@catena/cli 0.7.0 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.mjs CHANGED
@@ -1,5 +1,5 @@
1
1
  #!/usr/bin/env node
2
- import{C as e,S as t,_ as n,b as r,g as i,v as a,x as o,y as s}from"./dist-B0qgGwAq.mjs";import{n as c}from"./base64-WTSXTrii.mjs";import{defineCommand as l,renderUsage as u,runMain as d}from"citty";import*as f from"valibot";import{ECDH as p,createECDH as m,createHash as h,createPrivateKey as g,randomBytes as _,sign as v}from"node:crypto";import{execFile as y,spawn as b}from"node:child_process";import{accessSync as x,chmodSync as S,constants as C,existsSync as w,mkdirSync as T,readFileSync as ee,realpathSync as E,renameSync as D,rmSync as O,statSync as k,writeFileSync as A}from"node:fs";import{homedir as j}from"node:os";import{dirname as M,isAbsolute as te,join as ne,resolve as re}from"node:path";import{createServer as N}from"node:http";import{constants as ie,isUtf8 as ae}from"node:buffer";import P from"semver";var oe=`@catena/cli`,se=`0.7.0`,ce=[`u8`,`u16`,`u32`,`u64`,`u128`,`i8`,`i16`,`i32`,`i64`,`i128`,`f32`,`f64`],le=function(){function e(){this.offset=0,this.buffer_size=256,this.buffer=new ArrayBuffer(this.buffer_size),this.view=new DataView(this.buffer)}return e.prototype.resize_if_necessary=function(e){if(this.buffer_size-this.offset<e){this.buffer_size=Math.max(this.buffer_size*2,this.buffer_size+e);var t=new ArrayBuffer(this.buffer_size);new Uint8Array(t).set(new Uint8Array(this.buffer)),this.buffer=t,this.view=new DataView(t)}},e.prototype.get_used_buffer=function(){return new Uint8Array(this.buffer).slice(0,this.offset)},e.prototype.store_value=function(e,t){var n=t.substring(1),r=parseInt(n)/8;this.resize_if_necessary(r);var i=t[0]===`f`?`setFloat${n}`:t[0]===`i`?`setInt${n}`:`setUint${n}`;this.view[i](this.offset,e,!0),this.offset+=r},e.prototype.store_bytes=function(e){this.resize_if_necessary(e.length),new Uint8Array(this.buffer).set(new Uint8Array(e),this.offset),this.offset+=e.length},e}(),ue=function(){function e(e){this.offset=0,this.buffer_size=e.length,this.buffer=new ArrayBuffer(e.length),new Uint8Array(this.buffer).set(e),this.view=new DataView(this.buffer)}return e.prototype.assert_enough_buffer=function(e){if(this.offset+e>this.buffer.byteLength)throw Error(`Error in schema, the buffer is smaller than expected`)},e.prototype.consume_value=function(e){var t=e.substring(1),n=parseInt(t)/8;this.assert_enough_buffer(n);var r=e[0]===`f`?`getFloat${t}`:e[0]===`i`?`getInt${t}`:`getUint${t}`,i=this.view[r](this.offset,!0);return this.offset+=n,i},e.prototype.consume_bytes=function(e){this.assert_enough_buffer(e);var t=this.buffer.slice(this.offset,this.offset+e);return this.offset+=e,t},e}(),de=(function(){var e=function(t,n){return e=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};return function(t,n){if(typeof n!=`function`&&n!==null)throw TypeError(`Class extends value `+String(n)+` is not a constructor or null`);e(t,n);function r(){this.constructor=t}t.prototype=n===null?Object.create(n):(r.prototype=n.prototype,new r)}})();function fe(e){return Array.isArray(e)||!!e&&typeof e==`object`&&`length`in e&&typeof e.length==`number`&&(e.length===0||e.length>0&&e.length-1 in e)}function pe(e,t,n){if(typeof e!==t)throw Error(`Expected ${t} not ${typeof e}(${e}) at ${n.join(`.`)}`)}function me(e,t){var n=[`number`,`string`,`bigint`,`boolean`].includes(typeof e),r=typeof e==`object`&&!!e&&`toString`in e;if(!n&&!r)throw Error(`Expected bigint, number, boolean or string not ${typeof e}(${e}) at ${t.join(`.`)}`)}function he(e,t,n){if(e!==t)throw Error(`Array length ${e} does not match schema length ${t} at ${n.join(`.`)}`)}function F(e,t){if(typeof e!=`object`||!e)throw Error(`Expected object not ${typeof e}(${e}) at ${t.join(`.`)}`)}ce.concat([`bool`,`string`]),function(e){de(t,e);function t(t,n){var r=`Invalid schema: ${JSON.stringify(t)} expected ${n}`;return e.call(this,r)||this}return t}(Error),function(){function e(e){this.encoded=new le,this.fieldPath=[`value`],this.checkTypes=e}return e.prototype.encode=function(e,t){return this.encode_value(e,t),this.encoded.get_used_buffer()},e.prototype.encode_value=function(e,t){if(typeof t==`string`){if(ce.includes(t))return this.encode_integer(e,t);if(t===`string`)return this.encode_string(e);if(t===`bool`)return this.encode_boolean(e)}if(typeof t==`object`){if(`option`in t)return this.encode_option(e,t);if(`enum`in t)return this.encode_enum(e,t);if(`array`in t)return this.encode_array(e,t);if(`set`in t)return this.encode_set(e,t);if(`map`in t)return this.encode_map(e,t);if(`struct`in t)return this.encode_struct(e,t)}},e.prototype.encode_integer=function(e,t){var n=parseInt(t.substring(1));n<=32||t==`f64`?(this.checkTypes&&pe(e,`number`,this.fieldPath),this.encoded.store_value(e,t)):(this.checkTypes&&me(e,this.fieldPath),this.encode_bigint(BigInt(e),n))},e.prototype.encode_bigint=function(e,t){for(var n=t/8,r=new Uint8Array(n),i=0;i<n;i++)r[i]=Number(e&BigInt(255)),e>>=BigInt(8);this.encoded.store_bytes(new Uint8Array(r))},e.prototype.encode_string=function(e){this.checkTypes&&pe(e,`string`,this.fieldPath);for(var t=e,n=[],r=0;r<t.length;r++){var i=t.charCodeAt(r);i<128?n.push(i):i<2048?n.push(192|i>>6,128|i&63):i<55296||i>=57344?n.push(224|i>>12,128|i>>6&63,128|i&63):(r++,i=65536+((i&1023)<<10|t.charCodeAt(r)&1023),n.push(240|i>>18,128|i>>12&63,128|i>>6&63,128|i&63))}this.encoded.store_value(n.length,`u32`),this.encoded.store_bytes(new Uint8Array(n))},e.prototype.encode_boolean=function(e){this.checkTypes&&pe(e,`boolean`,this.fieldPath),this.encoded.store_value(+!!e,`u8`)},e.prototype.encode_option=function(e,t){e==null?this.encoded.store_value(0,`u8`):(this.encoded.store_value(1,`u8`),this.encode_value(e,t.option))},e.prototype.encode_enum=function(e,t){this.checkTypes&&F(e,this.fieldPath);for(var n=Object.keys(e)[0],r=0;r<t.enum.length;r++){var i=t.enum[r];if(n===Object.keys(i.struct)[0])return this.encoded.store_value(r,`u8`),this.encode_struct(e,i)}throw Error(`Enum key (${n}) not found in enum schema: ${JSON.stringify(t)} at ${this.fieldPath.join(`.`)}`)},e.prototype.encode_array=function(e,t){if(fe(e))return this.encode_arraylike(e,t);if(e instanceof ArrayBuffer)return this.encode_buffer(e,t);throw Error(`Expected Array-like not ${typeof e}(${e}) at ${this.fieldPath.join(`.`)}`)},e.prototype.encode_arraylike=function(e,t){t.array.len?he(e.length,t.array.len,this.fieldPath):this.encoded.store_value(e.length,`u32`);for(var n=0;n<e.length;n++)this.encode_value(e[n],t.array.type)},e.prototype.encode_buffer=function(e,t){t.array.len?he(e.byteLength,t.array.len,this.fieldPath):this.encoded.store_value(e.byteLength,`u32`),this.encoded.store_bytes(new Uint8Array(e))},e.prototype.encode_set=function(e,t){this.checkTypes&&pe(e,`object`,this.fieldPath);var n=e instanceof Set?Array.from(e.values()):Object.values(e);this.encoded.store_value(n.length,`u32`);for(var r=0,i=n;r<i.length;r++){var a=i[r];this.encode_value(a,t.set)}},e.prototype.encode_map=function(e,t){this.checkTypes&&pe(e,`object`,this.fieldPath);var n=e instanceof Map,r=n?Array.from(e.keys()):Object.keys(e);this.encoded.store_value(r.length,`u32`);for(var i=0,a=r;i<a.length;i++){var o=a[i];this.encode_value(o,t.map.key),this.encode_value(n?e.get(o):e[o],t.map.value)}},e.prototype.encode_struct=function(e,t){this.checkTypes&&pe(e,`object`,this.fieldPath);for(var n=0,r=Object.keys(t.struct);n<r.length;n++){var i=r[n];this.fieldPath.push(i),this.encode_value(e[i],t.struct[i]),this.fieldPath.pop()}},e}(),function(){function e(e){this.buffer=new ue(e)}return e.prototype.decode=function(e){return this.decode_value(e)},e.prototype.decode_value=function(e){if(typeof e==`string`){if(ce.includes(e))return this.decode_integer(e);if(e===`string`)return this.decode_string();if(e===`bool`)return this.decode_boolean()}if(typeof e==`object`){if(`option`in e)return this.decode_option(e);if(`enum`in e)return this.decode_enum(e);if(`array`in e)return this.decode_array(e);if(`set`in e)return this.decode_set(e);if(`map`in e)return this.decode_map(e);if(`struct`in e)return this.decode_struct(e)}throw Error(`Unsupported type: ${e}`)},e.prototype.decode_integer=function(e){var t=parseInt(e.substring(1));return t<=32||e==`f64`?this.buffer.consume_value(e):this.decode_bigint(t,e.startsWith(`i`))},e.prototype.decode_bigint=function(e,t){t===void 0&&(t=!1);var n=e/8,r=new Uint8Array(this.buffer.consume_bytes(n)),i=r.reduceRight(function(e,t){return e+t.toString(16).padStart(2,`0`)},``);return t&&r[n-1]?BigInt.asIntN(e,BigInt(`0x${i}`)):BigInt(`0x${i}`)},e.prototype.decode_string=function(){for(var e=this.decode_integer(`u32`),t=new Uint8Array(this.buffer.consume_bytes(e)),n=[],r=0;r<e;++r){var i=t[r];if(i<128)n.push(i);else if(i<224)n.push((i&31)<<6|t[++r]&63);else if(i<240)n.push((i&15)<<12|(t[++r]&63)<<6|t[++r]&63);else{var a=(i&7)<<18|(t[++r]&63)<<12|(t[++r]&63)<<6|t[++r]&63;n.push(a)}}return String.fromCodePoint.apply(String,n)},e.prototype.decode_boolean=function(){return this.buffer.consume_value(`u8`)>0},e.prototype.decode_option=function(e){var t=this.buffer.consume_value(`u8`);if(t===1)return this.decode_value(e.option);if(t!==0)throw Error(`Invalid option ${t}`);return null},e.prototype.decode_enum=function(e){var t,n=this.buffer.consume_value(`u8`);if(n>e.enum.length)throw Error(`Enum option ${n} is not available`);var r=e.enum[n].struct,i=Object.keys(r)[0];return t={},t[i]=this.decode_value(r[i]),t},e.prototype.decode_array=function(e){for(var t=[],n=e.array.len?e.array.len:this.decode_integer(`u32`),r=0;r<n;++r)t.push(this.decode_value(e.array.type));return t},e.prototype.decode_set=function(e){for(var t=this.decode_integer(`u32`),n=new Set,r=0;r<t;++r)n.add(this.decode_value(e.set));return n},e.prototype.decode_map=function(e){for(var t=this.decode_integer(`u32`),n=new Map,r=0;r<t;++r){var i=this.decode_value(e.map.key),a=this.decode_value(e.map.value);n.set(i,a)}return n},e.prototype.decode_struct=function(e){var t={};for(var n in e.struct)t[n]=this.decode_value(e.struct[n]);return t},e}(),new Uint8Array([75,69,77,0,16]),new Uint8Array([72,80,75,69,0,16,0,1,0,2]),new Uint8Array([72,80,75,69,45,118,49]),new Uint8Array([115,101,99,114,101,116]),new Uint8Array([101,97,101,95,112,114,107]),new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),new Uint8Array([0,32,72,80,75,69,45,118,49,72,80,75,69,0,16,0,1,0,2,107,101,121,0,143,195,174,184,50,73,10,75,90,179,228,32,35,40,125,178,154,31,75,199,194,34,192,223,34,135,39,183,10,64,33,18,47,63,4,233,32,108,209,36,19,80,53,41,180,122,198,166,48,185,46,196,207,125,35,69,8,208,175,151,113,201,158,80]),new Uint8Array([0,12,72,80,75,69,45,118,49,72,80,75,69,0,16,0,1,0,2,98,97,115,101,95,110,111,110,99,101,0,143,195,174,184,50,73,10,75,90,179,228,32,35,40,125,178,154,31,75,199,194,34,192,223,34,135,39,183,10,64,33,18,47,63,4,233,32,108,209,36,19,80,53,41,180,122,198,166,48,185,46,196,207,125,35,69,8,208,175,151,113,201,158,80]),new Uint8Array([113,111,115,95,101,110,99,114,121,112,116,105,111,110,95,104,109,97,99,95,109,101,115,115,97,103,101]);const ge=e=>{let t=n(e);if(t.length<2)throw Error(`failed to convert DER-encoded signature: insufficient length`);if(t[0]!==48)throw Error(`failed to convert DER-encoded signature: invalid format (missing SEQUENCE tag)`);let r=1,a=t[r];if(a<=127){if(t.length<2+a)throw Error(`failed to convert DER-encoded signature: inconsistent message length header`);r+=1}else throw Error(`failed to convert DER-encoded signature: unexpectedly large or invalid signature length`);if(t[r]!==2)throw Error(`failed to convert DER-encoded signature: invalid tag for r`);r++;let o=t[r];if(o>33)throw Error(`failed to convert DER-encoded signature: unexpected length for r`);r++;let s=t.slice(r,r+o);if(r+=o,t[r]!==2)throw Error(`failed to convert DER-encoded signature: invalid tag for s`);r++;let c=t[r];if(c>33)throw Error(`failed to convert DER-encoded signature: unexpected length for s`);r++;let l=t.slice(r,r+c),u=i(s,32),d=i(l,32);return new Uint8Array([...u,...d])};var _e;(function(e){e.NOTARIZER=`notarizer`,e.SIGNER=`signer`,e.EVM_PARSER=`evm-parser`,e.TLS_FETCHER=`tls-fetcher`,e.UMP=`ump`})(_e||={});var I=s(((e,t)=>{(function(e,n){var r=2**-24,i=2**32,a=2**53;function o(e){var t=new ArrayBuffer(256),r=new DataView(t),o,s=0;function c(e){for(var n=t.byteLength,i=s+e;n<i;)n*=2;if(n!==t.byteLength){var a=r;t=new ArrayBuffer(n),r=new DataView(t);for(var c=s+3>>2,l=0;l<c;++l)r.setUint32(l*4,a.getUint32(l*4))}return o=e,r}function l(){s+=o}function u(e){l(c(8).setFloat64(s,e))}function d(e){l(c(1).setUint8(s,e))}function f(e){for(var t=c(e.length),n=0;n<e.length;++n)t.setUint8(s+n,e[n]);l()}function p(e){l(c(2).setUint16(s,e))}function m(e){l(c(4).setUint32(s,e))}function h(e){var t=e%i,n=(e-t)/i,r=c(8);r.setUint32(s,n),r.setUint32(s+4,t),l()}function g(e,t){t<24?d(e<<5|t):t<256?(d(e<<5|24),d(t)):t<65536?(d(e<<5|25),p(t)):t<4294967296?(d(e<<5|26),m(t)):(d(e<<5|27),h(t))}function _(e){var t;if(e===!1)return d(244);if(e===!0)return d(245);if(e===null)return d(246);if(e===n)return d(247);switch(typeof e){case`number`:if(Math.floor(e)===e){if(0<=e&&e<=a)return g(0,e);if(-a<=e&&e<0)return g(1,-(e+1))}return d(251),u(e);case`string`:var r=[];for(t=0;t<e.length;++t){var i=e.charCodeAt(t);i<128?r.push(i):i<2048?(r.push(192|i>>6),r.push(128|i&63)):i<55296?(r.push(224|i>>12),r.push(128|i>>6&63),r.push(128|i&63)):(i=(i&1023)<<10,i|=e.charCodeAt(++t)&1023,i+=65536,r.push(240|i>>18),r.push(128|i>>12&63),r.push(128|i>>6&63),r.push(128|i&63))}return g(3,r.length),f(r);default:var o;if(Array.isArray(e))for(o=e.length,g(4,o),t=0;t<o;++t)_(e[t]);else if(e instanceof Uint8Array)g(2,e.length),f(e);else{var s=Object.keys(e);for(o=s.length,g(5,o),t=0;t<o;++t){var c=s[t];_(c),_(e[c])}}}}if(_(e),`slice`in t)return t.slice(0,s);for(var v=new ArrayBuffer(s),y=new DataView(v),b=0;b<s;++b)y.setUint8(b,r.getUint8(b));return v}function s(e,t,a){var o=new DataView(e),s=0;typeof t!=`function`&&(t=function(e){return e}),typeof a!=`function`&&(a=function(){return n});function c(e,t){return s+=t,e}function l(t){return c(new Uint8Array(e,s,t),t)}function u(){var e=new DataView(new ArrayBuffer(4)),t=m(),n=t&32768,i=t&31744,a=t&1023;if(i===31744)i=261120;else if(i!==0)i+=114688;else if(a!==0)return a*r;return e.setUint32(0,n<<16|i<<13|a<<13),e.getFloat32(0)}function d(){return c(o.getFloat32(s),4)}function f(){return c(o.getFloat64(s),8)}function p(){return c(o.getUint8(s),1)}function m(){return c(o.getUint16(s),2)}function h(){return c(o.getUint32(s),4)}function g(){return h()*i+h()}function _(){return o.getUint8(s)===255&&(s+=1,!0)}function v(e){if(e<24)return e;if(e===24)return p();if(e===25)return m();if(e===26)return h();if(e===27)return g();if(e===31)return-1;throw`Invalid length encoding`}function y(e){var t=p();if(t===255)return-1;var n=v(t&31);if(n<0||t>>5!==e)throw`Invalid indefinite length element`;return n}function b(e,t){for(var n=0;n<t;++n){var r=p();r&128&&(r<224?(r=(r&31)<<6|p()&63,--t):r<240?(r=(r&15)<<12|(p()&63)<<6|p()&63,t-=2):(r=(r&15)<<18|(p()&63)<<12|(p()&63)<<6|p()&63,t-=3)),r<65536?e.push(r):(r-=65536,e.push(55296|r>>10),e.push(56320|r&1023))}}function x(){var e=p(),r=e>>5,i=e&31,o,s;if(r===7)switch(i){case 25:return u();case 26:return d();case 27:return f()}if(s=v(i),s<0&&(r<2||6<r))throw`Invalid length`;switch(r){case 0:return s;case 1:return-1-s;case 2:if(s<0){for(var c=[],m=0;(s=y(r))>=0;)m+=s,c.push(l(s));var h=new Uint8Array(m),g=0;for(o=0;o<c.length;++o)h.set(c[o],g),g+=c[o].length;return h}return l(s);case 3:var S=[];if(s<0)for(;(s=y(r))>=0;)b(S,s);else b(S,s);return String.fromCharCode.apply(null,S);case 4:var C;if(s<0)for(C=[];!_();)C.push(x());else for(C=Array(s),o=0;o<s;++o)C[o]=x();return C;case 5:var w={};for(o=0;o<s||s<0&&!_();++o){var T=x();w[T]=x()}return w;case 6:return t(x(),s);case 7:switch(s){case 20:return!1;case 21:return!0;case 22:return null;case 23:return n;default:return a(s)}}}var S=x();if(s!==e.byteLength)throw`Remaining bytes`;return S}var c={encode:o,decode:s};typeof define==`function`&&define.amd?define(`cbor/cbor`,c):t!==void 0&&t.exports?t.exports=c:e.CBOR||=c})(e)})),ve=s((()=>{
2
+ import{a as e,i as t,n,r,t as i}from"./rolldown-runtime-B0Z9INg1.mjs";import{D as a,E as o,O as s}from"./dist-w03V0QPF.mjs";import{defineCommand as c,renderUsage as l,runMain as u}from"citty";import*as d from"valibot";import{ECDH as f,createECDH as p,createHash as m,createPrivateKey as h,randomBytes as g,sign as _}from"node:crypto";import{execFile as v,spawn as y}from"node:child_process";import{accessSync as b,chmodSync as x,constants as S,existsSync as C,mkdirSync as w,readFileSync as T,realpathSync as E,renameSync as D,rmSync as O,statSync as k,writeFileSync as A}from"node:fs";import{homedir as ee}from"node:os";import{dirname as j,isAbsolute as M,join as te,resolve as ne}from"node:path";import{createServer as re}from"node:http";import{constants as N,isUtf8 as ie}from"node:buffer";import ae from"semver";var P=`@catena/cli`,oe=`0.9.0`;function se(e){return e instanceof Error?e.message:String(e)}function ce(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function le(e){if(!ce(e))return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}var F=class{container;constructor(e){this.container=e}};function ue(e,t){let n=Object.getOwnPropertyDescriptor(e,t);return n!==void 0&&n.enumerable===!0&&`value`in n}function de(e){if(Object.getOwnPropertySymbols(e).length>0)return null;let t=Object.getOwnPropertyNames(e);for(let n of t)if(!ue(e,n))return null;return t}function fe(e){if(Object.getPrototypeOf(e)!==Array.prototype||Object.getOwnPropertySymbols(e).length>0)return!1;let t=Object.getOwnPropertyNames(e);if(t.length!==e.length+1)return!1;for(let n=0;n<e.length;n++)if(t[n]!==String(n)||!ue(e,t[n]))return!1;return!0}function pe(e){let t=new Set,n=new Set,r=[e];for(;r.length>0;){let e=r.pop();if(e instanceof F){t.delete(e.container),n.add(e.container);continue}if(e===null||typeof e==`string`||typeof e==`boolean`)continue;if(typeof e==`number`){if(!Number.isFinite(e))return!1;continue}if(Array.isArray(e)){if(t.has(e))return!1;if(n.has(e))continue;if(!fe(e))return!1;t.add(e),r.push(new F(e));for(let t of e)r.push(t);continue}if(!le(e)||Object.hasOwn(e,`__proto__`)||t.has(e))return!1;if(n.has(e))continue;let i=de(e);if(i===null)return!1;t.add(e),r.push(new F(e));for(let t of i)r.push(e[t])}return!0}function me(e){return t=>{try{return e(t)}catch{return!1}}}d.custom(me(pe),`Expected a JSON value`),d.custom(me(e=>le(e)&&pe(e)),`Expected a JSON object`),d.custom(me(e=>Array.isArray(e)&&pe(e)),`Expected a JSON array`);function I(e){return ge(L(e))}function he(e,t){let n=e.padStart(Math.ceil(e.length/2)*2,`0`);return I(a(n,t).reduce((e,t)=>e+String.fromCharCode(t),``))}function ge(e){return e.replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=/g,``)}function L(e){if(arguments.length===0)throw TypeError(`1 argument required, but only 0 present.`);let t;for(e=`${e}`,t=0;t<e.length;t++)if(e.charCodeAt(t)>255)throw Error(`InvalidCharacterError: found code point greater than 255:${e.charCodeAt(t)} at position ${t}`);let n=``;for(t=0;t<e.length;t+=3){let r=[void 0,void 0,void 0,void 0];r[0]=e.charCodeAt(t)>>2,r[1]=(e.charCodeAt(t)&3)<<4,e.length>t+1&&(r[1]|=e.charCodeAt(t+1)>>4,r[2]=(e.charCodeAt(t+1)&15)<<2),e.length>t+2&&(r[2]|=e.charCodeAt(t+2)>>6,r[3]=e.charCodeAt(t+2)&63);for(let e=0;e<r.length;e++)r[e]===void 0?n+=`=`:n+=_e(r[e])}return n}function _e(e){if(e>=0&&e<64)return`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/`[e]}var R=[`u8`,`u16`,`u32`,`u64`,`u128`,`i8`,`i16`,`i32`,`i64`,`i128`,`f32`,`f64`],ve=function(){function e(){this.offset=0,this.buffer_size=256,this.buffer=new ArrayBuffer(this.buffer_size),this.view=new DataView(this.buffer)}return e.prototype.resize_if_necessary=function(e){if(this.buffer_size-this.offset<e){this.buffer_size=Math.max(this.buffer_size*2,this.buffer_size+e);var t=new ArrayBuffer(this.buffer_size);new Uint8Array(t).set(new Uint8Array(this.buffer)),this.buffer=t,this.view=new DataView(t)}},e.prototype.get_used_buffer=function(){return new Uint8Array(this.buffer).slice(0,this.offset)},e.prototype.store_value=function(e,t){var n=t.substring(1),r=parseInt(n)/8;this.resize_if_necessary(r);var i=t[0]===`f`?`setFloat${n}`:t[0]===`i`?`setInt${n}`:`setUint${n}`;this.view[i](this.offset,e,!0),this.offset+=r},e.prototype.store_bytes=function(e){this.resize_if_necessary(e.length),new Uint8Array(this.buffer).set(new Uint8Array(e),this.offset),this.offset+=e.length},e}(),ye=function(){function e(e){this.offset=0,this.buffer_size=e.length,this.buffer=new ArrayBuffer(e.length),new Uint8Array(this.buffer).set(e),this.view=new DataView(this.buffer)}return e.prototype.assert_enough_buffer=function(e){if(this.offset+e>this.buffer.byteLength)throw Error(`Error in schema, the buffer is smaller than expected`)},e.prototype.consume_value=function(e){var t=e.substring(1),n=parseInt(t)/8;this.assert_enough_buffer(n);var r=e[0]===`f`?`getFloat${t}`:e[0]===`i`?`getInt${t}`:`getUint${t}`,i=this.view[r](this.offset,!0);return this.offset+=n,i},e.prototype.consume_bytes=function(e){this.assert_enough_buffer(e);var t=this.buffer.slice(this.offset,this.offset+e);return this.offset+=e,t},e}(),be=(function(){var e=function(t,n){return e=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};return function(t,n){if(typeof n!=`function`&&n!==null)throw TypeError(`Class extends value `+String(n)+` is not a constructor or null`);e(t,n);function r(){this.constructor=t}t.prototype=n===null?Object.create(n):(r.prototype=n.prototype,new r)}})();function xe(e){return Array.isArray(e)||!!e&&typeof e==`object`&&`length`in e&&typeof e.length==`number`&&(e.length===0||e.length>0&&e.length-1 in e)}function Se(e,t,n){if(typeof e!==t)throw Error(`Expected ${t} not ${typeof e}(${e}) at ${n.join(`.`)}`)}function z(e,t){var n=[`number`,`string`,`bigint`,`boolean`].includes(typeof e),r=typeof e==`object`&&!!e&&`toString`in e;if(!n&&!r)throw Error(`Expected bigint, number, boolean or string not ${typeof e}(${e}) at ${t.join(`.`)}`)}function Ce(e,t,n){if(e!==t)throw Error(`Array length ${e} does not match schema length ${t} at ${n.join(`.`)}`)}function we(e,t){if(typeof e!=`object`||!e)throw Error(`Expected object not ${typeof e}(${e}) at ${t.join(`.`)}`)}R.concat([`bool`,`string`]),function(e){be(t,e);function t(t,n){var r=`Invalid schema: ${JSON.stringify(t)} expected ${n}`;return e.call(this,r)||this}return t}(Error),function(){function e(e){this.encoded=new ve,this.fieldPath=[`value`],this.checkTypes=e}return e.prototype.encode=function(e,t){return this.encode_value(e,t),this.encoded.get_used_buffer()},e.prototype.encode_value=function(e,t){if(typeof t==`string`){if(R.includes(t))return this.encode_integer(e,t);if(t===`string`)return this.encode_string(e);if(t===`bool`)return this.encode_boolean(e)}if(typeof t==`object`){if(`option`in t)return this.encode_option(e,t);if(`enum`in t)return this.encode_enum(e,t);if(`array`in t)return this.encode_array(e,t);if(`set`in t)return this.encode_set(e,t);if(`map`in t)return this.encode_map(e,t);if(`struct`in t)return this.encode_struct(e,t)}},e.prototype.encode_integer=function(e,t){var n=parseInt(t.substring(1));n<=32||t==`f64`?(this.checkTypes&&Se(e,`number`,this.fieldPath),this.encoded.store_value(e,t)):(this.checkTypes&&z(e,this.fieldPath),this.encode_bigint(BigInt(e),n))},e.prototype.encode_bigint=function(e,t){for(var n=t/8,r=new Uint8Array(n),i=0;i<n;i++)r[i]=Number(e&BigInt(255)),e>>=BigInt(8);this.encoded.store_bytes(new Uint8Array(r))},e.prototype.encode_string=function(e){this.checkTypes&&Se(e,`string`,this.fieldPath);for(var t=e,n=[],r=0;r<t.length;r++){var i=t.charCodeAt(r);i<128?n.push(i):i<2048?n.push(192|i>>6,128|i&63):i<55296||i>=57344?n.push(224|i>>12,128|i>>6&63,128|i&63):(r++,i=65536+((i&1023)<<10|t.charCodeAt(r)&1023),n.push(240|i>>18,128|i>>12&63,128|i>>6&63,128|i&63))}this.encoded.store_value(n.length,`u32`),this.encoded.store_bytes(new Uint8Array(n))},e.prototype.encode_boolean=function(e){this.checkTypes&&Se(e,`boolean`,this.fieldPath),this.encoded.store_value(+!!e,`u8`)},e.prototype.encode_option=function(e,t){e==null?this.encoded.store_value(0,`u8`):(this.encoded.store_value(1,`u8`),this.encode_value(e,t.option))},e.prototype.encode_enum=function(e,t){this.checkTypes&&we(e,this.fieldPath);for(var n=Object.keys(e)[0],r=0;r<t.enum.length;r++){var i=t.enum[r];if(n===Object.keys(i.struct)[0])return this.encoded.store_value(r,`u8`),this.encode_struct(e,i)}throw Error(`Enum key (${n}) not found in enum schema: ${JSON.stringify(t)} at ${this.fieldPath.join(`.`)}`)},e.prototype.encode_array=function(e,t){if(xe(e))return this.encode_arraylike(e,t);if(e instanceof ArrayBuffer)return this.encode_buffer(e,t);throw Error(`Expected Array-like not ${typeof e}(${e}) at ${this.fieldPath.join(`.`)}`)},e.prototype.encode_arraylike=function(e,t){t.array.len?Ce(e.length,t.array.len,this.fieldPath):this.encoded.store_value(e.length,`u32`);for(var n=0;n<e.length;n++)this.encode_value(e[n],t.array.type)},e.prototype.encode_buffer=function(e,t){t.array.len?Ce(e.byteLength,t.array.len,this.fieldPath):this.encoded.store_value(e.byteLength,`u32`),this.encoded.store_bytes(new Uint8Array(e))},e.prototype.encode_set=function(e,t){this.checkTypes&&Se(e,`object`,this.fieldPath);var n=e instanceof Set?Array.from(e.values()):Object.values(e);this.encoded.store_value(n.length,`u32`);for(var r=0,i=n;r<i.length;r++){var a=i[r];this.encode_value(a,t.set)}},e.prototype.encode_map=function(e,t){this.checkTypes&&Se(e,`object`,this.fieldPath);var n=e instanceof Map,r=n?Array.from(e.keys()):Object.keys(e);this.encoded.store_value(r.length,`u32`);for(var i=0,a=r;i<a.length;i++){var o=a[i];this.encode_value(o,t.map.key),this.encode_value(n?e.get(o):e[o],t.map.value)}},e.prototype.encode_struct=function(e,t){this.checkTypes&&Se(e,`object`,this.fieldPath);for(var n=0,r=Object.keys(t.struct);n<r.length;n++){var i=r[n];this.fieldPath.push(i),this.encode_value(e[i],t.struct[i]),this.fieldPath.pop()}},e}(),function(){function e(e){this.buffer=new ye(e)}return e.prototype.decode=function(e){return this.decode_value(e)},e.prototype.decode_value=function(e){if(typeof e==`string`){if(R.includes(e))return this.decode_integer(e);if(e===`string`)return this.decode_string();if(e===`bool`)return this.decode_boolean()}if(typeof e==`object`){if(`option`in e)return this.decode_option(e);if(`enum`in e)return this.decode_enum(e);if(`array`in e)return this.decode_array(e);if(`set`in e)return this.decode_set(e);if(`map`in e)return this.decode_map(e);if(`struct`in e)return this.decode_struct(e)}throw Error(`Unsupported type: ${e}`)},e.prototype.decode_integer=function(e){var t=parseInt(e.substring(1));return t<=32||e==`f64`?this.buffer.consume_value(e):this.decode_bigint(t,e.startsWith(`i`))},e.prototype.decode_bigint=function(e,t){t===void 0&&(t=!1);var n=e/8,r=new Uint8Array(this.buffer.consume_bytes(n)),i=r.reduceRight(function(e,t){return e+t.toString(16).padStart(2,`0`)},``);return t&&r[n-1]?BigInt.asIntN(e,BigInt(`0x${i}`)):BigInt(`0x${i}`)},e.prototype.decode_string=function(){for(var e=this.decode_integer(`u32`),t=new Uint8Array(this.buffer.consume_bytes(e)),n=[],r=0;r<e;++r){var i=t[r];if(i<128)n.push(i);else if(i<224)n.push((i&31)<<6|t[++r]&63);else if(i<240)n.push((i&15)<<12|(t[++r]&63)<<6|t[++r]&63);else{var a=(i&7)<<18|(t[++r]&63)<<12|(t[++r]&63)<<6|t[++r]&63;n.push(a)}}return String.fromCodePoint.apply(String,n)},e.prototype.decode_boolean=function(){return this.buffer.consume_value(`u8`)>0},e.prototype.decode_option=function(e){var t=this.buffer.consume_value(`u8`);if(t===1)return this.decode_value(e.option);if(t!==0)throw Error(`Invalid option ${t}`);return null},e.prototype.decode_enum=function(e){var t,n=this.buffer.consume_value(`u8`);if(n>e.enum.length)throw Error(`Enum option ${n} is not available`);var r=e.enum[n].struct,i=Object.keys(r)[0];return t={},t[i]=this.decode_value(r[i]),t},e.prototype.decode_array=function(e){for(var t=[],n=e.array.len?e.array.len:this.decode_integer(`u32`),r=0;r<n;++r)t.push(this.decode_value(e.array.type));return t},e.prototype.decode_set=function(e){for(var t=this.decode_integer(`u32`),n=new Set,r=0;r<t;++r)n.add(this.decode_value(e.set));return n},e.prototype.decode_map=function(e){for(var t=this.decode_integer(`u32`),n=new Map,r=0;r<t;++r){var i=this.decode_value(e.map.key),a=this.decode_value(e.map.value);n.set(i,a)}return n},e.prototype.decode_struct=function(e){var t={};for(var n in e.struct)t[n]=this.decode_value(e.struct[n]);return t},e}(),new Uint8Array([75,69,77,0,16]),new Uint8Array([72,80,75,69,0,16,0,1,0,2]),new Uint8Array([72,80,75,69,45,118,49]),new Uint8Array([115,101,99,114,101,116]),new Uint8Array([101,97,101,95,112,114,107]),new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),new Uint8Array([0,32,72,80,75,69,45,118,49,72,80,75,69,0,16,0,1,0,2,107,101,121,0,143,195,174,184,50,73,10,75,90,179,228,32,35,40,125,178,154,31,75,199,194,34,192,223,34,135,39,183,10,64,33,18,47,63,4,233,32,108,209,36,19,80,53,41,180,122,198,166,48,185,46,196,207,125,35,69,8,208,175,151,113,201,158,80]),new Uint8Array([0,12,72,80,75,69,45,118,49,72,80,75,69,0,16,0,1,0,2,98,97,115,101,95,110,111,110,99,101,0,143,195,174,184,50,73,10,75,90,179,228,32,35,40,125,178,154,31,75,199,194,34,192,223,34,135,39,183,10,64,33,18,47,63,4,233,32,108,209,36,19,80,53,41,180,122,198,166,48,185,46,196,207,125,35,69,8,208,175,151,113,201,158,80]),new Uint8Array([113,111,115,95,101,110,99,114,121,112,116,105,111,110,95,104,109,97,99,95,109,101,115,115,97,103,101]);const Te=e=>{let t=a(e);if(t.length<2)throw Error(`failed to convert DER-encoded signature: insufficient length`);if(t[0]!==48)throw Error(`failed to convert DER-encoded signature: invalid format (missing SEQUENCE tag)`);let n=1,r=t[n];if(r<=127){if(t.length<2+r)throw Error(`failed to convert DER-encoded signature: inconsistent message length header`);n+=1}else throw Error(`failed to convert DER-encoded signature: unexpectedly large or invalid signature length`);if(t[n]!==2)throw Error(`failed to convert DER-encoded signature: invalid tag for r`);n++;let i=t[n];if(i>33)throw Error(`failed to convert DER-encoded signature: unexpected length for r`);n++;let s=t.slice(n,n+i);if(n+=i,t[n]!==2)throw Error(`failed to convert DER-encoded signature: invalid tag for s`);n++;let c=t[n];if(c>33)throw Error(`failed to convert DER-encoded signature: unexpected length for s`);n++;let l=t.slice(n,n+c),u=o(s,32),d=o(l,32);return new Uint8Array([...u,...d])};var Ee;(function(e){e.NOTARIZER=`notarizer`,e.SIGNER=`signer`,e.EVM_PARSER=`evm-parser`,e.TLS_FETCHER=`tls-fetcher`,e.UMP=`ump`})(Ee||={});var De=i(((e,t)=>{(function(e,n){var r=2**-24,i=2**32,a=2**53;function o(e){var t=new ArrayBuffer(256),r=new DataView(t),o,s=0;function c(e){for(var n=t.byteLength,i=s+e;n<i;)n*=2;if(n!==t.byteLength){var a=r;t=new ArrayBuffer(n),r=new DataView(t);for(var c=s+3>>2,l=0;l<c;++l)r.setUint32(l*4,a.getUint32(l*4))}return o=e,r}function l(){s+=o}function u(e){l(c(8).setFloat64(s,e))}function d(e){l(c(1).setUint8(s,e))}function f(e){for(var t=c(e.length),n=0;n<e.length;++n)t.setUint8(s+n,e[n]);l()}function p(e){l(c(2).setUint16(s,e))}function m(e){l(c(4).setUint32(s,e))}function h(e){var t=e%i,n=(e-t)/i,r=c(8);r.setUint32(s,n),r.setUint32(s+4,t),l()}function g(e,t){t<24?d(e<<5|t):t<256?(d(e<<5|24),d(t)):t<65536?(d(e<<5|25),p(t)):t<4294967296?(d(e<<5|26),m(t)):(d(e<<5|27),h(t))}function _(e){var t;if(e===!1)return d(244);if(e===!0)return d(245);if(e===null)return d(246);if(e===n)return d(247);switch(typeof e){case`number`:if(Math.floor(e)===e){if(0<=e&&e<=a)return g(0,e);if(-a<=e&&e<0)return g(1,-(e+1))}return d(251),u(e);case`string`:var r=[];for(t=0;t<e.length;++t){var i=e.charCodeAt(t);i<128?r.push(i):i<2048?(r.push(192|i>>6),r.push(128|i&63)):i<55296?(r.push(224|i>>12),r.push(128|i>>6&63),r.push(128|i&63)):(i=(i&1023)<<10,i|=e.charCodeAt(++t)&1023,i+=65536,r.push(240|i>>18),r.push(128|i>>12&63),r.push(128|i>>6&63),r.push(128|i&63))}return g(3,r.length),f(r);default:var o;if(Array.isArray(e))for(o=e.length,g(4,o),t=0;t<o;++t)_(e[t]);else if(e instanceof Uint8Array)g(2,e.length),f(e);else{var s=Object.keys(e);for(o=s.length,g(5,o),t=0;t<o;++t){var c=s[t];_(c),_(e[c])}}}}if(_(e),`slice`in t)return t.slice(0,s);for(var v=new ArrayBuffer(s),y=new DataView(v),b=0;b<s;++b)y.setUint8(b,r.getUint8(b));return v}function s(e,t,a){var o=new DataView(e),s=0;typeof t!=`function`&&(t=function(e){return e}),typeof a!=`function`&&(a=function(){return n});function c(e,t){return s+=t,e}function l(t){return c(new Uint8Array(e,s,t),t)}function u(){var e=new DataView(new ArrayBuffer(4)),t=m(),n=t&32768,i=t&31744,a=t&1023;if(i===31744)i=261120;else if(i!==0)i+=114688;else if(a!==0)return a*r;return e.setUint32(0,n<<16|i<<13|a<<13),e.getFloat32(0)}function d(){return c(o.getFloat32(s),4)}function f(){return c(o.getFloat64(s),8)}function p(){return c(o.getUint8(s),1)}function m(){return c(o.getUint16(s),2)}function h(){return c(o.getUint32(s),4)}function g(){return h()*i+h()}function _(){return o.getUint8(s)===255&&(s+=1,!0)}function v(e){if(e<24)return e;if(e===24)return p();if(e===25)return m();if(e===26)return h();if(e===27)return g();if(e===31)return-1;throw`Invalid length encoding`}function y(e){var t=p();if(t===255)return-1;var n=v(t&31);if(n<0||t>>5!==e)throw`Invalid indefinite length element`;return n}function b(e,t){for(var n=0;n<t;++n){var r=p();r&128&&(r<224?(r=(r&31)<<6|p()&63,--t):r<240?(r=(r&15)<<12|(p()&63)<<6|p()&63,t-=2):(r=(r&15)<<18|(p()&63)<<12|(p()&63)<<6|p()&63,t-=3)),r<65536?e.push(r):(r-=65536,e.push(55296|r>>10),e.push(56320|r&1023))}}function x(){var e=p(),r=e>>5,i=e&31,o,s;if(r===7)switch(i){case 25:return u();case 26:return d();case 27:return f()}if(s=v(i),s<0&&(r<2||6<r))throw`Invalid length`;switch(r){case 0:return s;case 1:return-1-s;case 2:if(s<0){for(var c=[],m=0;(s=y(r))>=0;)m+=s,c.push(l(s));var h=new Uint8Array(m),g=0;for(o=0;o<c.length;++o)h.set(c[o],g),g+=c[o].length;return h}return l(s);case 3:var S=[];if(s<0)for(;(s=y(r))>=0;)b(S,s);else b(S,s);return String.fromCharCode.apply(null,S);case 4:var C;if(s<0)for(C=[];!_();)C.push(x());else for(C=Array(s),o=0;o<s;++o)C[o]=x();return C;case 5:var w={};for(o=0;o<s||s<0&&!_();++o){var T=x();w[T]=x()}return w;case 6:return t(x(),s);case 7:switch(s){case 20:return!1;case 21:return!0;case 22:return null;case 23:return n;default:return a(s)}}}var S=x();if(s!==e.byteLength)throw`Remaining bytes`;return S}var c={encode:o,decode:s};typeof define==`function`&&define.amd?define(`cbor/cbor`,c):t!==void 0&&t.exports?t.exports=c:e.CBOR||=c})(e)})),Oe=i((()=>{
3
3
  /*! *****************************************************************************
4
4
  Copyright (C) Microsoft. All rights reserved.
5
5
  Licensed under the Apache License, Version 2.0 (the "License"); you may not use
@@ -14,7 +14,7 @@ MERCHANTABLITY OR NON-INFRINGEMENT.
14
14
  See the Apache Version 2.0 License for specific language governing permissions
15
15
  and limitations under the License.
16
16
  ***************************************************************************** */
17
- var e;(function(e){(function(t){var n=typeof globalThis==`object`?globalThis:typeof global==`object`?global:typeof self==`object`?self:typeof this==`object`?this:s(),r=i(e);n.Reflect!==void 0&&(r=i(n.Reflect,r)),t(r,n),n.Reflect===void 0&&(n.Reflect=e);function i(e,t){return function(n,r){Object.defineProperty(e,n,{configurable:!0,writable:!0,value:r}),t&&t(n,r)}}function a(){try{return Function(`return this;`)()}catch{}}function o(){try{return(0,eval)(`(function() { return this; })()`)}catch{}}function s(){return a()||o()}})(function(e,t){var n=Object.prototype.hasOwnProperty,r=typeof Symbol==`function`,i=r&&Symbol.toPrimitive!==void 0?Symbol.toPrimitive:`@@toPrimitive`,a=r&&Symbol.iterator!==void 0?Symbol.iterator:`@@iterator`,o=typeof Object.create==`function`,s={__proto__:[]}instanceof Array,c=!o&&!s,l={create:o?function(){return Te(Object.create(null))}:s?function(){return Te({__proto__:null})}:function(){return Te({})},has:c?function(e,t){return n.call(e,t)}:function(e,t){return t in e},get:c?function(e,t){return n.call(e,t)?e[t]:void 0}:function(e,t){return e[t]}},u=Object.getPrototypeOf(Function),d=typeof Map==`function`&&typeof Map.prototype.entries==`function`?Map:Ce(),f=typeof Set==`function`&&typeof Set.prototype.entries==`function`?Set:we(),p=typeof WeakMap==`function`?WeakMap:z(),m=r?Symbol.for(`@reflect-metadata:registry`):void 0,h=be(),g=xe(h);function _(e,t,n,r){if(N(n)){if(!de(e)||!pe(t))throw TypeError();return E(e,t)}if(!de(e)||!P(t)||!P(r)&&!N(r)&&!ie(r))throw TypeError();return ie(r)&&(r=void 0),n=ue(n),D(e,t,n,r)}e(`decorate`,_);function v(e,t){function n(n,r){if(!P(n)||!N(r)&&!me(r))throw TypeError();M(e,t,n,r)}return n}e(`metadata`,v);function y(e,t,n,r){if(!P(n))throw TypeError();return N(r)||(r=ue(r)),M(e,t,n,r)}e(`defineMetadata`,y);function b(e,t,n){if(!P(t))throw TypeError();return N(n)||(n=ue(n)),O(e,t,n)}e(`hasMetadata`,b);function x(e,t,n){if(!P(t))throw TypeError();return N(n)||(n=ue(n)),k(e,t,n)}e(`hasOwnMetadata`,x);function S(e,t,n){if(!P(t))throw TypeError();return N(n)||(n=ue(n)),A(e,t,n)}e(`getMetadata`,S);function C(e,t,n){if(!P(t))throw TypeError();return N(n)||(n=ue(n)),j(e,t,n)}e(`getOwnMetadata`,C);function w(e,t){if(!P(e))throw TypeError();return N(t)||(t=ue(t)),te(e,t)}e(`getMetadataKeys`,w);function T(e,t){if(!P(e))throw TypeError();return N(t)||(t=ue(t)),ne(e,t)}e(`getOwnMetadataKeys`,T);function ee(e,t,n){if(!P(t)||(N(n)||(n=ue(n)),!P(t)))throw TypeError();N(n)||(n=ue(n));var r=R(t,n,!1);return!N(r)&&r.OrdinaryDeleteMetadata(e,t,n)}e(`deleteMetadata`,ee);function E(e,t){for(var n=e.length-1;n>=0;--n){var r=e[n],i=r(t);if(!N(i)&&!ie(i)){if(!pe(i))throw TypeError();t=i}}return t}function D(e,t,n,r){for(var i=e.length-1;i>=0;--i){var a=e[i],o=a(t,n,r);if(!N(o)&&!ie(o)){if(!P(o))throw TypeError();r=o}}return r}function O(e,t,n){if(k(e,t,n))return!0;var r=L(t);return!ie(r)&&O(e,r,n)}function k(e,t,n){var r=R(t,n,!1);return!N(r)&&ce(r.OrdinaryHasOwnMetadata(e,t,n))}function A(e,t,n){if(k(e,t,n))return j(e,t,n);var r=L(t);if(!ie(r))return A(e,r,n)}function j(e,t,n){var r=R(t,n,!1);if(!N(r))return r.OrdinaryGetOwnMetadata(e,t,n)}function M(e,t,n,r){R(n,r,!0).OrdinaryDefineOwnMetadata(e,t,n,r)}function te(e,t){var n=ne(e,t),r=L(e);if(r===null)return n;var i=te(r,t);if(i.length<=0)return n;if(n.length<=0)return i;for(var a=new f,o=[],s=0,c=n;s<c.length;s++){var l=c[s],u=a.has(l);u||(a.add(l),o.push(l))}for(var d=0,p=i;d<p.length;d++){var l=p[d],u=a.has(l);u||(a.add(l),o.push(l))}return o}function ne(e,t){var n=R(e,t,!1);return n?n.OrdinaryOwnMetadataKeys(e,t):[]}function re(e){if(e===null)return 1;switch(typeof e){case`undefined`:return 0;case`boolean`:return 2;case`string`:return 3;case`symbol`:return 4;case`number`:return 5;case`object`:return e===null?1:6;default:return 6}}function N(e){return e===void 0}function ie(e){return e===null}function ae(e){return typeof e==`symbol`}function P(e){return typeof e==`object`?e!==null:typeof e==`function`}function oe(e,t){switch(re(e)){case 0:return e;case 1:return e;case 2:return e;case 3:return e;case 4:return e;case 5:return e}var n=t===3?`string`:t===5?`number`:`default`,r=F(e,i);if(r!==void 0){var a=r.call(e,n);if(P(a))throw TypeError();return a}return se(e,n==="default"?`number`:n)}function se(e,t){if(t===`string`){var n=e.toString;if(fe(n)){var r=n.call(e);if(!P(r))return r}var i=e.valueOf;if(fe(i)){var r=i.call(e);if(!P(r))return r}}else{var i=e.valueOf;if(fe(i)){var r=i.call(e);if(!P(r))return r}var a=e.toString;if(fe(a)){var r=a.call(e);if(!P(r))return r}}throw TypeError()}function ce(e){return!!e}function le(e){return``+e}function ue(e){var t=oe(e,3);return ae(t)?t:le(t)}function de(e){return Array.isArray?Array.isArray(e):e instanceof Object?e instanceof Array:Object.prototype.toString.call(e)===`[object Array]`}function fe(e){return typeof e==`function`}function pe(e){return typeof e==`function`}function me(e){switch(re(e)){case 3:return!0;case 4:return!0;default:return!1}}function he(e,t){return e===t||e!==e&&t!==t}function F(e,t){var n=e[t];if(n!=null){if(!fe(n))throw TypeError();return n}}function ge(e){var t=F(e,a);if(!fe(t))throw TypeError();var n=t.call(e);if(!P(n))throw TypeError();return n}function _e(e){return e.value}function I(e){var t=e.next();return!t.done&&t}function ve(e){var t=e.return;t&&t.call(e)}function L(e){var t=Object.getPrototypeOf(e);if(typeof e!=`function`||e===u||t!==u)return t;var n=e.prototype,r=n&&Object.getPrototypeOf(n);if(r==null||r===Object.prototype)return t;var i=r.constructor;return typeof i!=`function`||i===e?t:i}function ye(){var e;!N(m)&&t.Reflect!==void 0&&!(m in t.Reflect)&&typeof t.Reflect.defineMetadata==`function`&&(e=Se(t.Reflect));var n,r,i,a=new p,o={registerProvider:s,getProvider:l,setProvider:h};return o;function s(t){if(!Object.isExtensible(o))throw Error(`Cannot add provider to a frozen registry.`);switch(!0){case e===t:break;case N(n):n=t;break;case n===t:break;case N(r):r=t;break;case r===t:break;default:i===void 0&&(i=new f),i.add(t)}}function c(t,a){if(!N(n)){if(n.isProviderFor(t,a))return n;if(!N(r)){if(r.isProviderFor(t,a))return n;if(!N(i))for(var o=ge(i);;){var s=I(o);if(!s)return;var c=_e(s);if(c.isProviderFor(t,a))return ve(o),c}}}if(!N(e)&&e.isProviderFor(t,a))return e}function l(e,t){var n=a.get(e),r;return N(n)||(r=n.get(t)),N(r)?(r=c(e,t),N(r)||(N(n)&&(n=new d,a.set(e,n)),n.set(t,r)),r):r}function u(e){if(N(e))throw TypeError();return n===e||r===e||!N(i)&&i.has(e)}function h(e,t,n){if(!u(n))throw Error(`Metadata provider not registered.`);var r=l(e,t);if(r!==n){if(!N(r))return!1;var i=a.get(e);N(i)&&(i=new d,a.set(e,i)),i.set(t,n)}return!0}}function be(){var e;return!N(m)&&P(t.Reflect)&&Object.isExtensible(t.Reflect)&&(e=t.Reflect[m]),N(e)&&(e=ye()),!N(m)&&P(t.Reflect)&&Object.isExtensible(t.Reflect)&&Object.defineProperty(t.Reflect,m,{enumerable:!1,configurable:!1,writable:!1,value:e}),e}function xe(e){var t=new p,n={isProviderFor:function(e,n){var r=t.get(e);return!N(r)&&r.has(n)},OrdinaryDefineOwnMetadata:o,OrdinaryHasOwnMetadata:i,OrdinaryGetOwnMetadata:a,OrdinaryOwnMetadataKeys:s,OrdinaryDeleteMetadata:c};return h.registerProvider(n),n;function r(r,i,a){var o=t.get(r),s=!1;if(N(o)){if(!a)return;o=new d,t.set(r,o),s=!0}var c=o.get(i);if(N(c)){if(!a)return;if(c=new d,o.set(i,c),!e.setProvider(r,i,n))throw o.delete(i),s&&t.delete(r),Error(`Wrong provider for target.`)}return c}function i(e,t,n){var i=r(t,n,!1);return!N(i)&&ce(i.has(e))}function a(e,t,n){var i=r(t,n,!1);if(!N(i))return i.get(e)}function o(e,t,n,i){r(n,i,!0).set(e,t)}function s(e,t){var n=[],i=r(e,t,!1);if(N(i))return n;for(var a=ge(i.keys()),o=0;;){var s=I(a);if(!s)return n.length=o,n;var c=_e(s);try{n[o]=c}catch(e){try{ve(a)}finally{throw e}}o++}}function c(e,n,i){var a=r(n,i,!1);if(N(a)||!a.delete(e))return!1;if(a.size===0){var o=t.get(n);N(o)||(o.delete(i),o.size===0&&t.delete(o))}return!0}}function Se(e){var t=e.defineMetadata,n=e.hasOwnMetadata,r=e.getOwnMetadata,i=e.getOwnMetadataKeys,a=e.deleteMetadata,o=new p;return{isProviderFor:function(e,t){var n=o.get(e);return!N(n)&&n.has(t)?!0:i(e,t).length?(N(n)&&(n=new f,o.set(e,n)),n.add(t),!0):!1},OrdinaryDefineOwnMetadata:t,OrdinaryHasOwnMetadata:n,OrdinaryGetOwnMetadata:r,OrdinaryOwnMetadataKeys:i,OrdinaryDeleteMetadata:a}}function R(e,t,n){var r=h.getProvider(e,t);if(!N(r))return r;if(n){if(h.setProvider(e,t,g))return g;throw Error(`Illegal state.`)}}function Ce(){var e={},t=[],n=function(){function e(e,t,n){this._index=0,this._keys=e,this._values=t,this._selector=n}return e.prototype[`@@iterator`]=function(){return this},e.prototype[a]=function(){return this},e.prototype.next=function(){var e=this._index;if(e>=0&&e<this._keys.length){var n=this._selector(this._keys[e],this._values[e]);return e+1>=this._keys.length?(this._index=-1,this._keys=t,this._values=t):this._index++,{value:n,done:!1}}return{value:void 0,done:!0}},e.prototype.throw=function(e){throw this._index>=0&&(this._index=-1,this._keys=t,this._values=t),e},e.prototype.return=function(e){return this._index>=0&&(this._index=-1,this._keys=t,this._values=t),{value:e,done:!0}},e}();return function(){function t(){this._keys=[],this._values=[],this._cacheKey=e,this._cacheIndex=-2}return Object.defineProperty(t.prototype,"size",{get:function(){return this._keys.length},enumerable:!0,configurable:!0}),t.prototype.has=function(e){return this._find(e,!1)>=0},t.prototype.get=function(e){var t=this._find(e,!1);return t>=0?this._values[t]:void 0},t.prototype.set=function(e,t){var n=this._find(e,!0);return this._values[n]=t,this},t.prototype.delete=function(t){var n=this._find(t,!1);if(n>=0){for(var r=this._keys.length,i=n+1;i<r;i++)this._keys[i-1]=this._keys[i],this._values[i-1]=this._values[i];return this._keys.length--,this._values.length--,he(t,this._cacheKey)&&(this._cacheKey=e,this._cacheIndex=-2),!0}return!1},t.prototype.clear=function(){this._keys.length=0,this._values.length=0,this._cacheKey=e,this._cacheIndex=-2},t.prototype.keys=function(){return new n(this._keys,this._values,r)},t.prototype.values=function(){return new n(this._keys,this._values,i)},t.prototype.entries=function(){return new n(this._keys,this._values,o)},t.prototype[`@@iterator`]=function(){return this.entries()},t.prototype[a]=function(){return this.entries()},t.prototype._find=function(e,t){if(!he(this._cacheKey,e)){this._cacheIndex=-1;for(var n=0;n<this._keys.length;n++)if(he(this._keys[n],e)){this._cacheIndex=n;break}}return this._cacheIndex<0&&t&&(this._cacheIndex=this._keys.length,this._keys.push(e),this._values.push(void 0)),this._cacheIndex},t}();function r(e,t){return e}function i(e,t){return t}function o(e,t){return[e,t]}}function we(){return function(){function e(){this._map=new d}return Object.defineProperty(e.prototype,"size",{get:function(){return this._map.size},enumerable:!0,configurable:!0}),e.prototype.has=function(e){return this._map.has(e)},e.prototype.add=function(e){return this._map.set(e,e),this},e.prototype.delete=function(e){return this._map.delete(e)},e.prototype.clear=function(){this._map.clear()},e.prototype.keys=function(){return this._map.keys()},e.prototype.values=function(){return this._map.keys()},e.prototype.entries=function(){return this._map.entries()},e.prototype[`@@iterator`]=function(){return this.keys()},e.prototype[a]=function(){return this.keys()},e}()}function z(){var e=l.create(),t=r();return function(){function e(){this._key=r()}return e.prototype.has=function(e){var t=i(e,!1);return t!==void 0&&l.has(t,this._key)},e.prototype.get=function(e){var t=i(e,!1);return t===void 0?void 0:l.get(t,this._key)},e.prototype.set=function(e,t){var n=i(e,!0);return n[this._key]=t,this},e.prototype.delete=function(e){var t=i(e,!1);return t!==void 0&&delete t[this._key]},e.prototype.clear=function(){this._key=r()},e}();function r(){var t;do t=`@@WeakMap@@`+s();while(l.has(e,t));return e[t]=!0,t}function i(e,r){if(!n.call(e,t)){if(!r)return;Object.defineProperty(e,t,{value:l.create()})}return e[t]}function a(e,t){for(var n=0;n<t;++n)e[n]=Math.random()*255|0;return e}function o(e){if(typeof Uint8Array==`function`){var t=new Uint8Array(e);return typeof crypto<`u`?crypto.getRandomValues(t):typeof msCrypto<`u`?msCrypto.getRandomValues(t):a(t,e),t}return a(Array(e),e)}function s(){var e=o(16);e[6]=e[6]&79|64,e[8]=e[8]&191|128;for(var t=``,n=0;n<16;++n){var r=e[n];(n===4||n===6||n===8)&&(t+=`-`),r<16&&(t+=`0`),t+=r.toString(16).toLowerCase()}return t}}function Te(e){return e.__=void 0,delete e.__,e}})})(e||={})})),L=o({__addDisposableResource:()=>U,__assign:()=>Ue,__asyncDelegator:()=>Pe,__asyncGenerator:()=>Ne,__asyncValues:()=>Fe,__await:()=>Me,__awaiter:()=>Ee,__classPrivateFieldGet:()=>ze,__classPrivateFieldIn:()=>Be,__classPrivateFieldSet:()=>H,__createBinding:()=>We,__decorate:()=>xe,__disposeResources:()=>W,__esDecorate:()=>R,__exportStar:()=>B,__extends:()=>ye,__generator:()=>De,__importDefault:()=>Re,__importStar:()=>Le,__makeTemplateObject:()=>Ie,__metadata:()=>Te,__param:()=>Se,__propKey:()=>we,__read:()=>ke,__rest:()=>be,__rewriteRelativeImportExtension:()=>Ve,__runInitializers:()=>Ce,__setFunctionName:()=>z,__spread:()=>V,__spreadArray:()=>je,__spreadArrays:()=>Ae,__values:()=>Oe,default:()=>Je});function ye(e,t){if(typeof t!=`function`&&t!==null)throw TypeError(`Class extends value `+String(t)+` is not a constructor or null`);He(e,t);function n(){this.constructor=e}e.prototype=t===null?Object.create(t):(n.prototype=t.prototype,new n)}function be(e,t){var n={};for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&t.indexOf(r)<0&&(n[r]=e[r]);if(e!=null&&typeof Object.getOwnPropertySymbols==`function`)for(var i=0,r=Object.getOwnPropertySymbols(e);i<r.length;i++)t.indexOf(r[i])<0&&Object.prototype.propertyIsEnumerable.call(e,r[i])&&(n[r[i]]=e[r[i]]);return n}function xe(e,t,n,r){var i=arguments.length,a=i<3?t:r===null?r=Object.getOwnPropertyDescriptor(t,n):r,o;if(typeof Reflect==`object`&&typeof Reflect.decorate==`function`)a=Reflect.decorate(e,t,n,r);else for(var s=e.length-1;s>=0;s--)(o=e[s])&&(a=(i<3?o(a):i>3?o(t,n,a):o(t,n))||a);return i>3&&a&&Object.defineProperty(t,n,a),a}function Se(e,t){return function(n,r){t(n,r,e)}}function R(e,t,n,r,i,a){function o(e){if(e!==void 0&&typeof e!=`function`)throw TypeError(`Function expected`);return e}for(var s=r.kind,c=s===`getter`?`get`:s===`setter`?`set`:`value`,l=!t&&e?r.static?e:e.prototype:null,u=t||(l?Object.getOwnPropertyDescriptor(l,r.name):{}),d,f=!1,p=n.length-1;p>=0;p--){var m={};for(var h in r)m[h]=h===`access`?{}:r[h];for(var h in r.access)m.access[h]=r.access[h];m.addInitializer=function(e){if(f)throw TypeError(`Cannot add initializers after decoration has completed`);a.push(o(e||null))};var g=(0,n[p])(s===`accessor`?{get:u.get,set:u.set}:u[c],m);if(s===`accessor`){if(g===void 0)continue;if(typeof g!=`object`||!g)throw TypeError(`Object expected`);(d=o(g.get))&&(u.get=d),(d=o(g.set))&&(u.set=d),(d=o(g.init))&&i.unshift(d)}else(d=o(g))&&(s===`field`?i.unshift(d):u[c]=d)}l&&Object.defineProperty(l,r.name,u),f=!0}function Ce(e,t,n){for(var r=arguments.length>2,i=0;i<t.length;i++)n=r?t[i].call(e,n):t[i].call(e);return r?n:void 0}function we(e){return typeof e==`symbol`?e:`${e}`}function z(e,t,n){return typeof t==`symbol`&&(t=t.description?`[${t.description}]`:``),Object.defineProperty(e,"name",{configurable:!0,value:n?`${n} ${t}`:t})}function Te(e,t){if(typeof Reflect==`object`&&typeof Reflect.metadata==`function`)return Reflect.metadata(e,t)}function Ee(e,t,n,r){function i(e){return e instanceof n?e:new n(function(t){t(e)})}return new(n||=Promise)(function(n,a){function o(e){try{c(r.next(e))}catch(e){a(e)}}function s(e){try{c(r.throw(e))}catch(e){a(e)}}function c(e){e.done?n(e.value):i(e.value).then(o,s)}c((r=r.apply(e,t||[])).next())})}function De(e,t){var n={label:0,sent:function(){if(a[0]&1)throw a[1];return a[1]},trys:[],ops:[]},r,i,a,o=Object.create((typeof Iterator==`function`?Iterator:Object).prototype);return o.next=s(0),o.throw=s(1),o.return=s(2),typeof Symbol==`function`&&(o[Symbol.iterator]=function(){return this}),o;function s(e){return function(t){return c([e,t])}}function c(s){if(r)throw TypeError(`Generator is already executing.`);for(;o&&(o=0,s[0]&&(n=0)),n;)try{if(r=1,i&&(a=s[0]&2?i.return:s[0]?i.throw||((a=i.return)&&a.call(i),0):i.next)&&!(a=a.call(i,s[1])).done)return a;switch(i=0,a&&(s=[s[0]&2,a.value]),s[0]){case 0:case 1:a=s;break;case 4:return n.label++,{value:s[1],done:!1};case 5:n.label++,i=s[1],s=[0];continue;case 7:s=n.ops.pop(),n.trys.pop();continue;default:if(a=n.trys,!(a=a.length>0&&a[a.length-1])&&(s[0]===6||s[0]===2)){n=0;continue}if(s[0]===3&&(!a||s[1]>a[0]&&s[1]<a[3])){n.label=s[1];break}if(s[0]===6&&n.label<a[1]){n.label=a[1],a=s;break}if(a&&n.label<a[2]){n.label=a[2],n.ops.push(s);break}a[2]&&n.ops.pop(),n.trys.pop();continue}s=t.call(e,n)}catch(e){s=[6,e],i=0}finally{r=a=0}if(s[0]&5)throw s[1];return{value:s[0]?s[1]:void 0,done:!0}}}function B(e,t){for(var n in e)n!=="default"&&!Object.prototype.hasOwnProperty.call(t,n)&&We(t,e,n)}function Oe(e){var t=typeof Symbol==`function`&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&typeof e.length==`number`)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw TypeError(t?`Object is not iterable.`:`Symbol.iterator is not defined.`)}function ke(e,t){var n=typeof Symbol==`function`&&e[Symbol.iterator];if(!n)return e;var r=n.call(e),i,a=[],o;try{for(;(t===void 0||t-->0)&&!(i=r.next()).done;)a.push(i.value)}catch(e){o={error:e}}finally{try{i&&!i.done&&(n=r.return)&&n.call(r)}finally{if(o)throw o.error}}return a}function V(){for(var e=[],t=0;t<arguments.length;t++)e=e.concat(ke(arguments[t]));return e}function Ae(){for(var e=0,t=0,n=arguments.length;t<n;t++)e+=arguments[t].length;for(var r=Array(e),i=0,t=0;t<n;t++)for(var a=arguments[t],o=0,s=a.length;o<s;o++,i++)r[i]=a[o];return r}function je(e,t,n){if(n||arguments.length===2)for(var r=0,i=t.length,a;r<i;r++)(a||!(r in t))&&(a||=Array.prototype.slice.call(t,0,r),a[r]=t[r]);return e.concat(a||Array.prototype.slice.call(t))}function Me(e){return this instanceof Me?(this.v=e,this):new Me(e)}function Ne(e,t,n){if(!Symbol.asyncIterator)throw TypeError(`Symbol.asyncIterator is not defined.`);var r=n.apply(e,t||[]),i,a=[];return i=Object.create((typeof AsyncIterator==`function`?AsyncIterator:Object).prototype),s(`next`),s(`throw`),s(`return`,o),i[Symbol.asyncIterator]=function(){return this},i;function o(e){return function(t){return Promise.resolve(t).then(e,d)}}function s(e,t){r[e]&&(i[e]=function(t){return new Promise(function(n,r){a.push([e,t,n,r])>1||c(e,t)})},t&&(i[e]=t(i[e])))}function c(e,t){try{l(r[e](t))}catch(e){f(a[0][3],e)}}function l(e){e.value instanceof Me?Promise.resolve(e.value.v).then(u,d):f(a[0][2],e)}function u(e){c(`next`,e)}function d(e){c(`throw`,e)}function f(e,t){e(t),a.shift(),a.length&&c(a[0][0],a[0][1])}}function Pe(e){var t,n;return t={},r(`next`),r(`throw`,function(e){throw e}),r(`return`),t[Symbol.iterator]=function(){return this},t;function r(r,i){t[r]=e[r]?function(t){return(n=!n)?{value:Me(e[r](t)),done:!1}:i?i(t):t}:i}}function Fe(e){if(!Symbol.asyncIterator)throw TypeError(`Symbol.asyncIterator is not defined.`);var t=e[Symbol.asyncIterator],n;return t?t.call(e):(e=typeof Oe==`function`?Oe(e):e[Symbol.iterator](),n={},r(`next`),r(`throw`),r(`return`),n[Symbol.asyncIterator]=function(){return this},n);function r(t){n[t]=e[t]&&function(n){return new Promise(function(r,a){n=e[t](n),i(r,a,n.done,n.value)})}}function i(e,t,n,r){Promise.resolve(r).then(function(t){e({value:t,done:n})},t)}}function Ie(e,t){return Object.defineProperty?Object.defineProperty(e,"raw",{value:t}):e.raw=t,e}function Le(e){if(e&&e.__esModule)return e;var t={};if(e!=null)for(var n=Ke(e),r=0;r<n.length;r++)n[r]!=="default"&&We(t,e,n[r]);return Ge(t,e),t}function Re(e){return e&&e.__esModule?e:{default:e}}function ze(e,t,n,r){if(n===`a`&&!r)throw TypeError(`Private accessor was defined without a getter`);if(typeof t==`function`?e!==t||!r:!t.has(e))throw TypeError(`Cannot read private member from an object whose class did not declare it`);return n===`m`?r:n===`a`?r.call(e):r?r.value:t.get(e)}function H(e,t,n,r,i){if(r===`m`)throw TypeError(`Private method is not writable`);if(r===`a`&&!i)throw TypeError(`Private accessor was defined without a setter`);if(typeof t==`function`?e!==t||!i:!t.has(e))throw TypeError(`Cannot write private member to an object whose class did not declare it`);return r===`a`?i.call(e,n):i?i.value=n:t.set(e,n),n}function Be(e,t){if(t===null||typeof t!=`object`&&typeof t!=`function`)throw TypeError(`Cannot use 'in' operator on non-object`);return typeof e==`function`?t===e:e.has(t)}function U(e,t,n){if(t!=null){if(typeof t!=`object`&&typeof t!=`function`)throw TypeError(`Object expected.`);var r,i;if(n){if(!Symbol.asyncDispose)throw TypeError(`Symbol.asyncDispose is not defined.`);r=t[Symbol.asyncDispose]}if(r===void 0){if(!Symbol.dispose)throw TypeError(`Symbol.dispose is not defined.`);r=t[Symbol.dispose],n&&(i=r)}if(typeof r!=`function`)throw TypeError(`Object not disposable.`);i&&(r=function(){try{i.call(this)}catch(e){return Promise.reject(e)}}),e.stack.push({value:t,dispose:r,async:n})}else n&&e.stack.push({async:!0});return t}function W(e){function t(t){e.error=e.hasError?new qe(t,e.error,`An error was suppressed during disposal.`):t,e.hasError=!0}var n,r=0;function i(){for(;n=e.stack.pop();)try{if(!n.async&&r===1)return r=0,e.stack.push(n),Promise.resolve().then(i);if(n.dispose){var a=n.dispose.call(n.value);if(n.async)return r|=2,Promise.resolve(a).then(i,function(e){return t(e),i()})}else r|=1}catch(e){t(e)}if(r===1)return e.hasError?Promise.reject(e.error):Promise.resolve();if(e.hasError)throw e.error}return i()}function Ve(e,t){return typeof e==`string`&&/^\.\.?\//.test(e)?e.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i,function(e,n,r,i,a){return n?t?`.jsx`:`.js`:r&&(!i||!a)?e:r+i+`.`+a.toLowerCase()+`js`}):e}var He,Ue,We,Ge,Ke,qe,Je,G=r((()=>{He=function(e,t){return He=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},He(e,t)},Ue=function(){return Ue=Object.assign||function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n],t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},Ue.apply(this,arguments)},We=Object.create?(function(e,t,n,r){r===void 0&&(r=n);var i=Object.getOwnPropertyDescriptor(t,n);(!i||(`get`in i?!t.__esModule:i.writable||i.configurable))&&(i={enumerable:!0,get:function(){return t[n]}}),Object.defineProperty(e,r,i)}):(function(e,t,n,r){r===void 0&&(r=n),e[r]=t[n]}),Ge=Object.create?(function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}):function(e,t){e.default=t},Ke=function(e){return Ke=Object.getOwnPropertyNames||function(e){var t=[];for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[t.length]=n);return t},Ke(e)},qe=typeof SuppressedError==`function`?SuppressedError:function(e,t,n){var r=Error(n);return r.name=`SuppressedError`,r.error=e,r.suppressed=t,r},Je={__extends:ye,__assign:Ue,__rest:be,__decorate:xe,__param:Se,__esDecorate:R,__runInitializers:Ce,__propKey:we,__setFunctionName:z,__metadata:Te,__awaiter:Ee,__generator:De,__createBinding:We,__exportStar:B,__values:Oe,__read:ke,__spread:V,__spreadArrays:Ae,__spreadArray:je,__await:Me,__asyncGenerator:Ne,__asyncDelegator:Pe,__asyncValues:Fe,__makeTemplateObject:Ie,__importStar:Le,__importDefault:Re,__classPrivateFieldGet:ze,__classPrivateFieldSet:H,__classPrivateFieldIn:Be,__addDisposableResource:U,__disposeResources:W,__rewriteRelativeImportExtension:Ve}})),Ye=s((e=>{
17
+ var e;(function(e){(function(t){var n=typeof globalThis==`object`?globalThis:typeof global==`object`?global:typeof self==`object`?self:typeof this==`object`?this:s(),r=i(e);n.Reflect!==void 0&&(r=i(n.Reflect,r)),t(r,n),n.Reflect===void 0&&(n.Reflect=e);function i(e,t){return function(n,r){Object.defineProperty(e,n,{configurable:!0,writable:!0,value:r}),t&&t(n,r)}}function a(){try{return Function(`return this;`)()}catch{}}function o(){try{return(0,eval)(`(function() { return this; })()`)}catch{}}function s(){return a()||o()}})(function(e,t){var n=Object.prototype.hasOwnProperty,r=typeof Symbol==`function`,i=r&&Symbol.toPrimitive!==void 0?Symbol.toPrimitive:`@@toPrimitive`,a=r&&Symbol.iterator!==void 0?Symbol.iterator:`@@iterator`,o=typeof Object.create==`function`,s={__proto__:[]}instanceof Array,c=!o&&!s,l={create:o?function(){return Te(Object.create(null))}:s?function(){return Te({__proto__:null})}:function(){return Te({})},has:c?function(e,t){return n.call(e,t)}:function(e,t){return t in e},get:c?function(e,t){return n.call(e,t)?e[t]:void 0}:function(e,t){return e[t]}},u=Object.getPrototypeOf(Function),d=typeof Map==`function`&&typeof Map.prototype.entries==`function`?Map:z(),f=typeof Set==`function`&&typeof Set.prototype.entries==`function`?Set:Ce(),p=typeof WeakMap==`function`?WeakMap:we(),m=r?Symbol.for(`@reflect-metadata:registry`):void 0,h=ye(),g=be(h);function _(e,t,n,r){if(N(n)){if(!ue(e)||!fe(t))throw TypeError();return D(e,t)}if(!ue(e)||!P(t)||!P(r)&&!N(r)&&!ie(r))throw TypeError();return ie(r)&&(r=void 0),n=F(n),O(e,t,n,r)}e(`decorate`,_);function v(e,t){function n(n,r){if(!P(n)||!N(r)&&!pe(r))throw TypeError();M(e,t,n,r)}return n}e(`metadata`,v);function y(e,t,n,r){if(!P(n))throw TypeError();return N(r)||(r=F(r)),M(e,t,n,r)}e(`defineMetadata`,y);function b(e,t,n){if(!P(t))throw TypeError();return N(n)||(n=F(n)),k(e,t,n)}e(`hasMetadata`,b);function x(e,t,n){if(!P(t))throw TypeError();return N(n)||(n=F(n)),A(e,t,n)}e(`hasOwnMetadata`,x);function S(e,t,n){if(!P(t))throw TypeError();return N(n)||(n=F(n)),ee(e,t,n)}e(`getMetadata`,S);function C(e,t,n){if(!P(t))throw TypeError();return N(n)||(n=F(n)),j(e,t,n)}e(`getOwnMetadata`,C);function w(e,t){if(!P(e))throw TypeError();return N(t)||(t=F(t)),te(e,t)}e(`getMetadataKeys`,w);function T(e,t){if(!P(e))throw TypeError();return N(t)||(t=F(t)),ne(e,t)}e(`getOwnMetadataKeys`,T);function E(e,t,n){if(!P(t)||(N(n)||(n=F(n)),!P(t)))throw TypeError();N(n)||(n=F(n));var r=Se(t,n,!1);return!N(r)&&r.OrdinaryDeleteMetadata(e,t,n)}e(`deleteMetadata`,E);function D(e,t){for(var n=e.length-1;n>=0;--n){var r=e[n],i=r(t);if(!N(i)&&!ie(i)){if(!fe(i))throw TypeError();t=i}}return t}function O(e,t,n,r){for(var i=e.length-1;i>=0;--i){var a=e[i],o=a(t,n,r);if(!N(o)&&!ie(o)){if(!P(o))throw TypeError();r=o}}return r}function k(e,t,n){if(A(e,t,n))return!0;var r=R(t);return!ie(r)&&k(e,r,n)}function A(e,t,n){var r=Se(t,n,!1);return!N(r)&&ce(r.OrdinaryHasOwnMetadata(e,t,n))}function ee(e,t,n){if(A(e,t,n))return j(e,t,n);var r=R(t);if(!ie(r))return ee(e,r,n)}function j(e,t,n){var r=Se(t,n,!1);if(!N(r))return r.OrdinaryGetOwnMetadata(e,t,n)}function M(e,t,n,r){Se(n,r,!0).OrdinaryDefineOwnMetadata(e,t,n,r)}function te(e,t){var n=ne(e,t),r=R(e);if(r===null)return n;var i=te(r,t);if(i.length<=0)return n;if(n.length<=0)return i;for(var a=new f,o=[],s=0,c=n;s<c.length;s++){var l=c[s],u=a.has(l);u||(a.add(l),o.push(l))}for(var d=0,p=i;d<p.length;d++){var l=p[d],u=a.has(l);u||(a.add(l),o.push(l))}return o}function ne(e,t){var n=Se(e,t,!1);return n?n.OrdinaryOwnMetadataKeys(e,t):[]}function re(e){if(e===null)return 1;switch(typeof e){case`undefined`:return 0;case`boolean`:return 2;case`string`:return 3;case`symbol`:return 4;case`number`:return 5;case`object`:return e===null?1:6;default:return 6}}function N(e){return e===void 0}function ie(e){return e===null}function ae(e){return typeof e==`symbol`}function P(e){return typeof e==`object`?e!==null:typeof e==`function`}function oe(e,t){switch(re(e)){case 0:return e;case 1:return e;case 2:return e;case 3:return e;case 4:return e;case 5:return e}var n=t===3?`string`:t===5?`number`:`default`,r=I(e,i);if(r!==void 0){var a=r.call(e,n);if(P(a))throw TypeError();return a}return se(e,n==="default"?`number`:n)}function se(e,t){if(t===`string`){var n=e.toString;if(de(n)){var r=n.call(e);if(!P(r))return r}var i=e.valueOf;if(de(i)){var r=i.call(e);if(!P(r))return r}}else{var i=e.valueOf;if(de(i)){var r=i.call(e);if(!P(r))return r}var a=e.toString;if(de(a)){var r=a.call(e);if(!P(r))return r}}throw TypeError()}function ce(e){return!!e}function le(e){return``+e}function F(e){var t=oe(e,3);return ae(t)?t:le(t)}function ue(e){return Array.isArray?Array.isArray(e):e instanceof Object?e instanceof Array:Object.prototype.toString.call(e)===`[object Array]`}function de(e){return typeof e==`function`}function fe(e){return typeof e==`function`}function pe(e){switch(re(e)){case 3:return!0;case 4:return!0;default:return!1}}function me(e,t){return e===t||e!==e&&t!==t}function I(e,t){var n=e[t];if(n!=null){if(!de(n))throw TypeError();return n}}function he(e){var t=I(e,a);if(!de(t))throw TypeError();var n=t.call(e);if(!P(n))throw TypeError();return n}function ge(e){return e.value}function L(e){var t=e.next();return!t.done&&t}function _e(e){var t=e.return;t&&t.call(e)}function R(e){var t=Object.getPrototypeOf(e);if(typeof e!=`function`||e===u||t!==u)return t;var n=e.prototype,r=n&&Object.getPrototypeOf(n);if(r==null||r===Object.prototype)return t;var i=r.constructor;return typeof i!=`function`||i===e?t:i}function ve(){var e;!N(m)&&t.Reflect!==void 0&&!(m in t.Reflect)&&typeof t.Reflect.defineMetadata==`function`&&(e=xe(t.Reflect));var n,r,i,a=new p,o={registerProvider:s,getProvider:l,setProvider:h};return o;function s(t){if(!Object.isExtensible(o))throw Error(`Cannot add provider to a frozen registry.`);switch(!0){case e===t:break;case N(n):n=t;break;case n===t:break;case N(r):r=t;break;case r===t:break;default:i===void 0&&(i=new f),i.add(t)}}function c(t,a){if(!N(n)){if(n.isProviderFor(t,a))return n;if(!N(r)){if(r.isProviderFor(t,a))return n;if(!N(i))for(var o=he(i);;){var s=L(o);if(!s)return;var c=ge(s);if(c.isProviderFor(t,a))return _e(o),c}}}if(!N(e)&&e.isProviderFor(t,a))return e}function l(e,t){var n=a.get(e),r;return N(n)||(r=n.get(t)),N(r)?(r=c(e,t),N(r)||(N(n)&&(n=new d,a.set(e,n)),n.set(t,r)),r):r}function u(e){if(N(e))throw TypeError();return n===e||r===e||!N(i)&&i.has(e)}function h(e,t,n){if(!u(n))throw Error(`Metadata provider not registered.`);var r=l(e,t);if(r!==n){if(!N(r))return!1;var i=a.get(e);N(i)&&(i=new d,a.set(e,i)),i.set(t,n)}return!0}}function ye(){var e;return!N(m)&&P(t.Reflect)&&Object.isExtensible(t.Reflect)&&(e=t.Reflect[m]),N(e)&&(e=ve()),!N(m)&&P(t.Reflect)&&Object.isExtensible(t.Reflect)&&Object.defineProperty(t.Reflect,m,{enumerable:!1,configurable:!1,writable:!1,value:e}),e}function be(e){var t=new p,n={isProviderFor:function(e,n){var r=t.get(e);return!N(r)&&r.has(n)},OrdinaryDefineOwnMetadata:o,OrdinaryHasOwnMetadata:i,OrdinaryGetOwnMetadata:a,OrdinaryOwnMetadataKeys:s,OrdinaryDeleteMetadata:c};return h.registerProvider(n),n;function r(r,i,a){var o=t.get(r),s=!1;if(N(o)){if(!a)return;o=new d,t.set(r,o),s=!0}var c=o.get(i);if(N(c)){if(!a)return;if(c=new d,o.set(i,c),!e.setProvider(r,i,n))throw o.delete(i),s&&t.delete(r),Error(`Wrong provider for target.`)}return c}function i(e,t,n){var i=r(t,n,!1);return!N(i)&&ce(i.has(e))}function a(e,t,n){var i=r(t,n,!1);if(!N(i))return i.get(e)}function o(e,t,n,i){r(n,i,!0).set(e,t)}function s(e,t){var n=[],i=r(e,t,!1);if(N(i))return n;for(var a=he(i.keys()),o=0;;){var s=L(a);if(!s)return n.length=o,n;var c=ge(s);try{n[o]=c}catch(e){try{_e(a)}finally{throw e}}o++}}function c(e,n,i){var a=r(n,i,!1);if(N(a)||!a.delete(e))return!1;if(a.size===0){var o=t.get(n);N(o)||(o.delete(i),o.size===0&&t.delete(o))}return!0}}function xe(e){var t=e.defineMetadata,n=e.hasOwnMetadata,r=e.getOwnMetadata,i=e.getOwnMetadataKeys,a=e.deleteMetadata,o=new p;return{isProviderFor:function(e,t){var n=o.get(e);return!N(n)&&n.has(t)?!0:i(e,t).length?(N(n)&&(n=new f,o.set(e,n)),n.add(t),!0):!1},OrdinaryDefineOwnMetadata:t,OrdinaryHasOwnMetadata:n,OrdinaryGetOwnMetadata:r,OrdinaryOwnMetadataKeys:i,OrdinaryDeleteMetadata:a}}function Se(e,t,n){var r=h.getProvider(e,t);if(!N(r))return r;if(n){if(h.setProvider(e,t,g))return g;throw Error(`Illegal state.`)}}function z(){var e={},t=[],n=function(){function e(e,t,n){this._index=0,this._keys=e,this._values=t,this._selector=n}return e.prototype[`@@iterator`]=function(){return this},e.prototype[a]=function(){return this},e.prototype.next=function(){var e=this._index;if(e>=0&&e<this._keys.length){var n=this._selector(this._keys[e],this._values[e]);return e+1>=this._keys.length?(this._index=-1,this._keys=t,this._values=t):this._index++,{value:n,done:!1}}return{value:void 0,done:!0}},e.prototype.throw=function(e){throw this._index>=0&&(this._index=-1,this._keys=t,this._values=t),e},e.prototype.return=function(e){return this._index>=0&&(this._index=-1,this._keys=t,this._values=t),{value:e,done:!0}},e}();return function(){function t(){this._keys=[],this._values=[],this._cacheKey=e,this._cacheIndex=-2}return Object.defineProperty(t.prototype,"size",{get:function(){return this._keys.length},enumerable:!0,configurable:!0}),t.prototype.has=function(e){return this._find(e,!1)>=0},t.prototype.get=function(e){var t=this._find(e,!1);return t>=0?this._values[t]:void 0},t.prototype.set=function(e,t){var n=this._find(e,!0);return this._values[n]=t,this},t.prototype.delete=function(t){var n=this._find(t,!1);if(n>=0){for(var r=this._keys.length,i=n+1;i<r;i++)this._keys[i-1]=this._keys[i],this._values[i-1]=this._values[i];return this._keys.length--,this._values.length--,me(t,this._cacheKey)&&(this._cacheKey=e,this._cacheIndex=-2),!0}return!1},t.prototype.clear=function(){this._keys.length=0,this._values.length=0,this._cacheKey=e,this._cacheIndex=-2},t.prototype.keys=function(){return new n(this._keys,this._values,r)},t.prototype.values=function(){return new n(this._keys,this._values,i)},t.prototype.entries=function(){return new n(this._keys,this._values,o)},t.prototype[`@@iterator`]=function(){return this.entries()},t.prototype[a]=function(){return this.entries()},t.prototype._find=function(e,t){if(!me(this._cacheKey,e)){this._cacheIndex=-1;for(var n=0;n<this._keys.length;n++)if(me(this._keys[n],e)){this._cacheIndex=n;break}}return this._cacheIndex<0&&t&&(this._cacheIndex=this._keys.length,this._keys.push(e),this._values.push(void 0)),this._cacheIndex},t}();function r(e,t){return e}function i(e,t){return t}function o(e,t){return[e,t]}}function Ce(){return function(){function e(){this._map=new d}return Object.defineProperty(e.prototype,"size",{get:function(){return this._map.size},enumerable:!0,configurable:!0}),e.prototype.has=function(e){return this._map.has(e)},e.prototype.add=function(e){return this._map.set(e,e),this},e.prototype.delete=function(e){return this._map.delete(e)},e.prototype.clear=function(){this._map.clear()},e.prototype.keys=function(){return this._map.keys()},e.prototype.values=function(){return this._map.keys()},e.prototype.entries=function(){return this._map.entries()},e.prototype[`@@iterator`]=function(){return this.keys()},e.prototype[a]=function(){return this.keys()},e}()}function we(){var e=l.create(),t=r();return function(){function e(){this._key=r()}return e.prototype.has=function(e){var t=i(e,!1);return t!==void 0&&l.has(t,this._key)},e.prototype.get=function(e){var t=i(e,!1);return t===void 0?void 0:l.get(t,this._key)},e.prototype.set=function(e,t){var n=i(e,!0);return n[this._key]=t,this},e.prototype.delete=function(e){var t=i(e,!1);return t!==void 0&&delete t[this._key]},e.prototype.clear=function(){this._key=r()},e}();function r(){var t;do t=`@@WeakMap@@`+s();while(l.has(e,t));return e[t]=!0,t}function i(e,r){if(!n.call(e,t)){if(!r)return;Object.defineProperty(e,t,{value:l.create()})}return e[t]}function a(e,t){for(var n=0;n<t;++n)e[n]=Math.random()*255|0;return e}function o(e){if(typeof Uint8Array==`function`){var t=new Uint8Array(e);return typeof crypto<`u`?crypto.getRandomValues(t):typeof msCrypto<`u`?msCrypto.getRandomValues(t):a(t,e),t}return a(Array(e),e)}function s(){var e=o(16);e[6]=e[6]&79|64,e[8]=e[8]&191|128;for(var t=``,n=0;n<16;++n){var r=e[n];(n===4||n===6||n===8)&&(t+=`-`),r<16&&(t+=`0`),t+=r.toString(16).toLowerCase()}return t}}function Te(e){return e.__=void 0,delete e.__,e}})})(e||={})})),B=r({__addDisposableResource:()=>Ze,__assign:()=>tt,__asyncDelegator:()=>We,__asyncGenerator:()=>Ue,__asyncValues:()=>Ge,__await:()=>He,__awaiter:()=>Le,__classPrivateFieldGet:()=>G,__classPrivateFieldIn:()=>Xe,__classPrivateFieldSet:()=>Ye,__createBinding:()=>nt,__decorate:()=>Ae,__disposeResources:()=>Qe,__esDecorate:()=>Me,__exportStar:()=>ze,__extends:()=>ke,__generator:()=>Re,__importDefault:()=>Je,__importStar:()=>qe,__makeTemplateObject:()=>Ke,__metadata:()=>Ie,__param:()=>je,__propKey:()=>Pe,__read:()=>Be,__rest:()=>V,__rewriteRelativeImportExtension:()=>$e,__runInitializers:()=>Ne,__setFunctionName:()=>Fe,__spread:()=>U,__spreadArray:()=>Ve,__spreadArrays:()=>W,__values:()=>H,default:()=>ot});function ke(e,t){if(typeof t!=`function`&&t!==null)throw TypeError(`Class extends value `+String(t)+` is not a constructor or null`);et(e,t);function n(){this.constructor=e}e.prototype=t===null?Object.create(t):(n.prototype=t.prototype,new n)}function V(e,t){var n={};for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&t.indexOf(r)<0&&(n[r]=e[r]);if(e!=null&&typeof Object.getOwnPropertySymbols==`function`)for(var i=0,r=Object.getOwnPropertySymbols(e);i<r.length;i++)t.indexOf(r[i])<0&&Object.prototype.propertyIsEnumerable.call(e,r[i])&&(n[r[i]]=e[r[i]]);return n}function Ae(e,t,n,r){var i=arguments.length,a=i<3?t:r===null?r=Object.getOwnPropertyDescriptor(t,n):r,o;if(typeof Reflect==`object`&&typeof Reflect.decorate==`function`)a=Reflect.decorate(e,t,n,r);else for(var s=e.length-1;s>=0;s--)(o=e[s])&&(a=(i<3?o(a):i>3?o(t,n,a):o(t,n))||a);return i>3&&a&&Object.defineProperty(t,n,a),a}function je(e,t){return function(n,r){t(n,r,e)}}function Me(e,t,n,r,i,a){function o(e){if(e!==void 0&&typeof e!=`function`)throw TypeError(`Function expected`);return e}for(var s=r.kind,c=s===`getter`?`get`:s===`setter`?`set`:`value`,l=!t&&e?r.static?e:e.prototype:null,u=t||(l?Object.getOwnPropertyDescriptor(l,r.name):{}),d,f=!1,p=n.length-1;p>=0;p--){var m={};for(var h in r)m[h]=h===`access`?{}:r[h];for(var h in r.access)m.access[h]=r.access[h];m.addInitializer=function(e){if(f)throw TypeError(`Cannot add initializers after decoration has completed`);a.push(o(e||null))};var g=(0,n[p])(s===`accessor`?{get:u.get,set:u.set}:u[c],m);if(s===`accessor`){if(g===void 0)continue;if(typeof g!=`object`||!g)throw TypeError(`Object expected`);(d=o(g.get))&&(u.get=d),(d=o(g.set))&&(u.set=d),(d=o(g.init))&&i.unshift(d)}else(d=o(g))&&(s===`field`?i.unshift(d):u[c]=d)}l&&Object.defineProperty(l,r.name,u),f=!0}function Ne(e,t,n){for(var r=arguments.length>2,i=0;i<t.length;i++)n=r?t[i].call(e,n):t[i].call(e);return r?n:void 0}function Pe(e){return typeof e==`symbol`?e:`${e}`}function Fe(e,t,n){return typeof t==`symbol`&&(t=t.description?`[${t.description}]`:``),Object.defineProperty(e,"name",{configurable:!0,value:n?`${n} ${t}`:t})}function Ie(e,t){if(typeof Reflect==`object`&&typeof Reflect.metadata==`function`)return Reflect.metadata(e,t)}function Le(e,t,n,r){function i(e){return e instanceof n?e:new n(function(t){t(e)})}return new(n||=Promise)(function(n,a){function o(e){try{c(r.next(e))}catch(e){a(e)}}function s(e){try{c(r.throw(e))}catch(e){a(e)}}function c(e){e.done?n(e.value):i(e.value).then(o,s)}c((r=r.apply(e,t||[])).next())})}function Re(e,t){var n={label:0,sent:function(){if(a[0]&1)throw a[1];return a[1]},trys:[],ops:[]},r,i,a,o=Object.create((typeof Iterator==`function`?Iterator:Object).prototype);return o.next=s(0),o.throw=s(1),o.return=s(2),typeof Symbol==`function`&&(o[Symbol.iterator]=function(){return this}),o;function s(e){return function(t){return c([e,t])}}function c(s){if(r)throw TypeError(`Generator is already executing.`);for(;o&&(o=0,s[0]&&(n=0)),n;)try{if(r=1,i&&(a=s[0]&2?i.return:s[0]?i.throw||((a=i.return)&&a.call(i),0):i.next)&&!(a=a.call(i,s[1])).done)return a;switch(i=0,a&&(s=[s[0]&2,a.value]),s[0]){case 0:case 1:a=s;break;case 4:return n.label++,{value:s[1],done:!1};case 5:n.label++,i=s[1],s=[0];continue;case 7:s=n.ops.pop(),n.trys.pop();continue;default:if(a=n.trys,!(a=a.length>0&&a[a.length-1])&&(s[0]===6||s[0]===2)){n=0;continue}if(s[0]===3&&(!a||s[1]>a[0]&&s[1]<a[3])){n.label=s[1];break}if(s[0]===6&&n.label<a[1]){n.label=a[1],a=s;break}if(a&&n.label<a[2]){n.label=a[2],n.ops.push(s);break}a[2]&&n.ops.pop(),n.trys.pop();continue}s=t.call(e,n)}catch(e){s=[6,e],i=0}finally{r=a=0}if(s[0]&5)throw s[1];return{value:s[0]?s[1]:void 0,done:!0}}}function ze(e,t){for(var n in e)n!=="default"&&!Object.prototype.hasOwnProperty.call(t,n)&&nt(t,e,n)}function H(e){var t=typeof Symbol==`function`&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&typeof e.length==`number`)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw TypeError(t?`Object is not iterable.`:`Symbol.iterator is not defined.`)}function Be(e,t){var n=typeof Symbol==`function`&&e[Symbol.iterator];if(!n)return e;var r=n.call(e),i,a=[],o;try{for(;(t===void 0||t-->0)&&!(i=r.next()).done;)a.push(i.value)}catch(e){o={error:e}}finally{try{i&&!i.done&&(n=r.return)&&n.call(r)}finally{if(o)throw o.error}}return a}function U(){for(var e=[],t=0;t<arguments.length;t++)e=e.concat(Be(arguments[t]));return e}function W(){for(var e=0,t=0,n=arguments.length;t<n;t++)e+=arguments[t].length;for(var r=Array(e),i=0,t=0;t<n;t++)for(var a=arguments[t],o=0,s=a.length;o<s;o++,i++)r[i]=a[o];return r}function Ve(e,t,n){if(n||arguments.length===2)for(var r=0,i=t.length,a;r<i;r++)(a||!(r in t))&&(a||=Array.prototype.slice.call(t,0,r),a[r]=t[r]);return e.concat(a||Array.prototype.slice.call(t))}function He(e){return this instanceof He?(this.v=e,this):new He(e)}function Ue(e,t,n){if(!Symbol.asyncIterator)throw TypeError(`Symbol.asyncIterator is not defined.`);var r=n.apply(e,t||[]),i,a=[];return i=Object.create((typeof AsyncIterator==`function`?AsyncIterator:Object).prototype),s(`next`),s(`throw`),s(`return`,o),i[Symbol.asyncIterator]=function(){return this},i;function o(e){return function(t){return Promise.resolve(t).then(e,d)}}function s(e,t){r[e]&&(i[e]=function(t){return new Promise(function(n,r){a.push([e,t,n,r])>1||c(e,t)})},t&&(i[e]=t(i[e])))}function c(e,t){try{l(r[e](t))}catch(e){f(a[0][3],e)}}function l(e){e.value instanceof He?Promise.resolve(e.value.v).then(u,d):f(a[0][2],e)}function u(e){c(`next`,e)}function d(e){c(`throw`,e)}function f(e,t){e(t),a.shift(),a.length&&c(a[0][0],a[0][1])}}function We(e){var t={},n;return r(`next`),r(`throw`,function(e){throw e}),r(`return`),t[Symbol.iterator]=function(){return this},t;function r(r,i){t[r]=e[r]?function(t){return(n=!n)?{value:He(e[r](t)),done:!1}:i?i(t):t}:i}}function Ge(e){if(!Symbol.asyncIterator)throw TypeError(`Symbol.asyncIterator is not defined.`);var t=e[Symbol.asyncIterator],n;return t?t.call(e):(e=typeof H==`function`?H(e):e[Symbol.iterator](),n={},r(`next`),r(`throw`),r(`return`),n[Symbol.asyncIterator]=function(){return this},n);function r(t){n[t]=e[t]&&function(n){return new Promise(function(r,a){n=e[t](n),i(r,a,n.done,n.value)})}}function i(e,t,n,r){Promise.resolve(r).then(function(t){e({value:t,done:n})},t)}}function Ke(e,t){return Object.defineProperty?Object.defineProperty(e,"raw",{value:t}):e.raw=t,e}function qe(e){if(e&&e.__esModule)return e;var t={};if(e!=null)for(var n=it(e),r=0;r<n.length;r++)n[r]!=="default"&&nt(t,e,n[r]);return rt(t,e),t}function Je(e){return e&&e.__esModule?e:{default:e}}function G(e,t,n,r){if(n===`a`&&!r)throw TypeError(`Private accessor was defined without a getter`);if(typeof t==`function`?e!==t||!r:!t.has(e))throw TypeError(`Cannot read private member from an object whose class did not declare it`);return n===`m`?r:n===`a`?r.call(e):r?r.value:t.get(e)}function Ye(e,t,n,r,i){if(r===`m`)throw TypeError(`Private method is not writable`);if(r===`a`&&!i)throw TypeError(`Private accessor was defined without a setter`);if(typeof t==`function`?e!==t||!i:!t.has(e))throw TypeError(`Cannot write private member to an object whose class did not declare it`);return r===`a`?i.call(e,n):i?i.value=n:t.set(e,n),n}function Xe(e,t){if(t===null||typeof t!=`object`&&typeof t!=`function`)throw TypeError(`Cannot use 'in' operator on non-object`);return typeof e==`function`?t===e:e.has(t)}function Ze(e,t,n){if(t!=null){if(typeof t!=`object`&&typeof t!=`function`)throw TypeError(`Object expected.`);var r,i;if(n){if(!Symbol.asyncDispose)throw TypeError(`Symbol.asyncDispose is not defined.`);r=t[Symbol.asyncDispose]}if(r===void 0){if(!Symbol.dispose)throw TypeError(`Symbol.dispose is not defined.`);r=t[Symbol.dispose],n&&(i=r)}if(typeof r!=`function`)throw TypeError(`Object not disposable.`);i&&(r=function(){try{i.call(this)}catch(e){return Promise.reject(e)}}),e.stack.push({value:t,dispose:r,async:n})}else n&&e.stack.push({async:!0});return t}function Qe(e){function t(t){e.error=e.hasError?new at(t,e.error,`An error was suppressed during disposal.`):t,e.hasError=!0}var n,r=0;function i(){for(;n=e.stack.pop();)try{if(!n.async&&r===1)return r=0,e.stack.push(n),Promise.resolve().then(i);if(n.dispose){var a=n.dispose.call(n.value);if(n.async)return r|=2,Promise.resolve(a).then(i,function(e){return t(e),i()})}else r|=1}catch(e){t(e)}if(r===1)return e.hasError?Promise.reject(e.error):Promise.resolve();if(e.hasError)throw e.error}return i()}function $e(e,t){return typeof e==`string`&&/^\.\.?\//.test(e)?e.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i,function(e,n,r,i,a){return n?t?`.jsx`:`.js`:r&&(!i||!a)?e:r+i+`.`+a.toLowerCase()+`js`}):e}var et,tt,nt,rt,it,at,ot,K=n((()=>{et=function(e,t){return et=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},et(e,t)},tt=function(){return tt=Object.assign||function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n],t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},tt.apply(this,arguments)},nt=Object.create?(function(e,t,n,r){r===void 0&&(r=n);var i=Object.getOwnPropertyDescriptor(t,n);(!i||(`get`in i?!t.__esModule:i.writable||i.configurable))&&(i={enumerable:!0,get:function(){return t[n]}}),Object.defineProperty(e,r,i)}):(function(e,t,n,r){r===void 0&&(r=n),e[r]=t[n]}),rt=Object.create?(function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}):function(e,t){e.default=t},it=function(e){return it=Object.getOwnPropertyNames||function(e){var t=[];for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[t.length]=n);return t},it(e)},at=typeof SuppressedError==`function`?SuppressedError:function(e,t,n){var r=Error(n);return r.name=`SuppressedError`,r.error=e,r.suppressed=t,r},ot={__extends:ke,__assign:tt,__rest:V,__decorate:Ae,__param:je,__esDecorate:Me,__runInitializers:Ne,__propKey:Pe,__setFunctionName:Fe,__metadata:Ie,__awaiter:Le,__generator:Re,__createBinding:nt,__exportStar:ze,__values:H,__read:Be,__spread:U,__spreadArrays:W,__spreadArray:Ve,__await:He,__asyncGenerator:Ue,__asyncDelegator:We,__asyncValues:Ge,__makeTemplateObject:Ke,__importStar:qe,__importDefault:Je,__classPrivateFieldGet:G,__classPrivateFieldSet:Ye,__classPrivateFieldIn:Xe,__addDisposableResource:Ze,__disposeResources:Qe,__rewriteRelativeImportExtension:$e}})),st=i((e=>{
18
18
  /*!
19
19
  * MIT License
20
20
  *
@@ -39,11 +39,11 @@ var e;(function(e){(function(t){var n=typeof globalThis==`object`?globalThis:typ
39
39
  * SOFTWARE.
40
40
  *
41
41
  */
42
- var t=class e{static isArrayBuffer(e){return Object.prototype.toString.call(e)===`[object ArrayBuffer]`}static toArrayBuffer(e){return this.isArrayBuffer(e)?e:e.byteLength===e.buffer.byteLength||e.byteOffset===0&&e.byteLength===e.buffer.byteLength?e.buffer:this.toUint8Array(e.buffer).slice(e.byteOffset,e.byteOffset+e.byteLength).buffer}static toUint8Array(e){return this.toView(e,Uint8Array)}static toView(e,t){if(e.constructor===t)return e;if(this.isArrayBuffer(e))return new t(e);if(this.isArrayBufferView(e))return new t(e.buffer,e.byteOffset,e.byteLength);throw TypeError(`The provided value is not of type '(ArrayBuffer or ArrayBufferView)'`)}static isBufferSource(e){return this.isArrayBufferView(e)||this.isArrayBuffer(e)}static isArrayBufferView(e){return ArrayBuffer.isView(e)||e&&this.isArrayBuffer(e.buffer)}static isEqual(t,n){let r=e.toUint8Array(t),i=e.toUint8Array(n);if(r.length!==i.byteLength)return!1;for(let e=0;e<r.length;e++)if(r[e]!==i[e])return!1;return!0}static concat(...e){let t;t=Array.isArray(e[0])&&!(e[1]instanceof Function)||Array.isArray(e[0])&&e[1]instanceof Function?e[0]:e[e.length-1]instanceof Function?e.slice(0,e.length-1):e;let n=0;for(let e of t)n+=e.byteLength;let r=new Uint8Array(n),i=0;for(let e of t){let t=this.toUint8Array(e);r.set(t,i),i+=t.length}return e[e.length-1]instanceof Function?this.toView(r,e[e.length-1]):r.buffer}};let n=`string`,r=/^[0-9a-f\s]+$/i,i=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/,a=/^[a-zA-Z0-9-_]+$/;var o=class{static fromString(e){let t=unescape(encodeURIComponent(e)),n=new Uint8Array(t.length);for(let e=0;e<t.length;e++)n[e]=t.charCodeAt(e);return n.buffer}static toString(e){let n=t.toUint8Array(e),r=``;for(let e=0;e<n.length;e++)r+=String.fromCharCode(n[e]);return decodeURIComponent(escape(r))}},s=class{static toString(e,n=!1){let r=t.toArrayBuffer(e),i=new DataView(r),a=``;for(let e=0;e<r.byteLength;e+=2){let t=i.getUint16(e,n);a+=String.fromCharCode(t)}return a}static fromString(e,t=!1){let n=new ArrayBuffer(e.length*2),r=new DataView(n);for(let n=0;n<e.length;n++)r.setUint16(n*2,e.charCodeAt(n),t);return n}},c=class e{static isHex(e){return typeof e==n&&r.test(e)}static isBase64(e){return typeof e==n&&i.test(e)}static isBase64Url(e){return typeof e==n&&a.test(e)}static ToString(e,n=`utf8`){let r=t.toUint8Array(e);switch(n.toLowerCase()){case`utf8`:return this.ToUtf8String(r);case`binary`:return this.ToBinary(r);case`hex`:return this.ToHex(r);case`base64`:return this.ToBase64(r);case`base64url`:return this.ToBase64Url(r);case`utf16le`:return s.toString(r,!0);case`utf16`:case`utf16be`:return s.toString(r);default:throw Error(`Unknown type of encoding '${n}'`)}}static FromString(e,t=`utf8`){if(!e)return new ArrayBuffer(0);switch(t.toLowerCase()){case`utf8`:return this.FromUtf8String(e);case`binary`:return this.FromBinary(e);case`hex`:return this.FromHex(e);case`base64`:return this.FromBase64(e);case`base64url`:return this.FromBase64Url(e);case`utf16le`:return s.fromString(e,!0);case`utf16`:case`utf16be`:return s.fromString(e);default:throw Error(`Unknown type of encoding '${t}'`)}}static ToBase64(e){let n=t.toUint8Array(e);if(typeof btoa<`u`){let e=this.ToString(n,`binary`);return btoa(e)}return Buffer.from(n).toString(`base64`)}static FromBase64(t){let n=this.formatString(t);if(!n)return new ArrayBuffer(0);if(!e.isBase64(n))throw TypeError(`Argument 'base64Text' is not Base64 encoded`);return typeof atob<`u`?this.FromBinary(atob(n)):new Uint8Array(Buffer.from(n,`base64`)).buffer}static FromBase64Url(t){let n=this.formatString(t);if(!n)return new ArrayBuffer(0);if(!e.isBase64Url(n))throw TypeError(`Argument 'base64url' is not Base64Url encoded`);return this.FromBase64(this.Base64Padding(n.replace(/\-/g,`+`).replace(/\_/g,`/`)))}static ToBase64Url(e){return this.ToBase64(e).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/\=/g,``)}static FromUtf8String(t,n=e.DEFAULT_UTF8_ENCODING){switch(n){case`ascii`:return this.FromBinary(t);case`utf8`:return o.fromString(t);case`utf16`:case`utf16be`:return s.fromString(t);case`utf16le`:case`usc2`:return s.fromString(t,!0);default:throw Error(`Unknown type of encoding '${n}'`)}}static ToUtf8String(t,n=e.DEFAULT_UTF8_ENCODING){switch(n){case`ascii`:return this.ToBinary(t);case`utf8`:return o.toString(t);case`utf16`:case`utf16be`:return s.toString(t);case`utf16le`:case`usc2`:return s.toString(t,!0);default:throw Error(`Unknown type of encoding '${n}'`)}}static FromBinary(e){let t=e.length,n=new Uint8Array(t);for(let r=0;r<t;r++)n[r]=e.charCodeAt(r);return n.buffer}static ToBinary(e){let n=t.toUint8Array(e),r=``;for(let e=0;e<n.length;e++)r+=String.fromCharCode(n[e]);return r}static ToHex(e){let n=t.toUint8Array(e),r=``,i=n.length;for(let e=0;e<i;e++){let t=n[e];t<16&&(r+=`0`),r+=t.toString(16)}return r}static FromHex(t){let n=this.formatString(t);if(!n)return new ArrayBuffer(0);if(!e.isHex(n))throw TypeError(`Argument 'hexString' is not HEX encoded`);n.length%2&&(n=`0${n}`);let r=new Uint8Array(n.length/2);for(let e=0;e<n.length;e+=2){let t=n.slice(e,e+2);r[e/2]=parseInt(t,16)}return r.buffer}static ToUtf16String(e,t=!1){return s.toString(e,t)}static FromUtf16String(e,t=!1){return s.fromString(e,t)}static Base64Padding(e){let t=4-e.length%4;if(t<4)for(let n=0;n<t;n++)e+=`=`;return e}static formatString(e){return e?.replace(/[\n\r\t ]/g,``)||``}};c.DEFAULT_UTF8_ENCODING=`utf8`;function l(e,...t){let n=arguments[0];for(let e=1;e<arguments.length;e++){let t=arguments[e];for(let e in t)n[e]=t[e]}return n}function u(...e){let t=e.map(e=>e.byteLength).reduce((e,t)=>e+t),n=new Uint8Array(t),r=0;return e.map(e=>new Uint8Array(e)).forEach(e=>{for(let t of e)n[r++]=t}),n.buffer}function d(e,t){if(!(e&&t)||e.byteLength!==t.byteLength)return!1;let n=new Uint8Array(e),r=new Uint8Array(t);for(let t=0;t<e.byteLength;t++)if(n[t]!==r[t])return!1;return!0}e.BufferSourceConverter=t,e.Convert=c,e.assign=l,e.combine=u,e.isEqual=d})),Xe=s((e=>{
42
+ var t=class e{static isArrayBuffer(e){return Object.prototype.toString.call(e)===`[object ArrayBuffer]`}static toArrayBuffer(e){return this.isArrayBuffer(e)?e:e.byteLength===e.buffer.byteLength||e.byteOffset===0&&e.byteLength===e.buffer.byteLength?e.buffer:this.toUint8Array(e.buffer).slice(e.byteOffset,e.byteOffset+e.byteLength).buffer}static toUint8Array(e){return this.toView(e,Uint8Array)}static toView(e,t){if(e.constructor===t)return e;if(this.isArrayBuffer(e))return new t(e);if(this.isArrayBufferView(e))return new t(e.buffer,e.byteOffset,e.byteLength);throw TypeError(`The provided value is not of type '(ArrayBuffer or ArrayBufferView)'`)}static isBufferSource(e){return this.isArrayBufferView(e)||this.isArrayBuffer(e)}static isArrayBufferView(e){return ArrayBuffer.isView(e)||e&&this.isArrayBuffer(e.buffer)}static isEqual(t,n){let r=e.toUint8Array(t),i=e.toUint8Array(n);if(r.length!==i.byteLength)return!1;for(let e=0;e<r.length;e++)if(r[e]!==i[e])return!1;return!0}static concat(...e){let t;t=Array.isArray(e[0])&&!(e[1]instanceof Function)||Array.isArray(e[0])&&e[1]instanceof Function?e[0]:e[e.length-1]instanceof Function?e.slice(0,e.length-1):e;let n=0;for(let e of t)n+=e.byteLength;let r=new Uint8Array(n),i=0;for(let e of t){let t=this.toUint8Array(e);r.set(t,i),i+=t.length}return e[e.length-1]instanceof Function?this.toView(r,e[e.length-1]):r.buffer}};let n=`string`,r=/^[0-9a-f\s]+$/i,i=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/,a=/^[a-zA-Z0-9-_]+$/;var o=class{static fromString(e){let t=unescape(encodeURIComponent(e)),n=new Uint8Array(t.length);for(let e=0;e<t.length;e++)n[e]=t.charCodeAt(e);return n.buffer}static toString(e){let n=t.toUint8Array(e),r=``;for(let e=0;e<n.length;e++)r+=String.fromCharCode(n[e]);return decodeURIComponent(escape(r))}},s=class{static toString(e,n=!1){let r=t.toArrayBuffer(e),i=new DataView(r),a=``;for(let e=0;e<r.byteLength;e+=2){let t=i.getUint16(e,n);a+=String.fromCharCode(t)}return a}static fromString(e,t=!1){let n=new ArrayBuffer(e.length*2),r=new DataView(n);for(let n=0;n<e.length;n++)r.setUint16(n*2,e.charCodeAt(n),t);return n}},c=class e{static isHex(e){return typeof e==n&&r.test(e)}static isBase64(e){return typeof e==n&&i.test(e)}static isBase64Url(e){return typeof e==n&&a.test(e)}static ToString(e,n=`utf8`){let r=t.toUint8Array(e);switch(n.toLowerCase()){case`utf8`:return this.ToUtf8String(r);case`binary`:return this.ToBinary(r);case`hex`:return this.ToHex(r);case`base64`:return this.ToBase64(r);case`base64url`:return this.ToBase64Url(r);case`utf16le`:return s.toString(r,!0);case`utf16`:case`utf16be`:return s.toString(r);default:throw Error(`Unknown type of encoding '${n}'`)}}static FromString(e,t=`utf8`){if(!e)return new ArrayBuffer(0);switch(t.toLowerCase()){case`utf8`:return this.FromUtf8String(e);case`binary`:return this.FromBinary(e);case`hex`:return this.FromHex(e);case`base64`:return this.FromBase64(e);case`base64url`:return this.FromBase64Url(e);case`utf16le`:return s.fromString(e,!0);case`utf16`:case`utf16be`:return s.fromString(e);default:throw Error(`Unknown type of encoding '${t}'`)}}static ToBase64(e){let n=t.toUint8Array(e);if(typeof btoa<`u`){let e=this.ToString(n,`binary`);return btoa(e)}return Buffer.from(n).toString(`base64`)}static FromBase64(t){let n=this.formatString(t);if(!n)return new ArrayBuffer(0);if(!e.isBase64(n))throw TypeError(`Argument 'base64Text' is not Base64 encoded`);return typeof atob<`u`?this.FromBinary(atob(n)):new Uint8Array(Buffer.from(n,`base64`)).buffer}static FromBase64Url(t){let n=this.formatString(t);if(!n)return new ArrayBuffer(0);if(!e.isBase64Url(n))throw TypeError(`Argument 'base64url' is not Base64Url encoded`);return this.FromBase64(this.Base64Padding(n.replace(/\-/g,`+`).replace(/\_/g,`/`)))}static ToBase64Url(e){return this.ToBase64(e).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/\=/g,``)}static FromUtf8String(t,n=e.DEFAULT_UTF8_ENCODING){switch(n){case`ascii`:return this.FromBinary(t);case`utf8`:return o.fromString(t);case`utf16`:case`utf16be`:return s.fromString(t);case`utf16le`:case`usc2`:return s.fromString(t,!0);default:throw Error(`Unknown type of encoding '${n}'`)}}static ToUtf8String(t,n=e.DEFAULT_UTF8_ENCODING){switch(n){case`ascii`:return this.ToBinary(t);case`utf8`:return o.toString(t);case`utf16`:case`utf16be`:return s.toString(t);case`utf16le`:case`usc2`:return s.toString(t,!0);default:throw Error(`Unknown type of encoding '${n}'`)}}static FromBinary(e){let t=e.length,n=new Uint8Array(t);for(let r=0;r<t;r++)n[r]=e.charCodeAt(r);return n.buffer}static ToBinary(e){let n=t.toUint8Array(e),r=``;for(let e=0;e<n.length;e++)r+=String.fromCharCode(n[e]);return r}static ToHex(e){let n=t.toUint8Array(e),r=``,i=n.length;for(let e=0;e<i;e++){let t=n[e];t<16&&(r+=`0`),r+=t.toString(16)}return r}static FromHex(t){let n=this.formatString(t);if(!n)return new ArrayBuffer(0);if(!e.isHex(n))throw TypeError(`Argument 'hexString' is not HEX encoded`);n.length%2&&(n=`0${n}`);let r=new Uint8Array(n.length/2);for(let e=0;e<n.length;e+=2){let t=n.slice(e,e+2);r[e/2]=parseInt(t,16)}return r.buffer}static ToUtf16String(e,t=!1){return s.toString(e,t)}static FromUtf16String(e,t=!1){return s.fromString(e,t)}static Base64Padding(e){let t=4-e.length%4;if(t<4)for(let n=0;n<t;n++)e+=`=`;return e}static formatString(e){return e?.replace(/[\n\r\t ]/g,``)||``}};c.DEFAULT_UTF8_ENCODING=`utf8`;function l(e,...t){let n=arguments[0];for(let e=1;e<arguments.length;e++){let t=arguments[e];for(let e in t)n[e]=t[e]}return n}function u(...e){let t=e.map(e=>e.byteLength).reduce((e,t)=>e+t),n=new Uint8Array(t),r=0;return e.map(e=>new Uint8Array(e)).forEach(e=>{for(let t of e)n[r++]=t}),n.buffer}function d(e,t){if(!(e&&t)||e.byteLength!==t.byteLength)return!1;let n=new Uint8Array(e),r=new Uint8Array(t);for(let t=0;t<e.byteLength;t++)if(n[t]!==r[t])return!1;return!0}e.BufferSourceConverter=t,e.Convert=c,e.assign=l,e.combine=u,e.isEqual=d})),ct=i((e=>{
43
43
  /*!
44
44
  Copyright (c) Peculiar Ventures, LLC
45
45
  */
46
- Object.defineProperty(e,"__esModule",{value:!0});function t(e){return new Date(e.getTime()+e.getTimezoneOffset()*6e4)}function n(e,t,n){return e instanceof Object?e[t]??n:n}function r(e,t=0,n=e.byteLength-t,r=!1){let i=``;for(let a of new Uint8Array(e,t,n)){let e=a.toString(16).toUpperCase();e.length===1&&(i+=`0`),i+=e,r&&(i+=` `)}return i.trim()}function i(e,t,n,r){return t instanceof ArrayBuffer?t.byteLength?n<0?(e.error=`Wrong parameter: inputOffset less than zero`,!1):r<0?(e.error=`Wrong parameter: inputLength less than zero`,!1):t.byteLength-n-r<0?(e.error=`End of input reached before message was fully decoded (inconsistent offset and length values)`,!1):!0:(e.error=`Wrong parameter: inputBuffer has zero length`,!1):(e.error=`Wrong parameter: inputBuffer must be "ArrayBuffer"`,!1)}function a(e,t){let n=0;if(e.length===1)return e[0];for(let r=e.length-1;r>=0;r--)n+=e[e.length-1-r]*2**(t*r);return n}function o(e,t,n=-1){let r=n,i=e,a=0,o=2**t;for(let n=1;n<8;n++){if(e<o){let e;if(r<0)e=new ArrayBuffer(n),a=n;else{if(r<n)return new ArrayBuffer(0);e=new ArrayBuffer(r),a=r}let o=new Uint8Array(e);for(let e=n-1;e>=0;e--){let n=2**(e*t);o[a-e-1]=Math.floor(i/n),i-=o[a-e-1]*n}return e}o*=2**t}return new ArrayBuffer(0)}function s(...e){let t=0,n=0;for(let n of e)t+=n.byteLength;let r=new ArrayBuffer(t),i=new Uint8Array(r);for(let t of e)i.set(new Uint8Array(t),n),n+=t.byteLength;return r}function c(...e){let t=0,n=0;for(let n of e)t+=n.length;let r=new ArrayBuffer(t),i=new Uint8Array(r);for(let t of e)i.set(t,n),n+=t.length;return i}function l(){let e=new Uint8Array(this.valueHex);if(this.valueHex.byteLength>=2){let t=e[0]===255&&e[1]&128,n=e[0]===0&&!(e[1]&128);(t||n)&&this.warnings.push(`Needlessly long format`)}let t=new ArrayBuffer(this.valueHex.byteLength),n=new Uint8Array(t);for(let e=0;e<this.valueHex.byteLength;e++)n[e]=0;n[0]=e[0]&128;let r=a(n,8),i=new ArrayBuffer(this.valueHex.byteLength),o=new Uint8Array(i);for(let t=0;t<this.valueHex.byteLength;t++)o[t]=e[t];return o[0]&=127,a(o,8)-r}function u(e){let t=e<0?e*-1:e,n=128;for(let r=1;r<8;r++){if(t<=n){if(e<0){let e=o(n-t,8,r),i=new Uint8Array(e);return i[0]|=128,e}let i=o(t,8,r),a=new Uint8Array(i);if(a[0]&128){let e=i.slice(0),t=new Uint8Array(e);i=new ArrayBuffer(i.byteLength+1),a=new Uint8Array(i);for(let n=0;n<e.byteLength;n++)a[n+1]=t[n];a[0]=0}return i}n*=2**8}return new ArrayBuffer(0)}function d(e,t){if(e.byteLength!==t.byteLength)return!1;let n=new Uint8Array(e),r=new Uint8Array(t);for(let e=0;e<n.length;e++)if(n[e]!==r[e])return!1;return!0}function f(e,t){let n=e.toString(10);if(t<n.length)return``;let r=t-n.length,i=Array(r);for(let e=0;e<r;e++)i[e]=`0`;return i.join(``).concat(n)}let p=`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=`,m=`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_=`;function h(e,t=!1,n=!1,r=!1){let i=0,a=0,o=0,s=``,c=t?m:p;if(r){let t=0;for(let n=0;n<e.length;n++)if(e.charCodeAt(n)!==0){t=n;break}e=e.slice(t)}for(;i<e.length;){let t=e.charCodeAt(i++);i>=e.length&&(a=1);let r=e.charCodeAt(i++);i>=e.length&&(o=1);let l=e.charCodeAt(i++),u=t>>2,d=(t&3)<<4|r>>4,f=(r&15)<<2|l>>6,p=l&63;a===1?f=p=64:o===1&&(p=64),s+=n?f===64?`${c.charAt(u)}${c.charAt(d)}`:p===64?`${c.charAt(u)}${c.charAt(d)}${c.charAt(f)}`:`${c.charAt(u)}${c.charAt(d)}${c.charAt(f)}${c.charAt(p)}`:`${c.charAt(u)}${c.charAt(d)}${c.charAt(f)}${c.charAt(p)}`}return s}function g(e,t=!1,n=!1){let r=t?m:p;function i(e){for(let t=0;t<64;t++)if(r.charAt(t)===e)return t;return 64}function a(e){return e===64?0:e}let o=0,s=``;for(;o<e.length;){let t=i(e.charAt(o++)),n=o>=e.length?0:i(e.charAt(o++)),r=o>=e.length?0:i(e.charAt(o++)),c=o>=e.length?0:i(e.charAt(o++)),l=a(t)<<2|a(n)>>4,u=(a(n)&15)<<4|a(r)>>2,d=(a(r)&3)<<6|a(c);s+=String.fromCharCode(l),r!==64&&(s+=String.fromCharCode(u)),c!==64&&(s+=String.fromCharCode(d))}if(n){let e=s.length,t=-1;for(let n=e-1;n>=0;n--)if(s.charCodeAt(n)!==0){t=n;break}s=t===-1?``:s.slice(0,t+1)}return s}function _(e){let t=``,n=new Uint8Array(e);for(let e of n)t+=String.fromCharCode(e);return t}function v(e){let t=e.length,n=new ArrayBuffer(t),r=new Uint8Array(n);for(let n=0;n<t;n++)r[n]=e.charCodeAt(n);return n}let y=Math.log(2);function b(e){let t=Math.log(e)/y,n=Math.floor(t),r=Math.round(t);return n===r?n:r}function x(e,t){for(let n of t)delete e[n]}e.arrayBufferToString=_,e.bufferToHexCodes=r,e.checkBufferParams=i,e.clearProps=x,e.fromBase64=g,e.getParametersValue=n,e.getUTCDate=t,e.isEqualBuffer=d,e.nearestPowerOf2=b,e.padNumber=f,e.stringToArrayBuffer=v,e.toBase64=h,e.utilConcatBuf=s,e.utilConcatView=c,e.utilDecodeTC=l,e.utilEncodeTC=u,e.utilFromBase=a,e.utilToBase=o})),Ze=s((e=>{
46
+ Object.defineProperty(e,"__esModule",{value:!0});function t(e){return new Date(e.getTime()+e.getTimezoneOffset()*6e4)}function n(e,t,n){return e instanceof Object?e[t]??n:n}function r(e,t=0,n=e.byteLength-t,r=!1){let i=``;for(let a of new Uint8Array(e,t,n)){let e=a.toString(16).toUpperCase();e.length===1&&(i+=`0`),i+=e,r&&(i+=` `)}return i.trim()}function i(e,t,n,r){return t instanceof ArrayBuffer?t.byteLength?n<0?(e.error=`Wrong parameter: inputOffset less than zero`,!1):r<0?(e.error=`Wrong parameter: inputLength less than zero`,!1):t.byteLength-n-r<0?(e.error=`End of input reached before message was fully decoded (inconsistent offset and length values)`,!1):!0:(e.error=`Wrong parameter: inputBuffer has zero length`,!1):(e.error=`Wrong parameter: inputBuffer must be "ArrayBuffer"`,!1)}function a(e,t){let n=0;if(e.length===1)return e[0];for(let r=e.length-1;r>=0;r--)n+=e[e.length-1-r]*2**(t*r);return n}function o(e,t,n=-1){let r=n,i=e,a=0,o=2**t;for(let n=1;n<8;n++){if(e<o){let e;if(r<0)e=new ArrayBuffer(n),a=n;else{if(r<n)return new ArrayBuffer(0);e=new ArrayBuffer(r),a=r}let o=new Uint8Array(e);for(let e=n-1;e>=0;e--){let n=2**(e*t);o[a-e-1]=Math.floor(i/n),i-=o[a-e-1]*n}return e}o*=2**t}return new ArrayBuffer(0)}function s(...e){let t=0,n=0;for(let n of e)t+=n.byteLength;let r=new ArrayBuffer(t),i=new Uint8Array(r);for(let t of e)i.set(new Uint8Array(t),n),n+=t.byteLength;return r}function c(...e){let t=0,n=0;for(let n of e)t+=n.length;let r=new ArrayBuffer(t),i=new Uint8Array(r);for(let t of e)i.set(t,n),n+=t.length;return i}function l(){let e=new Uint8Array(this.valueHex);if(this.valueHex.byteLength>=2){let t=e[0]===255&&e[1]&128,n=e[0]===0&&!(e[1]&128);(t||n)&&this.warnings.push(`Needlessly long format`)}let t=new ArrayBuffer(this.valueHex.byteLength),n=new Uint8Array(t);for(let e=0;e<this.valueHex.byteLength;e++)n[e]=0;n[0]=e[0]&128;let r=a(n,8),i=new ArrayBuffer(this.valueHex.byteLength),o=new Uint8Array(i);for(let t=0;t<this.valueHex.byteLength;t++)o[t]=e[t];return o[0]&=127,a(o,8)-r}function u(e){let t=e<0?e*-1:e,n=128;for(let r=1;r<8;r++){if(t<=n){if(e<0){let e=o(n-t,8,r),i=new Uint8Array(e);return i[0]|=128,e}let i=o(t,8,r),a=new Uint8Array(i);if(a[0]&128){let e=i.slice(0),t=new Uint8Array(e);i=new ArrayBuffer(i.byteLength+1),a=new Uint8Array(i);for(let n=0;n<e.byteLength;n++)a[n+1]=t[n];a[0]=0}return i}n*=256}return new ArrayBuffer(0)}function d(e,t){if(e.byteLength!==t.byteLength)return!1;let n=new Uint8Array(e),r=new Uint8Array(t);for(let e=0;e<n.length;e++)if(n[e]!==r[e])return!1;return!0}function f(e,t){let n=e.toString(10);if(t<n.length)return``;let r=t-n.length,i=Array(r);for(let e=0;e<r;e++)i[e]=`0`;return i.join(``).concat(n)}let p=`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=`,m=`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_=`;function h(e,t=!1,n=!1,r=!1){let i=0,a=0,o=0,s=``,c=t?m:p;if(r){let t=0;for(let n=0;n<e.length;n++)if(e.charCodeAt(n)!==0){t=n;break}e=e.slice(t)}for(;i<e.length;){let t=e.charCodeAt(i++);i>=e.length&&(a=1);let r=e.charCodeAt(i++);i>=e.length&&(o=1);let l=e.charCodeAt(i++),u=t>>2,d=(t&3)<<4|r>>4,f=(r&15)<<2|l>>6,p=l&63;a===1?f=p=64:o===1&&(p=64),s+=n?f===64?`${c.charAt(u)}${c.charAt(d)}`:p===64?`${c.charAt(u)}${c.charAt(d)}${c.charAt(f)}`:`${c.charAt(u)}${c.charAt(d)}${c.charAt(f)}${c.charAt(p)}`:`${c.charAt(u)}${c.charAt(d)}${c.charAt(f)}${c.charAt(p)}`}return s}function g(e,t=!1,n=!1){let r=t?m:p;function i(e){for(let t=0;t<64;t++)if(r.charAt(t)===e)return t;return 64}function a(e){return e===64?0:e}let o=0,s=``;for(;o<e.length;){let t=i(e.charAt(o++)),n=o>=e.length?0:i(e.charAt(o++)),r=o>=e.length?0:i(e.charAt(o++)),c=o>=e.length?0:i(e.charAt(o++)),l=a(t)<<2|a(n)>>4,u=(a(n)&15)<<4|a(r)>>2,d=(a(r)&3)<<6|a(c);s+=String.fromCharCode(l),r!==64&&(s+=String.fromCharCode(u)),c!==64&&(s+=String.fromCharCode(d))}if(n){let e=s.length,t=-1;for(let n=e-1;n>=0;n--)if(s.charCodeAt(n)!==0){t=n;break}s=t===-1?``:s.slice(0,t+1)}return s}function _(e){let t=``,n=new Uint8Array(e);for(let e of n)t+=String.fromCharCode(e);return t}function v(e){let t=e.length,n=new ArrayBuffer(t),r=new Uint8Array(n);for(let n=0;n<t;n++)r[n]=e.charCodeAt(n);return n}let y=Math.log(2);function b(e){let t=Math.log(e)/y,n=Math.floor(t),r=Math.round(t);return n===r?n:r}function x(e,t){for(let n of t)delete e[n]}e.arrayBufferToString=_,e.bufferToHexCodes=r,e.checkBufferParams=i,e.clearProps=x,e.fromBase64=g,e.getParametersValue=n,e.getUTCDate=t,e.isEqualBuffer=d,e.nearestPowerOf2=b,e.padNumber=f,e.stringToArrayBuffer=v,e.toBase64=h,e.utilConcatBuf=s,e.utilConcatView=c,e.utilDecodeTC=l,e.utilEncodeTC=u,e.utilFromBase=a,e.utilToBase=o})),lt=i((e=>{
47
47
  /*!
48
48
  * Copyright (c) 2014, GMO GlobalSign
49
49
  * Copyright (c) 2015-2022, Peculiar Ventures
@@ -77,15 +77,15 @@ Object.defineProperty(e,"__esModule",{value:!0});function t(e){return new Date(e
77
77
  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
78
78
  *
79
79
  */
80
- var t=Ye(),n=Xe();function r(e){var t=Object.create(null);return e&&Object.keys(e).forEach(function(n){if(n!=="default"){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}}),t.default=e,Object.freeze(t)}var i=r(t),a=r(n);function o(){if(typeof BigInt>`u`)throw Error(`BigInt is not defined. Your environment doesn't implement BigInt.`)}function s(e){let t=0,n=0;for(let n=0;n<e.length;n++){let r=e[n];t+=r.byteLength}let r=new Uint8Array(t);for(let t=0;t<e.length;t++){let i=e[t];r.set(new Uint8Array(i),n),n+=i.byteLength}return r.buffer}function c(e,t,n,r){return t instanceof Uint8Array?t.byteLength?n<0?(e.error=`Wrong parameter: inputOffset less than zero`,!1):r<0?(e.error=`Wrong parameter: inputLength less than zero`,!1):t.byteLength-n-r<0?(e.error=`End of input reached before message was fully decoded (inconsistent offset and length values)`,!1):!0:(e.error=`Wrong parameter: inputBuffer has zero length`,!1):(e.error=`Wrong parameter: inputBuffer must be 'Uint8Array'`,!1)}var l=class{constructor(){this.items=[]}write(e){this.items.push(e)}final(){return s(this.items)}};let u=[new Uint8Array([1])],d=`0123456789`,f=`name`,p=`valueHexView`,m=new ArrayBuffer(0),h=new Uint8Array,g=`EndOfContent`,_=`OCTET STRING`,v=`BIT STRING`;function y(e){var t;return t=class extends e{get valueHex(){return this.valueHexView.slice().buffer}set valueHex(e){this.valueHexView=new Uint8Array(e)}constructor(...e){super(...e);let t=e[0]||{};this.isHexOnly=t.isHexOnly??!1,this.valueHexView=t.valueHex?i.BufferSourceConverter.toUint8Array(t.valueHex):h}fromBER(e,t,n,r){let i=e instanceof ArrayBuffer?new Uint8Array(e):e;if(!c(this,i,t,n))return-1;let a=t+n;return this.valueHexView=i.subarray(t,a),this.valueHexView.length?(this.blockLength=n,a):(this.warnings.push(`Zero buffer length`),t)}toBER(e=!1){return this.isHexOnly?e?new ArrayBuffer(this.valueHexView.byteLength):this.valueHexView.byteLength===this.valueHexView.buffer.byteLength?this.valueHexView.buffer:this.valueHexView.slice().buffer:(this.error=`Flag 'isHexOnly' is not set, abort`,m)}toJSON(){return{...super.toJSON(),isHexOnly:this.isHexOnly,valueHex:i.Convert.ToHex(this.valueHexView)}}},t.NAME=`hexBlock`,t}var b=class{static blockName(){return this.NAME}get valueBeforeDecode(){return this.valueBeforeDecodeView.slice().buffer}set valueBeforeDecode(e){this.valueBeforeDecodeView=new Uint8Array(e)}constructor({blockLength:e=0,error:t=``,warnings:n=[],valueBeforeDecode:r=h}={}){this.blockLength=e,this.error=t,this.warnings=n,this.valueBeforeDecodeView=i.BufferSourceConverter.toUint8Array(r)}toJSON(){return{blockName:this.constructor.NAME,blockLength:this.blockLength,error:this.error,warnings:this.warnings,valueBeforeDecode:i.Convert.ToHex(this.valueBeforeDecodeView)}}};b.NAME=`baseBlock`;var x=class extends b{fromBER(e,t,n,r){throw TypeError(`User need to make a specific function in a class which extends 'ValueBlock'`)}toBER(e,t){throw TypeError(`User need to make a specific function in a class which extends 'ValueBlock'`)}};x.NAME=`valueBlock`;var S=class extends y(b){constructor({idBlock:e={}}={}){super(),e?(this.isHexOnly=e.isHexOnly??!1,this.valueHexView=e.valueHex?i.BufferSourceConverter.toUint8Array(e.valueHex):h,this.tagClass=e.tagClass??-1,this.tagNumber=e.tagNumber??-1,this.isConstructed=e.isConstructed??!1):(this.tagClass=-1,this.tagNumber=-1,this.isConstructed=!1)}toBER(e=!1){let t=0;switch(this.tagClass){case 1:t|=0;break;case 2:t|=64;break;case 3:t|=128;break;case 4:t|=192;break;default:return this.error=`Unknown tag class`,m}if(this.isConstructed&&(t|=32),this.tagNumber<31&&!this.isHexOnly){let n=new Uint8Array(1);if(!e){let e=this.tagNumber;e&=31,t|=e,n[0]=t}return n.buffer}if(!this.isHexOnly){let n=a.utilToBase(this.tagNumber,7),r=new Uint8Array(n),i=n.byteLength,o=new Uint8Array(i+1);if(o[0]=t|31,!e){for(let e=0;e<i-1;e++)o[e+1]=r[e]|128;o[i]=r[i-1]}return o.buffer}let n=new Uint8Array(this.valueHexView.byteLength+1);if(n[0]=t|31,!e){let e=this.valueHexView;for(let t=0;t<e.length-1;t++)n[t+1]=e[t]|128;n[this.valueHexView.byteLength]=e[e.length-1]}return n.buffer}fromBER(e,t,n){let r=i.BufferSourceConverter.toUint8Array(e);if(!c(this,r,t,n))return-1;let o=r.subarray(t,t+n);if(o.length===0)return this.error=`Zero buffer length`,-1;switch(o[0]&192){case 0:this.tagClass=1;break;case 64:this.tagClass=2;break;case 128:this.tagClass=3;break;case 192:this.tagClass=4;break;default:return this.error=`Unknown tag class`,-1}this.isConstructed=(o[0]&32)==32,this.isHexOnly=!1;let s=o[0]&31;if(s!==31)this.tagNumber=s,this.blockLength=1;else{let e=0;for(;;){let t=e+1;if(t>=o.length)return this.error=`End of input reached before message was fully decoded`,-1;if(e++,!(o[t]&128))break}this.blockLength=e+1;let t=this.valueHexView=new Uint8Array(e);for(let n=0;n<e;n++)t[n]=o[n+1]&127;this.blockLength<=9?this.tagNumber=a.utilFromBase(t,7):(this.isHexOnly=!0,this.warnings.push(`Tag too long, represented as hex-coded`))}if(this.tagClass===1&&this.isConstructed)switch(this.tagNumber){case 1:case 2:case 5:case 6:case 9:case 13:case 14:case 23:case 24:case 31:case 32:case 33:case 34:return this.error=`Constructed encoding used for primitive type`,-1}return t+this.blockLength}toJSON(){return{...super.toJSON(),tagClass:this.tagClass,tagNumber:this.tagNumber,isConstructed:this.isConstructed}}};S.NAME=`identificationBlock`;var C=class extends b{constructor({lenBlock:e={}}={}){super(),this.isIndefiniteForm=e.isIndefiniteForm??!1,this.longFormUsed=e.longFormUsed??!1,this.length=e.length??0}fromBER(e,t,n){let r=i.BufferSourceConverter.toUint8Array(e);if(!c(this,r,t,n))return-1;let o=r.subarray(t,t+n);if(o.length===0)return this.error=`Zero buffer length`,-1;if(o[0]===255)return this.error=`Length block 0xFF is reserved by standard`,-1;if(this.isIndefiniteForm=o[0]===128,this.isIndefiniteForm)return this.blockLength=1,t+this.blockLength;if(this.longFormUsed=!!(o[0]&128),this.longFormUsed===!1)return this.length=o[0],this.blockLength=1,t+this.blockLength;let s=o[0]&127;if(s>8)return this.error=`Too big integer`,-1;if(s+1>o.length)return this.error=`End of input reached before message was fully decoded`,-1;let l=t+1,u=r.subarray(l,l+s);return u[s-1]===0&&this.warnings.push(`Needlessly long encoded length`),this.length=a.utilFromBase(u,8),this.longFormUsed&&this.length<=127&&this.warnings.push(`Unnecessary usage of long length form`),this.blockLength=s+1,t+this.blockLength}toBER(e=!1){let t,n;if(this.length>127&&(this.longFormUsed=!0),this.isIndefiniteForm)return t=new ArrayBuffer(1),e===!1&&(n=new Uint8Array(t),n[0]=128),t;if(this.longFormUsed){let r=a.utilToBase(this.length,8);if(r.byteLength>127)return this.error=`Too big length`,m;if(t=new ArrayBuffer(r.byteLength+1),e)return t;let i=new Uint8Array(r);n=new Uint8Array(t),n[0]=r.byteLength|128;for(let e=0;e<r.byteLength;e++)n[e+1]=i[e];return t}return t=new ArrayBuffer(1),e===!1&&(n=new Uint8Array(t),n[0]=this.length),t}toJSON(){return{...super.toJSON(),isIndefiniteForm:this.isIndefiniteForm,longFormUsed:this.longFormUsed,length:this.length}}};C.NAME=`lengthBlock`;let w={};var T=class extends b{constructor({name:e=``,optional:t=!1,primitiveSchema:n,...r}={},i){super(r),this.name=e,this.optional=t,n&&(this.primitiveSchema=n),this.idBlock=new S(r),this.lenBlock=new C(r),this.valueBlock=i?new i(r):new x(r)}fromBER(e,t,n,r){let i=this.valueBlock.fromBER(e,t,this.lenBlock.isIndefiniteForm?n:this.lenBlock.length,r);return i===-1?(this.error=this.valueBlock.error,i):(this.idBlock.error.length||(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length||(this.blockLength+=this.lenBlock.blockLength),this.valueBlock.error.length||(this.blockLength+=this.valueBlock.blockLength),i)}toBER(e,t){let n=t||new l;t||ee(this);let r=this.idBlock.toBER(e);if(n.write(r),this.lenBlock.isIndefiniteForm)n.write(new Uint8Array([128]).buffer),this.valueBlock.toBER(e,n),n.write(new ArrayBuffer(2));else{let t=this.valueBlock.toBER(e);this.lenBlock.length=t.byteLength;let r=this.lenBlock.toBER(e);n.write(r),n.write(t)}return t?m:n.final()}toJSON(){let e={...super.toJSON(),idBlock:this.idBlock.toJSON(),lenBlock:this.lenBlock.toJSON(),valueBlock:this.valueBlock.toJSON(),name:this.name,optional:this.optional};return this.primitiveSchema&&(e.primitiveSchema=this.primitiveSchema.toJSON()),e}toString(e=`ascii`){return e===`ascii`?this.onAsciiEncoding():i.Convert.ToHex(this.toBER())}onAsciiEncoding(){return`${this.constructor.NAME} : ${i.Convert.ToHex(this.valueBlock.valueBeforeDecodeView)}`}isEqual(e){if(this===e)return!0;if(!(e instanceof this.constructor))return!1;let t=this.toBER(),n=e.toBER();return a.isEqualBuffer(t,n)}};T.NAME=`BaseBlock`;function ee(e){if(e instanceof w.Constructed)for(let t of e.valueBlock.value)ee(t)&&(e.lenBlock.isIndefiniteForm=!0);return!!e.lenBlock?.isIndefiniteForm}var E=class extends T{getValue(){return this.valueBlock.value}setValue(e){this.valueBlock.value=e}constructor({value:e=``,...t}={},n){super(t,n),e&&this.fromString(e)}fromBER(e,t,n){let r=this.valueBlock.fromBER(e,t,this.lenBlock.isIndefiniteForm?n:this.lenBlock.length);return r===-1?(this.error=this.valueBlock.error,r):(this.fromBuffer(this.valueBlock.valueHexView),this.idBlock.error.length||(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length||(this.blockLength+=this.lenBlock.blockLength),this.valueBlock.error.length||(this.blockLength+=this.valueBlock.blockLength),r)}onAsciiEncoding(){return`${this.constructor.NAME} : '${this.valueBlock.value}'`}};E.NAME=`BaseStringBlock`;var D=class extends y(x){constructor({isHexOnly:e=!0,...t}={}){super(t),this.isHexOnly=e}};D.NAME=`PrimitiveValueBlock`;var O,k=class extends T{constructor(e={}){super(e,D),this.idBlock.isConstructed=!1}};O=k,w.Primitive=O,k.NAME=`PRIMITIVE`;let A=1e4,j=16777216;function M(e={}){return{depth:0,maxDepth:e.maxDepth??100,nodesCount:0,maxNodes:e.maxNodes??A,maxContentLength:e.maxContentLength??j}}function te(e){let t=new T({},x);return t.error=e,{offset:-1,result:t}}function ne(e){if(e.nodesCount+=1,e.nodesCount>e.maxNodes)return`Maximum ASN.1 node count exceeded`}function re(e,t){if(e>t.maxContentLength)return`Maximum ASN.1 content length exceeded`}function N(e,t,n,r){let i=r.depth+1;if(i>r.maxDepth)return te(`Maximum ASN.1 nesting depth exceeded`);r.depth=i;try{return ae(e,t,n,r)}finally{--r.depth}}function ie(e,t){if(e instanceof t)return e;let n=new t;return n.idBlock=e.idBlock,n.lenBlock=e.lenBlock,n.warnings=e.warnings,n.valueBeforeDecodeView=e.valueBeforeDecodeView,n}function ae(e,t=0,n=e.length,r=M()){let i=t,a=new T({},x),o=new b;if(!c(o,e,t,n))return a.error=o.error,{offset:-1,result:a};if(!e.subarray(t,t+n).length)return a.error=`Zero buffer length`,{offset:-1,result:a};let s=ne(r);if(s)return a.error=s,{offset:-1,result:a};let l=a.idBlock.fromBER(e,t,n);if(a.idBlock.warnings.length&&a.warnings.concat(a.idBlock.warnings),l===-1)return a.error=a.idBlock.error,{offset:-1,result:a};if(t=l,n-=a.idBlock.blockLength,l=a.lenBlock.fromBER(e,t,n),a.lenBlock.warnings.length&&a.warnings.concat(a.lenBlock.warnings),l===-1)return a.error=a.lenBlock.error,{offset:-1,result:a};t=l,n-=a.lenBlock.blockLength;let u=a.lenBlock.isIndefiniteForm?n:a.lenBlock.length,d=re(u,r);if(d)return a.error=d,{offset:-1,result:a};if(!a.idBlock.isConstructed&&a.lenBlock.isIndefiniteForm)return a.error=`Indefinite length form used for primitive encoding form`,{offset:-1,result:a};let f=T;switch(a.idBlock.tagClass){case 1:if(a.idBlock.tagNumber>=37&&a.idBlock.isHexOnly===!1)return a.error=`UNIVERSAL 37 and upper tags are reserved by ASN.1 standard`,{offset:-1,result:a};switch(a.idBlock.tagNumber){case 0:if(a.idBlock.isConstructed&&a.lenBlock.length>0)return a.error=`Type [UNIVERSAL 0] is reserved`,{offset:-1,result:a};f=w.EndOfContent;break;case 1:f=w.Boolean;break;case 2:f=w.Integer;break;case 3:f=w.BitString;break;case 4:f=w.OctetString;break;case 5:f=w.Null;break;case 6:f=w.ObjectIdentifier;break;case 10:f=w.Enumerated;break;case 12:f=w.Utf8String;break;case 13:f=w.RelativeObjectIdentifier;break;case 14:f=w.TIME;break;case 15:return a.error=`[UNIVERSAL 15] is reserved by ASN.1 standard`,{offset:-1,result:a};case 16:f=w.Sequence;break;case 17:f=w.Set;break;case 18:f=w.NumericString;break;case 19:f=w.PrintableString;break;case 20:f=w.TeletexString;break;case 21:f=w.VideotexString;break;case 22:f=w.IA5String;break;case 23:f=w.UTCTime;break;case 24:f=w.GeneralizedTime;break;case 25:f=w.GraphicString;break;case 26:f=w.VisibleString;break;case 27:f=w.GeneralString;break;case 28:f=w.UniversalString;break;case 29:f=w.CharacterString;break;case 30:f=w.BmpString;break;case 31:f=w.DATE;break;case 32:f=w.TimeOfDay;break;case 33:f=w.DateTime;break;case 34:f=w.Duration;break;default:{let e=a.idBlock.isConstructed?new w.Constructed:new w.Primitive;e.idBlock=a.idBlock,e.lenBlock=a.lenBlock,e.warnings=a.warnings,a=e}}break;default:f=a.idBlock.isConstructed?w.Constructed:w.Primitive}return a=ie(a,f),l=a.fromBER(e,t,u,r),a.valueBeforeDecodeView=e.subarray(i,i+a.blockLength),{offset:l,result:a}}function P(e,t={}){if(!e.byteLength){let e=new T({},x);return e.error=`Input buffer has zero length`,{offset:-1,result:e}}return ae(i.BufferSourceConverter.toUint8Array(e).slice(),0,e.byteLength,M(t))}function oe(e,t){return e?1:t}var se=class extends x{constructor({value:e=[],isIndefiniteForm:t=!1,...n}={}){super(n),this.value=e,this.isIndefiniteForm=t}fromBER(e,t,n,r){let a=i.BufferSourceConverter.toUint8Array(e),o=r??M();if(!c(this,a,t,n))return-1;if(this.valueBeforeDecodeView=a.subarray(t,t+n),this.valueBeforeDecodeView.length===0)return this.warnings.push(`Zero buffer length`),t;let s=t;for(;oe(this.isIndefiniteForm,n)>0;){let e=N(a,s,n,o);if(e.offset===-1)return this.error=e.result.error,this.warnings.concat(e.result.warnings),-1;if(s=e.offset,this.blockLength+=e.result.blockLength,n-=e.result.blockLength,this.value.push(e.result),this.isIndefiniteForm&&e.result.constructor.NAME===g)break}return this.isIndefiniteForm&&(this.value[this.value.length-1].constructor.NAME===g?this.value.pop():this.warnings.push(`No EndOfContent block encoded`)),s}toBER(e,t){let n=t||new l;for(let t=0;t<this.value.length;t++)this.value[t].toBER(e,n);return t?m:n.final()}toJSON(){let e={...super.toJSON(),isIndefiniteForm:this.isIndefiniteForm,value:[]};for(let t of this.value)e.value.push(t.toJSON());return e}};se.NAME=`ConstructedValueBlock`;var ce,le=class extends T{constructor(e={}){super(e,se),this.idBlock.isConstructed=!0}fromBER(e,t,n,r){this.valueBlock.isIndefiniteForm=this.lenBlock.isIndefiniteForm;let i=this.valueBlock.fromBER(e,t,this.lenBlock.isIndefiniteForm?n:this.lenBlock.length,r);return i===-1?(this.error=this.valueBlock.error,i):(this.idBlock.error.length||(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length||(this.blockLength+=this.lenBlock.blockLength),this.valueBlock.error.length||(this.blockLength+=this.valueBlock.blockLength),i)}onAsciiEncoding(){let e=[];for(let t of this.valueBlock.value)e.push(t.toString(`ascii`).split(`
80
+ var t=st(),n=ct();function r(e){var t=Object.create(null);return e&&Object.keys(e).forEach(function(n){if(n!=="default"){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}}),t.default=e,Object.freeze(t)}var i=r(t),a=r(n);function o(){if(typeof BigInt>`u`)throw Error(`BigInt is not defined. Your environment doesn't implement BigInt.`)}function s(e){let t=0,n=0;for(let n=0;n<e.length;n++){let r=e[n];t+=r.byteLength}let r=new Uint8Array(t);for(let t=0;t<e.length;t++){let i=e[t];r.set(new Uint8Array(i),n),n+=i.byteLength}return r.buffer}function c(e,t,n,r){return t instanceof Uint8Array?t.byteLength?n<0?(e.error=`Wrong parameter: inputOffset less than zero`,!1):r<0?(e.error=`Wrong parameter: inputLength less than zero`,!1):t.byteLength-n-r<0?(e.error=`End of input reached before message was fully decoded (inconsistent offset and length values)`,!1):!0:(e.error=`Wrong parameter: inputBuffer has zero length`,!1):(e.error=`Wrong parameter: inputBuffer must be 'Uint8Array'`,!1)}var l=class{constructor(){this.items=[]}write(e){this.items.push(e)}final(){return s(this.items)}};let u=[new Uint8Array([1])],d=`0123456789`,f=`name`,p=`valueHexView`,m=new ArrayBuffer(0),h=new Uint8Array,g=`EndOfContent`,_=`OCTET STRING`,v=`BIT STRING`;function y(e){var t=class extends e{get valueHex(){return this.valueHexView.slice().buffer}set valueHex(e){this.valueHexView=new Uint8Array(e)}constructor(...e){super(...e);let t=e[0]||{};this.isHexOnly=t.isHexOnly??!1,this.valueHexView=t.valueHex?i.BufferSourceConverter.toUint8Array(t.valueHex):h}fromBER(e,t,n,r){let i=e instanceof ArrayBuffer?new Uint8Array(e):e;if(!c(this,i,t,n))return-1;let a=t+n;return this.valueHexView=i.subarray(t,a),this.valueHexView.length?(this.blockLength=n,a):(this.warnings.push(`Zero buffer length`),t)}toBER(e=!1){return this.isHexOnly?e?new ArrayBuffer(this.valueHexView.byteLength):this.valueHexView.byteLength===this.valueHexView.buffer.byteLength?this.valueHexView.buffer:this.valueHexView.slice().buffer:(this.error=`Flag 'isHexOnly' is not set, abort`,m)}toJSON(){return{...super.toJSON(),isHexOnly:this.isHexOnly,valueHex:i.Convert.ToHex(this.valueHexView)}}};return t.NAME=`hexBlock`,t}var b=class{static blockName(){return this.NAME}get valueBeforeDecode(){return this.valueBeforeDecodeView.slice().buffer}set valueBeforeDecode(e){this.valueBeforeDecodeView=new Uint8Array(e)}constructor({blockLength:e=0,error:t=``,warnings:n=[],valueBeforeDecode:r=h}={}){this.blockLength=e,this.error=t,this.warnings=n,this.valueBeforeDecodeView=i.BufferSourceConverter.toUint8Array(r)}toJSON(){return{blockName:this.constructor.NAME,blockLength:this.blockLength,error:this.error,warnings:this.warnings,valueBeforeDecode:i.Convert.ToHex(this.valueBeforeDecodeView)}}};b.NAME=`baseBlock`;var x=class extends b{fromBER(e,t,n,r){throw TypeError(`User need to make a specific function in a class which extends 'ValueBlock'`)}toBER(e,t){throw TypeError(`User need to make a specific function in a class which extends 'ValueBlock'`)}};x.NAME=`valueBlock`;var S=class extends y(b){constructor({idBlock:e={}}={}){super(),e?(this.isHexOnly=e.isHexOnly??!1,this.valueHexView=e.valueHex?i.BufferSourceConverter.toUint8Array(e.valueHex):h,this.tagClass=e.tagClass??-1,this.tagNumber=e.tagNumber??-1,this.isConstructed=e.isConstructed??!1):(this.tagClass=-1,this.tagNumber=-1,this.isConstructed=!1)}toBER(e=!1){let t=0;switch(this.tagClass){case 1:t|=0;break;case 2:t|=64;break;case 3:t|=128;break;case 4:t|=192;break;default:return this.error=`Unknown tag class`,m}if(this.isConstructed&&(t|=32),this.tagNumber<31&&!this.isHexOnly){let n=new Uint8Array(1);if(!e){let e=this.tagNumber;e&=31,t|=e,n[0]=t}return n.buffer}if(!this.isHexOnly){let n=a.utilToBase(this.tagNumber,7),r=new Uint8Array(n),i=n.byteLength,o=new Uint8Array(i+1);if(o[0]=t|31,!e){for(let e=0;e<i-1;e++)o[e+1]=r[e]|128;o[i]=r[i-1]}return o.buffer}let n=new Uint8Array(this.valueHexView.byteLength+1);if(n[0]=t|31,!e){let e=this.valueHexView;for(let t=0;t<e.length-1;t++)n[t+1]=e[t]|128;n[this.valueHexView.byteLength]=e[e.length-1]}return n.buffer}fromBER(e,t,n){let r=i.BufferSourceConverter.toUint8Array(e);if(!c(this,r,t,n))return-1;let o=r.subarray(t,t+n);if(o.length===0)return this.error=`Zero buffer length`,-1;switch(o[0]&192){case 0:this.tagClass=1;break;case 64:this.tagClass=2;break;case 128:this.tagClass=3;break;case 192:this.tagClass=4;break;default:return this.error=`Unknown tag class`,-1}this.isConstructed=(o[0]&32)==32,this.isHexOnly=!1;let s=o[0]&31;if(s!==31)this.tagNumber=s,this.blockLength=1;else{let e=0;for(;;){let t=e+1;if(t>=o.length)return this.error=`End of input reached before message was fully decoded`,-1;if(e++,!(o[t]&128))break}this.blockLength=e+1;let t=this.valueHexView=new Uint8Array(e);for(let n=0;n<e;n++)t[n]=o[n+1]&127;this.blockLength<=9?this.tagNumber=a.utilFromBase(t,7):(this.isHexOnly=!0,this.warnings.push(`Tag too long, represented as hex-coded`))}if(this.tagClass===1&&this.isConstructed)switch(this.tagNumber){case 1:case 2:case 5:case 6:case 9:case 13:case 14:case 23:case 24:case 31:case 32:case 33:case 34:return this.error=`Constructed encoding used for primitive type`,-1}return t+this.blockLength}toJSON(){return{...super.toJSON(),tagClass:this.tagClass,tagNumber:this.tagNumber,isConstructed:this.isConstructed}}};S.NAME=`identificationBlock`;var C=class extends b{constructor({lenBlock:e={}}={}){super(),this.isIndefiniteForm=e.isIndefiniteForm??!1,this.longFormUsed=e.longFormUsed??!1,this.length=e.length??0}fromBER(e,t,n){let r=i.BufferSourceConverter.toUint8Array(e);if(!c(this,r,t,n))return-1;let o=r.subarray(t,t+n);if(o.length===0)return this.error=`Zero buffer length`,-1;if(o[0]===255)return this.error=`Length block 0xFF is reserved by standard`,-1;if(this.isIndefiniteForm=o[0]===128,this.isIndefiniteForm)return this.blockLength=1,t+this.blockLength;if(this.longFormUsed=!!(o[0]&128),this.longFormUsed===!1)return this.length=o[0],this.blockLength=1,t+this.blockLength;let s=o[0]&127;if(s>8)return this.error=`Too big integer`,-1;if(s+1>o.length)return this.error=`End of input reached before message was fully decoded`,-1;let l=t+1,u=r.subarray(l,l+s);return u[s-1]===0&&this.warnings.push(`Needlessly long encoded length`),this.length=a.utilFromBase(u,8),this.longFormUsed&&this.length<=127&&this.warnings.push(`Unnecessary usage of long length form`),this.blockLength=s+1,t+this.blockLength}toBER(e=!1){let t,n;if(this.length>127&&(this.longFormUsed=!0),this.isIndefiniteForm)return t=new ArrayBuffer(1),e===!1&&(n=new Uint8Array(t),n[0]=128),t;if(this.longFormUsed){let r=a.utilToBase(this.length,8);if(r.byteLength>127)return this.error=`Too big length`,m;if(t=new ArrayBuffer(r.byteLength+1),e)return t;let i=new Uint8Array(r);n=new Uint8Array(t),n[0]=r.byteLength|128;for(let e=0;e<r.byteLength;e++)n[e+1]=i[e];return t}return t=new ArrayBuffer(1),e===!1&&(n=new Uint8Array(t),n[0]=this.length),t}toJSON(){return{...super.toJSON(),isIndefiniteForm:this.isIndefiniteForm,longFormUsed:this.longFormUsed,length:this.length}}};C.NAME=`lengthBlock`;let w={};var T=class extends b{constructor({name:e=``,optional:t=!1,primitiveSchema:n,...r}={},i){super(r),this.name=e,this.optional=t,n&&(this.primitiveSchema=n),this.idBlock=new S(r),this.lenBlock=new C(r),this.valueBlock=i?new i(r):new x(r)}fromBER(e,t,n,r){let i=this.valueBlock.fromBER(e,t,this.lenBlock.isIndefiniteForm?n:this.lenBlock.length,r);return i===-1?(this.error=this.valueBlock.error,i):(this.idBlock.error.length||(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length||(this.blockLength+=this.lenBlock.blockLength),this.valueBlock.error.length||(this.blockLength+=this.valueBlock.blockLength),i)}toBER(e,t){let n=t||new l;t||E(this);let r=this.idBlock.toBER(e);if(n.write(r),this.lenBlock.isIndefiniteForm)n.write(new Uint8Array([128]).buffer),this.valueBlock.toBER(e,n),n.write(new ArrayBuffer(2));else{let t=this.valueBlock.toBER(e);this.lenBlock.length=t.byteLength;let r=this.lenBlock.toBER(e);n.write(r),n.write(t)}return t?m:n.final()}toJSON(){let e={...super.toJSON(),idBlock:this.idBlock.toJSON(),lenBlock:this.lenBlock.toJSON(),valueBlock:this.valueBlock.toJSON(),name:this.name,optional:this.optional};return this.primitiveSchema&&(e.primitiveSchema=this.primitiveSchema.toJSON()),e}toString(e=`ascii`){return e===`ascii`?this.onAsciiEncoding():i.Convert.ToHex(this.toBER())}onAsciiEncoding(){return`${this.constructor.NAME} : ${i.Convert.ToHex(this.valueBlock.valueBeforeDecodeView)}`}isEqual(e){if(this===e)return!0;if(!(e instanceof this.constructor))return!1;let t=this.toBER(),n=e.toBER();return a.isEqualBuffer(t,n)}};T.NAME=`BaseBlock`;function E(e){if(e instanceof w.Constructed)for(let t of e.valueBlock.value)E(t)&&(e.lenBlock.isIndefiniteForm=!0);return!!e.lenBlock?.isIndefiniteForm}var D=class extends T{getValue(){return this.valueBlock.value}setValue(e){this.valueBlock.value=e}constructor({value:e=``,...t}={},n){super(t,n),e&&this.fromString(e)}fromBER(e,t,n){let r=this.valueBlock.fromBER(e,t,this.lenBlock.isIndefiniteForm?n:this.lenBlock.length);return r===-1?(this.error=this.valueBlock.error,r):(this.fromBuffer(this.valueBlock.valueHexView),this.idBlock.error.length||(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length||(this.blockLength+=this.lenBlock.blockLength),this.valueBlock.error.length||(this.blockLength+=this.valueBlock.blockLength),r)}onAsciiEncoding(){return`${this.constructor.NAME} : '${this.valueBlock.value}'`}};D.NAME=`BaseStringBlock`;var O=class extends y(x){constructor({isHexOnly:e=!0,...t}={}){super(t),this.isHexOnly=e}};O.NAME=`PrimitiveValueBlock`;var k,A=class extends T{constructor(e={}){super(e,O),this.idBlock.isConstructed=!1}};k=A,w.Primitive=k,A.NAME=`PRIMITIVE`;let ee=1e4,j=16777216;function M(e={}){return{depth:0,maxDepth:e.maxDepth??100,nodesCount:0,maxNodes:e.maxNodes??ee,maxContentLength:e.maxContentLength??j}}function te(e){let t=new T({},x);return t.error=e,{offset:-1,result:t}}function ne(e){if(e.nodesCount+=1,e.nodesCount>e.maxNodes)return`Maximum ASN.1 node count exceeded`}function re(e,t){if(e>t.maxContentLength)return`Maximum ASN.1 content length exceeded`}function N(e,t,n,r){let i=r.depth+1;if(i>r.maxDepth)return te(`Maximum ASN.1 nesting depth exceeded`);r.depth=i;try{return ae(e,t,n,r)}finally{--r.depth}}function ie(e,t){if(e instanceof t)return e;let n=new t;return n.idBlock=e.idBlock,n.lenBlock=e.lenBlock,n.warnings=e.warnings,n.valueBeforeDecodeView=e.valueBeforeDecodeView,n}function ae(e,t=0,n=e.length,r=M()){let i=t,a=new T({},x),o=new b;if(!c(o,e,t,n))return a.error=o.error,{offset:-1,result:a};if(!e.subarray(t,t+n).length)return a.error=`Zero buffer length`,{offset:-1,result:a};let s=ne(r);if(s)return a.error=s,{offset:-1,result:a};let l=a.idBlock.fromBER(e,t,n);if(a.idBlock.warnings.length&&a.warnings.concat(a.idBlock.warnings),l===-1)return a.error=a.idBlock.error,{offset:-1,result:a};if(t=l,n-=a.idBlock.blockLength,l=a.lenBlock.fromBER(e,t,n),a.lenBlock.warnings.length&&a.warnings.concat(a.lenBlock.warnings),l===-1)return a.error=a.lenBlock.error,{offset:-1,result:a};t=l,n-=a.lenBlock.blockLength;let u=a.lenBlock.isIndefiniteForm?n:a.lenBlock.length,d=re(u,r);if(d)return a.error=d,{offset:-1,result:a};if(!a.idBlock.isConstructed&&a.lenBlock.isIndefiniteForm)return a.error=`Indefinite length form used for primitive encoding form`,{offset:-1,result:a};let f=T;switch(a.idBlock.tagClass){case 1:if(a.idBlock.tagNumber>=37&&a.idBlock.isHexOnly===!1)return a.error=`UNIVERSAL 37 and upper tags are reserved by ASN.1 standard`,{offset:-1,result:a};switch(a.idBlock.tagNumber){case 0:if(a.idBlock.isConstructed&&a.lenBlock.length>0)return a.error=`Type [UNIVERSAL 0] is reserved`,{offset:-1,result:a};f=w.EndOfContent;break;case 1:f=w.Boolean;break;case 2:f=w.Integer;break;case 3:f=w.BitString;break;case 4:f=w.OctetString;break;case 5:f=w.Null;break;case 6:f=w.ObjectIdentifier;break;case 10:f=w.Enumerated;break;case 12:f=w.Utf8String;break;case 13:f=w.RelativeObjectIdentifier;break;case 14:f=w.TIME;break;case 15:return a.error=`[UNIVERSAL 15] is reserved by ASN.1 standard`,{offset:-1,result:a};case 16:f=w.Sequence;break;case 17:f=w.Set;break;case 18:f=w.NumericString;break;case 19:f=w.PrintableString;break;case 20:f=w.TeletexString;break;case 21:f=w.VideotexString;break;case 22:f=w.IA5String;break;case 23:f=w.UTCTime;break;case 24:f=w.GeneralizedTime;break;case 25:f=w.GraphicString;break;case 26:f=w.VisibleString;break;case 27:f=w.GeneralString;break;case 28:f=w.UniversalString;break;case 29:f=w.CharacterString;break;case 30:f=w.BmpString;break;case 31:f=w.DATE;break;case 32:f=w.TimeOfDay;break;case 33:f=w.DateTime;break;case 34:f=w.Duration;break;default:{let e=a.idBlock.isConstructed?new w.Constructed:new w.Primitive;e.idBlock=a.idBlock,e.lenBlock=a.lenBlock,e.warnings=a.warnings,a=e}}break;default:f=a.idBlock.isConstructed?w.Constructed:w.Primitive}return a=ie(a,f),l=a.fromBER(e,t,u,r),a.valueBeforeDecodeView=e.subarray(i,i+a.blockLength),{offset:l,result:a}}function P(e,t={}){if(!e.byteLength){let e=new T({},x);return e.error=`Input buffer has zero length`,{offset:-1,result:e}}return ae(i.BufferSourceConverter.toUint8Array(e).slice(),0,e.byteLength,M(t))}function oe(e,t){return e?1:t}var se=class extends x{constructor({value:e=[],isIndefiniteForm:t=!1,...n}={}){super(n),this.value=e,this.isIndefiniteForm=t}fromBER(e,t,n,r){let a=i.BufferSourceConverter.toUint8Array(e),o=r??M();if(!c(this,a,t,n))return-1;if(this.valueBeforeDecodeView=a.subarray(t,t+n),this.valueBeforeDecodeView.length===0)return this.warnings.push(`Zero buffer length`),t;let s=t;for(;oe(this.isIndefiniteForm,n)>0;){let e=N(a,s,n,o);if(e.offset===-1)return this.error=e.result.error,this.warnings.concat(e.result.warnings),-1;if(s=e.offset,this.blockLength+=e.result.blockLength,n-=e.result.blockLength,this.value.push(e.result),this.isIndefiniteForm&&e.result.constructor.NAME===g)break}return this.isIndefiniteForm&&(this.value[this.value.length-1].constructor.NAME===g?this.value.pop():this.warnings.push(`No EndOfContent block encoded`)),s}toBER(e,t){let n=t||new l;for(let t=0;t<this.value.length;t++)this.value[t].toBER(e,n);return t?m:n.final()}toJSON(){let e={...super.toJSON(),isIndefiniteForm:this.isIndefiniteForm,value:[]};for(let t of this.value)e.value.push(t.toJSON());return e}};se.NAME=`ConstructedValueBlock`;var ce,le=class extends T{constructor(e={}){super(e,se),this.idBlock.isConstructed=!0}fromBER(e,t,n,r){this.valueBlock.isIndefiniteForm=this.lenBlock.isIndefiniteForm;let i=this.valueBlock.fromBER(e,t,this.lenBlock.isIndefiniteForm?n:this.lenBlock.length,r);return i===-1?(this.error=this.valueBlock.error,i):(this.idBlock.error.length||(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length||(this.blockLength+=this.lenBlock.blockLength),this.valueBlock.error.length||(this.blockLength+=this.valueBlock.blockLength),i)}onAsciiEncoding(){let e=[];for(let t of this.valueBlock.value)e.push(t.toString(`ascii`).split(`
81
81
  `).map(e=>` ${e}`).join(`
82
82
  `));let t=this.idBlock.tagClass===3?`[${this.idBlock.tagNumber}]`:this.constructor.NAME;return e.length?`${t} :\n${e.join(`
83
- `)}`:`${t} :`}};ce=le,w.Constructed=ce,le.NAME=`CONSTRUCTED`;var ue=class extends x{fromBER(e,t,n){return t}toBER(e){return m}};ue.override=`EndOfContentValueBlock`;var de,fe=class extends T{constructor(e={}){super(e,ue),this.idBlock.tagClass=1,this.idBlock.tagNumber=0}};de=fe,w.EndOfContent=de,fe.NAME=g;var pe,me=class extends T{constructor(e={}){super(e,x),this.idBlock.tagClass=1,this.idBlock.tagNumber=5}fromBER(e,t,n){return this.lenBlock.length>0&&this.warnings.push(`Non-zero length of value block for Null type`),this.idBlock.error.length||(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length||(this.blockLength+=this.lenBlock.blockLength),this.blockLength+=n,t+n>e.byteLength?(this.error=`End of input reached before message was fully decoded (inconsistent offset and length values)`,-1):t+n}toBER(e,t){let n=new ArrayBuffer(2);if(!e){let e=new Uint8Array(n);e[0]=5,e[1]=0}return t&&t.write(n),n}onAsciiEncoding(){return`${this.constructor.NAME}`}};pe=me,w.Null=pe,me.NAME=`NULL`;var he=class extends y(x){get value(){for(let e of this.valueHexView)if(e>0)return!0;return!1}set value(e){this.valueHexView[0]=e?255:0}constructor({value:e,...t}={}){super(t),this.valueHexView=t.valueHex?i.BufferSourceConverter.toUint8Array(t.valueHex):new Uint8Array(1),e&&(this.value=e)}fromBER(e,t,n){let r=i.BufferSourceConverter.toUint8Array(e);return c(this,r,t,n)?(this.valueHexView=r.subarray(t,t+n),n>1&&this.warnings.push(`Boolean value encoded in more then 1 octet`),this.isHexOnly=!0,a.utilDecodeTC.call(this),this.blockLength=n,t+n):-1}toBER(){return this.valueHexView.slice()}toJSON(){return{...super.toJSON(),value:this.value}}};he.NAME=`BooleanValueBlock`;var F,ge=class extends T{getValue(){return this.valueBlock.value}setValue(e){this.valueBlock.value=e}constructor(e={}){super(e,he),this.idBlock.tagClass=1,this.idBlock.tagNumber=1}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.getValue}`}};F=ge,w.Boolean=F,ge.NAME=`BOOLEAN`;var _e=class extends y(se){constructor({isConstructed:e=!1,...t}={}){super(t),this.isConstructed=e}fromBER(e,t,n,r){let i=0;if(this.isConstructed){if(this.isHexOnly=!1,i=se.prototype.fromBER.call(this,e,t,n,r),i===-1)return i;for(let e=0;e<this.value.length;e++){let t=this.value[e].constructor.NAME;if(t===g){if(this.isIndefiniteForm)break;return this.error=`EndOfContent is unexpected, OCTET STRING may consists of OCTET STRINGs only`,-1}if(t!==_)return this.error=`OCTET STRING may consists of OCTET STRINGs only`,-1}}else this.isHexOnly=!0,i=super.fromBER(e,t,n),this.blockLength=n;return i}toBER(e,t){return this.isConstructed?se.prototype.toBER.call(this,e,t):e?new ArrayBuffer(this.valueHexView.byteLength):this.valueHexView.slice().buffer}toJSON(){return{...super.toJSON(),isConstructed:this.isConstructed}}};_e.NAME=`OctetStringValueBlock`;var I,ve=class extends T{constructor({idBlock:e={},lenBlock:t={},...n}={}){n.isConstructed??=!!n.value?.length,super({idBlock:{isConstructed:n.isConstructed,...e},lenBlock:{...t,isIndefiniteForm:!!n.isIndefiniteForm},...n},_e),this.idBlock.tagClass=1,this.idBlock.tagNumber=4}fromBER(e,t,n,r){if(this.valueBlock.isConstructed=this.idBlock.isConstructed,this.valueBlock.isIndefiniteForm=this.lenBlock.isIndefiniteForm,n===0)return this.idBlock.error.length===0&&(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length===0&&(this.blockLength+=this.lenBlock.blockLength),t;if(!this.valueBlock.isConstructed){let i=(e instanceof ArrayBuffer?new Uint8Array(e):e).subarray(t,t+n);try{if(i.byteLength){let e=r??M(),t=N(i,0,i.byteLength,e);t.offset!==-1&&t.offset===n&&(this.valueBlock.value=[t.result])}}catch{}}return super.fromBER(e,t,n,r)}onAsciiEncoding(){return this.valueBlock.isConstructed||this.valueBlock.value&&this.valueBlock.value.length?le.prototype.onAsciiEncoding.call(this):`${this.constructor.NAME} : ${i.Convert.ToHex(this.valueBlock.valueHexView)}`}getValue(){if(!this.idBlock.isConstructed)return this.valueBlock.valueHexView.slice().buffer;let e=[];for(let t of this.valueBlock.value)t instanceof I&&e.push(t.valueBlock.valueHexView);return i.BufferSourceConverter.concat(e)}};I=ve,w.OctetString=I,ve.NAME=_;var L=class extends y(se){constructor({unusedBits:e=0,isConstructed:t=!1,...n}={}){super(n),this.unusedBits=e,this.isConstructed=t,this.blockLength=this.valueHexView.byteLength}fromBER(e,t,n,r){if(!n)return t;let a=-1;if(this.isConstructed){if(a=se.prototype.fromBER.call(this,e,t,n,r),a===-1)return a;for(let e of this.value){let t=e.constructor.NAME;if(t===g){if(this.isIndefiniteForm)break;return this.error=`EndOfContent is unexpected, BIT STRING may consists of BIT STRINGs only`,-1}if(t!==v)return this.error=`BIT STRING may consists of BIT STRINGs only`,-1;let n=e.valueBlock;if(this.unusedBits>0&&n.unusedBits>0)return this.error=`Using of "unused bits" inside constructive BIT STRING allowed for least one only`,-1;this.unusedBits=n.unusedBits}return a}let o=i.BufferSourceConverter.toUint8Array(e);if(!c(this,o,t,n))return-1;let s=o.subarray(t,t+n);if(this.unusedBits=s[0],this.unusedBits>7)return this.error=`Unused bits for BitString must be in range 0-7`,-1;if(!this.unusedBits){let e=s.subarray(1);try{if(e.byteLength){let t=r??M(),i=N(e,0,e.byteLength,t);i.offset!==-1&&i.offset===n-1&&(this.value=[i.result])}}catch{}}return this.valueHexView=s.subarray(1),this.blockLength=s.length,t+n}toBER(e,t){if(this.isConstructed)return se.prototype.toBER.call(this,e,t);if(e)return new ArrayBuffer(this.valueHexView.byteLength+1);if(!this.valueHexView.byteLength){let e=new Uint8Array(1);return e[0]=0,e.buffer}let n=new Uint8Array(this.valueHexView.length+1);return n[0]=this.unusedBits,n.set(this.valueHexView,1),n.buffer}toJSON(){return{...super.toJSON(),unusedBits:this.unusedBits,isConstructed:this.isConstructed}}};L.NAME=`BitStringValueBlock`;var ye,be=class extends T{constructor({idBlock:e={},lenBlock:t={},...n}={}){n.isConstructed??=!!n.value?.length,super({idBlock:{isConstructed:n.isConstructed,...e},lenBlock:{...t,isIndefiniteForm:!!n.isIndefiniteForm},...n},L),this.idBlock.tagClass=1,this.idBlock.tagNumber=3}fromBER(e,t,n,r){return this.valueBlock.isConstructed=this.idBlock.isConstructed,this.valueBlock.isIndefiniteForm=this.lenBlock.isIndefiniteForm,super.fromBER(e,t,n,r)}onAsciiEncoding(){if(this.valueBlock.isConstructed||this.valueBlock.value&&this.valueBlock.value.length)return le.prototype.onAsciiEncoding.call(this);{let e=[],t=this.valueBlock.valueHexView;for(let n of t)e.push(n.toString(2).padStart(8,`0`));let n=e.join(``);return`${this.constructor.NAME} : ${n.substring(0,n.length-this.valueBlock.unusedBits)}`}}};ye=be,w.BitString=ye,be.NAME=v;var xe;function Se(e,t){let n=new Uint8Array([0]),r=new Uint8Array(e),i=new Uint8Array(t),o=r.slice(0),s=o.length-1,c=i.slice(0),l=c.length-1,u=0,d=l<s?s:l,f=0;for(let e=d;e>=0;e--,f++){switch(!0){case f<c.length:u=o[s-f]+c[l-f]+n[0];break;default:u=o[s-f]+n[0]}switch(n[0]=u/10,!0){case f>=o.length:o=a.utilConcatView(new Uint8Array([u%10]),o);break;default:o[s-f]=u%10}}return n[0]>0&&(o=a.utilConcatView(n,o)),o}function R(e){if(e>=u.length)for(let t=u.length;t<=e;t++){let e=new Uint8Array([0]),n=u[t-1].slice(0);for(let t=n.length-1;t>=0;t--){let r=new Uint8Array([(n[t]<<1)+e[0]]);e[0]=r[0]/10,n[t]=r[0]%10}e[0]>0&&(n=a.utilConcatView(e,n)),u.push(n)}return u[e]}function Ce(e,t){let n=0,r=new Uint8Array(e),i=new Uint8Array(t),a=r.slice(0),o=a.length-1,s=i.slice(0),c=s.length-1,l,u=0;for(let e=c;e>=0;e--,u++)switch(l=a[o-u]-s[c-u]-n,!0){case l<0:n=1,a[o-u]=l+10;break;default:n=0,a[o-u]=l}if(n>0)for(let e=o-c+1;e>=0;e--,u++)if(l=a[o-u]-n,l<0)n=1,a[o-u]=l+10;else{n=0,a[o-u]=l;break}return a.slice()}var we=class extends y(x){setValueHex(){this.valueHexView.length>=4?(this.warnings.push(`Too big Integer for decoding, hex only`),this.isHexOnly=!0,this._valueDec=0):(this.isHexOnly=!1,this.valueHexView.length>0&&(this._valueDec=a.utilDecodeTC.call(this)))}constructor({value:e,...t}={}){super(t),this._valueDec=0,t.valueHex&&this.setValueHex(),e!==void 0&&(this.valueDec=e)}set valueDec(e){this._valueDec=e,this.isHexOnly=!1,this.valueHexView=new Uint8Array(a.utilEncodeTC(e))}get valueDec(){return this._valueDec}fromDER(e,t,n,r=0){let i=this.fromBER(e,t,n);if(i===-1)return i;let a=this.valueHexView;return a[0]===0&&a[1]&128?this.valueHexView=a.subarray(1):r!==0&&a.length<r&&(r-a.length>1&&(r=a.length+1),this.valueHexView=a.subarray(r-a.length)),i}toDER(e=!1){let t=this.valueHexView;switch(!0){case!!(t[0]&128):{let e=new Uint8Array(this.valueHexView.length+1);e[0]=0,e.set(t,1),this.valueHexView=e}break;case t[0]===0&&!(t[1]&128):this.valueHexView=this.valueHexView.subarray(1)}return this.toBER(e)}fromBER(e,t,n){let r=super.fromBER(e,t,n);return r===-1||this.setValueHex(),r}toBER(e){return e?new ArrayBuffer(this.valueHexView.length):this.valueHexView.slice().buffer}toJSON(){return{...super.toJSON(),valueDec:this.valueDec}}toString(){let e=this.valueHexView.length*8-1,t=new Uint8Array(this.valueHexView.length*8/3),n=0,r,i=this.valueHexView,a=``,o=!1;for(let o=i.byteLength-1;o>=0;o--){r=i[o];for(let i=0;i<8;i++){if((r&1)==1)switch(n){case e:t=Ce(R(n),t),a=`-`;break;default:t=Se(t,R(n))}n++,r>>=1}}for(let e=0;e<t.length;e++)t[e]&&(o=!0),o&&(a+=d.charAt(t[e]));return o===!1&&(a+=d.charAt(0)),a}};xe=we,we.NAME=`IntegerValueBlock`,Object.defineProperty(xe.prototype,"valueHex",{set:function(e){this.valueHexView=new Uint8Array(e),this.setValueHex()},get:function(){return this.valueHexView.slice().buffer}});var z,Te=class extends T{constructor(e={}){super(e,we),this.idBlock.tagClass=1,this.idBlock.tagNumber=2}toBigInt(){return o(),BigInt(this.valueBlock.toString())}static fromBigInt(e){o();let t=BigInt(e),n=new l,r=t.toString(16).replace(/^-/,``),a=new Uint8Array(i.Convert.FromHex(r));if(t<0){let e=new Uint8Array(a.length+(a[0]&128?1:0));e[0]|=128;let r=BigInt(`0x${i.Convert.ToHex(e)}`)+t,o=i.BufferSourceConverter.toUint8Array(i.Convert.FromHex(r.toString(16)));o[0]|=128,n.write(o)}else a[0]&128&&n.write(new Uint8Array([0])),n.write(a);return new z({valueHex:n.final()})}convertToDER(){let e=new z({valueHex:this.valueBlock.valueHexView});return e.valueBlock.toDER(),e}convertFromDER(){return new z({valueHex:this.valueBlock.valueHexView[0]===0?this.valueBlock.valueHexView.subarray(1):this.valueBlock.valueHexView})}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.valueBlock.toString()}`}};z=Te,w.Integer=z,Te.NAME=`INTEGER`;var Ee,De=class extends Te{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=10}};Ee=De,w.Enumerated=Ee,De.NAME=`ENUMERATED`;var B=class extends y(x){constructor({valueDec:e=-1,isFirstSid:t=!1,...n}={}){super(n),this.valueDec=e,this.isFirstSid=t}fromBER(e,t,n){if(!n)return t;let r=i.BufferSourceConverter.toUint8Array(e);if(!c(this,r,t,n))return-1;let o=r.subarray(t,t+n);this.valueHexView=new Uint8Array(n);for(let e=0;e<n&&(this.valueHexView[e]=o[e]&127,this.blockLength++,o[e]&128);e++);let s=new Uint8Array(this.blockLength);for(let e=0;e<this.blockLength;e++)s[e]=this.valueHexView[e];return this.valueHexView=s,o[this.blockLength-1]&128?(this.error=`End of input reached before message was fully decoded`,-1):(this.valueHexView[0]===0&&this.warnings.push(`Needlessly long format of SID encoding`),this.blockLength<=8?this.valueDec=a.utilFromBase(this.valueHexView,7):(this.isHexOnly=!0,this.warnings.push(`Too big SID for decoding, hex only`)),t+this.blockLength)}set valueBigInt(e){o();let t=BigInt(e).toString(2);for(;t.length%7;)t=`0`+t;let n=new Uint8Array(t.length/7);for(let e=0;e<n.length;e++)n[e]=parseInt(t.slice(e*7,e*7+7),2)+(e+1<n.length?128:0);this.fromBER(n.buffer,0,n.length)}toBER(e){if(this.isHexOnly){if(e)return new ArrayBuffer(this.valueHexView.byteLength);let t=this.valueHexView,n=new Uint8Array(this.blockLength);for(let e=0;e<this.blockLength-1;e++)n[e]=t[e]|128;return n[this.blockLength-1]=t[this.blockLength-1],n.buffer}let t=a.utilToBase(this.valueDec,7);if(t.byteLength===0)return this.error=`Error during encoding SID value`,m;let n=new Uint8Array(t.byteLength);if(!e){let e=new Uint8Array(t),r=t.byteLength-1;for(let t=0;t<r;t++)n[t]=e[t]|128;n[r]=e[r]}return n}toString(){let e=``;if(this.isHexOnly)e=i.Convert.ToHex(this.valueHexView);else if(this.isFirstSid){let t=this.valueDec;this.valueDec<=39?e=`0.`:this.valueDec<=79?(e=`1.`,t-=40):(e=`2.`,t-=80),e+=t.toString()}else e=this.valueDec.toString();return e}toJSON(){return{...super.toJSON(),valueDec:this.valueDec,isFirstSid:this.isFirstSid}}};B.NAME=`sidBlock`;var Oe=class extends x{constructor({value:e=``,...t}={}){super(t),this.value=[],e&&this.fromString(e)}fromBER(e,t,n){let r=t;for(;n>0;){let t=new B;if(r=t.fromBER(e,r,n),r===-1)return this.blockLength=0,this.error=t.error,r;this.value.length===0&&(t.isFirstSid=!0),this.blockLength+=t.blockLength,n-=t.blockLength,this.value.push(t)}return r}toBER(e){let t=[];for(let n=0;n<this.value.length;n++){let r=this.value[n].toBER(e);if(r.byteLength===0)return this.error=this.value[n].error,m;t.push(r)}return s(t)}fromString(e){this.value=[];let t=0,n=0,r=``,i=!1;do if(n=e.indexOf(`.`,t),r=n===-1?e.substring(t):e.substring(t,n),t=n+1,i){let e=this.value[0],t=0;switch(e.valueDec){case 0:break;case 1:t=40;break;case 2:t=80;break;default:this.value=[];return}let n=parseInt(r,10);if(isNaN(n))return;e.valueDec=n+t,i=!1}else{let e=new B;if(r>2**53-1)o(),e.valueBigInt=BigInt(r);else if(e.valueDec=parseInt(r,10),isNaN(e.valueDec))return;this.value.length||(e.isFirstSid=!0,i=!0),this.value.push(e)}while(n!==-1)}toString(){let e=``,t=!1;for(let n=0;n<this.value.length;n++){t=this.value[n].isHexOnly;let r=this.value[n].toString();n!==0&&(e=`${e}.`),t?(r=`{${r}}`,this.value[n].isFirstSid?e=`2.{${r} - 80}`:e+=r):e+=r}return e}toJSON(){let e={...super.toJSON(),value:this.toString(),sidArray:[]};for(let t=0;t<this.value.length;t++)e.sidArray.push(this.value[t].toJSON());return e}};Oe.NAME=`ObjectIdentifierValueBlock`;var ke,V=class extends T{getValue(){return this.valueBlock.toString()}setValue(e){this.valueBlock.fromString(e)}constructor(e={}){super(e,Oe),this.idBlock.tagClass=1,this.idBlock.tagNumber=6}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.valueBlock.toString()||`empty`}`}toJSON(){return{...super.toJSON(),value:this.getValue()}}};ke=V,w.ObjectIdentifier=ke,V.NAME=`OBJECT IDENTIFIER`;var Ae=class extends y(b){constructor({valueDec:e=0,...t}={}){super(t),this.valueDec=e}fromBER(e,t,n){if(n===0)return t;let r=i.BufferSourceConverter.toUint8Array(e);if(!c(this,r,t,n))return-1;let o=r.subarray(t,t+n);this.valueHexView=new Uint8Array(n);for(let e=0;e<n&&(this.valueHexView[e]=o[e]&127,this.blockLength++,o[e]&128);e++);let s=new Uint8Array(this.blockLength);for(let e=0;e<this.blockLength;e++)s[e]=this.valueHexView[e];return this.valueHexView=s,o[this.blockLength-1]&128?(this.error=`End of input reached before message was fully decoded`,-1):(this.valueHexView[0]===0&&this.warnings.push(`Needlessly long format of SID encoding`),this.blockLength<=8?this.valueDec=a.utilFromBase(this.valueHexView,7):(this.isHexOnly=!0,this.warnings.push(`Too big SID for decoding, hex only`)),t+this.blockLength)}toBER(e){if(this.isHexOnly){if(e)return new ArrayBuffer(this.valueHexView.byteLength);let t=this.valueHexView,n=new Uint8Array(this.blockLength);for(let e=0;e<this.blockLength-1;e++)n[e]=t[e]|128;return n[this.blockLength-1]=t[this.blockLength-1],n.buffer}let t=a.utilToBase(this.valueDec,7);if(t.byteLength===0)return this.error=`Error during encoding SID value`,m;let n=new Uint8Array(t.byteLength);if(!e){let e=new Uint8Array(t),r=t.byteLength-1;for(let t=0;t<r;t++)n[t]=e[t]|128;n[r]=e[r]}return n.buffer}toString(){let e=``;return e=this.isHexOnly?i.Convert.ToHex(this.valueHexView):this.valueDec.toString(),e}toJSON(){return{...super.toJSON(),valueDec:this.valueDec}}};Ae.NAME=`relativeSidBlock`;var je=class extends x{constructor({value:e=``,...t}={}){super(t),this.value=[],e&&this.fromString(e)}fromBER(e,t,n){let r=t;for(;n>0;){let t=new Ae;if(r=t.fromBER(e,r,n),r===-1)return this.blockLength=0,this.error=t.error,r;this.blockLength+=t.blockLength,n-=t.blockLength,this.value.push(t)}return r}toBER(e,t){let n=[];for(let t=0;t<this.value.length;t++){let r=this.value[t].toBER(e);if(r.byteLength===0)return this.error=this.value[t].error,m;n.push(r)}return s(n)}fromString(e){this.value=[];let t=0,n=0,r=``;do{n=e.indexOf(`.`,t),r=n===-1?e.substring(t):e.substring(t,n),t=n+1;let i=new Ae;if(i.valueDec=parseInt(r,10),isNaN(i.valueDec))return!0;this.value.push(i)}while(n!==-1);return!0}toString(){let e=``,t=!1;for(let n=0;n<this.value.length;n++){t=this.value[n].isHexOnly;let r=this.value[n].toString();n!==0&&(e=`${e}.`),t&&(r=`{${r}}`),e+=r}return e}toJSON(){let e={...super.toJSON(),value:this.toString(),sidArray:[]};for(let t=0;t<this.value.length;t++)e.sidArray.push(this.value[t].toJSON());return e}};je.NAME=`RelativeObjectIdentifierValueBlock`;var Me,Ne=class extends T{getValue(){return this.valueBlock.toString()}setValue(e){this.valueBlock.fromString(e)}constructor(e={}){super(e,je),this.idBlock.tagClass=1,this.idBlock.tagNumber=13}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.valueBlock.toString()||`empty`}`}toJSON(){return{...super.toJSON(),value:this.getValue()}}};Me=Ne,w.RelativeObjectIdentifier=Me,Ne.NAME=`RelativeObjectIdentifier`;var Pe,Fe=class extends le{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=16}};Pe=Fe,w.Sequence=Pe,Fe.NAME=`SEQUENCE`;var Ie,Le=class extends le{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=17}};Ie=Le,w.Set=Ie,Le.NAME=`SET`;var Re=class extends y(x){constructor({...e}={}){super(e),this.isHexOnly=!0,this.value=``}toJSON(){return{...super.toJSON(),value:this.value}}};Re.NAME=`StringValueBlock`;var ze=class extends Re{};ze.NAME=`SimpleStringValueBlock`;var H=class extends E{constructor({...e}={}){super(e,ze)}fromBuffer(e){this.valueBlock.value=String.fromCharCode.apply(null,i.BufferSourceConverter.toUint8Array(e))}fromString(e){let t=e.length,n=this.valueBlock.valueHexView=new Uint8Array(t);for(let r=0;r<t;r++)n[r]=e.charCodeAt(r);this.valueBlock.value=e}};H.NAME=`SIMPLE STRING`;var Be=class extends H{fromBuffer(e){this.valueBlock.valueHexView=i.BufferSourceConverter.toUint8Array(e);try{this.valueBlock.value=i.Convert.ToUtf8String(e)}catch(t){this.warnings.push(`Error during "decodeURIComponent": ${t}, using raw string`),this.valueBlock.value=i.Convert.ToBinary(e)}}fromString(e){this.valueBlock.valueHexView=new Uint8Array(i.Convert.FromUtf8String(e)),this.valueBlock.value=e}};Be.NAME=`Utf8StringValueBlock`;var U,W=class extends Be{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=12}};U=W,w.Utf8String=U,W.NAME=`UTF8String`;var Ve=class extends H{fromBuffer(e){this.valueBlock.value=i.Convert.ToUtf16String(e),this.valueBlock.valueHexView=i.BufferSourceConverter.toUint8Array(e)}fromString(e){this.valueBlock.value=e,this.valueBlock.valueHexView=new Uint8Array(i.Convert.FromUtf16String(e))}};Ve.NAME=`BmpStringValueBlock`;var He,Ue=class extends Ve{constructor({...e}={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=30}};He=Ue,w.BmpString=He,Ue.NAME=`BMPString`;var We=class extends H{fromBuffer(e){let t=ArrayBuffer.isView(e)?e.slice().buffer:e.slice(0),n=new Uint8Array(t);for(let e=0;e<n.length;e+=4)n[e]=n[e+3],n[e+1]=n[e+2],n[e+2]=0,n[e+3]=0;this.valueBlock.value=String.fromCharCode.apply(null,new Uint32Array(t))}fromString(e){let t=e.length,n=this.valueBlock.valueHexView=new Uint8Array(t*4);for(let r=0;r<t;r++){let t=a.utilToBase(e.charCodeAt(r),8),i=new Uint8Array(t);if(i.length>4)continue;let o=4-i.length;for(let e=i.length-1;e>=0;e--)n[r*4+e+o]=i[e]}this.valueBlock.value=e}};We.NAME=`UniversalStringValueBlock`;var Ge,Ke=class extends We{constructor({...e}={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=28}};Ge=Ke,w.UniversalString=Ge,Ke.NAME=`UniversalString`;var qe,Je=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=18}};qe=Je,w.NumericString=qe,Je.NAME=`NumericString`;var G,Ze=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=19}};G=Ze,w.PrintableString=G,Ze.NAME=`PrintableString`;var Qe,$e=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=20}};Qe=$e,w.TeletexString=Qe,$e.NAME=`TeletexString`;var et,tt=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=21}};et=tt,w.VideotexString=et,tt.NAME=`VideotexString`;var K,nt=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=22}};K=nt,w.IA5String=K,nt.NAME=`IA5String`;var rt,it=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=25}};rt=it,w.GraphicString=rt,it.NAME=`GraphicString`;var at,ot=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=26}};at=ot,w.VisibleString=at,ot.NAME=`VisibleString`;var st,ct=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=27}};st=ct,w.GeneralString=st,ct.NAME=`GeneralString`;var lt,ut=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=29}};lt=ut,w.CharacterString=lt,ut.NAME=`CharacterString`;var dt,ft=class extends ot{constructor({value:e,valueDate:t,...n}={}){if(super(n),this.year=0,this.month=0,this.day=0,this.hour=0,this.minute=0,this.second=0,e){this.fromString(e),this.valueBlock.valueHexView=new Uint8Array(e.length);for(let t=0;t<e.length;t++)this.valueBlock.valueHexView[t]=e.charCodeAt(t)}t&&(this.fromDate(t),this.valueBlock.valueHexView=new Uint8Array(this.toBuffer())),this.idBlock.tagClass=1,this.idBlock.tagNumber=23}fromBuffer(e){this.fromString(String.fromCharCode.apply(null,i.BufferSourceConverter.toUint8Array(e)))}toBuffer(){let e=this.toString(),t=new ArrayBuffer(e.length),n=new Uint8Array(t);for(let t=0;t<e.length;t++)n[t]=e.charCodeAt(t);return t}fromDate(e){this.year=e.getUTCFullYear(),this.month=e.getUTCMonth()+1,this.day=e.getUTCDate(),this.hour=e.getUTCHours(),this.minute=e.getUTCMinutes(),this.second=e.getUTCSeconds()}toDate(){return new Date(Date.UTC(this.year,this.month-1,this.day,this.hour,this.minute,this.second))}fromString(e){let t=/(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})Z/gi.exec(e);if(t===null){this.error=`Wrong input string for conversion`;return}let n=parseInt(t[1],10);this.year=n>=50?1900+n:2e3+n,this.month=parseInt(t[2],10),this.day=parseInt(t[3],10),this.hour=parseInt(t[4],10),this.minute=parseInt(t[5],10),this.second=parseInt(t[6],10)}toString(e=`iso`){if(e===`iso`){let e=Array(7);return e[0]=a.padNumber(this.year<2e3?this.year-1900:this.year-2e3,2),e[1]=a.padNumber(this.month,2),e[2]=a.padNumber(this.day,2),e[3]=a.padNumber(this.hour,2),e[4]=a.padNumber(this.minute,2),e[5]=a.padNumber(this.second,2),e[6]=`Z`,e.join(``)}return super.toString(e)}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.toDate().toISOString()}`}toJSON(){return{...super.toJSON(),year:this.year,month:this.month,day:this.day,hour:this.hour,minute:this.minute,second:this.second}}};dt=ft,w.UTCTime=dt,ft.NAME=`UTCTime`;var pt,mt=class extends ft{constructor(e={}){super(e),this.millisecond??=0,this.idBlock.tagClass=1,this.idBlock.tagNumber=24}fromDate(e){super.fromDate(e),this.millisecond=e.getUTCMilliseconds()}toDate(){let e=Date.UTC(this.year,this.month-1,this.day,this.hour,this.minute,this.second,this.millisecond);return new Date(e)}fromString(e){let t=!1,n=``,r=``,i=0,a,o=0,s=0;if(e[e.length-1]===`Z`)n=e.substring(0,e.length-1),t=!0;else{let t=new Number(e[e.length-1]);if(isNaN(t.valueOf()))throw Error(`Wrong input string for conversion`);n=e}if(t){if(n.indexOf(`+`)!==-1||n.indexOf(`-`)!==-1)throw Error(`Wrong input string for conversion`)}else{let e=1,t=n.indexOf(`+`),r=``;if(t===-1&&(t=n.indexOf(`-`),e=-1),t!==-1){if(r=n.substring(t+1),n=n.substring(0,t),r.length!==2&&r.length!==4)throw Error(`Wrong input string for conversion`);let i=parseInt(r.substring(0,2),10);if(isNaN(i.valueOf()))throw Error(`Wrong input string for conversion`);if(o=e*i,r.length===4){if(i=parseInt(r.substring(2,4),10),isNaN(i.valueOf()))throw Error(`Wrong input string for conversion`);s=e*i}}}let c=n.indexOf(`.`);if(c===-1&&(c=n.indexOf(`,`)),c!==-1){let e=new Number(`0${n.substring(c)}`);if(isNaN(e.valueOf()))throw Error(`Wrong input string for conversion`);i=e.valueOf(),r=n.substring(0,c)}else r=n;switch(!0){case r.length===8:if(a=/(\d{4})(\d{2})(\d{2})/gi,c!==-1)throw Error(`Wrong input string for conversion`);break;case r.length===10:if(a=/(\d{4})(\d{2})(\d{2})(\d{2})/gi,c!==-1){let e=60*i;this.minute=Math.floor(e),e=60*(e-this.minute),this.second=Math.floor(e),e=1e3*(e-this.second),this.millisecond=Math.floor(e)}break;case r.length===12:if(a=/(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})/gi,c!==-1){let e=60*i;this.second=Math.floor(e),e=1e3*(e-this.second),this.millisecond=Math.floor(e)}break;case r.length===14:if(a=/(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})/gi,c!==-1){let e=1e3*i;this.millisecond=Math.floor(e)}break;default:throw Error(`Wrong input string for conversion`)}let l=a.exec(r);if(l===null)throw Error(`Wrong input string for conversion`);for(let e=1;e<l.length;e++)switch(e){case 1:this.year=parseInt(l[e],10);break;case 2:this.month=parseInt(l[e],10);break;case 3:this.day=parseInt(l[e],10);break;case 4:this.hour=parseInt(l[e],10)+o;break;case 5:this.minute=parseInt(l[e],10)+s;break;case 6:this.second=parseInt(l[e],10);break;default:throw Error(`Wrong input string for conversion`)}if(t===!1){let e=new Date(this.year,this.month,this.day,this.hour,this.minute,this.second,this.millisecond);this.year=e.getUTCFullYear(),this.month=e.getUTCMonth(),this.day=e.getUTCDay(),this.hour=e.getUTCHours(),this.minute=e.getUTCMinutes(),this.second=e.getUTCSeconds(),this.millisecond=e.getUTCMilliseconds()}}toString(e=`iso`){if(e===`iso`){let e=[];return e.push(a.padNumber(this.year,4)),e.push(a.padNumber(this.month,2)),e.push(a.padNumber(this.day,2)),e.push(a.padNumber(this.hour,2)),e.push(a.padNumber(this.minute,2)),e.push(a.padNumber(this.second,2)),this.millisecond!==0&&(e.push(`.`),e.push(a.padNumber(this.millisecond,3))),e.push(`Z`),e.join(``)}return super.toString(e)}toJSON(){return{...super.toJSON(),millisecond:this.millisecond}}};pt=mt,w.GeneralizedTime=pt,mt.NAME=`GeneralizedTime`;var ht,gt=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=31}};ht=gt,w.DATE=ht,gt.NAME=`DATE`;var q,_t=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=32}};q=_t,w.TimeOfDay=q,_t.NAME=`TimeOfDay`;var vt,yt=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=33}};vt=yt,w.DateTime=vt,yt.NAME=`DateTime`;var bt,xt=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=34}};bt=xt,w.Duration=bt,xt.NAME=`Duration`;var St,Ct=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=14}};St=Ct,w.TIME=St,Ct.NAME=`TIME`;var wt=class{constructor({name:e=``,optional:t=!1}={}){this.name=e,this.optional=t}},Tt=class extends wt{constructor({value:e=[],...t}={}){super(t),this.value=e}},Et=class extends wt{constructor({value:e=new wt,local:t=!1,...n}={}){super(n),this.value=e,this.local=t}},J=class{get data(){return this.dataView.slice().buffer}set data(e){this.dataView=i.BufferSourceConverter.toUint8Array(e)}constructor({data:e=h}={}){this.dataView=i.BufferSourceConverter.toUint8Array(e)}fromBER(e,t,n){let r=t+n;return this.dataView=i.BufferSourceConverter.toUint8Array(e).subarray(t,r),r}toBER(e){return this.dataView.slice().buffer}};function Dt(e,t,n){if(n instanceof Tt){for(let r of n.value)if(Dt(e,t,r).verified)return{verified:!0,result:e};{let e={verified:!1,result:{error:`Wrong values for Choice type`}};return n.hasOwnProperty(f)&&(e.name=n.name),e}}if(n instanceof wt)return n.hasOwnProperty(f)&&(e[n.name]=t),{verified:!0,result:e};if(!(e instanceof Object))return{verified:!1,result:{error:`Wrong root object`}};if(!(t instanceof Object))return{verified:!1,result:{error:`Wrong ASN.1 data`}};if(!(n instanceof Object)||!(`idBlock`in n)||!(`fromBER`in n.idBlock)||!(`toBER`in n.idBlock))return{verified:!1,result:{error:`Wrong ASN.1 schema`}};let r=n.idBlock.toBER(!1);if(r.byteLength===0)return{verified:!1,result:{error:`Error encoding idBlock for ASN.1 schema`}};if(n.idBlock.fromBER(r,0,r.byteLength)===-1)return{verified:!1,result:{error:`Error decoding idBlock for ASN.1 schema`}};if(n.idBlock.hasOwnProperty(`tagClass`)===!1)return{verified:!1,result:{error:`Wrong ASN.1 schema`}};if(n.idBlock.tagClass!==t.idBlock.tagClass)return{verified:!1,result:e};if(n.idBlock.hasOwnProperty(`tagNumber`)===!1)return{verified:!1,result:{error:`Wrong ASN.1 schema`}};if(n.idBlock.tagNumber!==t.idBlock.tagNumber)return{verified:!1,result:e};if(n.idBlock.hasOwnProperty(`isConstructed`)===!1)return{verified:!1,result:{error:`Wrong ASN.1 schema`}};if(n.idBlock.isConstructed!==t.idBlock.isConstructed)return{verified:!1,result:e};if(!(`isHexOnly`in n.idBlock))return{verified:!1,result:{error:`Wrong ASN.1 schema`}};if(n.idBlock.isHexOnly!==t.idBlock.isHexOnly)return{verified:!1,result:e};if(n.idBlock.isHexOnly){if(!(p in n.idBlock))return{verified:!1,result:{error:`Wrong ASN.1 schema`}};let r=n.idBlock.valueHexView,i=t.idBlock.valueHexView;if(r.length!==i.length)return{verified:!1,result:e};for(let t=0;t<r.length;t++)if(r[t]!==i[1])return{verified:!1,result:e}}if(n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&(e[n.name]=t)),n instanceof w.Constructed){let r=0,i={verified:!1,result:{error:`Unknown error`}},a=n.valueBlock.value.length;if(a>0&&n.valueBlock.value[0]instanceof Et&&(a=t.valueBlock.value.length),a===0)return{verified:!0,result:e};if(t.valueBlock.value.length===0&&n.valueBlock.value.length!==0){let t=!0;for(let e=0;e<n.valueBlock.value.length;e++)t&&=n.valueBlock.value[e].optional||!1;return t?{verified:!0,result:e}:(n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&delete e[n.name]),e.error=`Inconsistent object length`,{verified:!1,result:e})}for(let o=0;o<a;o++)if(o-r>=t.valueBlock.value.length){if(n.valueBlock.value[o].optional===!1){let t={verified:!1,result:e};return e.error=`Inconsistent length between ASN.1 data and schema`,n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&(delete e[n.name],t.name=n.name)),t}}else if(n.valueBlock.value[0]instanceof Et){if(i=Dt(e,t.valueBlock.value[o],n.valueBlock.value[0].value),i.verified===!1)if(n.valueBlock.value[0].optional)r++;else return n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&delete e[n.name]),i;if(f in n.valueBlock.value[0]&&n.valueBlock.value[0].name.length>0){let r={};r=`local`in n.valueBlock.value[0]&&n.valueBlock.value[0].local?t:e,r[n.valueBlock.value[0].name]===void 0&&(r[n.valueBlock.value[0].name]=[]),r[n.valueBlock.value[0].name].push(t.valueBlock.value[o])}}else if(i=Dt(e,t.valueBlock.value[o-r],n.valueBlock.value[o]),i.verified===!1)if(n.valueBlock.value[o].optional)r++;else return n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&delete e[n.name]),i;if(i.verified===!1){let t={verified:!1,result:e};return n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&(delete e[n.name],t.name=n.name)),t}return{verified:!0,result:e}}if(n.primitiveSchema&&p in t.valueBlock){let r=ae(t.valueBlock.valueHexView);if(r.offset===-1){let t={verified:!1,result:r.result};return n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&(delete e[n.name],t.name=n.name)),t}return Dt(e,r.result,n.primitiveSchema)}return{verified:!0,result:e}}function Ot(e,t){if(!(t instanceof Object))return{verified:!1,result:{error:`Wrong ASN.1 schema type`}};let n=ae(i.BufferSourceConverter.toUint8Array(e));return n.offset===-1?{verified:!1,result:n.result}:Dt(n.result,n.result,t)}e.Any=wt,e.BaseBlock=T,e.BaseStringBlock=E,e.BitString=be,e.BmpString=Ue,e.Boolean=ge,e.CharacterString=ut,e.Choice=Tt,e.Constructed=le,e.DATE=gt,e.DEFAULT_MAX_CONTENT_LENGTH=j,e.DEFAULT_MAX_DEPTH=100,e.DEFAULT_MAX_NODES=A,e.DateTime=yt,e.Duration=xt,e.EndOfContent=fe,e.Enumerated=De,e.GeneralString=ct,e.GeneralizedTime=mt,e.GraphicString=it,e.HexBlock=y,e.IA5String=nt,e.Integer=Te,e.Null=me,e.NumericString=Je,e.ObjectIdentifier=V,e.OctetString=ve,e.Primitive=k,e.PrintableString=Ze,e.RawData=J,e.RelativeObjectIdentifier=Ne,e.Repeated=Et,e.Sequence=Fe,e.Set=Le,e.TIME=Ct,e.TeletexString=$e,e.TimeOfDay=_t,e.UTCTime=ft,e.UniversalString=Ke,e.Utf8String=W,e.ValueBlock=x,e.VideotexString=tt,e.ViewWriter=l,e.VisibleString=ot,e.compareSchema=Dt,e.fromBER=P,e.verifySchema=Ot})),Qe=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isArrayBuffer=o,e.isSharedArrayBuffer=s,e.isArrayBufferLike=c,e.isArrayBufferView=l,e.isBufferSource=u,e.assertBufferSource=d,e.toUint8Array=f,e.toUint8ArrayCopy=p,e.toArrayBuffer=m,e.toArrayBufferLike=h,e.toView=g,e.toViewCopy=_;function t(e){return Object.prototype.toString.call(e)}function n(e){return e===DataView||e.prototype instanceof DataView}function r(e){return n(e)?1:e.BYTES_PER_ELEMENT??1}function i(e){if(ArrayBuffer.isView(e))return!0;if(!e||typeof e!=`object`)return!1;let t=e;return typeof t.byteOffset==`number`&&typeof t.byteLength==`number`&&c(t.buffer)}function a(e){let t=f(e),n=new Uint8Array(t.byteLength);return n.set(t),n}function o(e){return t(e)===`[object ArrayBuffer]`}function s(e){return typeof SharedArrayBuffer<`u`&&t(e)===`[object SharedArrayBuffer]`}function c(e){return o(e)||s(e)}function l(e){return i(e)}function u(e){return c(e)||l(e)}function d(e){if(!u(e))throw TypeError(`Expected ArrayBuffer, SharedArrayBuffer, or ArrayBufferView`)}function f(e){return d(e),c(e)?new Uint8Array(e):new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}function p(e){return a(e)}function m(e){if(d(e),o(e))return e;let t=new ArrayBuffer(e.byteLength);return new Uint8Array(t).set(f(e)),t}function h(e){return d(e),c(e)?e:e.byteOffset===0&&e.byteLength===e.buffer.byteLength?e.buffer:a(e).buffer}function g(e,t){if(d(e),ArrayBuffer.isView(e)&&e.constructor===t)return e;let i=f(e),a=r(t);if(i.byteOffset%a!==0||i.byteLength%a!==0)throw RangeError(`Cannot create ${t.name} over unaligned byte range`);return n(t)?new t(i.buffer,i.byteOffset,i.byteLength):new t(i.buffer,i.byteOffset,i.byteLength/a)}function _(e,t){return g(p(e),t)}})),$e=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.concatToUint8Array=n,e.concat=r;let t=Qe();function n(e){let n=[],r=0;for(let i of e){let e=(0,t.toUint8Array)(i);n.push(e),r+=e.byteLength}let i=new Uint8Array(r),a=0;for(let e of n)i.set(e,a),a+=e.byteLength;return i}function r(e,r,...i){let a,o;typeof r==`function`?(a=Array.from(e),o=r):(0,t.isBufferSource)(e)?a=[e,r,...i].filter(t.isBufferSource):(a=Array.from(e),r&&a.push(r),a.push(...i));let s=n(a);return o?(0,t.toView)(s,o):s.buffer}})),et=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.equal=n;let t=Qe();function n(e,n,r={}){let i=(0,t.toUint8Array)(e),a=(0,t.toUint8Array)(n);if(!r.constantTime&&i.byteLength!==a.byteLength)return!1;let o=Math.max(i.byteLength,a.byteLength),s=i.byteLength^a.byteLength;for(let e=0;e<o;e++)s|=(i[e]??0)^(a[e]??0);return s===0}})),tt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.indexOf=u,e.lastIndexOf=d,e.includes=f,e.startsWith=p,e.endsWith=m,e.slice=h,e.tail=g,e.copy=_,e.compare=v;let t=Qe();function n(e,t,n){let r=Number.isFinite(e)?Math.trunc(e):t;return r<=0?0:r>=n?n:r}function r(e,t){let r=n(t?.start,0,e),i=n(t?.end,e,e);return i>=r?[r,i]:[r,r]}function i(e,t){let r=n(t?.start,e,e),i=n(t?.end,0,e);return r>=i?[i,r]:[r,r]}function a(e,t,n){let r=Number.isFinite(e)?Math.trunc(e):t;return r<0?Math.max(n+r,0):r>n?n:r}function o(e){let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n)&255;return t}function s(e){return new TextEncoder().encode(e)}function c(e,n){return typeof e==`string`?n?.encoding===`utf8`?s(e):o(e):(0,t.toUint8Array)(e)}function l(e,t,n){for(let r=0;r<t.byteLength;r++)if(e[n+r]!==t[r])return!1;return!0}function u(e,n,i){let a=(0,t.toUint8Array)(e),o=c(n,i),[s,u]=r(a.byteLength,i);if(o.byteLength===0)return s;let d=u-o.byteLength;if(d<s)return-1;for(let e=s;e<=d;e++)if(l(a,o,e))return e;return-1}function d(e,n,r){let a=(0,t.toUint8Array)(e),o=c(n,r),[s,u]=i(a.byteLength,r);if(o.byteLength===0)return u;let d=u-o.byteLength;if(d<s)return-1;for(let e=d;e>=s;e--)if(l(a,o,e))return e;return-1}function f(e,t,n){return u(e,t,n)!==-1}function p(e,n,r){let i=(0,t.toUint8Array)(e),a=c(n,r);return a.byteLength>i.byteLength?!1:l(i,a,0)}function m(e,n,r){let i=(0,t.toUint8Array)(e),a=c(n,r);return a.byteLength>i.byteLength?!1:l(i,a,i.byteLength-a.byteLength)}function h(e,n,r){let i=(0,t.toUint8Array)(e),o=a(n,0,i.byteLength),s=a(r,i.byteLength,i.byteLength);return s<=o?i.subarray(o,o):i.subarray(o,s)}function g(e,n){let r=(0,t.toUint8Array)(e),i=Number.isFinite(n)?Math.max(0,Math.trunc(n)):0;return i>=r.byteLength?r:r.subarray(r.byteLength-i)}function _(e){return(0,t.toUint8ArrayCopy)(e)}function v(e,n){let r=(0,t.toUint8Array)(e),i=(0,t.toUint8Array)(n),a=Math.min(r.byteLength,i.byteLength);for(let e=0;e<a;e++){if(r[e]<i[e])return-1;if(r[e]>i[e])return 1}return r.byteLength<i.byteLength?-1:+(r.byteLength>i.byteLength)}})),K=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.tail=e.startsWith=e.slice=e.lastIndexOf=e.indexOf=e.includes=e.endsWith=e.copy=e.compare=e.equal=e.concatToUint8Array=e.concat=e.toViewCopy=e.toView=e.toUint8ArrayCopy=e.toUint8Array=e.toArrayBufferLike=e.toArrayBuffer=e.isSharedArrayBuffer=e.isBufferSource=e.isArrayBufferView=e.isArrayBufferLike=e.isArrayBuffer=e.assertBufferSource=void 0;var t=Qe();Object.defineProperty(e,"assertBufferSource",{enumerable:!0,get:function(){return t.assertBufferSource}}),Object.defineProperty(e,"isArrayBuffer",{enumerable:!0,get:function(){return t.isArrayBuffer}}),Object.defineProperty(e,"isArrayBufferLike",{enumerable:!0,get:function(){return t.isArrayBufferLike}}),Object.defineProperty(e,"isArrayBufferView",{enumerable:!0,get:function(){return t.isArrayBufferView}}),Object.defineProperty(e,"isBufferSource",{enumerable:!0,get:function(){return t.isBufferSource}}),Object.defineProperty(e,"isSharedArrayBuffer",{enumerable:!0,get:function(){return t.isSharedArrayBuffer}}),Object.defineProperty(e,"toArrayBuffer",{enumerable:!0,get:function(){return t.toArrayBuffer}}),Object.defineProperty(e,"toArrayBufferLike",{enumerable:!0,get:function(){return t.toArrayBufferLike}}),Object.defineProperty(e,"toUint8Array",{enumerable:!0,get:function(){return t.toUint8Array}}),Object.defineProperty(e,"toUint8ArrayCopy",{enumerable:!0,get:function(){return t.toUint8ArrayCopy}}),Object.defineProperty(e,"toView",{enumerable:!0,get:function(){return t.toView}}),Object.defineProperty(e,"toViewCopy",{enumerable:!0,get:function(){return t.toViewCopy}});var n=$e();Object.defineProperty(e,"concat",{enumerable:!0,get:function(){return n.concat}}),Object.defineProperty(e,"concatToUint8Array",{enumerable:!0,get:function(){return n.concatToUint8Array}});var r=et();Object.defineProperty(e,"equal",{enumerable:!0,get:function(){return r.equal}});var i=tt();Object.defineProperty(e,"compare",{enumerable:!0,get:function(){return i.compare}}),Object.defineProperty(e,"copy",{enumerable:!0,get:function(){return i.copy}}),Object.defineProperty(e,"endsWith",{enumerable:!0,get:function(){return i.endsWith}}),Object.defineProperty(e,"includes",{enumerable:!0,get:function(){return i.includes}}),Object.defineProperty(e,"indexOf",{enumerable:!0,get:function(){return i.indexOf}}),Object.defineProperty(e,"lastIndexOf",{enumerable:!0,get:function(){return i.lastIndexOf}}),Object.defineProperty(e,"slice",{enumerable:!0,get:function(){return i.slice}}),Object.defineProperty(e,"startsWith",{enumerable:!0,get:function(){return i.startsWith}}),Object.defineProperty(e,"tail",{enumerable:!0,get:function(){return i.tail}})})),nt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnPropTypes=e.AsnTypeTypes=void 0;var t;(function(e){e[e.Sequence=0]=`Sequence`,e[e.Set=1]=`Set`,e[e.Choice=2]=`Choice`})(t||(e.AsnTypeTypes=t={}));var n;(function(e){e[e.Any=1]=`Any`,e[e.Boolean=2]=`Boolean`,e[e.OctetString=3]=`OctetString`,e[e.BitString=4]=`BitString`,e[e.Integer=5]=`Integer`,e[e.Enumerated=6]=`Enumerated`,e[e.ObjectIdentifier=7]=`ObjectIdentifier`,e[e.Utf8String=8]=`Utf8String`,e[e.BmpString=9]=`BmpString`,e[e.UniversalString=10]=`UniversalString`,e[e.NumericString=11]=`NumericString`,e[e.PrintableString=12]=`PrintableString`,e[e.TeletexString=13]=`TeletexString`,e[e.VideotexString=14]=`VideotexString`,e[e.IA5String=15]=`IA5String`,e[e.GraphicString=16]=`GraphicString`,e[e.VisibleString=17]=`VisibleString`,e[e.GeneralString=18]=`GeneralString`,e[e.CharacterString=19]=`CharacterString`,e[e.UTCTime=20]=`UTCTime`,e[e.GeneralizedTime=21]=`GeneralizedTime`,e[e.DATE=22]=`DATE`,e[e.TimeOfDay=23]=`TimeOfDay`,e[e.DateTime=24]=`DateTime`,e[e.Duration=25]=`Duration`,e[e.TIME=26]=`TIME`,e[e.Null=27]=`Null`})(n||(e.AsnPropTypes=n={}))})),rt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.BitString=void 0;let n=(G(),t(L)).__importStar(Ze()),r=K();e.BitString=class{unusedBits=0;value=new ArrayBuffer(0);constructor(e,t=0){if(e)if(typeof e==`number`)this.fromNumber(e);else if((0,r.isBufferSource)(e))this.unusedBits=t,this.value=(0,r.toArrayBuffer)(e);else throw TypeError(`Unsupported type of 'params' argument for BitString`)}fromASN(e){if(!(e instanceof n.BitString))throw TypeError(`Argument 'asn' is not instance of ASN.1 BitString`);return this.unusedBits=e.valueBlock.unusedBits,this.value=(0,r.toArrayBuffer)(e.valueBlock.valueHex),this}toASN(){return new n.BitString({unusedBits:this.unusedBits,valueHex:this.value})}toSchema(e){return new n.BitString({name:e})}toNumber(){let e=``,t=new Uint8Array(this.value);for(let n of t)e+=n.toString(2).padStart(8,`0`);return e=e.split(``).reverse().join(``),this.unusedBits&&(e=e.slice(this.unusedBits).padStart(this.unusedBits,`0`)),parseInt(e,2)}fromNumber(e){let t=e.toString(2),n=t.length+7>>3;this.unusedBits=(n<<3)-t.length;let r=new Uint8Array(n);t=t.padStart(n<<3,`0`).split(``).reverse().join(``);let i=0;for(;i<n;)r[i]=parseInt(t.slice(i<<3,(i<<3)+8),2),i++;this.value=r.buffer}}})),it=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.OctetString=void 0;let n=(G(),t(L)).__importStar(Ze()),r=K();e.OctetString=class{buffer;get byteLength(){return this.buffer.byteLength}get byteOffset(){return 0}constructor(e){this.buffer=typeof e==`number`?new ArrayBuffer(e):(0,r.isBufferSource)(e)?(0,r.toArrayBuffer)(e):Array.isArray(e)?new Uint8Array(e).buffer:new ArrayBuffer(0)}fromASN(e){if(!(e instanceof n.OctetString))throw TypeError(`Argument 'asn' is not instance of ASN.1 OctetString`);return this.buffer=(0,r.toArrayBuffer)(e.valueBlock.valueHex),this}toASN(){return new n.OctetString({valueHex:this.buffer})}toSchema(e){return new n.OctetString({name:e})}}})),at=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(rt(),e),n.__exportStar(it(),e)})),ot=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnNullConverter=e.AsnGeneralizedTimeConverter=e.AsnUTCTimeConverter=e.AsnCharacterStringConverter=e.AsnGeneralStringConverter=e.AsnVisibleStringConverter=e.AsnGraphicStringConverter=e.AsnIA5StringConverter=e.AsnVideotexStringConverter=e.AsnTeletexStringConverter=e.AsnPrintableStringConverter=e.AsnNumericStringConverter=e.AsnUniversalStringConverter=e.AsnBmpStringConverter=e.AsnUtf8StringConverter=e.AsnConstructedOctetStringConverter=e.AsnOctetStringConverter=e.AsnBooleanConverter=e.AsnObjectIdentifierConverter=e.AsnBitStringConverter=e.AsnIntegerBigIntConverter=e.AsnIntegerArrayBufferConverter=e.AsnEnumeratedConverter=e.AsnIntegerConverter=e.AsnAnyConverter=void 0,e.defaultConverter=s;let n=(G(),t(L)).__importStar(Ze()),r=K(),i=nt(),a=at();e.AsnAnyConverter={fromASN:e=>e instanceof n.Null?null:(0,r.toArrayBuffer)(e.valueBeforeDecodeView),toASN:e=>{if(e===null)return new n.Null;let t=n.fromBER(e);if(t.result.error)throw Error(t.result.error);return t.result}},e.AsnIntegerConverter={fromASN:e=>e.valueBlock.valueHexView.byteLength>=4?e.valueBlock.toString():e.valueBlock.valueDec,toASN:e=>new n.Integer({value:+e})},e.AsnEnumeratedConverter={fromASN:e=>e.valueBlock.valueDec,toASN:e=>new n.Enumerated({value:e})},e.AsnIntegerArrayBufferConverter={fromASN:e=>(0,r.toArrayBuffer)(e.valueBlock.valueHexView),toASN:e=>new n.Integer({valueHex:e})},e.AsnIntegerBigIntConverter={fromASN:e=>e.toBigInt(),toASN:e=>n.Integer.fromBigInt(e)},e.AsnBitStringConverter={fromASN:e=>(0,r.toArrayBuffer)(e.valueBlock.valueHexView),toASN:e=>new n.BitString({valueHex:e})},e.AsnObjectIdentifierConverter={fromASN:e=>e.valueBlock.toString(),toASN:e=>new n.ObjectIdentifier({value:e})},e.AsnBooleanConverter={fromASN:e=>e.valueBlock.value,toASN:e=>new n.Boolean({value:e})},e.AsnOctetStringConverter={fromASN:e=>(0,r.toArrayBuffer)(e.valueBlock.valueHexView),toASN:e=>new n.OctetString({valueHex:e})},e.AsnConstructedOctetStringConverter={fromASN:e=>new a.OctetString(e.getValue()),toASN:e=>e.toASN()};function o(e){return{fromASN:e=>e.valueBlock.value,toASN:t=>new e({value:t})}}e.AsnUtf8StringConverter=o(n.Utf8String),e.AsnBmpStringConverter=o(n.BmpString),e.AsnUniversalStringConverter=o(n.UniversalString),e.AsnNumericStringConverter=o(n.NumericString),e.AsnPrintableStringConverter=o(n.PrintableString),e.AsnTeletexStringConverter=o(n.TeletexString),e.AsnVideotexStringConverter=o(n.VideotexString),e.AsnIA5StringConverter=o(n.IA5String),e.AsnGraphicStringConverter=o(n.GraphicString),e.AsnVisibleStringConverter=o(n.VisibleString),e.AsnGeneralStringConverter=o(n.GeneralString),e.AsnCharacterStringConverter=o(n.CharacterString),e.AsnUTCTimeConverter={fromASN:e=>e.toDate(),toASN:e=>new n.UTCTime({valueDate:e})},e.AsnGeneralizedTimeConverter={fromASN:e=>e.toDate(),toASN:e=>new n.GeneralizedTime({valueDate:e})},e.AsnNullConverter={fromASN:()=>null,toASN:()=>new n.Null};function s(t){switch(t){case i.AsnPropTypes.Any:return e.AsnAnyConverter;case i.AsnPropTypes.BitString:return e.AsnBitStringConverter;case i.AsnPropTypes.BmpString:return e.AsnBmpStringConverter;case i.AsnPropTypes.Boolean:return e.AsnBooleanConverter;case i.AsnPropTypes.CharacterString:return e.AsnCharacterStringConverter;case i.AsnPropTypes.Enumerated:return e.AsnEnumeratedConverter;case i.AsnPropTypes.GeneralString:return e.AsnGeneralStringConverter;case i.AsnPropTypes.GeneralizedTime:return e.AsnGeneralizedTimeConverter;case i.AsnPropTypes.GraphicString:return e.AsnGraphicStringConverter;case i.AsnPropTypes.IA5String:return e.AsnIA5StringConverter;case i.AsnPropTypes.Integer:return e.AsnIntegerConverter;case i.AsnPropTypes.Null:return e.AsnNullConverter;case i.AsnPropTypes.NumericString:return e.AsnNumericStringConverter;case i.AsnPropTypes.ObjectIdentifier:return e.AsnObjectIdentifierConverter;case i.AsnPropTypes.OctetString:return e.AsnOctetStringConverter;case i.AsnPropTypes.PrintableString:return e.AsnPrintableStringConverter;case i.AsnPropTypes.TeletexString:return e.AsnTeletexStringConverter;case i.AsnPropTypes.UTCTime:return e.AsnUTCTimeConverter;case i.AsnPropTypes.UniversalString:return e.AsnUniversalStringConverter;case i.AsnPropTypes.Utf8String:return e.AsnUtf8StringConverter;case i.AsnPropTypes.VideotexString:return e.AsnVideotexStringConverter;case i.AsnPropTypes.VisibleString:return e.AsnVisibleStringConverter;default:return null}}})),st=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isConvertible=t,e.isTypeOfArray=n,e.isArrayEqual=r;function t(e){return typeof e==`function`&&e.prototype?e.prototype.toASN&&e.prototype.fromASN?!0:t(e.prototype):!!(e&&typeof e==`object`&&`toASN`in e&&`fromASN`in e)}function n(e){if(e){let t=Object.getPrototypeOf(e);return t?.prototype?.constructor===Array||n(t)}return!1}function r(e,t){if(!(e&&t)||e.byteLength!==t.byteLength)return!1;let n=new Uint8Array(e),r=new Uint8Array(t);for(let t=0;t<e.byteLength;t++)if(n[t]!==r[t])return!1;return!0}})),ct=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnSchemaStorage=void 0;let n=(G(),t(L)).__importStar(Ze()),r=nt(),i=st();e.AsnSchemaStorage=class{items=new WeakMap;has(e){return this.items.has(e)}get(e,t=!1){let n=this.items.get(e);if(!n)throw Error(`Cannot get schema for '${e.prototype.constructor.name}' target`);if(t&&!n.schema)throw Error(`Schema '${e.prototype.constructor.name}' doesn't contain ASN.1 schema. Call 'AsnSchemaStorage.cache'.`);return n}cache(e){let t=this.get(e);t.schema||=this.create(e,!0)}createDefault(e){let t={type:r.AsnTypeTypes.Sequence,items:{}},n=this.findParentSchema(e);return n&&(Object.assign(t,n),t.items=Object.assign({},t.items,n.items)),t}create(e,t){let a=this.items.get(e)||this.createDefault(e),o=[];for(let e in a.items){let s=a.items[e],c=t?e:``,l;if(typeof s.type==`number`){let e=r.AsnPropTypes[s.type],t=n[e];if(!t)throw Error(`Cannot get ASN1 class by name '${e}'`);l=new t({name:c})}else(0,i.isConvertible)(s.type)?l=new s.type().toSchema(c):s.optional?this.get(s.type).type===r.AsnTypeTypes.Choice?l=new n.Any({name:c}):(l=this.create(s.type,!1),l.name=c):l=new n.Any({name:c});let u=!!s.optional||s.defaultValue!==void 0;if(s.repeated&&(l.name=``,l=new(s.repeated===`set`?n.Set:n.Sequence)({name:``,value:[new n.Repeated({name:c,value:l})]})),s.context!==null&&s.context!==void 0)if(s.implicit)if(typeof s.type==`number`||(0,i.isConvertible)(s.type)){let e=s.repeated?n.Constructed:n.Primitive;o.push(new e({name:c,optional:u,idBlock:{tagClass:3,tagNumber:s.context}}))}else{this.cache(s.type);let e=!!s.repeated,t=e?l:this.get(s.type,!0).schema;t=`valueBlock`in t?t.valueBlock.value:t.value,o.push(new n.Constructed({name:e?``:c,optional:u,idBlock:{tagClass:3,tagNumber:s.context},value:t}))}else o.push(new n.Constructed({optional:u,idBlock:{tagClass:3,tagNumber:s.context},value:[l]}));else l.optional=u,o.push(l)}switch(a.type){case r.AsnTypeTypes.Sequence:return new n.Sequence({value:o,name:``});case r.AsnTypeTypes.Set:return new n.Set({value:o,name:``});case r.AsnTypeTypes.Choice:return new n.Choice({value:o,name:``});default:throw Error(`Unsupported ASN1 type in use`)}}set(e,t){return this.items.set(e,t),this}findParentSchema(e){let t=Object.getPrototypeOf(e);return t?this.items.get(t)||this.findParentSchema(t):null}}})),lt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.schemaStorage=void 0,e.schemaStorage=new(ct()).AsnSchemaStorage})),ut=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnProp=e.AsnSequenceType=e.AsnSetType=e.AsnChoiceType=e.AsnType=void 0;let n=(G(),t(L)).__importStar(ot()),r=nt(),i=lt();e.AsnType=e=>t=>{let n;i.schemaStorage.has(t)?n=i.schemaStorage.get(t):(n=i.schemaStorage.createDefault(t),i.schemaStorage.set(t,n)),Object.assign(n,e)},e.AsnChoiceType=()=>(0,e.AsnType)({type:r.AsnTypeTypes.Choice}),e.AsnSetType=t=>(0,e.AsnType)({type:r.AsnTypeTypes.Set,...t}),e.AsnSequenceType=t=>(0,e.AsnType)({type:r.AsnTypeTypes.Sequence,...t}),e.AsnProp=e=>(t,r)=>{let a;i.schemaStorage.has(t.constructor)?a=i.schemaStorage.get(t.constructor):(a=i.schemaStorage.createDefault(t.constructor),i.schemaStorage.set(t.constructor,a));let o=Object.assign({},e);if(typeof o.type==`number`&&!o.converter){let i=n.defaultConverter(e.type);if(!i)throw Error(`Cannot get default converter for property '${r}' of ${t.constructor.name}`);o.converter=i}o.raw=e.raw,a.items[r]=o}})),dt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnSchemaValidationError=void 0,e.AsnSchemaValidationError=class extends Error{schemas=[]}})),ft=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),(G(),t(L)).__exportStar(dt(),e)})),pt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnParser=void 0;let n=(G(),t(L)),r=n.__importStar(Ze()),i=K(),a=nt(),o=n.__importStar(ot()),s=ft(),c=st(),l=lt();e.AsnParser=class{static parse(e,t,n){let a=r.fromBER((0,i.toArrayBuffer)(e),n?.berOptions);if(a.result.error)throw Error(a.result.error);return this.fromASN(a.result,t,n)}static fromASN(e,t,n){try{if((0,c.isConvertible)(t))return new t().fromASN(e);let r=l.schemaStorage.get(t);l.schemaStorage.cache(t);let i=r.schema,a=this.handleChoiceTypes(e,r,t,i,n);if(a?.result)return a.result;a?.targetSchema&&(i=a.targetSchema);let o=this.handleSequenceTypes(e,r,t,i),s=new t;return(0,c.isTypeOfArray)(t)?this.handleArrayTypes(e,r,t,n):(this.processSchemaItems(r,o,s,n),s)}catch(e){throw e instanceof s.AsnSchemaValidationError&&e.schemas.push(t.name),e}}static handleChoiceTypes(e,t,n,i,o){if(e.constructor===r.Constructed&&t.type===a.AsnTypeTypes.Choice&&e.idBlock.tagClass===3)for(let i in t.items){let s=t.items[i];if(s.context===e.idBlock.tagNumber&&s.implicit&&typeof s.type==`function`&&l.schemaStorage.has(s.type)){let t=l.schemaStorage.get(s.type);if(t&&t.type===a.AsnTypeTypes.Sequence){let t=new r.Sequence;if(`value`in e.valueBlock&&Array.isArray(e.valueBlock.value)&&`value`in t.valueBlock){t.valueBlock.value=e.valueBlock.value;let r=this.fromASN(t,s.type,o),a=new n;return a[i]=r,{result:a}}}}}else if(e.constructor===r.Constructed&&t.type!==a.AsnTypeTypes.Choice){let n=new r.Constructed({idBlock:{tagClass:3,tagNumber:e.idBlock.tagNumber},value:t.schema.valueBlock.value});for(let n in t.items)delete e[n];return{targetSchema:n}}return null}static handleSequenceTypes(e,t,n,i){if(t.type===a.AsnTypeTypes.Sequence){let t=r.compareSchema({},e,i);if(!t.verified)throw new s.AsnSchemaValidationError(`Data does not match to ${n.name} ASN1 schema.${t.result.error?` ${t.result.error}`:``}`);return t}{let t=r.compareSchema({},e,i);if(!t.verified)throw new s.AsnSchemaValidationError(`Data does not match to ${n.name} ASN1 schema.${t.result.error?` ${t.result.error}`:``}`);return t}}static processRepeatedField(e,t,n){let r=e.slice(t);if(r.length===1&&r[0].constructor.name===`Sequence`){let e=r[0];e.valueBlock&&e.valueBlock.value&&Array.isArray(e.valueBlock.value)&&(r=e.valueBlock.value)}if(typeof n.type==`number`){let e=o.defaultConverter(n.type);if(!e)throw Error(`No converter for ASN.1 type ${n.type}`);return r.filter(e=>e&&e.valueBlock).map(t=>{try{return e.fromASN(t)}catch{return}}).filter(e=>e!==void 0)}return r.filter(e=>e&&e.valueBlock).map(e=>{try{return this.fromASN(e,n.type)}catch{return}}).filter(e=>e!==void 0)}static processPrimitiveField(e,t){let n=o.defaultConverter(t.type);if(!n)throw Error(`No converter for ASN.1 type ${t.type}`);return n.fromASN(e)}static isOptionalChoiceField(e){return e.optional&&typeof e.type==`function`&&l.schemaStorage.has(e.type)&&l.schemaStorage.get(e.type).type===a.AsnTypeTypes.Choice}static processOptionalChoiceField(e,t){try{return{processed:!0,value:this.fromASN(e,t.type)}}catch(e){if(e instanceof s.AsnSchemaValidationError&&/Wrong values for Choice type/.test(e.message))return{processed:!1};throw e}}static handleArrayTypes(e,t,n,r){if(!(`value`in e.valueBlock&&Array.isArray(e.valueBlock.value)))throw Error(`Cannot get items from the ASN.1 parsed value. ASN.1 object is not constructed.`);let i=t.itemType;if(typeof i==`number`){let t=o.defaultConverter(i);if(!t)throw Error(`Cannot get default converter for array item of ${n.name} ASN1 schema`);return n.from(e.valueBlock.value,e=>t.fromASN(e))}return n.from(e.valueBlock.value,e=>this.fromASN(e,i,r))}static processSchemaItems(e,t,n,r){for(let i in e.items){let a=t.result[i];if(!a)continue;let o=e.items[i],s=o.type,l;l=typeof s==`number`||(0,c.isConvertible)(s)?this.processPrimitiveSchemaItem(a,o,s,r):this.processComplexSchemaItem(a,o,s,r),l&&typeof l==`object`&&`value`in l&&`raw`in l?(n[i]=l.value,n[`${i}Raw`]=l.raw):n[i]=l}}static processPrimitiveSchemaItem(e,t,n,r){let i=t.converter??((0,c.isConvertible)(n)?new n:null);if(!i)throw Error(`Converter is empty`);return t.repeated?this.processRepeatedPrimitiveItem(e,t,i,r):this.processSinglePrimitiveItem(e,t,n,i,r)}static processRepeatedPrimitiveItem(e,t,n,i){if(t.implicit){let a=new(t.repeated===`sequence`?r.Sequence:r.Set);a.valueBlock=e.valueBlock;let o=r.fromBER(a.toBER(!1),i?.berOptions);if(o.offset===-1)throw Error(`Cannot parse the child item. ${o.result.error}`);if(!(`value`in o.result.valueBlock&&Array.isArray(o.result.valueBlock.value)))throw Error(`Cannot get items from the ASN.1 parsed value. ASN.1 object is not constructed.`);let s=o.result.valueBlock.value;return Array.from(s,e=>n.fromASN(e))}return Array.from(e,e=>n.fromASN(e))}static processSinglePrimitiveItem(e,t,n,i,o){let s=e;if(t.implicit){let e;if((0,c.isConvertible)(n))e=new n().toSchema(``);else{let t=a.AsnPropTypes[n],i=r[t];if(!i)throw Error(`Cannot get '${t}' class from asn1js module`);e=new i}e.valueBlock=s.valueBlock,s=r.fromBER(e.toBER(!1),o?.berOptions).result}return i.fromASN(s)}static processComplexSchemaItem(e,t,n,r){if(t.repeated){if(!Array.isArray(e))throw Error(`Cannot get list of items from the ASN.1 parsed value. ASN.1 value should be iterable.`);return Array.from(e,e=>this.fromASN(e,n,r))}{let i=this.handleImplicitTagging(e,t,n);if(this.isOptionalChoiceField(t))try{return this.fromASN(i,n,r)}catch(e){if(e instanceof s.AsnSchemaValidationError&&/Wrong values for Choice type/.test(e.message))return;throw e}{let a=this.fromASN(i,n,r);return t.raw?{value:a,raw:e.valueBeforeDecodeView}:a}}}static handleImplicitTagging(e,t,n){if(t.implicit&&typeof t.context==`number`){let t=l.schemaStorage.get(n);if(t.type===a.AsnTypeTypes.Sequence){let t=new r.Sequence;if(`value`in e.valueBlock&&Array.isArray(e.valueBlock.value)&&`value`in t.valueBlock)return t.valueBlock.value=e.valueBlock.value,t}else if(t.type===a.AsnTypeTypes.Set){let t=new r.Set;if(`value`in e.valueBlock&&Array.isArray(e.valueBlock.value)&&`value`in t.valueBlock)return t.valueBlock.value=e.valueBlock.value,t}}return e}}})),mt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnSerializer=void 0;let n=(G(),t(L)),r=n.__importStar(Ze()),i=K(),a=n.__importStar(ot()),o=nt(),s=st(),c=lt();e.AsnSerializer=class e{static serialize(e){return e instanceof r.BaseBlock?e.toBER(!1):this.toASN(e).toBER(!1)}static toASN(t){if(t&&typeof t==`object`&&(0,s.isConvertible)(t))return t.toASN();if(!(t&&typeof t==`object`))throw TypeError(`Parameter 1 should be type of Object.`);let n=t.constructor,l=c.schemaStorage.get(n);c.schemaStorage.cache(n);let u=[];if(l.itemType){if(!Array.isArray(t))throw TypeError(`Parameter 1 should be type of Array.`);if(typeof l.itemType==`number`){let e=a.defaultConverter(l.itemType);if(!e)throw Error(`Cannot get default converter for array item of ${n.name} ASN1 schema`);u=t.map(t=>e.toASN(t))}else u=t.map(e=>this.toAsnItem({type:l.itemType},`[]`,n,e))}else for(let a in l.items){let o=l.items[a],c=t[a];if(c===void 0||o.defaultValue===c||typeof o.defaultValue==`object`&&typeof c==`object`&&(0,s.isArrayEqual)(this.serialize(o.defaultValue),this.serialize(c)))continue;let d=e.toAsnItem(o,a,n,c);if(typeof o.context==`number`)if(o.implicit)if(!o.repeated&&(typeof o.type==`number`||(0,s.isConvertible)(o.type))){let e={};e.valueHex=d instanceof r.Null?(0,i.toArrayBuffer)(d.valueBeforeDecodeView):d.valueBlock.toBER(),u.push(new r.Primitive({optional:o.optional,idBlock:{tagClass:3,tagNumber:o.context},...e}))}else u.push(new r.Constructed({optional:o.optional,idBlock:{tagClass:3,tagNumber:o.context},value:d.valueBlock.value}));else u.push(new r.Constructed({optional:o.optional,idBlock:{tagClass:3,tagNumber:o.context},value:[d]}));else o.repeated?u=u.concat(d):u.push(d)}let d;switch(l.type){case o.AsnTypeTypes.Sequence:d=new r.Sequence({value:u});break;case o.AsnTypeTypes.Set:d=new r.Set({value:u});break;case o.AsnTypeTypes.Choice:if(!u[0])throw Error(`Schema '${n.name}' has wrong data. Choice cannot be empty.`);d=u[0]}return d}static toAsnItem(e,t,n,i){let a;if(typeof e.type==`number`){let s=e.converter;if(!s)throw Error(`Property '${t}' doesn't have converter for type ${o.AsnPropTypes[e.type]} in schema '${n.name}'`);if(e.repeated){if(!Array.isArray(i))throw TypeError(`Parameter 'objProp' should be type of Array.`);let t=Array.from(i,e=>s.toASN(e));a=new(e.repeated===`sequence`?r.Sequence:r.Set)({value:t})}else a=s.toASN(i)}else if(e.repeated){if(!Array.isArray(i))throw TypeError(`Parameter 'objProp' should be type of Array.`);let t=Array.from(i,e=>this.toASN(e));a=new(e.repeated===`sequence`?r.Sequence:r.Set)({value:t})}else a=this.toASN(i);return a}}})),ht=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnArray=void 0,e.AsnArray=class extends Array{constructor(e=[]){if(typeof e==`number`)super(e);else{super();for(let t of e)this.push(t)}}}})),gt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnConvert=void 0;let n=(G(),t(L)).__importStar(Ze()),r=K(),i=pt(),a=mt();e.AsnConvert=class e{static serialize(e){return a.AsnSerializer.serialize(e)}static parse(e,t,n){return i.AsnParser.parse(e,t,n)}static toString(t,i){let a=(0,r.isBufferSource)(t)?(0,r.toArrayBuffer)(t):e.serialize(t),o=n.fromBER(a,i?.berOptions);if(o.offset===-1)throw Error(`Cannot decode ASN.1 data. ${o.result.error}`);return o.result.toString()}}})),q=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnSerializer=e.AsnParser=e.AsnPropTypes=e.AsnTypeTypes=e.AsnSetType=e.AsnSequenceType=e.AsnChoiceType=e.AsnType=e.AsnProp=void 0;let n=(G(),t(L));n.__exportStar(ot(),e),n.__exportStar(at(),e);var r=ut();Object.defineProperty(e,"AsnProp",{enumerable:!0,get:function(){return r.AsnProp}}),Object.defineProperty(e,"AsnType",{enumerable:!0,get:function(){return r.AsnType}}),Object.defineProperty(e,"AsnChoiceType",{enumerable:!0,get:function(){return r.AsnChoiceType}}),Object.defineProperty(e,"AsnSequenceType",{enumerable:!0,get:function(){return r.AsnSequenceType}}),Object.defineProperty(e,"AsnSetType",{enumerable:!0,get:function(){return r.AsnSetType}});var i=nt();Object.defineProperty(e,"AsnTypeTypes",{enumerable:!0,get:function(){return i.AsnTypeTypes}}),Object.defineProperty(e,"AsnPropTypes",{enumerable:!0,get:function(){return i.AsnPropTypes}});var a=pt();Object.defineProperty(e,"AsnParser",{enumerable:!0,get:function(){return a.AsnParser}});var o=mt();Object.defineProperty(e,"AsnSerializer",{enumerable:!0,get:function(){return o.AsnSerializer}}),n.__exportStar(ft(),e),n.__exportStar(ht(),e),n.__exportStar(gt(),e)})),_t=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.binary=void 0,e.encode=n,e.decode=r,e.is=i;let t=K();function n(e){let n=(0,t.toUint8Array)(e),r=``;for(let e of n)r+=String.fromCharCode(e);return r}function r(e){let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n)&255;return t}function i(e){return typeof e==`string`}e.binary={encode:n,decode:r,is:i}})),vt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.hex=e.formats=void 0,e.normalize=m,e.is=h,e.encode=g,e.decode=_,e.parse=v,e.format=y;let t=K(),n=/^[0-9a-f]$/i,r=[` `,` `,`
83
+ `)}`:`${t} :`}};ce=le,w.Constructed=ce,le.NAME=`CONSTRUCTED`;var F=class extends x{fromBER(e,t,n){return t}toBER(e){return m}};F.override=`EndOfContentValueBlock`;var ue,de=class extends T{constructor(e={}){super(e,F),this.idBlock.tagClass=1,this.idBlock.tagNumber=0}};ue=de,w.EndOfContent=ue,de.NAME=g;var fe,pe=class extends T{constructor(e={}){super(e,x),this.idBlock.tagClass=1,this.idBlock.tagNumber=5}fromBER(e,t,n){return this.lenBlock.length>0&&this.warnings.push(`Non-zero length of value block for Null type`),this.idBlock.error.length||(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length||(this.blockLength+=this.lenBlock.blockLength),this.blockLength+=n,t+n>e.byteLength?(this.error=`End of input reached before message was fully decoded (inconsistent offset and length values)`,-1):t+n}toBER(e,t){let n=new ArrayBuffer(2);if(!e){let e=new Uint8Array(n);e[0]=5,e[1]=0}return t&&t.write(n),n}onAsciiEncoding(){return`${this.constructor.NAME}`}};fe=pe,w.Null=fe,pe.NAME=`NULL`;var me=class extends y(x){get value(){for(let e of this.valueHexView)if(e>0)return!0;return!1}set value(e){this.valueHexView[0]=e?255:0}constructor({value:e,...t}={}){super(t),this.valueHexView=t.valueHex?i.BufferSourceConverter.toUint8Array(t.valueHex):new Uint8Array(1),e&&(this.value=e)}fromBER(e,t,n){let r=i.BufferSourceConverter.toUint8Array(e);return c(this,r,t,n)?(this.valueHexView=r.subarray(t,t+n),n>1&&this.warnings.push(`Boolean value encoded in more then 1 octet`),this.isHexOnly=!0,a.utilDecodeTC.call(this),this.blockLength=n,t+n):-1}toBER(){return this.valueHexView.slice()}toJSON(){return{...super.toJSON(),value:this.value}}};me.NAME=`BooleanValueBlock`;var I,he=class extends T{getValue(){return this.valueBlock.value}setValue(e){this.valueBlock.value=e}constructor(e={}){super(e,me),this.idBlock.tagClass=1,this.idBlock.tagNumber=1}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.getValue}`}};I=he,w.Boolean=I,he.NAME=`BOOLEAN`;var ge=class extends y(se){constructor({isConstructed:e=!1,...t}={}){super(t),this.isConstructed=e}fromBER(e,t,n,r){let i=0;if(this.isConstructed){if(this.isHexOnly=!1,i=se.prototype.fromBER.call(this,e,t,n,r),i===-1)return i;for(let e=0;e<this.value.length;e++){let t=this.value[e].constructor.NAME;if(t===g){if(this.isIndefiniteForm)break;return this.error=`EndOfContent is unexpected, OCTET STRING may consists of OCTET STRINGs only`,-1}if(t!==_)return this.error=`OCTET STRING may consists of OCTET STRINGs only`,-1}}else this.isHexOnly=!0,i=super.fromBER(e,t,n),this.blockLength=n;return i}toBER(e,t){return this.isConstructed?se.prototype.toBER.call(this,e,t):e?new ArrayBuffer(this.valueHexView.byteLength):this.valueHexView.slice().buffer}toJSON(){return{...super.toJSON(),isConstructed:this.isConstructed}}};ge.NAME=`OctetStringValueBlock`;var L,_e=class extends T{constructor({idBlock:e={},lenBlock:t={},...n}={}){n.isConstructed??=!!n.value?.length,super({idBlock:{isConstructed:n.isConstructed,...e},lenBlock:{...t,isIndefiniteForm:!!n.isIndefiniteForm},...n},ge),this.idBlock.tagClass=1,this.idBlock.tagNumber=4}fromBER(e,t,n,r){if(this.valueBlock.isConstructed=this.idBlock.isConstructed,this.valueBlock.isIndefiniteForm=this.lenBlock.isIndefiniteForm,n===0)return this.idBlock.error.length===0&&(this.blockLength+=this.idBlock.blockLength),this.lenBlock.error.length===0&&(this.blockLength+=this.lenBlock.blockLength),t;if(!this.valueBlock.isConstructed){let i=(e instanceof ArrayBuffer?new Uint8Array(e):e).subarray(t,t+n);try{if(i.byteLength){let e=r??M(),t=N(i,0,i.byteLength,e);t.offset!==-1&&t.offset===n&&(this.valueBlock.value=[t.result])}}catch{}}return super.fromBER(e,t,n,r)}onAsciiEncoding(){return this.valueBlock.isConstructed||this.valueBlock.value&&this.valueBlock.value.length?le.prototype.onAsciiEncoding.call(this):`${this.constructor.NAME} : ${i.Convert.ToHex(this.valueBlock.valueHexView)}`}getValue(){if(!this.idBlock.isConstructed)return this.valueBlock.valueHexView.slice().buffer;let e=[];for(let t of this.valueBlock.value)t instanceof L&&e.push(t.valueBlock.valueHexView);return i.BufferSourceConverter.concat(e)}};L=_e,w.OctetString=L,_e.NAME=_;var R=class extends y(se){constructor({unusedBits:e=0,isConstructed:t=!1,...n}={}){super(n),this.unusedBits=e,this.isConstructed=t,this.blockLength=this.valueHexView.byteLength}fromBER(e,t,n,r){if(!n)return t;let a=-1;if(this.isConstructed){if(a=se.prototype.fromBER.call(this,e,t,n,r),a===-1)return a;for(let e of this.value){let t=e.constructor.NAME;if(t===g){if(this.isIndefiniteForm)break;return this.error=`EndOfContent is unexpected, BIT STRING may consists of BIT STRINGs only`,-1}if(t!==v)return this.error=`BIT STRING may consists of BIT STRINGs only`,-1;let n=e.valueBlock;if(this.unusedBits>0&&n.unusedBits>0)return this.error=`Using of "unused bits" inside constructive BIT STRING allowed for least one only`,-1;this.unusedBits=n.unusedBits}return a}let o=i.BufferSourceConverter.toUint8Array(e);if(!c(this,o,t,n))return-1;let s=o.subarray(t,t+n);if(this.unusedBits=s[0],this.unusedBits>7)return this.error=`Unused bits for BitString must be in range 0-7`,-1;if(!this.unusedBits){let e=s.subarray(1);try{if(e.byteLength){let t=r??M(),i=N(e,0,e.byteLength,t);i.offset!==-1&&i.offset===n-1&&(this.value=[i.result])}}catch{}}return this.valueHexView=s.subarray(1),this.blockLength=s.length,t+n}toBER(e,t){if(this.isConstructed)return se.prototype.toBER.call(this,e,t);if(e)return new ArrayBuffer(this.valueHexView.byteLength+1);if(!this.valueHexView.byteLength){let e=new Uint8Array(1);return e[0]=0,e.buffer}let n=new Uint8Array(this.valueHexView.length+1);return n[0]=this.unusedBits,n.set(this.valueHexView,1),n.buffer}toJSON(){return{...super.toJSON(),unusedBits:this.unusedBits,isConstructed:this.isConstructed}}};R.NAME=`BitStringValueBlock`;var ve,ye=class extends T{constructor({idBlock:e={},lenBlock:t={},...n}={}){n.isConstructed??=!!n.value?.length,super({idBlock:{isConstructed:n.isConstructed,...e},lenBlock:{...t,isIndefiniteForm:!!n.isIndefiniteForm},...n},R),this.idBlock.tagClass=1,this.idBlock.tagNumber=3}fromBER(e,t,n,r){return this.valueBlock.isConstructed=this.idBlock.isConstructed,this.valueBlock.isIndefiniteForm=this.lenBlock.isIndefiniteForm,super.fromBER(e,t,n,r)}onAsciiEncoding(){if(this.valueBlock.isConstructed||this.valueBlock.value&&this.valueBlock.value.length)return le.prototype.onAsciiEncoding.call(this);{let e=[],t=this.valueBlock.valueHexView;for(let n of t)e.push(n.toString(2).padStart(8,`0`));let n=e.join(``);return`${this.constructor.NAME} : ${n.substring(0,n.length-this.valueBlock.unusedBits)}`}}};ve=ye,w.BitString=ve,ye.NAME=v;var be;function xe(e,t){let n=new Uint8Array([0]),r=new Uint8Array(e),i=new Uint8Array(t),o=r.slice(0),s=o.length-1,c=i.slice(0),l=c.length-1,u=0,d=l<s?s:l,f=0;for(let e=d;e>=0;e--,f++){switch(!0){case f<c.length:u=o[s-f]+c[l-f]+n[0];break;default:u=o[s-f]+n[0]}switch(n[0]=u/10,!0){case f>=o.length:o=a.utilConcatView(new Uint8Array([u%10]),o);break;default:o[s-f]=u%10}}return n[0]>0&&(o=a.utilConcatView(n,o)),o}function Se(e){if(e>=u.length)for(let t=u.length;t<=e;t++){let e=new Uint8Array([0]),n=u[t-1].slice(0);for(let t=n.length-1;t>=0;t--){let r=new Uint8Array([(n[t]<<1)+e[0]]);e[0]=r[0]/10,n[t]=r[0]%10}e[0]>0&&(n=a.utilConcatView(e,n)),u.push(n)}return u[e]}function z(e,t){let n=0,r=new Uint8Array(e),i=new Uint8Array(t),a=r.slice(0),o=a.length-1,s=i.slice(0),c=s.length-1,l,u=0;for(let e=c;e>=0;e--,u++)switch(l=a[o-u]-s[c-u]-n,!0){case l<0:n=1,a[o-u]=l+10;break;default:n=0,a[o-u]=l}if(n>0)for(let e=o-c+1;e>=0;e--,u++)if(l=a[o-u]-n,l<0)n=1,a[o-u]=l+10;else{n=0,a[o-u]=l;break}return a.slice()}var Ce=class extends y(x){setValueHex(){this.valueHexView.length>=4?(this.warnings.push(`Too big Integer for decoding, hex only`),this.isHexOnly=!0,this._valueDec=0):(this.isHexOnly=!1,this.valueHexView.length>0&&(this._valueDec=a.utilDecodeTC.call(this)))}constructor({value:e,...t}={}){super(t),this._valueDec=0,t.valueHex&&this.setValueHex(),e!==void 0&&(this.valueDec=e)}set valueDec(e){this._valueDec=e,this.isHexOnly=!1,this.valueHexView=new Uint8Array(a.utilEncodeTC(e))}get valueDec(){return this._valueDec}fromDER(e,t,n,r=0){let i=this.fromBER(e,t,n);if(i===-1)return i;let a=this.valueHexView;return a[0]===0&&a[1]&128?this.valueHexView=a.subarray(1):r!==0&&a.length<r&&(r-a.length>1&&(r=a.length+1),this.valueHexView=a.subarray(r-a.length)),i}toDER(e=!1){let t=this.valueHexView;switch(!0){case!!(t[0]&128):{let e=new Uint8Array(this.valueHexView.length+1);e[0]=0,e.set(t,1),this.valueHexView=e}break;case t[0]===0&&!(t[1]&128):this.valueHexView=this.valueHexView.subarray(1)}return this.toBER(e)}fromBER(e,t,n){let r=super.fromBER(e,t,n);return r===-1||this.setValueHex(),r}toBER(e){return e?new ArrayBuffer(this.valueHexView.length):this.valueHexView.slice().buffer}toJSON(){return{...super.toJSON(),valueDec:this.valueDec}}toString(){let e=this.valueHexView.length*8-1,t=new Uint8Array(this.valueHexView.length*8/3),n=0,r,i=this.valueHexView,a=``,o=!1;for(let o=i.byteLength-1;o>=0;o--){r=i[o];for(let i=0;i<8;i++){if((r&1)==1)switch(n){case e:t=z(Se(n),t),a=`-`;break;default:t=xe(t,Se(n))}n++,r>>=1}}for(let e=0;e<t.length;e++)t[e]&&(o=!0),o&&(a+=d.charAt(t[e]));return o===!1&&(a+=d.charAt(0)),a}};be=Ce,Ce.NAME=`IntegerValueBlock`,Object.defineProperty(be.prototype,"valueHex",{set:function(e){this.valueHexView=new Uint8Array(e),this.setValueHex()},get:function(){return this.valueHexView.slice().buffer}});var we,Te=class extends T{constructor(e={}){super(e,Ce),this.idBlock.tagClass=1,this.idBlock.tagNumber=2}toBigInt(){return o(),BigInt(this.valueBlock.toString())}static fromBigInt(e){o();let t=BigInt(e),n=new l,r=t.toString(16).replace(/^-/,``),a=new Uint8Array(i.Convert.FromHex(r));if(t<0){let e=new Uint8Array(a.length+(a[0]&128?1:0));e[0]|=128;let r=BigInt(`0x${i.Convert.ToHex(e)}`)+t,o=i.BufferSourceConverter.toUint8Array(i.Convert.FromHex(r.toString(16)));o[0]|=128,n.write(o)}else a[0]&128&&n.write(new Uint8Array([0])),n.write(a);return new we({valueHex:n.final()})}convertToDER(){let e=new we({valueHex:this.valueBlock.valueHexView});return e.valueBlock.toDER(),e}convertFromDER(){return new we({valueHex:this.valueBlock.valueHexView[0]===0?this.valueBlock.valueHexView.subarray(1):this.valueBlock.valueHexView})}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.valueBlock.toString()}`}};we=Te,w.Integer=we,Te.NAME=`INTEGER`;var Ee,De=class extends Te{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=10}};Ee=De,w.Enumerated=Ee,De.NAME=`ENUMERATED`;var Oe=class extends y(x){constructor({valueDec:e=-1,isFirstSid:t=!1,...n}={}){super(n),this.valueDec=e,this.isFirstSid=t}fromBER(e,t,n){if(!n)return t;let r=i.BufferSourceConverter.toUint8Array(e);if(!c(this,r,t,n))return-1;let o=r.subarray(t,t+n);this.valueHexView=new Uint8Array(n);for(let e=0;e<n&&(this.valueHexView[e]=o[e]&127,this.blockLength++,o[e]&128);e++);let s=new Uint8Array(this.blockLength);for(let e=0;e<this.blockLength;e++)s[e]=this.valueHexView[e];return this.valueHexView=s,o[this.blockLength-1]&128?(this.error=`End of input reached before message was fully decoded`,-1):(this.valueHexView[0]===0&&this.warnings.push(`Needlessly long format of SID encoding`),this.blockLength<=8?this.valueDec=a.utilFromBase(this.valueHexView,7):(this.isHexOnly=!0,this.warnings.push(`Too big SID for decoding, hex only`)),t+this.blockLength)}set valueBigInt(e){o();let t=BigInt(e).toString(2);for(;t.length%7;)t=`0`+t;let n=new Uint8Array(t.length/7);for(let e=0;e<n.length;e++)n[e]=parseInt(t.slice(e*7,e*7+7),2)+(e+1<n.length?128:0);this.fromBER(n.buffer,0,n.length)}toBER(e){if(this.isHexOnly){if(e)return new ArrayBuffer(this.valueHexView.byteLength);let t=this.valueHexView,n=new Uint8Array(this.blockLength);for(let e=0;e<this.blockLength-1;e++)n[e]=t[e]|128;return n[this.blockLength-1]=t[this.blockLength-1],n.buffer}let t=a.utilToBase(this.valueDec,7);if(t.byteLength===0)return this.error=`Error during encoding SID value`,m;let n=new Uint8Array(t.byteLength);if(!e){let e=new Uint8Array(t),r=t.byteLength-1;for(let t=0;t<r;t++)n[t]=e[t]|128;n[r]=e[r]}return n}toString(){let e=``;if(this.isHexOnly)e=i.Convert.ToHex(this.valueHexView);else if(this.isFirstSid){let t=this.valueDec;this.valueDec<=39?e=`0.`:this.valueDec<=79?(e=`1.`,t-=40):(e=`2.`,t-=80),e+=t.toString()}else e=this.valueDec.toString();return e}toJSON(){return{...super.toJSON(),valueDec:this.valueDec,isFirstSid:this.isFirstSid}}};Oe.NAME=`sidBlock`;var B=class extends x{constructor({value:e=``,...t}={}){super(t),this.value=[],e&&this.fromString(e)}fromBER(e,t,n){let r=t;for(;n>0;){let t=new Oe;if(r=t.fromBER(e,r,n),r===-1)return this.blockLength=0,this.error=t.error,r;this.value.length===0&&(t.isFirstSid=!0),this.blockLength+=t.blockLength,n-=t.blockLength,this.value.push(t)}return r}toBER(e){let t=[];for(let n=0;n<this.value.length;n++){let r=this.value[n].toBER(e);if(r.byteLength===0)return this.error=this.value[n].error,m;t.push(r)}return s(t)}fromString(e){this.value=[];let t=0,n=0,r=``,i=!1;do if(n=e.indexOf(`.`,t),r=n===-1?e.substring(t):e.substring(t,n),t=n+1,i){let e=this.value[0],t=0;switch(e.valueDec){case 0:break;case 1:t=40;break;case 2:t=80;break;default:this.value=[];return}let n=parseInt(r,10);if(isNaN(n))return;e.valueDec=n+t,i=!1}else{let e=new Oe;if(r>2**53-1)o(),e.valueBigInt=BigInt(r);else if(e.valueDec=parseInt(r,10),isNaN(e.valueDec))return;this.value.length||(e.isFirstSid=!0,i=!0),this.value.push(e)}while(n!==-1)}toString(){let e=``,t=!1;for(let n=0;n<this.value.length;n++){t=this.value[n].isHexOnly;let r=this.value[n].toString();n!==0&&(e=`${e}.`),t?(r=`{${r}}`,this.value[n].isFirstSid?e=`2.{${r} - 80}`:e+=r):e+=r}return e}toJSON(){let e={...super.toJSON(),value:this.toString(),sidArray:[]};for(let t=0;t<this.value.length;t++)e.sidArray.push(this.value[t].toJSON());return e}};B.NAME=`ObjectIdentifierValueBlock`;var ke,V=class extends T{getValue(){return this.valueBlock.toString()}setValue(e){this.valueBlock.fromString(e)}constructor(e={}){super(e,B),this.idBlock.tagClass=1,this.idBlock.tagNumber=6}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.valueBlock.toString()||`empty`}`}toJSON(){return{...super.toJSON(),value:this.getValue()}}};ke=V,w.ObjectIdentifier=ke,V.NAME=`OBJECT IDENTIFIER`;var Ae=class extends y(b){constructor({valueDec:e=0,...t}={}){super(t),this.valueDec=e}fromBER(e,t,n){if(n===0)return t;let r=i.BufferSourceConverter.toUint8Array(e);if(!c(this,r,t,n))return-1;let o=r.subarray(t,t+n);this.valueHexView=new Uint8Array(n);for(let e=0;e<n&&(this.valueHexView[e]=o[e]&127,this.blockLength++,o[e]&128);e++);let s=new Uint8Array(this.blockLength);for(let e=0;e<this.blockLength;e++)s[e]=this.valueHexView[e];return this.valueHexView=s,o[this.blockLength-1]&128?(this.error=`End of input reached before message was fully decoded`,-1):(this.valueHexView[0]===0&&this.warnings.push(`Needlessly long format of SID encoding`),this.blockLength<=8?this.valueDec=a.utilFromBase(this.valueHexView,7):(this.isHexOnly=!0,this.warnings.push(`Too big SID for decoding, hex only`)),t+this.blockLength)}toBER(e){if(this.isHexOnly){if(e)return new ArrayBuffer(this.valueHexView.byteLength);let t=this.valueHexView,n=new Uint8Array(this.blockLength);for(let e=0;e<this.blockLength-1;e++)n[e]=t[e]|128;return n[this.blockLength-1]=t[this.blockLength-1],n.buffer}let t=a.utilToBase(this.valueDec,7);if(t.byteLength===0)return this.error=`Error during encoding SID value`,m;let n=new Uint8Array(t.byteLength);if(!e){let e=new Uint8Array(t),r=t.byteLength-1;for(let t=0;t<r;t++)n[t]=e[t]|128;n[r]=e[r]}return n.buffer}toString(){let e=``;return e=this.isHexOnly?i.Convert.ToHex(this.valueHexView):this.valueDec.toString(),e}toJSON(){return{...super.toJSON(),valueDec:this.valueDec}}};Ae.NAME=`relativeSidBlock`;var je=class extends x{constructor({value:e=``,...t}={}){super(t),this.value=[],e&&this.fromString(e)}fromBER(e,t,n){let r=t;for(;n>0;){let t=new Ae;if(r=t.fromBER(e,r,n),r===-1)return this.blockLength=0,this.error=t.error,r;this.blockLength+=t.blockLength,n-=t.blockLength,this.value.push(t)}return r}toBER(e,t){let n=[];for(let t=0;t<this.value.length;t++){let r=this.value[t].toBER(e);if(r.byteLength===0)return this.error=this.value[t].error,m;n.push(r)}return s(n)}fromString(e){this.value=[];let t=0,n=0,r=``;do{n=e.indexOf(`.`,t),r=n===-1?e.substring(t):e.substring(t,n),t=n+1;let i=new Ae;if(i.valueDec=parseInt(r,10),isNaN(i.valueDec))return!0;this.value.push(i)}while(n!==-1);return!0}toString(){let e=``,t=!1;for(let n=0;n<this.value.length;n++){t=this.value[n].isHexOnly;let r=this.value[n].toString();n!==0&&(e=`${e}.`),t&&(r=`{${r}}`),e+=r}return e}toJSON(){let e={...super.toJSON(),value:this.toString(),sidArray:[]};for(let t=0;t<this.value.length;t++)e.sidArray.push(this.value[t].toJSON());return e}};je.NAME=`RelativeObjectIdentifierValueBlock`;var Me,Ne=class extends T{getValue(){return this.valueBlock.toString()}setValue(e){this.valueBlock.fromString(e)}constructor(e={}){super(e,je),this.idBlock.tagClass=1,this.idBlock.tagNumber=13}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.valueBlock.toString()||`empty`}`}toJSON(){return{...super.toJSON(),value:this.getValue()}}};Me=Ne,w.RelativeObjectIdentifier=Me,Ne.NAME=`RelativeObjectIdentifier`;var Pe,Fe=class extends le{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=16}};Pe=Fe,w.Sequence=Pe,Fe.NAME=`SEQUENCE`;var Ie,Le=class extends le{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=17}};Ie=Le,w.Set=Ie,Le.NAME=`SET`;var Re=class extends y(x){constructor({...e}={}){super(e),this.isHexOnly=!0,this.value=``}toJSON(){return{...super.toJSON(),value:this.value}}};Re.NAME=`StringValueBlock`;var ze=class extends Re{};ze.NAME=`SimpleStringValueBlock`;var H=class extends D{constructor({...e}={}){super(e,ze)}fromBuffer(e){this.valueBlock.value=String.fromCharCode.apply(null,i.BufferSourceConverter.toUint8Array(e))}fromString(e){let t=e.length,n=this.valueBlock.valueHexView=new Uint8Array(t);for(let r=0;r<t;r++)n[r]=e.charCodeAt(r);this.valueBlock.value=e}};H.NAME=`SIMPLE STRING`;var Be=class extends H{fromBuffer(e){this.valueBlock.valueHexView=i.BufferSourceConverter.toUint8Array(e);try{this.valueBlock.value=i.Convert.ToUtf8String(e)}catch(t){this.warnings.push(`Error during "decodeURIComponent": ${t}, using raw string`),this.valueBlock.value=i.Convert.ToBinary(e)}}fromString(e){this.valueBlock.valueHexView=new Uint8Array(i.Convert.FromUtf8String(e)),this.valueBlock.value=e}};Be.NAME=`Utf8StringValueBlock`;var U,W=class extends Be{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=12}};U=W,w.Utf8String=U,W.NAME=`UTF8String`;var Ve=class extends H{fromBuffer(e){this.valueBlock.value=i.Convert.ToUtf16String(e),this.valueBlock.valueHexView=i.BufferSourceConverter.toUint8Array(e)}fromString(e){this.valueBlock.value=e,this.valueBlock.valueHexView=new Uint8Array(i.Convert.FromUtf16String(e))}};Ve.NAME=`BmpStringValueBlock`;var He,Ue=class extends Ve{constructor({...e}={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=30}};He=Ue,w.BmpString=He,Ue.NAME=`BMPString`;var We=class extends H{fromBuffer(e){let t=ArrayBuffer.isView(e)?e.slice().buffer:e.slice(0),n=new Uint8Array(t);for(let e=0;e<n.length;e+=4)n[e]=n[e+3],n[e+1]=n[e+2],n[e+2]=0,n[e+3]=0;this.valueBlock.value=String.fromCharCode.apply(null,new Uint32Array(t))}fromString(e){let t=e.length,n=this.valueBlock.valueHexView=new Uint8Array(t*4);for(let r=0;r<t;r++){let t=a.utilToBase(e.charCodeAt(r),8),i=new Uint8Array(t);if(i.length>4)continue;let o=4-i.length;for(let e=i.length-1;e>=0;e--)n[r*4+e+o]=i[e]}this.valueBlock.value=e}};We.NAME=`UniversalStringValueBlock`;var Ge,Ke=class extends We{constructor({...e}={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=28}};Ge=Ke,w.UniversalString=Ge,Ke.NAME=`UniversalString`;var qe,Je=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=18}};qe=Je,w.NumericString=qe,Je.NAME=`NumericString`;var G,Ye=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=19}};G=Ye,w.PrintableString=G,Ye.NAME=`PrintableString`;var Xe,Ze=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=20}};Xe=Ze,w.TeletexString=Xe,Ze.NAME=`TeletexString`;var Qe,$e=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=21}};Qe=$e,w.VideotexString=Qe,$e.NAME=`VideotexString`;var et,tt=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=22}};et=tt,w.IA5String=et,tt.NAME=`IA5String`;var nt,rt=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=25}};nt=rt,w.GraphicString=nt,rt.NAME=`GraphicString`;var it,at=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=26}};it=at,w.VisibleString=it,at.NAME=`VisibleString`;var ot,K=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=27}};ot=K,w.GeneralString=ot,K.NAME=`GeneralString`;var lt,ut=class extends H{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=29}};lt=ut,w.CharacterString=lt,ut.NAME=`CharacterString`;var dt,ft=class extends at{constructor({value:e,valueDate:t,...n}={}){if(super(n),this.year=0,this.month=0,this.day=0,this.hour=0,this.minute=0,this.second=0,e){this.fromString(e),this.valueBlock.valueHexView=new Uint8Array(e.length);for(let t=0;t<e.length;t++)this.valueBlock.valueHexView[t]=e.charCodeAt(t)}t&&(this.fromDate(t),this.valueBlock.valueHexView=new Uint8Array(this.toBuffer())),this.idBlock.tagClass=1,this.idBlock.tagNumber=23}fromBuffer(e){this.fromString(String.fromCharCode.apply(null,i.BufferSourceConverter.toUint8Array(e)))}toBuffer(){let e=this.toString(),t=new ArrayBuffer(e.length),n=new Uint8Array(t);for(let t=0;t<e.length;t++)n[t]=e.charCodeAt(t);return t}fromDate(e){this.year=e.getUTCFullYear(),this.month=e.getUTCMonth()+1,this.day=e.getUTCDate(),this.hour=e.getUTCHours(),this.minute=e.getUTCMinutes(),this.second=e.getUTCSeconds()}toDate(){return new Date(Date.UTC(this.year,this.month-1,this.day,this.hour,this.minute,this.second))}fromString(e){let t=/(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})Z/gi.exec(e);if(t===null){this.error=`Wrong input string for conversion`;return}let n=parseInt(t[1],10);this.year=n>=50?1900+n:2e3+n,this.month=parseInt(t[2],10),this.day=parseInt(t[3],10),this.hour=parseInt(t[4],10),this.minute=parseInt(t[5],10),this.second=parseInt(t[6],10)}toString(e=`iso`){if(e===`iso`){let e=Array(7);return e[0]=a.padNumber(this.year<2e3?this.year-1900:this.year-2e3,2),e[1]=a.padNumber(this.month,2),e[2]=a.padNumber(this.day,2),e[3]=a.padNumber(this.hour,2),e[4]=a.padNumber(this.minute,2),e[5]=a.padNumber(this.second,2),e[6]=`Z`,e.join(``)}return super.toString(e)}onAsciiEncoding(){return`${this.constructor.NAME} : ${this.toDate().toISOString()}`}toJSON(){return{...super.toJSON(),year:this.year,month:this.month,day:this.day,hour:this.hour,minute:this.minute,second:this.second}}};dt=ft,w.UTCTime=dt,ft.NAME=`UTCTime`;var pt,mt=class extends ft{constructor(e={}){super(e),this.millisecond??=0,this.idBlock.tagClass=1,this.idBlock.tagNumber=24}fromDate(e){super.fromDate(e),this.millisecond=e.getUTCMilliseconds()}toDate(){let e=Date.UTC(this.year,this.month-1,this.day,this.hour,this.minute,this.second,this.millisecond);return new Date(e)}fromString(e){let t=!1,n=``,r=``,i=0,a,o=0,s=0;if(e[e.length-1]===`Z`)n=e.substring(0,e.length-1),t=!0;else{let t=new Number(e[e.length-1]);if(isNaN(t.valueOf()))throw Error(`Wrong input string for conversion`);n=e}if(t){if(n.indexOf(`+`)!==-1||n.indexOf(`-`)!==-1)throw Error(`Wrong input string for conversion`)}else{let e=1,t=n.indexOf(`+`),r=``;if(t===-1&&(t=n.indexOf(`-`),e=-1),t!==-1){if(r=n.substring(t+1),n=n.substring(0,t),r.length!==2&&r.length!==4)throw Error(`Wrong input string for conversion`);let i=parseInt(r.substring(0,2),10);if(isNaN(i.valueOf()))throw Error(`Wrong input string for conversion`);if(o=e*i,r.length===4){if(i=parseInt(r.substring(2,4),10),isNaN(i.valueOf()))throw Error(`Wrong input string for conversion`);s=e*i}}}let c=n.indexOf(`.`);if(c===-1&&(c=n.indexOf(`,`)),c!==-1){let e=new Number(`0${n.substring(c)}`);if(isNaN(e.valueOf()))throw Error(`Wrong input string for conversion`);i=e.valueOf(),r=n.substring(0,c)}else r=n;switch(!0){case r.length===8:if(a=/(\d{4})(\d{2})(\d{2})/gi,c!==-1)throw Error(`Wrong input string for conversion`);break;case r.length===10:if(a=/(\d{4})(\d{2})(\d{2})(\d{2})/gi,c!==-1){let e=60*i;this.minute=Math.floor(e),e=60*(e-this.minute),this.second=Math.floor(e),e=1e3*(e-this.second),this.millisecond=Math.floor(e)}break;case r.length===12:if(a=/(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})/gi,c!==-1){let e=60*i;this.second=Math.floor(e),e=1e3*(e-this.second),this.millisecond=Math.floor(e)}break;case r.length===14:if(a=/(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})/gi,c!==-1){let e=1e3*i;this.millisecond=Math.floor(e)}break;default:throw Error(`Wrong input string for conversion`)}let l=a.exec(r);if(l===null)throw Error(`Wrong input string for conversion`);for(let e=1;e<l.length;e++)switch(e){case 1:this.year=parseInt(l[e],10);break;case 2:this.month=parseInt(l[e],10);break;case 3:this.day=parseInt(l[e],10);break;case 4:this.hour=parseInt(l[e],10)+o;break;case 5:this.minute=parseInt(l[e],10)+s;break;case 6:this.second=parseInt(l[e],10);break;default:throw Error(`Wrong input string for conversion`)}if(t===!1){let e=new Date(this.year,this.month,this.day,this.hour,this.minute,this.second,this.millisecond);this.year=e.getUTCFullYear(),this.month=e.getUTCMonth(),this.day=e.getUTCDay(),this.hour=e.getUTCHours(),this.minute=e.getUTCMinutes(),this.second=e.getUTCSeconds(),this.millisecond=e.getUTCMilliseconds()}}toString(e=`iso`){if(e===`iso`){let e=[];return e.push(a.padNumber(this.year,4)),e.push(a.padNumber(this.month,2)),e.push(a.padNumber(this.day,2)),e.push(a.padNumber(this.hour,2)),e.push(a.padNumber(this.minute,2)),e.push(a.padNumber(this.second,2)),this.millisecond!==0&&(e.push(`.`),e.push(a.padNumber(this.millisecond,3))),e.push(`Z`),e.join(``)}return super.toString(e)}toJSON(){return{...super.toJSON(),millisecond:this.millisecond}}};pt=mt,w.GeneralizedTime=pt,mt.NAME=`GeneralizedTime`;var ht,gt=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=31}};ht=gt,w.DATE=ht,gt.NAME=`DATE`;var _t,vt=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=32}};_t=vt,w.TimeOfDay=_t,vt.NAME=`TimeOfDay`;var yt,bt=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=33}};yt=bt,w.DateTime=yt,bt.NAME=`DateTime`;var xt,St=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=34}};xt=St,w.Duration=xt,St.NAME=`Duration`;var Ct,wt=class extends W{constructor(e={}){super(e),this.idBlock.tagClass=1,this.idBlock.tagNumber=14}};Ct=wt,w.TIME=Ct,wt.NAME=`TIME`;var Tt=class{constructor({name:e=``,optional:t=!1}={}){this.name=e,this.optional=t}},Et=class extends Tt{constructor({value:e=[],...t}={}){super(t),this.value=e}},Dt=class extends Tt{constructor({value:e=new Tt,local:t=!1,...n}={}){super(n),this.value=e,this.local=t}},Ot=class{get data(){return this.dataView.slice().buffer}set data(e){this.dataView=i.BufferSourceConverter.toUint8Array(e)}constructor({data:e=h}={}){this.dataView=i.BufferSourceConverter.toUint8Array(e)}fromBER(e,t,n){let r=t+n;return this.dataView=i.BufferSourceConverter.toUint8Array(e).subarray(t,r),r}toBER(e){return this.dataView.slice().buffer}};function kt(e,t,n){if(n instanceof Et){for(let r of n.value)if(kt(e,t,r).verified)return{verified:!0,result:e};{let e={verified:!1,result:{error:`Wrong values for Choice type`}};return n.hasOwnProperty(f)&&(e.name=n.name),e}}if(n instanceof Tt)return n.hasOwnProperty(f)&&(e[n.name]=t),{verified:!0,result:e};if(!(e instanceof Object))return{verified:!1,result:{error:`Wrong root object`}};if(!(t instanceof Object))return{verified:!1,result:{error:`Wrong ASN.1 data`}};if(!(n instanceof Object)||!(`idBlock`in n)||!(`fromBER`in n.idBlock)||!(`toBER`in n.idBlock))return{verified:!1,result:{error:`Wrong ASN.1 schema`}};let r=n.idBlock.toBER(!1);if(r.byteLength===0)return{verified:!1,result:{error:`Error encoding idBlock for ASN.1 schema`}};if(n.idBlock.fromBER(r,0,r.byteLength)===-1)return{verified:!1,result:{error:`Error decoding idBlock for ASN.1 schema`}};if(n.idBlock.hasOwnProperty(`tagClass`)===!1)return{verified:!1,result:{error:`Wrong ASN.1 schema`}};if(n.idBlock.tagClass!==t.idBlock.tagClass)return{verified:!1,result:e};if(n.idBlock.hasOwnProperty(`tagNumber`)===!1)return{verified:!1,result:{error:`Wrong ASN.1 schema`}};if(n.idBlock.tagNumber!==t.idBlock.tagNumber)return{verified:!1,result:e};if(n.idBlock.hasOwnProperty(`isConstructed`)===!1)return{verified:!1,result:{error:`Wrong ASN.1 schema`}};if(n.idBlock.isConstructed!==t.idBlock.isConstructed)return{verified:!1,result:e};if(!(`isHexOnly`in n.idBlock))return{verified:!1,result:{error:`Wrong ASN.1 schema`}};if(n.idBlock.isHexOnly!==t.idBlock.isHexOnly)return{verified:!1,result:e};if(n.idBlock.isHexOnly){if(!(p in n.idBlock))return{verified:!1,result:{error:`Wrong ASN.1 schema`}};let r=n.idBlock.valueHexView,i=t.idBlock.valueHexView;if(r.length!==i.length)return{verified:!1,result:e};for(let t=0;t<r.length;t++)if(r[t]!==i[1])return{verified:!1,result:e}}if(n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&(e[n.name]=t)),n instanceof w.Constructed){let r=0,i={verified:!1,result:{error:`Unknown error`}},a=n.valueBlock.value.length;if(a>0&&n.valueBlock.value[0]instanceof Dt&&(a=t.valueBlock.value.length),a===0)return{verified:!0,result:e};if(t.valueBlock.value.length===0&&n.valueBlock.value.length!==0){let t=!0;for(let e=0;e<n.valueBlock.value.length;e++)t&&=n.valueBlock.value[e].optional||!1;return t?{verified:!0,result:e}:(n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&delete e[n.name]),e.error=`Inconsistent object length`,{verified:!1,result:e})}for(let o=0;o<a;o++)if(o-r>=t.valueBlock.value.length){if(n.valueBlock.value[o].optional===!1){let t={verified:!1,result:e};return e.error=`Inconsistent length between ASN.1 data and schema`,n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&(delete e[n.name],t.name=n.name)),t}}else if(n.valueBlock.value[0]instanceof Dt){if(i=kt(e,t.valueBlock.value[o],n.valueBlock.value[0].value),i.verified===!1){if(n.valueBlock.value[0].optional)r++;else return n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&delete e[n.name]),i}if(f in n.valueBlock.value[0]&&n.valueBlock.value[0].name.length>0){let r={};r=`local`in n.valueBlock.value[0]&&n.valueBlock.value[0].local?t:e,r[n.valueBlock.value[0].name]===void 0&&(r[n.valueBlock.value[0].name]=[]),r[n.valueBlock.value[0].name].push(t.valueBlock.value[o])}}else if(i=kt(e,t.valueBlock.value[o-r],n.valueBlock.value[o]),i.verified===!1){if(n.valueBlock.value[o].optional)r++;else return n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&delete e[n.name]),i}if(i.verified===!1){let t={verified:!1,result:e};return n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&(delete e[n.name],t.name=n.name)),t}return{verified:!0,result:e}}if(n.primitiveSchema&&p in t.valueBlock){let r=ae(t.valueBlock.valueHexView);if(r.offset===-1){let t={verified:!1,result:r.result};return n.name&&(n.name=n.name.replace(/^\s+|\s+$/g,``),n.name&&(delete e[n.name],t.name=n.name)),t}return kt(e,r.result,n.primitiveSchema)}return{verified:!0,result:e}}function q(e,t){if(!(t instanceof Object))return{verified:!1,result:{error:`Wrong ASN.1 schema type`}};let n=ae(i.BufferSourceConverter.toUint8Array(e));return n.offset===-1?{verified:!1,result:n.result}:kt(n.result,n.result,t)}e.Any=Tt,e.BaseBlock=T,e.BaseStringBlock=D,e.BitString=ye,e.BmpString=Ue,e.Boolean=he,e.CharacterString=ut,e.Choice=Et,e.Constructed=le,e.DATE=gt,e.DEFAULT_MAX_CONTENT_LENGTH=j,e.DEFAULT_MAX_DEPTH=100,e.DEFAULT_MAX_NODES=ee,e.DateTime=bt,e.Duration=St,e.EndOfContent=de,e.Enumerated=De,e.GeneralString=K,e.GeneralizedTime=mt,e.GraphicString=rt,e.HexBlock=y,e.IA5String=tt,e.Integer=Te,e.Null=pe,e.NumericString=Je,e.ObjectIdentifier=V,e.OctetString=_e,e.Primitive=A,e.PrintableString=Ye,e.RawData=Ot,e.RelativeObjectIdentifier=Ne,e.Repeated=Dt,e.Sequence=Fe,e.Set=Le,e.TIME=wt,e.TeletexString=Ze,e.TimeOfDay=vt,e.UTCTime=ft,e.UniversalString=Ke,e.Utf8String=W,e.ValueBlock=x,e.VideotexString=$e,e.ViewWriter=l,e.VisibleString=at,e.compareSchema=kt,e.fromBER=P,e.verifySchema=q})),ut=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isArrayBuffer=o,e.isSharedArrayBuffer=s,e.isArrayBufferLike=c,e.isArrayBufferView=l,e.isBufferSource=u,e.assertBufferSource=d,e.toUint8Array=f,e.toUint8ArrayCopy=p,e.toArrayBuffer=m,e.toArrayBufferLike=h,e.toView=g,e.toViewCopy=_;function t(e){return Object.prototype.toString.call(e)}function n(e){return e===DataView||e.prototype instanceof DataView}function r(e){return n(e)?1:e.BYTES_PER_ELEMENT??1}function i(e){if(ArrayBuffer.isView(e))return!0;if(!e||typeof e!=`object`)return!1;let t=e;return typeof t.byteOffset==`number`&&typeof t.byteLength==`number`&&c(t.buffer)}function a(e){let t=f(e),n=new Uint8Array(t.byteLength);return n.set(t),n}function o(e){return t(e)===`[object ArrayBuffer]`}function s(e){return typeof SharedArrayBuffer<`u`&&t(e)===`[object SharedArrayBuffer]`}function c(e){return o(e)||s(e)}function l(e){return i(e)}function u(e){return c(e)||l(e)}function d(e){if(!u(e))throw TypeError(`Expected ArrayBuffer, SharedArrayBuffer, or ArrayBufferView`)}function f(e){return d(e),c(e)?new Uint8Array(e):new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}function p(e){return a(e)}function m(e){if(d(e),o(e))return e;let t=new ArrayBuffer(e.byteLength);return new Uint8Array(t).set(f(e)),t}function h(e){return d(e),c(e)?e:e.byteOffset===0&&e.byteLength===e.buffer.byteLength?e.buffer:a(e).buffer}function g(e,t){if(d(e),ArrayBuffer.isView(e)&&e.constructor===t)return e;let i=f(e),a=r(t);if(i.byteOffset%a!==0||i.byteLength%a!==0)throw RangeError(`Cannot create ${t.name} over unaligned byte range`);return n(t)?new t(i.buffer,i.byteOffset,i.byteLength):new t(i.buffer,i.byteOffset,i.byteLength/a)}function _(e,t){return g(p(e),t)}})),dt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.concatToUint8Array=n,e.concat=r;let t=ut();function n(e){let n=[],r=0;for(let i of e){let e=(0,t.toUint8Array)(i);n.push(e),r+=e.byteLength}let i=new Uint8Array(r),a=0;for(let e of n)i.set(e,a),a+=e.byteLength;return i}function r(e,r,...i){let a,o;typeof r==`function`?(a=Array.from(e),o=r):(0,t.isBufferSource)(e)?a=[e,r,...i].filter(t.isBufferSource):(a=Array.from(e),r&&a.push(r),a.push(...i));let s=n(a);return o?(0,t.toView)(s,o):s.buffer}})),ft=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.equal=n;let t=ut();function n(e,n,r={}){let i=(0,t.toUint8Array)(e),a=(0,t.toUint8Array)(n);if(!r.constantTime&&i.byteLength!==a.byteLength)return!1;let o=Math.max(i.byteLength,a.byteLength),s=i.byteLength^a.byteLength;for(let e=0;e<o;e++)s|=(i[e]??0)^(a[e]??0);return s===0}})),pt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.indexOf=u,e.lastIndexOf=d,e.includes=f,e.startsWith=p,e.endsWith=m,e.slice=h,e.tail=g,e.copy=_,e.compare=v;let t=ut();function n(e,t,n){let r=Number.isFinite(e)?Math.trunc(e):t;return r<=0?0:r>=n?n:r}function r(e,t){let r=n(t?.start,0,e),i=n(t?.end,e,e);return i>=r?[r,i]:[r,r]}function i(e,t){let r=n(t?.start,e,e),i=n(t?.end,0,e);return r>=i?[i,r]:[r,r]}function a(e,t,n){let r=Number.isFinite(e)?Math.trunc(e):t;return r<0?Math.max(n+r,0):r>n?n:r}function o(e){let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n)&255;return t}function s(e){return new TextEncoder().encode(e)}function c(e,n){return typeof e==`string`?n?.encoding===`utf8`?s(e):o(e):(0,t.toUint8Array)(e)}function l(e,t,n){for(let r=0;r<t.byteLength;r++)if(e[n+r]!==t[r])return!1;return!0}function u(e,n,i){let a=(0,t.toUint8Array)(e),o=c(n,i),[s,u]=r(a.byteLength,i);if(o.byteLength===0)return s;let d=u-o.byteLength;if(d<s)return-1;for(let e=s;e<=d;e++)if(l(a,o,e))return e;return-1}function d(e,n,r){let a=(0,t.toUint8Array)(e),o=c(n,r),[s,u]=i(a.byteLength,r);if(o.byteLength===0)return u;let d=u-o.byteLength;if(d<s)return-1;for(let e=d;e>=s;e--)if(l(a,o,e))return e;return-1}function f(e,t,n){return u(e,t,n)!==-1}function p(e,n,r){let i=(0,t.toUint8Array)(e),a=c(n,r);return a.byteLength>i.byteLength?!1:l(i,a,0)}function m(e,n,r){let i=(0,t.toUint8Array)(e),a=c(n,r);return a.byteLength>i.byteLength?!1:l(i,a,i.byteLength-a.byteLength)}function h(e,n,r){let i=(0,t.toUint8Array)(e),o=a(n,0,i.byteLength),s=a(r,i.byteLength,i.byteLength);return s<=o?i.subarray(o,o):i.subarray(o,s)}function g(e,n){let r=(0,t.toUint8Array)(e),i=Number.isFinite(n)?Math.max(0,Math.trunc(n)):0;return i>=r.byteLength?r:r.subarray(r.byteLength-i)}function _(e){return(0,t.toUint8ArrayCopy)(e)}function v(e,n){let r=(0,t.toUint8Array)(e),i=(0,t.toUint8Array)(n),a=Math.min(r.byteLength,i.byteLength);for(let e=0;e<a;e++){if(r[e]<i[e])return-1;if(r[e]>i[e])return 1}return r.byteLength<i.byteLength?-1:+(r.byteLength>i.byteLength)}})),mt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.tail=e.startsWith=e.slice=e.lastIndexOf=e.indexOf=e.includes=e.endsWith=e.copy=e.compare=e.equal=e.concatToUint8Array=e.concat=e.toViewCopy=e.toView=e.toUint8ArrayCopy=e.toUint8Array=e.toArrayBufferLike=e.toArrayBuffer=e.isSharedArrayBuffer=e.isBufferSource=e.isArrayBufferView=e.isArrayBufferLike=e.isArrayBuffer=e.assertBufferSource=void 0;var t=ut();Object.defineProperty(e,"assertBufferSource",{enumerable:!0,get:function(){return t.assertBufferSource}}),Object.defineProperty(e,"isArrayBuffer",{enumerable:!0,get:function(){return t.isArrayBuffer}}),Object.defineProperty(e,"isArrayBufferLike",{enumerable:!0,get:function(){return t.isArrayBufferLike}}),Object.defineProperty(e,"isArrayBufferView",{enumerable:!0,get:function(){return t.isArrayBufferView}}),Object.defineProperty(e,"isBufferSource",{enumerable:!0,get:function(){return t.isBufferSource}}),Object.defineProperty(e,"isSharedArrayBuffer",{enumerable:!0,get:function(){return t.isSharedArrayBuffer}}),Object.defineProperty(e,"toArrayBuffer",{enumerable:!0,get:function(){return t.toArrayBuffer}}),Object.defineProperty(e,"toArrayBufferLike",{enumerable:!0,get:function(){return t.toArrayBufferLike}}),Object.defineProperty(e,"toUint8Array",{enumerable:!0,get:function(){return t.toUint8Array}}),Object.defineProperty(e,"toUint8ArrayCopy",{enumerable:!0,get:function(){return t.toUint8ArrayCopy}}),Object.defineProperty(e,"toView",{enumerable:!0,get:function(){return t.toView}}),Object.defineProperty(e,"toViewCopy",{enumerable:!0,get:function(){return t.toViewCopy}});var n=dt();Object.defineProperty(e,"concat",{enumerable:!0,get:function(){return n.concat}}),Object.defineProperty(e,"concatToUint8Array",{enumerable:!0,get:function(){return n.concatToUint8Array}});var r=ft();Object.defineProperty(e,"equal",{enumerable:!0,get:function(){return r.equal}});var i=pt();Object.defineProperty(e,"compare",{enumerable:!0,get:function(){return i.compare}}),Object.defineProperty(e,"copy",{enumerable:!0,get:function(){return i.copy}}),Object.defineProperty(e,"endsWith",{enumerable:!0,get:function(){return i.endsWith}}),Object.defineProperty(e,"includes",{enumerable:!0,get:function(){return i.includes}}),Object.defineProperty(e,"indexOf",{enumerable:!0,get:function(){return i.indexOf}}),Object.defineProperty(e,"lastIndexOf",{enumerable:!0,get:function(){return i.lastIndexOf}}),Object.defineProperty(e,"slice",{enumerable:!0,get:function(){return i.slice}}),Object.defineProperty(e,"startsWith",{enumerable:!0,get:function(){return i.startsWith}}),Object.defineProperty(e,"tail",{enumerable:!0,get:function(){return i.tail}})})),ht=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnPropTypes=e.AsnTypeTypes=void 0;var t;(function(e){e[e.Sequence=0]=`Sequence`,e[e.Set=1]=`Set`,e[e.Choice=2]=`Choice`})(t||(e.AsnTypeTypes=t={}));var n;(function(e){e[e.Any=1]=`Any`,e[e.Boolean=2]=`Boolean`,e[e.OctetString=3]=`OctetString`,e[e.BitString=4]=`BitString`,e[e.Integer=5]=`Integer`,e[e.Enumerated=6]=`Enumerated`,e[e.ObjectIdentifier=7]=`ObjectIdentifier`,e[e.Utf8String=8]=`Utf8String`,e[e.BmpString=9]=`BmpString`,e[e.UniversalString=10]=`UniversalString`,e[e.NumericString=11]=`NumericString`,e[e.PrintableString=12]=`PrintableString`,e[e.TeletexString=13]=`TeletexString`,e[e.VideotexString=14]=`VideotexString`,e[e.IA5String=15]=`IA5String`,e[e.GraphicString=16]=`GraphicString`,e[e.VisibleString=17]=`VisibleString`,e[e.GeneralString=18]=`GeneralString`,e[e.CharacterString=19]=`CharacterString`,e[e.UTCTime=20]=`UTCTime`,e[e.GeneralizedTime=21]=`GeneralizedTime`,e[e.DATE=22]=`DATE`,e[e.TimeOfDay=23]=`TimeOfDay`,e[e.DateTime=24]=`DateTime`,e[e.Duration=25]=`Duration`,e[e.TIME=26]=`TIME`,e[e.Null=27]=`Null`})(n||(e.AsnPropTypes=n={}))})),gt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.BitString=void 0;let n=(K(),t(B)).__importStar(lt()),r=mt();e.BitString=class{unusedBits=0;value=new ArrayBuffer(0);constructor(e,t=0){if(e){if(typeof e==`number`)this.fromNumber(e);else if((0,r.isBufferSource)(e))this.unusedBits=t,this.value=(0,r.toArrayBuffer)(e);else throw TypeError(`Unsupported type of 'params' argument for BitString`)}}fromASN(e){if(!(e instanceof n.BitString))throw TypeError(`Argument 'asn' is not instance of ASN.1 BitString`);return this.unusedBits=e.valueBlock.unusedBits,this.value=(0,r.toArrayBuffer)(e.valueBlock.valueHex),this}toASN(){return new n.BitString({unusedBits:this.unusedBits,valueHex:this.value})}toSchema(e){return new n.BitString({name:e})}toNumber(){let e=``,t=new Uint8Array(this.value);for(let n of t)e+=n.toString(2).padStart(8,`0`);return e=e.split(``).reverse().join(``),this.unusedBits&&(e=e.slice(this.unusedBits).padStart(this.unusedBits,`0`)),parseInt(e,2)}fromNumber(e){let t=e.toString(2),n=t.length+7>>3;this.unusedBits=(n<<3)-t.length;let r=new Uint8Array(n);t=t.padStart(n<<3,`0`).split(``).reverse().join(``);let i=0;for(;i<n;)r[i]=parseInt(t.slice(i<<3,(i<<3)+8),2),i++;this.value=r.buffer}}})),_t=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.OctetString=void 0;let n=(K(),t(B)).__importStar(lt()),r=mt();e.OctetString=class{buffer;get byteLength(){return this.buffer.byteLength}get byteOffset(){return 0}constructor(e){this.buffer=typeof e==`number`?new ArrayBuffer(e):(0,r.isBufferSource)(e)?(0,r.toArrayBuffer)(e):Array.isArray(e)?new Uint8Array(e).buffer:new ArrayBuffer(0)}fromASN(e){if(!(e instanceof n.OctetString))throw TypeError(`Argument 'asn' is not instance of ASN.1 OctetString`);return this.buffer=(0,r.toArrayBuffer)(e.valueBlock.valueHex),this}toASN(){return new n.OctetString({valueHex:this.buffer})}toSchema(e){return new n.OctetString({name:e})}}})),vt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(gt(),e),n.__exportStar(_t(),e)})),yt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnNullConverter=e.AsnGeneralizedTimeConverter=e.AsnUTCTimeConverter=e.AsnCharacterStringConverter=e.AsnGeneralStringConverter=e.AsnVisibleStringConverter=e.AsnGraphicStringConverter=e.AsnIA5StringConverter=e.AsnVideotexStringConverter=e.AsnTeletexStringConverter=e.AsnPrintableStringConverter=e.AsnNumericStringConverter=e.AsnUniversalStringConverter=e.AsnBmpStringConverter=e.AsnUtf8StringConverter=e.AsnConstructedOctetStringConverter=e.AsnOctetStringConverter=e.AsnBooleanConverter=e.AsnObjectIdentifierConverter=e.AsnBitStringConverter=e.AsnIntegerBigIntConverter=e.AsnIntegerArrayBufferConverter=e.AsnEnumeratedConverter=e.AsnIntegerConverter=e.AsnAnyConverter=void 0,e.defaultConverter=s;let n=(K(),t(B)).__importStar(lt()),r=mt(),i=ht(),a=vt();e.AsnAnyConverter={fromASN:e=>e instanceof n.Null?null:(0,r.toArrayBuffer)(e.valueBeforeDecodeView),toASN:e=>{if(e===null)return new n.Null;let t=n.fromBER(e);if(t.result.error)throw Error(t.result.error);return t.result}},e.AsnIntegerConverter={fromASN:e=>e.valueBlock.valueHexView.byteLength>=4?e.valueBlock.toString():e.valueBlock.valueDec,toASN:e=>new n.Integer({value:+e})},e.AsnEnumeratedConverter={fromASN:e=>e.valueBlock.valueDec,toASN:e=>new n.Enumerated({value:e})},e.AsnIntegerArrayBufferConverter={fromASN:e=>(0,r.toArrayBuffer)(e.valueBlock.valueHexView),toASN:e=>new n.Integer({valueHex:e})},e.AsnIntegerBigIntConverter={fromASN:e=>e.toBigInt(),toASN:e=>n.Integer.fromBigInt(e)},e.AsnBitStringConverter={fromASN:e=>(0,r.toArrayBuffer)(e.valueBlock.valueHexView),toASN:e=>new n.BitString({valueHex:e})},e.AsnObjectIdentifierConverter={fromASN:e=>e.valueBlock.toString(),toASN:e=>new n.ObjectIdentifier({value:e})},e.AsnBooleanConverter={fromASN:e=>e.valueBlock.value,toASN:e=>new n.Boolean({value:e})},e.AsnOctetStringConverter={fromASN:e=>(0,r.toArrayBuffer)(e.valueBlock.valueHexView),toASN:e=>new n.OctetString({valueHex:e})},e.AsnConstructedOctetStringConverter={fromASN:e=>new a.OctetString(e.getValue()),toASN:e=>e.toASN()};function o(e){return{fromASN:e=>e.valueBlock.value,toASN:t=>new e({value:t})}}e.AsnUtf8StringConverter=o(n.Utf8String),e.AsnBmpStringConverter=o(n.BmpString),e.AsnUniversalStringConverter=o(n.UniversalString),e.AsnNumericStringConverter=o(n.NumericString),e.AsnPrintableStringConverter=o(n.PrintableString),e.AsnTeletexStringConverter=o(n.TeletexString),e.AsnVideotexStringConverter=o(n.VideotexString),e.AsnIA5StringConverter=o(n.IA5String),e.AsnGraphicStringConverter=o(n.GraphicString),e.AsnVisibleStringConverter=o(n.VisibleString),e.AsnGeneralStringConverter=o(n.GeneralString),e.AsnCharacterStringConverter=o(n.CharacterString),e.AsnUTCTimeConverter={fromASN:e=>e.toDate(),toASN:e=>new n.UTCTime({valueDate:e})},e.AsnGeneralizedTimeConverter={fromASN:e=>e.toDate(),toASN:e=>new n.GeneralizedTime({valueDate:e})},e.AsnNullConverter={fromASN:()=>null,toASN:()=>new n.Null};function s(t){switch(t){case i.AsnPropTypes.Any:return e.AsnAnyConverter;case i.AsnPropTypes.BitString:return e.AsnBitStringConverter;case i.AsnPropTypes.BmpString:return e.AsnBmpStringConverter;case i.AsnPropTypes.Boolean:return e.AsnBooleanConverter;case i.AsnPropTypes.CharacterString:return e.AsnCharacterStringConverter;case i.AsnPropTypes.Enumerated:return e.AsnEnumeratedConverter;case i.AsnPropTypes.GeneralString:return e.AsnGeneralStringConverter;case i.AsnPropTypes.GeneralizedTime:return e.AsnGeneralizedTimeConverter;case i.AsnPropTypes.GraphicString:return e.AsnGraphicStringConverter;case i.AsnPropTypes.IA5String:return e.AsnIA5StringConverter;case i.AsnPropTypes.Integer:return e.AsnIntegerConverter;case i.AsnPropTypes.Null:return e.AsnNullConverter;case i.AsnPropTypes.NumericString:return e.AsnNumericStringConverter;case i.AsnPropTypes.ObjectIdentifier:return e.AsnObjectIdentifierConverter;case i.AsnPropTypes.OctetString:return e.AsnOctetStringConverter;case i.AsnPropTypes.PrintableString:return e.AsnPrintableStringConverter;case i.AsnPropTypes.TeletexString:return e.AsnTeletexStringConverter;case i.AsnPropTypes.UTCTime:return e.AsnUTCTimeConverter;case i.AsnPropTypes.UniversalString:return e.AsnUniversalStringConverter;case i.AsnPropTypes.Utf8String:return e.AsnUtf8StringConverter;case i.AsnPropTypes.VideotexString:return e.AsnVideotexStringConverter;case i.AsnPropTypes.VisibleString:return e.AsnVisibleStringConverter;default:return null}}})),bt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isConvertible=t,e.isTypeOfArray=n,e.isArrayEqual=r;function t(e){return typeof e==`function`&&e.prototype?e.prototype.toASN&&e.prototype.fromASN?!0:t(e.prototype):!!(e&&typeof e==`object`&&`toASN`in e&&`fromASN`in e)}function n(e){if(e){let t=Object.getPrototypeOf(e);return t?.prototype?.constructor===Array||n(t)}return!1}function r(e,t){if(!(e&&t)||e.byteLength!==t.byteLength)return!1;let n=new Uint8Array(e),r=new Uint8Array(t);for(let t=0;t<e.byteLength;t++)if(n[t]!==r[t])return!1;return!0}})),xt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnSchemaStorage=void 0;let n=(K(),t(B)).__importStar(lt()),r=ht(),i=bt();e.AsnSchemaStorage=class{items=new WeakMap;has(e){return this.items.has(e)}get(e,t=!1){let n=this.items.get(e);if(!n)throw Error(`Cannot get schema for '${e.prototype.constructor.name}' target`);if(t&&!n.schema)throw Error(`Schema '${e.prototype.constructor.name}' doesn't contain ASN.1 schema. Call 'AsnSchemaStorage.cache'.`);return n}cache(e){let t=this.get(e);t.schema||=this.create(e,!0)}createDefault(e){let t={type:r.AsnTypeTypes.Sequence,items:{}},n=this.findParentSchema(e);return n&&(Object.assign(t,n),t.items=Object.assign({},t.items,n.items)),t}create(e,t){let a=this.items.get(e)||this.createDefault(e),o=[];for(let e in a.items){let s=a.items[e],c=t?e:``,l;if(typeof s.type==`number`){let e=r.AsnPropTypes[s.type],t=n[e];if(!t)throw Error(`Cannot get ASN1 class by name '${e}'`);l=new t({name:c})}else(0,i.isConvertible)(s.type)?l=new s.type().toSchema(c):s.optional?this.get(s.type).type===r.AsnTypeTypes.Choice?l=new n.Any({name:c}):(l=this.create(s.type,!1),l.name=c):l=new n.Any({name:c});let u=!!s.optional||s.defaultValue!==void 0;if(s.repeated&&(l.name=``,l=new(s.repeated===`set`?n.Set:n.Sequence)({name:``,value:[new n.Repeated({name:c,value:l})]})),s.context!==null&&s.context!==void 0){if(s.implicit){if(typeof s.type==`number`||(0,i.isConvertible)(s.type)){let e=s.repeated?n.Constructed:n.Primitive;o.push(new e({name:c,optional:u,idBlock:{tagClass:3,tagNumber:s.context}}))}else{this.cache(s.type);let e=!!s.repeated,t=e?l:this.get(s.type,!0).schema;t=`valueBlock`in t?t.valueBlock.value:t.value,o.push(new n.Constructed({name:e?``:c,optional:u,idBlock:{tagClass:3,tagNumber:s.context},value:t}))}}else o.push(new n.Constructed({optional:u,idBlock:{tagClass:3,tagNumber:s.context},value:[l]}))}else l.optional=u,o.push(l)}switch(a.type){case r.AsnTypeTypes.Sequence:return new n.Sequence({value:o,name:``});case r.AsnTypeTypes.Set:return new n.Set({value:o,name:``});case r.AsnTypeTypes.Choice:return new n.Choice({value:o,name:``});default:throw Error(`Unsupported ASN1 type in use`)}}set(e,t){return this.items.set(e,t),this}findParentSchema(e){let t=Object.getPrototypeOf(e);return t?this.items.get(t)||this.findParentSchema(t):null}}})),St=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.schemaStorage=void 0,e.schemaStorage=new(xt()).AsnSchemaStorage})),Ct=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnProp=e.AsnSequenceType=e.AsnSetType=e.AsnChoiceType=e.AsnType=void 0;let n=(K(),t(B)).__importStar(yt()),r=ht(),i=St();e.AsnType=e=>t=>{let n;i.schemaStorage.has(t)?n=i.schemaStorage.get(t):(n=i.schemaStorage.createDefault(t),i.schemaStorage.set(t,n)),Object.assign(n,e)},e.AsnChoiceType=()=>(0,e.AsnType)({type:r.AsnTypeTypes.Choice}),e.AsnSetType=t=>(0,e.AsnType)({type:r.AsnTypeTypes.Set,...t}),e.AsnSequenceType=t=>(0,e.AsnType)({type:r.AsnTypeTypes.Sequence,...t}),e.AsnProp=e=>(t,r)=>{let a;i.schemaStorage.has(t.constructor)?a=i.schemaStorage.get(t.constructor):(a=i.schemaStorage.createDefault(t.constructor),i.schemaStorage.set(t.constructor,a));let o=Object.assign({},e);if(typeof o.type==`number`&&!o.converter){let i=n.defaultConverter(e.type);if(!i)throw Error(`Cannot get default converter for property '${r}' of ${t.constructor.name}`);o.converter=i}o.raw=e.raw,a.items[r]=o}})),wt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnSchemaValidationError=void 0,e.AsnSchemaValidationError=class extends Error{schemas=[]}})),Tt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),(K(),t(B)).__exportStar(wt(),e)})),Et=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnParser=void 0;let n=(K(),t(B)),r=n.__importStar(lt()),i=mt(),a=ht(),o=n.__importStar(yt()),s=Tt(),c=bt(),l=St();e.AsnParser=class{static parse(e,t,n){let a=r.fromBER((0,i.toArrayBuffer)(e),n?.berOptions);if(a.result.error)throw Error(a.result.error);return this.fromASN(a.result,t,n)}static fromASN(e,t,n){try{if((0,c.isConvertible)(t))return new t().fromASN(e);let r=l.schemaStorage.get(t);l.schemaStorage.cache(t);let i=r.schema,a=this.handleChoiceTypes(e,r,t,i,n);if(a?.result)return a.result;a?.targetSchema&&(i=a.targetSchema);let o=this.handleSequenceTypes(e,r,t,i),s=new t;return(0,c.isTypeOfArray)(t)?this.handleArrayTypes(e,r,t,n):(this.processSchemaItems(r,o,s,n),s)}catch(e){throw e instanceof s.AsnSchemaValidationError&&e.schemas.push(t.name),e}}static handleChoiceTypes(e,t,n,i,o){if(e.constructor===r.Constructed&&t.type===a.AsnTypeTypes.Choice&&e.idBlock.tagClass===3)for(let i in t.items){let s=t.items[i];if(s.context===e.idBlock.tagNumber&&s.implicit&&typeof s.type==`function`&&l.schemaStorage.has(s.type)){let t=l.schemaStorage.get(s.type);if(t&&t.type===a.AsnTypeTypes.Sequence){let t=new r.Sequence;if(`value`in e.valueBlock&&Array.isArray(e.valueBlock.value)&&`value`in t.valueBlock){t.valueBlock.value=e.valueBlock.value;let r=this.fromASN(t,s.type,o),a=new n;return a[i]=r,{result:a}}}}}else if(e.constructor===r.Constructed&&t.type!==a.AsnTypeTypes.Choice){let n=new r.Constructed({idBlock:{tagClass:3,tagNumber:e.idBlock.tagNumber},value:t.schema.valueBlock.value});for(let n in t.items)delete e[n];return{targetSchema:n}}return null}static handleSequenceTypes(e,t,n,i){if(t.type===a.AsnTypeTypes.Sequence){let t=r.compareSchema({},e,i);if(!t.verified)throw new s.AsnSchemaValidationError(`Data does not match to ${n.name} ASN1 schema.${t.result.error?` ${t.result.error}`:``}`);return t}{let t=r.compareSchema({},e,i);if(!t.verified)throw new s.AsnSchemaValidationError(`Data does not match to ${n.name} ASN1 schema.${t.result.error?` ${t.result.error}`:``}`);return t}}static processRepeatedField(e,t,n){let r=e.slice(t);if(r.length===1&&r[0].constructor.name===`Sequence`){let e=r[0];e.valueBlock&&e.valueBlock.value&&Array.isArray(e.valueBlock.value)&&(r=e.valueBlock.value)}if(typeof n.type==`number`){let e=o.defaultConverter(n.type);if(!e)throw Error(`No converter for ASN.1 type ${n.type}`);return r.filter(e=>e&&e.valueBlock).map(t=>{try{return e.fromASN(t)}catch{return}}).filter(e=>e!==void 0)}return r.filter(e=>e&&e.valueBlock).map(e=>{try{return this.fromASN(e,n.type)}catch{return}}).filter(e=>e!==void 0)}static processPrimitiveField(e,t){let n=o.defaultConverter(t.type);if(!n)throw Error(`No converter for ASN.1 type ${t.type}`);return n.fromASN(e)}static isOptionalChoiceField(e){return e.optional&&typeof e.type==`function`&&l.schemaStorage.has(e.type)&&l.schemaStorage.get(e.type).type===a.AsnTypeTypes.Choice}static processOptionalChoiceField(e,t){try{return{processed:!0,value:this.fromASN(e,t.type)}}catch(e){if(e instanceof s.AsnSchemaValidationError&&/Wrong values for Choice type/.test(e.message))return{processed:!1};throw e}}static handleArrayTypes(e,t,n,r){if(!(`value`in e.valueBlock&&Array.isArray(e.valueBlock.value)))throw Error(`Cannot get items from the ASN.1 parsed value. ASN.1 object is not constructed.`);let i=t.itemType;if(typeof i==`number`){let t=o.defaultConverter(i);if(!t)throw Error(`Cannot get default converter for array item of ${n.name} ASN1 schema`);return n.from(e.valueBlock.value,e=>t.fromASN(e))}return n.from(e.valueBlock.value,e=>this.fromASN(e,i,r))}static processSchemaItems(e,t,n,r){for(let i in e.items){let a=t.result[i];if(!a)continue;let o=e.items[i],s=o.type,l;l=typeof s==`number`||(0,c.isConvertible)(s)?this.processPrimitiveSchemaItem(a,o,s,r):this.processComplexSchemaItem(a,o,s,r),l&&typeof l==`object`&&`value`in l&&`raw`in l?(n[i]=l.value,n[`${i}Raw`]=l.raw):n[i]=l}}static processPrimitiveSchemaItem(e,t,n,r){let i=t.converter??((0,c.isConvertible)(n)?new n:null);if(!i)throw Error(`Converter is empty`);return t.repeated?this.processRepeatedPrimitiveItem(e,t,i,r):this.processSinglePrimitiveItem(e,t,n,i,r)}static processRepeatedPrimitiveItem(e,t,n,i){if(t.implicit){let a=new(t.repeated===`sequence`?r.Sequence:r.Set);a.valueBlock=e.valueBlock;let o=r.fromBER(a.toBER(!1),i?.berOptions);if(o.offset===-1)throw Error(`Cannot parse the child item. ${o.result.error}`);if(!(`value`in o.result.valueBlock&&Array.isArray(o.result.valueBlock.value)))throw Error(`Cannot get items from the ASN.1 parsed value. ASN.1 object is not constructed.`);let s=o.result.valueBlock.value;return Array.from(s,e=>n.fromASN(e))}return Array.from(e,e=>n.fromASN(e))}static processSinglePrimitiveItem(e,t,n,i,o){let s=e;if(t.implicit){let e;if((0,c.isConvertible)(n))e=new n().toSchema(``);else{let t=a.AsnPropTypes[n],i=r[t];if(!i)throw Error(`Cannot get '${t}' class from asn1js module`);e=new i}e.valueBlock=s.valueBlock,s=r.fromBER(e.toBER(!1),o?.berOptions).result}return i.fromASN(s)}static processComplexSchemaItem(e,t,n,r){if(t.repeated){if(!Array.isArray(e))throw Error(`Cannot get list of items from the ASN.1 parsed value. ASN.1 value should be iterable.`);return Array.from(e,e=>this.fromASN(e,n,r))}{let i=this.handleImplicitTagging(e,t,n);if(this.isOptionalChoiceField(t))try{return this.fromASN(i,n,r)}catch(e){if(e instanceof s.AsnSchemaValidationError&&/Wrong values for Choice type/.test(e.message))return;throw e}{let a=this.fromASN(i,n,r);return t.raw?{value:a,raw:e.valueBeforeDecodeView}:a}}}static handleImplicitTagging(e,t,n){if(t.implicit&&typeof t.context==`number`){let t=l.schemaStorage.get(n);if(t.type===a.AsnTypeTypes.Sequence){let t=new r.Sequence;if(`value`in e.valueBlock&&Array.isArray(e.valueBlock.value)&&`value`in t.valueBlock)return t.valueBlock.value=e.valueBlock.value,t}else if(t.type===a.AsnTypeTypes.Set){let t=new r.Set;if(`value`in e.valueBlock&&Array.isArray(e.valueBlock.value)&&`value`in t.valueBlock)return t.valueBlock.value=e.valueBlock.value,t}}return e}}})),Dt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnSerializer=void 0;let n=(K(),t(B)),r=n.__importStar(lt()),i=mt(),a=n.__importStar(yt()),o=ht(),s=bt(),c=St();e.AsnSerializer=class e{static serialize(e){return e instanceof r.BaseBlock?e.toBER(!1):this.toASN(e).toBER(!1)}static toASN(t){if(t&&typeof t==`object`&&(0,s.isConvertible)(t))return t.toASN();if(!(t&&typeof t==`object`))throw TypeError(`Parameter 1 should be type of Object.`);let n=t.constructor,l=c.schemaStorage.get(n);c.schemaStorage.cache(n);let u=[];if(l.itemType){if(!Array.isArray(t))throw TypeError(`Parameter 1 should be type of Array.`);if(typeof l.itemType==`number`){let e=a.defaultConverter(l.itemType);if(!e)throw Error(`Cannot get default converter for array item of ${n.name} ASN1 schema`);u=t.map(t=>e.toASN(t))}else u=t.map(e=>this.toAsnItem({type:l.itemType},`[]`,n,e))}else for(let a in l.items){let o=l.items[a],c=t[a];if(c===void 0||o.defaultValue===c||typeof o.defaultValue==`object`&&typeof c==`object`&&(0,s.isArrayEqual)(this.serialize(o.defaultValue),this.serialize(c)))continue;let d=e.toAsnItem(o,a,n,c);if(typeof o.context==`number`){if(o.implicit){if(!o.repeated&&(typeof o.type==`number`||(0,s.isConvertible)(o.type))){let e={};e.valueHex=d instanceof r.Null?(0,i.toArrayBuffer)(d.valueBeforeDecodeView):d.valueBlock.toBER(),u.push(new r.Primitive({optional:o.optional,idBlock:{tagClass:3,tagNumber:o.context},...e}))}else u.push(new r.Constructed({optional:o.optional,idBlock:{tagClass:3,tagNumber:o.context},value:d.valueBlock.value}))}else u.push(new r.Constructed({optional:o.optional,idBlock:{tagClass:3,tagNumber:o.context},value:[d]}))}else o.repeated?u=u.concat(d):u.push(d)}let d;switch(l.type){case o.AsnTypeTypes.Sequence:d=new r.Sequence({value:u});break;case o.AsnTypeTypes.Set:d=new r.Set({value:u});break;case o.AsnTypeTypes.Choice:if(!u[0])throw Error(`Schema '${n.name}' has wrong data. Choice cannot be empty.`);d=u[0]}return d}static toAsnItem(e,t,n,i){let a;if(typeof e.type==`number`){let s=e.converter;if(!s)throw Error(`Property '${t}' doesn't have converter for type ${o.AsnPropTypes[e.type]} in schema '${n.name}'`);if(e.repeated){if(!Array.isArray(i))throw TypeError(`Parameter 'objProp' should be type of Array.`);let t=Array.from(i,e=>s.toASN(e));a=new(e.repeated===`sequence`?r.Sequence:r.Set)({value:t})}else a=s.toASN(i)}else if(e.repeated){if(!Array.isArray(i))throw TypeError(`Parameter 'objProp' should be type of Array.`);let t=Array.from(i,e=>this.toASN(e));a=new(e.repeated===`sequence`?r.Sequence:r.Set)({value:t})}else a=this.toASN(i);return a}}})),Ot=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnArray=void 0,e.AsnArray=class extends Array{constructor(e=[]){if(typeof e==`number`)super(e);else{super();for(let t of e)this.push(t)}}}})),kt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnConvert=void 0;let n=(K(),t(B)).__importStar(lt()),r=mt(),i=Et(),a=Dt();e.AsnConvert=class e{static serialize(e){return a.AsnSerializer.serialize(e)}static parse(e,t,n){return i.AsnParser.parse(e,t,n)}static toString(t,i){let a=(0,r.isBufferSource)(t)?(0,r.toArrayBuffer)(t):e.serialize(t),o=n.fromBER(a,i?.berOptions);if(o.offset===-1)throw Error(`Cannot decode ASN.1 data. ${o.result.error}`);return o.result.toString()}}})),q=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AsnSerializer=e.AsnParser=e.AsnPropTypes=e.AsnTypeTypes=e.AsnSetType=e.AsnSequenceType=e.AsnChoiceType=e.AsnType=e.AsnProp=void 0;let n=(K(),t(B));n.__exportStar(yt(),e),n.__exportStar(vt(),e);var r=Ct();Object.defineProperty(e,"AsnProp",{enumerable:!0,get:function(){return r.AsnProp}}),Object.defineProperty(e,"AsnType",{enumerable:!0,get:function(){return r.AsnType}}),Object.defineProperty(e,"AsnChoiceType",{enumerable:!0,get:function(){return r.AsnChoiceType}}),Object.defineProperty(e,"AsnSequenceType",{enumerable:!0,get:function(){return r.AsnSequenceType}}),Object.defineProperty(e,"AsnSetType",{enumerable:!0,get:function(){return r.AsnSetType}});var i=ht();Object.defineProperty(e,"AsnTypeTypes",{enumerable:!0,get:function(){return i.AsnTypeTypes}}),Object.defineProperty(e,"AsnPropTypes",{enumerable:!0,get:function(){return i.AsnPropTypes}});var a=Et();Object.defineProperty(e,"AsnParser",{enumerable:!0,get:function(){return a.AsnParser}});var o=Dt();Object.defineProperty(e,"AsnSerializer",{enumerable:!0,get:function(){return o.AsnSerializer}}),n.__exportStar(Tt(),e),n.__exportStar(Ot(),e),n.__exportStar(kt(),e)})),At=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.binary=void 0,e.encode=n,e.decode=r,e.is=i;let t=mt();function n(e){let n=(0,t.toUint8Array)(e),r=``;for(let e of n)r+=String.fromCharCode(e);return r}function r(e){let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n)&255;return t}function i(e){return typeof e==`string`}e.binary={encode:n,decode:r,is:i}})),jt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.hex=e.formats=void 0,e.normalize=m,e.is=h,e.encode=g,e.decode=_,e.parse=v,e.format=y;let t=mt(),n=/^[0-9a-f]$/i,r=[` `,` `,`
84
84
  `,`\r`,`:`,`-`,`.`];function i(e){return e.separators===`none`?[]:!e.separators||e.separators===`common`?r:e.separators}function a(e){if(!e)throw TypeError(`Hex separators must be non-empty strings`)}function o(e,t,n){for(let r of n)if(e.startsWith(r,t))return r}function s(e){let t=/[A-F]/.test(e),n=/[a-f]/.test(e);return t&&!n?`upper`:`lower`}function c(e){let t=/\r\n|\n/.exec(e);if(t)return t[0]===`\r
85
85
  `?`\r
86
86
  `:`
87
87
  `}function l(e){return e.replace(/[^0-9a-f]/gi,``)}function u(e){let t=e.match(/[0-9A-Fa-f]+|[^0-9A-Fa-f]+/g)??[];if(t.length<3)return;let n=t.filter((e,t)=>t%2==0),r=t.filter((e,t)=>t%2==1),i=r[0];if(!i||r.some(e=>e!==i)||n.some(e=>e.length===0||e.length%2!=0))return;let a=n[0]?.length??0;if(a&&!n.slice(0,-1).some(e=>e.length!==a)&&!((n[n.length-1]?.length??0)>a))return{size:a/2,separator:i}}function d(e){let t=e.trim(),n=/^0x/i.test(t)?`0x`:``,r=n?t.slice(2):t,i=c(r),a=r.split(/\r\n|\n/).filter(e=>e.length>0),o=u(a[0]?.trim()??``),d={case:s(t),prefix:n};if(o&&(d.group=o),i&&a.length>1){let e=l(a[0]??``).length/2;e>0&&a.slice(0,-1).every(t=>l(t).length/2===e)&&(d.line={bytesPerLine:e,separator:i})}return d}function f(e,t){let r=t.allowPrefix??!0,s=[...i(t)].sort((e,t)=>t.length-e.length);for(let e of s)a(e);let c=e.trim();if(/^0x/i.test(c)){if(!r)throw TypeError(`Hexadecimal text must not include a 0x prefix`);c=c.slice(2)}let l=``,u=!1;for(let e=0;e<c.length;){let r=c[e]??``;if(n.test(r)){l+=r,u=!1,e+=1;continue}let i=o(c,e,s);if(!i)throw TypeError(`Input is not valid hexadecimal text`);if(t.strict&&(u||l.length===0))throw TypeError(`Hexadecimal text contains misplaced separators`);u=!0,e+=i.length}if(t.strict&&u&&l.length>0)throw TypeError(`Hexadecimal text must not end with a separator`);if(l.length%2!=0){if(!t.allowOddLength)throw TypeError(`Hexadecimal text must contain an even number of characters`);l=`0${l}`}return l.toLowerCase()}function p(e,t){if(!t)return e.join(``);if(!Number.isInteger(t.size)||t.size<1)throw RangeError(`Hex group size must be a positive integer`);let n=[];for(let r=0;r<e.length;r+=t.size)n.push(e.slice(r,r+t.size).join(``));return n.join(t.separator)}function m(e,t={}){return f(e,t)}function h(e,t={}){if(typeof e!=`string`)return!1;try{return m(e,t),!0}catch{return!1}}function g(e,n={}){let r=(0,t.toUint8Array)(e),i=n.case??`lower`,a=Array.from(r,e=>{let t=e.toString(16).padStart(2,`0`);return i===`upper`?t.toUpperCase():t}),o=``;if(n.line){let e=n.line.bytesPerLine;if(!Number.isInteger(e)||e<1)throw RangeError(`Hex bytesPerLine must be a positive integer`);let t=n.line.separator??`
88
- `,r=[];for(let t=0;t<a.length;t+=e)r.push(p(a.slice(t,t+e),n.group));o=r.join(t)}else o=p(a,n.group);return`${n.prefix??``}${o}`}function _(e,t={}){let n=m(e,t),r=new Uint8Array(n.length/2);for(let e=0;e<n.length;e+=2)r[e/2]=Number.parseInt(n.slice(e,e+2),16);return r}function v(e,t={}){let n=m(e,t);return{bytes:_(n),format:d(e),normalized:n}}function y(e,t){return g(e,t)}e.formats={compact:Object.freeze({}),upper:Object.freeze({case:`upper`}),colon:Object.freeze({group:{size:1,separator:`:`}}),colonUpper:Object.freeze({case:`upper`,group:{size:1,separator:`:`}}),groupsOf4:Object.freeze({group:{size:4,separator:` `}}),prefixed:Object.freeze({prefix:`0x`})},e.hex={encode:g,decode:_,format:y,formats:e.formats,is:h,normalize:m,parse:v}})),yt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.utf8=void 0,e.encode=n,e.decode=r;let t=K();function n(e){return new TextEncoder().encode(e)}function r(e){return new TextDecoder(`utf-8`,{fatal:!1}).decode((0,t.toUint8Array)(e))}e.utf8={encode:n,decode:r}})),bt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.utf16=void 0,e.encode=n,e.decode=r;let t=K();function n(e,t={}){let n=new ArrayBuffer(e.length*2),r=new DataView(n);for(let n=0;n<e.length;n++)r.setUint16(n*2,e.charCodeAt(n),t.littleEndian??!1);return new Uint8Array(n)}function r(e,n={}){let r=(0,t.toArrayBuffer)(e),i=new DataView(r),a=``;for(let e=0;e<r.byteLength;e+=2)a+=String.fromCharCode(i.getUint16(e,n.littleEndian??!1));return a}e.utf16={encode:n,decode:r}})),xt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.base64=void 0,e.normalize=a,e.pad=o,e.is=s,e.encode=c,e.decode=l;let t=K(),n=_t(),r=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;function i(){return globalThis.Buffer}function a(e){return e.replace(/[\n\r\t ]/g,``)}function o(e){let t=e.length%4;return t?e+`=`.repeat(4-t):e}function s(e){if(typeof e!=`string`)return!1;let t=a(e);return t===``||r.test(t)}function c(e,r){let a=(0,t.toUint8Array)(e),o=i();return o?o.from(a).toString(`base64`):btoa((0,n.encode)(a))}function l(e,t){let r=a(e);if(!s(r))throw TypeError(`Input is not valid Base64 text`);let o=i();return o?new Uint8Array(o.from(r,`base64`)):(0,n.decode)(atob(r))}e.base64={encode:c,decode:l,is:s,normalize:a,pad:o}})),St=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.base64url=void 0,e.normalize=r,e.is=i,e.encode=a,e.decode=o;let t=xt(),n=/^[A-Za-z0-9_-]*$/;function r(e){return e.replace(/[\n\r\t ]/g,``)}function i(e){return typeof e==`string`&&n.test(r(e))}function a(e,n){return t.base64.encode(e).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=+$/g,``)}function o(e,n){let a=r(e);if(!i(a))throw TypeError(`Input is not valid Base64Url text`);return t.base64.decode(t.base64.pad(a.replace(/-/g,`+`).replace(/_/g,`/`)))}e.base64url={encode:a,decode:o,is:i,normalize:r}})),Ct=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.base64url=e.base64=e.utf16=e.utf8=e.hex=e.binary=void 0;let n=(G(),t(L));e.binary=n.__importStar(_t()),e.hex=n.__importStar(vt()),e.utf8=n.__importStar(yt()),e.utf16=n.__importStar(bt()),e.base64=n.__importStar(xt()),e.base64url=n.__importStar(St())})),wt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IpConverter=void 0;let t=Ct();e.IpConverter=class{static isIPv4(e){return/^(\d{1,3}\.){3}\d{1,3}$/.test(e)}static parseIPv4(e){let t=e.split(`.`);if(t.length!==4)throw Error(`Invalid IPv4 address`);return t.map(e=>{let t=parseInt(e,10);if(isNaN(t)||t<0||t>255)throw Error(`Invalid IPv4 address part`);return t})}static parseIPv6(e){let t=this.expandIPv6(e).split(`:`);if(t.length!==8)throw Error(`Invalid IPv6 address`);return t.reduce((e,t)=>{let n=parseInt(t,16);if(isNaN(n)||n<0||n>65535)throw Error(`Invalid IPv6 address part`);return e.push(n>>8&255),e.push(n&255),e},[])}static expandIPv6(e){if(!e.includes(`::`))return e;let t=e.split(`::`);if(t.length>2)throw Error(`Invalid IPv6 address`);let n=t[0]?t[0].split(`:`):[],r=t[1]?t[1].split(`:`):[],i=8-(n.length+r.length);if(i<0)throw Error(`Invalid IPv6 address`);return[...n,...Array(i).fill(`0`),...r].join(`:`)}static formatIPv6(e){let t=[];for(let n=0;n<16;n+=2)t.push((e[n]<<8|e[n+1]).toString(16));return this.compressIPv6(t.join(`:`))}static compressIPv6(e){let t=e.split(`:`),n=-1,r=0,i=-1,a=0;for(let e=0;e<t.length;e++)t[e]===`0`?(i===-1&&(i=e),a++):(a>r&&(n=i,r=a),i=-1,a=0);return a>r&&(n=i,r=a),r>1?`${t.slice(0,n).join(`:`)}::${t.slice(n+r).join(`:`)}`:e}static parseCIDR(e){let[t,n]=e.split(`/`),r=parseInt(n,10);if(this.isIPv4(t)){if(r<0||r>32)throw Error(`Invalid IPv4 prefix length`);return[this.parseIPv4(t),r]}if(r<0||r>128)throw Error(`Invalid IPv6 prefix length`);return[this.parseIPv6(t),r]}static decodeIP(e){if(e.length===64&&parseInt(e,16)===0)return`::/0`;if(e.length!==16)return e;let t=parseInt(e.slice(8),16).toString(2).split(``).reduce((e,t)=>e+ +t,0),n=e.slice(0,8).replace(/(.{2})/g,e=>`${parseInt(e,16)}.`);return n=n.slice(0,-1),`${n}/${t}`}static toString(e){let n=new Uint8Array(e);if(n.length===4)return Array.from(n).join(`.`);if(n.length===16)return this.formatIPv6(n);if(n.length===8||n.length===32){let e=n.length/2,t=n.slice(0,e),r=n.slice(e);if(n.every(e=>e===0))return n.length===8?`0.0.0.0/0`:`::/0`;let i=r.reduce((e,t)=>e+(t.toString(2).match(/1/g)||[]).length,0);return n.length===8?`${Array.from(t).join(`.`)}/${i}`:`${this.formatIPv6(t)}/${i}`}return this.decodeIP(t.hex.encode(e))}static fromString(e){if(e.includes(`/`)){let[t,n]=this.parseCIDR(e),r=new Uint8Array(t.length),i=n;for(let e=0;e<r.length;e++)i>=8?(r[e]=255,i-=8):i>0&&(r[e]=255<<8-i,i=0);let a=new Uint8Array(t.length*2);return a.set(t,0),a.set(r,t.length),a.buffer}let t=this.isIPv4(e)?this.parseIPv4(e):this.parseIPv6(e);return new Uint8Array(t).buffer}}})),Tt=s((e=>{var n,r,i;Object.defineProperty(e,"__esModule",{value:!0}),e.Name=e.RDNSequence=e.RelativeDistinguishedName=e.AttributeTypeAndValue=e.AttributeValue=e.DirectoryString=void 0;let a=(G(),t(L)),o=q(),s=Ct(),c=class{teletexString;printableString;universalString;utf8String;bmpString;constructor(e={}){Object.assign(this,e)}toString(){return this.bmpString||this.printableString||this.teletexString||this.universalString||this.utf8String||``}};e.DirectoryString=c,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.TeletexString})],c.prototype,`teletexString`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.PrintableString})],c.prototype,`printableString`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.UniversalString})],c.prototype,`universalString`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.Utf8String})],c.prototype,`utf8String`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.BmpString})],c.prototype,`bmpString`,void 0),e.DirectoryString=c=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],c);let l=class extends c{ia5String;anyValue;constructor(e={}){super(e),Object.assign(this,e)}toString(){return this.ia5String||(this.anyValue?s.hex.encode(this.anyValue):super.toString())}};e.AttributeValue=l,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.IA5String})],l.prototype,`ia5String`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.Any})],l.prototype,`anyValue`,void 0),e.AttributeValue=l=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],l);var u=class{type=``;value=new l;constructor(e={}){Object.assign(this,e)}};e.AttributeTypeAndValue=u,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.ObjectIdentifier})],u.prototype,`type`,void 0),a.__decorate([(0,o.AsnProp)({type:l})],u.prototype,`value`,void 0);let d=n=class extends o.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.RelativeDistinguishedName=d,e.RelativeDistinguishedName=d=n=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Set,itemType:u})],d);let f=r=class extends o.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,r.prototype)}};e.RDNSequence=f,e.RDNSequence=f=r=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence,itemType:d})],f);let p=i=class extends f{constructor(e){super(e),Object.setPrototypeOf(this,i.prototype)}};e.Name=p,e.Name=p=i=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],p)})),Et=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.GeneralName=e.EDIPartyName=e.OtherName=e.AsnIpConverter=void 0;let n=(G(),t(L)),r=q(),i=wt(),a=Tt();e.AsnIpConverter={fromASN:e=>i.IpConverter.toString(r.AsnOctetStringConverter.fromASN(e)),toASN:e=>r.AsnOctetStringConverter.toASN(i.IpConverter.fromString(e))};var o=class{typeId=``;value=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherName=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],o.prototype,`typeId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],o.prototype,`value`,void 0);var s=class{nameAssigner;partyName=new a.DirectoryString;constructor(e={}){Object.assign(this,e)}};e.EDIPartyName=s,n.__decorate([(0,r.AsnProp)({type:a.DirectoryString,optional:!0,context:0,implicit:!0})],s.prototype,`nameAssigner`,void 0),n.__decorate([(0,r.AsnProp)({type:a.DirectoryString,context:1,implicit:!0})],s.prototype,`partyName`,void 0);let c=class{otherName;rfc822Name;dNSName;x400Address;directoryName;ediPartyName;uniformResourceIdentifier;iPAddress;registeredID;constructor(e={}){Object.assign(this,e)}};e.GeneralName=c,n.__decorate([(0,r.AsnProp)({type:o,context:0,implicit:!0})],c.prototype,`otherName`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.IA5String,context:1,implicit:!0})],c.prototype,`rfc822Name`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.IA5String,context:2,implicit:!0})],c.prototype,`dNSName`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:3,implicit:!0})],c.prototype,`x400Address`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Name,context:4,implicit:!1})],c.prototype,`directoryName`,void 0),n.__decorate([(0,r.AsnProp)({type:s,context:5})],c.prototype,`ediPartyName`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.IA5String,context:6,implicit:!0})],c.prototype,`uniformResourceIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.OctetString,context:7,implicit:!0,converter:e.AsnIpConverter})],c.prototype,`iPAddress`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier,context:8,implicit:!0})],c.prototype,`registeredID`,void 0),e.GeneralName=c=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],c)})),J=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_ce=e.id_ad_caRepository=e.id_ad_timeStamping=e.id_ad_caIssuers=e.id_ad_ocsp=e.id_qt_unotice=e.id_qt_csp=e.id_ad=e.id_kp=e.id_qt=e.id_pe=e.id_pkix=void 0,e.id_pkix=`1.3.6.1.5.5.7`,e.id_pe=`${e.id_pkix}.1`,e.id_qt=`${e.id_pkix}.2`,e.id_kp=`${e.id_pkix}.3`,e.id_ad=`${e.id_pkix}.48`,e.id_qt_csp=`${e.id_qt}.1`,e.id_qt_unotice=`${e.id_qt}.2`,e.id_ad_ocsp=`${e.id_ad}.1`,e.id_ad_caIssuers=`${e.id_ad}.2`,e.id_ad_timeStamping=`${e.id_ad}.3`,e.id_ad_caRepository=`${e.id_ad}.5`,e.id_ce=`2.5.29`})),Dt=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.AuthorityInfoAccessSyntax=e.AccessDescription=e.id_pe_authorityInfoAccess=void 0;let r=(G(),t(L)),i=q(),a=Et();e.id_pe_authorityInfoAccess=`${J().id_pe}.1`;var o=class{accessMethod=``;accessLocation=new a.GeneralName;constructor(e={}){Object.assign(this,e)}};e.AccessDescription=o,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],o.prototype,`accessMethod`,void 0),r.__decorate([(0,i.AsnProp)({type:a.GeneralName})],o.prototype,`accessLocation`,void 0);let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.AuthorityInfoAccessSyntax=s,e.AuthorityInfoAccessSyntax=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o})],s)})),Ot=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AuthorityKeyIdentifier=e.KeyIdentifier=e.id_ce_authorityKeyIdentifier=void 0;let n=(G(),t(L)),r=q(),i=Et();e.id_ce_authorityKeyIdentifier=`${J().id_ce}.35`;var a=class extends r.OctetString{};e.KeyIdentifier=a;var o=class{keyIdentifier;authorityCertIssuer;authorityCertSerialNumber;constructor(e={}){e&&Object.assign(this,e)}};e.AuthorityKeyIdentifier=o,n.__decorate([(0,r.AsnProp)({type:a,context:0,optional:!0,implicit:!0})],o.prototype,`keyIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:i.GeneralName,context:1,optional:!0,implicit:!0,repeated:`sequence`})],o.prototype,`authorityCertIssuer`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:2,optional:!0,implicit:!0,converter:r.AsnIntegerArrayBufferConverter})],o.prototype,`authorityCertSerialNumber`,void 0)})),kt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.BasicConstraints=e.id_ce_basicConstraints=void 0;let n=(G(),t(L)),r=q();e.id_ce_basicConstraints=`${J().id_ce}.19`;var i=class{cA=!1;pathLenConstraint;constructor(e={}){Object.assign(this,e)}};e.BasicConstraints=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,defaultValue:!1})],i.prototype,`cA`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,optional:!0})],i.prototype,`pathLenConstraint`,void 0)})),At=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.GeneralNames=void 0;let r=(G(),t(L)),i=q(),a=Et(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.GeneralNames=o,e.GeneralNames=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.GeneralName})],o)})),jt=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.CertificateIssuer=e.id_ce_certificateIssuer=void 0;let r=(G(),t(L)),i=q(),a=At();e.id_ce_certificateIssuer=`${J().id_ce}.29`;let o=n=class extends a.GeneralNames{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.CertificateIssuer=o,e.CertificateIssuer=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],o)})),Mt=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.CertificatePolicies=e.PolicyInformation=e.PolicyQualifierInfo=e.Qualifier=e.UserNotice=e.NoticeReference=e.DisplayText=e.id_ce_certificatePolicies_anyPolicy=e.id_ce_certificatePolicies=void 0;let r=(G(),t(L)),i=q();e.id_ce_certificatePolicies=`${J().id_ce}.32`,e.id_ce_certificatePolicies_anyPolicy=`${e.id_ce_certificatePolicies}.0`;let a=class{ia5String;visibleString;bmpString;utf8String;constructor(e={}){Object.assign(this,e)}toString(){return this.ia5String||this.visibleString||this.bmpString||this.utf8String||``}};e.DisplayText=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.IA5String})],a.prototype,`ia5String`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.VisibleString})],a.prototype,`visibleString`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.BmpString})],a.prototype,`bmpString`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Utf8String})],a.prototype,`utf8String`,void 0),e.DisplayText=a=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],a);var o=class{organization=new a;noticeNumbers=[];constructor(e={}){Object.assign(this,e)}};e.NoticeReference=o,r.__decorate([(0,i.AsnProp)({type:a})],o.prototype,`organization`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,repeated:`sequence`})],o.prototype,`noticeNumbers`,void 0);var s=class{noticeRef;explicitText;constructor(e={}){Object.assign(this,e)}};e.UserNotice=s,r.__decorate([(0,i.AsnProp)({type:o,optional:!0})],s.prototype,`noticeRef`,void 0),r.__decorate([(0,i.AsnProp)({type:a,optional:!0})],s.prototype,`explicitText`,void 0);let c=class{cPSuri;userNotice;constructor(e={}){Object.assign(this,e)}};e.Qualifier=c,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.IA5String})],c.prototype,`cPSuri`,void 0),r.__decorate([(0,i.AsnProp)({type:s})],c.prototype,`userNotice`,void 0),e.Qualifier=c=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],c);var l=class{policyQualifierId=``;qualifier=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.PolicyQualifierInfo=l,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],l.prototype,`policyQualifierId`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any})],l.prototype,`qualifier`,void 0);var u=class{policyIdentifier=``;policyQualifiers;constructor(e={}){Object.assign(this,e)}};e.PolicyInformation=u,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],u.prototype,`policyIdentifier`,void 0),r.__decorate([(0,i.AsnProp)({type:l,repeated:`sequence`,optional:!0})],u.prototype,`policyQualifiers`,void 0);let d=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.CertificatePolicies=d,e.CertificatePolicies=d=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:u})],d)})),Nt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CRLNumber=e.id_ce_cRLNumber=void 0;let n=(G(),t(L)),r=q();e.id_ce_cRLNumber=`${J().id_ce}.20`;let i=class{value;constructor(e=0){this.value=e}};e.CRLNumber=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],i.prototype,`value`,void 0),e.CRLNumber=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i)})),Pt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.BaseCRLNumber=e.id_ce_deltaCRLIndicator=void 0;let n=(G(),t(L)),r=q(),i=J(),a=Nt();e.id_ce_deltaCRLIndicator=`${i.id_ce}.27`;let o=class extends a.CRLNumber{};e.BaseCRLNumber=o,e.BaseCRLNumber=o=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],o)})),Ft=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.CRLDistributionPoints=e.DistributionPoint=e.DistributionPointName=e.Reason=e.ReasonFlags=e.id_ce_cRLDistributionPoints=void 0;let r=(G(),t(L)),i=q(),a=Tt(),o=Et();e.id_ce_cRLDistributionPoints=`${J().id_ce}.31`;var s;(function(e){e[e.unused=1]=`unused`,e[e.keyCompromise=2]=`keyCompromise`,e[e.cACompromise=4]=`cACompromise`,e[e.affiliationChanged=8]=`affiliationChanged`,e[e.superseded=16]=`superseded`,e[e.cessationOfOperation=32]=`cessationOfOperation`,e[e.certificateHold=64]=`certificateHold`,e[e.privilegeWithdrawn=128]=`privilegeWithdrawn`,e[e.aACompromise=256]=`aACompromise`})(s||(e.ReasonFlags=s={}));var c=class extends i.BitString{toJSON(){let e=[],t=this.toNumber();return t&s.aACompromise&&e.push(`aACompromise`),t&s.affiliationChanged&&e.push(`affiliationChanged`),t&s.cACompromise&&e.push(`cACompromise`),t&s.certificateHold&&e.push(`certificateHold`),t&s.cessationOfOperation&&e.push(`cessationOfOperation`),t&s.keyCompromise&&e.push(`keyCompromise`),t&s.privilegeWithdrawn&&e.push(`privilegeWithdrawn`),t&s.superseded&&e.push(`superseded`),t&s.unused&&e.push(`unused`),e}toString(){return`[${this.toJSON().join(`, `)}]`}};e.Reason=c;let l=class{fullName;nameRelativeToCRLIssuer;constructor(e={}){Object.assign(this,e)}};e.DistributionPointName=l,r.__decorate([(0,i.AsnProp)({type:o.GeneralName,context:0,repeated:`sequence`,implicit:!0})],l.prototype,`fullName`,void 0),r.__decorate([(0,i.AsnProp)({type:a.RelativeDistinguishedName,context:1,implicit:!0})],l.prototype,`nameRelativeToCRLIssuer`,void 0),e.DistributionPointName=l=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],l);var u=class{distributionPoint;reasons;cRLIssuer;constructor(e={}){Object.assign(this,e)}};e.DistributionPoint=u,r.__decorate([(0,i.AsnProp)({type:l,context:0,optional:!0})],u.prototype,`distributionPoint`,void 0),r.__decorate([(0,i.AsnProp)({type:c,context:1,optional:!0,implicit:!0})],u.prototype,`reasons`,void 0),r.__decorate([(0,i.AsnProp)({type:o.GeneralName,context:2,optional:!0,repeated:`sequence`,implicit:!0})],u.prototype,`cRLIssuer`,void 0);let d=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.CRLDistributionPoints=d,e.CRLDistributionPoints=d=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:u})],d)})),It=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.FreshestCRL=e.id_ce_freshestCRL=void 0;let r=(G(),t(L)),i=q(),a=J(),o=Ft();e.id_ce_freshestCRL=`${a.id_ce}.46`;let s=n=class extends o.CRLDistributionPoints{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.FreshestCRL=s,e.FreshestCRL=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o.DistributionPoint})],s)})),Lt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IssuingDistributionPoint=e.id_ce_issuingDistributionPoint=void 0;let n=(G(),t(L)),r=q(),i=J(),a=Ft();e.id_ce_issuingDistributionPoint=`${i.id_ce}.28`;var o=class e{static ONLY=!1;distributionPoint;onlyContainsUserCerts=e.ONLY;onlyContainsCACerts=e.ONLY;onlySomeReasons;indirectCRL=e.ONLY;onlyContainsAttributeCerts=e.ONLY;constructor(e={}){Object.assign(this,e)}};e.IssuingDistributionPoint=o,n.__decorate([(0,r.AsnProp)({type:a.DistributionPointName,context:0,optional:!0})],o.prototype,`distributionPoint`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,context:1,defaultValue:o.ONLY,implicit:!0})],o.prototype,`onlyContainsUserCerts`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,context:2,defaultValue:o.ONLY,implicit:!0})],o.prototype,`onlyContainsCACerts`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Reason,context:3,optional:!0,implicit:!0})],o.prototype,`onlySomeReasons`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,context:4,defaultValue:o.ONLY,implicit:!0})],o.prototype,`indirectCRL`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,context:5,defaultValue:o.ONLY,implicit:!0})],o.prototype,`onlyContainsAttributeCerts`,void 0)})),Rt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CRLReason=e.CRLReasons=e.id_ce_cRLReasons=void 0;let n=(G(),t(L)),r=q();e.id_ce_cRLReasons=`${J().id_ce}.21`;var i;(function(e){e[e.unspecified=0]=`unspecified`,e[e.keyCompromise=1]=`keyCompromise`,e[e.cACompromise=2]=`cACompromise`,e[e.affiliationChanged=3]=`affiliationChanged`,e[e.superseded=4]=`superseded`,e[e.cessationOfOperation=5]=`cessationOfOperation`,e[e.certificateHold=6]=`certificateHold`,e[e.removeFromCRL=8]=`removeFromCRL`,e[e.privilegeWithdrawn=9]=`privilegeWithdrawn`,e[e.aACompromise=10]=`aACompromise`})(i||(e.CRLReasons=i={}));let a=class{reason=i.unspecified;constructor(e=i.unspecified){this.reason=e}toJSON(){return i[this.reason]}toString(){return this.toJSON()}};e.CRLReason=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Enumerated})],a.prototype,`reason`,void 0),e.CRLReason=a=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],a)})),zt=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.id_kp_OCSPSigning=e.id_kp_timeStamping=e.id_kp_emailProtection=e.id_kp_codeSigning=e.id_kp_clientAuth=e.id_kp_serverAuth=e.anyExtendedKeyUsage=e.ExtendedKeyUsage=e.id_ce_extKeyUsage=void 0;let r=(G(),t(L)),i=q(),a=J();e.id_ce_extKeyUsage=`${a.id_ce}.37`;let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.ExtendedKeyUsage=o,e.ExtendedKeyUsage=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:i.AsnPropTypes.ObjectIdentifier})],o),e.anyExtendedKeyUsage=`${e.id_ce_extKeyUsage}.0`,e.id_kp_serverAuth=`${a.id_kp}.1`,e.id_kp_clientAuth=`${a.id_kp}.2`,e.id_kp_codeSigning=`${a.id_kp}.3`,e.id_kp_emailProtection=`${a.id_kp}.4`,e.id_kp_timeStamping=`${a.id_kp}.8`,e.id_kp_OCSPSigning=`${a.id_kp}.9`})),Bt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.InhibitAnyPolicy=e.id_ce_inhibitAnyPolicy=void 0;let n=(G(),t(L)),r=q();e.id_ce_inhibitAnyPolicy=`${J().id_ce}.54`;let i=class{value;constructor(e=new ArrayBuffer(0)){this.value=e}};e.InhibitAnyPolicy=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`value`,void 0),e.InhibitAnyPolicy=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i)})),Vt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.InvalidityDate=e.id_ce_invalidityDate=void 0;let n=(G(),t(L)),r=q();e.id_ce_invalidityDate=`${J().id_ce}.24`;let i=class{value=new Date;constructor(e){e&&(this.value=e)}};e.InvalidityDate=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime})],i.prototype,`value`,void 0),e.InvalidityDate=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i)})),Ht=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.IssueAlternativeName=e.id_ce_issuerAltName=void 0;let r=(G(),t(L)),i=q(),a=At();e.id_ce_issuerAltName=`${J().id_ce}.18`;let o=n=class extends a.GeneralNames{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.IssueAlternativeName=o,e.IssueAlternativeName=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],o)})),Ut=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KeyUsage=e.KeyUsageFlags=e.id_ce_keyUsage=void 0;let t=q();e.id_ce_keyUsage=`${J().id_ce}.15`;var n;(function(e){e[e.digitalSignature=1]=`digitalSignature`,e[e.nonRepudiation=2]=`nonRepudiation`,e[e.keyEncipherment=4]=`keyEncipherment`,e[e.dataEncipherment=8]=`dataEncipherment`,e[e.keyAgreement=16]=`keyAgreement`,e[e.keyCertSign=32]=`keyCertSign`,e[e.cRLSign=64]=`cRLSign`,e[e.encipherOnly=128]=`encipherOnly`,e[e.decipherOnly=256]=`decipherOnly`})(n||(e.KeyUsageFlags=n={})),e.KeyUsage=class extends t.BitString{toJSON(){let e=this.toNumber(),t=[];return e&n.cRLSign&&t.push(`crlSign`),e&n.dataEncipherment&&t.push(`dataEncipherment`),e&n.decipherOnly&&t.push(`decipherOnly`),e&n.digitalSignature&&t.push(`digitalSignature`),e&n.encipherOnly&&t.push(`encipherOnly`),e&n.keyAgreement&&t.push(`keyAgreement`),e&n.keyCertSign&&t.push(`keyCertSign`),e&n.keyEncipherment&&t.push(`keyEncipherment`),e&n.nonRepudiation&&t.push(`nonRepudiation`),t}toString(){return`[${this.toJSON().join(`, `)}]`}}})),Wt=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.NameConstraints=e.GeneralSubtrees=e.GeneralSubtree=e.id_ce_nameConstraints=void 0;let r=(G(),t(L)),i=q(),a=Et();e.id_ce_nameConstraints=`${J().id_ce}.30`;var o=class{base=new a.GeneralName;minimum=0;maximum;constructor(e={}){Object.assign(this,e)}};e.GeneralSubtree=o,r.__decorate([(0,i.AsnProp)({type:a.GeneralName})],o.prototype,`base`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,context:0,defaultValue:0,implicit:!0})],o.prototype,`minimum`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,context:1,optional:!0,implicit:!0})],o.prototype,`maximum`,void 0);let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.GeneralSubtrees=s,e.GeneralSubtrees=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o})],s);var c=class{permittedSubtrees;excludedSubtrees;constructor(e={}){Object.assign(this,e)}};e.NameConstraints=c,r.__decorate([(0,i.AsnProp)({type:s,context:0,optional:!0,implicit:!0})],c.prototype,`permittedSubtrees`,void 0),r.__decorate([(0,i.AsnProp)({type:s,context:1,optional:!0,implicit:!0})],c.prototype,`excludedSubtrees`,void 0)})),Gt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PolicyConstraints=e.id_ce_policyConstraints=void 0;let n=(G(),t(L)),r=q();e.id_ce_policyConstraints=`${J().id_ce}.36`;var i=class{requireExplicitPolicy;inhibitPolicyMapping;constructor(e={}){Object.assign(this,e)}};e.PolicyConstraints=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:0,implicit:!0,optional:!0,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`requireExplicitPolicy`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:1,implicit:!0,optional:!0,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`inhibitPolicyMapping`,void 0)})),Kt=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.PolicyMappings=e.PolicyMapping=e.id_ce_policyMappings=void 0;let r=(G(),t(L)),i=q();e.id_ce_policyMappings=`${J().id_ce}.33`;var a=class{issuerDomainPolicy=``;subjectDomainPolicy=``;constructor(e={}){Object.assign(this,e)}};e.PolicyMapping=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`issuerDomainPolicy`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`subjectDomainPolicy`,void 0);let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.PolicyMappings=o,e.PolicyMappings=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a})],o)})),qt=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectAlternativeName=e.id_ce_subjectAltName=void 0;let r=(G(),t(L)),i=q(),a=At();e.id_ce_subjectAltName=`${J().id_ce}.17`;let o=n=class extends a.GeneralNames{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SubjectAlternativeName=o,e.SubjectAlternativeName=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],o)})),Jt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Attribute=void 0;let n=(G(),t(L)),r=q();var i=class{type=``;values=[];constructor(e={}){Object.assign(this,e)}};e.Attribute=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`type`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,repeated:`set`})],i.prototype,`values`,void 0)})),Yt=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectDirectoryAttributes=e.id_ce_subjectDirectoryAttributes=void 0;let r=(G(),t(L)),i=q(),a=Jt();e.id_ce_subjectDirectoryAttributes=`${J().id_ce}.9`;let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SubjectDirectoryAttributes=o,e.SubjectDirectoryAttributes=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.Attribute})],o)})),Xt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectKeyIdentifier=e.id_ce_subjectKeyIdentifier=void 0;let t=J(),n=Ot();e.id_ce_subjectKeyIdentifier=`${t.id_ce}.14`,e.SubjectKeyIdentifier=class extends n.KeyIdentifier{}})),Zt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PrivateKeyUsagePeriod=e.id_ce_privateKeyUsagePeriod=void 0;let n=(G(),t(L)),r=q();e.id_ce_privateKeyUsagePeriod=`${J().id_ce}.16`;var i=class{notBefore;notAfter;constructor(e={}){Object.assign(this,e)}};e.PrivateKeyUsagePeriod=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime,context:0,implicit:!0,optional:!0})],i.prototype,`notBefore`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime,context:1,implicit:!0,optional:!0})],i.prototype,`notAfter`,void 0)})),Qt=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.EntrustVersionInfo=e.EntrustInfo=e.EntrustInfoFlags=e.id_entrust_entrustVersInfo=void 0;let n=(G(),t(L)),r=q();e.id_entrust_entrustVersInfo=`1.2.840.113533.7.65.0`;var i;(function(e){e[e.keyUpdateAllowed=1]=`keyUpdateAllowed`,e[e.newExtensions=2]=`newExtensions`,e[e.pKIXCertificate=4]=`pKIXCertificate`})(i||(e.EntrustInfoFlags=i={}));var a=class extends r.BitString{toJSON(){let e=[],t=this.toNumber();return t&i.pKIXCertificate&&e.push(`pKIXCertificate`),t&i.newExtensions&&e.push(`newExtensions`),t&i.keyUpdateAllowed&&e.push(`keyUpdateAllowed`),e}toString(){return`[${this.toJSON().join(`, `)}]`}};e.EntrustInfo=a;var o=class{entrustVers=``;entrustInfoFlags=new a;constructor(e={}){Object.assign(this,e)}};e.EntrustVersionInfo=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralString})],o.prototype,`entrustVers`,void 0),n.__decorate([(0,r.AsnProp)({type:a})],o.prototype,`entrustInfoFlags`,void 0)})),$t=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectInfoAccessSyntax=e.id_pe_subjectInfoAccess=void 0;let r=(G(),t(L)),i=q(),a=J(),o=Dt();e.id_pe_subjectInfoAccess=`${a.id_pe}.11`;let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SubjectInfoAccessSyntax=s,e.SubjectInfoAccessSyntax=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o.AccessDescription})],s)})),en=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(Dt(),e),n.__exportStar(Ot(),e),n.__exportStar(kt(),e),n.__exportStar(jt(),e),n.__exportStar(Mt(),e),n.__exportStar(Pt(),e),n.__exportStar(Ft(),e),n.__exportStar(It(),e),n.__exportStar(Lt(),e),n.__exportStar(Nt(),e),n.__exportStar(Rt(),e),n.__exportStar(zt(),e),n.__exportStar(Bt(),e),n.__exportStar(Vt(),e),n.__exportStar(Ht(),e),n.__exportStar(Ut(),e),n.__exportStar(Wt(),e),n.__exportStar(Gt(),e),n.__exportStar(Kt(),e),n.__exportStar(qt(),e),n.__exportStar(Yt(),e),n.__exportStar(Xt(),e),n.__exportStar(Zt(),e),n.__exportStar(Qt(),e),n.__exportStar($t(),e)})),tn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AlgorithmIdentifier=void 0;let n=(G(),t(L)),r=q(),i=K();var a=class e{algorithm=``;parameters;constructor(e={}){Object.assign(this,e)}isEqual(t){return t instanceof e&&t.algorithm==this.algorithm&&(t.parameters&&this.parameters&&(0,i.equal)(t.parameters,this.parameters)||t.parameters===this.parameters)}};e.AlgorithmIdentifier=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`algorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,optional:!0})],a.prototype,`parameters`,void 0)})),nn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectPublicKeyInfo=void 0;let n=(G(),t(L)),r=q(),i=tn();var a=class{algorithm=new i.AlgorithmIdentifier;subjectPublicKey=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.SubjectPublicKeyInfo=a,n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],a.prototype,`algorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],a.prototype,`subjectPublicKey`,void 0)})),rn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Time=void 0;let n=(G(),t(L)),r=q(),i=class{utcTime;generalTime;constructor(e){if(e)if(typeof e==`string`||typeof e==`number`||e instanceof Date){let t=new Date(e);t.setMilliseconds(0),t.getUTCFullYear()>2049?this.generalTime=t:this.utcTime=t}else Object.assign(this,e)}getTime(){let e=this.utcTime||this.generalTime;if(!e)throw Error(`Cannot get time from CHOICE object`);return e}};e.Time=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.UTCTime})],i.prototype,`utcTime`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime})],i.prototype,`generalTime`,void 0),e.Time=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i)})),an=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Validity=void 0;let n=(G(),t(L)),r=q(),i=rn();var a=class{notBefore=new i.Time(new Date);notAfter=new i.Time(new Date);constructor(e){e&&(this.notBefore=new i.Time(e.notBefore),this.notAfter=new i.Time(e.notAfter))}};e.Validity=a,n.__decorate([(0,r.AsnProp)({type:i.Time})],a.prototype,`notBefore`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Time})],a.prototype,`notAfter`,void 0)})),on=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.Extensions=e.Extension=void 0;let r=(G(),t(L)),i=q();var a=class e{static CRITICAL=!1;extnID=``;critical=e.CRITICAL;extnValue=new i.OctetString;constructor(e={}){Object.assign(this,e)}};e.Extension=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`extnID`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Boolean,defaultValue:a.CRITICAL})],a.prototype,`critical`,void 0),r.__decorate([(0,i.AsnProp)({type:i.OctetString})],a.prototype,`extnValue`,void 0);let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.Extensions=o,e.Extensions=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a})],o)})),sn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Version=void 0;var t;(function(e){e[e.v1=0]=`v1`,e[e.v2=1]=`v2`,e[e.v3=2]=`v3`})(t||(e.Version=t={}))})),cn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.TBSCertificate=void 0;let n=(G(),t(L)),r=q(),i=tn(),a=Tt(),o=nn(),s=an(),c=on(),l=sn();var u=class{version=l.Version.v1;serialNumber=new ArrayBuffer(0);signature=new i.AlgorithmIdentifier;issuer=new a.Name;validity=new s.Validity;subject=new a.Name;subjectPublicKeyInfo=new o.SubjectPublicKeyInfo;issuerUniqueID;subjectUniqueID;extensions;constructor(e={}){Object.assign(this,e)}};e.TBSCertificate=u,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:0,defaultValue:l.Version.v1})],u.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],u.prototype,`serialNumber`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],u.prototype,`signature`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Name})],u.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:s.Validity})],u.prototype,`validity`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Name})],u.prototype,`subject`,void 0),n.__decorate([(0,r.AsnProp)({type:o.SubjectPublicKeyInfo})],u.prototype,`subjectPublicKeyInfo`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,context:1,implicit:!0,optional:!0})],u.prototype,`issuerUniqueID`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,context:2,implicit:!0,optional:!0})],u.prototype,`subjectUniqueID`,void 0),n.__decorate([(0,r.AsnProp)({type:c.Extensions,context:3,optional:!0})],u.prototype,`extensions`,void 0)})),ln=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Certificate=void 0;let n=(G(),t(L)),r=q(),i=tn(),a=cn();var o=class{tbsCertificate=new a.TBSCertificate;tbsCertificateRaw;signatureAlgorithm=new i.AlgorithmIdentifier;signatureValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.Certificate=o,n.__decorate([(0,r.AsnProp)({type:a.TBSCertificate,raw:!0})],o.prototype,`tbsCertificate`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`signatureAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`signatureValue`,void 0)})),un=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.TBSCertList=e.RevokedCertificate=void 0;let n=(G(),t(L)),r=q(),i=tn(),a=Tt(),o=rn(),s=on();var c=class{userCertificate=new ArrayBuffer(0);revocationDate=new o.Time;crlEntryExtensions;constructor(e={}){Object.assign(this,e)}};e.RevokedCertificate=c,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],c.prototype,`userCertificate`,void 0),n.__decorate([(0,r.AsnProp)({type:o.Time})],c.prototype,`revocationDate`,void 0),n.__decorate([(0,r.AsnProp)({type:s.Extension,optional:!0,repeated:`sequence`})],c.prototype,`crlEntryExtensions`,void 0);var l=class{version;signature=new i.AlgorithmIdentifier;issuer=new a.Name;thisUpdate=new o.Time;nextUpdate;revokedCertificates;crlExtensions;constructor(e={}){Object.assign(this,e)}};e.TBSCertList=l,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,optional:!0})],l.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],l.prototype,`signature`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Name})],l.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:o.Time})],l.prototype,`thisUpdate`,void 0),n.__decorate([(0,r.AsnProp)({type:o.Time,optional:!0})],l.prototype,`nextUpdate`,void 0),n.__decorate([(0,r.AsnProp)({type:c,repeated:`sequence`,optional:!0})],l.prototype,`revokedCertificates`,void 0),n.__decorate([(0,r.AsnProp)({type:s.Extension,optional:!0,context:0,repeated:`sequence`})],l.prototype,`crlExtensions`,void 0)})),dn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CertificateList=void 0;let n=(G(),t(L)),r=q(),i=tn(),a=un();var o=class{tbsCertList=new a.TBSCertList;tbsCertListRaw;signatureAlgorithm=new i.AlgorithmIdentifier;signature=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.CertificateList=o,n.__decorate([(0,r.AsnProp)({type:a.TBSCertList,raw:!0})],o.prototype,`tbsCertList`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`signatureAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`signature`,void 0)})),Y=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(en(),e),n.__exportStar(tn(),e),n.__exportStar(Jt(),e),n.__exportStar(ln(),e),n.__exportStar(dn(),e),n.__exportStar(on(),e),n.__exportStar(Et(),e),n.__exportStar(At(),e),n.__exportStar(Tt(),e),n.__exportStar(J(),e),n.__exportStar(nn(),e),n.__exportStar(un(),e),n.__exportStar(cn(),e),n.__exportStar(rn(),e),n.__exportStar(sn(),e),n.__exportStar(an(),e)})),fn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IssuerAndSerialNumber=void 0;let n=(G(),t(L)),r=q(),i=Y();var a=class{issuer=new i.Name;serialNumber=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.IssuerAndSerialNumber=a,n.__decorate([(0,r.AsnProp)({type:i.Name})],a.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`serialNumber`,void 0)})),pn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SignerIdentifier=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=fn(),o=class{subjectKeyIdentifier;issuerAndSerialNumber;constructor(e={}){Object.assign(this,e)}};e.SignerIdentifier=o,n.__decorate([(0,r.AsnProp)({type:i.SubjectKeyIdentifier,context:0,implicit:!0})],o.prototype,`subjectKeyIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:a.IssuerAndSerialNumber})],o.prototype,`issuerAndSerialNumber`,void 0),e.SignerIdentifier=o=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],o)})),mn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KeyDerivationAlgorithmIdentifier=e.MessageAuthenticationCodeAlgorithm=e.ContentEncryptionAlgorithmIdentifier=e.KeyEncryptionAlgorithmIdentifier=e.SignatureAlgorithmIdentifier=e.DigestAlgorithmIdentifier=e.CMSVersion=void 0;let n=(G(),t(L)),r=Y(),i=q();var a;(function(e){e[e.v0=0]=`v0`,e[e.v1=1]=`v1`,e[e.v2=2]=`v2`,e[e.v3=3]=`v3`,e[e.v4=4]=`v4`,e[e.v5=5]=`v5`})(a||(e.CMSVersion=a={}));let o=class extends r.AlgorithmIdentifier{};e.DigestAlgorithmIdentifier=o,e.DigestAlgorithmIdentifier=o=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],o);let s=class extends r.AlgorithmIdentifier{};e.SignatureAlgorithmIdentifier=s,e.SignatureAlgorithmIdentifier=s=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],s);let c=class extends r.AlgorithmIdentifier{};e.KeyEncryptionAlgorithmIdentifier=c,e.KeyEncryptionAlgorithmIdentifier=c=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],c);let l=class extends r.AlgorithmIdentifier{};e.ContentEncryptionAlgorithmIdentifier=l,e.ContentEncryptionAlgorithmIdentifier=l=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],l);let u=class extends r.AlgorithmIdentifier{};e.MessageAuthenticationCodeAlgorithm=u,e.MessageAuthenticationCodeAlgorithm=u=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],u);let d=class extends r.AlgorithmIdentifier{};e.KeyDerivationAlgorithmIdentifier=d,e.KeyDerivationAlgorithmIdentifier=d=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],d)})),hn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Attribute=void 0;let n=(G(),t(L)),r=q();var i=class{attrType=``;attrValues=[];constructor(e={}){Object.assign(this,e)}};e.Attribute=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`attrType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,repeated:`set`})],i.prototype,`attrValues`,void 0)})),gn=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SignerInfos=e.SignerInfo=void 0;let r=(G(),t(L)),i=q(),a=pn(),o=mn(),s=hn();var c=class{version=o.CMSVersion.v0;sid=new a.SignerIdentifier;digestAlgorithm=new o.DigestAlgorithmIdentifier;signedAttrs;signedAttrsRaw;signatureAlgorithm=new o.SignatureAlgorithmIdentifier;signature=new i.OctetString;unsignedAttrs;constructor(e={}){Object.assign(this,e)}};e.SignerInfo=c,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],c.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:a.SignerIdentifier})],c.prototype,`sid`,void 0),r.__decorate([(0,i.AsnProp)({type:o.DigestAlgorithmIdentifier})],c.prototype,`digestAlgorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:s.Attribute,repeated:`set`,context:0,implicit:!0,optional:!0,raw:!0})],c.prototype,`signedAttrs`,void 0),r.__decorate([(0,i.AsnProp)({type:o.SignatureAlgorithmIdentifier})],c.prototype,`signatureAlgorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:i.OctetString})],c.prototype,`signature`,void 0),r.__decorate([(0,i.AsnProp)({type:s.Attribute,repeated:`set`,context:1,implicit:!0,optional:!0})],c.prototype,`unsignedAttrs`,void 0);let l=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SignerInfos=l,e.SignerInfos=l=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:c})],l)})),_n=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CounterSignature=e.id_counterSignature=void 0;let n=(G(),t(L)),r=q(),i=gn();e.id_counterSignature=`1.2.840.113549.1.9.6`;let a=class extends i.SignerInfo{};e.CounterSignature=a,e.CounterSignature=a=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Sequence})],a)})),vn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.MessageDigest=e.id_messageDigest=void 0;let t=q();e.id_messageDigest=`1.2.840.113549.1.9.4`,e.MessageDigest=class extends t.OctetString{}})),yn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SigningTime=e.id_signingTime=void 0;let n=(G(),t(L)),r=Y(),i=q();e.id_signingTime=`1.2.840.113549.1.9.5`;let a=class extends r.Time{};e.SigningTime=a,e.SigningTime=a=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],a)})),bn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_contentType=void 0;let n=(G(),t(L));n.__exportStar(_n(),e),n.__exportStar(vn(),e),n.__exportStar(yn(),e),e.id_contentType=`1.2.840.113549.1.9.3`})),xn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ACClearAttrs=void 0;let n=(G(),t(L)),r=q(),i=Y();var a=class{acIssuer=new i.GeneralName;acSerial=0;attrs=[];constructor(e={}){Object.assign(this,e)}};e.ACClearAttrs=a,n.__decorate([(0,r.AsnProp)({type:i.GeneralName})],a.prototype,`acIssuer`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],a.prototype,`acSerial`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Attribute,repeated:`sequence`})],a.prototype,`attrs`,void 0)})),Sn=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.AttrSpec=void 0;let r=(G(),t(L)),i=q(),a=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.AttrSpec=a,e.AttrSpec=a=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:i.AsnPropTypes.ObjectIdentifier})],a)})),Cn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AAControls=void 0;let n=(G(),t(L)),r=q(),i=Sn();var a=class{pathLenConstraint;permittedAttrs;excludedAttrs;permitUnSpecified=!0;constructor(e={}){Object.assign(this,e)}};e.AAControls=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,optional:!0})],a.prototype,`pathLenConstraint`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AttrSpec,implicit:!0,context:0,optional:!0})],a.prototype,`permittedAttrs`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AttrSpec,implicit:!0,context:1,optional:!0})],a.prototype,`excludedAttrs`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,defaultValue:!0})],a.prototype,`permitUnSpecified`,void 0)})),wn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IssuerSerial=void 0;let n=(G(),t(L)),r=q(),i=Y();var a=class{issuer=new i.GeneralNames;serial=new ArrayBuffer(0);issuerUID=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.IssuerSerial=a,n.__decorate([(0,r.AsnProp)({type:i.GeneralNames})],a.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`serial`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,optional:!0})],a.prototype,`issuerUID`,void 0)})),Tn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ObjectDigestInfo=e.DigestedObjectType=void 0;let n=(G(),t(L)),r=q(),i=Y();var a;(function(e){e[e.publicKey=0]=`publicKey`,e[e.publicKeyCert=1]=`publicKeyCert`,e[e.otherObjectTypes=2]=`otherObjectTypes`})(a||(e.DigestedObjectType=a={}));var o=class{digestedObjectType=a.publicKey;otherObjectTypeID;digestAlgorithm=new i.AlgorithmIdentifier;objectDigest=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.ObjectDigestInfo=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Enumerated})],o.prototype,`digestedObjectType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier,optional:!0})],o.prototype,`otherObjectTypeID`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`digestAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`objectDigest`,void 0)})),En=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.V2Form=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=wn(),o=Tn();var s=class{issuerName;baseCertificateID;objectDigestInfo;constructor(e={}){Object.assign(this,e)}};e.V2Form=s,n.__decorate([(0,r.AsnProp)({type:i.GeneralNames,optional:!0})],s.prototype,`issuerName`,void 0),n.__decorate([(0,r.AsnProp)({type:a.IssuerSerial,context:0,implicit:!0,optional:!0})],s.prototype,`baseCertificateID`,void 0),n.__decorate([(0,r.AsnProp)({type:o.ObjectDigestInfo,context:1,implicit:!0,optional:!0})],s.prototype,`objectDigestInfo`,void 0)})),Dn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AttCertIssuer=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=En(),o=class{v1Form;v2Form;constructor(e={}){Object.assign(this,e)}};e.AttCertIssuer=o,n.__decorate([(0,r.AsnProp)({type:i.GeneralName,repeated:`sequence`})],o.prototype,`v1Form`,void 0),n.__decorate([(0,r.AsnProp)({type:a.V2Form,context:0,implicit:!0})],o.prototype,`v2Form`,void 0),e.AttCertIssuer=o=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],o)})),On=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AttCertValidityPeriod=void 0;let n=(G(),t(L)),r=q();var i=class{notBeforeTime=new Date;notAfterTime=new Date;constructor(e={}){Object.assign(this,e)}};e.AttCertValidityPeriod=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime})],i.prototype,`notBeforeTime`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime})],i.prototype,`notAfterTime`,void 0)})),kn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Holder=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=wn(),o=Tn();var s=class{baseCertificateID;entityName;objectDigestInfo;constructor(e={}){Object.assign(this,e)}};e.Holder=s,n.__decorate([(0,r.AsnProp)({type:a.IssuerSerial,implicit:!0,context:0,optional:!0})],s.prototype,`baseCertificateID`,void 0),n.__decorate([(0,r.AsnProp)({type:i.GeneralNames,implicit:!0,context:1,optional:!0})],s.prototype,`entityName`,void 0),n.__decorate([(0,r.AsnProp)({type:o.ObjectDigestInfo,implicit:!0,context:2,optional:!0})],s.prototype,`objectDigestInfo`,void 0)})),An=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AttributeCertificateInfo=e.AttCertVersion=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=kn(),o=Dn(),s=On();var c;(function(e){e[e.v2=1]=`v2`})(c||(e.AttCertVersion=c={}));var l=class{version=c.v2;holder=new a.Holder;issuer=new o.AttCertIssuer;signature=new i.AlgorithmIdentifier;serialNumber=new ArrayBuffer(0);attrCertValidityPeriod=new s.AttCertValidityPeriod;attributes=[];issuerUniqueID;extensions;constructor(e={}){Object.assign(this,e)}};e.AttributeCertificateInfo=l,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],l.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Holder})],l.prototype,`holder`,void 0),n.__decorate([(0,r.AsnProp)({type:o.AttCertIssuer})],l.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],l.prototype,`signature`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],l.prototype,`serialNumber`,void 0),n.__decorate([(0,r.AsnProp)({type:s.AttCertValidityPeriod})],l.prototype,`attrCertValidityPeriod`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Attribute,repeated:`sequence`})],l.prototype,`attributes`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,optional:!0})],l.prototype,`issuerUniqueID`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Extensions,optional:!0})],l.prototype,`extensions`,void 0)})),jn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AttributeCertificate=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=An();var o=class{acinfo=new a.AttributeCertificateInfo;signatureAlgorithm=new i.AlgorithmIdentifier;signatureValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.AttributeCertificate=o,n.__decorate([(0,r.AsnProp)({type:a.AttributeCertificateInfo})],o.prototype,`acinfo`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`signatureAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`signatureValue`,void 0)})),Mn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ClassList=e.ClassListFlags=void 0;let t=q();var n;(function(e){e[e.unmarked=1]=`unmarked`,e[e.unclassified=2]=`unclassified`,e[e.restricted=4]=`restricted`,e[e.confidential=8]=`confidential`,e[e.secret=16]=`secret`,e[e.topSecret=32]=`topSecret`})(n||(e.ClassListFlags=n={})),e.ClassList=class extends t.BitString{}})),Nn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SecurityCategory=void 0;let n=(G(),t(L)),r=q();var i=class{type=``;value=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.SecurityCategory=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier,implicit:!0,context:0})],i.prototype,`type`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,implicit:!0,context:1})],i.prototype,`value`,void 0)})),Pn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Clearance=void 0;let n=(G(),t(L)),r=q(),i=Mn(),a=Nn();var o=class{policyId=``;classList=new i.ClassList(i.ClassListFlags.unclassified);securityCategories;constructor(e={}){Object.assign(this,e)}};e.Clearance=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],o.prototype,`policyId`,void 0),n.__decorate([(0,r.AsnProp)({type:i.ClassList,defaultValue:new i.ClassList(i.ClassListFlags.unclassified)})],o.prototype,`classList`,void 0),n.__decorate([(0,r.AsnProp)({type:a.SecurityCategory,repeated:`set`})],o.prototype,`securityCategories`,void 0)})),Fn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IetfAttrSyntax=e.IetfAttrSyntaxValueChoices=void 0;let n=(G(),t(L)),r=q(),i=Y();var a=class{cotets;oid;string;constructor(e={}){Object.assign(this,e)}};e.IetfAttrSyntaxValueChoices=a,n.__decorate([(0,r.AsnProp)({type:r.OctetString})],a.prototype,`cotets`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`oid`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Utf8String})],a.prototype,`string`,void 0);var o=class{policyAuthority;values=[];constructor(e={}){Object.assign(this,e)}};e.IetfAttrSyntax=o,n.__decorate([(0,r.AsnProp)({type:i.GeneralNames,implicit:!0,context:0,optional:!0})],o.prototype,`policyAuthority`,void 0),n.__decorate([(0,r.AsnProp)({type:a,repeated:`sequence`})],o.prototype,`values`,void 0)})),In=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_at_clearance=e.id_at_role=e.id_at=e.id_aca_encAttrs=e.id_aca_group=e.id_aca_chargingIdentity=e.id_aca_accessIdentity=e.id_aca_authenticationInfo=e.id_aca=e.id_ce_targetInformation=e.id_pe_ac_proxying=e.id_pe_aaControls=e.id_pe_ac_auditIdentity=void 0;let t=Y();e.id_pe_ac_auditIdentity=`${t.id_pe}.4`,e.id_pe_aaControls=`${t.id_pe}.6`,e.id_pe_ac_proxying=`${t.id_pe}.10`,e.id_ce_targetInformation=`${t.id_ce}.55`,e.id_aca=`${t.id_pkix}.10`,e.id_aca_authenticationInfo=`${e.id_aca}.1`,e.id_aca_accessIdentity=`${e.id_aca}.2`,e.id_aca_chargingIdentity=`${e.id_aca}.3`,e.id_aca_group=`${e.id_aca}.4`,e.id_aca_encAttrs=`${e.id_aca}.6`,e.id_at=`2.5.4`,e.id_at_role=`${e.id_at}.72`,e.id_at_clearance=`2.5.1.5.55`})),Ln=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.Targets=e.Target=e.TargetCert=void 0;let r=(G(),t(L)),i=q(),a=Y(),o=wn(),s=Tn();var c=class{targetCertificate=new o.IssuerSerial;targetName;certDigestInfo;constructor(e={}){Object.assign(this,e)}};e.TargetCert=c,r.__decorate([(0,i.AsnProp)({type:o.IssuerSerial})],c.prototype,`targetCertificate`,void 0),r.__decorate([(0,i.AsnProp)({type:a.GeneralName,optional:!0})],c.prototype,`targetName`,void 0),r.__decorate([(0,i.AsnProp)({type:s.ObjectDigestInfo,optional:!0})],c.prototype,`certDigestInfo`,void 0);let l=class{targetName;targetGroup;targetCert;constructor(e={}){Object.assign(this,e)}};e.Target=l,r.__decorate([(0,i.AsnProp)({type:a.GeneralName,context:0,implicit:!0})],l.prototype,`targetName`,void 0),r.__decorate([(0,i.AsnProp)({type:a.GeneralName,context:1,implicit:!0})],l.prototype,`targetGroup`,void 0),r.__decorate([(0,i.AsnProp)({type:c,context:2,implicit:!0})],l.prototype,`targetCert`,void 0),e.Target=l=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],l);let u=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.Targets=u,e.Targets=u=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:l})],u)})),Rn=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.ProxyInfo=void 0;let r=(G(),t(L)),i=q(),a=Ln(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.ProxyInfo=o,e.ProxyInfo=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.Targets})],o)})),zn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RoleSyntax=void 0;let n=(G(),t(L)),r=q(),i=Y();var a=class{roleAuthority;roleName;constructor(e={}){Object.assign(this,e)}};e.RoleSyntax=a,n.__decorate([(0,r.AsnProp)({type:i.GeneralNames,implicit:!0,context:0,optional:!0})],a.prototype,`roleAuthority`,void 0),n.__decorate([(0,r.AsnProp)({type:i.GeneralName,implicit:!0,context:1})],a.prototype,`roleName`,void 0)})),Bn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SvceAuthInfo=void 0;let n=(G(),t(L)),r=q(),i=Y();var a=class{service=new i.GeneralName;ident=new i.GeneralName;authInfo;constructor(e={}){Object.assign(this,e)}};e.SvceAuthInfo=a,n.__decorate([(0,r.AsnProp)({type:i.GeneralName})],a.prototype,`service`,void 0),n.__decorate([(0,r.AsnProp)({type:i.GeneralName})],a.prototype,`ident`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString,optional:!0})],a.prototype,`authInfo`,void 0)})),Vn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(xn(),e),n.__exportStar(Cn(),e),n.__exportStar(Dn(),e),n.__exportStar(On(),e),n.__exportStar(Sn(),e),n.__exportStar(jn(),e),n.__exportStar(An(),e),n.__exportStar(Mn(),e),n.__exportStar(Pn(),e),n.__exportStar(kn(),e),n.__exportStar(Fn(),e),n.__exportStar(wn(),e),n.__exportStar(Tn(),e),n.__exportStar(In(),e),n.__exportStar(Rn(),e),n.__exportStar(zn(),e),n.__exportStar(Nn(),e),n.__exportStar(Bn(),e),n.__exportStar(Ln(),e),n.__exportStar(En(),e)})),Hn=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.CertificateSet=e.CertificateChoices=e.OtherCertificateFormat=void 0;let r=(G(),t(L)),i=q(),a=Y(),o=Vn();var s=class{otherCertFormat=``;otherCert=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherCertificateFormat=s,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],s.prototype,`otherCertFormat`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any})],s.prototype,`otherCert`,void 0);let c=class{certificate;v2AttrCert;other;constructor(e={}){Object.assign(this,e)}};e.CertificateChoices=c,r.__decorate([(0,i.AsnProp)({type:a.Certificate})],c.prototype,`certificate`,void 0),r.__decorate([(0,i.AsnProp)({type:o.AttributeCertificate,context:2,implicit:!0})],c.prototype,`v2AttrCert`,void 0),r.__decorate([(0,i.AsnProp)({type:s,context:3,implicit:!0})],c.prototype,`other`,void 0),e.CertificateChoices=c=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],c);let l=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.CertificateSet=l,e.CertificateSet=l=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:c})],l)})),Un=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ContentInfo=void 0;let n=(G(),t(L)),r=q();var i=class{contentType=``;content=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.ContentInfo=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`contentType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],i.prototype,`content`,void 0)})),Wn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.EncapsulatedContentInfo=e.EncapsulatedContent=void 0;let n=(G(),t(L)),r=q(),i=class{single;any;constructor(e={}){Object.assign(this,e)}};e.EncapsulatedContent=i,n.__decorate([(0,r.AsnProp)({type:r.OctetString})],i.prototype,`single`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any})],i.prototype,`any`,void 0),e.EncapsulatedContent=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i);var a=class{eContentType=``;eContent;constructor(e={}){Object.assign(this,e)}};e.EncapsulatedContentInfo=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`eContentType`,void 0),n.__decorate([(0,r.AsnProp)({type:i,context:0,optional:!0})],a.prototype,`eContent`,void 0)})),Gn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.EncryptedContentInfo=e.EncryptedContent=void 0;let n=(G(),t(L)),r=q(),i=mn(),a=class{value;constructedValue;constructor(e={}){Object.assign(this,e)}};e.EncryptedContent=a,n.__decorate([(0,r.AsnProp)({type:r.OctetString,context:0,implicit:!0,optional:!0})],a.prototype,`value`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString,converter:r.AsnConstructedOctetStringConverter,context:0,implicit:!0,optional:!0,repeated:`sequence`})],a.prototype,`constructedValue`,void 0),e.EncryptedContent=a=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],a);var o=class{contentType=``;contentEncryptionAlgorithm=new i.ContentEncryptionAlgorithmIdentifier;encryptedContent;constructor(e={}){Object.assign(this,e)}};e.EncryptedContentInfo=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],o.prototype,`contentType`,void 0),n.__decorate([(0,r.AsnProp)({type:i.ContentEncryptionAlgorithmIdentifier})],o.prototype,`contentEncryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:a,optional:!0})],o.prototype,`encryptedContent`,void 0)})),Kn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.OtherKeyAttribute=void 0;let n=(G(),t(L)),r=q();var i=class{keyAttrId=``;keyAttr;constructor(e={}){Object.assign(this,e)}};e.OtherKeyAttribute=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`keyAttrId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,optional:!0})],i.prototype,`keyAttr`,void 0)})),qn=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.KeyAgreeRecipientInfo=e.OriginatorIdentifierOrKey=e.OriginatorPublicKey=e.RecipientEncryptedKeys=e.RecipientEncryptedKey=e.KeyAgreeRecipientIdentifier=e.RecipientKeyIdentifier=void 0;let r=(G(),t(L)),i=q(),a=Y(),o=mn(),s=fn(),c=Kn();var l=class{subjectKeyIdentifier=new a.SubjectKeyIdentifier;date;other;constructor(e={}){Object.assign(this,e)}};e.RecipientKeyIdentifier=l,r.__decorate([(0,i.AsnProp)({type:a.SubjectKeyIdentifier})],l.prototype,`subjectKeyIdentifier`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.GeneralizedTime,optional:!0})],l.prototype,`date`,void 0),r.__decorate([(0,i.AsnProp)({type:c.OtherKeyAttribute,optional:!0})],l.prototype,`other`,void 0);let u=class{rKeyId;issuerAndSerialNumber;constructor(e={}){Object.assign(this,e)}};e.KeyAgreeRecipientIdentifier=u,r.__decorate([(0,i.AsnProp)({type:l,context:0,implicit:!0,optional:!0})],u.prototype,`rKeyId`,void 0),r.__decorate([(0,i.AsnProp)({type:s.IssuerAndSerialNumber,optional:!0})],u.prototype,`issuerAndSerialNumber`,void 0),e.KeyAgreeRecipientIdentifier=u=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],u);var d=class{rid=new u;encryptedKey=new i.OctetString;constructor(e={}){Object.assign(this,e)}};e.RecipientEncryptedKey=d,r.__decorate([(0,i.AsnProp)({type:u})],d.prototype,`rid`,void 0),r.__decorate([(0,i.AsnProp)({type:i.OctetString})],d.prototype,`encryptedKey`,void 0);let f=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.RecipientEncryptedKeys=f,e.RecipientEncryptedKeys=f=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:d})],f);var p=class{algorithm=new a.AlgorithmIdentifier;publicKey=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OriginatorPublicKey=p,r.__decorate([(0,i.AsnProp)({type:a.AlgorithmIdentifier})],p.prototype,`algorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.BitString})],p.prototype,`publicKey`,void 0);let m=class{subjectKeyIdentifier;originatorKey;issuerAndSerialNumber;constructor(e={}){Object.assign(this,e)}};e.OriginatorIdentifierOrKey=m,r.__decorate([(0,i.AsnProp)({type:a.SubjectKeyIdentifier,context:0,implicit:!0,optional:!0})],m.prototype,`subjectKeyIdentifier`,void 0),r.__decorate([(0,i.AsnProp)({type:p,context:1,implicit:!0,optional:!0})],m.prototype,`originatorKey`,void 0),r.__decorate([(0,i.AsnProp)({type:s.IssuerAndSerialNumber,optional:!0})],m.prototype,`issuerAndSerialNumber`,void 0),e.OriginatorIdentifierOrKey=m=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],m);var h=class{version=o.CMSVersion.v3;originator=new m;ukm;keyEncryptionAlgorithm=new o.KeyEncryptionAlgorithmIdentifier;recipientEncryptedKeys=new f;constructor(e={}){Object.assign(this,e)}};e.KeyAgreeRecipientInfo=h,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],h.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:m,context:0})],h.prototype,`originator`,void 0),r.__decorate([(0,i.AsnProp)({type:i.OctetString,context:1,optional:!0})],h.prototype,`ukm`,void 0),r.__decorate([(0,i.AsnProp)({type:o.KeyEncryptionAlgorithmIdentifier})],h.prototype,`keyEncryptionAlgorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:f})],h.prototype,`recipientEncryptedKeys`,void 0)})),Jn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KeyTransRecipientInfo=e.RecipientIdentifier=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=mn(),o=fn(),s=class{subjectKeyIdentifier;issuerAndSerialNumber;constructor(e={}){Object.assign(this,e)}};e.RecipientIdentifier=s,n.__decorate([(0,r.AsnProp)({type:i.SubjectKeyIdentifier,context:0,implicit:!0})],s.prototype,`subjectKeyIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:o.IssuerAndSerialNumber})],s.prototype,`issuerAndSerialNumber`,void 0),e.RecipientIdentifier=s=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],s);var c=class{version=a.CMSVersion.v0;rid=new s;keyEncryptionAlgorithm=new a.KeyEncryptionAlgorithmIdentifier;encryptedKey=new r.OctetString;constructor(e={}){Object.assign(this,e)}};e.KeyTransRecipientInfo=c,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],c.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:s})],c.prototype,`rid`,void 0),n.__decorate([(0,r.AsnProp)({type:a.KeyEncryptionAlgorithmIdentifier})],c.prototype,`keyEncryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString})],c.prototype,`encryptedKey`,void 0)})),Yn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KEKRecipientInfo=e.KEKIdentifier=void 0;let n=(G(),t(L)),r=q(),i=Kn(),a=mn();var o=class{keyIdentifier=new r.OctetString;date;other;constructor(e={}){Object.assign(this,e)}};e.KEKIdentifier=o,n.__decorate([(0,r.AsnProp)({type:r.OctetString})],o.prototype,`keyIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime,optional:!0})],o.prototype,`date`,void 0),n.__decorate([(0,r.AsnProp)({type:i.OtherKeyAttribute,optional:!0})],o.prototype,`other`,void 0);var s=class{version=a.CMSVersion.v4;kekid=new o;keyEncryptionAlgorithm=new a.KeyEncryptionAlgorithmIdentifier;encryptedKey=new r.OctetString;constructor(e={}){Object.assign(this,e)}};e.KEKRecipientInfo=s,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],s.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:o})],s.prototype,`kekid`,void 0),n.__decorate([(0,r.AsnProp)({type:a.KeyEncryptionAlgorithmIdentifier})],s.prototype,`keyEncryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString})],s.prototype,`encryptedKey`,void 0)})),Xn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PasswordRecipientInfo=void 0;let n=(G(),t(L)),r=q(),i=mn();var a=class{version=i.CMSVersion.v0;keyDerivationAlgorithm;keyEncryptionAlgorithm=new i.KeyEncryptionAlgorithmIdentifier;encryptedKey=new r.OctetString;constructor(e={}){Object.assign(this,e)}};e.PasswordRecipientInfo=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],a.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i.KeyDerivationAlgorithmIdentifier,context:0,optional:!0})],a.prototype,`keyDerivationAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:i.KeyEncryptionAlgorithmIdentifier})],a.prototype,`keyEncryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString})],a.prototype,`encryptedKey`,void 0)})),Zn=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RecipientInfo=e.OtherRecipientInfo=void 0;let n=(G(),t(L)),r=q(),i=qn(),a=Jn(),o=Yn(),s=Xn();var c=class{oriType=``;oriValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherRecipientInfo=c,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],c.prototype,`oriType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any})],c.prototype,`oriValue`,void 0);let l=class{ktri;kari;kekri;pwri;ori;constructor(e={}){Object.assign(this,e)}};e.RecipientInfo=l,n.__decorate([(0,r.AsnProp)({type:a.KeyTransRecipientInfo,optional:!0})],l.prototype,`ktri`,void 0),n.__decorate([(0,r.AsnProp)({type:i.KeyAgreeRecipientInfo,context:1,implicit:!0,optional:!0})],l.prototype,`kari`,void 0),n.__decorate([(0,r.AsnProp)({type:o.KEKRecipientInfo,context:2,implicit:!0,optional:!0})],l.prototype,`kekri`,void 0),n.__decorate([(0,r.AsnProp)({type:s.PasswordRecipientInfo,context:3,implicit:!0,optional:!0})],l.prototype,`pwri`,void 0),n.__decorate([(0,r.AsnProp)({type:c,context:4,implicit:!0,optional:!0})],l.prototype,`ori`,void 0),e.RecipientInfo=l=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],l)})),Qn=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.RecipientInfos=void 0;let r=(G(),t(L)),i=q(),a=Zn(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.RecipientInfos=o,e.RecipientInfos=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:a.RecipientInfo})],o)})),$n=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.RevocationInfoChoices=e.RevocationInfoChoice=e.OtherRevocationInfoFormat=e.id_ri_scvp=e.id_ri_ocsp_response=e.id_ri=void 0;let r=(G(),t(L)),i=q();e.id_ri=`${Y().id_pkix}.16`,e.id_ri_ocsp_response=`${e.id_ri}.2`,e.id_ri_scvp=`${e.id_ri}.4`;var a=class{otherRevInfoFormat=``;otherRevInfo=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherRevocationInfoFormat=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`otherRevInfoFormat`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any})],a.prototype,`otherRevInfo`,void 0);let o=class{other=new a;constructor(e={}){Object.assign(this,e)}};e.RevocationInfoChoice=o,r.__decorate([(0,i.AsnProp)({type:a,context:1,implicit:!0})],o.prototype,`other`,void 0),e.RevocationInfoChoice=o=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],o);let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.RevocationInfoChoices=s,e.RevocationInfoChoices=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:o})],s)})),er=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.OriginatorInfo=void 0;let n=(G(),t(L)),r=q(),i=Hn(),a=$n();var o=class{certs;crls;constructor(e={}){Object.assign(this,e)}};e.OriginatorInfo=o,n.__decorate([(0,r.AsnProp)({type:i.CertificateSet,context:0,implicit:!0,optional:!0})],o.prototype,`certs`,void 0),n.__decorate([(0,r.AsnProp)({type:a.RevocationInfoChoices,context:1,implicit:!0,optional:!0})],o.prototype,`crls`,void 0)})),tr=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.EnvelopedData=e.UnprotectedAttributes=void 0;let r=(G(),t(L)),i=q(),a=mn(),o=hn(),s=Qn(),c=er(),l=Gn(),u=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.UnprotectedAttributes=u,e.UnprotectedAttributes=u=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:o.Attribute})],u);var d=class{version=a.CMSVersion.v0;originatorInfo;recipientInfos=new s.RecipientInfos;encryptedContentInfo=new l.EncryptedContentInfo;unprotectedAttrs;constructor(e={}){Object.assign(this,e)}};e.EnvelopedData=d,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],d.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:c.OriginatorInfo,context:0,implicit:!0,optional:!0})],d.prototype,`originatorInfo`,void 0),r.__decorate([(0,i.AsnProp)({type:s.RecipientInfos})],d.prototype,`recipientInfos`,void 0),r.__decorate([(0,i.AsnProp)({type:l.EncryptedContentInfo})],d.prototype,`encryptedContentInfo`,void 0),r.__decorate([(0,i.AsnProp)({type:u,context:1,implicit:!0,optional:!0})],d.prototype,`unprotectedAttrs`,void 0)})),nr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_authData=e.id_encryptedData=e.id_digestedData=e.id_envelopedData=e.id_signedData=e.id_data=e.id_ct_contentInfo=void 0,e.id_ct_contentInfo=`1.2.840.113549.1.9.16.1.6`,e.id_data=`1.2.840.113549.1.7.1`,e.id_signedData=`1.2.840.113549.1.7.2`,e.id_envelopedData=`1.2.840.113549.1.7.3`,e.id_digestedData=`1.2.840.113549.1.7.5`,e.id_encryptedData=`1.2.840.113549.1.7.6`,e.id_authData=`1.2.840.113549.1.9.16.1.2`})),rr=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SignedData=e.DigestAlgorithmIdentifiers=void 0;let r=(G(),t(L)),i=q(),a=Hn(),o=mn(),s=Wn(),c=$n(),l=gn(),u=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.DigestAlgorithmIdentifiers=u,e.DigestAlgorithmIdentifiers=u=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:o.DigestAlgorithmIdentifier})],u);var d=class{version=o.CMSVersion.v0;digestAlgorithms=new u;encapContentInfo=new s.EncapsulatedContentInfo;certificates;crls;signerInfos=new l.SignerInfos;constructor(e={}){Object.assign(this,e)}};e.SignedData=d,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],d.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:u})],d.prototype,`digestAlgorithms`,void 0),r.__decorate([(0,i.AsnProp)({type:s.EncapsulatedContentInfo})],d.prototype,`encapContentInfo`,void 0),r.__decorate([(0,i.AsnProp)({type:a.CertificateSet,context:0,implicit:!0,optional:!0})],d.prototype,`certificates`,void 0),r.__decorate([(0,i.AsnProp)({type:c.RevocationInfoChoices,context:1,implicit:!0,optional:!0})],d.prototype,`crls`,void 0),r.__decorate([(0,i.AsnProp)({type:l.SignerInfos})],d.prototype,`signerInfos`,void 0)})),ir=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(bn(),e),n.__exportStar(hn(),e),n.__exportStar(Hn(),e),n.__exportStar(Un(),e),n.__exportStar(Wn(),e),n.__exportStar(Gn(),e),n.__exportStar(tr(),e),n.__exportStar(fn(),e),n.__exportStar(Yn(),e),n.__exportStar(qn(),e),n.__exportStar(Jn(),e),n.__exportStar(nr(),e),n.__exportStar(er(),e),n.__exportStar(Xn(),e),n.__exportStar(Zn(),e),n.__exportStar(Qn(),e),n.__exportStar($n(),e),n.__exportStar(rr(),e),n.__exportStar(pn(),e),n.__exportStar(gn(),e),n.__exportStar(mn(),e)})),ar=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_sect571r1=e.id_sect571k1=e.id_secp521r1=e.id_sect409r1=e.id_sect409k1=e.id_secp384r1=e.id_sect283r1=e.id_sect283k1=e.id_secp256r1=e.id_sect233r1=e.id_sect233k1=e.id_secp224r1=e.id_sect163r2=e.id_sect163k1=e.id_secp192r1=e.id_ecdsaWithSHA512=e.id_ecdsaWithSHA384=e.id_ecdsaWithSHA256=e.id_ecdsaWithSHA224=e.id_ecdsaWithSHA1=e.id_ecMQV=e.id_ecDH=e.id_ecPublicKey=void 0,e.id_ecPublicKey=`1.2.840.10045.2.1`,e.id_ecDH=`1.3.132.1.12`,e.id_ecMQV=`1.3.132.1.13`,e.id_ecdsaWithSHA1=`1.2.840.10045.4.1`,e.id_ecdsaWithSHA224=`1.2.840.10045.4.3.1`,e.id_ecdsaWithSHA256=`1.2.840.10045.4.3.2`,e.id_ecdsaWithSHA384=`1.2.840.10045.4.3.3`,e.id_ecdsaWithSHA512=`1.2.840.10045.4.3.4`,e.id_secp192r1=`1.2.840.10045.3.1.1`,e.id_sect163k1=`1.3.132.0.1`,e.id_sect163r2=`1.3.132.0.15`,e.id_secp224r1=`1.3.132.0.33`,e.id_sect233k1=`1.3.132.0.26`,e.id_sect233r1=`1.3.132.0.27`,e.id_secp256r1=`1.2.840.10045.3.1.7`,e.id_sect283k1=`1.3.132.0.16`,e.id_sect283r1=`1.3.132.0.17`,e.id_secp384r1=`1.3.132.0.34`,e.id_sect409k1=`1.3.132.0.36`,e.id_sect409r1=`1.3.132.0.37`,e.id_secp521r1=`1.3.132.0.35`,e.id_sect571k1=`1.3.132.0.38`,e.id_sect571r1=`1.3.132.0.39`})),or=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ecdsaWithSHA512=e.ecdsaWithSHA384=e.ecdsaWithSHA256=e.ecdsaWithSHA224=e.ecdsaWithSHA1=void 0;let n=(G(),t(L)),r=Y(),i=n.__importStar(ar());function a(e){return new r.AlgorithmIdentifier({algorithm:e})}e.ecdsaWithSHA1=a(i.id_ecdsaWithSHA1),e.ecdsaWithSHA224=a(i.id_ecdsaWithSHA224),e.ecdsaWithSHA256=a(i.id_ecdsaWithSHA256),e.ecdsaWithSHA384=a(i.id_ecdsaWithSHA384),e.ecdsaWithSHA512=a(i.id_ecdsaWithSHA512)})),sr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SpecifiedECDomain=e.ECPVer=e.Curve=e.FieldElement=e.ECPoint=e.FieldID=void 0;let n=(G(),t(L)),r=q(),i=class{fieldType;parameters;constructor(e={}){Object.assign(this,e)}};e.FieldID=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`fieldType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any})],i.prototype,`parameters`,void 0),e.FieldID=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Sequence})],i);var a=class extends r.OctetString{};e.ECPoint=a,e.FieldElement=class extends r.OctetString{};let o=class{a;b;seed;constructor(e={}){Object.assign(this,e)}};e.Curve=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.OctetString})],o.prototype,`a`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.OctetString})],o.prototype,`b`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,optional:!0})],o.prototype,`seed`,void 0),e.Curve=o=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Sequence})],o);var s;(function(e){e[e.ecpVer1=1]=`ecpVer1`})(s||(e.ECPVer=s={}));let c=class{version=s.ecpVer1;fieldID;curve;base;order;cofactor;constructor(e={}){Object.assign(this,e)}};e.SpecifiedECDomain=c,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],c.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i})],c.prototype,`fieldID`,void 0),n.__decorate([(0,r.AsnProp)({type:o})],c.prototype,`curve`,void 0),n.__decorate([(0,r.AsnProp)({type:a})],c.prototype,`base`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],c.prototype,`order`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,optional:!0})],c.prototype,`cofactor`,void 0),e.SpecifiedECDomain=c=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Sequence})],c)})),cr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ECParameters=void 0;let n=(G(),t(L)),r=q(),i=sr(),a=class{namedCurve;implicitCurve;specifiedCurve;constructor(e={}){Object.assign(this,e)}};e.ECParameters=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`namedCurve`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Null})],a.prototype,`implicitCurve`,void 0),n.__decorate([(0,r.AsnProp)({type:i.SpecifiedECDomain})],a.prototype,`specifiedCurve`,void 0),e.ECParameters=a=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],a)})),lr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ECPrivateKey=void 0;let n=(G(),t(L)),r=q(),i=cr();var a=class{version=1;privateKey=new r.OctetString;parameters;publicKey;constructor(e={}){Object.assign(this,e)}};e.ECPrivateKey=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],a.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString})],a.prototype,`privateKey`,void 0),n.__decorate([(0,r.AsnProp)({type:i.ECParameters,context:0,optional:!0})],a.prototype,`parameters`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,context:1,optional:!0})],a.prototype,`publicKey`,void 0)})),ur=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ECDSASigValue=void 0;let n=(G(),t(L)),r=q();var i=class{r=new ArrayBuffer(0);s=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.ECDSASigValue=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`r`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`s`,void 0)})),dr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(or(),e),n.__exportStar(cr(),e),n.__exportStar(lr(),e),n.__exportStar(ur(),e),n.__exportStar(ar(),e),n.__exportStar(sr(),e)})),fr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_mgf1=e.id_md5=e.id_md2=e.id_sha512_256=e.id_sha512_224=e.id_sha512=e.id_sha384=e.id_sha256=e.id_sha224=e.id_sha1=e.id_sha512_256WithRSAEncryption=e.id_sha512_224WithRSAEncryption=e.id_sha512WithRSAEncryption=e.id_sha384WithRSAEncryption=e.id_sha256WithRSAEncryption=e.id_ssha224WithRSAEncryption=e.id_sha224WithRSAEncryption=e.id_sha1WithRSAEncryption=e.id_md5WithRSAEncryption=e.id_md2WithRSAEncryption=e.id_RSASSA_PSS=e.id_pSpecified=e.id_RSAES_OAEP=e.id_rsaEncryption=e.id_pkcs_1=void 0,e.id_pkcs_1=`1.2.840.113549.1.1`,e.id_rsaEncryption=`${e.id_pkcs_1}.1`,e.id_RSAES_OAEP=`${e.id_pkcs_1}.7`,e.id_pSpecified=`${e.id_pkcs_1}.9`,e.id_RSASSA_PSS=`${e.id_pkcs_1}.10`,e.id_md2WithRSAEncryption=`${e.id_pkcs_1}.2`,e.id_md5WithRSAEncryption=`${e.id_pkcs_1}.4`,e.id_sha1WithRSAEncryption=`${e.id_pkcs_1}.5`,e.id_sha224WithRSAEncryption=`${e.id_pkcs_1}.14`,e.id_ssha224WithRSAEncryption=e.id_sha224WithRSAEncryption,e.id_sha256WithRSAEncryption=`${e.id_pkcs_1}.11`,e.id_sha384WithRSAEncryption=`${e.id_pkcs_1}.12`,e.id_sha512WithRSAEncryption=`${e.id_pkcs_1}.13`,e.id_sha512_224WithRSAEncryption=`${e.id_pkcs_1}.15`,e.id_sha512_256WithRSAEncryption=`${e.id_pkcs_1}.16`,e.id_sha1=`1.3.14.3.2.26`,e.id_sha224=`2.16.840.1.101.3.4.2.4`,e.id_sha256=`2.16.840.1.101.3.4.2.1`,e.id_sha384=`2.16.840.1.101.3.4.2.2`,e.id_sha512=`2.16.840.1.101.3.4.2.3`,e.id_sha512_224=`2.16.840.1.101.3.4.2.5`,e.id_sha512_256=`2.16.840.1.101.3.4.2.6`,e.id_md2=`1.2.840.113549.2.2`,e.id_md5=`1.2.840.113549.2.5`,e.id_mgf1=`${e.id_pkcs_1}.8`})),pr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.sha512_256WithRSAEncryption=e.sha512_224WithRSAEncryption=e.sha512WithRSAEncryption=e.sha384WithRSAEncryption=e.sha256WithRSAEncryption=e.sha224WithRSAEncryption=e.sha1WithRSAEncryption=e.md5WithRSAEncryption=e.md2WithRSAEncryption=e.rsaEncryption=e.pSpecifiedEmpty=e.mgf1SHA1=e.sha512_256=e.sha512_224=e.sha512=e.sha384=e.sha256=e.sha224=e.sha1=e.md4=e.md2=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=n.__importStar(fr());function o(e){return new i.AlgorithmIdentifier({algorithm:e,parameters:null})}e.md2=o(a.id_md2),e.md4=o(a.id_md5),e.sha1=o(a.id_sha1),e.sha224=o(a.id_sha224),e.sha256=o(a.id_sha256),e.sha384=o(a.id_sha384),e.sha512=o(a.id_sha512),e.sha512_224=o(a.id_sha512_224),e.sha512_256=o(a.id_sha512_256),e.mgf1SHA1=new i.AlgorithmIdentifier({algorithm:a.id_mgf1,parameters:r.AsnConvert.serialize(e.sha1)}),e.pSpecifiedEmpty=new i.AlgorithmIdentifier({algorithm:a.id_pSpecified,parameters:r.AsnConvert.serialize(r.AsnOctetStringConverter.toASN(new Uint8Array([218,57,163,238,94,107,75,13,50,85,191,239,149,96,24,144,175,216,7,9]).buffer))}),e.rsaEncryption=o(a.id_rsaEncryption),e.md2WithRSAEncryption=o(a.id_md2WithRSAEncryption),e.md5WithRSAEncryption=o(a.id_md5WithRSAEncryption),e.sha1WithRSAEncryption=o(a.id_sha1WithRSAEncryption),e.sha224WithRSAEncryption=o(a.id_sha512_224WithRSAEncryption),e.sha256WithRSAEncryption=o(a.id_sha512_256WithRSAEncryption),e.sha384WithRSAEncryption=o(a.id_sha384WithRSAEncryption),e.sha512WithRSAEncryption=o(a.id_sha512WithRSAEncryption),e.sha512_224WithRSAEncryption=o(a.id_sha512_224WithRSAEncryption),e.sha512_256WithRSAEncryption=o(a.id_sha512_256WithRSAEncryption)})),mr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RSAES_OAEP=e.RsaEsOaepParams=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=fr(),o=pr();var s=class{hashAlgorithm=new i.AlgorithmIdentifier(o.sha1);maskGenAlgorithm=new i.AlgorithmIdentifier({algorithm:a.id_mgf1,parameters:r.AsnConvert.serialize(o.sha1)});pSourceAlgorithm=new i.AlgorithmIdentifier(o.pSpecifiedEmpty);constructor(e={}){Object.assign(this,e)}};e.RsaEsOaepParams=s,n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:0,defaultValue:o.sha1})],s.prototype,`hashAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:1,defaultValue:o.mgf1SHA1})],s.prototype,`maskGenAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:2,defaultValue:o.pSpecifiedEmpty})],s.prototype,`pSourceAlgorithm`,void 0),e.RSAES_OAEP=new i.AlgorithmIdentifier({algorithm:a.id_RSAES_OAEP,parameters:r.AsnConvert.serialize(new s)})})),hr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RSASSA_PSS=e.RsaSaPssParams=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=fr(),o=pr();var s=class{hashAlgorithm=new i.AlgorithmIdentifier(o.sha1);maskGenAlgorithm=new i.AlgorithmIdentifier({algorithm:a.id_mgf1,parameters:r.AsnConvert.serialize(o.sha1)});saltLength=20;trailerField=1;constructor(e={}){Object.assign(this,e)}};e.RsaSaPssParams=s,n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:0,defaultValue:o.sha1})],s.prototype,`hashAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:1,defaultValue:o.mgf1SHA1})],s.prototype,`maskGenAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:2,defaultValue:20})],s.prototype,`saltLength`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:3,defaultValue:1})],s.prototype,`trailerField`,void 0),e.RSASSA_PSS=new i.AlgorithmIdentifier({algorithm:a.id_RSASSA_PSS,parameters:r.AsnConvert.serialize(new s)})})),gr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.DigestInfo=void 0;let n=(G(),t(L)),r=Y(),i=q();var a=class{digestAlgorithm=new r.AlgorithmIdentifier;digest=new i.OctetString;constructor(e={}){Object.assign(this,e)}};e.DigestInfo=a,n.__decorate([(0,i.AsnProp)({type:r.AlgorithmIdentifier})],a.prototype,`digestAlgorithm`,void 0),n.__decorate([(0,i.AsnProp)({type:i.OctetString})],a.prototype,`digest`,void 0)})),_r=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(mr(),e),n.__exportStar(hr(),e),n.__exportStar(gr(),e)})),vr=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.OtherPrimeInfos=e.OtherPrimeInfo=void 0;let r=(G(),t(L)),i=q();var a=class{prime=new ArrayBuffer(0);exponent=new ArrayBuffer(0);coefficient=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherPrimeInfo=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,converter:i.AsnIntegerArrayBufferConverter})],a.prototype,`prime`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,converter:i.AsnIntegerArrayBufferConverter})],a.prototype,`exponent`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,converter:i.AsnIntegerArrayBufferConverter})],a.prototype,`coefficient`,void 0);let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.OtherPrimeInfos=o,e.OtherPrimeInfos=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a})],o)})),yr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RSAPrivateKey=void 0;let n=(G(),t(L)),r=q(),i=vr();var a=class{version=0;modulus=new ArrayBuffer(0);publicExponent=new ArrayBuffer(0);privateExponent=new ArrayBuffer(0);prime1=new ArrayBuffer(0);prime2=new ArrayBuffer(0);exponent1=new ArrayBuffer(0);exponent2=new ArrayBuffer(0);coefficient=new ArrayBuffer(0);otherPrimeInfos;constructor(e={}){Object.assign(this,e)}};e.RSAPrivateKey=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],a.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`modulus`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`publicExponent`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`privateExponent`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`prime1`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`prime2`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`exponent1`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`exponent2`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`coefficient`,void 0),n.__decorate([(0,r.AsnProp)({type:i.OtherPrimeInfos,optional:!0})],a.prototype,`otherPrimeInfos`,void 0)})),br=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RSAPublicKey=void 0;let n=(G(),t(L)),r=q();var i=class{modulus=new ArrayBuffer(0);publicExponent=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.RSAPublicKey=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`modulus`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`publicExponent`,void 0)})),xr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(_r(),e),n.__exportStar(pr(),e),n.__exportStar(fr(),e),n.__exportStar(vr(),e),n.__exportStar(yr(),e),n.__exportStar(br(),e)})),Sr=o({__assign:()=>Kr,__asyncDelegator:()=>Rr,__asyncGenerator:()=>Lr,__asyncValues:()=>zr,__await:()=>Ir,__awaiter:()=>Or,__classPrivateFieldGet:()=>Ur,__classPrivateFieldSet:()=>Wr,__createBinding:()=>Ar,__decorate:()=>Tr,__exportStar:()=>jr,__extends:()=>Cr,__generator:()=>kr,__importDefault:()=>Hr,__importStar:()=>Vr,__makeTemplateObject:()=>Br,__metadata:()=>Dr,__param:()=>Er,__read:()=>Nr,__rest:()=>wr,__spread:()=>Pr,__spreadArrays:()=>Fr,__values:()=>Mr});
88
+ `,r=[];for(let t=0;t<a.length;t+=e)r.push(p(a.slice(t,t+e),n.group));o=r.join(t)}else o=p(a,n.group);return`${n.prefix??``}${o}`}function _(e,t={}){let n=m(e,t),r=new Uint8Array(n.length/2);for(let e=0;e<n.length;e+=2)r[e/2]=Number.parseInt(n.slice(e,e+2),16);return r}function v(e,t={}){let n=m(e,t);return{bytes:_(n),format:d(e),normalized:n}}function y(e,t){return g(e,t)}e.formats={compact:Object.freeze({}),upper:Object.freeze({case:`upper`}),colon:Object.freeze({group:{size:1,separator:`:`}}),colonUpper:Object.freeze({case:`upper`,group:{size:1,separator:`:`}}),groupsOf4:Object.freeze({group:{size:4,separator:` `}}),prefixed:Object.freeze({prefix:`0x`})},e.hex={encode:g,decode:_,format:y,formats:e.formats,is:h,normalize:m,parse:v}})),Mt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.utf8=void 0,e.encode=n,e.decode=r;let t=mt();function n(e){return new TextEncoder().encode(e)}function r(e){return new TextDecoder(`utf-8`,{fatal:!1}).decode((0,t.toUint8Array)(e))}e.utf8={encode:n,decode:r}})),Nt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.utf16=void 0,e.encode=n,e.decode=r;let t=mt();function n(e,t={}){let n=new ArrayBuffer(e.length*2),r=new DataView(n);for(let n=0;n<e.length;n++)r.setUint16(n*2,e.charCodeAt(n),t.littleEndian??!1);return new Uint8Array(n)}function r(e,n={}){let r=(0,t.toArrayBuffer)(e),i=new DataView(r),a=``;for(let e=0;e<r.byteLength;e+=2)a+=String.fromCharCode(i.getUint16(e,n.littleEndian??!1));return a}e.utf16={encode:n,decode:r}})),Pt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.base64=void 0,e.normalize=a,e.pad=o,e.is=s,e.encode=c,e.decode=l;let t=mt(),n=At(),r=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;function i(){return globalThis.Buffer}function a(e){return e.replace(/[\n\r\t ]/g,``)}function o(e){let t=e.length%4;return t?e+`=`.repeat(4-t):e}function s(e){if(typeof e!=`string`)return!1;let t=a(e);return t===``||r.test(t)}function c(e,r){let a=(0,t.toUint8Array)(e),o=i();return o?o.from(a).toString(`base64`):btoa((0,n.encode)(a))}function l(e,t){let r=a(e);if(!s(r))throw TypeError(`Input is not valid Base64 text`);let o=i();return o?new Uint8Array(o.from(r,`base64`)):(0,n.decode)(atob(r))}e.base64={encode:c,decode:l,is:s,normalize:a,pad:o}})),Ft=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.base64url=void 0,e.normalize=r,e.is=i,e.encode=a,e.decode=o;let t=Pt(),n=/^[A-Za-z0-9_-]*$/;function r(e){return e.replace(/[\n\r\t ]/g,``)}function i(e){return typeof e==`string`&&n.test(r(e))}function a(e,n){return t.base64.encode(e).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=+$/g,``)}function o(e,n){let a=r(e);if(!i(a))throw TypeError(`Input is not valid Base64Url text`);return t.base64.decode(t.base64.pad(a.replace(/-/g,`+`).replace(/_/g,`/`)))}e.base64url={encode:a,decode:o,is:i,normalize:r}})),It=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.base64url=e.base64=e.utf16=e.utf8=e.hex=e.binary=void 0;let n=(K(),t(B));e.binary=n.__importStar(At()),e.hex=n.__importStar(jt()),e.utf8=n.__importStar(Mt()),e.utf16=n.__importStar(Nt()),e.base64=n.__importStar(Pt()),e.base64url=n.__importStar(Ft())})),Lt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IpConverter=void 0;let t=It();e.IpConverter=class{static isIPv4(e){return/^(\d{1,3}\.){3}\d{1,3}$/.test(e)}static parseIPv4(e){let t=e.split(`.`);if(t.length!==4)throw Error(`Invalid IPv4 address`);return t.map(e=>{let t=parseInt(e,10);if(isNaN(t)||t<0||t>255)throw Error(`Invalid IPv4 address part`);return t})}static parseIPv6(e){let t=this.expandIPv6(e).split(`:`);if(t.length!==8)throw Error(`Invalid IPv6 address`);return t.reduce((e,t)=>{let n=parseInt(t,16);if(isNaN(n)||n<0||n>65535)throw Error(`Invalid IPv6 address part`);return e.push(n>>8&255),e.push(n&255),e},[])}static expandIPv6(e){if(!e.includes(`::`))return e;let t=e.split(`::`);if(t.length>2)throw Error(`Invalid IPv6 address`);let n=t[0]?t[0].split(`:`):[],r=t[1]?t[1].split(`:`):[],i=8-(n.length+r.length);if(i<0)throw Error(`Invalid IPv6 address`);return[...n,...Array(i).fill(`0`),...r].join(`:`)}static formatIPv6(e){let t=[];for(let n=0;n<16;n+=2)t.push((e[n]<<8|e[n+1]).toString(16));return this.compressIPv6(t.join(`:`))}static compressIPv6(e){let t=e.split(`:`),n=-1,r=0,i=-1,a=0;for(let e=0;e<t.length;e++)t[e]===`0`?(i===-1&&(i=e),a++):(a>r&&(n=i,r=a),i=-1,a=0);return a>r&&(n=i,r=a),r>1?`${t.slice(0,n).join(`:`)}::${t.slice(n+r).join(`:`)}`:e}static parseCIDR(e){let[t,n]=e.split(`/`),r=parseInt(n,10);if(this.isIPv4(t)){if(r<0||r>32)throw Error(`Invalid IPv4 prefix length`);return[this.parseIPv4(t),r]}if(r<0||r>128)throw Error(`Invalid IPv6 prefix length`);return[this.parseIPv6(t),r]}static decodeIP(e){if(e.length===64&&parseInt(e,16)===0)return`::/0`;if(e.length!==16)return e;let t=parseInt(e.slice(8),16).toString(2).split(``).reduce((e,t)=>e+ +t,0),n=e.slice(0,8).replace(/(.{2})/g,e=>`${parseInt(e,16)}.`);return n=n.slice(0,-1),`${n}/${t}`}static toString(e){let n=new Uint8Array(e);if(n.length===4)return Array.from(n).join(`.`);if(n.length===16)return this.formatIPv6(n);if(n.length===8||n.length===32){let e=n.length/2,t=n.slice(0,e),r=n.slice(e);if(n.every(e=>e===0))return n.length===8?`0.0.0.0/0`:`::/0`;let i=r.reduce((e,t)=>e+(t.toString(2).match(/1/g)||[]).length,0);return n.length===8?`${Array.from(t).join(`.`)}/${i}`:`${this.formatIPv6(t)}/${i}`}return this.decodeIP(t.hex.encode(e))}static fromString(e){if(e.includes(`/`)){let[t,n]=this.parseCIDR(e),r=new Uint8Array(t.length),i=n;for(let e=0;e<r.length;e++)i>=8?(r[e]=255,i-=8):i>0&&(r[e]=255<<8-i,i=0);let a=new Uint8Array(t.length*2);return a.set(t,0),a.set(r,t.length),a.buffer}let t=this.isIPv4(e)?this.parseIPv4(e):this.parseIPv6(e);return new Uint8Array(t).buffer}}})),Rt=i((e=>{var n,r,i;Object.defineProperty(e,"__esModule",{value:!0}),e.Name=e.RDNSequence=e.RelativeDistinguishedName=e.AttributeTypeAndValue=e.AttributeValue=e.DirectoryString=void 0;let a=(K(),t(B)),o=q(),s=It(),c=class{teletexString;printableString;universalString;utf8String;bmpString;constructor(e={}){Object.assign(this,e)}toString(){return this.bmpString||this.printableString||this.teletexString||this.universalString||this.utf8String||``}};e.DirectoryString=c,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.TeletexString})],c.prototype,`teletexString`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.PrintableString})],c.prototype,`printableString`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.UniversalString})],c.prototype,`universalString`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.Utf8String})],c.prototype,`utf8String`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.BmpString})],c.prototype,`bmpString`,void 0),e.DirectoryString=c=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],c);let l=class extends c{ia5String;anyValue;constructor(e={}){super(e),Object.assign(this,e)}toString(){return this.ia5String||(this.anyValue?s.hex.encode(this.anyValue):super.toString())}};e.AttributeValue=l,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.IA5String})],l.prototype,`ia5String`,void 0),a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.Any})],l.prototype,`anyValue`,void 0),e.AttributeValue=l=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],l);var u=class{type=``;value=new l;constructor(e={}){Object.assign(this,e)}};e.AttributeTypeAndValue=u,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.ObjectIdentifier})],u.prototype,`type`,void 0),a.__decorate([(0,o.AsnProp)({type:l})],u.prototype,`value`,void 0);let d=n=class extends o.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.RelativeDistinguishedName=d,e.RelativeDistinguishedName=d=n=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Set,itemType:u})],d);let f=r=class extends o.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,r.prototype)}};e.RDNSequence=f,e.RDNSequence=f=r=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence,itemType:d})],f);let p=i=class extends f{constructor(e){super(e),Object.setPrototypeOf(this,i.prototype)}};e.Name=p,e.Name=p=i=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],p)})),zt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.GeneralName=e.EDIPartyName=e.OtherName=e.AsnIpConverter=void 0;let n=(K(),t(B)),r=q(),i=Lt(),a=Rt();e.AsnIpConverter={fromASN:e=>i.IpConverter.toString(r.AsnOctetStringConverter.fromASN(e)),toASN:e=>r.AsnOctetStringConverter.toASN(i.IpConverter.fromString(e))};var o=class{typeId=``;value=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherName=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],o.prototype,`typeId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],o.prototype,`value`,void 0);var s=class{nameAssigner;partyName=new a.DirectoryString;constructor(e={}){Object.assign(this,e)}};e.EDIPartyName=s,n.__decorate([(0,r.AsnProp)({type:a.DirectoryString,optional:!0,context:0,implicit:!0})],s.prototype,`nameAssigner`,void 0),n.__decorate([(0,r.AsnProp)({type:a.DirectoryString,context:1,implicit:!0})],s.prototype,`partyName`,void 0);let c=class{otherName;rfc822Name;dNSName;x400Address;directoryName;ediPartyName;uniformResourceIdentifier;iPAddress;registeredID;constructor(e={}){Object.assign(this,e)}};e.GeneralName=c,n.__decorate([(0,r.AsnProp)({type:o,context:0,implicit:!0})],c.prototype,`otherName`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.IA5String,context:1,implicit:!0})],c.prototype,`rfc822Name`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.IA5String,context:2,implicit:!0})],c.prototype,`dNSName`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:3,implicit:!0})],c.prototype,`x400Address`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Name,context:4,implicit:!1})],c.prototype,`directoryName`,void 0),n.__decorate([(0,r.AsnProp)({type:s,context:5})],c.prototype,`ediPartyName`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.IA5String,context:6,implicit:!0})],c.prototype,`uniformResourceIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.OctetString,context:7,implicit:!0,converter:e.AsnIpConverter})],c.prototype,`iPAddress`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier,context:8,implicit:!0})],c.prototype,`registeredID`,void 0),e.GeneralName=c=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],c)})),J=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_ce=e.id_ad_caRepository=e.id_ad_timeStamping=e.id_ad_caIssuers=e.id_ad_ocsp=e.id_qt_unotice=e.id_qt_csp=e.id_ad=e.id_kp=e.id_qt=e.id_pe=e.id_pkix=void 0,e.id_pkix=`1.3.6.1.5.5.7`,e.id_pe=`${e.id_pkix}.1`,e.id_qt=`${e.id_pkix}.2`,e.id_kp=`${e.id_pkix}.3`,e.id_ad=`${e.id_pkix}.48`,e.id_qt_csp=`${e.id_qt}.1`,e.id_qt_unotice=`${e.id_qt}.2`,e.id_ad_ocsp=`${e.id_ad}.1`,e.id_ad_caIssuers=`${e.id_ad}.2`,e.id_ad_timeStamping=`${e.id_ad}.3`,e.id_ad_caRepository=`${e.id_ad}.5`,e.id_ce=`2.5.29`})),Bt=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.AuthorityInfoAccessSyntax=e.AccessDescription=e.id_pe_authorityInfoAccess=void 0;let r=(K(),t(B)),i=q(),a=zt();e.id_pe_authorityInfoAccess=`${J().id_pe}.1`;var o=class{accessMethod=``;accessLocation=new a.GeneralName;constructor(e={}){Object.assign(this,e)}};e.AccessDescription=o,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],o.prototype,`accessMethod`,void 0),r.__decorate([(0,i.AsnProp)({type:a.GeneralName})],o.prototype,`accessLocation`,void 0);let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.AuthorityInfoAccessSyntax=s,e.AuthorityInfoAccessSyntax=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o})],s)})),Vt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AuthorityKeyIdentifier=e.KeyIdentifier=e.id_ce_authorityKeyIdentifier=void 0;let n=(K(),t(B)),r=q(),i=zt();e.id_ce_authorityKeyIdentifier=`${J().id_ce}.35`;var a=class extends r.OctetString{};e.KeyIdentifier=a;var o=class{keyIdentifier;authorityCertIssuer;authorityCertSerialNumber;constructor(e={}){e&&Object.assign(this,e)}};e.AuthorityKeyIdentifier=o,n.__decorate([(0,r.AsnProp)({type:a,context:0,optional:!0,implicit:!0})],o.prototype,`keyIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:i.GeneralName,context:1,optional:!0,implicit:!0,repeated:`sequence`})],o.prototype,`authorityCertIssuer`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:2,optional:!0,implicit:!0,converter:r.AsnIntegerArrayBufferConverter})],o.prototype,`authorityCertSerialNumber`,void 0)})),Ht=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.BasicConstraints=e.id_ce_basicConstraints=void 0;let n=(K(),t(B)),r=q();e.id_ce_basicConstraints=`${J().id_ce}.19`;var i=class{cA=!1;pathLenConstraint;constructor(e={}){Object.assign(this,e)}};e.BasicConstraints=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,defaultValue:!1})],i.prototype,`cA`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,optional:!0})],i.prototype,`pathLenConstraint`,void 0)})),Ut=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.GeneralNames=void 0;let r=(K(),t(B)),i=q(),a=zt(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.GeneralNames=o,e.GeneralNames=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.GeneralName})],o)})),Wt=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.CertificateIssuer=e.id_ce_certificateIssuer=void 0;let r=(K(),t(B)),i=q(),a=Ut();e.id_ce_certificateIssuer=`${J().id_ce}.29`;let o=n=class extends a.GeneralNames{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.CertificateIssuer=o,e.CertificateIssuer=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],o)})),Gt=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.CertificatePolicies=e.PolicyInformation=e.PolicyQualifierInfo=e.Qualifier=e.UserNotice=e.NoticeReference=e.DisplayText=e.id_ce_certificatePolicies_anyPolicy=e.id_ce_certificatePolicies=void 0;let r=(K(),t(B)),i=q();e.id_ce_certificatePolicies=`${J().id_ce}.32`,e.id_ce_certificatePolicies_anyPolicy=`${e.id_ce_certificatePolicies}.0`;let a=class{ia5String;visibleString;bmpString;utf8String;constructor(e={}){Object.assign(this,e)}toString(){return this.ia5String||this.visibleString||this.bmpString||this.utf8String||``}};e.DisplayText=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.IA5String})],a.prototype,`ia5String`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.VisibleString})],a.prototype,`visibleString`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.BmpString})],a.prototype,`bmpString`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Utf8String})],a.prototype,`utf8String`,void 0),e.DisplayText=a=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],a);var o=class{organization=new a;noticeNumbers=[];constructor(e={}){Object.assign(this,e)}};e.NoticeReference=o,r.__decorate([(0,i.AsnProp)({type:a})],o.prototype,`organization`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,repeated:`sequence`})],o.prototype,`noticeNumbers`,void 0);var s=class{noticeRef;explicitText;constructor(e={}){Object.assign(this,e)}};e.UserNotice=s,r.__decorate([(0,i.AsnProp)({type:o,optional:!0})],s.prototype,`noticeRef`,void 0),r.__decorate([(0,i.AsnProp)({type:a,optional:!0})],s.prototype,`explicitText`,void 0);let c=class{cPSuri;userNotice;constructor(e={}){Object.assign(this,e)}};e.Qualifier=c,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.IA5String})],c.prototype,`cPSuri`,void 0),r.__decorate([(0,i.AsnProp)({type:s})],c.prototype,`userNotice`,void 0),e.Qualifier=c=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],c);var l=class{policyQualifierId=``;qualifier=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.PolicyQualifierInfo=l,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],l.prototype,`policyQualifierId`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any})],l.prototype,`qualifier`,void 0);var u=class{policyIdentifier=``;policyQualifiers;constructor(e={}){Object.assign(this,e)}};e.PolicyInformation=u,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],u.prototype,`policyIdentifier`,void 0),r.__decorate([(0,i.AsnProp)({type:l,repeated:`sequence`,optional:!0})],u.prototype,`policyQualifiers`,void 0);let d=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.CertificatePolicies=d,e.CertificatePolicies=d=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:u})],d)})),Kt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CRLNumber=e.id_ce_cRLNumber=void 0;let n=(K(),t(B)),r=q();e.id_ce_cRLNumber=`${J().id_ce}.20`;let i=class{value;constructor(e=0){this.value=e}};e.CRLNumber=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],i.prototype,`value`,void 0),e.CRLNumber=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i)})),qt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.BaseCRLNumber=e.id_ce_deltaCRLIndicator=void 0;let n=(K(),t(B)),r=q(),i=J(),a=Kt();e.id_ce_deltaCRLIndicator=`${i.id_ce}.27`;let o=class extends a.CRLNumber{};e.BaseCRLNumber=o,e.BaseCRLNumber=o=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],o)})),Jt=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.CRLDistributionPoints=e.DistributionPoint=e.DistributionPointName=e.Reason=e.ReasonFlags=e.id_ce_cRLDistributionPoints=void 0;let r=(K(),t(B)),i=q(),a=Rt(),o=zt();e.id_ce_cRLDistributionPoints=`${J().id_ce}.31`;var s;(function(e){e[e.unused=1]=`unused`,e[e.keyCompromise=2]=`keyCompromise`,e[e.cACompromise=4]=`cACompromise`,e[e.affiliationChanged=8]=`affiliationChanged`,e[e.superseded=16]=`superseded`,e[e.cessationOfOperation=32]=`cessationOfOperation`,e[e.certificateHold=64]=`certificateHold`,e[e.privilegeWithdrawn=128]=`privilegeWithdrawn`,e[e.aACompromise=256]=`aACompromise`})(s||(e.ReasonFlags=s={}));var c=class extends i.BitString{toJSON(){let e=[],t=this.toNumber();return t&s.aACompromise&&e.push(`aACompromise`),t&s.affiliationChanged&&e.push(`affiliationChanged`),t&s.cACompromise&&e.push(`cACompromise`),t&s.certificateHold&&e.push(`certificateHold`),t&s.cessationOfOperation&&e.push(`cessationOfOperation`),t&s.keyCompromise&&e.push(`keyCompromise`),t&s.privilegeWithdrawn&&e.push(`privilegeWithdrawn`),t&s.superseded&&e.push(`superseded`),t&s.unused&&e.push(`unused`),e}toString(){return`[${this.toJSON().join(`, `)}]`}};e.Reason=c;let l=class{fullName;nameRelativeToCRLIssuer;constructor(e={}){Object.assign(this,e)}};e.DistributionPointName=l,r.__decorate([(0,i.AsnProp)({type:o.GeneralName,context:0,repeated:`sequence`,implicit:!0})],l.prototype,`fullName`,void 0),r.__decorate([(0,i.AsnProp)({type:a.RelativeDistinguishedName,context:1,implicit:!0})],l.prototype,`nameRelativeToCRLIssuer`,void 0),e.DistributionPointName=l=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],l);var u=class{distributionPoint;reasons;cRLIssuer;constructor(e={}){Object.assign(this,e)}};e.DistributionPoint=u,r.__decorate([(0,i.AsnProp)({type:l,context:0,optional:!0})],u.prototype,`distributionPoint`,void 0),r.__decorate([(0,i.AsnProp)({type:c,context:1,optional:!0,implicit:!0})],u.prototype,`reasons`,void 0),r.__decorate([(0,i.AsnProp)({type:o.GeneralName,context:2,optional:!0,repeated:`sequence`,implicit:!0})],u.prototype,`cRLIssuer`,void 0);let d=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.CRLDistributionPoints=d,e.CRLDistributionPoints=d=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:u})],d)})),Yt=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.FreshestCRL=e.id_ce_freshestCRL=void 0;let r=(K(),t(B)),i=q(),a=J(),o=Jt();e.id_ce_freshestCRL=`${a.id_ce}.46`;let s=n=class extends o.CRLDistributionPoints{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.FreshestCRL=s,e.FreshestCRL=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o.DistributionPoint})],s)})),Xt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IssuingDistributionPoint=e.id_ce_issuingDistributionPoint=void 0;let n=(K(),t(B)),r=q(),i=J(),a=Jt();e.id_ce_issuingDistributionPoint=`${i.id_ce}.28`;var o=class e{static ONLY=!1;distributionPoint;onlyContainsUserCerts=e.ONLY;onlyContainsCACerts=e.ONLY;onlySomeReasons;indirectCRL=e.ONLY;onlyContainsAttributeCerts=e.ONLY;constructor(e={}){Object.assign(this,e)}};e.IssuingDistributionPoint=o,n.__decorate([(0,r.AsnProp)({type:a.DistributionPointName,context:0,optional:!0})],o.prototype,`distributionPoint`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,context:1,defaultValue:o.ONLY,implicit:!0})],o.prototype,`onlyContainsUserCerts`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,context:2,defaultValue:o.ONLY,implicit:!0})],o.prototype,`onlyContainsCACerts`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Reason,context:3,optional:!0,implicit:!0})],o.prototype,`onlySomeReasons`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,context:4,defaultValue:o.ONLY,implicit:!0})],o.prototype,`indirectCRL`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,context:5,defaultValue:o.ONLY,implicit:!0})],o.prototype,`onlyContainsAttributeCerts`,void 0)})),Zt=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CRLReason=e.CRLReasons=e.id_ce_cRLReasons=void 0;let n=(K(),t(B)),r=q();e.id_ce_cRLReasons=`${J().id_ce}.21`;var i;(function(e){e[e.unspecified=0]=`unspecified`,e[e.keyCompromise=1]=`keyCompromise`,e[e.cACompromise=2]=`cACompromise`,e[e.affiliationChanged=3]=`affiliationChanged`,e[e.superseded=4]=`superseded`,e[e.cessationOfOperation=5]=`cessationOfOperation`,e[e.certificateHold=6]=`certificateHold`,e[e.removeFromCRL=8]=`removeFromCRL`,e[e.privilegeWithdrawn=9]=`privilegeWithdrawn`,e[e.aACompromise=10]=`aACompromise`})(i||(e.CRLReasons=i={}));let a=class{reason=i.unspecified;constructor(e=i.unspecified){this.reason=e}toJSON(){return i[this.reason]}toString(){return this.toJSON()}};e.CRLReason=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Enumerated})],a.prototype,`reason`,void 0),e.CRLReason=a=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],a)})),Qt=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.id_kp_OCSPSigning=e.id_kp_timeStamping=e.id_kp_emailProtection=e.id_kp_codeSigning=e.id_kp_clientAuth=e.id_kp_serverAuth=e.anyExtendedKeyUsage=e.ExtendedKeyUsage=e.id_ce_extKeyUsage=void 0;let r=(K(),t(B)),i=q(),a=J();e.id_ce_extKeyUsage=`${a.id_ce}.37`;let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.ExtendedKeyUsage=o,e.ExtendedKeyUsage=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:i.AsnPropTypes.ObjectIdentifier})],o),e.anyExtendedKeyUsage=`${e.id_ce_extKeyUsage}.0`,e.id_kp_serverAuth=`${a.id_kp}.1`,e.id_kp_clientAuth=`${a.id_kp}.2`,e.id_kp_codeSigning=`${a.id_kp}.3`,e.id_kp_emailProtection=`${a.id_kp}.4`,e.id_kp_timeStamping=`${a.id_kp}.8`,e.id_kp_OCSPSigning=`${a.id_kp}.9`})),$t=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.InhibitAnyPolicy=e.id_ce_inhibitAnyPolicy=void 0;let n=(K(),t(B)),r=q();e.id_ce_inhibitAnyPolicy=`${J().id_ce}.54`;let i=class{value;constructor(e=new ArrayBuffer(0)){this.value=e}};e.InhibitAnyPolicy=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`value`,void 0),e.InhibitAnyPolicy=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i)})),en=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.InvalidityDate=e.id_ce_invalidityDate=void 0;let n=(K(),t(B)),r=q();e.id_ce_invalidityDate=`${J().id_ce}.24`;let i=class{value=new Date;constructor(e){e&&(this.value=e)}};e.InvalidityDate=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime})],i.prototype,`value`,void 0),e.InvalidityDate=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i)})),tn=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.IssueAlternativeName=e.id_ce_issuerAltName=void 0;let r=(K(),t(B)),i=q(),a=Ut();e.id_ce_issuerAltName=`${J().id_ce}.18`;let o=n=class extends a.GeneralNames{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.IssueAlternativeName=o,e.IssueAlternativeName=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],o)})),nn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KeyUsage=e.KeyUsageFlags=e.id_ce_keyUsage=void 0;let t=q();e.id_ce_keyUsage=`${J().id_ce}.15`;var n;(function(e){e[e.digitalSignature=1]=`digitalSignature`,e[e.nonRepudiation=2]=`nonRepudiation`,e[e.keyEncipherment=4]=`keyEncipherment`,e[e.dataEncipherment=8]=`dataEncipherment`,e[e.keyAgreement=16]=`keyAgreement`,e[e.keyCertSign=32]=`keyCertSign`,e[e.cRLSign=64]=`cRLSign`,e[e.encipherOnly=128]=`encipherOnly`,e[e.decipherOnly=256]=`decipherOnly`})(n||(e.KeyUsageFlags=n={})),e.KeyUsage=class extends t.BitString{toJSON(){let e=this.toNumber(),t=[];return e&n.cRLSign&&t.push(`crlSign`),e&n.dataEncipherment&&t.push(`dataEncipherment`),e&n.decipherOnly&&t.push(`decipherOnly`),e&n.digitalSignature&&t.push(`digitalSignature`),e&n.encipherOnly&&t.push(`encipherOnly`),e&n.keyAgreement&&t.push(`keyAgreement`),e&n.keyCertSign&&t.push(`keyCertSign`),e&n.keyEncipherment&&t.push(`keyEncipherment`),e&n.nonRepudiation&&t.push(`nonRepudiation`),t}toString(){return`[${this.toJSON().join(`, `)}]`}}})),rn=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.NameConstraints=e.GeneralSubtrees=e.GeneralSubtree=e.id_ce_nameConstraints=void 0;let r=(K(),t(B)),i=q(),a=zt();e.id_ce_nameConstraints=`${J().id_ce}.30`;var o=class{base=new a.GeneralName;minimum=0;maximum;constructor(e={}){Object.assign(this,e)}};e.GeneralSubtree=o,r.__decorate([(0,i.AsnProp)({type:a.GeneralName})],o.prototype,`base`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,context:0,defaultValue:0,implicit:!0})],o.prototype,`minimum`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,context:1,optional:!0,implicit:!0})],o.prototype,`maximum`,void 0);let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.GeneralSubtrees=s,e.GeneralSubtrees=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o})],s);var c=class{permittedSubtrees;excludedSubtrees;constructor(e={}){Object.assign(this,e)}};e.NameConstraints=c,r.__decorate([(0,i.AsnProp)({type:s,context:0,optional:!0,implicit:!0})],c.prototype,`permittedSubtrees`,void 0),r.__decorate([(0,i.AsnProp)({type:s,context:1,optional:!0,implicit:!0})],c.prototype,`excludedSubtrees`,void 0)})),an=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PolicyConstraints=e.id_ce_policyConstraints=void 0;let n=(K(),t(B)),r=q();e.id_ce_policyConstraints=`${J().id_ce}.36`;var i=class{requireExplicitPolicy;inhibitPolicyMapping;constructor(e={}){Object.assign(this,e)}};e.PolicyConstraints=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:0,implicit:!0,optional:!0,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`requireExplicitPolicy`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:1,implicit:!0,optional:!0,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`inhibitPolicyMapping`,void 0)})),on=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.PolicyMappings=e.PolicyMapping=e.id_ce_policyMappings=void 0;let r=(K(),t(B)),i=q();e.id_ce_policyMappings=`${J().id_ce}.33`;var a=class{issuerDomainPolicy=``;subjectDomainPolicy=``;constructor(e={}){Object.assign(this,e)}};e.PolicyMapping=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`issuerDomainPolicy`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`subjectDomainPolicy`,void 0);let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.PolicyMappings=o,e.PolicyMappings=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a})],o)})),sn=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectAlternativeName=e.id_ce_subjectAltName=void 0;let r=(K(),t(B)),i=q(),a=Ut();e.id_ce_subjectAltName=`${J().id_ce}.17`;let o=n=class extends a.GeneralNames{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SubjectAlternativeName=o,e.SubjectAlternativeName=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],o)})),cn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Attribute=void 0;let n=(K(),t(B)),r=q();var i=class{type=``;values=[];constructor(e={}){Object.assign(this,e)}};e.Attribute=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`type`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,repeated:`set`})],i.prototype,`values`,void 0)})),ln=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectDirectoryAttributes=e.id_ce_subjectDirectoryAttributes=void 0;let r=(K(),t(B)),i=q(),a=cn();e.id_ce_subjectDirectoryAttributes=`${J().id_ce}.9`;let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SubjectDirectoryAttributes=o,e.SubjectDirectoryAttributes=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.Attribute})],o)})),un=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectKeyIdentifier=e.id_ce_subjectKeyIdentifier=void 0;let t=J(),n=Vt();e.id_ce_subjectKeyIdentifier=`${t.id_ce}.14`,e.SubjectKeyIdentifier=class extends n.KeyIdentifier{}})),dn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PrivateKeyUsagePeriod=e.id_ce_privateKeyUsagePeriod=void 0;let n=(K(),t(B)),r=q();e.id_ce_privateKeyUsagePeriod=`${J().id_ce}.16`;var i=class{notBefore;notAfter;constructor(e={}){Object.assign(this,e)}};e.PrivateKeyUsagePeriod=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime,context:0,implicit:!0,optional:!0})],i.prototype,`notBefore`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime,context:1,implicit:!0,optional:!0})],i.prototype,`notAfter`,void 0)})),fn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.EntrustVersionInfo=e.EntrustInfo=e.EntrustInfoFlags=e.id_entrust_entrustVersInfo=void 0;let n=(K(),t(B)),r=q();e.id_entrust_entrustVersInfo=`1.2.840.113533.7.65.0`;var i;(function(e){e[e.keyUpdateAllowed=1]=`keyUpdateAllowed`,e[e.newExtensions=2]=`newExtensions`,e[e.pKIXCertificate=4]=`pKIXCertificate`})(i||(e.EntrustInfoFlags=i={}));var a=class extends r.BitString{toJSON(){let e=[],t=this.toNumber();return t&i.pKIXCertificate&&e.push(`pKIXCertificate`),t&i.newExtensions&&e.push(`newExtensions`),t&i.keyUpdateAllowed&&e.push(`keyUpdateAllowed`),e}toString(){return`[${this.toJSON().join(`, `)}]`}};e.EntrustInfo=a;var o=class{entrustVers=``;entrustInfoFlags=new a;constructor(e={}){Object.assign(this,e)}};e.EntrustVersionInfo=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralString})],o.prototype,`entrustVers`,void 0),n.__decorate([(0,r.AsnProp)({type:a})],o.prototype,`entrustInfoFlags`,void 0)})),pn=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectInfoAccessSyntax=e.id_pe_subjectInfoAccess=void 0;let r=(K(),t(B)),i=q(),a=J(),o=Bt();e.id_pe_subjectInfoAccess=`${a.id_pe}.11`;let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SubjectInfoAccessSyntax=s,e.SubjectInfoAccessSyntax=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o.AccessDescription})],s)})),mn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(Bt(),e),n.__exportStar(Vt(),e),n.__exportStar(Ht(),e),n.__exportStar(Wt(),e),n.__exportStar(Gt(),e),n.__exportStar(qt(),e),n.__exportStar(Jt(),e),n.__exportStar(Yt(),e),n.__exportStar(Xt(),e),n.__exportStar(Kt(),e),n.__exportStar(Zt(),e),n.__exportStar(Qt(),e),n.__exportStar($t(),e),n.__exportStar(en(),e),n.__exportStar(tn(),e),n.__exportStar(nn(),e),n.__exportStar(rn(),e),n.__exportStar(an(),e),n.__exportStar(on(),e),n.__exportStar(sn(),e),n.__exportStar(ln(),e),n.__exportStar(un(),e),n.__exportStar(dn(),e),n.__exportStar(fn(),e),n.__exportStar(pn(),e)})),hn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AlgorithmIdentifier=void 0;let n=(K(),t(B)),r=q(),i=mt();var a=class e{algorithm=``;parameters;constructor(e={}){Object.assign(this,e)}isEqual(t){return t instanceof e&&t.algorithm==this.algorithm&&(t.parameters&&this.parameters&&(0,i.equal)(t.parameters,this.parameters)||t.parameters===this.parameters)}};e.AlgorithmIdentifier=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`algorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,optional:!0})],a.prototype,`parameters`,void 0)})),gn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SubjectPublicKeyInfo=void 0;let n=(K(),t(B)),r=q(),i=hn();var a=class{algorithm=new i.AlgorithmIdentifier;subjectPublicKey=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.SubjectPublicKeyInfo=a,n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],a.prototype,`algorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],a.prototype,`subjectPublicKey`,void 0)})),_n=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Time=void 0;let n=(K(),t(B)),r=q(),i=class{utcTime;generalTime;constructor(e){if(e){if(typeof e==`string`||typeof e==`number`||e instanceof Date){let t=new Date(e);t.setMilliseconds(0),t.getUTCFullYear()>2049?this.generalTime=t:this.utcTime=t}else Object.assign(this,e)}}getTime(){let e=this.utcTime||this.generalTime;if(!e)throw Error(`Cannot get time from CHOICE object`);return e}};e.Time=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.UTCTime})],i.prototype,`utcTime`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime})],i.prototype,`generalTime`,void 0),e.Time=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i)})),vn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Validity=void 0;let n=(K(),t(B)),r=q(),i=_n();var a=class{notBefore=new i.Time(new Date);notAfter=new i.Time(new Date);constructor(e){e&&(this.notBefore=new i.Time(e.notBefore),this.notAfter=new i.Time(e.notAfter))}};e.Validity=a,n.__decorate([(0,r.AsnProp)({type:i.Time})],a.prototype,`notBefore`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Time})],a.prototype,`notAfter`,void 0)})),yn=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.Extensions=e.Extension=void 0;let r=(K(),t(B)),i=q();var a=class e{static CRITICAL=!1;extnID=``;critical=e.CRITICAL;extnValue=new i.OctetString;constructor(e={}){Object.assign(this,e)}};e.Extension=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`extnID`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Boolean,defaultValue:a.CRITICAL})],a.prototype,`critical`,void 0),r.__decorate([(0,i.AsnProp)({type:i.OctetString})],a.prototype,`extnValue`,void 0);let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.Extensions=o,e.Extensions=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a})],o)})),bn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Version=void 0;var t;(function(e){e[e.v1=0]=`v1`,e[e.v2=1]=`v2`,e[e.v3=2]=`v3`})(t||(e.Version=t={}))})),xn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.TBSCertificate=void 0;let n=(K(),t(B)),r=q(),i=hn(),a=Rt(),o=gn(),s=vn(),c=yn(),l=bn();var u=class{version=l.Version.v1;serialNumber=new ArrayBuffer(0);signature=new i.AlgorithmIdentifier;issuer=new a.Name;validity=new s.Validity;subject=new a.Name;subjectPublicKeyInfo=new o.SubjectPublicKeyInfo;issuerUniqueID;subjectUniqueID;extensions;constructor(e={}){Object.assign(this,e)}};e.TBSCertificate=u,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:0,defaultValue:l.Version.v1})],u.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],u.prototype,`serialNumber`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],u.prototype,`signature`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Name})],u.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:s.Validity})],u.prototype,`validity`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Name})],u.prototype,`subject`,void 0),n.__decorate([(0,r.AsnProp)({type:o.SubjectPublicKeyInfo})],u.prototype,`subjectPublicKeyInfo`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,context:1,implicit:!0,optional:!0})],u.prototype,`issuerUniqueID`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,context:2,implicit:!0,optional:!0})],u.prototype,`subjectUniqueID`,void 0),n.__decorate([(0,r.AsnProp)({type:c.Extensions,context:3,optional:!0})],u.prototype,`extensions`,void 0)})),Sn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Certificate=void 0;let n=(K(),t(B)),r=q(),i=hn(),a=xn();var o=class{tbsCertificate=new a.TBSCertificate;tbsCertificateRaw;signatureAlgorithm=new i.AlgorithmIdentifier;signatureValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.Certificate=o,n.__decorate([(0,r.AsnProp)({type:a.TBSCertificate,raw:!0})],o.prototype,`tbsCertificate`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`signatureAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`signatureValue`,void 0)})),Cn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.TBSCertList=e.RevokedCertificate=void 0;let n=(K(),t(B)),r=q(),i=hn(),a=Rt(),o=_n(),s=yn();var c=class{userCertificate=new ArrayBuffer(0);revocationDate=new o.Time;crlEntryExtensions;constructor(e={}){Object.assign(this,e)}};e.RevokedCertificate=c,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],c.prototype,`userCertificate`,void 0),n.__decorate([(0,r.AsnProp)({type:o.Time})],c.prototype,`revocationDate`,void 0),n.__decorate([(0,r.AsnProp)({type:s.Extension,optional:!0,repeated:`sequence`})],c.prototype,`crlEntryExtensions`,void 0);var l=class{version;signature=new i.AlgorithmIdentifier;issuer=new a.Name;thisUpdate=new o.Time;nextUpdate;revokedCertificates;crlExtensions;constructor(e={}){Object.assign(this,e)}};e.TBSCertList=l,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,optional:!0})],l.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],l.prototype,`signature`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Name})],l.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:o.Time})],l.prototype,`thisUpdate`,void 0),n.__decorate([(0,r.AsnProp)({type:o.Time,optional:!0})],l.prototype,`nextUpdate`,void 0),n.__decorate([(0,r.AsnProp)({type:c,repeated:`sequence`,optional:!0})],l.prototype,`revokedCertificates`,void 0),n.__decorate([(0,r.AsnProp)({type:s.Extension,optional:!0,context:0,repeated:`sequence`})],l.prototype,`crlExtensions`,void 0)})),wn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CertificateList=void 0;let n=(K(),t(B)),r=q(),i=hn(),a=Cn();var o=class{tbsCertList=new a.TBSCertList;tbsCertListRaw;signatureAlgorithm=new i.AlgorithmIdentifier;signature=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.CertificateList=o,n.__decorate([(0,r.AsnProp)({type:a.TBSCertList,raw:!0})],o.prototype,`tbsCertList`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`signatureAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`signature`,void 0)})),Y=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(mn(),e),n.__exportStar(hn(),e),n.__exportStar(cn(),e),n.__exportStar(Sn(),e),n.__exportStar(wn(),e),n.__exportStar(yn(),e),n.__exportStar(zt(),e),n.__exportStar(Ut(),e),n.__exportStar(Rt(),e),n.__exportStar(J(),e),n.__exportStar(gn(),e),n.__exportStar(Cn(),e),n.__exportStar(xn(),e),n.__exportStar(_n(),e),n.__exportStar(bn(),e),n.__exportStar(vn(),e)})),Tn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IssuerAndSerialNumber=void 0;let n=(K(),t(B)),r=q(),i=Y();var a=class{issuer=new i.Name;serialNumber=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.IssuerAndSerialNumber=a,n.__decorate([(0,r.AsnProp)({type:i.Name})],a.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`serialNumber`,void 0)})),En=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SignerIdentifier=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=Tn(),o=class{subjectKeyIdentifier;issuerAndSerialNumber;constructor(e={}){Object.assign(this,e)}};e.SignerIdentifier=o,n.__decorate([(0,r.AsnProp)({type:i.SubjectKeyIdentifier,context:0,implicit:!0})],o.prototype,`subjectKeyIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:a.IssuerAndSerialNumber})],o.prototype,`issuerAndSerialNumber`,void 0),e.SignerIdentifier=o=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],o)})),Dn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KeyDerivationAlgorithmIdentifier=e.MessageAuthenticationCodeAlgorithm=e.ContentEncryptionAlgorithmIdentifier=e.KeyEncryptionAlgorithmIdentifier=e.SignatureAlgorithmIdentifier=e.DigestAlgorithmIdentifier=e.CMSVersion=void 0;let n=(K(),t(B)),r=Y(),i=q();var a;(function(e){e[e.v0=0]=`v0`,e[e.v1=1]=`v1`,e[e.v2=2]=`v2`,e[e.v3=3]=`v3`,e[e.v4=4]=`v4`,e[e.v5=5]=`v5`})(a||(e.CMSVersion=a={}));let o=class extends r.AlgorithmIdentifier{};e.DigestAlgorithmIdentifier=o,e.DigestAlgorithmIdentifier=o=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],o);let s=class extends r.AlgorithmIdentifier{};e.SignatureAlgorithmIdentifier=s,e.SignatureAlgorithmIdentifier=s=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],s);let c=class extends r.AlgorithmIdentifier{};e.KeyEncryptionAlgorithmIdentifier=c,e.KeyEncryptionAlgorithmIdentifier=c=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],c);let l=class extends r.AlgorithmIdentifier{};e.ContentEncryptionAlgorithmIdentifier=l,e.ContentEncryptionAlgorithmIdentifier=l=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],l);let u=class extends r.AlgorithmIdentifier{};e.MessageAuthenticationCodeAlgorithm=u,e.MessageAuthenticationCodeAlgorithm=u=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],u);let d=class extends r.AlgorithmIdentifier{};e.KeyDerivationAlgorithmIdentifier=d,e.KeyDerivationAlgorithmIdentifier=d=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],d)})),On=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Attribute=void 0;let n=(K(),t(B)),r=q();var i=class{attrType=``;attrValues=[];constructor(e={}){Object.assign(this,e)}};e.Attribute=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`attrType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,repeated:`set`})],i.prototype,`attrValues`,void 0)})),kn=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SignerInfos=e.SignerInfo=void 0;let r=(K(),t(B)),i=q(),a=En(),o=Dn(),s=On();var c=class{version=o.CMSVersion.v0;sid=new a.SignerIdentifier;digestAlgorithm=new o.DigestAlgorithmIdentifier;signedAttrs;signedAttrsRaw;signatureAlgorithm=new o.SignatureAlgorithmIdentifier;signature=new i.OctetString;unsignedAttrs;constructor(e={}){Object.assign(this,e)}};e.SignerInfo=c,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],c.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:a.SignerIdentifier})],c.prototype,`sid`,void 0),r.__decorate([(0,i.AsnProp)({type:o.DigestAlgorithmIdentifier})],c.prototype,`digestAlgorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:s.Attribute,repeated:`set`,context:0,implicit:!0,optional:!0,raw:!0})],c.prototype,`signedAttrs`,void 0),r.__decorate([(0,i.AsnProp)({type:o.SignatureAlgorithmIdentifier})],c.prototype,`signatureAlgorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:i.OctetString})],c.prototype,`signature`,void 0),r.__decorate([(0,i.AsnProp)({type:s.Attribute,repeated:`set`,context:1,implicit:!0,optional:!0})],c.prototype,`unsignedAttrs`,void 0);let l=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SignerInfos=l,e.SignerInfos=l=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:c})],l)})),An=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CounterSignature=e.id_counterSignature=void 0;let n=(K(),t(B)),r=q(),i=kn();e.id_counterSignature=`1.2.840.113549.1.9.6`;let a=class extends i.SignerInfo{};e.CounterSignature=a,e.CounterSignature=a=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Sequence})],a)})),jn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.MessageDigest=e.id_messageDigest=void 0;let t=q();e.id_messageDigest=`1.2.840.113549.1.9.4`,e.MessageDigest=class extends t.OctetString{}})),Mn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SigningTime=e.id_signingTime=void 0;let n=(K(),t(B)),r=Y(),i=q();e.id_signingTime=`1.2.840.113549.1.9.5`;let a=class extends r.Time{};e.SigningTime=a,e.SigningTime=a=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],a)})),Nn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_contentType=void 0;let n=(K(),t(B));n.__exportStar(An(),e),n.__exportStar(jn(),e),n.__exportStar(Mn(),e),e.id_contentType=`1.2.840.113549.1.9.3`})),Pn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ACClearAttrs=void 0;let n=(K(),t(B)),r=q(),i=Y();var a=class{acIssuer=new i.GeneralName;acSerial=0;attrs=[];constructor(e={}){Object.assign(this,e)}};e.ACClearAttrs=a,n.__decorate([(0,r.AsnProp)({type:i.GeneralName})],a.prototype,`acIssuer`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],a.prototype,`acSerial`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Attribute,repeated:`sequence`})],a.prototype,`attrs`,void 0)})),Fn=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.AttrSpec=void 0;let r=(K(),t(B)),i=q(),a=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.AttrSpec=a,e.AttrSpec=a=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:i.AsnPropTypes.ObjectIdentifier})],a)})),In=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AAControls=void 0;let n=(K(),t(B)),r=q(),i=Fn();var a=class{pathLenConstraint;permittedAttrs;excludedAttrs;permitUnSpecified=!0;constructor(e={}){Object.assign(this,e)}};e.AAControls=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,optional:!0})],a.prototype,`pathLenConstraint`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AttrSpec,implicit:!0,context:0,optional:!0})],a.prototype,`permittedAttrs`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AttrSpec,implicit:!0,context:1,optional:!0})],a.prototype,`excludedAttrs`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Boolean,defaultValue:!0})],a.prototype,`permitUnSpecified`,void 0)})),Ln=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IssuerSerial=void 0;let n=(K(),t(B)),r=q(),i=Y();var a=class{issuer=new i.GeneralNames;serial=new ArrayBuffer(0);issuerUID=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.IssuerSerial=a,n.__decorate([(0,r.AsnProp)({type:i.GeneralNames})],a.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`serial`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,optional:!0})],a.prototype,`issuerUID`,void 0)})),Rn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ObjectDigestInfo=e.DigestedObjectType=void 0;let n=(K(),t(B)),r=q(),i=Y();var a;(function(e){e[e.publicKey=0]=`publicKey`,e[e.publicKeyCert=1]=`publicKeyCert`,e[e.otherObjectTypes=2]=`otherObjectTypes`})(a||(e.DigestedObjectType=a={}));var o=class{digestedObjectType=a.publicKey;otherObjectTypeID;digestAlgorithm=new i.AlgorithmIdentifier;objectDigest=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.ObjectDigestInfo=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Enumerated})],o.prototype,`digestedObjectType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier,optional:!0})],o.prototype,`otherObjectTypeID`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`digestAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`objectDigest`,void 0)})),zn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.V2Form=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=Ln(),o=Rn();var s=class{issuerName;baseCertificateID;objectDigestInfo;constructor(e={}){Object.assign(this,e)}};e.V2Form=s,n.__decorate([(0,r.AsnProp)({type:i.GeneralNames,optional:!0})],s.prototype,`issuerName`,void 0),n.__decorate([(0,r.AsnProp)({type:a.IssuerSerial,context:0,implicit:!0,optional:!0})],s.prototype,`baseCertificateID`,void 0),n.__decorate([(0,r.AsnProp)({type:o.ObjectDigestInfo,context:1,implicit:!0,optional:!0})],s.prototype,`objectDigestInfo`,void 0)})),Bn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AttCertIssuer=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=zn(),o=class{v1Form;v2Form;constructor(e={}){Object.assign(this,e)}};e.AttCertIssuer=o,n.__decorate([(0,r.AsnProp)({type:i.GeneralName,repeated:`sequence`})],o.prototype,`v1Form`,void 0),n.__decorate([(0,r.AsnProp)({type:a.V2Form,context:0,implicit:!0})],o.prototype,`v2Form`,void 0),e.AttCertIssuer=o=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],o)})),Vn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AttCertValidityPeriod=void 0;let n=(K(),t(B)),r=q();var i=class{notBeforeTime=new Date;notAfterTime=new Date;constructor(e={}){Object.assign(this,e)}};e.AttCertValidityPeriod=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime})],i.prototype,`notBeforeTime`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime})],i.prototype,`notAfterTime`,void 0)})),Hn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Holder=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=Ln(),o=Rn();var s=class{baseCertificateID;entityName;objectDigestInfo;constructor(e={}){Object.assign(this,e)}};e.Holder=s,n.__decorate([(0,r.AsnProp)({type:a.IssuerSerial,implicit:!0,context:0,optional:!0})],s.prototype,`baseCertificateID`,void 0),n.__decorate([(0,r.AsnProp)({type:i.GeneralNames,implicit:!0,context:1,optional:!0})],s.prototype,`entityName`,void 0),n.__decorate([(0,r.AsnProp)({type:o.ObjectDigestInfo,implicit:!0,context:2,optional:!0})],s.prototype,`objectDigestInfo`,void 0)})),Un=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AttributeCertificateInfo=e.AttCertVersion=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=Hn(),o=Bn(),s=Vn();var c;(function(e){e[e.v2=1]=`v2`})(c||(e.AttCertVersion=c={}));var l=class{version=c.v2;holder=new a.Holder;issuer=new o.AttCertIssuer;signature=new i.AlgorithmIdentifier;serialNumber=new ArrayBuffer(0);attrCertValidityPeriod=new s.AttCertValidityPeriod;attributes=[];issuerUniqueID;extensions;constructor(e={}){Object.assign(this,e)}};e.AttributeCertificateInfo=l,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],l.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Holder})],l.prototype,`holder`,void 0),n.__decorate([(0,r.AsnProp)({type:o.AttCertIssuer})],l.prototype,`issuer`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],l.prototype,`signature`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],l.prototype,`serialNumber`,void 0),n.__decorate([(0,r.AsnProp)({type:s.AttCertValidityPeriod})],l.prototype,`attrCertValidityPeriod`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Attribute,repeated:`sequence`})],l.prototype,`attributes`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,optional:!0})],l.prototype,`issuerUniqueID`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Extensions,optional:!0})],l.prototype,`extensions`,void 0)})),Wn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.AttributeCertificate=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=Un();var o=class{acinfo=new a.AttributeCertificateInfo;signatureAlgorithm=new i.AlgorithmIdentifier;signatureValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.AttributeCertificate=o,n.__decorate([(0,r.AsnProp)({type:a.AttributeCertificateInfo})],o.prototype,`acinfo`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`signatureAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`signatureValue`,void 0)})),Gn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ClassList=e.ClassListFlags=void 0;let t=q();var n;(function(e){e[e.unmarked=1]=`unmarked`,e[e.unclassified=2]=`unclassified`,e[e.restricted=4]=`restricted`,e[e.confidential=8]=`confidential`,e[e.secret=16]=`secret`,e[e.topSecret=32]=`topSecret`})(n||(e.ClassListFlags=n={})),e.ClassList=class extends t.BitString{}})),Kn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SecurityCategory=void 0;let n=(K(),t(B)),r=q();var i=class{type=``;value=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.SecurityCategory=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier,implicit:!0,context:0})],i.prototype,`type`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,implicit:!0,context:1})],i.prototype,`value`,void 0)})),qn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.Clearance=void 0;let n=(K(),t(B)),r=q(),i=Gn(),a=Kn();var o=class{policyId=``;classList=new i.ClassList(i.ClassListFlags.unclassified);securityCategories;constructor(e={}){Object.assign(this,e)}};e.Clearance=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],o.prototype,`policyId`,void 0),n.__decorate([(0,r.AsnProp)({type:i.ClassList,defaultValue:new i.ClassList(i.ClassListFlags.unclassified)})],o.prototype,`classList`,void 0),n.__decorate([(0,r.AsnProp)({type:a.SecurityCategory,repeated:`set`})],o.prototype,`securityCategories`,void 0)})),Jn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.IetfAttrSyntax=e.IetfAttrSyntaxValueChoices=void 0;let n=(K(),t(B)),r=q(),i=Y();var a=class{cotets;oid;string;constructor(e={}){Object.assign(this,e)}};e.IetfAttrSyntaxValueChoices=a,n.__decorate([(0,r.AsnProp)({type:r.OctetString})],a.prototype,`cotets`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`oid`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Utf8String})],a.prototype,`string`,void 0);var o=class{policyAuthority;values=[];constructor(e={}){Object.assign(this,e)}};e.IetfAttrSyntax=o,n.__decorate([(0,r.AsnProp)({type:i.GeneralNames,implicit:!0,context:0,optional:!0})],o.prototype,`policyAuthority`,void 0),n.__decorate([(0,r.AsnProp)({type:a,repeated:`sequence`})],o.prototype,`values`,void 0)})),Yn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_at_clearance=e.id_at_role=e.id_at=e.id_aca_encAttrs=e.id_aca_group=e.id_aca_chargingIdentity=e.id_aca_accessIdentity=e.id_aca_authenticationInfo=e.id_aca=e.id_ce_targetInformation=e.id_pe_ac_proxying=e.id_pe_aaControls=e.id_pe_ac_auditIdentity=void 0;let t=Y();e.id_pe_ac_auditIdentity=`${t.id_pe}.4`,e.id_pe_aaControls=`${t.id_pe}.6`,e.id_pe_ac_proxying=`${t.id_pe}.10`,e.id_ce_targetInformation=`${t.id_ce}.55`,e.id_aca=`${t.id_pkix}.10`,e.id_aca_authenticationInfo=`${e.id_aca}.1`,e.id_aca_accessIdentity=`${e.id_aca}.2`,e.id_aca_chargingIdentity=`${e.id_aca}.3`,e.id_aca_group=`${e.id_aca}.4`,e.id_aca_encAttrs=`${e.id_aca}.6`,e.id_at=`2.5.4`,e.id_at_role=`${e.id_at}.72`,e.id_at_clearance=`2.5.1.5.55`})),Xn=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.Targets=e.Target=e.TargetCert=void 0;let r=(K(),t(B)),i=q(),a=Y(),o=Ln(),s=Rn();var c=class{targetCertificate=new o.IssuerSerial;targetName;certDigestInfo;constructor(e={}){Object.assign(this,e)}};e.TargetCert=c,r.__decorate([(0,i.AsnProp)({type:o.IssuerSerial})],c.prototype,`targetCertificate`,void 0),r.__decorate([(0,i.AsnProp)({type:a.GeneralName,optional:!0})],c.prototype,`targetName`,void 0),r.__decorate([(0,i.AsnProp)({type:s.ObjectDigestInfo,optional:!0})],c.prototype,`certDigestInfo`,void 0);let l=class{targetName;targetGroup;targetCert;constructor(e={}){Object.assign(this,e)}};e.Target=l,r.__decorate([(0,i.AsnProp)({type:a.GeneralName,context:0,implicit:!0})],l.prototype,`targetName`,void 0),r.__decorate([(0,i.AsnProp)({type:a.GeneralName,context:1,implicit:!0})],l.prototype,`targetGroup`,void 0),r.__decorate([(0,i.AsnProp)({type:c,context:2,implicit:!0})],l.prototype,`targetCert`,void 0),e.Target=l=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],l);let u=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.Targets=u,e.Targets=u=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:l})],u)})),Zn=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.ProxyInfo=void 0;let r=(K(),t(B)),i=q(),a=Xn(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.ProxyInfo=o,e.ProxyInfo=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.Targets})],o)})),Qn=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RoleSyntax=void 0;let n=(K(),t(B)),r=q(),i=Y();var a=class{roleAuthority;roleName;constructor(e={}){Object.assign(this,e)}};e.RoleSyntax=a,n.__decorate([(0,r.AsnProp)({type:i.GeneralNames,implicit:!0,context:0,optional:!0})],a.prototype,`roleAuthority`,void 0),n.__decorate([(0,r.AsnProp)({type:i.GeneralName,implicit:!0,context:1})],a.prototype,`roleName`,void 0)})),$n=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SvceAuthInfo=void 0;let n=(K(),t(B)),r=q(),i=Y();var a=class{service=new i.GeneralName;ident=new i.GeneralName;authInfo;constructor(e={}){Object.assign(this,e)}};e.SvceAuthInfo=a,n.__decorate([(0,r.AsnProp)({type:i.GeneralName})],a.prototype,`service`,void 0),n.__decorate([(0,r.AsnProp)({type:i.GeneralName})],a.prototype,`ident`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString,optional:!0})],a.prototype,`authInfo`,void 0)})),er=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(Pn(),e),n.__exportStar(In(),e),n.__exportStar(Bn(),e),n.__exportStar(Vn(),e),n.__exportStar(Fn(),e),n.__exportStar(Wn(),e),n.__exportStar(Un(),e),n.__exportStar(Gn(),e),n.__exportStar(qn(),e),n.__exportStar(Hn(),e),n.__exportStar(Jn(),e),n.__exportStar(Ln(),e),n.__exportStar(Rn(),e),n.__exportStar(Yn(),e),n.__exportStar(Zn(),e),n.__exportStar(Qn(),e),n.__exportStar(Kn(),e),n.__exportStar($n(),e),n.__exportStar(Xn(),e),n.__exportStar(zn(),e)})),tr=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.CertificateSet=e.CertificateChoices=e.OtherCertificateFormat=void 0;let r=(K(),t(B)),i=q(),a=Y(),o=er();var s=class{otherCertFormat=``;otherCert=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherCertificateFormat=s,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],s.prototype,`otherCertFormat`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any})],s.prototype,`otherCert`,void 0);let c=class{certificate;v2AttrCert;other;constructor(e={}){Object.assign(this,e)}};e.CertificateChoices=c,r.__decorate([(0,i.AsnProp)({type:a.Certificate})],c.prototype,`certificate`,void 0),r.__decorate([(0,i.AsnProp)({type:o.AttributeCertificate,context:2,implicit:!0})],c.prototype,`v2AttrCert`,void 0),r.__decorate([(0,i.AsnProp)({type:s,context:3,implicit:!0})],c.prototype,`other`,void 0),e.CertificateChoices=c=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],c);let l=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.CertificateSet=l,e.CertificateSet=l=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:c})],l)})),nr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ContentInfo=void 0;let n=(K(),t(B)),r=q();var i=class{contentType=``;content=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.ContentInfo=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`contentType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],i.prototype,`content`,void 0)})),rr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.EncapsulatedContentInfo=e.EncapsulatedContent=void 0;let n=(K(),t(B)),r=q(),i=class{single;any;constructor(e={}){Object.assign(this,e)}};e.EncapsulatedContent=i,n.__decorate([(0,r.AsnProp)({type:r.OctetString})],i.prototype,`single`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any})],i.prototype,`any`,void 0),e.EncapsulatedContent=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],i);var a=class{eContentType=``;eContent;constructor(e={}){Object.assign(this,e)}};e.EncapsulatedContentInfo=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`eContentType`,void 0),n.__decorate([(0,r.AsnProp)({type:i,context:0,optional:!0})],a.prototype,`eContent`,void 0)})),ir=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.EncryptedContentInfo=e.EncryptedContent=void 0;let n=(K(),t(B)),r=q(),i=Dn(),a=class{value;constructedValue;constructor(e={}){Object.assign(this,e)}};e.EncryptedContent=a,n.__decorate([(0,r.AsnProp)({type:r.OctetString,context:0,implicit:!0,optional:!0})],a.prototype,`value`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString,converter:r.AsnConstructedOctetStringConverter,context:0,implicit:!0,optional:!0,repeated:`sequence`})],a.prototype,`constructedValue`,void 0),e.EncryptedContent=a=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],a);var o=class{contentType=``;contentEncryptionAlgorithm=new i.ContentEncryptionAlgorithmIdentifier;encryptedContent;constructor(e={}){Object.assign(this,e)}};e.EncryptedContentInfo=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],o.prototype,`contentType`,void 0),n.__decorate([(0,r.AsnProp)({type:i.ContentEncryptionAlgorithmIdentifier})],o.prototype,`contentEncryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:a,optional:!0})],o.prototype,`encryptedContent`,void 0)})),ar=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.OtherKeyAttribute=void 0;let n=(K(),t(B)),r=q();var i=class{keyAttrId=``;keyAttr;constructor(e={}){Object.assign(this,e)}};e.OtherKeyAttribute=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`keyAttrId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,optional:!0})],i.prototype,`keyAttr`,void 0)})),or=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.KeyAgreeRecipientInfo=e.OriginatorIdentifierOrKey=e.OriginatorPublicKey=e.RecipientEncryptedKeys=e.RecipientEncryptedKey=e.KeyAgreeRecipientIdentifier=e.RecipientKeyIdentifier=void 0;let r=(K(),t(B)),i=q(),a=Y(),o=Dn(),s=Tn(),c=ar();var l=class{subjectKeyIdentifier=new a.SubjectKeyIdentifier;date;other;constructor(e={}){Object.assign(this,e)}};e.RecipientKeyIdentifier=l,r.__decorate([(0,i.AsnProp)({type:a.SubjectKeyIdentifier})],l.prototype,`subjectKeyIdentifier`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.GeneralizedTime,optional:!0})],l.prototype,`date`,void 0),r.__decorate([(0,i.AsnProp)({type:c.OtherKeyAttribute,optional:!0})],l.prototype,`other`,void 0);let u=class{rKeyId;issuerAndSerialNumber;constructor(e={}){Object.assign(this,e)}};e.KeyAgreeRecipientIdentifier=u,r.__decorate([(0,i.AsnProp)({type:l,context:0,implicit:!0,optional:!0})],u.prototype,`rKeyId`,void 0),r.__decorate([(0,i.AsnProp)({type:s.IssuerAndSerialNumber,optional:!0})],u.prototype,`issuerAndSerialNumber`,void 0),e.KeyAgreeRecipientIdentifier=u=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],u);var d=class{rid=new u;encryptedKey=new i.OctetString;constructor(e={}){Object.assign(this,e)}};e.RecipientEncryptedKey=d,r.__decorate([(0,i.AsnProp)({type:u})],d.prototype,`rid`,void 0),r.__decorate([(0,i.AsnProp)({type:i.OctetString})],d.prototype,`encryptedKey`,void 0);let f=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.RecipientEncryptedKeys=f,e.RecipientEncryptedKeys=f=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:d})],f);var p=class{algorithm=new a.AlgorithmIdentifier;publicKey=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OriginatorPublicKey=p,r.__decorate([(0,i.AsnProp)({type:a.AlgorithmIdentifier})],p.prototype,`algorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.BitString})],p.prototype,`publicKey`,void 0);let m=class{subjectKeyIdentifier;originatorKey;issuerAndSerialNumber;constructor(e={}){Object.assign(this,e)}};e.OriginatorIdentifierOrKey=m,r.__decorate([(0,i.AsnProp)({type:a.SubjectKeyIdentifier,context:0,implicit:!0,optional:!0})],m.prototype,`subjectKeyIdentifier`,void 0),r.__decorate([(0,i.AsnProp)({type:p,context:1,implicit:!0,optional:!0})],m.prototype,`originatorKey`,void 0),r.__decorate([(0,i.AsnProp)({type:s.IssuerAndSerialNumber,optional:!0})],m.prototype,`issuerAndSerialNumber`,void 0),e.OriginatorIdentifierOrKey=m=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],m);var h=class{version=o.CMSVersion.v3;originator=new m;ukm;keyEncryptionAlgorithm=new o.KeyEncryptionAlgorithmIdentifier;recipientEncryptedKeys=new f;constructor(e={}){Object.assign(this,e)}};e.KeyAgreeRecipientInfo=h,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],h.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:m,context:0})],h.prototype,`originator`,void 0),r.__decorate([(0,i.AsnProp)({type:i.OctetString,context:1,optional:!0})],h.prototype,`ukm`,void 0),r.__decorate([(0,i.AsnProp)({type:o.KeyEncryptionAlgorithmIdentifier})],h.prototype,`keyEncryptionAlgorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:f})],h.prototype,`recipientEncryptedKeys`,void 0)})),sr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KeyTransRecipientInfo=e.RecipientIdentifier=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=Dn(),o=Tn(),s=class{subjectKeyIdentifier;issuerAndSerialNumber;constructor(e={}){Object.assign(this,e)}};e.RecipientIdentifier=s,n.__decorate([(0,r.AsnProp)({type:i.SubjectKeyIdentifier,context:0,implicit:!0})],s.prototype,`subjectKeyIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:o.IssuerAndSerialNumber})],s.prototype,`issuerAndSerialNumber`,void 0),e.RecipientIdentifier=s=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],s);var c=class{version=a.CMSVersion.v0;rid=new s;keyEncryptionAlgorithm=new a.KeyEncryptionAlgorithmIdentifier;encryptedKey=new r.OctetString;constructor(e={}){Object.assign(this,e)}};e.KeyTransRecipientInfo=c,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],c.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:s})],c.prototype,`rid`,void 0),n.__decorate([(0,r.AsnProp)({type:a.KeyEncryptionAlgorithmIdentifier})],c.prototype,`keyEncryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString})],c.prototype,`encryptedKey`,void 0)})),cr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KEKRecipientInfo=e.KEKIdentifier=void 0;let n=(K(),t(B)),r=q(),i=ar(),a=Dn();var o=class{keyIdentifier=new r.OctetString;date;other;constructor(e={}){Object.assign(this,e)}};e.KEKIdentifier=o,n.__decorate([(0,r.AsnProp)({type:r.OctetString})],o.prototype,`keyIdentifier`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.GeneralizedTime,optional:!0})],o.prototype,`date`,void 0),n.__decorate([(0,r.AsnProp)({type:i.OtherKeyAttribute,optional:!0})],o.prototype,`other`,void 0);var s=class{version=a.CMSVersion.v4;kekid=new o;keyEncryptionAlgorithm=new a.KeyEncryptionAlgorithmIdentifier;encryptedKey=new r.OctetString;constructor(e={}){Object.assign(this,e)}};e.KEKRecipientInfo=s,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],s.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:o})],s.prototype,`kekid`,void 0),n.__decorate([(0,r.AsnProp)({type:a.KeyEncryptionAlgorithmIdentifier})],s.prototype,`keyEncryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString})],s.prototype,`encryptedKey`,void 0)})),lr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PasswordRecipientInfo=void 0;let n=(K(),t(B)),r=q(),i=Dn();var a=class{version=i.CMSVersion.v0;keyDerivationAlgorithm;keyEncryptionAlgorithm=new i.KeyEncryptionAlgorithmIdentifier;encryptedKey=new r.OctetString;constructor(e={}){Object.assign(this,e)}};e.PasswordRecipientInfo=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],a.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i.KeyDerivationAlgorithmIdentifier,context:0,optional:!0})],a.prototype,`keyDerivationAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:i.KeyEncryptionAlgorithmIdentifier})],a.prototype,`keyEncryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString})],a.prototype,`encryptedKey`,void 0)})),ur=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RecipientInfo=e.OtherRecipientInfo=void 0;let n=(K(),t(B)),r=q(),i=or(),a=sr(),o=cr(),s=lr();var c=class{oriType=``;oriValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherRecipientInfo=c,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],c.prototype,`oriType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any})],c.prototype,`oriValue`,void 0);let l=class{ktri;kari;kekri;pwri;ori;constructor(e={}){Object.assign(this,e)}};e.RecipientInfo=l,n.__decorate([(0,r.AsnProp)({type:a.KeyTransRecipientInfo,optional:!0})],l.prototype,`ktri`,void 0),n.__decorate([(0,r.AsnProp)({type:i.KeyAgreeRecipientInfo,context:1,implicit:!0,optional:!0})],l.prototype,`kari`,void 0),n.__decorate([(0,r.AsnProp)({type:o.KEKRecipientInfo,context:2,implicit:!0,optional:!0})],l.prototype,`kekri`,void 0),n.__decorate([(0,r.AsnProp)({type:s.PasswordRecipientInfo,context:3,implicit:!0,optional:!0})],l.prototype,`pwri`,void 0),n.__decorate([(0,r.AsnProp)({type:c,context:4,implicit:!0,optional:!0})],l.prototype,`ori`,void 0),e.RecipientInfo=l=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],l)})),dr=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.RecipientInfos=void 0;let r=(K(),t(B)),i=q(),a=ur(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.RecipientInfos=o,e.RecipientInfos=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:a.RecipientInfo})],o)})),fr=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.RevocationInfoChoices=e.RevocationInfoChoice=e.OtherRevocationInfoFormat=e.id_ri_scvp=e.id_ri_ocsp_response=e.id_ri=void 0;let r=(K(),t(B)),i=q();e.id_ri=`${Y().id_pkix}.16`,e.id_ri_ocsp_response=`${e.id_ri}.2`,e.id_ri_scvp=`${e.id_ri}.4`;var a=class{otherRevInfoFormat=``;otherRevInfo=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherRevocationInfoFormat=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`otherRevInfoFormat`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any})],a.prototype,`otherRevInfo`,void 0);let o=class{other=new a;constructor(e={}){Object.assign(this,e)}};e.RevocationInfoChoice=o,r.__decorate([(0,i.AsnProp)({type:a,context:1,implicit:!0})],o.prototype,`other`,void 0),e.RevocationInfoChoice=o=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Choice})],o);let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.RevocationInfoChoices=s,e.RevocationInfoChoices=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:o})],s)})),pr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.OriginatorInfo=void 0;let n=(K(),t(B)),r=q(),i=tr(),a=fr();var o=class{certs;crls;constructor(e={}){Object.assign(this,e)}};e.OriginatorInfo=o,n.__decorate([(0,r.AsnProp)({type:i.CertificateSet,context:0,implicit:!0,optional:!0})],o.prototype,`certs`,void 0),n.__decorate([(0,r.AsnProp)({type:a.RevocationInfoChoices,context:1,implicit:!0,optional:!0})],o.prototype,`crls`,void 0)})),mr=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.EnvelopedData=e.UnprotectedAttributes=void 0;let r=(K(),t(B)),i=q(),a=Dn(),o=On(),s=dr(),c=pr(),l=ir(),u=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.UnprotectedAttributes=u,e.UnprotectedAttributes=u=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:o.Attribute})],u);var d=class{version=a.CMSVersion.v0;originatorInfo;recipientInfos=new s.RecipientInfos;encryptedContentInfo=new l.EncryptedContentInfo;unprotectedAttrs;constructor(e={}){Object.assign(this,e)}};e.EnvelopedData=d,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],d.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:c.OriginatorInfo,context:0,implicit:!0,optional:!0})],d.prototype,`originatorInfo`,void 0),r.__decorate([(0,i.AsnProp)({type:s.RecipientInfos})],d.prototype,`recipientInfos`,void 0),r.__decorate([(0,i.AsnProp)({type:l.EncryptedContentInfo})],d.prototype,`encryptedContentInfo`,void 0),r.__decorate([(0,i.AsnProp)({type:u,context:1,implicit:!0,optional:!0})],d.prototype,`unprotectedAttrs`,void 0)})),hr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_authData=e.id_encryptedData=e.id_digestedData=e.id_envelopedData=e.id_signedData=e.id_data=e.id_ct_contentInfo=void 0,e.id_ct_contentInfo=`1.2.840.113549.1.9.16.1.6`,e.id_data=`1.2.840.113549.1.7.1`,e.id_signedData=`1.2.840.113549.1.7.2`,e.id_envelopedData=`1.2.840.113549.1.7.3`,e.id_digestedData=`1.2.840.113549.1.7.5`,e.id_encryptedData=`1.2.840.113549.1.7.6`,e.id_authData=`1.2.840.113549.1.9.16.1.2`})),gr=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SignedData=e.DigestAlgorithmIdentifiers=void 0;let r=(K(),t(B)),i=q(),a=tr(),o=Dn(),s=rr(),c=fr(),l=kn(),u=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.DigestAlgorithmIdentifiers=u,e.DigestAlgorithmIdentifiers=u=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Set,itemType:o.DigestAlgorithmIdentifier})],u);var d=class{version=o.CMSVersion.v0;digestAlgorithms=new u;encapContentInfo=new s.EncapsulatedContentInfo;certificates;crls;signerInfos=new l.SignerInfos;constructor(e={}){Object.assign(this,e)}};e.SignedData=d,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],d.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:u})],d.prototype,`digestAlgorithms`,void 0),r.__decorate([(0,i.AsnProp)({type:s.EncapsulatedContentInfo})],d.prototype,`encapContentInfo`,void 0),r.__decorate([(0,i.AsnProp)({type:a.CertificateSet,context:0,implicit:!0,optional:!0})],d.prototype,`certificates`,void 0),r.__decorate([(0,i.AsnProp)({type:c.RevocationInfoChoices,context:1,implicit:!0,optional:!0})],d.prototype,`crls`,void 0),r.__decorate([(0,i.AsnProp)({type:l.SignerInfos})],d.prototype,`signerInfos`,void 0)})),_r=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(Nn(),e),n.__exportStar(On(),e),n.__exportStar(tr(),e),n.__exportStar(nr(),e),n.__exportStar(rr(),e),n.__exportStar(ir(),e),n.__exportStar(mr(),e),n.__exportStar(Tn(),e),n.__exportStar(cr(),e),n.__exportStar(or(),e),n.__exportStar(sr(),e),n.__exportStar(hr(),e),n.__exportStar(pr(),e),n.__exportStar(lr(),e),n.__exportStar(ur(),e),n.__exportStar(dr(),e),n.__exportStar(fr(),e),n.__exportStar(gr(),e),n.__exportStar(En(),e),n.__exportStar(kn(),e),n.__exportStar(Dn(),e)})),vr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_sect571r1=e.id_sect571k1=e.id_secp521r1=e.id_sect409r1=e.id_sect409k1=e.id_secp384r1=e.id_sect283r1=e.id_sect283k1=e.id_secp256r1=e.id_sect233r1=e.id_sect233k1=e.id_secp224r1=e.id_sect163r2=e.id_sect163k1=e.id_secp192r1=e.id_ecdsaWithSHA512=e.id_ecdsaWithSHA384=e.id_ecdsaWithSHA256=e.id_ecdsaWithSHA224=e.id_ecdsaWithSHA1=e.id_ecMQV=e.id_ecDH=e.id_ecPublicKey=void 0,e.id_ecPublicKey=`1.2.840.10045.2.1`,e.id_ecDH=`1.3.132.1.12`,e.id_ecMQV=`1.3.132.1.13`,e.id_ecdsaWithSHA1=`1.2.840.10045.4.1`,e.id_ecdsaWithSHA224=`1.2.840.10045.4.3.1`,e.id_ecdsaWithSHA256=`1.2.840.10045.4.3.2`,e.id_ecdsaWithSHA384=`1.2.840.10045.4.3.3`,e.id_ecdsaWithSHA512=`1.2.840.10045.4.3.4`,e.id_secp192r1=`1.2.840.10045.3.1.1`,e.id_sect163k1=`1.3.132.0.1`,e.id_sect163r2=`1.3.132.0.15`,e.id_secp224r1=`1.3.132.0.33`,e.id_sect233k1=`1.3.132.0.26`,e.id_sect233r1=`1.3.132.0.27`,e.id_secp256r1=`1.2.840.10045.3.1.7`,e.id_sect283k1=`1.3.132.0.16`,e.id_sect283r1=`1.3.132.0.17`,e.id_secp384r1=`1.3.132.0.34`,e.id_sect409k1=`1.3.132.0.36`,e.id_sect409r1=`1.3.132.0.37`,e.id_secp521r1=`1.3.132.0.35`,e.id_sect571k1=`1.3.132.0.38`,e.id_sect571r1=`1.3.132.0.39`})),yr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ecdsaWithSHA512=e.ecdsaWithSHA384=e.ecdsaWithSHA256=e.ecdsaWithSHA224=e.ecdsaWithSHA1=void 0;let n=(K(),t(B)),r=Y(),i=n.__importStar(vr());function a(e){return new r.AlgorithmIdentifier({algorithm:e})}e.ecdsaWithSHA1=a(i.id_ecdsaWithSHA1),e.ecdsaWithSHA224=a(i.id_ecdsaWithSHA224),e.ecdsaWithSHA256=a(i.id_ecdsaWithSHA256),e.ecdsaWithSHA384=a(i.id_ecdsaWithSHA384),e.ecdsaWithSHA512=a(i.id_ecdsaWithSHA512)})),br=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SpecifiedECDomain=e.ECPVer=e.Curve=e.FieldElement=e.ECPoint=e.FieldID=void 0;let n=(K(),t(B)),r=q(),i=class{fieldType;parameters;constructor(e={}){Object.assign(this,e)}};e.FieldID=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`fieldType`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any})],i.prototype,`parameters`,void 0),e.FieldID=i=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Sequence})],i);var a=class extends r.OctetString{};e.ECPoint=a,e.FieldElement=class extends r.OctetString{};let o=class{a;b;seed;constructor(e={}){Object.assign(this,e)}};e.Curve=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.OctetString})],o.prototype,`a`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.OctetString})],o.prototype,`b`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,optional:!0})],o.prototype,`seed`,void 0),e.Curve=o=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Sequence})],o);var s;(function(e){e[e.ecpVer1=1]=`ecpVer1`})(s||(e.ECPVer=s={}));let c=class{version=s.ecpVer1;fieldID;curve;base;order;cofactor;constructor(e={}){Object.assign(this,e)}};e.SpecifiedECDomain=c,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],c.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i})],c.prototype,`fieldID`,void 0),n.__decorate([(0,r.AsnProp)({type:o})],c.prototype,`curve`,void 0),n.__decorate([(0,r.AsnProp)({type:a})],c.prototype,`base`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],c.prototype,`order`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,optional:!0})],c.prototype,`cofactor`,void 0),e.SpecifiedECDomain=c=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Sequence})],c)})),xr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ECParameters=void 0;let n=(K(),t(B)),r=q(),i=br(),a=class{namedCurve;implicitCurve;specifiedCurve;constructor(e={}){Object.assign(this,e)}};e.ECParameters=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`namedCurve`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Null})],a.prototype,`implicitCurve`,void 0),n.__decorate([(0,r.AsnProp)({type:i.SpecifiedECDomain})],a.prototype,`specifiedCurve`,void 0),e.ECParameters=a=n.__decorate([(0,r.AsnType)({type:r.AsnTypeTypes.Choice})],a)})),Sr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ECPrivateKey=void 0;let n=(K(),t(B)),r=q(),i=xr();var a=class{version=1;privateKey=new r.OctetString;parameters;publicKey;constructor(e={}){Object.assign(this,e)}};e.ECPrivateKey=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],a.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:r.OctetString})],a.prototype,`privateKey`,void 0),n.__decorate([(0,r.AsnProp)({type:i.ECParameters,context:0,optional:!0})],a.prototype,`parameters`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString,context:1,optional:!0})],a.prototype,`publicKey`,void 0)})),Cr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.ECDSASigValue=void 0;let n=(K(),t(B)),r=q();var i=class{r=new ArrayBuffer(0);s=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.ECDSASigValue=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`r`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`s`,void 0)})),wr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(yr(),e),n.__exportStar(xr(),e),n.__exportStar(Sr(),e),n.__exportStar(Cr(),e),n.__exportStar(vr(),e),n.__exportStar(br(),e)})),Tr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_mgf1=e.id_md5=e.id_md2=e.id_sha512_256=e.id_sha512_224=e.id_sha512=e.id_sha384=e.id_sha256=e.id_sha224=e.id_sha1=e.id_sha512_256WithRSAEncryption=e.id_sha512_224WithRSAEncryption=e.id_sha512WithRSAEncryption=e.id_sha384WithRSAEncryption=e.id_sha256WithRSAEncryption=e.id_ssha224WithRSAEncryption=e.id_sha224WithRSAEncryption=e.id_sha1WithRSAEncryption=e.id_md5WithRSAEncryption=e.id_md2WithRSAEncryption=e.id_RSASSA_PSS=e.id_pSpecified=e.id_RSAES_OAEP=e.id_rsaEncryption=e.id_pkcs_1=void 0,e.id_pkcs_1=`1.2.840.113549.1.1`,e.id_rsaEncryption=`${e.id_pkcs_1}.1`,e.id_RSAES_OAEP=`${e.id_pkcs_1}.7`,e.id_pSpecified=`${e.id_pkcs_1}.9`,e.id_RSASSA_PSS=`${e.id_pkcs_1}.10`,e.id_md2WithRSAEncryption=`${e.id_pkcs_1}.2`,e.id_md5WithRSAEncryption=`${e.id_pkcs_1}.4`,e.id_sha1WithRSAEncryption=`${e.id_pkcs_1}.5`,e.id_sha224WithRSAEncryption=`${e.id_pkcs_1}.14`,e.id_ssha224WithRSAEncryption=e.id_sha224WithRSAEncryption,e.id_sha256WithRSAEncryption=`${e.id_pkcs_1}.11`,e.id_sha384WithRSAEncryption=`${e.id_pkcs_1}.12`,e.id_sha512WithRSAEncryption=`${e.id_pkcs_1}.13`,e.id_sha512_224WithRSAEncryption=`${e.id_pkcs_1}.15`,e.id_sha512_256WithRSAEncryption=`${e.id_pkcs_1}.16`,e.id_sha1=`1.3.14.3.2.26`,e.id_sha224=`2.16.840.1.101.3.4.2.4`,e.id_sha256=`2.16.840.1.101.3.4.2.1`,e.id_sha384=`2.16.840.1.101.3.4.2.2`,e.id_sha512=`2.16.840.1.101.3.4.2.3`,e.id_sha512_224=`2.16.840.1.101.3.4.2.5`,e.id_sha512_256=`2.16.840.1.101.3.4.2.6`,e.id_md2=`1.2.840.113549.2.2`,e.id_md5=`1.2.840.113549.2.5`,e.id_mgf1=`${e.id_pkcs_1}.8`})),Er=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.sha512_256WithRSAEncryption=e.sha512_224WithRSAEncryption=e.sha512WithRSAEncryption=e.sha384WithRSAEncryption=e.sha256WithRSAEncryption=e.sha224WithRSAEncryption=e.sha1WithRSAEncryption=e.md5WithRSAEncryption=e.md2WithRSAEncryption=e.rsaEncryption=e.pSpecifiedEmpty=e.mgf1SHA1=e.sha512_256=e.sha512_224=e.sha512=e.sha384=e.sha256=e.sha224=e.sha1=e.md4=e.md2=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=n.__importStar(Tr());function o(e){return new i.AlgorithmIdentifier({algorithm:e,parameters:null})}e.md2=o(a.id_md2),e.md4=o(a.id_md5),e.sha1=o(a.id_sha1),e.sha224=o(a.id_sha224),e.sha256=o(a.id_sha256),e.sha384=o(a.id_sha384),e.sha512=o(a.id_sha512),e.sha512_224=o(a.id_sha512_224),e.sha512_256=o(a.id_sha512_256),e.mgf1SHA1=new i.AlgorithmIdentifier({algorithm:a.id_mgf1,parameters:r.AsnConvert.serialize(e.sha1)}),e.pSpecifiedEmpty=new i.AlgorithmIdentifier({algorithm:a.id_pSpecified,parameters:r.AsnConvert.serialize(r.AsnOctetStringConverter.toASN(new Uint8Array([218,57,163,238,94,107,75,13,50,85,191,239,149,96,24,144,175,216,7,9]).buffer))}),e.rsaEncryption=o(a.id_rsaEncryption),e.md2WithRSAEncryption=o(a.id_md2WithRSAEncryption),e.md5WithRSAEncryption=o(a.id_md5WithRSAEncryption),e.sha1WithRSAEncryption=o(a.id_sha1WithRSAEncryption),e.sha224WithRSAEncryption=o(a.id_sha512_224WithRSAEncryption),e.sha256WithRSAEncryption=o(a.id_sha512_256WithRSAEncryption),e.sha384WithRSAEncryption=o(a.id_sha384WithRSAEncryption),e.sha512WithRSAEncryption=o(a.id_sha512WithRSAEncryption),e.sha512_224WithRSAEncryption=o(a.id_sha512_224WithRSAEncryption),e.sha512_256WithRSAEncryption=o(a.id_sha512_256WithRSAEncryption)})),Dr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RSAES_OAEP=e.RsaEsOaepParams=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=Tr(),o=Er();var s=class{hashAlgorithm=new i.AlgorithmIdentifier(o.sha1);maskGenAlgorithm=new i.AlgorithmIdentifier({algorithm:a.id_mgf1,parameters:r.AsnConvert.serialize(o.sha1)});pSourceAlgorithm=new i.AlgorithmIdentifier(o.pSpecifiedEmpty);constructor(e={}){Object.assign(this,e)}};e.RsaEsOaepParams=s,n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:0,defaultValue:o.sha1})],s.prototype,`hashAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:1,defaultValue:o.mgf1SHA1})],s.prototype,`maskGenAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:2,defaultValue:o.pSpecifiedEmpty})],s.prototype,`pSourceAlgorithm`,void 0),e.RSAES_OAEP=new i.AlgorithmIdentifier({algorithm:a.id_RSAES_OAEP,parameters:r.AsnConvert.serialize(new s)})})),Or=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RSASSA_PSS=e.RsaSaPssParams=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=Tr(),o=Er();var s=class{hashAlgorithm=new i.AlgorithmIdentifier(o.sha1);maskGenAlgorithm=new i.AlgorithmIdentifier({algorithm:a.id_mgf1,parameters:r.AsnConvert.serialize(o.sha1)});saltLength=20;trailerField=1;constructor(e={}){Object.assign(this,e)}};e.RsaSaPssParams=s,n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:0,defaultValue:o.sha1})],s.prototype,`hashAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier,context:1,defaultValue:o.mgf1SHA1})],s.prototype,`maskGenAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:2,defaultValue:20})],s.prototype,`saltLength`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,context:3,defaultValue:1})],s.prototype,`trailerField`,void 0),e.RSASSA_PSS=new i.AlgorithmIdentifier({algorithm:a.id_RSASSA_PSS,parameters:r.AsnConvert.serialize(new s)})})),kr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.DigestInfo=void 0;let n=(K(),t(B)),r=Y(),i=q();var a=class{digestAlgorithm=new r.AlgorithmIdentifier;digest=new i.OctetString;constructor(e={}){Object.assign(this,e)}};e.DigestInfo=a,n.__decorate([(0,i.AsnProp)({type:r.AlgorithmIdentifier})],a.prototype,`digestAlgorithm`,void 0),n.__decorate([(0,i.AsnProp)({type:i.OctetString})],a.prototype,`digest`,void 0)})),Ar=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(Dr(),e),n.__exportStar(Or(),e),n.__exportStar(kr(),e)})),jr=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.OtherPrimeInfos=e.OtherPrimeInfo=void 0;let r=(K(),t(B)),i=q();var a=class{prime=new ArrayBuffer(0);exponent=new ArrayBuffer(0);coefficient=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.OtherPrimeInfo=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,converter:i.AsnIntegerArrayBufferConverter})],a.prototype,`prime`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,converter:i.AsnIntegerArrayBufferConverter})],a.prototype,`exponent`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,converter:i.AsnIntegerArrayBufferConverter})],a.prototype,`coefficient`,void 0);let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.OtherPrimeInfos=o,e.OtherPrimeInfos=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a})],o)})),Mr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RSAPrivateKey=void 0;let n=(K(),t(B)),r=q(),i=jr();var a=class{version=0;modulus=new ArrayBuffer(0);publicExponent=new ArrayBuffer(0);privateExponent=new ArrayBuffer(0);prime1=new ArrayBuffer(0);prime2=new ArrayBuffer(0);exponent1=new ArrayBuffer(0);exponent2=new ArrayBuffer(0);coefficient=new ArrayBuffer(0);otherPrimeInfos;constructor(e={}){Object.assign(this,e)}};e.RSAPrivateKey=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],a.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`modulus`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`publicExponent`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`privateExponent`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`prime1`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`prime2`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`exponent1`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`exponent2`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],a.prototype,`coefficient`,void 0),n.__decorate([(0,r.AsnProp)({type:i.OtherPrimeInfos,optional:!0})],a.prototype,`otherPrimeInfos`,void 0)})),Nr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.RSAPublicKey=void 0;let n=(K(),t(B)),r=q();var i=class{modulus=new ArrayBuffer(0);publicExponent=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.RSAPublicKey=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`modulus`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer,converter:r.AsnIntegerArrayBufferConverter})],i.prototype,`publicExponent`,void 0)})),Pr=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(Ar(),e),n.__exportStar(Er(),e),n.__exportStar(Tr(),e),n.__exportStar(jr(),e),n.__exportStar(Mr(),e),n.__exportStar(Nr(),e)})),Fr=r({__assign:()=>ai,__asyncDelegator:()=>Zr,__asyncGenerator:()=>Xr,__asyncValues:()=>Qr,__await:()=>Yr,__awaiter:()=>Vr,__classPrivateFieldGet:()=>ni,__classPrivateFieldSet:()=>ri,__createBinding:()=>Ur,__decorate:()=>Rr,__exportStar:()=>Wr,__extends:()=>Ir,__generator:()=>Hr,__importDefault:()=>ti,__importStar:()=>ei,__makeTemplateObject:()=>$r,__metadata:()=>Br,__param:()=>zr,__read:()=>Kr,__rest:()=>Lr,__spread:()=>qr,__spreadArrays:()=>Jr,__values:()=>Gr});
89
89
  /*! *****************************************************************************
90
90
  Copyright (c) Microsoft Corporation.
91
91
 
@@ -100,9 +100,9 @@ LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
100
100
  OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
101
101
  PERFORMANCE OF THIS SOFTWARE.
102
102
  ***************************************************************************** */
103
- function Cr(e,t){Gr(e,t);function n(){this.constructor=e}e.prototype=t===null?Object.create(t):(n.prototype=t.prototype,new n)}function wr(e,t){var n={};for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&t.indexOf(r)<0&&(n[r]=e[r]);if(e!=null&&typeof Object.getOwnPropertySymbols==`function`)for(var i=0,r=Object.getOwnPropertySymbols(e);i<r.length;i++)t.indexOf(r[i])<0&&Object.prototype.propertyIsEnumerable.call(e,r[i])&&(n[r[i]]=e[r[i]]);return n}function Tr(e,t,n,r){var i=arguments.length,a=i<3?t:r===null?r=Object.getOwnPropertyDescriptor(t,n):r,o;if(typeof Reflect==`object`&&typeof Reflect.decorate==`function`)a=Reflect.decorate(e,t,n,r);else for(var s=e.length-1;s>=0;s--)(o=e[s])&&(a=(i<3?o(a):i>3?o(t,n,a):o(t,n))||a);return i>3&&a&&Object.defineProperty(t,n,a),a}function Er(e,t){return function(n,r){t(n,r,e)}}function Dr(e,t){if(typeof Reflect==`object`&&typeof Reflect.metadata==`function`)return Reflect.metadata(e,t)}function Or(e,t,n,r){function i(e){return e instanceof n?e:new n(function(t){t(e)})}return new(n||=Promise)(function(n,a){function o(e){try{c(r.next(e))}catch(e){a(e)}}function s(e){try{c(r.throw(e))}catch(e){a(e)}}function c(e){e.done?n(e.value):i(e.value).then(o,s)}c((r=r.apply(e,t||[])).next())})}function kr(e,t){var n={label:0,sent:function(){if(a[0]&1)throw a[1];return a[1]},trys:[],ops:[]},r,i,a,o;return o={next:s(0),throw:s(1),return:s(2)},typeof Symbol==`function`&&(o[Symbol.iterator]=function(){return this}),o;function s(e){return function(t){return c([e,t])}}function c(o){if(r)throw TypeError(`Generator is already executing.`);for(;n;)try{if(r=1,i&&(a=o[0]&2?i.return:o[0]?i.throw||((a=i.return)&&a.call(i),0):i.next)&&!(a=a.call(i,o[1])).done)return a;switch(i=0,a&&(o=[o[0]&2,a.value]),o[0]){case 0:case 1:a=o;break;case 4:return n.label++,{value:o[1],done:!1};case 5:n.label++,i=o[1],o=[0];continue;case 7:o=n.ops.pop(),n.trys.pop();continue;default:if(a=n.trys,!(a=a.length>0&&a[a.length-1])&&(o[0]===6||o[0]===2)){n=0;continue}if(o[0]===3&&(!a||o[1]>a[0]&&o[1]<a[3])){n.label=o[1];break}if(o[0]===6&&n.label<a[1]){n.label=a[1],a=o;break}if(a&&n.label<a[2]){n.label=a[2],n.ops.push(o);break}a[2]&&n.ops.pop(),n.trys.pop();continue}o=t.call(e,n)}catch(e){o=[6,e],i=0}finally{r=a=0}if(o[0]&5)throw o[1];return{value:o[0]?o[1]:void 0,done:!0}}}function Ar(e,t,n,r){r===void 0&&(r=n),e[r]=t[n]}function jr(e,t){for(var n in e)n!=="default"&&!t.hasOwnProperty(n)&&(t[n]=e[n])}function Mr(e){var t=typeof Symbol==`function`&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&typeof e.length==`number`)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw TypeError(t?`Object is not iterable.`:`Symbol.iterator is not defined.`)}function Nr(e,t){var n=typeof Symbol==`function`&&e[Symbol.iterator];if(!n)return e;var r=n.call(e),i,a=[],o;try{for(;(t===void 0||t-->0)&&!(i=r.next()).done;)a.push(i.value)}catch(e){o={error:e}}finally{try{i&&!i.done&&(n=r.return)&&n.call(r)}finally{if(o)throw o.error}}return a}function Pr(){for(var e=[],t=0;t<arguments.length;t++)e=e.concat(Nr(arguments[t]));return e}function Fr(){for(var e=0,t=0,n=arguments.length;t<n;t++)e+=arguments[t].length;for(var r=Array(e),i=0,t=0;t<n;t++)for(var a=arguments[t],o=0,s=a.length;o<s;o++,i++)r[i]=a[o];return r}function Ir(e){return this instanceof Ir?(this.v=e,this):new Ir(e)}function Lr(e,t,n){if(!Symbol.asyncIterator)throw TypeError(`Symbol.asyncIterator is not defined.`);var r=n.apply(e,t||[]),i,a=[];return i={},o(`next`),o(`throw`),o(`return`),i[Symbol.asyncIterator]=function(){return this},i;function o(e){r[e]&&(i[e]=function(t){return new Promise(function(n,r){a.push([e,t,n,r])>1||s(e,t)})})}function s(e,t){try{c(r[e](t))}catch(e){d(a[0][3],e)}}function c(e){e.value instanceof Ir?Promise.resolve(e.value.v).then(l,u):d(a[0][2],e)}function l(e){s(`next`,e)}function u(e){s(`throw`,e)}function d(e,t){e(t),a.shift(),a.length&&s(a[0][0],a[0][1])}}function Rr(e){var t,n;return t={},r(`next`),r(`throw`,function(e){throw e}),r(`return`),t[Symbol.iterator]=function(){return this},t;function r(r,i){t[r]=e[r]?function(t){return(n=!n)?{value:Ir(e[r](t)),done:r===`return`}:i?i(t):t}:i}}function zr(e){if(!Symbol.asyncIterator)throw TypeError(`Symbol.asyncIterator is not defined.`);var t=e[Symbol.asyncIterator],n;return t?t.call(e):(e=typeof Mr==`function`?Mr(e):e[Symbol.iterator](),n={},r(`next`),r(`throw`),r(`return`),n[Symbol.asyncIterator]=function(){return this},n);function r(t){n[t]=e[t]&&function(n){return new Promise(function(r,a){n=e[t](n),i(r,a,n.done,n.value)})}}function i(e,t,n,r){Promise.resolve(r).then(function(t){e({value:t,done:n})},t)}}function Br(e,t){return Object.defineProperty?Object.defineProperty(e,"raw",{value:t}):e.raw=t,e}function Vr(e){if(e&&e.__esModule)return e;var t={};if(e!=null)for(var n in e)Object.hasOwnProperty.call(e,n)&&(t[n]=e[n]);return t.default=e,t}function Hr(e){return e&&e.__esModule?e:{default:e}}function Ur(e,t){if(!t.has(e))throw TypeError(`attempted to get private field on non-instance`);return t.get(e)}function Wr(e,t,n){if(!t.has(e))throw TypeError(`attempted to set private field on non-instance`);return t.set(e,n),n}var Gr,Kr,qr=r((()=>{Gr=function(e,t){return Gr=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])},Gr(e,t)},Kr=function(){return Kr=Object.assign||function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n],t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},Kr.apply(this,arguments)}})),Jr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t;(function(e){e[e.Transient=0]=`Transient`,e[e.Singleton=1]=`Singleton`,e[e.ResolutionScoped=2]=`ResolutionScoped`,e[e.ContainerScoped=3]=`ContainerScoped`})(t||={}),e.default=t})),Yr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t=Jr();Object.defineProperty(e,"Lifecycle",{enumerable:!0,get:function(){return t.default}})})),Xr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.defineInjectionTokenMetadata=e.getParamInfo=e.INJECTION_TOKEN_METADATA_KEY=void 0,e.INJECTION_TOKEN_METADATA_KEY=`injectionTokens`;function t(t){let n=Reflect.getMetadata(`design:paramtypes`,t)||[],r=Reflect.getOwnMetadata(e.INJECTION_TOKEN_METADATA_KEY,t)||{};return Object.keys(r).forEach(e=>{n[+e]=r[e]}),n}e.getParamInfo=t;function n(t,n){return function(r,i,a){let o=Reflect.getOwnMetadata(e.INJECTION_TOKEN_METADATA_KEY,r)||{};o[a]=n?{token:t,transform:n.transformToken,transformArgs:n.args||[]}:t,Reflect.defineMetadata(e.INJECTION_TOKEN_METADATA_KEY,o,r)}}e.defineInjectionTokenMetadata=n})),Zr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isClassProvider=void 0;function t(e){return!!e.useClass}e.isClassProvider=t})),Qr=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isFactoryProvider=void 0;function t(e){return!!e.useFactory}e.isFactoryProvider=t})),$r=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.delay=e.DelayedConstructor=void 0;var t=class{constructor(e){this.wrap=e,this.reflectMethods=[`get`,`getPrototypeOf`,`setPrototypeOf`,`getOwnPropertyDescriptor`,`defineProperty`,`has`,`set`,`deleteProperty`,`apply`,`construct`,`ownKeys`]}createProxy(e){let t={},n=!1,r;return new Proxy(t,this.createHandler(()=>(n||=(r=e(this.wrap()),!0),r)))}createHandler(e){let t={};return this.reflectMethods.forEach(n=>{t[n]=(...t)=>{t[0]=e();let r=Reflect[n];return r(...t)}}),t}};e.DelayedConstructor=t;function n(e){if(e===void 0)throw Error("Attempt to `delay` undefined. Constructor must be wrapped in a callback");return new t(e)}e.delay=n})),ei=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isConstructorToken=e.isTransformDescriptor=e.isTokenDescriptor=e.isNormalToken=void 0;let t=$r();function n(e){return typeof e==`string`||typeof e==`symbol`}e.isNormalToken=n;function r(e){return typeof e==`object`&&`token`in e&&`multiple`in e}e.isTokenDescriptor=r;function i(e){return typeof e==`object`&&`token`in e&&`transform`in e}e.isTransformDescriptor=i;function a(e){return typeof e==`function`||e instanceof t.DelayedConstructor}e.isConstructorToken=a})),ti=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isTokenProvider=void 0;function t(e){return!!e.useToken}e.isTokenProvider=t})),ni=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isValueProvider=void 0;function t(e){return e.useValue!=null}e.isValueProvider=t})),ri=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t=Zr();Object.defineProperty(e,"isClassProvider",{enumerable:!0,get:function(){return t.isClassProvider}});var n=Qr();Object.defineProperty(e,"isFactoryProvider",{enumerable:!0,get:function(){return n.isFactoryProvider}});var r=ei();Object.defineProperty(e,"isNormalToken",{enumerable:!0,get:function(){return r.isNormalToken}});var i=ti();Object.defineProperty(e,"isTokenProvider",{enumerable:!0,get:function(){return i.isTokenProvider}});var a=ni();Object.defineProperty(e,"isValueProvider",{enumerable:!0,get:function(){return a.isValueProvider}})})),ii=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isProvider=void 0;let t=Zr(),n=ni(),r=ti(),i=Qr();function a(e){return t.isClassProvider(e)||n.isValueProvider(e)||r.isTokenProvider(e)||i.isFactoryProvider(e)}e.isProvider=a})),ai=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.default=class{constructor(){this._registryMap=new Map}entries(){return this._registryMap.entries()}getAll(e){return this.ensure(e),this._registryMap.get(e)}get(e){this.ensure(e);let t=this._registryMap.get(e);return t[t.length-1]||null}set(e,t){this.ensure(e),this._registryMap.get(e).push(t)}setAll(e,t){this._registryMap.set(e,t)}has(e){return this.ensure(e),this._registryMap.get(e).length>0}clear(){this._registryMap.clear()}ensure(e){this._registryMap.has(e)||this._registryMap.set(e,[])}}})),oi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=ai();e.default=class extends t.default{}})),si=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.default=class{constructor(){this.scopedResolutions=new Map}}})),ci=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.formatErrorCtor=void 0;function t(e,t){return e===null?`at position #${t}`:`"${e.split(`,`)[t].trim()}" at position #${t}`}function n(e,t,n=` `){return[e,...t.message.split(`
103
+ function Ir(e,t){ii(e,t);function n(){this.constructor=e}e.prototype=t===null?Object.create(t):(n.prototype=t.prototype,new n)}function Lr(e,t){var n={};for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&t.indexOf(r)<0&&(n[r]=e[r]);if(e!=null&&typeof Object.getOwnPropertySymbols==`function`)for(var i=0,r=Object.getOwnPropertySymbols(e);i<r.length;i++)t.indexOf(r[i])<0&&Object.prototype.propertyIsEnumerable.call(e,r[i])&&(n[r[i]]=e[r[i]]);return n}function Rr(e,t,n,r){var i=arguments.length,a=i<3?t:r===null?r=Object.getOwnPropertyDescriptor(t,n):r,o;if(typeof Reflect==`object`&&typeof Reflect.decorate==`function`)a=Reflect.decorate(e,t,n,r);else for(var s=e.length-1;s>=0;s--)(o=e[s])&&(a=(i<3?o(a):i>3?o(t,n,a):o(t,n))||a);return i>3&&a&&Object.defineProperty(t,n,a),a}function zr(e,t){return function(n,r){t(n,r,e)}}function Br(e,t){if(typeof Reflect==`object`&&typeof Reflect.metadata==`function`)return Reflect.metadata(e,t)}function Vr(e,t,n,r){function i(e){return e instanceof n?e:new n(function(t){t(e)})}return new(n||=Promise)(function(n,a){function o(e){try{c(r.next(e))}catch(e){a(e)}}function s(e){try{c(r.throw(e))}catch(e){a(e)}}function c(e){e.done?n(e.value):i(e.value).then(o,s)}c((r=r.apply(e,t||[])).next())})}function Hr(e,t){var n={label:0,sent:function(){if(a[0]&1)throw a[1];return a[1]},trys:[],ops:[]},r,i,a,o={next:s(0),throw:s(1),return:s(2)};return typeof Symbol==`function`&&(o[Symbol.iterator]=function(){return this}),o;function s(e){return function(t){return c([e,t])}}function c(o){if(r)throw TypeError(`Generator is already executing.`);for(;n;)try{if(r=1,i&&(a=o[0]&2?i.return:o[0]?i.throw||((a=i.return)&&a.call(i),0):i.next)&&!(a=a.call(i,o[1])).done)return a;switch(i=0,a&&(o=[o[0]&2,a.value]),o[0]){case 0:case 1:a=o;break;case 4:return n.label++,{value:o[1],done:!1};case 5:n.label++,i=o[1],o=[0];continue;case 7:o=n.ops.pop(),n.trys.pop();continue;default:if(a=n.trys,!(a=a.length>0&&a[a.length-1])&&(o[0]===6||o[0]===2)){n=0;continue}if(o[0]===3&&(!a||o[1]>a[0]&&o[1]<a[3])){n.label=o[1];break}if(o[0]===6&&n.label<a[1]){n.label=a[1],a=o;break}if(a&&n.label<a[2]){n.label=a[2],n.ops.push(o);break}a[2]&&n.ops.pop(),n.trys.pop();continue}o=t.call(e,n)}catch(e){o=[6,e],i=0}finally{r=a=0}if(o[0]&5)throw o[1];return{value:o[0]?o[1]:void 0,done:!0}}}function Ur(e,t,n,r){r===void 0&&(r=n),e[r]=t[n]}function Wr(e,t){for(var n in e)n!=="default"&&!t.hasOwnProperty(n)&&(t[n]=e[n])}function Gr(e){var t=typeof Symbol==`function`&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&typeof e.length==`number`)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw TypeError(t?`Object is not iterable.`:`Symbol.iterator is not defined.`)}function Kr(e,t){var n=typeof Symbol==`function`&&e[Symbol.iterator];if(!n)return e;var r=n.call(e),i,a=[],o;try{for(;(t===void 0||t-->0)&&!(i=r.next()).done;)a.push(i.value)}catch(e){o={error:e}}finally{try{i&&!i.done&&(n=r.return)&&n.call(r)}finally{if(o)throw o.error}}return a}function qr(){for(var e=[],t=0;t<arguments.length;t++)e=e.concat(Kr(arguments[t]));return e}function Jr(){for(var e=0,t=0,n=arguments.length;t<n;t++)e+=arguments[t].length;for(var r=Array(e),i=0,t=0;t<n;t++)for(var a=arguments[t],o=0,s=a.length;o<s;o++,i++)r[i]=a[o];return r}function Yr(e){return this instanceof Yr?(this.v=e,this):new Yr(e)}function Xr(e,t,n){if(!Symbol.asyncIterator)throw TypeError(`Symbol.asyncIterator is not defined.`);var r=n.apply(e,t||[]),i,a=[];return i={},o(`next`),o(`throw`),o(`return`),i[Symbol.asyncIterator]=function(){return this},i;function o(e){r[e]&&(i[e]=function(t){return new Promise(function(n,r){a.push([e,t,n,r])>1||s(e,t)})})}function s(e,t){try{c(r[e](t))}catch(e){d(a[0][3],e)}}function c(e){e.value instanceof Yr?Promise.resolve(e.value.v).then(l,u):d(a[0][2],e)}function l(e){s(`next`,e)}function u(e){s(`throw`,e)}function d(e,t){e(t),a.shift(),a.length&&s(a[0][0],a[0][1])}}function Zr(e){var t={},n;return r(`next`),r(`throw`,function(e){throw e}),r(`return`),t[Symbol.iterator]=function(){return this},t;function r(r,i){t[r]=e[r]?function(t){return(n=!n)?{value:Yr(e[r](t)),done:r===`return`}:i?i(t):t}:i}}function Qr(e){if(!Symbol.asyncIterator)throw TypeError(`Symbol.asyncIterator is not defined.`);var t=e[Symbol.asyncIterator],n;return t?t.call(e):(e=typeof Gr==`function`?Gr(e):e[Symbol.iterator](),n={},r(`next`),r(`throw`),r(`return`),n[Symbol.asyncIterator]=function(){return this},n);function r(t){n[t]=e[t]&&function(n){return new Promise(function(r,a){n=e[t](n),i(r,a,n.done,n.value)})}}function i(e,t,n,r){Promise.resolve(r).then(function(t){e({value:t,done:n})},t)}}function $r(e,t){return Object.defineProperty?Object.defineProperty(e,"raw",{value:t}):e.raw=t,e}function ei(e){if(e&&e.__esModule)return e;var t={};if(e!=null)for(var n in e)Object.hasOwnProperty.call(e,n)&&(t[n]=e[n]);return t.default=e,t}function ti(e){return e&&e.__esModule?e:{default:e}}function ni(e,t){if(!t.has(e))throw TypeError(`attempted to get private field on non-instance`);return t.get(e)}function ri(e,t,n){if(!t.has(e))throw TypeError(`attempted to set private field on non-instance`);return t.set(e,n),n}var ii,ai,oi=n((()=>{ii=function(e,t){return ii=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])},ii(e,t)},ai=function(){return ai=Object.assign||function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n],t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},ai.apply(this,arguments)}})),si=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t;(function(e){e[e.Transient=0]=`Transient`,e[e.Singleton=1]=`Singleton`,e[e.ResolutionScoped=2]=`ResolutionScoped`,e[e.ContainerScoped=3]=`ContainerScoped`})(t||={}),e.default=t})),ci=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t=si();Object.defineProperty(e,"Lifecycle",{enumerable:!0,get:function(){return t.default}})})),li=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.defineInjectionTokenMetadata=e.getParamInfo=e.INJECTION_TOKEN_METADATA_KEY=void 0,e.INJECTION_TOKEN_METADATA_KEY=`injectionTokens`;function t(t){let n=Reflect.getMetadata(`design:paramtypes`,t)||[],r=Reflect.getOwnMetadata(e.INJECTION_TOKEN_METADATA_KEY,t)||{};return Object.keys(r).forEach(e=>{n[+e]=r[e]}),n}e.getParamInfo=t;function n(t,n){return function(r,i,a){let o=Reflect.getOwnMetadata(e.INJECTION_TOKEN_METADATA_KEY,r)||{};o[a]=n?{token:t,transform:n.transformToken,transformArgs:n.args||[]}:t,Reflect.defineMetadata(e.INJECTION_TOKEN_METADATA_KEY,o,r)}}e.defineInjectionTokenMetadata=n})),ui=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isClassProvider=void 0;function t(e){return!!e.useClass}e.isClassProvider=t})),di=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isFactoryProvider=void 0;function t(e){return!!e.useFactory}e.isFactoryProvider=t})),fi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.delay=e.DelayedConstructor=void 0;var t=class{constructor(e){this.wrap=e,this.reflectMethods=[`get`,`getPrototypeOf`,`setPrototypeOf`,`getOwnPropertyDescriptor`,`defineProperty`,`has`,`set`,`deleteProperty`,`apply`,`construct`,`ownKeys`]}createProxy(e){let t={},n=!1,r;return new Proxy(t,this.createHandler(()=>(n||=(r=e(this.wrap()),!0),r)))}createHandler(e){let t={};return this.reflectMethods.forEach(n=>{t[n]=(...t)=>{t[0]=e();let r=Reflect[n];return r(...t)}}),t}};e.DelayedConstructor=t;function n(e){if(e===void 0)throw Error("Attempt to `delay` undefined. Constructor must be wrapped in a callback");return new t(e)}e.delay=n})),pi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isConstructorToken=e.isTransformDescriptor=e.isTokenDescriptor=e.isNormalToken=void 0;let t=fi();function n(e){return typeof e==`string`||typeof e==`symbol`}e.isNormalToken=n;function r(e){return typeof e==`object`&&`token`in e&&`multiple`in e}e.isTokenDescriptor=r;function i(e){return typeof e==`object`&&`token`in e&&`transform`in e}e.isTransformDescriptor=i;function a(e){return typeof e==`function`||e instanceof t.DelayedConstructor}e.isConstructorToken=a})),mi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isTokenProvider=void 0;function t(e){return!!e.useToken}e.isTokenProvider=t})),hi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isValueProvider=void 0;function t(e){return e.useValue!=null}e.isValueProvider=t})),gi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t=ui();Object.defineProperty(e,"isClassProvider",{enumerable:!0,get:function(){return t.isClassProvider}});var n=di();Object.defineProperty(e,"isFactoryProvider",{enumerable:!0,get:function(){return n.isFactoryProvider}});var r=pi();Object.defineProperty(e,"isNormalToken",{enumerable:!0,get:function(){return r.isNormalToken}});var i=mi();Object.defineProperty(e,"isTokenProvider",{enumerable:!0,get:function(){return i.isTokenProvider}});var a=hi();Object.defineProperty(e,"isValueProvider",{enumerable:!0,get:function(){return a.isValueProvider}})})),_i=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isProvider=void 0;let t=ui(),n=hi(),r=mi(),i=di();function a(e){return t.isClassProvider(e)||n.isValueProvider(e)||r.isTokenProvider(e)||i.isFactoryProvider(e)}e.isProvider=a})),vi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.default=class{constructor(){this._registryMap=new Map}entries(){return this._registryMap.entries()}getAll(e){return this.ensure(e),this._registryMap.get(e)}get(e){this.ensure(e);let t=this._registryMap.get(e);return t[t.length-1]||null}set(e,t){this.ensure(e),this._registryMap.get(e).push(t)}setAll(e,t){this._registryMap.set(e,t)}has(e){return this.ensure(e),this._registryMap.get(e).length>0}clear(){this._registryMap.clear()}ensure(e){this._registryMap.has(e)||this._registryMap.set(e,[])}}})),yi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=vi();e.default=class extends t.default{}})),bi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.default=class{constructor(){this.scopedResolutions=new Map}}})),xi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.formatErrorCtor=void 0;function t(e,t){return e===null?`at position #${t}`:`"${e.split(`,`)[t].trim()}" at position #${t}`}function n(e,t,n=` `){return[e,...t.message.split(`
104
104
  `).map(e=>n+e)].join(`
105
- `)}function r(e,r,i){let[,a=null]=e.toString().match(/constructor\(([\w, ]+)\)/)||[];return n(`Cannot inject the dependency ${t(a,r)} of "${e.name}" constructor. Reason:`,i)}e.formatErrorCtor=r})),li=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isDisposable=void 0;function t(e){return!(typeof e.dispose!=`function`||e.dispose.length>0)}e.isDisposable=t})),ui=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PostResolutionInterceptors=e.PreResolutionInterceptors=void 0;let t=ai();var n=class extends t.default{};e.PreResolutionInterceptors=n;var r=class extends t.default{};e.PostResolutionInterceptors=r,e.default=class{constructor(){this.preResolution=new n,this.postResolution=new r}}})),di=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.instance=e.typeInfo=void 0;let n=(qr(),t(Sr)),r=ri(),i=ii(),a=ei(),o=oi(),s=Jr(),c=si(),l=ci(),u=$r(),d=li(),f=ui();e.typeInfo=new Map,e.instance=new class t{constructor(e){this.parent=e,this._registry=new o.default,this.interceptors=new f.default,this.disposed=!1,this.disposables=new Set}register(e,t,n={lifecycle:s.default.Transient}){this.ensureNotDisposed();let a;if(a=i.isProvider(t)?t:{useClass:t},r.isTokenProvider(a)){let t=[e],n=a;for(;n!=null;){let e=n.useToken;if(t.includes(e))throw Error(`Token registration cycle detected! ${[...t,e].join(` -> `)}`);t.push(e);let i=this._registry.get(e);n=i&&r.isTokenProvider(i.provider)?i.provider:null}}if((n.lifecycle===s.default.Singleton||n.lifecycle==s.default.ContainerScoped||n.lifecycle==s.default.ResolutionScoped)&&(r.isValueProvider(a)||r.isFactoryProvider(a)))throw Error(`Cannot use lifecycle "${s.default[n.lifecycle]}" with ValueProviders or FactoryProviders`);return this._registry.set(e,{provider:a,options:n}),this}registerType(e,t){return this.ensureNotDisposed(),r.isNormalToken(t)?this.register(e,{useToken:t}):this.register(e,{useClass:t})}registerInstance(e,t){return this.ensureNotDisposed(),this.register(e,{useValue:t})}registerSingleton(e,t){if(this.ensureNotDisposed(),r.isNormalToken(e)){if(r.isNormalToken(t))return this.register(e,{useToken:t},{lifecycle:s.default.Singleton});if(t)return this.register(e,{useClass:t},{lifecycle:s.default.Singleton});throw Error(`Cannot register a type name as a singleton without a "to" token`)}let n=e;return t&&!r.isNormalToken(t)&&(n=t),this.register(e,{useClass:n},{lifecycle:s.default.Singleton})}resolve(e,t=new c.default,n=!1){this.ensureNotDisposed();let i=this.getRegistration(e);if(!i&&r.isNormalToken(e)){if(n)return;throw Error(`Attempted to resolve unregistered dependency token: "${e.toString()}"`)}if(this.executePreResolutionInterceptor(e,`Single`),i){let n=this.resolveRegistration(i,t);return this.executePostResolutionInterceptor(e,n,`Single`),n}if(a.isConstructorToken(e)){let n=this.construct(e,t);return this.executePostResolutionInterceptor(e,n,`Single`),n}throw Error("Attempted to construct an undefined constructor. Could mean a circular dependency problem. Try using `delay` function.")}executePreResolutionInterceptor(e,t){if(this.interceptors.preResolution.has(e)){let n=[];for(let r of this.interceptors.preResolution.getAll(e))r.options.frequency!=`Once`&&n.push(r),r.callback(e,t);this.interceptors.preResolution.setAll(e,n)}}executePostResolutionInterceptor(e,t,n){if(this.interceptors.postResolution.has(e)){let r=[];for(let i of this.interceptors.postResolution.getAll(e))i.options.frequency!=`Once`&&r.push(i),i.callback(e,t,n);this.interceptors.postResolution.setAll(e,r)}}resolveRegistration(e,t){if(this.ensureNotDisposed(),e.options.lifecycle===s.default.ResolutionScoped&&t.scopedResolutions.has(e))return t.scopedResolutions.get(e);let n=e.options.lifecycle===s.default.Singleton,i=e.options.lifecycle===s.default.ContainerScoped,a=n||i,o;return o=r.isValueProvider(e.provider)?e.provider.useValue:r.isTokenProvider(e.provider)?a?e.instance||=this.resolve(e.provider.useToken,t):this.resolve(e.provider.useToken,t):r.isClassProvider(e.provider)?a?e.instance||=this.construct(e.provider.useClass,t):this.construct(e.provider.useClass,t):r.isFactoryProvider(e.provider)?e.provider.useFactory(this):this.construct(e.provider,t),e.options.lifecycle===s.default.ResolutionScoped&&t.scopedResolutions.set(e,o),o}resolveAll(e,t=new c.default,n=!1){this.ensureNotDisposed();let i=this.getAllRegistrations(e);if(!i&&r.isNormalToken(e)){if(n)return[];throw Error(`Attempted to resolve unregistered dependency token: "${e.toString()}"`)}if(this.executePreResolutionInterceptor(e,`All`),i){let n=i.map(e=>this.resolveRegistration(e,t));return this.executePostResolutionInterceptor(e,n,`All`),n}let a=[this.construct(e,t)];return this.executePostResolutionInterceptor(e,a,`All`),a}isRegistered(e,t=!1){return this.ensureNotDisposed(),this._registry.has(e)||t&&(this.parent||!1)&&this.parent.isRegistered(e,!0)}reset(){this.ensureNotDisposed(),this._registry.clear(),this.interceptors.preResolution.clear(),this.interceptors.postResolution.clear()}clearInstances(){this.ensureNotDisposed();for(let[e,t]of this._registry.entries())this._registry.setAll(e,t.filter(e=>!r.isValueProvider(e.provider)).map(e=>(e.instance=void 0,e)))}createChildContainer(){this.ensureNotDisposed();let e=new t(this);for(let[t,n]of this._registry.entries())n.some(({options:e})=>e.lifecycle===s.default.ContainerScoped)&&e._registry.setAll(t,n.map(e=>e.options.lifecycle===s.default.ContainerScoped?{provider:e.provider,options:e.options}:e));return e}beforeResolution(e,t,n={frequency:`Always`}){this.interceptors.preResolution.set(e,{callback:t,options:n})}afterResolution(e,t,n={frequency:`Always`}){this.interceptors.postResolution.set(e,{callback:t,options:n})}dispose(){return n.__awaiter(this,void 0,void 0,function*(){this.disposed=!0;let e=[];this.disposables.forEach(t=>{let n=t.dispose();n&&e.push(n)}),yield Promise.all(e)})}getRegistration(e){return this.isRegistered(e)?this._registry.get(e):this.parent?this.parent.getRegistration(e):null}getAllRegistrations(e){return this.isRegistered(e)?this._registry.getAll(e):this.parent?this.parent.getAllRegistrations(e):null}construct(t,n){if(t instanceof u.DelayedConstructor)return t.createProxy(e=>this.resolve(e,n));let r=(()=>{let r=e.typeInfo.get(t);if(!r||r.length===0){if(t.length===0)return new t;throw Error(`TypeInfo not known for "${t.name}"`)}return new t(...r.map(this.resolveParams(n,t)))})();return d.isDisposable(r)&&this.disposables.add(r),r}resolveParams(e,t){return(n,r)=>{try{return a.isTokenDescriptor(n)?a.isTransformDescriptor(n)?n.multiple?this.resolve(n.transform).transform(this.resolveAll(n.token,new c.default,n.isOptional),...n.transformArgs):this.resolve(n.transform).transform(this.resolve(n.token,e,n.isOptional),...n.transformArgs):n.multiple?this.resolveAll(n.token,new c.default,n.isOptional):this.resolve(n.token,e,n.isOptional):a.isTransformDescriptor(n)?this.resolve(n.transform,e).transform(this.resolve(n.token,e),...n.transformArgs):this.resolve(n,e)}catch(e){throw Error(l.formatErrorCtor(t,r,e))}}}ensureNotDisposed(){if(this.disposed)throw Error(`This container has been disposed, you cannot interact with a disposed container`)}},e.default=e.instance})),fi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=Xr(),n=di(),r=ei(),i=ci();function a(){return function(e){let a=t.getParamInfo(e);return class extends e{constructor(...t){super(...t.concat(a.slice(t.length).map((a,o)=>{try{return r.isTokenDescriptor(a)?r.isTransformDescriptor(a)?a.multiple?n.instance.resolve(a.transform).transform(n.instance.resolveAll(a.token),...a.transformArgs):n.instance.resolve(a.transform).transform(n.instance.resolve(a.token),...a.transformArgs):a.multiple?n.instance.resolveAll(a.token):n.instance.resolve(a.token):r.isTransformDescriptor(a)?n.instance.resolve(a.transform).transform(n.instance.resolve(a.token),...a.transformArgs):n.instance.resolve(a)}catch(n){let r=o+t.length;throw Error(i.formatErrorCtor(e,r,n))}})))}}}}e.default=a})),pi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=Xr();function n(e,n){let r={token:e,multiple:!1,isOptional:n&&n.isOptional};return t.defineInjectionTokenMetadata(r)}e.default=n})),mi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=Xr(),n=di(),r=di();function i(e){return function(i){n.typeInfo.set(i,t.getParamInfo(i)),e&&e.token&&(Array.isArray(e.token)?e.token.forEach(e=>{r.instance.register(e,i)}):r.instance.register(e.token,i))}}e.default=i})),hi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(qr(),t(Sr)),r=di();function i(e=[]){return function(t){return e.forEach(e=>{var{token:t,options:i}=e,a=n.__rest(e,[`token`,`options`]);return r.instance.register(t,a,i)}),t}}e.default=i})),gi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=mi(),n=di();function r(){return function(e){t.default()(e),n.instance.registerSingleton(e)}}e.default=r})),_i=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=Xr();function n(e,n){let r={token:e,multiple:!0,isOptional:n&&n.isOptional};return t.defineInjectionTokenMetadata(r)}e.default=n})),vi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=Xr();function n(e,n,...r){let i={token:e,multiple:!0,transform:n,transformArgs:r};return t.defineInjectionTokenMetadata(i)}e.default=n})),yi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=Xr();function n(e,n,...r){return t.defineInjectionTokenMetadata(e,{transformToken:n,args:r})}e.default=n})),bi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=mi(),n=di();function r(e,r){return function(i){t.default()(i),n.instance.register(r||i,i,{lifecycle:e})}}e.default=r})),xi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t=fi();Object.defineProperty(e,"autoInjectable",{enumerable:!0,get:function(){return t.default}});var n=pi();Object.defineProperty(e,"inject",{enumerable:!0,get:function(){return n.default}});var r=mi();Object.defineProperty(e,"injectable",{enumerable:!0,get:function(){return r.default}});var i=hi();Object.defineProperty(e,"registry",{enumerable:!0,get:function(){return i.default}});var a=gi();Object.defineProperty(e,"singleton",{enumerable:!0,get:function(){return a.default}});var o=_i();Object.defineProperty(e,"injectAll",{enumerable:!0,get:function(){return o.default}});var s=vi();Object.defineProperty(e,"injectAllWithTransform",{enumerable:!0,get:function(){return s.default}});var c=yi();Object.defineProperty(e,"injectWithTransform",{enumerable:!0,get:function(){return c.default}});var l=bi();Object.defineProperty(e,"scoped",{enumerable:!0,get:function(){return l.default}})})),Si=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});function t(e){let t;return n=>(t??=e(n),t)}e.default=t})),Ci=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});function t(e){let t=new WeakMap;return n=>{let r=t.get(n);return r??(r=e(n),t.set(n,r)),r}}e.default=t})),wi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});function t(e,t,n,r=!0){let i,a;return o=>{let s=e(o);return(!r||a!==s)&&(i=(a=s)?o.resolve(t):o.resolve(n)),i}}e.default=t})),Ti=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t=Si();Object.defineProperty(e,"instanceCachingFactory",{enumerable:!0,get:function(){return t.default}});var n=Ci();Object.defineProperty(e,"instancePerContainerCachingFactory",{enumerable:!0,get:function(){return n.default}});var r=wi();Object.defineProperty(e,"predicateAwareClassFactory",{enumerable:!0,get:function(){return r.default}})})),Ei=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(qr(),t(Sr));if(typeof Reflect>`u`||!Reflect.getMetadata)throw Error(`tsyringe requires a reflect polyfill. Please add 'import "reflect-metadata"' to the top of your entry point.`);var r=Yr();Object.defineProperty(e,"Lifecycle",{enumerable:!0,get:function(){return r.Lifecycle}}),n.__exportStar(xi(),e),n.__exportStar(Ti(),e),n.__exportStar(ri(),e);var i=$r();Object.defineProperty(e,"delay",{enumerable:!0,get:function(){return i.delay}});var a=di();Object.defineProperty(e,"container",{enumerable:!0,get:function(){return a.instance}})})),Di=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.PKCS12AttrSet=e.PKCS12Attribute=void 0;let r=(G(),t(L)),i=q();var a=class{attrId=``;attrValues=[];constructor(e={}){Object.assign(e)}};e.PKCS12Attribute=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`attrId`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any,repeated:`set`})],a.prototype,`attrValues`,void 0);let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.PKCS12AttrSet=o,e.PKCS12AttrSet=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a})],o)})),Oi=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.AuthenticatedSafe=void 0;let r=(G(),t(L)),i=q(),a=ir(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.AuthenticatedSafe=o,e.AuthenticatedSafe=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.ContentInfo})],o)})),ki=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_bagtypes=e.id_pbewithSHAAnd40BitRC2_CBC=e.id_pbeWithSHAAnd128BitRC2_CBC=e.id_pbeWithSHAAnd2_KeyTripleDES_CBC=e.id_pbeWithSHAAnd3_KeyTripleDES_CBC=e.id_pbeWithSHAAnd40BitRC4=e.id_pbeWithSHAAnd128BitRC4=e.id_pkcs_12PbeIds=e.id_pkcs_12=e.id_pkcs=e.id_rsadsi=void 0,e.id_rsadsi=`1.2.840.113549`,e.id_pkcs=`${e.id_rsadsi}.1`,e.id_pkcs_12=`${e.id_pkcs}.12`,e.id_pkcs_12PbeIds=`${e.id_pkcs_12}.1`,e.id_pbeWithSHAAnd128BitRC4=`${e.id_pkcs_12PbeIds}.1`,e.id_pbeWithSHAAnd40BitRC4=`${e.id_pkcs_12PbeIds}.2`,e.id_pbeWithSHAAnd3_KeyTripleDES_CBC=`${e.id_pkcs_12PbeIds}.3`,e.id_pbeWithSHAAnd2_KeyTripleDES_CBC=`${e.id_pkcs_12PbeIds}.4`,e.id_pbeWithSHAAnd128BitRC2_CBC=`${e.id_pkcs_12PbeIds}.5`,e.id_pbewithSHAAnd40BitRC2_CBC=`${e.id_pkcs_12PbeIds}.6`,e.id_bagtypes=`${e.id_pkcs_12}.10.1`})),Ai=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_pkcs_9=e.id_SafeContents=e.id_SecretBag=e.id_CRLBag=e.id_certBag=e.id_pkcs8ShroudedKeyBag=e.id_keyBag=void 0;let t=ki();e.id_keyBag=`${t.id_bagtypes}.1`,e.id_pkcs8ShroudedKeyBag=`${t.id_bagtypes}.2`,e.id_certBag=`${t.id_bagtypes}.3`,e.id_CRLBag=`${t.id_bagtypes}.4`,e.id_SecretBag=`${t.id_bagtypes}.5`,e.id_SafeContents=`${t.id_bagtypes}.6`,e.id_pkcs_9=`1.2.840.113549.1.9`})),ji=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_sdsiCertificate=e.id_x509Certificate=e.id_certTypes=e.CertBag=void 0;let n=(G(),t(L)),r=q(),i=Ai();var a=class{certId=``;certValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.CertBag=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`certId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],a.prototype,`certValue`,void 0),e.id_certTypes=`${i.id_pkcs_9}.22`,e.id_x509Certificate=`${e.id_certTypes}.1`,e.id_sdsiCertificate=`${e.id_certTypes}.2`})),Mi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_x509CRL=e.id_crlTypes=e.CRLBag=void 0;let n=(G(),t(L)),r=q(),i=Ai();var a=class{crlId=``;crltValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.CRLBag=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`crlId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],a.prototype,`crltValue`,void 0),e.id_crlTypes=`${i.id_pkcs_9}.23`,e.id_x509CRL=`${e.id_crlTypes}.1`})),Ni=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.EncryptedPrivateKeyInfo=e.EncryptedData=void 0;let n=(G(),t(L)),r=q(),i=Y();var a=class extends r.OctetString{};e.EncryptedData=a;var o=class{encryptionAlgorithm=new i.AlgorithmIdentifier;encryptedData=new a;constructor(e={}){Object.assign(this,e)}};e.EncryptedPrivateKeyInfo=o,n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`encryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:a})],o.prototype,`encryptedData`,void 0)})),Pi=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.PrivateKeyInfo=e.Attributes=e.PrivateKey=e.Version=void 0;let r=(G(),t(L)),i=q(),a=Y();var o;(function(e){e[e.v1=0]=`v1`})(o||(e.Version=o={}));var s=class extends i.OctetString{};e.PrivateKey=s;let c=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.Attributes=c,e.Attributes=c=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.Attribute})],c);var l=class{version=o.v1;privateKeyAlgorithm=new a.AlgorithmIdentifier;privateKey=new s;attributes;constructor(e={}){Object.assign(this,e)}};e.PrivateKeyInfo=l,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],l.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:a.AlgorithmIdentifier})],l.prototype,`privateKeyAlgorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:s})],l.prototype,`privateKey`,void 0),r.__decorate([(0,i.AsnProp)({type:c,implicit:!0,context:0,optional:!0})],l.prototype,`attributes`,void 0)})),Fi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(Ni(),e),n.__exportStar(Pi(),e)})),Ii=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KeyBag=void 0;let n=(G(),t(L)),r=Fi(),i=q(),a=class extends r.PrivateKeyInfo{};e.KeyBag=a,e.KeyBag=a=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],a)})),Li=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PKCS8ShroudedKeyBag=void 0;let n=(G(),t(L)),r=Fi(),i=q(),a=class extends r.EncryptedPrivateKeyInfo{};e.PKCS8ShroudedKeyBag=a,e.PKCS8ShroudedKeyBag=a=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],a)})),Ri=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SecretBag=void 0;let n=(G(),t(L)),r=q();var i=class{secretTypeId=``;secretValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.SecretBag=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`secretTypeId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],i.prototype,`secretValue`,void 0)})),zi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(ji(),e),n.__exportStar(Mi(),e),n.__exportStar(Ii(),e),n.__exportStar(Li(),e),n.__exportStar(Ri(),e),n.__exportStar(Ai(),e)})),Bi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.MacData=void 0;let n=(G(),t(L)),r=xr(),i=q();var a=class{mac=new r.DigestInfo;macSalt=new i.OctetString;iterations=1;constructor(e={}){Object.assign(this,e)}};e.MacData=a,n.__decorate([(0,i.AsnProp)({type:r.DigestInfo})],a.prototype,`mac`,void 0),n.__decorate([(0,i.AsnProp)({type:i.OctetString})],a.prototype,`macSalt`,void 0),n.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,defaultValue:1})],a.prototype,`iterations`,void 0)})),Vi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PFX=void 0;let n=(G(),t(L)),r=q(),i=ir(),a=Bi();var o=class{version=3;authSafe=new i.ContentInfo;macData=new a.MacData;constructor(e={}){Object.assign(this,e)}};e.PFX=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],o.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i.ContentInfo})],o.prototype,`authSafe`,void 0),n.__decorate([(0,r.AsnProp)({type:a.MacData,optional:!0})],o.prototype,`macData`,void 0)})),Hi=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SafeContents=e.SafeBag=void 0;let r=(G(),t(L)),i=q(),a=Di();var o=class{bagId=``;bagValue=new ArrayBuffer(0);bagAttributes;constructor(e={}){Object.assign(this,e)}};e.SafeBag=o,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],o.prototype,`bagId`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any,context:0})],o.prototype,`bagValue`,void 0),r.__decorate([(0,i.AsnProp)({type:a.PKCS12Attribute,repeated:`set`,optional:!0})],o.prototype,`bagAttributes`,void 0);let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SafeContents=s,e.SafeContents=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o})],s)})),Ui=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(Di(),e),n.__exportStar(Oi(),e),n.__exportStar(zi(),e),n.__exportStar(Bi(),e),n.__exportStar(ki(),e),n.__exportStar(Vi(),e),n.__exportStar(Hi(),e)})),Wi=s((e=>{var n,r,i;Object.defineProperty(e,"__esModule",{value:!0}),e.DateOfBirth=e.UnstructuredAddress=e.UnstructuredName=e.EmailAddress=e.EncryptedPrivateKeyInfo=e.UserPKCS12=e.Pkcs7PDU=e.PKCS9String=e.id_at_pseudonym=e.crlTypes=e.id_certTypes=e.id_smime=e.id_pkcs9_mr_signingTimeMatch=e.id_pkcs9_mr_caseIgnoreMatch=e.id_pkcs9_sx_signingTime=e.id_pkcs9_sx_pkcs9String=e.id_pkcs9_at_countryOfResidence=e.id_pkcs9_at_countryOfCitizenship=e.id_pkcs9_at_gender=e.id_pkcs9_at_placeOfBirth=e.id_pkcs9_at_dateOfBirth=e.id_ietf_at=e.id_pkcs9_at_pkcs7PDU=e.id_pkcs9_at_sequenceNumber=e.id_pkcs9_at_randomNonce=e.id_pkcs9_at_encryptedPrivateKeyInfo=e.id_pkcs9_at_pkcs15Token=e.id_pkcs9_at_userPKCS12=e.id_pkcs9_at_localKeyId=e.id_pkcs9_at_friendlyName=e.id_pkcs9_at_smimeCapabilities=e.id_pkcs9_at_extensionRequest=e.id_pkcs9_at_signingDescription=e.id_pkcs9_at_extendedCertificateAttributes=e.id_pkcs9_at_unstructuredAddress=e.id_pkcs9_at_challengePassword=e.id_pkcs9_at_counterSignature=e.id_pkcs9_at_signingTime=e.id_pkcs9_at_messageDigest=e.id_pkcs9_at_contentType=e.id_pkcs9_at_unstructuredName=e.id_pkcs9_at_emailAddress=e.id_pkcs9_oc_naturalPerson=e.id_pkcs9_oc_pkcsEntity=e.id_pkcs9_mr=e.id_pkcs9_sx=e.id_pkcs9_at=e.id_pkcs9_oc=e.id_pkcs9_mo=e.id_pkcs9=void 0,e.SMIMECapabilities=e.SMIMECapability=e.SigningDescription=e.LocalKeyId=e.FriendlyName=e.ExtendedCertificateAttributes=e.ExtensionRequest=e.ChallengePassword=e.CounterSignature=e.SequenceNumber=e.RandomNonce=e.SigningTime=e.MessageDigest=e.ContentType=e.Pseudonym=e.CountryOfResidence=e.CountryOfCitizenship=e.Gender=e.PlaceOfBirth=void 0;let a=(G(),t(L)),o=q(),s=a.__importStar(ir()),c=a.__importStar(Ui()),l=a.__importStar(Fi()),u=a.__importStar(Y()),d=a.__importStar(Vn());e.id_pkcs9=`1.2.840.113549.1.9`,e.id_pkcs9_mo=`${e.id_pkcs9}.0`,e.id_pkcs9_oc=`${e.id_pkcs9}.24`,e.id_pkcs9_at=`${e.id_pkcs9}.25`,e.id_pkcs9_sx=`${e.id_pkcs9}.26`,e.id_pkcs9_mr=`${e.id_pkcs9}.27`,e.id_pkcs9_oc_pkcsEntity=`${e.id_pkcs9_oc}.1`,e.id_pkcs9_oc_naturalPerson=`${e.id_pkcs9_oc}.2`,e.id_pkcs9_at_emailAddress=`${e.id_pkcs9}.1`,e.id_pkcs9_at_unstructuredName=`${e.id_pkcs9}.2`,e.id_pkcs9_at_contentType=`${e.id_pkcs9}.3`,e.id_pkcs9_at_messageDigest=`${e.id_pkcs9}.4`,e.id_pkcs9_at_signingTime=`${e.id_pkcs9}.5`,e.id_pkcs9_at_counterSignature=`${e.id_pkcs9}.6`,e.id_pkcs9_at_challengePassword=`${e.id_pkcs9}.7`,e.id_pkcs9_at_unstructuredAddress=`${e.id_pkcs9}.8`,e.id_pkcs9_at_extendedCertificateAttributes=`${e.id_pkcs9}.9`,e.id_pkcs9_at_signingDescription=`${e.id_pkcs9}.13`,e.id_pkcs9_at_extensionRequest=`${e.id_pkcs9}.14`,e.id_pkcs9_at_smimeCapabilities=`${e.id_pkcs9}.15`,e.id_pkcs9_at_friendlyName=`${e.id_pkcs9}.20`,e.id_pkcs9_at_localKeyId=`${e.id_pkcs9}.21`,e.id_pkcs9_at_userPKCS12=`2.16.840.1.113730.3.1.216`,e.id_pkcs9_at_pkcs15Token=`${e.id_pkcs9_at}.1`,e.id_pkcs9_at_encryptedPrivateKeyInfo=`${e.id_pkcs9_at}.2`,e.id_pkcs9_at_randomNonce=`${e.id_pkcs9_at}.3`,e.id_pkcs9_at_sequenceNumber=`${e.id_pkcs9_at}.4`,e.id_pkcs9_at_pkcs7PDU=`${e.id_pkcs9_at}.5`,e.id_ietf_at=`1.3.6.1.5.5.7.9`,e.id_pkcs9_at_dateOfBirth=`${e.id_ietf_at}.1`,e.id_pkcs9_at_placeOfBirth=`${e.id_ietf_at}.2`,e.id_pkcs9_at_gender=`${e.id_ietf_at}.3`,e.id_pkcs9_at_countryOfCitizenship=`${e.id_ietf_at}.4`,e.id_pkcs9_at_countryOfResidence=`${e.id_ietf_at}.5`,e.id_pkcs9_sx_pkcs9String=`${e.id_pkcs9_sx}.1`,e.id_pkcs9_sx_signingTime=`${e.id_pkcs9_sx}.2`,e.id_pkcs9_mr_caseIgnoreMatch=`${e.id_pkcs9_mr}.1`,e.id_pkcs9_mr_signingTimeMatch=`${e.id_pkcs9_mr}.2`,e.id_smime=`${e.id_pkcs9}.16`,e.id_certTypes=`${e.id_pkcs9}.22`,e.crlTypes=`${e.id_pkcs9}.23`,e.id_at_pseudonym=`${d.id_at}.65`;let f=class extends u.DirectoryString{ia5String;constructor(e={}){super(e)}toString(){return{}.toString(),this.ia5String||super.toString()}};e.PKCS9String=f,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.IA5String})],f.prototype,`ia5String`,void 0),e.PKCS9String=f=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],f);let p=class extends s.ContentInfo{};e.Pkcs7PDU=p,e.Pkcs7PDU=p=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],p);let m=class extends c.PFX{};e.UserPKCS12=m,e.UserPKCS12=m=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],m);let h=class extends l.EncryptedPrivateKeyInfo{};e.EncryptedPrivateKeyInfo=h,e.EncryptedPrivateKeyInfo=h=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],h);let g=class{value;constructor(e=``){this.value=e}toString(){return this.value}};e.EmailAddress=g,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.IA5String})],g.prototype,`value`,void 0),e.EmailAddress=g=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],g);let _=class extends f{};e.UnstructuredName=_,e.UnstructuredName=_=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],_);let v=class extends u.DirectoryString{};e.UnstructuredAddress=v,e.UnstructuredAddress=v=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],v);let y=class{value;constructor(e=new Date){this.value=e}};e.DateOfBirth=y,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.GeneralizedTime})],y.prototype,`value`,void 0),e.DateOfBirth=y=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],y);let b=class extends u.DirectoryString{};e.PlaceOfBirth=b,e.PlaceOfBirth=b=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],b);let x=class{value;constructor(e=`M`){this.value=e}toString(){return this.value}};e.Gender=x,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.PrintableString})],x.prototype,`value`,void 0),e.Gender=x=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],x);let S=class{value;constructor(e=``){this.value=e}toString(){return this.value}};e.CountryOfCitizenship=S,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.PrintableString})],S.prototype,`value`,void 0),e.CountryOfCitizenship=S=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],S);let C=class extends S{};e.CountryOfResidence=C,e.CountryOfResidence=C=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],C);let w=class extends u.DirectoryString{};e.Pseudonym=w,e.Pseudonym=w=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],w);let T=class{value;constructor(e=``){this.value=e}toString(){return this.value}};e.ContentType=T,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.ObjectIdentifier})],T.prototype,`value`,void 0),e.ContentType=T=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],T),e.MessageDigest=class extends o.OctetString{};let ee=class extends u.Time{};e.SigningTime=ee,e.SigningTime=ee=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],ee),e.RandomNonce=class extends o.OctetString{};let E=class{value;constructor(e=0){this.value=e}toString(){return this.value.toString()}};e.SequenceNumber=E,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.Integer})],E.prototype,`value`,void 0),e.SequenceNumber=E=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],E);let D=class extends s.SignerInfo{};e.CounterSignature=D,e.CounterSignature=D=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],D);let O=class extends u.DirectoryString{};e.ChallengePassword=O,e.ChallengePassword=O=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],O);let k=n=class extends u.Extensions{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.ExtensionRequest=k,e.ExtensionRequest=k=n=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],k);let A=r=class extends o.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,r.prototype)}};e.ExtendedCertificateAttributes=A,e.ExtendedCertificateAttributes=A=r=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Set,itemType:s.Attribute})],A);let j=class{value;constructor(e=``){this.value=e}toString(){return this.value}};e.FriendlyName=j,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.BmpString})],j.prototype,`value`,void 0),e.FriendlyName=j=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],j),e.LocalKeyId=class extends o.OctetString{},e.SigningDescription=class extends u.DirectoryString{};let M=class extends u.AlgorithmIdentifier{};e.SMIMECapability=M,e.SMIMECapability=M=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],M);let te=i=class extends o.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,i.prototype)}};e.SMIMECapabilities=te,e.SMIMECapabilities=te=i=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence,itemType:M})],te)})),Gi=s((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.Attributes=void 0;let r=(G(),t(L)),i=q(),a=Y(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.Attributes=o,e.Attributes=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.Attribute})],o)})),Ki=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CertificationRequestInfo=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=Gi();var o=class{version=0;subject=new i.Name;subjectPKInfo=new i.SubjectPublicKeyInfo;attributes=new a.Attributes;constructor(e={}){Object.assign(this,e)}};e.CertificationRequestInfo=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],o.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Name})],o.prototype,`subject`,void 0),n.__decorate([(0,r.AsnProp)({type:i.SubjectPublicKeyInfo})],o.prototype,`subjectPKInfo`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Attributes,implicit:!0,context:0,optional:!0})],o.prototype,`attributes`,void 0)})),qi=s((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CertificationRequest=void 0;let n=(G(),t(L)),r=q(),i=Y(),a=Ki();var o=class{certificationRequestInfo=new a.CertificationRequestInfo;certificationRequestInfoRaw;signatureAlgorithm=new i.AlgorithmIdentifier;signature=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.CertificationRequest=o,n.__decorate([(0,r.AsnProp)({type:a.CertificationRequestInfo,raw:!0})],o.prototype,`certificationRequestInfo`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`signatureAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`signature`,void 0)})),Ji=s((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(G(),t(L));n.__exportStar(Gi(),e),n.__exportStar(qi(),e),n.__exportStar(Ki(),e)})),Yi=s((e=>{
105
+ `)}function r(e,r,i){let[,a=null]=e.toString().match(/constructor\(([\w, ]+)\)/)||[];return n(`Cannot inject the dependency ${t(a,r)} of "${e.name}" constructor. Reason:`,i)}e.formatErrorCtor=r})),Si=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.isDisposable=void 0;function t(e){return!(typeof e.dispose!=`function`||e.dispose.length>0)}e.isDisposable=t})),Ci=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PostResolutionInterceptors=e.PreResolutionInterceptors=void 0;let t=vi();var n=class extends t.default{};e.PreResolutionInterceptors=n;var r=class extends t.default{};e.PostResolutionInterceptors=r,e.default=class{constructor(){this.preResolution=new n,this.postResolution=new r}}})),wi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.instance=e.typeInfo=void 0;let n=(oi(),t(Fr)),r=gi(),i=_i(),a=pi(),o=yi(),s=si(),c=bi(),l=xi(),u=fi(),d=Si(),f=Ci();e.typeInfo=new Map,e.instance=new class t{constructor(e){this.parent=e,this._registry=new o.default,this.interceptors=new f.default,this.disposed=!1,this.disposables=new Set}register(e,t,n={lifecycle:s.default.Transient}){this.ensureNotDisposed();let a;if(a=i.isProvider(t)?t:{useClass:t},r.isTokenProvider(a)){let t=[e],n=a;for(;n!=null;){let e=n.useToken;if(t.includes(e))throw Error(`Token registration cycle detected! ${[...t,e].join(` -> `)}`);t.push(e);let i=this._registry.get(e);n=i&&r.isTokenProvider(i.provider)?i.provider:null}}if((n.lifecycle===s.default.Singleton||n.lifecycle==s.default.ContainerScoped||n.lifecycle==s.default.ResolutionScoped)&&(r.isValueProvider(a)||r.isFactoryProvider(a)))throw Error(`Cannot use lifecycle "${s.default[n.lifecycle]}" with ValueProviders or FactoryProviders`);return this._registry.set(e,{provider:a,options:n}),this}registerType(e,t){return this.ensureNotDisposed(),r.isNormalToken(t)?this.register(e,{useToken:t}):this.register(e,{useClass:t})}registerInstance(e,t){return this.ensureNotDisposed(),this.register(e,{useValue:t})}registerSingleton(e,t){if(this.ensureNotDisposed(),r.isNormalToken(e)){if(r.isNormalToken(t))return this.register(e,{useToken:t},{lifecycle:s.default.Singleton});if(t)return this.register(e,{useClass:t},{lifecycle:s.default.Singleton});throw Error(`Cannot register a type name as a singleton without a "to" token`)}let n=e;return t&&!r.isNormalToken(t)&&(n=t),this.register(e,{useClass:n},{lifecycle:s.default.Singleton})}resolve(e,t=new c.default,n=!1){this.ensureNotDisposed();let i=this.getRegistration(e);if(!i&&r.isNormalToken(e)){if(n)return;throw Error(`Attempted to resolve unregistered dependency token: "${e.toString()}"`)}if(this.executePreResolutionInterceptor(e,`Single`),i){let n=this.resolveRegistration(i,t);return this.executePostResolutionInterceptor(e,n,`Single`),n}if(a.isConstructorToken(e)){let n=this.construct(e,t);return this.executePostResolutionInterceptor(e,n,`Single`),n}throw Error("Attempted to construct an undefined constructor. Could mean a circular dependency problem. Try using `delay` function.")}executePreResolutionInterceptor(e,t){if(this.interceptors.preResolution.has(e)){let n=[];for(let r of this.interceptors.preResolution.getAll(e))r.options.frequency!=`Once`&&n.push(r),r.callback(e,t);this.interceptors.preResolution.setAll(e,n)}}executePostResolutionInterceptor(e,t,n){if(this.interceptors.postResolution.has(e)){let r=[];for(let i of this.interceptors.postResolution.getAll(e))i.options.frequency!=`Once`&&r.push(i),i.callback(e,t,n);this.interceptors.postResolution.setAll(e,r)}}resolveRegistration(e,t){if(this.ensureNotDisposed(),e.options.lifecycle===s.default.ResolutionScoped&&t.scopedResolutions.has(e))return t.scopedResolutions.get(e);let n=e.options.lifecycle===s.default.Singleton,i=e.options.lifecycle===s.default.ContainerScoped,a=n||i,o;return o=r.isValueProvider(e.provider)?e.provider.useValue:r.isTokenProvider(e.provider)?a?e.instance||=this.resolve(e.provider.useToken,t):this.resolve(e.provider.useToken,t):r.isClassProvider(e.provider)?a?e.instance||=this.construct(e.provider.useClass,t):this.construct(e.provider.useClass,t):r.isFactoryProvider(e.provider)?e.provider.useFactory(this):this.construct(e.provider,t),e.options.lifecycle===s.default.ResolutionScoped&&t.scopedResolutions.set(e,o),o}resolveAll(e,t=new c.default,n=!1){this.ensureNotDisposed();let i=this.getAllRegistrations(e);if(!i&&r.isNormalToken(e)){if(n)return[];throw Error(`Attempted to resolve unregistered dependency token: "${e.toString()}"`)}if(this.executePreResolutionInterceptor(e,`All`),i){let n=i.map(e=>this.resolveRegistration(e,t));return this.executePostResolutionInterceptor(e,n,`All`),n}let a=[this.construct(e,t)];return this.executePostResolutionInterceptor(e,a,`All`),a}isRegistered(e,t=!1){return this.ensureNotDisposed(),this._registry.has(e)||t&&(this.parent||!1)&&this.parent.isRegistered(e,!0)}reset(){this.ensureNotDisposed(),this._registry.clear(),this.interceptors.preResolution.clear(),this.interceptors.postResolution.clear()}clearInstances(){this.ensureNotDisposed();for(let[e,t]of this._registry.entries())this._registry.setAll(e,t.filter(e=>!r.isValueProvider(e.provider)).map(e=>(e.instance=void 0,e)))}createChildContainer(){this.ensureNotDisposed();let e=new t(this);for(let[t,n]of this._registry.entries())n.some(({options:e})=>e.lifecycle===s.default.ContainerScoped)&&e._registry.setAll(t,n.map(e=>e.options.lifecycle===s.default.ContainerScoped?{provider:e.provider,options:e.options}:e));return e}beforeResolution(e,t,n={frequency:`Always`}){this.interceptors.preResolution.set(e,{callback:t,options:n})}afterResolution(e,t,n={frequency:`Always`}){this.interceptors.postResolution.set(e,{callback:t,options:n})}dispose(){return n.__awaiter(this,void 0,void 0,function*(){this.disposed=!0;let e=[];this.disposables.forEach(t=>{let n=t.dispose();n&&e.push(n)}),yield Promise.all(e)})}getRegistration(e){return this.isRegistered(e)?this._registry.get(e):this.parent?this.parent.getRegistration(e):null}getAllRegistrations(e){return this.isRegistered(e)?this._registry.getAll(e):this.parent?this.parent.getAllRegistrations(e):null}construct(t,n){if(t instanceof u.DelayedConstructor)return t.createProxy(e=>this.resolve(e,n));let r=(()=>{let r=e.typeInfo.get(t);if(!r||r.length===0){if(t.length===0)return new t;throw Error(`TypeInfo not known for "${t.name}"`)}return new t(...r.map(this.resolveParams(n,t)))})();return d.isDisposable(r)&&this.disposables.add(r),r}resolveParams(e,t){return(n,r)=>{try{return a.isTokenDescriptor(n)?a.isTransformDescriptor(n)?n.multiple?this.resolve(n.transform).transform(this.resolveAll(n.token,new c.default,n.isOptional),...n.transformArgs):this.resolve(n.transform).transform(this.resolve(n.token,e,n.isOptional),...n.transformArgs):n.multiple?this.resolveAll(n.token,new c.default,n.isOptional):this.resolve(n.token,e,n.isOptional):a.isTransformDescriptor(n)?this.resolve(n.transform,e).transform(this.resolve(n.token,e),...n.transformArgs):this.resolve(n,e)}catch(e){throw Error(l.formatErrorCtor(t,r,e))}}}ensureNotDisposed(){if(this.disposed)throw Error(`This container has been disposed, you cannot interact with a disposed container`)}},e.default=e.instance})),Ti=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=li(),n=wi(),r=pi(),i=xi();function a(){return function(e){let a=t.getParamInfo(e);return class extends e{constructor(...t){super(...t.concat(a.slice(t.length).map((a,o)=>{try{return r.isTokenDescriptor(a)?r.isTransformDescriptor(a)?a.multiple?n.instance.resolve(a.transform).transform(n.instance.resolveAll(a.token),...a.transformArgs):n.instance.resolve(a.transform).transform(n.instance.resolve(a.token),...a.transformArgs):a.multiple?n.instance.resolveAll(a.token):n.instance.resolve(a.token):r.isTransformDescriptor(a)?n.instance.resolve(a.transform).transform(n.instance.resolve(a.token),...a.transformArgs):n.instance.resolve(a)}catch(n){let r=o+t.length;throw Error(i.formatErrorCtor(e,r,n))}})))}}}}e.default=a})),Ei=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=li();function n(e,n){let r={token:e,multiple:!1,isOptional:n&&n.isOptional};return t.defineInjectionTokenMetadata(r)}e.default=n})),Di=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=li(),n=wi(),r=wi();function i(e){return function(i){n.typeInfo.set(i,t.getParamInfo(i)),e&&e.token&&(Array.isArray(e.token)?e.token.forEach(e=>{r.instance.register(e,i)}):r.instance.register(e.token,i))}}e.default=i})),Oi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(oi(),t(Fr)),r=wi();function i(e=[]){return function(t){return e.forEach(e=>{var{token:t,options:i}=e,a=n.__rest(e,[`token`,`options`]);return r.instance.register(t,a,i)}),t}}e.default=i})),ki=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=Di(),n=wi();function r(){return function(e){t.default()(e),n.instance.registerSingleton(e)}}e.default=r})),Ai=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=li();function n(e,n){let r={token:e,multiple:!0,isOptional:n&&n.isOptional};return t.defineInjectionTokenMetadata(r)}e.default=n})),ji=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=li();function n(e,n,...r){let i={token:e,multiple:!0,transform:n,transformArgs:r};return t.defineInjectionTokenMetadata(i)}e.default=n})),Mi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=li();function n(e,n,...r){return t.defineInjectionTokenMetadata(e,{transformToken:n,args:r})}e.default=n})),Ni=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let t=Di(),n=wi();function r(e,r){return function(i){t.default()(i),n.instance.register(r||i,i,{lifecycle:e})}}e.default=r})),Pi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t=Ti();Object.defineProperty(e,"autoInjectable",{enumerable:!0,get:function(){return t.default}});var n=Ei();Object.defineProperty(e,"inject",{enumerable:!0,get:function(){return n.default}});var r=Di();Object.defineProperty(e,"injectable",{enumerable:!0,get:function(){return r.default}});var i=Oi();Object.defineProperty(e,"registry",{enumerable:!0,get:function(){return i.default}});var a=ki();Object.defineProperty(e,"singleton",{enumerable:!0,get:function(){return a.default}});var o=Ai();Object.defineProperty(e,"injectAll",{enumerable:!0,get:function(){return o.default}});var s=ji();Object.defineProperty(e,"injectAllWithTransform",{enumerable:!0,get:function(){return s.default}});var c=Mi();Object.defineProperty(e,"injectWithTransform",{enumerable:!0,get:function(){return c.default}});var l=Ni();Object.defineProperty(e,"scoped",{enumerable:!0,get:function(){return l.default}})})),Fi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});function t(e){let t;return n=>(t??=e(n),t)}e.default=t})),Ii=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});function t(e){let t=new WeakMap;return n=>{let r=t.get(n);return r??(r=e(n),t.set(n,r)),r}}e.default=t})),Li=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});function t(e,t,n,r=!0){let i,a;return o=>{let s=e(o);return(!r||a!==s)&&(i=(a=s)?o.resolve(t):o.resolve(n)),i}}e.default=t})),Ri=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});var t=Fi();Object.defineProperty(e,"instanceCachingFactory",{enumerable:!0,get:function(){return t.default}});var n=Ii();Object.defineProperty(e,"instancePerContainerCachingFactory",{enumerable:!0,get:function(){return n.default}});var r=Li();Object.defineProperty(e,"predicateAwareClassFactory",{enumerable:!0,get:function(){return r.default}})})),zi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(oi(),t(Fr));if(typeof Reflect>`u`||!Reflect.getMetadata)throw Error(`tsyringe requires a reflect polyfill. Please add 'import "reflect-metadata"' to the top of your entry point.`);var r=ci();Object.defineProperty(e,"Lifecycle",{enumerable:!0,get:function(){return r.Lifecycle}}),n.__exportStar(Pi(),e),n.__exportStar(Ri(),e),n.__exportStar(gi(),e);var i=fi();Object.defineProperty(e,"delay",{enumerable:!0,get:function(){return i.delay}});var a=wi();Object.defineProperty(e,"container",{enumerable:!0,get:function(){return a.instance}})})),Bi=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.PKCS12AttrSet=e.PKCS12Attribute=void 0;let r=(K(),t(B)),i=q();var a=class{attrId=``;attrValues=[];constructor(e={}){Object.assign(e)}};e.PKCS12Attribute=a,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],a.prototype,`attrId`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any,repeated:`set`})],a.prototype,`attrValues`,void 0);let o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.PKCS12AttrSet=o,e.PKCS12AttrSet=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a})],o)})),Vi=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.AuthenticatedSafe=void 0;let r=(K(),t(B)),i=q(),a=_r(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.AuthenticatedSafe=o,e.AuthenticatedSafe=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.ContentInfo})],o)})),Hi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_bagtypes=e.id_pbewithSHAAnd40BitRC2_CBC=e.id_pbeWithSHAAnd128BitRC2_CBC=e.id_pbeWithSHAAnd2_KeyTripleDES_CBC=e.id_pbeWithSHAAnd3_KeyTripleDES_CBC=e.id_pbeWithSHAAnd40BitRC4=e.id_pbeWithSHAAnd128BitRC4=e.id_pkcs_12PbeIds=e.id_pkcs_12=e.id_pkcs=e.id_rsadsi=void 0,e.id_rsadsi=`1.2.840.113549`,e.id_pkcs=`${e.id_rsadsi}.1`,e.id_pkcs_12=`${e.id_pkcs}.12`,e.id_pkcs_12PbeIds=`${e.id_pkcs_12}.1`,e.id_pbeWithSHAAnd128BitRC4=`${e.id_pkcs_12PbeIds}.1`,e.id_pbeWithSHAAnd40BitRC4=`${e.id_pkcs_12PbeIds}.2`,e.id_pbeWithSHAAnd3_KeyTripleDES_CBC=`${e.id_pkcs_12PbeIds}.3`,e.id_pbeWithSHAAnd2_KeyTripleDES_CBC=`${e.id_pkcs_12PbeIds}.4`,e.id_pbeWithSHAAnd128BitRC2_CBC=`${e.id_pkcs_12PbeIds}.5`,e.id_pbewithSHAAnd40BitRC2_CBC=`${e.id_pkcs_12PbeIds}.6`,e.id_bagtypes=`${e.id_pkcs_12}.10.1`})),Ui=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_pkcs_9=e.id_SafeContents=e.id_SecretBag=e.id_CRLBag=e.id_certBag=e.id_pkcs8ShroudedKeyBag=e.id_keyBag=void 0;let t=Hi();e.id_keyBag=`${t.id_bagtypes}.1`,e.id_pkcs8ShroudedKeyBag=`${t.id_bagtypes}.2`,e.id_certBag=`${t.id_bagtypes}.3`,e.id_CRLBag=`${t.id_bagtypes}.4`,e.id_SecretBag=`${t.id_bagtypes}.5`,e.id_SafeContents=`${t.id_bagtypes}.6`,e.id_pkcs_9=`1.2.840.113549.1.9`})),Wi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_sdsiCertificate=e.id_x509Certificate=e.id_certTypes=e.CertBag=void 0;let n=(K(),t(B)),r=q(),i=Ui();var a=class{certId=``;certValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.CertBag=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`certId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],a.prototype,`certValue`,void 0),e.id_certTypes=`${i.id_pkcs_9}.22`,e.id_x509Certificate=`${e.id_certTypes}.1`,e.id_sdsiCertificate=`${e.id_certTypes}.2`})),Gi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.id_x509CRL=e.id_crlTypes=e.CRLBag=void 0;let n=(K(),t(B)),r=q(),i=Ui();var a=class{crlId=``;crltValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.CRLBag=a,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],a.prototype,`crlId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],a.prototype,`crltValue`,void 0),e.id_crlTypes=`${i.id_pkcs_9}.23`,e.id_x509CRL=`${e.id_crlTypes}.1`})),Ki=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.EncryptedPrivateKeyInfo=e.EncryptedData=void 0;let n=(K(),t(B)),r=q(),i=Y();var a=class extends r.OctetString{};e.EncryptedData=a;var o=class{encryptionAlgorithm=new i.AlgorithmIdentifier;encryptedData=new a;constructor(e={}){Object.assign(this,e)}};e.EncryptedPrivateKeyInfo=o,n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`encryptionAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:a})],o.prototype,`encryptedData`,void 0)})),qi=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.PrivateKeyInfo=e.Attributes=e.PrivateKey=e.Version=void 0;let r=(K(),t(B)),i=q(),a=Y();var o;(function(e){e[e.v1=0]=`v1`})(o||(e.Version=o={}));var s=class extends i.OctetString{};e.PrivateKey=s;let c=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.Attributes=c,e.Attributes=c=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.Attribute})],c);var l=class{version=o.v1;privateKeyAlgorithm=new a.AlgorithmIdentifier;privateKey=new s;attributes;constructor(e={}){Object.assign(this,e)}};e.PrivateKeyInfo=l,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer})],l.prototype,`version`,void 0),r.__decorate([(0,i.AsnProp)({type:a.AlgorithmIdentifier})],l.prototype,`privateKeyAlgorithm`,void 0),r.__decorate([(0,i.AsnProp)({type:s})],l.prototype,`privateKey`,void 0),r.__decorate([(0,i.AsnProp)({type:c,implicit:!0,context:0,optional:!0})],l.prototype,`attributes`,void 0)})),Ji=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(Ki(),e),n.__exportStar(qi(),e)})),Yi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.KeyBag=void 0;let n=(K(),t(B)),r=Ji(),i=q(),a=class extends r.PrivateKeyInfo{};e.KeyBag=a,e.KeyBag=a=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],a)})),Xi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PKCS8ShroudedKeyBag=void 0;let n=(K(),t(B)),r=Ji(),i=q(),a=class extends r.EncryptedPrivateKeyInfo{};e.PKCS8ShroudedKeyBag=a,e.PKCS8ShroudedKeyBag=a=n.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence})],a)})),Zi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.SecretBag=void 0;let n=(K(),t(B)),r=q();var i=class{secretTypeId=``;secretValue=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.SecretBag=i,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.ObjectIdentifier})],i.prototype,`secretTypeId`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Any,context:0})],i.prototype,`secretValue`,void 0)})),Qi=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(Wi(),e),n.__exportStar(Gi(),e),n.__exportStar(Yi(),e),n.__exportStar(Xi(),e),n.__exportStar(Zi(),e),n.__exportStar(Ui(),e)})),$i=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.MacData=void 0;let n=(K(),t(B)),r=Pr(),i=q();var a=class{mac=new r.DigestInfo;macSalt=new i.OctetString;iterations=1;constructor(e={}){Object.assign(this,e)}};e.MacData=a,n.__decorate([(0,i.AsnProp)({type:r.DigestInfo})],a.prototype,`mac`,void 0),n.__decorate([(0,i.AsnProp)({type:i.OctetString})],a.prototype,`macSalt`,void 0),n.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Integer,defaultValue:1})],a.prototype,`iterations`,void 0)})),ea=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.PFX=void 0;let n=(K(),t(B)),r=q(),i=_r(),a=$i();var o=class{version=3;authSafe=new i.ContentInfo;macData=new a.MacData;constructor(e={}){Object.assign(this,e)}};e.PFX=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],o.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i.ContentInfo})],o.prototype,`authSafe`,void 0),n.__decorate([(0,r.AsnProp)({type:a.MacData,optional:!0})],o.prototype,`macData`,void 0)})),ta=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.SafeContents=e.SafeBag=void 0;let r=(K(),t(B)),i=q(),a=Bi();var o=class{bagId=``;bagValue=new ArrayBuffer(0);bagAttributes;constructor(e={}){Object.assign(this,e)}};e.SafeBag=o,r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.ObjectIdentifier})],o.prototype,`bagId`,void 0),r.__decorate([(0,i.AsnProp)({type:i.AsnPropTypes.Any,context:0})],o.prototype,`bagValue`,void 0),r.__decorate([(0,i.AsnProp)({type:a.PKCS12Attribute,repeated:`set`,optional:!0})],o.prototype,`bagAttributes`,void 0);let s=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.SafeContents=s,e.SafeContents=s=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:o})],s)})),na=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(Bi(),e),n.__exportStar(Vi(),e),n.__exportStar(Qi(),e),n.__exportStar($i(),e),n.__exportStar(Hi(),e),n.__exportStar(ea(),e),n.__exportStar(ta(),e)})),ra=i((e=>{var n,r,i;Object.defineProperty(e,"__esModule",{value:!0}),e.DateOfBirth=e.UnstructuredAddress=e.UnstructuredName=e.EmailAddress=e.EncryptedPrivateKeyInfo=e.UserPKCS12=e.Pkcs7PDU=e.PKCS9String=e.id_at_pseudonym=e.crlTypes=e.id_certTypes=e.id_smime=e.id_pkcs9_mr_signingTimeMatch=e.id_pkcs9_mr_caseIgnoreMatch=e.id_pkcs9_sx_signingTime=e.id_pkcs9_sx_pkcs9String=e.id_pkcs9_at_countryOfResidence=e.id_pkcs9_at_countryOfCitizenship=e.id_pkcs9_at_gender=e.id_pkcs9_at_placeOfBirth=e.id_pkcs9_at_dateOfBirth=e.id_ietf_at=e.id_pkcs9_at_pkcs7PDU=e.id_pkcs9_at_sequenceNumber=e.id_pkcs9_at_randomNonce=e.id_pkcs9_at_encryptedPrivateKeyInfo=e.id_pkcs9_at_pkcs15Token=e.id_pkcs9_at_userPKCS12=e.id_pkcs9_at_localKeyId=e.id_pkcs9_at_friendlyName=e.id_pkcs9_at_smimeCapabilities=e.id_pkcs9_at_extensionRequest=e.id_pkcs9_at_signingDescription=e.id_pkcs9_at_extendedCertificateAttributes=e.id_pkcs9_at_unstructuredAddress=e.id_pkcs9_at_challengePassword=e.id_pkcs9_at_counterSignature=e.id_pkcs9_at_signingTime=e.id_pkcs9_at_messageDigest=e.id_pkcs9_at_contentType=e.id_pkcs9_at_unstructuredName=e.id_pkcs9_at_emailAddress=e.id_pkcs9_oc_naturalPerson=e.id_pkcs9_oc_pkcsEntity=e.id_pkcs9_mr=e.id_pkcs9_sx=e.id_pkcs9_at=e.id_pkcs9_oc=e.id_pkcs9_mo=e.id_pkcs9=void 0,e.SMIMECapabilities=e.SMIMECapability=e.SigningDescription=e.LocalKeyId=e.FriendlyName=e.ExtendedCertificateAttributes=e.ExtensionRequest=e.ChallengePassword=e.CounterSignature=e.SequenceNumber=e.RandomNonce=e.SigningTime=e.MessageDigest=e.ContentType=e.Pseudonym=e.CountryOfResidence=e.CountryOfCitizenship=e.Gender=e.PlaceOfBirth=void 0;let a=(K(),t(B)),o=q(),s=a.__importStar(_r()),c=a.__importStar(na()),l=a.__importStar(Ji()),u=a.__importStar(Y()),d=a.__importStar(er());e.id_pkcs9=`1.2.840.113549.1.9`,e.id_pkcs9_mo=`${e.id_pkcs9}.0`,e.id_pkcs9_oc=`${e.id_pkcs9}.24`,e.id_pkcs9_at=`${e.id_pkcs9}.25`,e.id_pkcs9_sx=`${e.id_pkcs9}.26`,e.id_pkcs9_mr=`${e.id_pkcs9}.27`,e.id_pkcs9_oc_pkcsEntity=`${e.id_pkcs9_oc}.1`,e.id_pkcs9_oc_naturalPerson=`${e.id_pkcs9_oc}.2`,e.id_pkcs9_at_emailAddress=`${e.id_pkcs9}.1`,e.id_pkcs9_at_unstructuredName=`${e.id_pkcs9}.2`,e.id_pkcs9_at_contentType=`${e.id_pkcs9}.3`,e.id_pkcs9_at_messageDigest=`${e.id_pkcs9}.4`,e.id_pkcs9_at_signingTime=`${e.id_pkcs9}.5`,e.id_pkcs9_at_counterSignature=`${e.id_pkcs9}.6`,e.id_pkcs9_at_challengePassword=`${e.id_pkcs9}.7`,e.id_pkcs9_at_unstructuredAddress=`${e.id_pkcs9}.8`,e.id_pkcs9_at_extendedCertificateAttributes=`${e.id_pkcs9}.9`,e.id_pkcs9_at_signingDescription=`${e.id_pkcs9}.13`,e.id_pkcs9_at_extensionRequest=`${e.id_pkcs9}.14`,e.id_pkcs9_at_smimeCapabilities=`${e.id_pkcs9}.15`,e.id_pkcs9_at_friendlyName=`${e.id_pkcs9}.20`,e.id_pkcs9_at_localKeyId=`${e.id_pkcs9}.21`,e.id_pkcs9_at_userPKCS12=`2.16.840.1.113730.3.1.216`,e.id_pkcs9_at_pkcs15Token=`${e.id_pkcs9_at}.1`,e.id_pkcs9_at_encryptedPrivateKeyInfo=`${e.id_pkcs9_at}.2`,e.id_pkcs9_at_randomNonce=`${e.id_pkcs9_at}.3`,e.id_pkcs9_at_sequenceNumber=`${e.id_pkcs9_at}.4`,e.id_pkcs9_at_pkcs7PDU=`${e.id_pkcs9_at}.5`,e.id_ietf_at=`1.3.6.1.5.5.7.9`,e.id_pkcs9_at_dateOfBirth=`${e.id_ietf_at}.1`,e.id_pkcs9_at_placeOfBirth=`${e.id_ietf_at}.2`,e.id_pkcs9_at_gender=`${e.id_ietf_at}.3`,e.id_pkcs9_at_countryOfCitizenship=`${e.id_ietf_at}.4`,e.id_pkcs9_at_countryOfResidence=`${e.id_ietf_at}.5`,e.id_pkcs9_sx_pkcs9String=`${e.id_pkcs9_sx}.1`,e.id_pkcs9_sx_signingTime=`${e.id_pkcs9_sx}.2`,e.id_pkcs9_mr_caseIgnoreMatch=`${e.id_pkcs9_mr}.1`,e.id_pkcs9_mr_signingTimeMatch=`${e.id_pkcs9_mr}.2`,e.id_smime=`${e.id_pkcs9}.16`,e.id_certTypes=`${e.id_pkcs9}.22`,e.crlTypes=`${e.id_pkcs9}.23`,e.id_at_pseudonym=`${d.id_at}.65`;let f=class extends u.DirectoryString{ia5String;constructor(e={}){super(e)}toString(){return{}.toString(),this.ia5String||super.toString()}};e.PKCS9String=f,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.IA5String})],f.prototype,`ia5String`,void 0),e.PKCS9String=f=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],f);let p=class extends s.ContentInfo{};e.Pkcs7PDU=p,e.Pkcs7PDU=p=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],p);let m=class extends c.PFX{};e.UserPKCS12=m,e.UserPKCS12=m=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],m);let h=class extends l.EncryptedPrivateKeyInfo{};e.EncryptedPrivateKeyInfo=h,e.EncryptedPrivateKeyInfo=h=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],h);let g=class{value;constructor(e=``){this.value=e}toString(){return this.value}};e.EmailAddress=g,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.IA5String})],g.prototype,`value`,void 0),e.EmailAddress=g=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],g);let _=class extends f{};e.UnstructuredName=_,e.UnstructuredName=_=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],_);let v=class extends u.DirectoryString{};e.UnstructuredAddress=v,e.UnstructuredAddress=v=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],v);let y=class{value;constructor(e=new Date){this.value=e}};e.DateOfBirth=y,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.GeneralizedTime})],y.prototype,`value`,void 0),e.DateOfBirth=y=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],y);let b=class extends u.DirectoryString{};e.PlaceOfBirth=b,e.PlaceOfBirth=b=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],b);let x=class{value;constructor(e=`M`){this.value=e}toString(){return this.value}};e.Gender=x,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.PrintableString})],x.prototype,`value`,void 0),e.Gender=x=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],x);let S=class{value;constructor(e=``){this.value=e}toString(){return this.value}};e.CountryOfCitizenship=S,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.PrintableString})],S.prototype,`value`,void 0),e.CountryOfCitizenship=S=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],S);let C=class extends S{};e.CountryOfResidence=C,e.CountryOfResidence=C=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],C);let w=class extends u.DirectoryString{};e.Pseudonym=w,e.Pseudonym=w=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],w);let T=class{value;constructor(e=``){this.value=e}toString(){return this.value}};e.ContentType=T,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.ObjectIdentifier})],T.prototype,`value`,void 0),e.ContentType=T=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],T),e.MessageDigest=class extends o.OctetString{};let E=class extends u.Time{};e.SigningTime=E,e.SigningTime=E=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],E),e.RandomNonce=class extends o.OctetString{};let D=class{value;constructor(e=0){this.value=e}toString(){return this.value.toString()}};e.SequenceNumber=D,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.Integer})],D.prototype,`value`,void 0),e.SequenceNumber=D=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],D);let O=class extends s.SignerInfo{};e.CounterSignature=O,e.CounterSignature=O=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],O);let k=class extends u.DirectoryString{};e.ChallengePassword=k,e.ChallengePassword=k=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],k);let A=n=class extends u.Extensions{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.ExtensionRequest=A,e.ExtensionRequest=A=n=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],A);let ee=r=class extends o.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,r.prototype)}};e.ExtendedCertificateAttributes=ee,e.ExtendedCertificateAttributes=ee=r=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Set,itemType:s.Attribute})],ee);let j=class{value;constructor(e=``){this.value=e}toString(){return this.value}};e.FriendlyName=j,a.__decorate([(0,o.AsnProp)({type:o.AsnPropTypes.BmpString})],j.prototype,`value`,void 0),e.FriendlyName=j=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Choice})],j),e.LocalKeyId=class extends o.OctetString{},e.SigningDescription=class extends u.DirectoryString{};let M=class extends u.AlgorithmIdentifier{};e.SMIMECapability=M,e.SMIMECapability=M=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence})],M);let te=i=class extends o.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,i.prototype)}};e.SMIMECapabilities=te,e.SMIMECapabilities=te=i=a.__decorate([(0,o.AsnType)({type:o.AsnTypeTypes.Sequence,itemType:M})],te)})),ia=i((e=>{var n;Object.defineProperty(e,"__esModule",{value:!0}),e.Attributes=void 0;let r=(K(),t(B)),i=q(),a=Y(),o=n=class extends i.AsnArray{constructor(e){super(e),Object.setPrototypeOf(this,n.prototype)}};e.Attributes=o,e.Attributes=o=n=r.__decorate([(0,i.AsnType)({type:i.AsnTypeTypes.Sequence,itemType:a.Attribute})],o)})),aa=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CertificationRequestInfo=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=ia();var o=class{version=0;subject=new i.Name;subjectPKInfo=new i.SubjectPublicKeyInfo;attributes=new a.Attributes;constructor(e={}){Object.assign(this,e)}};e.CertificationRequestInfo=o,n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.Integer})],o.prototype,`version`,void 0),n.__decorate([(0,r.AsnProp)({type:i.Name})],o.prototype,`subject`,void 0),n.__decorate([(0,r.AsnProp)({type:i.SubjectPublicKeyInfo})],o.prototype,`subjectPKInfo`,void 0),n.__decorate([(0,r.AsnProp)({type:a.Attributes,implicit:!0,context:0,optional:!0})],o.prototype,`attributes`,void 0)})),oa=i((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.CertificationRequest=void 0;let n=(K(),t(B)),r=q(),i=Y(),a=aa();var o=class{certificationRequestInfo=new a.CertificationRequestInfo;certificationRequestInfoRaw;signatureAlgorithm=new i.AlgorithmIdentifier;signature=new ArrayBuffer(0);constructor(e={}){Object.assign(this,e)}};e.CertificationRequest=o,n.__decorate([(0,r.AsnProp)({type:a.CertificationRequestInfo,raw:!0})],o.prototype,`certificationRequestInfo`,void 0),n.__decorate([(0,r.AsnProp)({type:i.AlgorithmIdentifier})],o.prototype,`signatureAlgorithm`,void 0),n.__decorate([(0,r.AsnProp)({type:r.AsnPropTypes.BitString})],o.prototype,`signature`,void 0)})),sa=i((e=>{Object.defineProperty(e,"__esModule",{value:!0});let n=(K(),t(B));n.__exportStar(ia(),e),n.__exportStar(oa(),e),n.__exportStar(aa(),e)})),ca=i((e=>{
106
106
  /*!
107
107
  * MIT License
108
108
  *
@@ -127,95 +127,146 @@ function Cr(e,t){Gr(e,t);function n(){this.constructor=e}e.prototype=t===null?Ob
127
127
  * SOFTWARE.
128
128
  *
129
129
  */
130
- ve();var n=q(),r=Y(),i=Ye(),a=ir(),o=dr(),s=xr(),c=(G(),t(L)),l=Ei(),u=Wi(),d=Ji();function f(e){var t=Object.create(null);return e&&Object.keys(e).forEach(function(n){if(n!=="default"){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}}),t.default=e,Object.freeze(t)}var p=f(r),m=f(a),h=f(o),g=f(s),_=f(u);let v=`crypto.algorithm`;var y=class{getAlgorithms(){return l.container.resolveAll(v)}toAsnAlgorithm(e){({...e});for(let t of this.getAlgorithms()){let n=t.toAsnAlgorithm(e);if(n)return n}if(/^[0-9.]+$/.test(e.name)){let t=new r.AlgorithmIdentifier({algorithm:e.name});return`parameters`in e&&(t.parameters=e.parameters),t}throw Error(`Cannot convert WebCrypto algorithm to ASN.1 algorithm`)}toWebAlgorithm(e){for(let t of this.getAlgorithms()){let n=t.toWebAlgorithm(e);if(n)return n}return{name:e.algorithm,parameters:e.parameters}}};let b=`crypto.algorithmProvider`;l.container.registerSingleton(b,y);var x;let S=`1.3.36.3.3.2.8.1.1`,C=`${S}.1`,w=`${S}.2`,T=`${S}.3`,ee=`${S}.4`,E=`${S}.5`,D=`${S}.6`,O=`${S}.7`,k=`${S}.8`,A=`${S}.9`,j=`${S}.10`,M=`${S}.11`,te=`${S}.12`,ne=`${S}.13`,re=`${S}.14`,N=`brainpoolP160r1`,ie=`brainpoolP160t1`,ae=`brainpoolP192r1`,P=`brainpoolP192t1`,oe=`brainpoolP224r1`,se=`brainpoolP224t1`,ce=`brainpoolP256r1`,le=`brainpoolP256t1`,ue=`brainpoolP320r1`,de=`brainpoolP320t1`,fe=`brainpoolP384r1`,pe=`brainpoolP384t1`,me=`brainpoolP512r1`,he=`brainpoolP512t1`,F=`ECDSA`;e.EcAlgorithm=x=class{toAsnAlgorithm(e){if(e.name.toLowerCase()===`ecdsa`){if(`hash`in e)switch((typeof e.hash==`string`?e.hash:e.hash.name).toLowerCase()){case`sha-1`:return h.ecdsaWithSHA1;case`sha-256`:return h.ecdsaWithSHA256;case`sha-384`:return h.ecdsaWithSHA384;case`sha-512`:return h.ecdsaWithSHA512}else if(`namedCurve`in e){let t=``;switch(e.namedCurve){case`P-256`:t=h.id_secp256r1;break;case`K-256`:t=x.SECP256K1;break;case`P-384`:t=h.id_secp384r1;break;case`P-521`:t=h.id_secp521r1;break;case N:t=C;break;case ie:t=w;break;case ae:t=T;break;case P:t=ee;break;case oe:t=E;break;case se:t=D;break;case ce:t=O;break;case le:t=k;break;case ue:t=A;break;case de:t=j;break;case fe:t=M;break;case pe:t=te;break;case me:t=ne;break;case he:t=re}if(t)return new r.AlgorithmIdentifier({algorithm:h.id_ecPublicKey,parameters:n.AsnConvert.serialize(new h.ECParameters({namedCurve:t}))})}}return null}toWebAlgorithm(e){switch(e.algorithm){case h.id_ecdsaWithSHA1:return{name:F,hash:{name:`SHA-1`}};case h.id_ecdsaWithSHA256:return{name:F,hash:{name:`SHA-256`}};case h.id_ecdsaWithSHA384:return{name:F,hash:{name:`SHA-384`}};case h.id_ecdsaWithSHA512:return{name:F,hash:{name:`SHA-512`}};case h.id_ecPublicKey:if(!e.parameters)throw TypeError(`Cannot get required parameters from EC algorithm`);switch(n.AsnConvert.parse(e.parameters,h.ECParameters).namedCurve){case h.id_secp256r1:return{name:F,namedCurve:`P-256`};case x.SECP256K1:return{name:F,namedCurve:`K-256`};case h.id_secp384r1:return{name:F,namedCurve:`P-384`};case h.id_secp521r1:return{name:F,namedCurve:`P-521`};case C:return{name:F,namedCurve:N};case w:return{name:F,namedCurve:ie};case T:return{name:F,namedCurve:ae};case ee:return{name:F,namedCurve:P};case E:return{name:F,namedCurve:oe};case D:return{name:F,namedCurve:se};case O:return{name:F,namedCurve:ce};case k:return{name:F,namedCurve:le};case A:return{name:F,namedCurve:ue};case j:return{name:F,namedCurve:de};case M:return{name:F,namedCurve:fe};case te:return{name:F,namedCurve:pe};case ne:return{name:F,namedCurve:me};case re:return{name:F,namedCurve:he}}}return null}},e.EcAlgorithm.SECP256K1=`1.3.132.0.10`,e.EcAlgorithm=x=c.__decorate([l.injectable()],e.EcAlgorithm),l.container.registerSingleton(v,e.EcAlgorithm);let ge=Symbol(`name`),_e=Symbol(`value`);var I=class{constructor(e,t={},n=``){this[ge]=e,this[_e]=n;for(let e in t)this[e]=t[e]}};I.NAME=ge,I.VALUE=_e;var ye=class{static toTextObject(t){let n=new I(`Algorithm Identifier`,{},be.toString(t.algorithm));if(t.parameters)switch(t.algorithm){case h.id_ecPublicKey:{let r=new e.EcAlgorithm().toWebAlgorithm(t);r&&`namedCurve`in r?n[`Named Curve`]=r.namedCurve:n.Parameters=t.parameters;break}default:n.Parameters=t.parameters}return n}},be=class{static toString(e){return this.items[e]||e}};be.items={[g.id_sha1]:`sha1`,[g.id_sha224]:`sha224`,[g.id_sha256]:`sha256`,[g.id_sha384]:`sha384`,[g.id_sha512]:`sha512`,[g.id_rsaEncryption]:`rsaEncryption`,[g.id_sha1WithRSAEncryption]:`sha1WithRSAEncryption`,[g.id_sha224WithRSAEncryption]:`sha224WithRSAEncryption`,[g.id_sha256WithRSAEncryption]:`sha256WithRSAEncryption`,[g.id_sha384WithRSAEncryption]:`sha384WithRSAEncryption`,[g.id_sha512WithRSAEncryption]:`sha512WithRSAEncryption`,[h.id_ecPublicKey]:`ecPublicKey`,[h.id_ecdsaWithSHA1]:`ecdsaWithSHA1`,[h.id_ecdsaWithSHA224]:`ecdsaWithSHA224`,[h.id_ecdsaWithSHA256]:`ecdsaWithSHA256`,[h.id_ecdsaWithSHA384]:`ecdsaWithSHA384`,[h.id_ecdsaWithSHA512]:`ecdsaWithSHA512`,[p.id_kp_serverAuth]:`TLS WWW server authentication`,[p.id_kp_clientAuth]:`TLS WWW client authentication`,[p.id_kp_codeSigning]:`Code Signing`,[p.id_kp_emailProtection]:`E-mail Protection`,[p.id_kp_timeStamping]:`Time Stamping`,[p.id_kp_OCSPSigning]:`OCSP Signing`,[m.id_signedData]:`Signed Data`};var xe=class{static serialize(e){return this.serializeObj(e).join(`
131
- `)}static pad(e=0){return``.padStart(2*e,` `)}static serializeObj(e,t=0){let n=[],r=this.pad(t++),a=``,o=e[I.VALUE];o&&(a=` ${o}`),n.push(`${r}${e[I.NAME]}:${a}`),r=this.pad(t);for(let a in e){if(typeof a==`symbol`)continue;let o=e[a],s=a?`${a}: `:``;if(typeof o==`string`||typeof o==`number`||typeof o==`boolean`)n.push(`${r}${s}${o}`);else if(o instanceof Date)n.push(`${r}${s}${o.toUTCString()}`);else if(Array.isArray(o))for(let e of o)e[I.NAME]=a,n.push(...this.serializeObj(e,t));else if(o instanceof I)o[I.NAME]=a,n.push(...this.serializeObj(o,t));else if(i.BufferSourceConverter.isBufferSource(o))a?(n.push(`${r}${s}`),n.push(...this.serializeBufferSource(o,t+1))):n.push(...this.serializeBufferSource(o,t));else if(`toTextObject`in o){let e=o.toTextObject();e[I.NAME]=a,n.push(...this.serializeObj(e,t))}else throw TypeError(`Cannot serialize data in text format. Unsupported type.`)}return n}static serializeBufferSource(e,t=0){let n=this.pad(t),r=i.BufferSourceConverter.toUint8Array(e),a=[];for(let e=0;e<r.length;){let t=[];for(let n=0;n<16&&e<r.length;n++){n===8&&t.push(``);let i=r[e++].toString(16).padStart(2,`0`);t.push(i)}a.push(`${n}${t.join(` `)}`)}return a}static serializeAlgorithm(e){return this.algorithmSerializer.toTextObject(e)}};xe.oidSerializer=be,xe.algorithmSerializer=ye;var Se=class e{constructor(...e){if(e.length===1){let t=e[0];this.rawData=n.AsnConvert.serialize(t),this.onInit(t)}else{let t=n.AsnConvert.parse(e[0],e[1]);this.rawData=i.BufferSourceConverter.toArrayBuffer(e[0]),this.onInit(t)}}equal(t){return t instanceof e&&i.isEqual(t.rawData,this.rawData)}toString(e=`text`){switch(e){case`asn`:return n.AsnConvert.toString(this.rawData);case`text`:return xe.serialize(this.toTextObject());case`hex`:return i.Convert.ToHex(this.rawData);case`base64`:return i.Convert.ToBase64(this.rawData);case`base64url`:return i.Convert.ToBase64Url(this.rawData);default:throw TypeError(`Argument 'format' is unsupported value`)}}getTextName(){return this.constructor.NAME}toTextObject(){let e=this.toTextObjectEmpty();return e[``]=this.rawData,e}toTextObjectEmpty(e){return new I(this.getTextName(),{},e)}};Se.NAME=`ASN`;var R=class e extends Se{constructor(...e){let t;t=i.BufferSourceConverter.isBufferSource(e[0])?i.BufferSourceConverter.toArrayBuffer(e[0]):n.AsnConvert.serialize(new r.Extension({extnID:e[0],critical:e[1],extnValue:new n.OctetString(i.BufferSourceConverter.toArrayBuffer(e[2]))})),super(t,r.Extension)}onInit(e){this.type=e.extnID,this.critical=e.critical,this.value=e.extnValue.buffer}toTextObject(){let e=this.toTextObjectWithoutValue();return e[``]=this.value,e}toTextObjectWithoutValue(){let t=this.toTextObjectEmpty(this.critical?`critical`:void 0);return t[I.NAME]===e.NAME&&(t[I.NAME]=be.toString(this.type)),t}},Ce,we=class e{static isCryptoKeyPair(e){return e&&e.privateKey&&e.publicKey}static isCryptoKey(e){return e&&e.usages&&e.type&&e.algorithm&&e.extractable!==void 0}constructor(){this.items=new Map,this[Ce]=`CryptoProvider`,typeof self<`u`&&typeof crypto<`u`?this.set(e.DEFAULT,crypto):typeof global<`u`&&global.crypto&&global.crypto.subtle&&this.set(e.DEFAULT,global.crypto)}clear(){this.items.clear()}delete(e){return this.items.delete(e)}forEach(e,t){return this.items.forEach(e,t)}has(e){return this.items.has(e)}get size(){return this.items.size}entries(){return this.items.entries()}keys(){return this.items.keys()}values(){return this.items.values()}[Symbol.iterator](){return this.items[Symbol.iterator]()}get(t=e.DEFAULT){let n=this.items.get(t.toLowerCase());if(!n)throw Error(`Cannot get Crypto by name '${t}'`);return n}set(t,n){if(typeof t==`string`){if(!n)throw TypeError(`Argument 'value' is required`);this.items.set(t.toLowerCase(),n)}else this.items.set(e.DEFAULT,t);return this}};Ce=Symbol.toStringTag,we.DEFAULT=`default`;let z=new we,Te=/^[0-2](?:\.[1-9][0-9]*)+$/;function Ee(e){return new RegExp(Te).test(e)}var De=class{constructor(e={}){this.items={};for(let t in e)this.register(t,e[t])}get(e){return this.items[e]||null}findId(e){return Ee(e)?e:this.get(e)}register(e,t){this.items[e]=t,this.items[t]=e}};let B=new De;B.register(`CN`,`2.5.4.3`),B.register(`L`,`2.5.4.7`),B.register(`ST`,`2.5.4.8`),B.register(`O`,`2.5.4.10`),B.register(`OU`,`2.5.4.11`),B.register(`C`,`2.5.4.6`),B.register(`DC`,`0.9.2342.19200300.100.1.25`),B.register(`E`,`1.2.840.113549.1.9.1`),B.register(`G`,`2.5.4.42`),B.register(`I`,`2.5.4.43`),B.register(`SN`,`2.5.4.4`),B.register(`T`,`2.5.4.12`);function Oe(e,t){return`\\${i.Convert.ToHex(i.Convert.FromUtf8String(t)).toUpperCase()}`}function ke(e){return e.replace(/([,+"\\<>;])/g,`\\$1`).replace(/^([ #])/,`\\$1`).replace(/([ ]$)/,`\\$1`).replace(/([\r\n\t])/,Oe)}var V=class e{static isASCII(e){for(let t=0;t<e.length;t++)if(e.charCodeAt(t)>255)return!1;return!0}static isPrintableString(e){return/^[A-Za-z0-9 '()+,-./:=?]*$/g.test(e)}constructor(e,t={}){this.extraNames=new De,this.asn=new r.Name;for(let e in t)if(Object.prototype.hasOwnProperty.call(t,e)){let n=t[e];this.extraNames.register(e,n)}this.asn=typeof e==`string`?this.fromString(e):e instanceof r.Name?e:i.BufferSourceConverter.isBufferSource(e)?n.AsnConvert.parse(e,r.Name):this.fromJSON(e)}getField(e){let t=this.extraNames.findId(e)||B.findId(e),n=[];for(let e of this.asn)for(let r of e)r.type===t&&n.push(r.value.toString());return n}getName(e){return this.extraNames.get(e)||B.get(e)}toString(){return this.asn.map(e=>e.map(e=>`${this.getName(e.type)||e.type}=${e.value.anyValue?`#${i.Convert.ToHex(e.value.anyValue)}`:ke(e.value.toString())}`).join(`+`)).join(`, `)}toJSON(){let e=[];for(let t of this.asn){let n={};for(let e of t){let t=this.getName(e.type)||e.type;n[t]??(n[t]=[]),n[t].push(e.value.anyValue?`#${i.Convert.ToHex(e.value.anyValue)}`:e.value.toString())}e.push(n)}return e}fromString(e){let t=new r.Name,n=/(\d\.[\d.]*\d|[A-Za-z]+)=((?:"")|(?:".*?[^\\]")|(?:[^,+].*?(?:[^\\][,+]))|(?:))([,+])?/g,i=null,a=`,`;for(;i=n.exec(`${e},`);){let[,e,n]=i,o=n[n.length-1];(o===`,`||o===`+`)&&(n=n.slice(0,n.length-1),i[3]=o);let s=i[3];e=this.getTypeOid(e);let c=this.createAttribute(e,n);a===`+`?t[t.length-1].push(c):t.push(new r.RelativeDistinguishedName([c])),a=s}return t}fromJSON(e){let t=new r.Name;for(let n of e){let e=new r.RelativeDistinguishedName;for(let t in n){let r=this.getTypeOid(t),i=n[t];for(let t of i){let n=this.createAttribute(r,t);e.push(n)}}t.push(e)}return t}getTypeOid(e){if(/[\d.]+/.test(e)||(e=this.getName(e)||``),!e)throw Error(`Cannot get OID for name type '${e}'`);return e}createAttribute(t,n){let a=new r.AttributeTypeAndValue({type:t});if(typeof n==`object`)for(let e in n)switch(e){case`ia5String`:a.value.ia5String=n[e];break;case`utf8String`:a.value.utf8String=n[e];break;case`universalString`:a.value.universalString=n[e];break;case`bmpString`:a.value.bmpString=n[e];break;case`printableString`:a.value.printableString=n[e]}else if(n[0]===`#`)a.value.anyValue=i.Convert.FromHex(n.slice(1));else{let r=this.processStringValue(n);t===this.getName(`E`)||t===this.getName(`DC`)?a.value.ia5String=r:e.isPrintableString(r)?a.value.printableString=r:a.value.utf8String=r}return a}processStringValue(e){let t=/"(.*?[^\\])?"/.exec(e);return t&&(e=t[1]),e.replace(/\\0a/gi,`
132
- `).replace(/\\0d/gi,`\r`).replace(/\\0g/gi,` `).replace(/\\(.)/g,`$1`)}toArrayBuffer(){return n.AsnConvert.serialize(this.asn)}async getThumbprint(...e){let t,n=`SHA-1`;return e.length>=1&&!e[0]?.subtle?(n=e[0]||n,t=e[1]||z.get()):t=e[0]||z.get(),await t.subtle.digest(n,this.toArrayBuffer())}};let Ae=`Cannot initialize GeneralName from ASN.1 data.`,je=`${Ae} Unsupported string format in use.`,Me=`${Ae} Value doesn't match to GUID regular expression.`,Ne=/^([0-9a-f]{8})-?([0-9a-f]{4})-?([0-9a-f]{4})-?([0-9a-f]{4})-?([0-9a-f]{12})$/i,Pe=`1.3.6.1.4.1.311.25.1`,Fe=`1.3.6.1.4.1.311.20.2.3`,Ie=`email`,Le=`guid`;var Re=class extends Se{constructor(...e){let t;if(e.length===2)switch(e[0]){case`dn`:{let r=new V(e[1]).toArrayBuffer(),i=n.AsnConvert.parse(r,p.Name);t=new p.GeneralName({directoryName:i});break}case`dns`:t=new p.GeneralName({dNSName:e[1]});break;case Ie:t=new p.GeneralName({rfc822Name:e[1]});break;case Le:{let r=new RegExp(Ne,`i`).exec(e[1]);if(!r)throw Error(`Cannot parse GUID value. Value doesn't match to regular expression`);let a=r.slice(1).map((e,t)=>t<3?i.Convert.ToHex(new Uint8Array(i.Convert.FromHex(e)).reverse()):e).join(``);t=new p.GeneralName({otherName:new p.OtherName({typeId:Pe,value:n.AsnConvert.serialize(new n.OctetString(i.Convert.FromHex(a)))})});break}case`ip`:t=new p.GeneralName({iPAddress:e[1]});break;case`id`:t=new p.GeneralName({registeredID:e[1]});break;case`upn`:t=new p.GeneralName({otherName:new p.OtherName({typeId:Fe,value:n.AsnConvert.serialize(n.AsnUtf8StringConverter.toASN(e[1]))})});break;case`url`:t=new p.GeneralName({uniformResourceIdentifier:e[1]});break;default:throw Error(`Cannot create GeneralName. Unsupported type of the name`)}else t=i.BufferSourceConverter.isBufferSource(e[0])?n.AsnConvert.parse(e[0],p.GeneralName):e[0];super(t)}onInit(e){if(e.dNSName!=null)this.type=`dns`,this.value=e.dNSName;else if(e.rfc822Name!=null)this.type=Ie,this.value=e.rfc822Name;else if(e.iPAddress!=null)this.type=`ip`,this.value=e.iPAddress;else if(e.uniformResourceIdentifier!=null)this.type=`url`,this.value=e.uniformResourceIdentifier;else if(e.registeredID!=null)this.type=`id`,this.value=e.registeredID;else if(e.directoryName!=null)this.type=`dn`,this.value=new V(e.directoryName).toString();else if(e.otherName!=null)if(e.otherName.typeId===Pe){this.type=Le;let t=n.AsnConvert.parse(e.otherName.value,n.OctetString),r=new RegExp(Ne,`i`).exec(i.Convert.ToHex(t));if(!r)throw Error(Me);this.value=r.slice(1).map((e,t)=>t<3?i.Convert.ToHex(new Uint8Array(i.Convert.FromHex(e)).reverse()):e).join(`-`)}else if(e.otherName.typeId===Fe)this.type=`upn`,this.value=n.AsnConvert.parse(e.otherName.value,p.DirectoryString).toString();else throw Error(je);else throw Error(je)}toJSON(){return{type:this.type,value:this.value}}toTextObject(){let e;switch(this.type){case`dn`:case`dns`:case Le:case`ip`:case`id`:case`upn`:case`url`:e=this.type.toUpperCase();break;case Ie:e=`Email`;break;default:throw Error(`Unsupported GeneralName type`)}let t=this.value;return this.type===`id`&&(t=be.toString(t)),new I(e,void 0,t)}},ze=class extends Se{constructor(e){let t;if(e instanceof p.GeneralNames)t=e;else if(Array.isArray(e)){let r=[];for(let t of e)if(t instanceof p.GeneralName)r.push(t);else{let e=n.AsnConvert.parse(new Re(t.type,t.value).rawData,p.GeneralName);r.push(e)}t=new p.GeneralNames(r)}else if(i.BufferSourceConverter.isBufferSource(e))t=n.AsnConvert.parse(e,p.GeneralNames);else throw Error(`Cannot initialize GeneralNames. Incorrect incoming arguments`);super(t)}onInit(e){let t=[];for(let n of e){let e=null;try{e=new Re(n)}catch{continue}t.push(e)}this.items=t}toJSON(){return this.items.map(e=>e.toJSON())}toTextObject(){let e=super.toTextObjectEmpty();for(let t of this.items){let n=t.toTextObject(),r=e[n[I.NAME]];Array.isArray(r)||(r=[],e[n[I.NAME]]=r),r.push(n)}return e}};ze.NAME=`GeneralNames`;let H=`-{5}`,Be=`${`${H}BEGIN ([^\\n]+(?=${H}))${H}`}\\n(?:((?:[^:\\n]+: (?:[^\\n]+\\n(?: +[^\\n]+\\n)*))+))?\\n?((?:[a-zA-Z0-9=+/]+\\n)+)${`${H}END \\1${H}`}`;var U=class{static isPem(e){return typeof e==`string`&&new RegExp(Be,`g`).test(e)}static decodeWithHeaders(e){e=e.replace(/\r/g,``);let t=new RegExp(Be,`g`),n=[],r=null;for(;r=t.exec(e);){let e=r[3].replace(RegExp(`[\\n]+`,`g`),``),t={type:r[1],headers:[],rawData:i.Convert.FromBase64(e)},a=r[2];if(a){let e=a.split(RegExp(`\\n`,`g`)),n=null;for(let r of e){let[e,i]=r.split(/:(.*)/);if(i===void 0){if(!n)throw Error(`Cannot parse PEM string. Incorrect header value`);n.value+=e.trim()}else n&&t.headers.push(n),n={key:e,value:i.trim()}}n&&t.headers.push(n)}n.push(t)}return n}static decode(e){return this.decodeWithHeaders(e).map(e=>e.rawData)}static decodeFirst(e){let t=this.decode(e);if(!t.length)throw RangeError(`PEM string doesn't contain any objects`);return t[0]}static encode(e,t){if(Array.isArray(e)){let n=[];return t?e.forEach(e=>{if(!i.BufferSourceConverter.isBufferSource(e))throw TypeError(`Cannot encode array of BufferSource in PEM format. Not all items of the array are BufferSource`);n.push(this.encodeStruct({type:t,rawData:i.BufferSourceConverter.toArrayBuffer(e)}))}):e.forEach(e=>{if(!(`type`in e))throw TypeError(`Cannot encode array of PemStruct in PEM format. Not all items of the array are PemStrut`);n.push(this.encodeStruct(e))}),n.join(`
130
+ Oe();var n=q(),r=Y(),i=st(),a=_r(),o=wr(),s=Pr(),c=(K(),t(B)),l=zi(),u=ra(),d=sa();function f(e){var t=Object.create(null);return e&&Object.keys(e).forEach(function(n){if(n!=="default"){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}}),t.default=e,Object.freeze(t)}var p=f(r),m=f(a),h=f(o),g=f(s),_=f(u);let v=`crypto.algorithm`;var y=class{getAlgorithms(){return l.container.resolveAll(v)}toAsnAlgorithm(e){({...e});for(let t of this.getAlgorithms()){let n=t.toAsnAlgorithm(e);if(n)return n}if(/^[0-9.]+$/.test(e.name)){let t=new r.AlgorithmIdentifier({algorithm:e.name});return`parameters`in e&&(t.parameters=e.parameters),t}throw Error(`Cannot convert WebCrypto algorithm to ASN.1 algorithm`)}toWebAlgorithm(e){for(let t of this.getAlgorithms()){let n=t.toWebAlgorithm(e);if(n)return n}return{name:e.algorithm,parameters:e.parameters}}};let b=`crypto.algorithmProvider`;l.container.registerSingleton(b,y);var x;let S=`1.3.36.3.3.2.8.1.1`,C=`${S}.1`,w=`${S}.2`,T=`${S}.3`,E=`${S}.4`,D=`${S}.5`,O=`${S}.6`,k=`${S}.7`,A=`${S}.8`,ee=`${S}.9`,j=`${S}.10`,M=`${S}.11`,te=`${S}.12`,ne=`${S}.13`,re=`${S}.14`,N=`brainpoolP160r1`,ie=`brainpoolP160t1`,ae=`brainpoolP192r1`,P=`brainpoolP192t1`,oe=`brainpoolP224r1`,se=`brainpoolP224t1`,ce=`brainpoolP256r1`,le=`brainpoolP256t1`,F=`brainpoolP320r1`,ue=`brainpoolP320t1`,de=`brainpoolP384r1`,fe=`brainpoolP384t1`,pe=`brainpoolP512r1`,me=`brainpoolP512t1`,I=`ECDSA`;e.EcAlgorithm=x=class{toAsnAlgorithm(e){if(e.name.toLowerCase()===`ecdsa`){if(`hash`in e)switch((typeof e.hash==`string`?e.hash:e.hash.name).toLowerCase()){case`sha-1`:return h.ecdsaWithSHA1;case`sha-256`:return h.ecdsaWithSHA256;case`sha-384`:return h.ecdsaWithSHA384;case`sha-512`:return h.ecdsaWithSHA512}else if(`namedCurve`in e){let t=``;switch(e.namedCurve){case`P-256`:t=h.id_secp256r1;break;case`K-256`:t=x.SECP256K1;break;case`P-384`:t=h.id_secp384r1;break;case`P-521`:t=h.id_secp521r1;break;case N:t=C;break;case ie:t=w;break;case ae:t=T;break;case P:t=E;break;case oe:t=D;break;case se:t=O;break;case ce:t=k;break;case le:t=A;break;case F:t=ee;break;case ue:t=j;break;case de:t=M;break;case fe:t=te;break;case pe:t=ne;break;case me:t=re}if(t)return new r.AlgorithmIdentifier({algorithm:h.id_ecPublicKey,parameters:n.AsnConvert.serialize(new h.ECParameters({namedCurve:t}))})}}return null}toWebAlgorithm(e){switch(e.algorithm){case h.id_ecdsaWithSHA1:return{name:I,hash:{name:`SHA-1`}};case h.id_ecdsaWithSHA256:return{name:I,hash:{name:`SHA-256`}};case h.id_ecdsaWithSHA384:return{name:I,hash:{name:`SHA-384`}};case h.id_ecdsaWithSHA512:return{name:I,hash:{name:`SHA-512`}};case h.id_ecPublicKey:if(!e.parameters)throw TypeError(`Cannot get required parameters from EC algorithm`);switch(n.AsnConvert.parse(e.parameters,h.ECParameters).namedCurve){case h.id_secp256r1:return{name:I,namedCurve:`P-256`};case x.SECP256K1:return{name:I,namedCurve:`K-256`};case h.id_secp384r1:return{name:I,namedCurve:`P-384`};case h.id_secp521r1:return{name:I,namedCurve:`P-521`};case C:return{name:I,namedCurve:N};case w:return{name:I,namedCurve:ie};case T:return{name:I,namedCurve:ae};case E:return{name:I,namedCurve:P};case D:return{name:I,namedCurve:oe};case O:return{name:I,namedCurve:se};case k:return{name:I,namedCurve:ce};case A:return{name:I,namedCurve:le};case ee:return{name:I,namedCurve:F};case j:return{name:I,namedCurve:ue};case M:return{name:I,namedCurve:de};case te:return{name:I,namedCurve:fe};case ne:return{name:I,namedCurve:pe};case re:return{name:I,namedCurve:me}}}return null}},e.EcAlgorithm.SECP256K1=`1.3.132.0.10`,e.EcAlgorithm=x=c.__decorate([l.injectable()],e.EcAlgorithm),l.container.registerSingleton(v,e.EcAlgorithm);let he=Symbol(`name`),ge=Symbol(`value`);var L=class{constructor(e,t={},n=``){this[he]=e,this[ge]=n;for(let e in t)this[e]=t[e]}};L.NAME=he,L.VALUE=ge;var _e=class{static toTextObject(t){let n=new L(`Algorithm Identifier`,{},R.toString(t.algorithm));if(t.parameters)switch(t.algorithm){case h.id_ecPublicKey:{let r=new e.EcAlgorithm().toWebAlgorithm(t);r&&`namedCurve`in r?n[`Named Curve`]=r.namedCurve:n.Parameters=t.parameters;break}default:n.Parameters=t.parameters}return n}},R=class{static toString(e){return this.items[e]||e}};R.items={[g.id_sha1]:`sha1`,[g.id_sha224]:`sha224`,[g.id_sha256]:`sha256`,[g.id_sha384]:`sha384`,[g.id_sha512]:`sha512`,[g.id_rsaEncryption]:`rsaEncryption`,[g.id_sha1WithRSAEncryption]:`sha1WithRSAEncryption`,[g.id_sha224WithRSAEncryption]:`sha224WithRSAEncryption`,[g.id_sha256WithRSAEncryption]:`sha256WithRSAEncryption`,[g.id_sha384WithRSAEncryption]:`sha384WithRSAEncryption`,[g.id_sha512WithRSAEncryption]:`sha512WithRSAEncryption`,[h.id_ecPublicKey]:`ecPublicKey`,[h.id_ecdsaWithSHA1]:`ecdsaWithSHA1`,[h.id_ecdsaWithSHA224]:`ecdsaWithSHA224`,[h.id_ecdsaWithSHA256]:`ecdsaWithSHA256`,[h.id_ecdsaWithSHA384]:`ecdsaWithSHA384`,[h.id_ecdsaWithSHA512]:`ecdsaWithSHA512`,[p.id_kp_serverAuth]:`TLS WWW server authentication`,[p.id_kp_clientAuth]:`TLS WWW client authentication`,[p.id_kp_codeSigning]:`Code Signing`,[p.id_kp_emailProtection]:`E-mail Protection`,[p.id_kp_timeStamping]:`Time Stamping`,[p.id_kp_OCSPSigning]:`OCSP Signing`,[m.id_signedData]:`Signed Data`};var ve=class{static serialize(e){return this.serializeObj(e).join(`
131
+ `)}static pad(e=0){return``.padStart(2*e,` `)}static serializeObj(e,t=0){let n=[],r=this.pad(t++),a=``,o=e[L.VALUE];o&&(a=` ${o}`),n.push(`${r}${e[L.NAME]}:${a}`),r=this.pad(t);for(let a in e){if(typeof a==`symbol`)continue;let o=e[a],s=a?`${a}: `:``;if(typeof o==`string`||typeof o==`number`||typeof o==`boolean`)n.push(`${r}${s}${o}`);else if(o instanceof Date)n.push(`${r}${s}${o.toUTCString()}`);else if(Array.isArray(o))for(let e of o)e[L.NAME]=a,n.push(...this.serializeObj(e,t));else if(o instanceof L)o[L.NAME]=a,n.push(...this.serializeObj(o,t));else if(i.BufferSourceConverter.isBufferSource(o))a?(n.push(`${r}${s}`),n.push(...this.serializeBufferSource(o,t+1))):n.push(...this.serializeBufferSource(o,t));else if(`toTextObject`in o){let e=o.toTextObject();e[L.NAME]=a,n.push(...this.serializeObj(e,t))}else throw TypeError(`Cannot serialize data in text format. Unsupported type.`)}return n}static serializeBufferSource(e,t=0){let n=this.pad(t),r=i.BufferSourceConverter.toUint8Array(e),a=[];for(let e=0;e<r.length;){let t=[];for(let n=0;n<16&&e<r.length;n++){n===8&&t.push(``);let i=r[e++].toString(16).padStart(2,`0`);t.push(i)}a.push(`${n}${t.join(` `)}`)}return a}static serializeAlgorithm(e){return this.algorithmSerializer.toTextObject(e)}};ve.oidSerializer=R,ve.algorithmSerializer=_e;var ye=class e{constructor(...e){if(e.length===1){let t=e[0];this.rawData=n.AsnConvert.serialize(t),this.onInit(t)}else{let t=n.AsnConvert.parse(e[0],e[1]);this.rawData=i.BufferSourceConverter.toArrayBuffer(e[0]),this.onInit(t)}}equal(t){return t instanceof e&&i.isEqual(t.rawData,this.rawData)}toString(e=`text`){switch(e){case`asn`:return n.AsnConvert.toString(this.rawData);case`text`:return ve.serialize(this.toTextObject());case`hex`:return i.Convert.ToHex(this.rawData);case`base64`:return i.Convert.ToBase64(this.rawData);case`base64url`:return i.Convert.ToBase64Url(this.rawData);default:throw TypeError(`Argument 'format' is unsupported value`)}}getTextName(){return this.constructor.NAME}toTextObject(){let e=this.toTextObjectEmpty();return e[``]=this.rawData,e}toTextObjectEmpty(e){return new L(this.getTextName(),{},e)}};ye.NAME=`ASN`;var be=class e extends ye{constructor(...e){let t;t=i.BufferSourceConverter.isBufferSource(e[0])?i.BufferSourceConverter.toArrayBuffer(e[0]):n.AsnConvert.serialize(new r.Extension({extnID:e[0],critical:e[1],extnValue:new n.OctetString(i.BufferSourceConverter.toArrayBuffer(e[2]))})),super(t,r.Extension)}onInit(e){this.type=e.extnID,this.critical=e.critical,this.value=e.extnValue.buffer}toTextObject(){let e=this.toTextObjectWithoutValue();return e[``]=this.value,e}toTextObjectWithoutValue(){let t=this.toTextObjectEmpty(this.critical?`critical`:void 0);return t[L.NAME]===e.NAME&&(t[L.NAME]=R.toString(this.type)),t}},xe,Se=class e{static isCryptoKeyPair(e){return e&&e.privateKey&&e.publicKey}static isCryptoKey(e){return e&&e.usages&&e.type&&e.algorithm&&e.extractable!==void 0}constructor(){this.items=new Map,this[xe]=`CryptoProvider`,typeof self<`u`&&typeof crypto<`u`?this.set(e.DEFAULT,crypto):typeof global<`u`&&global.crypto&&global.crypto.subtle&&this.set(e.DEFAULT,global.crypto)}clear(){this.items.clear()}delete(e){return this.items.delete(e)}forEach(e,t){return this.items.forEach(e,t)}has(e){return this.items.has(e)}get size(){return this.items.size}entries(){return this.items.entries()}keys(){return this.items.keys()}values(){return this.items.values()}[Symbol.iterator](){return this.items[Symbol.iterator]()}get(t=e.DEFAULT){let n=this.items.get(t.toLowerCase());if(!n)throw Error(`Cannot get Crypto by name '${t}'`);return n}set(t,n){if(typeof t==`string`){if(!n)throw TypeError(`Argument 'value' is required`);this.items.set(t.toLowerCase(),n)}else this.items.set(e.DEFAULT,t);return this}};xe=Symbol.toStringTag,Se.DEFAULT=`default`;let z=new Se,Ce=/^[0-2](?:\.[1-9][0-9]*)+$/;function we(e){return new RegExp(Ce).test(e)}var Te=class{constructor(e={}){this.items={};for(let t in e)this.register(t,e[t])}get(e){return this.items[e]||null}findId(e){return we(e)?e:this.get(e)}register(e,t){this.items[e]=t,this.items[t]=e}};let Ee=new Te;Ee.register(`CN`,`2.5.4.3`),Ee.register(`L`,`2.5.4.7`),Ee.register(`ST`,`2.5.4.8`),Ee.register(`O`,`2.5.4.10`),Ee.register(`OU`,`2.5.4.11`),Ee.register(`C`,`2.5.4.6`),Ee.register(`DC`,`0.9.2342.19200300.100.1.25`),Ee.register(`E`,`1.2.840.113549.1.9.1`),Ee.register(`G`,`2.5.4.42`),Ee.register(`I`,`2.5.4.43`),Ee.register(`SN`,`2.5.4.4`),Ee.register(`T`,`2.5.4.12`);function De(e,t){return`\\${i.Convert.ToHex(i.Convert.FromUtf8String(t)).toUpperCase()}`}function ke(e){return e.replace(/([,+"\\<>;])/g,`\\$1`).replace(/^([ #])/,`\\$1`).replace(/([ ]$)/,`\\$1`).replace(/([\r\n\t])/,De)}var V=class e{static isASCII(e){for(let t=0;t<e.length;t++)if(e.charCodeAt(t)>255)return!1;return!0}static isPrintableString(e){return/^[A-Za-z0-9 '()+,-./:=?]*$/g.test(e)}constructor(e,t={}){this.extraNames=new Te,this.asn=new r.Name;for(let e in t)if(Object.prototype.hasOwnProperty.call(t,e)){let n=t[e];this.extraNames.register(e,n)}this.asn=typeof e==`string`?this.fromString(e):e instanceof r.Name?e:i.BufferSourceConverter.isBufferSource(e)?n.AsnConvert.parse(e,r.Name):this.fromJSON(e)}getField(e){let t=this.extraNames.findId(e)||Ee.findId(e),n=[];for(let e of this.asn)for(let r of e)r.type===t&&n.push(r.value.toString());return n}getName(e){return this.extraNames.get(e)||Ee.get(e)}toString(){return this.asn.map(e=>e.map(e=>`${this.getName(e.type)||e.type}=${e.value.anyValue?`#${i.Convert.ToHex(e.value.anyValue)}`:ke(e.value.toString())}`).join(`+`)).join(`, `)}toJSON(){let e=[];for(let t of this.asn){let n={};for(let e of t){let t=this.getName(e.type)||e.type;n[t]??(n[t]=[]),n[t].push(e.value.anyValue?`#${i.Convert.ToHex(e.value.anyValue)}`:e.value.toString())}e.push(n)}return e}fromString(e){let t=new r.Name,n=/(\d\.[\d.]*\d|[A-Za-z]+)=((?:"")|(?:".*?[^\\]")|(?:[^,+].*?(?:[^\\][,+]))|(?:))([,+])?/g,i=null,a=`,`;for(;i=n.exec(`${e},`);){let[,e,n]=i,o=n[n.length-1];(o===`,`||o===`+`)&&(n=n.slice(0,n.length-1),i[3]=o);let s=i[3];e=this.getTypeOid(e);let c=this.createAttribute(e,n);a===`+`?t[t.length-1].push(c):t.push(new r.RelativeDistinguishedName([c])),a=s}return t}fromJSON(e){let t=new r.Name;for(let n of e){let e=new r.RelativeDistinguishedName;for(let t in n){let r=this.getTypeOid(t),i=n[t];for(let t of i){let n=this.createAttribute(r,t);e.push(n)}}t.push(e)}return t}getTypeOid(e){if(/[\d.]+/.test(e)||(e=this.getName(e)||``),!e)throw Error(`Cannot get OID for name type '${e}'`);return e}createAttribute(t,n){let a=new r.AttributeTypeAndValue({type:t});if(typeof n==`object`)for(let e in n)switch(e){case`ia5String`:a.value.ia5String=n[e];break;case`utf8String`:a.value.utf8String=n[e];break;case`universalString`:a.value.universalString=n[e];break;case`bmpString`:a.value.bmpString=n[e];break;case`printableString`:a.value.printableString=n[e]}else if(n[0]===`#`)a.value.anyValue=i.Convert.FromHex(n.slice(1));else{let r=this.processStringValue(n);t===this.getName(`E`)||t===this.getName(`DC`)?a.value.ia5String=r:e.isPrintableString(r)?a.value.printableString=r:a.value.utf8String=r}return a}processStringValue(e){let t=/"(.*?[^\\])?"/.exec(e);return t&&(e=t[1]),e.replace(/\\0a/gi,`
132
+ `).replace(/\\0d/gi,`\r`).replace(/\\0g/gi,` `).replace(/\\(.)/g,`$1`)}toArrayBuffer(){return n.AsnConvert.serialize(this.asn)}async getThumbprint(...e){let t,n=`SHA-1`;return e.length>=1&&!e[0]?.subtle?(n=e[0]||n,t=e[1]||z.get()):t=e[0]||z.get(),await t.subtle.digest(n,this.toArrayBuffer())}};let Ae=`Cannot initialize GeneralName from ASN.1 data.`,je=`${Ae} Unsupported string format in use.`,Me=`${Ae} Value doesn't match to GUID regular expression.`,Ne=/^([0-9a-f]{8})-?([0-9a-f]{4})-?([0-9a-f]{4})-?([0-9a-f]{4})-?([0-9a-f]{12})$/i,Pe=`1.3.6.1.4.1.311.25.1`,Fe=`1.3.6.1.4.1.311.20.2.3`,Ie=`email`,Le=`guid`;var Re=class extends ye{constructor(...e){let t;if(e.length===2)switch(e[0]){case`dn`:{let r=new V(e[1]).toArrayBuffer(),i=n.AsnConvert.parse(r,p.Name);t=new p.GeneralName({directoryName:i});break}case`dns`:t=new p.GeneralName({dNSName:e[1]});break;case Ie:t=new p.GeneralName({rfc822Name:e[1]});break;case Le:{let r=new RegExp(Ne,`i`).exec(e[1]);if(!r)throw Error(`Cannot parse GUID value. Value doesn't match to regular expression`);let a=r.slice(1).map((e,t)=>t<3?i.Convert.ToHex(new Uint8Array(i.Convert.FromHex(e)).reverse()):e).join(``);t=new p.GeneralName({otherName:new p.OtherName({typeId:Pe,value:n.AsnConvert.serialize(new n.OctetString(i.Convert.FromHex(a)))})});break}case`ip`:t=new p.GeneralName({iPAddress:e[1]});break;case`id`:t=new p.GeneralName({registeredID:e[1]});break;case`upn`:t=new p.GeneralName({otherName:new p.OtherName({typeId:Fe,value:n.AsnConvert.serialize(n.AsnUtf8StringConverter.toASN(e[1]))})});break;case`url`:t=new p.GeneralName({uniformResourceIdentifier:e[1]});break;default:throw Error(`Cannot create GeneralName. Unsupported type of the name`)}else t=i.BufferSourceConverter.isBufferSource(e[0])?n.AsnConvert.parse(e[0],p.GeneralName):e[0];super(t)}onInit(e){if(e.dNSName!=null)this.type=`dns`,this.value=e.dNSName;else if(e.rfc822Name!=null)this.type=Ie,this.value=e.rfc822Name;else if(e.iPAddress!=null)this.type=`ip`,this.value=e.iPAddress;else if(e.uniformResourceIdentifier!=null)this.type=`url`,this.value=e.uniformResourceIdentifier;else if(e.registeredID!=null)this.type=`id`,this.value=e.registeredID;else if(e.directoryName!=null)this.type=`dn`,this.value=new V(e.directoryName).toString();else if(e.otherName!=null){if(e.otherName.typeId===Pe){this.type=Le;let t=n.AsnConvert.parse(e.otherName.value,n.OctetString),r=new RegExp(Ne,`i`).exec(i.Convert.ToHex(t));if(!r)throw Error(Me);this.value=r.slice(1).map((e,t)=>t<3?i.Convert.ToHex(new Uint8Array(i.Convert.FromHex(e)).reverse()):e).join(`-`)}else if(e.otherName.typeId===Fe)this.type=`upn`,this.value=n.AsnConvert.parse(e.otherName.value,p.DirectoryString).toString();else throw Error(je)}else throw Error(je)}toJSON(){return{type:this.type,value:this.value}}toTextObject(){let e;switch(this.type){case`dn`:case`dns`:case Le:case`ip`:case`id`:case`upn`:case`url`:e=this.type.toUpperCase();break;case Ie:e=`Email`;break;default:throw Error(`Unsupported GeneralName type`)}let t=this.value;return this.type===`id`&&(t=R.toString(t)),new L(e,void 0,t)}},ze=class extends ye{constructor(e){let t;if(e instanceof p.GeneralNames)t=e;else if(Array.isArray(e)){let r=[];for(let t of e)if(t instanceof p.GeneralName)r.push(t);else{let e=n.AsnConvert.parse(new Re(t.type,t.value).rawData,p.GeneralName);r.push(e)}t=new p.GeneralNames(r)}else if(i.BufferSourceConverter.isBufferSource(e))t=n.AsnConvert.parse(e,p.GeneralNames);else throw Error(`Cannot initialize GeneralNames. Incorrect incoming arguments`);super(t)}onInit(e){let t=[];for(let n of e){let e=null;try{e=new Re(n)}catch{continue}t.push(e)}this.items=t}toJSON(){return this.items.map(e=>e.toJSON())}toTextObject(){let e=super.toTextObjectEmpty();for(let t of this.items){let n=t.toTextObject(),r=e[n[L.NAME]];Array.isArray(r)||(r=[],e[n[L.NAME]]=r),r.push(n)}return e}};ze.NAME=`GeneralNames`;let H=`-{5}`,Be=`${`${H}BEGIN ([^\\n]+(?=${H}))${H}`}\\n(?:((?:[^:\\n]+: (?:[^\\n]+\\n(?: +[^\\n]+\\n)*))+))?\\n?((?:[a-zA-Z0-9=+/]+\\n)+)${`${H}END \\1${H}`}`;var U=class{static isPem(e){return typeof e==`string`&&new RegExp(Be,`g`).test(e)}static decodeWithHeaders(e){e=e.replace(/\r/g,``);let t=new RegExp(Be,`g`),n=[],r=null;for(;r=t.exec(e);){let e=r[3].replace(RegExp(`[\\n]+`,`g`),``),t={type:r[1],headers:[],rawData:i.Convert.FromBase64(e)},a=r[2];if(a){let e=a.split(RegExp(`\\n`,`g`)),n=null;for(let r of e){let[e,i]=r.split(/:(.*)/);if(i===void 0){if(!n)throw Error(`Cannot parse PEM string. Incorrect header value`);n.value+=e.trim()}else n&&t.headers.push(n),n={key:e,value:i.trim()}}n&&t.headers.push(n)}n.push(t)}return n}static decode(e){return this.decodeWithHeaders(e).map(e=>e.rawData)}static decodeFirst(e){let t=this.decode(e);if(!t.length)throw RangeError(`PEM string doesn't contain any objects`);return t[0]}static encode(e,t){if(Array.isArray(e)){let n=[];return t?e.forEach(e=>{if(!i.BufferSourceConverter.isBufferSource(e))throw TypeError(`Cannot encode array of BufferSource in PEM format. Not all items of the array are BufferSource`);n.push(this.encodeStruct({type:t,rawData:i.BufferSourceConverter.toArrayBuffer(e)}))}):e.forEach(e=>{if(!(`type`in e))throw TypeError(`Cannot encode array of PemStruct in PEM format. Not all items of the array are PemStrut`);n.push(this.encodeStruct(e))}),n.join(`
133
133
  `)}if(!t)throw Error(`Required argument 'tag' is missed`);return this.encodeStruct({type:t,rawData:i.BufferSourceConverter.toArrayBuffer(e)})}static encodeStruct(e){let t=e.type.toLocaleUpperCase(),n=[];if(n.push(`-----BEGIN ${t}-----`),e.headers?.length){for(let t of e.headers)n.push(`${t.key}: ${t.value}`);n.push(``)}let r=i.Convert.ToBase64(e.rawData),a,o=0,s=[];for(;o<r.length&&(r.length-o<64?a=r.substring(o):(a=r.substring(o,o+64),o+=64),a.length!==0)&&(s.push(a),!(a.length<64)););return n.push(...s),n.push(`-----END ${t}-----`),n.join(`
134
- `)}};U.CertificateTag=`CERTIFICATE`,U.CrlTag=`CRL`,U.CertificateRequestTag=`CERTIFICATE REQUEST`,U.PublicKeyTag=`PUBLIC KEY`,U.PrivateKeyTag=`PRIVATE KEY`;var W=class e extends Se{static isAsnEncoded(e){return i.BufferSourceConverter.isBufferSource(e)||typeof e==`string`}static toArrayBuffer(e){if(typeof e==`string`){if(U.isPem(e))return U.decode(e)[0];if(i.Convert.isHex(e))return i.Convert.FromHex(e);if(i.Convert.isBase64(e))return i.Convert.FromBase64(e);if(i.Convert.isBase64Url(e))return i.Convert.FromBase64Url(e);throw TypeError(`Unsupported format of 'raw' argument. Must be one of DER, PEM, HEX, Base64, or Base4Url`)}{let t=i.Convert.ToBinary(e);return U.isPem(t)?U.decode(t)[0]:i.Convert.isHex(t)?i.Convert.FromHex(t):i.Convert.isBase64(t)?i.Convert.FromBase64(t):i.Convert.isBase64Url(t)?i.Convert.FromBase64Url(t):i.BufferSourceConverter.toArrayBuffer(e)}}constructor(...t){e.isAsnEncoded(t[0])?super(e.toArrayBuffer(t[0]),t[1]):super(t[0])}toString(e=`pem`){switch(e){case`pem`:return U.encode(this.rawData,this.tag);default:return super.toString(e)}}},Ve=class e extends W{static async create(t,n=z.get()){if(t instanceof e)return t;if(we.isCryptoKey(t)){if(t.type!==`public`)throw TypeError(`Public key is required`);let r=await n.subtle.exportKey(`spki`,t);return new e(r)}if(t.publicKey)return t.publicKey;if(i.BufferSourceConverter.isBufferSource(t))return new e(t);throw TypeError(`Unsupported PublicKeyType`)}constructor(e){W.isAsnEncoded(e)?super(e,r.SubjectPublicKeyInfo):super(e),this.tag=U.PublicKeyTag}async export(...e){let t,i=[`verify`],a={hash:`SHA-256`,...this.algorithm};e.length>1?(a=e[0]||a,i=e[1]||i,t=e[2]||z.get()):t=e[0]||z.get();let o=this.rawData,c=n.AsnConvert.parse(this.rawData,r.SubjectPublicKeyInfo);return c.algorithm.algorithm===s.id_RSASSA_PSS&&(o=He(c,o)),t.subtle.importKey(`spki`,o,a,!0,i)}onInit(e){let t=l.container.resolve(b),r=this.algorithm=t.toWebAlgorithm(e.algorithm);switch(e.algorithm.algorithm){case s.id_rsaEncryption:{let t=n.AsnConvert.parse(e.subjectPublicKey,s.RSAPublicKey),a=i.BufferSourceConverter.toUint8Array(t.modulus);r.publicExponent=i.BufferSourceConverter.toUint8Array(t.publicExponent),r.modulusLength=(a[0]?a:a.slice(1)).byteLength<<3;break}}}async getThumbprint(...e){let t,n=`SHA-1`;return e.length>=1&&!e[0]?.subtle?(n=e[0]||n,t=e[1]||z.get()):t=e[0]||z.get(),await t.subtle.digest(n,this.rawData)}async getKeyIdentifier(...e){let t,i=`SHA-1`;e.length===1?typeof e[0]==`string`?(i=e[0],t=z.get()):t=e[0]:e.length===2?(i=e[0],t=e[1]):t=z.get();let a=n.AsnConvert.parse(this.rawData,r.SubjectPublicKeyInfo);return await t.subtle.digest(i,a.subjectPublicKey)}toTextObject(){let e=this.toTextObjectEmpty(),t=n.AsnConvert.parse(this.rawData,r.SubjectPublicKeyInfo);switch(e.Algorithm=xe.serializeAlgorithm(t.algorithm),t.algorithm.algorithm){case o.id_ecPublicKey:e[`EC Point`]=t.subjectPublicKey;break;case s.id_rsaEncryption:default:e[`Raw Data`]=t.subjectPublicKey}return e}};function He(e,t){return e.algorithm=new r.AlgorithmIdentifier({algorithm:s.id_rsaEncryption,parameters:null}),t=n.AsnConvert.serialize(e),t}var Ue=class e extends R{static async create(t,n=!1,r=z.get()){if(`name`in t&&`serialNumber`in t)return new e(t,n);let a=await(await Ve.create(t,r)).getKeyIdentifier(r);return new e(i.Convert.ToHex(a),n)}constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else if(typeof e[0]==`string`){let t=new p.AuthorityKeyIdentifier({keyIdentifier:new p.KeyIdentifier(i.Convert.FromHex(e[0]))});super(p.id_ce_authorityKeyIdentifier,e[1],n.AsnConvert.serialize(t))}else{let t=e[0],r=t.name instanceof ze?n.AsnConvert.parse(t.name.rawData,p.GeneralNames):t.name,a=new p.AuthorityKeyIdentifier({authorityCertIssuer:r,authorityCertSerialNumber:i.Convert.FromHex(t.serialNumber)});super(p.id_ce_authorityKeyIdentifier,e[1],n.AsnConvert.serialize(a))}}onInit(e){super.onInit(e);let t=n.AsnConvert.parse(e.extnValue,p.AuthorityKeyIdentifier);t.keyIdentifier&&(this.keyId=i.Convert.ToHex(t.keyIdentifier)),(t.authorityCertIssuer||t.authorityCertSerialNumber)&&(this.certId={name:t.authorityCertIssuer||[],serialNumber:t.authorityCertSerialNumber?i.Convert.ToHex(t.authorityCertSerialNumber):``})}toTextObject(){let e=this.toTextObjectWithoutValue(),t=n.AsnConvert.parse(this.value,p.AuthorityKeyIdentifier);return t.authorityCertIssuer&&(e[`Authority Issuer`]=new ze(t.authorityCertIssuer).toTextObject()),t.authorityCertSerialNumber&&(e[`Authority Serial Number`]=t.authorityCertSerialNumber),t.keyIdentifier&&(e[``]=t.keyIdentifier),e}};Ue.NAME=`Authority Key Identifier`;var We=class extends R{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,r.BasicConstraints);this.ca=t.cA,this.pathLength=t.pathLenConstraint}else{let t=new r.BasicConstraints({cA:e[0],pathLenConstraint:e[1]});super(r.id_ce_basicConstraints,e[2],n.AsnConvert.serialize(t)),this.ca=e[0],this.pathLength=e[1]}}toTextObject(){let e=this.toTextObjectWithoutValue();return this.ca&&(e.CA=this.ca),this.pathLength!==void 0&&(e[`Path Length`]=this.pathLength),e}};We.NAME=`Basic Constraints`,e.ExtendedKeyUsage=void 0,(function(e){e.serverAuth=`1.3.6.1.5.5.7.3.1`,e.clientAuth=`1.3.6.1.5.5.7.3.2`,e.codeSigning=`1.3.6.1.5.5.7.3.3`,e.emailProtection=`1.3.6.1.5.5.7.3.4`,e.timeStamping=`1.3.6.1.5.5.7.3.8`,e.ocspSigning=`1.3.6.1.5.5.7.3.9`})(e.ExtendedKeyUsage||={});var Ge=class extends R{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,p.ExtendedKeyUsage);this.usages=t.map(e=>e)}else{let t=new p.ExtendedKeyUsage(e[0]);super(p.id_ce_extKeyUsage,e[1],n.AsnConvert.serialize(t)),this.usages=e[0]}}toTextObject(){let e=this.toTextObjectWithoutValue();return e[``]=this.usages.map(e=>be.toString(e)).join(`, `),e}};Ge.NAME=`Extended Key Usages`,e.KeyUsageFlags=void 0,(function(e){e[e.digitalSignature=1]=`digitalSignature`,e[e.nonRepudiation=2]=`nonRepudiation`,e[e.keyEncipherment=4]=`keyEncipherment`,e[e.dataEncipherment=8]=`dataEncipherment`,e[e.keyAgreement=16]=`keyAgreement`,e[e.keyCertSign=32]=`keyCertSign`,e[e.cRLSign=64]=`cRLSign`,e[e.encipherOnly=128]=`encipherOnly`,e[e.decipherOnly=256]=`decipherOnly`})(e.KeyUsageFlags||={});var Ke=class extends R{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,r.KeyUsage);this.usages=t.toNumber()}else{let t=new r.KeyUsage(e[0]);super(r.id_ce_keyUsage,e[1],n.AsnConvert.serialize(t)),this.usages=e[0]}}toTextObject(){let e=this.toTextObjectWithoutValue();return e[``]=n.AsnConvert.parse(this.value,r.KeyUsage).toJSON().join(`, `),e}};Ke.NAME=`Key Usages`;var qe=class e extends R{static async create(t,n=!1,r=z.get()){let a=await(await Ve.create(t,r)).getKeyIdentifier(r);return new e(i.Convert.ToHex(a),n)}constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,p.SubjectKeyIdentifier);this.keyId=i.Convert.ToHex(t)}else{let t=typeof e[0]==`string`?i.Convert.FromHex(e[0]):e[0],r=new p.SubjectKeyIdentifier(t);super(p.id_ce_subjectKeyIdentifier,e[1],n.AsnConvert.serialize(r)),this.keyId=i.Convert.ToHex(t)}}toTextObject(){let e=this.toTextObjectWithoutValue();return e[``]=n.AsnConvert.parse(this.value,p.SubjectKeyIdentifier),e}};qe.NAME=`Subject Key Identifier`;var Je=class extends R{constructor(...e){i.BufferSourceConverter.isBufferSource(e[0])?super(e[0]):super(p.id_ce_subjectAltName,e[1],new ze(e[0]||[]).rawData)}onInit(e){super.onInit(e);let t=n.AsnConvert.parse(e.extnValue,p.SubjectAlternativeName);this.names=new ze(t)}toTextObject(){let e=this.toTextObjectWithoutValue(),t=this.names.toTextObject();for(let n in t)e[n]=t[n];return e}};Je.NAME=`Subject Alternative Name`;var Xe=class{static register(e,t){this.items.set(e,t)}static create(e){let t=new R(e),n=this.items.get(t.type);return n?new n(e):t}};Xe.items=new Map;var Ze=class extends R{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,p.CertificatePolicies);this.policies=t.map(e=>e.policyIdentifier)}else{let t=e[0],r=e[1]??!1,i=new p.CertificatePolicies(t.map(e=>new p.PolicyInformation({policyIdentifier:e})));super(p.id_ce_certificatePolicies,r,n.AsnConvert.serialize(i)),this.policies=t}}toTextObject(){let e=this.toTextObjectWithoutValue();return e.Policy=this.policies.map(e=>new I(``,{},be.toString(e))),e}};Ze.NAME=`Certificate Policies`,Xe.register(p.id_ce_certificatePolicies,Ze);var Qe=class extends R{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else if(Array.isArray(e[0])&&typeof e[0][0]==`string`){let t=e[0].map(e=>new p.DistributionPoint({distributionPoint:new p.DistributionPointName({fullName:[new p.GeneralName({uniformResourceIdentifier:e})]})})),r=new p.CRLDistributionPoints(t);super(p.id_ce_cRLDistributionPoints,e[1],n.AsnConvert.serialize(r))}else{let t=new p.CRLDistributionPoints(e[0]);super(p.id_ce_cRLDistributionPoints,e[1],n.AsnConvert.serialize(t))}this.distributionPoints??=[]}onInit(e){super.onInit(e);let t=n.AsnConvert.parse(e.extnValue,p.CRLDistributionPoints);this.distributionPoints=t}toTextObject(){let e=this.toTextObjectWithoutValue();return e[`Distribution Point`]=this.distributionPoints.map(e=>{let t={};return e.distributionPoint&&(t[``]=e.distributionPoint.fullName?.map(e=>new Re(e).toString()).join(`, `)),e.reasons&&(t.Reasons=e.reasons.toString()),e.cRLIssuer&&(t[`CRL Issuer`]=e.cRLIssuer.map(e=>e.toString()).join(`, `)),t}),e}};Qe.NAME=`CRL Distribution Points`;var $e=class extends R{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else if(e[0]instanceof p.AuthorityInfoAccessSyntax){let t=new p.AuthorityInfoAccessSyntax(e[0]);super(p.id_pe_authorityInfoAccess,e[1],n.AsnConvert.serialize(t))}else{let t=e[0],r=new p.AuthorityInfoAccessSyntax;tt(r,t,p.id_ad_ocsp,`ocsp`),tt(r,t,p.id_ad_caIssuers,`caIssuers`),tt(r,t,p.id_ad_timeStamping,`timeStamping`),tt(r,t,p.id_ad_caRepository,`caRepository`),super(p.id_pe_authorityInfoAccess,e[1],n.AsnConvert.serialize(r))}this.ocsp??=[],this.caIssuers??=[],this.timeStamping??=[],this.caRepository??=[]}onInit(e){super.onInit(e),this.ocsp=[],this.caIssuers=[],this.timeStamping=[],this.caRepository=[],n.AsnConvert.parse(e.extnValue,p.AuthorityInfoAccessSyntax).forEach(e=>{switch(e.accessMethod){case p.id_ad_ocsp:this.ocsp.push(new Re(e.accessLocation));break;case p.id_ad_caIssuers:this.caIssuers.push(new Re(e.accessLocation));break;case p.id_ad_timeStamping:this.timeStamping.push(new Re(e.accessLocation));break;case p.id_ad_caRepository:this.caRepository.push(new Re(e.accessLocation))}})}toTextObject(){let e=this.toTextObjectWithoutValue();return this.ocsp.length&&et(e,`OCSP`,this.ocsp),this.caIssuers.length&&et(e,`CA Issuers`,this.caIssuers),this.timeStamping.length&&et(e,`Time Stamping`,this.timeStamping),this.caRepository.length&&et(e,`CA Repository`,this.caRepository),e}};$e.NAME=`Authority Info Access`;function et(e,t,n){if(n.length===1)e[t]=n[0].toTextObject();else{let r=new I(``);n.forEach((e,t)=>{let n=e.toTextObject(),i=`${n[I.NAME]} ${t+1}`,a=r[i];Array.isArray(a)||(a=[],r[i]=a),a.push(n)}),e[t]=r}}function tt(e,t,r,i){let a=t[i];a&&(Array.isArray(a)?a:[a]).forEach(t=>{typeof t==`string`&&(t=new Re(`url`,t)),e.push(new p.AccessDescription({accessMethod:r,accessLocation:n.AsnConvert.parse(t.rawData,p.GeneralName)}))})}var K=class e extends Se{constructor(...e){let t;if(i.BufferSourceConverter.isBufferSource(e[0]))t=i.BufferSourceConverter.toArrayBuffer(e[0]);else{let a=e[0],o=Array.isArray(e[1])?e[1].map(e=>i.BufferSourceConverter.toArrayBuffer(e)):[];t=n.AsnConvert.serialize(new r.Attribute({type:a,values:o}))}super(t,r.Attribute)}onInit(e){this.type=e.type,this.values=e.values}toTextObject(){let e=this.toTextObjectWithoutValue();return e.Value=this.values.map(e=>new I(``,{"":e})),e}toTextObjectWithoutValue(){let t=this.toTextObjectEmpty();return t[I.NAME]===e.NAME&&(t[I.NAME]=be.toString(this.type)),t}};K.NAME=`Attribute`;var nt=class extends K{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else{let t=new _.ChallengePassword({printableString:e[0]});super(_.id_pkcs9_at_challengePassword,[n.AsnConvert.serialize(t)])}this.password??=``}onInit(e){if(super.onInit(e),this.values[0]){let e=n.AsnConvert.parse(this.values[0],_.ChallengePassword);this.password=e.toString()}}toTextObject(){let e=this.toTextObjectWithoutValue();return e[I.VALUE]=this.password,e}};nt.NAME=`Challenge Password`;var rt=class extends K{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else{let t=e[0],r=new p.Extensions;for(let e of t)r.push(n.AsnConvert.parse(e.rawData,p.Extension));super(_.id_pkcs9_at_extensionRequest,[n.AsnConvert.serialize(r)])}this.items??=[]}onInit(e){if(super.onInit(e),this.values[0]){let e=n.AsnConvert.parse(this.values[0],p.Extensions);this.items=e.map(e=>Xe.create(n.AsnConvert.serialize(e)))}}toTextObject(){let e=this.toTextObjectWithoutValue(),t=this.items.map(e=>e.toTextObject());for(let n of t)e[n[I.NAME]]=n;return e}};rt.NAME=`Extensions`;var it=class{static register(e,t){this.items.set(e,t)}static create(e){let t=new K(e),n=this.items.get(t.type);return n?new n(e):t}};it.items=new Map;let at=`crypto.signatureFormatter`;var ot=class{toAsnSignature(e,t){return i.BufferSourceConverter.toArrayBuffer(t)}toWebSignature(e,t){return i.BufferSourceConverter.toArrayBuffer(t)}},st;e.RsaAlgorithm=st=class{static createPssParams(e,t){let i=st.getHashAlgorithm(e);return i?new g.RsaSaPssParams({hashAlgorithm:i,maskGenAlgorithm:new r.AlgorithmIdentifier({algorithm:g.id_mgf1,parameters:n.AsnConvert.serialize(i)}),saltLength:t}):null}static getHashAlgorithm(e){let t=l.container.resolve(b);return typeof e==`string`?t.toAsnAlgorithm({name:e}):typeof e==`object`&&e&&`name`in e?t.toAsnAlgorithm(e):null}toAsnAlgorithm(e){switch(e.name.toLowerCase()){case`rsassa-pkcs1-v1_5`:if(`hash`in e){let t;if(typeof e.hash==`string`)t=e.hash;else if(e.hash&&typeof e.hash==`object`&&`name`in e.hash&&typeof e.hash.name==`string`)t=e.hash.name.toUpperCase();else throw Error(`Cannot get hash algorithm name`);switch(t.toLowerCase()){case`sha-1`:return new r.AlgorithmIdentifier({algorithm:g.id_sha1WithRSAEncryption,parameters:null});case`sha-256`:return new r.AlgorithmIdentifier({algorithm:g.id_sha256WithRSAEncryption,parameters:null});case`sha-384`:return new r.AlgorithmIdentifier({algorithm:g.id_sha384WithRSAEncryption,parameters:null});case`sha-512`:return new r.AlgorithmIdentifier({algorithm:g.id_sha512WithRSAEncryption,parameters:null})}}else return new r.AlgorithmIdentifier({algorithm:g.id_rsaEncryption,parameters:null});break;case`rsa-pss`:if(`hash`in e){if(!(`saltLength`in e&&typeof e.saltLength==`number`))throw Error(`Cannot get 'saltLength' from 'alg' argument`);let t=st.createPssParams(e.hash,e.saltLength);if(!t)throw Error(`Cannot create PSS parameters`);return new r.AlgorithmIdentifier({algorithm:g.id_RSASSA_PSS,parameters:n.AsnConvert.serialize(t)})}return new r.AlgorithmIdentifier({algorithm:g.id_RSASSA_PSS,parameters:null})}return null}toWebAlgorithm(e){switch(e.algorithm){case g.id_rsaEncryption:return{name:`RSASSA-PKCS1-v1_5`};case g.id_sha1WithRSAEncryption:return{name:`RSASSA-PKCS1-v1_5`,hash:{name:`SHA-1`}};case g.id_sha256WithRSAEncryption:return{name:`RSASSA-PKCS1-v1_5`,hash:{name:`SHA-256`}};case g.id_sha384WithRSAEncryption:return{name:`RSASSA-PKCS1-v1_5`,hash:{name:`SHA-384`}};case g.id_sha512WithRSAEncryption:return{name:`RSASSA-PKCS1-v1_5`,hash:{name:`SHA-512`}};case g.id_RSASSA_PSS:if(e.parameters){let t=n.AsnConvert.parse(e.parameters,g.RsaSaPssParams);return{name:`RSA-PSS`,hash:l.container.resolve(b).toWebAlgorithm(t.hashAlgorithm),saltLength:t.saltLength}}return{name:`RSA-PSS`}}return null}},e.RsaAlgorithm=st=c.__decorate([l.injectable()],e.RsaAlgorithm),l.container.registerSingleton(v,e.RsaAlgorithm),e.ShaAlgorithm=class{toAsnAlgorithm(e){switch(e.name.toLowerCase()){case`sha-1`:return new r.AlgorithmIdentifier({algorithm:s.id_sha1});case`sha-256`:return new r.AlgorithmIdentifier({algorithm:s.id_sha256});case`sha-384`:return new r.AlgorithmIdentifier({algorithm:s.id_sha384});case`sha-512`:return new r.AlgorithmIdentifier({algorithm:s.id_sha512})}return null}toWebAlgorithm(e){switch(e.algorithm){case s.id_sha1:return{name:`SHA-1`};case s.id_sha256:return{name:`SHA-256`};case s.id_sha384:return{name:`SHA-384`};case s.id_sha512:return{name:`SHA-512`}}return null}},e.ShaAlgorithm=c.__decorate([l.injectable()],e.ShaAlgorithm),l.container.registerSingleton(v,e.ShaAlgorithm);var ct=class e{addPadding(e,t){let n=i.BufferSourceConverter.toUint8Array(t),r=new Uint8Array(e);return r.set(n,e-n.length),r}removePadding(e,t=!1){let n=i.BufferSourceConverter.toUint8Array(e);for(let e=0;e<n.length;e++)if(n[e]){n=n.slice(e);break}if(t&&n[0]>127){let e=new Uint8Array(n.length+1);return e.set(n,1),e.buffer}return n.buffer}toAsnSignature(t,r){if(t.name===`ECDSA`){let a=t.namedCurve,s=e.namedCurveSize.get(a)||e.defaultNamedCurveSize,c=new o.ECDSASigValue,l=i.BufferSourceConverter.toUint8Array(r);return c.r=this.removePadding(l.slice(0,s),!0),c.s=this.removePadding(l.slice(s,s+s),!0),n.AsnConvert.serialize(c)}return null}toWebSignature(t,r){if(t.name===`ECDSA`){let a=n.AsnConvert.parse(r,o.ECDSASigValue),s=t.namedCurve,c=e.namedCurveSize.get(s)||e.defaultNamedCurveSize,l=this.addPadding(c,this.removePadding(a.r)),u=this.addPadding(c,this.removePadding(a.s));return i.combine(l,u)}return null}};ct.namedCurveSize=new Map,ct.defaultNamedCurveSize=32;let lt=`1.3.101.110`,ut=`1.3.101.111`,dt=`1.3.101.112`,ft=`1.3.101.113`;e.EdAlgorithm=class{toAsnAlgorithm(e){let t=null;switch(e.name.toLowerCase()){case`ed25519`:t=dt;break;case`x25519`:t=lt;break;case`eddsa`:switch(e.namedCurve.toLowerCase()){case`ed25519`:t=dt;break;case`ed448`:t=ft}break;case`ecdh-es`:switch(e.namedCurve.toLowerCase()){case`x25519`:t=lt;break;case`x448`:t=ut}}return t?new r.AlgorithmIdentifier({algorithm:t}):null}toWebAlgorithm(e){switch(e.algorithm){case dt:return{name:`Ed25519`};case ft:return{name:`EdDSA`,namedCurve:`Ed448`};case lt:return{name:`X25519`};case ut:return{name:`ECDH-ES`,namedCurve:`X448`}}return null}},e.EdAlgorithm=c.__decorate([l.injectable()],e.EdAlgorithm),l.container.registerSingleton(v,e.EdAlgorithm);var pt=class extends W{constructor(e){W.isAsnEncoded(e)?super(e,d.CertificationRequest):super(e),this.tag=U.CertificateRequestTag}onInit(e){this.tbs=n.AsnConvert.serialize(e.certificationRequestInfo),this.publicKey=new Ve(e.certificationRequestInfo.subjectPKInfo);let t=l.container.resolve(b);this.signatureAlgorithm=t.toWebAlgorithm(e.signatureAlgorithm),this.signature=e.signature,this.attributes=e.certificationRequestInfo.attributes.map(e=>it.create(n.AsnConvert.serialize(e)));let r=this.getAttribute(u.id_pkcs9_at_extensionRequest);this.extensions=[],r instanceof rt&&(this.extensions=r.items),this.subjectName=new V(e.certificationRequestInfo.subject),this.subject=this.subjectName.toString()}getAttribute(e){for(let t of this.attributes)if(t.type===e)return t;return null}getAttributes(e){return this.attributes.filter(t=>t.type===e)}getExtension(e){for(let t of this.extensions)if(t.type===e)return t;return null}getExtensions(e){return this.extensions.filter(t=>t.type===e)}async verify(e=z.get()){let t={...this.publicKey.algorithm,...this.signatureAlgorithm},n=await this.publicKey.export(t,[`verify`],e),r=l.container.resolveAll(at).reverse(),i=null;for(let e of r)if(i=e.toWebSignature(t,this.signature),i)break;if(!i)throw Error(`Cannot convert WebCrypto signature value to ASN.1 format`);return await e.subtle.verify(this.signatureAlgorithm,n,i,this.tbs)}toTextObject(){let e=this.toTextObjectEmpty(),t=n.AsnConvert.parse(this.rawData,d.CertificationRequest),i=t.certificationRequestInfo,a=new I(``,{Version:`${r.Version[i.version]} (${i.version})`,Subject:this.subject,"Subject Public Key Info":this.publicKey});if(this.attributes.length){let e=new I(``);for(let t of this.attributes){let n=t.toTextObject();e[n[I.NAME]]=n}a.Attributes=e}return e.Data=a,e.Signature=new I(``,{Algorithm:xe.serializeAlgorithm(t.signatureAlgorithm),"":t.signature}),e}};pt.NAME=`PKCS#10 Certificate Request`;var mt=class{static async create(e,t=z.get()){if(!e.keys.privateKey)throw Error(`Bad field 'keys' in 'params' argument. 'privateKey' is empty`);if(!e.keys.publicKey)throw Error(`Bad field 'keys' in 'params' argument. 'publicKey' is empty`);let i=await t.subtle.exportKey(`spki`,e.keys.publicKey),a=new d.CertificationRequest({certificationRequestInfo:new d.CertificationRequestInfo({subjectPKInfo:n.AsnConvert.parse(i,r.SubjectPublicKeyInfo)})});if(e.name){let t=e.name instanceof V?e.name:new V(e.name);a.certificationRequestInfo.subject=n.AsnConvert.parse(t.toArrayBuffer(),r.Name)}if(e.attributes)for(let t of e.attributes)a.certificationRequestInfo.attributes.push(n.AsnConvert.parse(t.rawData,r.Attribute));if(e.extensions&&e.extensions.length){let t=new r.Attribute({type:u.id_pkcs9_at_extensionRequest}),i=new r.Extensions;for(let t of e.extensions)i.push(n.AsnConvert.parse(t.rawData,r.Extension));t.values.push(n.AsnConvert.serialize(i)),a.certificationRequestInfo.attributes.push(t)}let o={...e.signingAlgorithm,...e.keys.privateKey.algorithm};a.signatureAlgorithm=l.container.resolve(b).toAsnAlgorithm(o);let s=n.AsnConvert.serialize(a.certificationRequestInfo),c=await t.subtle.sign(o,e.keys.privateKey,s),f=l.container.resolveAll(at).reverse(),p=null;for(let e of f)if(p=e.toAsnSignature(o,c),p)break;if(!p)throw Error(`Cannot convert WebCrypto signature value to ASN.1 format`);return a.signature=p,new pt(n.AsnConvert.serialize(a))}},ht=class extends W{constructor(e){W.isAsnEncoded(e)?super(e,r.Certificate):super(e),this.tag=U.CertificateTag}onInit(e){let t=e.tbsCertificate;this.tbs=n.AsnConvert.serialize(t),this.serialNumber=i.Convert.ToHex(t.serialNumber),this.subjectName=new V(t.subject),this.subject=new V(t.subject).toString(),this.issuerName=new V(t.issuer),this.issuer=this.issuerName.toString();let r=l.container.resolve(b);this.signatureAlgorithm=r.toWebAlgorithm(e.signatureAlgorithm),this.signature=e.signatureValue;let a=t.validity.notBefore.utcTime||t.validity.notBefore.generalTime;if(!a)throw Error(`Cannot get 'notBefore' value`);this.notBefore=a;let o=t.validity.notAfter.utcTime||t.validity.notAfter.generalTime;if(!o)throw Error(`Cannot get 'notAfter' value`);this.notAfter=o,this.extensions=[],t.extensions&&(this.extensions=t.extensions.map(e=>Xe.create(n.AsnConvert.serialize(e)))),this.publicKey=new Ve(t.subjectPublicKeyInfo)}getExtension(e){for(let t of this.extensions)if(typeof e==`string`){if(t.type===e)return t}else if(t instanceof e)return t;return null}getExtensions(e){return this.extensions.filter(t=>typeof e==`string`?t.type===e:t instanceof e)}async verify(e={},t=z.get()){let n,r,a=e.publicKey;try{if(!a)n={...this.publicKey.algorithm,...this.signatureAlgorithm},r=await this.publicKey.export(n,[`verify`],t);else if(`publicKey`in a)n={...a.publicKey.algorithm,...this.signatureAlgorithm},r=await a.publicKey.export(n,[`verify`],t);else if(a instanceof Ve)n={...a.algorithm,...this.signatureAlgorithm},r=await a.export(n,[`verify`],t);else if(i.BufferSourceConverter.isBufferSource(a)){let e=new Ve(a);n={...e.algorithm,...this.signatureAlgorithm},r=await e.export(n,[`verify`],t)}else n={...a.algorithm,...this.signatureAlgorithm},r=a}catch{return!1}let o=l.container.resolveAll(at).reverse(),s=null;for(let e of o)if(s=e.toWebSignature(n,this.signature),s)break;if(!s)throw Error(`Cannot convert ASN.1 signature value to WebCrypto format`);let c=await t.subtle.verify(this.signatureAlgorithm,r,s,this.tbs);if(e.signatureOnly)return c;{let t=(e.date||new Date).getTime();return c&&this.notBefore.getTime()<t&&t<this.notAfter.getTime()}}async getThumbprint(...e){let t,n=`SHA-1`;return e[0]&&(e[0].subtle?t=e[0]:(n=e[0]||n,t=e[1])),t??=z.get(),await t.subtle.digest(n,this.rawData)}async isSelfSigned(e=z.get()){return this.subject===this.issuer&&await this.verify({signatureOnly:!0},e)}toTextObject(){let e=this.toTextObjectEmpty(),t=n.AsnConvert.parse(this.rawData,r.Certificate),i=t.tbsCertificate,a=new I(``,{Version:`${r.Version[i.version]} (${i.version})`,"Serial Number":i.serialNumber,"Signature Algorithm":xe.serializeAlgorithm(i.signature),Issuer:this.issuer,Validity:new I(``,{"Not Before":i.validity.notBefore.getTime(),"Not After":i.validity.notAfter.getTime()}),Subject:this.subject,"Subject Public Key Info":this.publicKey});if(i.issuerUniqueID&&(a[`Issuer Unique ID`]=i.issuerUniqueID),i.subjectUniqueID&&(a[`Subject Unique ID`]=i.subjectUniqueID),this.extensions.length){let e=new I(``);for(let t of this.extensions){let n=t.toTextObject();e[n[I.NAME]]=n}a.Extensions=e}return e.Data=a,e.Signature=new I(``,{Algorithm:xe.serializeAlgorithm(t.signatureAlgorithm),"":t.signatureValue}),e}};ht.NAME=`Certificate`;var gt=class extends Array{constructor(e){if(super(),W.isAsnEncoded(e))this.import(e);else if(e instanceof ht)this.push(e);else if(Array.isArray(e))for(let t of e)this.push(t)}export(e){let t=new m.SignedData;t.version=1,t.encapContentInfo.eContentType=m.id_data,t.encapContentInfo.eContent=new m.EncapsulatedContent({single:new n.OctetString}),t.certificates=new m.CertificateSet(this.map(e=>new m.CertificateChoices({certificate:n.AsnConvert.parse(e.rawData,r.Certificate)})));let i=new m.ContentInfo({contentType:m.id_signedData,content:n.AsnConvert.serialize(t)}),a=n.AsnConvert.serialize(i);return e===`raw`?a:this.toString(e)}import(e){let t=W.toArrayBuffer(e),r=n.AsnConvert.parse(t,m.ContentInfo);if(r.contentType!==m.id_signedData)throw TypeError(`Cannot parse CMS package. Incoming data is not a SignedData object.`);let i=n.AsnConvert.parse(r.content,m.SignedData);this.clear();for(let e of i.certificates||[])e.certificate&&this.push(new ht(e.certificate))}clear(){for(;this.pop(););}toString(e=`pem`){let t=this.export(`raw`);switch(e){case`pem`:return U.encode(t,`CMS`);case`pem-chain`:return this.map(e=>e.toString(`pem`)).join(`
135
- `);case`asn`:return n.AsnConvert.toString(t);case`hex`:return i.Convert.ToHex(t);case`base64`:return i.Convert.ToBase64(t);case`base64url`:return i.Convert.ToBase64Url(t);case`text`:return xe.serialize(this.toTextObject());default:throw TypeError(`Argument 'format' is unsupported value`)}}toTextObject(){let e=n.AsnConvert.parse(this.export(`raw`),m.ContentInfo),t=n.AsnConvert.parse(e.content,m.SignedData);return new I(`X509Certificates`,{"Content Type":be.toString(e.contentType),Content:new I(``,{Version:`${m.CMSVersion[t.version]} (${t.version})`,Certificates:new I(``,{Certificate:this.map(e=>e.toTextObject())})})})}},_t=class{constructor(e={}){this.certificates=[],e.certificates&&(this.certificates=e.certificates)}async build(e,t=z.get()){let n=new gt(e),r=e;for(;r=await this.findIssuer(r,t);){let e=await r.getThumbprint(t);for(let r of n){let n=await r.getThumbprint(t);if(i.isEqual(e,n))throw Error(`Cannot build a certificate chain. Circular dependency.`)}n.push(r)}return n}async findIssuer(e,t=z.get()){if(!await e.isSelfSigned(t)){let r=e.getExtension(p.id_ce_authorityKeyIdentifier);for(let a of this.certificates)if(a.subject===e.issuer){if(r){if(r.keyId){let e=a.getExtension(p.id_ce_subjectKeyIdentifier);if(e&&e.keyId!==r.keyId)continue}else if(r.certId){let e=a.getExtension(p.id_ce_subjectAltName);if(e&&!(r.certId.serialNumber===a.serialNumber&&i.isEqual(n.AsnConvert.serialize(r.certId.name),n.AsnConvert.serialize(e))))continue}}try{let n={...a.publicKey.algorithm,...e.signatureAlgorithm},r=await a.publicKey.export(n,[`verify`],t);if(!await e.verify({publicKey:r,signatureOnly:!0},t))continue}catch{continue}return a}}return null}},vt=class{static async createSelfSigned(e,t=z.get()){if(!e.keys.privateKey)throw Error(`Bad field 'keys' in 'params' argument. 'privateKey' is empty`);if(!e.keys.publicKey)throw Error(`Bad field 'keys' in 'params' argument. 'publicKey' is empty`);return this.create({serialNumber:e.serialNumber,subject:e.name,issuer:e.name,notBefore:e.notBefore,notAfter:e.notAfter,publicKey:e.keys.publicKey,signingKey:e.keys.privateKey,signingAlgorithm:e.signingAlgorithm,extensions:e.extensions},t)}static async create(e,t=z.get()){let r;r=e.publicKey instanceof Ve?e.publicKey.rawData:`publicKey`in e.publicKey?e.publicKey.publicKey.rawData:i.BufferSourceConverter.isBufferSource(e.publicKey)?e.publicKey:await t.subtle.exportKey(`spki`,e.publicKey);let a=e.serialNumber?i.BufferSourceConverter.toUint8Array(i.Convert.FromHex(e.serialNumber)):t.getRandomValues(new Uint8Array(16));a[0]>127&&(a[0]&=127),a.length>1&&a[0]===0&&(a[1]|=128);let o=e.notBefore||new Date,s=e.notAfter||new Date(o.getTime()+31536e6),c=new p.Certificate({tbsCertificate:new p.TBSCertificate({version:p.Version.v3,serialNumber:a,validity:new p.Validity({notBefore:o,notAfter:s}),extensions:new p.Extensions(e.extensions?.map(e=>n.AsnConvert.parse(e.rawData,p.Extension))||[]),subjectPublicKeyInfo:n.AsnConvert.parse(r,p.SubjectPublicKeyInfo)})});if(e.subject){let t=e.subject instanceof V?e.subject:new V(e.subject);c.tbsCertificate.subject=n.AsnConvert.parse(t.toArrayBuffer(),p.Name)}if(e.issuer){let t=e.issuer instanceof V?e.issuer:new V(e.issuer);c.tbsCertificate.issuer=n.AsnConvert.parse(t.toArrayBuffer(),p.Name)}let u={hash:`SHA-256`},d=`signingKey`in e?{...u,...e.signingAlgorithm,...e.signingKey.algorithm}:{...u,...e.signingAlgorithm},f=l.container.resolve(b);c.tbsCertificate.signature=c.signatureAlgorithm=f.toAsnAlgorithm(d);let m=n.AsnConvert.serialize(c.tbsCertificate),h=`signingKey`in e?await t.subtle.sign(d,e.signingKey,m):e.signature,g=l.container.resolveAll(at).reverse(),_=null;for(let e of g)if(_=e.toAsnSignature(d,h),_)break;if(!_)throw Error(`Cannot convert ASN.1 signature value to WebCrypto format`);return c.signatureValue=_,new ht(n.AsnConvert.serialize(c))}};e.X509CrlReason=void 0,(function(e){e[e.unspecified=0]=`unspecified`,e[e.keyCompromise=1]=`keyCompromise`,e[e.cACompromise=2]=`cACompromise`,e[e.affiliationChanged=3]=`affiliationChanged`,e[e.superseded=4]=`superseded`,e[e.cessationOfOperation=5]=`cessationOfOperation`,e[e.certificateHold=6]=`certificateHold`,e[e.removeFromCRL=8]=`removeFromCRL`,e[e.privilegeWithdrawn=9]=`privilegeWithdrawn`,e[e.aACompromise=10]=`aACompromise`})(e.X509CrlReason||={});var yt=class extends Se{constructor(...e){let t;t=i.BufferSourceConverter.isBufferSource(e[0])?i.BufferSourceConverter.toArrayBuffer(e[0]):n.AsnConvert.serialize(new r.RevokedCertificate({userCertificate:e[0],revocationDate:new r.Time(e[1]),crlEntryExtensions:e[2]})),super(t,r.RevokedCertificate)}onInit(e){this.serialNumber=i.Convert.ToHex(e.userCertificate),this.revocationDate=e.revocationDate.getTime(),this.extensions=[],e.crlEntryExtensions&&(this.extensions=e.crlEntryExtensions.map(e=>{let t=Xe.create(n.AsnConvert.serialize(e));switch(t.type){case r.id_ce_cRLReasons:this.reason=n.AsnConvert.parse(t.value,r.CRLReason).reason;break;case r.id_ce_invalidityDate:this.invalidity=n.AsnConvert.parse(t.value,r.InvalidityDate).value}return t}))}},bt=class extends W{constructor(e){W.isAsnEncoded(e)?super(e,r.CertificateList):super(e),this.tag=U.CrlTag}onInit(e){let t=e.tbsCertList;this.tbs=n.AsnConvert.serialize(t),this.version=t.version;let r=l.container.resolve(b);this.signatureAlgorithm=r.toWebAlgorithm(e.signatureAlgorithm),this.tbsCertListSignatureAlgorithm=t.signature,this.certListSignatureAlgorithm=e.signatureAlgorithm,this.signature=e.signature,this.issuerName=new V(t.issuer),this.issuer=this.issuerName.toString();let i=t.thisUpdate.getTime();if(!i)throw Error(`Cannot get 'thisUpdate' value`);this.thisUpdate=i;let a=t.nextUpdate?.getTime();this.nextUpdate=a,this.entries=t.revokedCertificates?.map(e=>new yt(n.AsnConvert.serialize(e)))||[],this.extensions=[],t.crlExtensions&&(this.extensions=t.crlExtensions.map(e=>Xe.create(n.AsnConvert.serialize(e))))}getExtension(e){for(let t of this.extensions)if(typeof e==`string`){if(t.type===e)return t}else if(t instanceof e)return t;return null}getExtensions(e){return this.extensions.filter(t=>typeof e==`string`?t.type===e:t instanceof e)}async verify(e,t=z.get()){if(!this.certListSignatureAlgorithm.isEqual(this.tbsCertListSignatureAlgorithm))throw Error(`algorithm identifier in the sequence tbsCertList and CertificateList mismatch`);let n,r,i=e.publicKey;try{i instanceof ht?(n={...i.publicKey.algorithm,...i.signatureAlgorithm},r=await i.publicKey.export(n,[`verify`])):i instanceof Ve?(n={...i.algorithm,...this.signature},r=await i.export(n,[`verify`])):(n={...i.algorithm,...this.signature},r=i)}catch{return!1}let a=l.container.resolveAll(at).reverse(),o=null;for(let e of a)if(o=e.toWebSignature(n,this.signature),o)break;if(!o)throw Error(`Cannot convert ASN.1 signature value to WebCrypto format`);return await t.subtle.verify(this.signatureAlgorithm,r,o,this.tbs)}async getThumbprint(...e){let t,n=`SHA-1`;return e[0]&&(e[0].subtle?t=e[0]:(n=e[0]||n,t=e[1])),t??=z.get(),await t.subtle.digest(n,this.rawData)}findRevoked(e){let t=typeof e==`string`?e:e.serialNumber;for(let e of this.entries)if(e.serialNumber===t)return e;return null}},xt=class{static async create(e,t=z.get()){let a=e.issuer instanceof V?e.issuer:new V(e.issuer),o=new p.CertificateList({tbsCertList:new p.TBSCertList({version:p.Version.v2,issuer:n.AsnConvert.parse(a.toArrayBuffer(),p.Name),thisUpdate:new r.Time(e.thisUpdate||new Date)})});if(e.nextUpdate&&(o.tbsCertList.nextUpdate=new r.Time(e.nextUpdate)),e.extensions&&e.extensions.length&&(o.tbsCertList.crlExtensions=new p.Extensions(e.extensions.map(e=>n.AsnConvert.parse(e.rawData,p.Extension))||[])),e.entries&&e.entries.length){o.tbsCertList.revokedCertificates=[];for(let t of e.entries){let a=W.toArrayBuffer(t.serialNumber);if(o.tbsCertList.revokedCertificates.findIndex(e=>i.isEqual(e.userCertificate,a))>-1)throw Error(`Certificate serial number ${t.serialNumber} already exists in tbsCertList`);let s=new r.RevokedCertificate({userCertificate:a,revocationDate:new r.Time(t.revocationDate||new Date)});if(s.crlEntryExtensions=`extensions`in t&&t.extensions?.length?t.extensions.map(e=>n.AsnConvert.parse(e.rawData,p.Extension)):[],!(t instanceof yt)&&(t.reason&&s.crlEntryExtensions.push(new p.Extension({extnID:p.id_ce_cRLReasons,critical:!1,extnValue:new n.OctetString(n.AsnConvert.serialize(new p.CRLReason(t.reason)))})),t.invalidity&&s.crlEntryExtensions.push(new p.Extension({extnID:p.id_ce_invalidityDate,critical:!1,extnValue:new n.OctetString(n.AsnConvert.serialize(new p.InvalidityDate(t.invalidity)))})),t.issuer)){let t=e.issuer instanceof V?e.issuer:new V(e.issuer);s.crlEntryExtensions.push(new p.Extension({extnID:p.id_ce_certificateIssuer,critical:!1,extnValue:new n.OctetString(n.AsnConvert.serialize(n.AsnConvert.parse(t.toArrayBuffer(),p.Name)))}))}o.tbsCertList.revokedCertificates.push(s)}}let s={...e.signingAlgorithm,...e.signingKey.algorithm},c=l.container.resolve(b);o.tbsCertList.signature=o.signatureAlgorithm=c.toAsnAlgorithm(s);let u=n.AsnConvert.serialize(o.tbsCertList),d=await t.subtle.sign(s,e.signingKey,u),f=l.container.resolveAll(at).reverse(),m=null;for(let e of f)if(m=e.toAsnSignature(s,d),m)break;if(!m)throw Error(`Cannot convert ASN.1 signature value to WebCrypto format`);return o.signature=m,new bt(n.AsnConvert.serialize(o))}};Xe.register(p.id_ce_basicConstraints,We),Xe.register(p.id_ce_extKeyUsage,Ge),Xe.register(p.id_ce_keyUsage,Ke),Xe.register(p.id_ce_subjectKeyIdentifier,qe),Xe.register(p.id_ce_authorityKeyIdentifier,Ue),Xe.register(p.id_ce_subjectAltName,Je),Xe.register(p.id_ce_cRLDistributionPoints,Qe),Xe.register(p.id_pe_authorityInfoAccess,$e),it.register(_.id_pkcs9_at_challengePassword,nt),it.register(_.id_pkcs9_at_extensionRequest,rt),l.container.registerSingleton(at,ot),l.container.registerSingleton(at,ct),ct.namedCurveSize.set(`P-256`,32),ct.namedCurveSize.set(`K-256`,32),ct.namedCurveSize.set(`P-384`,48),ct.namedCurveSize.set(`P-521`,66),e.AlgorithmProvider=y,e.AsnData=Se,e.AsnDefaultSignatureFormatter=ot,e.AsnEcSignatureFormatter=ct,e.Attribute=K,e.AttributeFactory=it,e.AuthorityInfoAccessExtension=$e,e.AuthorityKeyIdentifierExtension=Ue,e.BasicConstraintsExtension=We,e.CRLDistributionPointsExtension=Qe,e.CertificatePolicyExtension=Ze,e.ChallengePasswordAttribute=nt,e.CryptoProvider=we,e.DefaultAlgorithmSerializer=ye,e.ExtendedKeyUsageExtension=Ge,e.Extension=R,e.ExtensionFactory=Xe,e.ExtensionsAttribute=rt,e.GeneralName=Re,e.GeneralNames=ze,e.KeyUsagesExtension=Ke,e.Name=V,e.NameIdentifier=De,e.OidSerializer=be,e.PemConverter=U,e.Pkcs10CertificateRequest=pt,e.Pkcs10CertificateRequestGenerator=mt,e.PublicKey=Ve,e.SubjectAlternativeNameExtension=Je,e.SubjectKeyIdentifierExtension=qe,e.TextConverter=xe,e.TextObject=I,e.X509Certificate=ht,e.X509CertificateGenerator=vt,e.X509Certificates=gt,e.X509ChainBuilder=_t,e.X509Crl=bt,e.X509CrlEntry=yt,e.X509CrlGenerator=xt,e.cryptoProvider=z,e.diAlgorithm=v,e.diAlgorithmProvider=b,e.diAsnSignatureFormatter=at,e.idEd25519=dt,e.idEd448=ft,e.idX25519=lt,e.idX448=ut}));I(),Yi();var Xi;(function(e){e.Der=`der`,e.Raw=`raw`})(Xi||={});const Zi=typeof window<`u`&&window.document!==void 0&&typeof crypto<`u`&&crypto.subtle!==void 0,Qi=typeof process<`u`&&process.versions!=null&&process.versions.node!=null,$i=()=>Zi?`browser`:Qi?`node`:`purejs`,ea=async(e,t)=>{let n=t??$i();switch(n){case`browser`:return(await import(`./webcrypto-CRLL4ptE.mjs`)).signWithApiKey(e);case`node`:return(await import(`./nodecrypto-CIGSbdQh.mjs`)).signWithApiKey(e);case`purejs`:return(await import(`./purejs-CZxWHjtN.mjs`)).signWithApiKey(e);default:throw Error(`Unsupported runtime: ${n}`)}};var ta=class{constructor(e){this.apiPublicKey=e.apiPublicKey,this.apiPrivateKey=e.apiPrivateKey,this.runtimeOverride=e.runtimeOverride}async stamp(e){let t=await ea({publicKey:this.apiPublicKey,privateKey:this.apiPrivateKey,content:e},this.runtimeOverride),n={publicKey:this.apiPublicKey,scheme:`SIGNATURE_SCHEME_TK_API_P256`,signature:t};return{stampHeaderName:`X-Stamp`,stampHeaderValue:c(JSON.stringify(n))}}async sign(e,t){switch(t){case Xi.Raw:{let t=await ea({publicKey:this.apiPublicKey,privateKey:this.apiPrivateKey,content:e},this.runtimeOverride),n=ge(t);return a(n)}case Xi.Der:return ea({publicKey:this.apiPublicKey,privateKey:this.apiPrivateKey,content:e},this.runtimeOverride);default:throw Error(`Unsupported signature format: ${t}`)}}},na=class extends Error{constructor(e){super(e),this.name=`InvalidKeyError`}};function ra(){let e=m(`prime256v1`);return e.generateKeys(),aa(e.getPrivateKey().toString(`hex`).padStart(64,`0`))}const ia=/^[0-9a-f]{64}$/i;function aa(e){if(!ia.test(e))throw new na(`P-256 private key must be 64 hex characters`);let t=e.toLowerCase(),n=m(`prime256v1`);try{n.setPrivateKey(Buffer.from(t,`hex`))}catch{throw new na(`value is not a valid P-256 private key (scalar out of range)`)}return{algorithm:`p256`,privateKeyHex:t,publicKeyHex:n.getPublicKey(`hex`,`compressed`)}}function oa(e){try{let t=p.convertKey(e,`prime256v1`,`hex`,`hex`,`uncompressed`),n=Buffer.isBuffer(t)?t:Buffer.from(t,`hex`);return n.length===65?n:null}catch{return null}}function sa(e){let t=oa(e);if(t===null)throw new na(`value is not a valid P-256 public key`);return ca(t)}function ca(e){let t=e.subarray(1,33).toString(`base64url`),n=e.subarray(33,65).toString(`base64url`);return h(`sha256`).update(`{"crv":"P-256","kty":"EC","x":"${t}","y":"${n}"}`,`utf8`).digest(`base64url`)}const la=/^https?:\/\/[\x21\x23-\x7e]{1,255}$/,ua=/^[\x21\x23-\x3a\x3c-\x7e]{1,128}$/;function da(e,t){return`${e.replace(/\/+$/,``)}/agent-keys/${t}`}function fa(e){let t=pa(e.keypair),n={...t,identityUrl:ma(e.identityUrl??da(e.baseUrl,t.keyId))};return{sign:async e=>{let t=new Uint8Array(await e.clone().arrayBuffer()),r=ha(n,{method:e.method,url:e.url,body:t},{nonce:_(16).toString(`base64url`),createdAt:new Date}),i=new Headers(e.headers);for(let[e,t]of Object.entries(r))i.set(e,t);return new Request(e,{headers:i})}}}function pa(e){let t=oa(e.publicKeyHex);if(t===null)throw Error(`signer keypair has an invalid P-256 public key`);return{signingKey:ya(t,e.privateKeyHex),keyId:ca(t)}}function ma(e){if(!la.test(e))throw Error(`identity URL is outside the signature profile: "${e}"`);return e}function ha(e,t,n){if(!ua.test(n.nonce))throw Error(`nonce is outside the signature profile`);let r=ga(t.body),i=`"${e.identityUrl}"`,a=`("@method" "@target-uri" "content-digest" "signature-agent");created=${Math.floor(n.createdAt.getTime()/1e3)};keyid="${e.keyId}";nonce="${n.nonce}";alg="ecdsa-p256-sha256"`,o=[`"@method": ${t.method.toUpperCase()}`,`"@target-uri": ${_a(new URL(t.url))}`,`"content-digest": ${r}`,`"signature-agent": ${i}`,`"@signature-params": ${a}`].join(`
136
- `),s=v(`sha256`,Buffer.from(o,`utf8`),{key:e.signingKey,dsaEncoding:`ieee-p1363`});return{"Content-Digest":r,"Signature-Agent":i,"Signature-Input":`sig=${a}`,Signature:`sig=:${s.toString(`base64`)}:`}}function ga(e){return`sha-256=:${h(`sha256`).update(e??``).digest(`base64`)}:`}function _a(e){return`${e.protocol}//${va(e)}${e.pathname}${e.search}`}function va(e){let t=e.host.toLowerCase();return e.protocol===`https:`&&e.port===`443`||e.protocol===`http:`&&e.port===`80`?e.hostname.toLowerCase():t}function ya(e,t){return g({key:{kty:`EC`,crv:`P-256`,d:Buffer.from(t,`hex`).toString(`base64url`),x:e.subarray(1,33).toString(`base64url`),y:e.subarray(33,65).toString(`base64url`)},format:`jwk`})}var ba=`0.1.0`;const xa=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/,Sa=ba;function Ca(e,t){if(!xa.test(e))throw Error(`${t} must be a valid HTTP token`)}function wa(e,t){let n=!1;for(let t=0;t<e.length;t+=1){let r=e.charCodeAt(t);if(r<32||r===127||r>255){n=!0;break}}if(n||/[()\\]/.test(e))throw Error(`${t} must not contain parentheses, backslashes, control characters, or characters outside Latin-1`)}function Ta(e){let t=`catena-agent-client/${Sa}`;if(!e)return t;Ca(e.name,`appInfo.name`),e.version!==void 0&&Ca(e.version,`appInfo.version`),e.url!==void 0&&wa(e.url,`appInfo.url`);let n=e.version===void 0?e.name:`${e.name}/${e.version}`;return`${e.url===void 0?n:`${n} (${e.url})`} ${t}`}const Ea=`offer-receipt`,Da=8192,Oa=f.pipe(f.string(),f.maxLength(Da),f.regex(/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/,`Expected a JWS compact serialization`)),ka=f.optional(f.pipe(f.number(),f.integer(),f.minValue(0))),Aa=f.pipe(f.string(),f.regex(/^0x[0-9a-fA-F]{130}$/,`Expected a 65-byte hex signature`)),ja=f.variant(`format`,[f.looseObject({format:f.literal(`eip712`),acceptIndex:ka,payload:f.record(f.string(),f.unknown()),signature:Aa}),f.looseObject({format:f.literal(`jws`),acceptIndex:ka,signature:Oa})]),Ma=f.variant(`format`,[f.looseObject({format:f.literal(`eip712`),payload:f.record(f.string(),f.unknown()),signature:Aa}),f.looseObject({format:f.literal(`jws`),signature:Oa})]),Na=f.object({[Ea]:f.object({info:f.object({offers:f.array(f.unknown())})})}),Pa=f.object({[Ea]:f.object({info:f.object({receipt:f.unknown()})})}),Fa=f.looseObject({version:f.literal(1),resourceUrl:f.pipe(f.string(),f.maxLength(2048)),scheme:f.pipe(f.string(),f.maxLength(64)),network:f.pipe(f.string(),f.maxLength(64)),asset:f.pipe(f.string(),f.maxLength(128)),payTo:f.pipe(f.string(),f.maxLength(128)),amount:f.pipe(f.string(),f.regex(/^\d+$/),f.maxLength(78)),validUntil:f.optional(f.pipe(f.number(),f.integer(),f.minValue(0)))});function Ia(e){let t=e.replaceAll(`-`,`+`).replaceAll(`_`,`/`),n=Uint8Array.from(atob(t),e=>e.charCodeAt(0));return JSON.parse(new TextDecoder().decode(n))}function La(e){if(e.format===`eip712`){let t=f.safeParse(Fa,e.payload);return t.success?t.output:void 0}let t=e.signature.split(`.`)[1];try{let e=f.safeParse(Fa,Ia(t));return e.success?e.output:void 0}catch{return}}function Ra(e,t){return e.toLowerCase()===t.toLowerCase()}function za(e,t){return e.scheme===t.scheme&&e.network===t.network&&Ra(e.asset,t.asset)&&Ra(e.payTo,t.payTo)&&e.amount===t.amount}function Ba(e){return new TextEncoder().encode(JSON.stringify(e)).length<=Da}function Va(e,t){let n=f.safeParse(Na,e);if(n.success)for(let e of n.output[Ea].info.offers){let n=f.safeParse(ja,e);if(!n.success)continue;let r=La(n.output);if(r!==void 0&&za(r,t)&&Ba(n.output))return n.output}}function Ha(e){let t=f.safeParse(Pa,e);if(!t.success)return;let n=f.safeParse(Ma,t.output[Ea].info.receipt);if(!(!n.success||!Ba(n.output)))return n.output}const Ua=f.pipe(f.string(),f.regex(/\S/,`Response enum values must not be blank`));function Wa(e){return Ua}const Ga=f.object({amount:f.string(),asset_id:f.string()}),Ka=f.pipe(f.string(),f.isoTimestamp()),qa=f.object({success:f.literal(!0)}),Ja=f.object({id:f.string(),name:f.string(),status:f.string(),organizationId:f.string()}),Ya=f.object({agent:Ja}),Xa=[`per_transaction_amount`,`daily_amount`,`weekly_amount`,`monthly_amount`,`hourly_count`,`daily_count`],Za=f.object({id:f.string(),ruleType:Wa(Xa),thresholdAmount:f.optional(Ga),thresholdCount:f.optional(f.number()),action:Wa([`block`,`require_approval`]),requiredApprovals:f.number(),accountAggregationScope:Wa([`per_account`,`across_accounts`]),actorAggregationScope:Wa([`per_agent`,`per_policy`]),displayOrder:f.number()}),Qa=f.object({id:f.string(),organizationId:f.string(),policyId:f.string(),capability:Wa([`query_balance`,`read`,`send`,`transfer`]),accountId:f.string(),rules:f.array(Za),createdAt:Ka,updatedAt:Ka}),$a=[`allow`,`block`,`require_approval`],eo=[`open`,`restricted`],to=Wa($a),no=f.object({mode:Wa(eo),allowedCounterparties:f.optional(f.array(f.string())),createAction:f.optional(to),requestPaymentDetailsAction:f.optional(to),allowCreate:f.optional(f.boolean())}),ro=f.object({id:f.optional(f.string()),description:f.optional(f.string()),version:f.optional(f.number()),name:f.string(),capabilities:f.array(f.string()),counterpartyRules:f.optional(no),policyCapabilities:f.array(Qa),kind:f.optional(f.picklist([`base`,`override`])),expiresAt:f.optional(f.string())}),io=f.object({policy:ro}),ao=f.object({accounts:f.array(f.object({id:f.string(),name:f.string(),type:f.string(),currency:f.string()}))}),oo=f.object({accountId:f.string(),balance:Ga,balances:f.optional(f.object({total:Ga,available:Ga}))}),so=[`operator-send`,`operator-transfer`,`operator-deposit`,`operator-refund`,`microdeposit`],co=[`pending`,`processing`,`completed`,`failed`,`reversed`],lo=[`initiated`,`provider_pending`,`processing`,`completed`,`failed`,`reversed`,`manual_review`],uo=[`ach`,`wire`,`on-chain`],fo=f.object({id:f.string(),type:Wa(so),action:f.optional(f.string()),status:Wa(co),movementStatus:Wa(lo),direction:f.picklist([`incoming`,`outgoing`]),amount:Ga,fee:Ga,currency:f.string(),counterpartyName:f.optional(f.string()),method:f.optional(Wa([`ach`,`wire`,`on-chain`])),memo:f.optional(f.string()),description:f.optional(f.string()),txHash:f.optional(f.string()),createdAt:Ka,completedAt:f.optional(Ka)}),po=f.object({accountId:f.string(),transactions:f.array(fo),total:f.number()}),mo=f.object({accountId:f.string(),address:f.string(),liquidationAddressId:f.optional(f.string()),source:Wa([`wallet`,`liquidation`])}),ho=f.object({id:f.string(),name:f.string(),status:f.optional(f.string()),rails:f.array(f.object({id:f.string(),type:f.string(),walletAddress:f.optional(f.string()),network:f.optional(f.string()),bankName:f.optional(f.string()),accountNumber:f.optional(f.string())}))}),go=f.object({counterparties:f.array(ho)}),_o=f.picklist([`pending`,`processing`,`completed`,`blocked`,`failed`]),vo=f.object({type:f.literal(`submit_stamp`),signingRequestId:f.string(),signer:f.object({algorithm:f.literal(`p256`),publicKeyHex:f.string()}),preparedBody:f.object({body:f.string(),bodyHash:f.string(),expiresAt:Ka,prepareToken:f.string()})}),yo=f.object({id:f.string(),type:Wa([`send`,`transfer`,`create_counterparty`,`request_counterparty_details`,`x402`,`policy_override`]),status:_o,reasons:f.array(f.string()),expiresAt:f.optional(f.nullable(Ka),null),replayed:f.optional(f.boolean(),!1),data:f.optional(f.nullable(f.record(f.string(),f.unknown())),null),metadata:f.optional(f.object({dataUrl:f.nullable(f.string())})),nextAction:f.optional(vo)});function bo(e){let{nextAction:t,...n}=e;return n}const xo=f.object({paymentCredential:f.object({protocol:f.literal(`x402`),value:f.string()})}),So=f.object({x402:f.object({paymentSignature:f.string()})});function Co(e){let t=f.safeParse(xo,e);if(t.success)return t.output.paymentCredential.value;let n=f.safeParse(So,e);return n.success?n.output.x402.paymentSignature:void 0}const wo=f.picklist(uo),To=f.object({type:f.literal(`send`),accountId:f.string(),counterpartyRailId:f.string(),amount:f.string(),method:wo,memo:f.optional(f.string()),description:f.optional(f.string())}),Eo=f.object({type:f.literal(`transfer`),accountId:f.string(),toAccountId:f.string(),amount:f.string(),memo:f.optional(f.string()),description:f.optional(f.string())}),Do={type:f.literal(`create_counterparty`),name:f.string()},Oo=f.union([f.object({...Do,email:f.optional(f.string()),rail:f.nonOptional(f.unknown())}),f.object({...Do,email:f.string()})]),ko=f.object({type:f.literal(`request_counterparty_details`),counterpartyId:f.string(),methods:f.pipe(f.object({bank:f.boolean(),wallet:f.boolean()}),f.check(({bank:e,wallet:t})=>e||t,`Select at least one payment method to request`))}),Ao=f.looseObject({scheme:f.string(),network:f.string(),asset:f.string(),amount:f.string(),payTo:f.string(),maxTimeoutSeconds:f.number()}),jo=f.looseObject({url:f.string(),serviceName:f.fallback(f.optional(f.pipe(f.string(),f.maxLength(255))),void 0)}),Mo=f.pipe(f.string(),f.regex(/^0x[0-9a-fA-F]{40}$/,`Expected a 20-byte hex address`)),No=f.pipe(f.string(),f.maxLength(78),f.regex(/^(0|[1-9]\d*)$/,`Expected a canonical decimal integer string`)),Po=f.object({from:Mo,to:Mo,value:No,validAfter:No,validBefore:No,nonce:f.pipe(f.string(),f.regex(/^0x[0-9a-fA-F]{64}$/,`Expected a 32-byte hex nonce`))}),Fo=f.object({type:f.literal(`x402`),accountId:f.string(),paymentRequirements:Ao,resource:f.optional(jo),authorization:f.optional(Po),signedOffer:f.optional(ja)}),Io=[`send`,`transfer`],Lo=f.strictObject({type:f.literal(`increase_limit`),accountId:f.pipe(f.string(),f.minLength(1)),capability:f.picklist(Io),limitType:f.picklist([`per_transaction_amount`,`daily_amount`,`weekly_amount`,`monthly_amount`]),newLimit:f.strictObject({amount:f.pipe(f.string(),f.regex(/^\d+(\.\d{1,6})?$/),f.check(e=>Number(e)>0,`The amount must be greater than zero`)),assetId:f.literal(`USD`)})}),Ro=f.strictObject({type:f.literal(`increase_limit`),accountId:f.pipe(f.string(),f.minLength(1)),capability:f.picklist(Io),limitType:f.picklist([`hourly_count`,`daily_count`]),newLimit:f.strictObject({count:f.pipe(f.number(),f.integer(),f.minValue(1))})}),zo=f.pipe(f.array(f.union([Lo,Ro])),f.minLength(1),f.maxLength(10),f.check(e=>new Set(e.map(e=>`${e.accountId}|${e.capability}|${e.limitType}`)).size===e.length,`Each account, capability, and limit type may appear only once`)),Bo=f.object({type:f.literal(`policy_override`),operations:zo,durationSeconds:f.pipe(f.number(),f.integer(),f.minValue(60),f.maxValue(604800)),reason:f.pipe(f.string(),f.trim(),f.minLength(1),f.maxLength(280))}),Vo=f.union([To,Eo,Oo,ko,Fo,Bo]);function Ho(e){let t=f.parse(Vo,e);return t.type===`send`||t.type===`transfer`?{...t,amount:{amount:t.amount,asset_id:`USD`}}:t.type===`policy_override`?{...t,schemaVersion:1}:t}const Uo=f.object({intent:yo});var Wo=class extends Error{status;code;details;constructor(e,t,n,r){super(n?`API error ${e} [${n}]: ${t}`:`API error ${e}: ${t}`),this.name=`ApiError`,this.status=e,this.code=n,this.details=r}},Go=class extends Error{timeoutMs;constructor(e){super(`Request timed out after ${e}ms. The server may still have processed a state-changing request; follow that operation's documented recovery procedure before retrying.`),this.name=`TimeoutError`,this.timeoutMs=e}};const Ko=f.object({error:f.nullish(f.string()),message:f.nullish(f.string()),code:f.nullish(f.string()),details:f.nullish(f.record(f.string(),f.unknown()))});async function qo(e){let t=f.safeParse(Ko,await e.json().catch(()=>void 0)),n=t.success?t.output:{};return n.error!=null&&n.message!=null?new Wo(e.status,n.message,n.code??n.error,n.details??void 0):new Wo(e.status,n.error??n.message??e.statusText,n.code??void 0,n.details??void 0)}async function Jo(e,t){if(!e.ok)throw await qo(e);return f.parse(t,await e.json())}var Yo=class extends Error{intentId;outcome;constructor(e){let t=e.cause instanceof Error?e.cause.message:String(e.cause);super(e.outcome===`not-submitted`?`Intent ${e.intentId} was created but never submitted; no money moved: ${t}`:`Intent ${e.intentId} submission could not be confirmed: ${t}; poll getIntent("${e.intentId}") to a terminal status and resubmit only after blocked or failed`,{cause:e.cause}),this.name=`IntentSubmitError`,this.intentId=e.intentId,this.outcome=e.outcome}};const Xo=2147483647;var Zo=class{#e;#t;#n;#r;#i;#a;#o;constructor(e){let t=e.timeout===void 0?8e4:e.timeout;if(!Number.isInteger(t)||t<=0||t>Xo)throw TypeError(`timeout must be a positive integer no greater than ${Xo}`);this.#e=e.baseUrl??`https://api.catena.com`,this.#t=Ta(e.appInfo),this.#n=e.defaultHeaders??{},this.#r=aa(e.privateKeyHex),this.#a=(e.fetch??globalThis.fetch).bind(globalThis),this.#o=t,this.#i=fa({keypair:this.#r,baseUrl:this.#e,identityUrl:e.identityUrl})}#s(e){let t=new Headers({"Content-Type":`application/json`});for(let[e,n]of Object.entries(this.#n))t.set(e,n);for(let[n,r]of Object.entries(e??{}))t.set(n,r);return t.set(`User-Agent`,this.#t),t.delete(`Authorization`),t}async#c(e){let t=new URL(`${this.#e}/v1/agent-api${e.path}`);for(let[n,r]of Object.entries(e.query??{}))r!==void 0&&t.searchParams.set(n,r);let n=new Request(t,{method:e.method,headers:this.#s(e.headers),body:e.body===void 0?null:JSON.stringify(e.body)});return this.#i.sign(n)}async#l(e,t){return this.#u(await this.#c(e),t)}async#u(e,t){let n=new AbortController,r=new Request(e,{signal:n.signal}),i;try{let e=new Promise((e,t)=>{i=setTimeout(()=>{let e=new Go(this.#o);t(e),n.abort(e)},this.#o)}),a=this.#a(r).then(e=>Jo(e,t));return await Promise.race([a,e])}finally{i!==void 0&&clearTimeout(i)}}async whoami(){return(await this.#l({method:`GET`,path:`/me`},Ya)).agent}async submitFeedback(e){await this.#l({method:`POST`,path:`/feedback`,body:{body:e}},qa)}async getPolicy(){return(await this.#l({method:`GET`,path:`/policy`},io)).policy}async listAccounts(){return this.#l({method:`GET`,path:`/accounts`},ao)}async getAccountBalance(e){return this.#l({method:`GET`,path:`/accounts/${encodeURIComponent(e)}/balance`},oo)}async listAccountTransactions(e,t={}){return this.#l({method:`GET`,path:`/accounts/${encodeURIComponent(e)}/transactions`,query:{start:t.start,end:t.end,limit:t.limit?.toString(),offset:t.offset?.toString()}},po)}async getAccountDepositAddress(e,t){return this.#l({method:`GET`,path:`/accounts/${encodeURIComponent(e)}/deposit-address`,query:{network:t.network,asset:t.asset}},mo)}async listCounterparties(e={}){return this.#l({method:`GET`,path:`/counterparties`,query:{address:e.address,network:e.network}},go)}async submitIntent(e){let t=await this.#d({...e,idempotencyKey:e.idempotencyKey??crypto.randomUUID()}),n=t.nextAction;if(!n)return bo(t);let r;try{let e=await this.#f(n);r=await this.#c({method:`POST`,path:`/intents/${encodeURIComponent(t.id)}/submit-stamp`,body:{preparedBody:n.preparedBody,stamp:e}})}catch(e){throw new Yo({intentId:t.id,outcome:`not-submitted`,cause:e})}try{return await this.#p(r,t.replayed)}catch(e){throw new Yo({intentId:t.id,outcome:`unknown`,cause:e})}}async#d(e){return this.#l({method:`POST`,path:`/intents`,body:{action:Ho(e.action)},headers:{"Idempotency-Key":e.idempotencyKey}},yo)}async#f(e){if(e.signer.publicKeyHex.toLowerCase()!==this.#r.publicKeyHex.toLowerCase())throw Error(`Local signer public key does not match requested signer ${e.signer.publicKeyHex}; linked credential has ${this.#r.publicKeyHex}`);let t=await new ta({apiPublicKey:this.#r.publicKeyHex,apiPrivateKey:this.#r.privateKeyHex}).stamp(e.preparedBody.body);return{publicKeyHex:this.#r.publicKeyHex,stampHeaderName:t.stampHeaderName,stampHeaderValue:t.stampHeaderValue}}async#p(e,t){let n=bo((await this.#u(e,Uo)).intent);return t?{...n,replayed:!0}:n}async getIntent(e){return bo(await this.#l({method:`GET`,path:`/intents/${encodeURIComponent(e)}`},yo))}async unlinkAgent(){await this.#l({method:`POST`,path:`/unlink`},qa)}async reportSettlement(e){await this.#l({method:`POST`,path:`/intents/${encodeURIComponent(e.intentId)}/settlement-report`,body:{txHash:e.txHash,...e.receipt!==void 0&&{receipt:e.receipt}}},qa)}};function Qo(e={}){let t=e.privateKeyHex===void 0?process.env.CATENA_SECRET_KEY:e.privateKeyHex;if(t===void 0)throw new na(`privateKeyHex is required; pass it explicitly or set CATENA_SECRET_KEY`);return new Zo({...e,privateKeyHex:t})}function $o(e){let t=e instanceof Error?e.message:String(e);return e instanceof Wo&&e.details!==void 0?`${t}\nDetails:\n${JSON.stringify(e.details,null,2)}`:t}function X(e){console.error($o(e)),process.exit(1)}const es=f.string(),ts=f.boolean();function ns(e){return e===void 0}function rs(e){return e.issues?.[0]?.message??`Invalid value`}function is(e,t,n,r){return X(`${e}: ${t}${r?` (got: ${String(n)})`:``}`)}function as(e,t,n,r){let i=f.safeParse(e,t);return i.success?i.output:is(n,rs(i),t,r)}function os(e,t){let n=t.schema??es;return{type:e,description:t.description,negativeDescription:t.negativeDescription,required:t.required,default:t.default,parseValue(e,r){let i=ns(e)?t.default:e;if(ns(i)){t.required===!0&&X(`${r} is required`);return}return as(n,i,r,t.showValueInError===!0)}}}function Z(e){return os(`string`,e)}function ss(e){return os(`positional`,e)}function cs(e){let t=e.schema??es;return{type:`string`,description:e.description,repeatable:!0,parseValue(n,r){return(Array.isArray(n)?n:[]).map(n=>as(t,n,r,e.showValueInError===!0))}}}function ls(e){return{type:`boolean`,description:e.description,negativeDescription:e.negativeDescription,required:e.required,default:e.default,parseValue(t,n){let r=ns(t)?e.default:t;if(ns(r)){e.required===!0&&X(`${n} is required`);return}return as(ts,r,n,!1)}}}function us(e){return ds(`string`,e)}function ds(e,t){return os(e,{description:t.description,required:t.required,default:t.default,schema:f.picklist(t.choices,`must be one of ${t.choices.join(`|`)}`),showValueInError:!0})}function fs(e,t){return t.type===`positional`?`<${e}>`:`--${e}`}function ps(e){return e.replace(/([a-z])([A-Z])/g,`$1 $2`).replace(/([A-Z0-9])([A-Z][a-z])/g,`$1 $2`).split(/[ _-]/).filter(e=>e.length>0)}function ms(e){return ps(e).join(`-`).toLowerCase()}function hs(e){return ps(e).map((e,t)=>t===0?e.charAt(0).toLowerCase()+e.slice(1):e.charAt(0).toUpperCase()+e.slice(1)).join(``)}function gs(e){return[`--${e}`,`--${ms(e)}`,`--${hs(e)}`]}function _s(e){let t=e.indexOf(`=`);return t===-1?[e,void 0]:[e.slice(0,t),e.slice(t+1)]}function vs(e,t,n){let r=e.indexOf(`--`),i=r===-1?e.length:r,a=[...e.slice(0,i).filter(e=>!e.startsWith(`--no-`)),...e.slice(i)],o=new Set(gs(t)),s=new Set(Object.entries(n).filter(([e,n])=>e!==t&&n.type===`string`).flatMap(([e])=>gs(e))),c=[];for(let e=0;e<a.length;e++){let t=a[e];if(t===`--`)break;let[n,r]=_s(t);if(o.has(n)){r===void 0?(c.push(a[e+1]??``),e++):c.push(r);continue}s.has(n)&&r===void 0&&e++}return c}function ys(e){let t=e.required??(e.type!==`positional`&&void 0);return e.type===`boolean`?{type:e.type,description:e.description,negativeDescription:e.negativeDescription,required:t,default:typeof e.default==`boolean`?e.default:void 0}:{type:e.type,description:e.description,required:t,default:typeof e.default==`string`?e.default:void 0}}function Q(e){return{args:Object.fromEntries(Object.entries(e).map(([e,t])=>[e,ys(t)])),label(t){return fs(t,e[t])},parse(t,n){let r=(r,i)=>{if(i.repeatable!==!0)return t[r];if(n===void 0)throw Error(`parse() needs the command's raw argv to collect the repeatable --${r} flag`);return vs(n,r,e)};return Object.fromEntries(Object.entries(e).map(([e,t])=>[e,t.parseValue(r(e,t),fs(e,t))]))}}}const bs=Z({description:`Credential profile name`}),xs=ls({description:`Print compact single-line JSON (for piping)`,default:!1}),Ss=/^[a-zA-Z0-9_-]+$/,Cs=f.pipe(f.string(`ID must be a string`),f.minLength(1,`ID must not be empty`),f.maxLength(256,`ID is too long (max 256 characters)`),f.regex(Ss,`ID may only contain letters, digits, hyphens, and underscores`)),ws=[`base`,`base-sepolia`],Ts=[`usdc`],Es=`base`,Ds=f.pipe(f.string(),f.trim(),f.guard(e=>/^0x[0-9a-fA-F]{40}$/.test(e),`Must be a 0x-prefixed hex wallet address`));function Os(e){return us({description:e.description,choices:ws,...e.default===void 0?{}:{default:e.default}})}const ks=[`registered`,`already_registered`,`not_applicable`,`registration_failed`],As=f.pipe(f.string(),f.regex(/^0[23][0-9a-f]{64}$/)),js=f.pipe(f.string(),f.regex(/^[0-9a-f]{64}$/)),Ms=f.object({status:f.picklist(ks),publicKeyHex:f.optional(As),reason:f.optional(f.string())}),Ns=f.object({algorithm:f.literal(`p256`),privateKeyHex:js,publicKeyHex:As,registration:Ms}),Ps=f.object({version:f.literal(`signer-1`),signer:Ns}),Fs=f.object({version:f.literal(1),refreshToken:f.pipe(f.string(),f.minLength(1)),sessionToken:f.pipe(f.string(),f.minLength(1)),expiresAt:f.pipe(f.string(),f.isoTimestamp())}),Is=f.object({version:f.literal(2),refreshToken:f.pipe(f.string(),f.minLength(1)),sessionToken:f.pipe(f.string(),f.minLength(1)),expiresAt:f.pipe(f.string(),f.isoTimestamp()),signer:Ns}),Ls=f.object({version:f.literal(3),signer:Ns}),Rs=f.variant(`version`,[Fs,Is,Ls]),zs=f.variant(`version`,[Ps,Fs,Is,Ls]);function Bs(e){return f.parse(Rs,e)}function Vs(e){return f.parse(zs,e)}function Hs(e){let t=f.safeParse(zs,e);return t.success?t.output:null}function Us(e){return{version:`signer-1`,signer:{algorithm:e.algorithm,privateKeyHex:e.privateKeyHex,publicKeyHex:e.publicKeyHex,registration:{status:`not_applicable`,reason:`pending_claim`}}}}function Ws(e,t){try{return Vs(JSON.parse(e))}catch(e){throw Error(`${t} credential has an unsupported format`,{cause:e})}}function Gs(e){return Bs({version:3,signer:e})}function Ks(e){return JSON.stringify(e)}function qs(e,t){return JSON.stringify(e)===JSON.stringify(t)}function Js(e){return(t,n)=>Ys(e,t,n)}function Ys(e,t,n){return new Promise((r,i)=>{let a=b(e,[...t],{stdio:[`pipe`,`pipe`,`pipe`]}),o=[],s=[],c=!1,l=!1,u=null,d=null,f=null,p=e=>{c||(c=!0,d!==null&&clearTimeout(d),f!==null&&clearTimeout(f),r(e))},m=e=>{c||(c=!0,d!==null&&clearTimeout(d),f!==null&&clearTimeout(f),i(e))};d=setTimeout(()=>{l=!0,a.kill(`SIGTERM`),f=setTimeout(()=>{a.kill(`SIGKILL`),p({stdout:o.join(``),stderr:s.join(``),status:124})},1e3)},3e4),a.stdout.setEncoding(`utf8`),a.stderr.setEncoding(`utf8`),a.stdout.on(`data`,e=>o.push(e)),a.stderr.on(`data`,e=>s.push(e)),a.on(`error`,t=>{m(Error(`Unable to run ${e}: ${t.message}`))}),a.on(`close`,t=>{if(u!==null&&t===0){m(Error(`Unable to write to ${e} stdin: ${u.message}`));return}p({stdout:o.join(``),stderr:s.join(``),status:l?124:t})}),a.stdin.on(`error`,e=>{u=e});try{a.stdin.end(n)}catch(t){m(t instanceof Error?Error(`Unable to write to ${e} stdin: ${t.message}`):Error(`Unable to write to ${e} stdin`))}})}const Xs=`catena-agent`;function Zs(e){if(!Ss.test(e))throw Error(`Invalid credential location for credential storage: "${e}"`);return e}const Qs=Js(`/usr/bin/secret-tool`);function $s(e){return e.status===1&&e.stdout===``&&e.stderr.trim()===``}function ec(e,t){if(t.status===0)return;let n=tc(t);throw Error(`Linux Secret Service credential ${e} failed (secret-tool exited ${t.status??`without status`}): ${n}`)}function tc(e){let t=e.stderr.toLowerCase();return e.status===124?`secret service operation timed out`:t.includes(`cannot autolaunch`)||t.includes(`dbus`)||t.includes(`d-bus`)||t.includes(`org.freedesktop.secrets`)?`secret service session is unavailable`:/\blocked\b/.test(t)?`secret service keyring appears to be locked`:t.includes(`authorization`)||t.includes(`denied`)||t.includes(`not authorized`)?`secret service authorization was denied`:`secret service operation failed; ensure the Secret Service session is available and unlocked`}function nc(e){return e instanceof Error?e.message.includes(`ENOENT`)?Error(`Linux Secret Service credential operation failed: /usr/bin/secret-tool was not found. Install libsecret-tools and ensure a Secret Service keyring is available.`,{cause:e}):e:Error(String(e))}var rc=class{runSecretTool;constructor(e={}){if((e.platform??process.platform)!==`linux`)throw Error(`Linux Secret Service credential storage is only supported on Linux`);this.runSecretTool=e.runSecretTool??Qs}async save(e,t){let n=Vs(t),r=Zs(e);if(await this.savePassword(r,Ks(n)),!qs(await this.resolveDirectPassword(r),n))throw Error(`Linux Secret Service credential save verification failed`)}async resolve(e){return this.resolveDirectPassword(Zs(e))}async delete(e){await this.deletePassword(Zs(e))}async savePassword(e,t){ec(`save`,await this.runSecretToolCommand([`store`,`--label`,`${Xs} ${e}`,`app`,Xs,`account`,e],t))}async resolvePassword(e){let t=await this.runSecretToolCommand([`lookup`,`app`,Xs,`account`,e]);return $s(t)?null:(ec(`resolve`,t),t.stdout.replace(/\r?\n$/,``))}async resolveDirectPassword(e){let t=await this.resolvePassword(e);return t===null?null:Ws(t,`Linux Secret Service`)}async deletePassword(e){let t=await this.runSecretToolCommand([`clear`,`app`,Xs,`account`,e]);$s(t)||ec(`delete`,t)}async runSecretToolCommand(e,t){try{return await this.runSecretTool(e,t)}catch(e){throw nc(e)}}};const ic=Js(`/usr/bin/security`),ac=f.object({version:f.literal(1),encoding:f.literal(`base64-json`),chunks:f.pipe(f.number(),f.integer(),f.minValue(1),f.maxValue(64)),sha256:f.pipe(f.string(),f.regex(/^[a-f0-9]{64}$/))});function oc(e){return e.status===44}function sc(e,t){return`${e}:chunk:${t}`}function cc(e){let t=JSON.parse(e),n=Hs(t);if(n!==null)return{kind:`direct`,payload:n};let r=f.safeParse(ac,t);if(r.success)return{kind:`legacy`,manifest:r.output};throw Error(`macOS Keychain credential has an unsupported format`)}function lc(e,t){if(t.status===0)return;let n=uc(t);throw Error(`macOS Keychain credential ${e} failed (security exited ${t.status??`without status`})${n===null?``:`: ${n}`}`)}function uc(e){let t=e.stderr.toLowerCase();return e.status===124?`keychain operation timed out`:t.includes(`stdin isn't a terminal`)?`parent process has no terminal`:t.includes(`user interaction is not allowed`)?`keychain user interaction is not allowed`:t.includes(`authorization`)||t.includes(`denied`)?`keychain authorization was denied`:t.includes(`locked`)?`keychain appears to be locked`:null}function dc(e){for(let t=0;t<e.length;t++){let n=e.charCodeAt(t);if(n<32||n===127)throw Error(`macOS Keychain credential values cannot contain control characters`)}return`"${e.replace(/\\/g,`\\\\`).replace(/"/g,`\\"`)}"`}function fc(e,t){return[`add-generic-password`,`-s`,dc(Xs),`-a`,dc(e),`-w`,dc(t),`-U`].join(` `)+`
137
- `}var pc=class{runSecurity;constructor(e={}){if((e.platform??process.platform)!==`darwin`)throw Error(`macOS Keychain credential storage is only supported on macOS`);this.runSecurity=e.runSecurity??ic}async save(e,t){let n=Vs(t),r=Zs(e),i=await this.resolveLegacyChunkCount(r,64);if(await this.savePassword(r,Ks(n)),!qs(await this.resolveDirectPassword(r),n))throw Error(`macOS Keychain credential save verification failed`);await this.deleteChunks(r,i)}async resolve(e){let t=Zs(e),n=await this.resolveKeychainItem(t);return n===null?null:n.kind===`direct`?n.payload:this.resolveLegacyPayload(t,n.manifest)}async delete(e){let t=Zs(e),n=await this.resolveLegacyChunkCount(t,64);await this.deleteChunks(t,n),await this.deletePassword(t)}async savePassword(e,t){lc(`save`,await this.runSecurity([`-i`],fc(e,t)))}async resolvePassword(e){let t=await this.runSecurity([`find-generic-password`,`-a`,e,`-s`,Xs,`-w`]);return oc(t)?null:(lc(`resolve`,t),t.stdout.replace(/\r?\n$/,``))}async resolveKeychainItem(e){let t=await this.resolvePassword(e);return t===null?null:cc(t)}async resolveDirectPassword(e){let t=await this.resolveKeychainItem(e);if(t===null)return null;if(t.kind!==`direct`)throw Error(`macOS Keychain credential direct verification failed`);return t.payload}async resolveLegacyPayload(e,t){let n=[];for(let r=0;r<t.chunks;r++){let t=await this.resolvePassword(sc(e,r));if(t===null)throw Error(`macOS Keychain credential chunk is missing`);n.push(t)}let r=n.join(``);if(h(`sha256`).update(r).digest(`hex`)!==t.sha256)throw Error(`macOS Keychain credential checksum mismatch`);return Vs(JSON.parse(Buffer.from(r,`base64`).toString(`utf8`)))}async resolveLegacyChunkCount(e,t){let n=await this.resolvePassword(e);if(n===null)return 0;try{let e=cc(n);return e.kind===`legacy`?e.manifest.chunks:0}catch{return t}}async deleteChunks(e,t){for(let n=0;n<t;n++)await this.deletePassword(sc(e,n))}async deletePassword(e){let t=await this.runSecurity([`delete-generic-password`,`-a`,e,`-s`,Xs]);oc(t)||lc(`delete`,t)}};function mc(e={}){let t=e.platform??process.platform;if(t===`darwin`)return new pc({platform:t});if(t===`linux`)return new rc({platform:t});throw Error(`Catena credential storage is only supported on macOS and Linux`)}const hc=/^127(?:\.(?:25[0-5]|2[0-4]\d|1?\d?\d)){3}$/;function gc(e){let t=e.replace(/^\[|\]$/g,``);return t===`localhost`||t===`::1`||hc.test(t)}function _c(e){let t;try{t=new URL(e)}catch{return!1}return t.protocol===`https:`||t.protocol===`http:`&&gc(t.hostname)}function vc(e,t){if(!_c(e))throw Error(`${t} must be an https:// URL (http:// is allowed only for a loopback host): "${e}"`)}const yc=/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$/,bc=f.object({status:f.optional(f.literal(`linked`),`linked`),bank_url:f.pipe(f.string(),f.minLength(1)),agent_id:f.pipe(f.string(),f.minLength(1)),client_instance_id:f.pipe(f.string(),f.regex(Ss))}),xc=f.object({status:f.literal(`pending_connection`),bank_url:f.pipe(f.string(),f.minLength(1)),client_instance_id:f.pipe(f.string(),f.regex(Ss)),created_at:f.pipe(f.string(),f.isoTimestamp())}),Sc=f.variant(`status`,[bc,xc]);f.object({version:f.literal(1),default_profile:f.optional(f.string()),profiles:f.record(f.string(),Sc),directories:f.optional(f.record(f.string(),f.string()))});const Cc=f.object({version:f.literal(1),default_profile:f.optional(f.string()),profiles:f.record(f.string(),f.unknown()),directories:f.optional(f.record(f.string(),f.unknown()))});function wc(){return ne(process.env.HOME??j(),`.catena`)}function Tc(){return ne(wc(),`profiles.json`)}function Ec(e){return yc.test(e)}function Dc(e){if(!Ec(e))throw Error(`invalid profile name "${e}" (expected [a-zA-Z0-9][a-zA-Z0-9._-]{0,63})`)}function Oc(e){return typeof e!=`object`||!e||!(`code`in e)?!1:typeof e.code==`string`}function kc(e,t){let n;try{n=JSON.parse(e)}catch(e){throw Error(`profiles.json is not valid JSON: ${$o(e)}`,{cause:e})}if(typeof n==`object`&&n&&`version`in n){let e=n;if(e.version!==1)throw Error(`profiles.json version ${String(e.version)} is not supported (expected 1)`)}let r=f.parse(Cc,n),i={};for(let[e,n]of Object.entries(r.profiles)){if(!Ec(e)){t?.(`profiles: dropping invalid profile name "${e}"`);continue}let r=f.safeParse(Sc,n);if(!r.success){t?.(`profiles: dropping malformed profile "${e}"`);continue}i[e]=r.output}if(r.default_profile!==void 0&&(Dc(r.default_profile),!Object.hasOwn(i,r.default_profile)))throw Error(`profiles.json default_profile "${r.default_profile}" is not linked`);let a={};for(let[e,n]of Object.entries(r.directories??{})){if(!te(e)){t?.(`profiles: dropping directory binding with relative path "${e}"`);continue}if(typeof n!=`string`||!Ec(n)){t?.(`profiles: dropping malformed directory binding "${e}"`);continue}a[e]=n}return{version:1,...r.default_profile===void 0?{}:{default_profile:r.default_profile},profiles:i,...Object.keys(a).length===0?{}:{directories:a}}}function Ac(e){try{return kc(ee(Tc(),`utf-8`),e)}catch(e){if(e instanceof Error&&Oc(e)&&e.code===`ENOENT`)return{version:1,profiles:{}};throw e}}function jc(){T(wc(),{recursive:!0,mode:448}),S(wc(),448)}function Mc(e){jc();let t=Tc(),n=`${t}.${_(6).toString(`hex`)}.tmp`;A(n,JSON.stringify(e,null,2)+`
138
- `,{encoding:`utf-8`,mode:384}),D(n,t)}function Nc(e,t){Dc(e);let n=f.parse(Sc,t);vc(n.bank_url,`profile "${e}" bank_url`);let r=Ac();Mc({...r,profiles:{...r.profiles,[e]:n}})}function Pc(e){return e.status===`linked`}function Fc(e,t){return e.replace(/\/+$/,``)===t.replace(/\/+$/,``)}function Ic(e,t){let n=Object.entries(Ac().profiles).toSorted(([e],[t])=>e.localeCompare(t)).find(([,n])=>Pc(n)&&n.agent_id===e&&Fc(n.bank_url,t));return n===void 0?null:n[0]}function Lc(e,t){let n=Object.fromEntries(Object.entries(e??{}).filter(([,e])=>t(e)));return Object.keys(n).length===0?{}:{directories:n}}function Rc(e){Dc(e);let t=Ac(),{[e]:n,...r}=t.profiles;Mc({version:1,...t.default_profile===e||t.default_profile===void 0?{}:{default_profile:t.default_profile},profiles:r,...Lc(t.directories,t=>t!==e)})}function zc(e){try{return E(re(e))}catch{return re(e)}}function Bc(e){return Ac().directories?.[zc(e)]??null}function Vc(e,t){Dc(t);let n=Ac();if(!Object.hasOwn(n.profiles,t))throw Error(`Profile "${t}" is not linked. Run catena link --profile ${t} <agent-id>.`);let r=zc(e);return Mc({...n,directories:{...n.directories,[r]:t}}),r}function Hc(e){let t=Ac(),n=zc(e);if(t.directories===void 0||!Object.hasOwn(t.directories,n))return{directory:n,removed:!1};let{[n]:r,...i}=t.directories,{directories:a,...o}=t;return Mc({...o,...Object.keys(i).length===0?{}:{directories:i}}),{directory:n,removed:!0}}function Uc(e){return Dc(e),Ac().profiles[e]??null}function Wc(){return`client_${_(16).toString(`hex`)}`}function Gc(e,t){let n=Uc(e);return t.agent_id===void 0?Kc(e,t.bank_url,n):qc(e,t.bank_url,t.agent_id,n)}function Kc(e,t,n){if(n?.status===`linked`)throw Error(`Profile "${e}" is already linked. Choose a different profile name to start agent connection.`);let r=(n?.status===`pending_connection`&&Fc(n.bank_url,t)?n.client_instance_id:null)??Wc();return Nc(e,{status:`pending_connection`,bank_url:t,client_instance_id:r,created_at:n?.status===`pending_connection`?n.created_at:new Date().toISOString()}),r}function qc(e,t,n,r){if(r?.status===`linked`){if(r.agent_id!==n)throw Error(`Profile "${e}" is already linked to a different agent (${r.agent_id}). Link ${n} under a different --profile, or run 'catena unlink --profile ${e}' first to repoint it (add --force if that agent's credential is missing or revoked).`);if(!Fc(r.bank_url,t))throw Error(`Profile "${e}" is already linked to this agent on a different bank (${r.bank_url}). Link under a different --profile, or run 'catena unlink --profile ${e}' first (add --force if that credential is missing or revoked).`);return r.client_instance_id}let i=(r?.status===`pending_connection`&&Fc(r.bank_url,t)?r.client_instance_id:null)??Wc();return Nc(e,{status:`linked`,bank_url:t,agent_id:n,client_instance_id:i}),i}function Jc(e){Dc(e);let t=Ac();if(!Object.hasOwn(t.profiles,e))throw Error(`Profile "${e}" is not linked. Run catena link --profile ${e} <agent-id>.`);Mc({...t,default_profile:e})}function Yc(e){let t=e.toLowerCase().replace(/[^a-z0-9._-]+/g,`-`).replace(/^[^a-z0-9]+/,``).slice(0,64);return Ec(t)?t:`agent`}function Xc(e,t){if(!t(e))return e;for(let n=2;;n++){let r=`${e.slice(0,64-String(n).length-1)}-${n}`;if(!t(r))return r}}function Zc(e){Dc(e.reservationName),Dc(e.profileName);let t=f.parse(Sc,e.profile);vc(t.bank_url,`profile "${e.profileName}" bank_url`);let n=Ac(),{[e.reservationName]:r,...i}=n.profiles;if(!Object.hasOwn(n.profiles,e.reservationName)||r.client_instance_id!==t.client_instance_id)throw Error(`Link reservation "${e.reservationName}" changed during setup (a concurrent link from this directory?). Re-run 'catena link'.`);if(e.profileName!==e.reservationName&&Object.hasOwn(i,e.profileName))throw Error(`Profile "${e.profileName}" already exists; cannot finalize link under that name.`);let a=Object.fromEntries(Object.entries(n.directories??{}).map(([t,n])=>[t,n===e.reservationName?e.profileName:n]));Mc({version:1,...n.default_profile===void 0?{}:{default_profile:n.default_profile===e.reservationName?e.profileName:n.default_profile},profiles:{...i,[e.profileName]:t},...Object.keys(a).length===0?{}:{directories:a}})}function Qc(e){return e??mc()}async function $c(e,t){let n;try{n=Uc(e.profileName)}catch(t){return{ok:!1,profileName:e.profileName,bankUrl:e.fallbackBankUrl,message:$o(t)}}if(n===null)return{ok:!1,profileName:e.profileName,bankUrl:e.fallbackBankUrl,message:`Profile "${e.profileName}" is not linked. Run 'catena link --profile ${e.profileName}' to authenticate.`};try{vc(n.bank_url,`profile "${e.profileName}" bank_url`)}catch(t){return{ok:!1,profileName:e.profileName,bankUrl:e.fallbackBankUrl,message:$o(t)}}if(n.status===`pending_connection`)return{ok:!1,profileName:e.profileName,bankUrl:n.bank_url,message:`Profile "${e.profileName}" is waiting for agent connection approval. Run 'catena link --profile ${e.profileName}' to finish setup.`};let r;try{r=await Qc(t).resolve(n.client_instance_id)}catch(t){return{ok:!1,profileName:e.profileName,bankUrl:n.bank_url,message:`Profile "${e.profileName}" credential unavailable for ${n.agent_id}: ${$o(t)}. Run 'catena link --profile ${e.profileName} ${n.agent_id}' to authenticate.`}}return r===null||r.version===`signer-1`?{ok:!1,profileName:e.profileName,bankUrl:n.bank_url,message:`Profile "${e.profileName}" credential unavailable for ${n.agent_id}. Run 'catena link --profile ${e.profileName} ${n.agent_id}' to authenticate.`}:r.version===1?{ok:!1,profileName:e.profileName,bankUrl:n.bank_url,message:`Profile "${e.profileName}" credential for ${n.agent_id} has no signing key. Run 'catena link --profile ${e.profileName} ${n.agent_id}' to authenticate.`}:{ok:!0,profileName:e.profileName,bankUrl:n.bank_url,agentId:n.agent_id,clientInstanceId:n.client_instance_id,signer:r.signer}}const el={name:`catena-cli`,version:se},tl=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;function nl(e,t){if(!tl.test(e))throw Error(`${t} must be a valid HTTP token`)}function rl(e,t){let n=!1;for(let t=0;t<e.length;t+=1){let r=e.charCodeAt(t);if(r<32||r===127||r>255){n=!0;break}}if(n||/[()\\]/.test(e))throw Error(`${t} must not contain parentheses, backslashes, control characters, or characters outside Latin-1`)}function il(e){nl(e.name,`appInfo.name`),e.version!==void 0&&nl(e.version,`appInfo.version`),e.url!==void 0&&rl(e.url,`appInfo.url`);let t=e.version===void 0?e.name:`${e.name}/${e.version}`;return{"User-Agent":e.url===void 0?t:`${t} (${e.url})`}}const al=`https://api.catena.com`,ol=`CATENA_PROFILE`;function sl(e,t,n,r){if(e.directories===void 0)return null;let i;try{i=E(t)}catch{return null}let a=Object.entries(e.directories).map(([e,t])=>[e.replace(/\/+$/,``)||`/`,t]).filter(([e])=>i===e||i.startsWith(e===`/`?`/`:`${e}/`)).toSorted(([e],[t])=>t.length-e.length),o=null;for(let[t,n]of a){if(Object.hasOwn(e.profiles,n))return n;o??=`${t} -> "${n}"`}if(o===null)return null;if(n===`error`)throw Error(`This directory is bound to a profile that no longer exists (${o}). Run 'catena profiles unbind' here, bind it with 'catena profiles bind <name>', or run 'catena link' to re-establish it.`);return r?.(`profiles: ignoring stale directory binding ${o}`),null}function cl(e,t,n){if(e.flag!==void 0&&e.flag.length>0)return Dc(e.flag),{name:e.flag,source:`flag`};if(e.env!==void 0&&e.env.length>0){if(!Ec(e.env))throw Error(`${ol} is set to an invalid profile name "${e.env}"`);return{name:e.env,source:`env`}}if(e.cwd!==void 0){let r=sl(t,e.cwd,n,e.log);if(r!==null)return{name:r,source:`directory`}}return t.default_profile===void 0?null:{name:t.default_profile,source:`default`}}function ll(e){return cl(e,Ac(e.log),`ignore`)}function ul(e){let t=Ac(e.log),n=cl(e,t,`error`);if(n!==null)return n;let r=Object.keys(t.profiles),i=Object.entries(t.profiles).filter(([,e])=>Pc(e)).map(([e])=>e);if(i.length===1){let[e]=i;return{name:e,source:`single`}}if(i.length===0){if(r.length===1){let[e]=r;return{name:e,source:`single`}}return r.length>1&&e.log?.(`profiles: ignoring ${r.length} pending profiles (${r.toSorted().join(`, `)}); none is linked`),{name:`default`,source:`fallback`}}throw Error(`Multiple profiles exist and none is selected (${i.toSorted().join(`, `)}). Pass --profile <name>, set ${ol}, run 'catena profiles use <name>', or run 'catena link' from an agent directory to bind it.`)}function dl(e){return Qo({baseUrl:e.bankUrl,privateKeyHex:e.signer.privateKeyHex,appInfo:el})}function fl(){return mc()}async function pl(e){let t;try{t=ul({flag:e,env:process.env[ol],cwd:process.cwd(),log:e=>console.error(e)}).name}catch(e){return X(e)}let n=await $c({profileName:t,fallbackBankUrl:al},void 0);return n.ok||X(n.message),dl(n)}const ml=new Set([`unknown_key`,`key_revoked`,`client_unlinked`]),hl=new Set([`signature_auth_disabled`,`missing_auth`]);function gl(e,t){if(!(e instanceof Wo)||e.code===void 0)return e;let n=t===void 0?`catena link`:`catena link --profile ${t}`;return ml.has(e.code)?Error(`This machine's signing key was rejected by the bank (${e.code}). Run '${n}' to re-authenticate.`):e.code===`client_upgrade_required`?Error(`This CLI version (${el.version}) is no longer supported by the bank. Run 'npm i -g @catena/cli' and retry.`):hl.has(e.code)?Error(`This bank does not support key-based authentication (${e.code}). Upgrade the bank, or use an older CLI release that authenticates with session tokens.`):e.code===`invalid_signature`&&e.message.includes(`created_out_of_window`)?Error(`The bank rejected this request's timestamp (created_out_of_window). Check this machine's system clock and retry.`):e}function _l(e,t){console.log(t?.compact?JSON.stringify(e):JSON.stringify(e,null,2))}function vl(e){return e.profile===void 0||e.profile.length===0?void 0:e.profile}async function yl(e,t){try{return await t(await pl(e))}catch(t){return X(gl(t,e))}}function bl(e,t){return async(n,r)=>{let i=await yl(e,n);return _l(i,t),await new Promise(e=>{process.stdout.write(``,()=>e())}),process.exit(r?.exitCode?r.exitCode(i):0)}}function $(e){return bl(vl(e),{compact:e.json===!0})}const xl=f.pipe(f.string(),f.regex(/^\d+$/,`must be a non-negative integer`),f.transform(Number),f.maxValue(2**53-1,`must be at most ${2**53-1}`)),Sl=f.pipe(xl,f.maxValue(200,`must be at most 200`)),Cl={profile:bs,json:xs},wl=Q(Cl),Tl=Q({account:ss({description:`Account id`,required:!0,schema:Cs}),...Cl}),El=Q({account:ss({description:`Account id`,required:!0,schema:Cs}),start:Z({description:`Only include transactions at or after this ISO 8601 time`}),end:Z({description:`Only include transactions at or before this ISO 8601 time`}),limit:Z({description:`Maximum transactions to return (default 50, max 200)`,schema:Sl}),offset:Z({description:`Number of transactions to skip for pagination`,schema:xl}),...Cl}),Dl=Q({account:ss({description:`Account id`,required:!0,schema:Cs}),network:Os({description:`Deposit network; defaults to ${Es}. Availability depends on the connected environment.`,default:Es}),asset:us({description:`Deposit asset (${Ts.join(`|`)})`,choices:Ts,default:`usdc`}),...Cl}),Ol=l({meta:{name:`list`,description:`List accounts accessible under the agent's policy`},args:wl.args,async run({args:e}){await $(wl.parse(e))(e=>e.listAccounts())}}),kl=l({meta:{name:`balance`,description:`Request an account balance through the policy engine`},args:Tl.args,async run({args:e}){let t=Tl.parse(e);await $(t)(e=>e.getAccountBalance(t.account))}}),Al=l({meta:{name:`transactions`,description:`Read an account's transaction history through the policy engine`},args:El.args,async run({args:e}){let t=El.parse(e);await $(t)(e=>e.listAccountTransactions(t.account,{start:t.start,end:t.end,limit:t.limit,offset:t.offset}))}}),jl=l({meta:{name:`deposit-address`,description:`Read an account deposit address through the policy engine`},args:Dl.args,async run({args:e}){let t=Dl.parse(e);await $(t)(e=>e.getAccountDepositAddress(t.account,{network:t.network,asset:t.asset}))}}),Ml=l({meta:{name:`accounts`,description:`Inspect bank accounts`},subCommands:{list:Ol,balance:kl,transactions:Al,"deposit-address":jl}}),Nl=f.pipe(f.string(`Idempotency key must be a string`),f.minLength(1,`Idempotency key must not be empty`),f.maxLength(255,`Idempotency key is too long (max 255 characters)`)),Pl=f.pipe(f.string(),f.minLength(1,`must not be empty`)),Fl=f.pipe(f.string(),f.trim(),f.email(`must be a valid email address`)),Il={profile:bs,json:xs},Ll=Q({address:Z({description:`Only counterparties with a wallet rail matching this address (0x…)`,schema:Ds}),network:Os({description:`Only counterparties with a wallet rail on this network (e.g. base)`}),...Il}),Rl=Z({description:`Counterparty name`,required:!0,schema:Pl}),zl=Z({description:`Optional contact email`,schema:Fl}),Bl=Z({description:`Optional operation key. Reuse the same value only when retrying the same submission; omitted generates a fresh key for this invocation.`,schema:Nl}),Vl=Q({name:Rl,email:Z({description:`Contact email; creating the counterparty sends no email`,required:!0,schema:Fl}),"idempotency-key":Bl,...Il}),Hl=Q({name:Z({description:`Counterparty name; required without a subcommand`,schema:Pl}),email:Z({description:`Contact email; required without a subcommand; creating the counterparty sends no email`,schema:Fl}),"idempotency-key":Bl,...Il}),Ul=Q({name:Rl,"bank-name":Z({description:`Receiving bank name`,required:!0,schema:Pl}),"routing-number":Z({description:`9-digit ABA routing number`,required:!0,schema:Pl}),"account-number":Z({description:`Receiving bank account number`,required:!0,schema:Pl}),"account-type":us({description:`checking | savings (default checking)`,choices:[`checking`,`savings`]}),"address-street":Z({description:`Street address of the receiving bank account holder`,required:!0,schema:Pl}),"address-city":Z({description:`City`,required:!0,schema:Pl}),"address-state":Z({description:`State (e.g. NY)`,required:!0,schema:Pl}),"address-postal-code":Z({description:`Postal code`,required:!0,schema:Pl}),"address-country":Z({description:`Default USA`}),email:zl,"idempotency-key":Bl,...Il}),Wl=Q({name:Rl,address:Z({description:`Wallet address (0x… or ENS name on EVM networks)`,required:!0,schema:Pl}),network:Os({description:`Wallet network; defaults to ${Es}. Availability depends on the connected environment.`,default:Es}),email:zl,"idempotency-key":Bl,...Il}),Gl=Q({counterparty:ss({description:`Counterparty id`,required:!0,schema:Cs}),bank:ls({description:`Request bank account details`,default:!1}),wallet:ls({description:`Request wallet details`,default:!1}),"idempotency-key":Bl,...Il}),Kl=l({meta:{name:`list`,description:`List counterparties available under the agent's policy`},args:Ll.args,async run({args:e}){let t=Ll.parse(e);await $(t)(e=>e.listCounterparties({address:t.address,network:t.network}))}});function ql(e){return e&&e.length>0?e:void 0}function Jl(e){let t=ql(e.email);return{type:`create_counterparty`,name:e.name,email:t,rail:{type:`bank`,bankName:e[`bank-name`],routingNumber:e[`routing-number`],accountNumber:e[`account-number`],addressStreet:e[`address-street`],addressCity:e[`address-city`],addressState:e[`address-state`],addressPostalCode:e[`address-postal-code`],...e[`account-type`]?{accountType:e[`account-type`]}:{},...e[`address-country`]?{addressCountry:e[`address-country`]}:{}}}}function Yl(e){let t=ql(e.email);return{type:`create_counterparty`,name:e.name,email:t,rail:{type:`wallet`,walletAddress:e.address,network:e.network}}}function Xl(e){return{type:`create_counterparty`,name:e.name,email:e.email}}const Zl=l({meta:{name:`email`,description:`Create a counterparty with an email and no payment details. Sends no email.`},args:Vl.args,async run({args:e}){let t=Vl.parse(e);await $(t)(e=>e.submitIntent({action:Xl(t),...t[`idempotency-key`]!==void 0&&{idempotencyKey:t[`idempotency-key`]}}))}}),Ql=l({meta:{name:`bank`,description:`Request bank counterparty creation through the policy engine. Prints an intent envelope.`},args:Ul.args,async run({args:e}){let t=Ul.parse(e),n=Jl(t);await $(t)(e=>e.submitIntent({action:n,...t[`idempotency-key`]!==void 0&&{idempotencyKey:t[`idempotency-key`]}}))}}),$l=l({meta:{name:`wallet`,description:`Request wallet counterparty creation through the policy engine. Prints an intent envelope.`},args:Wl.args,async run({args:e}){let t=Wl.parse(e);await $(t)(e=>e.submitIntent({action:Yl(t),...t[`idempotency-key`]!==void 0&&{idempotencyKey:t[`idempotency-key`]}}))}}),eu=l({meta:{name:`create`,description:`Request counterparty creation through the policy engine. Without a subcommand, --name and --email create a record without payment details and send no email.`},args:Hl.args,default:`email`,subCommands:{email:Zl,bank:Ql,wallet:$l}}),tu=l({meta:{name:`request-details`,description:`Ask a counterparty to provide bank details, wallet details, or both through the policy engine.`},args:Gl.args,async run({args:e}){let t=Gl.parse(e);!t.bank&&!t.wallet&&X(`Select at least one of --bank or --wallet`),await $(t)(e=>e.submitIntent({action:{type:`request_counterparty_details`,counterpartyId:t.counterparty,methods:{bank:t.bank,wallet:t.wallet}},...t[`idempotency-key`]?{idempotencyKey:t[`idempotency-key`]}:{}}))}}),nu=l({meta:{name:`counterparties`,description:`Inspect, create, and request details from counterparties`},subCommands:{list:Kl,create:eu,"request-details":tu}}),ru=4e3;async function iu(){process.stdin.setEncoding(`utf8`);let e=``;for await(let t of process.stdin)e+=t;return e}async function au(e){return e===void 0?(process.stdin.isTTY&&X(`<message>: pass a quoted message or pipe it on stdin; a message starting with "-" needs -- before it (catena feedback -- "<message>") or stdin`),iu()):e}const ou=Q({message:ss({description:`Plain-text feedback (1-4000 chars); omit to pipe on stdin`}),profile:bs,json:xs}),su=l({meta:{name:`feedback`,description:`Send free-form feedback about Catena to the Catena team`},args:ou.args,async run({args:e}){(Array.isArray(e._)?e._:[]).length>1&&X(`<message>: pass the message as a single quoted argument`);let t=ou.parse(e),n=(await au(t.message)).trim();n.length===0&&X(`<message>: must not be empty`),n.length>ru&&X(`<message>: must be at most ${ru} characters (got: ${n.length})`),await $(t)(async e=>(await e.submitFeedback(n),{ok:!0}))}});function cu(e){return`# Catena CLI Agent Guide
134
+ `)}};U.CertificateTag=`CERTIFICATE`,U.CrlTag=`CRL`,U.CertificateRequestTag=`CERTIFICATE REQUEST`,U.PublicKeyTag=`PUBLIC KEY`,U.PrivateKeyTag=`PRIVATE KEY`;var W=class e extends ye{static isAsnEncoded(e){return i.BufferSourceConverter.isBufferSource(e)||typeof e==`string`}static toArrayBuffer(e){if(typeof e==`string`){if(U.isPem(e))return U.decode(e)[0];if(i.Convert.isHex(e))return i.Convert.FromHex(e);if(i.Convert.isBase64(e))return i.Convert.FromBase64(e);if(i.Convert.isBase64Url(e))return i.Convert.FromBase64Url(e);throw TypeError(`Unsupported format of 'raw' argument. Must be one of DER, PEM, HEX, Base64, or Base4Url`)}{let t=i.Convert.ToBinary(e);return U.isPem(t)?U.decode(t)[0]:i.Convert.isHex(t)?i.Convert.FromHex(t):i.Convert.isBase64(t)?i.Convert.FromBase64(t):i.Convert.isBase64Url(t)?i.Convert.FromBase64Url(t):i.BufferSourceConverter.toArrayBuffer(e)}}constructor(...t){e.isAsnEncoded(t[0])?super(e.toArrayBuffer(t[0]),t[1]):super(t[0])}toString(e=`pem`){switch(e){case`pem`:return U.encode(this.rawData,this.tag);default:return super.toString(e)}}},Ve=class e extends W{static async create(t,n=z.get()){if(t instanceof e)return t;if(Se.isCryptoKey(t)){if(t.type!==`public`)throw TypeError(`Public key is required`);let r=await n.subtle.exportKey(`spki`,t);return new e(r)}if(t.publicKey)return t.publicKey;if(i.BufferSourceConverter.isBufferSource(t))return new e(t);throw TypeError(`Unsupported PublicKeyType`)}constructor(e){W.isAsnEncoded(e)?super(e,r.SubjectPublicKeyInfo):super(e),this.tag=U.PublicKeyTag}async export(...e){let t,i=[`verify`],a={hash:`SHA-256`,...this.algorithm};e.length>1?(a=e[0]||a,i=e[1]||i,t=e[2]||z.get()):t=e[0]||z.get();let o=this.rawData,c=n.AsnConvert.parse(this.rawData,r.SubjectPublicKeyInfo);return c.algorithm.algorithm===s.id_RSASSA_PSS&&(o=He(c,o)),t.subtle.importKey(`spki`,o,a,!0,i)}onInit(e){let t=l.container.resolve(b),r=this.algorithm=t.toWebAlgorithm(e.algorithm);switch(e.algorithm.algorithm){case s.id_rsaEncryption:{let t=n.AsnConvert.parse(e.subjectPublicKey,s.RSAPublicKey),a=i.BufferSourceConverter.toUint8Array(t.modulus);r.publicExponent=i.BufferSourceConverter.toUint8Array(t.publicExponent),r.modulusLength=(a[0]?a:a.slice(1)).byteLength<<3;break}}}async getThumbprint(...e){let t,n=`SHA-1`;return e.length>=1&&!e[0]?.subtle?(n=e[0]||n,t=e[1]||z.get()):t=e[0]||z.get(),await t.subtle.digest(n,this.rawData)}async getKeyIdentifier(...e){let t,i=`SHA-1`;e.length===1?typeof e[0]==`string`?(i=e[0],t=z.get()):t=e[0]:e.length===2?(i=e[0],t=e[1]):t=z.get();let a=n.AsnConvert.parse(this.rawData,r.SubjectPublicKeyInfo);return await t.subtle.digest(i,a.subjectPublicKey)}toTextObject(){let e=this.toTextObjectEmpty(),t=n.AsnConvert.parse(this.rawData,r.SubjectPublicKeyInfo);switch(e.Algorithm=ve.serializeAlgorithm(t.algorithm),t.algorithm.algorithm){case o.id_ecPublicKey:e[`EC Point`]=t.subjectPublicKey;break;case s.id_rsaEncryption:default:e[`Raw Data`]=t.subjectPublicKey}return e}};function He(e,t){return e.algorithm=new r.AlgorithmIdentifier({algorithm:s.id_rsaEncryption,parameters:null}),t=n.AsnConvert.serialize(e),t}var Ue=class e extends be{static async create(t,n=!1,r=z.get()){if(`name`in t&&`serialNumber`in t)return new e(t,n);let a=await(await Ve.create(t,r)).getKeyIdentifier(r);return new e(i.Convert.ToHex(a),n)}constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else if(typeof e[0]==`string`){let t=new p.AuthorityKeyIdentifier({keyIdentifier:new p.KeyIdentifier(i.Convert.FromHex(e[0]))});super(p.id_ce_authorityKeyIdentifier,e[1],n.AsnConvert.serialize(t))}else{let t=e[0],r=t.name instanceof ze?n.AsnConvert.parse(t.name.rawData,p.GeneralNames):t.name,a=new p.AuthorityKeyIdentifier({authorityCertIssuer:r,authorityCertSerialNumber:i.Convert.FromHex(t.serialNumber)});super(p.id_ce_authorityKeyIdentifier,e[1],n.AsnConvert.serialize(a))}}onInit(e){super.onInit(e);let t=n.AsnConvert.parse(e.extnValue,p.AuthorityKeyIdentifier);t.keyIdentifier&&(this.keyId=i.Convert.ToHex(t.keyIdentifier)),(t.authorityCertIssuer||t.authorityCertSerialNumber)&&(this.certId={name:t.authorityCertIssuer||[],serialNumber:t.authorityCertSerialNumber?i.Convert.ToHex(t.authorityCertSerialNumber):``})}toTextObject(){let e=this.toTextObjectWithoutValue(),t=n.AsnConvert.parse(this.value,p.AuthorityKeyIdentifier);return t.authorityCertIssuer&&(e[`Authority Issuer`]=new ze(t.authorityCertIssuer).toTextObject()),t.authorityCertSerialNumber&&(e[`Authority Serial Number`]=t.authorityCertSerialNumber),t.keyIdentifier&&(e[``]=t.keyIdentifier),e}};Ue.NAME=`Authority Key Identifier`;var We=class extends be{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,r.BasicConstraints);this.ca=t.cA,this.pathLength=t.pathLenConstraint}else{let t=new r.BasicConstraints({cA:e[0],pathLenConstraint:e[1]});super(r.id_ce_basicConstraints,e[2],n.AsnConvert.serialize(t)),this.ca=e[0],this.pathLength=e[1]}}toTextObject(){let e=this.toTextObjectWithoutValue();return this.ca&&(e.CA=this.ca),this.pathLength!==void 0&&(e[`Path Length`]=this.pathLength),e}};We.NAME=`Basic Constraints`,e.ExtendedKeyUsage=void 0,(function(e){e.serverAuth=`1.3.6.1.5.5.7.3.1`,e.clientAuth=`1.3.6.1.5.5.7.3.2`,e.codeSigning=`1.3.6.1.5.5.7.3.3`,e.emailProtection=`1.3.6.1.5.5.7.3.4`,e.timeStamping=`1.3.6.1.5.5.7.3.8`,e.ocspSigning=`1.3.6.1.5.5.7.3.9`})(e.ExtendedKeyUsage||={});var Ge=class extends be{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,p.ExtendedKeyUsage);this.usages=t.map(e=>e)}else{let t=new p.ExtendedKeyUsage(e[0]);super(p.id_ce_extKeyUsage,e[1],n.AsnConvert.serialize(t)),this.usages=e[0]}}toTextObject(){let e=this.toTextObjectWithoutValue();return e[``]=this.usages.map(e=>R.toString(e)).join(`, `),e}};Ge.NAME=`Extended Key Usages`,e.KeyUsageFlags=void 0,(function(e){e[e.digitalSignature=1]=`digitalSignature`,e[e.nonRepudiation=2]=`nonRepudiation`,e[e.keyEncipherment=4]=`keyEncipherment`,e[e.dataEncipherment=8]=`dataEncipherment`,e[e.keyAgreement=16]=`keyAgreement`,e[e.keyCertSign=32]=`keyCertSign`,e[e.cRLSign=64]=`cRLSign`,e[e.encipherOnly=128]=`encipherOnly`,e[e.decipherOnly=256]=`decipherOnly`})(e.KeyUsageFlags||={});var Ke=class extends be{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,r.KeyUsage);this.usages=t.toNumber()}else{let t=new r.KeyUsage(e[0]);super(r.id_ce_keyUsage,e[1],n.AsnConvert.serialize(t)),this.usages=e[0]}}toTextObject(){let e=this.toTextObjectWithoutValue();return e[``]=n.AsnConvert.parse(this.value,r.KeyUsage).toJSON().join(`, `),e}};Ke.NAME=`Key Usages`;var qe=class e extends be{static async create(t,n=!1,r=z.get()){let a=await(await Ve.create(t,r)).getKeyIdentifier(r);return new e(i.Convert.ToHex(a),n)}constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,p.SubjectKeyIdentifier);this.keyId=i.Convert.ToHex(t)}else{let t=typeof e[0]==`string`?i.Convert.FromHex(e[0]):e[0],r=new p.SubjectKeyIdentifier(t);super(p.id_ce_subjectKeyIdentifier,e[1],n.AsnConvert.serialize(r)),this.keyId=i.Convert.ToHex(t)}}toTextObject(){let e=this.toTextObjectWithoutValue();return e[``]=n.AsnConvert.parse(this.value,p.SubjectKeyIdentifier),e}};qe.NAME=`Subject Key Identifier`;var Je=class extends be{constructor(...e){i.BufferSourceConverter.isBufferSource(e[0])?super(e[0]):super(p.id_ce_subjectAltName,e[1],new ze(e[0]||[]).rawData)}onInit(e){super.onInit(e);let t=n.AsnConvert.parse(e.extnValue,p.SubjectAlternativeName);this.names=new ze(t)}toTextObject(){let e=this.toTextObjectWithoutValue(),t=this.names.toTextObject();for(let n in t)e[n]=t[n];return e}};Je.NAME=`Subject Alternative Name`;var G=class{static register(e,t){this.items.set(e,t)}static create(e){let t=new be(e),n=this.items.get(t.type);return n?new n(e):t}};G.items=new Map;var Ye=class extends be{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0])){super(e[0]);let t=n.AsnConvert.parse(this.value,p.CertificatePolicies);this.policies=t.map(e=>e.policyIdentifier)}else{let t=e[0],r=e[1]??!1,i=new p.CertificatePolicies(t.map(e=>new p.PolicyInformation({policyIdentifier:e})));super(p.id_ce_certificatePolicies,r,n.AsnConvert.serialize(i)),this.policies=t}}toTextObject(){let e=this.toTextObjectWithoutValue();return e.Policy=this.policies.map(e=>new L(``,{},R.toString(e))),e}};Ye.NAME=`Certificate Policies`,G.register(p.id_ce_certificatePolicies,Ye);var Xe=class extends be{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else if(Array.isArray(e[0])&&typeof e[0][0]==`string`){let t=e[0].map(e=>new p.DistributionPoint({distributionPoint:new p.DistributionPointName({fullName:[new p.GeneralName({uniformResourceIdentifier:e})]})})),r=new p.CRLDistributionPoints(t);super(p.id_ce_cRLDistributionPoints,e[1],n.AsnConvert.serialize(r))}else{let t=new p.CRLDistributionPoints(e[0]);super(p.id_ce_cRLDistributionPoints,e[1],n.AsnConvert.serialize(t))}this.distributionPoints??=[]}onInit(e){super.onInit(e);let t=n.AsnConvert.parse(e.extnValue,p.CRLDistributionPoints);this.distributionPoints=t}toTextObject(){let e=this.toTextObjectWithoutValue();return e[`Distribution Point`]=this.distributionPoints.map(e=>{let t={};return e.distributionPoint&&(t[``]=e.distributionPoint.fullName?.map(e=>new Re(e).toString()).join(`, `)),e.reasons&&(t.Reasons=e.reasons.toString()),e.cRLIssuer&&(t[`CRL Issuer`]=e.cRLIssuer.map(e=>e.toString()).join(`, `)),t}),e}};Xe.NAME=`CRL Distribution Points`;var Ze=class extends be{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else if(e[0]instanceof p.AuthorityInfoAccessSyntax){let t=new p.AuthorityInfoAccessSyntax(e[0]);super(p.id_pe_authorityInfoAccess,e[1],n.AsnConvert.serialize(t))}else{let t=e[0],r=new p.AuthorityInfoAccessSyntax;$e(r,t,p.id_ad_ocsp,`ocsp`),$e(r,t,p.id_ad_caIssuers,`caIssuers`),$e(r,t,p.id_ad_timeStamping,`timeStamping`),$e(r,t,p.id_ad_caRepository,`caRepository`),super(p.id_pe_authorityInfoAccess,e[1],n.AsnConvert.serialize(r))}this.ocsp??=[],this.caIssuers??=[],this.timeStamping??=[],this.caRepository??=[]}onInit(e){super.onInit(e),this.ocsp=[],this.caIssuers=[],this.timeStamping=[],this.caRepository=[],n.AsnConvert.parse(e.extnValue,p.AuthorityInfoAccessSyntax).forEach(e=>{switch(e.accessMethod){case p.id_ad_ocsp:this.ocsp.push(new Re(e.accessLocation));break;case p.id_ad_caIssuers:this.caIssuers.push(new Re(e.accessLocation));break;case p.id_ad_timeStamping:this.timeStamping.push(new Re(e.accessLocation));break;case p.id_ad_caRepository:this.caRepository.push(new Re(e.accessLocation))}})}toTextObject(){let e=this.toTextObjectWithoutValue();return this.ocsp.length&&Qe(e,`OCSP`,this.ocsp),this.caIssuers.length&&Qe(e,`CA Issuers`,this.caIssuers),this.timeStamping.length&&Qe(e,`Time Stamping`,this.timeStamping),this.caRepository.length&&Qe(e,`CA Repository`,this.caRepository),e}};Ze.NAME=`Authority Info Access`;function Qe(e,t,n){if(n.length===1)e[t]=n[0].toTextObject();else{let r=new L(``);n.forEach((e,t)=>{let n=e.toTextObject(),i=`${n[L.NAME]} ${t+1}`,a=r[i];Array.isArray(a)||(a=[],r[i]=a),a.push(n)}),e[t]=r}}function $e(e,t,r,i){let a=t[i];a&&(Array.isArray(a)?a:[a]).forEach(t=>{typeof t==`string`&&(t=new Re(`url`,t)),e.push(new p.AccessDescription({accessMethod:r,accessLocation:n.AsnConvert.parse(t.rawData,p.GeneralName)}))})}var et=class e extends ye{constructor(...e){let t;if(i.BufferSourceConverter.isBufferSource(e[0]))t=i.BufferSourceConverter.toArrayBuffer(e[0]);else{let a=e[0],o=Array.isArray(e[1])?e[1].map(e=>i.BufferSourceConverter.toArrayBuffer(e)):[];t=n.AsnConvert.serialize(new r.Attribute({type:a,values:o}))}super(t,r.Attribute)}onInit(e){this.type=e.type,this.values=e.values}toTextObject(){let e=this.toTextObjectWithoutValue();return e.Value=this.values.map(e=>new L(``,{"":e})),e}toTextObjectWithoutValue(){let t=this.toTextObjectEmpty();return t[L.NAME]===e.NAME&&(t[L.NAME]=R.toString(this.type)),t}};et.NAME=`Attribute`;var tt=class extends et{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else{let t=new _.ChallengePassword({printableString:e[0]});super(_.id_pkcs9_at_challengePassword,[n.AsnConvert.serialize(t)])}this.password??=``}onInit(e){if(super.onInit(e),this.values[0]){let e=n.AsnConvert.parse(this.values[0],_.ChallengePassword);this.password=e.toString()}}toTextObject(){let e=this.toTextObjectWithoutValue();return e[L.VALUE]=this.password,e}};tt.NAME=`Challenge Password`;var nt=class extends et{constructor(...e){if(i.BufferSourceConverter.isBufferSource(e[0]))super(e[0]);else{let t=e[0],r=new p.Extensions;for(let e of t)r.push(n.AsnConvert.parse(e.rawData,p.Extension));super(_.id_pkcs9_at_extensionRequest,[n.AsnConvert.serialize(r)])}this.items??=[]}onInit(e){if(super.onInit(e),this.values[0]){let e=n.AsnConvert.parse(this.values[0],p.Extensions);this.items=e.map(e=>G.create(n.AsnConvert.serialize(e)))}}toTextObject(){let e=this.toTextObjectWithoutValue(),t=this.items.map(e=>e.toTextObject());for(let n of t)e[n[L.NAME]]=n;return e}};nt.NAME=`Extensions`;var rt=class{static register(e,t){this.items.set(e,t)}static create(e){let t=new et(e),n=this.items.get(t.type);return n?new n(e):t}};rt.items=new Map;let it=`crypto.signatureFormatter`;var at=class{toAsnSignature(e,t){return i.BufferSourceConverter.toArrayBuffer(t)}toWebSignature(e,t){return i.BufferSourceConverter.toArrayBuffer(t)}},ot;e.RsaAlgorithm=ot=class{static createPssParams(e,t){let i=ot.getHashAlgorithm(e);return i?new g.RsaSaPssParams({hashAlgorithm:i,maskGenAlgorithm:new r.AlgorithmIdentifier({algorithm:g.id_mgf1,parameters:n.AsnConvert.serialize(i)}),saltLength:t}):null}static getHashAlgorithm(e){let t=l.container.resolve(b);return typeof e==`string`?t.toAsnAlgorithm({name:e}):typeof e==`object`&&e&&`name`in e?t.toAsnAlgorithm(e):null}toAsnAlgorithm(e){switch(e.name.toLowerCase()){case`rsassa-pkcs1-v1_5`:if(`hash`in e){let t;if(typeof e.hash==`string`)t=e.hash;else if(e.hash&&typeof e.hash==`object`&&`name`in e.hash&&typeof e.hash.name==`string`)t=e.hash.name.toUpperCase();else throw Error(`Cannot get hash algorithm name`);switch(t.toLowerCase()){case`sha-1`:return new r.AlgorithmIdentifier({algorithm:g.id_sha1WithRSAEncryption,parameters:null});case`sha-256`:return new r.AlgorithmIdentifier({algorithm:g.id_sha256WithRSAEncryption,parameters:null});case`sha-384`:return new r.AlgorithmIdentifier({algorithm:g.id_sha384WithRSAEncryption,parameters:null});case`sha-512`:return new r.AlgorithmIdentifier({algorithm:g.id_sha512WithRSAEncryption,parameters:null})}}else return new r.AlgorithmIdentifier({algorithm:g.id_rsaEncryption,parameters:null});break;case`rsa-pss`:if(`hash`in e){if(!(`saltLength`in e&&typeof e.saltLength==`number`))throw Error(`Cannot get 'saltLength' from 'alg' argument`);let t=ot.createPssParams(e.hash,e.saltLength);if(!t)throw Error(`Cannot create PSS parameters`);return new r.AlgorithmIdentifier({algorithm:g.id_RSASSA_PSS,parameters:n.AsnConvert.serialize(t)})}return new r.AlgorithmIdentifier({algorithm:g.id_RSASSA_PSS,parameters:null})}return null}toWebAlgorithm(e){switch(e.algorithm){case g.id_rsaEncryption:return{name:`RSASSA-PKCS1-v1_5`};case g.id_sha1WithRSAEncryption:return{name:`RSASSA-PKCS1-v1_5`,hash:{name:`SHA-1`}};case g.id_sha256WithRSAEncryption:return{name:`RSASSA-PKCS1-v1_5`,hash:{name:`SHA-256`}};case g.id_sha384WithRSAEncryption:return{name:`RSASSA-PKCS1-v1_5`,hash:{name:`SHA-384`}};case g.id_sha512WithRSAEncryption:return{name:`RSASSA-PKCS1-v1_5`,hash:{name:`SHA-512`}};case g.id_RSASSA_PSS:if(e.parameters){let t=n.AsnConvert.parse(e.parameters,g.RsaSaPssParams);return{name:`RSA-PSS`,hash:l.container.resolve(b).toWebAlgorithm(t.hashAlgorithm),saltLength:t.saltLength}}return{name:`RSA-PSS`}}return null}},e.RsaAlgorithm=ot=c.__decorate([l.injectable()],e.RsaAlgorithm),l.container.registerSingleton(v,e.RsaAlgorithm),e.ShaAlgorithm=class{toAsnAlgorithm(e){switch(e.name.toLowerCase()){case`sha-1`:return new r.AlgorithmIdentifier({algorithm:s.id_sha1});case`sha-256`:return new r.AlgorithmIdentifier({algorithm:s.id_sha256});case`sha-384`:return new r.AlgorithmIdentifier({algorithm:s.id_sha384});case`sha-512`:return new r.AlgorithmIdentifier({algorithm:s.id_sha512})}return null}toWebAlgorithm(e){switch(e.algorithm){case s.id_sha1:return{name:`SHA-1`};case s.id_sha256:return{name:`SHA-256`};case s.id_sha384:return{name:`SHA-384`};case s.id_sha512:return{name:`SHA-512`}}return null}},e.ShaAlgorithm=c.__decorate([l.injectable()],e.ShaAlgorithm),l.container.registerSingleton(v,e.ShaAlgorithm);var ct=class e{addPadding(e,t){let n=i.BufferSourceConverter.toUint8Array(t),r=new Uint8Array(e);return r.set(n,e-n.length),r}removePadding(e,t=!1){let n=i.BufferSourceConverter.toUint8Array(e);for(let e=0;e<n.length;e++)if(n[e]){n=n.slice(e);break}if(t&&n[0]>127){let e=new Uint8Array(n.length+1);return e.set(n,1),e.buffer}return n.buffer}toAsnSignature(t,r){if(t.name===`ECDSA`){let a=t.namedCurve,s=e.namedCurveSize.get(a)||e.defaultNamedCurveSize,c=new o.ECDSASigValue,l=i.BufferSourceConverter.toUint8Array(r);return c.r=this.removePadding(l.slice(0,s),!0),c.s=this.removePadding(l.slice(s,s+s),!0),n.AsnConvert.serialize(c)}return null}toWebSignature(t,r){if(t.name===`ECDSA`){let a=n.AsnConvert.parse(r,o.ECDSASigValue),s=t.namedCurve,c=e.namedCurveSize.get(s)||e.defaultNamedCurveSize,l=this.addPadding(c,this.removePadding(a.r)),u=this.addPadding(c,this.removePadding(a.s));return i.combine(l,u)}return null}};ct.namedCurveSize=new Map,ct.defaultNamedCurveSize=32;let lt=`1.3.101.110`,ut=`1.3.101.111`,dt=`1.3.101.112`,ft=`1.3.101.113`;e.EdAlgorithm=class{toAsnAlgorithm(e){let t=null;switch(e.name.toLowerCase()){case`ed25519`:t=dt;break;case`x25519`:t=lt;break;case`eddsa`:switch(e.namedCurve.toLowerCase()){case`ed25519`:t=dt;break;case`ed448`:t=ft}break;case`ecdh-es`:switch(e.namedCurve.toLowerCase()){case`x25519`:t=lt;break;case`x448`:t=ut}}return t?new r.AlgorithmIdentifier({algorithm:t}):null}toWebAlgorithm(e){switch(e.algorithm){case dt:return{name:`Ed25519`};case ft:return{name:`EdDSA`,namedCurve:`Ed448`};case lt:return{name:`X25519`};case ut:return{name:`ECDH-ES`,namedCurve:`X448`}}return null}},e.EdAlgorithm=c.__decorate([l.injectable()],e.EdAlgorithm),l.container.registerSingleton(v,e.EdAlgorithm);var pt=class extends W{constructor(e){W.isAsnEncoded(e)?super(e,d.CertificationRequest):super(e),this.tag=U.CertificateRequestTag}onInit(e){this.tbs=n.AsnConvert.serialize(e.certificationRequestInfo),this.publicKey=new Ve(e.certificationRequestInfo.subjectPKInfo);let t=l.container.resolve(b);this.signatureAlgorithm=t.toWebAlgorithm(e.signatureAlgorithm),this.signature=e.signature,this.attributes=e.certificationRequestInfo.attributes.map(e=>rt.create(n.AsnConvert.serialize(e)));let r=this.getAttribute(u.id_pkcs9_at_extensionRequest);this.extensions=[],r instanceof nt&&(this.extensions=r.items),this.subjectName=new V(e.certificationRequestInfo.subject),this.subject=this.subjectName.toString()}getAttribute(e){for(let t of this.attributes)if(t.type===e)return t;return null}getAttributes(e){return this.attributes.filter(t=>t.type===e)}getExtension(e){for(let t of this.extensions)if(t.type===e)return t;return null}getExtensions(e){return this.extensions.filter(t=>t.type===e)}async verify(e=z.get()){let t={...this.publicKey.algorithm,...this.signatureAlgorithm},n=await this.publicKey.export(t,[`verify`],e),r=l.container.resolveAll(it).reverse(),i=null;for(let e of r)if(i=e.toWebSignature(t,this.signature),i)break;if(!i)throw Error(`Cannot convert WebCrypto signature value to ASN.1 format`);return await e.subtle.verify(this.signatureAlgorithm,n,i,this.tbs)}toTextObject(){let e=this.toTextObjectEmpty(),t=n.AsnConvert.parse(this.rawData,d.CertificationRequest),i=t.certificationRequestInfo,a=new L(``,{Version:`${r.Version[i.version]} (${i.version})`,Subject:this.subject,"Subject Public Key Info":this.publicKey});if(this.attributes.length){let e=new L(``);for(let t of this.attributes){let n=t.toTextObject();e[n[L.NAME]]=n}a.Attributes=e}return e.Data=a,e.Signature=new L(``,{Algorithm:ve.serializeAlgorithm(t.signatureAlgorithm),"":t.signature}),e}};pt.NAME=`PKCS#10 Certificate Request`;var mt=class{static async create(e,t=z.get()){if(!e.keys.privateKey)throw Error(`Bad field 'keys' in 'params' argument. 'privateKey' is empty`);if(!e.keys.publicKey)throw Error(`Bad field 'keys' in 'params' argument. 'publicKey' is empty`);let i=await t.subtle.exportKey(`spki`,e.keys.publicKey),a=new d.CertificationRequest({certificationRequestInfo:new d.CertificationRequestInfo({subjectPKInfo:n.AsnConvert.parse(i,r.SubjectPublicKeyInfo)})});if(e.name){let t=e.name instanceof V?e.name:new V(e.name);a.certificationRequestInfo.subject=n.AsnConvert.parse(t.toArrayBuffer(),r.Name)}if(e.attributes)for(let t of e.attributes)a.certificationRequestInfo.attributes.push(n.AsnConvert.parse(t.rawData,r.Attribute));if(e.extensions&&e.extensions.length){let t=new r.Attribute({type:u.id_pkcs9_at_extensionRequest}),i=new r.Extensions;for(let t of e.extensions)i.push(n.AsnConvert.parse(t.rawData,r.Extension));t.values.push(n.AsnConvert.serialize(i)),a.certificationRequestInfo.attributes.push(t)}let o={...e.signingAlgorithm,...e.keys.privateKey.algorithm};a.signatureAlgorithm=l.container.resolve(b).toAsnAlgorithm(o);let s=n.AsnConvert.serialize(a.certificationRequestInfo),c=await t.subtle.sign(o,e.keys.privateKey,s),f=l.container.resolveAll(it).reverse(),p=null;for(let e of f)if(p=e.toAsnSignature(o,c),p)break;if(!p)throw Error(`Cannot convert WebCrypto signature value to ASN.1 format`);return a.signature=p,new pt(n.AsnConvert.serialize(a))}},ht=class extends W{constructor(e){W.isAsnEncoded(e)?super(e,r.Certificate):super(e),this.tag=U.CertificateTag}onInit(e){let t=e.tbsCertificate;this.tbs=n.AsnConvert.serialize(t),this.serialNumber=i.Convert.ToHex(t.serialNumber),this.subjectName=new V(t.subject),this.subject=new V(t.subject).toString(),this.issuerName=new V(t.issuer),this.issuer=this.issuerName.toString();let r=l.container.resolve(b);this.signatureAlgorithm=r.toWebAlgorithm(e.signatureAlgorithm),this.signature=e.signatureValue;let a=t.validity.notBefore.utcTime||t.validity.notBefore.generalTime;if(!a)throw Error(`Cannot get 'notBefore' value`);this.notBefore=a;let o=t.validity.notAfter.utcTime||t.validity.notAfter.generalTime;if(!o)throw Error(`Cannot get 'notAfter' value`);this.notAfter=o,this.extensions=[],t.extensions&&(this.extensions=t.extensions.map(e=>G.create(n.AsnConvert.serialize(e)))),this.publicKey=new Ve(t.subjectPublicKeyInfo)}getExtension(e){for(let t of this.extensions)if(typeof e==`string`){if(t.type===e)return t}else if(t instanceof e)return t;return null}getExtensions(e){return this.extensions.filter(t=>typeof e==`string`?t.type===e:t instanceof e)}async verify(e={},t=z.get()){let n,r,a=e.publicKey;try{if(!a)n={...this.publicKey.algorithm,...this.signatureAlgorithm},r=await this.publicKey.export(n,[`verify`],t);else if(`publicKey`in a)n={...a.publicKey.algorithm,...this.signatureAlgorithm},r=await a.publicKey.export(n,[`verify`],t);else if(a instanceof Ve)n={...a.algorithm,...this.signatureAlgorithm},r=await a.export(n,[`verify`],t);else if(i.BufferSourceConverter.isBufferSource(a)){let e=new Ve(a);n={...e.algorithm,...this.signatureAlgorithm},r=await e.export(n,[`verify`],t)}else n={...a.algorithm,...this.signatureAlgorithm},r=a}catch{return!1}let o=l.container.resolveAll(it).reverse(),s=null;for(let e of o)if(s=e.toWebSignature(n,this.signature),s)break;if(!s)throw Error(`Cannot convert ASN.1 signature value to WebCrypto format`);let c=await t.subtle.verify(this.signatureAlgorithm,r,s,this.tbs);if(e.signatureOnly)return c;{let t=(e.date||new Date).getTime();return c&&this.notBefore.getTime()<t&&t<this.notAfter.getTime()}}async getThumbprint(...e){let t,n=`SHA-1`;return e[0]&&(e[0].subtle?t=e[0]:(n=e[0]||n,t=e[1])),t??=z.get(),await t.subtle.digest(n,this.rawData)}async isSelfSigned(e=z.get()){return this.subject===this.issuer&&await this.verify({signatureOnly:!0},e)}toTextObject(){let e=this.toTextObjectEmpty(),t=n.AsnConvert.parse(this.rawData,r.Certificate),i=t.tbsCertificate,a=new L(``,{Version:`${r.Version[i.version]} (${i.version})`,"Serial Number":i.serialNumber,"Signature Algorithm":ve.serializeAlgorithm(i.signature),Issuer:this.issuer,Validity:new L(``,{"Not Before":i.validity.notBefore.getTime(),"Not After":i.validity.notAfter.getTime()}),Subject:this.subject,"Subject Public Key Info":this.publicKey});if(i.issuerUniqueID&&(a[`Issuer Unique ID`]=i.issuerUniqueID),i.subjectUniqueID&&(a[`Subject Unique ID`]=i.subjectUniqueID),this.extensions.length){let e=new L(``);for(let t of this.extensions){let n=t.toTextObject();e[n[L.NAME]]=n}a.Extensions=e}return e.Data=a,e.Signature=new L(``,{Algorithm:ve.serializeAlgorithm(t.signatureAlgorithm),"":t.signatureValue}),e}};ht.NAME=`Certificate`;var gt=class extends Array{constructor(e){if(super(),W.isAsnEncoded(e))this.import(e);else if(e instanceof ht)this.push(e);else if(Array.isArray(e))for(let t of e)this.push(t)}export(e){let t=new m.SignedData;t.version=1,t.encapContentInfo.eContentType=m.id_data,t.encapContentInfo.eContent=new m.EncapsulatedContent({single:new n.OctetString}),t.certificates=new m.CertificateSet(this.map(e=>new m.CertificateChoices({certificate:n.AsnConvert.parse(e.rawData,r.Certificate)})));let i=new m.ContentInfo({contentType:m.id_signedData,content:n.AsnConvert.serialize(t)}),a=n.AsnConvert.serialize(i);return e===`raw`?a:this.toString(e)}import(e){let t=W.toArrayBuffer(e),r=n.AsnConvert.parse(t,m.ContentInfo);if(r.contentType!==m.id_signedData)throw TypeError(`Cannot parse CMS package. Incoming data is not a SignedData object.`);let i=n.AsnConvert.parse(r.content,m.SignedData);this.clear();for(let e of i.certificates||[])e.certificate&&this.push(new ht(e.certificate))}clear(){for(;this.pop(););}toString(e=`pem`){let t=this.export(`raw`);switch(e){case`pem`:return U.encode(t,`CMS`);case`pem-chain`:return this.map(e=>e.toString(`pem`)).join(`
135
+ `);case`asn`:return n.AsnConvert.toString(t);case`hex`:return i.Convert.ToHex(t);case`base64`:return i.Convert.ToBase64(t);case`base64url`:return i.Convert.ToBase64Url(t);case`text`:return ve.serialize(this.toTextObject());default:throw TypeError(`Argument 'format' is unsupported value`)}}toTextObject(){let e=n.AsnConvert.parse(this.export(`raw`),m.ContentInfo),t=n.AsnConvert.parse(e.content,m.SignedData);return new L(`X509Certificates`,{"Content Type":R.toString(e.contentType),Content:new L(``,{Version:`${m.CMSVersion[t.version]} (${t.version})`,Certificates:new L(``,{Certificate:this.map(e=>e.toTextObject())})})})}},_t=class{constructor(e={}){this.certificates=[],e.certificates&&(this.certificates=e.certificates)}async build(e,t=z.get()){let n=new gt(e),r=e;for(;r=await this.findIssuer(r,t);){let e=await r.getThumbprint(t);for(let r of n){let n=await r.getThumbprint(t);if(i.isEqual(e,n))throw Error(`Cannot build a certificate chain. Circular dependency.`)}n.push(r)}return n}async findIssuer(e,t=z.get()){if(!await e.isSelfSigned(t)){let r=e.getExtension(p.id_ce_authorityKeyIdentifier);for(let a of this.certificates)if(a.subject===e.issuer){if(r){if(r.keyId){let e=a.getExtension(p.id_ce_subjectKeyIdentifier);if(e&&e.keyId!==r.keyId)continue}else if(r.certId){let e=a.getExtension(p.id_ce_subjectAltName);if(e&&!(r.certId.serialNumber===a.serialNumber&&i.isEqual(n.AsnConvert.serialize(r.certId.name),n.AsnConvert.serialize(e))))continue}}try{let n={...a.publicKey.algorithm,...e.signatureAlgorithm},r=await a.publicKey.export(n,[`verify`],t);if(!await e.verify({publicKey:r,signatureOnly:!0},t))continue}catch{continue}return a}}return null}},vt=class{static async createSelfSigned(e,t=z.get()){if(!e.keys.privateKey)throw Error(`Bad field 'keys' in 'params' argument. 'privateKey' is empty`);if(!e.keys.publicKey)throw Error(`Bad field 'keys' in 'params' argument. 'publicKey' is empty`);return this.create({serialNumber:e.serialNumber,subject:e.name,issuer:e.name,notBefore:e.notBefore,notAfter:e.notAfter,publicKey:e.keys.publicKey,signingKey:e.keys.privateKey,signingAlgorithm:e.signingAlgorithm,extensions:e.extensions},t)}static async create(e,t=z.get()){let r;r=e.publicKey instanceof Ve?e.publicKey.rawData:`publicKey`in e.publicKey?e.publicKey.publicKey.rawData:i.BufferSourceConverter.isBufferSource(e.publicKey)?e.publicKey:await t.subtle.exportKey(`spki`,e.publicKey);let a=e.serialNumber?i.BufferSourceConverter.toUint8Array(i.Convert.FromHex(e.serialNumber)):t.getRandomValues(new Uint8Array(16));a[0]>127&&(a[0]&=127),a.length>1&&a[0]===0&&(a[1]|=128);let o=e.notBefore||new Date,s=e.notAfter||new Date(o.getTime()+31536e6),c=new p.Certificate({tbsCertificate:new p.TBSCertificate({version:p.Version.v3,serialNumber:a,validity:new p.Validity({notBefore:o,notAfter:s}),extensions:new p.Extensions(e.extensions?.map(e=>n.AsnConvert.parse(e.rawData,p.Extension))||[]),subjectPublicKeyInfo:n.AsnConvert.parse(r,p.SubjectPublicKeyInfo)})});if(e.subject){let t=e.subject instanceof V?e.subject:new V(e.subject);c.tbsCertificate.subject=n.AsnConvert.parse(t.toArrayBuffer(),p.Name)}if(e.issuer){let t=e.issuer instanceof V?e.issuer:new V(e.issuer);c.tbsCertificate.issuer=n.AsnConvert.parse(t.toArrayBuffer(),p.Name)}let u={hash:`SHA-256`},d=`signingKey`in e?{...u,...e.signingAlgorithm,...e.signingKey.algorithm}:{...u,...e.signingAlgorithm},f=l.container.resolve(b);c.tbsCertificate.signature=c.signatureAlgorithm=f.toAsnAlgorithm(d);let m=n.AsnConvert.serialize(c.tbsCertificate),h=`signingKey`in e?await t.subtle.sign(d,e.signingKey,m):e.signature,g=l.container.resolveAll(it).reverse(),_=null;for(let e of g)if(_=e.toAsnSignature(d,h),_)break;if(!_)throw Error(`Cannot convert ASN.1 signature value to WebCrypto format`);return c.signatureValue=_,new ht(n.AsnConvert.serialize(c))}};e.X509CrlReason=void 0,(function(e){e[e.unspecified=0]=`unspecified`,e[e.keyCompromise=1]=`keyCompromise`,e[e.cACompromise=2]=`cACompromise`,e[e.affiliationChanged=3]=`affiliationChanged`,e[e.superseded=4]=`superseded`,e[e.cessationOfOperation=5]=`cessationOfOperation`,e[e.certificateHold=6]=`certificateHold`,e[e.removeFromCRL=8]=`removeFromCRL`,e[e.privilegeWithdrawn=9]=`privilegeWithdrawn`,e[e.aACompromise=10]=`aACompromise`})(e.X509CrlReason||={});var yt=class extends ye{constructor(...e){let t;t=i.BufferSourceConverter.isBufferSource(e[0])?i.BufferSourceConverter.toArrayBuffer(e[0]):n.AsnConvert.serialize(new r.RevokedCertificate({userCertificate:e[0],revocationDate:new r.Time(e[1]),crlEntryExtensions:e[2]})),super(t,r.RevokedCertificate)}onInit(e){this.serialNumber=i.Convert.ToHex(e.userCertificate),this.revocationDate=e.revocationDate.getTime(),this.extensions=[],e.crlEntryExtensions&&(this.extensions=e.crlEntryExtensions.map(e=>{let t=G.create(n.AsnConvert.serialize(e));switch(t.type){case r.id_ce_cRLReasons:this.reason=n.AsnConvert.parse(t.value,r.CRLReason).reason;break;case r.id_ce_invalidityDate:this.invalidity=n.AsnConvert.parse(t.value,r.InvalidityDate).value}return t}))}},bt=class extends W{constructor(e){W.isAsnEncoded(e)?super(e,r.CertificateList):super(e),this.tag=U.CrlTag}onInit(e){let t=e.tbsCertList;this.tbs=n.AsnConvert.serialize(t),this.version=t.version;let r=l.container.resolve(b);this.signatureAlgorithm=r.toWebAlgorithm(e.signatureAlgorithm),this.tbsCertListSignatureAlgorithm=t.signature,this.certListSignatureAlgorithm=e.signatureAlgorithm,this.signature=e.signature,this.issuerName=new V(t.issuer),this.issuer=this.issuerName.toString();let i=t.thisUpdate.getTime();if(!i)throw Error(`Cannot get 'thisUpdate' value`);this.thisUpdate=i;let a=t.nextUpdate?.getTime();this.nextUpdate=a,this.entries=t.revokedCertificates?.map(e=>new yt(n.AsnConvert.serialize(e)))||[],this.extensions=[],t.crlExtensions&&(this.extensions=t.crlExtensions.map(e=>G.create(n.AsnConvert.serialize(e))))}getExtension(e){for(let t of this.extensions)if(typeof e==`string`){if(t.type===e)return t}else if(t instanceof e)return t;return null}getExtensions(e){return this.extensions.filter(t=>typeof e==`string`?t.type===e:t instanceof e)}async verify(e,t=z.get()){if(!this.certListSignatureAlgorithm.isEqual(this.tbsCertListSignatureAlgorithm))throw Error(`algorithm identifier in the sequence tbsCertList and CertificateList mismatch`);let n,r,i=e.publicKey;try{i instanceof ht?(n={...i.publicKey.algorithm,...i.signatureAlgorithm},r=await i.publicKey.export(n,[`verify`])):i instanceof Ve?(n={...i.algorithm,...this.signature},r=await i.export(n,[`verify`])):(n={...i.algorithm,...this.signature},r=i)}catch{return!1}let a=l.container.resolveAll(it).reverse(),o=null;for(let e of a)if(o=e.toWebSignature(n,this.signature),o)break;if(!o)throw Error(`Cannot convert ASN.1 signature value to WebCrypto format`);return await t.subtle.verify(this.signatureAlgorithm,r,o,this.tbs)}async getThumbprint(...e){let t,n=`SHA-1`;return e[0]&&(e[0].subtle?t=e[0]:(n=e[0]||n,t=e[1])),t??=z.get(),await t.subtle.digest(n,this.rawData)}findRevoked(e){let t=typeof e==`string`?e:e.serialNumber;for(let e of this.entries)if(e.serialNumber===t)return e;return null}},xt=class{static async create(e,t=z.get()){let a=e.issuer instanceof V?e.issuer:new V(e.issuer),o=new p.CertificateList({tbsCertList:new p.TBSCertList({version:p.Version.v2,issuer:n.AsnConvert.parse(a.toArrayBuffer(),p.Name),thisUpdate:new r.Time(e.thisUpdate||new Date)})});if(e.nextUpdate&&(o.tbsCertList.nextUpdate=new r.Time(e.nextUpdate)),e.extensions&&e.extensions.length&&(o.tbsCertList.crlExtensions=new p.Extensions(e.extensions.map(e=>n.AsnConvert.parse(e.rawData,p.Extension))||[])),e.entries&&e.entries.length){o.tbsCertList.revokedCertificates=[];for(let t of e.entries){let a=W.toArrayBuffer(t.serialNumber);if(o.tbsCertList.revokedCertificates.findIndex(e=>i.isEqual(e.userCertificate,a))>-1)throw Error(`Certificate serial number ${t.serialNumber} already exists in tbsCertList`);let s=new r.RevokedCertificate({userCertificate:a,revocationDate:new r.Time(t.revocationDate||new Date)});if(s.crlEntryExtensions=`extensions`in t&&t.extensions?.length?t.extensions.map(e=>n.AsnConvert.parse(e.rawData,p.Extension)):[],!(t instanceof yt)&&(t.reason&&s.crlEntryExtensions.push(new p.Extension({extnID:p.id_ce_cRLReasons,critical:!1,extnValue:new n.OctetString(n.AsnConvert.serialize(new p.CRLReason(t.reason)))})),t.invalidity&&s.crlEntryExtensions.push(new p.Extension({extnID:p.id_ce_invalidityDate,critical:!1,extnValue:new n.OctetString(n.AsnConvert.serialize(new p.InvalidityDate(t.invalidity)))})),t.issuer)){let t=e.issuer instanceof V?e.issuer:new V(e.issuer);s.crlEntryExtensions.push(new p.Extension({extnID:p.id_ce_certificateIssuer,critical:!1,extnValue:new n.OctetString(n.AsnConvert.serialize(n.AsnConvert.parse(t.toArrayBuffer(),p.Name)))}))}o.tbsCertList.revokedCertificates.push(s)}}let s={...e.signingAlgorithm,...e.signingKey.algorithm},c=l.container.resolve(b);o.tbsCertList.signature=o.signatureAlgorithm=c.toAsnAlgorithm(s);let u=n.AsnConvert.serialize(o.tbsCertList),d=await t.subtle.sign(s,e.signingKey,u),f=l.container.resolveAll(it).reverse(),m=null;for(let e of f)if(m=e.toAsnSignature(s,d),m)break;if(!m)throw Error(`Cannot convert ASN.1 signature value to WebCrypto format`);return o.signature=m,new bt(n.AsnConvert.serialize(o))}};G.register(p.id_ce_basicConstraints,We),G.register(p.id_ce_extKeyUsage,Ge),G.register(p.id_ce_keyUsage,Ke),G.register(p.id_ce_subjectKeyIdentifier,qe),G.register(p.id_ce_authorityKeyIdentifier,Ue),G.register(p.id_ce_subjectAltName,Je),G.register(p.id_ce_cRLDistributionPoints,Xe),G.register(p.id_pe_authorityInfoAccess,Ze),rt.register(_.id_pkcs9_at_challengePassword,tt),rt.register(_.id_pkcs9_at_extensionRequest,nt),l.container.registerSingleton(it,at),l.container.registerSingleton(it,ct),ct.namedCurveSize.set(`P-256`,32),ct.namedCurveSize.set(`K-256`,32),ct.namedCurveSize.set(`P-384`,48),ct.namedCurveSize.set(`P-521`,66),e.AlgorithmProvider=y,e.AsnData=ye,e.AsnDefaultSignatureFormatter=at,e.AsnEcSignatureFormatter=ct,e.Attribute=et,e.AttributeFactory=rt,e.AuthorityInfoAccessExtension=Ze,e.AuthorityKeyIdentifierExtension=Ue,e.BasicConstraintsExtension=We,e.CRLDistributionPointsExtension=Xe,e.CertificatePolicyExtension=Ye,e.ChallengePasswordAttribute=tt,e.CryptoProvider=Se,e.DefaultAlgorithmSerializer=_e,e.ExtendedKeyUsageExtension=Ge,e.Extension=be,e.ExtensionFactory=G,e.ExtensionsAttribute=nt,e.GeneralName=Re,e.GeneralNames=ze,e.KeyUsagesExtension=Ke,e.Name=V,e.NameIdentifier=Te,e.OidSerializer=R,e.PemConverter=U,e.Pkcs10CertificateRequest=pt,e.Pkcs10CertificateRequestGenerator=mt,e.PublicKey=Ve,e.SubjectAlternativeNameExtension=Je,e.SubjectKeyIdentifierExtension=qe,e.TextConverter=ve,e.TextObject=L,e.X509Certificate=ht,e.X509CertificateGenerator=vt,e.X509Certificates=gt,e.X509ChainBuilder=_t,e.X509Crl=bt,e.X509CrlEntry=yt,e.X509CrlGenerator=xt,e.cryptoProvider=z,e.diAlgorithm=v,e.diAlgorithmProvider=b,e.diAsnSignatureFormatter=it,e.idEd25519=dt,e.idEd448=ft,e.idX25519=lt,e.idX448=ut}));De(),ca();var la;(function(e){e.Der=`der`,e.Raw=`raw`})(la||={});const ua=typeof window<`u`&&window.document!==void 0&&typeof crypto<`u`&&crypto.subtle!==void 0,da=typeof process<`u`&&process.versions!=null&&process.versions.node!=null,fa=()=>ua?`browser`:da?`node`:`purejs`,pa=async(e,t)=>{let n=t??fa();switch(n){case`browser`:return(await import(`./webcrypto-BeKbrVgs.mjs`)).signWithApiKey(e);case`node`:return(await import(`./nodecrypto-BSdTIm8T.mjs`)).signWithApiKey(e);case`purejs`:return(await import(`./purejs-xzcexc4T.mjs`)).signWithApiKey(e);default:throw Error(`Unsupported runtime: ${n}`)}};var ma=class{constructor(e){this.apiPublicKey=e.apiPublicKey,this.apiPrivateKey=e.apiPrivateKey,this.runtimeOverride=e.runtimeOverride}async stamp(e){let t=await pa({publicKey:this.apiPublicKey,privateKey:this.apiPrivateKey,content:e},this.runtimeOverride),n={publicKey:this.apiPublicKey,scheme:`SIGNATURE_SCHEME_TK_API_P256`,signature:t};return{stampHeaderName:`X-Stamp`,stampHeaderValue:I(JSON.stringify(n))}}async sign(e,t){switch(t){case la.Raw:{let t=await pa({publicKey:this.apiPublicKey,privateKey:this.apiPrivateKey,content:e},this.runtimeOverride),n=Te(t);return s(n)}case la.Der:return pa({publicKey:this.apiPublicKey,privateKey:this.apiPrivateKey,content:e},this.runtimeOverride);default:throw Error(`Unsupported signature format: ${t}`)}}},ha=class extends Error{constructor(e){super(e),this.name=`InvalidKeyError`}};function ga(){let e=p(`prime256v1`);return e.generateKeys(),va(e.getPrivateKey().toString(`hex`).padStart(64,`0`))}const _a=/^[0-9a-f]{64}$/i;function va(e){if(!_a.test(e))throw new ha(`P-256 private key must be 64 hex characters`);let t=e.toLowerCase(),n=p(`prime256v1`);try{n.setPrivateKey(Buffer.from(t,`hex`))}catch{throw new ha(`value is not a valid P-256 private key (scalar out of range)`)}return{algorithm:`p256`,privateKeyHex:t,publicKeyHex:n.getPublicKey(`hex`,`compressed`)}}function ya(e){try{let t=f.convertKey(e,`prime256v1`,`hex`,`hex`,`uncompressed`),n=Buffer.isBuffer(t)?t:Buffer.from(t,`hex`);return n.length===65?n:null}catch{return null}}function ba(e){let t=ya(e);if(t===null)throw new ha(`value is not a valid P-256 public key`);return xa(t)}function xa(e){let t=e.subarray(1,33).toString(`base64url`),n=e.subarray(33,65).toString(`base64url`);return m(`sha256`).update(`{"crv":"P-256","kty":"EC","x":"${t}","y":"${n}"}`,`utf8`).digest(`base64url`)}const Sa=/^https?:\/\/[\x21\x23-\x7e]{1,255}$/,Ca=/^[\x21\x23-\x3a\x3c-\x7e]{1,128}$/;function wa(e,t){return`${e.replace(/\/+$/,``)}/agent-keys/${t}`}function Ta(e){let t=Ea(e.keypair),n={...t,identityUrl:Da(e.identityUrl??wa(e.baseUrl,t.keyId))};return{sign:async e=>{let t=new Uint8Array(await e.clone().arrayBuffer()),r=Oa(n,{method:e.method,url:e.url,body:t},{nonce:g(16).toString(`base64url`),createdAt:new Date}),i=new Headers(e.headers);for(let[e,t]of Object.entries(r))i.set(e,t);return new Request(e,{headers:i})}}}function Ea(e){let t=ya(e.publicKeyHex);if(t===null)throw Error(`signer keypair has an invalid P-256 public key`);return{signingKey:Ma(t,e.privateKeyHex),keyId:xa(t)}}function Da(e){if(!Sa.test(e))throw Error(`identity URL is outside the signature profile: "${e}"`);return e}function Oa(e,t,n){if(!Ca.test(n.nonce))throw Error(`nonce is outside the signature profile`);let r=ka(t.body),i=`"${e.identityUrl}"`,a=`("@method" "@target-uri" "content-digest" "signature-agent");created=${Math.floor(n.createdAt.getTime()/1e3)};keyid="${e.keyId}";nonce="${n.nonce}";alg="ecdsa-p256-sha256"`,o=[`"@method": ${t.method.toUpperCase()}`,`"@target-uri": ${Aa(new URL(t.url))}`,`"content-digest": ${r}`,`"signature-agent": ${i}`,`"@signature-params": ${a}`].join(`
136
+ `),s=_(`sha256`,Buffer.from(o,`utf8`),{key:e.signingKey,dsaEncoding:`ieee-p1363`});return{"Content-Digest":r,"Signature-Agent":i,"Signature-Input":`sig=${a}`,Signature:`sig=:${s.toString(`base64`)}:`}}function ka(e){return`sha-256=:${m(`sha256`).update(e??``).digest(`base64`)}:`}function Aa(e){return`${e.protocol}//${ja(e)}${e.pathname}${e.search}`}function ja(e){let t=e.host.toLowerCase();return e.protocol===`https:`&&e.port===`443`||e.protocol===`http:`&&e.port===`80`?e.hostname.toLowerCase():t}function Ma(e,t){return h({key:{kty:`EC`,crv:`P-256`,d:Buffer.from(t,`hex`).toString(`base64url`),x:e.subarray(1,33).toString(`base64url`),y:e.subarray(33,65).toString(`base64url`)},format:`jwk`})}var Na=`0.1.0`;const Pa=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/,Fa=Na;function Ia(e,t){if(!Pa.test(e))throw Error(`${t} must be a valid HTTP token`)}function La(e,t){let n=!1;for(let t=0;t<e.length;t+=1){let r=e.charCodeAt(t);if(r<32||r===127||r>255){n=!0;break}}if(n||/[()\\]/.test(e))throw Error(`${t} must not contain parentheses, backslashes, control characters, or characters outside Latin-1`)}function Ra(e){let t=`catena-agent-client/${Fa}`;if(!e)return t;Ia(e.name,`appInfo.name`),e.version!==void 0&&Ia(e.version,`appInfo.version`),e.url!==void 0&&La(e.url,`appInfo.url`);let n=e.version===void 0?e.name:`${e.name}/${e.version}`;return`${e.url===void 0?n:`${n} (${e.url})`} ${t}`}const za=d.object({paymentCredential:d.object({protocol:d.picklist([`mpp`,`x402`]),value:d.string()})});function Ba(e,t){let n=d.safeParse(za,e);return n.success&&n.output.paymentCredential.protocol===t?n.output.paymentCredential.value:void 0}const Va=`offer-receipt`,Ha=8192,Ua=d.pipe(d.string(),d.maxLength(Ha),d.regex(/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/,`Expected a JWS compact serialization`)),Wa=d.optional(d.pipe(d.number(),d.integer(),d.minValue(0))),Ga=d.pipe(d.string(),d.regex(/^0x[0-9a-fA-F]{130}$/,`Expected a 65-byte hex signature`)),Ka=d.variant(`format`,[d.looseObject({format:d.literal(`eip712`),acceptIndex:Wa,payload:d.record(d.string(),d.unknown()),signature:Ga}),d.looseObject({format:d.literal(`jws`),acceptIndex:Wa,signature:Ua})]),qa=d.variant(`format`,[d.looseObject({format:d.literal(`eip712`),payload:d.record(d.string(),d.unknown()),signature:Ga}),d.looseObject({format:d.literal(`jws`),signature:Ua})]),Ja=d.object({[Va]:d.object({info:d.object({offers:d.array(d.unknown())})})}),Ya=d.object({[Va]:d.object({info:d.object({receipt:d.unknown()})})}),Xa=d.looseObject({version:d.literal(1),resourceUrl:d.pipe(d.string(),d.maxLength(2048)),scheme:d.pipe(d.string(),d.maxLength(64)),network:d.pipe(d.string(),d.maxLength(64)),asset:d.pipe(d.string(),d.maxLength(128)),payTo:d.pipe(d.string(),d.maxLength(128)),amount:d.pipe(d.string(),d.regex(/^\d+$/),d.maxLength(78)),validUntil:d.optional(d.pipe(d.number(),d.integer(),d.minValue(0)))});function Za(e){let t=e.replaceAll(`-`,`+`).replaceAll(`_`,`/`),n=Uint8Array.from(atob(t),e=>e.charCodeAt(0));return JSON.parse(new TextDecoder().decode(n))}function Qa(e){if(e.format===`eip712`){let t=d.safeParse(Xa,e.payload);return t.success?t.output:void 0}let t=e.signature.split(`.`)[1];try{let e=d.safeParse(Xa,Za(t));return e.success?e.output:void 0}catch{return}}function $a(e,t){return e.toLowerCase()===t.toLowerCase()}function eo(e,t){return e.scheme===t.scheme&&e.network===t.network&&$a(e.asset,t.asset)&&$a(e.payTo,t.payTo)&&e.amount===t.amount}function to(e){return new TextEncoder().encode(JSON.stringify(e)).length<=Ha}function no(e,t){let n=d.safeParse(Ja,e);if(n.success)for(let e of n.output[Va].info.offers){let n=d.safeParse(Ka,e);if(!n.success)continue;let r=Qa(n.output);if(r!==void 0&&eo(r,t)&&to(n.output))return n.output}}function ro(e){let t=d.safeParse(Ya,e);if(!t.success)return;let n=d.safeParse(qa,t.output[Va].info.receipt);if(n.success&&to(n.output))return n.output}const io=d.pipe(d.string(),d.regex(/\S/,`Response enum values must not be blank`));function ao(e){return io}const oo=d.object({amount:d.string(),asset_id:d.string()}),so=d.pipe(d.string(),d.isoTimestamp()),co=d.object({success:d.literal(!0)}),lo=d.object({id:d.string(),name:d.string(),status:d.string(),organizationId:d.string()}),uo=d.object({agent:lo}),fo=[`per_transaction_amount`,`daily_amount`,`weekly_amount`,`monthly_amount`,`hourly_count`,`daily_count`],po=d.object({id:d.string(),ruleType:ao(fo),thresholdAmount:d.optional(oo),thresholdCount:d.optional(d.number()),action:ao([`block`,`require_approval`]),requiredApprovals:d.number(),accountAggregationScope:ao([`per_account`,`across_accounts`]),actorAggregationScope:ao([`per_agent`,`per_policy`]),displayOrder:d.number()}),mo=d.object({id:d.string(),organizationId:d.string(),policyId:d.string(),capability:ao([`query_balance`,`read`,`send`,`transfer`]),accountId:d.string(),rules:d.array(po),createdAt:so,updatedAt:so}),ho=[`allow`,`block`,`require_approval`],go=[`open`,`restricted`],_o=ao(ho),vo=d.object({mode:ao(go),allowedCounterparties:d.optional(d.array(d.string())),createAction:d.optional(_o),requestPaymentDetailsAction:d.optional(_o),allowCreate:d.optional(d.boolean())}),yo=d.object({id:d.optional(d.string()),description:d.optional(d.string()),version:d.optional(d.number()),name:d.string(),capabilities:d.array(d.string()),counterpartyRules:d.optional(vo),policyCapabilities:d.array(mo),kind:d.optional(d.picklist([`base`,`override`])),expiresAt:d.optional(d.string())}),bo=d.object({policy:yo}),xo=d.object({accounts:d.array(d.object({id:d.string(),name:d.string(),type:d.string(),currency:d.string()}))}),So=d.object({accountId:d.string(),balance:oo,balances:d.optional(d.object({total:oo,available:oo}))}),Co=[`operator-send`,`operator-transfer`,`operator-deposit`,`operator-refund`,`microdeposit`],wo=[`pending`,`processing`,`completed`,`failed`,`reversed`],To=[`initiated`,`provider_pending`,`processing`,`completed`,`failed`,`reversed`,`manual_review`],Eo=[`ach`,`wire`,`on-chain`],Do=d.object({id:d.string(),type:ao(Co),action:d.optional(d.string()),status:ao(wo),movementStatus:ao(To),direction:d.picklist([`incoming`,`outgoing`]),amount:oo,fee:oo,currency:d.string(),counterpartyName:d.optional(d.string()),method:d.optional(ao([`ach`,`wire`,`on-chain`])),memo:d.optional(d.string()),description:d.optional(d.string()),txHash:d.optional(d.string()),createdAt:so,completedAt:d.optional(so)}),Oo=d.object({accountId:d.string(),transactions:d.array(Do),total:d.number()}),ko=d.object({accountId:d.string(),address:d.string(),liquidationAddressId:d.optional(d.string()),source:ao([`wallet`,`liquidation`])}),Ao=d.object({id:d.string(),name:d.string(),status:d.optional(d.string()),rails:d.array(d.object({id:d.string(),type:d.string(),walletAddress:d.optional(d.string()),network:d.optional(d.string()),bankName:d.optional(d.string()),accountNumber:d.optional(d.string())}))}),jo=d.object({counterparties:d.array(Ao)}),Mo=d.picklist([`pending`,`processing`,`completed`,`blocked`,`failed`]),No=d.object({type:d.literal(`submit_stamp`),signingRequestId:d.string(),signer:d.object({algorithm:d.literal(`p256`),publicKeyHex:d.string()}),preparedBody:d.object({body:d.string(),bodyHash:d.string(),expiresAt:so,prepareToken:d.string()})}),Po=d.object({id:d.string(),accountId:d.optional(d.string()),type:ao([`send`,`transfer`,`create_counterparty`,`request_counterparty_details`,`x402`,`mpp`,`policy_override`]),status:Mo,reasons:d.array(d.string()),expiresAt:d.optional(d.nullable(so),null),replayed:d.optional(d.boolean(),!1),data:d.optional(d.nullable(d.record(d.string(),d.unknown())),null),metadata:d.optional(d.object({dataUrl:d.nullable(d.string())})),nextAction:d.optional(No)});function Fo(e){let{nextAction:t,...n}=e;return n}const Io=d.object({x402:d.object({paymentSignature:d.string()})});function Lo(e){let t=Ba(e,`x402`);if(t!==void 0)return t;let n=d.safeParse(Io,e);return n.success?n.output.x402.paymentSignature:void 0}const Ro=d.picklist(Eo),zo=d.object({type:d.literal(`send`),accountId:d.optional(d.pipe(d.string(),d.minLength(1))),counterpartyRailId:d.string(),amount:d.string(),method:Ro,memo:d.optional(d.string()),description:d.optional(d.string())}),Bo=d.object({type:d.literal(`transfer`),accountId:d.string(),toAccountId:d.string(),amount:d.string(),memo:d.optional(d.string()),description:d.optional(d.string())}),Vo={type:d.literal(`create_counterparty`),name:d.string()},Ho=d.union([d.object({...Vo,email:d.optional(d.string()),rail:d.nonOptional(d.unknown())}),d.object({...Vo,email:d.string()})]),Uo=d.object({type:d.literal(`request_counterparty_details`),counterpartyId:d.string(),methods:d.pipe(d.object({bank:d.boolean(),wallet:d.boolean()}),d.check(({bank:e,wallet:t})=>e||t,`Select at least one payment method to request`))}),Wo=d.looseObject({scheme:d.string(),network:d.string(),asset:d.string(),amount:d.string(),payTo:d.string(),maxTimeoutSeconds:d.number()}),Go=d.looseObject({url:d.string(),serviceName:d.fallback(d.optional(d.pipe(d.string(),d.maxLength(255))),void 0)}),Ko=d.pipe(d.string(),d.regex(/^0x[0-9a-fA-F]{40}$/,`Expected a 20-byte hex address`)),qo=d.pipe(d.string(),d.maxLength(78),d.regex(/^(0|[1-9]\d*)$/,`Expected a canonical decimal integer string`)),Jo=d.object({from:Ko,to:Ko,value:qo,validAfter:qo,validBefore:qo,nonce:d.pipe(d.string(),d.regex(/^0x[0-9a-fA-F]{64}$/,`Expected a 32-byte hex nonce`))}),Yo=d.object({type:d.literal(`x402`),accountId:d.string(),paymentRequirements:Wo,resource:d.optional(Go),authorization:d.optional(Jo),signedOffer:d.optional(Ka)}),Xo=d.object({id:d.string(),realm:d.string(),method:d.picklist([`evm`,`usdc`]),intent:d.literal(`charge`),request:d.string(),description:d.optional(d.string()),digest:d.optional(d.string()),expires:d.string(),header:d.optional(d.literal(`Payment-Authorization`)),opaque:d.optional(d.string())}),Zo=d.object({url:d.string(),serviceName:d.optional(d.string())}),Qo=d.object({type:d.literal(`mpp`),accountId:d.string(),challenge:Xo,resource:d.optional(Zo)}),$o=[`send`,`transfer`],es=d.strictObject({type:d.literal(`increase_limit`),accountId:d.pipe(d.string(),d.minLength(1)),capability:d.picklist($o),limitType:d.picklist([`per_transaction_amount`,`daily_amount`,`weekly_amount`,`monthly_amount`]),newLimit:d.strictObject({amount:d.pipe(d.string(),d.regex(/^\d+(\.\d{1,6})?$/),d.check(e=>Number(e)>0,`The amount must be greater than zero`)),assetId:d.literal(`USD`)})}),ts=d.strictObject({type:d.literal(`increase_limit`),accountId:d.pipe(d.string(),d.minLength(1)),capability:d.picklist($o),limitType:d.picklist([`hourly_count`,`daily_count`]),newLimit:d.strictObject({count:d.pipe(d.number(),d.integer(),d.minValue(1))})}),ns=d.pipe(d.array(d.union([es,ts])),d.minLength(1),d.maxLength(10),d.check(e=>new Set(e.map(e=>`${e.accountId}|${e.capability}|${e.limitType}`)).size===e.length,`Each account, capability, and limit type may appear only once`)),rs=d.object({type:d.literal(`policy_override`),operations:ns,durationSeconds:d.pipe(d.number(),d.integer(),d.minValue(60),d.maxValue(604800)),reason:d.pipe(d.string(),d.trim(),d.minLength(1),d.maxLength(280))}),is=d.union([zo,Bo,Ho,Uo,Yo,Qo,rs]);function as(e){let t=d.parse(is,e);return t.type===`send`||t.type===`transfer`?{...t,amount:{amount:t.amount,asset_id:`USD`}}:t.type===`policy_override`?{...t,schemaVersion:1}:t}const os=d.object({intent:Po});var ss=class extends Error{status;code;details;constructor(e,t,n,r){super(n?`API error ${e} [${n}]: ${t}`:`API error ${e}: ${t}`),this.name=`ApiError`,this.status=e,this.code=n,this.details=r}},cs=class extends Error{timeoutMs;constructor(e){super(`Request timed out after ${e}ms. The server may still have processed a state-changing request; follow that operation's documented recovery procedure before retrying.`),this.name=`TimeoutError`,this.timeoutMs=e}};const ls=d.object({error:d.nullish(d.string()),message:d.nullish(d.string()),code:d.nullish(d.string()),details:d.nullish(d.record(d.string(),d.unknown()))});async function us(e){let t=d.safeParse(ls,await e.json().catch(()=>void 0)),n=t.success?t.output:{};return n.error!=null&&n.message!=null?new ss(e.status,n.message,n.code??n.error,n.details??void 0):new ss(e.status,n.error??n.message??e.statusText,n.code??void 0,n.details??void 0)}async function ds(e,t){if(!e.ok)throw await us(e);return d.parse(t,await e.json())}var fs=class extends Error{intentId;outcome;constructor(e){let t=e.cause instanceof Error?e.cause.message:String(e.cause);super(e.outcome===`not-submitted`?`Intent ${e.intentId} was created but never submitted; no money moved: ${t}`:`Intent ${e.intentId} submission could not be confirmed: ${t}; poll getIntent("${e.intentId}") to a terminal status and resubmit only after blocked or failed`,{cause:e.cause}),this.name=`IntentSubmitError`,this.intentId=e.intentId,this.outcome=e.outcome}};const ps=2147483647;var ms=class{#e;#t;#n;#r;#i;#a;#o;constructor(e){let t=e.timeout===void 0?8e4:e.timeout;if(!Number.isInteger(t)||t<=0||t>ps)throw TypeError(`timeout must be a positive integer no greater than ${ps}`);this.#e=e.baseUrl??`https://api.catena.com`,this.#t=Ra(e.appInfo),this.#n=e.defaultHeaders??{},this.#r=va(e.privateKeyHex),this.#a=(e.fetch??globalThis.fetch).bind(globalThis),this.#o=t,this.#i=Ta({keypair:this.#r,baseUrl:this.#e,identityUrl:e.identityUrl})}#s(e){let t=new Headers({"Content-Type":`application/json`});for(let[e,n]of Object.entries(this.#n))t.set(e,n);for(let[n,r]of Object.entries(e??{}))t.set(n,r);return t.set(`User-Agent`,this.#t),t.delete(`Authorization`),t}async#c(e){let t=new URL(`${this.#e}/v1/agent-api${e.path}`);for(let[n,r]of Object.entries(e.query??{}))r!==void 0&&t.searchParams.set(n,r);let n=new Request(t,{method:e.method,headers:this.#s(e.headers),body:e.body===void 0?null:JSON.stringify(e.body)});return this.#i.sign(n)}async#l(e,t){return this.#u(await this.#c(e),t)}async#u(e,t){let n=new AbortController,r=new Request(e,{signal:n.signal}),i;try{let e=new Promise((e,t)=>{i=setTimeout(()=>{let e=new cs(this.#o);t(e),n.abort(e)},this.#o)}),a=this.#a(r).then(e=>ds(e,t));return await Promise.race([a,e])}finally{i!==void 0&&clearTimeout(i)}}async whoami(){return(await this.#l({method:`GET`,path:`/me`},uo)).agent}async submitFeedback(e){await this.#l({method:`POST`,path:`/feedback`,body:{body:e}},co)}async getPolicy(){return(await this.#l({method:`GET`,path:`/policy`},bo)).policy}async listAccounts(){return this.#l({method:`GET`,path:`/accounts`},xo)}async getAccountBalance(e){return this.#l({method:`GET`,path:`/accounts/${encodeURIComponent(e)}/balance`},So)}async listAccountTransactions(e,t={}){return this.#l({method:`GET`,path:`/accounts/${encodeURIComponent(e)}/transactions`,query:{start:t.start,end:t.end,limit:t.limit?.toString(),offset:t.offset?.toString()}},Oo)}async getAccountDepositAddress(e,t){return this.#l({method:`GET`,path:`/accounts/${encodeURIComponent(e)}/deposit-address`,query:{network:t.network,asset:t.asset}},ko)}async listCounterparties(e={}){return this.#l({method:`GET`,path:`/counterparties`,query:{address:e.address,network:e.network}},jo)}async submitIntent(e){let t=await this.#d({...e,idempotencyKey:e.idempotencyKey??crypto.randomUUID()}),n=t.nextAction;if(!n)return Fo(t);let r;try{let e=await this.#f(n);r=await this.#c({method:`POST`,path:`/intents/${encodeURIComponent(t.id)}/submit-stamp`,body:{preparedBody:n.preparedBody,stamp:e}})}catch(e){throw new fs({intentId:t.id,outcome:`not-submitted`,cause:e})}try{return await this.#p(r,t.replayed)}catch(e){throw new fs({intentId:t.id,outcome:`unknown`,cause:e})}}async#d(e){return this.#l({method:`POST`,path:`/intents`,body:{action:as(e.action)},headers:{"Idempotency-Key":e.idempotencyKey}},Po)}async#f(e){if(e.signer.publicKeyHex.toLowerCase()!==this.#r.publicKeyHex.toLowerCase())throw Error(`Local signer public key does not match requested signer ${e.signer.publicKeyHex}; linked credential has ${this.#r.publicKeyHex}`);let t=await new ma({apiPublicKey:this.#r.publicKeyHex,apiPrivateKey:this.#r.privateKeyHex}).stamp(e.preparedBody.body);return{publicKeyHex:this.#r.publicKeyHex,stampHeaderName:t.stampHeaderName,stampHeaderValue:t.stampHeaderValue}}async#p(e,t){let n=Fo((await this.#u(e,os)).intent);return t?{...n,replayed:!0}:n}async getIntent(e){return Fo(await this.#l({method:`GET`,path:`/intents/${encodeURIComponent(e)}`},Po))}async unlinkAgent(){await this.#l({method:`POST`,path:`/unlink`},co)}async reportSettlement(e){await this.#l({method:`POST`,path:`/intents/${encodeURIComponent(e.intentId)}/settlement-report`,body:{txHash:e.txHash,...e.receipt!==void 0&&{receipt:e.receipt}}},co)}};function hs(e={}){let t=e.privateKeyHex===void 0?process.env.CATENA_SECRET_KEY:e.privateKeyHex;if(t===void 0)throw new ha(`privateKeyHex is required; pass it explicitly or set CATENA_SECRET_KEY`);return new ms({...e,privateKeyHex:t})}function gs(e){let t=se(e);return e instanceof ss&&e.details!==void 0?`${t}\nDetails:\n${JSON.stringify(e.details,null,2)}`:t}function X(e){console.error(gs(e)),process.exit(1)}const _s=d.string(),vs=d.boolean();function ys(e){return e===void 0}function bs(e){return e.issues?.[0]?.message??`Invalid value`}function xs(e,t,n,r){return X(`${e}: ${t}${r?` (got: ${String(n)})`:``}`)}function Ss(e,t,n,r){let i=d.safeParse(e,t);return i.success?i.output:xs(n,bs(i),t,r)}function Cs(e,t){let n=t.schema??_s;return{type:e,description:t.description,negativeDescription:t.negativeDescription,required:t.required,default:t.default,parseValue(e,r){let i=ys(e)?t.default:e;if(ys(i)){t.required===!0&&X(`${r} is required`);return}return Ss(n,i,r,t.showValueInError===!0)}}}function Z(e){return Cs(`string`,e)}function ws(e){return Cs(`positional`,e)}function Ts(e){let t=e.schema??_s;return{type:`string`,description:e.description,repeatable:!0,parseValue(n,r){return(Array.isArray(n)?n:[]).map(n=>Ss(t,n,r,e.showValueInError===!0))}}}function Es(e){return{type:`boolean`,description:e.description,negativeDescription:e.negativeDescription,required:e.required,default:e.default,parseValue(t,n){let r=ys(t)?e.default:t;if(ys(r)){e.required===!0&&X(`${n} is required`);return}return Ss(vs,r,n,!1)}}}function Ds(e){return Os(`string`,e)}function Os(e,t){return Cs(e,{description:t.description,required:t.required,default:t.default,schema:d.picklist(t.choices,`must be one of ${t.choices.join(`|`)}`),showValueInError:!0})}function ks(e,t){return t.type===`positional`?`<${e}>`:`--${e}`}function As(e){return e.replace(/([a-z])([A-Z])/g,`$1 $2`).replace(/([A-Z0-9])([A-Z][a-z])/g,`$1 $2`).split(/[ _-]/).filter(e=>e.length>0)}function js(e){return As(e).join(`-`).toLowerCase()}function Ms(e){return As(e).map((e,t)=>t===0?e.charAt(0).toLowerCase()+e.slice(1):e.charAt(0).toUpperCase()+e.slice(1)).join(``)}function Ns(e){return[`--${e}`,`--${js(e)}`,`--${Ms(e)}`]}function Ps(e){let t=e.indexOf(`=`);return t===-1?[e,void 0]:[e.slice(0,t),e.slice(t+1)]}function Fs(e,t,n){let r=e.indexOf(`--`),i=r===-1?e.length:r,a=[...e.slice(0,i).filter(e=>!e.startsWith(`--no-`)),...e.slice(i)],o=new Set(Ns(t)),s=new Set(Object.entries(n).filter(([e,n])=>e!==t&&n.type===`string`).flatMap(([e])=>Ns(e))),c=[];for(let e=0;e<a.length;e++){let t=a[e];if(t===`--`)break;let[n,r]=Ps(t);if(o.has(n)){r===void 0?(c.push(a[e+1]??``),e++):c.push(r);continue}s.has(n)&&r===void 0&&e++}return c}function Is(e){let t=e.required??(e.type!==`positional`&&void 0);return e.type===`boolean`?{type:e.type,description:e.description,negativeDescription:e.negativeDescription,required:t,default:typeof e.default==`boolean`?e.default:void 0}:{type:e.type,description:e.description,required:t,default:typeof e.default==`string`?e.default:void 0}}function Q(e){return{args:Object.fromEntries(Object.entries(e).map(([e,t])=>[e,Is(t)])),label(t){return ks(t,e[t])},parse(t,n){let r=(r,i)=>{if(i.repeatable!==!0)return t[r];if(n===void 0)throw Error(`parse() needs the command's raw argv to collect the repeatable --${r} flag`);return Fs(n,r,e)};return Object.fromEntries(Object.entries(e).map(([e,t])=>[e,t.parseValue(r(e,t),ks(e,t))]))}}}const Ls=Z({description:`Credential profile name`}),Rs=Es({description:`Print compact single-line JSON (for piping)`,default:!1}),zs=/^[a-zA-Z0-9_-]+$/,Bs=d.pipe(d.string(`ID must be a string`),d.minLength(1,`ID must not be empty`),d.maxLength(256,`ID is too long (max 256 characters)`),d.regex(zs,`ID may only contain letters, digits, hyphens, and underscores`));d.picklist([`base`,`base-sepolia`,`arc`,`solana`]),d.picklist([`usdc`]),d.picklist([`evm`,`svm`]);const Vs=/^0x[0-9a-fA-F]{40}$/;d.pipe(d.string(),d.trim(),d.regex(Vs,`Must be a 0x-prefixed hex wallet address`),d.brand(`EvmAddress`)),d.picklist([`always`,`testnet`,`preview`]),d.picklist([`bridge-internal-transfer`,`bridge-wallet-transfer`,`wallet-bridge-transfer`,`wallet-wallet-transfer`]);const Hs=[`bridge-internal-transfer`,`bridge-wallet-transfer`,`wallet-bridge-transfer`,`wallet-wallet-transfer`],Us=[`wallet-wallet-transfer`],Ws=[{network:`base`,networkLabel:`Base`,addressFamily:`evm`,blockExplorerUrl:`https://basescan.org`,blockExplorerName:`Basescan`,asset:`usdc`,assetLabel:`USDC`,assetDecimals:6,contractAddress:`0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913`,caip2:`eip155:8453`,caip19:`eip155:8453/erc20:0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913`,finality:`finalized`,gasTokenIsTrackedAsset:!1,availabilityGate:`always`,customerAccess:`enabled`,chainFeeUsd:`0`,walletTransferFeeUsd:`0`,transferRoutes:Hs,provider:{alchemyNetwork:`base`,alchemyDeposit:{transferEmitterAddress:`0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913`,transferDecimals:6,webhook:`enabled`},bridgePaymentRail:`base`}},{network:`base-sepolia`,networkLabel:`Base Sepolia`,addressFamily:`evm`,isTestnet:!0,blockExplorerUrl:`https://sepolia.basescan.org`,blockExplorerName:`Sepolia Basescan`,asset:`usdc`,assetLabel:`USDC`,assetDecimals:6,contractAddress:`0x036CbD53842c5426634e7929541eC2318f3dCF7e`,caip2:`eip155:84532`,caip19:`eip155:84532/erc20:0x036CbD53842c5426634e7929541eC2318f3dCF7e`,finality:`finalized`,gasTokenIsTrackedAsset:!1,availabilityGate:`testnet`,customerAccess:`enabled`,chainFeeUsd:`0`,walletTransferFeeUsd:`0`,transferRoutes:Us,provider:{alchemyNetwork:`base-sepolia`,alchemyDeposit:{transferEmitterAddress:`0x036CbD53842c5426634e7929541eC2318f3dCF7e`,transferDecimals:6,webhook:`enabled`}}},{network:`arc`,networkLabel:`Arc`,addressFamily:`evm`,blockExplorerUrl:`https://arc-scan.org`,blockExplorerName:`ArcScan`,asset:`usdc`,assetLabel:`USDC`,assetDecimals:6,contractAddress:`0x3600000000000000000000000000000000000000`,caip2:`eip155:5042`,caip19:`eip155:5042/erc20:0x3600000000000000000000000000000000000000`,finality:`block-inclusion`,gasTokenIsTrackedAsset:!0,availabilityGate:`preview`,customerAccess:`enabled`,chainFeeUsd:`0`,walletTransferFeeUsd:`0`,transferRoutes:Us,provider:{alchemyNetwork:`arc`,alchemyDeposit:{transferEmitterAddress:`0xfffffffffffffffffffffffffffffffffffffffe`,transferDecimals:18,webhook:`disabled`},sendMode:`self-broadcast`}},{network:`solana`,networkLabel:`Solana`,addressFamily:`svm`,blockExplorerUrl:`https://solscan.io`,blockExplorerName:`Solscan`,asset:`usdc`,assetLabel:`USDC`,assetDecimals:6,contractAddress:`EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v`,caip2:`solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp`,caip19:`solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp/token:EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v`,finality:`finalized`,gasTokenIsTrackedAsset:!1,availabilityGate:`preview`,customerAccess:`enabled`,chainFeeUsd:`0`,walletTransferFeeUsd:`0`,transferRoutes:Hs,provider:{alchemyNotify:{webhook:`enabled`},bridgePaymentRail:`solana`}}];function Gs(e){if(typeof e==`object`&&e&&!Object.isFrozen(e)){for(let t of Object.values(e))Gs(t);Object.freeze(e)}}Gs(Ws);const Ks=Ws;function qs(e){return{id:e.network,label:e.networkLabel,addressFamily:e.addressFamily,blockExplorerUrl:e.blockExplorerUrl,blockExplorerName:e.blockExplorerName,...e.isTestnet?{isTestnet:!0}:{}}}function Js(e){return{id:e.asset,label:e.assetLabel,decimals:e.assetDecimals}}function Ys(e){return{network:e.network,asset:e.asset,contractAddress:e.contractAddress}}function Xs(e){return{id:`${e.network}-usdc`,label:`${e.networkLabel} USDC`,network:e.network,asset:`usdc`}}function Zs(e){let t=[];for(let n of e)t.some(e=>e.id===n.network)||t.push(qs(n));return t}function Qs(e){let t=[],n=new Set;for(let r of e)n.has(r.asset)||(n.add(r.asset),t.push(Js(r)));return t}function $s(e){return e.asset===`usdc`}const ec=Zs(Ks);Qs(Ks),Ks.map(Ys),Ks.filter($s).map(Xs);function tc(e,t){return`${e}:${t}`}new Map(Ks.map(e=>[tc(e.network,e.asset),e])),new Map(ec.map(e=>[e.id,e]));const nc=[`base`,`base-sepolia`],rc=[`usdc`],ic=`base`,ac=d.pipe(d.string(),d.trim(),d.guard(e=>Vs.test(e),`Must be a 0x-prefixed hex wallet address`));function oc(e){return Ds({description:e.description,choices:nc,...e.default===void 0?{}:{default:e.default}})}const sc=[`registered`,`already_registered`,`not_applicable`,`registration_failed`],cc=d.pipe(d.string(),d.regex(/^0[23][0-9a-f]{64}$/)),lc=d.pipe(d.string(),d.regex(/^[0-9a-f]{64}$/)),uc=d.object({status:d.picklist(sc),publicKeyHex:d.optional(cc),reason:d.optional(d.string())}),dc=d.object({algorithm:d.literal(`p256`),privateKeyHex:lc,publicKeyHex:cc,registration:uc}),fc=d.object({version:d.literal(`signer-1`),signer:dc}),pc=d.object({version:d.literal(1),refreshToken:d.pipe(d.string(),d.minLength(1)),sessionToken:d.pipe(d.string(),d.minLength(1)),expiresAt:d.pipe(d.string(),d.isoTimestamp())}),mc=d.object({version:d.literal(2),refreshToken:d.pipe(d.string(),d.minLength(1)),sessionToken:d.pipe(d.string(),d.minLength(1)),expiresAt:d.pipe(d.string(),d.isoTimestamp()),signer:dc}),hc=d.object({version:d.literal(3),signer:dc}),gc=d.variant(`version`,[pc,mc,hc]),_c=d.variant(`version`,[fc,pc,mc,hc]);function vc(e){return d.parse(gc,e)}function yc(e){return d.parse(_c,e)}function bc(e){let t=d.safeParse(_c,e);return t.success?t.output:null}function xc(e){return{version:`signer-1`,signer:{algorithm:e.algorithm,privateKeyHex:e.privateKeyHex,publicKeyHex:e.publicKeyHex,registration:{status:`not_applicable`,reason:`pending_claim`}}}}function Sc(e,t){try{return yc(JSON.parse(e))}catch(e){throw Error(`${t} credential has an unsupported format`,{cause:e})}}function Cc(e){return vc({version:3,signer:e})}function wc(e){return JSON.stringify(e)}function Tc(e,t){return JSON.stringify(e)===JSON.stringify(t)}function Ec(e){return(t,n)=>Dc(e,t,n)}function Dc(e,t,n){return new Promise((r,i)=>{let a=y(e,[...t],{stdio:[`pipe`,`pipe`,`pipe`]}),o=[],s=[],c=!1,l=!1,u=null,d=null,f=null,p=e=>{c||(c=!0,d!==null&&clearTimeout(d),f!==null&&clearTimeout(f),r(e))},m=e=>{c||(c=!0,d!==null&&clearTimeout(d),f!==null&&clearTimeout(f),i(e))};d=setTimeout(()=>{l=!0,a.kill(`SIGTERM`),f=setTimeout(()=>{a.kill(`SIGKILL`),p({stdout:o.join(``),stderr:s.join(``),status:124})},1e3)},3e4),a.stdout.setEncoding(`utf8`),a.stderr.setEncoding(`utf8`),a.stdout.on(`data`,e=>o.push(e)),a.stderr.on(`data`,e=>s.push(e)),a.on(`error`,t=>{m(Error(`Unable to run ${e}: ${t.message}`))}),a.on(`close`,t=>{if(u!==null&&t===0){m(Error(`Unable to write to ${e} stdin: ${u.message}`));return}p({stdout:o.join(``),stderr:s.join(``),status:l?124:t})}),a.stdin.on(`error`,e=>{u=e});try{a.stdin.end(n)}catch(t){m(t instanceof Error?Error(`Unable to write to ${e} stdin: ${t.message}`):Error(`Unable to write to ${e} stdin`))}})}const Oc=`catena-agent`;function kc(e){if(!zs.test(e))throw Error(`Invalid credential location for credential storage: "${e}"`);return e}const Ac=Ec(`/usr/bin/secret-tool`);function jc(e){return e.status===1&&e.stdout===``&&e.stderr.trim()===``}function Mc(e,t){if(t.status===0)return;let n=Nc(t);throw Error(`Linux Secret Service credential ${e} failed (secret-tool exited ${t.status??`without status`}): ${n}`)}function Nc(e){let t=e.stderr.toLowerCase();return e.status===124?`secret service operation timed out`:t.includes(`cannot autolaunch`)||t.includes(`dbus`)||t.includes(`d-bus`)||t.includes(`org.freedesktop.secrets`)?`secret service session is unavailable`:/\blocked\b/.test(t)?`secret service keyring appears to be locked`:t.includes(`authorization`)||t.includes(`denied`)||t.includes(`not authorized`)?`secret service authorization was denied`:`secret service operation failed; ensure the Secret Service session is available and unlocked`}function Pc(e){return e instanceof Error?e.message.includes(`ENOENT`)?Error(`Linux Secret Service credential operation failed: /usr/bin/secret-tool was not found. Install libsecret-tools and ensure a Secret Service keyring is available.`,{cause:e}):e:Error(String(e))}var Fc=class{runSecretTool;constructor(e={}){if((e.platform??process.platform)!==`linux`)throw Error(`Linux Secret Service credential storage is only supported on Linux`);this.runSecretTool=e.runSecretTool??Ac}async save(e,t){let n=yc(t),r=kc(e);if(await this.savePassword(r,wc(n)),!Tc(await this.resolveDirectPassword(r),n))throw Error(`Linux Secret Service credential save verification failed`)}async resolve(e){return this.resolveDirectPassword(kc(e))}async delete(e){await this.deletePassword(kc(e))}async savePassword(e,t){Mc(`save`,await this.runSecretToolCommand([`store`,`--label`,`${Oc} ${e}`,`app`,Oc,`account`,e],t))}async resolvePassword(e){let t=await this.runSecretToolCommand([`lookup`,`app`,Oc,`account`,e]);return jc(t)?null:(Mc(`resolve`,t),t.stdout.replace(/\r?\n$/,``))}async resolveDirectPassword(e){let t=await this.resolvePassword(e);return t===null?null:Sc(t,`Linux Secret Service`)}async deletePassword(e){let t=await this.runSecretToolCommand([`clear`,`app`,Oc,`account`,e]);jc(t)||Mc(`delete`,t)}async runSecretToolCommand(e,t){try{return await this.runSecretTool(e,t)}catch(e){throw Pc(e)}}};const Ic=Ec(`/usr/bin/security`),Lc=d.object({version:d.literal(1),encoding:d.literal(`base64-json`),chunks:d.pipe(d.number(),d.integer(),d.minValue(1),d.maxValue(64)),sha256:d.pipe(d.string(),d.regex(/^[a-f0-9]{64}$/))});function Rc(e){return e.status===44}function zc(e,t){return`${e}:chunk:${t}`}function Bc(e){let t=JSON.parse(e),n=bc(t);if(n!==null)return{kind:`direct`,payload:n};let r=d.safeParse(Lc,t);if(r.success)return{kind:`legacy`,manifest:r.output};throw Error(`macOS Keychain credential has an unsupported format`)}function Vc(e,t){if(t.status===0)return;let n=Hc(t);throw Error(`macOS Keychain credential ${e} failed (security exited ${t.status??`without status`})${n===null?``:`: ${n}`}`)}function Hc(e){let t=e.stderr.toLowerCase();return e.status===124?`keychain operation timed out`:t.includes(`stdin isn't a terminal`)?`parent process has no terminal`:t.includes(`user interaction is not allowed`)?`keychain user interaction is not allowed`:t.includes(`authorization`)||t.includes(`denied`)?`keychain authorization was denied`:t.includes(`locked`)?`keychain appears to be locked`:null}function Uc(e){for(let t=0;t<e.length;t++){let n=e.charCodeAt(t);if(n<32||n===127)throw Error(`macOS Keychain credential values cannot contain control characters`)}return`"${e.replace(/\\/g,`\\\\`).replace(/"/g,`\\"`)}"`}function Wc(e,t){return[`add-generic-password`,`-s`,Uc(Oc),`-a`,Uc(e),`-w`,Uc(t),`-U`].join(` `)+`
137
+ `}var Gc=class{runSecurity;constructor(e={}){if((e.platform??process.platform)!==`darwin`)throw Error(`macOS Keychain credential storage is only supported on macOS`);this.runSecurity=e.runSecurity??Ic}async save(e,t){let n=yc(t),r=kc(e),i=await this.resolveLegacyChunkCount(r,64);if(await this.savePassword(r,wc(n)),!Tc(await this.resolveDirectPassword(r),n))throw Error(`macOS Keychain credential save verification failed`);await this.deleteChunks(r,i)}async resolve(e){let t=kc(e),n=await this.resolveKeychainItem(t);return n===null?null:n.kind===`direct`?n.payload:this.resolveLegacyPayload(t,n.manifest)}async delete(e){let t=kc(e),n=await this.resolveLegacyChunkCount(t,64);await this.deleteChunks(t,n),await this.deletePassword(t)}async savePassword(e,t){Vc(`save`,await this.runSecurity([`-i`],Wc(e,t)))}async resolvePassword(e){let t=await this.runSecurity([`find-generic-password`,`-a`,e,`-s`,Oc,`-w`]);return Rc(t)?null:(Vc(`resolve`,t),t.stdout.replace(/\r?\n$/,``))}async resolveKeychainItem(e){let t=await this.resolvePassword(e);return t===null?null:Bc(t)}async resolveDirectPassword(e){let t=await this.resolveKeychainItem(e);if(t===null)return null;if(t.kind!==`direct`)throw Error(`macOS Keychain credential direct verification failed`);return t.payload}async resolveLegacyPayload(e,t){let n=[];for(let r=0;r<t.chunks;r++){let t=await this.resolvePassword(zc(e,r));if(t===null)throw Error(`macOS Keychain credential chunk is missing`);n.push(t)}let r=n.join(``);if(m(`sha256`).update(r).digest(`hex`)!==t.sha256)throw Error(`macOS Keychain credential checksum mismatch`);return yc(JSON.parse(Buffer.from(r,`base64`).toString(`utf8`)))}async resolveLegacyChunkCount(e,t){let n=await this.resolvePassword(e);if(n===null)return 0;try{let e=Bc(n);return e.kind===`legacy`?e.manifest.chunks:0}catch{return t}}async deleteChunks(e,t){for(let n=0;n<t;n++)await this.deletePassword(zc(e,n))}async deletePassword(e){let t=await this.runSecurity([`delete-generic-password`,`-a`,e,`-s`,Oc]);Rc(t)||Vc(`delete`,t)}};function Kc(e={}){let t=e.platform??process.platform;if(t===`darwin`)return new Gc({platform:t});if(t===`linux`)return new Fc({platform:t});throw Error(`Catena credential storage is only supported on macOS and Linux`)}const qc=/^127(?:\.(?:25[0-5]|2[0-4]\d|1?\d?\d)){3}$/;function Jc(e){let t=e.replace(/^\[|\]$/g,``);return t===`localhost`||t===`::1`||qc.test(t)}function Yc(e){let t;try{t=new URL(e)}catch{return!1}return t.protocol===`https:`||t.protocol===`http:`&&Jc(t.hostname)}function Xc(e,t){if(!Yc(e))throw Error(`${t} must be an https:// URL (http:// is allowed only for a loopback host): "${e}"`)}const Zc=/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$/,Qc=d.object({status:d.optional(d.literal(`linked`),`linked`),bank_url:d.pipe(d.string(),d.minLength(1)),agent_id:d.pipe(d.string(),d.minLength(1)),client_instance_id:d.pipe(d.string(),d.regex(zs))}),$c=d.object({status:d.literal(`pending_connection`),bank_url:d.pipe(d.string(),d.minLength(1)),client_instance_id:d.pipe(d.string(),d.regex(zs)),created_at:d.pipe(d.string(),d.isoTimestamp())}),el=d.variant(`status`,[Qc,$c]);d.object({version:d.literal(1),default_profile:d.optional(d.string()),profiles:d.record(d.string(),el),directories:d.optional(d.record(d.string(),d.string()))});const tl=d.object({version:d.literal(1),default_profile:d.optional(d.string()),profiles:d.record(d.string(),d.unknown()),directories:d.optional(d.record(d.string(),d.unknown()))});function nl(){return te(process.env.HOME??ee(),`.catena`)}function rl(){return te(nl(),`profiles.json`)}function il(e){return Zc.test(e)}function al(e){if(!il(e))throw Error(`invalid profile name "${e}" (expected [a-zA-Z0-9][a-zA-Z0-9._-]{0,63})`)}function ol(e){return typeof e!=`object`||!e||!(`code`in e)?!1:typeof e.code==`string`}function sl(e,t){let n;try{n=JSON.parse(e)}catch(e){throw Error(`profiles.json is not valid JSON: ${gs(e)}`,{cause:e})}if(typeof n==`object`&&n&&`version`in n){let e=n;if(e.version!==1)throw Error(`profiles.json version ${String(e.version)} is not supported (expected 1)`)}let r=d.parse(tl,n),i={};for(let[e,n]of Object.entries(r.profiles)){if(!il(e)){t?.(`profiles: dropping invalid profile name "${e}"`);continue}let r=d.safeParse(el,n);if(!r.success){t?.(`profiles: dropping malformed profile "${e}"`);continue}i[e]=r.output}if(r.default_profile!==void 0&&(al(r.default_profile),!Object.hasOwn(i,r.default_profile)))throw Error(`profiles.json default_profile "${r.default_profile}" is not linked`);let a={};for(let[e,n]of Object.entries(r.directories??{})){if(!M(e)){t?.(`profiles: dropping directory binding with relative path "${e}"`);continue}if(typeof n!=`string`||!il(n)){t?.(`profiles: dropping malformed directory binding "${e}"`);continue}a[e]=n}return{version:1,...r.default_profile===void 0?{}:{default_profile:r.default_profile},profiles:i,...Object.keys(a).length===0?{}:{directories:a}}}function cl(e){try{return sl(T(rl(),`utf-8`),e)}catch(e){if(e instanceof Error&&ol(e)&&e.code===`ENOENT`)return{version:1,profiles:{}};throw e}}function ll(){w(nl(),{recursive:!0,mode:448}),x(nl(),448)}function ul(e){ll();let t=rl(),n=`${t}.${g(6).toString(`hex`)}.tmp`;A(n,JSON.stringify(e,null,2)+`
138
+ `,{encoding:`utf-8`,mode:384}),D(n,t)}function dl(e,t){al(e);let n=d.parse(el,t);Xc(n.bank_url,`profile "${e}" bank_url`);let r=cl();ul({...r,profiles:{...r.profiles,[e]:n}})}function fl(e){return e.status===`linked`}function pl(e,t){return e.replace(/\/+$/,``)===t.replace(/\/+$/,``)}function ml(e,t){let n=Object.entries(cl().profiles).toSorted(([e],[t])=>e.localeCompare(t)).find(([,n])=>fl(n)&&n.agent_id===e&&pl(n.bank_url,t));return n===void 0?null:n[0]}function hl(e,t){let n=Object.fromEntries(Object.entries(e??{}).filter(([,e])=>t(e)));return Object.keys(n).length===0?{}:{directories:n}}function gl(e){al(e);let t=cl(),{[e]:n,...r}=t.profiles;ul({version:1,...t.default_profile===e||t.default_profile===void 0?{}:{default_profile:t.default_profile},profiles:r,...hl(t.directories,t=>t!==e)})}function _l(e){try{return E(ne(e))}catch{return ne(e)}}function vl(e){return cl().directories?.[_l(e)]??null}function yl(e,t){al(t);let n=cl();if(!Object.hasOwn(n.profiles,t))throw Error(`Profile "${t}" is not linked. Run catena link --profile ${t} <agent-id>.`);let r=_l(e);return ul({...n,directories:{...n.directories,[r]:t}}),r}function bl(e){let t=cl(),n=_l(e);if(t.directories===void 0||!Object.hasOwn(t.directories,n))return{directory:n,removed:!1};let{[n]:r,...i}=t.directories,{directories:a,...o}=t;return ul({...o,...Object.keys(i).length===0?{}:{directories:i}}),{directory:n,removed:!0}}function xl(e){return al(e),cl().profiles[e]??null}function Sl(){return`client_${g(16).toString(`hex`)}`}function Cl(e,t){let n=xl(e);return t.agent_id===void 0?wl(e,t.bank_url,n):Tl(e,t.bank_url,t.agent_id,n)}function wl(e,t,n){if(n?.status===`linked`)throw Error(`Profile "${e}" is already linked. Choose a different profile name to start agent connection.`);let r=(n?.status===`pending_connection`&&pl(n.bank_url,t)?n.client_instance_id:null)??Sl();return dl(e,{status:`pending_connection`,bank_url:t,client_instance_id:r,created_at:n?.status===`pending_connection`?n.created_at:new Date().toISOString()}),r}function Tl(e,t,n,r){if(r?.status===`linked`){if(r.agent_id!==n)throw Error(`Profile "${e}" is already linked to a different agent (${r.agent_id}). Link ${n} under a different --profile, or run 'catena unlink --profile ${e}' first to repoint it (add --force if that agent's credential is missing or revoked).`);if(!pl(r.bank_url,t))throw Error(`Profile "${e}" is already linked to this agent on a different bank (${r.bank_url}). Link under a different --profile, or run 'catena unlink --profile ${e}' first (add --force if that credential is missing or revoked).`);return r.client_instance_id}let i=(r?.status===`pending_connection`&&pl(r.bank_url,t)?r.client_instance_id:null)??Sl();return dl(e,{status:`linked`,bank_url:t,agent_id:n,client_instance_id:i}),i}function El(e){al(e);let t=cl();if(!Object.hasOwn(t.profiles,e))throw Error(`Profile "${e}" is not linked. Run catena link --profile ${e} <agent-id>.`);ul({...t,default_profile:e})}function Dl(e){let t=e.toLowerCase().replace(/[^a-z0-9._-]+/g,`-`).replace(/^[^a-z0-9]+/,``).slice(0,64);return il(t)?t:`agent`}function Ol(e,t){if(!t(e))return e;for(let n=2;;n++){let r=`${e.slice(0,64-String(n).length-1)}-${n}`;if(!t(r))return r}}function kl(e){al(e.reservationName),al(e.profileName);let t=d.parse(el,e.profile);Xc(t.bank_url,`profile "${e.profileName}" bank_url`);let n=cl(),{[e.reservationName]:r,...i}=n.profiles;if(!Object.hasOwn(n.profiles,e.reservationName)||r.client_instance_id!==t.client_instance_id)throw Error(`Link reservation "${e.reservationName}" changed during setup (a concurrent link from this directory?). Re-run 'catena link'.`);if(e.profileName!==e.reservationName&&Object.hasOwn(i,e.profileName))throw Error(`Profile "${e.profileName}" already exists; cannot finalize link under that name.`);let a=Object.fromEntries(Object.entries(n.directories??{}).map(([t,n])=>[t,n===e.reservationName?e.profileName:n]));ul({version:1,...n.default_profile===void 0?{}:{default_profile:n.default_profile===e.reservationName?e.profileName:n.default_profile},profiles:{...i,[e.profileName]:t},...Object.keys(a).length===0?{}:{directories:a}})}function Al(e){return e??Kc()}async function jl(e,t){let n;try{n=xl(e.profileName)}catch(t){return{ok:!1,profileName:e.profileName,bankUrl:e.fallbackBankUrl,message:gs(t)}}if(n===null)return{ok:!1,profileName:e.profileName,bankUrl:e.fallbackBankUrl,message:`Profile "${e.profileName}" is not linked. Run 'catena link --profile ${e.profileName}' to authenticate.`};try{Xc(n.bank_url,`profile "${e.profileName}" bank_url`)}catch(t){return{ok:!1,profileName:e.profileName,bankUrl:e.fallbackBankUrl,message:gs(t)}}if(n.status===`pending_connection`)return{ok:!1,profileName:e.profileName,bankUrl:n.bank_url,message:`Profile "${e.profileName}" is waiting for agent connection approval. Run 'catena link --profile ${e.profileName}' to finish setup.`};let r;try{r=await Al(t).resolve(n.client_instance_id)}catch(t){return{ok:!1,profileName:e.profileName,bankUrl:n.bank_url,message:`Profile "${e.profileName}" credential unavailable for ${n.agent_id}: ${gs(t)}. Run 'catena link --profile ${e.profileName} ${n.agent_id}' to authenticate.`}}return r===null||r.version===`signer-1`?{ok:!1,profileName:e.profileName,bankUrl:n.bank_url,message:`Profile "${e.profileName}" credential unavailable for ${n.agent_id}. Run 'catena link --profile ${e.profileName} ${n.agent_id}' to authenticate.`}:r.version===1?{ok:!1,profileName:e.profileName,bankUrl:n.bank_url,message:`Profile "${e.profileName}" credential for ${n.agent_id} has no signing key. Run 'catena link --profile ${e.profileName} ${n.agent_id}' to authenticate.`}:{ok:!0,profileName:e.profileName,bankUrl:n.bank_url,agentId:n.agent_id,clientInstanceId:n.client_instance_id,signer:r.signer}}const Ml=`https://api.catena.com`,Nl=`CATENA_SECRET_KEY`;function Pl(e,t){let n=e[t]?.trim();return n===void 0||n.length===0?void 0:n}function Fl(e=process.env){return Pl(e,Nl)!==void 0}function Il(e=process.env){let t=Pl(e,Nl);if(t===void 0)return null;let n=Pl(e,`CATENA_API_URL`)??`https://api.catena.com`;return Xc(n,`CATENA_API_URL`),{bankUrl:n,privateKeyHex:t}}const Ll=`CATENA_PROFILE`;function Rl(e,t,n,r){if(e.directories===void 0)return null;let i;try{i=E(t)}catch{return null}let a=Object.entries(e.directories).map(([e,t])=>[e.replace(/\/+$/,``)||`/`,t]).filter(([e])=>i===e||i.startsWith(e===`/`?`/`:`${e}/`)).toSorted(([e],[t])=>t.length-e.length),o=null;for(let[t,n]of a){if(Object.hasOwn(e.profiles,n))return n;o??=`${t} -> "${n}"`}if(o===null)return null;if(n===`error`)throw Error(`This directory is bound to a profile that no longer exists (${o}). Run 'catena profiles unbind' here, bind it with 'catena profiles bind <name>', or run 'catena link' to re-establish it.`);return r?.(`profiles: ignoring stale directory binding ${o}`),null}function zl(e,t,n){if(e.flag!==void 0&&e.flag.length>0)return al(e.flag),{name:e.flag,source:`flag`};if(e.env!==void 0&&e.env.length>0){if(!il(e.env))throw Error(`${Ll} is set to an invalid profile name "${e.env}"`);return{name:e.env,source:`env`}}if(e.cwd!==void 0){let r=Rl(t,e.cwd,n,e.log);if(r!==null)return{name:r,source:`directory`}}return t.default_profile===void 0?null:{name:t.default_profile,source:`default`}}function Bl(e){return zl(e,cl(e.log),`ignore`)}function Vl(e){let t=cl(e.log),n=zl(e,t,`error`);if(n!==null)return n;let r=Object.keys(t.profiles),i=Object.entries(t.profiles).filter(([,e])=>fl(e)).map(([e])=>e);if(i.length===1){let[e]=i;return{name:e,source:`single`}}if(i.length===0){if(r.length===1){let[e]=r;return{name:e,source:`single`}}return r.length>1&&e.log?.(`profiles: ignoring ${r.length} pending profiles (${r.toSorted().join(`, `)}); none is linked`),{name:`default`,source:`fallback`}}throw Error(`Multiple profiles exist and none is selected (${i.toSorted().join(`, `)}). Pass --profile <name>, set ${Ll}, run 'catena profiles use <name>', or run 'catena link' from an agent directory to bind it.`)}function Hl(){try{return Object.entries(cl().profiles).filter(([,e])=>fl(e)).map(([e])=>e).toSorted()}catch{return[]}}function Ul(e=process.env){let t=e[Ll]?.trim();if(t!==void 0&&t.length>0)return`profiles: signing with ${Nl}; ${Ll}=${t} is ignored. Pass --profile ${t} to use that profile.`;let n=Hl();if(n.length===0)return null;let r=n.length===1?`profile`:`profiles`;return`profiles: signing with ${Nl}; ${n.length} linked ${r} ignored (${n.join(`, `)}). Pass --profile <name> to use one.`}const Wl={name:`catena-cli`,version:oe},Gl=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;function Kl(e,t){if(!Gl.test(e))throw Error(`${t} must be a valid HTTP token`)}function ql(e,t){let n=!1;for(let t=0;t<e.length;t+=1){let r=e.charCodeAt(t);if(r<32||r===127||r>255){n=!0;break}}if(n||/[()\\]/.test(e))throw Error(`${t} must not contain parentheses, backslashes, control characters, or characters outside Latin-1`)}function Jl(e){Kl(e.name,`appInfo.name`),e.version!==void 0&&Kl(e.version,`appInfo.version`),e.url!==void 0&&ql(e.url,`appInfo.url`);let t=e.version===void 0?e.name:`${e.name}/${e.version}`;return{"User-Agent":e.url===void 0?t:`${t} (${e.url})`}}function Yl(e){return hs({baseUrl:e.bankUrl,privateKeyHex:e.signer.privateKeyHex,appInfo:Wl})}function Xl(){return Kc()}function Zl(e){try{return hs({baseUrl:e.bankUrl,privateKeyHex:e.privateKeyHex,appInfo:Wl})}catch(e){return X(`${Nl} is not usable: ${gs(e)}`)}}async function Ql(e){if(e===void 0){let e;try{e=Il()}catch(e){return X(e)}if(e!==null){let t=Ul();return t!==null&&console.error(t),Zl(e)}}let t;try{t=Vl({flag:e,env:process.env[Ll],cwd:process.cwd(),log:e=>console.error(e)}).name}catch(e){return X(e)}let n=await jl({profileName:t,fallbackBankUrl:Ml},void 0);return n.ok||X(n.message),Yl(n)}const $l=new Set([`unknown_key`,`key_revoked`,`client_unlinked`]),eu=new Set([`signature_auth_disabled`,`missing_auth`]);function tu(e,t,n=process.env){if(!(e instanceof ss)||e.code===void 0)return e;let r=t===void 0?`catena link`:`catena link --profile ${t}`;return $l.has(e.code)?t===void 0&&Fl(n)?Error(`The bank rejected the ${Nl} signing key (${e.code}). Create a secret key in the Catena console under the agent's Secret keys tab, then update ${Nl}.`):Error(`This machine's signing key was rejected by the bank (${e.code}). Run '${r}' to re-authenticate.`):e.code===`client_upgrade_required`?Error(`This CLI version (${Wl.version}) is no longer supported by the bank. Run 'npm i -g @catena/cli' and retry.`):eu.has(e.code)?Error(`This bank does not support key-based authentication (${e.code}). Upgrade the bank, or use an older CLI release that authenticates with session tokens.`):e.code===`invalid_signature`&&e.message.includes(`created_out_of_window`)?Error(`The bank rejected this request's timestamp (created_out_of_window). Check this machine's system clock and retry.`):e}function nu(e,t){console.log(t?.compact?JSON.stringify(e):JSON.stringify(e,null,2))}function ru(e){return e.profile===void 0||e.profile.length===0?void 0:e.profile}async function iu(e,t){try{return await t(await Ql(e))}catch(t){return X(tu(t,e))}}function au(e,t){return async(n,r)=>{let i=await iu(e,n);return nu(i,t),await new Promise(e=>{process.stdout.write(``,()=>e())}),process.exit(r?.exitCode?r.exitCode(i):0)}}function $(e){return au(ru(e),{compact:e.json===!0})}const ou=d.pipe(d.string(),d.regex(/^\d+$/,`must be a non-negative integer`),d.transform(Number),d.maxValue(2**53-1,`must be at most ${2**53-1}`)),su=d.pipe(ou,d.maxValue(200,`must be at most 200`)),cu={profile:Ls,json:Rs},lu=Q(cu),uu=Q({account:ws({description:`Account id`,required:!0,schema:Bs}),...cu}),du=Q({account:ws({description:`Account id`,required:!0,schema:Bs}),start:Z({description:`Only include transactions at or after this ISO 8601 time`}),end:Z({description:`Only include transactions at or before this ISO 8601 time`}),limit:Z({description:`Maximum transactions to return (default 50, max 200)`,schema:su}),offset:Z({description:`Number of transactions to skip for pagination`,schema:ou}),...cu}),fu=Q({account:ws({description:`Account id`,required:!0,schema:Bs}),network:oc({description:`Deposit network; defaults to ${ic}. Availability depends on the connected environment.`,default:ic}),asset:Ds({description:`Deposit asset (${rc.join(`|`)})`,choices:rc,default:`usdc`}),...cu}),pu=c({meta:{name:`list`,description:`List accounts accessible under the agent's policy`},args:lu.args,async run({args:e}){await $(lu.parse(e))(e=>e.listAccounts())}}),mu=c({meta:{name:`balance`,description:`Request an account balance through the policy engine`},args:uu.args,async run({args:e}){let t=uu.parse(e);await $(t)(e=>e.getAccountBalance(t.account))}}),hu=c({meta:{name:`transactions`,description:`Read an account's transaction history through the policy engine`},args:du.args,async run({args:e}){let t=du.parse(e);await $(t)(e=>e.listAccountTransactions(t.account,{start:t.start,end:t.end,limit:t.limit,offset:t.offset}))}}),gu=c({meta:{name:`deposit-address`,description:`Read an account deposit address through the policy engine`},args:fu.args,async run({args:e}){let t=fu.parse(e);await $(t)(e=>e.getAccountDepositAddress(t.account,{network:t.network,asset:t.asset}))}}),_u=c({meta:{name:`accounts`,description:`Inspect bank accounts`},subCommands:{list:pu,balance:mu,transactions:hu,"deposit-address":gu}}),vu=d.pipe(d.string(`Idempotency key must be a string`),d.minLength(1,`Idempotency key must not be empty`),d.maxLength(255,`Idempotency key is too long (max 255 characters)`)),yu=d.pipe(d.string(),d.minLength(1,`must not be empty`)),bu=d.pipe(d.string(),d.trim(),d.email(`must be a valid email address`)),xu={profile:Ls,json:Rs},Su=Q({address:Z({description:`Only counterparties with a wallet rail matching this address (0x…)`,schema:ac}),network:oc({description:`Only counterparties with a wallet rail on this network (e.g. base)`}),...xu}),Cu=Z({description:`Counterparty name`,required:!0,schema:yu}),wu=Z({description:`Optional contact email`,schema:bu}),Tu=Z({description:`Optional operation key. Reuse the same value only when retrying the same submission; omitted generates a fresh key for this invocation.`,schema:vu}),Eu=Q({name:Cu,email:Z({description:`Contact email; creating the counterparty sends no email`,required:!0,schema:bu}),"idempotency-key":Tu,...xu}),Du=Q({name:Z({description:`Counterparty name; required without a subcommand`,schema:yu}),email:Z({description:`Contact email; required without a subcommand; creating the counterparty sends no email`,schema:bu}),"idempotency-key":Tu,...xu}),Ou=Q({name:Cu,"bank-name":Z({description:`Receiving bank name`,required:!0,schema:yu}),"routing-number":Z({description:`9-digit ABA routing number`,required:!0,schema:yu}),"account-number":Z({description:`Receiving bank account number`,required:!0,schema:yu}),"account-type":Ds({description:`checking | savings (default checking)`,choices:[`checking`,`savings`]}),"address-street":Z({description:`Street address of the receiving bank account holder`,required:!0,schema:yu}),"address-city":Z({description:`City`,required:!0,schema:yu}),"address-state":Z({description:`State (e.g. NY)`,required:!0,schema:yu}),"address-postal-code":Z({description:`Postal code`,required:!0,schema:yu}),"address-country":Z({description:`Default USA`}),email:wu,"idempotency-key":Tu,...xu}),ku=Q({name:Cu,address:Z({description:`Wallet address (0x… or ENS name on EVM networks)`,required:!0,schema:yu}),network:oc({description:`Wallet network; defaults to ${ic}. Availability depends on the connected environment.`,default:ic}),email:wu,"idempotency-key":Tu,...xu}),Au=Q({counterparty:ws({description:`Counterparty id`,required:!0,schema:Bs}),bank:Es({description:`Request bank account details`,default:!1}),wallet:Es({description:`Request wallet details`,default:!1}),"idempotency-key":Tu,...xu}),ju=c({meta:{name:`list`,description:`List counterparties available under the agent's policy`},args:Su.args,async run({args:e}){let t=Su.parse(e);await $(t)(e=>e.listCounterparties({address:t.address,network:t.network}))}});function Mu(e){return e&&e.length>0?e:void 0}function Nu(e){let t=Mu(e.email);return{type:`create_counterparty`,name:e.name,email:t,rail:{type:`bank`,bankName:e[`bank-name`],routingNumber:e[`routing-number`],accountNumber:e[`account-number`],addressStreet:e[`address-street`],addressCity:e[`address-city`],addressState:e[`address-state`],addressPostalCode:e[`address-postal-code`],...e[`account-type`]?{accountType:e[`account-type`]}:{},...e[`address-country`]?{addressCountry:e[`address-country`]}:{}}}}function Pu(e){let t=Mu(e.email);return{type:`create_counterparty`,name:e.name,email:t,rail:{type:`wallet`,walletAddress:e.address,network:e.network}}}function Fu(e){return{type:`create_counterparty`,name:e.name,email:e.email}}const Iu=c({meta:{name:`email`,description:`Create a counterparty with an email and no payment details. Sends no email.`},args:Eu.args,async run({args:e}){let t=Eu.parse(e);await $(t)(e=>e.submitIntent({action:Fu(t),...t[`idempotency-key`]!==void 0&&{idempotencyKey:t[`idempotency-key`]}}))}}),Lu=c({meta:{name:`bank`,description:`Request bank counterparty creation through the policy engine. Prints an intent envelope.`},args:Ou.args,async run({args:e}){let t=Ou.parse(e),n=Nu(t);await $(t)(e=>e.submitIntent({action:n,...t[`idempotency-key`]!==void 0&&{idempotencyKey:t[`idempotency-key`]}}))}}),Ru=c({meta:{name:`wallet`,description:`Request wallet counterparty creation through the policy engine. Prints an intent envelope.`},args:ku.args,async run({args:e}){let t=ku.parse(e);await $(t)(e=>e.submitIntent({action:Pu(t),...t[`idempotency-key`]!==void 0&&{idempotencyKey:t[`idempotency-key`]}}))}}),zu=c({meta:{name:`create`,description:`Request counterparty creation through the policy engine. Without a subcommand, --name and --email create a record without payment details and send no email.`},args:Du.args,default:`email`,subCommands:{email:Iu,bank:Lu,wallet:Ru}}),Bu=c({meta:{name:`request-details`,description:`Ask a counterparty to provide bank details, wallet details, or both through the policy engine.`},args:Au.args,async run({args:e}){let t=Au.parse(e);!t.bank&&!t.wallet&&X(`Select at least one of --bank or --wallet`),await $(t)(e=>e.submitIntent({action:{type:`request_counterparty_details`,counterpartyId:t.counterparty,methods:{bank:t.bank,wallet:t.wallet}},...t[`idempotency-key`]?{idempotencyKey:t[`idempotency-key`]}:{}}))}}),Vu=c({meta:{name:`counterparties`,description:`Inspect, create, and request details from counterparties`},subCommands:{list:ju,create:zu,"request-details":Bu}}),Hu=4e3;async function Uu(){process.stdin.setEncoding(`utf8`);let e=``;for await(let t of process.stdin)e+=t;return e}async function Wu(e){return e===void 0?(process.stdin.isTTY&&X(`<message>: pass a quoted message or pipe it on stdin; a message starting with "-" needs -- before it (catena feedback -- "<message>") or stdin`),Uu()):e}const Gu=Q({message:ws({description:`Plain-text feedback (1-4000 chars); omit to pipe on stdin`}),profile:Ls,json:Rs}),Ku=c({meta:{name:`feedback`,description:`Send free-form feedback about Catena to the Catena team`},args:Gu.args,async run({args:e}){(Array.isArray(e._)?e._:[]).length>1&&X(`<message>: pass the message as a single quoted argument`);let t=Gu.parse(e),n=(await Wu(t.message)).trim();n.length===0&&X(`<message>: must not be empty`),n.length>Hu&&X(`<message>: must be at most ${Hu} characters (got: ${n.length})`),await $(t)(async e=>(await e.submitFeedback(n),{ok:!0}))}});function qu(e){return`# Catena CLI Agent Guide
139
139
 
140
140
  CLI version: ${e}
141
141
 
142
- Examples below use \`catena\`. If it is not on PATH, or a command warns that a
143
- newer version is available, run \`npm i -g @catena/cli\`. Every non-\`link\`
144
- command resolves credentials from the selected profile and prints JSON on
145
- stdout; errors and upgrade notices go to stderr. The \`guide\` command is
146
- documentation, so it prints this Markdown guide on stdout.
142
+ Examples below use \`catena\`. Run \`npm i -g @catena/cli\` if \`catena\` is not
143
+ on PATH, or if a command warns that a newer version exists.
147
144
 
148
- The stored credential is a per-profile signing key: the CLI signs every request
149
- with it, so there are no sessions to expire or refresh. When the bank rejects
150
- the key, the error says to run \`catena link\`; follow it rather than retrying.
145
+ Every command except \`link\` reads its credential from the selected profile.
146
+ Each one prints JSON on stdout. Errors and upgrade notices go to stderr.
151
147
 
152
- Every command supports \`--help\`; use it for exact syntax, choices, and
153
- defaults rather than guessing. This guide covers what \`--help\` cannot: when to
154
- run each command, how ids flow between them, and how to read the results.
148
+ Two roles appear in this guide. The **user** is the person who gives you
149
+ instructions. An **operator** is a person who can sign in to the Catena console
150
+ and approve requests. They are often the same person.
151
+
152
+ The stored credential is one signing key for each profile. The CLI signs every
153
+ request with that key. No session expires, and nothing refreshes. If the bank
154
+ rejects the key, the error tells you to run \`catena link\`. Obey the error. Do
155
+ not retry the command first. A host that sets \`CATENA_SECRET_KEY\` gets
156
+ different guidance and must not run \`link\`. See Hosts Without a Keychain.
157
+
158
+ Use \`<command> --help\` for exact syntax, choices, and defaults. Do not guess.
159
+ This guide gives what \`--help\` cannot: when to run each command, how ids move
160
+ between commands, and how to read the results.
155
161
 
156
162
  ## Setup
157
163
 
158
- 1. Run \`catena whoami\`. If it returns an agent, you are
159
- linked and can continue.
160
- 2. Otherwise run \`link\`. There are three flows:
161
- - Link an existing agent on the customer's own machine: ask the customer for
162
- the agent id (\`agent_...\`) shown in the Catena console, then run
163
- \`catena link <agent-id>\`. A browser opens for approval
164
- and writes the profile on success.
165
- - Create a new agent: run \`catena link\` with no agent id.
166
- The CLI starts a console approval flow and prints a verification URL and
167
- short code. Relay both to the customer to approve in the Catena console.
168
- Add \`--name "Agent name"\` to suggest a name for the new agent.
169
- - Remote or headless: \`catena link <agent-id> --no-browser\`
170
- uses the device-code flow. Relay the printed URL and code, and keep the
171
- command running until the customer approves from their own device.
172
-
173
- \`--bank-url\` defaults to \`$CATENA_API_URL\` or production. Re-run \`link\`
174
- after denial or revocation, when a command reports the bank rejected this
175
- machine's signing key, and if a send or transfer fails with a local-signer
176
- error. Failures that relinking does not fix: a timestamp error
177
- (\`created_out_of_window\`) means this machine's clock is wrong; a bank
178
- that does not support key-based authentication needs a bank upgrade or an
179
- older CLI release; and an upgrade-required error
180
- (\`client_upgrade_required\`) means the bank no longer accepts this CLI
181
- version — run \`npm i -g @catena/cli\` and retry. A successful \`link\`
182
- names the profile after the agent when no profile is selected, and binds the
183
- working directory to it (the home
184
- directory is never bound), so later commands in that directory select the same
185
- agent automatically.
186
-
187
- \`catena unlink\` disconnects the selected profile. Add
188
- \`--profile <name>\` to target another profile. Add \`--force\` to clear a
189
- profile locally without contacting the server when its credential is missing,
190
- revoked, or a link was interrupted.
191
-
192
- ## Deployed services (humans only)
193
-
194
- \`link --service\` provisions a signing credential for an agent deployed to a
195
- hosted runtime (Vercel, Cloudflare Workers, a server): approval registers a
196
- P-256 public key, no session tokens are minted, and nothing is written to this
197
- machine. It prints the signing-key thumbprint before approval and prints the
198
- env vars for the deployment once. Add
199
- \`--public-key <hex>\` when the deployment already generated its own keypair.
200
- Re-running with the same key is idempotent: it reuses the existing link and
201
- re-drives wallet-send signer registration, the recovery path when the org was
202
- not signing-ready at link time. Pass the linked agent ID as the final argument
203
- when re-running for recovery.
204
- This is a human setup wizard for deploying services — an agent running
205
- interactively (MCP, CLI, terminal) must use plain \`link\`, never
164
+ 1. Run \`catena whoami\`. If it returns an agent, you are linked. Continue.
165
+ 2. If it does not, run \`link\`. There are three flows:
166
+ - **An existing agent, on the user's own machine.** Ask the user for the
167
+ agent id (\`agent_...\` in the Catena console). Run
168
+ \`catena link <agent-id>\`. A browser opens for approval. The CLI writes
169
+ the profile after approval.
170
+ - **A new agent.** Run \`catena link\` with no agent id. The CLI prints a
171
+ verification URL and a short code. Give both to the user, who approves in
172
+ the Catena console. Add \`--name "Agent name"\` to suggest a name for the
173
+ new agent.
174
+ - **A remote or headless machine.** Run
175
+ \`catena link <agent-id> --no-browser\`. This uses the device-code flow.
176
+ Give the printed URL and code to the user. Keep the command running until
177
+ the user approves from their own device.
178
+
179
+ Run \`link\` again in three cases: after a denial or a revocation, after a
180
+ command reports that the bank rejected this machine's signing key, and after a
181
+ send or transfer fails with a local-signer error.
182
+
183
+ Three failures do not improve after you run \`link\` again:
184
+
185
+ - \`created_out_of_window\`. The clock on this machine is wrong.
186
+ - The bank does not support key-based authentication. It needs an upgrade, or
187
+ you need an older CLI release.
188
+ - \`client_upgrade_required\`. The bank no longer accepts this CLI version. Run
189
+ \`npm i -g @catena/cli\`, then try again.
190
+
191
+ \`link\` names the profile after the agent when no profile is selected. It also
192
+ binds the working directory to that profile, but it never binds the home
193
+ directory. Later commands in that directory then select the same agent.
194
+
195
+ \`catena unlink\` disconnects the selected profile. Add \`--profile <name>\` to
196
+ target a different profile. Add \`--force\` to clear a profile on this machine
197
+ without a call to the server. Use \`--force\` when the credential is missing or
198
+ revoked, or when a link stopped part way.
199
+
200
+ ## Hosts Without a Keychain
201
+
202
+ A container, a CI job, or a serverless runtime has no OS keychain and no
203
+ browser. \`link\` cannot store a credential there. Set \`CATENA_SECRET_KEY\` to
204
+ the agent's P-256 secret key instead. Each command then signs with that key and
205
+ reads no profile. The host runs no link step.
206
+
207
+ An operator makes the key in the Catena console. They open the agent, select
208
+ the \`Secret keys\` tab, then select \`Create secret key\`. The console shows the
209
+ key one time. \`link --service\` prints the same value for a deployment.
210
+
211
+ \`CATENA_SECRET_KEY\` has a higher rank than every profile tier below. An
212
+ explicit \`--profile\` still wins. A workstation that exports a key can thus
213
+ also drive a linked profile.
214
+
215
+ On a machine that also holds a linked profile or sets \`CATENA_PROFILE\`, each
216
+ command prints one line to stderr. The line names \`CATENA_SECRET_KEY\` as the
217
+ signing credential and gives the \`--profile\` flag to use a profile instead.
218
+ Stdout keeps only the command result.
219
+
220
+ \`unlink\` does not apply to this credential, and it tells you so. An operator
221
+ must revoke the key in the Catena console. Only \`unlink --force\` still runs,
222
+ because it clears a profile on this machine and never signs.
223
+
224
+ If the bank rejects the key, the error names \`CATENA_SECRET_KEY\`. Ask an
225
+ operator for a new key, then set the variable again. Do not run \`link\` to
226
+ repair this credential.
227
+
228
+ While the key is set, \`profiles current\` reports the credential and not a
229
+ profile. \`.source\` is \`"secret-key"\`, \`.credential\` names the variable, and
230
+ \`.bankUrl\` gives the target bank. The \`.profile\` and \`.agentId\` fields are
231
+ absent. \`profiles list\` adds \`.shadowedBy\` and reports \`current: false\`
232
+ for every profile.
233
+
234
+ ## Deployed Services (Humans Only)
235
+
236
+ \`link --service\` makes a signing credential for an agent on a hosted runtime,
237
+ such as Vercel, Cloudflare Workers, or a server. Approval registers a P-256
238
+ public key. The flow makes no session token and writes nothing to this machine.
239
+
240
+ The command prints the signing-key thumbprint before approval. It then prints
241
+ \`CATENA_SECRET_KEY\` one time. That variable is the whole credential. The
242
+ command also prints the public key as a record to keep, not as a variable to
243
+ set. Add \`--public-key <hex>\` when the deployment already made its own
244
+ keypair.
245
+
246
+ A second run with the same key is safe. It uses the existing link again, and it
247
+ registers the wallet-send signer again. This is how you recover when the
248
+ organization was not signing-ready at the time of the link. Give the linked
249
+ agent ID as the final argument when you run the command for recovery.
250
+
251
+ This is a setup wizard for an operator. An agent that runs interactively
252
+ through MCP, a CLI, or a terminal must use plain \`link\`. It must never use
206
253
  \`--service\`.
207
254
 
208
255
  ## Profiles
209
256
 
210
- One machine can hold several linked agents, each as a named profile. A profile
211
- binds to a single agent: re-running \`link\` on a profile only re-links its own
212
- agent; linking a different agent into an existing profile is refused, so choose
213
- a new profile name or reset the old one with
257
+ One machine can hold several linked agents. Each one is a named profile. A
258
+ profile binds to a single agent. A second \`link\` on a profile links only that
259
+ same agent again. The CLI refuses a different agent in an existing profile.
260
+ Choose a new profile name, or clear the old profile with
214
261
  \`unlink --profile <name> --force\`.
215
262
 
216
- Every credentialed command selects its profile through the same chain, first
217
- match wins (\`link\` differs: it binds only on \`--profile\` or the directory
218
- binding and otherwise derives a name from the agent):
263
+ A set \`CATENA_SECRET_KEY\` bypasses the chain below, unless the command also
264
+ passes \`--profile\`. See Hosts Without a Keychain.
265
+
266
+ Every command that needs a credential selects its profile through this chain.
267
+ The first tier that gives a name wins. \`link\` is different: it binds only on
268
+ \`--profile\` or on the directory binding, and it otherwise makes a name from
269
+ the agent.
219
270
 
220
271
  1. \`--profile <name>\` on the command.
221
272
  2. \`$CATENA_PROFILE\`.
@@ -225,9 +276,9 @@ binding and otherwise derives a name from the agent):
225
276
  5. The only linked profile, when exactly one is linked (even if pending
226
277
  profiles also exist).
227
278
 
228
- When several profiles exist and none is selected, credentialed commands fail
229
- with the profile list instead of guessing an agent identity; select one with
230
- any tier above. Manage profiles with:
279
+ If several profiles exist and no tier selects one, the command fails and prints
280
+ the profile list. It never guesses an agent identity. Select a profile with any
281
+ tier above. Manage profiles with these commands:
231
282
 
232
283
  catena profiles current
233
284
  catena profiles list
@@ -235,21 +286,22 @@ any tier above. Manage profiles with:
235
286
  catena profiles bind <name> [path]
236
287
  catena profiles unbind [path]
237
288
 
238
- \`profiles current\` reports which tier selected the profile on \`.source\`.
239
- \`profiles list\` shows each profile's bound directories. \`bind\` and
240
- \`unbind\` default to the working directory, and the profile must already
241
- exist (a pending, not-yet-linked profile is fine).
289
+ \`profiles current\` reports the tier that selected the profile on \`.source\`.
290
+ \`profiles list\` shows the bound directories of each profile. \`bind\` and
291
+ \`unbind\` use the working directory by default. The profile must already exist.
292
+ A pending profile that is not yet linked is acceptable.
242
293
 
243
- Agent hosts should pin identity explicitly by exporting \`CATENA_PROFILE\`
244
- (\`link\` prints the exact value on success) rather than relying on the
245
- directory binding: the env var follows the agent wherever it changes
246
- directory, while bindings are a convenience for interactive use.
294
+ An agent host must pin its identity: export \`CATENA_PROFILE\`, which \`link\`
295
+ prints after a successful link. Do not depend on the directory binding. The
296
+ environment variable follows the agent to every directory. A binding is only a
297
+ convenience for interactive use.
247
298
 
248
299
  ## Reads Before Money Movement
249
300
 
250
- Run \`accounts list\` before a send or transfer. Account ids (\`acct_...\`) feed
251
- \`--account\`, \`--from\`, or \`--to\`. For sends, run \`counterparties list\`;
252
- \`--rail\` takes a rail id (\`cprl_...\`), not a counterparty id.
301
+ Run \`accounts list\` before you choose an explicit send source, and before a
302
+ transfer. Account ids (\`acct_...\`) go into \`--account\`, \`--from\`, or
303
+ \`--to\`. Run \`counterparties list\` before a send. \`--rail\` takes a rail id
304
+ (\`cprl_...\`), not a counterparty id.
253
305
 
254
306
  Direct per-account reads are plain reads, not intents:
255
307
 
@@ -257,22 +309,19 @@ Direct per-account reads are plain reads, not intents:
257
309
  catena accounts transactions acct_...
258
310
  catena accounts deposit-address acct_...
259
311
 
260
- \`accounts transactions\` returns \`.transactions[]\` newest first plus a
261
- \`.total\` count. Page with \`--limit\` and \`--offset\`. A transaction's
262
- \`status\` is separate from intent status; use it to confirm a movement settled.
263
- \`accounts deposit-address\` returns the account's on-chain funding address on
264
- \`.address\`. \`policy show\` prints the linked agent's policy when the user asks
265
- about access.
266
-
267
- Available networks depend on the connected environment, and \`--network\` must
268
- match the account's own network. Production serves \`base\`; non-production
269
- environments may also serve testnet rails such as \`base-sepolia\`. A network
270
- the connected environment does not enable fails with a server error listing the
271
- enabled networks. Requesting a
272
- network the account is not on fails with a configured-network error. No command
273
- returns an account's network directly: default to \`base\`, and on a
274
- configured-network error retry with another enabled network rather than
275
- inventing one.
312
+ \`accounts transactions\` returns \`.transactions[]\` with the newest first, and
313
+ a \`.total\` count. Use \`--limit\` and \`--offset\` to read more pages. The
314
+ \`status\` of a transaction is not the status of an intent. Read it to confirm
315
+ that money moved. \`accounts deposit-address\` returns the on-chain funding
316
+ address of the account on \`.address\`. Run \`policy show\` when the user asks
317
+ what the agent can do.
318
+
319
+ \`--network\` must match the network of the account. A bank does not always
320
+ enable every network. A network that the bank does not enable fails with a
321
+ server error that lists the enabled networks. A network that the account is not
322
+ on fails with a configured-network error. No command returns the network of an
323
+ account. Use \`base\` by default. After either error, run the command again with
324
+ a network that the error names. Do not invent a network.
276
325
 
277
326
  ## Counterparties
278
327
 
@@ -282,195 +331,276 @@ saved:
282
331
  catena counterparties list \\
283
332
  --address 0x... --network base
284
333
 
285
- Both filters must hold on the same rail, so an address saved on another
286
- network is not a match. A match returns the whole counterparty; reuse the
287
- \`rails[].id\` (\`cprl_...\`) of the rail whose \`walletAddress\` and
288
- \`network\` match rather than creating a duplicate. An empty
289
- \`counterparties\` array means no counterparty visible to this agent has that
290
- rail (one outside the agent's allow-list stays hidden); bad input errors
291
- rather than returning an empty list. \`--address\` accepts only 0x hex
292
- addresses: an ENS name errors, and a rail saved under an ENS name is not
293
- matched by its resolved address.
334
+ Both filters must agree on the same rail. An address saved on a different
335
+ network is not a match. A match returns the full counterparty. Use the
336
+ \`rails[].id\` (\`cprl_...\`) of the rail whose \`walletAddress\` and \`network\`
337
+ both match. Do not make a duplicate.
338
+
339
+ An empty \`counterparties\` array means that no counterparty you can see holds
340
+ that rail. A counterparty outside the allow-list of the agent stays hidden. Bad
341
+ input gives an error, not an empty list. \`--address\` accepts only 0x hex
342
+ addresses. An ENS name gives an error. A rail saved under an ENS name does not
343
+ match its resolved address.
294
344
 
295
- Create an email-only counterparty directly when the user does not have payment
296
- details yet:
345
+ Make an email-only counterparty when the user does not yet have payment
346
+ details:
297
347
 
298
348
  catena counterparties create \\
299
349
  --name "Acme Vendor" --email billing@acme.test
300
350
 
301
- This saves a counterparty with \`status: "awaiting_details"\` and \`rails: []\`,
302
- so it cannot receive a send. It does not send an email or request payment
303
- details. Do not imply otherwise to the user. The explicit
304
- \`counterparties create email\` form is equivalent.
351
+ This saves a counterparty with \`status: "awaiting_details"\` and \`rails: []\`.
352
+ It cannot receive a send. The command sends no email, and it requests no
353
+ payment details. Do not tell the user anything different. The
354
+ \`counterparties create email\` form does the same thing.
305
355
 
306
- Use the \`bank\` or \`wallet\` subcommand when payment details are available.
307
- Use the rail-specific help for exact required fields, choices, and defaults:
356
+ Use the \`bank\` or \`wallet\` subcommand when you have payment details. Use the
357
+ help of that subcommand for the necessary fields, choices, and defaults:
308
358
 
309
359
  catena counterparties create bank --help
310
360
  catena counterparties create wallet --help
311
361
 
312
- Pass destination details from the user. Do not invent missing routing, account,
313
- address, wallet, network, or contact details.
362
+ Use the destination details that the user gives you. Do not invent a routing
363
+ number, an account number, an address, a wallet, a network, or a contact.
314
364
 
315
- When an existing counterparty has an email but no usable payment details, ask
316
- for bank details, wallet details, or both:
365
+ If a counterparty has an email but no usable payment details, ask for bank
366
+ details, wallet details, or both:
317
367
 
318
368
  catena counterparties request-details cp_... --bank
319
369
 
320
- Pass at least one of \`--bank\` or \`--wallet\`. The request goes through policy
321
- and may wait for human approval. It returns before the counterparty responds;
322
- use \`intents get <id>\` to follow the intent and \`counterparties list\` to see
323
- details after they are provided.
370
+ Give at least one of \`--bank\` or \`--wallet\`. Policy examines the request, and
371
+ the request can wait for approval by an operator. The command returns before
372
+ the counterparty answers. Use \`intents get <id>\` to follow the intent. Use
373
+ \`counterparties list\` to read the details after the counterparty gives them.
324
374
 
325
- All forms return an intent envelope. When \`.status\` is \`completed\`, the new
326
- counterparty is on \`.data.counterparty\`; a rail-specific creation also returns
327
- its \`rails[].id\` for a follow-up send. Creation routed to approval is
328
- \`pending\`; re-check with \`intents get\`.
375
+ Every form returns an intent envelope. When \`.status\` is \`completed\`, read
376
+ the new counterparty on \`.data.counterparty\`. A rail-specific form also
377
+ returns its \`rails[].id\` for a send that comes after. A creation that goes to
378
+ approval is \`pending\`. Read it again with \`intents get\`.
329
379
 
330
380
  ## Timeouts and Safe Retries
331
381
 
332
- Each HTTP exchange times out after 80 seconds by default, from request dispatch
333
- through response-body validation; local request signing happens before that
334
- clock starts. A timeout means the client stopped waiting, not that the server
335
- did no work.
382
+ Each HTTP exchange stops after 80 seconds by default. The clock starts when the
383
+ command sends the request. It stops after the command checks the response body.
384
+ The CLI signs the request before that clock starts. A timeout means that the
385
+ client stopped waiting. It does not mean that the server did no work.
336
386
 
337
- Read-only commands are safe to run again. Intent commands generate a fresh UUID
338
- when \`--idempotency-key\` is omitted: identical inputs do not identify a retry.
339
- For recovery across invocations, choose and save a key before the first attempt,
340
- then reuse it with unchanged inputs for the same agent. Changed inputs with the
341
- same key return 409; use a new key for a new operation. Without a saved key,
342
- reconcile an ambiguous submission before repeating it.
387
+ A read-only command is safe to run again. An intent command makes a new UUID
388
+ when you omit \`--idempotency-key\`. The same inputs alone do not identify a
389
+ retry. To recover across two commands, choose a key and save it before the first
390
+ attempt. Then use that key again, with the same inputs and the same agent.
391
+ Different inputs with the same key return 409. Use a new key for a new
392
+ operation. Without a saved key, reconcile an unclear submission before you
393
+ repeat it.
343
394
 
344
- Payment errors override the general same-key retry advice:
395
+ A same-key retry keeps the original source account, even after a policy change.
396
+ Without an explicit source, new operations use the current policy.
345
397
 
346
- - "Already prepared" (409 \`wallet_send_intent_not_executing\`): the original
347
- wallet signing body cannot be recovered. Check \`intents get <id>\` if you
348
- have the id; otherwise ask an operator to reconcile it. Do not bypass this
349
- error with a new key.
350
- - "Created but never submitted; no money moved": fix the reported problem,
351
- then use a new key (omit the flag or supply a different value). The original
352
- key cannot restart signing.
353
- - "Could not be confirmed": poll \`intents get <id>\` even if you saved the
354
- key. Submit again only after \`blocked\` or \`failed\`; see Intents below.
398
+ Three payment errors replace the same-key rule above:
355
399
 
356
- A bare x402 timeout is before payment authorization and is safe to retry. An
357
- unconfirmed payment follows the polling rule above. If \`.paid\` and
358
- \`.retryFailed\` are set, recover the \`PAYMENT-SIGNATURE\` as described below
359
- instead of paying again.
400
+ - **"Already prepared"** (409 \`wallet_send_intent_not_executing\`). You cannot
401
+ recover the original wallet signing body. Run \`intents get <id>\` if you have
402
+ the id. If you do not, ask an operator to reconcile it. Do not get past this
403
+ error with a new key.
404
+ - **"Created but never submitted; no money moved."** Correct the problem in the
405
+ message. Then use a new key: omit the flag, or give a different value. The
406
+ original key cannot start the signing again.
407
+ - **"Could not be confirmed."** Read \`intents get <id>\` again and again, even
408
+ if you saved the key. Submit again only after \`blocked\` or \`failed\`. See
409
+ Intents below.
410
+
411
+ An x402 or MPP timeout in the create phase happens before the payment gets
412
+ authorization. That timeout is safe to retry. An unconfirmed payment obeys the
413
+ rule above. If \`.paid\` and \`.retryFailed\` are both set, the payment already
414
+ finished. For x402, recover the \`PAYMENT-SIGNATURE\` as shown below. For MPP,
415
+ examine the intent with \`intents get <id>\`. Do not pay a second time before
416
+ you do this.
360
417
 
361
418
  ## Money Movement
362
419
 
363
420
  \`send\` submits a USD send to a counterparty rail. \`transfer\` moves USD
364
421
  between two of the agent's own accounts.
365
422
 
366
- Before either:
423
+ Do these three things before either command:
367
424
 
368
- - Confirm the user explicitly provided the amount and destination details.
369
- - Use ids from \`accounts list\` and \`counterparties list\`.
370
- - USD only. Pass \`--amount\` as a plain decimal string such as \`100.50\`. Do
371
- not use scientific notation or signed values.
425
+ - Confirm that the user gave you the amount and the destination details.
426
+ - Use rail ids from \`counterparties list\`, and explicit account ids from
427
+ \`accounts list\`.
428
+ - Use USD only. Give \`--amount\` as a plain decimal string, such as \`100.50\`.
429
+ Do not use scientific notation. Do not use a sign.
372
430
 
373
431
  Examples:
374
432
 
375
- catena send --account acct_... --rail cprl_... \\
433
+ catena send --rail cprl_... \\
376
434
  --amount 125.00 --method ach
377
435
  catena transfer --from acct_... --to acct_... \\
378
436
  --amount 125.00
379
437
 
380
- \`--method\` must match the rail type: \`ach\` and \`wire\` require a bank
381
- rail, \`on-chain\` requires a wallet rail. A mismatch fails with
382
- \`rail_method_mismatch\`. See \`--help\` for memo and description flags.
438
+ \`--method\` must match the rail type. \`ach\` and \`wire\` need a bank rail.
439
+ \`on-chain\` needs a wallet rail. A wrong pair fails with
440
+ \`rail_method_mismatch\`. See \`--help\` for the memo and description flags.
441
+
442
+ An intent's source account stays fixed through approval.
383
443
 
384
- Both create the intent and return immediately. There is no wait or poll flag.
385
- The command exits 0 once the intent is submitted even if the intent is later
386
- blocked, pending, or failed. Always read \`.status\` and \`.reasons\` on the
387
- returned envelope, then follow up with \`intents get <id>\` for anything not
388
- already \`completed\`.
444
+ Both commands make the intent and return immediately. There is no flag to wait
445
+ or to poll. The command exits 0 after it submits the intent, even if the intent
446
+ becomes blocked, pending, or failed later. Always read \`.status\` and
447
+ \`.reasons\` on the envelope. Then run \`intents get <id>\` for every intent that
448
+ is not yet \`completed\`.
389
449
 
390
450
  ## Paying x402 (HTTP 402) Endpoints
391
451
 
392
- \`x402\` fetches a URL and, when the server answers 402 with an x402 v2
393
- challenge, pays it in USDC from a non-custodial wallet account, then retries
394
- the request with the payment attached:
452
+ \`x402\` fetches a URL. If the server answers 402 with an x402 v2 challenge, the
453
+ command pays it in USDC from a non-custodial wallet account. It then sends the
454
+ request again with the payment attached:
395
455
 
396
456
  catena x402 --url https://api.example.com/paid \\
397
457
  --account acct_... --max-amount 0.25
398
458
 
399
- \`x402\` manages its own keys, generating a fresh one per payment challenge
400
- attempt. Re-running after success can pay again, even for the same URL and price.
459
+ \`x402\` manages its own keys. It makes a new key for each payment attempt. A
460
+ second run after a success can pay a second time, even for the same URL and the
461
+ same price.
401
462
 
402
- To POST a request body (e.g. an OpenAI-compatible chat-completions call), pass
403
- \`--data\`; it implies \`POST\` and a JSON content type unless overridden with
404
- \`--method\` / \`--content-type\`. Use \`@path\` to read the body from a file or
405
- \`@-\` for stdin:
463
+ To send a request body, such as an OpenAI-compatible chat-completions call, pass
464
+ \`--data\`. That flag selects \`POST\` and a JSON content type. \`--method\` and
465
+ \`--content-type\` override those two defaults. Use \`@path\` to read the body
466
+ from a file, or \`@-\` to read it from stdin:
406
467
 
407
468
  catena x402 --url https://api.example.com/chat \\
408
469
  --account acct_... --max-amount 0.05 \\
409
470
  --data '{"model":"...","messages":[{"role":"user","content":"hi"}]}'
410
471
 
411
- If the endpoint needs extra request headers, pass them with repeatable
412
- \`--header "Name: Value"\` flags (curl -H style); each is sent on both the
413
- initial request and the paid retry. \`PAYMENT-SIGNATURE\` cannot be set this
414
- way — the payment loop attaches it itself after paying.
415
-
416
- Constraints: the source account must be a wallet account on the challenge's
417
- network (a mainnet wallet cannot pay a testnet challenge and vice versa). If it
418
- is not, nothing is charged: the result carries \`.networkMismatch\`
419
- (\`.requiredNetworks\` as onchain slugs like \`base\`, \`.requiredNetworkIds\` as
420
- the raw CAIP-2 ids) and the command exits non-zero — re-run with \`--account\`
421
- set to a wallet on one of those networks (account ids are in \`accounts list\`).
422
- The challenge's \`payTo\` address must also already exist as a saved counterparty
423
- wallet rail — Catena never auto-adds it (a 402's \`payTo\` is untrusted), so
424
- creating one stays a deliberate, policy-gated step. You can precheck with
472
+ If the endpoint needs more request headers, pass each one with a
473
+ \`--header "Name: Value"\` flag, in the style of \`curl -H\`. You can repeat the
474
+ flag. The CLI sends each header on the first request and on the paid request.
475
+ You cannot set \`PAYMENT-SIGNATURE\` this way. The payment loop attaches that
476
+ header itself after it pays.
477
+
478
+ **The account and the network must match.** The source account must be a wallet
479
+ account on the network of the challenge. If it is not, the CLI charges nothing
480
+ and exits non-zero. The result carries \`.networkMismatch\`, which holds
481
+ \`.requiredNetworks\` as onchain slugs such as \`base\`, and
482
+ \`.requiredNetworkIds\` as the raw CAIP-2 ids. Run the command again with
483
+ \`--account\` set to a wallet on one of those networks. \`accounts list\` gives
484
+ the account ids.
485
+
486
+ **The recipient must be a saved counterparty.** The \`payTo\` address of the
487
+ challenge must already exist as a counterparty wallet rail. Catena never adds it
488
+ for you, because the \`payTo\` of a 402 response is untrusted. Making it stays a
489
+ deliberate step, and policy examines it.
490
+
491
+ You can check first with
425
492
  \`counterparties list --address <payTo> --network <network>\`, but you do not
426
- need the address up front: if it is unsaved, nothing is charged and the result
427
- carries \`.counterpartyNotFound\` (\`payTo\`, \`network\` slug, \`networkId\`,
428
- \`serviceName\` when advertised, \`.nameIsPlaceholder\`, and \`.createCommand\`
429
- — the \`counterparties create wallet\` command to run, also embedded in
430
- \`.error\` for humans), and the command exits non-zero. When
431
- \`.nameIsPlaceholder\` is false the \`--name\` in that command is the endpoint's
432
- own advertised name: it is unverified, so confirm it names a service you trust
433
- before creating, since it becomes the counterparty's allowlist label. When
434
- \`.nameIsPlaceholder\` is true the endpoint advertised no usable name and
435
- \`--name '<name>'\` is a literal placeholder — replace it with a name you choose
436
- rather than running the command as-is.
437
- Create the counterparty (it may itself require approval), then re-run
438
- the SAME x402 command. Always pass \`--max-amount\`
439
- (USD decimal) when the user named a price ceiling; challenges above it are
440
- refused before any payment. Payments follow the same policy as sends
441
- (send capability, counterparty allowlist, spend limits). A payment over the
442
- policy's approval threshold parks for a human approval instead of paying:
443
- the result carries \`.approvalPending\` (intent id, expiry, reasons) and the
444
- command exits non-zero. Ask an operator to approve it in the console, then
445
- re-run the SAME command — the retry consumes the matching approval and pays
446
- without re-approving; if the approval expires unused, the re-run parks a fresh
447
- one. Approval matching is independent of keys and requires the same agent,
448
- source account, payment requirements, and resource — not just URL and price.
449
- The JSON result carries \`.paid\`, \`.payment\` (intent id, atomic
450
- USDC amount, recipient), and the response \`.body\`. When \`.bodyTruncated\` is
451
- true, read the complete body from the file at \`.bodyPath\` (if \`.bodyPath\`
452
- is absent, \`.error\` says what survived); never re-fetch to see more of a
453
- body — a re-run pays again. To recover a completed payment after an interrupted
454
- submission or failed paid request, read \`intents get <id>\`:
455
- \`.data.paymentCredential.value\` is the
456
- \`PAYMENT-SIGNATURE\` header value to retry with manually while the
457
- authorization is still valid.
458
-
459
- When a seller implements the x402 offer-receipt extension, the payment loop
460
- relays the seller's signed offer and signed receipt to Catena automatically;
461
- Catena verifies them and stores them on the intent as evidence for audit and
462
- disputes. This changes nothing about the payment itself, and sellers without
463
- the extension behave exactly as before.
493
+ need the address before you start. If the address is not saved, the CLI charges
494
+ nothing and exits non-zero. The result then carries \`.counterpartyNotFound\`
495
+ with \`payTo\`, the \`network\` slug, \`networkId\`, \`serviceName\` when the
496
+ endpoint gives one, \`.nameIsPlaceholder\`, and \`.createCommand\`.
497
+ \`.createCommand\` holds the \`counterparties create wallet\` command to run, and
498
+ \`.error\` holds the same command for a person to read.
499
+
500
+ Read \`.nameIsPlaceholder\` before you run that command:
501
+
502
+ - **\`false\`** — the \`--name\` is the name that the endpoint gives for itself.
503
+ Nobody verified it. It becomes the allow-list label of the counterparty.
504
+ Confirm that it names a service you trust before you make the counterparty.
505
+ - **\`true\`** — the endpoint gave no usable name, and \`--name '<name>'\` is a
506
+ literal placeholder. Replace it with a name that you choose. Do not run the
507
+ command as it is.
508
+
509
+ Make the counterparty, which can itself need approval. Then run the SAME x402
510
+ command again.
511
+
512
+ **Price and policy.** Always pass \`--max-amount\` as a USD decimal when the
513
+ user gives a price ceiling. The CLI refuses a larger challenge before it pays
514
+ anything. A payment obeys the same policy as a send: the send capability, the
515
+ counterparty allow-list, and the spend limits.
516
+
517
+ A payment above the approval threshold of the policy waits for an operator
518
+ instead of paying. The result carries \`.approvalPending\` with the intent id,
519
+ the expiry, and the reasons, and the command exits non-zero. Ask an operator to
520
+ approve it in the console, then run the SAME command again. That run uses the
521
+ matching approval and pays, with no second approval. If the approval expires
522
+ before you use it, the next run waits for a new one.
523
+
524
+ A key does not affect the match. The match needs the same agent, the same source
525
+ account, the same payment requirements, and the same resource. The URL and the
526
+ price alone are not sufficient.
527
+
528
+ **Reading the result.** The JSON result carries \`.paid\`, \`.payment\` with the
529
+ intent id, the atomic USDC amount and the recipient, and the response \`.body\`.
530
+ If \`.bodyTruncated\` is true, read the full body from the file at
531
+ \`.bodyPath\`. If \`.bodyPath\` is absent, \`.error\` tells you what remains.
532
+ Never fetch the URL again to see more of a body, because a second run pays
533
+ again.
534
+
535
+ To recover a payment that finished after an interrupted submission or a failed
536
+ paid request, read \`intents get <id>\`. The field
537
+ \`.data.paymentCredential.value\` holds the \`PAYMENT-SIGNATURE\` header value.
538
+ Retry with that header while the authorization is still valid.
539
+
540
+ **Offer receipts.** Some sellers use the x402 offer-receipt extension. For those
541
+ sellers, the payment loop sends the signed offer and the signed receipt of the
542
+ seller to Catena. Catena verifies both and keeps them on the intent as evidence
543
+ for an audit or a dispute. This changes nothing about the payment. A seller
544
+ without the extension behaves as before.
545
+
546
+ ## Paying MPP (HTTP 402) Endpoints
547
+
548
+ \`mpp\` fetches a URL. It pays a supported MPP charge in USDC from a
549
+ non-custodial wallet account, then sends the request again:
550
+
551
+ catena mpp --url https://api.example.com/paid \\
552
+ --account acct_... --max-amount 0.25
553
+
554
+ Support at this time covers \`evm/charge\` and \`usdc/charge\` only, for native
555
+ USDC on Base and Base Sepolia. See \`mpp --help\` for the request-body, header,
556
+ output, profile, and JSON flags. Always set \`--max-amount\` when the user gives
557
+ a price ceiling. The CLI refuses a larger challenge before it makes an intent.
558
+
559
+ An MPP payment uses the same send capability, counterparty allowlist, spend
560
+ limits, and operator approval flow as every other agent payment. The recipient
561
+ of the challenge must be a saved counterparty wallet rail on the network that
562
+ the challenge asks for.
563
+
564
+ Three fields tell you what to do next:
565
+
566
+ - **\`.counterpartyNotFound\`** — replace the \`<name>\` placeholder in
567
+ \`.createCommand\`, make the counterparty, then run the SAME MPP command
568
+ again.
569
+ - **\`.approvalPending\`** — ask an operator to approve the intent. Then run the
570
+ SAME MPP command again, with no change.
571
+ - **\`.networkMismatch\`** — the wallet account cannot pay on a network that the
572
+ challenge needs. Run the command again with \`--account\` set to an account on
573
+ one of \`.networkMismatch.requiredNetworks\`. The CAIP-2 ids are in
574
+ \`.networkMismatch.requiredNetworkIds\`.
575
+
576
+ The result reports \`.paid\`, the HTTP status, and the body. After a payment it
577
+ also reports \`.payment\`, which holds the intent id, the selected method, the
578
+ atomic USDC amount, the recipient, and the network. \`.payment\` holds no
579
+ credential. If \`.bodyTruncated\` is true, read the full body from the file at
580
+ \`.bodyPath\`. If \`.bodyPath\` is absent, \`.error\` tells you what remains. Do
581
+ not fetch the URL again to see more of a body, because a second run pays again.
582
+
583
+ The CLI never accepts an MPP payment credential through \`--header\`. It keeps
584
+ an ordinary application \`Authorization\` header, such as a bearer token, when
585
+ the seller asks for the payment in \`Payment-Authorization\`.
586
+
587
+ The payment already finished in two cases: \`.paid\` and \`.retryFailed\` are
588
+ both true, or the CLI cannot read the paid response body. Use
589
+ \`intents get <id>\` to examine the intent in the result, and do not run the
590
+ command again blindly. An interrupted submission can also leave the outcome
591
+ unknown. Run the \`catena intents get <id>\` command from the error before you
592
+ try another payment.
464
593
 
465
594
  ## Temporary Policy Overrides
466
595
 
467
- When policy blocks a task the user asked for, the agent may ask a human to
468
- raise the specific limit it hit, for a bounded time — if the policy allows
469
- override requests at all, which only a workspace administrator can change.
470
- Request the minimum the task needs; this is for completing the user's task,
471
- not for widening policy. Every request parks for a person, nothing takes
472
- effect without approval, and the override expires on its own with nothing to
473
- undo.
596
+ If policy blocks a task that the user asked for, you can ask an operator to
597
+ raise the one limit that stopped you, for a limited time. The policy must allow
598
+ override requests, and only a workspace administrator can change that setting.
599
+
600
+ Ask for the minimum that the task needs. An override completes the task of the
601
+ user. It does not widen the policy. Every request waits for an operator.
602
+ Nothing takes effect before approval. The override expires by itself, and there
603
+ is nothing to undo.
474
604
 
475
605
  Request one with:
476
606
 
@@ -478,101 +608,104 @@ Request one with:
478
608
  --amount 500 --duration 4h \\
479
609
  --reason "Vendor invoice INV-4471 is $420"
480
610
 
481
- Send and transfer hard limits can be raised, for the one account named by
482
- --account — other accounts' limits are untouched. The default is a send
483
- limit; pass \`--capability transfer\` for a transfer limit, where --account
484
- is the source account, since transfer limits govern the account funds move
485
- out of. The MCP equivalent is
486
- \`request_policy_override\`; over REST, an intent with a \`policy_override\`
487
- action.
488
-
489
- One request may be pending per agent, independently of idempotency keys.
490
- Repeating it returns the pending one. Different limits with the same key return
491
- 409; with a fresh key they are not recorded — the reply says so, and the person
492
- still sees the original. Wait for a decision rather than re-asking.
493
-
494
- Status follows the usual intent vocabulary, with two collapses worth knowing:
495
- a person declining shows as \`blocked\`, not a state of its own, and should not
496
- be re-filed; a request that expires unapproved shows as \`failed\`.
497
- \`.data.policyOverride.policyId\` names the override once it is live, and
498
- \`.replayed\` is true when the reply is an earlier pending request.
499
-
500
- While it is pending, share the approvals link from \`metadata.dataUrl\` so an
501
- operator can act on it. After approval, re-run the same blocked command
502
- unchanged — the raised limits apply immediately, and \`policy show\` reflects
503
- them until the override expires.
611
+ An override can raise a hard limit on a send or a transfer. It applies only to
612
+ the one account that \`--account\` names. The limits of every other account stay
613
+ the same. The command raises a send limit by default. Pass
614
+ \`--capability transfer\` for a transfer limit. \`--account\` is then the source
615
+ account, because a transfer limit governs the account that money moves out of.
616
+ The MCP equivalent is \`request_policy_override\`. Over REST, use an intent with
617
+ a \`policy_override\` action.
618
+
619
+ Each agent can have one pending request. An idempotency key does not change
620
+ this. A repeat of the request returns the pending one. Different limits with the
621
+ same key return 409. Different limits with a new key are not recorded: the reply
622
+ says so, and the operator still sees the original request. Wait for a decision.
623
+ Do not ask again.
624
+
625
+ Status uses the usual intent words, with two special cases. An operator who
626
+ declines makes the status \`blocked\`, not a status of its own. Do not file that
627
+ request again. A request that expires without approval makes the status
628
+ \`failed\`. \`.data.policyOverride.policyId\` names the override after it is
629
+ live. \`.replayed\` is true when the reply is an earlier pending request.
630
+
631
+ While the request is pending, give the operator the approvals link from
632
+ \`metadata.dataUrl\`. After approval, run the blocked command again with no
633
+ change. The raised limits apply immediately. \`policy show\` reports them until
634
+ the override expires.
504
635
 
505
636
  ## Intents
506
637
 
507
- Money movement, counterparty creation, counterparty detail requests, and policy
508
- override requests return intents. Balance, transaction, and deposit-address
509
- reads do not. Match the simplified \`.status\` value, not raw backend status
510
- strings.
638
+ Four operations return an intent: money movement, counterparty creation, a
639
+ counterparty detail request, and a policy override request. A balance,
640
+ transaction, or deposit-address read does not. Match the simplified \`.status\`
641
+ value. Do not match a raw backend status string.
511
642
 
512
- Treat \`completed\`, \`blocked\`, and \`failed\` as final. Re-check \`pending\` or
513
- \`processing\` with \`intents get\`; \`pending\` can still advance without agent
514
- action. \`reasons\` explains policy decisions or approval routing, and should be
515
- summarized when present.
643
+ \`completed\`, \`blocked\`, and \`failed\` are final. Read \`pending\` or
644
+ \`processing\` again with \`intents get\`. A \`pending\` intent can advance
645
+ without any action by the agent. \`reasons\` gives the policy decision or the
646
+ approval route. Summarize \`reasons\` for the user when it is present.
516
647
 
517
- After a policy block is resolved, retrying unchanged inputs with the same key
518
- creates a new intent evaluated under current policy; the old intent stays
519
- \`blocked\`. Respect human denials rather than retrying them. A \`failed\`
520
- intent's key still identifies that failed attempt: use a new key if another
521
- attempt is appropriate. Never repay a \`completed\` intent as recovery.
648
+ After somebody clears a policy block, the same inputs with the same key make a
649
+ new intent, and policy examines that new intent as it is now. The old intent
650
+ stays \`blocked\`. Accept a denial by an operator. Do not send the request
651
+ again. The key of a \`failed\` intent still identifies that failed attempt. Use
652
+ a new key if another attempt is correct. Never pay a \`completed\` intent again
653
+ to recover.
522
654
 
523
655
  Re-read current state with:
524
656
 
525
657
  catena intents get int_...
526
658
 
527
- \`.data\` carries the result once one exists: the linked transaction for send or
528
- transfer, or the created counterparty for creation. It is \`null\` when there is
529
- none yet. A successful \`send\` or \`transfer\` replay returns the original
530
- intent's current result, not a second movement. \`.replayed\` identifies a
531
- returned existing intent; it does not mean the operation executed again.
659
+ \`.data\` carries the result after one exists. For a send or a transfer, that is
660
+ the linked transaction. For a creation, that is the new counterparty. \`.data\`
661
+ is \`null\` while no result exists. A repeat of a successful \`send\` or
662
+ \`transfer\` returns the current result of the original intent. It does not move
663
+ money a second time. \`.replayed\` identifies an intent that already existed. It
664
+ does not mean that the operation ran again.
532
665
 
533
666
  ## Output, Exit Codes, and Scripting
534
667
 
535
- Credentialed command stdout is JSON; parse it rather than scraping text. Every
536
- credentialed command accepts \`--json\` for compact single-line output.
668
+ Each of these commands prints JSON on stdout. Parse that JSON. Do not read the
669
+ text. Each one accepts \`--json\` for compact output on one line.
537
670
  \`catena --version\` prints the CLI version.
538
671
 
539
- The exit code reflects whether the command ran, not an intent's policy outcome.
540
- A submitted-but-blocked send still exits 0, so read \`.status\` and \`.reasons\`.
672
+ The exit code tells you whether the command ran. It does not tell you the policy
673
+ outcome of an intent. A send that submits and then becomes blocked still exits
674
+ 0. Read \`.status\` and \`.reasons\`.
541
675
 
542
- Every credentialed command exits 0 after printing its JSON result, or 1 on error
543
- with the message on stderr. The one exception is \`x402\`: it also exits non-zero
544
- (with its JSON still on stdout) whenever the result carries \`.error\` — the
545
- outcome needs follow-up, so read \`.error\` instead of treating the exit as a
546
- plain failure.
676
+ Each of these commands exits 0 after it prints its JSON result. It exits 1 on an
677
+ error, with the message on stderr. \`x402\` and \`mpp\` also exit non-zero when
678
+ the result carries \`.error\`, and they still print their JSON on stdout. That
679
+ outcome needs an action from you. Read \`.error\`. Do not treat the exit code as
680
+ a simple failure.
547
681
 
548
682
  ## Persisting Across Sessions
549
683
 
550
- This guide is only found by an agent that already knows to use the CLI; the
551
- Catena skill is what makes that knowledge survive across sessions and
552
- projects. When it is not installed and setting this machine up for future
553
- Catena work makes sense, offer to install it:
684
+ Only an agent that already knows about the CLI finds this guide. The Catena
685
+ skill keeps that knowledge across sessions and projects. If the skill is not
686
+ installed, and this machine will do more Catena work, offer to install it:
554
687
 
555
688
  npx -y skills add catena-labs/skills --skill catena-cli --global --yes
556
689
 
557
- Do not persist the routing by writing to CLAUDE.md, AGENTS.md, or harness
558
- memory instead; the skill is the only sanctioned mechanism.
690
+ Do not write this routing into CLAUDE.md, AGENTS.md, or harness memory. The
691
+ skill is the only approved method.
559
692
 
560
693
  ## Feedback
561
694
 
562
- If the CLI is confusing, missing a capability, or cannot express the operation
563
- you need, tell the Catena team:
695
+ Tell the Catena team if the CLI is unclear, if it has no command for what you
696
+ need, or if it cannot express your operation:
564
697
 
565
698
  catena feedback "Plain-text message (max 4000 chars)"
566
699
 
567
- The message must be 1-4000 characters and is write-only. Longer messages can be
568
- piped on stdin instead of passed as an argument.
569
- `}const lu=l({meta:{name:`guide`,description:`Print the Catena CLI agent operating guide`},run(){console.log(cu(se))}}),uu=Q({id:ss({description:`Intent id (e.g. int_…)`,required:!0,schema:Cs}),profile:bs,json:xs}),du=l({meta:{name:`get`,description:`Look up the current state of an intent created by this agent`},args:uu.args,async run({args:e}){let t=uu.parse(e);await $(t)(e=>e.getIntent(t.id))}}),fu=l({meta:{name:`intents`,description:`Inspect intent receipts returned by governed operations`},subCommands:{get:du}});function pu(e=process.env,t=process.platform){return!!(e.SSH_CONNECTION||e.SSH_TTY||t===`linux`&&!e.DISPLAY&&!e.WAYLAND_DISPLAY)}function mu(e){let t;try{t=E(re(e))}catch{return!1}if(t===`/`)return!0;try{let e=E(process.env.HOME??j());return t===e||e.startsWith(`${t}/`)}catch{return!0}}function hu(e){e&&process.stderr.write(`Failed to open browser: ${e.message}\n`)}function gu(e){process.platform===`darwin`?y(`open`,[e],hu):process.platform===`win32`?y(`cmd`,[`/c`,`start`,``,e],hu):y(`xdg-open`,[e],hu)}function _u(e){if(typeof e!=`object`||!e)return;let t=e;return typeof t.message==`string`?t.message:typeof t.error==`string`?t.error:void 0}function vu(e){return typeof e!=`object`||!e||!(`access_token`in e)?!1:typeof e.access_token==`string`}function yu(e){if(typeof e!=`object`||!e)return!1;let t=e;return typeof t.agentId==`string`&&typeof t.name==`string`&&typeof t.sessionToken==`string`&&(t.activated===void 0||typeof t.activated==`boolean`)}function bu(e){if(typeof e!=`object`||!e)return!1;let t=e;return ks.some(e=>e===t.status)&&(t.publicKeyHex===void 0||typeof t.publicKeyHex==`string`)&&(t.reason===void 0||typeof t.reason==`string`)}async function xu(e){let{bankUrl:t,authCode:n,verifier:r,redirectUri:i,agentId:a,clientInstanceId:o,clientId:s,clientLabel:c,log:l=()=>{},appInfo:u,existingSigner:d,generateSignerKeypair:f=ra}=e,p=il(u);l(`Exchanging authorization code...`);let m=await fetch(`${t}/v1/auth/oauth2/token`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,...p},body:new URLSearchParams({grant_type:`authorization_code`,code:n,code_verifier:r,client_id:s,redirect_uri:i}).toString()});if(!m.ok)return{ok:!1,message:_u(await m.json().catch(()=>({message:`Token exchange failed`})))??m.statusText};let h=await m.json();if(!vu(h))return{ok:!1,message:`Token exchange response missing access_token`};l(`Claiming agent...`);let g=d?{algorithm:d.algorithm,privateKeyHex:d.privateKeyHex,publicKeyHex:d.publicKeyHex}:f(),_=await fetch(`${t}/v1/agent-api/claim`,{method:`POST`,headers:{"Content-Type":`application/json`,...p,Authorization:`Bearer ${h.access_token}`},body:JSON.stringify({agentId:a,clientInstanceId:o,...c===void 0?{}:{clientLabel:c}})});if(!_.ok)return{ok:!1,message:_u(await _.json().catch(()=>({message:`Claim failed`})))??_.statusText};let v=await _.json();return yu(v)?Su({bankUrl:t,claim:v,clientInstanceId:o,signerKeypair:g,identityHeaders:p,log:l}):{ok:!1,message:`Claim response missing required fields`}}async function Su(e){let{bankUrl:t,claim:n,clientInstanceId:r,signerKeypair:i,identityHeaders:a}=e;(e.log??(()=>{}))(`Registering signer...`);let o=await wu({bankUrl:t,sessionToken:n.sessionToken,keypair:i,identityHeaders:a});return o.status===`registration_failed`?(n.activated!==!1&&await Tu({bankUrl:t,sessionToken:n.sessionToken,identityHeaders:a}),o.reason===`public_key_conflict`?{ok:!1,message:`This device's signing key conflicts with the one the bank already holds for this agent, or that key is already registered to another agent. Re-running link will not fix this; this agent's signing key cannot be reset automatically, so ask an operator or support to reset it before linking again.`}:{ok:!1,message:`Signer registration failed (${o.reason??`unknown`}). Run link again to retry.`}):{ok:!0,result:{agentId:n.agentId,clientInstanceId:r,agentName:n.name,signer:{...i,registration:o}}}}function Cu(e){return typeof e!=`object`||!e||!(`signer`in e)?!1:bu(e.signer)}async function wu(e){let t;try{t=await fetch(`${e.bankUrl}/v1/agent-api/signer/register`,{method:`POST`,headers:{"Content-Type":`application/json`,...e.identityHeaders,Authorization:`Bearer ${e.sessionToken}`},body:JSON.stringify({signer:{algorithm:e.keypair.algorithm,publicKeyHex:e.keypair.publicKeyHex}})})}catch{return{status:`registration_failed`,reason:`registration_request_failed`}}if(t.status===409)return{status:`registration_failed`,reason:`public_key_conflict`};if(!t.ok)return{status:`registration_failed`,reason:`provider_registration_failed`};let n=await t.json().catch(()=>null);return Cu(n)?n.signer:{status:`registration_failed`,reason:`registration_response_malformed`}}async function Tu(e){try{await fetch(`${e.bankUrl}/v1/agent-api/unlink`,{method:`POST`,headers:{...e.identityHeaders,Authorization:`Bearer ${e.sessionToken}`}})}catch{}}function Eu(e){return`${e}-signer`}async function Du(e,t){let n=await e.resolve(t);if(n!==null&&`signer`in n)return n.signer;let r=await e.resolve(Eu(t));if(r!==null&&`signer`in r)return r.signer}async function Ou(e,t,n=ra){let r=await Du(e,t);if(r!==void 0)return r;let i=Us(n());return await e.save(Eu(t),i),i.signer}const ku=[53682,53683,53684,53685,53686,53687];function Au(e){return new Promise((t,n)=>{let r=0,i=()=>{if(r>=ku.length){n(Error(`No registered loopback callback ports are available`));return}let a=ku[r],o=t=>{if(e.off(`error`,o),t.code===`EADDRINUSE`){r++,i();return}n(t)};e.once(`error`,o),e.listen(a,`127.0.0.1`,()=>{e.off(`error`,o),t(a)})};i()})}async function ju(e){let{bankUrl:t,agentId:n,clientInstanceId:r,clientId:i,clientLabel:a,timeoutMs:o=3e5,log:s=()=>{},appInfo:c,existingSigner:l}=e;vc(t,`bankUrl`);let u=_(32).toString(`base64url`),d=h(`sha256`).update(u).digest(`base64url`),f=_(16).toString(`hex`),p=e=>{let n=new URL(`${t}/link-complete`);return n.searchParams.set(`linked`,e),n.toString()},m=e=>{let n=new URL(`${t}/link-complete`);return n.searchParams.set(`error`,e),n.toString()};return new Promise((e,h)=>{let g=0,_=!1,v=null,y=t=>{_||(_=!0,v&&clearTimeout(v),S.close(),e(t))},b=e=>{_||(_=!0,v&&clearTimeout(v),S.close(),h(e))},x=e=>{s(`Link failed: ${e}`),y(null)},S=N((e,t)=>{C(e,t).catch(e=>{let n=_u(e)??`Unexpected error`;t.headersSent||(t.writeHead(302,{Location:m(n)}),t.end()),s(`Link failed: ${n}`),y(null)})});async function C(e,o){let d=new URL(e.url??`/`,`http://localhost`);if(d.pathname!==`/callback`){o.writeHead(404),o.end(`Not found`);return}let h=d.searchParams.get(`error`);if(h){let e=d.searchParams.get(`error_description`)??h;o.writeHead(302,{Location:m(e)}),o.end(),x(`OAuth error: ${e}`);return}if(d.searchParams.get(`state`)!==f){o.writeHead(302,{Location:m(`State mismatch during OAuth callback`)}),o.end(),x(`State mismatch during OAuth callback`);return}let _=d.searchParams.get(`code`);if(!_){o.writeHead(302,{Location:m(`Missing authorization code`)}),o.end(),x(`Missing authorization code`);return}let v=`http://127.0.0.1:${g}/callback`,b=await xu({bankUrl:t,authCode:_,verifier:u,redirectUri:v,agentId:n,clientInstanceId:r,clientId:i,clientLabel:a,log:s,appInfo:c,existingSigner:l});if(!b.ok){o.writeHead(302,{Location:m(b.message)}),o.end(),s(`Link failed: ${b.message}`),y(null);return}o.writeHead(302,{Location:p(b.result.agentId)}),o.end(),y(b.result)}Au(S).then(e=>{g=e;let n=`http://127.0.0.1:${g}/callback`,r=`${t}/v1/auth/oauth2/authorize?`+new URLSearchParams({response_type:`code`,client_id:i,redirect_uri:n,scope:`openid email profile offline_access`,code_challenge:d,code_challenge_method:`S256`,state:f}).toString();s(`Opening browser for authentication...`),gu(r),s(`If browser didn't open, visit: ${r}`)}).catch(b),v=setTimeout(()=>{x(`Timed out waiting for authentication`)},o),v.unref()})}function Mu(e){if(typeof e!=`object`||!e)return!1;let t=e;return typeof t.deviceCode==`string`&&typeof t.userCode==`string`&&typeof t.verificationUri==`string`&&typeof t.verificationUriComplete==`string`&&typeof t.expiresIn==`number`&&typeof t.interval==`number`}function Nu(e){if(typeof e!=`object`||!e)return{};let t=e;return{code:typeof t.code==`string`?t.code:void 0,message:typeof t.error==`string`?t.error:void 0}}function Pu(e){return new Promise(t=>{setTimeout(t,e)})}function Fu(e){let t={clientInstanceId:e.clientInstanceId,...e.clientLabel===void 0?{}:{clientLabel:e.clientLabel}};return e.scope===`agent:connect`?{scope:`agent:connect`,...t,...e.suggestedAgentName===void 0?{}:{suggestedAgentName:e.suggestedAgentName}}:e.scope===`agent:link`?{scope:`agent:link`,agentId:e.agentId,...t}:{agentId:e.agentId,...t}}async function Iu(e){let{bankUrl:t,clientInstanceId:n,onUserCode:r,log:i=()=>{},appInfo:a,existingSigner:o,generateSignerKeypair:s=ra,sleep:c=Pu}=e;vc(t,`bankUrl`);let l=il(a),u=e=>(i(`Link failed: ${e}`),null),d;try{d=await fetch(`${t}/v1/agent-link/device/code`,{method:`POST`,headers:{"Content-Type":`application/json`,...l},body:JSON.stringify(Fu(e))})}catch{return u(`Could not reach the bank to start the device flow`)}if(!d.ok)return u(Nu(await d.json().catch(()=>null)).message??d.statusText);let f=await d.json();if(!Mu(f))return u(`Device authorization response missing required fields`);r({userCode:f.userCode,verificationUri:f.verificationUri,verificationUriComplete:f.verificationUriComplete,expiresInSeconds:f.expiresIn});let p=await Lu({bankUrl:t,grant:f,identityHeaders:l,sleep:c});if(!p.ok)return u(p.message);let m=p.body;if(!yu(m))return u(`Device token response missing required fields`);i(`Approved. Claiming agent...`);let h=await Su({bankUrl:t,claim:m,clientInstanceId:n,signerKeypair:o?{algorithm:o.algorithm,privateKeyHex:o.privateKeyHex,publicKeyHex:o.publicKeyHex}:s(),identityHeaders:l,log:i});return h.ok?h.result:u(h.message)}async function Lu(e){let{bankUrl:t,grant:n,identityHeaders:r,sleep:i}=e,a=Date.now()+n.expiresIn*1e3,o=Math.max(n.interval,1)*1e3,s=o;for(;Date.now()+o<=a;){await i(o);let e;try{e=await fetch(`${t}/v1/agent-link/device/token`,{method:`POST`,headers:{"Content-Type":`application/json`,...r},body:JSON.stringify({deviceCode:n.deviceCode})})}catch{s=Math.min(s*2,6e4),o=Math.max(o,s);continue}if(s=o,e.ok){let t=await e.json().catch(()=>null);return t===null?{ok:!1,message:`The bank returned an unreadable token response`}:{ok:!0,body:t}}let a=Nu(await e.json().catch(()=>null));if(a.code!==`authorization_pending`){if(a.code===`slow_down`){o+=5e3;continue}return a.code===`expired_token`?{ok:!1,message:`The device code expired before approval. Run link again`}:{ok:!1,message:a.message??`The request was denied`}}}return{ok:!1,message:`Timed out waiting for approval`}}function Ru(e){if(typeof e!=`object`||!e)return!1;let t=e,n=t.signer;return t.credential===`signing_key`&&typeof t.agentId==`string`&&typeof t.name==`string`&&typeof t.keyThumbprint==`string`&&typeof t.activated==`boolean`&&typeof n==`object`&&!!n&&typeof n.status==`string`}async function zu(e){let{bankUrl:t,clientInstanceId:n,onUserCode:r,log:i=()=>{},appInfo:a,sleep:o=Pu}=e;vc(t,`bankUrl`);let s=il(a),c=e=>(i(`Link failed: ${e}`),null),l={clientInstanceId:n,signer:{algorithm:`p256`,publicKeyHex:e.publicKeyHex},...e.clientLabel===void 0?{}:{clientLabel:e.clientLabel}},u=e.agentId===void 0?{scope:`agent:connect:service`,...l,...e.suggestedAgentName===void 0?{}:{suggestedAgentName:e.suggestedAgentName}}:{scope:`agent:link:service`,agentId:e.agentId,...l},d;try{d=await fetch(`${t}/v1/agent-link/device/code`,{method:`POST`,headers:{"Content-Type":`application/json`,...s},body:JSON.stringify(u)})}catch{return c(`Could not reach the bank to start the device flow`)}if(!d.ok){let e=Nu(await d.json().catch(()=>null));return e.code===`validation_failed`?c(`The bank rejected the request, which usually means it does not support --service yet. Nothing was created. Upgrade the bank and retry`):c(e.message??d.statusText)}let f=await d.json();if(!Mu(f))return c(`Device authorization response missing required fields`);r({userCode:f.userCode,verificationUri:f.verificationUri,verificationUriComplete:f.verificationUriComplete,expiresInSeconds:f.expiresIn});let p=await Lu({bankUrl:t,grant:f,identityHeaders:s,sleep:o});return p.ok?yu(p.body)?c(`This bank does not support --service yet: it created a session link for agent ${p.body.agentId}. Unlink it in the console before retrying`):Ru(p.body)?(i(`Approved. Signing key registered.`),{agentId:p.body.agentId,agentName:p.body.name,keyThumbprint:p.body.keyThumbprint,activated:p.body.activated,signerStatus:p.body.signer.status,...p.body.signer.reason===void 0?{}:{signerReason:p.body.signer.reason}}):c(`Device token response missing required fields`):c(p.message)}const Bu=Q({"agent-id":ss({description:`Optional agent ID shown in the Catena console; omit to create and link a new agent`,schema:Cs}),"bank-url":Z({description:`Bank API URL (defaults to $CATENA_API_URL or prod)`,default:process.env.CATENA_API_URL??`https://api.catena.com`}),browser:ls({description:`Open the browser PKCE flow (default)`,negativeDescription:`Skip the browser and link with a device code you approve from another machine`,default:!0}),name:Z({description:`Suggested name for an agent created from this link; only used when agent-id is omitted`}),service:ls({description:`Provision a deployed-service signing credential instead of linking this machine: approval registers a P-256 key, no session tokens are minted, and nothing is stored locally. Interactive agent hosts must NOT use this`,default:!1}),"public-key":Z({description:`With --service: register this existing compressed P-256 public key (the deployment already holds the private key) instead of generating a keypair`}),profile:bs}),Vu=/^0[23][0-9a-f]{64}$/;function Hu(e){let t=Math.round(e.expiresInSeconds/60);console.log(`\n To approve this link, visit: ${e.verificationUri}`),console.log(` and enter the code: ${e.userCode}`),console.log(`\n Or open: ${e.verificationUriComplete}`),console.log(`\n Waiting for approval (expires in ${t} minutes)...`)}function Uu(e){console.log(`
570
- Keep this generated keypair if the approval completed before the CLI failed:`),console.log(`\n CATENA_AGENT_PUBLIC_KEY=${e.publicKeyHex}`),console.log(` CATENA_AGENT_PRIVATE_KEY=${e.privateKeyHex}`)}function Wu(e){switch(e){case`signer_key_conflict`:return` Wallet-send signer: not registered (signer key conflict); unlink the conflicting service link or re-run with the linked agent ID`;case`provider_registration_failed`:return` Wallet-send signer: not registered (provider registration failed); retry after the provider recovers`;case void 0:return` Wallet-send signer: not registered (registration failed); retry after checking the link status`;default:return` Wallet-send signer: not registered (${e}); retry after checking the link status`}}function Gu({agentId:e,suggestedAgentName:t,browserRequested:n,isHeadless:r}){return e===void 0?{kind:`device-connect`,deviceTarget:{scope:`agent:connect`,...t===void 0?{}:{suggestedAgentName:t}}}:n?r()?{kind:`device-link`,deviceTarget:{agentId:e},notice:`No browser available — using device code flow.`}:{kind:`pkce-link`,agentId:e}:{kind:`device-link`,deviceTarget:{agentId:e}}}function Ku(e){let t=h(`sha256`).update(E(process.cwd())).digest(`hex`).slice(0,16);return`${Yc(e??`agent`).slice(0,47)}-${t}`}function qu(e){try{let t=process.cwd();if(mu(t))return null;let n=Bc(t);return{directory:Vc(t,e),reboundFrom:n!==null&&n!==e?n:null}}catch{return console.error(`Warning: could not bind the current directory to profile "${e}".`),null}}const Ju=l({meta:{name:`link`,description:`Link an existing agent, or create and link a new agent when agent-id is omitted`},args:Bu.args,async run({args:e}){let t=Bu.parse(e),n=t[`bank-url`],r=t[`agent-id`],i=t.name;if(t.service){await Yu({bankUrl:n,agentId:r,suggestedAgentName:i,publicKeyHex:t[`public-key`]});return}let a,o,s;try{if(vc(n,`--bank-url`),t[`public-key`]!==void 0)throw Error(`--public-key requires --service`);if(r!==void 0&&i!==void 0)throw Error(`--name can only be used when agent-id is omitted`);let e=ll({flag:vl(t),cwd:process.cwd(),log:e=>console.error(e)});a=(e!==null&&e.source!=="default"?e.name:null)??(r===void 0?null:Ic(r,n)),o=a??(r===void 0?Ku(i):Yc(r)),s=Gc(o,{bank_url:n,agent_id:r})}catch(e){X(e)}console.log(`
571
- Catena — Agent Setup`),console.log(`─`.repeat(25));let c=mc(),l=await Ou(c,s),u={bankUrl:n,clientInstanceId:s,log:e=>console.log(` ${e}`),appInfo:el,existingSigner:l},d=Gu({agentId:r,suggestedAgentName:i,browserRequested:t.browser,isHeadless:pu});d.kind===`device-link`&&d.notice!==void 0&&console.log(` ${d.notice}`);let f=d.kind===`pkce-link`?await ju({...u,agentId:d.agentId,clientId:`catena-cli`,timeoutMs:3e5}):await Iu({...u,...d.deviceTarget,onUserCode:Hu});f||X(`
572
- Failed to link agent. Run the command again to try again.`),await c.save(s,Gs(f.signer));let p=a??Xc(Yc(f.agentName),e=>e!==o&&Uc(e)!==null);try{p===o?Nc(p,{bank_url:n,agent_id:f.agentId,client_instance_id:s}):Zc({reservationName:o,profileName:p,profile:{bank_url:n,agent_id:f.agentId,client_instance_id:s}})}catch(e){X(e)}console.log(`\n Wrote profile "${p}"`);let m=qu(p);m!==null&&console.log(m.reboundFrom===null?` Bound ${m.directory} to profile "${p}"`:` Rebound ${m.directory} from profile "${m.reboundFrom}" to "${p}"`),console.log(` To pin this identity for an agent host, set ${ol}=${p}`),console.log(`\nDone. Agent "${f.agentName}" linked.`),process.exit(0)}});async function Yu(e){try{if(vc(e.bankUrl,`--bank-url`),e.agentId!==void 0&&e.suggestedAgentName!==void 0)throw Error(`--name can only be used when agent-id is omitted`);if(e.publicKeyHex!==void 0&&!Vu.test(e.publicKeyHex.toLowerCase()))throw Error(`--public-key must be compressed P-256 public key hex (66 chars)`)}catch(e){X(e)}console.log(`
573
- Catena — Deployed Service Setup`),console.log(`─`.repeat(31));let t=e.publicKeyHex===void 0?ra():null,n=t?.publicKeyHex??e.publicKeyHex?.toLowerCase()??``,r;try{r=sa(n)}catch(e){e instanceof na||X(e),X(`Signing key public key is not a valid P-256 point`)}console.log(` Signing key (RFC 7638 thumbprint): ${r}`);let i=`service-${h(`sha256`).update(n).digest(`hex`).slice(0,32)}`,a=!1,o=()=>{t&&a&&Uu({publicKeyHex:n,privateKeyHex:t.privateKeyHex})},s;try{s=await zu({bankUrl:e.bankUrl,clientInstanceId:i,publicKeyHex:n,...e.agentId===void 0?{}:{agentId:e.agentId},...e.suggestedAgentName===void 0?{}:{suggestedAgentName:e.suggestedAgentName},onUserCode:e=>{a=!0,Hu(e)},log:e=>console.log(` ${e}`),appInfo:el})}catch(e){o(),X(e)}s||(o(),X(`
574
- Failed to link the service. Run the command again to try again.`)),s.keyThumbprint!==r&&(o(),X(`The bank registered signing key thumbprint ${s.keyThumbprint}, which does not match the local key (${r}). Do not deploy this credential. Unlink the agent in the console and run link again`)),console.log(`\nDone. Agent "${s.agentName}" linked as a deployed service.`),console.log(` Agent ID: ${s.agentId}`),console.log(` Signing key (RFC 7638 thumbprint): ${s.keyThumbprint}`),s.signerStatus===`registered`||s.signerStatus===`already_registered`?console.log(` Wallet-send signer: registered`):s.signerStatus===`not_applicable`?console.log(` Wallet-send signer: deferred (${s.signerReason??`topology not ready`}); the org must be signing-ready before live sends`):s.signerStatus===`registration_failed`?console.log(Wu(s.signerReason)):console.log(` Wallet-send signer: not registered (${s.signerReason??s.signerStatus}); retry after checking the link status`),console.log(`
575
- Set these in the deployment environment:`),console.log(`\n CATENA_API_URL=${e.bankUrl}`),console.log(` CATENA_AGENT_PUBLIC_KEY=${n}`),t&&console.log(` CATENA_AGENT_PRIVATE_KEY=${t.privateKeyHex}`),console.log(` CATENA_AGENT_IDENTITY_URL=<the deployment's public https origin>`),t&&console.log(`
700
+ The message must have 1 to 4000 characters. You cannot read it again after you
701
+ send it. Give a longer message on stdin instead of as an argument.
702
+ `}const Ju=c({meta:{name:`guide`,description:`Print the Catena CLI agent operating guide`},run(){console.log(qu(oe))}}),Yu=Q({id:ws({description:`Intent id (e.g. int_…)`,required:!0,schema:Bs}),profile:Ls,json:Rs}),Xu=c({meta:{name:`get`,description:`Look up the current state of an intent created by this agent`},args:Yu.args,async run({args:e}){let t=Yu.parse(e);await $(t)(e=>e.getIntent(t.id))}}),Zu=c({meta:{name:`intents`,description:`Inspect intent receipts returned by governed operations`},subCommands:{get:Xu}});function Qu(e=process.env,t=process.platform){return!!(e.SSH_CONNECTION||e.SSH_TTY||t===`linux`&&!e.DISPLAY&&!e.WAYLAND_DISPLAY)}function $u(e){let t;try{t=E(ne(e))}catch{return!1}if(t===`/`)return!0;try{let e=E(process.env.HOME??ee());return t===e||e.startsWith(`${t}/`)}catch{return!0}}function ed(e){e&&process.stderr.write(`Failed to open browser: ${e.message}\n`)}function td(e){process.platform===`darwin`?v(`open`,[e],ed):process.platform===`win32`?v(`cmd`,[`/c`,`start`,``,e],ed):v(`xdg-open`,[e],ed)}function nd(e){if(typeof e!=`object`||!e)return;let t=e;return typeof t.message==`string`?t.message:typeof t.error==`string`?t.error:void 0}function rd(e){return typeof e!=`object`||!e||!(`access_token`in e)?!1:typeof e.access_token==`string`}function id(e){if(typeof e!=`object`||!e)return!1;let t=e;return typeof t.agentId==`string`&&typeof t.name==`string`&&typeof t.sessionToken==`string`&&(t.activated===void 0||typeof t.activated==`boolean`)}function ad(e){if(typeof e!=`object`||!e)return!1;let t=e;return sc.some(e=>e===t.status)&&(t.publicKeyHex===void 0||typeof t.publicKeyHex==`string`)&&(t.reason===void 0||typeof t.reason==`string`)}async function od(e){let{bankUrl:t,authCode:n,verifier:r,redirectUri:i,agentId:a,clientInstanceId:o,clientId:s,clientLabel:c,log:l=()=>{},appInfo:u,existingSigner:d,generateSignerKeypair:f=ga}=e,p=Jl(u);l(`Exchanging authorization code...`);let m=await fetch(`${t}/v1/auth/oauth2/token`,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`,...p},body:new URLSearchParams({grant_type:`authorization_code`,code:n,code_verifier:r,client_id:s,redirect_uri:i}).toString()});if(!m.ok)return{ok:!1,message:nd(await m.json().catch(()=>({message:`Token exchange failed`})))??m.statusText};let h=await m.json();if(!rd(h))return{ok:!1,message:`Token exchange response missing access_token`};l(`Claiming agent...`);let g=d?{algorithm:d.algorithm,privateKeyHex:d.privateKeyHex,publicKeyHex:d.publicKeyHex}:f(),_=await fetch(`${t}/v1/agent-api/claim`,{method:`POST`,headers:{"Content-Type":`application/json`,...p,Authorization:`Bearer ${h.access_token}`},body:JSON.stringify({agentId:a,clientInstanceId:o,...c===void 0?{}:{clientLabel:c}})});if(!_.ok)return{ok:!1,message:nd(await _.json().catch(()=>({message:`Claim failed`})))??_.statusText};let v=await _.json();return id(v)?sd({bankUrl:t,claim:v,clientInstanceId:o,signerKeypair:g,identityHeaders:p,log:l}):{ok:!1,message:`Claim response missing required fields`}}async function sd(e){let{bankUrl:t,claim:n,clientInstanceId:r,signerKeypair:i,identityHeaders:a}=e;(e.log??(()=>{}))(`Registering signer...`);let o=await ld({bankUrl:t,sessionToken:n.sessionToken,keypair:i,identityHeaders:a});return o.status===`registration_failed`?(n.activated!==!1&&await ud({bankUrl:t,sessionToken:n.sessionToken,identityHeaders:a}),o.reason===`public_key_conflict`?{ok:!1,message:`This device's signing key conflicts with the one the bank already holds for this agent, or that key is already registered to another agent. Re-running link will not fix this; this agent's signing key cannot be reset automatically, so ask an operator or support to reset it before linking again.`}:{ok:!1,message:`Signer registration failed (${o.reason??`unknown`}). Run link again to retry.`}):{ok:!0,result:{agentId:n.agentId,clientInstanceId:r,agentName:n.name,signer:{...i,registration:o}}}}function cd(e){return typeof e!=`object`||!e||!(`signer`in e)?!1:ad(e.signer)}async function ld(e){let t;try{t=await fetch(`${e.bankUrl}/v1/agent-api/signer/register`,{method:`POST`,headers:{"Content-Type":`application/json`,...e.identityHeaders,Authorization:`Bearer ${e.sessionToken}`},body:JSON.stringify({signer:{algorithm:e.keypair.algorithm,publicKeyHex:e.keypair.publicKeyHex}})})}catch{return{status:`registration_failed`,reason:`registration_request_failed`}}if(t.status===409)return{status:`registration_failed`,reason:`public_key_conflict`};if(!t.ok)return{status:`registration_failed`,reason:`provider_registration_failed`};let n=await t.json().catch(()=>null);return cd(n)?n.signer:{status:`registration_failed`,reason:`registration_response_malformed`}}async function ud(e){try{await fetch(`${e.bankUrl}/v1/agent-api/unlink`,{method:`POST`,headers:{...e.identityHeaders,Authorization:`Bearer ${e.sessionToken}`}})}catch{}}function dd(e){return`${e}-signer`}async function fd(e,t){let n=await e.resolve(t);if(n!==null&&`signer`in n)return n.signer;let r=await e.resolve(dd(t));if(r!==null&&`signer`in r)return r.signer}async function pd(e,t,n=ga){let r=await fd(e,t);if(r!==void 0)return r;let i=xc(n());return await e.save(dd(t),i),i.signer}const md=[53682,53683,53684,53685,53686,53687];function hd(e){return new Promise((t,n)=>{let r=0,i=()=>{if(r>=md.length){n(Error(`No registered loopback callback ports are available`));return}let a=md[r],o=t=>{if(e.off(`error`,o),t.code===`EADDRINUSE`){r++,i();return}n(t)};e.once(`error`,o),e.listen(a,`127.0.0.1`,()=>{e.off(`error`,o),t(a)})};i()})}async function gd(e){let{bankUrl:t,agentId:n,clientInstanceId:r,clientId:i,clientLabel:a,timeoutMs:o=3e5,log:s=()=>{},appInfo:c,existingSigner:l}=e;Xc(t,`bankUrl`);let u=g(32).toString(`base64url`),d=m(`sha256`).update(u).digest(`base64url`),f=g(16).toString(`hex`),p=e=>{let n=new URL(`${t}/link-complete`);return n.searchParams.set(`linked`,e),n.toString()},h=e=>{let n=new URL(`${t}/link-complete`);return n.searchParams.set(`error`,e),n.toString()};return new Promise((e,m)=>{let g=0,_=!1,v=null,y=t=>{_||(_=!0,v&&clearTimeout(v),S.close(),e(t))},b=e=>{_||(_=!0,v&&clearTimeout(v),S.close(),m(e))},x=e=>{s(`Link failed: ${e}`),y(null)},S=re((e,t)=>{C(e,t).catch(e=>{let n=nd(e)??`Unexpected error`;t.headersSent||(t.writeHead(302,{Location:h(n)}),t.end()),s(`Link failed: ${n}`),y(null)})});async function C(e,o){let d=new URL(e.url??`/`,`http://localhost`);if(d.pathname!==`/callback`){o.writeHead(404),o.end(`Not found`);return}let m=d.searchParams.get(`error`);if(m){let e=d.searchParams.get(`error_description`)??m;o.writeHead(302,{Location:h(e)}),o.end(),x(`OAuth error: ${e}`);return}if(d.searchParams.get(`state`)!==f){o.writeHead(302,{Location:h(`State mismatch during OAuth callback`)}),o.end(),x(`State mismatch during OAuth callback`);return}let _=d.searchParams.get(`code`);if(!_){o.writeHead(302,{Location:h(`Missing authorization code`)}),o.end(),x(`Missing authorization code`);return}let v=`http://127.0.0.1:${g}/callback`,b=await od({bankUrl:t,authCode:_,verifier:u,redirectUri:v,agentId:n,clientInstanceId:r,clientId:i,clientLabel:a,log:s,appInfo:c,existingSigner:l});if(!b.ok){o.writeHead(302,{Location:h(b.message)}),o.end(),s(`Link failed: ${b.message}`),y(null);return}o.writeHead(302,{Location:p(b.result.agentId)}),o.end(),y(b.result)}hd(S).then(e=>{g=e;let n=`http://127.0.0.1:${g}/callback`,r=`${t}/v1/auth/oauth2/authorize?`+new URLSearchParams({response_type:`code`,client_id:i,redirect_uri:n,scope:`openid email profile offline_access`,code_challenge:d,code_challenge_method:`S256`,state:f}).toString();s(`Opening browser for authentication...`),td(r),s(`If browser didn't open, visit: ${r}`)}).catch(b),v=setTimeout(()=>{x(`Timed out waiting for authentication`)},o),v.unref()})}function _d(e){if(typeof e!=`object`||!e)return!1;let t=e;return typeof t.deviceCode==`string`&&typeof t.userCode==`string`&&typeof t.verificationUri==`string`&&typeof t.verificationUriComplete==`string`&&typeof t.expiresIn==`number`&&typeof t.interval==`number`}function vd(e){if(typeof e!=`object`||!e)return{};let t=e;return{code:typeof t.code==`string`?t.code:void 0,message:typeof t.error==`string`?t.error:void 0}}function yd(e){return new Promise(t=>{setTimeout(t,e)})}function bd(e){let t={clientInstanceId:e.clientInstanceId,...e.clientLabel===void 0?{}:{clientLabel:e.clientLabel}};return e.scope===`agent:connect`?{scope:`agent:connect`,...t,...e.suggestedAgentName===void 0?{}:{suggestedAgentName:e.suggestedAgentName}}:e.scope===`agent:link`?{scope:`agent:link`,agentId:e.agentId,...t}:{agentId:e.agentId,...t}}async function xd(e){let{bankUrl:t,clientInstanceId:n,onUserCode:r,log:i=()=>{},appInfo:a,existingSigner:o,generateSignerKeypair:s=ga,sleep:c=yd}=e;Xc(t,`bankUrl`);let l=Jl(a),u=e=>(i(`Link failed: ${e}`),null),d;try{d=await fetch(`${t}/v1/agent-link/device/code`,{method:`POST`,headers:{"Content-Type":`application/json`,...l},body:JSON.stringify(bd(e))})}catch{return u(`Could not reach the bank to start the device flow`)}if(!d.ok)return u(vd(await d.json().catch(()=>null)).message??d.statusText);let f=await d.json();if(!_d(f))return u(`Device authorization response missing required fields`);r({userCode:f.userCode,verificationUri:f.verificationUri,verificationUriComplete:f.verificationUriComplete,expiresInSeconds:f.expiresIn});let p=await Sd({bankUrl:t,grant:f,identityHeaders:l,sleep:c});if(!p.ok)return u(p.message);let m=p.body;if(!id(m))return u(`Device token response missing required fields`);i(`Approved. Claiming agent...`);let h=await sd({bankUrl:t,claim:m,clientInstanceId:n,signerKeypair:o?{algorithm:o.algorithm,privateKeyHex:o.privateKeyHex,publicKeyHex:o.publicKeyHex}:s(),identityHeaders:l,log:i});return h.ok?h.result:u(h.message)}async function Sd(e){let{bankUrl:t,grant:n,identityHeaders:r,sleep:i}=e,a=Date.now()+n.expiresIn*1e3,o=Math.max(n.interval,1)*1e3,s=o;for(;Date.now()+o<=a;){await i(o);let e;try{e=await fetch(`${t}/v1/agent-link/device/token`,{method:`POST`,headers:{"Content-Type":`application/json`,...r},body:JSON.stringify({deviceCode:n.deviceCode})})}catch{s=Math.min(s*2,6e4),o=Math.max(o,s);continue}if(s=o,e.ok){let t=await e.json().catch(()=>null);return t===null?{ok:!1,message:`The bank returned an unreadable token response`}:{ok:!0,body:t}}let a=vd(await e.json().catch(()=>null));if(a.code!==`authorization_pending`){if(a.code===`slow_down`){o+=5e3;continue}return a.code===`expired_token`?{ok:!1,message:`The device code expired before approval. Run link again`}:{ok:!1,message:a.message??`The request was denied`}}}return{ok:!1,message:`Timed out waiting for approval`}}function Cd(e){if(typeof e!=`object`||!e)return!1;let t=e,n=t.signer;return t.credential===`signing_key`&&typeof t.agentId==`string`&&typeof t.name==`string`&&typeof t.keyThumbprint==`string`&&typeof t.activated==`boolean`&&typeof n==`object`&&!!n&&typeof n.status==`string`}async function wd(e){let{bankUrl:t,clientInstanceId:n,onUserCode:r,log:i=()=>{},appInfo:a,sleep:o=yd}=e;Xc(t,`bankUrl`);let s=Jl(a),c=e=>(i(`Link failed: ${e}`),null),l={clientInstanceId:n,signer:{algorithm:`p256`,publicKeyHex:e.publicKeyHex},...e.clientLabel===void 0?{}:{clientLabel:e.clientLabel}},u=e.agentId===void 0?{scope:`agent:connect:service`,...l,...e.suggestedAgentName===void 0?{}:{suggestedAgentName:e.suggestedAgentName}}:{scope:`agent:link:service`,agentId:e.agentId,...l},d;try{d=await fetch(`${t}/v1/agent-link/device/code`,{method:`POST`,headers:{"Content-Type":`application/json`,...s},body:JSON.stringify(u)})}catch{return c(`Could not reach the bank to start the device flow`)}if(!d.ok){let e=vd(await d.json().catch(()=>null));return e.code===`validation_failed`?c(`The bank rejected the request, which usually means it does not support --service yet. Nothing was created. Upgrade the bank and retry`):c(e.message??d.statusText)}let f=await d.json();if(!_d(f))return c(`Device authorization response missing required fields`);r({userCode:f.userCode,verificationUri:f.verificationUri,verificationUriComplete:f.verificationUriComplete,expiresInSeconds:f.expiresIn});let p=await Sd({bankUrl:t,grant:f,identityHeaders:s,sleep:o});return p.ok?id(p.body)?c(`This bank does not support --service yet: it created a session link for agent ${p.body.agentId}. Unlink it in the console before retrying`):Cd(p.body)?(i(`Approved. Signing key registered.`),{agentId:p.body.agentId,agentName:p.body.name,keyThumbprint:p.body.keyThumbprint,activated:p.body.activated,signerStatus:p.body.signer.status,...p.body.signer.reason===void 0?{}:{signerReason:p.body.signer.reason}}):c(`Device token response missing required fields`):c(p.message)}const Td=Q({"agent-id":ws({description:`Optional agent ID shown in the Catena console; omit to create and link a new agent`,schema:Bs}),"bank-url":Z({description:`Bank API URL (defaults to $CATENA_API_URL or prod)`,default:process.env.CATENA_API_URL??`https://api.catena.com`}),browser:Es({description:`Open the browser PKCE flow (default)`,negativeDescription:`Skip the browser and link with a device code you approve from another machine`,default:!0}),name:Z({description:`Suggested name for an agent created from this link; only used when agent-id is omitted`}),service:Es({description:`Provision a deployed-service signing credential instead of linking this machine: approval registers a P-256 key, no session tokens are minted, and nothing is stored locally. Interactive agent hosts must NOT use this`,default:!1}),"public-key":Z({description:`With --service: register this existing compressed P-256 public key (the deployment already holds the private key) instead of generating a keypair`}),profile:Ls}),Ed=/^0[23][0-9a-f]{64}$/;function Dd(e){let t=Math.round(e.expiresInSeconds/60);console.log(`\n To approve this link, visit: ${e.verificationUri}`),console.log(` and enter the code: ${e.userCode}`),console.log(`\n Or open: ${e.verificationUriComplete}`),console.log(`\n Waiting for approval (expires in ${t} minutes)...`)}function Od(e){console.log(`
703
+ Keep this generated keypair if the approval completed before the CLI failed:`),console.log(`\n ${Nl}=${e.privateKeyHex}`),console.log(`\nKeep this public key with your deployment notes. It is not an\nenvironment variable; signer recovery needs it:\n\n ${e.publicKeyHex}`)}function kd(e){switch(e){case`signer_key_conflict`:return` Wallet-send signer: not registered (signer key conflict); unlink the conflicting service link or re-run with the linked agent ID`;case`provider_registration_failed`:return` Wallet-send signer: not registered (provider registration failed); retry after the provider recovers`;case void 0:return` Wallet-send signer: not registered (registration failed); retry after checking the link status`;default:return` Wallet-send signer: not registered (${e}); retry after checking the link status`}}function Ad({agentId:e,suggestedAgentName:t,browserRequested:n,isHeadless:r}){return e===void 0?{kind:`device-connect`,deviceTarget:{scope:`agent:connect`,...t===void 0?{}:{suggestedAgentName:t}}}:n?r()?{kind:`device-link`,deviceTarget:{agentId:e},notice:`No browser available — using device code flow.`}:{kind:`pkce-link`,agentId:e}:{kind:`device-link`,deviceTarget:{agentId:e}}}function jd(e){let t=m(`sha256`).update(E(process.cwd())).digest(`hex`).slice(0,16);return`${Dl(e??`agent`).slice(0,47)}-${t}`}function Md(e){try{let t=process.cwd();if($u(t))return null;let n=vl(t);return{directory:yl(t,e),reboundFrom:n!==null&&n!==e?n:null}}catch{return console.error(`Warning: could not bind the current directory to profile "${e}".`),null}}const Nd=c({meta:{name:`link`,description:`Link an existing agent, or create and link a new agent when agent-id is omitted`},args:Td.args,async run({args:e}){let t=Td.parse(e),n=t[`bank-url`],r=t[`agent-id`],i=t.name;if(t.service){await Pd({bankUrl:n,agentId:r,suggestedAgentName:i,publicKeyHex:t[`public-key`]});return}let a,o,s;try{if(Xc(n,`--bank-url`),t[`public-key`]!==void 0)throw Error(`--public-key requires --service`);if(r!==void 0&&i!==void 0)throw Error(`--name can only be used when agent-id is omitted`);let e=Bl({flag:ru(t),cwd:process.cwd(),log:e=>console.error(e)});a=(e!==null&&e.source!=="default"?e.name:null)??(r===void 0?null:ml(r,n)),o=a??(r===void 0?jd(i):Dl(r)),s=Cl(o,{bank_url:n,agent_id:r})}catch(e){X(e)}console.log(`
704
+ Catena — Agent Setup`),console.log(`─`.repeat(25));let c=Kc(),l=await pd(c,s),u={bankUrl:n,clientInstanceId:s,log:e=>console.log(` ${e}`),appInfo:Wl,existingSigner:l},d=Ad({agentId:r,suggestedAgentName:i,browserRequested:t.browser,isHeadless:Qu});d.kind===`device-link`&&d.notice!==void 0&&console.log(` ${d.notice}`);let f=d.kind===`pkce-link`?await gd({...u,agentId:d.agentId,clientId:`catena-cli`,timeoutMs:3e5}):await xd({...u,...d.deviceTarget,onUserCode:Dd});f||X(`
705
+ Failed to link agent. Run the command again to try again.`),await c.save(s,Cc(f.signer));let p=a??Ol(Dl(f.agentName),e=>e!==o&&xl(e)!==null);try{p===o?dl(p,{bank_url:n,agent_id:f.agentId,client_instance_id:s}):kl({reservationName:o,profileName:p,profile:{bank_url:n,agent_id:f.agentId,client_instance_id:s}})}catch(e){X(e)}console.log(`\n Wrote profile "${p}"`);let m=Md(p);m!==null&&console.log(m.reboundFrom===null?` Bound ${m.directory} to profile "${p}"`:` Rebound ${m.directory} from profile "${m.reboundFrom}" to "${p}"`),console.log(` To pin this identity for an agent host, set ${Ll}=${p}`),Fl()&&console.log(` ${Nl} is set and outranks ${Ll}; unset it, or pass --profile ${p}, to use this profile`),console.log(`\nDone. Agent "${f.agentName}" linked.`),process.exit(0)}});async function Pd(e){try{if(Xc(e.bankUrl,`--bank-url`),e.agentId!==void 0&&e.suggestedAgentName!==void 0)throw Error(`--name can only be used when agent-id is omitted`);if(e.publicKeyHex!==void 0&&!Ed.test(e.publicKeyHex.toLowerCase()))throw Error(`--public-key must be compressed P-256 public key hex (66 chars)`)}catch(e){X(e)}console.log(`
706
+ Catena — Deployed Service Setup`),console.log(`─`.repeat(31));let t=e.publicKeyHex===void 0?ga():null,n=t?.publicKeyHex??e.publicKeyHex?.toLowerCase()??``,r;try{r=ba(n)}catch(e){e instanceof ha||X(e),X(`Signing key public key is not a valid P-256 point`)}console.log(` Signing key (RFC 7638 thumbprint): ${r}`);let i=`service-${m(`sha256`).update(n).digest(`hex`).slice(0,32)}`,a=!1,o=()=>{t&&a&&Od({publicKeyHex:n,privateKeyHex:t.privateKeyHex})},s;try{s=await wd({bankUrl:e.bankUrl,clientInstanceId:i,publicKeyHex:n,...e.agentId===void 0?{}:{agentId:e.agentId},...e.suggestedAgentName===void 0?{}:{suggestedAgentName:e.suggestedAgentName},onUserCode:e=>{a=!0,Dd(e)},log:e=>console.log(` ${e}`),appInfo:Wl})}catch(e){o(),X(e)}s||(o(),X(`
707
+ Failed to link the service. Run the command again to try again.`)),s.keyThumbprint!==r&&(o(),X(`The bank registered signing key thumbprint ${s.keyThumbprint}, which does not match the local key (${r}). Do not deploy this credential. Unlink the agent in the console and run link again`)),console.log(`\nDone. Agent "${s.agentName}" linked as a deployed service.`),console.log(` Agent ID: ${s.agentId}`),console.log(` Signing key (RFC 7638 thumbprint): ${s.keyThumbprint}`),s.signerStatus===`registered`||s.signerStatus===`already_registered`?console.log(` Wallet-send signer: registered`):s.signerStatus===`not_applicable`?console.log(` Wallet-send signer: deferred (${s.signerReason??`topology not ready`}); the org must be signing-ready before live sends`):s.signerStatus===`registration_failed`?console.log(kd(s.signerReason)):console.log(` Wallet-send signer: not registered (${s.signerReason??s.signerStatus}); retry after checking the link status`),console.log(`
708
+ Set this in the deployment environment:`),console.log(t?`\n ${Nl}=${t.privateKeyHex}`:`\n ${Nl}=<the private key this deployment already holds>`),e.bankUrl!==`https://api.catena.com`&&console.log(` CATENA_API_URL=${e.bankUrl}`),console.log(`\nKeep the agent ID and this public key with your deployment notes. They\nare not environment variables; signer recovery needs them:\n\n ${n}`),t&&console.log(`
576
709
  The private key is shown once and is not stored on this machine.`),process.exit(0)}
577
710
  /*! decimal.js-light v2.5.1 https://github.com/MikeMcl/decimal.js-light/LICENCE */
578
- const Xu=e(s(((e,t)=>{(function(e){var n=1e9,r={precision:20,rounding:4,toExpNeg:-7,toExpPos:21,LN10:`2.302585092994045684017991454684364207601101488628772976033327900967572609677352480235997205089598298341967784042286`},i=!0,a=`[DecimalError] `,o=a+`Invalid argument: `,s=a+`Exponent out of range: `,c=Math.floor,l=Math.pow,u=/^(\d+(\.\d*)?|\.\d+)(e[+-]?\d+)?$/i,d,f=1e7,p=7,m=9007199254740991,h=c(m/p),g={};g.absoluteValue=g.abs=function(){var e=new this.constructor(this);return e.s&&=1,e},g.comparedTo=g.cmp=function(e){var t,n,r,i,a=this;if(e=new a.constructor(e),a.s!==e.s)return a.s||-e.s;if(a.e!==e.e)return a.e>e.e^a.s<0?1:-1;for(r=a.d.length,i=e.d.length,t=0,n=r<i?r:i;t<n;++t)if(a.d[t]!==e.d[t])return a.d[t]>e.d[t]^a.s<0?1:-1;return r===i?0:r>i^a.s<0?1:-1},g.decimalPlaces=g.dp=function(){var e=this,t=e.d.length-1,n=(t-e.e)*p;if(t=e.d[t],t)for(;t%10==0;t/=10)n--;return n<0?0:n},g.dividedBy=g.div=function(e){return b(this,new this.constructor(e))},g.dividedToIntegerBy=g.idiv=function(e){var t=this,n=t.constructor;return E(b(t,new n(e),0,1),n.precision)},g.equals=g.eq=function(e){return!this.cmp(e)},g.exponent=function(){return S(this)},g.greaterThan=g.gt=function(e){return this.cmp(e)>0},g.greaterThanOrEqualTo=g.gte=function(e){return this.cmp(e)>=0},g.isInteger=g.isint=function(){return this.e>this.d.length-2},g.isNegative=g.isneg=function(){return this.s<0},g.isPositive=g.ispos=function(){return this.s>0},g.isZero=function(){return this.s===0},g.lessThan=g.lt=function(e){return this.cmp(e)<0},g.lessThanOrEqualTo=g.lte=function(e){return this.cmp(e)<1},g.logarithm=g.log=function(e){var t,n=this,r=n.constructor,o=r.precision,s=o+5;if(e===void 0)e=new r(10);else if(e=new r(e),e.s<1||e.eq(d))throw Error(a+`NaN`);if(n.s<1)throw Error(a+(n.s?`NaN`:`-Infinity`));return n.eq(d)?new r(0):(i=!1,t=b(T(n,s),T(e,s),s),i=!0,E(t,o))},g.minus=g.sub=function(e){var t=this;return e=new t.constructor(e),t.s==e.s?D(t,e):_(t,(e.s=-e.s,e))},g.modulo=g.mod=function(e){var t,n=this,r=n.constructor,o=r.precision;if(e=new r(e),!e.s)throw Error(a+`NaN`);return n.s?(i=!1,t=b(n,e,0,1).times(e),i=!0,n.minus(t)):E(new r(n),o)},g.naturalExponential=g.exp=function(){return x(this)},g.naturalLogarithm=g.ln=function(){return T(this)},g.negated=g.neg=function(){var e=new this.constructor(this);return e.s=-e.s||0,e},g.plus=g.add=function(e){var t=this;return e=new t.constructor(e),t.s==e.s?_(t,e):D(t,(e.s=-e.s,e))},g.precision=g.sd=function(e){var t,n,r,i=this;if(e!==void 0&&e!==!!e&&e!==1&&e!==0)throw Error(o+e);if(t=S(i)+1,r=i.d.length-1,n=r*p+1,r=i.d[r],r){for(;r%10==0;r/=10)n--;for(r=i.d[0];r>=10;r/=10)n++}return e&&t>n?t:n},g.squareRoot=g.sqrt=function(){var e,t,n,r,o,s,l,u=this,d=u.constructor;if(u.s<1){if(!u.s)return new d(0);throw Error(a+`NaN`)}for(e=S(u),i=!1,o=Math.sqrt(+u),o==0||o==1/0?(t=y(u.d),(t.length+e)%2==0&&(t+=`0`),o=Math.sqrt(t),e=c((e+1)/2)-(e<0||e%2),o==1/0?t=`5e`+e:(t=o.toExponential(),t=t.slice(0,t.indexOf(`e`)+1)+e),r=new d(t)):r=new d(o.toString()),n=d.precision,o=l=n+3;;)if(s=r,r=s.plus(b(u,s,l+2)).times(.5),y(s.d).slice(0,l)===(t=y(r.d)).slice(0,l)){if(t=t.slice(l-3,l+1),o==l&&t==`4999`){if(E(s,n+1,0),s.times(s).eq(u)){r=s;break}}else if(t!=`9999`)break;l+=4}return i=!0,E(r,n)},g.times=g.mul=function(e){var t,n,r,a,o,s,c,l,u,d=this,p=d.constructor,m=d.d,h=(e=new p(e)).d;if(!d.s||!e.s)return new p(0);for(e.s*=d.s,n=d.e+e.e,l=m.length,u=h.length,l<u&&(o=m,m=h,h=o,s=l,l=u,u=s),o=[],s=l+u,r=s;r--;)o.push(0);for(r=u;--r>=0;){for(t=0,a=l+r;a>r;)c=o[a]+h[r]*m[a-r-1]+t,o[a--]=c%f|0,t=c/f|0;o[a]=(o[a]+t)%f|0}for(;!o[--s];)o.pop();return t?++n:o.shift(),e.d=o,e.e=n,i?E(e,p.precision):e},g.toDecimalPlaces=g.todp=function(e,t){var r=this,i=r.constructor;return r=new i(r),e===void 0?r:(v(e,0,n),t===void 0?t=i.rounding:v(t,0,8),E(r,e+S(r)+1,t))},g.toExponential=function(e,t){var r,i=this,a=i.constructor;return e===void 0?r=O(i,!0):(v(e,0,n),t===void 0?t=a.rounding:v(t,0,8),i=E(new a(i),e+1,t),r=O(i,!0,e+1)),r},g.toFixed=function(e,t){var r,i,a=this,o=a.constructor;return e===void 0?O(a):(v(e,0,n),t===void 0?t=o.rounding:v(t,0,8),i=E(new o(a),e+S(a)+1,t),r=O(i.abs(),!1,e+S(i)+1),a.isneg()&&!a.isZero()?`-`+r:r)},g.toInteger=g.toint=function(){var e=this,t=e.constructor;return E(new t(e),S(e)+1,t.rounding)},g.toNumber=function(){return+this},g.toPower=g.pow=function(e){var t,n,r,o,s,l,u=this,f=u.constructor,h=12,g=+(e=new f(e));if(!e.s)return new f(d);if(u=new f(u),!u.s){if(e.s<1)throw Error(a+`Infinity`);return u}if(u.eq(d))return u;if(r=f.precision,e.eq(d))return E(u,r);if(t=e.e,n=e.d.length-1,l=t>=n,s=u.s,!l){if(s<0)throw Error(a+`NaN`)}else if((n=g<0?-g:g)<=m){for(o=new f(d),t=Math.ceil(r/p+4),i=!1;n%2&&(o=o.times(u),k(o.d,t)),n=c(n/2),n!==0;)u=u.times(u),k(u.d,t);return i=!0,e.s<0?new f(d).div(o):E(o,r)}return s=s<0&&e.d[Math.max(t,n)]&1?-1:1,u.s=1,i=!1,o=e.times(T(u,r+h)),i=!0,o=x(o),o.s=s,o},g.toPrecision=function(e,t){var r,i,a=this,o=a.constructor;return e===void 0?(r=S(a),i=O(a,r<=o.toExpNeg||r>=o.toExpPos)):(v(e,1,n),t===void 0?t=o.rounding:v(t,0,8),a=E(new o(a),e,t),r=S(a),i=O(a,e<=r||r<=o.toExpNeg,e)),i},g.toSignificantDigits=g.tosd=function(e,t){var r=this,i=r.constructor;return e===void 0?(e=i.precision,t=i.rounding):(v(e,1,n),t===void 0?t=i.rounding:v(t,0,8)),E(new i(r),e,t)},g.toString=g.valueOf=g.val=g.toJSON=function(){var e=this,t=S(e),n=e.constructor;return O(e,t<=n.toExpNeg||t>=n.toExpPos)};function _(e,t){var n,r,a,o,s,c,l,u,d=e.constructor,m=d.precision;if(!e.s||!t.s)return t.s||(t=new d(e)),i?E(t,m):t;if(l=e.d,u=t.d,s=e.e,a=t.e,l=l.slice(),o=s-a,o){for(o<0?(r=l,o=-o,c=u.length):(r=u,a=s,c=l.length),s=Math.ceil(m/p),c=s>c?s+1:c+1,o>c&&(o=c,r.length=1),r.reverse();o--;)r.push(0);r.reverse()}for(c=l.length,o=u.length,c-o<0&&(o=c,r=u,u=l,l=r),n=0;o;)n=(l[--o]=l[o]+u[o]+n)/f|0,l[o]%=f;for(n&&(l.unshift(n),++a),c=l.length;l[--c]==0;)l.pop();return t.d=l,t.e=a,i?E(t,m):t}function v(e,t,n){if(e!==~~e||e<t||e>n)throw Error(o+e)}function y(e){var t,n,r,i=e.length-1,a=``,o=e[0];if(i>0){for(a+=o,t=1;t<i;t++)r=e[t]+``,n=p-r.length,n&&(a+=w(n)),a+=r;o=e[t],r=o+``,n=p-r.length,n&&(a+=w(n))}else if(o===0)return`0`;for(;o%10==0;)o/=10;return a+o}var b=(function(){function e(e,t){var n,r=0,i=e.length;for(e=e.slice();i--;)n=e[i]*t+r,e[i]=n%f|0,r=n/f|0;return r&&e.unshift(r),e}function t(e,t,n,r){var i,a;if(n!=r)a=n>r?1:-1;else for(i=a=0;i<n;i++)if(e[i]!=t[i]){a=e[i]>t[i]?1:-1;break}return a}function n(e,t,n){for(var r=0;n--;)e[n]-=r,r=+(e[n]<t[n]),e[n]=r*f+e[n]-t[n];for(;!e[0]&&e.length>1;)e.shift()}return function(r,i,o,s){var c,l,u,d,m,h,g,_,v,y,b,x,C,w,T,ee,D,O,k=r.constructor,A=r.s==i.s?1:-1,j=r.d,M=i.d;if(!r.s)return new k(r);if(!i.s)throw Error(a+`Division by zero`);for(l=r.e-i.e,D=M.length,T=j.length,g=new k(A),_=g.d=[],u=0;M[u]==(j[u]||0);)++u;if(M[u]>(j[u]||0)&&--l,x=o==null?o=k.precision:s?o+(S(r)-S(i))+1:o,x<0)return new k(0);if(x=x/p+2|0,u=0,D==1)for(d=0,M=M[0],x++;(u<T||d)&&x--;u++)C=d*f+(j[u]||0),_[u]=C/M|0,d=C%M|0;else{for(d=f/(M[0]+1)|0,d>1&&(M=e(M,d),j=e(j,d),D=M.length,T=j.length),w=D,v=j.slice(0,D),y=v.length;y<D;)v[y++]=0;O=M.slice(),O.unshift(0),ee=M[0],M[1]>=f/2&&++ee;do d=0,c=t(M,v,D,y),c<0?(b=v[0],D!=y&&(b=b*f+(v[1]||0)),d=b/ee|0,d>1?(d>=f&&(d=f-1),m=e(M,d),h=m.length,y=v.length,c=t(m,v,h,y),c==1&&(d--,n(m,D<h?O:M,h))):(d==0&&(c=d=1),m=M.slice()),h=m.length,h<y&&m.unshift(0),n(v,m,y),c==-1&&(y=v.length,c=t(M,v,D,y),c<1&&(d++,n(v,D<y?O:M,y))),y=v.length):c===0&&(d++,v=[0]),_[u++]=d,c&&v[0]?v[y++]=j[w]||0:(v=[j[w]],y=1);while((w++<T||v[0]!==void 0)&&x--)}return _[0]||_.shift(),g.e=l,E(g,s?o+S(g)+1:o)}})();function x(e,t){var n,r,a,o,c,u,f=0,p=0,m=e.constructor,h=m.precision;if(S(e)>16)throw Error(s+S(e));if(!e.s)return new m(d);for(t==null?(i=!1,u=h):u=t,c=new m(.03125);e.abs().gte(.1);)e=e.times(c),p+=5;for(r=Math.log(l(2,p))/Math.LN10*2+5|0,u+=r,n=a=o=new m(d),m.precision=u;;){if(a=E(a.times(e),u),n=n.times(++f),c=o.plus(b(a,n,u)),y(c.d).slice(0,u)===y(o.d).slice(0,u)){for(;p--;)o=E(o.times(o),u);return m.precision=h,t==null?(i=!0,E(o,h)):o}o=c}}function S(e){for(var t=e.e*p,n=e.d[0];n>=10;n/=10)t++;return t}function C(e,t,n){if(t>e.LN10.sd())throw i=!0,n&&(e.precision=n),Error(a+`LN10 precision limit exceeded`);return E(new e(e.LN10),t)}function w(e){for(var t=``;e--;)t+=`0`;return t}function T(e,t){var n,r,o,s,c,l,u,f,p,m=1,h=10,g=e,_=g.d,v=g.constructor,x=v.precision;if(g.s<1)throw Error(a+(g.s?`NaN`:`-Infinity`));if(g.eq(d))return new v(0);if(t==null?(i=!1,f=x):f=t,g.eq(10))return t??(i=!0),C(v,f);if(f+=h,v.precision=f,n=y(_),r=n.charAt(0),s=S(g),Math.abs(s)<0x5543df729c000){for(;r<7&&r!=1||r==1&&n.charAt(1)>3;)g=g.times(e),n=y(g.d),r=n.charAt(0),m++;s=S(g),r>1?(g=new v(`0.`+n),s++):g=new v(r+`.`+n.slice(1))}else return u=C(v,f+2,x).times(s+``),g=T(new v(r+`.`+n.slice(1)),f-h).plus(u),v.precision=x,t==null?(i=!0,E(g,x)):g;for(l=c=g=b(g.minus(d),g.plus(d),f),p=E(g.times(g),f),o=3;;){if(c=E(c.times(p),f),u=l.plus(b(c,new v(o),f)),y(u.d).slice(0,f)===y(l.d).slice(0,f))return l=l.times(2),s!==0&&(l=l.plus(C(v,f+2,x).times(s+``))),l=b(l,new v(m),f),v.precision=x,t==null?(i=!0,E(l,x)):l;l=u,o+=2}}function ee(e,t){var n,r,a;for((n=t.indexOf(`.`))>-1&&(t=t.replace(`.`,``)),(r=t.search(/e/i))>0?(n<0&&(n=r),n+=+t.slice(r+1),t=t.substring(0,r)):n<0&&(n=t.length),r=0;t.charCodeAt(r)===48;)++r;for(a=t.length;t.charCodeAt(a-1)===48;)--a;if(t=t.slice(r,a),t){if(a-=r,n=n-r-1,e.e=c(n/p),e.d=[],r=(n+1)%p,n<0&&(r+=p),r<a){for(r&&e.d.push(+t.slice(0,r)),a-=p;r<a;)e.d.push(+t.slice(r,r+=p));t=t.slice(r),r=p-t.length}else r-=a;for(;r--;)t+=`0`;if(e.d.push(+t),i&&(e.e>h||e.e<-h))throw Error(s+n)}else e.s=0,e.e=0,e.d=[0];return e}function E(e,t,n){var r,a,o,u,d,m,g,_,v=e.d;for(u=1,o=v[0];o>=10;o/=10)u++;if(r=t-u,r<0)r+=p,a=t,g=v[_=0];else{if(_=Math.ceil((r+1)/p),o=v.length,_>=o)return e;for(g=o=v[_],u=1;o>=10;o/=10)u++;r%=p,a=r-p+u}if(n!==void 0&&(o=l(10,u-a-1),d=g/o%10|0,m=t<0||v[_+1]!==void 0||g%o,m=n<4?(d||m)&&(n==0||n==(e.s<0?3:2)):d>5||d==5&&(n==4||m||n==6&&(r>0?a>0?g/l(10,u-a):0:v[_-1])%10&1||n==(e.s<0?8:7))),t<1||!v[0])return m?(o=S(e),v.length=1,t=t-o-1,v[0]=l(10,(p-t%p)%p),e.e=c(-t/p)||0):(v.length=1,v[0]=e.e=e.s=0),e;if(r==0?(v.length=_,o=1,_--):(v.length=_+1,o=l(10,p-r),v[_]=a>0?(g/l(10,u-a)%l(10,a)|0)*o:0),m)for(;;)if(_==0){(v[0]+=o)==f&&(v[0]=1,++e.e);break}else{if(v[_]+=o,v[_]!=f)break;v[_--]=0,o=1}for(r=v.length;v[--r]===0;)v.pop();if(i&&(e.e>h||e.e<-h))throw Error(s+S(e));return e}function D(e,t){var n,r,a,o,s,c,l,u,d,m,h=e.constructor,g=h.precision;if(!e.s||!t.s)return t.s?t.s=-t.s:t=new h(e),i?E(t,g):t;if(l=e.d,m=t.d,r=t.e,u=e.e,l=l.slice(),s=u-r,s){for(d=s<0,d?(n=l,s=-s,c=m.length):(n=m,r=u,c=l.length),a=Math.max(Math.ceil(g/p),c)+2,s>a&&(s=a,n.length=1),n.reverse(),a=s;a--;)n.push(0);n.reverse()}else{for(a=l.length,c=m.length,d=a<c,d&&(c=a),a=0;a<c;a++)if(l[a]!=m[a]){d=l[a]<m[a];break}s=0}for(d&&(n=l,l=m,m=n,t.s=-t.s),c=l.length,a=m.length-c;a>0;--a)l[c++]=0;for(a=m.length;a>s;){if(l[--a]<m[a]){for(o=a;o&&l[--o]===0;)l[o]=f-1;--l[o],l[a]+=f}l[a]-=m[a]}for(;l[--c]===0;)l.pop();for(;l[0]===0;l.shift())--r;return l[0]?(t.d=l,t.e=r,i?E(t,g):t):new h(0)}function O(e,t,n){var r,i=S(e),a=y(e.d),o=a.length;return t?(n&&(r=n-o)>0?a=a.charAt(0)+`.`+a.slice(1)+w(r):o>1&&(a=a.charAt(0)+`.`+a.slice(1)),a=a+(i<0?`e`:`e+`)+i):i<0?(a=`0.`+w(-i-1)+a,n&&(r=n-o)>0&&(a+=w(r))):i>=o?(a+=w(i+1-o),n&&(r=n-i-1)>0&&(a=a+`.`+w(r))):((r=i+1)<o&&(a=a.slice(0,r)+`.`+a.slice(r)),n&&(r=n-o)>0&&(i+1===o&&(a+=`.`),a+=w(r))),e.s<0?`-`+a:a}function k(e,t){if(e.length>t)return e.length=t,!0}function A(e){var t,n,r;function i(e){var t=this;if(!(t instanceof i))return new i(e);if(t.constructor=i,e instanceof i){t.s=e.s,t.e=e.e,t.d=(e=e.d)?e.slice():e;return}if(typeof e==`number`){if(e*0!=0)throw Error(o+e);if(e>0)t.s=1;else if(e<0)e=-e,t.s=-1;else{t.s=0,t.e=0,t.d=[0];return}if(e===~~e&&e<1e7){t.e=0,t.d=[e];return}return ee(t,e.toString())}if(typeof e!=`string`)throw Error(o+e);if(e.charCodeAt(0)===45?(e=e.slice(1),t.s=-1):t.s=1,u.test(e))ee(t,e);else throw Error(o+e)}if(i.prototype=g,i.ROUND_UP=0,i.ROUND_DOWN=1,i.ROUND_CEIL=2,i.ROUND_FLOOR=3,i.ROUND_HALF_UP=4,i.ROUND_HALF_DOWN=5,i.ROUND_HALF_EVEN=6,i.ROUND_HALF_CEIL=7,i.ROUND_HALF_FLOOR=8,i.clone=A,i.config=i.set=j,e===void 0&&(e={}),e)for(r=[`precision`,`rounding`,`toExpNeg`,`toExpPos`,`LN10`],t=0;t<r.length;)e.hasOwnProperty(n=r[t++])||(e[n]=this[n]);return i.config(e),i}function j(e){if(!e||typeof e!=`object`)throw Error(a+`Object expected`);var t,r,i,s=[`precision`,1,n,`rounding`,0,8,`toExpNeg`,-1/0,0,`toExpPos`,0,1/0];for(t=0;t<s.length;t+=3)if((i=e[r=s[t]])!==void 0)if(c(i)===i&&i>=s[t+1]&&i<=s[t+2])this[r]=i;else throw Error(o+r+`: `+i);if((i=e[r=`LN10`])!==void 0)if(i==Math.LN10)this[r]=new this(i);else throw Error(o+r+`: `+i);return this}r=A(r),r.default=r.Decimal=r,d=new r(1),typeof define==`function`&&define.amd?define(function(){return r}):t!==void 0&&t.exports?t.exports=r:(e||=typeof self<`u`&&self&&self.self==self?self:Function(`return this`)(),e.Decimal=r)})(e)}))(),1).default;Xu.set({rounding:Xu.ROUND_HALF_EVEN});const Zu=new Map,Qu=/^[A-Z]{3}$/,$u=/^[A-Z0-9]{2,6}$/;function ed(e,t,n,r){if(Zu.has(e))throw Error(`duplicate asset id ${e}`);let i=new Xu(r);if(i.isNegative())throw Error(`dustThreshold must be a non-negative decimal`);if(i.decimalPlaces()>t)throw Error(`dustThreshold (${r}) must not be finer than the asset's ${t} decimals`);if(!Number.isInteger(t)||!Number.isInteger(n)||t<0||n<0)throw Error(`decimals and presentmentDecimals must be non-negative integers`);if(n>t)throw Error(`presentment decimals should be less than or equal to decimals`)}function td(e,t,n,r,i){if(!Qu.test(e))throw Error(`fiat asset ids must be 3-letter ISO-4217 codes`);ed(e,n,r,i.dustThreshold);let a=e;return Zu.set(e,{id:a,symbol:e,name:t,kind:`fiat`,decimals:n,presentmentDecimals:r,denomination:e,valuation:{type:`par`},dustThreshold:i.dustThreshold}),a}function nd(e,t,n,r,i){if(!$u.test(e)||Qu.test(e))throw Error(`stablecoin tickers must be 2-6 uppercase alphanumerics and not a 3-letter ISO-4217 shape`);let a=Zu.get(i.denomination);if(!a||a.kind!==`fiat`)throw Error(`stablecoin denomination must be a registered fiat asset, got ${i.denomination}`);if(n>a.decimals)throw Error(`par stablecoin decimals (${n}) must not exceed its denomination fiat's (${a.decimals})`);ed(e,n,r,i.dustThreshold);let o=e;return Zu.set(e,{id:o,symbol:e,name:t,kind:`stablecoin`,decimals:n,presentmentDecimals:r,denomination:a.denomination,valuation:{type:`par`},dustThreshold:i.dustThreshold}),o}nd(`USDC`,`USD Coin`,6,2,{denomination:td(`USD`,`US Dollar`,6,2,{dustThreshold:`0.01`}),dustThreshold:`0.01`}),new Xu(1e6),new Xu(1e3);const rd=f.pipe(f.string(`Amount must be a string`),f.nonEmpty(`Amount must not be empty`),f.check(e=>e.trim()===e,`Amount must not have leading or trailing whitespace`),f.check(e=>!e.includes(`e`)&&!e.includes(`E`),`Scientific notation is not supported (e.g. use 1000000 instead of 1e6)`),f.check(e=>!e.startsWith(`+`),`Amount must not have a '+' prefix`),f.check(e=>!e.startsWith(`-`),`Amount must be non-negative`),f.check(e=>{try{return new Xu(e).gte(0)}catch{return!1}},`Amount must be a valid decimal (e.g. 100 or 100.50)`)),id=f.pipe(f.string(`Count must be a string`),f.transform(e=>e.trim()),f.check(e=>/^\d+$/.test(e),`Count must be a whole number of transactions (e.g. 20)`),f.transform(Number),f.check(e=>Number.isSafeInteger(e),`Count is too large`),f.check(e=>e>=1,`Count must be at least 1`)),ad={s:1,m:60,h:3600,d:86400},od=f.pipe(f.string(`Duration must be a string`),f.transform(e=>e.trim()),f.check(e=>/^\d+[smhd]?$/.test(e),`Duration must be a number of seconds or a value with a unit (e.g. 90s, 30m, 4h, 2d)`),f.transform(e=>{let t=e.at(-1)??``;return t in ad?Number(e.slice(0,-1))*ad[t]:Number(e)}),f.check(e=>e>=60,`Duration must be at least 1 minute`),f.check(e=>e<=604800,`Duration must be at most 7 days`)),sd=Q({profile:bs,json:xs}),cd=l({meta:{name:`show`,description:`Show the agent's assigned policy`},args:sd.args,async run({args:e}){await $(sd.parse(e))(e=>e.getPolicy())}}),ld=Q({account:Z({description:`Account whose existing hard limit should increase. For a transfer limit, the source account funds move out of.`,required:!0}),capability:us({description:`Which capability's limit to increase: send (payments to counterparties) or transfer (between the user's own accounts)`,choices:Io,default:`send`}),rule:us({description:`Which limit to adjust`,choices:Xa,default:`per_transaction_amount`}),amount:Z({description:`New threshold for an amount limit, as a decimal USD string (e.g. 500.00)`,schema:rd,showValueInError:!0}),count:Z({description:`New threshold for a transaction-count limit (e.g. 20)`,schema:id,showValueInError:!0}),duration:Z({description:`How long the override should last once approved (e.g. 90s, 30m, 4h, 2d). One minute to seven days.`,required:!0,schema:od,showValueInError:!0}),reason:Z({description:`Why the task needs this, for the person who reviews the request`,required:!0}),idempotencyKey:Z({description:`Optional operation key. Reuse the same value only when retrying the same submission; omitted generates a fresh key for this invocation.`,schema:Nl}),profile:bs,json:xs}),ud=l({meta:{name:`request-override`,description:`Ask a person to approve a temporary change to this agent's limits`},args:ld.args,async run({args:e}){let t=ld.parse(e),n=$(t),r={type:`policy_override`,operations:[dd(t)],durationSeconds:t.duration,reason:t.reason};await n(e=>e.submitIntent({action:r,...t.idempotencyKey!==void 0&&{idempotencyKey:t.idempotencyKey}}))}});function dd(e){return e.rule===`hourly_count`||e.rule===`daily_count`?(e.amount!==void 0&&X(`--amount does not apply to ${e.rule}; use --count`),e.count===void 0&&X(`--count is required for ${e.rule}`),{type:`increase_limit`,accountId:e.account,capability:e.capability,limitType:e.rule,newLimit:{count:e.count}}):(e.count!==void 0&&X(`--count does not apply to ${e.rule}; use --amount`),e.amount===void 0&&X(`--amount is required for ${e.rule}`),{type:`increase_limit`,accountId:e.account,capability:e.capability,limitType:e.rule,newLimit:{amount:e.amount,assetId:`USD`}})}const fd=l({meta:{name:`policy`,description:`Inspect the agent's policy`},subCommands:{show:cd,"request-override":ud}}),pd=Q({profile:ss({description:`Profile name`,required:!0})});function md(){try{return ul({env:process.env[ol],cwd:process.cwd(),log:e=>console.error(e)})}catch(e){return X(e)}}const hd=l({meta:{name:`use`,description:`Set the default credential profile`},args:pd.args,async run({args:e}){let t=pd.parse(e);try{Jc(t.profile),_l({defaultProfile:t.profile})}catch(e){X(e)}}}),gd=l({meta:{name:`current`,description:`Show the selected credential profile and how it was chosen`},async run(){let e=md(),t;try{t=Uc(e.name)}catch(e){X(e)}t===null&&X(`Profile "${e.name}" is not linked.\nRun 'catena link --profile ${e.name} <agent-id>' to authenticate.`),_l({profile:e.name,source:e.source,bankUrl:t.bank_url,agentId:Pc(t)?t.agent_id:void 0})}}),_d=l({meta:{name:`list`,description:`List credential profiles and their directory bindings`},async run(){let e;try{e=Ac()}catch(e){X(e)}let t;try{t=ul({env:process.env[ol],cwd:process.cwd()}).name}catch{t=null}let n=Object.entries(e.directories??{});_l({defaultProfile:e.default_profile,profiles:Object.entries(e.profiles).toSorted(([e],[t])=>e.localeCompare(t)).map(([e,r])=>({name:e,bankUrl:r.bank_url,agentId:Pc(r)?r.agent_id:void 0,directories:n.filter(([,t])=>t===e).map(([e])=>e).toSorted(),current:e===t}))})}}),vd=Q({profile:ss({description:`Profile name to bind`,required:!0}),path:ss({description:`Directory to bind (defaults to the current directory)`})}),yd=l({meta:{name:`bind`,description:`Bind a directory to a profile for automatic selection`},args:vd.args,async run({args:e}){let t=vd.parse(e);try{let e=t.path??process.cwd();if(mu(e))throw Error(`Refusing to bind the home directory or an ancestor of it — that would shadow the default profile for every directory beneath it. Bind a specific agent directory instead.`);let n=Vc(e,t.profile);_l({profile:t.profile,directory:n})}catch(e){X(e)}}}),bd=Q({path:ss({description:`Directory to unbind (defaults to the current directory)`})}),xd=l({meta:{name:`unbind`,description:`Remove a directory's profile binding`},args:bd.args,async run({args:e}){let t=bd.parse(e);try{_l(Hc(t.path??process.cwd()))}catch(e){X(e)}}}),Sd=l({meta:{name:`profiles`,description:`Manage credential profiles`},subCommands:{use:hd,current:gd,list:_d,bind:yd,unbind:xd}}),Cd=Q({account:Z({description:`Source account id`,required:!0,schema:Cs}),rail:Z({description:`Destination counterparty rail id (cprl_...)`,required:!0,schema:Cs}),amount:Z({description:`USD amount as a decimal string (e.g. 125.00)`,required:!0,schema:rd,showValueInError:!0}),method:us({description:`ach | wire | on-chain; ach and wire require a bank rail, on-chain a wallet rail`,required:!0,choices:uo}),memo:Z({description:`Memo on the underlying transfer`}),description:Z({description:`Operator-facing description`}),idempotencyKey:Z({description:`Optional operation key. Reuse the same value only when retrying the same submission; omitted generates a fresh key for this invocation.`,schema:Nl}),profile:bs,json:xs}),wd=l({meta:{name:`send`,description:`Submit a USD send intent to a counterparty rail`},args:Cd.args,async run({args:e}){let t=Cd.parse(e),n=$(t),r={type:`send`,accountId:t.account,counterpartyRailId:t.rail,amount:t.amount,method:t.method,...t.memo?{memo:t.memo}:{},...t.description?{description:t.description}:{}};await n(e=>e.submitIntent({action:r,...t.idempotencyKey?{idempotencyKey:t.idempotencyKey}:{}}))}}),Td=Q({from:Z({description:`Source account id`,required:!0,schema:Cs}),to:Z({description:`Destination account id`,required:!0,schema:Cs}),amount:Z({description:`USD amount as a decimal string (e.g. 125.00)`,required:!0,schema:rd,showValueInError:!0}),memo:Z({description:`Memo on the underlying transfer`}),description:Z({description:`Operator-facing description`}),idempotencyKey:Z({description:`Optional operation key. Reuse the same value only when retrying the same submission; omitted generates a fresh key for this invocation.`,schema:Nl}),profile:bs,json:xs}),Ed=l({meta:{name:`transfer`,description:`Submit a USD transfer intent between two of this agent's accounts`},args:Td.args,async run({args:e}){let t=Td.parse(e),n=$(t),r={type:`transfer`,accountId:t.from,toAccountId:t.to,amount:t.amount,...t.memo?{memo:t.memo}:{},...t.description?{description:t.description}:{}};await n(e=>e.submitIntent({action:r,...t.idempotencyKey?{idempotencyKey:t.idempotencyKey}:{}}))}}),Dd=Q({profile:bs,force:ls({description:`Remove the profile and its local credentials without contacting the server; use when the credential is missing, revoked, or a link was interrupted`,default:!1}),json:xs}),Od=l({meta:{name:`unlink`,description:`Disconnect the selected agent profile`},args:Dd.args,async run({args:e}){let t=Dd.parse(e),n=fl(),r;try{r=ul({flag:vl(t),env:process.env[ol],cwd:process.cwd(),log:e=>console.error(e)}).name}catch(e){X(e)}if(t.force){let e;try{if(e=Uc(r),e===null)throw Error(`Profile "${r}" not found`);await n.delete(e.client_instance_id),await n.delete(Eu(e.client_instance_id)),Rc(r)}catch(e){X(e)}_l({success:!0,profile:r,...Pc(e)?{agentId:e.agent_id}:{},local:!0},{compact:t.json});return}let i=`To remove only this machine's copy, run 'catena unlink --profile ${r} --force'.`,a=await $c({profileName:r,fallbackBankUrl:al},n);a.ok||X(`${a.message} ${i}`);let o=dl(a);try{await o.unlinkAgent(),await n.delete(a.clientInstanceId),await n.delete(Eu(a.clientInstanceId)),Rc(r)}catch(e){X(`${$o(gl(e,r))} ${i}`)}_l({success:!0,profile:r,agentId:a.agentId},{compact:t.json})}}),kd=Q({profile:bs,json:xs}),Ad=l({meta:{name:`whoami`,description:`Show which agent you are currently acting as`},args:kd.args,async run({args:e}){await $(kd.parse(e))(e=>e.whoami())}});function jd(e){throw Error(`Unhandled case: ${String(e)}`)}const Md=[`PAYMENT-REQUIRED`,`X-Payment-Required`],Nd=/^0x[0-9a-fA-F]{64}$/,Pd=/^0x[0-9a-fA-F]{40}$/,Fd=f.looseObject({success:f.boolean(),transaction:f.string(),extensions:f.optional(f.unknown())}),Id=f.looseObject({x402Version:f.literal(2),accepts:f.array(Ao),resource:f.optional(jo),extensions:f.optional(f.unknown())}),Ld=`x402_network_mismatch`,Rd=`x402_counterparty_rail_not_found`,zd=new Set([`x402_requirement_not_payable`,Ld,Rd]),Bd={"eip155:8453":`Base`,"eip155:84532":`Base Sepolia`};function Vd(e){let t=Object.hasOwn(Bd,e)?Bd[e]:void 0;return t?`${t} (${e})`:e}function Hd(e){let t=e.replaceAll(`-`,`+`).replaceAll(`_`,`/`),n=Uint8Array.from(atob(t),e=>e.charCodeAt(0));return JSON.parse(new TextDecoder().decode(n))}function Ud(e){let t=Md.map(t=>e.headers.get(t)).find(e=>e!==null);if(t)try{let e=f.safeParse(Id,Hd(t));return e.success?e.output:void 0}catch{return}}async function Wd(e,t,n){try{let r=n.headers.get(`PAYMENT-RESPONSE`);if(!r)return;let i=f.safeParse(Fd,Hd(r));if(!i.success||!i.output.success||!Nd.test(i.output.transaction))return;let a=Ha(i.output.extensions);await e.reportSettlement({intentId:t,txHash:i.output.transaction,...a!==void 0&&{receipt:a}})}catch{}}var Gd=class extends Error{reasons;constructor(e,t=[],n={}){super(t.length>0&&(n.appendReasonsToMessage??!0)?`${e}: ${t.join(`; `)}`:e),this.name=`X402PaymentError`,this.reasons=t}},Kd=class extends Gd{accountId;requiredNetworks;constructor(e,t,n=[]){super(`Account ${e} cannot fund this 402 challenge: it must be paid from a wallet account on ${t.map(Vd).join(` or `)}`,n,{appendReasonsToMessage:!1}),this.name=`X402NetworkMismatchError`,this.accountId=e,this.requiredNetworks=t}},qd=class extends Gd{payTo;network;serviceName;constructor(e,t,n,r=[]){super(`This 402 pays ${e} on ${Vd(t)}, which is not a saved counterparty wallet rail; add it as a counterparty before paying`,r,{appendReasonsToMessage:!1}),this.name=`X402CounterpartyNotFoundError`,this.payTo=e,this.network=t,this.serviceName=n}},Jd=class extends Gd{intentId;expiresAt;constructor(e,t,n){super(`The payment is awaiting a human approval (intent ${e}); once an operator approves it, retry the request to complete the payment`,t),this.name=`X402ApprovalPendingError`,this.intentId=e,this.expiresAt=n}},Yd=class extends Gd{receipt;constructor(e,t){super(`The payment settled (intent ${e.intentId}) but the post-payment continuation failed; retry the request with the PAYMENT-SIGNATURE header from the receipt (or getIntent("${e.intentId}") data.paymentCredential.value) instead of paying again`),this.name=`X402RetryFailedError`,this.receipt=e,this.cause=t}};async function Xd(e,t){try{return await t()}catch(t){throw new Yd(e,t)}}var Zd=class extends Gd{intentId;requirements;constructor(e,t,n){super(`The payment could not be confirmed (intent ${e}); check getIntent("${e}") — completed: reuse its data.paymentCredential.value as the PAYMENT-SIGNATURE header; processing: poll until terminal; pay again only after blocked or failed`),this.name=`X402SubmitInterruptedError`,this.intentId=e,this.requirements=t,this.cause=n}};async function Qd(e,t){let n=t.paymentRequired.accepts.filter(e=>e.scheme===`exact`),r=n.filter(e=>t.maxAtomicAmount===void 0||/^\d+$/.test(e.amount)&&BigInt(e.amount)<=t.maxAtomicAmount).slice(0,5);if(r.length===0)throw new Gd(n.length>0&&t.maxAtomicAmount!==void 0?`Every requirement in the 402 challenge costs more than the caller's maximum amount`:`The 402 challenge offers no exact-scheme requirement Catena can pay`);let i=t.resource??t.paymentRequired.resource,a=[];for(let n of r){let r=await $d(e,{accountId:t.accountId,requirements:n,resource:i,signedOffer:Va(t.paymentRequired.extensions,n)}).catch(e=>{if(e instanceof Wo&&e.code!==void 0&&zd.has(e.code)){a.push({error:e,requirement:n});return}throw e});if(r)return r}let o=a.filter(e=>e.error.code===Rd),s=a.filter(e=>e.error.code===Ld),c=a.filter(e=>e.error.code!==Rd&&e.error.code!==Ld),l=[...new Set([...o,...s,...c].map(e=>e.error.message))],u=o.find(e=>e.error.status===404&&Pd.test(e.requirement.payTo));throw u?new qd(u.requirement.payTo,u.requirement.network,i?.serviceName,l):s.length>0&&o.length===0?new Kd(t.accountId,[...new Set(s.map(e=>e.requirement.network))],l):new Gd(`No requirement in the 402 challenge is payable from this account`,l)}async function $d(e,t){let n=await e.submitIntent({action:{type:`x402`,accountId:t.accountId,paymentRequirements:t.requirements,...t.resource!==void 0&&{resource:t.resource},...t.signedOffer!==void 0&&{signedOffer:t.signedOffer}},idempotencyKey:crypto.randomUUID()}).catch(e=>{throw e instanceof Yo&&e.outcome===`unknown`?new Zd(e.intentId,t.requirements,e):e});if(n.status===`completed`){let e=Co(n.data);if(e!==void 0)return{intentId:n.id,paymentSignature:e,requirements:t.requirements};throw new Gd(`The completed payment did not carry an x402 payment signature`)}switch(n.status){case`pending`:throw new Jd(n.id,n.reasons,n.expiresAt);case`processing`:throw new Gd(`The payment is still processing (intent ${n.id}); this client cannot resume an in-flight x402 settlement`);case`blocked`:case`failed`:throw new Gd(`Catena declined the payment`,n.reasons)}return jd(n.status)}function ef(e,t){return t?.body!==void 0&&t.body!==null&&typeof t.body!=`string`&&!(t.body instanceof URLSearchParams)&&!(t.body instanceof Blob)&&!(t.body instanceof ArrayBuffer)&&!ArrayBuffer.isView(t.body)?!1:typeof Request<`u`&&e instanceof Request?e.body===null&&!e.bodyUsed:!0}function tf(e,t){let n=(t.baseFetch??globalThis.fetch).bind(globalThis);return async(r,i)=>{let a=await n(r,i);if(a.status!==402)return a;let o=Ud(a);if(!o)return a;if(!ef(r,i))throw new Gd(`The request body cannot be replayed after payment; buffer the body (string, Blob, or ArrayBuffer) before using the x402 fetch wrapper`);let s=await Qd(e,{accountId:t.accountId,paymentRequired:o,...t.maxAtomicAmount!==void 0&&{maxAtomicAmount:t.maxAtomicAmount}});await Xd(s,()=>t.onPayment?.(s));let c=new Headers(typeof Request<`u`&&r instanceof Request?r.headers:void 0);new Headers(i?.headers).forEach((e,t)=>{c.set(t,e)}),c.set(`PAYMENT-SIGNATURE`,s.paymentSignature);let l=await Xd(s,()=>n(r,{...i,headers:c}));return Wd(e,s.intentId,l),l}}function nf(e,t){try{T(e,{recursive:!0,mode:448}),S(e,448);let n=ne(e,t);return T(n,{recursive:!0,mode:448}),S(n,448),n}catch{return}}const rf=4e3;function af(e){try{return k(e)}catch{return}}function of(e,t,n){try{x(e,t)}catch{X(n)}}function sf(e){let t=re(e),n=M(t),r=af(n);(r===void 0||!r.isDirectory())&&X(`--output ${e}: directory ${n} does not exist`);let i=af(t);return i===void 0?(of(n,C.W_OK|C.X_OK,`--output ${e}: directory ${n} is not writable`),t):(i.isDirectory()&&X(`--output ${e}: destination is a directory`),i.isFile()||X(`--output ${e}: destination is not a regular file`),of(t,C.W_OK,`--output ${e}: destination is not writable`),t)}const cf=/^(?:con|prn|aux|nul|com\d|lpt\d)$/i;function lf(e){if(e!==void 0&&Ss.test(e)&&!cf.test(e))return`${e}.body`;let t=`${Date.now()}-${_(4).toString(`hex`)}.body`;return e===void 0?`unpaid-${t}`:`paid-${t}`}function uf(e,t){let n=nf(wc(),`responses`);if(n===void 0)return;let r=ne(n,lf(t));try{return A(r,e,{mode:384}),r}catch{return}}function df(e){let t=e.subarray(0,rf*4),n=t.toString(`utf8`);return{decoded:n,complete:t.length===e.length&&n.length<=rf&&ae(e)}}function ff({decoded:e,complete:t}){let n=e.slice(0,rf),r=n.charCodeAt(n.length-1);return{body:r>=55296&&r<=56319?n.slice(0,-1):n,...!t&&{bodyTruncated:!0}}}function pf(e,t){if(t.complete)return{body:t.decoded};if(e.length>268435456)return{...ff(t),error:`no writable location for the ${e.length}-byte body and it is too large to inline; only the .body preview survived`};if(ae(e)){let t=e.toString(`utf8`);if(6*t.length+2<=ie.MAX_STRING_LENGTH)return{body:t};try{return JSON.stringify(t),{body:t}}catch{}}return{body:e.toString(`base64`),bodyEncoding:`base64`}}function mf(e){return e.error===void 0?e.bodyEncoding===void 0?`the full body is inlined in the result's .body field`:`the full body is inlined base64-encoded in the result's .body field`:e.error}function hf(e,t,n){let r=uf(e,t);return r===void 0?pf(e,n):{...ff(n),bodyPath:r}}function gf(e,t,n){let r=df(e);if(n===void 0)return r.complete?{body:r.decoded}:hf(e,t,r);try{A(n,e,{mode:384})}catch(i){let a=hf(e,t,r),o=`--output ${n}: ${$o(i)}`;return`bodyPath`in a?{...a,error:`${o}; the full body was saved to ${a.bodyPath}`}:{...a,error:`${o}; ${mf(a)}`}}return{...ff(r),bodyPath:n}}function _f(e){if(e===`@-`)return vf(0,`stdin`);if(e.startsWith(`@`)){let t=e.slice(1);return t===``?X(`--data @<path>: no file path given`):vf(t,`@${t}`)}return e}function vf(e,t){try{return ee(e,`utf8`)}catch(e){return X(`--data ${t}: ${$o(e)}`)}}function yf(e){let[t,n=``]=e.split(`.`);return BigInt(`${t}${n.padEnd(6,`0`)}`)}function bf(e){return{intentId:e.intentId,amountAtomicUsdc:e.requirements.amount,payTo:e.requirements.payTo,network:e.requirements.network}}const xf={"eip155:8453":`base`,"eip155:84532":`base-sepolia`};function Sf(e){return Object.hasOwn(xf,e)?xf[e]:void 0}function Cf(e){return`'${e.replaceAll(`'`,`'\\''`)}'`}function wf(e){return e===void 0?``:` --profile ${Cf(e)}`}function Tf(e){let t=e?.replaceAll(/[\p{C}\s]/gu,` `).replaceAll(/ {2,}/g,` `).trim();return t!==void 0&&t.length>0?t:void 0}function Ef(e,t,n,r){let i=Sf(t)??Cf(t);return`catena counterparties create wallet --name ${Cf(n??`<name>`)} --address ${Cf(e)} --network ${i}${wf(r)}`}const Df=f.pipe(f.string(),f.check(e=>tl.test(e.slice(0,Math.max(e.indexOf(`:`),0))),`must be "Name: Value" with a valid HTTP header name`),f.transform(e=>{let t=e.indexOf(`:`);return{name:e.slice(0,t),value:e.slice(t+1).trimStart()}}),f.check(e=>/^[\t\x20-\x7e\x80-\xff]*$/.test(e.value),`header value contains characters not allowed in an HTTP header`));function Of(e,t){return e.some(e=>e.name.toLowerCase()===t)}function kf(e,t){Of(e,`payment-signature`)&&X(`--header cannot set PAYMENT-SIGNATURE; the payment loop attaches it after paying`),Of(e,`content-type`)&&t!==void 0&&X(`--header "Content-Type: ..." conflicts with --content-type`)}function Af(e,t,n){let r=[...n!==void 0&&!Of(e,`content-type`)?[[`content-type`,t??`application/json`]]:[],...e.map(e=>[e.name,e.value])];return r.length>0?new Headers(r):void 0}const jf=Q({url:Z({description:`The paywalled URL to fetch (an x402 v2 endpoint)`,required:!0,schema:f.pipe(f.string(),f.url())}),account:Z({description:`Source wallet account id the payment draws from`,required:!0,schema:Cs}),maxAmount:Z({description:`Refuse challenges above this USD amount (decimal string, e.g. 0.25). Policy limits still apply server-side.`,schema:f.pipe(f.string(),f.regex(/^\d+(\.\d{1,6})?$/))}),method:us({description:`HTTP method for the request`,choices:[`GET`,`POST`]}),data:Z({description:`Request body. Use @path to read a file or @- for stdin. Implies POST and a JSON content type unless overridden.`}),contentType:Z({description:`Content-Type header for the request body (default application/json when --data is set)`}),output:Z({description:`Write the full response body to this file (must be a regular file; written for any HTTP status — check .status). Without it .body is capped at 4000 characters; longer or non-UTF-8 bodies are saved to a file (path reported in .bodyPath)`}),header:cs({description:`Request header as "Name: Value" (repeatable, like curl -H); sent on the initial request and the paid retry`,schema:Df}),profile:bs,json:xs}),Mf=l({meta:{name:`x402`,description:`Fetch a URL, paying its x402 (HTTP 402) challenge via USDC`},args:jf.args,async run({args:e,rawArgs:t}){let n=jf.parse(e,t),r=n.method??(n.data===void 0?`GET`:`POST`);n.data!==void 0&&r!==`POST`&&X(`--data cannot be sent with --method ${r}; a body requires POST`),n.contentType!==void 0&&n.data===void 0&&X(`--content-type has no effect without --data`),kf(n.header,n.contentType);let i=n.output===void 0?void 0:sf(n.output),a=n.data===void 0?void 0:_f(n.data),o=Af(n.header,n.contentType,a);await $(n)(async e=>{let t,s=tf(e,{accountId:n.account,...n.maxAmount!==void 0&&{maxAtomicAmount:yf(n.maxAmount)},onPayment:e=>{t=e}}),c;try{c=await s(n.url,{method:r,...a!==void 0&&{body:a},...o!==void 0&&{headers:o}})}catch(e){if(e instanceof Yd)return{status:null,paid:!0,retryFailed:!0,payment:bf(e.receipt),error:e.message};if(e instanceof Kd){let t=e.requiredNetworks.map(e=>Sf(e)??e);return{status:null,paid:!1,retryFailed:!1,networkMismatch:{account:e.accountId,requiredNetworks:t,requiredNetworkIds:[...e.requiredNetworks]},error:`${e.message}. Re-run with --account set to a wallet account on ${t.join(` or `)} (your account ids are in \`catena accounts list${wf(n.profile)}\`).`}}if(e instanceof qd){let t=Tf(e.serviceName),r=t!==void 0&&t.length<=40?t:void 0,i=Ef(e.payTo,e.network,r,n.profile),a=t===void 0?``:` The endpoint calls itself "${t.length>40?`${t.slice(0,40)}…`:t}" (unverified) — rename it if that is not a service you recognize.`;return{status:null,paid:!1,retryFailed:!1,counterpartyNotFound:{payTo:e.payTo,network:Sf(e.network)??e.network,networkId:e.network,createCommand:i,nameIsPlaceholder:r===void 0,...t!==void 0&&{serviceName:t}},error:`${e.message}. Add it, then re-run:\n ${i}\n(counterparty creation may require approval per your policy)${a}`}}if(e instanceof Jd)return{status:null,paid:!1,retryFailed:!1,approvalPending:{intentId:e.intentId,expiresAt:e.expiresAt,reasons:[...e.reasons]},error:e.message};throw e}let l={status:c.status,paid:t!==void 0,retryFailed:!1,...t!==void 0&&{payment:bf(t)}},u;try{u=Buffer.from(await c.arrayBuffer())}catch(e){let r=t===void 0?``:`; the payment settled — re-read the PAYMENT-SIGNATURE with \`catena intents get ${t.intentId}${wf(n.profile)}\` to retry manually`;return{...l,error:`failed to read the response body: ${$o(e)}${r}`}}return{...l,...gf(u,t?.intentId,i)}},{exitCode:e=>+(`error`in e)})}}),Nf=f.object({version:f.literal(1),result:f.literal(`latest-version`),latestVersion:f.string(),checkedAt:f.pipe(f.string(),f.isoTimestamp())}),Pf=f.object({version:f.literal(1),result:f.literal(`fetch-failure`),checkedAt:f.pipe(f.string(),f.isoTimestamp())}),Ff=f.variant(`result`,[Nf,Pf]),If=f.object({"dist-tags":f.object({latest:f.string()})}),Lf=`cache`;function Rf(){return ne(wc(),Lf,`cli-version.json`)}function zf(e){return new URL(encodeURIComponent(e),`https://registry.npmjs.org/`).href}function Bf(e){try{let t=JSON.parse(ee(e,`utf8`)),n=f.safeParse(Ff,t);return n.success?n.output:void 0}catch{return}}function Vf(e){let t=Bf(e);if(!t)return;let n=Date.parse(t.checkedAt);if(!Number.isFinite(n))return;let r=Date.now()-n,i=t.result===`fetch-failure`?36e5:864e5;if(!(r<0||r>=i))return t}function Hf(e){try{return!w(e)||k(e).isFile()}catch{return!1}}function Uf(e){let t=nf(wc(),Lf);if(t===void 0||!Hf(e))return!1;let n=ne(t,`.cli-version-check-${_(6).toString(`hex`)}.tmp`);try{return A(n,``,{encoding:`utf8`,mode:384}),O(n,{force:!0}),!0}catch{try{O(n,{force:!0})}catch{}return!1}}function Wf(e,t){if(nf(wc(),Lf)===void 0)return!1;try{let n=`${e}.${_(6).toString(`hex`)}.tmp`;return A(n,`${JSON.stringify({version:1,...t,checkedAt:new Date().toISOString()},null,2)}\n`,{encoding:`utf8`,mode:384}),D(n,e),!0}catch{return!1}}async function Gf(e){let t=new AbortController,n=setTimeout(()=>t.abort(),750);n.unref();try{let n=await fetch(zf(e.packageName),{headers:{accept:`application/json`},signal:t.signal});if(!n.ok)return;let r=await n.json(),i=f.safeParse(If,r);return i.success?i.output[`dist-tags`].latest:void 0}catch{return}finally{clearTimeout(n)}}function Kf(e){let t=P.valid(e.currentVersion),n=P.valid(e.latestVersion);t!==null&&n!==null&&P.gt(n,t)&&console.error(`A newer ${e.packageName} version is available: ${n} (current ${t}).`)}async function qf({packageName:e,currentVersion:t}){let n=Rf(),r=Vf(n);if(r?.result===`latest-version`){Kf({packageName:e,currentVersion:t,latestVersion:r.latestVersion});return}if(r?.result===`fetch-failure`||!Uf(n))return;let i=await Gf({packageName:e});if(i===void 0){Wf(n,{result:`fetch-failure`});return}Wf(n,{result:`latest-version`,latestVersion:i}),Kf({packageName:e,currentVersion:t,latestVersion:i})}async function Jf(e){return typeof e==`function`?await e():await e}async function Yf(e){return typeof e==`function`?await e():await e}async function Xf(e){return typeof e==`function`?await e():await e}async function Zf(e,t,n=[]){if(e===t)return n;let r=await Xf(e.subCommands??{});return(await Promise.all(Object.entries(r).map(async([e,r])=>Zf(await Jf(r),t,[...n,e])))).find(e=>e!==void 0)}async function Qf(e,t){if(!e||!t||t.length<2)return e;let n=await Yf(e.meta??{});return{...e,meta:{...n,name:t.slice(0,-1).join(` `)}}}function $f(e){return async(t,n)=>{let r=await u(t,await Qf(n,await Zf(e,t)));console.log(`${r}\n`)}}function ep({shouldCheckCliVersionFreshness:e}){return l({meta:{name:`catena`,version:se,description:`Catena CLI`},async setup({rawArgs:t}){!e||t.length===0||await qf({packageName:oe,currentVersion:se})},subCommands:{link:Ju,unlink:Od,profiles:Sd,whoami:Ad,policy:fd,accounts:Ml,intents:fu,send:wd,transfer:Ed,x402:Mf,counterparties:nu,feedback:su,guide:lu}})}const tp=ep({shouldCheckCliVersionFreshness:!0});ep({shouldCheckCliVersionFreshness:!1});function np(){d(tp,{showUsage:$f(tp)})}np();export{};
711
+ const Fd=e(i(((e,t)=>{(function(e){var n=1e9,r={precision:20,rounding:4,toExpNeg:-7,toExpPos:21,LN10:`2.302585092994045684017991454684364207601101488628772976033327900967572609677352480235997205089598298341967784042286`},i=!0,a=`[DecimalError] `,o=a+`Invalid argument: `,s=a+`Exponent out of range: `,c=Math.floor,l=Math.pow,u=/^(\d+(\.\d*)?|\.\d+)(e[+-]?\d+)?$/i,d,f=1e7,p=7,m=9007199254740991,h=c(m/p),g={};g.absoluteValue=g.abs=function(){var e=new this.constructor(this);return e.s&&=1,e},g.comparedTo=g.cmp=function(e){var t,n,r,i,a=this;if(e=new a.constructor(e),a.s!==e.s)return a.s||-e.s;if(a.e!==e.e)return a.e>e.e^a.s<0?1:-1;for(r=a.d.length,i=e.d.length,t=0,n=r<i?r:i;t<n;++t)if(a.d[t]!==e.d[t])return a.d[t]>e.d[t]^a.s<0?1:-1;return r===i?0:r>i^a.s<0?1:-1},g.decimalPlaces=g.dp=function(){var e=this,t=e.d.length-1,n=(t-e.e)*p;if(t=e.d[t],t)for(;t%10==0;t/=10)n--;return n<0?0:n},g.dividedBy=g.div=function(e){return b(this,new this.constructor(e))},g.dividedToIntegerBy=g.idiv=function(e){var t=this,n=t.constructor;return D(b(t,new n(e),0,1),n.precision)},g.equals=g.eq=function(e){return!this.cmp(e)},g.exponent=function(){return S(this)},g.greaterThan=g.gt=function(e){return this.cmp(e)>0},g.greaterThanOrEqualTo=g.gte=function(e){return this.cmp(e)>=0},g.isInteger=g.isint=function(){return this.e>this.d.length-2},g.isNegative=g.isneg=function(){return this.s<0},g.isPositive=g.ispos=function(){return this.s>0},g.isZero=function(){return this.s===0},g.lessThan=g.lt=function(e){return this.cmp(e)<0},g.lessThanOrEqualTo=g.lte=function(e){return this.cmp(e)<1},g.logarithm=g.log=function(e){var t,n=this,r=n.constructor,o=r.precision,s=o+5;if(e===void 0)e=new r(10);else if(e=new r(e),e.s<1||e.eq(d))throw Error(a+`NaN`);if(n.s<1)throw Error(a+(n.s?`NaN`:`-Infinity`));return n.eq(d)?new r(0):(i=!1,t=b(T(n,s),T(e,s),s),i=!0,D(t,o))},g.minus=g.sub=function(e){var t=this;return e=new t.constructor(e),t.s==e.s?O(t,e):_(t,(e.s=-e.s,e))},g.modulo=g.mod=function(e){var t,n=this,r=n.constructor,o=r.precision;if(e=new r(e),!e.s)throw Error(a+`NaN`);return n.s?(i=!1,t=b(n,e,0,1).times(e),i=!0,n.minus(t)):D(new r(n),o)},g.naturalExponential=g.exp=function(){return x(this)},g.naturalLogarithm=g.ln=function(){return T(this)},g.negated=g.neg=function(){var e=new this.constructor(this);return e.s=-e.s||0,e},g.plus=g.add=function(e){var t=this;return e=new t.constructor(e),t.s==e.s?_(t,e):O(t,(e.s=-e.s,e))},g.precision=g.sd=function(e){var t,n,r,i=this;if(e!==void 0&&e!==!!e&&e!==1&&e!==0)throw Error(o+e);if(t=S(i)+1,r=i.d.length-1,n=r*p+1,r=i.d[r],r){for(;r%10==0;r/=10)n--;for(r=i.d[0];r>=10;r/=10)n++}return e&&t>n?t:n},g.squareRoot=g.sqrt=function(){var e,t,n,r,o,s,l,u=this,d=u.constructor;if(u.s<1){if(!u.s)return new d(0);throw Error(a+`NaN`)}for(e=S(u),i=!1,o=Math.sqrt(+u),o==0||o==1/0?(t=y(u.d),(t.length+e)%2==0&&(t+=`0`),o=Math.sqrt(t),e=c((e+1)/2)-(e<0||e%2),o==1/0?t=`5e`+e:(t=o.toExponential(),t=t.slice(0,t.indexOf(`e`)+1)+e),r=new d(t)):r=new d(o.toString()),n=d.precision,o=l=n+3;;)if(s=r,r=s.plus(b(u,s,l+2)).times(.5),y(s.d).slice(0,l)===(t=y(r.d)).slice(0,l)){if(t=t.slice(l-3,l+1),o==l&&t==`4999`){if(D(s,n+1,0),s.times(s).eq(u)){r=s;break}}else if(t!=`9999`)break;l+=4}return i=!0,D(r,n)},g.times=g.mul=function(e){var t,n,r,a,o,s,c,l,u,d=this,p=d.constructor,m=d.d,h=(e=new p(e)).d;if(!d.s||!e.s)return new p(0);for(e.s*=d.s,n=d.e+e.e,l=m.length,u=h.length,l<u&&(o=m,m=h,h=o,s=l,l=u,u=s),o=[],s=l+u,r=s;r--;)o.push(0);for(r=u;--r>=0;){for(t=0,a=l+r;a>r;)c=o[a]+h[r]*m[a-r-1]+t,o[a--]=c%f|0,t=c/f|0;o[a]=(o[a]+t)%f|0}for(;!o[--s];)o.pop();return t?++n:o.shift(),e.d=o,e.e=n,i?D(e,p.precision):e},g.toDecimalPlaces=g.todp=function(e,t){var r=this,i=r.constructor;return r=new i(r),e===void 0?r:(v(e,0,n),t===void 0?t=i.rounding:v(t,0,8),D(r,e+S(r)+1,t))},g.toExponential=function(e,t){var r,i=this,a=i.constructor;return e===void 0?r=k(i,!0):(v(e,0,n),t===void 0?t=a.rounding:v(t,0,8),i=D(new a(i),e+1,t),r=k(i,!0,e+1)),r},g.toFixed=function(e,t){var r,i,a=this,o=a.constructor;return e===void 0?k(a):(v(e,0,n),t===void 0?t=o.rounding:v(t,0,8),i=D(new o(a),e+S(a)+1,t),r=k(i.abs(),!1,e+S(i)+1),a.isneg()&&!a.isZero()?`-`+r:r)},g.toInteger=g.toint=function(){var e=this,t=e.constructor;return D(new t(e),S(e)+1,t.rounding)},g.toNumber=function(){return+this},g.toPower=g.pow=function(e){var t,n,r,o,s,l,u=this,f=u.constructor,h=12,g=+(e=new f(e));if(!e.s)return new f(d);if(u=new f(u),!u.s){if(e.s<1)throw Error(a+`Infinity`);return u}if(u.eq(d))return u;if(r=f.precision,e.eq(d))return D(u,r);if(t=e.e,n=e.d.length-1,l=t>=n,s=u.s,!l){if(s<0)throw Error(a+`NaN`)}else if((n=g<0?-g:g)<=m){for(o=new f(d),t=Math.ceil(r/p+4),i=!1;n%2&&(o=o.times(u),A(o.d,t)),n=c(n/2),n!==0;)u=u.times(u),A(u.d,t);return i=!0,e.s<0?new f(d).div(o):D(o,r)}return s=s<0&&e.d[Math.max(t,n)]&1?-1:1,u.s=1,i=!1,o=e.times(T(u,r+h)),i=!0,o=x(o),o.s=s,o},g.toPrecision=function(e,t){var r,i,a=this,o=a.constructor;return e===void 0?(r=S(a),i=k(a,r<=o.toExpNeg||r>=o.toExpPos)):(v(e,1,n),t===void 0?t=o.rounding:v(t,0,8),a=D(new o(a),e,t),r=S(a),i=k(a,e<=r||r<=o.toExpNeg,e)),i},g.toSignificantDigits=g.tosd=function(e,t){var r=this,i=r.constructor;return e===void 0?(e=i.precision,t=i.rounding):(v(e,1,n),t===void 0?t=i.rounding:v(t,0,8)),D(new i(r),e,t)},g.toString=g.valueOf=g.val=g.toJSON=function(){var e=this,t=S(e),n=e.constructor;return k(e,t<=n.toExpNeg||t>=n.toExpPos)};function _(e,t){var n,r,a,o,s,c,l,u,d=e.constructor,m=d.precision;if(!e.s||!t.s)return t.s||(t=new d(e)),i?D(t,m):t;if(l=e.d,u=t.d,s=e.e,a=t.e,l=l.slice(),o=s-a,o){for(o<0?(r=l,o=-o,c=u.length):(r=u,a=s,c=l.length),s=Math.ceil(m/p),c=s>c?s+1:c+1,o>c&&(o=c,r.length=1),r.reverse();o--;)r.push(0);r.reverse()}for(c=l.length,o=u.length,c-o<0&&(o=c,r=u,u=l,l=r),n=0;o;)n=(l[--o]=l[o]+u[o]+n)/f|0,l[o]%=f;for(n&&(l.unshift(n),++a),c=l.length;l[--c]==0;)l.pop();return t.d=l,t.e=a,i?D(t,m):t}function v(e,t,n){if(e!==~~e||e<t||e>n)throw Error(o+e)}function y(e){var t,n,r,i=e.length-1,a=``,o=e[0];if(i>0){for(a+=o,t=1;t<i;t++)r=e[t]+``,n=p-r.length,n&&(a+=w(n)),a+=r;o=e[t],r=o+``,n=p-r.length,n&&(a+=w(n))}else if(o===0)return`0`;for(;o%10==0;)o/=10;return a+o}var b=(function(){function e(e,t){var n,r=0,i=e.length;for(e=e.slice();i--;)n=e[i]*t+r,e[i]=n%f|0,r=n/f|0;return r&&e.unshift(r),e}function t(e,t,n,r){var i,a;if(n!=r)a=n>r?1:-1;else for(i=a=0;i<n;i++)if(e[i]!=t[i]){a=e[i]>t[i]?1:-1;break}return a}function n(e,t,n){for(var r=0;n--;)e[n]-=r,r=+(e[n]<t[n]),e[n]=r*f+e[n]-t[n];for(;!e[0]&&e.length>1;)e.shift()}return function(r,i,o,s){var c,l,u,d,m,h,g,_,v,y,b,x,C,w,T,E,O,k,A=r.constructor,ee=r.s==i.s?1:-1,j=r.d,M=i.d;if(!r.s)return new A(r);if(!i.s)throw Error(a+`Division by zero`);for(l=r.e-i.e,O=M.length,T=j.length,g=new A(ee),_=g.d=[],u=0;M[u]==(j[u]||0);)++u;if(M[u]>(j[u]||0)&&--l,x=o==null?o=A.precision:s?o+(S(r)-S(i))+1:o,x<0)return new A(0);if(x=x/p+2|0,u=0,O==1)for(d=0,M=M[0],x++;(u<T||d)&&x--;u++)C=d*f+(j[u]||0),_[u]=C/M|0,d=C%M|0;else{for(d=f/(M[0]+1)|0,d>1&&(M=e(M,d),j=e(j,d),O=M.length,T=j.length),w=O,v=j.slice(0,O),y=v.length;y<O;)v[y++]=0;k=M.slice(),k.unshift(0),E=M[0],M[1]>=f/2&&++E;do d=0,c=t(M,v,O,y),c<0?(b=v[0],O!=y&&(b=b*f+(v[1]||0)),d=b/E|0,d>1?(d>=f&&(d=f-1),m=e(M,d),h=m.length,y=v.length,c=t(m,v,h,y),c==1&&(d--,n(m,O<h?k:M,h))):(d==0&&(c=d=1),m=M.slice()),h=m.length,h<y&&m.unshift(0),n(v,m,y),c==-1&&(y=v.length,c=t(M,v,O,y),c<1&&(d++,n(v,O<y?k:M,y))),y=v.length):c===0&&(d++,v=[0]),_[u++]=d,c&&v[0]?v[y++]=j[w]||0:(v=[j[w]],y=1);while((w++<T||v[0]!==void 0)&&x--)}return _[0]||_.shift(),g.e=l,D(g,s?o+S(g)+1:o)}})();function x(e,t){var n,r,a,o,c,u,f=0,p=0,m=e.constructor,h=m.precision;if(S(e)>16)throw Error(s+S(e));if(!e.s)return new m(d);for(t==null?(i=!1,u=h):u=t,c=new m(.03125);e.abs().gte(.1);)e=e.times(c),p+=5;for(r=Math.log(l(2,p))/Math.LN10*2+5|0,u+=r,n=a=o=new m(d),m.precision=u;;){if(a=D(a.times(e),u),n=n.times(++f),c=o.plus(b(a,n,u)),y(c.d).slice(0,u)===y(o.d).slice(0,u)){for(;p--;)o=D(o.times(o),u);return m.precision=h,t==null?(i=!0,D(o,h)):o}o=c}}function S(e){for(var t=e.e*p,n=e.d[0];n>=10;n/=10)t++;return t}function C(e,t,n){if(t>e.LN10.sd())throw i=!0,n&&(e.precision=n),Error(a+`LN10 precision limit exceeded`);return D(new e(e.LN10),t)}function w(e){for(var t=``;e--;)t+=`0`;return t}function T(e,t){var n,r,o,s,c,l,u,f,p,m=1,h=10,g=e,_=g.d,v=g.constructor,x=v.precision;if(g.s<1)throw Error(a+(g.s?`NaN`:`-Infinity`));if(g.eq(d))return new v(0);if(t==null?(i=!1,f=x):f=t,g.eq(10))return t??(i=!0),C(v,f);if(f+=h,v.precision=f,n=y(_),r=n.charAt(0),s=S(g),Math.abs(s)<0x5543df729c000){for(;r<7&&r!=1||r==1&&n.charAt(1)>3;)g=g.times(e),n=y(g.d),r=n.charAt(0),m++;s=S(g),r>1?(g=new v(`0.`+n),s++):g=new v(r+`.`+n.slice(1))}else return u=C(v,f+2,x).times(s+``),g=T(new v(r+`.`+n.slice(1)),f-h).plus(u),v.precision=x,t==null?(i=!0,D(g,x)):g;for(l=c=g=b(g.minus(d),g.plus(d),f),p=D(g.times(g),f),o=3;;){if(c=D(c.times(p),f),u=l.plus(b(c,new v(o),f)),y(u.d).slice(0,f)===y(l.d).slice(0,f))return l=l.times(2),s!==0&&(l=l.plus(C(v,f+2,x).times(s+``))),l=b(l,new v(m),f),v.precision=x,t==null?(i=!0,D(l,x)):l;l=u,o+=2}}function E(e,t){var n,r,a;for((n=t.indexOf(`.`))>-1&&(t=t.replace(`.`,``)),(r=t.search(/e/i))>0?(n<0&&(n=r),n+=+t.slice(r+1),t=t.substring(0,r)):n<0&&(n=t.length),r=0;t.charCodeAt(r)===48;)++r;for(a=t.length;t.charCodeAt(a-1)===48;)--a;if(t=t.slice(r,a),t){if(a-=r,n=n-r-1,e.e=c(n/p),e.d=[],r=(n+1)%p,n<0&&(r+=p),r<a){for(r&&e.d.push(+t.slice(0,r)),a-=p;r<a;)e.d.push(+t.slice(r,r+=p));t=t.slice(r),r=p-t.length}else r-=a;for(;r--;)t+=`0`;if(e.d.push(+t),i&&(e.e>h||e.e<-h))throw Error(s+n)}else e.s=0,e.e=0,e.d=[0];return e}function D(e,t,n){var r,a,o,u,d,m,g,_,v=e.d;for(u=1,o=v[0];o>=10;o/=10)u++;if(r=t-u,r<0)r+=p,a=t,g=v[_=0];else{if(_=Math.ceil((r+1)/p),o=v.length,_>=o)return e;for(g=o=v[_],u=1;o>=10;o/=10)u++;r%=p,a=r-p+u}if(n!==void 0&&(o=l(10,u-a-1),d=g/o%10|0,m=t<0||v[_+1]!==void 0||g%o,m=n<4?(d||m)&&(n==0||n==(e.s<0?3:2)):d>5||d==5&&(n==4||m||n==6&&(r>0?a>0?g/l(10,u-a):0:v[_-1])%10&1||n==(e.s<0?8:7))),t<1||!v[0])return m?(o=S(e),v.length=1,t=t-o-1,v[0]=l(10,(p-t%p)%p),e.e=c(-t/p)||0):(v.length=1,v[0]=e.e=e.s=0),e;if(r==0?(v.length=_,o=1,_--):(v.length=_+1,o=l(10,p-r),v[_]=a>0?(g/l(10,u-a)%l(10,a)|0)*o:0),m)for(;;)if(_==0){(v[0]+=o)==f&&(v[0]=1,++e.e);break}else{if(v[_]+=o,v[_]!=f)break;v[_--]=0,o=1}for(r=v.length;v[--r]===0;)v.pop();if(i&&(e.e>h||e.e<-h))throw Error(s+S(e));return e}function O(e,t){var n,r,a,o,s,c,l,u,d,m,h=e.constructor,g=h.precision;if(!e.s||!t.s)return t.s?t.s=-t.s:t=new h(e),i?D(t,g):t;if(l=e.d,m=t.d,r=t.e,u=e.e,l=l.slice(),s=u-r,s){for(d=s<0,d?(n=l,s=-s,c=m.length):(n=m,r=u,c=l.length),a=Math.max(Math.ceil(g/p),c)+2,s>a&&(s=a,n.length=1),n.reverse(),a=s;a--;)n.push(0);n.reverse()}else{for(a=l.length,c=m.length,d=a<c,d&&(c=a),a=0;a<c;a++)if(l[a]!=m[a]){d=l[a]<m[a];break}s=0}for(d&&(n=l,l=m,m=n,t.s=-t.s),c=l.length,a=m.length-c;a>0;--a)l[c++]=0;for(a=m.length;a>s;){if(l[--a]<m[a]){for(o=a;o&&l[--o]===0;)l[o]=f-1;--l[o],l[a]+=f}l[a]-=m[a]}for(;l[--c]===0;)l.pop();for(;l[0]===0;l.shift())--r;return l[0]?(t.d=l,t.e=r,i?D(t,g):t):new h(0)}function k(e,t,n){var r,i=S(e),a=y(e.d),o=a.length;return t?(n&&(r=n-o)>0?a=a.charAt(0)+`.`+a.slice(1)+w(r):o>1&&(a=a.charAt(0)+`.`+a.slice(1)),a=a+(i<0?`e`:`e+`)+i):i<0?(a=`0.`+w(-i-1)+a,n&&(r=n-o)>0&&(a+=w(r))):i>=o?(a+=w(i+1-o),n&&(r=n-i-1)>0&&(a=a+`.`+w(r))):((r=i+1)<o&&(a=a.slice(0,r)+`.`+a.slice(r)),n&&(r=n-o)>0&&(i+1===o&&(a+=`.`),a+=w(r))),e.s<0?`-`+a:a}function A(e,t){if(e.length>t)return e.length=t,!0}function ee(e){var t,n,r;function i(e){var t=this;if(!(t instanceof i))return new i(e);if(t.constructor=i,e instanceof i){t.s=e.s,t.e=e.e,t.d=(e=e.d)?e.slice():e;return}if(typeof e==`number`){if(e*0!=0)throw Error(o+e);if(e>0)t.s=1;else if(e<0)e=-e,t.s=-1;else{t.s=0,t.e=0,t.d=[0];return}if(e===~~e&&e<1e7){t.e=0,t.d=[e];return}return E(t,e.toString())}if(typeof e!=`string`)throw Error(o+e);if(e.charCodeAt(0)===45?(e=e.slice(1),t.s=-1):t.s=1,u.test(e))E(t,e);else throw Error(o+e)}if(i.prototype=g,i.ROUND_UP=0,i.ROUND_DOWN=1,i.ROUND_CEIL=2,i.ROUND_FLOOR=3,i.ROUND_HALF_UP=4,i.ROUND_HALF_DOWN=5,i.ROUND_HALF_EVEN=6,i.ROUND_HALF_CEIL=7,i.ROUND_HALF_FLOOR=8,i.clone=ee,i.config=i.set=j,e===void 0&&(e={}),e)for(r=[`precision`,`rounding`,`toExpNeg`,`toExpPos`,`LN10`],t=0;t<r.length;)e.hasOwnProperty(n=r[t++])||(e[n]=this[n]);return i.config(e),i}function j(e){if(!e||typeof e!=`object`)throw Error(a+`Object expected`);var t,r,i,s=[`precision`,1,n,`rounding`,0,8,`toExpNeg`,-1/0,0,`toExpPos`,0,1/0];for(t=0;t<s.length;t+=3)if((i=e[r=s[t]])!==void 0){if(c(i)===i&&i>=s[t+1]&&i<=s[t+2])this[r]=i;else throw Error(o+r+`: `+i)}if((i=e[r=`LN10`])!==void 0){if(i==Math.LN10)this[r]=new this(i);else throw Error(o+r+`: `+i)}return this}r=ee(r),r.default=r.Decimal=r,d=new r(1),typeof define==`function`&&define.amd?define(function(){return r}):t!==void 0&&t.exports?t.exports=r:(e||=typeof self<`u`&&self&&self.self==self?self:Function(`return this`)(),e.Decimal=r)})(e)}))(),1).default;Fd.set({rounding:Fd.ROUND_HALF_EVEN});const Id=new Map,Ld=/^[A-Z]{3}$/,Rd=/^[A-Z0-9]{2,6}$/;function zd(e,t,n,r){if(Id.has(e))throw Error(`duplicate asset id ${e}`);let i=new Fd(r);if(i.isNegative())throw Error(`dustThreshold must be a non-negative decimal`);if(i.decimalPlaces()>t)throw Error(`dustThreshold (${r}) must not be finer than the asset's ${t} decimals`);if(!Number.isInteger(t)||!Number.isInteger(n)||t<0||n<0)throw Error(`decimals and presentmentDecimals must be non-negative integers`);if(n>t)throw Error(`presentment decimals should be less than or equal to decimals`)}function Bd(e,t,n,r,i){if(!Ld.test(e))throw Error(`fiat asset ids must be 3-letter ISO-4217 codes`);zd(e,n,r,i.dustThreshold);let a=e;return Id.set(e,{id:a,symbol:e,name:t,kind:`fiat`,decimals:n,presentmentDecimals:r,denomination:e,valuation:{type:`par`},dustThreshold:i.dustThreshold}),a}function Vd(e,t,n,r,i){if(!Rd.test(e)||Ld.test(e))throw Error(`stablecoin tickers must be 2-6 uppercase alphanumerics and not a 3-letter ISO-4217 shape`);let a=Id.get(i.denomination);if(!a||a.kind!==`fiat`)throw Error(`stablecoin denomination must be a registered fiat asset, got ${i.denomination}`);if(n>a.decimals)throw Error(`par stablecoin decimals (${n}) must not exceed its denomination fiat's (${a.decimals})`);zd(e,n,r,i.dustThreshold);let o=e;return Id.set(e,{id:o,symbol:e,name:t,kind:`stablecoin`,decimals:n,presentmentDecimals:r,denomination:a.denomination,valuation:{type:`par`},dustThreshold:i.dustThreshold}),o}Vd(`USDC`,`USD Coin`,6,2,{denomination:Bd(`USD`,`US Dollar`,6,2,{dustThreshold:`0.01`}),dustThreshold:`0.01`}),new Fd(1e6),new Fd(1e3);const Hd=d.pipe(d.string(`Amount must be a string`),d.nonEmpty(`Amount must not be empty`),d.check(e=>e.trim()===e,`Amount must not have leading or trailing whitespace`),d.check(e=>!e.includes(`e`)&&!e.includes(`E`),`Scientific notation is not supported (e.g. use 1000000 instead of 1e6)`),d.check(e=>!e.startsWith(`+`),`Amount must not have a '+' prefix`),d.check(e=>!e.startsWith(`-`),`Amount must be non-negative`),d.check(e=>{try{return new Fd(e).gte(0)}catch{return!1}},`Amount must be a valid decimal (e.g. 100 or 100.50)`)),Ud=d.pipe(d.string(`Count must be a string`),d.transform(e=>e.trim()),d.check(e=>/^\d+$/.test(e),`Count must be a whole number of transactions (e.g. 20)`),d.transform(Number),d.check(e=>Number.isSafeInteger(e),`Count is too large`),d.check(e=>e>=1,`Count must be at least 1`)),Wd={s:1,m:60,h:3600,d:86400},Gd=d.pipe(d.string(`Duration must be a string`),d.transform(e=>e.trim()),d.check(e=>/^\d+[smhd]?$/.test(e),`Duration must be a number of seconds or a value with a unit (e.g. 90s, 30m, 4h, 2d)`),d.transform(e=>{let t=e.at(-1)??``;return t in Wd?Number(e.slice(0,-1))*Wd[t]:Number(e)}),d.check(e=>e>=60,`Duration must be at least 1 minute`),d.check(e=>e<=604800,`Duration must be at most 7 days`)),Kd=Q({profile:Ls,json:Rs}),qd=c({meta:{name:`show`,description:`Show the agent's assigned policy`},args:Kd.args,async run({args:e}){await $(Kd.parse(e))(e=>e.getPolicy())}}),Jd=Q({account:Z({description:`Account whose existing hard limit should increase. For a transfer limit, the source account funds move out of.`,required:!0}),capability:Ds({description:`Which capability's limit to increase: send (payments to counterparties) or transfer (between the user's own accounts)`,choices:$o,default:`send`}),rule:Ds({description:`Which limit to adjust`,choices:fo,default:`per_transaction_amount`}),amount:Z({description:`New threshold for an amount limit, as a decimal USD string (e.g. 500.00)`,schema:Hd,showValueInError:!0}),count:Z({description:`New threshold for a transaction-count limit (e.g. 20)`,schema:Ud,showValueInError:!0}),duration:Z({description:`How long the override should last once approved (e.g. 90s, 30m, 4h, 2d). One minute to seven days.`,required:!0,schema:Gd,showValueInError:!0}),reason:Z({description:`Why the task needs this, for the person who reviews the request`,required:!0}),idempotencyKey:Z({description:`Optional operation key. Reuse the same value only when retrying the same submission; omitted generates a fresh key for this invocation.`,schema:vu}),profile:Ls,json:Rs}),Yd=c({meta:{name:`request-override`,description:`Ask a person to approve a temporary change to this agent's limits`},args:Jd.args,async run({args:e}){let t=Jd.parse(e),n=$(t),r={type:`policy_override`,operations:[Xd(t)],durationSeconds:t.duration,reason:t.reason};await n(e=>e.submitIntent({action:r,...t.idempotencyKey!==void 0&&{idempotencyKey:t.idempotencyKey}}))}});function Xd(e){return e.rule===`hourly_count`||e.rule===`daily_count`?(e.amount!==void 0&&X(`--amount does not apply to ${e.rule}; use --count`),e.count===void 0&&X(`--count is required for ${e.rule}`),{type:`increase_limit`,accountId:e.account,capability:e.capability,limitType:e.rule,newLimit:{count:e.count}}):(e.count!==void 0&&X(`--count does not apply to ${e.rule}; use --amount`),e.amount===void 0&&X(`--amount is required for ${e.rule}`),{type:`increase_limit`,accountId:e.account,capability:e.capability,limitType:e.rule,newLimit:{amount:e.amount,assetId:`USD`}})}const Zd=c({meta:{name:`policy`,description:`Inspect the agent's policy`},subCommands:{show:qd,"request-override":Yd}}),Qd=Q({profile:ws({description:`Profile name`,required:!0})});function $d(){try{return Vl({env:process.env[Ll],cwd:process.cwd(),log:e=>console.error(e)})}catch(e){return X(e)}}const ef=c({meta:{name:`use`,description:`Set the default credential profile`},args:Qd.args,async run({args:e}){let t=Qd.parse(e);try{El(t.profile),nu({defaultProfile:t.profile})}catch(e){X(e)}}}),tf=c({meta:{name:`current`,description:`Show the selected credential profile and how it was chosen`},async run(){let e;try{e=Il()}catch(e){return X(e)}if(e!==null){nu({source:`secret-key`,credential:Nl,bankUrl:e.bankUrl});return}let t=$d(),n;try{n=xl(t.name)}catch(e){X(e)}n===null&&X(`Profile "${t.name}" is not linked.\nRun 'catena link --profile ${t.name} <agent-id>' to authenticate.`),nu({profile:t.name,source:t.source,bankUrl:n.bank_url,agentId:fl(n)?n.agent_id:void 0})}}),nf=c({meta:{name:`list`,description:`List credential profiles and their directory bindings`},async run(){let e;try{e=cl()}catch(e){X(e)}let t=Fl(),n;try{n=t?null:Vl({env:process.env[Ll],cwd:process.cwd()}).name}catch{n=null}let r=Object.entries(e.directories??{});nu({defaultProfile:e.default_profile,...t?{shadowedBy:Nl}:{},profiles:Object.entries(e.profiles).toSorted(([e],[t])=>e.localeCompare(t)).map(([e,t])=>({name:e,bankUrl:t.bank_url,agentId:fl(t)?t.agent_id:void 0,directories:r.filter(([,t])=>t===e).map(([e])=>e).toSorted(),current:e===n}))})}}),rf=Q({profile:ws({description:`Profile name to bind`,required:!0}),path:ws({description:`Directory to bind (defaults to the current directory)`})}),af=c({meta:{name:`bind`,description:`Bind a directory to a profile for automatic selection`},args:rf.args,async run({args:e}){let t=rf.parse(e);try{let e=t.path??process.cwd();if($u(e))throw Error(`Refusing to bind the home directory or an ancestor of it — that would shadow the default profile for every directory beneath it. Bind a specific agent directory instead.`);let n=yl(e,t.profile);nu({profile:t.profile,directory:n})}catch(e){X(e)}}}),of=Q({path:ws({description:`Directory to unbind (defaults to the current directory)`})}),sf=c({meta:{name:`unbind`,description:`Remove a directory's profile binding`},args:of.args,async run({args:e}){let t=of.parse(e);try{nu(bl(t.path??process.cwd()))}catch(e){X(e)}}}),cf=c({meta:{name:`profiles`,description:`Manage credential profiles`},subCommands:{use:ef,current:tf,list:nf,bind:af,unbind:sf}}),lf=Q({account:Z({description:`Source account id; omit when the policy allows sends from exactly one account`,schema:Bs}),rail:Z({description:`Destination counterparty rail id (cprl_...)`,required:!0,schema:Bs}),amount:Z({description:`USD amount as a decimal string (e.g. 125.00)`,required:!0,schema:Hd,showValueInError:!0}),method:Ds({description:`ach | wire | on-chain; ach and wire require a bank rail, on-chain a wallet rail`,required:!0,choices:Eo}),memo:Z({description:`Memo on the underlying transfer`}),description:Z({description:`Operator-facing description`}),idempotencyKey:Z({description:`Optional operation key. Reuse the same value only when retrying the same submission; omitted generates a fresh key for this invocation.`,schema:vu}),profile:Ls,json:Rs}),uf=c({meta:{name:`send`,description:`Submit a USD send intent to a counterparty rail`},args:lf.args,async run({args:e}){let t=lf.parse(e),n=$(t),r={type:`send`,...t.account!==void 0&&{accountId:t.account},counterpartyRailId:t.rail,amount:t.amount,method:t.method,...t.memo?{memo:t.memo}:{},...t.description?{description:t.description}:{}};await n(e=>e.submitIntent({action:r,...t.idempotencyKey?{idempotencyKey:t.idempotencyKey}:{}}))}}),df=Q({from:Z({description:`Source account id`,required:!0,schema:Bs}),to:Z({description:`Destination account id`,required:!0,schema:Bs}),amount:Z({description:`USD amount as a decimal string (e.g. 125.00)`,required:!0,schema:Hd,showValueInError:!0}),memo:Z({description:`Memo on the underlying transfer`}),description:Z({description:`Operator-facing description`}),idempotencyKey:Z({description:`Optional operation key. Reuse the same value only when retrying the same submission; omitted generates a fresh key for this invocation.`,schema:vu}),profile:Ls,json:Rs}),ff=c({meta:{name:`transfer`,description:`Submit a USD transfer intent between two of this agent's accounts`},args:df.args,async run({args:e}){let t=df.parse(e),n=$(t),r={type:`transfer`,accountId:t.from,toAccountId:t.to,amount:t.amount,...t.memo?{memo:t.memo}:{},...t.description?{description:t.description}:{}};await n(e=>e.submitIntent({action:r,...t.idempotencyKey?{idempotencyKey:t.idempotencyKey}:{}}))}});function pf(){return`${Nl} is set, and this command removes only a linked profile. Revoke the key in the Catena console under the agent's Secret keys tab, or pass --profile <name> to target a profile on this machine.`}const mf=Q({profile:Ls,force:Es({description:`Remove the profile and its local credentials without contacting the server; use when the credential is missing, revoked, or a link was interrupted`,default:!1}),json:Rs}),hf=c({meta:{name:`unlink`,description:`Disconnect the selected agent profile`},args:mf.args,async run({args:e}){let t=mf.parse(e),n=Xl();!t.force&&ru(t)===void 0&&Fl()&&X(pf());let r;try{r=Vl({flag:ru(t),env:process.env[Ll],cwd:process.cwd(),log:e=>console.error(e)}).name}catch(e){X(e)}if(t.force){let e;try{if(e=xl(r),e===null)throw Error(Fl()?`Profile "${r}" not found, and this machine holds no profile to clear. Revoke the key in the Catena console under the agent's Secret keys tab.`:`Profile "${r}" not found`);await n.delete(e.client_instance_id),await n.delete(dd(e.client_instance_id)),gl(r)}catch(e){X(e)}nu({success:!0,profile:r,...fl(e)?{agentId:e.agent_id}:{},local:!0},{compact:t.json});return}let i=`To remove only this machine's copy, run 'catena unlink --profile ${r} --force'.`,a=await jl({profileName:r,fallbackBankUrl:Ml},n);a.ok||X(`${a.message} ${i}`);let o=Yl(a);try{await o.unlinkAgent(),await n.delete(a.clientInstanceId),await n.delete(dd(a.clientInstanceId)),gl(r)}catch(e){X(`${gs(tu(e,r))} ${i}`)}nu({success:!0,profile:r,agentId:a.agentId},{compact:t.json})}}),gf=Q({profile:Ls,json:Rs}),_f=c({meta:{name:`whoami`,description:`Show which agent you are currently acting as`},args:gf.args,async run({args:e}){await $(gf.parse(e))(e=>e.whoami())}});function vf(e){throw Error(`Unhandled case: ${String(e)}`)}function yf(e,t){return t?.body!==void 0&&t.body!==null&&typeof t.body!=`string`&&!(t.body instanceof URLSearchParams)&&!(t.body instanceof Blob)&&!(t.body instanceof ArrayBuffer)&&!ArrayBuffer.isView(t.body)?!1:typeof Request<`u`&&e instanceof Request?e.body===null&&!e.bodyUsed:!0}function bf(e,t){let n=new Headers(typeof Request<`u`&&e instanceof Request?e.headers:void 0);return new Headers(t?.headers).forEach((e,t)=>{n.set(t,e)}),n}const xf=/^0x[0-9a-fA-F]{64}$/;async function Sf(e,t,n,r){try{await e.reportSettlement({intentId:t,txHash:n,...r!==void 0&&{receipt:r}})}catch{return}}const Cf=[`PAYMENT-REQUIRED`,`X-Payment-Required`],wf=/^0x[0-9a-fA-F]{40}$/,Tf=d.looseObject({success:d.boolean(),transaction:d.string(),extensions:d.optional(d.unknown())}),Ef=d.looseObject({x402Version:d.literal(2),accepts:d.array(Wo),resource:d.optional(Go),extensions:d.optional(d.unknown())}),Df=`x402_network_mismatch`,Of=`x402_counterparty_rail_not_found`,kf=new Set([`x402_requirement_not_payable`,Df,Of]),Af={"eip155:8453":`Base`,"eip155:84532":`Base Sepolia`};function jf(e){let t=Object.hasOwn(Af,e)?Af[e]:void 0;return t?`${t} (${e})`:e}function Mf(e){let t=e.replaceAll(`-`,`+`).replaceAll(`_`,`/`),n=Uint8Array.from(atob(t),e=>e.charCodeAt(0));return JSON.parse(new TextDecoder().decode(n))}function Nf(e){let t=Cf.map(t=>e.headers.get(t)).find(e=>e!==null);if(t)try{let e=d.safeParse(Ef,Mf(t));return e.success?e.output:void 0}catch{return}}async function Pf(e,t,n){try{let r=n.headers.get(`PAYMENT-RESPONSE`);if(!r)return;let i=d.safeParse(Tf,Mf(r));if(!i.success||!i.output.success||!xf.test(i.output.transaction))return;let a=ro(i.output.extensions);await Sf(e,t,i.output.transaction,a)}catch{}}var Ff=class extends Error{reasons;constructor(e,t=[],n={}){super(t.length>0&&(n.appendReasonsToMessage??!0)?`${e}: ${t.join(`; `)}`:e),this.name=`X402PaymentError`,this.reasons=t}},If=class extends Ff{accountId;requiredNetworks;constructor(e,t,n=[]){super(`Account ${e} cannot fund this 402 challenge: it must be paid from a wallet account on ${t.map(jf).join(` or `)}`,n,{appendReasonsToMessage:!1}),this.name=`X402NetworkMismatchError`,this.accountId=e,this.requiredNetworks=t}},Lf=class extends Ff{payTo;network;serviceName;constructor(e,t,n,r=[]){super(`This 402 pays ${e} on ${jf(t)}, which is not a saved counterparty wallet rail; add it as a counterparty before paying`,r,{appendReasonsToMessage:!1}),this.name=`X402CounterpartyNotFoundError`,this.payTo=e,this.network=t,this.serviceName=n}},Rf=class extends Ff{intentId;expiresAt;constructor(e,t,n){super(`The payment is awaiting a human approval (intent ${e}); once an operator approves it, retry the request to complete the payment`,t),this.name=`X402ApprovalPendingError`,this.intentId=e,this.expiresAt=n}},zf=class extends Ff{receipt;constructor(e,t){super(`The payment settled (intent ${e.intentId}) but the post-payment continuation failed; retry the request with the PAYMENT-SIGNATURE header from the receipt (or getIntent("${e.intentId}") data.paymentCredential.value) instead of paying again`),this.name=`X402RetryFailedError`,this.receipt=e,this.cause=t}};async function Bf(e,t){try{return await t()}catch(t){throw new zf(e,t)}}var Vf=class extends Ff{intentId;requirements;constructor(e,t,n){super(`The payment could not be confirmed (intent ${e}); check getIntent("${e}") — completed: reuse its data.paymentCredential.value as the PAYMENT-SIGNATURE header; processing: poll until terminal; pay again only after blocked or failed`),this.name=`X402SubmitInterruptedError`,this.intentId=e,this.requirements=t,this.cause=n}};async function Hf(e,t){let n=t.paymentRequired.accepts.filter(e=>e.scheme===`exact`),r=n.filter(e=>t.maxAtomicAmount===void 0||/^\d+$/.test(e.amount)&&BigInt(e.amount)<=t.maxAtomicAmount).slice(0,5);if(r.length===0)throw new Ff(n.length>0&&t.maxAtomicAmount!==void 0?`Every requirement in the 402 challenge costs more than the caller's maximum amount`:`The 402 challenge offers no exact-scheme requirement Catena can pay`);let i=t.resource??t.paymentRequired.resource,a=[];for(let n of r){let r=await Uf(e,{accountId:t.accountId,requirements:n,resource:i,signedOffer:no(t.paymentRequired.extensions,n)}).catch(e=>{if(e instanceof ss&&e.code!==void 0&&kf.has(e.code)){a.push({error:e,requirement:n});return}throw e});if(r)return r}let o=a.filter(e=>e.error.code===Of),s=a.filter(e=>e.error.code===Df),c=a.filter(e=>e.error.code!==Of&&e.error.code!==Df),l=[...new Set([...o,...s,...c].map(e=>e.error.message))],u=o.find(e=>e.error.status===404&&wf.test(e.requirement.payTo));throw u?new Lf(u.requirement.payTo,u.requirement.network,i?.serviceName,l):s.length>0&&o.length===0?new If(t.accountId,[...new Set(s.map(e=>e.requirement.network))],l):new Ff(`No requirement in the 402 challenge is payable from this account`,l)}async function Uf(e,t){let n=await e.submitIntent({action:{type:`x402`,accountId:t.accountId,paymentRequirements:t.requirements,...t.resource!==void 0&&{resource:t.resource},...t.signedOffer!==void 0&&{signedOffer:t.signedOffer}},idempotencyKey:crypto.randomUUID()}).catch(e=>{throw e instanceof fs&&e.outcome===`unknown`?new Vf(e.intentId,t.requirements,e):e});if(n.status===`completed`){let e=Lo(n.data);if(e!==void 0)return{intentId:n.id,paymentSignature:e,requirements:t.requirements};throw new Ff(`The completed payment did not carry an x402 payment signature`)}switch(n.status){case`pending`:throw new Rf(n.id,n.reasons,n.expiresAt);case`processing`:throw new Ff(`The payment is still processing (intent ${n.id}); this client cannot resume an in-flight x402 settlement`);case`blocked`:case`failed`:throw new Ff(`Catena declined the payment`,n.reasons)}return vf(n.status)}function Wf(e,t){let n=(t.baseFetch??globalThis.fetch).bind(globalThis);return async(r,i)=>{let a=await n(r,i);if(a.status!==402)return a;let o=Nf(a);if(!o)return a;if(!yf(r,i))throw new Ff(`The request body cannot be replayed after payment; buffer the body (string, Blob, or ArrayBuffer) before using the x402 fetch wrapper`);let s=await Hf(e,{accountId:t.accountId,paymentRequired:o,...t.maxAtomicAmount!==void 0&&{maxAtomicAmount:t.maxAtomicAmount}});await Bf(s,()=>t.onPayment?.(s));let c=bf(r,i);c.set(`PAYMENT-SIGNATURE`,s.paymentSignature);let l=await Bf(s,()=>n(r,{...i,headers:c}));return Pf(e,s.intentId,l),l}}function Gf(e){if(e===`@-`)return Kf(0,`stdin`);if(e.startsWith(`@`)){let t=e.slice(1);return t===``?X(`--data @<path>: no file path given`):Kf(t,`@${t}`)}return e}function Kf(e,t){try{return T(e,`utf8`)}catch(e){return X(`--data ${t}: ${gs(e)}`)}}function qf(e){let[t,n=``]=e.split(`.`);return BigInt(`${t}${n.padEnd(6,`0`)}`)}const Jf=d.pipe(d.string(),d.check(e=>Gl.test(e.slice(0,Math.max(e.indexOf(`:`),0))),`must be "Name: Value" with a valid HTTP header name`),d.transform(e=>{let t=e.indexOf(`:`);return{name:e.slice(0,t),value:e.slice(t+1).trimStart()}}),d.check(e=>/^[\t\x20-\x7e\x80-\xff]*$/.test(e.value),`header value contains characters not allowed in an HTTP header`));function Yf(e,t){return e.some(e=>e.name.toLowerCase()===t)}function Xf(e,t){Yf(e,`content-type`)&&t!==void 0&&X(`--header "Content-Type: ..." conflicts with --content-type`)}function Zf(e,t,n){let r=[...n!==void 0&&!Yf(e,`content-type`)?[[`content-type`,t??`application/json`]]:[],...e.map(e=>[e.name,e.value])];return r.length>0?new Headers(r):void 0}const Qf={"eip155:8453":`base`,"eip155:84532":`base-sepolia`};function $f(e){return Object.hasOwn(Qf,e)?Qf[e]:void 0}function ep(e){return`'${e.replaceAll(`'`,`'\\''`)}'`}function tp(e){return e===void 0?``:` --profile ${ep(e)}`}function np(e,t){return`Payment submission could not be confirmed (intent ${e}). It may have succeeded. Before paying again, run \`catena intents get ${e}${tp(t)}\`.`}function rp(e,t,n,r){let i=$f(t)??ep(t);return`catena counterparties create wallet --name ${ep(n??`<name>`)} --address ${ep(e)} --network ${i}${tp(r)}`}function ip(e,t){try{w(e,{recursive:!0,mode:448}),x(e,448);let n=te(e,t);return w(n,{recursive:!0,mode:448}),x(n,448),n}catch{return}}const ap=4e3;function op(e){try{return k(e)}catch{return}}function sp(e,t,n){try{b(e,t)}catch{X(n)}}function cp(e){let t=ne(e),n=j(t),r=op(n);(r===void 0||!r.isDirectory())&&X(`--output ${e}: directory ${n} does not exist`);let i=op(t);return i===void 0?(sp(n,S.W_OK|S.X_OK,`--output ${e}: directory ${n} is not writable`),t):(i.isDirectory()&&X(`--output ${e}: destination is a directory`),i.isFile()||X(`--output ${e}: destination is not a regular file`),sp(t,S.W_OK,`--output ${e}: destination is not writable`),t)}const lp=/^(?:con|prn|aux|nul|com\d|lpt\d)$/i;function up(e){if(e!==void 0&&zs.test(e)&&!lp.test(e))return`${e}.body`;let t=`${Date.now()}-${g(4).toString(`hex`)}.body`;return e===void 0?`unpaid-${t}`:`paid-${t}`}function dp(e,t){let n=ip(nl(),`responses`);if(n===void 0)return;let r=te(n,up(t));try{return A(r,e,{mode:384}),r}catch{return}}function fp(e){let t=e.subarray(0,ap*4),n=t.toString(`utf8`);return{decoded:n,complete:t.length===e.length&&n.length<=ap&&ie(e)}}function pp({decoded:e,complete:t}){let n=e.slice(0,ap),r=n.charCodeAt(n.length-1);return{body:r>=55296&&r<=56319?n.slice(0,-1):n,...!t&&{bodyTruncated:!0}}}function mp(e,t){if(t.complete)return{body:t.decoded};if(e.length>268435456)return{...pp(t),error:`no writable location for the ${e.length}-byte body and it is too large to inline; only the .body preview survived`};if(ie(e)){let t=e.toString(`utf8`);if(6*t.length+2<=N.MAX_STRING_LENGTH)return{body:t};try{return JSON.stringify(t),{body:t}}catch{}}return{body:e.toString(`base64`),bodyEncoding:`base64`}}function hp(e){return e.error===void 0?e.bodyEncoding===void 0?`the full body is inlined in the result's .body field`:`the full body is inlined base64-encoded in the result's .body field`:e.error}function gp(e,t,n){let r=dp(e,t);return r===void 0?mp(e,n):{...pp(n),bodyPath:r}}function _p(e,t,n){let r=fp(e);if(n===void 0)return r.complete?{body:r.decoded}:gp(e,t,r);try{A(n,e,{mode:384})}catch(i){let a=gp(e,t,r),o=`--output ${n}: ${gs(i)}`;return`bodyPath`in a?{...a,error:`${o}; the full body was saved to ${a.bodyPath}`}:{...a,error:`${o}; ${hp(a)}`}}return{...pp(r),bodyPath:n}}function vp(e){return{intentId:e.intentId,amountAtomicUsdc:e.requirements.amount,payTo:e.requirements.payTo,network:e.requirements.network}}function yp(e){let t=e?.replaceAll(/[\p{C}\s]/gu,` `).replaceAll(/ {2,}/g,` `).trim();return t!==void 0&&t.length>0?t:void 0}function bp(e,t){Yf(e,`payment-signature`)&&X(`--header cannot set PAYMENT-SIGNATURE; the payment loop attaches it after paying`),Xf(e,t)}const xp=Q({url:Z({description:`The paywalled URL to fetch (an x402 v2 endpoint)`,required:!0,schema:d.pipe(d.string(),d.url())}),account:Z({description:`Source wallet account id the payment draws from`,required:!0,schema:Bs}),maxAmount:Z({description:`Refuse challenges above this USD amount (decimal string, e.g. 0.25). Policy limits still apply server-side.`,schema:d.pipe(d.string(),d.regex(/^\d+(\.\d{1,6})?$/))}),method:Ds({description:`HTTP method for the request`,choices:[`GET`,`POST`]}),data:Z({description:`Request body. Use @path to read a file or @- for stdin. Implies POST and a JSON content type unless overridden.`}),contentType:Z({description:`Content-Type header for the request body (default application/json when --data is set)`}),output:Z({description:`Write the full response body to this file (must be a regular file; written for any HTTP status — check .status). Without it .body is capped at 4000 characters; longer or non-UTF-8 bodies are saved to a file (path reported in .bodyPath)`}),header:Ts({description:`Request header as "Name: Value" (repeatable, like curl -H); sent on the initial request and the paid retry`,schema:Jf}),profile:Ls,json:Rs}),Sp=c({meta:{name:`x402`,description:`Fetch a URL, paying its x402 (HTTP 402) challenge via USDC`},args:xp.args,async run({args:e,rawArgs:t}){let n=xp.parse(e,t),r=n.method??(n.data===void 0?`GET`:`POST`);n.data!==void 0&&r!==`POST`&&X(`--data cannot be sent with --method ${r}; a body requires POST`),n.contentType!==void 0&&n.data===void 0&&X(`--content-type has no effect without --data`),bp(n.header,n.contentType);let i=n.output===void 0?void 0:cp(n.output),a=n.data===void 0?void 0:Gf(n.data),o=Zf(n.header,n.contentType,a);await $(n)(async e=>{let t,s=Wf(e,{accountId:n.account,...n.maxAmount!==void 0&&{maxAtomicAmount:qf(n.maxAmount)},onPayment:e=>{t=e}}),c;try{c=await s(n.url,{method:r,...a!==void 0&&{body:a},...o!==void 0&&{headers:o}})}catch(e){if(e instanceof Vf)throw Error(np(e.intentId,n.profile),{cause:e});if(e instanceof zf)return{status:null,paid:!0,retryFailed:!0,payment:vp(e.receipt),error:e.message};if(e instanceof If){let t=e.requiredNetworks.map(e=>$f(e)??e);return{status:null,paid:!1,retryFailed:!1,networkMismatch:{account:e.accountId,requiredNetworks:t,requiredNetworkIds:[...e.requiredNetworks]},error:`${e.message}. Re-run with --account set to a wallet account on ${t.join(` or `)} (your account ids are in \`catena accounts list${tp(n.profile)}\`).`}}if(e instanceof Lf){let t=yp(e.serviceName),r=t!==void 0&&t.length<=40?t:void 0,i=rp(e.payTo,e.network,r,n.profile),a=t===void 0?``:` The endpoint calls itself "${t.length>40?`${t.slice(0,40)}…`:t}" (unverified) — rename it if that is not a service you recognize.`;return{status:null,paid:!1,retryFailed:!1,counterpartyNotFound:{payTo:e.payTo,network:$f(e.network)??e.network,networkId:e.network,createCommand:i,nameIsPlaceholder:r===void 0,...t!==void 0&&{serviceName:t}},error:`${e.message}. Add it, then re-run:\n ${i}\n(counterparty creation may require approval per your policy)${a}`}}if(e instanceof Rf)return{status:null,paid:!1,retryFailed:!1,approvalPending:{intentId:e.intentId,expiresAt:e.expiresAt,reasons:[...e.reasons]},error:e.message};throw e}let l={status:c.status,paid:t!==void 0,retryFailed:!1,...t!==void 0&&{payment:vp(t)}},u;try{u=Buffer.from(await c.arrayBuffer())}catch(e){let r=t===void 0?``:`; the payment settled — re-read the PAYMENT-SIGNATURE with \`catena intents get ${t.intentId}${tp(n.profile)}\` to retry manually`;return{...l,error:`failed to read the response body: ${gs(e)}${r}`}}return{...l,..._p(u,t?.intentId,i)}},{exitCode:e=>+(`error`in e)})}}),Cp=d.object({version:d.literal(1),result:d.literal(`latest-version`),latestVersion:d.string(),checkedAt:d.pipe(d.string(),d.isoTimestamp())}),wp=d.object({version:d.literal(1),result:d.literal(`fetch-failure`),checkedAt:d.pipe(d.string(),d.isoTimestamp())}),Tp=d.variant(`result`,[Cp,wp]),Ep=d.object({"dist-tags":d.object({latest:d.string()})}),Dp=`cache`;function Op(){return te(nl(),Dp,`cli-version.json`)}function kp(e){return new URL(encodeURIComponent(e),`https://registry.npmjs.org/`).href}function Ap(e){try{let t=JSON.parse(T(e,`utf8`)),n=d.safeParse(Tp,t);return n.success?n.output:void 0}catch{return}}function jp(e){let t=Ap(e);if(!t)return;let n=Date.parse(t.checkedAt);if(!Number.isFinite(n))return;let r=Date.now()-n,i=t.result===`fetch-failure`?36e5:864e5;if(!(r<0||r>=i))return t}function Mp(e){try{return!C(e)||k(e).isFile()}catch{return!1}}function Np(e){let t=ip(nl(),Dp);if(t===void 0||!Mp(e))return!1;let n=te(t,`.cli-version-check-${g(6).toString(`hex`)}.tmp`);try{return A(n,``,{encoding:`utf8`,mode:384}),O(n,{force:!0}),!0}catch{try{O(n,{force:!0})}catch{}return!1}}function Pp(e,t){if(ip(nl(),Dp)===void 0)return!1;try{let n=`${e}.${g(6).toString(`hex`)}.tmp`;return A(n,`${JSON.stringify({version:1,...t,checkedAt:new Date().toISOString()},null,2)}\n`,{encoding:`utf8`,mode:384}),D(n,e),!0}catch{return!1}}async function Fp(e){let t=new AbortController,n=setTimeout(()=>t.abort(),750);n.unref();try{let n=await fetch(kp(e.packageName),{headers:{accept:`application/json`},signal:t.signal});if(!n.ok)return;let r=await n.json(),i=d.safeParse(Ep,r);return i.success?i.output[`dist-tags`].latest:void 0}catch{return}finally{clearTimeout(n)}}function Ip(e){let t=ae.valid(e.currentVersion),n=ae.valid(e.latestVersion);t!==null&&n!==null&&ae.gt(n,t)&&console.error(`A newer ${e.packageName} version is available: ${n} (current ${t}).`)}async function Lp({packageName:e,currentVersion:t}){let n=Op(),r=jp(n);if(r?.result===`latest-version`){Ip({packageName:e,currentVersion:t,latestVersion:r.latestVersion});return}if(r?.result===`fetch-failure`||!Np(n))return;let i=await Fp({packageName:e});if(i===void 0){Pp(n,{result:`fetch-failure`});return}Pp(n,{result:`latest-version`,latestVersion:i}),Ip({packageName:e,currentVersion:t,latestVersion:i})}async function Rp(e){return typeof e==`function`?await e():await e}async function zp(e){return typeof e==`function`?await e():await e}async function Bp(e){return typeof e==`function`?await e():await e}async function Vp(e,t,n=[]){if(e===t)return n;let r=await Bp(e.subCommands??{});return(await Promise.all(Object.entries(r).map(async([e,r])=>Vp(await Rp(r),t,[...n,e])))).find(e=>e!==void 0)}async function Hp(e,t){if(!e||!t||t.length<2)return e;let n=await zp(e.meta??{});return{...e,meta:{...n,name:t.slice(0,-1).join(` `)}}}function Up(e){return async(t,n)=>{let r=await l(t,await Hp(n,await Vp(e,t)));console.log(`${r}\n`)}}function Wp({shouldCheckCliVersionFreshness:e}){return c({meta:{name:`catena`,version:oe,description:`Catena CLI`},async setup({rawArgs:t}){e&&t.length!==0&&await Lp({packageName:P,currentVersion:oe})},subCommands:{link:Nd,unlink:hf,profiles:cf,whoami:_f,policy:Zd,accounts:_u,intents:Zu,send:uf,transfer:ff,mpp:()=>import(`./mpp-CZl4wkkp.mjs`).then(e=>e.mppCommand),x402:Sp,counterparties:Vu,feedback:Ku,guide:Ju}})}const Gp=Wp({shouldCheckCliVersionFreshness:!0});Wp({shouldCheckCliVersionFreshness:!1});function Kp(){u(Gp,{showUsage:Up(Gp)})}Kp();export{Ba as A,Q as C,gs as D,X as E,ss as O,Z as S,Ls as T,vf as _,rp as a,Ds as b,Jf as c,Gf as d,qf as f,yf as g,bf as h,Zf as i,he as j,fs as k,tp as l,Sf as m,cp as n,Yf as o,xf as p,Xf as r,$f as s,_p as t,np as u,$ as v,Rs as w,Ts as x,Bs as y};