ts-mls 1.0.1

package/dist/src/leafNode.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeLeafNodeUpdate = exports.decodeLeafNodeCommit = exports.decodeLeafNodeKeyPackage = exports.decodeLeafNode = exports.encodeLeafNode = exports.encodeLeafNodeTBS = exports.encodeLeafNodeGroupInfo = exports.encodeGroupIdLeafIndex = exports.decodeLeafNodeExtensions = exports.encodeLeafNodeExtensions = exports.decodeLeafNodeInfo = exports.decodeLeafNodeInfoCommit = exports.decodeLeafNodeInfoLifetime = exports.encodeLeafNodeInfo = exports.encodeLeafNodeInfoCommit = exports.encodeLeafNodeInfoUpdate = exports.encodeLeafNodeInfoLifetime = exports.decodeLeafNodeData = exports.encodeLeafNodeData = void 0;
+exports.signLeafNodeCommit = signLeafNodeCommit;
+exports.signLeafNodeKeyPackage = signLeafNodeKeyPackage;
+exports.verifyLeafNodeSignature = verifyLeafNodeSignature;
+exports.verifyLeafNodeSignatureKeyPackage = verifyLeafNodeSignatureKeyPackage;
+const capabilities_1 = require("./capabilities");
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const credential_1 = require("./credential");
+const signature_1 = require("./crypto/signature");
+const extension_1 = require("./extension");
+const leafNodeSource_1 = require("./leafNodeSource");
+const lifetime_1 = require("./lifetime");
+exports.encodeLeafNodeData = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, variableLength_1.encodeVarLenData, credential_1.encodeCredential, capabilities_1.encodeCapabilities], (data) => [data.hpkePublicKey, data.signaturePublicKey, data.credential, data.capabilities]);
+exports.decodeLeafNodeData = (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData, variableLength_1.decodeVarLenData, credential_1.decodeCredential, capabilities_1.decodeCapabilities], (hpkePublicKey, signaturePublicKey, credential, capabilities) => ({
+    hpkePublicKey,
+    signaturePublicKey,
+    credential,
+    capabilities,
+}));
+exports.encodeLeafNodeInfoLifetime = (0, tlsEncoder_1.contramapEncoders)([leafNodeSource_1.encodeLeafNodeSource, lifetime_1.encodeLifetime], (info) => ["key_package", info.lifetime]);
+exports.encodeLeafNodeInfoUpdate = (0, tlsEncoder_1.contramapEncoder)(leafNodeSource_1.encodeLeafNodeSource, (i) => i.leafNodeSource);
+exports.encodeLeafNodeInfoCommit = (0, tlsEncoder_1.contramapEncoders)([leafNodeSource_1.encodeLeafNodeSource, variableLength_1.encodeVarLenData], (info) => ["commit", info.parentHash]);
+const encodeLeafNodeInfo = (info) => {
+    switch (info.leafNodeSource) {
+        case "key_package":
+            return (0, exports.encodeLeafNodeInfoLifetime)(info);
+        case "update":
+            return (0, exports.encodeLeafNodeInfoUpdate)(info);
+        case "commit":
+            return (0, exports.encodeLeafNodeInfoCommit)(info);
+    }
+};
+exports.encodeLeafNodeInfo = encodeLeafNodeInfo;
+exports.decodeLeafNodeInfoLifetime = (0, tlsDecoder_1.mapDecoder)(lifetime_1.decodeLifetime, (lifetime) => ({
+    leafNodeSource: "key_package",
+    lifetime,
+}));
+exports.decodeLeafNodeInfoCommit = (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData], (parentHash) => ({
+    leafNodeSource: "commit",
+    parentHash,
+}));
+exports.decodeLeafNodeInfo = (0, tlsDecoder_1.flatMapDecoder)(leafNodeSource_1.decodeLeafNodeSource, (leafNodeSource) => {
+    switch (leafNodeSource) {
+        case "key_package":
+            return exports.decodeLeafNodeInfoLifetime;
+        case "update":
+            return (0, tlsDecoder_1.succeedDecoder)({ leafNodeSource });
+        case "commit":
+            return exports.decodeLeafNodeInfoCommit;
+    }
+});
+exports.encodeLeafNodeExtensions = (0, tlsEncoder_1.contramapEncoder)((0, variableLength_1.encodeVarLenType)(extension_1.encodeExtension), (ext) => ext.extensions);
+exports.decodeLeafNodeExtensions = (0, tlsDecoder_1.mapDecoder)((0, variableLength_1.decodeVarLenType)(extension_1.decodeExtension), (extensions) => ({ extensions }));
+exports.encodeGroupIdLeafIndex = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, number_1.encodeUint32], (g) => [g.groupId, g.leafIndex]);
+const encodeLeafNodeGroupInfo = (info) => {
+    switch (info.leafNodeSource) {
+        case "key_package":
+            return new Uint8Array();
+        case "update":
+        case "commit":
+            return (0, exports.encodeGroupIdLeafIndex)(info);
+    }
+};
+exports.encodeLeafNodeGroupInfo = encodeLeafNodeGroupInfo;
+exports.encodeLeafNodeTBS = (0, tlsEncoder_1.contramapEncoders)([exports.encodeLeafNodeData, exports.encodeLeafNodeInfo, exports.encodeLeafNodeExtensions, exports.encodeLeafNodeGroupInfo], (tbs) => [tbs, tbs, tbs, tbs.info]);
+exports.encodeLeafNode = (0, tlsEncoder_1.contramapEncoders)([exports.encodeLeafNodeData, exports.encodeLeafNodeInfo, exports.encodeLeafNodeExtensions, variableLength_1.encodeVarLenData], (leafNode) => [leafNode, leafNode, leafNode, leafNode.signature]);
+exports.decodeLeafNode = (0, tlsDecoder_1.mapDecoders)([exports.decodeLeafNodeData, exports.decodeLeafNodeInfo, exports.decodeLeafNodeExtensions, variableLength_1.decodeVarLenData], (data, info, extensions, signature) => ({
+    ...data,
+    ...info,
+    ...extensions,
+    signature,
+}));
+exports.decodeLeafNodeKeyPackage = (0, tlsDecoder_1.mapDecoderOption)(exports.decodeLeafNode, (ln) => ln.leafNodeSource === "key_package" ? ln : undefined);
+exports.decodeLeafNodeCommit = (0, tlsDecoder_1.mapDecoderOption)(exports.decodeLeafNode, (ln) => ln.leafNodeSource === "commit" ? ln : undefined);
+exports.decodeLeafNodeUpdate = (0, tlsDecoder_1.mapDecoderOption)(exports.decodeLeafNode, (ln) => ln.leafNodeSource === "update" ? ln : undefined);
+function toTbs(leafNode, groupId, leafIndex) {
+    return { ...leafNode, info: { leafNodeSource: leafNode.leafNodeSource, groupId, leafIndex } };
+}
+async function signLeafNodeCommit(tbs, signaturePrivateKey, sig) {
+    return { ...tbs, signature: await (0, signature_1.signWithLabel)(signaturePrivateKey, "LeafNodeTBS", (0, exports.encodeLeafNodeTBS)(tbs), sig) };
+}
+async function signLeafNodeKeyPackage(tbs, signaturePrivateKey, sig) {
+    return { ...tbs, signature: await (0, signature_1.signWithLabel)(signaturePrivateKey, "LeafNodeTBS", (0, exports.encodeLeafNodeTBS)(tbs), sig) };
+}
+function verifyLeafNodeSignature(leaf, groupId, leafIndex, sig) {
+    return (0, signature_1.verifyWithLabel)(leaf.signaturePublicKey, "LeafNodeTBS", (0, exports.encodeLeafNodeTBS)(toTbs(leaf, groupId, leafIndex)), leaf.signature, sig);
+}
+function verifyLeafNodeSignatureKeyPackage(leaf, sig) {
+    return (0, signature_1.verifyWithLabel)(leaf.signaturePublicKey, "LeafNodeTBS", (0, exports.encodeLeafNodeTBS)({ ...leaf, info: { leafNodeSource: leaf.leafNodeSource } }), leaf.signature, sig);
+}
+//# sourceMappingURL=leafNode.js.map

package/dist/src/leafNode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leafNode.js","sourceRoot":"","sources":["../../src/leafNode.ts"],"names":[],"mappings":";;;AA+KA,gDAMC;AAED,wDAMC;AAED,0DAaC;AAED,8EAQC;AAtND,iDAAqF;AACrF,2CAA6C;AAC7C,mDAAuH;AACvH,mDAAiF;AACjF,2DAA+G;AAC/G,6CAA6E;AAC7E,kDAA8E;AAC9E,2CAAyE;AACzE,qDAAiG;AACjG,yCAAqE;AASxD,QAAA,kBAAkB,GAA0B,IAAA,8BAAiB,EACxE,CAAC,iCAAgB,EAAE,iCAAgB,EAAE,6BAAgB,EAAE,iCAAkB,CAAC,EAC1E,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAU,CACrG,CAAA;AAEY,QAAA,kBAAkB,GAA0B,IAAA,wBAAW,EAClE,CAAC,iCAAgB,EAAE,iCAAgB,EAAE,6BAAgB,EAAE,iCAAkB,CAAC,EAC1E,CAAC,aAAa,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAChE,aAAa;IACb,kBAAkB;IAClB,UAAU;IACV,YAAY;CACb,CAAC,CACH,CAAA;AAOY,QAAA,0BAA0B,GAAoC,IAAA,8BAAiB,EAC1F,CAAC,qCAAoB,EAAE,yBAAc,CAAC,EACtC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAU,CAClD,CAAA;AAEY,QAAA,wBAAwB,GAAgC,IAAA,6BAAgB,EACnF,qCAAoB,EACpB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CACxB,CAAA;AAEY,QAAA,wBAAwB,GAAgC,IAAA,8BAAiB,EACpF,CAAC,qCAAoB,EAAE,iCAAgB,CAAC,EACxC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAU,CAC/C,CAAA;AAEM,MAAM,kBAAkB,GAA0B,CAAC,IAAI,EAAE,EAAE;IAChE,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,KAAK,aAAa;YAChB,OAAO,IAAA,kCAA0B,EAAC,IAAI,CAAC,CAAA;QACzC,KAAK,QAAQ;YACX,OAAO,IAAA,gCAAwB,EAAC,IAAI,CAAC,CAAA;QACvC,KAAK,QAAQ;YACX,OAAO,IAAA,gCAAwB,EAAC,IAAI,CAAC,CAAA;IACzC,CAAC;AACH,CAAC,CAAA;AATY,QAAA,kBAAkB,sBAS9B;AAEY,QAAA,0BAA0B,GAAoC,IAAA,uBAAU,EAAC,yBAAc,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnH,cAAc,EAAE,aAAa;IAC7B,QAAQ;CACT,CAAC,CAAC,CAAA;AAEU,QAAA,wBAAwB,GAAgC,IAAA,wBAAW,EAAC,CAAC,iCAAgB,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACpH,cAAc,EAAE,QAAQ;IACxB,UAAU;CACX,CAAC,CAAC,CAAA;AAEU,QAAA,kBAAkB,GAA0B,IAAA,2BAAc,EACrE,qCAAoB,EACpB,CAAC,cAAc,EAAyB,EAAE;IACxC,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,aAAa;YAChB,OAAO,kCAA0B,CAAA;QACnC,KAAK,QAAQ;YACX,OAAO,IAAA,2BAAc,EAAC,EAAE,cAAc,EAAE,CAAC,CAAA;QAC3C,KAAK,QAAQ;YACX,OAAO,gCAAwB,CAAA;IACnC,CAAC;AACH,CAAC,CACF,CAAA;AAIY,QAAA,wBAAwB,GAAgC,IAAA,6BAAgB,EACnF,IAAA,iCAAgB,EAAC,2BAAe,CAAC,EACjC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CACxB,CAAA;AAEY,QAAA,wBAAwB,GAAgC,IAAA,uBAAU,EAC7E,IAAA,iCAAgB,EAAC,2BAAe,CAAC,EACjC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CACjC,CAAA;AAQY,QAAA,sBAAsB,GAA8B,IAAA,8BAAiB,EAChF,CAAC,iCAAgB,EAAE,qBAAY,CAAC,EAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAU,CACzC,CAAA;AAIM,MAAM,uBAAuB,GAA+B,CAAC,IAAI,EAAE,EAAE;IAC1E,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,KAAK,aAAa;YAChB,OAAO,IAAI,UAAU,EAAE,CAAA;QACzB,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAA,8BAAsB,EAAC,IAAI,CAAC,CAAA;IACvC,CAAC;AACH,CAAC,CAAA;AARY,QAAA,uBAAuB,2BAQnC;AAUY,QAAA,iBAAiB,GAAyB,IAAA,8BAAiB,EACtE,CAAC,0BAAkB,EAAE,0BAAkB,EAAE,gCAAwB,EAAE,+BAAuB,CAAC,EAC3F,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAU,CAC5C,CAAA;AAIY,QAAA,cAAc,GAAsB,IAAA,8BAAiB,EAChE,CAAC,0BAAkB,EAAE,0BAAkB,EAAE,gCAAwB,EAAE,iCAAgB,CAAC,EACpF,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAU,CAC1E,CAAA;AAEY,QAAA,cAAc,GAAsB,IAAA,wBAAW,EAC1D,CAAC,0BAAkB,EAAE,0BAAkB,EAAE,gCAAwB,EAAE,iCAAgB,CAAC,EACpF,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACtC,GAAG,IAAI;IACP,GAAG,IAAI;IACP,GAAG,UAAU;IACb,SAAS;CACV,CAAC,CACH,CAAA;AAIY,QAAA,wBAAwB,GAAgC,IAAA,6BAAgB,EAAC,sBAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3G,EAAE,CAAC,cAAc,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CACrD,CAAA;AAIY,QAAA,oBAAoB,GAA4B,IAAA,6BAAgB,EAAC,sBAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CACnG,EAAE,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAA;AAIY,QAAA,oBAAoB,GAA4B,IAAA,6BAAgB,EAAC,sBAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CACnG,EAAE,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAA;AAED,SAAS,KAAK,CAAC,QAAkB,EAAE,OAAmB,EAAE,SAAiB;IACvE,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAA;AAC/F,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,GAAsB,EACtB,mBAA+B,EAC/B,GAAc;IAEd,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,MAAM,IAAA,yBAAa,EAAC,mBAAmB,EAAE,aAAa,EAAE,IAAA,yBAAiB,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;AACpH,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,GAA0B,EAC1B,mBAA+B,EAC/B,GAAc;IAEd,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,MAAM,IAAA,yBAAa,EAAC,mBAAmB,EAAE,aAAa,EAAE,IAAA,yBAAiB,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;AACpH,CAAC;AAED,SAAgB,uBAAuB,CACrC,IAAc,EACd,OAAmB,EACnB,SAAiB,EACjB,GAAc;IAEd,OAAO,IAAA,2BAAe,EACpB,IAAI,CAAC,kBAAkB,EACvB,aAAa,EACb,IAAA,yBAAiB,EAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAClD,IAAI,CAAC,SAAS,EACd,GAAG,CACJ,CAAA;AACH,CAAC;AAED,SAAgB,iCAAiC,CAAC,IAAwB,EAAE,GAAc;IACxF,OAAO,IAAA,2BAAe,EACpB,IAAI,CAAC,kBAAkB,EACvB,aAAa,EACb,IAAA,yBAAiB,EAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,EAC7E,IAAI,CAAC,SAAS,EACd,GAAG,CACJ,CAAA;AACH,CAAC"}

package/dist/src/leafNodeSource.d.ts

@@ -0,0 +1,12 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+declare const leafNodeSources: {
+    readonly key_package: 1;
+    readonly update: 2;
+    readonly commit: 3;
+};
+export type LeafNodeSourceName = keyof typeof leafNodeSources;
+export type LeafNodeSourceValue = (typeof leafNodeSources)[LeafNodeSourceName];
+export declare const encodeLeafNodeSource: Encoder<LeafNodeSourceName>;
+export declare const decodeLeafNodeSource: Decoder<LeafNodeSourceName>;
+export {};

package/dist/src/leafNodeSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leafNodeSource.d.ts","sourceRoot":"","sources":["../../src/leafNodeSource.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAoB,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAoB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAG9D,QAAA,MAAM,eAAe;;;;CAIX,CAAA;AAEV,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,eAAe,CAAA;AAC7D,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,kBAAkB,CAAC,CAAA;AAE9E,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,kBAAkB,CAG5D,CAAA;AAED,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,kBAAkB,CAG5D,CAAA"}

package/dist/src/leafNodeSource.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeLeafNodeSource = exports.encodeLeafNodeSource = void 0;
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const enumHelpers_1 = require("./util/enumHelpers");
+const leafNodeSources = {
+    key_package: 1,
+    update: 2,
+    commit: 3,
+};
+exports.encodeLeafNodeSource = (0, tlsEncoder_1.contramapEncoder)(number_1.encodeUint8, (t) => leafNodeSources[t]);
+exports.decodeLeafNodeSource = (0, tlsDecoder_1.mapDecoderOption)(number_1.decodeUint8, (0, enumHelpers_1.enumNumberToKey)(leafNodeSources));
+//# sourceMappingURL=leafNodeSource.js.map

package/dist/src/leafNodeSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leafNodeSource.js","sourceRoot":"","sources":["../../src/leafNodeSource.ts"],"names":[],"mappings":";;;AAAA,2CAAyD;AACzD,mDAA8D;AAC9D,mDAA8D;AAC9D,oDAAoD;AAEpD,MAAM,eAAe,GAAG;IACtB,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;CACD,CAAA;AAKG,QAAA,oBAAoB,GAAgC,IAAA,6BAAgB,EAC/E,oBAAW,EACX,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAC1B,CAAA;AAEY,QAAA,oBAAoB,GAAgC,IAAA,6BAAgB,EAC/E,oBAAW,EACX,IAAA,6BAAe,EAAC,eAAe,CAAC,CACjC,CAAA"}

package/dist/src/lifetime.d.ts

@@ -0,0 +1,9 @@
+import { Encoder } from "./codec/tlsEncoder";
+import { Decoder } from "./codec/tlsDecoder";
+export type Lifetime = {
+    notBefore: bigint;
+    notAfter: bigint;
+};
+export declare const encodeLifetime: Encoder<Lifetime>;
+export declare const decodeLifetime: Decoder<Lifetime>;
+export declare const defaultLifetime: Lifetime;

package/dist/src/lifetime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifetime.d.ts","sourceRoot":"","sources":["../../src/lifetime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAqB,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AAEzD,MAAM,MAAM,QAAQ,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE9D,eAAO,MAAM,cAAc,EAAE,OAAO,CAAC,QAAQ,CAG5C,CAAA;AAED,eAAO,MAAM,cAAc,EAAE,OAAO,CAAC,QAAQ,CAG1C,CAAA;AACH,eAAO,MAAM,eAAe,EAAE,QAG7B,CAAA"}

package/dist/src/lifetime.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultLifetime = exports.decodeLifetime = exports.encodeLifetime = void 0;
+const number_1 = require("./codec/number");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+exports.encodeLifetime = (0, tlsEncoder_1.contramapEncoders)([number_1.encodeUint64, number_1.encodeUint64], (lt) => [lt.notBefore, lt.notAfter]);
+exports.decodeLifetime = (0, tlsDecoder_1.mapDecoders)([number_1.decodeUint64, number_1.decodeUint64], (notBefore, notAfter) => ({
+    notBefore,
+    notAfter,
+}));
+exports.defaultLifetime = {
+    notBefore: 0n,
+    notAfter: 9223372036854775807n,
+};
+//# sourceMappingURL=lifetime.js.map

package/dist/src/lifetime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifetime.js","sourceRoot":"","sources":["../../src/lifetime.ts"],"names":[],"mappings":";;;AAAA,2CAA2D;AAC3D,mDAA+D;AAC/D,mDAAyD;AAI5C,QAAA,cAAc,GAAsB,IAAA,8BAAiB,EAChE,CAAC,qBAAY,EAAE,qBAAY,CAAC,EAC5B,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAU,CAC7C,CAAA;AAEY,QAAA,cAAc,GAAsB,IAAA,wBAAW,EAAC,CAAC,qBAAY,EAAE,qBAAY,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnH,SAAS;IACT,QAAQ;CACT,CAAC,CAAC,CAAA;AACU,QAAA,eAAe,GAAa;IACvC,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,oBAAoB;CAC/B,CAAA"}

package/dist/src/lifetimeConfig.d.ts

@@ -0,0 +1,5 @@
+export type LifetimeConfig = {
+    maximumTotalLifetime: bigint;
+    validateLifetimeOnReceive: boolean;
+};
+export declare const defaultLifetimeConfig: LifetimeConfig;

package/dist/src/lifetimeConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifetimeConfig.d.ts","sourceRoot":"","sources":["../../src/lifetimeConfig.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG;IAC3B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,yBAAyB,EAAE,OAAO,CAAA;CACnC,CAAA;AAED,eAAO,MAAM,qBAAqB,EAAE,cAGnC,CAAA"}

package/dist/src/lifetimeConfig.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultLifetimeConfig = void 0;
+exports.defaultLifetimeConfig = {
+    maximumTotalLifetime: 2628000n, // 1 month
+    validateLifetimeOnReceive: false,
+};
+//# sourceMappingURL=lifetimeConfig.js.map

package/dist/src/lifetimeConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifetimeConfig.js","sourceRoot":"","sources":["../../src/lifetimeConfig.ts"],"names":[],"mappings":";;;AAKa,QAAA,qBAAqB,GAAmB;IACnD,oBAAoB,EAAE,QAAQ,EAAE,UAAU;IAC1C,yBAAyB,EAAE,KAAK;CACjC,CAAA"}

package/dist/src/message.d.ts

@@ -0,0 +1,42 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { GroupInfo } from "./groupInfo";
+import { KeyPackage } from "./keyPackage";
+import { PrivateMessage } from "./privateMessage";
+import { ProtocolVersionName } from "./protocolVersion";
+import { PublicMessage } from "./publicMessage";
+import { Welcome } from "./welcome";
+export type MLSMessage = MlsMessageProtocol & MlsMessageContent;
+export type MlsMessageProtocol = {
+    version: ProtocolVersionName;
+};
+export type MlsMessageContent = MlsWelcome | MlsPrivateMessage | MlsGroupInfo | MlsKeyPackage | MlsPublicMessage;
+export type MlsWelcome = {
+    wireformat: "mls_welcome";
+    welcome: Welcome;
+};
+export type MlsPrivateMessage = {
+    wireformat: "mls_private_message";
+    privateMessage: PrivateMessage;
+};
+export type MlsGroupInfo = {
+    wireformat: "mls_group_info";
+    groupInfo: GroupInfo;
+};
+export type MlsKeyPackage = {
+    wireformat: "mls_key_package";
+    keyPackage: KeyPackage;
+};
+export type MlsPublicMessage = {
+    wireformat: "mls_public_message";
+    publicMessage: PublicMessage;
+};
+export declare const encodeMlsMessageContent: Encoder<MlsMessageContent>;
+export declare const encodeMlsPublicMessage: Encoder<MlsPublicMessage>;
+export declare const encodeMlsWelcome: Encoder<MlsWelcome>;
+export declare const encodeMlsPrivateMessage: Encoder<MlsPrivateMessage>;
+export declare const encodeMlsGroupInfo: Encoder<MlsGroupInfo>;
+export declare const encodeMlsKeyPackage: Encoder<MlsKeyPackage>;
+export declare const decodeMlsMessageContent: Decoder<MlsMessageContent>;
+export declare const encodeMlsMessage: Encoder<MLSMessage>;
+export declare const decodeMlsMessage: Decoder<MLSMessage>;

package/dist/src/message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAA2C,MAAM,oBAAoB,CAAA;AACrF,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAoC,SAAS,EAAE,MAAM,aAAa,CAAA;AACzE,OAAO,EAAsC,UAAU,EAAE,MAAM,cAAc,CAAA;AAC7E,OAAO,EAA8C,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC7F,OAAO,EAAgD,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACrG,OAAO,EAA4C,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACzF,OAAO,EAAgC,OAAO,EAAE,MAAM,WAAW,CAAA;AAGjE,MAAM,MAAM,UAAU,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;AAE/D,MAAM,MAAM,kBAAkB,GAAG;IAAE,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAA;AAEjE,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,iBAAiB,GAAG,YAAY,GAAG,aAAa,GAAG,gBAAgB,CAAA;AAChH,MAAM,MAAM,UAAU,GAAG;IAAE,UAAU,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAA;AACxE,MAAM,MAAM,iBAAiB,GAAG;IAAE,UAAU,EAAE,qBAAqB,CAAC;IAAC,cAAc,EAAE,cAAc,CAAA;CAAE,CAAA;AACrG,MAAM,MAAM,YAAY,GAAG;IAAE,UAAU,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAA;AACjF,MAAM,MAAM,aAAa,GAAG;IAAE,UAAU,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAA;AACrF,MAAM,MAAM,gBAAgB,GAAG;IAAE,UAAU,EAAE,oBAAoB,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAE,CAAA;AAEjG,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CAa9D,CAAA;AAED,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,gBAAgB,CAG5D,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAGhD,CAAA;AAED,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CAG9D,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAGpD,CAAA;AAED,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAGtD,CAAA;AAED,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CAgB9D,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAGhD,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAGhD,CAAA"}

package/dist/src/message.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeMlsMessage = exports.encodeMlsMessage = exports.decodeMlsMessageContent = exports.encodeMlsKeyPackage = exports.encodeMlsGroupInfo = exports.encodeMlsPrivateMessage = exports.encodeMlsWelcome = exports.encodeMlsPublicMessage = exports.encodeMlsMessageContent = void 0;
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const groupInfo_1 = require("./groupInfo");
+const keyPackage_1 = require("./keyPackage");
+const privateMessage_1 = require("./privateMessage");
+const protocolVersion_1 = require("./protocolVersion");
+const publicMessage_1 = require("./publicMessage");
+const welcome_1 = require("./welcome");
+const wireformat_1 = require("./wireformat");
+const encodeMlsMessageContent = (mc) => {
+    switch (mc.wireformat) {
+        case "mls_public_message":
+            return (0, exports.encodeMlsPublicMessage)(mc);
+        case "mls_welcome":
+            return (0, exports.encodeMlsWelcome)(mc);
+        case "mls_private_message":
+            return (0, exports.encodeMlsPrivateMessage)(mc);
+        case "mls_group_info":
+            return (0, exports.encodeMlsGroupInfo)(mc);
+        case "mls_key_package":
+            return (0, exports.encodeMlsKeyPackage)(mc);
+    }
+};
+exports.encodeMlsMessageContent = encodeMlsMessageContent;
+exports.encodeMlsPublicMessage = (0, tlsEncoder_1.contramapEncoders)([wireformat_1.encodeWireformat, publicMessage_1.encodePublicMessage], (msg) => [msg.wireformat, msg.publicMessage]);
+exports.encodeMlsWelcome = (0, tlsEncoder_1.contramapEncoders)([wireformat_1.encodeWireformat, welcome_1.encodeWelcome], (wm) => [wm.wireformat, wm.welcome]);
+exports.encodeMlsPrivateMessage = (0, tlsEncoder_1.contramapEncoders)([wireformat_1.encodeWireformat, privateMessage_1.encodePrivateMessage], (pm) => [pm.wireformat, pm.privateMessage]);
+exports.encodeMlsGroupInfo = (0, tlsEncoder_1.contramapEncoders)([wireformat_1.encodeWireformat, groupInfo_1.encodeGroupInfo], (gi) => [gi.wireformat, gi.groupInfo]);
+exports.encodeMlsKeyPackage = (0, tlsEncoder_1.contramapEncoders)([wireformat_1.encodeWireformat, keyPackage_1.encodeKeyPackage], (kp) => [kp.wireformat, kp.keyPackage]);
+exports.decodeMlsMessageContent = (0, tlsDecoder_1.flatMapDecoder)(wireformat_1.decodeWireformat, (wireformat) => {
+    switch (wireformat) {
+        case "mls_public_message":
+            return (0, tlsDecoder_1.mapDecoder)(publicMessage_1.decodePublicMessage, (publicMessage) => ({ wireformat, publicMessage }));
+        case "mls_welcome":
+            return (0, tlsDecoder_1.mapDecoder)(welcome_1.decodeWelcome, (welcome) => ({ wireformat, welcome }));
+        case "mls_private_message":
+            return (0, tlsDecoder_1.mapDecoder)(privateMessage_1.decodePrivateMessage, (privateMessage) => ({ wireformat, privateMessage }));
+        case "mls_group_info":
+            return (0, tlsDecoder_1.mapDecoder)(groupInfo_1.decodeGroupInfo, (groupInfo) => ({ wireformat, groupInfo }));
+        case "mls_key_package":
+            return (0, tlsDecoder_1.mapDecoder)(keyPackage_1.decodeKeyPackage, (keyPackage) => ({ wireformat, keyPackage }));
+    }
+});
+exports.encodeMlsMessage = (0, tlsEncoder_1.contramapEncoders)([protocolVersion_1.encodeProtocolVersion, exports.encodeMlsMessageContent], (w) => [w.version, w]);
+exports.decodeMlsMessage = (0, tlsDecoder_1.mapDecoders)([protocolVersion_1.decodeProtocolVersion, exports.decodeMlsMessageContent], (version, mc) => ({ ...mc, version }));
+//# sourceMappingURL=message.js.map

package/dist/src/message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../../src/message.ts"],"names":[],"mappings":";;;AAAA,mDAAqF;AACrF,mDAA+D;AAC/D,2CAAyE;AACzE,6CAA6E;AAC7E,qDAA6F;AAC7F,uDAAqG;AACrG,mDAAyF;AACzF,uCAAiE;AACjE,6CAAiE;AAa1D,MAAM,uBAAuB,GAA+B,CAAC,EAAE,EAAE,EAAE;IACxE,QAAQ,EAAE,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,oBAAoB;YACvB,OAAO,IAAA,8BAAsB,EAAC,EAAE,CAAC,CAAA;QACnC,KAAK,aAAa;YAChB,OAAO,IAAA,wBAAgB,EAAC,EAAE,CAAC,CAAA;QAC7B,KAAK,qBAAqB;YACxB,OAAO,IAAA,+BAAuB,EAAC,EAAE,CAAC,CAAA;QACpC,KAAK,gBAAgB;YACnB,OAAO,IAAA,0BAAkB,EAAC,EAAE,CAAC,CAAA;QAC/B,KAAK,iBAAiB;YACpB,OAAO,IAAA,2BAAmB,EAAC,EAAE,CAAC,CAAA;IAClC,CAAC;AACH,CAAC,CAAA;AAbY,QAAA,uBAAuB,2BAanC;AAEY,QAAA,sBAAsB,GAA8B,IAAA,8BAAiB,EAChF,CAAC,6BAAgB,EAAE,mCAAmB,CAAC,EACvC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAU,CACtD,CAAA;AAEY,QAAA,gBAAgB,GAAwB,IAAA,8BAAiB,EACpE,CAAC,6BAAgB,EAAE,uBAAa,CAAC,EACjC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAU,CAC7C,CAAA;AAEY,QAAA,uBAAuB,GAA+B,IAAA,8BAAiB,EAClF,CAAC,6BAAgB,EAAE,qCAAoB,CAAC,EACxC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,cAAc,CAAU,CACpD,CAAA;AAEY,QAAA,kBAAkB,GAA0B,IAAA,8BAAiB,EACxE,CAAC,6BAAgB,EAAE,2BAAe,CAAC,EACnC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAU,CAC/C,CAAA;AAEY,QAAA,mBAAmB,GAA2B,IAAA,8BAAiB,EAC1E,CAAC,6BAAgB,EAAE,6BAAgB,CAAC,EACpC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAU,CAChD,CAAA;AAEY,QAAA,uBAAuB,GAA+B,IAAA,2BAAc,EAC/E,6BAAgB,EAChB,CAAC,UAAU,EAA8B,EAAE;IACzC,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,oBAAoB;YACvB,OAAO,IAAA,uBAAU,EAAC,mCAAmB,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC,CAAA;QAC5F,KAAK,aAAa;YAChB,OAAO,IAAA,uBAAU,EAAC,uBAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QAC1E,KAAK,qBAAqB;YACxB,OAAO,IAAA,uBAAU,EAAC,qCAAoB,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,CAAA;QAC/F,KAAK,gBAAgB;YACnB,OAAO,IAAA,uBAAU,EAAC,2BAAe,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;QAChF,KAAK,iBAAiB;YACpB,OAAO,IAAA,uBAAU,EAAC,6BAAgB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;IACrF,CAAC;AACH,CAAC,CACF,CAAA;AAEY,QAAA,gBAAgB,GAAwB,IAAA,8BAAiB,EACpE,CAAC,uCAAqB,EAAE,+BAAuB,CAAC,EAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAU,CAC/B,CAAA;AAEY,QAAA,gBAAgB,GAAwB,IAAA,wBAAW,EAC9D,CAAC,uCAAqB,EAAE,+BAAuB,CAAC,EAChD,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CACtC,CAAA"}

package/dist/src/messageProtection.d.ts

@@ -0,0 +1,36 @@
+import { AuthenticatedContent } from "./authenticatedContent";
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+import { GroupContext } from "./groupContext";
+import { Proposal } from "./proposal";
+import { PrivateMessage, PrivateMessageContent } from "./privateMessage";
+import { SecretTree } from "./secretTree";
+import { RatchetTree } from "./ratchetTree";
+import { SenderData } from "./sender";
+import { KeyRetentionConfig } from "./keyRetentionConfig";
+import { MlsError } from "./mlsError";
+import { PaddingConfig } from "./paddingConfig";
+export type ProtectApplicationDataResult = {
+    privateMessage: PrivateMessage;
+    newSecretTree: SecretTree;
+};
+export declare function protectApplicationData(signKey: Uint8Array, senderDataSecret: Uint8Array, applicationData: Uint8Array, authenticatedData: Uint8Array, groupContext: GroupContext, secretTree: SecretTree, leafIndex: number, paddingConfig: PaddingConfig, cs: CiphersuiteImpl): Promise<ProtectApplicationDataResult>;
+export type ProtectProposalResult = {
+    privateMessage: PrivateMessage;
+    newSecretTree: SecretTree;
+    proposalRef: Uint8Array;
+};
+export declare function protectProposal(signKey: Uint8Array, senderDataSecret: Uint8Array, p: Proposal, authenticatedData: Uint8Array, groupContext: GroupContext, secretTree: SecretTree, leafIndex: number, paddingConfig: PaddingConfig, cs: CiphersuiteImpl): Promise<ProtectProposalResult>;
+export type ProtectResult = {
+    privateMessage: PrivateMessage;
+    tree: SecretTree;
+};
+export declare function protect(senderDataSecret: Uint8Array, authenticatedData: Uint8Array, groupContext: GroupContext, secretTree: SecretTree, content: PrivateMessageContent, leafIndex: number, config: PaddingConfig, cs: CiphersuiteImpl): Promise<{
+    privateMessage: PrivateMessage;
+    tree: SecretTree;
+}>;
+export type UnprotectResult = {
+    content: AuthenticatedContent;
+    tree: SecretTree;
+};
+export declare function unprotectPrivateMessage(senderDataSecret: Uint8Array, msg: PrivateMessage, secretTree: SecretTree, ratchetTree: RatchetTree, groupContext: GroupContext, config: KeyRetentionConfig, cs: CiphersuiteImpl, overrideSignatureKey?: Uint8Array): Promise<UnprotectResult>;
+export declare function validateSenderData(senderData: SenderData, tree: RatchetTree): MlsError | undefined;

package/dist/src/messageProtection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageProtection.d.ts","sourceRoot":"","sources":["../../src/messageProtection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAmB,MAAM,wBAAwB,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAMtD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAOL,cAAc,EACd,qBAAqB,EAEtB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAuC,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9E,OAAO,EAAsC,WAAW,EAAE,MAAM,eAAe,CAAA;AAC/E,OAAO,EAAE,UAAU,EAAiB,MAAM,UAAU,CAAA;AAEpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAwD,QAAQ,EAAiB,MAAM,YAAY,CAAA;AAC1G,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE/C,MAAM,MAAM,4BAA4B,GAAG;IAAE,cAAc,EAAE,cAAc,CAAC;IAAC,aAAa,EAAE,UAAU,CAAA;CAAE,CAAA;AAExG,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,UAAU,EACnB,gBAAgB,EAAE,UAAU,EAC5B,eAAe,EAAE,UAAU,EAC3B,iBAAiB,EAAE,UAAU,EAC7B,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,aAAa,EAC5B,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,4BAA4B,CAAC,CAsCvC;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,cAAc,CAAA;IAC9B,aAAa,EAAE,UAAU,CAAA;IACzB,WAAW,EAAE,UAAU,CAAA;CACxB,CAAA;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,UAAU,EACnB,gBAAgB,EAAE,UAAU,EAC5B,CAAC,EAAE,QAAQ,EACX,iBAAiB,EAAE,UAAU,EAC7B,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,aAAa,EAC5B,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,cAAc,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAEhF,wBAAsB,OAAO,CAC3B,gBAAgB,EAAE,UAAU,EAC5B,iBAAiB,EAAE,UAAU,EAC7B,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,EACrB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC;IAAE,cAAc,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAkD/D;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAEjF,wBAAsB,uBAAuB,CAC3C,gBAAgB,EAAE,UAAU,EAC5B,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,WAAW,EACxB,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,kBAAkB,EAC1B,EAAE,EAAE,eAAe,EACnB,oBAAoB,CAAC,EAAE,UAAU,GAChC,OAAO,CAAC,eAAe,CAAC,CAyC1B;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAGlG"}

package/dist/src/messageProtection.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.protectApplicationData = protectApplicationData;
+exports.protectProposal = protectProposal;
+exports.protect = protect;
+exports.unprotectPrivateMessage = unprotectPrivateMessage;
+exports.validateSenderData = validateSenderData;
+const authenticatedContent_1 = require("./authenticatedContent");
+const framedContent_1 = require("./framedContent");
+const privateMessage_1 = require("./privateMessage");
+const secretTree_1 = require("./secretTree");
+const ratchetTree_1 = require("./ratchetTree");
+const treemath_1 = require("./treemath");
+const mlsError_1 = require("./mlsError");
+async function protectApplicationData(signKey, senderDataSecret, applicationData, authenticatedData, groupContext, secretTree, leafIndex, paddingConfig, cs) {
+    const tbs = {
+        protocolVersion: groupContext.version,
+        wireformat: "mls_private_message",
+        content: {
+            contentType: "application",
+            applicationData,
+            groupId: groupContext.groupId,
+            epoch: groupContext.epoch,
+            sender: {
+                senderType: "member",
+                leafIndex: leafIndex,
+            },
+            authenticatedData,
+        },
+        senderType: "member",
+        context: groupContext,
+    };
+    const auth = await (0, framedContent_1.signFramedContentApplicationOrProposal)(signKey, tbs, cs);
+    const content = {
+        ...tbs.content,
+        auth,
+    };
+    const result = await protect(senderDataSecret, authenticatedData, groupContext, secretTree, content, leafIndex, paddingConfig, cs);
+    return { newSecretTree: result.tree, privateMessage: result.privateMessage };
+}
+async function protectProposal(signKey, senderDataSecret, p, authenticatedData, groupContext, secretTree, leafIndex, paddingConfig, cs) {
+    const tbs = {
+        protocolVersion: groupContext.version,
+        wireformat: "mls_private_message",
+        content: {
+            contentType: "proposal",
+            proposal: p,
+            groupId: groupContext.groupId,
+            epoch: groupContext.epoch,
+            sender: {
+                senderType: "member",
+                leafIndex,
+            },
+            authenticatedData,
+        },
+        senderType: "member",
+        context: groupContext,
+    };
+    const auth = await (0, framedContent_1.signFramedContentApplicationOrProposal)(signKey, tbs, cs);
+    const content = { ...tbs.content, auth };
+    const privateMessage = await protect(senderDataSecret, authenticatedData, groupContext, secretTree, content, leafIndex, paddingConfig, cs);
+    const newSecretTree = privateMessage.tree;
+    const authenticatedContent = {
+        wireformat: "mls_private_message",
+        content,
+        auth,
+    };
+    const proposalRef = await (0, authenticatedContent_1.makeProposalRef)(authenticatedContent, cs.hash);
+    return { privateMessage: privateMessage.privateMessage, newSecretTree, proposalRef };
+}
+async function protect(senderDataSecret, authenticatedData, groupContext, secretTree, content, leafIndex, config, cs) {
+    const node = secretTree[(0, treemath_1.leafToNodeIndex)(leafIndex)];
+    if (node === undefined)
+        throw new mlsError_1.InternalError("Bad node index for secret tree");
+    const { newTree, generation, reuseGuard, nonce, key } = await (0, secretTree_1.consumeRatchet)(secretTree, (0, treemath_1.leafToNodeIndex)(leafIndex), content.contentType, cs);
+    const aad = {
+        groupId: groupContext.groupId,
+        epoch: groupContext.epoch,
+        contentType: content.contentType,
+        authenticatedData: authenticatedData,
+    };
+    const ciphertext = await cs.hpke.encryptAead(key, nonce, (0, privateMessage_1.encodePrivateContentAAD)(aad), (0, privateMessage_1.encodePrivateMessageContent)(config)(content));
+    const senderData = {
+        leafIndex,
+        generation,
+        reuseGuard,
+    };
+    const senderAad = {
+        groupId: groupContext.groupId,
+        epoch: groupContext.epoch,
+        contentType: content.contentType,
+    };
+    const encryptedSenderData = await (0, privateMessage_1.encryptSenderData)(senderDataSecret, senderData, senderAad, ciphertext, cs);
+    return {
+        privateMessage: {
+            groupId: groupContext.groupId,
+            epoch: groupContext.epoch,
+            encryptedSenderData,
+            contentType: content.contentType,
+            authenticatedData,
+            ciphertext,
+        },
+        tree: newTree,
+    };
+}
+async function unprotectPrivateMessage(senderDataSecret, msg, secretTree, ratchetTree, groupContext, config, cs, overrideSignatureKey) {
+    const senderData = await (0, privateMessage_1.decryptSenderData)(msg, senderDataSecret, cs);
+    if (senderData === undefined)
+        throw new mlsError_1.CodecError("Could not decode senderdata");
+    validateSenderData(senderData, ratchetTree);
+    const { key, nonce, newTree } = await (0, secretTree_1.ratchetToGeneration)(secretTree, senderData, msg.contentType, config, cs);
+    const aad = {
+        groupId: msg.groupId,
+        epoch: msg.epoch,
+        contentType: msg.contentType,
+        authenticatedData: msg.authenticatedData,
+    };
+    const decrypted = await cs.hpke.decryptAead(key, nonce, (0, privateMessage_1.encodePrivateContentAAD)(aad), msg.ciphertext);
+    const pmc = (0, privateMessage_1.decodePrivateMessageContent)(msg.contentType)(decrypted, 0)?.[0];
+    if (pmc === undefined)
+        throw new mlsError_1.CodecError("Could not decode PrivateMessageContent");
+    const content = (0, privateMessage_1.toAuthenticatedContent)(pmc, msg, senderData.leafIndex);
+    const signaturePublicKey = overrideSignatureKey !== undefined
+        ? overrideSignatureKey
+        : (0, ratchetTree_1.getSignaturePublicKeyFromLeafIndex)(ratchetTree, senderData.leafIndex);
+    const signatureValid = await (0, framedContent_1.verifyFramedContentSignature)(signaturePublicKey, "mls_private_message", content.content, content.auth, groupContext, cs.signature);
+    if (!signatureValid)
+        throw new mlsError_1.CryptoVerificationError("Signature invalid");
+    return { tree: newTree, content };
+}
+function validateSenderData(senderData, tree) {
+    if (tree[(0, treemath_1.leafToNodeIndex)(senderData.leafIndex)]?.nodeType !== "leaf")
+        return new mlsError_1.ValidationError("SenderData did not point to a non-blank leaf node");
+}
+//# sourceMappingURL=messageProtection.js.map

package/dist/src/messageProtection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageProtection.js","sourceRoot":"","sources":["../../src/messageProtection.ts"],"names":[],"mappings":";;AA8BA,wDAgDC;AAQD,0CAqDC;AAID,0BA2DC;AAID,0DAkDC;AAED,gDAGC;AArQD,iEAA8E;AAE9E,mDAIwB;AAGxB,qDAUyB;AACzB,6CAA8E;AAC9E,+CAA+E;AAE/E,yCAA4C;AAE5C,yCAA0G;AAKnG,KAAK,UAAU,sBAAsB,CAC1C,OAAmB,EACnB,gBAA4B,EAC5B,eAA2B,EAC3B,iBAA6B,EAC7B,YAA0B,EAC1B,UAAsB,EACtB,SAAiB,EACjB,aAA4B,EAC5B,EAAmB;IAEnB,MAAM,GAAG,GAA0C;QACjD,eAAe,EAAE,YAAY,CAAC,OAAO;QACrC,UAAU,EAAE,qBAAqB;QACjC,OAAO,EAAE;YACP,WAAW,EAAE,aAAa;YAC1B,eAAe;YACf,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM,EAAE;gBACN,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,SAAS;aACrB;YACD,iBAAiB;SAClB;QACD,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,YAAY;KACtB,CAAA;IAED,MAAM,IAAI,GAAG,MAAM,IAAA,sDAAsC,EAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAE3E,MAAM,OAAO,GAAG;QACd,GAAG,GAAG,CAAC,OAAO;QACd,IAAI;KACL,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,OAAO,EACP,SAAS,EACT,aAAa,EACb,EAAE,CACH,CAAA;IAED,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAA;AAC9E,CAAC;AAQM,KAAK,UAAU,eAAe,CACnC,OAAmB,EACnB,gBAA4B,EAC5B,CAAW,EACX,iBAA6B,EAC7B,YAA0B,EAC1B,UAAsB,EACtB,SAAiB,EACjB,aAA4B,EAC5B,EAAmB;IAEnB,MAAM,GAAG,GAAG;QACV,eAAe,EAAE,YAAY,CAAC,OAAO;QACrC,UAAU,EAAE,qBAA8B;QAC1C,OAAO,EAAE;YACP,WAAW,EAAE,UAAmB;YAChC,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM,EAAE;gBACN,UAAU,EAAE,QAAiB;gBAC7B,SAAS;aACV;YACD,iBAAiB;SAClB;QACD,UAAU,EAAE,QAAiB;QAC7B,OAAO,EAAE,YAAY;KACtB,CAAA;IAED,MAAM,IAAI,GAAG,MAAM,IAAA,sDAAsC,EAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAC3E,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAA;IAExC,MAAM,cAAc,GAAG,MAAM,OAAO,CAClC,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,OAAO,EACP,SAAS,EACT,aAAa,EACb,EAAE,CACH,CAAA;IAED,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAA;IAEzC,MAAM,oBAAoB,GAAG;QAC3B,UAAU,EAAE,qBAA8B;QAC1C,OAAO;QACP,IAAI;KACL,CAAA;IACD,MAAM,WAAW,GAAG,MAAM,IAAA,sCAAe,EAAC,oBAAoB,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IAExE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,CAAA;AACtF,CAAC;AAIM,KAAK,UAAU,OAAO,CAC3B,gBAA4B,EAC5B,iBAA6B,EAC7B,YAA0B,EAC1B,UAAsB,EACtB,OAA8B,EAC9B,SAAiB,EACjB,MAAqB,EACrB,EAAmB;IAEnB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAA,0BAAe,EAAC,SAAS,CAAC,CAAC,CAAA;IACnD,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,wBAAa,CAAC,gCAAgC,CAAC,CAAA;IAEjF,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,IAAA,2BAAc,EAC1E,UAAU,EACV,IAAA,0BAAe,EAAC,SAAS,CAAC,EAC1B,OAAO,CAAC,WAAW,EACnB,EAAE,CACH,CAAA;IAED,MAAM,GAAG,GAAsB;QAC7B,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,iBAAiB,EAAE,iBAAiB;KACrC,CAAA;IAED,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAC1C,GAAG,EACH,KAAK,EACL,IAAA,wCAAuB,EAAC,GAAG,CAAC,EAC5B,IAAA,4CAA2B,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAC7C,CAAA;IAED,MAAM,UAAU,GAAe;QAC7B,SAAS;QACT,UAAU;QACV,UAAU;KACX,CAAA;IAED,MAAM,SAAS,GAAkB;QAC/B,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAA;IAED,MAAM,mBAAmB,GAAG,MAAM,IAAA,kCAAiB,EAAC,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IAE5G,OAAO;QACL,cAAc,EAAE;YACd,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,mBAAmB;YACnB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,iBAAiB;YACjB,UAAU;SACX;QACD,IAAI,EAAE,OAAO;KACd,CAAA;AACH,CAAC;AAIM,KAAK,UAAU,uBAAuB,CAC3C,gBAA4B,EAC5B,GAAmB,EACnB,UAAsB,EACtB,WAAwB,EACxB,YAA0B,EAC1B,MAA0B,EAC1B,EAAmB,EACnB,oBAAiC;IAEjC,MAAM,UAAU,GAAG,MAAM,IAAA,kCAAiB,EAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAA;IAErE,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,qBAAU,CAAC,6BAA6B,CAAC,CAAA;IAEjF,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IAE3C,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,gCAAmB,EAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IAE9G,MAAM,GAAG,GAAsB;QAC7B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;KACzC,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,IAAA,wCAAuB,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;IAErG,MAAM,GAAG,GAAG,IAAA,4CAA2B,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAE3E,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,qBAAU,CAAC,wCAAwC,CAAC,CAAA;IAErF,MAAM,OAAO,GAAG,IAAA,uCAAsB,EAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;IAEtE,MAAM,kBAAkB,GACtB,oBAAoB,KAAK,SAAS;QAChC,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,IAAA,gDAAkC,EAAC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;IAE3E,MAAM,cAAc,GAAG,MAAM,IAAA,4CAA4B,EACvD,kBAAkB,EAClB,qBAAqB,EACrB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,IAAI,EACZ,YAAY,EACZ,EAAE,CAAC,SAAS,CACb,CAAA;IAED,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,kCAAuB,CAAC,mBAAmB,CAAC,CAAA;IAE3E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AACnC,CAAC;AAED,SAAgB,kBAAkB,CAAC,UAAsB,EAAE,IAAiB;IAC1E,IAAI,IAAI,CAAC,IAAA,0BAAe,EAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,KAAK,MAAM;QAClE,OAAO,IAAI,0BAAe,CAAC,mDAAmD,CAAC,CAAA;AACnF,CAAC"}

package/dist/src/messageProtectionPublic.d.ts

@@ -0,0 +1,17 @@
+import { AuthenticatedContent, AuthenticatedContentProposalOrCommit } from "./authenticatedContent";
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+import { GroupContext } from "./groupContext";
+import { Proposal } from "./proposal";
+import { PublicMessage } from "./publicMessage";
+import { RatchetTree } from "./ratchetTree";
+import { SenderNonMember } from "./sender";
+export type ProtectProposalPublicResult = {
+    publicMessage: PublicMessage;
+};
+export declare function protectProposalPublic(signKey: Uint8Array, membershipKey: Uint8Array, groupContext: GroupContext, authenticatedData: Uint8Array, proposal: Proposal, leafIndex: number, cs: CiphersuiteImpl): Promise<ProtectProposalPublicResult>;
+export declare function protectExternalProposalPublic(signKey: Uint8Array, groupContext: GroupContext, authenticatedData: Uint8Array, proposal: Proposal, sender: SenderNonMember, cs: CiphersuiteImpl): Promise<ProtectProposalPublicResult>;
+export declare function protectPublicMessage(membershipKey: Uint8Array, groupContext: GroupContext, content: AuthenticatedContent, cs: CiphersuiteImpl): Promise<PublicMessage>;
+export type ProtectCommitPublicResult = {
+    publicMessage: PublicMessage;
+};
+export declare function unprotectPublicMessage(membershipKey: Uint8Array, groupContext: GroupContext, ratchetTree: RatchetTree, msg: PublicMessage, cs: CiphersuiteImpl, overrideSignatureKey?: Uint8Array): Promise<AuthenticatedContentProposalOrCommit>;

package/dist/src/messageProtectionPublic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageProtectionPublic.d.ts","sourceRoot":"","sources":["../../src/messageProtectionPublic.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,oCAAoC,EAIrC,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAOtD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAiD,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC9F,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE1C,MAAM,MAAM,2BAA2B,GAAG;IAAE,aAAa,EAAE,aAAa,CAAA;CAAE,CAAA;AAE1E,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,UAAU,EACnB,aAAa,EAAE,UAAU,EACzB,YAAY,EAAE,YAAY,EAC1B,iBAAiB,EAAE,UAAU,EAC7B,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,2BAA2B,CAAC,CA6BtC;AAED,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,UAAU,EACnB,YAAY,EAAE,YAAY,EAC1B,iBAAiB,EAAE,UAAU,EAC7B,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,eAAe,EACvB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,2BAA2B,CAAC,CA2BtC;AAED,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,UAAU,EACzB,YAAY,EAAE,YAAY,EAC1B,OAAO,EAAE,oBAAoB,EAC7B,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,aAAa,CAAC,CAuBxB;AAED,MAAM,MAAM,yBAAyB,GAAG;IAAE,aAAa,EAAE,aAAa,CAAA;CAAE,CAAA;AAExE,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,UAAU,EACzB,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,WAAW,EACxB,GAAG,EAAE,aAAa,EAClB,EAAE,EAAE,eAAe,EACnB,oBAAoB,CAAC,EAAE,UAAU,GAChC,OAAO,CAAC,oCAAoC,CAAC,CAkC/C"}