@winbit32/wallet-kit 0.1.0

package/dist/cosign/relay.js

@@ -0,0 +1,359 @@
+"use strict";
+/**
+ * @fileoverview WB32COSIGN relay client + Orchard FROST initiator ceremony.
+ *
+ * A framework-agnostic port of the initiator half of WINBIT32's
+ * `cosignerRelay`, scoped to the `frost-orchard` protocol. Wire format, QR
+ * payload, AES-256-GCM envelopes and the two-round message protocol are
+ * byte-compatible with WINBIT32, so the existing `cosign.exe` cosigner
+ * interoperates unchanged. (Canonical home — ported from Secresea's
+ * `services/cosign/relay.ts`.)
+ *
+ * Reuse-oriented: the WASM engine is injected (no module-global), encryption
+ * uses standard Web Crypto, and message delivery goes through any
+ * {@link CosignTransport}. The DKLS / Schnorr / Sapling protocols and the
+ * trusted-dealer DKG regen path are intentionally omitted — Secresea
+ * co-signs an *existing* Orchard vault share, never creates one.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runOrchardInitiatorAction = exports.waitForCosignerJoin = exports.endCosignSession = exports.createCosignSession = exports.parseCosignQR = exports.generateCosignQR = exports.OrchardShareMismatchError = void 0;
+const bytes_1 = require("./bytes");
+const orchardFrost_1 = require("./orchardFrost");
+const QR_PREFIX = 'WB32COSIGN';
+const PROTOCOL_VERSION = 1;
+const ROLE_INIT = 'init';
+const ROLE_COSIGN = 'cosign';
+const SESSION_TIMEOUT_MS = 180000;
+const POLL_IDLE_MS = 1500;
+const POLL_ACTIVE_MS = 500;
+const MSG_TAG_JSON = 0x00;
+const MSG_TAG_MPC_BINARY = 0x01;
+/** Thrown when the cosigner asks to (re)derive keys — Secresea won't do that. */
+class OrchardShareMismatchError extends Error {
+    constructor() {
+        super('The cosigner does not hold a matching Orchard FROST share for this vault. ' +
+            'Load the correct .wult share on both devices — Secresea will not generate new keys.');
+        this.code = 'ORCHARD_SHARE_MISMATCH';
+    }
+}
+exports.OrchardShareMismatchError = OrchardShareMismatchError;
+// ── Web Crypto helpers ───────────────────────────────────────────────
+const getCrypto = () => {
+    const c = globalThis.crypto;
+    if (!c?.subtle)
+        throw new Error('Web Crypto (crypto.subtle) is required for cosign relay encryption.');
+    return c;
+};
+const importEncKey = (hexKey) => getCrypto().subtle.importKey('raw', (0, bytes_1.hexToBytes)(hexKey), 'AES-GCM', false, ['encrypt', 'decrypt']);
+const encryptEnvelopeBytes = async (key, plainBytes) => {
+    const iv = getCrypto().getRandomValues(new Uint8Array(12));
+    const cipherBuf = await getCrypto().subtle.encrypt({ name: 'AES-GCM', iv }, key, plainBytes);
+    const combined = new Uint8Array(iv.length + cipherBuf.byteLength);
+    combined.set(iv);
+    combined.set(new Uint8Array(cipherBuf), iv.length);
+    return combined;
+};
+const decryptEnvelopeBytes = async (key, combined) => {
+    const iv = combined.slice(0, 12);
+    const ciphertext = combined.slice(12);
+    const plainBuf = await getCrypto().subtle.decrypt({ name: 'AES-GCM', iv }, key, ciphertext);
+    return new Uint8Array(plainBuf);
+};
+/** v1 (legacy) string envelope: base64( iv || AES-GCM(utf8) ). */
+const decryptEnvelopeString = async (key, cipherB64) => {
+    const combined = (0, bytes_1.fromBase64)(cipherB64);
+    const plain = await decryptEnvelopeBytes(key, combined);
+    return new TextDecoder().decode(plain);
+};
+/**
+ * Push bytes through a (De)CompressionStream and collect the output. Uses the
+ * stream's reader/writer directly rather than `Blob.stream()` so it works in
+ * any host with Web Streams (browser, Node, jsdom) — not just DOM environments.
+ */
+const streamThrough = async (input, transform) => {
+    const writer = transform.writable.getWriter();
+    void writer.write(input).then(() => writer.close()).catch(() => { });
+    const reader = transform.readable.getReader();
+    const chunks = [];
+    let total = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        chunks.push(value);
+        total += value.length;
+    }
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const c of chunks) {
+        out.set(c, offset);
+        offset += c.length;
+    }
+    return out;
+};
+const deflateBytes = (input) => streamThrough(input, new CompressionStream('deflate-raw'));
+const inflateBytes = (input) => streamThrough(input, new DecompressionStream('deflate-raw'));
+const encodeControlMsg = (msg) => {
+    if (msg.type === 'mpc') {
+        const body = (0, bytes_1.fromBase64)(msg.body);
+        const out = new Uint8Array(1 + body.length);
+        out[0] = MSG_TAG_MPC_BINARY;
+        out.set(body, 1);
+        return out;
+    }
+    const json = new TextEncoder().encode(JSON.stringify(msg));
+    const out = new Uint8Array(1 + json.length);
+    out[0] = MSG_TAG_JSON;
+    out.set(json, 1);
+    return out;
+};
+const decodeControlMsg = (bytes) => {
+    if (bytes[0] === MSG_TAG_MPC_BINARY)
+        return { type: 'mpc', body: (0, bytes_1.toBase64)(bytes.slice(1)) };
+    return JSON.parse(new TextDecoder().decode(bytes.slice(1)));
+};
+const transportSend = async (transport, fromRole, toRole, key, msg) => {
+    const raw = encodeControlMsg(msg);
+    const compressed = await deflateBytes(raw);
+    const encrypted = await encryptEnvelopeBytes(key, compressed);
+    await transport.send(fromRole, toRole, (0, bytes_1.toBase64)(encrypted));
+};
+const transportReceive = async (transport, myRole, key) => {
+    const messages = await transport.receive(myRole);
+    const results = [];
+    for (const encoded of messages) {
+        try {
+            const combined = (0, bytes_1.fromBase64)(encoded);
+            const decrypted = await decryptEnvelopeBytes(key, combined);
+            const decompressed = await inflateBytes(decrypted);
+            results.push(decodeControlMsg(decompressed));
+        }
+        catch (v2Err) {
+            try {
+                results.push(JSON.parse(await decryptEnvelopeString(key, encoded)));
+            }
+            catch (v1Err) {
+                console.warn(`[cosign/relay] dropped undecodable message for role=${myRole}`, 'v2:', v2Err?.message, 'v1:', v1Err?.message);
+            }
+        }
+    }
+    return results;
+};
+const checkAborted = (signal) => {
+    if (signal?.aborted)
+        throw new Error('Cosign session cancelled');
+};
+const generateSetupId = () => (0, bytes_1.bytesToHex)(getCrypto().getRandomValues(new Uint8Array(8)));
+// ── QR payload + session ─────────────────────────────────────────────
+const generateCosignQR = (params) => {
+    const r = params.relayUrl ? `:${params.relayUrl}` : '';
+    return `${QR_PREFIX}:${PROTOCOL_VERSION}:${params.sessionId}:${params.encKeyHex}${r}`;
+};
+exports.generateCosignQR = generateCosignQR;
+const parseCosignQR = (qr) => {
+    if (!qr.startsWith(QR_PREFIX + ':'))
+        return null;
+    const parts = qr.split(':');
+    if (parts.length < 4)
+        return null;
+    if (parseInt(parts[1], 10) !== PROTOCOL_VERSION)
+        return null;
+    return {
+        sessionId: parts[2],
+        encKeyHex: parts[3],
+        relayUrl: parts.length >= 5 ? parts.slice(4).join(':') : '',
+    };
+};
+exports.parseCosignQR = parseCosignQR;
+/** Create a fresh session (random id + AES-256 key) and its QR payload. */
+const createCosignSession = (relayUrl) => {
+    const sessionId = getCrypto().randomUUID();
+    const encKeyHex = (0, bytes_1.bytesToHex)(getCrypto().getRandomValues(new Uint8Array(32)));
+    const params = { sessionId, encKeyHex, relayUrl: relayUrl || '' };
+    return { params, qrPayload: (0, exports.generateCosignQR)(params) };
+};
+exports.createCosignSession = createCosignSession;
+/** Tell the cosigner the session is finished so it stops polling. */
+const endCosignSession = async (encKeyHex, transport) => {
+    try {
+        const key = await importEncKey(encKeyHex);
+        await transportSend(transport, ROLE_INIT, ROLE_COSIGN, key, { type: 'done' });
+    }
+    catch (err) {
+        console.warn('[cosign/relay] endCosignSession failed (non-fatal):', err?.message);
+    }
+};
+exports.endCosignSession = endCosignSession;
+/** Block until a valid cosigner scans the QR and joins; returns its partyId. */
+const waitForCosignerJoin = async (p) => {
+    const key = await importEncKey(p.encKeyHex);
+    const start = Date.now();
+    p.callbacks?.onProgress?.('Waiting for cosigner to scan QR...');
+    for (;;) {
+        checkAborted(p.callbacks?.signal);
+        if (Date.now() - start > SESSION_TIMEOUT_MS)
+            throw new Error('Timed out waiting for cosigner');
+        const msgs = await transportReceive(p.transport, ROLE_INIT, key);
+        for (const msg of msgs) {
+            if (msg.type !== 'join')
+                continue;
+            if (!p.validSignerIds.includes(msg.partyId)) {
+                await transportSend(p.transport, ROLE_INIT, ROLE_COSIGN, key, {
+                    type: 'error',
+                    message: 'Party ID not recognised for this vault',
+                });
+                continue;
+            }
+            p.callbacks?.onCosignerJoined?.(msg.partyId);
+            return msg.partyId;
+        }
+        await new Promise((r) => setTimeout(r, POLL_IDLE_MS));
+    }
+};
+exports.waitForCosignerJoin = waitForCosignerJoin;
+/**
+ * Run the two-round FROST-Orchard ceremony for a single Orchard action and
+ * return its aggregated 64-byte signature. Mirrors WINBIT32's
+ * `runInitiatorFrostOrchard` (minus the DKG regen branch).
+ */
+const runOrchardInitiatorAction = async (p) => {
+    const { wasm, transport, orchardKeyShare, frostOrchardData, display, callbacks } = p;
+    const key = await importEncKey(p.encKeyHex);
+    if (!/^[0-9a-fA-F]{64}$/.test(frostOrchardData.randomizer)) {
+        throw new Error('Orchard FROST: missing/invalid per-action alpha randomiser (expected 64 hex chars).');
+    }
+    const setupId = generateSetupId();
+    callbacks?.onProgress?.('Sending Orchard FROST setup to cosigner...');
+    await transportSend(transport, ROLE_INIT, ROLE_COSIGN, key, {
+        type: 'setup',
+        protocol: 'frost-orchard',
+        setupBytes: '',
+        display,
+        initiatorPartyId: p.myPartyId,
+        setupId,
+        frostOrchardData,
+    });
+    // Buffer the *entire* received batch before scanning for a match, so a
+    // round2 that arrives in the same poll as round1 is never dropped (the
+    // upstream impl returned on first hit, discarding the rest of the batch).
+    const buffered = [];
+    const scanBuffered = (predicate) => {
+        for (let i = 0; i < buffered.length; i++) {
+            const hit = predicate(buffered[i]);
+            if (hit !== undefined) {
+                buffered.splice(i, 1);
+                return hit;
+            }
+        }
+        return undefined;
+    };
+    const pollFor = async (predicate, label) => {
+        const early = scanBuffered(predicate);
+        if (early !== undefined)
+            return early;
+        const t0 = Date.now();
+        for (;;) {
+            checkAborted(callbacks?.signal);
+            if (Date.now() - t0 > SESSION_TIMEOUT_MS)
+                throw new Error(`Timed out waiting for ${label}`);
+            const msgs = await transportReceive(transport, ROLE_INIT, key);
+            for (const msg of msgs) {
+                if (msg.type === 'error')
+                    throw new Error(`Cosigner: ${msg.message}`);
+                buffered.push(msg);
+            }
+            const hit = scanBuffered(predicate);
+            if (hit !== undefined)
+                return hit;
+            await new Promise((r) => setTimeout(r, POLL_ACTIVE_MS));
+        }
+    };
+    // Round 1 — commit nonces, exchange commitments.
+    callbacks?.onProgress?.('Orchard FROST Round 1: committing nonces...');
+    const myCommit = (0, orchardFrost_1.orchardCommitNonces)(wasm, orchardKeyShare.secretShare);
+    const r1Msg = {
+        type: 'frost-round1', id: orchardKeyShare.id, commitments: myCommit.commitments, setupId,
+    };
+    await transportSend(transport, ROLE_INIT, ROLE_COSIGN, key, r1Msg);
+    const r1Resend = resendLoop(() => transportSend(transport, ROLE_INIT, ROLE_COSIGN, key, r1Msg), callbacks?.signal);
+    let round1;
+    try {
+        round1 = await pollFor((m) => {
+            if (m.type === 'frost-round1') {
+                const r1 = m;
+                if (r1.setupId && r1.setupId !== setupId)
+                    return undefined;
+                return { id: r1.id, commitments: r1.commitments };
+            }
+            if (m.type === 'need-orchard-dkg')
+                throw new OrchardShareMismatchError();
+            return undefined;
+        }, 'cosigner nonce commitments');
+    }
+    finally {
+        r1Resend.stop();
+    }
+    // Round 2 — sign with pre-committed nonces.
+    callbacks?.onProgress?.('Orchard FROST Round 2: signing...');
+    const allCommitments = {
+        [orchardKeyShare.id]: myCommit.commitments,
+        [round1.id]: round1.commitments,
+    };
+    const allCommitmentsJson = JSON.stringify(allCommitments);
+    const mySigShare = (0, orchardFrost_1.orchardSignWithNonces)(wasm, orchardKeyShare.id, orchardKeyShare.secretShare, orchardKeyShare.publicKey, frostOrchardData.pubKeyPackage.groupPublic, myCommit.noncesOpaque, allCommitmentsJson, frostOrchardData.sighash, frostOrchardData.randomizer);
+    const r2Msg = { type: 'frost-round2', id: orchardKeyShare.id, sigShare: mySigShare, setupId };
+    await transportSend(transport, ROLE_INIT, ROLE_COSIGN, key, r2Msg);
+    const r2Resend = resendLoop(() => transportSend(transport, ROLE_INIT, ROLE_COSIGN, key, r2Msg), callbacks?.signal);
+    const mySignerId = orchardKeyShare.id;
+    let round2;
+    try {
+        round2 = await pollFor((m) => {
+            if (m.type !== 'frost-round2')
+                return undefined;
+            const r2 = m;
+            if (!r2.id || r2.id === mySignerId)
+                return undefined;
+            if (r2.setupId && r2.setupId !== setupId)
+                return undefined;
+            return { sigShare: r2.sigShare };
+        }, 'cosigner signature share');
+    }
+    finally {
+        r2Resend.stop();
+    }
+    // Aggregate.
+    callbacks?.onProgress?.('Aggregating Orchard FROST signature...');
+    const sigShares = {
+        [orchardKeyShare.id]: mySigShare,
+        [round1.id]: round2.sigShare,
+    };
+    const aggregate = JSON.parse((0, orchardFrost_1.orchardAggregate)(wasm, allCommitmentsJson, frostOrchardData.sighash, JSON.stringify(sigShares), JSON.stringify(frostOrchardData.pubKeyPackage.signerPubkeys), frostOrchardData.pubKeyPackage.groupPublic, frostOrchardData.randomizer));
+    const signature = aggregate.signature;
+    callbacks?.onProgress?.('Orchard FROST signature complete');
+    await transportSend(transport, ROLE_INIT, ROLE_COSIGN, key, p.keepAlive ? { type: 'continue' } : { type: 'done' });
+    return { signature, rawSignatureBytes: (0, bytes_1.hexToBytes)(signature) };
+};
+exports.runOrchardInitiatorAction = runOrchardInitiatorAction;
+/**
+ * Periodically re-send a message (the relay/cosigner may miss the first
+ * delivery). Stops automatically once `.stop()` is called or the signal aborts.
+ */
+const resendLoop = (send, signal) => {
+    const state = { stopped: false };
+    const DELAYS_MS = [2000, 4000, 8000, 15000, 25000, 40000, 60000];
+    void (async () => {
+        for (const delay of DELAYS_MS) {
+            await new Promise((r) => setTimeout(r, delay));
+            if (state.stopped || signal?.aborted)
+                return;
+            try {
+                await send();
+            }
+            catch (e) {
+                console.warn('[cosign/relay] resend failed:', e?.message);
+            }
+        }
+    })();
+    return { stop: () => { state.stopped = true; } };
+};
+//# sourceMappingURL=relay.js.map

package/dist/cosign/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../../src/cosign/relay.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAEH,mCAAuE;AAEvE,iDAKwB;AAExB,MAAM,SAAS,GAAG,YAAY,CAAC;AAC/B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,WAAW,GAAG,QAAQ,CAAC;AAE7B,MAAM,kBAAkB,GAAG,MAAO,CAAC;AACnC,MAAM,YAAY,GAAG,IAAK,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AA8ChC,iFAAiF;AACjF,MAAa,yBAA0B,SAAQ,KAAK;IAEnD;QACC,KAAK,CACJ,4EAA4E;YAC5E,qFAAqF,CACrF,CAAC;QALM,SAAI,GAAG,wBAAwB,CAAC;IAMzC,CAAC;CACD;AARD,8DAQC;AA0BD,wEAAwE;AAExE,MAAM,SAAS,GAAG,GAAW,EAAE;IAC9B,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,CAAC;IACrD,IAAI,CAAC,CAAC,EAAE,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACvG,OAAO,CAAC,CAAC;AACV,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,MAAc,EAAsB,EAAE,CAC3D,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,kBAAU,EAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEnG,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAc,EAAE,UAAsB,EAAuB,EAAE;IAClG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,SAAS,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAClE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,QAAQ,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAc,EAAE,QAAoB,EAAuB,EAAE;IAChG,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,SAAS,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5F,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC,CAAC;AAEF,kEAAkE;AAClE,MAAM,qBAAqB,GAAG,KAAK,EAAE,GAAc,EAAE,SAAiB,EAAmB,EAAE;IAC1F,MAAM,QAAQ,GAAG,IAAA,kBAAU,EAAC,SAAS,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,aAAa,GAAG,KAAK,EAAE,KAAiB,EAAE,SAAkD,EAAuB,EAAE;IAC1H,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAiC,CAAC,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;KACtB;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;KAAE;IACnE,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAuB,EAAE,CAC/D,aAAa,CAAC,KAAK,EAAE,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;AAE5D,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAuB,EAAE,CAC/D,aAAa,CAAC,KAAK,EAAE,IAAI,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC;AAE9D,MAAM,gBAAgB,GAAG,CAAC,GAAe,EAAc,EAAE;IACxD,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE;QACvB,MAAM,IAAI,GAAG,IAAA,kBAAU,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjB,OAAO,GAAG,CAAC;KACX;IACD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,KAAiB,EAAc,EAAE;IAC1D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,kBAAkB;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAA,gBAAQ,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,KAAK,EAC1B,SAA0B,EAC1B,QAAgB,EAChB,MAAc,EACd,GAAc,EACd,GAAe,EACC,EAAE;IAClB,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9D,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAA,gBAAQ,EAAC,SAAS,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,KAAK,EAC7B,SAA0B,EAC1B,MAAc,EACd,GAAc,EACU,EAAE;IAC1B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;QAC/B,IAAI;YACH,MAAM,QAAQ,GAAG,IAAA,kBAAU,EAAC,OAAO,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5D,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;SAC7C;QAAC,OAAO,KAAK,EAAE;YACf,IAAI;gBACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;aACpE;YAAC,OAAO,KAAK,EAAE;gBACf,OAAO,CAAC,IAAI,CACX,uDAAuD,MAAM,EAAE,EAC/D,KAAK,EAAG,KAAe,EAAE,OAAO,EAAE,KAAK,EAAG,KAAe,EAAE,OAAO,CAClE,CAAC;aACF;SACD;KACD;IACD,OAAO,OAAO,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,MAAoB,EAAQ,EAAE;IACnD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,GAAW,EAAE,CAAC,IAAA,kBAAU,EAAC,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjG,wEAAwE;AAEjE,MAAM,gBAAgB,GAAG,CAAC,MAA2B,EAAU,EAAE;IACvE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,GAAG,SAAS,IAAI,gBAAgB,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;AACvF,CAAC,CAAC;AAHW,QAAA,gBAAgB,oBAG3B;AAEK,MAAM,aAAa,GAAG,CAAC,EAAU,EAA8B,EAAE;IACvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO;QACN,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACnB,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;KAC3D,CAAC;AACH,CAAC,CAAC;AAVW,QAAA,aAAa,iBAUxB;AAEF,2EAA2E;AACpE,MAAM,mBAAmB,GAAG,CAAC,QAAiB,EAAsD,EAAE;IAC5G,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC,UAAU,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAA,kBAAU,EAAC,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAwB,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;IACvF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAA,wBAAgB,EAAC,MAAM,CAAC,EAAE,CAAC;AACxD,CAAC,CAAC;AALW,QAAA,mBAAmB,uBAK9B;AAEF,qEAAqE;AAC9D,MAAM,gBAAgB,GAAG,KAAK,EAAE,SAAiB,EAAE,SAA0B,EAAiB,EAAE;IACtG,IAAI;QACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;KAC9E;IAAC,OAAO,GAAG,EAAE;QACb,OAAO,CAAC,IAAI,CAAC,qDAAqD,EAAG,GAAa,EAAE,OAAO,CAAC,CAAC;KAC7F;AACF,CAAC,CAAC;AAPW,QAAA,gBAAgB,oBAO3B;AAYF,gFAAgF;AACzE,MAAM,mBAAmB,GAAG,KAAK,EAAE,CAAwB,EAAmB,EAAE;IACtF,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,oCAAoC,CAAC,CAAC;IAChE,SAAS;QACR,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;YACvB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YAClC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBAC5C,MAAM,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE;oBAC7D,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,wCAAwC;iBACjD,CAAC,CAAC;gBACH,SAAS;aACT;YACD,CAAC,CAAC,SAAS,EAAE,gBAAgB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,GAAG,CAAC,OAAO,CAAC;SACnB;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;KACtD;AACF,CAAC,CAAC;AAtBW,QAAA,mBAAmB,uBAsB9B;AAkBF;;;;GAIG;AACI,MAAM,yBAAyB,GAAG,KAAK,EAAE,CAA4B,EAA+B,EAAE;IAC5G,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE5C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE;QAC3D,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;KACvG;IAED,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAElC,SAAS,EAAE,UAAU,EAAE,CAAC,4CAA4C,CAAC,CAAC;IACtE,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE;QAC3D,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,EAAE;QACd,OAAO;QACP,gBAAgB,EAAE,CAAC,CAAC,SAAS;QAC7B,OAAO;QACP,gBAAgB;KAChB,CAAC,CAAC;IAEH,uEAAuE;IACvE,uEAAuE;IACvE,0EAA0E;IAC1E,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,CAAI,SAA6C,EAAiB,EAAE;QACxF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACzC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,GAAG,KAAK,SAAS,EAAE;gBAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,OAAO,GAAG,CAAC;aAAE;SAC7D;QACD,OAAO,SAAS,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,EAAK,SAA6C,EAAE,KAAa,EAAc,EAAE;QACrG,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,SAAS;YACR,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,kBAAkB;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YAC5F,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;gBACvB,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,aAAc,GAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aACnB;YACD,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC;YAClC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;SACxD;IACF,CAAC,CAAC;IAEF,iDAAiD;IACjD,SAAS,EAAE,UAAU,EAAE,CAAC,6CAA6C,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAA,kCAAmB,EAAC,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,KAAK,GAAmB;QAC7B,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO;KACxF,CAAC;IACF,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAEnH,IAAI,MAA2C,CAAC;IAChD,IAAI;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5B,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE;gBAC9B,MAAM,EAAE,GAAG,CAAmB,CAAC;gBAC/B,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,KAAK,OAAO;oBAAE,OAAO,SAAS,CAAC;gBAC3D,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;aAClD;YACD,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB;gBAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;YACzE,OAAO,SAAS,CAAC;QAClB,CAAC,EAAE,4BAA4B,CAAC,CAAC;KACjC;YAAS;QACT,QAAQ,CAAC,IAAI,EAAE,CAAC;KAChB;IAED,4CAA4C;IAC5C,SAAS,EAAE,UAAU,EAAE,CAAC,mCAAmC,CAAC,CAAC;IAC7D,MAAM,cAAc,GAA2B;QAC9C,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,WAAW;QAC1C,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,WAAW;KAC/B,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAE1D,MAAM,UAAU,GAAG,IAAA,oCAAqB,EACvC,IAAI,EACJ,eAAe,CAAC,EAAE,EAClB,eAAe,CAAC,WAAW,EAC3B,eAAe,CAAC,SAAS,EACzB,gBAAgB,CAAC,aAAa,CAAC,WAAW,EAC1C,QAAQ,CAAC,YAAY,EACrB,kBAAkB,EAClB,gBAAgB,CAAC,OAAO,EACxB,gBAAgB,CAAC,UAAU,CAC3B,CAAC;IAEF,MAAM,KAAK,GAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC9G,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAEnH,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,CAAC;IACtC,IAAI,MAA4B,CAAC;IACjC,IAAI;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5B,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;gBAAE,OAAO,SAAS,CAAC;YAChD,MAAM,EAAE,GAAG,CAAmB,CAAC;YAC/B,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,UAAU;gBAAE,OAAO,SAAS,CAAC;YACrD,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC3D,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC;QAClC,CAAC,EAAE,0BAA0B,CAAC,CAAC;KAC/B;YAAS;QACT,QAAQ,CAAC,IAAI,EAAE,CAAC;KAChB;IAED,aAAa;IACb,SAAS,EAAE,UAAU,EAAE,CAAC,wCAAwC,CAAC,CAAC;IAClE,MAAM,SAAS,GAA2B;QACzC,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,UAAU;QAChC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ;KAC5B,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,+BAAgB,EAC5C,IAAI,EACJ,kBAAkB,EAClB,gBAAgB,CAAC,OAAO,EACxB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,aAAa,CAAC,aAAa,CAAC,EAC5D,gBAAgB,CAAC,aAAa,CAAC,WAAW,EAC1C,gBAAgB,CAAC,UAAU,CAC3B,CAAC,CAAC;IACH,MAAM,SAAS,GAAW,SAAS,CAAC,SAAS,CAAC;IAE9C,SAAS,EAAE,UAAU,EAAE,CAAC,kCAAkC,CAAC,CAAC;IAC5D,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EACzD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAExD,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAA,kBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;AAChE,CAAC,CAAC;AAtIW,QAAA,yBAAyB,6BAsIpC;AAEF;;;GAGG;AACH,MAAM,UAAU,GAAG,CAClB,IAAyB,EACzB,MAAoB,EACG,EAAE;IACzB,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,CAAC,IAAK,EAAE,IAAK,EAAE,IAAK,EAAE,KAAM,EAAE,KAAM,EAAE,KAAM,EAAE,KAAM,CAAC,CAAC;IACxE,KAAK,CAAC,KAAK,IAAI,EAAE;QAChB,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE;YAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/C,IAAI,KAAK,CAAC,OAAO,IAAI,MAAM,EAAE,OAAO;gBAAE,OAAO;YAC7C,IAAI;gBACH,MAAM,IAAI,EAAE,CAAC;aACb;YAAC,OAAO,CAAC,EAAE;gBACX,OAAO,CAAC,IAAI,CAAC,+BAA+B,EAAG,CAAW,EAAE,OAAO,CAAC,CAAC;aACrE;SACD;IACF,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAClD,CAAC,CAAC"}

package/dist/cosign/seed.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @fileoverview Deterministic Zcash seed derivation from a Vultisig vault's
+ * identity material (HKDF-SHA256). Byte-compatible with WINBIT32's
+ * `crossChainDerivation.js` so the same vault lands on the same seed — and
+ * therefore the same ZIP-32 seed fingerprint — in both apps.
+ *
+ * For Orchard FROST co-signing the spend authority is the threshold key
+ * (group_public = `ak`), NOT this seed. The derived seed is used only to
+ * produce a stable `seedFingerprintHex` for the PCZT's `zip32_derivation`
+ * metadata (see `tools/orchard-scanner/src/pczt_builder.rs`, which writes it
+ * into the proprietary field and never derives keys from it). Deriving it the
+ * same way as WINBIT32 keeps wallet identity consistent across the two apps.
+ *
+ * Pure Web Crypto, no host/React coupling — part of the reusable module.
+ */
+/**
+ * HKDF-SHA256 expand arbitrary input key material into a 64-byte seed.
+ *
+ * @param ikm  Input key material (e.g. the vault chain code bytes).
+ * @param salt Domain-specific salt.
+ * @param info Context binding.
+ */
+export declare const deriveCrossChainSeed: (ikm: Uint8Array, salt: Uint8Array, info: Uint8Array) => Promise<Uint8Array>;
+/**
+ * Derive a 64-byte Zcash seed from a Vultisig vault's identity
+ * (BIP-32 chain code + ECDSA public key). Matches WINBIT32 exactly.
+ *
+ * @param hexChainCode Vault BIP-32 chain code (hex, ≥ 32 bytes).
+ * @param publicKeyHex Vault ECDSA public key (hex), used for domain separation.
+ */
+export declare const deriveZcashSeedFromVaultIdentity: (hexChainCode: string, publicKeyHex: string) => Promise<Uint8Array>;
+//# sourceMappingURL=seed.d.ts.map

package/dist/cosign/seed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../src/cosign/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiBH;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,QAC3B,UAAU,QACT,UAAU,QACV,UAAU,KACd,QAAQ,UAAU,CAUpB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,iBAC9B,MAAM,gBACN,MAAM,KAClB,QAAQ,UAAU,CAiBpB,CAAC"}

package/dist/cosign/seed.js

@@ -0,0 +1,69 @@
+"use strict";
+/**
+ * @fileoverview Deterministic Zcash seed derivation from a Vultisig vault's
+ * identity material (HKDF-SHA256). Byte-compatible with WINBIT32's
+ * `crossChainDerivation.js` so the same vault lands on the same seed — and
+ * therefore the same ZIP-32 seed fingerprint — in both apps.
+ *
+ * For Orchard FROST co-signing the spend authority is the threshold key
+ * (group_public = `ak`), NOT this seed. The derived seed is used only to
+ * produce a stable `seedFingerprintHex` for the PCZT's `zip32_derivation`
+ * metadata (see `tools/orchard-scanner/src/pczt_builder.rs`, which writes it
+ * into the proprietary field and never derives keys from it). Deriving it the
+ * same way as WINBIT32 keeps wallet identity consistent across the two apps.
+ *
+ * Pure Web Crypto, no host/React coupling — part of the reusable module.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveZcashSeedFromVaultIdentity = exports.deriveCrossChainSeed = void 0;
+const bytes_1 = require("./bytes");
+// Domain-separation constants — MUST match WINBIT32 crossChainDerivation.js.
+const ZCASH_VAULT_SALT = 'zcash-shielded-seed:v3:vault-identity';
+const ZCASH_VAULT_INFO_PREFIX = 'winbit32-zcash-orchard:';
+const DERIVED_SEED_BITS = 512; // 64 bytes — same length as a BIP-39 seed.
+const getSubtle = () => {
+    const c = (typeof globalThis !== 'undefined' ? globalThis.crypto : undefined);
+    if (!c?.subtle) {
+        throw new Error('Web Crypto (crypto.subtle) is required for vault seed derivation (HTTPS context).');
+    }
+    return c.subtle;
+};
+/**
+ * HKDF-SHA256 expand arbitrary input key material into a 64-byte seed.
+ *
+ * @param ikm  Input key material (e.g. the vault chain code bytes).
+ * @param salt Domain-specific salt.
+ * @param info Context binding.
+ */
+const deriveCrossChainSeed = async (ikm, salt, info) => {
+    if (!ikm || ikm.length === 0)
+        throw new Error('deriveCrossChainSeed: IKM must be non-empty');
+    const subtle = getSubtle();
+    const keyMaterial = await subtle.importKey('raw', ikm, { name: 'HKDF' }, false, ['deriveBits']);
+    const derived = await subtle.deriveBits({ name: 'HKDF', hash: 'SHA-256', salt, info }, keyMaterial, DERIVED_SEED_BITS);
+    return new Uint8Array(derived);
+};
+exports.deriveCrossChainSeed = deriveCrossChainSeed;
+/**
+ * Derive a 64-byte Zcash seed from a Vultisig vault's identity
+ * (BIP-32 chain code + ECDSA public key). Matches WINBIT32 exactly.
+ *
+ * @param hexChainCode Vault BIP-32 chain code (hex, ≥ 32 bytes).
+ * @param publicKeyHex Vault ECDSA public key (hex), used for domain separation.
+ */
+const deriveZcashSeedFromVaultIdentity = async (hexChainCode, publicKeyHex) => {
+    if (!hexChainCode || typeof hexChainCode !== 'string') {
+        throw new Error('Vault chain code required for Zcash seed derivation.');
+    }
+    if (!publicKeyHex || typeof publicKeyHex !== 'string') {
+        throw new Error('Vault public key required for Zcash seed derivation.');
+    }
+    const ikm = (0, bytes_1.hexToBytes)(hexChainCode.replace(/^0x/i, ''));
+    if (ikm.length < 32) {
+        throw new Error(`Vault chain code too short (${ikm.length} bytes, need ≥ 32).`);
+    }
+    const enc = new TextEncoder();
+    return (0, exports.deriveCrossChainSeed)(ikm, enc.encode(ZCASH_VAULT_SALT), enc.encode(ZCASH_VAULT_INFO_PREFIX + publicKeyHex));
+};
+exports.deriveZcashSeedFromVaultIdentity = deriveZcashSeedFromVaultIdentity;
+//# sourceMappingURL=seed.js.map

package/dist/cosign/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../src/cosign/seed.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEH,mCAAqC;AAErC,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AACjE,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAC1D,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,2CAA2C;AAE1E,MAAM,SAAS,GAAG,GAAiB,EAAE;IACpC,MAAM,CAAC,GAAG,CAAC,OAAO,UAAU,KAAK,WAAW,CAAC,CAAC,CAAE,UAAkC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvG,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE;QACf,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;KACrG;IACD,OAAO,CAAC,CAAC,MAAM,CAAC;AACjB,CAAC,CAAC;AAEF;;;;;;GAMG;AACI,MAAM,oBAAoB,GAAG,KAAK,EACxC,GAAe,EACf,IAAgB,EAChB,IAAgB,EACM,EAAE;IACxB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAChG,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CACtC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,EAC7C,WAAW,EACX,iBAAiB,CACjB,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC,CAAC;AAdW,QAAA,oBAAoB,wBAc/B;AAEF;;;;;;GAMG;AACI,MAAM,gCAAgC,GAAG,KAAK,EACpD,YAAoB,EACpB,YAAoB,EACE,EAAE;IACxB,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE;QACtD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;KACxE;IACD,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE;QACtD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;KACxE;IACD,MAAM,GAAG,GAAG,IAAA,kBAAU,EAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE;QACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,qBAAqB,CAAC,CAAC;KAChF;IACD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,OAAO,IAAA,4BAAoB,EAC1B,GAAG,EACH,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAC5B,GAAG,CAAC,MAAM,CAAC,uBAAuB,GAAG,YAAY,CAAC,CAClD,CAAC;AACH,CAAC,CAAC;AApBW,QAAA,gCAAgC,oCAoB3C"}

package/dist/cosign/transports.d.ts

@@ -0,0 +1,127 @@
+/**
+ * @fileoverview Pluggable transport layer for the WB32COSIGN MPC relay.
+ *
+ * A framework-agnostic port of WINBIT32's `cosignTransports`, trimmed to the
+ * transports an online initiator needs and with `fetch` injected (rather
+ * than a global) so the module stays host-portable and testable. Works in
+ * browsers and Node ≥ 18 (BroadcastChannel, Web Streams and WebCrypto are
+ * global there; WebRTC is browser-only and skipped automatically).
+ *
+ * Each transport moves an already-encrypted opaque body between two roles
+ * (`init` / `cosign`); the relay/MPC layer above is responsible for crypto.
+ *
+ * Included:
+ *   - BroadcastChannelTransport — same-origin / same-device (zero config).
+ *   - HttpRelayTransport        — cross-device via any WB32COSIGN relay
+ *                                 (Secresea's API mounts one at /api/cosign).
+ *   - WebRTCTransport           — peer-to-peer data channel, signalled over the
+ *                                 relay; low-latency once the P2P link is up.
+ *   - MultiTransport            — fan-out send, merge receive.
+ *
+ * Deferred (airgap copy-paste only; not required online): ManualTransport.
+ */
+export interface CosignTransport {
+    readonly name: string;
+    send(from: string, to: string, encryptedBody: string): Promise<void>;
+    receive(myRole: string): Promise<string[]>;
+    close(): void;
+}
+export declare class BroadcastChannelTransport implements CosignTransport {
+    readonly name = "BroadcastChannel (local)";
+    private channel;
+    private inbox;
+    constructor(sessionId: string);
+    send(from: string, to: string, encryptedBody: string): Promise<void>;
+    receive(myRole: string): Promise<string[]>;
+    close(): void;
+}
+export declare class HttpRelayTransport implements CosignTransport {
+    readonly name: string;
+    private relayUrl;
+    private sessionId;
+    private fetchImpl;
+    private started;
+    private backoff;
+    constructor(relayUrl: string, sessionId: string, fetchImpl: typeof fetch);
+    private ensureSession;
+    send(from: string, to: string, encryptedBody: string): Promise<void>;
+    receive(myRole: string): Promise<string[]>;
+    close(): void;
+}
+export declare class MultiTransport implements CosignTransport {
+    readonly name: string;
+    private transports;
+    constructor(transports: CosignTransport[]);
+    send(from: string, to: string, encryptedBody: string): Promise<void>;
+    receive(myRole: string): Promise<string[]>;
+    close(): void;
+}
+export type CosignRole = 'init' | 'cosign';
+/**
+ * Direct peer-to-peer transport over an `RTCDataChannel`. The offer/answer/ICE
+ * handshake is signalled through the same WB32COSIGN relay (distinct
+ * `signal-init`/`signal-cosign` roles) so no extra server is needed. `send()`
+ * is fail-fast — it silently drops while the channel isn't open — so this is
+ * safe to combine with {@link HttpRelayTransport} inside a {@link MultiTransport}:
+ * the relay is the always-on fabric, WebRTC opportunistically short-circuits it.
+ *
+ * Ported from WINBIT32's transport with `fetch` injected (Secresea keeps the
+ * module host-portable). Only meaningful in a browser with `RTCPeerConnection`;
+ * callers must guard creation in non-DOM environments.
+ */
+export declare class WebRTCTransport implements CosignTransport {
+    readonly name = "WebRTC (peer-to-peer)";
+    private pc;
+    private dc;
+    private inbox;
+    private relayUrl;
+    private sessionId;
+    private fetchImpl;
+    private myRole;
+    private peerRole;
+    private closed;
+    private signalPollTimer;
+    private iceCandidateQueue;
+    private remoteDescSet;
+    private signalBackoff;
+    private onOpen?;
+    constructor(sessionId: string, relayUrl: string, fetchImpl: typeof fetch, myRole: CosignRole, opts?: {
+        onOpen?: () => void;
+    });
+    private setupDataChannel;
+    private startOffer;
+    private postSignal;
+    private pollSignals;
+    private fetchSignals;
+    private handleSignal;
+    /** True once the data channel has reached 'open'. */
+    isOpen(): boolean;
+    send(from: string, to: string, encryptedBody: string): Promise<void>;
+    receive(myRole: string): Promise<string[]>;
+    close(): void;
+}
+/** WebRTC is only usable where the browser exposes `RTCPeerConnection`. */
+export declare const isWebRtcSupported: () => boolean;
+export interface DefaultTransportOptions {
+    sessionId: string;
+    /** When set, adds an HTTP relay leg (and enables WebRTC signalling). */
+    relayBaseUrl?: string;
+    /** Required when `relayBaseUrl` is set. */
+    fetchImpl?: typeof fetch;
+    /**
+     * This party's role. When provided (and `RTCPeerConnection` exists) a
+     * peer-to-peer WebRTC leg is added. Secresea is always the `init`iator.
+     */
+    myRole?: CosignRole;
+    /** Fires when the WebRTC data channel opens (UI can drop "relay only" hints). */
+    onWebRtcOpen?: () => void;
+}
+/**
+ * Build the standard transport stack: BroadcastChannel (same device), an
+ * opportunistic WebRTC peer-to-peer leg (low latency once open) and an HTTP
+ * relay leg (always-on fallback) when a relay URL is supplied. BroadcastChannel
+ * short-circuits when both parties share an origin; WebRTC is skipped silently
+ * where `RTCPeerConnection` is unavailable (SSR/tests) or `myRole` is unknown.
+ */
+export declare const createDefaultTransports: (opts: DefaultTransportOptions) => CosignTransport;
+//# sourceMappingURL=transports.d.ts.map

package/dist/cosign/transports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transports.d.ts","sourceRoot":"","sources":["../../src/cosign/transports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,KAAK,IAAI,IAAI,CAAC;CACd;AAID,qBAAa,yBAA0B,YAAW,eAAe;IAChE,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,KAAK,CAAoC;gBAErC,SAAS,EAAE,MAAM;IAevB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAOhD,KAAK,IAAI,IAAI;CAGb;AA2CD,qBAAa,kBAAmB,YAAW,eAAe;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,SAAS,CAAe;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAA0B;gBAE7B,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,KAAK;YAO1D,aAAa;IA0BrB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBpE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAmBhD,KAAK,IAAI,IAAI;CAGb;AAID,qBAAa,cAAe,YAAW,eAAe;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,UAAU,CAAoB;gBAE1B,UAAU,EAAE,eAAe,EAAE;IAKnC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAOhD,KAAK,IAAI,IAAI;CAGb;AAID,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;AAc3C;;;;;;;;;;;GAWG;AACH,qBAAa,eAAgB,YAAW,eAAe;IACtD,QAAQ,CAAC,IAAI,2BAA2B;IACxC,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,EAAE,CAA+B;IACzC,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,SAAS,CAAe;IAChC,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,eAAe,CAA+C;IACtE,OAAO,CAAC,iBAAiB,CAA6B;IACtD,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,aAAa,CAA0B;IAC/C,OAAO,CAAC,MAAM,CAAC,CAAa;gBAG3B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,KAAK,EACvB,MAAM,EAAE,UAAU,EAClB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE;IA8B/B,OAAO,CAAC,gBAAgB;YAmBV,UAAU;YAOV,UAAU;IAiBxB,OAAO,CAAC,WAAW;YAML,YAAY;YAuBZ,YAAY;IAoB1B,qDAAqD;IACrD,MAAM,IAAI,OAAO;IAIX,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWpE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAOhD,KAAK,IAAI,IAAI;CAMb;AAED,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,QAAO,OACI,CAAC;AAI1C,MAAM,WAAW,uBAAuB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,SAAU,uBAAuB,KAAG,eAiBvE,CAAC"}