@hxa-rn/react-native-quick-crypto 1.1.0-beta.1

package/dist/module/utils/errors.js

@@ -0,0 +1,8 @@
+export function lazyDOMException(message, domName) {
+  let cause = '';
+  if (typeof domName !== 'string') {
+    cause = `\nCaused by: ${domName.cause}`;
+  }
+  return new Error(`[${domName}]: ${message}${cause}`);
+}
+//# sourceMappingURL=errors.js.map

package/dist/module/utils/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["lazyDOMException","message","domName","cause","Error"],"sources":["errors.ts"],"sourcesContent":["type DOMName =\r\n  | string\r\n  | {\r\n      name: string;\r\n      cause: unknown;\r\n    };\r\n\r\nexport function lazyDOMException(message: string, domName: DOMName): Error {\r\n  let cause = '';\r\n  if (typeof domName !== 'string') {\r\n    cause = `\\nCaused by: ${domName.cause}`;\r\n  }\r\n\r\n  return new Error(`[${domName}]: ${message}${cause}`);\r\n}\r\n"],"mappings":"AAOA,OAAO,SAASA,gBAAgBA,CAACC,OAAe,EAAEC,OAAgB,EAAS;EACzE,IAAIC,KAAK,GAAG,EAAE;EACd,IAAI,OAAOD,OAAO,KAAK,QAAQ,EAAE;IAC/BC,KAAK,GAAG,gBAAgBD,OAAO,CAACC,KAAK,EAAE;EACzC;EAEA,OAAO,IAAIC,KAAK,CAAC,IAAIF,OAAO,MAAMD,OAAO,GAAGE,KAAK,EAAE,CAAC;AACtD","ignoreList":[]}

package/dist/module/utils/hashnames.js

@@ -0,0 +1,118 @@
+export let HashContext = /*#__PURE__*/function (HashContext) {
+  HashContext[HashContext["Node"] = 0] = "Node";
+  HashContext[HashContext["WebCrypto"] = 1] = "WebCrypto";
+  HashContext[HashContext["JwkRsa"] = 2] = "JwkRsa";
+  HashContext[HashContext["JwkRsaPss"] = 3] = "JwkRsaPss";
+  HashContext[HashContext["JwkRsaOaep"] = 4] = "JwkRsaOaep";
+  HashContext[HashContext["JwkHmac"] = 5] = "JwkHmac";
+  return HashContext;
+}({});
+
+// WebCrypto and JWK use a bunch of different names for the
+// standard set of SHA-* digest algorithms... which is ... fun.
+// Here we provide a utility for mapping between them in order
+// make it easier in the code.
+
+const kHashNames = {
+  sha1: {
+    [HashContext.Node]: 'sha1',
+    [HashContext.WebCrypto]: 'SHA-1',
+    [HashContext.JwkRsa]: 'RS1',
+    [HashContext.JwkRsaPss]: 'PS1',
+    [HashContext.JwkRsaOaep]: 'RSA-OAEP',
+    [HashContext.JwkHmac]: 'HS1'
+  },
+  sha224: {
+    [HashContext.Node]: 'sha224',
+    [HashContext.WebCrypto]: 'SHA-224',
+    [HashContext.JwkRsa]: 'RS224',
+    [HashContext.JwkRsaPss]: 'PS224',
+    [HashContext.JwkRsaOaep]: 'RSA-OAEP-224',
+    [HashContext.JwkHmac]: 'HS224'
+  },
+  sha256: {
+    [HashContext.Node]: 'sha256',
+    [HashContext.WebCrypto]: 'SHA-256',
+    [HashContext.JwkRsa]: 'RS256',
+    [HashContext.JwkRsaPss]: 'PS256',
+    [HashContext.JwkRsaOaep]: 'RSA-OAEP-256',
+    [HashContext.JwkHmac]: 'HS256'
+  },
+  sha384: {
+    [HashContext.Node]: 'sha384',
+    [HashContext.WebCrypto]: 'SHA-384',
+    [HashContext.JwkRsa]: 'RS384',
+    [HashContext.JwkRsaPss]: 'PS384',
+    [HashContext.JwkRsaOaep]: 'RSA-OAEP-384',
+    [HashContext.JwkHmac]: 'HS384'
+  },
+  sha512: {
+    [HashContext.Node]: 'sha512',
+    [HashContext.WebCrypto]: 'SHA-512',
+    [HashContext.JwkRsa]: 'RS512',
+    [HashContext.JwkRsaPss]: 'PS512',
+    [HashContext.JwkRsaOaep]: 'RSA-OAEP-512',
+    [HashContext.JwkHmac]: 'HS512'
+  },
+  ripemd160: {
+    [HashContext.Node]: 'ripemd160',
+    [HashContext.WebCrypto]: 'RIPEMD-160'
+  },
+  'sha3-256': {
+    [HashContext.Node]: 'sha3-256',
+    [HashContext.WebCrypto]: 'SHA3-256'
+  },
+  'sha3-384': {
+    [HashContext.Node]: 'sha3-384',
+    [HashContext.WebCrypto]: 'SHA3-384'
+  },
+  'sha3-512': {
+    [HashContext.Node]: 'sha3-512',
+    [HashContext.WebCrypto]: 'SHA3-512'
+  },
+  shake128: {
+    [HashContext.Node]: 'shake128',
+    [HashContext.WebCrypto]: 'cSHAKE128'
+  },
+  shake256: {
+    [HashContext.Node]: 'shake256',
+    [HashContext.WebCrypto]: 'cSHAKE256'
+  }
+};
+{
+  // Index the aliases
+  const keys = Object.keys(kHashNames);
+  for (let n = 0; n < keys.length; n++) {
+    const contexts = Object.keys(kHashNames[keys[n]]);
+    for (let i = 0; i < contexts.length; i++) {
+      const alias = kHashNames[keys[n]][contexts[i]].toLowerCase();
+      if (kHashNames[alias] === undefined) kHashNames[alias] = kHashNames[keys[n]];
+    }
+  }
+
+  // Add OpenSSL legacy RSA-* aliases (e.g. RSA-SHA256 -> sha256)
+  for (let n = 0; n < keys.length; n++) {
+    const key = keys[n];
+    if (key.startsWith('sha') || key === 'ripemd160') {
+      const rsaAlias = 'rsa-' + key;
+      if (kHashNames[rsaAlias] === undefined) {
+        kHashNames[rsaAlias] = kHashNames[key];
+      }
+    }
+  }
+}
+export function normalizeHashName(algo, context = HashContext.Node) {
+  if (typeof algo !== 'undefined') {
+    const hashName = typeof algo === 'string' ? algo : algo.name || algo.toString();
+    const normAlgo = hashName.toLowerCase();
+    try {
+      const alias = kHashNames[normAlgo][context];
+      if (alias) return alias;
+      // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    } catch (_e) {
+      // ignore
+    }
+  }
+  throw new Error(`Invalid Hash Algorithm: ${algo}`);
+}
+//# sourceMappingURL=hashnames.js.map

package/dist/module/utils/hashnames.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["HashContext","kHashNames","sha1","Node","WebCrypto","JwkRsa","JwkRsaPss","JwkRsaOaep","JwkHmac","sha224","sha256","sha384","sha512","ripemd160","shake128","shake256","keys","Object","n","length","contexts","i","alias","toLowerCase","undefined","key","startsWith","rsaAlias","normalizeHashName","algo","context","hashName","name","toString","normAlgo","_e","Error"],"sources":["hashnames.ts"],"sourcesContent":["import type { HashAlgorithm } from '.';\r\n\r\nexport enum HashContext {\r\n  Node,\r\n  WebCrypto,\r\n  JwkRsa,\r\n  JwkRsaPss,\r\n  JwkRsaOaep,\r\n  JwkHmac,\r\n}\r\n\r\n// WebCrypto and JWK use a bunch of different names for the\r\n// standard set of SHA-* digest algorithms... which is ... fun.\r\n// Here we provide a utility for mapping between them in order\r\n// make it easier in the code.\r\n\r\ntype HashNames = {\r\n  [key: string]: { [key in HashContext as string]: string };\r\n};\r\n\r\nconst kHashNames: HashNames = {\r\n  sha1: {\r\n    [HashContext.Node]: 'sha1',\r\n    [HashContext.WebCrypto]: 'SHA-1',\r\n    [HashContext.JwkRsa]: 'RS1',\r\n    [HashContext.JwkRsaPss]: 'PS1',\r\n    [HashContext.JwkRsaOaep]: 'RSA-OAEP',\r\n    [HashContext.JwkHmac]: 'HS1',\r\n  },\r\n  sha224: {\r\n    [HashContext.Node]: 'sha224',\r\n    [HashContext.WebCrypto]: 'SHA-224',\r\n    [HashContext.JwkRsa]: 'RS224',\r\n    [HashContext.JwkRsaPss]: 'PS224',\r\n    [HashContext.JwkRsaOaep]: 'RSA-OAEP-224',\r\n    [HashContext.JwkHmac]: 'HS224',\r\n  },\r\n  sha256: {\r\n    [HashContext.Node]: 'sha256',\r\n    [HashContext.WebCrypto]: 'SHA-256',\r\n    [HashContext.JwkRsa]: 'RS256',\r\n    [HashContext.JwkRsaPss]: 'PS256',\r\n    [HashContext.JwkRsaOaep]: 'RSA-OAEP-256',\r\n    [HashContext.JwkHmac]: 'HS256',\r\n  },\r\n  sha384: {\r\n    [HashContext.Node]: 'sha384',\r\n    [HashContext.WebCrypto]: 'SHA-384',\r\n    [HashContext.JwkRsa]: 'RS384',\r\n    [HashContext.JwkRsaPss]: 'PS384',\r\n    [HashContext.JwkRsaOaep]: 'RSA-OAEP-384',\r\n    [HashContext.JwkHmac]: 'HS384',\r\n  },\r\n  sha512: {\r\n    [HashContext.Node]: 'sha512',\r\n    [HashContext.WebCrypto]: 'SHA-512',\r\n    [HashContext.JwkRsa]: 'RS512',\r\n    [HashContext.JwkRsaPss]: 'PS512',\r\n    [HashContext.JwkRsaOaep]: 'RSA-OAEP-512',\r\n    [HashContext.JwkHmac]: 'HS512',\r\n  },\r\n  ripemd160: {\r\n    [HashContext.Node]: 'ripemd160',\r\n    [HashContext.WebCrypto]: 'RIPEMD-160',\r\n  },\r\n  'sha3-256': {\r\n    [HashContext.Node]: 'sha3-256',\r\n    [HashContext.WebCrypto]: 'SHA3-256',\r\n  },\r\n  'sha3-384': {\r\n    [HashContext.Node]: 'sha3-384',\r\n    [HashContext.WebCrypto]: 'SHA3-384',\r\n  },\r\n  'sha3-512': {\r\n    [HashContext.Node]: 'sha3-512',\r\n    [HashContext.WebCrypto]: 'SHA3-512',\r\n  },\r\n  shake128: {\r\n    [HashContext.Node]: 'shake128',\r\n    [HashContext.WebCrypto]: 'cSHAKE128',\r\n  },\r\n  shake256: {\r\n    [HashContext.Node]: 'shake256',\r\n    [HashContext.WebCrypto]: 'cSHAKE256',\r\n  },\r\n};\r\n\r\n{\r\n  // Index the aliases\r\n  const keys: string[] = Object.keys(kHashNames);\r\n  for (let n: number = 0; n < keys.length; n++) {\r\n    const contexts: string[] = Object.keys(kHashNames[keys[n]!]!);\r\n    for (let i: number = 0; i < contexts.length; i++) {\r\n      const alias: string = kHashNames[keys[n]!]![contexts[i]!]!.toLowerCase();\r\n      if (kHashNames[alias] === undefined)\r\n        kHashNames[alias] = kHashNames[keys[n]!]!;\r\n    }\r\n  }\r\n\r\n  // Add OpenSSL legacy RSA-* aliases (e.g. RSA-SHA256 -> sha256)\r\n  for (let n: number = 0; n < keys.length; n++) {\r\n    const key = keys[n]!;\r\n    if (key.startsWith('sha') || key === 'ripemd160') {\r\n      const rsaAlias = 'rsa-' + key;\r\n      if (kHashNames[rsaAlias] === undefined) {\r\n        kHashNames[rsaAlias] = kHashNames[key]!;\r\n      }\r\n    }\r\n  }\r\n}\r\n\r\nexport function normalizeHashName(\r\n  algo: string | HashAlgorithm | { name: string } | undefined,\r\n  context: HashContext = HashContext.Node,\r\n): string {\r\n  if (typeof algo !== 'undefined') {\r\n    const hashName =\r\n      typeof algo === 'string' ? algo : algo.name || algo.toString();\r\n    const normAlgo = hashName.toLowerCase();\r\n    try {\r\n      const alias = kHashNames[normAlgo]![context];\r\n      if (alias) return alias;\r\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars\r\n    } catch (_e) {\r\n      // ignore\r\n    }\r\n  }\r\n  throw new Error(`Invalid Hash Algorithm: ${algo}`);\r\n}\r\n"],"mappings":"AAEA,WAAYA,WAAW,0BAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAA,OAAXA,WAAW;AAAA;;AASvB;AACA;AACA;AACA;;AAMA,MAAMC,UAAqB,GAAG;EAC5BC,IAAI,EAAE;IACJ,CAACF,WAAW,CAACG,IAAI,GAAG,MAAM;IAC1B,CAACH,WAAW,CAACI,SAAS,GAAG,OAAO;IAChC,CAACJ,WAAW,CAACK,MAAM,GAAG,KAAK;IAC3B,CAACL,WAAW,CAACM,SAAS,GAAG,KAAK;IAC9B,CAACN,WAAW,CAACO,UAAU,GAAG,UAAU;IACpC,CAACP,WAAW,CAACQ,OAAO,GAAG;EACzB,CAAC;EACDC,MAAM,EAAE;IACN,CAACT,WAAW,CAACG,IAAI,GAAG,QAAQ;IAC5B,CAACH,WAAW,CAACI,SAAS,GAAG,SAAS;IAClC,CAACJ,WAAW,CAACK,MAAM,GAAG,OAAO;IAC7B,CAACL,WAAW,CAACM,SAAS,GAAG,OAAO;IAChC,CAACN,WAAW,CAACO,UAAU,GAAG,cAAc;IACxC,CAACP,WAAW,CAACQ,OAAO,GAAG;EACzB,CAAC;EACDE,MAAM,EAAE;IACN,CAACV,WAAW,CAACG,IAAI,GAAG,QAAQ;IAC5B,CAACH,WAAW,CAACI,SAAS,GAAG,SAAS;IAClC,CAACJ,WAAW,CAACK,MAAM,GAAG,OAAO;IAC7B,CAACL,WAAW,CAACM,SAAS,GAAG,OAAO;IAChC,CAACN,WAAW,CAACO,UAAU,GAAG,cAAc;IACxC,CAACP,WAAW,CAACQ,OAAO,GAAG;EACzB,CAAC;EACDG,MAAM,EAAE;IACN,CAACX,WAAW,CAACG,IAAI,GAAG,QAAQ;IAC5B,CAACH,WAAW,CAACI,SAAS,GAAG,SAAS;IAClC,CAACJ,WAAW,CAACK,MAAM,GAAG,OAAO;IAC7B,CAACL,WAAW,CAACM,SAAS,GAAG,OAAO;IAChC,CAACN,WAAW,CAACO,UAAU,GAAG,cAAc;IACxC,CAACP,WAAW,CAACQ,OAAO,GAAG;EACzB,CAAC;EACDI,MAAM,EAAE;IACN,CAACZ,WAAW,CAACG,IAAI,GAAG,QAAQ;IAC5B,CAACH,WAAW,CAACI,SAAS,GAAG,SAAS;IAClC,CAACJ,WAAW,CAACK,MAAM,GAAG,OAAO;IAC7B,CAACL,WAAW,CAACM,SAAS,GAAG,OAAO;IAChC,CAACN,WAAW,CAACO,UAAU,GAAG,cAAc;IACxC,CAACP,WAAW,CAACQ,OAAO,GAAG;EACzB,CAAC;EACDK,SAAS,EAAE;IACT,CAACb,WAAW,CAACG,IAAI,GAAG,WAAW;IAC/B,CAACH,WAAW,CAACI,SAAS,GAAG;EAC3B,CAAC;EACD,UAAU,EAAE;IACV,CAACJ,WAAW,CAACG,IAAI,GAAG,UAAU;IAC9B,CAACH,WAAW,CAACI,SAAS,GAAG;EAC3B,CAAC;EACD,UAAU,EAAE;IACV,CAACJ,WAAW,CAACG,IAAI,GAAG,UAAU;IAC9B,CAACH,WAAW,CAACI,SAAS,GAAG;EAC3B,CAAC;EACD,UAAU,EAAE;IACV,CAACJ,WAAW,CAACG,IAAI,GAAG,UAAU;IAC9B,CAACH,WAAW,CAACI,SAAS,GAAG;EAC3B,CAAC;EACDU,QAAQ,EAAE;IACR,CAACd,WAAW,CAACG,IAAI,GAAG,UAAU;IAC9B,CAACH,WAAW,CAACI,SAAS,GAAG;EAC3B,CAAC;EACDW,QAAQ,EAAE;IACR,CAACf,WAAW,CAACG,IAAI,GAAG,UAAU;IAC9B,CAACH,WAAW,CAACI,SAAS,GAAG;EAC3B;AACF,CAAC;AAED;EACE;EACA,MAAMY,IAAc,GAAGC,MAAM,CAACD,IAAI,CAACf,UAAU,CAAC;EAC9C,KAAK,IAAIiB,CAAS,GAAG,CAAC,EAAEA,CAAC,GAAGF,IAAI,CAACG,MAAM,EAAED,CAAC,EAAE,EAAE;IAC5C,MAAME,QAAkB,GAAGH,MAAM,CAACD,IAAI,CAACf,UAAU,CAACe,IAAI,CAACE,CAAC,CAAC,CAAG,CAAC;IAC7D,KAAK,IAAIG,CAAS,GAAG,CAAC,EAAEA,CAAC,GAAGD,QAAQ,CAACD,MAAM,EAAEE,CAAC,EAAE,EAAE;MAChD,MAAMC,KAAa,GAAGrB,UAAU,CAACe,IAAI,CAACE,CAAC,CAAC,CAAE,CAAEE,QAAQ,CAACC,CAAC,CAAC,CAAE,CAAEE,WAAW,CAAC,CAAC;MACxE,IAAItB,UAAU,CAACqB,KAAK,CAAC,KAAKE,SAAS,EACjCvB,UAAU,CAACqB,KAAK,CAAC,GAAGrB,UAAU,CAACe,IAAI,CAACE,CAAC,CAAC,CAAG;IAC7C;EACF;;EAEA;EACA,KAAK,IAAIA,CAAS,GAAG,CAAC,EAAEA,CAAC,GAAGF,IAAI,CAACG,MAAM,EAAED,CAAC,EAAE,EAAE;IAC5C,MAAMO,GAAG,GAAGT,IAAI,CAACE,CAAC,CAAE;IACpB,IAAIO,GAAG,CAACC,UAAU,CAAC,KAAK,CAAC,IAAID,GAAG,KAAK,WAAW,EAAE;MAChD,MAAME,QAAQ,GAAG,MAAM,GAAGF,GAAG;MAC7B,IAAIxB,UAAU,CAAC0B,QAAQ,CAAC,KAAKH,SAAS,EAAE;QACtCvB,UAAU,CAAC0B,QAAQ,CAAC,GAAG1B,UAAU,CAACwB,GAAG,CAAE;MACzC;IACF;EACF;AACF;AAEA,OAAO,SAASG,iBAAiBA,CAC/BC,IAA2D,EAC3DC,OAAoB,GAAG9B,WAAW,CAACG,IAAI,EAC/B;EACR,IAAI,OAAO0B,IAAI,KAAK,WAAW,EAAE;IAC/B,MAAME,QAAQ,GACZ,OAAOF,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,CAACG,IAAI,IAAIH,IAAI,CAACI,QAAQ,CAAC,CAAC;IAChE,MAAMC,QAAQ,GAAGH,QAAQ,CAACR,WAAW,CAAC,CAAC;IACvC,IAAI;MACF,MAAMD,KAAK,GAAGrB,UAAU,CAACiC,QAAQ,CAAC,CAAEJ,OAAO,CAAC;MAC5C,IAAIR,KAAK,EAAE,OAAOA,KAAK;MACvB;IACF,CAAC,CAAC,OAAOa,EAAE,EAAE;MACX;IAAA;EAEJ;EACA,MAAM,IAAIC,KAAK,CAAC,2BAA2BP,IAAI,EAAE,CAAC;AACpD","ignoreList":[]}

package/dist/module/utils/index.js

@@ -0,0 +1,8 @@
+export * from './conversion';
+export * from './errors';
+export * from './hashnames';
+export * from './timingSafeEqual';
+export * from './types';
+export * from './validation';
+export * from './cipher';
+//# sourceMappingURL=index.js.map

package/dist/module/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from './conversion';\r\nexport * from './errors';\r\nexport * from './hashnames';\r\nexport * from './timingSafeEqual';\r\nexport * from './types';\r\nexport * from './validation';\r\nexport * from './cipher';\r\n"],"mappings":"AAAA,cAAc,cAAc;AAC5B,cAAc,UAAU;AACxB,cAAc,aAAa;AAC3B,cAAc,mBAAmB;AACjC,cAAc,SAAS;AACvB,cAAc,cAAc;AAC5B,cAAc,UAAU","ignoreList":[]}

package/dist/module/utils/noble.js

@@ -0,0 +1,74 @@
+/**
+ * Takes hex string or Uint8Array, converts to Uint8Array.
+ * Validates output length.
+ * Will throw error for other types.
+ * @param title descriptive title for an error e.g. 'private key'
+ * @param hex hex string or Uint8Array
+ * @param expectedLength optional, will compare to result array's length
+ * @returns
+ */
+export function ensureBytes(title, hex, expectedLength) {
+  let res;
+  if (typeof hex === 'string') {
+    try {
+      res = hexToBytes(hex);
+    } catch (e) {
+      throw new Error(title + ' must be hex string or Uint8Array, cause: ' + e);
+    }
+  } else if (isBytes(hex)) {
+    // Uint8Array.from() instead of hash.slice() because node.js Buffer
+    // is instance of Uint8Array, and its slice() creates **mutable** copy
+    res = Uint8Array.from(hex);
+  } else {
+    throw new Error(title + ' must be hex string or Uint8Array');
+  }
+  const len = res.length;
+  if (typeof expectedLength === 'number' && len !== expectedLength) throw new Error(title + ' of length ' + expectedLength + ' expected, got ' + len);
+  return res;
+}
+
+/** Checks if something is Uint8Array. Be careful: nodejs Buffer will return true. */
+export function isBytes(a) {
+  return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === 'Uint8Array';
+}
+
+// We use optimized technique to convert hex string to byte array
+const asciis = {
+  _0: 48,
+  _9: 57,
+  A: 65,
+  F: 70,
+  a: 97,
+  f: 102
+};
+function asciiToBase16(ch) {
+  if (ch >= asciis._0 && ch <= asciis._9) return ch - asciis._0; // '2' => 50-48
+  if (ch >= asciis.A && ch <= asciis.F) return ch - (asciis.A - 10); // 'B' => 66-(65-10)
+  if (ch >= asciis.a && ch <= asciis.f) return ch - (asciis.a - 10); // 'b' => 98-(97-10)
+  return;
+}
+
+/**
+ * Convert hex string to byte array. Uses built-in function, when available.
+ * @example hexToBytes('cafe0123') // Uint8Array.from([0xca, 0xfe, 0x01, 0x23])
+ */
+export function hexToBytes(hex) {
+  if (typeof hex !== 'string') throw new Error('hex string expected, got ' + typeof hex);
+  // @ts-expect-error Uint8Array.fromHex
+  if (hasHexBuiltin) return Uint8Array.fromHex(hex);
+  const hl = hex.length;
+  const al = hl / 2;
+  if (hl % 2) throw new Error('hex string expected, got unpadded hex of length ' + hl);
+  const array = new Uint8Array(al);
+  for (let ai = 0, hi = 0; ai < al; ai++, hi += 2) {
+    const n1 = asciiToBase16(hex.charCodeAt(hi));
+    const n2 = asciiToBase16(hex.charCodeAt(hi + 1));
+    if (n1 === undefined || n2 === undefined) {
+      const char = hex.substring(hi, hi + 2);
+      throw new Error('hex string expected, got non-hex character "' + char + '" at index ' + hi);
+    }
+    array[ai] = n1 * 16 + n2; // multiply first octet, e.g. 'a3' => 10*16+3 => 160 + 3 => 163
+  }
+  return array;
+}
+//# sourceMappingURL=noble.js.map

package/dist/module/utils/noble.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ensureBytes","title","hex","expectedLength","res","hexToBytes","e","Error","isBytes","Uint8Array","from","len","length","a","ArrayBuffer","isView","constructor","name","asciis","_0","_9","A","F","f","asciiToBase16","ch","hasHexBuiltin","fromHex","hl","al","array","ai","hi","n1","charCodeAt","n2","undefined","char","substring"],"sources":["noble.ts"],"sourcesContent":["import type { Hex } from './types';\r\n\r\n/**\r\n * Takes hex string or Uint8Array, converts to Uint8Array.\r\n * Validates output length.\r\n * Will throw error for other types.\r\n * @param title descriptive title for an error e.g. 'private key'\r\n * @param hex hex string or Uint8Array\r\n * @param expectedLength optional, will compare to result array's length\r\n * @returns\r\n */\r\nexport function ensureBytes(\r\n  title: string,\r\n  hex: Hex,\r\n  expectedLength?: number,\r\n): Uint8Array {\r\n  let res: Uint8Array;\r\n  if (typeof hex === 'string') {\r\n    try {\r\n      res = hexToBytes(hex);\r\n    } catch (e) {\r\n      throw new Error(title + ' must be hex string or Uint8Array, cause: ' + e);\r\n    }\r\n  } else if (isBytes(hex)) {\r\n    // Uint8Array.from() instead of hash.slice() because node.js Buffer\r\n    // is instance of Uint8Array, and its slice() creates **mutable** copy\r\n    res = Uint8Array.from(hex);\r\n  } else {\r\n    throw new Error(title + ' must be hex string or Uint8Array');\r\n  }\r\n  const len = res.length;\r\n  if (typeof expectedLength === 'number' && len !== expectedLength)\r\n    throw new Error(\r\n      title + ' of length ' + expectedLength + ' expected, got ' + len,\r\n    );\r\n  return res;\r\n}\r\n\r\n/** Checks if something is Uint8Array. Be careful: nodejs Buffer will return true. */\r\nexport function isBytes(a: unknown): a is Uint8Array {\r\n  return (\r\n    a instanceof Uint8Array ||\r\n    (ArrayBuffer.isView(a) && a.constructor.name === 'Uint8Array')\r\n  );\r\n}\r\n\r\n// We use optimized technique to convert hex string to byte array\r\nconst asciis = { _0: 48, _9: 57, A: 65, F: 70, a: 97, f: 102 } as const;\r\nfunction asciiToBase16(ch: number): number | undefined {\r\n  if (ch >= asciis._0 && ch <= asciis._9) return ch - asciis._0; // '2' => 50-48\r\n  if (ch >= asciis.A && ch <= asciis.F) return ch - (asciis.A - 10); // 'B' => 66-(65-10)\r\n  if (ch >= asciis.a && ch <= asciis.f) return ch - (asciis.a - 10); // 'b' => 98-(97-10)\r\n  return;\r\n}\r\n\r\n/**\r\n * Convert hex string to byte array. Uses built-in function, when available.\r\n * @example hexToBytes('cafe0123') // Uint8Array.from([0xca, 0xfe, 0x01, 0x23])\r\n */\r\nexport function hexToBytes(hex: string): Uint8Array {\r\n  if (typeof hex !== 'string')\r\n    throw new Error('hex string expected, got ' + typeof hex);\r\n  // @ts-expect-error Uint8Array.fromHex\r\n  if (hasHexBuiltin) return Uint8Array.fromHex(hex);\r\n  const hl = hex.length;\r\n  const al = hl / 2;\r\n  if (hl % 2)\r\n    throw new Error('hex string expected, got unpadded hex of length ' + hl);\r\n  const array = new Uint8Array(al);\r\n  for (let ai = 0, hi = 0; ai < al; ai++, hi += 2) {\r\n    const n1 = asciiToBase16(hex.charCodeAt(hi));\r\n    const n2 = asciiToBase16(hex.charCodeAt(hi + 1));\r\n    if (n1 === undefined || n2 === undefined) {\r\n      const char = hex.substring(hi, hi + 2);\r\n      throw new Error(\r\n        'hex string expected, got non-hex character \"' +\r\n          char +\r\n          '\" at index ' +\r\n          hi,\r\n      );\r\n    }\r\n    array[ai] = n1 * 16 + n2; // multiply first octet, e.g. 'a3' => 10*16+3 => 160 + 3 => 163\r\n  }\r\n  return array;\r\n}\r\n"],"mappings":"AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,WAAWA,CACzBC,KAAa,EACbC,GAAQ,EACRC,cAAuB,EACX;EACZ,IAAIC,GAAe;EACnB,IAAI,OAAOF,GAAG,KAAK,QAAQ,EAAE;IAC3B,IAAI;MACFE,GAAG,GAAGC,UAAU,CAACH,GAAG,CAAC;IACvB,CAAC,CAAC,OAAOI,CAAC,EAAE;MACV,MAAM,IAAIC,KAAK,CAACN,KAAK,GAAG,4CAA4C,GAAGK,CAAC,CAAC;IAC3E;EACF,CAAC,MAAM,IAAIE,OAAO,CAACN,GAAG,CAAC,EAAE;IACvB;IACA;IACAE,GAAG,GAAGK,UAAU,CAACC,IAAI,CAACR,GAAG,CAAC;EAC5B,CAAC,MAAM;IACL,MAAM,IAAIK,KAAK,CAACN,KAAK,GAAG,mCAAmC,CAAC;EAC9D;EACA,MAAMU,GAAG,GAAGP,GAAG,CAACQ,MAAM;EACtB,IAAI,OAAOT,cAAc,KAAK,QAAQ,IAAIQ,GAAG,KAAKR,cAAc,EAC9D,MAAM,IAAII,KAAK,CACbN,KAAK,GAAG,aAAa,GAAGE,cAAc,GAAG,iBAAiB,GAAGQ,GAC/D,CAAC;EACH,OAAOP,GAAG;AACZ;;AAEA;AACA,OAAO,SAASI,OAAOA,CAACK,CAAU,EAAmB;EACnD,OACEA,CAAC,YAAYJ,UAAU,IACtBK,WAAW,CAACC,MAAM,CAACF,CAAC,CAAC,IAAIA,CAAC,CAACG,WAAW,CAACC,IAAI,KAAK,YAAa;AAElE;;AAEA;AACA,MAAMC,MAAM,GAAG;EAAEC,EAAE,EAAE,EAAE;EAAEC,EAAE,EAAE,EAAE;EAAEC,CAAC,EAAE,EAAE;EAAEC,CAAC,EAAE,EAAE;EAAET,CAAC,EAAE,EAAE;EAAEU,CAAC,EAAE;AAAI,CAAU;AACvE,SAASC,aAAaA,CAACC,EAAU,EAAsB;EACrD,IAAIA,EAAE,IAAIP,MAAM,CAACC,EAAE,IAAIM,EAAE,IAAIP,MAAM,CAACE,EAAE,EAAE,OAAOK,EAAE,GAAGP,MAAM,CAACC,EAAE,CAAC,CAAC;EAC/D,IAAIM,EAAE,IAAIP,MAAM,CAACG,CAAC,IAAII,EAAE,IAAIP,MAAM,CAACI,CAAC,EAAE,OAAOG,EAAE,IAAIP,MAAM,CAACG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;EACnE,IAAII,EAAE,IAAIP,MAAM,CAACL,CAAC,IAAIY,EAAE,IAAIP,MAAM,CAACK,CAAC,EAAE,OAAOE,EAAE,IAAIP,MAAM,CAACL,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;EACnE;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASR,UAAUA,CAACH,GAAW,EAAc;EAClD,IAAI,OAAOA,GAAG,KAAK,QAAQ,EACzB,MAAM,IAAIK,KAAK,CAAC,2BAA2B,GAAG,OAAOL,GAAG,CAAC;EAC3D;EACA,IAAIwB,aAAa,EAAE,OAAOjB,UAAU,CAACkB,OAAO,CAACzB,GAAG,CAAC;EACjD,MAAM0B,EAAE,GAAG1B,GAAG,CAACU,MAAM;EACrB,MAAMiB,EAAE,GAAGD,EAAE,GAAG,CAAC;EACjB,IAAIA,EAAE,GAAG,CAAC,EACR,MAAM,IAAIrB,KAAK,CAAC,kDAAkD,GAAGqB,EAAE,CAAC;EAC1E,MAAME,KAAK,GAAG,IAAIrB,UAAU,CAACoB,EAAE,CAAC;EAChC,KAAK,IAAIE,EAAE,GAAG,CAAC,EAAEC,EAAE,GAAG,CAAC,EAAED,EAAE,GAAGF,EAAE,EAAEE,EAAE,EAAE,EAAEC,EAAE,IAAI,CAAC,EAAE;IAC/C,MAAMC,EAAE,GAAGT,aAAa,CAACtB,GAAG,CAACgC,UAAU,CAACF,EAAE,CAAC,CAAC;IAC5C,MAAMG,EAAE,GAAGX,aAAa,CAACtB,GAAG,CAACgC,UAAU,CAACF,EAAE,GAAG,CAAC,CAAC,CAAC;IAChD,IAAIC,EAAE,KAAKG,SAAS,IAAID,EAAE,KAAKC,SAAS,EAAE;MACxC,MAAMC,IAAI,GAAGnC,GAAG,CAACoC,SAAS,CAACN,EAAE,EAAEA,EAAE,GAAG,CAAC,CAAC;MACtC,MAAM,IAAIzB,KAAK,CACb,8CAA8C,GAC5C8B,IAAI,GACJ,aAAa,GACbL,EACJ,CAAC;IACH;IACAF,KAAK,CAACC,EAAE,CAAC,GAAGE,EAAE,GAAG,EAAE,GAAGE,EAAE,CAAC,CAAC;EAC5B;EACA,OAAOL,KAAK;AACd","ignoreList":[]}

package/dist/module/utils/timingSafeEqual.js

@@ -0,0 +1,18 @@
+import { NitroModules } from 'react-native-nitro-modules';
+import { abvToArrayBuffer } from './conversion';
+let utils;
+function getNative() {
+  if (utils == null) {
+    utils = NitroModules.createHybridObject('Utils');
+  }
+  return utils;
+}
+export function timingSafeEqual(a, b) {
+  const bufA = abvToArrayBuffer(a);
+  const bufB = abvToArrayBuffer(b);
+  if (bufA.byteLength !== bufB.byteLength) {
+    throw new RangeError('Input buffers must have the same byte length');
+  }
+  return getNative().timingSafeEqual(bufA, bufB);
+}
+//# sourceMappingURL=timingSafeEqual.js.map

package/dist/module/utils/timingSafeEqual.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NitroModules","abvToArrayBuffer","utils","getNative","createHybridObject","timingSafeEqual","a","b","bufA","bufB","byteLength","RangeError"],"sources":["timingSafeEqual.ts"],"sourcesContent":["import { NitroModules } from 'react-native-nitro-modules';\r\nimport type { Utils } from '../specs/v1/utils.nitro';\r\nimport type { ABV } from './types';\r\nimport { abvToArrayBuffer } from './conversion';\r\n\r\nlet utils: Utils;\r\nfunction getNative(): Utils {\r\n  if (utils == null) {\r\n    utils = NitroModules.createHybridObject<Utils>('Utils');\r\n  }\r\n  return utils;\r\n}\r\n\r\nexport function timingSafeEqual(a: ABV, b: ABV): boolean {\r\n  const bufA = abvToArrayBuffer(a);\r\n  const bufB = abvToArrayBuffer(b);\r\n\r\n  if (bufA.byteLength !== bufB.byteLength) {\r\n    throw new RangeError('Input buffers must have the same byte length');\r\n  }\r\n\r\n  return getNative().timingSafeEqual(bufA, bufB);\r\n}\r\n"],"mappings":"AAAA,SAASA,YAAY,QAAQ,4BAA4B;AAGzD,SAASC,gBAAgB,QAAQ,cAAc;AAE/C,IAAIC,KAAY;AAChB,SAASC,SAASA,CAAA,EAAU;EAC1B,IAAID,KAAK,IAAI,IAAI,EAAE;IACjBA,KAAK,GAAGF,YAAY,CAACI,kBAAkB,CAAQ,OAAO,CAAC;EACzD;EACA,OAAOF,KAAK;AACd;AAEA,OAAO,SAASG,eAAeA,CAACC,CAAM,EAAEC,CAAM,EAAW;EACvD,MAAMC,IAAI,GAAGP,gBAAgB,CAACK,CAAC,CAAC;EAChC,MAAMG,IAAI,GAAGR,gBAAgB,CAACM,CAAC,CAAC;EAEhC,IAAIC,IAAI,CAACE,UAAU,KAAKD,IAAI,CAACC,UAAU,EAAE;IACvC,MAAM,IAAIC,UAAU,CAAC,8CAA8C,CAAC;EACtE;EAEA,OAAOR,SAAS,CAAC,CAAC,CAACE,eAAe,CAACG,IAAI,EAAEC,IAAI,CAAC;AAChD","ignoreList":[]}

package/dist/module/utils/types.js

@@ -0,0 +1,55 @@
+// @types/node
+
+// Node.js style key pair types (lowercase)
+
+// TODO: These enums need to be defined on the native side
+export let KFormatType = /*#__PURE__*/function (KFormatType) {
+  KFormatType[KFormatType["DER"] = 0] = "DER";
+  KFormatType[KFormatType["PEM"] = 1] = "PEM";
+  KFormatType[KFormatType["JWK"] = 2] = "JWK";
+  return KFormatType;
+}({});
+export let KeyType = /*#__PURE__*/function (KeyType) {
+  KeyType[KeyType["SECRET"] = 0] = "SECRET";
+  KeyType[KeyType["PUBLIC"] = 1] = "PUBLIC";
+  KeyType[KeyType["PRIVATE"] = 2] = "PRIVATE";
+  return KeyType;
+}({});
+export let KeyEncoding = /*#__PURE__*/function (KeyEncoding) {
+  KeyEncoding[KeyEncoding["PKCS1"] = 0] = "PKCS1";
+  KeyEncoding[KeyEncoding["PKCS8"] = 1] = "PKCS8";
+  KeyEncoding[KeyEncoding["SPKI"] = 2] = "SPKI";
+  KeyEncoding[KeyEncoding["SEC1"] = 3] = "SEC1";
+  return KeyEncoding;
+}({});
+export let KeyFormat = /*#__PURE__*/function (KeyFormat) {
+  KeyFormat[KeyFormat["RAW"] = 0] = "RAW";
+  KeyFormat[KeyFormat["PKCS8"] = 1] = "PKCS8";
+  KeyFormat[KeyFormat["SPKI"] = 2] = "SPKI";
+  KeyFormat[KeyFormat["JWK"] = 3] = "JWK";
+  return KeyFormat;
+}({});
+export const kNamedCurveAliases = {
+  'P-256': 'prime256v1',
+  'P-384': 'secp384r1',
+  'P-521': 'secp521r1'
+};
+// end TODO
+
+export let KeyVariant = /*#__PURE__*/function (KeyVariant) {
+  KeyVariant[KeyVariant["RSA_SSA_PKCS1_v1_5"] = 0] = "RSA_SSA_PKCS1_v1_5";
+  KeyVariant[KeyVariant["RSA_PSS"] = 1] = "RSA_PSS";
+  KeyVariant[KeyVariant["RSA_OAEP"] = 2] = "RSA_OAEP";
+  KeyVariant[KeyVariant["DSA"] = 3] = "DSA";
+  KeyVariant[KeyVariant["EC"] = 4] = "EC";
+  KeyVariant[KeyVariant["NID"] = 5] = "NID";
+  KeyVariant[KeyVariant["DH"] = 6] = "DH";
+  return KeyVariant;
+}({});
+
+// These are for shortcomings in @types/node
+// Here we use "*Type" instead of "*Types" like node does.
+// export type CipherCBCType = 'aes-128-cbc' | 'aes-192-cbc' | 'aes-256-cbc';
+
+// from @paulmillr/noble-curves
+//# sourceMappingURL=types.js.map

package/dist/module/utils/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["KFormatType","KeyType","KeyEncoding","KeyFormat","kNamedCurveAliases","KeyVariant"],"sources":["types.ts"],"sourcesContent":["import type { Buffer as CraftzdogBuffer } from '@craftzdog/react-native-buffer';\r\nimport type { Buffer } from 'buffer';\r\nimport type { CipherKey } from 'node:crypto'; // @types/node\r\nimport type { Buffer as SafeBuffer } from 'safe-buffer';\r\nimport type { KeyObjectHandle as KeyObjectHandleType } from '../specs/v1/keyObjectHandle.nitro';\r\nimport type { KeyObject, CryptoKey } from '../keys';\r\n\r\nexport type ABV = TypedArray | DataView | ArrayBufferLike | CraftzdogBuffer;\r\n\r\nexport type TypedArray =\r\n  | Uint8Array\r\n  | Uint8ClampedArray\r\n  | Uint16Array\r\n  | Uint32Array\r\n  | Int8Array\r\n  | Int16Array\r\n  | Int32Array\r\n  | Float32Array\r\n  | Float64Array;\r\n\r\nexport type RandomCallback<T> = (err: Error | null, value: T) => void;\r\n\r\nexport type BufferLike =\r\n  | ArrayBuffer\r\n  | ArrayBufferLike\r\n  | CraftzdogBuffer\r\n  | SafeBuffer\r\n  | ArrayBufferView;\r\n\r\nexport type BinaryLike =\r\n  | string\r\n  | Buffer\r\n  | ArrayBuffer\r\n  | ArrayBufferLike\r\n  | ArrayBufferView\r\n  | CraftzdogBuffer\r\n  | SafeBuffer\r\n  | TypedArray\r\n  | DataView;\r\n\r\nexport type BinaryLikeNode = CipherKey | BinaryLike | KeyObject;\r\n\r\nexport type DigestAlgorithm =\r\n  | 'SHA-1'\r\n  | 'SHA-256'\r\n  | 'SHA-384'\r\n  | 'SHA-512'\r\n  | 'SHA3-256'\r\n  | 'SHA3-384'\r\n  | 'SHA3-512'\r\n  | 'cSHAKE128'\r\n  | 'cSHAKE256';\r\n\r\nexport type HashAlgorithm = DigestAlgorithm | 'SHA-224' | 'RIPEMD-160';\r\n\r\nexport type RSAKeyPairAlgorithm = 'RSASSA-PKCS1-v1_5' | 'RSA-PSS' | 'RSA-OAEP';\r\n\r\nexport interface RsaHashedKeyGenParams {\r\n  name: RSAKeyPairAlgorithm;\r\n  modulusLength: number;\r\n  publicExponent: Uint8Array;\r\n  hash: string | { name: string };\r\n}\r\n\r\nexport interface RsaKeyAlgorithm {\r\n  name: RSAKeyPairAlgorithm;\r\n  modulusLength: number;\r\n  publicExponent: Uint8Array;\r\n  hash: { name: string };\r\n}\r\n\r\nexport type ECKeyPairAlgorithm = 'ECDSA' | 'ECDH';\r\n\r\nexport type CFRGKeyPairAlgorithm = 'Ed25519' | 'Ed448' | 'X25519' | 'X448';\r\nexport type CFRGKeyPairType = 'ed25519' | 'ed448' | 'x25519' | 'x448';\r\n\r\nexport type PQCKeyPairAlgorithm =\r\n  | 'ML-DSA-44'\r\n  | 'ML-DSA-65'\r\n  | 'ML-DSA-87'\r\n  | 'ML-KEM-512'\r\n  | 'ML-KEM-768'\r\n  | 'ML-KEM-1024';\r\nexport type PQCKeyPairType =\r\n  | 'ml-dsa-44'\r\n  | 'ml-dsa-65'\r\n  | 'ml-dsa-87'\r\n  | 'ml-kem-512'\r\n  | 'ml-kem-768'\r\n  | 'ml-kem-1024';\r\n\r\nexport type MlKemAlgorithm = 'ML-KEM-512' | 'ML-KEM-768' | 'ML-KEM-1024';\r\n\r\nexport interface EncapsulateResult {\r\n  sharedKey: ArrayBuffer;\r\n  ciphertext: ArrayBuffer;\r\n}\r\n\r\n// Node.js style key pair types (lowercase)\r\nexport type RSAKeyPairType = 'rsa' | 'rsa-pss';\r\nexport type ECKeyPairType = 'ec';\r\nexport type DSAKeyPairType = 'dsa';\r\nexport type DHKeyPairType = 'dh';\r\n\r\nexport type KeyPairAlgorithm =\r\n  | RSAKeyPairAlgorithm\r\n  | ECKeyPairAlgorithm\r\n  | CFRGKeyPairAlgorithm\r\n  | PQCKeyPairAlgorithm;\r\n\r\nexport type AESAlgorithm =\r\n  | 'AES-CTR'\r\n  | 'AES-CBC'\r\n  | 'AES-GCM'\r\n  | 'AES-KW'\r\n  | 'AES-OCB';\r\n\r\nexport type SecretKeyAlgorithm = 'HMAC' | AESAlgorithm;\r\n\r\nexport type SignVerifyAlgorithm =\r\n  | 'RSASSA-PKCS1-v1_5'\r\n  | 'RSA-PSS'\r\n  | 'ECDSA'\r\n  | 'HMAC'\r\n  | 'KMAC128'\r\n  | 'KMAC256'\r\n  | 'Ed25519'\r\n  | 'Ed448'\r\n  | 'ML-DSA-44'\r\n  | 'ML-DSA-65'\r\n  | 'ML-DSA-87';\r\n\r\nexport type Argon2Algorithm = 'Argon2d' | 'Argon2i' | 'Argon2id';\r\n\r\nexport type DeriveBitsAlgorithm =\r\n  | 'PBKDF2'\r\n  | 'HKDF'\r\n  | 'ECDH'\r\n  | 'X25519'\r\n  | 'X448'\r\n  | Argon2Algorithm;\r\n\r\nexport type EncryptDecryptAlgorithm =\r\n  | 'RSA-OAEP'\r\n  | 'AES-CTR'\r\n  | 'AES-CBC'\r\n  | 'AES-GCM'\r\n  | 'AES-KW'\r\n  | 'AES-OCB'\r\n  | 'ChaCha20-Poly1305';\r\n\r\nexport type RsaOaepParams = {\r\n  name: 'RSA-OAEP';\r\n  label?: BufferLike;\r\n};\r\n\r\nexport type AesCbcParams = {\r\n  name: 'AES-CBC';\r\n  iv: BufferLike;\r\n};\r\n\r\nexport type AesCtrParams = {\r\n  name: 'AES-CTR';\r\n  counter: TypedArray;\r\n  length: number;\r\n};\r\n\r\nexport type AesGcmParams = {\r\n  name: 'AES-GCM';\r\n  iv: BufferLike;\r\n  tagLength?: TagLength;\r\n  additionalData?: BufferLike;\r\n};\r\n\r\nexport type ChaCha20Poly1305Params = {\r\n  name: 'ChaCha20-Poly1305';\r\n  iv: BufferLike;\r\n  tagLength?: 128;\r\n  additionalData?: BufferLike;\r\n};\r\n\r\nexport type AesOcbParams = {\r\n  name: 'AES-OCB';\r\n  iv: BufferLike;\r\n  tagLength?: 64 | 96 | 128;\r\n  additionalData?: BufferLike;\r\n};\r\n\r\nexport type AesKwParams = {\r\n  name: 'AES-KW';\r\n  wrappingKey?: BufferLike;\r\n};\r\n\r\nexport type AesKeyGenParams = {\r\n  length: AESLength;\r\n  name?: AESAlgorithm;\r\n};\r\n\r\nexport type TagLength = 32 | 64 | 96 | 104 | 112 | 120 | 128;\r\n\r\nexport type AESLength = 128 | 192 | 256;\r\n\r\nexport type EncryptDecryptParams =\r\n  | AesCbcParams\r\n  | AesCtrParams\r\n  | AesGcmParams\r\n  | AesOcbParams\r\n  | AesKwParams\r\n  | RsaOaepParams\r\n  | ChaCha20Poly1305Params;\r\n\r\nexport type AnyAlgorithm =\r\n  | DigestAlgorithm\r\n  | HashAlgorithm\r\n  | KeyPairAlgorithm\r\n  | SecretKeyAlgorithm\r\n  | SignVerifyAlgorithm\r\n  | DeriveBitsAlgorithm\r\n  | EncryptDecryptAlgorithm\r\n  | AESAlgorithm\r\n  | 'PBKDF2'\r\n  | 'HKDF'\r\n  | 'unknown';\r\n\r\nexport type NamedCurve = 'P-256' | 'P-384' | 'P-521';\r\n\r\nexport type SubtleAlgorithm = {\r\n  name: AnyAlgorithm;\r\n  salt?: string | BufferLike;\r\n  iterations?: number;\r\n  hash?: HashAlgorithm | string | { name: string };\r\n  namedCurve?: NamedCurve;\r\n  length?: number;\r\n  modulusLength?: number;\r\n  publicExponent?: number | Uint8Array;\r\n  saltLength?: number;\r\n  public?: CryptoKey;\r\n  info?: BufferLike;\r\n  // Argon2 parameters\r\n  nonce?: BufferLike;\r\n  parallelism?: number;\r\n  tagLength?: number;\r\n  memory?: number;\r\n  passes?: number;\r\n  secretValue?: BufferLike;\r\n  associatedData?: BufferLike;\r\n  version?: number;\r\n  // KMAC parameters\r\n  customization?: BufferLike;\r\n};\r\n\r\nexport type KeyPairType =\r\n  | CFRGKeyPairType\r\n  | RSAKeyPairType\r\n  | ECKeyPairType\r\n  | DSAKeyPairType\r\n  | DHKeyPairType;\r\n\r\nexport type KeyUsage =\r\n  | 'encrypt'\r\n  | 'decrypt'\r\n  | 'sign'\r\n  | 'verify'\r\n  | 'deriveKey'\r\n  | 'deriveBits'\r\n  | 'encapsulateBits'\r\n  | 'decapsulateBits'\r\n  | 'encapsulateKey'\r\n  | 'decapsulateKey'\r\n  | 'wrapKey'\r\n  | 'unwrapKey';\r\n\r\n// TODO: These enums need to be defined on the native side\r\nexport enum KFormatType {\r\n  DER,\r\n  PEM,\r\n  JWK,\r\n}\r\n\r\nexport enum KeyType {\r\n  SECRET,\r\n  PUBLIC,\r\n  PRIVATE,\r\n}\r\n\r\nexport enum KeyEncoding {\r\n  PKCS1,\r\n  PKCS8,\r\n  SPKI,\r\n  SEC1,\r\n}\r\n\r\nexport enum KeyFormat {\r\n  RAW,\r\n  PKCS8,\r\n  SPKI,\r\n  JWK,\r\n}\r\n\r\nexport type KeyData = BufferLike | BinaryLike | JWK;\r\n\r\nexport const kNamedCurveAliases = {\r\n  'P-256': 'prime256v1',\r\n  'P-384': 'secp384r1',\r\n  'P-521': 'secp521r1',\r\n} as const;\r\n// end TODO\r\n\r\nexport type KeyPairGenConfig = {\r\n  publicFormat?: KFormatType | -1;\r\n  publicType?: KeyEncoding;\r\n  privateFormat?: KFormatType | -1;\r\n  privateType?: KeyEncoding;\r\n  cipher?: string;\r\n  passphrase?: ArrayBuffer;\r\n};\r\n\r\nexport type AsymmetricKeyType =\r\n  | 'rsa'\r\n  | 'rsa-pss'\r\n  | 'dsa'\r\n  | 'ec'\r\n  | 'dh'\r\n  | CFRGKeyPairType\r\n  | PQCKeyPairType;\r\n\r\ntype JWKkty = 'AES' | 'RSA' | 'EC' | 'oct' | 'OKP';\r\ntype JWKuse = 'sig' | 'enc';\r\n\r\nexport interface JWK {\r\n  kty?: JWKkty;\r\n  use?: JWKuse;\r\n  key_ops?: KeyUsage[];\r\n  alg?: string; // TODO: enumerate these (RFC-7517)\r\n  crv?: string;\r\n  kid?: string;\r\n  x5u?: string;\r\n  x5c?: string[];\r\n  x5t?: string;\r\n  'x5t#256'?: string;\r\n  n?: string;\r\n  e?: string;\r\n  d?: string;\r\n  p?: string;\r\n  q?: string;\r\n  x?: string;\r\n  y?: string;\r\n  k?: string;\r\n  dp?: string;\r\n  dq?: string;\r\n  qi?: string;\r\n  ext?: boolean;\r\n}\r\n\r\nexport type KTypePrivate = 'pkcs1' | 'pkcs8' | 'sec1';\r\nexport type KTypePublic = 'pkcs1' | 'spki';\r\nexport type KType = KTypePrivate | KTypePublic;\r\n\r\nexport type KFormat = 'der' | 'pem' | 'jwk';\r\n\r\nexport type DSAEncoding = 'der' | 'ieee-p1363';\r\n\r\nexport type EncodingOptions = {\r\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n  key?: any;\r\n  type?: KType;\r\n  encoding?: string;\r\n  dsaEncoding?: DSAEncoding;\r\n  format?: KFormat;\r\n  padding?: number;\r\n  cipher?: string;\r\n  passphrase?: BinaryLike;\r\n  saltLength?: number;\r\n  oaepHash?: string;\r\n  oaepLabel?: BinaryLike;\r\n};\r\n\r\nexport interface KeyDetail {\r\n  length?: number;\r\n  publicExponent?: number;\r\n  modulusLength?: number;\r\n  hashAlgorithm?: string;\r\n  mgf1HashAlgorithm?: string;\r\n  saltLength?: number;\r\n  namedCurve?: string;\r\n}\r\n\r\nexport type GenerateKeyPairOptions = {\r\n  modulusLength?: number; // Key size in bits (RSA, DSA).\r\n  publicExponent?: number; // Public exponent (RSA). Default: 0x10001.\r\n  hashAlgorithm?: string; // Name of the message digest (RSA-PSS).\r\n  mgf1HashAlgorithm?: string; // string Name of the message digest used by MGF1 (RSA-PSS).\r\n  saltLength?: number; // Minimal salt length in bytes (RSA-PSS).\r\n  divisorLength?: number; // Size of q in bits (DSA).\r\n  namedCurve?: string; // Name of the curve to use (EC).\r\n  prime?: CraftzdogBuffer; // The prime parameter (DH).\r\n  primeLength?: number; // Prime length in bits (DH).\r\n  generator?: number; // Custom generator (DH). Default: 2.\r\n  groupName?: string; // Diffie-Hellman group name (DH). See crypto.getDiffieHellman().\r\n  publicKeyEncoding?: EncodingOptions; // See keyObject.export().\r\n  privateKeyEncoding?: EncodingOptions; // See keyObject.export().\r\n  paramEncoding?: string;\r\n  hash?: string;\r\n  mgf1Hash?: string;\r\n};\r\n\r\nexport type KeyPairKey =\r\n  | ArrayBuffer\r\n  | Buffer\r\n  | string\r\n  | KeyObject\r\n  | KeyObjectHandle\r\n  | CryptoKey\r\n  | undefined;\r\n\r\nexport type GenerateKeyPairReturn = [\r\n  error?: Error,\r\n  privateKey?: KeyPairKey,\r\n  publicKey?: KeyPairKey,\r\n];\r\n\r\nexport type GenerateKeyPairCallback = (\r\n  error?: Error,\r\n  publicKey?: KeyPairKey,\r\n  privateKey?: KeyPairKey,\r\n) => GenerateKeyPairReturn | void;\r\n\r\nexport type KeyPair = {\r\n  publicKey?: KeyPairKey;\r\n  privateKey?: KeyPairKey;\r\n};\r\n\r\nexport type GenerateKeyPairPromiseReturn = [error?: Error, keypair?: KeyPair];\r\n\r\nexport type CryptoKeyPair = {\r\n  publicKey: KeyPairKey;\r\n  privateKey: KeyPairKey;\r\n};\r\n\r\nexport type WebCryptoKeyPair = {\r\n  publicKey: CryptoKey;\r\n  privateKey: CryptoKey;\r\n};\r\n\r\nexport enum KeyVariant {\r\n  RSA_SSA_PKCS1_v1_5,\r\n  RSA_PSS,\r\n  RSA_OAEP,\r\n  DSA,\r\n  EC,\r\n  NID,\r\n  DH,\r\n}\r\n\r\nexport type SignCallback = (err: Error | null, signature?: ArrayBuffer) => void;\r\n\r\nexport type VerifyCallback = (err: Error | null, valid?: boolean) => void;\r\n\r\nexport type BinaryToTextEncoding = 'base64' | 'base64url' | 'hex' | 'binary';\r\nexport type CharacterEncoding = 'utf8' | 'utf-8' | 'utf16le' | 'latin1';\r\nexport type LegacyCharacterEncoding = 'ascii' | 'binary' | 'ucs2' | 'ucs-2';\r\nexport type Encoding =\r\n  | BinaryToTextEncoding\r\n  | CharacterEncoding\r\n  | LegacyCharacterEncoding\r\n  | 'buffer';\r\n\r\n// These are for shortcomings in @types/node\r\n// Here we use \"*Type\" instead of \"*Types\" like node does.\r\n// export type CipherCBCType = 'aes-128-cbc' | 'aes-192-cbc' | 'aes-256-cbc';\r\nexport type CipherCFBType =\r\n  | 'aes-128-cfb'\r\n  | 'aes-192-cfb'\r\n  | 'aes-256-cfb'\r\n  | 'aes-128-cfb1'\r\n  | 'aes-192-cfb1'\r\n  | 'aes-256-cfb1'\r\n  | 'aes-128-cfb8'\r\n  | 'aes-192-cfb8'\r\n  | 'aes-256-cfb8';\r\nexport type CipherCTRType = 'aes-128-ctr' | 'aes-192-ctr' | 'aes-256-ctr';\r\nexport type CipherDESType =\r\n  | 'des'\r\n  | 'des3'\r\n  | 'des-cbc'\r\n  | 'des-ecb'\r\n  | 'des-ede'\r\n  | 'des-ede-cbc'\r\n  | 'des-ede3'\r\n  | 'des-ede3-cbc';\r\nexport type CipherECBType = 'aes-128-ecb' | 'aes-192-ecb' | 'aes-256-ecb';\r\nexport type CipherGCMType = 'aes-128-gcm' | 'aes-192-gcm' | 'aes-256-gcm';\r\nexport type CipherOFBType = 'aes-128-ofb' | 'aes-192-ofb' | 'aes-256-ofb';\r\n\r\nexport type KeyObjectHandle = KeyObjectHandleType;\r\n\r\nexport type DiffieHellmanOptions = {\r\n  privateKey: KeyObject;\r\n  publicKey: KeyObject;\r\n};\r\n\r\nexport type DiffieHellmanCallback = (\r\n  err: Error | null,\r\n  secret?: CraftzdogBuffer,\r\n) => CraftzdogBuffer | void;\r\n\r\n// from @paulmillr/noble-curves\r\nexport type Hex = string | Uint8Array;\r\n\r\nexport type ImportFormat =\r\n  | 'raw'\r\n  | 'raw-public'\r\n  | 'raw-secret'\r\n  | 'raw-seed'\r\n  | 'pkcs8'\r\n  | 'spki'\r\n  | 'jwk';\r\n\r\nexport type Operation =\r\n  | 'encrypt'\r\n  | 'decrypt'\r\n  | 'sign'\r\n  | 'verify'\r\n  | 'generateKey'\r\n  | 'importKey'\r\n  | 'exportKey'\r\n  | 'deriveBits'\r\n  | 'wrapKey'\r\n  | 'unwrapKey'\r\n  | 'encapsulateBits'\r\n  | 'decapsulateBits'\r\n  | 'encapsulateKey'\r\n  | 'decapsulateKey';\r\n\r\nexport interface KeyPairOptions {\r\n  namedCurve: string;\r\n  publicKeyEncoding?: {\r\n    type: 'spki';\r\n    format: 'pem' | 'der';\r\n  };\r\n  privateKeyEncoding?: {\r\n    type: 'pkcs8';\r\n    format: 'pem' | 'der';\r\n    cipher?: string;\r\n    passphrase?: string;\r\n  };\r\n}\r\n"],"mappings":"AAE8C;;AAgG9C;;AA8KA;AACA,WAAYA,WAAW,0BAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAA,OAAXA,WAAW;AAAA;AAMvB,WAAYC,OAAO,0BAAPA,OAAO;EAAPA,OAAO,CAAPA,OAAO;EAAPA,OAAO,CAAPA,OAAO;EAAPA,OAAO,CAAPA,OAAO;EAAA,OAAPA,OAAO;AAAA;AAMnB,WAAYC,WAAW,0BAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAXA,WAAW,CAAXA,WAAW;EAAA,OAAXA,WAAW;AAAA;AAOvB,WAAYC,SAAS,0BAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAAA,OAATA,SAAS;AAAA;AASrB,OAAO,MAAMC,kBAAkB,GAAG;EAChC,OAAO,EAAE,YAAY;EACrB,OAAO,EAAE,WAAW;EACpB,OAAO,EAAE;AACX,CAAU;AACV;;AA0IA,WAAYC,UAAU,0BAAVA,UAAU;EAAVA,UAAU,CAAVA,UAAU;EAAVA,UAAU,CAAVA,UAAU;EAAVA,UAAU,CAAVA,UAAU;EAAVA,UAAU,CAAVA,UAAU;EAAVA,UAAU,CAAVA,UAAU;EAAVA,UAAU,CAAVA,UAAU;EAAVA,UAAU,CAAVA,UAAU;EAAA,OAAVA,UAAU;AAAA;;AAuBtB;AACA;AACA;;AAqCA","ignoreList":[]}

package/dist/module/utils/validation.js

@@ -0,0 +1,85 @@
+import { Buffer as SBuffer } from 'safe-buffer';
+import { lazyDOMException } from './errors';
+
+// The maximum buffer size that we'll support in the WebCrypto impl
+const kMaxBufferLength = 2 ** 31 - 1;
+export function validateFunction(f) {
+  return f !== null && typeof f === 'function';
+}
+export function isStringOrBuffer(val) {
+  return typeof val === 'string' || ArrayBuffer.isView(val) || val instanceof ArrayBuffer;
+}
+export function validateObject(value, name, options) {
+  const useDefaultOptions = options == null;
+  const allowArray = useDefaultOptions ? false : options.allowArray;
+  const allowFunction = useDefaultOptions ? false : options.allowFunction;
+  const nullable = useDefaultOptions ? false : options.nullable;
+  if (!nullable && value === null || !allowArray && Array.isArray(value) || typeof value !== 'object' && (!allowFunction || typeof value !== 'function')) {
+    throw new Error(`${name} is not a valid object ${value}`);
+  }
+  return true;
+}
+export const validateMaxBufferLength = (data, name) => {
+  const length = typeof data === 'string' || data instanceof SBuffer ? data.length : data.byteLength;
+  if (length > kMaxBufferLength) {
+    throw lazyDOMException(`${name} must be less than ${kMaxBufferLength + 1} bits`, 'OperationError');
+  }
+};
+export const getUsagesUnion = (usageSet, ...usages) => {
+  const newset = [];
+  for (let n = 0; n < usages.length; n++) {
+    if (!usages[n] || usages[n] === undefined) continue;
+    if (usageSet.includes(usages[n])) newset.push(usages[n]);
+  }
+  return newset;
+};
+const kKeyOps = {
+  sign: 1,
+  verify: 2,
+  encrypt: 3,
+  decrypt: 4,
+  wrapKey: 5,
+  unwrapKey: 6,
+  deriveKey: 7,
+  deriveBits: 8,
+  encapsulateBits: 9,
+  decapsulateBits: 10,
+  encapsulateKey: 11,
+  decapsulateKey: 12
+};
+export const validateKeyOps = (keyOps, usagesSet) => {
+  if (keyOps === undefined) return;
+  if (!Array.isArray(keyOps)) {
+    throw lazyDOMException('keyData.key_ops', 'InvalidArgument');
+  }
+  let flags = 0;
+  for (let n = 0; n < keyOps.length; n++) {
+    const op = keyOps[n];
+    const op_flag = kKeyOps[op];
+    // Skipping unknown key ops
+    if (op_flag === undefined) continue;
+    // Have we seen it already? if so, error
+    if (flags & 1 << op_flag) throw lazyDOMException('Duplicate key operation', 'DataError');
+    flags |= 1 << op_flag;
+
+    // TODO(@jasnell): RFC7517 section 4.3 strong recommends validating
+    // key usage combinations. Specifically, it says that unrelated key
+    // ops SHOULD NOT be used together. We're not yet validating that here.
+  }
+  if (usagesSet !== undefined) {
+    for (const use of usagesSet) {
+      if (!keyOps.includes(use)) {
+        throw lazyDOMException('Key operations and usage mismatch', 'DataError');
+      }
+    }
+  }
+};
+export function hasAnyNotIn(set, checks) {
+  for (const s of set) {
+    if (!checks.includes(s)) {
+      return true;
+    }
+  }
+  return false;
+}
+//# sourceMappingURL=validation.js.map

package/dist/module/utils/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Buffer","SBuffer","lazyDOMException","kMaxBufferLength","validateFunction","f","isStringOrBuffer","val","ArrayBuffer","isView","validateObject","value","name","options","useDefaultOptions","allowArray","allowFunction","nullable","Array","isArray","Error","validateMaxBufferLength","data","length","byteLength","getUsagesUnion","usageSet","usages","newset","n","undefined","includes","push","kKeyOps","sign","verify","encrypt","decrypt","wrapKey","unwrapKey","deriveKey","deriveBits","encapsulateBits","decapsulateBits","encapsulateKey","decapsulateKey","validateKeyOps","keyOps","usagesSet","flags","op","op_flag","use","hasAnyNotIn","set","checks","s"],"sources":["validation.ts"],"sourcesContent":["import { Buffer as SBuffer } from 'safe-buffer';\r\nimport type { BinaryLike, BufferLike, KeyUsage } from './types';\r\nimport { lazyDOMException } from './errors';\r\n\r\n// The maximum buffer size that we'll support in the WebCrypto impl\r\nconst kMaxBufferLength = 2 ** 31 - 1;\r\n\r\nexport function validateFunction(f: unknown): boolean {\r\n  return f !== null && typeof f === 'function';\r\n}\r\n\r\nexport function isStringOrBuffer(val: unknown): val is string | ArrayBuffer {\r\n  return (\r\n    typeof val === 'string' ||\r\n    ArrayBuffer.isView(val) ||\r\n    val instanceof ArrayBuffer\r\n  );\r\n}\r\n\r\nexport function validateObject<T>(\r\n  value: unknown,\r\n  name: string,\r\n  options?: {\r\n    allowArray: boolean;\r\n    allowFunction: boolean;\r\n    nullable: boolean;\r\n  } | null,\r\n): value is T {\r\n  const useDefaultOptions = options == null;\r\n  const allowArray = useDefaultOptions ? false : options.allowArray;\r\n  const allowFunction = useDefaultOptions ? false : options.allowFunction;\r\n  const nullable = useDefaultOptions ? false : options.nullable;\r\n  if (\r\n    (!nullable && value === null) ||\r\n    (!allowArray && Array.isArray(value)) ||\r\n    (typeof value !== 'object' &&\r\n      (!allowFunction || typeof value !== 'function'))\r\n  ) {\r\n    throw new Error(`${name} is not a valid object ${value}`);\r\n  }\r\n  return true;\r\n}\r\n\r\nexport const validateMaxBufferLength = (\r\n  data: BinaryLike | BufferLike,\r\n  name: string,\r\n): void => {\r\n  const length =\r\n    typeof data === 'string' || data instanceof SBuffer\r\n      ? data.length\r\n      : data.byteLength;\r\n  if (length > kMaxBufferLength) {\r\n    throw lazyDOMException(\r\n      `${name} must be less than ${kMaxBufferLength + 1} bits`,\r\n      'OperationError',\r\n    );\r\n  }\r\n};\r\n\r\nexport const getUsagesUnion = (usageSet: KeyUsage[], ...usages: KeyUsage[]) => {\r\n  const newset: KeyUsage[] = [];\r\n  for (let n = 0; n < usages.length; n++) {\r\n    if (!usages[n] || usages[n] === undefined) continue;\r\n    if (usageSet.includes(usages[n] as KeyUsage))\r\n      newset.push(usages[n] as KeyUsage);\r\n  }\r\n  return newset;\r\n};\r\n\r\nconst kKeyOps: {\r\n  [key in KeyUsage]: number;\r\n} = {\r\n  sign: 1,\r\n  verify: 2,\r\n  encrypt: 3,\r\n  decrypt: 4,\r\n  wrapKey: 5,\r\n  unwrapKey: 6,\r\n  deriveKey: 7,\r\n  deriveBits: 8,\r\n  encapsulateBits: 9,\r\n  decapsulateBits: 10,\r\n  encapsulateKey: 11,\r\n  decapsulateKey: 12,\r\n};\r\n\r\nexport const validateKeyOps = (\r\n  keyOps: KeyUsage[] | undefined,\r\n  usagesSet: KeyUsage[],\r\n) => {\r\n  if (keyOps === undefined) return;\r\n  if (!Array.isArray(keyOps)) {\r\n    throw lazyDOMException('keyData.key_ops', 'InvalidArgument');\r\n  }\r\n  let flags = 0;\r\n  for (let n = 0; n < keyOps.length; n++) {\r\n    const op: KeyUsage = keyOps[n] as KeyUsage;\r\n    const op_flag = kKeyOps[op];\r\n    // Skipping unknown key ops\r\n    if (op_flag === undefined) continue;\r\n    // Have we seen it already? if so, error\r\n    if (flags & (1 << op_flag))\r\n      throw lazyDOMException('Duplicate key operation', 'DataError');\r\n    flags |= 1 << op_flag;\r\n\r\n    // TODO(@jasnell): RFC7517 section 4.3 strong recommends validating\r\n    // key usage combinations. Specifically, it says that unrelated key\r\n    // ops SHOULD NOT be used together. We're not yet validating that here.\r\n  }\r\n\r\n  if (usagesSet !== undefined) {\r\n    for (const use of usagesSet) {\r\n      if (!keyOps.includes(use)) {\r\n        throw lazyDOMException(\r\n          'Key operations and usage mismatch',\r\n          'DataError',\r\n        );\r\n      }\r\n    }\r\n  }\r\n};\r\n\r\nexport function hasAnyNotIn(set: string[], checks: string[]) {\r\n  for (const s of set) {\r\n    if (!checks.includes(s)) {\r\n      return true;\r\n    }\r\n  }\r\n  return false;\r\n}\r\n"],"mappings":"AAAA,SAASA,MAAM,IAAIC,OAAO,QAAQ,aAAa;AAE/C,SAASC,gBAAgB,QAAQ,UAAU;;AAE3C;AACA,MAAMC,gBAAgB,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;AAEpC,OAAO,SAASC,gBAAgBA,CAACC,CAAU,EAAW;EACpD,OAAOA,CAAC,KAAK,IAAI,IAAI,OAAOA,CAAC,KAAK,UAAU;AAC9C;AAEA,OAAO,SAASC,gBAAgBA,CAACC,GAAY,EAA+B;EAC1E,OACE,OAAOA,GAAG,KAAK,QAAQ,IACvBC,WAAW,CAACC,MAAM,CAACF,GAAG,CAAC,IACvBA,GAAG,YAAYC,WAAW;AAE9B;AAEA,OAAO,SAASE,cAAcA,CAC5BC,KAAc,EACdC,IAAY,EACZC,OAIQ,EACI;EACZ,MAAMC,iBAAiB,GAAGD,OAAO,IAAI,IAAI;EACzC,MAAME,UAAU,GAAGD,iBAAiB,GAAG,KAAK,GAAGD,OAAO,CAACE,UAAU;EACjE,MAAMC,aAAa,GAAGF,iBAAiB,GAAG,KAAK,GAAGD,OAAO,CAACG,aAAa;EACvE,MAAMC,QAAQ,GAAGH,iBAAiB,GAAG,KAAK,GAAGD,OAAO,CAACI,QAAQ;EAC7D,IACG,CAACA,QAAQ,IAAIN,KAAK,KAAK,IAAI,IAC3B,CAACI,UAAU,IAAIG,KAAK,CAACC,OAAO,CAACR,KAAK,CAAE,IACpC,OAAOA,KAAK,KAAK,QAAQ,KACvB,CAACK,aAAa,IAAI,OAAOL,KAAK,KAAK,UAAU,CAAE,EAClD;IACA,MAAM,IAAIS,KAAK,CAAC,GAAGR,IAAI,0BAA0BD,KAAK,EAAE,CAAC;EAC3D;EACA,OAAO,IAAI;AACb;AAEA,OAAO,MAAMU,uBAAuB,GAAGA,CACrCC,IAA6B,EAC7BV,IAAY,KACH;EACT,MAAMW,MAAM,GACV,OAAOD,IAAI,KAAK,QAAQ,IAAIA,IAAI,YAAYrB,OAAO,GAC/CqB,IAAI,CAACC,MAAM,GACXD,IAAI,CAACE,UAAU;EACrB,IAAID,MAAM,GAAGpB,gBAAgB,EAAE;IAC7B,MAAMD,gBAAgB,CACpB,GAAGU,IAAI,sBAAsBT,gBAAgB,GAAG,CAAC,OAAO,EACxD,gBACF,CAAC;EACH;AACF,CAAC;AAED,OAAO,MAAMsB,cAAc,GAAGA,CAACC,QAAoB,EAAE,GAAGC,MAAkB,KAAK;EAC7E,MAAMC,MAAkB,GAAG,EAAE;EAC7B,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGF,MAAM,CAACJ,MAAM,EAAEM,CAAC,EAAE,EAAE;IACtC,IAAI,CAACF,MAAM,CAACE,CAAC,CAAC,IAAIF,MAAM,CAACE,CAAC,CAAC,KAAKC,SAAS,EAAE;IAC3C,IAAIJ,QAAQ,CAACK,QAAQ,CAACJ,MAAM,CAACE,CAAC,CAAa,CAAC,EAC1CD,MAAM,CAACI,IAAI,CAACL,MAAM,CAACE,CAAC,CAAa,CAAC;EACtC;EACA,OAAOD,MAAM;AACf,CAAC;AAED,MAAMK,OAEL,GAAG;EACFC,IAAI,EAAE,CAAC;EACPC,MAAM,EAAE,CAAC;EACTC,OAAO,EAAE,CAAC;EACVC,OAAO,EAAE,CAAC;EACVC,OAAO,EAAE,CAAC;EACVC,SAAS,EAAE,CAAC;EACZC,SAAS,EAAE,CAAC;EACZC,UAAU,EAAE,CAAC;EACbC,eAAe,EAAE,CAAC;EAClBC,eAAe,EAAE,EAAE;EACnBC,cAAc,EAAE,EAAE;EAClBC,cAAc,EAAE;AAClB,CAAC;AAED,OAAO,MAAMC,cAAc,GAAGA,CAC5BC,MAA8B,EAC9BC,SAAqB,KAClB;EACH,IAAID,MAAM,KAAKjB,SAAS,EAAE;EAC1B,IAAI,CAACZ,KAAK,CAACC,OAAO,CAAC4B,MAAM,CAAC,EAAE;IAC1B,MAAM7C,gBAAgB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;EAC9D;EACA,IAAI+C,KAAK,GAAG,CAAC;EACb,KAAK,IAAIpB,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGkB,MAAM,CAACxB,MAAM,EAAEM,CAAC,EAAE,EAAE;IACtC,MAAMqB,EAAY,GAAGH,MAAM,CAAClB,CAAC,CAAa;IAC1C,MAAMsB,OAAO,GAAGlB,OAAO,CAACiB,EAAE,CAAC;IAC3B;IACA,IAAIC,OAAO,KAAKrB,SAAS,EAAE;IAC3B;IACA,IAAImB,KAAK,GAAI,CAAC,IAAIE,OAAQ,EACxB,MAAMjD,gBAAgB,CAAC,yBAAyB,EAAE,WAAW,CAAC;IAChE+C,KAAK,IAAI,CAAC,IAAIE,OAAO;;IAErB;IACA;IACA;EACF;EAEA,IAAIH,SAAS,KAAKlB,SAAS,EAAE;IAC3B,KAAK,MAAMsB,GAAG,IAAIJ,SAAS,EAAE;MAC3B,IAAI,CAACD,MAAM,CAAChB,QAAQ,CAACqB,GAAG,CAAC,EAAE;QACzB,MAAMlD,gBAAgB,CACpB,mCAAmC,EACnC,WACF,CAAC;MACH;IACF;EACF;AACF,CAAC;AAED,OAAO,SAASmD,WAAWA,CAACC,GAAa,EAAEC,MAAgB,EAAE;EAC3D,KAAK,MAAMC,CAAC,IAAIF,GAAG,EAAE;IACnB,IAAI,CAACC,MAAM,CAACxB,QAAQ,CAACyB,CAAC,CAAC,EAAE;MACvB,OAAO,IAAI;IACb;EACF;EACA,OAAO,KAAK;AACd","ignoreList":[]}