@bitgo-beta/sdk-core 8.2.1-beta.21 → 8.2.1-beta.2100

package/dist/src/bitgo/keychain/iKeychains.d.ts

@@ -1,29 +1,70 @@
-/// <reference types="node" />
-import { IRequestTracer } from '../../api';
-import { KeyPair, KeychainsTriplet } from '../baseCoin';
-import { BackupProvider, IWallet } from '../wallet';
+import type { KeyBulkUpdateResponse } from '@bitgo/public-types';
+import { EncryptionVersion, IEncryptionSession, IRequestTracer } from '../../api';
+import { KeychainsTriplet, KeyPair } from '../baseCoin';
+import { BitgoPubKeyType } from '../utils/tss/baseTypes';
+import { IWallet } from '../wallet';
 import { BitGoKeyFromOvcShares, OvcToBitGoJSON } from './ovcJsonCodec';
-export declare type KeyType = 'tss' | 'independent' | 'blsdkg';
+export type KeyType = 'tss' | 'independent' | 'blsdkg';
+export interface WebauthnInfo {
+    prfSalt: string;
+    otpDeviceId: string;
+    encryptedPrv: string;
+    /** Required by POST /key to validate the PRF salt; not needed on the PUT /key/:id update path. */
+    enterpriseId?: string;
+}
+import type { WebauthnKeyEncryptionInfo } from '../wallet/iWallets';
+export type { WebauthnKeyEncryptionInfo };
+export type SourceType = 'bitgo' | 'backup' | 'user' | 'cold';
+export type WebauthnFmt = 'none' | 'packed' | 'fido-u2f';
+export interface WebauthnAuthenticatorInfo {
+    credID: string;
+    fmt: WebauthnFmt;
+    publicKey: string;
+}
+export interface KeychainWebauthnDevice {
+    otpDeviceId: string;
+    authenticatorInfo: WebauthnAuthenticatorInfo;
+    prfSalt: string;
+    encryptedPrv: string;
+}
 export interface Keychain {
     id: string;
     pub?: string;
     prv?: string;
     provider?: string;
     encryptedPrv?: string;
+    reducedEncryptedPrv?: string;
     derivationPath?: string;
     derivedFromParentWithSeed?: string;
+    /** Hardened path from the safe parent (`m/<n>'`). @experimental */
+    derivedFromParentWithPath?: string;
+    /** Safe root key id this child key was derived from (WCN-1172). */
+    parent?: string;
     commonPub?: string;
     commonKeychain?: string;
     keyShares?: ApiKeyShare[];
     walletHSMGPGPublicKeySigs?: string;
+    hsmType?: BitgoPubKeyType;
     type: KeyType;
+    source?: SourceType;
+    coinSpecific?: {
+        [coinName: string]: unknown;
+    };
+    webauthnDevices?: KeychainWebauthnDevice[];
+    ethAddress?: string;
 }
+export type OptionalKeychainEncryptedKey = Pick<Keychain, 'encryptedPrv' | 'webauthnDevices'>;
+export type KeychainWithEncryptedPrv = Omit<Keychain, 'encryptedPrv'> & {
+    encryptedPrv: string;
+};
 export interface ChangedKeychains {
     [pubkey: string]: string;
 }
 export interface ListKeychainsResult {
     keys: Keychain[];
     nextBatchPrevId?: string;
+    /** Total of the listed keychains — the count of the list's own query (WCN-2084 total-count support). */
+    totalCount?: number;
 }
 export interface GetKeychainOptions {
     id: string;
@@ -34,16 +75,91 @@ export interface GetKeychainOptions {
 export interface ListKeychainOptions {
     limit?: number;
     prevId?: string;
+    /**
+     * When present, the listing is scoped to the keys of the safe with this public id instead of
+     * the caller's coin-wide key set. Requires safe admin; the response still carries only the
+     * caller's own `users[]` envelopes. The result set is coin-independent (the same safe yields
+     * the same keys for any coin's keychains()), so any coin may be used for the walk.
+     */
+    safeId?: string;
 }
+export type KeychainPasswordUpdateStatus = 'updated' | 'skipped';
+export interface KeychainPasswordUpdateProgress {
+    status: KeychainPasswordUpdateStatus;
+    currentKeychainId?: string;
+    /**
+     * Truthful total of the listed keychains (`totalCount` from the backend, WCN-2084).
+     * Every listed record reports an outcome (updated | skipped), so `completed` reaches
+     * this total exactly on any account composition.
+     */
+    total?: number;
+}
+export type KeychainPasswordUpdateProgressCallback = (progress: KeychainPasswordUpdateProgress) => void;
 export interface UpdatePasswordOptions {
     oldPassword: string;
     newPassword: string;
+    /**
+     * Envelope version to emit for the re-encrypted keychains. Defaults to preserving each
+     * keychain's existing envelope version (no forced migration). Pass `2` to opt in to the
+     * Argon2id upgrade for v1 (SJCL) keychains once the caller is ready (e.g. after the
+     * Sept 15 breaking-change window closes).
+     */
+    encryptionVersion?: EncryptionVersion;
+    /** Reuse one password-derived session across all matching keychains. */
+    encryptionSession?: IEncryptionSession;
+    /**
+     * Rotate the passphrase of the safe with this public id instead of the caller's
+     * coin-wide key set. This flips the method's contract — the two modes are NOT interchangeable:
+     *
+     * - WITHOUT `safeId` (legacy): walks all of the caller's coin-scoped keychains, silently
+     *   skips keychains that fail to decrypt, returns a `changedKeys` map, and persists NOTHING —
+     *   persistence is the caller's job.
+     * - WITH `safeId` (safe mode): walks only the safe's keychains (requires safe admin),
+     *   decrypts every envelope up-front and fails FAST with `IncorrectPasswordError` on the
+     *   first undecryptable one (zero writes), re-encrypts with a single shared encryption
+     *   session, and persists everything ATOMICALLY server-side via the batch endpoint
+     *   (`PUT /api/v2/key/bulk`, per-key compare-and-swap against the old envelope). Resolves
+     *   with the batch response, not a `changedKeys` map. Note that in this mode the envelopes
+     *   are emitted at the shared session's version (`encryptionVersion`, default v2), not
+     *   per-keychain source versions.
+     */
+    safeId?: string;
+    /**
+     * Optional observer invoked once per listed keychain record (`updated` or `skipped`) during password
+     * rotation. Legacy mode (no `safeId`) only: safe mode persists through the bulk key endpoint and never
+     * invokes it.
+     */
+    progressCallback?: KeychainPasswordUpdateProgressCallback;
 }
 export interface UpdateSingleKeychainPasswordOptions {
     keychain?: Keychain;
     oldPassword?: string;
     newPassword?: string;
+    /**
+     * Envelope version to emit. Defaults to preserving the source envelope's version.
+     * Pass `2` to opt in to the Argon2id upgrade.
+     */
+    encryptionVersion?: EncryptionVersion;
+    /** Reuse one password-derived session for this keychain's new envelope. */
+    encryptionSession?: IEncryptionSession;
 }
+/**
+ * Parameters for the rotateKeychain method for ofc multi-user-key
+ * @property {string} id - the public id of the keychain
+ * @property {string} password - the user password use to encrypt/decrypt the private key
+ * @property {IRequestTracer} reqId - optional reqId
+ */
+export type RotateKeychainOptions = {
+    id: string;
+    password: string;
+    reqId?: IRequestTracer;
+    encryptionVersion?: EncryptionVersion;
+} | {
+    id: string;
+    pub: string;
+    encryptedPrv: string;
+    reqId?: IRequestTracer;
+};
 export interface AddKeychainOptions {
     pub?: string;
     commonPub?: string;
@@ -54,7 +170,11 @@ export interface AddKeychainOptions {
     source?: string;
     originalPasscodeEncryptionCode?: string;
     enterprise?: string;
-    derivedFromParentWithSeed?: any;
+    derivedFromParentWithSeed?: string;
+    /** Hardened path from the safe parent (`m/<n>'`). @experimental */
+    derivedFromParentWithPath?: string;
+    /** Safe user-root key id this child was derived from. @experimental */
+    parent?: string;
     disableKRSEmail?: boolean;
     provider?: string;
     reqId?: IRequestTracer;
@@ -63,6 +183,21 @@ export interface AddKeychainOptions {
     userGPGPublicKey?: string;
     backupGPGPublicKey?: string;
     algoUsed?: string;
+    isDistributedCustody?: boolean;
+    isMPCv2?: boolean;
+    coinSpecific?: {
+        [coinName: string]: unknown;
+    };
+    /** WebAuthn devices that have an additional encrypted copy of the private key, keyed by PRF-derived passphrases.
+     *  @deprecated Use {@link webauthnInfo} instead — the backend reads `webauthnInfo` (single object), not `webauthnDevices`. */
+    webauthnDevices?: WebauthnInfo[];
+    /** Single webauthn device to atomically attach during key creation.
+     *  Sent as `webauthnInfo` in the POST /key body so the backend can link
+     *  the passkey to the keychain in the same request. */
+    webauthnInfo?: WebauthnInfo;
+    /** Public id of the safe this key is a root of (Wallet Safes v1). When set, the backend tags
+     *  the key with the safe and stamps its curve server-side. @experimental */
+    safeId?: string;
 }
 export interface ApiKeyShare {
     from: 'user' | 'backup' | 'bitgo';
@@ -70,6 +205,7 @@ export interface ApiKeyShare {
     publicShare: string;
     privateShare: string;
     privateShareProof?: string;
+    paillierPublicKey?: string;
     n?: string;
     vssProof?: string;
 }
@@ -85,19 +221,48 @@ export interface CreateBackupOptions {
     commonKeychain?: string;
     prv?: string;
     encryptedPrv?: string;
+    passphrase?: string;
+    encryptionVersion?: EncryptionVersion;
+    /** Public id of the safe this backup key is a root of (Wallet Safes v1). @experimental */
+    safeId?: string;
 }
 export interface CreateBitGoOptions {
     source?: 'bitgo';
     enterprise?: string;
     reqId?: IRequestTracer;
     keyType?: KeyType;
+    isDistributedCustody?: boolean;
+    /** Public id of the safe this BitGo key is a root of (Wallet Safes v1). @experimental */
+    safeId?: string;
 }
+export type DecryptedRetrofitPayload = {
+    decryptedUserKey: string;
+    decryptedBackupKey: string;
+    walletId: string;
+};
 export interface CreateMpcOptions {
-    multisigType: 'onchain' | 'tss' | 'blsdkg';
+    multisigType: 'onchain' | 'tss';
     passphrase?: string;
     originalPasscodeEncryptionCode?: string;
     enterprise?: string;
-    backupProvider?: BackupProvider;
+    retrofit?: DecryptedRetrofitPayload;
+    webauthnInfo?: WebauthnKeyEncryptionInfo;
+    encryptionVersion?: EncryptionVersion;
+    /** Public id of the safe these MPC root keys belong to (Wallet Safes v1). Threaded through the
+     *  ceremony so the resulting user/backup/bitgo keys land tagged. @experimental */
+    safeId?: string;
+}
+export interface RecreateMpcOptions extends Omit<CreateMpcOptions, 'retrofit' | 'multisigType'> {
+    coin: string;
+    walletId: string;
+    passphrase: string;
+    otp: string;
+    enterprise: string;
+    encryptedMaterial: {
+        encryptedUserKey: string;
+        encryptedBackupKey: string;
+        encryptedWalletPassphrase: string;
+    };
 }
 export interface GetKeysForSigningOptions {
     reqId?: IRequestTracer;
@@ -110,6 +275,11 @@ export interface GetSigningKeyApi {
     derivationPath?: string;
     ecdhKeychain?: string;
 }
+export interface EcdhDerivedKeypair {
+    derivedPubKey: string;
+    derivationPath: string;
+    xprv: string;
+}
 export declare enum KeyIndices {
     USER = 0,
     BACKUP = 1,
@@ -118,16 +288,25 @@ export declare enum KeyIndices {
 export interface IKeychains {
     get(params: GetKeychainOptions): Promise<Keychain>;
     list(params?: ListKeychainOptions): Promise<ListKeychainsResult>;
+    updatePassword(params: UpdatePasswordOptions & {
+        safeId: string;
+    }): Promise<KeyBulkUpdateResponse>;
     updatePassword(params: UpdatePasswordOptions): Promise<ChangedKeychains>;
-    updateSingleKeychainPassword(params?: UpdateSingleKeychainPasswordOptions): Keychain;
+    updateSingleKeychainPassword(params?: UpdateSingleKeychainPasswordOptions): Promise<Keychain>;
+    getEncryptionVersion(ciphertext: string): EncryptionVersion;
+    reencryptAsV2(encryptedPrv: string, passphrase: string): Promise<string>;
     create(params?: {
         seed?: Buffer;
+        isRootKey?: boolean;
     }): KeyPair;
     add(params?: AddKeychainOptions): Promise<Keychain>;
     createBitGo(params?: CreateBitGoOptions): Promise<Keychain>;
     createBackup(params?: CreateBackupOptions): Promise<Keychain>;
     getKeysForSigning(params?: GetKeysForSigningOptions): Promise<Keychain[]>;
     createMpc(params: CreateMpcOptions): Promise<KeychainsTriplet>;
-    createTssBitGoKeyFromOvcShares(ovcOutput: OvcToBitGoJSON): Promise<BitGoKeyFromOvcShares>;
+    recreateMpc(params: RecreateMpcOptions): Promise<KeychainsTriplet>;
+    createTssBitGoKeyFromOvcShares(ovcOutput: OvcToBitGoJSON, enterprise?: string): Promise<BitGoKeyFromOvcShares>;
+    createUserKeychain(userPassword: string, encryptionVersion?: EncryptionVersion, session?: IEncryptionSession): Promise<Keychain>;
+    rotateKeychain(params: RotateKeychainOptions): Promise<Keychain>;
 }
 //# sourceMappingURL=iKeychains.d.ts.map

package/dist/src/bitgo/keychain/iKeychains.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"iKeychains.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/keychain/iKeychains.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEvE,oBAAY,OAAO,GAAG,KAAK,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEvD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB,CAAC,EAAE,GAAG,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IAEtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,oBAAY,UAAU;IACpB,IAAI,IAAI;IACR,MAAM,IAAI;IACV,KAAK,IAAI;CACV;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjE,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzE,4BAA4B,CAAC,MAAM,CAAC,EAAE,mCAAmC,GAAG,QAAQ,CAAC;IACrF,MAAM,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;IAC5C,GAAG,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,WAAW,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5D,YAAY,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9D,iBAAiB,CAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1E,SAAS,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,8BAA8B,CAAC,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC3F"}
+{"version":3,"file":"iKeychains.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/keychain/iKeychains.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEvE,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,kGAAkG;IAClG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACpE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAE1C,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9D,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEzD,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,WAAW,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,yBAAyB,CAAC;IAE7C,OAAO,EAAE,MAAM,CAAC;IAEhB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IAKtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,mEAAmE;IACnE,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,YAAY,CAAC,EAAE;QAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAE/C,eAAe,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAE3C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,4BAA4B,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,GAAG,iBAAiB,CAAC,CAAC;AAE9F,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG;IACtE,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wGAAwG;IACxG,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,4BAA4B,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,4BAA4B,CAAC;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,sCAAsC,GAAG,CAAC,QAAQ,EAAE,8BAA8B,KAAK,IAAI,CAAC;AAExG,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IACvC;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,sCAAsC,CAAC;CAC3D;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IACE,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC,GACD;IACE,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB,CAAC;AAEN,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,mEAAmE;IACnE,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE;QAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC/C;kIAC8H;IAC9H,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC;IACjC;;2DAEuD;IACvD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;gFAC4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,0FAA0F;IAC1F,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,SAAS,GAAG,KAAK,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;sFACkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,cAAc,CAAC;IAC7F,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE;QACjB,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,yBAAyB,EAAE,MAAM,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IAEtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oBAAY,UAAU;IACpB,IAAI,IAAI;IACR,MAAM,IAAI;IACV,KAAK,IAAI;CACV;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjE,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnG,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzE,4BAA4B,CAAC,MAAM,CAAC,EAAE,mCAAmC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9F,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAAC;IAC5D,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;IACjE,GAAG,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,WAAW,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5D,YAAY,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9D,iBAAiB,CAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1E,SAAS,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,WAAW,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnE,8BAA8B,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC/G,kBAAkB,CAChB,YAAY,EAAE,MAAM,EACpB,iBAAiB,CAAC,EAAE,iBAAiB,EACrC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAClE"}

package/dist/src/bitgo/keychain/iKeychains.js

@@ -6,5 +6,5 @@ var KeyIndices;
     KeyIndices[KeyIndices["USER"] = 0] = "USER";
     KeyIndices[KeyIndices["BACKUP"] = 1] = "BACKUP";
     KeyIndices[KeyIndices["BITGO"] = 2] = "BITGO";
-})(KeyIndices = exports.KeyIndices || (exports.KeyIndices = {}));
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaUtleWNoYWlucy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3NyYy9iaXRnby9rZXljaGFpbi9pS2V5Y2hhaW5zLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQWdJQSxJQUFZLFVBSVg7QUFKRCxXQUFZLFVBQVU7SUFDcEIsMkNBQVEsQ0FBQTtJQUNSLCtDQUFVLENBQUE7SUFDViw2Q0FBUyxDQUFBO0FBQ1gsQ0FBQyxFQUpXLFVBQVUsR0FBVixrQkFBVSxLQUFWLGtCQUFVLFFBSXJCIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgSVJlcXVlc3RUcmFjZXIgfSBmcm9tICcuLi8uLi9hcGknO1xuaW1wb3J0IHsgS2V5UGFpciwgS2V5Y2hhaW5zVHJpcGxldCB9IGZyb20gJy4uL2Jhc2VDb2luJztcbmltcG9ydCB7IEJhY2t1cFByb3ZpZGVyLCBJV2FsbGV0IH0gZnJvbSAnLi4vd2FsbGV0JztcbmltcG9ydCB7IEJpdEdvS2V5RnJvbU92Y1NoYXJlcywgT3ZjVG9CaXRHb0pTT04gfSBmcm9tICcuL292Y0pzb25Db2RlYyc7XG5cbmV4cG9ydCB0eXBlIEtleVR5cGUgPSAndHNzJyB8ICdpbmRlcGVuZGVudCcgfCAnYmxzZGtnJztcblxuZXhwb3J0IGludGVyZmFjZSBLZXljaGFpbiB7XG4gIGlkOiBzdHJpbmc7XG4gIHB1Yj86IHN0cmluZztcbiAgcHJ2Pzogc3RyaW5nO1xuICBwcm92aWRlcj86IHN0cmluZztcbiAgZW5jcnlwdGVkUHJ2Pzogc3RyaW5nO1xuICBkZXJpdmF0aW9uUGF0aD86IHN0cmluZztcbiAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZD86IHN0cmluZztcbiAgY29tbW9uUHViPzogc3RyaW5nO1xuICBjb21tb25LZXljaGFpbj86IHN0cmluZztcbiAga2V5U2hhcmVzPzogQXBpS2V5U2hhcmVbXTtcbiAgd2FsbGV0SFNNR1BHUHVibGljS2V5U2lncz86IHN0cmluZztcbiAgdHlwZTogS2V5VHlwZTtcbn1cblxuZXhwb3J0IGludGVyZmFjZSBDaGFuZ2VkS2V5Y2hhaW5zIHtcbiAgW3B1YmtleTogc3RyaW5nXTogc3RyaW5nO1xufVxuXG5leHBvcnQgaW50ZXJmYWNlIExpc3RLZXljaGFpbnNSZXN1bHQge1xuICBrZXlzOiBLZXljaGFpbltdO1xuICBuZXh0QmF0Y2hQcmV2SWQ/OiBzdHJpbmc7XG59XG5cbmV4cG9ydCBpbnRlcmZhY2UgR2V0S2V5Y2hhaW5PcHRpb25zIHtcbiAgaWQ6IHN0cmluZztcbiAgeHB1Yj86IHN0cmluZztcbiAgZXRoQWRkcmVzcz86IHN0cmluZztcbiAgcmVxSWQ/OiBJUmVxdWVzdFRyYWNlcjtcbn1cblxuZXhwb3J0IGludGVyZmFjZSBMaXN0S2V5Y2hhaW5PcHRpb25zIHtcbiAgbGltaXQ/OiBudW1iZXI7XG4gIHByZXZJZD86IHN0cmluZztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBVcGRhdGVQYXNzd29yZE9wdGlvbnMge1xuICBvbGRQYXNzd29yZDogc3RyaW5nO1xuICBuZXdQYXNzd29yZDogc3RyaW5nO1xufVxuXG5leHBvcnQgaW50ZXJmYWNlIFVwZGF0ZVNpbmdsZUtleWNoYWluUGFzc3dvcmRPcHRpb25zIHtcbiAga2V5Y2hhaW4/OiBLZXljaGFpbjtcbiAgb2xkUGFzc3dvcmQ/OiBzdHJpbmc7XG4gIG5ld1Bhc3N3b3JkPzogc3RyaW5nO1xufVxuXG5leHBvcnQgaW50ZXJmYWNlIEFkZEtleWNoYWluT3B0aW9ucyB7XG4gIHB1Yj86IHN0cmluZztcbiAgY29tbW9uUHViPzogc3RyaW5nO1xuICBjb21tb25LZXljaGFpbj86IHN0cmluZztcbiAgZW5jcnlwdGVkUHJ2Pzogc3RyaW5nO1xuICB0eXBlPzogc3RyaW5nO1xuICBrZXlUeXBlPzogS2V5VHlwZTtcbiAgc291cmNlPzogc3RyaW5nO1xuICBvcmlnaW5hbFBhc3Njb2RlRW5jcnlwdGlvbkNvZGU/OiBzdHJpbmc7XG4gIGVudGVycHJpc2U/OiBzdHJpbmc7XG4gIGRlcml2ZWRGcm9tUGFyZW50V2l0aFNlZWQ/OiBhbnk7XG4gIGRpc2FibGVLUlNFbWFpbD86IGJvb2xlYW47XG4gIHByb3ZpZGVyPzogc3RyaW5nO1xuICByZXFJZD86IElSZXF1ZXN0VHJhY2VyO1xuICBrcnNTcGVjaWZpYz86IGFueTtcbiAga2V5U2hhcmVzPzogQXBpS2V5U2hhcmVbXTtcbiAgdXNlckdQR1B1YmxpY0tleT86IHN0cmluZztcbiAgYmFja3VwR1BHUHVibGljS2V5Pzogc3RyaW5nO1xuICBhbGdvVXNlZD86IHN0cmluZztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBBcGlLZXlTaGFyZSB7XG4gIGZyb206ICd1c2VyJyB8ICdiYWNrdXAnIHwgJ2JpdGdvJztcbiAgdG86ICd1c2VyJyB8ICdiYWNrdXAnIHwgJ2JpdGdvJztcbiAgcHVibGljU2hhcmU6IHN0cmluZztcbiAgcHJpdmF0ZVNoYXJlOiBzdHJpbmc7XG4gIHByaXZhdGVTaGFyZVByb29mPzogc3RyaW5nO1xuICBuPzogc3RyaW5nO1xuICB2c3NQcm9vZj86IHN0cmluZztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBDcmVhdGVCYWNrdXBPcHRpb25zIHtcbiAgcHJvdmlkZXI/OiBzdHJpbmc7XG4gIHNvdXJjZT86IHN0cmluZztcbiAgZGlzYWJsZUtSU0VtYWlsPzogYm9vbGVhbjtcbiAga3JzU3BlY2lmaWM/OiBhbnk7XG4gIHR5cGU/OiBzdHJpbmc7XG4gIGtleVR5cGU/OiBLZXlUeXBlO1xuICByZXFJZD86IElSZXF1ZXN0VHJhY2VyO1xuICBjb21tb25QdWI/OiBzdHJpbmc7XG4gIGNvbW1vbktleWNoYWluPzogc3RyaW5nO1xuICBwcnY/OiBzdHJpbmc7XG4gIGVuY3J5cHRlZFBydj86IHN0cmluZztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBDcmVhdGVCaXRHb09wdGlvbnMge1xuICBzb3VyY2U/OiAnYml0Z28nO1xuICBlbnRlcnByaXNlPzogc3RyaW5nO1xuICByZXFJZD86IElSZXF1ZXN0VHJhY2VyO1xuICBrZXlUeXBlPzogS2V5VHlwZTtcbn1cblxuZXhwb3J0IGludGVyZmFjZSBDcmVhdGVNcGNPcHRpb25zIHtcbiAgbXVsdGlzaWdUeXBlOiAnb25jaGFpbicgfCAndHNzJyB8ICdibHNka2cnO1xuICBwYXNzcGhyYXNlPzogc3RyaW5nO1xuICBvcmlnaW5hbFBhc3Njb2RlRW5jcnlwdGlvbkNvZGU/OiBzdHJpbmc7XG4gIGVudGVycHJpc2U/OiBzdHJpbmc7XG4gIGJhY2t1cFByb3ZpZGVyPzogQmFja3VwUHJvdmlkZXI7XG59XG5cbmV4cG9ydCBpbnRlcmZhY2UgR2V0S2V5c0ZvclNpZ25pbmdPcHRpb25zIHtcbiAgcmVxSWQ/OiBJUmVxdWVzdFRyYWNlcjtcbiAgd2FsbGV0PzogSVdhbGxldDtcbn1cblxuZXhwb3J0IGludGVyZmFjZSBHZXRTaWduaW5nS2V5QXBpIHtcbiAgdXNlcklkOiBzdHJpbmc7XG4gIHVzZXJFbWFpbDogc3RyaW5nO1xuICBkZXJpdmVkUHVia2V5OiBzdHJpbmc7XG4gIC8vIFRoZXNlIGFyZSBwcmVzZW50IHdoZW4gdXNlciBmZXRjaGVzIHRoZWlyIG93biBlY2RoIGtleWNoYWluIGZvciBzaWduaW5nLlxuICBkZXJpdmF0aW9uUGF0aD86IHN0cmluZztcbiAgZWNkaEtleWNoYWluPzogc3RyaW5nO1xufVxuXG5leHBvcnQgZW51bSBLZXlJbmRpY2VzIHtcbiAgVVNFUiA9IDAsXG4gIEJBQ0tVUCA9IDEsXG4gIEJJVEdPID0gMixcbn1cblxuZXhwb3J0IGludGVyZmFjZSBJS2V5Y2hhaW5zIHtcbiAgZ2V0KHBhcmFtczogR2V0S2V5Y2hhaW5PcHRpb25zKTogUHJvbWlzZTxLZXljaGFpbj47XG4gIGxpc3QocGFyYW1zPzogTGlzdEtleWNoYWluT3B0aW9ucyk6IFByb21pc2U8TGlzdEtleWNoYWluc1Jlc3VsdD47XG4gIHVwZGF0ZVBhc3N3b3JkKHBhcmFtczogVXBkYXRlUGFzc3dvcmRPcHRpb25zKTogUHJvbWlzZTxDaGFuZ2VkS2V5Y2hhaW5zPjtcbiAgdXBkYXRlU2luZ2xlS2V5Y2hhaW5QYXNzd29yZChwYXJhbXM/OiBVcGRhdGVTaW5nbGVLZXljaGFpblBhc3N3b3JkT3B0aW9ucyk6IEtleWNoYWluO1xuICBjcmVhdGUocGFyYW1zPzogeyBzZWVkPzogQnVmZmVyIH0pOiBLZXlQYWlyO1xuICBhZGQocGFyYW1zPzogQWRkS2V5Y2hhaW5PcHRpb25zKTogUHJvbWlzZTxLZXljaGFpbj47XG4gIGNyZWF0ZUJpdEdvKHBhcmFtcz86IENyZWF0ZUJpdEdvT3B0aW9ucyk6IFByb21pc2U8S2V5Y2hhaW4+O1xuICBjcmVhdGVCYWNrdXAocGFyYW1zPzogQ3JlYXRlQmFja3VwT3B0aW9ucyk6IFByb21pc2U8S2V5Y2hhaW4+O1xuICBnZXRLZXlzRm9yU2lnbmluZyhwYXJhbXM/OiBHZXRLZXlzRm9yU2lnbmluZ09wdGlvbnMpOiBQcm9taXNlPEtleWNoYWluW10+O1xuICBjcmVhdGVNcGMocGFyYW1zOiBDcmVhdGVNcGNPcHRpb25zKTogUHJvbWlzZTxLZXljaGFpbnNUcmlwbGV0PjtcbiAgY3JlYXRlVHNzQml0R29LZXlGcm9tT3ZjU2hhcmVzKG92Y091dHB1dDogT3ZjVG9CaXRHb0pTT04pOiBQcm9taXNlPEJpdEdvS2V5RnJvbU92Y1NoYXJlcz47XG59XG4iXX0=
+})(KeyIndices || (exports.KeyIndices = KeyIndices = {}));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaUtleWNoYWlucy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3NyYy9iaXRnby9rZXljaGFpbi9pS2V5Y2hhaW5zLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQWlVQSxJQUFZLFVBSVg7QUFKRCxXQUFZLFVBQVU7SUFDcEIsMkNBQVEsQ0FBQTtJQUNSLCtDQUFVLENBQUE7SUFDViw2Q0FBUyxDQUFBO0FBQ1gsQ0FBQyxFQUpXLFVBQVUsMEJBQVYsVUFBVSxRQUlyQiIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB0eXBlIHsgS2V5QnVsa1VwZGF0ZVJlc3BvbnNlIH0gZnJvbSAnQGJpdGdvL3B1YmxpYy10eXBlcyc7XG5pbXBvcnQgeyBFbmNyeXB0aW9uVmVyc2lvbiwgSUVuY3J5cHRpb25TZXNzaW9uLCBJUmVxdWVzdFRyYWNlciB9IGZyb20gJy4uLy4uL2FwaSc7XG5pbXBvcnQgeyBLZXljaGFpbnNUcmlwbGV0LCBLZXlQYWlyIH0gZnJvbSAnLi4vYmFzZUNvaW4nO1xuaW1wb3J0IHsgQml0Z29QdWJLZXlUeXBlIH0gZnJvbSAnLi4vdXRpbHMvdHNzL2Jhc2VUeXBlcyc7XG5pbXBvcnQgeyBJV2FsbGV0IH0gZnJvbSAnLi4vd2FsbGV0JztcbmltcG9ydCB7IEJpdEdvS2V5RnJvbU92Y1NoYXJlcywgT3ZjVG9CaXRHb0pTT04gfSBmcm9tICcuL292Y0pzb25Db2RlYyc7XG5cbmV4cG9ydCB0eXBlIEtleVR5cGUgPSAndHNzJyB8ICdpbmRlcGVuZGVudCcgfCAnYmxzZGtnJztcblxuZXhwb3J0IGludGVyZmFjZSBXZWJhdXRobkluZm8ge1xuICBwcmZTYWx0OiBzdHJpbmc7XG4gIG90cERldmljZUlkOiBzdHJpbmc7XG4gIGVuY3J5cHRlZFBydjogc3RyaW5nO1xuICAvKiogUmVxdWlyZWQgYnkgUE9TVCAva2V5IHRvIHZhbGlkYXRlIHRoZSBQUkYgc2FsdDsgbm90IG5lZWRlZCBvbiB0aGUgUFVUIC9rZXkvOmlkIHVwZGF0ZSBwYXRoLiAqL1xuICBlbnRlcnByaXNlSWQ/OiBzdHJpbmc7XG59XG5cbmltcG9ydCB0eXBlIHsgV2ViYXV0aG5LZXlFbmNyeXB0aW9uSW5mbyB9IGZyb20gJy4uL3dhbGxldC9pV2FsbGV0cyc7XG5leHBvcnQgdHlwZSB7IFdlYmF1dGhuS2V5RW5jcnlwdGlvbkluZm8gfTtcblxuZXhwb3J0IHR5cGUgU291cmNlVHlwZSA9ICdiaXRnbycgfCAnYmFja3VwJyB8ICd1c2VyJyB8ICdjb2xkJztcblxuZXhwb3J0IHR5cGUgV2ViYXV0aG5GbXQgPSAnbm9uZScgfCAncGFja2VkJyB8ICdmaWRvLXUyZic7XG5cbmV4cG9ydCBpbnRlcmZhY2UgV2ViYXV0aG5BdXRoZW50aWNhdG9ySW5mbyB7XG4gIGNyZWRJRDogc3RyaW5nO1xuICBmbXQ6IFdlYmF1dGhuRm10O1xuICBwdWJsaWNLZXk6IHN0cmluZztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBLZXljaGFpbldlYmF1dGhuRGV2aWNlIHtcbiAgb3RwRGV2aWNlSWQ6IHN0cmluZztcbiAgYXV0aGVudGljYXRvckluZm86IFdlYmF1dGhuQXV0aGVudGljYXRvckluZm87XG4gIC8vIHNhbHQgZm9yIHRoZSB3ZWJhdXRobiBwcmYgZXh0ZW5zaW9uXG4gIHByZlNhbHQ6IHN0cmluZztcbiAgLy8gV2FsbGV0IHByaXZhdGUga2V5IGVuY3J5cHRlZCB0byB3ZWJhdXRobiBkZXJpdmVkIHBhc3N3b3JkXG4gIGVuY3J5cHRlZFBydjogc3RyaW5nO1xufVxuXG5leHBvcnQgaW50ZXJmYWNlIEtleWNoYWluIHtcbiAgaWQ6IHN0cmluZztcbiAgcHViPzogc3RyaW5nO1xuICBwcnY/OiBzdHJpbmc7XG4gIHByb3ZpZGVyPzogc3RyaW5nO1xuICBlbmNyeXB0ZWRQcnY/OiBzdHJpbmc7XG4gIC8vIFJlcXVpcmVkIGZvciBNUENWMiBrZXlzIHdoZXJlIHdlIHJlZHVjZSB0aGUgYW1vdW50IG9mIGRhdGEgbmVlZGVkIGZvciB0aGUga2V5Y2FyZC5cbiAgLy8gQ29udGFpbnMgdGhlIHBhcnR5J3MgcHJpdmF0ZSBzY2FsYXIgKHNfaSkgYXMgcHJpdmF0ZSBrZXkgbWF0ZXJpYWwsIENCT1ItZW5jb2RlZFxuICAvLyBhbmQgZW5jcnlwdGVkIHdpdGggdGhlIHdhbGxldCBwYXNzcGhyYXNlLiBUaGlzIGlzIG9ubHkgZ2VuZXJhdGVkIGNsaWVudCBzaWRlIGFuZFxuICAvLyBpcyBub3Qgc2VudCB0byBXUC5cbiAgcmVkdWNlZEVuY3J5cHRlZFBydj86IHN0cmluZztcbiAgZGVyaXZhdGlvblBhdGg/OiBzdHJpbmc7XG4gIGRlcml2ZWRGcm9tUGFyZW50V2l0aFNlZWQ/OiBzdHJpbmc7XG4gIC8qKiBIYXJkZW5lZCBwYXRoIGZyb20gdGhlIHNhZmUgcGFyZW50IChgbS88bj4nYCkuIEBleHBlcmltZW50YWwgKi9cbiAgZGVyaXZlZEZyb21QYXJlbnRXaXRoUGF0aD86IHN0cmluZztcbiAgLyoqIFNhZmUgcm9vdCBrZXkgaWQgdGhpcyBjaGlsZCBrZXkgd2FzIGRlcml2ZWQgZnJvbSAoV0NOLTExNzIpLiAqL1xuICBwYXJlbnQ/OiBzdHJpbmc7XG4gIGNvbW1vblB1Yj86IHN0cmluZztcbiAgY29tbW9uS2V5Y2hhaW4/OiBzdHJpbmc7XG4gIGtleVNoYXJlcz86IEFwaUtleVNoYXJlW107XG4gIHdhbGxldEhTTUdQR1B1YmxpY0tleVNpZ3M/OiBzdHJpbmc7XG4gIGhzbVR5cGU/OiBCaXRnb1B1YktleVR5cGU7XG4gIHR5cGU6IEtleVR5cGU7XG4gIHNvdXJjZT86IFNvdXJjZVR5cGU7XG4gIGNvaW5TcGVjaWZpYz86IHsgW2NvaW5OYW1lOiBzdHJpbmddOiB1bmtub3duIH07XG4gIC8vIEFsdGVybmF0aXZlIGVuY3J5cHRlZFBydiB1c2luZyB3ZWJhdXRobiBhbmQgdGhlIHByZiBleHRlbnNpb25cbiAgd2ViYXV0aG5EZXZpY2VzPzogS2V5Y2hhaW5XZWJhdXRobkRldmljZVtdO1xuICAvLyBFdGhlcmV1bSBhZGRyZXNzIGRlcml2ZWQgZnJvbSB4cHViXG4gIGV0aEFkZHJlc3M/OiBzdHJpbmc7XG59XG5cbmV4cG9ydCB0eXBlIE9wdGlvbmFsS2V5Y2hhaW5FbmNyeXB0ZWRLZXkgPSBQaWNrPEtleWNoYWluLCAnZW5jcnlwdGVkUHJ2JyB8ICd3ZWJhdXRobkRldmljZXMnPjtcblxuZXhwb3J0IHR5cGUgS2V5Y2hhaW5XaXRoRW5jcnlwdGVkUHJ2ID0gT21pdDxLZXljaGFpbiwgJ2VuY3J5cHRlZFBydic+ICYge1xuICBlbmNyeXB0ZWRQcnY6IHN0cmluZztcbn07XG5cbmV4cG9ydCBpbnRlcmZhY2UgQ2hhbmdlZEtleWNoYWlucyB7XG4gIFtwdWJrZXk6IHN0cmluZ106IHN0cmluZztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBMaXN0S2V5Y2hhaW5zUmVzdWx0IHtcbiAga2V5czogS2V5Y2hhaW5bXTtcbiAgbmV4dEJhdGNoUHJldklkPzogc3RyaW5nO1xuICAvKiogVG90YWwgb2YgdGhlIGxpc3RlZCBrZXljaGFpbnMg4oCUIHRoZSBjb3VudCBvZiB0aGUgbGlzdCdzIG93biBxdWVyeSAoV0NOLTIwODQgdG90YWwtY291bnQgc3VwcG9ydCkuICovXG4gIHRvdGFsQ291bnQ/OiBudW1iZXI7XG59XG5cbmV4cG9ydCBpbnRlcmZhY2UgR2V0S2V5Y2hhaW5PcHRpb25zIHtcbiAgaWQ6IHN0cmluZztcbiAgeHB1Yj86IHN0cmluZztcbiAgZXRoQWRkcmVzcz86IHN0cmluZztcbiAgcmVxSWQ/OiBJUmVxdWVzdFRyYWNlcjtcbn1cblxuZXhwb3J0IGludGVyZmFjZSBMaXN0S2V5Y2hhaW5PcHRpb25zIHtcbiAgbGltaXQ/OiBudW1iZXI7XG4gIHByZXZJZD86IHN0cmluZztcbiAgLyoqXG4gICAqIFdoZW4gcHJlc2VudCwgdGhlIGxpc3RpbmcgaXMgc2NvcGVkIHRvIHRoZSBrZXlzIG9mIHRoZSBzYWZlIHdpdGggdGhpcyBwdWJsaWMgaWQgaW5zdGVhZCBvZlxuICAgKiB0aGUgY2FsbGVyJ3MgY29pbi13aWRlIGtleSBzZXQuIFJlcXVpcmVzIHNhZmUgYWRtaW47IHRoZSByZXNwb25zZSBzdGlsbCBjYXJyaWVzIG9ubHkgdGhlXG4gICAqIGNhbGxlcidzIG93biBgdXNlcnNbXWAgZW52ZWxvcGVzLiBUaGUgcmVzdWx0IHNldCBpcyBjb2luLWluZGVwZW5kZW50ICh0aGUgc2FtZSBzYWZlIHlpZWxkc1xuICAgKiB0aGUgc2FtZSBrZXlzIGZvciBhbnkgY29pbidzIGtleWNoYWlucygpKSwgc28gYW55IGNvaW4gbWF5IGJlIHVzZWQgZm9yIHRoZSB3YWxrLlxuICAgKi9cbiAgc2FmZUlkPzogc3RyaW5nO1xufVxuXG5leHBvcnQgdHlwZSBLZXljaGFpblBhc3N3b3JkVXBkYXRlU3RhdHVzID0gJ3VwZGF0ZWQnIHwgJ3NraXBwZWQnO1xuXG5leHBvcnQgaW50ZXJmYWNlIEtleWNoYWluUGFzc3dvcmRVcGRhdGVQcm9ncmVzcyB7XG4gIHN0YXR1czogS2V5Y2hhaW5QYXNzd29yZFVwZGF0ZVN0YXR1cztcbiAgY3VycmVudEtleWNoYWluSWQ/OiBzdHJpbmc7XG4gIC8qKlxuICAgKiBUcnV0aGZ1bCB0b3RhbCBvZiB0aGUgbGlzdGVkIGtleWNoYWlucyAoYHRvdGFsQ291bnRgIGZyb20gdGhlIGJhY2tlbmQsIFdDTi0yMDg0KS5cbiAgICogRXZlcnkgbGlzdGVkIHJlY29yZCByZXBvcnRzIGFuIG91dGNvbWUgKHVwZGF0ZWQgfCBza2lwcGVkKSwgc28gYGNvbXBsZXRlZGAgcmVhY2hlc1xuICAgKiB0aGlzIHRvdGFsIGV4YWN0bHkgb24gYW55IGFjY291bnQgY29tcG9zaXRpb24uXG4gICAqL1xuICB0b3RhbD86IG51bWJlcjtcbn1cblxuZXhwb3J0IHR5cGUgS2V5Y2hhaW5QYXNzd29yZFVwZGF0ZVByb2dyZXNzQ2FsbGJhY2sgPSAocHJvZ3Jlc3M6IEtleWNoYWluUGFzc3dvcmRVcGRhdGVQcm9ncmVzcykgPT4gdm9pZDtcblxuZXhwb3J0IGludGVyZmFjZSBVcGRhdGVQYXNzd29yZE9wdGlvbnMge1xuICBvbGRQYXNzd29yZDogc3RyaW5nO1xuICBuZXdQYXNzd29yZDogc3RyaW5nO1xuICAvKipcbiAgICogRW52ZWxvcGUgdmVyc2lvbiB0byBlbWl0IGZvciB0aGUgcmUtZW5jcnlwdGVkIGtleWNoYWlucy4gRGVmYXVsdHMgdG8gcHJlc2VydmluZyBlYWNoXG4gICAqIGtleWNoYWluJ3MgZXhpc3RpbmcgZW52ZWxvcGUgdmVyc2lvbiAobm8gZm9yY2VkIG1pZ3JhdGlvbikuIFBhc3MgYDJgIHRvIG9wdCBpbiB0byB0aGVcbiAgICogQXJnb24yaWQgdXBncmFkZSBmb3IgdjEgKFNKQ0wpIGtleWNoYWlucyBvbmNlIHRoZSBjYWxsZXIgaXMgcmVhZHkgKGUuZy4gYWZ0ZXIgdGhlXG4gICAqIFNlcHQgMTUgYnJlYWtpbmctY2hhbmdlIHdpbmRvdyBjbG9zZXMpLlxuICAgKi9cbiAgZW5jcnlwdGlvblZlcnNpb24/OiBFbmNyeXB0aW9uVmVyc2lvbjtcbiAgLyoqIFJldXNlIG9uZSBwYXNzd29yZC1kZXJpdmVkIHNlc3Npb24gYWNyb3NzIGFsbCBtYXRjaGluZyBrZXljaGFpbnMuICovXG4gIGVuY3J5cHRpb25TZXNzaW9uPzogSUVuY3J5cHRpb25TZXNzaW9uO1xuICAvKipcbiAgICogUm90YXRlIHRoZSBwYXNzcGhyYXNlIG9mIHRoZSBzYWZlIHdpdGggdGhpcyBwdWJsaWMgaWQgaW5zdGVhZCBvZiB0aGUgY2FsbGVyJ3NcbiAgICogY29pbi13aWRlIGtleSBzZXQuIFRoaXMgZmxpcHMgdGhlIG1ldGhvZCdzIGNvbnRyYWN0IOKAlCB0aGUgdHdvIG1vZGVzIGFyZSBOT1QgaW50ZXJjaGFuZ2VhYmxlOlxuICAgKlxuICAgKiAtIFdJVEhPVVQgYHNhZmVJZGAgKGxlZ2FjeSk6IHdhbGtzIGFsbCBvZiB0aGUgY2FsbGVyJ3MgY29pbi1zY29wZWQga2V5Y2hhaW5zLCBzaWxlbnRseVxuICAgKiAgIHNraXBzIGtleWNoYWlucyB0aGF0IGZhaWwgdG8gZGVjcnlwdCwgcmV0dXJucyBhIGBjaGFuZ2VkS2V5c2AgbWFwLCBhbmQgcGVyc2lzdHMgTk9USElORyDigJRcbiAgICogICBwZXJzaXN0ZW5jZSBpcyB0aGUgY2FsbGVyJ3Mgam9iLlxuICAgKiAtIFdJVEggYHNhZmVJZGAgKHNhZmUgbW9kZSk6IHdhbGtzIG9ubHkgdGhlIHNhZmUncyBrZXljaGFpbnMgKHJlcXVpcmVzIHNhZmUgYWRtaW4pLFxuICAgKiAgIGRlY3J5cHRzIGV2ZXJ5IGVudmVsb3BlIHVwLWZyb250IGFuZCBmYWlscyBGQVNUIHdpdGggYEluY29ycmVjdFBhc3N3b3JkRXJyb3JgIG9uIHRoZVxuICAgKiAgIGZpcnN0IHVuZGVjcnlwdGFibGUgb25lICh6ZXJvIHdyaXRlcyksIHJlLWVuY3J5cHRzIHdpdGggYSBzaW5nbGUgc2hhcmVkIGVuY3J5cHRpb25cbiAgICogICBzZXNzaW9uLCBhbmQgcGVyc2lzdHMgZXZlcnl0aGluZyBBVE9NSUNBTExZIHNlcnZlci1zaWRlIHZpYSB0aGUgYmF0Y2ggZW5kcG9pbnRcbiAgICogICAoYFBVVCAvYXBpL3YyL2tleS9idWxrYCwgcGVyLWtleSBjb21wYXJlLWFuZC1zd2FwIGFnYWluc3QgdGhlIG9sZCBlbnZlbG9wZSkuIFJlc29sdmVzXG4gICAqICAgd2l0aCB0aGUgYmF0Y2ggcmVzcG9uc2UsIG5vdCBhIGBjaGFuZ2VkS2V5c2AgbWFwLiBOb3RlIHRoYXQgaW4gdGhpcyBtb2RlIHRoZSBlbnZlbG9wZXNcbiAgICogICBhcmUgZW1pdHRlZCBhdCB0aGUgc2hhcmVkIHNlc3Npb24ncyB2ZXJzaW9uIChgZW5jcnlwdGlvblZlcnNpb25gLCBkZWZhdWx0IHYyKSwgbm90XG4gICAqICAgcGVyLWtleWNoYWluIHNvdXJjZSB2ZXJzaW9ucy5cbiAgICovXG4gIHNhZmVJZD86IHN0cmluZztcbiAgLyoqXG4gICAqIE9wdGlvbmFsIG9ic2VydmVyIGludm9rZWQgb25jZSBwZXIgbGlzdGVkIGtleWNoYWluIHJlY29yZCAoYHVwZGF0ZWRgIG9yIGBza2lwcGVkYCkgZHVyaW5nIHBhc3N3b3JkXG4gICAqIHJvdGF0aW9uLiBMZWdhY3kgbW9kZSAobm8gYHNhZmVJZGApIG9ubHk6IHNhZmUgbW9kZSBwZXJzaXN0cyB0aHJvdWdoIHRoZSBidWxrIGtleSBlbmRwb2ludCBhbmQgbmV2ZXJcbiAgICogaW52b2tlcyBpdC5cbiAgICovXG4gIHByb2dyZXNzQ2FsbGJhY2s/OiBLZXljaGFpblBhc3N3b3JkVXBkYXRlUHJvZ3Jlc3NDYWxsYmFjaztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBVcGRhdGVTaW5nbGVLZXljaGFpblBhc3N3b3JkT3B0aW9ucyB7XG4gIGtleWNoYWluPzogS2V5Y2hhaW47XG4gIG9sZFBhc3N3b3JkPzogc3RyaW5nO1xuICBuZXdQYXNzd29yZD86IHN0cmluZztcbiAgLyoqXG4gICAqIEVudmVsb3BlIHZlcnNpb24gdG8gZW1pdC4gRGVmYXVsdHMgdG8gcHJlc2VydmluZyB0aGUgc291cmNlIGVudmVsb3BlJ3MgdmVyc2lvbi5cbiAgICogUGFzcyBgMmAgdG8gb3B0IGluIHRvIHRoZSBBcmdvbjJpZCB1cGdyYWRlLlxuICAgKi9cbiAgZW5jcnlwdGlvblZlcnNpb24/OiBFbmNyeXB0aW9uVmVyc2lvbjtcbiAgLyoqIFJldXNlIG9uZSBwYXNzd29yZC1kZXJpdmVkIHNlc3Npb24gZm9yIHRoaXMga2V5Y2hhaW4ncyBuZXcgZW52ZWxvcGUuICovXG4gIGVuY3J5cHRpb25TZXNzaW9uPzogSUVuY3J5cHRpb25TZXNzaW9uO1xufVxuXG4vKipcbiAqIFBhcmFtZXRlcnMgZm9yIHRoZSByb3RhdGVLZXljaGFpbiBtZXRob2QgZm9yIG9mYyBtdWx0aS11c2VyLWtleVxuICogQHByb3BlcnR5IHtzdHJpbmd9IGlkIC0gdGhlIHB1YmxpYyBpZCBvZiB0aGUga2V5Y2hhaW5cbiAqIEBwcm9wZXJ0eSB7c3RyaW5nfSBwYXNzd29yZCAtIHRoZSB1c2VyIHBhc3N3b3JkIHVzZSB0byBlbmNyeXB0L2RlY3J5cHQgdGhlIHByaXZhdGUga2V5XG4gKiBAcHJvcGVydHkge0lSZXF1ZXN0VHJhY2VyfSByZXFJZCAtIG9wdGlvbmFsIHJlcUlkXG4gKi9cbmV4cG9ydCB0eXBlIFJvdGF0ZUtleWNoYWluT3B0aW9ucyA9XG4gIHwge1xuICAgICAgaWQ6IHN0cmluZztcbiAgICAgIHBhc3N3b3JkOiBzdHJpbmc7XG4gICAgICByZXFJZD86IElSZXF1ZXN0VHJhY2VyO1xuICAgICAgZW5jcnlwdGlvblZlcnNpb24/OiBFbmNyeXB0aW9uVmVyc2lvbjtcbiAgICB9XG4gIHwge1xuICAgICAgaWQ6IHN0cmluZztcbiAgICAgIHB1Yjogc3RyaW5nO1xuICAgICAgZW5jcnlwdGVkUHJ2OiBzdHJpbmc7XG4gICAgICByZXFJZD86IElSZXF1ZXN0VHJhY2VyO1xuICAgIH07XG5cbmV4cG9ydCBpbnRlcmZhY2UgQWRkS2V5Y2hhaW5PcHRpb25zIHtcbiAgcHViPzogc3RyaW5nO1xuICBjb21tb25QdWI/OiBzdHJpbmc7XG4gIGNvbW1vbktleWNoYWluPzogc3RyaW5nO1xuICBlbmNyeXB0ZWRQcnY/OiBzdHJpbmc7XG4gIHR5cGU/OiBzdHJpbmc7XG4gIGtleVR5cGU/OiBLZXlUeXBlO1xuICBzb3VyY2U/OiBzdHJpbmc7XG4gIG9yaWdpbmFsUGFzc2NvZGVFbmNyeXB0aW9uQ29kZT86IHN0cmluZztcbiAgZW50ZXJwcmlzZT86IHN0cmluZztcbiAgZGVyaXZlZEZyb21QYXJlbnRXaXRoU2VlZD86IHN0cmluZztcbiAgLyoqIEhhcmRlbmVkIHBhdGggZnJvbSB0aGUgc2FmZSBwYXJlbnQgKGBtLzxuPidgKS4gQGV4cGVyaW1lbnRhbCAqL1xuICBkZXJpdmVkRnJvbVBhcmVudFdpdGhQYXRoPzogc3RyaW5nO1xuICAvKiogU2FmZSB1c2VyLXJvb3Qga2V5IGlkIHRoaXMgY2hpbGQgd2FzIGRlcml2ZWQgZnJvbS4gQGV4cGVyaW1lbnRhbCAqL1xuICBwYXJlbnQ/OiBzdHJpbmc7XG4gIGRpc2FibGVLUlNFbWFpbD86IGJvb2xlYW47XG4gIHByb3ZpZGVyPzogc3RyaW5nO1xuICByZXFJZD86IElSZXF1ZXN0VHJhY2VyO1xuICBrcnNTcGVjaWZpYz86IGFueTtcbiAga2V5U2hhcmVzPzogQXBpS2V5U2hhcmVbXTtcbiAgdXNlckdQR1B1YmxpY0tleT86IHN0cmluZztcbiAgYmFja3VwR1BHUHVibGljS2V5Pzogc3RyaW5nO1xuICBhbGdvVXNlZD86IHN0cmluZztcbiAgaXNEaXN0cmlidXRlZEN1c3RvZHk/OiBib29sZWFuO1xuICAvLyBpbmRpY2F0ZXMgaWYgdGhlIGtleSBpcyBNUEN2MiBvciBub3RcbiAgaXNNUEN2Mj86IGJvb2xlYW47XG4gIGNvaW5TcGVjaWZpYz86IHsgW2NvaW5OYW1lOiBzdHJpbmddOiB1bmtub3duIH07XG4gIC8qKiBXZWJBdXRobiBkZXZpY2VzIHRoYXQgaGF2ZSBhbiBhZGRpdGlvbmFsIGVuY3J5cHRlZCBjb3B5IG9mIHRoZSBwcml2YXRlIGtleSwga2V5ZWQgYnkgUFJGLWRlcml2ZWQgcGFzc3BocmFzZXMuXG4gICAqICBAZGVwcmVjYXRlZCBVc2Uge0BsaW5rIHdlYmF1dGhuSW5mb30gaW5zdGVhZCDigJQgdGhlIGJhY2tlbmQgcmVhZHMgYHdlYmF1dGhuSW5mb2AgKHNpbmdsZSBvYmplY3QpLCBub3QgYHdlYmF1dGhuRGV2aWNlc2AuICovXG4gIHdlYmF1dGhuRGV2aWNlcz86IFdlYmF1dGhuSW5mb1tdO1xuICAvKiogU2luZ2xlIHdlYmF1dGhuIGRldmljZSB0byBhdG9taWNhbGx5IGF0dGFjaCBkdXJpbmcga2V5IGNyZWF0aW9uLlxuICAgKiAgU2VudCBhcyBgd2ViYXV0aG5JbmZvYCBpbiB0aGUgUE9TVCAva2V5IGJvZHkgc28gdGhlIGJhY2tlbmQgY2FuIGxpbmtcbiAgICogIHRoZSBwYXNza2V5IHRvIHRoZSBrZXljaGFpbiBpbiB0aGUgc2FtZSByZXF1ZXN0LiAqL1xuICB3ZWJhdXRobkluZm8/OiBXZWJhdXRobkluZm87XG4gIC8qKiBQdWJsaWMgaWQgb2YgdGhlIHNhZmUgdGhpcyBrZXkgaXMgYSByb290IG9mIChXYWxsZXQgU2FmZXMgdjEpLiBXaGVuIHNldCwgdGhlIGJhY2tlbmQgdGFnc1xuICAgKiAgdGhlIGtleSB3aXRoIHRoZSBzYWZlIGFuZCBzdGFtcHMgaXRzIGN1cnZlIHNlcnZlci1zaWRlLiBAZXhwZXJpbWVudGFsICovXG4gIHNhZmVJZD86IHN0cmluZztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBBcGlLZXlTaGFyZSB7XG4gIGZyb206ICd1c2VyJyB8ICdiYWNrdXAnIHwgJ2JpdGdvJztcbiAgdG86ICd1c2VyJyB8ICdiYWNrdXAnIHwgJ2JpdGdvJztcbiAgcHVibGljU2hhcmU6IHN0cmluZztcbiAgcHJpdmF0ZVNoYXJlOiBzdHJpbmc7XG4gIHByaXZhdGVTaGFyZVByb29mPzogc3RyaW5nO1xuICBwYWlsbGllclB1YmxpY0tleT86IHN0cmluZztcbiAgbj86IHN0cmluZztcbiAgdnNzUHJvb2Y/OiBzdHJpbmc7XG59XG5cbmV4cG9ydCBpbnRlcmZhY2UgQ3JlYXRlQmFja3VwT3B0aW9ucyB7XG4gIHByb3ZpZGVyPzogc3RyaW5nO1xuICBzb3VyY2U/OiBzdHJpbmc7XG4gIGRpc2FibGVLUlNFbWFpbD86IGJvb2xlYW47XG4gIGtyc1NwZWNpZmljPzogYW55O1xuICB0eXBlPzogc3RyaW5nO1xuICBrZXlUeXBlPzogS2V5VHlwZTtcbiAgcmVxSWQ/OiBJUmVxdWVzdFRyYWNlcjtcbiAgY29tbW9uUHViPzogc3RyaW5nO1xuICBjb21tb25LZXljaGFpbj86IHN0cmluZztcbiAgcHJ2Pzogc3RyaW5nO1xuICBlbmNyeXB0ZWRQcnY/OiBzdHJpbmc7XG4gIHBhc3NwaHJhc2U/OiBzdHJpbmc7XG4gIGVuY3J5cHRpb25WZXJzaW9uPzogRW5jcnlwdGlvblZlcnNpb247XG4gIC8qKiBQdWJsaWMgaWQgb2YgdGhlIHNhZmUgdGhpcyBiYWNrdXAga2V5IGlzIGEgcm9vdCBvZiAoV2FsbGV0IFNhZmVzIHYxKS4gQGV4cGVyaW1lbnRhbCAqL1xuICBzYWZlSWQ/OiBzdHJpbmc7XG59XG5cbmV4cG9ydCBpbnRlcmZhY2UgQ3JlYXRlQml0R29PcHRpb25zIHtcbiAgc291cmNlPzogJ2JpdGdvJztcbiAgZW50ZXJwcmlzZT86IHN0cmluZztcbiAgcmVxSWQ/OiBJUmVxdWVzdFRyYWNlcjtcbiAga2V5VHlwZT86IEtleVR5cGU7XG4gIGlzRGlzdHJpYnV0ZWRDdXN0b2R5PzogYm9vbGVhbjtcbiAgLyoqIFB1YmxpYyBpZCBvZiB0aGUgc2FmZSB0aGlzIEJpdEdvIGtleSBpcyBhIHJvb3Qgb2YgKFdhbGxldCBTYWZlcyB2MSkuIEBleHBlcmltZW50YWwgKi9cbiAgc2FmZUlkPzogc3RyaW5nO1xufVxuXG5leHBvcnQgdHlwZSBEZWNyeXB0ZWRSZXRyb2ZpdFBheWxvYWQgPSB7XG4gIGRlY3J5cHRlZFVzZXJLZXk6IHN0cmluZztcbiAgZGVjcnlwdGVkQmFja3VwS2V5OiBzdHJpbmc7XG4gIHdhbGxldElkOiBzdHJpbmc7XG59O1xuXG5leHBvcnQgaW50ZXJmYWNlIENyZWF0ZU1wY09wdGlvbnMge1xuICBtdWx0aXNpZ1R5cGU6ICdvbmNoYWluJyB8ICd0c3MnO1xuICBwYXNzcGhyYXNlPzogc3RyaW5nO1xuICBvcmlnaW5hbFBhc3Njb2RlRW5jcnlwdGlvbkNvZGU/OiBzdHJpbmc7XG4gIGVudGVycHJpc2U/OiBzdHJpbmc7XG4gIHJldHJvZml0PzogRGVjcnlwdGVkUmV0cm9maXRQYXlsb2FkO1xuICB3ZWJhdXRobkluZm8/OiBXZWJhdXRobktleUVuY3J5cHRpb25JbmZvO1xuICBlbmNyeXB0aW9uVmVyc2lvbj86IEVuY3J5cHRpb25WZXJzaW9uO1xuICAvKiogUHVibGljIGlkIG9mIHRoZSBzYWZlIHRoZXNlIE1QQyByb290IGtleXMgYmVsb25nIHRvIChXYWxsZXQgU2FmZXMgdjEpLiBUaHJlYWRlZCB0aHJvdWdoIHRoZVxuICAgKiAgY2VyZW1vbnkgc28gdGhlIHJlc3VsdGluZyB1c2VyL2JhY2t1cC9iaXRnbyBrZXlzIGxhbmQgdGFnZ2VkLiBAZXhwZXJpbWVudGFsICovXG4gIHNhZmVJZD86IHN0cmluZztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBSZWNyZWF0ZU1wY09wdGlvbnMgZXh0ZW5kcyBPbWl0PENyZWF0ZU1wY09wdGlvbnMsICdyZXRyb2ZpdCcgfCAnbXVsdGlzaWdUeXBlJz4ge1xuICBjb2luOiBzdHJpbmc7XG4gIHdhbGxldElkOiBzdHJpbmc7XG4gIHBhc3NwaHJhc2U6IHN0cmluZztcbiAgb3RwOiBzdHJpbmc7XG4gIGVudGVycHJpc2U6IHN0cmluZztcbiAgZW5jcnlwdGVkTWF0ZXJpYWw6IHtcbiAgICBlbmNyeXB0ZWRVc2VyS2V5OiBzdHJpbmc7XG4gICAgZW5jcnlwdGVkQmFja3VwS2V5OiBzdHJpbmc7XG4gICAgZW5jcnlwdGVkV2FsbGV0UGFzc3BocmFzZTogc3RyaW5nO1xuICB9O1xufVxuXG5leHBvcnQgaW50ZXJmYWNlIEdldEtleXNGb3JTaWduaW5nT3B0aW9ucyB7XG4gIHJlcUlkPzogSVJlcXVlc3RUcmFjZXI7XG4gIHdhbGxldD86IElXYWxsZXQ7XG59XG5cbmV4cG9ydCBpbnRlcmZhY2UgR2V0U2lnbmluZ0tleUFwaSB7XG4gIHVzZXJJZDogc3RyaW5nO1xuICB1c2VyRW1haWw6IHN0cmluZztcbiAgZGVyaXZlZFB1YmtleTogc3RyaW5nO1xuICAvLyBUaGVzZSBhcmUgcHJlc2VudCB3aGVuIHVzZXIgZmV0Y2hlcyB0aGVpciBvd24gZWNkaCBrZXljaGFpbiBmb3Igc2lnbmluZy5cbiAgZGVyaXZhdGlvblBhdGg/OiBzdHJpbmc7XG4gIGVjZGhLZXljaGFpbj86IHN0cmluZztcbn1cblxuZXhwb3J0IGludGVyZmFjZSBFY2RoRGVyaXZlZEtleXBhaXIge1xuICBkZXJpdmVkUHViS2V5OiBzdHJpbmc7IC8vIEhleCBzdHJpbmdcbiAgZGVyaXZhdGlvblBhdGg6IHN0cmluZzsgLy8gRGVyaXZhdGlvbiBwYXRoIG9mIHRoZSBrZXlwYWlyXG4gIHhwcnY6IHN0cmluZztcbn1cblxuZXhwb3J0IGVudW0gS2V5SW5kaWNlcyB7XG4gIFVTRVIgPSAwLFxuICBCQUNLVVAgPSAxLFxuICBCSVRHTyA9IDIsXG59XG5cbmV4cG9ydCBpbnRlcmZhY2UgSUtleWNoYWlucyB7XG4gIGdldChwYXJhbXM6IEdldEtleWNoYWluT3B0aW9ucyk6IFByb21pc2U8S2V5Y2hhaW4+O1xuICBsaXN0KHBhcmFtcz86IExpc3RLZXljaGFpbk9wdGlvbnMpOiBQcm9taXNlPExpc3RLZXljaGFpbnNSZXN1bHQ+O1xuICB1cGRhdGVQYXNzd29yZChwYXJhbXM6IFVwZGF0ZVBhc3N3b3JkT3B0aW9ucyAmIHsgc2FmZUlkOiBzdHJpbmcgfSk6IFByb21pc2U8S2V5QnVsa1VwZGF0ZVJlc3BvbnNlPjtcbiAgdXBkYXRlUGFzc3dvcmQocGFyYW1zOiBVcGRhdGVQYXNzd29yZE9wdGlvbnMpOiBQcm9taXNlPENoYW5nZWRLZXljaGFpbnM+O1xuICB1cGRhdGVTaW5nbGVLZXljaGFpblBhc3N3b3JkKHBhcmFtcz86IFVwZGF0ZVNpbmdsZUtleWNoYWluUGFzc3dvcmRPcHRpb25zKTogUHJvbWlzZTxLZXljaGFpbj47XG4gIGdldEVuY3J5cHRpb25WZXJzaW9uKGNpcGhlcnRleHQ6IHN0cmluZyk6IEVuY3J5cHRpb25WZXJzaW9uO1xuICByZWVuY3J5cHRBc1YyKGVuY3J5cHRlZFBydjogc3RyaW5nLCBwYXNzcGhyYXNlOiBzdHJpbmcpOiBQcm9taXNlPHN0cmluZz47XG4gIGNyZWF0ZShwYXJhbXM/OiB7IHNlZWQ/OiBCdWZmZXI7IGlzUm9vdEtleT86IGJvb2xlYW4gfSk6IEtleVBhaXI7XG4gIGFkZChwYXJhbXM/OiBBZGRLZXljaGFpbk9wdGlvbnMpOiBQcm9taXNlPEtleWNoYWluPjtcbiAgY3JlYXRlQml0R28ocGFyYW1zPzogQ3JlYXRlQml0R29PcHRpb25zKTogUHJvbWlzZTxLZXljaGFpbj47XG4gIGNyZWF0ZUJhY2t1cChwYXJhbXM/OiBDcmVhdGVCYWNrdXBPcHRpb25zKTogUHJvbWlzZTxLZXljaGFpbj47XG4gIGdldEtleXNGb3JTaWduaW5nKHBhcmFtcz86IEdldEtleXNGb3JTaWduaW5nT3B0aW9ucyk6IFByb21pc2U8S2V5Y2hhaW5bXT47XG4gIGNyZWF0ZU1wYyhwYXJhbXM6IENyZWF0ZU1wY09wdGlvbnMpOiBQcm9taXNlPEtleWNoYWluc1RyaXBsZXQ+O1xuICByZWNyZWF0ZU1wYyhwYXJhbXM6IFJlY3JlYXRlTXBjT3B0aW9ucyk6IFByb21pc2U8S2V5Y2hhaW5zVHJpcGxldD47XG4gIGNyZWF0ZVRzc0JpdEdvS2V5RnJvbU92Y1NoYXJlcyhvdmNPdXRwdXQ6IE92Y1RvQml0R29KU09OLCBlbnRlcnByaXNlPzogc3RyaW5nKTogUHJvbWlzZTxCaXRHb0tleUZyb21PdmNTaGFyZXM+O1xuICBjcmVhdGVVc2VyS2V5Y2hhaW4oXG4gICAgdXNlclBhc3N3b3JkOiBzdHJpbmcsXG4gICAgZW5jcnlwdGlvblZlcnNpb24/OiBFbmNyeXB0aW9uVmVyc2lvbixcbiAgICBzZXNzaW9uPzogSUVuY3J5cHRpb25TZXNzaW9uXG4gICk6IFByb21pc2U8S2V5Y2hhaW4+O1xuICByb3RhdGVLZXljaGFpbihwYXJhbXM6IFJvdGF0ZUtleWNoYWluT3B0aW9ucyk6IFByb21pc2U8S2V5Y2hhaW4+O1xufVxuIl19

package/dist/src/bitgo/keychain/index.d.ts

@@ -1,4 +1,5 @@
 export * from './iKeychains';
 export * from './keychains';
 export * from './ovcJsonCodec';
+export * from './decryptKeychain';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/bitgo/keychain/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/keychain/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/keychain/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC"}

package/dist/src/bitgo/keychain/index.js

@@ -1,7 +1,11 @@
 "use strict";
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
-    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
 }) : (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     o[k2] = m[k];
@@ -13,4 +17,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./iKeychains"), exports);
 __exportStar(require("./keychains"), exports);
 __exportStar(require("./ovcJsonCodec"), exports);
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYml0Z28va2V5Y2hhaW4vaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7O0FBQUEsK0NBQTZCO0FBQzdCLDhDQUE0QjtBQUM1QixpREFBK0IiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgKiBmcm9tICcuL2lLZXljaGFpbnMnO1xuZXhwb3J0ICogZnJvbSAnLi9rZXljaGFpbnMnO1xuZXhwb3J0ICogZnJvbSAnLi9vdmNKc29uQ29kZWMnO1xuIl19
+__exportStar(require("./decryptKeychain"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYml0Z28va2V5Y2hhaW4vaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLCtDQUE2QjtBQUM3Qiw4Q0FBNEI7QUFDNUIsaURBQStCO0FBQy9CLG9EQUFrQyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vaUtleWNoYWlucyc7XG5leHBvcnQgKiBmcm9tICcuL2tleWNoYWlucyc7XG5leHBvcnQgKiBmcm9tICcuL292Y0pzb25Db2RlYyc7XG5leHBvcnQgKiBmcm9tICcuL2RlY3J5cHRLZXljaGFpbic7XG4iXX0=

package/dist/src/bitgo/keychain/keychains.d.ts

@@ -1,8 +1,9 @@
-/// <reference types="node" />
+import { KeyBulkUpdateResponse } from '@bitgo/public-types';
 import { IBaseCoin, KeychainsTriplet, KeyPair } from '../baseCoin';
 import { BitGoBase } from '../bitgoBase';
-import { AddKeychainOptions, ChangedKeychains, CreateBackupOptions, CreateBitGoOptions, CreateMpcOptions, GetKeychainOptions, GetKeysForSigningOptions, IKeychains, Keychain, ListKeychainOptions, ListKeychainsResult, UpdatePasswordOptions, UpdateSingleKeychainPasswordOptions } from './iKeychains';
+import { AddKeychainOptions, ChangedKeychains, CreateBackupOptions, CreateBitGoOptions, CreateMpcOptions, GetKeychainOptions, GetKeysForSigningOptions, IKeychains, Keychain, ListKeychainOptions, ListKeychainsResult, RecreateMpcOptions, RotateKeychainOptions, UpdatePasswordOptions, UpdateSingleKeychainPasswordOptions } from './iKeychains';
 import { BitGoKeyFromOvcShares } from './ovcJsonCodec';
+import { EncryptionVersion, IEncryptionSession } from '../../api';
 export declare class Keychains implements IKeychains {
     private readonly bitgo;
     private readonly baseCoin;
@@ -21,43 +22,113 @@ export declare class Keychains implements IKeychains {
      * @param params
      * @param params.limit - Max number of results in a single call.
      * @param params.prevId - Continue iterating (provided by nextBatchPrevId in the previous list)
+     * @param params.safeId - Optional safe id; scopes the listing to the safe's keys (requires safe
+     *   admin). The result set is coin-independent — the same safe yields the same keys through any
+     *   coin's keychains().
      * @returns {*}
      */
     list(params?: ListKeychainOptions): Promise<ListKeychainsResult>;
     /**
-     * Change the decryption password for all possible keychains associated with a user.
+     * Change the decryption password for keychains. One method, two modes — the optional `safeId`
+     * parameter flips BOTH the error philosophy and the persistence story, so pick the mode
+     * deliberately:
      *
-     * This function iterates through all keys associated with the user, decrypts
-     * them with the old password and re-encrypts them with the new password.
+     * **Legacy mode (no `safeId`)** — login-password sync. Walks all keychains associated with the
+     * user for this coin, decrypts each one with `oldPassword` and re-encrypts it with
+     * `newPassword`, silently skipping keychains that fail to decrypt (e.g. wallets that never
+     * matched the login password). Persists NOTHING: the returned `changedKeys` map
+     * (`{ xpub|keyId → newEncryptedPrv }`) is the caller's job to persist.
      *
-     * This should be called when a user changes their login password, and are expecting
-     * that their wallet passwords are changed to match the new login password.
+     * **Safe mode (`safeId` present)** — safe passphrase rotation. Requires safe admin. Walks the
+     * safe's keychains (all slots plus every minted MPC wallet's user key; keychains without an
+     * `encryptedPrv` are skipped), decrypts every envelope with `oldPassword` BEFORE any write and
+     * fails fast with `IncorrectPasswordError` on the first undecryptable one — so a wrong
+     * passphrase results in zero writes instead of a half-rotated safe. Re-encrypts through a
+     * single shared encryption session (one Argon2 for the whole fan-out) and persists everything
+     * atomically server-side via the coinless batch endpoint `PUT /api/v2/key/bulk`, per-key
+     * compare-and-swap against the old envelope (a stale envelope — e.g. after an in-flight mint —
+     * is rejected with a 409 naming the key; within one batch the write is all-or-nothing, so
+     * re-running the rotation recovers). Batches past {@link BULK_KEY_UPDATE_BATCH_SIZE} items are
+     * chunked and each chunk commits independently: a failure after an earlier chunk has committed
+     * leaves mixed old/new envelopes that a re-run with the old passphrase cannot recover from.
+     * Resolves with the batch response, NOT a `changedKeys` map. In this mode envelopes are
+     * emitted at the shared session's version (`encryptionVersion`, default v2), not
+     * per-keychain source versions; when both `encryptionSession` and `encryptionVersion` are
+     * supplied, the provided session wins and `encryptionVersion` is ignored.
+     *
+     * Keychains that cannot be decrypted with `oldPassword` are silently skipped
+     * (absent from the result): wrong password, a different passphrase, or
+     * corrupt input. An empty result is not an error.
      *
      * @param params
      * @param params.oldPassword - The old password used for encrypting the key
      * @param params.newPassword - The new password to be used for encrypting the key
-     * @returns changedKeys Object - e.g.:
+     * @param params.safeId - Optional safe id; switches to safe mode (see above)
+     * @returns legacy mode: changedKeys Object - e.g.:
      *  {
      *    xpub1: encryptedPrv,
      *    ...
      *  }
+     * @returns safe mode: the batch response, one `{ keyId, updated }` item per rotated key
      */
+    updatePassword(params: UpdatePasswordOptions & {
+        safeId: string;
+    }): Promise<KeyBulkUpdateResponse>;
     updatePassword(params: UpdatePasswordOptions): Promise<ChangedKeychains>;
     /**
-     * Update the password used to decrypt a single keychain
+     * Safe-mode implementation of {@link Keychains.updatePassword} (`params.safeId` present).
+     *
+     * Walks the safe's keychains page by page (`GET /:coin/key?safeId=...`), decrypts every
+     * envelope with the old password as it goes (the fail-fast preflight — the first
+     * undecryptable envelope aborts with zero writes, so old and new envelopes can never be
+     * mixed by a half-rotation), re-encrypts through one shared encryption session, and persists
+     * the whole fan-out through the coinless batch endpoint (chunked past
+     * {@link BULK_KEY_UPDATE_BATCH_SIZE} items; each chunk commits independently, so a mid-chunk
+     * failure leaves mixed old/new envelopes that re-running the walk with the old passphrase
+     * cannot recover — callers must resume deliberately).
+     */
+    private updateSafePassword;
+    /**
+     * Determine the encryption version of a ciphertext by inspecting its "v" field.
+     *   - v1 (SJCL / PBKDF2-SHA256 + AES-256-CCM): "v" absent or explicitly 1
+     *   - v2 (Argon2id + AES-256-GCM): "v" === 2
+     * Throws on unrecognized values so callers cannot silently mis-handle unknown envelopes.
+     */
+    getEncryptionVersion(ciphertext: string): EncryptionVersion;
+    /**
+     * Update the password used to decrypt a single keychain. Defaults to preserving the
+     * source envelope version (v1 stays v1, v2 stays v2), so this is a no-op with respect to
+     * encryption version unless the caller opts in. Pass `encryptionVersion: 2` to explicitly
+     * upgrade a v1 (SJCL) keychain to v2 (Argon2id + AES-256-GCM) as part of the password change
+     * (e.g. once a caller is ready, after the Sept 15 breaking-change window closes).
      * @param params
      * @param params.keychain - The keychain whose password should be updated
      * @param params.oldPassword - The old password used for encrypting the key
      * @param params.newPassword - The new password to be used for encrypting the key
-     * @returns {object}
+     * @param params.encryptionVersion - Optional envelope version to emit; defaults to the source envelope's version
+     * @returns {Promise<Keychain>}
+     */
+    updateSingleKeychainPassword(params?: UpdateSingleKeychainPasswordOptions): Promise<Keychain>;
+    /**
+     * Decrypt an encrypted private key with `passphrase` and re-encrypt it as a v2
+     * (Argon2id + AES-256-GCM) envelope with the same passphrase.
+     *
+     * Used to upgrade legacy v1 (SJCL) envelopes to v2 without changing the passphrase.
+     * Callers that need to try a fallback passphrase (e.g. an original passphrase from
+     * before a password rotation) should handle that themselves — this primitive does one
+     * thing and lets decryption errors surface directly.
      */
-    updateSingleKeychainPassword(params?: UpdateSingleKeychainPasswordOptions): Keychain;
+    reencryptAsV2(encryptedPrv: string, passphrase: string): Promise<string>;
     /**
      * Create a public/private key pair
-     * @param params.seed
+     * @param params - optional params
+     * @param params.seed optional - seed to use for keypair generation
+     * @param params.isRootKey optional - whether the resulting keypair should be a root key
+     * @returns {KeyPair} - the generated keypair
      */
     create(params?: {
         seed?: Buffer;
+        isRootKey?: boolean;
     }): KeyPair;
     /**
      * Add a keychain to BitGo's records
@@ -87,13 +158,35 @@ export declare class Keychains implements IKeychains {
      * @return {Promise<KeychainsTriplet>} newly created User, Backup, and BitGo keys
      */
     createMpc(params: CreateMpcOptions): Promise<KeychainsTriplet>;
+    recreateMpc(params: RecreateMpcOptions): Promise<KeychainsTriplet>;
     /**
      * It parses the JSON downloaded from the OVC for platform (BitGo),
      * and creates a corresponding TSS BitGo key. It also returns the JSON that needs
      * to be uploaded back to the OVCs containing the BitGo -> OVC shares.
      * @param ovcOutputJson JSON format of the file downloaded from the OVC for platform
+     * @param enterprise Optional enterprise ID associated with the key
      * @returns {BitGoKeyFromOvcShares}
      */
-    createTssBitGoKeyFromOvcShares(ovcOutputJson: unknown): Promise<BitGoKeyFromOvcShares>;
+    createTssBitGoKeyFromOvcShares(ovcOutputJson: unknown, enterprise?: string): Promise<BitGoKeyFromOvcShares>;
+    /**
+     * Create user keychain, encrypt the private key with the wallet passphrase and store it in BitGo.
+     * @param walletPassphrase
+     * @returns Keychain including the decrypted private key
+     */
+    createUserKeychain(walletPassphrase: string, encryptionVersion?: EncryptionVersion, session?: IEncryptionSession): Promise<Keychain>;
+    /**
+     * Rotate an ofc multi-user-keychain by recreating a new keypair, encrypt it using the user password and sent it to WP
+     * This is only meant to be called by ofc multi-user-wallet's key, and will throw if otherwise.
+     *
+     * Requires 2fa auth before calling. Call the bitgo.unlock() SDK method to unlock the session first.
+     * @param params parameters for the rotate keychain method
+     * @return rotatedKeychain
+     */
+    rotateKeychain(params: RotateKeychainOptions): Promise<Keychain>;
+    /**
+     * Static helper method to determine if a keychain is a ofc multi-user-key
+     * @param keychain
+     */
+    static isMultiUserKey(keychain: Keychain): boolean;
 }
 //# sourceMappingURL=keychains.d.ts.map

package/dist/src/bitgo/keychain/keychains.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keychains.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/keychain/keychains.ts"],"names":[],"mappings":";AAGA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EACL,kBAAkB,EAElB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,UAAU,EACV,QAAQ,EACR,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,mCAAmC,EACpC,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,qBAAqB,EAAkB,MAAM,gBAAgB,CAAC;AAEvE,qBAAa,SAAU,YAAW,UAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAY;gBAEzB,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS;IAKjD;;;;;;;OAOG;IACG,GAAG,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAcxD;;;;;;OAMG;IACG,IAAI,CAAC,MAAM,GAAE,mBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAmB1E;;;;;;;;;;;;;;;;;OAiBG;IACG,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyC9E;;;;;;;OAOG;IACH,4BAA4B,CAAC,MAAM,GAAE,mCAAwC,GAAG,QAAQ;IAwBxF;;;OAGG;IACH,MAAM,CAAC,MAAM,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO;IAI/C;;;OAGG;IACG,GAAG,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAmD7D;;;OAGG;IACG,WAAW,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAOrE;;;;OAIG;IACG,YAAY,CAAC,MAAM,GAAE,mBAAwB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAevE;;;;OAIG;IACG,iBAAiB,CAAC,MAAM,GAAE,wBAA6B,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAWnF;;;;OAIG;IACG,SAAS,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwBpE;;;;;;OAMG;IACG,8BAA8B,CAAC,aAAa,EAAE,OAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAkG7F"}
+{"version":3,"file":"keychains.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/keychain/keychains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAIjG,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AASzC,OAAO,EACL,kBAAkB,EAElB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,UAAU,EACV,QAAQ,EACR,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,mCAAmC,EACpC,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAkC,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAOlE,qBAAa,SAAU,YAAW,UAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAY;gBAEzB,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS;IAKjD;;;;;;;OAOG;IACG,GAAG,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAcxD;;;;;;;;;OASG;IACG,IAAI,CAAC,MAAM,GAAE,mBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAyB1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0CG;IACG,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAClG,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmF9E;;;;;;;;;;;OAWG;YACW,kBAAkB;IAyEhC;;;;;OAKG;IACH,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB;IAgB3D;;;;;;;;;;;;OAYG;IACG,4BAA4B,CAAC,MAAM,GAAE,mCAAwC,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+BvG;;;;;;;;OAQG;IACG,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK9E;;;;;;OAMG;IACH,MAAM,CAAC,MAAM,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO;IAOpE;;;OAGG;IACG,GAAG,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC;IA8D7D;;;OAGG;IACG,WAAW,CAAC,MAAM,GAAE,kBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAOrE;;;;OAIG;IACG,YAAY,CAAC,MAAM,GAAE,mBAAwB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkCvE;;;;OAIG;IACG,iBAAiB,CAAC,MAAM,GAAE,wBAA6B,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAWnF;;;;OAIG;IACG,SAAS,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmD9D,WAAW,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgDxE;;;;;;;OAOG;IACG,8BAA8B,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA0GjH;;;;OAIG;IACG,kBAAkB,CACtB,gBAAgB,EAAE,MAAM,EACxB,iBAAiB,CAAC,EAAE,iBAAiB,EACrC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,QAAQ,CAAC;IA0BpB;;;;;;;OAOG;IACG,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAmCtE;;;OAGG;IACH,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO;CAGnD"}