wowok 2.1.10 → 2.1.13

package/dist/cjs/keypairs/passkey/keypair.js

@@ -1,268 +1,257 @@
 "use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __typeError = (msg) => {
-  throw TypeError(msg);
-};
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
-var __accessCheck = (obj, member, msg) => member.has(obj) || __typeError("Cannot " + msg);
-var __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read from private field"), getter ? getter.call(obj) : member.get(obj));
-var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot add the same private member more than once") : member instanceof WeakSet ? member.add(obj) : member.set(obj, value);
-var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
-var keypair_exports = {};
-__export(keypair_exports, {
-  BrowserPasskeyProvider: () => BrowserPasskeyProvider,
-  PasskeyKeypair: () => PasskeyKeypair,
-  findCommonPublicKey: () => findCommonPublicKey
-});
-module.exports = __toCommonJS(keypair_exports);
-var import_bcs = require("@mysten/bcs");
-var import_p256 = require("@noble/curves/p256");
-var import_blake2b = require("@noble/hashes/blake2b");
-var import_sha256 = require("@noble/hashes/sha256");
-var import_utils = require("@noble/hashes/utils");
-var import_bcs2 = require("../../bcs/bcs.js");
-var import_cryptography = require("../../cryptography/index.js");
-var import_publickey = require("./publickey.js");
-var _name, _options;
+// Copyright (c) Mysten Labs, Inc.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasskeyKeypair = exports.BrowserPasskeyProvider = void 0;
+exports.findCommonPublicKey = findCommonPublicKey;
+const bcs_1 = require("@mysten/bcs");
+const p256_1 = require("@noble/curves/p256");
+const blake2b_1 = require("@noble/hashes/blake2b");
+const sha256_1 = require("@noble/hashes/sha256");
+const utils_1 = require("@noble/hashes/utils");
+const bcs_js_1 = require("../../bcs/bcs.js");
+const index_js_1 = require("../../cryptography/index.js");
+const publickey_js_1 = require("./publickey.js");
+// Default browser implementation
 class BrowserPasskeyProvider {
-  constructor(name, options) {
-    __privateAdd(this, _name);
-    __privateAdd(this, _options);
-    __privateSet(this, _name, name);
-    __privateSet(this, _options, options);
-  }
-  async create() {
-    return await navigator.credentials.create({
-      publicKey: {
-        timeout: __privateGet(this, _options).timeout ?? 6e4,
-        ...__privateGet(this, _options),
-        rp: {
-          name: __privateGet(this, _name),
-          ...__privateGet(this, _options).rp
-        },
-        user: {
-          name: __privateGet(this, _name),
-          displayName: __privateGet(this, _name),
-          ...__privateGet(this, _options).user,
-          id: (0, import_utils.randomBytes)(10)
-        },
-        challenge: new TextEncoder().encode(
-          "Create passkey wallet on Sui"
-        ),
-        pubKeyCredParams: [{ alg: -7, type: "public-key" }],
-        authenticatorSelection: {
-          authenticatorAttachment: "cross-platform",
-          residentKey: "required",
-          requireResidentKey: true,
-          userVerification: "required",
-          ...__privateGet(this, _options).authenticatorSelection
-        }
-      }
-    });
-  }
-  async get(challenge) {
-    return await navigator.credentials.get({
-      publicKey: {
-        challenge,
-        userVerification: __privateGet(this, _options).authenticatorSelection?.userVerification || "required",
-        timeout: __privateGet(this, _options).timeout ?? 6e4
-      }
-    });
-  }
+    #name;
+    #options;
+    constructor(name, options) {
+        this.#name = name;
+        this.#options = options;
+    }
+    async create() {
+        return (await navigator.credentials.create({
+            publicKey: {
+                timeout: this.#options.timeout ?? 60000,
+                ...this.#options,
+                rp: {
+                    name: this.#name,
+                    ...this.#options.rp,
+                },
+                user: {
+                    name: this.#name,
+                    displayName: this.#name,
+                    ...this.#options.user,
+                    id: (0, utils_1.randomBytes)(10),
+                },
+                challenge: new TextEncoder().encode("Create passkey wallet on Sui"),
+                pubKeyCredParams: [{ alg: -7, type: "public-key" }],
+                authenticatorSelection: {
+                    authenticatorAttachment: "cross-platform",
+                    residentKey: "required",
+                    requireResidentKey: true,
+                    userVerification: "required",
+                    ...this.#options.authenticatorSelection,
+                },
+            },
+        }));
+    }
+    async get(challenge) {
+        return (await navigator.credentials.get({
+            publicKey: {
+                challenge: challenge,
+                userVerification: this.#options.authenticatorSelection?.userVerification ||
+                    "required",
+                timeout: this.#options.timeout ?? 60000,
+            },
+        }));
+    }
 }
-_name = new WeakMap();
-_options = new WeakMap();
-class PasskeyKeypair extends import_cryptography.Signer {
-  /**
-   * Creates an instance of Passkey signer. If no passkey wallet had created before,
-   * use `getPasskeyInstance`. For example:
-   * ```
-   * let provider = new BrowserPasskeyProvider('Sui Passkey Example',{
-   * 	  rpName: 'Sui Passkey Example',
-   * 	  rpId: window.location.hostname,
-   * } as BrowserPasswordProviderOptions);
-   * const signer = await PasskeyKeypair.getPasskeyInstance(provider);
-   * ```
-   *
-   * If there are existing passkey wallet, use `signAndRecover` to identify the correct
-   * public key and then initialize the instance. See usage in `signAndRecover`.
-   */
-  constructor(publicKey, provider) {
-    super();
-    __publicField(this, "publicKey");
-    __publicField(this, "provider");
-    this.publicKey = publicKey;
-    this.provider = provider;
-  }
-  /**
-   * Get the key scheme of passkey,
-   */
-  getKeyScheme() {
-    return "Passkey";
-  }
-  /**
-   * Creates an instance of Passkey signer invoking the passkey from navigator.
-   * Note that this will invoke the passkey device to create a fresh credential.
-   * Should only be called if passkey wallet is created for the first time.
-   *
-   * @param provider - the passkey provider.
-   * @returns the passkey instance.
-   */
-  static async getPasskeyInstance(provider) {
-    const credential = await provider.create();
-    if (!credential.response.getPublicKey()) {
-      throw new Error("Invalid credential create response");
-    } else {
-      const derSPKI = credential.response.getPublicKey();
-      const pubkeyUncompressed = (0, import_publickey.parseDerSPKI)(new Uint8Array(derSPKI));
-      const pubkey = import_p256.secp256r1.ProjectivePoint.fromHex(pubkeyUncompressed);
-      const pubkeyCompressed = pubkey.toRawBytes(true);
-      return new PasskeyKeypair(pubkeyCompressed, provider);
+exports.BrowserPasskeyProvider = BrowserPasskeyProvider;
+/**
+ * @experimental
+ * A passkey signer used for signing transactions. This is a client side implementation for [SIP-9](https://github.com/sui-foundation/sips/blob/main/sips/sip-9.md).
+ */
+class PasskeyKeypair extends index_js_1.Signer {
+    publicKey;
+    provider;
+    /**
+     * Get the key scheme of passkey,
+     */
+    getKeyScheme() {
+        return "Passkey";
+    }
+    /**
+     * Creates an instance of Passkey signer. If no passkey wallet had created before,
+     * use `getPasskeyInstance`. For example:
+     * ```
+     * let provider = new BrowserPasskeyProvider('Sui Passkey Example',{
+     * 	  rpName: 'Sui Passkey Example',
+     * 	  rpId: window.location.hostname,
+     * } as BrowserPasswordProviderOptions);
+     * const signer = await PasskeyKeypair.getPasskeyInstance(provider);
+     * ```
+     *
+     * If there are existing passkey wallet, use `signAndRecover` to identify the correct
+     * public key and then initialize the instance. See usage in `signAndRecover`.
+     */
+    constructor(publicKey, provider) {
+        super();
+        this.publicKey = publicKey;
+        this.provider = provider;
+    }
+    /**
+     * Creates an instance of Passkey signer invoking the passkey from navigator.
+     * Note that this will invoke the passkey device to create a fresh credential.
+     * Should only be called if passkey wallet is created for the first time.
+     *
+     * @param provider - the passkey provider.
+     * @returns the passkey instance.
+     */
+    static async getPasskeyInstance(provider) {
+        // create a passkey secp256r1 with the provider.
+        const credential = await provider.create();
+        if (!credential.response.getPublicKey()) {
+            throw new Error("Invalid credential create response");
+        }
+        else {
+            const derSPKI = credential.response.getPublicKey();
+            const pubkeyUncompressed = (0, publickey_js_1.parseDerSPKI)(new Uint8Array(derSPKI));
+            const pubkey = p256_1.secp256r1.ProjectivePoint.fromHex(pubkeyUncompressed);
+            const pubkeyCompressed = pubkey.toRawBytes(true);
+            return new PasskeyKeypair(pubkeyCompressed, provider);
+        }
+    }
+    /**
+     * Return the public key for this passkey.
+     */
+    getPublicKey() {
+        return new publickey_js_1.PasskeyPublicKey(this.publicKey);
     }
-  }
-  /**
-   * Return the public key for this passkey.
-   */
-  getPublicKey() {
-    return new import_publickey.PasskeyPublicKey(this.publicKey);
-  }
-  /**
-   * Return the signature for the provided data (i.e. blake2b(intent_message)).
-   * This is sent to passkey as the challenge field.
-   */
-  async sign(data) {
-    const credential = await this.provider.get(data);
-    const authenticatorData = new Uint8Array(
-      credential.response.authenticatorData
-    );
-    const clientDataJSON = new Uint8Array(
-      credential.response.clientDataJSON
-    );
-    const decoder = new TextDecoder();
-    const clientDataJSONString = decoder.decode(clientDataJSON);
-    const sig = import_p256.secp256r1.Signature.fromDER(
-      new Uint8Array(credential.response.signature)
-    );
-    const normalized = sig.normalizeS().toCompactRawBytes();
-    if (normalized.length !== import_publickey.PASSKEY_SIGNATURE_SIZE || this.publicKey.length !== import_publickey.PASSKEY_PUBLIC_KEY_SIZE) {
-      throw new Error("Invalid signature or public key length");
+    /**
+     * Return the signature for the provided data (i.e. blake2b(intent_message)).
+     * This is sent to passkey as the challenge field.
+     */
+    async sign(data) {
+        // asks the passkey to sign over challenge as the data.
+        const credential = await this.provider.get(data);
+        // parse authenticatorData (as bytes), clientDataJSON (decoded as string).
+        const authenticatorData = new Uint8Array(credential.response.authenticatorData);
+        const clientDataJSON = new Uint8Array(credential.response.clientDataJSON); // response.clientDataJSON is already UTF-8 encoded JSON
+        const decoder = new TextDecoder();
+        const clientDataJSONString = decoder.decode(clientDataJSON);
+        // parse the signature from DER format, normalize and convert to compressed format (33 bytes).
+        const sig = p256_1.secp256r1.Signature.fromDER(new Uint8Array(credential.response.signature));
+        const normalized = sig.normalizeS().toCompactRawBytes();
+        if (normalized.length !== publickey_js_1.PASSKEY_SIGNATURE_SIZE ||
+            this.publicKey.length !== publickey_js_1.PASSKEY_PUBLIC_KEY_SIZE) {
+            throw new Error("Invalid signature or public key length");
+        }
+        // construct userSignature as flag || sig || pubkey for the secp256r1 signature.
+        const arr = new Uint8Array(1 + normalized.length + this.publicKey.length);
+        arr.set([index_js_1.SIGNATURE_SCHEME_TO_FLAG["Secp256r1"]]);
+        arr.set(normalized, 1);
+        arr.set(this.publicKey, 1 + normalized.length);
+        // serialize all fields into a passkey signature according to https://github.com/sui-foundation/sips/blob/main/sips/sip-9.md#signature-encoding
+        return bcs_js_1.PasskeyAuthenticator.serialize({
+            authenticatorData: authenticatorData,
+            clientDataJson: clientDataJSONString,
+            userSignature: arr,
+        }).toBytes();
     }
-    const arr = new Uint8Array(
-      1 + normalized.length + this.publicKey.length
-    );
-    arr.set([import_cryptography.SIGNATURE_SCHEME_TO_FLAG["Secp256r1"]]);
-    arr.set(normalized, 1);
-    arr.set(this.publicKey, 1 + normalized.length);
-    return import_bcs2.PasskeyAuthenticator.serialize({
-      authenticatorData,
-      clientDataJson: clientDataJSONString,
-      userSignature: arr
-    }).toBytes();
-  }
-  /**
-   * This overrides the base class implementation that accepts the raw bytes and signs its
-   * digest of the intent message, then serialize it with the passkey flag.
-   */
-  async signWithIntent(bytes, intent) {
-    const intentMessage = (0, import_cryptography.messageWithIntent)(intent, bytes);
-    const digest = (0, import_blake2b.blake2b)(intentMessage, { dkLen: 32 });
-    const signature = await this.sign(digest);
-    const serializedSignature = new Uint8Array(1 + signature.length);
-    serializedSignature.set([
-      import_cryptography.SIGNATURE_SCHEME_TO_FLAG[this.getKeyScheme()]
-    ]);
-    serializedSignature.set(signature, 1);
-    return {
-      signature: (0, import_bcs.toBase64)(serializedSignature),
-      bytes: (0, import_bcs.toBase64)(bytes)
-    };
-  }
-  /**
-   * Given a message, asks the passkey device to sign it and return all (up to 4) possible public keys.
-   * See: https://bitcoin.stackexchange.com/questions/81232/how-is-public-key-extracted-from-message-digital-signature-address
-   *
-   * This is useful if the user previously created passkey wallet with the origin, but the wallet session
-   * does not have the public key / address. By calling this method twice with two different messages, the
-   * wallet can compare the returned public keys and uniquely identify the previously created passkey wallet
-   * using `findCommonPublicKey`.
-   *
-   * Alternatively, one call can be made and all possible public keys should be checked onchain to see if
-   * there is any assets.
-   *
-   * Once the correct public key is identified, a passkey instance can then be initialized with this public key.
-   *
-   * Example usage to recover wallet with two signing calls:
-   * ```
-   * let provider = new BrowserPasskeyProvider('Sui Passkey Example',{
-   *     rpName: 'Sui Passkey Example',
-   * 	   rpId: window.location.hostname,
-   * } as BrowserPasswordProviderOptions);
-   * const testMessage = new TextEncoder().encode('Hello world!');
-   * const possiblePks = await PasskeyKeypair.signAndRecover(provider, testMessage);
-   * const testMessage2 = new TextEncoder().encode('Hello world 2!');
-   * const possiblePks2 = await PasskeyKeypair.signAndRecover(provider, testMessage2);
-   * const commonPk = findCommonPublicKey(possiblePks, possiblePks2);
-   * const signer = new PasskeyKeypair(provider, commonPk.toRawBytes());
-   * ```
-   *
-   * @param provider - the passkey provider.
-   * @param message - the message to sign.
-   * @returns all possible public keys.
-   */
-  static async signAndRecover(provider, message) {
-    const credential = await provider.get(message);
-    const fullMessage = messageFromAssertionResponse(credential.response);
-    const sig = import_p256.secp256r1.Signature.fromDER(
-      new Uint8Array(credential.response.signature)
-    );
-    const res = [];
-    for (let i = 0; i < 4; i++) {
-      const s = sig.addRecoveryBit(i);
-      try {
-        const pubkey = s.recoverPublicKey((0, import_sha256.sha256)(fullMessage));
-        const pk = new import_publickey.PasskeyPublicKey(pubkey.toRawBytes(true));
-        res.push(pk);
-      } catch {
-        continue;
-      }
+    /**
+     * This overrides the base class implementation that accepts the raw bytes and signs its
+     * digest of the intent message, then serialize it with the passkey flag.
+     */
+    async signWithIntent(bytes, intent) {
+        // prepend it into an intent message and computes the digest.
+        const intentMessage = (0, index_js_1.messageWithIntent)(intent, bytes);
+        const digest = (0, blake2b_1.blake2b)(intentMessage, { dkLen: 32 });
+        // sign the digest.
+        const signature = await this.sign(digest);
+        // prepend with the passkey flag.
+        const serializedSignature = new Uint8Array(1 + signature.length);
+        serializedSignature.set([
+            index_js_1.SIGNATURE_SCHEME_TO_FLAG[this.getKeyScheme()],
+        ]);
+        serializedSignature.set(signature, 1);
+        return {
+            signature: (0, bcs_1.toBase64)(serializedSignature),
+            bytes: (0, bcs_1.toBase64)(bytes),
+        };
+    }
+    /**
+     * Given a message, asks the passkey device to sign it and return all (up to 4) possible public keys.
+     * See: https://bitcoin.stackexchange.com/questions/81232/how-is-public-key-extracted-from-message-digital-signature-address
+     *
+     * This is useful if the user previously created passkey wallet with the origin, but the wallet session
+     * does not have the public key / address. By calling this method twice with two different messages, the
+     * wallet can compare the returned public keys and uniquely identify the previously created passkey wallet
+     * using `findCommonPublicKey`.
+     *
+     * Alternatively, one call can be made and all possible public keys should be checked onchain to see if
+     * there is any assets.
+     *
+     * Once the correct public key is identified, a passkey instance can then be initialized with this public key.
+     *
+     * Example usage to recover wallet with two signing calls:
+     * ```
+     * let provider = new BrowserPasskeyProvider('Sui Passkey Example',{
+     *     rpName: 'Sui Passkey Example',
+     * 	   rpId: window.location.hostname,
+     * } as BrowserPasswordProviderOptions);
+     * const testMessage = new TextEncoder().encode('Hello world!');
+     * const possiblePks = await PasskeyKeypair.signAndRecover(provider, testMessage);
+     * const testMessage2 = new TextEncoder().encode('Hello world 2!');
+     * const possiblePks2 = await PasskeyKeypair.signAndRecover(provider, testMessage2);
+     * const commonPk = findCommonPublicKey(possiblePks, possiblePks2);
+     * const signer = new PasskeyKeypair(provider, commonPk.toRawBytes());
+     * ```
+     *
+     * @param provider - the passkey provider.
+     * @param message - the message to sign.
+     * @returns all possible public keys.
+     */
+    static async signAndRecover(provider, message) {
+        const credential = await provider.get(message);
+        const fullMessage = messageFromAssertionResponse(credential.response);
+        const sig = p256_1.secp256r1.Signature.fromDER(new Uint8Array(credential.response.signature));
+        const res = [];
+        for (let i = 0; i < 4; i++) {
+            const s = sig.addRecoveryBit(i);
+            try {
+                const pubkey = s.recoverPublicKey((0, sha256_1.sha256)(fullMessage));
+                const pk = new publickey_js_1.PasskeyPublicKey(pubkey.toRawBytes(true));
+                res.push(pk);
+            }
+            catch {
+                continue;
+            }
+        }
+        return res;
     }
-    return res;
-  }
 }
+exports.PasskeyKeypair = PasskeyKeypair;
+/**
+ * Finds the unique public key that exists in both arrays, throws error if the common
+ * pubkey does not equal to one.
+ *
+ * @param arr1 - The first pubkeys array.
+ * @param arr2 - The second pubkeys array.
+ * @returns The only common pubkey in both arrays.
+ */
 function findCommonPublicKey(arr1, arr2) {
-  const matchingPubkeys = [];
-  for (const pubkey1 of arr1) {
-    for (const pubkey2 of arr2) {
-      if (pubkey1.equals(pubkey2)) {
-        matchingPubkeys.push(pubkey1);
-      }
+    const matchingPubkeys = [];
+    for (const pubkey1 of arr1) {
+        for (const pubkey2 of arr2) {
+            if (pubkey1.equals(pubkey2)) {
+                matchingPubkeys.push(pubkey1);
+            }
+        }
+    }
+    if (matchingPubkeys.length !== 1) {
+        throw new Error("No unique public key found");
     }
-  }
-  if (matchingPubkeys.length !== 1) {
-    throw new Error("No unique public key found");
-  }
-  return matchingPubkeys[0];
+    return matchingPubkeys[0];
 }
+/**
+ * Constructs the message that the passkey signature is produced over as authenticatorData || sha256(clientDataJSON).
+ */
 function messageFromAssertionResponse(response) {
-  const authenticatorData = new Uint8Array(response.authenticatorData);
-  const clientDataJSON = new Uint8Array(response.clientDataJSON);
-  const clientDataJSONDigest = (0, import_sha256.sha256)(clientDataJSON);
-  return new Uint8Array([...authenticatorData, ...clientDataJSONDigest]);
+    const authenticatorData = new Uint8Array(response.authenticatorData);
+    const clientDataJSON = new Uint8Array(response.clientDataJSON);
+    const clientDataJSONDigest = (0, sha256_1.sha256)(clientDataJSON);
+    return new Uint8Array([...authenticatorData, ...clientDataJSONDigest]);
 }
+//# sourceMappingURL=keypair.js.map

package/dist/cjs/keypairs/passkey/keypair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keypair.js","sourceRoot":"","sources":["../../../../src/keypairs/passkey/keypair.ts"],"names":[],"mappings":";AAAA,kCAAkC;AAClC,sCAAsC;;;AAyTtC,kDAgBC;AAvUD,qCAAuC;AACvC,6CAA+C;AAC/C,mDAAgD;AAChD,iDAA8C;AAC9C,+CAAkD;AAElD,6CAAwD;AAKxD,0DAIqC;AAGrC,iDAKwB;AA4BxB,iCAAiC;AACjC,MAAa,sBAAsB;IAClC,KAAK,CAAS;IACd,QAAQ,CAAiC;IAEzC,YAAY,IAAY,EAAE,OAAuC;QAChE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM;QACX,OAAO,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC;YAC1C,SAAS,EAAE;gBACV,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK;gBACvC,GAAG,IAAI,CAAC,QAAQ;gBAChB,EAAE,EAAE;oBACH,IAAI,EAAE,IAAI,CAAC,KAAK;oBAChB,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE;iBACnB;gBACD,IAAI,EAAE;oBACL,IAAI,EAAE,IAAI,CAAC,KAAK;oBAChB,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI;oBACrB,EAAE,EAAE,IAAA,mBAAW,EAAC,EAAE,CAAiB;iBACnC;gBACD,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAClC,8BAA8B,CAC9B;gBACD,gBAAgB,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;gBACnD,sBAAsB,EAAE;oBACvB,uBAAuB,EAAE,gBAAgB;oBACzC,WAAW,EAAE,UAAU;oBACvB,kBAAkB,EAAE,IAAI;oBACxB,gBAAgB,EAAE,UAAU;oBAC5B,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB;iBACvC;aACD;SACD,CAAC,CAA2B,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAqB;QAC9B,OAAO,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;YACvC,SAAS,EAAE;gBACV,SAAS,EAAE,SAAyB;gBACpC,gBAAgB,EACf,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,gBAAgB;oBACtD,UAAU;gBACX,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK;aACvC;SACD,CAAC,CAA6B,CAAC;IACjC,CAAC;CACD;AAlDD,wDAkDC;AAED;;;GAGG;AACH,MAAa,cAAe,SAAQ,iBAAM;IACjC,SAAS,CAAa;IACtB,QAAQ,CAAkB;IAElC;;OAEG;IACH,YAAY;QACX,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,YAAY,SAAqB,EAAE,QAAyB;QAC3D,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAC9B,QAAyB;QAEzB,gDAAgD;QAChD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;QAE3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACP,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAG,CAAC;YACpD,MAAM,kBAAkB,GAAG,IAAA,2BAAY,EAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,MAAM,GACX,gBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,IAAI,cAAc,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACvD,CAAC;IACF,CAAC;IAED;;OAEG;IACH,YAAY;QACX,OAAO,IAAI,+BAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,IAAgB;QAC1B,uDAAuD;QACvD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEjD,0EAA0E;QAC1E,MAAM,iBAAiB,GAAG,IAAI,UAAU,CACvC,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CACrC,CAAC;QACF,MAAM,cAAc,GAAG,IAAI,UAAU,CACpC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAClC,CAAC,CAAC,wDAAwD;QAC3D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,oBAAoB,GAAW,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAEpE,8FAA8F;QAC9F,MAAM,GAAG,GAAG,gBAAS,CAAC,SAAS,CAAC,OAAO,CACtC,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC7C,CAAC;QACF,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,iBAAiB,EAAE,CAAC;QAExD,IACC,UAAU,CAAC,MAAM,KAAK,qCAAsB;YAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,sCAAuB,EAChD,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QAED,gFAAgF;QAChF,MAAM,GAAG,GAAG,IAAI,UAAU,CACzB,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAC7C,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,CAAC,mCAAwB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACjD,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAE/C,+IAA+I;QAC/I,OAAO,6BAAoB,CAAC,SAAS,CAAC;YACrC,iBAAiB,EAAE,iBAAiB;YACpC,cAAc,EAAE,oBAAoB;YACpC,aAAa,EAAE,GAAG;SAClB,CAAC,CAAC,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CACnB,KAAiB,EACjB,MAAmB;QAEnB,6DAA6D;QAC7D,MAAM,aAAa,GAAG,IAAA,4BAAiB,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAA,iBAAO,EAAC,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAErD,mBAAmB;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE1C,iCAAiC;QACjC,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACjE,mBAAmB,CAAC,GAAG,CAAC;YACvB,mCAAwB,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO;YACN,SAAS,EAAE,IAAA,cAAQ,EAAC,mBAAmB,CAAC;YACxC,KAAK,EAAE,IAAA,cAAQ,EAAC,KAAK,CAAC;SACtB,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CAC1B,QAAyB,EACzB,OAAmB;QAEnB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,4BAA4B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,gBAAS,CAAC,SAAS,CAAC,OAAO,CACtC,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC7C,CAAC;QAEF,MAAM,GAAG,GAAG,EAAE,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,CAAC,CAAC,gBAAgB,CAAC,IAAA,eAAM,EAAC,WAAW,CAAC,CAAC,CAAC;gBACvD,MAAM,EAAE,GAAG,IAAI,+BAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;QACF,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;CACD;AAjMD,wCAiMC;AAED;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CAClC,IAAiB,EACjB,IAAiB;IAEjB,MAAM,eAAe,GAAgB,EAAE,CAAC;IACxC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;IACF,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CACpC,QAAwC;IAExC,MAAM,iBAAiB,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,oBAAoB,GAAG,IAAA,eAAM,EAAC,cAAc,CAAC,CAAC;IACpD,OAAO,IAAI,UAAU,CAAC,CAAC,GAAG,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC;AACxE,CAAC"}