@verana-labs/vs-agent-sdk 2.0.0-dev.8 → 2.0.0-dev.80

package/build/utils/ecsClaims.d.ts

@@ -0,0 +1,46 @@
+import type { Logger } from '@credo-ts/core';
+export interface EcsClaims {
+    localResources?: Record<string, string>;
+    org?: Record<string, string | undefined>;
+    persona?: Record<string, string | undefined>;
+    service?: Record<string, string | undefined>;
+}
+export declare const ECS_CLAIMS_VARIABLES: {
+    readonly org: {
+        readonly name: "ECS_CLAIMS_ORG_NAME";
+        readonly logoUri: "ECS_CLAIMS_ORG_LOGO_URI";
+        readonly registryId: "ECS_CLAIMS_ORG_REGISTRY_ID";
+        readonly registryUri: "ECS_CLAIMS_ORG_REGISTRY_URI";
+        readonly address: "ECS_CLAIMS_ORG_ADDRESS";
+        readonly countryCode: "ECS_CLAIMS_ORG_COUNTRY_CODE";
+        readonly legalJurisdiction: "ECS_CLAIMS_ORG_LEGAL_JURISDICTION";
+        readonly organizationKind: "ECS_CLAIMS_ORG_ORGANIZATION_KIND";
+        readonly lei: "ECS_CLAIMS_ORG_LEI";
+    };
+    readonly persona: {
+        readonly name: "ECS_CLAIMS_PERSONA_NAME";
+        readonly description: "ECS_CLAIMS_PERSONA_DESCRIPTION";
+        readonly descriptionFormat: "ECS_CLAIMS_PERSONA_DESCRIPTION_FORMAT";
+        readonly avatarUri: "ECS_CLAIMS_PERSONA_AVATAR_URI";
+        readonly controllerCountryCode: "ECS_CLAIMS_PERSONA_CONTROLLER_COUNTRY_CODE";
+        readonly controllerJurisdiction: "ECS_CLAIMS_PERSONA_CONTROLLER_JURISDICTION";
+    };
+    readonly service: {
+        readonly name: "ECS_CLAIMS_SERVICE_NAME";
+        readonly type: "ECS_CLAIMS_SERVICE_TYPE";
+        readonly description: "ECS_CLAIMS_SERVICE_DESCRIPTION";
+        readonly descriptionFormat: "ECS_CLAIMS_SERVICE_DESCRIPTION_FORMAT";
+        readonly logoUri: "ECS_CLAIMS_SERVICE_LOGO_URI";
+        readonly minimumAgeRequired: "ECS_CLAIMS_SERVICE_MINIMUM_AGE_REQUIRED";
+        readonly termsAndConditionsUri: "ECS_CLAIMS_SERVICE_TERMS_AND_CONDITIONS_URI";
+        readonly privacyPolicyUri: "ECS_CLAIMS_SERVICE_PRIVACY_POLICY_URI";
+    };
+};
+export declare function readEcsClaimsFromEnv(): Required<Pick<EcsClaims, 'org' | 'persona' | 'service'>>;
+export declare function digestOfUri(uri: string, variable: string, logger?: Logger): Promise<string>;
+/**
+ * Compose the claims of one ECS credential from the configured variables, deriving `id` and
+ * every paired `*DigestSri`. Returns undefined when the operator configured no claim, so the
+ * caller can omit the `claims` field entirely.
+ */
+export declare function composeEcsClaims(claims: EcsClaims, schemaKey: string, logger?: Logger): Promise<Record<string, unknown> | undefined>;

package/build/utils/ecsClaims.js

@@ -0,0 +1,115 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ECS_CLAIMS_VARIABLES = void 0;
+exports.readEcsClaimsFromEnv = readEcsClaimsFromEnv;
+exports.digestOfUri = digestOfUri;
+exports.composeEcsClaims = composeEcsClaims;
+const axios_1 = __importDefault(require("axios"));
+const boundedFetch_1 = require("./boundedFetch");
+// the URI claim each derived digest claim is computed from
+const DIGEST_OF = {
+    logoDigestSri: 'logoUri',
+    avatarDigestSri: 'avatarUri',
+    termsAndConditionsDigestSri: 'termsAndConditionsUri',
+    privacyPolicyDigestSri: 'privacyPolicyUri',
+};
+// [VSA-VTI-CFG-ENV-ECS] variable of each claim the agent reads
+exports.ECS_CLAIMS_VARIABLES = {
+    org: {
+        name: 'ECS_CLAIMS_ORG_NAME',
+        logoUri: 'ECS_CLAIMS_ORG_LOGO_URI',
+        registryId: 'ECS_CLAIMS_ORG_REGISTRY_ID',
+        registryUri: 'ECS_CLAIMS_ORG_REGISTRY_URI',
+        address: 'ECS_CLAIMS_ORG_ADDRESS',
+        countryCode: 'ECS_CLAIMS_ORG_COUNTRY_CODE',
+        legalJurisdiction: 'ECS_CLAIMS_ORG_LEGAL_JURISDICTION',
+        organizationKind: 'ECS_CLAIMS_ORG_ORGANIZATION_KIND',
+        lei: 'ECS_CLAIMS_ORG_LEI',
+    },
+    persona: {
+        name: 'ECS_CLAIMS_PERSONA_NAME',
+        description: 'ECS_CLAIMS_PERSONA_DESCRIPTION',
+        descriptionFormat: 'ECS_CLAIMS_PERSONA_DESCRIPTION_FORMAT',
+        avatarUri: 'ECS_CLAIMS_PERSONA_AVATAR_URI',
+        controllerCountryCode: 'ECS_CLAIMS_PERSONA_CONTROLLER_COUNTRY_CODE',
+        controllerJurisdiction: 'ECS_CLAIMS_PERSONA_CONTROLLER_JURISDICTION',
+    },
+    service: {
+        name: 'ECS_CLAIMS_SERVICE_NAME',
+        type: 'ECS_CLAIMS_SERVICE_TYPE',
+        description: 'ECS_CLAIMS_SERVICE_DESCRIPTION',
+        descriptionFormat: 'ECS_CLAIMS_SERVICE_DESCRIPTION_FORMAT',
+        logoUri: 'ECS_CLAIMS_SERVICE_LOGO_URI',
+        minimumAgeRequired: 'ECS_CLAIMS_SERVICE_MINIMUM_AGE_REQUIRED',
+        termsAndConditionsUri: 'ECS_CLAIMS_SERVICE_TERMS_AND_CONDITIONS_URI',
+        privacyPolicyUri: 'ECS_CLAIMS_SERVICE_PRIVACY_POLICY_URI',
+    },
+};
+function readEcsClaimsFromEnv() {
+    const read = (variables) => Object.fromEntries(Object.entries(variables).map(([claim, name]) => { var _a; return [claim, ((_a = process.env[name]) === null || _a === void 0 ? void 0 : _a.trim()) || undefined]; }));
+    return {
+        org: read(exports.ECS_CLAIMS_VARIABLES.org),
+        persona: read(exports.ECS_CLAIMS_VARIABLES.persona),
+        service: read(exports.ECS_CLAIMS_VARIABLES.service),
+    };
+}
+const DIGEST_TIMEOUT_MS = 5000;
+const DIGEST_ATTEMPTS = 4;
+const DIGEST_BASE_DELAY_MS = 500;
+const sleep = (ms) => new Promise(resolve => setTimeout(resolve, ms));
+async function digestOfUri(uri, variable, logger) {
+    let lastError;
+    for (let attempt = 1; attempt <= DIGEST_ATTEMPTS; attempt++) {
+        try {
+            const response = await axios_1.default.get(uri, { responseType: 'arraybuffer', timeout: DIGEST_TIMEOUT_MS });
+            return (0, boundedFetch_1.digestOfBytes)(Buffer.from(response.data));
+        }
+        catch (error) {
+            lastError = error;
+            if (attempt < DIGEST_ATTEMPTS)
+                await sleep(DIGEST_BASE_DELAY_MS * 2 ** (attempt - 1));
+        }
+    }
+    const message = `cannot compute the digest of ${variable} (${uri}): ${lastError === null || lastError === void 0 ? void 0 : lastError.message}`;
+    logger === null || logger === void 0 ? void 0 : logger.error(`[ecs-claims] ${message}`);
+    throw new Error(message);
+}
+const GROUP_OF = {
+    'ecs-service': 'service',
+    'ecs-persona': 'persona',
+    'ecs-org': 'org',
+};
+const groupOf = (claims, schemaKey) => {
+    const group = GROUP_OF[schemaKey];
+    return group ? claims[group] : undefined;
+};
+/**
+ * Compose the claims of one ECS credential from the configured variables, deriving `id` and
+ * every paired `*DigestSri`. Returns undefined when the operator configured no claim, so the
+ * caller can omit the `claims` field entirely.
+ */
+async function composeEcsClaims(claims, schemaKey, logger) {
+    var _a;
+    const configured = groupOf(claims, schemaKey);
+    const set = Object.entries(configured !== null && configured !== void 0 ? configured : {}).filter(([, v]) => v !== undefined && v !== '');
+    if (set.length === 0)
+        return undefined;
+    const composed = {};
+    for (const [claim, value] of set) {
+        composed[claim] = claim === 'minimumAgeRequired' ? Number(value) : value;
+    }
+    for (const [digestClaim, uriClaim] of Object.entries(DIGEST_OF)) {
+        const uri = composed[uriClaim];
+        if (typeof uri !== 'string')
+            continue;
+        const group = GROUP_OF[schemaKey];
+        const variable = (group && exports.ECS_CLAIMS_VARIABLES[group][uriClaim]) || uriClaim;
+        const local = (_a = claims.localResources) === null || _a === void 0 ? void 0 : _a[uri];
+        composed[digestClaim] = local ? (0, boundedFetch_1.digestOfBytes)(local) : await digestOfUri(uri, variable, logger);
+    }
+    return composed;
+}
+//# sourceMappingURL=ecsClaims.js.map

package/build/utils/ecsClaims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecsClaims.js","sourceRoot":"","sources":["../../src/utils/ecsClaims.ts"],"names":[],"mappings":";;;;;;AAyDA,oDAUC;AAQD,kCAcC;AAkBD,4CAsBC;AA/HD,kDAAyB;AAEzB,iDAA8C;AAY9C,2DAA2D;AAC3D,MAAM,SAAS,GAA2B;IACxC,aAAa,EAAE,SAAS;IACxB,eAAe,EAAE,WAAW;IAC5B,2BAA2B,EAAE,uBAAuB;IACpD,sBAAsB,EAAE,kBAAkB;CAC3C,CAAA;AAED,+DAA+D;AAClD,QAAA,oBAAoB,GAAG;IAClC,GAAG,EAAE;QACH,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,yBAAyB;QAClC,UAAU,EAAE,4BAA4B;QACxC,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,6BAA6B;QAC1C,iBAAiB,EAAE,mCAAmC;QACtD,gBAAgB,EAAE,kCAAkC;QACpD,GAAG,EAAE,oBAAoB;KAC1B;IACD,OAAO,EAAE;QACP,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,gCAAgC;QAC7C,iBAAiB,EAAE,uCAAuC;QAC1D,SAAS,EAAE,+BAA+B;QAC1C,qBAAqB,EAAE,4CAA4C;QACnE,sBAAsB,EAAE,4CAA4C;KACrE;IACD,OAAO,EAAE;QACP,IAAI,EAAE,yBAAyB;QAC/B,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,gCAAgC;QAC7C,iBAAiB,EAAE,uCAAuC;QAC1D,OAAO,EAAE,6BAA6B;QACtC,kBAAkB,EAAE,yCAAyC;QAC7D,qBAAqB,EAAE,6CAA6C;QACpE,gBAAgB,EAAE,uCAAuC;KAC1D;CACO,CAAA;AAEV,SAAgB,oBAAoB;IAClC,MAAM,IAAI,GAAG,CAAC,SAAiC,EAAsC,EAAE,CACrF,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,KAAK,EAAE,CAAA,MAAA,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,0CAAE,IAAI,EAAE,KAAI,SAAS,CAAC,CAAA,EAAA,CAAC,CAClG,CAAA;IACH,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,4BAAoB,CAAC,GAAG,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,4BAAoB,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAI,CAAC,4BAAoB,CAAC,OAAO,CAAC;KAC5C,CAAA;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAC9B,MAAM,eAAe,GAAG,CAAC,CAAA;AACzB,MAAM,oBAAoB,GAAG,GAAG,CAAA;AAEhC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAEtE,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAe;IAC9E,IAAI,SAA4B,CAAA;IAChC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAA;YAClG,OAAO,IAAA,4BAAa,EAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAc,CAAA;YAC1B,IAAI,OAAO,GAAG,eAAe;gBAAE,MAAM,KAAK,CAAC,oBAAoB,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAA;QACvF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,gCAAgC,QAAQ,KAAK,GAAG,MAAM,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,OAAO,EAAE,CAAA;IAC1F,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAA;IACxC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,QAAQ,GAAkD;IAC9D,aAAa,EAAE,SAAS;IACxB,aAAa,EAAE,SAAS;IACxB,SAAS,EAAE,KAAK;CACjB,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,MAAiB,EAAE,SAAiB,EAAE,EAAE;IACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1C,CAAC,CAAA;AAED;;;;GAIG;AACI,KAAK,UAAU,gBAAgB,CACpC,MAAiB,EACjB,SAAiB,EACjB,MAAe;;IAEf,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;IAC3F,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAEtC,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;QACjC,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAC1E,CAAC;IACD,KAAK,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAQ;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAK,4BAAoB,CAAC,KAAK,CAA4B,CAAC,QAAQ,CAAC,CAAC,IAAI,QAAQ,CAAA;QACzG,MAAM,KAAK,GAAG,MAAA,MAAM,CAAC,cAAc,0CAAG,GAAG,CAAC,CAAA;QAC1C,QAAQ,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAA,4BAAa,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACjG,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/build/utils/ecsService.d.ts

@@ -0,0 +1,8 @@
+import type { VsAgent } from '../agent/VsAgent';
+export interface EcsServiceClaims {
+    name?: string;
+    description?: string;
+    logoUri?: string;
+}
+export declare function ecsServiceClaims(agent: VsAgent): Promise<EcsServiceClaims | undefined>;
+export declare function agentDisplayName(agent: VsAgent): Promise<string>;

package/build/utils/ecsService.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ecsServiceClaims = ecsServiceClaims;
+exports.agentDisplayName = agentDisplayName;
+const vs_agent_model_1 = require("@verana-labs/vs-agent-model");
+const setupSelfTr_1 = require("./setupSelfTr");
+// Read at call time, not at startup: the credential is published asynchronously after boot
+async function ecsServiceClaims(agent) {
+    var _a, _b;
+    if (!agent.did)
+        return undefined;
+    const [didRecord] = await agent.dids.getCreatedDids({ did: agent.did });
+    const metadata = didRecord === null || didRecord === void 0 ? void 0 : didRecord.metadata.get('_vt/vtc');
+    if (!metadata)
+        return undefined;
+    const serviceId = `${agent.did}#${(0, setupSelfTr_1.linkedVpFragment)(vs_agent_model_1.ECS.SERVICE)}`;
+    return (_b = (_a = Object.values(metadata).find(entry => entry.didDocumentServiceId === serviceId)) === null || _a === void 0 ? void 0 : _a.credential) === null || _b === void 0 ? void 0 : _b.credentialSubject;
+}
+async function agentDisplayName(agent) {
+    var _a, _b;
+    return (_b = (_a = (await ecsServiceClaims(agent))) === null || _a === void 0 ? void 0 : _a.name) !== null && _b !== void 0 ? _b : new URL(agent.publicApiBaseUrl).host;
+}
+//# sourceMappingURL=ecsService.js.map

package/build/utils/ecsService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecsService.js","sourceRoot":"","sources":["../../src/utils/ecsService.ts"],"names":[],"mappings":";;AAkBA,4CAUC;AAED,4CAEC;AA9BD,gEAAiD;AAEjD,+CAAgD;AAahD,2FAA2F;AACpF,KAAK,UAAU,gBAAgB,CAAC,KAAc;;IACnD,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAEhC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IACvE,MAAM,QAAQ,GAAG,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAyC,CAAA;IAC3F,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAA;IAE/B,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAA,8BAAgB,EAAC,oBAAG,CAAC,OAAO,CAAC,EAAE,CAAA;IACjE,OAAO,MAAA,MAAA,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,0CAAE,UAAU,0CAC9F,iBAAiD,CAAA;AACvD,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,KAAc;;IACnD,OAAO,MAAA,MAAA,CAAC,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC,0CAAE,IAAI,mCAAI,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAA;AACtF,CAAC"}

package/build/utils/index.d.ts

@@ -1,5 +1,12 @@
 export * from './agent';
+export * from './boundedFetch';
 export * from './data';
+export * from './ecsClaims';
+export * from './ecsService';
+export * from './publishedDidRecord';
 export * from './setupSelfTr';
 export * from './trustCredentialStore';
+export * from './typeMetadata';
 export * from './util';
+export * from './vcdm2';
+export * from './vtjscResolver';

package/build/utils/index.js

@@ -15,8 +15,15 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./agent"), exports);
+__exportStar(require("./boundedFetch"), exports);
 __exportStar(require("./data"), exports);
+__exportStar(require("./ecsClaims"), exports);
+__exportStar(require("./ecsService"), exports);
+__exportStar(require("./publishedDidRecord"), exports);
 __exportStar(require("./setupSelfTr"), exports);
 __exportStar(require("./trustCredentialStore"), exports);
+__exportStar(require("./typeMetadata"), exports);
 __exportStar(require("./util"), exports);
+__exportStar(require("./vcdm2"), exports);
+__exportStar(require("./vtjscResolver"), exports);
 //# sourceMappingURL=index.js.map

package/build/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAuB;AACvB,yCAAsB;AACtB,gDAA6B;AAC7B,yDAAsC;AACtC,yCAAsB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAuB;AACvB,iDAA8B;AAC9B,yCAAsB;AACtB,8CAA2B;AAC3B,+CAA4B;AAC5B,uDAAoC;AACpC,gDAA6B;AAC7B,yDAAsC;AACtC,iDAA8B;AAC9B,yCAAsB;AACtB,0CAAuB;AACvB,kDAA+B"}

package/build/utils/publishedDidRecord.d.ts

@@ -0,0 +1,15 @@
+import { DidRecord } from '@credo-ts/core';
+import { VsAgent } from '../agent/VsAgent';
+/**
+ * The one write point of the published Verifiable Trust material: the `_vt/vtc` and `_vt/jsc`
+ * metadata of the DID record and the DID Document that announces them. [VSA-VT-LVP-5] asks for a
+ * `TriggerResolver` after each change of a `LinkedVerifiablePresentation` entry, so the decision
+ * lives here rather than in each caller: the stored record is compared with the one written. The DID
+ * Document is published only when it changed, so a metadata-only write adds no `did:webvh` version.
+ */
+export declare function updateDidRecord(agent: VsAgent, didRecord: DidRecord): Promise<void>;
+/**
+ * What a trust resolver reads of the agent: its `LinkedVerifiablePresentation` entries, and the
+ * presentations behind them. Two records with the same fingerprint resolve the same way.
+ */
+export declare function publicationFingerprint(didRecord: DidRecord | null): string;

package/build/utils/publishedDidRecord.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateDidRecord = updateDidRecord;
+exports.publicationFingerprint = publicationFingerprint;
+const core_1 = require("@credo-ts/core");
+const triggerResolver_1 = require("../blockchain/triggerResolver");
+const adminApiService_1 = require("../did/adminApiService");
+/**
+ * The one write point of the published Verifiable Trust material: the `_vt/vtc` and `_vt/jsc`
+ * metadata of the DID record and the DID Document that announces them. [VSA-VT-LVP-5] asks for a
+ * `TriggerResolver` after each change of a `LinkedVerifiablePresentation` entry, so the decision
+ * lives here rather than in each caller: the stored record is compared with the one written. The DID
+ * Document is published only when it changed, so a metadata-only write adds no `did:webvh` version.
+ */
+async function updateDidRecord(agent, didRecord) {
+    const repo = agent.context.dependencyManager.resolve(core_1.DidRepository);
+    (0, adminApiService_1.applyAdminApiServiceEntry)(didRecord.didDocument, agent.adminApiServiceEndpoint);
+    const stored = await storedRecord(agent, repo, didRecord.id);
+    const publishedBefore = publicationFingerprint(stored);
+    const documentBefore = documentFingerprint(stored);
+    await repo.update(agent.context, didRecord);
+    if (documentFingerprint(didRecord) !== documentBefore) {
+        await agent.dids.update({ did: didRecord.did, didDocument: didRecord.didDocument });
+    }
+    if (publicationFingerprint(didRecord) !== publishedBefore) {
+        (0, triggerResolver_1.scheduleTriggerResolverForOwnDid)(agent, 'the published Verifiable Trust material changed');
+    }
+}
+async function storedRecord(agent, repo, id) {
+    try {
+        return await repo.findById(agent.context, id);
+    }
+    catch (error) {
+        agent.config.logger.debug(`[trust-credential] cannot read the stored DID record: ${error.message}`);
+        return null;
+    }
+}
+function stableStringify(value) {
+    var _a;
+    if (Array.isArray(value))
+        return `[${value.map(stableStringify).join(',')}]`;
+    if (value && typeof value === 'object') {
+        const entries = Object.entries(value)
+            .filter(([, v]) => v !== undefined)
+            .sort(([a], [b]) => a.localeCompare(b));
+        return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(',')}}`;
+    }
+    return (_a = JSON.stringify(value)) !== null && _a !== void 0 ? _a : 'null';
+}
+// a document saved as a class instance reads back from storage as JSON, so both go through JSON
+function asJson(value) {
+    return value === undefined ? undefined : JSON.parse(JSON.stringify(value));
+}
+/** What the agent serves as its DID Document. Two records with the same fingerprint serve the same. */
+function documentFingerprint(didRecord) {
+    if (!(didRecord === null || didRecord === void 0 ? void 0 : didRecord.didDocument))
+        return '';
+    return stableStringify(asJson(didRecord.didDocument));
+}
+/**
+ * What a trust resolver reads of the agent: its `LinkedVerifiablePresentation` entries, and the
+ * presentations behind them. Two records with the same fingerprint resolve the same way.
+ */
+function publicationFingerprint(didRecord) {
+    var _a, _b;
+    if (!didRecord)
+        return '';
+    const services = ((_b = (_a = didRecord.didDocument) === null || _a === void 0 ? void 0 : _a.service) !== null && _b !== void 0 ? _b : [])
+        .filter(service => service.type === 'LinkedVerifiablePresentation')
+        .map(service => ({ id: service.id, serviceEndpoint: service.serviceEndpoint }))
+        .sort((a, b) => a.id.localeCompare(b.id));
+    const presentations = ['_vt/vtc', '_vt/jsc'].map(key => {
+        var _a;
+        return Object.entries((_a = didRecord.metadata.get(key)) !== null && _a !== void 0 ? _a : {})
+            .map(([schemaId, entry]) => ({
+            schemaId,
+            presentation: entry.verifiablePresentation,
+        }))
+            .sort((a, b) => a.schemaId.localeCompare(b.schemaId));
+    });
+    return stableStringify(asJson({ services, presentations }));
+}
+//# sourceMappingURL=publishedDidRecord.js.map

package/build/utils/publishedDidRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publishedDidRecord.js","sourceRoot":"","sources":["../../src/utils/publishedDidRecord.ts"],"names":[],"mappings":";;AAaA,0CAcC;AAuCD,wDAeC;AAjFD,yCAAyD;AAGzD,mEAAgF;AAChF,4DAAkE;AAElE;;;;;;GAMG;AACI,KAAK,UAAU,eAAe,CAAC,KAAc,EAAE,SAAoB;IACxE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,oBAAa,CAAC,CAAA;IACnE,IAAA,2CAAyB,EAAC,SAAS,CAAC,WAAY,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAChF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAA;IAC5D,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IACtD,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAElD,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC3C,IAAI,mBAAmB,CAAC,SAAS,CAAC,KAAK,cAAc,EAAE,CAAC;QACtD,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,WAAY,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,sBAAsB,CAAC,SAAS,CAAC,KAAK,eAAe,EAAE,CAAC;QAC1D,IAAA,kDAAgC,EAAC,KAAK,EAAE,iDAAiD,CAAC,CAAA;IAC5F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAc,EAAE,IAAmB,EAAE,EAAU;IACzE,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CACvB,yDAA0D,KAAe,CAAC,OAAO,EAAE,CACpF,CAAA;QACD,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAC5E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QACzC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAC/F,CAAC;IACD,OAAO,MAAA,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,mCAAI,MAAM,CAAA;AACxC,CAAC;AAED,gGAAgG;AAChG,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED,uGAAuG;AACvG,SAAS,mBAAmB,CAAC,SAA2B;IACtD,IAAI,CAAC,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,WAAW,CAAA;QAAE,OAAO,EAAE,CAAA;IACtC,OAAO,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAA;AACvD,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,SAA2B;;IAChE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAA;IACzB,MAAM,QAAQ,GAAG,CAAC,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,OAAO,mCAAI,EAAE,CAAC;SACpD,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,8BAA8B,CAAC;SAClE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;SAC9E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3C,MAAM,aAAa,GAAI,CAAC,SAAS,EAAE,SAAS,CAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;;QAChE,OAAA,MAAM,CAAC,OAAO,CAAC,MAAA,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,QAAQ;YACR,YAAY,EAAG,KAA8C,CAAC,sBAAsB;SACrF,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;KAAA,CACxD,CAAA;IACD,OAAO,eAAe,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,CAAA;AAC7D,CAAC"}

package/build/utils/selfIssuedEcsCredential.d.ts

@@ -0,0 +1,8 @@
+import { W3cCredentialSchema } from '@credo-ts/core';
+import { VsAgent } from '../agent/VsAgent';
+import { EcsClaims } from './ecsClaims';
+/** The linked presentation as published: VC Data Model 2.0 JSON secured with Data Integrity proofs */
+export type SelfIssuedEcsPresentation = Record<string, unknown> & {
+    verifiableCredential: Record<string, unknown>[];
+};
+export declare function publishSelfIssuedEcsPresentation(agent: VsAgent, id: string, ecsSchemas: Record<string, string>, schemaKey: string, type: string[], credentialSchema: W3cCredentialSchema, ecsClaims: EcsClaims, beforePublish?: (verifiablePresentation: SelfIssuedEcsPresentation) => Promise<void>, validUntil?: string): Promise<SelfIssuedEcsPresentation>;

package/build/utils/selfIssuedEcsCredential.js

@@ -0,0 +1,153 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.publishSelfIssuedEcsPresentation = publishSelfIssuedEcsPresentation;
+const core_1 = require("@credo-ts/core");
+const vs_agent_model_1 = require("@verana-labs/vs-agent-model");
+const setupSelfTr_1 = require("./setupSelfTr");
+const publishedDidRecord_1 = require("./publishedDidRecord");
+const vcdm2_1 = require("./vcdm2");
+const buildIntegrityData = (data) => {
+    return (0, setupSelfTr_1.generateDigestSRI)(JSON.stringify((0, setupSelfTr_1.sortKeysDeep)(data)));
+};
+function storedCredentialIsCurrent(credential, credentialSchemaId, did, didRecord, validUntil) {
+    var _a, _b, _c;
+    if (!credential)
+        return false;
+    // a credential published by an older agent as data model 1.1 is rebuilt on upgrade
+    if (!(0, vcdm2_1.isDataIntegrityVcdm2Credential)(credential))
+        return false;
+    const issuer = typeof credential.issuer === 'string' ? credential.issuer : (_a = credential.issuer) === null || _a === void 0 ? void 0 : _a.id;
+    if (issuer !== did)
+        return false;
+    const schema = Array.isArray(credential.credentialSchema)
+        ? credential.credentialSchema[0]
+        : credential.credentialSchema;
+    if ((schema === null || schema === void 0 ? void 0 : schema.id) !== credentialSchemaId)
+        return false;
+    if (credential.validUntil !== validUntil)
+        return false;
+    const proofs = !credential.proof
+        ? []
+        : Array.isArray(credential.proof)
+            ? credential.proof
+            : [credential.proof];
+    if (proofs.length === 0)
+        return false;
+    const assertionMethods = new Set(((_c = (_b = didRecord.didDocument) === null || _b === void 0 ? void 0 : _b.assertionMethod) !== null && _c !== void 0 ? _c : []).map(entry => typeof entry === 'string' ? entry : entry.id));
+    return proofs.every(proof => !!proof.verificationMethod && assertionMethods.has(proof.verificationMethod));
+}
+/**
+ * Issues the ECS credential to the agent itself and wraps it in the linked presentation, both
+ * secured with a DataIntegrityProof by the DID Document assertion key.
+ */
+async function signSelfIssuedEcsCredential(agent, didRecord, presentationId, type, claims, credentialSchema, validUntil) {
+    const unsignedCredential = (0, vcdm2_1.createW3cV2Credential)({
+        id: agent.did,
+        type,
+        issuer: agent.did,
+        credentialSubject: Object.assign(Object.assign({}, claims), { id: agent.did }),
+        credentialSchema: { id: credentialSchema.id, type: credentialSchema.type },
+        validUntil,
+    });
+    const verificationMethodId = (0, setupSelfTr_1.getVerificationMethodId)(agent.config.logger, didRecord);
+    const signedCredential = await (0, setupSelfTr_1.signerW3c)(agent, unsignedCredential, verificationMethodId);
+    const presentation = (0, setupSelfTr_1.createPresentation)({
+        id: presentationId,
+        holder: agent.did,
+        verifiableCredential: [signedCredential],
+    });
+    const signedPresentation = await (0, setupSelfTr_1.signerW3c)(agent, presentation, verificationMethodId);
+    return signedPresentation.securedPresentation;
+}
+async function publishSelfIssuedEcsPresentation(agent, id, ecsSchemas, schemaKey, type, credentialSchema, ecsClaims, beforePublish, validUntil) {
+    var _a, _b, _c, _d, _e, _f, _g;
+    if (!agent.did)
+        throw Error('The DID must be set up');
+    const [didRecord] = await agent.dids.getCreatedDids({ did: agent.did });
+    const didDocument = didRecord.didDocument;
+    if (!didDocument)
+        throw Error('The DID Document must be set up');
+    const claims = await (0, setupSelfTr_1.getClaims)(agent.config.logger, ecsSchemas, { id: agent.did }, schemaKey, ecsClaims);
+    if (!validUntil && (0, vs_agent_model_1.ecsRequiresValidUntil)(schemaKey)) {
+        throw new Error(`Not issuing the ${schemaKey} credential: its VTJSC requires validUntil and the ISSUER participant has no effective_until, which SetParticipantEffectiveUntil sets`);
+    }
+    const didDocumentServiceId = `${agent.did}#${(0, setupSelfTr_1.linkedVpFragment)(schemaKey)}`;
+    const integrityData = buildIntegrityData({ id, type, credentialSchema, claims });
+    const record = (_a = didRecord.metadata.get('_vt/vtc')) !== null && _a !== void 0 ? _a : {};
+    const metadata = record[credentialSchema.id];
+    const superseded = Object.entries(record).some(([storedSchemaId, entry]) => {
+        var _a;
+        return storedSchemaId !== credentialSchema.id &&
+            ((_a = entry === null || entry === void 0 ? void 0 : entry.verifiablePresentation) === null || _a === void 0 ? void 0 : _a.id) === id &&
+            (entry === null || entry === void 0 ? void 0 : entry.attached) !== false;
+    });
+    const attached = ((_b = metadata === null || metadata === void 0 ? void 0 : metadata.attached) !== null && _b !== void 0 ? _b : true) && !superseded;
+    if ((metadata === null || metadata === void 0 ? void 0 : metadata.integrityData) === integrityData &&
+        storedCredentialIsCurrent(metadata === null || metadata === void 0 ? void 0 : metadata.credential, credentialSchema.id, agent.did, didRecord, validUntil)) {
+        // the presentation is already public, so a failed beforePublish step still needs a retry here
+        if (attached)
+            await (beforePublish === null || beforePublish === void 0 ? void 0 : beforePublish(metadata.verifiablePresentation));
+        return metadata.verifiablePresentation;
+    }
+    const verifiablePresentation = await signSelfIssuedEcsCredential(agent, didRecord, id, type, claims, credentialSchema, validUntil);
+    // nothing is persisted yet, so a failure here leaves no public presentation behind
+    if (attached)
+        await (beforePublish === null || beforePublish === void 0 ? void 0 : beforePublish(verifiablePresentation));
+    // Update linked VP when the presentation has changed. Match by fragment or by the file the
+    // endpoint ends with: a `contains` test also matches the host, so an agent at a host such as
+    // ecs-org-issuer.example rewrote its DIDComm endpoint and every other ECS linked VP onto this one.
+    const linkedVpFile = `/${schemaKey}-vtc-vp.json`;
+    if (attached)
+        didDocument.service = (_c = didDocument.service) === null || _c === void 0 ? void 0 : _c.map(s => {
+            if (typeof s.serviceEndpoint !== 'string')
+                return s;
+            if (s.type !== 'LinkedVerifiablePresentation' || s.id === `${agent.did}#whois`)
+                return s;
+            if (s.id !== didDocumentServiceId && !s.serviceEndpoint.endsWith(linkedVpFile))
+                return s;
+            s.id = didDocumentServiceId;
+            s.serviceEndpoint = id;
+            return s;
+        });
+    // Resolvers only discover the credential through the [VT-CRED-W3C-LINKED-VP] fragment, and
+    // #whois does not match it. The rename above only covers documents that already carry the
+    // service, so publish it here when nothing declared it yet.
+    if (attached && !((_d = didDocument.service) === null || _d === void 0 ? void 0 : _d.some(s => s.id === didDocumentServiceId))) {
+        didDocument.service = [
+            ...((_e = didDocument.service) !== null && _e !== void 0 ? _e : []),
+            new core_1.DidDocumentService({
+                id: didDocumentServiceId,
+                serviceEndpoint: id,
+                type: 'LinkedVerifiablePresentation',
+            }),
+        ];
+    }
+    const whoisId = `${agent.did}#whois`;
+    if (attached && schemaKey === 'ecs-service') {
+        const whois = (_f = didDocument.service) === null || _f === void 0 ? void 0 : _f.find(s => s.id === whoisId);
+        if (whois) {
+            whois.serviceEndpoint = id;
+        }
+        else {
+            didDocument.service = [
+                ...((_g = didDocument.service) !== null && _g !== void 0 ? _g : []),
+                new core_1.DidDocumentService({ id: whoisId, serviceEndpoint: id, type: 'LinkedVerifiablePresentation' }),
+            ];
+        }
+    }
+    const [credential] = verifiablePresentation.verifiableCredential;
+    record[credentialSchema.id] = {
+        credential,
+        verifiablePresentation,
+        didDocumentServiceId,
+        integrityData,
+        attached,
+    };
+    didRecord.metadata.set('_vt/vtc', record);
+    // the write point publishes the document when it changed, and triggers the resolver when the
+    // published material did ([VSA-VT-LVP-5]): an ECS credential re-issued under the same URL changes
+    // the presentation a resolver reads, without changing the entry that announces it
+    await (0, publishedDidRecord_1.updateDidRecord)(agent, didRecord);
+    return verifiablePresentation;
+}
+//# sourceMappingURL=selfIssuedEcsCredential.js.map

package/build/utils/selfIssuedEcsCredential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfIssuedEcsCredential.js","sourceRoot":"","sources":["../../src/utils/selfIssuedEcsCredential.ts"],"names":[],"mappings":";;AAoGA,4EAwGC;AA5MD,yCAAmF;AACnF,gEAAmE;AAInE,+CAQsB;AACtB,6DAAsD;AACtD,mCAA+E;AAE/E,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAE,EAAE;IAC3D,OAAO,IAAA,+BAAiB,EAAC,IAAI,CAAC,SAAS,CAAC,IAAA,0BAAY,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC9D,CAAC,CAAA;AASD,SAAS,yBAAyB,CAChC,UAAkD,EAClD,kBAA0B,EAC1B,GAAW,EACX,SAAoB,EACpB,UAA8B;;IAE9B,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAC7B,mFAAmF;IACnF,IAAI,CAAC,IAAA,sCAA8B,EAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IAE7D,MAAM,MAAM,GAAG,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAA,UAAU,CAAC,MAAM,0CAAE,EAAE,CAAA;IAChG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACvD,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAA;IAC/B,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,EAAE,MAAK,kBAAkB;QAAE,OAAO,KAAK,CAAA;IACnD,IAAI,UAAU,CAAC,UAAU,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAEtD,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,KAAK;QAC9B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;YAC/B,CAAC,CAAC,UAAU,CAAC,KAAK;YAClB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACxB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAErC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,CAAC,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,eAAe,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CACzD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAC7C,CACF,CAAA;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;AAC5G,CAAC;AAOD;;;GAGG;AACH,KAAK,UAAU,2BAA2B,CACxC,KAAc,EACd,SAAoB,EACpB,cAAsB,EACtB,IAAc,EACd,MAA+B,EAC/B,gBAAqC,EACrC,UAA8B;IAE9B,MAAM,kBAAkB,GAAG,IAAA,6BAAqB,EAAC;QAC/C,EAAE,EAAE,KAAK,CAAC,GAAG;QACb,IAAI;QACJ,MAAM,EAAE,KAAK,CAAC,GAAI;QAClB,iBAAiB,kCAAO,MAAM,KAAE,EAAE,EAAE,KAAK,CAAC,GAAG,GAAE;QAC/C,gBAAgB,EAAE,EAAE,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,EAAE;QAC1E,UAAU;KACX,CAAC,CAAA;IACF,MAAM,oBAAoB,GAAG,IAAA,qCAAuB,EAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACpF,MAAM,gBAAgB,GAAG,MAAM,IAAA,uBAAS,EAAC,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,CAAA;IACzF,MAAM,YAAY,GAAG,IAAA,gCAAkB,EAAC;QACtC,EAAE,EAAE,cAAc;QAClB,MAAM,EAAE,KAAK,CAAC,GAAG;QACjB,oBAAoB,EAAE,CAAC,gBAAgB,CAAC;KACzC,CAAC,CAAA;IACF,MAAM,kBAAkB,GAAG,MAAM,IAAA,uBAAS,EAAC,KAAK,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAA;IACrF,OAAO,kBAAkB,CAAC,mBAA2D,CAAA;AACvF,CAAC;AAEM,KAAK,UAAU,gCAAgC,CACpD,KAAc,EACd,EAAU,EACV,UAAkC,EAClC,SAAiB,EACjB,IAAc,EACd,gBAAqC,EACrC,SAAoB,EACpB,aAAoF,EACpF,UAAmB;;IAEnB,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAA;IACrD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IACvE,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAA;IACzC,IAAI,CAAC,WAAW;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAS,EAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IACxG,IAAI,CAAC,UAAU,IAAI,IAAA,sCAAqB,EAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,uIAAuI,CACpK,CAAA;IACH,CAAC;IACD,MAAM,oBAAoB,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAA,8BAAgB,EAAC,SAAS,CAAC,EAAE,CAAA;IAC1E,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAA;IAChF,MAAM,MAAM,GAAG,MAAA,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,mCAAI,EAAE,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE,EAAE;;QAC1B,OAAA,cAAc,KAAK,gBAAgB,CAAC,EAAE;YACtC,CAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,sBAAsB,0CAAE,EAAE,MAAK,EAAE;YACxC,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,MAAK,KAAK,CAAA;KAAA,CAC5B,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,QAAQ,mCAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAA;IAC5D,IACE,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,aAAa,MAAK,aAAa;QACzC,yBAAyB,CAAC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,UAAU,EAAE,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,EACtG,CAAC;QACD,8FAA8F;QAC9F,IAAI,QAAQ;YAAE,MAAM,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAA,CAAA;QACpE,OAAO,QAAQ,CAAC,sBAAsB,CAAA;IACxC,CAAC;IAED,MAAM,sBAAsB,GAAG,MAAM,2BAA2B,CAC9D,KAAK,EACL,SAAS,EACT,EAAE,EACF,IAAI,EACJ,MAAiC,EACjC,gBAAgB,EAChB,UAAU,CACX,CAAA;IACD,mFAAmF;IACnF,IAAI,QAAQ;QAAE,MAAM,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAG,sBAAsB,CAAC,CAAA,CAAA;IAC3D,2FAA2F;IAC3F,6FAA6F;IAC7F,mGAAmG;IACnG,MAAM,YAAY,GAAG,IAAI,SAAS,cAAc,CAAA;IAChD,IAAI,QAAQ;QACV,WAAW,CAAC,OAAO,GAAG,MAAA,WAAW,CAAC,OAAO,0CAAE,GAAG,CAAC,CAAC,CAAC,EAAE;YACjD,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;gBAAE,OAAO,CAAC,CAAA;YACnD,IAAI,CAAC,CAAC,IAAI,KAAK,8BAA8B,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,QAAQ;gBAAE,OAAO,CAAC,CAAA;YACxF,IAAI,CAAC,CAAC,EAAE,KAAK,oBAAoB,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,OAAO,CAAC,CAAA;YACxF,CAAC,CAAC,EAAE,GAAG,oBAAoB,CAAA;YAC3B,CAAC,CAAC,eAAe,GAAG,EAAE,CAAA;YACtB,OAAO,CAAC,CAAA;QACV,CAAC,CAAC,CAAA;IACJ,2FAA2F;IAC3F,0FAA0F;IAC1F,4DAA4D;IAC5D,IAAI,QAAQ,IAAI,CAAC,CAAA,MAAA,WAAW,CAAC,OAAO,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,oBAAoB,CAAC,CAAA,EAAE,CAAC;QAC/E,WAAW,CAAC,OAAO,GAAG;YACpB,GAAG,CAAC,MAAA,WAAW,CAAC,OAAO,mCAAI,EAAE,CAAC;YAC9B,IAAI,yBAAkB,CAAC;gBACrB,EAAE,EAAE,oBAAoB;gBACxB,eAAe,EAAE,EAAE;gBACnB,IAAI,EAAE,8BAA8B;aACrC,CAAC;SACH,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,QAAQ,CAAA;IACpC,IAAI,QAAQ,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAA,WAAW,CAAC,OAAO,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAA;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,eAAe,GAAG,EAAE,CAAA;QAC5B,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,OAAO,GAAG;gBACpB,GAAG,CAAC,MAAA,WAAW,CAAC,OAAO,mCAAI,EAAE,CAAC;gBAC9B,IAAI,yBAAkB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;aACnG,CAAA;QACH,CAAC;IACH,CAAC;IACD,MAAM,CAAC,UAAU,CAAC,GAAG,sBAAsB,CAAC,oBAAoB,CAAA;IAChE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,GAAG;QAC5B,UAAU;QACV,sBAAsB;QACtB,oBAAoB;QACpB,aAAa;QACb,QAAQ;KACT,CAAA;IACD,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACzC,6FAA6F;IAC7F,kGAAkG;IAClG,kFAAkF;IAClF,MAAM,IAAA,oCAAe,EAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IACvC,OAAO,sBAAsB,CAAA;AAC/B,CAAC"}