@azure/attestation 1.0.1-alpha.20241022.1 → 1.0.1-alpha.20241023.1

package/dist/commonjs/utils/base64.js

@@ -0,0 +1,79 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeString = encodeString;
+exports.base64EncodeByteArray = base64EncodeByteArray;
+exports.base64UrlEncodeByteArray = base64UrlEncodeByteArray;
+exports.base64DecodeString = base64DecodeString;
+exports.base64UrlDecodeString = base64UrlDecodeString;
+exports.hexToByteArray = hexToByteArray;
+exports.byteArrayToHex = byteArrayToHex;
+/**
+ * Encodes a string in base64 format.
+ * @param value - the string to encode
+ */
+function encodeString(value) {
+    return Buffer.from(value).toString("base64");
+}
+/**
+ * Encodes a byte array in base64 format.
+ * @param value - the Uint8Array to encode
+ */
+function base64EncodeByteArray(value) {
+    // Buffer.from accepts <ArrayBuffer> | <SharedArrayBuffer>-- the TypeScript definition is off here
+    // https://nodejs.org/api/buffer.html#buffer_class_method_buffer_from_arraybuffer_byteoffset_length
+    const bufferValue = value instanceof Buffer ? value : Buffer.from(value.buffer);
+    return bufferValue.toString("base64");
+}
+/**
+ * Encodes a byte array in base64 format.
+ * @param value - the Uint8Array to encode
+ */
+function base64UrlEncodeByteArray(value) {
+    // Buffer.from accepts <ArrayBuffer> | <SharedArrayBuffer>-- the TypeScript definition is off here
+    // https://nodejs.org/api/buffer.html#buffer_class_method_buffer_from_arraybuffer_byteoffset_length
+    const bufferValue = value instanceof Buffer ? value : Buffer.from(value.buffer);
+    const base64 = bufferValue.toString("base64");
+    // Convert the base64 buffer to base64url.
+    return base64.replace(/\+/g, "-").replace(/\//, "_").split("=")[0];
+}
+/**
+ * Decodes a base64 string into a byte array.
+ * @param value - the base64 string to decode
+ */
+function base64DecodeString(value) {
+    return Buffer.from(value, "base64");
+}
+/**
+ * Adds missing padding to a Base64 encoded string
+ * @param unpadded - The unpadded input string
+ * @returns The padded string
+ */
+function fixPadding(unpadded) {
+    const count = 3 - ((unpadded.length + 3) % 4);
+    return unpadded + "=".repeat(count);
+}
+/**
+ * Decodes a base64url string into a byte array.
+ * @param value - the base64url string to decode
+ */
+function base64UrlDecodeString(value) {
+    const encoded = value.replace(/-/g, "+").replace(/_/g, "/");
+    const paddedEncoded = fixPadding(encoded);
+    return base64DecodeString(paddedEncoded);
+}
+function hexToByteArray(value) {
+    if (value.length % 2 !== 0) {
+        throw new Error("base64FromHex: Input must be a multiple of 2 characters");
+    }
+    const byteArray = new Array();
+    for (let i = 0; i < value.length; i += 2) {
+        byteArray.push(parseInt(value.substr(i, 2), 16));
+    }
+    return Uint8Array.from(byteArray);
+}
+function byteArrayToHex(value) {
+    return value.reduce((str, byte) => str + byte.toString(16).padStart(2, "0"), "");
+}
+//# sourceMappingURL=base64.js.map

package/dist/commonjs/utils/base64.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../../../src/utils/base64.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;AAMlC,oCAEC;AAMD,sDAKC;AAMD,4DAOC;AAMD,gDAEC;AAgBD,sDAIC;AAED,wCASC;AAED,wCAEC;AAzED;;;GAGG;AACH,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAiB;IACrD,kGAAkG;IAClG,mGAAmG;IACnG,MAAM,WAAW,GAAG,KAAK,YAAY,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAqB,CAAC,CAAC;IAC/F,OAAO,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,KAAiB;IACxD,kGAAkG;IAClG,mGAAmG;IACnG,MAAM,WAAW,GAAG,KAAK,YAAY,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAqB,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9C,0CAA0C;IAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,OAAO,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAa;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,KAAK,EAAE,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,cAAc,CAAC,KAAiB;IAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/**\n * Encodes a string in base64 format.\n * @param value - the string to encode\n */\nexport function encodeString(value: string): string {\n  return Buffer.from(value).toString(\"base64\");\n}\n\n/**\n * Encodes a byte array in base64 format.\n * @param value - the Uint8Array to encode\n */\nexport function base64EncodeByteArray(value: Uint8Array): string {\n  // Buffer.from accepts <ArrayBuffer> | <SharedArrayBuffer>-- the TypeScript definition is off here\n  // https://nodejs.org/api/buffer.html#buffer_class_method_buffer_from_arraybuffer_byteoffset_length\n  const bufferValue = value instanceof Buffer ? value : Buffer.from(value.buffer as ArrayBuffer);\n  return bufferValue.toString(\"base64\");\n}\n\n/**\n * Encodes a byte array in base64 format.\n * @param value - the Uint8Array to encode\n */\nexport function base64UrlEncodeByteArray(value: Uint8Array): string {\n  // Buffer.from accepts <ArrayBuffer> | <SharedArrayBuffer>-- the TypeScript definition is off here\n  // https://nodejs.org/api/buffer.html#buffer_class_method_buffer_from_arraybuffer_byteoffset_length\n  const bufferValue = value instanceof Buffer ? value : Buffer.from(value.buffer as ArrayBuffer);\n  const base64 = bufferValue.toString(\"base64\");\n  // Convert the base64 buffer to base64url.\n  return base64.replace(/\\+/g, \"-\").replace(/\\//, \"_\").split(\"=\")[0];\n}\n\n/**\n * Decodes a base64 string into a byte array.\n * @param value - the base64 string to decode\n */\nexport function base64DecodeString(value: string): Uint8Array {\n  return Buffer.from(value, \"base64\");\n}\n\n/**\n * Adds missing padding to a Base64 encoded string\n * @param unpadded - The unpadded input string\n * @returns The padded string\n */\nfunction fixPadding(unpadded: string): string {\n  const count = 3 - ((unpadded.length + 3) % 4);\n  return unpadded + \"=\".repeat(count);\n}\n\n/**\n * Decodes a base64url string into a byte array.\n * @param value - the base64url string to decode\n */\nexport function base64UrlDecodeString(value: string): Uint8Array {\n  const encoded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  const paddedEncoded = fixPadding(encoded);\n  return base64DecodeString(paddedEncoded);\n}\n\nexport function hexToByteArray(value: string): Uint8Array {\n  if (value.length % 2 !== 0) {\n    throw new Error(\"base64FromHex: Input must be a multiple of 2 characters\");\n  }\n  const byteArray = new Array();\n  for (let i = 0; i < value.length; i += 2) {\n    byteArray.push(parseInt(value.substr(i, 2), 16));\n  }\n  return Uint8Array.from(byteArray);\n}\n\nexport function byteArrayToHex(value: Uint8Array): string {\n  return value.reduce((str, byte) => str + byte.toString(16).padStart(2, \"0\"), \"\");\n}\n"]}

package/dist/commonjs/utils/buffer.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Converts an attestation input from Uint8Array/Buffer/Blob to Uint8Array.
+ *
+ * @param input - Input to attestation API.
+ * @returns Promise which completes with the input data as a Uint8Array.
+ */
+export declare function Uint8ArrayFromInput(input: Uint8Array | Buffer | Blob | undefined): Promise<Uint8Array | undefined>;
+//# sourceMappingURL=buffer.d.ts.map

package/dist/commonjs/utils/buffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buffer.d.ts","sourceRoot":"","sources":["../../../src/utils/buffer.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAC5C,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAWjC"}

package/dist/commonjs/utils/buffer.js

@@ -0,0 +1,22 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Uint8ArrayFromInput = Uint8ArrayFromInput;
+/**
+ * Converts an attestation input from Uint8Array/Buffer/Blob to Uint8Array.
+ *
+ * @param input - Input to attestation API.
+ * @returns Promise which completes with the input data as a Uint8Array.
+ */
+async function Uint8ArrayFromInput(input) {
+    if (input === undefined) {
+        return input;
+    }
+    if (input.byteLength === undefined) {
+        throw TypeError("Blob is unsupported in node.");
+    }
+    // We've eliminated the 'Blob' case above, so we know this must be either a Buffer or Uint8Array.
+    return input;
+}
+//# sourceMappingURL=buffer.js.map

package/dist/commonjs/utils/buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buffer.js","sourceRoot":"","sources":["../../../src/utils/buffer.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;AAQlC,kDAaC;AAnBD;;;;;GAKG;AACI,KAAK,UAAU,mBAAmB,CACvC,KAA6C;IAE7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAK,KAAa,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,iGAAiG;IACjG,OAAO,KAAmB,CAAC;AAC7B,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/**\n * Converts an attestation input from Uint8Array/Buffer/Blob to Uint8Array.\n *\n * @param input - Input to attestation API.\n * @returns Promise which completes with the input data as a Uint8Array.\n */\nexport async function Uint8ArrayFromInput(\n  input: Uint8Array | Buffer | Blob | undefined,\n): Promise<Uint8Array | undefined> {\n  if (input === undefined) {\n    return input;\n  }\n\n  if ((input as any).byteLength === undefined) {\n    throw TypeError(\"Blob is unsupported in node.\");\n  }\n\n  // We've eliminated the 'Blob' case above, so we know this must be either a Buffer or Uint8Array.\n  return input as Uint8Array;\n}\n"]}

package/dist/commonjs/utils/helpers.d.ts

@@ -0,0 +1,22 @@
+/** Create an AttestationSigningKey from the provided private key and certificate.
+ *
+ * @param privateKey - PEM encoded DER Encoded RSA or ECDS key.
+ * @param certificate - PEM encoded DER encoded X.509 certificate.
+ */
+export declare function verifyAttestationSigningKey(privateKey: string, certificate: string): {
+    certificate: string;
+    privateKey: string;
+};
+export type PemType = "CERTIFICATE" | "PRIVATE KEY";
+/**
+ *
+ * @param base64 - Base64 encoded DER object to encode as PEM.
+ * @param pemType - PEM object type - typically "CERTIFICATE" |
+ */
+export declare function pemFromBase64(base64: string, pemType: PemType): string;
+/**
+ * Converts a hex encoded string to its base64 equivalent.
+ * @param value - Hex encoded value
+ */
+export declare function hexToBase64(value: string): string;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/commonjs/utils/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/utils/helpers.ts"],"names":[],"mappings":"AAQA;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA2B7C;AAED,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,aAAa,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAStE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD"}

package/dist/commonjs/utils/helpers.js

@@ -0,0 +1,62 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAttestationSigningKey = verifyAttestationSigningKey;
+exports.pemFromBase64 = pemFromBase64;
+exports.hexToBase64 = hexToBase64;
+const tslib_1 = require("tslib");
+// eslint-disable-next-line @typescript-eslint/triple-slash-reference
+/// <reference path="../jsrsasign.d.ts"/>
+const jsrsasign = tslib_1.__importStar(require("jsrsasign"));
+const base64_js_1 = require("./base64.js");
+/** Create an AttestationSigningKey from the provided private key and certificate.
+ *
+ * @param privateKey - PEM encoded DER Encoded RSA or ECDS key.
+ * @param certificate - PEM encoded DER encoded X.509 certificate.
+ */
+function verifyAttestationSigningKey(privateKey, certificate) {
+    //
+    // Ensure that the key and certificate are associated with each other.
+    //
+    // Sign a buffer with the key, then verify the signature with the
+    // certificate.
+    const x509 = new jsrsasign.X509();
+    x509.readCertPEM(certificate);
+    const alg = x509.getSignatureAlgorithmName();
+    const signer = new jsrsasign.KJUR.crypto.Signature({ alg: alg });
+    // Confirm that the certificate and private key are related to each other.
+    const bufferToSign = "1234";
+    signer.init(privateKey);
+    signer.updateString(bufferToSign);
+    const sigVal = signer.sign();
+    const verifier = new jsrsasign.KJUR.crypto.Signature({ alg: alg });
+    verifier.init(x509.getPublicKey());
+    verifier.updateString(bufferToSign);
+    if (!verifier.verify(sigVal)) {
+        throw new Error("verifyAttestationSigningKey: Key does not match Certificate.");
+    }
+    return { certificate: certificate, privateKey: privateKey };
+}
+/**
+ *
+ * @param base64 - Base64 encoded DER object to encode as PEM.
+ * @param pemType - PEM object type - typically "CERTIFICATE" |
+ */
+function pemFromBase64(base64, pemType) {
+    let pem = "-----BEGIN " + pemType + "-----\n";
+    while (base64 !== "") {
+        pem += base64.substr(0, 64) + "\n";
+        base64 = base64.substr(64);
+    }
+    pem += "-----END " + pemType + "-----\n";
+    return pem;
+}
+/**
+ * Converts a hex encoded string to its base64 equivalent.
+ * @param value - Hex encoded value
+ */
+function hexToBase64(value) {
+    return (0, base64_js_1.base64EncodeByteArray)((0, base64_js_1.hexToByteArray)(value));
+}
+//# sourceMappingURL=helpers.js.map

package/dist/commonjs/utils/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/utils/helpers.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;AAYlC,kEA8BC;AASD,sCASC;AAMD,kCAEC;;AAlED,qEAAqE;AACrE,yCAAyC;AACzC,6DAAuC;AACvC,2CAAoE;AAEpE;;;;GAIG;AACH,SAAgB,2BAA2B,CACzC,UAAkB,EAClB,WAAmB;IAEnB,EAAE;IACF,sEAAsE;IACtE,EAAE;IACF,iEAAiE;IACjE,eAAe;IACf,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;IAE7C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjE,0EAA0E;IAC1E,MAAM,YAAY,GAAG,MAAM,CAAC;IAE5B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC;AAID;;;;GAIG;AACH,SAAgB,aAAa,CAAC,MAAc,EAAE,OAAgB;IAC5D,IAAI,GAAG,GAAG,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;IAC9C,OAAO,MAAM,KAAK,EAAE,EAAE,CAAC;QACrB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;QACnC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,GAAG,IAAI,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IAEzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,KAAa;IACvC,OAAO,IAAA,iCAAqB,EAAC,IAAA,0BAAc,EAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n// eslint-disable-next-line @typescript-eslint/triple-slash-reference\n/// <reference path=\"../jsrsasign.d.ts\"/>\nimport * as jsrsasign from \"jsrsasign\";\nimport { base64EncodeByteArray, hexToByteArray } from \"./base64.js\";\n\n/** Create an AttestationSigningKey from the provided private key and certificate.\n *\n * @param privateKey - PEM encoded DER Encoded RSA or ECDS key.\n * @param certificate - PEM encoded DER encoded X.509 certificate.\n */\nexport function verifyAttestationSigningKey(\n  privateKey: string,\n  certificate: string,\n): { certificate: string; privateKey: string } {\n  //\n  // Ensure that the key and certificate are associated with each other.\n  //\n  // Sign a buffer with the key, then verify the signature with the\n  // certificate.\n  const x509 = new jsrsasign.X509();\n  x509.readCertPEM(certificate);\n\n  const alg = x509.getSignatureAlgorithmName();\n\n  const signer = new jsrsasign.KJUR.crypto.Signature({ alg: alg });\n\n  // Confirm that the certificate and private key are related to each other.\n  const bufferToSign = \"1234\";\n\n  signer.init(privateKey);\n  signer.updateString(bufferToSign);\n  const sigVal = signer.sign();\n\n  const verifier = new jsrsasign.KJUR.crypto.Signature({ alg: alg });\n  verifier.init(x509.getPublicKey());\n  verifier.updateString(bufferToSign);\n  if (!verifier.verify(sigVal)) {\n    throw new Error(\"verifyAttestationSigningKey: Key does not match Certificate.\");\n  }\n  return { certificate: certificate, privateKey: privateKey };\n}\n\nexport type PemType = \"CERTIFICATE\" | \"PRIVATE KEY\";\n\n/**\n *\n * @param base64 - Base64 encoded DER object to encode as PEM.\n * @param pemType - PEM object type - typically \"CERTIFICATE\" |\n */\nexport function pemFromBase64(base64: string, pemType: PemType): string {\n  let pem = \"-----BEGIN \" + pemType + \"-----\\n\";\n  while (base64 !== \"\") {\n    pem += base64.substr(0, 64) + \"\\n\";\n    base64 = base64.substr(64);\n  }\n  pem += \"-----END \" + pemType + \"-----\\n\";\n\n  return pem;\n}\n\n/**\n * Converts a hex encoded string to its base64 equivalent.\n * @param value - Hex encoded value\n */\nexport function hexToBase64(value: string): string {\n  return base64EncodeByteArray(hexToByteArray(value));\n}\n"]}

package/dist/commonjs/utils/typeDeserializer.d.ts

@@ -0,0 +1,34 @@
+import { Mapper } from "@azure/core-client";
+/**
+ * The TypeDeserializer class enables easy access to the Attestation Model serialization
+ * and deserialization APIs.
+ */
+export declare class TypeDeserializer {
+    /**
+     * Deserializes a JSON object into a model type.
+     * @param rawJson - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A mapping between type names and {@link Mapper} objects
+     *  which defines the model properties for the type. the {@link bodyTypeName}
+     *  must be one of the properties in the {@link bodyMapper} parameter.
+     * @param bodyTypeName - The name of the type of the body.
+     * @returns The deserialized type. It is the responsibility of the caller to cast to the
+     *      expected return type.
+     *
+     * @internal
+     */
+    static deserialize(rawJson: unknown, typeMappers: {
+        [key: string]: any;
+    }, bodyTypeName: string): unknown;
+    /**
+     * Serializes a JSON object into a model type.
+     * @param objectToSerialize - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A {@link Mapper} object which defines the model properties for the type.
+     * @returns The serialized type as a JSON encoded string.
+     *
+     * @internal
+     */
+    static serialize(objectToSerialize: unknown, typeMappers: {
+        [key: string]: Mapper;
+    }, bodyMapper: Mapper): string;
+}
+//# sourceMappingURL=typeDeserializer.d.ts.map

package/dist/commonjs/utils/typeDeserializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeDeserializer.d.ts","sourceRoot":"","sources":["../../../src/utils/typeDeserializer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,oBAAoB,CAAC;AAE9D;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B;;;;;;;;;;;OAWG;WACW,WAAW,CACvB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,EACnC,YAAY,EAAE,MAAM,GACnB,OAAO;IAKV;;;;;;;OAOG;WACW,SAAS,CACrB,iBAAiB,EAAE,OAAO,EAC1B,WAAW,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EACtC,UAAU,EAAE,MAAM,GACjB,MAAM;CAIV"}

package/dist/commonjs/utils/typeDeserializer.js

@@ -0,0 +1,42 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TypeDeserializer = void 0;
+const core_client_1 = require("@azure/core-client");
+/**
+ * The TypeDeserializer class enables easy access to the Attestation Model serialization
+ * and deserialization APIs.
+ */
+class TypeDeserializer {
+    /**
+     * Deserializes a JSON object into a model type.
+     * @param rawJson - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A mapping between type names and {@link Mapper} objects
+     *  which defines the model properties for the type. the {@link bodyTypeName}
+     *  must be one of the properties in the {@link bodyMapper} parameter.
+     * @param bodyTypeName - The name of the type of the body.
+     * @returns The deserialized type. It is the responsibility of the caller to cast to the
+     *      expected return type.
+     *
+     * @internal
+     */
+    static deserialize(rawJson, typeMappers, bodyTypeName) {
+        const serializer = (0, core_client_1.createSerializer)(typeMappers);
+        return serializer.deserialize(typeMappers[bodyTypeName], rawJson, bodyTypeName);
+    }
+    /**
+     * Serializes a JSON object into a model type.
+     * @param objectToSerialize - The JSON encoded object to convert into model type.
+     * @param bodyMapper - A {@link Mapper} object which defines the model properties for the type.
+     * @returns The serialized type as a JSON encoded string.
+     *
+     * @internal
+     */
+    static serialize(objectToSerialize, typeMappers, bodyMapper) {
+        const serializer = (0, core_client_1.createSerializer)(typeMappers);
+        return JSON.stringify(serializer.serialize(bodyMapper, objectToSerialize));
+    }
+}
+exports.TypeDeserializer = TypeDeserializer;
+//# sourceMappingURL=typeDeserializer.js.map

package/dist/commonjs/utils/typeDeserializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeDeserializer.js","sourceRoot":"","sources":["../../../src/utils/typeDeserializer.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,oDAA8D;AAE9D;;;GAGG;AACH,MAAa,gBAAgB;IAC3B;;;;;;;;;;;OAWG;IACI,MAAM,CAAC,WAAW,CACvB,OAAgB,EAChB,WAAmC,EACnC,YAAoB;QAEpB,MAAM,UAAU,GAAG,IAAA,8BAAgB,EAAC,WAAW,CAAC,CAAC;QACjD,OAAO,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAClF,CAAC;IAED;;;;;;;OAOG;IACI,MAAM,CAAC,SAAS,CACrB,iBAA0B,EAC1B,WAAsC,EACtC,UAAkB;QAElB,MAAM,UAAU,GAAG,IAAA,8BAAgB,EAAC,WAAW,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF;AAtCD,4CAsCC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { Mapper, createSerializer } from \"@azure/core-client\";\n\n/**\n * The TypeDeserializer class enables easy access to the Attestation Model serialization\n * and deserialization APIs.\n */\nexport class TypeDeserializer {\n  /**\n   * Deserializes a JSON object into a model type.\n   * @param rawJson - The JSON encoded object to convert into model type.\n   * @param bodyMapper - A mapping between type names and {@link Mapper} objects\n   *  which defines the model properties for the type. the {@link bodyTypeName}\n   *  must be one of the properties in the {@link bodyMapper} parameter.\n   * @param bodyTypeName - The name of the type of the body.\n   * @returns The deserialized type. It is the responsibility of the caller to cast to the\n   *      expected return type.\n   *\n   * @internal\n   */\n  public static deserialize(\n    rawJson: unknown,\n    typeMappers: { [key: string]: any },\n    bodyTypeName: string,\n  ): unknown {\n    const serializer = createSerializer(typeMappers);\n    return serializer.deserialize(typeMappers[bodyTypeName], rawJson, bodyTypeName);\n  }\n\n  /**\n   * Serializes a JSON object into a model type.\n   * @param objectToSerialize - The JSON encoded object to convert into model type.\n   * @param bodyMapper - A {@link Mapper} object which defines the model properties for the type.\n   * @returns The serialized type as a JSON encoded string.\n   *\n   * @internal\n   */\n  public static serialize(\n    objectToSerialize: unknown,\n    typeMappers: { [key: string]: Mapper },\n    bodyMapper: Mapper,\n  ): string {\n    const serializer = createSerializer(typeMappers);\n    return JSON.stringify(serializer.serialize(bodyMapper, objectToSerialize));\n  }\n}\n"]}

package/dist/commonjs/utils/utf8.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Converts a string into a utf8 encoded byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+export declare function stringToBytes(content: string): Uint8Array;
+/**
+ * Converts a utf8 string into a byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+export declare function bytesToString(content: Uint8Array): string;
+//# sourceMappingURL=utf8.d.ts.map

package/dist/commonjs/utils/utf8.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utf8.d.ts","sourceRoot":"","sources":["../../../src/utils/utf8.ts"],"names":[],"mappings":"AAeA;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAEzD"}

package/dist/commonjs/utils/utf8.js

@@ -0,0 +1,31 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stringToBytes = stringToBytes;
+exports.bytesToString = bytesToString;
+const decoder = typeof Buffer === "undefined" ? new TextDecoder("ascii") : undefined;
+const encoder = typeof Buffer === "undefined" ? new TextEncoder() : undefined;
+const decode = decoder
+    ? (buffer) => decoder.decode(buffer)
+    : (buffer) => buffer.toString("ascii");
+const encode = encoder
+    ? (str) => encoder.encode(str)
+    : (str) => Buffer.from(str, "utf8");
+/**
+ * Converts a string into a utf8 encoded byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+function stringToBytes(content) {
+    return encode(content);
+}
+/**
+ * Converts a utf8 string into a byte array.
+ * @param content - The utf8 string to convert.
+ * @internal
+ */
+function bytesToString(content) {
+    return decode(content);
+}
+//# sourceMappingURL=utf8.js.map

package/dist/commonjs/utils/utf8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utf8.js","sourceRoot":"","sources":["../../../src/utils/utf8.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;AAmBlC,sCAEC;AAOD,sCAEC;AA5BD,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAErF,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9E,MAAM,MAAM,GAAoC,OAAO;IACrD,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAE,MAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAErD,MAAM,MAAM,GAAgC,OAAO;IACjD,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;IAC9B,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAEtC;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAAe;IAC3C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAAmB;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nconst decoder = typeof Buffer === \"undefined\" ? new TextDecoder(\"ascii\") : undefined;\n\nconst encoder = typeof Buffer === \"undefined\" ? new TextEncoder() : undefined;\n\nconst decode: (buffer: ArrayBuffer) => string = decoder\n  ? (buffer) => decoder.decode(buffer)\n  : (buffer) => (buffer as Buffer).toString(\"ascii\");\n\nconst encode: (str: string) => Uint8Array = encoder\n  ? (str) => encoder.encode(str)\n  : (str) => Buffer.from(str, \"utf8\");\n\n/**\n * Converts a string into a utf8 encoded byte array.\n * @param content - The utf8 string to convert.\n * @internal\n */\nexport function stringToBytes(content: string): Uint8Array {\n  return encode(content);\n}\n\n/**\n * Converts a utf8 string into a byte array.\n * @param content - The utf8 string to convert.\n * @internal\n */\nexport function bytesToString(content: Uint8Array): string {\n  return decode(content);\n}\n"]}

package/dist/esm/attestationAdministrationClient.d.ts

@@ -0,0 +1,183 @@
+import { AttestationResponse, AttestationSigner, AttestationTokenValidationOptions, AttestationType, PolicyCertificatesModificationResult, PolicyResult } from "./models/index.js";
+import { CommonClientOptions, OperationOptions } from "@azure/core-client";
+import { TokenCredential } from "@azure/core-auth";
+/**
+ * Attestation Client Construction Options.
+ */
+export interface AttestationAdministrationClientOptions extends CommonClientOptions {
+    /**
+     * Options to be used globally to validate attestation tokens received from
+     * the attestation service.
+     */
+    validationOptions?: AttestationTokenValidationOptions;
+}
+/**
+ * Operation options for the Attestation Administration Client operations.
+ */
+export interface AttestationAdministrationClientOperationOptions extends OperationOptions {
+    /**
+     * Options to be used globally to validate attestation tokens received from
+     * the attestation service.
+     */
+    validationOptions?: AttestationTokenValidationOptions;
+}
+/**
+ * Operation options for the administration Policy operations.
+ */
+export interface AttestationAdministrationClientPolicyOperationOptions extends AttestationAdministrationClientOperationOptions {
+    /**
+     * Optional Private key used to sign the token sent to the attestation service.
+     *
+     * Required for Isolated Mode attestation instances.
+     */
+    privateKey?: string;
+    /**
+     * Optional certificate which can validate the token sent to the attestation service.
+     *
+     * Required for Isolated Mode attestation instances.
+     *
+     * If the service instance is in Isolated mode, the certificate *must* be one
+     * of the configured policy management certificates.
+     */
+    certificate?: string;
+}
+/**
+ * Operation options for the Policy Certificates operations.
+ */
+export interface AttestationAdministrationClientPolicyCertificateOperationOptions extends AttestationAdministrationClientOperationOptions {
+}
+/**
+ * Attestation Client class.
+ *
+ * The AttestationClient class enables access to the Attestation related APIs:
+ *
+ * - getPolicy
+ * - setPolicy
+ * - resetPolicy
+ * - getPolicyManagementCertificates
+ * - addPolicyManagementCertificate
+ * - removePolicyManagementCertificate
+ */
+export declare class AttestationAdministrationClient {
+    /**
+     * Creates an instance of AttestationAdministrationClient.
+     *
+     * Example usage:
+     * ```ts
+     * import { AttestationAdministrationClient } from "@azure/attestation";
+     *
+     * const client = new AttestationAdministrationClient(
+     *    "<service endpoint>",
+     *    new TokenCredential("<>")
+     * );
+     * ```
+     *
+     * @param endpoint - The attestation instance endpoint, for example https://mytenant.attest.azure.net.
+     * @param credential - Used to authenticate requests to the service.
+     * @param options - Used to configure the Form Recognizer client.
+     */
+    constructor(endpoint: string, credentials: TokenCredential, options?: AttestationAdministrationClientOptions);
+    /**
+     * Retrieves the attestation policy document from the server, and returns it
+     * to the caller.
+     *
+     * @param attestationType - AttestationType for which to retrieve policy.
+     * @param options - Pipeline and client options for the `getPolicy` call.
+     * @returns `AttestationResponse<string>` - the `value` property is the
+     *      attestation policy,  the `token` property will be the actual token
+     *      returned by the attestation service.
+     */
+    getPolicy(attestationType: AttestationType, options?: AttestationAdministrationClientPolicyOperationOptions): Promise<AttestationResponse<string>>;
+    /**
+     * Sets the attestation policy for the specified {@link attestationType}.
+     *
+     * @param attestationType - Attestation Type for which to set policy.
+     * @param newPolicyDocument - Policy document to be set.
+     * @param options - call options.
+     * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.
+     *  Clients can use the PolicyResult to validate that the policy was actually
+     *  set by the attestation service.
+     *
+     * @remarks
+     *
+     * Please note that if the attestation service instance is running in "Isolated"
+     * mode, the {@link signingKey} must be one of the signing keys configured for the
+     * service instance.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     */
+    setPolicy(attestationType: AttestationType, newPolicyDocument: string, options?: AttestationAdministrationClientPolicyOperationOptions): Promise<AttestationResponse<PolicyResult>>;
+    /**
+     * Resets the attestation policy for the specified {@link attestationType} to
+     * the default value.
+     *
+     * @param attestationType - Attestation Type for which to set policy.
+     * @param options - call options.
+     * @returns An {@link AttestationResponse} wrapping a {@link PolicyResult}.
+     *  Clients can use the PolicyResult to validate that the policy was actually
+     *  reset by the attestation service.
+     *
+     * @remarks
+     *
+     * Please note that if the attestation service instance is running in "Isolated"
+     * mode, the {@link signingKey} must be one of the signing keys configured for the
+     * service instance.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     */
+    resetPolicy(attestationType: AttestationType, options?: AttestationAdministrationClientPolicyOperationOptions): Promise<AttestationResponse<PolicyResult>>;
+    /** Returns the set of policy management certificates for this attestation instance.
+     *
+     * @remarks If the attestation instance is not in `Isolated` mode, this list will
+     *    always be empty.
+     *
+     * @param options - Options for the call to the attestation service.
+     * @returns AttestationResponse wrapping a list of Attestation Signers.
+     */
+    getPolicyManagementCertificates(options?: AttestationAdministrationClientPolicyCertificateOperationOptions): Promise<AttestationResponse<AttestationSigner[]>>;
+    /** Add a new certificate chain to the set of policy management certificates.
+     *
+     * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.
+     * @param privateKey - Existing attestation private key used to sign the incoming request.
+     * @param certificate - Existing attestation certificate used to verify the incoming request.
+     * @param options - Options used in the call to the service.
+     * @returns An attestation response including a PolicyCertificatesModificationResult
+     *
+     * @remarks This API is only supported on `isolated` attestation instances.
+     *
+     * The signing key MUST be one of the existing attestation signing certificates. The
+     * new pemCertificate is signed using the signingKey and the service will validate the
+     * signature before allowing the addition.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     *
+     */
+    addPolicyManagementCertificate(pemCertificate: string, privateKey: string, certificate: string, options?: AttestationAdministrationClientPolicyCertificateOperationOptions): Promise<AttestationResponse<PolicyCertificatesModificationResult>>;
+    private keyTypeFromCertificate;
+    /** Add a new certificate chain to the set of policy management certificates.
+     *
+     * @param pemCertificate - PEM encoded certificate to add to the set of policy management certificates.
+     * @param privateKey - Existing attestation private key used to sign the incoming request.
+     * @param certificate - Existing attestation certificate used to verify the incoming request.
+     * @param options - Options used in the call to the service.
+     * @returns An attestation response including a PolicyCertificatesModificationResult
+     *
+     * @remarks This API is only supported on `isolated` attestation instances.
+     *
+     * The signing key MUST be one of the existing attestation signing certificates. The
+     * new pemCertificate is signed using the signingKey and the service will validate the
+     * signature before allowing the addition.
+     *
+     * @throws {@link Error} when a private key is specified without a certificate and vice versa.
+     * @throws {@link Error} when the key in the certificate provided does not match the private key.
+     */
+    removePolicyManagementCertificate(pemCertificate: string, privateKey: string, certificate: string, options?: AttestationAdministrationClientPolicyCertificateOperationOptions): Promise<AttestationResponse<PolicyCertificatesModificationResult>>;
+    private signingKeys;
+    private _client;
+    private _signers?;
+    private _validationOptions?;
+}
+//# sourceMappingURL=attestationAdministrationClient.d.ts.map

package/dist/esm/attestationAdministrationClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationAdministrationClient.d.ts","sourceRoot":"","sources":["../../src/attestationAdministrationClient.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iCAAiC,EACjC,eAAe,EACf,oCAAoC,EACpC,YAAY,EACb,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAenD;;GAEG;AACH,MAAM,WAAW,sCAAuC,SAAQ,mBAAmB;IACjF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,+CAAgD,SAAQ,gBAAgB;IACvF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,qDACf,SAAQ,+CAA+C;IACvD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gEACf,SAAQ,+CAA+C;CAAG;AAE5D;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAC1C;;;;;;;;;;;;;;;;OAgBG;gBAGD,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sCAA2C;IAmBtD;;;;;;;;;OASG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IA6CvC;;;;;;;;;;;;;;;;;;OAkBG;IACU,SAAS,CACpB,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAqD7C;;;;;;;;;;;;;;;;;;OAkBG;IAEU,WAAW,CACtB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,qDAA0D,GAClE,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAoD7C;;;;;;;OAOG;IACU,+BAA+B,CAC1C,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAuCpD;;;;;;;;;;;;;;;;;OAiBG;IACU,8BAA8B,CACzC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;IAwErE,OAAO,CAAC,sBAAsB;IAmB9B;;;;;;;;;;;;;;;;OAgBG;IACU,iCAAiC,CAC5C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,gEAAqE,GAC7E,OAAO,CAAC,mBAAmB,CAAC,oCAAoC,CAAC,CAAC;YAwEvD,WAAW;IAazB,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,QAAQ,CAAC,CAAsB;IACvC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;CAChE"}