@theoremjs/studio 0.3.4-next.484.g20d8b9d → 0.3.4-next.522.g9e684cd

package/page/assets/{crypto-iT_LZ8Et.js → crypto-BoqeX_71.js}

@@ -1 +1 @@
-import{mn as e,pn as t}from"./shaped-data-Bc6u4pow.js";function n(t){return e(t).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=+$/,``)}function r(e){let n=e.replace(/-/g,`+`).replace(/_/g,`/`);for(;n.length%4!=0;)n+=`=`;try{return t(n)}catch(e){throw Error(`Invalid base64url encoding: ${e instanceof Error?e.message:String(e)}`)}}var i=32,a=`theorem/sealed-secret/v1`,o=12,s=32,c=`v1`;async function l(e,t,n,r){let a=new TextEncoder,o=a.encode(e);if(o.length<i)throw RangeError(`${r} must be at least ${i} bytes; got ${o.length}`);let s=await crypto.subtle.importKey(`raw`,o,`HKDF`,!1,[`deriveKey`]);return crypto.subtle.deriveKey({name:`HKDF`,hash:`SHA-256`,salt:t,info:a.encode(n)},s,{name:`AES-GCM`,length:256},!1,[`encrypt`,`decrypt`])}async function u(e,t,r){let i=crypto.getRandomValues(new Uint8Array(s)),a=await l(t,i,r.info,r.label),c=crypto.getRandomValues(new Uint8Array(o)),u=await crypto.subtle.encrypt({name:`AES-GCM`,iv:c,additionalData:new TextEncoder().encode(r.associatedData)},a,new TextEncoder().encode(e));return[n(i),n(c),n(new Uint8Array(u))].join(`.`)}async function d(e,t,n){let[i,a,o]=e;if(i===void 0||a===void 0||o===void 0)return null;let s=await l(t,r(i),n.info,n.label);try{let e=await crypto.subtle.decrypt({name:`AES-GCM`,iv:r(a),additionalData:new TextEncoder().encode(n.associatedData)},s,r(o));return new TextDecoder().decode(e)}catch{return null}}function f(e,t){return{info:a,label:`Secret sealing key`,associatedData:JSON.stringify([c,e,t])}}function p(e){if(!Number.isSafeInteger(e)||e<0)throw RangeError(`Key version must be a non-negative integer; got ${e}`)}async function m(e){p(e.keyVersion);let t=f(e.keyVersion,e.binding),n=await u(e.plaintext,e.key,t);return[c,String(e.keyVersion),n].join(`.`)}async function h(e){let[t,n,...r]=e.sealed.split(`.`),i=Number(n);if(t!==c||r.length!==3||!/^\d+$/.test(n??``))throw Error(`Invalid sealed secret format`);let a=e.keys[i];if(a===void 0)throw Error(`No key for sealed secret key version ${i}`);let o=await d(r,a,f(i,e.binding));if(o===null)throw Error(`Sealed secret could not be opened: it was tampered with, bound to something else, or sealed with another key`);return o}export{m as n,n as r,h as t};
+import{mn as e,pn as t}from"./shaped-data-CITXsEfw.js";function n(t){return e(t).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=+$/,``)}function r(e){let n=e.replace(/-/g,`+`).replace(/_/g,`/`);for(;n.length%4!=0;)n+=`=`;try{return t(n)}catch(e){throw Error(`Invalid base64url encoding: ${e instanceof Error?e.message:String(e)}`)}}var i=32,a=`theorem/sealed-secret/v1`,o=12,s=32,c=`v1`;async function l(e,t,n,r){let a=new TextEncoder,o=a.encode(e);if(o.length<i)throw RangeError(`${r} must be at least ${i} bytes; got ${o.length}`);let s=await crypto.subtle.importKey(`raw`,o,`HKDF`,!1,[`deriveKey`]);return crypto.subtle.deriveKey({name:`HKDF`,hash:`SHA-256`,salt:t,info:a.encode(n)},s,{name:`AES-GCM`,length:256},!1,[`encrypt`,`decrypt`])}async function u(e,t,r){let i=crypto.getRandomValues(new Uint8Array(s)),a=await l(t,i,r.info,r.label),c=crypto.getRandomValues(new Uint8Array(o)),u=await crypto.subtle.encrypt({name:`AES-GCM`,iv:c,additionalData:new TextEncoder().encode(r.associatedData)},a,new TextEncoder().encode(e));return[n(i),n(c),n(new Uint8Array(u))].join(`.`)}async function d(e,t,n){let[i,a,o]=e;if(i===void 0||a===void 0||o===void 0)return null;let s=await l(t,r(i),n.info,n.label);try{let e=await crypto.subtle.decrypt({name:`AES-GCM`,iv:r(a),additionalData:new TextEncoder().encode(n.associatedData)},s,r(o));return new TextDecoder().decode(e)}catch{return null}}function f(e,t){return{info:a,label:`Secret sealing key`,associatedData:JSON.stringify([c,e,t])}}function p(e){if(!Number.isSafeInteger(e)||e<0)throw RangeError(`Key version must be a non-negative integer; got ${e}`)}async function m(e){p(e.keyVersion);let t=f(e.keyVersion,e.binding),n=await u(e.plaintext,e.key,t);return[c,String(e.keyVersion),n].join(`.`)}async function h(e){let[t,n,...r]=e.sealed.split(`.`),i=Number(n);if(t!==c||r.length!==3||!/^\d+$/.test(n??``))throw Error(`Invalid sealed secret format`);let a=e.keys[i];if(a===void 0)throw Error(`No key for sealed secret key version ${i}`);let o=await d(r,a,f(i,e.binding));if(o===null)throw Error(`Sealed secret could not be opened: it was tampered with, bound to something else, or sealed with another key`);return o}export{m as n,n as r,h as t};