@azure/cosmos 4.9.2 → 4.9.3

package/dist/commonjs/encryption/AeadAes256CbcHmacSha256Algorithm/index.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/AeadAes256CbcHmacSha256Algorithm/index.ts"],
+  "sources": ["../../../../src/encryption/AeadAes256CbcHmacSha256Algorithm/index.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { AeadAes256CbcHmacSha256Algorithm } from \"./AeadAes256CbcHmacSha256Algorithm.js\";\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,8CAAiD;",
   "names": []

package/dist/commonjs/encryption/Cache/ClientEncryptionKeyPropertiesCache.js

@@ -37,3 +37,4 @@ class ClientEncryptionKeyPropertiesCache {
 0 && (module.exports = {
   ClientEncryptionKeyPropertiesCache
 });
+//# sourceMappingURL=ClientEncryptionKeyPropertiesCache.js.map

package/dist/commonjs/encryption/Cache/ClientEncryptionKeyPropertiesCache.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/Cache/ClientEncryptionKeyPropertiesCache.ts"],
+  "sources": ["../../../../src/encryption/Cache/ClientEncryptionKeyPropertiesCache.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { ClientEncryptionKeyProperties } from \"../ClientEncryptionKey/index.js\";\n\n/**\n * The cache used to store the properties of the client encryption key\n * see {@link ClientEncryptionKeyProperties}\n * @hidden\n */\n\nexport class ClientEncryptionKeyPropertiesCache {\n  // key is database rid + '/'+ clientEncryptionKeyId\n  private clientEncryptionKeyPropertiesCache: Map<string, ClientEncryptionKeyProperties>;\n\n  public constructor() {\n    this.clientEncryptionKeyPropertiesCache = new Map<string, ClientEncryptionKeyProperties>();\n  }\n\n  public get(key: string): ClientEncryptionKeyProperties | undefined {\n    return this.clientEncryptionKeyPropertiesCache.get(key);\n  }\n  public set(key: string, clientEncryptionKeyProperties: ClientEncryptionKeyProperties): void {\n    this.clientEncryptionKeyPropertiesCache.set(key, clientEncryptionKeyProperties);\n  }\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAWO,MAAM,mCAAmC;AAAA;AAAA,EAEtC;AAAA,EAED,cAAc;AACnB,SAAK,qCAAqC,oBAAI,IAA2C;AAAA,EAC3F;AAAA,EAEO,IAAI,KAAwD;AACjE,WAAO,KAAK,mCAAmC,IAAI,GAAG;AAAA,EACxD;AAAA,EACO,IAAI,KAAa,+BAAoE;AAC1F,SAAK,mCAAmC,IAAI,KAAK,6BAA6B;AAAA,EAChF;AACF;",
   "names": []

package/dist/commonjs/encryption/Cache/EncryptionSettingsCache.js

@@ -53,3 +53,4 @@ class EncryptionSettingsCache {
 0 && (module.exports = {
   EncryptionSettingsCache
 });
+//# sourceMappingURL=EncryptionSettingsCache.js.map

package/dist/commonjs/encryption/Cache/EncryptionSettingsCache.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/Cache/EncryptionSettingsCache.ts"],
+  "sources": ["../../../../src/encryption/Cache/EncryptionSettingsCache.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { ClientEncryptionPolicy } from \"../ClientEncryptionPolicy.js\";\nimport { EncryptionSettings } from \"../EncryptionSettings.js\";\nimport { EncryptionSettingForProperty } from \"../EncryptionSettingForProperty.js\";\n/**\n * The cache used to store encryption settings for a container.\n * see {@link EncryptionSettings}\n * @hidden\n */\nexport class EncryptionSettingsCache {\n  // key is databaseRid + '/' + containerRid\n  private cache: Map<string, EncryptionSettings>;\n\n  public constructor() {\n    this.cache = new Map<string, EncryptionSettings>();\n  }\n\n  public async create(\n    id: string,\n    containerRid: string,\n    partitionKeyPaths: string[],\n    clientEncryptionPolicy: ClientEncryptionPolicy,\n  ): Promise<EncryptionSettings> {\n    const encryptionSettings = new EncryptionSettings(id, containerRid, partitionKeyPaths);\n    if (!clientEncryptionPolicy) return;\n\n    for (const includedPath of clientEncryptionPolicy.includedPaths) {\n      const encryptionSettingForProperty = new EncryptionSettingForProperty(includedPath);\n      encryptionSettings.pathsToEncrypt.push(includedPath.path);\n      encryptionSettings.setEncryptionSettingForProperty(\n        includedPath.path,\n        encryptionSettingForProperty,\n      );\n    }\n    this.set(id, encryptionSettings);\n    return encryptionSettings;\n  }\n\n  public get(key: string): EncryptionSettings | undefined {\n    return this.cache.get(key);\n  }\n\n  public set(key: string, encryptionSettings: EncryptionSettings): void {\n    this.cache.set(key, encryptionSettings);\n  }\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIA,gCAAmC;AACnC,0CAA6C;AAMtC,MAAM,wBAAwB;AAAA;AAAA,EAE3B;AAAA,EAED,cAAc;AACnB,SAAK,QAAQ,oBAAI,IAAgC;AAAA,EACnD;AAAA,EAEA,MAAa,OACX,IACA,cACA,mBACA,wBAC6B;AAC7B,UAAM,qBAAqB,IAAI,6CAAmB,IAAI,cAAc,iBAAiB;AACrF,QAAI,CAAC,uBAAwB;AAE7B,eAAW,gBAAgB,uBAAuB,eAAe;AAC/D,YAAM,+BAA+B,IAAI,iEAA6B,YAAY;AAClF,yBAAmB,eAAe,KAAK,aAAa,IAAI;AACxD,yBAAmB;AAAA,QACjB,aAAa;AAAA,QACb;AAAA,MACF;AAAA,IACF;AACA,SAAK,IAAI,IAAI,kBAAkB;AAC/B,WAAO;AAAA,EACT;AAAA,EAEO,IAAI,KAA6C;AACtD,WAAO,KAAK,MAAM,IAAI,GAAG;AAAA,EAC3B;AAAA,EAEO,IAAI,KAAa,oBAA8C;AACpE,SAAK,MAAM,IAAI,KAAK,kBAAkB;AAAA,EACxC;AACF;",
   "names": []

package/dist/commonjs/encryption/Cache/KeyEncryptionKeyCache.js

@@ -47,3 +47,4 @@ class KeyEncryptionKeyCache {
 0 && (module.exports = {
   KeyEncryptionKeyCache
 });
+//# sourceMappingURL=KeyEncryptionKeyCache.js.map

package/dist/commonjs/encryption/Cache/KeyEncryptionKeyCache.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/Cache/KeyEncryptionKeyCache.ts"],
+  "sources": ["../../../../src/encryption/Cache/KeyEncryptionKeyCache.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionKeyStoreProvider } from \"../EncryptionKeyStoreProvider.js\";\nimport { KeyEncryptionKey } from \"../KeyEncryptionKey.js\";\n\n/**\n * The cache used to store the key encryption keys.\n * see {@link KeyEncryptionKey}\n * @hidden\n */\nexport class KeyEncryptionKeyCache {\n  // key is JSON.stringify([name, path])\n  public cache: Map<string, KeyEncryptionKey>;\n\n  constructor() {\n    this.cache = new Map<string, KeyEncryptionKey>();\n  }\n\n  public getOrCreate(\n    name: string,\n    path: string,\n    keyStoreProvider: EncryptionKeyStoreProvider,\n  ): KeyEncryptionKey {\n    const key = JSON.stringify([name, path]);\n    let keyEncryptionKey = this.get(key);\n    if (!keyEncryptionKey) {\n      keyEncryptionKey = new KeyEncryptionKey(name, path, keyStoreProvider);\n      this.set(key, keyEncryptionKey);\n    }\n    return keyEncryptionKey;\n  }\n\n  private get(key: string): KeyEncryptionKey | undefined {\n    return this.cache.get(key);\n  }\n  private set(key: string, keyEncryptionKey: KeyEncryptionKey): void {\n    this.cache.set(key, keyEncryptionKey);\n  }\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIA,8BAAiC;AAO1B,MAAM,sBAAsB;AAAA;AAAA,EAE1B;AAAA,EAEP,cAAc;AACZ,SAAK,QAAQ,oBAAI,IAA8B;AAAA,EACjD;AAAA,EAEO,YACL,MACA,MACA,kBACkB;AAClB,UAAM,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,CAAC;AACvC,QAAI,mBAAmB,KAAK,IAAI,GAAG;AACnC,QAAI,CAAC,kBAAkB;AACrB,yBAAmB,IAAI,yCAAiB,MAAM,MAAM,gBAAgB;AACpE,WAAK,IAAI,KAAK,gBAAgB;AAAA,IAChC;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,IAAI,KAA2C;AACrD,WAAO,KAAK,MAAM,IAAI,GAAG;AAAA,EAC3B;AAAA,EACQ,IAAI,KAAa,kBAA0C;AACjE,SAAK,MAAM,IAAI,KAAK,gBAAgB;AAAA,EACtC;AACF;",
   "names": []

package/dist/commonjs/encryption/Cache/ProtectedDataEncryptionKeyCache.js

@@ -30,6 +30,7 @@ class ProtectedDataEncryptionKeyCache {
     this.cache = /* @__PURE__ */ new Map();
     this.clearCacheOnTtlExpiry();
   }
+  cacheTimeToLive;
   // key is JSON.stringify([encryptionKeyId, keyEncryptionKey.name, keyEncryptionKey.path, encryptedValue.toString("hex")])
   cache;
   // interval for clear cache to run
@@ -105,3 +106,4 @@ class ProtectedDataEncryptionKeyCache {
 0 && (module.exports = {
   ProtectedDataEncryptionKeyCache
 });
+//# sourceMappingURL=ProtectedDataEncryptionKeyCache.js.map

package/dist/commonjs/encryption/Cache/ProtectedDataEncryptionKeyCache.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/Cache/ProtectedDataEncryptionKeyCache.ts"],
+  "sources": ["../../../../src/encryption/Cache/ProtectedDataEncryptionKeyCache.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { randomBytes } from \"node:crypto\";\nimport { ProtectedDataEncryptionKey } from \"../EncryptionKey/ProtectedDataEncryptionKey.js\";\nimport type { KeyEncryptionKey } from \"../KeyEncryptionKey.js\";\nimport { Constants } from \"../../common/index.js\";\nimport { startBackgroundTask } from \"../../utils/time.js\";\n\n/**\n * The cache used to store the protected data encryption key.\n * see {@link ProtectedDataEncryptionKey}\n * @hidden\n */\nexport class ProtectedDataEncryptionKeyCache {\n  // key is JSON.stringify([encryptionKeyId, keyEncryptionKey.name, keyEncryptionKey.path, encryptedValue.toString(\"hex\")])\n  private cache: Map<string, [Date, ProtectedDataEncryptionKey]>;\n  // interval for clear cache to run\n  cacheRefresher: NodeJS.Timeout;\n\n  constructor(private cacheTimeToLive: number) {\n    this.cache = new Map<string, [Date, ProtectedDataEncryptionKey]>();\n    this.clearCacheOnTtlExpiry();\n  }\n\n  public get(key: string): ProtectedDataEncryptionKey | undefined {\n    if (!this.cache.has(key)) {\n      return undefined;\n    }\n    return this.cache.get(key)[1];\n  }\n\n  private set(key: string, protectedDataEncryptionKey: ProtectedDataEncryptionKey): void {\n    if (this.cacheTimeToLive === 0) {\n      return;\n    }\n    this.cache.set(key, [new Date(), protectedDataEncryptionKey]);\n  }\n\n  private async clearCacheOnTtlExpiry(): Promise<void> {\n    this.cacheRefresher = startBackgroundTask(async () => {\n      const now = new Date();\n      for (const key of this.cache.keys()) {\n        if (now.getTime() - this.cache.get(key)[0].getTime() > this.cacheTimeToLive) {\n          this.cache.delete(key);\n        }\n      }\n    }, Constants.EncryptionCacheRefreshIntervalInMs);\n  }\n\n  private async createProtectedDataEncryptionKey(\n    name: string,\n    keyEncryptionKey: KeyEncryptionKey,\n    encryptedValue?: Buffer,\n  ): Promise<ProtectedDataEncryptionKey> {\n    let rawKey: Buffer;\n    let encryptedKey: Buffer;\n    if (encryptedValue) {\n      rawKey = await keyEncryptionKey.unwrapEncryptionKey(encryptedValue);\n      encryptedKey = encryptedValue;\n    } else {\n      rawKey = this.generateColumnEncryptionKey();\n      encryptedKey = await keyEncryptionKey.wrapEncryptionKey(rawKey);\n    }\n    const newKey = new ProtectedDataEncryptionKey(name, keyEncryptionKey, rawKey, encryptedKey);\n    if (this.cacheTimeToLive !== 0) {\n      const key = JSON.stringify([\n        name,\n        keyEncryptionKey.name,\n        keyEncryptionKey.path,\n        encryptedKey.toString(\"hex\"),\n      ]);\n      this.set(key, newKey);\n    }\n    return newKey;\n  }\n\n  public async getOrCreate(\n    name: string,\n    keyEncryptionKey: KeyEncryptionKey,\n    encryptedValue?: Uint8Array,\n    forceRefresh?: boolean,\n  ): Promise<ProtectedDataEncryptionKey> {\n    const encryptedValueBuffer = encryptedValue ? Buffer.from(encryptedValue) : undefined;\n    if (this.cacheTimeToLive === 0 || forceRefresh) {\n      return this.createProtectedDataEncryptionKey(name, keyEncryptionKey, encryptedValueBuffer);\n    }\n\n    if (encryptedValueBuffer) {\n      const key = JSON.stringify([\n        name,\n        keyEncryptionKey.name,\n        keyEncryptionKey.path,\n        encryptedValueBuffer.toString(\"hex\"),\n      ]);\n      const protectedDataEncryptionKey = this.get(key);\n      if (protectedDataEncryptionKey) {\n        return protectedDataEncryptionKey;\n      }\n    }\n    return this.createProtectedDataEncryptionKey(name, keyEncryptionKey, encryptedValueBuffer);\n  }\n\n  private generateColumnEncryptionKey(): Buffer {\n    return randomBytes(32);\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAA4B;AAC5B,wCAA2C;AAE3C,oBAA0B;AAC1B,kBAAoC;AAO7B,MAAM,gCAAgC;AAAA,EAM3C,YAAoB,iBAAyB;AAAzB;AAClB,SAAK,QAAQ,oBAAI,IAAgD;AACjE,SAAK,sBAAsB;AAAA,EAC7B;AAAA;AAAA,EAPQ;AAAA;AAAA,EAER;AAAA,EAOO,IAAI,KAAqD;AAC9D,QAAI,CAAC,KAAK,MAAM,IAAI,GAAG,GAAG;AACxB,aAAO;AAAA,IACT;AACA,WAAO,KAAK,MAAM,IAAI,GAAG,EAAE,CAAC;AAAA,EAC9B;AAAA,EAEQ,IAAI,KAAa,4BAA8D;AACrF,QAAI,KAAK,oBAAoB,GAAG;AAC9B;AAAA,IACF;AACA,SAAK,MAAM,IAAI,KAAK,CAAC,oBAAI,KAAK,GAAG,0BAA0B,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAc,wBAAuC;AACnD,SAAK,qBAAiB,iCAAoB,YAAY;AACpD,YAAM,MAAM,oBAAI,KAAK;AACrB,iBAAW,OAAO,KAAK,MAAM,KAAK,GAAG;AACnC,YAAI,IAAI,QAAQ,IAAI,KAAK,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,QAAQ,IAAI,KAAK,iBAAiB;AAC3E,eAAK,MAAM,OAAO,GAAG;AAAA,QACvB;AAAA,MACF;AAAA,IACF,GAAG,wBAAU,kCAAkC;AAAA,EACjD;AAAA,EAEA,MAAc,iCACZ,MACA,kBACA,gBACqC;AACrC,QAAI;AACJ,QAAI;AACJ,QAAI,gBAAgB;AAClB,eAAS,MAAM,iBAAiB,oBAAoB,cAAc;AAClE,qBAAe;AAAA,IACjB,OAAO;AACL,eAAS,KAAK,4BAA4B;AAC1C,qBAAe,MAAM,iBAAiB,kBAAkB,MAAM;AAAA,IAChE;AACA,UAAM,SAAS,IAAI,6DAA2B,MAAM,kBAAkB,QAAQ,YAAY;AAC1F,QAAI,KAAK,oBAAoB,GAAG;AAC9B,YAAM,MAAM,KAAK,UAAU;AAAA,QACzB;AAAA,QACA,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,QACjB,aAAa,SAAS,KAAK;AAAA,MAC7B,CAAC;AACD,WAAK,IAAI,KAAK,MAAM;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,YACX,MACA,kBACA,gBACA,cACqC;AACrC,UAAM,uBAAuB,iBAAiB,OAAO,KAAK,cAAc,IAAI;AAC5E,QAAI,KAAK,oBAAoB,KAAK,cAAc;AAC9C,aAAO,KAAK,iCAAiC,MAAM,kBAAkB,oBAAoB;AAAA,IAC3F;AAEA,QAAI,sBAAsB;AACxB,YAAM,MAAM,KAAK,UAAU;AAAA,QACzB;AAAA,QACA,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,QACjB,qBAAqB,SAAS,KAAK;AAAA,MACrC,CAAC;AACD,YAAM,6BAA6B,KAAK,IAAI,GAAG;AAC/C,UAAI,4BAA4B;AAC9B,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO,KAAK,iCAAiC,MAAM,kBAAkB,oBAAoB;AAAA,EAC3F;AAAA,EAEQ,8BAAsC;AAC5C,eAAO,gCAAY,EAAE;AAAA,EACvB;AACF;",
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAA4B;AAC5B,wCAA2C;AAE3C,oBAA0B;AAC1B,kBAAoC;AAO7B,MAAM,gCAAgC;AAAA,EAM3C,YAAoB,iBAAyB;AAAzB;AAClB,SAAK,QAAQ,oBAAI,IAAgD;AACjE,SAAK,sBAAsB;AAAA,EAC7B;AAAA,EAHoB;AAAA;AAAA,EAJZ;AAAA;AAAA,EAER;AAAA,EAOO,IAAI,KAAqD;AAC9D,QAAI,CAAC,KAAK,MAAM,IAAI,GAAG,GAAG;AACxB,aAAO;AAAA,IACT;AACA,WAAO,KAAK,MAAM,IAAI,GAAG,EAAE,CAAC;AAAA,EAC9B;AAAA,EAEQ,IAAI,KAAa,4BAA8D;AACrF,QAAI,KAAK,oBAAoB,GAAG;AAC9B;AAAA,IACF;AACA,SAAK,MAAM,IAAI,KAAK,CAAC,oBAAI,KAAK,GAAG,0BAA0B,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAc,wBAAuC;AACnD,SAAK,qBAAiB,iCAAoB,YAAY;AACpD,YAAM,MAAM,oBAAI,KAAK;AACrB,iBAAW,OAAO,KAAK,MAAM,KAAK,GAAG;AACnC,YAAI,IAAI,QAAQ,IAAI,KAAK,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,QAAQ,IAAI,KAAK,iBAAiB;AAC3E,eAAK,MAAM,OAAO,GAAG;AAAA,QACvB;AAAA,MACF;AAAA,IACF,GAAG,wBAAU,kCAAkC;AAAA,EACjD;AAAA,EAEA,MAAc,iCACZ,MACA,kBACA,gBACqC;AACrC,QAAI;AACJ,QAAI;AACJ,QAAI,gBAAgB;AAClB,eAAS,MAAM,iBAAiB,oBAAoB,cAAc;AAClE,qBAAe;AAAA,IACjB,OAAO;AACL,eAAS,KAAK,4BAA4B;AAC1C,qBAAe,MAAM,iBAAiB,kBAAkB,MAAM;AAAA,IAChE;AACA,UAAM,SAAS,IAAI,6DAA2B,MAAM,kBAAkB,QAAQ,YAAY;AAC1F,QAAI,KAAK,oBAAoB,GAAG;AAC9B,YAAM,MAAM,KAAK,UAAU;AAAA,QACzB;AAAA,QACA,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,QACjB,aAAa,SAAS,KAAK;AAAA,MAC7B,CAAC;AACD,WAAK,IAAI,KAAK,MAAM;AAAA,IACtB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,YACX,MACA,kBACA,gBACA,cACqC;AACrC,UAAM,uBAAuB,iBAAiB,OAAO,KAAK,cAAc,IAAI;AAC5E,QAAI,KAAK,oBAAoB,KAAK,cAAc;AAC9C,aAAO,KAAK,iCAAiC,MAAM,kBAAkB,oBAAoB;AAAA,IAC3F;AAEA,QAAI,sBAAsB;AACxB,YAAM,MAAM,KAAK,UAAU;AAAA,QACzB;AAAA,QACA,iBAAiB;AAAA,QACjB,iBAAiB;AAAA,QACjB,qBAAqB,SAAS,KAAK;AAAA,MACrC,CAAC;AACD,YAAM,6BAA6B,KAAK,IAAI,GAAG;AAC/C,UAAI,4BAA4B;AAC9B,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO,KAAK,iCAAiC,MAAM,kBAAkB,oBAAoB;AAAA,EAC3F;AAAA,EAEQ,8BAAsC;AAC5C,eAAO,gCAAY,EAAE;AAAA,EACvB;AACF;",
   "names": []
 }

package/dist/commonjs/encryption/ClientEncryptionIncludedPath.js

@@ -13,3 +13,4 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var ClientEncryptionIncludedPath_exports = {};
 module.exports = __toCommonJS(ClientEncryptionIncludedPath_exports);
+//# sourceMappingURL=ClientEncryptionIncludedPath.js.map

package/dist/commonjs/encryption/ClientEncryptionIncludedPath.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/ClientEncryptionIncludedPath.ts"],
+  "sources": ["../../../src/encryption/ClientEncryptionIncludedPath.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionType, EncryptionAlgorithm } from \"./enums/index.js\";\n\n/**\n * Represents a path for encryption and its associated settings.\n */\nexport interface ClientEncryptionIncludedPath {\n  /**\n   * name of the path to be encrypted\n   */\n  path: string;\n  /**\n   * identifier of the client encryption key to use to encrypt the path\n   */\n  clientEncryptionKeyId: string;\n  /**\n   * type of encryption to be performed (Deterministic or Randomized)\n   */\n  encryptionType: EncryptionType;\n  /**\n   * encryption algorithm to be used\n   * currently only AEAD_AES_256_CBC_HMAC_SHA256 algo is supported\n   */\n  encryptionAlgorithm: EncryptionAlgorithm;\n}\n"],
   "mappings": ";;;;;;;;;;;;;AAAA;AAAA;",
   "names": []

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.js

@@ -13,3 +13,4 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var ClientEncryptionKeyProperties_exports = {};
 module.exports = __toCommonJS(ClientEncryptionKeyProperties_exports);
+//# sourceMappingURL=ClientEncryptionKeyProperties.js.map

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.ts"],
+  "sources": ["../../../../src/encryption/ClientEncryptionKey/ClientEncryptionKeyProperties.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionKeyWrapMetadata } from \"../EncryptionKeyWrapMetadata.js\";\n\n/**\n * Details of a client encryption key for use with the Azure Cosmos DB service.\n */\nexport interface ClientEncryptionKeyProperties {\n  /**\n   * unique identifier for the client encryption key\n   */\n  id: string;\n  /**\n   * Encryption algorithm that will be used along with this client encryption key to encrypt/decrypt data\n   */\n  encryptionAlgorithm: string;\n  /**\n   * Wrapped (encrypted) form of the client encryption key.\n   */\n  wrappedDataEncryptionKey: Uint8Array;\n  /**\n   * Metadata used to wrap/unwrap client encryption key using customer managed key.\n   */\n  encryptionKeyWrapMetadata: EncryptionKeyWrapMetadata;\n  /**\n   * etag associated with the client encryption key.\n   * @internal\n   */\n  etag: string;\n}\n"],
   "mappings": ";;;;;;;;;;;;;AAAA;AAAA;",
   "names": []

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.js

@@ -13,3 +13,4 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var ClientEncryptionKeyRequest_exports = {};
 module.exports = __toCommonJS(ClientEncryptionKeyRequest_exports);
+//# sourceMappingURL=ClientEncryptionKeyRequest.js.map

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.ts"],
+  "sources": ["../../../../src/encryption/ClientEncryptionKey/ClientEncryptionKeyRequest.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionKeyWrapMetadata } from \"../EncryptionKeyWrapMetadata.js\";\n\n/**\n * Interface representing a request for client encryption key in Cosmos DB.\n */\nexport interface ClientEncryptionKeyRequest {\n  /** id of the client encryption key */\n  id: string;\n  /**\n   * The algorithm used to encrypt/decrypt data.\n   */\n  encryptionAlgorithm: string;\n  /**\n   * Metadata containing information necessary to wrap/unwrap the encryption key.\n   */\n  keyWrapMetadata: EncryptionKeyWrapMetadata;\n  /**\n   * The wrapped (encrypted) data encryption key.\n   */\n  wrappedDataEncryptionKey: string;\n}\n"],
   "mappings": ";;;;;;;;;;;;;AAAA;AAAA;",
   "names": []

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.js

@@ -33,3 +33,4 @@ class ClientEncryptionKeyResponse extends import_ResourceResponse.ResourceRespon
 0 && (module.exports = {
   ClientEncryptionKeyResponse
 });
+//# sourceMappingURL=ClientEncryptionKeyResponse.js.map

package/dist/commonjs/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.ts"],
+  "sources": ["../../../../src/encryption/ClientEncryptionKey/ClientEncryptionKeyResponse.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { CosmosDiagnostics } from \"../../CosmosDiagnostics.js\";\nimport type { CosmosHeaders } from \"../../queryExecutionContext/index.js\";\nimport { ResourceResponse } from \"../../request/ResourceResponse.js\";\nimport type { Resource } from \"../../client/Resource.js\";\nimport type { ClientEncryptionKeyProperties } from \"./ClientEncryptionKeyProperties.js\";\n\n/** Response object for ClientEncryptionKey operations */\nexport class ClientEncryptionKeyResponse extends ResourceResponse<Resource> {\n  constructor(\n    resource: Resource,\n    headers: CosmosHeaders,\n    statusCode: number,\n    clientEncryptionKeyProperties: ClientEncryptionKeyProperties,\n    diagnostics: CosmosDiagnostics,\n  ) {\n    super(resource, headers, statusCode, diagnostics);\n    this.clientEncryptionKeyProperties = clientEncryptionKeyProperties;\n  }\n  /** Properties of the client encryption key */\n  public readonly clientEncryptionKeyProperties: ClientEncryptionKeyProperties;\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,8BAAiC;AAK1B,MAAM,oCAAoC,yCAA2B;AAAA,EAC1E,YACE,UACA,SACA,YACA,+BACA,aACA;AACA,UAAM,UAAU,SAAS,YAAY,WAAW;AAChD,SAAK,gCAAgC;AAAA,EACvC;AAAA;AAAA,EAEgB;AAClB;",
   "names": []

package/dist/commonjs/encryption/ClientEncryptionKey/index.js

@@ -25,3 +25,4 @@ var import_ClientEncryptionKeyResponse = require("./ClientEncryptionKeyResponse.
 0 && (module.exports = {
   ClientEncryptionKeyResponse
 });
+//# sourceMappingURL=index.js.map

package/dist/commonjs/encryption/ClientEncryptionKey/index.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/ClientEncryptionKey/index.ts"],
+  "sources": ["../../../../src/encryption/ClientEncryptionKey/index.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport type { ClientEncryptionKeyProperties } from \"./ClientEncryptionKeyProperties.js\";\nexport { ClientEncryptionKeyResponse } from \"./ClientEncryptionKeyResponse.js\";\nexport type { ClientEncryptionKeyRequest } from \"./ClientEncryptionKeyRequest.js\";\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIA,yCAA4C;",
   "names": []

package/dist/commonjs/encryption/ClientEncryptionOptions.js

@@ -13,3 +13,4 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var ClientEncryptionOptions_exports = {};
 module.exports = __toCommonJS(ClientEncryptionOptions_exports);
+//# sourceMappingURL=ClientEncryptionOptions.js.map

package/dist/commonjs/encryption/ClientEncryptionOptions.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/ClientEncryptionOptions.ts"],
+  "sources": ["../../../src/encryption/ClientEncryptionOptions.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionKeyResolver } from \"./index.js\";\n\n/**\n * Represents the encryption options associated with a CosmosClient.\n */\nexport interface ClientEncryptionOptions {\n  /** resolver that allows interaction with key encryption keys. */\n  keyEncryptionKeyResolver: EncryptionKeyResolver;\n\n  /** time for which encryption keys and settings will be cached. Default is 7200 seconds */\n  encryptionKeyTimeToLiveInSeconds?: number;\n}\n"],
   "mappings": ";;;;;;;;;;;;;AAAA;AAAA;",
   "names": []

package/dist/commonjs/encryption/ClientEncryptionPolicy.js

@@ -13,3 +13,4 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var ClientEncryptionPolicy_exports = {};
 module.exports = __toCommonJS(ClientEncryptionPolicy_exports);
+//# sourceMappingURL=ClientEncryptionPolicy.js.map

package/dist/commonjs/encryption/ClientEncryptionPolicy.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/ClientEncryptionPolicy.ts"],
+  "sources": ["../../../src/encryption/ClientEncryptionPolicy.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { ClientEncryptionIncludedPath } from \"./ClientEncryptionIncludedPath.js\";\n/**\n * Represents the client encryption policy associated with a container.\n */\nexport interface ClientEncryptionPolicy {\n  /** list of paths that needs to be encrypted along with their encryption settings. */\n  includedPaths: ClientEncryptionIncludedPath[];\n  /**\n   * Version of the client encryption policy definition.\n   * The supported versions are 1 and 2. Default is 1.\n   * Id and partition key paths encryption are only supported in version 2.\n   */\n  policyFormatVersion?: number;\n}\n"],
   "mappings": ";;;;;;;;;;;;;AAAA;AAAA;",
   "names": []

package/dist/commonjs/encryption/CosmosEncryptedNumber.js

@@ -29,3 +29,4 @@ var CosmosEncryptedNumberType = /* @__PURE__ */ ((CosmosEncryptedNumberType2) =>
 0 && (module.exports = {
   CosmosEncryptedNumberType
 });
+//# sourceMappingURL=CosmosEncryptedNumber.js.map

package/dist/commonjs/encryption/CosmosEncryptedNumber.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/CosmosEncryptedNumber.ts"],
+  "sources": ["../../../src/encryption/CosmosEncryptedNumber.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/**\n * This enum represents the type of number in the Cosmos DB SDK.\n */\nexport enum CosmosEncryptedNumberType {\n  /**\n   * Represents an integer number.\n   */\n  Integer = \"Integer\",\n  /**\n   * Represents a floating-point number.\n   */\n  Float = \"Float\",\n}\n\n/**\n * This interface represents an encrypted number in the Cosmos DB SDK.\n *\n * @example\n * ```ts snippet:CosmosEncryptedNumber\n * import { CosmosEncryptedNumber, CosmosEncryptedNumberType } from \"@azure/cosmos\";\n *\n * const encryptedNumber1: CosmosEncryptedNumber = {\n *   value: 4,\n *   numberType: CosmosEncryptedNumberType.Integer,\n * };\n * const encryptedNumber2: CosmosEncryptedNumber = {\n *   value: 4.1,\n *   numberType: CosmosEncryptedNumberType.Float,\n * };\n * const encryptedNumber3: CosmosEncryptedNumber = {\n *   value: 4,\n *   numberType: CosmosEncryptedNumberType.Float, // represents 4.0\n * };\n * ```\n */\nexport interface CosmosEncryptedNumber {\n  /**\n   * The value to be encrypted.\n   */\n  value: number;\n  /**\n   * The type of number (Integer or Float).\n   * Use CosmosEncryptedNumberType.Integer for integers and CosmosEncryptedNumberType.Float for floating-point numbers.\n   */\n  numberType: CosmosEncryptedNumberType;\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMO,IAAK,4BAAL,kBAAKA,+BAAL;AAIL,EAAAA,2BAAA,aAAU;AAIV,EAAAA,2BAAA,WAAQ;AARE,SAAAA;AAAA,GAAA;",
   "names": ["CosmosEncryptedNumberType"]

package/dist/commonjs/encryption/EncryptionItemQueryIterator.js

@@ -131,3 +131,4 @@ class EncryptionItemQueryIterator extends import_queryIterator.QueryIterator {
 0 && (module.exports = {
   EncryptionItemQueryIterator
 });
+//# sourceMappingURL=EncryptionItemQueryIterator.js.map

package/dist/commonjs/encryption/EncryptionItemQueryIterator.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionItemQueryIterator.ts"],
+  "sources": ["../../../src/encryption/EncryptionItemQueryIterator.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { Container } from \"../client/index.js\";\nimport type { ClientContext } from \"../ClientContext.js\";\nimport { Constants, ResourceType } from \"../common/constants.js\";\nimport {\n  DiagnosticNodeInternal,\n  DiagnosticNodeType,\n} from \"../diagnostics/DiagnosticNodeInternal.js\";\nimport type { SqlQuerySpec, FetchFunctionCallback } from \"../queryExecutionContext/index.js\";\nimport { QueryIterator } from \"../queryIterator.js\";\nimport type { FeedOptions, FeedResponse } from \"../request/index.js\";\nimport { withDiagnostics } from \"../utils/diagnostics.js\";\n\n/**\n * @internal\n * Provides the iterator for handling encrypted items in the Azure Cosmos DB database service.\n * extends @see {@link QueryIterator}\n */\nexport class EncryptionItemQueryIterator<Item> extends QueryIterator<Item> {\n  private container: Container;\n  private encryptionClientContext: ClientContext;\n  private encryptionOptions: FeedOptions;\n\n  constructor(\n    clientContext: ClientContext,\n    query: SqlQuerySpec | string,\n    options: FeedOptions,\n    fetchFunctions: FetchFunctionCallback | FetchFunctionCallback[],\n    container: Container,\n  ) {\n    super(clientContext, query, options, fetchFunctions, container.url, ResourceType.item);\n    this.container = container;\n    this.encryptionClientContext = clientContext;\n    this.encryptionOptions = options;\n  }\n\n  /**\n   * Gets an async iterator that will yield results until completion.\n   */\n  public override async *getAsyncIterator(): AsyncIterable<FeedResponse<Item>> {\n    let response: FeedResponse<Item>;\n    const diagnosticNode = new DiagnosticNodeInternal(\n      this.encryptionClientContext.diagnosticLevel,\n      DiagnosticNodeType.CLIENT_REQUEST_NODE,\n      null,\n    );\n    try {\n      response = yield* QueryIterator.prototype.getAsyncIteratorInternal.call(this, diagnosticNode);\n    } catch (error) {\n      await this.container.throwIfRequestNeedsARetryPostPolicyRefresh(error);\n    }\n    if (response?.resources?.length > 0) {\n      let count = 0;\n      diagnosticNode.beginEncryptionDiagnostics(Constants.Encryption.DiagnosticsDecryptOperation);\n      for (let resource of response.resources) {\n        const { body, propertiesDecryptedCount } =\n          await this.container.encryptionProcessor.decrypt(resource);\n        resource = body;\n        count += propertiesDecryptedCount;\n      }\n      diagnosticNode.endEncryptionDiagnostics(\n        Constants.Encryption.DiagnosticsDecryptOperation,\n        count,\n      );\n    }\n    yield response;\n  }\n\n  /**\n   * Fetch all pages for the query and return a single FeedResponse.\n   */\n  public override async fetchAll(): Promise<FeedResponse<Item>> {\n    return withDiagnostics(async (diagnosticNode: DiagnosticNodeInternal) => {\n      let response: FeedResponse<Item>;\n      try {\n        response = await QueryIterator.prototype.fetchAllInternal.call(this, diagnosticNode);\n      } catch (error) {\n        await this.container.throwIfRequestNeedsARetryPostPolicyRefresh(error);\n      }\n      if (response?.resources?.length > 0) {\n        let count = 0;\n        diagnosticNode.beginEncryptionDiagnostics(Constants.Encryption.DiagnosticsDecryptOperation);\n        for (let resource of response.resources) {\n          const { body, propertiesDecryptedCount } =\n            await this.container.encryptionProcessor.decrypt(resource);\n          resource = body;\n          count += propertiesDecryptedCount;\n        }\n        diagnosticNode.endEncryptionDiagnostics(\n          Constants.Encryption.DiagnosticsDecryptOperation,\n          count,\n        );\n      }\n      return response;\n    }, this.encryptionClientContext);\n  }\n\n  /**\n   * Retrieve the next batch from the feed.\n   */\n  public override async fetchNext(): Promise<FeedResponse<Item>> {\n    return withDiagnostics(async (diagnosticNode: DiagnosticNodeInternal) => {\n      let response: FeedResponse<Item>;\n      try {\n        response = await QueryIterator.prototype.fetchNextInternal.call(this, diagnosticNode);\n      } catch (error) {\n        await this.container.throwIfRequestNeedsARetryPostPolicyRefresh(error);\n      }\n      if (response?.resources?.length > 0) {\n        let count = 0;\n        diagnosticNode.beginEncryptionDiagnostics(Constants.Encryption.DiagnosticsDecryptOperation);\n        for (let resource of response.resources) {\n          const { body, propertiesDecryptedCount } =\n            await this.container.encryptionProcessor.decrypt(resource);\n          resource = body;\n          count += propertiesDecryptedCount;\n        }\n        diagnosticNode.endEncryptionDiagnostics(\n          Constants.Encryption.DiagnosticsDecryptOperation,\n          count,\n        );\n      }\n      return response;\n    }, this.encryptionClientContext);\n  }\n  /**\n   * @internal\n   */\n  public override async init(diagnosticNode: DiagnosticNodeInternal): Promise<void> {\n    // Ensure encryption is initialized and set rid in options\n    await this.container.checkAndInitializeEncryption();\n    this.encryptionOptions.containerRid = this.container._rid;\n    await QueryIterator.prototype.init.call(this, diagnosticNode);\n  }\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,uBAAwC;AACxC,oCAGO;AAEP,2BAA8B;AAE9B,yBAAgC;AAOzB,MAAM,oCAA0C,mCAAoB;AAAA,EACjE;AAAA,EACA;AAAA,EACA;AAAA,EAER,YACE,eACA,OACA,SACA,gBACA,WACA;AACA,UAAM,eAAe,OAAO,SAAS,gBAAgB,UAAU,KAAK,8BAAa,IAAI;AACrF,SAAK,YAAY;AACjB,SAAK,0BAA0B;AAC/B,SAAK,oBAAoB;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAuB,mBAAsD;AAC3E,QAAI;AACJ,UAAM,iBAAiB,IAAI;AAAA,MACzB,KAAK,wBAAwB;AAAA,MAC7B,iDAAmB;AAAA,MACnB;AAAA,IACF;AACA,QAAI;AACF,iBAAW,OAAO,mCAAc,UAAU,yBAAyB,KAAK,MAAM,cAAc;AAAA,IAC9F,SAAS,OAAO;AACd,YAAM,KAAK,UAAU,2CAA2C,KAAK;AAAA,IACvE;AACA,QAAI,UAAU,WAAW,SAAS,GAAG;AACnC,UAAI,QAAQ;AACZ,qBAAe,2BAA2B,2BAAU,WAAW,2BAA2B;AAC1F,eAAS,YAAY,SAAS,WAAW;AACvC,cAAM,EAAE,MAAM,yBAAyB,IACrC,MAAM,KAAK,UAAU,oBAAoB,QAAQ,QAAQ;AAC3D,mBAAW;AACX,iBAAS;AAAA,MACX;AACA,qBAAe;AAAA,QACb,2BAAU,WAAW;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKA,MAAsB,WAAwC;AAC5D,eAAO,oCAAgB,OAAO,mBAA2C;AACvE,UAAI;AACJ,UAAI;AACF,mBAAW,MAAM,mCAAc,UAAU,iBAAiB,KAAK,MAAM,cAAc;AAAA,MACrF,SAAS,OAAO;AACd,cAAM,KAAK,UAAU,2CAA2C,KAAK;AAAA,MACvE;AACA,UAAI,UAAU,WAAW,SAAS,GAAG;AACnC,YAAI,QAAQ;AACZ,uBAAe,2BAA2B,2BAAU,WAAW,2BAA2B;AAC1F,iBAAS,YAAY,SAAS,WAAW;AACvC,gBAAM,EAAE,MAAM,yBAAyB,IACrC,MAAM,KAAK,UAAU,oBAAoB,QAAQ,QAAQ;AAC3D,qBAAW;AACX,mBAAS;AAAA,QACX;AACA,uBAAe;AAAA,UACb,2BAAU,WAAW;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG,KAAK,uBAAuB;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAsB,YAAyC;AAC7D,eAAO,oCAAgB,OAAO,mBAA2C;AACvE,UAAI;AACJ,UAAI;AACF,mBAAW,MAAM,mCAAc,UAAU,kBAAkB,KAAK,MAAM,cAAc;AAAA,MACtF,SAAS,OAAO;AACd,cAAM,KAAK,UAAU,2CAA2C,KAAK;AAAA,MACvE;AACA,UAAI,UAAU,WAAW,SAAS,GAAG;AACnC,YAAI,QAAQ;AACZ,uBAAe,2BAA2B,2BAAU,WAAW,2BAA2B;AAC1F,iBAAS,YAAY,SAAS,WAAW;AACvC,gBAAM,EAAE,MAAM,yBAAyB,IACrC,MAAM,KAAK,UAAU,oBAAoB,QAAQ,QAAQ;AAC3D,qBAAW;AACX,mBAAS;AAAA,QACX;AACA,uBAAe;AAAA,UACb,2BAAU,WAAW;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG,KAAK,uBAAuB;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA,EAIA,MAAsB,KAAK,gBAAuD;AAEhF,UAAM,KAAK,UAAU,6BAA6B;AAClD,SAAK,kBAAkB,eAAe,KAAK,UAAU;AACrD,UAAM,mCAAc,UAAU,KAAK,KAAK,MAAM,cAAc;AAAA,EAC9D;AACF;",
   "names": []

package/dist/commonjs/encryption/EncryptionKey/DataEncryptionKey.js

@@ -52,3 +52,4 @@ class DataEncryptionKey {
 0 && (module.exports = {
   DataEncryptionKey
 });
+//# sourceMappingURL=DataEncryptionKey.js.map

package/dist/commonjs/encryption/EncryptionKey/DataEncryptionKey.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKey/DataEncryptionKey.ts"],
+  "sources": ["../../../../src/encryption/EncryptionKey/DataEncryptionKey.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { createHmac } from \"node:crypto\";\n\nexport abstract class DataEncryptionKey {\n  private rootKeyBuffer: Buffer;\n  private keySizeInBits = 256;\n  private keySizeInBytes = this.keySizeInBits / 8;\n\n  public encryptionKeyBuffer: Buffer;\n  public macKeyBuffer: Buffer;\n  public ivKeyBuffer: Buffer;\n  public name: string;\n\n  constructor(rootKey: Buffer, name: string) {\n    if (rootKey.length !== this.keySizeInBytes) {\n      throw new Error(\"Invalid root key size\");\n    }\n    this.rootKeyBuffer = rootKey;\n    this.name = name;\n\n    const encryptionKeySalt = `Microsoft SQL Server cell encryption key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const macKeySalt = `Microsoft SQL Server cell MAC key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n    const ivKeySalt = `Microsoft SQL Server cell IV key with encryption algorithm:AEAD_AES_256_CBC_HMAC_SHA256 and key length:${this.keySizeInBits}`;\n\n    this.encryptionKeyBuffer = this.getHmacWithSha256(encryptionKeySalt, this.rootKeyBuffer);\n    this.macKeyBuffer = this.getHmacWithSha256(macKeySalt, this.rootKeyBuffer);\n    this.ivKeyBuffer = this.getHmacWithSha256(ivKeySalt, this.rootKeyBuffer);\n  }\n\n  private getHmacWithSha256(plainText: string, key: Buffer): Buffer {\n    const hmac = createHmac(\"sha256\", key);\n    hmac.update(Buffer.from(plainText, \"utf16le\"));\n    return hmac.digest();\n  }\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,yBAA2B;AAEpB,MAAe,kBAAkB;AAAA,EAC9B;AAAA,EACA,gBAAgB;AAAA,EAChB,iBAAiB,KAAK,gBAAgB;AAAA,EAEvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEP,YAAY,SAAiB,MAAc;AACzC,QAAI,QAAQ,WAAW,KAAK,gBAAgB;AAC1C,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AACA,SAAK,gBAAgB;AACrB,SAAK,OAAO;AAEZ,UAAM,oBAAoB,kHAAkH,KAAK,aAAa;AAC9J,UAAM,aAAa,2GAA2G,KAAK,aAAa;AAChJ,UAAM,YAAY,0GAA0G,KAAK,aAAa;AAE9I,SAAK,sBAAsB,KAAK,kBAAkB,mBAAmB,KAAK,aAAa;AACvF,SAAK,eAAe,KAAK,kBAAkB,YAAY,KAAK,aAAa;AACzE,SAAK,cAAc,KAAK,kBAAkB,WAAW,KAAK,aAAa;AAAA,EACzE;AAAA,EAEQ,kBAAkB,WAAmB,KAAqB;AAChE,UAAM,WAAO,+BAAW,UAAU,GAAG;AACrC,SAAK,OAAO,OAAO,KAAK,WAAW,SAAS,CAAC;AAC7C,WAAO,KAAK,OAAO;AAAA,EACrB;AACF;",
   "names": []

package/dist/commonjs/encryption/EncryptionKey/ProtectedDataEncryptionKey.js

@@ -35,3 +35,4 @@ class ProtectedDataEncryptionKey extends import_DataEncryptionKey.DataEncryption
 0 && (module.exports = {
   ProtectedDataEncryptionKey
 });
+//# sourceMappingURL=ProtectedDataEncryptionKey.js.map

package/dist/commonjs/encryption/EncryptionKey/ProtectedDataEncryptionKey.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKey/ProtectedDataEncryptionKey.ts"],
+  "sources": ["../../../../src/encryption/EncryptionKey/ProtectedDataEncryptionKey.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nimport type { KeyEncryptionKey } from \"../KeyEncryptionKey.js\";\n\n/**\n * A wrapper class around `DataEncryptionKey` that stores it in a protected form.\n * The `ProtectedDataEncryptionKey` class extends `DataEncryptionKey` and holds both the raw key and its encrypted form.\n * It also includes information about the `KeyEncryptionKey` used to encrypt the data encryption key.\n * @hidden\n */\nexport class ProtectedDataEncryptionKey extends DataEncryptionKey {\n  public keyEncryptionKey: KeyEncryptionKey;\n\n  public encryptedValue: Buffer;\n\n  public constructor(\n    name: string,\n    keyEncryptionKey: KeyEncryptionKey,\n    rawKey: Buffer,\n    encryptedKey: Buffer,\n  ) {\n    super(rawKey, name);\n    this.name = name;\n    this.keyEncryptionKey = keyEncryptionKey;\n    this.encryptedValue = encryptedKey;\n  }\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,+BAAkC;AAS3B,MAAM,mCAAmC,2CAAkB;AAAA,EACzD;AAAA,EAEA;AAAA,EAEA,YACL,MACA,kBACA,QACA,cACA;AACA,UAAM,QAAQ,IAAI;AAClB,SAAK,OAAO;AACZ,SAAK,mBAAmB;AACxB,SAAK,iBAAiB;AAAA,EACxB;AACF;",
   "names": []

package/dist/commonjs/encryption/EncryptionKey/index.js

@@ -28,3 +28,4 @@ var import_ProtectedDataEncryptionKey = require("./ProtectedDataEncryptionKey.js
   DataEncryptionKey,
   ProtectedDataEncryptionKey
 });
+//# sourceMappingURL=index.js.map

package/dist/commonjs/encryption/EncryptionKey/index.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKey/index.ts"],
+  "sources": ["../../../../src/encryption/EncryptionKey/index.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { DataEncryptionKey } from \"./DataEncryptionKey.js\";\nexport { ProtectedDataEncryptionKey } from \"./ProtectedDataEncryptionKey.js\";\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,+BAAkC;AAClC,wCAA2C;",
   "names": []

package/dist/commonjs/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.js

@@ -116,3 +116,4 @@ class AzureKeyVaultEncryptionKeyResolver {
 0 && (module.exports = {
   AzureKeyVaultEncryptionKeyResolver
 });
+//# sourceMappingURL=AzureKeyVaultEncryptionKeyResolver.js.map

package/dist/commonjs/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.ts"],
+  "sources": ["../../../../src/encryption/EncryptionKeyResolver/AzureKeyVaultEncryptionKeyResolver.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { TokenCredential } from \"@azure/core-auth\";\nimport type { EncryptionKeyResolver } from \"./EncryptionKeyResolver.js\";\nimport type { KeyWrapAlgorithm } from \"@azure/keyvault-keys\";\nimport { KeyClient } from \"@azure/keyvault-keys\";\nimport { ErrorResponse } from \"../../request/index.js\";\nimport { EncryptionKeyResolverName } from \"../enums/index.js\";\n\n/**\n * Implementation of EncryptionKeyResolver that uses Azure Key Vault for customer managed keys.\n */\nexport class AzureKeyVaultEncryptionKeyResolver implements EncryptionKeyResolver {\n  private credentials: TokenCredential;\n\n  constructor(credentials: TokenCredential) {\n    this.credentials = credentials;\n  }\n  /**\n   * Name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  public encryptionKeyResolverName = EncryptionKeyResolverName.AzureKeyVault;\n  /**\n   * wraps the given key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for wrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for wrapping.\n   * @param unwrappedKey - dek to be wrapped.\n   * @returns wrapped DEK.\n   */\n  public async wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.wrapKey(algorithm as KeyWrapAlgorithm, unwrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to wrap key: ${e.message}`);\n    }\n  }\n  /**\n   * Unwraps the given wrapped key using the specified key encryption key path and algorithm.\n   * @param encryptionKeyId - path to the customer managed key to be used for unwrapping. For Azure Key Vault, this is url of the key in the vault.\n   * @param algorithm - algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped DEK.\n   * @returns unwrapped DEK.\n   */\n  public async unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array> {\n    try {\n      const origin = this.getOrigin(encryptionKeyId);\n      const keyClient = new KeyClient(origin, this.credentials);\n      const [keyName, keyVersion] = this.getKeyDetails(encryptionKeyId);\n      const cryptographyClient = keyClient.getCryptographyClient(keyName, {\n        keyVersion: keyVersion,\n      });\n      const res = await cryptographyClient.unwrapKey(algorithm as KeyWrapAlgorithm, wrappedKey);\n      if (!res || !res.result) {\n        throw new ErrorResponse(`Failed to wrap key: ${res}`);\n      }\n      return res.result;\n    } catch (e) {\n      throw new ErrorResponse(`Failed to unwrap key: ${e.message}`);\n    }\n  }\n  // TODO: improve this method to extract key name and version from the url\n  private getKeyDetails(encryptionKeyId: string): [string, string] {\n    let url;\n    try {\n      url = new URL(encryptionKeyId);\n      const parts = url.pathname.split(\"/\");\n      if (parts.length < 4 || parts.length > 5) {\n        throw new ErrorResponse(\n          `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>`,\n        );\n      }\n      if (parts.length === 4 || parts.length === 5) {\n        return [parts[2], parts[3]];\n      }\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n\n  private getOrigin(encryptionKeyId: string): string {\n    try {\n      const url = new URL(encryptionKeyId);\n      return url.origin;\n    } catch (e) {\n      throw new ErrorResponse(\n        `Invalid key url: ${encryptionKeyId}. Key url must be in the format https://<vault>.vault.azure.net/keys/<key-name>/<key-version>. Error: ${e.message}`,\n      );\n    }\n  }\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,2BAA0B;AAC1B,qBAA8B;AAC9B,mBAA0C;AAKnC,MAAM,mCAAoE;AAAA,EACvE;AAAA,EAER,YAAY,aAA8B;AACxC,SAAK,cAAc;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKO,4BAA4B,uCAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ7D,MAAa,QACX,iBACA,WACA,cACqB;AACrB,QAAI;AACF,YAAM,SAAS,KAAK,UAAU,eAAe;AAC7C,YAAM,YAAY,IAAI,+BAAU,QAAQ,KAAK,WAAW;AACxD,YAAM,CAAC,SAAS,UAAU,IAAI,KAAK,cAAc,eAAe;AAChE,YAAM,qBAAqB,UAAU,sBAAsB,SAAS;AAAA,QAClE;AAAA,MACF,CAAC;AACD,YAAM,MAAM,MAAM,mBAAmB,QAAQ,WAA+B,YAAY;AACxF,UAAI,CAAC,OAAO,CAAC,IAAI,QAAQ;AACvB,cAAM,IAAI,6BAAc,uBAAuB,GAAG,EAAE;AAAA,MACtD;AACA,aAAO,IAAI;AAAA,IACb,SAAS,GAAG;AACV,YAAM,IAAI,6BAAc,uBAAuB,EAAE,OAAO,EAAE;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,UACX,iBACA,WACA,YACqB;AACrB,QAAI;AACF,YAAM,SAAS,KAAK,UAAU,eAAe;AAC7C,YAAM,YAAY,IAAI,+BAAU,QAAQ,KAAK,WAAW;AACxD,YAAM,CAAC,SAAS,UAAU,IAAI,KAAK,cAAc,eAAe;AAChE,YAAM,qBAAqB,UAAU,sBAAsB,SAAS;AAAA,QAClE;AAAA,MACF,CAAC;AACD,YAAM,MAAM,MAAM,mBAAmB,UAAU,WAA+B,UAAU;AACxF,UAAI,CAAC,OAAO,CAAC,IAAI,QAAQ;AACvB,cAAM,IAAI,6BAAc,uBAAuB,GAAG,EAAE;AAAA,MACtD;AACA,aAAO,IAAI;AAAA,IACb,SAAS,GAAG;AACV,YAAM,IAAI,6BAAc,yBAAyB,EAAE,OAAO,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA,EAEQ,cAAc,iBAA2C;AAC/D,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,eAAe;AAC7B,YAAM,QAAQ,IAAI,SAAS,MAAM,GAAG;AACpC,UAAI,MAAM,SAAS,KAAK,MAAM,SAAS,GAAG;AACxC,cAAM,IAAI;AAAA,UACR,oBAAoB,eAAe;AAAA,QACrC;AAAA,MACF;AACA,UAAI,MAAM,WAAW,KAAK,MAAM,WAAW,GAAG;AAC5C,eAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;AAAA,MAC5B;AAAA,IACF,SAAS,GAAG;AACV,YAAM,IAAI;AAAA,QACR,oBAAoB,eAAe,yGAAyG,EAAE,OAAO;AAAA,MACvJ;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,iBAAiC;AACjD,QAAI;AACF,YAAM,MAAM,IAAI,IAAI,eAAe;AACnC,aAAO,IAAI;AAAA,IACb,SAAS,GAAG;AACV,YAAM,IAAI;AAAA,QACR,oBAAoB,eAAe,yGAAyG,EAAE,OAAO;AAAA,MACvJ;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []

package/dist/commonjs/encryption/EncryptionKeyResolver/EncryptionKeyResolver.js

@@ -13,3 +13,4 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var EncryptionKeyResolver_exports = {};
 module.exports = __toCommonJS(EncryptionKeyResolver_exports);
+//# sourceMappingURL=EncryptionKeyResolver.js.map

package/dist/commonjs/encryption/EncryptionKeyResolver/EncryptionKeyResolver.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKeyResolver/EncryptionKeyResolver.ts"],
+  "sources": ["../../../../src/encryption/EncryptionKeyResolver/EncryptionKeyResolver.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n/** Provides an interface for key resolver for different key providers.\n * All resolvers should implement this interface.\n */\nexport interface EncryptionKeyResolver {\n  /** name of the resolver to use for client side encryption.\n   * Currently only AzureKeyVault implementation is supported.\n   */\n  encryptionKeyResolverName: string;\n  /**\n   * Wraps the input key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for wrapping.\n   * @param algorithm - Algorithm to be used for wrapping.\n   * @param key - Data Encryption Key to be wrapped.\n   * @returns Wrapped key.\n   */\n  wrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    unwrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n  /**\n   * Unwraps the input wrapped key using the key encryption key.\n   * @param encryptionKeyId - Identifier of the customer managed key to be used for unwrapping.\n   * @param algorithm - Algorithm to be used for unwrapping.\n   * @param wrappedKey - wrapped Data Encryption key.\n   * @returns Unwrapped Key.\n   */\n  unwrapKey(\n    encryptionKeyId: string,\n    algorithm: string,\n    wrappedKey: Uint8Array,\n  ): Promise<Uint8Array>;\n}\n"],
   "mappings": ";;;;;;;;;;;;;AAAA;AAAA;",
   "names": []

package/dist/commonjs/encryption/EncryptionKeyResolver/index.js

@@ -25,3 +25,4 @@ var import_AzureKeyVaultEncryptionKeyResolver = require("./AzureKeyVaultEncrypti
 0 && (module.exports = {
   AzureKeyVaultEncryptionKeyResolver
 });
+//# sourceMappingURL=index.js.map

package/dist/commonjs/encryption/EncryptionKeyResolver/index.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKeyResolver/index.ts"],
+  "sources": ["../../../../src/encryption/EncryptionKeyResolver/index.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nexport { AzureKeyVaultEncryptionKeyResolver } from \"./AzureKeyVaultEncryptionKeyResolver.js\";\nexport type { EncryptionKeyResolver } from \"./EncryptionKeyResolver.js\";\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,gDAAmD;",
   "names": []

package/dist/commonjs/encryption/EncryptionKeyStoreProvider.js

@@ -32,6 +32,8 @@ class EncryptionKeyStoreProvider {
     this.cacheTimeToLive = cacheTimeToLive;
     this.clearCacheOnTtlExpiry();
   }
+  keyEncryptionKeyResolver;
+  cacheTimeToLive;
   RsaOaepEncryptionAlgorithm = "RSA-OAEP";
   // interval for clear cache to run
   cacheRefresher;
@@ -83,3 +85,4 @@ class EncryptionKeyStoreProvider {
 0 && (module.exports = {
   EncryptionKeyStoreProvider
 });
+//# sourceMappingURL=EncryptionKeyStoreProvider.js.map

package/dist/commonjs/encryption/EncryptionKeyStoreProvider.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKeyStoreProvider.ts"],
+  "sources": ["../../../src/encryption/EncryptionKeyStoreProvider.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { Constants } from \"../common/index.js\";\nimport { startBackgroundTask } from \"../utils/time.js\";\nimport type { EncryptionKeyResolver } from \"./EncryptionKeyResolver/index.js\";\nimport type { KeyEncryptionAlgorithm } from \"./enums/index.js\";\n/**\n * Class to store encryption keys in unwrapped form and provide an interface for wrapping and unwrapping the keys.\n */\nexport class EncryptionKeyStoreProvider {\n  public RsaOaepEncryptionAlgorithm: string = \"RSA-OAEP\";\n  // interval for clear cache to run\n  cacheRefresher: NodeJS.Timeout;\n\n  // cache to store the unwrapped encryption key. Key is the path of the encryption key\n  public unwrappedEncryptionKeyCache: { [key: string]: [Date, Buffer] };\n  public providerName: string;\n  constructor(\n    private keyEncryptionKeyResolver: EncryptionKeyResolver,\n    private cacheTimeToLive: number,\n  ) {\n    this.keyEncryptionKeyResolver = keyEncryptionKeyResolver;\n    this.providerName = keyEncryptionKeyResolver.encryptionKeyResolverName;\n    this.unwrappedEncryptionKeyCache = {};\n    this.cacheTimeToLive = cacheTimeToLive;\n    this.clearCacheOnTtlExpiry();\n  }\n\n  public async wrapKey(\n    encryptionKeyId: string,\n    algorithm: KeyEncryptionAlgorithm,\n    key: Buffer,\n  ): Promise<Buffer> {\n    const uInt8ArrayKey = new Uint8Array(key);\n    const wrappedEncryptionKey = await this.keyEncryptionKeyResolver.wrapKey(\n      encryptionKeyId,\n      algorithm,\n      uInt8ArrayKey,\n    );\n    return Buffer.from(wrappedEncryptionKey);\n  }\n\n  public async unwrapKey(\n    encryptionKeyId: string,\n    algorithm: KeyEncryptionAlgorithm,\n    wrappedKey: Buffer,\n  ): Promise<Buffer> {\n    if (this.cacheTimeToLive === 0) {\n      const res = await this.keyEncryptionKeyResolver.unwrapKey(\n        encryptionKeyId,\n        algorithm,\n        wrappedKey,\n      );\n      return Buffer.from(res);\n    }\n    if (!this.unwrappedEncryptionKeyCache[encryptionKeyId]) {\n      const wrappedKeyUint8Array = new Uint8Array(wrappedKey);\n      const plainEncryptionKey = await this.keyEncryptionKeyResolver.unwrapKey(\n        encryptionKeyId,\n        algorithm,\n        wrappedKeyUint8Array,\n      );\n      const plainEncryptionKeyBuffer = Buffer.from(plainEncryptionKey);\n      this.unwrappedEncryptionKeyCache[encryptionKeyId] = [new Date(), plainEncryptionKeyBuffer];\n    }\n    return this.unwrappedEncryptionKeyCache[encryptionKeyId][1];\n  }\n\n  private async clearCacheOnTtlExpiry(): Promise<void> {\n    this.cacheRefresher = startBackgroundTask(async () => {\n      const now = new Date();\n      for (const key in this.unwrappedEncryptionKeyCache) {\n        if (\n          now.getTime() - this.unwrappedEncryptionKeyCache[key][0].getTime() >\n          this.cacheTimeToLive\n        ) {\n          delete this.unwrappedEncryptionKeyCache[key];\n        }\n      }\n    }, Constants.EncryptionCacheRefreshIntervalInMs);\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,oBAA0B;AAC1B,kBAAoC;AAM7B,MAAM,2BAA2B;AAAA,EAQtC,YACU,0BACA,iBACR;AAFQ;AACA;AAER,SAAK,2BAA2B;AAChC,SAAK,eAAe,yBAAyB;AAC7C,SAAK,8BAA8B,CAAC;AACpC,SAAK,kBAAkB;AACvB,SAAK,sBAAsB;AAAA,EAC7B;AAAA,EAhBO,6BAAqC;AAAA;AAAA,EAE5C;AAAA;AAAA,EAGO;AAAA,EACA;AAAA,EAYP,MAAa,QACX,iBACA,WACA,KACiB;AACjB,UAAM,gBAAgB,IAAI,WAAW,GAAG;AACxC,UAAM,uBAAuB,MAAM,KAAK,yBAAyB;AAAA,MAC/D;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO,OAAO,KAAK,oBAAoB;AAAA,EACzC;AAAA,EAEA,MAAa,UACX,iBACA,WACA,YACiB;AACjB,QAAI,KAAK,oBAAoB,GAAG;AAC9B,YAAM,MAAM,MAAM,KAAK,yBAAyB;AAAA,QAC9C;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,OAAO,KAAK,GAAG;AAAA,IACxB;AACA,QAAI,CAAC,KAAK,4BAA4B,eAAe,GAAG;AACtD,YAAM,uBAAuB,IAAI,WAAW,UAAU;AACtD,YAAM,qBAAqB,MAAM,KAAK,yBAAyB;AAAA,QAC7D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,2BAA2B,OAAO,KAAK,kBAAkB;AAC/D,WAAK,4BAA4B,eAAe,IAAI,CAAC,oBAAI,KAAK,GAAG,wBAAwB;AAAA,IAC3F;AACA,WAAO,KAAK,4BAA4B,eAAe,EAAE,CAAC;AAAA,EAC5D;AAAA,EAEA,MAAc,wBAAuC;AACnD,SAAK,qBAAiB,iCAAoB,YAAY;AACpD,YAAM,MAAM,oBAAI,KAAK;AACrB,iBAAW,OAAO,KAAK,6BAA6B;AAClD,YACE,IAAI,QAAQ,IAAI,KAAK,4BAA4B,GAAG,EAAE,CAAC,EAAE,QAAQ,IACjE,KAAK,iBACL;AACA,iBAAO,KAAK,4BAA4B,GAAG;AAAA,QAC7C;AAAA,MACF;AAAA,IACF,GAAG,wBAAU,kCAAkC;AAAA,EACjD;AACF;",
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,oBAA0B;AAC1B,kBAAoC;AAM7B,MAAM,2BAA2B;AAAA,EAQtC,YACU,0BACA,iBACR;AAFQ;AACA;AAER,SAAK,2BAA2B;AAChC,SAAK,eAAe,yBAAyB;AAC7C,SAAK,8BAA8B,CAAC;AACpC,SAAK,kBAAkB;AACvB,SAAK,sBAAsB;AAAA,EAC7B;AAAA,EARU;AAAA,EACA;AAAA,EATH,6BAAqC;AAAA;AAAA,EAE5C;AAAA;AAAA,EAGO;AAAA,EACA;AAAA,EAYP,MAAa,QACX,iBACA,WACA,KACiB;AACjB,UAAM,gBAAgB,IAAI,WAAW,GAAG;AACxC,UAAM,uBAAuB,MAAM,KAAK,yBAAyB;AAAA,MAC/D;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO,OAAO,KAAK,oBAAoB;AAAA,EACzC;AAAA,EAEA,MAAa,UACX,iBACA,WACA,YACiB;AACjB,QAAI,KAAK,oBAAoB,GAAG;AAC9B,YAAM,MAAM,MAAM,KAAK,yBAAyB;AAAA,QAC9C;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,aAAO,OAAO,KAAK,GAAG;AAAA,IACxB;AACA,QAAI,CAAC,KAAK,4BAA4B,eAAe,GAAG;AACtD,YAAM,uBAAuB,IAAI,WAAW,UAAU;AACtD,YAAM,qBAAqB,MAAM,KAAK,yBAAyB;AAAA,QAC7D;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,2BAA2B,OAAO,KAAK,kBAAkB;AAC/D,WAAK,4BAA4B,eAAe,IAAI,CAAC,oBAAI,KAAK,GAAG,wBAAwB;AAAA,IAC3F;AACA,WAAO,KAAK,4BAA4B,eAAe,EAAE,CAAC;AAAA,EAC5D;AAAA,EAEA,MAAc,wBAAuC;AACnD,SAAK,qBAAiB,iCAAoB,YAAY;AACpD,YAAM,MAAM,oBAAI,KAAK;AACrB,iBAAW,OAAO,KAAK,6BAA6B;AAClD,YACE,IAAI,QAAQ,IAAI,KAAK,4BAA4B,GAAG,EAAE,CAAC,EAAE,QAAQ,IACjE,KAAK,iBACL;AACA,iBAAO,KAAK,4BAA4B,GAAG;AAAA,QAC7C;AAAA,MACF;AAAA,IACF,GAAG,wBAAU,kCAAkC;AAAA,EACjD;AACF;",
   "names": []
 }

package/dist/commonjs/encryption/EncryptionKeyWrapMetadata.js

@@ -13,3 +13,4 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var EncryptionKeyWrapMetadata_exports = {};
 module.exports = __toCommonJS(EncryptionKeyWrapMetadata_exports);
+//# sourceMappingURL=EncryptionKeyWrapMetadata.js.map

package/dist/commonjs/encryption/EncryptionKeyWrapMetadata.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionKeyWrapMetadata.ts"],
+  "sources": ["../../../src/encryption/EncryptionKeyWrapMetadata.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionKeyResolverName, KeyEncryptionAlgorithm } from \"./enums/index.js\";\n\n/**\n * Metadata used to wrap/unwrap data encryption key using a customer managed key\n */\nexport interface EncryptionKeyWrapMetadata {\n  /** Identifier of the key resolver */\n  type: EncryptionKeyResolverName;\n  /** Identifier of customer managed key */\n  name: string;\n  /** Path to customer managed key. */\n  value: string;\n  /** Algorithm to be used for wrapping/unwrapping the data encryption key */\n  algorithm: KeyEncryptionAlgorithm;\n}\n"],
   "mappings": ";;;;;;;;;;;;;AAAA;AAAA;",
   "names": []

package/dist/commonjs/encryption/EncryptionManager.js

@@ -57,3 +57,4 @@ class EncryptionManager {
 0 && (module.exports = {
   EncryptionManager
 });
+//# sourceMappingURL=EncryptionManager.js.map

package/dist/commonjs/encryption/EncryptionManager.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionManager.ts"],
+  "sources": ["../../../src/encryption/EncryptionManager.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { ProtectedDataEncryptionKeyCache } from \"./Cache/ProtectedDataEncryptionKeyCache.js\";\nimport { KeyEncryptionKeyCache } from \"./Cache/KeyEncryptionKeyCache.js\";\nimport { EncryptionSettingsCache } from \"./Cache/EncryptionSettingsCache.js\";\nimport { ClientEncryptionKeyPropertiesCache } from \"./Cache/ClientEncryptionKeyPropertiesCache.js\";\nimport { EncryptionKeyStoreProvider } from \"./EncryptionKeyStoreProvider.js\";\nimport { Constants } from \"../common/constants.js\";\nimport type { EncryptionKeyResolver } from \"./EncryptionKeyResolver/index.js\";\n/**\n * Cache manager for encryption related caches.\n * @hidden\n */\nexport class EncryptionManager {\n  public cacheTimeToLive: number;\n  public encryptionKeyStoreProvider: EncryptionKeyStoreProvider;\n  public protectedDataEncryptionKeyCache: ProtectedDataEncryptionKeyCache;\n  public keyEncryptionKeyCache: KeyEncryptionKeyCache;\n  public encryptionSettingsCache: EncryptionSettingsCache;\n  public clientEncryptionKeyPropertiesCache: ClientEncryptionKeyPropertiesCache;\n\n  constructor(encryptionKeyResolver: EncryptionKeyResolver, cacheTimeToLive?: number) {\n    this.cacheTimeToLive =\n      cacheTimeToLive !== undefined\n        ? cacheTimeToLive\n        : Constants.DefaultEncryptionCacheTimeToLiveInSeconds;\n    const cacheTtlInMs = this.getCacheTTlInMs();\n    this.encryptionKeyStoreProvider = new EncryptionKeyStoreProvider(\n      encryptionKeyResolver,\n      cacheTtlInMs,\n    );\n    this.protectedDataEncryptionKeyCache = new ProtectedDataEncryptionKeyCache(cacheTtlInMs);\n    this.keyEncryptionKeyCache = new KeyEncryptionKeyCache();\n    this.encryptionSettingsCache = new EncryptionSettingsCache();\n    this.clientEncryptionKeyPropertiesCache = new ClientEncryptionKeyPropertiesCache();\n  }\n\n  /**\n   * Converts the EncryptionTimeToLive instance to a number (milliseconds).\n   */\n  private getCacheTTlInMs(): number {\n    const millisecondsPerSecond = 1000;\n    return Number(this.cacheTimeToLive * millisecondsPerSecond);\n  }\n}\n"],
   "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,6CAAgD;AAChD,mCAAsC;AACtC,qCAAwC;AACxC,gDAAmD;AACnD,wCAA2C;AAC3C,uBAA0B;AAMnB,MAAM,kBAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEP,YAAY,uBAA8C,iBAA0B;AAClF,SAAK,kBACH,oBAAoB,SAChB,kBACA,2BAAU;AAChB,UAAM,eAAe,KAAK,gBAAgB;AAC1C,SAAK,6BAA6B,IAAI;AAAA,MACpC;AAAA,MACA;AAAA,IACF;AACA,SAAK,kCAAkC,IAAI,uEAAgC,YAAY;AACvF,SAAK,wBAAwB,IAAI,mDAAsB;AACvD,SAAK,0BAA0B,IAAI,uDAAwB;AAC3D,SAAK,qCAAqC,IAAI,6EAAmC;AAAA,EACnF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAA0B;AAChC,UAAM,wBAAwB;AAC9B,WAAO,OAAO,KAAK,kBAAkB,qBAAqB;AAAA,EAC5D;AACF;",
   "names": []

package/dist/commonjs/encryption/EncryptionProcessor.js

@@ -31,6 +31,11 @@ class EncryptionProcessor {
     this.clientContext = clientContext;
     this.encryptionManager = encryptionManager;
   }
+  containerId;
+  containerRid;
+  database;
+  clientContext;
+  encryptionManager;
   async encrypt(body) {
     if (!body) {
       throw new import_request.ErrorResponse("Input body is null or undefined.");
@@ -359,3 +364,4 @@ class EncryptionProcessor {
 0 && (module.exports = {
   EncryptionProcessor
 });
+//# sourceMappingURL=EncryptionProcessor.js.map

package/dist/commonjs/encryption/EncryptionProcessor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["/mnt/vss/_work/1/s/sdk/cosmosdb/cosmos/src/encryption/EncryptionProcessor.ts"],
+  "sources": ["../../../src/encryption/EncryptionProcessor.ts"],
   "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { EncryptionSettings } from \"./EncryptionSettings.js\";\nimport type { EncryptionSettingForProperty } from \"./EncryptionSettingForProperty.js\";\nimport type { AeadAes256CbcHmacSha256Algorithm } from \"./AeadAes256CbcHmacSha256Algorithm/index.js\";\nimport type { ContainerDefinition, Database, ItemDefinition } from \"../client/index.js\";\nimport type { PartitionKeyInternal } from \"../documents/index.js\";\nimport type { TypeMarker } from \"./enums/TypeMarker.js\";\nimport type { ClientContext } from \"../ClientContext.js\";\nimport type { ClientEncryptionKeyRequest } from \"./ClientEncryptionKey/index.js\";\nimport type { ClientEncryptionKeyProperties } from \"./ClientEncryptionKey/index.js\";\nimport type { DiagnosticNodeInternal } from \"../diagnostics/DiagnosticNodeInternal.js\";\nimport {\n  Constants,\n  ResourceType,\n  StatusCodes,\n  createDeserializer,\n  createSerializer,\n  extractPath,\n} from \"../common/index.js\";\nimport type { RequestOptions } from \"../request/index.js\";\nimport { ErrorResponse } from \"../request/index.js\";\nimport { withDiagnostics } from \"../utils/diagnostics.js\";\nimport type { EncryptionManager } from \"./EncryptionManager.js\";\nimport type { JSONValue } from \"../queryExecutionContext/index.js\";\n\nexport class EncryptionProcessor {\n  constructor(\n    private readonly containerId: string,\n    public containerRid: string,\n    private readonly database: Database,\n    private readonly clientContext: ClientContext,\n    private encryptionManager: EncryptionManager,\n  ) {}\n\n  async encrypt<T extends ItemDefinition>(\n    body: T,\n  ): Promise<{ body: T; propertiesEncryptedCount: number }> {\n    if (!body) {\n      throw new ErrorResponse(\"Input body is null or undefined.\");\n    }\n    let propertiesEncryptedCount = 0;\n    const encryptionSettings = await this.getEncryptionSetting();\n    if (!encryptionSettings) return { body, propertiesEncryptedCount };\n    for (const pathToEncrypt of encryptionSettings.pathsToEncrypt) {\n      const propertyName = pathToEncrypt.slice(1);\n      if (!Object.prototype.hasOwnProperty.call(body, propertyName)) {\n        continue;\n      }\n\n      const settingForProperty = encryptionSettings.getEncryptionSettingForProperty(pathToEncrypt);\n      if (!settingForProperty) {\n        throw new ErrorResponse(\"Invalid Encryption Setting for the Property: \" + propertyName);\n      }\n      body[propertyName as keyof T] = await this.encryptToken(\n        body[propertyName],\n        settingForProperty,\n        propertyName === \"id\",\n      );\n      propertiesEncryptedCount++;\n    }\n    return { body, propertiesEncryptedCount };\n  }\n\n  async isPathEncrypted(path: string): Promise<boolean> {\n    path = extractPath(path);\n    const encryptionSettings = await this.getEncryptionSetting();\n    const settingForProperty = encryptionSettings.getEncryptionSettingForProperty(path);\n    if (!settingForProperty) return false;\n    return true;\n  }\n\n  async encryptProperty(path: string, value: JSONValue): Promise<any> {\n    path = extractPath(path);\n    const encryptionSettings = await this.getEncryptionSetting();\n    if (!encryptionSettings) return value;\n    const settingForProperty = encryptionSettings.getEncryptionSettingForProperty(path);\n    if (!settingForProperty) {\n      return value;\n    }\n\n    value = await this.encryptToken(value, settingForProperty, path === \"/id\");\n    return value;\n  }\n\n  async getEncryptedPartitionKeyValue(\n    partitionKeyList: PartitionKeyInternal,\n  ): Promise<{ partitionKeyList: PartitionKeyInternal; encryptedCount: number }> {\n    const encryptionSettings = await this.getEncryptionSetting();\n    let encryptedCount = 0;\n    if (!encryptionSettings) return { partitionKeyList, encryptedCount };\n    const partitionKeyPaths = encryptionSettings.partitionKeyPaths;\n    for (let i = 0; i < partitionKeyPaths.length; i++) {\n      const partitionKeyPath = extractPath(partitionKeyPaths[i]);\n      if (encryptionSettings.pathsToEncrypt.includes(partitionKeyPath)) {\n        const settingForProperty =\n          encryptionSettings.getEncryptionSettingForProperty(partitionKeyPath);\n        partitionKeyList[i] = await this.encryptToken(\n          partitionKeyList[i],\n          settingForProperty,\n          partitionKeyPath === \"/id\",\n        );\n        encryptedCount++;\n      }\n    }\n    return { partitionKeyList, encryptedCount };\n  }\n\n  async getEncryptedUrl(id: string): Promise<string> {\n    const parts = id.split(\"/\");\n    const lastPart = parts[parts.length - 1];\n    const encryptedLastPart = await this.getEncryptedId(lastPart);\n    parts[parts.length - 1] = encryptedLastPart;\n    return parts.join(\"/\");\n  }\n\n  async getEncryptedId(id: string): Promise<string> {\n    const encryptionSettings = await this.getEncryptionSetting();\n    if (!encryptionSettings) return id;\n    const settingForProperty = encryptionSettings.getEncryptionSettingForProperty(\"/id\");\n\n    if (!settingForProperty) return id;\n    id = await this.encryptToken(id, settingForProperty, true);\n    return id;\n  }\n\n  async encryptQueryParameter(\n    path: string,\n    value: JSONValue,\n    isValueId: boolean,\n    type?: TypeMarker,\n  ): Promise<JSONValue> {\n    if (value === null) {\n      return value;\n    }\n    path = extractPath(path);\n    const encryptionSettings = await this.getEncryptionSetting();\n    if (!encryptionSettings) return value;\n    const settingForProperty = encryptionSettings.getEncryptionSettingForProperty(path);\n    if (!settingForProperty) {\n      return value;\n    }\n    return this.encryptToken(value, settingForProperty, isValueId, type);\n  }\n\n  private async encryptToken(\n    valueToEncrypt: any,\n    propertySetting: EncryptionSettingForProperty,\n    isValueId: boolean,\n    type?: TypeMarker,\n  ): Promise<any> {\n    if (typeof valueToEncrypt === \"object\" && valueToEncrypt !== null) {\n      for (const key in valueToEncrypt) {\n        if (Object.prototype.hasOwnProperty.call(valueToEncrypt, key)) {\n          valueToEncrypt[key] = await this.encryptToken(\n            valueToEncrypt[key],\n            propertySetting,\n            isValueId,\n            type,\n          );\n        }\n      }\n    } else if (Array.isArray(type)) {\n      for (let i = 0; i < valueToEncrypt.length; i++) {\n        valueToEncrypt[i] = await this.encryptToken(\n          valueToEncrypt[i],\n          propertySetting,\n          isValueId,\n          type,\n        );\n      }\n    } else {\n      valueToEncrypt = await this.serializeAndEncryptValue(\n        valueToEncrypt,\n        propertySetting,\n        isValueId,\n        type,\n      );\n    }\n    return valueToEncrypt;\n  }\n\n  private async serializeAndEncryptValue(\n    valueToEncrypt: any,\n    propertySetting: EncryptionSettingForProperty,\n    isValueId: boolean,\n    type?: TypeMarker,\n  ): Promise<string> {\n    if (valueToEncrypt === null) {\n      return valueToEncrypt;\n    }\n    const [typeMarker, serializer] = createSerializer(valueToEncrypt, type);\n    const plainText = serializer.serialize(valueToEncrypt);\n    const encryptionAlgorithm = await this.buildEncryptionAlgorithm(propertySetting);\n    const cipherText = encryptionAlgorithm.encrypt(plainText);\n    if (isValueId) {\n      if (typeof valueToEncrypt !== \"string\") {\n        throw new ErrorResponse(\"The id should be of string type.\");\n      }\n    }\n\n    const cipherTextWithTypeMarker = Buffer.alloc(cipherText.length + 1);\n    cipherTextWithTypeMarker[0] = typeMarker;\n    cipherText.forEach((value, index) => {\n      cipherTextWithTypeMarker[index + 1] = value;\n    });\n    let encryptedValue = Buffer.from(cipherTextWithTypeMarker).toString(\"base64\");\n    if (isValueId) {\n      encryptedValue = encryptedValue.replace(/\\//g, \"_\").replace(/\\+/g, \"-\");\n    }\n    return encryptedValue;\n  }\n\n  async decrypt<T extends ItemDefinition>(\n    body: T,\n  ): Promise<{ body: T; propertiesDecryptedCount: number }> {\n    let propertiesDecryptedCount = 0;\n    if (body == null) {\n      return { body, propertiesDecryptedCount };\n    }\n    const encryptionSettings = await this.getEncryptionSetting();\n    if (!encryptionSettings) return { body, propertiesDecryptedCount };\n    for (const pathToEncrypt of encryptionSettings.pathsToEncrypt) {\n      const propertyName = pathToEncrypt.slice(1);\n      if (!Object.prototype.hasOwnProperty.call(body, propertyName)) {\n        continue;\n      }\n      const settingForProperty = encryptionSettings.getEncryptionSettingForProperty(pathToEncrypt);\n      if (settingForProperty == null) {\n        throw new ErrorResponse(\"Invalid Encryption Setting for the Path: \" + pathToEncrypt);\n      }\n\n      body[propertyName as keyof T] = await this.decryptToken(\n        body[propertyName],\n        settingForProperty,\n        propertyName === \"id\",\n      );\n      propertiesDecryptedCount++;\n    }\n    return { body, propertiesDecryptedCount };\n  }\n\n  private async decryptToken(\n    valueToDecrypt: any,\n    propertySetting: EncryptionSettingForProperty,\n    isValueId: boolean,\n  ): Promise<any> {\n    if (typeof valueToDecrypt === \"object\") {\n      for (const key in valueToDecrypt) {\n        if (Object.prototype.hasOwnProperty.call(valueToDecrypt, key)) {\n          valueToDecrypt[key] = await this.decryptToken(\n            valueToDecrypt[key],\n            propertySetting,\n            isValueId,\n          );\n        }\n      }\n    } else if (Array.isArray(valueToDecrypt)) {\n      for (let i = 0; i < valueToDecrypt.length; i++) {\n        valueToDecrypt[i] = await this.decryptToken(valueToDecrypt[i], propertySetting, isValueId);\n      }\n    } else {\n      valueToDecrypt = await this.deserializeAndDecryptValue(\n        valueToDecrypt,\n        propertySetting,\n        isValueId,\n      );\n    }\n    return valueToDecrypt;\n  }\n\n  private async deserializeAndDecryptValue(\n    valueToDecrypt: string,\n    propertySetting: EncryptionSettingForProperty,\n    isValueId: boolean,\n  ): Promise<any> {\n    if (isValueId) {\n      valueToDecrypt = valueToDecrypt.replace(/_/g, \"/\").replace(/-/g, \"+\");\n    }\n    const cipherTextWithTypeMarker = Buffer.from(valueToDecrypt, \"base64\");\n    if (cipherTextWithTypeMarker === null) {\n      return null;\n    }\n\n    let cipherText = Buffer.alloc(cipherTextWithTypeMarker.length - 1);\n    cipherText = Buffer.from(cipherTextWithTypeMarker.slice(1));\n\n    const encryptionAlgorithm = await this.buildEncryptionAlgorithm(propertySetting);\n    const plainText = encryptionAlgorithm.decrypt(cipherText);\n    if (plainText === null) {\n      throw new ErrorResponse(\"returned null plain text\");\n    }\n\n    const serializer = createDeserializer(cipherTextWithTypeMarker[0] as TypeMarker);\n    return serializer.deserialize(plainText);\n  }\n\n  async getEncryptionSetting(forceRefresh?: boolean): Promise<EncryptionSettings> {\n    const key = this.database._rid + \"/\" + this.containerRid;\n    const encryptionSetting = this.encryptionManager.encryptionSettingsCache.get(key);\n    if (forceRefresh || !encryptionSetting) {\n      return withDiagnostics(async (diagnosticNode: DiagnosticNodeInternal) => {\n        const path = `/dbs/${this.database.id}/colls/${this.containerId}`;\n        const id = `dbs/${this.database.id}/colls/${this.containerId}`;\n        const response = await this.clientContext.read<ContainerDefinition>({\n          path,\n          resourceType: ResourceType.container,\n          resourceId: id,\n          diagnosticNode,\n        });\n        if (!response || !response.result) {\n          throw new ErrorResponse(\"Failed to fetch container definition\");\n        }\n        const containerRid = response.result._rid;\n        const clientEncryptionPolicy = response.result.clientEncryptionPolicy;\n        const partitionKeyPaths = response.result.partitionKey.paths;\n        const updatedEncryptionSetting =\n          await this.encryptionManager.encryptionSettingsCache.create(\n            key,\n            containerRid,\n            partitionKeyPaths,\n            clientEncryptionPolicy,\n          );\n        return updatedEncryptionSetting;\n      }, this.clientContext);\n    }\n    return encryptionSetting;\n  }\n\n  private async buildEncryptionAlgorithm(\n    propertySetting: EncryptionSettingForProperty,\n  ): Promise<AeadAes256CbcHmacSha256Algorithm> {\n    const key = `${this.database._rid}/${propertySetting.encryptionKeyId}`;\n    let clientEncryptionKeyProperties =\n      this.encryptionManager.clientEncryptionKeyPropertiesCache.get(key);\n    if (!clientEncryptionKeyProperties) {\n      clientEncryptionKeyProperties = await this.fetchClientEncryptionKey(\n        propertySetting.encryptionKeyId,\n      );\n    }\n    try {\n      // the buildEncryptionAlgorithm will build ProtectedDEK which calls unwrapKey  using the masterKey configured in\n      // KeyEncryptionKey(created before creating Protected DEK)\n      // we get wrapped key and key wrap metadata info from clientEncryptionKeyProperties.\n      return await propertySetting.buildEncryptionAlgorithm(\n        clientEncryptionKeyProperties,\n        this.encryptionManager,\n      );\n    } catch (err) {\n      if (err.statusCode !== StatusCodes.Forbidden) throw err;\n      // if access to key is revoked, and in case there's stale value in cache\n      clientEncryptionKeyProperties = await this.fetchClientEncryptionKey(\n        propertySetting.encryptionKeyId,\n      );\n\n      try {\n        // This will succeed after if client has rewrapped CEK and gateway cache has updated value.\n        return await propertySetting.buildEncryptionAlgorithm(\n          clientEncryptionKeyProperties,\n          this.encryptionManager,\n          true,\n        );\n      } catch (retryErr) {\n        if (retryErr.statusCode !== StatusCodes.Forbidden) throw retryErr;\n\n        // in case there's stale value in gateway cache. get fresh value from backend\n        clientEncryptionKeyProperties = await this.fetchClientEncryptionKey(\n          propertySetting.encryptionKeyId,\n          clientEncryptionKeyProperties.etag,\n        );\n        return propertySetting.buildEncryptionAlgorithm(\n          clientEncryptionKeyProperties,\n          this.encryptionManager,\n        );\n      }\n    }\n  }\n\n  private async fetchClientEncryptionKey(\n    cekId: string,\n    cekEtag?: string,\n  ): Promise<ClientEncryptionKeyProperties> {\n    return withDiagnostics(async (diagnosticNode: DiagnosticNodeInternal) => {\n      const path = `/dbs/${this.database.id}/clientencryptionkeys/${cekId}`;\n      const id = `dbs/${this.database.id}/clientencryptionkeys/${cekId}`;\n      const options: RequestOptions = {};\n      if (cekEtag) {\n        options.accessCondition = {\n          type: Constants.HttpHeaders.IfNoneMatch,\n          condition: cekEtag,\n        };\n      }\n      options.databaseRid = this.database._rid;\n      const response = await this.clientContext.read<ClientEncryptionKeyRequest>({\n        path: path,\n        resourceType: ResourceType.clientencryptionkey,\n        resourceId: id,\n        options: options,\n        diagnosticNode,\n      });\n      if (!response) {\n        throw new ErrorResponse(`Failed to fetch client encryption key ${cekId}`);\n      }\n      if (response.code === StatusCodes.NotModified) {\n        throw new ErrorResponse(\n          `The Client Encryption Key with key id: ${cekId} on database: ${this.database.id} needs to be rewrapped with a valid Key Encryption Key using rewrapClientEncryptionKey. The Key Encryption Key used to wrap the Client Encryption Key has been revoked`,\n        );\n      }\n      const clientEncryptionKeyProperties: ClientEncryptionKeyProperties = {\n        id: response.result.id,\n        encryptionAlgorithm: response.result.encryptionAlgorithm,\n        wrappedDataEncryptionKey: new Uint8Array(\n          Buffer.from(response.result.wrappedDataEncryptionKey, \"base64\"),\n        ),\n        encryptionKeyWrapMetadata: response.result.keyWrapMetadata,\n        etag: response.result._etag,\n      };\n      const key = this.database._rid + \"/\" + cekId;\n      this.encryptionManager.clientEncryptionKeyPropertiesCache.set(\n        key,\n        clientEncryptionKeyProperties,\n      );\n      return clientEncryptionKeyProperties;\n    }, this.clientContext);\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA,oBAOO;AAEP,qBAA8B;AAC9B,yBAAgC;AAIzB,MAAM,oBAAoB;AAAA,EAC/B,YACmB,aACV,cACU,UACA,eACT,mBACR;AALiB;AACV;AACU;AACA;AACT;AAAA,EACP;AAAA,EAEH,MAAM,QACJ,MACwD;AACxD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,6BAAc,kCAAkC;AAAA,IAC5D;AACA,QAAI,2BAA2B;AAC/B,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO,EAAE,MAAM,yBAAyB;AACjE,eAAW,iBAAiB,mBAAmB,gBAAgB;AAC7D,YAAM,eAAe,cAAc,MAAM,CAAC;AAC1C,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,YAAY,GAAG;AAC7D;AAAA,MACF;AAEA,YAAM,qBAAqB,mBAAmB,gCAAgC,aAAa;AAC3F,UAAI,CAAC,oBAAoB;AACvB,cAAM,IAAI,6BAAc,kDAAkD,YAAY;AAAA,MACxF;AACA,WAAK,YAAuB,IAAI,MAAM,KAAK;AAAA,QACzC,KAAK,YAAY;AAAA,QACjB;AAAA,QACA,iBAAiB;AAAA,MACnB;AACA;AAAA,IACF;AACA,WAAO,EAAE,MAAM,yBAAyB;AAAA,EAC1C;AAAA,EAEA,MAAM,gBAAgB,MAAgC;AACpD,eAAO,2BAAY,IAAI;AACvB,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,UAAM,qBAAqB,mBAAmB,gCAAgC,IAAI;AAClF,QAAI,CAAC,mBAAoB,QAAO;AAChC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB,MAAc,OAAgC;AAClE,eAAO,2BAAY,IAAI;AACvB,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO;AAChC,UAAM,qBAAqB,mBAAmB,gCAAgC,IAAI;AAClF,QAAI,CAAC,oBAAoB;AACvB,aAAO;AAAA,IACT;AAEA,YAAQ,MAAM,KAAK,aAAa,OAAO,oBAAoB,SAAS,KAAK;AACzE,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,8BACJ,kBAC6E;AAC7E,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,iBAAiB;AACrB,QAAI,CAAC,mBAAoB,QAAO,EAAE,kBAAkB,eAAe;AACnE,UAAM,oBAAoB,mBAAmB;AAC7C,aAAS,IAAI,GAAG,IAAI,kBAAkB,QAAQ,KAAK;AACjD,YAAM,uBAAmB,2BAAY,kBAAkB,CAAC,CAAC;AACzD,UAAI,mBAAmB,eAAe,SAAS,gBAAgB,GAAG;AAChE,cAAM,qBACJ,mBAAmB,gCAAgC,gBAAgB;AACrE,yBAAiB,CAAC,IAAI,MAAM,KAAK;AAAA,UAC/B,iBAAiB,CAAC;AAAA,UAClB;AAAA,UACA,qBAAqB;AAAA,QACvB;AACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,kBAAkB,eAAe;AAAA,EAC5C;AAAA,EAEA,MAAM,gBAAgB,IAA6B;AACjD,UAAM,QAAQ,GAAG,MAAM,GAAG;AAC1B,UAAM,WAAW,MAAM,MAAM,SAAS,CAAC;AACvC,UAAM,oBAAoB,MAAM,KAAK,eAAe,QAAQ;AAC5D,UAAM,MAAM,SAAS,CAAC,IAAI;AAC1B,WAAO,MAAM,KAAK,GAAG;AAAA,EACvB;AAAA,EAEA,MAAM,eAAe,IAA6B;AAChD,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO;AAChC,UAAM,qBAAqB,mBAAmB,gCAAgC,KAAK;AAEnF,QAAI,CAAC,mBAAoB,QAAO;AAChC,SAAK,MAAM,KAAK,aAAa,IAAI,oBAAoB,IAAI;AACzD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,sBACJ,MACA,OACA,WACA,MACoB;AACpB,QAAI,UAAU,MAAM;AAClB,aAAO;AAAA,IACT;AACA,eAAO,2BAAY,IAAI;AACvB,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO;AAChC,UAAM,qBAAqB,mBAAmB,gCAAgC,IAAI;AAClF,QAAI,CAAC,oBAAoB;AACvB,aAAO;AAAA,IACT;AACA,WAAO,KAAK,aAAa,OAAO,oBAAoB,WAAW,IAAI;AAAA,EACrE;AAAA,EAEA,MAAc,aACZ,gBACA,iBACA,WACA,MACc;AACd,QAAI,OAAO,mBAAmB,YAAY,mBAAmB,MAAM;AACjE,iBAAW,OAAO,gBAAgB;AAChC,YAAI,OAAO,UAAU,eAAe,KAAK,gBAAgB,GAAG,GAAG;AAC7D,yBAAe,GAAG,IAAI,MAAM,KAAK;AAAA,YAC/B,eAAe,GAAG;AAAA,YAClB;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,WAAW,MAAM,QAAQ,IAAI,GAAG;AAC9B,eAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,uBAAe,CAAC,IAAI,MAAM,KAAK;AAAA,UAC7B,eAAe,CAAC;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,OAAO;AACL,uBAAiB,MAAM,KAAK;AAAA,QAC1B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,yBACZ,gBACA,iBACA,WACA,MACiB;AACjB,QAAI,mBAAmB,MAAM;AAC3B,aAAO;AAAA,IACT;AACA,UAAM,CAAC,YAAY,UAAU,QAAI,gCAAiB,gBAAgB,IAAI;AACtE,UAAM,YAAY,WAAW,UAAU,cAAc;AACrD,UAAM,sBAAsB,MAAM,KAAK,yBAAyB,eAAe;AAC/E,UAAM,aAAa,oBAAoB,QAAQ,SAAS;AACxD,QAAI,WAAW;AACb,UAAI,OAAO,mBAAmB,UAAU;AACtC,cAAM,IAAI,6BAAc,kCAAkC;AAAA,MAC5D;AAAA,IACF;AAEA,UAAM,2BAA2B,OAAO,MAAM,WAAW,SAAS,CAAC;AACnE,6BAAyB,CAAC,IAAI;AAC9B,eAAW,QAAQ,CAAC,OAAO,UAAU;AACnC,+BAAyB,QAAQ,CAAC,IAAI;AAAA,IACxC,CAAC;AACD,QAAI,iBAAiB,OAAO,KAAK,wBAAwB,EAAE,SAAS,QAAQ;AAC5E,QAAI,WAAW;AACb,uBAAiB,eAAe,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AAAA,IACxE;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QACJ,MACwD;AACxD,QAAI,2BAA2B;AAC/B,QAAI,QAAQ,MAAM;AAChB,aAAO,EAAE,MAAM,yBAAyB;AAAA,IAC1C;AACA,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO,EAAE,MAAM,yBAAyB;AACjE,eAAW,iBAAiB,mBAAmB,gBAAgB;AAC7D,YAAM,eAAe,cAAc,MAAM,CAAC;AAC1C,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,YAAY,GAAG;AAC7D;AAAA,MACF;AACA,YAAM,qBAAqB,mBAAmB,gCAAgC,aAAa;AAC3F,UAAI,sBAAsB,MAAM;AAC9B,cAAM,IAAI,6BAAc,8CAA8C,aAAa;AAAA,MACrF;AAEA,WAAK,YAAuB,IAAI,MAAM,KAAK;AAAA,QACzC,KAAK,YAAY;AAAA,QACjB;AAAA,QACA,iBAAiB;AAAA,MACnB;AACA;AAAA,IACF;AACA,WAAO,EAAE,MAAM,yBAAyB;AAAA,EAC1C;AAAA,EAEA,MAAc,aACZ,gBACA,iBACA,WACc;AACd,QAAI,OAAO,mBAAmB,UAAU;AACtC,iBAAW,OAAO,gBAAgB;AAChC,YAAI,OAAO,UAAU,eAAe,KAAK,gBAAgB,GAAG,GAAG;AAC7D,yBAAe,GAAG,IAAI,MAAM,KAAK;AAAA,YAC/B,eAAe,GAAG;AAAA,YAClB;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,WAAW,MAAM,QAAQ,cAAc,GAAG;AACxC,eAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,uBAAe,CAAC,IAAI,MAAM,KAAK,aAAa,eAAe,CAAC,GAAG,iBAAiB,SAAS;AAAA,MAC3F;AAAA,IACF,OAAO;AACL,uBAAiB,MAAM,KAAK;AAAA,QAC1B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,2BACZ,gBACA,iBACA,WACc;AACd,QAAI,WAAW;AACb,uBAAiB,eAAe,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAAA,IACtE;AACA,UAAM,2BAA2B,OAAO,KAAK,gBAAgB,QAAQ;AACrE,QAAI,6BAA6B,MAAM;AACrC,aAAO;AAAA,IACT;AAEA,QAAI,aAAa,OAAO,MAAM,yBAAyB,SAAS,CAAC;AACjE,iBAAa,OAAO,KAAK,yBAAyB,MAAM,CAAC,CAAC;AAE1D,UAAM,sBAAsB,MAAM,KAAK,yBAAyB,eAAe;AAC/E,UAAM,YAAY,oBAAoB,QAAQ,UAAU;AACxD,QAAI,cAAc,MAAM;AACtB,YAAM,IAAI,6BAAc,0BAA0B;AAAA,IACpD;AAEA,UAAM,iBAAa,kCAAmB,yBAAyB,CAAC,CAAe;AAC/E,WAAO,WAAW,YAAY,SAAS;AAAA,EACzC;AAAA,EAEA,MAAM,qBAAqB,cAAqD;AAC9E,UAAM,MAAM,KAAK,SAAS,OAAO,MAAM,KAAK;AAC5C,UAAM,oBAAoB,KAAK,kBAAkB,wBAAwB,IAAI,GAAG;AAChF,QAAI,gBAAgB,CAAC,mBAAmB;AACtC,iBAAO,oCAAgB,OAAO,mBAA2C;AACvE,cAAM,OAAO,QAAQ,KAAK,SAAS,EAAE,UAAU,KAAK,WAAW;AAC/D,cAAM,KAAK,OAAO,KAAK,SAAS,EAAE,UAAU,KAAK,WAAW;AAC5D,cAAM,WAAW,MAAM,KAAK,cAAc,KAA0B;AAAA,UAClE;AAAA,UACA,cAAc,2BAAa;AAAA,UAC3B,YAAY;AAAA,UACZ;AAAA,QACF,CAAC;AACD,YAAI,CAAC,YAAY,CAAC,SAAS,QAAQ;AACjC,gBAAM,IAAI,6BAAc,sCAAsC;AAAA,QAChE;AACA,cAAM,eAAe,SAAS,OAAO;AACrC,cAAM,yBAAyB,SAAS,OAAO;AAC/C,cAAM,oBAAoB,SAAS,OAAO,aAAa;AACvD,cAAM,2BACJ,MAAM,KAAK,kBAAkB,wBAAwB;AAAA,UACnD;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACF,eAAO;AAAA,MACT,GAAG,KAAK,aAAa;AAAA,IACvB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,yBACZ,iBAC2C;AAC3C,UAAM,MAAM,GAAG,KAAK,SAAS,IAAI,IAAI,gBAAgB,eAAe;AACpE,QAAI,gCACF,KAAK,kBAAkB,mCAAmC,IAAI,GAAG;AACnE,QAAI,CAAC,+BAA+B;AAClC,sCAAgC,MAAM,KAAK;AAAA,QACzC,gBAAgB;AAAA,MAClB;AAAA,IACF;AACA,QAAI;AAIF,aAAO,MAAM,gBAAgB;AAAA,QAC3B;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,IAAI,eAAe,0BAAY,UAAW,OAAM;AAEpD,sCAAgC,MAAM,KAAK;AAAA,QACzC,gBAAgB;AAAA,MAClB;AAEA,UAAI;AAEF,eAAO,MAAM,gBAAgB;AAAA,UAC3B;AAAA,UACA,KAAK;AAAA,UACL;AAAA,QACF;AAAA,MACF,SAAS,UAAU;AACjB,YAAI,SAAS,eAAe,0BAAY,UAAW,OAAM;AAGzD,wCAAgC,MAAM,KAAK;AAAA,UACzC,gBAAgB;AAAA,UAChB,8BAA8B;AAAA,QAChC;AACA,eAAO,gBAAgB;AAAA,UACrB;AAAA,UACA,KAAK;AAAA,QACP;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,yBACZ,OACA,SACwC;AACxC,eAAO,oCAAgB,OAAO,mBAA2C;AACvE,YAAM,OAAO,QAAQ,KAAK,SAAS,EAAE,yBAAyB,KAAK;AACnE,YAAM,KAAK,OAAO,KAAK,SAAS,EAAE,yBAAyB,KAAK;AAChE,YAAM,UAA0B,CAAC;AACjC,UAAI,SAAS;AACX,gBAAQ,kBAAkB;AAAA,UACxB,MAAM,wBAAU,YAAY;AAAA,UAC5B,WAAW;AAAA,QACb;AAAA,MACF;AACA,cAAQ,cAAc,KAAK,SAAS;AACpC,YAAM,WAAW,MAAM,KAAK,cAAc,KAAiC;AAAA,QACzE;AAAA,QACA,cAAc,2BAAa;AAAA,QAC3B,YAAY;AAAA,QACZ;AAAA,QACA;AAAA,MACF,CAAC;AACD,UAAI,CAAC,UAAU;AACb,cAAM,IAAI,6BAAc,yCAAyC,KAAK,EAAE;AAAA,MAC1E;AACA,UAAI,SAAS,SAAS,0BAAY,aAAa;AAC7C,cAAM,IAAI;AAAA,UACR,0CAA0C,KAAK,iBAAiB,KAAK,SAAS,EAAE;AAAA,QAClF;AAAA,MACF;AACA,YAAM,gCAA+D;AAAA,QACnE,IAAI,SAAS,OAAO;AAAA,QACpB,qBAAqB,SAAS,OAAO;AAAA,QACrC,0BAA0B,IAAI;AAAA,UAC5B,OAAO,KAAK,SAAS,OAAO,0BAA0B,QAAQ;AAAA,QAChE;AAAA,QACA,2BAA2B,SAAS,OAAO;AAAA,QAC3C,MAAM,SAAS,OAAO;AAAA,MACxB;AACA,YAAM,MAAM,KAAK,SAAS,OAAO,MAAM;AACvC,WAAK,kBAAkB,mCAAmC;AAAA,QACxD;AAAA,QACA;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG,KAAK,aAAa;AAAA,EACvB;AACF;",
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA,oBAOO;AAEP,qBAA8B;AAC9B,yBAAgC;AAIzB,MAAM,oBAAoB;AAAA,EAC/B,YACmB,aACV,cACU,UACA,eACT,mBACR;AALiB;AACV;AACU;AACA;AACT;AAAA,EACP;AAAA,EALgB;AAAA,EACV;AAAA,EACU;AAAA,EACA;AAAA,EACT;AAAA,EAGV,MAAM,QACJ,MACwD;AACxD,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,6BAAc,kCAAkC;AAAA,IAC5D;AACA,QAAI,2BAA2B;AAC/B,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO,EAAE,MAAM,yBAAyB;AACjE,eAAW,iBAAiB,mBAAmB,gBAAgB;AAC7D,YAAM,eAAe,cAAc,MAAM,CAAC;AAC1C,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,YAAY,GAAG;AAC7D;AAAA,MACF;AAEA,YAAM,qBAAqB,mBAAmB,gCAAgC,aAAa;AAC3F,UAAI,CAAC,oBAAoB;AACvB,cAAM,IAAI,6BAAc,kDAAkD,YAAY;AAAA,MACxF;AACA,WAAK,YAAuB,IAAI,MAAM,KAAK;AAAA,QACzC,KAAK,YAAY;AAAA,QACjB;AAAA,QACA,iBAAiB;AAAA,MACnB;AACA;AAAA,IACF;AACA,WAAO,EAAE,MAAM,yBAAyB;AAAA,EAC1C;AAAA,EAEA,MAAM,gBAAgB,MAAgC;AACpD,eAAO,2BAAY,IAAI;AACvB,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,UAAM,qBAAqB,mBAAmB,gCAAgC,IAAI;AAClF,QAAI,CAAC,mBAAoB,QAAO;AAChC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB,MAAc,OAAgC;AAClE,eAAO,2BAAY,IAAI;AACvB,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO;AAChC,UAAM,qBAAqB,mBAAmB,gCAAgC,IAAI;AAClF,QAAI,CAAC,oBAAoB;AACvB,aAAO;AAAA,IACT;AAEA,YAAQ,MAAM,KAAK,aAAa,OAAO,oBAAoB,SAAS,KAAK;AACzE,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,8BACJ,kBAC6E;AAC7E,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,iBAAiB;AACrB,QAAI,CAAC,mBAAoB,QAAO,EAAE,kBAAkB,eAAe;AACnE,UAAM,oBAAoB,mBAAmB;AAC7C,aAAS,IAAI,GAAG,IAAI,kBAAkB,QAAQ,KAAK;AACjD,YAAM,uBAAmB,2BAAY,kBAAkB,CAAC,CAAC;AACzD,UAAI,mBAAmB,eAAe,SAAS,gBAAgB,GAAG;AAChE,cAAM,qBACJ,mBAAmB,gCAAgC,gBAAgB;AACrE,yBAAiB,CAAC,IAAI,MAAM,KAAK;AAAA,UAC/B,iBAAiB,CAAC;AAAA,UAClB;AAAA,UACA,qBAAqB;AAAA,QACvB;AACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,kBAAkB,eAAe;AAAA,EAC5C;AAAA,EAEA,MAAM,gBAAgB,IAA6B;AACjD,UAAM,QAAQ,GAAG,MAAM,GAAG;AAC1B,UAAM,WAAW,MAAM,MAAM,SAAS,CAAC;AACvC,UAAM,oBAAoB,MAAM,KAAK,eAAe,QAAQ;AAC5D,UAAM,MAAM,SAAS,CAAC,IAAI;AAC1B,WAAO,MAAM,KAAK,GAAG;AAAA,EACvB;AAAA,EAEA,MAAM,eAAe,IAA6B;AAChD,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO;AAChC,UAAM,qBAAqB,mBAAmB,gCAAgC,KAAK;AAEnF,QAAI,CAAC,mBAAoB,QAAO;AAChC,SAAK,MAAM,KAAK,aAAa,IAAI,oBAAoB,IAAI;AACzD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,sBACJ,MACA,OACA,WACA,MACoB;AACpB,QAAI,UAAU,MAAM;AAClB,aAAO;AAAA,IACT;AACA,eAAO,2BAAY,IAAI;AACvB,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO;AAChC,UAAM,qBAAqB,mBAAmB,gCAAgC,IAAI;AAClF,QAAI,CAAC,oBAAoB;AACvB,aAAO;AAAA,IACT;AACA,WAAO,KAAK,aAAa,OAAO,oBAAoB,WAAW,IAAI;AAAA,EACrE;AAAA,EAEA,MAAc,aACZ,gBACA,iBACA,WACA,MACc;AACd,QAAI,OAAO,mBAAmB,YAAY,mBAAmB,MAAM;AACjE,iBAAW,OAAO,gBAAgB;AAChC,YAAI,OAAO,UAAU,eAAe,KAAK,gBAAgB,GAAG,GAAG;AAC7D,yBAAe,GAAG,IAAI,MAAM,KAAK;AAAA,YAC/B,eAAe,GAAG;AAAA,YAClB;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,WAAW,MAAM,QAAQ,IAAI,GAAG;AAC9B,eAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,uBAAe,CAAC,IAAI,MAAM,KAAK;AAAA,UAC7B,eAAe,CAAC;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,OAAO;AACL,uBAAiB,MAAM,KAAK;AAAA,QAC1B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,yBACZ,gBACA,iBACA,WACA,MACiB;AACjB,QAAI,mBAAmB,MAAM;AAC3B,aAAO;AAAA,IACT;AACA,UAAM,CAAC,YAAY,UAAU,QAAI,gCAAiB,gBAAgB,IAAI;AACtE,UAAM,YAAY,WAAW,UAAU,cAAc;AACrD,UAAM,sBAAsB,MAAM,KAAK,yBAAyB,eAAe;AAC/E,UAAM,aAAa,oBAAoB,QAAQ,SAAS;AACxD,QAAI,WAAW;AACb,UAAI,OAAO,mBAAmB,UAAU;AACtC,cAAM,IAAI,6BAAc,kCAAkC;AAAA,MAC5D;AAAA,IACF;AAEA,UAAM,2BAA2B,OAAO,MAAM,WAAW,SAAS,CAAC;AACnE,6BAAyB,CAAC,IAAI;AAC9B,eAAW,QAAQ,CAAC,OAAO,UAAU;AACnC,+BAAyB,QAAQ,CAAC,IAAI;AAAA,IACxC,CAAC;AACD,QAAI,iBAAiB,OAAO,KAAK,wBAAwB,EAAE,SAAS,QAAQ;AAC5E,QAAI,WAAW;AACb,uBAAiB,eAAe,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG;AAAA,IACxE;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QACJ,MACwD;AACxD,QAAI,2BAA2B;AAC/B,QAAI,QAAQ,MAAM;AAChB,aAAO,EAAE,MAAM,yBAAyB;AAAA,IAC1C;AACA,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAC3D,QAAI,CAAC,mBAAoB,QAAO,EAAE,MAAM,yBAAyB;AACjE,eAAW,iBAAiB,mBAAmB,gBAAgB;AAC7D,YAAM,eAAe,cAAc,MAAM,CAAC;AAC1C,UAAI,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,YAAY,GAAG;AAC7D;AAAA,MACF;AACA,YAAM,qBAAqB,mBAAmB,gCAAgC,aAAa;AAC3F,UAAI,sBAAsB,MAAM;AAC9B,cAAM,IAAI,6BAAc,8CAA8C,aAAa;AAAA,MACrF;AAEA,WAAK,YAAuB,IAAI,MAAM,KAAK;AAAA,QACzC,KAAK,YAAY;AAAA,QACjB;AAAA,QACA,iBAAiB;AAAA,MACnB;AACA;AAAA,IACF;AACA,WAAO,EAAE,MAAM,yBAAyB;AAAA,EAC1C;AAAA,EAEA,MAAc,aACZ,gBACA,iBACA,WACc;AACd,QAAI,OAAO,mBAAmB,UAAU;AACtC,iBAAW,OAAO,gBAAgB;AAChC,YAAI,OAAO,UAAU,eAAe,KAAK,gBAAgB,GAAG,GAAG;AAC7D,yBAAe,GAAG,IAAI,MAAM,KAAK;AAAA,YAC/B,eAAe,GAAG;AAAA,YAClB;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,WAAW,MAAM,QAAQ,cAAc,GAAG;AACxC,eAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,uBAAe,CAAC,IAAI,MAAM,KAAK,aAAa,eAAe,CAAC,GAAG,iBAAiB,SAAS;AAAA,MAC3F;AAAA,IACF,OAAO;AACL,uBAAiB,MAAM,KAAK;AAAA,QAC1B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,2BACZ,gBACA,iBACA,WACc;AACd,QAAI,WAAW;AACb,uBAAiB,eAAe,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAAA,IACtE;AACA,UAAM,2BAA2B,OAAO,KAAK,gBAAgB,QAAQ;AACrE,QAAI,6BAA6B,MAAM;AACrC,aAAO;AAAA,IACT;AAEA,QAAI,aAAa,OAAO,MAAM,yBAAyB,SAAS,CAAC;AACjE,iBAAa,OAAO,KAAK,yBAAyB,MAAM,CAAC,CAAC;AAE1D,UAAM,sBAAsB,MAAM,KAAK,yBAAyB,eAAe;AAC/E,UAAM,YAAY,oBAAoB,QAAQ,UAAU;AACxD,QAAI,cAAc,MAAM;AACtB,YAAM,IAAI,6BAAc,0BAA0B;AAAA,IACpD;AAEA,UAAM,iBAAa,kCAAmB,yBAAyB,CAAC,CAAe;AAC/E,WAAO,WAAW,YAAY,SAAS;AAAA,EACzC;AAAA,EAEA,MAAM,qBAAqB,cAAqD;AAC9E,UAAM,MAAM,KAAK,SAAS,OAAO,MAAM,KAAK;AAC5C,UAAM,oBAAoB,KAAK,kBAAkB,wBAAwB,IAAI,GAAG;AAChF,QAAI,gBAAgB,CAAC,mBAAmB;AACtC,iBAAO,oCAAgB,OAAO,mBAA2C;AACvE,cAAM,OAAO,QAAQ,KAAK,SAAS,EAAE,UAAU,KAAK,WAAW;AAC/D,cAAM,KAAK,OAAO,KAAK,SAAS,EAAE,UAAU,KAAK,WAAW;AAC5D,cAAM,WAAW,MAAM,KAAK,cAAc,KAA0B;AAAA,UAClE;AAAA,UACA,cAAc,2BAAa;AAAA,UAC3B,YAAY;AAAA,UACZ;AAAA,QACF,CAAC;AACD,YAAI,CAAC,YAAY,CAAC,SAAS,QAAQ;AACjC,gBAAM,IAAI,6BAAc,sCAAsC;AAAA,QAChE;AACA,cAAM,eAAe,SAAS,OAAO;AACrC,cAAM,yBAAyB,SAAS,OAAO;AAC/C,cAAM,oBAAoB,SAAS,OAAO,aAAa;AACvD,cAAM,2BACJ,MAAM,KAAK,kBAAkB,wBAAwB;AAAA,UACnD;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACF,eAAO;AAAA,MACT,GAAG,KAAK,aAAa;AAAA,IACvB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,yBACZ,iBAC2C;AAC3C,UAAM,MAAM,GAAG,KAAK,SAAS,IAAI,IAAI,gBAAgB,eAAe;AACpE,QAAI,gCACF,KAAK,kBAAkB,mCAAmC,IAAI,GAAG;AACnE,QAAI,CAAC,+BAA+B;AAClC,sCAAgC,MAAM,KAAK;AAAA,QACzC,gBAAgB;AAAA,MAClB;AAAA,IACF;AACA,QAAI;AAIF,aAAO,MAAM,gBAAgB;AAAA,QAC3B;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,IAAI,eAAe,0BAAY,UAAW,OAAM;AAEpD,sCAAgC,MAAM,KAAK;AAAA,QACzC,gBAAgB;AAAA,MAClB;AAEA,UAAI;AAEF,eAAO,MAAM,gBAAgB;AAAA,UAC3B;AAAA,UACA,KAAK;AAAA,UACL;AAAA,QACF;AAAA,MACF,SAAS,UAAU;AACjB,YAAI,SAAS,eAAe,0BAAY,UAAW,OAAM;AAGzD,wCAAgC,MAAM,KAAK;AAAA,UACzC,gBAAgB;AAAA,UAChB,8BAA8B;AAAA,QAChC;AACA,eAAO,gBAAgB;AAAA,UACrB;AAAA,UACA,KAAK;AAAA,QACP;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,yBACZ,OACA,SACwC;AACxC,eAAO,oCAAgB,OAAO,mBAA2C;AACvE,YAAM,OAAO,QAAQ,KAAK,SAAS,EAAE,yBAAyB,KAAK;AACnE,YAAM,KAAK,OAAO,KAAK,SAAS,EAAE,yBAAyB,KAAK;AAChE,YAAM,UAA0B,CAAC;AACjC,UAAI,SAAS;AACX,gBAAQ,kBAAkB;AAAA,UACxB,MAAM,wBAAU,YAAY;AAAA,UAC5B,WAAW;AAAA,QACb;AAAA,MACF;AACA,cAAQ,cAAc,KAAK,SAAS;AACpC,YAAM,WAAW,MAAM,KAAK,cAAc,KAAiC;AAAA,QACzE;AAAA,QACA,cAAc,2BAAa;AAAA,QAC3B,YAAY;AAAA,QACZ;AAAA,QACA;AAAA,MACF,CAAC;AACD,UAAI,CAAC,UAAU;AACb,cAAM,IAAI,6BAAc,yCAAyC,KAAK,EAAE;AAAA,MAC1E;AACA,UAAI,SAAS,SAAS,0BAAY,aAAa;AAC7C,cAAM,IAAI;AAAA,UACR,0CAA0C,KAAK,iBAAiB,KAAK,SAAS,EAAE;AAAA,QAClF;AAAA,MACF;AACA,YAAM,gCAA+D;AAAA,QACnE,IAAI,SAAS,OAAO;AAAA,QACpB,qBAAqB,SAAS,OAAO;AAAA,QACrC,0BAA0B,IAAI;AAAA,UAC5B,OAAO,KAAK,SAAS,OAAO,0BAA0B,QAAQ;AAAA,QAChE;AAAA,QACA,2BAA2B,SAAS,OAAO;AAAA,QAC3C,MAAM,SAAS,OAAO;AAAA,MACxB;AACA,YAAM,MAAM,KAAK,SAAS,OAAO,MAAM;AACvC,WAAK,kBAAkB,mCAAmC;AAAA,QACxD;AAAA,QACA;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG,KAAK,aAAa;AAAA,EACvB;AACF;",
   "names": []
 }

package/dist/commonjs/encryption/EncryptionQueryBuilder.js

@@ -114,3 +114,4 @@ function isCosmosEncryptedNumber(val) {
 0 && (module.exports = {
   EncryptionQueryBuilder
 });
+//# sourceMappingURL=EncryptionQueryBuilder.js.map