@happyvertical/encryption 0.80.0 → 0.80.2

package/dist/chunks/node-Bg7R5Icq.js

@@ -0,0 +1,421 @@
+import { c as KeyError, d as SignatureError, i as EncryptError, r as DecryptError, s as InvalidKeyError, t as BaseEncryption } from "./base-qiu-WiZ0.js";
+import * as crypto from "node:crypto";
+//#region src/adapters/node.ts
+/**
+* Node.js crypto adapter
+*
+* Uses Node.js built-in crypto module for standard encryption algorithms
+* (AES, RSA, ECDH, ECDSA, etc.).
+*
+* @example
+* ```typescript
+* const crypto = new NodeCryptoEncryption({
+*   type: 'node',
+*   algorithm: 'aes-256-gcm',
+*   key: encryptionKey
+* });
+*
+* const encrypted = await crypto.encryptText('Secret message');
+* const decrypted = await crypto.decryptText(encrypted);
+* ```
+*/
+var NodeCryptoEncryption = class extends BaseEncryption {
+	options;
+	key;
+	publicKey;
+	privateKey;
+	constructor(options) {
+		super("node", options.debug);
+		this.options = options;
+		this.initializeKeys();
+	}
+	/**
+	* Initialize keys from options
+	*/
+	initializeKeys() {
+		if (this.options.keyDerivation) this.key = this.deriveKey(this.options.keyDerivation);
+		else if (this.options.key) this.key = this.parseBuffer(this.options.key);
+		if (this.options.publicKey) this.publicKey = this.importPublicKeyObject(this.options.publicKey);
+		if (this.options.privateKey) this.privateKey = this.importPrivateKeyObject(this.options.privateKey, this.options.passphrase);
+	}
+	/**
+	* Derive key from password using PBKDF2
+	*/
+	deriveKey(derivation) {
+		const salt = derivation.salt ? this.parseBuffer(derivation.salt) : crypto.randomBytes(16);
+		const iterations = derivation.iterations || 1e5;
+		const keyLength = derivation.keyLength || this.getKeyLength();
+		const digest = derivation.digest || "sha256";
+		return crypto.pbkdf2Sync(derivation.password, salt, iterations, keyLength, digest);
+	}
+	/**
+	* Get key length for current algorithm
+	*/
+	getKeyLength() {
+		const algo = this.options.algorithm.toLowerCase();
+		if (algo.includes("256")) return 32;
+		if (algo.includes("192")) return 24;
+		if (algo.includes("128")) return 16;
+		return 32;
+	}
+	/**
+	* Parse buffer from string or Buffer
+	*/
+	parseBuffer(data) {
+		if (Buffer.isBuffer(data)) return data;
+		const encoding = this.options.encoding || "hex";
+		if (encoding === "hex") return Buffer.from(data, "hex");
+		if (encoding === "base64") return Buffer.from(data, "base64");
+		if (encoding === "utf8") return Buffer.from(data, "utf8");
+		return Buffer.from(data, "hex");
+	}
+	/**
+	* Import public key from PEM/DER
+	*/
+	importPublicKeyObject(key) {
+		try {
+			return crypto.createPublicKey(key);
+		} catch (error) {
+			throw new InvalidKeyError(`Failed to import public key: ${error.message}`, this.adapterType, error);
+		}
+	}
+	/**
+	* Import private key from PEM/DER
+	*/
+	importPrivateKeyObject(key, passphrase) {
+		try {
+			if (passphrase) return crypto.createPrivateKey({
+				key,
+				passphrase
+			});
+			return crypto.createPrivateKey(key);
+		} catch (error) {
+			throw new InvalidKeyError(`Failed to import private key: ${error.message}`, this.adapterType, error);
+		}
+	}
+	/**
+	* Check if algorithm is symmetric (AES)
+	*/
+	isSymmetric() {
+		const algo = this.options.algorithm.toLowerCase();
+		return algo.startsWith("aes-") || algo.includes("cipher");
+	}
+	/**
+	* Check if algorithm is RSA
+	*/
+	isRSA() {
+		return this.options.algorithm.toLowerCase().startsWith("rsa");
+	}
+	async encryptText(text, options) {
+		try {
+			this.log("Encrypting text", { length: text.length });
+			if (this.isSymmetric()) return this.encryptSymmetric(Buffer.from(text, "utf8"));
+			if (this.isRSA()) return this.encryptAsymmetric(Buffer.from(text, "utf8"));
+			throw new EncryptError(`Unsupported encryption algorithm: ${this.options.algorithm}`, this.adapterType);
+		} catch (error) {
+			if (error instanceof EncryptError) throw error;
+			throw new EncryptError(`Failed to encrypt text: ${error.message}`, this.adapterType, error);
+		}
+	}
+	async decryptText(encrypted, options) {
+		try {
+			this.log("Decrypting text", { length: encrypted.length });
+			if (this.isSymmetric()) return this.decryptSymmetric(encrypted).toString("utf8");
+			if (this.isRSA()) return this.decryptAsymmetric(encrypted).toString("utf8");
+			throw new DecryptError(`Unsupported decryption algorithm: ${this.options.algorithm}`, this.adapterType);
+		} catch (error) {
+			if (error instanceof DecryptError) throw error;
+			throw new DecryptError(`Failed to decrypt text: ${error.message}`, this.adapterType, error);
+		}
+	}
+	async encryptBuffer(buffer, options) {
+		try {
+			this.log("Encrypting buffer", { size: buffer.length });
+			if (this.isSymmetric()) {
+				const encrypted = this.encryptSymmetric(buffer);
+				return Buffer.from(encrypted, "base64");
+			}
+			if (this.isRSA()) {
+				const encrypted = this.encryptAsymmetric(buffer);
+				return Buffer.from(encrypted, "base64");
+			}
+			throw new EncryptError(`Unsupported encryption algorithm: ${this.options.algorithm}`, this.adapterType);
+		} catch (error) {
+			if (error instanceof EncryptError) throw error;
+			throw new EncryptError(`Failed to encrypt buffer: ${error.message}`, this.adapterType, error);
+		}
+	}
+	async decryptBuffer(buffer, options) {
+		try {
+			this.log("Decrypting buffer", { size: buffer.length });
+			const base64 = buffer.toString("base64");
+			if (this.isSymmetric()) return this.decryptSymmetric(base64);
+			if (this.isRSA()) return this.decryptAsymmetric(base64);
+			throw new DecryptError(`Unsupported decryption algorithm: ${this.options.algorithm}`, this.adapterType);
+		} catch (error) {
+			if (error instanceof DecryptError) throw error;
+			throw new DecryptError(`Failed to decrypt buffer: ${error.message}`, this.adapterType, error);
+		}
+	}
+	/**
+	* Symmetric encryption (AES)
+	*/
+	encryptSymmetric(data) {
+		if (!this.key) throw new KeyError("Encryption key required for symmetric encryption", this.adapterType);
+		const algorithm = this.options.algorithm;
+		const isGCM = algorithm.toLowerCase().includes("gcm");
+		const ivLength = isGCM ? 12 : 16;
+		const iv = this.options.iv ? this.parseBuffer(this.options.iv) : crypto.randomBytes(ivLength);
+		const cipher = crypto.createCipheriv(algorithm, this.key, iv);
+		const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);
+		let authTag;
+		if (isGCM) authTag = cipher.getAuthTag();
+		let result;
+		if (authTag) result = Buffer.concat([
+			iv,
+			authTag,
+			encrypted
+		]);
+		else result = Buffer.concat([iv, encrypted]);
+		return result.toString("base64");
+	}
+	/**
+	* Symmetric decryption (AES)
+	*/
+	decryptSymmetric(encrypted) {
+		if (!this.key) throw new KeyError("Decryption key required for symmetric decryption", this.adapterType);
+		const algorithm = this.options.algorithm;
+		const isGCM = algorithm.toLowerCase().includes("gcm");
+		const encryptedBuffer = Buffer.from(encrypted, "base64");
+		const ivLength = isGCM ? 12 : 16;
+		const iv = encryptedBuffer.subarray(0, ivLength);
+		let authTag;
+		let ciphertext;
+		if (isGCM) {
+			authTag = encryptedBuffer.subarray(ivLength, ivLength + 16);
+			ciphertext = encryptedBuffer.subarray(ivLength + 16);
+		} else ciphertext = encryptedBuffer.subarray(ivLength);
+		const decipher = crypto.createDecipheriv(algorithm, this.key, iv);
+		if (authTag) decipher.setAuthTag(authTag);
+		return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+	}
+	/**
+	* Asymmetric encryption (RSA)
+	*/
+	encryptAsymmetric(data) {
+		if (!this.publicKey) throw new KeyError("Public key required for asymmetric encryption", this.adapterType);
+		return crypto.publicEncrypt({
+			key: this.publicKey,
+			padding: this.getRSAPadding()
+		}, data).toString("base64");
+	}
+	/**
+	* Asymmetric decryption (RSA)
+	*/
+	decryptAsymmetric(encrypted) {
+		if (!this.privateKey) throw new KeyError("Private key required for asymmetric decryption", this.adapterType);
+		const encryptedBuffer = Buffer.from(encrypted, "base64");
+		return crypto.privateDecrypt({
+			key: this.privateKey,
+			padding: this.getRSAPadding()
+		}, encryptedBuffer);
+	}
+	/**
+	* Get RSA padding mode
+	*/
+	getRSAPadding() {
+		const algo = this.options.algorithm.toLowerCase();
+		if (algo.includes("oaep")) return crypto.constants.RSA_PKCS1_OAEP_PADDING;
+		if (algo.includes("pss")) return crypto.constants.RSA_PKCS1_PSS_PADDING;
+		return crypto.constants.RSA_PKCS1_PADDING;
+	}
+	async generateKeyPair(options) {
+		try {
+			this.log("Generating key pair", options);
+			const keyType = options?.type || "rsa";
+			if (keyType === "rsa") {
+				const modulusLength = options?.keySize || 2048;
+				const { publicKey, privateKey } = crypto.generateKeyPairSync("rsa", {
+					modulusLength,
+					publicKeyEncoding: {
+						type: "spki",
+						format: "pem"
+					},
+					privateKeyEncoding: {
+						type: "pkcs8",
+						format: "pem",
+						...options?.passphrase && {
+							cipher: "aes-256-cbc",
+							passphrase: options.passphrase
+						}
+					}
+				});
+				this.log("RSA key pair generated");
+				return {
+					publicKey,
+					privateKey
+				};
+			}
+			if (keyType === "ecc" || keyType === "ecdh") {
+				const curve = options?.curve || "prime256v1";
+				const { publicKey, privateKey } = crypto.generateKeyPairSync("ec", {
+					namedCurve: curve,
+					publicKeyEncoding: {
+						type: "spki",
+						format: "pem"
+					},
+					privateKeyEncoding: {
+						type: "pkcs8",
+						format: "pem",
+						...options?.passphrase && {
+							cipher: "aes-256-cbc",
+							passphrase: options.passphrase
+						}
+					}
+				});
+				this.log("EC key pair generated");
+				return {
+					publicKey,
+					privateKey
+				};
+			}
+			if (keyType === "ecdsa") {
+				const curve = options?.curve || "prime256v1";
+				const { publicKey, privateKey } = crypto.generateKeyPairSync("ec", {
+					namedCurve: curve,
+					publicKeyEncoding: {
+						type: "spki",
+						format: "pem"
+					},
+					privateKeyEncoding: {
+						type: "pkcs8",
+						format: "pem",
+						...options?.passphrase && {
+							cipher: "aes-256-cbc",
+							passphrase: options.passphrase
+						}
+					}
+				});
+				this.log("ECDSA key pair generated");
+				return {
+					publicKey,
+					privateKey
+				};
+			}
+			throw new KeyError(`Unsupported key type for Node crypto: ${keyType}`, this.adapterType);
+		} catch (error) {
+			throw new KeyError(`Failed to generate key pair: ${error.message}`, this.adapterType, error);
+		}
+	}
+	async importKey(key, options) {
+		try {
+			this.log("Importing key");
+			const keyType = options?.type || "public";
+			if (keyType === "public") return {
+				type: "public",
+				format: "pem",
+				data: crypto.createPublicKey(key).export({
+					type: "spki",
+					format: "pem"
+				}).toString(),
+				algorithm: "node"
+			};
+			if (keyType === "private") return {
+				type: "private",
+				format: "pem",
+				data: (options?.passphrase ? crypto.createPrivateKey({
+					key,
+					passphrase: options.passphrase
+				}) : crypto.createPrivateKey(key)).export({
+					type: "pkcs8",
+					format: "pem"
+				}).toString(),
+				algorithm: "node"
+			};
+			throw new InvalidKeyError(`Unsupported key type: ${keyType}`, this.adapterType);
+		} catch (error) {
+			throw new InvalidKeyError(`Failed to import key: ${error.message}`, this.adapterType, error);
+		}
+	}
+	async exportKey(key, options) {
+		try {
+			this.log("Exporting key");
+			const format = options?.format || key.format || "pem";
+			if (format === "pem" || format === "armored") return key.data;
+			if (format === "binary" || format === "der") {
+				if (typeof key.data === "string") return Buffer.from(key.data);
+				return key.data;
+			}
+			return key.data;
+		} catch (error) {
+			throw new KeyError(`Failed to export key: ${error.message}`, this.adapterType, error);
+		}
+	}
+	/**
+	* Sign data
+	*/
+	async sign(data, options) {
+		try {
+			this.log("Signing data");
+			const privateKey = options?.privateKey ? this.importPrivateKeyObject(options.privateKey, options.passphrase) : this.privateKey;
+			if (!privateKey) throw new KeyError("No private key available for signing", this.adapterType);
+			const message = typeof data === "string" ? Buffer.from(data, "utf8") : data;
+			const signature = crypto.sign(null, message, privateKey);
+			this.log("Data signed successfully");
+			if (typeof data === "string") return signature.toString("base64");
+			return signature;
+		} catch (error) {
+			throw new SignatureError(`Failed to sign data: ${error.message}`, this.adapterType, error);
+		}
+	}
+	/**
+	* Verify signature
+	*/
+	async verify(data, signature, options) {
+		try {
+			this.log("Verifying signature");
+			if (!options?.publicKey) return false;
+			const publicKey = this.importPublicKeyObject(options.publicKey);
+			const message = typeof data === "string" ? Buffer.from(data, "utf8") : data;
+			const sig = typeof signature === "string" ? Buffer.from(signature, "base64") : signature;
+			const valid = crypto.verify(null, message, publicKey, sig);
+			this.log(valid ? "Signature verified" : "Signature verification failed");
+			return valid;
+		} catch (error) {
+			this.log("Signature verification failed", error);
+			return false;
+		}
+	}
+	async getCapabilities() {
+		const algorithm = this.options.algorithm.toLowerCase();
+		return {
+			textEncryption: true,
+			fileEncryption: true,
+			bufferEncryption: true,
+			streamEncryption: true,
+			emailEncryption: false,
+			signing: true,
+			verification: true,
+			keyGeneration: true,
+			keyManagement: true,
+			multipleRecipients: false,
+			symmetricEncryption: [
+				"aes-256-gcm",
+				"aes-256-cbc",
+				"aes-128-gcm",
+				"aes-128-cbc"
+			].includes(algorithm),
+			asymmetricEncryption: [
+				"rsa",
+				"rsa-oaep",
+				"rsa-pss",
+				"ecdh",
+				"ecdsa"
+			].some((algo) => algorithm.includes(algo))
+		};
+	}
+};
+//#endregion
+export { NodeCryptoEncryption };
+
+//# sourceMappingURL=node-Bg7R5Icq.js.map

package/dist/chunks/node-Bg7R5Icq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-Bg7R5Icq.js","names":[],"sources":["../../src/adapters/node.ts"],"sourcesContent":["import * as crypto from 'node:crypto';\nimport { BaseEncryption } from '../shared/base.js';\nimport {\n  DecryptError,\n  EncryptError,\n  InvalidKeyError,\n  KeyError,\n  SignatureError,\n} from '../shared/errors.js';\nimport type {\n  DecryptOptions,\n  EncryptionCapabilities,\n  EncryptOptions,\n  ExportKeyOptions,\n  ImportKeyOptions,\n  Key,\n  KeyPair,\n  KeyPairOptions,\n  NodeCryptoOptions,\n  SignOptions,\n  VerifyOptions,\n} from '../shared/types.js';\n\n/**\n * Node.js crypto adapter\n *\n * Uses Node.js built-in crypto module for standard encryption algorithms\n * (AES, RSA, ECDH, ECDSA, etc.).\n *\n * @example\n * ```typescript\n * const crypto = new NodeCryptoEncryption({\n *   type: 'node',\n *   algorithm: 'aes-256-gcm',\n *   key: encryptionKey\n * });\n *\n * const encrypted = await crypto.encryptText('Secret message');\n * const decrypted = await crypto.decryptText(encrypted);\n * ```\n */\nexport class NodeCryptoEncryption extends BaseEncryption {\n  private options: NodeCryptoOptions;\n  private key?: Buffer;\n  private publicKey?: crypto.KeyObject;\n  private privateKey?: crypto.KeyObject;\n\n  constructor(options: NodeCryptoOptions) {\n    super('node', options.debug);\n    this.options = options;\n    this.initializeKeys();\n  }\n\n  /**\n   * Initialize keys from options\n   */\n  private initializeKeys(): void {\n    // Derive key from password if specified\n    if (this.options.keyDerivation) {\n      this.key = this.deriveKey(this.options.keyDerivation);\n    } else if (this.options.key) {\n      this.key = this.parseBuffer(this.options.key);\n    }\n\n    // Initialize asymmetric keys\n    if (this.options.publicKey) {\n      this.publicKey = this.importPublicKeyObject(this.options.publicKey);\n    }\n\n    if (this.options.privateKey) {\n      this.privateKey = this.importPrivateKeyObject(\n        this.options.privateKey,\n        this.options.passphrase,\n      );\n    }\n  }\n\n  /**\n   * Derive key from password using PBKDF2\n   */\n  private deriveKey(\n    derivation: NonNullable<NodeCryptoOptions['keyDerivation']>,\n  ): Buffer {\n    const salt = derivation.salt\n      ? this.parseBuffer(derivation.salt)\n      : crypto.randomBytes(16);\n    const iterations = derivation.iterations || 100000;\n    const keyLength = derivation.keyLength || this.getKeyLength();\n    const digest = derivation.digest || 'sha256';\n\n    return crypto.pbkdf2Sync(\n      derivation.password,\n      salt,\n      iterations,\n      keyLength,\n      digest,\n    );\n  }\n\n  /**\n   * Get key length for current algorithm\n   */\n  private getKeyLength(): number {\n    const algo = this.options.algorithm.toLowerCase();\n    if (algo.includes('256')) return 32;\n    if (algo.includes('192')) return 24;\n    if (algo.includes('128')) return 16;\n    return 32; // Default to 256 bits\n  }\n\n  /**\n   * Parse buffer from string or Buffer\n   */\n  private parseBuffer(data: string | Buffer): Buffer {\n    if (Buffer.isBuffer(data)) return data;\n\n    const encoding = this.options.encoding || 'hex';\n    if (encoding === 'hex') return Buffer.from(data, 'hex');\n    if (encoding === 'base64') return Buffer.from(data, 'base64');\n    if (encoding === 'utf8') return Buffer.from(data, 'utf8');\n\n    return Buffer.from(data, 'hex');\n  }\n\n  /**\n   * Import public key from PEM/DER\n   */\n  private importPublicKeyObject(key: string | Buffer): crypto.KeyObject {\n    try {\n      return crypto.createPublicKey(key);\n    } catch (error) {\n      throw new InvalidKeyError(\n        `Failed to import public key: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  /**\n   * Import private key from PEM/DER\n   */\n  private importPrivateKeyObject(\n    key: string | Buffer,\n    passphrase?: string,\n  ): crypto.KeyObject {\n    try {\n      if (passphrase) {\n        return crypto.createPrivateKey({ key, passphrase });\n      }\n      return crypto.createPrivateKey(key);\n    } catch (error) {\n      throw new InvalidKeyError(\n        `Failed to import private key: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  /**\n   * Check if algorithm is symmetric (AES)\n   */\n  private isSymmetric(): boolean {\n    const algo = this.options.algorithm.toLowerCase();\n    return algo.startsWith('aes-') || algo.includes('cipher');\n  }\n\n  /**\n   * Check if algorithm is RSA\n   */\n  private isRSA(): boolean {\n    const algo = this.options.algorithm.toLowerCase();\n    return algo.startsWith('rsa');\n  }\n\n  async encryptText(text: string, options?: EncryptOptions): Promise<string> {\n    try {\n      this.log('Encrypting text', { length: text.length });\n\n      if (this.isSymmetric()) {\n        return this.encryptSymmetric(Buffer.from(text, 'utf8'));\n      }\n\n      if (this.isRSA()) {\n        return this.encryptAsymmetric(Buffer.from(text, 'utf8'));\n      }\n\n      throw new EncryptError(\n        `Unsupported encryption algorithm: ${this.options.algorithm}`,\n        this.adapterType,\n      );\n    } catch (error) {\n      if (error instanceof EncryptError) throw error;\n      throw new EncryptError(\n        `Failed to encrypt text: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  async decryptText(\n    encrypted: string,\n    options?: DecryptOptions,\n  ): Promise<string> {\n    try {\n      this.log('Decrypting text', { length: encrypted.length });\n\n      if (this.isSymmetric()) {\n        const decrypted = this.decryptSymmetric(encrypted);\n        return decrypted.toString('utf8');\n      }\n\n      if (this.isRSA()) {\n        const decrypted = this.decryptAsymmetric(encrypted);\n        return decrypted.toString('utf8');\n      }\n\n      throw new DecryptError(\n        `Unsupported decryption algorithm: ${this.options.algorithm}`,\n        this.adapterType,\n      );\n    } catch (error) {\n      if (error instanceof DecryptError) throw error;\n      throw new DecryptError(\n        `Failed to decrypt text: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  async encryptBuffer(\n    buffer: Buffer,\n    options?: EncryptOptions,\n  ): Promise<Buffer> {\n    try {\n      this.log('Encrypting buffer', { size: buffer.length });\n\n      if (this.isSymmetric()) {\n        const encrypted = this.encryptSymmetric(buffer);\n        return Buffer.from(encrypted, 'base64');\n      }\n\n      if (this.isRSA()) {\n        const encrypted = this.encryptAsymmetric(buffer);\n        return Buffer.from(encrypted, 'base64');\n      }\n\n      throw new EncryptError(\n        `Unsupported encryption algorithm: ${this.options.algorithm}`,\n        this.adapterType,\n      );\n    } catch (error) {\n      if (error instanceof EncryptError) throw error;\n      throw new EncryptError(\n        `Failed to encrypt buffer: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  async decryptBuffer(\n    buffer: Buffer,\n    options?: DecryptOptions,\n  ): Promise<Buffer> {\n    try {\n      this.log('Decrypting buffer', { size: buffer.length });\n\n      const base64 = buffer.toString('base64');\n\n      if (this.isSymmetric()) {\n        return this.decryptSymmetric(base64);\n      }\n\n      if (this.isRSA()) {\n        return this.decryptAsymmetric(base64);\n      }\n\n      throw new DecryptError(\n        `Unsupported decryption algorithm: ${this.options.algorithm}`,\n        this.adapterType,\n      );\n    } catch (error) {\n      if (error instanceof DecryptError) throw error;\n      throw new DecryptError(\n        `Failed to decrypt buffer: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  /**\n   * Symmetric encryption (AES)\n   */\n  private encryptSymmetric(data: Buffer): string {\n    if (!this.key) {\n      throw new KeyError(\n        'Encryption key required for symmetric encryption',\n        this.adapterType,\n      );\n    }\n\n    const algorithm = this.options.algorithm;\n    const isGCM = algorithm.toLowerCase().includes('gcm');\n\n    // Generate IV\n    const ivLength = isGCM ? 12 : 16; // GCM uses 12 bytes, CBC uses 16\n    const iv = this.options.iv\n      ? this.parseBuffer(this.options.iv)\n      : crypto.randomBytes(ivLength);\n\n    // Create cipher\n    const cipher = crypto.createCipheriv(algorithm, this.key, iv);\n\n    // Encrypt\n    const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);\n\n    // For GCM, get auth tag\n    let authTag: Buffer | undefined;\n    if (isGCM) {\n      authTag = (cipher as crypto.CipherGCM).getAuthTag();\n    }\n\n    // Combine: iv + (authTag if GCM) + encrypted\n    let result: Buffer;\n    if (authTag) {\n      result = Buffer.concat([iv, authTag, encrypted]);\n    } else {\n      result = Buffer.concat([iv, encrypted]);\n    }\n\n    return result.toString('base64');\n  }\n\n  /**\n   * Symmetric decryption (AES)\n   */\n  private decryptSymmetric(encrypted: string): Buffer {\n    if (!this.key) {\n      throw new KeyError(\n        'Decryption key required for symmetric decryption',\n        this.adapterType,\n      );\n    }\n\n    const algorithm = this.options.algorithm;\n    const isGCM = algorithm.toLowerCase().includes('gcm');\n\n    const encryptedBuffer = Buffer.from(encrypted, 'base64');\n\n    // Extract IV\n    const ivLength = isGCM ? 12 : 16;\n    const iv = encryptedBuffer.subarray(0, ivLength);\n\n    // Extract auth tag if GCM\n    let authTag: Buffer | undefined;\n    let ciphertext: Buffer;\n    if (isGCM) {\n      authTag = encryptedBuffer.subarray(ivLength, ivLength + 16);\n      ciphertext = encryptedBuffer.subarray(ivLength + 16);\n    } else {\n      ciphertext = encryptedBuffer.subarray(ivLength);\n    }\n\n    // Create decipher\n    const decipher = crypto.createDecipheriv(algorithm, this.key, iv);\n\n    // Set auth tag for GCM\n    if (authTag) {\n      (decipher as crypto.DecipherGCM).setAuthTag(authTag);\n    }\n\n    // Decrypt\n    const decrypted = Buffer.concat([\n      decipher.update(ciphertext),\n      decipher.final(),\n    ]);\n\n    return decrypted;\n  }\n\n  /**\n   * Asymmetric encryption (RSA)\n   */\n  private encryptAsymmetric(data: Buffer): string {\n    if (!this.publicKey) {\n      throw new KeyError(\n        'Public key required for asymmetric encryption',\n        this.adapterType,\n      );\n    }\n\n    const encrypted = crypto.publicEncrypt(\n      {\n        key: this.publicKey,\n        padding: this.getRSAPadding(),\n      },\n      data,\n    );\n\n    return encrypted.toString('base64');\n  }\n\n  /**\n   * Asymmetric decryption (RSA)\n   */\n  private decryptAsymmetric(encrypted: string): Buffer {\n    if (!this.privateKey) {\n      throw new KeyError(\n        'Private key required for asymmetric decryption',\n        this.adapterType,\n      );\n    }\n\n    const encryptedBuffer = Buffer.from(encrypted, 'base64');\n\n    const decrypted = crypto.privateDecrypt(\n      {\n        key: this.privateKey,\n        padding: this.getRSAPadding(),\n      },\n      encryptedBuffer,\n    );\n\n    return decrypted;\n  }\n\n  /**\n   * Get RSA padding mode\n   */\n  private getRSAPadding(): number {\n    const algo = this.options.algorithm.toLowerCase();\n    if (algo.includes('oaep')) {\n      return crypto.constants.RSA_PKCS1_OAEP_PADDING;\n    }\n    if (algo.includes('pss')) {\n      return crypto.constants.RSA_PKCS1_PSS_PADDING;\n    }\n    return crypto.constants.RSA_PKCS1_PADDING;\n  }\n\n  async generateKeyPair(options?: KeyPairOptions): Promise<KeyPair> {\n    try {\n      this.log('Generating key pair', options);\n\n      const keyType = options?.type || 'rsa';\n\n      if (keyType === 'rsa') {\n        const modulusLength = options?.keySize || 2048;\n        const { publicKey, privateKey } = crypto.generateKeyPairSync('rsa', {\n          modulusLength,\n          publicKeyEncoding: {\n            type: 'spki',\n            format: 'pem',\n          },\n          privateKeyEncoding: {\n            type: 'pkcs8',\n            format: 'pem',\n            ...(options?.passphrase && {\n              cipher: 'aes-256-cbc',\n              passphrase: options.passphrase,\n            }),\n          },\n        });\n\n        this.log('RSA key pair generated');\n\n        return { publicKey, privateKey };\n      }\n\n      if (keyType === 'ecc' || keyType === 'ecdh') {\n        const curve = options?.curve || 'prime256v1';\n        const { publicKey, privateKey } = crypto.generateKeyPairSync('ec', {\n          namedCurve: curve,\n          publicKeyEncoding: {\n            type: 'spki',\n            format: 'pem',\n          },\n          privateKeyEncoding: {\n            type: 'pkcs8',\n            format: 'pem',\n            ...(options?.passphrase && {\n              cipher: 'aes-256-cbc',\n              passphrase: options.passphrase,\n            }),\n          },\n        });\n\n        this.log('EC key pair generated');\n\n        return { publicKey, privateKey };\n      }\n\n      if (keyType === 'ecdsa') {\n        const curve = options?.curve || 'prime256v1';\n        const { publicKey, privateKey } = crypto.generateKeyPairSync('ec', {\n          namedCurve: curve,\n          publicKeyEncoding: {\n            type: 'spki',\n            format: 'pem',\n          },\n          privateKeyEncoding: {\n            type: 'pkcs8',\n            format: 'pem',\n            ...(options?.passphrase && {\n              cipher: 'aes-256-cbc',\n              passphrase: options.passphrase,\n            }),\n          },\n        });\n\n        this.log('ECDSA key pair generated');\n\n        return { publicKey, privateKey };\n      }\n\n      throw new KeyError(\n        `Unsupported key type for Node crypto: ${keyType}`,\n        this.adapterType,\n      );\n    } catch (error) {\n      throw new KeyError(\n        `Failed to generate key pair: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  async importKey(\n    key: string | Buffer,\n    options?: ImportKeyOptions,\n  ): Promise<Key> {\n    try {\n      this.log('Importing key');\n\n      const keyType = options?.type || 'public';\n\n      if (keyType === 'public') {\n        const keyObj = crypto.createPublicKey(key);\n        const exported = keyObj.export({\n          type: 'spki',\n          format: 'pem',\n        });\n\n        return {\n          type: 'public',\n          format: 'pem',\n          data: exported.toString(),\n          algorithm: 'node',\n        };\n      }\n\n      if (keyType === 'private') {\n        const keyObj = options?.passphrase\n          ? crypto.createPrivateKey({ key, passphrase: options.passphrase })\n          : crypto.createPrivateKey(key);\n\n        const exported = keyObj.export({\n          type: 'pkcs8',\n          format: 'pem',\n        });\n\n        return {\n          type: 'private',\n          format: 'pem',\n          data: exported.toString(),\n          algorithm: 'node',\n        };\n      }\n\n      throw new InvalidKeyError(\n        `Unsupported key type: ${keyType}`,\n        this.adapterType,\n      );\n    } catch (error) {\n      throw new InvalidKeyError(\n        `Failed to import key: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  async exportKey(\n    key: Key,\n    options?: ExportKeyOptions,\n  ): Promise<string | Buffer> {\n    try {\n      this.log('Exporting key');\n\n      const format = options?.format || key.format || 'pem';\n\n      if (format === 'pem' || format === 'armored') {\n        return key.data as string;\n      }\n\n      if (format === 'binary' || format === 'der') {\n        if (typeof key.data === 'string') {\n          return Buffer.from(key.data);\n        }\n        return key.data as Buffer;\n      }\n\n      return key.data as string;\n    } catch (error) {\n      throw new KeyError(\n        `Failed to export key: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  /**\n   * Sign data\n   */\n  async sign(\n    data: string | Buffer,\n    options?: SignOptions,\n  ): Promise<string | Buffer> {\n    try {\n      this.log('Signing data');\n\n      const privateKey = options?.privateKey\n        ? this.importPrivateKeyObject(\n            options.privateKey as string | Buffer,\n            options.passphrase,\n          )\n        : this.privateKey;\n\n      if (!privateKey) {\n        throw new KeyError(\n          'No private key available for signing',\n          this.adapterType,\n        );\n      }\n\n      const message =\n        typeof data === 'string' ? Buffer.from(data, 'utf8') : data;\n\n      const signature = crypto.sign(null, message, privateKey);\n\n      this.log('Data signed successfully');\n\n      if (typeof data === 'string') {\n        return signature.toString('base64');\n      }\n\n      return signature;\n    } catch (error) {\n      throw new SignatureError(\n        `Failed to sign data: ${(error as Error).message}`,\n        this.adapterType,\n        error,\n      );\n    }\n  }\n\n  /**\n   * Verify signature\n   */\n  async verify(\n    data: string | Buffer,\n    signature: string | Buffer,\n    options?: VerifyOptions,\n  ): Promise<boolean> {\n    try {\n      this.log('Verifying signature');\n\n      if (!options?.publicKey) {\n        return false;\n      }\n\n      const publicKey = this.importPublicKeyObject(\n        options.publicKey as string | Buffer,\n      );\n\n      const message =\n        typeof data === 'string' ? Buffer.from(data, 'utf8') : data;\n      const sig =\n        typeof signature === 'string'\n          ? Buffer.from(signature, 'base64')\n          : signature;\n\n      const valid = crypto.verify(null, message, publicKey, sig);\n\n      this.log(valid ? 'Signature verified' : 'Signature verification failed');\n\n      return valid;\n    } catch (error) {\n      this.log('Signature verification failed', error);\n      return false;\n    }\n  }\n\n  async getCapabilities(): Promise<EncryptionCapabilities> {\n    const algorithm = this.options.algorithm.toLowerCase();\n\n    // Determine if algorithm is symmetric or asymmetric\n    const symmetricAlgorithms = [\n      'aes-256-gcm',\n      'aes-256-cbc',\n      'aes-128-gcm',\n      'aes-128-cbc',\n    ];\n    const asymmetricAlgorithms = [\n      'rsa',\n      'rsa-oaep',\n      'rsa-pss',\n      'ecdh',\n      'ecdsa',\n    ];\n\n    const isSymmetric = symmetricAlgorithms.includes(algorithm);\n    const isAsymmetric = asymmetricAlgorithms.some((algo) =>\n      algorithm.includes(algo),\n    );\n\n    return {\n      textEncryption: true,\n      fileEncryption: true,\n      bufferEncryption: true,\n      streamEncryption: true,\n      emailEncryption: false,\n      signing: true,\n      verification: true,\n      keyGeneration: true,\n      keyManagement: true,\n      multipleRecipients: false,\n      symmetricEncryption: isSymmetric,\n      asymmetricEncryption: isAsymmetric,\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAyCA,IAAa,uBAAb,cAA0C,eAAe;CACvD;CACA;CACA;CACA;CAEA,YAAY,SAA4B;EACtC,MAAM,QAAQ,QAAQ,KAAK;EAC3B,KAAK,UAAU;EACf,KAAK,eAAe;CACtB;;;;CAKA,iBAA+B;EAE7B,IAAI,KAAK,QAAQ,eACf,KAAK,MAAM,KAAK,UAAU,KAAK,QAAQ,aAAa;OAC/C,IAAI,KAAK,QAAQ,KACtB,KAAK,MAAM,KAAK,YAAY,KAAK,QAAQ,GAAG;EAI9C,IAAI,KAAK,QAAQ,WACf,KAAK,YAAY,KAAK,sBAAsB,KAAK,QAAQ,SAAS;EAGpE,IAAI,KAAK,QAAQ,YACf,KAAK,aAAa,KAAK,uBACrB,KAAK,QAAQ,YACb,KAAK,QAAQ,UACf;CAEJ;;;;CAKA,UACE,YACQ;EACR,MAAM,OAAO,WAAW,OACpB,KAAK,YAAY,WAAW,IAAI,IAChC,OAAO,YAAY,EAAE;EACzB,MAAM,aAAa,WAAW,cAAc;EAC5C,MAAM,YAAY,WAAW,aAAa,KAAK,aAAa;EAC5D,MAAM,SAAS,WAAW,UAAU;EAEpC,OAAO,OAAO,WACZ,WAAW,UACX,MACA,YACA,WACA,MACF;CACF;;;;CAKA,eAA+B;EAC7B,MAAM,OAAO,KAAK,QAAQ,UAAU,YAAY;EAChD,IAAI,KAAK,SAAS,KAAK,GAAG,OAAO;EACjC,IAAI,KAAK,SAAS,KAAK,GAAG,OAAO;EACjC,IAAI,KAAK,SAAS,KAAK,GAAG,OAAO;EACjC,OAAO;CACT;;;;CAKA,YAAoB,MAA+B;EACjD,IAAI,OAAO,SAAS,IAAI,GAAG,OAAO;EAElC,MAAM,WAAW,KAAK,QAAQ,YAAY;EAC1C,IAAI,aAAa,OAAO,OAAO,OAAO,KAAK,MAAM,KAAK;EACtD,IAAI,aAAa,UAAU,OAAO,OAAO,KAAK,MAAM,QAAQ;EAC5D,IAAI,aAAa,QAAQ,OAAO,OAAO,KAAK,MAAM,MAAM;EAExD,OAAO,OAAO,KAAK,MAAM,KAAK;CAChC;;;;CAKA,sBAA8B,KAAwC;EACpE,IAAI;GACF,OAAO,OAAO,gBAAgB,GAAG;EACnC,SAAS,OAAO;GACd,MAAM,IAAI,gBACR,gCAAiC,MAAgB,WACjD,KAAK,aACL,KACF;EACF;CACF;;;;CAKA,uBACE,KACA,YACkB;EAClB,IAAI;GACF,IAAI,YACF,OAAO,OAAO,iBAAiB;IAAE;IAAK;GAAW,CAAC;GAEpD,OAAO,OAAO,iBAAiB,GAAG;EACpC,SAAS,OAAO;GACd,MAAM,IAAI,gBACR,iCAAkC,MAAgB,WAClD,KAAK,aACL,KACF;EACF;CACF;;;;CAKA,cAA+B;EAC7B,MAAM,OAAO,KAAK,QAAQ,UAAU,YAAY;EAChD,OAAO,KAAK,WAAW,MAAM,KAAK,KAAK,SAAS,QAAQ;CAC1D;;;;CAKA,QAAyB;EAEvB,OADa,KAAK,QAAQ,UAAU,YAC7B,CAAA,CAAK,WAAW,KAAK;CAC9B;CAEA,MAAM,YAAY,MAAc,SAA2C;EACzE,IAAI;GACF,KAAK,IAAI,mBAAmB,EAAE,QAAQ,KAAK,OAAO,CAAC;GAEnD,IAAI,KAAK,YAAY,GACnB,OAAO,KAAK,iBAAiB,OAAO,KAAK,MAAM,MAAM,CAAC;GAGxD,IAAI,KAAK,MAAM,GACb,OAAO,KAAK,kBAAkB,OAAO,KAAK,MAAM,MAAM,CAAC;GAGzD,MAAM,IAAI,aACR,qCAAqC,KAAK,QAAQ,aAClD,KAAK,WACP;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,cAAc,MAAM;GACzC,MAAM,IAAI,aACR,2BAA4B,MAAgB,WAC5C,KAAK,aACL,KACF;EACF;CACF;CAEA,MAAM,YACJ,WACA,SACiB;EACjB,IAAI;GACF,KAAK,IAAI,mBAAmB,EAAE,QAAQ,UAAU,OAAO,CAAC;GAExD,IAAI,KAAK,YAAY,GAEnB,OADkB,KAAK,iBAAiB,SACjC,CAAA,CAAU,SAAS,MAAM;GAGlC,IAAI,KAAK,MAAM,GAEb,OADkB,KAAK,kBAAkB,SAClC,CAAA,CAAU,SAAS,MAAM;GAGlC,MAAM,IAAI,aACR,qCAAqC,KAAK,QAAQ,aAClD,KAAK,WACP;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,cAAc,MAAM;GACzC,MAAM,IAAI,aACR,2BAA4B,MAAgB,WAC5C,KAAK,aACL,KACF;EACF;CACF;CAEA,MAAM,cACJ,QACA,SACiB;EACjB,IAAI;GACF,KAAK,IAAI,qBAAqB,EAAE,MAAM,OAAO,OAAO,CAAC;GAErD,IAAI,KAAK,YAAY,GAAG;IACtB,MAAM,YAAY,KAAK,iBAAiB,MAAM;IAC9C,OAAO,OAAO,KAAK,WAAW,QAAQ;GACxC;GAEA,IAAI,KAAK,MAAM,GAAG;IAChB,MAAM,YAAY,KAAK,kBAAkB,MAAM;IAC/C,OAAO,OAAO,KAAK,WAAW,QAAQ;GACxC;GAEA,MAAM,IAAI,aACR,qCAAqC,KAAK,QAAQ,aAClD,KAAK,WACP;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,cAAc,MAAM;GACzC,MAAM,IAAI,aACR,6BAA8B,MAAgB,WAC9C,KAAK,aACL,KACF;EACF;CACF;CAEA,MAAM,cACJ,QACA,SACiB;EACjB,IAAI;GACF,KAAK,IAAI,qBAAqB,EAAE,MAAM,OAAO,OAAO,CAAC;GAErD,MAAM,SAAS,OAAO,SAAS,QAAQ;GAEvC,IAAI,KAAK,YAAY,GACnB,OAAO,KAAK,iBAAiB,MAAM;GAGrC,IAAI,KAAK,MAAM,GACb,OAAO,KAAK,kBAAkB,MAAM;GAGtC,MAAM,IAAI,aACR,qCAAqC,KAAK,QAAQ,aAClD,KAAK,WACP;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,cAAc,MAAM;GACzC,MAAM,IAAI,aACR,6BAA8B,MAAgB,WAC9C,KAAK,aACL,KACF;EACF;CACF;;;;CAKA,iBAAyB,MAAsB;EAC7C,IAAI,CAAC,KAAK,KACR,MAAM,IAAI,SACR,oDACA,KAAK,WACP;EAGF,MAAM,YAAY,KAAK,QAAQ;EAC/B,MAAM,QAAQ,UAAU,YAAY,CAAC,CAAC,SAAS,KAAK;EAGpD,MAAM,WAAW,QAAQ,KAAK;EAC9B,MAAM,KAAK,KAAK,QAAQ,KACpB,KAAK,YAAY,KAAK,QAAQ,EAAE,IAChC,OAAO,YAAY,QAAQ;EAG/B,MAAM,SAAS,OAAO,eAAe,WAAW,KAAK,KAAK,EAAE;EAG5D,MAAM,YAAY,OAAO,OAAO,CAAC,OAAO,OAAO,IAAI,GAAG,OAAO,MAAM,CAAC,CAAC;EAGrE,IAAI;EACJ,IAAI,OACF,UAAW,OAA4B,WAAW;EAIpD,IAAI;EACJ,IAAI,SACF,SAAS,OAAO,OAAO;GAAC;GAAI;GAAS;EAAS,CAAC;OAE/C,SAAS,OAAO,OAAO,CAAC,IAAI,SAAS,CAAC;EAGxC,OAAO,OAAO,SAAS,QAAQ;CACjC;;;;CAKA,iBAAyB,WAA2B;EAClD,IAAI,CAAC,KAAK,KACR,MAAM,IAAI,SACR,oDACA,KAAK,WACP;EAGF,MAAM,YAAY,KAAK,QAAQ;EAC/B,MAAM,QAAQ,UAAU,YAAY,CAAC,CAAC,SAAS,KAAK;EAEpD,MAAM,kBAAkB,OAAO,KAAK,WAAW,QAAQ;EAGvD,MAAM,WAAW,QAAQ,KAAK;EAC9B,MAAM,KAAK,gBAAgB,SAAS,GAAG,QAAQ;EAG/C,IAAI;EACJ,IAAI;EACJ,IAAI,OAAO;GACT,UAAU,gBAAgB,SAAS,UAAU,WAAW,EAAE;GAC1D,aAAa,gBAAgB,SAAS,WAAW,EAAE;EACrD,OACE,aAAa,gBAAgB,SAAS,QAAQ;EAIhD,MAAM,WAAW,OAAO,iBAAiB,WAAW,KAAK,KAAK,EAAE;EAGhE,IAAI,SACF,SAAiC,WAAW,OAAO;EASrD,OALkB,OAAO,OAAO,CAC9B,SAAS,OAAO,UAAU,GAC1B,SAAS,MAAM,CACjB,CAEO;CACT;;;;CAKA,kBAA0B,MAAsB;EAC9C,IAAI,CAAC,KAAK,WACR,MAAM,IAAI,SACR,iDACA,KAAK,WACP;EAWF,OARkB,OAAO,cACvB;GACE,KAAK,KAAK;GACV,SAAS,KAAK,cAAc;EAC9B,GACA,IAGK,CAAA,CAAU,SAAS,QAAQ;CACpC;;;;CAKA,kBAA0B,WAA2B;EACnD,IAAI,CAAC,KAAK,YACR,MAAM,IAAI,SACR,kDACA,KAAK,WACP;EAGF,MAAM,kBAAkB,OAAO,KAAK,WAAW,QAAQ;EAUvD,OARkB,OAAO,eACvB;GACE,KAAK,KAAK;GACV,SAAS,KAAK,cAAc;EAC9B,GACA,eAGK;CACT;;;;CAKA,gBAAgC;EAC9B,MAAM,OAAO,KAAK,QAAQ,UAAU,YAAY;EAChD,IAAI,KAAK,SAAS,MAAM,GACtB,OAAO,OAAO,UAAU;EAE1B,IAAI,KAAK,SAAS,KAAK,GACrB,OAAO,OAAO,UAAU;EAE1B,OAAO,OAAO,UAAU;CAC1B;CAEA,MAAM,gBAAgB,SAA4C;EAChE,IAAI;GACF,KAAK,IAAI,uBAAuB,OAAO;GAEvC,MAAM,UAAU,SAAS,QAAQ;GAEjC,IAAI,YAAY,OAAO;IACrB,MAAM,gBAAgB,SAAS,WAAW;IAC1C,MAAM,EAAE,WAAW,eAAe,OAAO,oBAAoB,OAAO;KAClE;KACA,mBAAmB;MACjB,MAAM;MACN,QAAQ;KACV;KACA,oBAAoB;MAClB,MAAM;MACN,QAAQ;MACR,GAAI,SAAS,cAAc;OACzB,QAAQ;OACR,YAAY,QAAQ;MACtB;KACF;IACF,CAAC;IAED,KAAK,IAAI,wBAAwB;IAEjC,OAAO;KAAE;KAAW;IAAW;GACjC;GAEA,IAAI,YAAY,SAAS,YAAY,QAAQ;IAC3C,MAAM,QAAQ,SAAS,SAAS;IAChC,MAAM,EAAE,WAAW,eAAe,OAAO,oBAAoB,MAAM;KACjE,YAAY;KACZ,mBAAmB;MACjB,MAAM;MACN,QAAQ;KACV;KACA,oBAAoB;MAClB,MAAM;MACN,QAAQ;MACR,GAAI,SAAS,cAAc;OACzB,QAAQ;OACR,YAAY,QAAQ;MACtB;KACF;IACF,CAAC;IAED,KAAK,IAAI,uBAAuB;IAEhC,OAAO;KAAE;KAAW;IAAW;GACjC;GAEA,IAAI,YAAY,SAAS;IACvB,MAAM,QAAQ,SAAS,SAAS;IAChC,MAAM,EAAE,WAAW,eAAe,OAAO,oBAAoB,MAAM;KACjE,YAAY;KACZ,mBAAmB;MACjB,MAAM;MACN,QAAQ;KACV;KACA,oBAAoB;MAClB,MAAM;MACN,QAAQ;MACR,GAAI,SAAS,cAAc;OACzB,QAAQ;OACR,YAAY,QAAQ;MACtB;KACF;IACF,CAAC;IAED,KAAK,IAAI,0BAA0B;IAEnC,OAAO;KAAE;KAAW;IAAW;GACjC;GAEA,MAAM,IAAI,SACR,yCAAyC,WACzC,KAAK,WACP;EACF,SAAS,OAAO;GACd,MAAM,IAAI,SACR,gCAAiC,MAAgB,WACjD,KAAK,aACL,KACF;EACF;CACF;CAEA,MAAM,UACJ,KACA,SACc;EACd,IAAI;GACF,KAAK,IAAI,eAAe;GAExB,MAAM,UAAU,SAAS,QAAQ;GAEjC,IAAI,YAAY,UAOd,OAAO;IACL,MAAM;IACN,QAAQ;IACR,MATa,OAAO,gBAAgB,GACrB,CAAA,CAAO,OAAO;KAC7B,MAAM;KACN,QAAQ;IACV,CAKQ,CAAA,CAAS,SAAS;IACxB,WAAW;GACb;GAGF,IAAI,YAAY,WAUd,OAAO;IACL,MAAM;IACN,QAAQ;IACR,OAZa,SAAS,aACpB,OAAO,iBAAiB;KAAE;KAAK,YAAY,QAAQ;IAAW,CAAC,IAC/D,OAAO,iBAAiB,GAAG,EAAA,CAEP,OAAO;KAC7B,MAAM;KACN,QAAQ;IACV,CAKQ,CAAA,CAAS,SAAS;IACxB,WAAW;GACb;GAGF,MAAM,IAAI,gBACR,yBAAyB,WACzB,KAAK,WACP;EACF,SAAS,OAAO;GACd,MAAM,IAAI,gBACR,yBAA0B,MAAgB,WAC1C,KAAK,aACL,KACF;EACF;CACF;CAEA,MAAM,UACJ,KACA,SAC0B;EAC1B,IAAI;GACF,KAAK,IAAI,eAAe;GAExB,MAAM,SAAS,SAAS,UAAU,IAAI,UAAU;GAEhD,IAAI,WAAW,SAAS,WAAW,WACjC,OAAO,IAAI;GAGb,IAAI,WAAW,YAAY,WAAW,OAAO;IAC3C,IAAI,OAAO,IAAI,SAAS,UACtB,OAAO,OAAO,KAAK,IAAI,IAAI;IAE7B,OAAO,IAAI;GACb;GAEA,OAAO,IAAI;EACb,SAAS,OAAO;GACd,MAAM,IAAI,SACR,yBAA0B,MAAgB,WAC1C,KAAK,aACL,KACF;EACF;CACF;;;;CAKA,MAAM,KACJ,MACA,SAC0B;EAC1B,IAAI;GACF,KAAK,IAAI,cAAc;GAEvB,MAAM,aAAa,SAAS,aACxB,KAAK,uBACH,QAAQ,YACR,QAAQ,UACV,IACA,KAAK;GAET,IAAI,CAAC,YACH,MAAM,IAAI,SACR,wCACA,KAAK,WACP;GAGF,MAAM,UACJ,OAAO,SAAS,WAAW,OAAO,KAAK,MAAM,MAAM,IAAI;GAEzD,MAAM,YAAY,OAAO,KAAK,MAAM,SAAS,UAAU;GAEvD,KAAK,IAAI,0BAA0B;GAEnC,IAAI,OAAO,SAAS,UAClB,OAAO,UAAU,SAAS,QAAQ;GAGpC,OAAO;EACT,SAAS,OAAO;GACd,MAAM,IAAI,eACR,wBAAyB,MAAgB,WACzC,KAAK,aACL,KACF;EACF;CACF;;;;CAKA,MAAM,OACJ,MACA,WACA,SACkB;EAClB,IAAI;GACF,KAAK,IAAI,qBAAqB;GAE9B,IAAI,CAAC,SAAS,WACZ,OAAO;GAGT,MAAM,YAAY,KAAK,sBACrB,QAAQ,SACV;GAEA,MAAM,UACJ,OAAO,SAAS,WAAW,OAAO,KAAK,MAAM,MAAM,IAAI;GACzD,MAAM,MACJ,OAAO,cAAc,WACjB,OAAO,KAAK,WAAW,QAAQ,IAC/B;GAEN,MAAM,QAAQ,OAAO,OAAO,MAAM,SAAS,WAAW,GAAG;GAEzD,KAAK,IAAI,QAAQ,uBAAuB,+BAA+B;GAEvE,OAAO;EACT,SAAS,OAAO;GACd,KAAK,IAAI,iCAAiC,KAAK;GAC/C,OAAO;EACT;CACF;CAEA,MAAM,kBAAmD;EACvD,MAAM,YAAY,KAAK,QAAQ,UAAU,YAAY;EAsBrD,OAAO;GACL,gBAAgB;GAChB,gBAAgB;GAChB,kBAAkB;GAClB,kBAAkB;GAClB,iBAAiB;GACjB,SAAS;GACT,cAAc;GACd,eAAe;GACf,eAAe;GACf,oBAAoB;GACpB,qBAhBkB;IAblB;IACA;IACA;IACA;GAUkB,CAAA,CAAoB,SAAS,SAgB1B;GACrB,sBAhBmB;IARnB;IACA;IACA;IACA;IACA;GAImB,CAAA,CAAqB,MAAM,SAC9C,UAAU,SAAS,IAAI,CAeD;EACxB;CACF;AACF"}