@fast-china/utils 2.0.2 → 2.0.3

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to Fast.Utils are documented in this file.
 
+## [2.0.3] - 2026-08-11
+
+### Changed
+
+- Established `FAST-AES-256-GCM-V1` as the initial cross-language password-based AES payload.
+
 ## [2.0.2] - 2026-08-09
 
 ### Changed
@@ -43,6 +49,7 @@ All notable changes to Fast.Utils are documented in this file.
 
 - Added authenticated ciphertext validation, bounded crypto parameters and payloads, unbiased Web Crypto randomness, prototype-safe query/object transforms, and namespace-scoped Storage cleanup.
 
+[2.0.3]: https://github.com/China-xiaoFang/Fast.Utils/releases/tag/v2.0.3
 [2.0.2]: https://github.com/China-xiaoFang/Fast.Utils/releases/tag/v2.0.2
 [2.0.1]: https://github.com/China-xiaoFang/Fast.Utils/releases/tag/v2.0.1
 [2.0.0]: https://github.com/China-xiaoFang/Fast.Utils/releases/tag/v2.0.0

package/dist/crypto/index.d.mts

@@ -203,7 +203,7 @@ declare function AESDecryptAuthenticated(payload: string, key: string): Promise<
  * 使用 PBKDF2-HMAC-SHA-256 派生密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。
  *
  * @remarks 每次调用生成独立 16 字节盐与 12 字节 IV。输出是与 .NET `AESEncryptWithPassword`
- * 一致的 v2 自描述载荷，不应由业务代码手动拆分或修改。密码加密不替代密钥管理。
+ * 一致的 v1 自描述载荷，不应由业务代码手动拆分或修改。密码加密不替代密钥管理。
  * @param plaintext - 原始文本，不进行 JSON 推断；UTF-8 编码后最大 8 MiB。
  * @param password - 1 至 1024 UTF-8 字节的秘密口令。
  * @param iterations - PBKDF2 工作因子，默认 600,000。
@@ -213,9 +213,9 @@ declare function AESDecryptAuthenticated(payload: string, key: string): Promise<
  */
 declare function AESEncryptWithPassword(plaintext: string, password: string, iterations?: number): Promise<string>;
 /**
- * 解密 {@link AESEncryptWithPassword} 生成的 v2 认证载荷。
+ * 解密 {@link AESEncryptWithPassword} 生成的 v1 认证载荷。
  *
- * @param payload - 未修改的 v2 载荷，最大约 16 MiB 文本。
+ * @param payload - 未修改的 v1 载荷，最大约 16 MiB 文本。
  * @param password - 加密时使用的口令。
  * @returns 原始 UTF-8 文本。
  * @throws 格式或字段非法时抛出 `TypeError`，载荷过大时抛出 `RangeError`，认证或密码

package/dist/crypto/index.mjs

@@ -26,7 +26,7 @@ const maximumPlaintextBytes = 8388608;
 /** 密码解密接口允许的最大协议载荷字符数。 */
 const maximumPayloadLength = 16777216;
 /** 密码加密载荷的协议与算法版本前缀。 */
-const encryptedPayloadPrefix = "FAST-AES-256-GCM-V2";
+const encryptedPayloadPrefix = "FAST-AES-256-GCM-V1";
 /** PBKDF2 密码哈希的协议与算法版本前缀。 */
 const passwordHashPrefix = "FAST-PBKDF2-SHA256-V1";
 /** 直接 AES-GCM 密钥加密载荷的协议版本。 */
@@ -544,7 +544,7 @@ async function AESDecryptAuthenticated(payload, key) {
 * 使用 PBKDF2-HMAC-SHA-256 派生密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。
 *
 * @remarks 每次调用生成独立 16 字节盐与 12 字节 IV。输出是与 .NET `AESEncryptWithPassword`
-* 一致的 v2 自描述载荷，不应由业务代码手动拆分或修改。密码加密不替代密钥管理。
+* 一致的 v1 自描述载荷，不应由业务代码手动拆分或修改。密码加密不替代密钥管理。
 * @param plaintext - 原始文本，不进行 JSON 推断；UTF-8 编码后最大 8 MiB。
 * @param password - 1 至 1024 UTF-8 字节的秘密口令。
 * @param iterations - PBKDF2 工作因子，默认 600,000。
@@ -585,9 +585,9 @@ async function AESEncryptWithPassword(plaintext, password, iterations = defaultP
 	].join(":");
 }
 /**
-* 解密 {@link AESEncryptWithPassword} 生成的 v2 认证载荷。
+* 解密 {@link AESEncryptWithPassword} 生成的 v1 认证载荷。
 *
-* @param payload - 未修改的 v2 载荷，最大约 16 MiB 文本。
+* @param payload - 未修改的 v1 载荷，最大约 16 MiB 文本。
 * @param password - 加密时使用的口令。
 * @returns 原始 UTF-8 文本。
 * @throws 格式或字段非法时抛出 `TypeError`，载荷过大时抛出 `RangeError`，认证或密码

package/dist/crypto/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/crypto/index.ts"],"sourcesContent":["import AES from \"crypto-js/aes.js\";\nimport CryptoCore from \"crypto-js/core.js\";\nimport Hex from \"crypto-js/enc-hex.js\";\nimport Utf8 from \"crypto-js/enc-utf8.js\";\nimport MD5 from \"crypto-js/md5.js\";\nimport ECB from \"crypto-js/mode-ecb.js\";\nimport \"crypto-js/pad-ansix923.js\";\nimport Iso10126 from \"crypto-js/pad-iso10126.js\";\nimport NoPadding from \"crypto-js/pad-nopadding.js\";\nimport Pkcs7 from \"crypto-js/pad-pkcs7.js\";\nimport ZeroPadding from \"crypto-js/pad-zeropadding.js\";\nimport SHA1 from \"crypto-js/sha1.js\";\nimport { decodeBase64Bytes, decodeBase64UrlBytes, encodeBase64Bytes, encodeBase64UrlBytes } from \"../base64/index\";\nimport { encodeUtf8, getTextDecoder } from \"../internal/text\";\n\n/** PBKDF2 默认迭代次数。 */\nconst defaultPbkdf2Iterations = 600_000;\n\n/** PBKDF2 允许的最小迭代次数。 */\nconst minimumPbkdf2Iterations = 100_000;\n\n/** PBKDF2 允许的最大迭代次数，用于限制异常输入造成的计算资源消耗。 */\nconst maximumPbkdf2Iterations = 5_000_000;\n\n/** 密码允许的最大 UTF-8 字节数。 */\nconst maximumPasswordBytes = 1024;\n\n/** 密码加密接口允许的最大明文字节数。 */\nconst maximumPlaintextBytes = 8 * 1024 * 1024;\n\n/** 密码解密接口允许的最大协议载荷字符数。 */\nconst maximumPayloadLength = 16 * 1024 * 1024;\n\n/** 密码加密载荷的协议与算法版本前缀。 */\nconst encryptedPayloadPrefix = \"FAST-AES-256-GCM-V2\";\n\n/** PBKDF2 密码哈希的协议与算法版本前缀。 */\nconst passwordHashPrefix = \"FAST-PBKDF2-SHA256-V1\";\n\n/** 直接 AES-GCM 密钥加密载荷的协议版本。 */\nconst authenticatedAesPayloadVersion = 1;\n\n/** 用于逐项验证实际依赖能力，而不是只判断 `subtle` 对象是否存在。 */\ntype RuntimeSubtleCrypto = Partial<\n\tPick<SubtleCrypto, \"decrypt\" | \"deriveBits\" | \"deriveKey\" | \"digest\" | \"encrypt\" | \"exportKey\" | \"generateKey\" | \"importKey\" | \"sign\" | \"verify\">\n>;\n/** Web Crypto 的运行时最小结构，避免用不安全的类型断言掩盖能力缺失。 */\ninterface RuntimeCrypto extends Partial<Pick<Crypto, \"getRandomValues\">> {\n\t/** 可选 SubtleCrypto 能力；密码原语入口会继续逐项验证所需方法。 */\n\tsubtle?: RuntimeSubtleCrypto;\n}\n\n/** Crypto 工具延迟读取的平台全局对象最小视图。 */\ninterface RuntimeCryptoGlobals {\n\t/** 可选 Web Crypto 实现；具体方法仍由每个能力入口逐项校验。 */\n\tcrypto?: RuntimeCrypto;\n}\n\n/** 延迟读取的 Web Crypto 全局对象视图，便于在缺少该能力的平台给出明确错误。 */\nconst runtimeCryptoGlobals = globalThis as unknown as RuntimeCryptoGlobals;\n\n/** AES 分组密码模式；与 .NET `CipherMode.CBC` 和 `CipherMode.ECB` 对应。 */\nexport type AesCipherMode = \"CBC\" | \"ECB\";\n\n/** AES 填充模式；与 .NET `PaddingMode` 中可由 CryptoJS 互操作的成员对应。 */\nexport type AesPaddingMode = \"None\" | \"PKCS7\" | \"Zeros\" | \"ANSIX923\" | \"ISO10126\";\n\n/** Web Crypto 导出的 PEM 公私钥对。 */\nexport interface PemKeyPair {\n\t/** 未加密的 PKCS#8 PEM 私钥，包含标准 `PRIVATE KEY` 头尾和 64 字符换行。 */\n\tprivateKey: string;\n\t/** SubjectPublicKeyInfo PEM 公钥，包含标准 `PUBLIC KEY` 头尾和 64 字符换行。 */\n\tpublicKey: string;\n}\n\n/** 本模块支持的 Web Crypto 椭圆曲线。 */\nexport type EcNamedCurve = \"P-256\" | \"P-384\" | \"P-521\";\n\n/**\n * 获取安全随机数能力。\n *\n * @remarks 随机字节和随机字符串不依赖 SubtleCrypto，因此这里与完整密码原语检查分开。\n * @returns 当前平台的 Crypto 对象。\n * @throws `Error` 当平台缺少 `getRandomValues`。\n */\nconst requireRandomCrypto = (): Crypto => {\n\tconst crypto = runtimeCryptoGlobals.crypto;\n\tif (typeof crypto?.getRandomValues !== \"function\") {\n\t\tthrow new Error(\"Web Crypto is unavailable in the current runtime.\");\n\t}\n\treturn crypto as Crypto;\n};\n\n/**\n * 获取本模块非随机 API 所需的完整 Web Crypto 能力。\n *\n * @returns 已确认实现摘要、派生、密钥导入导出、加解密、签名和验证方法的 Crypto 对象。\n * @throws `Error` 当任一必要 SubtleCrypto 方法缺失。\n */\nconst requireWebCrypto = (): Crypto => {\n\tconst crypto = requireRandomCrypto();\n\tconst subtle = (crypto as unknown as RuntimeCrypto).subtle;\n\tif (\n\t\ttypeof subtle?.decrypt !== \"function\" ||\n\t\ttypeof subtle.deriveBits !== \"function\" ||\n\t\ttypeof subtle.deriveKey !== \"function\" ||\n\t\ttypeof subtle.digest !== \"function\" ||\n\t\ttypeof subtle.encrypt !== \"function\" ||\n\t\ttypeof subtle.exportKey !== \"function\" ||\n\t\ttypeof subtle.generateKey !== \"function\" ||\n\t\ttypeof subtle.importKey !== \"function\" ||\n\t\ttypeof subtle.sign !== \"function\" ||\n\t\ttypeof subtle.verify !== \"function\"\n\t) {\n\t\tthrow new Error(\"Web Crypto SubtleCrypto is unavailable in the current runtime.\");\n\t}\n\treturn crypto;\n};\n\n/**\n * 把 Uint8Array 复制为独立的完整 ArrayBuffer。\n *\n * @remarks 不能直接返回 `bytes.buffer`，因为输入可能只是更大 Buffer 的切片。\n * @param bytes - 源字节视图。\n * @returns 长度与视图完全一致、偏移为零的新 ArrayBuffer。\n */\nconst toArrayBuffer = (bytes: Uint8Array): ArrayBuffer => {\n\tconst copy = new Uint8Array(bytes.byteLength);\n\tcopy.set(bytes);\n\treturn copy.buffer;\n};\n\n/** 本模块导出的 PKCS#8 与 SPKI PEM 标签。 */\nconst pemLabels = {\n\tprivate: \"PRIVATE KEY\",\n\tpublic: \"PUBLIC KEY\",\n} as const;\n\n/**\n * 把 DER 内容封装为 PEM。\n *\n * @param label - PEM Begin/End 标签，不包含分隔线。\n * @param value - DER 二进制内容。\n * @returns 每行最多 64 个 Base64 字符的 PEM 文本。\n */\nconst toPem = (label: string, value: ArrayBuffer): string => {\n\tconst encoded = encodeBase64Bytes(new Uint8Array(value));\n\tconst lines = encoded.match(/.{1,64}/gu)?.join(\"\\n\") ?? \"\";\n\treturn `-----BEGIN ${label}-----\\n${lines}\\n-----END ${label}-----`;\n};\n\n/**\n * 校验 PEM 标签并还原 DER。\n *\n * @param value - PEM 文本。\n * @param label - 当前算法预期的标签。\n * @returns 独立的 DER ArrayBuffer。\n * @throws `TypeError` 当 Begin/End 标签不匹配或 Base64 内容非法。\n */\nconst fromPem = (value: string, label: string): ArrayBuffer => {\n\tconst header = `-----BEGIN ${label}-----`;\n\tconst footer = `-----END ${label}-----`;\n\tconst trimmed = value.trim();\n\tif (!trimmed.startsWith(header) || !trimmed.endsWith(footer)) throw new TypeError(`Expected a ${label} PEM value.`);\n\tconst encoded = trimmed.slice(header.length, -footer.length).replace(/\\s+/gu, \"\");\n\treturn toArrayBuffer(decodeBase64Bytes(encoded));\n};\n\n/**\n * 导出 Web Crypto 密钥对。\n *\n * @param keyPair - 可导出的公私钥对。\n * @returns PKCS#8 私钥和 SPKI 公钥组成的 PEM 对象。\n * @throws `Error` 当平台拒绝导出或密钥格式不兼容。\n */\nconst exportKeyPair = async (keyPair: CryptoKeyPair): Promise<PemKeyPair> => {\n\tconst crypto = requireWebCrypto();\n\tconst [privateKey, publicKey] = await Promise.all([\n\t\tcrypto.subtle.exportKey(\"pkcs8\", keyPair.privateKey),\n\t\tcrypto.subtle.exportKey(\"spki\", keyPair.publicKey),\n\t]);\n\treturn {\n\t\tprivateKey: toPem(pemLabels.private, privateKey),\n\t\tpublicKey: toPem(pemLabels.public, publicKey),\n\t};\n};\n\n/**\n * 缩小 Web Crypto `generateKey` 的联合返回值。\n *\n * @param value - 平台返回的单密钥或密钥对。\n * @returns 同时具有公钥和私钥的密钥对。\n * @throws `Error` 当平台没有按请求生成密钥对。\n */\nconst assertKeyPair = (value: CryptoKey | CryptoKeyPair): CryptoKeyPair => {\n\tif (\"privateKey\" in value && \"publicKey\" in value) return value;\n\tthrow new Error(\"The runtime did not generate a key pair.\");\n};\n\n/**\n * 校验并编码密码。\n *\n * @param password - 用户提供的密码文本。\n * @returns UTF-8 密码字节。\n * @throws `TypeError` 当密码为空。\n * @throws `RangeError` 当 UTF-8 长度超过 1,024 字节。\n */\nconst encodeValidatedPassword = (password: string): Uint8Array => {\n\tconst bytes = encodeUtf8(password);\n\tif (bytes.length === 0) throw new TypeError(\"The encryption password cannot be empty.\");\n\tif (bytes.length > maximumPasswordBytes) {\n\t\tthrow new RangeError(`The UTF-8 password cannot exceed ${maximumPasswordBytes} bytes.`);\n\t}\n\treturn bytes;\n};\n\n/**\n * 校验 PBKDF2 迭代次数。\n *\n * @param iterations - 待使用的迭代次数。\n * @returns 校验后的原始整数。\n * @throws `RangeError` 当值不是 100,000 至 5,000,000 的安全整数。\n */\nconst validateIterations = (iterations: number): number => {\n\tif (!Number.isSafeInteger(iterations) || iterations < minimumPbkdf2Iterations || iterations > maximumPbkdf2Iterations) {\n\t\tthrow new RangeError(`iterations must be a safe integer between ${minimumPbkdf2Iterations} and ${maximumPbkdf2Iterations}.`);\n\t}\n\treturn iterations;\n};\n\n/** 把字节格式化为小写十六进制。 */\nconst toLowerHex = (value: Uint8Array): string => Array.from(value, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n/** 把字节格式化为大写十六进制。 */\nconst toUpperHex = (value: Uint8Array): string => toLowerHex(value).toUpperCase();\n\n/**\n * 使用指定的 Web Crypto HMAC 算法计算原始认证标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @param hash - HMAC 使用的 SHA-2 摘要算法。\n * @returns 算法规定长度的原始认证标签。\n * @throws `TypeError` 当密钥为空。\n * @throws `Error` 当运行时缺少所需 Web Crypto 能力。\n */\nconst computeHmacBytes = async (value: string, key: string, hash: \"SHA-256\" | \"SHA-384\" | \"SHA-512\"): Promise<Uint8Array> => {\n\tconst keyBytes = encodeUtf8(key);\n\tif (keyBytes.length === 0) throw new TypeError(\"The HMAC key cannot be empty.\");\n\n\tconst crypto = requireWebCrypto();\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { hash, name: \"HMAC\" }, false, [\"sign\"]);\n\tconst signature = await crypto.subtle.sign(\"HMAC\", cryptoKey, toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(signature);\n};\n\n/**\n * 生成安全随机字节。\n *\n * @param length - 0 至 65,536 的安全整数；上限来自 Web Crypto 单次请求限制。\n * @returns 新建的 `Uint8Array`。\n * @throws 参数非法时抛出 `RangeError`；缺少 Web Crypto 时抛出 `Error`。\n */\nexport function GenerateRandomBytes(length: number): Uint8Array {\n\tif (!Number.isSafeInteger(length) || length < 0 || length > 65_536) {\n\t\tthrow new RangeError(\"length must be a safe integer from 0 through 65,536.\");\n\t}\n\treturn requireRandomCrypto().getRandomValues(new Uint8Array(length));\n}\n\n/**\n * 以不提前退出的方式比较两个字节数组。\n *\n * @remarks JavaScript 引擎不保证严格常量时间；该函数只避免显式短路，不能替代服务端\n * 密码学库提供的 timing-safe primitive。长度是否相同仍属于可观察信息。\n * @param left - 第一字节序列。\n * @param right - 第二字节序列。\n * @returns 长度和每个字节均相同时返回 `true`。\n */\nexport function FixedTimeEquals(left: Uint8Array, right: Uint8Array): boolean {\n\tconst length = Math.max(left.length, right.length);\n\tlet difference = left.length === right.length ? 0 : 1;\n\t// 不按长度或首个差异提前退出；缺失位置按零参与累计差异。\n\tfor (let index = 0; index < length; index += 1) difference |= (left[index] ?? 0) ^ (right[index] ?? 0);\n\treturn difference === 0;\n}\n\n/**\n * 计算 MD5 摘要并返回小写十六进制文本。\n *\n * @remarks MD5 仅用于非安全的普通校验，不得用于密码、签名或抗碰撞场景。\n * @param value - UTF-8 文本。\n * @returns 32 字符小写十六进制摘要。\n */\nexport function MD5Encrypt(value: string): string {\n\treturn MD5(value).toString(Hex);\n}\n\n/**\n * 计算 SHA-1 摘要并返回大写十六进制文本。\n *\n * @remarks SHA-1 仅用于非安全的普通校验，不得用于密码、签名或抗碰撞场景。\n * @param value - UTF-8 文本。\n * @returns 40 字符大写十六进制摘要。\n */\nexport function SHA1Encrypt(value: string): string {\n\treturn SHA1(value).toString(Hex).toUpperCase();\n}\n\n/**\n * 计算 SHA-256 摘要。\n *\n * @remarks SHA-256 是快速摘要，不适合直接存储或校验密码。\n * @param value - UTF-8 字符串或原始字节。\n * @returns 32 字节摘要。\n * @throws 缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function SHA256Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-256\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-256 并格式化为十六进制。\n *\n * @param value - UTF-8 字符串或原始字节。\n * @returns 64 字符大写十六进制文本。\n * @throws 缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function SHA256Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA256Bytes(value));\n}\n\n/**\n * 计算 SHA-384 摘要。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 48 字节摘要。\n */\nexport async function SHA384Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-384\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-384 并格式化为十六进制文本。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 96 个大写十六进制字符组成的摘要。\n */\nexport async function SHA384Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA384Bytes(value));\n}\n\n/**\n * 计算 SHA-512 摘要。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 64 字节摘要。\n */\nexport async function SHA512Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-512\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-512 并格式化为十六进制文本。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 128 个大写十六进制字符组成的摘要。\n */\nexport async function SHA512Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA512Bytes(value));\n}\n\n/**\n * 使用 HMAC-SHA-256 认证文本，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 64 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA256Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-256\"));\n}\n\n/**\n * 使用 HMAC-SHA-384 认证文本或字节，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 96 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA384Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-384\"));\n}\n\n/**\n * 使用 HMAC-SHA-512 认证文本或字节，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 128 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA512Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-512\"));\n}\n\n/**\n * 使用 PBKDF2-HMAC-SHA-256 从密码派生密钥。\n *\n * @param password - 1 至 1,024 UTF-8 字节的密码。\n * @param salt - 至少 8 字节的盐。\n * @param iterations - 迭代次数，范围为 100,000 至 5,000,000。\n * @param outputLength - 输出长度，范围为 1 至 1,024 字节。\n * @returns 指定长度的派生密钥。\n * @throws 参数超过协议边界时抛出 `TypeError` 或 `RangeError`。\n */\nexport async function PBKDF2SHA256(password: string, salt: Uint8Array, iterations = defaultPbkdf2Iterations, outputLength = 32): Promise<Uint8Array> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tif (salt.length < 8) throw new RangeError(\"The PBKDF2 salt must contain at least 8 bytes; 16 or more is recommended.\");\n\tif (!Number.isSafeInteger(outputLength) || outputLength < 1 || outputLength > 1024) {\n\t\tthrow new RangeError(\"outputLength must be a safe integer between 1 and 1,024.\");\n\t}\n\n\t// 密码作为不可导出的 PBKDF2 原始材料导入，派生结果只通过 deriveBits 返回。\n\tconst crypto = requireWebCrypto();\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveBits\"]);\n\tconst derived = await crypto.subtle.deriveBits(\n\t\t{ hash: \"SHA-256\", iterations: validateIterations(iterations), name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\toutputLength * 8\n\t);\n\treturn new Uint8Array(derived);\n}\n\n/**\n * 生成可持久化的随机盐 PBKDF2-HMAC-SHA-256 密码哈希。\n *\n * @param password - 1 至 1,024 UTF-8 字节的密码。\n * @param iterations - 迭代次数，范围为 100,000 至 5,000,000。\n * @returns 包含版本、迭代次数、16 字节随机盐和 32 字节派生密钥的自描述字符串。\n */\nexport async function HashPasswordPBKDF2SHA256(password: string, iterations = defaultPbkdf2Iterations): Promise<string> {\n\t// 每个密码独立生成盐，避免相同密码产生相同持久化结果并提高预计算攻击成本。\n\tconst salt = GenerateRandomBytes(16);\n\tconst derivedKey = await PBKDF2SHA256(password, salt, iterations);\n\treturn [passwordHashPrefix, String(iterations), encodeBase64UrlBytes(salt), encodeBase64UrlBytes(derivedKey)].join(\":\");\n}\n\n/**\n * 验证 {@link HashPasswordPBKDF2SHA256} 生成的密码哈希。\n *\n * @param password - 要验证的密码。\n * @param passwordHash - 自描述的 PBKDF2-HMAC-SHA-256 密码哈希。\n * @returns 格式有效且密码匹配时返回 `true`；格式无效或密码错误时返回 `false`。\n */\nexport async function VerifyPasswordPBKDF2SHA256(password: string, passwordHash: string): Promise<boolean> {\n\ttry {\n\t\t// 先验证协议版本和字段边界，再执行高成本 PBKDF2，避免无效输入消耗不受控资源。\n\t\tconst parts = passwordHash.split(\":\");\n\t\tif (parts.length !== 4 || parts[0] !== passwordHashPrefix) return false;\n\t\tconst iterations = validateIterations(Number(parts[1]));\n\t\tconst salt = decodeBase64UrlBytes(parts[2] ?? \"\");\n\t\tconst expected = decodeBase64UrlBytes(parts[3] ?? \"\");\n\t\tif (salt.length !== 16 || expected.length !== 32) return false;\n\t\tconst actual = await PBKDF2SHA256(password, salt, iterations, expected.length);\n\t\treturn FixedTimeEquals(actual, expected);\n\t} catch {\n\t\treturn false;\n\t}\n}\n\n/**\n * 使用 RFC 5869 HKDF-SHA-256 派生上下文隔离的密钥材料。\n *\n * @param inputKeyMaterial - 输入密钥材料，例如 ECDH 原始共享秘密。\n * @param salt - 可选盐；空值按 RFC 5869 的零盐语义处理。\n * @param info - 应用、协议和密钥用途上下文。\n * @param outputLength - 输出长度，范围为 1 至 8,160 字节。\n * @returns 与 `salt` 和 `info` 绑定的派生密钥。\n */\nexport async function HKDFSHA256(\n\tinputKeyMaterial: Uint8Array,\n\tsalt: Uint8Array = new Uint8Array(),\n\tinfo: Uint8Array = new Uint8Array(),\n\toutputLength = 32\n): Promise<Uint8Array> {\n\tif (!Number.isSafeInteger(outputLength) || outputLength < 1 || outputLength > 255 * 32) {\n\t\tthrow new RangeError(\"outputLength must be a safe integer between 1 and 8,160.\");\n\t}\n\n\t// Web Crypto 的 HKDF 实现内部完成 RFC 5869 Extract 和 Expand，并且不会导出中间 PRK。\n\tconst crypto = requireWebCrypto();\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(inputKeyMaterial), \"HKDF\", false, [\"deriveBits\"]);\n\tconst derived = await crypto.subtle.deriveBits(\n\t\t{ hash: \"SHA-256\", info: toArrayBuffer(info), name: \"HKDF\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\toutputLength * 8\n\t);\n\treturn new Uint8Array(derived);\n}\n\n/**\n * 使用 AES-256 对 UTF-8 文本进行分组加密。\n *\n * @remarks 密钥和 IV 分别补字符 `f` 或截断到 32、16 个 UTF-16 Code Unit，与 .NET\n * `AESEncrypt` 保持一致。CBC/ECB 不提供完整性认证，密文可能被篡改。\n * @param dataStr - 要加密的 UTF-8 文本；空白文本返回 `null`。\n * @param key - 非空白的密钥文本。\n * @param vector - 非空白的初始化向量文本；ECB 模式仍要求传入该参数以对齐 .NET 签名。\n * @param cipherMode - AES 分组模式，默认 `CBC`。\n * @param paddingMode - AES 填充模式，默认 `PKCS7`。\n * @returns Base64 密文；输入、密钥或 IV 为空白时返回 `null`。\n * @throws 模式或填充不受支持时抛出 `RangeError`。\n */\nexport function AESEncrypt(\n\tdataStr: string,\n\tkey: string,\n\tvector: string,\n\tcipherMode: AesCipherMode = \"CBC\",\n\tpaddingMode: AesPaddingMode = \"PKCS7\"\n): string | null {\n\tif (dataStr.trim().length === 0 || key.trim().length === 0 || vector.trim().length === 0) return null;\n\tif (cipherMode !== \"CBC\" && cipherMode !== \"ECB\") throw new RangeError('cipherMode must be \"CBC\" or \"ECB\".');\n\n\tlet padding = Pkcs7;\n\tswitch (paddingMode) {\n\t\tcase \"None\":\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"PKCS7\":\n\t\t\tbreak;\n\t\tcase \"Zeros\":\n\t\t\tpadding = ZeroPadding;\n\t\t\tbreak;\n\t\tcase \"ANSIX923\":\n\t\t\t// crypto-js 4.2.0 的 pad-ansix923 默认导出名称拼写错误，使用其注册到核心对象的实现。\n\t\t\tpadding = CryptoCore.pad.AnsiX923;\n\t\t\tbreak;\n\t\tcase \"ISO10126\":\n\t\t\tpadding = Iso10126;\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new RangeError(\"paddingMode is not supported.\");\n\t}\n\tif (paddingMode === \"None\" && encodeUtf8(dataStr).length % 16 !== 0) {\n\t\tthrow new RangeError(\"AES plaintext must contain a whole number of 16-byte blocks when paddingMode is None.\");\n\t}\n\n\t// 按 .NET 入口的字符规则处理密钥和 IV，再由 CryptoJS 统一按 UTF-8 编码。\n\tconst keyBytes = Utf8.parse(key.padEnd(32, \"f\").slice(0, 32));\n\tconst vectorBytes = Utf8.parse(vector.padEnd(16, \"f\").slice(0, 16));\n\treturn AES.encrypt(dataStr, keyBytes, cipherMode === \"CBC\" ? { iv: vectorBytes, padding } : { iv: vectorBytes, mode: ECB, padding }).toString();\n}\n\n/**\n * 使用 AES-256 解密 Base64 分组密文。\n *\n * @remarks 参数归一化规则与 {@link AESEncrypt} 以及 .NET `AESDecrypt` 相同。\n * @param dataStr - Base64 密文；空白文本返回 `null`。\n * @param key - 加密时使用的密钥文本。\n * @param vector - 加密时使用的初始化向量文本。\n * @param cipherMode - AES 分组模式，默认 `CBC`。\n * @param paddingMode - AES 填充模式，默认 `PKCS7`。\n * @returns 解密后的 UTF-8 文本；输入、密钥或 IV 为空白时返回 `null`。\n * @throws 模式、填充、Base64、密钥或密文无效时抛出错误。\n */\nexport function AESDecrypt(\n\tdataStr: string,\n\tkey: string,\n\tvector: string,\n\tcipherMode: AesCipherMode = \"CBC\",\n\tpaddingMode: AesPaddingMode = \"PKCS7\"\n): string | null {\n\tif (dataStr.trim().length === 0 || key.trim().length === 0 || vector.trim().length === 0) return null;\n\tif (cipherMode !== \"CBC\" && cipherMode !== \"ECB\") throw new RangeError('cipherMode must be \"CBC\" or \"ECB\".');\n\n\tlet padding = Pkcs7;\n\tswitch (paddingMode) {\n\t\tcase \"None\":\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"PKCS7\":\n\t\t\tbreak;\n\t\tcase \"Zeros\":\n\t\t\t// .NET 的 Zeros 解密不会移除尾部零字节，因此使用 NoPadding 保留完整明文块。\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"ANSIX923\":\n\t\t\t// crypto-js 4.2.0 的 pad-ansix923 默认导出名称拼写错误，使用其注册到核心对象的实现。\n\t\t\tpadding = CryptoCore.pad.AnsiX923;\n\t\t\tbreak;\n\t\tcase \"ISO10126\":\n\t\t\tpadding = Iso10126;\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new RangeError(\"paddingMode is not supported.\");\n\t}\n\tconst ciphertextBytes = decodeBase64Bytes(dataStr);\n\tif (ciphertextBytes.length === 0 || ciphertextBytes.length % 16 !== 0) {\n\t\tthrow new RangeError(\"AES ciphertext must contain one or more complete 16-byte blocks.\");\n\t}\n\n\t// 解密必须重复使用加密端相同的字符补齐和截断规则。\n\tconst keyBytes = Utf8.parse(key.padEnd(32, \"f\").slice(0, 32));\n\tconst vectorBytes = Utf8.parse(vector.padEnd(16, \"f\").slice(0, 16));\n\treturn AES.decrypt(dataStr, keyBytes, cipherMode === \"CBC\" ? { iv: vectorBytes, padding } : { iv: vectorBytes, mode: ECB, padding }).toString(\n\t\tUtf8\n\t);\n}\n\n/**\n * 使用 SHA-256 归一化文本密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。\n *\n * @remarks 输出与 .NET `AESEncryptAuthenticated` 的 v1 Base64 二进制载荷完全一致。\n * @param plaintext - 要加密的 UTF-8 文本。\n * @param key - 非空的 UTF-8 文本密钥；内部归一化为 32 字节 SHA-256 摘要。\n * @returns Base64 编码的 v1 AES-GCM 认证载荷。\n * @throws 密钥为空或运行时缺少 Web Crypto 时抛出错误。\n */\nexport async function AESEncryptAuthenticated(plaintext: string, key: string): Promise<string> {\n\tif (key.trim().length === 0) throw new TypeError(\"The encryption key cannot be empty.\");\n\tconst crypto = requireWebCrypto();\n\tconst keyBytes = await SHA256Bytes(key);\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { name: \"AES-GCM\" }, false, [\"encrypt\"]);\n\t// 96 位随机 nonce 是 GCM 的标准高效长度；每次加密都生成新值，避免同一密钥下重复。\n\tconst nonce = GenerateRandomBytes(12);\n\tconst encrypted = new Uint8Array(\n\t\tawait crypto.subtle.encrypt({ iv: toArrayBuffer(nonce), name: \"AES-GCM\", tagLength: 128 }, cryptoKey, toArrayBuffer(encodeUtf8(plaintext)))\n\t);\n\tconst ciphertextLength = encrypted.length - 16;\n\t// .NET v1 协议字段顺序固定为 version || nonce || tag || ciphertext。\n\tconst payload = new Uint8Array(1 + nonce.length + 16 + ciphertextLength);\n\tpayload[0] = authenticatedAesPayloadVersion;\n\tpayload.set(nonce, 1);\n\tpayload.set(encrypted.subarray(ciphertextLength), 1 + nonce.length);\n\tpayload.set(encrypted.subarray(0, ciphertextLength), 1 + nonce.length + 16);\n\treturn encodeBase64Bytes(payload);\n}\n\n/**\n * 解密并认证 .NET `AESEncryptAuthenticated` 或 {@link AESEncryptAuthenticated} 生成的载荷。\n *\n * @param payload - Base64 编码的 v1 AES-GCM 二进制载荷。\n * @param key - 加密时使用的非空 UTF-8 文本密钥。\n * @returns 通过认证的 UTF-8 明文。\n * @throws 载荷格式无效、密钥错误或认证失败时抛出错误。\n */\nexport async function AESDecryptAuthenticated(payload: string, key: string): Promise<string> {\n\tif (key.trim().length === 0) throw new TypeError(\"The encryption key cannot be empty.\");\n\tconst decoded = decodeBase64Bytes(payload);\n\tif (decoded.length < 29 || decoded[0] !== authenticatedAesPayloadVersion) {\n\t\tthrow new TypeError(\"The AES-GCM payload format or version is not supported.\");\n\t}\n\n\tconst nonce = decoded.subarray(1, 13);\n\tconst tag = decoded.subarray(13, 29);\n\tconst ciphertext = decoded.subarray(29);\n\t// Web Crypto 接收 ciphertext || tag，因此把 .NET v1 的独立字段恢复为 Web Crypto 输入顺序。\n\tconst ciphertextAndTag = new Uint8Array(ciphertext.length + tag.length);\n\tciphertextAndTag.set(ciphertext);\n\tciphertextAndTag.set(tag, ciphertext.length);\n\tconst crypto = requireWebCrypto();\n\tconst keyBytes = await SHA256Bytes(key);\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { name: \"AES-GCM\" }, false, [\"decrypt\"]);\n\tconst plaintext = await crypto.subtle.decrypt(\n\t\t{ iv: toArrayBuffer(nonce), name: \"AES-GCM\", tagLength: 128 },\n\t\tcryptoKey,\n\t\ttoArrayBuffer(ciphertextAndTag)\n\t);\n\treturn getTextDecoder().decode(plaintext);\n}\n\n/**\n * 使用 PBKDF2-HMAC-SHA-256 派生密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。\n *\n * @remarks 每次调用生成独立 16 字节盐与 12 字节 IV。输出是与 .NET `AESEncryptWithPassword`\n * 一致的 v2 自描述载荷，不应由业务代码手动拆分或修改。密码加密不替代密钥管理。\n * @param plaintext - 原始文本，不进行 JSON 推断；UTF-8 编码后最大 8 MiB。\n * @param password - 1 至 1024 UTF-8 字节的秘密口令。\n * @param iterations - PBKDF2 工作因子，默认 600,000。\n * @returns 认证密文字符串；相同输入每次产生不同结果。\n * @throws 口令非法时抛出 `TypeError` 或 `RangeError`；明文过大时抛出 `RangeError`；\n * 运行时缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function AESEncryptWithPassword(plaintext: string, password: string, iterations = defaultPbkdf2Iterations): Promise<string> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tconst plaintextBytes = encodeUtf8(plaintext);\n\tif (plaintextBytes.length > maximumPlaintextBytes) {\n\t\tthrow new RangeError(`The UTF-8 plaintext cannot exceed ${maximumPlaintextBytes} bytes.`);\n\t}\n\tconst validatedIterations = validateIterations(iterations);\n\tconst crypto = requireWebCrypto();\n\tconst salt = GenerateRandomBytes(16);\n\tconst iv = GenerateRandomBytes(12);\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveKey\"]);\n\t// AES-GCM 密钥只允许加密，且不允许从 Web Crypto 导出。\n\tconst key = await crypto.subtle.deriveKey(\n\t\t{ hash: \"SHA-256\", iterations: validatedIterations, name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\t{ length: 256, name: \"AES-GCM\" },\n\t\tfalse,\n\t\t[\"encrypt\"]\n\t);\n\t// Prefix 同时作为明文版本字段和 AAD，攻击者无法在不破坏认证标签的情况下替换协议版本。\n\tconst ciphertext = await crypto.subtle.encrypt(\n\t\t{ additionalData: toArrayBuffer(encodeUtf8(encryptedPayloadPrefix)), iv: toArrayBuffer(iv), name: \"AES-GCM\", tagLength: 128 },\n\t\tkey,\n\t\tplaintextBytes\n\t);\n\t// 字段顺序属于持久化协议：版本、KDF 成本、盐、IV、带 GCM Tag 的密文。\n\treturn [\n\t\tencryptedPayloadPrefix,\n\t\tString(validatedIterations),\n\t\tencodeBase64UrlBytes(salt),\n\t\tencodeBase64UrlBytes(iv),\n\t\tencodeBase64UrlBytes(new Uint8Array(ciphertext)),\n\t].join(\":\");\n}\n\n/**\n * 解密 {@link AESEncryptWithPassword} 生成的 v2 认证载荷。\n *\n * @param payload - 未修改的 v2 载荷，最大约 16 MiB 文本。\n * @param password - 加密时使用的口令。\n * @returns 原始 UTF-8 文本。\n * @throws 格式或字段非法时抛出 `TypeError`，载荷过大时抛出 `RangeError`，认证或密码\n * 失败及缺少平台能力时抛出 `Error`。\n */\nexport async function AESDecryptWithPassword(payload: string, password: string): Promise<string> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tif (payload.length > maximumPayloadLength) {\n\t\tthrow new RangeError(\"The encrypted payload exceeds the supported size.\");\n\t}\n\t// 先验证固定字段数和版本，再对高成本 KDF 与解密进行任何工作。\n\tconst parts = payload.split(\":\");\n\tif (parts.length !== 5 || parts[0] !== encryptedPayloadPrefix) {\n\t\tthrow new TypeError(\"The encrypted payload format is not supported.\");\n\t}\n\n\tlet iterations: number;\n\tlet salt: Uint8Array;\n\tlet iv: Uint8Array;\n\tlet ciphertext: Uint8Array;\n\ttry {\n\t\titerations = validateIterations(Number(parts[1]));\n\t\tsalt = decodeBase64UrlBytes(parts[2] ?? \"\");\n\t\tiv = decodeBase64UrlBytes(parts[3] ?? \"\");\n\t\tciphertext = decodeBase64UrlBytes(parts[4] ?? \"\");\n\t\tif (salt.length !== 16 || iv.length !== 12 || ciphertext.length < 16) {\n\t\t\tthrow new TypeError(\"The encrypted payload has invalid field lengths.\");\n\t\t}\n\t} catch (cause) {\n\t\tthrow new TypeError(\"The encrypted payload contains invalid fields.\", { cause });\n\t}\n\n\tconst crypto = requireWebCrypto();\n\tconst textDecoder = getTextDecoder();\n\ttry {\n\t\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveKey\"]);\n\t\t// 解密密钥不允许导出，也不能被误用于加密。\n\t\tconst key = await crypto.subtle.deriveKey(\n\t\t\t{ hash: \"SHA-256\", iterations, name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\t\tmaterial,\n\t\t\t{ length: 256, name: \"AES-GCM\" },\n\t\t\tfalse,\n\t\t\t[\"decrypt\"]\n\t\t);\n\t\tconst plaintext = await crypto.subtle.decrypt(\n\t\t\t{ additionalData: toArrayBuffer(encodeUtf8(encryptedPayloadPrefix)), iv: toArrayBuffer(iv), name: \"AES-GCM\", tagLength: 128 },\n\t\t\tkey,\n\t\t\ttoArrayBuffer(ciphertext)\n\t\t);\n\t\treturn textDecoder.decode(plaintext);\n\t} catch (cause) {\n\t\tthrow new Error(\"The payload could not be authenticated or decrypted.\", { cause });\n\t}\n}\n\n/**\n * 生成可供 RSA-OAEP/SHA-256 与 RSA-PSS/SHA-256 共用的 PEM 密钥对。\n *\n * @param modulusLength - RSA 模数位数，默认 2,048；必须是不小于 2,048 的 256 倍数。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n * @throws 模数小于 2,048 或不是 256 的倍数时抛出 `RangeError`。\n */\nexport async function GenerateRSAKeyPair(modulusLength = 2048): Promise<PemKeyPair> {\n\tif (!Number.isSafeInteger(modulusLength) || modulusLength < 2048 || modulusLength % 256 !== 0) {\n\t\tthrow new RangeError(\"modulusLength must be a safe integer of at least 2048 and divisible by 256.\");\n\t}\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(\n\t\tawait crypto.subtle.generateKey(\n\t\t\t{\n\t\t\t\thash: \"SHA-256\",\n\t\t\t\tmodulusLength,\n\t\t\t\tname: \"RSA-OAEP\",\n\t\t\t\tpublicExponent: Uint8Array.of(1, 0, 1),\n\t\t\t},\n\t\t\ttrue,\n\t\t\t[\"decrypt\", \"encrypt\"]\n\t\t)\n\t);\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用 RSA-OAEP/SHA-256 公钥加密 UTF-8 文本。\n *\n * @param plaintext - 要加密的 UTF-8 文本；长度必须满足 RSA-OAEP 模数限制。\n * @param publicKeyPem - SubjectPublicKeyInfo PEM 公钥。\n * @returns Base64 编码的 RSA 密文。\n * @throws 公钥格式无效或明文超过 RSA-OAEP 容量时抛出错误。\n */\nexport async function RSAEncryptOAEP(plaintext: string, publicKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { hash: \"SHA-256\", name: \"RSA-OAEP\" }, false, [\n\t\t\"encrypt\",\n\t]);\n\tconst ciphertext = await crypto.subtle.encrypt({ name: \"RSA-OAEP\" }, key, toArrayBuffer(encodeUtf8(plaintext)));\n\treturn encodeBase64Bytes(new Uint8Array(ciphertext));\n}\n\n/**\n * 使用 RSA-OAEP/SHA-256 私钥解密 Base64 密文。\n *\n * @param ciphertext - Base64 编码的 RSA 密文。\n * @param privateKeyPem - 未加密的 PKCS#8 PEM 私钥。\n * @returns 解密后的 UTF-8 文本。\n * @throws 私钥、Base64 或密文无效时抛出错误。\n */\nexport async function RSADecryptOAEP(ciphertext: string, privateKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { hash: \"SHA-256\", name: \"RSA-OAEP\" }, false, [\n\t\t\"decrypt\",\n\t]);\n\tconst plaintext = await crypto.subtle.decrypt({ name: \"RSA-OAEP\" }, key, toArrayBuffer(decodeBase64Bytes(ciphertext)));\n\treturn getTextDecoder().decode(plaintext);\n}\n\n/**\n * 使用 RSA-PSS/SHA-256 私钥签名文本或字节。\n *\n * @param value - 要签名的 UTF-8 文本或原始字节。\n * @param privateKeyPem - 未加密的 PKCS#8 PEM 私钥。\n * @returns Base64 编码的 RSA-PSS 签名；盐长度固定为 32 字节。\n * @throws 私钥格式无效或签名失败时抛出错误。\n */\nexport async function RSASignPSS(value: string, privateKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { hash: \"SHA-256\", name: \"RSA-PSS\" }, false, [\n\t\t\"sign\",\n\t]);\n\t// PSS 盐长度固定为 SHA-256 摘要长度，与 .NET RSASignaturePadding.Pss 的默认行为一致。\n\tconst signature = await crypto.subtle.sign({ name: \"RSA-PSS\", saltLength: 32 }, key, toArrayBuffer(encodeUtf8(value)));\n\treturn encodeBase64Bytes(new Uint8Array(signature));\n}\n\n/**\n * 使用 RSA-PSS/SHA-256 公钥验证 Base64 签名。\n *\n * @param value - 签名时使用的 UTF-8 文本或原始字节。\n * @param signature - Base64 编码的 RSA-PSS 签名。\n * @param publicKeyPem - SubjectPublicKeyInfo PEM 公钥。\n * @returns 签名与内容、公钥匹配时返回 `true`。\n * @throws 公钥或 Base64 格式无效时抛出错误。\n */\nexport async function RSAVerifyPSS(value: string, signature: string, publicKeyPem: string): Promise<boolean> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { hash: \"SHA-256\", name: \"RSA-PSS\" }, false, [\n\t\t\"verify\",\n\t]);\n\t// 验证端必须使用与签名端相同的 32 字节 PSS 盐长度。\n\treturn crypto.subtle.verify(\n\t\t{ name: \"RSA-PSS\", saltLength: 32 },\n\t\tkey,\n\t\ttoArrayBuffer(decodeBase64Bytes(signature)),\n\t\ttoArrayBuffer(encodeUtf8(value))\n\t);\n}\n\n/**\n * 生成 ECDSA PEM 签名密钥对。\n *\n * @param namedCurve - NIST 曲线：P-256、P-384 或 P-521。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n */\nexport async function GenerateECDSAKeyPair(namedCurve: EcNamedCurve = \"P-256\"): Promise<PemKeyPair> {\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(await crypto.subtle.generateKey({ name: \"ECDSA\", namedCurve }, true, [\"sign\", \"verify\"]));\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用 ECDSA 私钥签名文本或字节。\n *\n * @remarks Web Crypto 返回 IEEE P1363 固定字段拼接格式，与 .NET 实现一致。\n * @param value - 要签名的 UTF-8 文本或原始字节。\n * @param privateKeyPem - 未加密的 EC PKCS#8 PEM 私钥。\n * @param namedCurve - 私钥使用的 NIST 曲线。\n * @returns Base64 编码的 IEEE P1363 ECDSA 签名。\n */\nexport async function ECDSASign(value: string, privateKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { name: \"ECDSA\", namedCurve }, false, [\"sign\"]);\n\t// NIST 曲线强度分别对应 SHA-256、SHA-384 和 SHA-512；映射只在签名入口使用，因此直接保留在调用点。\n\tconst hash = namedCurve === \"P-256\" ? \"SHA-256\" : namedCurve === \"P-384\" ? \"SHA-384\" : \"SHA-512\";\n\tconst signature = await crypto.subtle.sign({ hash, name: \"ECDSA\" }, key, toArrayBuffer(encodeUtf8(value)));\n\treturn encodeBase64Bytes(new Uint8Array(signature));\n}\n\n/**\n * 使用 ECDSA 公钥验证 Base64 签名。\n *\n * @param value - 签名时使用的 UTF-8 文本或原始字节。\n * @param signature - Base64 编码的 IEEE P1363 ECDSA 签名。\n * @param publicKeyPem - EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 公钥使用的 NIST 曲线。\n * @returns 签名与内容、公钥和曲线匹配时返回 `true`。\n */\nexport async function ECDSAVerify(value: string, signature: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<boolean> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { name: \"ECDSA\", namedCurve }, false, [\"verify\"]);\n\t// 与签名入口保持相同的曲线/摘要映射，避免允许调用方组合不匹配的安全强度。\n\tconst hash = namedCurve === \"P-256\" ? \"SHA-256\" : namedCurve === \"P-384\" ? \"SHA-384\" : \"SHA-512\";\n\treturn crypto.subtle.verify({ hash, name: \"ECDSA\" }, key, toArrayBuffer(decodeBase64Bytes(signature)), toArrayBuffer(encodeUtf8(value)));\n}\n\n/**\n * 生成 ECDH PEM 密钥协商密钥对。\n *\n * @param namedCurve - NIST 曲线：P-256、P-384 或 P-521。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n */\nexport async function GenerateECDHKeyPair(namedCurve: EcNamedCurve = \"P-256\"): Promise<PemKeyPair> {\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(await crypto.subtle.generateKey({ name: \"ECDH\", namedCurve }, true, [\"deriveBits\"]));\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用本方 ECDH 私钥与对方 ECDH 公钥派生共享秘密。\n *\n * @remarks 返回值仍需经过合适的 KDF 后才能作为对称密钥，不应直接长期存储。\n * @param privateKeyPem - 本方未加密的 EC PKCS#8 PEM 私钥。\n * @param publicKeyPem - 对方的 EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 双方密钥使用的 NIST 曲线。\n * @returns 曲线字段长度的原始 ECDH 共享秘密。\n */\nexport async function DeriveECDHSecret(privateKeyPem: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<Uint8Array> {\n\tconst crypto = requireWebCrypto();\n\tconst [privateKey, publicKey] = await Promise.all([\n\t\tcrypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { name: \"ECDH\", namedCurve }, false, [\"deriveBits\"]),\n\t\tcrypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { name: \"ECDH\", namedCurve }, false, []),\n\t]);\n\t// P-521 字段需要按完整字节对齐，因此导出 66 字节（528 位），其余曲线直接使用字段位数。\n\tconst bitLength = namedCurve === \"P-256\" ? 256 : namedCurve === \"P-384\" ? 384 : 528;\n\tconst secret = await crypto.subtle.deriveBits({ name: \"ECDH\", public: publicKey }, privateKey, bitLength);\n\treturn new Uint8Array(secret);\n}\n\n/**\n * 使用 ECDH 后以 SHA-256 派生共享密钥。\n *\n * @remarks 相比直接使用原始共享秘密，此入口与 .NET `DeriveECDHKeySHA256` 一致并固定输出 32 字节。\n * @param privateKeyPem - 本方未加密的 EC PKCS#8 PEM 私钥。\n * @param publicKeyPem - 对方的 EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 双方密钥使用的 NIST 曲线。\n * @returns 32 字节共享密钥。\n */\nexport async function DeriveECDHKeySHA256(privateKeyPem: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<Uint8Array> {\n\tconst secret = await DeriveECDHSecret(privateKeyPem, publicKeyPem, namedCurve);\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-256\", toArrayBuffer(secret));\n\treturn new Uint8Array(digest);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAM,0BAA0B;;AAGhC,MAAM,0BAA0B;;AAGhC,MAAM,0BAA0B;;AAGhC,MAAM,uBAAuB;;AAG7B,MAAM,wBAAwB;;AAG9B,MAAM,uBAAuB;;AAG7B,MAAM,yBAAyB;;AAG/B,MAAM,qBAAqB;;AAG3B,MAAM,iCAAiC;;AAmBvC,MAAM,uBAAuB;;;;;;;;AA0B7B,MAAM,4BAAoC;CACzC,MAAM,SAAS,qBAAqB;CACpC,IAAI,OAAO,QAAQ,oBAAoB,YACtC,MAAM,IAAI,MAAM,mDAAmD;CAEpE,OAAO;AACR;;;;;;;AAQA,MAAM,yBAAiC;CACtC,MAAM,SAAS,oBAAoB;CACnC,MAAM,SAAU,OAAoC;CACpD,IACC,OAAO,QAAQ,YAAY,cAC3B,OAAO,OAAO,eAAe,cAC7B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,WAAW,cACzB,OAAO,OAAO,YAAY,cAC1B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,gBAAgB,cAC9B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,SAAS,cACvB,OAAO,OAAO,WAAW,YAEzB,MAAM,IAAI,MAAM,gEAAgE;CAEjF,OAAO;AACR;;;;;;;;AASA,MAAM,iBAAiB,UAAmC;CACzD,MAAM,OAAO,IAAI,WAAW,MAAM,UAAU;CAC5C,KAAK,IAAI,KAAK;CACd,OAAO,KAAK;AACb;;AAGA,MAAM,YAAY;CACjB,SAAS;CACT,QAAQ;AACT;;;;;;;;AASA,MAAM,SAAS,OAAe,UAA+B;CAG5D,OAAO,cAAc,MAAM,SAFX,kBAAkB,IAAI,WAAW,KAAK,CAClC,CAAC,CAAC,MAAM,WAAW,CAAC,EAAE,KAAK,IAAI,KAAK,GACd,aAAa,MAAM;AAC9D;;;;;;;;;AAUA,MAAM,WAAW,OAAe,UAA+B;CAC9D,MAAM,SAAS,cAAc,MAAM;CACnC,MAAM,SAAS,YAAY,MAAM;CACjC,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,QAAQ,WAAW,MAAM,KAAK,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,UAAU,cAAc,MAAM,YAAY;CAClH,MAAM,UAAU,QAAQ,MAAM,OAAO,QAAQ,CAAC,OAAO,MAAM,CAAC,CAAC,QAAQ,SAAS,EAAE;CAChF,OAAO,cAAc,kBAAkB,OAAO,CAAC;AAChD;;;;;;;;AASA,MAAM,gBAAgB,OAAO,YAAgD;CAC5E,MAAM,SAAS,iBAAiB;CAChC,MAAM,CAAC,YAAY,aAAa,MAAM,QAAQ,IAAI,CACjD,OAAO,OAAO,UAAU,SAAS,QAAQ,UAAU,GACnD,OAAO,OAAO,UAAU,QAAQ,QAAQ,SAAS,CAClD,CAAC;CACD,OAAO;EACN,YAAY,MAAM,UAAU,SAAS,UAAU;EAC/C,WAAW,MAAM,UAAU,QAAQ,SAAS;CAC7C;AACD;;;;;;;;AASA,MAAM,iBAAiB,UAAoD;CAC1E,IAAI,gBAAgB,SAAS,eAAe,OAAO,OAAO;CAC1D,MAAM,IAAI,MAAM,0CAA0C;AAC3D;;;;;;;;;AAUA,MAAM,2BAA2B,aAAiC;CACjE,MAAM,QAAQ,WAAW,QAAQ;CACjC,IAAI,MAAM,WAAW,GAAG,MAAM,IAAI,UAAU,0CAA0C;CACtF,IAAI,MAAM,SAAS,sBAClB,MAAM,IAAI,WAAW,oCAAoC,qBAAqB,QAAQ;CAEvF,OAAO;AACR;;;;;;;;AASA,MAAM,sBAAsB,eAA+B;CAC1D,IAAI,CAAC,OAAO,cAAc,UAAU,KAAK,aAAa,2BAA2B,aAAa,yBAC7F,MAAM,IAAI,WAAW,6CAA6C,wBAAwB,OAAO,wBAAwB,EAAE;CAE5H,OAAO;AACR;;AAGA,MAAM,cAAc,UAA8B,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;;AAGzH,MAAM,cAAc,UAA8B,WAAW,KAAK,CAAC,CAAC,YAAY;;;;;;;;;;;AAYhF,MAAM,mBAAmB,OAAO,OAAe,KAAa,SAAiE;CAC5H,MAAM,WAAW,WAAW,GAAG;CAC/B,IAAI,SAAS,WAAW,GAAG,MAAM,IAAI,UAAU,+BAA+B;CAE9E,MAAM,SAAS,iBAAiB;CAChC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG;EAAE;EAAM,MAAM;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC;CACvH,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CAC9F,OAAO,IAAI,WAAW,SAAS;AAChC;;;;;;;;AASA,SAAgB,oBAAoB,QAA4B;CAC/D,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,KAAK,SAAS,OAC3D,MAAM,IAAI,WAAW,sDAAsD;CAE5E,OAAO,oBAAoB,CAAC,CAAC,gBAAgB,IAAI,WAAW,MAAM,CAAC;AACpE;;;;;;;;;;AAWA,SAAgB,gBAAgB,MAAkB,OAA4B;CAC7E,MAAM,SAAS,KAAK,IAAI,KAAK,QAAQ,MAAM,MAAM;CACjD,IAAI,aAAa,KAAK,WAAW,MAAM,SAAS,IAAI;CAEpD,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG,eAAe,KAAK,UAAU,MAAM,MAAM,UAAU;CACpG,OAAO,eAAe;AACvB;;;;;;;;AASA,SAAgB,WAAW,OAAuB;CACjD,OAAO,IAAI,KAAK,CAAC,CAAC,SAAS,GAAG;AAC/B;;;;;;;;AASA,SAAgB,YAAY,OAAuB;CAClD,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY;AAC9C;;;;;;;;;AAUA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;;AASA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;AAQA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;AAQA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;AAQA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;AAQA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;;;;AAYA,eAAsB,aAAa,UAAkB,MAAkB,aAAa,yBAAyB,eAAe,IAAyB;CACpJ,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,IAAI,KAAK,SAAS,GAAG,MAAM,IAAI,WAAW,2EAA2E;CACrH,IAAI,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe,KAAK,eAAe,MAC7E,MAAM,IAAI,WAAW,0DAA0D;CAIhF,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,YAAY,CAAC;CACnH,MAAM,UAAU,MAAM,OAAO,OAAO,WACnC;EAAE,MAAM;EAAW,YAAY,mBAAmB,UAAU;EAAG,MAAM;EAAU,MAAM,cAAc,IAAI;CAAE,GACzG,UACA,eAAe,CAChB;CACA,OAAO,IAAI,WAAW,OAAO;AAC9B;;;;;;;;AASA,eAAsB,yBAAyB,UAAkB,aAAa,yBAA0C;CAEvH,MAAM,OAAO,oBAAoB,EAAE;CACnC,MAAM,aAAa,MAAM,aAAa,UAAU,MAAM,UAAU;CAChE,OAAO;EAAC;EAAoB,OAAO,UAAU;EAAG,qBAAqB,IAAI;EAAG,qBAAqB,UAAU;CAAC,CAAC,CAAC,KAAK,GAAG;AACvH;;;;;;;;AASA,eAAsB,2BAA2B,UAAkB,cAAwC;CAC1G,IAAI;EAEH,MAAM,QAAQ,aAAa,MAAM,GAAG;EACpC,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,oBAAoB,OAAO;EAClE,MAAM,aAAa,mBAAmB,OAAO,MAAM,EAAE,CAAC;EACtD,MAAM,OAAO,qBAAqB,MAAM,MAAM,EAAE;EAChD,MAAM,WAAW,qBAAqB,MAAM,MAAM,EAAE;EACpD,IAAI,KAAK,WAAW,MAAM,SAAS,WAAW,IAAI,OAAO;EAEzD,OAAO,gBAAgB,MADF,aAAa,UAAU,MAAM,YAAY,SAAS,MAAM,GAC9C,QAAQ;CACxC,QAAQ;EACP,OAAO;CACR;AACD;;;;;;;;;;AAWA,eAAsB,WACrB,kBACA,uBAAmB,IAAI,WAAW,GAClC,uBAAmB,IAAI,WAAW,GAClC,eAAe,IACO;CACtB,IAAI,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe,KAAK,eAAe,MAC7E,MAAM,IAAI,WAAW,0DAA0D;CAIhF,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,gBAAgB,GAAG,QAAQ,OAAO,CAAC,YAAY,CAAC;CACpH,MAAM,UAAU,MAAM,OAAO,OAAO,WACnC;EAAE,MAAM;EAAW,MAAM,cAAc,IAAI;EAAG,MAAM;EAAQ,MAAM,cAAc,IAAI;CAAE,GACtF,UACA,eAAe,CAChB;CACA,OAAO,IAAI,WAAW,OAAO;AAC9B;;;;;;;;;;;;;;AAeA,SAAgB,WACf,SACA,KACA,QACA,aAA4B,OAC5B,cAA8B,SACd;CAChB,IAAI,QAAQ,KAAK,CAAC,CAAC,WAAW,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO;CACjG,IAAI,eAAe,SAAS,eAAe,OAAO,MAAM,IAAI,WAAW,wCAAoC;CAE3G,IAAI,UAAU;CACd,QAAQ,aAAR;EACC,KAAK;GACJ,UAAU;GACV;EACD,KAAK,SACJ;EACD,KAAK;GACJ,UAAU;GACV;EACD,KAAK;GAEJ,UAAU,WAAW,IAAI;GACzB;EACD,KAAK;GACJ,UAAU;GACV;EACD,SACC,MAAM,IAAI,WAAW,+BAA+B;CACtD;CACA,IAAI,gBAAgB,UAAU,WAAW,OAAO,CAAC,CAAC,SAAS,OAAO,GACjE,MAAM,IAAI,WAAW,uFAAuF;CAI7G,MAAM,WAAW,KAAK,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAC5D,MAAM,cAAc,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAClE,OAAO,IAAI,QAAQ,SAAS,UAAU,eAAe,QAAQ;EAAE,IAAI;EAAa;CAAQ,IAAI;EAAE,IAAI;EAAa,MAAM;EAAK;CAAQ,CAAC,CAAC,CAAC,SAAS;AAC/I;;;;;;;;;;;;;AAcA,SAAgB,WACf,SACA,KACA,QACA,aAA4B,OAC5B,cAA8B,SACd;CAChB,IAAI,QAAQ,KAAK,CAAC,CAAC,WAAW,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO;CACjG,IAAI,eAAe,SAAS,eAAe,OAAO,MAAM,IAAI,WAAW,wCAAoC;CAE3G,IAAI,UAAU;CACd,QAAQ,aAAR;EACC,KAAK;GACJ,UAAU;GACV;EACD,KAAK,SACJ;EACD,KAAK;GAEJ,UAAU;GACV;EACD,KAAK;GAEJ,UAAU,WAAW,IAAI;GACzB;EACD,KAAK;GACJ,UAAU;GACV;EACD,SACC,MAAM,IAAI,WAAW,+BAA+B;CACtD;CACA,MAAM,kBAAkB,kBAAkB,OAAO;CACjD,IAAI,gBAAgB,WAAW,KAAK,gBAAgB,SAAS,OAAO,GACnE,MAAM,IAAI,WAAW,kEAAkE;CAIxF,MAAM,WAAW,KAAK,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAC5D,MAAM,cAAc,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAClE,OAAO,IAAI,QAAQ,SAAS,UAAU,eAAe,QAAQ;EAAE,IAAI;EAAa;CAAQ,IAAI;EAAE,IAAI;EAAa,MAAM;EAAK;CAAQ,CAAC,CAAC,CAAC,SACpI,IACD;AACD;;;;;;;;;;AAWA,eAAsB,wBAAwB,WAAmB,KAA8B;CAC9F,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,UAAU,qCAAqC;CACtF,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAEvH,MAAM,QAAQ,oBAAoB,EAAE;CACpC,MAAM,YAAY,IAAI,WACrB,MAAM,OAAO,OAAO,QAAQ;EAAE,IAAI,cAAc,KAAK;EAAG,MAAM;EAAW,WAAW;CAAI,GAAG,WAAW,cAAc,WAAW,SAAS,CAAC,CAAC,CAC3I;CACA,MAAM,mBAAmB,UAAU,SAAS;CAE5C,MAAM,UAAU,IAAI,WAAW,IAAI,MAAM,SAAS,KAAK,gBAAgB;CACvE,QAAQ,KAAK;CACb,QAAQ,IAAI,OAAO,CAAC;CACpB,QAAQ,IAAI,UAAU,SAAS,gBAAgB,GAAG,IAAI,MAAM,MAAM;CAClE,QAAQ,IAAI,UAAU,SAAS,GAAG,gBAAgB,GAAG,IAAI,MAAM,SAAS,EAAE;CAC1E,OAAO,kBAAkB,OAAO;AACjC;;;;;;;;;AAUA,eAAsB,wBAAwB,SAAiB,KAA8B;CAC5F,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,UAAU,qCAAqC;CACtF,MAAM,UAAU,kBAAkB,OAAO;CACzC,IAAI,QAAQ,SAAS,MAAM,QAAQ,OAAO,gCACzC,MAAM,IAAI,UAAU,yDAAyD;CAG9E,MAAM,QAAQ,QAAQ,SAAS,GAAG,EAAE;CACpC,MAAM,MAAM,QAAQ,SAAS,IAAI,EAAE;CACnC,MAAM,aAAa,QAAQ,SAAS,EAAE;CAEtC,MAAM,mBAAmB,IAAI,WAAW,WAAW,SAAS,IAAI,MAAM;CACtE,iBAAiB,IAAI,UAAU;CAC/B,iBAAiB,IAAI,KAAK,WAAW,MAAM;CAC3C,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CACvH,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;EAAE,IAAI,cAAc,KAAK;EAAG,MAAM;EAAW,WAAW;CAAI,GAC5D,WACA,cAAc,gBAAgB,CAC/B;CACA,OAAO,eAAe,CAAC,CAAC,OAAO,SAAS;AACzC;;;;;;;;;;;;;AAcA,eAAsB,uBAAuB,WAAmB,UAAkB,aAAa,yBAA0C;CACxI,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,MAAM,iBAAiB,WAAW,SAAS;CAC3C,IAAI,eAAe,SAAS,uBAC3B,MAAM,IAAI,WAAW,qCAAqC,sBAAsB,QAAQ;CAEzF,MAAM,sBAAsB,mBAAmB,UAAU;CACzD,MAAM,SAAS,iBAAiB;CAChC,MAAM,OAAO,oBAAoB,EAAE;CACnC,MAAM,KAAK,oBAAoB,EAAE;CACjC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;CAElH,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B;EAAE,MAAM;EAAW,YAAY;EAAqB,MAAM;EAAU,MAAM,cAAc,IAAI;CAAE,GAC9F,UACA;EAAE,QAAQ;EAAK,MAAM;CAAU,GAC/B,OACA,CAAC,SAAS,CACX;CAEA,MAAM,aAAa,MAAM,OAAO,OAAO,QACtC;EAAE,gBAAgB,cAAc,WAAW,sBAAsB,CAAC;EAAG,IAAI,cAAc,EAAE;EAAG,MAAM;EAAW,WAAW;CAAI,GAC5H,KACA,cACD;CAEA,OAAO;EACN;EACA,OAAO,mBAAmB;EAC1B,qBAAqB,IAAI;EACzB,qBAAqB,EAAE;EACvB,qBAAqB,IAAI,WAAW,UAAU,CAAC;CAChD,CAAC,CAAC,KAAK,GAAG;AACX;;;;;;;;;;AAWA,eAAsB,uBAAuB,SAAiB,UAAmC;CAChG,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,IAAI,QAAQ,SAAS,sBACpB,MAAM,IAAI,WAAW,mDAAmD;CAGzE,MAAM,QAAQ,QAAQ,MAAM,GAAG;CAC/B,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,wBACtC,MAAM,IAAI,UAAU,gDAAgD;CAGrE,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;EACH,aAAa,mBAAmB,OAAO,MAAM,EAAE,CAAC;EAChD,OAAO,qBAAqB,MAAM,MAAM,EAAE;EAC1C,KAAK,qBAAqB,MAAM,MAAM,EAAE;EACxC,aAAa,qBAAqB,MAAM,MAAM,EAAE;EAChD,IAAI,KAAK,WAAW,MAAM,GAAG,WAAW,MAAM,WAAW,SAAS,IACjE,MAAM,IAAI,UAAU,kDAAkD;CAExE,SAAS,OAAO;EACf,MAAM,IAAI,UAAU,kDAAkD,EAAE,MAAM,CAAC;CAChF;CAEA,MAAM,SAAS,iBAAiB;CAChC,MAAM,cAAc,eAAe;CACnC,IAAI;EACH,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;EAElH,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B;GAAE,MAAM;GAAW;GAAY,MAAM;GAAU,MAAM,cAAc,IAAI;EAAE,GACzE,UACA;GAAE,QAAQ;GAAK,MAAM;EAAU,GAC/B,OACA,CAAC,SAAS,CACX;EACA,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;GAAE,gBAAgB,cAAc,WAAW,sBAAsB,CAAC;GAAG,IAAI,cAAc,EAAE;GAAG,MAAM;GAAW,WAAW;EAAI,GAC5H,KACA,cAAc,UAAU,CACzB;EACA,OAAO,YAAY,OAAO,SAAS;CACpC,SAAS,OAAO;EACf,MAAM,IAAI,MAAM,wDAAwD,EAAE,MAAM,CAAC;CAClF;AACD;;;;;;;;AASA,eAAsB,mBAAmB,gBAAgB,MAA2B;CACnF,IAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB,QAAQ,gBAAgB,QAAQ,GAC3F,MAAM,IAAI,WAAW,6EAA6E;CAEnG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cACf,MAAM,OAAO,OAAO,YACnB;EACC,MAAM;EACN;EACA,MAAM;EACN,gBAAgB,WAAW,GAAG,GAAG,GAAG,CAAC;CACtC,GACA,MACA,CAAC,WAAW,SAAS,CACtB,CACD;CACA,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;AAUA,eAAsB,eAAe,WAAmB,cAAuC;CAC9F,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAW,MAAM;CAAW,GAAG,OAAO,CACxI,SACD,CAAC;CACD,MAAM,aAAa,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,KAAK,cAAc,WAAW,SAAS,CAAC,CAAC;CAC9G,OAAO,kBAAkB,IAAI,WAAW,UAAU,CAAC;AACpD;;;;;;;;;AAUA,eAAsB,eAAe,YAAoB,eAAwC;CAChG,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAW,MAAM;CAAW,GAAG,OAAO,CAC3I,SACD,CAAC;CACD,MAAM,YAAY,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,KAAK,cAAc,kBAAkB,UAAU,CAAC,CAAC;CACrH,OAAO,eAAe,CAAC,CAAC,OAAO,SAAS;AACzC;;;;;;;;;AAUA,eAAsB,WAAW,OAAe,eAAwC;CACvF,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAW,MAAM;CAAU,GAAG,OAAO,CAC1I,MACD,CAAC;CAED,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK;EAAE,MAAM;EAAW,YAAY;CAAG,GAAG,KAAK,cAAc,WAAW,KAAK,CAAC,CAAC;CACrH,OAAO,kBAAkB,IAAI,WAAW,SAAS,CAAC;AACnD;;;;;;;;;;AAWA,eAAsB,aAAa,OAAe,WAAmB,cAAwC;CAC5G,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAW,MAAM;CAAU,GAAG,OAAO,CACvI,QACD,CAAC;CAED,OAAO,OAAO,OAAO,OACpB;EAAE,MAAM;EAAW,YAAY;CAAG,GAClC,KACA,cAAc,kBAAkB,SAAS,CAAC,GAC1C,cAAc,WAAW,KAAK,CAAC,CAChC;AACD;;;;;;;AAQA,eAAsB,qBAAqB,aAA2B,SAA8B;CACnG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cAAc,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAS;CAAW,GAAG,MAAM,CAAC,QAAQ,QAAQ,CAAC,CAAC;CACtH,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;;AAWA,eAAsB,UAAU,OAAe,eAAuB,aAA2B,SAA0B;CAC1H,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAS;CAAW,GAAG,OAAO,CAAC,MAAM,CAAC;CAE5I,MAAM,OAAO,eAAe,UAAU,YAAY,eAAe,UAAU,YAAY;CACvF,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK;EAAE;EAAM,MAAM;CAAQ,GAAG,KAAK,cAAc,WAAW,KAAK,CAAC,CAAC;CACzG,OAAO,kBAAkB,IAAI,WAAW,SAAS,CAAC;AACnD;;;;;;;;;;AAWA,eAAsB,YAAY,OAAe,WAAmB,cAAsB,aAA2B,SAA2B;CAC/I,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAS;CAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;CAE3I,MAAM,OAAO,eAAe,UAAU,YAAY,eAAe,UAAU,YAAY;CACvF,OAAO,OAAO,OAAO,OAAO;EAAE;EAAM,MAAM;CAAQ,GAAG,KAAK,cAAc,kBAAkB,SAAS,CAAC,GAAG,cAAc,WAAW,KAAK,CAAC,CAAC;AACxI;;;;;;;AAQA,eAAsB,oBAAoB,aAA2B,SAA8B;CAClG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cAAc,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAQ;CAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;CACjH,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;;AAWA,eAAsB,iBAAiB,eAAuB,cAAsB,aAA2B,SAA8B;CAC5I,MAAM,SAAS,iBAAiB;CAChC,MAAM,CAAC,YAAY,aAAa,MAAM,QAAQ,IAAI,CACjD,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAQ;CAAW,GAAG,OAAO,CAAC,YAAY,CAAC,GAC/H,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAQ;CAAW,GAAG,OAAO,CAAC,CAAC,CACjH,CAAC;CAED,MAAM,YAAY,eAAe,UAAU,MAAM,eAAe,UAAU,MAAM;CAChF,MAAM,SAAS,MAAM,OAAO,OAAO,WAAW;EAAE,MAAM;EAAQ,QAAQ;CAAU,GAAG,YAAY,SAAS;CACxG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;;;;AAWA,eAAsB,oBAAoB,eAAuB,cAAsB,aAA2B,SAA8B;CAC/I,MAAM,SAAS,MAAM,iBAAiB,eAAe,cAAc,UAAU;CAC7E,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,MAAM,CAAC;CACtF,OAAO,IAAI,WAAW,MAAM;AAC7B"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/crypto/index.ts"],"sourcesContent":["import AES from \"crypto-js/aes.js\";\nimport CryptoCore from \"crypto-js/core.js\";\nimport Hex from \"crypto-js/enc-hex.js\";\nimport Utf8 from \"crypto-js/enc-utf8.js\";\nimport MD5 from \"crypto-js/md5.js\";\nimport ECB from \"crypto-js/mode-ecb.js\";\nimport \"crypto-js/pad-ansix923.js\";\nimport Iso10126 from \"crypto-js/pad-iso10126.js\";\nimport NoPadding from \"crypto-js/pad-nopadding.js\";\nimport Pkcs7 from \"crypto-js/pad-pkcs7.js\";\nimport ZeroPadding from \"crypto-js/pad-zeropadding.js\";\nimport SHA1 from \"crypto-js/sha1.js\";\nimport { decodeBase64Bytes, decodeBase64UrlBytes, encodeBase64Bytes, encodeBase64UrlBytes } from \"../base64/index\";\nimport { encodeUtf8, getTextDecoder } from \"../internal/text\";\n\n/** PBKDF2 默认迭代次数。 */\nconst defaultPbkdf2Iterations = 600_000;\n\n/** PBKDF2 允许的最小迭代次数。 */\nconst minimumPbkdf2Iterations = 100_000;\n\n/** PBKDF2 允许的最大迭代次数，用于限制异常输入造成的计算资源消耗。 */\nconst maximumPbkdf2Iterations = 5_000_000;\n\n/** 密码允许的最大 UTF-8 字节数。 */\nconst maximumPasswordBytes = 1024;\n\n/** 密码加密接口允许的最大明文字节数。 */\nconst maximumPlaintextBytes = 8 * 1024 * 1024;\n\n/** 密码解密接口允许的最大协议载荷字符数。 */\nconst maximumPayloadLength = 16 * 1024 * 1024;\n\n/** 密码加密载荷的协议与算法版本前缀。 */\nconst encryptedPayloadPrefix = \"FAST-AES-256-GCM-V1\";\n\n/** PBKDF2 密码哈希的协议与算法版本前缀。 */\nconst passwordHashPrefix = \"FAST-PBKDF2-SHA256-V1\";\n\n/** 直接 AES-GCM 密钥加密载荷的协议版本。 */\nconst authenticatedAesPayloadVersion = 1;\n\n/** 用于逐项验证实际依赖能力，而不是只判断 `subtle` 对象是否存在。 */\ntype RuntimeSubtleCrypto = Partial<\n\tPick<SubtleCrypto, \"decrypt\" | \"deriveBits\" | \"deriveKey\" | \"digest\" | \"encrypt\" | \"exportKey\" | \"generateKey\" | \"importKey\" | \"sign\" | \"verify\">\n>;\n/** Web Crypto 的运行时最小结构，避免用不安全的类型断言掩盖能力缺失。 */\ninterface RuntimeCrypto extends Partial<Pick<Crypto, \"getRandomValues\">> {\n\t/** 可选 SubtleCrypto 能力；密码原语入口会继续逐项验证所需方法。 */\n\tsubtle?: RuntimeSubtleCrypto;\n}\n\n/** Crypto 工具延迟读取的平台全局对象最小视图。 */\ninterface RuntimeCryptoGlobals {\n\t/** 可选 Web Crypto 实现；具体方法仍由每个能力入口逐项校验。 */\n\tcrypto?: RuntimeCrypto;\n}\n\n/** 延迟读取的 Web Crypto 全局对象视图，便于在缺少该能力的平台给出明确错误。 */\nconst runtimeCryptoGlobals = globalThis as unknown as RuntimeCryptoGlobals;\n\n/** AES 分组密码模式；与 .NET `CipherMode.CBC` 和 `CipherMode.ECB` 对应。 */\nexport type AesCipherMode = \"CBC\" | \"ECB\";\n\n/** AES 填充模式；与 .NET `PaddingMode` 中可由 CryptoJS 互操作的成员对应。 */\nexport type AesPaddingMode = \"None\" | \"PKCS7\" | \"Zeros\" | \"ANSIX923\" | \"ISO10126\";\n\n/** Web Crypto 导出的 PEM 公私钥对。 */\nexport interface PemKeyPair {\n\t/** 未加密的 PKCS#8 PEM 私钥，包含标准 `PRIVATE KEY` 头尾和 64 字符换行。 */\n\tprivateKey: string;\n\t/** SubjectPublicKeyInfo PEM 公钥，包含标准 `PUBLIC KEY` 头尾和 64 字符换行。 */\n\tpublicKey: string;\n}\n\n/** 本模块支持的 Web Crypto 椭圆曲线。 */\nexport type EcNamedCurve = \"P-256\" | \"P-384\" | \"P-521\";\n\n/**\n * 获取安全随机数能力。\n *\n * @remarks 随机字节和随机字符串不依赖 SubtleCrypto，因此这里与完整密码原语检查分开。\n * @returns 当前平台的 Crypto 对象。\n * @throws `Error` 当平台缺少 `getRandomValues`。\n */\nconst requireRandomCrypto = (): Crypto => {\n\tconst crypto = runtimeCryptoGlobals.crypto;\n\tif (typeof crypto?.getRandomValues !== \"function\") {\n\t\tthrow new Error(\"Web Crypto is unavailable in the current runtime.\");\n\t}\n\treturn crypto as Crypto;\n};\n\n/**\n * 获取本模块非随机 API 所需的完整 Web Crypto 能力。\n *\n * @returns 已确认实现摘要、派生、密钥导入导出、加解密、签名和验证方法的 Crypto 对象。\n * @throws `Error` 当任一必要 SubtleCrypto 方法缺失。\n */\nconst requireWebCrypto = (): Crypto => {\n\tconst crypto = requireRandomCrypto();\n\tconst subtle = (crypto as unknown as RuntimeCrypto).subtle;\n\tif (\n\t\ttypeof subtle?.decrypt !== \"function\" ||\n\t\ttypeof subtle.deriveBits !== \"function\" ||\n\t\ttypeof subtle.deriveKey !== \"function\" ||\n\t\ttypeof subtle.digest !== \"function\" ||\n\t\ttypeof subtle.encrypt !== \"function\" ||\n\t\ttypeof subtle.exportKey !== \"function\" ||\n\t\ttypeof subtle.generateKey !== \"function\" ||\n\t\ttypeof subtle.importKey !== \"function\" ||\n\t\ttypeof subtle.sign !== \"function\" ||\n\t\ttypeof subtle.verify !== \"function\"\n\t) {\n\t\tthrow new Error(\"Web Crypto SubtleCrypto is unavailable in the current runtime.\");\n\t}\n\treturn crypto;\n};\n\n/**\n * 把 Uint8Array 复制为独立的完整 ArrayBuffer。\n *\n * @remarks 不能直接返回 `bytes.buffer`，因为输入可能只是更大 Buffer 的切片。\n * @param bytes - 源字节视图。\n * @returns 长度与视图完全一致、偏移为零的新 ArrayBuffer。\n */\nconst toArrayBuffer = (bytes: Uint8Array): ArrayBuffer => {\n\tconst copy = new Uint8Array(bytes.byteLength);\n\tcopy.set(bytes);\n\treturn copy.buffer;\n};\n\n/** 本模块导出的 PKCS#8 与 SPKI PEM 标签。 */\nconst pemLabels = {\n\tprivate: \"PRIVATE KEY\",\n\tpublic: \"PUBLIC KEY\",\n} as const;\n\n/**\n * 把 DER 内容封装为 PEM。\n *\n * @param label - PEM Begin/End 标签，不包含分隔线。\n * @param value - DER 二进制内容。\n * @returns 每行最多 64 个 Base64 字符的 PEM 文本。\n */\nconst toPem = (label: string, value: ArrayBuffer): string => {\n\tconst encoded = encodeBase64Bytes(new Uint8Array(value));\n\tconst lines = encoded.match(/.{1,64}/gu)?.join(\"\\n\") ?? \"\";\n\treturn `-----BEGIN ${label}-----\\n${lines}\\n-----END ${label}-----`;\n};\n\n/**\n * 校验 PEM 标签并还原 DER。\n *\n * @param value - PEM 文本。\n * @param label - 当前算法预期的标签。\n * @returns 独立的 DER ArrayBuffer。\n * @throws `TypeError` 当 Begin/End 标签不匹配或 Base64 内容非法。\n */\nconst fromPem = (value: string, label: string): ArrayBuffer => {\n\tconst header = `-----BEGIN ${label}-----`;\n\tconst footer = `-----END ${label}-----`;\n\tconst trimmed = value.trim();\n\tif (!trimmed.startsWith(header) || !trimmed.endsWith(footer)) throw new TypeError(`Expected a ${label} PEM value.`);\n\tconst encoded = trimmed.slice(header.length, -footer.length).replace(/\\s+/gu, \"\");\n\treturn toArrayBuffer(decodeBase64Bytes(encoded));\n};\n\n/**\n * 导出 Web Crypto 密钥对。\n *\n * @param keyPair - 可导出的公私钥对。\n * @returns PKCS#8 私钥和 SPKI 公钥组成的 PEM 对象。\n * @throws `Error` 当平台拒绝导出或密钥格式不兼容。\n */\nconst exportKeyPair = async (keyPair: CryptoKeyPair): Promise<PemKeyPair> => {\n\tconst crypto = requireWebCrypto();\n\tconst [privateKey, publicKey] = await Promise.all([\n\t\tcrypto.subtle.exportKey(\"pkcs8\", keyPair.privateKey),\n\t\tcrypto.subtle.exportKey(\"spki\", keyPair.publicKey),\n\t]);\n\treturn {\n\t\tprivateKey: toPem(pemLabels.private, privateKey),\n\t\tpublicKey: toPem(pemLabels.public, publicKey),\n\t};\n};\n\n/**\n * 缩小 Web Crypto `generateKey` 的联合返回值。\n *\n * @param value - 平台返回的单密钥或密钥对。\n * @returns 同时具有公钥和私钥的密钥对。\n * @throws `Error` 当平台没有按请求生成密钥对。\n */\nconst assertKeyPair = (value: CryptoKey | CryptoKeyPair): CryptoKeyPair => {\n\tif (\"privateKey\" in value && \"publicKey\" in value) return value;\n\tthrow new Error(\"The runtime did not generate a key pair.\");\n};\n\n/**\n * 校验并编码密码。\n *\n * @param password - 用户提供的密码文本。\n * @returns UTF-8 密码字节。\n * @throws `TypeError` 当密码为空。\n * @throws `RangeError` 当 UTF-8 长度超过 1,024 字节。\n */\nconst encodeValidatedPassword = (password: string): Uint8Array => {\n\tconst bytes = encodeUtf8(password);\n\tif (bytes.length === 0) throw new TypeError(\"The encryption password cannot be empty.\");\n\tif (bytes.length > maximumPasswordBytes) {\n\t\tthrow new RangeError(`The UTF-8 password cannot exceed ${maximumPasswordBytes} bytes.`);\n\t}\n\treturn bytes;\n};\n\n/**\n * 校验 PBKDF2 迭代次数。\n *\n * @param iterations - 待使用的迭代次数。\n * @returns 校验后的原始整数。\n * @throws `RangeError` 当值不是 100,000 至 5,000,000 的安全整数。\n */\nconst validateIterations = (iterations: number): number => {\n\tif (!Number.isSafeInteger(iterations) || iterations < minimumPbkdf2Iterations || iterations > maximumPbkdf2Iterations) {\n\t\tthrow new RangeError(`iterations must be a safe integer between ${minimumPbkdf2Iterations} and ${maximumPbkdf2Iterations}.`);\n\t}\n\treturn iterations;\n};\n\n/** 把字节格式化为小写十六进制。 */\nconst toLowerHex = (value: Uint8Array): string => Array.from(value, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n/** 把字节格式化为大写十六进制。 */\nconst toUpperHex = (value: Uint8Array): string => toLowerHex(value).toUpperCase();\n\n/**\n * 使用指定的 Web Crypto HMAC 算法计算原始认证标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @param hash - HMAC 使用的 SHA-2 摘要算法。\n * @returns 算法规定长度的原始认证标签。\n * @throws `TypeError` 当密钥为空。\n * @throws `Error` 当运行时缺少所需 Web Crypto 能力。\n */\nconst computeHmacBytes = async (value: string, key: string, hash: \"SHA-256\" | \"SHA-384\" | \"SHA-512\"): Promise<Uint8Array> => {\n\tconst keyBytes = encodeUtf8(key);\n\tif (keyBytes.length === 0) throw new TypeError(\"The HMAC key cannot be empty.\");\n\n\tconst crypto = requireWebCrypto();\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { hash, name: \"HMAC\" }, false, [\"sign\"]);\n\tconst signature = await crypto.subtle.sign(\"HMAC\", cryptoKey, toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(signature);\n};\n\n/**\n * 生成安全随机字节。\n *\n * @param length - 0 至 65,536 的安全整数；上限来自 Web Crypto 单次请求限制。\n * @returns 新建的 `Uint8Array`。\n * @throws 参数非法时抛出 `RangeError`；缺少 Web Crypto 时抛出 `Error`。\n */\nexport function GenerateRandomBytes(length: number): Uint8Array {\n\tif (!Number.isSafeInteger(length) || length < 0 || length > 65_536) {\n\t\tthrow new RangeError(\"length must be a safe integer from 0 through 65,536.\");\n\t}\n\treturn requireRandomCrypto().getRandomValues(new Uint8Array(length));\n}\n\n/**\n * 以不提前退出的方式比较两个字节数组。\n *\n * @remarks JavaScript 引擎不保证严格常量时间；该函数只避免显式短路，不能替代服务端\n * 密码学库提供的 timing-safe primitive。长度是否相同仍属于可观察信息。\n * @param left - 第一字节序列。\n * @param right - 第二字节序列。\n * @returns 长度和每个字节均相同时返回 `true`。\n */\nexport function FixedTimeEquals(left: Uint8Array, right: Uint8Array): boolean {\n\tconst length = Math.max(left.length, right.length);\n\tlet difference = left.length === right.length ? 0 : 1;\n\t// 不按长度或首个差异提前退出；缺失位置按零参与累计差异。\n\tfor (let index = 0; index < length; index += 1) difference |= (left[index] ?? 0) ^ (right[index] ?? 0);\n\treturn difference === 0;\n}\n\n/**\n * 计算 MD5 摘要并返回小写十六进制文本。\n *\n * @remarks MD5 仅用于非安全的普通校验，不得用于密码、签名或抗碰撞场景。\n * @param value - UTF-8 文本。\n * @returns 32 字符小写十六进制摘要。\n */\nexport function MD5Encrypt(value: string): string {\n\treturn MD5(value).toString(Hex);\n}\n\n/**\n * 计算 SHA-1 摘要并返回大写十六进制文本。\n *\n * @remarks SHA-1 仅用于非安全的普通校验，不得用于密码、签名或抗碰撞场景。\n * @param value - UTF-8 文本。\n * @returns 40 字符大写十六进制摘要。\n */\nexport function SHA1Encrypt(value: string): string {\n\treturn SHA1(value).toString(Hex).toUpperCase();\n}\n\n/**\n * 计算 SHA-256 摘要。\n *\n * @remarks SHA-256 是快速摘要，不适合直接存储或校验密码。\n * @param value - UTF-8 字符串或原始字节。\n * @returns 32 字节摘要。\n * @throws 缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function SHA256Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-256\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-256 并格式化为十六进制。\n *\n * @param value - UTF-8 字符串或原始字节。\n * @returns 64 字符大写十六进制文本。\n * @throws 缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function SHA256Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA256Bytes(value));\n}\n\n/**\n * 计算 SHA-384 摘要。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 48 字节摘要。\n */\nexport async function SHA384Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-384\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-384 并格式化为十六进制文本。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 96 个大写十六进制字符组成的摘要。\n */\nexport async function SHA384Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA384Bytes(value));\n}\n\n/**\n * 计算 SHA-512 摘要。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 64 字节摘要。\n */\nexport async function SHA512Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-512\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-512 并格式化为十六进制文本。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 128 个大写十六进制字符组成的摘要。\n */\nexport async function SHA512Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA512Bytes(value));\n}\n\n/**\n * 使用 HMAC-SHA-256 认证文本，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 64 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA256Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-256\"));\n}\n\n/**\n * 使用 HMAC-SHA-384 认证文本或字节，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 96 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA384Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-384\"));\n}\n\n/**\n * 使用 HMAC-SHA-512 认证文本或字节，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 128 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA512Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-512\"));\n}\n\n/**\n * 使用 PBKDF2-HMAC-SHA-256 从密码派生密钥。\n *\n * @param password - 1 至 1,024 UTF-8 字节的密码。\n * @param salt - 至少 8 字节的盐。\n * @param iterations - 迭代次数，范围为 100,000 至 5,000,000。\n * @param outputLength - 输出长度，范围为 1 至 1,024 字节。\n * @returns 指定长度的派生密钥。\n * @throws 参数超过协议边界时抛出 `TypeError` 或 `RangeError`。\n */\nexport async function PBKDF2SHA256(password: string, salt: Uint8Array, iterations = defaultPbkdf2Iterations, outputLength = 32): Promise<Uint8Array> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tif (salt.length < 8) throw new RangeError(\"The PBKDF2 salt must contain at least 8 bytes; 16 or more is recommended.\");\n\tif (!Number.isSafeInteger(outputLength) || outputLength < 1 || outputLength > 1024) {\n\t\tthrow new RangeError(\"outputLength must be a safe integer between 1 and 1,024.\");\n\t}\n\n\t// 密码作为不可导出的 PBKDF2 原始材料导入，派生结果只通过 deriveBits 返回。\n\tconst crypto = requireWebCrypto();\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveBits\"]);\n\tconst derived = await crypto.subtle.deriveBits(\n\t\t{ hash: \"SHA-256\", iterations: validateIterations(iterations), name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\toutputLength * 8\n\t);\n\treturn new Uint8Array(derived);\n}\n\n/**\n * 生成可持久化的随机盐 PBKDF2-HMAC-SHA-256 密码哈希。\n *\n * @param password - 1 至 1,024 UTF-8 字节的密码。\n * @param iterations - 迭代次数，范围为 100,000 至 5,000,000。\n * @returns 包含版本、迭代次数、16 字节随机盐和 32 字节派生密钥的自描述字符串。\n */\nexport async function HashPasswordPBKDF2SHA256(password: string, iterations = defaultPbkdf2Iterations): Promise<string> {\n\t// 每个密码独立生成盐，避免相同密码产生相同持久化结果并提高预计算攻击成本。\n\tconst salt = GenerateRandomBytes(16);\n\tconst derivedKey = await PBKDF2SHA256(password, salt, iterations);\n\treturn [passwordHashPrefix, String(iterations), encodeBase64UrlBytes(salt), encodeBase64UrlBytes(derivedKey)].join(\":\");\n}\n\n/**\n * 验证 {@link HashPasswordPBKDF2SHA256} 生成的密码哈希。\n *\n * @param password - 要验证的密码。\n * @param passwordHash - 自描述的 PBKDF2-HMAC-SHA-256 密码哈希。\n * @returns 格式有效且密码匹配时返回 `true`；格式无效或密码错误时返回 `false`。\n */\nexport async function VerifyPasswordPBKDF2SHA256(password: string, passwordHash: string): Promise<boolean> {\n\ttry {\n\t\t// 先验证协议版本和字段边界，再执行高成本 PBKDF2，避免无效输入消耗不受控资源。\n\t\tconst parts = passwordHash.split(\":\");\n\t\tif (parts.length !== 4 || parts[0] !== passwordHashPrefix) return false;\n\t\tconst iterations = validateIterations(Number(parts[1]));\n\t\tconst salt = decodeBase64UrlBytes(parts[2] ?? \"\");\n\t\tconst expected = decodeBase64UrlBytes(parts[3] ?? \"\");\n\t\tif (salt.length !== 16 || expected.length !== 32) return false;\n\t\tconst actual = await PBKDF2SHA256(password, salt, iterations, expected.length);\n\t\treturn FixedTimeEquals(actual, expected);\n\t} catch {\n\t\treturn false;\n\t}\n}\n\n/**\n * 使用 RFC 5869 HKDF-SHA-256 派生上下文隔离的密钥材料。\n *\n * @param inputKeyMaterial - 输入密钥材料，例如 ECDH 原始共享秘密。\n * @param salt - 可选盐；空值按 RFC 5869 的零盐语义处理。\n * @param info - 应用、协议和密钥用途上下文。\n * @param outputLength - 输出长度，范围为 1 至 8,160 字节。\n * @returns 与 `salt` 和 `info` 绑定的派生密钥。\n */\nexport async function HKDFSHA256(\n\tinputKeyMaterial: Uint8Array,\n\tsalt: Uint8Array = new Uint8Array(),\n\tinfo: Uint8Array = new Uint8Array(),\n\toutputLength = 32\n): Promise<Uint8Array> {\n\tif (!Number.isSafeInteger(outputLength) || outputLength < 1 || outputLength > 255 * 32) {\n\t\tthrow new RangeError(\"outputLength must be a safe integer between 1 and 8,160.\");\n\t}\n\n\t// Web Crypto 的 HKDF 实现内部完成 RFC 5869 Extract 和 Expand，并且不会导出中间 PRK。\n\tconst crypto = requireWebCrypto();\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(inputKeyMaterial), \"HKDF\", false, [\"deriveBits\"]);\n\tconst derived = await crypto.subtle.deriveBits(\n\t\t{ hash: \"SHA-256\", info: toArrayBuffer(info), name: \"HKDF\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\toutputLength * 8\n\t);\n\treturn new Uint8Array(derived);\n}\n\n/**\n * 使用 AES-256 对 UTF-8 文本进行分组加密。\n *\n * @remarks 密钥和 IV 分别补字符 `f` 或截断到 32、16 个 UTF-16 Code Unit，与 .NET\n * `AESEncrypt` 保持一致。CBC/ECB 不提供完整性认证，密文可能被篡改。\n * @param dataStr - 要加密的 UTF-8 文本；空白文本返回 `null`。\n * @param key - 非空白的密钥文本。\n * @param vector - 非空白的初始化向量文本；ECB 模式仍要求传入该参数以对齐 .NET 签名。\n * @param cipherMode - AES 分组模式，默认 `CBC`。\n * @param paddingMode - AES 填充模式，默认 `PKCS7`。\n * @returns Base64 密文；输入、密钥或 IV 为空白时返回 `null`。\n * @throws 模式或填充不受支持时抛出 `RangeError`。\n */\nexport function AESEncrypt(\n\tdataStr: string,\n\tkey: string,\n\tvector: string,\n\tcipherMode: AesCipherMode = \"CBC\",\n\tpaddingMode: AesPaddingMode = \"PKCS7\"\n): string | null {\n\tif (dataStr.trim().length === 0 || key.trim().length === 0 || vector.trim().length === 0) return null;\n\tif (cipherMode !== \"CBC\" && cipherMode !== \"ECB\") throw new RangeError('cipherMode must be \"CBC\" or \"ECB\".');\n\n\tlet padding = Pkcs7;\n\tswitch (paddingMode) {\n\t\tcase \"None\":\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"PKCS7\":\n\t\t\tbreak;\n\t\tcase \"Zeros\":\n\t\t\tpadding = ZeroPadding;\n\t\t\tbreak;\n\t\tcase \"ANSIX923\":\n\t\t\t// crypto-js 4.2.0 的 pad-ansix923 默认导出名称拼写错误，使用其注册到核心对象的实现。\n\t\t\tpadding = CryptoCore.pad.AnsiX923;\n\t\t\tbreak;\n\t\tcase \"ISO10126\":\n\t\t\tpadding = Iso10126;\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new RangeError(\"paddingMode is not supported.\");\n\t}\n\tif (paddingMode === \"None\" && encodeUtf8(dataStr).length % 16 !== 0) {\n\t\tthrow new RangeError(\"AES plaintext must contain a whole number of 16-byte blocks when paddingMode is None.\");\n\t}\n\n\t// 按 .NET 入口的字符规则处理密钥和 IV，再由 CryptoJS 统一按 UTF-8 编码。\n\tconst keyBytes = Utf8.parse(key.padEnd(32, \"f\").slice(0, 32));\n\tconst vectorBytes = Utf8.parse(vector.padEnd(16, \"f\").slice(0, 16));\n\treturn AES.encrypt(dataStr, keyBytes, cipherMode === \"CBC\" ? { iv: vectorBytes, padding } : { iv: vectorBytes, mode: ECB, padding }).toString();\n}\n\n/**\n * 使用 AES-256 解密 Base64 分组密文。\n *\n * @remarks 参数归一化规则与 {@link AESEncrypt} 以及 .NET `AESDecrypt` 相同。\n * @param dataStr - Base64 密文；空白文本返回 `null`。\n * @param key - 加密时使用的密钥文本。\n * @param vector - 加密时使用的初始化向量文本。\n * @param cipherMode - AES 分组模式，默认 `CBC`。\n * @param paddingMode - AES 填充模式，默认 `PKCS7`。\n * @returns 解密后的 UTF-8 文本；输入、密钥或 IV 为空白时返回 `null`。\n * @throws 模式、填充、Base64、密钥或密文无效时抛出错误。\n */\nexport function AESDecrypt(\n\tdataStr: string,\n\tkey: string,\n\tvector: string,\n\tcipherMode: AesCipherMode = \"CBC\",\n\tpaddingMode: AesPaddingMode = \"PKCS7\"\n): string | null {\n\tif (dataStr.trim().length === 0 || key.trim().length === 0 || vector.trim().length === 0) return null;\n\tif (cipherMode !== \"CBC\" && cipherMode !== \"ECB\") throw new RangeError('cipherMode must be \"CBC\" or \"ECB\".');\n\n\tlet padding = Pkcs7;\n\tswitch (paddingMode) {\n\t\tcase \"None\":\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"PKCS7\":\n\t\t\tbreak;\n\t\tcase \"Zeros\":\n\t\t\t// .NET 的 Zeros 解密不会移除尾部零字节，因此使用 NoPadding 保留完整明文块。\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"ANSIX923\":\n\t\t\t// crypto-js 4.2.0 的 pad-ansix923 默认导出名称拼写错误，使用其注册到核心对象的实现。\n\t\t\tpadding = CryptoCore.pad.AnsiX923;\n\t\t\tbreak;\n\t\tcase \"ISO10126\":\n\t\t\tpadding = Iso10126;\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new RangeError(\"paddingMode is not supported.\");\n\t}\n\tconst ciphertextBytes = decodeBase64Bytes(dataStr);\n\tif (ciphertextBytes.length === 0 || ciphertextBytes.length % 16 !== 0) {\n\t\tthrow new RangeError(\"AES ciphertext must contain one or more complete 16-byte blocks.\");\n\t}\n\n\t// 解密必须重复使用加密端相同的字符补齐和截断规则。\n\tconst keyBytes = Utf8.parse(key.padEnd(32, \"f\").slice(0, 32));\n\tconst vectorBytes = Utf8.parse(vector.padEnd(16, \"f\").slice(0, 16));\n\treturn AES.decrypt(dataStr, keyBytes, cipherMode === \"CBC\" ? { iv: vectorBytes, padding } : { iv: vectorBytes, mode: ECB, padding }).toString(\n\t\tUtf8\n\t);\n}\n\n/**\n * 使用 SHA-256 归一化文本密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。\n *\n * @remarks 输出与 .NET `AESEncryptAuthenticated` 的 v1 Base64 二进制载荷完全一致。\n * @param plaintext - 要加密的 UTF-8 文本。\n * @param key - 非空的 UTF-8 文本密钥；内部归一化为 32 字节 SHA-256 摘要。\n * @returns Base64 编码的 v1 AES-GCM 认证载荷。\n * @throws 密钥为空或运行时缺少 Web Crypto 时抛出错误。\n */\nexport async function AESEncryptAuthenticated(plaintext: string, key: string): Promise<string> {\n\tif (key.trim().length === 0) throw new TypeError(\"The encryption key cannot be empty.\");\n\tconst crypto = requireWebCrypto();\n\tconst keyBytes = await SHA256Bytes(key);\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { name: \"AES-GCM\" }, false, [\"encrypt\"]);\n\t// 96 位随机 nonce 是 GCM 的标准高效长度；每次加密都生成新值，避免同一密钥下重复。\n\tconst nonce = GenerateRandomBytes(12);\n\tconst encrypted = new Uint8Array(\n\t\tawait crypto.subtle.encrypt({ iv: toArrayBuffer(nonce), name: \"AES-GCM\", tagLength: 128 }, cryptoKey, toArrayBuffer(encodeUtf8(plaintext)))\n\t);\n\tconst ciphertextLength = encrypted.length - 16;\n\t// .NET v1 协议字段顺序固定为 version || nonce || tag || ciphertext。\n\tconst payload = new Uint8Array(1 + nonce.length + 16 + ciphertextLength);\n\tpayload[0] = authenticatedAesPayloadVersion;\n\tpayload.set(nonce, 1);\n\tpayload.set(encrypted.subarray(ciphertextLength), 1 + nonce.length);\n\tpayload.set(encrypted.subarray(0, ciphertextLength), 1 + nonce.length + 16);\n\treturn encodeBase64Bytes(payload);\n}\n\n/**\n * 解密并认证 .NET `AESEncryptAuthenticated` 或 {@link AESEncryptAuthenticated} 生成的载荷。\n *\n * @param payload - Base64 编码的 v1 AES-GCM 二进制载荷。\n * @param key - 加密时使用的非空 UTF-8 文本密钥。\n * @returns 通过认证的 UTF-8 明文。\n * @throws 载荷格式无效、密钥错误或认证失败时抛出错误。\n */\nexport async function AESDecryptAuthenticated(payload: string, key: string): Promise<string> {\n\tif (key.trim().length === 0) throw new TypeError(\"The encryption key cannot be empty.\");\n\tconst decoded = decodeBase64Bytes(payload);\n\tif (decoded.length < 29 || decoded[0] !== authenticatedAesPayloadVersion) {\n\t\tthrow new TypeError(\"The AES-GCM payload format or version is not supported.\");\n\t}\n\n\tconst nonce = decoded.subarray(1, 13);\n\tconst tag = decoded.subarray(13, 29);\n\tconst ciphertext = decoded.subarray(29);\n\t// Web Crypto 接收 ciphertext || tag，因此把 .NET v1 的独立字段恢复为 Web Crypto 输入顺序。\n\tconst ciphertextAndTag = new Uint8Array(ciphertext.length + tag.length);\n\tciphertextAndTag.set(ciphertext);\n\tciphertextAndTag.set(tag, ciphertext.length);\n\tconst crypto = requireWebCrypto();\n\tconst keyBytes = await SHA256Bytes(key);\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { name: \"AES-GCM\" }, false, [\"decrypt\"]);\n\tconst plaintext = await crypto.subtle.decrypt(\n\t\t{ iv: toArrayBuffer(nonce), name: \"AES-GCM\", tagLength: 128 },\n\t\tcryptoKey,\n\t\ttoArrayBuffer(ciphertextAndTag)\n\t);\n\treturn getTextDecoder().decode(plaintext);\n}\n\n/**\n * 使用 PBKDF2-HMAC-SHA-256 派生密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。\n *\n * @remarks 每次调用生成独立 16 字节盐与 12 字节 IV。输出是与 .NET `AESEncryptWithPassword`\n * 一致的 v1 自描述载荷，不应由业务代码手动拆分或修改。密码加密不替代密钥管理。\n * @param plaintext - 原始文本，不进行 JSON 推断；UTF-8 编码后最大 8 MiB。\n * @param password - 1 至 1024 UTF-8 字节的秘密口令。\n * @param iterations - PBKDF2 工作因子，默认 600,000。\n * @returns 认证密文字符串；相同输入每次产生不同结果。\n * @throws 口令非法时抛出 `TypeError` 或 `RangeError`；明文过大时抛出 `RangeError`；\n * 运行时缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function AESEncryptWithPassword(plaintext: string, password: string, iterations = defaultPbkdf2Iterations): Promise<string> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tconst plaintextBytes = encodeUtf8(plaintext);\n\tif (plaintextBytes.length > maximumPlaintextBytes) {\n\t\tthrow new RangeError(`The UTF-8 plaintext cannot exceed ${maximumPlaintextBytes} bytes.`);\n\t}\n\tconst validatedIterations = validateIterations(iterations);\n\tconst crypto = requireWebCrypto();\n\tconst salt = GenerateRandomBytes(16);\n\tconst iv = GenerateRandomBytes(12);\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveKey\"]);\n\t// AES-GCM 密钥只允许加密，且不允许从 Web Crypto 导出。\n\tconst key = await crypto.subtle.deriveKey(\n\t\t{ hash: \"SHA-256\", iterations: validatedIterations, name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\t{ length: 256, name: \"AES-GCM\" },\n\t\tfalse,\n\t\t[\"encrypt\"]\n\t);\n\t// Prefix 同时作为明文版本字段和 AAD，攻击者无法在不破坏认证标签的情况下替换协议版本。\n\tconst ciphertext = await crypto.subtle.encrypt(\n\t\t{ additionalData: toArrayBuffer(encodeUtf8(encryptedPayloadPrefix)), iv: toArrayBuffer(iv), name: \"AES-GCM\", tagLength: 128 },\n\t\tkey,\n\t\tplaintextBytes\n\t);\n\t// 字段顺序属于持久化协议：版本、KDF 成本、盐、IV、带 GCM Tag 的密文。\n\treturn [\n\t\tencryptedPayloadPrefix,\n\t\tString(validatedIterations),\n\t\tencodeBase64UrlBytes(salt),\n\t\tencodeBase64UrlBytes(iv),\n\t\tencodeBase64UrlBytes(new Uint8Array(ciphertext)),\n\t].join(\":\");\n}\n\n/**\n * 解密 {@link AESEncryptWithPassword} 生成的 v1 认证载荷。\n *\n * @param payload - 未修改的 v1 载荷，最大约 16 MiB 文本。\n * @param password - 加密时使用的口令。\n * @returns 原始 UTF-8 文本。\n * @throws 格式或字段非法时抛出 `TypeError`，载荷过大时抛出 `RangeError`，认证或密码\n * 失败及缺少平台能力时抛出 `Error`。\n */\nexport async function AESDecryptWithPassword(payload: string, password: string): Promise<string> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tif (payload.length > maximumPayloadLength) {\n\t\tthrow new RangeError(\"The encrypted payload exceeds the supported size.\");\n\t}\n\t// 先验证固定字段数和版本，再对高成本 KDF 与解密进行任何工作。\n\tconst parts = payload.split(\":\");\n\tif (parts.length !== 5 || parts[0] !== encryptedPayloadPrefix) {\n\t\tthrow new TypeError(\"The encrypted payload format is not supported.\");\n\t}\n\n\tlet iterations: number;\n\tlet salt: Uint8Array;\n\tlet iv: Uint8Array;\n\tlet ciphertext: Uint8Array;\n\ttry {\n\t\titerations = validateIterations(Number(parts[1]));\n\t\tsalt = decodeBase64UrlBytes(parts[2] ?? \"\");\n\t\tiv = decodeBase64UrlBytes(parts[3] ?? \"\");\n\t\tciphertext = decodeBase64UrlBytes(parts[4] ?? \"\");\n\t\tif (salt.length !== 16 || iv.length !== 12 || ciphertext.length < 16) {\n\t\t\tthrow new TypeError(\"The encrypted payload has invalid field lengths.\");\n\t\t}\n\t} catch (cause) {\n\t\tthrow new TypeError(\"The encrypted payload contains invalid fields.\", { cause });\n\t}\n\n\tconst crypto = requireWebCrypto();\n\tconst textDecoder = getTextDecoder();\n\ttry {\n\t\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveKey\"]);\n\t\t// 解密密钥不允许导出，也不能被误用于加密。\n\t\tconst key = await crypto.subtle.deriveKey(\n\t\t\t{ hash: \"SHA-256\", iterations, name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\t\tmaterial,\n\t\t\t{ length: 256, name: \"AES-GCM\" },\n\t\t\tfalse,\n\t\t\t[\"decrypt\"]\n\t\t);\n\t\tconst plaintext = await crypto.subtle.decrypt(\n\t\t\t{ additionalData: toArrayBuffer(encodeUtf8(encryptedPayloadPrefix)), iv: toArrayBuffer(iv), name: \"AES-GCM\", tagLength: 128 },\n\t\t\tkey,\n\t\t\ttoArrayBuffer(ciphertext)\n\t\t);\n\t\treturn textDecoder.decode(plaintext);\n\t} catch (cause) {\n\t\tthrow new Error(\"The payload could not be authenticated or decrypted.\", { cause });\n\t}\n}\n\n/**\n * 生成可供 RSA-OAEP/SHA-256 与 RSA-PSS/SHA-256 共用的 PEM 密钥对。\n *\n * @param modulusLength - RSA 模数位数，默认 2,048；必须是不小于 2,048 的 256 倍数。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n * @throws 模数小于 2,048 或不是 256 的倍数时抛出 `RangeError`。\n */\nexport async function GenerateRSAKeyPair(modulusLength = 2048): Promise<PemKeyPair> {\n\tif (!Number.isSafeInteger(modulusLength) || modulusLength < 2048 || modulusLength % 256 !== 0) {\n\t\tthrow new RangeError(\"modulusLength must be a safe integer of at least 2048 and divisible by 256.\");\n\t}\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(\n\t\tawait crypto.subtle.generateKey(\n\t\t\t{\n\t\t\t\thash: \"SHA-256\",\n\t\t\t\tmodulusLength,\n\t\t\t\tname: \"RSA-OAEP\",\n\t\t\t\tpublicExponent: Uint8Array.of(1, 0, 1),\n\t\t\t},\n\t\t\ttrue,\n\t\t\t[\"decrypt\", \"encrypt\"]\n\t\t)\n\t);\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用 RSA-OAEP/SHA-256 公钥加密 UTF-8 文本。\n *\n * @param plaintext - 要加密的 UTF-8 文本；长度必须满足 RSA-OAEP 模数限制。\n * @param publicKeyPem - SubjectPublicKeyInfo PEM 公钥。\n * @returns Base64 编码的 RSA 密文。\n * @throws 公钥格式无效或明文超过 RSA-OAEP 容量时抛出错误。\n */\nexport async function RSAEncryptOAEP(plaintext: string, publicKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { hash: \"SHA-256\", name: \"RSA-OAEP\" }, false, [\n\t\t\"encrypt\",\n\t]);\n\tconst ciphertext = await crypto.subtle.encrypt({ name: \"RSA-OAEP\" }, key, toArrayBuffer(encodeUtf8(plaintext)));\n\treturn encodeBase64Bytes(new Uint8Array(ciphertext));\n}\n\n/**\n * 使用 RSA-OAEP/SHA-256 私钥解密 Base64 密文。\n *\n * @param ciphertext - Base64 编码的 RSA 密文。\n * @param privateKeyPem - 未加密的 PKCS#8 PEM 私钥。\n * @returns 解密后的 UTF-8 文本。\n * @throws 私钥、Base64 或密文无效时抛出错误。\n */\nexport async function RSADecryptOAEP(ciphertext: string, privateKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { hash: \"SHA-256\", name: \"RSA-OAEP\" }, false, [\n\t\t\"decrypt\",\n\t]);\n\tconst plaintext = await crypto.subtle.decrypt({ name: \"RSA-OAEP\" }, key, toArrayBuffer(decodeBase64Bytes(ciphertext)));\n\treturn getTextDecoder().decode(plaintext);\n}\n\n/**\n * 使用 RSA-PSS/SHA-256 私钥签名文本或字节。\n *\n * @param value - 要签名的 UTF-8 文本或原始字节。\n * @param privateKeyPem - 未加密的 PKCS#8 PEM 私钥。\n * @returns Base64 编码的 RSA-PSS 签名；盐长度固定为 32 字节。\n * @throws 私钥格式无效或签名失败时抛出错误。\n */\nexport async function RSASignPSS(value: string, privateKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { hash: \"SHA-256\", name: \"RSA-PSS\" }, false, [\n\t\t\"sign\",\n\t]);\n\t// PSS 盐长度固定为 SHA-256 摘要长度，与 .NET RSASignaturePadding.Pss 的默认行为一致。\n\tconst signature = await crypto.subtle.sign({ name: \"RSA-PSS\", saltLength: 32 }, key, toArrayBuffer(encodeUtf8(value)));\n\treturn encodeBase64Bytes(new Uint8Array(signature));\n}\n\n/**\n * 使用 RSA-PSS/SHA-256 公钥验证 Base64 签名。\n *\n * @param value - 签名时使用的 UTF-8 文本或原始字节。\n * @param signature - Base64 编码的 RSA-PSS 签名。\n * @param publicKeyPem - SubjectPublicKeyInfo PEM 公钥。\n * @returns 签名与内容、公钥匹配时返回 `true`。\n * @throws 公钥或 Base64 格式无效时抛出错误。\n */\nexport async function RSAVerifyPSS(value: string, signature: string, publicKeyPem: string): Promise<boolean> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { hash: \"SHA-256\", name: \"RSA-PSS\" }, false, [\n\t\t\"verify\",\n\t]);\n\t// 验证端必须使用与签名端相同的 32 字节 PSS 盐长度。\n\treturn crypto.subtle.verify(\n\t\t{ name: \"RSA-PSS\", saltLength: 32 },\n\t\tkey,\n\t\ttoArrayBuffer(decodeBase64Bytes(signature)),\n\t\ttoArrayBuffer(encodeUtf8(value))\n\t);\n}\n\n/**\n * 生成 ECDSA PEM 签名密钥对。\n *\n * @param namedCurve - NIST 曲线：P-256、P-384 或 P-521。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n */\nexport async function GenerateECDSAKeyPair(namedCurve: EcNamedCurve = \"P-256\"): Promise<PemKeyPair> {\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(await crypto.subtle.generateKey({ name: \"ECDSA\", namedCurve }, true, [\"sign\", \"verify\"]));\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用 ECDSA 私钥签名文本或字节。\n *\n * @remarks Web Crypto 返回 IEEE P1363 固定字段拼接格式，与 .NET 实现一致。\n * @param value - 要签名的 UTF-8 文本或原始字节。\n * @param privateKeyPem - 未加密的 EC PKCS#8 PEM 私钥。\n * @param namedCurve - 私钥使用的 NIST 曲线。\n * @returns Base64 编码的 IEEE P1363 ECDSA 签名。\n */\nexport async function ECDSASign(value: string, privateKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { name: \"ECDSA\", namedCurve }, false, [\"sign\"]);\n\t// NIST 曲线强度分别对应 SHA-256、SHA-384 和 SHA-512；映射只在签名入口使用，因此直接保留在调用点。\n\tconst hash = namedCurve === \"P-256\" ? \"SHA-256\" : namedCurve === \"P-384\" ? \"SHA-384\" : \"SHA-512\";\n\tconst signature = await crypto.subtle.sign({ hash, name: \"ECDSA\" }, key, toArrayBuffer(encodeUtf8(value)));\n\treturn encodeBase64Bytes(new Uint8Array(signature));\n}\n\n/**\n * 使用 ECDSA 公钥验证 Base64 签名。\n *\n * @param value - 签名时使用的 UTF-8 文本或原始字节。\n * @param signature - Base64 编码的 IEEE P1363 ECDSA 签名。\n * @param publicKeyPem - EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 公钥使用的 NIST 曲线。\n * @returns 签名与内容、公钥和曲线匹配时返回 `true`。\n */\nexport async function ECDSAVerify(value: string, signature: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<boolean> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { name: \"ECDSA\", namedCurve }, false, [\"verify\"]);\n\t// 与签名入口保持相同的曲线/摘要映射，避免允许调用方组合不匹配的安全强度。\n\tconst hash = namedCurve === \"P-256\" ? \"SHA-256\" : namedCurve === \"P-384\" ? \"SHA-384\" : \"SHA-512\";\n\treturn crypto.subtle.verify({ hash, name: \"ECDSA\" }, key, toArrayBuffer(decodeBase64Bytes(signature)), toArrayBuffer(encodeUtf8(value)));\n}\n\n/**\n * 生成 ECDH PEM 密钥协商密钥对。\n *\n * @param namedCurve - NIST 曲线：P-256、P-384 或 P-521。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n */\nexport async function GenerateECDHKeyPair(namedCurve: EcNamedCurve = \"P-256\"): Promise<PemKeyPair> {\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(await crypto.subtle.generateKey({ name: \"ECDH\", namedCurve }, true, [\"deriveBits\"]));\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用本方 ECDH 私钥与对方 ECDH 公钥派生共享秘密。\n *\n * @remarks 返回值仍需经过合适的 KDF 后才能作为对称密钥，不应直接长期存储。\n * @param privateKeyPem - 本方未加密的 EC PKCS#8 PEM 私钥。\n * @param publicKeyPem - 对方的 EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 双方密钥使用的 NIST 曲线。\n * @returns 曲线字段长度的原始 ECDH 共享秘密。\n */\nexport async function DeriveECDHSecret(privateKeyPem: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<Uint8Array> {\n\tconst crypto = requireWebCrypto();\n\tconst [privateKey, publicKey] = await Promise.all([\n\t\tcrypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { name: \"ECDH\", namedCurve }, false, [\"deriveBits\"]),\n\t\tcrypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { name: \"ECDH\", namedCurve }, false, []),\n\t]);\n\t// P-521 字段需要按完整字节对齐，因此导出 66 字节（528 位），其余曲线直接使用字段位数。\n\tconst bitLength = namedCurve === \"P-256\" ? 256 : namedCurve === \"P-384\" ? 384 : 528;\n\tconst secret = await crypto.subtle.deriveBits({ name: \"ECDH\", public: publicKey }, privateKey, bitLength);\n\treturn new Uint8Array(secret);\n}\n\n/**\n * 使用 ECDH 后以 SHA-256 派生共享密钥。\n *\n * @remarks 相比直接使用原始共享秘密，此入口与 .NET `DeriveECDHKeySHA256` 一致并固定输出 32 字节。\n * @param privateKeyPem - 本方未加密的 EC PKCS#8 PEM 私钥。\n * @param publicKeyPem - 对方的 EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 双方密钥使用的 NIST 曲线。\n * @returns 32 字节共享密钥。\n */\nexport async function DeriveECDHKeySHA256(privateKeyPem: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<Uint8Array> {\n\tconst secret = await DeriveECDHSecret(privateKeyPem, publicKeyPem, namedCurve);\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-256\", toArrayBuffer(secret));\n\treturn new Uint8Array(digest);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAM,0BAA0B;;AAGhC,MAAM,0BAA0B;;AAGhC,MAAM,0BAA0B;;AAGhC,MAAM,uBAAuB;;AAG7B,MAAM,wBAAwB;;AAG9B,MAAM,uBAAuB;;AAG7B,MAAM,yBAAyB;;AAG/B,MAAM,qBAAqB;;AAG3B,MAAM,iCAAiC;;AAmBvC,MAAM,uBAAuB;;;;;;;;AA0B7B,MAAM,4BAAoC;CACzC,MAAM,SAAS,qBAAqB;CACpC,IAAI,OAAO,QAAQ,oBAAoB,YACtC,MAAM,IAAI,MAAM,mDAAmD;CAEpE,OAAO;AACR;;;;;;;AAQA,MAAM,yBAAiC;CACtC,MAAM,SAAS,oBAAoB;CACnC,MAAM,SAAU,OAAoC;CACpD,IACC,OAAO,QAAQ,YAAY,cAC3B,OAAO,OAAO,eAAe,cAC7B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,WAAW,cACzB,OAAO,OAAO,YAAY,cAC1B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,gBAAgB,cAC9B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,SAAS,cACvB,OAAO,OAAO,WAAW,YAEzB,MAAM,IAAI,MAAM,gEAAgE;CAEjF,OAAO;AACR;;;;;;;;AASA,MAAM,iBAAiB,UAAmC;CACzD,MAAM,OAAO,IAAI,WAAW,MAAM,UAAU;CAC5C,KAAK,IAAI,KAAK;CACd,OAAO,KAAK;AACb;;AAGA,MAAM,YAAY;CACjB,SAAS;CACT,QAAQ;AACT;;;;;;;;AASA,MAAM,SAAS,OAAe,UAA+B;CAG5D,OAAO,cAAc,MAAM,SAFX,kBAAkB,IAAI,WAAW,KAAK,CAClC,CAAC,CAAC,MAAM,WAAW,CAAC,EAAE,KAAK,IAAI,KAAK,GACd,aAAa,MAAM;AAC9D;;;;;;;;;AAUA,MAAM,WAAW,OAAe,UAA+B;CAC9D,MAAM,SAAS,cAAc,MAAM;CACnC,MAAM,SAAS,YAAY,MAAM;CACjC,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,QAAQ,WAAW,MAAM,KAAK,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,UAAU,cAAc,MAAM,YAAY;CAClH,MAAM,UAAU,QAAQ,MAAM,OAAO,QAAQ,CAAC,OAAO,MAAM,CAAC,CAAC,QAAQ,SAAS,EAAE;CAChF,OAAO,cAAc,kBAAkB,OAAO,CAAC;AAChD;;;;;;;;AASA,MAAM,gBAAgB,OAAO,YAAgD;CAC5E,MAAM,SAAS,iBAAiB;CAChC,MAAM,CAAC,YAAY,aAAa,MAAM,QAAQ,IAAI,CACjD,OAAO,OAAO,UAAU,SAAS,QAAQ,UAAU,GACnD,OAAO,OAAO,UAAU,QAAQ,QAAQ,SAAS,CAClD,CAAC;CACD,OAAO;EACN,YAAY,MAAM,UAAU,SAAS,UAAU;EAC/C,WAAW,MAAM,UAAU,QAAQ,SAAS;CAC7C;AACD;;;;;;;;AASA,MAAM,iBAAiB,UAAoD;CAC1E,IAAI,gBAAgB,SAAS,eAAe,OAAO,OAAO;CAC1D,MAAM,IAAI,MAAM,0CAA0C;AAC3D;;;;;;;;;AAUA,MAAM,2BAA2B,aAAiC;CACjE,MAAM,QAAQ,WAAW,QAAQ;CACjC,IAAI,MAAM,WAAW,GAAG,MAAM,IAAI,UAAU,0CAA0C;CACtF,IAAI,MAAM,SAAS,sBAClB,MAAM,IAAI,WAAW,oCAAoC,qBAAqB,QAAQ;CAEvF,OAAO;AACR;;;;;;;;AASA,MAAM,sBAAsB,eAA+B;CAC1D,IAAI,CAAC,OAAO,cAAc,UAAU,KAAK,aAAa,2BAA2B,aAAa,yBAC7F,MAAM,IAAI,WAAW,6CAA6C,wBAAwB,OAAO,wBAAwB,EAAE;CAE5H,OAAO;AACR;;AAGA,MAAM,cAAc,UAA8B,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;;AAGzH,MAAM,cAAc,UAA8B,WAAW,KAAK,CAAC,CAAC,YAAY;;;;;;;;;;;AAYhF,MAAM,mBAAmB,OAAO,OAAe,KAAa,SAAiE;CAC5H,MAAM,WAAW,WAAW,GAAG;CAC/B,IAAI,SAAS,WAAW,GAAG,MAAM,IAAI,UAAU,+BAA+B;CAE9E,MAAM,SAAS,iBAAiB;CAChC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG;EAAE;EAAM,MAAM;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC;CACvH,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CAC9F,OAAO,IAAI,WAAW,SAAS;AAChC;;;;;;;;AASA,SAAgB,oBAAoB,QAA4B;CAC/D,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,KAAK,SAAS,OAC3D,MAAM,IAAI,WAAW,sDAAsD;CAE5E,OAAO,oBAAoB,CAAC,CAAC,gBAAgB,IAAI,WAAW,MAAM,CAAC;AACpE;;;;;;;;;;AAWA,SAAgB,gBAAgB,MAAkB,OAA4B;CAC7E,MAAM,SAAS,KAAK,IAAI,KAAK,QAAQ,MAAM,MAAM;CACjD,IAAI,aAAa,KAAK,WAAW,MAAM,SAAS,IAAI;CAEpD,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG,eAAe,KAAK,UAAU,MAAM,MAAM,UAAU;CACpG,OAAO,eAAe;AACvB;;;;;;;;AASA,SAAgB,WAAW,OAAuB;CACjD,OAAO,IAAI,KAAK,CAAC,CAAC,SAAS,GAAG;AAC/B;;;;;;;;AASA,SAAgB,YAAY,OAAuB;CAClD,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY;AAC9C;;;;;;;;;AAUA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;;AASA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;AAQA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;AAQA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;AAQA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;AAQA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;;;;AAYA,eAAsB,aAAa,UAAkB,MAAkB,aAAa,yBAAyB,eAAe,IAAyB;CACpJ,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,IAAI,KAAK,SAAS,GAAG,MAAM,IAAI,WAAW,2EAA2E;CACrH,IAAI,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe,KAAK,eAAe,MAC7E,MAAM,IAAI,WAAW,0DAA0D;CAIhF,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,YAAY,CAAC;CACnH,MAAM,UAAU,MAAM,OAAO,OAAO,WACnC;EAAE,MAAM;EAAW,YAAY,mBAAmB,UAAU;EAAG,MAAM;EAAU,MAAM,cAAc,IAAI;CAAE,GACzG,UACA,eAAe,CAChB;CACA,OAAO,IAAI,WAAW,OAAO;AAC9B;;;;;;;;AASA,eAAsB,yBAAyB,UAAkB,aAAa,yBAA0C;CAEvH,MAAM,OAAO,oBAAoB,EAAE;CACnC,MAAM,aAAa,MAAM,aAAa,UAAU,MAAM,UAAU;CAChE,OAAO;EAAC;EAAoB,OAAO,UAAU;EAAG,qBAAqB,IAAI;EAAG,qBAAqB,UAAU;CAAC,CAAC,CAAC,KAAK,GAAG;AACvH;;;;;;;;AASA,eAAsB,2BAA2B,UAAkB,cAAwC;CAC1G,IAAI;EAEH,MAAM,QAAQ,aAAa,MAAM,GAAG;EACpC,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,oBAAoB,OAAO;EAClE,MAAM,aAAa,mBAAmB,OAAO,MAAM,EAAE,CAAC;EACtD,MAAM,OAAO,qBAAqB,MAAM,MAAM,EAAE;EAChD,MAAM,WAAW,qBAAqB,MAAM,MAAM,EAAE;EACpD,IAAI,KAAK,WAAW,MAAM,SAAS,WAAW,IAAI,OAAO;EAEzD,OAAO,gBAAgB,MADF,aAAa,UAAU,MAAM,YAAY,SAAS,MAAM,GAC9C,QAAQ;CACxC,QAAQ;EACP,OAAO;CACR;AACD;;;;;;;;;;AAWA,eAAsB,WACrB,kBACA,uBAAmB,IAAI,WAAW,GAClC,uBAAmB,IAAI,WAAW,GAClC,eAAe,IACO;CACtB,IAAI,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe,KAAK,eAAe,MAC7E,MAAM,IAAI,WAAW,0DAA0D;CAIhF,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,gBAAgB,GAAG,QAAQ,OAAO,CAAC,YAAY,CAAC;CACpH,MAAM,UAAU,MAAM,OAAO,OAAO,WACnC;EAAE,MAAM;EAAW,MAAM,cAAc,IAAI;EAAG,MAAM;EAAQ,MAAM,cAAc,IAAI;CAAE,GACtF,UACA,eAAe,CAChB;CACA,OAAO,IAAI,WAAW,OAAO;AAC9B;;;;;;;;;;;;;;AAeA,SAAgB,WACf,SACA,KACA,QACA,aAA4B,OAC5B,cAA8B,SACd;CAChB,IAAI,QAAQ,KAAK,CAAC,CAAC,WAAW,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO;CACjG,IAAI,eAAe,SAAS,eAAe,OAAO,MAAM,IAAI,WAAW,wCAAoC;CAE3G,IAAI,UAAU;CACd,QAAQ,aAAR;EACC,KAAK;GACJ,UAAU;GACV;EACD,KAAK,SACJ;EACD,KAAK;GACJ,UAAU;GACV;EACD,KAAK;GAEJ,UAAU,WAAW,IAAI;GACzB;EACD,KAAK;GACJ,UAAU;GACV;EACD,SACC,MAAM,IAAI,WAAW,+BAA+B;CACtD;CACA,IAAI,gBAAgB,UAAU,WAAW,OAAO,CAAC,CAAC,SAAS,OAAO,GACjE,MAAM,IAAI,WAAW,uFAAuF;CAI7G,MAAM,WAAW,KAAK,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAC5D,MAAM,cAAc,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAClE,OAAO,IAAI,QAAQ,SAAS,UAAU,eAAe,QAAQ;EAAE,IAAI;EAAa;CAAQ,IAAI;EAAE,IAAI;EAAa,MAAM;EAAK;CAAQ,CAAC,CAAC,CAAC,SAAS;AAC/I;;;;;;;;;;;;;AAcA,SAAgB,WACf,SACA,KACA,QACA,aAA4B,OAC5B,cAA8B,SACd;CAChB,IAAI,QAAQ,KAAK,CAAC,CAAC,WAAW,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO;CACjG,IAAI,eAAe,SAAS,eAAe,OAAO,MAAM,IAAI,WAAW,wCAAoC;CAE3G,IAAI,UAAU;CACd,QAAQ,aAAR;EACC,KAAK;GACJ,UAAU;GACV;EACD,KAAK,SACJ;EACD,KAAK;GAEJ,UAAU;GACV;EACD,KAAK;GAEJ,UAAU,WAAW,IAAI;GACzB;EACD,KAAK;GACJ,UAAU;GACV;EACD,SACC,MAAM,IAAI,WAAW,+BAA+B;CACtD;CACA,MAAM,kBAAkB,kBAAkB,OAAO;CACjD,IAAI,gBAAgB,WAAW,KAAK,gBAAgB,SAAS,OAAO,GACnE,MAAM,IAAI,WAAW,kEAAkE;CAIxF,MAAM,WAAW,KAAK,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAC5D,MAAM,cAAc,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAClE,OAAO,IAAI,QAAQ,SAAS,UAAU,eAAe,QAAQ;EAAE,IAAI;EAAa;CAAQ,IAAI;EAAE,IAAI;EAAa,MAAM;EAAK;CAAQ,CAAC,CAAC,CAAC,SACpI,IACD;AACD;;;;;;;;;;AAWA,eAAsB,wBAAwB,WAAmB,KAA8B;CAC9F,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,UAAU,qCAAqC;CACtF,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAEvH,MAAM,QAAQ,oBAAoB,EAAE;CACpC,MAAM,YAAY,IAAI,WACrB,MAAM,OAAO,OAAO,QAAQ;EAAE,IAAI,cAAc,KAAK;EAAG,MAAM;EAAW,WAAW;CAAI,GAAG,WAAW,cAAc,WAAW,SAAS,CAAC,CAAC,CAC3I;CACA,MAAM,mBAAmB,UAAU,SAAS;CAE5C,MAAM,UAAU,IAAI,WAAW,IAAI,MAAM,SAAS,KAAK,gBAAgB;CACvE,QAAQ,KAAK;CACb,QAAQ,IAAI,OAAO,CAAC;CACpB,QAAQ,IAAI,UAAU,SAAS,gBAAgB,GAAG,IAAI,MAAM,MAAM;CAClE,QAAQ,IAAI,UAAU,SAAS,GAAG,gBAAgB,GAAG,IAAI,MAAM,SAAS,EAAE;CAC1E,OAAO,kBAAkB,OAAO;AACjC;;;;;;;;;AAUA,eAAsB,wBAAwB,SAAiB,KAA8B;CAC5F,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,UAAU,qCAAqC;CACtF,MAAM,UAAU,kBAAkB,OAAO;CACzC,IAAI,QAAQ,SAAS,MAAM,QAAQ,OAAO,gCACzC,MAAM,IAAI,UAAU,yDAAyD;CAG9E,MAAM,QAAQ,QAAQ,SAAS,GAAG,EAAE;CACpC,MAAM,MAAM,QAAQ,SAAS,IAAI,EAAE;CACnC,MAAM,aAAa,QAAQ,SAAS,EAAE;CAEtC,MAAM,mBAAmB,IAAI,WAAW,WAAW,SAAS,IAAI,MAAM;CACtE,iBAAiB,IAAI,UAAU;CAC/B,iBAAiB,IAAI,KAAK,WAAW,MAAM;CAC3C,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CACvH,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;EAAE,IAAI,cAAc,KAAK;EAAG,MAAM;EAAW,WAAW;CAAI,GAC5D,WACA,cAAc,gBAAgB,CAC/B;CACA,OAAO,eAAe,CAAC,CAAC,OAAO,SAAS;AACzC;;;;;;;;;;;;;AAcA,eAAsB,uBAAuB,WAAmB,UAAkB,aAAa,yBAA0C;CACxI,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,MAAM,iBAAiB,WAAW,SAAS;CAC3C,IAAI,eAAe,SAAS,uBAC3B,MAAM,IAAI,WAAW,qCAAqC,sBAAsB,QAAQ;CAEzF,MAAM,sBAAsB,mBAAmB,UAAU;CACzD,MAAM,SAAS,iBAAiB;CAChC,MAAM,OAAO,oBAAoB,EAAE;CACnC,MAAM,KAAK,oBAAoB,EAAE;CACjC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;CAElH,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B;EAAE,MAAM;EAAW,YAAY;EAAqB,MAAM;EAAU,MAAM,cAAc,IAAI;CAAE,GAC9F,UACA;EAAE,QAAQ;EAAK,MAAM;CAAU,GAC/B,OACA,CAAC,SAAS,CACX;CAEA,MAAM,aAAa,MAAM,OAAO,OAAO,QACtC;EAAE,gBAAgB,cAAc,WAAW,sBAAsB,CAAC;EAAG,IAAI,cAAc,EAAE;EAAG,MAAM;EAAW,WAAW;CAAI,GAC5H,KACA,cACD;CAEA,OAAO;EACN;EACA,OAAO,mBAAmB;EAC1B,qBAAqB,IAAI;EACzB,qBAAqB,EAAE;EACvB,qBAAqB,IAAI,WAAW,UAAU,CAAC;CAChD,CAAC,CAAC,KAAK,GAAG;AACX;;;;;;;;;;AAWA,eAAsB,uBAAuB,SAAiB,UAAmC;CAChG,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,IAAI,QAAQ,SAAS,sBACpB,MAAM,IAAI,WAAW,mDAAmD;CAGzE,MAAM,QAAQ,QAAQ,MAAM,GAAG;CAC/B,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,wBACtC,MAAM,IAAI,UAAU,gDAAgD;CAGrE,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;EACH,aAAa,mBAAmB,OAAO,MAAM,EAAE,CAAC;EAChD,OAAO,qBAAqB,MAAM,MAAM,EAAE;EAC1C,KAAK,qBAAqB,MAAM,MAAM,EAAE;EACxC,aAAa,qBAAqB,MAAM,MAAM,EAAE;EAChD,IAAI,KAAK,WAAW,MAAM,GAAG,WAAW,MAAM,WAAW,SAAS,IACjE,MAAM,IAAI,UAAU,kDAAkD;CAExE,SAAS,OAAO;EACf,MAAM,IAAI,UAAU,kDAAkD,EAAE,MAAM,CAAC;CAChF;CAEA,MAAM,SAAS,iBAAiB;CAChC,MAAM,cAAc,eAAe;CACnC,IAAI;EACH,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;EAElH,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B;GAAE,MAAM;GAAW;GAAY,MAAM;GAAU,MAAM,cAAc,IAAI;EAAE,GACzE,UACA;GAAE,QAAQ;GAAK,MAAM;EAAU,GAC/B,OACA,CAAC,SAAS,CACX;EACA,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;GAAE,gBAAgB,cAAc,WAAW,sBAAsB,CAAC;GAAG,IAAI,cAAc,EAAE;GAAG,MAAM;GAAW,WAAW;EAAI,GAC5H,KACA,cAAc,UAAU,CACzB;EACA,OAAO,YAAY,OAAO,SAAS;CACpC,SAAS,OAAO;EACf,MAAM,IAAI,MAAM,wDAAwD,EAAE,MAAM,CAAC;CAClF;AACD;;;;;;;;AASA,eAAsB,mBAAmB,gBAAgB,MAA2B;CACnF,IAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB,QAAQ,gBAAgB,QAAQ,GAC3F,MAAM,IAAI,WAAW,6EAA6E;CAEnG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cACf,MAAM,OAAO,OAAO,YACnB;EACC,MAAM;EACN;EACA,MAAM;EACN,gBAAgB,WAAW,GAAG,GAAG,GAAG,CAAC;CACtC,GACA,MACA,CAAC,WAAW,SAAS,CACtB,CACD;CACA,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;AAUA,eAAsB,eAAe,WAAmB,cAAuC;CAC9F,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAW,MAAM;CAAW,GAAG,OAAO,CACxI,SACD,CAAC;CACD,MAAM,aAAa,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,KAAK,cAAc,WAAW,SAAS,CAAC,CAAC;CAC9G,OAAO,kBAAkB,IAAI,WAAW,UAAU,CAAC;AACpD;;;;;;;;;AAUA,eAAsB,eAAe,YAAoB,eAAwC;CAChG,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAW,MAAM;CAAW,GAAG,OAAO,CAC3I,SACD,CAAC;CACD,MAAM,YAAY,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,KAAK,cAAc,kBAAkB,UAAU,CAAC,CAAC;CACrH,OAAO,eAAe,CAAC,CAAC,OAAO,SAAS;AACzC;;;;;;;;;AAUA,eAAsB,WAAW,OAAe,eAAwC;CACvF,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAW,MAAM;CAAU,GAAG,OAAO,CAC1I,MACD,CAAC;CAED,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK;EAAE,MAAM;EAAW,YAAY;CAAG,GAAG,KAAK,cAAc,WAAW,KAAK,CAAC,CAAC;CACrH,OAAO,kBAAkB,IAAI,WAAW,SAAS,CAAC;AACnD;;;;;;;;;;AAWA,eAAsB,aAAa,OAAe,WAAmB,cAAwC;CAC5G,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAW,MAAM;CAAU,GAAG,OAAO,CACvI,QACD,CAAC;CAED,OAAO,OAAO,OAAO,OACpB;EAAE,MAAM;EAAW,YAAY;CAAG,GAClC,KACA,cAAc,kBAAkB,SAAS,CAAC,GAC1C,cAAc,WAAW,KAAK,CAAC,CAChC;AACD;;;;;;;AAQA,eAAsB,qBAAqB,aAA2B,SAA8B;CACnG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cAAc,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAS;CAAW,GAAG,MAAM,CAAC,QAAQ,QAAQ,CAAC,CAAC;CACtH,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;;AAWA,eAAsB,UAAU,OAAe,eAAuB,aAA2B,SAA0B;CAC1H,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAS;CAAW,GAAG,OAAO,CAAC,MAAM,CAAC;CAE5I,MAAM,OAAO,eAAe,UAAU,YAAY,eAAe,UAAU,YAAY;CACvF,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK;EAAE;EAAM,MAAM;CAAQ,GAAG,KAAK,cAAc,WAAW,KAAK,CAAC,CAAC;CACzG,OAAO,kBAAkB,IAAI,WAAW,SAAS,CAAC;AACnD;;;;;;;;;;AAWA,eAAsB,YAAY,OAAe,WAAmB,cAAsB,aAA2B,SAA2B;CAC/I,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAS;CAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;CAE3I,MAAM,OAAO,eAAe,UAAU,YAAY,eAAe,UAAU,YAAY;CACvF,OAAO,OAAO,OAAO,OAAO;EAAE;EAAM,MAAM;CAAQ,GAAG,KAAK,cAAc,kBAAkB,SAAS,CAAC,GAAG,cAAc,WAAW,KAAK,CAAC,CAAC;AACxI;;;;;;;AAQA,eAAsB,oBAAoB,aAA2B,SAA8B;CAClG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cAAc,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAQ;CAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;CACjH,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;;AAWA,eAAsB,iBAAiB,eAAuB,cAAsB,aAA2B,SAA8B;CAC5I,MAAM,SAAS,iBAAiB;CAChC,MAAM,CAAC,YAAY,aAAa,MAAM,QAAQ,IAAI,CACjD,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAQ;CAAW,GAAG,OAAO,CAAC,YAAY,CAAC,GAC/H,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAQ;CAAW,GAAG,OAAO,CAAC,CAAC,CACjH,CAAC;CAED,MAAM,YAAY,eAAe,UAAU,MAAM,eAAe,UAAU,MAAM;CAChF,MAAM,SAAS,MAAM,OAAO,OAAO,WAAW;EAAE,MAAM;EAAQ,QAAQ;CAAU,GAAG,YAAY,SAAS;CACxG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;;;;AAWA,eAAsB,oBAAoB,eAAuB,cAAsB,aAA2B,SAA8B;CAC/I,MAAM,SAAS,MAAM,iBAAiB,eAAe,cAAc,UAAU;CAC7E,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,MAAM,CAAC;CACtF,OAAO,IAAI,WAAW,MAAM;AAC7B"}