ts-mls 1.0.1

package/dist/src/createCommit.js

@@ -0,0 +1,260 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCommit = createCommit;
+exports.createGroupInfo = createGroupInfo;
+exports.createGroupInfoWithRatchetTree = createGroupInfoWithRatchetTree;
+exports.createGroupInfoWithExternalPub = createGroupInfoWithExternalPub;
+exports.createGroupInfoWithExternalPubAndRatchetTree = createGroupInfoWithExternalPubAndRatchetTree;
+exports.applyUpdatePathSecret = applyUpdatePathSecret;
+exports.joinGroupExternal = joinGroupExternal;
+exports.filterNewLeaves = filterNewLeaves;
+const clientState_1 = require("./clientState");
+const clientState_2 = require("./clientState");
+const hpke_1 = require("./crypto/hpke");
+const kdf_1 = require("./crypto/kdf");
+const framedContent_1 = require("./framedContent");
+const groupContext_1 = require("./groupContext");
+const groupInfo_1 = require("./groupInfo");
+const keyPackage_1 = require("./keyPackage");
+const keySchedule_1 = require("./keySchedule");
+const messageProtection_1 = require("./messageProtection");
+const messageProtectionPublic_1 = require("./messageProtectionPublic");
+const pathSecrets_1 = require("./pathSecrets");
+const privateKeyPath_1 = require("./privateKeyPath");
+const ratchetTree_1 = require("./ratchetTree");
+const secretTree_1 = require("./secretTree");
+const treeHash_1 = require("./treeHash");
+const treemath_1 = require("./treemath");
+const updatePath_1 = require("./updatePath");
+const byteArray_1 = require("./util/byteArray");
+const welcome_1 = require("./welcome");
+const mlsError_1 = require("./mlsError");
+const clientConfig_1 = require("./clientConfig");
+const extension_1 = require("./extension");
+async function createCommit(state, pskSearch, publicMessage, extraProposals, cs, ratchetTreeExtension = false, authenticatedData = new Uint8Array()) {
+    (0, clientState_2.checkCanSendHandshakeMessages)(state);
+    const wireformat = publicMessage ? "mls_public_message" : "mls_private_message";
+    const allProposals = bundleAllProposals(state, extraProposals);
+    const res = await (0, clientState_2.applyProposals)(state, allProposals, state.privatePath.leafIndex, pskSearch, true, cs);
+    if (res.additionalResult.kind === "externalCommit")
+        throw new mlsError_1.UsageError("Cannot create externalCommit as a member");
+    const suspendedPendingReinit = res.additionalResult.kind === "reinit" ? res.additionalResult.reinit : undefined;
+    const [tree, updatePath, pathSecrets, newPrivateKey] = res.needsUpdatePath
+        ? await (0, updatePath_1.createUpdatePath)(res.tree, state.privatePath.leafIndex, state.groupContext, state.signaturePrivateKey, cs)
+        : [res.tree, undefined, [], undefined];
+    const updatedExtensions = res.additionalResult.kind === "memberCommit" && res.additionalResult.extensions.length > 0
+        ? res.additionalResult.extensions
+        : state.groupContext.extensions;
+    const groupContextWithExtensions = { ...state.groupContext, extensions: updatedExtensions };
+    const privateKeys = (0, privateKeyPath_1.mergePrivateKeyPaths)(newPrivateKey !== undefined
+        ? (0, privateKeyPath_1.updateLeafKey)(state.privatePath, await cs.hpke.exportPrivateKey(newPrivateKey))
+        : state.privatePath, await (0, privateKeyPath_1.toPrivateKeyPath)((0, pathSecrets_1.pathToPathSecrets)(pathSecrets), state.privatePath.leafIndex, cs));
+    const lastPathSecret = pathSecrets.at(-1);
+    const commitSecret = lastPathSecret === undefined
+        ? new Uint8Array(cs.kdf.size)
+        : await (0, kdf_1.deriveSecret)(lastPathSecret.secret, "path", cs.kdf);
+    const { signature, framedContent } = await (0, framedContent_1.createContentCommitSignature)(state.groupContext, wireformat, { proposals: allProposals, path: updatePath }, { senderType: "member", leafIndex: state.privatePath.leafIndex }, authenticatedData, state.signaturePrivateKey, cs.signature);
+    const treeHash = await (0, treeHash_1.treeHashRoot)(tree, cs.hash);
+    const updatedGroupContext = await (0, clientState_2.nextEpochContext)(groupContextWithExtensions, wireformat, framedContent, signature, treeHash, state.confirmationTag, cs.hash);
+    const epochSecrets = await (0, keySchedule_1.initializeEpoch)(state.keySchedule.initSecret, commitSecret, updatedGroupContext, res.pskSecret, cs.kdf);
+    const confirmationTag = await (0, framedContent_1.createConfirmationTag)(epochSecrets.keySchedule.confirmationKey, updatedGroupContext.confirmedTranscriptHash, cs.hash);
+    const authData = {
+        contentType: framedContent.contentType,
+        signature,
+        confirmationTag,
+    };
+    const [commit] = await protectCommit(publicMessage, state, authenticatedData, framedContent, authData, cs);
+    const welcome = await createWelcome(ratchetTreeExtension, updatedGroupContext, confirmationTag, state, tree, cs, epochSecrets, res, pathSecrets);
+    const groupActiveState = res.selfRemoved
+        ? { kind: "removedFromGroup" }
+        : suspendedPendingReinit !== undefined
+            ? { kind: "suspendedPendingReinit", reinit: suspendedPendingReinit }
+            : { kind: "active" };
+    const newState = {
+        groupContext: updatedGroupContext,
+        ratchetTree: tree,
+        secretTree: await (0, secretTree_1.createSecretTree)((0, treemath_1.leafWidth)(tree.length), epochSecrets.keySchedule.encryptionSecret, cs.kdf),
+        keySchedule: epochSecrets.keySchedule,
+        privatePath: privateKeys,
+        unappliedProposals: {},
+        historicalReceiverData: (0, clientState_1.addHistoricalReceiverData)(state),
+        confirmationTag,
+        signaturePrivateKey: state.signaturePrivateKey,
+        groupActiveState,
+        clientConfig: state.clientConfig,
+    };
+    return { newState, welcome, commit };
+}
+function bundleAllProposals(state, extraProposals) {
+    const refs = Object.keys(state.unappliedProposals).map((p) => ({
+        proposalOrRefType: "reference",
+        reference: (0, byteArray_1.base64ToBytes)(p),
+    }));
+    const proposals = extraProposals.map((p) => ({ proposalOrRefType: "proposal", proposal: p }));
+    return [...refs, ...proposals];
+}
+async function createWelcome(ratchetTreeExtension, groupContext, confirmationTag, state, tree, cs, epochSecrets, res, pathSecrets) {
+    const groupInfo = ratchetTreeExtension
+        ? await createGroupInfoWithRatchetTree(groupContext, confirmationTag, state, tree, cs)
+        : await createGroupInfo(groupContext, confirmationTag, state, cs);
+    const encryptedGroupInfo = await (0, welcome_1.encryptGroupInfo)(groupInfo, epochSecrets.welcomeSecret, cs);
+    const encryptedGroupSecrets = res.additionalResult.kind === "memberCommit"
+        ? await Promise.all(res.additionalResult.addedLeafNodes.map(([leafNodeIndex, keyPackage]) => {
+            return createEncryptedGroupSecrets(tree, leafNodeIndex, state, pathSecrets, cs, keyPackage, encryptedGroupInfo, epochSecrets, res);
+        }))
+        : [];
+    return encryptedGroupSecrets.length > 0
+        ? {
+            cipherSuite: groupContext.cipherSuite,
+            secrets: encryptedGroupSecrets,
+            encryptedGroupInfo,
+        }
+        : undefined;
+}
+async function createEncryptedGroupSecrets(tree, leafNodeIndex, state, pathSecrets, cs, keyPackage, encryptedGroupInfo, epochSecrets, res) {
+    const nodeIndex = (0, updatePath_1.firstCommonAncestor)(tree, leafNodeIndex, state.privatePath.leafIndex);
+    const pathSecret = pathSecrets.find((ps) => ps.nodeIndex === nodeIndex);
+    const pk = await cs.hpke.importPublicKey(keyPackage.initKey);
+    const egs = await (0, welcome_1.encryptGroupSecrets)(pk, encryptedGroupInfo, { joinerSecret: epochSecrets.joinerSecret, pathSecret: pathSecret?.secret, psks: res.pskIds }, cs.hpke);
+    const ref = await (0, keyPackage_1.makeKeyPackageRef)(keyPackage, cs.hash);
+    return { newMember: ref, encryptedGroupSecrets: { kemOutput: egs.enc, ciphertext: egs.ct } };
+}
+async function createGroupInfo(groupContext, confirmationTag, state, cs) {
+    const groupInfoTbs = {
+        groupContext: groupContext,
+        extensions: groupContext.extensions,
+        confirmationTag,
+        signer: state.privatePath.leafIndex,
+    };
+    return (0, groupInfo_1.signGroupInfo)(groupInfoTbs, state.signaturePrivateKey, cs.signature);
+}
+async function createGroupInfoWithRatchetTree(groupContext, confirmationTag, state, tree, cs) {
+    const gi = await createGroupInfo(groupContext, confirmationTag, state, cs);
+    const encodedTree = (0, ratchetTree_1.encodeRatchetTree)(tree);
+    return { ...gi, extensions: [...gi.extensions, { extensionType: "ratchet_tree", extensionData: encodedTree }] };
+}
+async function createGroupInfoWithExternalPub(state, cs) {
+    const gi = await createGroupInfo(state.groupContext, state.confirmationTag, state, cs);
+    const externalKeyPair = await cs.hpke.deriveKeyPair(state.keySchedule.externalSecret);
+    const externalPub = await cs.hpke.exportPublicKey(externalKeyPair.publicKey);
+    return { ...gi, extensions: [...gi.extensions, { extensionType: "external_pub", extensionData: externalPub }] };
+}
+async function createGroupInfoWithExternalPubAndRatchetTree(state, cs) {
+    const gi = await createGroupInfo(state.groupContext, state.confirmationTag, state, cs);
+    const encodedTree = (0, ratchetTree_1.encodeRatchetTree)(state.ratchetTree);
+    const externalKeyPair = await cs.hpke.deriveKeyPair(state.keySchedule.externalSecret);
+    const externalPub = await cs.hpke.exportPublicKey(externalKeyPair.publicKey);
+    return {
+        ...gi,
+        extensions: [
+            ...gi.extensions,
+            { extensionType: "external_pub", extensionData: externalPub },
+            { extensionType: "ratchet_tree", extensionData: encodedTree },
+        ],
+    };
+}
+async function protectCommit(publicMessage, state, authenticatedData, content, authData, cs) {
+    const wireformat = publicMessage ? "mls_public_message" : "mls_private_message";
+    const authenticatedContent = {
+        wireformat,
+        content,
+        auth: authData,
+    };
+    if (publicMessage) {
+        const msg = await (0, messageProtectionPublic_1.protectPublicMessage)(state.keySchedule.membershipKey, state.groupContext, authenticatedContent, cs);
+        return [{ version: "mls10", wireformat: "mls_public_message", publicMessage: msg }, state.secretTree];
+    }
+    else {
+        const res = await (0, messageProtection_1.protect)(state.keySchedule.senderDataSecret, authenticatedData, state.groupContext, state.secretTree, { ...content, auth: authData }, state.privatePath.leafIndex, state.clientConfig.paddingConfig, cs);
+        return [{ version: "mls10", wireformat: "mls_private_message", privateMessage: res.privateMessage }, res.tree];
+    }
+}
+async function applyUpdatePathSecret(tree, privatePath, senderLeafIndex, gc, path, excludeNodes, cs) {
+    const { nodeIndex: ancestorNodeIndex, resolution, updateNode, } = (0, updatePath_1.firstMatchAncestor)(tree, privatePath.leafIndex, senderLeafIndex, path);
+    for (const [i, nodeIndex] of filterNewLeaves(resolution, excludeNodes).entries()) {
+        if (privatePath.privateKeys[nodeIndex] !== undefined) {
+            const key = await cs.hpke.importPrivateKey(privatePath.privateKeys[nodeIndex]);
+            const ct = updateNode?.encryptedPathSecret[i];
+            const pathSecret = await (0, hpke_1.decryptWithLabel)(key, "UpdatePathNode", (0, groupContext_1.encodeGroupContext)(gc), ct.kemOutput, ct.ciphertext, cs.hpke);
+            return { nodeIndex: ancestorNodeIndex, pathSecret };
+        }
+    }
+    throw new mlsError_1.InternalError("No overlap between provided private keys and update path");
+}
+async function joinGroupExternal(groupInfo, keyPackage, privateKeys, resync, cs, tree, clientConfig = clientConfig_1.defaultClientConfig, authenticatedData = new Uint8Array()) {
+    const externalPub = groupInfo.extensions.find((ex) => ex.extensionType === "external_pub");
+    if (externalPub === undefined)
+        throw new mlsError_1.UsageError("Could not find external_pub extension");
+    const allExtensionsSupported = (0, extension_1.extensionsSupportedByCapabilities)(groupInfo.groupContext.extensions, keyPackage.leafNode.capabilities);
+    if (!allExtensionsSupported)
+        throw new mlsError_1.UsageError("client does not support every extension in the GroupContext");
+    const { enc, secret: initSecret } = await (0, clientState_2.exportSecret)(externalPub.extensionData, cs);
+    const ratchetTree = (0, groupInfo_1.ratchetTreeFromExtension)(groupInfo) ?? tree;
+    if (ratchetTree === undefined)
+        throw new mlsError_1.UsageError("No RatchetTree passed and no ratchet_tree extension");
+    (0, clientState_1.throwIfDefined)(await (0, clientState_1.validateRatchetTree)(ratchetTree, groupInfo.groupContext, clientConfig.lifetimeConfig, clientConfig.authService, groupInfo.groupContext.treeHash, cs));
+    const signaturePublicKey = (0, ratchetTree_1.getSignaturePublicKeyFromLeafIndex)(ratchetTree, groupInfo.signer);
+    const signerCredential = (0, ratchetTree_1.getCredentialFromLeafIndex)(ratchetTree, groupInfo.signer);
+    const credentialVerified = await clientConfig.authService.validateCredential(signerCredential, signaturePublicKey);
+    if (!credentialVerified)
+        throw new mlsError_1.ValidationError("Could not validate credential");
+    const groupInfoSignatureVerified = (0, groupInfo_1.verifyGroupInfoSignature)(groupInfo, signaturePublicKey, cs.signature);
+    if (!groupInfoSignatureVerified)
+        throw new mlsError_1.CryptoVerificationError("Could not verify groupInfo Signature");
+    const formerLeafIndex = resync
+        ? (0, treemath_1.nodeToLeafIndex)(ratchetTree.findIndex((n) => {
+            if (n !== undefined && n.nodeType === "leaf") {
+                return clientConfig.keyPackageEqualityConfig.compareKeyPackageToLeafNode(keyPackage, n.leaf);
+            }
+            return false;
+        }))
+        : undefined;
+    const updatedTree = formerLeafIndex !== undefined ? (0, ratchetTree_1.removeLeafNode)(ratchetTree, formerLeafIndex) : ratchetTree;
+    const [treeWithNewLeafNode, newLeafNodeIndex] = (0, ratchetTree_1.addLeafNode)(updatedTree, keyPackage.leafNode);
+    const [newTree, updatePath, pathSecrets, newPrivateKey] = await (0, updatePath_1.createUpdatePath)(treeWithNewLeafNode, (0, treemath_1.nodeToLeafIndex)(newLeafNodeIndex), groupInfo.groupContext, privateKeys.signaturePrivateKey, cs);
+    const privateKeyPath = (0, privateKeyPath_1.updateLeafKey)(await (0, privateKeyPath_1.toPrivateKeyPath)((0, pathSecrets_1.pathToPathSecrets)(pathSecrets), (0, treemath_1.nodeToLeafIndex)(newLeafNodeIndex), cs), await cs.hpke.exportPrivateKey(newPrivateKey));
+    const lastPathSecret = pathSecrets.at(-1);
+    const commitSecret = lastPathSecret === undefined
+        ? new Uint8Array(cs.kdf.size)
+        : await (0, kdf_1.deriveSecret)(lastPathSecret.secret, "path", cs.kdf);
+    const externalInitProposal = {
+        proposalType: "external_init",
+        externalInit: { kemOutput: enc },
+    };
+    const proposals = formerLeafIndex !== undefined
+        ? [{ proposalType: "remove", remove: { removed: formerLeafIndex } }, externalInitProposal]
+        : [externalInitProposal];
+    const pskSecret = new Uint8Array(cs.kdf.size);
+    const { signature, framedContent } = await (0, framedContent_1.createContentCommitSignature)(groupInfo.groupContext, "mls_public_message", { proposals: proposals.map((p) => ({ proposalOrRefType: "proposal", proposal: p })), path: updatePath }, {
+        senderType: "new_member_commit",
+    }, authenticatedData, privateKeys.signaturePrivateKey, cs.signature);
+    const treeHash = await (0, treeHash_1.treeHashRoot)(newTree, cs.hash);
+    const groupContext = await (0, clientState_2.nextEpochContext)(groupInfo.groupContext, "mls_public_message", framedContent, signature, treeHash, groupInfo.confirmationTag, cs.hash);
+    const epochSecrets = await (0, keySchedule_1.initializeEpoch)(initSecret, commitSecret, groupContext, pskSecret, cs.kdf);
+    const confirmationTag = await (0, framedContent_1.createConfirmationTag)(epochSecrets.keySchedule.confirmationKey, groupContext.confirmedTranscriptHash, cs.hash);
+    const state = {
+        ratchetTree: newTree,
+        groupContext: groupContext,
+        secretTree: await (0, secretTree_1.createSecretTree)((0, treemath_1.leafWidth)(newTree.length), epochSecrets.keySchedule.encryptionSecret, cs.kdf),
+        privatePath: privateKeyPath,
+        confirmationTag,
+        historicalReceiverData: new Map(),
+        signaturePrivateKey: privateKeys.signaturePrivateKey,
+        keySchedule: epochSecrets.keySchedule,
+        unappliedProposals: {},
+        groupActiveState: { kind: "active" },
+        clientConfig,
+    };
+    const authenticatedContent = {
+        content: framedContent,
+        auth: { signature, confirmationTag, contentType: "commit" },
+        wireformat: "mls_public_message",
+    };
+    const msg = await (0, messageProtectionPublic_1.protectPublicMessage)(epochSecrets.keySchedule.membershipKey, groupContext, authenticatedContent, cs);
+    return { publicMessage: msg, newState: state };
+}
+function filterNewLeaves(resolution, excludeNodes) {
+    const set = new Set(excludeNodes);
+    return resolution.filter((i) => !set.has(i));
+}
+//# sourceMappingURL=createCommit.js.map

package/dist/src/createCommit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createCommit.js","sourceRoot":"","sources":["../../src/createCommit.ts"],"names":[],"mappings":";;AAoDA,oCA2HC;AAoFD,0CAcC;AAED,wEAYC;AAED,wEAOC;AAED,oGAmBC;AA2CD,sDAiCC;AAED,8CAsJC;AACD,0CAGC;AAriBD,+CAA8F;AAE9F,+CAQsB;AAEtB,wCAAgD;AAChD,sCAA2C;AAC3C,mDAKwB;AACxB,iDAAiE;AACjE,2CAAwH;AACxH,6CAA+E;AAC/E,+CAA6D;AAE7D,2DAA6C;AAC7C,uEAAgE;AAChE,+CAAiD;AACjD,qDAAwG;AAIxG,+CAOsB;AACtB,6CAA2D;AAC3D,yCAAyC;AACzC,yCAAuD;AACvD,6CAAgH;AAChH,gDAAgD;AAChD,uCAAiG;AACjG,yCAAgG;AAChG,iDAAkE;AAClE,2CAA+D;AAIxD,KAAK,UAAU,YAAY,CAChC,KAAkB,EAClB,SAAmB,EACnB,aAAsB,EACtB,cAA0B,EAC1B,EAAmB,EACnB,uBAAgC,KAAK,EACrC,oBAAgC,IAAI,UAAU,EAAE;IAEhD,IAAA,2CAA6B,EAAC,KAAK,CAAC,CAAA;IAEpC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,CAAA;IAE/E,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IAE9D,MAAM,GAAG,GAAG,MAAM,IAAA,4BAAc,EAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAEvG,IAAI,GAAG,CAAC,gBAAgB,CAAC,IAAI,KAAK,gBAAgB;QAAE,MAAM,IAAI,qBAAU,CAAC,0CAA0C,CAAC,CAAA;IAEpH,MAAM,sBAAsB,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAE/G,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,GAAG,CAAC,eAAe;QACxE,CAAC,CAAC,MAAM,IAAA,6BAAgB,EAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAClH,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAkB,EAAE,SAAS,CAAC,CAAA;IAExD,MAAM,iBAAiB,GACrB,GAAG,CAAC,gBAAgB,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QACxF,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU;QACjC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAA;IAEnC,MAAM,0BAA0B,GAAG,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAA;IAE3F,MAAM,WAAW,GAAG,IAAA,qCAAoB,EACtC,aAAa,KAAK,SAAS;QACzB,CAAC,CAAC,IAAA,8BAAa,EAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACjF,CAAC,CAAC,KAAK,CAAC,WAAW,EACrB,MAAM,IAAA,iCAAgB,EAAC,IAAA,+BAAiB,EAAC,WAAW,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CACxF,CAAA;IAED,MAAM,cAAc,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAEzC,MAAM,YAAY,GAChB,cAAc,KAAK,SAAS;QAC1B,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7B,CAAC,CAAC,MAAM,IAAA,kBAAY,EAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;IAE/D,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,IAAA,4CAA4B,EACrE,KAAK,CAAC,YAAY,EAClB,UAAU,EACV,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,EAC7C,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,EAChE,iBAAiB,EACjB,KAAK,CAAC,mBAAmB,EACzB,EAAE,CAAC,SAAS,CACb,CAAA;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAY,EAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IAElD,MAAM,mBAAmB,GAAG,MAAM,IAAA,8BAAgB,EAChD,0BAA0B,EAC1B,UAAU,EACV,aAAa,EACb,SAAS,EACT,QAAQ,EACR,KAAK,CAAC,eAAe,EACrB,EAAE,CAAC,IAAI,CACR,CAAA;IAED,MAAM,YAAY,GAAG,MAAM,IAAA,6BAAe,EACxC,KAAK,CAAC,WAAW,CAAC,UAAU,EAC5B,YAAY,EACZ,mBAAmB,EACnB,GAAG,CAAC,SAAS,EACb,EAAE,CAAC,GAAG,CACP,CAAA;IAED,MAAM,eAAe,GAAG,MAAM,IAAA,qCAAqB,EACjD,YAAY,CAAC,WAAW,CAAC,eAAe,EACxC,mBAAmB,CAAC,uBAAuB,EAC3C,EAAE,CAAC,IAAI,CACR,CAAA;IAED,MAAM,QAAQ,GAAgC;QAC5C,WAAW,EAAE,aAAa,CAAC,WAAW;QACtC,SAAS;QACT,eAAe;KAChB,CAAA;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;IAE1G,MAAM,OAAO,GAAwB,MAAM,aAAa,CACtD,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,KAAK,EACL,IAAI,EACJ,EAAE,EACF,YAAY,EACZ,GAAG,EACH,WAAW,CACZ,CAAA;IAED,MAAM,gBAAgB,GAAqB,GAAG,CAAC,WAAW;QACxD,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE;QAC9B,CAAC,CAAC,sBAAsB,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,sBAAsB,EAAE;YACpE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAExB,MAAM,QAAQ,GAAgB;QAC5B,YAAY,EAAE,mBAAmB;QACjC,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,MAAM,IAAA,6BAAgB,EAAC,IAAA,oBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,CAAC,GAAG,CAAC;QAC7G,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,WAAW,EAAE,WAAW;QACxB,kBAAkB,EAAE,EAAE;QACtB,sBAAsB,EAAE,IAAA,uCAAyB,EAAC,KAAK,CAAC;QACxD,eAAe;QACf,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,gBAAgB;QAChB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAA;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AACtC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAkB,EAAE,cAA0B;IACxE,MAAM,IAAI,GAAoB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,iBAAiB,EAAE,WAAW;QAC9B,SAAS,EAAE,IAAA,yBAAa,EAAC,CAAC,CAAC;KAC5B,CAAC,CAAC,CAAA;IAEH,MAAM,SAAS,GAAoB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAE9G,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,CAAA;AAChC,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,oBAA6B,EAC7B,YAA0B,EAC1B,eAA2B,EAC3B,KAAkB,EAClB,IAAiB,EACjB,EAAmB,EACnB,YAA0B,EAC1B,GAAyB,EACzB,WAAyB;IAEzB,MAAM,SAAS,GAAG,oBAAoB;QACpC,CAAC,CAAC,MAAM,8BAA8B,CAAC,YAAY,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACtF,CAAC,CAAC,MAAM,eAAe,CAAC,YAAY,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAEnE,MAAM,kBAAkB,GAAG,MAAM,IAAA,0BAAgB,EAAC,SAAS,EAAE,YAAY,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAE5F,MAAM,qBAAqB,GACzB,GAAG,CAAC,gBAAgB,CAAC,IAAI,KAAK,cAAc;QAC1C,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CACf,GAAG,CAAC,gBAAgB,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE;YACtE,OAAO,2BAA2B,CAChC,IAAI,EACJ,aAAa,EACb,KAAK,EACL,WAAW,EACX,EAAE,EACF,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,GAAG,CACJ,CAAA;QACH,CAAC,CAAC,CACH;QACH,CAAC,CAAC,EAAE,CAAA;IAER,OAAO,qBAAqB,CAAC,MAAM,GAAG,CAAC;QACrC,CAAC,CAAC;YACE,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,OAAO,EAAE,qBAAqB;YAC9B,kBAAkB;SACnB;QACH,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,IAAiB,EACjB,aAAqB,EACrB,KAAkB,EAClB,WAAyB,EACzB,EAAmB,EACnB,UAAsB,EACtB,kBAA8B,EAC9B,YAA0B,EAC1B,GAAyB;IAEzB,MAAM,SAAS,GAAG,IAAA,gCAAmB,EAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;IACvF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;IACvE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAC5D,MAAM,GAAG,GAAG,MAAM,IAAA,6BAAmB,EACnC,EAAE,EACF,kBAAkB,EAClB,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,EAC7F,EAAE,CAAC,IAAI,CACR,CAAA;IAED,MAAM,GAAG,GAAG,MAAM,IAAA,8BAAiB,EAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IAExD,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,qBAAqB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAA;AAC9F,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,YAA0B,EAC1B,eAA2B,EAC3B,KAAkB,EAClB,EAAmB;IAEnB,MAAM,YAAY,GAAiB;QACjC,YAAY,EAAE,YAAY;QAC1B,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,eAAe;QACf,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS;KACpC,CAAA;IAED,OAAO,IAAA,yBAAa,EAAC,YAAY,EAAE,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAA;AAC7E,CAAC;AAEM,KAAK,UAAU,8BAA8B,CAClD,YAA0B,EAC1B,eAA2B,EAC3B,KAAkB,EAClB,IAAiB,EACjB,EAAmB;IAEnB,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,YAAY,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAE1E,MAAM,WAAW,GAAG,IAAA,+BAAiB,EAAC,IAAI,CAAC,CAAA;IAE3C,OAAO,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;AACjH,CAAC;AAEM,KAAK,UAAU,8BAA8B,CAAC,KAAkB,EAAE,EAAmB;IAC1F,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAEtF,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;IACrF,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;IAE5E,OAAO,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;AACjH,CAAC;AAEM,KAAK,UAAU,4CAA4C,CAChE,KAAkB,EAClB,EAAmB;IAEnB,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAEtF,MAAM,WAAW,GAAG,IAAA,+BAAiB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAExD,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;IACrF,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;IAE5E,OAAO;QACL,GAAG,EAAE;QACL,UAAU,EAAE;YACV,GAAG,EAAE,CAAC,UAAU;YAChB,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE;YAC7D,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE;SAC9D;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,aAAsB,EACtB,KAAkB,EAClB,iBAA6B,EAC7B,OAA4B,EAC5B,QAAqC,EACrC,EAAmB;IAEnB,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,CAAA;IAE/E,MAAM,oBAAoB,GAA+B;QACvD,UAAU;QACV,OAAO;QACP,IAAI,EAAE,QAAQ;KACf,CAAA;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,MAAM,IAAA,8CAAoB,EACpC,KAAK,CAAC,WAAW,CAAC,aAAa,EAC/B,KAAK,CAAC,YAAY,EAClB,oBAAoB,EACpB,EAAE,CACH,CAAA;QAED,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACvG,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,IAAA,2BAAO,EACvB,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAClC,iBAAiB,EACjB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,UAAU,EAChB,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC9B,KAAK,CAAC,WAAW,CAAC,SAAS,EAC3B,KAAK,CAAC,YAAY,CAAC,aAAa,EAChC,EAAE,CACH,CAAA;QAED,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IAChH,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACzC,IAAiB,EACjB,WAA2B,EAC3B,eAAuB,EACvB,EAAgB,EAChB,IAAgB,EAChB,YAAsB,EACtB,EAAmB;IAEnB,MAAM,EACJ,SAAS,EAAE,iBAAiB,EAC5B,UAAU,EACV,UAAU,GACX,GAAG,IAAA,+BAAkB,EAAC,IAAI,EAAE,WAAW,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,CAAC,CAAA;IAE1E,KAAK,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjF,IAAI,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,CAAE,CAAC,CAAA;YAC/E,MAAM,EAAE,GAAG,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAE,CAAA;YAE9C,MAAM,UAAU,GAAG,MAAM,IAAA,uBAAgB,EACvC,GAAG,EACH,gBAAgB,EAChB,IAAA,iCAAkB,EAAC,EAAE,CAAC,EACtB,EAAE,CAAC,SAAS,EACZ,EAAE,CAAC,UAAU,EACb,EAAE,CAAC,IAAI,CACR,CAAA;YACD,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAA;QACrD,CAAC;IACH,CAAC;IAED,MAAM,IAAI,wBAAa,CAAC,0DAA0D,CAAC,CAAA;AACrF,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,SAAoB,EACpB,UAAsB,EACtB,WAA8B,EAC9B,MAAe,EACf,EAAmB,EACnB,IAAkB,EAClB,eAA6B,kCAAmB,EAChD,oBAAgC,IAAI,UAAU,EAAE;IAEhD,MAAM,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,KAAK,cAAc,CAAC,CAAA;IAE1F,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,IAAI,qBAAU,CAAC,uCAAuC,CAAC,CAAA;IAE5F,MAAM,sBAAsB,GAAG,IAAA,6CAAiC,EAC9D,SAAS,CAAC,YAAY,CAAC,UAAU,EACjC,UAAU,CAAC,QAAQ,CAAC,YAAY,CACjC,CAAA;IACD,IAAI,CAAC,sBAAsB;QAAE,MAAM,IAAI,qBAAU,CAAC,6DAA6D,CAAC,CAAA;IAEhH,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,0BAAY,EAAC,WAAW,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAErF,MAAM,WAAW,GAAG,IAAA,oCAAwB,EAAC,SAAS,CAAC,IAAI,IAAI,CAAA;IAE/D,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,IAAI,qBAAU,CAAC,qDAAqD,CAAC,CAAA;IAE1G,IAAA,4BAAc,EACZ,MAAM,IAAA,iCAAmB,EACvB,WAAW,EACX,SAAS,CAAC,YAAY,EACtB,YAAY,CAAC,cAAc,EAC3B,YAAY,CAAC,WAAW,EACxB,SAAS,CAAC,YAAY,CAAC,QAAQ,EAC/B,EAAE,CACH,CACF,CAAA;IAED,MAAM,kBAAkB,GAAG,IAAA,gDAAkC,EAAC,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAE5F,MAAM,gBAAgB,GAAG,IAAA,wCAA0B,EAAC,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAElF,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;IAElH,IAAI,CAAC,kBAAkB;QAAE,MAAM,IAAI,0BAAe,CAAC,+BAA+B,CAAC,CAAA;IAEnF,MAAM,0BAA0B,GAAG,IAAA,oCAAwB,EAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAA;IAExG,IAAI,CAAC,0BAA0B;QAAE,MAAM,IAAI,kCAAuB,CAAC,sCAAsC,CAAC,CAAA;IAE1G,MAAM,eAAe,GAAG,MAAM;QAC5B,CAAC,CAAC,IAAA,0BAAe,EACb,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC7C,OAAO,YAAY,CAAC,wBAAwB,CAAC,2BAA2B,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YAC9F,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CACH;QACH,CAAC,CAAC,SAAS,CAAA;IAEb,MAAM,WAAW,GAAG,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,4BAAc,EAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;IAE9G,MAAM,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,GAAG,IAAA,yBAAW,EAAC,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;IAE7F,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,MAAM,IAAA,6BAAgB,EAC9E,mBAAmB,EACnB,IAAA,0BAAe,EAAC,gBAAgB,CAAC,EACjC,SAAS,CAAC,YAAY,EACtB,WAAW,CAAC,mBAAmB,EAC/B,EAAE,CACH,CAAA;IAED,MAAM,cAAc,GAAG,IAAA,8BAAa,EAClC,MAAM,IAAA,iCAAgB,EAAC,IAAA,+BAAiB,EAAC,WAAW,CAAC,EAAE,IAAA,0BAAe,EAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAC7F,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAC9C,CAAA;IAED,MAAM,cAAc,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAEzC,MAAM,YAAY,GAChB,cAAc,KAAK,SAAS;QAC1B,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7B,CAAC,CAAC,MAAM,IAAA,kBAAY,EAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;IAE/D,MAAM,oBAAoB,GAAyB;QACjD,YAAY,EAAE,eAAe;QAC7B,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;KACjC,CAAA;IACD,MAAM,SAAS,GACb,eAAe,KAAK,SAAS;QAC3B,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,oBAAoB,CAAC;QAC1F,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAA;IAE5B,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAE7C,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,IAAA,4CAA4B,EACrE,SAAS,CAAC,YAAY,EACtB,oBAAoB,EACpB,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EACvG;QACE,UAAU,EAAE,mBAAmB;KAChC,EACD,iBAAiB,EACjB,WAAW,CAAC,mBAAmB,EAC/B,EAAE,CAAC,SAAS,CACb,CAAA;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAY,EAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IAErD,MAAM,YAAY,GAAG,MAAM,IAAA,8BAAgB,EACzC,SAAS,CAAC,YAAY,EACtB,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,QAAQ,EACR,SAAS,CAAC,eAAe,EACzB,EAAE,CAAC,IAAI,CACR,CAAA;IAED,MAAM,YAAY,GAAG,MAAM,IAAA,6BAAe,EAAC,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;IAErG,MAAM,eAAe,GAAG,MAAM,IAAA,qCAAqB,EACjD,YAAY,CAAC,WAAW,CAAC,eAAe,EACxC,YAAY,CAAC,uBAAuB,EACpC,EAAE,CAAC,IAAI,CACR,CAAA;IAED,MAAM,KAAK,GAAgB;QACzB,WAAW,EAAE,OAAO;QACpB,YAAY,EAAE,YAAY;QAC1B,UAAU,EAAE,MAAM,IAAA,6BAAgB,EAAC,IAAA,oBAAS,EAAC,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,CAAC,GAAG,CAAC;QAChH,WAAW,EAAE,cAAc;QAC3B,eAAe;QACf,sBAAsB,EAAE,IAAI,GAAG,EAAE;QACjC,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;QACpD,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpC,YAAY;KACb,CAAA;IAED,MAAM,oBAAoB,GAA+B;QACvD,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE;QAC3D,UAAU,EAAE,oBAAoB;KACjC,CAAA;IAED,MAAM,GAAG,GAAG,MAAM,IAAA,8CAAoB,EAAC,YAAY,CAAC,WAAW,CAAC,aAAa,EAAE,YAAY,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAA;IAEtH,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AAChD,CAAC;AACD,SAAgB,eAAe,CAAC,UAAoB,EAAE,YAAsB;IAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAA;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9C,CAAC"}

package/dist/src/createMessage.d.ts

@@ -0,0 +1,24 @@
+import { ClientState } from "./clientState";
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+import { MLSMessage } from "./message";
+import { Proposal } from "./proposal";
+export declare function createProposal(state: ClientState, publicMessage: boolean, proposal: Proposal, cs: CiphersuiteImpl, authenticatedData?: Uint8Array): Promise<{
+    newState: ClientState;
+    message: MLSMessage;
+}>;
+export declare function createApplicationMessage(state: ClientState, message: Uint8Array, cs: CiphersuiteImpl, authenticatedData?: Uint8Array): Promise<{
+    newState: {
+        secretTree: import("./secretTree").SecretTree;
+        groupContext: import("./groupContext").GroupContext;
+        keySchedule: import("./keySchedule").KeySchedule;
+        ratchetTree: import("./ratchetTree").RatchetTree;
+        privatePath: import("./privateKeyPath").PrivateKeyPath;
+        signaturePrivateKey: Uint8Array;
+        unappliedProposals: import("./unappliedProposals").UnappliedProposals;
+        confirmationTag: Uint8Array;
+        historicalReceiverData: Map<bigint, import("./clientState").EpochReceiverData>;
+        groupActiveState: import("./clientState").GroupActiveState;
+        clientConfig: import("./clientConfig").ClientConfig;
+    };
+    privateMessage: import("./privateMessage").PrivateMessage;
+}>;

package/dist/src/createMessage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createMessage.d.ts","sourceRoot":"","sources":["../../src/createMessage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,WAAW,EAAmB,MAAM,eAAe,CAAA;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAGtC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAGrC,wBAAsB,cAAc,CAClC,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,OAAO,EACtB,QAAQ,EAAE,QAAQ,EAClB,EAAE,EAAE,eAAe,EACnB,iBAAiB,GAAE,UAA6B,GAC/C,OAAO,CAAC;IAAE,QAAQ,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,CAkDzD;AAED,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,UAAU,EACnB,EAAE,EAAE,eAAe,EACnB,iBAAiB,GAAE,UAA6B;;;;;;;;;;;;;;;GAiBjD"}

package/dist/src/createMessage.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createProposal = createProposal;
+exports.createApplicationMessage = createApplicationMessage;
+const clientState_1 = require("./clientState");
+const messageProtection_1 = require("./messageProtection");
+const messageProtectionPublic_1 = require("./messageProtectionPublic");
+const unappliedProposals_1 = require("./unappliedProposals");
+async function createProposal(state, publicMessage, proposal, cs, authenticatedData = new Uint8Array()) {
+    if (publicMessage) {
+        const result = await (0, messageProtectionPublic_1.protectProposalPublic)(state.signaturePrivateKey, state.keySchedule.membershipKey, state.groupContext, authenticatedData, proposal, state.privatePath.leafIndex, cs);
+        const newState = await (0, clientState_1.processProposal)(state, { content: result.publicMessage.content, auth: result.publicMessage.auth, wireformat: "mls_public_message" }, proposal, cs.hash);
+        return {
+            newState,
+            message: { wireformat: "mls_public_message", version: "mls10", publicMessage: result.publicMessage },
+        };
+    }
+    else {
+        const result = await (0, messageProtection_1.protectProposal)(state.signaturePrivateKey, state.keySchedule.senderDataSecret, proposal, authenticatedData, state.groupContext, state.secretTree, state.privatePath.leafIndex, state.clientConfig.paddingConfig, cs);
+        const newState = {
+            ...state,
+            secretTree: result.newSecretTree,
+            unappliedProposals: (0, unappliedProposals_1.addUnappliedProposal)(result.proposalRef, state.unappliedProposals, proposal, state.privatePath.leafIndex),
+        };
+        return {
+            newState,
+            message: { wireformat: "mls_private_message", version: "mls10", privateMessage: result.privateMessage },
+        };
+    }
+}
+async function createApplicationMessage(state, message, cs, authenticatedData = new Uint8Array()) {
+    (0, clientState_1.checkCanSendApplicationMessages)(state);
+    const result = await (0, messageProtection_1.protectApplicationData)(state.signaturePrivateKey, state.keySchedule.senderDataSecret, message, authenticatedData, state.groupContext, state.secretTree, state.privatePath.leafIndex, state.clientConfig.paddingConfig, cs);
+    return { newState: { ...state, secretTree: result.newSecretTree }, privateMessage: result.privateMessage };
+}
+//# sourceMappingURL=createMessage.js.map

package/dist/src/createMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createMessage.js","sourceRoot":"","sources":["../../src/createMessage.ts"],"names":[],"mappings":";;AAQA,wCAwDC;AAED,4DAqBC;AAvFD,+CAA6F;AAG7F,2DAA6E;AAC7E,uEAAiE;AAEjE,6DAA2D;AAEpD,KAAK,UAAU,cAAc,CAClC,KAAkB,EAClB,aAAsB,EACtB,QAAkB,EAClB,EAAmB,EACnB,oBAAgC,IAAI,UAAU,EAAE;IAEhD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,IAAA,+CAAqB,EACxC,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,WAAW,CAAC,aAAa,EAC/B,KAAK,CAAC,YAAY,EAClB,iBAAiB,EACjB,QAAQ,EACR,KAAK,CAAC,WAAW,CAAC,SAAS,EAC3B,EAAE,CACH,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,IAAA,6BAAe,EACpC,KAAK,EACL,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,oBAAoB,EAAE,EAC5G,QAAQ,EACR,EAAE,CAAC,IAAI,CACR,CAAA;QACD,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE;SACrG,CAAA;IACH,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAe,EAClC,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAClC,QAAQ,EACR,iBAAiB,EACjB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,WAAW,CAAC,SAAS,EAC3B,KAAK,CAAC,YAAY,CAAC,aAAa,EAChC,EAAE,CACH,CAAA;QAED,MAAM,QAAQ,GAAG;YACf,GAAG,KAAK;YACR,UAAU,EAAE,MAAM,CAAC,aAAa;YAChC,kBAAkB,EAAE,IAAA,yCAAoB,EACtC,MAAM,CAAC,WAAW,EAClB,KAAK,CAAC,kBAAkB,EACxB,QAAQ,EACR,KAAK,CAAC,WAAW,CAAC,SAAS,CAC5B;SACF,CAAA;QAED,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,EAAE,UAAU,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE;SACxG,CAAA;IACH,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC5C,KAAkB,EAClB,OAAmB,EACnB,EAAmB,EACnB,oBAAgC,IAAI,UAAU,EAAE;IAEhD,IAAA,6CAA+B,EAAC,KAAK,CAAC,CAAA;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAA,0CAAsB,EACzC,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAClC,OAAO,EACP,iBAAiB,EACjB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,WAAW,CAAC,SAAS,EAC3B,KAAK,CAAC,YAAY,CAAC,aAAa,EAChC,EAAE,CACH,CAAA;IAED,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAA;AAC5G,CAAC"}

package/dist/src/credential.d.ts

@@ -0,0 +1,21 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { CredentialTypeName } from "./credentialType";
+export type Credential = CredentialBasic | CredentialX509;
+export type CredentialBasic = {
+    credentialType: "basic";
+    identity: Uint8Array;
+};
+export type CredentialX509 = {
+    credentialType: "x509";
+    certificates: Uint8Array[];
+};
+export type CredentialCustom = {
+    credentialType: CredentialTypeName;
+    data: Uint8Array;
+};
+export declare const encodeCredentialBasic: Encoder<CredentialBasic>;
+export declare const encodeCredentialX509: Encoder<CredentialX509>;
+export declare const encodeCredentialCustom: Encoder<CredentialCustom>;
+export declare const encodeCredential: Encoder<Credential>;
+export declare const decodeCredential: Decoder<Credential>;

package/dist/src/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../src/credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAA8B,MAAM,oBAAoB,CAAA;AACxE,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,kBAAkB,EAA8C,MAAM,kBAAkB,CAAA;AAEjG,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,cAAc,CAAA;AAEzD,MAAM,MAAM,eAAe,GAAG;IAAE,cAAc,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,CAAA;AAC/E,MAAM,MAAM,cAAc,GAAG;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,UAAU,EAAE,CAAA;CAAE,CAAA;AAEnF,MAAM,MAAM,gBAAgB,GAAG;IAAE,cAAc,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAEvF,eAAO,MAAM,qBAAqB,EAAE,OAAO,CAAC,eAAe,CAG1D,CAAA;AAED,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,cAAc,CAGxD,CAAA;AAED,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,gBAAgB,CAG5D,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAShD,CAAA;AAYD,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAUhD,CAAA"}

package/dist/src/credential.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeCredential = exports.encodeCredential = exports.encodeCredentialCustom = exports.encodeCredentialX509 = exports.encodeCredentialBasic = void 0;
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const credentialType_1 = require("./credentialType");
+exports.encodeCredentialBasic = (0, tlsEncoder_1.contramapEncoders)([credentialType_1.encodeCredentialType, variableLength_1.encodeVarLenData], (c) => [c.credentialType, c.identity]);
+exports.encodeCredentialX509 = (0, tlsEncoder_1.contramapEncoders)([credentialType_1.encodeCredentialType, (0, variableLength_1.encodeVarLenType)(variableLength_1.encodeVarLenData)], (c) => [c.credentialType, c.certificates]);
+exports.encodeCredentialCustom = (0, tlsEncoder_1.contramapEncoders)([credentialType_1.encodeCredentialType, variableLength_1.encodeVarLenData], (c) => [c.credentialType, c.data]);
+const encodeCredential = (c) => {
+    switch (c.credentialType) {
+        case "basic":
+            return (0, exports.encodeCredentialBasic)(c);
+        case "x509":
+            return (0, exports.encodeCredentialX509)(c);
+        default:
+            return (0, exports.encodeCredentialCustom)(c);
+    }
+};
+exports.encodeCredential = encodeCredential;
+const decodeCredentialBasic = (0, tlsDecoder_1.mapDecoder)(variableLength_1.decodeVarLenData, (identity) => ({
+    credentialType: "basic",
+    identity,
+}));
+const decodeCredentialX509 = (0, tlsDecoder_1.mapDecoder)((0, variableLength_1.decodeVarLenType)(variableLength_1.decodeVarLenData), (certificates) => ({ credentialType: "x509", certificates }));
+exports.decodeCredential = (0, tlsDecoder_1.flatMapDecoder)(credentialType_1.decodeCredentialType, (credentialType) => {
+    switch (credentialType) {
+        case "basic":
+            return decodeCredentialBasic;
+        case "x509":
+            return decodeCredentialX509;
+    }
+});
+//# sourceMappingURL=credential.js.map

package/dist/src/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../src/credential.ts"],"names":[],"mappings":";;;AAAA,mDAAwE;AACxE,mDAA+D;AAC/D,2DAA+G;AAC/G,qDAAiG;AASpF,QAAA,qBAAqB,GAA6B,IAAA,8BAAiB,EAC9E,CAAC,qCAAoB,EAAE,iCAAgB,CAAC,EACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAU,CAC/C,CAAA;AAEY,QAAA,oBAAoB,GAA4B,IAAA,8BAAiB,EAC5E,CAAC,qCAAoB,EAAE,IAAA,iCAAgB,EAAC,iCAAgB,CAAC,CAAC,EAC1D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,YAAY,CAAU,CACnD,CAAA;AAEY,QAAA,sBAAsB,GAA8B,IAAA,8BAAiB,EAChF,CAAC,qCAAoB,EAAE,iCAAgB,CAAC,EACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAU,CAC3C,CAAA;AAEM,MAAM,gBAAgB,GAAwB,CAAC,CAAC,EAAE,EAAE;IACzD,QAAQ,CAAC,CAAC,cAAc,EAAE,CAAC;QACzB,KAAK,OAAO;YACV,OAAO,IAAA,6BAAqB,EAAC,CAAC,CAAC,CAAA;QACjC,KAAK,MAAM;YACT,OAAO,IAAA,4BAAoB,EAAC,CAAC,CAAC,CAAA;QAChC;YACE,OAAO,IAAA,8BAAsB,EAAC,CAAqB,CAAC,CAAA;IACxD,CAAC;AACH,CAAC,CAAA;AATY,QAAA,gBAAgB,oBAS5B;AAED,MAAM,qBAAqB,GAA6B,IAAA,uBAAU,EAAC,iCAAgB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClG,cAAc,EAAE,OAAO;IACvB,QAAQ;CACT,CAAC,CAAC,CAAA;AAEH,MAAM,oBAAoB,GAA4B,IAAA,uBAAU,EAC9D,IAAA,iCAAgB,EAAC,iCAAgB,CAAC,EAClC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAC7D,CAAA;AAEY,QAAA,gBAAgB,GAAwB,IAAA,2BAAc,EACjE,qCAAoB,EACpB,CAAC,cAAc,EAAuB,EAAE;IACtC,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,OAAO;YACV,OAAO,qBAAqB,CAAA;QAC9B,KAAK,MAAM;YACT,OAAO,oBAAoB,CAAA;IAC/B,CAAC;AACH,CAAC,CACF,CAAA"}

package/dist/src/credentialType.d.ts

@@ -0,0 +1,11 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+declare const credentialTypes: {
+    readonly basic: 1;
+    readonly x509: 2;
+};
+export type CredentialTypeName = keyof typeof credentialTypes;
+export type CredentialTypeValue = (typeof credentialTypes)[CredentialTypeName];
+export declare const encodeCredentialType: Encoder<CredentialTypeName>;
+export declare const decodeCredentialType: Decoder<CredentialTypeName>;
+export {};

package/dist/src/credentialType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialType.d.ts","sourceRoot":"","sources":["../../src/credentialType.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAoB,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAoB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAG9D,QAAA,MAAM,eAAe;;;CAGX,CAAA;AAEV,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,eAAe,CAAA;AAC7D,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,kBAAkB,CAAC,CAAA;AAE9E,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,kBAAkB,CAG5D,CAAA;AAED,eAAO,MAAM,oBAAoB,EAAE,OAAO,CAAC,kBAAkB,CAG5D,CAAA"}

package/dist/src/credentialType.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeCredentialType = exports.encodeCredentialType = void 0;
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const enumHelpers_1 = require("./util/enumHelpers");
+const credentialTypes = {
+    basic: 1,
+    x509: 2,
+};
+exports.encodeCredentialType = (0, tlsEncoder_1.contramapEncoder)(number_1.encodeUint16, (0, enumHelpers_1.openEnumNumberEncoder)(credentialTypes));
+exports.decodeCredentialType = (0, tlsDecoder_1.mapDecoderOption)(number_1.decodeUint16, (0, enumHelpers_1.openEnumNumberToKey)(credentialTypes));
+//# sourceMappingURL=credentialType.js.map

package/dist/src/credentialType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialType.js","sourceRoot":"","sources":["../../src/credentialType.ts"],"names":[],"mappings":";;;AAAA,2CAA2D;AAC3D,mDAA8D;AAC9D,mDAA8D;AAC9D,oDAA+E;AAE/E,MAAM,eAAe,GAAG;IACtB,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;CACC,CAAA;AAKG,QAAA,oBAAoB,GAAgC,IAAA,6BAAgB,EAC/E,qBAAY,EACZ,IAAA,mCAAqB,EAAC,eAAe,CAAC,CACvC,CAAA;AAEY,QAAA,oBAAoB,GAAgC,IAAA,6BAAgB,EAC/E,qBAAY,EACZ,IAAA,iCAAmB,EAAC,eAAe,CAAC,CACrC,CAAA"}

package/dist/src/crypto/aead.d.ts

@@ -0,0 +1,8 @@
+import { AeadInterface } from "@hpke/core";
+export type AeadAlgorithm = "AES128GCM" | "CHACHA20POLY1305" | "AES256GCM";
+export interface Aead {
+    hpkeInterface(): AeadInterface;
+    encrypt(key: Uint8Array, nonce: Uint8Array, aad: Uint8Array, plaintext: Uint8Array): Promise<Uint8Array>;
+    decrypt(key: Uint8Array, nonce: Uint8Array, aad: Uint8Array, ciphertext: Uint8Array): Promise<Uint8Array>;
+}
+export declare function makeAead(aeadAlg: AeadAlgorithm): Promise<Aead>;

package/dist/src/crypto/aead.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aead.d.ts","sourceRoot":"","sources":["../../../src/crypto/aead.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAI1C,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,kBAAkB,GAAG,WAAW,CAAA;AAE1E,MAAM,WAAW,IAAI;IACnB,aAAa,IAAI,aAAa,CAAA;IAC9B,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACxG,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAC1G;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA+CpE"}

package/dist/src/crypto/aead.js

@@ -0,0 +1,105 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeAead = makeAead;
+const core_1 = require("@hpke/core");
+const byteArray_1 = require("../util/byteArray");
+const mlsError_1 = require("../mlsError");
+async function makeAead(aeadAlg) {
+    switch (aeadAlg) {
+        case "AES128GCM":
+            return {
+                hpkeInterface() {
+                    return new core_1.Aes128Gcm();
+                },
+                encrypt(key, nonce, aad, plaintext) {
+                    return encryptAesGcm(key, nonce, aad, plaintext);
+                },
+                decrypt(key, nonce, aad, ciphertext) {
+                    return decryptAesGcm(key, nonce, aad, ciphertext);
+                },
+            };
+        case "AES256GCM":
+            return {
+                hpkeInterface() {
+                    return new core_1.Aes256Gcm();
+                },
+                encrypt(key, nonce, aad, plaintext) {
+                    return encryptAesGcm(key, nonce, aad, plaintext);
+                },
+                decrypt(key, nonce, aad, ciphertext) {
+                    return decryptAesGcm(key, nonce, aad, ciphertext);
+                },
+            };
+        case "CHACHA20POLY1305":
+            try {
+                const { Chacha20Poly1305 } = await Promise.resolve().then(() => __importStar(require("@hpke/chacha20poly1305")));
+                const { chacha20poly1305 } = await Promise.resolve().then(() => __importStar(require("@noble/ciphers/chacha")));
+                return {
+                    hpkeInterface() {
+                        return new Chacha20Poly1305();
+                    },
+                    async encrypt(key, nonce, aad, plaintext) {
+                        return chacha20poly1305(key, nonce, aad).encrypt(plaintext);
+                    },
+                    async decrypt(key, nonce, aad, ciphertext) {
+                        return chacha20poly1305(key, nonce, aad).decrypt(ciphertext);
+                    },
+                };
+            }
+            catch (err) {
+                throw new mlsError_1.DependencyError("Optional dependency '@hpke/chacha20poly1305' is not installed. Please install it to use this feature.");
+            }
+    }
+}
+async function encryptAesGcm(key, nonce, aad, plaintext) {
+    const cryptoKey = await crypto.subtle.importKey("raw", (0, byteArray_1.bytesToBuffer)(key), { name: "AES-GCM" }, false, ["encrypt"]);
+    const result = await crypto.subtle.encrypt({
+        name: "AES-GCM",
+        iv: (0, byteArray_1.bytesToBuffer)(nonce),
+        additionalData: aad.length > 0 ? (0, byteArray_1.bytesToBuffer)(aad) : undefined,
+    }, cryptoKey, (0, byteArray_1.bytesToBuffer)(plaintext));
+    return new Uint8Array(result);
+}
+async function decryptAesGcm(key, nonce, aad, ciphertext) {
+    const cryptoKey = await crypto.subtle.importKey("raw", (0, byteArray_1.bytesToBuffer)(key), { name: "AES-GCM" }, false, ["decrypt"]);
+    const result = await crypto.subtle.decrypt({
+        name: "AES-GCM",
+        iv: (0, byteArray_1.bytesToBuffer)(nonce),
+        additionalData: aad.length > 0 ? (0, byteArray_1.bytesToBuffer)(aad) : undefined,
+    }, cryptoKey, (0, byteArray_1.bytesToBuffer)(ciphertext));
+    return new Uint8Array(result);
+}
+//# sourceMappingURL=aead.js.map

package/dist/src/crypto/aead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aead.js","sourceRoot":"","sources":["../../../src/crypto/aead.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaA,4BA+CC;AA5DD,qCAAiD;AAEjD,iDAAiD;AACjD,0CAA6C;AAUtC,KAAK,UAAU,QAAQ,CAAC,OAAsB;IACnD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,WAAW;YACd,OAAO;gBACL,aAAa;oBACX,OAAO,IAAI,gBAAS,EAAE,CAAA;gBACxB,CAAC;gBACD,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS;oBAChC,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;gBAClD,CAAC;gBACD,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU;oBACjC,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;gBACnD,CAAC;aACF,CAAA;QACH,KAAK,WAAW;YACd,OAAO;gBACL,aAAa;oBACX,OAAO,IAAI,gBAAS,EAAE,CAAA;gBACxB,CAAC;gBACD,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS;oBAChC,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;gBAClD,CAAC;gBACD,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU;oBACjC,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;gBACnD,CAAC;aACF,CAAA;QACH,KAAK,kBAAkB;YACrB,IAAI,CAAC;gBACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,wDAAa,wBAAwB,GAAC,CAAA;gBACnE,MAAM,EAAE,gBAAgB,EAAE,GAAG,wDAAa,uBAAuB,GAAC,CAAA;gBAClE,OAAO;oBACL,aAAa;wBACX,OAAO,IAAI,gBAAgB,EAAE,CAAA;oBAC/B,CAAC;oBACD,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS;wBACtC,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;oBAC7D,CAAC;oBACD,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU;wBACvC,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;oBAC9D,CAAC;iBACF,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,0BAAe,CACvB,uGAAuG,CACxG,CAAA;YACH,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAe,EACf,KAAiB,EACjB,GAAe,EACf,SAAqB;IAErB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,yBAAa,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IACnH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxC;QACE,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,IAAA,yBAAa,EAAC,KAAK,CAAC;QACxB,cAAc,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,yBAAa,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;KAChE,EACD,SAAS,EACT,IAAA,yBAAa,EAAC,SAAS,CAAC,CACzB,CAAA;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAe,EACf,KAAiB,EACjB,GAAe,EACf,UAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,yBAAa,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IACnH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxC;QACE,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,IAAA,yBAAa,EAAC,KAAK,CAAC;QACxB,cAAc,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,yBAAa,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;KAChE,EACD,SAAS,EACT,IAAA,yBAAa,EAAC,UAAU,CAAC,CAC1B,CAAA;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC"}