@owf/cose 0.1.0 → 0.2.0-alpha-20260508112151

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["z","z","z","#data","#buffer","addExtension","addExtension","addExtension","z","z","z","addExtension"],"sources":["../src/utils/zod-error.ts","../src/utils/zod.ts","../src/cbor/parser.ts","../src/cbor/data-item.ts","../src/cbor/cbor-structure.ts","../src/cbor/models/date.ts","../src/cbor/models/date-only.ts","../src/cose/claims/default.ts","../src/cose/error.ts","../src/cose/headers/defaults.ts","../src/cose/headers/protected-headers.ts","../src/cose/headers/unprotected-headers.ts","../src/cose/key/curve.ts","../src/cose/key/key-operation.ts","../src/cose/key/key-type.ts","../src/cose/key/jwk.ts","../src/cose/mac0.ts","../src/utils/typed-map.ts","../src/cose/key/key.ts","../src/cose/sign1.ts","../src/cose/cwt.ts"],"sourcesContent":["import z from 'zod'\nimport { createErrorMap, fromError } from 'zod-validation-error'\n\nz.config({\n  customError: createErrorMap(),\n})\n\nfunction formatZodError(error?: z.ZodError): string {\n  if (!error) return ''\n\n  return fromError(error, {\n    prefix: '',\n    prefixSeparator: '✖ ',\n    issueSeparator: '\\n✖ ',\n    unionSeparator: '\\n    OR ✖ ',\n  }).toString()\n}\n\nimport type { ZodError } from 'zod'\n\nexport class ValidationError extends Error {\n  public zodError: ZodError | undefined\n\n  constructor(message: string, zodError?: ZodError) {\n    super(message)\n\n    const formattedError = zodError ? formatZodError(zodError) : ''\n    this.message = `${message}\\n${formattedError}`\n\n    Object.defineProperty(this, 'zodError', {\n      value: zodError,\n      writable: false,\n      enumerable: false,\n    })\n  }\n}\n","import z from 'zod'\nimport type { $ZodType } from 'zod/v4/core'\nimport { ValidationError } from './zod-error'\n\nexport const zUint8Array = z.instanceof<typeof Uint8Array<ArrayBufferLike>>(Uint8Array)\n\n// biome-ignore lint/suspicious/noExplicitAny: no explanation\ntype ZodTypeAny = $ZodType<any, any, any>\n\nexport function parseStructureWithErrorHandling<Schema extends ZodTypeAny>(\n  structureName: string,\n  schema: Schema,\n  data: unknown,\n  customErrorMessage?: string\n): z.infer<Schema> {\n  const parseResult = z.safeParse(schema, data)\n\n  if (!parseResult.success) {\n    throw new ValidationError(customErrorMessage ?? `Error decoding ${structureName}`, parseResult.error)\n  }\n\n  return parseResult.data\n}\n\nexport function decodeStructureWithErrorHandling<Schema extends ZodTypeAny>(\n  structureName: string,\n  schema: Schema,\n  data: z.input<Schema>,\n  customErrorMessage?: string\n): z.infer<Schema> {\n  const decodeResult = z.safeDecode(schema, data)\n\n  if (!decodeResult.success) {\n    throw new ValidationError(customErrorMessage ?? `Error decoding ${structureName}`, decodeResult.error)\n  }\n\n  return decodeResult.data\n}\n\nexport function encodeStructureWithErrorHandling<Schema extends ZodTypeAny>(\n  structureName: string,\n  schema: Schema,\n  data: z.output<Schema>,\n  customErrorMessage?: string\n): z.input<Schema> {\n  const encodeResult = z.safeEncode(schema, data)\n\n  if (!encodeResult.success) {\n    throw new ValidationError(customErrorMessage ?? `Error encoding ${structureName}`, encodeResult.error)\n  }\n\n  return encodeResult.data\n}\n","import { Encoder, type Options } from 'cbor-x'\nimport { DataItem } from './data-item'\n\nexport type CborOptions = Options & {\n  unwrapTopLevelDataItem?: boolean\n}\n\nconst encoderDefaults: CborOptions = {\n  tagUint8Array: false,\n  useRecords: false,\n  mapsAsObjects: false,\n  unwrapTopLevelDataItem: true,\n  variableMapSize: true,\n}\n\nexport const cborDecode = <T>(input: Uint8Array, options: CborOptions = encoderDefaults): T => {\n  const params = { ...encoderDefaults, ...options }\n  const enc = new Encoder(params)\n  const decoded = enc.decode(input)\n  return params.unwrapTopLevelDataItem && typeof decoded === 'object' && decoded instanceof DataItem\n    ? (decoded.data as T)\n    : (decoded as T)\n}\n\nexport const cborEncode = (obj: unknown, options: Options = encoderDefaults): Uint8Array => {\n  const params = { ...encoderDefaults, ...options }\n  const enc = new Encoder(params)\n  return Uint8Array.from(enc.encode(obj))\n}\n","import { addExtension } from 'cbor-x'\nimport z from 'zod'\nimport { cborDecode, cborEncode } from './parser'\n\nexport const zDataItemCodec = (outputSchema: z.ZodType) =>\n  z.codec(z.instanceof(DataItem), outputSchema, {\n    encode: (data) => DataItem.fromData(data),\n    decode: (dataItem) => dataItem.data,\n  })\n\nexport type DataItemOptions<T = unknown> =\n  | {\n      data: T\n      buffer: Uint8Array\n    }\n  | { data: T }\n  | { buffer: Uint8Array }\n\n/**\n * DataItem is an extension defined https://www.rfc-editor.org/rfc/rfc8949.html#name-encoded-cbor-data-item\n *  > Sometimes it is beneficial to carry an embedded CBOR data item that is\n *  > not meant to be decoded immediately at the time the enclosing data item is being decoded.\n *\n * The idea of this class is to provide lazy encode and decode of cbor data.\n *\n * Due to a bug in the cbor-x library, we are eagerly encoding the data in the constructor.\n * https://github.com/kriszyp/cbor-x/issues/83\n *\n */\nexport class DataItem<T = unknown> {\n  #data?: T\n  #buffer: Uint8Array\n\n  public constructor(options: DataItemOptions<T>) {\n    if (!('data' in options) && !('buffer' in options)) {\n      throw new Error('DataItem must be initialized with either the data or a buffer')\n    }\n\n    if ('data' in options) this.#data = options.data\n    this.#buffer = 'buffer' in options ? options.buffer : cborEncode(options.data)\n  }\n\n  public get data(): T {\n    if (!this.#data) {\n      this.#data = cborDecode(this.#buffer) as T\n    }\n    return this.#data\n  }\n\n  public get buffer(): Uint8Array {\n    return this.#buffer\n  }\n\n  public static fromData<T>(data: T): DataItem<T> {\n    return new DataItem({ data })\n  }\n\n  public static fromBuffer<T>(buffer: Uint8Array): DataItem<T> {\n    return new DataItem({ buffer })\n  }\n}\n\naddExtension({\n  Class: DataItem,\n  tag: 24,\n  encode: (instance: DataItem<unknown>, encode) => {\n    return encode(instance.buffer)\n  },\n  decode: (buffer: Uint8Array): object => {\n    return DataItem.fromBuffer(buffer)\n  },\n})\n","// biome-ignore-all lint: @biomejs/biome seems to change the `new this(...)` calls into `new CborStructure(...)` which seems to cause a bug for this specific use case. We cannot alias to `thiz` or disable a specific rule\n\nimport { Tag } from 'cbor-x'\nimport { z } from 'zod'\nimport {\n  decodeStructureWithErrorHandling,\n  encodeStructureWithErrorHandling,\n  parseStructureWithErrorHandling,\n} from '../utils/zod'\nimport { DataItem } from './data-item'\nimport { cborDecode, cborEncode } from './parser'\n\nexport type CborEncodeOptions = {\n  asDataItem?: boolean\n}\n\nexport type AnyCborStructure = CborStructure<any, any>\nexport type EncodedStructureType<T> = T extends CborStructure<infer EncodedStructure, unknown> ? EncodedStructure : any\nexport type DecodedStructureType<T> = T extends CborStructure<unknown, infer DecodedStructure> ? DecodedStructure : any\n\nexport type CborStructureStaticThis<T extends AnyCborStructure> = {\n  new (structure: any): T\n  encodingSchema: z.ZodType<any, any, any> | undefined\n  fromEncodedStructure: (encodedStructure: EncodedStructureType<T>) => { decodedStructure: DecodedStructureType<T> }\n}\n\nexport class CborStructure<EncodedStructure = unknown, DecodedStructure = EncodedStructure> {\n  protected structure: DecodedStructure\n  protected _tag: number | undefined\n\n  public constructor(structure: DecodedStructure) {\n    this.structure = structure\n  }\n\n  public get decodedStructure(): DecodedStructure {\n    return this.structure\n  }\n\n  /**\n   * Static getter for the Zod codec schema that defines the CBOR structure.\n   * Subclasses CAN override this to provide their specific schema for automatic encoding/decoding.\n   * The schema should be a Zod schema or codec that handles validation and transformation.\n   * If not provided, subclasses must override encode(), decode(), and fromEncodedStructure().\n   */\n  public static get encodingSchema(): z.ZodType | undefined {\n    return undefined\n  }\n\n  /**\n   * Returns the encoded structure that will be serialized to CBOR.\n   * By default, returns the protected structure property.\n   * Override if custom encoding logic is needed.\n   */\n  public get encodedStructure(): EncodedStructure {\n    const encodingSchema = (this.constructor as typeof CborStructure).encodingSchema\n    if (!encodingSchema) {\n      throw new Error('encodedStructure must be implemented when encodingSchema is not provided')\n    }\n\n    return encodeStructureWithErrorHandling(this.constructor.name, encodingSchema, this.structure) as EncodedStructure\n  }\n\n  /**\n   * Encodes this structure to CBOR bytes.\n   */\n  public encode(options?: CborEncodeOptions): Uint8Array {\n    const encodedStructure = options?.asDataItem ? DataItem.fromData(this.encodedStructure) : this.encodedStructure\n    const tagged = this._tag ? new Tag(encodedStructure, this._tag) : encodedStructure\n\n    return cborEncode(tagged)\n  }\n\n  /**\n   * Decodes CBOR bytes into a structure instance.\n   * Uses the encodingSchema's decode() method to validate and transform the decoded data.\n   */\n  public static decode<T extends AnyCborStructure>(this: CborStructureStaticThis<T>, bytes: Uint8Array): T {\n    const rawStructure = cborDecode(bytes)\n\n    // May feel weird, but using new this makes TypeScript understand we may return a subclass\n    return new this(this.fromEncodedStructure(rawStructure as EncodedStructureType<T>).decodedStructure)\n  }\n\n  /**\n   * Creates a structure instance from the encoded CBOR structure (after calling cborDecode).\n   *\n   * Uses the encodingSchema's decode() method to validate and transform the structure if available.\n   * Otherwise, subclasses must override this method.\n   */\n  public static fromEncodedStructure<T extends AnyCborStructure>(\n    this: CborStructureStaticThis<T>,\n    encodedStructure: EncodedStructureType<T>\n  ): T {\n    if (!this.encodingSchema) {\n      throw new Error('fromEncodedStructure must be implemented when encodingSchema is not provided')\n    }\n\n    return new this(decodeStructureWithErrorHandling(this.name, this.encodingSchema, encodedStructure))\n  }\n\n  public static fromDataItem<T extends AnyCborStructure>(this: CborStructureStaticThis<T>, dataItem: unknown): T {\n    return new this(\n      parseStructureWithErrorHandling(\n        this.name,\n        z\n          .instanceof(DataItem)\n          .transform((di) => di.data)\n          .transform((d) => this.fromEncodedStructure(d as any).decodedStructure),\n        dataItem,\n        `Error decoding ${this.name} from DateItem`\n      )\n    )\n  }\n\n  /**\n   * Creates a structure instance from the decoded structure.\n   *\n   * Uses the encodingSchema's parse method to validate the structure if available.\n   * Otherwise, subclasses must override this method.\n   */\n  public static fromDecodedStructure<T extends AnyCborStructure>(\n    this: CborStructureStaticThis<T>,\n    decodedStructure: DecodedStructureType<T>\n  ): T {\n    const encodingSchema = this.encodingSchema\n    if (!encodingSchema) {\n      throw new Error('fromDecodedStructure must be implemented when encodingSchema is not provided')\n    }\n\n    // When the schema is a codec, we need to validate it against the output schema, not the input schema\n    const decodedSchema = encodingSchema instanceof z.ZodPipe ? encodingSchema.out : encodingSchema\n\n    return new this(parseStructureWithErrorHandling(this.name, decodedSchema, decodedStructure))\n  }\n}\n","import { addExtension } from 'cbor-x'\n\n// tdate data item shall contain a date-time string as specified in RFC 3339 (with no fraction of seconds)\n// see https://datatracker.ietf.org/doc/html/rfc3339#section-5.6\naddExtension({\n  Class: Date,\n  tag: 0,\n  encode: (date: Date, encode) => encode(`${date.toISOString().split('.')[0]}Z`),\n  decode: (isoStringDateTime: string) => new Date(isoStringDateTime),\n})\n","import { addExtension } from 'cbor-x'\n\nconst customInspectSymbol = Symbol.for('nodejs.util.inspect.custom')\nexport class DateOnly {\n  private date: Date\n\n  public constructor(date?: string) {\n    this.date = date ? new Date(date) : new Date()\n  }\n\n  get [Symbol.toStringTag]() {\n    return DateOnly.name\n  }\n\n  toString() {\n    return this.toISOString()\n  }\n\n  toJSON() {\n    return this.toISOString()\n  }\n\n  toISOString(): string {\n    return this.date.toISOString().split('T')[0]\n  }\n\n  [customInspectSymbol](): string {\n    return this.toISOString()\n  }\n}\n\n// full-date data item shall contain a full-date string as specified in RFC 3339\n// see https://datatracker.ietf.org/doc/html/rfc3339#section-5.6\naddExtension({\n  Class: DateOnly,\n  tag: 1004,\n  encode: (date: DateOnly, encode) => encode(date.toISOString()),\n  decode: (isoStringDate: string) => new DateOnly(isoStringDate),\n})\n","/**\n *\n * Registered CWT claim keys\n * @see https://www.rfc-editor.org/rfc/rfc8392#section-3.1\n *\n */\nexport enum RegisteredCwtClaimKey {\n  Issuer = 1,\n  Subject = 2,\n  Audience = 3,\n  ExpirationTime = 4,\n  NotBefore = 5,\n  IssuedAt = 6,\n  CwtId = 7,\n}\n","// biome-ignore format: no explanation\nclass CoseError extends Error {\n  constructor(message: string = new.target.name) {\n    super(message)\n  }\n}\n\nexport class CoseUnsupportedMacError extends CoseError {}\nexport class CoseInvalidSignatureError extends CoseError {}\nexport class CoseInvalidAlgorithmError extends CoseError {}\nexport class CosePayloadMustBeNullError extends CoseError {}\nexport class CosePayloadMustBeDefinedError extends CoseError {}\nexport class CosePayloadInvalidStructureError extends CoseError {}\nexport class CoseInvalidTypeForKeyError extends CoseError {}\nexport class CoseInvalidValueForKtyError extends CoseError {}\nexport class CoseInvalidKtyForRawError extends CoseError {}\nexport class CoseXNotDefinedError extends CoseError {}\nexport class CoseYNotDefinedError extends CoseError {}\nexport class CoseDNotDefinedError extends CoseError {}\nexport class CoseKNotDefinedError extends CoseError {}\nexport class CoseEphemeralMacKeyIsRequiredError extends CoseError {}\nexport class CoseCertificateNotFoundError extends CoseError {}\nexport class CoseKeyTypeNotSupportedForPrivateKeyExtractionError extends CoseError {}\n","/**\n *\n * Registered CWT header keys\n *\n */\nexport enum RegisteredCwtHeaderClaimKey {\n  Algorithm = 1,\n  Critical = 2,\n  ContentType = 3,\n  KeyId = 4,\n  Iv = 5,\n  PartialIv = 6,\n  CounterSignature = 7,\n  CounterSignature0 = 9,\n  CounterSignatureV2 = 11,\n  CounterSignature0V2 = 12,\n  X5Bag = 32,\n  X5Chain = 33,\n  X5T = 34,\n  X5U = 35,\n}\n\nexport enum SignatureAlgorithm {\n  EdDSA = -8,\n  ES256 = -7,\n  ES384 = -35,\n  ES512 = -36,\n  PS256 = -37,\n  PS384 = -38,\n  PS512 = -39,\n  RS256 = -257,\n  RS384 = -258,\n  RS512 = -259,\n}\n\nexport enum MacAlgorithm {\n  HS256 = 5,\n  HS384 = 6,\n  HS512 = 7,\n}\n\nexport enum EncryptionAlgorithm {\n  A128GCM = 1,\n  A192GCM = 2,\n  A256GCM = 3,\n  Direct = -6,\n}\n\nexport type DigestAlgorithm = 'SHA-256' | 'SHA-384' | 'SHA-512'\n","import z from 'zod'\nimport { CborStructure } from '../../cbor/cbor-structure.js'\nimport { cborDecode, cborEncode } from '../../cbor/parser.js'\nimport { zUint8Array } from '../../utils/zod.js'\n\n// TODO: typedMap with known keys (Header enum)\n\nexport const protectedHeadersEncodedStructure = zUint8Array\nexport const protectedHeadersDecodedStructure = z.map(z.number(), z.unknown())\n\nexport type ProtectedHeadersDecodedStructure = z.infer<typeof protectedHeadersDecodedStructure>\nexport type ProtectedHeadersEncodedStructure = z.infer<typeof protectedHeadersEncodedStructure>\n\nexport type ProtectedHeaderOptions = {\n  protectedHeaders?: ProtectedHeadersDecodedStructure\n}\n\nexport class ProtectedHeaders extends CborStructure<\n  ProtectedHeadersEncodedStructure,\n  ProtectedHeadersDecodedStructure\n> {\n  public static override get encodingSchema() {\n    return z.codec(protectedHeadersEncodedStructure, protectedHeadersDecodedStructure, {\n      // TODO: Senders SHOULD encode a zero-length map as a zero-length string rather than as a zero-length map\n      encode: (decoded) => cborEncode(decoded) as Uint8Array<ArrayBuffer>,\n      decode: (encoded) => cborDecode(encoded),\n    })\n  }\n\n  public get headers() {\n    return this.structure\n  }\n\n  public static create(options: ProtectedHeaderOptions) {\n    return ProtectedHeaders.fromDecodedStructure(options.protectedHeaders ?? new Map())\n  }\n}\n","import z from 'zod'\nimport { CborStructure } from '../../cbor/cbor-structure.js'\n\nexport const unprotectedHeadersStructure = z.map(z.number(), z.unknown())\n\nexport type UnprotectedHeadersStructure = z.infer<typeof unprotectedHeadersStructure>\n\nexport type UnprotectedHeaderOptions = {\n  unprotectedHeaders?: UnprotectedHeadersStructure\n}\n\nexport class UnprotectedHeaders extends CborStructure<UnprotectedHeadersStructure> {\n  public static override get encodingSchema() {\n    return unprotectedHeadersStructure\n  }\n\n  public get headers() {\n    return this.structure\n  }\n\n  public static create(options: UnprotectedHeaderOptions) {\n    return UnprotectedHeaders.fromDecodedStructure(options.unprotectedHeaders ?? new Map())\n  }\n}\n","export enum Curve {\n  'P-256' = 1,\n  'P-384' = 2,\n  'P-521' = 3,\n  X25519 = 4,\n  X448 = 5,\n  Ed25519 = 6,\n  Ed448 = 7,\n}\n","export enum KeyOps {\n  Sign = 1,\n  Verify = 2,\n  Encrypt = 3,\n  Decrypt = 4,\n  WrapKey = 5,\n  UnwrapKey = 6,\n  DeriveKey = 7,\n  DeriveBits = 8,\n  MACCreate = 9,\n  MACVerify = 10,\n}\n","export enum KeyType {\n  Okp = 1,\n  Ec = 2,\n  Oct = 4,\n  Reserved = 0,\n}\n","import { base64url } from '@owf/identity-common'\nimport { EncryptionAlgorithm, MacAlgorithm, SignatureAlgorithm } from '../headers/defaults'\nimport { Curve } from './curve'\nimport type { CoseKeyOptions } from './key'\nimport { KeyOps } from './key-operation'\nimport { KeyType } from './key-type'\n\nconst swapMap = (map: Record<string, string>) =>\n  Object.fromEntries(Object.entries(map).map(([key, value]) => [value, key]))\n\nconst swapNestedMap = (nestedMap: Record<string, Record<string, unknown>>) =>\n  Object.fromEntries(\n    Object.entries(nestedMap).map(([category, mappings]) => [\n      category,\n      Object.fromEntries(Object.entries(mappings).map(([key, value]) => [value, key])),\n    ])\n  )\n\nconst jwkCoseKeyMap = {\n  kty: {\n    OKP: KeyType.Okp,\n    EC: KeyType.Ec,\n    OCT: KeyType.Oct,\n  },\n  crv: {\n    'P-256': Curve['P-256'],\n    'p-384': Curve['P-384'],\n    'p-521': Curve['P-521'],\n    X25519: Curve.X25519,\n    Ed25519: Curve.Ed25519,\n    Ed448: Curve.Ed448,\n  },\n  alg: {\n    EdDSA: SignatureAlgorithm.EdDSA,\n    ES256: SignatureAlgorithm.ES256,\n    ES384: SignatureAlgorithm.ES384,\n    ES512: SignatureAlgorithm.ES512,\n    PS256: SignatureAlgorithm.PS256,\n    PS384: SignatureAlgorithm.PS384,\n    PS512: SignatureAlgorithm.PS512,\n    RS256: SignatureAlgorithm.RS256,\n    RS384: SignatureAlgorithm.RS384,\n    RS512: SignatureAlgorithm.RS512,\n\n    HS256: MacAlgorithm.HS256,\n    HS384: MacAlgorithm.HS384,\n    HS512: MacAlgorithm.HS512,\n\n    A128GCM: EncryptionAlgorithm.A128GCM,\n    A192GCM: EncryptionAlgorithm.A192GCM,\n    A256GCM: EncryptionAlgorithm.A256GCM,\n    Direct: EncryptionAlgorithm.Direct,\n  },\n  keyOps: {\n    sign: KeyOps.Sign,\n    verify: KeyOps.Verify,\n    encrypt: KeyOps.Encrypt,\n    decrypt: KeyOps.Decrypt,\n    wrapKey: KeyOps.WrapKey,\n    unwrapKey: KeyOps.UnwrapKey,\n    deriveKey: KeyOps.DeriveKey,\n    deriveBits: KeyOps.DeriveBits,\n    mACCreate: KeyOps.MACCreate,\n    mACVerify: KeyOps.MACVerify,\n  },\n}\n\nconst coseKeyJwkMap = swapNestedMap(jwkCoseKeyMap)\n\nexport const jwkCoseOptionsMap: Record<string, keyof CoseKeyOptions> = {\n  kty: 'keyType',\n  kid: 'keyId',\n  alg: 'algorithm',\n  keyOps: 'keyOps',\n  baseIv: 'baseIv',\n  crv: 'curve',\n  x: 'x',\n  y: 'y',\n  d: 'd',\n}\n\nexport const coseOptionsJwkMap = swapMap(jwkCoseOptionsMap)\n\nexport const jwkToCoseKey = {\n  kty: (kty?: unknown) => {\n    return jwkCoseKeyMap.kty[kty as keyof (typeof jwkCoseKeyMap)['kty']] ?? kty\n  },\n  crv: (crv?: unknown) => jwkCoseKeyMap.crv[crv as keyof (typeof jwkCoseKeyMap)['crv']] ?? crv,\n  alg: (alg?: unknown) => jwkCoseKeyMap.alg[alg as keyof (typeof jwkCoseKeyMap)['alg']] ?? alg,\n  kid: (kid?: unknown) => kid,\n  keyOps: (keyOps?: unknown) =>\n    Array.isArray(keyOps)\n      ? keyOps?.map((ko) => jwkCoseKeyMap.keyOps[ko as keyof (typeof jwkCoseKeyMap)['keyOps']] ?? ko)\n      : undefined,\n  x: (s?: unknown) => (s && typeof s === 'string' ? base64url.decode(s) : undefined),\n  y: (s?: unknown) => (s && typeof s === 'string' ? base64url.decode(s) : undefined),\n  d: (s?: unknown) => (s && typeof s === 'string' ? base64url.decode(s) : undefined),\n}\n\nexport const coseKeyToJwk = {\n  keyType: (keyType: KeyType) => coseKeyJwkMap.kty[keyType],\n  keyId: (keyId: unknown) => keyId,\n  algorithm: (algorithm?: SignatureAlgorithm | MacAlgorithm) => (algorithm ? coseKeyJwkMap.alg[algorithm] : undefined),\n  keyOps: (keyOps?: unknown) =>\n    keyOps && Array.isArray(keyOps) ? keyOps.map((ko) => coseKeyJwkMap.keyOps[ko]) : undefined,\n  baseIv: (baseIv?: unknown) => baseIv,\n  curve: (curve?: Curve) => (curve ? coseKeyJwkMap.crv[curve] : undefined),\n  x: (x?: Uint8Array) => (x ? base64url.encode(x) : undefined),\n  y: (y?: Uint8Array) => (y ? base64url.encode(y) : undefined),\n  d: (d?: Uint8Array) => (d ? base64url.encode(d) : undefined),\n}\n","import { z } from 'zod'\nimport {\n  type AnyCborStructure,\n  addExtension,\n  CborStructure,\n  type CborStructureStaticThis,\n  cborDecode,\n  cborEncode,\n  type EncodedStructureType,\n} from '../cbor'\nimport { zUint8Array } from '../utils/zod'\nimport { CoseInvalidAlgorithmError, CosePayloadMustBeDefinedError } from './error'\nimport { type MacAlgorithm, RegisteredCwtHeaderClaimKey } from './headers/defaults'\nimport {\n  type ProtectedHeaderOptions,\n  ProtectedHeaders,\n  type ProtectedHeadersEncodedStructure,\n} from './headers/protected-headers'\nimport {\n  type UnprotectedHeaderOptions,\n  UnprotectedHeaders,\n  type UnprotectedHeadersStructure,\n} from './headers/unprotected-headers'\nimport { coseKeyToJwk } from './key/jwk'\n\nexport const mac0EncodedSchema = z.tuple([\n  zUint8Array,\n  z.map(z.unknown(), z.unknown()),\n  zUint8Array.nullable(),\n  zUint8Array,\n])\n\nexport const mac0DecodedSchema = z.object({\n  protectedHeaders: z.instanceof(ProtectedHeaders),\n  unprotectedHeaders: z.instanceof(UnprotectedHeaders),\n  payload: zUint8Array.nullable(),\n  tag: zUint8Array,\n})\n\nexport type Mac0EncodedStructure = z.infer<typeof mac0EncodedSchema>\nexport type Mac0DecodedStructure = z.infer<typeof mac0DecodedSchema>\n\nexport type Mac0Context = {\n  mac: (options: { toBeAuthenticated: Uint8Array; key: Uint8Array }) => Promise<Uint8Array>\n}\n\nexport type Mac0Options = {\n  protectedHeaders?: ProtectedHeaders | ProtectedHeaderOptions['protectedHeaders']\n  unprotectedHeaders?: UnprotectedHeaders | UnprotectedHeaderOptions['unprotectedHeaders']\n  externalAad?: Uint8Array\n\n  payload?: Uint8Array | null\n  detachedPayload?: Uint8Array\n}\n\nexport class Mac0 extends CborStructure<Mac0EncodedStructure, Mac0DecodedStructure> {\n  public static tag = 17\n  protected override _tag = Mac0.tag\n\n  public static override get encodingSchema() {\n    return z.codec(mac0EncodedSchema, mac0DecodedSchema, {\n      encode: ({ protectedHeaders, unprotectedHeaders, payload, tag }) => {\n        if (tag.length === 0) {\n          throw new Error('Tag has not been set. Required for encoding the mac0 structure')\n        }\n        return [\n          protectedHeaders.encodedStructure,\n          unprotectedHeaders.encodedStructure,\n          payload,\n          tag,\n        ] satisfies Mac0EncodedStructure\n      },\n      decode: ([protectedHeadersBytes, unprotectedHeadersMap, payload, tag]) => ({\n        protectedHeaders: ProtectedHeaders.fromEncodedStructure(\n          protectedHeadersBytes as ProtectedHeadersEncodedStructure\n        ),\n        unprotectedHeaders: UnprotectedHeaders.fromEncodedStructure(\n          unprotectedHeadersMap as UnprotectedHeadersStructure\n        ),\n        payload,\n        tag,\n      }),\n    })\n  }\n\n  public externalAad?: Uint8Array\n  public detachedPayload?: Uint8Array\n\n  public get protectedHeaders() {\n    return this.structure.protectedHeaders\n  }\n\n  public get unprotectedHeaders() {\n    return this.structure.unprotectedHeaders\n  }\n\n  public get payload() {\n    return this.structure.payload\n  }\n\n  public get tag() {\n    return this.structure.tag\n  }\n\n  public get toBeAuthenticated() {\n    const payload = this.payload ?? this.detachedPayload\n\n    if (!payload) {\n      throw new CosePayloadMustBeDefinedError()\n    }\n\n    return Mac0.toBeAuthenticated({\n      payload,\n      protectedHeaders: this.protectedHeaders,\n      externalAad: this.externalAad,\n    })\n  }\n\n  /**\n   * Decodes CBOR bytes into a Sign1 instance.\n   * Uses the encodingSchema's decode() method to validate and transform the decoded data.\n   */\n  public static decode<T extends AnyCborStructure>(this: CborStructureStaticThis<T>, bytes: Uint8Array): T {\n    const rawStructure = cborDecode(bytes)\n\n    // May feel weird, but using new this makes TypeScript understand we may return a subclass\n    return new Mac0(\n      // NOTE: If decoded with Mac0 tag, the cbor decoder already transforms to the class instances\n      // In that case we create new instance based on the decoded structure, to ensure we create the\n      // instance based on this (and ensure extended classes work)\n      rawStructure instanceof Mac0\n        ? rawStructure.decodedStructure\n        : Mac0.fromEncodedStructure(rawStructure as EncodedStructureType<T>).decodedStructure\n    ) as unknown as T\n  }\n\n  public static toBeAuthenticated(options: {\n    payload: Uint8Array\n    protectedHeaders: ProtectedHeaders\n    externalAad?: Uint8Array\n  }) {\n    const toBeAuthenticated = ['MAC0', options.protectedHeaders.encodedStructure]\n    if (options.externalAad) toBeAuthenticated.push(options.externalAad)\n    toBeAuthenticated.push(options.payload)\n\n    return cborEncode(toBeAuthenticated)\n  }\n\n  public get signatureAlgorithmName(): MacAlgorithm {\n    const algorithm = (this.protectedHeaders.headers?.get(RegisteredCwtHeaderClaimKey.Algorithm) ??\n      this.unprotectedHeaders.headers?.get(RegisteredCwtHeaderClaimKey.Algorithm)) as MacAlgorithm | undefined\n\n    if (!algorithm) {\n      throw new CoseInvalidAlgorithmError()\n    }\n\n    const algorithmName = coseKeyToJwk.algorithm(algorithm)\n\n    if (!algorithmName) {\n      throw new CoseInvalidAlgorithmError()\n    }\n\n    return algorithmName\n  }\n\n  public static create(options: Mac0Options): Mac0 {\n    const protectedHeaders =\n      options.protectedHeaders instanceof ProtectedHeaders\n        ? options.protectedHeaders\n        : ProtectedHeaders.create({ protectedHeaders: options.protectedHeaders })\n\n    const unprotectedHeaders =\n      options.unprotectedHeaders instanceof UnprotectedHeaders\n        ? options.unprotectedHeaders\n        : UnprotectedHeaders.create({ unprotectedHeaders: options.unprotectedHeaders })\n\n    const payload = options.payload ?? options.detachedPayload\n    if (!payload) {\n      throw new CosePayloadMustBeDefinedError()\n    }\n\n    const mac0 = new Mac0({\n      protectedHeaders,\n      unprotectedHeaders,\n      payload: options.payload ?? null,\n      tag: new Uint8Array(),\n    })\n\n    mac0.externalAad = options.externalAad\n    mac0.detachedPayload = options.detachedPayload\n\n    return mac0\n  }\n\n  public async authenticate(\n    options: {\n      key: Uint8Array\n    },\n    ctx: Pick<Mac0Context, 'mac'>\n  ) {\n    const payload = this.payload ?? this.detachedPayload\n    if (!payload) {\n      throw new CosePayloadMustBeDefinedError()\n    }\n\n    this.structure.tag = await ctx.mac({\n      toBeAuthenticated: Mac0.toBeAuthenticated({\n        payload,\n        protectedHeaders: this.protectedHeaders,\n        externalAad: this.externalAad,\n      }),\n      key: options.key,\n    })\n    return this\n  }\n}\n\naddExtension({\n  Class: Mac0,\n  tag: Mac0.tag,\n  encode(instance: Mac0, encodeFn: (obj: unknown) => Uint8Array) {\n    return encodeFn(instance)\n  },\n  decode: (encoded) => Mac0.fromEncodedStructure(encoded as Mac0EncodedStructure),\n})\n","import { z } from 'zod'\nimport type zCore from 'zod/v4/core'\n\n/**\n * TypedMap provides compile-time type safety for Maps where each key has its own specific value type.\n * Unlike Map<K, V> which has the same value type V for all keys, TypedMap<Schema, OptionalKeys>\n * allows different value types per key (heterogeneous values).\n *\n * Example:\n *   type CoseKeySchema = {\n *     [CoseKeyParameter.KeyType]: KeyType     // number key → KeyType value\n *     [CoseKeyParameter.Curve]: Curve         // number key → Curve value\n *     [CoseKeyParameter.X]: Uint8Array        // number key → Uint8Array value\n *   }\n *\n *   const map = new TypedMap<CoseKeySchema>()\n *   map.get(CoseKeyParameter.KeyType)  // TypeScript knows this is KeyType!\n *   map.get(CoseKeyParameter.Curve)    // TypeScript knows this is Curve!\n *   map.get(CoseKeyParameter.X)        // TypeScript knows this is Uint8Array!\n *\n * @template Schema - Object type mapping keys to their value types\n * @template OptionalKeys - Union of keys that are optional (can be absent)\n */\n\n// biome-ignore lint/suspicious/noExplicitAny: no explanation\nexport class TypedMap<Schema extends Record<PropertyKey, any>, OptionalKeys extends keyof Schema = never> {\n  private readonly map: Map<keyof Schema, Schema[keyof Schema]>\n\n  constructor(entries?: (readonly [keyof Schema, Schema[keyof Schema]])[] | null) {\n    this.map = new Map(entries)\n  }\n\n  // biome-ignore lint/suspicious/noExplicitAny: no explanation\n  public static fromMap<Schema extends Record<PropertyKey, any>, OptionalKeys extends keyof Schema = never>(\n    // biome-ignore lint/suspicious/noExplicitAny: no explanation\n    map: Map<any, any>\n  ) {\n    return new TypedMap<Schema, OptionalKeys>(Array.from(map.entries()))\n  }\n\n  // biome-ignore lint/suspicious/noExplicitAny: no explanation\n  public static fromObject<Schema extends Record<PropertyKey, any>, OptionalKeys extends keyof Schema = never>(\n    // biome-ignore lint/suspicious/noExplicitAny: no explanation\n    object: Record<string | number, any>\n  ) {\n    return new TypedMap<Schema, OptionalKeys>(Array.from(Object.entries(object)))\n  }\n\n  /**\n   * Type-safe get that returns the correct value type for each key.\n   * Required keys return T, optional keys return T | undefined.\n   */\n  get<K extends keyof Schema>(key: K): K extends OptionalKeys ? Schema[K] | undefined : Schema[K] {\n    // biome-ignore lint/suspicious/noExplicitAny: no explanation\n    return this.map.get(key) as any\n  }\n\n  /**\n   * Type-safe set that ensures the value matches the key's type\n   */\n  set<K extends keyof Schema>(key: K, value: Schema[K]): this {\n    this.map.set(key, value)\n    return this\n  }\n\n  has(key: keyof Schema): boolean {\n    return this.map.has(key)\n  }\n\n  delete(key: keyof Schema): boolean {\n    return this.map.delete(key)\n  }\n\n  clear(): void {\n    this.map.clear()\n  }\n\n  get size(): number {\n    return this.map.size\n  }\n\n  keys(): IterableIterator<keyof Schema> {\n    return this.map.keys()\n  }\n\n  values(): IterableIterator<Schema[keyof Schema]> {\n    return this.map.values()\n  }\n\n  entries(): IterableIterator<[keyof Schema, Schema[keyof Schema]]> {\n    return this.map.entries()\n  }\n\n  forEach(\n    callbackfn: (value: Schema[keyof Schema], key: keyof Schema, map: Map<keyof Schema, Schema[keyof Schema]>) => void,\n    // biome-ignore lint/suspicious/noExplicitAny: no explanation\n    thisArg?: any\n  ): void {\n    this.map.forEach(callbackfn, thisArg)\n  }\n\n  [Symbol.iterator](): IterableIterator<[keyof Schema, Schema[keyof Schema]]> {\n    return this.map[Symbol.iterator]()\n  }\n\n  toMap(): Map<keyof Schema, Schema[keyof Schema]> {\n    return new Map(this.map)\n  }\n}\n\n// Helper type to build schema from entries array\n// biome-ignore lint/suspicious/noExplicitAny: no explanation\ntype EntriesArrayToSchema<T extends ReadonlyArray<readonly [any, any]>> = {\n  // biome-ignore lint/suspicious/noExplicitAny: no explanation\n  [K in T[number][0]]: Extract<T[number], readonly [K, any]>[1]\n}\n\n/**\n * This checks whether the property is exact optional. exact optional means that the value cannot be undefined, but if used\n * in an object the key can be omitted. This is important for CBOR structures, as undefined will be encoded, and thus must be\n * omitted in most cases.\n *\n * Zod recommend to check for optionality by just parsing undefined.\n */\nconst isExactOptional = (schema: z.ZodType) =>\n  !schema.safeParse(undefined).success && z.object({ test: schema }).safeParse({}).success\n\ntype EntriesBase = ReadonlyArray<\n  readonly [\n    string | number, // for now we only allow string or number keys\n    // biome-ignore lint/suspicious/noExplicitAny: no explanation\n    z.ZodType<any>,\n  ]\n>\n\ntype InferredEntries<Entries extends EntriesBase> = {\n  [K in keyof Entries]: readonly [Entries[K][0], z.infer<Entries[K][1]>]\n}\ntype InferredSchema<Entries extends EntriesBase> = EntriesArrayToSchema<InferredEntries<Entries>>\n\ntype OptionalKeys<Entries extends EntriesBase> = Entries[number] extends infer E\n  ? E extends readonly [infer K, infer V]\n    ? // biome-ignore lint/suspicious/noExplicitAny: no explanation\n      V extends z.ZodExactOptional<any>\n      ? K\n      : never\n    : never\n  : never\n\n/**\n * Utility function to create a typed map codec.\n * Takes an array of [key, valueSchema] entries to support any key type (including non-string keys for CBOR).\n *\n * Example:\n *   const coseKeyMap = typedMap([\n *     [CoseKeyParameter.KeyType, z.number()],\n *     [CoseKeyParameter.Curve, z.number()],\n *     [CoseKeyParameter.X, z.instanceof(Uint8Array)]\n *   ] as const)\n *\n * The resulting schema validates a Map and transforms it to TypedMap<Schema, never>.\n */\nexport function typedMap<const Entries extends EntriesBase>(\n  entries: Entries,\n  {\n    allowAdditionalKeys = true,\n    encode,\n    decode,\n  }: {\n    /**\n     * Whether to allow additional keys in the typed map\n     *\n     * @default true\n     */\n    allowAdditionalKeys?: boolean\n\n    /**\n     * Allows overriding the encode function. The original encode method is passed as second\n     * argument, so you can use this method to pre/post process\n     */\n    encode?: (\n      decoded: TypedMap<InferredSchema<Entries>, OptionalKeys<Entries>>,\n      originalEncode: (decoded: TypedMap<InferredSchema<Entries>, OptionalKeys<Entries>>) => Map<unknown, unknown>\n    ) => Map<unknown, unknown>\n\n    /**\n     * Allows overriding the decode function. The original decode method is passed as second\n     * argument, so you can use this method to pre/post process\n     */\n    decode?: (\n      encoded: Map<unknown, unknown>,\n      originalDecode: (decoded: Map<unknown, unknown>) => TypedMap<InferredSchema<Entries>, OptionalKeys<Entries>>\n    ) => TypedMap<InferredSchema<Entries>, OptionalKeys<Entries>>\n  } = {}\n) {\n  // Create a set of required keys (non-optional) for validation\n  const requiredKeys = entries.filter(([, valueSchema]) => !isExactOptional(valueSchema)).map(([key]) => key)\n\n  const schemaMap = new Map(entries)\n\n  const originalEncode = (decoded: TypedMap<InferredSchema<Entries>, OptionalKeys<Entries>>) => decoded.toMap()\n  const originalDecode = (encoded: Map<unknown, unknown>) =>\n    TypedMap.fromMap<InferredSchema<Entries>, OptionalKeys<Entries>>(encoded)\n\n  return z.codec(\n    // Input is untyped map\n    z.map(z.unknown(), z.unknown()),\n    // Output is typed map\n    z.instanceof<typeof TypedMap<InferredSchema<Entries>, OptionalKeys<Entries>>>(TypedMap).superRefine((map, ctx) => {\n      // Check there's no additional keys in the map if not allowed\n      const additionalKeys = Array.from(map.keys()).filter((key) => !schemaMap.has(key as string | number))\n      if (additionalKeys.length > 0 && !allowAdditionalKeys) {\n        for (const additionalKey of additionalKeys) {\n          if (typeof additionalKey !== 'string' && typeof additionalKey !== 'number') {\n            ctx.addIssue({\n              code: 'invalid_key',\n              origin: 'map',\n              continue: true,\n              path: [],\n              input: map,\n              issues: [],\n              message: 'Key found in map that is not a string or number',\n            })\n          } else {\n            ctx.addIssue({\n              code: 'invalid_key',\n              origin: 'map',\n              continue: true,\n              path: [additionalKey],\n              input: map,\n              issues: [],\n              message: `Unexpected key '${additionalKey}' found in map, additional keys are not allowed.`,\n            })\n          }\n        }\n      }\n\n      for (const [key, valueSchema] of schemaMap.entries()) {\n        const hasKey = map.has(key)\n        const value = map.get(key)\n\n        if (!hasKey && requiredKeys.includes(key)) {\n          ctx.addIssue({\n            code: 'invalid_value',\n            continue: true,\n            message: `Expected key '${key}' to be defined.`,\n            path: [key],\n            values: [],\n            input: value,\n          })\n          continue\n        }\n\n        // If key is not in the map, and also not required, skip validation\n        if (!hasKey && !requiredKeys.includes(key)) {\n          continue\n        }\n\n        const parseResult = valueSchema.safeParse(value)\n        if (!parseResult.success) {\n          for (const issue of parseResult.error.issues) {\n            ctx.addIssue({\n              ...issue,\n              // NOTE: if we use numbers, zod-validation-error will use \"index\", thinking\n              // it's an array, that's confusing\n              path: [`${key}`, ...issue.path],\n            } as zCore.$ZodSuperRefineIssue)\n          }\n        }\n      }\n    }),\n    {\n      decode: (input) => (decode ? decode(input, originalDecode) : originalDecode(input)),\n      encode: (output) => (encode ? encode(output, originalEncode) : originalEncode(output)),\n    }\n  )\n}\n","import { bytesToString, concatBytes, stringToBytes } from '@owf/identity-common'\nimport { z } from 'zod'\nimport { CborStructure } from '../../cbor'\nimport { TypedMap, typedMap } from '../../utils/typed-map'\nimport { zUint8Array } from '../../utils/zod'\nimport {\n  CoseDNotDefinedError,\n  CoseInvalidKtyForRawError,\n  CoseInvalidValueForKtyError,\n  CoseKeyTypeNotSupportedForPrivateKeyExtractionError,\n  CoseKNotDefinedError,\n  CoseXNotDefinedError,\n  CoseYNotDefinedError,\n} from '../error'\nimport type { SignatureAlgorithm } from '../headers'\nimport { Curve } from './curve'\nimport { coseKeyToJwk, coseOptionsJwkMap, jwkCoseOptionsMap, jwkToCoseKey } from './jwk'\nimport { KeyOps } from './key-operation'\nimport { KeyType } from './key-type'\n\nexport enum CoseKeyParameter {\n  KeyType = 1,\n  KeyId = 2,\n  Algorithm = 3,\n  KeyOps = 4,\n  BaseIv = 5,\n\n  // EC Key or Oct with K\n  CurveOrK = -1,\n  X = -2,\n  Y = -3,\n  D = -4,\n}\n\n// Zod schema for CoseKey validation\nconst coseKeySchema = typedMap([\n  [CoseKeyParameter.KeyType, z.union([z.enum(KeyType), z.string()])],\n  [\n    CoseKeyParameter.KeyId,\n    // NOTE: string is NOT allowed, but seems mDocs issued with v0.5 of this library\n    // do include string keyIds. We need to ensure we don't break interop. For newly\n    // created keys we ensure correct encoding.\n    zUint8Array.or(z.string()).exactOptional(),\n  ],\n  [\n    CoseKeyParameter.Algorithm,\n    z\n      .union([\n        z.string({ error: 'Cose algorithm must be a string' }),\n        z.number({ error: 'Cose algorithm must be a number' }),\n      ])\n      .exactOptional(),\n  ],\n  [CoseKeyParameter.KeyOps, z.array(z.union([z.enum(KeyOps), z.string()])).exactOptional()],\n  [CoseKeyParameter.BaseIv, zUint8Array.exactOptional()],\n  [CoseKeyParameter.CurveOrK, z.union([z.enum(Curve), zUint8Array]).exactOptional()],\n  [CoseKeyParameter.X, zUint8Array.exactOptional()],\n  [CoseKeyParameter.Y, zUint8Array.exactOptional()],\n  [CoseKeyParameter.D, zUint8Array.exactOptional()],\n] as const)\n\n// Infer structure type from Zod schema\nexport type CoseKeyDecodedStructure = z.output<typeof coseKeySchema>\nexport type CoseKeyEncodedStructure = z.input<typeof coseKeySchema>\n\n// Manual options type (user-facing API)\nexport type CoseKeyOptions = {\n  keyType: KeyType | string\n  keyId?: string\n  algorithm?: string | number\n  keyOps?: Array<KeyOps | string>\n  baseIv?: Uint8Array\n\n  curve?: Curve\n  x?: Uint8Array\n  y?: Uint8Array\n\n  d?: Uint8Array\n\n  k?: Uint8Array\n}\n\nexport class CoseKey extends CborStructure<CoseKeyEncodedStructure, CoseKeyDecodedStructure> {\n  public static override get encodingSchema() {\n    return coseKeySchema\n  }\n\n  public get keyType() {\n    return this.structure.get(CoseKeyParameter.KeyType)\n  }\n\n  public get keyId() {\n    const keyId = this.structure.get(CoseKeyParameter.KeyId)\n    return keyId instanceof Uint8Array ? bytesToString(keyId) : keyId\n  }\n\n  public get algorithm() {\n    return this.structure.get(CoseKeyParameter.Algorithm) as SignatureAlgorithm | undefined\n  }\n\n  public get keyOps() {\n    return this.structure.get(CoseKeyParameter.KeyOps)\n  }\n\n  public get baseIv() {\n    return this.structure.get(CoseKeyParameter.BaseIv)\n  }\n\n  public get curve() {\n    if (this.keyType === KeyType.Ec || this.keyType === KeyType.Okp) {\n      // Casting is needed, as it can be both Curve or K\n      return this.structure.get(CoseKeyParameter.CurveOrK) as Curve | undefined\n    }\n\n    return undefined\n  }\n\n  public get x() {\n    return this.structure.get(CoseKeyParameter.X)\n  }\n\n  public get y() {\n    return this.structure.get(CoseKeyParameter.Y)\n  }\n\n  public get d() {\n    return this.structure.get(CoseKeyParameter.D)\n  }\n\n  public get k() {\n    if (this.keyType === KeyType.Oct) {\n      return this.structure.get(CoseKeyParameter.CurveOrK) as Uint8Array | undefined\n    }\n    return undefined\n  }\n\n  public static create(options: CoseKeyOptions): CoseKey {\n    const map: CoseKeyDecodedStructure = new TypedMap([[CoseKeyParameter.KeyType, options.keyType]])\n\n    if (options.keyId !== undefined) {\n      map.set(CoseKeyParameter.KeyId, stringToBytes(options.keyId))\n    }\n\n    if (options.algorithm !== undefined) {\n      map.set(CoseKeyParameter.Algorithm, options.algorithm)\n    }\n\n    if (options.keyOps !== undefined) {\n      map.set(CoseKeyParameter.KeyOps, options.keyOps)\n    }\n\n    if (options.baseIv !== undefined) {\n      map.set(CoseKeyParameter.BaseIv, options.baseIv)\n    }\n\n    if (options.curve !== undefined) {\n      map.set(CoseKeyParameter.CurveOrK, options.curve)\n    }\n\n    if (options.x !== undefined) {\n      map.set(CoseKeyParameter.X, options.x)\n    }\n\n    if (options.y !== undefined) {\n      map.set(CoseKeyParameter.Y, options.y)\n    }\n\n    if (options.d !== undefined) {\n      map.set(CoseKeyParameter.D, options.d)\n    }\n\n    if (options.k !== undefined) {\n      map.set(CoseKeyParameter.CurveOrK, options.k)\n    }\n\n    return CoseKey.fromDecodedStructure(map)\n  }\n\n  // TODO: add jwk zod schema\n  public static fromJwk(jwk: Record<string, unknown>) {\n    if (!('kty' in jwk)) {\n      throw new CoseInvalidValueForKtyError('JWK does not contain required kty value')\n    }\n\n    const options = Object.entries(jwk).reduce((prev, [key, value]) => {\n      const mappedKey = jwkCoseOptionsMap[key] ?? key\n\n      const mapFunction = jwkToCoseKey[key as keyof typeof jwkToCoseKey]\n      const convertedValue = mapFunction ? mapFunction(value) : value\n\n      // Only include if value is not undefined\n      if (convertedValue !== undefined) {\n        // biome-ignore lint/performance/noAccumulatingSpread: time-complexity is not relevant here\n        return { ...prev, [mappedKey]: convertedValue }\n      }\n\n      return prev\n    }, {} as CoseKeyOptions)\n\n    return CoseKey.create(options)\n  }\n\n  public get publicKey() {\n    if (this.keyType !== KeyType.Ec) {\n      throw new CoseInvalidKtyForRawError()\n    }\n\n    if (!this.x) {\n      throw new CoseXNotDefinedError()\n    }\n\n    if (!this.y) {\n      throw new CoseYNotDefinedError()\n    }\n\n    return concatBytes(Uint8Array.from([0x04]), this.x, this.y)\n  }\n\n  public get privateKey() {\n    if (this.keyType === KeyType.Ec) {\n      if (!this.d) {\n        throw new CoseDNotDefinedError()\n      }\n\n      return this.d\n    }\n\n    if (this.keyType === KeyType.Oct) {\n      if (!this.k) {\n        throw new CoseKNotDefinedError()\n      }\n\n      return this.k\n    }\n\n    throw new CoseKeyTypeNotSupportedForPrivateKeyExtractionError()\n  }\n\n  public get jwk(): Record<string, unknown> {\n    // Convert CoseKey properties to JWK format\n    const options: CoseKeyOptions = {\n      keyType: this.keyType,\n      keyId: this.keyId,\n      algorithm: this.algorithm,\n      keyOps: this.keyOps,\n      baseIv: this.baseIv,\n      curve: this.curve,\n      x: this.x,\n      y: this.y,\n      d: this.d,\n      k: this.k,\n    }\n\n    return Object.entries(options).reduce(\n      (prev, [key, value]) => ({\n        // biome-ignore lint/performance/noAccumulatingSpread: time-complexity is not relevant here\n        ...prev,\n        [coseOptionsJwkMap[key] ?? key]:\n          typeof coseKeyToJwk[key as keyof typeof coseKeyToJwk] === 'function'\n            ? // @ts-ignore\n              coseKeyToJwk[key as keyof typeof coseKeyToJwk](value)\n            : undefined,\n      }),\n      {}\n    )\n  }\n}\n","import { addExtension } from 'cbor-x'\nimport z from 'zod'\nimport {\n  type AnyCborStructure,\n  CborStructure,\n  type CborStructureStaticThis,\n  cborDecode,\n  cborEncode,\n  type EncodedStructureType,\n} from '../cbor'\nimport { zUint8Array } from '../utils/zod'\nimport { CoseCertificateNotFoundError, CoseInvalidAlgorithmError, CosePayloadMustBeDefinedError } from './error'\nimport {\n  type ProtectedHeaderOptions,\n  ProtectedHeaders,\n  protectedHeadersEncodedStructure,\n  RegisteredCwtHeaderClaimKey,\n  type SignatureAlgorithm,\n  type UnprotectedHeaderOptions,\n  UnprotectedHeaders,\n  unprotectedHeadersStructure,\n} from './headers'\nimport { type CoseKey, coseKeyToJwk } from './key'\n\nexport const sign1EncodedSchema = z.tuple([\n  // protected headers\n  protectedHeadersEncodedStructure,\n  // unprotected headers\n  unprotectedHeadersStructure,\n  // payload\n  zUint8Array.nullable(),\n  // signature\n  zUint8Array,\n])\n\nexport const sign1DecodedSchema = z.object({\n  protectedHeaders: z.instanceof(ProtectedHeaders),\n  unprotectedHeaders: z.instanceof(UnprotectedHeaders),\n  payload: sign1EncodedSchema.def.items[2],\n  signature: sign1EncodedSchema.def.items[3],\n})\n\nexport type Sign1EncodedStructure = z.infer<typeof sign1EncodedSchema>\nexport type Sign1DecodedStructure = z.infer<typeof sign1DecodedSchema>\n\nexport type Sign1Context = {\n  sign: (options: { toBeSigned: Uint8Array; key: CoseKey; algorithm: SignatureAlgorithm }) => Promise<Uint8Array>\n  getPublicKey: (options: { certificate: Uint8Array | Uint8Array[]; alg: string }) => Promise<Uint8Array>\n  verify: (options: { sign1: Sign1; key: Uint8Array | CoseKey }) => Promise<boolean>\n  x509: {\n    getIssuerNameField: (options: { certificate: Uint8Array | Uint8Array[]; field: string }) => string[]\n    getPublicKey: (options: { certificate: Uint8Array | Uint8Array[]; alg: string }) => Promise<Uint8Array>\n  }\n}\n\nexport type Sign1Options = {\n  protectedHeaders?: ProtectedHeaders | ProtectedHeaderOptions['protectedHeaders']\n  unprotectedHeaders?: UnprotectedHeaders | UnprotectedHeaderOptions['unprotectedHeaders']\n  externalAad?: Uint8Array\n\n  payload?: Uint8Array | null\n  detachedPayload?: Uint8Array\n}\n\nexport class Sign1 extends CborStructure<Sign1EncodedStructure, Sign1DecodedStructure> {\n  public static tag = 18\n  protected override _tag = Sign1.tag\n\n  public static override get encodingSchema() {\n    return z.codec(sign1EncodedSchema, sign1DecodedSchema, {\n      encode: (decoded) => {\n        if (decoded.signature.length === 0) {\n          throw new Error('Signature has not been set. Required for encoding the sign1 structure')\n        }\n\n        return [\n          decoded.protectedHeaders.encodedStructure,\n          decoded.unprotectedHeaders.encodedStructure,\n          decoded.payload,\n          decoded.signature,\n        ] satisfies Sign1EncodedStructure\n      },\n      decode: ([protectedHeaders, unprotected, payload, signature]) => ({\n        protectedHeaders: ProtectedHeaders.fromEncodedStructure(protectedHeaders),\n        unprotectedHeaders: UnprotectedHeaders.fromEncodedStructure(unprotected),\n        payload,\n        signature,\n      }),\n    })\n  }\n\n  public detachedPayload?: Uint8Array\n  public externalAad?: Uint8Array\n\n  public get protectedHeaders() {\n    return this.structure.protectedHeaders\n  }\n\n  public get unprotectedHeaders() {\n    return this.structure.unprotectedHeaders\n  }\n\n  public get payload() {\n    return this.structure.payload\n  }\n\n  public get signature() {\n    return this.structure.signature\n  }\n\n  public get certificateChain() {\n    return this.x5chain ?? []\n  }\n\n  public get certificate() {\n    const [certificate] = this.certificateChain\n\n    if (!certificate) {\n      throw new CoseCertificateNotFoundError()\n    }\n\n    return certificate\n  }\n\n  public getIssuingCountry(ctx: Pick<Sign1Context, 'x509'>) {\n    const countryName = ctx.x509.getIssuerNameField({\n      certificate: this.certificate,\n      field: 'C',\n    })[0]\n\n    return countryName\n  }\n\n  public getIssuingStateOrProvince(ctx: Pick<Sign1Context, 'x509'>) {\n    const stateOrProvince = ctx.x509.getIssuerNameField({\n      certificate: this.certificate,\n      field: 'ST',\n    })[0]\n\n    return stateOrProvince\n  }\n\n  public get toBeSigned() {\n    const payload = this.payload ?? this.detachedPayload\n\n    if (!payload) {\n      throw new CosePayloadMustBeDefinedError()\n    }\n\n    return Sign1.toBeSigned({\n      payload,\n      protectedHeaders: this.protectedHeaders,\n      externalAad: this.externalAad,\n    })\n  }\n\n  /**\n   * Decodes CBOR bytes into a Sign1 instance.\n   * Uses the encodingSchema's decode() method to validate and transform the decoded data.\n   */\n  public static decode<T extends AnyCborStructure>(this: CborStructureStaticThis<T>, bytes: Uint8Array): T {\n    const rawStructure = cborDecode(bytes)\n\n    // May feel weird, but using new this makes TypeScript understand we may return a subclass\n    return new Sign1(\n      // NOTE: If decoded with Sign1 tag, the cbor decoder already transforms to the class instances\n      // In that case we create new instance based on the decoded structure, to ensure we create the\n      // instance based on this (and ensure extended classes work)\n      rawStructure instanceof Sign1\n        ? rawStructure.decodedStructure\n        : Sign1.fromEncodedStructure(rawStructure as EncodedStructureType<T>).decodedStructure\n    ) as unknown as T\n  }\n\n  public static toBeSigned(options: {\n    payload: Uint8Array\n    protectedHeaders: ProtectedHeaders\n    externalAad?: Uint8Array\n  }) {\n    const toBeSigned = [\n      'Signature1',\n      options.protectedHeaders.encodedStructure,\n      options.externalAad ?? new Uint8Array(),\n      options.payload,\n    ]\n\n    return cborEncode(toBeSigned)\n  }\n\n  public get signatureAlgorithmName(): string {\n    // FIXME: why are we looking at the unprotected header for the alg?\n    const algorithm = (this.protectedHeaders.headers?.get(RegisteredCwtHeaderClaimKey.Algorithm) ??\n      this.unprotectedHeaders.headers?.get(RegisteredCwtHeaderClaimKey.Algorithm)) as SignatureAlgorithm | undefined\n\n    if (!algorithm) {\n      throw new CoseInvalidAlgorithmError()\n    }\n\n    const algorithmName = coseKeyToJwk.algorithm(algorithm)\n    if (!algorithmName) {\n      throw new CoseInvalidAlgorithmError()\n    }\n\n    return algorithmName\n  }\n\n  public get x5chain() {\n    // TODO: typed keys for headers\n    // FIXME: why are we looking at unprotected header for x5c?\n    const x5chain =\n      (this.protectedHeaders.headers?.get(RegisteredCwtHeaderClaimKey.X5Chain) as\n        | Uint8Array\n        | Uint8Array[]\n        | undefined) ??\n      (this.unprotectedHeaders.headers?.get(RegisteredCwtHeaderClaimKey.X5Chain) as\n        | Uint8Array\n        | Uint8Array[]\n        | undefined)\n\n    if (!x5chain?.[0]) {\n      return undefined\n    }\n\n    return Array.isArray(x5chain) ? x5chain : [x5chain]\n  }\n\n  public async verifySignature(options: { key?: CoseKey }, ctx: Pick<Sign1Context, 'getPublicKey' | 'verify'>) {\n    const publicKey =\n      options.key ??\n      (this.certificate\n        ? await ctx.getPublicKey({\n            certificate: this.certificate,\n            alg: this.signatureAlgorithmName,\n          })\n        : undefined)\n\n    if (!publicKey) {\n      throw new CoseCertificateNotFoundError()\n    }\n\n    return await ctx.verify({\n      sign1: this,\n      key: publicKey,\n    })\n  }\n\n  public static create(options: Sign1Options) {\n    const payload = options.payload ?? options.detachedPayload\n    if (!payload) {\n      throw new CosePayloadMustBeDefinedError()\n    }\n\n    const protectedHeaders =\n      options.protectedHeaders instanceof ProtectedHeaders\n        ? options.protectedHeaders\n        : options.protectedHeaders\n          ? ProtectedHeaders.fromDecodedStructure(options.protectedHeaders)\n          : ProtectedHeaders.create({})\n\n    const unprotectedHeaders =\n      options.unprotectedHeaders instanceof UnprotectedHeaders\n        ? options.unprotectedHeaders\n        : options.unprotectedHeaders\n          ? UnprotectedHeaders.fromDecodedStructure(options.unprotectedHeaders)\n          : UnprotectedHeaders.create({})\n\n    const sign1 = new Sign1({\n      protectedHeaders,\n      unprotectedHeaders,\n      payload,\n      signature: new Uint8Array(),\n    })\n\n    sign1.externalAad = options.externalAad\n    sign1.detachedPayload = options.detachedPayload\n\n    return sign1\n  }\n\n  public async sign(\n    options: {\n      externalAad?: Uint8Array\n      signingKey: CoseKey\n      algorithm?: SignatureAlgorithm\n      detachedPayload?: Uint8Array\n    },\n    ctx: Pick<Sign1Context, 'sign'>\n  ) {\n    const payload = this.payload ?? options.detachedPayload\n    if (!payload) {\n      throw new CosePayloadMustBeDefinedError()\n    }\n    const signatureAlgorithm = options.algorithm ?? options.signingKey.algorithm\n\n    if (!signatureAlgorithm) {\n      throw new CoseInvalidAlgorithmError(\n        'Could not establish signature algorithm. Either provide it in the options directly, or provide it in the signingKey'\n      )\n    }\n\n    this.structure.signature = await ctx.sign({\n      toBeSigned: Sign1.toBeSigned({\n        payload,\n        protectedHeaders: this.protectedHeaders,\n        externalAad: options.externalAad,\n      }),\n      key: options.signingKey,\n      algorithm: signatureAlgorithm,\n    })\n\n    return this\n  }\n}\n\naddExtension({\n  Class: Sign1,\n  tag: Sign1.tag,\n  encode(instance: Sign1, encodeFn: (obj: unknown) => Uint8Array) {\n    return encodeFn(instance)\n  },\n  decode: (encoded) => Sign1.fromEncodedStructure(encoded as Sign1EncodedStructure),\n})\n","import { cborDecode } from '../cbor'\nimport { Mac0, type Mac0Options } from './mac0'\nimport { Sign1, type Sign1Options } from './sign1'\n\nexport type CwtOptions = Sign1Options | Mac0Options\n\nexport class Cwt {\n  public constructor(private options: CwtOptions) {}\n\n  public static create(options: CwtOptions) {\n    return new Cwt(options)\n  }\n\n  public static fromToken(token: Uint8Array) {\n    const decoded = cborDecode<Sign1 | Mac0>(token)\n    return new Cwt(decoded)\n  }\n\n  public get asSign1() {\n    return Sign1.create(this.options)\n  }\n\n  public get asMac0() {\n    return Mac0.create(this.options)\n  }\n\n  public get payload() {\n    const payload = this.options.payload ?? this.options.detachedPayload\n    if (!payload) {\n      throw new Error('Neither `payload`, nor `detachedPayload` is defined')\n    }\n\n    return payload\n  }\n\n  public get protectedHeaders() {\n    return this.options.protectedHeaders\n  }\n\n  public get unprotectedHeaders() {\n    return this.options.unprotectedHeaders\n  }\n}\n"],"mappings":";;;;;AAGAA,IAAE,OAAO,EACP,aAAa,gBAAgB,EAC9B,CAAC;AAEF,SAAS,eAAe,OAA4B;AAClD,KAAI,CAAC,MAAO,QAAO;AAEnB,QAAO,UAAU,OAAO;EACtB,QAAQ;EACR,iBAAiB;EACjB,gBAAgB;EAChB,gBAAgB;EACjB,CAAC,CAAC,UAAU;;AAKf,IAAa,kBAAb,cAAqC,MAAM;CAGzC,YAAY,SAAiB,UAAqB;AAChD,QAAM,QAAQ;EAEd,MAAM,iBAAiB,WAAW,eAAe,SAAS,GAAG;AAC7D,OAAK,UAAU,GAAG,QAAQ,IAAI;AAE9B,SAAO,eAAe,MAAM,YAAY;GACtC,OAAO;GACP,UAAU;GACV,YAAY;GACb,CAAC;;;;;AC7BN,MAAa,cAAcC,IAAE,WAA+C,WAAW;AAKvF,SAAgB,gCACd,eACA,QACA,MACA,oBACiB;CACjB,MAAM,cAAcA,IAAE,UAAU,QAAQ,KAAK;AAE7C,KAAI,CAAC,YAAY,QACf,OAAM,IAAI,gBAAgB,sBAAsB,kBAAkB,iBAAiB,YAAY,MAAM;AAGvG,QAAO,YAAY;;AAGrB,SAAgB,iCACd,eACA,QACA,MACA,oBACiB;CACjB,MAAM,eAAeA,IAAE,WAAW,QAAQ,KAAK;AAE/C,KAAI,CAAC,aAAa,QAChB,OAAM,IAAI,gBAAgB,sBAAsB,kBAAkB,iBAAiB,aAAa,MAAM;AAGxG,QAAO,aAAa;;AAGtB,SAAgB,iCACd,eACA,QACA,MACA,oBACiB;CACjB,MAAM,eAAeA,IAAE,WAAW,QAAQ,KAAK;AAE/C,KAAI,CAAC,aAAa,QAChB,OAAM,IAAI,gBAAgB,sBAAsB,kBAAkB,iBAAiB,aAAa,MAAM;AAGxG,QAAO,aAAa;;;;AC5CtB,MAAM,kBAA+B;CACnC,eAAe;CACf,YAAY;CACZ,eAAe;CACf,wBAAwB;CACxB,iBAAiB;CAClB;AAED,MAAa,cAAiB,OAAmB,UAAuB,oBAAuB;CAC7F,MAAM,SAAS;EAAE,GAAG;EAAiB,GAAG;EAAS;CAEjD,MAAM,UADM,IAAI,QAAQ,OAAO,CACX,OAAO,MAAM;AACjC,QAAO,OAAO,0BAA0B,OAAO,YAAY,YAAY,mBAAmB,WACrF,QAAQ,OACR;;AAGP,MAAa,cAAc,KAAc,UAAmB,oBAAgC;CAE1F,MAAM,MAAM,IAAI,QADD;EAAE,GAAG;EAAiB,GAAG;EAAS,CAClB;AAC/B,QAAO,WAAW,KAAK,IAAI,OAAO,IAAI,CAAC;;;;ACvBzC,MAAa,kBAAkB,iBAC7BC,IAAE,MAAMA,IAAE,WAAW,SAAS,EAAE,cAAc;CAC5C,SAAS,SAAS,SAAS,SAAS,KAAK;CACzC,SAAS,aAAa,SAAS;CAChC,CAAC;;;;;;;;;;;;AAqBJ,IAAa,WAAb,MAAa,SAAsB;CACjC;CACA;CAEA,YAAmB,SAA6B;AAC9C,MAAI,EAAE,UAAU,YAAY,EAAE,YAAY,SACxC,OAAM,IAAI,MAAM,gEAAgE;AAGlF,MAAI,UAAU,QAAS,OAAA,OAAa,QAAQ;AAC5C,QAAA,SAAe,YAAY,UAAU,QAAQ,SAAS,WAAW,QAAQ,KAAK;;CAGhF,IAAW,OAAU;AACnB,MAAI,CAAC,MAAA,KACH,OAAA,OAAa,WAAW,MAAA,OAAa;AAEvC,SAAO,MAAA;;CAGT,IAAW,SAAqB;AAC9B,SAAO,MAAA;;CAGT,OAAc,SAAY,MAAsB;AAC9C,SAAO,IAAI,SAAS,EAAE,MAAM,CAAC;;CAG/B,OAAc,WAAc,QAAiC;AAC3D,SAAO,IAAI,SAAS,EAAE,QAAQ,CAAC;;;AAInCG,eAAa;CACX,OAAO;CACP,KAAK;CACL,SAAS,UAA6B,WAAW;AAC/C,SAAO,OAAO,SAAS,OAAO;;CAEhC,SAAS,WAA+B;AACtC,SAAO,SAAS,WAAW,OAAO;;CAErC,CAAC;;;AC7CF,IAAa,gBAAb,MAA4F;CAI1F,YAAmB,WAA6B;AAC9C,OAAK,YAAY;;CAGnB,IAAW,mBAAqC;AAC9C,SAAO,KAAK;;;;;;;;CASd,WAAkB,iBAAwC;;;;;;CAS1D,IAAW,mBAAqC;EAC9C,MAAM,iBAAkB,KAAK,YAAqC;AAClE,MAAI,CAAC,eACH,OAAM,IAAI,MAAM,2EAA2E;AAG7F,SAAO,iCAAiC,KAAK,YAAY,MAAM,gBAAgB,KAAK,UAAU;;;;;CAMhG,OAAc,SAAyC;EACrD,MAAM,mBAAmB,SAAS,aAAa,SAAS,SAAS,KAAK,iBAAiB,GAAG,KAAK;AAG/F,SAAO,WAFQ,KAAK,OAAO,IAAI,IAAI,kBAAkB,KAAK,KAAK,GAAG,iBAEzC;;;;;;CAO3B,OAAc,OAAqE,OAAsB;EACvG,MAAM,eAAe,WAAW,MAAM;AAGtC,SAAO,IAAI,KAAK,KAAK,qBAAqB,aAAwC,CAAC,iBAAiB;;;;;;;;CAStG,OAAc,qBAEZ,kBACG;AACH,MAAI,CAAC,KAAK,eACR,OAAM,IAAI,MAAM,+EAA+E;AAGjG,SAAO,IAAI,KAAK,iCAAiC,KAAK,MAAM,KAAK,gBAAgB,iBAAiB,CAAC;;CAGrG,OAAc,aAA2E,UAAsB;AAC7G,SAAO,IAAI,KACT,gCACE,KAAK,MACL,EACG,WAAW,SAAS,CACpB,WAAW,OAAO,GAAG,KAAK,CAC1B,WAAW,MAAM,KAAK,qBAAqB,EAAS,CAAC,iBAAiB,EACzE,UACA,kBAAkB,KAAK,KAAK,gBAC7B,CACF;;;;;;;;CASH,OAAc,qBAEZ,kBACG;EACH,MAAM,iBAAiB,KAAK;AAC5B,MAAI,CAAC,eACH,OAAM,IAAI,MAAM,+EAA+E;EAIjG,MAAM,gBAAgB,0BAA0B,EAAE,UAAU,eAAe,MAAM;AAEjF,SAAO,IAAI,KAAK,gCAAgC,KAAK,MAAM,eAAe,iBAAiB,CAAC;;;;;AChIhGC,eAAa;CACX,OAAO;CACP,KAAK;CACL,SAAS,MAAY,WAAW,OAAO,GAAG,KAAK,aAAa,CAAC,MAAM,IAAI,CAAC,GAAG,GAAG;CAC9E,SAAS,sBAA8B,IAAI,KAAK,kBAAkB;CACnE,CAAC;;;ACPF,MAAM,sBAAsB,OAAO,IAAI,6BAA6B;AACpE,IAAa,WAAb,MAAa,SAAS;CAGpB,YAAmB,MAAe;AAChC,OAAK,OAAO,OAAO,IAAI,KAAK,KAAK,mBAAG,IAAI,MAAM;;CAGhD,KAAK,OAAO,eAAe;AACzB,SAAO,SAAS;;CAGlB,WAAW;AACT,SAAO,KAAK,aAAa;;CAG3B,SAAS;AACP,SAAO,KAAK,aAAa;;CAG3B,cAAsB;AACpB,SAAO,KAAK,KAAK,aAAa,CAAC,MAAM,IAAI,CAAC;;CAG5C,CAAC,uBAA+B;AAC9B,SAAO,KAAK,aAAa;;;AAM7BC,eAAa;CACX,OAAO;CACP,KAAK;CACL,SAAS,MAAgB,WAAW,OAAO,KAAK,aAAa,CAAC;CAC9D,SAAS,kBAA0B,IAAI,SAAS,cAAc;CAC/D,CAAC;;;;;;;;;AChCF,IAAY,wBAAL,yBAAA,uBAAA;AACL,uBAAA,sBAAA,YAAA,KAAA;AACA,uBAAA,sBAAA,aAAA,KAAA;AACA,uBAAA,sBAAA,cAAA,KAAA;AACA,uBAAA,sBAAA,oBAAA,KAAA;AACA,uBAAA,sBAAA,eAAA,KAAA;AACA,uBAAA,sBAAA,cAAA,KAAA;AACA,uBAAA,sBAAA,WAAA,KAAA;;KACD;;;ACbD,IAAM,YAAN,cAAwB,MAAM;CAC5B,YAAY,UAAkB,IAAI,OAAO,MAAM;AAC7C,QAAM,QAAQ;;;AAIlB,IAAa,0BAAb,cAA6C,UAAU;AACvD,IAAa,4BAAb,cAA+C,UAAU;AACzD,IAAa,4BAAb,cAA+C,UAAU;AACzD,IAAa,6BAAb,cAAgD,UAAU;AAC1D,IAAa,gCAAb,cAAmD,UAAU;AAC7D,IAAa,mCAAb,cAAsD,UAAU;AAChE,IAAa,6BAAb,cAAgD,UAAU;AAC1D,IAAa,8BAAb,cAAiD,UAAU;AAC3D,IAAa,4BAAb,cAA+C,UAAU;AACzD,IAAa,uBAAb,cAA0C,UAAU;AACpD,IAAa,uBAAb,cAA0C,UAAU;AACpD,IAAa,uBAAb,cAA0C,UAAU;AACpD,IAAa,uBAAb,cAA0C,UAAU;AACpD,IAAa,qCAAb,cAAwD,UAAU;AAClE,IAAa,+BAAb,cAAkD,UAAU;AAC5D,IAAa,sDAAb,cAAyE,UAAU;;;;;;;;ACjBnF,IAAY,8BAAL,yBAAA,6BAAA;AACL,6BAAA,4BAAA,eAAA,KAAA;AACA,6BAAA,4BAAA,cAAA,KAAA;AACA,6BAAA,4BAAA,iBAAA,KAAA;AACA,6BAAA,4BAAA,WAAA,KAAA;AACA,6BAAA,4BAAA,QAAA,KAAA;AACA,6BAAA,4BAAA,eAAA,KAAA;AACA,6BAAA,4BAAA,sBAAA,KAAA;AACA,6BAAA,4BAAA,uBAAA,KAAA;AACA,6BAAA,4BAAA,wBAAA,MAAA;AACA,6BAAA,4BAAA,yBAAA,MAAA;AACA,6BAAA,4BAAA,WAAA,MAAA;AACA,6BAAA,4BAAA,aAAA,MAAA;AACA,6BAAA,4BAAA,SAAA,MAAA;AACA,6BAAA,4BAAA,SAAA,MAAA;;KACD;AAED,IAAY,qBAAL,yBAAA,oBAAA;AACL,oBAAA,mBAAA,WAAA,MAAA;AACA,oBAAA,mBAAA,WAAA,MAAA;AACA,oBAAA,mBAAA,WAAA,OAAA;AACA,oBAAA,mBAAA,WAAA,OAAA;AACA,oBAAA,mBAAA,WAAA,OAAA;AACA,oBAAA,mBAAA,WAAA,OAAA;AACA,oBAAA,mBAAA,WAAA,OAAA;AACA,oBAAA,mBAAA,WAAA,QAAA;AACA,oBAAA,mBAAA,WAAA,QAAA;AACA,oBAAA,mBAAA,WAAA,QAAA;;KACD;AAED,IAAY,eAAL,yBAAA,cAAA;AACL,cAAA,aAAA,WAAA,KAAA;AACA,cAAA,aAAA,WAAA,KAAA;AACA,cAAA,aAAA,WAAA,KAAA;;KACD;AAED,IAAY,sBAAL,yBAAA,qBAAA;AACL,qBAAA,oBAAA,aAAA,KAAA;AACA,qBAAA,oBAAA,aAAA,KAAA;AACA,qBAAA,oBAAA,aAAA,KAAA;AACA,qBAAA,oBAAA,YAAA,MAAA;;KACD;;;ACvCD,MAAa,mCAAmC;AAChD,MAAa,mCAAmCC,IAAE,IAAIA,IAAE,QAAQ,EAAEA,IAAE,SAAS,CAAC;AAS9E,IAAa,mBAAb,MAAa,yBAAyB,cAGpC;CACA,WAA2B,iBAAiB;AAC1C,SAAOA,IAAE,MAAM,kCAAkC,kCAAkC;GAEjF,SAAS,YAAY,WAAW,QAAQ;GACxC,SAAS,YAAY,WAAW,QAAQ;GACzC,CAAC;;CAGJ,IAAW,UAAU;AACnB,SAAO,KAAK;;CAGd,OAAc,OAAO,SAAiC;AACpD,SAAO,iBAAiB,qBAAqB,QAAQ,oCAAoB,IAAI,KAAK,CAAC;;;;;AC/BvF,MAAa,8BAA8BC,IAAE,IAAIA,IAAE,QAAQ,EAAEA,IAAE,SAAS,CAAC;AAQzE,IAAa,qBAAb,MAAa,2BAA2B,cAA2C;CACjF,WAA2B,iBAAiB;AAC1C,SAAO;;CAGT,IAAW,UAAU;AACnB,SAAO,KAAK;;CAGd,OAAc,OAAO,SAAmC;AACtD,SAAO,mBAAmB,qBAAqB,QAAQ,sCAAsB,IAAI,KAAK,CAAC;;;;;ACrB3F,IAAY,QAAL,yBAAA,OAAA;AACL,OAAA,MAAA,WAAA,KAAA;AACA,OAAA,MAAA,WAAA,KAAA;AACA,OAAA,MAAA,WAAA,KAAA;AACA,OAAA,MAAA,YAAA,KAAA;AACA,OAAA,MAAA,UAAA,KAAA;AACA,OAAA,MAAA,aAAA,KAAA;AACA,OAAA,MAAA,WAAA,KAAA;;KACD;;;ACRD,IAAY,SAAL,yBAAA,QAAA;AACL,QAAA,OAAA,UAAA,KAAA;AACA,QAAA,OAAA,YAAA,KAAA;AACA,QAAA,OAAA,aAAA,KAAA;AACA,QAAA,OAAA,aAAA,KAAA;AACA,QAAA,OAAA,aAAA,KAAA;AACA,QAAA,OAAA,eAAA,KAAA;AACA,QAAA,OAAA,eAAA,KAAA;AACA,QAAA,OAAA,gBAAA,KAAA;AACA,QAAA,OAAA,eAAA,KAAA;AACA,QAAA,OAAA,eAAA,MAAA;;KACD;;;ACXD,IAAY,UAAL,yBAAA,SAAA;AACL,SAAA,QAAA,SAAA,KAAA;AACA,SAAA,QAAA,QAAA,KAAA;AACA,SAAA,QAAA,SAAA,KAAA;AACA,SAAA,QAAA,cAAA,KAAA;;KACD;;;ACED,MAAM,WAAW,QACf,OAAO,YAAY,OAAO,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC;AAE7E,MAAM,iBAAiB,cACrB,OAAO,YACL,OAAO,QAAQ,UAAU,CAAC,KAAK,CAAC,UAAU,cAAc,CACtD,UACA,OAAO,YAAY,OAAO,QAAQ,SAAS,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC,CACjF,CAAC,CACH;AAEH,MAAM,gBAAgB;CACpB,KAAK;EACH,KAAA;EACA,IAAA;EACA,KAAA;EACD;CACD,KAAK;EACH,SAAA;EACA,SAAA;EACA,SAAA;EACA,QAAA;EACA,SAAA;EACA,OAAA;EACD;CACD,KAAK;EACH,OAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;EAEA,OAAA;EACA,OAAA;EACA,OAAA;EAEA,SAAA;EACA,SAAA;EACA,SAAA;EACA,QAAA;EACD;CACD,QAAQ;EACN,MAAA;EACA,QAAA;EACA,SAAA;EACA,SAAA;EACA,SAAA;EACA,WAAA;EACA,WAAA;EACA,YAAA;EACA,WAAA;EACA,WAAA;EACD;CACF;AAED,MAAM,gBAAgB,cAAc,cAAc;AAElD,MAAa,oBAA0D;CACrE,KAAK;CACL,KAAK;CACL,KAAK;CACL,QAAQ;CACR,QAAQ;CACR,KAAK;CACL,GAAG;CACH,GAAG;CACH,GAAG;CACJ;AAED,MAAa,oBAAoB,QAAQ,kBAAkB;AAE3D,MAAa,eAAe;CAC1B,MAAM,QAAkB;AACtB,SAAO,cAAc,IAAI,QAA+C;;CAE1E,MAAM,QAAkB,cAAc,IAAI,QAA+C;CACzF,MAAM,QAAkB,cAAc,IAAI,QAA+C;CACzF,MAAM,QAAkB;CACxB,SAAS,WACP,MAAM,QAAQ,OAAO,GACjB,QAAQ,KAAK,OAAO,cAAc,OAAO,OAAiD,GAAG,GAC7F,KAAA;CACN,IAAI,MAAiB,KAAK,OAAO,MAAM,WAAW,UAAU,OAAO,EAAE,GAAG,KAAA;CACxE,IAAI,MAAiB,KAAK,OAAO,MAAM,WAAW,UAAU,OAAO,EAAE,GAAG,KAAA;CACxE,IAAI,MAAiB,KAAK,OAAO,MAAM,WAAW,UAAU,OAAO,EAAE,GAAG,KAAA;CACzE;AAED,MAAa,eAAe;CAC1B,UAAU,YAAqB,cAAc,IAAI;CACjD,QAAQ,UAAmB;CAC3B,YAAY,cAAmD,YAAY,cAAc,IAAI,aAAa,KAAA;CAC1G,SAAS,WACP,UAAU,MAAM,QAAQ,OAAO,GAAG,OAAO,KAAK,OAAO,cAAc,OAAO,IAAI,GAAG,KAAA;CACnF,SAAS,WAAqB;CAC9B,QAAQ,UAAmB,QAAQ,cAAc,IAAI,SAAS,KAAA;CAC9D,IAAI,MAAoB,IAAI,UAAU,OAAO,EAAE,GAAG,KAAA;CAClD,IAAI,MAAoB,IAAI,UAAU,OAAO,EAAE,GAAG,KAAA;CAClD,IAAI,MAAoB,IAAI,UAAU,OAAO,EAAE,GAAG,KAAA;CACnD;;;ACrFD,MAAa,oBAAoB,EAAE,MAAM;CACvC;CACA,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC;CAC/B,YAAY,UAAU;CACtB;CACD,CAAC;AAEF,MAAa,oBAAoB,EAAE,OAAO;CACxC,kBAAkB,EAAE,WAAW,iBAAiB;CAChD,oBAAoB,EAAE,WAAW,mBAAmB;CACpD,SAAS,YAAY,UAAU;CAC/B,KAAK;CACN,CAAC;AAkBF,IAAa,OAAb,MAAa,aAAa,cAA0D;;;cAExD,KAAK;;;aADX;;CAGpB,WAA2B,iBAAiB;AAC1C,SAAO,EAAE,MAAM,mBAAmB,mBAAmB;GACnD,SAAS,EAAE,kBAAkB,oBAAoB,SAAS,UAAU;AAClE,QAAI,IAAI,WAAW,EACjB,OAAM,IAAI,MAAM,iEAAiE;AAEnF,WAAO;KACL,iBAAiB;KACjB,mBAAmB;KACnB;KACA;KACD;;GAEH,SAAS,CAAC,uBAAuB,uBAAuB,SAAS,UAAU;IACzE,kBAAkB,iBAAiB,qBACjC,sBACD;IACD,oBAAoB,mBAAmB,qBACrC,sBACD;IACD;IACA;IACD;GACF,CAAC;;CAMJ,IAAW,mBAAmB;AAC5B,SAAO,KAAK,UAAU;;CAGxB,IAAW,qBAAqB;AAC9B,SAAO,KAAK,UAAU;;CAGxB,IAAW,UAAU;AACnB,SAAO,KAAK,UAAU;;CAGxB,IAAW,MAAM;AACf,SAAO,KAAK,UAAU;;CAGxB,IAAW,oBAAoB;EAC7B,MAAM,UAAU,KAAK,WAAW,KAAK;AAErC,MAAI,CAAC,QACH,OAAM,IAAI,+BAA+B;AAG3C,SAAO,KAAK,kBAAkB;GAC5B;GACA,kBAAkB,KAAK;GACvB,aAAa,KAAK;GACnB,CAAC;;;;;;CAOJ,OAAc,OAAqE,OAAsB;EACvG,MAAM,eAAe,WAAW,MAAM;AAGtC,SAAO,IAAI,KAIT,wBAAwB,OACpB,aAAa,mBACb,KAAK,qBAAqB,aAAwC,CAAC,iBACxE;;CAGH,OAAc,kBAAkB,SAI7B;EACD,MAAM,oBAAoB,CAAC,QAAQ,QAAQ,iBAAiB,iBAAiB;AAC7E,MAAI,QAAQ,YAAa,mBAAkB,KAAK,QAAQ,YAAY;AACpE,oBAAkB,KAAK,QAAQ,QAAQ;AAEvC,SAAO,WAAW,kBAAkB;;CAGtC,IAAW,yBAAuC;EAChD,MAAM,YAAa,KAAK,iBAAiB,SAAS,IAAA,EAA0C,IAC1F,KAAK,mBAAmB,SAAS,IAAA,EAA0C;AAE7E,MAAI,CAAC,UACH,OAAM,IAAI,2BAA2B;EAGvC,MAAM,gBAAgB,aAAa,UAAU,UAAU;AAEvD,MAAI,CAAC,cACH,OAAM,IAAI,2BAA2B;AAGvC,SAAO;;CAGT,OAAc,OAAO,SAA4B;EAC/C,MAAM,mBACJ,QAAQ,4BAA4B,mBAChC,QAAQ,mBACR,iBAAiB,OAAO,EAAE,kBAAkB,QAAQ,kBAAkB,CAAC;EAE7E,MAAM,qBACJ,QAAQ,8BAA8B,qBAClC,QAAQ,qBACR,mBAAmB,OAAO,EAAE,oBAAoB,QAAQ,oBAAoB,CAAC;AAGnF,MAAI,EADY,QAAQ,WAAW,QAAQ,iBAEzC,OAAM,IAAI,+BAA+B;EAG3C,MAAM,OAAO,IAAI,KAAK;GACpB;GACA;GACA,SAAS,QAAQ,WAAW;GAC5B,KAAK,IAAI,YAAY;GACtB,CAAC;AAEF,OAAK,cAAc,QAAQ;AAC3B,OAAK,kBAAkB,QAAQ;AAE/B,SAAO;;CAGT,MAAa,aACX,SAGA,KACA;EACA,MAAM,UAAU,KAAK,WAAW,KAAK;AACrC,MAAI,CAAC,QACH,OAAM,IAAI,+BAA+B;AAG3C,OAAK,UAAU,MAAM,MAAM,IAAI,IAAI;GACjC,mBAAmB,KAAK,kBAAkB;IACxC;IACA,kBAAkB,KAAK;IACvB,aAAa,KAAK;IACnB,CAAC;GACF,KAAK,QAAQ;GACd,CAAC;AACF,SAAO;;;AAIX,aAAa;CACX,OAAO;CACP,KAAK,KAAK;CACV,OAAO,UAAgB,UAAwC;AAC7D,SAAO,SAAS,SAAS;;CAE3B,SAAS,YAAY,KAAK,qBAAqB,QAAgC;CAChF,CAAC;;;;;;;;;;;;;;;;;;;;;;;ACvMF,IAAa,WAAb,MAAa,SAA6F;CAGxG,YAAY,SAAoE;AAC9E,OAAK,MAAM,IAAI,IAAI,QAAQ;;CAI7B,OAAc,QAEZ,KACA;AACA,SAAO,IAAI,SAA+B,MAAM,KAAK,IAAI,SAAS,CAAC,CAAC;;CAItE,OAAc,WAEZ,QACA;AACA,SAAO,IAAI,SAA+B,MAAM,KAAK,OAAO,QAAQ,OAAO,CAAC,CAAC;;;;;;CAO/E,IAA4B,KAAoE;AAE9F,SAAO,KAAK,IAAI,IAAI,IAAI;;;;;CAM1B,IAA4B,KAAQ,OAAwB;AAC1D,OAAK,IAAI,IAAI,KAAK,MAAM;AACxB,SAAO;;CAGT,IAAI,KAA4B;AAC9B,SAAO,KAAK,IAAI,IAAI,IAAI;;CAG1B,OAAO,KAA4B;AACjC,SAAO,KAAK,IAAI,OAAO,IAAI;;CAG7B,QAAc;AACZ,OAAK,IAAI,OAAO;;CAGlB,IAAI,OAAe;AACjB,SAAO,KAAK,IAAI;;CAGlB,OAAuC;AACrC,SAAO,KAAK,IAAI,MAAM;;CAGxB,SAAiD;AAC/C,SAAO,KAAK,IAAI,QAAQ;;CAG1B,UAAkE;AAChE,SAAO,KAAK,IAAI,SAAS;;CAG3B,QACE,YAEA,SACM;AACN,OAAK,IAAI,QAAQ,YAAY,QAAQ;;CAGvC,CAAC,OAAO,YAAoE;AAC1E,SAAO,KAAK,IAAI,OAAO,WAAW;;CAGpC,QAAiD;AAC/C,SAAO,IAAI,IAAI,KAAK,IAAI;;;;;;;;;;AAkB5B,MAAM,mBAAmB,WACvB,CAAC,OAAO,UAAU,KAAA,EAAU,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;;;;;;;;;;;;;;AAqCnF,SAAgB,SACd,SACA,EACE,sBAAsB,MACtB,QACA,WA0BE,EAAE,EACN;CAEA,MAAM,eAAe,QAAQ,QAAQ,GAAG,iBAAiB,CAAC,gBAAgB,YAAY,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI;CAE3G,MAAM,YAAY,IAAI,IAAI,QAAQ;CAElC,MAAM,kBAAkB,YAAsE,QAAQ,OAAO;CAC7G,MAAM,kBAAkB,YACtB,SAAS,QAAwD,QAAQ;AAE3E,QAAO,EAAE,MAEP,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,EAE/B,EAAE,WAA4E,SAAS,CAAC,aAAa,KAAK,QAAQ;EAEhH,MAAM,iBAAiB,MAAM,KAAK,IAAI,MAAM,CAAC,CAAC,QAAQ,QAAQ,CAAC,UAAU,IAAI,IAAuB,CAAC;AACrG,MAAI,eAAe,SAAS,KAAK,CAAC,oBAChC,MAAK,MAAM,iBAAiB,eAC1B,KAAI,OAAO,kBAAkB,YAAY,OAAO,kBAAkB,SAChE,KAAI,SAAS;GACX,MAAM;GACN,QAAQ;GACR,UAAU;GACV,MAAM,EAAE;GACR,OAAO;GACP,QAAQ,EAAE;GACV,SAAS;GACV,CAAC;MAEF,KAAI,SAAS;GACX,MAAM;GACN,QAAQ;GACR,UAAU;GACV,MAAM,CAAC,cAAc;GACrB,OAAO;GACP,QAAQ,EAAE;GACV,SAAS,mBAAmB,cAAc;GAC3C,CAAC;AAKR,OAAK,MAAM,CAAC,KAAK,gBAAgB,UAAU,SAAS,EAAE;GACpD,MAAM,SAAS,IAAI,IAAI,IAAI;GAC3B,MAAM,QAAQ,IAAI,IAAI,IAAI;AAE1B,OAAI,CAAC,UAAU,aAAa,SAAS,IAAI,EAAE;AACzC,QAAI,SAAS;KACX,MAAM;KACN,UAAU;KACV,SAAS,iBAAiB,IAAI;KAC9B,MAAM,CAAC,IAAI;KACX,QAAQ,EAAE;KACV,OAAO;KACR,CAAC;AACF;;AAIF,OAAI,CAAC,UAAU,CAAC,aAAa,SAAS,IAAI,CACxC;GAGF,MAAM,cAAc,YAAY,UAAU,MAAM;AAChD,OAAI,CAAC,YAAY,QACf,MAAK,MAAM,SAAS,YAAY,MAAM,OACpC,KAAI,SAAS;IACX,GAAG;IAGH,MAAM,CAAC,GAAG,OAAO,GAAG,MAAM,KAAK;IAChC,CAA+B;;GAItC,EACF;EACE,SAAS,UAAW,SAAS,OAAO,OAAO,eAAe,GAAG,eAAe,MAAM;EAClF,SAAS,WAAY,SAAS,OAAO,QAAQ,eAAe,GAAG,eAAe,OAAO;EACtF,CACF;;;;AC/PH,IAAY,mBAAL,yBAAA,kBAAA;AACL,kBAAA,iBAAA,aAAA,KAAA;AACA,kBAAA,iBAAA,WAAA,KAAA;AACA,kBAAA,iBAAA,eAAA,KAAA;AACA,kBAAA,iBAAA,YAAA,KAAA;AACA,kBAAA,iBAAA,YAAA,KAAA;AAGA,kBAAA,iBAAA,cAAA,MAAA;AACA,kBAAA,iBAAA,OAAA,MAAA;AACA,kBAAA,iBAAA,OAAA,MAAA;AACA,kBAAA,iBAAA,OAAA,MAAA;;KACD;AAGD,MAAM,gBAAgB,SAAS;CAC7B,CAAA,GAA2B,EAAE,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;CAClE,CAAA,GAKE,YAAY,GAAG,EAAE,QAAQ,CAAC,CAAC,eAAe,CAC3C;CACD,CAAA,GAEE,EACG,MAAM,CACL,EAAE,OAAO,EAAE,OAAO,mCAAmC,CAAC,EACtD,EAAE,OAAO,EAAE,OAAO,mCAAmC,CAAC,CACvD,CAAC,CACD,eAAe,CACnB;CACD,CAAA,GAA0B,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;CACzF,CAAA,GAA0B,YAAY,eAAe,CAAC;CACtD,CAAA,IAA4B,EAAE,MAAM,CAAC,EAAE,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC,eAAe,CAAC;CAClF,CAAA,IAAqB,YAAY,eAAe,CAAC;CACjD,CAAA,IAAqB,YAAY,eAAe,CAAC;CACjD,CAAA,IAAqB,YAAY,eAAe,CAAC;CAClD,CAAU;AAuBX,IAAa,UAAb,MAAa,gBAAgB,cAAgE;CAC3F,WAA2B,iBAAiB;AAC1C,SAAO;;CAGT,IAAW,UAAU;AACnB,SAAO,KAAK,UAAU,IAAA,EAA6B;;CAGrD,IAAW,QAAQ;EACjB,MAAM,QAAQ,KAAK,UAAU,IAAA,EAA2B;AACxD,SAAO,iBAAiB,aAAa,cAAc,MAAM,GAAG;;CAG9D,IAAW,YAAY;AACrB,SAAO,KAAK,UAAU,IAAA,EAA+B;;CAGvD,IAAW,SAAS;AAClB,SAAO,KAAK,UAAU,IAAA,EAA4B;;CAGpD,IAAW,SAAS;AAClB,SAAO,KAAK,UAAU,IAAA,EAA4B;;CAGpD,IAAW,QAAQ;AACjB,MAAI,KAAK,YAAA,KAA0B,KAAK,YAAA,EAEtC,QAAO,KAAK,UAAU,IAAA,GAA8B;;CAMxD,IAAW,IAAI;AACb,SAAO,KAAK,UAAU,IAAA,GAAuB;;CAG/C,IAAW,IAAI;AACb,SAAO,KAAK,UAAU,IAAA,GAAuB;;CAG/C,IAAW,IAAI;AACb,SAAO,KAAK,UAAU,IAAA,GAAuB;;CAG/C,IAAW,IAAI;AACb,MAAI,KAAK,YAAA,EACP,QAAO,KAAK,UAAU,IAAA,GAA8B;;CAKxD,OAAc,OAAO,SAAkC;EACrD,MAAM,MAA+B,IAAI,SAAS,CAAC,CAAA,GAA2B,QAAQ,QAAQ,CAAC,CAAC;AAEhG,MAAI,QAAQ,UAAU,KAAA,EACpB,KAAI,IAAA,GAA4B,cAAc,QAAQ,MAAM,CAAC;AAG/D,MAAI,QAAQ,cAAc,KAAA,EACxB,KAAI,IAAA,GAAgC,QAAQ,UAAU;AAGxD,MAAI,QAAQ,WAAW,KAAA,EACrB,KAAI,IAAA,GAA6B,QAAQ,OAAO;AAGlD,MAAI,QAAQ,WAAW,KAAA,EACrB,KAAI,IAAA,GAA6B,QAAQ,OAAO;AAGlD,MAAI,QAAQ,UAAU,KAAA,EACpB,KAAI,IAAA,IAA+B,QAAQ,MAAM;AAGnD,MAAI,QAAQ,MAAM,KAAA,EAChB,KAAI,IAAA,IAAwB,QAAQ,EAAE;AAGxC,MAAI,QAAQ,MAAM,KAAA,EAChB,KAAI,IAAA,IAAwB,QAAQ,EAAE;AAGxC,MAAI,QAAQ,MAAM,KAAA,EAChB,KAAI,IAAA,IAAwB,QAAQ,EAAE;AAGxC,MAAI,QAAQ,MAAM,KAAA,EAChB,KAAI,IAAA,IAA+B,QAAQ,EAAE;AAG/C,SAAO,QAAQ,qBAAqB,IAAI;;CAI1C,OAAc,QAAQ,KAA8B;AAClD,MAAI,EAAE,SAAS,KACb,OAAM,IAAI,4BAA4B,0CAA0C;EAGlF,MAAM,UAAU,OAAO,QAAQ,IAAI,CAAC,QAAQ,MAAM,CAAC,KAAK,WAAW;GACjE,MAAM,YAAY,kBAAkB,QAAQ;GAE5C,MAAM,cAAc,aAAa;GACjC,MAAM,iBAAiB,cAAc,YAAY,MAAM,GAAG;AAG1D,OAAI,mBAAmB,KAAA,EAErB,QAAO;IAAE,GAAG;KAAO,YAAY;IAAgB;AAGjD,UAAO;KACN,EAAE,CAAmB;AAExB,SAAO,QAAQ,OAAO,QAAQ;;CAGhC,IAAW,YAAY;AACrB,MAAI,KAAK,YAAA,EACP,OAAM,IAAI,2BAA2B;AAGvC,MAAI,CAAC,KAAK,EACR,OAAM,IAAI,sBAAsB;AAGlC,MAAI,CAAC,KAAK,EACR,OAAM,IAAI,sBAAsB;AAGlC,SAAO,YAAY,WAAW,KAAK,CAAC,EAAK,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE;;CAG7D,IAAW,aAAa;AACtB,MAAI,KAAK,YAAA,GAAwB;AAC/B,OAAI,CAAC,KAAK,EACR,OAAM,IAAI,sBAAsB;AAGlC,UAAO,KAAK;;AAGd,MAAI,KAAK,YAAA,GAAyB;AAChC,OAAI,CAAC,KAAK,EACR,OAAM,IAAI,sBAAsB;AAGlC,UAAO,KAAK;;AAGd,QAAM,IAAI,qDAAqD;;CAGjE,IAAW,MAA+B;EAExC,MAAM,UAA0B;GAC9B,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,WAAW,KAAK;GAChB,QAAQ,KAAK;GACb,QAAQ,KAAK;GACb,OAAO,KAAK;GACZ,GAAG,KAAK;GACR,GAAG,KAAK;GACR,GAAG,KAAK;GACR,GAAG,KAAK;GACT;AAED,SAAO,OAAO,QAAQ,QAAQ,CAAC,QAC5B,MAAM,CAAC,KAAK,YAAY;GAEvB,GAAG;IACF,kBAAkB,QAAQ,MACzB,OAAO,aAAa,SAAsC,aAEtD,aAAa,KAAkC,MAAM,GACrD,KAAA;GACP,GACD,EAAE,CACH;;;;;AChPL,MAAa,qBAAqBC,IAAE,MAAM;CAExC;CAEA;CAEA,YAAY,UAAU;CAEtB;CACD,CAAC;AAEF,MAAa,qBAAqBA,IAAE,OAAO;CACzC,kBAAkBA,IAAE,WAAW,iBAAiB;CAChD,oBAAoBA,IAAE,WAAW,mBAAmB;CACpD,SAAS,mBAAmB,IAAI,MAAM;CACtC,WAAW,mBAAmB,IAAI,MAAM;CACzC,CAAC;AAwBF,IAAa,QAAb,MAAa,cAAc,cAA4D;;;cAE3D,MAAM;;;aADZ;;CAGpB,WAA2B,iBAAiB;AAC1C,SAAOA,IAAE,MAAM,oBAAoB,oBAAoB;GACrD,SAAS,YAAY;AACnB,QAAI,QAAQ,UAAU,WAAW,EAC/B,OAAM,IAAI,MAAM,wEAAwE;AAG1F,WAAO;KACL,QAAQ,iBAAiB;KACzB,QAAQ,mBAAmB;KAC3B,QAAQ;KACR,QAAQ;KACT;;GAEH,SAAS,CAAC,kBAAkB,aAAa,SAAS,gBAAgB;IAChE,kBAAkB,iBAAiB,qBAAqB,iBAAiB;IACzE,oBAAoB,mBAAmB,qBAAqB,YAAY;IACxE;IACA;IACD;GACF,CAAC;;CAMJ,IAAW,mBAAmB;AAC5B,SAAO,KAAK,UAAU;;CAGxB,IAAW,qBAAqB;AAC9B,SAAO,KAAK,UAAU;;CAGxB,IAAW,UAAU;AACnB,SAAO,KAAK,UAAU;;CAGxB,IAAW,YAAY;AACrB,SAAO,KAAK,UAAU;;CAGxB,IAAW,mBAAmB;AAC5B,SAAO,KAAK,WAAW,EAAE;;CAG3B,IAAW,cAAc;EACvB,MAAM,CAAC,eAAe,KAAK;AAE3B,MAAI,CAAC,YACH,OAAM,IAAI,8BAA8B;AAG1C,SAAO;;CAGT,kBAAyB,KAAiC;AAMxD,SALoB,IAAI,KAAK,mBAAmB;GAC9C,aAAa,KAAK;GAClB,OAAO;GACR,CAAC,CAAC;;CAKL,0BAAiC,KAAiC;AAMhE,SALwB,IAAI,KAAK,mBAAmB;GAClD,aAAa,KAAK;GAClB,OAAO;GACR,CAAC,CAAC;;CAKL,IAAW,aAAa;EACtB,MAAM,UAAU,KAAK,WAAW,KAAK;AAErC,MAAI,CAAC,QACH,OAAM,IAAI,+BAA+B;AAG3C,SAAO,MAAM,WAAW;GACtB;GACA,kBAAkB,KAAK;GACvB,aAAa,KAAK;GACnB,CAAC;;;;;;CAOJ,OAAc,OAAqE,OAAsB;EACvG,MAAM,eAAe,WAAW,MAAM;AAGtC,SAAO,IAAI,MAIT,wBAAwB,QACpB,aAAa,mBACb,MAAM,qBAAqB,aAAwC,CAAC,iBACzE;;CAGH,OAAc,WAAW,SAItB;AAQD,SAAO,WAPY;GACjB;GACA,QAAQ,iBAAiB;GACzB,QAAQ,eAAe,IAAI,YAAY;GACvC,QAAQ;GACT,CAE4B;;CAG/B,IAAW,yBAAiC;EAE1C,MAAM,YAAa,KAAK,iBAAiB,SAAS,IAAA,EAA0C,IAC1F,KAAK,mBAAmB,SAAS,IAAA,EAA0C;AAE7E,MAAI,CAAC,UACH,OAAM,IAAI,2BAA2B;EAGvC,MAAM,gBAAgB,aAAa,UAAU,UAAU;AACvD,MAAI,CAAC,cACH,OAAM,IAAI,2BAA2B;AAGvC,SAAO;;CAGT,IAAW,UAAU;EAGnB,MAAM,UACH,KAAK,iBAAiB,SAAS,IAAA,GAAwC,IAIvE,KAAK,mBAAmB,SAAS,IAAA,GAAwC;AAK5E,MAAI,CAAC,UAAU,GACb;AAGF,SAAO,MAAM,QAAQ,QAAQ,GAAG,UAAU,CAAC,QAAQ;;CAGrD,MAAa,gBAAgB,SAA4B,KAAoD;EAC3G,MAAM,YACJ,QAAQ,QACP,KAAK,cACF,MAAM,IAAI,aAAa;GACrB,aAAa,KAAK;GAClB,KAAK,KAAK;GACX,CAAC,GACF,KAAA;AAEN,MAAI,CAAC,UACH,OAAM,IAAI,8BAA8B;AAG1C,SAAO,MAAM,IAAI,OAAO;GACtB,OAAO;GACP,KAAK;GACN,CAAC;;CAGJ,OAAc,OAAO,SAAuB;EAC1C,MAAM,UAAU,QAAQ,WAAW,QAAQ;AAC3C,MAAI,CAAC,QACH,OAAM,IAAI,+BAA+B;EAiB3C,MAAM,QAAQ,IAAI,MAAM;GACtB,kBAdA,QAAQ,4BAA4B,mBAChC,QAAQ,mBACR,QAAQ,mBACN,iBAAiB,qBAAqB,QAAQ,iBAAiB,GAC/D,iBAAiB,OAAO,EAAE,CAAC;GAWjC,oBARA,QAAQ,8BAA8B,qBAClC,QAAQ,qBACR,QAAQ,qBACN,mBAAmB,qBAAqB,QAAQ,mBAAmB,GACnE,mBAAmB,OAAO,EAAE,CAAC;GAKnC;GACA,WAAW,IAAI,YAAY;GAC5B,CAAC;AAEF,QAAM,cAAc,QAAQ;AAC5B,QAAM,kBAAkB,QAAQ;AAEhC,SAAO;;CAGT,MAAa,KACX,SAMA,KACA;EACA,MAAM,UAAU,KAAK,WAAW,QAAQ;AACxC,MAAI,CAAC,QACH,OAAM,IAAI,+BAA+B;EAE3C,MAAM,qBAAqB,QAAQ,aAAa,QAAQ,WAAW;AAEnE,MAAI,CAAC,mBACH,OAAM,IAAI,0BACR,sHACD;AAGH,OAAK,UAAU,YAAY,MAAM,IAAI,KAAK;GACxC,YAAY,MAAM,WAAW;IAC3B;IACA,kBAAkB,KAAK;IACvB,aAAa,QAAQ;IACtB,CAAC;GACF,KAAK,QAAQ;GACb,WAAW;GACZ,CAAC;AAEF,SAAO;;;AAIXC,eAAa;CACX,OAAO;CACP,KAAK,MAAM;CACX,OAAO,UAAiB,UAAwC;AAC9D,SAAO,SAAS,SAAS;;CAE3B,SAAS,YAAY,MAAM,qBAAqB,QAAiC;CAClF,CAAC;;;AC3TF,IAAa,MAAb,MAAa,IAAI;CACf,YAAmB,SAA6B;AAArB,OAAA,UAAA;;CAE3B,OAAc,OAAO,SAAqB;AACxC,SAAO,IAAI,IAAI,QAAQ;;CAGzB,OAAc,UAAU,OAAmB;AAEzC,SAAO,IAAI,IADK,WAAyB,MAAM,CACxB;;CAGzB,IAAW,UAAU;AACnB,SAAO,MAAM,OAAO,KAAK,QAAQ;;CAGnC,IAAW,SAAS;AAClB,SAAO,KAAK,OAAO,KAAK,QAAQ;;CAGlC,IAAW,UAAU;EACnB,MAAM,UAAU,KAAK,QAAQ,WAAW,KAAK,QAAQ;AACrD,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,sDAAsD;AAGxE,SAAO;;CAGT,IAAW,mBAAmB;AAC5B,SAAO,KAAK,QAAQ;;CAGtB,IAAW,qBAAqB;AAC9B,SAAO,KAAK,QAAQ"}

package/package.json

@@ -1,11 +1,22 @@
 {
   "name": "@owf/cose",
-  "version": "0.1.0",
+  "version": "0.2.0-alpha-20260508112151",
   "files": [
     "dist"
   ],
   "license": "Apache-2.0",
-  "exports": "./src/index.ts",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.mts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
   "homepage": "https://github.com/openwallet-foundation-labs/identity-common-ts/tree/main/packages/cose",
   "repository": {
     "type": "git",
@@ -13,28 +24,13 @@
     "directory": "packages/cose"
   },
   "publishConfig": {
-    "access": "public",
-    "main": "./dist/index.cjs",
-    "module": "./dist/index.mjs",
-    "types": "./dist/index.d.mts",
-    "exports": {
-      ".": {
-        "types": "./dist/index.d.mts",
-        "import": "./dist/index.mjs",
-        "require": "./dist/index.cjs",
-        "default": "./dist/index.mjs"
-      },
-      "./package.json": "./package.json"
-    }
-  },
-  "scripts": {
-    "build": "tsdown src/index.ts --format esm,cjs --dts --sourcemap"
+    "access": "public"
   },
   "dependencies": {
-    "@owf/identity-common": "workspace:*",
     "cbor-x": "^1.6.4",
-    "zod": "catalog:",
-    "zod-validation-error": "^5.0.0"
+    "zod": "^4.4.3",
+    "zod-validation-error": "^5.0.0",
+    "@owf/identity-common": "0.2.0-alpha-20260508112151"
   },
   "devDependencies": {
     "@noble/curves": "^2.0.1",
@@ -42,5 +38,8 @@
     "@panva/hkdf": "^1.2.1",
     "@peculiar/x509": "^1.14.3",
     "jose": "^6.1.0"
+  },
+  "scripts": {
+    "build": "tsdown src/index.ts --format esm,cjs --dts --sourcemap"
   }
-}
+}