tenzro-wallet 0.1.0

package/dist/crypto/solana.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Minimal Solana wire-format primitives.
+ *
+ * What's here, and why:
+ *   - **compact-array length encoding** ("short_vec"): base-128 varint with
+ *     high-bit continuation. Used for the count prefix on Solana arrays
+ *     (signatures, account keys, instructions, instruction data, etc.).
+ *   - **base58** (Bitcoin alphabet): Solana pubkeys, addresses, and tx
+ *     signatures all serialise as base58. We need both directions because
+ *     `SurfaceKey.address` for the SVM surface stores the base58 form.
+ *   - **legacy compiled-message** + **transaction** serialisation: the byte
+ *     layout `solana-validator` accepts on `sendTransaction`.
+ *
+ * Why not @solana/web3.js: it pulls in Buffer + Node crypto polyfills, and
+ * we need a pure-JS, browser-clean kernel package. The slice we use here is
+ * a few hundred lines; vendoring is cheaper than the dep tree.
+ *
+ * Scope deliberately narrow: legacy message (not Message-v0 with address
+ * lookup tables — that's an M5+ optimisation when we have a working
+ * pointer flow first). The Tenzro precompile's SVM-side trigger is a single
+ * system-program-style instruction, which legacy messages handle fine.
+ *
+ * Refs:
+ *   - https://docs.solana.com/developing/programming-model/transactions
+ *   - https://docs.solana.com/developing/clients/jsonrpc-api#sendtransaction
+ *   - https://github.com/solana-labs/solana/blob/master/sdk/program/src/short_vec.rs
+ */
+/**
+ * Encode an unsigned integer as Solana short_vec (1–3 bytes for values up to
+ * 2^21 - 1, sufficient for any tx field count).
+ */
+export declare function compactArrayLength(n: number): Uint8Array;
+/** Decode a short_vec length from `buf` starting at `off`. */
+export declare function readCompactArrayLength(buf: Uint8Array, off: number): {
+    value: number;
+    consumed: number;
+};
+/**
+ * Encode bytes to base58. Leading zeros become leading '1's per the Bitcoin
+ * convention used by Solana.
+ */
+export declare function base58Encode(bytes: Uint8Array): string;
+/** Decode a base58 string to bytes. */
+export declare function base58Decode(s: string): Uint8Array;
+export interface CompiledInstruction {
+    /** Index into accountKeys identifying the program to invoke. */
+    readonly programIdIndex: number;
+    /** Indices into accountKeys identifying the accounts the instruction touches. */
+    readonly accountKeyIndices: readonly number[];
+    /** Instruction data bytes (program-specific). */
+    readonly data: Uint8Array;
+}
+export interface CompiledMessage {
+    readonly numRequiredSignatures: number;
+    readonly numReadonlySignedAccounts: number;
+    readonly numReadonlyUnsignedAccounts: number;
+    /** 32-byte pubkeys, signers first then read-only signers, then writable
+     *  non-signers, then read-only non-signers — as produced by the Solana
+     *  message compiler. */
+    readonly accountKeys: readonly Uint8Array[];
+    readonly recentBlockhash: Uint8Array;
+    readonly instructions: readonly CompiledInstruction[];
+}
+/**
+ * Serialise a CompiledMessage to its on-the-wire bytes (legacy format).
+ *
+ * Layout:
+ *   header (3 bytes)
+ *   compact-array(account-keys, each 32 bytes)
+ *   recent_blockhash (32 bytes)
+ *   compact-array(instructions)
+ *     each instruction:
+ *       u8 program_id_index
+ *       compact-array(account_indices, u8 each)
+ *       compact-array(data, u8 each)
+ */
+export declare function serializeCompiledMessage(msg: CompiledMessage): Uint8Array;
+/**
+ * Build the wire-format signed transaction:
+ *   compact-array(signatures, each 64 bytes) || message_bytes
+ *
+ * Signature count must equal `message.numRequiredSignatures`. Solana clients
+ * reject mismatches.
+ */
+export declare function serializeTransaction(message: CompiledMessage, signatures: readonly Uint8Array[]): Uint8Array;
+//# sourceMappingURL=solana.d.ts.map

package/dist/crypto/solana.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana.d.ts","sourceRoot":"","sources":["../../src/crypto/solana.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAiBxD;AAED,8DAA8D;AAC9D,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,MAAM,GACV;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAYrC;AAaD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAyBtD;AAED,uCAAuC;AACvC,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CA2BlD;AAID,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C;;4BAEwB;IACxB,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,GAAG,UAAU,CA+BzE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,SAAS,UAAU,EAAE,GAChC,UAAU,CAcZ"}

package/dist/crypto/solana.js

@@ -0,0 +1,218 @@
+/**
+ * Minimal Solana wire-format primitives.
+ *
+ * What's here, and why:
+ *   - **compact-array length encoding** ("short_vec"): base-128 varint with
+ *     high-bit continuation. Used for the count prefix on Solana arrays
+ *     (signatures, account keys, instructions, instruction data, etc.).
+ *   - **base58** (Bitcoin alphabet): Solana pubkeys, addresses, and tx
+ *     signatures all serialise as base58. We need both directions because
+ *     `SurfaceKey.address` for the SVM surface stores the base58 form.
+ *   - **legacy compiled-message** + **transaction** serialisation: the byte
+ *     layout `solana-validator` accepts on `sendTransaction`.
+ *
+ * Why not @solana/web3.js: it pulls in Buffer + Node crypto polyfills, and
+ * we need a pure-JS, browser-clean kernel package. The slice we use here is
+ * a few hundred lines; vendoring is cheaper than the dep tree.
+ *
+ * Scope deliberately narrow: legacy message (not Message-v0 with address
+ * lookup tables — that's an M5+ optimisation when we have a working
+ * pointer flow first). The Tenzro precompile's SVM-side trigger is a single
+ * system-program-style instruction, which legacy messages handle fine.
+ *
+ * Refs:
+ *   - https://docs.solana.com/developing/programming-model/transactions
+ *   - https://docs.solana.com/developing/clients/jsonrpc-api#sendtransaction
+ *   - https://github.com/solana-labs/solana/blob/master/sdk/program/src/short_vec.rs
+ */
+// ──────────────────────────── compact-array ────────────────────────────
+/**
+ * Encode an unsigned integer as Solana short_vec (1–3 bytes for values up to
+ * 2^21 - 1, sufficient for any tx field count).
+ */
+export function compactArrayLength(n) {
+    if (!Number.isInteger(n) || n < 0) {
+        throw new Error(`compact-array length must be a non-negative integer, got ${n}`);
+    }
+    const bytes = [];
+    let v = n;
+    while (true) {
+        let b = v & 0x7f;
+        v >>>= 7;
+        if (v === 0) {
+            bytes.push(b);
+            break;
+        }
+        b |= 0x80;
+        bytes.push(b);
+    }
+    return new Uint8Array(bytes);
+}
+/** Decode a short_vec length from `buf` starting at `off`. */
+export function readCompactArrayLength(buf, off) {
+    let value = 0;
+    let consumed = 0;
+    for (let shift = 0;; shift += 7) {
+        const b = buf[off + consumed];
+        if (b === undefined)
+            throw new Error('short_vec: short read');
+        consumed += 1;
+        value |= (b & 0x7f) << shift;
+        if ((b & 0x80) === 0)
+            break;
+        if (consumed > 3)
+            throw new Error('short_vec: overlong');
+    }
+    return { value, consumed };
+}
+// ─────────────────────────────── base58 ───────────────────────────────
+const B58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+const B58_INDEX = (() => {
+    const idx = new Array(128).fill(-1);
+    for (let i = 0; i < B58_ALPHABET.length; i++) {
+        idx[B58_ALPHABET.charCodeAt(i)] = i;
+    }
+    return idx;
+})();
+/**
+ * Encode bytes to base58. Leading zeros become leading '1's per the Bitcoin
+ * convention used by Solana.
+ */
+export function base58Encode(bytes) {
+    if (bytes.length === 0)
+        return '';
+    // Count leading zeros.
+    let zeros = 0;
+    while (zeros < bytes.length && bytes[zeros] === 0)
+        zeros++;
+    // Convert big-endian bytes to a base-58 array.
+    const size = ((bytes.length - zeros) * 138) / 100 + 1; // log(256)/log(58) ≈ 1.366
+    const b58 = new Uint8Array(Math.ceil(size));
+    let length = 0;
+    for (let i = zeros; i < bytes.length; i++) {
+        let carry = bytes[i];
+        let j = 0;
+        for (let k = b58.length - 1; (carry !== 0 || j < length) && k >= 0; k--, j++) {
+            carry += 256 * b58[k];
+            b58[k] = carry % 58;
+            carry = (carry / 58) | 0;
+        }
+        length = j;
+    }
+    // Skip leading zeros in the result.
+    let it = b58.length - length;
+    while (it < b58.length && b58[it] === 0)
+        it++;
+    let out = '1'.repeat(zeros);
+    for (; it < b58.length; it++)
+        out += B58_ALPHABET[b58[it]];
+    return out;
+}
+/** Decode a base58 string to bytes. */
+export function base58Decode(s) {
+    if (s.length === 0)
+        return new Uint8Array(0);
+    let zeros = 0;
+    while (zeros < s.length && s[zeros] === '1')
+        zeros++;
+    const size = ((s.length - zeros) * 733) / 1000 + 1; // log(58)/log(256) ≈ 0.733
+    const b256 = new Uint8Array(Math.ceil(size));
+    let length = 0;
+    for (let i = zeros; i < s.length; i++) {
+        const code = s.charCodeAt(i);
+        const digit = code < 128 ? (B58_INDEX[code] ?? -1) : -1;
+        if (digit < 0)
+            throw new Error(`base58: invalid character at ${i}`);
+        let carry = digit;
+        let j = 0;
+        for (let k = b256.length - 1; (carry !== 0 || j < length) && k >= 0; k--, j++) {
+            carry += 58 * b256[k];
+            b256[k] = carry & 0xff;
+            carry >>>= 8;
+        }
+        length = j;
+    }
+    let it = b256.length - length;
+    while (it < b256.length && b256[it] === 0)
+        it++;
+    const out = new Uint8Array(zeros + (b256.length - it));
+    // leading zeros stay zero (Uint8Array is zero-init), copy the tail
+    let dst = zeros;
+    for (; it < b256.length; it++, dst++)
+        out[dst] = b256[it];
+    return out;
+}
+/**
+ * Serialise a CompiledMessage to its on-the-wire bytes (legacy format).
+ *
+ * Layout:
+ *   header (3 bytes)
+ *   compact-array(account-keys, each 32 bytes)
+ *   recent_blockhash (32 bytes)
+ *   compact-array(instructions)
+ *     each instruction:
+ *       u8 program_id_index
+ *       compact-array(account_indices, u8 each)
+ *       compact-array(data, u8 each)
+ */
+export function serializeCompiledMessage(msg) {
+    const parts = [];
+    parts.push(new Uint8Array([
+        msg.numRequiredSignatures,
+        msg.numReadonlySignedAccounts,
+        msg.numReadonlyUnsignedAccounts,
+    ]));
+    parts.push(compactArrayLength(msg.accountKeys.length));
+    for (const k of msg.accountKeys) {
+        if (k.length !== 32)
+            throw new Error(`account key must be 32 bytes, got ${k.length}`);
+        parts.push(k);
+    }
+    if (msg.recentBlockhash.length !== 32) {
+        throw new Error('recent_blockhash must be 32 bytes');
+    }
+    parts.push(msg.recentBlockhash);
+    parts.push(compactArrayLength(msg.instructions.length));
+    for (const ix of msg.instructions) {
+        parts.push(new Uint8Array([ix.programIdIndex]));
+        parts.push(compactArrayLength(ix.accountKeyIndices.length));
+        parts.push(new Uint8Array(ix.accountKeyIndices));
+        parts.push(compactArrayLength(ix.data.length));
+        parts.push(ix.data);
+    }
+    return concat(parts);
+}
+/**
+ * Build the wire-format signed transaction:
+ *   compact-array(signatures, each 64 bytes) || message_bytes
+ *
+ * Signature count must equal `message.numRequiredSignatures`. Solana clients
+ * reject mismatches.
+ */
+export function serializeTransaction(message, signatures) {
+    if (signatures.length !== message.numRequiredSignatures) {
+        throw new Error(`expected ${message.numRequiredSignatures} signatures, got ${signatures.length}`);
+    }
+    const messageBytes = serializeCompiledMessage(message);
+    const parts = [compactArrayLength(signatures.length)];
+    for (const s of signatures) {
+        if (s.length !== 64)
+            throw new Error(`Ed25519 sig must be 64 bytes, got ${s.length}`);
+        parts.push(s);
+    }
+    parts.push(messageBytes);
+    return concat(parts);
+}
+function concat(parts) {
+    let total = 0;
+    for (const p of parts)
+        total += p.length;
+    const out = new Uint8Array(total);
+    let off = 0;
+    for (const p of parts) {
+        out.set(p, off);
+        off += p.length;
+    }
+    return out;
+}
+//# sourceMappingURL=solana.js.map

package/dist/crypto/solana.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana.js","sourceRoot":"","sources":["../../src/crypto/solana.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,0EAA0E;AAE1E;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAS;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACjB,CAAC,MAAM,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,MAAM;QACR,CAAC;QACD,CAAC,IAAI,IAAI,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,sBAAsB,CACpC,GAAe,EACf,GAAW;IAEX,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,GAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC9D,QAAQ,IAAI,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC;QAC7B,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM;QAC5B,IAAI,QAAQ,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,yEAAyE;AAEzE,MAAM,YAAY,GAAG,4DAA4D,CAAC;AAClF,MAAM,SAAS,GAAa,CAAC,GAAG,EAAE;IAChC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC,EAAE,CAAC;AAEL;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,uBAAuB;IACvB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,CAAC;IAC3D,+CAA+C;IAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,2BAA2B;IAClF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7E,KAAK,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;YACvB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;YACpB,KAAK,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,CAAC,CAAC;IACb,CAAC;IACD,oCAAoC;IACpC,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IAC7B,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,CAAC;IAC9C,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE;QAAE,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;IAC5D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG;QAAE,KAAK,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,2BAA2B;IAC/E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9E,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;YACvB,KAAK,MAAM,CAAC,CAAC;QACf,CAAC;QACD,MAAM,GAAG,CAAC,CAAC;IACb,CAAC;IACD,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAC9B,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;IACvD,mEAAmE;IACnE,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAE,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAyBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAoB;IAC3D,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,CAAC,IAAI,CACR,IAAI,UAAU,CAAC;QACb,GAAG,CAAC,qBAAqB;QACzB,GAAG,CAAC,yBAAyB;QAC7B,GAAG,CAAC,2BAA2B;KAChC,CAAC,CACH,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAEhC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAwB,EACxB,UAAiC;IAEjC,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,CAAC,qBAAqB,oBAAoB,UAAU,CAAC,MAAM,EAAE,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,KAAK,GAAiB,CAAC,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,MAAM,CAAC,KAA4B;IAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/custody/frost/backend.d.ts

@@ -0,0 +1,59 @@
+/**
+ * FrostBackend — device-side FROST round computation.
+ *
+ * The wallet kernel does not bundle a FROST library. The choice (per
+ * 2026 audit landscape — NCC Group's October 2023 review of the
+ * Zcash Foundation `frost` crates is the only completed audit of a
+ * pure-Rust FROST implementation that covers both Ed25519 (RFC 9591)
+ * and secp256k1) is to wrap the ZF crates as WebAssembly via
+ * `wasm-bindgen` and inject the resulting binding through the
+ * `FrostBackend` port at host-app construction time. The kernel only
+ * needs the port surface defined alongside the unwrapper:
+ *
+ *   ```ts
+ *   import type { FrostBackend } from '../passkey-share/unwrapper.js';
+ *   ```
+ *
+ * Two reference backends ship in this file:
+ *
+ *   - `frostBackendUnavailable()` — a typed-throw stub. Used until the
+ *     host app links a real binding. Throwing here (instead of letting
+ *     the FROST drivers fail mid-round with "undefined is not callable")
+ *     keeps the failure mode legible.
+ *
+ *   - `composeFrostBackend(...)` — small dispatch helper for hosts that
+ *     ship two distinct WASM bundles per scheme. The Ed25519 bundle and
+ *     secp256k1 bundle are independent crates upstream
+ *     (`frost-ed25519`, `frost-secp256k1`), so most hosts will load them
+ *     separately and join them at this seam.
+ *
+ * Browser-clean: no Node-specific globals, no DOM dependencies. The
+ * eventual WASM binding sits behind dynamic `import()` so SSR / Node
+ * tests that don't exercise FROST never touch the WASM module.
+ */
+import type { FrostBackend, ShareUnwrapRequest } from '../passkey-share/unwrapper.js';
+import type { FrostScheme } from './coordinator.js';
+export declare class FrostBackendUnavailable extends Error {
+    readonly scheme: FrostScheme | undefined;
+    constructor(scheme: FrostScheme | undefined);
+}
+/**
+ * Default backend that fails loudly. Wire a real FROST library in via
+ * `composeFrostBackend()` (or your own implementation) before any
+ * signing flow runs.
+ */
+export declare function frostBackendUnavailable(): FrostBackend;
+/**
+ * Compose per-scheme backends into a single `FrostBackend`. Lets hosts
+ * load WASM bundles lazily (e.g. dynamic `import()` per curve) and join
+ * them here without the kernel learning about loaders.
+ *
+ * Either backend may be omitted; calls into a missing scheme throw
+ * `FrostBackendUnavailable`.
+ */
+export declare function composeFrostBackend(parts: {
+    readonly ed25519?: FrostBackend;
+    readonly secp256k1?: FrostBackend;
+}): FrostBackend;
+export type { FrostBackend, ShareUnwrapRequest };
+//# sourceMappingURL=backend.d.ts.map

package/dist/custody/frost/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../../src/custody/frost/backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,qBAAa,uBAAwB,SAAQ,KAAK;IACpC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS;gBAA/B,MAAM,EAAE,WAAW,GAAG,SAAS;CAQrD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,YAAY,CAkBtD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC;CACnC,GAAG,YAAY,CAcf;AAID,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/custody/frost/backend.js

@@ -0,0 +1,83 @@
+/**
+ * FrostBackend — device-side FROST round computation.
+ *
+ * The wallet kernel does not bundle a FROST library. The choice (per
+ * 2026 audit landscape — NCC Group's October 2023 review of the
+ * Zcash Foundation `frost` crates is the only completed audit of a
+ * pure-Rust FROST implementation that covers both Ed25519 (RFC 9591)
+ * and secp256k1) is to wrap the ZF crates as WebAssembly via
+ * `wasm-bindgen` and inject the resulting binding through the
+ * `FrostBackend` port at host-app construction time. The kernel only
+ * needs the port surface defined alongside the unwrapper:
+ *
+ *   ```ts
+ *   import type { FrostBackend } from '../passkey-share/unwrapper.ts';
+ *   ```
+ *
+ * Two reference backends ship in this file:
+ *
+ *   - `frostBackendUnavailable()` — a typed-throw stub. Used until the
+ *     host app links a real binding. Throwing here (instead of letting
+ *     the FROST drivers fail mid-round with "undefined is not callable")
+ *     keeps the failure mode legible.
+ *
+ *   - `composeFrostBackend(...)` — small dispatch helper for hosts that
+ *     ship two distinct WASM bundles per scheme. The Ed25519 bundle and
+ *     secp256k1 bundle are independent crates upstream
+ *     (`frost-ed25519`, `frost-secp256k1`), so most hosts will load them
+ *     separately and join them at this seam.
+ *
+ * Browser-clean: no Node-specific globals, no DOM dependencies. The
+ * eventual WASM binding sits behind dynamic `import()` so SSR / Node
+ * tests that don't exercise FROST never touch the WASM module.
+ */
+export class FrostBackendUnavailable extends Error {
+    scheme;
+    constructor(scheme) {
+        super(`FROST backend not configured${scheme ? ` for ${scheme}` : ''}: ` +
+            'host app must inject a real FrostBackend (e.g. WASM-wrapped ' +
+            'frost-ed25519 / frost-secp256k1) before signing.');
+        this.scheme = scheme;
+        this.name = 'FrostBackendUnavailable';
+    }
+}
+/**
+ * Default backend that fails loudly. Wire a real FROST library in via
+ * `composeFrostBackend()` (or your own implementation) before any
+ * signing flow runs.
+ */
+export function frostBackendUnavailable() {
+    return {
+        async commit({ scheme }) {
+            throw new FrostBackendUnavailable(scheme);
+        },
+        async respond({ scheme, }) {
+            throw new FrostBackendUnavailable(scheme);
+        },
+    };
+}
+/**
+ * Compose per-scheme backends into a single `FrostBackend`. Lets hosts
+ * load WASM bundles lazily (e.g. dynamic `import()` per curve) and join
+ * them here without the kernel learning about loaders.
+ *
+ * Either backend may be omitted; calls into a missing scheme throw
+ * `FrostBackendUnavailable`.
+ */
+export function composeFrostBackend(parts) {
+    function pick(scheme) {
+        const got = scheme === 'ed25519' ? parts.ed25519 : parts.secp256k1;
+        if (!got)
+            throw new FrostBackendUnavailable(scheme);
+        return got;
+    }
+    return {
+        async commit(args) {
+            return pick(args.scheme).commit(args);
+        },
+        async respond(args) {
+            return pick(args.scheme).respond(args);
+        },
+    };
+}
+//# sourceMappingURL=backend.js.map

package/dist/custody/frost/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../../src/custody/frost/backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B;IAArB,YAAqB,MAA+B;QAClD,KAAK,CACH,+BAA+B,MAAM,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI;YAC/D,8DAA8D;YAC9D,kDAAkD,CACrD,CAAC;QALiB,WAAM,GAAN,MAAM,CAAyB;QAMlD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAA8C;YACjE,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EACZ,MAAM,GAQP;YACC,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAGnC;IACC,SAAS,IAAI,CAAC,MAAmB;QAC/B,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;QACnE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/custody/frost/coordinator.d.ts

@@ -0,0 +1,148 @@
+/**
+ * FrostCoordinator — wallet-side view of the FROST round-coordination
+ * protocol the node hosts at `/wallet/frost/*`. Specified in DESIGN.md
+ * §4.3.4 + §11. Wraps two parallel curves:
+ *
+ *   - FROST-Ed25519 (RFC 9591)         → driver id `frost-ed25519`
+ *   - FROST-secp256k1 (taproot-ready)  → driver id `frost-secp256k1`
+ *
+ * Both curves use the same 3-round flow. The wallet device holds one
+ * secret share (passkey-bound, unwrapped per signing). The node-TEE
+ * holds the second share. A 2-of-2 quorum signs; for 2-of-3 (post-
+ * pairing) any two of {device A, device B, node-TEE} can co-sign.
+ *
+ * Tenzro endpoints (Tenzro implements; wallet kernel only consumes):
+ *
+ *   1. `start({did, scheme, preimage, surfaceKey, purpose?})`
+ *      → `POST /wallet/frost/{scheme}/start`
+ *      Response: `{sessionId, expiresAt, participants[]}` where
+ *      `participants` is the list of co-signer identifiers (passkey
+ *      cred-ids + `node-tee`) the node will round-coordinate against.
+ *
+ *   2. `commit({sessionId, deviceCommitment})`
+ *      → `POST /wallet/frost/{scheme}/commit`
+ *      Round 1: device submits its hiding/binding commitments
+ *      (`(D_i, E_i)` per RFC 9591 §4.1). Response: `{state}`. The node
+ *      blocks the response until enough commitments are in or
+ *      `state === 'aborted'`.
+ *
+ *   3. `awaitChallenge({sessionId})`
+ *      → `POST /wallet/frost/{scheme}/await-challenge`
+ *      Round 2: device long-polls for the aggregated commitment +
+ *      Lagrange-coefficient bundle the node assembled from all
+ *      participants. Response: `{groupCommitment, signerSet, lambda}`.
+ *
+ *   4. `respond({sessionId, deviceShare})`
+ *      → `POST /wallet/frost/{scheme}/respond`
+ *      Round 3: device submits its signature share `z_i`. Response:
+ *      `{state}`. Successful responses commit the share into the round.
+ *
+ *   5. `finalize({sessionId})`
+ *      → `POST /wallet/frost/{scheme}/finalize`
+ *      Device polls for the aggregated signature. Response:
+ *      `{signature}`. Once aggregated, the round is destroyed and
+ *      cannot be replayed.
+ *
+ *   6. `abort({sessionId, reason?})`
+ *      → `POST /wallet/frost/{scheme}/abort`
+ *      Idempotent. Used when the user cancels mid-round.
+ *
+ * The port is intentionally agnostic about how device shares are
+ * unwrapped — that's the passkey-quorum custody layer. The coordinator
+ * only carries opaque commitment / share bytes that the device-side
+ * FROST library produced.
+ *
+ * Browser-clean: `fetch` only. No Node-specific globals.
+ */
+export type FrostScheme = 'ed25519' | 'secp256k1';
+export type FrostSessionState = 'pending' | 'committed' | 'responded' | 'finalized' | 'aborted' | 'expired';
+/**
+ * Identifier of a single FROST participant. The node maps these to
+ * passkey credential ids / `node-tee`. The device only needs them to
+ * verify the `signerSet` returned in round 2 includes itself.
+ */
+export type FrostParticipantId = string;
+export interface FrostStartRequest {
+    /** TDIP DID whose surface key is being signed for. */
+    readonly did: string;
+    /** Stable id of the surface key (matches `SurfaceKey.keyId`). */
+    readonly surfaceKey: string;
+    readonly scheme: FrostScheme;
+    /** Canonical preimage bytes — surface module canonicalised. */
+    readonly preimage: Uint8Array;
+    /** Optional context tag for the audit log. */
+    readonly purpose?: string;
+}
+export interface FrostStartResult {
+    readonly sessionId: string;
+    /** Unix-ms timestamp when this session is dropped. */
+    readonly expiresAt: number;
+    /** Set of co-signers the node will coordinate. Includes this device. */
+    readonly participants: readonly FrostParticipantId[];
+}
+export interface FrostCommitRequest {
+    readonly sessionId: string;
+    /** RFC 9591 commitment bundle `(D_i, E_i)` produced device-side,
+     *  serialized as opaque bytes. The node only forwards/aggregates. */
+    readonly deviceCommitment: Uint8Array;
+}
+export interface FrostCommitResult {
+    readonly sessionId: string;
+    readonly state: FrostSessionState;
+}
+export interface FrostChallenge {
+    readonly sessionId: string;
+    readonly state: FrostSessionState;
+    /** Aggregated group commitment `R = Σ D_i + ρ_i·E_i`, opaque bytes. */
+    readonly groupCommitment: Uint8Array;
+    /** Final signer set chosen for this round (subset of `participants`). */
+    readonly signerSet: readonly FrostParticipantId[];
+    /** Lagrange coefficient λ_i for *this device*, encoded as scalar bytes
+     *  (curve-dependent: 32 bytes for Ed25519, 32 bytes for secp256k1). */
+    readonly lambda: Uint8Array;
+}
+export interface FrostRespondRequest {
+    readonly sessionId: string;
+    /** Device's signature share `z_i`, opaque bytes. */
+    readonly deviceShare: Uint8Array;
+}
+export interface FrostRespondResult {
+    readonly sessionId: string;
+    readonly state: FrostSessionState;
+}
+export interface FrostFinalizeResult {
+    readonly sessionId: string;
+    readonly state: FrostSessionState;
+    /** Aggregated signature, wire-format. 64 bytes for Ed25519, 64-65 for
+     *  secp256k1 (sans recovery byte; surface module appends `v` if
+     *  needed by recomputing it). Set when `state === 'finalized'`. */
+    readonly signature?: Uint8Array;
+}
+export interface FrostCoordinator {
+    start(req: FrostStartRequest): Promise<FrostStartResult>;
+    commit(req: FrostCommitRequest): Promise<FrostCommitResult>;
+    awaitChallenge(sessionId: string): Promise<FrostChallenge>;
+    respond(req: FrostRespondRequest): Promise<FrostRespondResult>;
+    finalize(sessionId: string): Promise<FrostFinalizeResult>;
+    abort(sessionId: string, reason?: string): Promise<void>;
+}
+/**
+ * Device-side share-holder. Produced by the passkey-unwrap layer; the
+ * FROST drivers don't care how the share was obtained, only that the
+ * holder can produce a commitment and a response on demand.
+ */
+export interface FrostDeviceShareHolder {
+    readonly scheme: FrostScheme;
+    /** Round 1 — produce `(D_i, E_i)` commitment bytes. */
+    commit(): Promise<Uint8Array>;
+    /** Round 3 — produce `z_i` from the round-2 challenge bundle. */
+    respond(args: {
+        readonly preimage: Uint8Array;
+        readonly groupCommitment: Uint8Array;
+        readonly signerSet: readonly FrostParticipantId[];
+        readonly lambda: Uint8Array;
+    }): Promise<Uint8Array>;
+    /** Best-effort wipe of any in-memory secret material. */
+    dispose?(): void;
+}
+//# sourceMappingURL=coordinator.d.ts.map

package/dist/custody/frost/coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.d.ts","sourceRoot":"","sources":["../../../src/custody/frost/coordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;AAElD,MAAM,MAAM,iBAAiB,GACzB,SAAS,GACT,WAAW,GACX,WAAW,GACX,WAAW,GACX,SAAS,GACT,SAAS,CAAC;AAEd;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAExC,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;yEACqE;IACrE,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD;2EACuE;IACvE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC;;uEAEmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/D,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1D,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,uDAAuD;IACvD,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9B,iEAAiE;IACjE,OAAO,CAAC,IAAI,EAAE;QACZ,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;QACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;QAClD,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;KAC7B,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,yDAAyD;IACzD,OAAO,CAAC,IAAI,IAAI,CAAC;CAClB"}