@opendatalabs/vana-sdk 0.1.0-alpha.f2de4f7 → 0.1.0-alpha.f35bb9c

package/dist/platform/node.js

@@ -21,6 +21,17 @@ class NodeCryptoAdapter {
   customWalletService = new WalletKeyEncryptionService({
     eciesProvider: this.customEciesProvider
   });
+  /**
+   * Encrypts data using ECIES with a public key.
+   *
+   * @param data - The plaintext string to encrypt.
+   *   Typically user data or sensitive information.
+   * @param publicKeyHex - The recipient's public key in hex format.
+   *   Obtain from key generation or user profile.
+   * @returns Encrypted data as a hex string containing IV, ephemeral key, ciphertext, and MAC
+   *
+   * @throws {Error} If encryption fails or public key is invalid
+   */
   async encryptWithPublicKey(data, publicKeyHex) {
     try {
       if (features.useCustomECIES) {
@@ -39,7 +50,11 @@ class NodeCryptoAdapter {
         return result.toString("hex");
       } else {
         const eccryptojs = await getEccryptoJS();
-        const publicKey = Buffer.from(publicKeyHex, "hex");
+        const publicKeyBytes = Buffer.from(publicKeyHex, "hex");
+        const uncompressed = this.customEciesProvider.normalizeToUncompressed(
+          new Uint8Array(publicKeyBytes)
+        );
+        const publicKey = Buffer.from(uncompressed);
         const message = Buffer.from(data, "utf8");
         const encrypted = await eccryptojs.encrypt(publicKey, message);
         const result = Buffer.concat([
@@ -59,6 +74,18 @@ class NodeCryptoAdapter {
       );
     }
   }
+  /**
+   * Decrypts ECIES-encrypted data using a private key.
+   *
+   * @param encryptedData - Hex string containing encrypted data.
+   *   Must include IV, ephemeral public key, ciphertext, and MAC.
+   * @param privateKeyHex - The private key in hex format.
+   *   Must correspond to the public key used for encryption.
+   * @returns The decrypted plaintext string
+   *
+   * @throws {Error} If decryption fails or MAC verification fails
+   * @throws {ECIESError} If using custom ECIES and specific error occurs
+   */
   async decryptWithPrivateKey(encryptedData, privateKeyHex) {
     try {
       if (features.useCustomECIES) {
@@ -98,6 +125,15 @@ class NodeCryptoAdapter {
       );
     }
   }
+  /**
+   * Generates a new secp256k1 key pair for ECIES operations.
+   *
+   * @returns Object containing hex-encoded public and private keys
+   * @returns returns.publicKey - Compressed public key in hex format
+   * @returns returns.privateKey - Private key in hex format
+   *
+   * @throws {Error} If key generation fails
+   */
   async generateKeyPair() {
     try {
       if (features.useCustomECIES) {
@@ -126,6 +162,17 @@ class NodeCryptoAdapter {
       throw wrapCryptoError("key generation", error);
     }
   }
+  /**
+   * Encrypts data using a wallet's public key.
+   *
+   * @param data - The plaintext string to encrypt.
+   *   Typically permission data or DLP metadata.
+   * @param publicKey - The wallet's public key (with or without 0x prefix).
+   *   Obtain from wallet connection or user profile.
+   * @returns Encrypted data as a hex string
+   *
+   * @throws {Error} If encryption fails or key processing fails
+   */
   async encryptWithWalletPublicKey(data, publicKey) {
     try {
       if (features.useCustomECIES) {
@@ -135,7 +182,9 @@ class NodeCryptoAdapter {
         );
       } else {
         const eccryptojs = await getEccryptoJS();
-        const publicKeyBuffer = Buffer.from(processWalletPublicKey(publicKey));
+        const publicKeyBytes = processWalletPublicKey(publicKey);
+        const uncompressed = this.customEciesProvider.normalizeToUncompressed(publicKeyBytes);
+        const publicKeyBuffer = Buffer.from(uncompressed);
         const message = Buffer.from(data, "utf8");
         const encrypted = await eccryptojs.encrypt(publicKeyBuffer, message);
         const result = Buffer.concat([
@@ -150,6 +199,17 @@ class NodeCryptoAdapter {
       throw wrapCryptoError("encrypt with wallet public key", error);
     }
   }
+  /**
+   * Decrypts data using a wallet's private key.
+   *
+   * @param encryptedData - Hex string containing encrypted data.
+   *   Must be encrypted with corresponding wallet public key.
+   * @param privateKey - The wallet's private key.
+   *   Obtain from wallet connection (handle with care).
+   * @returns The decrypted plaintext string
+   *
+   * @throws {Error} If decryption fails or key is invalid
+   */
   async decryptWithWalletPrivateKey(encryptedData, privateKey) {
     try {
       if (features.useCustomECIES) {
@@ -176,6 +236,21 @@ class NodeCryptoAdapter {
       throw wrapCryptoError("decrypt with wallet private key", error);
     }
   }
+  /**
+   * Encrypts binary data using password-based encryption.
+   *
+   * @param data - Binary data to encrypt.
+   *   Typically file contents or serialized objects.
+   * @param password - Password for encryption.
+   *   Often derived from wallet signatures.
+   * @returns Encrypted data as Uint8Array
+   *
+   * @remarks
+   * Uses OpenPGP for password-based encryption. Note that this is not
+   * deterministic due to OpenPGP's random salt generation.
+   *
+   * @throws {Error} If encryption fails
+   */
   async encryptWithPassword(data, password) {
     try {
       const openpgp = await getOpenPGP();
@@ -200,6 +275,17 @@ class NodeCryptoAdapter {
       throw wrapCryptoError("encrypt with password", error);
     }
   }
+  /**
+   * Decrypts password-encrypted binary data.
+   *
+   * @param encryptedData - Password-encrypted data as Uint8Array.
+   *   Must be encrypted with the same password.
+   * @param password - Password for decryption.
+   *   Must match the encryption password.
+   * @returns Decrypted data as Uint8Array
+   *
+   * @throws {Error} If decryption fails or password is incorrect
+   */
   async decryptWithPassword(encryptedData, password) {
     try {
       const openpgp = await getOpenPGP();
@@ -218,6 +304,17 @@ class NodeCryptoAdapter {
   }
 }
 class NodePGPAdapter {
+  /**
+   * Encrypts data using PGP public key encryption.
+   *
+   * @param data - The plaintext string to encrypt.
+   *   Typically messages or structured data.
+   * @param publicKeyArmored - ASCII-armored PGP public key.
+   *   Obtain from PGP key generation or key servers.
+   * @returns ASCII-armored encrypted message
+   *
+   * @throws {Error} If encryption fails or public key is invalid
+   */
   async encrypt(data, publicKeyArmored) {
     try {
       const openpgp = await getOpenPGP();
@@ -234,6 +331,17 @@ class NodePGPAdapter {
       throw wrapCryptoError("PGP encryption", error);
     }
   }
+  /**
+   * Decrypts PGP-encrypted data using a private key.
+   *
+   * @param encryptedData - ASCII-armored encrypted message.
+   *   Must be encrypted with corresponding public key.
+   * @param privateKeyArmored - ASCII-armored PGP private key.
+   *   Must correspond to the public key used for encryption.
+   * @returns The decrypted plaintext string
+   *
+   * @throws {Error} If decryption fails or private key is invalid
+   */
   async decrypt(encryptedData, privateKeyArmored) {
     try {
       const openpgp = await getOpenPGP();
@@ -252,6 +360,20 @@ class NodePGPAdapter {
       throw wrapCryptoError("PGP decryption", error);
     }
   }
+  /**
+   * Generates a new PGP key pair.
+   *
+   * @param options - Key generation options
+   * @param options.name - Name for the key identity.
+   *   Defaults to 'Vana User'.
+   * @param options.email - Email for the key identity.
+   *   Defaults to 'user@vana.com'.
+   * @param options.passphrase - Passphrase to protect the private key.
+   *   If not provided, key is unprotected.
+   * @returns ASCII-armored public and private keys
+   *
+   * @throws {Error} If key generation fails
+   */
   async generateKeyPair(options) {
     try {
       const openpgp = await getOpenPGP();
@@ -264,6 +386,17 @@ class NodePGPAdapter {
   }
 }
 class NodeHttpAdapter {
+  /**
+   * Performs an HTTP request using fetch.
+   *
+   * @param url - The URL to fetch.
+   *   Must be a valid HTTP/HTTPS URL.
+   * @param options - Standard fetch options.
+   *   See MDN fetch documentation for details.
+   * @returns Standard fetch Response object
+   *
+   * @throws {Error} If fetch is not available in the environment
+   */
   async fetch(url, options) {
     if (typeof globalThis.fetch !== "undefined") {
       return globalThis.fetch(url, options);
@@ -275,6 +408,13 @@ class NodeCacheAdapter {
   cache = /* @__PURE__ */ new Map();
   defaultTtl = 2 * 60 * 60 * 1e3;
   // 2 hours in milliseconds
+  /**
+   * Retrieves a cached value by key.
+   *
+   * @param key - The cache key to look up.
+   *   Typically derived from operation parameters.
+   * @returns The cached value or null if not found/expired
+   */
   get(key) {
     const entry = this.cache.get(key);
     if (!entry) {
@@ -286,15 +426,36 @@ class NodeCacheAdapter {
     }
     return entry.value;
   }
+  /**
+   * Stores a value in the cache with TTL.
+   *
+   * @param key - The cache key.
+   *   Should be unique per operation.
+   * @param value - The value to cache.
+   *   Typically serialized data or signatures.
+   */
   set(key, value) {
     this.cache.set(key, {
       value,
       expires: Date.now() + this.defaultTtl
     });
   }
+  /**
+   * Removes a specific key from the cache.
+   *
+   * @param key - The cache key to remove.
+   *   Use when cached data becomes invalid.
+   */
   delete(key) {
     this.cache.delete(key);
   }
+  /**
+   * Clears all cached values.
+   *
+   * @remarks
+   * Use with caution as this removes all cached signatures
+   * and other performance optimizations.
+   */
   clear() {
     this.cache.clear();
   }

package/dist/platform/node.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/platform/node.ts"],"sourcesContent":["/**\n * Node.js implementation of the Vana Platform Adapter\n *\n * WARNING: Dependencies that access globals during init\n * MUST be dynamically imported to support Turbopack.\n * See: https://github.com/vercel/next.js/issues/82632\n */\n\nimport type {\n  VanaPlatformAdapter,\n  VanaCryptoAdapter,\n  VanaPGPAdapter,\n  VanaHttpAdapter,\n  VanaCacheAdapter,\n} from \"./interface\";\nimport { getPGPKeyGenParams } from \"./shared/pgp-utils\";\nimport { wrapCryptoError } from \"./shared/error-utils\";\nimport { streamToUint8Array } from \"./shared/stream-utils\";\nimport { lazyImport } from \"../utils/lazy-import\";\nimport { features } from \"../config/features\";\nimport { WalletKeyEncryptionService } from \"../crypto/services/WalletKeyEncryptionService\";\nimport {\n  processWalletPrivateKey,\n  parseEncryptedDataBuffer,\n  processWalletPublicKey,\n} from \"../utils/crypto-utils\";\n\n// Lazy-loaded dependencies to avoid Turbopack TDZ issues\nconst getOpenPGP = lazyImport(() => import(\"openpgp\"));\nconst getEccryptoJS = lazyImport(() => import(\"eccrypto-js\"));\n\n// Import both ECIES implementations statically\nimport { NodeECIESUint8Provider } from \"../crypto/ecies/node\";\nimport { ECIESError } from \"../crypto/ecies/interface\";\nimport type { ECIESEncrypted } from \"../crypto/ecies\";\nimport { randomBytes } from \"crypto\";\nimport secp256k1Import from \"secp256k1\";\n\n// Type definition for secp256k1 module\ninterface Secp256k1Module {\n  privateKeyVerify(privateKey: Buffer): boolean;\n  publicKeyCreate(privateKey: Buffer, compressed: boolean): Buffer;\n  publicKeyVerify(publicKey: Buffer): boolean;\n  publicKeyConvert(publicKey: Buffer, compressed: boolean): Buffer;\n  ecdh(\n    publicKey: Buffer,\n    privateKey: Buffer,\n    options: {\n      hashfn: (x: Uint8Array, y: Uint8Array, output?: Uint8Array) => Uint8Array;\n    },\n    output: Buffer,\n  ): Buffer;\n}\n\n/**\n * Node.js implementation of crypto operations\n * Supports both eccrypto (default) and custom ECIES implementation\n */\nclass NodeCryptoAdapter implements VanaCryptoAdapter {\n  // Initialize both providers - only one will be used based on feature flag\n  private customEciesProvider = new NodeECIESUint8Provider();\n  private customWalletService = new WalletKeyEncryptionService({\n    eciesProvider: this.customEciesProvider,\n  });\n\n  async encryptWithPublicKey(\n    data: string,\n    publicKeyHex: string,\n  ): Promise<string> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom ECIES implementation\n        const publicKey = Buffer.from(publicKeyHex, \"hex\");\n        const message = Buffer.from(data, \"utf8\");\n\n        const encrypted = await this.customEciesProvider.encrypt(\n          publicKey,\n          message,\n        );\n\n        // Concatenate all components and return as hex string for API consistency\n        const result = Buffer.concat([\n          encrypted.iv,\n          encrypted.ephemPublicKey,\n          encrypted.ciphertext,\n          encrypted.mac,\n        ]);\n\n        return result.toString(\"hex\");\n      } else {\n        // Use eccrypto-js (default)\n        const eccryptojs = await getEccryptoJS();\n        const publicKey = Buffer.from(publicKeyHex, \"hex\");\n        const message = Buffer.from(data, \"utf8\");\n\n        const encrypted = await eccryptojs.encrypt(publicKey, message);\n\n        // Concatenate all components and return as hex string for API consistency\n        const result = Buffer.concat([\n          encrypted.iv,\n          encrypted.ephemPublicKey,\n          encrypted.ciphertext,\n          encrypted.mac,\n        ]);\n\n        return result.toString(\"hex\");\n      }\n    } catch (error) {\n      if (features.useCustomECIES && error instanceof ECIESError) {\n        throw error;\n      }\n      throw new Error(\n        `Encryption failed: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n\n  async decryptWithPrivateKey(\n    encryptedData: string,\n    privateKeyHex: string,\n  ): Promise<string> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom ECIES implementation\n        const privateKeyBuffer = processWalletPrivateKey(privateKeyHex);\n        const encryptedBuffer = Buffer.from(encryptedData, \"hex\");\n        const { iv, ephemPublicKey, ciphertext, mac } =\n          parseEncryptedDataBuffer(encryptedBuffer);\n\n        // Reconstruct the encrypted data structure\n        const encryptedObj: ECIESEncrypted = {\n          iv,\n          ephemPublicKey,\n          ciphertext,\n          mac,\n        };\n\n        const decrypted = await this.customEciesProvider.decrypt(\n          privateKeyBuffer,\n          encryptedObj,\n        );\n        return new TextDecoder().decode(decrypted);\n      } else {\n        // Use eccrypto-js (default)\n        const eccryptojs = await getEccryptoJS();\n        const privateKey = Buffer.from(privateKeyHex, \"hex\");\n        const encryptedBuffer = Buffer.from(encryptedData, \"hex\");\n\n        // Parse the encrypted data\n        const { iv, ephemPublicKey, ciphertext, mac } =\n          parseEncryptedDataBuffer(encryptedBuffer);\n\n        const decrypted = await eccryptojs.decrypt(privateKey, {\n          iv: Buffer.from(iv),\n          ephemPublicKey: Buffer.from(ephemPublicKey),\n          ciphertext: Buffer.from(ciphertext),\n          mac: Buffer.from(mac),\n        });\n\n        return decrypted.toString(\"utf8\");\n      }\n    } catch (error) {\n      if (features.useCustomECIES && error instanceof ECIESError) {\n        throw error;\n      }\n      throw new Error(\n        `Decryption failed: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n\n  async generateKeyPair(): Promise<{ publicKey: string; privateKey: string }> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom implementation with secp256k1\n        const secp256k1 = secp256k1Import as unknown as Secp256k1Module;\n\n        // Generate private key\n        let privateKey: Buffer;\n        do {\n          privateKey = randomBytes(32);\n        } while (!secp256k1.privateKeyVerify(privateKey));\n\n        // Get compressed public key\n        const publicKey = Buffer.from(\n          secp256k1.publicKeyCreate(privateKey, true),\n        );\n\n        return {\n          privateKey: privateKey.toString(\"hex\"),\n          publicKey: publicKey.toString(\"hex\"),\n        };\n      } else {\n        // Use eccrypto-js (default)\n        const eccryptojs = await getEccryptoJS();\n        const privateKey = eccryptojs.generatePrivate();\n        const publicKey = eccryptojs.getPublic(privateKey);\n\n        return {\n          privateKey: privateKey.toString(\"hex\"),\n          publicKey: publicKey.toString(\"hex\"),\n        };\n      }\n    } catch (error) {\n      throw wrapCryptoError(\"key generation\", error);\n    }\n  }\n\n  async encryptWithWalletPublicKey(\n    data: string,\n    publicKey: string,\n  ): Promise<string> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom ECIES implementation via WalletKeyEncryptionService\n        return await this.customWalletService.encryptWithWalletPublicKey(\n          data,\n          publicKey,\n        );\n      } else {\n        // Use eccrypto-js directly for wallet encryption\n        const eccryptojs = await getEccryptoJS();\n        const publicKeyBuffer = Buffer.from(processWalletPublicKey(publicKey));\n        const message = Buffer.from(data, \"utf8\");\n\n        const encrypted = await eccryptojs.encrypt(publicKeyBuffer, message);\n\n        // Concatenate all components and return as hex string\n        const result = Buffer.concat([\n          encrypted.iv,\n          encrypted.ephemPublicKey,\n          encrypted.ciphertext,\n          encrypted.mac,\n        ]);\n\n        return result.toString(\"hex\");\n      }\n    } catch (error) {\n      throw wrapCryptoError(\"encrypt with wallet public key\", error);\n    }\n  }\n\n  async decryptWithWalletPrivateKey(\n    encryptedData: string,\n    privateKey: string,\n  ): Promise<string> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom ECIES implementation via WalletKeyEncryptionService\n        return await this.customWalletService.decryptWithWalletPrivateKey(\n          encryptedData,\n          privateKey,\n        );\n      } else {\n        // Use eccrypto-js directly for wallet decryption\n        const eccryptojs = await getEccryptoJS();\n        const privateKeyBuffer = Buffer.from(\n          processWalletPrivateKey(privateKey),\n        );\n        const encryptedBuffer = Buffer.from(encryptedData, \"hex\");\n\n        // Parse the encrypted data\n        const { iv, ephemPublicKey, ciphertext, mac } =\n          parseEncryptedDataBuffer(encryptedBuffer);\n\n        const decrypted = await eccryptojs.decrypt(privateKeyBuffer, {\n          iv: Buffer.from(iv),\n          ephemPublicKey: Buffer.from(ephemPublicKey),\n          ciphertext: Buffer.from(ciphertext),\n          mac: Buffer.from(mac),\n        });\n\n        return decrypted.toString(\"utf8\");\n      }\n    } catch (error) {\n      throw wrapCryptoError(\"decrypt with wallet private key\", error);\n    }\n  }\n\n  async encryptWithPassword(\n    data: Uint8Array,\n    password: string,\n  ): Promise<Uint8Array> {\n    try {\n      const openpgp = await getOpenPGP();\n      const message = await openpgp.createMessage({\n        binary: data,\n      });\n\n      // Use password-based encryption with wallet signature as password\n      // Note: For deterministic encryption, we would need to control the salt\n      // This implementation is secure but not deterministic due to OpenPGP's design\n      const encrypted = await openpgp.encrypt({\n        message,\n        passwords: [password],\n        format: \"binary\",\n      });\n\n      // In Node.js, the encrypted result is already a Uint8Array\n      if (encrypted instanceof Uint8Array) {\n        return encrypted;\n      }\n\n      // If it's a stream (should not happen with format: \"binary\"), read it\n      if (\n        encrypted &&\n        typeof encrypted === \"object\" &&\n        \"getReader\" in encrypted\n      ) {\n        return await streamToUint8Array(\n          encrypted as ReadableStream<Uint8Array>,\n        );\n      }\n\n      throw new Error(\"Unexpected encrypted data format\");\n    } catch (error) {\n      throw wrapCryptoError(\"encrypt with password\", error);\n    }\n  }\n\n  async decryptWithPassword(\n    encryptedData: Uint8Array,\n    password: string,\n  ): Promise<Uint8Array> {\n    try {\n      const openpgp = await getOpenPGP();\n      const message = await openpgp.readMessage({\n        binaryMessage: encryptedData,\n      });\n\n      // Use password-based decryption with wallet signature as password\n      const { data: decrypted } = await openpgp.decrypt({\n        message,\n        passwords: [password],\n        format: \"binary\",\n      });\n\n      // Convert decrypted data back to Uint8Array\n      return new Uint8Array(decrypted as ArrayBuffer);\n    } catch (error) {\n      throw wrapCryptoError(\"decrypt with password\", error);\n    }\n  }\n}\n\n/**\n * Node.js implementation of PGP operations using openpgp with Node-specific configuration\n */\nclass NodePGPAdapter implements VanaPGPAdapter {\n  async encrypt(data: string, publicKeyArmored: string): Promise<string> {\n    try {\n      const openpgp = await getOpenPGP();\n      const publicKey = await openpgp.readKey({ armoredKey: publicKeyArmored });\n\n      const encrypted = await openpgp.encrypt({\n        message: await openpgp.createMessage({ text: data }),\n        encryptionKeys: publicKey,\n        config: {\n          preferredCompressionAlgorithm: openpgp.enums.compression.zlib,\n        },\n      });\n\n      return encrypted as string;\n    } catch (error) {\n      throw wrapCryptoError(\"PGP encryption\", error);\n    }\n  }\n\n  async decrypt(\n    encryptedData: string,\n    privateKeyArmored: string,\n  ): Promise<string> {\n    try {\n      const openpgp = await getOpenPGP();\n      const privateKey = await openpgp.readPrivateKey({\n        armoredKey: privateKeyArmored,\n      });\n      const message = await openpgp.readMessage({\n        armoredMessage: encryptedData,\n      });\n\n      const { data: decrypted } = await openpgp.decrypt({\n        message,\n        decryptionKeys: privateKey,\n      });\n\n      return decrypted as string;\n    } catch (error) {\n      throw wrapCryptoError(\"PGP decryption\", error);\n    }\n  }\n\n  async generateKeyPair(options?: {\n    name?: string;\n    email?: string;\n    passphrase?: string;\n  }): Promise<{ publicKey: string; privateKey: string }> {\n    try {\n      const openpgp = await getOpenPGP();\n      // Use shared utility to get standardized parameters\n      const keyGenParams = getPGPKeyGenParams(options);\n\n      const { privateKey, publicKey } = await openpgp.generateKey(keyGenParams);\n\n      return { publicKey, privateKey };\n    } catch (error) {\n      throw wrapCryptoError(\"PGP key generation\", error);\n    }\n  }\n}\n\n/**\n * Node.js implementation of HTTP operations using node-fetch or native fetch\n */\nclass NodeHttpAdapter implements VanaHttpAdapter {\n  async fetch(url: string, options?: RequestInit): Promise<Response> {\n    if (typeof globalThis.fetch !== \"undefined\") {\n      return globalThis.fetch(url, options);\n    }\n\n    throw new Error(\"No fetch implementation available in Node.js environment\");\n  }\n}\n\n/**\n * Node.js implementation of cache operations using in-memory Map with TTL\n */\nclass NodeCacheAdapter implements VanaCacheAdapter {\n  private cache = new Map<string, { value: string; expires: number }>();\n  private readonly defaultTtl = 2 * 60 * 60 * 1000; // 2 hours in milliseconds\n\n  get(key: string): string | null {\n    const entry = this.cache.get(key);\n    if (!entry) {\n      return null;\n    }\n\n    // Check if expired\n    if (Date.now() > entry.expires) {\n      this.cache.delete(key);\n      return null;\n    }\n\n    return entry.value;\n  }\n\n  set(key: string, value: string): void {\n    this.cache.set(key, {\n      value,\n      expires: Date.now() + this.defaultTtl,\n    });\n  }\n\n  delete(key: string): void {\n    this.cache.delete(key);\n  }\n\n  clear(): void {\n    this.cache.clear();\n  }\n}\n\n/**\n * Complete Node.js platform adapter implementation\n */\nexport class NodePlatformAdapter implements VanaPlatformAdapter {\n  crypto: VanaCryptoAdapter;\n  pgp: VanaPGPAdapter;\n  http: VanaHttpAdapter;\n  cache: VanaCacheAdapter;\n  platform: \"node\" = \"node\" as const;\n\n  constructor() {\n    this.crypto = new NodeCryptoAdapter();\n    this.pgp = new NodePGPAdapter();\n    this.http = new NodeHttpAdapter();\n    this.cache = new NodeCacheAdapter();\n  }\n}\n\n/**\n * Default instance export for backwards compatibility\n */\nexport const nodePlatformAdapter: VanaPlatformAdapter =\n  new NodePlatformAdapter();\n"],"mappings":"AAeA,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,MAAM,aAAa,WAAW,MAAM,OAAO,SAAS,CAAC;AACrD,MAAM,gBAAgB,WAAW,MAAM,OAAO,aAAa,CAAC;AAG5D,SAAS,8BAA8B;AACvC,SAAS,kBAAkB;AAE3B,SAAS,mBAAmB;AAC5B,OAAO,qBAAqB;AAsB5B,MAAM,kBAA+C;AAAA;AAAA,EAE3C,sBAAsB,IAAI,uBAAuB;AAAA,EACjD,sBAAsB,IAAI,2BAA2B;AAAA,IAC3D,eAAe,KAAK;AAAA,EACtB,CAAC;AAAA,EAED,MAAM,qBACJ,MACA,cACiB;AACjB,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,cAAM,YAAY,OAAO,KAAK,cAAc,KAAK;AACjD,cAAM,UAAU,OAAO,KAAK,MAAM,MAAM;AAExC,cAAM,YAAY,MAAM,KAAK,oBAAoB;AAAA,UAC/C;AAAA,UACA;AAAA,QACF;AAGA,cAAM,SAAS,OAAO,OAAO;AAAA,UAC3B,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,QACZ,CAAC;AAED,eAAO,OAAO,SAAS,KAAK;AAAA,MAC9B,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,YAAY,OAAO,KAAK,cAAc,KAAK;AACjD,cAAM,UAAU,OAAO,KAAK,MAAM,MAAM;AAExC,cAAM,YAAY,MAAM,WAAW,QAAQ,WAAW,OAAO;AAG7D,cAAM,SAAS,OAAO,OAAO;AAAA,UAC3B,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,QACZ,CAAC;AAED,eAAO,OAAO,SAAS,KAAK;AAAA,MAC9B;AAAA,IACF,SAAS,OAAO;AACd,UAAI,SAAS,kBAAkB,iBAAiB,YAAY;AAC1D,cAAM;AAAA,MACR;AACA,YAAM,IAAI;AAAA,QACR,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,sBACJ,eACA,eACiB;AACjB,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,cAAM,mBAAmB,wBAAwB,aAAa;AAC9D,cAAM,kBAAkB,OAAO,KAAK,eAAe,KAAK;AACxD,cAAM,EAAE,IAAI,gBAAgB,YAAY,IAAI,IAC1C,yBAAyB,eAAe;AAG1C,cAAM,eAA+B;AAAA,UACnC;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAEA,cAAM,YAAY,MAAM,KAAK,oBAAoB;AAAA,UAC/C;AAAA,UACA;AAAA,QACF;AACA,eAAO,IAAI,YAAY,EAAE,OAAO,SAAS;AAAA,MAC3C,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,aAAa,OAAO,KAAK,eAAe,KAAK;AACnD,cAAM,kBAAkB,OAAO,KAAK,eAAe,KAAK;AAGxD,cAAM,EAAE,IAAI,gBAAgB,YAAY,IAAI,IAC1C,yBAAyB,eAAe;AAE1C,cAAM,YAAY,MAAM,WAAW,QAAQ,YAAY;AAAA,UACrD,IAAI,OAAO,KAAK,EAAE;AAAA,UAClB,gBAAgB,OAAO,KAAK,cAAc;AAAA,UAC1C,YAAY,OAAO,KAAK,UAAU;AAAA,UAClC,KAAK,OAAO,KAAK,GAAG;AAAA,QACtB,CAAC;AAED,eAAO,UAAU,SAAS,MAAM;AAAA,MAClC;AAAA,IACF,SAAS,OAAO;AACd,UAAI,SAAS,kBAAkB,iBAAiB,YAAY;AAC1D,cAAM;AAAA,MACR;AACA,YAAM,IAAI;AAAA,QACR,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,kBAAsE;AAC1E,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,cAAM,YAAY;AAGlB,YAAI;AACJ,WAAG;AACD,uBAAa,YAAY,EAAE;AAAA,QAC7B,SAAS,CAAC,UAAU,iBAAiB,UAAU;AAG/C,cAAM,YAAY,OAAO;AAAA,UACvB,UAAU,gBAAgB,YAAY,IAAI;AAAA,QAC5C;AAEA,eAAO;AAAA,UACL,YAAY,WAAW,SAAS,KAAK;AAAA,UACrC,WAAW,UAAU,SAAS,KAAK;AAAA,QACrC;AAAA,MACF,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,aAAa,WAAW,gBAAgB;AAC9C,cAAM,YAAY,WAAW,UAAU,UAAU;AAEjD,eAAO;AAAA,UACL,YAAY,WAAW,SAAS,KAAK;AAAA,UACrC,WAAW,UAAU,SAAS,KAAK;AAAA,QACrC;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,gBAAgB,kBAAkB,KAAK;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,MAAM,2BACJ,MACA,WACiB;AACjB,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,eAAO,MAAM,KAAK,oBAAoB;AAAA,UACpC;AAAA,UACA;AAAA,QACF;AAAA,MACF,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,kBAAkB,OAAO,KAAK,uBAAuB,SAAS,CAAC;AACrE,cAAM,UAAU,OAAO,KAAK,MAAM,MAAM;AAExC,cAAM,YAAY,MAAM,WAAW,QAAQ,iBAAiB,OAAO;AAGnE,cAAM,SAAS,OAAO,OAAO;AAAA,UAC3B,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,QACZ,CAAC;AAED,eAAO,OAAO,SAAS,KAAK;AAAA,MAC9B;AAAA,IACF,SAAS,OAAO;AACd,YAAM,gBAAgB,kCAAkC,KAAK;AAAA,IAC/D;AAAA,EACF;AAAA,EAEA,MAAM,4BACJ,eACA,YACiB;AACjB,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,eAAO,MAAM,KAAK,oBAAoB;AAAA,UACpC;AAAA,UACA;AAAA,QACF;AAAA,MACF,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,mBAAmB,OAAO;AAAA,UAC9B,wBAAwB,UAAU;AAAA,QACpC;AACA,cAAM,kBAAkB,OAAO,KAAK,eAAe,KAAK;AAGxD,cAAM,EAAE,IAAI,gBAAgB,YAAY,IAAI,IAC1C,yBAAyB,eAAe;AAE1C,cAAM,YAAY,MAAM,WAAW,QAAQ,kBAAkB;AAAA,UAC3D,IAAI,OAAO,KAAK,EAAE;AAAA,UAClB,gBAAgB,OAAO,KAAK,cAAc;AAAA,UAC1C,YAAY,OAAO,KAAK,UAAU;AAAA,UAClC,KAAK,OAAO,KAAK,GAAG;AAAA,QACtB,CAAC;AAED,eAAO,UAAU,SAAS,MAAM;AAAA,MAClC;AAAA,IACF,SAAS,OAAO;AACd,YAAM,gBAAgB,mCAAmC,KAAK;AAAA,IAChE;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,MACA,UACqB;AACrB,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AACjC,YAAM,UAAU,MAAM,QAAQ,cAAc;AAAA,QAC1C,QAAQ;AAAA,MACV,CAAC;AAKD,YAAM,YAAY,MAAM,QAAQ,QAAQ;AAAA,QACtC;AAAA,QACA,WAAW,CAAC,QAAQ;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAGD,UAAI,qBAAqB,YAAY;AACnC,eAAO;AAAA,MACT;AAGA,UACE,aACA,OAAO,cAAc,YACrB,eAAe,WACf;AACA,eAAO,MAAM;AAAA,UACX;AAAA,QACF;AAAA,MACF;AAEA,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACpD,SAAS,OAAO;AACd,YAAM,gBAAgB,yBAAyB,KAAK;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,eACA,UACqB;AACrB,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AACjC,YAAM,UAAU,MAAM,QAAQ,YAAY;AAAA,QACxC,eAAe;AAAA,MACjB,CAAC;AAGD,YAAM,EAAE,MAAM,UAAU,IAAI,MAAM,QAAQ,QAAQ;AAAA,QAChD;AAAA,QACA,WAAW,CAAC,QAAQ;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAGD,aAAO,IAAI,WAAW,SAAwB;AAAA,IAChD,SAAS,OAAO;AACd,YAAM,gBAAgB,yBAAyB,KAAK;AAAA,IACtD;AAAA,EACF;AACF;AAKA,MAAM,eAAyC;AAAA,EAC7C,MAAM,QAAQ,MAAc,kBAA2C;AACrE,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AACjC,YAAM,YAAY,MAAM,QAAQ,QAAQ,EAAE,YAAY,iBAAiB,CAAC;AAExE,YAAM,YAAY,MAAM,QAAQ,QAAQ;AAAA,QACtC,SAAS,MAAM,QAAQ,cAAc,EAAE,MAAM,KAAK,CAAC;AAAA,QACnD,gBAAgB;AAAA,QAChB,QAAQ;AAAA,UACN,+BAA+B,QAAQ,MAAM,YAAY;AAAA,QAC3D;AAAA,MACF,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,gBAAgB,kBAAkB,KAAK;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,eACA,mBACiB;AACjB,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AACjC,YAAM,aAAa,MAAM,QAAQ,eAAe;AAAA,QAC9C,YAAY;AAAA,MACd,CAAC;AACD,YAAM,UAAU,MAAM,QAAQ,YAAY;AAAA,QACxC,gBAAgB;AAAA,MAClB,CAAC;AAED,YAAM,EAAE,MAAM,UAAU,IAAI,MAAM,QAAQ,QAAQ;AAAA,QAChD;AAAA,QACA,gBAAgB;AAAA,MAClB,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,gBAAgB,kBAAkB,KAAK;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,SAIiC;AACrD,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AAEjC,YAAM,eAAe,mBAAmB,OAAO;AAE/C,YAAM,EAAE,YAAY,UAAU,IAAI,MAAM,QAAQ,YAAY,YAAY;AAExE,aAAO,EAAE,WAAW,WAAW;AAAA,IACjC,SAAS,OAAO;AACd,YAAM,gBAAgB,sBAAsB,KAAK;AAAA,IACnD;AAAA,EACF;AACF;AAKA,MAAM,gBAA2C;AAAA,EAC/C,MAAM,MAAM,KAAa,SAA0C;AACjE,QAAI,OAAO,WAAW,UAAU,aAAa;AAC3C,aAAO,WAAW,MAAM,KAAK,OAAO;AAAA,IACtC;AAEA,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACF;AAKA,MAAM,iBAA6C;AAAA,EACzC,QAAQ,oBAAI,IAAgD;AAAA,EACnD,aAAa,IAAI,KAAK,KAAK;AAAA;AAAA,EAE5C,IAAI,KAA4B;AAC9B,UAAM,QAAQ,KAAK,MAAM,IAAI,GAAG;AAChC,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAGA,QAAI,KAAK,IAAI,IAAI,MAAM,SAAS;AAC9B,WAAK,MAAM,OAAO,GAAG;AACrB,aAAO;AAAA,IACT;AAEA,WAAO,MAAM;AAAA,EACf;AAAA,EAEA,IAAI,KAAa,OAAqB;AACpC,SAAK,MAAM,IAAI,KAAK;AAAA,MAClB;AAAA,MACA,SAAS,KAAK,IAAI,IAAI,KAAK;AAAA,IAC7B,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,KAAmB;AACxB,SAAK,MAAM,OAAO,GAAG;AAAA,EACvB;AAAA,EAEA,QAAc;AACZ,SAAK,MAAM,MAAM;AAAA,EACnB;AACF;AAKO,MAAM,oBAAmD;AAAA,EAC9D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAmB;AAAA,EAEnB,cAAc;AACZ,SAAK,SAAS,IAAI,kBAAkB;AACpC,SAAK,MAAM,IAAI,eAAe;AAC9B,SAAK,OAAO,IAAI,gBAAgB;AAChC,SAAK,QAAQ,IAAI,iBAAiB;AAAA,EACpC;AACF;AAKO,MAAM,sBACX,IAAI,oBAAoB;","names":[]}
+{"version":3,"sources":["../../src/platform/node.ts"],"sourcesContent":["/**\n * Provides Node.js-specific implementations of platform abstraction interfaces.\n *\n * @remarks\n * This module implements all platform-specific operations for Node.js environments,\n * including cryptography, PGP operations, HTTP requests, and caching. It dynamically\n * imports dependencies to avoid Turbopack TDZ issues and supports both standard\n * eccrypto and custom ECIES implementations based on feature flags.\n *\n * WARNING: Dependencies that access globals during init MUST be dynamically imported\n * to support Turbopack. See: https://github.com/vercel/next.js/issues/82632\n *\n * @example\n * ```typescript\n * // Use the Node.js platform adapter\n * import { nodePlatformAdapter } from '@vana-sdk/platform/node';\n *\n * // Encrypt data with public key\n * const encrypted = await nodePlatformAdapter.crypto.encryptWithPublicKey(\n *   'sensitive data',\n *   '0x04...' // Public key hex\n * );\n *\n * // Generate PGP key pair\n * const { publicKey, privateKey } = await nodePlatformAdapter.pgp.generateKeyPair({\n *   name: 'Data Owner',\n *   email: 'owner@example.com'\n * });\n * ```\n *\n * @category Platform\n * @module platform/node\n */\n\nimport type {\n  VanaPlatformAdapter,\n  VanaCryptoAdapter,\n  VanaPGPAdapter,\n  VanaHttpAdapter,\n  VanaCacheAdapter,\n} from \"./interface\";\nimport { getPGPKeyGenParams } from \"./shared/pgp-utils\";\nimport { wrapCryptoError } from \"./shared/error-utils\";\nimport { streamToUint8Array } from \"./shared/stream-utils\";\nimport { lazyImport } from \"../utils/lazy-import\";\nimport { features } from \"../config/features\";\nimport { WalletKeyEncryptionService } from \"../crypto/services/WalletKeyEncryptionService\";\nimport {\n  processWalletPrivateKey,\n  parseEncryptedDataBuffer,\n  processWalletPublicKey,\n} from \"../utils/crypto-utils\";\n\n// Lazy-loaded dependencies to avoid Turbopack TDZ issues\nconst getOpenPGP = lazyImport(() => import(\"openpgp\"));\nconst getEccryptoJS = lazyImport(() => import(\"eccrypto-js\"));\n\n// Import both ECIES implementations statically\nimport { NodeECIESUint8Provider } from \"../crypto/ecies/node\";\nimport { ECIESError } from \"../crypto/ecies/interface\";\nimport type { ECIESEncrypted } from \"../crypto/ecies\";\nimport { randomBytes } from \"crypto\";\nimport secp256k1Import from \"secp256k1\";\n\n// Type definition for secp256k1 module\ninterface Secp256k1Module {\n  privateKeyVerify(privateKey: Buffer): boolean;\n  publicKeyCreate(privateKey: Buffer, compressed: boolean): Buffer;\n  publicKeyVerify(publicKey: Buffer): boolean;\n  publicKeyConvert(publicKey: Buffer, compressed: boolean): Buffer;\n  ecdh(\n    publicKey: Buffer,\n    privateKey: Buffer,\n    options: {\n      hashfn: (x: Uint8Array, y: Uint8Array, output?: Uint8Array) => Uint8Array;\n    },\n    output: Buffer,\n  ): Buffer;\n}\n\n/**\n * Implements cryptographic operations for Node.js environments.\n *\n * @remarks\n * Provides ECIES encryption/decryption, key generation, and password-based\n * encryption using either eccrypto-js or a custom ECIES implementation.\n * The implementation choice is controlled by the `useCustomECIES` feature flag.\n *\n * @internal\n */\nclass NodeCryptoAdapter implements VanaCryptoAdapter {\n  // Initialize both providers - only one will be used based on feature flag\n  private customEciesProvider = new NodeECIESUint8Provider();\n  private customWalletService = new WalletKeyEncryptionService({\n    eciesProvider: this.customEciesProvider,\n  });\n\n  /**\n   * Encrypts data using ECIES with a public key.\n   *\n   * @param data - The plaintext string to encrypt.\n   *   Typically user data or sensitive information.\n   * @param publicKeyHex - The recipient's public key in hex format.\n   *   Obtain from key generation or user profile.\n   * @returns Encrypted data as a hex string containing IV, ephemeral key, ciphertext, and MAC\n   *\n   * @throws {Error} If encryption fails or public key is invalid\n   */\n  async encryptWithPublicKey(\n    data: string,\n    publicKeyHex: string,\n  ): Promise<string> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom ECIES implementation\n        const publicKey = Buffer.from(publicKeyHex, \"hex\");\n        const message = Buffer.from(data, \"utf8\");\n\n        const encrypted = await this.customEciesProvider.encrypt(\n          publicKey,\n          message,\n        );\n\n        // Concatenate all components and return as hex string for API consistency\n        const result = Buffer.concat([\n          encrypted.iv,\n          encrypted.ephemPublicKey,\n          encrypted.ciphertext,\n          encrypted.mac,\n        ]);\n\n        return result.toString(\"hex\");\n      } else {\n        // Use eccrypto-js (default)\n        const eccryptojs = await getEccryptoJS();\n        const publicKeyBytes = Buffer.from(publicKeyHex, \"hex\");\n\n        // Normalize to uncompressed format using the ECIES provider\n        // This handles both compressed (33 bytes) and uncompressed (65 bytes) keys\n        const uncompressed = this.customEciesProvider.normalizeToUncompressed(\n          new Uint8Array(publicKeyBytes),\n        );\n        const publicKey = Buffer.from(uncompressed);\n\n        const message = Buffer.from(data, \"utf8\");\n\n        const encrypted = await eccryptojs.encrypt(publicKey, message);\n\n        // Concatenate all components and return as hex string for API consistency\n        const result = Buffer.concat([\n          encrypted.iv,\n          encrypted.ephemPublicKey,\n          encrypted.ciphertext,\n          encrypted.mac,\n        ]);\n\n        return result.toString(\"hex\");\n      }\n    } catch (error) {\n      if (features.useCustomECIES && error instanceof ECIESError) {\n        throw error;\n      }\n      throw new Error(\n        `Encryption failed: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n\n  /**\n   * Decrypts ECIES-encrypted data using a private key.\n   *\n   * @param encryptedData - Hex string containing encrypted data.\n   *   Must include IV, ephemeral public key, ciphertext, and MAC.\n   * @param privateKeyHex - The private key in hex format.\n   *   Must correspond to the public key used for encryption.\n   * @returns The decrypted plaintext string\n   *\n   * @throws {Error} If decryption fails or MAC verification fails\n   * @throws {ECIESError} If using custom ECIES and specific error occurs\n   */\n  async decryptWithPrivateKey(\n    encryptedData: string,\n    privateKeyHex: string,\n  ): Promise<string> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom ECIES implementation\n        const privateKeyBuffer = processWalletPrivateKey(privateKeyHex);\n        const encryptedBuffer = Buffer.from(encryptedData, \"hex\");\n        const { iv, ephemPublicKey, ciphertext, mac } =\n          parseEncryptedDataBuffer(encryptedBuffer);\n\n        // Reconstruct the encrypted data structure\n        const encryptedObj: ECIESEncrypted = {\n          iv,\n          ephemPublicKey,\n          ciphertext,\n          mac,\n        };\n\n        const decrypted = await this.customEciesProvider.decrypt(\n          privateKeyBuffer,\n          encryptedObj,\n        );\n        return new TextDecoder().decode(decrypted);\n      } else {\n        // Use eccrypto-js (default)\n        const eccryptojs = await getEccryptoJS();\n        const privateKey = Buffer.from(privateKeyHex, \"hex\");\n        const encryptedBuffer = Buffer.from(encryptedData, \"hex\");\n\n        // Parse the encrypted data\n        const { iv, ephemPublicKey, ciphertext, mac } =\n          parseEncryptedDataBuffer(encryptedBuffer);\n\n        const decrypted = await eccryptojs.decrypt(privateKey, {\n          iv: Buffer.from(iv),\n          ephemPublicKey: Buffer.from(ephemPublicKey),\n          ciphertext: Buffer.from(ciphertext),\n          mac: Buffer.from(mac),\n        });\n\n        return decrypted.toString(\"utf8\");\n      }\n    } catch (error) {\n      if (features.useCustomECIES && error instanceof ECIESError) {\n        throw error;\n      }\n      throw new Error(\n        `Decryption failed: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n\n  /**\n   * Generates a new secp256k1 key pair for ECIES operations.\n   *\n   * @returns Object containing hex-encoded public and private keys\n   * @returns returns.publicKey - Compressed public key in hex format\n   * @returns returns.privateKey - Private key in hex format\n   *\n   * @throws {Error} If key generation fails\n   */\n  async generateKeyPair(): Promise<{ publicKey: string; privateKey: string }> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom implementation with secp256k1\n        const secp256k1 = secp256k1Import as unknown as Secp256k1Module;\n\n        // Generate private key\n        let privateKey: Buffer;\n        do {\n          privateKey = randomBytes(32);\n        } while (!secp256k1.privateKeyVerify(privateKey));\n\n        // Get compressed public key\n        const publicKey = Buffer.from(\n          secp256k1.publicKeyCreate(privateKey, true),\n        );\n\n        return {\n          privateKey: privateKey.toString(\"hex\"),\n          publicKey: publicKey.toString(\"hex\"),\n        };\n      } else {\n        // Use eccrypto-js (default)\n        const eccryptojs = await getEccryptoJS();\n        const privateKey = eccryptojs.generatePrivate();\n        const publicKey = eccryptojs.getPublic(privateKey);\n\n        return {\n          privateKey: privateKey.toString(\"hex\"),\n          publicKey: publicKey.toString(\"hex\"),\n        };\n      }\n    } catch (error) {\n      throw wrapCryptoError(\"key generation\", error);\n    }\n  }\n\n  /**\n   * Encrypts data using a wallet's public key.\n   *\n   * @param data - The plaintext string to encrypt.\n   *   Typically permission data or DLP metadata.\n   * @param publicKey - The wallet's public key (with or without 0x prefix).\n   *   Obtain from wallet connection or user profile.\n   * @returns Encrypted data as a hex string\n   *\n   * @throws {Error} If encryption fails or key processing fails\n   */\n  async encryptWithWalletPublicKey(\n    data: string,\n    publicKey: string,\n  ): Promise<string> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom ECIES implementation via WalletKeyEncryptionService\n        return await this.customWalletService.encryptWithWalletPublicKey(\n          data,\n          publicKey,\n        );\n      } else {\n        // Use eccrypto-js directly for wallet encryption\n        const eccryptojs = await getEccryptoJS();\n        const publicKeyBytes = processWalletPublicKey(publicKey);\n\n        // Normalize to uncompressed format using the ECIES provider\n        // This handles both compressed (33 bytes) and uncompressed (65 bytes) keys\n        const uncompressed =\n          this.customEciesProvider.normalizeToUncompressed(publicKeyBytes);\n        const publicKeyBuffer = Buffer.from(uncompressed);\n\n        const message = Buffer.from(data, \"utf8\");\n\n        const encrypted = await eccryptojs.encrypt(publicKeyBuffer, message);\n\n        // Concatenate all components and return as hex string\n        const result = Buffer.concat([\n          encrypted.iv,\n          encrypted.ephemPublicKey,\n          encrypted.ciphertext,\n          encrypted.mac,\n        ]);\n\n        return result.toString(\"hex\");\n      }\n    } catch (error) {\n      throw wrapCryptoError(\"encrypt with wallet public key\", error);\n    }\n  }\n\n  /**\n   * Decrypts data using a wallet's private key.\n   *\n   * @param encryptedData - Hex string containing encrypted data.\n   *   Must be encrypted with corresponding wallet public key.\n   * @param privateKey - The wallet's private key.\n   *   Obtain from wallet connection (handle with care).\n   * @returns The decrypted plaintext string\n   *\n   * @throws {Error} If decryption fails or key is invalid\n   */\n  async decryptWithWalletPrivateKey(\n    encryptedData: string,\n    privateKey: string,\n  ): Promise<string> {\n    try {\n      if (features.useCustomECIES) {\n        // Use custom ECIES implementation via WalletKeyEncryptionService\n        return await this.customWalletService.decryptWithWalletPrivateKey(\n          encryptedData,\n          privateKey,\n        );\n      } else {\n        // Use eccrypto-js directly for wallet decryption\n        const eccryptojs = await getEccryptoJS();\n        const privateKeyBuffer = Buffer.from(\n          processWalletPrivateKey(privateKey),\n        );\n        const encryptedBuffer = Buffer.from(encryptedData, \"hex\");\n\n        // Parse the encrypted data\n        const { iv, ephemPublicKey, ciphertext, mac } =\n          parseEncryptedDataBuffer(encryptedBuffer);\n\n        const decrypted = await eccryptojs.decrypt(privateKeyBuffer, {\n          iv: Buffer.from(iv),\n          ephemPublicKey: Buffer.from(ephemPublicKey),\n          ciphertext: Buffer.from(ciphertext),\n          mac: Buffer.from(mac),\n        });\n\n        return decrypted.toString(\"utf8\");\n      }\n    } catch (error) {\n      throw wrapCryptoError(\"decrypt with wallet private key\", error);\n    }\n  }\n\n  /**\n   * Encrypts binary data using password-based encryption.\n   *\n   * @param data - Binary data to encrypt.\n   *   Typically file contents or serialized objects.\n   * @param password - Password for encryption.\n   *   Often derived from wallet signatures.\n   * @returns Encrypted data as Uint8Array\n   *\n   * @remarks\n   * Uses OpenPGP for password-based encryption. Note that this is not\n   * deterministic due to OpenPGP's random salt generation.\n   *\n   * @throws {Error} If encryption fails\n   */\n  async encryptWithPassword(\n    data: Uint8Array,\n    password: string,\n  ): Promise<Uint8Array> {\n    try {\n      const openpgp = await getOpenPGP();\n      const message = await openpgp.createMessage({\n        binary: data,\n      });\n\n      // Use password-based encryption with wallet signature as password\n      // Note: For deterministic encryption, we would need to control the salt\n      // This implementation is secure but not deterministic due to OpenPGP's design\n      const encrypted = await openpgp.encrypt({\n        message,\n        passwords: [password],\n        format: \"binary\",\n      });\n\n      // In Node.js, the encrypted result is already a Uint8Array\n      if (encrypted instanceof Uint8Array) {\n        return encrypted;\n      }\n\n      // If it's a stream (should not happen with format: \"binary\"), read it\n      if (\n        encrypted &&\n        typeof encrypted === \"object\" &&\n        \"getReader\" in encrypted\n      ) {\n        return await streamToUint8Array(\n          encrypted as ReadableStream<Uint8Array>,\n        );\n      }\n\n      throw new Error(\"Unexpected encrypted data format\");\n    } catch (error) {\n      throw wrapCryptoError(\"encrypt with password\", error);\n    }\n  }\n\n  /**\n   * Decrypts password-encrypted binary data.\n   *\n   * @param encryptedData - Password-encrypted data as Uint8Array.\n   *   Must be encrypted with the same password.\n   * @param password - Password for decryption.\n   *   Must match the encryption password.\n   * @returns Decrypted data as Uint8Array\n   *\n   * @throws {Error} If decryption fails or password is incorrect\n   */\n  async decryptWithPassword(\n    encryptedData: Uint8Array,\n    password: string,\n  ): Promise<Uint8Array> {\n    try {\n      const openpgp = await getOpenPGP();\n      const message = await openpgp.readMessage({\n        binaryMessage: encryptedData,\n      });\n\n      // Use password-based decryption with wallet signature as password\n      const { data: decrypted } = await openpgp.decrypt({\n        message,\n        passwords: [password],\n        format: \"binary\",\n      });\n\n      // Convert decrypted data back to Uint8Array\n      return new Uint8Array(decrypted as ArrayBuffer);\n    } catch (error) {\n      throw wrapCryptoError(\"decrypt with password\", error);\n    }\n  }\n}\n\n/**\n * Implements PGP operations for Node.js environments.\n *\n * @remarks\n * Provides PGP encryption, decryption, and key generation using the OpenPGP.js\n * library with Node.js-specific optimizations like zlib compression.\n *\n * @internal\n */\nclass NodePGPAdapter implements VanaPGPAdapter {\n  /**\n   * Encrypts data using PGP public key encryption.\n   *\n   * @param data - The plaintext string to encrypt.\n   *   Typically messages or structured data.\n   * @param publicKeyArmored - ASCII-armored PGP public key.\n   *   Obtain from PGP key generation or key servers.\n   * @returns ASCII-armored encrypted message\n   *\n   * @throws {Error} If encryption fails or public key is invalid\n   */\n  async encrypt(data: string, publicKeyArmored: string): Promise<string> {\n    try {\n      const openpgp = await getOpenPGP();\n      const publicKey = await openpgp.readKey({ armoredKey: publicKeyArmored });\n\n      const encrypted = await openpgp.encrypt({\n        message: await openpgp.createMessage({ text: data }),\n        encryptionKeys: publicKey,\n        config: {\n          preferredCompressionAlgorithm: openpgp.enums.compression.zlib,\n        },\n      });\n\n      return encrypted as string;\n    } catch (error) {\n      throw wrapCryptoError(\"PGP encryption\", error);\n    }\n  }\n\n  /**\n   * Decrypts PGP-encrypted data using a private key.\n   *\n   * @param encryptedData - ASCII-armored encrypted message.\n   *   Must be encrypted with corresponding public key.\n   * @param privateKeyArmored - ASCII-armored PGP private key.\n   *   Must correspond to the public key used for encryption.\n   * @returns The decrypted plaintext string\n   *\n   * @throws {Error} If decryption fails or private key is invalid\n   */\n  async decrypt(\n    encryptedData: string,\n    privateKeyArmored: string,\n  ): Promise<string> {\n    try {\n      const openpgp = await getOpenPGP();\n      const privateKey = await openpgp.readPrivateKey({\n        armoredKey: privateKeyArmored,\n      });\n      const message = await openpgp.readMessage({\n        armoredMessage: encryptedData,\n      });\n\n      const { data: decrypted } = await openpgp.decrypt({\n        message,\n        decryptionKeys: privateKey,\n      });\n\n      return decrypted as string;\n    } catch (error) {\n      throw wrapCryptoError(\"PGP decryption\", error);\n    }\n  }\n\n  /**\n   * Generates a new PGP key pair.\n   *\n   * @param options - Key generation options\n   * @param options.name - Name for the key identity.\n   *   Defaults to 'Vana User'.\n   * @param options.email - Email for the key identity.\n   *   Defaults to 'user@vana.com'.\n   * @param options.passphrase - Passphrase to protect the private key.\n   *   If not provided, key is unprotected.\n   * @returns ASCII-armored public and private keys\n   *\n   * @throws {Error} If key generation fails\n   */\n  async generateKeyPair(options?: {\n    name?: string;\n    email?: string;\n    passphrase?: string;\n  }): Promise<{ publicKey: string; privateKey: string }> {\n    try {\n      const openpgp = await getOpenPGP();\n      // Use shared utility to get standardized parameters\n      const keyGenParams = getPGPKeyGenParams(options);\n\n      const { privateKey, publicKey } = await openpgp.generateKey(keyGenParams);\n\n      return { publicKey, privateKey };\n    } catch (error) {\n      throw wrapCryptoError(\"PGP key generation\", error);\n    }\n  }\n}\n\n/**\n * Implements HTTP operations for Node.js environments.\n *\n * @remarks\n * Provides fetch functionality using the global fetch if available,\n * suitable for Node.js 18+ or environments with fetch polyfills.\n *\n * @internal\n */\nclass NodeHttpAdapter implements VanaHttpAdapter {\n  /**\n   * Performs an HTTP request using fetch.\n   *\n   * @param url - The URL to fetch.\n   *   Must be a valid HTTP/HTTPS URL.\n   * @param options - Standard fetch options.\n   *   See MDN fetch documentation for details.\n   * @returns Standard fetch Response object\n   *\n   * @throws {Error} If fetch is not available in the environment\n   */\n  async fetch(url: string, options?: RequestInit): Promise<Response> {\n    if (typeof globalThis.fetch !== \"undefined\") {\n      return globalThis.fetch(url, options);\n    }\n\n    throw new Error(\"No fetch implementation available in Node.js environment\");\n  }\n}\n\n/**\n * Implements in-memory caching for Node.js environments.\n *\n * @remarks\n * Provides a simple TTL-based cache using a Map. Cached values expire\n * after 2 hours by default. This cache is not persistent and will be\n * cleared when the process exits.\n *\n * @internal\n */\nclass NodeCacheAdapter implements VanaCacheAdapter {\n  private cache = new Map<string, { value: string; expires: number }>();\n  private readonly defaultTtl = 2 * 60 * 60 * 1000; // 2 hours in milliseconds\n\n  /**\n   * Retrieves a cached value by key.\n   *\n   * @param key - The cache key to look up.\n   *   Typically derived from operation parameters.\n   * @returns The cached value or null if not found/expired\n   */\n  get(key: string): string | null {\n    const entry = this.cache.get(key);\n    if (!entry) {\n      return null;\n    }\n\n    // Check if expired\n    if (Date.now() > entry.expires) {\n      this.cache.delete(key);\n      return null;\n    }\n\n    return entry.value;\n  }\n\n  /**\n   * Stores a value in the cache with TTL.\n   *\n   * @param key - The cache key.\n   *   Should be unique per operation.\n   * @param value - The value to cache.\n   *   Typically serialized data or signatures.\n   */\n  set(key: string, value: string): void {\n    this.cache.set(key, {\n      value,\n      expires: Date.now() + this.defaultTtl,\n    });\n  }\n\n  /**\n   * Removes a specific key from the cache.\n   *\n   * @param key - The cache key to remove.\n   *   Use when cached data becomes invalid.\n   */\n  delete(key: string): void {\n    this.cache.delete(key);\n  }\n\n  /**\n   * Clears all cached values.\n   *\n   * @remarks\n   * Use with caution as this removes all cached signatures\n   * and other performance optimizations.\n   */\n  clear(): void {\n    this.cache.clear();\n  }\n}\n\n/**\n * Provides complete platform abstraction for Node.js environments.\n *\n * @remarks\n * This adapter aggregates all Node.js-specific implementations of platform\n * operations. It automatically selects appropriate cryptographic implementations\n * based on feature flags and provides consistent APIs across all operations.\n *\n * @example\n * ```typescript\n * // Create a custom Node.js adapter instance\n * const adapter = new NodePlatformAdapter();\n *\n * // Use for encryption\n * const encrypted = await adapter.crypto.encryptWithPublicKey(\n *   'secret data',\n *   publicKeyHex\n * );\n *\n * // Use for caching\n * adapter.cache.set('signature_key', signatureValue);\n * ```\n *\n * @category Platform\n */\nexport class NodePlatformAdapter implements VanaPlatformAdapter {\n  crypto: VanaCryptoAdapter;\n  pgp: VanaPGPAdapter;\n  http: VanaHttpAdapter;\n  cache: VanaCacheAdapter;\n  platform: \"node\" = \"node\" as const;\n\n  constructor() {\n    this.crypto = new NodeCryptoAdapter();\n    this.pgp = new NodePGPAdapter();\n    this.http = new NodeHttpAdapter();\n    this.cache = new NodeCacheAdapter();\n  }\n}\n\n/**\n * Pre-configured Node.js platform adapter instance.\n *\n * @remarks\n * This singleton instance is the default adapter used by the SDK when\n * running in Node.js environments. It's automatically selected based on\n * platform detection.\n *\n * @example\n * ```typescript\n * import { nodePlatformAdapter } from '@vana-sdk/platform/node';\n *\n * // Use directly for platform operations\n * const keys = await nodePlatformAdapter.crypto.generateKeyPair();\n * ```\n *\n * @category Platform\n */\nexport const nodePlatformAdapter: VanaPlatformAdapter =\n  new NodePlatformAdapter();\n"],"mappings":"AAyCA,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,MAAM,aAAa,WAAW,MAAM,OAAO,SAAS,CAAC;AACrD,MAAM,gBAAgB,WAAW,MAAM,OAAO,aAAa,CAAC;AAG5D,SAAS,8BAA8B;AACvC,SAAS,kBAAkB;AAE3B,SAAS,mBAAmB;AAC5B,OAAO,qBAAqB;AA4B5B,MAAM,kBAA+C;AAAA;AAAA,EAE3C,sBAAsB,IAAI,uBAAuB;AAAA,EACjD,sBAAsB,IAAI,2BAA2B;AAAA,IAC3D,eAAe,KAAK;AAAA,EACtB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaD,MAAM,qBACJ,MACA,cACiB;AACjB,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,cAAM,YAAY,OAAO,KAAK,cAAc,KAAK;AACjD,cAAM,UAAU,OAAO,KAAK,MAAM,MAAM;AAExC,cAAM,YAAY,MAAM,KAAK,oBAAoB;AAAA,UAC/C;AAAA,UACA;AAAA,QACF;AAGA,cAAM,SAAS,OAAO,OAAO;AAAA,UAC3B,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,QACZ,CAAC;AAED,eAAO,OAAO,SAAS,KAAK;AAAA,MAC9B,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,iBAAiB,OAAO,KAAK,cAAc,KAAK;AAItD,cAAM,eAAe,KAAK,oBAAoB;AAAA,UAC5C,IAAI,WAAW,cAAc;AAAA,QAC/B;AACA,cAAM,YAAY,OAAO,KAAK,YAAY;AAE1C,cAAM,UAAU,OAAO,KAAK,MAAM,MAAM;AAExC,cAAM,YAAY,MAAM,WAAW,QAAQ,WAAW,OAAO;AAG7D,cAAM,SAAS,OAAO,OAAO;AAAA,UAC3B,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,QACZ,CAAC;AAED,eAAO,OAAO,SAAS,KAAK;AAAA,MAC9B;AAAA,IACF,SAAS,OAAO;AACd,UAAI,SAAS,kBAAkB,iBAAiB,YAAY;AAC1D,cAAM;AAAA,MACR;AACA,YAAM,IAAI;AAAA,QACR,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,sBACJ,eACA,eACiB;AACjB,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,cAAM,mBAAmB,wBAAwB,aAAa;AAC9D,cAAM,kBAAkB,OAAO,KAAK,eAAe,KAAK;AACxD,cAAM,EAAE,IAAI,gBAAgB,YAAY,IAAI,IAC1C,yBAAyB,eAAe;AAG1C,cAAM,eAA+B;AAAA,UACnC;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAEA,cAAM,YAAY,MAAM,KAAK,oBAAoB;AAAA,UAC/C;AAAA,UACA;AAAA,QACF;AACA,eAAO,IAAI,YAAY,EAAE,OAAO,SAAS;AAAA,MAC3C,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,aAAa,OAAO,KAAK,eAAe,KAAK;AACnD,cAAM,kBAAkB,OAAO,KAAK,eAAe,KAAK;AAGxD,cAAM,EAAE,IAAI,gBAAgB,YAAY,IAAI,IAC1C,yBAAyB,eAAe;AAE1C,cAAM,YAAY,MAAM,WAAW,QAAQ,YAAY;AAAA,UACrD,IAAI,OAAO,KAAK,EAAE;AAAA,UAClB,gBAAgB,OAAO,KAAK,cAAc;AAAA,UAC1C,YAAY,OAAO,KAAK,UAAU;AAAA,UAClC,KAAK,OAAO,KAAK,GAAG;AAAA,QACtB,CAAC;AAED,eAAO,UAAU,SAAS,MAAM;AAAA,MAClC;AAAA,IACF,SAAS,OAAO;AACd,UAAI,SAAS,kBAAkB,iBAAiB,YAAY;AAC1D,cAAM;AAAA,MACR;AACA,YAAM,IAAI;AAAA,QACR,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,kBAAsE;AAC1E,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,cAAM,YAAY;AAGlB,YAAI;AACJ,WAAG;AACD,uBAAa,YAAY,EAAE;AAAA,QAC7B,SAAS,CAAC,UAAU,iBAAiB,UAAU;AAG/C,cAAM,YAAY,OAAO;AAAA,UACvB,UAAU,gBAAgB,YAAY,IAAI;AAAA,QAC5C;AAEA,eAAO;AAAA,UACL,YAAY,WAAW,SAAS,KAAK;AAAA,UACrC,WAAW,UAAU,SAAS,KAAK;AAAA,QACrC;AAAA,MACF,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,aAAa,WAAW,gBAAgB;AAC9C,cAAM,YAAY,WAAW,UAAU,UAAU;AAEjD,eAAO;AAAA,UACL,YAAY,WAAW,SAAS,KAAK;AAAA,UACrC,WAAW,UAAU,SAAS,KAAK;AAAA,QACrC;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,gBAAgB,kBAAkB,KAAK;AAAA,IAC/C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,2BACJ,MACA,WACiB;AACjB,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,eAAO,MAAM,KAAK,oBAAoB;AAAA,UACpC;AAAA,UACA;AAAA,QACF;AAAA,MACF,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,iBAAiB,uBAAuB,SAAS;AAIvD,cAAM,eACJ,KAAK,oBAAoB,wBAAwB,cAAc;AACjE,cAAM,kBAAkB,OAAO,KAAK,YAAY;AAEhD,cAAM,UAAU,OAAO,KAAK,MAAM,MAAM;AAExC,cAAM,YAAY,MAAM,WAAW,QAAQ,iBAAiB,OAAO;AAGnE,cAAM,SAAS,OAAO,OAAO;AAAA,UAC3B,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,UACV,UAAU;AAAA,QACZ,CAAC;AAED,eAAO,OAAO,SAAS,KAAK;AAAA,MAC9B;AAAA,IACF,SAAS,OAAO;AACd,YAAM,gBAAgB,kCAAkC,KAAK;AAAA,IAC/D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,4BACJ,eACA,YACiB;AACjB,QAAI;AACF,UAAI,SAAS,gBAAgB;AAE3B,eAAO,MAAM,KAAK,oBAAoB;AAAA,UACpC;AAAA,UACA;AAAA,QACF;AAAA,MACF,OAAO;AAEL,cAAM,aAAa,MAAM,cAAc;AACvC,cAAM,mBAAmB,OAAO;AAAA,UAC9B,wBAAwB,UAAU;AAAA,QACpC;AACA,cAAM,kBAAkB,OAAO,KAAK,eAAe,KAAK;AAGxD,cAAM,EAAE,IAAI,gBAAgB,YAAY,IAAI,IAC1C,yBAAyB,eAAe;AAE1C,cAAM,YAAY,MAAM,WAAW,QAAQ,kBAAkB;AAAA,UAC3D,IAAI,OAAO,KAAK,EAAE;AAAA,UAClB,gBAAgB,OAAO,KAAK,cAAc;AAAA,UAC1C,YAAY,OAAO,KAAK,UAAU;AAAA,UAClC,KAAK,OAAO,KAAK,GAAG;AAAA,QACtB,CAAC;AAED,eAAO,UAAU,SAAS,MAAM;AAAA,MAClC;AAAA,IACF,SAAS,OAAO;AACd,YAAM,gBAAgB,mCAAmC,KAAK;AAAA,IAChE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,oBACJ,MACA,UACqB;AACrB,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AACjC,YAAM,UAAU,MAAM,QAAQ,cAAc;AAAA,QAC1C,QAAQ;AAAA,MACV,CAAC;AAKD,YAAM,YAAY,MAAM,QAAQ,QAAQ;AAAA,QACtC;AAAA,QACA,WAAW,CAAC,QAAQ;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAGD,UAAI,qBAAqB,YAAY;AACnC,eAAO;AAAA,MACT;AAGA,UACE,aACA,OAAO,cAAc,YACrB,eAAe,WACf;AACA,eAAO,MAAM;AAAA,UACX;AAAA,QACF;AAAA,MACF;AAEA,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACpD,SAAS,OAAO;AACd,YAAM,gBAAgB,yBAAyB,KAAK;AAAA,IACtD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,oBACJ,eACA,UACqB;AACrB,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AACjC,YAAM,UAAU,MAAM,QAAQ,YAAY;AAAA,QACxC,eAAe;AAAA,MACjB,CAAC;AAGD,YAAM,EAAE,MAAM,UAAU,IAAI,MAAM,QAAQ,QAAQ;AAAA,QAChD;AAAA,QACA,WAAW,CAAC,QAAQ;AAAA,QACpB,QAAQ;AAAA,MACV,CAAC;AAGD,aAAO,IAAI,WAAW,SAAwB;AAAA,IAChD,SAAS,OAAO;AACd,YAAM,gBAAgB,yBAAyB,KAAK;AAAA,IACtD;AAAA,EACF;AACF;AAWA,MAAM,eAAyC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAY7C,MAAM,QAAQ,MAAc,kBAA2C;AACrE,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AACjC,YAAM,YAAY,MAAM,QAAQ,QAAQ,EAAE,YAAY,iBAAiB,CAAC;AAExE,YAAM,YAAY,MAAM,QAAQ,QAAQ;AAAA,QACtC,SAAS,MAAM,QAAQ,cAAc,EAAE,MAAM,KAAK,CAAC;AAAA,QACnD,gBAAgB;AAAA,QAChB,QAAQ;AAAA,UACN,+BAA+B,QAAQ,MAAM,YAAY;AAAA,QAC3D;AAAA,MACF,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,gBAAgB,kBAAkB,KAAK;AAAA,IAC/C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,QACJ,eACA,mBACiB;AACjB,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AACjC,YAAM,aAAa,MAAM,QAAQ,eAAe;AAAA,QAC9C,YAAY;AAAA,MACd,CAAC;AACD,YAAM,UAAU,MAAM,QAAQ,YAAY;AAAA,QACxC,gBAAgB;AAAA,MAClB,CAAC;AAED,YAAM,EAAE,MAAM,UAAU,IAAI,MAAM,QAAQ,QAAQ;AAAA,QAChD;AAAA,QACA,gBAAgB;AAAA,MAClB,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,gBAAgB,kBAAkB,KAAK;AAAA,IAC/C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,gBAAgB,SAIiC;AACrD,QAAI;AACF,YAAM,UAAU,MAAM,WAAW;AAEjC,YAAM,eAAe,mBAAmB,OAAO;AAE/C,YAAM,EAAE,YAAY,UAAU,IAAI,MAAM,QAAQ,YAAY,YAAY;AAExE,aAAO,EAAE,WAAW,WAAW;AAAA,IACjC,SAAS,OAAO;AACd,YAAM,gBAAgB,sBAAsB,KAAK;AAAA,IACnD;AAAA,EACF;AACF;AAWA,MAAM,gBAA2C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAY/C,MAAM,MAAM,KAAa,SAA0C;AACjE,QAAI,OAAO,WAAW,UAAU,aAAa;AAC3C,aAAO,WAAW,MAAM,KAAK,OAAO;AAAA,IACtC;AAEA,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACF;AAYA,MAAM,iBAA6C;AAAA,EACzC,QAAQ,oBAAI,IAAgD;AAAA,EACnD,aAAa,IAAI,KAAK,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAS5C,IAAI,KAA4B;AAC9B,UAAM,QAAQ,KAAK,MAAM,IAAI,GAAG;AAChC,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAGA,QAAI,KAAK,IAAI,IAAI,MAAM,SAAS;AAC9B,WAAK,MAAM,OAAO,GAAG;AACrB,aAAO;AAAA,IACT;AAEA,WAAO,MAAM;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,IAAI,KAAa,OAAqB;AACpC,SAAK,MAAM,IAAI,KAAK;AAAA,MAClB;AAAA,MACA,SAAS,KAAK,IAAI,IAAI,KAAK;AAAA,IAC7B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,KAAmB;AACxB,SAAK,MAAM,OAAO,GAAG;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,QAAc;AACZ,SAAK,MAAM,MAAM;AAAA,EACnB;AACF;AA2BO,MAAM,oBAAmD;AAAA,EAC9D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAmB;AAAA,EAEnB,cAAc;AACZ,SAAK,SAAS,IAAI,kBAAkB;AACpC,SAAK,MAAM,IAAI,eAAe;AAC9B,SAAK,OAAO,IAAI,gBAAgB;AAChC,SAAK,QAAQ,IAAI,iBAAiB;AAAA,EACpC;AACF;AAoBO,MAAM,sBACX,IAAI,oBAAoB;","names":[]}

package/dist/server/relayerHandler.cjs

@@ -0,0 +1,214 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var relayerHandler_exports = {};
+__export(relayerHandler_exports, {
+  handleRelayerOperation: () => handleRelayerOperation
+});
+module.exports = __toCommonJS(relayerHandler_exports);
+var import_errors = require("../errors");
+var import_viem = require("viem");
+async function handleRelayerOperation(sdk, request) {
+  if (request.type === "signed") {
+    return handleSignedOperation(sdk, request);
+  }
+  return handleDirectOperation(sdk, request);
+}
+async function handleSignedOperation(sdk, request) {
+  const { typedData, signature, expectedUserAddress } = request;
+  let recoveredAddress;
+  try {
+    recoveredAddress = await (0, import_viem.recoverTypedDataAddress)({
+      domain: {
+        ...typedData.domain,
+        chainId: typedData.domain.chainId ? BigInt(typedData.domain.chainId) : void 0
+      },
+      types: typedData.types,
+      primaryType: typedData.primaryType,
+      message: typedData.message,
+      signature
+    });
+  } catch (error) {
+    throw new import_errors.SignatureError(
+      `Signature verification failed: ${error instanceof Error ? error.message : "Unknown error"}`
+    );
+  }
+  if (expectedUserAddress) {
+    const normalizedExpected = (0, import_viem.getAddress)(expectedUserAddress);
+    const normalizedSigner = (0, import_viem.getAddress)(recoveredAddress);
+    if (normalizedSigner !== normalizedExpected) {
+      throw new import_errors.SignatureError(
+        `Security verification failed: Recovered signer address (${normalizedSigner}) does not match expected user address (${normalizedExpected})`
+      );
+    }
+  }
+  const result = await routeSignedOperation(sdk, typedData, signature);
+  return {
+    type: "signed",
+    hash: result.hash
+  };
+}
+async function routeSignedOperation(sdk, typedData, signature) {
+  const primaryType = typedData.primaryType;
+  switch (primaryType) {
+    case "Permission":
+      return sdk.permissions.submitSignedGrant(
+        {
+          ...typedData,
+          primaryType: "Permission"
+        },
+        signature
+      );
+    case "RevokePermission":
+      return sdk.permissions.submitSignedRevoke(
+        {
+          ...typedData,
+          primaryType: "RevokePermission"
+        },
+        signature
+      );
+    case "TrustServer":
+      return sdk.permissions.submitSignedTrustServer(
+        {
+          ...typedData,
+          primaryType: "TrustServer"
+        },
+        signature
+      );
+    case "AddServer":
+      return sdk.permissions.submitSignedAddAndTrustServer(
+        {
+          ...typedData,
+          primaryType: "AddServer"
+        },
+        signature
+      );
+    case "UntrustServer":
+      return sdk.permissions.submitSignedUntrustServer(
+        {
+          ...typedData,
+          primaryType: "UntrustServer"
+        },
+        signature
+      );
+    case "ServerFilesAndPermission":
+      return sdk.permissions.submitSignedAddServerFilesAndPermissions(
+        {
+          ...typedData,
+          primaryType: "ServerFilesAndPermission"
+        },
+        signature
+      );
+    // TODO: RegisterGrantee with signature is not supported until
+    // DataPortabilityGrantees contract adds registerGranteeWithSignature function
+    // case "RegisterGrantee":
+    //   return sdk.permissions.submitSignedRegisterGrantee(...);
+    default:
+      throw new Error(`Unsupported operation type: ${typedData.primaryType}`);
+  }
+}
+async function handleDirectOperation(sdk, request) {
+  switch (request.operation) {
+    case "submitFileAddition": {
+      const { url, userAddress } = request.params;
+      const result = await sdk.data.addFileWithPermissions(
+        url,
+        userAddress,
+        []
+        // No permissions
+      );
+      const eventData = await sdk.waitForTransactionEvents(result);
+      const fileId = eventData.expectedEvents?.FileAdded?.fileId;
+      if (!fileId) {
+        throw new Error("Failed to get fileId from transaction events");
+      }
+      return {
+        type: "direct",
+        result: {
+          fileId: Number(fileId),
+          transactionHash: result.hash
+        }
+      };
+    }
+    case "submitFileAdditionWithPermissions": {
+      const { url, userAddress, permissions } = request.params;
+      const result = await sdk.data.addFileWithPermissions(
+        url,
+        userAddress,
+        permissions
+      );
+      const eventData = await sdk.waitForTransactionEvents(result);
+      const fileId = eventData.expectedEvents?.FileAdded?.fileId;
+      if (!fileId) {
+        throw new Error("Failed to get fileId from transaction events");
+      }
+      return {
+        type: "direct",
+        result: {
+          fileId: Number(fileId),
+          transactionHash: result.hash
+        }
+      };
+    }
+    case "submitFileAdditionComplete": {
+      const { url, userAddress, permissions, schemaId, ownerAddress } = request.params;
+      const result = await sdk.data.addFileWithEncryptedPermissionsAndSchema(
+        url,
+        ownerAddress ?? userAddress,
+        permissions,
+        // Already in correct format with encrypted 'key' field
+        schemaId
+      );
+      const eventData = await sdk.waitForTransactionEvents(result);
+      const fileId = eventData.expectedEvents?.FileAdded?.fileId;
+      if (!fileId) {
+        throw new Error("Failed to get fileId from transaction events");
+      }
+      return {
+        type: "direct",
+        result: {
+          fileId: Number(fileId),
+          transactionHash: result.hash
+        }
+      };
+    }
+    case "storeGrantFile": {
+      const grantFile = request.params;
+      const blob = new Blob([JSON.stringify(grantFile)], {
+        type: "application/json"
+      });
+      const result = await sdk.data.upload({
+        content: blob,
+        filename: `grant-${Date.now()}.json`
+      });
+      return {
+        type: "direct",
+        result: { url: result.url }
+      };
+    }
+    default: {
+      const exhaustiveCheck = request;
+      return exhaustiveCheck;
+    }
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  handleRelayerOperation
+});
+//# sourceMappingURL=relayerHandler.cjs.map

package/dist/server/relayerHandler.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/relayerHandler.ts"],"sourcesContent":["import type { VanaInstance } from \"../index.node\";\nimport type {\n  UnifiedRelayerRequest,\n  UnifiedRelayerResponse,\n  SignedRelayerRequest,\n  DirectRelayerRequest,\n} from \"../types/relayer\";\nimport type {\n  GenericTypedData,\n  PermissionGrantTypedData,\n  RevokePermissionTypedData,\n  TrustServerTypedData,\n  AddAndTrustServerTypedData,\n  ServerFilesAndPermissionTypedData,\n  TypedDataPrimaryType,\n} from \"../types/permissions\";\nimport { SignatureError } from \"../errors\";\nimport { recoverTypedDataAddress, getAddress, type Hash } from \"viem\";\n\n/**\n * Universal handler for all relayer operations.\n *\n * This function processes both EIP-712 signed operations and direct operations,\n * automatically routing to the appropriate SDK methods.\n *\n * @param sdk - Initialized Vana SDK instance\n * @param request - The unified relayer request\n * @returns Promise resolving to operation-specific response\n *\n * @category Server\n * @example\n * ```typescript\n * // In your server endpoint (Next.js example):\n * import { handleRelayerOperation } from '@opendatalabs/vana-sdk/node';\n *\n * export async function POST(request: NextRequest) {\n *   try {\n *     const body = await request.json();\n *     const vana = getServerVanaInstance(); // Your server SDK instance\n *\n *     const result = await handleRelayerOperation(vana, body);\n *\n *     return NextResponse.json(result);\n *   } catch (error) {\n *     return NextResponse.json(\n *       { error: error.message },\n *       { status: 500 }\n *     );\n *   }\n * }\n * ```\n */\nexport async function handleRelayerOperation(\n  sdk: VanaInstance,\n  request: UnifiedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  // Handle signed operations (EIP-712)\n  if (request.type === \"signed\") {\n    return handleSignedOperation(sdk, request);\n  }\n\n  // Handle direct operations (non-signed)\n  return handleDirectOperation(sdk, request);\n}\n\n/**\n * Handle EIP-712 signed operations with full type safety\n */\nasync function handleSignedOperation(\n  sdk: VanaInstance,\n  request: SignedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  const { typedData, signature, expectedUserAddress } = request;\n\n  // Step 1: Verify the signature (security check)\n  let recoveredAddress: `0x${string}`;\n  try {\n    recoveredAddress = await recoverTypedDataAddress({\n      domain: {\n        ...typedData.domain,\n        chainId: typedData.domain.chainId\n          ? BigInt(typedData.domain.chainId)\n          : undefined,\n      },\n      types: typedData.types,\n      primaryType: typedData.primaryType,\n      message: typedData.message as unknown as Record<string, unknown>,\n      signature,\n    });\n  } catch (error) {\n    // Handle signature verification errors\n    throw new SignatureError(\n      `Signature verification failed: ${error instanceof Error ? error.message : \"Unknown error\"}`,\n    );\n  }\n\n  // Optional security check: Verify the signer matches expected address\n  if (expectedUserAddress) {\n    const normalizedExpected = getAddress(expectedUserAddress);\n    const normalizedSigner = getAddress(recoveredAddress);\n\n    if (normalizedSigner !== normalizedExpected) {\n      throw new SignatureError(\n        `Security verification failed: Recovered signer address (${normalizedSigner}) does not match expected user address (${normalizedExpected})`,\n      );\n    }\n  }\n\n  // Step 2: Route to appropriate SDK method based on primaryType\n  // Using proper type narrowing instead of unsafe casts\n  const result = await routeSignedOperation(sdk, typedData, signature);\n\n  // Return the transaction hash with type\n  return {\n    type: \"signed\",\n    hash: result.hash,\n  };\n}\n\n/**\n * Route signed operations to the appropriate SDK method with type safety\n */\nasync function routeSignedOperation(\n  sdk: VanaInstance,\n  typedData: GenericTypedData,\n  signature: Hash,\n) {\n  const primaryType = typedData.primaryType as TypedDataPrimaryType;\n\n  // Type-safe routing based on primaryType\n  switch (primaryType) {\n    case \"Permission\":\n      // TypeScript knows this is a Permission operation\n      return sdk.permissions.submitSignedGrant(\n        {\n          ...typedData,\n          primaryType: \"Permission\",\n        } as PermissionGrantTypedData,\n        signature,\n      );\n\n    case \"RevokePermission\":\n      return sdk.permissions.submitSignedRevoke(\n        {\n          ...typedData,\n          primaryType: \"RevokePermission\",\n        } as RevokePermissionTypedData,\n        signature,\n      );\n\n    case \"TrustServer\":\n      return sdk.permissions.submitSignedTrustServer(\n        {\n          ...typedData,\n          primaryType: \"TrustServer\",\n        } as TrustServerTypedData,\n        signature,\n      );\n\n    case \"AddServer\":\n      return sdk.permissions.submitSignedAddAndTrustServer(\n        {\n          ...typedData,\n          primaryType: \"AddServer\",\n        } as AddAndTrustServerTypedData,\n        signature,\n      );\n\n    case \"UntrustServer\":\n      return sdk.permissions.submitSignedUntrustServer(\n        {\n          ...typedData,\n          primaryType: \"UntrustServer\",\n        } as GenericTypedData,\n        signature,\n      );\n\n    case \"ServerFilesAndPermission\":\n      return sdk.permissions.submitSignedAddServerFilesAndPermissions(\n        {\n          ...typedData,\n          primaryType: \"ServerFilesAndPermission\",\n        } as ServerFilesAndPermissionTypedData,\n        signature,\n      );\n\n    // TODO: RegisterGrantee with signature is not supported until\n    // DataPortabilityGrantees contract adds registerGranteeWithSignature function\n    // case \"RegisterGrantee\":\n    //   return sdk.permissions.submitSignedRegisterGrantee(...);\n\n    default:\n      throw new Error(`Unsupported operation type: ${typedData.primaryType}`);\n  }\n}\n\n/**\n * Handle direct (non-signed) operations\n */\nasync function handleDirectOperation(\n  sdk: VanaInstance,\n  request: DirectRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  switch (request.operation) {\n    case \"submitFileAddition\": {\n      const { url, userAddress } = request.params;\n\n      // Use SDK to add file with no permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        [], // No permissions\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionWithPermissions\": {\n      const { url, userAddress, permissions } = request.params;\n\n      // Use SDK to add file with permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        permissions,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionComplete\": {\n      const { url, userAddress, permissions, schemaId, ownerAddress } =\n        request.params;\n\n      // Permissions are already encrypted, use the appropriate method\n      // No mapping needed - permissions already have { account, key } format\n      const result = await sdk.data.addFileWithEncryptedPermissionsAndSchema(\n        url,\n        ownerAddress ?? userAddress,\n        permissions, // Already in correct format with encrypted 'key' field\n        schemaId,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"storeGrantFile\": {\n      const grantFile = request.params;\n\n      // Store grant file using SDK's data controller\n      // Convert grant file to blob for storage\n      const blob = new Blob([JSON.stringify(grantFile)], {\n        type: \"application/json\",\n      });\n\n      // Upload using the data controller\n      const result = await sdk.data.upload({\n        content: blob,\n        filename: `grant-${Date.now()}.json`,\n      });\n\n      return {\n        type: \"direct\",\n        result: { url: result.url },\n      };\n    }\n\n    default: {\n      // TypeScript exhaustiveness check - ensures all cases are handled at compile time\n      const exhaustiveCheck: never = request;\n      // Return exhaustiveCheck to satisfy TypeScript while throwing an error\n      // This should never be reached if all cases are handled\n      return exhaustiveCheck;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBA,oBAA+B;AAC/B,kBAA+D;AAmC/D,eAAsB,uBACpB,KACA,SACiC;AAEjC,MAAI,QAAQ,SAAS,UAAU;AAC7B,WAAO,sBAAsB,KAAK,OAAO;AAAA,EAC3C;AAGA,SAAO,sBAAsB,KAAK,OAAO;AAC3C;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,QAAM,EAAE,WAAW,WAAW,oBAAoB,IAAI;AAGtD,MAAI;AACJ,MAAI;AACF,uBAAmB,UAAM,qCAAwB;AAAA,MAC/C,QAAQ;AAAA,QACN,GAAG,UAAU;AAAA,QACb,SAAS,UAAU,OAAO,UACtB,OAAO,UAAU,OAAO,OAAO,IAC/B;AAAA,MACN;AAAA,MACA,OAAO,UAAU;AAAA,MACjB,aAAa,UAAU;AAAA,MACvB,SAAS,UAAU;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,UAAM,IAAI;AAAA,MACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,IAC5F;AAAA,EACF;AAGA,MAAI,qBAAqB;AACvB,UAAM,yBAAqB,wBAAW,mBAAmB;AACzD,UAAM,uBAAmB,wBAAW,gBAAgB;AAEpD,QAAI,qBAAqB,oBAAoB;AAC3C,YAAM,IAAI;AAAA,QACR,2DAA2D,gBAAgB,2CAA2C,kBAAkB;AAAA,MAC1I;AAAA,IACF;AAAA,EACF;AAIA,QAAM,SAAS,MAAM,qBAAqB,KAAK,WAAW,SAAS;AAGnE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,OAAO;AAAA,EACf;AACF;AAKA,eAAe,qBACb,KACA,WACA,WACA;AACA,QAAM,cAAc,UAAU;AAG9B,UAAQ,aAAa;AAAA,IACnB,KAAK;AAEH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAOF;AACE,YAAM,IAAI,MAAM,+BAA+B,UAAU,WAAW,EAAE;AAAA,EAC1E;AACF;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,UAAQ,QAAQ,WAAW;AAAA,IACzB,KAAK,sBAAsB;AACzB,YAAM,EAAE,KAAK,YAAY,IAAI,QAAQ;AAGrC,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,CAAC;AAAA;AAAA,MACH;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,qCAAqC;AACxC,YAAM,EAAE,KAAK,aAAa,YAAY,IAAI,QAAQ;AAGlD,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,8BAA8B;AACjC,YAAM,EAAE,KAAK,aAAa,aAAa,UAAU,aAAa,IAC5D,QAAQ;AAIV,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,kBAAkB;AACrB,YAAM,YAAY,QAAQ;AAI1B,YAAM,OAAO,IAAI,KAAK,CAAC,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,QACjD,MAAM;AAAA,MACR,CAAC;AAGD,YAAM,SAAS,MAAM,IAAI,KAAK,OAAO;AAAA,QACnC,SAAS;AAAA,QACT,UAAU,SAAS,KAAK,IAAI,CAAC;AAAA,MAC/B,CAAC;AAED,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ,EAAE,KAAK,OAAO,IAAI;AAAA,MAC5B;AAAA,IACF;AAAA,IAEA,SAAS;AAEP,YAAM,kBAAyB;AAG/B,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}