@azure/cosmos 4.9.1 → 4.9.3

package/dist/commonjs/encryption/EncryptionItemQueryIterator.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"EncryptionItemQueryIterator.js","sourceRoot":"","sources":["../../../src/encryption/EncryptionItemQueryIterator.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAIlC,yDAAiE;AACjE,wFAGkD;AAElD,0DAAoD;AAEpD,4DAA0D;AAE1D;;;;GAIG;AACH,MAAa,2BAAkC,SAAQ,gCAAmB;IAChE,SAAS,CAAY;IACrB,uBAAuB,CAAgB;IACvC,iBAAiB,CAAc;IAEvC,YACE,aAA4B,EAC5B,KAA4B,EAC5B,OAAoB,EACpB,cAA+D,EAC/D,SAAoB;QAEpB,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,GAAG,EAAE,2BAAY,CAAC,IAAI,CAAC,CAAC;QACvF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,uBAAuB,GAAG,aAAa,CAAC;QAC7C,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;IACnC,CAAC;IAED;;OAEG;IACa,KAAK,CAAC,CAAC,gBAAgB;QACrC,IAAI,QAA4B,CAAC;QACjC,MAAM,cAAc,GAAG,IAAI,kDAAsB,CAC/C,IAAI,CAAC,uBAAuB,CAAC,eAAe,EAC5C,8CAAkB,CAAC,mBAAmB,EACtC,IAAI,CACL,CAAC;QACF,IAAI,CAAC;YACH,QAAQ,GAAG,KAAK,CAAC,CAAC,gCAAa,CAAC,SAAS,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,0CAA0C,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,cAAc,CAAC,0BAA0B,CAAC,wBAAS,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;YAC5F,KAAK,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACxC,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,GACtC,MAAM,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC7D,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,IAAI,wBAAwB,CAAC;YACpC,CAAC;YACD,cAAc,CAAC,wBAAwB,CACrC,wBAAS,CAAC,UAAU,CAAC,2BAA2B,EAChD,KAAK,CACN,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,CAAC;IACjB,CAAC;IAED;;OAEG;IACa,KAAK,CAAC,QAAQ;QAC5B,OAAO,IAAA,gCAAe,EAAC,KAAK,EAAE,cAAsC,EAAE,EAAE;YACtE,IAAI,QAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,gCAAa,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,SAAS,CAAC,0CAA0C,CAAC,KAAK,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,cAAc,CAAC,0BAA0B,CAAC,wBAAS,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;gBAC5F,KAAK,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACxC,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,GACtC,MAAM,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC7D,QAAQ,GAAG,IAAI,CAAC;oBAChB,KAAK,IAAI,wBAAwB,CAAC;gBACpC,CAAC;gBACD,cAAc,CAAC,wBAAwB,CACrC,wBAAS,CAAC,UAAU,CAAC,2BAA2B,EAChD,KAAK,CACN,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACa,KAAK,CAAC,SAAS;QAC7B,OAAO,IAAA,gCAAe,EAAC,KAAK,EAAE,cAAsC,EAAE,EAAE;YACtE,IAAI,QAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,gCAAa,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACxF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,SAAS,CAAC,0CAA0C,CAAC,KAAK,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,cAAc,CAAC,0BAA0B,CAAC,wBAAS,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;gBAC5F,KAAK,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACxC,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,GACtC,MAAM,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC7D,QAAQ,GAAG,IAAI,CAAC;oBAChB,KAAK,IAAI,wBAAwB,CAAC;gBACpC,CAAC;gBACD,cAAc,CAAC,wBAAwB,CACrC,wBAAS,CAAC,UAAU,CAAC,2BAA2B,EAChD,KAAK,CACN,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACnC,CAAC;IACD;;OAEG;IACa,KAAK,CAAC,IAAI,CAAC,cAAsC;QAC/D,0DAA0D;QAC1D,MAAM,IAAI,CAAC,SAAS,CAAC,4BAA4B,EAAE,CAAC;QACpD,IAAI,CAAC,iBAAiB,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1D,MAAM,gCAAa,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAChE,CAAC;CACF;AApHD,kEAoHC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { Container } from \"../client/index.js\";\nimport type { ClientContext } from \"../ClientContext.js\";\nimport { Constants, ResourceType } from \"../common/constants.js\";\nimport {\n  DiagnosticNodeInternal,\n  DiagnosticNodeType,\n} from \"../diagnostics/DiagnosticNodeInternal.js\";\nimport type { SqlQuerySpec, FetchFunctionCallback } from \"../queryExecutionContext/index.js\";\nimport { QueryIterator } from \"../queryIterator.js\";\nimport type { FeedOptions, FeedResponse } from \"../request/index.js\";\nimport { withDiagnostics } from \"../utils/diagnostics.js\";\n\n/**\n * @internal\n * Provides the iterator for handling encrypted items in the Azure Cosmos DB database service.\n * extends @see {@link QueryIterator}\n */\nexport class EncryptionItemQueryIterator<Item> extends QueryIterator<Item> {\n  private container: Container;\n  private encryptionClientContext: ClientContext;\n  private encryptionOptions: FeedOptions;\n\n  constructor(\n    clientContext: ClientContext,\n    query: SqlQuerySpec | string,\n    options: FeedOptions,\n    fetchFunctions: FetchFunctionCallback | FetchFunctionCallback[],\n    container: Container,\n  ) {\n    super(clientContext, query, options, fetchFunctions, container.url, ResourceType.item);\n    this.container = container;\n    this.encryptionClientContext = clientContext;\n    this.encryptionOptions = options;\n  }\n\n  /**\n   * Gets an async iterator that will yield results until completion.\n   */\n  public override async *getAsyncIterator(): AsyncIterable<FeedResponse<Item>> {\n    let response: FeedResponse<Item>;\n    const diagnosticNode = new DiagnosticNodeInternal(\n      this.encryptionClientContext.diagnosticLevel,\n      DiagnosticNodeType.CLIENT_REQUEST_NODE,\n      null,\n    );\n    try {\n      response = yield* QueryIterator.prototype.getAsyncIteratorInternal.call(this, diagnosticNode);\n    } catch (error) {\n      await this.container.throwIfRequestNeedsARetryPostPolicyRefresh(error);\n    }\n    if (response?.resources?.length > 0) {\n      let count = 0;\n      diagnosticNode.beginEncryptionDiagnostics(Constants.Encryption.DiagnosticsDecryptOperation);\n      for (let resource of response.resources) {\n        const { body, propertiesDecryptedCount } =\n          await this.container.encryptionProcessor.decrypt(resource);\n        resource = body;\n        count += propertiesDecryptedCount;\n      }\n      diagnosticNode.endEncryptionDiagnostics(\n        Constants.Encryption.DiagnosticsDecryptOperation,\n        count,\n      );\n    }\n    yield response;\n  }\n\n  /**\n   * Fetch all pages for the query and return a single FeedResponse.\n   */\n  public override async fetchAll(): Promise<FeedResponse<Item>> {\n    return withDiagnostics(async (diagnosticNode: DiagnosticNodeInternal) => {\n      let response: FeedResponse<Item>;\n      try {\n        response = await QueryIterator.prototype.fetchAllInternal.call(this, diagnosticNode);\n      } catch (error) {\n        await this.container.throwIfRequestNeedsARetryPostPolicyRefresh(error);\n      }\n      if (response?.resources?.length > 0) {\n        let count = 0;\n        diagnosticNode.beginEncryptionDiagnostics(Constants.Encryption.DiagnosticsDecryptOperation);\n        for (let resource of response.resources) {\n          const { body, propertiesDecryptedCount } =\n            await this.container.encryptionProcessor.decrypt(resource);\n          resource = body;\n          count += propertiesDecryptedCount;\n        }\n        diagnosticNode.endEncryptionDiagnostics(\n          Constants.Encryption.DiagnosticsDecryptOperation,\n          count,\n        );\n      }\n      return response;\n    }, this.encryptionClientContext);\n  }\n\n  /**\n   * Retrieve the next batch from the feed.\n   */\n  public override async fetchNext(): Promise<FeedResponse<Item>> {\n    return withDiagnostics(async (diagnosticNode: DiagnosticNodeInternal) => {\n      let response: FeedResponse<Item>;\n      try {\n        response = await QueryIterator.prototype.fetchNextInternal.call(this, diagnosticNode);\n      } catch (error) {\n        await this.container.throwIfRequestNeedsARetryPostPolicyRefresh(error);\n      }\n      if (response?.resources?.length > 0) {\n        let count = 0;\n        diagnosticNode.beginEncryptionDiagnostics(Constants.Encryption.DiagnosticsDecryptOperation);\n        for (let resource of response.resources) {\n          const { body, propertiesDecryptedCount } =\n            await this.container.encryptionProcessor.decrypt(resource);\n          resource = body;\n          count += propertiesDecryptedCount;\n        }\n        diagnosticNode.endEncryptionDiagnostics(\n          Constants.Encryption.DiagnosticsDecryptOperation,\n          count,\n        );\n      }\n      return response;\n    }, this.encryptionClientContext);\n  }\n  /**\n   * @internal\n   */\n  public override async init(diagnosticNode: DiagnosticNodeInternal): Promise<void> {\n    // Ensure encryption is initialized and set rid in options\n    await this.container.checkAndInitializeEncryption();\n    this.encryptionOptions.containerRid = this.container._rid;\n    await QueryIterator.prototype.init.call(this, diagnosticNode);\n  }\n}\n"]}
+{
+  "version": 3,
+  "sources": ["../../../src/encryption/EncryptionItemQueryIterator.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { Container } from \"../client/index.js\";\nimport type { ClientContext } from \"../ClientContext.js\";\nimport { Constants, ResourceType } from \"../common/constants.js\";\nimport {\n  DiagnosticNodeInternal,\n  DiagnosticNodeType,\n} from \"../diagnostics/DiagnosticNodeInternal.js\";\nimport type { SqlQuerySpec, FetchFunctionCallback } from \"../queryExecutionContext/index.js\";\nimport { QueryIterator } from \"../queryIterator.js\";\nimport type { FeedOptions, FeedResponse } from \"../request/index.js\";\nimport { withDiagnostics } from \"../utils/diagnostics.js\";\n\n/**\n * @internal\n * Provides the iterator for handling encrypted items in the Azure Cosmos DB database service.\n * extends @see {@link QueryIterator}\n */\nexport class EncryptionItemQueryIterator<Item> extends QueryIterator<Item> {\n  private container: Container;\n  private encryptionClientContext: ClientContext;\n  private encryptionOptions: FeedOptions;\n\n  constructor(\n    clientContext: ClientContext,\n    query: SqlQuerySpec | string,\n    options: FeedOptions,\n    fetchFunctions: FetchFunctionCallback | FetchFunctionCallback[],\n    container: Container,\n  ) {\n    super(clientContext, query, options, fetchFunctions, container.url, ResourceType.item);\n    this.container = container;\n    this.encryptionClientContext = clientContext;\n    this.encryptionOptions = options;\n  }\n\n  /**\n   * Gets an async iterator that will yield results until completion.\n   */\n  public override async *getAsyncIterator(): AsyncIterable<FeedResponse<Item>> {\n    let response: FeedResponse<Item>;\n    const diagnosticNode = new DiagnosticNodeInternal(\n      this.encryptionClientContext.diagnosticLevel,\n      DiagnosticNodeType.CLIENT_REQUEST_NODE,\n      null,\n    );\n    try {\n      response = yield* QueryIterator.prototype.getAsyncIteratorInternal.call(this, diagnosticNode);\n    } catch (error) {\n      await this.container.throwIfRequestNeedsARetryPostPolicyRefresh(error);\n    }\n    if (response?.resources?.length > 0) {\n      let count = 0;\n      diagnosticNode.beginEncryptionDiagnostics(Constants.Encryption.DiagnosticsDecryptOperation);\n      for (let resource of response.resources) {\n        const { body, propertiesDecryptedCount } =\n          await this.container.encryptionProcessor.decrypt(resource);\n        resource = body;\n        count += propertiesDecryptedCount;\n      }\n      diagnosticNode.endEncryptionDiagnostics(\n        Constants.Encryption.DiagnosticsDecryptOperation,\n        count,\n      );\n    }\n    yield response;\n  }\n\n  /**\n   * Fetch all pages for the query and return a single FeedResponse.\n   */\n  public override async fetchAll(): Promise<FeedResponse<Item>> {\n    return withDiagnostics(async (diagnosticNode: DiagnosticNodeInternal) => {\n      let response: FeedResponse<Item>;\n      try {\n        response = await QueryIterator.prototype.fetchAllInternal.call(this, diagnosticNode);\n      } catch (error) {\n        await this.container.throwIfRequestNeedsARetryPostPolicyRefresh(error);\n      }\n      if (response?.resources?.length > 0) {\n        let count = 0;\n        diagnosticNode.beginEncryptionDiagnostics(Constants.Encryption.DiagnosticsDecryptOperation);\n        for (let resource of response.resources) {\n          const { body, propertiesDecryptedCount } =\n            await this.container.encryptionProcessor.decrypt(resource);\n          resource = body;\n          count += propertiesDecryptedCount;\n        }\n        diagnosticNode.endEncryptionDiagnostics(\n          Constants.Encryption.DiagnosticsDecryptOperation,\n          count,\n        );\n      }\n      return response;\n    }, this.encryptionClientContext);\n  }\n\n  /**\n   * Retrieve the next batch from the feed.\n   */\n  public override async fetchNext(): Promise<FeedResponse<Item>> {\n    return withDiagnostics(async (diagnosticNode: DiagnosticNodeInternal) => {\n      let response: FeedResponse<Item>;\n      try {\n        response = await QueryIterator.prototype.fetchNextInternal.call(this, diagnosticNode);\n      } catch (error) {\n        await this.container.throwIfRequestNeedsARetryPostPolicyRefresh(error);\n      }\n      if (response?.resources?.length > 0) {\n        let count = 0;\n        diagnosticNode.beginEncryptionDiagnostics(Constants.Encryption.DiagnosticsDecryptOperation);\n        for (let resource of response.resources) {\n          const { body, propertiesDecryptedCount } =\n            await this.container.encryptionProcessor.decrypt(resource);\n          resource = body;\n          count += propertiesDecryptedCount;\n        }\n        diagnosticNode.endEncryptionDiagnostics(\n          Constants.Encryption.DiagnosticsDecryptOperation,\n          count,\n        );\n      }\n      return response;\n    }, this.encryptionClientContext);\n  }\n  /**\n   * @internal\n   */\n  public override async init(diagnosticNode: DiagnosticNodeInternal): Promise<void> {\n    // Ensure encryption is initialized and set rid in options\n    await this.container.checkAndInitializeEncryption();\n    this.encryptionOptions.containerRid = this.container._rid;\n    await QueryIterator.prototype.init.call(this, diagnosticNode);\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,uBAAwC;AACxC,oCAGO;AAEP,2BAA8B;AAE9B,yBAAgC;AAOzB,MAAM,oCAA0C,mCAAoB;AAAA,EACjE;AAAA,EACA;AAAA,EACA;AAAA,EAER,YACE,eACA,OACA,SACA,gBACA,WACA;AACA,UAAM,eAAe,OAAO,SAAS,gBAAgB,UAAU,KAAK,8BAAa,IAAI;AACrF,SAAK,YAAY;AACjB,SAAK,0BAA0B;AAC/B,SAAK,oBAAoB;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAuB,mBAAsD;AAC3E,QAAI;AACJ,UAAM,iBAAiB,IAAI;AAAA,MACzB,KAAK,wBAAwB;AAAA,MAC7B,iDAAmB;AAAA,MACnB;AAAA,IACF;AACA,QAAI;AACF,iBAAW,OAAO,mCAAc,UAAU,yBAAyB,KAAK,MAAM,cAAc;AAAA,IAC9F,SAAS,OAAO;AACd,YAAM,KAAK,UAAU,2CAA2C,KAAK;AAAA,IACvE;AACA,QAAI,UAAU,WAAW,SAAS,GAAG;AACnC,UAAI,QAAQ;AACZ,qBAAe,2BAA2B,2BAAU,WAAW,2BAA2B;AAC1F,eAAS,YAAY,SAAS,WAAW;AACvC,cAAM,EAAE,MAAM,yBAAyB,IACrC,MAAM,KAAK,UAAU,oBAAoB,QAAQ,QAAQ;AAC3D,mBAAW;AACX,iBAAS;AAAA,MACX;AACA,qBAAe;AAAA,QACb,2BAAU,WAAW;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKA,MAAsB,WAAwC;AAC5D,eAAO,oCAAgB,OAAO,mBAA2C;AACvE,UAAI;AACJ,UAAI;AACF,mBAAW,MAAM,mCAAc,UAAU,iBAAiB,KAAK,MAAM,cAAc;AAAA,MACrF,SAAS,OAAO;AACd,cAAM,KAAK,UAAU,2CAA2C,KAAK;AAAA,MACvE;AACA,UAAI,UAAU,WAAW,SAAS,GAAG;AACnC,YAAI,QAAQ;AACZ,uBAAe,2BAA2B,2BAAU,WAAW,2BAA2B;AAC1F,iBAAS,YAAY,SAAS,WAAW;AACvC,gBAAM,EAAE,MAAM,yBAAyB,IACrC,MAAM,KAAK,UAAU,oBAAoB,QAAQ,QAAQ;AAC3D,qBAAW;AACX,mBAAS;AAAA,QACX;AACA,uBAAe;AAAA,UACb,2BAAU,WAAW;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG,KAAK,uBAAuB;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAsB,YAAyC;AAC7D,eAAO,oCAAgB,OAAO,mBAA2C;AACvE,UAAI;AACJ,UAAI;AACF,mBAAW,MAAM,mCAAc,UAAU,kBAAkB,KAAK,MAAM,cAAc;AAAA,MACtF,SAAS,OAAO;AACd,cAAM,KAAK,UAAU,2CAA2C,KAAK;AAAA,MACvE;AACA,UAAI,UAAU,WAAW,SAAS,GAAG;AACnC,YAAI,QAAQ;AACZ,uBAAe,2BAA2B,2BAAU,WAAW,2BAA2B;AAC1F,iBAAS,YAAY,SAAS,WAAW;AACvC,gBAAM,EAAE,MAAM,yBAAyB,IACrC,MAAM,KAAK,UAAU,oBAAoB,QAAQ,QAAQ;AAC3D,qBAAW;AACX,mBAAS;AAAA,QACX;AACA,uBAAe;AAAA,UACb,2BAAU,WAAW;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG,KAAK,uBAAuB;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA,EAIA,MAAsB,KAAK,gBAAuD;AAEhF,UAAM,KAAK,UAAU,6BAA6B;AAClD,SAAK,kBAAkB,eAAe,KAAK,UAAU;AACrD,UAAM,mCAAc,UAAU,KAAK,KAAK,MAAM,cAAc;AAAA,EAC9D;AACF;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKey/DataEncryptionKey.js

@@ -1,35 +1,55 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DataEncryptionKey = void 0;
-const node_crypto_1 = require("node:crypto");
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var DataEncryptionKey_exports = {};
+__export(DataEncryptionKey_exports, {
+  DataEncryptionKey: () => DataEncryptionKey
+});
+module.exports = __toCommonJS(DataEncryptionKey_exports);
+var import_node_crypto = require("node:crypto");
 class DataEncryptionKey {
-    rootKeyBuffer;
-    keySizeInBits = 256;
-    keySizeInBytes = this.keySizeInBits / 8;
-    encryptionKeyBuffer;
-    macKeyBuffer;
-    ivKeyBuffer;
-    name;
-    constructor(rootKey, name) {
-        if (rootKey.length !== this.keySizeInBytes) {
-            throw new Error("Invalid root key size");
-        }
-        this.rootKeyBuffer = rootKey;
-        this.name = name;
-        const encryptionKeySalt = `Microsoft SQL Server cell encryption key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
-        const macKeySalt = `Microsoft SQL Server cell MAC key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
-        const ivKeySalt = `Microsoft SQL Server cell IV key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
-        this.encryptionKeyBuffer = this.getHmacWithSha256(encryptionKeySalt, this.rootKeyBuffer);
-        this.macKeyBuffer = this.getHmacWithSha256(macKeySalt, this.rootKeyBuffer);
-        this.ivKeyBuffer = this.getHmacWithSha256(ivKeySalt, this.rootKeyBuffer);
-    }
-    getHmacWithSha256(plainText, key) {
-        const hmac = (0, node_crypto_1.createHmac)("sha256", key);
-        hmac.update(Buffer.from(plainText, "utf16le"));
-        return hmac.digest();
+  rootKeyBuffer;
+  keySizeInBits = 256;
+  keySizeInBytes = this.keySizeInBits / 8;
+  encryptionKeyBuffer;
+  macKeyBuffer;
+  ivKeyBuffer;
+  name;
+  constructor(rootKey, name) {
+    if (rootKey.length !== this.keySizeInBytes) {
+      throw new Error("Invalid root key size");
     }
+    this.rootKeyBuffer = rootKey;
+    this.name = name;
+    const encryptionKeySalt = `Microsoft SQL Server cell encryption key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
+    const macKeySalt = `Microsoft SQL Server cell MAC key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
+    const ivKeySalt = `Microsoft SQL Server cell IV key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;
+    this.encryptionKeyBuffer = this.getHmacWithSha256(encryptionKeySalt, this.rootKeyBuffer);
+    this.macKeyBuffer = this.getHmacWithSha256(macKeySalt, this.rootKeyBuffer);
+    this.ivKeyBuffer = this.getHmacWithSha256(ivKeySalt, this.rootKeyBuffer);
+  }
+  getHmacWithSha256(plainText, key) {
+    const hmac = (0, import_node_crypto.createHmac)("sha256", key);
+    hmac.update(Buffer.from(plainText, "utf16le"));
+    return hmac.digest();
+  }
 }
-exports.DataEncryptionKey = DataEncryptionKey;
-//# sourceMappingURL=DataEncryptionKey.js.map
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DataEncryptionKey
+});
+//# sourceMappingURL=DataEncryptionKey.js.map

package/dist/commonjs/encryption/EncryptionKey/DataEncryptionKey.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"DataEncryptionKey.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKey/DataEncryptionKey.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,6CAAyC;AAEzC,MAAsB,iBAAiB;IAC7B,aAAa,CAAS;IACtB,aAAa,GAAG,GAAG,CAAC;IACpB,cAAc,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IAEzC,mBAAmB,CAAS;IAC5B,YAAY,CAAS;IACrB,WAAW,CAAS;IACpB,IAAI,CAAS;IAEpB,YAAY,OAAe,EAAE,IAAY;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,MAAM,iBAAiB,GAAG,kHAAkH,IAAI,CAAC,aAAa,EAAE,CAAC;QACjK,MAAM,UAAU,GAAG,2GAA2G,IAAI,CAAC,aAAa,EAAE,CAAC;QACnJ,MAAM,SAAS,GAAG,0GAA0G,IAAI,CAAC,aAAa,EAAE,CAAC;QAEjJ,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACzF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3E,CAAC;IAEO,iBAAiB,CAAC,SAAiB,EAAE,GAAW;QACtD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;CACF;AA/BD,8CA+BC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { createHmac } from \"node:crypto\";\n\nexport abstract class DataEncryptionKey {\n  private rootKeyBuffer: Buffer;\n  private keySizeInBits = 256;\n  private keySizeInBytes = this.keySizeInBits / 8;\n\n  public encryptionKeyBuffer: Buffer;\n  public macKeyBuffer: Buffer;\n  public ivKeyBuffer: Buffer;\n  public name: string;\n\n  constructor(rootKey: Buffer, name: string) {\n    if (rootKey.length !== this.keySizeInBytes) {\n      throw new Error(\"Invalid root key size\");\n    }\n    this.rootKeyBuffer = rootKey;\n    this.name = name;\n\n    const encryptionKeySalt = `Microsoft SQL Server cell encryption key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const macKeySalt = `Microsoft SQL Server cell MAC key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const ivKeySalt = `Microsoft SQL Server cell IV key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n\n    this.encryptionKeyBuffer = this.getHmacWithSha256(encryptionKeySalt, this.rootKeyBuffer);\n    this.macKeyBuffer = this.getHmacWithSha256(macKeySalt, this.rootKeyBuffer);\n    this.ivKeyBuffer = this.getHmacWithSha256(ivKeySalt, this.rootKeyBuffer);\n  }\n\n  private getHmacWithSha256(plainText: string, key: Buffer): Buffer {\n    const hmac = createHmac(\"sha256\", key);\n    hmac.update(Buffer.from(plainText, \"utf16le\"));\n    return hmac.digest();\n  }\n}\n"]}
+{
+  "version": 3,
+  "sources": ["../../../../src/encryption/EncryptionKey/DataEncryptionKey.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { createHmac } from \"node:crypto\";\n\nexport abstract class DataEncryptionKey {\n  private rootKeyBuffer: Buffer;\n  private keySizeInBits = 256;\n  private keySizeInBytes = this.keySizeInBits / 8;\n\n  public encryptionKeyBuffer: Buffer;\n  public macKeyBuffer: Buffer;\n  public ivKeyBuffer: Buffer;\n  public name: string;\n\n  constructor(rootKey: Buffer, name: string) {\n    if (rootKey.length !== this.keySizeInBytes) {\n      throw new Error(\"Invalid root key size\");\n    }\n    this.rootKeyBuffer = rootKey;\n    this.name = name;\n\n    const encryptionKeySalt = `Microsoft SQL Server cell encryption key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const macKeySalt = `Microsoft SQL Server cell MAC key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const ivKeySalt = `Microsoft SQL Server cell IV key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n\n    this.encryptionKeyBuffer = this.getHmacWithSha256(encryptionKeySalt, this.rootKeyBuffer);\n    this.macKeyBuffer = this.getHmacWithSha256(macKeySalt, this.rootKeyBuffer);\n    this.ivKeyBuffer = this.getHmacWithSha256(ivKeySalt, this.rootKeyBuffer);\n  }\n\n  private getHmacWithSha256(plainText: string, key: Buffer): Buffer {\n    const hmac = createHmac(\"sha256\", key);\n    hmac.update(Buffer.from(plainText, \"utf16le\"));\n    return hmac.digest();\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAA2B;AAEpB,MAAe,kBAAkB;AAAA,EAC9B;AAAA,EACA,gBAAgB;AAAA,EAChB,iBAAiB,KAAK,gBAAgB;AAAA,EAEvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEP,YAAY,SAAiB,MAAc;AACzC,QAAI,QAAQ,WAAW,KAAK,gBAAgB;AAC1C,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AACA,SAAK,gBAAgB;AACrB,SAAK,OAAO;AAEZ,UAAM,oBAAoB,kHAAkH,KAAK,aAAa;AAC9J,UAAM,aAAa,2GAA2G,KAAK,aAAa;AAChJ,UAAM,YAAY,0GAA0G,KAAK,aAAa;AAE9I,SAAK,sBAAsB,KAAK,kBAAkB,mBAAmB,KAAK,aAAa;AACvF,SAAK,eAAe,KAAK,kBAAkB,YAAY,KAAK,aAAa;AACzE,SAAK,cAAc,KAAK,kBAAkB,WAAW,KAAK,aAAa;AAAA,EACzE;AAAA,EAEQ,kBAAkB,WAAmB,KAAqB;AAChE,UAAM,WAAO,+BAAW,UAAU,GAAG;AACrC,SAAK,OAAO,OAAO,KAAK,WAAW,SAAS,CAAC;AAC7C,WAAO,KAAK,OAAO;AAAA,EACrB;AACF;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKey/ProtectedDataEncryptionKey.js

@@ -1,24 +1,38 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProtectedDataEncryptionKey = void 0;
-const DataEncryptionKey_js_1 = require("./DataEncryptionKey.js");
-/**
- * A wrapper class around `DataEncryptionKey` that stores it in a protected form.
- * The `ProtectedDataEncryptionKey` class extends `DataEncryptionKey` and holds both the raw key and its encrypted form.
- * It also includes information about the `KeyEncryptionKey` used to encrypt the data encryption key.
- * @hidden
- */
-class ProtectedDataEncryptionKey extends DataEncryptionKey_js_1.DataEncryptionKey {
-    keyEncryptionKey;
-    encryptedValue;
-    constructor(name, keyEncryptionKey, rawKey, encryptedKey) {
-        super(rawKey, name);
-        this.name = name;
-        this.keyEncryptionKey = keyEncryptionKey;
-        this.encryptedValue = encryptedKey;
-    }
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var ProtectedDataEncryptionKey_exports = {};
+__export(ProtectedDataEncryptionKey_exports, {
+  ProtectedDataEncryptionKey: () => ProtectedDataEncryptionKey
+});
+module.exports = __toCommonJS(ProtectedDataEncryptionKey_exports);
+var import_DataEncryptionKey = require("./DataEncryptionKey.js");
+class ProtectedDataEncryptionKey extends import_DataEncryptionKey.DataEncryptionKey {
+  keyEncryptionKey;
+  encryptedValue;
+  constructor(name, keyEncryptionKey, rawKey, encryptedKey) {
+    super(rawKey, name);
+    this.name = name;
+    this.keyEncryptionKey = keyEncryptionKey;
+    this.encryptedValue = encryptedKey;
+  }
 }
-exports.ProtectedDataEncryptionKey = ProtectedDataEncryptionKey;
-//# sourceMappingURL=ProtectedDataEncryptionKey.js.map
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ProtectedDataEncryptionKey
+});
+//# sourceMappingURL=ProtectedDataEncryptionKey.js.map

package/dist/commonjs/encryption/EncryptionKey/ProtectedDataEncryptionKey.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"ProtectedDataEncryptionKey.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKey/ProtectedDataEncryptionKey.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,iEAA2D;AAG3D;;;;;GAKG;AACH,MAAa,0BAA2B,SAAQ,wCAAiB;IACxD,gBAAgB,CAAmB;IAEnC,cAAc,CAAS;IAE9B,YACE,IAAY,EACZ,gBAAkC,EAClC,MAAc,EACd,YAAoB;QAEpB,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,YAAY,CAAC;IACrC,CAAC;CACF;AAhBD,gEAgBC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nimport type { KeyEncryptionKey } from \"../KeyEncryptionKey.js\";\n\n/**\n * A wrapper class around `DataEncryptionKey` that stores it in a protected form.\n * The `ProtectedDataEncryptionKey` class extends `DataEncryptionKey` and holds both the raw key and its encrypted form.\n * It also includes information about the `KeyEncryptionKey` used to encrypt the data encryption key.\n * @hidden\n */\nexport class ProtectedDataEncryptionKey extends DataEncryptionKey {\n  public keyEncryptionKey: KeyEncryptionKey;\n\n  public encryptedValue: Buffer;\n\n  public constructor(\n    name: string,\n    keyEncryptionKey: KeyEncryptionKey,\n    rawKey: Buffer,\n    encryptedKey: Buffer,\n  ) {\n    super(rawKey, name);\n    this.name = name;\n    this.keyEncryptionKey = keyEncryptionKey;\n    this.encryptedValue = encryptedKey;\n  }\n}\n"]}
+{
+  "version": 3,
+  "sources": ["../../../../src/encryption/EncryptionKey/ProtectedDataEncryptionKey.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nimport type { KeyEncryptionKey } from \"../KeyEncryptionKey.js\";\n\n/**\n * A wrapper class around `DataEncryptionKey` that stores it in a protected form.\n * The `ProtectedDataEncryptionKey` class extends `DataEncryptionKey` and holds both the raw key and its encrypted form.\n * It also includes information about the `KeyEncryptionKey` used to encrypt the data encryption key.\n * @hidden\n */\nexport class ProtectedDataEncryptionKey extends DataEncryptionKey {\n  public keyEncryptionKey: KeyEncryptionKey;\n\n  public encryptedValue: Buffer;\n\n  public constructor(\n    name: string,\n    keyEncryptionKey: KeyEncryptionKey,\n    rawKey: Buffer,\n    encryptedKey: Buffer,\n  ) {\n    super(rawKey, name);\n    this.name = name;\n    this.keyEncryptionKey = keyEncryptionKey;\n    this.encryptedValue = encryptedKey;\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,+BAAkC;AAS3B,MAAM,mCAAmC,2CAAkB;AAAA,EACzD;AAAA,EAEA;AAAA,EAEA,YACL,MACA,kBACA,QACA,cACA;AACA,UAAM,QAAQ,IAAI;AAClB,SAAK,OAAO;AACZ,SAAK,mBAAmB;AACxB,SAAK,iBAAiB;AAAA,EACxB;AACF;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKey/index.js

@@ -1,10 +1,31 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProtectedDataEncryptionKey = exports.DataEncryptionKey = void 0;
-var DataEncryptionKey_js_1 = require("./DataEncryptionKey.js");
-Object.defineProperty(exports, "DataEncryptionKey", { enumerable: true, get: function () { return DataEncryptionKey_js_1.DataEncryptionKey; } });
-var ProtectedDataEncryptionKey_js_1 = require("./ProtectedDataEncryptionKey.js");
-Object.defineProperty(exports, "ProtectedDataEncryptionKey", { enumerable: true, get: function () { return ProtectedDataEncryptionKey_js_1.ProtectedDataEncryptionKey; } });
-//# sourceMappingURL=index.js.map
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var EncryptionKey_exports = {};
+__export(EncryptionKey_exports, {
+  DataEncryptionKey: () => import_DataEncryptionKey.DataEncryptionKey,
+  ProtectedDataEncryptionKey: () => import_ProtectedDataEncryptionKey.ProtectedDataEncryptionKey
+});
+module.exports = __toCommonJS(EncryptionKey_exports);
+var import_DataEncryptionKey = require("./DataEncryptionKey.js");
+var import_ProtectedDataEncryptionKey = require("./ProtectedDataEncryptionKey.js");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DataEncryptionKey,
+  ProtectedDataEncryptionKey
+});
+//# sourceMappingURL=index.js.map

package/dist/commonjs/encryption/EncryptionKey/index.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKey/index.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAElC,+DAA2D;AAAlD,yHAAA,iBAAiB,OAAA;AAC1B,iFAA6E;AAApE,2IAAA,0BAA0B,OAAA","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nexport { ProtectedDataEncryptionKey } from \"./ProtectedDataEncryptionKey.js\";\n"]}
+{
+  "version": 3,
+  "sources": ["../../../../src/encryption/EncryptionKey/index.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nexport { ProtectedDataEncryptionKey } from \"./ProtectedDataEncryptionKey.js\";\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,+BAAkC;AAClC,wCAA2C;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.js

@@ -1,100 +1,119 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AzureKeyVaultEncryptionKeyResolver = void 0;
-const keyvault_keys_1 = require("@azure/keyvault-keys");
-const index_js_1 = require("../../request/index.js");
-const index_js_2 = require("../enums/index.js");
-/**
- * Implementation of EncryptionKeyResolver that uses Azure Key Vault for customer managed keys.
- */
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var AzureKeyVaultEncryptionKeyResolver_exports = {};
+__export(AzureKeyVaultEncryptionKeyResolver_exports, {
+  AzureKeyVaultEncryptionKeyResolver: () => AzureKeyVaultEncryptionKeyResolver
+});
+module.exports = __toCommonJS(AzureKeyVaultEncryptionKeyResolver_exports);
+var import_keyvault_keys = require("@azure/keyvault-keys");
+var import_request = require("../../request/index.js");
+var import_enums = require("../enums/index.js");
 class AzureKeyVaultEncryptionKeyResolver {
-    credentials;
-    constructor(credentials) {
-        this.credentials = credentials;
+  credentials;
+  constructor(credentials) {
+    this.credentials = credentials;
+  }
+  /**
+   * Name of the resolver to use for client side encryption.
+   * Currently only AzureKeyVault implementation is supported.
+   */
+  encryptionKeyResolverName = import_enums.EncryptionKeyResolverName.AzureKeyVault;
+  /**
+   * wraps the given key using the specified key encryption key path and algorithm.
+   * @param encryptionKeyId - path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.
+   * @param algorithm - algorithm to be used for wrapping.
+   * @param unwrappedKey - dek to be wrapped.
+   * @returns wrapped DEK.
+   */
+  async wrapKey(encryptionKeyId, algorithm, unwrappedKey) {
+    try {
+      const origin = this.getOrigin(encryptionKeyId);
+      const keyClient = new import_keyvault_keys.KeyClient(origin, this.credentials);
+      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);
+      const cryptographyClient = keyClient.getCryptographyClient(keyName, {
+        keyVersion
+      });
+      const res = await cryptographyClient.wrapKey(algorithm, unwrappedKey);
+      if (!res || !res.result) {
+        throw new import_request.ErrorResponse(`Failed to wrap key: ${res}`);
+      }
+      return res.result;
+    } catch (e) {
+      throw new import_request.ErrorResponse(`Failed to wrap key: ${e.message}`);
     }
-    /**
-     * Name of the resolver to use for client side encryption.
-     * Currently only AzureKeyVault implementation is supported.
-     */
-    encryptionKeyResolverName = index_js_2.EncryptionKeyResolverName.AzureKeyVault;
-    /**
-     * wraps the given key using the specified key encryption key path and algorithm.
-     * @param encryptionKeyId - path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.
-     * @param algorithm - algorithm to be used for wrapping.
-     * @param unwrappedKey - dek to be wrapped.
-     * @returns wrapped DEK.
-     */
-    async wrapKey(encryptionKeyId, algorithm, unwrappedKey) {
-        try {
-            const origin = this.getOrigin(encryptionKeyId);
-            const keyClient = new keyvault_keys_1.KeyClient(origin, this.credentials);
-            const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);
-            const cryptographyClient = keyClient.getCryptographyClient(keyName, {
-                keyVersion: keyVersion,
-            });
-            const res = await cryptographyClient.wrapKey(algorithm, unwrappedKey);
-            if (!res || !res.result) {
-                throw new index_js_1.ErrorResponse(`Failed to wrap key: ${res}`);
-            }
-            return res.result;
-        }
-        catch (e) {
-            throw new index_js_1.ErrorResponse(`Failed to wrap key: ${e.message}`);
-        }
+  }
+  /**
+   * Unwraps the given wrapped key using the specified key encryption key path and algorithm.
+   * @param encryptionKeyId - path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.
+   * @param algorithm - algorithm to be used for unwrapping.
+   * @param wrappedKey - wrapped DEK.
+   * @returns unwrapped DEK.
+   */
+  async unwrapKey(encryptionKeyId, algorithm, wrappedKey) {
+    try {
+      const origin = this.getOrigin(encryptionKeyId);
+      const keyClient = new import_keyvault_keys.KeyClient(origin, this.credentials);
+      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);
+      const cryptographyClient = keyClient.getCryptographyClient(keyName, {
+        keyVersion
+      });
+      const res = await cryptographyClient.unwrapKey(algorithm, wrappedKey);
+      if (!res || !res.result) {
+        throw new import_request.ErrorResponse(`Failed to wrap key: ${res}`);
+      }
+      return res.result;
+    } catch (e) {
+      throw new import_request.ErrorResponse(`Failed to unwrap key: ${e.message}`);
     }
-    /**
-     * Unwraps the given wrapped key using the specified key encryption key path and algorithm.
-     * @param encryptionKeyId - path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.
-     * @param algorithm - algorithm to be used for unwrapping.
-     * @param wrappedKey - wrapped DEK.
-     * @returns unwrapped DEK.
-     */
-    async unwrapKey(encryptionKeyId, algorithm, wrappedKey) {
-        try {
-            const origin = this.getOrigin(encryptionKeyId);
-            const keyClient = new keyvault_keys_1.KeyClient(origin, this.credentials);
-            const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);
-            const cryptographyClient = keyClient.getCryptographyClient(keyName, {
-                keyVersion: keyVersion,
-            });
-            const res = await cryptographyClient.unwrapKey(algorithm, wrappedKey);
-            if (!res || !res.result) {
-                throw new index_js_1.ErrorResponse(`Failed to wrap key: ${res}`);
-            }
-            return res.result;
-        }
-        catch (e) {
-            throw new index_js_1.ErrorResponse(`Failed to unwrap key: ${e.message}`);
-        }
+  }
+  // TODO: improve this method to extract key name and version from the url
+  getKeyDetails(encryptionKeyId) {
+    let url;
+    try {
+      url = new URL(encryptionKeyId);
+      const parts = url.pathname.split("/");
+      if (parts.length < 4 || parts.length > 5) {
+        throw new import_request.ErrorResponse(
+          `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>`
+        );
+      }
+      if (parts.length === 4 || parts.length === 5) {
+        return [parts[2], parts[3]];
+      }
+    } catch (e) {
+      throw new import_request.ErrorResponse(
+        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`
+      );
     }
-    // TODO: improve this method to extract key name and version from the url
-    getKeyDetails(encryptionKeyId) {
-        let url;
-        try {
-            url = new URL(encryptionKeyId);
-            const parts = url.pathname.split("/");
-            if (parts.length < 4 || parts.length > 5) {
-                throw new index_js_1.ErrorResponse(`Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>`);
-            }
-            if (parts.length === 4 || parts.length === 5) {
-                return [parts[2], parts[3]];
-            }
-        }
-        catch (e) {
-            throw new index_js_1.ErrorResponse(`Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`);
-        }
-    }
-    getOrigin(encryptionKeyId) {
-        try {
-            const url = new URL(encryptionKeyId);
-            return url.origin;
-        }
-        catch (e) {
-            throw new index_js_1.ErrorResponse(`Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`);
-        }
+  }
+  getOrigin(encryptionKeyId) {
+    try {
+      const url = new URL(encryptionKeyId);
+      return url.origin;
+    } catch (e) {
+      throw new import_request.ErrorResponse(
+        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`
+      );
     }
+  }
 }
-exports.AzureKeyVaultEncryptionKeyResolver = AzureKeyVaultEncryptionKeyResolver;
-//# sourceMappingURL=AzureKeyVaultEncryptionKeyResolver.js.map
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AzureKeyVaultEncryptionKeyResolver
+});
+//# sourceMappingURL=AzureKeyVaultEncryptionKeyResolver.js.map

package/dist/commonjs/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"AzureKeyVaultEncryptionKeyResolver.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAKlC,wDAAiD;AACjD,qDAAuD;AACvD,gDAA8D;AAE9D;;GAEG;AACH,MAAa,kCAAkC;IACrC,WAAW,CAAkB;IAErC,YAAY,WAA4B;QACtC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IACD;;;OAGG;IACI,yBAAyB,GAAG,oCAAyB,CAAC,aAAa,CAAC;IAC3E;;;;;;OAMG;IACI,KAAK,CAAC,OAAO,CAClB,eAAuB,EACvB,SAAiB,EACjB,YAAwB;QAExB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,yBAAS,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;YAClE,MAAM,kBAAkB,GAAG,SAAS,CAAC,qBAAqB,CAAC,OAAO,EAAE;gBAClE,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAA6B,EAAE,YAAY,CAAC,CAAC;YAC1F,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,wBAAa,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,wBAAa,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD;;;;;;OAMG;IACI,KAAK,CAAC,SAAS,CACpB,eAAuB,EACvB,SAAiB,EACjB,UAAsB;QAEtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,yBAAS,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;YAClE,MAAM,kBAAkB,GAAG,SAAS,CAAC,qBAAqB,CAAC,OAAO,EAAE;gBAClE,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,SAA6B,EAAE,UAAU,CAAC,CAAC;YAC1F,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,wBAAa,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,wBAAa,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,yEAAyE;IACjE,aAAa,CAAC,eAAuB;QAC3C,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,wBAAa,CACrB,oBAAoB,eAAe,+FAA+F,CACnI,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,wBAAa,CACrB,oBAAoB,eAAe,yGAAyG,CAAC,CAAC,OAAO,EAAE,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,eAAuB;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;YACrC,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,wBAAa,CACrB,oBAAoB,eAAe,yGAAyG,CAAC,CAAC,OAAO,EAAE,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAlGD,gFAkGC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport type { EncryptionKeyResolver } from \"./EncryptionKeyResolver.js\";\nimport type { KeyWrapAlgorithm } from \"@azure/keyvault-keys\";\nimport { KeyClient } from \"@azure/keyvault-keys\";\nimport { ErrorResponse } from \"../../request/index.js\";\nimport { EncryptionKeyResolverName } from \"../enums/index.js\";\n\n/**\n * Implementation of EncryptionKeyResolver that uses Azure Key Vault for customer managed keys.\n */\nexport class AzureKeyVaultEncryptionKeyResolver implements EncryptionKeyResolver {\n  private credentials: TokenCredential;\n\n  constructor(credentials: TokenCredential) {\n    this.credentials = credentials;\n  }\n  /**\n   * Name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  public encryptionKeyResolverName = EncryptionKeyResolverName.AzureKeyVault;\n  /**\n   * wraps the given key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for wrapping.\n   * @param unwrappedKey - dek to be wrapped.\n   * @returns wrapped DEK.\n   */\n  public async wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.wrapKey(algorithm as KeyWrapAlgorithm, unwrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to wrap key: ${e.message}`);\n    }\n  }\n  /**\n   * Unwraps the given wrapped key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped DEK.\n   * @returns unwrapped DEK.\n   */\n  public async unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.unwrapKey(algorithm as KeyWrapAlgorithm, wrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to unwrap key: ${e.message}`);\n    }\n  }\n  // TODO: improve this method to extract key name and version from the url\n  private getKeyDetails(encryptionKeyId: string): [string, string] {\n    let url;\n    try {\n      url = new URL(encryptionKeyId);\n      const parts = url.pathname.split(\"/\");\n      if (parts.length < 4 || parts.length > 5) {\n        throw new ErrorResponse(\n          `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>`,\n        );\n      }\n      if (parts.length === 4 || parts.length === 5) {\n        return [parts[2], parts[3]];\n      }\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n\n  private getOrigin(encryptionKeyId: string): string {\n    try {\n      const url = new URL(encryptionKeyId);\n      return url.origin;\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n}\n"]}
+{
+  "version": 3,
+  "sources": ["../../../../src/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport type { EncryptionKeyResolver } from \"./EncryptionKeyResolver.js\";\nimport type { KeyWrapAlgorithm } from \"@azure/keyvault-keys\";\nimport { KeyClient } from \"@azure/keyvault-keys\";\nimport { ErrorResponse } from \"../../request/index.js\";\nimport { EncryptionKeyResolverName } from \"../enums/index.js\";\n\n/**\n * Implementation of EncryptionKeyResolver that uses Azure Key Vault for customer managed keys.\n */\nexport class AzureKeyVaultEncryptionKeyResolver implements EncryptionKeyResolver {\n  private credentials: TokenCredential;\n\n  constructor(credentials: TokenCredential) {\n    this.credentials = credentials;\n  }\n  /**\n   * Name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  public encryptionKeyResolverName = EncryptionKeyResolverName.AzureKeyVault;\n  /**\n   * wraps the given key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for wrapping.\n   * @param unwrappedKey - dek to be wrapped.\n   * @returns wrapped DEK.\n   */\n  public async wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.wrapKey(algorithm as KeyWrapAlgorithm, unwrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to wrap key: ${e.message}`);\n    }\n  }\n  /**\n   * Unwraps the given wrapped key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped DEK.\n   * @returns unwrapped DEK.\n   */\n  public async unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.unwrapKey(algorithm as KeyWrapAlgorithm, wrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to unwrap key: ${e.message}`);\n    }\n  }\n  // TODO: improve this method to extract key name and version from the url\n  private getKeyDetails(encryptionKeyId: string): [string, string] {\n    let url;\n    try {\n      url = new URL(encryptionKeyId);\n      const parts = url.pathname.split(\"/\");\n      if (parts.length < 4 || parts.length > 5) {\n        throw new ErrorResponse(\n          `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>`,\n        );\n      }\n      if (parts.length === 4 || parts.length === 5) {\n        return [parts[2], parts[3]];\n      }\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n\n  private getOrigin(encryptionKeyId: string): string {\n    try {\n      const url = new URL(encryptionKeyId);\n      return url.origin;\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,2BAA0B;AAC1B,qBAA8B;AAC9B,mBAA0C;AAKnC,MAAM,mCAAoE;AAAA,EACvE;AAAA,EAER,YAAY,aAA8B;AACxC,SAAK,cAAc;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKO,4BAA4B,uCAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ7D,MAAa,QACX,iBACA,WACA,cACqB;AACrB,QAAI;AACF,YAAM,SAAS,KAAK,UAAU,eAAe;AAC7C,YAAM,YAAY,IAAI,+BAAU,QAAQ,KAAK,WAAW;AACxD,YAAM,CAAC,SAAS,UAAU,IAAI,KAAK,cAAc,eAAe;AAChE,YAAM,qBAAqB,UAAU,sBAAsB,SAAS;AAAA,QAClE;AAAA,MACF,CAAC;AACD,YAAM,MAAM,MAAM,mBAAmB,QAAQ,WAA+B,YAAY;AACxF,UAAI,CAAC,OAAO,CAAC,IAAI,QAAQ;AACvB,cAAM,IAAI,6BAAc,uBAAuB,GAAG,EAAE;AAAA,MACtD;AACA,aAAO,IAAI;AAAA,IACb,SAAS,GAAG;AACV,YAAM,IAAI,6BAAc,uBAAuB,EAAE,OAAO,EAAE;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,UACX,iBACA,WACA,YACqB;AACrB,QAAI;AACF,YAAM,SAAS,KAAK,UAAU,eAAe;AAC7C,YAAM,YAAY,IAAI,+BAAU,QAAQ,KAAK,WAAW;AACxD,YAAM,CAAC,SAAS,UAAU,IAAI,KAAK,cAAc,eAAe;AAChE,YAAM,qBAAqB,UAAU,sBAAsB,SAAS;AAAA,QAClE;AAAA,MACF,CAAC;AACD,YAAM,MAAM,MAAM,mBAAmB,UAAU,WAA+B,UAAU;AACxF,UAAI,CAAC,OAAO,CAAC,IAAI,QAAQ;AACvB,cAAM,IAAI,6BAAc,uBAAuB,GAAG,EAAE;AAAA,MACtD;AACA,aAAO,IAAI;AAAA,IACb,SAAS,GAAG;AACV,YAAM,IAAI,6BAAc,yBAAyB,EAAE,OAAO,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA,EAEQ,cAAc,iBAA2C;AAC/D,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,eAAe;AAC7B,YAAM,QAAQ,IAAI,SAAS,MAAM,GAAG;AACpC,UAAI,MAAM,SAAS,KAAK,MAAM,SAAS,GAAG;AACxC,cAAM,IAAI;AAAA,UACR,oBAAoB,eAAe;AAAA,QACrC;AAAA,MACF;AACA,UAAI,MAAM,WAAW,KAAK,MAAM,WAAW,GAAG;AAC5C,eAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;AAAA,MAC5B;AAAA,IACF,SAAS,GAAG;AACV,YAAM,IAAI;AAAA,QACR,oBAAoB,eAAe,yGAAyG,EAAE,OAAO;AAAA,MACvJ;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,iBAAiC;AACjD,QAAI;AACF,YAAM,MAAM,IAAI,IAAI,eAAe;AACnC,aAAO,IAAI;AAAA,IACb,SAAS,GAAG;AACV,YAAM,IAAI;AAAA,QACR,oBAAoB,eAAe,yGAAyG,EAAE,OAAO;AAAA,MACvJ;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKeyResolver/EncryptionKeyResolver.js

@@ -1,5 +1,16 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=EncryptionKeyResolver.js.map
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var EncryptionKeyResolver_exports = {};
+module.exports = __toCommonJS(EncryptionKeyResolver_exports);
+//# sourceMappingURL=EncryptionKeyResolver.js.map

package/dist/commonjs/encryption/EncryptionKeyResolver/EncryptionKeyResolver.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"EncryptionKeyResolver.js","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKeyResolver/EncryptionKeyResolver.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/** Provides an interface for key resolver for different key providers.\n * All resolvers should implement this interface.\n */\nexport interface EncryptionKeyResolver {\n  /** name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  encryptionKeyResolverName: string;\n  /**\n   * Wraps the input key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for wrapping.\n   * @param algorithm - Algorithm to be used for wrapping.\n   * @param key - Data Encryption Key to be wrapped.\n   * @returns Wrapped key.\n   */\n  wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n  /**\n   * Unwraps the input wrapped key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for unwrapping.\n   * @param algorithm - Algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped Data Encryption key.\n   * @returns Unwrapped Key.\n   */\n  unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n}\n"]}
+{
+  "version": 3,
+  "sources": ["../../../../src/encryption/EncryptionKeyResolver/EncryptionKeyResolver.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/** Provides an interface for key resolver for different key providers.\n * All resolvers should implement this interface.\n */\nexport interface EncryptionKeyResolver {\n  /** name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  encryptionKeyResolverName: string;\n  /**\n   * Wraps the input key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for wrapping.\n   * @param algorithm - Algorithm to be used for wrapping.\n   * @param key - Data Encryption Key to be wrapped.\n   * @returns Wrapped key.\n   */\n  wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n  /**\n   * Unwraps the input wrapped key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for unwrapping.\n   * @param algorithm - Algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped Data Encryption key.\n   * @returns Unwrapped Key.\n   */\n  unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n}\n"],
+  "mappings": ";;;;;;;;;;;;;AAAA;AAAA;",
+  "names": []
+}

package/dist/commonjs/encryption/EncryptionKeyResolver/index.d.ts

@@ -1,3 +1,3 @@
 export { AzureKeyVaultEncryptionKeyResolver } from "./AzureKeyVaultEncryptionKeyResolver.js";
-export { EncryptionKeyResolver } from "./EncryptionKeyResolver.js";
+export type { EncryptionKeyResolver } from "./EncryptionKeyResolver.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/commonjs/encryption/EncryptionKeyResolver/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKeyResolver/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/encryption/EncryptionKeyResolver/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,YAAY,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC"}