@hawcx/oauth-client 0.1.0 → 4.0.1

package/dist/delegation/credentials.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Credential blob parsing for HAWCX_SECRET_KEY
+ *
+ * Format: hwx_sk_v1_<base64url(JSON)>
+ *
+ * JSON payload:
+ * {
+ *   "v": 1,
+ *   "alg": "ed25519+x25519",
+ *   "kid": "cust_abc123",
+ *   "ed_priv": "<32-byte-base64url>",
+ *   "x_priv": "<32-byte-base64url>",
+ *   "h_ed_pub": "<32-byte-base64url>",
+ *   "h_x_pub": "<32-byte-base64url>",
+ *   "hkid": "hwx_2025_01"
+ * }
+ */
+/**
+ * Raw credential blob structure (as stored in the base64url JSON)
+ */
+export interface HawcxCredentialBlob {
+    /** Version number (must be 1) */
+    v: number;
+    /** Algorithm identifier (must be "ed25519+x25519") */
+    alg: string;
+    /** Customer key ID */
+    kid: string;
+    /** Customer Ed25519 private key (32 bytes, base64url) */
+    ed_priv: string;
+    /** Customer X25519 private key (32 bytes, base64url) */
+    x_priv: string;
+    /** Hawcx Ed25519 public key (32 bytes, base64url) */
+    h_ed_pub: string;
+    /** Hawcx X25519 public key (32 bytes, base64url) */
+    h_x_pub: string;
+    /** Hawcx key ID (for key rotation) */
+    hkid: string;
+}
+/**
+ * Parsed credentials ready for use with crypto classes
+ */
+export interface ParsedCredentials {
+    /** Customer key ID */
+    kid: string;
+    /** Hawcx key ID */
+    hkid: string;
+    /** Customer Ed25519 private key (PEM format) */
+    signingKeyPem: string;
+    /** Hawcx Ed25519 public key (PEM format) */
+    verifyKeyPem: string;
+    /** Hawcx X25519 public key (PEM format) - for encrypting requests */
+    encryptKeyPem: string;
+    /** Customer X25519 private key (PEM format) - for decrypting responses */
+    decryptKeyPem: string;
+}
+/**
+ * Parse a HAWCX_SECRET_KEY credential string into usable key material.
+ *
+ * @param secretKey - The full credential string (hwx_sk_v1_<base64url>)
+ * @returns Parsed credentials with PEM-formatted keys
+ * @throws DelegationCryptoError if parsing fails
+ *
+ * @example
+ * ```typescript
+ * const creds = parseHawcxSecretKey(process.env.HAWCX_SECRET_KEY!);
+ * const signer = new Ed25519Signer(creds.signingKeyPem, creds.kid);
+ * const encryptor = new EciesX25519Encryptor(creds.encryptKeyPem);
+ * ```
+ */
+export declare function parseHawcxSecretKey(secretKey: string): ParsedCredentials;
+/**
+ * Generate a credential blob (for dashboard/admin tooling).
+ * This is typically called server-side when provisioning a new customer.
+ *
+ * @param options - Key generation options
+ * @returns The full credential string (hwx_sk_v1_<base64url>)
+ */
+export declare function generateCredentialBlob(options: {
+    /** Customer key ID */
+    kid: string;
+    /** Hawcx key ID */
+    hkid: string;
+    /** Customer Ed25519 private key (raw 32 bytes) */
+    edPrivate: Buffer;
+    /** Customer X25519 private key (raw 32 bytes) */
+    xPrivate: Buffer;
+    /** Hawcx Ed25519 public key (raw 32 bytes) */
+    hawcxEdPublic: Buffer;
+    /** Hawcx X25519 public key (raw 32 bytes) */
+    hawcxXPublic: Buffer;
+}): string;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/delegation/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/delegation/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAkDH;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,iCAAiC;IACjC,CAAC,EAAE,MAAM,CAAC;IACV,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,sBAAsB;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,sBAAsB;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;CACvB;AA8DD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,CA2ExE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAC9C,sBAAsB;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CA6BT"}

package/dist/delegation/credentials.js

@@ -0,0 +1,215 @@
+"use strict";
+/**
+ * Credential blob parsing for HAWCX_SECRET_KEY
+ *
+ * Format: hwx_sk_v1_<base64url(JSON)>
+ *
+ * JSON payload:
+ * {
+ *   "v": 1,
+ *   "alg": "ed25519+x25519",
+ *   "kid": "cust_abc123",
+ *   "ed_priv": "<32-byte-base64url>",
+ *   "x_priv": "<32-byte-base64url>",
+ *   "h_ed_pub": "<32-byte-base64url>",
+ *   "h_x_pub": "<32-byte-base64url>",
+ *   "hkid": "hwx_2025_01"
+ * }
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseHawcxSecretKey = parseHawcxSecretKey;
+exports.generateCredentialBlob = generateCredentialBlob;
+const exceptions_1 = require("./exceptions");
+// -------- Constants --------
+const CREDENTIAL_PREFIX = 'hwx_sk_v1_';
+const EXPECTED_VERSION = 1;
+const EXPECTED_ALG = 'ed25519+x25519';
+const RAW_KEY_LENGTH = 32;
+// DER headers for key wrapping
+// Ed25519 private key PKCS8 header (14 bytes) + 2 bytes length prefix for the key
+const ED25519_PKCS8_HEADER = Buffer.from([
+    0x30, 0x2e, // SEQUENCE, 46 bytes
+    0x02, 0x01, 0x00, // INTEGER 0 (version)
+    0x30, 0x05, // SEQUENCE, 5 bytes (algorithm identifier)
+    0x06, 0x03, 0x2b, 0x65, 0x70, // OID 1.3.101.112 (Ed25519)
+    0x04, 0x22, // OCTET STRING, 34 bytes
+    0x04, 0x20, // OCTET STRING, 32 bytes (the actual key)
+]);
+// Ed25519 public key SPKI header (12 bytes)
+const ED25519_SPKI_HEADER = Buffer.from([
+    0x30, 0x2a, // SEQUENCE, 42 bytes
+    0x30, 0x05, // SEQUENCE, 5 bytes (algorithm identifier)
+    0x06, 0x03, 0x2b, 0x65, 0x70, // OID 1.3.101.112 (Ed25519)
+    0x03, 0x21, 0x00, // BIT STRING, 33 bytes (with 0 unused bits)
+]);
+// X25519 private key PKCS8 header
+const X25519_PKCS8_HEADER = Buffer.from([
+    0x30, 0x2e, // SEQUENCE, 46 bytes
+    0x02, 0x01, 0x00, // INTEGER 0 (version)
+    0x30, 0x05, // SEQUENCE, 5 bytes (algorithm identifier)
+    0x06, 0x03, 0x2b, 0x65, 0x6e, // OID 1.3.101.110 (X25519)
+    0x04, 0x22, // OCTET STRING, 34 bytes
+    0x04, 0x20, // OCTET STRING, 32 bytes (the actual key)
+]);
+// X25519 public key SPKI header
+const X25519_SPKI_HEADER = Buffer.from([
+    0x30, 0x2a, // SEQUENCE, 42 bytes
+    0x30, 0x05, // SEQUENCE, 5 bytes (algorithm identifier)
+    0x06, 0x03, 0x2b, 0x65, 0x6e, // OID 1.3.101.110 (X25519)
+    0x03, 0x21, 0x00, // BIT STRING, 33 bytes (with 0 unused bits)
+]);
+// -------- Key Conversion Helpers --------
+/**
+ * Convert raw 32-byte Ed25519 private key to PEM format
+ */
+function ed25519PrivateToPem(rawKey) {
+    if (rawKey.length !== RAW_KEY_LENGTH) {
+        throw new exceptions_1.DelegationCryptoError(`Ed25519 private key must be ${RAW_KEY_LENGTH} bytes, got ${rawKey.length}`);
+    }
+    const der = Buffer.concat([ED25519_PKCS8_HEADER, rawKey]);
+    const b64 = der.toString('base64');
+    return `-----BEGIN PRIVATE KEY-----\n${b64.match(/.{1,64}/g)?.join('\n')}\n-----END PRIVATE KEY-----`;
+}
+/**
+ * Convert raw 32-byte Ed25519 public key to PEM format
+ */
+function ed25519PublicToPem(rawKey) {
+    if (rawKey.length !== RAW_KEY_LENGTH) {
+        throw new exceptions_1.DelegationCryptoError(`Ed25519 public key must be ${RAW_KEY_LENGTH} bytes, got ${rawKey.length}`);
+    }
+    const der = Buffer.concat([ED25519_SPKI_HEADER, rawKey]);
+    const b64 = der.toString('base64');
+    return `-----BEGIN PUBLIC KEY-----\n${b64.match(/.{1,64}/g)?.join('\n')}\n-----END PUBLIC KEY-----`;
+}
+/**
+ * Convert raw 32-byte X25519 private key to PEM format
+ */
+function x25519PrivateToPem(rawKey) {
+    if (rawKey.length !== RAW_KEY_LENGTH) {
+        throw new exceptions_1.DelegationCryptoError(`X25519 private key must be ${RAW_KEY_LENGTH} bytes, got ${rawKey.length}`);
+    }
+    const der = Buffer.concat([X25519_PKCS8_HEADER, rawKey]);
+    const b64 = der.toString('base64');
+    return `-----BEGIN PRIVATE KEY-----\n${b64.match(/.{1,64}/g)?.join('\n')}\n-----END PRIVATE KEY-----`;
+}
+/**
+ * Convert raw 32-byte X25519 public key to PEM format
+ */
+function x25519PublicToPem(rawKey) {
+    if (rawKey.length !== RAW_KEY_LENGTH) {
+        throw new exceptions_1.DelegationCryptoError(`X25519 public key must be ${RAW_KEY_LENGTH} bytes, got ${rawKey.length}`);
+    }
+    const der = Buffer.concat([X25519_SPKI_HEADER, rawKey]);
+    const b64 = der.toString('base64');
+    return `-----BEGIN PUBLIC KEY-----\n${b64.match(/.{1,64}/g)?.join('\n')}\n-----END PUBLIC KEY-----`;
+}
+// -------- Main Parser --------
+/**
+ * Parse a HAWCX_SECRET_KEY credential string into usable key material.
+ *
+ * @param secretKey - The full credential string (hwx_sk_v1_<base64url>)
+ * @returns Parsed credentials with PEM-formatted keys
+ * @throws DelegationCryptoError if parsing fails
+ *
+ * @example
+ * ```typescript
+ * const creds = parseHawcxSecretKey(process.env.HAWCX_SECRET_KEY!);
+ * const signer = new Ed25519Signer(creds.signingKeyPem, creds.kid);
+ * const encryptor = new EciesX25519Encryptor(creds.encryptKeyPem);
+ * ```
+ */
+function parseHawcxSecretKey(secretKey) {
+    // Validate prefix
+    if (!secretKey.startsWith(CREDENTIAL_PREFIX)) {
+        throw new exceptions_1.DelegationCryptoError(`Invalid credential format: must start with '${CREDENTIAL_PREFIX}'`);
+    }
+    // Extract and decode payload
+    const payloadB64 = secretKey.slice(CREDENTIAL_PREFIX.length);
+    let blob;
+    try {
+        const payloadJson = Buffer.from(payloadB64, 'base64url').toString('utf-8');
+        blob = JSON.parse(payloadJson);
+    }
+    catch (error) {
+        throw new exceptions_1.DelegationCryptoError('Invalid credential format: failed to decode payload', {
+            cause: error,
+        });
+    }
+    // Validate version
+    if (blob.v !== EXPECTED_VERSION) {
+        throw new exceptions_1.DelegationCryptoError(`Unsupported credential version: ${blob.v} (expected ${EXPECTED_VERSION})`);
+    }
+    // Validate algorithm
+    if (blob.alg !== EXPECTED_ALG) {
+        throw new exceptions_1.DelegationCryptoError(`Unsupported credential algorithm: ${blob.alg} (expected ${EXPECTED_ALG})`);
+    }
+    // Validate required fields
+    const requiredFields = [
+        'kid',
+        'ed_priv',
+        'x_priv',
+        'h_ed_pub',
+        'h_x_pub',
+        'hkid',
+    ];
+    for (const field of requiredFields) {
+        if (!blob[field]) {
+            throw new exceptions_1.DelegationCryptoError(`Missing required field: ${field}`);
+        }
+    }
+    // Decode and validate key lengths
+    let edPrivRaw;
+    let xPrivRaw;
+    let hEdPubRaw;
+    let hXPubRaw;
+    try {
+        edPrivRaw = Buffer.from(blob.ed_priv, 'base64url');
+        xPrivRaw = Buffer.from(blob.x_priv, 'base64url');
+        hEdPubRaw = Buffer.from(blob.h_ed_pub, 'base64url');
+        hXPubRaw = Buffer.from(blob.h_x_pub, 'base64url');
+    }
+    catch (error) {
+        throw new exceptions_1.DelegationCryptoError('Invalid base64url in credential keys', { cause: error });
+    }
+    // Convert to PEM format
+    return {
+        kid: blob.kid,
+        hkid: blob.hkid,
+        signingKeyPem: ed25519PrivateToPem(edPrivRaw),
+        verifyKeyPem: ed25519PublicToPem(hEdPubRaw),
+        encryptKeyPem: x25519PublicToPem(hXPubRaw),
+        decryptKeyPem: x25519PrivateToPem(xPrivRaw),
+    };
+}
+/**
+ * Generate a credential blob (for dashboard/admin tooling).
+ * This is typically called server-side when provisioning a new customer.
+ *
+ * @param options - Key generation options
+ * @returns The full credential string (hwx_sk_v1_<base64url>)
+ */
+function generateCredentialBlob(options) {
+    const validateLen = (label, value) => {
+        if (value.length !== RAW_KEY_LENGTH) {
+            throw new exceptions_1.DelegationCryptoError(`${label} must be ${RAW_KEY_LENGTH} bytes, got ${value.length}`);
+        }
+    };
+    validateLen('edPrivate', options.edPrivate);
+    validateLen('xPrivate', options.xPrivate);
+    validateLen('hawcxEdPublic', options.hawcxEdPublic);
+    validateLen('hawcxXPublic', options.hawcxXPublic);
+    const blob = {
+        v: EXPECTED_VERSION,
+        alg: EXPECTED_ALG,
+        kid: options.kid,
+        ed_priv: options.edPrivate.toString('base64url'),
+        x_priv: options.xPrivate.toString('base64url'),
+        h_ed_pub: options.hawcxEdPublic.toString('base64url'),
+        h_x_pub: options.hawcxXPublic.toString('base64url'),
+        hkid: options.hkid,
+    };
+    const payloadJson = JSON.stringify(blob);
+    const payloadB64 = Buffer.from(payloadJson).toString('base64url');
+    return `${CREDENTIAL_PREFIX}${payloadB64}`;
+}
+//# sourceMappingURL=credentials.js.map

package/dist/delegation/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/delegation/credentials.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;AAoKH,kDA2EC;AASD,wDA0CC;AAhSD,6CAAqD;AAErD,8BAA8B;AAE9B,MAAM,iBAAiB,GAAG,YAAY,CAAC;AACvC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,+BAA+B;AAC/B,kFAAkF;AAClF,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC;IACvC,IAAI,EAAE,IAAI,EAAE,qBAAqB;IACjC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB;IACxC,IAAI,EAAE,IAAI,EAAE,2CAA2C;IACvD,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B;IAC1D,IAAI,EAAE,IAAI,EAAE,yBAAyB;IACrC,IAAI,EAAE,IAAI,EAAE,0CAA0C;CACvD,CAAC,CAAC;AAEH,4CAA4C;AAC5C,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC;IACtC,IAAI,EAAE,IAAI,EAAE,qBAAqB;IACjC,IAAI,EAAE,IAAI,EAAE,2CAA2C;IACvD,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B;IAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,4CAA4C;CAC/D,CAAC,CAAC;AAEH,kCAAkC;AAClC,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC;IACtC,IAAI,EAAE,IAAI,EAAE,qBAAqB;IACjC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB;IACxC,IAAI,EAAE,IAAI,EAAE,2CAA2C;IACvD,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B;IACzD,IAAI,EAAE,IAAI,EAAE,yBAAyB;IACrC,IAAI,EAAE,IAAI,EAAE,0CAA0C;CACvD,CAAC,CAAC;AAEH,gCAAgC;AAChC,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC;IACrC,IAAI,EAAE,IAAI,EAAE,qBAAqB;IACjC,IAAI,EAAE,IAAI,EAAE,2CAA2C;IACvD,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B;IACzD,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,4CAA4C;CAC/D,CAAC,CAAC;AA4CH,2CAA2C;AAE3C;;GAEG;AACH,SAAS,mBAAmB,CAAC,MAAc;IACzC,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,kCAAqB,CAC7B,+BAA+B,cAAc,eAAe,MAAM,CAAC,MAAM,EAAE,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,gCAAgC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC;AACxG,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,kCAAqB,CAC7B,8BAA8B,cAAc,eAAe,MAAM,CAAC,MAAM,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,+BAA+B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC;AACtG,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,kCAAqB,CAC7B,8BAA8B,cAAc,eAAe,MAAM,CAAC,MAAM,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,gCAAgC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC;AACxG,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,kCAAqB,CAC7B,6BAA6B,cAAc,eAAe,MAAM,CAAC,MAAM,EAAE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,+BAA+B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC;AACtG,CAAC;AAED,gCAAgC;AAEhC;;;;;;;;;;;;;GAaG;AACH,SAAgB,mBAAmB,CAAC,SAAiB;IACnD,kBAAkB;IAClB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,kCAAqB,CAC7B,+CAA+C,iBAAiB,GAAG,CACpE,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,IAAyB,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kCAAqB,CAAC,qDAAqD,EAAE;YACrF,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,IAAI,IAAI,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,kCAAqB,CAC7B,mCAAmC,IAAI,CAAC,CAAC,cAAc,gBAAgB,GAAG,CAC3E,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,kCAAqB,CAC7B,qCAAqC,IAAI,CAAC,GAAG,cAAc,YAAY,GAAG,CAC3E,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,MAAM,cAAc,GAAkC;QACpD,KAAK;QACL,SAAS;QACT,QAAQ;QACR,UAAU;QACV,SAAS;QACT,MAAM;KACP,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,kCAAqB,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,IAAI,SAAiB,CAAC;IACtB,IAAI,QAAgB,CAAC;IACrB,IAAI,SAAiB,CAAC;IACtB,IAAI,QAAgB,CAAC;IAErB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACnD,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjD,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACpD,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kCAAqB,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,wBAAwB;IACxB,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,mBAAmB,CAAC,SAAS,CAAC;QAC7C,YAAY,EAAE,kBAAkB,CAAC,SAAS,CAAC;QAC3C,aAAa,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QAC1C,aAAa,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,sBAAsB,CAAC,OAatC;IACC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACpC,MAAM,IAAI,kCAAqB,CAC7B,GAAG,KAAK,YAAY,cAAc,eAAe,KAAK,CAAC,MAAM,EAAE,CAChE,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,WAAW,CAAC,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACpD,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAElD,MAAM,IAAI,GAAwB;QAChC,CAAC,EAAE,gBAAgB;QACnB,GAAG,EAAE,YAAY;QACjB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChD,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9C,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrD,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnD,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAElE,OAAO,GAAG,iBAAiB,GAAG,UAAU,EAAE,CAAC;AAC7C,CAAC"}

package/dist/delegation/crypto.d.ts

@@ -56,7 +56,7 @@ export declare class EciesX25519Encryptor {
     /**
      * Encrypt plaintext using ECIES
      */
-    encrypt(plaintext: Buffer): Buffer;
+    encrypt(plaintext: Buffer): Promise<Buffer>;
 }
 /**
  * ECIES decryptor using X25519 + AES-GCM
@@ -67,6 +67,6 @@ export declare class EciesX25519Decryptor {
     /**
      * Decrypt ECIES envelope
      */
-    decrypt(envelopeJson: Buffer): Buffer;
+    decrypt(envelopeJson: Buffer): Promise<Buffer>;
 }
 //# sourceMappingURL=crypto.d.ts.map

package/dist/delegation/crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/delegation/crypto.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH;;GAEG;AACH,wBAAgB,IAAI,IAAI,MAAM,CAE7B;AAkBD,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,EAAE,CAAmB;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAa;gBAEnB,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;IAoB5C;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU;CAanD;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,EAAE,CAAmB;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAoB;gBAE1B,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;IAoB5C;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU;CAiBnD;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,OAAO,CAAgC;gBAEnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAmB3C;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;CAwClF;AAID;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,aAAa,CAAS;gBAElB,UAAU,EAAE,MAAM;IAqB9B;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAiDnC;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,EAAE,CAAmB;gBAEjB,OAAO,EAAE,MAAM;IAkB3B;;OAEG;IACH,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;CA+CtC"}
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/delegation/crypto.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH;;GAEG;AACH,wBAAgB,IAAI,IAAI,MAAM,CAE7B;AAuDD,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,EAAE,CAAmB;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAa;gBAEnB,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;IAoB5C;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU;CAanD;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,EAAE,CAAmB;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAoB;gBAE1B,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM;IAoB5C;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU;CAiBnD;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,OAAO,CAAgC;gBAEnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAmB3C;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;CAwClF;AAID;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,aAAa,CAAmB;gBAE5B,UAAU,EAAE,MAAM;IAoB9B;;OAEG;IACG,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CA0ClD;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,EAAE,CAAmB;gBAEjB,OAAO,EAAE,MAAM;IAkB3B;;OAEG;IACG,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAqDrD"}

package/dist/delegation/crypto.js

@@ -59,6 +59,28 @@ function b64e(buffer) {
 function b64d(str) {
     return Buffer.from(str, 'base64url');
 }
+async function hkdf(digest, key, salt, info, length) {
+    return await new Promise((resolve, reject) => {
+        crypto.hkdf(digest, key, salt, info, length, (err, derivedKey) => {
+            if (err) {
+                reject(err);
+                return;
+            }
+            resolve(Buffer.from(derivedKey));
+        });
+    });
+}
+async function generateX25519KeyPair() {
+    return await new Promise((resolve, reject) => {
+        crypto.generateKeyPair('x25519', undefined, (err, publicKey, privateKey) => {
+            if (err) {
+                reject(err);
+                return;
+            }
+            resolve({ publicKey, privateKey });
+        });
+    });
+}
 /**
  * Ed25519 signer for delegation requests
  */
@@ -80,7 +102,7 @@ class Ed25519Signer {
             if (error instanceof exceptions_1.DelegationCryptoError) {
                 throw error;
             }
-            throw new exceptions_1.DelegationCryptoError(`Failed to load Ed25519 private key: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('Failed to load Ed25519 private key', { cause: error });
         }
     }
     /**
@@ -97,7 +119,7 @@ class Ed25519Signer {
             };
         }
         catch (error) {
-            throw new exceptions_1.DelegationCryptoError(`Ed25519 signing failed: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('Ed25519 signing failed', { cause: error });
         }
     }
 }
@@ -123,7 +145,7 @@ class RsaPssSigner {
             if (error instanceof exceptions_1.DelegationCryptoError) {
                 throw error;
             }
-            throw new exceptions_1.DelegationCryptoError(`Failed to load RSA private key: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('Failed to load RSA private key', { cause: error });
         }
     }
     /**
@@ -135,7 +157,7 @@ class RsaPssSigner {
             const signature = crypto.sign('sha256', data, {
                 key: this.sk,
                 padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
-                saltLength: crypto.constants.RSA_PSS_SALTLEN_MAX_SIGN,
+                saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,
             });
             return {
                 alg: this.alg,
@@ -144,7 +166,7 @@ class RsaPssSigner {
             };
         }
         catch (error) {
-            throw new exceptions_1.DelegationCryptoError(`RSA-PSS signing failed: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('RSA-PSS signing failed', { cause: error });
         }
     }
 }
@@ -168,7 +190,7 @@ class Verifier {
             }
         }
         catch (error) {
-            throw new exceptions_1.DelegationCryptoError(`Failed to load one or more public keys: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('Failed to load one or more public keys', { cause: error });
         }
     }
     /**
@@ -197,7 +219,7 @@ class Verifier {
                 isValid = crypto.verify('sha256', dataToVerify, {
                     key: pub,
                     padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
-                    saltLength: crypto.constants.RSA_PSS_SALTLEN_MAX_SIGN,
+                    saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST,
                 }, sig);
             }
             else {
@@ -211,7 +233,7 @@ class Verifier {
             if (error instanceof exceptions_1.DelegationCryptoError) {
                 throw error;
             }
-            throw new exceptions_1.DelegationCryptoError(`Signature verification failed: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('Signature verification failed', { cause: error });
         }
     }
 }
@@ -230,42 +252,29 @@ class EciesX25519Encryptor {
             if (key.asymmetricKeyType !== 'x25519') {
                 throw new exceptions_1.DelegationCryptoError('peer_pub_pem must be an X25519 public key');
             }
-            // Export raw X25519 public key (32 bytes)
-            this.peerPublicKey = key.export({ type: 'spki', format: 'der' }).slice(-32);
+            this.peerPublicKey = key;
         }
         catch (error) {
             if (error instanceof exceptions_1.DelegationCryptoError) {
                 throw error;
             }
-            throw new exceptions_1.DelegationCryptoError(`Failed to load ECIES peer public key: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('Failed to load ECIES peer public key', { cause: error });
         }
     }
     /**
      * Encrypt plaintext using ECIES
      */
-    encrypt(plaintext) {
+    async encrypt(plaintext) {
         try {
             // Generate ephemeral X25519 keypair
-            const ephPrivateKey = crypto.generateKeyPairSync('x25519', {
-                privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
-                publicKeyEncoding: { type: 'spki', format: 'pem' },
-            });
-            const ephPrivKey = crypto.createPrivateKey(ephPrivateKey.privateKey);
-            const ephPubKey = crypto.createPublicKey(ephPrivateKey.publicKey);
+            const { publicKey: ephPubKey, privateKey: ephPrivKey } = await generateX25519KeyPair();
             // Perform ECDH
             const shared = crypto.diffieHellman({
                 privateKey: ephPrivKey,
-                publicKey: crypto.createPublicKey({
-                    key: Buffer.concat([
-                        Buffer.from([0x30, 0x2a, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x6e, 0x03, 0x21, 0x00]),
-                        this.peerPublicKey,
-                    ]),
-                    format: 'der',
-                    type: 'spki',
-                }),
+                publicKey: this.peerPublicKey,
             });
             // Derive AES key using HKDF
-            const key = crypto.hkdfSync('sha256', shared, Buffer.alloc(0), Buffer.from('idp-sp-ecies-v1'), 32);
+            const key = await hkdf('sha256', shared, Buffer.alloc(0), Buffer.from('idp-sp-ecies-v1'), 32);
             // Encrypt with AES-GCM
             const nonce = crypto.randomBytes(12);
             const cipher = crypto.createCipheriv('aes-256-gcm', Buffer.from(key), nonce);
@@ -283,7 +292,7 @@ class EciesX25519Encryptor {
             return Buffer.from(JSON.stringify(envelope));
         }
         catch (error) {
-            throw new exceptions_1.DelegationCryptoError(`ECIES encryption failed: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('ECIES encryption failed', { cause: error });
         }
     }
 }
@@ -306,13 +315,13 @@ class EciesX25519Decryptor {
             if (error instanceof exceptions_1.DelegationCryptoError) {
                 throw error;
             }
-            throw new exceptions_1.DelegationCryptoError(`Failed to load ECIES private key: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('Failed to load ECIES private key', { cause: error });
         }
     }
     /**
      * Decrypt ECIES envelope
      */
-    decrypt(envelopeJson) {
+    async decrypt(envelopeJson) {
         try {
             const envelope = JSON.parse(envelopeJson.toString('utf-8'));
             if (envelope.enc !== 'x25519-aesgcm') {
@@ -340,7 +349,7 @@ class EciesX25519Decryptor {
                 publicKey: epk,
             });
             // Derive AES key using HKDF
-            const key = crypto.hkdfSync('sha256', shared, Buffer.alloc(0), Buffer.from('idp-sp-ecies-v1'), 32);
+            const key = await hkdf('sha256', shared, Buffer.alloc(0), Buffer.from('idp-sp-ecies-v1'), 32);
             // Decrypt with AES-GCM
             const decipher = crypto.createDecipheriv('aes-256-gcm', Buffer.from(key), nonce);
             decipher.setAuthTag(tag);
@@ -348,7 +357,7 @@ class EciesX25519Decryptor {
             return plaintext;
         }
         catch (error) {
-            throw new exceptions_1.DelegationCryptoError(`ECIES decryption failed: ${error}`);
+            throw new exceptions_1.DelegationCryptoError('ECIES decryption failed', { cause: error });
         }
     }
 }

package/dist/delegation/crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/delegation/crypto.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUH,oBAEC;AAVD,+CAAiC;AACjC,6CAAqD;AAErD,4BAA4B;AAE5B;;GAEG;AACH,SAAgB,IAAI;IAClB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,IAAI,CAAC,MAAc;IAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACvC,CAAC;AAUD;;GAEG;AACH,MAAa,aAAa;IAKxB,YAAY,UAAkB,EAAE,GAAY;QAFrC,QAAG,GAAW,SAAS,CAAC;QAG7B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAChC,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,sBAAsB;YACtB,IAAI,IAAI,CAAC,EAAE,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBAC5C,MAAM,IAAI,kCAAqB,CAAC,4CAA4C,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAAY,EAAE,EAAU;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACnD,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;CACF;AAzCD,sCAyCC;AAED;;GAEG;AACH,MAAa,YAAY;IAKvB,YAAY,UAAkB,EAAE,GAAY;QAFrC,QAAG,GAAW,gBAAgB,CAAC;QAGpC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAChC,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,kBAAkB;YAClB,IAAI,IAAI,CAAC,EAAE,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;gBACxC,MAAM,IAAI,kCAAqB,CAAC,wCAAwC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAAY,EAAE,EAAU;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAC5C,GAAG,EAAE,IAAI,CAAC,EAAE;gBACZ,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;gBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,wBAAwB;aACtD,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;CACF;AA7CD,oCA6CC;AAED;;GAEG;AACH,MAAa,QAAQ;IAGnB,YAAY,OAA+B;QACzC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,kCAAqB,CAAC,uDAAuD,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;oBACjC,GAAG,EAAE,GAAG;oBACR,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,2CAA2C,KAAK,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAY,EAAE,EAAU,EAAE,MAAc,EAAE,GAAW,EAAE,GAAY;QACxE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,GAAqB,CAAC;YAE1B,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YAC/B,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3C,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,kCAAqB,CAAC,8CAA8C,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAEtF,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,CAAC;YAEtC,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC/C,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC;iBAAM,IAAI,GAAG,KAAK,gBAAgB,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACzD,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE;oBAC9C,GAAG,EAAE,GAAG;oBACR,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;oBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,wBAAwB;iBACtD,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,kCAAqB,CAAC,0BAA0B,GAAG,2BAA2B,CAAC,CAAC;YAC5F,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,kCAAqB,CAAC,+BAA+B,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;CACF;AAjED,4BAiEC;AAED,6CAA6C;AAE7C;;GAEG;AACH,MAAa,oBAAoB;IAG/B,YAAY,UAAkB;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;gBACjC,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,IAAI,kCAAqB,CAAC,2CAA2C,CAAC,CAAC;YAC/E,CAAC;YAED,0CAA0C;YAC1C,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC;YACH,oCAAoC;YACpC,MAAM,aAAa,GAAG,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE;gBACzD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;gBACpD,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;aACnD,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACrE,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAElE,eAAe;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;gBAClC,UAAU,EAAE,UAAU;gBACtB,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC;oBAChC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;wBACjB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;wBACrF,IAAI,CAAC,aAAa;qBACnB,CAAC;oBACF,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,MAAM;iBACb,CAAC;aACH,CAAC,CAAC;YAEH,4BAA4B;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;YAEnG,uBAAuB;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACrE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEhC,qCAAqC;YACrC,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAElF,iBAAiB;YACjB,MAAM,QAAQ,GAAG;gBACf,GAAG,EAAE,eAAe;gBACpB,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC;gBACvB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC;gBACf,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;aACnC,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;CACF;AA5ED,oDA4EC;AAED;;GAEG;AACH,MAAa,oBAAoB;IAG/B,YAAY,OAAe;QACzB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAChC,GAAG,EAAE,OAAO;gBACZ,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,EAAE,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,IAAI,kCAAqB,CAAC,wCAAwC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,YAAoB;QAC1B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAE5D,IAAI,QAAQ,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;gBACrC,MAAM,IAAI,kCAAqB,CAAC,2CAA2C,CAAC,CAAC;YAC/E,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAEpC,gDAAgD;YAChD,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAEjC,mCAAmC;YACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrF,QAAQ;aACT,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;gBACjC,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YAEH,eAAe;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;gBAClC,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YAEH,4BAA4B;YAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;YAEnG,uBAAuB;YACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACjF,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAEzE,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;CACF;AAvED,oDAuEC"}
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/delegation/crypto.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUH,oBAEC;AAVD,+CAAiC;AACjC,6CAAqD;AAErD,4BAA4B;AAE5B;;GAEG;AACH,SAAgB,IAAI;IAClB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,IAAI,CAAC,MAAc;IAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,MAAc,EACd,GAAW,EACX,IAAY,EACZ,IAAY,EACZ,MAAc;IAEd,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;YAC/D,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB;IAIlC,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,CAAC,eAAe,CACpB,QAAQ,EACR,SAAS,EACT,CAAC,GAAiB,EAAE,SAA2B,EAAE,UAA4B,EAAE,EAAE;YAC/E,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACrC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAUD;;GAEG;AACH,MAAa,aAAa;IAKxB,YAAY,UAAkB,EAAE,GAAY;QAFrC,QAAG,GAAW,SAAS,CAAC;QAG7B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAChC,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,sBAAsB;YACtB,IAAI,IAAI,CAAC,EAAE,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBAC5C,MAAM,IAAI,kCAAqB,CAAC,4CAA4C,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAAY,EAAE,EAAU;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACnD,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;CACF;AAzCD,sCAyCC;AAED;;GAEG;AACH,MAAa,YAAY;IAKvB,YAAY,UAAkB,EAAE,GAAY;QAFrC,QAAG,GAAW,gBAAgB,CAAC;QAGpC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAChC,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,kBAAkB;YAClB,IAAI,IAAI,CAAC,EAAE,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;gBACxC,MAAM,IAAI,kCAAqB,CAAC,wCAAwC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAAY,EAAE,EAAU;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAC5C,GAAG,EAAE,IAAI,CAAC,EAAE;gBACZ,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;gBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,sBAAsB;aACpD,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;CACF;AA7CD,oCA6CC;AAED;;GAEG;AACH,MAAa,QAAQ;IAGnB,YAAY,OAA+B;QACzC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,kCAAqB,CAAC,uDAAuD,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;oBACjC,GAAG,EAAE,GAAG;oBACR,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAY,EAAE,EAAU,EAAE,MAAc,EAAE,GAAW,EAAE,GAAY;QACxE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,GAAqB,CAAC;YAE1B,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YAC/B,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3C,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,kCAAqB,CAAC,8CAA8C,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAEtF,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,CAAC;YAEtC,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC/C,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC;iBAAM,IAAI,GAAG,KAAK,gBAAgB,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACzD,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE;oBAC9C,GAAG,EAAE,GAAG;oBACR,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,qBAAqB;oBAC/C,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,sBAAsB;iBACpD,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,kCAAqB,CAAC,0BAA0B,GAAG,2BAA2B,CAAC,CAAC;YAC5F,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,kCAAqB,CAAC,+BAA+B,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF;AAjED,4BAiEC;AAED,6CAA6C;AAE7C;;GAEG;AACH,MAAa,oBAAoB;IAG/B,YAAY,UAAkB;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;gBACjC,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,IAAI,kCAAqB,CAAC,2CAA2C,CAAC,CAAC;YAC/E,CAAC;YAED,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,IAAI,CAAC;YACH,oCAAoC;YACpC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAEvF,eAAe;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;gBAClC,UAAU,EAAE,UAAU;gBACtB,SAAS,EAAE,IAAI,CAAC,aAAa;aAC9B,CAAC,CAAC;YAEH,4BAA4B;YAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CACpB,QAAQ,EACR,MAAM,EACN,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EACf,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9B,EAAE,CACH,CAAC;YAEF,uBAAuB;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACrE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEhC,qCAAqC;YACrC,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAElF,iBAAiB;YACjB,MAAM,QAAQ,GAAG;gBACf,GAAG,EAAE,eAAe;gBACpB,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC;gBACvB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC;gBACf,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;aACnC,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;CACF;AApED,oDAoEC;AAED;;GAEG;AACH,MAAa,oBAAoB;IAG/B,YAAY,OAAe;QACzB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAChC,GAAG,EAAE,OAAO;gBACZ,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,EAAE,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,IAAI,kCAAqB,CAAC,wCAAwC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kCAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,kCAAqB,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAE5D,IAAI,QAAQ,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;gBACrC,MAAM,IAAI,kCAAqB,CAAC,2CAA2C,CAAC,CAAC;YAC/E,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAEpC,gDAAgD;YAChD,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAEjC,mCAAmC;YACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrF,QAAQ;aACT,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;gBACjC,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YAEH,eAAe;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;gBAClC,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YAEH,4BAA4B;YAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CACpB,QAAQ,EACR,MAAM,EACN,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EACf,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAC9B,EAAE,CACH,CAAC;YAEF,uBAAuB;YACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACjF,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAEzE,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kCAAqB,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;CACF;AA7ED,oDA6EC"}

package/dist/delegation/exceptions.d.ts

@@ -1,18 +1,22 @@
 /**
  * Custom exceptions for the Delegation module
  */
-import { HawcxOAuthError } from '../exceptions';
+import { HawcxOAuthError } from '../errors';
 /**
  * Base exception for delegation errors
  */
+export interface DelegationErrorOptions {
+    cause?: unknown;
+}
 export declare class DelegationError extends HawcxOAuthError {
-    constructor(message: string);
+    readonly cause?: unknown;
+    constructor(message: string, options?: DelegationErrorOptions);
 }
 /**
  * Raised for cryptographic errors (signing, encryption, etc.)
  */
 export declare class DelegationCryptoError extends DelegationError {
-    constructor(message: string);
+    constructor(message: string, options?: DelegationErrorOptions);
 }
 /**
  * Raised for errors sending requests to the IDP
@@ -20,13 +24,16 @@ export declare class DelegationCryptoError extends DelegationError {
 export declare class DelegationRequestError extends DelegationError {
     statusCode?: number;
     responseBody?: string;
-    constructor(message: string, statusCode?: number, responseBody?: string);
+    constructor(message: string, options?: DelegationErrorOptions & {
+        statusCode?: number;
+        responseBody?: string;
+    });
     toString(): string;
 }
 /**
  * Raised for errors in the IDP's response
  */
 export declare class DelegationResponseError extends DelegationError {
-    constructor(message: string);
+    constructor(message: string, options?: DelegationErrorOptions);
 }
 //# sourceMappingURL=exceptions.d.ts.map

package/dist/delegation/exceptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exceptions.d.ts","sourceRoot":"","sources":["../../src/delegation/exceptions.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,eAAe;gBACtC,OAAO,EAAE,MAAM;CAK5B;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,eAAe;gBAC5C,OAAO,EAAE,MAAM;CAK5B;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,eAAe;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;gBAEV,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM;IAQvE,QAAQ,IAAI,MAAM;CAOnB;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,eAAe;gBAC9C,OAAO,EAAE,MAAM;CAK5B"}
+{"version":3,"file":"exceptions.d.ts","sourceRoot":"","sources":["../../src/delegation/exceptions.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,eAAgB,SAAQ,eAAe;IAClD,SAAgB,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B;CAMlE;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,eAAe;gBAC5C,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B;CAKlE;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,eAAe;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;gBAGpB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,sBAAsB,GAAG;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO;IASvF,QAAQ,IAAI,MAAM;CAOnB;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,eAAe;gBAC9C,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B;CAKlE"}