@happier-dev/stack 0.2.1-preview.1775586714.26562 → 0.2.11

package/node_modules/@happier-dev/protocol/dist/connect/normalizeConnectedServiceSelectionInput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeConnectedServiceSelectionInput.js","sourceRoot":"","sources":["../../src/connect/normalizeConnectedServiceSelectionInput.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,iCAAiC,EACjC,gCAAgC,EAChC,wBAAwB,EACxB,+BAA+B,GAIlC,MAAM,+BAA+B,CAAC;AA4CvC,MAAM,mBAAmB,GACrB,2EAA2E;MACzE,0FAA0F;MAC1F,4EAA4E;MAC5E,mCAAmC,CAAC;AAE1C,SAAS,OAAO,CAAC,MAAc;IAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,mBAAmB,EAAE,EAAE,CAAC;AACpE,CAAC;AAUD,SAAS,mBAAmB,CAAC,QAAgB;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAElE,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,aAAa,GAAG,wBAAwB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACvE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,iCAAiC,YAAY,IAAI,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC;IAErC,qFAAqF;IACrF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,aAAa,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC,IAAI,SAAS,gCAAgC,CAAC,CAAC;QAC7F,IAAI,aAAa,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,IAAI,SAAS,oCAAoC,CAAC,CAAC;QACnG,4BAA4B;QAC5B,MAAM,aAAa,GAAG,+BAA+B,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC/E,IAAI,CAAC,aAAa,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,uBAAuB,aAAa,IAAI,CAAC,CAAC;QACrF,OAAO;YACH,EAAE,EAAE,IAAI;YACR,SAAS;YACT,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE;SACtH,CAAC;IACN,CAAC;IAED,oBAAoB;IACpB,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;QAC5B,qFAAqF;QACrF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,qBAAqB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACvH,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,iCAAiC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,CAAC,WAAW,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAAC,CAAC;QAC9E,OAAO;YACH,EAAE,EAAE,IAAI;YACR,SAAS;YACT,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE;SAChH,CAAC;IACN,CAAC;IAED,oFAAoF;IACpF,0FAA0F;IAC1F,MAAM,YAAY,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvG,MAAM,aAAa,GAAG,+BAA+B,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC9E,IAAI,CAAC,aAAa,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,uBAAuB,YAAY,IAAI,CAAC,CAAC;IACpF,OAAO;QACH,EAAE,EAAE,IAAI;QACR,SAAS;QACT,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE;KACtH,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAC9C,MAAM,mBAAmB,GAAuD,EAAE,CAAC;IACnF,MAAM,iBAAiB,GAAyB,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,6FAA6F;QAC7F,4FAA4F;QAC5F,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,oCAAoC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzC,SAAS;QACb,CAAC;QACD,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;IACnE,CAAC;IAED,IAAI,QAAgD,CAAC;IACrD,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,uCAAuC,CAAC,CAAC;QAC7E,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,uCAAuC,CACnD,KAAc;IAEd,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YACnD,OAAO,OAAO,CAAC,mDAAmD,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,eAAe,CAAC,KAAiB,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,gDAAgD;QAChD,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;QAC/F,CAAC;QACD,OAAO,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,OAAO,CAAC,gDAAgD,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6CAA6C,CACzD,KAAc;IAEd,MAAM,UAAU,GAAG,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,UAAU,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACjE,OAAO,OAAO,CACV,iCAAiC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B;cAClG,+EAA+E,CACpF,CAAC;IACN,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;AACvD,CAAC"}

package/node_modules/@happier-dev/protocol/dist/crypto/accountScopedCipher.d.ts

@@ -1,4 +1,4 @@
-export type AccountScopedBlobKind = 'account_settings' | 'automation_template_payload' | 'connected_service_credential' | 'connected_service_quota_snapshot';
+export type AccountScopedBlobKind = 'account_settings' | 'automation_template_payload' | 'connected_service_credential' | 'connected_service_quota_snapshot' | 'provider_account_usage_snapshot' | 'session_organization_display' | 'session_first_intent' | 'session_respawn_environment' | 'action_operation_snapshot' | 'account_session_draft_private_payload';
 export type AccountScopedCryptoMaterial = Readonly<{
     type: 'legacy';
     secret: Uint8Array;
@@ -11,6 +11,7 @@ export type AccountScopedOpenResult = Readonly<{
     format: AccountScopedCiphertextFormat;
     value: unknown;
 }> | null;
+export declare function accountScopedCiphertextBase64LengthForPlaintextBytes(plaintextBytes: number): number;
 export declare function deriveAccountMachineKeyFromRecoverySecret(recoverySecret: Uint8Array): Uint8Array;
 export declare function sealAccountScopedBlobCiphertext(params: {
     kind: AccountScopedBlobKind;

package/node_modules/@happier-dev/protocol/dist/crypto/accountScopedCipher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accountScopedCipher.d.ts","sourceRoot":"","sources":["../../src/crypto/accountScopedCipher.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,qBAAqB,GAC7B,kBAAkB,GAClB,6BAA6B,GAC7B,8BAA8B,GAC9B,kCAAkC,CAAC;AAEvC,MAAM,MAAM,2BAA2B,GACnC,QAAQ,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC,GAChD,QAAQ,CAAC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAE1D,MAAM,MAAM,6BAA6B,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAErF,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,CAAC;IAAE,MAAM,EAAE,6BAA6B,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,GACnE,IAAI,CAAC;AAmBT,wBAAgB,yCAAyC,CAAC,cAAc,EAAE,UAAU,GAAG,UAAU,CAIhG;AAsBD,wBAAgB,+BAA+B,CAAC,MAAM,EAAE;IACtD,IAAI,EAAE,qBAAqB,CAAC;IAC5B,QAAQ,EAAE,2BAA2B,CAAC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC;CAC7C,GAAG,MAAM,CAuBT;AAED,wBAAgB,+BAA+B,CAAC,MAAM,EAAE;IACtD,IAAI,EAAE,qBAAqB,CAAC;IAC5B,QAAQ,EAAE,2BAA2B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,uBAAuB,CA2D1B"}
+{"version":3,"file":"accountScopedCipher.d.ts","sourceRoot":"","sources":["../../src/crypto/accountScopedCipher.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,qBAAqB,GAC7B,kBAAkB,GAClB,6BAA6B,GAC7B,8BAA8B,GAC9B,kCAAkC,GAClC,iCAAiC,GACjC,8BAA8B,GAC9B,sBAAsB,GACtB,6BAA6B,GAC7B,2BAA2B,GAC3B,uCAAuC,CAAC;AAE5C,MAAM,MAAM,2BAA2B,GACnC,QAAQ,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC,GAChD,QAAQ,CAAC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAE1D,MAAM,MAAM,6BAA6B,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAErF,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,CAAC;IAAE,MAAM,EAAE,6BAA6B,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,GACnE,IAAI,CAAC;AAIT,wBAAgB,oDAAoD,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAMnG;AA2BD,wBAAgB,yCAAyC,CAAC,cAAc,EAAE,UAAU,GAAG,UAAU,CAIhG;AAsBD,wBAAgB,+BAA+B,CAAC,MAAM,EAAE;IACtD,IAAI,EAAE,qBAAqB,CAAC;IAC5B,QAAQ,EAAE,2BAA2B,CAAC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC;CAC7C,GAAG,MAAM,CA0BT;AAED,wBAAgB,+BAA+B,CAAC,MAAM,EAAE;IACtD,IAAI,EAAE,qBAAqB,CAAC;IAC5B,QAAQ,EAAE,2BAA2B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,uBAAuB,CA2D1B"}

package/node_modules/@happier-dev/protocol/dist/crypto/accountScopedCipher.js

@@ -5,12 +5,28 @@ import { decodeBase64, encodeBase64 } from './base64.js';
 import { deriveKey } from './keyDerivation.js';
 import { parseSerializedJsonValue } from './serializedJsonValue.js';
 const ACCOUNT_SCOPED_MAGIC_V1 = 0xa1;
+export function accountScopedCiphertextBase64LengthForPlaintextBytes(plaintextBytes) {
+    if (!Number.isSafeInteger(plaintextBytes) || plaintextBytes < 0) {
+        throw new Error(`Invalid account-scoped plaintext byte length: ${plaintextBytes}`);
+    }
+    const ciphertextBytes = 2 + tweetnacl.secretbox.nonceLength + tweetnacl.secretbox.overheadLength + plaintextBytes;
+    return 4 * Math.ceil(ciphertextBytes / 3);
+}
 const ACCOUNT_SCOPED_KIND_BYTE = {
     account_settings: 1,
     automation_template_payload: 2,
     connected_service_credential: 3,
     connected_service_quota_snapshot: 4,
+    session_respawn_environment: 5,
+    provider_account_usage_snapshot: 6,
+    session_organization_display: 7,
+    session_first_intent: 8,
+    action_operation_snapshot: 9,
+    account_session_draft_private_payload: 10,
 };
+const LEGACY_READ_ONLY_ACCOUNT_SCOPED_BLOB_KINDS = new Set([
+    'connected_service_quota_snapshot',
+]);
 function encodeUtf8(value) {
     return new TextEncoder().encode(value);
 }
@@ -41,6 +57,9 @@ function tryParseJson(value) {
     }
 }
 export function sealAccountScopedBlobCiphertext(params) {
+    if (LEGACY_READ_ONLY_ACCOUNT_SCOPED_BLOB_KINDS.has(params.kind)) {
+        throw new Error(`Account-scoped blob kind ${params.kind} is legacy read-only and cannot be sealed`);
+    }
     const kindByte = ACCOUNT_SCOPED_KIND_BYTE[params.kind];
     if (!Number.isFinite(kindByte)) {
         throw new Error(`Unsupported account-scoped blob kind: ${String(params.kind)}`);

package/node_modules/@happier-dev/protocol/dist/crypto/accountScopedCipher.js.map

@@ -1 +1 @@
-{"version":3,"file":"accountScopedCipher.js","sourceRoot":"","sources":["../../src/crypto/accountScopedCipher.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAkBpE,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,MAAM,wBAAwB,GAA0C;IACtE,gBAAgB,EAAE,CAAC;IACnB,2BAA2B,EAAE,CAAC;IAC9B,4BAA4B,EAAE,CAAC;IAC/B,gCAAgC,EAAE,CAAC;CACpC,CAAC;AAEF,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,GAAe,EAAE,IAAgB;IACnD,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,cAA0B;IAClF,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,EAAE,eAAe,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5E,mGAAmG;IACnG,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAqC;IAC9D,OAAO,QAAQ,CAAC,IAAI,KAAK,SAAS;QAChC,CAAC,CAAC,QAAQ,CAAC,UAAU;QACrB,CAAC,CAAC,yCAAyC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,+BAA+B,CAAC,MAA+D;IACtG,MAAM,IAAI,GAAG,UAAU,CAAC,0BAA0B,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;IACpE,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAK/C;IACC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,+BAA+B,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAE9D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,GAAG,CAAC,CAAC,CAAC,GAAG,uBAAuB,CAAC;IACjC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;IAClB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAEjC,OAAO,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAI/C;IACC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEtD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,uBAAuB,EAAE,CAAC;QACrG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,+BAA+B,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,2BAA2B;IAC3B,iEAAiE;IACjE,2EAA2E;IAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,GAAG,EAAE,EAAE,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAE3D,MAAM,UAAU,GAAiB,EAAE,CAAC;IACpC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"accountScopedCipher.js","sourceRoot":"","sources":["../../src/crypto/accountScopedCipher.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAwBpE,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,MAAM,UAAU,oDAAoD,CAAC,cAAsB;IACzF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,cAAc,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,eAAe,GAAG,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,cAAc,GAAG,cAAc,CAAC;IAClH,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,wBAAwB,GAA0C;IACtE,gBAAgB,EAAE,CAAC;IACnB,2BAA2B,EAAE,CAAC;IAC9B,4BAA4B,EAAE,CAAC;IAC/B,gCAAgC,EAAE,CAAC;IACnC,2BAA2B,EAAE,CAAC;IAC9B,+BAA+B,EAAE,CAAC;IAClC,4BAA4B,EAAE,CAAC;IAC/B,oBAAoB,EAAE,CAAC;IACvB,yBAAyB,EAAE,CAAC;IAC5B,qCAAqC,EAAE,EAAE;CAC1C,CAAC;AAEF,MAAM,0CAA0C,GAAG,IAAI,GAAG,CAAwB;IAChF,kCAAkC;CACnC,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,GAAe,EAAE,IAAgB;IACnD,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,cAA0B;IAClF,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,EAAE,eAAe,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5E,mGAAmG;IACnG,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAqC;IAC9D,OAAO,QAAQ,CAAC,IAAI,KAAK,SAAS;QAChC,CAAC,CAAC,QAAQ,CAAC,UAAU;QACrB,CAAC,CAAC,yCAAyC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,+BAA+B,CAAC,MAA+D;IACtG,MAAM,IAAI,GAAG,UAAU,CAAC,0BAA0B,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;IACpE,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAK/C;IACC,IAAI,0CAA0C,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,2CAA2C,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,+BAA+B,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAE9D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,GAAG,CAAC,CAAC,CAAC,GAAG,uBAAuB,CAAC;IACjC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;IAClB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAEjC,OAAO,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAI/C;IACC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEtD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,uBAAuB,EAAE,CAAC;QACrG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,+BAA+B,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,2BAA2B;IAC3B,iEAAiE;IACjE,2EAA2E;IAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,GAAG,EAAE,EAAE,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAE3D,MAAM,UAAU,GAAiB,EAAE,CAAC;IACpC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@happier-dev/protocol/dist/crypto/base64.d.ts

@@ -1,4 +1,5 @@
 export type Base64Variant = 'base64' | 'base64url';
+export declare function readCanonicalPaddedBase64DecodedLength(input: string): number | null;
 export declare function encodeBase64(bytes: Uint8Array, variant?: Base64Variant): string;
 export declare function decodeBase64(base64: string, variant?: Base64Variant): Uint8Array;
 //# sourceMappingURL=base64.d.ts.map

package/node_modules/@happier-dev/protocol/dist/crypto/base64.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../src/crypto/base64.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,CAAC;AA0BnD,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,GAAE,aAAwB,GAAG,MAAM,CASzF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,aAAwB,GAAG,UAAU,CAG1F"}
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../src/crypto/base64.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEnD,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwBnF;AAgCD,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,GAAE,aAAwB,GAAG,MAAM,CASzF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,aAAwB,GAAG,UAAU,CAG1F"}

package/node_modules/@happier-dev/protocol/dist/crypto/base64.js

@@ -1,5 +1,39 @@
 import { fromByteArray, toByteArray } from 'base64-js';
+export function readCanonicalPaddedBase64DecodedLength(input) {
+    if (input.length % 4 !== 0)
+        return null;
+    let paddingStart = input.length;
+    for (let index = 0; index < input.length; index += 1) {
+        const code = input.charCodeAt(index);
+        const isAlphabet = (code >= 65 && code <= 90)
+            || (code >= 97 && code <= 122)
+            || (code >= 48 && code <= 57)
+            || code === 43
+            || code === 47;
+        if (isAlphabet) {
+            if (paddingStart !== input.length)
+                return null;
+            continue;
+        }
+        if (code !== 61)
+            return null;
+        if (paddingStart === input.length) {
+            paddingStart = index;
+        }
+        if (index < input.length - 2)
+            return null;
+    }
+    const paddingLength = input.length - paddingStart;
+    if (paddingLength > 2)
+        return null;
+    return (input.length / 4) * 3 - paddingLength;
+}
 function normalizeBase64ForDecoding(input, variant) {
+    if (variant === 'base64') {
+        if (readCanonicalPaddedBase64DecodedLength(input) !== null) {
+            return input;
+        }
+    }
     let normalized = input.replace(/\s+/g, '');
     if (variant === 'base64url') {
         normalized = normalized.replace(/-/g, '+').replace(/_/g, '/');

package/node_modules/@happier-dev/protocol/dist/crypto/base64.js.map

@@ -1 +1 @@
-{"version":3,"file":"base64.js","sourceRoot":"","sources":["../../src/crypto/base64.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAIvD,SAAS,0BAA0B,CAAC,KAAa,EAAE,OAAsB;IACvE,IAAI,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,sEAAsE;IACtE,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAEvD,6EAA6E;IAC7E,qEAAqE;IACrE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACZ,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,UAAyB,QAAQ;IAC/E,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,MAAM;aACV,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,UAAyB,QAAQ;IAC5E,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC"}
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../../src/crypto/base64.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAIvD,MAAM,UAAU,sCAAsC,CAAC,KAAa;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,UAAU,GACd,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;eACvB,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC;eAC3B,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;eAC1B,IAAI,KAAK,EAAE;eACX,IAAI,KAAK,EAAE,CAAC;QACjB,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,YAAY,KAAK,KAAK,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,YAAY,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,YAAY,GAAG,KAAK,CAAC;QACvB,CAAC;QACD,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC;IAClD,IAAI,aAAa,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC;AAChD,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa,EAAE,OAAsB;IACvE,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,IAAI,sCAAsC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,sEAAsE;IACtE,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAEvD,6EAA6E;IAC7E,qEAAqE;IACrE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACZ,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,OAAO,GAAkB,QAAQ;IAC/E,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,MAAM;aACV,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,OAAO,GAAkB,QAAQ;IAC5E,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC"}

package/node_modules/@happier-dev/protocol/dist/crypto/canonicalDigest.d.ts

@@ -0,0 +1,3 @@
+export declare function encodeCanonicalLengthDelimited(parts: readonly (string | Uint8Array)[]): Uint8Array;
+export declare function computeCanonicalDomainSeparatedDigest(domain: string, parts: readonly (string | Uint8Array)[]): string;
+//# sourceMappingURL=canonicalDigest.d.ts.map

package/node_modules/@happier-dev/protocol/dist/crypto/canonicalDigest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalDigest.d.ts","sourceRoot":"","sources":["../../src/crypto/canonicalDigest.ts"],"names":[],"mappings":"AAMA,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,GACtC,UAAU,CAaZ;AAED,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,GACtC,MAAM,CAER"}

package/node_modules/@happier-dev/protocol/dist/crypto/canonicalDigest.js

@@ -0,0 +1,21 @@
+import { sha256 } from '@noble/hashes/sha2';
+import { encodeBase64 } from './base64.js';
+const textEncoder = new TextEncoder();
+export function encodeCanonicalLengthDelimited(parts) {
+    const encodedParts = parts.map((part) => typeof part === 'string' ? textEncoder.encode(part) : part);
+    const totalLength = encodedParts.reduce((sum, part) => sum + 4 + part.length, 0);
+    const output = new Uint8Array(totalLength);
+    const view = new DataView(output.buffer);
+    let offset = 0;
+    for (const part of encodedParts) {
+        view.setUint32(offset, part.length, false);
+        offset += 4;
+        output.set(part, offset);
+        offset += part.length;
+    }
+    return output;
+}
+export function computeCanonicalDomainSeparatedDigest(domain, parts) {
+    return encodeBase64(sha256(encodeCanonicalLengthDelimited([domain, ...parts])), 'base64url');
+}
+//# sourceMappingURL=canonicalDigest.js.map

package/node_modules/@happier-dev/protocol/dist/crypto/canonicalDigest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalDigest.js","sourceRoot":"","sources":["../../src/crypto/canonicalDigest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,UAAU,8BAA8B,CAC5C,KAAuC;IAEvC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrG,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,MAAc,EACd,KAAuC;IAEvC,OAAO,YAAY,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AAC/F,CAAC"}

package/node_modules/@happier-dev/protocol/dist/crypto/cryptoGoldenVectors.d.ts

@@ -0,0 +1,93 @@
+export declare const CRYPTO_GOLDEN_VECTORS: {
+    readonly schema: 'happier.cryptoGoldenVectors.v1';
+    readonly boxBundle: {
+        readonly directSecretKey: {
+            readonly recipientSecretKeyOrSeed: {
+                readonly hex: '0909090909090909090909090909090909090909090909090909090909090909';
+            };
+            readonly recipientPublicKey: {
+                readonly hex: '57db4b359f23ae5e146e4e2512056704722506348c150c14753d0c933d04d421';
+            };
+            readonly plaintext: {
+                readonly hex: '0303030303030303030303030303030303030303030303030303030303030303';
+            };
+            readonly bundle: {
+                readonly hex: '07a37cbc142093c8b755dc1b10e86cb426374ad16aa853ed0bdfc0b2b86d1c7c2122232425262728292a2b2c2d2e2f30313233343536373859c1c234f45efd03c1ab22b9b03f8b3feb1276a05a7868f0c6a9c8bfcd0423033d6aea6e047523bc7413ee42040d1677';
+            };
+        };
+        readonly compatibilitySeed: {
+            readonly recipientSecretKeyOrSeed: {
+                readonly hex: '0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b';
+            };
+            readonly recipientPublicKey: {
+                readonly hex: '4bbe6e226acfc43639d01ed291b5c65746c660d046071ca76eacc518bdae0819';
+            };
+            readonly plaintext: {
+                readonly hex: '0707070707070707070707070707070707070707070707070707070707070707';
+            };
+            readonly bundle: {
+                readonly hex: '07a37cbc142093c8b755dc1b10e86cb426374ad16aa853ed0bdfc0b2b86d1c7c2122232425262728292a2b2c2d2e2f303132333435363738f427df224168af852aee33ba83373277a78e69b82653cae4c31bf92707cc7d03dfd549ca06b072d61318b94ad3ff8c80';
+            };
+        };
+        readonly malformedBundle: {
+            readonly hex: '010203';
+        };
+    };
+    readonly encryptedDataKeyEnvelopeV1: {
+        readonly directSecretKey: {
+            readonly recipientSecretKeyOrSeed: {
+                readonly hex: '0909090909090909090909090909090909090909090909090909090909090909';
+            };
+            readonly recipientPublicKey: {
+                readonly hex: '57db4b359f23ae5e146e4e2512056704722506348c150c14753d0c933d04d421';
+            };
+            readonly dataKey: {
+                readonly hex: '0404040404040404040404040404040404040404040404040404040404040404';
+            };
+            readonly envelope: {
+                readonly hex: '0007a37cbc142093c8b755dc1b10e86cb426374ad16aa853ed0bdfc0b2b86d1c7c2122232425262728292a2b2c2d2e2f3031323334353637387c08c8f85db24be438ff0be65a8f9599ec1571a75d7f6ff7c1aecfb8ca0324043a6ded69037224bb7314e945030a1170';
+            };
+        };
+        readonly compatibilitySeed: {
+            readonly recipientSecretKeyOrSeed: {
+                readonly hex: '0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b';
+            };
+            readonly recipientPublicKey: {
+                readonly hex: '4bbe6e226acfc43639d01ed291b5c65746c660d046071ca76eacc518bdae0819';
+            };
+            readonly dataKey: {
+                readonly hex: '0101010101010101010101010101010101010101010101010101010101010101';
+            };
+            readonly envelope: {
+                readonly hex: '0007a37cbc142093c8b755dc1b10e86cb426374ad16aa853ed0bdfc0b2b86d1c7c2122232425262728292a2b2c2d2e2f3031323334353637387e1905a028d044ade8c2bec4c04b6973a1886fbe2055cce2c51dff2101ca7b05d9d34fcc00b674d0151ebf4cd5f98a86';
+            };
+        };
+        readonly malformedEnvelope: {
+            readonly hex: '000102';
+        };
+        readonly unsupportedVersionEnvelope: {
+            readonly hex: '630102';
+        };
+    };
+    readonly serializedJsonValue: readonly [{
+        readonly name: 'object';
+        readonly serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":{"ok":true,"count":2,"nested":["a",null]}}';
+    }, {
+        readonly name: 'array';
+        readonly serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":["x",1,false]}';
+    }, {
+        readonly name: 'string';
+        readonly serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":"hello"}';
+    }, {
+        readonly name: 'number';
+        readonly serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":42}';
+    }, {
+        readonly name: 'nullValue';
+        readonly serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":null}';
+    }, {
+        readonly name: 'undefinedValue';
+        readonly serialized: '{"__happierSerializedJsonValueV1":true,"type":"undefined"}';
+    }];
+};
+export type CryptoGoldenVectors = typeof CRYPTO_GOLDEN_VECTORS;
+//# sourceMappingURL=cryptoGoldenVectors.d.ts.map

package/node_modules/@happier-dev/protocol/dist/crypto/cryptoGoldenVectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoGoldenVectors.d.ts","sourceRoot":"","sources":["../../src/crypto/cryptoGoldenVectors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB;aAChC,MAAM,EAAE,gCAAgC;aACxC,SAAS;iBACP,eAAe;qBACb,wBAAwB;yBACtB,GAAG,EAAE,kEAAkE;;qBAEzE,kBAAkB;yBAChB,GAAG,EAAE,kEAAkE;;qBAEzE,SAAS;yBACP,GAAG,EAAE,kEAAkE;;qBAEzE,MAAM;yBACJ,GAAG,EAAE,kNAAkN;;;iBAG3N,iBAAiB;qBACf,wBAAwB;yBACtB,GAAG,EAAE,kEAAkE;;qBAEzE,kBAAkB;yBAChB,GAAG,EAAE,kEAAkE;;qBAEzE,SAAS;yBACP,GAAG,EAAE,kEAAkE;;qBAEzE,MAAM;yBACJ,GAAG,EAAE,kNAAkN;;;iBAG3N,eAAe;qBACb,GAAG,EAAE,QAAQ;;;aAGjB,0BAA0B;iBACxB,eAAe;qBACb,wBAAwB;yBACtB,GAAG,EAAE,kEAAkE;;qBAEzE,kBAAkB;yBAChB,GAAG,EAAE,kEAAkE;;qBAEzE,OAAO;yBACL,GAAG,EAAE,kEAAkE;;qBAEzE,QAAQ;yBACN,GAAG,EAAE,oNAAoN;;;iBAG7N,iBAAiB;qBACf,wBAAwB;yBACtB,GAAG,EAAE,kEAAkE;;qBAEzE,kBAAkB;yBAChB,GAAG,EAAE,kEAAkE;;qBAEzE,OAAO;yBACL,GAAG,EAAE,kEAAkE;;qBAEzE,QAAQ;yBACN,GAAG,EAAE,oNAAoN;;;iBAG7N,iBAAiB;qBACf,GAAG,EAAE,QAAQ;;iBAEf,0BAA0B;qBACxB,GAAG,EAAE,QAAQ;;;aAGjB,mBAAmB;iBAEf,IAAI,EAAE,QAAQ;iBACd,UAAU,EAAE,yGAAyG;;iBAGrH,IAAI,EAAE,OAAO;iBACb,UAAU,EAAE,6EAA6E;;iBAGzF,IAAI,EAAE,QAAQ;iBACd,UAAU,EAAE,uEAAuE;;iBAGnF,IAAI,EAAE,QAAQ;iBACd,UAAU,EAAE,kEAAkE;;iBAG9E,IAAI,EAAE,WAAW;iBACjB,UAAU,EAAE,oEAAoE;;iBAGhF,IAAI,EAAE,gBAAgB;iBACtB,UAAU,EAAE,4DAA4D;;CAGpE,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,OAAO,qBAAqB,CAAC"}

package/node_modules/@happier-dev/protocol/dist/crypto/cryptoGoldenVectors.js

@@ -0,0 +1,99 @@
+export const CRYPTO_GOLDEN_VECTORS = {
+    schema: 'happier.cryptoGoldenVectors.v1',
+    boxBundle: {
+        directSecretKey: {
+            recipientSecretKeyOrSeed: {
+                hex: '0909090909090909090909090909090909090909090909090909090909090909',
+            },
+            recipientPublicKey: {
+                hex: '57db4b359f23ae5e146e4e2512056704722506348c150c14753d0c933d04d421',
+            },
+            plaintext: {
+                hex: '0303030303030303030303030303030303030303030303030303030303030303',
+            },
+            bundle: {
+                hex: '07a37cbc142093c8b755dc1b10e86cb426374ad16aa853ed0bdfc0b2b86d1c7c2122232425262728292a2b2c2d2e2f30313233343536373859c1c234f45efd03c1ab22b9b03f8b3feb1276a05a7868f0c6a9c8bfcd0423033d6aea6e047523bc7413ee42040d1677',
+            },
+        },
+        compatibilitySeed: {
+            recipientSecretKeyOrSeed: {
+                hex: '0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b',
+            },
+            recipientPublicKey: {
+                hex: '4bbe6e226acfc43639d01ed291b5c65746c660d046071ca76eacc518bdae0819',
+            },
+            plaintext: {
+                hex: '0707070707070707070707070707070707070707070707070707070707070707',
+            },
+            bundle: {
+                hex: '07a37cbc142093c8b755dc1b10e86cb426374ad16aa853ed0bdfc0b2b86d1c7c2122232425262728292a2b2c2d2e2f303132333435363738f427df224168af852aee33ba83373277a78e69b82653cae4c31bf92707cc7d03dfd549ca06b072d61318b94ad3ff8c80',
+            },
+        },
+        malformedBundle: {
+            hex: '010203',
+        },
+    },
+    encryptedDataKeyEnvelopeV1: {
+        directSecretKey: {
+            recipientSecretKeyOrSeed: {
+                hex: '0909090909090909090909090909090909090909090909090909090909090909',
+            },
+            recipientPublicKey: {
+                hex: '57db4b359f23ae5e146e4e2512056704722506348c150c14753d0c933d04d421',
+            },
+            dataKey: {
+                hex: '0404040404040404040404040404040404040404040404040404040404040404',
+            },
+            envelope: {
+                hex: '0007a37cbc142093c8b755dc1b10e86cb426374ad16aa853ed0bdfc0b2b86d1c7c2122232425262728292a2b2c2d2e2f3031323334353637387c08c8f85db24be438ff0be65a8f9599ec1571a75d7f6ff7c1aecfb8ca0324043a6ded69037224bb7314e945030a1170',
+            },
+        },
+        compatibilitySeed: {
+            recipientSecretKeyOrSeed: {
+                hex: '0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b',
+            },
+            recipientPublicKey: {
+                hex: '4bbe6e226acfc43639d01ed291b5c65746c660d046071ca76eacc518bdae0819',
+            },
+            dataKey: {
+                hex: '0101010101010101010101010101010101010101010101010101010101010101',
+            },
+            envelope: {
+                hex: '0007a37cbc142093c8b755dc1b10e86cb426374ad16aa853ed0bdfc0b2b86d1c7c2122232425262728292a2b2c2d2e2f3031323334353637387e1905a028d044ade8c2bec4c04b6973a1886fbe2055cce2c51dff2101ca7b05d9d34fcc00b674d0151ebf4cd5f98a86',
+            },
+        },
+        malformedEnvelope: {
+            hex: '000102',
+        },
+        unsupportedVersionEnvelope: {
+            hex: '630102',
+        },
+    },
+    serializedJsonValue: [
+        {
+            name: 'object',
+            serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":{"ok":true,"count":2,"nested":["a",null]}}',
+        },
+        {
+            name: 'array',
+            serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":["x",1,false]}',
+        },
+        {
+            name: 'string',
+            serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":"hello"}',
+        },
+        {
+            name: 'number',
+            serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":42}',
+        },
+        {
+            name: 'nullValue',
+            serialized: '{"__happierSerializedJsonValueV1":true,"type":"json","value":null}',
+        },
+        {
+            name: 'undefinedValue',
+            serialized: '{"__happierSerializedJsonValueV1":true,"type":"undefined"}',
+        },
+    ],
+};
+//# sourceMappingURL=cryptoGoldenVectors.js.map

package/node_modules/@happier-dev/protocol/dist/crypto/cryptoGoldenVectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoGoldenVectors.js","sourceRoot":"","sources":["../../src/crypto/cryptoGoldenVectors.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,MAAM,EAAE,gCAAgC;IACxC,SAAS,EAAE;QACT,eAAe,EAAE;YACf,wBAAwB,EAAE;gBACxB,GAAG,EAAE,kEAAkE;aACxE;YACD,kBAAkB,EAAE;gBAClB,GAAG,EAAE,kEAAkE;aACxE;YACD,SAAS,EAAE;gBACT,GAAG,EAAE,kEAAkE;aACxE;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,kNAAkN;aACxN;SACF;QACD,iBAAiB,EAAE;YACjB,wBAAwB,EAAE;gBACxB,GAAG,EAAE,kEAAkE;aACxE;YACD,kBAAkB,EAAE;gBAClB,GAAG,EAAE,kEAAkE;aACxE;YACD,SAAS,EAAE;gBACT,GAAG,EAAE,kEAAkE;aACxE;YACD,MAAM,EAAE;gBACN,GAAG,EAAE,kNAAkN;aACxN;SACF;QACD,eAAe,EAAE;YACf,GAAG,EAAE,QAAQ;SACd;KACF;IACD,0BAA0B,EAAE;QAC1B,eAAe,EAAE;YACf,wBAAwB,EAAE;gBACxB,GAAG,EAAE,kEAAkE;aACxE;YACD,kBAAkB,EAAE;gBAClB,GAAG,EAAE,kEAAkE;aACxE;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,kEAAkE;aACxE;YACD,QAAQ,EAAE;gBACR,GAAG,EAAE,oNAAoN;aAC1N;SACF;QACD,iBAAiB,EAAE;YACjB,wBAAwB,EAAE;gBACxB,GAAG,EAAE,kEAAkE;aACxE;YACD,kBAAkB,EAAE;gBAClB,GAAG,EAAE,kEAAkE;aACxE;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,kEAAkE;aACxE;YACD,QAAQ,EAAE;gBACR,GAAG,EAAE,oNAAoN;aAC1N;SACF;QACD,iBAAiB,EAAE;YACjB,GAAG,EAAE,QAAQ;SACd;QACD,0BAA0B,EAAE;YAC1B,GAAG,EAAE,QAAQ;SACd;KACF;IACD,mBAAmB,EAAE;QACnB;YACE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,yGAAyG;SACtH;QACD;YACE,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,6EAA6E;SAC1F;QACD;YACE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,uEAAuE;SACpF;QACD;YACE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,kEAAkE;SAC/E;QACD;YACE,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,oEAAoE;SACjF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,4DAA4D;SACzE;KACF;CACO,CAAC"}

package/node_modules/@happier-dev/protocol/dist/crypto/publicShareCapabilityUrl.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Returns a log-safe representation of a URL that may contain a public-share
+ * bearer capability.
+ */
+export declare function redactPublicShareCapabilityUrl(rawUrl: string): string;
+//# sourceMappingURL=publicShareCapabilityUrl.d.ts.map

package/node_modules/@happier-dev/protocol/dist/crypto/publicShareCapabilityUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicShareCapabilityUrl.d.ts","sourceRoot":"","sources":["../../src/crypto/publicShareCapabilityUrl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAKrE"}

package/node_modules/@happier-dev/protocol/dist/crypto/publicShareCapabilityUrl.js

@@ -0,0 +1,8 @@
+/**
+ * Returns a log-safe representation of a URL that may contain a public-share
+ * bearer capability.
+ */
+export function redactPublicShareCapabilityUrl(rawUrl) {
+    return rawUrl.replace(/(\/(?:v1\/public-share|share)\/)([^/?#\s]+)/g, "$1:token");
+}
+//# sourceMappingURL=publicShareCapabilityUrl.js.map

package/node_modules/@happier-dev/protocol/dist/crypto/publicShareCapabilityUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicShareCapabilityUrl.js","sourceRoot":"","sources":["../../src/crypto/publicShareCapabilityUrl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAAc;IAC3D,OAAO,MAAM,CAAC,OAAO,CACnB,8CAA8C,EAC9C,UAAU,CACX,CAAC;AACJ,CAAC"}

package/node_modules/@happier-dev/protocol/dist/crypto/publicShareEncryptedDataKeyEnvelopeV0.d.ts

@@ -0,0 +1,17 @@
+export declare const PUBLIC_SHARE_DATA_ENCRYPTION_KEY_BYTES = 32;
+export declare const PUBLIC_SHARE_ENCRYPTED_DATA_KEY_LEGACY_V0_BYTES: number;
+export declare const PUBLIC_SHARE_ENCRYPTED_DATA_KEY_CURRENT_V0_BYTES: number;
+export type PublicShareEncryptedDataKeyEnvelopeV0 = Readonly<{
+    format: 'legacy-json' | 'serialized-json-v1';
+    encryptedDataKey: Uint8Array<ArrayBuffer>;
+}>;
+/**
+ * Parses the public-share v0 SecretBox envelope structurally.
+ *
+ * The token-derived SecretBox key is intentionally unavailable to the server,
+ * so authenticity is verified by the public viewer during decryption. The
+ * server can still fail closed on every wire shape except the two deployed
+ * fixed-length encodings for a 32-byte data key.
+ */
+export declare function parsePublicShareEncryptedDataKeyEnvelopeV0(bytes: Uint8Array): PublicShareEncryptedDataKeyEnvelopeV0 | null;
+//# sourceMappingURL=publicShareEncryptedDataKeyEnvelopeV0.d.ts.map

package/node_modules/@happier-dev/protocol/dist/crypto/publicShareEncryptedDataKeyEnvelopeV0.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicShareEncryptedDataKeyEnvelopeV0.d.ts","sourceRoot":"","sources":["../../src/crypto/publicShareEncryptedDataKeyEnvelopeV0.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,sCAAsC,KAAK,CAAC;AAUzD,eAAO,MAAM,+CAA+C,QAC0C,CAAC;AAEvG,eAAO,MAAM,gDAAgD,QAG1D,CAAC;AAEJ,MAAM,MAAM,qCAAqC,GAAG,QAAQ,CAAC;IAC3D,MAAM,EAAE,aAAa,GAAG,oBAAoB,CAAC;IAC7C,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAC3C,CAAC,CAAC;AAQH;;;;;;;GAOG;AACH,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,UAAU,GAChB,qCAAqC,GAAG,IAAI,CAQ9C"}

package/node_modules/@happier-dev/protocol/dist/crypto/publicShareEncryptedDataKeyEnvelopeV0.js

@@ -0,0 +1,34 @@
+import tweetnacl from 'tweetnacl';
+import { stringifySerializedJsonValue } from './serializedJsonValue.js';
+export const PUBLIC_SHARE_DATA_ENCRYPTION_KEY_BYTES = 32;
+const DATA_KEY_BASE64_LENGTH = Math.ceil(PUBLIC_SHARE_DATA_ENCRYPTION_KEY_BYTES / 3) * 4;
+const DATA_KEY_BASE64_PLACEHOLDER = 'A'.repeat(DATA_KEY_BASE64_LENGTH);
+const SECRETBOX_OVERHEAD_BYTES = tweetnacl.secretbox.nonceLength + tweetnacl.secretbox.overheadLength;
+function utf8Length(value) {
+    return new TextEncoder().encode(value).byteLength;
+}
+export const PUBLIC_SHARE_ENCRYPTED_DATA_KEY_LEGACY_V0_BYTES = SECRETBOX_OVERHEAD_BYTES + utf8Length(JSON.stringify({ v: 0, keyB64: DATA_KEY_BASE64_PLACEHOLDER }));
+export const PUBLIC_SHARE_ENCRYPTED_DATA_KEY_CURRENT_V0_BYTES = SECRETBOX_OVERHEAD_BYTES + utf8Length(stringifySerializedJsonValue({ v: 0, keyB64: DATA_KEY_BASE64_PLACEHOLDER }));
+function copyToArrayBufferBackedBytes(bytes) {
+    const copy = new Uint8Array(bytes.byteLength);
+    copy.set(bytes);
+    return copy;
+}
+/**
+ * Parses the public-share v0 SecretBox envelope structurally.
+ *
+ * The token-derived SecretBox key is intentionally unavailable to the server,
+ * so authenticity is verified by the public viewer during decryption. The
+ * server can still fail closed on every wire shape except the two deployed
+ * fixed-length encodings for a 32-byte data key.
+ */
+export function parsePublicShareEncryptedDataKeyEnvelopeV0(bytes) {
+    if (bytes.byteLength === PUBLIC_SHARE_ENCRYPTED_DATA_KEY_CURRENT_V0_BYTES) {
+        return { format: 'serialized-json-v1', encryptedDataKey: copyToArrayBufferBackedBytes(bytes) };
+    }
+    if (bytes.byteLength === PUBLIC_SHARE_ENCRYPTED_DATA_KEY_LEGACY_V0_BYTES) {
+        return { format: 'legacy-json', encryptedDataKey: copyToArrayBufferBackedBytes(bytes) };
+    }
+    return null;
+}
+//# sourceMappingURL=publicShareEncryptedDataKeyEnvelopeV0.js.map

package/node_modules/@happier-dev/protocol/dist/crypto/publicShareEncryptedDataKeyEnvelopeV0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicShareEncryptedDataKeyEnvelopeV0.js","sourceRoot":"","sources":["../../src/crypto/publicShareEncryptedDataKeyEnvelopeV0.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AAExE,MAAM,CAAC,MAAM,sCAAsC,GAAG,EAAE,CAAC;AAEzD,MAAM,sBAAsB,GAAG,IAAI,CAAC,IAAI,CAAC,sCAAsC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AACzF,MAAM,2BAA2B,GAAG,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;AACvE,MAAM,wBAAwB,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,cAAc,CAAC;AAEtG,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,MAAM,+CAA+C,GAC1D,wBAAwB,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;AAEvG,MAAM,CAAC,MAAM,gDAAgD,GAC3D,wBAAwB,GAAG,UAAU,CACnC,4BAA4B,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAC5E,CAAC;AAOJ,SAAS,4BAA4B,CAAC,KAAiB;IACrD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0CAA0C,CACxD,KAAiB;IAEjB,IAAI,KAAK,CAAC,UAAU,KAAK,gDAAgD,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,+CAA+C,EAAE,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@happier-dev/protocol/dist/crypto/terminalProvisioningV2.d.ts

@@ -10,4 +10,22 @@ export declare function openTerminalProvisioningV2Payload(params: {
     payload: Uint8Array;
     recipientSecretKeyOrSeed: Uint8Array;
 }): Uint8Array | null;
+export declare function isTerminalProvisioningV3Payload(payload: Uint8Array): boolean;
+export declare function sealTerminalProvisioningV3Payload(params: {
+    contentPrivateKey: Uint8Array;
+    terminalEphemeralPublicKey: Uint8Array;
+    pairingSecret: Uint8Array;
+    createdAtMs: number;
+    expiresAtMs: number;
+    randomBytes: (length: number) => Uint8Array;
+}): Uint8Array;
+export declare function openTerminalProvisioningV3Payload(params: {
+    payload: Uint8Array;
+    recipientSecretKeyOrSeed: Uint8Array;
+    terminalEphemeralPublicKey: Uint8Array;
+    pairingSecret: Uint8Array;
+    createdAtMs: number;
+    expiresAtMs: number;
+    nowMs: number;
+}): Uint8Array | null;
 //# sourceMappingURL=terminalProvisioningV2.d.ts.map

package/node_modules/@happier-dev/protocol/dist/crypto/terminalProvisioningV2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terminalProvisioningV2.d.ts","sourceRoot":"","sources":["../../src/crypto/terminalProvisioningV2.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,qCAAqC,IAAI,CAAC;AACvD,eAAO,MAAM,kDAAkD,KAAK,CAAC;AACrE,eAAO,MAAM,wCAAwC,QACG,CAAC;AAEzD,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,iBAAiB,EAAE,UAAU,CAAC;IAC9B,kBAAkB,EAAE,UAAU,CAAC;IAC/B,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC;CAC7C,GAAG,UAAU,CAcb;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,OAAO,EAAE,UAAU,CAAC;IACpB,wBAAwB,EAAE,UAAU,CAAC;CACtC,GAAG,UAAU,GAAG,IAAI,CAUpB"}
+{"version":3,"file":"terminalProvisioningV2.d.ts","sourceRoot":"","sources":["../../src/crypto/terminalProvisioningV2.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,qCAAqC,IAAI,CAAC;AACvD,eAAO,MAAM,kDAAkD,KAAK,CAAC;AACrE,eAAO,MAAM,wCAAwC,QACG,CAAC;AAWzD,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,iBAAiB,EAAE,UAAU,CAAC;IAC9B,kBAAkB,EAAE,UAAU,CAAC;IAC/B,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC;CAC7C,GAAG,UAAU,CAcb;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,OAAO,EAAE,UAAU,CAAC;IACpB,wBAAwB,EAAE,UAAU,CAAC;CACtC,GAAG,UAAU,GAAG,IAAI,CAUpB;AAqDD,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAG5E;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,iBAAiB,EAAE,UAAU,CAAC;IAC9B,0BAA0B,EAAE,UAAU,CAAC;IACvC,aAAa,EAAE,UAAU,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC;CAC7C,GAAG,UAAU,CAab;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,OAAO,EAAE,UAAU,CAAC;IACpB,wBAAwB,EAAE,UAAU,CAAC;IACrC,0BAA0B,EAAE,UAAU,CAAC;IACvC,aAAa,EAAE,UAAU,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,UAAU,GAAG,IAAI,CAsBpB"}

package/node_modules/@happier-dev/protocol/dist/crypto/terminalProvisioningV2.js

@@ -1,7 +1,17 @@
+import { hmac } from '@noble/hashes/hmac';
+import { sha256 } from '@noble/hashes/sha2';
 import { openBoxBundle, sealBoxBundle } from './boxBundle.js';
+import { encodeCanonicalLengthDelimited } from './canonicalDigest.js';
 export const TERMINAL_PROVISIONING_V2_VERSION_BYTE = 0;
 export const TERMINAL_PROVISIONING_V2_CONTENT_PRIVATE_KEY_BYTES = 32;
 export const TERMINAL_PROVISIONING_V2_PLAINTEXT_BYTES = 1 + TERMINAL_PROVISIONING_V2_CONTENT_PRIVATE_KEY_BYTES;
+const TERMINAL_PROVISIONING_V3_MAGIC = new Uint8Array([0x48, 0x50, 0x56, 0x33]); // HPV3
+const TERMINAL_PROVISIONING_V3_MAC_BYTES = 32;
+const TERMINAL_PROVISIONING_V3_SEALED_V2_BYTES = 32 + 24 + 16 + TERMINAL_PROVISIONING_V2_PLAINTEXT_BYTES;
+const TERMINAL_PROVISIONING_V3_PAYLOAD_BYTES = TERMINAL_PROVISIONING_V3_MAGIC.length
+    + TERMINAL_PROVISIONING_V3_SEALED_V2_BYTES
+    + TERMINAL_PROVISIONING_V3_MAC_BYTES;
+const TERMINAL_PROVISIONING_V3_MAC_DOMAIN = 'happier-terminal-provisioning-v3';
 export function sealTerminalProvisioningV2Payload(params) {
     if (params.contentPrivateKey.length !== TERMINAL_PROVISIONING_V2_CONTENT_PRIVATE_KEY_BYTES) {
         throw new Error(`Invalid content private key length: ${params.contentPrivateKey.length}`);
@@ -28,4 +38,79 @@ export function openTerminalProvisioningV2Payload(params) {
         return null;
     return opened.slice(1);
 }
+function assertTerminalProvisioningV3Context(params) {
+    if (params.terminalEphemeralPublicKey.length !== 32) {
+        throw new Error(`Invalid terminal ephemeral public key length: ${params.terminalEphemeralPublicKey.length}`);
+    }
+    if (params.pairingSecret.length !== 32) {
+        throw new Error(`Invalid pairing secret length: ${params.pairingSecret.length}`);
+    }
+    if (!Number.isSafeInteger(params.createdAtMs)
+        || !Number.isSafeInteger(params.expiresAtMs)
+        || params.createdAtMs < 0
+        || params.expiresAtMs <= params.createdAtMs) {
+        throw new Error('Invalid terminal provisioning validity window');
+    }
+}
+function computeTerminalProvisioningV3Mac(params) {
+    return hmac(sha256, params.pairingSecret, encodeCanonicalLengthDelimited([
+        TERMINAL_PROVISIONING_V3_MAC_DOMAIN,
+        params.terminalEphemeralPublicKey,
+        String(params.createdAtMs),
+        String(params.expiresAtMs),
+        params.sealedV2Payload,
+    ]));
+}
+function equalBytesConstantTime(left, right) {
+    if (left.length !== right.length)
+        return false;
+    let difference = 0;
+    for (let index = 0; index < left.length; index += 1) {
+        difference |= left[index] ^ right[index];
+    }
+    return difference === 0;
+}
+export function isTerminalProvisioningV3Payload(payload) {
+    if (payload.length !== TERMINAL_PROVISIONING_V3_PAYLOAD_BYTES)
+        return false;
+    return TERMINAL_PROVISIONING_V3_MAGIC.every((byte, index) => payload[index] === byte);
+}
+export function sealTerminalProvisioningV3Payload(params) {
+    assertTerminalProvisioningV3Context(params);
+    const sealedV2Payload = sealTerminalProvisioningV2Payload({
+        contentPrivateKey: params.contentPrivateKey,
+        recipientPublicKey: params.terminalEphemeralPublicKey,
+        randomBytes: params.randomBytes,
+    });
+    const mac = computeTerminalProvisioningV3Mac({ ...params, sealedV2Payload });
+    const payload = new Uint8Array(TERMINAL_PROVISIONING_V3_PAYLOAD_BYTES);
+    payload.set(TERMINAL_PROVISIONING_V3_MAGIC, 0);
+    payload.set(sealedV2Payload, TERMINAL_PROVISIONING_V3_MAGIC.length);
+    payload.set(mac, TERMINAL_PROVISIONING_V3_MAGIC.length + sealedV2Payload.length);
+    return payload;
+}
+export function openTerminalProvisioningV3Payload(params) {
+    try {
+        assertTerminalProvisioningV3Context(params);
+    }
+    catch {
+        return null;
+    }
+    if (!Number.isSafeInteger(params.nowMs) || params.nowMs < params.createdAtMs || params.nowMs > params.expiresAtMs) {
+        return null;
+    }
+    if (!isTerminalProvisioningV3Payload(params.payload))
+        return null;
+    const sealedPayloadStart = TERMINAL_PROVISIONING_V3_MAGIC.length;
+    const macStart = sealedPayloadStart + TERMINAL_PROVISIONING_V3_SEALED_V2_BYTES;
+    const sealedV2Payload = params.payload.slice(sealedPayloadStart, macStart);
+    const receivedMac = params.payload.slice(macStart);
+    const expectedMac = computeTerminalProvisioningV3Mac({ ...params, sealedV2Payload });
+    if (!equalBytesConstantTime(receivedMac, expectedMac))
+        return null;
+    return openTerminalProvisioningV2Payload({
+        payload: sealedV2Payload,
+        recipientSecretKeyOrSeed: params.recipientSecretKeyOrSeed,
+    });
+}
 //# sourceMappingURL=terminalProvisioningV2.js.map