wowok 2.1.10 → 2.1.13

package/dist/esm/keypairs/passkey/keypair.js

@@ -1,258 +1,251 @@
-var __defProp = Object.defineProperty;
-var __typeError = (msg) => {
-  throw TypeError(msg);
-};
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
-var __accessCheck = (obj, member, msg) => member.has(obj) || __typeError("Cannot " + msg);
-var __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read from private field"), getter ? getter.call(obj) : member.get(obj));
-var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot add the same private member more than once") : member instanceof WeakSet ? member.add(obj) : member.set(obj, value);
-var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
-var _name, _options;
+// Copyright (c) Mysten Labs, Inc.
+// SPDX-License-Identifier: Apache-2.0
 import { toBase64 } from "@mysten/bcs";
 import { secp256r1 } from "@noble/curves/p256";
 import { blake2b } from "@noble/hashes/blake2b";
 import { sha256 } from "@noble/hashes/sha256";
 import { randomBytes } from "@noble/hashes/utils";
 import { PasskeyAuthenticator } from "../../bcs/bcs.js";
-import {
-  messageWithIntent,
-  SIGNATURE_SCHEME_TO_FLAG,
-  Signer
-} from "../../cryptography/index.js";
-import {
-  parseDerSPKI,
-  PASSKEY_PUBLIC_KEY_SIZE,
-  PASSKEY_SIGNATURE_SIZE,
-  PasskeyPublicKey
-} from "./publickey.js";
-class BrowserPasskeyProvider {
-  constructor(name, options) {
-    __privateAdd(this, _name);
-    __privateAdd(this, _options);
-    __privateSet(this, _name, name);
-    __privateSet(this, _options, options);
-  }
-  async create() {
-    return await navigator.credentials.create({
-      publicKey: {
-        timeout: __privateGet(this, _options).timeout ?? 6e4,
-        ...__privateGet(this, _options),
-        rp: {
-          name: __privateGet(this, _name),
-          ...__privateGet(this, _options).rp
-        },
-        user: {
-          name: __privateGet(this, _name),
-          displayName: __privateGet(this, _name),
-          ...__privateGet(this, _options).user,
-          id: randomBytes(10)
-        },
-        challenge: new TextEncoder().encode(
-          "Create passkey wallet on Sui"
-        ),
-        pubKeyCredParams: [{ alg: -7, type: "public-key" }],
-        authenticatorSelection: {
-          authenticatorAttachment: "cross-platform",
-          residentKey: "required",
-          requireResidentKey: true,
-          userVerification: "required",
-          ...__privateGet(this, _options).authenticatorSelection
-        }
-      }
-    });
-  }
-  async get(challenge) {
-    return await navigator.credentials.get({
-      publicKey: {
-        challenge,
-        userVerification: __privateGet(this, _options).authenticatorSelection?.userVerification || "required",
-        timeout: __privateGet(this, _options).timeout ?? 6e4
-      }
-    });
-  }
+import { messageWithIntent, SIGNATURE_SCHEME_TO_FLAG, Signer, } from "../../cryptography/index.js";
+import { parseDerSPKI, PASSKEY_PUBLIC_KEY_SIZE, PASSKEY_SIGNATURE_SIZE, PasskeyPublicKey, } from "./publickey.js";
+// Default browser implementation
+export class BrowserPasskeyProvider {
+    #name;
+    #options;
+    constructor(name, options) {
+        this.#name = name;
+        this.#options = options;
+    }
+    async create() {
+        return (await navigator.credentials.create({
+            publicKey: {
+                timeout: this.#options.timeout ?? 60000,
+                ...this.#options,
+                rp: {
+                    name: this.#name,
+                    ...this.#options.rp,
+                },
+                user: {
+                    name: this.#name,
+                    displayName: this.#name,
+                    ...this.#options.user,
+                    id: randomBytes(10),
+                },
+                challenge: new TextEncoder().encode("Create passkey wallet on Sui"),
+                pubKeyCredParams: [{ alg: -7, type: "public-key" }],
+                authenticatorSelection: {
+                    authenticatorAttachment: "cross-platform",
+                    residentKey: "required",
+                    requireResidentKey: true,
+                    userVerification: "required",
+                    ...this.#options.authenticatorSelection,
+                },
+            },
+        }));
+    }
+    async get(challenge) {
+        return (await navigator.credentials.get({
+            publicKey: {
+                challenge: challenge,
+                userVerification: this.#options.authenticatorSelection?.userVerification ||
+                    "required",
+                timeout: this.#options.timeout ?? 60000,
+            },
+        }));
+    }
 }
-_name = new WeakMap();
-_options = new WeakMap();
-class PasskeyKeypair extends Signer {
-  /**
-   * Creates an instance of Passkey signer. If no passkey wallet had created before,
-   * use `getPasskeyInstance`. For example:
-   * ```
-   * let provider = new BrowserPasskeyProvider('Sui Passkey Example',{
-   * 	  rpName: 'Sui Passkey Example',
-   * 	  rpId: window.location.hostname,
-   * } as BrowserPasswordProviderOptions);
-   * const signer = await PasskeyKeypair.getPasskeyInstance(provider);
-   * ```
-   *
-   * If there are existing passkey wallet, use `signAndRecover` to identify the correct
-   * public key and then initialize the instance. See usage in `signAndRecover`.
-   */
-  constructor(publicKey, provider) {
-    super();
-    __publicField(this, "publicKey");
-    __publicField(this, "provider");
-    this.publicKey = publicKey;
-    this.provider = provider;
-  }
-  /**
-   * Get the key scheme of passkey,
-   */
-  getKeyScheme() {
-    return "Passkey";
-  }
-  /**
-   * Creates an instance of Passkey signer invoking the passkey from navigator.
-   * Note that this will invoke the passkey device to create a fresh credential.
-   * Should only be called if passkey wallet is created for the first time.
-   *
-   * @param provider - the passkey provider.
-   * @returns the passkey instance.
-   */
-  static async getPasskeyInstance(provider) {
-    const credential = await provider.create();
-    if (!credential.response.getPublicKey()) {
-      throw new Error("Invalid credential create response");
-    } else {
-      const derSPKI = credential.response.getPublicKey();
-      const pubkeyUncompressed = parseDerSPKI(new Uint8Array(derSPKI));
-      const pubkey = secp256r1.ProjectivePoint.fromHex(pubkeyUncompressed);
-      const pubkeyCompressed = pubkey.toRawBytes(true);
-      return new PasskeyKeypair(pubkeyCompressed, provider);
+/**
+ * @experimental
+ * A passkey signer used for signing transactions. This is a client side implementation for [SIP-9](https://github.com/sui-foundation/sips/blob/main/sips/sip-9.md).
+ */
+export class PasskeyKeypair extends Signer {
+    publicKey;
+    provider;
+    /**
+     * Get the key scheme of passkey,
+     */
+    getKeyScheme() {
+        return "Passkey";
+    }
+    /**
+     * Creates an instance of Passkey signer. If no passkey wallet had created before,
+     * use `getPasskeyInstance`. For example:
+     * ```
+     * let provider = new BrowserPasskeyProvider('Sui Passkey Example',{
+     * 	  rpName: 'Sui Passkey Example',
+     * 	  rpId: window.location.hostname,
+     * } as BrowserPasswordProviderOptions);
+     * const signer = await PasskeyKeypair.getPasskeyInstance(provider);
+     * ```
+     *
+     * If there are existing passkey wallet, use `signAndRecover` to identify the correct
+     * public key and then initialize the instance. See usage in `signAndRecover`.
+     */
+    constructor(publicKey, provider) {
+        super();
+        this.publicKey = publicKey;
+        this.provider = provider;
+    }
+    /**
+     * Creates an instance of Passkey signer invoking the passkey from navigator.
+     * Note that this will invoke the passkey device to create a fresh credential.
+     * Should only be called if passkey wallet is created for the first time.
+     *
+     * @param provider - the passkey provider.
+     * @returns the passkey instance.
+     */
+    static async getPasskeyInstance(provider) {
+        // create a passkey secp256r1 with the provider.
+        const credential = await provider.create();
+        if (!credential.response.getPublicKey()) {
+            throw new Error("Invalid credential create response");
+        }
+        else {
+            const derSPKI = credential.response.getPublicKey();
+            const pubkeyUncompressed = parseDerSPKI(new Uint8Array(derSPKI));
+            const pubkey = secp256r1.ProjectivePoint.fromHex(pubkeyUncompressed);
+            const pubkeyCompressed = pubkey.toRawBytes(true);
+            return new PasskeyKeypair(pubkeyCompressed, provider);
+        }
+    }
+    /**
+     * Return the public key for this passkey.
+     */
+    getPublicKey() {
+        return new PasskeyPublicKey(this.publicKey);
     }
-  }
-  /**
-   * Return the public key for this passkey.
-   */
-  getPublicKey() {
-    return new PasskeyPublicKey(this.publicKey);
-  }
-  /**
-   * Return the signature for the provided data (i.e. blake2b(intent_message)).
-   * This is sent to passkey as the challenge field.
-   */
-  async sign(data) {
-    const credential = await this.provider.get(data);
-    const authenticatorData = new Uint8Array(
-      credential.response.authenticatorData
-    );
-    const clientDataJSON = new Uint8Array(
-      credential.response.clientDataJSON
-    );
-    const decoder = new TextDecoder();
-    const clientDataJSONString = decoder.decode(clientDataJSON);
-    const sig = secp256r1.Signature.fromDER(
-      new Uint8Array(credential.response.signature)
-    );
-    const normalized = sig.normalizeS().toCompactRawBytes();
-    if (normalized.length !== PASSKEY_SIGNATURE_SIZE || this.publicKey.length !== PASSKEY_PUBLIC_KEY_SIZE) {
-      throw new Error("Invalid signature or public key length");
+    /**
+     * Return the signature for the provided data (i.e. blake2b(intent_message)).
+     * This is sent to passkey as the challenge field.
+     */
+    async sign(data) {
+        // asks the passkey to sign over challenge as the data.
+        const credential = await this.provider.get(data);
+        // parse authenticatorData (as bytes), clientDataJSON (decoded as string).
+        const authenticatorData = new Uint8Array(credential.response.authenticatorData);
+        const clientDataJSON = new Uint8Array(credential.response.clientDataJSON); // response.clientDataJSON is already UTF-8 encoded JSON
+        const decoder = new TextDecoder();
+        const clientDataJSONString = decoder.decode(clientDataJSON);
+        // parse the signature from DER format, normalize and convert to compressed format (33 bytes).
+        const sig = secp256r1.Signature.fromDER(new Uint8Array(credential.response.signature));
+        const normalized = sig.normalizeS().toCompactRawBytes();
+        if (normalized.length !== PASSKEY_SIGNATURE_SIZE ||
+            this.publicKey.length !== PASSKEY_PUBLIC_KEY_SIZE) {
+            throw new Error("Invalid signature or public key length");
+        }
+        // construct userSignature as flag || sig || pubkey for the secp256r1 signature.
+        const arr = new Uint8Array(1 + normalized.length + this.publicKey.length);
+        arr.set([SIGNATURE_SCHEME_TO_FLAG["Secp256r1"]]);
+        arr.set(normalized, 1);
+        arr.set(this.publicKey, 1 + normalized.length);
+        // serialize all fields into a passkey signature according to https://github.com/sui-foundation/sips/blob/main/sips/sip-9.md#signature-encoding
+        return PasskeyAuthenticator.serialize({
+            authenticatorData: authenticatorData,
+            clientDataJson: clientDataJSONString,
+            userSignature: arr,
+        }).toBytes();
     }
-    const arr = new Uint8Array(
-      1 + normalized.length + this.publicKey.length
-    );
-    arr.set([SIGNATURE_SCHEME_TO_FLAG["Secp256r1"]]);
-    arr.set(normalized, 1);
-    arr.set(this.publicKey, 1 + normalized.length);
-    return PasskeyAuthenticator.serialize({
-      authenticatorData,
-      clientDataJson: clientDataJSONString,
-      userSignature: arr
-    }).toBytes();
-  }
-  /**
-   * This overrides the base class implementation that accepts the raw bytes and signs its
-   * digest of the intent message, then serialize it with the passkey flag.
-   */
-  async signWithIntent(bytes, intent) {
-    const intentMessage = messageWithIntent(intent, bytes);
-    const digest = blake2b(intentMessage, { dkLen: 32 });
-    const signature = await this.sign(digest);
-    const serializedSignature = new Uint8Array(1 + signature.length);
-    serializedSignature.set([
-      SIGNATURE_SCHEME_TO_FLAG[this.getKeyScheme()]
-    ]);
-    serializedSignature.set(signature, 1);
-    return {
-      signature: toBase64(serializedSignature),
-      bytes: toBase64(bytes)
-    };
-  }
-  /**
-   * Given a message, asks the passkey device to sign it and return all (up to 4) possible public keys.
-   * See: https://bitcoin.stackexchange.com/questions/81232/how-is-public-key-extracted-from-message-digital-signature-address
-   *
-   * This is useful if the user previously created passkey wallet with the origin, but the wallet session
-   * does not have the public key / address. By calling this method twice with two different messages, the
-   * wallet can compare the returned public keys and uniquely identify the previously created passkey wallet
-   * using `findCommonPublicKey`.
-   *
-   * Alternatively, one call can be made and all possible public keys should be checked onchain to see if
-   * there is any assets.
-   *
-   * Once the correct public key is identified, a passkey instance can then be initialized with this public key.
-   *
-   * Example usage to recover wallet with two signing calls:
-   * ```
-   * let provider = new BrowserPasskeyProvider('Sui Passkey Example',{
-   *     rpName: 'Sui Passkey Example',
-   * 	   rpId: window.location.hostname,
-   * } as BrowserPasswordProviderOptions);
-   * const testMessage = new TextEncoder().encode('Hello world!');
-   * const possiblePks = await PasskeyKeypair.signAndRecover(provider, testMessage);
-   * const testMessage2 = new TextEncoder().encode('Hello world 2!');
-   * const possiblePks2 = await PasskeyKeypair.signAndRecover(provider, testMessage2);
-   * const commonPk = findCommonPublicKey(possiblePks, possiblePks2);
-   * const signer = new PasskeyKeypair(provider, commonPk.toRawBytes());
-   * ```
-   *
-   * @param provider - the passkey provider.
-   * @param message - the message to sign.
-   * @returns all possible public keys.
-   */
-  static async signAndRecover(provider, message) {
-    const credential = await provider.get(message);
-    const fullMessage = messageFromAssertionResponse(credential.response);
-    const sig = secp256r1.Signature.fromDER(
-      new Uint8Array(credential.response.signature)
-    );
-    const res = [];
-    for (let i = 0; i < 4; i++) {
-      const s = sig.addRecoveryBit(i);
-      try {
-        const pubkey = s.recoverPublicKey(sha256(fullMessage));
-        const pk = new PasskeyPublicKey(pubkey.toRawBytes(true));
-        res.push(pk);
-      } catch {
-        continue;
-      }
+    /**
+     * This overrides the base class implementation that accepts the raw bytes and signs its
+     * digest of the intent message, then serialize it with the passkey flag.
+     */
+    async signWithIntent(bytes, intent) {
+        // prepend it into an intent message and computes the digest.
+        const intentMessage = messageWithIntent(intent, bytes);
+        const digest = blake2b(intentMessage, { dkLen: 32 });
+        // sign the digest.
+        const signature = await this.sign(digest);
+        // prepend with the passkey flag.
+        const serializedSignature = new Uint8Array(1 + signature.length);
+        serializedSignature.set([
+            SIGNATURE_SCHEME_TO_FLAG[this.getKeyScheme()],
+        ]);
+        serializedSignature.set(signature, 1);
+        return {
+            signature: toBase64(serializedSignature),
+            bytes: toBase64(bytes),
+        };
+    }
+    /**
+     * Given a message, asks the passkey device to sign it and return all (up to 4) possible public keys.
+     * See: https://bitcoin.stackexchange.com/questions/81232/how-is-public-key-extracted-from-message-digital-signature-address
+     *
+     * This is useful if the user previously created passkey wallet with the origin, but the wallet session
+     * does not have the public key / address. By calling this method twice with two different messages, the
+     * wallet can compare the returned public keys and uniquely identify the previously created passkey wallet
+     * using `findCommonPublicKey`.
+     *
+     * Alternatively, one call can be made and all possible public keys should be checked onchain to see if
+     * there is any assets.
+     *
+     * Once the correct public key is identified, a passkey instance can then be initialized with this public key.
+     *
+     * Example usage to recover wallet with two signing calls:
+     * ```
+     * let provider = new BrowserPasskeyProvider('Sui Passkey Example',{
+     *     rpName: 'Sui Passkey Example',
+     * 	   rpId: window.location.hostname,
+     * } as BrowserPasswordProviderOptions);
+     * const testMessage = new TextEncoder().encode('Hello world!');
+     * const possiblePks = await PasskeyKeypair.signAndRecover(provider, testMessage);
+     * const testMessage2 = new TextEncoder().encode('Hello world 2!');
+     * const possiblePks2 = await PasskeyKeypair.signAndRecover(provider, testMessage2);
+     * const commonPk = findCommonPublicKey(possiblePks, possiblePks2);
+     * const signer = new PasskeyKeypair(provider, commonPk.toRawBytes());
+     * ```
+     *
+     * @param provider - the passkey provider.
+     * @param message - the message to sign.
+     * @returns all possible public keys.
+     */
+    static async signAndRecover(provider, message) {
+        const credential = await provider.get(message);
+        const fullMessage = messageFromAssertionResponse(credential.response);
+        const sig = secp256r1.Signature.fromDER(new Uint8Array(credential.response.signature));
+        const res = [];
+        for (let i = 0; i < 4; i++) {
+            const s = sig.addRecoveryBit(i);
+            try {
+                const pubkey = s.recoverPublicKey(sha256(fullMessage));
+                const pk = new PasskeyPublicKey(pubkey.toRawBytes(true));
+                res.push(pk);
+            }
+            catch {
+                continue;
+            }
+        }
+        return res;
     }
-    return res;
-  }
 }
-function findCommonPublicKey(arr1, arr2) {
-  const matchingPubkeys = [];
-  for (const pubkey1 of arr1) {
-    for (const pubkey2 of arr2) {
-      if (pubkey1.equals(pubkey2)) {
-        matchingPubkeys.push(pubkey1);
-      }
+/**
+ * Finds the unique public key that exists in both arrays, throws error if the common
+ * pubkey does not equal to one.
+ *
+ * @param arr1 - The first pubkeys array.
+ * @param arr2 - The second pubkeys array.
+ * @returns The only common pubkey in both arrays.
+ */
+export function findCommonPublicKey(arr1, arr2) {
+    const matchingPubkeys = [];
+    for (const pubkey1 of arr1) {
+        for (const pubkey2 of arr2) {
+            if (pubkey1.equals(pubkey2)) {
+                matchingPubkeys.push(pubkey1);
+            }
+        }
+    }
+    if (matchingPubkeys.length !== 1) {
+        throw new Error("No unique public key found");
     }
-  }
-  if (matchingPubkeys.length !== 1) {
-    throw new Error("No unique public key found");
-  }
-  return matchingPubkeys[0];
+    return matchingPubkeys[0];
 }
+/**
+ * Constructs the message that the passkey signature is produced over as authenticatorData || sha256(clientDataJSON).
+ */
 function messageFromAssertionResponse(response) {
-  const authenticatorData = new Uint8Array(response.authenticatorData);
-  const clientDataJSON = new Uint8Array(response.clientDataJSON);
-  const clientDataJSONDigest = sha256(clientDataJSON);
-  return new Uint8Array([...authenticatorData, ...clientDataJSONDigest]);
+    const authenticatorData = new Uint8Array(response.authenticatorData);
+    const clientDataJSON = new Uint8Array(response.clientDataJSON);
+    const clientDataJSONDigest = sha256(clientDataJSON);
+    return new Uint8Array([...authenticatorData, ...clientDataJSONDigest]);
 }
-export {
-  BrowserPasskeyProvider,
-  PasskeyKeypair,
-  findCommonPublicKey
-};
+//# sourceMappingURL=keypair.js.map

package/dist/esm/keypairs/passkey/keypair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keypair.js","sourceRoot":"","sources":["../../../../src/keypairs/passkey/keypair.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,sCAAsC;AAEtC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAKxD,OAAO,EACN,iBAAiB,EACjB,wBAAwB,EACxB,MAAM,GACN,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EACN,YAAY,EACZ,uBAAuB,EACvB,sBAAsB,EACtB,gBAAgB,GAChB,MAAM,gBAAgB,CAAC;AA4BxB,iCAAiC;AACjC,MAAM,OAAO,sBAAsB;IAClC,KAAK,CAAS;IACd,QAAQ,CAAiC;IAEzC,YAAY,IAAY,EAAE,OAAuC;QAChE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM;QACX,OAAO,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC;YAC1C,SAAS,EAAE;gBACV,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK;gBACvC,GAAG,IAAI,CAAC,QAAQ;gBAChB,EAAE,EAAE;oBACH,IAAI,EAAE,IAAI,CAAC,KAAK;oBAChB,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE;iBACnB;gBACD,IAAI,EAAE;oBACL,IAAI,EAAE,IAAI,CAAC,KAAK;oBAChB,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI;oBACrB,EAAE,EAAE,WAAW,CAAC,EAAE,CAAiB;iBACnC;gBACD,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAClC,8BAA8B,CAC9B;gBACD,gBAAgB,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;gBACnD,sBAAsB,EAAE;oBACvB,uBAAuB,EAAE,gBAAgB;oBACzC,WAAW,EAAE,UAAU;oBACvB,kBAAkB,EAAE,IAAI;oBACxB,gBAAgB,EAAE,UAAU;oBAC5B,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB;iBACvC;aACD;SACD,CAAC,CAA2B,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAqB;QAC9B,OAAO,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;YACvC,SAAS,EAAE;gBACV,SAAS,EAAE,SAAyB;gBACpC,gBAAgB,EACf,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,gBAAgB;oBACtD,UAAU;gBACX,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK;aACvC;SACD,CAAC,CAA6B,CAAC;IACjC,CAAC;CACD;AAED;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,MAAM;IACjC,SAAS,CAAa;IACtB,QAAQ,CAAkB;IAElC;;OAEG;IACH,YAAY;QACX,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,YAAY,SAAqB,EAAE,QAAyB;QAC3D,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAC9B,QAAyB;QAEzB,gDAAgD;QAChD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;QAE3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACP,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAG,CAAC;YACpD,MAAM,kBAAkB,GAAG,YAAY,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,MAAM,GACX,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,IAAI,cAAc,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACvD,CAAC;IACF,CAAC;IAED;;OAEG;IACH,YAAY;QACX,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,IAAgB;QAC1B,uDAAuD;QACvD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEjD,0EAA0E;QAC1E,MAAM,iBAAiB,GAAG,IAAI,UAAU,CACvC,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CACrC,CAAC;QACF,MAAM,cAAc,GAAG,IAAI,UAAU,CACpC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAClC,CAAC,CAAC,wDAAwD;QAC3D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,oBAAoB,GAAW,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAEpE,8FAA8F;QAC9F,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CACtC,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC7C,CAAC;QACF,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,iBAAiB,EAAE,CAAC;QAExD,IACC,UAAU,CAAC,MAAM,KAAK,sBAAsB;YAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,uBAAuB,EAChD,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QAED,gFAAgF;QAChF,MAAM,GAAG,GAAG,IAAI,UAAU,CACzB,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAC7C,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACjD,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAE/C,+IAA+I;QAC/I,OAAO,oBAAoB,CAAC,SAAS,CAAC;YACrC,iBAAiB,EAAE,iBAAiB;YACpC,cAAc,EAAE,oBAAoB;YACpC,aAAa,EAAE,GAAG;SAClB,CAAC,CAAC,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CACnB,KAAiB,EACjB,MAAmB;QAEnB,6DAA6D;QAC7D,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAErD,mBAAmB;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE1C,iCAAiC;QACjC,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACjE,mBAAmB,CAAC,GAAG,CAAC;YACvB,wBAAwB,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO;YACN,SAAS,EAAE,QAAQ,CAAC,mBAAmB,CAAC;YACxC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;SACtB,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CAC1B,QAAyB,EACzB,OAAmB;QAEnB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,4BAA4B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CACtC,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC7C,CAAC;QAEF,MAAM,GAAG,GAAG,EAAE,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;gBACvD,MAAM,EAAE,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;QACF,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;CACD;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAClC,IAAiB,EACjB,IAAiB;IAEjB,MAAM,eAAe,GAAgB,EAAE,CAAC;IACxC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;IACF,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CACpC,QAAwC;IAExC,MAAM,iBAAiB,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACpD,OAAO,IAAI,UAAU,CAAC,CAAC,GAAG,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC;AACxE,CAAC"}