npm - salty-crypto - Versions diffs - 0.0.2 → 0.0.4 - Mend

salty-crypto 0.0.2 → 0.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (18) hide show

package/README.md +9 -0
package/browser-demo.html +36 -0
package/dist/salty-crypto.d.ts +328 -0
package/dist/salty-crypto.js +1 -1
package/package.json +10 -7
package/rollup.config.js +18 -8
package/src/aead.ts +48 -13
package/src/patterns.ts +38 -15
package/src/profiles.ts +3 -9
package/test/harness.ts +10 -9
package/test/tests/aead.test.ts +9 -6
package/test/tests/blake2.test.ts +2 -1
package/test/tests/chacha20.test.ts +1 -1
package/test/tests/noise.test.ts +13 -4
package/test/tests/poly1305.test.ts +3 -1
package/test/tsconfig.json +18 -0
package/tsconfig.json +5 -5
package/watchall +22 -0

package/README.md CHANGED Viewed

@@ -6,9 +6,18 @@ crypto code (partly from [tweetnacl.js](https://github.com/dchest/tweetnacl-js),
 wrote [myself](https://leastfixedpoint.com/) from the RFCs) to get
 `Noise_*_25519_ChaChaPoly_BLAKE2s` working.
+## Status
 Includes (and passes) test vectors from [noise-c](https://github.com/rweather/noise-c/) and
 [snow](https://github.com/mcginty/snow/).
+## Potential next steps
+ - support AESGCM, SHA256, SHA512, perhaps via `Crypto.subtle`?
+ - support BLAKE2b, by implementing from the RFC just like BLAKE2s
+ - `fallback` pattern modifier
+ - deferred patterns
 ## Code overview
  - `src` directory:

package/browser-demo.html ADDED Viewed

@@ -0,0 +1,36 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <script src="https://tonyg.github.io/typescript-salty-crypto/dist/salty-crypto.js"></script>
+    <style>html { font-family: sans; } body { max-width: 40em; margin: 0 auto; }</style>
+  </head>
+  <body>
+    <h1>In-browser SaltyCrypto hello-world</h1>
+    <p>
+      This is a small "hello-world" program to show that the SaltyCrypto module loads and runs
+      in a browser.
+    </p>
+    <p>
+      The <code>BLAKE2s</code> hash of the empty input is
+      <code id="expected-answer">69217a3079908094e11121d042354a7c1f55b6482ca1a51e1b250dfd1ed0eef9</code>
+    </p>
+    <p>
+      The SaltyCrypto module computes it as: <code id="computed-answer"><i>Huh, no answer from the code! Broken somehow I guess?</i></code>
+    </p>
+    <script>
+      function toHex(bs) {
+        let s = '';
+        bs.forEach(b => {
+          s = s + '0123456789abcdef'[b >> 4];
+          s = s + '0123456789abcdef'[b & 15];
+        });
+        return s;
+      }
+      document.getElementById('computed-answer').innerText = toHex(SaltyCrypto.BLAKE2.BLAKE2s.digest(new Uint8Array()));
+    </script>
+    <p>
+      You can play with the module via the <code>SaltyCrypto</code> global variable in the
+      JavaScript console.
+    </p>
+  </body>
+</html>

package/dist/salty-crypto.d.ts ADDED Viewed

@@ -0,0 +1,328 @@
+declare const AEAD_CHACHA20_POLY1305_KEYBYTES = 32;
+declare const AEAD_CHACHA20_POLY1305_NONCEBYTES = 12;
+declare const AEAD_CHACHA20_POLY1305_TAGBYTES = 16;
+declare function aead_encrypt_detached(plaintext: Uint8Array, ciphertext: Uint8Array, messagelength: number, tag: Uint8Array, key: DataView, nonce: DataView, associated_data?: Uint8Array): void;
+declare function aead_encrypt(plaintext: Uint8Array, key: DataView, nonce: DataView, associated_data?: Uint8Array): Uint8Array;
+declare function aead_decrypt_detached(plaintext: Uint8Array, ciphertext: Uint8Array, messagelength: number, expected_tag: Uint8Array, key: DataView, nonce: DataView, associated_data?: Uint8Array): boolean;
+declare class AuthenticationFailure extends Error {
+}
+declare function aead_decrypt(ciphertextAndTag: Uint8Array, key: DataView, nonce: DataView, associated_data?: Uint8Array): Uint8Array;
+declare const aead_d_AEAD_CHACHA20_POLY1305_KEYBYTES: typeof AEAD_CHACHA20_POLY1305_KEYBYTES;
+declare const aead_d_AEAD_CHACHA20_POLY1305_NONCEBYTES: typeof AEAD_CHACHA20_POLY1305_NONCEBYTES;
+declare const aead_d_AEAD_CHACHA20_POLY1305_TAGBYTES: typeof AEAD_CHACHA20_POLY1305_TAGBYTES;
+type aead_d_AuthenticationFailure = AuthenticationFailure;
+declare const aead_d_AuthenticationFailure: typeof AuthenticationFailure;
+declare const aead_d_aead_decrypt: typeof aead_decrypt;
+declare const aead_d_aead_decrypt_detached: typeof aead_decrypt_detached;
+declare const aead_d_aead_encrypt: typeof aead_encrypt;
+declare const aead_d_aead_encrypt_detached: typeof aead_encrypt_detached;
+declare namespace aead_d {
+  export {
+    aead_d_AEAD_CHACHA20_POLY1305_KEYBYTES as AEAD_CHACHA20_POLY1305_KEYBYTES,
+    aead_d_AEAD_CHACHA20_POLY1305_NONCEBYTES as AEAD_CHACHA20_POLY1305_NONCEBYTES,
+    aead_d_AEAD_CHACHA20_POLY1305_TAGBYTES as AEAD_CHACHA20_POLY1305_TAGBYTES,
+    aead_d_AuthenticationFailure as AuthenticationFailure,
+    aead_d_aead_decrypt as aead_decrypt,
+    aead_d_aead_decrypt_detached as aead_decrypt_detached,
+    aead_d_aead_encrypt as aead_encrypt,
+    aead_d_aead_encrypt_detached as aead_encrypt_detached,
+  };
+}
+declare class BLAKE2s {
+    outlen: number;
+    static readonly KEYBYTES = 32;
+    static readonly OUTBYTES = 32;
+    static readonly BLOCKLEN = 64;
+    b: Uint8Array;
+    bv: DataView;
+    h: Uint32Array;
+    t: Uint32Array;
+    c: number;
+    static digest(input: Uint8Array, outlen?: number, key?: Uint8Array): Uint8Array;
+    constructor(outlen?: number, key?: Uint8Array);
+    update(input: Uint8Array): void;
+    final(output?: Uint8Array): Uint8Array;
+    compress(last: boolean): void;
+}
+type blake2_d_BLAKE2s = BLAKE2s;
+declare const blake2_d_BLAKE2s: typeof BLAKE2s;
+declare namespace blake2_d {
+  export {
+    blake2_d_BLAKE2s as BLAKE2s,
+  };
+}
+declare const CHACHA20_KEYBYTES = 32;
+declare const CHACHA20_NONCEBYTES = 12;
+declare const CHACHA20_BLOCKBYTES = 64;
+declare function chacha20_quarter_round(s: Uint32Array, a: number, b: number, c: number, d: number): void;
+declare function chacha20_block(key: DataView, block: number, nonce: DataView): Uint32Array;
+declare function chacha20(key: DataView, nonce: DataView, input: Uint8Array, output: Uint8Array, initial_counter?: number, messagelength?: number): void;
+declare const chacha20_d_CHACHA20_BLOCKBYTES: typeof CHACHA20_BLOCKBYTES;
+declare const chacha20_d_CHACHA20_KEYBYTES: typeof CHACHA20_KEYBYTES;
+declare const chacha20_d_CHACHA20_NONCEBYTES: typeof CHACHA20_NONCEBYTES;
+declare const chacha20_d_chacha20: typeof chacha20;
+declare const chacha20_d_chacha20_block: typeof chacha20_block;
+declare const chacha20_d_chacha20_quarter_round: typeof chacha20_quarter_round;
+declare namespace chacha20_d {
+  export {
+    chacha20_d_CHACHA20_BLOCKBYTES as CHACHA20_BLOCKBYTES,
+    chacha20_d_CHACHA20_KEYBYTES as CHACHA20_KEYBYTES,
+    chacha20_d_CHACHA20_NONCEBYTES as CHACHA20_NONCEBYTES,
+    chacha20_d_chacha20 as chacha20,
+    chacha20_d_chacha20_block as chacha20_block,
+    chacha20_d_chacha20_quarter_round as chacha20_quarter_round,
+  };
+}
+type DHKeyPair = {
+    public: Uint8Array;
+    secret: Uint8Array;
+};
+declare class Nonce {
+    lo: number;
+    hi: number;
+    constructor(lo?: number, hi?: number);
+    increment(): void;
+    reset(lo?: number, hi?: number): void;
+    static get MAX(): Nonce;
+}
+declare function bytesXor(a: Uint8Array, b: Uint8Array): Uint8Array;
+declare function bytesAppend(a: Uint8Array, b: Uint8Array): Uint8Array;
+type HMAC = (key: Uint8Array, data: Uint8Array) => Uint8Array;
+declare abstract class NoiseProtocolAlgorithms {
+    readonly dhlen: number;
+    readonly hmac: HMAC;
+    constructor(hmac?: HMAC);
+    abstract dhName(): string;
+    abstract generateKeypair(): DHKeyPair;
+    abstract dh(kp: DHKeyPair, pk: Uint8Array): Uint8Array;
+    abstract cipherName(): string;
+    abstract encrypt(key: DataView, nonce: Nonce, p: Uint8Array, associated_data?: Uint8Array): Uint8Array;
+    abstract decrypt(key: DataView, nonce: Nonce, c: Uint8Array, associated_data?: Uint8Array): Uint8Array;
+    abstract hashName(): string;
+    abstract hash(data: Uint8Array): Uint8Array;
+    abstract hashBlocklen(): number;
+    rekey(k: DataView): DataView;
+    _padOrHash(bs0: Uint8Array, len: number): Uint8Array;
+    hkdf(chainingKey: Uint8Array, input: Uint8Array, numOutputs: 2): [Uint8Array, Uint8Array];
+    hkdf(chainingKey: Uint8Array, input: Uint8Array, numOutputs: 3): [Uint8Array, Uint8Array, Uint8Array];
+    matchingPattern(protocol_name: string): string | null;
+}
+interface HandshakePattern {
+    name: string;
+    baseName: string;
+    messages: Token[][];
+    initiatorPreMessage: PreMessage;
+    responderPreMessage: PreMessage;
+}
+declare class CipherState {
+    algorithms: NoiseProtocolAlgorithms;
+    view: DataView | null;
+    nonce: Nonce;
+    constructor(algorithms: NoiseProtocolAlgorithms, key?: Uint8Array);
+    encrypt(plaintext: Uint8Array, associated_data?: Uint8Array): Uint8Array;
+    decrypt(ciphertext: Uint8Array, associated_data?: Uint8Array): Uint8Array;
+    rekey(): void;
+}
+type Role = 'initiator' | 'responder';
+type NoiseProtocolOptions = {
+    prologue?: Uint8Array;
+    staticKeypair?: DHKeyPair;
+    remoteStaticPublicKey?: Uint8Array;
+    pregeneratedEphemeralKeypair?: DHKeyPair;
+    remotePregeneratedEphemeralPublicKey?: Uint8Array;
+    preSharedKeys?: Uint8Array[];
+};
+type KeyTransferToken = 'e' | 's';
+type KeyMixToken = 'ee' | 'es' | 'se' | 'ss' | 'psk';
+type Token = KeyTransferToken | KeyMixToken;
+type PreMessage = ['e'] | ['s'] | ['e', 's'] | [];
+type TransportState = {
+    send: CipherState;
+    recv: CipherState;
+};
+declare class NoiseHandshake {
+    algorithms: NoiseProtocolAlgorithms;
+    pattern: HandshakePattern;
+    role: Role;
+    staticKeypair: DHKeyPair;
+    remoteStaticPublicKey: Uint8Array | null;
+    ephemeralKeypair: DHKeyPair;
+    remoteEphemeralPublicKey: Uint8Array | null;
+    preSharedKeys?: Uint8Array[];
+    stepIndex: number;
+    cipherState: CipherState;
+    chainingKey: Uint8Array;
+    handshakeHash: Uint8Array;
+    constructor(algorithms: NoiseProtocolAlgorithms, pattern: HandshakePattern, role: Role, options?: NoiseProtocolOptions);
+    get isInitiator(): boolean;
+    mixHash(data: Uint8Array): void;
+    mixKey(input: Uint8Array): void;
+    mixKeyAndHashNextPSK(): void;
+    encryptAndHash(p: Uint8Array): Uint8Array;
+    decryptAndHash(c: Uint8Array): Uint8Array;
+    _split(): TransportState | null;
+    _nextStep(): Token[];
+    _processKeyMixToken(t: KeyMixToken): void;
+    writeMessage(payload: Uint8Array): {
+        packet: Uint8Array;
+        finished: TransportState | null;
+    };
+    readMessage(packet: Uint8Array): {
+        message: Uint8Array;
+        finished: TransportState | null;
+    };
+    completeHandshake(writePacket: (packet: Uint8Array) => Promise<void>, readPacket: () => Promise<Uint8Array>, handleMessage?: (_m: Uint8Array) => Promise<void>, produceMessage?: () => Promise<Uint8Array>): Promise<TransportState>;
+}
+type noise_d_CipherState = CipherState;
+declare const noise_d_CipherState: typeof CipherState;
+type noise_d_DHKeyPair = DHKeyPair;
+type noise_d_HMAC = HMAC;
+type noise_d_HandshakePattern = HandshakePattern;
+type noise_d_KeyMixToken = KeyMixToken;
+type noise_d_KeyTransferToken = KeyTransferToken;
+type noise_d_NoiseHandshake = NoiseHandshake;
+declare const noise_d_NoiseHandshake: typeof NoiseHandshake;
+type noise_d_NoiseProtocolAlgorithms = NoiseProtocolAlgorithms;
+declare const noise_d_NoiseProtocolAlgorithms: typeof NoiseProtocolAlgorithms;
+type noise_d_NoiseProtocolOptions = NoiseProtocolOptions;
+type noise_d_Nonce = Nonce;
+declare const noise_d_Nonce: typeof Nonce;
+type noise_d_PreMessage = PreMessage;
+type noise_d_Role = Role;
+type noise_d_Token = Token;
+type noise_d_TransportState = TransportState;
+declare const noise_d_bytesAppend: typeof bytesAppend;
+declare const noise_d_bytesXor: typeof bytesXor;
+declare namespace noise_d {
+  export {
+    noise_d_CipherState as CipherState,
+    noise_d_DHKeyPair as DHKeyPair,
+    noise_d_HMAC as HMAC,
+    noise_d_HandshakePattern as HandshakePattern,
+    noise_d_KeyMixToken as KeyMixToken,
+    noise_d_KeyTransferToken as KeyTransferToken,
+    noise_d_NoiseHandshake as NoiseHandshake,
+    noise_d_NoiseProtocolAlgorithms as NoiseProtocolAlgorithms,
+    noise_d_NoiseProtocolOptions as NoiseProtocolOptions,
+    noise_d_Nonce as Nonce,
+    noise_d_PreMessage as PreMessage,
+    noise_d_Role as Role,
+    noise_d_Token as Token,
+    noise_d_TransportState as TransportState,
+    noise_d_bytesAppend as bytesAppend,
+    noise_d_bytesXor as bytesXor,
+  };
+}
+declare const PATTERNS: {
+    [key: string]: HandshakePattern;
+};
+declare function isOneWay(pat: HandshakePattern): boolean;
+declare function lookupPattern(name: string): HandshakePattern | null;
+declare const patterns_d_PATTERNS: typeof PATTERNS;
+declare const patterns_d_isOneWay: typeof isOneWay;
+declare const patterns_d_lookupPattern: typeof lookupPattern;
+declare namespace patterns_d {
+  export {
+    patterns_d_PATTERNS as PATTERNS,
+    patterns_d_isOneWay as isOneWay,
+    patterns_d_lookupPattern as lookupPattern,
+  };
+}
+declare class Poly1305 {
+    key: Uint8Array;
+    static readonly KEYBYTES = 32;
+    static readonly TAGBYTES = 16;
+    static readonly BLOCKBYTES = 16;
+    buffer: Uint8Array;
+    r: Uint16Array;
+    h: Uint16Array;
+    pad: Uint16Array;
+    leftover: number;
+    fin: number;
+    static digest(key: Uint8Array, input: Uint8Array): Uint8Array;
+    constructor(key: Uint8Array);
+    blocks(m: Uint8Array, mpos: number, bytes: number): void;
+    finish(mac: Uint8Array, macpos: number): void;
+    update(m: Uint8Array, mpos: number, bytes: number): void;
+}
+type poly1305_d_Poly1305 = Poly1305;
+declare const poly1305_d_Poly1305: typeof Poly1305;
+declare namespace poly1305_d {
+  export {
+    poly1305_d_Poly1305 as Poly1305,
+  };
+}
+declare class Noise_25519_ChaChaPoly_BLAKE2s extends NoiseProtocolAlgorithms {
+    constructor();
+    dhName(): string;
+    generateKeypair(): DHKeyPair;
+    dh(kp: DHKeyPair, pk: Uint8Array): Uint8Array;
+    cipherName(): string;
+    encrypt(key: DataView, nonce: Nonce, p: Uint8Array, associated_data?: Uint8Array): Uint8Array;
+    decrypt(key: DataView, nonce: Nonce, c: Uint8Array, associated_data?: Uint8Array): Uint8Array;
+    hashName(): string;
+    hash(data: Uint8Array): Uint8Array;
+    hashBlocklen(): number;
+}
+type profiles_d_Noise_25519_ChaChaPoly_BLAKE2s = Noise_25519_ChaChaPoly_BLAKE2s;
+declare const profiles_d_Noise_25519_ChaChaPoly_BLAKE2s: typeof Noise_25519_ChaChaPoly_BLAKE2s;
+declare namespace profiles_d {
+  export {
+    profiles_d_Noise_25519_ChaChaPoly_BLAKE2s as Noise_25519_ChaChaPoly_BLAKE2s,
+  };
+}
+declare const _randomBytes: (out: Uint8Array, n: number) => void;
+declare function randomBytes(n: number): Uint8Array;
+declare const random_d__randomBytes: typeof _randomBytes;
+declare const random_d_randomBytes: typeof randomBytes;
+declare namespace random_d {
+  export {
+    random_d__randomBytes as _randomBytes,
+    random_d_randomBytes as randomBytes,
+  };
+}
+declare const crypto_scalarmult_BYTES = 32;
+declare const crypto_scalarmult_SCALARBYTES = 32;
+declare function crypto_scalarmult(q: Uint8Array, n: Uint8Array, p: Uint8Array): void;
+declare function crypto_scalarmult_base(q: Uint8Array, n: Uint8Array): void;
+declare function scalarMult(n: Uint8Array, p: Uint8Array): Uint8Array;
+declare namespace scalarMult {
+    var scalarLength: number;
+    var groupElementLength: number;
+}
+declare function scalarMultBase(n: Uint8Array): Uint8Array;
+declare const x25519_d_crypto_scalarmult: typeof crypto_scalarmult;
+declare const x25519_d_crypto_scalarmult_BYTES: typeof crypto_scalarmult_BYTES;
+declare const x25519_d_crypto_scalarmult_SCALARBYTES: typeof crypto_scalarmult_SCALARBYTES;
+declare const x25519_d_crypto_scalarmult_base: typeof crypto_scalarmult_base;
+declare const x25519_d_scalarMult: typeof scalarMult;
+declare const x25519_d_scalarMultBase: typeof scalarMultBase;
+declare namespace x25519_d {
+  export {
+    x25519_d_crypto_scalarmult as crypto_scalarmult,
+    x25519_d_crypto_scalarmult_BYTES as crypto_scalarmult_BYTES,
+    x25519_d_crypto_scalarmult_SCALARBYTES as crypto_scalarmult_SCALARBYTES,
+    x25519_d_crypto_scalarmult_base as crypto_scalarmult_base,
+    x25519_d_scalarMult as scalarMult,
+    x25519_d_scalarMultBase as scalarMultBase,
+  };
+}
+export { aead_d as AEAD, blake2_d as BLAKE2, chacha20_d as ChaCha20, noise_d as Noise, profiles_d as NoiseProfiles, patterns_d as Patterns, poly1305_d as Poly1305, random_d as Random, x25519_d as X25519 };

package/dist/salty-crypto.js CHANGED Viewed

	@@ -1 +1 @@
1	- !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).SaltyCrypto={})}(this,(function(t){"use strict";function e(t,e){return t<<e\|t>>>32-e}function s(t,s,i,h,r){t[s]+=t[i],t[r]^=t[s],t[r]=e(t[r],16),t[h]+=t[r],t[i]^=t[h],t[i]=e(t[i],12),t[s]+=t[i],t[r]^=t[s],t[r]=e(t[r],8),t[h]+=t[r],t[i]^=t[h],t[i]=e(t[i],7)}function i(t,e,s,i){t[0]+=1634760805,t[1]+=857760878,t[2]+=2036477234,t[3]+=1797285236,t[4]+=e.getUint32(0,!0),t[5]+=e.getUint32(4,!0),t[6]+=e.getUint32(8,!0),t[7]+=e.getUint32(12,!0),t[8]+=e.getUint32(16,!0),t[9]+=e.getUint32(20,!0),t[10]+=e.getUint32(24,!0),t[11]+=e.getUint32(28,!0),t[12]+=s,t[13]+=i.getUint32(0,!0),t[14]+=i.getUint32(4,!0),t[15]+=i.getUint32(8,!0)}function h(t,e,h){const r=new Uint32Array(16);i(r,t,e,h);for(let t=0;t<20;t+=2)s(r,0,4,8,12),s(r,1,5,9,13),s(r,2,6,10,14),s(r,3,7,11,15),s(r,0,5,10,15),s(r,1,6,11,12),s(r,2,7,8,13),s(r,3,4,9,14);return i(r,t,e,h),r}function r(t,e,s,i,r=0,n=s.byteLength){const a=n>>6,o=63&n;for(let n=0;n<a;n++){const a=h(t,r+n,e);for(let t=0;t<64;t++)i[(n<<6)+t]=s[(n<<6)+t]^a[t>>2]>>((3&t)<<3)}if(0!==o){const n=h(t,r+a,e);for(let t=0;t<o;t++)i[(a<<6)+t]=s[(a<<6)+t]^n[t>>2]>>((3&t)<<3)}}var n=Object.freeze({__proto__:null,CHACHA20_BLOCKBYTES:64,CHACHA20_KEYBYTES:32,CHACHA20_NONCEBYTES:12,chacha20:r,chacha20_block:h,chacha20_quarter_round:s});class a{static digest(t,e){const s=new a(t);s.update(e,0,e.byteLength);const i=new Uint8Array(a.TAGBYTES);return s.finish(i,0),i}constructor(t){this.key=t,this.buffer=new Uint8Array(16),this.r=new Uint16Array(10),this.h=new Uint16Array(10),this.pad=new Uint16Array(8),this.leftover=0,this.fin=0;const e=255&t[0]\|(255&t[1])<<8;this.r[0]=8191&e;const s=255&t[2]\|(255&t[3])<<8;this.r[1]=8191&(e>>>13\|s<<3);const i=255&t[4]\|(255&t[5])<<8;this.r[2]=7939&(s>>>10\|i<<6);const h=255&t[6]\|(255&t[7])<<8;this.r[3]=8191&(i>>>7\|h<<9);const r=255&t[8]\|(255&t[9])<<8;this.r[4]=255&(h>>>4\|r<<12),this.r[5]=r>>>1&8190;const n=255&t[10]\|(255&t[11])<<8;this.r[6]=8191&(r>>>14\|n<<2);const a=255&t[12]\|(255&t[13])<<8;this.r[7]=8065&(n>>>11\|a<<5);const o=255&t[14]\|(255&t[15])<<8;this.r[8]=8191&(a>>>8\|o<<8),this.r[9]=o>>>5&127,this.pad[0]=255&t[16]\|(255&t[17])<<8,this.pad[1]=255&t[18]\|(255&t[19])<<8,this.pad[2]=255&t[20]\|(255&t[21])<<8,this.pad[3]=255&t[22]\|(255&t[23])<<8,this.pad[4]=255&t[24]\|(255&t[25])<<8,this.pad[5]=255&t[26]\|(255&t[27])<<8,this.pad[6]=255&t[28]\|(255&t[29])<<8,this.pad[7]=255&t[30]\|(255&t[31])<<8}blocks(t,e,s){const i=this.fin?0:2048;let h=this.h[0],r=this.h[1],n=this.h[2],a=this.h[3],o=this.h[4],l=this.h[5],c=this.h[6],f=this.h[7],u=this.h[8],y=this.h[9],p=this.r[0],d=this.r[1],m=this.r[2],g=this.r[3],b=this.r[4],K=this.r[5],w=this.r[6],_=this.r[7],A=this.r[8],E=this.r[9];for(;s>=16;){const U=255&t[e+0]\|(255&t[e+1])<<8;h+=8191&U;const v=255&t[e+2]\|(255&t[e+3])<<8;r+=8191&(U>>>13\|v<<3);const M=255&t[e+4]\|(255&t[e+5])<<8;n+=8191&(v>>>10\|M<<6);const S=255&t[e+6]\|(255&t[e+7])<<8;a+=8191&(M>>>7\|S<<9);const k=255&t[e+8]\|(255&t[e+9])<<8;o+=8191&(S>>>4\|k<<12),l+=k>>>1&8191;const L=255&t[e+10]\|(255&t[e+11])<<8;c+=8191&(k>>>14\|L<<2);const H=255&t[e+12]\|(255&t[e+13])<<8;f+=8191&(L>>>11\|H<<5);const N=255&t[e+14]\|(255&t[e+15])<<8;u+=8191&(H>>>8\|N<<8),y+=N>>>5\|i;let x=0,P=x;P+=hp,P+=r(5E),P+=n(5A),P+=a(5_),P+=o(5w),x=P>>>13,P&=8191,P+=l(5K),P+=c(5b),P+=f(5g),P+=u(5m),P+=y(5d),x+=P>>>13,P&=8191;let B=x;B+=hd,B+=rp,B+=n(5E),B+=a(5A),B+=o(5_),x=B>>>13,B&=8191,B+=l(5w),B+=c(5K),B+=f(5b),B+=u(5g),B+=y(5m),x+=B>>>13,B&=8191;let T=x;T+=hm,T+=rd,T+=np,T+=a(5E),T+=o(5A),x=T>>>13,T&=8191,T+=l(5_),T+=c(5w),T+=f(5K),T+=u(5b),T+=y(5g),x+=T>>>13,T&=8191;let C=x;C+=hg,C+=rm,C+=nd,C+=ap,C+=o(5E),x=C>>>13,C&=8191,C+=l(5A),C+=c(5_),C+=f(5w),C+=u(5K),C+=y(5b),x+=C>>>13,C&=8191;let O=x;O+=hb,O+=rg,O+=nm,O+=ad,O+=op,x=O>>>13,O&=8191,O+=l(5E),O+=c(5A),O+=f(5_),O+=u(5w),O+=y(5K),x+=O>>>13,O&=8191;let Y=x;Y+=hK,Y+=rb,Y+=ng,Y+=am,Y+=od,x=Y>>>13,Y&=8191,Y+=lp,Y+=c(5E),Y+=f(5A),Y+=u(5_),Y+=y(5w),x+=Y>>>13,Y&=8191;let I=x;I+=hw,I+=rK,I+=nb,I+=ag,I+=om,x=I>>>13,I&=8191,I+=ld,I+=cp,I+=f(5E),I+=u(5A),I+=y(5_),x+=I>>>13,I&=8191;let z=x;z+=h_,z+=rw,z+=nK,z+=ab,z+=og,x=z>>>13,z&=8191,z+=lm,z+=cd,z+=fp,z+=u(5E),z+=y(5A),x+=z>>>13,z&=8191;let X=x;X+=hA,X+=r_,X+=nw,X+=aK,X+=ob,x=X>>>13,X&=8191,X+=lg,X+=cm,X+=fd,X+=up,X+=y(5E),x+=X>>>13,X&=8191;let j=x;j+=hE,j+=rA,j+=n_,j+=aw,j+=oK,x=j>>>13,j&=8191,j+=lb,j+=cg,j+=fm,j+=ud,j+=yp,x+=j>>>13,j&=8191,x=(x<<2)+x\|0,x=x+P\|0,P=8191&x,x>>>=13,B+=x,h=P,r=B,n=T,a=C,o=O,l=Y,c=I,f=z,u=X,y=j,e+=16,s-=16}this.h[0]=h,this.h[1]=r,this.h[2]=n,this.h[3]=a,this.h[4]=o,this.h[5]=l,this.h[6]=c,this.h[7]=f,this.h[8]=u,this.h[9]=y}finish(t,e){if(this.leftover){let t=this.leftover;for(this.buffer[t++]=1;t<16;t++)this.buffer[t]=0;this.fin=1,this.blocks(this.buffer,0,16)}let s=this.h[1]>>>13;this.h[1]&=8191;for(let t=2;t<10;t++)this.h[t]+=s,s=this.h[t]>>>13,this.h[t]&=8191;this.h[0]+=5s,s=this.h[0]>>>13,this.h[0]&=8191,this.h[1]+=s,s=this.h[1]>>>13,this.h[1]&=8191,this.h[2]+=s;const i=new Uint16Array(10);i[0]=this.h[0]+5,s=i[0]>>>13,i[0]&=8191;for(let t=1;t<10;t++)i[t]=this.h[t]+s,s=i[t]>>>13,i[t]&=8191;i[9]-=8192;let h=(1^s)-1;for(let t=0;t<10;t++)i[t]&=h;h=~h;for(let t=0;t<10;t++)this.h[t]=this.h[t]&h\|i[t];this.h[0]=65535&(this.h[0]\|this.h[1]<<13),this.h[1]=65535&(this.h[1]>>>3\|this.h[2]<<10),this.h[2]=65535&(this.h[2]>>>6\|this.h[3]<<7),this.h[3]=65535&(this.h[3]>>>9\|this.h[4]<<4),this.h[4]=65535&(this.h[4]>>>12\|this.h[5]<<1\|this.h[6]<<14),this.h[5]=65535&(this.h[6]>>>2\|this.h[7]<<11),this.h[6]=65535&(this.h[7]>>>5\|this.h[8]<<8),this.h[7]=65535&(this.h[8]>>>8\|this.h[9]<<5);let r=this.h[0]+this.pad[0];this.h[0]=65535&r;for(let t=1;t<8;t++)r=(this.h[t]+this.pad[t]\|0)+(r>>>16)\|0,this.h[t]=65535&r;t[e+0]=this.h[0]>>>0&255,t[e+1]=this.h[0]>>>8&255,t[e+2]=this.h[1]>>>0&255,t[e+3]=this.h[1]>>>8&255,t[e+4]=this.h[2]>>>0&255,t[e+5]=this.h[2]>>>8&255,t[e+6]=this.h[3]>>>0&255,t[e+7]=this.h[3]>>>8&255,t[e+8]=this.h[4]>>>0&255,t[e+9]=this.h[4]>>>8&255,t[e+10]=this.h[5]>>>0&255,t[e+11]=this.h[5]>>>8&255,t[e+12]=this.h[6]>>>0&255,t[e+13]=this.h[6]>>>8&255,t[e+14]=this.h[7]>>>0&255,t[e+15]=this.h[7]>>>8&255}update(t,e,s){if(this.leftover){let i=16-this.leftover;i>s&&(i=s);for(let s=0;s<i;s++)this.buffer[this.leftover+s]=t[e+s];if(s-=i,e+=i,this.leftover+=i,this.leftover<16)return;this.blocks(this.buffer,0,16),this.leftover=0}if(s>=16){const i=s-s%16;this.blocks(t,e,i),e+=i,s-=i}if(s){for(let i=0;i<s;i++)this.buffer[this.leftover+i]=t[e+i];this.leftover+=s}}}a.KEYBYTES=32,a.TAGBYTES=16,a.BLOCKBYTES=16;var o=Object.freeze({__proto__:null,Poly1305:a});const l=new Uint8Array(16);function c(t,e){const s=15&e;0!==s&&t.update(l,0,16-s)}function f(t,e,s,i,h,n){const o=new Uint8Array(a.KEYBYTES);r(e,s,o,o,0);const l=new a(o);void 0!==n&&(l.update(n,0,n.byteLength),c(l,n.byteLength)),l.update(i,0,h),c(l,h);const f=new Uint8Array(16),u=new DataView(f.buffer);void 0!==n&&u.setUint32(0,n.byteLength,!0),u.setUint32(8,h,!0),l.update(f,0,f.byteLength),l.finish(t,0)}function u(t,e,s,i,h,n,a){r(h,n,t,e,1,s),f(i,h,n,e,s,a)}function y(t,e,s,i,h,n,a){const o=new Uint8Array(16);f(o,h,n,e,s,a);const l=0===function(t,e,s){let i=0;for(let h=0;h<s;h++)i\|=t[h]^e[h];return(1&i-1>>>8)-1}(o,i,o.byteLength);return l?r(h,n,e,t,1,s):t.fill(0,0,s),l}var p=Object.freeze({__proto__:null,AEAD_CHACHA20_POLY1305_KEYBYTES:32,AEAD_CHACHA20_POLY1305_NONCEBYTES:12,AEAD_CHACHA20_POLY1305_TAGBYTES:16,aead_decrypt_detached:y,aead_encrypt_detached:u});function d(t,e){return t>>>e\|t<<32-e}function m(t,e,s,i,h,r,n){t[e]=t[e]+t[s]+r,t[h]=d(t[h]^t[e],16),t[i]=t[i]+t[h],t[s]=d(t[s]^t[i],12),t[e]=t[e]+t[s]+n,t[h]=d(t[h]^t[e],8),t[i]=t[i]+t[h],t[s]=d(t[s]^t[i],7)}const g=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),b=Uint8Array.from([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0]);function K(t,e){return b[(t<<4)+e]}class w{static digest(t,e,s){const i=new w(e,s);return i.update(t),i.final()}constructor(t=w.OUTBYTES,e){var s;this.outlen=t,this.b=new Uint8Array(64),this.bv=new DataView(this.b.buffer),this.h=Uint32Array.from(g),this.t=new Uint32Array(2),this.c=0;const i=null!==(s=null==e?void 0:e.byteLength)&&void 0!==s?s:0;if(0==t\|\|t>32\|\|i>32)throw new Error("illegal BLAKE2s parameter length(s)");this.h[0]^=16842752^i<<8^t,void 0!==e&&i>0&&(this.update(e),this.c=64)}update(t){for(let e=0;e<t.byteLength;e++)64==this.c&&(this.t[0]+=this.c,this.t[0]<this.c&&this.t[1]++,this.compress(!1),this.c=0),this.b[this.c++]=t[e]}final(t){for(this.t[0]+=this.c,this.t[0]<this.c&&this.t[1]++;this.c<64;)this.b[this.c++]=0;this.compress(!0),void 0===t&&(t=new Uint8Array(this.outlen));for(let e=0;e<this.outlen;e++)t[e]=this.h[e>>2]>>8(3&e)&255;return t}compress(t){const e=new Uint32Array(16),s=new Uint32Array(16);for(let t=0;t<8;t++)e[t]=this.h[t],e[t+8]=g[t];e[12]^=this.t[0],e[13]^=this.t[1],t&&(e[14]=~e[14]);for(let t=0;t<16;t++)s[t]=this.bv.getUint32(t<<2,!0);for(let t=0;t<10;t++)m(e,0,4,8,12,s[K(t,0)],s[K(t,1)]),m(e,1,5,9,13,s[K(t,2)],s[K(t,3)]),m(e,2,6,10,14,s[K(t,4)],s[K(t,5)]),m(e,3,7,11,15,s[K(t,6)],s[K(t,7)]),m(e,0,5,10,15,s[K(t,8)],s[K(t,9)]),m(e,1,6,11,12,s[K(t,10)],s[K(t,11)]),m(e,2,7,8,13,s[K(t,12)],s[K(t,13)]),m(e,3,4,9,14,s[K(t,14)],s[K(t,15)]);for(let t=0;t<8;t++)this.h[t]^=e[t]^e[t+8]}}w.KEYBYTES=32,w.OUTBYTES=32,w.BLOCKLEN=64;var _=Object.freeze({__proto__:null,BLAKE2s:w});class A{constructor(t=0,e=0){this.lo=t,this.hi=e}increment(){const t=this.lo,e=t+1\|0;this.lo=e,e<t&&(this.hi=this.hi+1\|0)}reset(t=0,e=0){this.lo=t,this.hi=e}static get MAX(){return new A(4294967295,4294967295)}}function E(t,e){const s=Math.min(t.byteLength,e.byteLength),i=new Uint8Array(s);for(let h=0;h<s;h++)i[h]=t[h]^e[h];return i}function U(t,e){const s=new Uint8Array(t.byteLength+e.byteLength);return s.set(t,0),s.set(e,t.byteLength),s}const v=new Uint8Array(0);class M{constructor(t){const e=this.generateKeypair();this.dhlen=this.dh(e,e.public).byteLength,this.hmac=null!=t?t:function(t){const e=new Uint8Array(t.hashBlocklen());e.fill(54);const s=new Uint8Array(t.hashBlocklen());return s.fill(92),(i,h)=>{const r=t._padOrHash(i,t.hashBlocklen());return t.hash(U(E(r,s),t.hash(U(E(r,e),h))))}}(this)}rekey(t){return new DataView(this.encrypt(t,A.MAX,new Uint8Array(32)).buffer)}_padOrHash(t,e){const s=t.byteLength>e?this.hash(t):t;return U(s,new Uint8Array(e-s.byteLength))}hkdf(t,e,s){const i=this.hmac(t,e),h=this.hmac(i,Uint8Array.from([1])),r=this.hmac(i,U(h,Uint8Array.from([2])));switch(s){case 2:return[h,r];case 3:return[h,r,this.hmac(i,U(r,Uint8Array.from([3])))]}}matchingPattern(t){const e=new RegExp(`^Noise_([A-Za-z0-9+]+)_${this.dhName()}_${this.cipherName()}_${this.hashName()}$`).exec(t);return null===e?null:e[1]}}class S{constructor(t,e){this.algorithms=t,this.view=null,this.nonce=new A,void 0!==e&&(this.view=new DataView(e.buffer))}encrypt(t,e){if(null===this.view)return t;const s=this.algorithms.encrypt(this.view,this.nonce,t,e);return this.nonce.increment(),s}decrypt(t,e){if(null===this.view)return t;const s=this.algorithms.decrypt(this.view,this.nonce,t,e);return this.nonce.increment(),s}rekey(){null!==this.view&&(this.view=this.algorithms.rekey(this.view))}}var k=Object.freeze({__proto__:null,CipherState:S,NoiseHandshake:class{constructor(t,e,s,i={}){var h,r,n,a,o;this.algorithms=t,this.pattern=e,this.role=s,this.stepIndex=0,this.staticKeypair=null!==(h=i.staticKeypair)&&void 0!==h?h:this.algorithms.generateKeypair(),this.remoteStaticPublicKey=null!==(r=i.remoteStaticPublicKey)&&void 0!==r?r:null,this.ephemeralKeypair=null!==(n=i.pregeneratedEphemeralKeypair)&&void 0!==n?n:this.algorithms.generateKeypair(),this.remoteEphemeralPublicKey=null!==(a=i.remotePregeneratedEphemeralPublicKey)&&void 0!==a?a:null,this.preSharedKeys=i.preSharedKeys,this.preSharedKeys&&(this.preSharedKeys=this.preSharedKeys.slice(),0===this.preSharedKeys.length&&(this.preSharedKeys=void 0));const l=(new TextEncoder).encode("Noise_"+this.pattern.name+"_"+this.algorithms.dhName()+"_"+this.algorithms.cipherName()+"_"+this.algorithms.hashName());this.cipherState=new S(this.algorithms),this.chainingKey=this.algorithms._padOrHash(l,this.algorithms.hash(v).byteLength),this.handshakeHash=this.chainingKey,this.mixHash(null!==(o=i.prologue)&&void 0!==o?o:v),this.pattern.initiatorPreMessage.forEach((t=>this.mixHash("e"===t?this.isInitiator?this.ephemeralKeypair.public:this.remoteEphemeralPublicKey:this.isInitiator?this.staticKeypair.public:this.remoteStaticPublicKey))),this.pattern.responderPreMessage.forEach((t=>this.mixHash("e"===t?this.isInitiator?this.remoteEphemeralPublicKey:this.ephemeralKeypair.public:this.isInitiator?this.remoteStaticPublicKey:this.staticKeypair.public)))}get isInitiator(){return"initiator"===this.role}mixHash(t){this.handshakeHash=this.algorithms.hash(U(this.handshakeHash,t))}mixKey(t){const[e,s]=this.algorithms.hkdf(this.chainingKey,t,2);this.chainingKey=e,this.cipherState=new S(this.algorithms,s)}mixKeyAndHashNextPSK(){const t=this.preSharedKeys.shift(),[e,s,i]=this.algorithms.hkdf(this.chainingKey,t,3);this.chainingKey=e,this.mixHash(s),this.cipherState=new S(this.algorithms,i)}encryptAndHash(t){const e=this.cipherState.encrypt(t,this.handshakeHash);return this.mixHash(e),e}decryptAndHash(t){const e=this.cipherState.decrypt(t,this.handshakeHash);return this.mixHash(t),e}_split(){if(this.stepIndex<this.pattern.messages.length)return null;{let[t,e]=this.algorithms.hkdf(this.chainingKey,v,2).map((t=>new S(this.algorithms,t)));return this.isInitiator?{send:t,recv:e}:{send:e,recv:t}}}_nextStep(){if(this.stepIndex>=this.pattern.messages.length)throw new Error("Handshake already complete, cannot continue");return this.pattern.messages[this.stepIndex++]}_processKeyMixToken(t){switch(t){case"ee":this.mixKey(this.algorithms.dh(this.ephemeralKeypair,this.remoteEphemeralPublicKey));break;case"es":this.mixKey(this.isInitiator?this.algorithms.dh(this.ephemeralKeypair,this.remoteStaticPublicKey):this.algorithms.dh(this.staticKeypair,this.remoteEphemeralPublicKey));break;case"se":this.mixKey(this.isInitiator?this.algorithms.dh(this.staticKeypair,this.remoteEphemeralPublicKey):this.algorithms.dh(this.ephemeralKeypair,this.remoteStaticPublicKey));break;case"ss":this.mixKey(this.algorithms.dh(this.staticKeypair,this.remoteStaticPublicKey));break;case"psk":this.mixKeyAndHashNextPSK()}}writeMessage(t){const e=[];let s;if(this._nextStep().forEach((t=>{switch(t){case"e":e.push(this.ephemeralKeypair.public),this.mixHash(this.ephemeralKeypair.public),this.preSharedKeys&&this.mixKey(this.ephemeralKeypair.public);break;case"s":e.push(this.encryptAndHash(this.staticKeypair.public));break;default:this._processKeyMixToken(t)}})),e.push(this.encryptAndHash(t)),1===e.length)s=e[0];else{s=new Uint8Array(e.reduce(((t,e)=>t+e.byteLength),0));let t=0;e.forEach((e=>{s.set(e,t),t+=e.byteLength}))}return{packet:s,finished:this._split()}}readMessage(t){const e=e=>{const s=t.slice(0,e);return t=t.subarray(e),s};this._nextStep().forEach((t=>{switch(t){case"e":this.remoteEphemeralPublicKey=e(this.algorithms.dhlen),this.mixHash(this.remoteEphemeralPublicKey),this.preSharedKeys&&this.mixKey(this.remoteEphemeralPublicKey);break;case"s":this.remoteStaticPublicKey=this.decryptAndHash(e(this.algorithms.dhlen+(this.cipherState.view?16:0)));break;default:this._processKeyMixToken(t)}}));return{message:this.decryptAndHash(t),finished:this._split()}}async completeHandshake(t,e,s=(async t=>{}),i=(async()=>new Uint8Array(0))){const h=async()=>{const{packet:e,finished:s}=this.writeMessage(await i());return await t(e),s\|\|r()},r=async()=>{const{message:t,finished:i}=this.readMessage(await e());return await s(t),i\|\|h()};return this.isInitiator?h():r()}},NoiseProtocolAlgorithms:M,Nonce:A,bytesAppend:U,bytesXor:E});const L={};function H(t,e,s,i){const h={name:t,baseName:t,messages:e,initiatorPreMessage:s,responderPreMessage:i};L[h.name]=h}H("N",[["e","es"]],[],["s"]),H("K",[["e","es","ss"]],["s"],["s"]),H("X",[["e","es","s","ss"]],[],["s"]),H("NN",[["e"],["e","ee"]],[],[]),H("NK",[["e","es"],["e","ee"]],[],["s"]),H("NX",[["e"],["e","ee","s","es"]],[],[]),H("KN",[["e"],["e","ee","se"]],["s"],[]),H("KK",[["e","es","ss"],["e","ee","se"]],["s"],["s"]),H("KX",[["e"],["e","ee","se","s","es"]],["s"],[]),H("XN",[["e"],["e","ee"],["s","se"]],[],[]),H("XK",[["e","es"],["e","ee"],["s","se"]],[],["s"]),H("XX",[["e"],["e","ee","s","es"],["s","se"]],[],[]),H("IN",[["e","s"],["e","ee","se"]],[],[]),H("IK",[["e","es","s","ss"],["e","ee","se"]],[],["s"]),H("IX",[["e","s"],["e","ee","se","s","es"]],[],[]);const N=/^([NKX]\|[NKXI]1?[NKX]1?)([a-z][a-z0-9](\+[a-z][a-z0-9]))?$/,x=/^psk([0-9]+)$/;var P=Object.freeze({__proto__:null,PATTERNS:L,isOneWay:function(t){return 1===t.baseName.length},lookupPattern:function(t){var e,s,i;const h=N.exec(t);if(null===h)return null;const r=null!==(s=null===(e=h[2])\|\|void 0===e?void 0:e.split("+"))&&void 0!==s?s:[];let n=null!==(i=L[h[1]])&&void 0!==i?i:null;return n?(r.forEach((t=>n=n&&function(t,e){const s=x.exec(e);if(null===s)return null;const i=parseInt(s[1],10),h=t.messages;return Object.assign(Object.assign({},t),{messages:0===i?[["psk",...h[0]],...h.slice(1)]:[...h.slice(0,i-1),[...h[i-1],"psk"],...h.slice(i)]})}(n,t))),n&&Object.assign(Object.assign({},n),{name:t})):null}});const B=(()=>{var t="undefined"!=typeof self?self.crypto\|\|self.msCrypto:null;if(t&&t.getRandomValues){const e=65536;return(s,i)=>{for(let h=0;h<i;h+=e)t.getRandomValues(s.subarray(h,h+Math.min(i-h,e)))}}if("undefined"!=typeof require&&(t=require("crypto"))&&t.randomBytes)return(e,s)=>e.set(t.randomBytes(s));throw new Error("No usable randomness source found")})();function T(t){const e=new Uint8Array(t);return B(e,t),e}var C=Object.freeze({__proto__:null,_randomBytes:B,randomBytes:T});function O(){return new Float64Array(16)}const Y=new Uint8Array(32);Y[0]=9;const I=O();function z(t){let e=1;for(let s=0;s<16;s++){const i=t[s]+e+65535;e=Math.floor(i/65536),t[s]=i-65536e}t[0]+=e-1+37(e-1)}function X(t,e,s){const i=~(s-1);for(let s=0;s<16;s++){const h=i&(t[s]^e[s]);t[s]^=h,e[s]^=h}}function j(t,e,s){for(let i=0;i<16;i++)t[i]=e[i]+s[i]}function D(t,e,s){for(let i=0;i<16;i++)t[i]=e[i]-s[i]}function V(t,e,s){let i=0,h=0,r=0,n=0,a=0,o=0,l=0,c=0,f=0,u=0,y=0,p=0,d=0,m=0,g=0,b=0,K=0,w=0,_=0,A=0,E=0,U=0,v=0,M=0,S=0,k=0,L=0,H=0,N=0,x=0,P=0;const B=s[0],T=s[1],C=s[2],O=s[3],Y=s[4],I=s[5],z=s[6],X=s[7],j=s[8],D=s[9],V=s[10],R=s[11],$=s[12],q=s[13],G=s[14],F=s[15];let W=e[0];i+=WB,h+=WT,r+=WC,n+=WO,a+=WY,o+=WI,l+=Wz,c+=WX,f+=Wj,u+=WD,y+=WV,p+=WR,d+=W$,m+=Wq,g+=WG,b+=WF,W=e[1],h+=WB,r+=WT,n+=WC,a+=WO,o+=WY,l+=WI,c+=Wz,f+=WX,u+=Wj,y+=WD,p+=WV,d+=WR,m+=W$,g+=Wq,b+=WG,K+=WF,W=e[2],r+=WB,n+=WT,a+=WC,o+=WO,l+=WY,c+=WI,f+=Wz,u+=WX,y+=Wj,p+=WD,d+=WV,m+=WR,g+=W$,b+=Wq,K+=WG,w+=WF,W=e[3],n+=WB,a+=WT,o+=WC,l+=WO,c+=WY,f+=WI,u+=Wz,y+=WX,p+=Wj,d+=WD,m+=WV,g+=WR,b+=W$,K+=Wq,w+=WG,_+=WF,W=e[4],a+=WB,o+=WT,l+=WC,c+=WO,f+=WY,u+=WI,y+=Wz,p+=WX,d+=Wj,m+=WD,g+=WV,b+=WR,K+=W$,w+=Wq,_+=WG,A+=WF,W=e[5],o+=WB,l+=WT,c+=WC,f+=WO,u+=WY,y+=WI,p+=Wz,d+=WX,m+=Wj,g+=WD,b+=WV,K+=WR,w+=W$,_+=Wq,A+=WG,E+=WF,W=e[6],l+=WB,c+=WT,f+=WC,u+=WO,y+=WY,p+=WI,d+=Wz,m+=WX,g+=Wj,b+=WD,K+=WV,w+=WR,_+=W$,A+=Wq,E+=WG,U+=WF,W=e[7],c+=WB,f+=WT,u+=WC,y+=WO,p+=WY,d+=WI,m+=Wz,g+=WX,b+=Wj,K+=WD,w+=WV,_+=WR,A+=W$,E+=Wq,U+=WG,v+=WF,W=e[8],f+=WB,u+=WT,y+=WC,p+=WO,d+=WY,m+=WI,g+=Wz,b+=WX,K+=Wj,w+=WD,_+=WV,A+=WR,E+=W$,U+=Wq,v+=WG,M+=WF,W=e[9],u+=WB,y+=WT,p+=WC,d+=WO,m+=WY,g+=WI,b+=Wz,K+=WX,w+=Wj,_+=WD,A+=WV,E+=WR,U+=W$,v+=Wq,M+=WG,S+=WF,W=e[10],y+=WB,p+=WT,d+=WC,m+=WO,g+=WY,b+=WI,K+=Wz,w+=WX,_+=Wj,A+=WD,E+=WV,U+=WR,v+=W$,M+=Wq,S+=WG,k+=WF,W=e[11],p+=WB,d+=WT,m+=WC,g+=WO,b+=WY,K+=WI,w+=Wz,_+=WX,A+=Wj,E+=WD,U+=WV,v+=WR,M+=W$,S+=Wq,k+=WG,L+=WF,W=e[12],d+=WB,m+=WT,g+=WC,b+=WO,K+=WY,w+=WI,_+=Wz,A+=WX,E+=Wj,U+=WD,v+=WV,M+=WR,S+=W$,k+=Wq,L+=WG,H+=WF,W=e[13],m+=WB,g+=WT,b+=WC,K+=WO,w+=WY,_+=WI,A+=Wz,E+=WX,U+=Wj,v+=WD,M+=WV,S+=WR,k+=W$,L+=Wq,H+=WG,N+=WF,W=e[14],g+=WB,b+=WT,K+=WC,w+=WO,_+=WY,A+=WI,E+=Wz,U+=WX,v+=Wj,M+=WD,S+=WV,k+=WR,L+=W$,H+=Wq,N+=WG,x+=WF,W=e[15],b+=WB,K+=WT,w+=WC,_+=WO,A+=WY,E+=WI,U+=Wz,v+=WX,M+=Wj,S+=WD,k+=WV,L+=WR,H+=W$,N+=Wq,x+=WG,P+=WF,i+=38K,h+=38w,r+=38_,n+=38A,a+=38E,o+=38U,l+=38v,c+=38M,f+=38S,u+=38k,y+=38L,p+=38H,d+=38N,m+=38x,g+=38P;let Z=1;W=i+Z+65535,Z=Math.floor(W/65536),i=W-65536Z,W=h+Z+65535,Z=Math.floor(W/65536),h=W-65536Z,W=r+Z+65535,Z=Math.floor(W/65536),r=W-65536Z,W=n+Z+65535,Z=Math.floor(W/65536),n=W-65536Z,W=a+Z+65535,Z=Math.floor(W/65536),a=W-65536Z,W=o+Z+65535,Z=Math.floor(W/65536),o=W-65536Z,W=l+Z+65535,Z=Math.floor(W/65536),l=W-65536Z,W=c+Z+65535,Z=Math.floor(W/65536),c=W-65536Z,W=f+Z+65535,Z=Math.floor(W/65536),f=W-65536Z,W=u+Z+65535,Z=Math.floor(W/65536),u=W-65536Z,W=y+Z+65535,Z=Math.floor(W/65536),y=W-65536Z,W=p+Z+65535,Z=Math.floor(W/65536),p=W-65536Z,W=d+Z+65535,Z=Math.floor(W/65536),d=W-65536Z,W=m+Z+65535,Z=Math.floor(W/65536),m=W-65536Z,W=g+Z+65535,Z=Math.floor(W/65536),g=W-65536Z,W=b+Z+65535,Z=Math.floor(W/65536),b=W-65536Z,i+=Z-1+37(Z-1),Z=1,W=i+Z+65535,Z=Math.floor(W/65536),i=W-65536Z,W=h+Z+65535,Z=Math.floor(W/65536),h=W-65536Z,W=r+Z+65535,Z=Math.floor(W/65536),r=W-65536Z,W=n+Z+65535,Z=Math.floor(W/65536),n=W-65536Z,W=a+Z+65535,Z=Math.floor(W/65536),a=W-65536Z,W=o+Z+65535,Z=Math.floor(W/65536),o=W-65536Z,W=l+Z+65535,Z=Math.floor(W/65536),l=W-65536Z,W=c+Z+65535,Z=Math.floor(W/65536),c=W-65536Z,W=f+Z+65535,Z=Math.floor(W/65536),f=W-65536Z,W=u+Z+65535,Z=Math.floor(W/65536),u=W-65536Z,W=y+Z+65535,Z=Math.floor(W/65536),y=W-65536Z,W=p+Z+65535,Z=Math.floor(W/65536),p=W-65536Z,W=d+Z+65535,Z=Math.floor(W/65536),d=W-65536Z,W=m+Z+65535,Z=Math.floor(W/65536),m=W-65536Z,W=g+Z+65535,Z=Math.floor(W/65536),g=W-65536Z,W=b+Z+65535,Z=Math.floor(W/65536),b=W-65536Z,i+=Z-1+37(Z-1),t[0]=i,t[1]=h,t[2]=r,t[3]=n,t[4]=a,t[5]=o,t[6]=l,t[7]=c,t[8]=f,t[9]=u,t[10]=y,t[11]=p,t[12]=d,t[13]=m,t[14]=g,t[15]=b}function R(t,e){V(t,e,e)}function $(t,e,s){const i=new Uint8Array(32),h=new Float64Array(80),r=O(),n=O(),a=O(),o=O(),l=O(),c=O();for(let t=0;t<31;t++)i[t]=e[t];i[31]=127&e[31]\|64,i[0]&=248,function(t,e){for(let s=0;s<16;s++)t[s]=e[2s]+(e[2s+1]<<8);t[15]&=32767}(h,s);for(let t=0;t<16;t++)n[t]=h[t],o[t]=r[t]=a[t]=0;r[0]=o[0]=1;for(let t=254;t>=0;--t){const e=i[t>>>3]>>>(7&t)&1;X(r,n,e),X(a,o,e),j(l,r,a),D(r,r,a),j(a,n,o),D(n,n,o),R(o,l),R(c,r),V(r,a,r),V(a,n,l),j(l,r,a),D(r,r,a),R(n,r),D(a,o,c),V(r,a,I),j(r,r,o),V(a,a,r),V(r,o,c),V(o,n,h),R(n,l),X(r,n,e),X(a,o,e)}for(let t=0;t<16;t++)h[t+16]=r[t],h[t+32]=a[t],h[t+48]=n[t],h[t+64]=o[t];const f=h.subarray(32),u=h.subarray(16);!function(t,e){const s=O();for(let t=0;t<16;t++)s[t]=e[t];for(let t=253;t>=0;t--)R(s,s),2!==t&&4!==t&&V(s,s,e);for(let e=0;e<16;e++)t[e]=s[e]}(f,f),V(u,u,f),function(t,e){const s=O(),i=O();for(let t=0;t<16;t++)i[t]=e[t];z(i),z(i),z(i);for(let t=0;t<2;t++){s[0]=i[0]-65517;for(let t=1;t<15;t++)s[t]=i[t]-65535-(s[t-1]>>16&1),s[t-1]&=65535;s[15]=i[15]-32767-(s[14]>>16&1);const t=s[15]>>16&1;s[14]&=65535,X(i,s,1-t)}for(let e=0;e<16;e++)t[2e]=255&i[e],t[2*e+1]=i[e]>>8}(t,u)}function q(t,e){$(t,e,Y)}function G(t,e){if(32!==t.length)throw new Error("bad n size");if(32!==e.length)throw new Error("bad p size");const s=new Uint8Array(32);return $(s,t,e),s}function F(t){if(32!==t.length)throw new Error("bad n size");const e=new Uint8Array(32);return q(e,t),e}I[0]=56129,I[1]=1,G.scalarLength=32,G.groupElementLength=32;var W=Object.freeze({__proto__:null,crypto_scalarmult:$,crypto_scalarmult_BYTES:32,crypto_scalarmult_SCALARBYTES:32,crypto_scalarmult_base:q,scalarMult:G,scalarMultBase:F});function Z(t){const e=new DataView(new ArrayBuffer(12));return e.setUint32(4,t.lo,!0),e.setUint32(8,t.hi,!0),e}var J=Object.freeze({__proto__:null,Noise_25519_ChaChaPoly_BLAKE2s:class extends M{constructor(){super()}dhName(){return"25519"}generateKeypair(){const t=T(G.scalarLength);return{public:F(t),secret:t}}dh(t,e){return G(t.secret,e)}cipherName(){return"ChaChaPoly"}encrypt(t,e,s,i){const h=new Uint8Array(s.byteLength+16);return u(s,h,s.byteLength,h.subarray(s.byteLength),t,Z(e),i),h}decrypt(t,e,s,i){const h=new Uint8Array(s.byteLength-16);if(!y(h,s,h.byteLength,s.subarray(h.byteLength),t,Z(e),i))throw new Error("packet decryption failed");return h}hashName(){return"BLAKE2s"}hash(t){return w.digest(t)}hashBlocklen(){return w.BLOCKLEN}}});t.AEAD=p,t.BLAKE2=_,t.ChaCha20=n,t.Noise=k,t.NoiseProfiles=J,t.Patterns=P,t.Poly1305=o,t.Random=C,t.X25519=W}));
1	+ !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).SaltyCrypto={})}(this,(function(t){"use strict";function e(t,e){return t<<e\|t>>>32-e}function s(t,s,i,h,r){t[s]+=t[i],t[r]^=t[s],t[r]=e(t[r],16),t[h]+=t[r],t[i]^=t[h],t[i]=e(t[i],12),t[s]+=t[i],t[r]^=t[s],t[r]=e(t[r],8),t[h]+=t[r],t[i]^=t[h],t[i]=e(t[i],7)}function i(t,e,s,i){t[0]+=1634760805,t[1]+=857760878,t[2]+=2036477234,t[3]+=1797285236,t[4]+=e.getUint32(0,!0),t[5]+=e.getUint32(4,!0),t[6]+=e.getUint32(8,!0),t[7]+=e.getUint32(12,!0),t[8]+=e.getUint32(16,!0),t[9]+=e.getUint32(20,!0),t[10]+=e.getUint32(24,!0),t[11]+=e.getUint32(28,!0),t[12]+=s,t[13]+=i.getUint32(0,!0),t[14]+=i.getUint32(4,!0),t[15]+=i.getUint32(8,!0)}function h(t,e,h){const r=new Uint32Array(16);i(r,t,e,h);for(let t=0;t<20;t+=2)s(r,0,4,8,12),s(r,1,5,9,13),s(r,2,6,10,14),s(r,3,7,11,15),s(r,0,5,10,15),s(r,1,6,11,12),s(r,2,7,8,13),s(r,3,4,9,14);return i(r,t,e,h),r}function r(t,e,s,i,r=0,n=s.byteLength){const a=n>>6,o=63&n;for(let n=0;n<a;n++){const a=h(t,r+n,e);for(let t=0;t<64;t++)i[(n<<6)+t]=s[(n<<6)+t]^a[t>>2]>>((3&t)<<3)}if(0!==o){const n=h(t,r+a,e);for(let t=0;t<o;t++)i[(a<<6)+t]=s[(a<<6)+t]^n[t>>2]>>((3&t)<<3)}}var n=Object.freeze({__proto__:null,CHACHA20_BLOCKBYTES:64,CHACHA20_KEYBYTES:32,CHACHA20_NONCEBYTES:12,chacha20:r,chacha20_block:h,chacha20_quarter_round:s});class a{static digest(t,e){const s=new a(t);s.update(e,0,e.byteLength);const i=new Uint8Array(a.TAGBYTES);return s.finish(i,0),i}constructor(t){this.key=t,this.buffer=new Uint8Array(16),this.r=new Uint16Array(10),this.h=new Uint16Array(10),this.pad=new Uint16Array(8),this.leftover=0,this.fin=0;const e=255&t[0]\|(255&t[1])<<8;this.r[0]=8191&e;const s=255&t[2]\|(255&t[3])<<8;this.r[1]=8191&(e>>>13\|s<<3);const i=255&t[4]\|(255&t[5])<<8;this.r[2]=7939&(s>>>10\|i<<6);const h=255&t[6]\|(255&t[7])<<8;this.r[3]=8191&(i>>>7\|h<<9);const r=255&t[8]\|(255&t[9])<<8;this.r[4]=255&(h>>>4\|r<<12),this.r[5]=r>>>1&8190;const n=255&t[10]\|(255&t[11])<<8;this.r[6]=8191&(r>>>14\|n<<2);const a=255&t[12]\|(255&t[13])<<8;this.r[7]=8065&(n>>>11\|a<<5);const o=255&t[14]\|(255&t[15])<<8;this.r[8]=8191&(a>>>8\|o<<8),this.r[9]=o>>>5&127,this.pad[0]=255&t[16]\|(255&t[17])<<8,this.pad[1]=255&t[18]\|(255&t[19])<<8,this.pad[2]=255&t[20]\|(255&t[21])<<8,this.pad[3]=255&t[22]\|(255&t[23])<<8,this.pad[4]=255&t[24]\|(255&t[25])<<8,this.pad[5]=255&t[26]\|(255&t[27])<<8,this.pad[6]=255&t[28]\|(255&t[29])<<8,this.pad[7]=255&t[30]\|(255&t[31])<<8}blocks(t,e,s){const i=this.fin?0:2048;let h=this.h[0],r=this.h[1],n=this.h[2],a=this.h[3],o=this.h[4],c=this.h[5],l=this.h[6],u=this.h[7],f=this.h[8],y=this.h[9],p=this.r[0],d=this.r[1],m=this.r[2],g=this.r[3],b=this.r[4],K=this.r[5],w=this.r[6],A=this.r[7],_=this.r[8],E=this.r[9];for(;s>=16;){const U=255&t[e+0]\|(255&t[e+1])<<8;h+=8191&U;const v=255&t[e+2]\|(255&t[e+3])<<8;r+=8191&(U>>>13\|v<<3);const M=255&t[e+4]\|(255&t[e+5])<<8;n+=8191&(v>>>10\|M<<6);const S=255&t[e+6]\|(255&t[e+7])<<8;a+=8191&(M>>>7\|S<<9);const N=255&t[e+8]\|(255&t[e+9])<<8;o+=8191&(S>>>4\|N<<12),c+=N>>>1&8191;const L=255&t[e+10]\|(255&t[e+11])<<8;l+=8191&(N>>>14\|L<<2);const k=255&t[e+12]\|(255&t[e+13])<<8;u+=8191&(L>>>11\|k<<5);const x=255&t[e+14]\|(255&t[e+15])<<8;f+=8191&(k>>>8\|x<<8),y+=x>>>5\|i;let H=0,P=H;P+=hp,P+=r(5E),P+=n(5_),P+=a(5A),P+=o(5w),H=P>>>13,P&=8191,P+=c(5K),P+=l(5b),P+=u(5g),P+=f(5m),P+=y(5d),H+=P>>>13,P&=8191;let B=H;B+=hd,B+=rp,B+=n(5E),B+=a(5_),B+=o(5A),H=B>>>13,B&=8191,B+=c(5w),B+=l(5K),B+=u(5b),B+=f(5g),B+=y(5m),H+=B>>>13,B&=8191;let X=H;X+=hm,X+=rd,X+=np,X+=a(5E),X+=o(5_),H=X>>>13,X&=8191,X+=c(5A),X+=l(5w),X+=u(5K),X+=f(5b),X+=y(5g),H+=X>>>13,X&=8191;let C=H;C+=hg,C+=rm,C+=nd,C+=ap,C+=o(5E),H=C>>>13,C&=8191,C+=c(5_),C+=l(5A),C+=u(5w),C+=f(5K),C+=y(5b),H+=C>>>13,C&=8191;let T=H;T+=hb,T+=rg,T+=nm,T+=ad,T+=op,H=T>>>13,T&=8191,T+=c(5E),T+=l(5_),T+=u(5A),T+=f(5w),T+=y(5K),H+=T>>>13,T&=8191;let O=H;O+=hK,O+=rb,O+=ng,O+=am,O+=od,H=O>>>13,O&=8191,O+=cp,O+=l(5E),O+=u(5_),O+=f(5A),O+=y(5w),H+=O>>>13,O&=8191;let I=H;I+=hw,I+=rK,I+=nb,I+=ag,I+=om,H=I>>>13,I&=8191,I+=cd,I+=lp,I+=u(5E),I+=f(5_),I+=y(5A),H+=I>>>13,I&=8191;let Y=H;Y+=hA,Y+=rw,Y+=nK,Y+=ab,Y+=og,H=Y>>>13,Y&=8191,Y+=cm,Y+=ld,Y+=up,Y+=f(5E),Y+=y(5_),H+=Y>>>13,Y&=8191;let z=H;z+=h_,z+=rA,z+=nw,z+=aK,z+=ob,H=z>>>13,z&=8191,z+=cg,z+=lm,z+=ud,z+=fp,z+=y(5E),H+=z>>>13,z&=8191;let j=H;j+=hE,j+=r_,j+=nA,j+=aw,j+=oK,H=j>>>13,j&=8191,j+=cb,j+=lg,j+=um,j+=fd,j+=yp,H+=j>>>13,j&=8191,H=(H<<2)+H\|0,H=H+P\|0,P=8191&H,H>>>=13,B+=H,h=P,r=B,n=X,a=C,o=T,c=O,l=I,u=Y,f=z,y=j,e+=16,s-=16}this.h[0]=h,this.h[1]=r,this.h[2]=n,this.h[3]=a,this.h[4]=o,this.h[5]=c,this.h[6]=l,this.h[7]=u,this.h[8]=f,this.h[9]=y}finish(t,e){if(this.leftover){let t=this.leftover;for(this.buffer[t++]=1;t<16;t++)this.buffer[t]=0;this.fin=1,this.blocks(this.buffer,0,16)}let s=this.h[1]>>>13;this.h[1]&=8191;for(let t=2;t<10;t++)this.h[t]+=s,s=this.h[t]>>>13,this.h[t]&=8191;this.h[0]+=5s,s=this.h[0]>>>13,this.h[0]&=8191,this.h[1]+=s,s=this.h[1]>>>13,this.h[1]&=8191,this.h[2]+=s;const i=new Uint16Array(10);i[0]=this.h[0]+5,s=i[0]>>>13,i[0]&=8191;for(let t=1;t<10;t++)i[t]=this.h[t]+s,s=i[t]>>>13,i[t]&=8191;i[9]-=8192;let h=(1^s)-1;for(let t=0;t<10;t++)i[t]&=h;h=~h;for(let t=0;t<10;t++)this.h[t]=this.h[t]&h\|i[t];this.h[0]=65535&(this.h[0]\|this.h[1]<<13),this.h[1]=65535&(this.h[1]>>>3\|this.h[2]<<10),this.h[2]=65535&(this.h[2]>>>6\|this.h[3]<<7),this.h[3]=65535&(this.h[3]>>>9\|this.h[4]<<4),this.h[4]=65535&(this.h[4]>>>12\|this.h[5]<<1\|this.h[6]<<14),this.h[5]=65535&(this.h[6]>>>2\|this.h[7]<<11),this.h[6]=65535&(this.h[7]>>>5\|this.h[8]<<8),this.h[7]=65535&(this.h[8]>>>8\|this.h[9]<<5);let r=this.h[0]+this.pad[0];this.h[0]=65535&r;for(let t=1;t<8;t++)r=(this.h[t]+this.pad[t]\|0)+(r>>>16)\|0,this.h[t]=65535&r;t[e+0]=this.h[0]>>>0&255,t[e+1]=this.h[0]>>>8&255,t[e+2]=this.h[1]>>>0&255,t[e+3]=this.h[1]>>>8&255,t[e+4]=this.h[2]>>>0&255,t[e+5]=this.h[2]>>>8&255,t[e+6]=this.h[3]>>>0&255,t[e+7]=this.h[3]>>>8&255,t[e+8]=this.h[4]>>>0&255,t[e+9]=this.h[4]>>>8&255,t[e+10]=this.h[5]>>>0&255,t[e+11]=this.h[5]>>>8&255,t[e+12]=this.h[6]>>>0&255,t[e+13]=this.h[6]>>>8&255,t[e+14]=this.h[7]>>>0&255,t[e+15]=this.h[7]>>>8&255}update(t,e,s){if(this.leftover){let i=16-this.leftover;i>s&&(i=s);for(let s=0;s<i;s++)this.buffer[this.leftover+s]=t[e+s];if(s-=i,e+=i,this.leftover+=i,this.leftover<16)return;this.blocks(this.buffer,0,16),this.leftover=0}if(s>=16){const i=s-s%16;this.blocks(t,e,i),e+=i,s-=i}if(s){for(let i=0;i<s;i++)this.buffer[this.leftover+i]=t[e+i];this.leftover+=s}}}a.KEYBYTES=32,a.TAGBYTES=16,a.BLOCKBYTES=16;var o=Object.freeze({__proto__:null,Poly1305:a});const c=new Uint8Array(16);function l(t,e){const s=15&e;0!==s&&t.update(c,0,16-s)}function u(t,e,s,i,h,n){const o=new Uint8Array(a.KEYBYTES);r(e,s,o,o,0);const c=new a(o);void 0!==n&&(c.update(n,0,n.byteLength),l(c,n.byteLength)),c.update(i,0,h),l(c,h);const u=new Uint8Array(16),f=new DataView(u.buffer);void 0!==n&&f.setUint32(0,n.byteLength,!0),f.setUint32(8,h,!0),c.update(u,0,u.byteLength),c.finish(t,0)}function f(t,e,s,i,h,n,a){r(h,n,t,e,1,s),u(i,h,n,e,s,a)}function y(t,e,s,i){const h=new Uint8Array(t.byteLength+16);return f(t,h,t.byteLength,h.subarray(t.byteLength),e,s,i),h}function p(t,e,s,i,h,n,a){const o=new Uint8Array(16);u(o,h,n,e,s,a);const c=0===function(t,e,s){let i=0;for(let h=0;h<s;h++)i\|=t[h]^e[h];return(1&i-1>>>8)-1}(o,i,o.byteLength);return c&&r(h,n,e,t,1,s),c}class d extends Error{}function m(t,e,s,i){const h=new Uint8Array(t.byteLength-16);if(!p(h,t,h.byteLength,t.subarray(h.byteLength),e,s,i))throw new d("ChaCha20Poly1305 AEAD authentication failed");return h}var g=Object.freeze({__proto__:null,AEAD_CHACHA20_POLY1305_KEYBYTES:32,AEAD_CHACHA20_POLY1305_NONCEBYTES:12,AEAD_CHACHA20_POLY1305_TAGBYTES:16,AuthenticationFailure:d,aead_decrypt:m,aead_decrypt_detached:p,aead_encrypt:y,aead_encrypt_detached:f});function b(t,e){return t>>>e\|t<<32-e}function K(t,e,s,i,h,r,n){t[e]=t[e]+t[s]+r,t[h]=b(t[h]^t[e],16),t[i]=t[i]+t[h],t[s]=b(t[s]^t[i],12),t[e]=t[e]+t[s]+n,t[h]=b(t[h]^t[e],8),t[i]=t[i]+t[h],t[s]=b(t[s]^t[i],7)}const w=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),A=Uint8Array.from([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0]);function _(t,e){return A[(t<<4)+e]}class E{static digest(t,e,s){const i=new E(e,s);return i.update(t),i.final()}constructor(t=E.OUTBYTES,e){var s;this.outlen=t,this.b=new Uint8Array(64),this.bv=new DataView(this.b.buffer),this.h=Uint32Array.from(w),this.t=new Uint32Array(2),this.c=0;const i=null!==(s=null==e?void 0:e.byteLength)&&void 0!==s?s:0;if(0==t\|\|t>32\|\|i>32)throw new Error("illegal BLAKE2s parameter length(s)");this.h[0]^=16842752^i<<8^t,void 0!==e&&i>0&&(this.update(e),this.c=64)}update(t){for(let e=0;e<t.byteLength;e++)64==this.c&&(this.t[0]+=this.c,this.t[0]<this.c&&this.t[1]++,this.compress(!1),this.c=0),this.b[this.c++]=t[e]}final(t){for(this.t[0]+=this.c,this.t[0]<this.c&&this.t[1]++;this.c<64;)this.b[this.c++]=0;this.compress(!0),void 0===t&&(t=new Uint8Array(this.outlen));for(let e=0;e<this.outlen;e++)t[e]=this.h[e>>2]>>8(3&e)&255;return t}compress(t){const e=new Uint32Array(16),s=new Uint32Array(16);for(let t=0;t<8;t++)e[t]=this.h[t],e[t+8]=w[t];e[12]^=this.t[0],e[13]^=this.t[1],t&&(e[14]=~e[14]);for(let t=0;t<16;t++)s[t]=this.bv.getUint32(t<<2,!0);for(let t=0;t<10;t++)K(e,0,4,8,12,s[_(t,0)],s[_(t,1)]),K(e,1,5,9,13,s[_(t,2)],s[_(t,3)]),K(e,2,6,10,14,s[_(t,4)],s[_(t,5)]),K(e,3,7,11,15,s[_(t,6)],s[_(t,7)]),K(e,0,5,10,15,s[_(t,8)],s[_(t,9)]),K(e,1,6,11,12,s[_(t,10)],s[_(t,11)]),K(e,2,7,8,13,s[_(t,12)],s[_(t,13)]),K(e,3,4,9,14,s[_(t,14)],s[_(t,15)]);for(let t=0;t<8;t++)this.h[t]^=e[t]^e[t+8]}}E.KEYBYTES=32,E.OUTBYTES=32,E.BLOCKLEN=64;var U=Object.freeze({__proto__:null,BLAKE2s:E});class v{constructor(t=0,e=0){this.lo=t,this.hi=e}increment(){const t=this.lo,e=t+1\|0;this.lo=e,e<t&&(this.hi=this.hi+1\|0)}reset(t=0,e=0){this.lo=t,this.hi=e}static get MAX(){return new v(4294967295,4294967295)}}function M(t,e){const s=Math.min(t.byteLength,e.byteLength),i=new Uint8Array(s);for(let h=0;h<s;h++)i[h]=t[h]^e[h];return i}function S(t,e){const s=new Uint8Array(t.byteLength+e.byteLength);return s.set(t,0),s.set(e,t.byteLength),s}const N=new Uint8Array(0);class L{constructor(t){const e=this.generateKeypair();this.dhlen=this.dh(e,e.public).byteLength,this.hmac=null!=t?t:function(t){const e=new Uint8Array(t.hashBlocklen());e.fill(54);const s=new Uint8Array(t.hashBlocklen());return s.fill(92),(i,h)=>{const r=t._padOrHash(i,t.hashBlocklen());return t.hash(S(M(r,s),t.hash(S(M(r,e),h))))}}(this)}rekey(t){return new DataView(this.encrypt(t,v.MAX,new Uint8Array(32)).buffer)}_padOrHash(t,e){const s=t.byteLength>e?this.hash(t):t;return S(s,new Uint8Array(e-s.byteLength))}hkdf(t,e,s){const i=this.hmac(t,e),h=this.hmac(i,Uint8Array.from([1])),r=this.hmac(i,S(h,Uint8Array.from([2])));switch(s){case 2:return[h,r];case 3:return[h,r,this.hmac(i,S(r,Uint8Array.from([3])))]}}matchingPattern(t){const e=new RegExp(`^Noise_([A-Za-z0-9+]+)_${this.dhName()}_${this.cipherName()}_${this.hashName()}$`).exec(t);return null===e?null:e[1]}}class k{constructor(t,e){this.algorithms=t,this.view=null,this.nonce=new v,void 0!==e&&(this.view=new DataView(e.buffer))}encrypt(t,e){if(null===this.view)return t;const s=this.algorithms.encrypt(this.view,this.nonce,t,e);return this.nonce.increment(),s}decrypt(t,e){if(null===this.view)return t;const s=this.algorithms.decrypt(this.view,this.nonce,t,e);return this.nonce.increment(),s}rekey(){null!==this.view&&(this.view=this.algorithms.rekey(this.view))}}var x=Object.freeze({__proto__:null,CipherState:k,NoiseHandshake:class{constructor(t,e,s,i={}){var h,r,n,a,o;this.algorithms=t,this.pattern=e,this.role=s,this.stepIndex=0,this.staticKeypair=null!==(h=i.staticKeypair)&&void 0!==h?h:this.algorithms.generateKeypair(),this.remoteStaticPublicKey=null!==(r=i.remoteStaticPublicKey)&&void 0!==r?r:null,this.ephemeralKeypair=null!==(n=i.pregeneratedEphemeralKeypair)&&void 0!==n?n:this.algorithms.generateKeypair(),this.remoteEphemeralPublicKey=null!==(a=i.remotePregeneratedEphemeralPublicKey)&&void 0!==a?a:null,this.preSharedKeys=i.preSharedKeys,this.preSharedKeys&&(this.preSharedKeys=this.preSharedKeys.slice(),0===this.preSharedKeys.length&&(this.preSharedKeys=void 0));const c=(new TextEncoder).encode("Noise_"+this.pattern.name+"_"+this.algorithms.dhName()+"_"+this.algorithms.cipherName()+"_"+this.algorithms.hashName());this.cipherState=new k(this.algorithms),this.chainingKey=this.algorithms._padOrHash(c,this.algorithms.hash(N).byteLength),this.handshakeHash=this.chainingKey,this.mixHash(null!==(o=i.prologue)&&void 0!==o?o:N),this.pattern.initiatorPreMessage.forEach((t=>this.mixHash("e"===t?this.isInitiator?this.ephemeralKeypair.public:this.remoteEphemeralPublicKey:this.isInitiator?this.staticKeypair.public:this.remoteStaticPublicKey))),this.pattern.responderPreMessage.forEach((t=>this.mixHash("e"===t?this.isInitiator?this.remoteEphemeralPublicKey:this.ephemeralKeypair.public:this.isInitiator?this.remoteStaticPublicKey:this.staticKeypair.public)))}get isInitiator(){return"initiator"===this.role}mixHash(t){this.handshakeHash=this.algorithms.hash(S(this.handshakeHash,t))}mixKey(t){const[e,s]=this.algorithms.hkdf(this.chainingKey,t,2);this.chainingKey=e,this.cipherState=new k(this.algorithms,s)}mixKeyAndHashNextPSK(){const t=this.preSharedKeys.shift(),[e,s,i]=this.algorithms.hkdf(this.chainingKey,t,3);this.chainingKey=e,this.mixHash(s),this.cipherState=new k(this.algorithms,i)}encryptAndHash(t){const e=this.cipherState.encrypt(t,this.handshakeHash);return this.mixHash(e),e}decryptAndHash(t){const e=this.cipherState.decrypt(t,this.handshakeHash);return this.mixHash(t),e}_split(){if(this.stepIndex<this.pattern.messages.length)return null;{let[t,e]=this.algorithms.hkdf(this.chainingKey,N,2).map((t=>new k(this.algorithms,t)));return this.isInitiator?{send:t,recv:e}:{send:e,recv:t}}}_nextStep(){if(this.stepIndex>=this.pattern.messages.length)throw new Error("Handshake already complete, cannot continue");return this.pattern.messages[this.stepIndex++]}_processKeyMixToken(t){switch(t){case"ee":this.mixKey(this.algorithms.dh(this.ephemeralKeypair,this.remoteEphemeralPublicKey));break;case"es":this.mixKey(this.isInitiator?this.algorithms.dh(this.ephemeralKeypair,this.remoteStaticPublicKey):this.algorithms.dh(this.staticKeypair,this.remoteEphemeralPublicKey));break;case"se":this.mixKey(this.isInitiator?this.algorithms.dh(this.staticKeypair,this.remoteEphemeralPublicKey):this.algorithms.dh(this.ephemeralKeypair,this.remoteStaticPublicKey));break;case"ss":this.mixKey(this.algorithms.dh(this.staticKeypair,this.remoteStaticPublicKey));break;case"psk":this.mixKeyAndHashNextPSK()}}writeMessage(t){const e=[];let s;if(this._nextStep().forEach((t=>{switch(t){case"e":e.push(this.ephemeralKeypair.public),this.mixHash(this.ephemeralKeypair.public),this.preSharedKeys&&this.mixKey(this.ephemeralKeypair.public);break;case"s":e.push(this.encryptAndHash(this.staticKeypair.public));break;default:this._processKeyMixToken(t)}})),e.push(this.encryptAndHash(t)),1===e.length)s=e[0];else{s=new Uint8Array(e.reduce(((t,e)=>t+e.byteLength),0));let t=0;e.forEach((e=>{s.set(e,t),t+=e.byteLength}))}return{packet:s,finished:this._split()}}readMessage(t){const e=e=>{const s=t.slice(0,e);return t=t.subarray(e),s};this._nextStep().forEach((t=>{switch(t){case"e":this.remoteEphemeralPublicKey=e(this.algorithms.dhlen),this.mixHash(this.remoteEphemeralPublicKey),this.preSharedKeys&&this.mixKey(this.remoteEphemeralPublicKey);break;case"s":this.remoteStaticPublicKey=this.decryptAndHash(e(this.algorithms.dhlen+(this.cipherState.view?16:0)));break;default:this._processKeyMixToken(t)}}));return{message:this.decryptAndHash(t),finished:this._split()}}async completeHandshake(t,e,s=(async t=>{}),i=(async()=>new Uint8Array(0))){const h=async()=>{const{packet:e,finished:s}=this.writeMessage(await i());return await t(e),s\|\|r()},r=async()=>{const{message:t,finished:i}=this.readMessage(await e());return await s(t),i\|\|h()};return this.isInitiator?h():r()}},NoiseProtocolAlgorithms:L,Nonce:v,bytesAppend:S,bytesXor:M});const H={};function P(t,e,s,i){const h={name:t,baseName:t,messages:e,initiatorPreMessage:s,responderPreMessage:i};H[h.name]=h}P("I1K1",[["e","s"],["e","ee","es"],["se"]],[],["s"]),P("I1K",[["e","es","s"],["e","ee"],["se"]],[],["s"]),P("I1N",[["e","s"],["e","ee"],["se"]],[],[]),P("I1X1",[["e","s"],["e","ee","s"],["se","es"]],[],[]),P("I1X",[["e","s"],["e","ee","s","es"],["se"]],[],[]),P("IK1",[["e","s"],["e","ee","se","es"]],[],["s"]),P("IK",[["e","es","s","ss"],["e","ee","se"]],[],["s"]),P("IN",[["e","s"],["e","ee","se"]],[],[]),P("IX1",[["e","s"],["e","ee","se","s"],["es"]],[],[]),P("IX",[["e","s"],["e","ee","se","s","es"]],[],[]),P("K1K1",[["e"],["e","ee","es"],["se"]],["s"],["s"]),P("K1K",[["e","es"],["e","ee"],["se"]],["s"],["s"]),P("K1N",[["e"],["e","ee"],["se"]],["s"],[]),P("K1X1",[["e"],["e","ee","s"],["se","es"]],["s"],[]),P("K1X",[["e"],["e","ee","s","es"],["se"]],["s"],[]),P("K",[["e","es","ss"]],["s"],["s"]),P("KK1",[["e"],["e","ee","se","es"]],["s"],["s"]),P("KK",[["e","es","ss"],["e","ee","se"]],["s"],["s"]),P("KN",[["e"],["e","ee","se"]],["s"],[]),P("KX1",[["e"],["e","ee","se","s"],["es"]],["s"],[]),P("KX",[["e"],["e","ee","se","s","es"]],["s"],[]),P("N",[["e","es"]],[],["s"]),P("NK1",[["e"],["e","ee","es"]],[],["s"]),P("NK",[["e","es"],["e","ee"]],[],["s"]),P("NN",[["e"],["e","ee"]],[],[]),P("NX1",[["e"],["e","ee","s"],["es"]],[],[]),P("NX",[["e"],["e","ee","s","es"]],[],[]),P("X1K1",[["e"],["e","ee","es"],["s"],["se"]],[],["s"]),P("X1K",[["e","es"],["e","ee"],["s"],["se"]],[],["s"]),P("X1N",[["e"],["e","ee"],["s"],["se"]],[],[]),P("X1X1",[["e"],["e","ee","s"],["es","s"],["se"]],[],[]),P("X1X",[["e"],["e","ee","s","es"],["s"],["se"]],[],[]),P("X",[["e","es","s","ss"]],[],["s"]),P("XK1",[["e"],["e","ee","es"],["s","se"]],[],["s"]),P("XK",[["e","es"],["e","ee"],["s","se"]],[],["s"]),P("XN",[["e"],["e","ee"],["s","se"]],[],[]),P("XX1",[["e"],["e","ee","s"],["es","s","se"]],[],[]),P("XX",[["e"],["e","ee","s","es"],["s","se"]],[],[]);const B=/^([NKX]\|[NKXI]1?[NKX]1?)([a-z][a-z0-9](\+[a-z][a-z0-9]))?$/,X=/^psk([0-9]+)$/;var C=Object.freeze({__proto__:null,PATTERNS:H,isOneWay:function(t){return 1===t.baseName.length},lookupPattern:function(t){var e,s,i;const h=B.exec(t);if(null===h)return null;const r=null!==(s=null===(e=h[2])\|\|void 0===e?void 0:e.split("+"))&&void 0!==s?s:[];let n=null!==(i=H[h[1]])&&void 0!==i?i:null;return n?(r.forEach((t=>n=n&&function(t,e){const s=X.exec(e);if(null===s)return null;const i=parseInt(s[1],10),h=t.messages;return Object.assign(Object.assign({},t),{messages:0===i?[["psk",...h[0]],...h.slice(1)]:[...h.slice(0,i-1),[...h[i-1],"psk"],...h.slice(i)]})}(n,t))),n&&Object.assign(Object.assign({},n),{name:t})):null}});const T=(()=>{var t="undefined"!=typeof self?self.crypto\|\|self.msCrypto:null;if(t&&t.getRandomValues){const e=65536;return(s,i)=>{for(let h=0;h<i;h+=e)t.getRandomValues(s.subarray(h,h+Math.min(i-h,e)))}}if("undefined"!=typeof require&&(t=require("crypto"))&&t.randomBytes)return(e,s)=>e.set(t.randomBytes(s));throw new Error("No usable randomness source found")})();function O(t){const e=new Uint8Array(t);return T(e,t),e}var I=Object.freeze({__proto__:null,_randomBytes:T,randomBytes:O});function Y(){return new Float64Array(16)}const z=new Uint8Array(32);z[0]=9;const j=Y();function D(t){let e=1;for(let s=0;s<16;s++){const i=t[s]+e+65535;e=Math.floor(i/65536),t[s]=i-65536e}t[0]+=e-1+37(e-1)}function V(t,e,s){const i=~(s-1);for(let s=0;s<16;s++){const h=i&(t[s]^e[s]);t[s]^=h,e[s]^=h}}function R(t,e,s){for(let i=0;i<16;i++)t[i]=e[i]+s[i]}function $(t,e,s){for(let i=0;i<16;i++)t[i]=e[i]-s[i]}function q(t,e,s){let i=0,h=0,r=0,n=0,a=0,o=0,c=0,l=0,u=0,f=0,y=0,p=0,d=0,m=0,g=0,b=0,K=0,w=0,A=0,_=0,E=0,U=0,v=0,M=0,S=0,N=0,L=0,k=0,x=0,H=0,P=0;const B=s[0],X=s[1],C=s[2],T=s[3],O=s[4],I=s[5],Y=s[6],z=s[7],j=s[8],D=s[9],V=s[10],R=s[11],$=s[12],q=s[13],F=s[14],G=s[15];let W=e[0];i+=WB,h+=WX,r+=WC,n+=WT,a+=WO,o+=WI,c+=WY,l+=Wz,u+=Wj,f+=WD,y+=WV,p+=WR,d+=W$,m+=Wq,g+=WF,b+=WG,W=e[1],h+=WB,r+=WX,n+=WC,a+=WT,o+=WO,c+=WI,l+=WY,u+=Wz,f+=Wj,y+=WD,p+=WV,d+=WR,m+=W$,g+=Wq,b+=WF,K+=WG,W=e[2],r+=WB,n+=WX,a+=WC,o+=WT,c+=WO,l+=WI,u+=WY,f+=Wz,y+=Wj,p+=WD,d+=WV,m+=WR,g+=W$,b+=Wq,K+=WF,w+=WG,W=e[3],n+=WB,a+=WX,o+=WC,c+=WT,l+=WO,u+=WI,f+=WY,y+=Wz,p+=Wj,d+=WD,m+=WV,g+=WR,b+=W$,K+=Wq,w+=WF,A+=WG,W=e[4],a+=WB,o+=WX,c+=WC,l+=WT,u+=WO,f+=WI,y+=WY,p+=Wz,d+=Wj,m+=WD,g+=WV,b+=WR,K+=W$,w+=Wq,A+=WF,_+=WG,W=e[5],o+=WB,c+=WX,l+=WC,u+=WT,f+=WO,y+=WI,p+=WY,d+=Wz,m+=Wj,g+=WD,b+=WV,K+=WR,w+=W$,A+=Wq,_+=WF,E+=WG,W=e[6],c+=WB,l+=WX,u+=WC,f+=WT,y+=WO,p+=WI,d+=WY,m+=Wz,g+=Wj,b+=WD,K+=WV,w+=WR,A+=W$,_+=Wq,E+=WF,U+=WG,W=e[7],l+=WB,u+=WX,f+=WC,y+=WT,p+=WO,d+=WI,m+=WY,g+=Wz,b+=Wj,K+=WD,w+=WV,A+=WR,_+=W$,E+=Wq,U+=WF,v+=WG,W=e[8],u+=WB,f+=WX,y+=WC,p+=WT,d+=WO,m+=WI,g+=WY,b+=Wz,K+=Wj,w+=WD,A+=WV,_+=WR,E+=W$,U+=Wq,v+=WF,M+=WG,W=e[9],f+=WB,y+=WX,p+=WC,d+=WT,m+=WO,g+=WI,b+=WY,K+=Wz,w+=Wj,A+=WD,_+=WV,E+=WR,U+=W$,v+=Wq,M+=WF,S+=WG,W=e[10],y+=WB,p+=WX,d+=WC,m+=WT,g+=WO,b+=WI,K+=WY,w+=Wz,A+=Wj,_+=WD,E+=WV,U+=WR,v+=W$,M+=Wq,S+=WF,N+=WG,W=e[11],p+=WB,d+=WX,m+=WC,g+=WT,b+=WO,K+=WI,w+=WY,A+=Wz,_+=Wj,E+=WD,U+=WV,v+=WR,M+=W$,S+=Wq,N+=WF,L+=WG,W=e[12],d+=WB,m+=WX,g+=WC,b+=WT,K+=WO,w+=WI,A+=WY,_+=Wz,E+=Wj,U+=WD,v+=WV,M+=WR,S+=W$,N+=Wq,L+=WF,k+=WG,W=e[13],m+=WB,g+=WX,b+=WC,K+=WT,w+=WO,A+=WI,_+=WY,E+=Wz,U+=Wj,v+=WD,M+=WV,S+=WR,N+=W$,L+=Wq,k+=WF,x+=WG,W=e[14],g+=WB,b+=WX,K+=WC,w+=WT,A+=WO,_+=WI,E+=WY,U+=Wz,v+=Wj,M+=WD,S+=WV,N+=WR,L+=W$,k+=Wq,x+=WF,H+=WG,W=e[15],b+=WB,K+=WX,w+=WC,A+=WT,_+=WO,E+=WI,U+=WY,v+=Wz,M+=Wj,S+=WD,N+=WV,L+=WR,k+=W$,x+=Wq,H+=WF,P+=WG,i+=38K,h+=38w,r+=38A,n+=38_,a+=38E,o+=38U,c+=38v,l+=38M,u+=38S,f+=38N,y+=38L,p+=38k,d+=38x,m+=38H,g+=38P;let Z=1;W=i+Z+65535,Z=Math.floor(W/65536),i=W-65536Z,W=h+Z+65535,Z=Math.floor(W/65536),h=W-65536Z,W=r+Z+65535,Z=Math.floor(W/65536),r=W-65536Z,W=n+Z+65535,Z=Math.floor(W/65536),n=W-65536Z,W=a+Z+65535,Z=Math.floor(W/65536),a=W-65536Z,W=o+Z+65535,Z=Math.floor(W/65536),o=W-65536Z,W=c+Z+65535,Z=Math.floor(W/65536),c=W-65536Z,W=l+Z+65535,Z=Math.floor(W/65536),l=W-65536Z,W=u+Z+65535,Z=Math.floor(W/65536),u=W-65536Z,W=f+Z+65535,Z=Math.floor(W/65536),f=W-65536Z,W=y+Z+65535,Z=Math.floor(W/65536),y=W-65536Z,W=p+Z+65535,Z=Math.floor(W/65536),p=W-65536Z,W=d+Z+65535,Z=Math.floor(W/65536),d=W-65536Z,W=m+Z+65535,Z=Math.floor(W/65536),m=W-65536Z,W=g+Z+65535,Z=Math.floor(W/65536),g=W-65536Z,W=b+Z+65535,Z=Math.floor(W/65536),b=W-65536Z,i+=Z-1+37(Z-1),Z=1,W=i+Z+65535,Z=Math.floor(W/65536),i=W-65536Z,W=h+Z+65535,Z=Math.floor(W/65536),h=W-65536Z,W=r+Z+65535,Z=Math.floor(W/65536),r=W-65536Z,W=n+Z+65535,Z=Math.floor(W/65536),n=W-65536Z,W=a+Z+65535,Z=Math.floor(W/65536),a=W-65536Z,W=o+Z+65535,Z=Math.floor(W/65536),o=W-65536Z,W=c+Z+65535,Z=Math.floor(W/65536),c=W-65536Z,W=l+Z+65535,Z=Math.floor(W/65536),l=W-65536Z,W=u+Z+65535,Z=Math.floor(W/65536),u=W-65536Z,W=f+Z+65535,Z=Math.floor(W/65536),f=W-65536Z,W=y+Z+65535,Z=Math.floor(W/65536),y=W-65536Z,W=p+Z+65535,Z=Math.floor(W/65536),p=W-65536Z,W=d+Z+65535,Z=Math.floor(W/65536),d=W-65536Z,W=m+Z+65535,Z=Math.floor(W/65536),m=W-65536Z,W=g+Z+65535,Z=Math.floor(W/65536),g=W-65536Z,W=b+Z+65535,Z=Math.floor(W/65536),b=W-65536Z,i+=Z-1+37(Z-1),t[0]=i,t[1]=h,t[2]=r,t[3]=n,t[4]=a,t[5]=o,t[6]=c,t[7]=l,t[8]=u,t[9]=f,t[10]=y,t[11]=p,t[12]=d,t[13]=m,t[14]=g,t[15]=b}function F(t,e){q(t,e,e)}function G(t,e,s){const i=new Uint8Array(32),h=new Float64Array(80),r=Y(),n=Y(),a=Y(),o=Y(),c=Y(),l=Y();for(let t=0;t<31;t++)i[t]=e[t];i[31]=127&e[31]\|64,i[0]&=248,function(t,e){for(let s=0;s<16;s++)t[s]=e[2s]+(e[2s+1]<<8);t[15]&=32767}(h,s);for(let t=0;t<16;t++)n[t]=h[t],o[t]=r[t]=a[t]=0;r[0]=o[0]=1;for(let t=254;t>=0;--t){const e=i[t>>>3]>>>(7&t)&1;V(r,n,e),V(a,o,e),R(c,r,a),$(r,r,a),R(a,n,o),$(n,n,o),F(o,c),F(l,r),q(r,a,r),q(a,n,c),R(c,r,a),$(r,r,a),F(n,r),$(a,o,l),q(r,a,j),R(r,r,o),q(a,a,r),q(r,o,l),q(o,n,h),F(n,c),V(r,n,e),V(a,o,e)}for(let t=0;t<16;t++)h[t+16]=r[t],h[t+32]=a[t],h[t+48]=n[t],h[t+64]=o[t];const u=h.subarray(32),f=h.subarray(16);!function(t,e){const s=Y();for(let t=0;t<16;t++)s[t]=e[t];for(let t=253;t>=0;t--)F(s,s),2!==t&&4!==t&&q(s,s,e);for(let e=0;e<16;e++)t[e]=s[e]}(u,u),q(f,f,u),function(t,e){const s=Y(),i=Y();for(let t=0;t<16;t++)i[t]=e[t];D(i),D(i),D(i);for(let t=0;t<2;t++){s[0]=i[0]-65517;for(let t=1;t<15;t++)s[t]=i[t]-65535-(s[t-1]>>16&1),s[t-1]&=65535;s[15]=i[15]-32767-(s[14]>>16&1);const t=s[15]>>16&1;s[14]&=65535,V(i,s,1-t)}for(let e=0;e<16;e++)t[2e]=255&i[e],t[2*e+1]=i[e]>>8}(t,f)}function W(t,e){G(t,e,z)}function Z(t,e){if(32!==t.length)throw new Error("bad n size");if(32!==e.length)throw new Error("bad p size");const s=new Uint8Array(32);return G(s,t,e),s}function J(t){if(32!==t.length)throw new Error("bad n size");const e=new Uint8Array(32);return W(e,t),e}j[0]=56129,j[1]=1,Z.scalarLength=32,Z.groupElementLength=32;var Q=Object.freeze({__proto__:null,crypto_scalarmult:G,crypto_scalarmult_BYTES:32,crypto_scalarmult_SCALARBYTES:32,crypto_scalarmult_base:W,scalarMult:Z,scalarMultBase:J});function tt(t){const e=new DataView(new ArrayBuffer(12));return e.setUint32(4,t.lo,!0),e.setUint32(8,t.hi,!0),e}var et=Object.freeze({__proto__:null,Noise_25519_ChaChaPoly_BLAKE2s:class extends L{constructor(){super()}dhName(){return"25519"}generateKeypair(){const t=O(Z.scalarLength);return{public:J(t),secret:t}}dh(t,e){return Z(t.secret,e)}cipherName(){return"ChaChaPoly"}encrypt(t,e,s,i){return y(s,t,tt(e),i)}decrypt(t,e,s,i){return m(s,t,tt(e),i)}hashName(){return"BLAKE2s"}hash(t){return E.digest(t)}hashBlocklen(){return E.BLOCKLEN}}});t.AEAD=g,t.BLAKE2=U,t.ChaCha20=n,t.Noise=x,t.NoiseProfiles=et,t.Patterns=C,t.Poly1305=o,t.Random=I,t.X25519=Q}));

package/package.json CHANGED Viewed

@@ -1,13 +1,13 @@
 {
   "name": "salty-crypto",
-  "version": "0.0.2",
+  "version": "0.0.4",
   "description": "Noise Protocol Framework, plus X25519/ChaCha20Poly1305/BLAKE2s code, for browser and node.js",
   "author": "Tony Garnock-Jones <tonyg@leastfixedpoint.com>",
   "homepage": "https://github.com/tonyg/typescript-salty-crypto",
   "license": "MIT",
   "main": "dist/salty-crypto.js",
-  "module": "lib/src/index.js",
-  "types": "lib/src/index.d.ts",
+  "module": "lib/index.js",
+  "types": "lib/index.d.ts",
   "publishConfig": {
     "access": "public"
   },
@@ -16,14 +16,16 @@
     "url": "https://github.com/tonyg/typescript-salty-crypto"
   },
   "scripts": {
-    "prepare": "yarn compile && yarn rollup",
+    "prepare": "yarn clean && yarn compile && yarn rollup",
     "compile": "yarn tsc",
     "compile:watch": "yarn compile -w",
     "rollup": "rollup -c",
     "rollup:watch": "yarn rollup -w",
-    "test": "node -r esm lib/test/harness.js",
-    "test:watch": "inotifytest yarn test",
-    "clean": "rm -rf lib/",
+    "test-compile": "yarn tsc -p test/tsconfig.json",
+    "test-compile:watch": "yarn test-compile -w",
+    "test": "node -r esm lib-test/harness.js",
+    "test:watch": "mkdir -p lib-test && cd lib-test && inotifytest yarn test",
+    "clean": "rm -rf lib/ lib-test/ dist/",
     "fixcopyright": "fixcopyright.rkt --preset-typescript --file-pattern 'src/**.ts' MIT && fixcopyright.rkt --preset-typescript --file-pattern 'test/**.ts' MIT"
   },
   "devDependencies": {
@@ -33,6 +35,7 @@
     "expect": "^29.4.0",
     "glob": "^8.1.0",
     "rollup": "^3.10.1",
+    "rollup-plugin-dts": "^5.1.1",
     "typescript": "4.9"
   },
   "dependencies": {}

package/rollup.config.js CHANGED Viewed

@@ -1,9 +1,19 @@
-module.exports = {
-  input: 'lib/src/index.js',
-  plugins: [require('@rollup/plugin-terser')()],
-  output: {
-    file: 'dist/salty-crypto.js',
-    format: 'umd',
-    name: 'SaltyCrypto',
+module.exports = [
+  {
+    input: 'lib/index.js',
+    plugins: [require('@rollup/plugin-terser')()],
+    output: {
+      file: 'dist/salty-crypto.js',
+      format: 'umd',
+      name: 'SaltyCrypto',
+    },
   },
-};
+  {
+    input: 'lib/index.d.ts',
+    plugins: [require('rollup-plugin-dts').default()],
+    output: {
+      file: 'dist/salty-crypto.d.ts',
+      format: 'es',
+    },
+  },
+];

package/src/aead.ts CHANGED Viewed

@@ -47,18 +47,36 @@ function aead_tag(tag: Uint8Array,
     p.finish(tag, 0);
 }
-export function aead_encrypt_detached(plaintext: Uint8Array,
-                                      ciphertext: Uint8Array,
-                                      messagelength: number,
-                                      tag: Uint8Array,
-                                      key: DataView,
-                                      nonce: DataView,
-                                      associated_data?: Uint8Array)
-{
+export function aead_encrypt_detached(
+    plaintext: Uint8Array,
+    ciphertext: Uint8Array,
+    messagelength: number,
+    tag: Uint8Array,
+    key: DataView,
+    nonce: DataView,
+    associated_data?: Uint8Array,
+): void {
     chacha20(key, nonce, plaintext, ciphertext, 1, messagelength);
     aead_tag(tag, key, nonce, ciphertext, messagelength, associated_data);
 }
+export function aead_encrypt(
+    plaintext: Uint8Array,
+    key: DataView,
+    nonce: DataView,
+    associated_data?: Uint8Array,
+): Uint8Array {
+    const ciphertextAndTag = new Uint8Array(plaintext.byteLength + AEAD_CHACHA20_POLY1305_TAGBYTES);
+    aead_encrypt_detached(plaintext,
+                          ciphertextAndTag,
+                          plaintext.byteLength,
+                          ciphertextAndTag.subarray(plaintext.byteLength),
+                          key,
+                          nonce,
+                          associated_data);
+    return ciphertextAndTag;
+}
 // `verify` from nacl-fast.js
 function verify(x: Uint8Array, y: Uint8Array, n: number): number {
     let d = 0;
@@ -77,10 +95,27 @@ export function aead_decrypt_detached(plaintext: Uint8Array,
     const actual_tag = new Uint8Array(AEAD_CHACHA20_POLY1305_TAGBYTES);
     aead_tag(actual_tag, key, nonce, ciphertext, messagelength, associated_data);
     const ok = verify(actual_tag, expected_tag, actual_tag.byteLength) === 0;
-    if (ok) {
-        chacha20(key, nonce, ciphertext, plaintext, 1, messagelength);
-    } else {
-        plaintext.fill(0, 0, messagelength);
-    }
+    if (ok) chacha20(key, nonce, ciphertext, plaintext, 1, messagelength);
     return ok;
 }
+export class AuthenticationFailure extends Error {}
+export function aead_decrypt(
+    ciphertextAndTag: Uint8Array,
+    key: DataView,
+    nonce: DataView,
+    associated_data?: Uint8Array,
+): Uint8Array {
+    const plaintext = new Uint8Array(ciphertextAndTag.byteLength - AEAD_CHACHA20_POLY1305_TAGBYTES);
+    if (!aead_decrypt_detached(plaintext,
+                               ciphertextAndTag,
+                               plaintext.byteLength,
+                               ciphertextAndTag.subarray(plaintext.byteLength),
+                               key,
+                               nonce,
+                               associated_data)) {
+        throw new AuthenticationFailure("ChaCha20Poly1305 AEAD authentication failed");
+    }
+    return plaintext;
+}

package/src/patterns.ts CHANGED Viewed

@@ -15,21 +15,44 @@ function _p(
     PATTERNS[pat.name] = pat;
 }
-_p("N",  [["e", "es"]],                                [], ["s"]);
-_p("K",  [["e", "es", "ss"]],                          ["s"], ["s"]);
-_p("X",  [["e", "es", "s", "ss"]],                     [], ["s"]);
-_p("NN", [["e"], ["e", "ee"]],                         [], []);
-_p("NK", [["e", "es"], ["e", "ee"]],                   [], ["s"]);
-_p("NX", [["e"], ["e", "ee", "s", "es"]],              [], []);
-_p("KN", [["e"], ["e", "ee", "se"]],                   ["s"], []);
-_p("KK", [["e", "es", "ss"], ["e", "ee", "se"]],       ["s"], ["s"]);
-_p("KX", [["e"], ["e", "ee", "se", "s", "es"]],        ["s"], []);
-_p("XN", [["e"], ["e", "ee"], ["s", "se"]],            [], []);
-_p("XK", [["e", "es"], ["e", "ee"], ["s", "se"]],      [], ["s"]);
-_p("XX", [["e"], ["e", "ee", "s", "es"], ["s", "se"]], [], []);
-_p("IN", [["e", "s"], ["e", "ee", "se"]],              [], []);
-_p("IK", [["e", "es", "s", "ss"], ["e", "ee", "se"]],  [], ["s"]);
-_p("IX", [["e", "s"], ["e", "ee", "se", "s", "es"]],   [], []);
+_p("I1K1", [["e","s"],["e","ee","es"],["se"]], [], ["s"]);
+_p("I1K", [["e","es","s"],["e","ee"],["se"]], [], ["s"]);
+_p("I1N", [["e","s"],["e","ee"],["se"]], [], []);
+_p("I1X1", [["e","s"],["e","ee","s"],["se","es"]], [], []);
+_p("I1X", [["e","s"],["e","ee","s","es"],["se"]], [], []);
+_p("IK1", [["e","s"],["e","ee","se","es"]], [], ["s"]);
+_p("IK", [["e","es","s","ss"],["e","ee","se"]], [], ["s"]);
+_p("IN", [["e","s"],["e","ee","se"]], [], []);
+_p("IX1", [["e","s"],["e","ee","se","s"],["es"]], [], []);
+_p("IX", [["e","s"],["e","ee","se","s","es"]], [], []);
+_p("K1K1", [["e"],["e","ee","es"],["se"]], ["s"], ["s"]);
+_p("K1K", [["e","es"],["e","ee"],["se"]], ["s"], ["s"]);
+_p("K1N", [["e"],["e","ee"],["se"]], ["s"], []);
+_p("K1X1", [["e"],["e","ee","s"],["se","es"]], ["s"], []);
+_p("K1X", [["e"],["e","ee","s","es"],["se"]], ["s"], []);
+_p("K", [["e","es","ss"]], ["s"], ["s"]);
+_p("KK1", [["e"],["e","ee","se","es"]], ["s"], ["s"]);
+_p("KK", [["e","es","ss"],["e","ee","se"]], ["s"], ["s"]);
+_p("KN", [["e"],["e","ee","se"]], ["s"], []);
+_p("KX1", [["e"],["e","ee","se","s"],["es"]], ["s"], []);
+_p("KX", [["e"],["e","ee","se","s","es"]], ["s"], []);
+_p("N", [["e","es"]], [], ["s"]);
+_p("NK1", [["e"],["e","ee","es"]], [], ["s"]);
+_p("NK", [["e","es"],["e","ee"]], [], ["s"]);
+_p("NN", [["e"],["e","ee"]], [], []);
+_p("NX1", [["e"],["e","ee","s"],["es"]], [], []);
+_p("NX", [["e"],["e","ee","s","es"]], [], []);
+_p("X1K1", [["e"],["e","ee","es"],["s"],["se"]], [], ["s"]);
+_p("X1K", [["e","es"],["e","ee"],["s"],["se"]], [], ["s"]);
+_p("X1N", [["e"],["e","ee"],["s"],["se"]], [], []);
+_p("X1X1", [["e"],["e","ee","s"],["es","s"],["se"]], [], []);
+_p("X1X", [["e"],["e","ee","s","es"],["s"],["se"]], [], []);
+_p("X", [["e","es","s","ss"]], [], ["s"]);
+_p("XK1", [["e"],["e","ee","es"],["s","se"]], [], ["s"]);
+_p("XK", [["e","es"],["e","ee"],["s","se"]], [], ["s"]);
+_p("XN", [["e"],["e","ee"],["s","se"]], [], []);
+_p("XX1", [["e"],["e","ee","s"],["es","s","se"]], [], []);
+_p("XX", [["e"],["e","ee","s","es"],["s","se"]], [], []);
 export function isOneWay(pat: HandshakePattern): boolean {
     return pat.baseName.length === 1;

package/src/profiles.ts CHANGED Viewed

@@ -2,7 +2,7 @@
 /// SPDX-FileCopyrightText: Copyright © 2023 Tony Garnock-Jones <tonyg@leastfixedpoint.com>
 import { BLAKE2s } from './blake2';
-import { AEAD_CHACHA20_POLY1305_NONCEBYTES, AEAD_CHACHA20_POLY1305_TAGBYTES, aead_decrypt_detached, aead_encrypt_detached } from './aead';
+import { AEAD_CHACHA20_POLY1305_NONCEBYTES, AEAD_CHACHA20_POLY1305_TAGBYTES, aead_decrypt, aead_encrypt } from './aead';
 import { DHKeyPair, NoiseProtocolAlgorithms, Nonce } from './noise';
 import { randomBytes } from './random';
 import { scalarMult, scalarMultBase } from './x25519';
@@ -31,17 +31,11 @@ export class Noise_25519_ChaChaPoly_BLAKE2s extends NoiseProtocolAlgorithms {
     }
     encrypt(key: DataView, nonce: Nonce, p: Uint8Array, associated_data?: Uint8Array): Uint8Array {
-        const c = new Uint8Array(p.byteLength + AEAD_CHACHA20_POLY1305_TAGBYTES);
-        aead_encrypt_detached(p, c, p.byteLength, c.subarray(p.byteLength), key, serializeNonce(nonce), associated_data);
-        return c;
+        return aead_encrypt(p, key, serializeNonce(nonce), associated_data);
     }
     decrypt(key: DataView, nonce: Nonce, c: Uint8Array, associated_data?: Uint8Array): Uint8Array {
-        const p = new Uint8Array(c.byteLength - AEAD_CHACHA20_POLY1305_TAGBYTES);
-        if (!aead_decrypt_detached(p, c, p.byteLength, c.subarray(p.byteLength), key, serializeNonce(nonce), associated_data)) {
-            throw new Error("packet decryption failed");
-        }
-        return p;
+        return aead_decrypt(c, key, serializeNonce(nonce), associated_data);
     }
     hashName(): string {

package/test/harness.ts CHANGED Viewed

@@ -26,14 +26,14 @@ function indent(msg: string) {
     console.log(str + msg);
 }
-export async function describe(what: string, f: () => (Promise<void> | void)) {
+export async function describe(what: string, f: () => (Promise<void> | void)): Promise<void> {
     indent('- ' + what);
     testDepth++;
     await f();
     testDepth--;
 }
-export async function it(what: string, f: () => (Promise<void> | void)) {
+export async function it(what: string, f: () => (Promise<void> | void)): Promise<void> {
     try {
         testStats.total++;
         await f();
@@ -62,12 +62,13 @@ export async function runTests(patterns: string[]): Promise<void> {
     }
 }
-if (Object.is(require.main, module)) {
-    console.time('tests');
-    let patterns = process.argv.slice(2);
-    if (patterns.length === 0) patterns = ['./lib/**/*.test.js'];
-    runTests(patterns).then(() => {
+(async () => {
+    if (Object.is(require.main, module)) {
+        console.time('tests');
+        let patterns = process.argv.slice(2);
+        if (patterns.length === 0) patterns = ['./lib-test/**/*.test.js'];
+        await runTests(patterns);
         console.timeEnd('tests');
         console.log(testStats);
-    });
-}
+    }
+})();

package/test/tests/aead.test.ts CHANGED Viewed

@@ -1,4 +1,5 @@
-import { AEAD_CHACHA20_POLY1305_TAGBYTES, aead_encrypt_detached, aead_decrypt_detached } from '../../src/aead';
+import { AEAD } from '../../dist/salty-crypto.js';
+const { AEAD_CHACHA20_POLY1305_TAGBYTES, aead_encrypt_detached, aead_decrypt_detached } = AEAD;
 import { it, expect } from '../harness';
 it('section 2.8.2 from rfc 8439', () => {
@@ -22,9 +23,7 @@ it('section 2.8.2 from rfc 8439', () => {
         0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
     ]).buffer);
-    const tag = new Uint8Array(AEAD_CHACHA20_POLY1305_TAGBYTES);
-    aead_encrypt_detached(sunscreen, sunscreen, sunscreen.byteLength, tag, key, nonce, associated_data);
-    expect(sunscreen).toEqual(new Uint8Array([
+    const expectedEncrypted = new Uint8Array([
         0xd3, 0x1a, 0x8d, 0x34, 0x64, 0x8e, 0x60, 0xdb, 0x7b, 0x86, 0xaf, 0xbc, 0x53, 0xef, 0x7e, 0xc2,
         0xa4, 0xad, 0xed, 0x51, 0x29, 0x6e, 0x08, 0xfe, 0xa9, 0xe2, 0xb5, 0xa7, 0x36, 0xee, 0x62, 0xd6,
         0x3d, 0xbe, 0xa4, 0x5e, 0x8c, 0xa9, 0x67, 0x12, 0x82, 0xfa, 0xfb, 0x69, 0xda, 0x92, 0x72, 0x8b,
@@ -33,7 +32,11 @@ it('section 2.8.2 from rfc 8439', () => {
         0xfa, 0xb3, 0x24, 0xe4, 0xfa, 0xd6, 0x75, 0x94, 0x55, 0x85, 0x80, 0x8b, 0x48, 0x31, 0xd7, 0xbc,
         0x3f, 0xf4, 0xde, 0xf0, 0x8e, 0x4b, 0x7a, 0x9d, 0xe5, 0x76, 0xd2, 0x65, 0x86, 0xce, 0xc6, 0x4b,
         0x61, 0x16,
-    ]));
+    ]);
+    const tag = new Uint8Array(AEAD_CHACHA20_POLY1305_TAGBYTES);
+    aead_encrypt_detached(sunscreen, sunscreen, sunscreen.byteLength, tag, key, nonce, associated_data);
+    expect(sunscreen).toEqual(expectedEncrypted);
     expect(tag).toEqual(new Uint8Array([
         0x1a, 0xe1, 0x0b, 0x59, 0x4f, 0x09, 0xe2, 0x6a,
         0x7e, 0x90, 0x2e, 0xcb, 0xd0, 0x60, 0x06, 0x91,
@@ -45,5 +48,5 @@ it('section 2.8.2 from rfc 8439', () => {
     tag[0]++;
     expect(aead_decrypt_detached(sunscreen, sunscreen, sunscreen.byteLength, tag, key, nonce, associated_data)).toBe(false);
-    expect(sunscreen).toEqual(new Uint8Array(sunscreen_str.length));
+    expect(sunscreen).toEqual(expectedEncrypted);
 });

package/test/tests/blake2.test.ts CHANGED Viewed

@@ -1,4 +1,5 @@
-import { BLAKE2s } from '../../src/blake2';
+import { BLAKE2 } from '../../dist/salty-crypto.js';
+const { BLAKE2s } = BLAKE2;
 import { it, expect } from '../harness';
 it('Appendix B of RFC 7693', () => {

package/test/tests/chacha20.test.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import * as ChaCha from '../../src/chacha20';
+import { ChaCha20 as ChaCha } from '../../dist/salty-crypto.js';
 import { it, expect } from '../harness';
 it('chacha20_quarter_round 1', () => {

package/test/tests/noise.test.ts CHANGED Viewed

@@ -1,7 +1,16 @@
-import { DHKeyPair, NoiseHandshake, NoiseProtocolAlgorithms, TransportState } from '../../src/noise';
-import { isOneWay, lookupPattern } from '../../src/patterns';
-import { Noise_25519_ChaChaPoly_BLAKE2s } from '../../src/profiles';
-import { scalarMultBase } from '../../src/x25519';
+import { Noise, Patterns, NoiseProfiles, X25519 } from '../../dist/salty-crypto.js';
+type DHKeyPair = Noise.DHKeyPair;
+type TransportState = Noise.TransportState;
+type NoiseProtocolAlgorithms = Noise.NoiseProtocolAlgorithms;
+const { NoiseHandshake } = Noise;
+const { isOneWay, lookupPattern } = Patterns;
+const { Noise_25519_ChaChaPoly_BLAKE2s } = NoiseProfiles;
+const { scalarMultBase } = X25519;
 import { describe, it, expect } from '../harness';
 import fs from 'fs';

package/test/tests/poly1305.test.ts CHANGED Viewed

@@ -1,4 +1,6 @@
-import { Poly1305 } from '../../src/poly1305';
+import { Poly1305 as P } from '../../dist/salty-crypto.js';
+const { Poly1305 } = P;
 import { it, expect } from '../harness';
 it('section 2.5.2 from rfc 8439', () => {

package/test/tsconfig.json ADDED Viewed

@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "es2017",
+    "lib": ["ES2017", "DOM"],
+    "declaration": true,
+    "baseUrl": ".",
+    "rootDir": ".",
+    "outDir": "../lib-test",
+    "declarationDir": "../lib-test",
+    "esModuleInterop": true,
+    "moduleResolution": "node",
+    "module": "esnext",
+    "sourceMap": true,
+    "strict": true,
+    "allowJs": true
+  },
+  "include": ["**/*"]
+}

package/tsconfig.json CHANGED Viewed

@@ -3,10 +3,10 @@
     "target": "es2017",
     "lib": ["ES2017", "DOM"],
     "declaration": true,
-    "baseUrl": ".",
-    "rootDirs": ["src", "test"],
-    "outDir": "lib",
-    "declarationDir": "lib",
+    "baseUrl": "./src",
+    "rootDir": "./src",
+    "outDir": "./lib",
+    "declarationDir": "./lib",
     "esModuleInterop": true,
     "moduleResolution": "node",
     "module": "esnext",
@@ -14,5 +14,5 @@
     "strict": true,
     "allowJs": true
   },
-  "include": ["src/**/*", "test/**/*"]
+  "include": ["src/**/*"]
 }

package/watchall ADDED Viewed

@@ -0,0 +1,22 @@
+#!/bin/sh
+cd $(dirname $0)
+first=y
+open() {
+    if [ "$first" = "y" ]
+    then
+        tmux new-window "$1"
+        first=n
+    else
+        tmux split-window "$1" \; select-layout tiled
+    fi
+}
+open "yarn compile:watch"
+open "yarn rollup:watch"
+open "yarn test-compile:watch"
+open "yarn test:watch"
+tmux select-layout even-vertical