@agentdock/crypto 0.0.46 → 0.0.47

package/dist/aes.js

@@ -1,95 +1 @@
-/**
- * AES-256-GCM encryption and decryption using the Web Crypto API.
- *
- * Bundle format (compatible with Happy protocol):
- *   version (1 byte) | nonce (12 bytes) | ciphertext + authTag
- *
- * - version: always 0 for this implementation
- * - nonce: 12-byte IV for AES-GCM
- * - ciphertext + authTag: Web Crypto API returns these concatenated
- *   (authTag is the last 16 bytes)
- *
- * Data is JSON-serialized before encryption and JSON-parsed after decryption.
- */
-import { getRandomBytes } from './random.js';
-/** Current bundle format version. */
-const BUNDLE_VERSION = 0;
-/** AES-GCM nonce size in bytes. */
-const NONCE_SIZE = 12;
-/** AES-GCM authentication tag size in bytes. */
-const AUTH_TAG_SIZE = 16;
-/** Minimum bundle size: version(1) + nonce(12) + authTag(16). */
-const MIN_BUNDLE_SIZE = 1 + NONCE_SIZE + AUTH_TAG_SIZE;
-/** Required AES-256 key size in bytes. */
-const KEY_SIZE = 32;
-/**
- * Encrypt arbitrary JSON-serializable data with AES-256-GCM.
- *
- * @param data - Any JSON-serializable value.
- * @param key  - 32-byte (256-bit) encryption key.
- * @returns Encrypted bundle as Uint8Array.
- * @throws If the key is not exactly 32 bytes.
- */
-export async function encryptAesGcm(data, key) {
-    assertKeySize(key);
-    const plaintext = new TextEncoder().encode(JSON.stringify(data));
-    const nonce = getRandomBytes(NONCE_SIZE);
-    const cryptoKey = await importKey(key, ['encrypt']);
-    const encrypted = await globalThis.crypto.subtle.encrypt({ name: 'AES-GCM', iv: nonce }, cryptoKey, plaintext);
-    // Build bundle: version + nonce + (ciphertext + authTag)
-    const encryptedBytes = new Uint8Array(encrypted);
-    const bundle = new Uint8Array(1 + NONCE_SIZE + encryptedBytes.length);
-    bundle[0] = BUNDLE_VERSION;
-    bundle.set(nonce, 1);
-    bundle.set(encryptedBytes, 1 + NONCE_SIZE);
-    return bundle;
-}
-/**
- * Decrypt an AES-256-GCM bundle back to the original data.
- *
- * @param bundle - Encrypted bundle produced by `encryptAesGcm`.
- * @param key    - 32-byte (256-bit) decryption key (must match encryption key).
- * @returns The decrypted data, or `null` if decryption fails.
- * @throws If the key is not exactly 32 bytes.
- */
-export async function decryptAesGcm(bundle, key) {
-    assertKeySize(key);
-    // Validate minimum bundle size
-    if (bundle.length < MIN_BUNDLE_SIZE) {
-        return null;
-    }
-    // Validate version
-    if (bundle[0] !== BUNDLE_VERSION) {
-        return null;
-    }
-    // Extract nonce and ciphertext+authTag
-    const nonce = bundle.slice(1, 1 + NONCE_SIZE);
-    const ciphertextWithTag = bundle.slice(1 + NONCE_SIZE);
-    try {
-        const cryptoKey = await importKey(key, ['decrypt']);
-        const decrypted = await globalThis.crypto.subtle.decrypt({ name: 'AES-GCM', iv: nonce }, cryptoKey, ciphertextWithTag);
-        const json = new TextDecoder().decode(decrypted);
-        return JSON.parse(json);
-    }
-    catch {
-        // Decryption or JSON parsing failed -- return null per contract
-        return null;
-    }
-}
-/**
- * Import a raw key for AES-GCM operations.
- */
-async function importKey(key, usages) {
-    return globalThis.crypto.subtle.importKey('raw', key, 'AES-GCM', false, [
-        ...usages,
-    ]);
-}
-/**
- * Assert that a key is exactly 32 bytes (AES-256).
- */
-function assertKeySize(key) {
-    if (key.length !== KEY_SIZE) {
-        throw new Error(`AES-256-GCM requires a 32-byte key, got ${key.length} bytes`);
-    }
-}
-//# sourceMappingURL=aes.js.map
+"use strict";import{getRandomBytes as u}from"./random.js";const a=0,n=12,E=16,S=1+n+E,d=32;export async function encryptAesGcm(t,e){l(e);const s=new TextEncoder().encode(JSON.stringify(t)),c=u(n),i=await p(e,["encrypt"]),y=await globalThis.crypto.subtle.encrypt({name:"AES-GCM",iv:c},i,s),r=new Uint8Array(y),o=new Uint8Array(1+n+r.length);return o[0]=a,o.set(c,1),o.set(r,1+n),o}export async function decryptAesGcm(t,e){if(l(e),t.length<S||t[0]!==a)return null;const s=t.slice(1,1+n),c=t.slice(1+n);try{const i=await p(e,["decrypt"]),y=await globalThis.crypto.subtle.decrypt({name:"AES-GCM",iv:s},i,c),r=new TextDecoder().decode(y);return JSON.parse(r)}catch{return null}}async function p(t,e){return globalThis.crypto.subtle.importKey("raw",t,"AES-GCM",!1,[...e])}function l(t){if(t.length!==d)throw new Error(`AES-256-GCM requires a 32-byte key, got ${t.length} bytes`)}

package/dist/auth.js

@@ -1,69 +1 @@
-/**
- * Ed25519 authentication challenge — aligned with Happy.
- *
- * Uses tweetnacl for Ed25519 signing/verification, which works in
- * ALL contexts (including non-secure HTTP). The raw 32-byte seed is
- * used directly as the Ed25519 private key seed, WITHOUT any extra
- * key derivation step, matching Happy's tweetnacl.sign.keyPair.fromSeed().
- *
- * Previous implementation used Web Crypto API (crypto.subtle) which
- * requires a secure context (HTTPS or localhost). This broke mobile
- * PWA access over LAN (http://192.168.x.x).
- */
-import nacl from 'tweetnacl';
-/**
- * Generate an authentication challenge signed with an Ed25519 key
- * derived from the given seed.
- *
- * The seed is used directly as the Ed25519 private key seed (no extra
- * key derivation), matching Happy's tweetnacl.sign.keyPair.fromSeed().
- *
- * @param seed - 32-byte seed for deterministic Ed25519 key pair
- * @returns Challenge result with random nonce, public key, and signature
- */
-export async function authChallenge(seed) {
-    const keyPair = nacl.sign.keyPair.fromSeed(seed);
-    // Generate random 32-byte challenge
-    const challenge = nacl.randomBytes(32);
-    // Sign the challenge
-    const signature = nacl.sign.detached(challenge, keyPair.secretKey);
-    return {
-        challenge,
-        publicKey: keyPair.publicKey,
-        signature,
-    };
-}
-/**
- * Sign an externally-provided challenge nonce with an Ed25519 key
- * derived from the given seed. Used for server-driven auth flows
- * where the server issues the nonce.
- *
- * @param nonce - Challenge nonce provided by the server
- * @param seed - 32-byte seed for deterministic Ed25519 key pair
- * @returns Public key and signature over the nonce
- */
-export async function signChallenge(nonce, seed) {
-    const keyPair = nacl.sign.keyPair.fromSeed(seed);
-    const signature = nacl.sign.detached(nonce, keyPair.secretKey);
-    return {
-        publicKey: keyPair.publicKey,
-        signature,
-    };
-}
-/**
- * Verify an authentication challenge signature.
- *
- * @param challenge - The challenge nonce
- * @param publicKey - The 32-byte Ed25519 public key
- * @param signature - The 64-byte Ed25519 signature
- * @returns true if the signature is valid
- */
-export async function verifyChallenge(challenge, publicKey, signature) {
-    try {
-        return nacl.sign.detached.verify(challenge, signature, publicKey);
-    }
-    catch {
-        return false; // SILENT-CATCH-OK: invalid signature returns false per contract
-    }
-}
-//# sourceMappingURL=auth.js.map
+"use strict";import r from"tweetnacl";export async function authChallenge(t){const n=r.sign.keyPair.fromSeed(t),e=r.randomBytes(32),c=r.sign.detached(e,n.secretKey);return{challenge:e,publicKey:n.publicKey,signature:c}}export async function signChallenge(t,n){const e=r.sign.keyPair.fromSeed(n),c=r.sign.detached(t,e.secretKey);return{publicKey:e.publicKey,signature:c}}export async function verifyChallenge(t,n,e){try{return r.sign.detached.verify(t,e,n)}catch{return!1}}

package/dist/box.js

@@ -1,73 +1 @@
-/**
- * NaCl Box encryption — aligned with Happy.
- *
- * Ephemeral X25519 Diffie-Hellman key agreement + authenticated encryption.
- * Used for encrypting data for a specific recipient (key delivery).
- *
- * Bundle format: ephemeral_pubkey(32) + nonce(24) + ciphertext
- */
-import nacl from 'tweetnacl';
-import { getRandomBytes } from './random.js';
-/**
- * Encrypt data for a recipient's public key using NaCl Box.
- *
- * Generates an ephemeral keypair, performs DH key agreement,
- * and encrypts with authenticated encryption (XSalsa20-Poly1305).
- *
- * @param data - Plaintext data to encrypt
- * @param recipientPublicKey - 32-byte X25519 public key of the recipient
- * @returns Bundle: ephemeral_pubkey(32) + nonce(24) + ciphertext
- */
-export function encryptBox(data, recipientPublicKey) {
-    const ephemeralKeyPair = nacl.box.keyPair();
-    const nonce = getRandomBytes(nacl.box.nonceLength);
-    const encrypted = nacl.box(data, nonce, recipientPublicKey, ephemeralKeyPair.secretKey);
-    // Bundle: ephemeral pubkey(32) + nonce(24) + ciphertext
-    const result = new Uint8Array(32 + 24 + encrypted.length);
-    result.set(ephemeralKeyPair.publicKey, 0);
-    result.set(nonce, 32);
-    result.set(encrypted, 56);
-    return result;
-}
-/**
- * Decrypt a NaCl Box bundle using the recipient's secret key.
- *
- * @param bundle - Bundle: ephemeral_pubkey(32) + nonce(24) + ciphertext
- * @param recipientSecretKey - 32-byte X25519 secret key
- * @returns Decrypted plaintext, or null if decryption fails
- */
-export function decryptBox(bundle, recipientSecretKey) {
-    if (bundle.length < 32 + 24)
-        return null;
-    const ephemeralPublicKey = bundle.slice(0, 32);
-    const nonce = bundle.slice(32, 56);
-    const ciphertext = bundle.slice(56);
-    const decrypted = nacl.box.open(ciphertext, nonce, ephemeralPublicKey, recipientSecretKey);
-    return decrypted ? new Uint8Array(decrypted) : null;
-}
-/**
- * Generate a random X25519 keypair for NaCl Box operations.
- *
- * @returns BoxKeyPair with 32-byte publicKey and secretKey
- */
-export function generateBoxKeyPair() {
-    const kp = nacl.box.keyPair();
-    return {
-        publicKey: new Uint8Array(kp.publicKey),
-        secretKey: new Uint8Array(kp.secretKey),
-    };
-}
-/**
- * Derive a NaCl Box public key from a secret key.
- *
- * NOTE: This matches libsodium's behavior — tweetnacl requires the
- * secret key to already be the hashed form. For seed-based derivation,
- * use deriveContentKeyPair() instead.
- *
- * @param secretKey - 32-byte X25519 secret key
- * @returns 32-byte X25519 public key
- */
-export function boxPublicKeyFromSecretKey(secretKey) {
-    return new Uint8Array(nacl.box.keyPair.fromSecretKey(secretKey).publicKey);
-}
-//# sourceMappingURL=box.js.map
+"use strict";import r from"tweetnacl";import{getRandomBytes as y}from"./random.js";export function encryptBox(e,i){const n=r.box.keyPair(),o=y(r.box.nonceLength),c=r.box(e,o,i,n.secretKey),t=new Uint8Array(56+c.length);return t.set(n.publicKey,0),t.set(o,32),t.set(c,56),t}export function decryptBox(e,i){if(e.length<56)return null;const n=e.slice(0,32),o=e.slice(32,56),c=e.slice(56),t=r.box.open(c,o,n,i);return t?new Uint8Array(t):null}export function generateBoxKeyPair(){const e=r.box.keyPair();return{publicKey:new Uint8Array(e.publicKey),secretKey:new Uint8Array(e.secretKey)}}export function boxPublicKeyFromSecretKey(e){return new Uint8Array(r.box.keyPair.fromSecretKey(e).publicKey)}

package/dist/content.js

@@ -1,40 +1 @@
-/**
- * Content keypair derivation — aligned with Happy.
- *
- * Derives an X25519 NaCl Box keypair from a secret using the key tree.
- * Usage string: 'Happy EnCoder', path: ['content'].
- *
- * The derived seed is SHA-512 hashed and the first 32 bytes become the
- * Box secret key, matching libsodium's crypto_box_seed_keypair behavior.
- */
-import nacl from 'tweetnacl';
-import { deriveKey } from './keys.js';
-/**
- * Derive a NaCl Box keypair for content encryption.
- *
- * Follows Happy's deriveContentKeyPair():
- * 1. deriveKey(secret, 'Happy EnCoder', ['content']) → 32-byte seed
- * 2. SHA-512(seed)[0:32] → box secret key (matching libsodium)
- * 3. tweetnacl.box.keyPair.fromSecretKey(boxSecretKey) → keypair
- *
- * Since we use Web Crypto (no node:crypto), we approximate SHA-512
- * using HMAC-SHA512 with the seed as both key and data, then take
- * the first 32 bytes. This produces a deterministic 32-byte output
- * for a given seed, matching the intent of SHA-512(seed)[0:32].
- *
- * @param secret - Master secret for key derivation
- * @returns NaCl Box keypair { publicKey, secretKey }
- */
-export async function deriveContentKeyPair(secret) {
-    const seed = await deriveKey(secret, 'Happy EnCoder', ['content']);
-    // Match libsodium: crypto_box_seed_keypair does SHA-512(seed)[0:32]
-    // We use Web Crypto SHA-512 directly
-    const hashBuffer = await crypto.subtle.digest('SHA-512', seed);
-    const boxSecretKey = new Uint8Array(hashBuffer).slice(0, 32);
-    const keyPair = nacl.box.keyPair.fromSecretKey(boxSecretKey);
-    return {
-        publicKey: new Uint8Array(keyPair.publicKey),
-        secretKey: new Uint8Array(keyPair.secretKey),
-    };
-}
-//# sourceMappingURL=content.js.map
+"use strict";import o from"tweetnacl";import{deriveKey as c}from"./keys.js";export async function deriveContentKeyPair(r){const t=await c(r,"Happy EnCoder",["content"]),n=await crypto.subtle.digest("SHA-512",t),i=new Uint8Array(n).slice(0,32),e=o.box.keyPair.fromSecretKey(i);return{publicKey:new Uint8Array(e.publicKey),secretKey:new Uint8Array(e.secretKey)}}

package/dist/encoding.js

@@ -1,55 +1 @@
-/**
- * Base64 and Base64URL encoding/decoding utilities.
- *
- * Uses browser-compatible APIs (no Node.js Buffer dependency).
- * Works in both browser and Node.js 22+ environments.
- */
-/**
- * Encode a Uint8Array to a standard Base64 string.
- */
-export function encodeBase64(buffer) {
-    if (buffer.length === 0)
-        return '';
-    // Convert Uint8Array to binary string, then use btoa
-    let binary = '';
-    for (let i = 0; i < buffer.length; i++) {
-        binary += String.fromCharCode(buffer[i]);
-    }
-    return btoa(binary);
-}
-/**
- * Decode a standard Base64 string to a Uint8Array.
- */
-export function decodeBase64(base64) {
-    if (base64 === '')
-        return new Uint8Array(0);
-    const binary = atob(base64);
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i++) {
-        bytes[i] = binary.charCodeAt(i);
-    }
-    return bytes;
-}
-/**
- * Encode a Uint8Array to a Base64URL string (no padding).
- *
- * Base64URL replaces `+` with `-`, `/` with `_`, and strips `=` padding.
- */
-export function encodeBase64Url(buffer) {
-    const base64 = encodeBase64(buffer);
-    return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
-}
-/**
- * Decode a Base64URL string to a Uint8Array.
- */
-export function decodeBase64Url(base64url) {
-    if (base64url === '')
-        return new Uint8Array(0);
-    // Convert base64url back to standard base64
-    let base64 = base64url.replace(/-/g, '+').replace(/_/g, '/');
-    // Restore padding
-    const paddingNeeded = (4 - (base64.length % 4)) % 4;
-    base64 += '='.repeat(paddingNeeded);
-    return decodeBase64(base64);
-}
-//# sourceMappingURL=encoding.js.map
+"use strict";export function encodeBase64(e){if(e.length===0)return"";let r="";for(let t=0;t<e.length;t++)r+=String.fromCharCode(e[t]);return btoa(r)}export function decodeBase64(e){if(e==="")return new Uint8Array(0);const r=atob(e),t=new Uint8Array(r.length);for(let n=0;n<r.length;n++)t[n]=r.charCodeAt(n);return t}export function encodeBase64Url(e){return encodeBase64(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}export function decodeBase64Url(e){if(e==="")return new Uint8Array(0);let r=e.replace(/-/g,"+").replace(/_/g,"/");const t=(4-r.length%4)%4;return r+="=".repeat(t),decodeBase64(r)}

package/dist/hmac.js

@@ -1,25 +1 @@
-// @agentdock/crypto — HMAC-SHA512 using Web Crypto API
-// Browser + Node.js 22+ compatible (no node:crypto)
-/**
- * Compute HMAC-SHA512 of data using the given key.
- *
- * Uses Web Crypto API (globalThis.crypto.subtle) for cross-platform
- * compatibility between browsers and Node.js 22+.
- *
- * @param key  - HMAC key (must be at least 1 byte; will be hashed if > block size)
- * @param data - Data to authenticate
- * @returns 64-byte HMAC-SHA512 digest
- * @throws Error if key is empty (zero-length keys are not supported by Web Crypto API)
- */
-export async function hmacSha512(key, data) {
-    if (key.byteLength === 0) {
-        throw new Error('HMAC key must not be empty');
-    }
-    const algorithm = { name: 'HMAC', hash: 'SHA-512' };
-    const cryptoKey = await crypto.subtle.importKey('raw', key, algorithm, false, [
-        'sign',
-    ]);
-    const signature = await crypto.subtle.sign('HMAC', cryptoKey, data);
-    return new Uint8Array(signature);
-}
-//# sourceMappingURL=hmac.js.map
+"use strict";export async function hmacSha512(t,n){if(t.byteLength===0)throw new Error("HMAC key must not be empty");const r={name:"HMAC",hash:"SHA-512"},e=await crypto.subtle.importKey("raw",t,r,!1,["sign"]),a=await crypto.subtle.sign("HMAC",e,n);return new Uint8Array(a)}

package/dist/index.js

@@ -1,23 +1 @@
-// @agentdock/crypto — E2E encryption for AgentDock
-// Web Crypto API + tweetnacl, browser + Node.js 22+ compatible
-// Base64 encoding/decoding
-export { encodeBase64, decodeBase64, encodeBase64Url, decodeBase64Url } from './encoding.js';
-// Secure random number generation
-export { getRandomBytes } from './random.js';
-// AES-256-GCM encryption/decryption
-export { encryptAesGcm, decryptAesGcm } from './aes.js';
-// HMAC-SHA512
-export { hmacSha512 } from './hmac.js';
-// Key derivation tree
-export { deriveSecretKeyTreeRoot, deriveSecretKeyTreeChild, deriveKey } from './keys.js';
-// Authentication challenge (Ed25519)
-export { authChallenge, signChallenge, verifyChallenge } from './auth.js';
-// NaCl Box encryption (public key / key delivery)
-export { encryptBox, decryptBox, boxPublicKeyFromSecretKey, generateBoxKeyPair } from './box.js';
-// NaCl SecretBox encryption (symmetric / legacy)
-export { encryptSecretBox, decryptSecretBox } from './secretbox.js';
-// Content keypair derivation
-export { deriveContentKeyPair } from './content.js';
-// Session encryption (high-level API)
-export { generateSessionKeys, unwrapSessionKey, encryptEnvelope, decryptEnvelope, } from './session.js';
-//# sourceMappingURL=index.js.map
+"use strict";export{encodeBase64,decodeBase64,encodeBase64Url,decodeBase64Url}from"./encoding.js";export{getRandomBytes}from"./random.js";export{encryptAesGcm,decryptAesGcm}from"./aes.js";export{hmacSha512}from"./hmac.js";export{deriveSecretKeyTreeRoot,deriveSecretKeyTreeChild,deriveKey}from"./keys.js";export{authChallenge,signChallenge,verifyChallenge}from"./auth.js";export{encryptBox,decryptBox,boxPublicKeyFromSecretKey,generateBoxKeyPair}from"./box.js";export{encryptSecretBox,decryptSecretBox}from"./secretbox.js";export{deriveContentKeyPair}from"./content.js";export{generateSessionKeys,unwrapSessionKey,encryptEnvelope,decryptEnvelope}from"./session.js";

package/dist/keys.js

@@ -1,67 +1 @@
-// @agentdock/crypto — HMAC-SHA512 key derivation tree
-// Compatible with Happy project's key tree pattern, using Web Crypto API
-import { hmacSha512 } from './hmac.js';
-const encoder = new TextEncoder();
-/**
- * Split a 64-byte HMAC output into key (first 32) and chainCode (last 32).
- */
-function splitHmacOutput(hmacOutput) {
-    return {
-        key: hmacOutput.slice(0, 32),
-        chainCode: hmacOutput.slice(32, 64),
-    };
-}
-/**
- * Derive the root key tree state from a seed and usage string.
- *
- * Formula: HMAC-SHA512(encode(usage + " Master Seed"), seed)
- * - The HMAC key is the UTF-8 encoding of `usage + " Master Seed"`
- * - The HMAC data is the raw seed bytes
- *
- * @param seed  - Root seed material
- * @param usage - Purpose string (e.g., "encryption", "authentication")
- * @returns Root KeyTreeState with key and chainCode
- */
-export async function deriveSecretKeyTreeRoot(seed, usage) {
-    const hmacKey = encoder.encode(usage + ' Master Seed');
-    const hmacOutput = await hmacSha512(hmacKey, seed);
-    return splitHmacOutput(hmacOutput);
-}
-/**
- * Derive a child key tree state from a parent chain code and index.
- *
- * Formula: HMAC-SHA512(parentChainCode, [0x00, ...encode(index)])
- * - Prepends a 0x00 byte before the index string encoding
- *
- * @param chainCode - Parent node's chain code (32 bytes)
- * @param index     - Child index identifier string
- * @returns Child KeyTreeState with key and chainCode
- */
-export async function deriveSecretKeyTreeChild(chainCode, index) {
-    const indexBytes = encoder.encode(index);
-    const data = new Uint8Array(1 + indexBytes.byteLength);
-    data[0] = 0x00;
-    data.set(indexBytes, 1);
-    const hmacOutput = await hmacSha512(chainCode, data);
-    return splitHmacOutput(hmacOutput);
-}
-/**
- * Convenience function: derive a final key by walking a path from root.
- *
- * 1. Derive root from master seed + usage
- * 2. For each segment in path, derive child from current chainCode
- * 3. Return the final key (32 bytes)
- *
- * @param master - Master seed material
- * @param usage  - Purpose string for root derivation
- * @param path   - Array of path segments to walk
- * @returns Final derived key (32 bytes)
- */
-export async function deriveKey(master, usage, path) {
-    let state = await deriveSecretKeyTreeRoot(master, usage);
-    for (const segment of path) {
-        state = await deriveSecretKeyTreeChild(state.chainCode, segment);
-    }
-    return state.key;
-}
-//# sourceMappingURL=keys.js.map
+"use strict";import{hmacSha512 as r}from"./hmac.js";const a=new TextEncoder;function i(t){return{key:t.slice(0,32),chainCode:t.slice(32,64)}}export async function deriveSecretKeyTreeRoot(t,c){const n=a.encode(c+" Master Seed"),e=await r(n,t);return i(e)}export async function deriveSecretKeyTreeChild(t,c){const n=a.encode(c),e=new Uint8Array(1+n.byteLength);e[0]=0,e.set(n,1);const o=await r(t,e);return i(o)}export async function deriveKey(t,c,n){let e=await deriveSecretKeyTreeRoot(t,c);for(const o of n)e=await deriveSecretKeyTreeChild(e.chainCode,o);return e.key}

package/dist/random.js

@@ -1,20 +1 @@
-/**
- * Cryptographically secure random number generation.
- *
- * Uses the Web Crypto API (globalThis.crypto.getRandomValues),
- * compatible with both browsers and Node.js 22+.
- */
-/**
- * Generate cryptographically secure random bytes.
- *
- * @param size - Number of random bytes to generate (0 or more).
- * @returns A new Uint8Array filled with random bytes.
- */
-export function getRandomBytes(size) {
-    const buffer = new Uint8Array(size);
-    if (size > 0) {
-        globalThis.crypto.getRandomValues(buffer);
-    }
-    return buffer;
-}
-//# sourceMappingURL=random.js.map
+"use strict";export function getRandomBytes(t){const n=new Uint8Array(t);return t>0&&globalThis.crypto.getRandomValues(n),n}

package/dist/secretbox.js

@@ -1,51 +1 @@
-/**
- * NaCl SecretBox encryption — aligned with Happy.
- *
- * Symmetric authenticated encryption (XSalsa20-Poly1305).
- * Used for legacy encryption mode.
- *
- * Bundle format: nonce(24) + ciphertext
- */
-import nacl from 'tweetnacl';
-import { getRandomBytes } from './random.js';
-/**
- * Encrypt data with a secret key using NaCl SecretBox.
- *
- * JSON-serializes the data, then encrypts with XSalsa20-Poly1305.
- *
- * @param data - Data to encrypt (will be JSON-serialized)
- * @param secret - 32-byte secret key
- * @returns Bundle: nonce(24) + ciphertext
- */
-export function encryptSecretBox(data, secret) {
-    const nonce = getRandomBytes(nacl.secretbox.nonceLength);
-    const plaintext = new TextEncoder().encode(JSON.stringify(data));
-    const encrypted = nacl.secretbox(plaintext, nonce, secret);
-    const result = new Uint8Array(nonce.length + encrypted.length);
-    result.set(nonce);
-    result.set(encrypted, nonce.length);
-    return result;
-}
-/**
- * Decrypt a NaCl SecretBox bundle with a secret key.
- *
- * @param bundle - Bundle: nonce(24) + ciphertext
- * @param secret - 32-byte secret key
- * @returns Deserialized data, or null if decryption fails
- */
-export function decryptSecretBox(bundle, secret) {
-    try {
-        if (bundle.length < nacl.secretbox.nonceLength)
-            return null;
-        const nonce = bundle.slice(0, nacl.secretbox.nonceLength);
-        const ciphertext = bundle.slice(nacl.secretbox.nonceLength);
-        const decrypted = nacl.secretbox.open(ciphertext, nonce, secret);
-        if (!decrypted)
-            return null;
-        return JSON.parse(new TextDecoder().decode(decrypted));
-    }
-    catch {
-        return null; // SILENT-CATCH-OK: decryption failure returns null by design
-    }
-}
-//# sourceMappingURL=secretbox.js.map
+"use strict";import t from"tweetnacl";import{getRandomBytes as x}from"./random.js";export function encryptSecretBox(n,r){const e=x(t.secretbox.nonceLength),o=new TextEncoder().encode(JSON.stringify(n)),c=t.secretbox(o,e,r),s=new Uint8Array(e.length+c.length);return s.set(e),s.set(c,e.length),s}export function decryptSecretBox(n,r){try{if(n.length<t.secretbox.nonceLength)return null;const e=n.slice(0,t.secretbox.nonceLength),o=n.slice(t.secretbox.nonceLength),c=t.secretbox.open(o,e,r);return c?JSON.parse(new TextDecoder().decode(c)):null}catch{return null}}

package/dist/session.js

@@ -1,106 +1 @@
-/**
- * Session encryption — high-level API composing AES-GCM + NaCl Box.
- *
- * Provides per-session data encryption key (DEK) generation, wrapping,
- * unwrapping, and envelope encrypt/decrypt. Compatible with Happy protocol.
- *
- * Key flow:
- *   masterSecret → deriveContentKeyPair → contentPublicKey
- *   random DEK (32 bytes) → NaCl Box(DEK, contentPublicKey) → wrappedDek
- *   envelope → AES-256-GCM(DEK) → ciphertext (base64)
- */
-import { encryptAesGcm, decryptAesGcm } from './aes.js';
-import { encryptBox, decryptBox } from './box.js';
-import { deriveContentKeyPair } from './content.js';
-import { getRandomBytes } from './random.js';
-import { encodeBase64, decodeBase64 } from './encoding.js';
-/** Current wrapped key version. */
-const WRAPPED_KEY_VERSION = 0;
-/** Expected DEK size in bytes. */
-const DEK_SIZE = 32;
-/** Minimum wrapped key bundle size: version(1) + NaCl Box overhead (32+24+16+32). */
-const MIN_WRAPPED_SIZE = 1 + 32 + 24 + DEK_SIZE;
-/**
- * Generate a per-session data encryption key and wrap it with NaCl Box.
- *
- * 1. Derive content keypair from masterSecret
- * 2. Generate random 32-byte DEK
- * 3. Wrap DEK: NaCl Box(DEK, contentPublicKey)
- * 4. Prepend version byte
- *
- * @param masterSecret - 32-byte master secret shared between daemon and web
- * @returns DEK (for local use) and wrappedDekBase64 (for server storage)
- */
-export async function generateSessionKeys(masterSecret) {
-    const { publicKey } = await deriveContentKeyPair(masterSecret);
-    const dek = getRandomBytes(DEK_SIZE);
-    // Wrap DEK with NaCl Box
-    const boxBundle = encryptBox(dek, publicKey);
-    // Prepend version byte
-    const wrapped = new Uint8Array(1 + boxBundle.length);
-    wrapped[0] = WRAPPED_KEY_VERSION;
-    wrapped.set(boxBundle, 1);
-    return { dek, wrappedDekBase64: encodeBase64(wrapped) };
-}
-/**
- * Unwrap a session DEK using the master secret.
- *
- * 1. Base64-decode the wrapped key
- * 2. Check version byte (must be 0)
- * 3. Derive content keypair from masterSecret
- * 4. Decrypt with NaCl Box using content secret key
- *
- * @param wrappedDekBase64 - Base64-encoded wrapped key from server
- * @param masterSecret - Same master secret used during generation
- * @returns 32-byte DEK, or null if unwrapping fails
- */
-export async function unwrapSessionKey(wrappedDekBase64, masterSecret) {
-    let wrapped;
-    try {
-        wrapped = decodeBase64(wrappedDekBase64);
-    }
-    catch {
-        return null; // SILENT-CATCH-OK: invalid base64 means bad wrapped key
-    }
-    if (wrapped.length < MIN_WRAPPED_SIZE)
-        return null;
-    if (wrapped[0] !== WRAPPED_KEY_VERSION)
-        return null;
-    const boxBundle = wrapped.slice(1);
-    const { secretKey } = await deriveContentKeyPair(masterSecret);
-    const dek = decryptBox(boxBundle, secretKey);
-    if (!dek || dek.length !== DEK_SIZE)
-        return null;
-    return dek;
-}
-/**
- * Encrypt a SessionEnvelope (or any JSON-serializable value) for transmission.
- *
- * @param envelope - Data to encrypt (JSON-serializable)
- * @param dek - 32-byte data encryption key
- * @returns Base64-encoded AES-256-GCM ciphertext
- */
-export async function encryptEnvelope(envelope, dek) {
-    const bundle = await encryptAesGcm(envelope, dek);
-    return encodeBase64(bundle);
-}
-/**
- * Decrypt a base64-encoded ciphertext back to the original data.
- *
- * @param ciphertextBase64 - Base64-encoded AES-256-GCM bundle
- * @param dek - 32-byte data encryption key
- * @returns Decrypted data, or null if decryption fails
- */
-export async function decryptEnvelope(ciphertextBase64, dek) {
-    let bundle;
-    try {
-        bundle = decodeBase64(ciphertextBase64);
-    }
-    catch {
-        return null; // SILENT-CATCH-OK: invalid base64 means bad ciphertext
-    }
-    if (bundle.length === 0)
-        return null;
-    return decryptAesGcm(bundle, dek);
-}
-//# sourceMappingURL=session.js.map
+"use strict";import{encryptAesGcm as i,decryptAesGcm as y}from"./aes.js";import{encryptBox as d,decryptBox as f}from"./box.js";import{deriveContentKeyPair as l}from"./content.js";import{getRandomBytes as m}from"./random.js";import{encodeBase64 as u,decodeBase64 as p}from"./encoding.js";const a=0,s=32,E=57+s;export async function generateSessionKeys(n){const{publicKey:t}=await l(n),e=m(s),o=d(e,t),r=new Uint8Array(1+o.length);return r[0]=a,r.set(o,1),{dek:e,wrappedDekBase64:u(r)}}export async function unwrapSessionKey(n,t){let e;try{e=p(n)}catch{return null}if(e.length<E||e[0]!==a)return null;const o=e.slice(1),{secretKey:r}=await l(t),c=f(o,r);return!c||c.length!==s?null:c}export async function encryptEnvelope(n,t){const e=await i(n,t);return u(e)}export async function decryptEnvelope(n,t){let e;try{e=p(n)}catch{return null}return e.length===0?null:y(e,t)}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentdock/crypto",
-  "version": "0.0.46",
+  "version": "0.0.47",
   "description": "E2E encryption for AgentDock — AES-256-GCM, key derivation, Web Crypto API",
   "license": "UNLICENSED",
   "author": "kevin8536945",
@@ -23,7 +23,7 @@
   },
   "dependencies": {
     "tweetnacl": "^1.0.3",
-    "@agentdock/wire": "0.0.46"
+    "@agentdock/wire": "0.0.47"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "^3.0.0",

package/dist/aes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"aes.d.ts","sourceRoot":"","sources":["../src/aes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAmBH;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAqBvF;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA+BhG"}

package/dist/aes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"aes.js","sourceRoot":"","sources":["../src/aes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,qCAAqC;AACrC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,mCAAmC;AACnC,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,gDAAgD;AAChD,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,iEAAiE;AACjE,MAAM,eAAe,GAAG,CAAC,GAAG,UAAU,GAAG,aAAa,CAAC;AAEvD,0CAA0C;AAC1C,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAa,EAAE,GAAe;IAChE,aAAa,CAAC,GAAG,CAAC,CAAC;IAEnB,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CACtD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAqB,EAAE,EAC9C,SAAS,EACT,SAAyB,CAC1B,CAAC;IAEF,yDAAyD;IACzD,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC;IAE3C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAkB,EAAE,GAAe;IACrE,aAAa,CAAC,GAAG,CAAC,CAAC;IAEnB,+BAA+B;IAC/B,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uCAAuC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;IAEvD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CACtD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAqB,EAAE,EAC9C,SAAS,EACT,iBAAiC,CAClC,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,GAAe,EAAE,MAA+B;IACvE,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,SAAS,EAAE,KAAK,EAAE;QACtF,GAAG,MAAM;KACV,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAe;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC;IACjF,CAAC;AACH,CAAC"}

package/dist/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAclF;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,CAQ7E;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAMlB"}

package/dist/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAgB;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEjD,oCAAoC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAEvC,qBAAqB;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAEnE,OAAO;QACL,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAiB,EACjB,IAAgB;IAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/D,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAqB,EACrB,SAAqB,EACrB,SAAqB;IAErB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,gEAAgE;IAChF,CAAC;AACH,CAAC"}

package/dist/box.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"box.d.ts","sourceRoot":"","sources":["../src/box.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,GAAG,UAAU,CAWvF;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAShG;AAED,8CAA8C;AAC9C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,UAAU,CAM/C;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAE3E"}

package/dist/box.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"box.js","sourceRoot":"","sources":["../src/box.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,IAAgB,EAAE,kBAA8B;IACzE,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAExF,wDAAwD;IACxD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,MAAkB,EAAE,kBAA8B;IAC3E,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,kBAAkB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAC3F,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9B,OAAO;QACL,SAAS,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC;QACvC,SAAS,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAAqB;IAC7D,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7E,CAAC"}

package/dist/content.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../src/content.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,CAa7E"}

package/dist/content.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"content.js","sourceRoot":"","sources":["../src/content.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEnE,oEAAoE;IACpE,qCAAqC;IACrC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAoB,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAC7D,OAAO;QACL,SAAS,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5C,SAAS,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;KAC7C,CAAC;AACJ,CAAC"}

package/dist/encoding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../src/encoding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CASvD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CASvD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAG1D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAU7D"}

package/dist/encoding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../src/encoding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAkB;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,qDAAqD;IACrD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,IAAI,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7D,kBAAkB;IAClB,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEpC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC"}

package/dist/hmac.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hmac.d.ts","sourceRoot":"","sources":["../src/hmac.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAcvF"}

package/dist/hmac.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hmac.js","sourceRoot":"","sources":["../src/hmac.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,oDAAoD;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAe,EAAE,IAAgB;IAChE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAW,CAAC;IAE7D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,SAAS,EAAE,KAAK,EAAE;QAC5F,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAoB,CAAC,CAAC;IAEpF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC"}

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAG7F,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGxD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGvC,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACzF,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAG9C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1E,YAAY,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGrD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACjG,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAG3C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGpD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC"}

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,+DAA+D;AAE/D,2BAA2B;AAC3B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE7F,kCAAkC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,oCAAoC;AACpC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD,cAAc;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,sBAAsB;AACtB,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGzF,qCAAqC;AACrC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG1E,kDAAkD;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAGjG,iDAAiD;AACjD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,6BAA6B;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,sCAAsC;AACtC,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,cAAc,CAAC"}

package/dist/keys.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAcF;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,YAAY,CAAC,CAIvB;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,UAAU,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,YAAY,CAAC,CAQvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,OAAO,CAAC,UAAU,CAAC,CAQrB"}

package/dist/keys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,yEAAyE;AAEzE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAavC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC;;GAEG;AACH,SAAS,eAAe,CAAC,UAAsB;IAC7C,OAAO;QACL,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5B,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAgB,EAChB,KAAa;IAEb,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAqB,EACrB,KAAa;IAEb,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACf,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAExB,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAkB,EAClB,KAAa,EACb,IAAuB;IAEvB,IAAI,KAAK,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEzD,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,KAAK,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC;AACnB,CAAC"}

package/dist/random.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"random.d.ts","sourceRoot":"","sources":["../src/random.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAMvD"}

package/dist/random.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"random.js","sourceRoot":"","sources":["../src/random.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/secretbox.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secretbox.d.ts","sourceRoot":"","sources":["../src/secretbox.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAS9E;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,IAAI,CAcvF"}

package/dist/secretbox.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secretbox.js","sourceRoot":"","sources":["../src/secretbox.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa,EAAE,MAAkB;IAChE,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAE3D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAkB,EAAE,MAAkB;IACrE,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAE5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAE5D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,6DAA6D;IAC5E,CAAC;AACH,CAAC"}

package/dist/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAiBH;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,UAAU,GACvB,OAAO,CAAC;IAAE,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAAC,CAa1E;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,UAAU,GACvB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAkB5B;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAGzF;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,gBAAgB,EAAE,MAAM,EACxB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAWzB"}

package/dist/session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE3D,mCAAmC;AACnC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,kCAAkC;AAClC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAwB;IAExB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAErC,yBAAyB;IACzB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAE7C,uBAAuB;IACvB,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAE1B,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,gBAAwB,EACxB,YAAwB;IAExB,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,wDAAwD;IACvE,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAEpD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAiB,EAAE,GAAe;IACtE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,gBAAwB,EACxB,GAAe;IAEf,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,uDAAuD;IACtE,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,OAAO,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC"}