@plane31/blind-relay 0.0.0-stage → 0.1.1

package/dist/codec.js

@@ -0,0 +1,512 @@
+/**
+ * The wire documents of Kavach v1, protocol sections 3 to 12.
+ *
+ * Parse within bounds first (sizes, ranges, sort orders, counts, nonzero rules), then verify the
+ * signature under the key the caller's trust state names, then anything else. Every parser here
+ * refuses trailing bytes and never touches a signature. Type 5 is retired and rejected.
+ */
+import { MAX_DOCUMENT_BYTES, MAX_PAYLOAD_BYTES, Reader, Writer, compareBytes, concat, equalBytes, isAllZero, u32 } from "./bytes.js";
+import { C, DEVICE_ID_BYTES, HASH_BYTES, KEY_BYTES, NONCE_BYTES, PUBLIC_KEY_BYTES, RECOVERY_CODE_PREFIX, SEED_BYTES, SIGNATURE_BYTES, TAG_BYTES, WIRE_VERSION, accountKeypair, aeadOpen, aeadSeal, assertValidBoxKey, assertValidSigningKey, bodyHash, sign, verify } from "./crypto.js";
+import { KavachError } from "./errors.js";
+export const MAX_MEMBERS = 100;
+export const MAX_RESET_KEYS = 8;
+export const MAX_RESET_KEY_LIST_LIFETIME_MS = 2592000000n; // 30 days
+/** The encrypted envelope in front of every payload (revision 8): version, kind, event time. */
+export const ENVELOPE_VERSION = 1;
+export const ENVELOPE_BYTES = 1 + 1 + 8;
+export const MIN_RECORD_CIPHERTEXT = ENVELOPE_BYTES + TAG_BYTES;
+/** The size of a sealed record on the wire for a payload of this length: header, nonce, length, envelope, payload, tag, signature. */
+export function recordWireBytes(payloadLength) {
+    return RECORD_HEADER_BYTES + NONCE_BYTES + 4 + ENVELOPE_BYTES + payloadLength + TAG_BYTES + SIGNATURE_BYTES;
+}
+export const MAX_RECORD_CIPHERTEXT = ENVELOPE_BYTES + MAX_PAYLOAD_BYTES + TAG_BYTES;
+export const MIN_VAULT_CIPHERTEXT = 90;
+export const MAX_VAULT_CIPHERTEXT = 4_990;
+export const VAULT_ENTRY_BYTES = 49;
+export const RECORD_HEADER_BYTES = 51;
+/** Header flags: bits 1 and 2 carry the record's header class (0 to 3), the one thing about a record the relay may see; bit 0 and bits 3 to 7 are reserved. */
+export const HEADER_CLASS_SHIFT = 1;
+export const HEADER_CLASS_MASK = 0x06;
+const RESERVED_FLAGS = ~HEADER_CLASS_MASK & 0xff;
+export var DocumentType;
+(function (DocumentType) {
+    DocumentType[DocumentType["AccountDevice"] = 1] = "AccountDevice";
+    DocumentType[DocumentType["CircleSnapshot"] = 2] = "CircleSnapshot";
+    DocumentType[DocumentType["EpochManifest"] = 3] = "EpochManifest";
+    DocumentType[DocumentType["EncryptedRecord"] = 4] = "EncryptedRecord";
+    DocumentType[DocumentType["AccountVault"] = 6] = "AccountVault";
+    DocumentType[DocumentType["AccountResetReceipt"] = 7] = "AccountResetReceipt";
+    DocumentType[DocumentType["ResetKeyList"] = 8] = "ResetKeyList";
+})(DocumentType || (DocumentType = {}));
+export const MAX_KIND = 255;
+export const LABEL_BY_TYPE = {
+    [DocumentType.AccountDevice]: "account-sig",
+    [DocumentType.CircleSnapshot]: "snapshot-sig",
+    [DocumentType.EpochManifest]: "epoch-sig",
+    [DocumentType.EncryptedRecord]: "record-sig",
+    [DocumentType.AccountResetReceipt]: "reset-sig",
+    [DocumentType.ResetKeyList]: "reset-keys-sig"
+};
+// Parsing --------------------------------------------------------------------------------------
+function strictlySortedUnique(items) {
+    for (let i = 1; i < items.length; i++) {
+        const a = items[i - 1];
+        const b = items[i];
+        if (!a || !b || compareBytes(a, b) >= 0)
+            return false;
+    }
+    return true;
+}
+function malformed(stage, why) {
+    return new KavachError("MALFORMED", stage, why);
+}
+/**
+ * Parse a signed document (types 1 to 4, 7, 8). The signature is split off but not checked;
+ * call `verifyDocument` for that. Type 6 is not a signed document and type 5 is retired.
+ */
+export function parseDocument(wire) {
+    const stage = "parse";
+    if (wire.length > MAX_DOCUMENT_BYTES)
+        throw new KavachError("SIZE_LIMIT", stage, "document over 16,384 bytes");
+    const r = new Reader(wire, stage);
+    if (r.u8() !== WIRE_VERSION)
+        throw new KavachError("UNSUPPORTED_VERSION", stage);
+    const type = r.u8();
+    let fields;
+    switch (type) {
+        case DocumentType.AccountDevice: {
+            const accountName = r.name();
+            const accountKey = r.take(PUBLIC_KEY_BYTES);
+            const generation = r.u64();
+            const deviceId = r.take(DEVICE_ID_BYTES);
+            const signingKey = r.take(PUBLIC_KEY_BYTES);
+            const boxKey = r.take(PUBLIC_KEY_BYTES);
+            if (generation === 0n)
+                throw malformed(stage, "generation zero");
+            if (isAllZero(deviceId))
+                throw malformed(stage, "device id zero");
+            fields = { type, accountName, accountKey, generation, deviceId, signingKey, boxKey };
+            break;
+        }
+        case DocumentType.CircleSnapshot: {
+            const circleId = r.take(16);
+            const ownerIdentityId = r.take(HASH_BYTES);
+            const revision = r.u64();
+            const count = r.u16();
+            if (revision === 0n)
+                throw malformed(stage, "revision zero");
+            if (count < 1 || count > MAX_MEMBERS)
+                throw malformed(stage, "member count");
+            const members = [];
+            for (let i = 0; i < count; i++)
+                members.push(r.take(HASH_BYTES));
+            if (!strictlySortedUnique(members))
+                throw malformed(stage, "members not strictly sorted");
+            if (!members.some((m) => equalBytes(m, ownerIdentityId)))
+                throw malformed(stage, "owner missing");
+            fields = { type, circleId, ownerIdentityId, revision, members };
+            break;
+        }
+        case DocumentType.EpochManifest: {
+            const streamId = r.take(HASH_BYTES);
+            const authorIdentityId = r.take(HASH_BYTES);
+            const authorCertificateHash = r.take(HASH_BYTES);
+            const epoch = r.u32();
+            const createdAt = r.u64();
+            const keyCommitment = r.take(HASH_BYTES);
+            const count = r.u16();
+            if (epoch === 0)
+                throw malformed(stage, "epoch zero");
+            if (count < 1 || count > MAX_MEMBERS)
+                throw malformed(stage, "audience count");
+            const audience = [];
+            for (let i = 0; i < count; i++) {
+                audience.push({ identityId: r.take(HASH_BYTES), certificateHash: r.take(HASH_BYTES), wrapHash: r.take(HASH_BYTES) });
+            }
+            if (!strictlySortedUnique(audience.map((a) => a.identityId)))
+                throw malformed(stage, "audience not strictly sorted");
+            if (!audience.some((a) => equalBytes(a.identityId, authorIdentityId)))
+                throw malformed(stage, "author missing from audience");
+            fields = { type, streamId, authorIdentityId, authorCertificateHash, epoch, createdAt, keyCommitment, audience };
+            break;
+        }
+        case DocumentType.EncryptedRecord: {
+            const streamId = r.take(HASH_BYTES);
+            const epoch = r.u32();
+            const counter = r.u32();
+            const sentAt = r.u64();
+            const flags = r.u8();
+            if (epoch === 0)
+                throw malformed(stage, "epoch zero");
+            if ((flags & RESERVED_FLAGS) !== 0)
+                throw malformed(stage, "reserved flag bit set");
+            const header = r.consumed();
+            const nonce = r.take(NONCE_BYTES);
+            const length = r.u32();
+            if (length < MIN_RECORD_CIPHERTEXT || length > MAX_RECORD_CIPHERTEXT) {
+                throw new KavachError("SIZE_LIMIT", stage, "record ciphertext length");
+            }
+            const ciphertext = r.take(length);
+            fields = { type, streamId, epoch, counter, sentAt, flags, headerClass: ((flags & HEADER_CLASS_MASK) >> HEADER_CLASS_SHIFT), header, nonce, ciphertext };
+            break;
+        }
+        case DocumentType.AccountResetReceipt: {
+            const accountName = r.name();
+            const oldIdentityId = r.take(HASH_BYTES);
+            const newIdentityId = r.take(HASH_BYTES);
+            const resetId = r.take(16);
+            const issuedAt = r.u64();
+            const authorityKeyId = r.take(16);
+            if (equalBytes(oldIdentityId, newIdentityId))
+                throw malformed(stage, "old and new identity equal");
+            fields = { type, accountName, oldIdentityId, newIdentityId, resetId, issuedAt, authorityKeyId };
+            break;
+        }
+        case DocumentType.ResetKeyList: {
+            const version = r.u64();
+            const issuedAt = r.u64();
+            const expiresAt = r.u64();
+            const count = r.u8();
+            if (version === 0n)
+                throw malformed(stage, "version zero");
+            if (count > MAX_RESET_KEYS)
+                throw malformed(stage, "too many keys");
+            const lifetime = expiresAt - issuedAt;
+            if (lifetime <= 0n || lifetime > MAX_RESET_KEY_LIST_LIFETIME_MS)
+                throw malformed(stage, "key-list lifetime");
+            const keys = [];
+            for (let i = 0; i < count; i++)
+                keys.push({ keyId: r.take(16), publicKey: r.take(PUBLIC_KEY_BYTES) });
+            if (!strictlySortedUnique(keys.map((k) => k.keyId)))
+                throw malformed(stage, "key ids not strictly sorted");
+            if (keys.some((k) => isAllZero(k.keyId)))
+                throw malformed(stage, "zero key id");
+            for (let i = 0; i < keys.length; i++) {
+                for (let j = i + 1; j < keys.length; j++) {
+                    const a = keys[i];
+                    const b = keys[j];
+                    if (a && b && equalBytes(a.publicKey, b.publicKey))
+                        throw malformed(stage, "duplicate key");
+                }
+            }
+            for (const k of keys)
+                assertValidSigningKey(k.publicKey, stage);
+            fields = { type, version, issuedAt, expiresAt, keys };
+            break;
+        }
+        default:
+            // 5 is retired; 6 is not a signed document; everything else is unknown.
+            throw new KavachError("UNSUPPORTED_TYPE", stage, `type ${type}`);
+    }
+    const body = r.consumed();
+    const signature = r.take(SIGNATURE_BYTES);
+    r.end();
+    return { ...fields, body, signature, bodyHash: bodyHash(body) };
+}
+/**
+ * Parse and verify. A type 1 certificate is verified under the key it carries, which establishes
+ * key possession only. Every other type needs the key the caller's trust state names.
+ */
+export function verifyDocument(wire, publicKey) {
+    const doc = parseDocument(wire);
+    const label = LABEL_BY_TYPE[doc.type];
+    if (!label)
+        throw new KavachError("UNSUPPORTED_TYPE", "verify");
+    let key = publicKey;
+    if (doc.type === DocumentType.AccountDevice)
+        key = doc.accountKey;
+    if (!key)
+        throw new KavachError("METADATA_REQUIRED", "verify", "verification key required");
+    verify(key, label, doc.body, doc.signature);
+    if (doc.type === DocumentType.AccountDevice) {
+        assertValidSigningKey(doc.signingKey);
+        assertValidBoxKey(doc.boxKey);
+    }
+    return doc;
+}
+/** Narrow a parsed document to one type, or fail as MALFORMED. */
+export function expectType(doc, type, stage = "verify") {
+    if (doc.type !== type)
+        throw malformed(stage, `expected type ${type}, got ${doc.type}`);
+    return doc;
+}
+// Building -------------------------------------------------------------------------------------
+function signed(body, label, secretKey) {
+    return concat(body, sign(secretKey, label, body));
+}
+export function encodeAccountDeviceBody(f) {
+    return new Writer()
+        .u8(WIRE_VERSION)
+        .u8(DocumentType.AccountDevice)
+        .name(f.accountName)
+        .bytes(f.accountKey)
+        .u64(f.generation)
+        .bytes(f.deviceId)
+        .bytes(f.signingKey)
+        .bytes(f.boxKey)
+        .finish();
+}
+export function buildAccountDevice(f, accountSecretKey) {
+    return signed(encodeAccountDeviceBody(f), "account-sig", accountSecretKey);
+}
+export function encodeCircleSnapshotBody(f) {
+    const members = [...f.members].sort(compareBytes);
+    const w = new Writer().u8(WIRE_VERSION).u8(DocumentType.CircleSnapshot).bytes(f.circleId).bytes(f.ownerIdentityId).u64(f.revision).u16(members.length);
+    for (const m of members)
+        w.bytes(m);
+    return w.finish();
+}
+export function buildCircleSnapshot(f, ownerAccountSecretKey) {
+    return signed(encodeCircleSnapshotBody(f), "snapshot-sig", ownerAccountSecretKey);
+}
+export function encodeEpochManifestBody(f) {
+    const rows = [...f.audience].sort((a, b) => compareBytes(a.identityId, b.identityId));
+    const w = new Writer()
+        .u8(WIRE_VERSION)
+        .u8(DocumentType.EpochManifest)
+        .bytes(f.streamId)
+        .bytes(f.authorIdentityId)
+        .bytes(f.authorCertificateHash)
+        .u32(f.epoch)
+        .u64(f.createdAt)
+        .bytes(f.keyCommitment)
+        .u16(rows.length);
+    for (const row of rows)
+        w.bytes(row.identityId).bytes(row.certificateHash).bytes(row.wrapHash);
+    return w.finish();
+}
+export function buildEpochManifest(f, deviceSigningSecretKey) {
+    return signed(encodeEpochManifestBody(f), "epoch-sig", deviceSigningSecretKey);
+}
+export function encodeRecordHeader(f) {
+    if (f.epoch === 0)
+        throw malformed("encode", "epoch zero");
+    return new Writer()
+        .u8(WIRE_VERSION)
+        .u8(DocumentType.EncryptedRecord)
+        .bytes(f.streamId)
+        .u32(f.epoch)
+        .u32(f.counter)
+        .u64(f.sentAt)
+        .u8((f.headerClass << HEADER_CLASS_SHIFT) & HEADER_CLASS_MASK)
+        .finish();
+}
+/** `u8(1) || u8(kind) || u64(eventTime or 0) || payload`: the plaintext under the AEAD. */
+export function encodeEnvelope(e, payload) {
+    if (!Number.isInteger(e.kind) || e.kind < 0 || e.kind > MAX_KIND)
+        throw malformed("encode", "kind out of range");
+    if (payload.length > MAX_PAYLOAD_BYTES)
+        throw new KavachError("SIZE_LIMIT", "encode", "payload over 4,096 bytes");
+    if (e.eventTime !== undefined && e.eventTime < 0n)
+        throw malformed("encode", "event time before the epoch");
+    return new Writer().u8(ENVELOPE_VERSION).u8(e.kind).u64(e.eventTime ?? 0n).bytes(payload).finish();
+}
+export function decodeEnvelope(plaintext) {
+    const stage = "envelope";
+    if (plaintext.length < ENVELOPE_BYTES)
+        throw malformed(stage, "envelope too short");
+    const r = new Reader(plaintext, stage);
+    if (r.u8() !== ENVELOPE_VERSION)
+        throw malformed(stage, "envelope version");
+    const kind = r.u8();
+    const t = r.u64();
+    const payload = plaintext.subarray(ENVELOPE_BYTES);
+    if (payload.length > MAX_PAYLOAD_BYTES)
+        throw new KavachError("SIZE_LIMIT", stage, "payload over 4,096 bytes");
+    return { kind, eventTime: t === 0n ? undefined : t, payload };
+}
+export function recordAad(header) {
+    return concat(C("record-aad"), header);
+}
+/** Encrypt and sign one record from its complete plaintext (the envelope with the payload). The caller supplies a fresh random nonce and never reuses it. */
+export function buildEncryptedRecord(f, plaintext, epochKey, nonce, deviceSigningSecretKey) {
+    if (plaintext.length < ENVELOPE_BYTES || plaintext.length > ENVELOPE_BYTES + MAX_PAYLOAD_BYTES)
+        throw new KavachError("SIZE_LIMIT", "encode", "record plaintext length");
+    const header = encodeRecordHeader(f);
+    const ciphertext = aeadSeal(epochKey, nonce, recordAad(header), plaintext);
+    const body = concat(header, nonce, u32(ciphertext.length), ciphertext);
+    return signed(body, "record-sig", deviceSigningSecretKey);
+}
+/** The same from a kind, an optional event time and a payload: the envelope is encoded here. */
+export function buildRecordWire(f, payload, epochKey, nonce, deviceSigningSecretKey) {
+    return buildEncryptedRecord(f, encodeEnvelope(f, payload), epochKey, nonce, deviceSigningSecretKey);
+}
+/** Decrypt a parsed record under its epoch key to its plaintext (the envelope with the payload). Verify the signature first; this does not. */
+export function openRecord(record, epochKey) {
+    return aeadOpen(epochKey, record.nonce, recordAad(record.header), record.ciphertext);
+}
+export function encodeResetReceiptBody(f) {
+    return new Writer()
+        .u8(WIRE_VERSION)
+        .u8(DocumentType.AccountResetReceipt)
+        .name(f.accountName)
+        .bytes(f.oldIdentityId)
+        .bytes(f.newIdentityId)
+        .bytes(f.resetId)
+        .u64(f.issuedAt)
+        .bytes(f.authorityKeyId)
+        .finish();
+}
+export function buildResetReceipt(f, resetSecretKey) {
+    return signed(encodeResetReceiptBody(f), "reset-sig", resetSecretKey);
+}
+export function encodeResetKeyListBody(f) {
+    const keys = [...f.keys].sort((a, b) => compareBytes(a.keyId, b.keyId));
+    const w = new Writer().u8(WIRE_VERSION).u8(DocumentType.ResetKeyList).u64(f.version).u64(f.issuedAt).u64(f.expiresAt).u8(keys.length);
+    for (const k of keys)
+        w.bytes(k.keyId).bytes(k.publicKey);
+    return w.finish();
+}
+export function buildResetKeyList(f, managementSecretKey) {
+    return signed(encodeResetKeyListBody(f), "reset-keys-sig", managementSecretKey);
+}
+export function encodeVaultHeader(h) {
+    return new Writer().u8(WIRE_VERSION).u8(DocumentType.AccountVault).name(h.accountName).bytes(h.accountKey).u64(h.vaultRevision).finish();
+}
+export function encodeVaultPlaintext(v) {
+    if (v.accountSeed.length !== SEED_BYTES)
+        throw malformed("encodeVault", "seed length");
+    if (v.entries.length > MAX_MEMBERS)
+        throw malformed("encodeVault", "too many entries");
+    const entries = [...v.entries].sort((a, b) => compareBytes(a.circleId, b.circleId));
+    if (!strictlySortedUnique(entries.map((e) => e.circleId)))
+        throw malformed("encodeVault", "duplicate circle");
+    const w = new Writer().bytes(v.accountSeed).u64(v.lastDeviceGeneration).bytes(v.lastCertificateHash).u16(entries.length);
+    for (const e of entries)
+        w.bytes(e.circleId).bytes(e.ownerIdentityId).u8(e.sharingEnabled ? 1 : 0);
+    return w.finish();
+}
+export function decodeVaultPlaintext(plain) {
+    const stage = "decodeVault";
+    const r = new Reader(plain, stage);
+    const accountSeed = r.take(SEED_BYTES);
+    const lastDeviceGeneration = r.u64();
+    const lastCertificateHash = r.take(HASH_BYTES);
+    const count = r.u16();
+    if (lastDeviceGeneration === 0n)
+        throw malformed(stage, "generation zero");
+    if (count > MAX_MEMBERS)
+        throw malformed(stage, "too many entries");
+    const entries = [];
+    for (let i = 0; i < count; i++) {
+        const circleId = r.take(16);
+        const ownerIdentityId = r.take(HASH_BYTES);
+        const flag = r.u8();
+        if (flag !== 0 && flag !== 1)
+            throw malformed(stage, "sharing flag");
+        entries.push({ circleId, ownerIdentityId, sharingEnabled: flag === 1 });
+    }
+    r.end();
+    if (!strictlySortedUnique(entries.map((e) => e.circleId)))
+        throw malformed(stage, "entries not strictly sorted");
+    return { accountSeed, lastDeviceGeneration, lastCertificateHash, entries };
+}
+/** Encrypt a vault. The caller supplies a fresh random nonce. */
+export function sealVault(header, contents, recoveryKey, nonce) {
+    if (header.vaultRevision === 0n)
+        throw malformed("sealVault", "revision zero");
+    const h = encodeVaultHeader(header);
+    const ciphertext = aeadSeal(recoveryKey, nonce, concat(C("vault-aad"), h), encodeVaultPlaintext(contents));
+    return concat(h, nonce, u32(ciphertext.length), ciphertext);
+}
+/** Read a vault's public header without opening it (the host's compare-and-swap uses it). */
+export function parseVaultHeader(wire) {
+    const stage = "vaultHeader";
+    if (wire.length > MAX_DOCUMENT_BYTES)
+        throw new KavachError("SIZE_LIMIT", stage);
+    const r = new Reader(wire, stage);
+    if (r.u8() !== WIRE_VERSION)
+        throw new KavachError("UNSUPPORTED_VERSION", stage);
+    if (r.u8() !== DocumentType.AccountVault)
+        throw new KavachError("UNSUPPORTED_TYPE", stage);
+    const accountName = r.name();
+    const accountKey = r.take(PUBLIC_KEY_BYTES);
+    const vaultRevision = r.u64();
+    if (vaultRevision === 0n)
+        throw malformed(stage, "revision zero");
+    return { accountName, accountKey, vaultRevision, hash: bodyHash(wire) };
+}
+/**
+ * Open a vault under the recovery key. Binds the header to the expected account before decrypting
+ * and checks that `AK` derives from the recovered seed before trusting the entries.
+ */
+export function openVault(wire, recoveryKey, expectedName, expectedAccountKey) {
+    const stage = "openVault";
+    if (wire.length > MAX_DOCUMENT_BYTES)
+        throw new KavachError("SIZE_LIMIT", stage);
+    const r = new Reader(wire, stage);
+    if (r.u8() !== WIRE_VERSION)
+        throw new KavachError("UNSUPPORTED_VERSION", stage);
+    if (r.u8() !== DocumentType.AccountVault)
+        throw new KavachError("UNSUPPORTED_TYPE", stage);
+    const accountName = r.name();
+    const accountKey = r.take(PUBLIC_KEY_BYTES);
+    const vaultRevision = r.u64();
+    if (accountName !== expectedName || !equalBytes(accountKey, expectedAccountKey) || vaultRevision === 0n) {
+        throw new KavachError("VAULT_BINDING", stage);
+    }
+    const header = r.consumed();
+    const nonce = r.take(NONCE_BYTES);
+    const length = r.u32();
+    if (length < MIN_VAULT_CIPHERTEXT || length > MAX_VAULT_CIPHERTEXT)
+        throw new KavachError("SIZE_LIMIT", stage, "vault ciphertext length");
+    const ciphertext = r.take(length);
+    r.end();
+    if (recoveryKey.length !== KEY_BYTES)
+        throw new KavachError("INVALID_KEY", stage);
+    const plain = aeadOpen(recoveryKey, nonce, concat(C("vault-aad"), header), ciphertext, stage);
+    const contents = decodeVaultPlaintext(plain);
+    if (!equalBytes(accountKeypair(contents.accountSeed).publicKey, accountKey))
+        throw new KavachError("VAULT_BINDING", stage, "seed does not derive AK");
+    return { ...contents, header: { accountName, accountKey, vaultRevision } };
+}
+// Recovery code --------------------------------------------------------------------------------
+const B64URL = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+function base64url(bytes) {
+    let out = "";
+    for (let i = 0; i < bytes.length; i += 3) {
+        const a = bytes[i] ?? 0;
+        const b = bytes[i + 1];
+        const c = bytes[i + 2];
+        out += B64URL[a >> 2];
+        out += B64URL[((a & 3) << 4) | ((b ?? 0) >> 4)];
+        if (b !== undefined)
+            out += B64URL[((b & 15) << 2) | ((c ?? 0) >> 6)];
+        if (c !== undefined)
+            out += B64URL[c & 63];
+    }
+    return out;
+}
+function unbase64url(text) {
+    if (!/^[A-Za-z0-9_-]+$/.test(text) || text.length % 4 === 1)
+        return undefined;
+    const out = [];
+    let buffer = 0;
+    let bits = 0;
+    for (const ch of text) {
+        buffer = (buffer << 6) | B64URL.indexOf(ch);
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out.push((buffer >> bits) & 0xff);
+        }
+    }
+    return Uint8Array.from(out);
+}
+/** `"KV1R-" || base64url(recoveryKey)`, 48 characters, no padding. */
+export function encodeRecoveryCode(recoveryKey) {
+    if (recoveryKey.length !== KEY_BYTES)
+        throw new KavachError("INVALID_KEY", "recoveryCode");
+    return RECOVERY_CODE_PREFIX + base64url(recoveryKey);
+}
+export function decodeRecoveryCode(text) {
+    const stage = "recoveryCode";
+    if (!text.startsWith(RECOVERY_CODE_PREFIX))
+        throw malformed(stage, "prefix");
+    const value = text.slice(RECOVERY_CODE_PREFIX.length);
+    const raw = unbase64url(value);
+    if (!raw || raw.length !== KEY_BYTES || base64url(raw) !== value)
+        throw malformed(stage, "not a recovery key");
+    return raw;
+}
+//# sourceMappingURL=codec.js.map

package/dist/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../src/codec.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,MAAM,EACN,MAAM,EACN,YAAY,EACZ,MAAM,EACN,UAAU,EACV,SAAS,EACT,GAAG,EACJ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,CAAC,EACD,eAAe,EACf,UAAU,EACV,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,eAAe,EACf,SAAS,EACT,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,qBAAqB,EACrB,QAAQ,EACR,IAAI,EACJ,MAAM,EAEP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,8BAA8B,GAAG,WAAc,CAAC,CAAC,UAAU;AACxE,gGAAgG;AAChG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,GAAG,SAAS,CAAC;AAChE,sIAAsI;AACtI,MAAM,UAAU,eAAe,CAAC,aAAqB;IACnD,OAAO,mBAAmB,GAAG,WAAW,GAAG,CAAC,GAAG,cAAc,GAAG,aAAa,GAAG,SAAS,GAAG,eAAe,CAAC;AAC9G,CAAC;AACD,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,GAAG,iBAAiB,GAAG,SAAS,CAAC;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,+JAA+J;AAC/J,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,cAAc,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC;AAGjD,MAAM,CAAN,IAAY,YAQX;AARD,WAAY,YAAY;IACtB,iEAAiB,CAAA;IACjB,mEAAkB,CAAA;IAClB,iEAAiB,CAAA;IACjB,qEAAmB,CAAA;IACnB,+DAAgB,CAAA;IAChB,6EAAuB,CAAA;IACvB,+DAAgB,CAAA;AAClB,CAAC,EARW,YAAY,KAAZ,YAAY,QAQvB;AAID,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAoF5B,MAAM,CAAC,MAAM,aAAa,GAAoC;IAC5D,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,aAAa;IAC3C,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,cAAc;IAC7C,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,WAAW;IACzC,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,YAAY;IAC5C,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,WAAW;IAC/C,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,gBAAgB;CAC9C,CAAC;AAEF,iGAAiG;AAEjG,SAAS,oBAAoB,CAAC,KAA4B;IACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,GAAW;IAC3C,OAAO,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC;IACtB,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB;QAAE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAC/G,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,YAAY;QAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;IACpB,IAAI,MAAsB,CAAC;IAC3B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;YAChC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC5C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACxC,IAAI,UAAU,KAAK,EAAE;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;YACjE,IAAI,SAAS,CAAC,QAAQ,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAClE,MAAM,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YACrF,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,QAAQ,KAAK,EAAE;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YAC7D,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,WAAW;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAiB,EAAE,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;YAC1F,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YAClG,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAChE,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACtD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,WAAW;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAkB,EAAE,CAAC;YACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACvH,CAAC;YACD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;YACrH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;YAC9H,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;YAChH,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;YACrB,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,MAAM,GAAG,qBAAqB,IAAI,MAAM,GAAG,qBAAqB,EAAE,CAAC;gBACrE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,KAAK,EAAE,0BAA0B,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,GAAG,iBAAiB,CAAC,IAAI,kBAAkB,CAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YACvK,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACtC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,UAAU,CAAC,aAAa,EAAE,aAAa,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;YACnG,MAAM,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;YAChG,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;YACrB,IAAI,OAAO,KAAK,EAAE;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAC3D,IAAI,KAAK,GAAG,cAAc;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;YACtC,IAAI,QAAQ,IAAI,EAAE,IAAI,QAAQ,GAAG,8BAA8B;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YAC7G,MAAM,IAAI,GAAoB,EAAE,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACtG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;YAC3G,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAChF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACzC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;wBAAE,MAAM,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,qBAAqB,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAChE,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACtD,MAAM;QACR,CAAC;QACD;YACE,wEAAwE;YACxE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC,CAAC,GAAG,EAAE,CAAC;IACR,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,SAAsB;IACrE,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,GAAG,GAAG,SAAS,CAAC;IACpB,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,aAAa;QAAE,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC;IAClE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAC5F,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,aAAa,EAAE,CAAC;QAC5C,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU,CAA2B,GAAW,EAAE,IAAe,EAAE,KAAK,GAAG,QAAQ;IACjG,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,iBAAiB,IAAI,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxF,OAAO,GAA2B,CAAC;AACrC,CAAC;AAED,iGAAiG;AAEjG,SAAS,MAAM,CAAC,IAAgB,EAAE,KAAY,EAAE,SAAqB;IACnE,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAA8B;IACpE,OAAO,IAAI,MAAM,EAAE;SAChB,EAAE,CAAC,YAAY,CAAC;SAChB,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC;SAC9B,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;SACnB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;SACnB,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;SACf,MAAM,EAAE,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAA8B,EAAE,gBAA4B;IAC7F,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,CAA+B;IACtE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvJ,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAA+B,EAAE,qBAAiC;IACpG,OAAO,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAA8B;IACpE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,MAAM,CAAC,GAAG,IAAI,MAAM,EAAE;SACnB,EAAE,CAAC,YAAY,CAAC;SAChB,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC;SAC9B,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC;SACzB,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;SAChB,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;SACtB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/F,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAA8B,EAAE,sBAAkC;IACnG,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;AACjF,CAAC;AAUD,MAAM,UAAU,kBAAkB,CAAC,CAAqB;IACtD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC3D,OAAO,IAAI,MAAM,EAAE;SAChB,EAAE,CAAC,YAAY,CAAC;SAChB,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC;SAChC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;SACb,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,kBAAkB,CAAC,GAAG,iBAAiB,CAAC;SAC7D,MAAM,EAAE,CAAC;AACd,CAAC;AASD,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,CAAW,EAAE,OAAmB;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,QAAQ;QAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACjH,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB;QAAE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IAClH,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,GAAG,EAAE;QAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IAC5G,OAAO,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAqB;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC;IACzB,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACpF,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,gBAAgB;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB;QAAE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC/G,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAkB;IAC1C,OAAO,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,6JAA6J;AAC7J,MAAM,UAAU,oBAAoB,CAAC,CAAqB,EAAE,SAAqB,EAAE,QAAoB,EAAE,KAAiB,EAAE,sBAAkC;IAC5J,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc,GAAG,iBAAiB;QAAE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC;IACzK,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC;AAC5D,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,eAAe,CAAC,CAAgC,EAAE,OAAmB,EAAE,QAAoB,EAAE,KAAiB,EAAE,sBAAkC;IAChK,OAAO,oBAAoB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;AACtG,CAAC;AAED,+IAA+I;AAC/I,MAAM,UAAU,UAAU,CAAC,MAAuB,EAAE,QAAoB;IACtE,OAAO,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,CAAoC;IACzE,OAAO,IAAI,MAAM,EAAE;SAChB,EAAE,CAAC,YAAY,CAAC;SAChB,EAAE,CAAC,YAAY,CAAC,mBAAmB,CAAC;SACpC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;SACtB,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;SACtB,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC;SACvB,MAAM,EAAE,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAoC,EAAE,cAA0B;IAChG,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,CAA6B;IAClE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtI,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAA6B,EAAE,mBAA+B;IAC9F,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;AAClF,CAAC;AAuBD,MAAM,UAAU,iBAAiB,CAAC,CAAc;IAC9C,OAAO,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC;AAC3I,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,CAAgB;IACnD,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW;QAAE,MAAM,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAC9G,MAAM,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzH,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAiB;IACpD,MAAM,KAAK,GAAG,aAAa,CAAC;IAC5B,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,oBAAoB,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACtB,IAAI,oBAAoB,KAAK,EAAE;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC3E,IAAI,KAAK,GAAG,WAAW;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACpE,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;QACpB,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,CAAC,CAAC,GAAG,EAAE,CAAC;IACR,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IACjH,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;AAC7E,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,SAAS,CAAC,MAAmB,EAAE,QAAuB,EAAE,WAAuB,EAAE,KAAiB;IAChH,IAAI,MAAM,CAAC,aAAa,KAAK,EAAE;QAAE,MAAM,SAAS,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC/E,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3G,OAAO,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;AAC9D,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,MAAM,KAAK,GAAG,aAAa,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB;QAAE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACjF,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,YAAY;QAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACjF,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,YAAY,CAAC,YAAY;QAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9B,IAAI,aAAa,KAAK,EAAE;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAClE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1E,CAAC;AAMD;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAgB,EAAE,WAAuB,EAAE,YAAoB,EAAE,kBAA8B;IACvH,MAAM,KAAK,GAAG,WAAW,CAAC;IAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB;QAAE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACjF,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,YAAY;QAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACjF,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,YAAY,CAAC,YAAY;QAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9B,IAAI,WAAW,KAAK,YAAY,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,kBAAkB,CAAC,IAAI,aAAa,KAAK,EAAE,EAAE,CAAC;QACxG,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,oBAAoB,IAAI,MAAM,GAAG,oBAAoB;QAAE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,KAAK,EAAE,yBAAyB,CAAC,CAAC;IAC1I,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,GAAG,EAAE,CAAC;IACR,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,yBAAyB,CAAC,CAAC;IACtJ,OAAO,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE,CAAC;AAC7E,CAAC;AAED,iGAAiG;AAEjG,MAAM,MAAM,GAAG,kEAAkE,CAAC;AAElF,SAAS,SAAS,CAAC,KAAiB;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtB,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,WAAuB;IACxD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAC3F,OAAO,oBAAoB,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,cAAc,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC/G,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/crypto/backend.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The primitive backend behind `crypto.ts`. Two implementations exist: `noble` (pure
+ * JavaScript, runs on Hermes and in workerd, the default) and `sodium` (libsodium's wasm, for
+ * Node and tests). Both are checked against the same vectors; the protocol never sees which one
+ * is loaded.
+ */
+export interface SignKeypair {
+    readonly publicKey: Uint8Array;
+    readonly secretKey: Uint8Array;
+}
+export interface BoxKeypair {
+    readonly publicKey: Uint8Array;
+    readonly secretKey: Uint8Array;
+}
+export interface CryptoBackend {
+    readonly name: "noble" | "sodium";
+    blake2b(data: Uint8Array, outLen: number, key?: Uint8Array): Uint8Array;
+    randomBytes(length: number): Uint8Array;
+    signKeypairFromSeed(seed: Uint8Array): SignKeypair;
+    signDetached(message: Uint8Array, secretKey: Uint8Array): Uint8Array;
+    verifyDetached(signature: Uint8Array, message: Uint8Array, publicKey: Uint8Array): boolean;
+    /** Canonical, on the curve, on the main subgroup, not the identity. */
+    isValidSignPoint(publicKey: Uint8Array): boolean;
+    /** `crypto_box_seed_keypair`: scalar = SHA-512(seed)[0..32], public = X25519 base point multiple. */
+    boxKeypairFromSeed(seed: Uint8Array): BoxKeypair;
+    boxKeypair(): BoxKeypair;
+    /** X25519; throws on an all-zero shared secret. */
+    scalarMult(secretKey: Uint8Array, publicKey: Uint8Array): Uint8Array;
+    /** `crypto_box_easy`: XSalsa20-Poly1305 under HSalsa20(X25519(sk, pk)); output mac || ciphertext. */
+    boxEasy(message: Uint8Array, nonce: Uint8Array, publicKey: Uint8Array, secretKey: Uint8Array): Uint8Array;
+    boxOpenEasy(box: Uint8Array, nonce: Uint8Array, publicKey: Uint8Array, secretKey: Uint8Array): Uint8Array;
+    /** XChaCha20-Poly1305 with the tag appended. */
+    aeadEncrypt(plaintext: Uint8Array, aad: Uint8Array, nonce: Uint8Array, key: Uint8Array): Uint8Array;
+    aeadDecrypt(ciphertextAndTag: Uint8Array, aad: Uint8Array, nonce: Uint8Array, key: Uint8Array): Uint8Array;
+    memzero(bytes: Uint8Array): void;
+}
+export declare function setCryptoBackend(backend: CryptoBackend): void;
+export declare function currentBackend(): CryptoBackend | undefined;
+//# sourceMappingURL=backend.d.ts.map

package/dist/crypto/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/crypto/backend.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IAClC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACxE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IACxC,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;IACnD,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACrE,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3F,uEAAuE;IACvE,gBAAgB,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC;IACjD,qGAAqG;IACrG,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IACjD,UAAU,IAAI,UAAU,CAAC;IACzB,mDAAmD;IACnD,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACrE,qGAAqG;IACrG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IAC1G,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IAC1G,gDAAgD;IAChD,WAAW,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU,CAAC;IACpG,WAAW,CAAC,gBAAgB,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU,CAAC;IAC3G,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;CAClC;AAID,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAE7D;AAED,wBAAgB,cAAc,IAAI,aAAa,GAAG,SAAS,CAE1D"}

package/dist/crypto/backend.js

@@ -0,0 +1,8 @@
+let current;
+export function setCryptoBackend(backend) {
+    current = backend;
+}
+export function currentBackend() {
+    return current;
+}
+//# sourceMappingURL=backend.js.map

package/dist/crypto/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/crypto/backend.ts"],"names":[],"mappings":"AAuCA,IAAI,OAAkC,CAAC;AAEvC,MAAM,UAAU,gBAAgB,CAAC,OAAsB;IACrD,OAAO,GAAG,OAAO,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/crypto/noble.d.ts

@@ -0,0 +1,3 @@
+import type { CryptoBackend } from "./backend.js";
+export declare const nobleBackend: CryptoBackend;
+//# sourceMappingURL=noble.d.ts.map

package/dist/crypto/noble.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"noble.d.ts","sourceRoot":"","sources":["../../src/crypto/noble.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAc,aAAa,EAAe,MAAM,cAAc,CAAC;AA2C3E,eAAO,MAAM,YAAY,EAAE,aAqD1B,CAAC"}