@opentdf/sdk 0.1.0-beta.1701

package/dist/cjs/src/nanotdf/enum/CurveNameEnum.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * The Signature ECC Mode is used to determine the length of the signature at the end of a nanotdf. This, in
+ * combination with the previous HAS_SIGNATURE section, describe the signature of the nanotdf. The following table
+ * describes the valid values and the associated ECC Params.
+ */
+var CurveNameEnum;
+(function (CurveNameEnum) {
+    CurveNameEnum[CurveNameEnum["SECP256R1"] = 0] = "SECP256R1";
+    CurveNameEnum[CurveNameEnum["SECP384R1"] = 1] = "SECP384R1";
+    CurveNameEnum[CurveNameEnum["SECP521R1"] = 2] = "SECP521R1";
+})(CurveNameEnum || (CurveNameEnum = {}));
+exports.default = CurveNameEnum;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQ3VydmVOYW1lRW51bS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9uYW5vdGRmL2VudW0vQ3VydmVOYW1lRW51bS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUFBOzs7O0dBSUc7QUFDSCxJQUFLLGFBSUo7QUFKRCxXQUFLLGFBQWE7SUFDaEIsMkRBQVMsQ0FBQTtJQUNULDJEQUFTLENBQUE7SUFDVCwyREFBUyxDQUFBO0FBQ1gsQ0FBQyxFQUpJLGFBQWEsS0FBYixhQUFhLFFBSWpCO0FBRUQsa0JBQWUsYUFBYSxDQUFDIn0=

package/dist/cjs/src/nanotdf/enum/EncodingEnum.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var EncodingEnum;
+(function (EncodingEnum) {
+    EncodingEnum["Base64"] = "base64";
+})(EncodingEnum || (EncodingEnum = {}));
+exports.default = EncodingEnum;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiRW5jb2RpbmdFbnVtLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vc3JjL25hbm90ZGYvZW51bS9FbmNvZGluZ0VudW0udHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFBQSxJQUFLLFlBRUo7QUFGRCxXQUFLLFlBQVk7SUFDZixpQ0FBaUIsQ0FBQTtBQUNuQixDQUFDLEVBRkksWUFBWSxLQUFaLFlBQVksUUFFaEI7QUFFRCxrQkFBZSxZQUFZLENBQUMifQ==

package/dist/cjs/src/nanotdf/enum/PolicyTypeEnum.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var PolicyType;
+(function (PolicyType) {
+    PolicyType[PolicyType["Remote"] = 0] = "Remote";
+    PolicyType[PolicyType["EmbeddedText"] = 1] = "EmbeddedText";
+    PolicyType[PolicyType["EmbeddedEncrypted"] = 2] = "EmbeddedEncrypted";
+    PolicyType[PolicyType["EmbeddedEncryptedPKA"] = 3] = "EmbeddedEncryptedPKA";
+})(PolicyType || (PolicyType = {}));
+exports.default = PolicyType;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUG9saWN5VHlwZUVudW0uanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvbmFub3RkZi9lbnVtL1BvbGljeVR5cGVFbnVtLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUEsSUFBSyxVQUtKO0FBTEQsV0FBSyxVQUFVO0lBQ2IsK0NBQU0sQ0FBQTtJQUNOLDJEQUFZLENBQUE7SUFDWixxRUFBaUIsQ0FBQTtJQUNqQiwyRUFBb0IsQ0FBQTtBQUN0QixDQUFDLEVBTEksVUFBVSxLQUFWLFVBQVUsUUFLZDtBQUVELGtCQUFlLFVBQVUsQ0FBQyJ9

package/dist/cjs/src/nanotdf/enum/ProtocolEnum.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var ProtocolEnum;
+(function (ProtocolEnum) {
+    ProtocolEnum[ProtocolEnum["Http"] = 0] = "Http";
+    ProtocolEnum[ProtocolEnum["Https"] = 1] = "Https";
+    ProtocolEnum[ProtocolEnum["SharedResourceDirectory"] = 15] = "SharedResourceDirectory";
+})(ProtocolEnum || (ProtocolEnum = {}));
+exports.default = ProtocolEnum;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUHJvdG9jb2xFbnVtLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vc3JjL25hbm90ZGYvZW51bS9Qcm90b2NvbEVudW0udHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFBQSxJQUFLLFlBSUo7QUFKRCxXQUFLLFlBQVk7SUFDZiwrQ0FBUSxDQUFBO0lBQ1IsaURBQVMsQ0FBQTtJQUNULHNGQUE2QixDQUFBO0FBQy9CLENBQUMsRUFKSSxZQUFZLEtBQVosWUFBWSxRQUloQjtBQUVELGtCQUFlLFlBQVksQ0FBQyJ9

package/dist/cjs/src/nanotdf/enum/ResourceLocatorIdentifierEnum.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var ResourceLocatorIdentifierEnum;
+(function (ResourceLocatorIdentifierEnum) {
+    ResourceLocatorIdentifierEnum[ResourceLocatorIdentifierEnum["None"] = 0] = "None";
+    ResourceLocatorIdentifierEnum[ResourceLocatorIdentifierEnum["TwoBytes"] = 2] = "TwoBytes";
+    ResourceLocatorIdentifierEnum[ResourceLocatorIdentifierEnum["EightBytes"] = 8] = "EightBytes";
+    ResourceLocatorIdentifierEnum[ResourceLocatorIdentifierEnum["ThirtyTwoBytes"] = 32] = "ThirtyTwoBytes";
+})(ResourceLocatorIdentifierEnum || (ResourceLocatorIdentifierEnum = {}));
+exports.default = ResourceLocatorIdentifierEnum;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUmVzb3VyY2VMb2NhdG9ySWRlbnRpZmllckVudW0uanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvbmFub3RkZi9lbnVtL1Jlc291cmNlTG9jYXRvcklkZW50aWZpZXJFbnVtLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUEsSUFBSyw2QkFLSjtBQUxELFdBQUssNkJBQTZCO0lBQ2hDLGlGQUFRLENBQUE7SUFDUix5RkFBWSxDQUFBO0lBQ1osNkZBQWMsQ0FBQTtJQUNkLHNHQUFtQixDQUFBO0FBQ3JCLENBQUMsRUFMSSw2QkFBNkIsS0FBN0IsNkJBQTZCLFFBS2pDO0FBRUQsa0JBQWUsNkJBQTZCLENBQUMifQ==

package/dist/cjs/src/nanotdf/helpers/calculateByCurve.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.lengthOfSignature = exports.lengthOfPublicKey = void 0;
+const EcCurves_js_1 = require("../models/EcCurves.js");
+/**
+ * Length of public key
+ *
+ * @param curveName CurveNameEnum
+ * @returns number length of the public key
+ */
+function lengthOfPublicKey(curveName) {
+    return Math.ceil((0, EcCurves_js_1.getCurveLength)(curveName) / 8);
+}
+exports.lengthOfPublicKey = lengthOfPublicKey;
+/**
+ * Length of signature
+ *
+ * ECDSA signatures are 2 times longer than the signer's private key for the curve used during the signing process.
+ * For example, for 256-bit elliptic curves (like secp256k1 ) the ECDSA signature is 512 bits (64 bytes) and for 521-bit
+ * curves (like secp521r1 ) the signature is 1042 bits.
+ *
+ * @param curveName CurveNameEnum
+ * @returns number length of the signature
+ */
+function lengthOfSignature(curveName) {
+    return Math.ceil(((0, EcCurves_js_1.getCurveLength)(curveName) * 2) / 8);
+}
+exports.lengthOfSignature = lengthOfSignature;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/src/nanotdf/helpers/getHkdfSalt.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_js_1 = require("../../nanotdf-crypto/index.js");
+async function getHkdfSalt(buffer) {
+    return {
+        hkdfSalt: await (0, index_js_1.digest)(index_js_1.enums.HashType.Sha256, buffer),
+        hkdfHash: index_js_1.enums.HashType.Sha256,
+    };
+}
+exports.default = getHkdfSalt;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZ2V0SGtkZlNhbHQuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvbmFub3RkZi9oZWxwZXJzL2dldEhrZGZTYWx0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBRUEsNERBQThEO0FBTy9DLEtBQUssVUFBVSxXQUFXLENBQUMsTUFBZ0M7SUFDeEUsT0FBTztRQUNMLFFBQVEsRUFBRSxNQUFNLElBQUEsaUJBQU0sRUFBQyxnQkFBSyxDQUFDLFFBQVEsQ0FBQyxNQUFNLEVBQUUsTUFBTSxDQUFDO1FBQ3JELFFBQVEsRUFBRSxnQkFBSyxDQUFDLFFBQVEsQ0FBQyxNQUFNO0tBQ2hDLENBQUM7QUFDSixDQUFDO0FBTEQsOEJBS0MifQ==

package/dist/cjs/src/nanotdf/index.js

@@ -0,0 +1,25 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultParams = exports.getHkdfSalt = exports.encryptDataset = exports.encrypt = exports.decrypt = exports.NanoTDF = exports.Header = exports.Client = void 0;
+// Don't export named values or the enduser will
+// have to call `const NanoTDF = require('nanotdf').default`
+var Client_js_1 = require("./Client.js");
+Object.defineProperty(exports, "Client", { enumerable: true, get: function () { return __importDefault(Client_js_1).default; } });
+var Header_js_1 = require("./models/Header.js");
+Object.defineProperty(exports, "Header", { enumerable: true, get: function () { return __importDefault(Header_js_1).default; } });
+var NanoTDF_js_1 = require("./NanoTDF.js");
+Object.defineProperty(exports, "NanoTDF", { enumerable: true, get: function () { return __importDefault(NanoTDF_js_1).default; } });
+var decrypt_js_1 = require("./decrypt.js");
+Object.defineProperty(exports, "decrypt", { enumerable: true, get: function () { return __importDefault(decrypt_js_1).default; } });
+var encrypt_js_1 = require("./encrypt.js");
+Object.defineProperty(exports, "encrypt", { enumerable: true, get: function () { return __importDefault(encrypt_js_1).default; } });
+var encrypt_dataset_js_1 = require("./encrypt-dataset.js");
+Object.defineProperty(exports, "encryptDataset", { enumerable: true, get: function () { return __importDefault(encrypt_dataset_js_1).default; } });
+var getHkdfSalt_js_1 = require("./helpers/getHkdfSalt.js");
+Object.defineProperty(exports, "getHkdfSalt", { enumerable: true, get: function () { return __importDefault(getHkdfSalt_js_1).default; } });
+var DefaultParams_js_1 = require("./models/DefaultParams.js");
+Object.defineProperty(exports, "DefaultParams", { enumerable: true, get: function () { return __importDefault(DefaultParams_js_1).default; } });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvbmFub3RkZi9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7QUFBQSxnREFBZ0Q7QUFDaEQsNERBQTREO0FBQzVELHlDQUFnRDtBQUF2QyxvSEFBQSxPQUFPLE9BQVU7QUFDMUIsZ0RBQXVEO0FBQTlDLG9IQUFBLE9BQU8sT0FBVTtBQUMxQiwyQ0FBa0Q7QUFBekMsc0hBQUEsT0FBTyxPQUFXO0FBQzNCLDJDQUFrRDtBQUF6QyxzSEFBQSxPQUFPLE9BQVc7QUFDM0IsMkNBQWtEO0FBQXpDLHNIQUFBLE9BQU8sT0FBVztBQUMzQiwyREFBaUU7QUFBeEQscUlBQUEsT0FBTyxPQUFrQjtBQUNsQywyREFBa0U7QUFBekQsOEhBQUEsT0FBTyxPQUFlO0FBQy9CLDhEQUFxRTtBQUE1RCxrSUFBQSxPQUFPLE9BQWlCIn0=

package/dist/cjs/src/nanotdf/interfaces/PolicyInterface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUG9saWN5SW50ZXJmYWNlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vc3JjL25hbm90ZGYvaW50ZXJmYWNlcy9Qb2xpY3lJbnRlcmZhY2UudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IiJ9

package/dist/cjs/src/nanotdf/models/Ciphers.js

@@ -0,0 +1,61 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getBitLength = exports.Aes256Gcm128 = exports.Aes256Gcm120 = exports.Aes256Gcm112 = exports.Aes256Gcm104 = exports.Aes256Gcm96 = exports.Aes256Gcm64 = void 0;
+const CipherEnum_js_1 = __importDefault(require("../enum/CipherEnum.js"));
+const errors_js_1 = require("../../errors.js");
+exports.Aes256Gcm64 = {
+    name: CipherEnum_js_1.default.AES_256_GCM_64,
+    length: 64,
+};
+exports.Aes256Gcm96 = {
+    name: CipherEnum_js_1.default.AES_256_GCM_96,
+    length: 96,
+};
+exports.Aes256Gcm104 = {
+    name: CipherEnum_js_1.default.AES_256_GCM_104,
+    length: 104,
+};
+exports.Aes256Gcm112 = {
+    name: CipherEnum_js_1.default.AES_256_GCM_112,
+    length: 112,
+};
+exports.Aes256Gcm120 = {
+    name: CipherEnum_js_1.default.AES_256_GCM_120,
+    length: 120,
+};
+exports.Aes256Gcm128 = {
+    name: CipherEnum_js_1.default.AES_256_GCM_128,
+    length: 128,
+};
+function getBitLength(cipher) {
+    switch (cipher) {
+        case CipherEnum_js_1.default.AES_256_GCM_64:
+            return exports.Aes256Gcm64.length;
+        case CipherEnum_js_1.default.AES_256_GCM_96:
+            return exports.Aes256Gcm96.length;
+        case CipherEnum_js_1.default.AES_256_GCM_104:
+            return exports.Aes256Gcm104.length;
+        case CipherEnum_js_1.default.AES_256_GCM_112:
+            return exports.Aes256Gcm112.length;
+        case CipherEnum_js_1.default.AES_256_GCM_120:
+            return exports.Aes256Gcm120.length;
+        case CipherEnum_js_1.default.AES_256_GCM_128:
+            return exports.Aes256Gcm128.length;
+        default:
+            throw new errors_js_1.UnsupportedFeatureError(`unsupported cipher enum value: [${cipher}]`);
+    }
+}
+exports.getBitLength = getBitLength;
+// export default {
+//   Aes256Gcm64,
+//   Aes256Gcm96,
+//   Aes256Gcm104,
+//   Aes256Gcm112,
+//   Aes256Gcm120,
+//   Aes256Gcm128,
+//   getBitLength,
+// };
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/src/nanotdf/models/DefaultParams.js

@@ -0,0 +1,27 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const CipherEnum_js_1 = __importDefault(require("../enum/CipherEnum.js"));
+const CurveNameEnum_js_1 = __importDefault(require("../enum/CurveNameEnum.js"));
+const PolicyTypeEnum_js_1 = __importDefault(require("../enum/PolicyTypeEnum.js"));
+const enc = new TextEncoder();
+/**
+ * Default encrypt param builders
+ *
+ * @link https://github.com/virtru/tdf3-cpp/blob/develop/tdf3-src/lib/src/nanotdf_builder_impl.h
+ */
+const DefaultParams = {
+    ecdsaBinding: false,
+    ephemeralCurveName: CurveNameEnum_js_1.default.SECP256R1,
+    magicNumberVersion: enc.encode('L1L'),
+    offlineMode: false,
+    policyType: PolicyTypeEnum_js_1.default.EmbeddedEncrypted,
+    signature: false,
+    signatureCurveName: CurveNameEnum_js_1.default.SECP256R1,
+    symmetricCipher: CipherEnum_js_1.default.AES_256_GCM_96,
+    defaultECAlgorithm: 'ec:secp256r1',
+};
+exports.default = DefaultParams;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiRGVmYXVsdFBhcmFtcy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9uYW5vdGRmL21vZGVscy9EZWZhdWx0UGFyYW1zLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7O0FBQUEsMEVBQStDO0FBQy9DLGdGQUFxRDtBQUNyRCxrRkFBdUQ7QUFFdkQsTUFBTSxHQUFHLEdBQUcsSUFBSSxXQUFXLEVBQUUsQ0FBQztBQUU5Qjs7OztHQUlHO0FBQ0gsTUFBTSxhQUFhLEdBQUc7SUFDcEIsWUFBWSxFQUFFLEtBQUs7SUFDbkIsa0JBQWtCLEVBQUUsMEJBQWEsQ0FBQyxTQUFTO0lBQzNDLGtCQUFrQixFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDO0lBQ3JDLFdBQVcsRUFBRSxLQUFLO0lBQ2xCLFVBQVUsRUFBRSwyQkFBYyxDQUFDLGlCQUFpQjtJQUM1QyxTQUFTLEVBQUUsS0FBSztJQUNoQixrQkFBa0IsRUFBRSwwQkFBYSxDQUFDLFNBQVM7SUFDM0MsZUFBZSxFQUFFLHVCQUFVLENBQUMsY0FBYztJQUMxQyxrQkFBa0IsRUFBRSxjQUFjO0NBQ25DLENBQUM7QUFFRixrQkFBZSxhQUFhLENBQUMifQ==

package/dist/cjs/src/nanotdf/models/EcCurves.js

@@ -0,0 +1,39 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCurveLength = exports.Secp521R1 = exports.Secp384R1 = exports.Secp256R1 = void 0;
+const CurveNameEnum_js_1 = __importDefault(require("../enum/CurveNameEnum.js"));
+const errors_js_1 = require("../../errors.js");
+exports.Secp256R1 = {
+    name: CurveNameEnum_js_1.default.SECP256R1,
+    length: 256,
+};
+exports.Secp384R1 = {
+    name: CurveNameEnum_js_1.default.SECP384R1,
+    length: 384,
+};
+exports.Secp521R1 = {
+    name: CurveNameEnum_js_1.default.SECP521R1,
+    length: 521,
+};
+/**
+ * Get size from Curve
+ *
+ * @param curveName CurveNameEnum name of the curve
+ */
+function getCurveLength(curveName) {
+    switch (curveName) {
+        case exports.Secp256R1.name:
+            return exports.Secp256R1.length;
+        case exports.Secp384R1.name:
+            return exports.Secp384R1.length;
+        case exports.Secp521R1.name:
+            return exports.Secp521R1.length;
+        default:
+            throw new errors_js_1.UnsupportedFeatureError(`unsupported curve name: ${curveName}`);
+    }
+}
+exports.getCurveLength = getCurveLength;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/src/nanotdf/models/Header.js

@@ -0,0 +1,255 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Models
+const Ciphers_js_1 = require("./Ciphers.js");
+const ResourceLocator_js_1 = __importDefault(require("./ResourceLocator.js"));
+const PolicyFactory_js_1 = __importDefault(require("./Policy/PolicyFactory.js"));
+// Helpers
+const calculateByCurve_js_1 = require("../helpers/calculateByCurve.js");
+const DefaultParams_js_1 = __importDefault(require("./DefaultParams.js"));
+const errors_js_1 = require("../../errors.js");
+const utils_js_1 = require("../../utils.js");
+/**
+ * NanoTDF Header
+ *
+ * The header section is intended to be sent to a KAS and is used by the KAS to derive the decryption key that can
+ * decrypts the nanotdf's payload. The Header is structured as follows:
+ *
+ * | Section                | Minimum Length (B) | Maximum Length (B) |
+ * |------------------------|--------------------|--------------------|
+ * | Magic Number + Version | 3                  | 3                  |
+ * | KAS (resource locator) | 3                  | 257                |
+ * | ECC Mode               | 1                  | 1                  |
+ * | Payload + Sig Mode     | 1                  | 1                  |
+ * | Policy                 | 3                  | 257                |
+ * | Ephemeral Key          | 33                 | 67                 |
+ *
+ */
+class Header {
+    static parse(buff) {
+        let offset = 0;
+        /**
+         * Magic number and version
+         *
+         * @link https://github.com/virtru/nanotdf/blob/master/spec/index.md#3311-magic-number--version
+         */
+        // Convert to ascii
+        const magicNumberVersion = buff.subarray(Header.MAGIC_NUMBER_VERSION_BYTE_OFF, Header.MAGIC_NUMBER_VERSION_BYTE_LEN);
+        offset += Header.MAGIC_NUMBER_VERSION_BYTE_LEN;
+        /**
+         * KAS Resource Locator
+         *
+         * KAS is a typeof Resource Locator
+         *
+         * @link https://github.com/virtru/nanotdf/blob/master/spec/index.md#3312-kas
+         * @link https://github.com/virtru/nanotdf/blob/master/spec/index.md#341-resource-locator
+         */
+        const kas = ResourceLocator_js_1.default.parse(buff.subarray(offset));
+        offset += kas.length;
+        /**
+         * ECC & Binding Mode
+         *
+         * This section contains a 1-byte bitfield describing the ECC Params and Policy binding strategy to use.
+         * The Policy Binding strategy is either using a 64-bit GMAC (using AES-256-GCM) tag or an ECDSA signature.
+         * The signature size depends on the size of ECC Params used. The nanotdf at this time only supports methods that
+         * involve Elliptic Curve Cryptography. The fields are structured as follows:
+         *
+         * | Section                   | Bit Length | Bit start index |
+         * |---------------------------|------------|-----------------|
+         * | USE_ECDSA_BINDING         | 1          | 7               |
+         * | UNUSED                    | 4          | 3               |
+         * | Ephemeral ECC Params Enum | 3          | 0               |
+         *
+         * @link https://github.com/virtru/nanotdf/blob/master/spec/index.md#3313-ecc-and-binding-mode
+         */
+        const eccBindingModeDV = buff.subarray(offset, offset + Header.ECC_BINDING_MODE_BYTE_LEN);
+        const useECDSABinding = eccBindingModeDV[0] >> 7 === 1; // Last bit
+        const ephemeralCurveName = eccBindingModeDV[0] & 0x7; // First 3 bits
+        offset += Header.ECC_BINDING_MODE_BYTE_LEN;
+        /**
+         * Symmetric & payload config
+         *
+         * This section contains a 1 byte data structure composed of bitfields that describe the symmetric ciphers for
+         * encrypted payloads. This cipher applies to both the Payload and the Policy of the nanotdf. The fields are as
+         * follows:
+         *
+         * | Section               | Bit Length | Bit start index |
+         * |-----------------------|------------|-----------------|
+         * | HAS_SIGNATURE         | 1          | 7               |
+         * | Signature ECC Mode    | 3          | 4               |
+         * | Symmetric Cipher Enum | 4          | 0               |
+         *
+         * @link https://github.com/virtru/nanotdf/blob/master/spec/index.md#3314-symmetric-and-payload-config
+         */
+        const symmetricPayloadDV = buff.subarray(offset, offset + Header.ECC_BINDING_MODE_BYTE_LEN);
+        const hasSignature = symmetricPayloadDV[0] >> 7 === 1; // Last bit
+        const signatureCurveName = (symmetricPayloadDV[0] >> 4) & 0x7; // Middle 3 bits
+        const symmetricCipher = symmetricPayloadDV[0] & 0xf; // First 4 bits
+        offset += Header.SYMMETRIC_PAYLOAD_CONFIG_BYTE_LEN;
+        /**
+         * Policy
+         *
+         * This section contains a Policy object. The data contained in the Policy allows for definition flexible
+         * definitions of a policy including a policy by reference, or an embedded policy. Refer to the Policy object's
+         * definition in Section 3.4.2
+         *
+         * The structure of the Policy is as follows:
+         *
+         * | Section   | Minimum Length (B) | Maximum Length (B) |
+         * |-----------|--------------------|--------------------|
+         * | Type Enum | 1                  | 1                  |
+         * | Body      | 3                  | 257                |
+         * | Binding   | 8                  | 132                |
+         *
+         * @link https://github.com/virtru/nanotdf/blob/master/spec/index.md#3315-policy
+         * @link https://github.com/virtru/nanotdf/blob/master/spec/index.md#342-policy
+         */
+        const { policy, offset: nextOffset } = PolicyFactory_js_1.default.parse(buff.subarray(offset), useECDSABinding, ephemeralCurveName);
+        offset += nextOffset;
+        /**
+         * Ephemeral public key
+         *
+         * This section contains a Key object. The size of the key is determined by the Encryption Method Section.
+         *
+         * @link https://github.com/virtru/nanotdf/blob/master/spec/index.md#3316-key
+         */
+        // TODO: Resolve where offset isn't adding 1 byte
+        const ephemeralPublicKeyLength = (0, calculateByCurve_js_1.lengthOfPublicKey)(ephemeralCurveName) + 1;
+        const ephemeralPublicKey = buff.subarray(offset, offset + ephemeralPublicKeyLength);
+        offset += ephemeralPublicKeyLength;
+        // Check if the ephemeral public key length is not the same length
+        if (ephemeralPublicKey.byteLength !== ephemeralPublicKeyLength) {
+            throw new errors_js_1.InvalidFileError('nanotdf parse failure: public key read failure');
+        }
+        const header = new Header(magicNumberVersion, kas, useECDSABinding, ephemeralCurveName, hasSignature, signatureCurveName, symmetricCipher, policy, ephemeralPublicKey);
+        return {
+            header,
+            offset,
+        };
+    }
+    //Ephemeral Public Key
+    // protected _ephemeralPublicKey: string | null = null;
+    constructor(magicNumberVersion, kas, useECDSABinding, ephemeralCurveName, hasSignature, signatureCurveName, symmetricCipher, policy, ephemeralPublicKey) {
+        // Magic Number & Version
+        this.magicNumberVersion = DefaultParams_js_1.default.magicNumberVersion;
+        // ECC & Binding Mode
+        this.useECDSABinding = DefaultParams_js_1.default.ecdsaBinding;
+        this.ephemeralCurveName = DefaultParams_js_1.default.ephemeralCurveName;
+        // Symmetric & Payload Config
+        this.hasSignature = DefaultParams_js_1.default.signature;
+        this.signatureCurveName = DefaultParams_js_1.default.signatureCurveName;
+        this.symmetricCipher = DefaultParams_js_1.default.symmetricCipher;
+        this.magicNumberVersion = magicNumberVersion;
+        this.kas = kas;
+        this.useECDSABinding = useECDSABinding;
+        this.ephemeralCurveName = ephemeralCurveName;
+        this.hasSignature = hasSignature;
+        this.signatureCurveName = signatureCurveName;
+        this.symmetricCipher = symmetricCipher;
+        this.policy = policy;
+        this.ephemeralPublicKey = ephemeralPublicKey;
+        // Auth tag length in bits (i.e. AES GCM 64 bit)
+        this.authTagLength = (0, Ciphers_js_1.getBitLength)(this.symmetricCipher);
+    }
+    /**
+     * Copy the contents of the header to buffer
+     */
+    copyToBuffer(target) {
+        if (this.length > target.length) {
+            throw new errors_js_1.InvalidFileError('invalid buffer size to copy tdf header');
+        }
+        let offset = 0;
+        // Write Magic number and version
+        target.set(this.magicNumberVersion, 0);
+        offset += this.magicNumberVersion.length;
+        // Write kas resource locator
+        const kasResourceLocatorBuf = this.kas.toBuffer();
+        target.set(kasResourceLocatorBuf, offset);
+        offset += kasResourceLocatorBuf.length;
+        // Write ECC & Binding Mode
+        const ecdsaBinding = this.useECDSABinding ? 1 : 0;
+        const eccBingingMode = (ecdsaBinding << 7) | this.ephemeralCurveName;
+        const eccBingingModeAsByte = new Uint8Array(1);
+        eccBingingModeAsByte[0] = eccBingingMode;
+        target.set(eccBingingModeAsByte, offset);
+        offset += eccBingingModeAsByte.length;
+        // Write symmetric & payload config
+        const isSignatureEnable = this.hasSignature ? 1 : 0;
+        const symmetricPayloadConfig = (isSignatureEnable << 7) | this.signatureCurveName | this.symmetricCipher;
+        const symmetricPayloadConfigAsByte = new Uint8Array(1);
+        symmetricPayloadConfigAsByte[0] = symmetricPayloadConfig;
+        target.set(symmetricPayloadConfigAsByte, offset);
+        offset += symmetricPayloadConfigAsByte.length;
+        // Write the policy
+        const policyBuffer = this.policy.toBuffer();
+        target.set(policyBuffer, offset);
+        offset += policyBuffer.length;
+        // Write the ephemeral public key
+        target.set(this.ephemeralPublicKey, offset);
+    }
+    /**
+     * Length
+     *
+     * @returns { number } Length of header
+     */
+    get length() {
+        return (
+        // Length of the magic number and version
+        this.magicNumberVersion.length +
+            // Length of the KAS resource locator
+            this.kas.length +
+            // ECC & Binding Mode - 1 Bytes
+            1 +
+            // symmetric & payload config - 1 Bytes
+            1 +
+            // Length of the policy
+            this.policy.getLength() +
+            // Length of the ephemeral public key
+            this.ephemeralPublicKey.length);
+    }
+    /**
+     * Return nanoTDF header as buffer
+     *
+     * Warning: This method will allocate memory of length of the header, use
+     * copyToBuffer() when copy is not needed.
+     */
+    toBuffer() {
+        const arrayBuffer = new ArrayBuffer(this.length);
+        const target = new Uint8Array(arrayBuffer);
+        this.copyToBuffer(target);
+        return arrayBuffer;
+    }
+    /**
+     * Get KAS Rewrap URL
+     */
+    getKasRewrapUrl() {
+        try {
+            return `${(0, utils_js_1.rstrip)(this.kas.url, '/')}/v2/rewrap`;
+        }
+        catch (e) {
+            throw new errors_js_1.ConfigurationError(`cannot construct KAS Rewrap URL: ${e.message}`);
+        }
+    }
+}
+// Magic Number & Version
+Header.MAGIC_NUMBER_VERSION_BYTE_OFF = 0;
+Header.MAGIC_NUMBER_VERSION_BYTE_LEN = 3;
+Header.MAGIC_NUMBER_OFFSET = 0;
+Header.MAGIC_NUMBER_LENGTH = 18;
+// ECC & Binding Mode
+Header.ECC_BINDING_MODE_BYTE_LEN = 1;
+Header.USE_ECDSA_BINDING_BIT_OFF = 0;
+Header.EPHEMERAL_ECC_CURVE_NAME_BIT_OFF = -3;
+// Symmetric & Payload Config
+Header.SYMMETRIC_PAYLOAD_CONFIG_BYTE_LEN = 1;
+Header.HAS_SIGNATURE_BIT_OFF = 1;
+Header.HAS_SIGNATURE_BIT_LEN = 1;
+Header.SIGNATURE_ECC_CURVE_NAME_BIT_OFF = 1;
+Header.SIGNATURE_ECC_CURVE_NAME_BIT_LEN = 3;
+Header.SYMMETRIC_CIPHER_BIT_OFF = 4;
+Header.SYMMETRIC_CIPHER_BIT_LEN = 4;
+exports.default = Header;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiSGVhZGVyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vc3JjL25hbm90ZGYvbW9kZWxzL0hlYWRlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUFBLFNBQVM7QUFDVCw2Q0FBNEM7QUFDNUMsOEVBQW1EO0FBQ25ELGlGQUFzRDtBQU10RCxVQUFVO0FBQ1Ysd0VBQW1FO0FBQ25FLDBFQUErQztBQUMvQywrQ0FBdUU7QUFDdkUsNkNBQXdDO0FBRXhDOzs7Ozs7Ozs7Ozs7Ozs7R0FlRztBQUNILE1BQXFCLE1BQU07SUE0Q3pCLE1BQU0sQ0FBQyxLQUFLLENBQUMsSUFBZ0I7UUFDM0IsSUFBSSxNQUFNLEdBQUcsQ0FBQyxDQUFDO1FBRWY7Ozs7V0FJRztRQUNILG1CQUFtQjtRQUNuQixNQUFNLGtCQUFrQixHQUFHLElBQUksQ0FBQyxRQUFRLENBQ3RDLE1BQU0sQ0FBQyw2QkFBNkIsRUFDcEMsTUFBTSxDQUFDLDZCQUE2QixDQUNyQyxDQUFDO1FBQ0YsTUFBTSxJQUFJLE1BQU0sQ0FBQyw2QkFBNkIsQ0FBQztRQUUvQzs7Ozs7OztXQU9HO1FBQ0gsTUFBTSxHQUFHLEdBQUcsNEJBQWUsQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDO1FBQ3pELE1BQU0sSUFBSSxHQUFHLENBQUMsTUFBTSxDQUFDO1FBRXJCOzs7Ozs7Ozs7Ozs7Ozs7V0FlRztRQUNILE1BQU0sZ0JBQWdCLEdBQUcsSUFBSSxDQUFDLFFBQVEsQ0FBQyxNQUFNLEVBQUUsTUFBTSxHQUFHLE1BQU0sQ0FBQyx5QkFBeUIsQ0FBQyxDQUFDO1FBQzFGLE1BQU0sZUFBZSxHQUFHLGdCQUFnQixDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxXQUFXO1FBQ25FLE1BQU0sa0JBQWtCLEdBQUcsZ0JBQWdCLENBQUMsQ0FBQyxDQUFDLEdBQUcsR0FBRyxDQUFDLENBQUMsZUFBZTtRQUNyRSxNQUFNLElBQUksTUFBTSxDQUFDLHlCQUF5QixDQUFDO1FBRTNDOzs7Ozs7Ozs7Ozs7OztXQWNHO1FBQ0gsTUFBTSxrQkFBa0IsR0FBRyxJQUFJLENBQUMsUUFBUSxDQUFDLE1BQU0sRUFBRSxNQUFNLEdBQUcsTUFBTSxDQUFDLHlCQUF5QixDQUFDLENBQUM7UUFDNUYsTUFBTSxZQUFZLEdBQUcsa0JBQWtCLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLFdBQVc7UUFDbEUsTUFBTSxrQkFBa0IsR0FBRyxDQUFDLGtCQUFrQixDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxHQUFHLEdBQUcsQ0FBQyxDQUFDLGdCQUFnQjtRQUMvRSxNQUFNLGVBQWUsR0FBRyxrQkFBa0IsQ0FBQyxDQUFDLENBQUMsR0FBRyxHQUFHLENBQUMsQ0FBQyxlQUFlO1FBQ3BFLE1BQU0sSUFBSSxNQUFNLENBQUMsaUNBQWlDLENBQUM7UUFFbkQ7Ozs7Ozs7Ozs7Ozs7Ozs7O1dBaUJHO1FBQ0gsTUFBTSxFQUFFLE1BQU0sRUFBRSxNQUFNLEVBQUUsVUFBVSxFQUFFLEdBQUcsMEJBQWEsQ0FBQyxLQUFLLENBQ3hELElBQUksQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDLEVBQ3JCLGVBQWUsRUFDZixrQkFBa0IsQ0FDbkIsQ0FBQztRQUNGLE1BQU0sSUFBSSxVQUFVLENBQUM7UUFFckI7Ozs7OztXQU1HO1FBQ0gsaURBQWlEO1FBQ2pELE1BQU0sd0JBQXdCLEdBQUcsSUFBQSx1Q0FBaUIsRUFBQyxrQkFBa0IsQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUMzRSxNQUFNLGtCQUFrQixHQUFHLElBQUksQ0FBQyxRQUFRLENBQUMsTUFBTSxFQUFFLE1BQU0sR0FBRyx3QkFBd0IsQ0FBQyxDQUFDO1FBQ3BGLE1BQU0sSUFBSSx3QkFBd0IsQ0FBQztRQUVuQyxrRUFBa0U7UUFDbEUsSUFBSSxrQkFBa0IsQ0FBQyxVQUFVLEtBQUssd0JBQXdCLEVBQUU7WUFDOUQsTUFBTSxJQUFJLDRCQUFnQixDQUFDLGdEQUFnRCxDQUFDLENBQUM7U0FDOUU7UUFFRCxNQUFNLE1BQU0sR0FBRyxJQUFJLE1BQU0sQ0FDdkIsa0JBQWtCLEVBQ2xCLEdBQUcsRUFDSCxlQUFlLEVBQ2Ysa0JBQWtCLEVBQ2xCLFlBQVksRUFDWixrQkFBa0IsRUFDbEIsZUFBZSxFQUNmLE1BQU0sRUFDTixrQkFBa0IsQ0FDbkIsQ0FBQztRQUVGLE9BQU87WUFDTCxNQUFNO1lBQ04sTUFBTTtTQUNQLENBQUM7SUFDSixDQUFDO0lBRUQsc0JBQXNCO0lBQ3RCLHVEQUF1RDtJQUV2RCxZQUNFLGtCQUE4QixFQUM5QixHQUFvQixFQUNwQixlQUF3QixFQUN4QixrQkFBaUMsRUFDakMsWUFBcUIsRUFDckIsa0JBQWlDLEVBQ2pDLGVBQTJCLEVBQzNCLE1BQXVCLEVBQ3ZCLGtCQUE4QjtRQW5LaEMseUJBQXlCO1FBQ2xCLHVCQUFrQixHQUFlLDBCQUFhLENBQUMsa0JBQWtCLENBQUM7UUFLekUscUJBQXFCO1FBQ2Qsb0JBQWUsR0FBWSwwQkFBYSxDQUFDLFlBQVksQ0FBQztRQUN0RCx1QkFBa0IsR0FBa0IsMEJBQWEsQ0FBQyxrQkFBa0IsQ0FBQztRQUU1RSw2QkFBNkI7UUFDdEIsaUJBQVksR0FBWSwwQkFBYSxDQUFDLFNBQVMsQ0FBQztRQUNoRCx1QkFBa0IsR0FBa0IsMEJBQWEsQ0FBQyxrQkFBa0IsQ0FBQztRQUNyRSxvQkFBZSxHQUFlLDBCQUFhLENBQUMsZUFBZSxDQUFDO1FBd0pqRSxJQUFJLENBQUMsa0JBQWtCLEdBQUcsa0JBQWtCLENBQUM7UUFDN0MsSUFBSSxDQUFDLEdBQUcsR0FBRyxHQUFHLENBQUM7UUFDZixJQUFJLENBQUMsZUFBZSxHQUFHLGVBQWUsQ0FBQztRQUN2QyxJQUFJLENBQUMsa0JBQWtCLEdBQUcsa0JBQWtCLENBQUM7UUFDN0MsSUFBSSxDQUFDLFlBQVksR0FBRyxZQUFZLENBQUM7UUFDakMsSUFBSSxDQUFDLGtCQUFrQixHQUFHLGtCQUFrQixDQUFDO1FBQzdDLElBQUksQ0FBQyxlQUFlLEdBQUcsZUFBZSxDQUFDO1FBQ3ZDLElBQUksQ0FBQyxNQUFNLEdBQUcsTUFBTSxDQUFDO1FBQ3JCLElBQUksQ0FBQyxrQkFBa0IsR0FBRyxrQkFBa0IsQ0FBQztRQUU3QyxnREFBZ0Q7UUFDaEQsSUFBSSxDQUFDLGFBQWEsR0FBRyxJQUFBLHlCQUFZLEVBQUMsSUFBSSxDQUFDLGVBQWUsQ0FBQyxDQUFDO0lBQzFELENBQUM7SUFFRDs7T0FFRztJQUNILFlBQVksQ0FBQyxNQUFrQjtRQUM3QixJQUFJLElBQUksQ0FBQyxNQUFNLEdBQUcsTUFBTSxDQUFDLE1BQU0sRUFBRTtZQUMvQixNQUFNLElBQUksNEJBQWdCLENBQUMsd0NBQXdDLENBQUMsQ0FBQztTQUN0RTtRQUVELElBQUksTUFBTSxHQUFHLENBQUMsQ0FBQztRQUVmLGlDQUFpQztRQUNqQyxNQUFNLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxrQkFBa0IsRUFBRSxDQUFDLENBQUMsQ0FBQztRQUN2QyxNQUFNLElBQUksSUFBSSxDQUFDLGtCQUFrQixDQUFDLE1BQU0sQ0FBQztRQUV6Qyw2QkFBNkI7UUFDN0IsTUFBTSxxQkFBcUIsR0FBRyxJQUFJLENBQUMsR0FBRyxDQUFDLFFBQVEsRUFBRSxDQUFDO1FBQ2xELE1BQU0sQ0FBQyxHQUFHLENBQUMscUJBQXFCLEVBQUUsTUFBTSxDQUFDLENBQUM7UUFDMUMsTUFBTSxJQUFJLHFCQUFxQixDQUFDLE1BQU0sQ0FBQztRQUV2QywyQkFBMkI7UUFDM0IsTUFBTSxZQUFZLEdBQUcsSUFBSSxDQUFDLGVBQWUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDbEQsTUFBTSxjQUFjLEdBQUcsQ0FBQyxZQUFZLElBQUksQ0FBQyxDQUFDLEdBQUcsSUFBSSxDQUFDLGtCQUFrQixDQUFDO1FBQ3JFLE1BQU0sb0JBQW9CLEdBQUcsSUFBSSxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDL0Msb0JBQW9CLENBQUMsQ0FBQyxDQUFDLEdBQUcsY0FBYyxDQUFDO1FBQ3pDLE1BQU0sQ0FBQyxHQUFHLENBQUMsb0JBQW9CLEVBQUUsTUFBTSxDQUFDLENBQUM7UUFDekMsTUFBTSxJQUFJLG9CQUFvQixDQUFDLE1BQU0sQ0FBQztRQUV0QyxtQ0FBbUM7UUFDbkMsTUFBTSxpQkFBaUIsR0FBRyxJQUFJLENBQUMsWUFBWSxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUNwRCxNQUFNLHNCQUFzQixHQUMxQixDQUFDLGlCQUFpQixJQUFJLENBQUMsQ0FBQyxHQUFHLElBQUksQ0FBQyxrQkFBa0IsR0FBRyxJQUFJLENBQUMsZUFBZSxDQUFDO1FBQzVFLE1BQU0sNEJBQTRCLEdBQUcsSUFBSSxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDdkQsNEJBQTRCLENBQUMsQ0FBQyxDQUFDLEdBQUcsc0JBQXNCLENBQUM7UUFDekQsTUFBTSxDQUFDLEdBQUcsQ0FBQyw0QkFBNEIsRUFBRSxNQUFNLENBQUMsQ0FBQztRQUNqRCxNQUFNLElBQUksNEJBQTRCLENBQUMsTUFBTSxDQUFDO1FBRTlDLG1CQUFtQjtRQUNuQixNQUFNLFlBQVksR0FBRyxJQUFJLENBQUMsTUFBTSxDQUFDLFFBQVEsRUFBRSxDQUFDO1FBQzVDLE1BQU0sQ0FBQyxHQUFHLENBQUMsWUFBWSxFQUFFLE1BQU0sQ0FBQyxDQUFDO1FBQ2pDLE1BQU0sSUFBSSxZQUFZLENBQUMsTUFBTSxDQUFDO1FBRTlCLGlDQUFpQztRQUNqQyxNQUFNLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxrQkFBa0IsRUFBRSxNQUFNLENBQUMsQ0FBQztJQUM5QyxDQUFDO0lBRUQ7Ozs7T0FJRztJQUNILElBQUksTUFBTTtRQUNSLE9BQU87UUFDTCx5Q0FBeUM7UUFDekMsSUFBSSxDQUFDLGtCQUFrQixDQUFDLE1BQU07WUFDOUIscUNBQXFDO1lBQ3JDLElBQUksQ0FBQyxHQUFHLENBQUMsTUFBTTtZQUNmLCtCQUErQjtZQUMvQixDQUFDO1lBQ0QsdUNBQXVDO1lBQ3ZDLENBQUM7WUFDRCx1QkFBdUI7WUFDdkIsSUFBSSxDQUFDLE1BQU0sQ0FBQyxTQUFTLEVBQUU7WUFDdkIscUNBQXFDO1lBQ3JDLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxNQUFNLENBQy9CLENBQUM7SUFDSixDQUFDO0lBRUQ7Ozs7O09BS0c7SUFDSCxRQUFRO1FBQ04sTUFBTSxXQUFXLEdBQUcsSUFBSSxXQUFXLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxDQUFDO1FBQ2pELE1BQU0sTUFBTSxHQUFHLElBQUksVUFBVSxDQUFDLFdBQVcsQ0FBQyxDQUFDO1FBQzNDLElBQUksQ0FBQyxZQUFZLENBQUMsTUFBTSxDQUFDLENBQUM7UUFDMUIsT0FBTyxXQUFXLENBQUM7SUFDckIsQ0FBQztJQUVEOztPQUVHO0lBQ0gsZUFBZTtRQUNiLElBQUk7WUFDRixPQUFPLEdBQUcsSUFBQSxpQkFBTSxFQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsR0FBRyxFQUFFLEdBQUcsQ0FBQyxZQUFZLENBQUM7U0FDakQ7UUFBQyxPQUFPLENBQUMsRUFBRTtZQUNWLE1BQU0sSUFBSSw4QkFBa0IsQ0FBQyxvQ0FBb0MsQ0FBQyxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUM7U0FDL0U7SUFDSCxDQUFDOztBQWhTRCx5QkFBeUI7QUFDVCxvQ0FBNkIsR0FBRyxDQUFDLEFBQUosQ0FBSztBQUNsQyxvQ0FBNkIsR0FBRyxDQUFDLEFBQUosQ0FBSztBQUNsQywwQkFBbUIsR0FBRyxDQUFDLEFBQUosQ0FBSztBQUN4QiwwQkFBbUIsR0FBRyxFQUFFLEFBQUwsQ0FBTTtBQUV6QyxxQkFBcUI7QUFDTCxnQ0FBeUIsR0FBRyxDQUFDLEFBQUosQ0FBSztBQUM5QixnQ0FBeUIsR0FBRyxDQUFDLEFBQUosQ0FBSztBQUM5Qix1Q0FBZ0MsR0FBRyxDQUFDLENBQUMsQUFBTCxDQUFNO0FBRXRELDZCQUE2QjtBQUNiLHdDQUFpQyxHQUFHLENBQUMsQUFBSixDQUFLO0FBQ3RDLDRCQUFxQixHQUFHLENBQUMsQUFBSixDQUFLO0FBQzFCLDRCQUFxQixHQUFHLENBQUMsQUFBSixDQUFLO0FBQzFCLHVDQUFnQyxHQUFHLENBQUMsQUFBSixDQUFLO0FBQ3JDLHVDQUFnQyxHQUFHLENBQUMsQUFBSixDQUFLO0FBQ3JDLCtCQUF3QixHQUFHLENBQUMsQUFBSixDQUFLO0FBQzdCLCtCQUF3QixHQUFHLENBQUMsQUFBSixDQUFLO2tCQW5CMUIsTUFBTSJ9