@kojinx/collab-crypto 0.0.2

package/fesm2022/kojinx-collab-crypto.mjs

@@ -0,0 +1,528 @@
+import * as i0 from '@angular/core';
+import { InjectionToken, inject, Injectable } from '@angular/core';
+
+/**
+ * Injected Asymmetric Cryptography Provider (RSA-2048 OAEP).
+ * On desktop: Implemented via Tauri Rust Keyring IPC.
+ * On mobile: Implemented via SubtleCrypto + Capacitor SecureStorage.
+ */
+const KOJINX_CRYPTO_PROVIDER = new InjectionToken('KOJINX_CRYPTO_PROVIDER');
+/**
+ * Injected Client-Agnostic HTTP Fetcher (bypass CORS on native).
+ */
+const KOJINX_HTTP_FETCH = new InjectionToken('KOJINX_HTTP_FETCH');
+/**
+ * Injected Storage Provider for local session key caching.
+ */
+const KOJINX_CRYPTO_STORAGE = new InjectionToken('KOJINX_CRYPTO_STORAGE', {
+    factory: () => ({
+        getItem: (key) => Promise.resolve(localStorage.getItem(key)),
+        setItem: (key, value) => {
+            localStorage.setItem(key, value);
+            return Promise.resolve();
+        },
+        removeItem: (key) => {
+            localStorage.removeItem(key);
+            return Promise.resolve();
+        }
+    })
+});
+/**
+ * Injected API Base URL accessor function.
+ */
+const KOJINX_API_BASE_URL = new InjectionToken('KOJINX_API_BASE_URL');
+/**
+ * Injected Auth Bearer Token accessor function.
+ */
+const KOJINX_AUTH_TOKEN = new InjectionToken('KOJINX_AUTH_TOKEN');
+
+/**
+ * Computes deterministic SHA-256 safety verification numbers (Signal-style).
+ * Users can compare these 30-digit numbers out-of-band to verify end-to-end identity.
+ */
+class SafetyNumberUtils {
+    /**
+     * Generates a Safety Number between two identity public keys.
+     *
+     * @param localPublicKey Base64-encoded local RSA public key
+     * @param remotePublicKey Base64-encoded remote RSA public key
+     */
+    static async generate(localPublicKey, remotePublicKey) {
+        if (!localPublicKey || !remotePublicKey) {
+            throw new Error('Both public keys are required to generate safety numbers.');
+        }
+        const localFingerprint = await this.hashPublicKey(localPublicKey);
+        const remoteFingerprint = await this.hashPublicKey(remotePublicKey);
+        // Sort lexicographically to ensure order-independent verification
+        const sorted = [localFingerprint, remoteFingerprint].sort();
+        const combinedDigest = await this.sha256(sorted.join(''));
+        // Convert hex digest to a 30-digit decimal representation
+        const digits = this.hexTo30Digits(combinedDigest);
+        const formatted = this.formatBlocks(digits);
+        return {
+            raw: combinedDigest,
+            formatted,
+            localFingerprint: localFingerprint.substring(0, 16),
+            remoteFingerprint: remoteFingerprint.substring(0, 16)
+        };
+    }
+    /**
+     * Hashes a single public key using SHA-256.
+     */
+    static async hashPublicKey(publicKeyBase64) {
+        const cleanKey = publicKeyBase64.replace(/\s+/g, '');
+        return this.sha256(cleanKey);
+    }
+    /**
+     * Computes SHA-256 hex string using W3C Web Crypto API.
+     */
+    static async sha256(input) {
+        const encoder = new TextEncoder();
+        const data = encoder.encode(input);
+        const hashBuffer = await crypto.subtle.digest('SHA-256', data);
+        const hashArray = Array.from(new Uint8Array(hashBuffer));
+        return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
+    }
+    /**
+     * Converts a hexadecimal string into a deterministic 30-digit decimal string.
+     */
+    static hexTo30Digits(hex) {
+        let result = '';
+        // Take chunks of 8 hex characters (32-bit integers) to produce 5-digit decimal blocks
+        for (let i = 0; i < 6; i++) {
+            const chunk = hex.substring(i * 8, (i + 1) * 8);
+            const num = parseInt(chunk, 16) % 100000;
+            result += num.toString().padStart(5, '0');
+        }
+        return result;
+    }
+    /**
+     * Formats a 30-digit string into 6 blocks of 5 digits separated by spaces.
+     */
+    static formatBlocks(digits) {
+        const blocks = [];
+        for (let i = 0; i < digits.length; i += 5) {
+            blocks.push(digits.substring(i, i + 5));
+        }
+        return blocks.join(' ');
+    }
+}
+
+/**
+ * Pure End-to-End Encryption cryptographic service.
+ * Handles AES-256-GCM message encryption/decryption and RSA key wrapping/unwrapping.
+ */
+class E2EChatCryptoService {
+    constructor() {
+        this.cryptoProvider = inject(KOJINX_CRYPTO_PROVIDER, {
+            optional: true
+        });
+    }
+    /**
+     * Generates a new cryptographically secure 256-bit AES-GCM session key.
+     */
+    async generateAesKey() {
+        return crypto.subtle.generateKey({
+            name: 'AES-GCM',
+            length: 256
+        }, true, // extractable for RSA wrapping & secure export
+        ['encrypt', 'decrypt']);
+    }
+    /**
+     * Encrypts plaintext string using AES-256-GCM with a fresh 12-byte (96-bit) nonce.
+     *
+     * @param sessionKey In-memory active session key
+     * @param plaintext Plaintext message content
+     */
+    async encryptMessage(sessionKey, plaintext) {
+        if (!sessionKey || !sessionKey.rawKey) {
+            throw new Error('Invalid session key provided for encryption.');
+        }
+        // Standard 12-byte initialization vector for AES-GCM
+        const nonce = crypto.getRandomValues(new Uint8Array(12));
+        const encoder = new TextEncoder();
+        const encodedPlaintext = encoder.encode(plaintext);
+        const ciphertextBuffer = await crypto.subtle.encrypt({
+            name: 'AES-GCM',
+            iv: nonce
+        }, sessionKey.rawKey, encodedPlaintext);
+        return {
+            ciphertext: this.arrayBufferToBase64(ciphertextBuffer),
+            nonce: this.arrayBufferToBase64(nonce.buffer),
+            sessionKeyId: sessionKey.id,
+            generation: sessionKey.generation
+        };
+    }
+    /**
+     * Decrypts an EncryptedMessagePayload using AES-256-GCM.
+     *
+     * @param sessionKey In-memory session key corresponding to payload.sessionKeyId
+     * @param payload Encrypted payload containing ciphertext and nonce
+     */
+    async decryptMessage(sessionKey, payload) {
+        if (!sessionKey || !sessionKey.rawKey) {
+            throw new Error('Invalid session key provided for decryption.');
+        }
+        const ciphertext = this.base64ToArrayBuffer(payload.ciphertext);
+        const nonce = this.base64ToArrayBuffer(payload.nonce);
+        const decryptedBuffer = await crypto.subtle.decrypt({
+            name: 'AES-GCM',
+            iv: new Uint8Array(nonce)
+        }, sessionKey.rawKey, ciphertext);
+        const decoder = new TextDecoder();
+        return decoder.decode(decryptedBuffer);
+    }
+    /**
+     * Exports an AES-GCM key and wraps (encrypts) it with a recipient's RSA public key.
+     *
+     * @param aesKey AES CryptoKey to wrap
+     * @param recipientPublicKey Base64-encoded recipient RSA public key
+     */
+    async wrapSessionKey(aesKey, recipientPublicKey) {
+        if (!this.cryptoProvider) {
+            throw new Error('KOJINX_CRYPTO_PROVIDER is not provided. Cannot wrap session keys.');
+        }
+        const rawKeyBytes = await crypto.subtle.exportKey('raw', aesKey);
+        const rawKeyBase64 = this.arrayBufferToBase64(rawKeyBytes);
+        // Asymmetrically encrypt using host RSA provider
+        return this.cryptoProvider.encrypt(recipientPublicKey, rawKeyBase64);
+    }
+    /**
+     * Unwraps (decrypts) an RSA-encrypted AES raw key and imports it back into a W3C CryptoKey.
+     *
+     * @param encryptedAesKeyBase64 RSA-encrypted AES raw key in base64 format
+     */
+    async unwrapSessionKey(encryptedAesKeyBase64) {
+        if (!this.cryptoProvider) {
+            throw new Error('KOJINX_CRYPTO_PROVIDER is not provided. Cannot unwrap session keys.');
+        }
+        // Asymmetrically decrypt using local private key
+        const rawKeyBase64 = await this.cryptoProvider.decrypt(encryptedAesKeyBase64);
+        const rawKeyBuffer = this.base64ToArrayBuffer(rawKeyBase64);
+        return crypto.subtle.importKey('raw', rawKeyBuffer, {
+            name: 'AES-GCM',
+            length: 256
+        }, true, ['encrypt', 'decrypt']);
+    }
+    /**
+     * Exports a CryptoKey to base64 raw bytes.
+     */
+    async exportRawKeyBase64(key) {
+        const raw = await crypto.subtle.exportKey('raw', key);
+        return this.arrayBufferToBase64(raw);
+    }
+    /**
+     * Imports a base64 raw key string into a CryptoKey.
+     */
+    async importRawKeyBase64(base64) {
+        const buffer = this.base64ToArrayBuffer(base64);
+        return crypto.subtle.importKey('raw', buffer, {
+            name: 'AES-GCM',
+            length: 256
+        }, true, ['encrypt', 'decrypt']);
+    }
+    /**
+     * Encodes ArrayBuffer to Base64 string.
+     */
+    arrayBufferToBase64(buffer) {
+        const bytes = buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer);
+        let binary = '';
+        for (let i = 0; i < bytes.byteLength; i++) {
+            binary += String.fromCharCode(bytes[i]);
+        }
+        return btoa(binary);
+    }
+    /**
+     * Decodes Base64 string to ArrayBuffer.
+     */
+    base64ToArrayBuffer(base64) {
+        const binary = atob(base64.trim());
+        const bytes = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i++) {
+            bytes[i] = binary.charCodeAt(i);
+        }
+        return bytes.buffer;
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: E2EChatCryptoService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: E2EChatCryptoService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: E2EChatCryptoService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root'
+                }]
+        }] });
+
+/** 30 days in milliseconds for maximum session key lifetime */
+const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
+/**
+ * Manages the lifecycle, caching, negotiation, and rotation of conversation session keys.
+ */
+class SessionKeyManagerService {
+    constructor() {
+        this.cryptoService = inject(E2EChatCryptoService);
+        this.httpFetch = inject(KOJINX_HTTP_FETCH, {
+            optional: true
+        });
+        this.getApiUrl = inject(KOJINX_API_BASE_URL, {
+            optional: true
+        });
+        this.getAuthToken = inject(KOJINX_AUTH_TOKEN, { optional: true });
+        this.storage = inject(KOJINX_CRYPTO_STORAGE, {
+            optional: true
+        });
+        /** Fast in-memory cache mapped by conversationId */
+        this.activeKeysByConversation = new Map();
+        /** Fast in-memory cache mapped by sessionKeyId (for historic messages) */
+        this.keysById = new Map();
+    }
+    /**
+     * Retrieves or creates an active session key for a 1:1 Direct Message conversation.
+     *
+     * @param localUserId Current user's ID
+     * @param remoteUserId Remote contact's ID
+     * @param remotePublicKey Base64 RSA public key of remote contact
+     * @param localPublicKey Base64 RSA public key of local user
+     */
+    async getOrCreateDmSessionKey(localUserId, remoteUserId, remotePublicKey, localPublicKey) {
+        const conversationId = this.buildDmConversationId(localUserId, remoteUserId);
+        // 1. Check in-memory cache
+        const cached = this.activeKeysByConversation.get(conversationId);
+        if (cached && !this.isKeyExpired(cached)) {
+            return cached;
+        }
+        // 2. Attempt fetching from server if HTTP fetch is provided
+        if (this.httpFetch && this.getApiUrl && this.getAuthToken) {
+            const serverKey = await this.fetchSessionKeyFromServer(conversationId, 'dm');
+            if (serverKey) {
+                this.cacheKey(serverKey);
+                return serverKey;
+            }
+        }
+        // 3. Create fresh session key and distribute
+        return this.createAndDistributeSessionKey({
+            type: 'dm',
+            conversationId,
+            generation: cached ? cached.generation + 1 : 1,
+            members: [
+                { userId: localUserId, publicKey: localPublicKey },
+                { userId: remoteUserId, publicKey: remotePublicKey }
+            ]
+        });
+    }
+    /**
+     * Retrieves or creates an active session key for a Native Channel or Group.
+     *
+     * @param channelId Unique channel ID
+     * @param members List of all workspace/channel members with their public keys
+     */
+    async getOrCreateChannelSessionKey(channelId, members) {
+        const cached = this.activeKeysByConversation.get(channelId);
+        if (cached && !this.isKeyExpired(cached)) {
+            return cached;
+        }
+        if (this.httpFetch && this.getApiUrl && this.getAuthToken) {
+            const serverKey = await this.fetchSessionKeyFromServer(channelId, 'channel');
+            if (serverKey) {
+                this.cacheKey(serverKey);
+                return serverKey;
+            }
+        }
+        return this.createAndDistributeSessionKey({
+            type: 'channel',
+            conversationId: channelId,
+            generation: cached ? cached.generation + 1 : 1,
+            members
+        });
+    }
+    /**
+     * Retrieves a session key by its specific sessionKeyId (used for decrypting historic messages).
+     */
+    async getSessionKeyById(sessionKeyId) {
+        const cached = this.keysById.get(sessionKeyId);
+        if (cached)
+            return cached;
+        // Check local storage
+        if (this.storage) {
+            const stored = await this.storage.getItem(`kojinx_sk_${sessionKeyId}`);
+            if (stored) {
+                try {
+                    const parsed = JSON.parse(stored);
+                    const rawKey = await this.cryptoService.importRawKeyBase64(parsed.rawKeyBase64);
+                    const key = {
+                        id: parsed.id,
+                        type: parsed.type,
+                        conversationId: parsed.conversationId,
+                        rawKey,
+                        generation: parsed.generation,
+                        createdAt: parsed.createdAt
+                    };
+                    this.cacheKey(key);
+                    return key;
+                }
+                catch {
+                    // ignore corrupted local key
+                }
+            }
+        }
+        return null;
+    }
+    /**
+     * Generates a new AES session key, wraps it for all members, and uploads to the server.
+     */
+    async createAndDistributeSessionKey(params) {
+        const rawAesKey = await this.cryptoService.generateAesKey();
+        const sessionKeyId = this.generateUuid();
+        const memberPayloads = {};
+        for (const member of params.members) {
+            if (member.publicKey) {
+                memberPayloads[member.userId] =
+                    await this.cryptoService.wrapSessionKey(rawAesKey, member.publicKey);
+            }
+        }
+        const sessionKey = {
+            id: sessionKeyId,
+            type: params.type,
+            conversationId: params.conversationId,
+            rawKey: rawAesKey,
+            generation: params.generation,
+            createdAt: Date.now()
+        };
+        // Store in memory
+        this.cacheKey(sessionKey);
+        await this.persistKeyLocally(sessionKey);
+        // Upload to server if online
+        if (this.httpFetch && this.getApiUrl && this.getAuthToken) {
+            const token = await this.getAuthToken();
+            const apiUrl = this.getApiUrl();
+            const payload = {
+                sessionKeyId,
+                conversationType: params.type,
+                conversationId: params.conversationId,
+                generation: params.generation,
+                memberPayloads
+            };
+            try {
+                await this.httpFetch(`${apiUrl}/api/e2e/session-keys`, {
+                    method: 'POST',
+                    headers: {
+                        Authorization: `Bearer ${token}`,
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify(payload)
+                });
+            }
+            catch (err) {
+                console.warn('[SessionKeyManager] Failed to sync session key to server:', err);
+            }
+        }
+        return sessionKey;
+    }
+    /**
+     * Helper to check if a key has exceeded the 30-day rotation threshold.
+     */
+    isKeyExpired(key) {
+        return Date.now() - key.createdAt > THIRTY_DAYS_MS;
+    }
+    /**
+     * Builds a deterministic conversation identifier for 1:1 DMs (lexicographical sort).
+     */
+    buildDmConversationId(userIdA, userIdB) {
+        return [userIdA, userIdB].sort().join('_');
+    }
+    /**
+     * Caches a session key in memory.
+     */
+    cacheKey(key) {
+        this.activeKeysByConversation.set(key.conversationId, key);
+        this.keysById.set(key.id, key);
+    }
+    /**
+     * Persists an unwrapped session key to local storage for fast startup.
+     */
+    async persistKeyLocally(key) {
+        if (!this.storage)
+            return;
+        try {
+            const rawKeyBase64 = await this.cryptoService.exportRawKeyBase64(key.rawKey);
+            const data = JSON.stringify({
+                id: key.id,
+                type: key.type,
+                conversationId: key.conversationId,
+                rawKeyBase64,
+                generation: key.generation,
+                createdAt: key.createdAt
+            });
+            await this.storage.setItem(`kojinx_sk_${key.id}`, data);
+        }
+        catch {
+            // ignore persistence error
+        }
+    }
+    /**
+     * Fetches latest session key from server and unwraps it locally.
+     */
+    async fetchSessionKeyFromServer(conversationId, type) {
+        if (!this.httpFetch || !this.getApiUrl || !this.getAuthToken)
+            return null;
+        try {
+            const token = await this.getAuthToken();
+            const apiUrl = this.getApiUrl();
+            const res = await this.httpFetch(`${apiUrl}/api/e2e/session-keys/${conversationId}`, {
+                method: 'GET',
+                headers: {
+                    Authorization: `Bearer ${token}`
+                }
+            });
+            if (res.status === 200 && res.data?.encryptedKey) {
+                const rawKey = await this.cryptoService.unwrapSessionKey(res.data.encryptedKey);
+                return {
+                    id: res.data.sessionKeyId,
+                    type,
+                    conversationId,
+                    rawKey,
+                    generation: res.data.generation || 1,
+                    createdAt: res.data.createdAt
+                        ? new Date(res.data.createdAt).getTime()
+                        : Date.now()
+                };
+            }
+        }
+        catch {
+            // Not found or network error
+        }
+        return null;
+    }
+    /**
+     * Generates a random UUID (W3C standard or fallback).
+     */
+    generateUuid() {
+        if (typeof crypto !== 'undefined' && crypto.randomUUID) {
+            return crypto.randomUUID();
+        }
+        return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, c => {
+            const r = (Math.random() * 16) | 0;
+            const v = c === 'x' ? r : (r & 0x3) | 0x8;
+            return v.toString(16);
+        });
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: SessionKeyManagerService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: SessionKeyManagerService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.12", ngImport: i0, type: SessionKeyManagerService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root'
+                }]
+        }] });
+
+/*
+ * Public API Surface of @kojinx/collab-crypto
+ */
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { E2EChatCryptoService, KOJINX_API_BASE_URL, KOJINX_AUTH_TOKEN, KOJINX_CRYPTO_PROVIDER, KOJINX_CRYPTO_STORAGE, KOJINX_HTTP_FETCH, SafetyNumberUtils, SessionKeyManagerService };
+//# sourceMappingURL=kojinx-collab-crypto.mjs.map

package/fesm2022/kojinx-collab-crypto.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"kojinx-collab-crypto.mjs","sources":["../../../../projects/kojinx/collab-crypto/src/lib/tokens.ts","../../../../projects/kojinx/collab-crypto/src/lib/utils/safety-number.utils.ts","../../../../projects/kojinx/collab-crypto/src/lib/services/e2e-chat-crypto.service.ts","../../../../projects/kojinx/collab-crypto/src/lib/services/session-key-manager.service.ts","../../../../projects/kojinx/collab-crypto/src/public-api.ts","../../../../projects/kojinx/collab-crypto/src/kojinx-collab-crypto.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\nimport {\n  KojinxCryptoProvider,\n  KojinxFetchFunction,\n  KojinxStorageProvider\n} from './models/crypto.models';\n\n/**\n * Injected Asymmetric Cryptography Provider (RSA-2048 OAEP).\n * On desktop: Implemented via Tauri Rust Keyring IPC.\n * On mobile: Implemented via SubtleCrypto + Capacitor SecureStorage.\n */\nexport const KOJINX_CRYPTO_PROVIDER = new InjectionToken<KojinxCryptoProvider>(\n  'KOJINX_CRYPTO_PROVIDER'\n);\n\n/**\n * Injected Client-Agnostic HTTP Fetcher (bypass CORS on native).\n */\nexport const KOJINX_HTTP_FETCH = new InjectionToken<KojinxFetchFunction>(\n  'KOJINX_HTTP_FETCH'\n);\n\n/**\n * Injected Storage Provider for local session key caching.\n */\nexport const KOJINX_CRYPTO_STORAGE = new InjectionToken<KojinxStorageProvider>(\n  'KOJINX_CRYPTO_STORAGE',\n  {\n    factory: () => ({\n      getItem: (key: string) => Promise.resolve(localStorage.getItem(key)),\n      setItem: (key: string, value: string) => {\n        localStorage.setItem(key, value);\n        return Promise.resolve();\n      },\n      removeItem: (key: string) => {\n        localStorage.removeItem(key);\n        return Promise.resolve();\n      }\n    })\n  }\n);\n\n/**\n * Injected API Base URL accessor function.\n */\nexport const KOJINX_API_BASE_URL = new InjectionToken<() => string>(\n  'KOJINX_API_BASE_URL'\n);\n\n/**\n * Injected Auth Bearer Token accessor function.\n */\nexport const KOJINX_AUTH_TOKEN = new InjectionToken<() => Promise<string | null>>(\n  'KOJINX_AUTH_TOKEN'\n);\n","import { SafetyNumber } from '../models/crypto.models';\n\n/**\n * Computes deterministic SHA-256 safety verification numbers (Signal-style).\n * Users can compare these 30-digit numbers out-of-band to verify end-to-end identity.\n */\nexport class SafetyNumberUtils {\n  /**\n   * Generates a Safety Number between two identity public keys.\n   *\n   * @param localPublicKey Base64-encoded local RSA public key\n   * @param remotePublicKey Base64-encoded remote RSA public key\n   */\n  static async generate(\n    localPublicKey: string,\n    remotePublicKey: string\n  ): Promise<SafetyNumber> {\n    if (!localPublicKey || !remotePublicKey) {\n      throw new Error('Both public keys are required to generate safety numbers.');\n    }\n\n    const localFingerprint = await this.hashPublicKey(localPublicKey);\n    const remoteFingerprint = await this.hashPublicKey(remotePublicKey);\n\n    // Sort lexicographically to ensure order-independent verification\n    const sorted = [localFingerprint, remoteFingerprint].sort();\n    const combinedDigest = await this.sha256(sorted.join(''));\n\n    // Convert hex digest to a 30-digit decimal representation\n    const digits = this.hexTo30Digits(combinedDigest);\n    const formatted = this.formatBlocks(digits);\n\n    return {\n      raw: combinedDigest,\n      formatted,\n      localFingerprint: localFingerprint.substring(0, 16),\n      remoteFingerprint: remoteFingerprint.substring(0, 16)\n    };\n  }\n\n  /**\n   * Hashes a single public key using SHA-256.\n   */\n  static async hashPublicKey(publicKeyBase64: string): Promise<string> {\n    const cleanKey = publicKeyBase64.replace(/\\s+/g, '');\n    return this.sha256(cleanKey);\n  }\n\n  /**\n   * Computes SHA-256 hex string using W3C Web Crypto API.\n   */\n  private static async sha256(input: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(input);\n    const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n    const hashArray = Array.from(new Uint8Array(hashBuffer));\n    return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  /**\n   * Converts a hexadecimal string into a deterministic 30-digit decimal string.\n   */\n  private static hexTo30Digits(hex: string): string {\n    let result = '';\n    // Take chunks of 8 hex characters (32-bit integers) to produce 5-digit decimal blocks\n    for (let i = 0; i < 6; i++) {\n      const chunk = hex.substring(i * 8, (i + 1) * 8);\n      const num = parseInt(chunk, 16) % 100000;\n      result += num.toString().padStart(5, '0');\n    }\n    return result;\n  }\n\n  /**\n   * Formats a 30-digit string into 6 blocks of 5 digits separated by spaces.\n   */\n  private static formatBlocks(digits: string): string {\n    const blocks: string[] = [];\n    for (let i = 0; i < digits.length; i += 5) {\n      blocks.push(digits.substring(i, i + 5));\n    }\n    return blocks.join(' ');\n  }\n}\n","import { Injectable, inject } from '@angular/core';\nimport {\n  ConversationSessionKey,\n  EncryptedMessagePayload,\n  KojinxCryptoProvider\n} from '../models/crypto.models';\nimport { KOJINX_CRYPTO_PROVIDER } from '../tokens';\n\n/**\n * Pure End-to-End Encryption cryptographic service.\n * Handles AES-256-GCM message encryption/decryption and RSA key wrapping/unwrapping.\n */\n@Injectable({\n  providedIn: 'root'\n})\nexport class E2EChatCryptoService {\n  private cryptoProvider = inject<KojinxCryptoProvider>(KOJINX_CRYPTO_PROVIDER, {\n    optional: true\n  });\n\n  /**\n   * Generates a new cryptographically secure 256-bit AES-GCM session key.\n   */\n  async generateAesKey(): Promise<CryptoKey> {\n    return crypto.subtle.generateKey(\n      {\n        name: 'AES-GCM',\n        length: 256\n      },\n      true, // extractable for RSA wrapping & secure export\n      ['encrypt', 'decrypt']\n    );\n  }\n\n  /**\n   * Encrypts plaintext string using AES-256-GCM with a fresh 12-byte (96-bit) nonce.\n   *\n   * @param sessionKey In-memory active session key\n   * @param plaintext Plaintext message content\n   */\n  async encryptMessage(\n    sessionKey: ConversationSessionKey,\n    plaintext: string\n  ): Promise<EncryptedMessagePayload> {\n    if (!sessionKey || !sessionKey.rawKey) {\n      throw new Error('Invalid session key provided for encryption.');\n    }\n\n    // Standard 12-byte initialization vector for AES-GCM\n    const nonce = crypto.getRandomValues(new Uint8Array(12));\n    const encoder = new TextEncoder();\n    const encodedPlaintext = encoder.encode(plaintext);\n\n    const ciphertextBuffer = await crypto.subtle.encrypt(\n      {\n        name: 'AES-GCM',\n        iv: nonce\n      },\n      sessionKey.rawKey,\n      encodedPlaintext\n    );\n\n    return {\n      ciphertext: this.arrayBufferToBase64(ciphertextBuffer),\n      nonce: this.arrayBufferToBase64(nonce.buffer),\n      sessionKeyId: sessionKey.id,\n      generation: sessionKey.generation\n    };\n  }\n\n  /**\n   * Decrypts an EncryptedMessagePayload using AES-256-GCM.\n   *\n   * @param sessionKey In-memory session key corresponding to payload.sessionKeyId\n   * @param payload Encrypted payload containing ciphertext and nonce\n   */\n  async decryptMessage(\n    sessionKey: ConversationSessionKey,\n    payload: EncryptedMessagePayload\n  ): Promise<string> {\n    if (!sessionKey || !sessionKey.rawKey) {\n      throw new Error('Invalid session key provided for decryption.');\n    }\n\n    const ciphertext = this.base64ToArrayBuffer(payload.ciphertext);\n    const nonce = this.base64ToArrayBuffer(payload.nonce);\n\n    const decryptedBuffer = await crypto.subtle.decrypt(\n      {\n        name: 'AES-GCM',\n        iv: new Uint8Array(nonce)\n      },\n      sessionKey.rawKey,\n      ciphertext\n    );\n\n    const decoder = new TextDecoder();\n    return decoder.decode(decryptedBuffer);\n  }\n\n  /**\n   * Exports an AES-GCM key and wraps (encrypts) it with a recipient's RSA public key.\n   *\n   * @param aesKey AES CryptoKey to wrap\n   * @param recipientPublicKey Base64-encoded recipient RSA public key\n   */\n  async wrapSessionKey(\n    aesKey: CryptoKey,\n    recipientPublicKey: string\n  ): Promise<string> {\n    if (!this.cryptoProvider) {\n      throw new Error(\n        'KOJINX_CRYPTO_PROVIDER is not provided. Cannot wrap session keys.'\n      );\n    }\n\n    const rawKeyBytes = await crypto.subtle.exportKey('raw', aesKey);\n    const rawKeyBase64 = this.arrayBufferToBase64(rawKeyBytes);\n\n    // Asymmetrically encrypt using host RSA provider\n    return this.cryptoProvider.encrypt(recipientPublicKey, rawKeyBase64);\n  }\n\n  /**\n   * Unwraps (decrypts) an RSA-encrypted AES raw key and imports it back into a W3C CryptoKey.\n   *\n   * @param encryptedAesKeyBase64 RSA-encrypted AES raw key in base64 format\n   */\n  async unwrapSessionKey(encryptedAesKeyBase64: string): Promise<CryptoKey> {\n    if (!this.cryptoProvider) {\n      throw new Error(\n        'KOJINX_CRYPTO_PROVIDER is not provided. Cannot unwrap session keys.'\n      );\n    }\n\n    // Asymmetrically decrypt using local private key\n    const rawKeyBase64 = await this.cryptoProvider.decrypt(\n      encryptedAesKeyBase64\n    );\n    const rawKeyBuffer = this.base64ToArrayBuffer(rawKeyBase64);\n\n    return crypto.subtle.importKey(\n      'raw',\n      rawKeyBuffer,\n      {\n        name: 'AES-GCM',\n        length: 256\n      },\n      true,\n      ['encrypt', 'decrypt']\n    );\n  }\n\n  /**\n   * Exports a CryptoKey to base64 raw bytes.\n   */\n  async exportRawKeyBase64(key: CryptoKey): Promise<string> {\n    const raw = await crypto.subtle.exportKey('raw', key);\n    return this.arrayBufferToBase64(raw);\n  }\n\n  /**\n   * Imports a base64 raw key string into a CryptoKey.\n   */\n  async importRawKeyBase64(base64: string): Promise<CryptoKey> {\n    const buffer = this.base64ToArrayBuffer(base64);\n    return crypto.subtle.importKey(\n      'raw',\n      buffer,\n      {\n        name: 'AES-GCM',\n        length: 256\n      },\n      true,\n      ['encrypt', 'decrypt']\n    );\n  }\n\n  /**\n   * Encodes ArrayBuffer to Base64 string.\n   */\n  arrayBufferToBase64(buffer: ArrayBuffer | Uint8Array): string {\n    const bytes = buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer);\n    let binary = '';\n    for (let i = 0; i < bytes.byteLength; i++) {\n      binary += String.fromCharCode(bytes[i]);\n    }\n    return btoa(binary);\n  }\n\n  /**\n   * Decodes Base64 string to ArrayBuffer.\n   */\n  base64ToArrayBuffer(base64: string): ArrayBuffer {\n    const binary = atob(base64.trim());\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n      bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes.buffer;\n  }\n}\n","import { Injectable, inject } from '@angular/core';\nimport {\n  ConversationSessionKey,\n  KojinxFetchFunction,\n  KojinxStorageProvider,\n  MemberPublicKey,\n  SessionKeyExchangePayload\n} from '../models/crypto.models';\nimport {\n  KOJINX_API_BASE_URL,\n  KOJINX_AUTH_TOKEN,\n  KOJINX_CRYPTO_STORAGE,\n  KOJINX_HTTP_FETCH\n} from '../tokens';\nimport { E2EChatCryptoService } from './e2e-chat-crypto.service';\n\n/** 30 days in milliseconds for maximum session key lifetime */\nconst THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;\n\n/**\n * Manages the lifecycle, caching, negotiation, and rotation of conversation session keys.\n */\n@Injectable({\n  providedIn: 'root'\n})\nexport class SessionKeyManagerService {\n  private cryptoService = inject(E2EChatCryptoService);\n  private httpFetch = inject<KojinxFetchFunction>(KOJINX_HTTP_FETCH, {\n    optional: true\n  });\n  private getApiUrl = inject<() => string>(KOJINX_API_BASE_URL, {\n    optional: true\n  });\n  private getAuthToken = inject<() => Promise<string | null>>(\n    KOJINX_AUTH_TOKEN,\n    { optional: true }\n  );\n  private storage = inject<KojinxStorageProvider>(KOJINX_CRYPTO_STORAGE, {\n    optional: true\n  });\n\n  /** Fast in-memory cache mapped by conversationId */\n  private activeKeysByConversation = new Map<string, ConversationSessionKey>();\n  /** Fast in-memory cache mapped by sessionKeyId (for historic messages) */\n  private keysById = new Map<string, ConversationSessionKey>();\n\n  /**\n   * Retrieves or creates an active session key for a 1:1 Direct Message conversation.\n   *\n   * @param localUserId Current user's ID\n   * @param remoteUserId Remote contact's ID\n   * @param remotePublicKey Base64 RSA public key of remote contact\n   * @param localPublicKey Base64 RSA public key of local user\n   */\n  async getOrCreateDmSessionKey(\n    localUserId: string,\n    remoteUserId: string,\n    remotePublicKey: string,\n    localPublicKey: string\n  ): Promise<ConversationSessionKey> {\n    const conversationId = this.buildDmConversationId(\n      localUserId,\n      remoteUserId\n    );\n\n    // 1. Check in-memory cache\n    const cached = this.activeKeysByConversation.get(conversationId);\n    if (cached && !this.isKeyExpired(cached)) {\n      return cached;\n    }\n\n    // 2. Attempt fetching from server if HTTP fetch is provided\n    if (this.httpFetch && this.getApiUrl && this.getAuthToken) {\n      const serverKey = await this.fetchSessionKeyFromServer(\n        conversationId,\n        'dm'\n      );\n      if (serverKey) {\n        this.cacheKey(serverKey);\n        return serverKey;\n      }\n    }\n\n    // 3. Create fresh session key and distribute\n    return this.createAndDistributeSessionKey({\n      type: 'dm',\n      conversationId,\n      generation: cached ? cached.generation + 1 : 1,\n      members: [\n        { userId: localUserId, publicKey: localPublicKey },\n        { userId: remoteUserId, publicKey: remotePublicKey }\n      ]\n    });\n  }\n\n  /**\n   * Retrieves or creates an active session key for a Native Channel or Group.\n   *\n   * @param channelId Unique channel ID\n   * @param members List of all workspace/channel members with their public keys\n   */\n  async getOrCreateChannelSessionKey(\n    channelId: string,\n    members: MemberPublicKey[]\n  ): Promise<ConversationSessionKey> {\n    const cached = this.activeKeysByConversation.get(channelId);\n    if (cached && !this.isKeyExpired(cached)) {\n      return cached;\n    }\n\n    if (this.httpFetch && this.getApiUrl && this.getAuthToken) {\n      const serverKey = await this.fetchSessionKeyFromServer(\n        channelId,\n        'channel'\n      );\n      if (serverKey) {\n        this.cacheKey(serverKey);\n        return serverKey;\n      }\n    }\n\n    return this.createAndDistributeSessionKey({\n      type: 'channel',\n      conversationId: channelId,\n      generation: cached ? cached.generation + 1 : 1,\n      members\n    });\n  }\n\n  /**\n   * Retrieves a session key by its specific sessionKeyId (used for decrypting historic messages).\n   */\n  async getSessionKeyById(\n    sessionKeyId: string\n  ): Promise<ConversationSessionKey | null> {\n    const cached = this.keysById.get(sessionKeyId);\n    if (cached) return cached;\n\n    // Check local storage\n    if (this.storage) {\n      const stored = await this.storage.getItem(\n        `kojinx_sk_${sessionKeyId}`\n      );\n      if (stored) {\n        try {\n          const parsed = JSON.parse(stored);\n          const rawKey = await this.cryptoService.importRawKeyBase64(\n            parsed.rawKeyBase64\n          );\n          const key: ConversationSessionKey = {\n            id: parsed.id,\n            type: parsed.type,\n            conversationId: parsed.conversationId,\n            rawKey,\n            generation: parsed.generation,\n            createdAt: parsed.createdAt\n          };\n          this.cacheKey(key);\n          return key;\n        } catch {\n          // ignore corrupted local key\n        }\n      }\n    }\n\n    return null;\n  }\n\n  /**\n   * Generates a new AES session key, wraps it for all members, and uploads to the server.\n   */\n  async createAndDistributeSessionKey(params: {\n    type: 'dm' | 'channel' | 'group';\n    conversationId: string;\n    generation: number;\n    members: MemberPublicKey[];\n  }): Promise<ConversationSessionKey> {\n    const rawAesKey = await this.cryptoService.generateAesKey();\n    const sessionKeyId = this.generateUuid();\n\n    const memberPayloads: Record<string, string> = {};\n    for (const member of params.members) {\n      if (member.publicKey) {\n        memberPayloads[member.userId] =\n          await this.cryptoService.wrapSessionKey(\n            rawAesKey,\n            member.publicKey\n          );\n      }\n    }\n\n    const sessionKey: ConversationSessionKey = {\n      id: sessionKeyId,\n      type: params.type,\n      conversationId: params.conversationId,\n      rawKey: rawAesKey,\n      generation: params.generation,\n      createdAt: Date.now()\n    };\n\n    // Store in memory\n    this.cacheKey(sessionKey);\n    await this.persistKeyLocally(sessionKey);\n\n    // Upload to server if online\n    if (this.httpFetch && this.getApiUrl && this.getAuthToken) {\n      const token = await this.getAuthToken();\n      const apiUrl = this.getApiUrl();\n      const payload: SessionKeyExchangePayload = {\n        sessionKeyId,\n        conversationType: params.type,\n        conversationId: params.conversationId,\n        generation: params.generation,\n        memberPayloads\n      };\n\n      try {\n        await this.httpFetch(`${apiUrl}/api/e2e/session-keys`, {\n          method: 'POST',\n          headers: {\n            Authorization: `Bearer ${token}`,\n            'Content-Type': 'application/json'\n          },\n          body: JSON.stringify(payload)\n        });\n      } catch (err) {\n        console.warn(\n          '[SessionKeyManager] Failed to sync session key to server:',\n          err\n        );\n      }\n    }\n\n    return sessionKey;\n  }\n\n  /**\n   * Helper to check if a key has exceeded the 30-day rotation threshold.\n   */\n  isKeyExpired(key: ConversationSessionKey): boolean {\n    return Date.now() - key.createdAt > THIRTY_DAYS_MS;\n  }\n\n  /**\n   * Builds a deterministic conversation identifier for 1:1 DMs (lexicographical sort).\n   */\n  buildDmConversationId(userIdA: string, userIdB: string): string {\n    return [userIdA, userIdB].sort().join('_');\n  }\n\n  /**\n   * Caches a session key in memory.\n   */\n  private cacheKey(key: ConversationSessionKey): void {\n    this.activeKeysByConversation.set(key.conversationId, key);\n    this.keysById.set(key.id, key);\n  }\n\n  /**\n   * Persists an unwrapped session key to local storage for fast startup.\n   */\n  private async persistKeyLocally(\n    key: ConversationSessionKey\n  ): Promise<void> {\n    if (!this.storage) return;\n    try {\n      const rawKeyBase64 = await this.cryptoService.exportRawKeyBase64(\n        key.rawKey\n      );\n      const data = JSON.stringify({\n        id: key.id,\n        type: key.type,\n        conversationId: key.conversationId,\n        rawKeyBase64,\n        generation: key.generation,\n        createdAt: key.createdAt\n      });\n      await this.storage.setItem(`kojinx_sk_${key.id}`, data);\n    } catch {\n      // ignore persistence error\n    }\n  }\n\n  /**\n   * Fetches latest session key from server and unwraps it locally.\n   */\n  private async fetchSessionKeyFromServer(\n    conversationId: string,\n    type: 'dm' | 'channel' | 'group'\n  ): Promise<ConversationSessionKey | null> {\n    if (!this.httpFetch || !this.getApiUrl || !this.getAuthToken) return null;\n\n    try {\n      const token = await this.getAuthToken();\n      const apiUrl = this.getApiUrl();\n      const res = await this.httpFetch<{\n        sessionKeyId: string;\n        generation: number;\n        encryptedKey: string;\n        createdAt?: string;\n      }>(`${apiUrl}/api/e2e/session-keys/${conversationId}`, {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${token}`\n        }\n      });\n\n      if (res.status === 200 && res.data?.encryptedKey) {\n        const rawKey = await this.cryptoService.unwrapSessionKey(\n          res.data.encryptedKey\n        );\n        return {\n          id: res.data.sessionKeyId,\n          type,\n          conversationId,\n          rawKey,\n          generation: res.data.generation || 1,\n          createdAt: res.data.createdAt\n            ? new Date(res.data.createdAt).getTime()\n            : Date.now()\n        };\n      }\n    } catch {\n      // Not found or network error\n    }\n\n    return null;\n  }\n\n  /**\n   * Generates a random UUID (W3C standard or fallback).\n   */\n  private generateUuid(): string {\n    if (typeof crypto !== 'undefined' && crypto.randomUUID) {\n      return crypto.randomUUID();\n    }\n    return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, c => {\n      const r = (Math.random() * 16) | 0;\n      const v = c === 'x' ? r : (r & 0x3) | 0x8;\n      return v.toString(16);\n    });\n  }\n}\n","/*\n * Public API Surface of @kojinx/collab-crypto\n */\n\nexport * from './lib/tokens';\nexport * from './lib/models/crypto.models';\nexport * from './lib/utils/safety-number.utils';\nexport * from './lib/services/e2e-chat-crypto.service';\nexport * from './lib/services/session-key-manager.service';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;AAOA;;;;AAIG;MACU,sBAAsB,GAAG,IAAI,cAAc,CACtD,wBAAwB;AAG1B;;AAEG;MACU,iBAAiB,GAAG,IAAI,cAAc,CACjD,mBAAmB;AAGrB;;AAEG;MACU,qBAAqB,GAAG,IAAI,cAAc,CACrD,uBAAuB,EACvB;AACE,IAAA,OAAO,EAAE,OAAO;AACd,QAAA,OAAO,EAAE,CAAC,GAAW,KAAK,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACpE,QAAA,OAAO,EAAE,CAAC,GAAW,EAAE,KAAa,KAAI;AACtC,YAAA,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;AAChC,YAAA,OAAO,OAAO,CAAC,OAAO,EAAE;QAC1B,CAAC;AACD,QAAA,UAAU,EAAE,CAAC,GAAW,KAAI;AAC1B,YAAA,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;AAC5B,YAAA,OAAO,OAAO,CAAC,OAAO,EAAE;QAC1B;KACD;AACF,CAAA;AAGH;;AAEG;MACU,mBAAmB,GAAG,IAAI,cAAc,CACnD,qBAAqB;AAGvB;;AAEG;MACU,iBAAiB,GAAG,IAAI,cAAc,CACjD,mBAAmB;;ACpDrB;;;AAGG;MACU,iBAAiB,CAAA;AAC5B;;;;;AAKG;AACH,IAAA,aAAa,QAAQ,CACnB,cAAsB,EACtB,eAAuB,EAAA;AAEvB,QAAA,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,EAAE;AACvC,YAAA,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC;QAC9E;QAEA,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;QACjE,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;;QAGnE,MAAM,MAAM,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,IAAI,EAAE;AAC3D,QAAA,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;QAGzD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAE3C,OAAO;AACL,YAAA,GAAG,EAAE,cAAc;YACnB,SAAS;YACT,gBAAgB,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;YACnD,iBAAiB,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE;SACrD;IACH;AAEA;;AAEG;AACH,IAAA,aAAa,aAAa,CAAC,eAAuB,EAAA;QAChD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACpD,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B;AAEA;;AAEG;AACK,IAAA,aAAa,MAAM,CAAC,KAAa,EAAA;AACvC,QAAA,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;AAClC,QAAA,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;AAC9D,QAAA,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;QACxD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACrE;AAEA;;AAEG;IACK,OAAO,aAAa,CAAC,GAAW,EAAA;QACtC,IAAI,MAAM,GAAG,EAAE;;AAEf,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC1B,YAAA,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM;AACxC,YAAA,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;QAC3C;AACA,QAAA,OAAO,MAAM;IACf;AAEA;;AAEG;IACK,OAAO,YAAY,CAAC,MAAc,EAAA;QACxC,MAAM,MAAM,GAAa,EAAE;AAC3B,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;AACzC,YAAA,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC;AACA,QAAA,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IACzB;AACD;;AC3ED;;;AAGG;MAIU,oBAAoB,CAAA;AAHjC,IAAA,WAAA,GAAA;AAIU,QAAA,IAAA,CAAA,cAAc,GAAG,MAAM,CAAuB,sBAAsB,EAAE;AAC5E,YAAA,QAAQ,EAAE;AACX,SAAA,CAAC;AAuLH,IAAA;AArLC;;AAEG;AACH,IAAA,MAAM,cAAc,GAAA;AAClB,QAAA,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAC9B;AACE,YAAA,IAAI,EAAE,SAAS;AACf,YAAA,MAAM,EAAE;SACT,EACD,IAAI;AACJ,QAAA,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB;IACH;AAEA;;;;;AAKG;AACH,IAAA,MAAM,cAAc,CAClB,UAAkC,EAClC,SAAiB,EAAA;QAEjB,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;AACrC,YAAA,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC;QACjE;;AAGA,QAAA,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AACxD,QAAA,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;QACjC,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QAElD,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAClD;AACE,YAAA,IAAI,EAAE,SAAS;AACf,YAAA,EAAE,EAAE;AACL,SAAA,EACD,UAAU,CAAC,MAAM,EACjB,gBAAgB,CACjB;QAED,OAAO;AACL,YAAA,UAAU,EAAE,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YACtD,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC;YAC7C,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,UAAU,EAAE,UAAU,CAAC;SACxB;IACH;AAEA;;;;;AAKG;AACH,IAAA,MAAM,cAAc,CAClB,UAAkC,EAClC,OAAgC,EAAA;QAEhC,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;AACrC,YAAA,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC;QACjE;QAEA,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC;QAErD,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACjD;AACE,YAAA,IAAI,EAAE,SAAS;AACf,YAAA,EAAE,EAAE,IAAI,UAAU,CAAC,KAAK;AACzB,SAAA,EACD,UAAU,CAAC,MAAM,EACjB,UAAU,CACX;AAED,QAAA,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;AACjC,QAAA,OAAO,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;IACxC;AAEA;;;;;AAKG;AACH,IAAA,MAAM,cAAc,CAClB,MAAiB,EACjB,kBAA0B,EAAA;AAE1B,QAAA,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;AACxB,YAAA,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE;QACH;AAEA,QAAA,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC;;QAG1D,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,kBAAkB,EAAE,YAAY,CAAC;IACtE;AAEA;;;;AAIG;IACH,MAAM,gBAAgB,CAAC,qBAA6B,EAAA;AAClD,QAAA,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;AACxB,YAAA,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE;QACH;;QAGA,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CACpD,qBAAqB,CACtB;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC;QAE3D,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,YAAY,EACZ;AACE,YAAA,IAAI,EAAE,SAAS;AACf,YAAA,MAAM,EAAE;SACT,EACD,IAAI,EACJ,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB;IACH;AAEA;;AAEG;IACH,MAAM,kBAAkB,CAAC,GAAc,EAAA;AACrC,QAAA,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;AACrD,QAAA,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;IACtC;AAEA;;AAEG;IACH,MAAM,kBAAkB,CAAC,MAAc,EAAA;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,MAAM,EACN;AACE,YAAA,IAAI,EAAE,SAAS;AACf,YAAA,MAAM,EAAE;SACT,EACD,IAAI,EACJ,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB;IACH;AAEA;;AAEG;AACH,IAAA,mBAAmB,CAAC,MAAgC,EAAA;AAClD,QAAA,MAAM,KAAK,GAAG,MAAM,YAAY,UAAU,GAAG,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC;QAC5E,IAAI,MAAM,GAAG,EAAE;AACf,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE;YACzC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzC;AACA,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB;AAEA;;AAEG;AACH,IAAA,mBAAmB,CAAC,MAAc,EAAA;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAC3C,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACtC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACjC;QACA,OAAO,KAAK,CAAC,MAAM;IACrB;+GAzLW,oBAAoB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAApB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,oBAAoB,cAFnB,MAAM,EAAA,CAAA,CAAA;;4FAEP,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBAHhC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE;AACb,iBAAA;;;ACED;AACA,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;AAE/C;;AAEG;MAIU,wBAAwB,CAAA;AAHrC,IAAA,WAAA,GAAA;AAIU,QAAA,IAAA,CAAA,aAAa,GAAG,MAAM,CAAC,oBAAoB,CAAC;AAC5C,QAAA,IAAA,CAAA,SAAS,GAAG,MAAM,CAAsB,iBAAiB,EAAE;AACjE,YAAA,QAAQ,EAAE;AACX,SAAA,CAAC;AACM,QAAA,IAAA,CAAA,SAAS,GAAG,MAAM,CAAe,mBAAmB,EAAE;AAC5D,YAAA,QAAQ,EAAE;AACX,SAAA,CAAC;QACM,IAAA,CAAA,YAAY,GAAG,MAAM,CAC3B,iBAAiB,EACjB,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB;AACO,QAAA,IAAA,CAAA,OAAO,GAAG,MAAM,CAAwB,qBAAqB,EAAE;AACrE,YAAA,QAAQ,EAAE;AACX,SAAA,CAAC;;AAGM,QAAA,IAAA,CAAA,wBAAwB,GAAG,IAAI,GAAG,EAAkC;;AAEpE,QAAA,IAAA,CAAA,QAAQ,GAAG,IAAI,GAAG,EAAkC;AA0S7D,IAAA;AAxSC;;;;;;;AAOG;IACH,MAAM,uBAAuB,CAC3B,WAAmB,EACnB,YAAoB,EACpB,eAAuB,EACvB,cAAsB,EAAA;QAEtB,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAC/C,WAAW,EACX,YAAY,CACb;;QAGD,MAAM,MAAM,GAAG,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,cAAc,CAAC;QAChE,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;AACxC,YAAA,OAAO,MAAM;QACf;;AAGA,QAAA,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE;YACzD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACpD,cAAc,EACd,IAAI,CACL;YACD,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;AACxB,gBAAA,OAAO,SAAS;YAClB;QACF;;QAGA,OAAO,IAAI,CAAC,6BAA6B,CAAC;AACxC,YAAA,IAAI,EAAE,IAAI;YACV,cAAc;AACd,YAAA,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC;AAC9C,YAAA,OAAO,EAAE;AACP,gBAAA,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE;AAClD,gBAAA,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe;AACnD;AACF,SAAA,CAAC;IACJ;AAEA;;;;;AAKG;AACH,IAAA,MAAM,4BAA4B,CAChC,SAAiB,EACjB,OAA0B,EAAA;QAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3D,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;AACxC,YAAA,OAAO,MAAM;QACf;AAEA,QAAA,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE;YACzD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACpD,SAAS,EACT,SAAS,CACV;YACD,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;AACxB,gBAAA,OAAO,SAAS;YAClB;QACF;QAEA,OAAO,IAAI,CAAC,6BAA6B,CAAC;AACxC,YAAA,IAAI,EAAE,SAAS;AACf,YAAA,cAAc,EAAE,SAAS;AACzB,YAAA,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC;YAC9C;AACD,SAAA,CAAC;IACJ;AAEA;;AAEG;IACH,MAAM,iBAAiB,CACrB,YAAoB,EAAA;QAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;AAC9C,QAAA,IAAI,MAAM;AAAE,YAAA,OAAO,MAAM;;AAGzB,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE;AAChB,YAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CACvC,CAAA,UAAA,EAAa,YAAY,CAAA,CAAE,CAC5B;YACD,IAAI,MAAM,EAAE;AACV,gBAAA,IAAI;oBACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;AACjC,oBAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CACxD,MAAM,CAAC,YAAY,CACpB;AACD,oBAAA,MAAM,GAAG,GAA2B;wBAClC,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,MAAM;wBACN,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,SAAS,EAAE,MAAM,CAAC;qBACnB;AACD,oBAAA,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;AAClB,oBAAA,OAAO,GAAG;gBACZ;AAAE,gBAAA,MAAM;;gBAER;YACF;QACF;AAEA,QAAA,OAAO,IAAI;IACb;AAEA;;AAEG;IACH,MAAM,6BAA6B,CAAC,MAKnC,EAAA;QACC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE;AAC3D,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE;QAExC,MAAM,cAAc,GAA2B,EAAE;AACjD,QAAA,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE;AACnC,YAAA,IAAI,MAAM,CAAC,SAAS,EAAE;AACpB,gBAAA,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;AAC3B,oBAAA,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CACrC,SAAS,EACT,MAAM,CAAC,SAAS,CACjB;YACL;QACF;AAEA,QAAA,MAAM,UAAU,GAA2B;AACzC,YAAA,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,cAAc,EAAE,MAAM,CAAC,cAAc;AACrC,YAAA,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;AAC7B,YAAA,SAAS,EAAE,IAAI,CAAC,GAAG;SACpB;;AAGD,QAAA,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;AACzB,QAAA,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;;AAGxC,QAAA,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE;AACzD,YAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE;AACvC,YAAA,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE;AAC/B,YAAA,MAAM,OAAO,GAA8B;gBACzC,YAAY;gBACZ,gBAAgB,EAAE,MAAM,CAAC,IAAI;gBAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B;aACD;AAED,YAAA,IAAI;AACF,gBAAA,MAAM,IAAI,CAAC,SAAS,CAAC,CAAA,EAAG,MAAM,uBAAuB,EAAE;AACrD,oBAAA,MAAM,EAAE,MAAM;AACd,oBAAA,OAAO,EAAE;wBACP,aAAa,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE;AAChC,wBAAA,cAAc,EAAE;AACjB,qBAAA;AACD,oBAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO;AAC7B,iBAAA,CAAC;YACJ;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,OAAO,CAAC,IAAI,CACV,2DAA2D,EAC3D,GAAG,CACJ;YACH;QACF;AAEA,QAAA,OAAO,UAAU;IACnB;AAEA;;AAEG;AACH,IAAA,YAAY,CAAC,GAA2B,EAAA;QACtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,cAAc;IACpD;AAEA;;AAEG;IACH,qBAAqB,CAAC,OAAe,EAAE,OAAe,EAAA;AACpD,QAAA,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;IAC5C;AAEA;;AAEG;AACK,IAAA,QAAQ,CAAC,GAA2B,EAAA;QAC1C,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC;IAChC;AAEA;;AAEG;IACK,MAAM,iBAAiB,CAC7B,GAA2B,EAAA;QAE3B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE;AACnB,QAAA,IAAI;AACF,YAAA,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAC9D,GAAG,CAAC,MAAM,CACX;AACD,YAAA,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,YAAY;gBACZ,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,GAAG,CAAC;AAChB,aAAA,CAAC;AACF,YAAA,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA,UAAA,EAAa,GAAG,CAAC,EAAE,CAAA,CAAE,EAAE,IAAI,CAAC;QACzD;AAAE,QAAA,MAAM;;QAER;IACF;AAEA;;AAEG;AACK,IAAA,MAAM,yBAAyB,CACrC,cAAsB,EACtB,IAAgC,EAAA;AAEhC,QAAA,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY;AAAE,YAAA,OAAO,IAAI;AAEzE,QAAA,IAAI;AACF,YAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE;AACvC,YAAA,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE;AAC/B,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAK7B,CAAA,EAAG,MAAM,CAAA,sBAAA,EAAyB,cAAc,CAAA,CAAE,EAAE;AACrD,gBAAA,MAAM,EAAE,KAAK;AACb,gBAAA,OAAO,EAAE;oBACP,aAAa,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA;AAC/B;AACF,aAAA,CAAC;AAEF,YAAA,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE;AAChD,gBAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CACtD,GAAG,CAAC,IAAI,CAAC,YAAY,CACtB;gBACD,OAAO;AACL,oBAAA,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY;oBACzB,IAAI;oBACJ,cAAc;oBACd,MAAM;AACN,oBAAA,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC;AACpC,oBAAA,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC;AAClB,0BAAE,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO;AACtC,0BAAE,IAAI,CAAC,GAAG;iBACb;YACH;QACF;AAAE,QAAA,MAAM;;QAER;AAEA,QAAA,OAAO,IAAI;IACb;AAEA;;AAEG;IACK,YAAY,GAAA;QAClB,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,UAAU,EAAE;AACtD,YAAA,OAAO,MAAM,CAAC,UAAU,EAAE;QAC5B;QACA,OAAO,sCAAsC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAG;AACjE,YAAA,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;AAClC,YAAA,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG;AACzC,YAAA,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvB,QAAA,CAAC,CAAC;IACJ;+GA5TW,wBAAwB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAxB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,cAFvB,MAAM,EAAA,CAAA,CAAA;;4FAEP,wBAAwB,EAAA,UAAA,EAAA,CAAA;kBAHpC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE;AACb,iBAAA;;;ACxBD;;AAEG;;ACFH;;AAEG;;"}

package/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Generated bundle index. Do not edit.
+ */
+/// <amd-module name="@kojinx/collab-crypto" />
+export * from './public-api';