@azure/cosmos 4.3.0 → 4.4.0

package/dist/commonjs/encryption/Cache/ClientEncryptionKeyPropertiesCache.d.ts

@@ -0,0 +1,13 @@
+import type { ClientEncryptionKeyProperties } from "../ClientEncryptionKey/index.js";
+/**
+ * The cache used to store the properties of the client encryption key
+ * see {@link ClientEncryptionKeyProperties}
+ * @hidden
+ */
+export declare class ClientEncryptionKeyPropertiesCache {
+    private clientEncryptionKeyPropertiesCache;
+    constructor();
+    get(key: string): ClientEncryptionKeyProperties | undefined;
+    set(key: string, clientEncryptionKeyProperties: ClientEncryptionKeyProperties): void;
+}
+//# sourceMappingURL=ClientEncryptionKeyPropertiesCache.d.ts.map

package/dist/commonjs/encryption/Cache/ClientEncryptionKeyPropertiesCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionKeyPropertiesCache.d.ts","sourceRoot":"","sources":["../../../../src/encryption/Cache/ClientEncryptionKeyPropertiesCache.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAErF;;;;GAIG;AAEH,qBAAa,kCAAkC;IAE7C,OAAO,CAAC,kCAAkC,CAA6C;;IAMhF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,6BAA6B,GAAG,SAAS;IAG3D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,6BAA6B,EAAE,6BAA6B,GAAG,IAAI;CAG5F"}

package/dist/commonjs/encryption/Cache/ClientEncryptionKeyPropertiesCache.js

@@ -0,0 +1,23 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientEncryptionKeyPropertiesCache = void 0;
+/**
+ * The cache used to store the properties of the client encryption key
+ * see {@link ClientEncryptionKeyProperties}
+ * @hidden
+ */
+class ClientEncryptionKeyPropertiesCache {
+    constructor() {
+        this.clientEncryptionKeyPropertiesCache = new Map();
+    }
+    get(key) {
+        return this.clientEncryptionKeyPropertiesCache.get(key);
+    }
+    set(key, clientEncryptionKeyProperties) {
+        this.clientEncryptionKeyPropertiesCache.set(key, clientEncryptionKeyProperties);
+    }
+}
+exports.ClientEncryptionKeyPropertiesCache = ClientEncryptionKeyPropertiesCache;
+//# sourceMappingURL=ClientEncryptionKeyPropertiesCache.js.map

package/dist/commonjs/encryption/Cache/ClientEncryptionKeyPropertiesCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionKeyPropertiesCache.js","sourceRoot":"","sources":["../../../../src/encryption/Cache/ClientEncryptionKeyPropertiesCache.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAIlC;;;;GAIG;AAEH,MAAa,kCAAkC;IAI7C;QACE,IAAI,CAAC,kCAAkC,GAAG,IAAI,GAAG,EAAyC,CAAC;IAC7F,CAAC;IAEM,GAAG,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IACM,GAAG,CAAC,GAAW,EAAE,6BAA4D;QAClF,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IAClF,CAAC;CACF;AAdD,gFAcC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { ClientEncryptionKeyProperties } from \"../ClientEncryptionKey/index.js\";\n\n/**\n * The cache used to store the properties of the client encryption key\n * see {@link ClientEncryptionKeyProperties}\n * @hidden\n */\n\nexport class ClientEncryptionKeyPropertiesCache {\n  // key is database rid + '/'+ clientEncryptionKeyId\n  private clientEncryptionKeyPropertiesCache: Map<string, ClientEncryptionKeyProperties>;\n\n  public constructor() {\n    this.clientEncryptionKeyPropertiesCache = new Map<string, ClientEncryptionKeyProperties>();\n  }\n\n  public get(key: string): ClientEncryptionKeyProperties | undefined {\n    return this.clientEncryptionKeyPropertiesCache.get(key);\n  }\n  public set(key: string, clientEncryptionKeyProperties: ClientEncryptionKeyProperties): void {\n    this.clientEncryptionKeyPropertiesCache.set(key, clientEncryptionKeyProperties);\n  }\n}\n"]}

package/dist/commonjs/encryption/Cache/EncryptionSettingsCache.d.ts

@@ -0,0 +1,15 @@
+import type { ClientEncryptionPolicy } from "../ClientEncryptionPolicy.js";
+import { EncryptionSettings } from "../EncryptionSettings.js";
+/**
+ * The cache used to store encryption settings for a container.
+ * see {@link EncryptionSettings}
+ * @hidden
+ */
+export declare class EncryptionSettingsCache {
+    private cache;
+    constructor();
+    create(id: string, containerRid: string, partitionKeyPaths: string[], clientEncryptionPolicy: ClientEncryptionPolicy): Promise<EncryptionSettings>;
+    get(key: string): EncryptionSettings | undefined;
+    set(key: string, encryptionSettings: EncryptionSettings): void;
+}
+//# sourceMappingURL=EncryptionSettingsCache.d.ts.map

package/dist/commonjs/encryption/Cache/EncryptionSettingsCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EncryptionSettingsCache.d.ts","sourceRoot":"","sources":["../../../../src/encryption/Cache/EncryptionSettingsCache.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D;;;;GAIG;AACH,qBAAa,uBAAuB;IAElC,OAAO,CAAC,KAAK,CAAkC;;IAMlC,MAAM,CACjB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,MAAM,EAAE,EAC3B,sBAAsB,EAAE,sBAAsB,GAC7C,OAAO,CAAC,kBAAkB,CAAC;IAgBvB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIhD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,GAAG,IAAI;CAGtE"}

package/dist/commonjs/encryption/Cache/EncryptionSettingsCache.js

@@ -0,0 +1,37 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptionSettingsCache = void 0;
+const EncryptionSettings_js_1 = require("../EncryptionSettings.js");
+const EncryptionSettingForProperty_js_1 = require("../EncryptionSettingForProperty.js");
+/**
+ * The cache used to store encryption settings for a container.
+ * see {@link EncryptionSettings}
+ * @hidden
+ */
+class EncryptionSettingsCache {
+    constructor() {
+        this.cache = new Map();
+    }
+    async create(id, containerRid, partitionKeyPaths, clientEncryptionPolicy) {
+        const encryptionSettings = new EncryptionSettings_js_1.EncryptionSettings(id, containerRid, partitionKeyPaths);
+        if (!clientEncryptionPolicy)
+            return;
+        for (const includedPath of clientEncryptionPolicy.includedPaths) {
+            const encryptionSettingForProperty = new EncryptionSettingForProperty_js_1.EncryptionSettingForProperty(includedPath);
+            encryptionSettings.pathsToEncrypt.push(includedPath.path);
+            encryptionSettings.setEncryptionSettingForProperty(includedPath.path, encryptionSettingForProperty);
+        }
+        this.set(id, encryptionSettings);
+        return encryptionSettings;
+    }
+    get(key) {
+        return this.cache.get(key);
+    }
+    set(key, encryptionSettings) {
+        this.cache.set(key, encryptionSettings);
+    }
+}
+exports.EncryptionSettingsCache = EncryptionSettingsCache;
+//# sourceMappingURL=EncryptionSettingsCache.js.map

package/dist/commonjs/encryption/Cache/EncryptionSettingsCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EncryptionSettingsCache.js","sourceRoot":"","sources":["../../../../src/encryption/Cache/EncryptionSettingsCache.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAGlC,oEAA8D;AAC9D,wFAAkF;AAClF;;;;GAIG;AACH,MAAa,uBAAuB;IAIlC;QACE,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,EAAU,EACV,YAAoB,EACpB,iBAA2B,EAC3B,sBAA8C;QAE9C,MAAM,kBAAkB,GAAG,IAAI,0CAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;QACvF,IAAI,CAAC,sBAAsB;YAAE,OAAO;QAEpC,KAAK,MAAM,YAAY,IAAI,sBAAsB,CAAC,aAAa,EAAE,CAAC;YAChE,MAAM,4BAA4B,GAAG,IAAI,8DAA4B,CAAC,YAAY,CAAC,CAAC;YACpF,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC1D,kBAAkB,CAAC,+BAA+B,CAChD,YAAY,CAAC,IAAI,EACjB,4BAA4B,CAC7B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACjC,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAEM,GAAG,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAEM,GAAG,CAAC,GAAW,EAAE,kBAAsC;QAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC1C,CAAC;CACF;AApCD,0DAoCC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { ClientEncryptionPolicy } from \"../ClientEncryptionPolicy.js\";\nimport { EncryptionSettings } from \"../EncryptionSettings.js\";\nimport { EncryptionSettingForProperty } from \"../EncryptionSettingForProperty.js\";\n/**\n * The cache used to store encryption settings for a container.\n * see {@link EncryptionSettings}\n * @hidden\n */\nexport class EncryptionSettingsCache {\n  // key is databaseRid + '/' + containerRid\n  private cache: Map<string, EncryptionSettings>;\n\n  public constructor() {\n    this.cache = new Map<string, EncryptionSettings>();\n  }\n\n  public async create(\n    id: string,\n    containerRid: string,\n    partitionKeyPaths: string[],\n    clientEncryptionPolicy: ClientEncryptionPolicy,\n  ): Promise<EncryptionSettings> {\n    const encryptionSettings = new EncryptionSettings(id, containerRid, partitionKeyPaths);\n    if (!clientEncryptionPolicy) return;\n\n    for (const includedPath of clientEncryptionPolicy.includedPaths) {\n      const encryptionSettingForProperty = new EncryptionSettingForProperty(includedPath);\n      encryptionSettings.pathsToEncrypt.push(includedPath.path);\n      encryptionSettings.setEncryptionSettingForProperty(\n        includedPath.path,\n        encryptionSettingForProperty,\n      );\n    }\n    this.set(id, encryptionSettings);\n    return encryptionSettings;\n  }\n\n  public get(key: string): EncryptionSettings | undefined {\n    return this.cache.get(key);\n  }\n\n  public set(key: string, encryptionSettings: EncryptionSettings): void {\n    this.cache.set(key, encryptionSettings);\n  }\n}\n"]}

package/dist/commonjs/encryption/Cache/KeyEncryptionKeyCache.d.ts

@@ -0,0 +1,15 @@
+import type { EncryptionKeyStoreProvider } from "../EncryptionKeyStoreProvider.js";
+import { KeyEncryptionKey } from "../KeyEncryptionKey.js";
+/**
+ * The cache used to store the key encryption keys.
+ * see {@link KeyEncryptionKey}
+ * @hidden
+ */
+export declare class KeyEncryptionKeyCache {
+    cache: Map<string, KeyEncryptionKey>;
+    constructor();
+    getOrCreate(name: string, path: string, keyStoreProvider: EncryptionKeyStoreProvider): KeyEncryptionKey;
+    private get;
+    private set;
+}
+//# sourceMappingURL=KeyEncryptionKeyCache.d.ts.map

package/dist/commonjs/encryption/Cache/KeyEncryptionKeyCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeyEncryptionKeyCache.d.ts","sourceRoot":"","sources":["../../../../src/encryption/Cache/KeyEncryptionKeyCache.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;;GAIG;AACH,qBAAa,qBAAqB;IAEzB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;;IAMrC,WAAW,CAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,0BAA0B,GAC3C,gBAAgB;IAUnB,OAAO,CAAC,GAAG;IAGX,OAAO,CAAC,GAAG;CAGZ"}

package/dist/commonjs/encryption/Cache/KeyEncryptionKeyCache.js

@@ -0,0 +1,33 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyEncryptionKeyCache = void 0;
+const KeyEncryptionKey_js_1 = require("../KeyEncryptionKey.js");
+/**
+ * The cache used to store the key encryption keys.
+ * see {@link KeyEncryptionKey}
+ * @hidden
+ */
+class KeyEncryptionKeyCache {
+    constructor() {
+        this.cache = new Map();
+    }
+    getOrCreate(name, path, keyStoreProvider) {
+        const key = JSON.stringify([name, path]);
+        let keyEncryptionKey = this.get(key);
+        if (!keyEncryptionKey) {
+            keyEncryptionKey = new KeyEncryptionKey_js_1.KeyEncryptionKey(name, path, keyStoreProvider);
+            this.set(key, keyEncryptionKey);
+        }
+        return keyEncryptionKey;
+    }
+    get(key) {
+        return this.cache.get(key);
+    }
+    set(key, keyEncryptionKey) {
+        this.cache.set(key, keyEncryptionKey);
+    }
+}
+exports.KeyEncryptionKeyCache = KeyEncryptionKeyCache;
+//# sourceMappingURL=KeyEncryptionKeyCache.js.map

package/dist/commonjs/encryption/Cache/KeyEncryptionKeyCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeyEncryptionKeyCache.js","sourceRoot":"","sources":["../../../../src/encryption/Cache/KeyEncryptionKeyCache.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAGlC,gEAA0D;AAE1D;;;;GAIG;AACH,MAAa,qBAAqB;IAIhC;QACE,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,CAAC;IAEM,WAAW,CAChB,IAAY,EACZ,IAAY,EACZ,gBAA4C;QAE5C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,gBAAgB,GAAG,IAAI,sCAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACtE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEO,GAAG,CAAC,GAAW;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IACO,GAAG,CAAC,GAAW,EAAE,gBAAkC;QACzD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACxC,CAAC;CACF;AA5BD,sDA4BC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionKeyStoreProvider } from \"../EncryptionKeyStoreProvider.js\";\nimport { KeyEncryptionKey } from \"../KeyEncryptionKey.js\";\n\n/**\n * The cache used to store the key encryption keys.\n * see {@link KeyEncryptionKey}\n * @hidden\n */\nexport class KeyEncryptionKeyCache {\n  // key is JSON.stringify([name, path])\n  public cache: Map<string, KeyEncryptionKey>;\n\n  constructor() {\n    this.cache = new Map<string, KeyEncryptionKey>();\n  }\n\n  public getOrCreate(\n    name: string,\n    path: string,\n    keyStoreProvider: EncryptionKeyStoreProvider,\n  ): KeyEncryptionKey {\n    const key = JSON.stringify([name, path]);\n    let keyEncryptionKey = this.get(key);\n    if (!keyEncryptionKey) {\n      keyEncryptionKey = new KeyEncryptionKey(name, path, keyStoreProvider);\n      this.set(key, keyEncryptionKey);\n    }\n    return keyEncryptionKey;\n  }\n\n  private get(key: string): KeyEncryptionKey | undefined {\n    return this.cache.get(key);\n  }\n  private set(key: string, keyEncryptionKey: KeyEncryptionKey): void {\n    this.cache.set(key, keyEncryptionKey);\n  }\n}\n"]}

package/dist/commonjs/encryption/Cache/ProtectedDataEncryptionKeyCache.d.ts

@@ -0,0 +1,20 @@
+import { ProtectedDataEncryptionKey } from "../EncryptionKey/ProtectedDataEncryptionKey.js";
+import type { KeyEncryptionKey } from "../KeyEncryptionKey.js";
+/**
+ * The cache used to store the protected data encryption key.
+ * see {@link ProtectedDataEncryptionKey}
+ * @hidden
+ */
+export declare class ProtectedDataEncryptionKeyCache {
+    private cacheTimeToLive;
+    private cache;
+    cacheRefresher: NodeJS.Timeout;
+    constructor(cacheTimeToLive: number);
+    get(key: string): ProtectedDataEncryptionKey | undefined;
+    private set;
+    private clearCacheOnTtlExpiry;
+    private createProtectedDataEncryptionKey;
+    getOrCreate(name: string, keyEncryptionKey: KeyEncryptionKey, encryptedValue?: Uint8Array, forceRefresh?: boolean): Promise<ProtectedDataEncryptionKey>;
+    private generateColumnEncryptionKey;
+}
+//# sourceMappingURL=ProtectedDataEncryptionKeyCache.d.ts.map

package/dist/commonjs/encryption/Cache/ProtectedDataEncryptionKeyCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProtectedDataEncryptionKeyCache.d.ts","sourceRoot":"","sources":["../../../../src/encryption/Cache/ProtectedDataEncryptionKeyCache.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D;;;;GAIG;AACH,qBAAa,+BAA+B;IAM9B,OAAO,CAAC,eAAe;IAJnC,OAAO,CAAC,KAAK,CAAkD;IAE/D,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC;gBAEX,eAAe,EAAE,MAAM;IAKpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS;IAO/D,OAAO,CAAC,GAAG;YAOG,qBAAqB;YAWrB,gCAAgC;IA2BjC,WAAW,CACtB,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,gBAAgB,EAClC,cAAc,CAAC,EAAE,UAAU,EAC3B,YAAY,CAAC,EAAE,OAAO,GACrB,OAAO,CAAC,0BAA0B,CAAC;IAqBtC,OAAO,CAAC,2BAA2B;CAGpC"}

package/dist/commonjs/encryption/Cache/ProtectedDataEncryptionKeyCache.js

@@ -0,0 +1,89 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProtectedDataEncryptionKeyCache = void 0;
+const node_crypto_1 = require("node:crypto");
+const ProtectedDataEncryptionKey_js_1 = require("../EncryptionKey/ProtectedDataEncryptionKey.js");
+const index_js_1 = require("../../common/index.js");
+/**
+ * The cache used to store the protected data encryption key.
+ * see {@link ProtectedDataEncryptionKey}
+ * @hidden
+ */
+class ProtectedDataEncryptionKeyCache {
+    constructor(cacheTimeToLive) {
+        this.cacheTimeToLive = cacheTimeToLive;
+        this.cache = new Map();
+        this.clearCacheOnTtlExpiry();
+    }
+    get(key) {
+        if (!this.cache.has(key)) {
+            return undefined;
+        }
+        return this.cache.get(key)[1];
+    }
+    set(key, protectedDataEncryptionKey) {
+        if (this.cacheTimeToLive === 0) {
+            return;
+        }
+        this.cache.set(key, [new Date(), protectedDataEncryptionKey]);
+    }
+    async clearCacheOnTtlExpiry() {
+        this.cacheRefresher = setInterval(() => {
+            const now = new Date();
+            for (const key of this.cache.keys()) {
+                if (now.getTime() - this.cache.get(key)[0].getTime() > this.cacheTimeToLive) {
+                    this.cache.delete(key);
+                }
+            }
+        }, index_js_1.Constants.EncryptionCacheRefreshIntervalInMs);
+    }
+    async createProtectedDataEncryptionKey(name, keyEncryptionKey, encryptedValue) {
+        let rawKey;
+        let encryptedKey;
+        if (encryptedValue) {
+            rawKey = await keyEncryptionKey.unwrapEncryptionKey(encryptedValue);
+            encryptedKey = encryptedValue;
+        }
+        else {
+            rawKey = this.generateColumnEncryptionKey();
+            encryptedKey = await keyEncryptionKey.wrapEncryptionKey(rawKey);
+        }
+        const newKey = new ProtectedDataEncryptionKey_js_1.ProtectedDataEncryptionKey(name, keyEncryptionKey, rawKey, encryptedKey);
+        if (this.cacheTimeToLive !== 0) {
+            const key = JSON.stringify([
+                name,
+                keyEncryptionKey.name,
+                keyEncryptionKey.path,
+                encryptedKey.toString("hex"),
+            ]);
+            this.set(key, newKey);
+        }
+        return newKey;
+    }
+    async getOrCreate(name, keyEncryptionKey, encryptedValue, forceRefresh) {
+        const encryptedValueBuffer = encryptedValue ? Buffer.from(encryptedValue) : undefined;
+        if (this.cacheTimeToLive === 0 || forceRefresh) {
+            return this.createProtectedDataEncryptionKey(name, keyEncryptionKey, encryptedValueBuffer);
+        }
+        if (encryptedValueBuffer) {
+            const key = JSON.stringify([
+                name,
+                keyEncryptionKey.name,
+                keyEncryptionKey.path,
+                encryptedValueBuffer.toString("hex"),
+            ]);
+            const protectedDataEncryptionKey = this.get(key);
+            if (protectedDataEncryptionKey) {
+                return protectedDataEncryptionKey;
+            }
+        }
+        return this.createProtectedDataEncryptionKey(name, keyEncryptionKey, encryptedValueBuffer);
+    }
+    generateColumnEncryptionKey() {
+        return (0, node_crypto_1.randomBytes)(32);
+    }
+}
+exports.ProtectedDataEncryptionKeyCache = ProtectedDataEncryptionKeyCache;
+//# sourceMappingURL=ProtectedDataEncryptionKeyCache.js.map

package/dist/commonjs/encryption/Cache/ProtectedDataEncryptionKeyCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProtectedDataEncryptionKeyCache.js","sourceRoot":"","sources":["../../../../src/encryption/Cache/ProtectedDataEncryptionKeyCache.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,6CAA0C;AAC1C,kGAA4F;AAE5F,oDAAkD;AAElD;;;;GAIG;AACH,MAAa,+BAA+B;IAM1C,YAAoB,eAAuB;QAAvB,oBAAe,GAAf,eAAe,CAAQ;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAA8C,CAAC;QACnE,IAAI,CAAC,qBAAqB,EAAE,CAAC;IAC/B,CAAC;IAEM,GAAG,CAAC,GAAW;QACpB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAEO,GAAG,CAAC,GAAW,EAAE,0BAAsD;QAC7E,IAAI,IAAI,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACpC,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC5E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC,EAAE,oBAAS,CAAC,kCAAkC,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,gCAAgC,CAC5C,IAAY,EACZ,gBAAkC,EAClC,cAAuB;QAEvB,IAAI,MAAc,CAAC;QACnB,IAAI,YAAoB,CAAC;QACzB,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;YACpE,YAAY,GAAG,cAAc,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;YAC5C,YAAY,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,0DAA0B,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI;gBACJ,gBAAgB,CAAC,IAAI;gBACrB,gBAAgB,CAAC,IAAI;gBACrB,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,IAAY,EACZ,gBAAkC,EAClC,cAA2B,EAC3B,YAAsB;QAEtB,MAAM,oBAAoB,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,IAAI,IAAI,CAAC,eAAe,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,gCAAgC,CAAC,IAAI,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI;gBACJ,gBAAgB,CAAC,IAAI;gBACrB,gBAAgB,CAAC,IAAI;gBACrB,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC;aACrC,CAAC,CAAC;YACH,MAAM,0BAA0B,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,0BAA0B,EAAE,CAAC;gBAC/B,OAAO,0BAA0B,CAAC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,gCAAgC,CAAC,IAAI,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;IAC7F,CAAC;IAEO,2BAA2B;QACjC,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC;IACzB,CAAC;CACF;AA5FD,0EA4FC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { randomBytes } from \"node:crypto\";\nimport { ProtectedDataEncryptionKey } from \"../EncryptionKey/ProtectedDataEncryptionKey.js\";\nimport type { KeyEncryptionKey } from \"../KeyEncryptionKey.js\";\nimport { Constants } from \"../../common/index.js\";\n\n/**\n * The cache used to store the protected data encryption key.\n * see {@link ProtectedDataEncryptionKey}\n * @hidden\n */\nexport class ProtectedDataEncryptionKeyCache {\n  // key is JSON.stringify([encryptionKeyId, keyEncryptionKey.name, keyEncryptionKey.path, encryptedValue.toString(\"hex\")])\n  private cache: Map<string, [Date, ProtectedDataEncryptionKey]>;\n  // interval for clear cache to run\n  cacheRefresher: NodeJS.Timeout;\n\n  constructor(private cacheTimeToLive: number) {\n    this.cache = new Map<string, [Date, ProtectedDataEncryptionKey]>();\n    this.clearCacheOnTtlExpiry();\n  }\n\n  public get(key: string): ProtectedDataEncryptionKey | undefined {\n    if (!this.cache.has(key)) {\n      return undefined;\n    }\n    return this.cache.get(key)[1];\n  }\n\n  private set(key: string, protectedDataEncryptionKey: ProtectedDataEncryptionKey): void {\n    if (this.cacheTimeToLive === 0) {\n      return;\n    }\n    this.cache.set(key, [new Date(), protectedDataEncryptionKey]);\n  }\n\n  private async clearCacheOnTtlExpiry(): Promise<void> {\n    this.cacheRefresher = setInterval(() => {\n      const now = new Date();\n      for (const key of this.cache.keys()) {\n        if (now.getTime() - this.cache.get(key)[0].getTime() > this.cacheTimeToLive) {\n          this.cache.delete(key);\n        }\n      }\n    }, Constants.EncryptionCacheRefreshIntervalInMs);\n  }\n\n  private async createProtectedDataEncryptionKey(\n    name: string,\n    keyEncryptionKey: KeyEncryptionKey,\n    encryptedValue?: Buffer,\n  ): Promise<ProtectedDataEncryptionKey> {\n    let rawKey: Buffer;\n    let encryptedKey: Buffer;\n    if (encryptedValue) {\n      rawKey = await keyEncryptionKey.unwrapEncryptionKey(encryptedValue);\n      encryptedKey = encryptedValue;\n    } else {\n      rawKey = this.generateColumnEncryptionKey();\n      encryptedKey = await keyEncryptionKey.wrapEncryptionKey(rawKey);\n    }\n    const newKey = new ProtectedDataEncryptionKey(name, keyEncryptionKey, rawKey, encryptedKey);\n    if (this.cacheTimeToLive !== 0) {\n      const key = JSON.stringify([\n        name,\n        keyEncryptionKey.name,\n        keyEncryptionKey.path,\n        encryptedKey.toString(\"hex\"),\n      ]);\n      this.set(key, newKey);\n    }\n    return newKey;\n  }\n\n  public async getOrCreate(\n    name: string,\n    keyEncryptionKey: KeyEncryptionKey,\n    encryptedValue?: Uint8Array,\n    forceRefresh?: boolean,\n  ): Promise<ProtectedDataEncryptionKey> {\n    const encryptedValueBuffer = encryptedValue ? Buffer.from(encryptedValue) : undefined;\n    if (this.cacheTimeToLive === 0 || forceRefresh) {\n      return this.createProtectedDataEncryptionKey(name, keyEncryptionKey, encryptedValueBuffer);\n    }\n\n    if (encryptedValueBuffer) {\n      const key = JSON.stringify([\n        name,\n        keyEncryptionKey.name,\n        keyEncryptionKey.path,\n        encryptedValueBuffer.toString(\"hex\"),\n      ]);\n      const protectedDataEncryptionKey = this.get(key);\n      if (protectedDataEncryptionKey) {\n        return protectedDataEncryptionKey;\n      }\n    }\n    return this.createProtectedDataEncryptionKey(name, keyEncryptionKey, encryptedValueBuffer);\n  }\n\n  private generateColumnEncryptionKey(): Buffer {\n    return randomBytes(32);\n  }\n}\n"]}

package/dist/commonjs/encryption/ClientEncryptionIncludedPath.d.ts

@@ -0,0 +1,24 @@
+import { EncryptionType, EncryptionAlgorithm } from "./enums/index.js";
+/**
+ * Represents a path for encryption and its associated settings.
+ */
+export interface ClientEncryptionIncludedPath {
+    /**
+     * name of the path to be encrypted
+     */
+    path: string;
+    /**
+     * identifier of the client encryption key to use to encrypt the path
+     */
+    clientEncryptionKeyId: string;
+    /**
+     * type of encryption to be performed (Deterministic or Randomized)
+     */
+    encryptionType: EncryptionType;
+    /**
+     * encryption algorithm to be used
+     * currently only AEAD_AES_256_CBC_HMAC_SHA256 algo is supported
+     */
+    encryptionAlgorithm: EncryptionAlgorithm;
+}
+//# sourceMappingURL=ClientEncryptionIncludedPath.d.ts.map

package/dist/commonjs/encryption/ClientEncryptionIncludedPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionIncludedPath.d.ts","sourceRoot":"","sources":["../../../src/encryption/ClientEncryptionIncludedPath.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;;OAGG;IACH,mBAAmB,EAAE,mBAAmB,CAAC;CAC1C"}

package/dist/commonjs/encryption/ClientEncryptionIncludedPath.js

@@ -0,0 +1,5 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ClientEncryptionIncludedPath.js.map

package/dist/commonjs/encryption/ClientEncryptionIncludedPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionIncludedPath.js","sourceRoot":"","sources":["../../../src/encryption/ClientEncryptionIncludedPath.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { EncryptionType, EncryptionAlgorithm } from \"./enums/index.js\";\n\n/**\n * Represents a path for encryption and its associated settings.\n */\nexport interface ClientEncryptionIncludedPath {\n  /**\n   * name of the path to be encrypted\n   */\n  path: string;\n  /**\n   * identifier of the client encryption key to use to encrypt the path\n   */\n  clientEncryptionKeyId: string;\n  /**\n   * type of encryption to be performed (Deterministic or Randomized)\n   */\n  encryptionType: EncryptionType;\n  /**\n   * encryption algorithm to be used\n   * currently only AEAD_AES_256_CBC_HMAC_SHA256 algo is supported\n   */\n  encryptionAlgorithm: EncryptionAlgorithm;\n}\n"]}

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.d.ts

@@ -0,0 +1,23 @@
+import type { EncryptionKeyWrapMetadata } from "../EncryptionKeyWrapMetadata.js";
+/**
+ * Details of a client encryption key for use with the Azure Cosmos DB service.
+ */
+export interface ClientEncryptionKeyProperties {
+    /**
+     * unique identifier for the client encryption key
+     */
+    id: string;
+    /**
+     * Encryption algorithm that will be used along with this client encryption key to encrypt/decrypt data
+     */
+    encryptionAlgorithm: string;
+    /**
+     * Wrapped (encrypted) form of the client encryption key.
+     */
+    wrappedDataEncryptionKey: Uint8Array;
+    /**
+     * Metadata used to wrap/unwrap client encryption key using customer managed key.
+     */
+    encryptionKeyWrapMetadata: EncryptionKeyWrapMetadata;
+}
+//# sourceMappingURL=ClientEncryptionKeyProperties.d.ts.map

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionKeyProperties.d.ts","sourceRoot":"","sources":["../../../../src/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAEjF;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;OAEG;IACH,wBAAwB,EAAE,UAAU,CAAC;IACrC;;OAEG;IACH,yBAAyB,EAAE,yBAAyB,CAAC;CAMtD"}

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.js

@@ -0,0 +1,5 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ClientEncryptionKeyProperties.js.map

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionKeyProperties.js","sourceRoot":"","sources":["../../../../src/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionKeyWrapMetadata } from \"../EncryptionKeyWrapMetadata.js\";\n\n/**\n * Details of a client encryption key for use with the Azure Cosmos DB service.\n */\nexport interface ClientEncryptionKeyProperties {\n  /**\n   * unique identifier for the client encryption key\n   */\n  id: string;\n  /**\n   * Encryption algorithm that will be used along with this client encryption key to encrypt/decrypt data\n   */\n  encryptionAlgorithm: string;\n  /**\n   * Wrapped (encrypted) form of the client encryption key.\n   */\n  wrappedDataEncryptionKey: Uint8Array;\n  /**\n   * Metadata used to wrap/unwrap client encryption key using customer managed key.\n   */\n  encryptionKeyWrapMetadata: EncryptionKeyWrapMetadata;\n  /**\n   * etag associated with the client encryption key.\n   * @internal\n   */\n  etag: string;\n}\n"]}

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.d.ts

@@ -0,0 +1,21 @@
+import type { EncryptionKeyWrapMetadata } from "../EncryptionKeyWrapMetadata.js";
+/**
+ * Interface representing a request for client encryption key in Cosmos DB.
+ */
+export interface ClientEncryptionKeyRequest {
+    /** id of the client encryption key */
+    id: string;
+    /**
+     * The algorithm used to encrypt/decrypt data.
+     */
+    encryptionAlgorithm: string;
+    /**
+     * Metadata containing information necessary to wrap/unwrap the encryption key.
+     */
+    keyWrapMetadata: EncryptionKeyWrapMetadata;
+    /**
+     * The wrapped (encrypted) data encryption key.
+     */
+    wrappedDataEncryptionKey: string;
+}
+//# sourceMappingURL=ClientEncryptionKeyRequest.d.ts.map

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionKeyRequest.d.ts","sourceRoot":"","sources":["../../../../src/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAEjF;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,sCAAsC;IACtC,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;OAEG;IACH,eAAe,EAAE,yBAAyB,CAAC;IAC3C;;OAEG;IACH,wBAAwB,EAAE,MAAM,CAAC;CAClC"}

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.js

@@ -0,0 +1,5 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ClientEncryptionKeyRequest.js.map

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionKeyRequest.js","sourceRoot":"","sources":["../../../../src/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionKeyWrapMetadata } from \"../EncryptionKeyWrapMetadata.js\";\n\n/**\n * Interface representing a request for client encryption key in Cosmos DB.\n */\nexport interface ClientEncryptionKeyRequest {\n  /** id of the client encryption key */\n  id: string;\n  /**\n   * The algorithm used to encrypt/decrypt data.\n   */\n  encryptionAlgorithm: string;\n  /**\n   * Metadata containing information necessary to wrap/unwrap the encryption key.\n   */\n  keyWrapMetadata: EncryptionKeyWrapMetadata;\n  /**\n   * The wrapped (encrypted) data encryption key.\n   */\n  wrappedDataEncryptionKey: string;\n}\n"]}

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.d.ts

@@ -0,0 +1,12 @@
+import { CosmosDiagnostics } from "../../CosmosDiagnostics.js";
+import { CosmosHeaders } from "../../queryExecutionContext/index.js";
+import { ResourceResponse } from "../../request/ResourceResponse.js";
+import { Resource } from "../../client/Resource.js";
+import { ClientEncryptionKeyProperties } from "./ClientEncryptionKeyProperties.js";
+/** Response object for ClientEncryptionKey operations */
+export declare class ClientEncryptionKeyResponse extends ResourceResponse<Resource> {
+    constructor(resource: Resource, headers: CosmosHeaders, statusCode: number, clientEncryptionKeyProperties: ClientEncryptionKeyProperties, diagnostics: CosmosDiagnostics);
+    /** Properties of the client encryption key */
+    readonly clientEncryptionKeyProperties: ClientEncryptionKeyProperties;
+}
+//# sourceMappingURL=ClientEncryptionKeyResponse.d.ts.map

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionKeyResponse.d.ts","sourceRoot":"","sources":["../../../../src/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,yDAAyD;AACzD,qBAAa,2BAA4B,SAAQ,gBAAgB,CAAC,QAAQ,CAAC;gBAEvE,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,MAAM,EAClB,6BAA6B,EAAE,6BAA6B,EAC5D,WAAW,EAAE,iBAAiB;IAKhC,8CAA8C;IAC9C,SAAgB,6BAA6B,EAAE,6BAA6B,CAAC;CAC9E"}

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.js

@@ -0,0 +1,15 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientEncryptionKeyResponse = void 0;
+const ResourceResponse_js_1 = require("../../request/ResourceResponse.js");
+/** Response object for ClientEncryptionKey operations */
+class ClientEncryptionKeyResponse extends ResourceResponse_js_1.ResourceResponse {
+    constructor(resource, headers, statusCode, clientEncryptionKeyProperties, diagnostics) {
+        super(resource, headers, statusCode, diagnostics);
+        this.clientEncryptionKeyProperties = clientEncryptionKeyProperties;
+    }
+}
+exports.ClientEncryptionKeyResponse = ClientEncryptionKeyResponse;
+//# sourceMappingURL=ClientEncryptionKeyResponse.js.map

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionKeyResponse.js","sourceRoot":"","sources":["../../../../src/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAIlC,2EAAqE;AAIrE,yDAAyD;AACzD,MAAa,2BAA4B,SAAQ,sCAA0B;IACzE,YACE,QAAkB,EAClB,OAAsB,EACtB,UAAkB,EAClB,6BAA4D,EAC5D,WAA8B;QAE9B,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,6BAA6B,GAAG,6BAA6B,CAAC;IACrE,CAAC;CAGF;AAbD,kEAaC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { CosmosDiagnostics } from \"../../CosmosDiagnostics.js\";\nimport { CosmosHeaders } from \"../../queryExecutionContext/index.js\";\nimport { ResourceResponse } from \"../../request/ResourceResponse.js\";\nimport { Resource } from \"../../client/Resource.js\";\nimport { ClientEncryptionKeyProperties } from \"./ClientEncryptionKeyProperties.js\";\n\n/** Response object for ClientEncryptionKey operations */\nexport class ClientEncryptionKeyResponse extends ResourceResponse<Resource> {\n  constructor(\n    resource: Resource,\n    headers: CosmosHeaders,\n    statusCode: number,\n    clientEncryptionKeyProperties: ClientEncryptionKeyProperties,\n    diagnostics: CosmosDiagnostics,\n  ) {\n    super(resource, headers, statusCode, diagnostics);\n    this.clientEncryptionKeyProperties = clientEncryptionKeyProperties;\n  }\n  /** Properties of the client encryption key */\n  public readonly clientEncryptionKeyProperties: ClientEncryptionKeyProperties;\n}\n"]}

package/dist/commonjs/encryption/ClientEncryptionKey/index.d.ts

@@ -0,0 +1,4 @@
+export { ClientEncryptionKeyProperties } from "./ClientEncryptionKeyProperties.js";
+export { ClientEncryptionKeyResponse } from "./ClientEncryptionKeyResponse.js";
+export { ClientEncryptionKeyRequest } from "./ClientEncryptionKeyRequest.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/commonjs/encryption/ClientEncryptionKey/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/encryption/ClientEncryptionKey/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/commonjs/encryption/ClientEncryptionKey/index.js

@@ -0,0 +1,8 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientEncryptionKeyResponse = void 0;
+var ClientEncryptionKeyResponse_js_1 = require("./ClientEncryptionKeyResponse.js");
+Object.defineProperty(exports, "ClientEncryptionKeyResponse", { enumerable: true, get: function () { return ClientEncryptionKeyResponse_js_1.ClientEncryptionKeyResponse; } });
+//# sourceMappingURL=index.js.map

package/dist/commonjs/encryption/ClientEncryptionKey/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/encryption/ClientEncryptionKey/index.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAGlC,mFAA+E;AAAtE,6IAAA,2BAA2B,OAAA","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { ClientEncryptionKeyProperties } from \"./ClientEncryptionKeyProperties.js\";\nexport { ClientEncryptionKeyResponse } from \"./ClientEncryptionKeyResponse.js\";\nexport { ClientEncryptionKeyRequest } from \"./ClientEncryptionKeyRequest.js\";\n"]}

package/dist/commonjs/encryption/ClientEncryptionOptions.d.ts

@@ -0,0 +1,11 @@
+import type { EncryptionKeyResolver } from "./index.js";
+/**
+ * Represents the encryption options associated with a CosmosClient.
+ */
+export interface ClientEncryptionOptions {
+    /** resolver that allows interaction with key encryption keys. */
+    keyEncryptionKeyResolver: EncryptionKeyResolver;
+    /** time for which encryption keys and settings will be cached. Default is 7200 seconds */
+    encryptionKeyTimeToLiveInSeconds?: number;
+}
+//# sourceMappingURL=ClientEncryptionOptions.d.ts.map

package/dist/commonjs/encryption/ClientEncryptionOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionOptions.d.ts","sourceRoot":"","sources":["../../../src/encryption/ClientEncryptionOptions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,iEAAiE;IACjE,wBAAwB,EAAE,qBAAqB,CAAC;IAEhD,0FAA0F;IAC1F,gCAAgC,CAAC,EAAE,MAAM,CAAC;CAC3C"}

package/dist/commonjs/encryption/ClientEncryptionOptions.js

@@ -0,0 +1,5 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ClientEncryptionOptions.js.map

package/dist/commonjs/encryption/ClientEncryptionOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionOptions.js","sourceRoot":"","sources":["../../../src/encryption/ClientEncryptionOptions.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionKeyResolver } from \"./index.js\";\n\n/**\n * Represents the encryption options associated with a CosmosClient.\n */\nexport interface ClientEncryptionOptions {\n  /** resolver that allows interaction with key encryption keys. */\n  keyEncryptionKeyResolver: EncryptionKeyResolver;\n\n  /** time for which encryption keys and settings will be cached. Default is 7200 seconds */\n  encryptionKeyTimeToLiveInSeconds?: number;\n}\n"]}

package/dist/commonjs/encryption/ClientEncryptionPolicy.d.ts

@@ -0,0 +1,15 @@
+import type { ClientEncryptionIncludedPath } from "./ClientEncryptionIncludedPath.js";
+/**
+ * Represents the client encryption policy associated with a container.
+ */
+export interface ClientEncryptionPolicy {
+    /** list of paths that needs to be encrypted along with their encryption settings. */
+    includedPaths: ClientEncryptionIncludedPath[];
+    /**
+     * Version of the client encryption policy definition.
+     * The supported versions are 1 and 2. Default is 1.
+     * Id and partition key paths encryption are only supported in version 2.
+     */
+    policyFormatVersion?: number;
+}
+//# sourceMappingURL=ClientEncryptionPolicy.d.ts.map

package/dist/commonjs/encryption/ClientEncryptionPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionPolicy.d.ts","sourceRoot":"","sources":["../../../src/encryption/ClientEncryptionPolicy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACtF;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,qFAAqF;IACrF,aAAa,EAAE,4BAA4B,EAAE,CAAC;IAC9C;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B"}

package/dist/commonjs/encryption/ClientEncryptionPolicy.js

@@ -0,0 +1,5 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ClientEncryptionPolicy.js.map

package/dist/commonjs/encryption/ClientEncryptionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientEncryptionPolicy.js","sourceRoot":"","sources":["../../../src/encryption/ClientEncryptionPolicy.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { ClientEncryptionIncludedPath } from \"./ClientEncryptionIncludedPath.js\";\n/**\n * Represents the client encryption policy associated with a container.\n */\nexport interface ClientEncryptionPolicy {\n  /** list of paths that needs to be encrypted along with their encryption settings. */\n  includedPaths: ClientEncryptionIncludedPath[];\n  /**\n   * Version of the client encryption policy definition.\n   * The supported versions are 1 and 2. Default is 1.\n   * Id and partition key paths encryption are only supported in version 2.\n   */\n  policyFormatVersion?: number;\n}\n"]}

package/dist/commonjs/encryption/CosmosEncryptedNumber.d.ts

@@ -0,0 +1,46 @@
+/**
+ * This enum represents the type of number in the Cosmos DB SDK.
+ */
+export declare enum CosmosEncryptedNumberType {
+    /**
+     * Represents an integer number.
+     */
+    Integer = "Integer",
+    /**
+     * Represents a floating-point number.
+     */
+    Float = "Float"
+}
+/**
+ * This interface represents an encrypted number in the Cosmos DB SDK.
+ *
+ * @example
+ * ```ts snippet:CosmosEncryptedNumber
+ * import { CosmosEncryptedNumber, CosmosEncryptedNumberType } from "@azure/cosmos";
+ *
+ * const encryptedNumber1: CosmosEncryptedNumber = {
+ *   value: 4,
+ *   numberType: CosmosEncryptedNumberType.Integer,
+ * };
+ * const encryptedNumber2: CosmosEncryptedNumber = {
+ *   value: 4.1,
+ *   numberType: CosmosEncryptedNumberType.Float,
+ * };
+ * const encryptedNumber3: CosmosEncryptedNumber = {
+ *   value: 4,
+ *   numberType: CosmosEncryptedNumberType.Float, // represents 4.0
+ * };
+ * ```
+ */
+export interface CosmosEncryptedNumber {
+    /**
+     * The value to be encrypted.
+     */
+    value: number;
+    /**
+     * The type of number (Integer or Float).
+     * Use CosmosEncryptedNumberType.Integer for integers and CosmosEncryptedNumberType.Float for floating-point numbers.
+     */
+    numberType: CosmosEncryptedNumberType;
+}
+//# sourceMappingURL=CosmosEncryptedNumber.d.ts.map

package/dist/commonjs/encryption/CosmosEncryptedNumber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CosmosEncryptedNumber.d.ts","sourceRoot":"","sources":["../../../src/encryption/CosmosEncryptedNumber.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,oBAAY,yBAAyB;IACnC;;OAEG;IACH,OAAO,YAAY;IACnB;;OAEG;IACH,KAAK,UAAU;CAChB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,UAAU,EAAE,yBAAyB,CAAC;CACvC"}