react-native-dpop 0.1.0 → 0.3.0

package/ios/KeychainKeyStore.swift

@@ -0,0 +1,82 @@
+import Foundation
+import Security
+
+final class KeychainKeyStore {
+  private let service = "com.dpop.keychain"
+
+  func generateKeyPair(alias: String) throws {
+    try deleteKeyPair(alias: alias)
+
+    let tag = keyTag(alias: alias)
+    var error: Unmanaged<CFError>?
+
+    let attributes: [String: Any] = [
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecAttrKeySizeInBits as String: 256,
+      kSecPrivateKeyAttrs as String: [
+        kSecAttrIsPermanent as String: true,
+        kSecAttrApplicationTag as String: tag,
+        kSecAttrLabel as String: service,
+        kSecAttrAccessible as String: kSecAttrAccessibleWhenUnlockedThisDeviceOnly
+      ]
+    ]
+
+    guard SecKeyCreateRandomKey(attributes as CFDictionary, &error) != nil else {
+      throw DPoPError.securityError(error?.takeRetainedValue())
+    }
+  }
+
+  func deleteKeyPair(alias: String) throws {
+    let tag = keyTag(alias: alias)
+
+    let privateQuery: [String: Any] = [
+      kSecClass as String: kSecClassKey,
+      kSecAttrApplicationTag as String: tag,
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom
+    ]
+
+    let status = SecItemDelete(privateQuery as CFDictionary)
+    guard status == errSecSuccess || status == errSecItemNotFound else {
+      throw NSError(domain: NSOSStatusErrorDomain, code: Int(status))
+    }
+  }
+
+  func getPrivateKey(alias: String) throws -> SecKey {
+    let tag = keyTag(alias: alias)
+    let query: [String: Any] = [
+      kSecClass as String: kSecClassKey,
+      kSecAttrApplicationTag as String: tag,
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecReturnRef as String: true
+    ]
+
+    var result: CFTypeRef?
+    let status = SecItemCopyMatching(query as CFDictionary, &result)
+    guard status == errSecSuccess, let key = result as! SecKey? else {
+      throw DPoPError.keyNotFound(alias: alias)
+    }
+    return key
+  }
+
+  func getPublicKey(alias: String) throws -> SecKey {
+    let privateKey = try getPrivateKey(alias: alias)
+    guard let publicKey = SecKeyCopyPublicKey(privateKey) else {
+      throw DPoPError.keyNotFound(alias: alias)
+    }
+    return publicKey
+  }
+
+  func hasKeyPair(alias: String) -> Bool {
+    do {
+      _ = try getPrivateKey(alias: alias)
+      _ = try getPublicKey(alias: alias)
+      return true
+    } catch {
+      return false
+    }
+  }
+
+  private func keyTag(alias: String) -> Data {
+    Data("\(service).\(alias)".utf8)
+  }
+}

package/ios/SecureEnclaveKeyStore.swift

@@ -0,0 +1,125 @@
+import Foundation
+import Security
+
+final class SecureEnclaveKeyStore {
+  private let service = "com.dpop.secureenclave"
+
+  func isAvailable() -> Bool {
+    #if targetEnvironment(simulator)
+      return false
+    #else
+      let probeAlias = "__secure_enclave_probe_\(UUID().uuidString)"
+      do {
+        try generateKeyPair(alias: probeAlias)
+        try deleteKeyPair(alias: probeAlias)
+        return true
+      } catch {
+        return false
+      }
+    #endif
+  }
+
+  func generateKeyPair(alias: String) throws {
+    try deleteKeyPair(alias: alias)
+
+    let tag = keyTag(alias: alias)
+    var error: Unmanaged<CFError>?
+
+    guard let access = SecAccessControlCreateWithFlags(
+      nil,
+      kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
+      .privateKeyUsage,
+      &error
+    ) else {
+      throw DPoPError.securityError(error?.takeRetainedValue())
+    }
+
+    let attributes: [String: Any] = [
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecAttrKeySizeInBits as String: 256,
+      kSecAttrTokenID as String: kSecAttrTokenIDSecureEnclave,
+      kSecPrivateKeyAttrs as String: [
+        kSecAttrIsPermanent as String: true,
+        kSecAttrApplicationTag as String: tag,
+        kSecAttrLabel as String: service,
+        kSecAttrAccessControl as String: access
+      ]
+    ]
+
+    guard SecKeyCreateRandomKey(attributes as CFDictionary, &error) != nil else {
+      throw DPoPError.securityError(error?.takeRetainedValue())
+    }
+  }
+
+  func deleteKeyPair(alias: String) throws {
+    let tag = keyTag(alias: alias)
+
+    let privateQuery: [String: Any] = [
+      kSecClass as String: kSecClassKey,
+      kSecAttrApplicationTag as String: tag,
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecAttrTokenID as String: kSecAttrTokenIDSecureEnclave
+    ]
+
+    let status = SecItemDelete(privateQuery as CFDictionary)
+    guard status == errSecSuccess || status == errSecItemNotFound else {
+      throw NSError(domain: NSOSStatusErrorDomain, code: Int(status))
+    }
+  }
+
+  func getPrivateKey(alias: String) throws -> SecKey {
+    let tag = keyTag(alias: alias)
+    let query: [String: Any] = [
+      kSecClass as String: kSecClassKey,
+      kSecAttrApplicationTag as String: tag,
+      kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+      kSecAttrTokenID as String: kSecAttrTokenIDSecureEnclave,
+      kSecReturnRef as String: true
+    ]
+
+    var result: CFTypeRef?
+    let status = SecItemCopyMatching(query as CFDictionary, &result)
+    guard status == errSecSuccess, let key = result as! SecKey? else {
+      throw DPoPError.keyNotFound(alias: alias)
+    }
+    return key
+  }
+
+  func getPublicKey(alias: String) throws -> SecKey {
+    let privateKey = try getPrivateKey(alias: alias)
+    guard let publicKey = SecKeyCopyPublicKey(privateKey) else {
+      throw DPoPError.keyNotFound(alias: alias)
+    }
+    return publicKey
+  }
+
+  func hasKeyPair(alias: String) -> Bool {
+    do {
+      _ = try getPrivateKey(alias: alias)
+      _ = try getPublicKey(alias: alias)
+      return true
+    } catch {
+      return false
+    }
+  }
+
+  func isHardwareBacked(alias: String) -> Bool {
+    guard let attrs = try? attributes(alias: alias) else {
+      return false
+    }
+
+    return (attrs[kSecAttrTokenID as String] as? String) == (kSecAttrTokenIDSecureEnclave as String)
+  }
+
+  private func attributes(alias: String) throws -> [String: Any] {
+    let privateKey = try getPrivateKey(alias: alias)
+    guard let attrs = SecKeyCopyAttributes(privateKey) as? [String: Any] else {
+      return [:]
+    }
+    return attrs
+  }
+
+  private func keyTag(alias: String) -> Data {
+    Data("\(service).\(alias)".utf8)
+  }
+}

package/lib/module/NativeReactNativeDPoP.js

@@ -0,0 +1,6 @@
+"use strict";
+
+import { NativeModules, TurboModuleRegistry } from 'react-native';
+const nativeDpopModule = TurboModuleRegistry.get('ReactNativeDPoP') ?? NativeModules.ReactNativeDPoP;
+export default nativeDpopModule;
+//# sourceMappingURL=NativeReactNativeDPoP.js.map

package/lib/module/NativeReactNativeDPoP.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeModules","TurboModuleRegistry","nativeDpopModule","get","ReactNativeDPoP"],"sourceRoot":"../../src","sources":["NativeReactNativeDPoP.ts"],"mappings":";;AACA,SAASA,aAAa,EAAEC,mBAAmB,QAAQ,cAAc;AA4BjE,MAAMC,gBAAgB,GACpBD,mBAAmB,CAACE,GAAG,CAAO,iBAAiB,CAAC,IAAKH,aAAa,CAACI,eAAoC;AAEzG,eAAeF,gBAAgB","ignoreList":[]}

package/lib/module/index.js

@@ -1,16 +1,6 @@
 "use strict";
 
-import { Platform } from 'react-native';
-import Dpop from "./NativeDpop.js";
-const LINKING_ERROR = 'Dpop module nao encontrado. Verifique se o app Android foi recompilado apos adicionar o modulo nativo.';
-function requireAndroid() {
-  if (Platform.OS !== 'android') {
-    throw new Error('react-native-dpop (MVP atual) suporta somente Android.');
-  }
-  if (!Dpop) {
-    throw new Error(LINKING_ERROR);
-  }
-}
+import NativeReactNativeDPoP from "./NativeReactNativeDPoP.js";
 export class DPoP {
   constructor(proof, proofContext, alias) {
     this.proof = proof;
@@ -18,51 +8,41 @@ export class DPoP {
     this.alias = alias;
   }
   async calculateThumbprint() {
-    requireAndroid();
-    return Dpop.calculateThumbprint(this.alias ?? null);
+    return NativeReactNativeDPoP.calculateThumbprint(this.alias ?? null);
   }
   async getPublicKey(format) {
-    requireAndroid();
     if (format === 'DER') {
-      return Dpop.getPublicKeyDer(this.alias ?? null);
+      return NativeReactNativeDPoP.getPublicKeyDer(this.alias ?? null);
     }
     if (format === 'RAW') {
-      return Dpop.getPublicKeyRaw(this.alias ?? null);
+      return NativeReactNativeDPoP.getPublicKeyRaw(this.alias ?? null);
     }
-    return Dpop.getPublicKeyJwk(this.alias ?? null);
+    return NativeReactNativeDPoP.getPublicKeyJwk(this.alias ?? null);
   }
   async signWithDpopPrivateKey(payload) {
-    requireAndroid();
-    return Dpop.signWithDpopPrivateKey(payload, this.alias ?? null);
+    return NativeReactNativeDPoP.signWithDpopPrivateKey(payload, this.alias ?? null);
   }
   async isBoundToAlias(alias) {
-    requireAndroid();
-    return Dpop.isBoundToAlias(this.proof, alias ?? this.alias ?? null);
+    return NativeReactNativeDPoP.isBoundToAlias(this.proof, alias ?? this.alias ?? null);
   }
   static async generateProof(input) {
-    requireAndroid();
-    const result = await Dpop.generateProof(input.htu, input.htm, input.nonce ?? null, input.accessToken ?? null, input.additional ?? null, input.kid ?? null, input.jti ?? null, input.iat ?? null, input.alias ?? null);
+    const result = await NativeReactNativeDPoP.generateProof(input.htu, input.htm, input.nonce ?? null, input.accessToken ?? null, input.additional ?? null, input.kid ?? null, input.jti ?? null, input.iat ?? null, input.alias ?? null);
     return new DPoP(result.proof, result.proofContext, input.alias);
   }
   static async assertHardwareBacked(alias) {
-    requireAndroid();
-    await Dpop.assertHardwareBacked(alias ?? null);
+    await NativeReactNativeDPoP.assertHardwareBacked(alias ?? null);
   }
   static async deleteKeyPair(alias) {
-    requireAndroid();
-    await Dpop.deleteKeyPair(alias ?? null);
+    await NativeReactNativeDPoP.deleteKeyPair(alias ?? null);
   }
   static async getKeyInfo(alias) {
-    requireAndroid();
-    return Dpop.getKeyInfo(alias ?? null);
+    return NativeReactNativeDPoP.getKeyInfo(alias ?? null);
   }
   static async hasKeyPair(alias) {
-    requireAndroid();
-    return Dpop.hasKeyPair(alias ?? null);
+    return NativeReactNativeDPoP.hasKeyPair(alias ?? null);
   }
   static async rotateKeyPair(alias) {
-    requireAndroid();
-    await Dpop.rotateKeyPair(alias ?? null);
+    await NativeReactNativeDPoP.rotateKeyPair(alias ?? null);
   }
 }
 //# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["Platform","Dpop","LINKING_ERROR","requireAndroid","OS","Error","DPoP","constructor","proof","proofContext","alias","calculateThumbprint","getPublicKey","format","getPublicKeyDer","getPublicKeyRaw","getPublicKeyJwk","signWithDpopPrivateKey","payload","isBoundToAlias","generateProof","input","result","htu","htm","nonce","accessToken","additional","kid","jti","iat","assertHardwareBacked","deleteKeyPair","getKeyInfo","hasKeyPair","rotateKeyPair"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;AAAA,SAASA,QAAQ,QAAQ,cAAc;AACvC,OAAOC,IAAI,MAAM,iBAAc;AAoD/B,MAAMC,aAAa,GACjB,wGAAwG;AAE1G,SAASC,cAAcA,CAAA,EAAG;EACxB,IAAIH,QAAQ,CAACI,EAAE,KAAK,SAAS,EAAE;IAC7B,MAAM,IAAIC,KAAK,CAAC,wDAAwD,CAAC;EAC3E;EACA,IAAI,CAACJ,IAAI,EAAE;IACT,MAAM,IAAII,KAAK,CAACH,aAAa,CAAC;EAChC;AACF;AAEA,OAAO,MAAMI,IAAI,CAAC;EAKRC,WAAWA,CAACC,KAAa,EAAEC,YAA8B,EAAEC,KAAc,EAAE;IACjF,IAAI,CAACF,KAAK,GAAGA,KAAK;IAClB,IAAI,CAACC,YAAY,GAAGA,YAAY;IAChC,IAAI,CAACC,KAAK,GAAGA,KAAK;EACpB;EAEA,MAAaC,mBAAmBA,CAAA,EAAoB;IAClDR,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACU,mBAAmB,CAAC,IAAI,CAACD,KAAK,IAAI,IAAI,CAAC;EACrD;EAEA,MAAaE,YAAYA,CAACC,MAAuB,EAA+B;IAC9EV,cAAc,CAAC,CAAC;IAChB,IAAIU,MAAM,KAAK,KAAK,EAAE;MACpB,OAAOZ,IAAI,CAACa,eAAe,CAAC,IAAI,CAACJ,KAAK,IAAI,IAAI,CAAC;IACjD;IACA,IAAIG,MAAM,KAAK,KAAK,EAAE;MACpB,OAAOZ,IAAI,CAACc,eAAe,CAAC,IAAI,CAACL,KAAK,IAAI,IAAI,CAAC;IACjD;IAEA,OAAOT,IAAI,CAACe,eAAe,CAAC,IAAI,CAACN,KAAK,IAAI,IAAI,CAAC;EACjD;EAEA,MAAaO,sBAAsBA,CAACC,OAAe,EAAmB;IACpEf,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACgB,sBAAsB,CAACC,OAAO,EAAE,IAAI,CAACR,KAAK,IAAI,IAAI,CAAC;EACjE;EAEA,MAAaS,cAAcA,CAACT,KAAc,EAAoB;IAC5DP,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACkB,cAAc,CAAC,IAAI,CAACX,KAAK,EAAEE,KAAK,IAAI,IAAI,CAACA,KAAK,IAAI,IAAI,CAAC;EACrE;EAEA,aAAoBU,aAAaA,CAACC,KAAyB,EAAiB;IAC1ElB,cAAc,CAAC,CAAC;IAChB,MAAMmB,MAAM,GAAI,MAAMrB,IAAI,CAACmB,aAAa,CACtCC,KAAK,CAACE,GAAG,EACTF,KAAK,CAACG,GAAG,EACTH,KAAK,CAACI,KAAK,IAAI,IAAI,EACnBJ,KAAK,CAACK,WAAW,IAAI,IAAI,EACzBL,KAAK,CAACM,UAAU,IAAI,IAAI,EACxBN,KAAK,CAACO,GAAG,IAAI,IAAI,EACjBP,KAAK,CAACQ,GAAG,IAAI,IAAI,EACjBR,KAAK,CAACS,GAAG,IAAI,IAAI,EACjBT,KAAK,CAACX,KAAK,IAAI,IACjB,CAAyB;IAEzB,OAAO,IAAIJ,IAAI,CAACgB,MAAM,CAACd,KAAK,EAAEc,MAAM,CAACb,YAAY,EAAEY,KAAK,CAACX,KAAK,CAAC;EACjE;EAEA,aAAoBqB,oBAAoBA,CAACrB,KAAc,EAAiB;IACtEP,cAAc,CAAC,CAAC;IAChB,MAAMF,IAAI,CAAC8B,oBAAoB,CAACrB,KAAK,IAAI,IAAI,CAAC;EAChD;EAEA,aAAoBsB,aAAaA,CAACtB,KAAc,EAAiB;IAC/DP,cAAc,CAAC,CAAC;IAChB,MAAMF,IAAI,CAAC+B,aAAa,CAACtB,KAAK,IAAI,IAAI,CAAC;EACzC;EAEA,aAAoBuB,UAAUA,CAACvB,KAAc,EAAwB;IACnEP,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACgC,UAAU,CAACvB,KAAK,IAAI,IAAI,CAAC;EACvC;EAEA,aAAoBwB,UAAUA,CAACxB,KAAc,EAAoB;IAC/DP,cAAc,CAAC,CAAC;IAChB,OAAOF,IAAI,CAACiC,UAAU,CAACxB,KAAK,IAAI,IAAI,CAAC;EACvC;EAEA,aAAoByB,aAAaA,CAACzB,KAAc,EAAiB;IAC/DP,cAAc,CAAC,CAAC;IAChB,MAAMF,IAAI,CAACkC,aAAa,CAACzB,KAAK,IAAI,IAAI,CAAC;EACzC;AACF","ignoreList":[]}
+{"version":3,"names":["NativeReactNativeDPoP","DPoP","constructor","proof","proofContext","alias","calculateThumbprint","getPublicKey","format","getPublicKeyDer","getPublicKeyRaw","getPublicKeyJwk","signWithDpopPrivateKey","payload","isBoundToAlias","generateProof","input","result","htu","htm","nonce","accessToken","additional","kid","jti","iat","assertHardwareBacked","deleteKeyPair","getKeyInfo","hasKeyPair","rotateKeyPair"],"sourceRoot":"../../src","sources":["index.tsx"],"mappings":";;AAAA,OAAOA,qBAAqB,MAAM,4BAAyB;AAiE3D,OAAO,MAAMC,IAAI,CAAC;EAKRC,WAAWA,CAACC,KAAa,EAAEC,YAA8B,EAAEC,KAAc,EAAE;IACjF,IAAI,CAACF,KAAK,GAAGA,KAAK;IAClB,IAAI,CAACC,YAAY,GAAGA,YAAY;IAChC,IAAI,CAACC,KAAK,GAAGA,KAAK;EACpB;EAEA,MAAaC,mBAAmBA,CAAA,EAAoB;IAClD,OAAON,qBAAqB,CAACM,mBAAmB,CAAC,IAAI,CAACD,KAAK,IAAI,IAAI,CAAC;EACtE;EAEA,MAAaE,YAAYA,CAACC,MAAuB,EAA+B;IAC9E,IAAIA,MAAM,KAAK,KAAK,EAAE;MACpB,OAAOR,qBAAqB,CAACS,eAAe,CAAC,IAAI,CAACJ,KAAK,IAAI,IAAI,CAAC;IAClE;IACA,IAAIG,MAAM,KAAK,KAAK,EAAE;MACpB,OAAOR,qBAAqB,CAACU,eAAe,CAAC,IAAI,CAACL,KAAK,IAAI,IAAI,CAAC;IAClE;IAEA,OAAOL,qBAAqB,CAACW,eAAe,CAAC,IAAI,CAACN,KAAK,IAAI,IAAI,CAAC;EAClE;EAEA,MAAaO,sBAAsBA,CAACC,OAAe,EAAmB;IACpE,OAAOb,qBAAqB,CAACY,sBAAsB,CAACC,OAAO,EAAE,IAAI,CAACR,KAAK,IAAI,IAAI,CAAC;EAClF;EAEA,MAAaS,cAAcA,CAACT,KAAc,EAAoB;IAC5D,OAAOL,qBAAqB,CAACc,cAAc,CAAC,IAAI,CAACX,KAAK,EAAEE,KAAK,IAAI,IAAI,CAACA,KAAK,IAAI,IAAI,CAAC;EACtF;EAEA,aAAoBU,aAAaA,CAACC,KAAyB,EAAiB;IAC1E,MAAMC,MAAM,GAAI,MAAMjB,qBAAqB,CAACe,aAAa,CACvDC,KAAK,CAACE,GAAG,EACTF,KAAK,CAACG,GAAG,EACTH,KAAK,CAACI,KAAK,IAAI,IAAI,EACnBJ,KAAK,CAACK,WAAW,IAAI,IAAI,EACzBL,KAAK,CAACM,UAAU,IAAI,IAAI,EACxBN,KAAK,CAACO,GAAG,IAAI,IAAI,EACjBP,KAAK,CAACQ,GAAG,IAAI,IAAI,EACjBR,KAAK,CAACS,GAAG,IAAI,IAAI,EACjBT,KAAK,CAACX,KAAK,IAAI,IACjB,CAAyB;IAEzB,OAAO,IAAIJ,IAAI,CAACgB,MAAM,CAACd,KAAK,EAAEc,MAAM,CAACb,YAAY,EAAEY,KAAK,CAACX,KAAK,CAAC;EACjE;EAEA,aAAoBqB,oBAAoBA,CAACrB,KAAc,EAAiB;IACtE,MAAML,qBAAqB,CAAC0B,oBAAoB,CAACrB,KAAK,IAAI,IAAI,CAAC;EACjE;EAEA,aAAoBsB,aAAaA,CAACtB,KAAc,EAAiB;IAC/D,MAAML,qBAAqB,CAAC2B,aAAa,CAACtB,KAAK,IAAI,IAAI,CAAC;EAC1D;EAEA,aAAoBuB,UAAUA,CAACvB,KAAc,EAAwB;IACnE,OAAOL,qBAAqB,CAAC4B,UAAU,CAACvB,KAAK,IAAI,IAAI,CAAC;EACxD;EAEA,aAAoBwB,UAAUA,CAACxB,KAAc,EAAoB;IAC/D,OAAOL,qBAAqB,CAAC6B,UAAU,CAACxB,KAAK,IAAI,IAAI,CAAC;EACxD;EAEA,aAAoByB,aAAaA,CAACzB,KAAc,EAAiB;IAC/D,MAAML,qBAAqB,CAAC8B,aAAa,CAACzB,KAAK,IAAI,IAAI,CAAC;EAC1D;AACF","ignoreList":[]}

package/lib/typescript/src/{NativeDpop.d.ts → NativeReactNativeDPoP.d.ts}

@@ -16,4 +16,4 @@ export interface Spec extends TurboModule {
 }
 declare const _default: Spec;
 export default _default;
-//# sourceMappingURL=NativeDpop.d.ts.map
+//# sourceMappingURL=NativeReactNativeDPoP.d.ts.map

package/lib/typescript/src/NativeReactNativeDPoP.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NativeReactNativeDPoP.d.ts","sourceRoot":"","sources":["../../../src/NativeReactNativeDPoP.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAE9E,MAAM,WAAW,IAAK,SAAQ,WAAW;IACvC,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7D,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,aAAa,CACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,UAAU,EAAE,YAAY,GAAG,IAAI,EAC/B,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAAC,YAAY,CAAC,CAAC;CAC1B;wBAKkC,IAAI;AAAvC,wBAAwC"}

package/lib/typescript/src/index.d.ts

@@ -6,15 +6,27 @@ export type PublicJwk = {
     y: string;
 };
 export type PublicKeyFormat = 'JWK' | 'DER' | 'RAW';
+export type SecureHardwareFallbackReason = 'UNAVAILABLE' | 'PROVIDER_ERROR' | 'POLICY_REJECTED' | 'UNKNOWN';
 export type DPoPKeyInfo = {
     alias: string;
     hasKeyPair: boolean;
     algorithm?: string;
     curve?: string;
     insideSecureHardware?: boolean;
-    securityLevel?: number;
-    strongBoxAvailable?: boolean;
-    strongBoxBacked?: boolean;
+    hardware?: {
+        android?: {
+            strongBoxAvailable: boolean;
+            strongBoxBacked: boolean;
+            securityLevel?: number;
+            strongBoxFallbackReason?: SecureHardwareFallbackReason | null;
+        };
+        ios?: {
+            secureEnclaveAvailable: boolean;
+            secureEnclaveBacked: boolean;
+            securityLevel?: number | null;
+            secureEnclaveFallbackReason?: SecureHardwareFallbackReason | null;
+        };
+    };
 };
 export type GenerateProofInput = {
     htu: string;

package/lib/typescript/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAGA,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,OAAO,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAEpD,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAmBF,qBAAa,IAAI;IACf,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,KAAK,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAgB,YAAY,EAAE,gBAAgB,CAAC;IAE/C,OAAO;IAMM,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC;IAKtC,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC;IAYlE,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKxD,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;WAKzC,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;WAiBvD,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAKnD,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAK5C,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;WAKhD,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;WAK5C,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAIjE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAEA,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,OAAO,CAAC;IACb,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAEpD,MAAM,MAAM,4BAA4B,GAAG,aAAa,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAE5G,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE;YACR,kBAAkB,EAAE,OAAO,CAAC;YAC5B,eAAe,EAAE,OAAO,CAAC;YACzB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,uBAAuB,CAAC,EAAE,4BAA4B,GAAG,IAAI,CAAC;SAC/D,CAAC;QACF,GAAG,CAAC,EAAE;YACJ,sBAAsB,EAAE,OAAO,CAAC;YAChC,mBAAmB,EAAE,OAAO,CAAC;YAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAC9B,2BAA2B,CAAC,EAAE,4BAA4B,GAAG,IAAI,CAAC;SACnE,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACpC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAOF,qBAAa,IAAI;IACf,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,KAAK,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAgB,YAAY,EAAE,gBAAgB,CAAC;IAE/C,OAAO;IAMM,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC;IAItC,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC;IAWlE,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxD,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;WAIzC,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;WAgBvD,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAInD,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;WAI5C,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;WAIhD,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;WAI5C,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGjE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-dpop",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "React Native library for DPoP proof generation and key management.",
   "keywords": [
     "android",
@@ -51,7 +51,8 @@
     "example": "yarn workspace react-native-dpop-example",
     "lint": "eslint \"**/*.{js,ts,tsx}\"",
     "prepare": "bob build",
-    "release": "release-it --only-version",
+    "release": "release-it",
+    "release:version": "release-it --only-version",
     "test": "jest",
     "typecheck": "tsc"
   },
@@ -110,11 +111,11 @@
     ]
   },
   "codegenConfig": {
-    "name": "DpopSpec",
+    "name": "ReactNativeDPoPSpec",
     "type": "modules",
     "jsSrcsDir": "src",
     "android": {
-      "javaPackageName": "com.dpop"
+      "javaPackageName": "com.reactnativedpop"
     }
   }
 }

package/src/{NativeDpop.ts → NativeReactNativeDPoP.ts}

@@ -1,5 +1,5 @@
 import type { TurboModule } from 'react-native';
-import { TurboModuleRegistry } from 'react-native';
+import { NativeModules, TurboModuleRegistry } from 'react-native';
 import type { UnsafeObject } from 'react-native/Libraries/Types/CodegenTypes';
 
 export interface Spec extends TurboModule {
@@ -27,4 +27,7 @@ export interface Spec extends TurboModule {
   ): Promise<UnsafeObject>;
 }
 
-export default TurboModuleRegistry.getEnforcing<Spec>('Dpop');
+const nativeDpopModule =
+  TurboModuleRegistry.get<Spec>('ReactNativeDPoP') ?? (NativeModules.ReactNativeDPoP as Spec | undefined);
+
+export default nativeDpopModule as Spec;

package/src/index.tsx

@@ -1,5 +1,4 @@
-import { Platform } from 'react-native';
-import Dpop from './NativeDpop';
+import NativeReactNativeDPoP from './NativeReactNativeDPoP';
 
 type AdditionalClaims = Record<string, unknown>;
 
@@ -12,15 +11,28 @@ export type PublicJwk = {
 
 export type PublicKeyFormat = 'JWK' | 'DER' | 'RAW';
 
+export type SecureHardwareFallbackReason = 'UNAVAILABLE' | 'PROVIDER_ERROR' | 'POLICY_REJECTED' | 'UNKNOWN';
+
 export type DPoPKeyInfo = {
   alias: string;
   hasKeyPair: boolean;
   algorithm?: string;
   curve?: string;
   insideSecureHardware?: boolean;
-  securityLevel?: number;
-  strongBoxAvailable?: boolean;
-  strongBoxBacked?: boolean;
+  hardware?: {
+    android?: {
+      strongBoxAvailable: boolean;
+      strongBoxBacked: boolean;
+      securityLevel?: number;
+      strongBoxFallbackReason?: SecureHardwareFallbackReason | null;
+    };
+    ios?: {
+      secureEnclaveAvailable: boolean;
+      secureEnclaveBacked: boolean;
+      securityLevel?: number | null;
+      secureEnclaveFallbackReason?: SecureHardwareFallbackReason | null;
+    };
+  };
 };
 
 export type GenerateProofInput = {
@@ -51,18 +63,6 @@ type GenerateProofResult = {
   proofContext: DPoPProofContext;
 };
 
-const LINKING_ERROR =
-  'Dpop module nao encontrado. Verifique se o app Android foi recompilado apos adicionar o modulo nativo.';
-
-function requireAndroid() {
-  if (Platform.OS !== 'android') {
-    throw new Error('react-native-dpop (MVP atual) suporta somente Android.');
-  }
-  if (!Dpop) {
-    throw new Error(LINKING_ERROR);
-  }
-}
-
 export class DPoP {
   public readonly proof: string;
   public readonly alias?: string;
@@ -75,35 +75,30 @@ export class DPoP {
   }
 
   public async calculateThumbprint(): Promise<string> {
-    requireAndroid();
-    return Dpop.calculateThumbprint(this.alias ?? null);
+    return NativeReactNativeDPoP.calculateThumbprint(this.alias ?? null);
   }
 
   public async getPublicKey(format: PublicKeyFormat): Promise<PublicJwk | string> {
-    requireAndroid();
     if (format === 'DER') {
-      return Dpop.getPublicKeyDer(this.alias ?? null);
+      return NativeReactNativeDPoP.getPublicKeyDer(this.alias ?? null);
     }
     if (format === 'RAW') {
-      return Dpop.getPublicKeyRaw(this.alias ?? null);
+      return NativeReactNativeDPoP.getPublicKeyRaw(this.alias ?? null);
     }
 
-    return Dpop.getPublicKeyJwk(this.alias ?? null) as Promise<PublicJwk>;
+    return NativeReactNativeDPoP.getPublicKeyJwk(this.alias ?? null) as Promise<PublicJwk>;
   }
 
   public async signWithDpopPrivateKey(payload: string): Promise<string> {
-    requireAndroid();
-    return Dpop.signWithDpopPrivateKey(payload, this.alias ?? null);
+    return NativeReactNativeDPoP.signWithDpopPrivateKey(payload, this.alias ?? null);
   }
 
   public async isBoundToAlias(alias?: string): Promise<boolean> {
-    requireAndroid();
-    return Dpop.isBoundToAlias(this.proof, alias ?? this.alias ?? null);
+    return NativeReactNativeDPoP.isBoundToAlias(this.proof, alias ?? this.alias ?? null);
   }
 
   public static async generateProof(input: GenerateProofInput): Promise<DPoP> {
-    requireAndroid();
-    const result = (await Dpop.generateProof(
+    const result = (await NativeReactNativeDPoP.generateProof(
       input.htu,
       input.htm,
       input.nonce ?? null,
@@ -119,27 +114,22 @@ export class DPoP {
   }
 
   public static async assertHardwareBacked(alias?: string): Promise<void> {
-    requireAndroid();
-    await Dpop.assertHardwareBacked(alias ?? null);
+    await NativeReactNativeDPoP.assertHardwareBacked(alias ?? null);
   }
 
   public static async deleteKeyPair(alias?: string): Promise<void> {
-    requireAndroid();
-    await Dpop.deleteKeyPair(alias ?? null);
+    await NativeReactNativeDPoP.deleteKeyPair(alias ?? null);
   }
 
   public static async getKeyInfo(alias?: string): Promise<DPoPKeyInfo> {
-    requireAndroid();
-    return Dpop.getKeyInfo(alias ?? null) as Promise<DPoPKeyInfo>;
+    return NativeReactNativeDPoP.getKeyInfo(alias ?? null) as Promise<DPoPKeyInfo>;
   }
 
   public static async hasKeyPair(alias?: string): Promise<boolean> {
-    requireAndroid();
-    return Dpop.hasKeyPair(alias ?? null);
+    return NativeReactNativeDPoP.hasKeyPair(alias ?? null);
   }
 
   public static async rotateKeyPair(alias?: string): Promise<void> {
-    requireAndroid();
-    await Dpop.rotateKeyPair(alias ?? null);
+    await NativeReactNativeDPoP.rotateKeyPair(alias ?? null);
   }
 }

package/ios/Dpop.h

@@ -1,5 +0,0 @@
-#import <DpopSpec/DpopSpec.h>
-
-@interface Dpop : NSObject <NativeDpopSpec>
-
-@end

package/ios/Dpop.mm

@@ -1,21 +0,0 @@
-#import "Dpop.h"
-
-@implementation Dpop
-- (NSNumber *)multiply:(double)a b:(double)b {
-    NSNumber *result = @(a * b);
-
-    return result;
-}
-
-- (std::shared_ptr<facebook::react::TurboModule>)getTurboModule:
-    (const facebook::react::ObjCTurboModule::InitParams &)params
-{
-    return std::make_shared<facebook::react::NativeDpopSpecJSI>(params);
-}
-
-+ (NSString *)moduleName
-{
-  return @"Dpop";
-}
-
-@end

package/lib/module/NativeDpop.js

@@ -1,5 +0,0 @@
-"use strict";
-
-import { TurboModuleRegistry } from 'react-native';
-export default TurboModuleRegistry.getEnforcing('Dpop');
-//# sourceMappingURL=NativeDpop.js.map

package/lib/module/NativeDpop.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["TurboModuleRegistry","getEnforcing"],"sourceRoot":"../../src","sources":["NativeDpop.ts"],"mappings":";;AACA,SAASA,mBAAmB,QAAQ,cAAc;AA4BlD,eAAeA,mBAAmB,CAACC,YAAY,CAAO,MAAM,CAAC","ignoreList":[]}

package/lib/typescript/src/NativeDpop.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"NativeDpop.d.ts","sourceRoot":"","sources":["../../../src/NativeDpop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAE9E,MAAM,WAAW,IAAK,SAAQ,WAAW;IACvC,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7D,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,aAAa,CACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,UAAU,EAAE,YAAY,GAAG,IAAI,EAC/B,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAAC,YAAY,CAAC,CAAC;CAC1B;;AAED,wBAA8D"}