@umutcansu/react-native-pinvault 2.3.2 → 2.4.1

package/ios/Core/NativeSecurity.swift

@@ -7,13 +7,31 @@
 //   { "configApis": [{ "id", "bootstrapPins", "signaturePublicKeys", "requiredSignatures",
 //                      "recoveryPublicKeys", "requiredRecoverySignatures", "serverScope",
 //                      "clientCaPins", "allowUnsigned", "allowUnpinnedConfigApi",
-//                      "allowServerGeneratedKey" }],
-//     "staticPins": { "pins": [...], "version": 1 } }
+//                      "allowServerGeneratedKey", "url", "attestation", "tokenHosts", "proofOfPossession",
+//                      "clientCertHosts",
+//                      "enrollmentUrl", "renewalUrl" }],
+//     "staticPins": { "pins": [...], "version": 1 },
+//     "require": { "requireUnlockedDevice", "requireHardwareBackedKeys",
+//                  "requirePinnedReactNativeNetworking", "managedTrustRoots",
+//                  "wipeVaultFilesOnRevocation", "requireCaTrust", "expectedBundleIds",
+//                  "expectedTeamIds", "userAuthStrength", "expiredConfigGraceSeconds",
+//                  "vaultFileMaxOfflineAgeSeconds", "expectedSignerSha256" (Android's, read for the shape) },
+//     "vaultFiles": [{ "key", "signaturePublicKey", "encryption", "userAuth", "maxOfflineAgeSeconds" }] }
 //
 // When the file is there: every JS Config API (and JS `staticPins`) must be
 // declared in it; a declared field is the value (JS may omit or repeat it, a
-// different value is refused); the three relaxations need the file's consent.
-// Without it, release builds refuse the three relaxations from JS.
+// different value is refused); the three relaxations need the file's consent;
+// `attestation: true` and `proofOfPossession: true` cannot be switched off; `require` only tightens (its
+// protections stay on, its `requireCaTrust` hosts are added to JS's, its
+// expected ids are fixed, its grace is the most JS may ask for); `vaultFiles`
+// fixes those files' signature key, encryption and lock, and a JS vault file
+// it does not name is refused.
+//
+// Without it, a release build refuses a config with Config APIs or static
+// pins — the trust anchors would come from JS alone — unless the app's
+// Info.plist says `PinVaultAllowNoNativeSecurityFile` = YES; the three
+// relaxations stay refused from JS then. A release build caps
+// `expiredConfigGrace` at 7 days whatever the file says.
 import Foundation
 import PinVault
 
@@ -32,12 +50,61 @@ public struct NativeSecurity {
         let allowUnsigned: Bool
         let allowUnpinnedConfigApi: Bool
         let allowServerGeneratedKey: Bool
+        var url: String? = nil
+        var attestation = false
+        var tokenHosts: [String]? = nil
+        var proofOfPossession = false
+        var clientCertHosts: [String]? = nil
+        var enrollmentUrl: String? = nil
+        var renewalUrl: String? = nil
+    }
+
+    /// The `require` section: protections JS cannot switch off.
+    public struct Require {
+        var requireUnlockedDevice = false
+        var requireHardwareBackedKeys = false
+        /// Pins `requirePinnedReactNativeNetworking`: JS cannot set it false (RN-3).
+        var requirePinnedReactNativeNetworking = false
+        var managedTrustRoots = false
+        var wipeVaultFilesOnRevocation = false
+        var requireCaTrust: [String]? = nil
+        var expectedBundleIds: [String]? = nil
+        var expectedTeamIds: [String]? = nil
+        /// The most `expiredConfigGrace` JS may set; nil = only the release cap.
+        var expiredConfigGraceMs: Int64? = nil
+        /// The most `vaultFileMaxOfflineAge` JS may set (and the value when JS sets none).
+        var vaultFileMaxOfflineAgeMs: Int64? = nil
+        /// `ios.userAuthStrength`, fixed.
+        var userAuthStrength: UserAuthStrength? = nil
     }
 
+    /// One `vaultFiles` entry: what JS cannot change about that file.
+    struct VaultFilePolicy {
+        let signaturePublicKey: String?
+        let encryption: VaultFileEncryption?
+        let userAuth: UserAuth?
+        /// The most `maxOfflineAge` JS may give this file (and the value when JS gives none).
+        var maxOfflineAgeMs: Int64? = nil
+    }
+
+    /// The Info.plist key with which an app accepts a release start without the file.
+    public static let noFileInfoKey = "PinVaultAllowNoNativeSecurityFile"
+    /// The longest `expiredConfigGrace` a release build takes.
+    public static let maxReleaseGraceMs: Int64 = 7 * 24 * 3600 * 1000
+    static let maxOfflineAgeS: Int64 = 10 * 365 * 24 * 3600
+
     /// Where the file came from, for messages.
     public let source: String
     let blocks: [String: Block]
     let staticPins: CertificateConfig?
+    var require = Require()
+    /// Nil when the file has no `vaultFiles` section.
+    var vaultFiles: [String: VaultFilePolicy]? = nil
+
+    /// True when the app's Info.plist accepts a release start without the file.
+    public static func noFileAllowed(_ bundle: Bundle = .main) -> Bool {
+        (bundle.object(forInfoDictionaryKey: noFileInfoKey) as? Bool) == true
+    }
 
     /// The file from `bundle`; nil when the app ships none. A broken file throws `BridgeInputError`.
     public static func load(from bundle: Bundle = .main) throws -> NativeSecurity? {
@@ -69,16 +136,59 @@ public struct NativeSecurity {
                     clientCaPins: try b.stringList("clientCaPins", maxItems: 16, maxLength: 128),
                     allowUnsigned: try b.bool("allowUnsigned") == true,
                     allowUnpinnedConfigApi: try b.bool("allowUnpinnedConfigApi") == true,
-                    allowServerGeneratedKey: try b.bool("allowServerGeneratedKey") == true
+                    allowServerGeneratedKey: try b.bool("allowServerGeneratedKey") == true,
+                    url: try ConfigParser.httpsUrl(b, "url"),
+                    attestation: try b.bool("attestation") == true,
+                    tokenHosts: try b.stringList("tokenHosts", maxItems: 64, maxLength: 255),
+                    proofOfPossession: try b.bool("proofOfPossession") == true,
+                    clientCertHosts: try b.stringList("clientCertHosts", maxItems: 64, maxLength: 2048),
+                    enrollmentUrl: try ConfigParser.httpsUrl(b, "enrollmentUrl"),
+                    renewalUrl: try ConfigParser.httpsUrl(b, "renewalUrl")
                 )
                 try b.finish()
             }
             let staticPins = try root.object("staticPins").map(ConfigParser.staticPins)
+            var require = Require()
+            if let r = try root.object("require") {
+                require.requireUnlockedDevice = try r.bool("requireUnlockedDevice") == true
+                require.requireHardwareBackedKeys = try r.bool("requireHardwareBackedKeys") == true
+                require.requirePinnedReactNativeNetworking = try r.bool("requirePinnedReactNativeNetworking") == true
+                require.managedTrustRoots = try r.bool("managedTrustRoots") == true
+                require.wipeVaultFilesOnRevocation = try r.bool("wipeVaultFilesOnRevocation") == true
+                require.requireCaTrust = try r.stringList("requireCaTrust", maxItems: 64, maxLength: 255)
+                require.expectedBundleIds = try r.stringList("expectedBundleIds", maxItems: 16, maxLength: 255)
+                require.expectedTeamIds = try r.stringList("expectedTeamIds", maxItems: 16, maxLength: 32)
+                require.expiredConfigGraceMs = try r.int64("expiredConfigGraceSeconds", min: 0, max: maxReleaseGraceMs / 1000).map { $0 * 1000 }
+                require.vaultFileMaxOfflineAgeMs = try r.int64("vaultFileMaxOfflineAgeSeconds", min: 1, max: maxOfflineAgeS).map { $0 * 1000 }
+                require.userAuthStrength = try r.enumValue("userAuthStrength", UserAuthStrength.self)
+                // Android-only (signer digests): read for the shape, used by the Android side.
+                _ = try r.stringList("expectedSignerSha256", maxItems: 16, maxLength: 128)
+                try r.finish()
+            }
+            var vaultFiles: [String: VaultFilePolicy]?
+            if let list = try root.objectList("vaultFiles", maxItems: ConfigParser.maxVaultFiles) {
+                var map: [String: VaultFilePolicy] = [:]
+                for f in list {
+                    let key = try f.requireString("key", maxLength: 128)
+                    if map[key] != nil { throw BridgeInputError("\(f.path).key: '\(key)' is declared twice") }
+                    map[key] = VaultFilePolicy(
+                        signaturePublicKey: try f.string("signaturePublicKey", maxLength: ConfigParser.keyLength, multiline: true),
+                        encryption: try f.enumValue("encryption", VaultFileEncryption.self),
+                        userAuth: try f.enumValue("userAuth", UserAuth.self),
+                        maxOfflineAgeMs: try f.int64("maxOfflineAgeSeconds", min: 1, max: maxOfflineAgeS).map { $0 * 1000 }
+                    )
+                    try f.finish()
+                }
+                vaultFiles = map
+            }
             try root.finish()
             if blocks.isEmpty && staticPins == nil {
                 throw BridgeInputError("\(source): declares neither configApis nor staticPins")
             }
-            return NativeSecurity(source: source, blocks: blocks, staticPins: staticPins)
+            var native = NativeSecurity(source: source, blocks: blocks, staticPins: staticPins)
+            native.require = require
+            native.vaultFiles = vaultFiles
+            return native
         } catch let e as BridgeInputError {
             throw e.message.hasPrefix("native security file") ? e : BridgeInputError("native security file \(e.message)")
         } catch {
@@ -149,6 +259,17 @@ enum SecurityPolicy {
         try relaxation("allowUnpinnedConfigApi", js.allowUnpinned, block.allowUnpinnedConfigApi)
         try relaxation("allowServerGeneratedKey", js.allowServerKey, block.allowServerGeneratedKey)
 
+        // A release build's trust anchors come from the file, so a declared block
+        // must carry them: a bare `{"id": …}` would hand pins and keys to the bundle.
+        if release {
+            func anchor(_ key: String, _ relaxation: String) -> BridgeInputError {
+                BridgeInputError("\(path).\(key): a release build takes it only from the app's native security file (\(native.source)); "
+                    + "declare \(key) for Config API '\(id)' there (or \(relaxation))")
+            }
+            if block.bootstrapPins == nil && !block.allowUnpinnedConfigApi { throw anchor("bootstrapPins", "allowUnpinnedConfigApi") }
+            if block.signaturePublicKeys == nil && !block.allowUnsigned { throw anchor("signaturePublicKeys", "allowUnsigned") }
+        }
+
         var out = js
         if let n = block.bootstrapPins {
             if let j = js.bootstrapPins, !NativeSecurity.samePins(j, n) { throw fixed("bootstrapPins") }

package/ios/PinVaultBridge.swift

@@ -29,6 +29,9 @@ public final class PinVaultBridge: NSObject {
     /// RNPinVault.mm: whether RCTNetworking hands an https request to
     /// RNPinVaultURLRequestHandler (true), to another handler (false), or nil = unknown.
     @objc public var reactNetworkingIsPinned: (() -> NSNumber?)?
+    /// RNPinVault.mm: whether SocketRocket hands every wss socket to PinVault
+    /// (RNPinVaultWebSocketPinning); nil = treated as not pinned.
+    @objc public var reactWebSocketIsPinned: (() -> Bool)?
 
     /// `PinVault.shared.registerBackgroundTask()` for the app's AppDelegate (before launch ends):
     /// the app target does not link the PinVault package itself.
@@ -92,8 +95,15 @@ public final class PinVaultBridge: NSObject {
         return ["exceptionName": mapped["name"] ?? "Error", "exceptionMessage": mapped["message"] ?? NSNull()]
     }
 
+    /// A vault file key: the library's rule (it names the stored copy's file).
     private static func checkKey(_ key: String) throws {
-        if key.isEmpty || key.count > 128 { throw BridgeInputError("key: must be 1 to 128 characters") }
+        let allowed = key.utf8.allSatisfy { byte in
+            (byte >= 0x30 && byte <= 0x39) || (byte >= 0x41 && byte <= 0x5A) || (byte >= 0x61 && byte <= 0x7A) ||
+                byte == 0x2E || byte == 0x5F || byte == 0x2D
+        }
+        if key.isEmpty || key.utf8.count > 64 || !allowed || key.allSatisfy({ $0 == "." }) {
+            throw BridgeInputError("key: must match [A-Za-z0-9._-]{1,64} and not be only dots")
+        }
     }
 
     private static func checkToken(_ token: String?) throws {
@@ -129,7 +139,9 @@ public final class PinVaultBridge: NSObject {
                             bridge.emitConnectionEvent?(bridge.mapper.event(event))
                         },
                         native: try NativeSecurity.load(),
-                        release: release
+                        release: release,
+                        noFileAllowed: NativeSecurity.noFileAllowed(),
+                        reactNetworkingEnabled: PinVaultReactNetworking.enabled
                     )
                 } catch let e as BridgeInputError {
                     // The guard of the running config stays: a refused config changes nothing.
@@ -141,12 +153,14 @@ public final class PinVaultBridge: NSObject {
                     return
                 }
                 let pinned = self.reactNetworkingIsPinned?()?.boolValue
-                if pinned != true {
+                let socketPinned = self.reactWebSocketIsPinned?() ?? false
+                if pinned != true || !socketPinned {
                     let why = !PinVaultReactNetworking.enabled
                         ? "Info.plist PinVaultPinReactNativeNetworking is NO"
                         : pinned == nil ? "RCTNetworking's handler could not be checked"
-                        : "RCTNetworking hands https to another RCTURLRequestHandler"
-                    NSLog("PinVault: React Native's own fetch / XMLHttpRequest / images may NOT be pinned (\(why)); README, \"Networking\"")
+                        : pinned == false ? "RCTNetworking hands https to another RCTURLRequestHandler"
+                        : "SocketRocket's WebSocket initializer is not PinVault's (wss is not pinned)"
+                    NSLog("PinVault: React Native's own fetch / XMLHttpRequest / images / WebSocket may NOT be pinned (\(why)); README, \"Networking\"")
                     if parsed.requirePinnedReactNativeNetworking {
                         reject("E_NETWORKING_NOT_PINNED", "requirePinnedReactNativeNetworking: \(why)", nil)
                         return
@@ -162,7 +176,10 @@ public final class PinVaultBridge: NSObject {
                 // INIT, and ENROLL for a pending enrollment the start picks up.
                 let result = await Self.guarded([.start, .enroll]) { await PinVault.shared.start(config: parsed.config) }
                 Self.locked { Self.startedInProcess = true }
-                resolve(self.mapper.initResult(result))
+                // Says whether the anchors came from the native security file (README "Native security file").
+                var answer = self.mapper.initResult(result)
+                answer["nativeSecurityApplied"] = parsed.nativeSecurityApplied
+                resolve(answer)
             }
         }
     }
@@ -335,7 +352,7 @@ public final class PinVaultBridge: NSObject {
         run(resolve, reject) {
             try Self.checkKey(key)
             let enc = try ResultMapper.checkEncoding(encoding)
-            return PinVault.shared.loadFile(key).map { ResultMapper.encode($0, enc) }
+            return await Self.guarded([.loadFile]) { PinVault.shared.loadFile(key) }.map { ResultMapper.encode($0, enc) }
         }
     }
 

package/ios/PinVaultReactNetworking.swift

@@ -2,6 +2,7 @@
 // requests (fetch, XMLHttpRequest, <Image>) through PinVault's pinned session.
 // The rules live in Core/ReactNetworking.swift.
 import Foundation
+import Security
 import PinVault
 
 @objc(RNPinVaultReactNetworking)
@@ -17,6 +18,21 @@ public final class PinVaultReactNetworking: NSObject {
         enabled && ReactNetworking.handles(request)
     }
 
+    /// The server-trust check of a `wss` WebSocket (RNPinVaultWebSocketPinning.mm):
+    /// the decision of every PinVault session for the host and port the socket
+    /// was opened for. Fail-closed: before `start`, after a failed one, or
+    /// while a restart resets the library, every handshake is refused.
+    @objc public static func acceptsWebSocketTrust(_ trust: SecTrust, host: String, port: Int) -> Bool {
+        do {
+            try PinVault.shared.evaluateServerTrust(trust, host: host, port: port)
+            return true
+        } catch {
+            let (name, message) = PinVaultBridge.describe(error)
+            NSLog("PinVault: WebSocket to %@:%ld refused (%@: %@)", host, port, name, message)
+            return false
+        }
+    }
+
     /// The request token for RN; nothing reaches the blocks before `resume()`.
     @objc public static func prepare(
         _ request: URLRequest,

package/ios/RNPinVault.mm

@@ -3,6 +3,8 @@
 #import <objc/message.h>
 #import <React/RCTBridgeModule.h>
 
+#import "RNPinVaultWebSocketPinning.h"
+
 #if __has_include(<RNPinVault/RNPinVault-Swift.h>)
 #import <RNPinVault/RNPinVault-Swift.h>
 #else
@@ -51,6 +53,10 @@
       id handler = ((id(*)(id, SEL, NSURLRequest *))objc_msgSend)(networking, selector, probe);
       return @([handler isKindOfClass:ours]);
     };
+    // Whether SocketRocket's initializer still hands every wss socket to PinVault.
+    _bridge.reactWebSocketIsPinned = ^BOOL {
+      return [RNPinVaultWebSocketPinning isPinned];
+    };
   }
   return self;
 }

package/ios/RNPinVaultWebSocketPinning.h

@@ -0,0 +1,21 @@
+// RNPinVaultWebSocketPinning — React Native's WebSocket (SocketRocket) through
+// PinVault's pins on iOS. See RNPinVaultWebSocketPinning.mm.
+#import <Foundation/Foundation.h>
+
+NS_ASSUME_NONNULL_BEGIN
+
+@interface RNPinVaultWebSocketPinning : NSObject
+
+/// Installs the hook when it is not in place yet (it is installed at load;
+/// this covers a SocketRocket image loaded later). NO when it cannot be:
+/// Info.plist opt-out, no SocketRocket initializer of the known shape.
++ (BOOL)install;
+
+/// Whether every SocketRocket socket to a `wss` / `https` URL is judged by
+/// PinVault right now: the hook is installed and still the initializer's
+/// implementation (nothing replaced it since). YES without SocketRocket in the app.
++ (BOOL)isPinned;
+
+@end
+
+NS_ASSUME_NONNULL_END

package/ios/RNPinVaultWebSocketPinning.mm

@@ -0,0 +1,170 @@
+// RNPinVaultWebSocketPinning — React Native's WebSocket through PinVault's
+// pins on iOS.
+//
+// RCTWebSocketModule opens every socket with SocketRocket (SRWebSocket on
+// CFStream), outside URLSession, so the URLRequestHandler never sees it. Every
+// SRWebSocket initializer ends in -initWithURLRequest:protocols:securityPolicy:
+// (SocketRocket 0.7.x, SRWebSocket.m). This file replaces that method at load:
+// a socket to a wss / https URL (SocketRocket's SRURLRequiresSSL) always gets a
+// policy that asks PinVault, whatever policy its creator passed.
+//
+// RCTSetCustomSRWebSocketProvider is not used: its block gets only the
+// request, so the subprotocols RN hands the initializer (graphql-ws, MQTT,
+// STOMP) would be lost, and a provider set later by another library would
+// replace ours without a trace.
+//
+// SocketRocket checks the server trust in -stream:handleEvent: before it
+// writes the upgrade request: a refused chain sends no header and no cookie.
+//
+// The policy is a runtime subclass of SRSecurityPolicy, so the plugin needs
+// neither SocketRocket's headers nor a link to it: no chain validation in the
+// stream (pins replace CA trust, as in every PinVault session), the TLS 1.2
+// floor of SocketRocket's default, and -evaluateServerTrust:forDomain: →
+// PinVault for the host and port of the socket's own URL.
+#import "RNPinVaultWebSocketPinning.h"
+
+#import <Security/Security.h>
+#import <objc/runtime.h>
+#import <os/lock.h>
+
+#if __has_include(<RNPinVault/RNPinVault-Swift.h>)
+#import <RNPinVault/RNPinVault-Swift.h>
+#else
+#import "RNPinVault-Swift.h"
+#endif
+
+typedef id (*RNPVSocketInit)(id, SEL, NSURLRequest *, NSArray *, id);
+
+static os_unfair_lock gLock = OS_UNFAIR_LOCK_INIT;
+static RNPVSocketInit gOriginalInit = NULL;
+static Class gPolicyClass = Nil;
+static char kHostKey;
+static char kPortKey;
+
+static NSString *const kSocketClass = @"SRWebSocket";
+static NSString *const kPolicyClass = @"SRSecurityPolicy";
+static NSString *const kInitSelector = @"initWithURLRequest:protocols:securityPolicy:";
+static NSString *const kUpdateSelector = @"updateSecurityOptionsInStream:";
+static NSString *const kEvaluateSelector = @"evaluateServerTrust:forDomain:";
+
+// SocketRocket's SRURLRequiresSSL.
+static BOOL RequiresTLS(NSURL *url)
+{
+  NSString *scheme = url.scheme.lowercaseString;
+  return [scheme isEqualToString:@"wss"] || [scheme isEqualToString:@"https"];
+}
+
+static void PinnedUpdateSecurityOptions(id self, SEL _cmd, NSStream *stream)
+{
+  [stream setProperty:(__bridge id)CFSTR("kCFStreamSocketSecurityLevelTLSv1_2")
+               forKey:(__bridge NSString *)kCFStreamPropertySocketSecurityLevel];
+  [stream setProperty:@{(__bridge NSString *)kCFStreamSSLValidatesCertificateChain : @NO}
+               forKey:(__bridge NSString *)kCFStreamPropertySSLSettings];
+}
+
+static BOOL PinnedEvaluateServerTrust(id self, SEL _cmd, SecTrustRef trust, NSString *domain)
+{
+  NSString *host = objc_getAssociatedObject(self, &kHostKey);
+  NSNumber *port = objc_getAssociatedObject(self, &kPortKey);
+  if (trust == NULL || host.length == 0 || port == nil) {
+    return NO;
+  }
+  return [RNPinVaultReactNetworking acceptsWebSocketTrust:trust host:host port:port.integerValue];
+}
+
+// The policy class, made once; Nil when SocketRocket's is missing or has another shape.
+static Class PolicyClass(void)
+{
+  static dispatch_once_t once;
+  dispatch_once(&once, ^{
+    Class base = NSClassFromString(kPolicyClass);
+    SEL update = NSSelectorFromString(kUpdateSelector);
+    SEL evaluate = NSSelectorFromString(kEvaluateSelector);
+    Method baseUpdate = base ? class_getInstanceMethod(base, update) : NULL;
+    Method baseEvaluate = base ? class_getInstanceMethod(base, evaluate) : NULL;
+    if (baseUpdate == NULL || baseEvaluate == NULL) {
+      return;
+    }
+    Class sub = objc_allocateClassPair(base, "RNPinVaultSRSecurityPolicy", 0);
+    if (sub == Nil) {
+      return;
+    }
+    class_addMethod(sub, update, (IMP)PinnedUpdateSecurityOptions, method_getTypeEncoding(baseUpdate));
+    class_addMethod(sub, evaluate, (IMP)PinnedEvaluateServerTrust, method_getTypeEncoding(baseEvaluate));
+    objc_registerClassPair(sub);
+    gPolicyClass = sub;
+  });
+  return gPolicyClass;
+}
+
+// A policy for one socket: the host and port SocketRocket connects to (port 0 → 443, as SRProxyConnect).
+static id PolicyFor(NSURL *url)
+{
+  Class cls = PolicyClass();
+  if (cls == Nil) {
+    return nil; // SocketRocket asks nil, which answers NO: refused.
+  }
+  id policy = [[cls alloc] init];
+  NSUInteger port = url.port.unsignedIntValue;
+  objc_setAssociatedObject(policy, &kHostKey, url.host, OBJC_ASSOCIATION_COPY_NONATOMIC);
+  objc_setAssociatedObject(policy, &kPortKey, @(port == 0 ? 443 : port), OBJC_ASSOCIATION_RETAIN_NONATOMIC);
+  return policy;
+}
+
+static id PinnedInit(id self, SEL _cmd, NSURLRequest *request, NSArray *protocols, id securityPolicy)
+{
+  if (RequiresTLS(request.URL)) {
+    securityPolicy = PolicyFor(request.URL);
+  }
+  return gOriginalInit(self, _cmd, request, protocols, securityPolicy);
+}
+
+static Method SocketInit(void)
+{
+  Class socket = NSClassFromString(kSocketClass);
+  return socket ? class_getInstanceMethod(socket, NSSelectorFromString(kInitSelector)) : NULL;
+}
+
+// Info.plist PinVaultPinReactNativeNetworking = NO: the native opt-out of the https handler covers this too.
+static BOOL Enabled(void)
+{
+  id value = [NSBundle.mainBundle objectForInfoDictionaryKey:@"PinVaultPinReactNativeNetworking"];
+  return ![value respondsToSelector:@selector(boolValue)] || [value boolValue];
+}
+
+@implementation RNPinVaultWebSocketPinning
+
++ (void)load
+{
+  [self install];
+}
+
++ (BOOL)install
+{
+  if (!Enabled()) {
+    return NO;
+  }
+  os_unfair_lock_lock(&gLock);
+  BOOL installed = NO;
+  Method method = SocketInit();
+  if (method != NULL && gOriginalInit != NULL) {
+    installed = method_getImplementation(method) == (IMP)PinnedInit;
+  } else if (method != NULL && PolicyClass() != Nil &&
+             strcmp(method_getTypeEncoding(method) ?: "", "@40@0:8@16@24@32") == 0) {
+    gOriginalInit = (RNPVSocketInit)method_getImplementation(method);
+    method_setImplementation(method, (IMP)PinnedInit);
+    installed = YES;
+  }
+  os_unfair_lock_unlock(&gLock);
+  return installed;
+}
+
++ (BOOL)isPinned
+{
+  if (NSClassFromString(kSocketClass) == Nil) {
+    return YES; // No SocketRocket: React Native has no WebSocket to pin.
+  }
+  return [self install];
+}
+
+@end

package/lib/module/index.js

@@ -110,7 +110,13 @@ export async function evaluateGuard(guard, operation, timeoutMs) {
     if (timer !== undefined) clearTimeout(timer);
   }
 }
-const GUARDED_OPERATIONS = new Set(['INIT', 'ENROLL', 'FETCH_FILE', 'UNLOCK_FILE']);
+const GUARDED_OPERATIONS = new Set(['INIT', 'ENROLL', 'FETCH_FILE', 'UNLOCK_FILE', 'LOAD_FILE']);
+
+/** The guard of the running config, put back when a new config is refused. */
+let activeGuard = {
+  guard: undefined,
+  timeoutMs: DEFAULT_GUARD_TIMEOUT_MS
+};
 function installGuard(guard, timeoutMs) {
   guardSubscription?.remove();
   guardSubscription = null;
@@ -157,8 +163,21 @@ export async function start(config) {
     timeoutMs
   };
   const json = strictJson(nativeConfig, 'config', 'E_INVALID_CONFIG');
+  // The new guard answers during start (INIT is asked then). A config the
+  // native side refuses changes nothing, so the running config's guard comes back.
+  const previous = activeGuard;
   installGuard(environmentGuard, timeoutMs);
-  return call(NativePinVault.start(json));
+  try {
+    const result = await call(NativePinVault.start(json));
+    activeGuard = {
+      guard: environmentGuard,
+      timeoutMs
+    };
+    return result;
+  } catch (error) {
+    installGuard(previous.guard, previous.timeoutMs);
+    throw error;
+  }
 }
 export const updateNow = () => call(NativePinVault.updateNow());
 export const currentVersion = () => call(NativePinVault.currentVersion());

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["NativePinVault","PinVaultError","Error","constructor","code","message","exception","name","KNOWN_CODES","Set","toPinVaultError","error","e","has","info","userInfo","exceptionName","exceptionMessage","call","promise","MAX_DEPTH","assertPlainData","value","path","depth","Number","isFinite","Array","isArray","forEach","item","i","undefined","proto","Object","getPrototypeOf","prototype","k","v","entries","strictJson","JSON","stringify","DEFAULT_GUARD_TIMEOUT_MS","guardSubscription","evaluateGuard","guard","operation","timeoutMs","timer","verdict","Promise","race","resolve","then","setTimeout","__DEV__","console","warn","clearTimeout","GUARDED_OPERATIONS","installGuard","remove","jsTimeout","Math","max","onGuardRequest","request","answerGuard","requestId","allowed","start","config","environmentGuard","environmentGuardTimeoutMs","rest","isInteger","nativeConfig","json","updateNow","currentVersion","hostPinVersions","pinsForHost","hostname","result","pins","signingStatus","configApiId","isForceUpdate","reset","schedulePeriodicUpdates","intervalHours","cancelPeriodicUpdates","enableDebugLogging","fetch","url","init","response","ok","status","deviceId","enrollForResult","token","label","autoEnrollForResult","checkPendingEnrollment","isEnrolled","isEnrollmentPending","enrollmentVerificationCode","enrolledClientCN","enrolledClientNotAfter","unenroll","options","wipeVaultFiles","identityKeySecurityLevel","setVaultToken","key","clearVaultTokens","fetchFile","loadFile","encoding","fileStatus","unlockFile","prompt","isFileLocked","hasFile","fileVersion","clearFile","syncAllFiles","attestNow","fetchAttestationToken","host","attestationStatus","attestationHeaderName","addConnectionListener","listener","onConnectionEvent","event","PinVault"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA,OAAOA,cAAc,MAA6B,qBAAkB;AAsBpE,cAAc,YAAS;;AAEvB;;AAcA;AACA,OAAO,MAAMC,aAAa,SAASC,KAAK,CAAC;EAIvCC,WAAWA,CAACC,IAAuB,EAAEC,OAAe,EAAEC,SAAqC,GAAG,IAAI,EAAE;IAClG,KAAK,CAACD,OAAO,CAAC;IACd,IAAI,CAACE,IAAI,GAAG,eAAe;IAC3B,IAAI,CAACH,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,SAAS,GAAGA,SAAS;EAC5B;AACF;AAEA,MAAME,WAAgC,GAAG,IAAIC,GAAG,CAAC,CAC/C,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,SAAS,EACT,eAAe,EACf,UAAU,EACV,yBAAyB,CAC1B,CAAC;;AAEF;AACA,SAASC,eAAeA,CAACC,KAAc,EAAiB;EACtD,IAAIA,KAAK,YAAYV,aAAa,EAAE,OAAOU,KAAK;EAChD,MAAMC,CAAC,GAAID,KAAK,IAAI,CAAC,CAA+D;EACpF,MAAMP,IAAI,GAAG,OAAOQ,CAAC,CAACR,IAAI,KAAK,QAAQ,IAAII,WAAW,CAACK,GAAG,CAACD,CAAC,CAACR,IAAI,CAAC,GAAIQ,CAAC,CAACR,IAAI,GAAyB,UAAU;EAC/G,MAAMC,OAAO,GAAG,OAAOO,CAAC,CAACP,OAAO,KAAK,QAAQ,GAAGO,CAAC,CAACP,OAAO,GAAG,6BAA6B;EACzF,MAAMS,IAAI,GAAIF,CAAC,CAACG,QAAQ,IAAI,IAAuE;EACnG,MAAMT,SAAS,GACbQ,IAAI,IAAI,OAAOA,IAAI,CAACE,aAAa,KAAK,QAAQ,GAC1C;IACET,IAAI,EAAEO,IAAI,CAACE,aAAa;IACxBX,OAAO,EAAE,OAAOS,IAAI,CAACG,gBAAgB,KAAK,QAAQ,GAAGH,IAAI,CAACG,gBAAgB,GAAG;EAC/E,CAAC,GACD,IAAI;EACV,OAAO,IAAIhB,aAAa,CAACG,IAAI,EAAEC,OAAO,EAAEC,SAAS,CAAC;AACpD;AAEA,eAAeY,IAAIA,CAAIC,OAAyB,EAAc;EAC5D,IAAI;IACF,OAAQ,MAAMA,OAAO;EACvB,CAAC,CAAC,OAAOR,KAAK,EAAE;IACd,MAAMD,eAAe,CAACC,KAAK,CAAC;EAC9B;AACF;;AAEA;AACA;AACA;;AAEA;AACA,MAAMS,SAAS,GAAG,CAAC;AAEnB,SAASC,eAAeA,CAACC,KAAc,EAAEC,IAAY,EAAEnB,IAAuB,EAAEoB,KAAK,GAAG,CAAC,EAAQ;EAC/F;EACA,IAAIA,KAAK,GAAGJ,SAAS,EAAE,MAAM,IAAInB,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,qBAAqB,CAAC;EAClF,IAAID,KAAK,KAAK,IAAI,EAAE;EACpB,QAAQ,OAAOA,KAAK;IAClB,KAAK,QAAQ;IACb,KAAK,SAAS;MACZ;IACF,KAAK,QAAQ;MACX,IAAI,CAACG,MAAM,CAACC,QAAQ,CAACJ,KAAK,CAAC,EAAE,MAAM,IAAIrB,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,uBAAuB,CAAC;MAC1F;IACF,KAAK,QAAQ;MAAE;QACb,IAAII,KAAK,CAACC,OAAO,CAACN,KAAK,CAAC,EAAE;UACxBA,KAAK,CAACO,OAAO,CAAC,CAACC,IAAI,EAAEC,CAAC,KAAK;YACzB,IAAID,IAAI,KAAKE,SAAS,EAAE,MAAM,IAAI/B,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,IAAIQ,CAAC,wBAAwB,CAAC;YAC3FV,eAAe,CAACS,IAAI,EAAE,GAAGP,IAAI,IAAIQ,CAAC,GAAG,EAAE3B,IAAI,EAAEoB,KAAK,GAAG,CAAC,CAAC;UACzD,CAAC,CAAC;UACF;QACF;QACA,MAAMS,KAAK,GAAGC,MAAM,CAACC,cAAc,CAACb,KAAK,CAAC;QAC1C,IAAIW,KAAK,KAAKC,MAAM,CAACE,SAAS,IAAIH,KAAK,KAAK,IAAI,EAAE;UAChD,MAAM,IAAIhC,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,0BAA0B,CAAC;QAClE;QACA,KAAK,MAAM,CAACc,CAAC,EAAEC,CAAC,CAAC,IAAIJ,MAAM,CAACK,OAAO,CAACjB,KAAgC,CAAC,EAAE;UACrE,IAAIgB,CAAC,KAAKN,SAAS,EAAE,SAAS,CAAC;UAC/BX,eAAe,CAACiB,CAAC,EAAE,GAAGf,IAAI,IAAIc,CAAC,EAAE,EAAEjC,IAAI,EAAEoB,KAAK,GAAG,CAAC,CAAC;QACrD;QACA;MACF;IACA;MACE,MAAM,IAAIvB,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,KAAK,OAAOD,KAAK,iBAAiB,CAAC;EAC5E;AACF;AAEA,SAASkB,UAAUA,CAAClB,KAAc,EAAEC,IAAY,EAAEnB,IAAuB,EAAU;EACjFiB,eAAe,CAACC,KAAK,EAAEC,IAAI,EAAEnB,IAAI,CAAC;EAClC,OAAOqC,IAAI,CAACC,SAAS,CAACpB,KAAK,CAAC;AAC9B;;AAEA;;AAEA,OAAO,MAAMqB,wBAAwB,GAAG,IAAI;AAE5C,IAAIC,iBAA4C,GAAG,IAAI;;AAEvD;AACA;AACA;AACA;AACA,OAAO,eAAeC,aAAaA,CACjCC,KAAuB,EACvBC,SAA2B,EAC3BC,SAAiB,EACC;EAClB,IAAIC,KAAgD;EACpD,IAAI;IACF,MAAMC,OAAO,GAAG,MAAMC,OAAO,CAACC,IAAI,CAAU,CAC1CD,OAAO,CAACE,OAAO,CAAC,CAAC,CAACC,IAAI,CAAC,MAAMR,KAAK,CAACC,SAAS,CAAC,CAAC,EAC9C,IAAII,OAAO,CAAWE,OAAO,IAAK;MAChCJ,KAAK,GAAGM,UAAU,CAAC,MAAMF,OAAO,CAAC,KAAK,CAAC,EAAEL,SAAS,CAAC;IACrD,CAAC,CAAC,CACH,CAAC;IACF,OAAOE,OAAO,KAAK,IAAI;EACzB,CAAC,CAAC,OAAOvC,KAAK,EAAE;IACd,IAAI6C,OAAO,EAAEC,OAAO,CAACC,IAAI,CAAC,wCAAwCX,SAAS,WAAW,EAAEpC,KAAK,CAAC;IAC9F,OAAO,KAAK;EACd,CAAC,SAAS;IACR,IAAIsC,KAAK,KAAKjB,SAAS,EAAE2B,YAAY,CAACV,KAAK,CAAC;EAC9C;AACF;AAEA,MAAMW,kBAAuC,GAAG,IAAInD,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AAExG,SAASoD,YAAYA,CAACf,KAAmC,EAAEE,SAAiB,EAAQ;EAClFJ,iBAAiB,EAAEkB,MAAM,CAAC,CAAC;EAC3BlB,iBAAiB,GAAG,IAAI;EACxB,IAAI,CAACE,KAAK,EAAE;EACZ;EACA,MAAMiB,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,EAAE,EAAEjB,SAAS,GAAG,GAAG,CAAC;EAC/CJ,iBAAiB,GAAG5C,cAAc,CAACkE,cAAc,CAAEC,OAAqB,IAAK;IAC3E,MAAMpB,SAAS,GAAGoB,OAAO,CAACpB,SAAS;IACnC,IAAI,CAACa,kBAAkB,CAAC/C,GAAG,CAACkC,SAAS,CAAC,EAAE;MACtC/C,cAAc,CAACoE,WAAW,CAACD,OAAO,CAACE,SAAS,EAAE,KAAK,CAAC;MACpD;IACF;IACA,KAAKxB,aAAa,CAACC,KAAK,EAAEC,SAAS,EAAsBgB,SAAS,CAAC,CAACT,IAAI,CAAEgB,OAAO,IAC/EtE,cAAc,CAACoE,WAAW,CAACD,OAAO,CAACE,SAAS,EAAEC,OAAO,CACvD,CAAC;EACH,CAAC,CAAC;AACJ;;AAEA;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,KAAKA,CAACC,MAAsB,EAAuB;EACvE,IAAIA,MAAM,KAAK,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,IAAI7C,KAAK,CAACC,OAAO,CAAC4C,MAAM,CAAC,EAAE;IAC1E,MAAM,IAAIvE,aAAa,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;EAC1E;EACA,MAAM;IAAEwE,gBAAgB;IAAEC,yBAAyB;IAAE,GAAGC;EAAK,CAAC,GAAGH,MAAM;EACvE,IAAIC,gBAAgB,KAAKzC,SAAS,IAAI,OAAOyC,gBAAgB,KAAK,UAAU,EAAE;IAC5E,MAAM,IAAIxE,aAAa,CAAC,kBAAkB,EAAE,6CAA6C,CAAC;EAC5F;EACA,MAAM+C,SAAS,GAAG0B,yBAAyB,IAAI/B,wBAAwB;EACvE,IACE,OAAOK,SAAS,KAAK,QAAQ,IAC7B,CAACvB,MAAM,CAACmD,SAAS,CAAC5B,SAAS,CAAC,IAC5BA,SAAS,GAAG,GAAG,IACfA,SAAS,GAAG,KAAK,EACjB;IACA,MAAM,IAAI/C,aAAa,CAAC,kBAAkB,EAAE,oEAAoE,CAAC;EACnH;EACA,MAAM4E,YAAqC,GAAG;IAAE,GAAGF;EAAK,CAAC;EACzD,IAAIF,gBAAgB,EAAEI,YAAY,CAACJ,gBAAgB,GAAG;IAAEzB;EAAU,CAAC;EACnE,MAAM8B,IAAI,GAAGtC,UAAU,CAACqC,YAAY,EAAE,QAAQ,EAAE,kBAAkB,CAAC;EACnEhB,YAAY,CAACY,gBAAgB,EAAEzB,SAAS,CAAC;EACzC,OAAO9B,IAAI,CAAalB,cAAc,CAACuE,KAAK,CAACO,IAAI,CAAC,CAAC;AACrD;AAEA,OAAO,MAAMC,SAAS,GAAGA,CAAA,KAA6B7D,IAAI,CAAClB,cAAc,CAAC+E,SAAS,CAAC,CAAC,CAAC;AACtF,OAAO,MAAMC,cAAc,GAAGA,CAAA,KAAuB9D,IAAI,CAAClB,cAAc,CAACgF,cAAc,CAAC,CAAC,CAAC;AAC1F,OAAO,MAAMC,eAAe,GAAGA,CAAA,KAAuC/D,IAAI,CAAClB,cAAc,CAACiF,eAAe,CAAC,CAAC,CAAC;;AAE5G;AACA,OAAO,eAAeC,WAAWA,CAACC,QAAgB,EAA4B;EAC5E,MAAMC,MAAM,GAAG,MAAMlE,IAAI,CAA4BlB,cAAc,CAACkF,WAAW,CAACC,QAAQ,CAAC,CAAC;EAC1F,OAAOC,MAAM,CAACC,IAAI;AACpB;AAEA,OAAO,MAAMC,aAAa,GAAIC,WAAoB,IAChDrE,IAAI,CAAClB,cAAc,CAACsF,aAAa,CAACC,WAAW,IAAI,IAAI,CAAC,CAAC;AACzD,OAAO,MAAMC,aAAa,GAAGA,CAAA,KAAwBtE,IAAI,CAAClB,cAAc,CAACwF,aAAa,CAAC,CAAC,CAAC;AACzF;AACA,OAAO,MAAMC,KAAK,GAAGA,CAAA,KAAqBvE,IAAI,CAAClB,cAAc,CAACyF,KAAK,CAAC,CAAC,CAAC;AACtE,OAAO,MAAMC,uBAAuB,GAAIC,aAAsB,IAC5DzE,IAAI,CAAClB,cAAc,CAAC0F,uBAAuB,CAACC,aAAa,IAAI,IAAI,CAAC,CAAC;AACrE,OAAO,MAAMC,qBAAqB,GAAGA,CAAA,KAAqB1E,IAAI,CAAClB,cAAc,CAAC4F,qBAAqB,CAAC,CAAC,CAAC;AACtG;AACA,OAAO,MAAMC,kBAAkB,GAAGA,CAAA,KAAwB3E,IAAI,CAAClB,cAAc,CAAC6F,kBAAkB,CAAC,CAAC,CAAC;;AAEnG;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,KAAKA,CAACC,GAAW,EAAEC,IAAyB,GAAG,CAAC,CAAC,EAA6B;EAClG,IAAI,OAAOD,GAAG,KAAK,QAAQ,EAAE,MAAM,IAAI9F,aAAa,CAAC,oBAAoB,EAAE,uBAAuB,CAAC;EACnG,IAAI+F,IAAI,KAAK,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,IAAIrE,KAAK,CAACC,OAAO,CAACoE,IAAI,CAAC,EAAE;IACpE,MAAM,IAAI/F,aAAa,CAAC,oBAAoB,EAAE,yBAAyB,CAAC;EAC1E;EACA,MAAM6E,IAAI,GAAGtC,UAAU,CAAC;IAAE,GAAGwD,IAAI;IAAED;EAAI,CAAC,EAAE,SAAS,EAAE,oBAAoB,CAAC;EAC1E,MAAME,QAAQ,GAAG,MAAM/E,IAAI,CAA+BlB,cAAc,CAAC8F,KAAK,CAAChB,IAAI,CAAC,CAAC;EACrF,OAAO;IAAE,GAAGmB,QAAQ;IAAEC,EAAE,EAAED,QAAQ,CAACE,MAAM,IAAI,GAAG,IAAIF,QAAQ,CAACE,MAAM,GAAG;EAAI,CAAC;AAC7E;;AAEA;;AAEA;AACA,OAAO,MAAMC,QAAQ,GAAGA,CAAA,KAA8BlF,IAAI,CAAClB,cAAc,CAACoG,QAAQ,CAAC,CAAC,CAAC;;AAErF;AACA,OAAO,MAAMC,eAAe,GAAGA,CAACC,KAAa,EAAEC,KAAc,KAC3DrF,IAAI,CAAClB,cAAc,CAACqG,eAAe,CAACC,KAAK,EAAEC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5D,OAAO,MAAMC,mBAAmB,GAAGA,CAAA,KACjCtF,IAAI,CAAClB,cAAc,CAACwG,mBAAmB,CAAC,CAAC,CAAC;AAC5C,OAAO,MAAMC,sBAAsB,GAAGA,CAAA,KACpCvF,IAAI,CAAClB,cAAc,CAACyG,sBAAsB,CAAC,CAAC,CAAC;AAC/C,OAAO,MAAMC,UAAU,GAAIH,KAAc,IAAuBrF,IAAI,CAAClB,cAAc,CAAC0G,UAAU,CAACH,KAAK,IAAI,IAAI,CAAC,CAAC;AAC9G,OAAO,MAAMI,mBAAmB,GAAIJ,KAAc,IAChDrF,IAAI,CAAClB,cAAc,CAAC2G,mBAAmB,CAACJ,KAAK,IAAI,IAAI,CAAC,CAAC;AACzD,OAAO,MAAMK,0BAA0B,GAAIL,KAAc,IACvDrF,IAAI,CAAClB,cAAc,CAAC4G,0BAA0B,CAACL,KAAK,IAAI,IAAI,CAAC,CAAC;AAChE,OAAO,MAAMM,gBAAgB,GAAIN,KAAc,IAC7CrF,IAAI,CAAClB,cAAc,CAAC6G,gBAAgB,CAACN,KAAK,IAAI,IAAI,CAAC,CAAC;AACtD,OAAO,MAAMO,sBAAsB,GAAIP,KAAc,IACnDrF,IAAI,CAAClB,cAAc,CAAC8G,sBAAsB,CAACP,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5D,OAAO,MAAMQ,QAAQ,GAAGA,CAACR,KAAc,EAAES,OAAqC,GAAG,CAAC,CAAC,KACjF9F,IAAI,CAAClB,cAAc,CAAC+G,QAAQ,CAACR,KAAK,IAAI,IAAI,EAAES,OAAO,CAACC,cAAc,KAAK,IAAI,CAAC,CAAC;AAC/E,OAAO,MAAMC,wBAAwB,GAAIX,KAAc,IACrDrF,IAAI,CAAClB,cAAc,CAACkH,wBAAwB,CAACX,KAAK,IAAI,IAAI,CAAC,CAAC;;AAE9D;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMY,aAAa,GAAGA,CAACC,GAAW,EAAEd,KAAoB,KAC7DpF,IAAI,CAAClB,cAAc,CAACmH,aAAa,CAACC,GAAG,EAAEd,KAAK,CAAC,CAAC;AAChD;AACA,OAAO,MAAMe,gBAAgB,GAAGA,CAAA,KAAuBnG,IAAI,CAAClB,cAAc,CAACqH,gBAAgB,CAAC,CAAC,CAAC;;AAE9F;AACA,OAAO,MAAMC,SAAS,GAAGA,CAACF,GAAW,EAAEJ,OAA2B,GAAG,CAAC,CAAC,KACrE9F,IAAI,CAAClB,cAAc,CAACsH,SAAS,CAACF,GAAG,EAAEJ,OAAO,CAACV,KAAK,IAAI,IAAI,CAAC,CAAC;;AAE5D;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMiB,QAAQ,GAAGA,CAACH,GAAW,EAAEI,QAAyB,GAAG,MAAM,KACtEtG,IAAI,CAAClB,cAAc,CAACuH,QAAQ,CAACH,GAAG,EAAEI,QAAQ,CAAC,CAAC;AAC9C,OAAO,MAAMC,UAAU,GAAIL,GAAW,IAA+BlG,IAAI,CAAClB,cAAc,CAACyH,UAAU,CAACL,GAAG,CAAC,CAAC;;AAEzG;AACA,OAAO,MAAMM,UAAU,GAAGA,CACxBN,GAAW,EACXO,MAA6B,EAC7BH,QAAyB,GAAG,MAAM,KAElCtG,IAAI,CAAClB,cAAc,CAAC0H,UAAU,CAACN,GAAG,EAAE5E,UAAU,CAAC;EAAE,GAAGmF,MAAM;EAAEH;AAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAE3G,OAAO,MAAMI,YAAY,GAAIR,GAAW,IAAuBlG,IAAI,CAAClB,cAAc,CAAC4H,YAAY,CAACR,GAAG,CAAC,CAAC;AACrG,OAAO,MAAMS,OAAO,GAAIT,GAAW,IAAuBlG,IAAI,CAAClB,cAAc,CAAC6H,OAAO,CAACT,GAAG,CAAC,CAAC;AAC3F,OAAO,MAAMU,WAAW,GAAIV,GAAW,IAAsBlG,IAAI,CAAClB,cAAc,CAAC8H,WAAW,CAACV,GAAG,CAAC,CAAC;AAClG,OAAO,MAAMW,SAAS,GAAIX,GAAW,IAAoBlG,IAAI,CAAClB,cAAc,CAAC+H,SAAS,CAACX,GAAG,CAAC,CAAC;AAC5F,OAAO,MAAMY,YAAY,GAAGA,CAAA,KAAgD9G,IAAI,CAAClB,cAAc,CAACgI,YAAY,CAAC,CAAC,CAAC;;AAE/G;;AAEA,OAAO,MAAMC,SAAS,GAAI1C,WAAoB,IAC5CrE,IAAI,CAAClB,cAAc,CAACiI,SAAS,CAAC1C,WAAW,IAAI,IAAI,CAAC,CAAC;AACrD;AACA,OAAO,MAAM2C,qBAAqB,GAAIC,IAAa,IACjDjH,IAAI,CAAClB,cAAc,CAACkI,qBAAqB,CAACC,IAAI,IAAI,IAAI,CAAC,CAAC;AAC1D,OAAO,MAAMC,iBAAiB,GAAI7C,WAAoB,IACpDrE,IAAI,CAAClB,cAAc,CAACoI,iBAAiB,CAAC7C,WAAW,IAAI,IAAI,CAAC,CAAC;AAC7D,OAAO,MAAM8C,qBAAqB,GAAGA,CAAA,KAAc,gBAAgB;;AAEnE;;AAEA;AACA,OAAO,SAASC,qBAAqBA,CAACC,QAAkD,EAAsB;EAC5G,OAAOvI,cAAc,CAACwI,iBAAiB,CAAEC,KAAK,IAAKF,QAAQ,CAACE,KAAgC,CAAC,CAAC;AAChG;;AAEA;AACA,MAAMC,QAAQ,GAAG;EACfnE,KAAK;EACLQ,SAAS;EACTC,cAAc;EACdC,eAAe;EACfC,WAAW;EACXI,aAAa;EACbE,aAAa;EACbC,KAAK;EACLC,uBAAuB;EACvBE,qBAAqB;EACrBC,kBAAkB;EAClBC,KAAK;EACLM,QAAQ;EACRC,eAAe;EACfG,mBAAmB;EACnBC,sBAAsB;EACtBC,UAAU;EACVC,mBAAmB;EACnBC,0BAA0B;EAC1BC,gBAAgB;EAChBC,sBAAsB;EACtBC,QAAQ;EACRG,wBAAwB;EACxBC,aAAa;EACbE,gBAAgB;EAChBC,SAAS;EACTC,QAAQ;EACRE,UAAU;EACVC,UAAU;EACVE,YAAY;EACZC,OAAO;EACPC,WAAW;EACXC,SAAS;EACTC,YAAY;EACZC,SAAS;EACTC,qBAAqB;EACrBE,iBAAiB;EACjBC,qBAAqB;EACrBC;AACF,CAAU;AAEV,eAAeI,QAAQ","ignoreList":[]}
+{"version":3,"names":["NativePinVault","PinVaultError","Error","constructor","code","message","exception","name","KNOWN_CODES","Set","toPinVaultError","error","e","has","info","userInfo","exceptionName","exceptionMessage","call","promise","MAX_DEPTH","assertPlainData","value","path","depth","Number","isFinite","Array","isArray","forEach","item","i","undefined","proto","Object","getPrototypeOf","prototype","k","v","entries","strictJson","JSON","stringify","DEFAULT_GUARD_TIMEOUT_MS","guardSubscription","evaluateGuard","guard","operation","timeoutMs","timer","verdict","Promise","race","resolve","then","setTimeout","__DEV__","console","warn","clearTimeout","GUARDED_OPERATIONS","activeGuard","installGuard","remove","jsTimeout","Math","max","onGuardRequest","request","answerGuard","requestId","allowed","start","config","environmentGuard","environmentGuardTimeoutMs","rest","isInteger","nativeConfig","json","previous","result","updateNow","currentVersion","hostPinVersions","pinsForHost","hostname","pins","signingStatus","configApiId","isForceUpdate","reset","schedulePeriodicUpdates","intervalHours","cancelPeriodicUpdates","enableDebugLogging","fetch","url","init","response","ok","status","deviceId","enrollForResult","token","label","autoEnrollForResult","checkPendingEnrollment","isEnrolled","isEnrollmentPending","enrollmentVerificationCode","enrolledClientCN","enrolledClientNotAfter","unenroll","options","wipeVaultFiles","identityKeySecurityLevel","setVaultToken","key","clearVaultTokens","fetchFile","loadFile","encoding","fileStatus","unlockFile","prompt","isFileLocked","hasFile","fileVersion","clearFile","syncAllFiles","attestNow","fetchAttestationToken","host","attestationStatus","attestationHeaderName","addConnectionListener","listener","onConnectionEvent","event","PinVault"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA,OAAOA,cAAc,MAA6B,qBAAkB;AAsBpE,cAAc,YAAS;;AAEvB;;AAcA;AACA,OAAO,MAAMC,aAAa,SAASC,KAAK,CAAC;EAIvCC,WAAWA,CAACC,IAAuB,EAAEC,OAAe,EAAEC,SAAqC,GAAG,IAAI,EAAE;IAClG,KAAK,CAACD,OAAO,CAAC;IACd,IAAI,CAACE,IAAI,GAAG,eAAe;IAC3B,IAAI,CAACH,IAAI,GAAGA,IAAI;IAChB,IAAI,CAACE,SAAS,GAAGA,SAAS;EAC5B;AACF;AAEA,MAAME,WAAgC,GAAG,IAAIC,GAAG,CAAC,CAC/C,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,SAAS,EACT,eAAe,EACf,UAAU,EACV,yBAAyB,CAC1B,CAAC;;AAEF;AACA,SAASC,eAAeA,CAACC,KAAc,EAAiB;EACtD,IAAIA,KAAK,YAAYV,aAAa,EAAE,OAAOU,KAAK;EAChD,MAAMC,CAAC,GAAID,KAAK,IAAI,CAAC,CAA+D;EACpF,MAAMP,IAAI,GAAG,OAAOQ,CAAC,CAACR,IAAI,KAAK,QAAQ,IAAII,WAAW,CAACK,GAAG,CAACD,CAAC,CAACR,IAAI,CAAC,GAAIQ,CAAC,CAACR,IAAI,GAAyB,UAAU;EAC/G,MAAMC,OAAO,GAAG,OAAOO,CAAC,CAACP,OAAO,KAAK,QAAQ,GAAGO,CAAC,CAACP,OAAO,GAAG,6BAA6B;EACzF,MAAMS,IAAI,GAAIF,CAAC,CAACG,QAAQ,IAAI,IAAuE;EACnG,MAAMT,SAAS,GACbQ,IAAI,IAAI,OAAOA,IAAI,CAACE,aAAa,KAAK,QAAQ,GAC1C;IACET,IAAI,EAAEO,IAAI,CAACE,aAAa;IACxBX,OAAO,EAAE,OAAOS,IAAI,CAACG,gBAAgB,KAAK,QAAQ,GAAGH,IAAI,CAACG,gBAAgB,GAAG;EAC/E,CAAC,GACD,IAAI;EACV,OAAO,IAAIhB,aAAa,CAACG,IAAI,EAAEC,OAAO,EAAEC,SAAS,CAAC;AACpD;AAEA,eAAeY,IAAIA,CAAIC,OAAyB,EAAc;EAC5D,IAAI;IACF,OAAQ,MAAMA,OAAO;EACvB,CAAC,CAAC,OAAOR,KAAK,EAAE;IACd,MAAMD,eAAe,CAACC,KAAK,CAAC;EAC9B;AACF;;AAEA;AACA;AACA;;AAEA;AACA,MAAMS,SAAS,GAAG,CAAC;AAEnB,SAASC,eAAeA,CAACC,KAAc,EAAEC,IAAY,EAAEnB,IAAuB,EAAEoB,KAAK,GAAG,CAAC,EAAQ;EAC/F;EACA,IAAIA,KAAK,GAAGJ,SAAS,EAAE,MAAM,IAAInB,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,qBAAqB,CAAC;EAClF,IAAID,KAAK,KAAK,IAAI,EAAE;EACpB,QAAQ,OAAOA,KAAK;IAClB,KAAK,QAAQ;IACb,KAAK,SAAS;MACZ;IACF,KAAK,QAAQ;MACX,IAAI,CAACG,MAAM,CAACC,QAAQ,CAACJ,KAAK,CAAC,EAAE,MAAM,IAAIrB,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,uBAAuB,CAAC;MAC1F;IACF,KAAK,QAAQ;MAAE;QACb,IAAII,KAAK,CAACC,OAAO,CAACN,KAAK,CAAC,EAAE;UACxBA,KAAK,CAACO,OAAO,CAAC,CAACC,IAAI,EAAEC,CAAC,KAAK;YACzB,IAAID,IAAI,KAAKE,SAAS,EAAE,MAAM,IAAI/B,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,IAAIQ,CAAC,wBAAwB,CAAC;YAC3FV,eAAe,CAACS,IAAI,EAAE,GAAGP,IAAI,IAAIQ,CAAC,GAAG,EAAE3B,IAAI,EAAEoB,KAAK,GAAG,CAAC,CAAC;UACzD,CAAC,CAAC;UACF;QACF;QACA,MAAMS,KAAK,GAAGC,MAAM,CAACC,cAAc,CAACb,KAAK,CAAC;QAC1C,IAAIW,KAAK,KAAKC,MAAM,CAACE,SAAS,IAAIH,KAAK,KAAK,IAAI,EAAE;UAChD,MAAM,IAAIhC,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,0BAA0B,CAAC;QAClE;QACA,KAAK,MAAM,CAACc,CAAC,EAAEC,CAAC,CAAC,IAAIJ,MAAM,CAACK,OAAO,CAACjB,KAAgC,CAAC,EAAE;UACrE,IAAIgB,CAAC,KAAKN,SAAS,EAAE,SAAS,CAAC;UAC/BX,eAAe,CAACiB,CAAC,EAAE,GAAGf,IAAI,IAAIc,CAAC,EAAE,EAAEjC,IAAI,EAAEoB,KAAK,GAAG,CAAC,CAAC;QACrD;QACA;MACF;IACA;MACE,MAAM,IAAIvB,aAAa,CAACG,IAAI,EAAE,GAAGmB,IAAI,KAAK,OAAOD,KAAK,iBAAiB,CAAC;EAC5E;AACF;AAEA,SAASkB,UAAUA,CAAClB,KAAc,EAAEC,IAAY,EAAEnB,IAAuB,EAAU;EACjFiB,eAAe,CAACC,KAAK,EAAEC,IAAI,EAAEnB,IAAI,CAAC;EAClC,OAAOqC,IAAI,CAACC,SAAS,CAACpB,KAAK,CAAC;AAC9B;;AAEA;;AAEA,OAAO,MAAMqB,wBAAwB,GAAG,IAAI;AAE5C,IAAIC,iBAA4C,GAAG,IAAI;;AAEvD;AACA;AACA;AACA;AACA,OAAO,eAAeC,aAAaA,CACjCC,KAAuB,EACvBC,SAA2B,EAC3BC,SAAiB,EACC;EAClB,IAAIC,KAAgD;EACpD,IAAI;IACF,MAAMC,OAAO,GAAG,MAAMC,OAAO,CAACC,IAAI,CAAU,CAC1CD,OAAO,CAACE,OAAO,CAAC,CAAC,CAACC,IAAI,CAAC,MAAMR,KAAK,CAACC,SAAS,CAAC,CAAC,EAC9C,IAAII,OAAO,CAAWE,OAAO,IAAK;MAChCJ,KAAK,GAAGM,UAAU,CAAC,MAAMF,OAAO,CAAC,KAAK,CAAC,EAAEL,SAAS,CAAC;IACrD,CAAC,CAAC,CACH,CAAC;IACF,OAAOE,OAAO,KAAK,IAAI;EACzB,CAAC,CAAC,OAAOvC,KAAK,EAAE;IACd,IAAI6C,OAAO,EAAEC,OAAO,CAACC,IAAI,CAAC,wCAAwCX,SAAS,WAAW,EAAEpC,KAAK,CAAC;IAC9F,OAAO,KAAK;EACd,CAAC,SAAS;IACR,IAAIsC,KAAK,KAAKjB,SAAS,EAAE2B,YAAY,CAACV,KAAK,CAAC;EAC9C;AACF;AAEA,MAAMW,kBAAuC,GAAG,IAAInD,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;;AAErH;AACA,IAAIoD,WAAuE,GAAG;EAAEf,KAAK,EAAEd,SAAS;EAAEgB,SAAS,EAAEL;AAAyB,CAAC;AAEvI,SAASmB,YAAYA,CAAChB,KAAmC,EAAEE,SAAiB,EAAQ;EAClFJ,iBAAiB,EAAEmB,MAAM,CAAC,CAAC;EAC3BnB,iBAAiB,GAAG,IAAI;EACxB,IAAI,CAACE,KAAK,EAAE;EACZ;EACA,MAAMkB,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,EAAE,EAAElB,SAAS,GAAG,GAAG,CAAC;EAC/CJ,iBAAiB,GAAG5C,cAAc,CAACmE,cAAc,CAAEC,OAAqB,IAAK;IAC3E,MAAMrB,SAAS,GAAGqB,OAAO,CAACrB,SAAS;IACnC,IAAI,CAACa,kBAAkB,CAAC/C,GAAG,CAACkC,SAAS,CAAC,EAAE;MACtC/C,cAAc,CAACqE,WAAW,CAACD,OAAO,CAACE,SAAS,EAAE,KAAK,CAAC;MACpD;IACF;IACA,KAAKzB,aAAa,CAACC,KAAK,EAAEC,SAAS,EAAsBiB,SAAS,CAAC,CAACV,IAAI,CAAEiB,OAAO,IAC/EvE,cAAc,CAACqE,WAAW,CAACD,OAAO,CAACE,SAAS,EAAEC,OAAO,CACvD,CAAC;EACH,CAAC,CAAC;AACJ;;AAEA;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,KAAKA,CAACC,MAAsB,EAAuB;EACvE,IAAIA,MAAM,KAAK,IAAI,IAAI,OAAOA,MAAM,KAAK,QAAQ,IAAI9C,KAAK,CAACC,OAAO,CAAC6C,MAAM,CAAC,EAAE;IAC1E,MAAM,IAAIxE,aAAa,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;EAC1E;EACA,MAAM;IAAEyE,gBAAgB;IAAEC,yBAAyB;IAAE,GAAGC;EAAK,CAAC,GAAGH,MAAM;EACvE,IAAIC,gBAAgB,KAAK1C,SAAS,IAAI,OAAO0C,gBAAgB,KAAK,UAAU,EAAE;IAC5E,MAAM,IAAIzE,aAAa,CAAC,kBAAkB,EAAE,6CAA6C,CAAC;EAC5F;EACA,MAAM+C,SAAS,GAAG2B,yBAAyB,IAAIhC,wBAAwB;EACvE,IACE,OAAOK,SAAS,KAAK,QAAQ,IAC7B,CAACvB,MAAM,CAACoD,SAAS,CAAC7B,SAAS,CAAC,IAC5BA,SAAS,GAAG,GAAG,IACfA,SAAS,GAAG,KAAK,EACjB;IACA,MAAM,IAAI/C,aAAa,CAAC,kBAAkB,EAAE,oEAAoE,CAAC;EACnH;EACA,MAAM6E,YAAqC,GAAG;IAAE,GAAGF;EAAK,CAAC;EACzD,IAAIF,gBAAgB,EAAEI,YAAY,CAACJ,gBAAgB,GAAG;IAAE1B;EAAU,CAAC;EACnE,MAAM+B,IAAI,GAAGvC,UAAU,CAACsC,YAAY,EAAE,QAAQ,EAAE,kBAAkB,CAAC;EACnE;EACA;EACA,MAAME,QAAQ,GAAGnB,WAAW;EAC5BC,YAAY,CAACY,gBAAgB,EAAE1B,SAAS,CAAC;EACzC,IAAI;IACF,MAAMiC,MAAM,GAAG,MAAM/D,IAAI,CAAalB,cAAc,CAACwE,KAAK,CAACO,IAAI,CAAC,CAAC;IACjElB,WAAW,GAAG;MAAEf,KAAK,EAAE4B,gBAAgB;MAAE1B;IAAU,CAAC;IACpD,OAAOiC,MAAM;EACf,CAAC,CAAC,OAAOtE,KAAK,EAAE;IACdmD,YAAY,CAACkB,QAAQ,CAAClC,KAAK,EAAEkC,QAAQ,CAAChC,SAAS,CAAC;IAChD,MAAMrC,KAAK;EACb;AACF;AAEA,OAAO,MAAMuE,SAAS,GAAGA,CAAA,KAA6BhE,IAAI,CAAClB,cAAc,CAACkF,SAAS,CAAC,CAAC,CAAC;AACtF,OAAO,MAAMC,cAAc,GAAGA,CAAA,KAAuBjE,IAAI,CAAClB,cAAc,CAACmF,cAAc,CAAC,CAAC,CAAC;AAC1F,OAAO,MAAMC,eAAe,GAAGA,CAAA,KAAuClE,IAAI,CAAClB,cAAc,CAACoF,eAAe,CAAC,CAAC,CAAC;;AAE5G;AACA,OAAO,eAAeC,WAAWA,CAACC,QAAgB,EAA4B;EAC5E,MAAML,MAAM,GAAG,MAAM/D,IAAI,CAA4BlB,cAAc,CAACqF,WAAW,CAACC,QAAQ,CAAC,CAAC;EAC1F,OAAOL,MAAM,CAACM,IAAI;AACpB;AAEA,OAAO,MAAMC,aAAa,GAAIC,WAAoB,IAChDvE,IAAI,CAAClB,cAAc,CAACwF,aAAa,CAACC,WAAW,IAAI,IAAI,CAAC,CAAC;AACzD,OAAO,MAAMC,aAAa,GAAGA,CAAA,KAAwBxE,IAAI,CAAClB,cAAc,CAAC0F,aAAa,CAAC,CAAC,CAAC;AACzF;AACA,OAAO,MAAMC,KAAK,GAAGA,CAAA,KAAqBzE,IAAI,CAAClB,cAAc,CAAC2F,KAAK,CAAC,CAAC,CAAC;AACtE,OAAO,MAAMC,uBAAuB,GAAIC,aAAsB,IAC5D3E,IAAI,CAAClB,cAAc,CAAC4F,uBAAuB,CAACC,aAAa,IAAI,IAAI,CAAC,CAAC;AACrE,OAAO,MAAMC,qBAAqB,GAAGA,CAAA,KAAqB5E,IAAI,CAAClB,cAAc,CAAC8F,qBAAqB,CAAC,CAAC,CAAC;AACtG;AACA,OAAO,MAAMC,kBAAkB,GAAGA,CAAA,KAAwB7E,IAAI,CAAClB,cAAc,CAAC+F,kBAAkB,CAAC,CAAC,CAAC;;AAEnG;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,eAAeC,KAAKA,CAACC,GAAW,EAAEC,IAAyB,GAAG,CAAC,CAAC,EAA6B;EAClG,IAAI,OAAOD,GAAG,KAAK,QAAQ,EAAE,MAAM,IAAIhG,aAAa,CAAC,oBAAoB,EAAE,uBAAuB,CAAC;EACnG,IAAIiG,IAAI,KAAK,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,IAAIvE,KAAK,CAACC,OAAO,CAACsE,IAAI,CAAC,EAAE;IACpE,MAAM,IAAIjG,aAAa,CAAC,oBAAoB,EAAE,yBAAyB,CAAC;EAC1E;EACA,MAAM8E,IAAI,GAAGvC,UAAU,CAAC;IAAE,GAAG0D,IAAI;IAAED;EAAI,CAAC,EAAE,SAAS,EAAE,oBAAoB,CAAC;EAC1E,MAAME,QAAQ,GAAG,MAAMjF,IAAI,CAA+BlB,cAAc,CAACgG,KAAK,CAACjB,IAAI,CAAC,CAAC;EACrF,OAAO;IAAE,GAAGoB,QAAQ;IAAEC,EAAE,EAAED,QAAQ,CAACE,MAAM,IAAI,GAAG,IAAIF,QAAQ,CAACE,MAAM,GAAG;EAAI,CAAC;AAC7E;;AAEA;;AAEA;AACA,OAAO,MAAMC,QAAQ,GAAGA,CAAA,KAA8BpF,IAAI,CAAClB,cAAc,CAACsG,QAAQ,CAAC,CAAC,CAAC;;AAErF;AACA,OAAO,MAAMC,eAAe,GAAGA,CAACC,KAAa,EAAEC,KAAc,KAC3DvF,IAAI,CAAClB,cAAc,CAACuG,eAAe,CAACC,KAAK,EAAEC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5D,OAAO,MAAMC,mBAAmB,GAAGA,CAAA,KACjCxF,IAAI,CAAClB,cAAc,CAAC0G,mBAAmB,CAAC,CAAC,CAAC;AAC5C,OAAO,MAAMC,sBAAsB,GAAGA,CAAA,KACpCzF,IAAI,CAAClB,cAAc,CAAC2G,sBAAsB,CAAC,CAAC,CAAC;AAC/C,OAAO,MAAMC,UAAU,GAAIH,KAAc,IAAuBvF,IAAI,CAAClB,cAAc,CAAC4G,UAAU,CAACH,KAAK,IAAI,IAAI,CAAC,CAAC;AAC9G,OAAO,MAAMI,mBAAmB,GAAIJ,KAAc,IAChDvF,IAAI,CAAClB,cAAc,CAAC6G,mBAAmB,CAACJ,KAAK,IAAI,IAAI,CAAC,CAAC;AACzD,OAAO,MAAMK,0BAA0B,GAAIL,KAAc,IACvDvF,IAAI,CAAClB,cAAc,CAAC8G,0BAA0B,CAACL,KAAK,IAAI,IAAI,CAAC,CAAC;AAChE,OAAO,MAAMM,gBAAgB,GAAIN,KAAc,IAC7CvF,IAAI,CAAClB,cAAc,CAAC+G,gBAAgB,CAACN,KAAK,IAAI,IAAI,CAAC,CAAC;AACtD,OAAO,MAAMO,sBAAsB,GAAIP,KAAc,IACnDvF,IAAI,CAAClB,cAAc,CAACgH,sBAAsB,CAACP,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5D,OAAO,MAAMQ,QAAQ,GAAGA,CAACR,KAAc,EAAES,OAAqC,GAAG,CAAC,CAAC,KACjFhG,IAAI,CAAClB,cAAc,CAACiH,QAAQ,CAACR,KAAK,IAAI,IAAI,EAAES,OAAO,CAACC,cAAc,KAAK,IAAI,CAAC,CAAC;AAC/E,OAAO,MAAMC,wBAAwB,GAAIX,KAAc,IACrDvF,IAAI,CAAClB,cAAc,CAACoH,wBAAwB,CAACX,KAAK,IAAI,IAAI,CAAC,CAAC;;AAE9D;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMY,aAAa,GAAGA,CAACC,GAAW,EAAEd,KAAoB,KAC7DtF,IAAI,CAAClB,cAAc,CAACqH,aAAa,CAACC,GAAG,EAAEd,KAAK,CAAC,CAAC;AAChD;AACA,OAAO,MAAMe,gBAAgB,GAAGA,CAAA,KAAuBrG,IAAI,CAAClB,cAAc,CAACuH,gBAAgB,CAAC,CAAC,CAAC;;AAE9F;AACA,OAAO,MAAMC,SAAS,GAAGA,CAACF,GAAW,EAAEJ,OAA2B,GAAG,CAAC,CAAC,KACrEhG,IAAI,CAAClB,cAAc,CAACwH,SAAS,CAACF,GAAG,EAAEJ,OAAO,CAACV,KAAK,IAAI,IAAI,CAAC,CAAC;;AAE5D;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMiB,QAAQ,GAAGA,CAACH,GAAW,EAAEI,QAAyB,GAAG,MAAM,KACtExG,IAAI,CAAClB,cAAc,CAACyH,QAAQ,CAACH,GAAG,EAAEI,QAAQ,CAAC,CAAC;AAC9C,OAAO,MAAMC,UAAU,GAAIL,GAAW,IAA+BpG,IAAI,CAAClB,cAAc,CAAC2H,UAAU,CAACL,GAAG,CAAC,CAAC;;AAEzG;AACA,OAAO,MAAMM,UAAU,GAAGA,CACxBN,GAAW,EACXO,MAA6B,EAC7BH,QAAyB,GAAG,MAAM,KAElCxG,IAAI,CAAClB,cAAc,CAAC4H,UAAU,CAACN,GAAG,EAAE9E,UAAU,CAAC;EAAE,GAAGqF,MAAM;EAAEH;AAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAE3G,OAAO,MAAMI,YAAY,GAAIR,GAAW,IAAuBpG,IAAI,CAAClB,cAAc,CAAC8H,YAAY,CAACR,GAAG,CAAC,CAAC;AACrG,OAAO,MAAMS,OAAO,GAAIT,GAAW,IAAuBpG,IAAI,CAAClB,cAAc,CAAC+H,OAAO,CAACT,GAAG,CAAC,CAAC;AAC3F,OAAO,MAAMU,WAAW,GAAIV,GAAW,IAAsBpG,IAAI,CAAClB,cAAc,CAACgI,WAAW,CAACV,GAAG,CAAC,CAAC;AAClG,OAAO,MAAMW,SAAS,GAAIX,GAAW,IAAoBpG,IAAI,CAAClB,cAAc,CAACiI,SAAS,CAACX,GAAG,CAAC,CAAC;AAC5F,OAAO,MAAMY,YAAY,GAAGA,CAAA,KAAgDhH,IAAI,CAAClB,cAAc,CAACkI,YAAY,CAAC,CAAC,CAAC;;AAE/G;;AAEA,OAAO,MAAMC,SAAS,GAAI1C,WAAoB,IAC5CvE,IAAI,CAAClB,cAAc,CAACmI,SAAS,CAAC1C,WAAW,IAAI,IAAI,CAAC,CAAC;AACrD;AACA,OAAO,MAAM2C,qBAAqB,GAAIC,IAAa,IACjDnH,IAAI,CAAClB,cAAc,CAACoI,qBAAqB,CAACC,IAAI,IAAI,IAAI,CAAC,CAAC;AAC1D,OAAO,MAAMC,iBAAiB,GAAI7C,WAAoB,IACpDvE,IAAI,CAAClB,cAAc,CAACsI,iBAAiB,CAAC7C,WAAW,IAAI,IAAI,CAAC,CAAC;AAC7D,OAAO,MAAM8C,qBAAqB,GAAGA,CAAA,KAAc,gBAAgB;;AAEnE;;AAEA;AACA,OAAO,SAASC,qBAAqBA,CAACC,QAAkD,EAAsB;EAC5G,OAAOzI,cAAc,CAAC0I,iBAAiB,CAAEC,KAAK,IAAKF,QAAQ,CAACE,KAAgC,CAAC,CAAC;AAChG;;AAEA;AACA,MAAMC,QAAQ,GAAG;EACfpE,KAAK;EACLU,SAAS;EACTC,cAAc;EACdC,eAAe;EACfC,WAAW;EACXG,aAAa;EACbE,aAAa;EACbC,KAAK;EACLC,uBAAuB;EACvBE,qBAAqB;EACrBC,kBAAkB;EAClBC,KAAK;EACLM,QAAQ;EACRC,eAAe;EACfG,mBAAmB;EACnBC,sBAAsB;EACtBC,UAAU;EACVC,mBAAmB;EACnBC,0BAA0B;EAC1BC,gBAAgB;EAChBC,sBAAsB;EACtBC,QAAQ;EACRG,wBAAwB;EACxBC,aAAa;EACbE,gBAAgB;EAChBC,SAAS;EACTC,QAAQ;EACRE,UAAU;EACVC,UAAU;EACVE,YAAY;EACZC,OAAO;EACPC,WAAW;EACXC,SAAS;EACTC,YAAY;EACZC,SAAS;EACTC,qBAAqB;EACrBE,iBAAiB;EACjBC,qBAAqB;EACrBC;AACF,CAAU;AAEV,eAAeI,QAAQ","ignoreList":[]}

package/lib/typescript/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,YAAS,CAAC;AAEjB,cAAc,YAAS,CAAC;AAExB,wCAAwC;AACxC,MAAM,MAAM,iBAAiB;AAC3B,2FAA2F;AACzF,kBAAkB,GAClB,oBAAoB;AACtB,+CAA+C;GAC7C,eAAe;AACjB,kFAAkF;GAChF,SAAS,GACT,eAAe,GACf,UAAU;AACZ,yFAAyF;GACvF,yBAAyB,CAAC;AAE9B,4FAA4F;AAC5F,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;gBAExD,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAE,aAAa,CAAC,WAAW,CAAQ;CAMnG;AAqFD,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAI7C;;;GAGG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAwBD;;;;GAIG;AACH,wBAAsB,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAsBvE;AAED,eAAO,MAAM,SAAS,QAAO,OAAO,CAAC,YAAY,CAAqC,CAAC;AACvF,eAAO,MAAM,cAAc,QAAO,OAAO,CAAC,MAAM,CAA0C,CAAC;AAC3F,eAAO,MAAM,eAAe,QAAO,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAA2C,CAAC;AAE7G,wFAAwF;AACxF,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAG5E;AAED,eAAO,MAAM,aAAa,GAAI,cAAc,MAAM,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CACxB,CAAC;AAC1D,eAAO,MAAM,aAAa,QAAO,OAAO,CAAC,OAAO,CAAyC,CAAC;AAC1F,8EAA8E;AAC9E,eAAO,MAAM,KAAK,QAAO,OAAO,CAAC,IAAI,CAAiC,CAAC;AACvE,eAAO,MAAM,uBAAuB,GAAI,gBAAgB,MAAM,KAAG,OAAO,CAAC,OAAO,CACX,CAAC;AACtE,eAAO,MAAM,qBAAqB,QAAO,OAAO,CAAC,IAAI,CAAiD,CAAC;AACvG,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,QAAO,OAAO,CAAC,OAAO,CAA8C,CAAC;AAIpG;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAQlG;AAID,uFAAuF;AACvF,eAAO,MAAM,QAAQ,QAAO,OAAO,CAAC,MAAM,GAAG,IAAI,CAAoC,CAAC;AAEtF,+FAA+F;AAC/F,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC,0BAA0B,CACtC,CAAC;AAC7D,eAAO,MAAM,mBAAmB,QAAO,OAAO,CAAC,0BAA0B,CAC7B,CAAC;AAC7C,eAAO,MAAM,sBAAsB,QAAO,OAAO,CAAC,0BAA0B,CAC7B,CAAC;AAChD,eAAO,MAAM,UAAU,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,OAAO,CAAmD,CAAC;AAC/G,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,OAAO,CACX,CAAC;AAC1D,eAAO,MAAM,0BAA0B,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CACjB,CAAC;AACjE,eAAO,MAAM,gBAAgB,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CACjB,CAAC;AACvD,eAAO,MAAM,sBAAsB,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CACjB,CAAC;AAC7D,eAAO,MAAM,QAAQ,GAAI,QAAQ,MAAM,EAAE,UAAS;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,KAAG,OAAO,CAAC,IAAI,CACnB,CAAC;AAChF,eAAO,MAAM,wBAAwB,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAC3B,CAAC;AAI/D;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,GAAG,IAAI,KAAG,OAAO,CAAC,IAAI,CAC9B,CAAC;AACjD,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,QAAO,OAAO,CAAC,MAAM,CAA4C,CAAC;AAE/F,8FAA8F;AAC9F,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,EAAE,UAAS;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,KAAG,OAAO,CAAC,eAAe,CACrC,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,WAAU,eAAwB,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAClD,CAAC;AAC/C,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,eAAe,CAAyC,CAAC;AAE1G,mGAAmG;AACnG,eAAO,MAAM,UAAU,GACrB,KAAK,MAAM,EACX,QAAQ,qBAAqB,EAC7B,WAAU,eAAwB,KACjC,OAAO,CAAC,qBAAqB,CAC2E,CAAC;AAE5G,eAAO,MAAM,YAAY,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,OAAO,CAA2C,CAAC;AACtG,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,OAAO,CAAsC,CAAC;AAC5F,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,MAAM,CAA0C,CAAC;AACnG,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,IAAI,CAAwC,CAAC;AAC7F,eAAO,MAAM,YAAY,QAAO,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAwC,CAAC;AAIhH,eAAO,MAAM,SAAS,GAAI,cAAc,MAAM,KAAG,OAAO,CAAC,iBAAiB,CACrB,CAAC;AACtD,yFAAyF;AACzF,eAAO,MAAM,qBAAqB,GAAI,OAAO,MAAM,KAAG,OAAO,CAAC,sBAAsB,CAC1B,CAAC;AAC3D,eAAO,MAAM,iBAAiB,GAAI,cAAc,MAAM,KAAG,OAAO,CAAC,iBAAiB,CACrB,CAAC;AAC9D,eAAO,MAAM,qBAAqB,QAAO,MAA0B,CAAC;AAIpE,qGAAqG;AACrG,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG;IAAE,MAAM,IAAI,IAAI,CAAA;CAAE,CAE5G;AAED,6FAA6F;AAC7F,QAAA,MAAM,QAAQ;;8BA1He,OAAO,CAAC,YAAY,CAAC;mCAChB,OAAO,CAAC,MAAM,CAAC;oCACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;;2CAQtB,MAAM,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;kCAEjD,OAAO,CAAC,OAAO,CAAC;0BAExB,OAAO,CAAC,IAAI,CAAC;uDACkB,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;0CAExC,OAAO,CAAC,IAAI,CAAC;uCAEhB,OAAO,CAAC,OAAO,CAAC;;6BAuB1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;sCAGX,MAAM,UAAU,MAAM,KAAG,OAAO,CAAC,0BAA0B,CAAC;wCAE5D,OAAO,CAAC,0BAA0B,CAAC;2CAEhC,OAAO,CAAC,0BAA0B,CAAC;kCAE1C,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;2CAChB,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;kDAElB,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;wCAEzC,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;8CAEzB,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;gCAE7C,MAAM,YAAW;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,KAAQ,OAAO,CAAC,IAAI,CAAC;gDAElD,MAAM,KAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;kCASvD,MAAM,SAAS,MAAM,GAAG,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;qCAG3C,OAAO,CAAC,MAAM,CAAC;8BAGpB,MAAM,YAAW;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAQ,OAAO,CAAC,eAAe,CAAC;6BAQpE,MAAM,aAAY,eAAe,KAAY,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;+BAEjE,MAAM,KAAG,OAAO,CAAC,eAAe,CAAC;+BAI1D,MAAM,UACH,qBAAqB,aACnB,eAAe,KACxB,OAAO,CAAC,qBAAqB,CAAC;iCAGC,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;4BAC9B,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;gCACrB,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC;8BAC1B,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;iCACrB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;uCAIhC,MAAM,KAAG,OAAO,CAAC,iBAAiB,CAAC;4CAG9B,MAAM,KAAG,OAAO,CAAC,sBAAsB,CAAC;+CAErC,MAAM,KAAG,OAAO,CAAC,iBAAiB,CAAC;0CAE1C,MAAM;;CAkDrC,CAAC;AAEX,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,YAAS,CAAC;AAEjB,cAAc,YAAS,CAAC;AAExB,wCAAwC;AACxC,MAAM,MAAM,iBAAiB;AAC3B,2FAA2F;AACzF,kBAAkB,GAClB,oBAAoB;AACtB,+CAA+C;GAC7C,eAAe;AACjB,kFAAkF;GAChF,SAAS,GACT,eAAe,GACf,UAAU;AACZ,yFAAyF;GACvF,yBAAyB,CAAC;AAE9B,4FAA4F;AAC5F,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;gBAExD,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,GAAE,aAAa,CAAC,WAAW,CAAQ;CAMnG;AAqFD,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAI7C;;;GAGG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AA2BD;;;;GAIG;AACH,wBAAsB,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAgCvE;AAED,eAAO,MAAM,SAAS,QAAO,OAAO,CAAC,YAAY,CAAqC,CAAC;AACvF,eAAO,MAAM,cAAc,QAAO,OAAO,CAAC,MAAM,CAA0C,CAAC;AAC3F,eAAO,MAAM,eAAe,QAAO,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAA2C,CAAC;AAE7G,wFAAwF;AACxF,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAG5E;AAED,eAAO,MAAM,aAAa,GAAI,cAAc,MAAM,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CACxB,CAAC;AAC1D,eAAO,MAAM,aAAa,QAAO,OAAO,CAAC,OAAO,CAAyC,CAAC;AAC1F,8EAA8E;AAC9E,eAAO,MAAM,KAAK,QAAO,OAAO,CAAC,IAAI,CAAiC,CAAC;AACvE,eAAO,MAAM,uBAAuB,GAAI,gBAAgB,MAAM,KAAG,OAAO,CAAC,OAAO,CACX,CAAC;AACtE,eAAO,MAAM,qBAAqB,QAAO,OAAO,CAAC,IAAI,CAAiD,CAAC;AACvG,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,QAAO,OAAO,CAAC,OAAO,CAA8C,CAAC;AAIpG;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAQlG;AAID,uFAAuF;AACvF,eAAO,MAAM,QAAQ,QAAO,OAAO,CAAC,MAAM,GAAG,IAAI,CAAoC,CAAC;AAEtF,+FAA+F;AAC/F,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC,0BAA0B,CACtC,CAAC;AAC7D,eAAO,MAAM,mBAAmB,QAAO,OAAO,CAAC,0BAA0B,CAC7B,CAAC;AAC7C,eAAO,MAAM,sBAAsB,QAAO,OAAO,CAAC,0BAA0B,CAC7B,CAAC;AAChD,eAAO,MAAM,UAAU,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,OAAO,CAAmD,CAAC;AAC/G,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,OAAO,CACX,CAAC;AAC1D,eAAO,MAAM,0BAA0B,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CACjB,CAAC;AACjE,eAAO,MAAM,gBAAgB,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CACjB,CAAC;AACvD,eAAO,MAAM,sBAAsB,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CACjB,CAAC;AAC7D,eAAO,MAAM,QAAQ,GAAI,QAAQ,MAAM,EAAE,UAAS;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,KAAG,OAAO,CAAC,IAAI,CACnB,CAAC;AAChF,eAAO,MAAM,wBAAwB,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAC3B,CAAC;AAI/D;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,GAAG,IAAI,KAAG,OAAO,CAAC,IAAI,CAC9B,CAAC;AACjD,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,QAAO,OAAO,CAAC,MAAM,CAA4C,CAAC;AAE/F,8FAA8F;AAC9F,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,EAAE,UAAS;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,KAAG,OAAO,CAAC,eAAe,CACrC,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,WAAU,eAAwB,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAClD,CAAC;AAC/C,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,eAAe,CAAyC,CAAC;AAE1G,mGAAmG;AACnG,eAAO,MAAM,UAAU,GACrB,KAAK,MAAM,EACX,QAAQ,qBAAqB,EAC7B,WAAU,eAAwB,KACjC,OAAO,CAAC,qBAAqB,CAC2E,CAAC;AAE5G,eAAO,MAAM,YAAY,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,OAAO,CAA2C,CAAC;AACtG,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,OAAO,CAAsC,CAAC;AAC5F,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,MAAM,CAA0C,CAAC;AACnG,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,KAAG,OAAO,CAAC,IAAI,CAAwC,CAAC;AAC7F,eAAO,MAAM,YAAY,QAAO,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAwC,CAAC;AAIhH,eAAO,MAAM,SAAS,GAAI,cAAc,MAAM,KAAG,OAAO,CAAC,iBAAiB,CACrB,CAAC;AACtD,yFAAyF;AACzF,eAAO,MAAM,qBAAqB,GAAI,OAAO,MAAM,KAAG,OAAO,CAAC,sBAAsB,CAC1B,CAAC;AAC3D,eAAO,MAAM,iBAAiB,GAAI,cAAc,MAAM,KAAG,OAAO,CAAC,iBAAiB,CACrB,CAAC;AAC9D,eAAO,MAAM,qBAAqB,QAAO,MAA0B,CAAC;AAIpE,qGAAqG;AACrG,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG;IAAE,MAAM,IAAI,IAAI,CAAA;CAAE,CAE5G;AAED,6FAA6F;AAC7F,QAAA,MAAM,QAAQ;;8BA1He,OAAO,CAAC,YAAY,CAAC;mCAChB,OAAO,CAAC,MAAM,CAAC;oCACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;;2CAQtB,MAAM,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;kCAEjD,OAAO,CAAC,OAAO,CAAC;0BAExB,OAAO,CAAC,IAAI,CAAC;uDACkB,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;0CAExC,OAAO,CAAC,IAAI,CAAC;uCAEhB,OAAO,CAAC,OAAO,CAAC;;6BAuB1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;sCAGX,MAAM,UAAU,MAAM,KAAG,OAAO,CAAC,0BAA0B,CAAC;wCAE5D,OAAO,CAAC,0BAA0B,CAAC;2CAEhC,OAAO,CAAC,0BAA0B,CAAC;kCAE1C,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;2CAChB,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;kDAElB,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;wCAEzC,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;8CAEzB,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;gCAE7C,MAAM,YAAW;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,KAAQ,OAAO,CAAC,IAAI,CAAC;gDAElD,MAAM,KAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;kCASvD,MAAM,SAAS,MAAM,GAAG,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;qCAG3C,OAAO,CAAC,MAAM,CAAC;8BAGpB,MAAM,YAAW;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAQ,OAAO,CAAC,eAAe,CAAC;6BAQpE,MAAM,aAAY,eAAe,KAAY,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;+BAEjE,MAAM,KAAG,OAAO,CAAC,eAAe,CAAC;+BAI1D,MAAM,UACH,qBAAqB,aACnB,eAAe,KACxB,OAAO,CAAC,qBAAqB,CAAC;iCAGC,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;4BAC9B,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;gCACrB,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC;8BAC1B,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;iCACrB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;uCAIhC,MAAM,KAAG,OAAO,CAAC,iBAAiB,CAAC;4CAG9B,MAAM,KAAG,OAAO,CAAC,sBAAsB,CAAC;+CAErC,MAAM,KAAG,OAAO,CAAC,iBAAiB,CAAC;0CAE1C,MAAM;;CAkDrC,CAAC;AAEX,eAAe,QAAQ,CAAC"}