{"version":3,"sources":["jsdelivr-header.js","/npm/@elastic/node-crypto@1.2.3/lib/crypto.js"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA,ACNA,aAaA,IAAI,UAAa,MAAQ,KAAK,WAAc,SAAU,EAAS,EAAY,EAAG,GAE1E,OAAO,IAAK,IAAM,EAAI,WAAU,SAAU,EAAS,GAC/C,SAAS,EAAU,GAAS,IAAM,EAAK,EAAU,KAAK,GAAS,CAAE,MAAO,GAAK,EAAO,EAAI,CAAE,CAC1F,SAAS,EAAS,GAAS,IAAM,EAAK,EAAiB,MAAE,GAAS,CAAE,MAAO,GAAK,EAAO,EAAI,CAAE,CAC7F,SAAS,EAAK,GAJlB,IAAe,EAIa,EAAO,KAAO,EAAQ,EAAO,QAJ1C,EAIyD,EAAO,MAJhD,aAAiB,EAAI,EAAQ,IAAI,GAAE,SAAU,GAAW,EAAQ,EAAQ,KAIjB,KAAK,EAAW,EAAW,CAC7G,GAAM,EAAY,EAAU,MAAM,EAAS,GAAc,KAAK,OAClE,GACJ,EACI,YAAe,MAAQ,KAAK,aAAgB,SAAU,EAAS,GAC/D,IAAsG,EAAG,EAAG,EAAG,EAA3G,EAAI,CAAE,MAAO,EAAG,KAAM,WAAa,GAAW,EAAP,EAAE,GAAQ,MAAM,EAAE,GAAI,OAAO,EAAE,EAAI,EAAG,KAAM,GAAI,IAAK,IAChG,OAAO,EAAI,CAAE,KAAM,EAAK,GAAI,MAAS,EAAK,GAAI,OAAU,EAAK,IAAwB,mBAAX,SAA0B,EAAE,OAAO,UAAY,WAAa,OAAO,IAAM,GAAI,EACvJ,SAAS,EAAK,GAAK,OAAO,SAAU,GAAK,OACzC,SAAc,GACV,GAAI,EAAG,MAAM,IAAI,UAAU,mCAC3B,KAAO,IAAM,EAAI,EAAG,EAAG,KAAO,EAAI,IAAK,OACnC,GAAI,EAAI,EAAG,IAAM,EAAY,EAAR,EAAG,GAAS,EAAU,OAAI,EAAG,GAAK,EAAS,SAAO,EAAI,EAAU,SAAM,EAAE,KAAK,GAAI,GAAK,EAAE,SAAW,EAAI,EAAE,KAAK,EAAG,EAAG,KAAK,KAAM,OAAO,EAE3J,OADI,EAAI,EAAG,IAAG,EAAK,CAAS,EAAR,EAAG,GAAQ,EAAE,QACzB,EAAG,IACP,KAAK,EAAG,KAAK,EAAG,EAAI,EAAI,MACxB,KAAK,EAAc,OAAX,EAAE,QAAgB,CAAE,MAAO,EAAG,GAAI,MAAM,GAChD,KAAK,EAAG,EAAE,QAAS,EAAI,EAAG,GAAI,EAAK,CAAC,GAAI,SACxC,KAAK,EAAG,EAAK,EAAE,IAAI,MAAO,EAAE,KAAK,MAAO,SACxC,QACI,KAAM,EAAI,EAAE,MAAM,EAAI,EAAE,OAAS,GAAK,EAAE,EAAE,OAAS,KAAkB,IAAV,EAAG,IAAsB,IAAV,EAAG,IAAW,CAAE,EAAI,EAAG,QAAU,CAC3G,GAAc,IAAV,EAAG,MAAc,GAAM,EAAG,GAAK,EAAE,IAAM,EAAG,GAAK,EAAE,IAAM,CAAE,EAAE,MAAQ,EAAG,GAAI,KAAO,CACrF,GAAc,IAAV,EAAG,IAAY,EAAE,MAAQ,EAAE,GAAI,CAAE,EAAE,MAAQ,EAAE,GAAI,EAAI,EAAI,KAAO,CACpE,GAAI,GAAK,EAAE,MAAQ,EAAE,GAAI,CAAE,EAAE,MAAQ,EAAE,GAAI,EAAE,IAAI,KAAK,GAAK,KAAO,CAC9D,EAAE,IAAI,EAAE,IAAI,MAChB,EAAE,KAAK,MAAO,SAEtB,EAAK,EAAK,KAAK,EAAS,EAC5B,CAAE,MAAO,GAAK,EAAK,CAAC,EAAG,GAAI,EAAI,CAAG,CAAE,QAAU,EAAI,EAAI,CAAG,CACzD,GAAY,EAAR,EAAG,GAAQ,MAAM,EAAG,GAAI,MAAO,CAAE,MAAO,EAAG,GAAK,EAAG,QAAK,EAAQ,MAAM,EAC9E,CAtBgD,CAAK,CAAC,EAAG,GAAK,CAAG,CAuBrE,EACA,OAAO,eAAe,QAAS,aAAc,CAAE,OAAO,IACtD,IAAI,OAAS,QAAQ,UACjB,mBAAqB,GACrB,qBAAuB,GACvB,oBAAsB,GACtB,eAAiB,IACjB,WAAa,SACb,iBAAmB,cACnB,2BAA6B,SACjC,SAAS,cAAc,GAEnB,IADoB,EAAG,cAEnB,MAAM,IAAI,MAAM,4BAExB,CACA,SAAS,aAAa,GAClB,GAAW,MAAP,EAAJ,CAGA,GAAmB,iBAAR,EACP,MAAM,IAAI,MAAM,wBAEpB,GAAmB,IAAf,EAAI,OACJ,MAAM,IAAI,MAAM,gCALpB,CAOJ,CACA,SAAS,gBACL,OAAO,OAAO,YAAY,qBAC9B,CACA,SAAS,cACL,OAAO,OAAO,YAAY,mBAC9B,CACA,SAAS,iBAAiB,EAAe,GAChC,OAAO,SAAS,KACjB,EAAO,OAAO,KAAK,EAAM,6BAE7B,IAAI,EAAM,OAAO,WAAW,EAAe,EAAM,eAAgB,oBAAqB,YACtF,OAAK,OAAO,SAAS,GAGd,EAFI,OAAO,KAAK,EAAK,SAGhC,CACA,SAAS,aAAa,EAAe,GAIjC,OAHK,OAAO,SAAS,KACjB,EAAO,OAAO,KAAK,EAAM,6BAEtB,IAAI,SAAQ,SAAU,EAAS,GAClC,OAAO,OAAO,EAAe,EAAM,eAAgB,oBAAqB,YAAY,SAAU,EAAK,GAC3F,EACA,EAAO,IAGN,OAAO,SAAS,KACjB,EAAM,OAAO,KAAK,EAAK,WAE3B,EAAQ,GACZ,GACJ,GACJ,CACA,SAAS,WAAW,GAChB,IAAI,EAAgB,KAAK,UAAU,GACnC,QAAsB,IAAlB,EACA,MAAM,MAAM,+CAEhB,OAAO,CACX,CACA,SAAS,QAAQ,EAAiB,EAAI,EAAK,EAAM,GAC7C,IAAI,EAAS,OAAO,eAAe,iBAAkB,EAAK,GAC/C,MAAP,GACA,EAAO,OAAO,OAAO,KAAK,EAAK,SAEnC,IAAI,EAAY,OAAO,OAAO,CAAC,EAAO,OAAO,EAAiB,QAAS,EAAO,UAC1E,EAAM,EAAO,aACjB,OAAO,OAAO,OAAO,CAAC,EAAM,EAAI,EAAK,IAAY,SAAS,2BAC9D,CACA,SAAS,QAAQ,EAAK,EAAa,GAC/B,IAAI,EAAK,EAAY,MAAM,qBAAsB,qBAAuB,oBACpE,EAAM,EAAY,MAAM,qBAAuB,mBAAoB,qBAAuB,mBAAqB,IAC/G,EAAO,EAAY,MAAM,qBAAuB,mBAAqB,IACrE,EAAW,OAAO,iBAAiB,iBAAkB,EAAK,GAC9D,EAAS,WAAW,GACT,MAAP,GACA,EAAS,OAAO,OAAO,KAAK,EAAK,SAErC,IAAI,EAAY,EAAS,OAAO,OAAM,EAAW,QAAU,EAAS,MAAM,QAC1E,OAAO,KAAK,MAAM,EACtB,CACA,SAAS,SAAS,GACd,OAAO,OAAO,SAAS,GACjB,EACA,OAAO,KAAK,EAAiB,2BACvC,CAKA,SAAS,eAAe,GACpB,cAAc,GACd,IAAI,EAAgB,EAAK,cACzB,MAAO,CACH,QAAS,SAAU,EAAO,GACtB,OAAO,UAAU,UAAM,OAAQ,GAAQ,WACnC,IAAI,EAAM,EAAiB,EAAI,EAC/B,OAAO,YAAY,MAAM,SAAU,GAC/B,OAAQ,EAAG,OACP,KAAK,EAKD,OAJA,aAAa,GACb,EAAO,gBACP,EAAkB,WAAW,GAC7B,EAAK,cACE,CAAC,EAAa,aAAa,EAAe,IACrD,KAAK,EAED,OADA,EAAM,EAAG,OACF,CAAC,EAAc,QAAQ,EAAiB,EAAI,EAAK,EAAM,IAE1E,GACJ,GACJ,EACA,QAAS,SAAU,EAAiB,GAChC,OAAO,UAAU,UAAM,OAAQ,GAAQ,WACnC,IAAI,EAAa,EACjB,OAAO,YAAY,MAAM,SAAU,GAC/B,OAAQ,EAAG,OACP,KAAK,EAID,OAHA,aAAa,GACb,EAAc,SAAS,GACvB,EAAO,EAAY,MAAM,EAAG,sBACrB,CAAC,EAAa,aAAa,EAAe,IACrD,KAAK,EAED,MAAO,CAAC,EAAc,QADhB,EAAG,OAC0B,EAAa,IAE5D,GACJ,GACJ,EACA,YAAa,SAAU,EAAO,GAC1B,aAAa,GACb,IAAI,EAAkB,WAAW,GAC7B,EAAK,cACL,EAAO,gBAEX,OAAO,QAAQ,EAAiB,EADtB,iBAAiB,EAAe,GACD,EAAM,EACnD,EACA,YAAa,SAAU,EAAiB,GACpC,aAAa,GACb,IAAI,EAAc,SAAS,GACvB,EAAO,EAAY,MAAM,EAAG,sBAEhC,OAAO,QADG,iBAAiB,EAAe,GACtB,EAAa,EACrC,EAER,CACA,QAAQ,QAAU","file":"/npm/@elastic/node-crypto@1.2.3/lib/crypto.js","sourceRoot":"","sourcesContent":["/**\n * Minified by jsDelivr using Terser v5.39.0.\n * Original file: /npm/@elastic/node-crypto@1.2.3/lib/crypto.js\n *\n * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files\n */\n","\"use strict\";\n/**\n * This module provides easy, yet strong, facilities for encrypting and decrypting serializable objects. The\n * ease-of-use comes from the fact that this module is opinionated in its (strong) choice of cryptographic algorithms,\n * lengths, and iterations that cannot be overriden by its users.\n *\n * The module exports a `makeCryptoWith` function that takes a single argument, an `opts` object. This object requires\n * a property named `encryptionKey` which is a passphrase used by the encryption and decryption algorithms within\n * this module. The `makeCryptoWith` function returns an object containing two functions, `encrypt` and `decrypt`.\n *\n * Both the `encrypt` and `decrypt` functions are inverses of each other and return Promises. That is:\n *   someSerializableObj === await decrypt(await encrypt(someSerializableObj)).\n */\nvar __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nvar __generator = (this && this.__generator) || function (thisArg, body) {\n    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;\n    return g = { next: verb(0), \"throw\": verb(1), \"return\": verb(2) }, typeof Symbol === \"function\" && (g[Symbol.iterator] = function() { return this; }), g;\n    function verb(n) { return function (v) { return step([n, v]); }; }\n    function step(op) {\n        if (f) throw new TypeError(\"Generator is already executing.\");\n        while (g && (g = 0, op[0] && (_ = 0)), _) try {\n            if (f = 1, y && (t = op[0] & 2 ? y[\"return\"] : op[0] ? y[\"throw\"] || ((t = y[\"return\"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;\n            if (y = 0, t) op = [op[0] & 2, t.value];\n            switch (op[0]) {\n                case 0: case 1: t = op; break;\n                case 4: _.label++; return { value: op[1], done: false };\n                case 5: _.label++; y = op[1]; op = [0]; continue;\n                case 7: op = _.ops.pop(); _.trys.pop(); continue;\n                default:\n                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }\n                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }\n                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }\n                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }\n                    if (t[2]) _.ops.pop();\n                    _.trys.pop(); continue;\n            }\n            op = body.call(thisArg, _);\n        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }\n        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };\n    }\n};\nObject.defineProperty(exports, \"__esModule\", { value: true });\nvar crypto = require(\"crypto\");\nvar IV_LENGTH_IN_BYTES = 12;\nvar SALT_LENGTH_IN_BYTES = 64;\nvar KEY_LENGTH_IN_BYTES = 32;\nvar KEY_ITERATIONS = 10000;\nvar KEY_DIGEST = 'sha512';\nvar CIPHER_ALGORITHM = 'aes-256-gcm';\nvar ENCRYPTION_RESULT_ENCODING = 'base64';\nfunction _validateOpts(_a) {\n    var encryptionKey = _a.encryptionKey;\n    if (!encryptionKey) {\n        throw new Error('encryptionKey is required');\n    }\n}\nfunction _validateAAD(aad) {\n    if (aad == null) {\n        return;\n    }\n    if (typeof aad !== 'string') {\n        throw new Error('AAD must be a string');\n    }\n    if (aad.length === 0) {\n        throw new Error('AAD cannot be an empty string');\n    }\n}\nfunction _generateSalt() {\n    return crypto.randomBytes(SALT_LENGTH_IN_BYTES);\n}\nfunction _generateIV() {\n    return crypto.randomBytes(IV_LENGTH_IN_BYTES);\n}\nfunction _generateKeySync(encryptionKey, salt) {\n    if (!Buffer.isBuffer(salt)) {\n        salt = Buffer.from(salt, ENCRYPTION_RESULT_ENCODING);\n    }\n    var key = crypto.pbkdf2Sync(encryptionKey, salt, KEY_ITERATIONS, KEY_LENGTH_IN_BYTES, KEY_DIGEST);\n    if (!Buffer.isBuffer(key)) {\n        return Buffer.from(key, 'binary');\n    }\n    return key;\n}\nfunction _generateKey(encryptionKey, salt) {\n    if (!Buffer.isBuffer(salt)) {\n        salt = Buffer.from(salt, ENCRYPTION_RESULT_ENCODING);\n    }\n    return new Promise(function (resolve, reject) {\n        crypto.pbkdf2(encryptionKey, salt, KEY_ITERATIONS, KEY_LENGTH_IN_BYTES, KEY_DIGEST, function (err, key) {\n            if (err) {\n                reject(err);\n                return;\n            }\n            if (!Buffer.isBuffer(key)) {\n                key = Buffer.from(key, 'binary');\n            }\n            resolve(key);\n        });\n    });\n}\nfunction _serialize(serializable) {\n    var serializedObj = JSON.stringify(serializable);\n    if (serializedObj === undefined) {\n        throw Error('Object to be encrypted must be serializable');\n    }\n    return serializedObj;\n}\nfunction encrypt(serializedInput, iv, key, salt, aad) {\n    var cipher = crypto.createCipheriv(CIPHER_ALGORITHM, key, iv);\n    if (aad != null) {\n        cipher.setAAD(Buffer.from(aad, 'utf8'));\n    }\n    var encrypted = Buffer.concat([cipher.update(serializedInput, 'utf8'), cipher.final()]);\n    var tag = cipher.getAuthTag();\n    return Buffer.concat([salt, iv, tag, encrypted]).toString(ENCRYPTION_RESULT_ENCODING);\n}\nfunction decrypt(key, outputBytes, aad) {\n    var iv = outputBytes.slice(SALT_LENGTH_IN_BYTES, SALT_LENGTH_IN_BYTES + IV_LENGTH_IN_BYTES);\n    var tag = outputBytes.slice(SALT_LENGTH_IN_BYTES + IV_LENGTH_IN_BYTES, SALT_LENGTH_IN_BYTES + IV_LENGTH_IN_BYTES + 16); // Auth tag is always 16 bytes long\n    var text = outputBytes.slice(SALT_LENGTH_IN_BYTES + IV_LENGTH_IN_BYTES + 16);\n    var decipher = crypto.createDecipheriv(CIPHER_ALGORITHM, key, iv);\n    decipher.setAuthTag(tag);\n    if (aad != null) {\n        decipher.setAAD(Buffer.from(aad, 'utf8'));\n    }\n    var decrypted = decipher.update(text, undefined, 'utf8') + decipher.final('utf8');\n    return JSON.parse(decrypted);\n}\nfunction asBuffer(encryptedOutput) {\n    return Buffer.isBuffer(encryptedOutput)\n        ? encryptedOutput\n        : Buffer.from(encryptedOutput, ENCRYPTION_RESULT_ENCODING);\n}\n/**\n * Implmenetation of encrypt() and decrypt() taken from https://gist.github.com/AndiDittrich/4629e7db04819244e843,\n * which was recommended by @jaymode\n */\nfunction makeCryptoWith(opts) {\n    _validateOpts(opts);\n    var encryptionKey = opts.encryptionKey;\n    return {\n        encrypt: function (input, aad) {\n            return __awaiter(this, void 0, void 0, function () {\n                var salt, serializedInput, iv, key;\n                return __generator(this, function (_a) {\n                    switch (_a.label) {\n                        case 0:\n                            _validateAAD(aad);\n                            salt = _generateSalt();\n                            serializedInput = _serialize(input);\n                            iv = _generateIV();\n                            return [4 /*yield*/, _generateKey(encryptionKey, salt)];\n                        case 1:\n                            key = _a.sent();\n                            return [2 /*return*/, encrypt(serializedInput, iv, key, salt, aad)];\n                    }\n                });\n            });\n        },\n        decrypt: function (encryptedOutput, aad) {\n            return __awaiter(this, void 0, void 0, function () {\n                var outputBytes, salt, key;\n                return __generator(this, function (_a) {\n                    switch (_a.label) {\n                        case 0:\n                            _validateAAD(aad);\n                            outputBytes = asBuffer(encryptedOutput);\n                            salt = outputBytes.slice(0, SALT_LENGTH_IN_BYTES);\n                            return [4 /*yield*/, _generateKey(encryptionKey, salt)];\n                        case 1:\n                            key = _a.sent();\n                            return [2 /*return*/, decrypt(key, outputBytes, aad)];\n                    }\n                });\n            });\n        },\n        encryptSync: function (input, aad) {\n            _validateAAD(aad);\n            var serializedInput = _serialize(input);\n            var iv = _generateIV();\n            var salt = _generateSalt();\n            var key = _generateKeySync(encryptionKey, salt);\n            return encrypt(serializedInput, iv, key, salt, aad);\n        },\n        decryptSync: function (encryptedOutput, aad) {\n            _validateAAD(aad);\n            var outputBytes = asBuffer(encryptedOutput);\n            var salt = outputBytes.slice(0, SALT_LENGTH_IN_BYTES);\n            var key = _generateKeySync(encryptionKey, salt);\n            return decrypt(key, outputBytes, aad);\n        },\n    };\n}\nexports.default = makeCryptoWith;\n"]}