionKey?: Buffer;
+}
+export interface BackupData {
+    version: string;
+    createdAt: number;
+    encryptedSeed: string;
+    backupDate: number;
+    checksum: string;
+}
+export interface PaperWallet {
+    mnemonic: string;
+    qrCodeDataUrl: string;
+    createdAt: number;
+}
+export declare const DERIVATION_PATHS: {
+    readonly EVM: "m/44'/60'/1'/0";
+};
+export declare class InvalidMnemonicError extends Error {
+    constructor(message: string);
+}
+export declare class DecryptionError extends Error {
+    constructor(message: string);
+}
+export declare class InvalidBackupError extends Error {
+    constructor(message: string);
+}
+export declare class WeakPasswordError extends Error {
+    constructor(message: string);
+}
+export declare class WalletSeedManager {
+    private logger;
+    private keyManager?;
+    private config;
+    private salt?;
+    constructor(keyManager?: KeyManager, config?: Partial<SeedConfig>);
+    initialize(): Promise<void>;
+    private initializeSalt;
+    validatePassword(password: string): boolean;
+    private deriveEncryptionKey;
+    generateMasterSeed(strength?: 128 | 256): Promise<MasterSeed>;
+    importMasterSeed(mnemonic: string): Promise<MasterSeed>;
+    encryptAndStore(masterSeed: MasterSeed, password: string): Promise<string>;
+    decryptAndLoad(password: string): Promise<MasterSeed>;
+    private calculateChecksum;
+    exportBackup(masterSeed: MasterSeed, password: string): Promise<BackupData>;
+    restoreFromBackup(backup: BackupData, password: string): Promise<MasterSeed>;
+    generatePaperWallet(masterSeed: MasterSeed): Promise<PaperWallet>;
+    exportPaperWallet(paperWallet: PaperWallet, outputPath?: string): Promise<string>;
+    exportBackupToFile(backup: BackupData, outputPath?: string): Promise<string>;
+}
+//# sourceMappingURL=wallet-seed-manager.d.ts.map

package/dist/wallet/wallet-seed-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-seed-manager.d.ts","sourceRoot":"","sources":["../../src/wallet/wallet-seed-manager.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAKD,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,YAAY,GAAG,KAAK,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAQD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAQD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAQD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,eAAO,MAAM,gBAAgB;;CAEnB,CAAC;AAKX,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAKD,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAKD,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAKD,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAyBD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAS;gBAOV,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;IAe3D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAanB,cAAc;IAqC5B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAsC3C,OAAO,CAAC,mBAAmB;IA0BrB,kBAAkB,CAAC,QAAQ,GAAE,GAAG,GAAG,GAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IA8ClE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAqDvD,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4D1E,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA+D3D,OAAO,CAAC,iBAAiB;IAoBnB,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA0C3E,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA8C5E,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAyCjE,iBAAiB,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAwJjF,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAmBnF"}

package/dist/wallet/wallet-seed-manager.js

@@ -0,0 +1,418 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WalletSeedManager = exports.WeakPasswordError = exports.InvalidBackupError = exports.DecryptionError = exports.InvalidMnemonicError = exports.DERIVATION_PATHS = void 0;
+const tslib_1 = require("tslib");
+const crypto_1 = require("crypto");
+const fs_1 = require("fs");
+const path = tslib_1.__importStar(require("path"));
+const pino_1 = tslib_1.__importDefault(require("pino"));
+const optional_require_1 = require("../utils/optional-require");
+exports.DERIVATION_PATHS = {
+    EVM: "m/44'/60'/1'/0",
+};
+class InvalidMnemonicError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidMnemonicError';
+    }
+}
+exports.InvalidMnemonicError = InvalidMnemonicError;
+class DecryptionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'DecryptionError';
+    }
+}
+exports.DecryptionError = DecryptionError;
+class InvalidBackupError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidBackupError';
+    }
+}
+exports.InvalidBackupError = InvalidBackupError;
+class WeakPasswordError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WeakPasswordError';
+    }
+}
+exports.WeakPasswordError = WeakPasswordError;
+class WalletSeedManager {
+    logger;
+    keyManager;
+    config;
+    salt;
+    constructor(keyManager, config) {
+        this.keyManager = keyManager;
+        this.config = {
+            storageBackend: config?.storageBackend ?? 'filesystem',
+            storagePath: config?.storagePath ?? './data/wallet',
+            hsmConfig: config?.hsmConfig,
+        };
+        this.logger = (0, pino_1.default)({ name: 'wallet-seed-manager' });
+    }
+    async initialize() {
+        this.salt = await this.initializeSalt();
+        this.logger.info('WalletSeedManager initialized');
+    }
+    async initializeSalt() {
+        const saltPath = path.join(this.config.storagePath, 'encryption-salt');
+        try {
+            const saltData = await fs_1.promises.readFile(saltPath);
+            this.logger.info('Loaded existing encryption salt');
+            return saltData;
+        }
+        catch (error) {
+            this.logger.info('Generating new encryption salt');
+            const newSalt = (0, crypto_1.randomBytes)(32);
+            await fs_1.promises.mkdir(path.dirname(saltPath), { recursive: true });
+            await fs_1.promises.writeFile(saltPath, newSalt);
+            this.logger.info({ saltPath }, 'Encryption salt saved');
+            return newSalt;
+        }
+    }
+    validatePassword(password) {
+        const minLength = 16;
+        const hasUppercase = /[A-Z]/.test(password);
+        const hasLowercase = /[a-z]/.test(password);
+        const hasNumber = /[0-9]/.test(password);
+        const hasSymbol = /[!@#$%^&*()_+\-=[\]{}|;:,.<>?]/.test(password);
+        if (password.length < minLength) {
+            throw new WeakPasswordError(`Password must be at least ${minLength} characters long`);
+        }
+        if (!hasUppercase) {
+            throw new WeakPasswordError('Password must contain at least one uppercase letter');
+        }
+        if (!hasLowercase) {
+            throw new WeakPasswordError('Password must contain at least one lowercase letter');
+        }
+        if (!hasNumber) {
+            throw new WeakPasswordError('Password must contain at least one number');
+        }
+        if (!hasSymbol) {
+            throw new WeakPasswordError('Password must contain at least one symbol');
+        }
+        return true;
+    }
+    deriveEncryptionKey(password) {
+        this.validatePassword(password);
+        if (!this.salt) {
+            throw new Error('Salt not initialized. Call initialize() first.');
+        }
+        return (0, crypto_1.pbkdf2Sync)(password, this.salt, 100000, 32, 'sha256');
+    }
+    async generateMasterSeed(strength = 256) {
+        try {
+            const bip39 = await (0, optional_require_1.requireOptional)('bip39', 'BIP-39 mnemonic generation');
+            const mnemonic = bip39.generateMnemonic(strength);
+            const seed = await bip39.mnemonicToSeed(mnemonic);
+            const masterSeed = {
+                mnemonic,
+                seed: Buffer.from(seed),
+                createdAt: Date.now(),
+            };
+            this.logger.info({ strength, wordCount: mnemonic.split(' ').length }, 'Master seed generated');
+            return masterSeed;
+        }
+        catch (error) {
+            this.logger.error({ error }, 'Failed to generate master seed');
+            throw error;
+        }
+    }
+    async importMasterSeed(mnemonic) {
+        try {
+            const bip39 = await (0, optional_require_1.requireOptional)('bip39', 'BIP-39 mnemonic validation');
+            if (!bip39.validateMnemonic(mnemonic)) {
+                throw new InvalidMnemonicError('Invalid mnemonic: checksum validation failed');
+            }
+            const seed = await bip39.mnemonicToSeed(mnemonic);
+            const masterSeed = {
+                mnemonic,
+                seed: Buffer.from(seed),
+                createdAt: Date.now(),
+            };
+            this.logger.info({ wordCount: mnemonic.split(' ').length }, 'Master seed imported from mnemonic');
+            return masterSeed;
+        }
+        catch (error) {
+            if (error instanceof InvalidMnemonicError) {
+                throw error;
+            }
+            this.logger.error({ error }, 'Failed to import master seed');
+            throw error;
+        }
+    }
+    async encryptAndStore(masterSeed, password) {
+        try {
+            const key = this.deriveEncryptionKey(password);
+            const iv = (0, crypto_1.randomBytes)(16);
+            const cipher = (0, crypto_1.createCipheriv)('aes-256-gcm', key, iv);
+            let encrypted = cipher.update(masterSeed.mnemonic, 'utf8');
+            encrypted = Buffer.concat([encrypted, cipher.final()]);
+            const authTag = cipher.getAuthTag();
+            const encryptedData = Buffer.concat([iv, authTag, encrypted]);
+            const encryptedBase64 = encryptedData.toString('base64');
+            if (this.keyManager) {
+                await this.keyManager.storeSecret('master-seed', encryptedBase64);
+                this.logger.info('Master seed encrypted and stored to HSM/KMS');
+            }
+            else {
+                const seedPath = path.join(this.config.storagePath, 'master-seed.enc');
+                await fs_1.promises.mkdir(path.dirname(seedPath), { recursive: true });
+                await fs_1.promises.writeFile(seedPath, encryptedBase64, 'utf8');
+                this.logger.info({ seedPath }, 'Master seed encrypted and stored to filesystem');
+            }
+            return encryptedBase64;
+        }
+        catch (error) {
+            this.logger.error({ error }, 'Failed to encrypt and store master seed');
+            throw error;
+        }
+    }
+    async decryptAndLoad(password) {
+        try {
+            let encryptedBase64;
+            if (this.keyManager) {
+                encryptedBase64 = await this.keyManager.retrieveSecret('master-seed');
+                this.logger.info('Loaded encrypted master seed from HSM/KMS');
+            }
+            else {
+                const seedPath = path.join(this.config.storagePath, 'master-seed.enc');
+                encryptedBase64 = await fs_1.promises.readFile(seedPath, 'utf8');
+                this.logger.info({ seedPath }, 'Loaded encrypted master seed from filesystem');
+            }
+            const encryptedData = Buffer.from(encryptedBase64, 'base64');
+            const iv = encryptedData.subarray(0, 16);
+            const authTag = encryptedData.subarray(16, 32);
+            const encrypted = encryptedData.subarray(32);
+            const key = this.deriveEncryptionKey(password);
+            const decipher = (0, crypto_1.createDecipheriv)('aes-256-gcm', key, iv);
+            decipher.setAuthTag(authTag);
+            let decrypted;
+            try {
+                decrypted = decipher.update(encrypted);
+                decrypted = Buffer.concat([decrypted, decipher.final()]);
+            }
+            catch (error) {
+                this.logger.error('Decryption failed: invalid password or corrupted data');
+                throw new DecryptionError('Invalid password or corrupted data');
+            }
+            const mnemonic = decrypted.toString('utf8');
+            return await this.importMasterSeed(mnemonic);
+        }
+        catch (error) {
+            if (error instanceof DecryptionError) {
+                throw error;
+            }
+            this.logger.error({ error }, 'Failed to decrypt and load master seed');
+            throw error;
+        }
+    }
+    calculateChecksum(data) {
+        return (0, crypto_1.createHash)('sha256').update(data).digest('hex');
+    }
+    async exportBackup(masterSeed, password) {
+        try {
+            const encryptedSeed = await this.encryptAndStore(masterSeed, password);
+            const checksum = this.calculateChecksum(encryptedSeed);
+            const backup = {
+                version: '1.0',
+                createdAt: masterSeed.createdAt,
+                encryptedSeed,
+                backupDate: Date.now(),
+                checksum,
+            };
+            this.logger.info({ checksum }, 'Backup exported with checksum validation');
+            return backup;
+        }
+        catch (error) {
+            this.logger.error({ error }, 'Failed to export backup');
+            throw error;
+        }
+    }
+    async restoreFromBackup(backup, password) {
+        try {
+            const expectedChecksum = this.calculateChecksum(backup.encryptedSeed);
+            if (backup.checksum !== expectedChecksum) {
+                throw new InvalidBackupError('Backup integrity check failed: checksum mismatch');
+            }
+            this.logger.info({ checksum: backup.checksum }, 'Backup integrity validated');
+            const seedPath = path.join(this.config.storagePath, 'master-seed.enc');
+            await fs_1.promises.mkdir(path.dirname(seedPath), { recursive: true });
+            await fs_1.promises.writeFile(seedPath, backup.encryptedSeed, 'utf8');
+            const masterSeed = await this.decryptAndLoad(password);
+            masterSeed.createdAt = backup.createdAt;
+            this.logger.info('Master seed restored from backup');
+            return masterSeed;
+        }
+        catch (error) {
+            this.logger.error({ error }, 'Failed to restore from backup');
+            throw error;
+        }
+    }
+    async generatePaperWallet(masterSeed) {
+        try {
+            const QRCode = await (0, optional_require_1.requireOptional)('qrcode', 'QR code generation for paper wallets');
+            const qrCodeDataUrl = await QRCode.toDataURL(masterSeed.mnemonic);
+            const paperWallet = {
+                mnemonic: masterSeed.mnemonic,
+                qrCodeDataUrl,
+                createdAt: Date.now(),
+            };
+            this.logger.info('Paper wallet generated (WARNING: contains unencrypted mnemonic)');
+            return paperWallet;
+        }
+        catch (error) {
+            this.logger.error({ error }, 'Failed to generate paper wallet');
+            throw error;
+        }
+    }
+    async exportPaperWallet(paperWallet, outputPath) {
+        try {
+            const fileName = outputPath ?? `paper-wallet-${Date.now()}.html`;
+            const filePath = path.join('./backups', fileName);
+            await fs_1.promises.mkdir('./backups', { recursive: true });
+            const html = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>HD Wallet Paper Wallet</title>
+  <style>
+    body {
+      font-family: Arial, sans-serif;
+      max-width: 800px;
+      margin: 50px auto;
+      padding: 20px;
+      background: #f5f5f5;
+    }
+    .container {
+      background: white;
+      padding: 40px;
+      border-radius: 10px;
+      box-shadow: 0 2px 10px rgba(0,0,0,0.1);
+    }
+    h1 {
+      color: #333;
+      text-align: center;
+      margin-bottom: 30px;
+    }
+    .warning {
+      background: #fff3cd;
+      border: 2px solid #ffc107;
+      border-radius: 5px;
+      padding: 15px;
+      margin-bottom: 30px;
+      color: #856404;
+    }
+    .warning strong {
+      display: block;
+      font-size: 1.2em;
+      margin-bottom: 10px;
+    }
+    .qr-code {
+      text-align: center;
+      margin: 30px 0;
+    }
+    .qr-code img {
+      border: 2px solid #333;
+      padding: 10px;
+      background: white;
+    }
+    .mnemonic {
+      background: #f9f9f9;
+      border: 2px solid #333;
+      border-radius: 5px;
+      padding: 20px;
+      margin: 20px 0;
+      font-family: 'Courier New', monospace;
+      font-size: 1.1em;
+      line-height: 1.8;
+      word-spacing: 5px;
+      text-align: center;
+    }
+    .instructions {
+      background: #e3f2fd;
+      border-left: 4px solid #2196f3;
+      padding: 15px;
+      margin-top: 30px;
+    }
+    .instructions h3 {
+      margin-top: 0;
+      color: #1976d2;
+    }
+    .timestamp {
+      text-align: center;
+      color: #666;
+      font-size: 0.9em;
+      margin-top: 30px;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <h1>🔐 HD Wallet Paper Wallet</h1>
+
+    <div class="warning">
+      <strong>⚠️ SECURITY WARNING</strong>
+      This paper wallet contains your unencrypted master seed mnemonic phrase.
+      Anyone with access to this phrase can derive all your agent wallets.
+      Store this document in a physically secure location (safe, vault, etc.).
+      Never share this mnemonic or take digital photos of it.
+    </div>
+
+    <div class="qr-code">
+      <h2>Recovery QR Code</h2>
+      <img src="${paperWallet.qrCodeDataUrl}" alt="Mnemonic QR Code" />
+    </div>
+
+    <h2 style="text-align: center;">Recovery Phrase</h2>
+    <div class="mnemonic">
+      ${paperWallet.mnemonic}
+    </div>
+
+    <div class="instructions">
+      <h3>📝 Recovery Instructions</h3>
+      <ol>
+        <li>Store this paper wallet in a secure, dry location</li>
+        <li>Consider making multiple copies stored in different secure locations</li>
+        <li>To recover your wallet, import the 24-word mnemonic phrase using WalletSeedManager.importMasterSeed()</li>
+        <li>Alternatively, scan the QR code with a compatible wallet application</li>
+        <li>Test recovery process with a small amount before securing large funds</li>
+      </ol>
+    </div>
+
+    <div class="timestamp">
+      Created: ${new Date(paperWallet.createdAt).toISOString()}<br/>
+      Generated by M2M AI Agent Wallet Infrastructure
+    </div>
+  </div>
+</body>
+</html>`;
+            await fs_1.promises.writeFile(filePath, html, 'utf8');
+            this.logger.info({ filePath }, 'Paper wallet exported to HTML file');
+            return filePath;
+        }
+        catch (error) {
+            this.logger.error({ error }, 'Failed to export paper wallet');
+            throw error;
+        }
+    }
+    async exportBackupToFile(backup, outputPath) {
+        try {
+            const fileName = outputPath ?? `wallet-backup-${Date.now()}.json`;
+            const filePath = path.join('./backups', fileName);
+            await fs_1.promises.mkdir('./backups', { recursive: true });
+            await fs_1.promises.writeFile(filePath, JSON.stringify(backup, null, 2), 'utf8');
+            this.logger.info({ filePath }, 'Backup exported to JSON file');
+            return filePath;
+        }
+        catch (error) {
+            this.logger.error({ error }, 'Failed to export backup to file');
+            throw error;
+        }
+    }
+}
+exports.WalletSeedManager = WalletSeedManager;
+//# sourceMappingURL=wallet-seed-manager.js.map

package/dist/wallet/wallet-seed-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-seed-manager.js","sourceRoot":"","sources":["../../src/wallet/wallet-seed-manager.ts"],"names":[],"mappings":";;;;AASA,mCAA+F;AAC/F,2BAAoC;AACpC,mDAA6B;AAC7B,wDAAwB;AACxB,gEAA4D;AAoE/C,QAAA,gBAAgB,GAAG;IAC9B,GAAG,EAAE,gBAAgB;CACb,CAAC;AAKX,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AALD,oDAKC;AAKD,MAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AALD,0CAKC;AAKD,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAKD,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAyBD,MAAa,iBAAiB;IACpB,MAAM,CAAc;IACpB,UAAU,CAAc;IACxB,MAAM,CAAa;IACnB,IAAI,CAAU;IAOtB,YAAY,UAAuB,EAAE,MAA4B;QAC/D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG;YACZ,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,YAAY;YACtD,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,eAAe;YACnD,SAAS,EAAE,MAAM,EAAE,SAAS;SAC7B,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,IAAA,cAAI,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACtD,CAAC;IAOD,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACpD,CAAC;IAUO,KAAK,CAAC,cAAc;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAY,EAAE,iBAAiB,CAAC,CAAC;QAExE,IAAI,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACpD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;YAGhC,MAAM,aAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAG5D,MAAM,aAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAExD,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAeD,gBAAgB,CAAC,QAAgB;QAC/B,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAElE,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,iBAAiB,CAAC,6BAA6B,SAAS,kBAAkB,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,iBAAiB,CAAC,qDAAqD,CAAC,CAAC;QACrF,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,iBAAiB,CAAC,qDAAqD,CAAC,CAAC;QACrF,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,iBAAiB,CAAC,2CAA2C,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,iBAAiB,CAAC,2CAA2C,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAUO,mBAAmB,CAAC,QAAgB;QAE1C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAEhC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAGD,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAgBD,KAAK,CAAC,kBAAkB,CAAC,WAAsB,GAAG;QAChD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,kCAAe,EACjC,OAAO,EACP,4BAA4B,CAC7B,CAAC;YAGF,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAGlD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAElD,MAAM,UAAU,GAAe;gBAC7B,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EACnD,uBAAuB,CACxB,CAAC;YAEF,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAiBD,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,kCAAe,EACjC,OAAO,EACP,4BAA4B,CAC7B,CAAC;YAGF,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,oBAAoB,CAAC,8CAA8C,CAAC,CAAC;YACjF,CAAC;YAGD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAElD,MAAM,UAAU,GAAe;gBAC7B,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EACzC,oCAAoC,CACrC,CAAC;YAEF,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;gBAC1C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAC;YAC7D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAmBD,KAAK,CAAC,eAAe,CAAC,UAAsB,EAAE,QAAgB;QAC5D,IAAI,CAAC;YAEH,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAG/C,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;YAG3B,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAGtD,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3D,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAGvD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAGpC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YAG9D,MAAM,eAAe,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAGzD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAEpB,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;gBAClE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBAEN,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAY,EAAE,iBAAiB,CAAC,CAAC;gBACxE,MAAM,aAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5D,MAAM,aAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,gDAAgD,CAAC,CAAC;YACnF,CAAC;YAED,OAAO,eAAe,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,yCAAyC,CAAC,CAAC;YACxE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAkBD,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,IAAI,CAAC;YAEH,IAAI,eAAuB,CAAC;YAE5B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAEpB,eAAe,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;gBACtE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBAEN,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAY,EAAE,iBAAiB,CAAC,CAAC;gBACxE,eAAe,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,8CAA8C,CAAC,CAAC;YACjF,CAAC;YAGD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAG7D,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAG7C,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAG/C,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1D,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAG7B,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAEf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBAC3E,MAAM,IAAI,eAAe,CAAC,oCAAoC,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAG5C,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,MAAM,KAAK,CAAC;YACd,CAAC;YAGD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,wCAAwC,CAAC,CAAC;YACvE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAOO,iBAAiB,CAAC,IAAY;QACpC,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAkBD,KAAK,CAAC,YAAY,CAAC,UAAsB,EAAE,QAAgB;QACzD,IAAI,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAGvE,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,aAAa;gBACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;gBACtB,QAAQ;aACT,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,0CAA0C,CAAC,CAAC;YAE3E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAmBD,KAAK,CAAC,iBAAiB,CAAC,MAAkB,EAAE,QAAgB;QAC1D,IAAI,CAAC;YAEH,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBACzC,MAAM,IAAI,kBAAkB,CAAC,kDAAkD,CAAC,CAAC;YACnF,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,4BAA4B,CAAC,CAAC;YAG9E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAY,EAAE,iBAAiB,CAAC,CAAC;YACxE,MAAM,aAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,aAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAG3D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAGvD,UAAU,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAExC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAErD,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,+BAA+B,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAkBD,KAAK,CAAC,mBAAmB,CAAC,UAAsB;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,kCAAe,EAClC,QAAQ,EACR,sCAAsC,CACvC,CAAC;YAGF,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAElE,MAAM,WAAW,GAAgB;gBAC/B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,aAAa;gBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;YAEpF,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAkBD,KAAK,CAAC,iBAAiB,CAAC,WAAwB,EAAE,UAAmB;QACnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,IAAI,gBAAgB,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAGlD,MAAM,aAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAGjD,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA2FD,WAAW,CAAC,aAAa;;;;;QAKnC,WAAW,CAAC,QAAQ;;;;;;;;;;;;;;;iBAeX,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;;;;;QAKtD,CAAC;YAGH,MAAM,aAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAE3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,oCAAoC,CAAC,CAAC;YAErE,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,+BAA+B,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAeD,KAAK,CAAC,kBAAkB,CAAC,MAAkB,EAAE,UAAmB;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,IAAI,iBAAiB,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;YAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAGlD,MAAM,aAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAGjD,MAAM,aAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAEtE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,8BAA8B,CAAC,CAAC;YAE/D,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA1qBD,8CA0qBC"}