@verana-labs/vs-agent-sdk 2.0.0-dev.7 → 2.0.0-dev.72

package/build/did/migrateWebVhLog.js

@@ -1,230 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.rebuildWebVhLog = rebuildWebVhLog;
-exports.migrateWebVhLogIfBroken = migrateWebVhLogIfBroken;
-const askar_1 = require("@credo-ts/askar");
-const core_1 = require("@credo-ts/core");
-const askar_shared_1 = require("@openwallet-foundation/askar-shared");
-const didwebvh_ts_1 = require("didwebvh-ts");
-/**
- * Verifier that delegates Ed25519 verification to the agent's KMS.
- */
-class KmsVerifier {
-    constructor(agentContext) {
-        this.agentContext = agentContext;
-    }
-    async verify(signature, message, publicKey) {
-        try {
-            const kms = this.agentContext.dependencyManager.resolve(core_1.Kms.KeyManagementApi);
-            const publicJwk = core_1.Kms.PublicJwk.fromPublicKey({ kty: 'OKP', crv: 'Ed25519', publicKey });
-            const { verified } = await kms.verify({
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                key: { publicJwk: publicJwk.toJson() },
-                algorithm: 'EdDSA',
-                signature,
-                data: message,
-            });
-            return verified;
-        }
-        catch (_a) {
-            return false;
-        }
-    }
-}
-/**
- * Signer that signs with an Ed25519 key managed by the agent's KMS,
- * exposing the public key as a `did:key:` verification method id.
- */
-class KmsSigner {
-    constructor(agentContext, kmsKeyId, publicKeyMultibase) {
-        this.agentContext = agentContext;
-        this.kmsKeyId = kmsKeyId;
-        this.publicKeyMultibase = publicKeyMultibase;
-    }
-    getVerificationMethodId() {
-        return `did:key:${this.publicKeyMultibase}`;
-    }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    async sign(input) {
-        const kms = this.agentContext.dependencyManager.resolve(core_1.Kms.KeyManagementApi);
-        const data = await (0, didwebvh_ts_1.prepareDataForSigning)(input.document, input.proof);
-        const { signature } = await kms.sign({
-            keyId: this.kmsKeyId,
-            algorithm: 'EdDSA',
-            data,
-        });
-        return { proofValue: (0, didwebvh_ts_1.multibaseEncode)(signature, didwebvh_ts_1.MultibaseEncoding.BASE58_BTC) };
-    }
-}
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-const normalizeMethodArray = (arr) => 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-arr === null || arr === void 0 ? void 0 : arr.map((item) => (typeof item === 'string' ? item : item.id));
-/**
- * `resolveDIDFromLog` throws on validation failures (hash chain, signature,
- * etc.). Normalize that into a discriminated result so callers can branch on
- * the failure mode without try/catch boilerplate.
- */
-async function tryResolveLog(log, verifier) {
-    try {
-        await (0, didwebvh_ts_1.resolveDIDFromLog)(log, { verifier });
-        return { ok: true };
-    }
-    catch (error) {
-        return { ok: false, reason: error instanceof Error ? error.message : String(error) };
-    }
-}
-/**
- * Pure rebuild logic, decoupled from credo / askar so it can be unit-tested.
- *
- * If `log` resolves cleanly under the current didwebvh-ts version, returns `null`
- * (nothing to do). Otherwise, if the failure is the known `<2.7.4` "hash chain
- * broken" bug, rebuilds entries 2..N (preserving entry #1, SCID, every entry's
- * `state` and `parameters`) and returns the new log. For any other resolution
- * error, returns `null` and lets the caller decide what to do.
- */
-async function rebuildWebVhLog(log, { signer, verifier, domain }) {
-    var _a, _b, _c;
-    if (!log || log.length === 0)
-        return null;
-    const initial = await tryResolveLog(log, verifier);
-    if (initial.ok)
-        return null;
-    if (!/hash chain broken/i.test(initial.reason))
-        return null;
-    if (log.length < 2)
-        return null;
-    const originalScid = log[0].parameters.scid;
-    let newLog = [log[0]];
-    for (let i = 1; i < log.length; i++) {
-        const oldEntry = log[i];
-        const oldState = oldEntry.state;
-        const oldParams = oldEntry.parameters;
-        const lastParams = newLog[newLog.length - 1].parameters;
-        const activeUpdateKeys = (_a = lastParams.updateKeys) !== null && _a !== void 0 ? _a : [];
-        if (activeUpdateKeys.length === 0) {
-            throw new Error(`Cannot rebuild webvh log: no active updateKeys at entry ${i + 1}`);
-        }
-        const controllerValue = Array.isArray(oldState.controller) ? oldState.controller[0] : oldState.controller;
-        const { log: rebuilt } = await (0, didwebvh_ts_1.updateDID)({
-            log: newLog,
-            signer,
-            verifier,
-            domain,
-            updateKeys: (_b = oldParams.updateKeys) !== null && _b !== void 0 ? _b : activeUpdateKeys,
-            verificationMethods: oldState.verificationMethod,
-            services: oldState.service,
-            controller: controllerValue,
-            authentication: normalizeMethodArray(oldState.authentication),
-            assertionMethod: normalizeMethodArray(oldState.assertionMethod),
-            keyAgreement: normalizeMethodArray(oldState.keyAgreement),
-            alsoKnownAs: oldState.alsoKnownAs,
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            context: oldState['@context'],
-            portable: oldParams.portable,
-            nextKeyHashes: oldParams.nextKeyHashes,
-            // Forward witness only when it carries meaningful values. Passing an empty
-            // `{}` would make `updateDID` expand it into `{ threshold: 0, witnesses: [] }`,
-            // which then no longer matches the original entry's parameters.
-            witness: oldParams.witness && (((_c = oldParams.witness.witnesses) === null || _c === void 0 ? void 0 : _c.length) || oldParams.witness.threshold)
-                ? oldParams.witness
-                : undefined,
-            watchers: oldParams.watchers,
-            updated: oldEntry.versionTime,
-        });
-        newLog = rebuilt;
-    }
-    const verify = await tryResolveLog(newLog, verifier);
-    if (!verify.ok) {
-        throw new Error(`Rebuilt webvh log is still invalid: ${verify.reason}`);
-    }
-    if (newLog[0].parameters.scid !== originalScid) {
-        // Should be impossible since entry #1 is unchanged, but guard anyway.
-        throw new Error(`Rebuilt webvh log produced a different SCID; aborting migration`);
-    }
-    return newLog;
-}
-/**
- * Scans all Ed25519 keys in the Askar store and returns the key name
- * whose public key matches the given multibase fingerprint.
- * Used to recover a lost kmsKeyId when didRecord.keys is empty after a schema upgrade.
- */
-async function findKmsKeyIdForFingerprint(agentContext, fingerprint) {
-    try {
-        const storeManager = agentContext.dependencyManager.resolve(askar_1.AskarStoreManager);
-        return await storeManager.withSession(agentContext, async (session) => {
-            const entries = await session.fetchAllKeys({ algorithm: askar_shared_1.KeyAlgorithm.Ed25519 });
-            for (const entry of entries) {
-                const pubBytes = entry.key.publicBytes;
-                const computed = (0, didwebvh_ts_1.multibaseEncode)(new Uint8Array([237, 1, ...pubBytes]), didwebvh_ts_1.MultibaseEncoding.BASE58_BTC);
-                entry.key.handle.free();
-                if (computed === fingerprint)
-                    return entry.name;
-            }
-            return undefined;
-        });
-    }
-    catch (_a) {
-        agentContext.config.logger.warn(`Failed to scan Askar keys, cannot recover controller key for webvh log migration`);
-        return undefined;
-    }
-}
-/**
- * Detect a `did:webvh` log that became unresolvable because of the
- * `didwebvh-ts` <2.7.4 entry-hash bug (placeholder versionId used for entries
- * after the first). If so, rebuild the log preserving:
- *   - entry #1 byte-for-byte (preserving the SCID and therefore the public DID)
- *   - the `state` and `parameters` of entries 2..N (services, keys, controller, etc.)
- *
- * Only the entryHash and proof of entries 2..N are recomputed/re-signed using
- * the controller key the agent already holds in askar.
- *
- * Returns true if migration ran successfully, false if it was not needed.
- * Throws if the rebuild fails or the result is somehow invalid.
- */
-async function migrateWebVhLogIfBroken(agentContext, didRecord, logger) {
-    var _a, _b, _c, _d, _e, _f, _g;
-    const log = didRecord.metadata.get('log');
-    if (!log || log.length === 0)
-        return false;
-    const verifier = new KmsVerifier(agentContext);
-    // Cheap pre-check so we can produce a clear log message before doing real work.
-    const preCheck = await tryResolveLog(log, verifier);
-    if (preCheck.ok)
-        return false;
-    if (!/hash chain broken/i.test(preCheck.reason)) {
-        logger.warn(`webvh DID log for ${didRecord.did} is invalid and not eligible for hash-chain migration: ${preCheck.reason}`);
-        return false;
-    }
-    const domain = didRecord.getTag('domain');
-    const activeUpdateKey = (_b = (_a = log[log.length - 1].parameters.updateKeys) === null || _a === void 0 ? void 0 : _a[0]) !== null && _b !== void 0 ? _b : (_c = log[0].parameters.updateKeys) === null || _c === void 0 ? void 0 : _c[0];
-    if (!activeUpdateKey) {
-        throw new Error(`Cannot migrate webvh log for ${didRecord.did}: no updateKeys present`);
-    }
-    let kmsKeyId = (_e = (_d = didRecord.keys) === null || _d === void 0 ? void 0 : _d[0]) === null || _e === void 0 ? void 0 : _e.kmsKeyId;
-    if (!kmsKeyId) {
-        // The key mapping may have been lost after a schema update.
-        // Try to recover the key from Askar using the update key fingerprint.
-        kmsKeyId = await findKmsKeyIdForFingerprint(agentContext, activeUpdateKey);
-        if (!kmsKeyId) {
-            throw new Error(`Cannot migrate webvh log for ${didRecord.did}: no controller key on DID record`);
-        }
-        logger.warn(`webvh DID ${didRecord.did}: controller key recovered from Askar scan`);
-        // Update the DID record with the recovered key.
-        const vm = (_g = (_f = didRecord.didDocument) === null || _f === void 0 ? void 0 : _f.verificationMethod) === null || _g === void 0 ? void 0 : _g.find(v => v.publicKeyMultibase === activeUpdateKey);
-        const relativeKeyId = (vm === null || vm === void 0 ? void 0 : vm.id) ? `#${vm.id.split('#')[1]}` : '#key-1';
-        didRecord.keys = [{ kmsKeyId, didDocumentRelativeKeyId: relativeKeyId }];
-    }
-    logger.warn(`webvh DID log for ${didRecord.did} is invalid (likely legacy didwebvh-ts <2.7.4 hash bug). ` +
-        `Rebuilding entries 2..${log.length} while preserving SCID.`);
-    const signer = new KmsSigner(agentContext, kmsKeyId, activeUpdateKey);
-    const newLog = await rebuildWebVhLog(log, { signer, verifier, domain });
-    if (!newLog)
-        return false;
-    didRecord.metadata.set('log', newLog);
-    const didRepository = agentContext.dependencyManager.resolve(core_1.DidRepository);
-    await didRepository.update(agentContext, didRecord);
-    logger.info(`webvh DID log for ${didRecord.did} successfully migrated; ${newLog.length} entries; SCID preserved (${log[0].parameters.scid}).`);
-    return true;
-}
-//# sourceMappingURL=migrateWebVhLog.js.map

package/build/did/migrateWebVhLog.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrateWebVhLog.js","sourceRoot":"","sources":["../../src/did/migrateWebVhLog.ts"],"names":[],"mappings":";;AA6GA,0CAmEC;AA4CD,0DA4DC;AAxRD,2CAAmD;AACnD,yCAAoF;AACpF,sEAAkE;AAClE,6CAYoB;AAEpB;;GAEG;AACH,MAAM,WAAW;IACf,YAAoC,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAE3D,KAAK,CAAC,MAAM,CAAC,SAAqB,EAAE,OAAmB,EAAE,SAAqB;QACnF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAG,CAAC,gBAAgB,CAAC,CAAA;YAC7E,MAAM,SAAS,GAAG,UAAG,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;YACxF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACpC,8DAA8D;gBAC9D,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAS,EAAE;gBAC7C,SAAS,EAAE,OAAO;gBAClB,SAAS;gBACT,IAAI,EAAE,OAAO;aACd,CAAC,CAAA;YACF,OAAO,QAAQ,CAAA;QACjB,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,SAAS;IACb,YACmB,YAA0B,EAC1B,QAAgB,EAChB,kBAA0B;QAF1B,iBAAY,GAAZ,YAAY,CAAc;QAC1B,aAAQ,GAAR,QAAQ,CAAQ;QAChB,uBAAkB,GAAlB,kBAAkB,CAAQ;IAC1C,CAAC;IAEG,uBAAuB;QAC5B,OAAO,WAAW,IAAI,CAAC,kBAAkB,EAAE,CAAA;IAC7C,CAAC;IAED,8DAA8D;IACvD,KAAK,CAAC,IAAI,CAAC,KAAmB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAG,CAAC,gBAAgB,CAAC,CAAA;QAC7E,MAAM,IAAI,GAAG,MAAM,IAAA,mCAAqB,EAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,SAAS,EAAE,OAAO;YAClB,IAAI;SACL,CAAC,CAAA;QACF,OAAO,EAAE,UAAU,EAAE,IAAA,6BAAe,EAAC,SAAS,EAAE,+BAAiB,CAAC,UAAU,CAAC,EAAE,CAAA;IACjF,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,oBAAoB,GAAG,CAAC,GAAQ,EAAwB,EAAE;AAC9D,8DAA8D;AAC9D,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;AAWtE;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,IAAA,+BAAiB,EAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACtF,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAA0B;;IAEpD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEzC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClD,IAAI,OAAO,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IAC3B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3D,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAE/B,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAA;IAC3C,IAAI,MAAM,GAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAgB,GAAG,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAA;QAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAA;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,UAAU,CAAA;QAEvD,MAAM,gBAAgB,GAAG,MAAA,UAAU,CAAC,UAAU,mCAAI,EAAE,CAAA;QACpD,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrF,CAAC;QAED,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAA;QAEzG,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,uBAAS,EAAC;YACvC,GAAG,EAAE,MAAM;YACX,MAAM;YACN,QAAQ;YACR,MAAM;YACN,UAAU,EAAE,MAAA,SAAS,CAAC,UAAU,mCAAI,gBAAgB;YACpD,mBAAmB,EAAE,QAAQ,CAAC,kBAAkB;YAChD,QAAQ,EAAE,QAAQ,CAAC,OAAO;YAC1B,UAAU,EAAE,eAAe;YAC3B,cAAc,EAAE,oBAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC7D,eAAe,EAAE,oBAAoB,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC/D,YAAY,EAAE,oBAAoB,CAAC,QAAQ,CAAC,YAAY,CAAC;YACzD,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,8DAA8D;YAC9D,OAAO,EAAG,QAAgB,CAAC,UAAU,CAAC;YACtC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,2EAA2E;YAC3E,gFAAgF;YAChF,gEAAgE;YAChE,OAAO,EACL,SAAS,CAAC,OAAO,IAAI,CAAC,CAAA,MAAA,SAAS,CAAC,OAAO,CAAC,SAAS,0CAAE,MAAM,KAAI,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;gBACvF,CAAC,CAAC,SAAS,CAAC,OAAO;gBACnB,CAAC,CAAC,SAAS;YACf,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,QAAQ,CAAC,WAAW;SAC9B,CAAC,CAAA;QACF,MAAM,GAAG,OAAO,CAAA;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACpD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/C,sEAAsE;QACtE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,0BAA0B,CACvC,YAA0B,EAC1B,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,yBAAiB,CAAC,CAAA;QAC9E,OAAO,MAAM,YAAY,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,2BAAY,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAA;gBACtC,MAAM,QAAQ,GAAG,IAAA,6BAAe,EAAC,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,EAAE,+BAAiB,CAAC,UAAU,CAAC,CAAA;gBACrG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;gBACvB,IAAI,QAAQ,KAAK,WAAW;oBAAE,OAAO,KAAK,CAAC,IAAI,CAAA;YACjD,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC,CAAC,CAAA;IACJ,CAAC;IAAC,WAAM,CAAC;QACP,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC7B,kFAAkF,CACnF,CAAA;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,uBAAuB,CAC3C,YAA0B,EAC1B,SAAoB,EACpB,MAAc;;IAEd,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAuB,CAAA;IAC/D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAE1C,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,YAAY,CAAC,CAAA;IAE9C,gFAAgF;IAChF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACnD,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,KAAK,CAAA;IAC7B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CACT,qBAAqB,SAAS,CAAC,GAAG,0DAA0D,QAAQ,CAAC,MAAM,EAAE,CAC9G,CAAA;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAuB,CAAA;IAC/D,MAAM,eAAe,GAAG,MAAA,MAAA,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,0CAAG,CAAC,CAAC,mCAAI,MAAA,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,0CAAG,CAAC,CAAC,CAAA;IAC3G,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,CAAC,GAAG,yBAAyB,CAAC,CAAA;IACzF,CAAC;IAED,IAAI,QAAQ,GAAG,MAAA,MAAA,SAAS,CAAC,IAAI,0CAAG,CAAC,CAAC,0CAAE,QAAQ,CAAA;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,4DAA4D;QAC5D,sEAAsE;QACtE,QAAQ,GAAG,MAAM,0BAA0B,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,CAAC,GAAG,mCAAmC,CAAC,CAAA;QACnG,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,GAAG,4CAA4C,CAAC,CAAA;QACnF,gDAAgD;QAChD,MAAM,EAAE,GAAG,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,kBAAkB,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,eAAe,CAAC,CAAA;QACzG,MAAM,aAAa,GAAG,CAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,EAAE,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;QACnE,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,QAAQ,EAAE,wBAAwB,EAAE,aAAa,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,CAAC,IAAI,CACT,qBAAqB,SAAS,CAAC,GAAG,2DAA2D;QAC3F,yBAAyB,GAAG,CAAC,MAAM,yBAAyB,CAC/D,CAAA;IAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;IAErE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEzB,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACrC,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,oBAAa,CAAC,CAAA;IAC3E,MAAM,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;IAEnD,MAAM,CAAC,IAAI,CACT,qBAAqB,SAAS,CAAC,GAAG,2BAA2B,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,CAClI,CAAA;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/build/did/migrateWebVhVersionTime.d.ts

@@ -1,9 +0,0 @@
-import { AgentContext, DidRecord, Logger } from '@credo-ts/core';
-import { DIDLog, Signer, Verifier } from 'didwebvh-ts';
-export interface RebuildWebVhVersionTimesOptions {
-    signer: Signer;
-    verifier: Verifier;
-    domain?: string;
-}
-export declare function rebuildWebVhVersionTimes(log: DIDLog, { signer, verifier, domain }: RebuildWebVhVersionTimesOptions): Promise<DIDLog | null>;
-export declare function migrateWebVhVersionTimeIfBroken(agentContext: AgentContext, didRecord: DidRecord, logger: Logger): Promise<boolean>;

package/build/did/migrateWebVhVersionTime.js

@@ -1,191 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.rebuildWebVhVersionTimes = rebuildWebVhVersionTimes;
-exports.migrateWebVhVersionTimeIfBroken = migrateWebVhVersionTimeIfBroken;
-const askar_1 = require("@credo-ts/askar");
-const core_1 = require("@credo-ts/core");
-const askar_shared_1 = require("@openwallet-foundation/askar-shared");
-const didwebvh_ts_1 = require("didwebvh-ts");
-// didwebvh-ts >=2.8.0 enforces the spec rule that each entry's versionTime is strictly greater
-// than the previous one; logs written by the old create+update-at-init flow share a second.
-// Hash-chain errors are accepted too: a hash break can mask a same-second pair behind it,
-// and the rebuild recomputes hashes anyway.
-const REBUILDABLE_ERROR = /must be greater than previous entry time|hash chain broken/i;
-class KmsVerifier {
-    constructor(agentContext) {
-        this.agentContext = agentContext;
-    }
-    async verify(signature, message, publicKey) {
-        try {
-            const kms = this.agentContext.dependencyManager.resolve(core_1.Kms.KeyManagementApi);
-            const publicJwk = core_1.Kms.PublicJwk.fromPublicKey({ kty: 'OKP', crv: 'Ed25519', publicKey });
-            const { verified } = await kms.verify({
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                key: { publicJwk: publicJwk.toJson() },
-                algorithm: 'EdDSA',
-                signature,
-                data: message,
-            });
-            return verified;
-        }
-        catch (_a) {
-            return false;
-        }
-    }
-}
-class KmsSigner {
-    constructor(agentContext, kmsKeyId, publicKeyMultibase) {
-        this.agentContext = agentContext;
-        this.kmsKeyId = kmsKeyId;
-        this.publicKeyMultibase = publicKeyMultibase;
-    }
-    getVerificationMethodId() {
-        return `did:key:${this.publicKeyMultibase}`;
-    }
-    async sign(input) {
-        const kms = this.agentContext.dependencyManager.resolve(core_1.Kms.KeyManagementApi);
-        const data = await (0, didwebvh_ts_1.prepareDataForSigning)(input.document, input.proof);
-        const { signature } = await kms.sign({
-            keyId: this.kmsKeyId,
-            algorithm: 'EdDSA',
-            data,
-        });
-        return { proofValue: (0, didwebvh_ts_1.multibaseEncode)(signature, didwebvh_ts_1.MultibaseEncoding.BASE58_BTC) };
-    }
-}
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-const normalizeMethodArray = (arr) => 
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-arr === null || arr === void 0 ? void 0 : arr.map((item) => (typeof item === 'string' ? item : item.id));
-// Compare at second precision because the output is second-truncated.
-function nextVersionTime(previous, desired) {
-    const parseSeconds = (value) => Math.floor(Date.parse(value) / 1000) * 1000;
-    const previousMs = parseSeconds(previous);
-    const desiredMs = parseSeconds(desired);
-    const chosen = Number.isNaN(desiredMs) || desiredMs <= previousMs ? previousMs + 1000 : desiredMs;
-    return new Date(chosen).toISOString().replace(/\.\d+Z$/, 'Z');
-}
-async function tryResolveLog(log, verifier) {
-    try {
-        await (0, didwebvh_ts_1.resolveDIDFromLog)(log, { verifier });
-        return { ok: true };
-    }
-    catch (error) {
-        return { ok: false, reason: error instanceof Error ? error.message : String(error) };
-    }
-}
-async function rebuildWebVhVersionTimes(log, { signer, verifier, domain }) {
-    var _a, _b, _c;
-    if (!log || log.length < 2)
-        return null;
-    const initial = await tryResolveLog(log, verifier);
-    if (initial.ok)
-        return null;
-    if (!REBUILDABLE_ERROR.test(initial.reason))
-        return null;
-    const originalScid = log[0].parameters.scid;
-    let newLog = [log[0]];
-    for (let i = 1; i < log.length; i++) {
-        const oldEntry = log[i];
-        const oldState = oldEntry.state;
-        const oldParams = oldEntry.parameters;
-        const lastParams = newLog[newLog.length - 1].parameters;
-        const activeUpdateKeys = (_a = lastParams.updateKeys) !== null && _a !== void 0 ? _a : [];
-        if (activeUpdateKeys.length === 0) {
-            throw new Error(`Cannot rebuild webvh log: no active updateKeys at entry ${i + 1}`);
-        }
-        const controllerValue = Array.isArray(oldState.controller) ? oldState.controller[0] : oldState.controller;
-        const { log: rebuilt } = await (0, didwebvh_ts_1.updateDID)({
-            log: newLog,
-            signer,
-            verifier,
-            domain,
-            updateKeys: (_b = oldParams.updateKeys) !== null && _b !== void 0 ? _b : activeUpdateKeys,
-            verificationMethods: oldState.verificationMethod,
-            services: oldState.service,
-            controller: controllerValue,
-            authentication: normalizeMethodArray(oldState.authentication),
-            assertionMethod: normalizeMethodArray(oldState.assertionMethod),
-            keyAgreement: normalizeMethodArray(oldState.keyAgreement),
-            alsoKnownAs: oldState.alsoKnownAs,
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            context: oldState['@context'],
-            portable: oldParams.portable,
-            nextKeyHashes: oldParams.nextKeyHashes,
-            witness: oldParams.witness && (((_c = oldParams.witness.witnesses) === null || _c === void 0 ? void 0 : _c.length) || oldParams.witness.threshold)
-                ? oldParams.witness
-                : undefined,
-            watchers: oldParams.watchers,
-            updated: nextVersionTime(newLog[newLog.length - 1].versionTime, oldEntry.versionTime),
-        });
-        newLog = rebuilt;
-    }
-    const verify = await tryResolveLog(newLog, verifier);
-    if (!verify.ok) {
-        throw new Error(`Rebuilt webvh log is still invalid: ${verify.reason}`);
-    }
-    if (newLog[0].parameters.scid !== originalScid) {
-        throw new Error(`Rebuilt webvh log produced a different SCID; aborting migration`);
-    }
-    return newLog;
-}
-async function findKmsKeyIdForFingerprint(agentContext, fingerprint) {
-    try {
-        const storeManager = agentContext.dependencyManager.resolve(askar_1.AskarStoreManager);
-        return await storeManager.withSession(agentContext, async (session) => {
-            const entries = await session.fetchAllKeys({ algorithm: askar_shared_1.KeyAlgorithm.Ed25519 });
-            for (const entry of entries) {
-                const pubBytes = entry.key.publicBytes;
-                const computed = (0, didwebvh_ts_1.multibaseEncode)(new Uint8Array([237, 1, ...pubBytes]), didwebvh_ts_1.MultibaseEncoding.BASE58_BTC);
-                entry.key.handle.free();
-                if (computed === fingerprint)
-                    return entry.name;
-            }
-            return undefined;
-        });
-    }
-    catch (_a) {
-        agentContext.config.logger.warn(`Failed to scan Askar keys, cannot recover controller key for webvh versionTime migration`);
-        return undefined;
-    }
-}
-async function migrateWebVhVersionTimeIfBroken(agentContext, didRecord, logger) {
-    var _a, _b, _c, _d, _e, _f, _g;
-    const log = didRecord.metadata.get('log');
-    if (!log || log.length < 2)
-        return false;
-    const verifier = new KmsVerifier(agentContext);
-    const preCheck = await tryResolveLog(log, verifier);
-    if (preCheck.ok)
-        return false;
-    if (!REBUILDABLE_ERROR.test(preCheck.reason))
-        return false;
-    const domain = didRecord.getTag('domain');
-    const activeUpdateKey = (_b = (_a = log[log.length - 1].parameters.updateKeys) === null || _a === void 0 ? void 0 : _a[0]) !== null && _b !== void 0 ? _b : (_c = log[0].parameters.updateKeys) === null || _c === void 0 ? void 0 : _c[0];
-    if (!activeUpdateKey) {
-        throw new Error(`Cannot migrate webvh log for ${didRecord.did}: no updateKeys present`);
-    }
-    let kmsKeyId = (_e = (_d = didRecord.keys) === null || _d === void 0 ? void 0 : _d[0]) === null || _e === void 0 ? void 0 : _e.kmsKeyId;
-    if (!kmsKeyId) {
-        kmsKeyId = await findKmsKeyIdForFingerprint(agentContext, activeUpdateKey);
-        if (!kmsKeyId) {
-            throw new Error(`Cannot migrate webvh log for ${didRecord.did}: no controller key on DID record`);
-        }
-        logger.warn(`webvh DID ${didRecord.did}: controller key recovered from Askar scan`);
-        const vm = (_g = (_f = didRecord.didDocument) === null || _f === void 0 ? void 0 : _f.verificationMethod) === null || _g === void 0 ? void 0 : _g.find(v => v.publicKeyMultibase === activeUpdateKey);
-        const relativeKeyId = (vm === null || vm === void 0 ? void 0 : vm.id) ? `#${vm.id.split('#')[1]}` : '#key-1';
-        didRecord.keys = [{ kmsKeyId, didDocumentRelativeKeyId: relativeKeyId }];
-    }
-    logger.warn(`webvh DID log for ${didRecord.did} has non-monotonic versionTimes. ` +
-        `Rebuilding entries 2..${log.length} while preserving SCID.`);
-    const signer = new KmsSigner(agentContext, kmsKeyId, activeUpdateKey);
-    const newLog = await rebuildWebVhVersionTimes(log, { signer, verifier, domain });
-    if (!newLog)
-        return false;
-    didRecord.metadata.set('log', newLog);
-    const didRepository = agentContext.dependencyManager.resolve(core_1.DidRepository);
-    await didRepository.update(agentContext, didRecord);
-    logger.info(`webvh DID log for ${didRecord.did} versionTimes migrated; ${newLog.length} entries; SCID preserved (${log[0].parameters.scid}).`);
-    return true;
-}
-//# sourceMappingURL=migrateWebVhVersionTime.js.map

package/build/did/migrateWebVhVersionTime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrateWebVhVersionTime.js","sourceRoot":"","sources":["../../src/did/migrateWebVhVersionTime.ts"],"names":[],"mappings":";;AAmGA,4DA8DC;AA0BD,0EAmDC;AA9OD,2CAAmD;AACnD,yCAAoF;AACpF,sEAAkE;AAClE,6CAYoB;AAEpB,+FAA+F;AAC/F,4FAA4F;AAC5F,0FAA0F;AAC1F,4CAA4C;AAC5C,MAAM,iBAAiB,GAAG,6DAA6D,CAAA;AAEvF,MAAM,WAAW;IACf,YAAoC,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAE3D,KAAK,CAAC,MAAM,CAAC,SAAqB,EAAE,OAAmB,EAAE,SAAqB;QACnF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAG,CAAC,gBAAgB,CAAC,CAAA;YAC7E,MAAM,SAAS,GAAG,UAAG,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;YACxF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACpC,8DAA8D;gBAC9D,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAS,EAAE;gBAC7C,SAAS,EAAE,OAAO;gBAClB,SAAS;gBACT,IAAI,EAAE,OAAO;aACd,CAAC,CAAA;YACF,OAAO,QAAQ,CAAA;QACjB,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;CACF;AAED,MAAM,SAAS;IACb,YACmB,YAA0B,EAC1B,QAAgB,EAChB,kBAA0B;QAF1B,iBAAY,GAAZ,YAAY,CAAc;QAC1B,aAAQ,GAAR,QAAQ,CAAQ;QAChB,uBAAkB,GAAlB,kBAAkB,CAAQ;IAC1C,CAAC;IAEG,uBAAuB;QAC5B,OAAO,WAAW,IAAI,CAAC,kBAAkB,EAAE,CAAA;IAC7C,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,KAAmB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAG,CAAC,gBAAgB,CAAC,CAAA;QAC7E,MAAM,IAAI,GAAG,MAAM,IAAA,mCAAqB,EAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,SAAS,EAAE,OAAO;YAClB,IAAI;SACL,CAAC,CAAA;QACF,OAAO,EAAE,UAAU,EAAE,IAAA,6BAAe,EAAC,SAAS,EAAE,+BAAiB,CAAC,UAAU,CAAC,EAAE,CAAA;IACjF,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,oBAAoB,GAAG,CAAC,GAAQ,EAAwB,EAAE;AAC9D,8DAA8D;AAC9D,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;AAEtE,sEAAsE;AACtE,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACxD,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IAC3F,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACzC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACjG,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;AAC/D,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,IAAA,+BAAiB,EAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACtF,CAAC;AACH,CAAC;AAQM,KAAK,UAAU,wBAAwB,CAC5C,GAAW,EACX,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAmC;;IAE7D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAEvC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClD,IAAI,OAAO,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IAC3B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAExD,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAA;IAC3C,IAAI,MAAM,GAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAgB,GAAG,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAA;QAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAA;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,UAAU,CAAA;QAEvD,MAAM,gBAAgB,GAAG,MAAA,UAAU,CAAC,UAAU,mCAAI,EAAE,CAAA;QACpD,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACrF,CAAC;QAED,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAA;QAEzG,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,uBAAS,EAAC;YACvC,GAAG,EAAE,MAAM;YACX,MAAM;YACN,QAAQ;YACR,MAAM;YACN,UAAU,EAAE,MAAA,SAAS,CAAC,UAAU,mCAAI,gBAAgB;YACpD,mBAAmB,EAAE,QAAQ,CAAC,kBAAkB;YAChD,QAAQ,EAAE,QAAQ,CAAC,OAAO;YAC1B,UAAU,EAAE,eAAe;YAC3B,cAAc,EAAE,oBAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC7D,eAAe,EAAE,oBAAoB,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC/D,YAAY,EAAE,oBAAoB,CAAC,QAAQ,CAAC,YAAY,CAAC;YACzD,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,8DAA8D;YAC9D,OAAO,EAAG,QAAgB,CAAC,UAAU,CAAC;YACtC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,OAAO,EACL,SAAS,CAAC,OAAO,IAAI,CAAC,CAAA,MAAA,SAAS,CAAC,OAAO,CAAC,SAAS,0CAAE,MAAM,KAAI,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;gBACvF,CAAC,CAAC,SAAS,CAAC,OAAO;gBACnB,CAAC,CAAC,SAAS;YACf,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;SACtF,CAAC,CAAA;QACF,MAAM,GAAG,OAAO,CAAA;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACpD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,YAA0B,EAC1B,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,yBAAiB,CAAC,CAAA;QAC9E,OAAO,MAAM,YAAY,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,2BAAY,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAA;gBACtC,MAAM,QAAQ,GAAG,IAAA,6BAAe,EAAC,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,EAAE,+BAAiB,CAAC,UAAU,CAAC,CAAA;gBACrG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;gBACvB,IAAI,QAAQ,KAAK,WAAW;oBAAE,OAAO,KAAK,CAAC,IAAI,CAAA;YACjD,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC,CAAC,CAAA;IACJ,CAAC;IAAC,WAAM,CAAC;QACP,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC7B,0FAA0F,CAC3F,CAAA;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,+BAA+B,CACnD,YAA0B,EAC1B,SAAoB,EACpB,MAAc;;IAEd,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAuB,CAAA;IAC/D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAExC,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,YAAY,CAAC,CAAA;IAE9C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACnD,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,KAAK,CAAA;IAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAE1D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAuB,CAAA;IAC/D,MAAM,eAAe,GAAG,MAAA,MAAA,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,0CAAG,CAAC,CAAC,mCAAI,MAAA,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,0CAAG,CAAC,CAAC,CAAA;IAC3G,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,CAAC,GAAG,yBAAyB,CAAC,CAAA;IACzF,CAAC;IAED,IAAI,QAAQ,GAAG,MAAA,MAAA,SAAS,CAAC,IAAI,0CAAG,CAAC,CAAC,0CAAE,QAAQ,CAAA;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,MAAM,0BAA0B,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,CAAC,GAAG,mCAAmC,CAAC,CAAA;QACnG,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,GAAG,4CAA4C,CAAC,CAAA;QACnF,MAAM,EAAE,GAAG,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,kBAAkB,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,eAAe,CAAC,CAAA;QACzG,MAAM,aAAa,GAAG,CAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,EAAE,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;QACnE,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,QAAQ,EAAE,wBAAwB,EAAE,aAAa,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,CAAC,IAAI,CACT,qBAAqB,SAAS,CAAC,GAAG,mCAAmC;QACnE,yBAAyB,GAAG,CAAC,MAAM,yBAAyB,CAC/D,CAAA;IAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;IAErE,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IAChF,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEzB,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACrC,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,oBAAa,CAAC,CAAA;IAC3E,MAAM,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;IAEnD,MAAM,CAAC,IAAI,CACT,qBAAqB,SAAS,CAAC,GAAG,2BAA2B,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,CAClI,CAAA;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}