one 2.6.20 → 2.6.22

package/dist/esm/platform/crypto/aes.mjs

@@ -0,0 +1,236 @@
+import { base64ToBytes, bytesToBase64, bytesToHex, concatBytes, exactBytes, hexToBytes } from "./bytes.mjs";
+
+const KEY_SIZES = [
+	128,
+	192,
+	256
+];
+const TAG_LENGTHS = [
+	16,
+	15,
+	14,
+	13,
+	12,
+	8,
+	4
+];
+const DEFAULT_IV_LENGTH = 12;
+const DEFAULT_TAG_LENGTH = 16;
+function assertTagLength(tagLength, verb) {
+	if (!TAG_LENGTHS.includes(tagLength)) {
+		throw new Error(`${verb}: tagLength must be one of: ${TAG_LENGTHS.join(", ")}`);
+	}
+}
+function toBytes(input, verb) {
+	if (typeof input === "string") return base64ToBytes(input, verb);
+	if (input instanceof ArrayBuffer) return new Uint8Array(input.slice(0));
+	if (ArrayBuffer.isView(input) && input.buffer instanceof ArrayBuffer) {
+		return exactBytes(new Uint8Array(input.buffer, input.byteOffset, input.byteLength));
+	}
+	throw new TypeError(`${verb}: expected a base64 string, Uint8Array, or ArrayBuffer`);
+}
+const sealedParts = /* @__PURE__ */ new WeakMap();
+const keyBytes = /* @__PURE__ */ new WeakMap();
+function encodeParts(bytes, encoding) {
+	return encoding === "base64" ? bytesToBase64(bytes) : exactBytes(bytes);
+}
+function createAesApi(engine) {
+	class AESEncryptionKey {
+		size;
+		constructor(bytes) {
+			if (!KEY_SIZES.includes(bytes.length * 8)) {
+				throw new Error(`Crypto.AESEncryptionKey: key must be 128, 192, or 256 bits, got ${bytes.length * 8}`);
+			}
+			this.size = bytes.length * 8;
+			keyBytes.set(this, exactBytes(bytes));
+		}
+		static async generate(size = 256) {
+			if (!KEY_SIZES.includes(size)) {
+				throw new Error(`Crypto.AESEncryptionKey.generate: size must be one of: ${KEY_SIZES.join(", ")}`);
+			}
+			const bytes = new Uint8Array(size / 8);
+			engine.random(bytes);
+			return new AESEncryptionKey(bytes);
+		}
+		static async import(input, encoding) {
+			const verb = "Crypto.AESEncryptionKey.import";
+			let bytes;
+			if (typeof input === "string") {
+				if (encoding === "hex") bytes = hexToBytes(input, verb);
+				else if (encoding === "base64") bytes = base64ToBytes(input, verb);
+				else throw new Error(`${verb}: encoding must be 'hex' or 'base64'`);
+			} else if (input instanceof Uint8Array) {
+				bytes = exactBytes(input);
+			} else {
+				throw new TypeError(`${verb}: expected bytes or an encoded string`);
+			}
+			if (!KEY_SIZES.includes(bytes.length * 8)) {
+				throw new Error(`${verb}: key must be 128, 192, or 256 bits, got ${bytes.length * 8}`);
+			}
+			return new AESEncryptionKey(bytes);
+		}
+		async bytes() {
+			return exactBytes(keyBytes.get(this));
+		}
+		async encoded(encoding) {
+			const bytes = keyBytes.get(this);
+			if (encoding === "hex") return bytesToHex(bytes);
+			if (encoding === "base64") return bytesToBase64(bytes);
+			throw new Error(`Crypto.AESEncryptionKey.encoded: encoding must be 'hex' or 'base64'`);
+		}
+	}
+	class AESSealedData {
+		constructor(parts) {
+			if (parts.iv.length === 0) throw new Error("Crypto.AESSealedData: iv must not be empty");
+			assertTagLength(parts.tag.length, "Crypto.AESSealedData");
+			sealedParts.set(this, parts);
+		}
+		static fromCombined(combined, config = {}) {
+			const verb = "Crypto.AESSealedData.fromCombined";
+			const ivLength = config.ivLength ?? DEFAULT_IV_LENGTH;
+			const tagLength = config.tagLength ?? DEFAULT_TAG_LENGTH;
+			assertTagLength(tagLength, verb);
+			if (!Number.isInteger(ivLength) || ivLength <= 0) {
+				throw new Error(`${verb}: ivLength must be a positive integer`);
+			}
+			const bytes = toBytes(combined, verb);
+			if (bytes.length < ivLength + tagLength) {
+				throw new Error(`${verb}: combined data is shorter than its iv and tag`);
+			}
+			return new AESSealedData({
+				iv: exactBytes(bytes.subarray(0, ivLength)),
+				ciphertext: exactBytes(bytes.subarray(ivLength, bytes.length - tagLength)),
+				tag: exactBytes(bytes.subarray(bytes.length - tagLength))
+			});
+		}
+		static fromParts(ivInput, ciphertextInput, tagOrLength) {
+			const verb = "Crypto.AESSealedData.fromParts";
+			const iv = toBytes(ivInput, verb);
+			const ciphertext = toBytes(ciphertextInput, verb);
+			if (tagOrLength === void 0 || typeof tagOrLength === "number") {
+				const tagLength = tagOrLength ?? DEFAULT_TAG_LENGTH;
+				assertTagLength(tagLength, verb);
+				if (ciphertext.length < tagLength) {
+					throw new Error(`${verb}: ciphertext is shorter than its tag`);
+				}
+				return new AESSealedData({
+					iv,
+					ciphertext: exactBytes(ciphertext.subarray(0, ciphertext.length - tagLength)),
+					tag: exactBytes(ciphertext.subarray(ciphertext.length - tagLength))
+				});
+			}
+			const tag = toBytes(tagOrLength, verb);
+			assertTagLength(tag.length, verb);
+			return new AESSealedData({
+				iv,
+				ciphertext,
+				tag
+			});
+		}
+		static fromSeal(iv, ciphertextWithTag, tagLength) {
+			return new AESSealedData({
+				iv,
+				ciphertext: exactBytes(ciphertextWithTag.subarray(0, ciphertextWithTag.length - tagLength)),
+				tag: exactBytes(ciphertextWithTag.subarray(ciphertextWithTag.length - tagLength))
+			});
+		}
+		get ivSize() {
+			return sealedParts.get(this).iv.length;
+		}
+		get tagSize() {
+			return sealedParts.get(this).tag.length;
+		}
+		get combinedSize() {
+			const parts = sealedParts.get(this);
+			return parts.iv.length + parts.ciphertext.length + parts.tag.length;
+		}
+		async iv(encoding) {
+			return encodeParts(sealedParts.get(this).iv, encoding);
+		}
+		async tag(encoding) {
+			return encodeParts(sealedParts.get(this).tag, encoding);
+		}
+		async ciphertext(options) {
+			const parts = sealedParts.get(this);
+			const bytes = options?.includeTag ? concatBytes([parts.ciphertext, parts.tag]) : parts.ciphertext;
+			return encodeParts(bytes, options?.encoding);
+		}
+		async combined(encoding) {
+			const parts = sealedParts.get(this);
+			return encodeParts(concatBytes([
+				parts.iv,
+				parts.ciphertext,
+				parts.tag
+			]), encoding);
+		}
+	}
+	async function keyMaterial(key, verb) {
+		const own = keyBytes.get(key);
+		if (own) return exactBytes(own);
+		if (key && typeof key.bytes === "function") return exactBytes(await key.bytes());
+		throw new TypeError(`${verb}: expected an AESEncryptionKey`);
+	}
+	async function partsOf(sealed, verb) {
+		const own = sealedParts.get(sealed);
+		if (own) {
+			return {
+				iv: exactBytes(own.iv),
+				ciphertext: exactBytes(own.ciphertext),
+				tag: exactBytes(own.tag)
+			};
+		}
+		if (sealed && typeof sealed.iv === "function" && typeof sealed.combined === "function") {
+			const iv = exactBytes(await sealed.iv());
+			const tag = exactBytes(await sealed.tag());
+			const ciphertext = exactBytes(await sealed.ciphertext({
+				encoding: "bytes",
+				includeTag: false
+			}));
+			return {
+				iv,
+				ciphertext,
+				tag
+			};
+		}
+		throw new TypeError(`${verb}: expected an AESSealedData`);
+	}
+	async function aesEncrypt(plaintext, key, options = {}) {
+		const verb = "Crypto.aesEncrypt";
+		const tagLength = options.tagLength ?? DEFAULT_TAG_LENGTH;
+		assertTagLength(tagLength, verb);
+		let iv;
+		const nonce = options.nonce;
+		if (nonce && "bytes" in nonce && nonce.bytes !== void 0) {
+			iv = toBytes(nonce.bytes, verb);
+			if (iv.length === 0) throw new Error(`${verb}: nonce bytes must not be empty`);
+		} else {
+			const length = nonce && "length" in nonce && nonce.length !== void 0 ? nonce.length : DEFAULT_IV_LENGTH;
+			if (!Number.isInteger(length) || length <= 0) {
+				throw new Error(`${verb}: nonce length must be a positive integer`);
+			}
+			iv = new Uint8Array(length);
+			engine.random(iv);
+		}
+		const additionalData = options.additionalData === void 0 ? void 0 : toBytes(options.additionalData, verb);
+		const plainBytes = toBytes(plaintext, verb);
+		const sealed = await engine.seal(await keyMaterial(key, verb), iv, plainBytes, additionalData, tagLength);
+		const actualTag = sealed.length - plainBytes.length;
+		return AESSealedData.fromSeal(iv, sealed, actualTag > 0 ? actualTag : tagLength);
+	}
+	async function aesDecrypt(sealedData, key, options = {}) {
+		const verb = "Crypto.aesDecrypt";
+		const parts = await partsOf(sealedData, verb);
+		const additionalData = options.additionalData === void 0 ? void 0 : toBytes(options.additionalData, verb);
+		const plaintext = await engine.open(await keyMaterial(key, verb), parts.iv, concatBytes([parts.ciphertext, parts.tag]), additionalData, parts.tag.length);
+		return options.output === "base64" ? bytesToBase64(plaintext) : plaintext;
+	}
+	return {
+		AESEncryptionKey,
+		AESSealedData,
+		aesEncrypt,
+		aesDecrypt
+	};
+}
+
+export { assertTagLength, createAesApi, toBytes };
+//# sourceMappingURL=aes.mjs.map

package/dist/esm/platform/crypto/aes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes.js","names":[],"sources":["esm/platform/crypto/aes.js"],"sourcesContent":["import { base64ToBytes, bytesToBase64, bytesToHex, concatBytes, exactBytes, hexToBytes } from \"./bytes\";\nconst KEY_SIZES = [128, 192, 256];\nconst TAG_LENGTHS = [16, 15, 14, 13, 12, 8, 4];\nconst DEFAULT_IV_LENGTH = 12;\nconst DEFAULT_TAG_LENGTH = 16;\nfunction assertTagLength(tagLength, verb) {\n  if (!TAG_LENGTHS.includes(tagLength)) {\n    throw new Error(`${verb}: tagLength must be one of: ${TAG_LENGTHS.join(\", \")}`);\n  }\n}\nfunction toBytes(input, verb) {\n  if (typeof input === \"string\") return base64ToBytes(input, verb);\n  if (input instanceof ArrayBuffer) return new Uint8Array(input.slice(0));\n  if (ArrayBuffer.isView(input) && input.buffer instanceof ArrayBuffer) {\n    return exactBytes(new Uint8Array(input.buffer, input.byteOffset, input.byteLength));\n  }\n  throw new TypeError(`${verb}: expected a base64 string, Uint8Array, or ArrayBuffer`);\n}\nconst sealedParts = /* @__PURE__ */ new WeakMap();\nconst keyBytes = /* @__PURE__ */ new WeakMap();\nfunction encodeParts(bytes, encoding) {\n  return encoding === \"base64\" ? bytesToBase64(bytes) : exactBytes(bytes);\n}\nfunction createAesApi(engine) {\n  class AESEncryptionKey {\n    size;\n    // construct through generate or import; direct construction still\n    // validates, so a key object can never hold a non-AES length.\n    constructor(bytes) {\n      if (!KEY_SIZES.includes(bytes.length * 8)) {\n        throw new Error(\n          `Crypto.AESEncryptionKey: key must be 128, 192, or 256 bits, got ${bytes.length * 8}`\n        );\n      }\n      this.size = bytes.length * 8;\n      keyBytes.set(this, exactBytes(bytes));\n    }\n    static async generate(size = 256) {\n      if (!KEY_SIZES.includes(size)) {\n        throw new Error(`Crypto.AESEncryptionKey.generate: size must be one of: ${KEY_SIZES.join(\", \")}`);\n      }\n      const bytes = new Uint8Array(size / 8);\n      engine.random(bytes);\n      return new AESEncryptionKey(bytes);\n    }\n    static async import(input, encoding) {\n      const verb = \"Crypto.AESEncryptionKey.import\";\n      let bytes;\n      if (typeof input === \"string\") {\n        if (encoding === \"hex\") bytes = hexToBytes(input, verb);\n        else if (encoding === \"base64\") bytes = base64ToBytes(input, verb);\n        else throw new Error(`${verb}: encoding must be 'hex' or 'base64'`);\n      } else if (input instanceof Uint8Array) {\n        bytes = exactBytes(input);\n      } else {\n        throw new TypeError(`${verb}: expected bytes or an encoded string`);\n      }\n      if (!KEY_SIZES.includes(bytes.length * 8)) {\n        throw new Error(`${verb}: key must be 128, 192, or 256 bits, got ${bytes.length * 8}`);\n      }\n      return new AESEncryptionKey(bytes);\n    }\n    async bytes() {\n      return exactBytes(keyBytes.get(this));\n    }\n    async encoded(encoding) {\n      const bytes = keyBytes.get(this);\n      if (encoding === \"hex\") return bytesToHex(bytes);\n      if (encoding === \"base64\") return bytesToBase64(bytes);\n      throw new Error(`Crypto.AESEncryptionKey.encoded: encoding must be 'hex' or 'base64'`);\n    }\n  }\n  class AESSealedData {\n    // construct through fromCombined or fromParts. direct construction still\n    // validates, so sealed data can never carry an empty iv or a tag gcm\n    // does not allow.\n    constructor(parts) {\n      if (parts.iv.length === 0) throw new Error(\"Crypto.AESSealedData: iv must not be empty\");\n      assertTagLength(parts.tag.length, \"Crypto.AESSealedData\");\n      sealedParts.set(this, parts);\n    }\n    static fromCombined(combined, config = {}) {\n      const verb = \"Crypto.AESSealedData.fromCombined\";\n      const ivLength = config.ivLength ?? DEFAULT_IV_LENGTH;\n      const tagLength = config.tagLength ?? DEFAULT_TAG_LENGTH;\n      assertTagLength(tagLength, verb);\n      if (!Number.isInteger(ivLength) || ivLength <= 0) {\n        throw new Error(`${verb}: ivLength must be a positive integer`);\n      }\n      const bytes = toBytes(combined, verb);\n      if (bytes.length < ivLength + tagLength) {\n        throw new Error(`${verb}: combined data is shorter than its iv and tag`);\n      }\n      return new AESSealedData({\n        iv: exactBytes(bytes.subarray(0, ivLength)),\n        ciphertext: exactBytes(bytes.subarray(ivLength, bytes.length - tagLength)),\n        tag: exactBytes(bytes.subarray(bytes.length - tagLength))\n      });\n    }\n    static fromParts(ivInput, ciphertextInput, tagOrLength) {\n      const verb = \"Crypto.AESSealedData.fromParts\";\n      const iv = toBytes(ivInput, verb);\n      const ciphertext = toBytes(ciphertextInput, verb);\n      if (tagOrLength === void 0 || typeof tagOrLength === \"number\") {\n        const tagLength = tagOrLength ?? DEFAULT_TAG_LENGTH;\n        assertTagLength(tagLength, verb);\n        if (ciphertext.length < tagLength) {\n          throw new Error(`${verb}: ciphertext is shorter than its tag`);\n        }\n        return new AESSealedData({\n          iv,\n          ciphertext: exactBytes(ciphertext.subarray(0, ciphertext.length - tagLength)),\n          tag: exactBytes(ciphertext.subarray(ciphertext.length - tagLength))\n        });\n      }\n      const tag = toBytes(tagOrLength, verb);\n      assertTagLength(tag.length, verb);\n      return new AESSealedData({ iv, ciphertext, tag });\n    }\n    // internal: aesEncrypt builds sealed data from engine output without\n    // going through the public parsers (which would just re-split it).\n    static fromSeal(iv, ciphertextWithTag, tagLength) {\n      return new AESSealedData({\n        iv,\n        ciphertext: exactBytes(ciphertextWithTag.subarray(0, ciphertextWithTag.length - tagLength)),\n        tag: exactBytes(ciphertextWithTag.subarray(ciphertextWithTag.length - tagLength))\n      });\n    }\n    get ivSize() {\n      return sealedParts.get(this).iv.length;\n    }\n    get tagSize() {\n      return sealedParts.get(this).tag.length;\n    }\n    get combinedSize() {\n      const parts = sealedParts.get(this);\n      return parts.iv.length + parts.ciphertext.length + parts.tag.length;\n    }\n    async iv(encoding) {\n      return encodeParts(sealedParts.get(this).iv, encoding);\n    }\n    async tag(encoding) {\n      return encodeParts(sealedParts.get(this).tag, encoding);\n    }\n    async ciphertext(options) {\n      const parts = sealedParts.get(this);\n      const bytes = options?.includeTag ? concatBytes([parts.ciphertext, parts.tag]) : parts.ciphertext;\n      return encodeParts(bytes, options?.encoding);\n    }\n    async combined(encoding) {\n      const parts = sealedParts.get(this);\n      return encodeParts(concatBytes([parts.iv, parts.ciphertext, parts.tag]), encoding);\n    }\n  }\n  async function keyMaterial(key, verb) {\n    const own = keyBytes.get(key);\n    if (own) return exactBytes(own);\n    if (key && typeof key.bytes === \"function\") return exactBytes(await key.bytes());\n    throw new TypeError(`${verb}: expected an AESEncryptionKey`);\n  }\n  async function partsOf(sealed, verb) {\n    const own = sealedParts.get(sealed);\n    if (own) {\n      return {\n        iv: exactBytes(own.iv),\n        ciphertext: exactBytes(own.ciphertext),\n        tag: exactBytes(own.tag)\n      };\n    }\n    if (sealed && typeof sealed.iv === \"function\" && typeof sealed.combined === \"function\") {\n      const iv = exactBytes(await sealed.iv());\n      const tag = exactBytes(await sealed.tag());\n      const ciphertext = exactBytes(await sealed.ciphertext({ encoding: \"bytes\", includeTag: false }));\n      return { iv, ciphertext, tag };\n    }\n    throw new TypeError(`${verb}: expected an AESSealedData`);\n  }\n  async function aesEncrypt(plaintext, key, options = {}) {\n    const verb = \"Crypto.aesEncrypt\";\n    const tagLength = options.tagLength ?? DEFAULT_TAG_LENGTH;\n    assertTagLength(tagLength, verb);\n    let iv;\n    const nonce = options.nonce;\n    if (nonce && \"bytes\" in nonce && nonce.bytes !== void 0) {\n      iv = toBytes(nonce.bytes, verb);\n      if (iv.length === 0) throw new Error(`${verb}: nonce bytes must not be empty`);\n    } else {\n      const length = nonce && \"length\" in nonce && nonce.length !== void 0 ? nonce.length : DEFAULT_IV_LENGTH;\n      if (!Number.isInteger(length) || length <= 0) {\n        throw new Error(`${verb}: nonce length must be a positive integer`);\n      }\n      iv = new Uint8Array(length);\n      engine.random(iv);\n    }\n    const additionalData = options.additionalData === void 0 ? void 0 : toBytes(options.additionalData, verb);\n    const plainBytes = toBytes(plaintext, verb);\n    const sealed = await engine.seal(\n      await keyMaterial(key, verb),\n      iv,\n      plainBytes,\n      additionalData,\n      tagLength\n    );\n    const actualTag = sealed.length - plainBytes.length;\n    return AESSealedData.fromSeal(iv, sealed, actualTag > 0 ? actualTag : tagLength);\n  }\n  async function aesDecrypt(sealedData, key, options = {}) {\n    const verb = \"Crypto.aesDecrypt\";\n    const parts = await partsOf(sealedData, verb);\n    const additionalData = options.additionalData === void 0 ? void 0 : toBytes(options.additionalData, verb);\n    const plaintext = await engine.open(\n      await keyMaterial(key, verb),\n      parts.iv,\n      concatBytes([parts.ciphertext, parts.tag]),\n      additionalData,\n      parts.tag.length\n    );\n    return options.output === \"base64\" ? bytesToBase64(plaintext) : plaintext;\n  }\n  return { AESEncryptionKey, AESSealedData, aesEncrypt, aesDecrypt };\n}\nexport {\n  assertTagLength,\n  createAesApi,\n  toBytes\n};\n//# sourceMappingURL=aes.js.map\n"],"mappings":";;;AACA,MAAM,YAAY;CAAC;CAAK;CAAK;AAAG;AAChC,MAAM,cAAc;CAAC;CAAI;CAAI;CAAI;CAAI;CAAI;CAAG;AAAC;AAC7C,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AAC3B,SAAS,gBAAgB,WAAW,MAAM;CACxC,IAAI,CAAC,YAAY,SAAS,SAAS,GAAG;EACpC,MAAM,IAAI,MAAM,GAAG,KAAK,8BAA8B,YAAY,KAAK,IAAI,GAAG;CAChF;AACF;AACA,SAAS,QAAQ,OAAO,MAAM;CAC5B,IAAI,OAAO,UAAU,UAAU,OAAO,cAAc,OAAO,IAAI;CAC/D,IAAI,iBAAiB,aAAa,OAAO,IAAI,WAAW,MAAM,MAAM,CAAC,CAAC;CACtE,IAAI,YAAY,OAAO,KAAK,KAAK,MAAM,kBAAkB,aAAa;EACpE,OAAO,WAAW,IAAI,WAAW,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,CAAC;CACpF;CACA,MAAM,IAAI,UAAU,GAAG,KAAK,uDAAuD;AACrF;AACA,MAAM,8BAA8B,IAAI,QAAQ;AAChD,MAAM,2BAA2B,IAAI,QAAQ;AAC7C,SAAS,YAAY,OAAO,UAAU;CACpC,OAAO,aAAa,WAAW,cAAc,KAAK,IAAI,WAAW,KAAK;AACxE;AACA,SAAS,aAAa,QAAQ;CAC5B,MAAM,iBAAiB;EACrB;EAGA,YAAY,OAAO;GACjB,IAAI,CAAC,UAAU,SAAS,MAAM,SAAS,CAAC,GAAG;IACzC,MAAM,IAAI,MACR,mEAAmE,MAAM,SAAS,GACpF;GACF;GACA,KAAK,OAAO,MAAM,SAAS;GAC3B,SAAS,IAAI,MAAM,WAAW,KAAK,CAAC;EACtC;EACA,aAAa,SAAS,OAAO,KAAK;GAChC,IAAI,CAAC,UAAU,SAAS,IAAI,GAAG;IAC7B,MAAM,IAAI,MAAM,0DAA0D,UAAU,KAAK,IAAI,GAAG;GAClG;GACA,MAAM,QAAQ,IAAI,WAAW,OAAO,CAAC;GACrC,OAAO,OAAO,KAAK;GACnB,OAAO,IAAI,iBAAiB,KAAK;EACnC;EACA,aAAa,OAAO,OAAO,UAAU;GACnC,MAAM,OAAO;GACb,IAAI;GACJ,IAAI,OAAO,UAAU,UAAU;IAC7B,IAAI,aAAa,OAAO,QAAQ,WAAW,OAAO,IAAI;SACjD,IAAI,aAAa,UAAU,QAAQ,cAAc,OAAO,IAAI;SAC5D,MAAM,IAAI,MAAM,GAAG,KAAK,qCAAqC;GACpE,OAAO,IAAI,iBAAiB,YAAY;IACtC,QAAQ,WAAW,KAAK;GAC1B,OAAO;IACL,MAAM,IAAI,UAAU,GAAG,KAAK,sCAAsC;GACpE;GACA,IAAI,CAAC,UAAU,SAAS,MAAM,SAAS,CAAC,GAAG;IACzC,MAAM,IAAI,MAAM,GAAG,KAAK,2CAA2C,MAAM,SAAS,GAAG;GACvF;GACA,OAAO,IAAI,iBAAiB,KAAK;EACnC;EACA,MAAM,QAAQ;GACZ,OAAO,WAAW,SAAS,IAAI,IAAI,CAAC;EACtC;EACA,MAAM,QAAQ,UAAU;GACtB,MAAM,QAAQ,SAAS,IAAI,IAAI;GAC/B,IAAI,aAAa,OAAO,OAAO,WAAW,KAAK;GAC/C,IAAI,aAAa,UAAU,OAAO,cAAc,KAAK;GACrD,MAAM,IAAI,MAAM,qEAAqE;EACvF;CACF;CACA,MAAM,cAAc;EAIlB,YAAY,OAAO;GACjB,IAAI,MAAM,GAAG,WAAW,GAAG,MAAM,IAAI,MAAM,4CAA4C;GACvF,gBAAgB,MAAM,IAAI,QAAQ,sBAAsB;GACxD,YAAY,IAAI,MAAM,KAAK;EAC7B;EACA,OAAO,aAAa,UAAU,SAAS,CAAC,GAAG;GACzC,MAAM,OAAO;GACb,MAAM,WAAW,OAAO,YAAY;GACpC,MAAM,YAAY,OAAO,aAAa;GACtC,gBAAgB,WAAW,IAAI;GAC/B,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,YAAY,GAAG;IAChD,MAAM,IAAI,MAAM,GAAG,KAAK,sCAAsC;GAChE;GACA,MAAM,QAAQ,QAAQ,UAAU,IAAI;GACpC,IAAI,MAAM,SAAS,WAAW,WAAW;IACvC,MAAM,IAAI,MAAM,GAAG,KAAK,+CAA+C;GACzE;GACA,OAAO,IAAI,cAAc;IACvB,IAAI,WAAW,MAAM,SAAS,GAAG,QAAQ,CAAC;IAC1C,YAAY,WAAW,MAAM,SAAS,UAAU,MAAM,SAAS,SAAS,CAAC;IACzE,KAAK,WAAW,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC;GAC1D,CAAC;EACH;EACA,OAAO,UAAU,SAAS,iBAAiB,aAAa;GACtD,MAAM,OAAO;GACb,MAAM,KAAK,QAAQ,SAAS,IAAI;GAChC,MAAM,aAAa,QAAQ,iBAAiB,IAAI;GAChD,IAAI,gBAAgB,KAAK,KAAK,OAAO,gBAAgB,UAAU;IAC7D,MAAM,YAAY,eAAe;IACjC,gBAAgB,WAAW,IAAI;IAC/B,IAAI,WAAW,SAAS,WAAW;KACjC,MAAM,IAAI,MAAM,GAAG,KAAK,qCAAqC;IAC/D;IACA,OAAO,IAAI,cAAc;KACvB;KACA,YAAY,WAAW,WAAW,SAAS,GAAG,WAAW,SAAS,SAAS,CAAC;KAC5E,KAAK,WAAW,WAAW,SAAS,WAAW,SAAS,SAAS,CAAC;IACpE,CAAC;GACH;GACA,MAAM,MAAM,QAAQ,aAAa,IAAI;GACrC,gBAAgB,IAAI,QAAQ,IAAI;GAChC,OAAO,IAAI,cAAc;IAAE;IAAI;IAAY;GAAI,CAAC;EAClD;EAGA,OAAO,SAAS,IAAI,mBAAmB,WAAW;GAChD,OAAO,IAAI,cAAc;IACvB;IACA,YAAY,WAAW,kBAAkB,SAAS,GAAG,kBAAkB,SAAS,SAAS,CAAC;IAC1F,KAAK,WAAW,kBAAkB,SAAS,kBAAkB,SAAS,SAAS,CAAC;GAClF,CAAC;EACH;EACA,IAAI,SAAS;GACX,OAAO,YAAY,IAAI,IAAI,CAAC,CAAC,GAAG;EAClC;EACA,IAAI,UAAU;GACZ,OAAO,YAAY,IAAI,IAAI,CAAC,CAAC,IAAI;EACnC;EACA,IAAI,eAAe;GACjB,MAAM,QAAQ,YAAY,IAAI,IAAI;GAClC,OAAO,MAAM,GAAG,SAAS,MAAM,WAAW,SAAS,MAAM,IAAI;EAC/D;EACA,MAAM,GAAG,UAAU;GACjB,OAAO,YAAY,YAAY,IAAI,IAAI,CAAC,CAAC,IAAI,QAAQ;EACvD;EACA,MAAM,IAAI,UAAU;GAClB,OAAO,YAAY,YAAY,IAAI,IAAI,CAAC,CAAC,KAAK,QAAQ;EACxD;EACA,MAAM,WAAW,SAAS;GACxB,MAAM,QAAQ,YAAY,IAAI,IAAI;GAClC,MAAM,QAAQ,SAAS,aAAa,YAAY,CAAC,MAAM,YAAY,MAAM,GAAG,CAAC,IAAI,MAAM;GACvF,OAAO,YAAY,OAAO,SAAS,QAAQ;EAC7C;EACA,MAAM,SAAS,UAAU;GACvB,MAAM,QAAQ,YAAY,IAAI,IAAI;GAClC,OAAO,YAAY,YAAY;IAAC,MAAM;IAAI,MAAM;IAAY,MAAM;GAAG,CAAC,GAAG,QAAQ;EACnF;CACF;CACA,eAAe,YAAY,KAAK,MAAM;EACpC,MAAM,MAAM,SAAS,IAAI,GAAG;EAC5B,IAAI,KAAK,OAAO,WAAW,GAAG;EAC9B,IAAI,OAAO,OAAO,IAAI,UAAU,YAAY,OAAO,WAAW,MAAM,IAAI,MAAM,CAAC;EAC/E,MAAM,IAAI,UAAU,GAAG,KAAK,+BAA+B;CAC7D;CACA,eAAe,QAAQ,QAAQ,MAAM;EACnC,MAAM,MAAM,YAAY,IAAI,MAAM;EAClC,IAAI,KAAK;GACP,OAAO;IACL,IAAI,WAAW,IAAI,EAAE;IACrB,YAAY,WAAW,IAAI,UAAU;IACrC,KAAK,WAAW,IAAI,GAAG;GACzB;EACF;EACA,IAAI,UAAU,OAAO,OAAO,OAAO,cAAc,OAAO,OAAO,aAAa,YAAY;GACtF,MAAM,KAAK,WAAW,MAAM,OAAO,GAAG,CAAC;GACvC,MAAM,MAAM,WAAW,MAAM,OAAO,IAAI,CAAC;GACzC,MAAM,aAAa,WAAW,MAAM,OAAO,WAAW;IAAE,UAAU;IAAS,YAAY;GAAM,CAAC,CAAC;GAC/F,OAAO;IAAE;IAAI;IAAY;GAAI;EAC/B;EACA,MAAM,IAAI,UAAU,GAAG,KAAK,4BAA4B;CAC1D;CACA,eAAe,WAAW,WAAW,KAAK,UAAU,CAAC,GAAG;EACtD,MAAM,OAAO;EACb,MAAM,YAAY,QAAQ,aAAa;EACvC,gBAAgB,WAAW,IAAI;EAC/B,IAAI;EACJ,MAAM,QAAQ,QAAQ;EACtB,IAAI,SAAS,WAAW,SAAS,MAAM,UAAU,KAAK,GAAG;GACvD,KAAK,QAAQ,MAAM,OAAO,IAAI;GAC9B,IAAI,GAAG,WAAW,GAAG,MAAM,IAAI,MAAM,GAAG,KAAK,gCAAgC;EAC/E,OAAO;GACL,MAAM,SAAS,SAAS,YAAY,SAAS,MAAM,WAAW,KAAK,IAAI,MAAM,SAAS;GACtF,IAAI,CAAC,OAAO,UAAU,MAAM,KAAK,UAAU,GAAG;IAC5C,MAAM,IAAI,MAAM,GAAG,KAAK,0CAA0C;GACpE;GACA,KAAK,IAAI,WAAW,MAAM;GAC1B,OAAO,OAAO,EAAE;EAClB;EACA,MAAM,iBAAiB,QAAQ,mBAAmB,KAAK,IAAI,KAAK,IAAI,QAAQ,QAAQ,gBAAgB,IAAI;EACxG,MAAM,aAAa,QAAQ,WAAW,IAAI;EAC1C,MAAM,SAAS,MAAM,OAAO,KAC1B,MAAM,YAAY,KAAK,IAAI,GAC3B,IACA,YACA,gBACA,SACF;EACA,MAAM,YAAY,OAAO,SAAS,WAAW;EAC7C,OAAO,cAAc,SAAS,IAAI,QAAQ,YAAY,IAAI,YAAY,SAAS;CACjF;CACA,eAAe,WAAW,YAAY,KAAK,UAAU,CAAC,GAAG;EACvD,MAAM,OAAO;EACb,MAAM,QAAQ,MAAM,QAAQ,YAAY,IAAI;EAC5C,MAAM,iBAAiB,QAAQ,mBAAmB,KAAK,IAAI,KAAK,IAAI,QAAQ,QAAQ,gBAAgB,IAAI;EACxG,MAAM,YAAY,MAAM,OAAO,KAC7B,MAAM,YAAY,KAAK,IAAI,GAC3B,MAAM,IACN,YAAY,CAAC,MAAM,YAAY,MAAM,GAAG,CAAC,GACzC,gBACA,MAAM,IAAI,MACZ;EACA,OAAO,QAAQ,WAAW,WAAW,cAAc,SAAS,IAAI;CAClE;CACA,OAAO;EAAE;EAAkB;EAAe;EAAY;CAAW;AACnE"}

package/dist/esm/platform/crypto/aes.native.js

@@ -0,0 +1,318 @@
+import { base64ToBytes, bytesToBase64, bytesToHex, concatBytes, exactBytes, hexToBytes } from "./bytes.native.js";
+
+function _class_call_check(instance, Constructor) {
+	if (!(instance instanceof Constructor)) throw new TypeError("Cannot call a class as a function");
+}
+function _defineProperties(target, props) {
+	for (var i = 0; i < props.length; i++) {
+		var descriptor = props[i];
+		descriptor.enumerable = descriptor.enumerable || false;
+		descriptor.configurable = true;
+		if ("value" in descriptor) descriptor.writable = true;
+		Object.defineProperty(target, descriptor.key, descriptor);
+	}
+}
+function _create_class(Constructor, protoProps, staticProps) {
+	if (protoProps) _defineProperties(Constructor.prototype, protoProps);
+	if (staticProps) _defineProperties(Constructor, staticProps);
+	return Constructor;
+}
+function _define_property(obj, key, value) {
+	if (key in obj) {
+		Object.defineProperty(obj, key, {
+			value,
+			enumerable: true,
+			configurable: true,
+			writable: true
+		});
+	} else obj[key] = value;
+	return obj;
+}
+var KEY_SIZES = [
+	128,
+	192,
+	256
+];
+var TAG_LENGTHS = [
+	16,
+	15,
+	14,
+	13,
+	12,
+	8,
+	4
+];
+var DEFAULT_IV_LENGTH = 12;
+var DEFAULT_TAG_LENGTH = 16;
+function assertTagLength(tagLength, verb) {
+	if (!TAG_LENGTHS.includes(tagLength)) {
+		throw new Error(`${verb}: tagLength must be one of: ${TAG_LENGTHS.join(", ")}`);
+	}
+}
+function toBytes(input, verb) {
+	if (typeof input === "string") return base64ToBytes(input, verb);
+	if (input instanceof ArrayBuffer) return new Uint8Array(input.slice(0));
+	if (ArrayBuffer.isView(input) && input.buffer instanceof ArrayBuffer) {
+		return exactBytes(new Uint8Array(input.buffer, input.byteOffset, input.byteLength));
+	}
+	throw new TypeError(`${verb}: expected a base64 string, Uint8Array, or ArrayBuffer`);
+}
+var sealedParts = /* @__PURE__ */ new WeakMap();
+var keyBytes = /* @__PURE__ */ new WeakMap();
+function encodeParts(bytes, encoding) {
+	return encoding === "base64" ? bytesToBase64(bytes) : exactBytes(bytes);
+}
+function createAesApi(engine) {
+	var AESEncryptionKey = /* @__PURE__ */ (function() {
+		"use strict";
+		function AESEncryptionKey2(bytes) {
+			_class_call_check(this, AESEncryptionKey2);
+			_define_property(this, "size", void 0);
+			if (!KEY_SIZES.includes(bytes.length * 8)) {
+				throw new Error(`Crypto.AESEncryptionKey: key must be 128, 192, or 256 bits, got ${bytes.length * 8}`);
+			}
+			this.size = bytes.length * 8;
+			keyBytes.set(this, exactBytes(bytes));
+		}
+		_create_class(AESEncryptionKey2, [{
+			key: "bytes",
+			value: async function bytes() {
+				return exactBytes(keyBytes.get(this));
+			}
+		}, {
+			key: "encoded",
+			value: async function encoded(encoding) {
+				var bytes = keyBytes.get(this);
+				if (encoding === "hex") return bytesToHex(bytes);
+				if (encoding === "base64") return bytesToBase64(bytes);
+				throw new Error(`Crypto.AESEncryptionKey.encoded: encoding must be 'hex' or 'base64'`);
+			}
+		}], [{
+			key: "generate",
+			value: async function generate() {
+				var size = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : 256;
+				if (!KEY_SIZES.includes(size)) {
+					throw new Error(`Crypto.AESEncryptionKey.generate: size must be one of: ${KEY_SIZES.join(", ")}`);
+				}
+				var bytes = new Uint8Array(size / 8);
+				engine.random(bytes);
+				return new AESEncryptionKey2(bytes);
+			}
+		}, {
+			key: "import",
+			value: async function _import(input, encoding) {
+				var verb = "Crypto.AESEncryptionKey.import";
+				var bytes;
+				if (typeof input === "string") {
+					if (encoding === "hex") bytes = hexToBytes(input, verb);
+					else if (encoding === "base64") bytes = base64ToBytes(input, verb);
+					else throw new Error(`${verb}: encoding must be 'hex' or 'base64'`);
+				} else if (input instanceof Uint8Array) {
+					bytes = exactBytes(input);
+				} else {
+					throw new TypeError(`${verb}: expected bytes or an encoded string`);
+				}
+				if (!KEY_SIZES.includes(bytes.length * 8)) {
+					throw new Error(`${verb}: key must be 128, 192, or 256 bits, got ${bytes.length * 8}`);
+				}
+				return new AESEncryptionKey2(bytes);
+			}
+		}]);
+		return AESEncryptionKey2;
+	})();
+	var AESSealedData = /* @__PURE__ */ (function() {
+		"use strict";
+		function AESSealedData2(parts) {
+			_class_call_check(this, AESSealedData2);
+			if (parts.iv.length === 0) throw new Error("Crypto.AESSealedData: iv must not be empty");
+			assertTagLength(parts.tag.length, "Crypto.AESSealedData");
+			sealedParts.set(this, parts);
+		}
+		_create_class(AESSealedData2, [
+			{
+				key: "ivSize",
+				get: function get() {
+					return sealedParts.get(this).iv.length;
+				}
+			},
+			{
+				key: "tagSize",
+				get: function get() {
+					return sealedParts.get(this).tag.length;
+				}
+			},
+			{
+				key: "combinedSize",
+				get: function get() {
+					var parts = sealedParts.get(this);
+					return parts.iv.length + parts.ciphertext.length + parts.tag.length;
+				}
+			},
+			{
+				key: "iv",
+				value: async function iv(encoding) {
+					return encodeParts(sealedParts.get(this).iv, encoding);
+				}
+			},
+			{
+				key: "tag",
+				value: async function tag(encoding) {
+					return encodeParts(sealedParts.get(this).tag, encoding);
+				}
+			},
+			{
+				key: "ciphertext",
+				value: async function ciphertext(options) {
+					var parts = sealedParts.get(this);
+					var bytes = (options === null || options === void 0 ? void 0 : options.includeTag) ? concatBytes([parts.ciphertext, parts.tag]) : parts.ciphertext;
+					return encodeParts(bytes, options === null || options === void 0 ? void 0 : options.encoding);
+				}
+			},
+			{
+				key: "combined",
+				value: async function combined(encoding) {
+					var parts = sealedParts.get(this);
+					return encodeParts(concatBytes([
+						parts.iv,
+						parts.ciphertext,
+						parts.tag
+					]), encoding);
+				}
+			}
+		], [
+			{
+				key: "fromCombined",
+				value: function fromCombined(combined) {
+					var config = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
+					var _config_ivLength, _config_tagLength;
+					var verb = "Crypto.AESSealedData.fromCombined";
+					var ivLength = (_config_ivLength = config.ivLength) !== null && _config_ivLength !== void 0 ? _config_ivLength : DEFAULT_IV_LENGTH;
+					var tagLength = (_config_tagLength = config.tagLength) !== null && _config_tagLength !== void 0 ? _config_tagLength : DEFAULT_TAG_LENGTH;
+					assertTagLength(tagLength, verb);
+					if (!Number.isInteger(ivLength) || ivLength <= 0) {
+						throw new Error(`${verb}: ivLength must be a positive integer`);
+					}
+					var bytes = toBytes(combined, verb);
+					if (bytes.length < ivLength + tagLength) {
+						throw new Error(`${verb}: combined data is shorter than its iv and tag`);
+					}
+					return new AESSealedData2({
+						iv: exactBytes(bytes.subarray(0, ivLength)),
+						ciphertext: exactBytes(bytes.subarray(ivLength, bytes.length - tagLength)),
+						tag: exactBytes(bytes.subarray(bytes.length - tagLength))
+					});
+				}
+			},
+			{
+				key: "fromParts",
+				value: function fromParts(ivInput, ciphertextInput, tagOrLength) {
+					var verb = "Crypto.AESSealedData.fromParts";
+					var iv = toBytes(ivInput, verb);
+					var ciphertext = toBytes(ciphertextInput, verb);
+					if (tagOrLength === void 0 || typeof tagOrLength === "number") {
+						var tagLength = tagOrLength !== null && tagOrLength !== void 0 ? tagOrLength : DEFAULT_TAG_LENGTH;
+						assertTagLength(tagLength, verb);
+						if (ciphertext.length < tagLength) {
+							throw new Error(`${verb}: ciphertext is shorter than its tag`);
+						}
+						return new AESSealedData2({
+							iv,
+							ciphertext: exactBytes(ciphertext.subarray(0, ciphertext.length - tagLength)),
+							tag: exactBytes(ciphertext.subarray(ciphertext.length - tagLength))
+						});
+					}
+					var tag = toBytes(tagOrLength, verb);
+					assertTagLength(tag.length, verb);
+					return new AESSealedData2({
+						iv,
+						ciphertext,
+						tag
+					});
+				}
+			},
+			{
+				key: "fromSeal",
+				value: (function fromSeal(iv, ciphertextWithTag, tagLength) {
+					return new AESSealedData2({
+						iv,
+						ciphertext: exactBytes(ciphertextWithTag.subarray(0, ciphertextWithTag.length - tagLength)),
+						tag: exactBytes(ciphertextWithTag.subarray(ciphertextWithTag.length - tagLength))
+					});
+				})
+			}
+		]);
+		return AESSealedData2;
+	})();
+	async function keyMaterial(key, verb) {
+		var own = keyBytes.get(key);
+		if (own) return exactBytes(own);
+		if (key && typeof key.bytes === "function") return exactBytes(await key.bytes());
+		throw new TypeError(`${verb}: expected an AESEncryptionKey`);
+	}
+	async function partsOf(sealed, verb) {
+		var own = sealedParts.get(sealed);
+		if (own) {
+			return {
+				iv: exactBytes(own.iv),
+				ciphertext: exactBytes(own.ciphertext),
+				tag: exactBytes(own.tag)
+			};
+		}
+		if (sealed && typeof sealed.iv === "function" && typeof sealed.combined === "function") {
+			var iv = exactBytes(await sealed.iv());
+			var tag = exactBytes(await sealed.tag());
+			var ciphertext = exactBytes(await sealed.ciphertext({
+				encoding: "bytes",
+				includeTag: false
+			}));
+			return {
+				iv,
+				ciphertext,
+				tag
+			};
+		}
+		throw new TypeError(`${verb}: expected an AESSealedData`);
+	}
+	async function aesEncrypt(plaintext, key) {
+		var options = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : {};
+		var _options_tagLength;
+		var verb = "Crypto.aesEncrypt";
+		var tagLength = (_options_tagLength = options.tagLength) !== null && _options_tagLength !== void 0 ? _options_tagLength : DEFAULT_TAG_LENGTH;
+		assertTagLength(tagLength, verb);
+		var iv;
+		var nonce = options.nonce;
+		if (nonce && "bytes" in nonce && nonce.bytes !== void 0) {
+			iv = toBytes(nonce.bytes, verb);
+			if (iv.length === 0) throw new Error(`${verb}: nonce bytes must not be empty`);
+		} else {
+			var length = nonce && "length" in nonce && nonce.length !== void 0 ? nonce.length : DEFAULT_IV_LENGTH;
+			if (!Number.isInteger(length) || length <= 0) {
+				throw new Error(`${verb}: nonce length must be a positive integer`);
+			}
+			iv = new Uint8Array(length);
+			engine.random(iv);
+		}
+		var additionalData = options.additionalData === void 0 ? void 0 : toBytes(options.additionalData, verb);
+		var plainBytes = toBytes(plaintext, verb);
+		var sealed = await engine.seal(await keyMaterial(key, verb), iv, plainBytes, additionalData, tagLength);
+		var actualTag = sealed.length - plainBytes.length;
+		return AESSealedData.fromSeal(iv, sealed, actualTag > 0 ? actualTag : tagLength);
+	}
+	async function aesDecrypt(sealedData, key) {
+		var options = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : {};
+		var verb = "Crypto.aesDecrypt";
+		var parts = await partsOf(sealedData, verb);
+		var additionalData = options.additionalData === void 0 ? void 0 : toBytes(options.additionalData, verb);
+		var plaintext = await engine.open(await keyMaterial(key, verb), parts.iv, concatBytes([parts.ciphertext, parts.tag]), additionalData, parts.tag.length);
+		return options.output === "base64" ? bytesToBase64(plaintext) : plaintext;
+	}
+	return {
+		AESEncryptionKey,
+		AESSealedData,
+		aesEncrypt,
+		aesDecrypt
+	};
+}
+
+export { assertTagLength, createAesApi, toBytes };
+//# sourceMappingURL=aes.native.js.map

package/dist/esm/platform/crypto/aes.native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes.native.js","names":[],"sources":["esm/platform/crypto/aes.native.js"],"sourcesContent":["import { base64ToBytes, bytesToBase64, bytesToHex, concatBytes, exactBytes, hexToBytes } from \"./bytes\";\nfunction _class_call_check(instance, Constructor) {\n  if (!(instance instanceof Constructor)) throw new TypeError(\"Cannot call a class as a function\");\n}\nfunction _defineProperties(target, props) {\n  for (var i = 0; i < props.length; i++) {\n    var descriptor = props[i];\n    descriptor.enumerable = descriptor.enumerable || false;\n    descriptor.configurable = true;\n    if (\"value\" in descriptor) descriptor.writable = true;\n    Object.defineProperty(target, descriptor.key, descriptor);\n  }\n}\nfunction _create_class(Constructor, protoProps, staticProps) {\n  if (protoProps) _defineProperties(Constructor.prototype, protoProps);\n  if (staticProps) _defineProperties(Constructor, staticProps);\n  return Constructor;\n}\nfunction _define_property(obj, key, value) {\n  if (key in obj) {\n    Object.defineProperty(obj, key, {\n      value,\n      enumerable: true,\n      configurable: true,\n      writable: true\n    });\n  } else obj[key] = value;\n  return obj;\n}\nvar KEY_SIZES = [\n  128,\n  192,\n  256\n];\nvar TAG_LENGTHS = [\n  16,\n  15,\n  14,\n  13,\n  12,\n  8,\n  4\n];\nvar DEFAULT_IV_LENGTH = 12;\nvar DEFAULT_TAG_LENGTH = 16;\nfunction assertTagLength(tagLength, verb) {\n  if (!TAG_LENGTHS.includes(tagLength)) {\n    throw new Error(`${verb}: tagLength must be one of: ${TAG_LENGTHS.join(\", \")}`);\n  }\n}\nfunction toBytes(input, verb) {\n  if (typeof input === \"string\") return base64ToBytes(input, verb);\n  if (input instanceof ArrayBuffer) return new Uint8Array(input.slice(0));\n  if (ArrayBuffer.isView(input) && input.buffer instanceof ArrayBuffer) {\n    return exactBytes(new Uint8Array(input.buffer, input.byteOffset, input.byteLength));\n  }\n  throw new TypeError(`${verb}: expected a base64 string, Uint8Array, or ArrayBuffer`);\n}\nvar sealedParts = /* @__PURE__ */ new WeakMap();\nvar keyBytes = /* @__PURE__ */ new WeakMap();\nfunction encodeParts(bytes, encoding) {\n  return encoding === \"base64\" ? bytesToBase64(bytes) : exactBytes(bytes);\n}\nfunction createAesApi(engine) {\n  var AESEncryptionKey = /* @__PURE__ */ (function() {\n    \"use strict\";\n    function AESEncryptionKey2(bytes) {\n      _class_call_check(this, AESEncryptionKey2);\n      _define_property(this, \"size\", void 0);\n      if (!KEY_SIZES.includes(bytes.length * 8)) {\n        throw new Error(`Crypto.AESEncryptionKey: key must be 128, 192, or 256 bits, got ${bytes.length * 8}`);\n      }\n      this.size = bytes.length * 8;\n      keyBytes.set(this, exactBytes(bytes));\n    }\n    _create_class(AESEncryptionKey2, [\n      {\n        key: \"bytes\",\n        value: async function bytes() {\n          return exactBytes(keyBytes.get(this));\n        }\n      },\n      {\n        key: \"encoded\",\n        value: async function encoded(encoding) {\n          var bytes = keyBytes.get(this);\n          if (encoding === \"hex\") return bytesToHex(bytes);\n          if (encoding === \"base64\") return bytesToBase64(bytes);\n          throw new Error(`Crypto.AESEncryptionKey.encoded: encoding must be 'hex' or 'base64'`);\n        }\n      }\n    ], [\n      {\n        key: \"generate\",\n        value: async function generate() {\n          var size = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : 256;\n          if (!KEY_SIZES.includes(size)) {\n            throw new Error(`Crypto.AESEncryptionKey.generate: size must be one of: ${KEY_SIZES.join(\", \")}`);\n          }\n          var bytes = new Uint8Array(size / 8);\n          engine.random(bytes);\n          return new AESEncryptionKey2(bytes);\n        }\n      },\n      {\n        key: \"import\",\n        value: async function _import(input, encoding) {\n          var verb = \"Crypto.AESEncryptionKey.import\";\n          var bytes;\n          if (typeof input === \"string\") {\n            if (encoding === \"hex\") bytes = hexToBytes(input, verb);\n            else if (encoding === \"base64\") bytes = base64ToBytes(input, verb);\n            else throw new Error(`${verb}: encoding must be 'hex' or 'base64'`);\n          } else if (input instanceof Uint8Array) {\n            bytes = exactBytes(input);\n          } else {\n            throw new TypeError(`${verb}: expected bytes or an encoded string`);\n          }\n          if (!KEY_SIZES.includes(bytes.length * 8)) {\n            throw new Error(`${verb}: key must be 128, 192, or 256 bits, got ${bytes.length * 8}`);\n          }\n          return new AESEncryptionKey2(bytes);\n        }\n      }\n    ]);\n    return AESEncryptionKey2;\n  })();\n  var AESSealedData = /* @__PURE__ */ (function() {\n    \"use strict\";\n    function AESSealedData2(parts) {\n      _class_call_check(this, AESSealedData2);\n      if (parts.iv.length === 0) throw new Error(\"Crypto.AESSealedData: iv must not be empty\");\n      assertTagLength(parts.tag.length, \"Crypto.AESSealedData\");\n      sealedParts.set(this, parts);\n    }\n    _create_class(AESSealedData2, [\n      {\n        key: \"ivSize\",\n        get: function get() {\n          return sealedParts.get(this).iv.length;\n        }\n      },\n      {\n        key: \"tagSize\",\n        get: function get() {\n          return sealedParts.get(this).tag.length;\n        }\n      },\n      {\n        key: \"combinedSize\",\n        get: function get() {\n          var parts = sealedParts.get(this);\n          return parts.iv.length + parts.ciphertext.length + parts.tag.length;\n        }\n      },\n      {\n        key: \"iv\",\n        value: async function iv(encoding) {\n          return encodeParts(sealedParts.get(this).iv, encoding);\n        }\n      },\n      {\n        key: \"tag\",\n        value: async function tag(encoding) {\n          return encodeParts(sealedParts.get(this).tag, encoding);\n        }\n      },\n      {\n        key: \"ciphertext\",\n        value: async function ciphertext(options) {\n          var parts = sealedParts.get(this);\n          var bytes = (options === null || options === void 0 ? void 0 : options.includeTag) ? concatBytes([\n            parts.ciphertext,\n            parts.tag\n          ]) : parts.ciphertext;\n          return encodeParts(bytes, options === null || options === void 0 ? void 0 : options.encoding);\n        }\n      },\n      {\n        key: \"combined\",\n        value: async function combined(encoding) {\n          var parts = sealedParts.get(this);\n          return encodeParts(concatBytes([\n            parts.iv,\n            parts.ciphertext,\n            parts.tag\n          ]), encoding);\n        }\n      }\n    ], [\n      {\n        key: \"fromCombined\",\n        value: function fromCombined(combined) {\n          var config = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};\n          var _config_ivLength, _config_tagLength;\n          var verb = \"Crypto.AESSealedData.fromCombined\";\n          var ivLength = (_config_ivLength = config.ivLength) !== null && _config_ivLength !== void 0 ? _config_ivLength : DEFAULT_IV_LENGTH;\n          var tagLength = (_config_tagLength = config.tagLength) !== null && _config_tagLength !== void 0 ? _config_tagLength : DEFAULT_TAG_LENGTH;\n          assertTagLength(tagLength, verb);\n          if (!Number.isInteger(ivLength) || ivLength <= 0) {\n            throw new Error(`${verb}: ivLength must be a positive integer`);\n          }\n          var bytes = toBytes(combined, verb);\n          if (bytes.length < ivLength + tagLength) {\n            throw new Error(`${verb}: combined data is shorter than its iv and tag`);\n          }\n          return new AESSealedData2({\n            iv: exactBytes(bytes.subarray(0, ivLength)),\n            ciphertext: exactBytes(bytes.subarray(ivLength, bytes.length - tagLength)),\n            tag: exactBytes(bytes.subarray(bytes.length - tagLength))\n          });\n        }\n      },\n      {\n        key: \"fromParts\",\n        value: function fromParts(ivInput, ciphertextInput, tagOrLength) {\n          var verb = \"Crypto.AESSealedData.fromParts\";\n          var iv = toBytes(ivInput, verb);\n          var ciphertext = toBytes(ciphertextInput, verb);\n          if (tagOrLength === void 0 || typeof tagOrLength === \"number\") {\n            var tagLength = tagOrLength !== null && tagOrLength !== void 0 ? tagOrLength : DEFAULT_TAG_LENGTH;\n            assertTagLength(tagLength, verb);\n            if (ciphertext.length < tagLength) {\n              throw new Error(`${verb}: ciphertext is shorter than its tag`);\n            }\n            return new AESSealedData2({\n              iv,\n              ciphertext: exactBytes(ciphertext.subarray(0, ciphertext.length - tagLength)),\n              tag: exactBytes(ciphertext.subarray(ciphertext.length - tagLength))\n            });\n          }\n          var tag = toBytes(tagOrLength, verb);\n          assertTagLength(tag.length, verb);\n          return new AESSealedData2({\n            iv,\n            ciphertext,\n            tag\n          });\n        }\n      },\n      {\n        key: \"fromSeal\",\n        value: (\n          // internal: aesEncrypt builds sealed data from engine output without\n          // going through the public parsers (which would just re-split it).\n          function fromSeal(iv, ciphertextWithTag, tagLength) {\n            return new AESSealedData2({\n              iv,\n              ciphertext: exactBytes(ciphertextWithTag.subarray(0, ciphertextWithTag.length - tagLength)),\n              tag: exactBytes(ciphertextWithTag.subarray(ciphertextWithTag.length - tagLength))\n            });\n          }\n        )\n      }\n    ]);\n    return AESSealedData2;\n  })();\n  async function keyMaterial(key, verb) {\n    var own = keyBytes.get(key);\n    if (own) return exactBytes(own);\n    if (key && typeof key.bytes === \"function\") return exactBytes(await key.bytes());\n    throw new TypeError(`${verb}: expected an AESEncryptionKey`);\n  }\n  async function partsOf(sealed, verb) {\n    var own = sealedParts.get(sealed);\n    if (own) {\n      return {\n        iv: exactBytes(own.iv),\n        ciphertext: exactBytes(own.ciphertext),\n        tag: exactBytes(own.tag)\n      };\n    }\n    if (sealed && typeof sealed.iv === \"function\" && typeof sealed.combined === \"function\") {\n      var iv = exactBytes(await sealed.iv());\n      var tag = exactBytes(await sealed.tag());\n      var ciphertext = exactBytes(await sealed.ciphertext({\n        encoding: \"bytes\",\n        includeTag: false\n      }));\n      return {\n        iv,\n        ciphertext,\n        tag\n      };\n    }\n    throw new TypeError(`${verb}: expected an AESSealedData`);\n  }\n  async function aesEncrypt(plaintext, key) {\n    var options = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : {};\n    var _options_tagLength;\n    var verb = \"Crypto.aesEncrypt\";\n    var tagLength = (_options_tagLength = options.tagLength) !== null && _options_tagLength !== void 0 ? _options_tagLength : DEFAULT_TAG_LENGTH;\n    assertTagLength(tagLength, verb);\n    var iv;\n    var nonce = options.nonce;\n    if (nonce && \"bytes\" in nonce && nonce.bytes !== void 0) {\n      iv = toBytes(nonce.bytes, verb);\n      if (iv.length === 0) throw new Error(`${verb}: nonce bytes must not be empty`);\n    } else {\n      var length = nonce && \"length\" in nonce && nonce.length !== void 0 ? nonce.length : DEFAULT_IV_LENGTH;\n      if (!Number.isInteger(length) || length <= 0) {\n        throw new Error(`${verb}: nonce length must be a positive integer`);\n      }\n      iv = new Uint8Array(length);\n      engine.random(iv);\n    }\n    var additionalData = options.additionalData === void 0 ? void 0 : toBytes(options.additionalData, verb);\n    var plainBytes = toBytes(plaintext, verb);\n    var sealed = await engine.seal(await keyMaterial(key, verb), iv, plainBytes, additionalData, tagLength);\n    var actualTag = sealed.length - plainBytes.length;\n    return AESSealedData.fromSeal(iv, sealed, actualTag > 0 ? actualTag : tagLength);\n  }\n  async function aesDecrypt(sealedData, key) {\n    var options = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : {};\n    var verb = \"Crypto.aesDecrypt\";\n    var parts = await partsOf(sealedData, verb);\n    var additionalData = options.additionalData === void 0 ? void 0 : toBytes(options.additionalData, verb);\n    var plaintext = await engine.open(await keyMaterial(key, verb), parts.iv, concatBytes([\n      parts.ciphertext,\n      parts.tag\n    ]), additionalData, parts.tag.length);\n    return options.output === \"base64\" ? bytesToBase64(plaintext) : plaintext;\n  }\n  return {\n    AESEncryptionKey,\n    AESSealedData,\n    aesEncrypt,\n    aesDecrypt\n  };\n}\nexport {\n  assertTagLength,\n  createAesApi,\n  toBytes\n};\n//# sourceMappingURL=aes.js.map\n"],"mappings":";;;AACA,SAAS,kBAAkB,UAAU,aAAa;CAChD,IAAI,EAAE,oBAAoB,cAAc,MAAM,IAAI,UAAU,mCAAmC;AACjG;AACA,SAAS,kBAAkB,QAAQ,OAAO;CACxC,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,IAAI,aAAa,MAAM;EACvB,WAAW,aAAa,WAAW,cAAc;EACjD,WAAW,eAAe;EAC1B,IAAI,WAAW,YAAY,WAAW,WAAW;EACjD,OAAO,eAAe,QAAQ,WAAW,KAAK,UAAU;CAC1D;AACF;AACA,SAAS,cAAc,aAAa,YAAY,aAAa;CAC3D,IAAI,YAAY,kBAAkB,YAAY,WAAW,UAAU;CACnE,IAAI,aAAa,kBAAkB,aAAa,WAAW;CAC3D,OAAO;AACT;AACA,SAAS,iBAAiB,KAAK,KAAK,OAAO;CACzC,IAAI,OAAO,KAAK;EACd,OAAO,eAAe,KAAK,KAAK;GAC9B;GACA,YAAY;GACZ,cAAc;GACd,UAAU;EACZ,CAAC;CACH,OAAO,IAAI,OAAO;CAClB,OAAO;AACT;AACA,IAAI,YAAY;CACd;CACA;CACA;AACF;AACA,IAAI,cAAc;CAChB;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AACA,IAAI,oBAAoB;AACxB,IAAI,qBAAqB;AACzB,SAAS,gBAAgB,WAAW,MAAM;CACxC,IAAI,CAAC,YAAY,SAAS,SAAS,GAAG;EACpC,MAAM,IAAI,MAAM,GAAG,KAAK,8BAA8B,YAAY,KAAK,IAAI,GAAG;CAChF;AACF;AACA,SAAS,QAAQ,OAAO,MAAM;CAC5B,IAAI,OAAO,UAAU,UAAU,OAAO,cAAc,OAAO,IAAI;CAC/D,IAAI,iBAAiB,aAAa,OAAO,IAAI,WAAW,MAAM,MAAM,CAAC,CAAC;CACtE,IAAI,YAAY,OAAO,KAAK,KAAK,MAAM,kBAAkB,aAAa;EACpE,OAAO,WAAW,IAAI,WAAW,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU,CAAC;CACpF;CACA,MAAM,IAAI,UAAU,GAAG,KAAK,uDAAuD;AACrF;AACA,IAAI,8BAA8B,IAAI,QAAQ;AAC9C,IAAI,2BAA2B,IAAI,QAAQ;AAC3C,SAAS,YAAY,OAAO,UAAU;CACpC,OAAO,aAAa,WAAW,cAAc,KAAK,IAAI,WAAW,KAAK;AACxE;AACA,SAAS,aAAa,QAAQ;CAC5B,IAAI,mBAAmC,iBAAC,WAAW;EACjD;EACA,SAAS,kBAAkB,OAAO;GAChC,kBAAkB,MAAM,iBAAiB;GACzC,iBAAiB,MAAM,QAAQ,KAAK,CAAC;GACrC,IAAI,CAAC,UAAU,SAAS,MAAM,SAAS,CAAC,GAAG;IACzC,MAAM,IAAI,MAAM,mEAAmE,MAAM,SAAS,GAAG;GACvG;GACA,KAAK,OAAO,MAAM,SAAS;GAC3B,SAAS,IAAI,MAAM,WAAW,KAAK,CAAC;EACtC;EACA,cAAc,mBAAmB,CAC/B;GACE,KAAK;GACL,OAAO,eAAe,QAAQ;IAC5B,OAAO,WAAW,SAAS,IAAI,IAAI,CAAC;GACtC;EACF,GACA;GACE,KAAK;GACL,OAAO,eAAe,QAAQ,UAAU;IACtC,IAAI,QAAQ,SAAS,IAAI,IAAI;IAC7B,IAAI,aAAa,OAAO,OAAO,WAAW,KAAK;IAC/C,IAAI,aAAa,UAAU,OAAO,cAAc,KAAK;IACrD,MAAM,IAAI,MAAM,qEAAqE;GACvF;EACF,CACF,GAAG,CACD;GACE,KAAK;GACL,OAAO,eAAe,WAAW;IAC/B,IAAI,OAAO,UAAU,SAAS,KAAK,UAAU,OAAO,KAAK,IAAI,UAAU,KAAK;IAC5E,IAAI,CAAC,UAAU,SAAS,IAAI,GAAG;KAC7B,MAAM,IAAI,MAAM,0DAA0D,UAAU,KAAK,IAAI,GAAG;IAClG;IACA,IAAI,QAAQ,IAAI,WAAW,OAAO,CAAC;IACnC,OAAO,OAAO,KAAK;IACnB,OAAO,IAAI,kBAAkB,KAAK;GACpC;EACF,GACA;GACE,KAAK;GACL,OAAO,eAAe,QAAQ,OAAO,UAAU;IAC7C,IAAI,OAAO;IACX,IAAI;IACJ,IAAI,OAAO,UAAU,UAAU;KAC7B,IAAI,aAAa,OAAO,QAAQ,WAAW,OAAO,IAAI;UACjD,IAAI,aAAa,UAAU,QAAQ,cAAc,OAAO,IAAI;UAC5D,MAAM,IAAI,MAAM,GAAG,KAAK,qCAAqC;IACpE,OAAO,IAAI,iBAAiB,YAAY;KACtC,QAAQ,WAAW,KAAK;IAC1B,OAAO;KACL,MAAM,IAAI,UAAU,GAAG,KAAK,sCAAsC;IACpE;IACA,IAAI,CAAC,UAAU,SAAS,MAAM,SAAS,CAAC,GAAG;KACzC,MAAM,IAAI,MAAM,GAAG,KAAK,2CAA2C,MAAM,SAAS,GAAG;IACvF;IACA,OAAO,IAAI,kBAAkB,KAAK;GACpC;EACF,CACF,CAAC;EACD,OAAO;CACT,EAAC,CAAE;CACH,IAAI,gBAAgC,iBAAC,WAAW;EAC9C;EACA,SAAS,eAAe,OAAO;GAC7B,kBAAkB,MAAM,cAAc;GACtC,IAAI,MAAM,GAAG,WAAW,GAAG,MAAM,IAAI,MAAM,4CAA4C;GACvF,gBAAgB,MAAM,IAAI,QAAQ,sBAAsB;GACxD,YAAY,IAAI,MAAM,KAAK;EAC7B;EACA,cAAc,gBAAgB;GAC5B;IACE,KAAK;IACL,KAAK,SAAS,MAAM;KAClB,OAAO,YAAY,IAAI,IAAI,CAAC,CAAC,GAAG;IAClC;GACF;GACA;IACE,KAAK;IACL,KAAK,SAAS,MAAM;KAClB,OAAO,YAAY,IAAI,IAAI,CAAC,CAAC,IAAI;IACnC;GACF;GACA;IACE,KAAK;IACL,KAAK,SAAS,MAAM;KAClB,IAAI,QAAQ,YAAY,IAAI,IAAI;KAChC,OAAO,MAAM,GAAG,SAAS,MAAM,WAAW,SAAS,MAAM,IAAI;IAC/D;GACF;GACA;IACE,KAAK;IACL,OAAO,eAAe,GAAG,UAAU;KACjC,OAAO,YAAY,YAAY,IAAI,IAAI,CAAC,CAAC,IAAI,QAAQ;IACvD;GACF;GACA;IACE,KAAK;IACL,OAAO,eAAe,IAAI,UAAU;KAClC,OAAO,YAAY,YAAY,IAAI,IAAI,CAAC,CAAC,KAAK,QAAQ;IACxD;GACF;GACA;IACE,KAAK;IACL,OAAO,eAAe,WAAW,SAAS;KACxC,IAAI,QAAQ,YAAY,IAAI,IAAI;KAChC,IAAI,SAAS,YAAY,QAAQ,YAAY,KAAK,IAAI,KAAK,IAAI,QAAQ,cAAc,YAAY,CAC/F,MAAM,YACN,MAAM,GACR,CAAC,IAAI,MAAM;KACX,OAAO,YAAY,OAAO,YAAY,QAAQ,YAAY,KAAK,IAAI,KAAK,IAAI,QAAQ,QAAQ;IAC9F;GACF;GACA;IACE,KAAK;IACL,OAAO,eAAe,SAAS,UAAU;KACvC,IAAI,QAAQ,YAAY,IAAI,IAAI;KAChC,OAAO,YAAY,YAAY;MAC7B,MAAM;MACN,MAAM;MACN,MAAM;KACR,CAAC,GAAG,QAAQ;IACd;GACF;EACF,GAAG;GACD;IACE,KAAK;IACL,OAAO,SAAS,aAAa,UAAU;KACrC,IAAI,SAAS,UAAU,SAAS,KAAK,UAAU,OAAO,KAAK,IAAI,UAAU,KAAK,CAAC;KAC/E,IAAI,kBAAkB;KACtB,IAAI,OAAO;KACX,IAAI,YAAY,mBAAmB,OAAO,cAAc,QAAQ,qBAAqB,KAAK,IAAI,mBAAmB;KACjH,IAAI,aAAa,oBAAoB,OAAO,eAAe,QAAQ,sBAAsB,KAAK,IAAI,oBAAoB;KACtH,gBAAgB,WAAW,IAAI;KAC/B,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,YAAY,GAAG;MAChD,MAAM,IAAI,MAAM,GAAG,KAAK,sCAAsC;KAChE;KACA,IAAI,QAAQ,QAAQ,UAAU,IAAI;KAClC,IAAI,MAAM,SAAS,WAAW,WAAW;MACvC,MAAM,IAAI,MAAM,GAAG,KAAK,+CAA+C;KACzE;KACA,OAAO,IAAI,eAAe;MACxB,IAAI,WAAW,MAAM,SAAS,GAAG,QAAQ,CAAC;MAC1C,YAAY,WAAW,MAAM,SAAS,UAAU,MAAM,SAAS,SAAS,CAAC;MACzE,KAAK,WAAW,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC;KAC1D,CAAC;IACH;GACF;GACA;IACE,KAAK;IACL,OAAO,SAAS,UAAU,SAAS,iBAAiB,aAAa;KAC/D,IAAI,OAAO;KACX,IAAI,KAAK,QAAQ,SAAS,IAAI;KAC9B,IAAI,aAAa,QAAQ,iBAAiB,IAAI;KAC9C,IAAI,gBAAgB,KAAK,KAAK,OAAO,gBAAgB,UAAU;MAC7D,IAAI,YAAY,gBAAgB,QAAQ,gBAAgB,KAAK,IAAI,cAAc;MAC/E,gBAAgB,WAAW,IAAI;MAC/B,IAAI,WAAW,SAAS,WAAW;OACjC,MAAM,IAAI,MAAM,GAAG,KAAK,qCAAqC;MAC/D;MACA,OAAO,IAAI,eAAe;OACxB;OACA,YAAY,WAAW,WAAW,SAAS,GAAG,WAAW,SAAS,SAAS,CAAC;OAC5E,KAAK,WAAW,WAAW,SAAS,WAAW,SAAS,SAAS,CAAC;MACpE,CAAC;KACH;KACA,IAAI,MAAM,QAAQ,aAAa,IAAI;KACnC,gBAAgB,IAAI,QAAQ,IAAI;KAChC,OAAO,IAAI,eAAe;MACxB;MACA;MACA;KACF,CAAC;IACH;GACF;GACA;IACE,KAAK;IACL,QAGE,SAAS,SAAS,IAAI,mBAAmB,WAAW;KAClD,OAAO,IAAI,eAAe;MACxB;MACA,YAAY,WAAW,kBAAkB,SAAS,GAAG,kBAAkB,SAAS,SAAS,CAAC;MAC1F,KAAK,WAAW,kBAAkB,SAAS,kBAAkB,SAAS,SAAS,CAAC;KAClF,CAAC;IACH;GAEJ;EACF,CAAC;EACD,OAAO;CACT,EAAC,CAAE;CACH,eAAe,YAAY,KAAK,MAAM;EACpC,IAAI,MAAM,SAAS,IAAI,GAAG;EAC1B,IAAI,KAAK,OAAO,WAAW,GAAG;EAC9B,IAAI,OAAO,OAAO,IAAI,UAAU,YAAY,OAAO,WAAW,MAAM,IAAI,MAAM,CAAC;EAC/E,MAAM,IAAI,UAAU,GAAG,KAAK,+BAA+B;CAC7D;CACA,eAAe,QAAQ,QAAQ,MAAM;EACnC,IAAI,MAAM,YAAY,IAAI,MAAM;EAChC,IAAI,KAAK;GACP,OAAO;IACL,IAAI,WAAW,IAAI,EAAE;IACrB,YAAY,WAAW,IAAI,UAAU;IACrC,KAAK,WAAW,IAAI,GAAG;GACzB;EACF;EACA,IAAI,UAAU,OAAO,OAAO,OAAO,cAAc,OAAO,OAAO,aAAa,YAAY;GACtF,IAAI,KAAK,WAAW,MAAM,OAAO,GAAG,CAAC;GACrC,IAAI,MAAM,WAAW,MAAM,OAAO,IAAI,CAAC;GACvC,IAAI,aAAa,WAAW,MAAM,OAAO,WAAW;IAClD,UAAU;IACV,YAAY;GACd,CAAC,CAAC;GACF,OAAO;IACL;IACA;IACA;GACF;EACF;EACA,MAAM,IAAI,UAAU,GAAG,KAAK,4BAA4B;CAC1D;CACA,eAAe,WAAW,WAAW,KAAK;EACxC,IAAI,UAAU,UAAU,SAAS,KAAK,UAAU,OAAO,KAAK,IAAI,UAAU,KAAK,CAAC;EAChF,IAAI;EACJ,IAAI,OAAO;EACX,IAAI,aAAa,qBAAqB,QAAQ,eAAe,QAAQ,uBAAuB,KAAK,IAAI,qBAAqB;EAC1H,gBAAgB,WAAW,IAAI;EAC/B,IAAI;EACJ,IAAI,QAAQ,QAAQ;EACpB,IAAI,SAAS,WAAW,SAAS,MAAM,UAAU,KAAK,GAAG;GACvD,KAAK,QAAQ,MAAM,OAAO,IAAI;GAC9B,IAAI,GAAG,WAAW,GAAG,MAAM,IAAI,MAAM,GAAG,KAAK,gCAAgC;EAC/E,OAAO;GACL,IAAI,SAAS,SAAS,YAAY,SAAS,MAAM,WAAW,KAAK,IAAI,MAAM,SAAS;GACpF,IAAI,CAAC,OAAO,UAAU,MAAM,KAAK,UAAU,GAAG;IAC5C,MAAM,IAAI,MAAM,GAAG,KAAK,0CAA0C;GACpE;GACA,KAAK,IAAI,WAAW,MAAM;GAC1B,OAAO,OAAO,EAAE;EAClB;EACA,IAAI,iBAAiB,QAAQ,mBAAmB,KAAK,IAAI,KAAK,IAAI,QAAQ,QAAQ,gBAAgB,IAAI;EACtG,IAAI,aAAa,QAAQ,WAAW,IAAI;EACxC,IAAI,SAAS,MAAM,OAAO,KAAK,MAAM,YAAY,KAAK,IAAI,GAAG,IAAI,YAAY,gBAAgB,SAAS;EACtG,IAAI,YAAY,OAAO,SAAS,WAAW;EAC3C,OAAO,cAAc,SAAS,IAAI,QAAQ,YAAY,IAAI,YAAY,SAAS;CACjF;CACA,eAAe,WAAW,YAAY,KAAK;EACzC,IAAI,UAAU,UAAU,SAAS,KAAK,UAAU,OAAO,KAAK,IAAI,UAAU,KAAK,CAAC;EAChF,IAAI,OAAO;EACX,IAAI,QAAQ,MAAM,QAAQ,YAAY,IAAI;EAC1C,IAAI,iBAAiB,QAAQ,mBAAmB,KAAK,IAAI,KAAK,IAAI,QAAQ,QAAQ,gBAAgB,IAAI;EACtG,IAAI,YAAY,MAAM,OAAO,KAAK,MAAM,YAAY,KAAK,IAAI,GAAG,MAAM,IAAI,YAAY,CACpF,MAAM,YACN,MAAM,GACR,CAAC,GAAG,gBAAgB,MAAM,IAAI,MAAM;EACpC,OAAO,QAAQ,WAAW,WAAW,cAAc,SAAS,IAAI;CAClE;CACA,OAAO;EACL;EACA;EACA;EACA;CACF;AACF"}