@azure/cosmos 4.9.1 → 4.9.2

package/dist/commonjs/encryption/EncryptionKey/DataEncryptionKey.js

@@ -1,35 +1,54 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DataEncryptionKey = void 0;
-const node_crypto_1 = require("node:crypto");
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var DataEncryptionKey_exports = {};
+__export(DataEncryptionKey_exports, {
+  DataEncryptionKey: () => DataEncryptionKey
+});
+module.exports = __toCommonJS(DataEncryptionKey_exports);
+var import_node_crypto = require("node:crypto");
 class DataEncryptionKey {
-    rootKeyBuffer;
-    keySizeInBits = 256;
-    keySizeInBytes = this.keySizeInBits / 8;
-    encryptionKeyBuffer;
-    macKeyBuffer;
-    ivKeyBuffer;
-    name;
-    constructor(rootKey, name) {
-        if (rootKey.length !== this.keySizeInBytes) {
-            throw new Error("Invalid root key size");
-        }
-        this.rootKeyBuffer = rootKey;
-        this.name = name;
-        const encryptionKeySalt = `Microsoft SQL Server cell encryption key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
-        const macKeySalt = `Microsoft SQL Server cell MAC key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
-        const ivKeySalt = `Microsoft SQL Server cell IV key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
-        this.encryptionKeyBuffer = this.getHmacWithSha256(encryptionKeySalt, this.rootKeyBuffer);
-        this.macKeyBuffer = this.getHmacWithSha256(macKeySalt, this.rootKeyBuffer);
-        this.ivKeyBuffer = this.getHmacWithSha256(ivKeySalt, this.rootKeyBuffer);
-    }
-    getHmacWithSha256(plainText, key) {
-        const hmac = (0, node_crypto_1.createHmac)("sha256", key);
-        hmac.update(Buffer.from(plainText, "utf16le"));
-        return hmac.digest();
+  rootKeyBuffer;
+  keySizeInBits = 256;
+  keySizeInBytes = this.keySizeInBits / 8;
+  encryptionKeyBuffer;
+  macKeyBuffer;
+  ivKeyBuffer;
+  name;
+  constructor(rootKey, name) {
+    if (rootKey.length !== this.keySizeInBytes) {
+      throw new Error("Invalid root key size");
     }
+    this.rootKeyBuffer = rootKey;
+    this.name = name;
+    const encryptionKeySalt = `Microsoft SQL Server cell encryption key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
+    const macKeySalt = `Microsoft SQL Server cell MAC key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
+    const ivKeySalt = `Microsoft SQL Server cell IV key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
+    this.encryptionKeyBuffer = this.getHmacWithSha256(encryptionKeySalt, this.rootKeyBuffer);
+    this.macKeyBuffer = this.getHmacWithSha256(macKeySalt, this.rootKeyBuffer);
+    this.ivKeyBuffer = this.getHmacWithSha256(ivKeySalt, this.rootKeyBuffer);
+  }
+  getHmacWithSha256(plainText, key) {
+    const hmac = (0, import_node_crypto.createHmac)("sha256", key);
+    hmac.update(Buffer.from(plainText, "utf16le"));
+    return hmac.digest();
+  }
 }
-exports.DataEncryptionKey = DataEncryptionKey;
-//# sourceMappingURL=DataEncryptionKey.js.map
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DataEncryptionKey
+});

package/dist/commonjs/encryption/EncryptionKey/DataEncryptionKey.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"DataEncryptionKey.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKey/DataEncryptionKey.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,6CAAyC;AAEzC,MAAsB,iBAAiB;IAC7B,aAAa,CAAS;IACtB,aAAa,GAAG,GAAG,CAAC;IACpB,cAAc,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IAEzC,mBAAmB,CAAS;IAC5B,YAAY,CAAS;IACrB,WAAW,CAAS;IACpB,IAAI,CAAS;IAEpB,YAAY,OAAe,EAAE,IAAY;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,MAAM,iBAAiB,GAAG,kHAAkH,IAAI,CAAC,aAAa,EAAE,CAAC;QACjK,MAAM,UAAU,GAAG,2GAA2G,IAAI,CAAC,aAAa,EAAE,CAAC;QACnJ,MAAM,SAAS,GAAG,0GAA0G,IAAI,CAAC,aAAa,EAAE,CAAC;QAEjJ,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACzF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3E,CAAC;IAEO,iBAAiB,CAAC,SAAiB,EAAE,GAAW;QACtD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;CACF;AA/BD,8CA+BC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { createHmac } from \"node:crypto\";\n\nexport abstract class DataEncryptionKey {\n  private rootKeyBuffer: Buffer;\n  private keySizeInBits = 256;\n  private keySizeInBytes = this.keySizeInBits / 8;\n\n  public encryptionKeyBuffer: Buffer;\n  public macKeyBuffer: Buffer;\n  public ivKeyBuffer: Buffer;\n  public name: string;\n\n  constructor(rootKey: Buffer, name: string) {\n    if (rootKey.length !== this.keySizeInBytes) {\n      throw new Error(\"Invalid root key size\");\n    }\n    this.rootKeyBuffer = rootKey;\n    this.name = name;\n\n    const encryptionKeySalt = `Microsoft SQL Server cell encryption key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const macKeySalt = `Microsoft SQL Server cell MAC key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const ivKeySalt = `Microsoft SQL Server cell IV key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n\n    this.encryptionKeyBuffer = this.getHmacWithSha256(encryptionKeySalt, this.rootKeyBuffer);\n    this.macKeyBuffer = this.getHmacWithSha256(macKeySalt, this.rootKeyBuffer);\n    this.ivKeyBuffer = this.getHmacWithSha256(ivKeySalt, this.rootKeyBuffer);\n  }\n\n  private getHmacWithSha256(plainText: string, key: Buffer): Buffer {\n    const hmac = createHmac(\"sha256\", key);\n    hmac.update(Buffer.from(plainText, \"utf16le\"));\n    return hmac.digest();\n  }\n}\n"]}
+{
+  "version": 3,
+  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKey/DataEncryptionKey.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { createHmac } from \"node:crypto\";\n\nexport abstract class DataEncryptionKey {\n  private rootKeyBuffer: Buffer;\n  private keySizeInBits = 256;\n  private keySizeInBytes = this.keySizeInBits / 8;\n\n  public encryptionKeyBuffer: Buffer;\n  public macKeyBuffer: Buffer;\n  public ivKeyBuffer: Buffer;\n  public name: string;\n\n  constructor(rootKey: Buffer, name: string) {\n    if (rootKey.length !== this.keySizeInBytes) {\n      throw new Error(\"Invalid root key size\");\n    }\n    this.rootKeyBuffer = rootKey;\n    this.name = name;\n\n    const encryptionKeySalt = `Microsoft SQL Server cell encryption key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const macKeySalt = `Microsoft SQL Server cell MAC key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const ivKeySalt = `Microsoft SQL Server cell IV key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n\n    this.encryptionKeyBuffer = this.getHmacWithSha256(encryptionKeySalt, this.rootKeyBuffer);\n    this.macKeyBuffer = this.getHmacWithSha256(macKeySalt, this.rootKeyBuffer);\n    this.ivKeyBuffer = this.getHmacWithSha256(ivKeySalt, this.rootKeyBuffer);\n  }\n\n  private getHmacWithSha256(plainText: string, key: Buffer): Buffer {\n    const hmac = createHmac(\"sha256\", key);\n    hmac.update(Buffer.from(plainText, \"utf16le\"));\n    return hmac.digest();\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAA2B;AAEpB,MAAe,kBAAkB;AAAA,EAC9B;AAAA,EACA,gBAAgB;AAAA,EAChB,iBAAiB,KAAK,gBAAgB;AAAA,EAEvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEP,YAAY,SAAiB,MAAc;AACzC,QAAI,QAAQ,WAAW,KAAK,gBAAgB;AAC1C,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AACA,SAAK,gBAAgB;AACrB,SAAK,OAAO;AAEZ,UAAM,oBAAoB,kHAAkH,KAAK,aAAa;AAC9J,UAAM,aAAa,2GAA2G,KAAK,aAAa;AAChJ,UAAM,YAAY,0GAA0G,KAAK,aAAa;AAE9I,SAAK,sBAAsB,KAAK,kBAAkB,mBAAmB,KAAK,aAAa;AACvF,SAAK,eAAe,KAAK,kBAAkB,YAAY,KAAK,aAAa;AACzE,SAAK,cAAc,KAAK,kBAAkB,WAAW,KAAK,aAAa;AAAA,EACzE;AAAA,EAEQ,kBAAkB,WAAmB,KAAqB;AAChE,UAAM,WAAO,+BAAW,UAAU,GAAG;AACrC,SAAK,OAAO,OAAO,KAAK,WAAW,SAAS,CAAC;AAC7C,WAAO,KAAK,OAAO;AAAA,EACrB;AACF;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKey/ProtectedDataEncryptionKey.js

@@ -1,24 +1,37 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProtectedDataEncryptionKey = void 0;
-const DataEncryptionKey_js_1 = require("./DataEncryptionKey.js");
-/**
- * A wrapper class around `DataEncryptionKey` that stores it in a protected form.
- * The `ProtectedDataEncryptionKey` class extends `DataEncryptionKey` and holds both the raw key and its encrypted form.
- * It also includes information about the `KeyEncryptionKey` used to encrypt the data encryption key.
- * @hidden
- */
-class ProtectedDataEncryptionKey extends DataEncryptionKey_js_1.DataEncryptionKey {
-    keyEncryptionKey;
-    encryptedValue;
-    constructor(name, keyEncryptionKey, rawKey, encryptedKey) {
-        super(rawKey, name);
-        this.name = name;
-        this.keyEncryptionKey = keyEncryptionKey;
-        this.encryptedValue = encryptedKey;
-    }
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var ProtectedDataEncryptionKey_exports = {};
+__export(ProtectedDataEncryptionKey_exports, {
+  ProtectedDataEncryptionKey: () => ProtectedDataEncryptionKey
+});
+module.exports = __toCommonJS(ProtectedDataEncryptionKey_exports);
+var import_DataEncryptionKey = require("./DataEncryptionKey.js");
+class ProtectedDataEncryptionKey extends import_DataEncryptionKey.DataEncryptionKey {
+  keyEncryptionKey;
+  encryptedValue;
+  constructor(name, keyEncryptionKey, rawKey, encryptedKey) {
+    super(rawKey, name);
+    this.name = name;
+    this.keyEncryptionKey = keyEncryptionKey;
+    this.encryptedValue = encryptedKey;
+  }
 }
-exports.ProtectedDataEncryptionKey = ProtectedDataEncryptionKey;
-//# sourceMappingURL=ProtectedDataEncryptionKey.js.map
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ProtectedDataEncryptionKey
+});

package/dist/commonjs/encryption/EncryptionKey/ProtectedDataEncryptionKey.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"ProtectedDataEncryptionKey.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKey/ProtectedDataEncryptionKey.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,iEAA2D;AAG3D;;;;;GAKG;AACH,MAAa,0BAA2B,SAAQ,wCAAiB;IACxD,gBAAgB,CAAmB;IAEnC,cAAc,CAAS;IAE9B,YACE,IAAY,EACZ,gBAAkC,EAClC,MAAc,EACd,YAAoB;QAEpB,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,YAAY,CAAC;IACrC,CAAC;CACF;AAhBD,gEAgBC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nimport type { KeyEncryptionKey } from \"../KeyEncryptionKey.js\";\n\n/**\n * A wrapper class around `DataEncryptionKey` that stores it in a protected form.\n * The `ProtectedDataEncryptionKey` class extends `DataEncryptionKey` and holds both the raw key and its encrypted form.\n * It also includes information about the `KeyEncryptionKey` used to encrypt the data encryption key.\n * @hidden\n */\nexport class ProtectedDataEncryptionKey extends DataEncryptionKey {\n  public keyEncryptionKey: KeyEncryptionKey;\n\n  public encryptedValue: Buffer;\n\n  public constructor(\n    name: string,\n    keyEncryptionKey: KeyEncryptionKey,\n    rawKey: Buffer,\n    encryptedKey: Buffer,\n  ) {\n    super(rawKey, name);\n    this.name = name;\n    this.keyEncryptionKey = keyEncryptionKey;\n    this.encryptedValue = encryptedKey;\n  }\n}\n"]}
+{
+  "version": 3,
+  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKey/ProtectedDataEncryptionKey.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nimport type { KeyEncryptionKey } from \"../KeyEncryptionKey.js\";\n\n/**\n * A wrapper class around `DataEncryptionKey` that stores it in a protected form.\n * The `ProtectedDataEncryptionKey` class extends `DataEncryptionKey` and holds both the raw key and its encrypted form.\n * It also includes information about the `KeyEncryptionKey` used to encrypt the data encryption key.\n * @hidden\n */\nexport class ProtectedDataEncryptionKey extends DataEncryptionKey {\n  public keyEncryptionKey: KeyEncryptionKey;\n\n  public encryptedValue: Buffer;\n\n  public constructor(\n    name: string,\n    keyEncryptionKey: KeyEncryptionKey,\n    rawKey: Buffer,\n    encryptedKey: Buffer,\n  ) {\n    super(rawKey, name);\n    this.name = name;\n    this.keyEncryptionKey = keyEncryptionKey;\n    this.encryptedValue = encryptedKey;\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,+BAAkC;AAS3B,MAAM,mCAAmC,2CAAkB;AAAA,EACzD;AAAA,EAEA;AAAA,EAEA,YACL,MACA,kBACA,QACA,cACA;AACA,UAAM,QAAQ,IAAI;AAClB,SAAK,OAAO;AACZ,SAAK,mBAAmB;AACxB,SAAK,iBAAiB;AAAA,EACxB;AACF;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKey/index.js

@@ -1,10 +1,30 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProtectedDataEncryptionKey = exports.DataEncryptionKey = void 0;
-var DataEncryptionKey_js_1 = require("./DataEncryptionKey.js");
-Object.defineProperty(exports, "DataEncryptionKey", { enumerable: true, get: function () { return DataEncryptionKey_js_1.DataEncryptionKey; } });
-var ProtectedDataEncryptionKey_js_1 = require("./ProtectedDataEncryptionKey.js");
-Object.defineProperty(exports, "ProtectedDataEncryptionKey", { enumerable: true, get: function () { return ProtectedDataEncryptionKey_js_1.ProtectedDataEncryptionKey; } });
-//# sourceMappingURL=index.js.map
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var EncryptionKey_exports = {};
+__export(EncryptionKey_exports, {
+  DataEncryptionKey: () => import_DataEncryptionKey.DataEncryptionKey,
+  ProtectedDataEncryptionKey: () => import_ProtectedDataEncryptionKey.ProtectedDataEncryptionKey
+});
+module.exports = __toCommonJS(EncryptionKey_exports);
+var import_DataEncryptionKey = require("./DataEncryptionKey.js");
+var import_ProtectedDataEncryptionKey = require("./ProtectedDataEncryptionKey.js");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DataEncryptionKey,
+  ProtectedDataEncryptionKey
+});

package/dist/commonjs/encryption/EncryptionKey/index.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKey/index.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,+DAA2D;AAAlD,yHAAA,iBAAiB,OAAA;AAC1B,iFAA6E;AAApE,2IAAA,0BAA0B,OAAA","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nexport { ProtectedDataEncryptionKey } from \"./ProtectedDataEncryptionKey.js\";\n"]}
+{
+  "version": 3,
+  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKey/index.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nexport { ProtectedDataEncryptionKey } from \"./ProtectedDataEncryptionKey.js\";\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,+BAAkC;AAClC,wCAA2C;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.js

@@ -1,100 +1,118 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AzureKeyVaultEncryptionKeyResolver = void 0;
-const keyvault_keys_1 = require("@azure/keyvault-keys");
-const index_js_1 = require("../../request/index.js");
-const index_js_2 = require("../enums/index.js");
-/**
- * Implementation of EncryptionKeyResolver that uses Azure Key Vault for customer managed keys.
- */
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var AzureKeyVaultEncryptionKeyResolver_exports = {};
+__export(AzureKeyVaultEncryptionKeyResolver_exports, {
+  AzureKeyVaultEncryptionKeyResolver: () => AzureKeyVaultEncryptionKeyResolver
+});
+module.exports = __toCommonJS(AzureKeyVaultEncryptionKeyResolver_exports);
+var import_keyvault_keys = require("@azure/keyvault-keys");
+var import_request = require("../../request/index.js");
+var import_enums = require("../enums/index.js");
 class AzureKeyVaultEncryptionKeyResolver {
-    credentials;
-    constructor(credentials) {
-        this.credentials = credentials;
+  credentials;
+  constructor(credentials) {
+    this.credentials = credentials;
+  }
+  /**
+   * Name of the resolver to use for client side encryption.
+   * Currently only AzureKeyVault implementation is supported.
+   */
+  encryptionKeyResolverName = import_enums.EncryptionKeyResolverName.AzureKeyVault;
+  /**
+   * wraps the given key using the specified key encryption key path and algorithm.
+   * @param encryptionKeyId - path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.
+   * @param algorithm - algorithm to be used for wrapping.
+   * @param unwrappedKey - dek to be wrapped.
+   * @returns wrapped DEK.
+   */
+  async wrapKey(encryptionKeyId, algorithm, unwrappedKey) {
+    try {
+      const origin = this.getOrigin(encryptionKeyId);
+      const keyClient = new import_keyvault_keys.KeyClient(origin, this.credentials);
+      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);
+      const cryptographyClient = keyClient.getCryptographyClient(keyName, {
+        keyVersion
+      });
+      const res = await cryptographyClient.wrapKey(algorithm, unwrappedKey);
+      if (!res || !res.result) {
+        throw new import_request.ErrorResponse(`Failed to wrap key: ${res}`);
+      }
+      return res.result;
+    } catch (e) {
+      throw new import_request.ErrorResponse(`Failed to wrap key: ${e.message}`);
     }
-    /**
-     * Name of the resolver to use for client side encryption.
-     * Currently only AzureKeyVault implementation is supported.
-     */
-    encryptionKeyResolverName = index_js_2.EncryptionKeyResolverName.AzureKeyVault;
-    /**
-     * wraps the given key using the specified key encryption key path and algorithm.
-     * @param encryptionKeyId - path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.
-     * @param algorithm - algorithm to be used for wrapping.
-     * @param unwrappedKey - dek to be wrapped.
-     * @returns wrapped DEK.
-     */
-    async wrapKey(encryptionKeyId, algorithm, unwrappedKey) {
-        try {
-            const origin = this.getOrigin(encryptionKeyId);
-            const keyClient = new keyvault_keys_1.KeyClient(origin, this.credentials);
-            const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);
-            const cryptographyClient = keyClient.getCryptographyClient(keyName, {
-                keyVersion: keyVersion,
-            });
-            const res = await cryptographyClient.wrapKey(algorithm, unwrappedKey);
-            if (!res || !res.result) {
-                throw new index_js_1.ErrorResponse(`Failed to wrap key: ${res}`);
-            }
-            return res.result;
-        }
-        catch (e) {
-            throw new index_js_1.ErrorResponse(`Failed to wrap key: ${e.message}`);
-        }
+  }
+  /**
+   * Unwraps the given wrapped key using the specified key encryption key path and algorithm.
+   * @param encryptionKeyId - path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.
+   * @param algorithm - algorithm to be used for unwrapping.
+   * @param wrappedKey - wrapped DEK.
+   * @returns unwrapped DEK.
+   */
+  async unwrapKey(encryptionKeyId, algorithm, wrappedKey) {
+    try {
+      const origin = this.getOrigin(encryptionKeyId);
+      const keyClient = new import_keyvault_keys.KeyClient(origin, this.credentials);
+      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);
+      const cryptographyClient = keyClient.getCryptographyClient(keyName, {
+        keyVersion
+      });
+      const res = await cryptographyClient.unwrapKey(algorithm, wrappedKey);
+      if (!res || !res.result) {
+        throw new import_request.ErrorResponse(`Failed to wrap key: ${res}`);
+      }
+      return res.result;
+    } catch (e) {
+      throw new import_request.ErrorResponse(`Failed to unwrap key: ${e.message}`);
     }
-    /**
-     * Unwraps the given wrapped key using the specified key encryption key path and algorithm.
-     * @param encryptionKeyId - path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.
-     * @param algorithm - algorithm to be used for unwrapping.
-     * @param wrappedKey - wrapped DEK.
-     * @returns unwrapped DEK.
-     */
-    async unwrapKey(encryptionKeyId, algorithm, wrappedKey) {
-        try {
-            const origin = this.getOrigin(encryptionKeyId);
-            const keyClient = new keyvault_keys_1.KeyClient(origin, this.credentials);
-            const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);
-            const cryptographyClient = keyClient.getCryptographyClient(keyName, {
-                keyVersion: keyVersion,
-            });
-            const res = await cryptographyClient.unwrapKey(algorithm, wrappedKey);
-            if (!res || !res.result) {
-                throw new index_js_1.ErrorResponse(`Failed to wrap key: ${res}`);
-            }
-            return res.result;
-        }
-        catch (e) {
-            throw new index_js_1.ErrorResponse(`Failed to unwrap key: ${e.message}`);
-        }
+  }
+  // TODO: improve this method to extract key name and version from the url
+  getKeyDetails(encryptionKeyId) {
+    let url;
+    try {
+      url = new URL(encryptionKeyId);
+      const parts = url.pathname.split("/");
+      if (parts.length < 4 || parts.length > 5) {
+        throw new import_request.ErrorResponse(
+          `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>`
+        );
+      }
+      if (parts.length === 4 || parts.length === 5) {
+        return [parts[2], parts[3]];
+      }
+    } catch (e) {
+      throw new import_request.ErrorResponse(
+        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`
+      );
     }
-    // TODO: improve this method to extract key name and version from the url
-    getKeyDetails(encryptionKeyId) {
-        let url;
-        try {
-            url = new URL(encryptionKeyId);
-            const parts = url.pathname.split("/");
-            if (parts.length < 4 || parts.length > 5) {
-                throw new index_js_1.ErrorResponse(`Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>`);
-            }
-            if (parts.length === 4 || parts.length === 5) {
-                return [parts[2], parts[3]];
-            }
-        }
-        catch (e) {
-            throw new index_js_1.ErrorResponse(`Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`);
-        }
-    }
-    getOrigin(encryptionKeyId) {
-        try {
-            const url = new URL(encryptionKeyId);
-            return url.origin;
-        }
-        catch (e) {
-            throw new index_js_1.ErrorResponse(`Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`);
-        }
+  }
+  getOrigin(encryptionKeyId) {
+    try {
+      const url = new URL(encryptionKeyId);
+      return url.origin;
+    } catch (e) {
+      throw new import_request.ErrorResponse(
+        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`
+      );
     }
+  }
 }
-exports.AzureKeyVaultEncryptionKeyResolver = AzureKeyVaultEncryptionKeyResolver;
-//# sourceMappingURL=AzureKeyVaultEncryptionKeyResolver.js.map
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AzureKeyVaultEncryptionKeyResolver
+});

package/dist/commonjs/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"AzureKeyVaultEncryptionKeyResolver.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAKlC,wDAAiD;AACjD,qDAAuD;AACvD,gDAA8D;AAE9D;;GAEG;AACH,MAAa,kCAAkC;IACrC,WAAW,CAAkB;IAErC,YAAY,WAA4B;QACtC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IACD;;;OAGG;IACI,yBAAyB,GAAG,oCAAyB,CAAC,aAAa,CAAC;IAC3E;;;;;;OAMG;IACI,KAAK,CAAC,OAAO,CAClB,eAAuB,EACvB,SAAiB,EACjB,YAAwB;QAExB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,yBAAS,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;YAClE,MAAM,kBAAkB,GAAG,SAAS,CAAC,qBAAqB,CAAC,OAAO,EAAE;gBAClE,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAA6B,EAAE,YAAY,CAAC,CAAC;YAC1F,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,wBAAa,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,wBAAa,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD;;;;;;OAMG;IACI,KAAK,CAAC,SAAS,CACpB,eAAuB,EACvB,SAAiB,EACjB,UAAsB;QAEtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,yBAAS,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;YAClE,MAAM,kBAAkB,GAAG,SAAS,CAAC,qBAAqB,CAAC,OAAO,EAAE;gBAClE,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,SAA6B,EAAE,UAAU,CAAC,CAAC;YAC1F,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,wBAAa,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,wBAAa,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,yEAAyE;IACjE,aAAa,CAAC,eAAuB;QAC3C,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,wBAAa,CACrB,oBAAoB,eAAe,+FAA+F,CACnI,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,wBAAa,CACrB,oBAAoB,eAAe,yGAAyG,CAAC,CAAC,OAAO,EAAE,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,eAAuB;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;YACrC,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,wBAAa,CACrB,oBAAoB,eAAe,yGAAyG,CAAC,CAAC,OAAO,EAAE,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAlGD,gFAkGC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport type { EncryptionKeyResolver } from \"./EncryptionKeyResolver.js\";\nimport type { KeyWrapAlgorithm } from \"@azure/keyvault-keys\";\nimport { KeyClient } from \"@azure/keyvault-keys\";\nimport { ErrorResponse } from \"../../request/index.js\";\nimport { EncryptionKeyResolverName } from \"../enums/index.js\";\n\n/**\n * Implementation of EncryptionKeyResolver that uses Azure Key Vault for customer managed keys.\n */\nexport class AzureKeyVaultEncryptionKeyResolver implements EncryptionKeyResolver {\n  private credentials: TokenCredential;\n\n  constructor(credentials: TokenCredential) {\n    this.credentials = credentials;\n  }\n  /**\n   * Name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  public encryptionKeyResolverName = EncryptionKeyResolverName.AzureKeyVault;\n  /**\n   * wraps the given key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for wrapping.\n   * @param unwrappedKey - dek to be wrapped.\n   * @returns wrapped DEK.\n   */\n  public async wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.wrapKey(algorithm as KeyWrapAlgorithm, unwrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to wrap key: ${e.message}`);\n    }\n  }\n  /**\n   * Unwraps the given wrapped key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped DEK.\n   * @returns unwrapped DEK.\n   */\n  public async unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.unwrapKey(algorithm as KeyWrapAlgorithm, wrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to unwrap key: ${e.message}`);\n    }\n  }\n  // TODO: improve this method to extract key name and version from the url\n  private getKeyDetails(encryptionKeyId: string): [string, string] {\n    let url;\n    try {\n      url = new URL(encryptionKeyId);\n      const parts = url.pathname.split(\"/\");\n      if (parts.length < 4 || parts.length > 5) {\n        throw new ErrorResponse(\n          `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>`,\n        );\n      }\n      if (parts.length === 4 || parts.length === 5) {\n        return [parts[2], parts[3]];\n      }\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n\n  private getOrigin(encryptionKeyId: string): string {\n    try {\n      const url = new URL(encryptionKeyId);\n      return url.origin;\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n}\n"]}
+{
+  "version": 3,
+  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport type { EncryptionKeyResolver } from \"./EncryptionKeyResolver.js\";\nimport type { KeyWrapAlgorithm } from \"@azure/keyvault-keys\";\nimport { KeyClient } from \"@azure/keyvault-keys\";\nimport { ErrorResponse } from \"../../request/index.js\";\nimport { EncryptionKeyResolverName } from \"../enums/index.js\";\n\n/**\n * Implementation of EncryptionKeyResolver that uses Azure Key Vault for customer managed keys.\n */\nexport class AzureKeyVaultEncryptionKeyResolver implements EncryptionKeyResolver {\n  private credentials: TokenCredential;\n\n  constructor(credentials: TokenCredential) {\n    this.credentials = credentials;\n  }\n  /**\n   * Name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  public encryptionKeyResolverName = EncryptionKeyResolverName.AzureKeyVault;\n  /**\n   * wraps the given key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for wrapping.\n   * @param unwrappedKey - dek to be wrapped.\n   * @returns wrapped DEK.\n   */\n  public async wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.wrapKey(algorithm as KeyWrapAlgorithm, unwrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to wrap key: ${e.message}`);\n    }\n  }\n  /**\n   * Unwraps the given wrapped key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped DEK.\n   * @returns unwrapped DEK.\n   */\n  public async unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.unwrapKey(algorithm as KeyWrapAlgorithm, wrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to unwrap key: ${e.message}`);\n    }\n  }\n  // TODO: improve this method to extract key name and version from the url\n  private getKeyDetails(encryptionKeyId: string): [string, string] {\n    let url;\n    try {\n      url = new URL(encryptionKeyId);\n      const parts = url.pathname.split(\"/\");\n      if (parts.length < 4 || parts.length > 5) {\n        throw new ErrorResponse(\n          `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>`,\n        );\n      }\n      if (parts.length === 4 || parts.length === 5) {\n        return [parts[2], parts[3]];\n      }\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n\n  private getOrigin(encryptionKeyId: string): string {\n    try {\n      const url = new URL(encryptionKeyId);\n      return url.origin;\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,2BAA0B;AAC1B,qBAA8B;AAC9B,mBAA0C;AAKnC,MAAM,mCAAoE;AAAA,EACvE;AAAA,EAER,YAAY,aAA8B;AACxC,SAAK,cAAc;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKO,4BAA4B,uCAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ7D,MAAa,QACX,iBACA,WACA,cACqB;AACrB,QAAI;AACF,YAAM,SAAS,KAAK,UAAU,eAAe;AAC7C,YAAM,YAAY,IAAI,+BAAU,QAAQ,KAAK,WAAW;AACxD,YAAM,CAAC,SAAS,UAAU,IAAI,KAAK,cAAc,eAAe;AAChE,YAAM,qBAAqB,UAAU,sBAAsB,SAAS;AAAA,QAClE;AAAA,MACF,CAAC;AACD,YAAM,MAAM,MAAM,mBAAmB,QAAQ,WAA+B,YAAY;AACxF,UAAI,CAAC,OAAO,CAAC,IAAI,QAAQ;AACvB,cAAM,IAAI,6BAAc,uBAAuB,GAAG,EAAE;AAAA,MACtD;AACA,aAAO,IAAI;AAAA,IACb,SAAS,GAAG;AACV,YAAM,IAAI,6BAAc,uBAAuB,EAAE,OAAO,EAAE;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,UACX,iBACA,WACA,YACqB;AACrB,QAAI;AACF,YAAM,SAAS,KAAK,UAAU,eAAe;AAC7C,YAAM,YAAY,IAAI,+BAAU,QAAQ,KAAK,WAAW;AACxD,YAAM,CAAC,SAAS,UAAU,IAAI,KAAK,cAAc,eAAe;AAChE,YAAM,qBAAqB,UAAU,sBAAsB,SAAS;AAAA,QAClE;AAAA,MACF,CAAC;AACD,YAAM,MAAM,MAAM,mBAAmB,UAAU,WAA+B,UAAU;AACxF,UAAI,CAAC,OAAO,CAAC,IAAI,QAAQ;AACvB,cAAM,IAAI,6BAAc,uBAAuB,GAAG,EAAE;AAAA,MACtD;AACA,aAAO,IAAI;AAAA,IACb,SAAS,GAAG;AACV,YAAM,IAAI,6BAAc,yBAAyB,EAAE,OAAO,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA,EAEQ,cAAc,iBAA2C;AAC/D,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,eAAe;AAC7B,YAAM,QAAQ,IAAI,SAAS,MAAM,GAAG;AACpC,UAAI,MAAM,SAAS,KAAK,MAAM,SAAS,GAAG;AACxC,cAAM,IAAI;AAAA,UACR,oBAAoB,eAAe;AAAA,QACrC;AAAA,MACF;AACA,UAAI,MAAM,WAAW,KAAK,MAAM,WAAW,GAAG;AAC5C,eAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;AAAA,MAC5B;AAAA,IACF,SAAS,GAAG;AACV,YAAM,IAAI;AAAA,QACR,oBAAoB,eAAe,yGAAyG,EAAE,OAAO;AAAA,MACvJ;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,iBAAiC;AACjD,QAAI;AACF,YAAM,MAAM,IAAI,IAAI,eAAe;AACnC,aAAO,IAAI;AAAA,IACb,SAAS,GAAG;AACV,YAAM,IAAI;AAAA,QACR,oBAAoB,eAAe,yGAAyG,EAAE,OAAO;AAAA,MACvJ;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKeyResolver/EncryptionKeyResolver.js

@@ -1,5 +1,15 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=EncryptionKeyResolver.js.map
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var EncryptionKeyResolver_exports = {};
+module.exports = __toCommonJS(EncryptionKeyResolver_exports);

package/dist/commonjs/encryption/EncryptionKeyResolver/EncryptionKeyResolver.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"EncryptionKeyResolver.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKeyResolver/EncryptionKeyResolver.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/** Provides an interface for key resolver for different key providers.\n * All resolvers should implement this interface.\n */\nexport interface EncryptionKeyResolver {\n  /** name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  encryptionKeyResolverName: string;\n  /**\n   * Wraps the input key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for wrapping.\n   * @param algorithm - Algorithm to be used for wrapping.\n   * @param key - Data Encryption Key to be wrapped.\n   * @returns Wrapped key.\n   */\n  wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n  /**\n   * Unwraps the input wrapped key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for unwrapping.\n   * @param algorithm - Algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped Data Encryption key.\n   * @returns Unwrapped Key.\n   */\n  unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n}\n"]}
+{
+  "version": 3,
+  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKeyResolver/EncryptionKeyResolver.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/** Provides an interface for key resolver for different key providers.\n * All resolvers should implement this interface.\n */\nexport interface EncryptionKeyResolver {\n  /** name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  encryptionKeyResolverName: string;\n  /**\n   * Wraps the input key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for wrapping.\n   * @param algorithm - Algorithm to be used for wrapping.\n   * @param key - Data Encryption Key to be wrapped.\n   * @returns Wrapped key.\n   */\n  wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n  /**\n   * Unwraps the input wrapped key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for unwrapping.\n   * @param algorithm - Algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped Data Encryption key.\n   * @returns Unwrapped Key.\n   */\n  unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n}\n"],
+  "mappings": ";;;;;;;;;;;;;AAAA;AAAA;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKeyResolver/index.d.ts

@@ -1,3 +1,3 @@
 export { AzureKeyVaultEncryptionKeyResolver } from "./AzureKeyVaultEncryptionKeyResolver.js";
-export { EncryptionKeyResolver } from "./EncryptionKeyResolver.js";
+export type { EncryptionKeyResolver } from "./EncryptionKeyResolver.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/commonjs/encryption/EncryptionKeyResolver/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKeyResolver/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKeyResolver/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,YAAY,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/commonjs/encryption/EncryptionKeyResolver/index.js

@@ -1,8 +1,27 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AzureKeyVaultEncryptionKeyResolver = void 0;
-var AzureKeyVaultEncryptionKeyResolver_js_1 = require("./AzureKeyVaultEncryptionKeyResolver.js");
-Object.defineProperty(exports, "AzureKeyVaultEncryptionKeyResolver", { enumerable: true, get: function () { return AzureKeyVaultEncryptionKeyResolver_js_1.AzureKeyVaultEncryptionKeyResolver; } });
-//# sourceMappingURL=index.js.map
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var EncryptionKeyResolver_exports = {};
+__export(EncryptionKeyResolver_exports, {
+  AzureKeyVaultEncryptionKeyResolver: () => import_AzureKeyVaultEncryptionKeyResolver.AzureKeyVaultEncryptionKeyResolver
+});
+module.exports = __toCommonJS(EncryptionKeyResolver_exports);
+var import_AzureKeyVaultEncryptionKeyResolver = require("./AzureKeyVaultEncryptionKeyResolver.js");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AzureKeyVaultEncryptionKeyResolver
+});

package/dist/commonjs/encryption/EncryptionKeyResolver/index.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKeyResolver/index.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,iGAA6F;AAApF,2JAAA,kCAAkC,OAAA","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { AzureKeyVaultEncryptionKeyResolver } from \"./AzureKeyVaultEncryptionKeyResolver.js\";\nexport { EncryptionKeyResolver } from \"./EncryptionKeyResolver.js\";\n"]}
+{
+  "version": 3,
+  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKeyResolver/index.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { AzureKeyVaultEncryptionKeyResolver } from \"./AzureKeyVaultEncryptionKeyResolver.js\";\nexport type { EncryptionKeyResolver } from \"./EncryptionKeyResolver.js\";\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,gDAAmD;",
+  "names": []
+}