From b845ff176d5467a960228fffc1f170dcfe97c766 Mon Sep 17 00:00:00 2001
From: Daniel Yang <dev@daniel-yang.com>
Date: Sat, 18 Jul 2026 10:10:26 -0700
Subject: [PATCH] Add pkvault seal/unseal: encrypt any file with the vault
 identity
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Clean rebuild of the seal-unseal branch from main containing only the
pkvault/crypto/spec work (the previous branch had accidentally swept
in unrelated pklinks files from a shared working tree).

pkvault seal <file> / unseal <file.pkfile> wrap the PKFILE1 envelope
(SPEC-FILE new §7.1: canonical single-file serialization, header then
chunks in index order, no trailing bytes, .pkfile). Works anywhere on
disk — a repo only upgrades the default recipient set: --recipient
flags → manifest → yourself, with the chosen set always echoed.
Sealing uses only public recipients (no unlock, write-only); unsealing
resolves the per-file key through the agent's new op:"unseal-file" —
the identity scalar never crosses the socket. @pksuite/crypto gains an
unwrapFileKey alternative to identity in openFileEnvelope (copies in,
copies out) and bumps to 0.2.0.

Durability and data-loss hardening (review rounds 1–2):
- input/output aliases detected by device/inode (case-insensitive
  filesystems, hard links) and refused even with --force, both commands
- the crypto state is created after the input opens, geometry comes
  from fstat of the opened descriptor, and disposal runs before close
  on every failure path — a close error can never skip key disposal
- all writes loop via txn.writeAllSync (short writes)
- no-force installs use link(2): a destination created after the
  precheck fails E_EXISTS instead of being replaced by rename
- destination directory fsynced after install (POSIX durability)
- finalization inside the atomic window; 0600 plaintext outputs;
  input-mutation detection while sealing; no temp litter on failure

Tests: crypto 21/21; pkvault 228/228 including hard-link and
case-folded alias refusals and a race test that reaches the actual
link(2) window via an injected destination.
---
 apps/pkvault/CHANGELOG.md          |  10 ++
 apps/pkvault/README.md             |  21 ++++
 apps/pkvault/package.json          |   2 +-
 apps/pkvault/src/agent.js          |  20 +++
 apps/pkvault/src/bin.js            |  15 +++
 apps/pkvault/src/cli.js            | 190 ++++++++++++++++++++++++++++-
 apps/pkvault/src/txn.js            |   2 +-
 apps/pkvault/test/agent.test.js    |  31 +++++
 apps/pkvault/test/pkfile.test.js   | 162 ++++++++++++++++++++++++
 packages/crypto/README.md          |   6 +
 packages/crypto/dist/SPEC-FILE.md  |  17 +++
 packages/crypto/dist/index.cjs     |   6 +-
 packages/crypto/dist/index.cjs.map |   4 +-
 packages/crypto/dist/index.d.ts    |  10 +-
 packages/crypto/dist/index.js      |   6 +-
 packages/crypto/dist/index.js.map  |   4 +-
 packages/crypto/package.json       |   2 +-
 packages/crypto/src/file.js        |  12 +-
 packages/crypto/src/index.d.ts     |  10 +-
 packages/crypto/test/file.test.js  |  33 +++++
 pnpm-lock.yaml                     |   2 +-
 spec/SPEC-FILE.md                  |  17 +++
 22 files changed, 565 insertions(+), 17 deletions(-)
 create mode 100644 apps/pkvault/test/pkfile.test.js

diff --git a/apps/pkvault/CHANGELOG.md b/apps/pkvault/CHANGELOG.md
index 64b164f..041e920 100644
--- a/apps/pkvault/CHANGELOG.md
+++ b/apps/pkvault/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Changelog
 
+## Unreleased
+
+- **`pkvault seal <file>` / `pkvault unseal <file.pkfile>`**: encrypt any
+  file on disk to age recipients using the PKFILE1 envelope
+  (`@pksuite/crypto` 0.2.0, SPEC-FILE §7.1). Recipient defaults: explicit
+  `--recipient` flags → repo manifest → yourself; the chosen set is always
+  echoed. Streaming chunked I/O, atomic outputs, no-overwrite unless
+  `--force`. Unsealing resolves the per-file key through the agent
+  (`op:"unseal-file"`) — the identity scalar still never leaves the agent.
+
 ## 0.1.1 (pre-release)
 
 - **Security: the agent no longer releases the identity scalar.** The unix
diff --git a/apps/pkvault/README.md b/apps/pkvault/README.md
index f3e6571..c803e8e 100644
--- a/apps/pkvault/README.md
+++ b/apps/pkvault/README.md
@@ -87,6 +87,27 @@ everywhere. The vault format, `init`, `get`, `run`, `add`/`remove`, and
 
 On POSIX systems, transaction files, renames, and containing directories are fsynced and failures are propagated. Node does not expose directory fsync on Windows, so Windows currently provides process-crash consistency but not the same power-loss durability guarantee.
 
+## Sealing arbitrary files
+
+`seal` and `unseal` encrypt any file on disk with the same identity that
+guards your vaults, using the PKFILE1 envelope from `@pksuite/crypto`
+(SPEC-FILE §7.1 single-file serialization, `.pkfile` extension):
+
+```sh
+pkvault seal dump.sql                  # outside a repo: sealed to YOU only
+pkvault seal report.pdf                # inside a repo: sealed to the manifest recipients
+pkvault seal notes.txt --recipient age1…   # ad-hoc recipients (repeatable)
+pkvault unseal dump.sql.pkfile         # output name comes from the sealed metadata
+```
+
+The recipient set used is always stated in the output — check it before
+sharing a sealed file. Sealing needs no unlock unless it defaults to you
+(it only uses public recipients); unsealing unlocks through the agent,
+which unwraps the per-file key without ever releasing your identity.
+Sealed files are snapshots: removing a recipient from a vault later does
+not re-protect files sealed while they were a recipient. Scope is
+deliberately narrow — single files, no folder sync, no watch modes.
+
 ## Editing and plaintext exposure
 
 `pkvault set` (stdin) is the strict path — no plaintext buffer ever hits
diff --git a/apps/pkvault/package.json b/apps/pkvault/package.json
index 9cbbbb5..60c5117 100644
--- a/apps/pkvault/package.json
+++ b/apps/pkvault/package.json
@@ -41,6 +41,6 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@pksuite/crypto": "0.1.0"
+    "@pksuite/crypto": "0.2.0"
   }
 }
diff --git a/apps/pkvault/src/agent.js b/apps/pkvault/src/agent.js
index 010ce4a..10b3460 100644
--- a/apps/pkvault/src/agent.js
+++ b/apps/pkvault/src/agent.js
@@ -142,6 +142,26 @@ function startAgent({ home, label, repoRoot = null, ttlMs = 12 * 3600 * 1000, br
           return { fk: fk.toString("base64"), label, recipient };
         });
       }
+      case "unseal-file": {
+        // Unwraps the 16-byte file key from a PKFILE1 envelope's age header
+        // (pkvault seal/unseal). Like op:"unseal", the scalar never leaves
+        // the agent — only the per-file key does.
+        const ageHeader = Buffer.from(String(msg.ageHeader ?? ""), "base64");
+        if (ageHeader.length === 0 || ageHeader.length > 256 * 1024)
+          throw err("E_AGENT_PROTO", "unseal-file needs ageHeader (base64, at most 256 KiB)");
+        return withUnlock(() => {
+          const shared = require("@pksuite/crypto");
+          let fileKey;
+          try {
+            fileKey = shared.ageHeader.open(new Uint8Array(ageHeader), new Uint8Array(scalar));
+          } catch (e) {
+            throw err(e.code ?? "E_ENVELOPE", e.message);
+          }
+          const reply = { fileKey: Buffer.from(fileKey).toString("base64"), label, recipient };
+          fileKey.fill(0);
+          return reply;
+        });
+      }
       case "status":
         return { unlocked: unlocked(), label, expiresAt: unlocked() ? expiresAt : null };
       case "lock":
diff --git a/apps/pkvault/src/bin.js b/apps/pkvault/src/bin.js
index 5ab5cc6..b8e587b 100644
--- a/apps/pkvault/src/bin.js
+++ b/apps/pkvault/src/bin.js
@@ -187,6 +187,10 @@ const USAGE = `pkvault — passkey-encrypted .env files for teams (https://pkvau
   remove <label> [--accept-exposure]
   status
   export [--to <path> --i-want-plaintext-on-disk]   # reverse adoption: stdout free, disk gated
+  seal <file> [--recipient <age1…>]… [--to <out>] [--name <n>] [--force]
+                             encrypt any file (PKFILE1). Defaults: in a repo →
+                             manifest recipients; otherwise → you only
+  unseal <file.pkfile> [--to <out>] [--force]       # decrypt; output name from sealed metadata
   unlock --force
 
 identity: passkey agent by default; PKVAULT_IDENTITY or PKVAULT_IDENTITY_FILE for machine/CI identities.`;
@@ -302,6 +306,17 @@ async function main() {
         end(args, 0);
         return cli.exportPlain({ cwd, io, env, to, iWantPlaintextOnDisk });
       }
+      case "seal": {
+        const to = opt(args, "--to"), name = opt(args, "--name"), force = flag(args, "--force") === true;
+        const recipients = optAll(args, "--recipient");
+        end(args, 1);
+        return cli.seal({ cwd, io, env, file: args[0], to, name, force, recipients });
+      }
+      case "unseal": {
+        const to = opt(args, "--to"), force = flag(args, "--force") === true;
+        end(args, 1);
+        return cli.unseal({ cwd, io, env, file: args[0], to, force });
+      }
       case "unlock": {
         const force = flag(args, "--force") === true;
         end(args, 0);
diff --git a/apps/pkvault/src/cli.js b/apps/pkvault/src/cli.js
index 855b2b6..c75dc2b 100644
--- a/apps/pkvault/src/cli.js
+++ b/apps/pkvault/src/cli.js
@@ -203,6 +203,12 @@ function resolveIdentity(env = process.env) {
           if (reply?.code === "E_UNSEAL") throw new Error("ENVELOPE_NO_MATCH");
           throw err("E_NO_IDENTITY", `agent: ${reply?.message ?? reply?.code ?? "bad agent reply"}`);
         },
+        unsealFile(ageHeader) {
+          const reply = ask({ op: "unseal-file", ageHeader: Buffer.from(ageHeader).toString("base64") });
+          if (reply?.ok) return Buffer.from(reply.fileKey, "base64");
+          if (reply?.code) throw err(reply.code, reply.message ?? reply.code);
+          throw err("E_NO_IDENTITY", "agent: bad agent reply");
+        },
       };
     if (first?.code && first.code !== "E_AGENT_UNAVAILABLE")
       throw err("E_NO_IDENTITY", `agent: ${first.message ?? first.code}`);
@@ -1006,9 +1012,191 @@ async function ceremonyUnlock({ label, cwd = null, home = defaultHome(), bridgeO
   return r.scalar;
 }
 
+// --- seal / unseal: PKFILE1 single files (SPEC-FILE §7.1) --------------------
+// Works anywhere on disk: a pkvault repo only upgrades the default recipient
+// set from "you" to the manifest. Sealing needs no unlock unless self-sealing.
+const pkfile = require("@pksuite/crypto");
+const PKFILE_EXT = ".pkfile";
+const PKFILE_PRELUDE = 12; // 8-byte magic + u32 header body length
+const PKFILE_MAX_HEADER = 1024 * 1024;
+
+function identityRecipient(env) {
+  const id = resolveIdentity(env);
+  return id.agent === true ? id.recipient : agelib.encodeRecipient(agelib.publicFromScalar(id));
+}
+
+function sealRecipientSet({ cwd, recipients, env }) {
+  if (recipients.length > 0) {
+    for (const r of recipients) pkfile.parseRecipient(r); // fail early, named
+    return { list: recipients, source: `${recipients.length} recipient(s) from --recipient` };
+  }
+  let root = null;
+  try { root = findRoot(cwd); } catch (e) { if (e.code !== "E_NOT_INITIALIZED") throw e; }
+  if (root) {
+    const manifest = loadManifest(root);
+    if (manifest.length > 0)
+      return { list: manifest.map((r) => r.recipient), source: `${manifest.length} manifest recipient(s): ${manifest.map((r) => r.label).join(", ")}` };
+  }
+  return { list: [identityRecipient(env)], source: "you only" };
+}
+
+// String equality cannot identify the same file on case-insensitive
+// filesystems (macOS default) or through hard links — compare device/inode
+// of the opened input against any existing destination instead. Refused even
+// with --force: replacing the plaintext input with its own envelope (or a
+// sealed file with its own plaintext) is unrecoverable.
+function assertDistinctFile(inFd, outAbs) {
+  let outStat = null;
+  try { outStat = fs.statSync(outAbs); } catch { return; }
+  const inStat = fs.fstatSync(inFd);
+  if (outStat.dev === inStat.dev && outStat.ino === inStat.ino)
+    throw err("E_PATH_RESERVED", "output must differ from the input file");
+}
+
+// Streamed atomic write: temp in the destination directory, wx (no clobber of
+// a concurrent temp), full writes, fsync, then install. Without --force the
+// install is link(2), which fails EEXIST instead of replacing a destination
+// created by another process after the precheck; --force installs by rename.
+// The destination directory is fsynced so the install survives power loss.
+function withAtomicOutput(outAbs, force, writer) {
+  txn.assertRegularFileOrAbsent(outAbs);
+  if (!force && fs.existsSync(outAbs)) throw err("E_EXISTS", `${outAbs} exists — pass --force to overwrite`);
+  const tmp = `${outAbs}.pkvault-tmp-${process.pid}`;
+  const fd = fs.openSync(tmp, "wx", 0o600);
+  let installed = false;
+  try {
+    writer((bytes) => txn.writeAllSync(fd, bytes));
+    fs.fsyncSync(fd);
+    fs.closeSync(fd);
+    if (force) {
+      fs.renameSync(tmp, outAbs);
+    } else {
+      try {
+        fs.linkSync(tmp, outAbs);
+      } catch (e) {
+        if (e.code === "EEXIST") throw err("E_EXISTS", `${outAbs} exists — pass --force to overwrite`);
+        throw e;
+      }
+      fs.unlinkSync(tmp);
+    }
+    installed = true;
+    txn.fsyncDir(path.dirname(outAbs));
+  } finally {
+    if (!installed) {
+      try { fs.closeSync(fd); } catch { /* already closed */ }
+      try { fs.unlinkSync(tmp); } catch { /* never created or already installed */ }
+    }
+  }
+}
+
+function chunkPlaintextLength(state, index) {
+  if (state.plaintextSize === 0) return 0;
+  return index === state.chunkCount - 1 ? state.plaintextSize - state.chunkSize * index : state.chunkSize;
+}
+
+function seal({ cwd, io, file, to = null, recipients = [], name = null, force = false, env }) {
+  const inAbs = path.resolve(cwd, file);
+  txn.assertRegularFileOrAbsent(inAbs);
+  if (!fs.existsSync(inAbs)) throw err("E_NO_INPUT", `no such file: ${inAbs}`);
+  const { list, source } = sealRecipientSet({ cwd, recipients, env });
+  const outAbs = to ? path.resolve(cwd, to) : `${inAbs}${PKFILE_EXT}`;
+  // Open FIRST: geometry comes from fstat of the opened descriptor (no
+  // stat/open race), and the crypto state is created inside the cleanup
+  // scope so its file key is disposed on EVERY failure path.
+  const fd = fs.openSync(inAbs, "r");
+  let state = null;
+  let sealed = false;
+  try {
+    const stat = fs.fstatSync(fd);
+    const lastModified = Number.isSafeInteger(Math.floor(stat.mtimeMs)) && stat.mtimeMs >= 0 ? Math.floor(stat.mtimeMs) : null;
+    state = pkfile.createFileEncryption({
+      recipients: list,
+      plaintextSize: stat.size,
+      metadata: { name: name ?? path.basename(inAbs), lastModified },
+    });
+    assertDistinctFile(fd, outAbs);
+    withAtomicOutput(outAbs, force, (write) => {
+      write(state.header);
+      for (let index = 0; index < state.chunkCount; index++) {
+        const plaintext = Buffer.alloc(chunkPlaintextLength(state, index));
+        const got = fs.readSync(fd, plaintext, 0, plaintext.length, null);
+        if (got !== plaintext.length) throw err("E_INPUT_CHANGED", "input file shrank while sealing");
+        write(pkfile.encryptChunk({ state, index, plaintext: new Uint8Array(plaintext.buffer, plaintext.byteOffset, plaintext.length) }));
+        plaintext.fill(0);
+      }
+      const extra = fs.readSync(fd, Buffer.alloc(1), 0, 1, null);
+      if (extra !== 0) throw err("E_INPUT_CHANGED", "input file grew while sealing");
+      pkfile.finalizeEnvelope(state); // every chunk authenticated before the install commits
+    });
+    sealed = true;
+  } finally {
+    // dispose BEFORE close so a close error can never skip key disposal;
+    // failure to close a read-only descriptor risks nothing
+    if (!sealed && state) {
+      try { pkfile.disposeEnvelope(state); } catch { /* already finalized or disposed */ }
+    }
+    try { fs.closeSync(fd); } catch { /* read-only fd */ }
+  }
+  io.out(`sealed ${path.basename(inAbs)} → ${outAbs} (${source})`);
+}
+
+function unseal({ cwd, io, file, to = null, force = false, env }) {
+  const inAbs = path.resolve(cwd, file);
+  txn.assertRegularFileOrAbsent(inAbs);
+  if (!fs.existsSync(inAbs)) throw err("E_NO_INPUT", `no such file: ${inAbs}`);
+  const fd = fs.openSync(inAbs, "r");
+  try {
+    const prelude = Buffer.alloc(PKFILE_PRELUDE);
+    if (fs.readSync(fd, prelude, 0, PKFILE_PRELUDE, 0) !== PKFILE_PRELUDE)
+      throw err("E_ENVELOPE_PARSE", "not a PKFILE1 file (truncated prelude)");
+    const bodyLength = prelude.readUInt32BE(8);
+    if (bodyLength > PKFILE_MAX_HEADER) throw err("E_ENVELOPE_PARSE", "file envelope header is too large");
+    const header = Buffer.alloc(PKFILE_PRELUDE + bodyLength);
+    if (fs.readSync(fd, header, 0, header.length, 0) !== header.length)
+      throw err("E_ENVELOPE_PARSE", "not a PKFILE1 file (truncated header)");
+    const id = resolveIdentity(env);
+    const state = pkfile.openFileEnvelope(
+      id.agent === true
+        ? { unwrapFileKey: (ageHeader) => id.unsealFile(ageHeader), header: new Uint8Array(header) }
+        : { identity: new Uint8Array(id), header: new Uint8Array(header) },
+    );
+    const outAbs = to ? path.resolve(cwd, to) : path.join(path.dirname(inAbs), state.metadata.name);
+    let offset = header.length;
+    let unsealed = false;
+    try {
+      assertDistinctFile(fd, outAbs);
+      withAtomicOutput(outAbs, force, (write) => {
+        for (let index = 0; index < state.chunkCount; index++) {
+          const length = 24 + chunkPlaintextLength(state, index) + 16;
+          const ciphertext = Buffer.alloc(length);
+          if (fs.readSync(fd, ciphertext, 0, length, offset) !== length)
+            throw err("E_ENVELOPE_PARSE", `truncated chunk ${index}`);
+          offset += length;
+          const plaintext = pkfile.decryptChunk({ state, index, ciphertext: new Uint8Array(ciphertext.buffer, ciphertext.byteOffset, length) });
+          write(plaintext);
+          plaintext.fill(0);
+        }
+        if (fs.readSync(fd, Buffer.alloc(1), 0, 1, offset) !== 0)
+          throw err("E_ENVELOPE_PARSE", "trailing bytes after the final chunk");
+        pkfile.finalizeEnvelope(state); // every chunk authenticated before the install commits
+      });
+      unsealed = true;
+    } finally {
+      if (!unsealed) {
+        try { pkfile.disposeEnvelope(state); } catch { /* already finalized or disposed */ }
+      }
+    }
+    io.out(`unsealed → ${outAbs}`);
+  } finally {
+    // disposal already ran in the inner finally; a read-only close error
+    // must not turn a completed unseal into a reported failure
+    try { fs.closeSync(fd); } catch { /* read-only fd */ }
+  }
+}
+
 module.exports = {
   CliError, findRoot, init, get, set, run, classify, add, remove, status,
   exportPlain, localInit, unlockForce, fingerprint, resolveIdentity,
   setup, recover, ceremonyUnlock, labelOrDefault, setDefaultLabel, readDefaultLabel,
-  setDefaultRpId, readDefaultRpId, rpIdOrDefault, edit,
+  setDefaultRpId, readDefaultRpId, rpIdOrDefault, edit, seal, unseal,
 };
diff --git a/apps/pkvault/src/txn.js b/apps/pkvault/src/txn.js
index 02f5bc3..c6df1d7 100644
--- a/apps/pkvault/src/txn.js
+++ b/apps/pkvault/src/txn.js
@@ -389,5 +389,5 @@ function cleanupStale(repoRoot, configuredTargets, { isTracked = defaultIsTracke
 module.exports = {
   TxnError, strictJsonParse, validateRelPath, validateAncestors,
   assertRegularFileOrAbsent, validateMarker, acquireLock, forceUnlock,
-  writeAllSync, writeFileAtomic, removeFileDurable, commitTxn, recover, cleanupStale,
+  writeAllSync, writeFileAtomic, removeFileDurable, commitTxn, recover, cleanupStale, fsyncDir,
 };
diff --git a/apps/pkvault/test/agent.test.js b/apps/pkvault/test/agent.test.js
index 6b30b5f..7d28e5c 100644
--- a/apps/pkvault/test/agent.test.js
+++ b/apps/pkvault/test/agent.test.js
@@ -210,3 +210,34 @@ test("end to end: sync CLI commands resolve identity through a real agent proces
     child.kill();
   }
 });
+
+test("end to end: unseal resolves the PKFILE1 file key through the agent (op unseal-file)", async () => {
+  const home = fs.mkdtempSync(path.join(os.tmpdir(), "pkvault-agent-"));
+  const ceremonies = { n: 0 };
+  const { recipient } = await setUpIdentity(home, ceremonies);
+
+  const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "pkvault-agent-pkfile-"));
+  const payload = crypto.randomBytes(150000);
+  fs.writeFileSync(path.join(cwd, "doc.bin"), payload);
+  const io = { out: () => {}, interactive: true, confirm: () => true, txnOpts: { isTracked: () => false } };
+  // sealing needs only the recipient — no unlock, write-only
+  cli.seal({ cwd, io, env: { PKVAULT_HOME: home }, file: "doc.bin", recipients: [recipient] });
+  assert.equal(ceremonies.n, 1, "sealing runs no ceremony");
+
+  const { spawn } = require("node:child_process");
+  const child = spawn(process.execPath, [path.join(__dirname, "../scripts/sim-agent.js"), home, "daniel"], { stdio: ["ignore", "pipe", "inherit"] });
+  await new Promise((resolve, reject) => {
+    child.stdout.on("data", (d) => d.toString().includes("READY") && resolve());
+    child.on("exit", (c) => reject(new Error(`sim-agent exited ${c}`)));
+    setTimeout(() => reject(new Error("sim-agent never became ready")), 10000).unref();
+  });
+  const count = () => parseInt(fs.readFileSync(path.join(home, "ceremonies.count"), "utf8"), 10);
+  try {
+    fs.unlinkSync(path.join(cwd, "doc.bin"));
+    cli.unseal({ cwd, io, env: { PKVAULT_HOME: home }, file: "doc.bin.pkfile" });
+    assert.deepEqual(fs.readFileSync(path.join(cwd, "doc.bin")), payload);
+    assert.equal(count(), 1, "unseal triggered exactly one agent unlock ceremony");
+  } finally {
+    child.kill();
+  }
+});
diff --git a/apps/pkvault/test/pkfile.test.js b/apps/pkvault/test/pkfile.test.js
new file mode 100644
index 0000000..5008936
--- /dev/null
+++ b/apps/pkvault/test/pkfile.test.js
@@ -0,0 +1,162 @@
+"use strict";
+// seal/unseal suite: PKFILE1 single files (SPEC-FILE §7.1) anywhere on disk.
+// Recipient defaulting (flags → manifest → self), atomic outputs, tamper and
+// truncation refusals, and the agent path (op:"unseal-file") end to end.
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+const crypto = require("node:crypto");
+const cli = require("../src/cli.js");
+const age = require("../src/age.js");
+
+const scalarFor = (tag) => crypto.createHash("sha256").update(`pkvault-pkfile-${tag}`).digest();
+const A = age.keygen(scalarFor("A"));
+const B = age.keygen(scalarFor("B"));
+const envA = { PKVAULT_IDENTITY: A.identity };
+const envB = { PKVAULT_IDENTITY: B.identity };
+
+const tmp = () => fs.mkdtempSync(path.join(os.tmpdir(), "pkvault-pkfile-"));
+function mkIo() {
+  const lines = [];
+  return { out: (s) => lines.push(s), interactive: true, confirm: () => true, txnOpts: { isTracked: () => false }, lines, text: () => lines.join("\n") };
+}
+const throwsCode = (fn, code) => assert.throws(fn, (e) => {
+  assert.equal(e.code, code, e.message);
+  return true;
+});
+
+test("seal/unseal round-trips outside any repo, defaulting to self", () => {
+  const cwd = tmp();
+  const payload = crypto.randomBytes(2 * 1024 * 1024 + 37); // multi-chunk + ragged tail
+  fs.writeFileSync(path.join(cwd, "dump.bin"), payload);
+  const io = mkIo();
+  cli.seal({ cwd, io, env: envA, file: "dump.bin" });
+  assert.match(io.text(), /you only/, "self-default is stated");
+  assert.ok(fs.existsSync(path.join(cwd, "dump.bin.pkfile")));
+  const sealed = fs.readFileSync(path.join(cwd, "dump.bin.pkfile"));
+  assert.ok(!sealed.includes(payload.subarray(0, 64)), "payload bytes are not in the sealed file");
+
+  fs.unlinkSync(path.join(cwd, "dump.bin"));
+  cli.unseal({ cwd, io: mkIo(), env: envA, file: "dump.bin.pkfile" });
+  assert.deepEqual(fs.readFileSync(path.join(cwd, "dump.bin")), payload, "output name comes from sealed metadata");
+  assert.equal(fs.statSync(path.join(cwd, "dump.bin")).mode & 0o777, 0o600);
+});
+
+test("empty files seal and unseal", () => {
+  const cwd = tmp();
+  fs.writeFileSync(path.join(cwd, "empty"), "");
+  cli.seal({ cwd, io: mkIo(), env: envA, file: "empty", to: "empty.pkfile" });
+  fs.unlinkSync(path.join(cwd, "empty"));
+  cli.unseal({ cwd, io: mkIo(), env: envA, file: "empty.pkfile" });
+  assert.equal(fs.readFileSync(path.join(cwd, "empty")).length, 0);
+});
+
+test("explicit --recipient seals to someone else; the sealer cannot unseal", () => {
+  const cwd = tmp();
+  fs.writeFileSync(path.join(cwd, "note.txt"), "for bob");
+  cli.seal({ cwd, io: mkIo(), env: envA, file: "note.txt", recipients: [B.recipient] });
+  throwsCode(() => cli.unseal({ cwd, io: mkIo(), env: envA, file: "note.txt.pkfile", to: "out.txt" }), "E_WRONG_RECIPIENT");
+  cli.unseal({ cwd, io: mkIo(), env: envB, file: "note.txt.pkfile", to: "out.txt" });
+  assert.equal(fs.readFileSync(path.join(cwd, "out.txt"), "utf8"), "for bob");
+});
+
+test("inside a repo, seal defaults to the manifest recipients", () => {
+  const cwd = tmp();
+  fs.writeFileSync(path.join(cwd, ".env"), "X=1\n");
+  cli.init({ cwd, io: mkIo(), label: "alice", recipient: A.recipient });
+  fs.writeFileSync(path.join(cwd, "report.pdf"), crypto.randomBytes(1024));
+  const io = mkIo();
+  cli.seal({ cwd, io, env: envA, file: "report.pdf" });
+  assert.match(io.text(), /manifest recipient/, "manifest source is stated");
+  cli.unseal({ cwd, io: mkIo(), env: envA, file: "report.pdf.pkfile", to: "report.copy.pdf" });
+  assert.deepEqual(fs.readFileSync(path.join(cwd, "report.copy.pdf")), fs.readFileSync(path.join(cwd, "report.pdf")));
+});
+
+test("outputs refuse to overwrite without --force; input==output refused", () => {
+  const cwd = tmp();
+  fs.writeFileSync(path.join(cwd, "a"), "data");
+  fs.writeFileSync(path.join(cwd, "a.pkfile"), "existing");
+  throwsCode(() => cli.seal({ cwd, io: mkIo(), env: envA, file: "a" }), "E_EXISTS");
+  cli.seal({ cwd, io: mkIo(), env: envA, file: "a", force: true });
+  throwsCode(() => cli.unseal({ cwd, io: mkIo(), env: envA, file: "a.pkfile" }), "E_EXISTS");
+  cli.unseal({ cwd, io: mkIo(), env: envA, file: "a.pkfile", force: true });
+  throwsCode(() => cli.seal({ cwd, io: mkIo(), env: envA, file: "a", to: "a" }), "E_PATH_RESERVED");
+});
+
+test("tampered and truncated sealed files fail closed", () => {
+  const cwd = tmp();
+  fs.writeFileSync(path.join(cwd, "x"), crypto.randomBytes(70000)); // 2 chunks at 64KiB? no — 1MiB default chunk, single chunk
+  cli.seal({ cwd, io: mkIo(), env: envA, file: "x" });
+  const sealedPath = path.join(cwd, "x.pkfile");
+  const sealed = fs.readFileSync(sealedPath);
+
+  const flipped = Buffer.from(sealed);
+  flipped[flipped.length - 1] ^= 1;
+  fs.writeFileSync(sealedPath, flipped);
+  throwsCode(() => cli.unseal({ cwd, io: mkIo(), env: envA, file: "x.pkfile", to: "y" }), "E_CHUNK_AUTH");
+
+  fs.writeFileSync(sealedPath, sealed.subarray(0, sealed.length - 5));
+  throwsCode(() => cli.unseal({ cwd, io: mkIo(), env: envA, file: "x.pkfile", to: "y" }), "E_ENVELOPE_PARSE");
+
+  fs.writeFileSync(sealedPath, Buffer.concat([sealed, Buffer.from([0])]));
+  throwsCode(() => cli.unseal({ cwd, io: mkIo(), env: envA, file: "x.pkfile", to: "y" }), "E_ENVELOPE_PARSE");
+  assert.ok(!fs.existsSync(path.join(cwd, "y")), "no partial plaintext left behind");
+});
+
+test("failed unseal leaves no temp files", () => {
+  const cwd = tmp();
+  fs.writeFileSync(path.join(cwd, "x"), "secret");
+  cli.seal({ cwd, io: mkIo(), env: envA, file: "x" });
+  throwsCode(() => cli.unseal({ cwd, io: mkIo(), env: envB, file: "x.pkfile", to: "y" }), "E_WRONG_RECIPIENT");
+  const leftovers = fs.readdirSync(cwd).filter((f) => f.includes("tmp"));
+  assert.deepEqual(leftovers, []);
+});
+
+test("aliases of the input are refused: hard links and case-folded names", () => {
+  const cwd = tmp();
+  fs.writeFileSync(path.join(cwd, "Secret.txt"), "plaintext");
+  fs.linkSync(path.join(cwd, "Secret.txt"), path.join(cwd, "hardlink.txt"));
+  // hard link to the input — string-distinct, same inode; must refuse even with --force
+  throwsCode(() => cli.seal({ cwd, io: mkIo(), env: envA, file: "Secret.txt", to: "hardlink.txt", force: true }), "E_PATH_RESERVED");
+
+  const caseInsensitive = fs.existsSync(path.join(cwd, "secret.txt"));
+  if (caseInsensitive) {
+    // macOS-default APFS: secret.txt IS Secret.txt; the reviewer's original
+    // reproduction destroyed the plaintext input
+    throwsCode(() => cli.seal({ cwd, io: mkIo(), env: envA, file: "Secret.txt", to: "secret.txt", force: true }), "E_PATH_RESERVED");
+  }
+  assert.equal(fs.readFileSync(path.join(cwd, "Secret.txt"), "utf8"), "plaintext", "input survives all refusals");
+
+  // unseal side: sealed file aliased as the output name
+  cli.seal({ cwd, io: mkIo(), env: envA, file: "Secret.txt" });
+  fs.linkSync(path.join(cwd, "Secret.txt.pkfile"), path.join(cwd, "alias.out"));
+  throwsCode(() => cli.unseal({ cwd, io: mkIo(), env: envA, file: "Secret.txt.pkfile", to: "alias.out", force: true }), "E_PATH_RESERVED");
+});
+
+test("no-force install never replaces a destination created after the precheck", () => {
+  // Reach the actual race window: the destination appears AFTER the
+  // existsSync precheck, immediately before the link(2) install. The
+  // no-replace install must fail E_EXISTS rather than clobber.
+  const cwd = tmp();
+  fs.writeFileSync(path.join(cwd, "in"), "data");
+  const outPath = path.join(cwd, "out");
+  const realLink = fs.linkSync;
+  let raced = false;
+  fs.linkSync = (src, dest) => {
+    if (!raced && path.resolve(String(dest)) === outPath) {
+      raced = true;
+      fs.writeFileSync(outPath, "concurrent"); // the racing process wins here
+    }
+    return realLink.call(fs, src, dest);
+  };
+  try {
+    throwsCode(() => cli.seal({ cwd, io: mkIo(), env: envA, file: "in", to: "out" }), "E_EXISTS");
+  } finally {
+    fs.linkSync = realLink;
+  }
+  assert.ok(raced, "the race path was actually exercised");
+  assert.equal(fs.readFileSync(outPath, "utf8"), "concurrent", "concurrently created destination survives");
+  assert.deepEqual(fs.readdirSync(cwd).filter((f) => f.includes("tmp")), [], "no temp litter");
+});
diff --git a/packages/crypto/README.md b/packages/crypto/README.md
index 7401ab5..25594e3 100644
--- a/packages/crypto/README.md
+++ b/packages/crypto/README.md
@@ -47,6 +47,12 @@ for (let index = 0; index < decryption.chunkCount; index++) {
 finalizeEnvelope(decryption);
 ```
 
+When the identity scalar is held elsewhere (e.g. an agent process that
+never releases it), pass `unwrapFileKey` instead of `identity`: the
+callback receives a copy of the envelope's age header and returns the
+16-byte file key; the package copies the result, so the callback may wipe
+its own buffer.
+
 `finalizeEnvelope` best-effort overwrites the file key retained by its state
 and makes that state unusable. Call `disposeEnvelope(state)` on cancellation or
 any abandoned upload/decryption. JavaScript cannot guarantee erasure of engine
diff --git a/packages/crypto/dist/SPEC-FILE.md b/packages/crypto/dist/SPEC-FILE.md
index 62d02c4..893ceab 100644
--- a/packages/crypto/dist/SPEC-FILE.md
+++ b/packages/crypto/dist/SPEC-FILE.md
@@ -194,6 +194,23 @@ internal copies are erased.
 Storage-specific identifiers and authorization capabilities are deliberately
 outside the envelope and MUST NOT be added as authenticated fields in v1.
 
+### 7.1 Single-file serialization
+
+When the envelope is stored as one local file (e.g. `pkvault seal`), the
+canonical layout is the header followed immediately by every chunk in index
+order, with no framing between chunks and no trailing bytes:
+
+```text
+header || chunk_0 || chunk_1 || ... || chunk_{chunk_count-1}
+```
+
+Chunk boundaries are fully derivable from the header geometry (each stored
+chunk is exactly `24 + expected_plaintext_length(i) + 16` bytes), so the
+file remains seekable without an index. Readers MUST reject trailing bytes
+after the final chunk. The RECOMMENDED file extension is `.pkfile`. This
+serialization adds no cryptographic surface: it is the §3–§5 envelope,
+concatenated.
+
 ## 8. Test requirements
 
 Published vectors cover identity encoding, age-header sealing, header bytes,
diff --git a/packages/crypto/dist/index.cjs b/packages/crypto/dist/index.cjs
index fd24945..829dbfe 100644
--- a/packages/crypto/dist/index.cjs
+++ b/packages/crypto/dist/index.cjs
@@ -674,9 +674,11 @@ function encryptChunk({ state, index, plaintext }) {
   record.seen.add(index);
   return concat(nonce, ciphertext);
 }
-function openFileEnvelope({ identity, header }) {
+function openFileEnvelope({ identity, unwrapFileKey, header }) {
+  if (identity === void 0 === (unwrapFileKey === void 0))
+    fail("E_INPUT", "provide exactly one of identity or unwrapFileKey");
   const parsed = parseEnvelopeHeader(header);
-  const fileKey = ageInternals.decryptAgeHeader(parsed.ageHeader, identity);
+  const fileKey = identity !== void 0 ? ageInternals.decryptAgeHeader(parsed.ageHeader, identity) : new Uint8Array(bytes(unwrapFileKey(new Uint8Array(parsed.ageHeader)), 16, "unwrapped file key"));
   let retained = false;
   try {
     const metadataKey = deriveMetadataKey(fileKey, parsed.fileId);
diff --git a/packages/crypto/dist/index.cjs.map b/packages/crypto/dist/index.cjs.map
index 499ce1e..dbb4d7d 100644
--- a/packages/crypto/dist/index.cjs.map
+++ b/packages/crypto/dist/index.cjs.map
@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.js", "../src/error.js", "../src/age.js", "../src/bytes.js", "../src/bech32.js", "../src/file.js"],
-  "sourcesContent": ["export { PkCryptoError } from \"./error.js\";\nexport {\n  ageHeader,\n  createRecipientIdentity,\n  createRecipientIdentityFromSecret,\n  formatIdentity,\n  formatRecipient,\n  parseIdentity,\n  parseRecipient,\n  publicKeyFromSecretKey,\n  recipientFromIdentity,\n} from \"./age.js\";\nexport {\n  createFileEncryption,\n  decryptChunk,\n  disposeEnvelope,\n  encryptChunk,\n  finalizeEnvelope,\n  openFileEnvelope,\n} from \"./file.js\";\n", "export class PkCryptoError extends Error {\n  constructor(code, message) {\n    super(`${code}: ${message}`);\n    this.name = \"PkCryptoError\";\n    this.code = code;\n  }\n}\n\nexport const fail = (code, message) => {\n  throw new PkCryptoError(code, message);\n};\n", "import { chacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { x25519 } from \"@noble/curves/ed25519.js\";\nimport { hkdf } from \"@noble/hashes/hkdf.js\";\nimport { hmac } from \"@noble/hashes/hmac.js\";\nimport { sha256 } from \"@noble/hashes/sha256.js\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport { allZero, bytes, concat, decodeBase64, EMPTY, encodeBase64, equal, utf8 } from \"./bytes.js\";\nimport { decodeBech32, encodeBech32 } from \"./bech32.js\";\nimport { fail } from \"./error.js\";\n\nconst VERSION_LINE = \"age-encryption.org/v1\";\nconst AGE_X25519_INFO = utf8(\"age-encryption.org/v1/X25519\");\nconst AGE_HEADER_INFO = utf8(\"header\");\nconst ZERO_NONCE = new Uint8Array(12);\n\nconst random = (length) => randomBytes(length);\n\nexport function parseRecipient(recipient) {\n  if (typeof recipient !== \"string\" || recipient !== recipient.toLowerCase()) fail(\"E_RECIPIENT\", \"recipient must be canonical lowercase age Bech32\");\n  const decoded = decodeBech32(recipient);\n  if (!decoded || decoded.hrp !== \"age\" || decoded.data.length !== 32 || encodeBech32(\"age\", decoded.data) !== recipient)\n    fail(\"E_RECIPIENT\", \"invalid X25519 age recipient\");\n  return decoded.data;\n}\n\nexport function parseIdentity(identity) {\n  if (typeof identity !== \"string\" || (identity !== identity.toUpperCase() && identity !== identity.toLowerCase()))\n    fail(\"E_IDENTITY\", \"identity must use uniform Bech32 case\");\n  const decoded = decodeBech32(identity);\n  if (!decoded || decoded.hrp !== \"age-secret-key-\" || decoded.data.length !== 32 || encodeBech32(\"age-secret-key-\", decoded.data) !== identity.toLowerCase())\n    fail(\"E_IDENTITY\", \"invalid X25519 age identity\");\n  return decoded.data;\n}\n\nexport function recipientFromIdentity(identity) {\n  return encodeBech32(\"age\", x25519.getPublicKey(parseIdentity(identity)));\n}\n\nexport function formatRecipient(publicKey) {\n  return encodeBech32(\"age\", bytes(publicKey, 32, \"publicKey\"));\n}\n\nexport function formatIdentity(secretKey) {\n  return encodeBech32(\"age-secret-key-\", bytes(secretKey, 32, \"secretKey\")).toUpperCase();\n}\n\nexport function publicKeyFromSecretKey(secretKey) {\n  return x25519.getPublicKey(bytes(secretKey, 32, \"secretKey\"));\n}\n\nexport function createRecipientIdentity() {\n  return createRecipientIdentityFromSecret(random(32));\n}\n\nexport function createRecipientIdentityFromSecret(secretKey) {\n  const scalar = bytes(secretKey, 32, \"secretKey\");\n  return { identity: formatIdentity(scalar), recipient: formatRecipient(publicKeyFromSecretKey(scalar)) };\n}\n\nfunction parseHeader(header) {\n  bytes(header);\n  let position = 0;\n  const line = () => {\n    const newline = header.indexOf(0x0a, position);\n    if (newline === -1) fail(\"E_AGE_HEADER_PARSE\", \"truncated age header\");\n    const value = new TextDecoder(\"utf-8\", { fatal: true }).decode(header.subarray(position, newline));\n    position = newline + 1;\n    return value;\n  };\n\n  let version;\n  try { version = line(); }\n  catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n  if (version !== VERSION_LINE) fail(\"E_AGE_HEADER_VERSION\", \"unsupported age header version\");\n\n  const stanzas = [];\n  for (;;) {\n    let current;\n    try { current = line(); }\n    catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n    if (current.startsWith(\"--- \")) {\n      const mac = decodeBase64(current.slice(4));\n      if (!mac || mac.length !== 32 || position !== header.length) fail(\"E_AGE_HEADER_PARSE\", \"invalid age header MAC line\");\n      const markerEnd = position - current.length - 1 + 3;\n      return { stanzas, mac, authenticated: header.subarray(0, markerEnd) };\n    }\n    if (!current.startsWith(\"-> \")) fail(\"E_AGE_HEADER_PARSE\", \"invalid age recipient stanza\");\n    const args = current.slice(3).split(\" \");\n    if (args.some((arg) => arg.length === 0)) fail(\"E_AGE_HEADER_PARSE\", \"invalid age recipient arguments\");\n    const bodyLines = [];\n    for (;;) {\n      let bodyLine;\n      try { bodyLine = line(); }\n      catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n      if (!/^[A-Za-z0-9+/]*$/.test(bodyLine) || bodyLine.length > 64) fail(\"E_AGE_HEADER_PARSE\", \"invalid age stanza body\");\n      bodyLines.push(bodyLine);\n      if (bodyLine.length < 64) break;\n    }\n    const body = decodeBase64(bodyLines.join(\"\"));\n    if (!body) fail(\"E_AGE_HEADER_PARSE\", \"non-canonical age stanza body\");\n    stanzas.push({ args, body });\n  }\n}\n\nfunction encryptAgeHeader(fileKey, recipients, rng) {\n  bytes(fileKey, 16, \"fileKey\");\n  if (!Array.isArray(recipients) || recipients.length === 0) fail(\"E_RECIPIENT\", \"at least one recipient is required\");\n  let text = `${VERSION_LINE}\\n`;\n  for (const recipient of recipients) {\n    const recipientPublic = typeof recipient === \"string\" ? parseRecipient(recipient) : bytes(recipient, 32, \"recipient\");\n    const ephemeralSecret = rng(32);\n    bytes(ephemeralSecret, 32, \"random output\");\n    let shared;\n    let wrapKey;\n    try {\n      const ephemeralPublic = x25519.getPublicKey(ephemeralSecret);\n      try { shared = x25519.getSharedSecret(ephemeralSecret, recipientPublic); }\n      catch { fail(\"E_RECIPIENT\", \"recipient is a low-order X25519 point\"); }\n      if (allZero(shared)) fail(\"E_RECIPIENT\", \"recipient is a low-order X25519 point\");\n      wrapKey = hkdf(sha256, shared, concat(ephemeralPublic, recipientPublic), AGE_X25519_INFO, 32);\n      const wrapped = chacha20poly1305(wrapKey, ZERO_NONCE).encrypt(fileKey);\n      text += `-> X25519 ${encodeBase64(ephemeralPublic)}\\n${encodeBase64(wrapped)}\\n`;\n    } finally {\n      ephemeralSecret.fill(0);\n      shared?.fill(0);\n      wrapKey?.fill(0);\n    }\n  }\n  text += \"---\";\n  const authenticated = utf8(text);\n  const macKey = hkdf(sha256, fileKey, EMPTY, AGE_HEADER_INFO, 32);\n  try {\n    const mac = hmac(sha256, macKey, authenticated);\n    return utf8(`${text} ${encodeBase64(mac)}\\n`);\n  } finally { macKey.fill(0); }\n}\n\nfunction decryptAgeHeader(header, identity) {\n  const ownsScalar = typeof identity === \"string\";\n  const scalar = ownsScalar ? parseIdentity(identity) : bytes(identity, 32, \"identity\");\n  let fileKey = null;\n  let authenticated = false;\n  try {\n    const parsed = parseHeader(header);\n    if (parsed.stanzas.length === 0) fail(\"E_AGE_HEADER_PARSE\", \"age header has no recipients\");\n    const recipientPublic = x25519.getPublicKey(scalar);\n    for (const stanza of parsed.stanzas) {\n      if (stanza.args[0] !== \"X25519\") fail(\"E_AGE_HEADER_RECIPIENT\", \"foreign recipient stanza is not supported\");\n      if (stanza.args.length !== 2 || stanza.body.length !== 32) fail(\"E_AGE_HEADER_PARSE\", \"invalid X25519 stanza\");\n      const ephemeralPublic = decodeBase64(stanza.args[1]);\n      if (!ephemeralPublic || ephemeralPublic.length !== 32) fail(\"E_AGE_HEADER_PARSE\", \"invalid X25519 ephemeral share\");\n    }\n    for (const stanza of parsed.stanzas) {\n      const ephemeralPublic = decodeBase64(stanza.args[1]);\n      let shared;\n      let wrapKey;\n      try {\n        try { shared = x25519.getSharedSecret(scalar, ephemeralPublic); }\n        catch { continue; }\n        if (allZero(shared)) continue;\n        wrapKey = hkdf(sha256, shared, concat(ephemeralPublic, recipientPublic), AGE_X25519_INFO, 32);\n        try {\n          const candidate = chacha20poly1305(wrapKey, ZERO_NONCE).decrypt(stanza.body);\n          if (candidate.length === 16) { fileKey = candidate; break; }\n          candidate.fill(0);\n        } catch { /* stanza is for another identity */ }\n      } finally {\n        shared?.fill(0);\n        wrapKey?.fill(0);\n      }\n    }\n    if (!fileKey) fail(\"E_WRONG_RECIPIENT\", \"identity does not match this file envelope\");\n    const macKey = hkdf(sha256, fileKey, EMPTY, AGE_HEADER_INFO, 32);\n    const expectedMac = hmac(sha256, macKey, parsed.authenticated);\n    try {\n      if (!equal(expectedMac, parsed.mac)) fail(\"E_ENVELOPE_AUTH\", \"age header authentication failed\");\n      authenticated = true;\n      return fileKey;\n    } finally {\n      macKey.fill(0);\n      expectedMac.fill(0);\n    }\n  } finally {\n    if (ownsScalar) scalar.fill(0);\n    if (!authenticated) fileKey?.fill(0);\n  }\n}\n\nexport const ageHeader = Object.freeze({\n  seal: (fileKey, recipients) => encryptAgeHeader(fileKey, recipients, random),\n  open: decryptAgeHeader,\n});\n\nexport const ageInternals = Object.freeze({ encryptAgeHeader, decryptAgeHeader });\n", "const BASE64 = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\";\nconst BASE64_VALUE = new Int16Array(128).fill(-1);\nfor (let i = 0; i < BASE64.length; i++) BASE64_VALUE[BASE64.charCodeAt(i)] = i;\n\nexport const EMPTY = new Uint8Array(0);\nexport const utf8 = (value) => new TextEncoder().encode(value);\n\nexport function bytes(value, length, name = \"value\") {\n  if (!(value instanceof Uint8Array)) throw new TypeError(`${name} must be a Uint8Array`);\n  if (length !== undefined && value.length !== length) throw new TypeError(`${name} must be ${length} bytes`);\n  return value;\n}\n\nexport function concat(...parts) {\n  const length = parts.reduce((sum, part) => sum + bytes(part).length, 0);\n  const out = new Uint8Array(length);\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\nexport function equal(a, b) {\n  if (!(a instanceof Uint8Array) || !(b instanceof Uint8Array) || a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n  return diff === 0;\n}\n\nexport function allZero(value) {\n  let acc = 0;\n  for (const byte of value) acc |= byte;\n  return acc === 0;\n}\n\nexport function u32(value) {\n  if (!Number.isInteger(value) || value < 0 || value > 0xffffffff) throw new RangeError(\"value is not a uint32\");\n  const out = new Uint8Array(4);\n  new DataView(out.buffer).setUint32(0, value, false);\n  return out;\n}\n\nexport function u64(value) {\n  if (!Number.isSafeInteger(value) || value < 0) throw new RangeError(\"value is not a non-negative safe integer\");\n  const out = new Uint8Array(8);\n  const view = new DataView(out.buffer);\n  const big = BigInt(value);\n  view.setUint32(0, Number(big >> 32n), false);\n  view.setUint32(4, Number(big & 0xffffffffn), false);\n  return out;\n}\n\nexport function readU32(value, offset) {\n  if (offset < 0 || offset + 4 > value.length) throw new RangeError(\"truncated uint32\");\n  return new DataView(value.buffer, value.byteOffset + offset, 4).getUint32(0, false);\n}\n\nexport function readU64(value, offset) {\n  if (offset < 0 || offset + 8 > value.length) throw new RangeError(\"truncated uint64\");\n  const view = new DataView(value.buffer, value.byteOffset + offset, 8);\n  const big = (BigInt(view.getUint32(0, false)) << 32n) | BigInt(view.getUint32(4, false));\n  if (big > BigInt(Number.MAX_SAFE_INTEGER)) throw new RangeError(\"uint64 exceeds JavaScript safe integer range\");\n  return Number(big);\n}\n\nexport function encodeBase64(value, { padding = false } = {}) {\n  bytes(value);\n  let out = \"\";\n  for (let i = 0; i < value.length; i += 3) {\n    const a = value[i];\n    const haveB = i + 1 < value.length;\n    const haveC = i + 2 < value.length;\n    const b = haveB ? value[i + 1] : 0;\n    const c = haveC ? value[i + 2] : 0;\n    out += BASE64[a >>> 2];\n    out += BASE64[((a & 3) << 4) | (b >>> 4)];\n    if (haveB) out += BASE64[((b & 15) << 2) | (c >>> 6)];\n    else if (padding) out += \"=\";\n    if (haveC) out += BASE64[c & 63];\n    else if (padding) out += \"=\";\n  }\n  return out;\n}\n\nexport function decodeBase64(value, { padding = false } = {}) {\n  if (typeof value !== \"string\") return null;\n  if (padding) {\n    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(value) || value.length % 4 !== 0) return null;\n  } else if (!/^[A-Za-z0-9+/]*$/.test(value) || value.length % 4 === 1) return null;\n\n  const stripped = padding ? value.replace(/=+$/, \"\") : value;\n  const outputLength = Math.floor((stripped.length * 6) / 8);\n  const out = new Uint8Array(outputLength);\n  let accumulator = 0;\n  let bits = 0;\n  let offset = 0;\n  for (let i = 0; i < stripped.length; i++) {\n    const code = stripped.charCodeAt(i);\n    if (code >= BASE64_VALUE.length || BASE64_VALUE[code] < 0) return null;\n    accumulator = (accumulator << 6) | BASE64_VALUE[code];\n    bits += 6;\n    if (bits >= 8) {\n      bits -= 8;\n      out[offset++] = (accumulator >>> bits) & 0xff;\n    }\n  }\n  if (bits > 0 && (accumulator & ((1 << bits) - 1)) !== 0) return null;\n  if (encodeBase64(out, { padding }) !== value) return null;\n  return out;\n}\n", "const CHARSET = \"qpzry9x8gf2tvdw0s3jn54khce6mua7l\";\nconst GENERATORS = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3];\n\nfunction polymod(values) {\n  let checksum = 1;\n  for (const value of values) {\n    const top = checksum >>> 25;\n    checksum = ((checksum & 0x1ffffff) << 5) ^ value;\n    for (let i = 0; i < 5; i++) if ((top >>> i) & 1) checksum ^= GENERATORS[i];\n  }\n  return checksum >>> 0;\n}\n\nfunction expandHrp(hrp) {\n  const out = [];\n  for (const char of hrp) out.push(char.charCodeAt(0) >>> 5);\n  out.push(0);\n  for (const char of hrp) out.push(char.charCodeAt(0) & 31);\n  return out;\n}\n\nfunction convertBits(data, from, to, pad) {\n  let accumulator = 0;\n  let bits = 0;\n  const out = [];\n  const maximum = (1 << to) - 1;\n  for (const value of data) {\n    if (value < 0 || value >>> from) return null;\n    accumulator = (accumulator << from) | value;\n    bits += from;\n    while (bits >= to) {\n      bits -= to;\n      out.push((accumulator >>> bits) & maximum);\n    }\n  }\n  if (pad && bits) out.push((accumulator << (to - bits)) & maximum);\n  else if (!pad && (bits >= from || ((accumulator << (to - bits)) & maximum))) return null;\n  return out;\n}\n\nexport function encodeBech32(hrp, data) {\n  const words = convertBits(data, 8, 5, true);\n  const values = [...expandHrp(hrp), ...words];\n  const mod = polymod([...values, 0, 0, 0, 0, 0, 0]) ^ 1;\n  const checksum = [];\n  for (let i = 0; i < 6; i++) checksum.push((mod >>> (5 * (5 - i))) & 31);\n  return hrp + \"1\" + [...words, ...checksum].map((word) => CHARSET[word]).join(\"\");\n}\n\nexport function decodeBech32(value) {\n  if (typeof value !== \"string\" || (value !== value.toLowerCase() && value !== value.toUpperCase())) return null;\n  const normalized = value.toLowerCase();\n  const separator = normalized.lastIndexOf(\"1\");\n  if (separator < 1 || separator + 7 > normalized.length) return null;\n  const hrp = normalized.slice(0, separator);\n  const words = [];\n  for (const char of normalized.slice(separator + 1)) {\n    const word = CHARSET.indexOf(char);\n    if (word === -1) return null;\n    words.push(word);\n  }\n  if (polymod([...expandHrp(hrp), ...words]) !== 1) return null;\n  const data = convertBits(words.slice(0, -6), 5, 8, false);\n  return data === null ? null : { hrp, data: new Uint8Array(data) };\n}\n", "import { xchacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { hkdf } from \"@noble/hashes/hkdf.js\";\nimport { sha256 } from \"@noble/hashes/sha256.js\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport { ageInternals } from \"./age.js\";\nimport { bytes, concat, readU32, readU64, u32, u64, utf8 } from \"./bytes.js\";\nimport { fail } from \"./error.js\";\n\nconst MAGIC = utf8(\"PKFILE1\\n\");\nconst VERSION = 1;\nconst FILE_ID_BYTES = 16;\nconst NONCE_BYTES = 24;\nconst TAG_BYTES = 16;\nconst DEFAULT_CHUNK_SIZE = 1024 * 1024;\nconst MIN_CHUNK_SIZE = 64 * 1024;\nconst MAX_CHUNK_SIZE = 16 * 1024 * 1024;\nconst MAX_HEADER_SIZE = 1024 * 1024;\nconst MAX_AGE_HEADER_SIZE = 256 * 1024;\nconst MAX_METADATA_CIPHERTEXT_SIZE = 64 * 1024;\n\nconst METADATA_KEY_INFO = utf8(\"pksuite/file/metadata-key/v1\");\nconst CHUNK_KEY_INFO = utf8(\"pksuite/file/chunk-key/v1\");\nconst METADATA_AAD_DOMAIN = utf8(\"pksuite/file/metadata/v1\");\nconst CHUNK_AAD_DOMAIN = utf8(\"pksuite/file/chunk/v1\");\nconst DOMAIN_SEPARATOR = new Uint8Array([0]);\n\nconst encryptionStates = new WeakMap();\nconst decryptionStates = new WeakMap();\n\nfunction validateGeometry(plaintextSize, chunkSize) {\n  if (!Number.isSafeInteger(plaintextSize) || plaintextSize < 0) fail(\"E_INPUT\", \"plaintextSize must be a non-negative safe integer\");\n  if (!Number.isInteger(chunkSize) || chunkSize < MIN_CHUNK_SIZE || chunkSize > MAX_CHUNK_SIZE)\n    fail(\"E_INPUT\", `chunkSize must be between ${MIN_CHUNK_SIZE} and ${MAX_CHUNK_SIZE} bytes`);\n  const chunkCount = Math.max(1, Math.ceil(plaintextSize / chunkSize));\n  if (chunkCount > 0xffffffff) fail(\"E_INPUT\", \"file requires too many chunks\");\n  return chunkCount;\n}\n\nfunction expectedPlaintextLength({ plaintextSize, chunkSize, chunkCount }, index) {\n  if (!Number.isInteger(index) || index < 0 || index >= chunkCount) fail(\"E_CHUNK_INDEX\", \"chunk index is outside the envelope\");\n  if (plaintextSize === 0) return 0;\n  return index === chunkCount - 1 ? plaintextSize - chunkSize * index : chunkSize;\n}\n\nfunction canonicalJsonString(value, label) {\n  let result = '\"';\n  for (let offset = 0; offset < value.length;) {\n    const first = value.charCodeAt(offset);\n    let character;\n    if (first >= 0xd800 && first <= 0xdbff) {\n      const second = value.charCodeAt(offset + 1);\n      if (!(second >= 0xdc00 && second <= 0xdfff)) fail(\"E_METADATA\", `${label} must contain only Unicode scalar values`);\n      character = value.slice(offset, offset + 2);\n      offset += 2;\n    } else {\n      if (first >= 0xdc00 && first <= 0xdfff) fail(\"E_METADATA\", `${label} must contain only Unicode scalar values`);\n      character = value[offset++];\n    }\n    if (character === '\"') result += '\\\\\"';\n    else if (character === \"\\\\\") result += \"\\\\\\\\\";\n    else if (first === 0x08) result += \"\\\\b\";\n    else if (first === 0x09) result += \"\\\\t\";\n    else if (first === 0x0a) result += \"\\\\n\";\n    else if (first === 0x0c) result += \"\\\\f\";\n    else if (first === 0x0d) result += \"\\\\r\";\n    else if (first < 0x20) result += `\\\\u${first.toString(16).padStart(4, \"0\")}`;\n    else result += character;\n  }\n  return `${result}\"`;\n}\n\nfunction canonicalMetadata(metadata) {\n  if (!metadata || typeof metadata !== \"object\" || Array.isArray(metadata)) fail(\"E_METADATA\", \"metadata must be an object\");\n  if (Object.keys(metadata).some((key) => ![\"name\", \"mediaType\", \"lastModified\"].includes(key)))\n    fail(\"E_METADATA\", \"metadata contains an unknown field\");\n  const { name, mediaType = \"application/octet-stream\", lastModified = null } = metadata;\n  if (typeof name !== \"string\" || name.length === 0 || utf8(name).length > 4096 || /[\\u0000-\\u001f\\u007f]/u.test(name))\n    fail(\"E_METADATA\", \"metadata.name must be a non-empty filename without control characters\");\n  if (name === \".\" || name === \"..\" || /[\\\\/:]/u.test(name) || /[ .]$/u.test(name) || /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\\.|$)/iu.test(name))\n    fail(\"E_METADATA\", \"metadata.name must be a portable single filename, not a path or device name\");\n  if (typeof mediaType !== \"string\" || utf8(mediaType).length > 255 || !/^[\\x20-\\x7e]*$/.test(mediaType))\n    fail(\"E_METADATA\", \"metadata.mediaType must be printable ASCII no longer than 255 bytes\");\n  if (lastModified !== null && (!Number.isSafeInteger(lastModified) || lastModified < 0))\n    fail(\"E_METADATA\", \"metadata.lastModified must be null or a non-negative safe integer\");\n  return utf8(`{\"name\":${canonicalJsonString(name, \"metadata.name\")},\"mediaType\":${canonicalJsonString(mediaType, \"metadata.mediaType\")},\"lastModified\":${lastModified === null ? \"null\" : String(lastModified)}}`);\n}\n\nfunction parseMetadata(plaintext) {\n  let parsed;\n  try { parsed = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(plaintext)); }\n  catch { fail(\"E_METADATA\", \"encrypted metadata is not canonical UTF-8 JSON\"); }\n  const canonical = canonicalMetadata(parsed);\n  if (canonical.length !== plaintext.length || canonical.some((byte, index) => byte !== plaintext[index]))\n    fail(\"E_METADATA\", \"encrypted metadata is not canonical\");\n  return parsed;\n}\n\nfunction structuralPrefix({ chunkSize, plaintextSize, chunkCount, fileId, ageHeader }) {\n  return concat(u32(chunkSize), u64(plaintextSize), u32(chunkCount), fileId, u32(ageHeader.length), ageHeader);\n}\n\nfunction metadataAad(prefix) {\n  return concat(METADATA_AAD_DOMAIN, DOMAIN_SEPARATOR, u32(VERSION), sha256(concat(MAGIC, prefix)));\n}\n\nfunction chunkAad(record, index) {\n  const expected = expectedPlaintextLength(record, index);\n  return concat(\n    CHUNK_AAD_DOMAIN,\n    DOMAIN_SEPARATOR,\n    u32(VERSION),\n    record.fileId,\n    record.headerCommitment,\n    u32(index),\n    u32(record.chunkCount),\n    u64(record.plaintextSize),\n    u32(record.chunkSize),\n    u32(expected),\n  );\n}\n\nfunction deriveMetadataKey(fileKey, fileId) {\n  return hkdf(sha256, fileKey, fileId, METADATA_KEY_INFO, 32);\n}\n\nfunction deriveChunkKey(fileKey, fileId, index) {\n  return hkdf(sha256, fileKey, concat(fileId, u32(index)), CHUNK_KEY_INFO, 32);\n}\n\nfunction parseEnvelopeHeader(header) {\n  bytes(header);\n  if (header.length < MAGIC.length + 4 || MAGIC.some((byte, index) => header[index] !== byte))\n    fail(\"E_ENVELOPE_VERSION\", \"unsupported file envelope magic or version\");\n  let bodyLength;\n  try { bodyLength = readU32(header, MAGIC.length); }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated file envelope prelude\"); }\n  if (bodyLength > MAX_HEADER_SIZE || bodyLength !== header.length - MAGIC.length - 4)\n    fail(\"E_ENVELOPE_PARSE\", \"file envelope header length mismatch\");\n  let offset = MAGIC.length + 4;\n  const take = (length, label) => {\n    if (!Number.isInteger(length) || length < 0 || offset + length > header.length) fail(\"E_ENVELOPE_PARSE\", `truncated ${label}`);\n    const value = header.subarray(offset, offset + length);\n    offset += length;\n    return value;\n  };\n\n  let chunkSize, plaintextSize, chunkCount, ageHeaderLength, metadataLength;\n  try {\n    chunkSize = readU32(header, offset); offset += 4;\n    plaintextSize = readU64(header, offset); offset += 8;\n    chunkCount = readU32(header, offset); offset += 4;\n  } catch { fail(\"E_ENVELOPE_PARSE\", \"invalid file geometry\"); }\n  const fileId = take(FILE_ID_BYTES, \"file id\");\n  try { ageHeaderLength = readU32(header, offset); offset += 4; }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated age header length\"); }\n  if (ageHeaderLength === 0 || ageHeaderLength > MAX_AGE_HEADER_SIZE) fail(\"E_ENVELOPE_PARSE\", \"invalid age header length\");\n  const ageHeader = take(ageHeaderLength, \"age header\");\n  const prefixEnd = offset;\n  const metadataNonce = take(NONCE_BYTES, \"metadata nonce\");\n  try { metadataLength = readU32(header, offset); offset += 4; }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated metadata length\"); }\n  if (metadataLength < TAG_BYTES || metadataLength > MAX_METADATA_CIPHERTEXT_SIZE) fail(\"E_ENVELOPE_PARSE\", \"invalid metadata ciphertext length\");\n  const metadataCiphertext = take(metadataLength, \"metadata ciphertext\");\n  if (offset !== header.length) fail(\"E_ENVELOPE_PARSE\", \"trailing bytes in file envelope header\");\n\n  const expectedCount = validateGeometry(plaintextSize, chunkSize);\n  if (chunkCount !== expectedCount) fail(\"E_ENVELOPE_PARSE\", \"chunk count does not match file geometry\");\n  return {\n    chunkSize,\n    plaintextSize,\n    chunkCount,\n    fileId,\n    ageHeader,\n    prefix: header.subarray(MAGIC.length + 4, prefixEnd),\n    metadataNonce,\n    metadataCiphertext,\n    headerCommitment: sha256(header),\n  };\n}\n\nfunction makePublicState(kind, record, header, metadata) {\n  return Object.freeze({\n    kind,\n    version: VERSION,\n    header,\n    metadata,\n    plaintextSize: record.plaintextSize,\n    chunkSize: record.chunkSize,\n    chunkCount: record.chunkCount,\n  });\n}\n\nfunction createFileEncryptionImpl({ recipient, recipients, metadata, plaintextSize, chunkSize = DEFAULT_CHUNK_SIZE }, rng) {\n  if (recipient !== undefined && recipients !== undefined) fail(\"E_INPUT\", \"provide recipient or recipients, not both\");\n  const recipientList = recipients ?? (recipient === undefined ? [] : [recipient]);\n  const chunkCount = validateGeometry(plaintextSize, chunkSize);\n  const fileKey = bytes(rng(16), 16, \"random file key\");\n  let retained = false;\n  try {\n    const fileId = bytes(rng(FILE_ID_BYTES), FILE_ID_BYTES, \"random file id\");\n    const ageHeader = ageInternals.encryptAgeHeader(fileKey, recipientList, rng);\n    if (ageHeader.length > MAX_AGE_HEADER_SIZE) fail(\"E_INPUT\", \"recipient header is too large\");\n    const prefix = structuralPrefix({ chunkSize, plaintextSize, chunkCount, fileId, ageHeader });\n    const metadataNonce = bytes(rng(NONCE_BYTES), NONCE_BYTES, \"random metadata nonce\");\n    const metadataPlaintext = canonicalMetadata(metadata);\n    const metadataKey = deriveMetadataKey(fileKey, fileId);\n    let metadataCiphertext;\n    try { metadataCiphertext = xchacha20poly1305(metadataKey, metadataNonce, metadataAad(prefix)).encrypt(metadataPlaintext); }\n    finally { metadataKey.fill(0); metadataPlaintext.fill(0); }\n    if (metadataCiphertext.length > MAX_METADATA_CIPHERTEXT_SIZE) fail(\"E_METADATA\", \"encrypted metadata is too large\");\n    const body = concat(prefix, metadataNonce, u32(metadataCiphertext.length), metadataCiphertext);\n    if (body.length > MAX_HEADER_SIZE) fail(\"E_INPUT\", \"file envelope header is too large\");\n    const header = concat(MAGIC, u32(body.length), body);\n    const record = {\n      fileKey,\n      fileId: new Uint8Array(fileId),\n      plaintextSize,\n      chunkSize,\n      chunkCount,\n      headerCommitment: sha256(header),\n      rng,\n      seen: new Set(),\n    };\n    const state = makePublicState(\"encryption\", record, header, undefined);\n    encryptionStates.set(state, record);\n    retained = true;\n    return state;\n  } finally {\n    if (!retained) fileKey.fill(0);\n  }\n}\n\nexport function createFileEncryption(options) {\n  return createFileEncryptionImpl(options, randomBytes);\n}\n\nexport function encryptChunk({ state, index, plaintext }) {\n  const record = encryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-encryption state\");\n  bytes(plaintext);\n  const expected = expectedPlaintextLength(record, index);\n  if (plaintext.length !== expected) fail(\"E_CHUNK_SIZE\", `chunk ${index} must contain exactly ${expected} plaintext bytes`);\n  const nonce = bytes(record.rng(NONCE_BYTES), NONCE_BYTES, \"random chunk nonce\");\n  const key = deriveChunkKey(record.fileKey, record.fileId, index);\n  let ciphertext;\n  try { ciphertext = xchacha20poly1305(key, nonce, chunkAad(record, index)).encrypt(plaintext); }\n  finally { key.fill(0); }\n  record.seen.add(index);\n  return concat(nonce, ciphertext);\n}\n\nexport function openFileEnvelope({ identity, header }) {\n  const parsed = parseEnvelopeHeader(header);\n  const fileKey = ageInternals.decryptAgeHeader(parsed.ageHeader, identity);\n  let retained = false;\n  try {\n    const metadataKey = deriveMetadataKey(fileKey, parsed.fileId);\n    let metadataPlaintext;\n    try { metadataPlaintext = xchacha20poly1305(metadataKey, parsed.metadataNonce, metadataAad(parsed.prefix)).decrypt(parsed.metadataCiphertext); }\n    catch { fail(\"E_ENVELOPE_AUTH\", \"file metadata authentication failed\"); }\n    finally { metadataKey.fill(0); }\n    let metadata;\n    try { metadata = parseMetadata(metadataPlaintext); }\n    finally { metadataPlaintext.fill(0); }\n    const record = {\n      fileKey,\n      fileId: new Uint8Array(parsed.fileId),\n      plaintextSize: parsed.plaintextSize,\n      chunkSize: parsed.chunkSize,\n      chunkCount: parsed.chunkCount,\n      headerCommitment: new Uint8Array(parsed.headerCommitment),\n      seen: new Set(),\n    };\n    const state = makePublicState(\"decryption\", record, new Uint8Array(header), metadata);\n    decryptionStates.set(state, record);\n    retained = true;\n    return state;\n  } finally {\n    if (!retained) fileKey.fill(0);\n  }\n}\n\nexport function decryptChunk({ state, index, ciphertext }) {\n  const record = decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-decryption state\");\n  bytes(ciphertext);\n  const expected = expectedPlaintextLength(record, index);\n  if (ciphertext.length !== NONCE_BYTES + expected + TAG_BYTES)\n    fail(\"E_CHUNK_SIZE\", `chunk ${index} ciphertext has the wrong length`);\n  const nonce = ciphertext.subarray(0, NONCE_BYTES);\n  const body = ciphertext.subarray(NONCE_BYTES);\n  const key = deriveChunkKey(record.fileKey, record.fileId, index);\n  let plaintext;\n  try { plaintext = xchacha20poly1305(key, nonce, chunkAad(record, index)).decrypt(body); }\n  catch { fail(\"E_CHUNK_AUTH\", `chunk ${index} authentication failed`); }\n  finally { key.fill(0); }\n  record.seen.add(index);\n  return plaintext;\n}\n\nexport function finalizeEnvelope(state) {\n  const record = encryptionStates.get(state) ?? decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-envelope state\");\n  if (record.seen.size !== record.chunkCount) fail(\"E_ENVELOPE_INCOMPLETE\", `expected ${record.chunkCount} authenticated chunks, observed ${record.seen.size}`);\n  const finalized = Object.freeze({\n    version: VERSION,\n    header: state.header,\n    metadata: state.metadata,\n    plaintextSize: record.plaintextSize,\n    chunkSize: record.chunkSize,\n    chunkCount: record.chunkCount,\n  });\n  disposeEnvelope(state);\n  return finalized;\n}\n\nexport function disposeEnvelope(state) {\n  const record = encryptionStates.get(state) ?? decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not an active file-envelope state\");\n  record.fileKey.fill(0);\n  record.seen.clear();\n  encryptionStates.delete(state);\n  decryptionStates.delete(state);\n}\n\nexport const fileInternals = Object.freeze({\n  createFileEncryptionWithRandom: createFileEncryptionImpl,\n  parseEnvelopeHeader,\n  metadataAad,\n  chunkAad,\n  constants: Object.freeze({ MAGIC, VERSION, NONCE_BYTES, TAG_BYTES, DEFAULT_CHUNK_SIZE, MIN_CHUNK_SIZE, MAX_CHUNK_SIZE }),\n});\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YAAY,MAAM,SAAS;AACzB,UAAM,GAAG,IAAI,KAAK,OAAO,EAAE;AAC3B,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,OAAO,CAAC,MAAM,YAAY;AACrC,QAAM,IAAI,cAAc,MAAM,OAAO;AACvC;;;ACVA,oBAAiC;AACjC,qBAAuB;AACvB,kBAAqB;AACrB,kBAAqB;AACrB,oBAAuB;AACvB,mBAA4B;;;ACL5B,IAAM,SAAS;AACf,IAAM,eAAe,IAAI,WAAW,GAAG,EAAE,KAAK,EAAE;AAChD,SAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,IAAK,cAAa,OAAO,WAAW,CAAC,CAAC,IAAI;AAEtE,IAAM,QAAQ,IAAI,WAAW,CAAC;AAC9B,IAAM,OAAO,CAAC,UAAU,IAAI,YAAY,EAAE,OAAO,KAAK;AAEtD,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;AACnD,MAAI,EAAE,iBAAiB,YAAa,OAAM,IAAI,UAAU,GAAG,IAAI,uBAAuB;AACtF,MAAI,WAAW,UAAa,MAAM,WAAW,OAAQ,OAAM,IAAI,UAAU,GAAG,IAAI,YAAY,MAAM,QAAQ;AAC1G,SAAO;AACT;AAEO,SAAS,UAAU,OAAO;AAC/B,QAAM,SAAS,MAAM,OAAO,CAAC,KAAK,SAAS,MAAM,MAAM,IAAI,EAAE,QAAQ,CAAC;AACtE,QAAM,MAAM,IAAI,WAAW,MAAM;AACjC,MAAI,SAAS;AACb,aAAW,QAAQ,OAAO;AACxB,QAAI,IAAI,MAAM,MAAM;AACpB,cAAU,KAAK;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,MAAM,GAAG,GAAG;AAC1B,MAAI,EAAE,aAAa,eAAe,EAAE,aAAa,eAAe,EAAE,WAAW,EAAE,OAAQ,QAAO;AAC9F,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,SAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;AACrD,SAAO,SAAS;AAClB;AAEO,SAAS,QAAQ,OAAO;AAC7B,MAAI,MAAM;AACV,aAAW,QAAQ,MAAO,QAAO;AACjC,SAAO,QAAQ;AACjB;AAEO,SAAS,IAAI,OAAO;AACzB,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,WAAY,OAAM,IAAI,WAAW,uBAAuB;AAC7G,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,MAAI,SAAS,IAAI,MAAM,EAAE,UAAU,GAAG,OAAO,KAAK;AAClD,SAAO;AACT;AAEO,SAAS,IAAI,OAAO;AACzB,MAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,EAAG,OAAM,IAAI,WAAW,0CAA0C;AAC9G,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,QAAM,OAAO,IAAI,SAAS,IAAI,MAAM;AACpC,QAAM,MAAM,OAAO,KAAK;AACxB,OAAK,UAAU,GAAG,OAAO,OAAO,GAAG,GAAG,KAAK;AAC3C,OAAK,UAAU,GAAG,OAAO,MAAM,WAAW,GAAG,KAAK;AAClD,SAAO;AACT;AAEO,SAAS,QAAQ,OAAO,QAAQ;AACrC,MAAI,SAAS,KAAK,SAAS,IAAI,MAAM,OAAQ,OAAM,IAAI,WAAW,kBAAkB;AACpF,SAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,aAAa,QAAQ,CAAC,EAAE,UAAU,GAAG,KAAK;AACpF;AAEO,SAAS,QAAQ,OAAO,QAAQ;AACrC,MAAI,SAAS,KAAK,SAAS,IAAI,MAAM,OAAQ,OAAM,IAAI,WAAW,kBAAkB;AACpF,QAAM,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,aAAa,QAAQ,CAAC;AACpE,QAAM,MAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC,KAAK,MAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC;AACvF,MAAI,MAAM,OAAO,OAAO,gBAAgB,EAAG,OAAM,IAAI,WAAW,8CAA8C;AAC9G,SAAO,OAAO,GAAG;AACnB;AAEO,SAAS,aAAa,OAAO,EAAE,UAAU,MAAM,IAAI,CAAC,GAAG;AAC5D,QAAM,KAAK;AACX,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;AACxC,UAAM,IAAI,MAAM,CAAC;AACjB,UAAM,QAAQ,IAAI,IAAI,MAAM;AAC5B,UAAM,QAAQ,IAAI,IAAI,MAAM;AAC5B,UAAM,IAAI,QAAQ,MAAM,IAAI,CAAC,IAAI;AACjC,UAAM,IAAI,QAAQ,MAAM,IAAI,CAAC,IAAI;AACjC,WAAO,OAAO,MAAM,CAAC;AACrB,WAAO,QAAS,IAAI,MAAM,IAAM,MAAM,CAAE;AACxC,QAAI,MAAO,QAAO,QAAS,IAAI,OAAO,IAAM,MAAM,CAAE;AAAA,aAC3C,QAAS,QAAO;AACzB,QAAI,MAAO,QAAO,OAAO,IAAI,EAAE;AAAA,aACtB,QAAS,QAAO;AAAA,EAC3B;AACA,SAAO;AACT;AAEO,SAAS,aAAa,OAAO,EAAE,UAAU,MAAM,IAAI,CAAC,GAAG;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,SAAS;AACX,QAAI,CAAC,yBAAyB,KAAK,KAAK,KAAK,MAAM,SAAS,MAAM,EAAG,QAAO;AAAA,EAC9E,WAAW,CAAC,mBAAmB,KAAK,KAAK,KAAK,MAAM,SAAS,MAAM,EAAG,QAAO;AAE7E,QAAM,WAAW,UAAU,MAAM,QAAQ,OAAO,EAAE,IAAI;AACtD,QAAM,eAAe,KAAK,MAAO,SAAS,SAAS,IAAK,CAAC;AACzD,QAAM,MAAM,IAAI,WAAW,YAAY;AACvC,MAAI,cAAc;AAClB,MAAI,OAAO;AACX,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,UAAM,OAAO,SAAS,WAAW,CAAC;AAClC,QAAI,QAAQ,aAAa,UAAU,aAAa,IAAI,IAAI,EAAG,QAAO;AAClE,kBAAe,eAAe,IAAK,aAAa,IAAI;AACpD,YAAQ;AACR,QAAI,QAAQ,GAAG;AACb,cAAQ;AACR,UAAI,QAAQ,IAAK,gBAAgB,OAAQ;AAAA,IAC3C;AAAA,EACF;AACA,MAAI,OAAO,MAAM,eAAgB,KAAK,QAAQ,OAAQ,EAAG,QAAO;AAChE,MAAI,aAAa,KAAK,EAAE,QAAQ,CAAC,MAAM,MAAO,QAAO;AACrD,SAAO;AACT;;;AC/GA,IAAM,UAAU;AAChB,IAAM,aAAa,CAAC,WAAY,WAAY,WAAY,YAAY,SAAU;AAE9E,SAAS,QAAQ,QAAQ;AACvB,MAAI,WAAW;AACf,aAAW,SAAS,QAAQ;AAC1B,UAAM,MAAM,aAAa;AACzB,gBAAa,WAAW,aAAc,IAAK;AAC3C,aAAS,IAAI,GAAG,IAAI,GAAG,IAAK,KAAK,QAAQ,IAAK,EAAG,aAAY,WAAW,CAAC;AAAA,EAC3E;AACA,SAAO,aAAa;AACtB;AAEA,SAAS,UAAU,KAAK;AACtB,QAAM,MAAM,CAAC;AACb,aAAW,QAAQ,IAAK,KAAI,KAAK,KAAK,WAAW,CAAC,MAAM,CAAC;AACzD,MAAI,KAAK,CAAC;AACV,aAAW,QAAQ,IAAK,KAAI,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE;AACxD,SAAO;AACT;AAEA,SAAS,YAAY,MAAM,MAAM,IAAI,KAAK;AACxC,MAAI,cAAc;AAClB,MAAI,OAAO;AACX,QAAM,MAAM,CAAC;AACb,QAAM,WAAW,KAAK,MAAM;AAC5B,aAAW,SAAS,MAAM;AACxB,QAAI,QAAQ,KAAK,UAAU,KAAM,QAAO;AACxC,kBAAe,eAAe,OAAQ;AACtC,YAAQ;AACR,WAAO,QAAQ,IAAI;AACjB,cAAQ;AACR,UAAI,KAAM,gBAAgB,OAAQ,OAAO;AAAA,IAC3C;AAAA,EACF;AACA,MAAI,OAAO,KAAM,KAAI,KAAM,eAAgB,KAAK,OAAS,OAAO;AAAA,WACvD,CAAC,QAAQ,QAAQ,QAAU,eAAgB,KAAK,OAAS,SAAW,QAAO;AACpF,SAAO;AACT;AAEO,SAAS,aAAa,KAAK,MAAM;AACtC,QAAM,QAAQ,YAAY,MAAM,GAAG,GAAG,IAAI;AAC1C,QAAM,SAAS,CAAC,GAAG,UAAU,GAAG,GAAG,GAAG,KAAK;AAC3C,QAAM,MAAM,QAAQ,CAAC,GAAG,QAAQ,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI;AACrD,QAAM,WAAW,CAAC;AAClB,WAAS,IAAI,GAAG,IAAI,GAAG,IAAK,UAAS,KAAM,QAAS,KAAK,IAAI,KAAO,EAAE;AACtE,SAAO,MAAM,MAAM,CAAC,GAAG,OAAO,GAAG,QAAQ,EAAE,IAAI,CAAC,SAAS,QAAQ,IAAI,CAAC,EAAE,KAAK,EAAE;AACjF;AAEO,SAAS,aAAa,OAAO;AAClC,MAAI,OAAO,UAAU,YAAa,UAAU,MAAM,YAAY,KAAK,UAAU,MAAM,YAAY,EAAI,QAAO;AAC1G,QAAM,aAAa,MAAM,YAAY;AACrC,QAAM,YAAY,WAAW,YAAY,GAAG;AAC5C,MAAI,YAAY,KAAK,YAAY,IAAI,WAAW,OAAQ,QAAO;AAC/D,QAAM,MAAM,WAAW,MAAM,GAAG,SAAS;AACzC,QAAM,QAAQ,CAAC;AACf,aAAW,QAAQ,WAAW,MAAM,YAAY,CAAC,GAAG;AAClD,UAAM,OAAO,QAAQ,QAAQ,IAAI;AACjC,QAAI,SAAS,GAAI,QAAO;AACxB,UAAM,KAAK,IAAI;AAAA,EACjB;AACA,MAAI,QAAQ,CAAC,GAAG,UAAU,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAG,QAAO;AACzD,QAAM,OAAO,YAAY,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,GAAG,KAAK;AACxD,SAAO,SAAS,OAAO,OAAO,EAAE,KAAK,MAAM,IAAI,WAAW,IAAI,EAAE;AAClE;;;AFtDA,IAAM,eAAe;AACrB,IAAM,kBAAkB,KAAK,8BAA8B;AAC3D,IAAM,kBAAkB,KAAK,QAAQ;AACrC,IAAM,aAAa,IAAI,WAAW,EAAE;AAEpC,IAAM,SAAS,CAAC,eAAW,0BAAY,MAAM;AAEtC,SAAS,eAAe,WAAW;AACxC,MAAI,OAAO,cAAc,YAAY,cAAc,UAAU,YAAY,EAAG,MAAK,eAAe,kDAAkD;AAClJ,QAAM,UAAU,aAAa,SAAS;AACtC,MAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,KAAK,WAAW,MAAM,aAAa,OAAO,QAAQ,IAAI,MAAM;AAC3G,SAAK,eAAe,8BAA8B;AACpD,SAAO,QAAQ;AACjB;AAEO,SAAS,cAAc,UAAU;AACtC,MAAI,OAAO,aAAa,YAAa,aAAa,SAAS,YAAY,KAAK,aAAa,SAAS,YAAY;AAC5G,SAAK,cAAc,uCAAuC;AAC5D,QAAM,UAAU,aAAa,QAAQ;AACrC,MAAI,CAAC,WAAW,QAAQ,QAAQ,qBAAqB,QAAQ,KAAK,WAAW,MAAM,aAAa,mBAAmB,QAAQ,IAAI,MAAM,SAAS,YAAY;AACxJ,SAAK,cAAc,6BAA6B;AAClD,SAAO,QAAQ;AACjB;AAEO,SAAS,sBAAsB,UAAU;AAC9C,SAAO,aAAa,OAAO,sBAAO,aAAa,cAAc,QAAQ,CAAC,CAAC;AACzE;AAEO,SAAS,gBAAgB,WAAW;AACzC,SAAO,aAAa,OAAO,MAAM,WAAW,IAAI,WAAW,CAAC;AAC9D;AAEO,SAAS,eAAe,WAAW;AACxC,SAAO,aAAa,mBAAmB,MAAM,WAAW,IAAI,WAAW,CAAC,EAAE,YAAY;AACxF;AAEO,SAAS,uBAAuB,WAAW;AAChD,SAAO,sBAAO,aAAa,MAAM,WAAW,IAAI,WAAW,CAAC;AAC9D;AAEO,SAAS,0BAA0B;AACxC,SAAO,kCAAkC,OAAO,EAAE,CAAC;AACrD;AAEO,SAAS,kCAAkC,WAAW;AAC3D,QAAM,SAAS,MAAM,WAAW,IAAI,WAAW;AAC/C,SAAO,EAAE,UAAU,eAAe,MAAM,GAAG,WAAW,gBAAgB,uBAAuB,MAAM,CAAC,EAAE;AACxG;AAEA,SAAS,YAAY,QAAQ;AAC3B,QAAM,MAAM;AACZ,MAAI,WAAW;AACf,QAAM,OAAO,MAAM;AACjB,UAAM,UAAU,OAAO,QAAQ,IAAM,QAAQ;AAC7C,QAAI,YAAY,GAAI,MAAK,sBAAsB,sBAAsB;AACrE,UAAM,QAAQ,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,OAAO,SAAS,UAAU,OAAO,CAAC;AACjG,eAAW,UAAU;AACrB,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AAAE,cAAU,KAAK;AAAA,EAAG,SACjB,OAAO;AAAE,QAAI,OAAO,KAAM,OAAM;AAAO,SAAK,sBAAsB,+BAA+B;AAAA,EAAG;AAC3G,MAAI,YAAY,aAAc,MAAK,wBAAwB,gCAAgC;AAE3F,QAAM,UAAU,CAAC;AACjB,aAAS;AACP,QAAI;AACJ,QAAI;AAAE,gBAAU,KAAK;AAAA,IAAG,SACjB,OAAO;AAAE,UAAI,OAAO,KAAM,OAAM;AAAO,WAAK,sBAAsB,+BAA+B;AAAA,IAAG;AAC3G,QAAI,QAAQ,WAAW,MAAM,GAAG;AAC9B,YAAM,MAAM,aAAa,QAAQ,MAAM,CAAC,CAAC;AACzC,UAAI,CAAC,OAAO,IAAI,WAAW,MAAM,aAAa,OAAO,OAAQ,MAAK,sBAAsB,6BAA6B;AACrH,YAAM,YAAY,WAAW,QAAQ,SAAS,IAAI;AAClD,aAAO,EAAE,SAAS,KAAK,eAAe,OAAO,SAAS,GAAG,SAAS,EAAE;AAAA,IACtE;AACA,QAAI,CAAC,QAAQ,WAAW,KAAK,EAAG,MAAK,sBAAsB,8BAA8B;AACzF,UAAM,OAAO,QAAQ,MAAM,CAAC,EAAE,MAAM,GAAG;AACvC,QAAI,KAAK,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,EAAG,MAAK,sBAAsB,iCAAiC;AACtG,UAAM,YAAY,CAAC;AACnB,eAAS;AACP,UAAI;AACJ,UAAI;AAAE,mBAAW,KAAK;AAAA,MAAG,SAClB,OAAO;AAAE,YAAI,OAAO,KAAM,OAAM;AAAO,aAAK,sBAAsB,+BAA+B;AAAA,MAAG;AAC3G,UAAI,CAAC,mBAAmB,KAAK,QAAQ,KAAK,SAAS,SAAS,GAAI,MAAK,sBAAsB,yBAAyB;AACpH,gBAAU,KAAK,QAAQ;AACvB,UAAI,SAAS,SAAS,GAAI;AAAA,IAC5B;AACA,UAAM,OAAO,aAAa,UAAU,KAAK,EAAE,CAAC;AAC5C,QAAI,CAAC,KAAM,MAAK,sBAAsB,+BAA+B;AACrE,YAAQ,KAAK,EAAE,MAAM,KAAK,CAAC;AAAA,EAC7B;AACF;AAEA,SAAS,iBAAiB,SAAS,YAAY,KAAK;AAClD,QAAM,SAAS,IAAI,SAAS;AAC5B,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,EAAG,MAAK,eAAe,oCAAoC;AACnH,MAAI,OAAO,GAAG,YAAY;AAAA;AAC1B,aAAW,aAAa,YAAY;AAClC,UAAM,kBAAkB,OAAO,cAAc,WAAW,eAAe,SAAS,IAAI,MAAM,WAAW,IAAI,WAAW;AACpH,UAAM,kBAAkB,IAAI,EAAE;AAC9B,UAAM,iBAAiB,IAAI,eAAe;AAC1C,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,kBAAkB,sBAAO,aAAa,eAAe;AAC3D,UAAI;AAAE,iBAAS,sBAAO,gBAAgB,iBAAiB,eAAe;AAAA,MAAG,QACnE;AAAE,aAAK,eAAe,uCAAuC;AAAA,MAAG;AACtE,UAAI,QAAQ,MAAM,EAAG,MAAK,eAAe,uCAAuC;AAChF,oBAAU,kBAAK,sBAAQ,QAAQ,OAAO,iBAAiB,eAAe,GAAG,iBAAiB,EAAE;AAC5F,YAAM,cAAU,gCAAiB,SAAS,UAAU,EAAE,QAAQ,OAAO;AACrE,cAAQ,aAAa,aAAa,eAAe,CAAC;AAAA,EAAK,aAAa,OAAO,CAAC;AAAA;AAAA,IAC9E,UAAE;AACA,sBAAgB,KAAK,CAAC;AACtB,cAAQ,KAAK,CAAC;AACd,eAAS,KAAK,CAAC;AAAA,IACjB;AAAA,EACF;AACA,UAAQ;AACR,QAAM,gBAAgB,KAAK,IAAI;AAC/B,QAAM,aAAS,kBAAK,sBAAQ,SAAS,OAAO,iBAAiB,EAAE;AAC/D,MAAI;AACF,UAAM,UAAM,kBAAK,sBAAQ,QAAQ,aAAa;AAC9C,WAAO,KAAK,GAAG,IAAI,IAAI,aAAa,GAAG,CAAC;AAAA,CAAI;AAAA,EAC9C,UAAE;AAAU,WAAO,KAAK,CAAC;AAAA,EAAG;AAC9B;AAEA,SAAS,iBAAiB,QAAQ,UAAU;AAC1C,QAAM,aAAa,OAAO,aAAa;AACvC,QAAM,SAAS,aAAa,cAAc,QAAQ,IAAI,MAAM,UAAU,IAAI,UAAU;AACpF,MAAI,UAAU;AACd,MAAI,gBAAgB;AACpB,MAAI;AACF,UAAM,SAAS,YAAY,MAAM;AACjC,QAAI,OAAO,QAAQ,WAAW,EAAG,MAAK,sBAAsB,8BAA8B;AAC1F,UAAM,kBAAkB,sBAAO,aAAa,MAAM;AAClD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,OAAO,KAAK,CAAC,MAAM,SAAU,MAAK,0BAA0B,2CAA2C;AAC3G,UAAI,OAAO,KAAK,WAAW,KAAK,OAAO,KAAK,WAAW,GAAI,MAAK,sBAAsB,uBAAuB;AAC7G,YAAM,kBAAkB,aAAa,OAAO,KAAK,CAAC,CAAC;AACnD,UAAI,CAAC,mBAAmB,gBAAgB,WAAW,GAAI,MAAK,sBAAsB,gCAAgC;AAAA,IACpH;AACA,eAAW,UAAU,OAAO,SAAS;AACnC,YAAM,kBAAkB,aAAa,OAAO,KAAK,CAAC,CAAC;AACnD,UAAI;AACJ,UAAI;AACJ,UAAI;AACF,YAAI;AAAE,mBAAS,sBAAO,gBAAgB,QAAQ,eAAe;AAAA,QAAG,QAC1D;AAAE;AAAA,QAAU;AAClB,YAAI,QAAQ,MAAM,EAAG;AACrB,sBAAU,kBAAK,sBAAQ,QAAQ,OAAO,iBAAiB,eAAe,GAAG,iBAAiB,EAAE;AAC5F,YAAI;AACF,gBAAM,gBAAY,gCAAiB,SAAS,UAAU,EAAE,QAAQ,OAAO,IAAI;AAC3E,cAAI,UAAU,WAAW,IAAI;AAAE,sBAAU;AAAW;AAAA,UAAO;AAC3D,oBAAU,KAAK,CAAC;AAAA,QAClB,QAAQ;AAAA,QAAuC;AAAA,MACjD,UAAE;AACA,gBAAQ,KAAK,CAAC;AACd,iBAAS,KAAK,CAAC;AAAA,MACjB;AAAA,IACF;AACA,QAAI,CAAC,QAAS,MAAK,qBAAqB,4CAA4C;AACpF,UAAM,aAAS,kBAAK,sBAAQ,SAAS,OAAO,iBAAiB,EAAE;AAC/D,UAAM,kBAAc,kBAAK,sBAAQ,QAAQ,OAAO,aAAa;AAC7D,QAAI;AACF,UAAI,CAAC,MAAM,aAAa,OAAO,GAAG,EAAG,MAAK,mBAAmB,kCAAkC;AAC/F,sBAAgB;AAChB,aAAO;AAAA,IACT,UAAE;AACA,aAAO,KAAK,CAAC;AACb,kBAAY,KAAK,CAAC;AAAA,IACpB;AAAA,EACF,UAAE;AACA,QAAI,WAAY,QAAO,KAAK,CAAC;AAC7B,QAAI,CAAC,cAAe,UAAS,KAAK,CAAC;AAAA,EACrC;AACF;AAEO,IAAM,YAAY,OAAO,OAAO;AAAA,EACrC,MAAM,CAAC,SAAS,eAAe,iBAAiB,SAAS,YAAY,MAAM;AAAA,EAC3E,MAAM;AACR,CAAC;AAEM,IAAM,eAAe,OAAO,OAAO,EAAE,kBAAkB,iBAAiB,CAAC;;;AGjMhF,IAAAA,iBAAkC;AAClC,IAAAC,eAAqB;AACrB,IAAAC,iBAAuB;AACvB,IAAAC,gBAA4B;AAK5B,IAAM,QAAQ,KAAK,WAAW;AAC9B,IAAM,UAAU;AAChB,IAAM,gBAAgB;AACtB,IAAM,cAAc;AACpB,IAAM,YAAY;AAClB,IAAM,qBAAqB,OAAO;AAClC,IAAM,iBAAiB,KAAK;AAC5B,IAAM,iBAAiB,KAAK,OAAO;AACnC,IAAM,kBAAkB,OAAO;AAC/B,IAAM,sBAAsB,MAAM;AAClC,IAAM,+BAA+B,KAAK;AAE1C,IAAM,oBAAoB,KAAK,8BAA8B;AAC7D,IAAM,iBAAiB,KAAK,2BAA2B;AACvD,IAAM,sBAAsB,KAAK,0BAA0B;AAC3D,IAAM,mBAAmB,KAAK,uBAAuB;AACrD,IAAM,mBAAmB,IAAI,WAAW,CAAC,CAAC,CAAC;AAE3C,IAAM,mBAAmB,oBAAI,QAAQ;AACrC,IAAM,mBAAmB,oBAAI,QAAQ;AAErC,SAAS,iBAAiB,eAAe,WAAW;AAClD,MAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB,EAAG,MAAK,WAAW,mDAAmD;AAClI,MAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,kBAAkB,YAAY;AAC5E,SAAK,WAAW,6BAA6B,cAAc,QAAQ,cAAc,QAAQ;AAC3F,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,gBAAgB,SAAS,CAAC;AACnE,MAAI,aAAa,WAAY,MAAK,WAAW,+BAA+B;AAC5E,SAAO;AACT;AAEA,SAAS,wBAAwB,EAAE,eAAe,WAAW,WAAW,GAAG,OAAO;AAChF,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,SAAS,WAAY,MAAK,iBAAiB,qCAAqC;AAC7H,MAAI,kBAAkB,EAAG,QAAO;AAChC,SAAO,UAAU,aAAa,IAAI,gBAAgB,YAAY,QAAQ;AACxE;AAEA,SAAS,oBAAoB,OAAO,OAAO;AACzC,MAAI,SAAS;AACb,WAAS,SAAS,GAAG,SAAS,MAAM,UAAS;AAC3C,UAAM,QAAQ,MAAM,WAAW,MAAM;AACrC,QAAI;AACJ,QAAI,SAAS,SAAU,SAAS,OAAQ;AACtC,YAAM,SAAS,MAAM,WAAW,SAAS,CAAC;AAC1C,UAAI,EAAE,UAAU,SAAU,UAAU,OAAS,MAAK,cAAc,GAAG,KAAK,0CAA0C;AAClH,kBAAY,MAAM,MAAM,QAAQ,SAAS,CAAC;AAC1C,gBAAU;AAAA,IACZ,OAAO;AACL,UAAI,SAAS,SAAU,SAAS,MAAQ,MAAK,cAAc,GAAG,KAAK,0CAA0C;AAC7G,kBAAY,MAAM,QAAQ;AAAA,IAC5B;AACA,QAAI,cAAc,IAAK,WAAU;AAAA,aACxB,cAAc,KAAM,WAAU;AAAA,aAC9B,UAAU,EAAM,WAAU;AAAA,aAC1B,UAAU,EAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,QAAQ,GAAM,WAAU,MAAM,MAAM,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,QACrE,WAAU;AAAA,EACjB;AACA,SAAO,GAAG,MAAM;AAClB;AAEA,SAAS,kBAAkB,UAAU;AACnC,MAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,EAAG,MAAK,cAAc,4BAA4B;AACzH,MAAI,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,aAAa,cAAc,EAAE,SAAS,GAAG,CAAC;AAC1F,SAAK,cAAc,oCAAoC;AACzD,QAAM,EAAE,MAAM,YAAY,4BAA4B,eAAe,KAAK,IAAI;AAC9E,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,KAAK,IAAI,EAAE,SAAS,QAAQ,yBAAyB,KAAK,IAAI;AACjH,SAAK,cAAc,uEAAuE;AAC5F,MAAI,SAAS,OAAO,SAAS,QAAQ,UAAU,KAAK,IAAI,KAAK,SAAS,KAAK,IAAI,KAAK,mDAAmD,KAAK,IAAI;AAC9I,SAAK,cAAc,6EAA6E;AAClG,MAAI,OAAO,cAAc,YAAY,KAAK,SAAS,EAAE,SAAS,OAAO,CAAC,iBAAiB,KAAK,SAAS;AACnG,SAAK,cAAc,qEAAqE;AAC1F,MAAI,iBAAiB,SAAS,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe;AAClF,SAAK,cAAc,mEAAmE;AACxF,SAAO,KAAK,WAAW,oBAAoB,MAAM,eAAe,CAAC,gBAAgB,oBAAoB,WAAW,oBAAoB,CAAC,mBAAmB,iBAAiB,OAAO,SAAS,OAAO,YAAY,CAAC,GAAG;AAClN;AAEA,SAAS,cAAc,WAAW;AAChC,MAAI;AACJ,MAAI;AAAE,aAAS,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;AAAA,EAAG,QAClF;AAAE,SAAK,cAAc,gDAAgD;AAAA,EAAG;AAC9E,QAAM,YAAY,kBAAkB,MAAM;AAC1C,MAAI,UAAU,WAAW,UAAU,UAAU,UAAU,KAAK,CAAC,MAAM,UAAU,SAAS,UAAU,KAAK,CAAC;AACpG,SAAK,cAAc,qCAAqC;AAC1D,SAAO;AACT;AAEA,SAAS,iBAAiB,EAAE,WAAW,eAAe,YAAY,QAAQ,WAAAC,WAAU,GAAG;AACrF,SAAO,OAAO,IAAI,SAAS,GAAG,IAAI,aAAa,GAAG,IAAI,UAAU,GAAG,QAAQ,IAAIA,WAAU,MAAM,GAAGA,UAAS;AAC7G;AAEA,SAAS,YAAY,QAAQ;AAC3B,SAAO,OAAO,qBAAqB,kBAAkB,IAAI,OAAO,OAAG,uBAAO,OAAO,OAAO,MAAM,CAAC,CAAC;AAClG;AAEA,SAAS,SAAS,QAAQ,OAAO;AAC/B,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,IAAI,OAAO;AAAA,IACX,OAAO;AAAA,IACP,OAAO;AAAA,IACP,IAAI,KAAK;AAAA,IACT,IAAI,OAAO,UAAU;AAAA,IACrB,IAAI,OAAO,aAAa;AAAA,IACxB,IAAI,OAAO,SAAS;AAAA,IACpB,IAAI,QAAQ;AAAA,EACd;AACF;AAEA,SAAS,kBAAkB,SAAS,QAAQ;AAC1C,aAAO,mBAAK,uBAAQ,SAAS,QAAQ,mBAAmB,EAAE;AAC5D;AAEA,SAAS,eAAe,SAAS,QAAQ,OAAO;AAC9C,aAAO,mBAAK,uBAAQ,SAAS,OAAO,QAAQ,IAAI,KAAK,CAAC,GAAG,gBAAgB,EAAE;AAC7E;AAEA,SAAS,oBAAoB,QAAQ;AACnC,QAAM,MAAM;AACZ,MAAI,OAAO,SAAS,MAAM,SAAS,KAAK,MAAM,KAAK,CAAC,MAAM,UAAU,OAAO,KAAK,MAAM,IAAI;AACxF,SAAK,sBAAsB,4CAA4C;AACzE,MAAI;AACJ,MAAI;AAAE,iBAAa,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAAG,QAC5C;AAAE,SAAK,oBAAoB,iCAAiC;AAAA,EAAG;AACrE,MAAI,aAAa,mBAAmB,eAAe,OAAO,SAAS,MAAM,SAAS;AAChF,SAAK,oBAAoB,sCAAsC;AACjE,MAAI,SAAS,MAAM,SAAS;AAC5B,QAAM,OAAO,CAAC,QAAQ,UAAU;AAC9B,QAAI,CAAC,OAAO,UAAU,MAAM,KAAK,SAAS,KAAK,SAAS,SAAS,OAAO,OAAQ,MAAK,oBAAoB,aAAa,KAAK,EAAE;AAC7H,UAAM,QAAQ,OAAO,SAAS,QAAQ,SAAS,MAAM;AACrD,cAAU;AACV,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,eAAe,YAAY,iBAAiB;AAC3D,MAAI;AACF,gBAAY,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAC/C,oBAAgB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AACnD,iBAAa,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAClD,QAAQ;AAAE,SAAK,oBAAoB,uBAAuB;AAAA,EAAG;AAC7D,QAAM,SAAS,KAAK,eAAe,SAAS;AAC5C,MAAI;AAAE,sBAAkB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAAG,QACxD;AAAE,SAAK,oBAAoB,6BAA6B;AAAA,EAAG;AACjE,MAAI,oBAAoB,KAAK,kBAAkB,oBAAqB,MAAK,oBAAoB,2BAA2B;AACxH,QAAMA,aAAY,KAAK,iBAAiB,YAAY;AACpD,QAAM,YAAY;AAClB,QAAM,gBAAgB,KAAK,aAAa,gBAAgB;AACxD,MAAI;AAAE,qBAAiB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAAG,QACvD;AAAE,SAAK,oBAAoB,2BAA2B;AAAA,EAAG;AAC/D,MAAI,iBAAiB,aAAa,iBAAiB,6BAA8B,MAAK,oBAAoB,oCAAoC;AAC9I,QAAM,qBAAqB,KAAK,gBAAgB,qBAAqB;AACrE,MAAI,WAAW,OAAO,OAAQ,MAAK,oBAAoB,wCAAwC;AAE/F,QAAM,gBAAgB,iBAAiB,eAAe,SAAS;AAC/D,MAAI,eAAe,cAAe,MAAK,oBAAoB,0CAA0C;AACrG,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAAA;AAAA,IACA,QAAQ,OAAO,SAAS,MAAM,SAAS,GAAG,SAAS;AAAA,IACnD;AAAA,IACA;AAAA,IACA,sBAAkB,uBAAO,MAAM;AAAA,EACjC;AACF;AAEA,SAAS,gBAAgB,MAAM,QAAQ,QAAQ,UAAU;AACvD,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,eAAe,OAAO;AAAA,IACtB,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,yBAAyB,EAAE,WAAW,YAAY,UAAU,eAAe,YAAY,mBAAmB,GAAG,KAAK;AACzH,MAAI,cAAc,UAAa,eAAe,OAAW,MAAK,WAAW,2CAA2C;AACpH,QAAM,gBAAgB,eAAe,cAAc,SAAY,CAAC,IAAI,CAAC,SAAS;AAC9E,QAAM,aAAa,iBAAiB,eAAe,SAAS;AAC5D,QAAM,UAAU,MAAM,IAAI,EAAE,GAAG,IAAI,iBAAiB;AACpD,MAAI,WAAW;AACf,MAAI;AACF,UAAM,SAAS,MAAM,IAAI,aAAa,GAAG,eAAe,gBAAgB;AACxE,UAAMA,aAAY,aAAa,iBAAiB,SAAS,eAAe,GAAG;AAC3E,QAAIA,WAAU,SAAS,oBAAqB,MAAK,WAAW,+BAA+B;AAC3F,UAAM,SAAS,iBAAiB,EAAE,WAAW,eAAe,YAAY,QAAQ,WAAAA,WAAU,CAAC;AAC3F,UAAM,gBAAgB,MAAM,IAAI,WAAW,GAAG,aAAa,uBAAuB;AAClF,UAAM,oBAAoB,kBAAkB,QAAQ;AACpD,UAAM,cAAc,kBAAkB,SAAS,MAAM;AACrD,QAAI;AACJ,QAAI;AAAE,+BAAqB,kCAAkB,aAAa,eAAe,YAAY,MAAM,CAAC,EAAE,QAAQ,iBAAiB;AAAA,IAAG,UAC1H;AAAU,kBAAY,KAAK,CAAC;AAAG,wBAAkB,KAAK,CAAC;AAAA,IAAG;AAC1D,QAAI,mBAAmB,SAAS,6BAA8B,MAAK,cAAc,iCAAiC;AAClH,UAAM,OAAO,OAAO,QAAQ,eAAe,IAAI,mBAAmB,MAAM,GAAG,kBAAkB;AAC7F,QAAI,KAAK,SAAS,gBAAiB,MAAK,WAAW,mCAAmC;AACtF,UAAM,SAAS,OAAO,OAAO,IAAI,KAAK,MAAM,GAAG,IAAI;AACnD,UAAM,SAAS;AAAA,MACb;AAAA,MACA,QAAQ,IAAI,WAAW,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,sBAAkB,uBAAO,MAAM;AAAA,MAC/B;AAAA,MACA,MAAM,oBAAI,IAAI;AAAA,IAChB;AACA,UAAM,QAAQ,gBAAgB,cAAc,QAAQ,QAAQ,MAAS;AACrE,qBAAiB,IAAI,OAAO,MAAM;AAClC,eAAW;AACX,WAAO;AAAA,EACT,UAAE;AACA,QAAI,CAAC,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC/B;AACF;AAEO,SAAS,qBAAqB,SAAS;AAC5C,SAAO,yBAAyB,SAAS,yBAAW;AACtD;AAEO,SAAS,aAAa,EAAE,OAAO,OAAO,UAAU,GAAG;AACxD,QAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,MAAI,CAAC,OAAQ,MAAK,WAAW,sCAAsC;AACnE,QAAM,SAAS;AACf,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,MAAI,UAAU,WAAW,SAAU,MAAK,gBAAgB,SAAS,KAAK,yBAAyB,QAAQ,kBAAkB;AACzH,QAAM,QAAQ,MAAM,OAAO,IAAI,WAAW,GAAG,aAAa,oBAAoB;AAC9E,QAAM,MAAM,eAAe,OAAO,SAAS,OAAO,QAAQ,KAAK;AAC/D,MAAI;AACJ,MAAI;AAAE,qBAAa,kCAAkB,KAAK,OAAO,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,SAAS;AAAA,EAAG,UAC9F;AAAU,QAAI,KAAK,CAAC;AAAA,EAAG;AACvB,SAAO,KAAK,IAAI,KAAK;AACrB,SAAO,OAAO,OAAO,UAAU;AACjC;AAEO,SAAS,iBAAiB,EAAE,UAAU,OAAO,GAAG;AACrD,QAAM,SAAS,oBAAoB,MAAM;AACzC,QAAM,UAAU,aAAa,iBAAiB,OAAO,WAAW,QAAQ;AACxE,MAAI,WAAW;AACf,MAAI;AACF,UAAM,cAAc,kBAAkB,SAAS,OAAO,MAAM;AAC5D,QAAI;AACJ,QAAI;AAAE,8BAAoB,kCAAkB,aAAa,OAAO,eAAe,YAAY,OAAO,MAAM,CAAC,EAAE,QAAQ,OAAO,kBAAkB;AAAA,IAAG,QACzI;AAAE,WAAK,mBAAmB,qCAAqC;AAAA,IAAG,UACxE;AAAU,kBAAY,KAAK,CAAC;AAAA,IAAG;AAC/B,QAAI;AACJ,QAAI;AAAE,iBAAW,cAAc,iBAAiB;AAAA,IAAG,UACnD;AAAU,wBAAkB,KAAK,CAAC;AAAA,IAAG;AACrC,UAAM,SAAS;AAAA,MACb;AAAA,MACA,QAAQ,IAAI,WAAW,OAAO,MAAM;AAAA,MACpC,eAAe,OAAO;AAAA,MACtB,WAAW,OAAO;AAAA,MAClB,YAAY,OAAO;AAAA,MACnB,kBAAkB,IAAI,WAAW,OAAO,gBAAgB;AAAA,MACxD,MAAM,oBAAI,IAAI;AAAA,IAChB;AACA,UAAM,QAAQ,gBAAgB,cAAc,QAAQ,IAAI,WAAW,MAAM,GAAG,QAAQ;AACpF,qBAAiB,IAAI,OAAO,MAAM;AAClC,eAAW;AACX,WAAO;AAAA,EACT,UAAE;AACA,QAAI,CAAC,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC/B;AACF;AAEO,SAAS,aAAa,EAAE,OAAO,OAAO,WAAW,GAAG;AACzD,QAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,MAAI,CAAC,OAAQ,MAAK,WAAW,sCAAsC;AACnE,QAAM,UAAU;AAChB,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,MAAI,WAAW,WAAW,cAAc,WAAW;AACjD,SAAK,gBAAgB,SAAS,KAAK,kCAAkC;AACvE,QAAM,QAAQ,WAAW,SAAS,GAAG,WAAW;AAChD,QAAM,OAAO,WAAW,SAAS,WAAW;AAC5C,QAAM,MAAM,eAAe,OAAO,SAAS,OAAO,QAAQ,KAAK;AAC/D,MAAI;AACJ,MAAI;AAAE,oBAAY,kCAAkB,KAAK,OAAO,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,IAAI;AAAA,EAAG,QAClF;AAAE,SAAK,gBAAgB,SAAS,KAAK,wBAAwB;AAAA,EAAG,UACtE;AAAU,QAAI,KAAK,CAAC;AAAA,EAAG;AACvB,SAAO,KAAK,IAAI,KAAK;AACrB,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAO;AACtC,QAAM,SAAS,iBAAiB,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK;AACxE,MAAI,CAAC,OAAQ,MAAK,WAAW,oCAAoC;AACjE,MAAI,OAAO,KAAK,SAAS,OAAO,WAAY,MAAK,yBAAyB,YAAY,OAAO,UAAU,mCAAmC,OAAO,KAAK,IAAI,EAAE;AAC5J,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,SAAS;AAAA,IACT,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,eAAe,OAAO;AAAA,IACtB,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,EACrB,CAAC;AACD,kBAAgB,KAAK;AACrB,SAAO;AACT;AAEO,SAAS,gBAAgB,OAAO;AACrC,QAAM,SAAS,iBAAiB,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK;AACxE,MAAI,CAAC,OAAQ,MAAK,WAAW,4CAA4C;AACzE,SAAO,QAAQ,KAAK,CAAC;AACrB,SAAO,KAAK,MAAM;AAClB,mBAAiB,OAAO,KAAK;AAC7B,mBAAiB,OAAO,KAAK;AAC/B;AAEO,IAAM,gBAAgB,OAAO,OAAO;AAAA,EACzC,gCAAgC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,OAAO,OAAO,EAAE,OAAO,SAAS,aAAa,WAAW,oBAAoB,gBAAgB,eAAe,CAAC;AACzH,CAAC;",
+  "sourcesContent": ["export { PkCryptoError } from \"./error.js\";\nexport {\n  ageHeader,\n  createRecipientIdentity,\n  createRecipientIdentityFromSecret,\n  formatIdentity,\n  formatRecipient,\n  parseIdentity,\n  parseRecipient,\n  publicKeyFromSecretKey,\n  recipientFromIdentity,\n} from \"./age.js\";\nexport {\n  createFileEncryption,\n  decryptChunk,\n  disposeEnvelope,\n  encryptChunk,\n  finalizeEnvelope,\n  openFileEnvelope,\n} from \"./file.js\";\n", "export class PkCryptoError extends Error {\n  constructor(code, message) {\n    super(`${code}: ${message}`);\n    this.name = \"PkCryptoError\";\n    this.code = code;\n  }\n}\n\nexport const fail = (code, message) => {\n  throw new PkCryptoError(code, message);\n};\n", "import { chacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { x25519 } from \"@noble/curves/ed25519.js\";\nimport { hkdf } from \"@noble/hashes/hkdf.js\";\nimport { hmac } from \"@noble/hashes/hmac.js\";\nimport { sha256 } from \"@noble/hashes/sha256.js\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport { allZero, bytes, concat, decodeBase64, EMPTY, encodeBase64, equal, utf8 } from \"./bytes.js\";\nimport { decodeBech32, encodeBech32 } from \"./bech32.js\";\nimport { fail } from \"./error.js\";\n\nconst VERSION_LINE = \"age-encryption.org/v1\";\nconst AGE_X25519_INFO = utf8(\"age-encryption.org/v1/X25519\");\nconst AGE_HEADER_INFO = utf8(\"header\");\nconst ZERO_NONCE = new Uint8Array(12);\n\nconst random = (length) => randomBytes(length);\n\nexport function parseRecipient(recipient) {\n  if (typeof recipient !== \"string\" || recipient !== recipient.toLowerCase()) fail(\"E_RECIPIENT\", \"recipient must be canonical lowercase age Bech32\");\n  const decoded = decodeBech32(recipient);\n  if (!decoded || decoded.hrp !== \"age\" || decoded.data.length !== 32 || encodeBech32(\"age\", decoded.data) !== recipient)\n    fail(\"E_RECIPIENT\", \"invalid X25519 age recipient\");\n  return decoded.data;\n}\n\nexport function parseIdentity(identity) {\n  if (typeof identity !== \"string\" || (identity !== identity.toUpperCase() && identity !== identity.toLowerCase()))\n    fail(\"E_IDENTITY\", \"identity must use uniform Bech32 case\");\n  const decoded = decodeBech32(identity);\n  if (!decoded || decoded.hrp !== \"age-secret-key-\" || decoded.data.length !== 32 || encodeBech32(\"age-secret-key-\", decoded.data) !== identity.toLowerCase())\n    fail(\"E_IDENTITY\", \"invalid X25519 age identity\");\n  return decoded.data;\n}\n\nexport function recipientFromIdentity(identity) {\n  return encodeBech32(\"age\", x25519.getPublicKey(parseIdentity(identity)));\n}\n\nexport function formatRecipient(publicKey) {\n  return encodeBech32(\"age\", bytes(publicKey, 32, \"publicKey\"));\n}\n\nexport function formatIdentity(secretKey) {\n  return encodeBech32(\"age-secret-key-\", bytes(secretKey, 32, \"secretKey\")).toUpperCase();\n}\n\nexport function publicKeyFromSecretKey(secretKey) {\n  return x25519.getPublicKey(bytes(secretKey, 32, \"secretKey\"));\n}\n\nexport function createRecipientIdentity() {\n  return createRecipientIdentityFromSecret(random(32));\n}\n\nexport function createRecipientIdentityFromSecret(secretKey) {\n  const scalar = bytes(secretKey, 32, \"secretKey\");\n  return { identity: formatIdentity(scalar), recipient: formatRecipient(publicKeyFromSecretKey(scalar)) };\n}\n\nfunction parseHeader(header) {\n  bytes(header);\n  let position = 0;\n  const line = () => {\n    const newline = header.indexOf(0x0a, position);\n    if (newline === -1) fail(\"E_AGE_HEADER_PARSE\", \"truncated age header\");\n    const value = new TextDecoder(\"utf-8\", { fatal: true }).decode(header.subarray(position, newline));\n    position = newline + 1;\n    return value;\n  };\n\n  let version;\n  try { version = line(); }\n  catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n  if (version !== VERSION_LINE) fail(\"E_AGE_HEADER_VERSION\", \"unsupported age header version\");\n\n  const stanzas = [];\n  for (;;) {\n    let current;\n    try { current = line(); }\n    catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n    if (current.startsWith(\"--- \")) {\n      const mac = decodeBase64(current.slice(4));\n      if (!mac || mac.length !== 32 || position !== header.length) fail(\"E_AGE_HEADER_PARSE\", \"invalid age header MAC line\");\n      const markerEnd = position - current.length - 1 + 3;\n      return { stanzas, mac, authenticated: header.subarray(0, markerEnd) };\n    }\n    if (!current.startsWith(\"-> \")) fail(\"E_AGE_HEADER_PARSE\", \"invalid age recipient stanza\");\n    const args = current.slice(3).split(\" \");\n    if (args.some((arg) => arg.length === 0)) fail(\"E_AGE_HEADER_PARSE\", \"invalid age recipient arguments\");\n    const bodyLines = [];\n    for (;;) {\n      let bodyLine;\n      try { bodyLine = line(); }\n      catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n      if (!/^[A-Za-z0-9+/]*$/.test(bodyLine) || bodyLine.length > 64) fail(\"E_AGE_HEADER_PARSE\", \"invalid age stanza body\");\n      bodyLines.push(bodyLine);\n      if (bodyLine.length < 64) break;\n    }\n    const body = decodeBase64(bodyLines.join(\"\"));\n    if (!body) fail(\"E_AGE_HEADER_PARSE\", \"non-canonical age stanza body\");\n    stanzas.push({ args, body });\n  }\n}\n\nfunction encryptAgeHeader(fileKey, recipients, rng) {\n  bytes(fileKey, 16, \"fileKey\");\n  if (!Array.isArray(recipients) || recipients.length === 0) fail(\"E_RECIPIENT\", \"at least one recipient is required\");\n  let text = `${VERSION_LINE}\\n`;\n  for (const recipient of recipients) {\n    const recipientPublic = typeof recipient === \"string\" ? parseRecipient(recipient) : bytes(recipient, 32, \"recipient\");\n    const ephemeralSecret = rng(32);\n    bytes(ephemeralSecret, 32, \"random output\");\n    let shared;\n    let wrapKey;\n    try {\n      const ephemeralPublic = x25519.getPublicKey(ephemeralSecret);\n      try { shared = x25519.getSharedSecret(ephemeralSecret, recipientPublic); }\n      catch { fail(\"E_RECIPIENT\", \"recipient is a low-order X25519 point\"); }\n      if (allZero(shared)) fail(\"E_RECIPIENT\", \"recipient is a low-order X25519 point\");\n      wrapKey = hkdf(sha256, shared, concat(ephemeralPublic, recipientPublic), AGE_X25519_INFO, 32);\n      const wrapped = chacha20poly1305(wrapKey, ZERO_NONCE).encrypt(fileKey);\n      text += `-> X25519 ${encodeBase64(ephemeralPublic)}\\n${encodeBase64(wrapped)}\\n`;\n    } finally {\n      ephemeralSecret.fill(0);\n      shared?.fill(0);\n      wrapKey?.fill(0);\n    }\n  }\n  text += \"---\";\n  const authenticated = utf8(text);\n  const macKey = hkdf(sha256, fileKey, EMPTY, AGE_HEADER_INFO, 32);\n  try {\n    const mac = hmac(sha256, macKey, authenticated);\n    return utf8(`${text} ${encodeBase64(mac)}\\n`);\n  } finally { macKey.fill(0); }\n}\n\nfunction decryptAgeHeader(header, identity) {\n  const ownsScalar = typeof identity === \"string\";\n  const scalar = ownsScalar ? parseIdentity(identity) : bytes(identity, 32, \"identity\");\n  let fileKey = null;\n  let authenticated = false;\n  try {\n    const parsed = parseHeader(header);\n    if (parsed.stanzas.length === 0) fail(\"E_AGE_HEADER_PARSE\", \"age header has no recipients\");\n    const recipientPublic = x25519.getPublicKey(scalar);\n    for (const stanza of parsed.stanzas) {\n      if (stanza.args[0] !== \"X25519\") fail(\"E_AGE_HEADER_RECIPIENT\", \"foreign recipient stanza is not supported\");\n      if (stanza.args.length !== 2 || stanza.body.length !== 32) fail(\"E_AGE_HEADER_PARSE\", \"invalid X25519 stanza\");\n      const ephemeralPublic = decodeBase64(stanza.args[1]);\n      if (!ephemeralPublic || ephemeralPublic.length !== 32) fail(\"E_AGE_HEADER_PARSE\", \"invalid X25519 ephemeral share\");\n    }\n    for (const stanza of parsed.stanzas) {\n      const ephemeralPublic = decodeBase64(stanza.args[1]);\n      let shared;\n      let wrapKey;\n      try {\n        try { shared = x25519.getSharedSecret(scalar, ephemeralPublic); }\n        catch { continue; }\n        if (allZero(shared)) continue;\n        wrapKey = hkdf(sha256, shared, concat(ephemeralPublic, recipientPublic), AGE_X25519_INFO, 32);\n        try {\n          const candidate = chacha20poly1305(wrapKey, ZERO_NONCE).decrypt(stanza.body);\n          if (candidate.length === 16) { fileKey = candidate; break; }\n          candidate.fill(0);\n        } catch { /* stanza is for another identity */ }\n      } finally {\n        shared?.fill(0);\n        wrapKey?.fill(0);\n      }\n    }\n    if (!fileKey) fail(\"E_WRONG_RECIPIENT\", \"identity does not match this file envelope\");\n    const macKey = hkdf(sha256, fileKey, EMPTY, AGE_HEADER_INFO, 32);\n    const expectedMac = hmac(sha256, macKey, parsed.authenticated);\n    try {\n      if (!equal(expectedMac, parsed.mac)) fail(\"E_ENVELOPE_AUTH\", \"age header authentication failed\");\n      authenticated = true;\n      return fileKey;\n    } finally {\n      macKey.fill(0);\n      expectedMac.fill(0);\n    }\n  } finally {\n    if (ownsScalar) scalar.fill(0);\n    if (!authenticated) fileKey?.fill(0);\n  }\n}\n\nexport const ageHeader = Object.freeze({\n  seal: (fileKey, recipients) => encryptAgeHeader(fileKey, recipients, random),\n  open: decryptAgeHeader,\n});\n\nexport const ageInternals = Object.freeze({ encryptAgeHeader, decryptAgeHeader });\n", "const BASE64 = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\";\nconst BASE64_VALUE = new Int16Array(128).fill(-1);\nfor (let i = 0; i < BASE64.length; i++) BASE64_VALUE[BASE64.charCodeAt(i)] = i;\n\nexport const EMPTY = new Uint8Array(0);\nexport const utf8 = (value) => new TextEncoder().encode(value);\n\nexport function bytes(value, length, name = \"value\") {\n  if (!(value instanceof Uint8Array)) throw new TypeError(`${name} must be a Uint8Array`);\n  if (length !== undefined && value.length !== length) throw new TypeError(`${name} must be ${length} bytes`);\n  return value;\n}\n\nexport function concat(...parts) {\n  const length = parts.reduce((sum, part) => sum + bytes(part).length, 0);\n  const out = new Uint8Array(length);\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\nexport function equal(a, b) {\n  if (!(a instanceof Uint8Array) || !(b instanceof Uint8Array) || a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n  return diff === 0;\n}\n\nexport function allZero(value) {\n  let acc = 0;\n  for (const byte of value) acc |= byte;\n  return acc === 0;\n}\n\nexport function u32(value) {\n  if (!Number.isInteger(value) || value < 0 || value > 0xffffffff) throw new RangeError(\"value is not a uint32\");\n  const out = new Uint8Array(4);\n  new DataView(out.buffer).setUint32(0, value, false);\n  return out;\n}\n\nexport function u64(value) {\n  if (!Number.isSafeInteger(value) || value < 0) throw new RangeError(\"value is not a non-negative safe integer\");\n  const out = new Uint8Array(8);\n  const view = new DataView(out.buffer);\n  const big = BigInt(value);\n  view.setUint32(0, Number(big >> 32n), false);\n  view.setUint32(4, Number(big & 0xffffffffn), false);\n  return out;\n}\n\nexport function readU32(value, offset) {\n  if (offset < 0 || offset + 4 > value.length) throw new RangeError(\"truncated uint32\");\n  return new DataView(value.buffer, value.byteOffset + offset, 4).getUint32(0, false);\n}\n\nexport function readU64(value, offset) {\n  if (offset < 0 || offset + 8 > value.length) throw new RangeError(\"truncated uint64\");\n  const view = new DataView(value.buffer, value.byteOffset + offset, 8);\n  const big = (BigInt(view.getUint32(0, false)) << 32n) | BigInt(view.getUint32(4, false));\n  if (big > BigInt(Number.MAX_SAFE_INTEGER)) throw new RangeError(\"uint64 exceeds JavaScript safe integer range\");\n  return Number(big);\n}\n\nexport function encodeBase64(value, { padding = false } = {}) {\n  bytes(value);\n  let out = \"\";\n  for (let i = 0; i < value.length; i += 3) {\n    const a = value[i];\n    const haveB = i + 1 < value.length;\n    const haveC = i + 2 < value.length;\n    const b = haveB ? value[i + 1] : 0;\n    const c = haveC ? value[i + 2] : 0;\n    out += BASE64[a >>> 2];\n    out += BASE64[((a & 3) << 4) | (b >>> 4)];\n    if (haveB) out += BASE64[((b & 15) << 2) | (c >>> 6)];\n    else if (padding) out += \"=\";\n    if (haveC) out += BASE64[c & 63];\n    else if (padding) out += \"=\";\n  }\n  return out;\n}\n\nexport function decodeBase64(value, { padding = false } = {}) {\n  if (typeof value !== \"string\") return null;\n  if (padding) {\n    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(value) || value.length % 4 !== 0) return null;\n  } else if (!/^[A-Za-z0-9+/]*$/.test(value) || value.length % 4 === 1) return null;\n\n  const stripped = padding ? value.replace(/=+$/, \"\") : value;\n  const outputLength = Math.floor((stripped.length * 6) / 8);\n  const out = new Uint8Array(outputLength);\n  let accumulator = 0;\n  let bits = 0;\n  let offset = 0;\n  for (let i = 0; i < stripped.length; i++) {\n    const code = stripped.charCodeAt(i);\n    if (code >= BASE64_VALUE.length || BASE64_VALUE[code] < 0) return null;\n    accumulator = (accumulator << 6) | BASE64_VALUE[code];\n    bits += 6;\n    if (bits >= 8) {\n      bits -= 8;\n      out[offset++] = (accumulator >>> bits) & 0xff;\n    }\n  }\n  if (bits > 0 && (accumulator & ((1 << bits) - 1)) !== 0) return null;\n  if (encodeBase64(out, { padding }) !== value) return null;\n  return out;\n}\n", "const CHARSET = \"qpzry9x8gf2tvdw0s3jn54khce6mua7l\";\nconst GENERATORS = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3];\n\nfunction polymod(values) {\n  let checksum = 1;\n  for (const value of values) {\n    const top = checksum >>> 25;\n    checksum = ((checksum & 0x1ffffff) << 5) ^ value;\n    for (let i = 0; i < 5; i++) if ((top >>> i) & 1) checksum ^= GENERATORS[i];\n  }\n  return checksum >>> 0;\n}\n\nfunction expandHrp(hrp) {\n  const out = [];\n  for (const char of hrp) out.push(char.charCodeAt(0) >>> 5);\n  out.push(0);\n  for (const char of hrp) out.push(char.charCodeAt(0) & 31);\n  return out;\n}\n\nfunction convertBits(data, from, to, pad) {\n  let accumulator = 0;\n  let bits = 0;\n  const out = [];\n  const maximum = (1 << to) - 1;\n  for (const value of data) {\n    if (value < 0 || value >>> from) return null;\n    accumulator = (accumulator << from) | value;\n    bits += from;\n    while (bits >= to) {\n      bits -= to;\n      out.push((accumulator >>> bits) & maximum);\n    }\n  }\n  if (pad && bits) out.push((accumulator << (to - bits)) & maximum);\n  else if (!pad && (bits >= from || ((accumulator << (to - bits)) & maximum))) return null;\n  return out;\n}\n\nexport function encodeBech32(hrp, data) {\n  const words = convertBits(data, 8, 5, true);\n  const values = [...expandHrp(hrp), ...words];\n  const mod = polymod([...values, 0, 0, 0, 0, 0, 0]) ^ 1;\n  const checksum = [];\n  for (let i = 0; i < 6; i++) checksum.push((mod >>> (5 * (5 - i))) & 31);\n  return hrp + \"1\" + [...words, ...checksum].map((word) => CHARSET[word]).join(\"\");\n}\n\nexport function decodeBech32(value) {\n  if (typeof value !== \"string\" || (value !== value.toLowerCase() && value !== value.toUpperCase())) return null;\n  const normalized = value.toLowerCase();\n  const separator = normalized.lastIndexOf(\"1\");\n  if (separator < 1 || separator + 7 > normalized.length) return null;\n  const hrp = normalized.slice(0, separator);\n  const words = [];\n  for (const char of normalized.slice(separator + 1)) {\n    const word = CHARSET.indexOf(char);\n    if (word === -1) return null;\n    words.push(word);\n  }\n  if (polymod([...expandHrp(hrp), ...words]) !== 1) return null;\n  const data = convertBits(words.slice(0, -6), 5, 8, false);\n  return data === null ? null : { hrp, data: new Uint8Array(data) };\n}\n", "import { xchacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { hkdf } from \"@noble/hashes/hkdf.js\";\nimport { sha256 } from \"@noble/hashes/sha256.js\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport { ageInternals } from \"./age.js\";\nimport { bytes, concat, readU32, readU64, u32, u64, utf8 } from \"./bytes.js\";\nimport { fail } from \"./error.js\";\n\nconst MAGIC = utf8(\"PKFILE1\\n\");\nconst VERSION = 1;\nconst FILE_ID_BYTES = 16;\nconst NONCE_BYTES = 24;\nconst TAG_BYTES = 16;\nconst DEFAULT_CHUNK_SIZE = 1024 * 1024;\nconst MIN_CHUNK_SIZE = 64 * 1024;\nconst MAX_CHUNK_SIZE = 16 * 1024 * 1024;\nconst MAX_HEADER_SIZE = 1024 * 1024;\nconst MAX_AGE_HEADER_SIZE = 256 * 1024;\nconst MAX_METADATA_CIPHERTEXT_SIZE = 64 * 1024;\n\nconst METADATA_KEY_INFO = utf8(\"pksuite/file/metadata-key/v1\");\nconst CHUNK_KEY_INFO = utf8(\"pksuite/file/chunk-key/v1\");\nconst METADATA_AAD_DOMAIN = utf8(\"pksuite/file/metadata/v1\");\nconst CHUNK_AAD_DOMAIN = utf8(\"pksuite/file/chunk/v1\");\nconst DOMAIN_SEPARATOR = new Uint8Array([0]);\n\nconst encryptionStates = new WeakMap();\nconst decryptionStates = new WeakMap();\n\nfunction validateGeometry(plaintextSize, chunkSize) {\n  if (!Number.isSafeInteger(plaintextSize) || plaintextSize < 0) fail(\"E_INPUT\", \"plaintextSize must be a non-negative safe integer\");\n  if (!Number.isInteger(chunkSize) || chunkSize < MIN_CHUNK_SIZE || chunkSize > MAX_CHUNK_SIZE)\n    fail(\"E_INPUT\", `chunkSize must be between ${MIN_CHUNK_SIZE} and ${MAX_CHUNK_SIZE} bytes`);\n  const chunkCount = Math.max(1, Math.ceil(plaintextSize / chunkSize));\n  if (chunkCount > 0xffffffff) fail(\"E_INPUT\", \"file requires too many chunks\");\n  return chunkCount;\n}\n\nfunction expectedPlaintextLength({ plaintextSize, chunkSize, chunkCount }, index) {\n  if (!Number.isInteger(index) || index < 0 || index >= chunkCount) fail(\"E_CHUNK_INDEX\", \"chunk index is outside the envelope\");\n  if (plaintextSize === 0) return 0;\n  return index === chunkCount - 1 ? plaintextSize - chunkSize * index : chunkSize;\n}\n\nfunction canonicalJsonString(value, label) {\n  let result = '\"';\n  for (let offset = 0; offset < value.length;) {\n    const first = value.charCodeAt(offset);\n    let character;\n    if (first >= 0xd800 && first <= 0xdbff) {\n      const second = value.charCodeAt(offset + 1);\n      if (!(second >= 0xdc00 && second <= 0xdfff)) fail(\"E_METADATA\", `${label} must contain only Unicode scalar values`);\n      character = value.slice(offset, offset + 2);\n      offset += 2;\n    } else {\n      if (first >= 0xdc00 && first <= 0xdfff) fail(\"E_METADATA\", `${label} must contain only Unicode scalar values`);\n      character = value[offset++];\n    }\n    if (character === '\"') result += '\\\\\"';\n    else if (character === \"\\\\\") result += \"\\\\\\\\\";\n    else if (first === 0x08) result += \"\\\\b\";\n    else if (first === 0x09) result += \"\\\\t\";\n    else if (first === 0x0a) result += \"\\\\n\";\n    else if (first === 0x0c) result += \"\\\\f\";\n    else if (first === 0x0d) result += \"\\\\r\";\n    else if (first < 0x20) result += `\\\\u${first.toString(16).padStart(4, \"0\")}`;\n    else result += character;\n  }\n  return `${result}\"`;\n}\n\nfunction canonicalMetadata(metadata) {\n  if (!metadata || typeof metadata !== \"object\" || Array.isArray(metadata)) fail(\"E_METADATA\", \"metadata must be an object\");\n  if (Object.keys(metadata).some((key) => ![\"name\", \"mediaType\", \"lastModified\"].includes(key)))\n    fail(\"E_METADATA\", \"metadata contains an unknown field\");\n  const { name, mediaType = \"application/octet-stream\", lastModified = null } = metadata;\n  if (typeof name !== \"string\" || name.length === 0 || utf8(name).length > 4096 || /[\\u0000-\\u001f\\u007f]/u.test(name))\n    fail(\"E_METADATA\", \"metadata.name must be a non-empty filename without control characters\");\n  if (name === \".\" || name === \"..\" || /[\\\\/:]/u.test(name) || /[ .]$/u.test(name) || /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\\.|$)/iu.test(name))\n    fail(\"E_METADATA\", \"metadata.name must be a portable single filename, not a path or device name\");\n  if (typeof mediaType !== \"string\" || utf8(mediaType).length > 255 || !/^[\\x20-\\x7e]*$/.test(mediaType))\n    fail(\"E_METADATA\", \"metadata.mediaType must be printable ASCII no longer than 255 bytes\");\n  if (lastModified !== null && (!Number.isSafeInteger(lastModified) || lastModified < 0))\n    fail(\"E_METADATA\", \"metadata.lastModified must be null or a non-negative safe integer\");\n  return utf8(`{\"name\":${canonicalJsonString(name, \"metadata.name\")},\"mediaType\":${canonicalJsonString(mediaType, \"metadata.mediaType\")},\"lastModified\":${lastModified === null ? \"null\" : String(lastModified)}}`);\n}\n\nfunction parseMetadata(plaintext) {\n  let parsed;\n  try { parsed = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(plaintext)); }\n  catch { fail(\"E_METADATA\", \"encrypted metadata is not canonical UTF-8 JSON\"); }\n  const canonical = canonicalMetadata(parsed);\n  if (canonical.length !== plaintext.length || canonical.some((byte, index) => byte !== plaintext[index]))\n    fail(\"E_METADATA\", \"encrypted metadata is not canonical\");\n  return parsed;\n}\n\nfunction structuralPrefix({ chunkSize, plaintextSize, chunkCount, fileId, ageHeader }) {\n  return concat(u32(chunkSize), u64(plaintextSize), u32(chunkCount), fileId, u32(ageHeader.length), ageHeader);\n}\n\nfunction metadataAad(prefix) {\n  return concat(METADATA_AAD_DOMAIN, DOMAIN_SEPARATOR, u32(VERSION), sha256(concat(MAGIC, prefix)));\n}\n\nfunction chunkAad(record, index) {\n  const expected = expectedPlaintextLength(record, index);\n  return concat(\n    CHUNK_AAD_DOMAIN,\n    DOMAIN_SEPARATOR,\n    u32(VERSION),\n    record.fileId,\n    record.headerCommitment,\n    u32(index),\n    u32(record.chunkCount),\n    u64(record.plaintextSize),\n    u32(record.chunkSize),\n    u32(expected),\n  );\n}\n\nfunction deriveMetadataKey(fileKey, fileId) {\n  return hkdf(sha256, fileKey, fileId, METADATA_KEY_INFO, 32);\n}\n\nfunction deriveChunkKey(fileKey, fileId, index) {\n  return hkdf(sha256, fileKey, concat(fileId, u32(index)), CHUNK_KEY_INFO, 32);\n}\n\nfunction parseEnvelopeHeader(header) {\n  bytes(header);\n  if (header.length < MAGIC.length + 4 || MAGIC.some((byte, index) => header[index] !== byte))\n    fail(\"E_ENVELOPE_VERSION\", \"unsupported file envelope magic or version\");\n  let bodyLength;\n  try { bodyLength = readU32(header, MAGIC.length); }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated file envelope prelude\"); }\n  if (bodyLength > MAX_HEADER_SIZE || bodyLength !== header.length - MAGIC.length - 4)\n    fail(\"E_ENVELOPE_PARSE\", \"file envelope header length mismatch\");\n  let offset = MAGIC.length + 4;\n  const take = (length, label) => {\n    if (!Number.isInteger(length) || length < 0 || offset + length > header.length) fail(\"E_ENVELOPE_PARSE\", `truncated ${label}`);\n    const value = header.subarray(offset, offset + length);\n    offset += length;\n    return value;\n  };\n\n  let chunkSize, plaintextSize, chunkCount, ageHeaderLength, metadataLength;\n  try {\n    chunkSize = readU32(header, offset); offset += 4;\n    plaintextSize = readU64(header, offset); offset += 8;\n    chunkCount = readU32(header, offset); offset += 4;\n  } catch { fail(\"E_ENVELOPE_PARSE\", \"invalid file geometry\"); }\n  const fileId = take(FILE_ID_BYTES, \"file id\");\n  try { ageHeaderLength = readU32(header, offset); offset += 4; }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated age header length\"); }\n  if (ageHeaderLength === 0 || ageHeaderLength > MAX_AGE_HEADER_SIZE) fail(\"E_ENVELOPE_PARSE\", \"invalid age header length\");\n  const ageHeader = take(ageHeaderLength, \"age header\");\n  const prefixEnd = offset;\n  const metadataNonce = take(NONCE_BYTES, \"metadata nonce\");\n  try { metadataLength = readU32(header, offset); offset += 4; }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated metadata length\"); }\n  if (metadataLength < TAG_BYTES || metadataLength > MAX_METADATA_CIPHERTEXT_SIZE) fail(\"E_ENVELOPE_PARSE\", \"invalid metadata ciphertext length\");\n  const metadataCiphertext = take(metadataLength, \"metadata ciphertext\");\n  if (offset !== header.length) fail(\"E_ENVELOPE_PARSE\", \"trailing bytes in file envelope header\");\n\n  const expectedCount = validateGeometry(plaintextSize, chunkSize);\n  if (chunkCount !== expectedCount) fail(\"E_ENVELOPE_PARSE\", \"chunk count does not match file geometry\");\n  return {\n    chunkSize,\n    plaintextSize,\n    chunkCount,\n    fileId,\n    ageHeader,\n    prefix: header.subarray(MAGIC.length + 4, prefixEnd),\n    metadataNonce,\n    metadataCiphertext,\n    headerCommitment: sha256(header),\n  };\n}\n\nfunction makePublicState(kind, record, header, metadata) {\n  return Object.freeze({\n    kind,\n    version: VERSION,\n    header,\n    metadata,\n    plaintextSize: record.plaintextSize,\n    chunkSize: record.chunkSize,\n    chunkCount: record.chunkCount,\n  });\n}\n\nfunction createFileEncryptionImpl({ recipient, recipients, metadata, plaintextSize, chunkSize = DEFAULT_CHUNK_SIZE }, rng) {\n  if (recipient !== undefined && recipients !== undefined) fail(\"E_INPUT\", \"provide recipient or recipients, not both\");\n  const recipientList = recipients ?? (recipient === undefined ? [] : [recipient]);\n  const chunkCount = validateGeometry(plaintextSize, chunkSize);\n  const fileKey = bytes(rng(16), 16, \"random file key\");\n  let retained = false;\n  try {\n    const fileId = bytes(rng(FILE_ID_BYTES), FILE_ID_BYTES, \"random file id\");\n    const ageHeader = ageInternals.encryptAgeHeader(fileKey, recipientList, rng);\n    if (ageHeader.length > MAX_AGE_HEADER_SIZE) fail(\"E_INPUT\", \"recipient header is too large\");\n    const prefix = structuralPrefix({ chunkSize, plaintextSize, chunkCount, fileId, ageHeader });\n    const metadataNonce = bytes(rng(NONCE_BYTES), NONCE_BYTES, \"random metadata nonce\");\n    const metadataPlaintext = canonicalMetadata(metadata);\n    const metadataKey = deriveMetadataKey(fileKey, fileId);\n    let metadataCiphertext;\n    try { metadataCiphertext = xchacha20poly1305(metadataKey, metadataNonce, metadataAad(prefix)).encrypt(metadataPlaintext); }\n    finally { metadataKey.fill(0); metadataPlaintext.fill(0); }\n    if (metadataCiphertext.length > MAX_METADATA_CIPHERTEXT_SIZE) fail(\"E_METADATA\", \"encrypted metadata is too large\");\n    const body = concat(prefix, metadataNonce, u32(metadataCiphertext.length), metadataCiphertext);\n    if (body.length > MAX_HEADER_SIZE) fail(\"E_INPUT\", \"file envelope header is too large\");\n    const header = concat(MAGIC, u32(body.length), body);\n    const record = {\n      fileKey,\n      fileId: new Uint8Array(fileId),\n      plaintextSize,\n      chunkSize,\n      chunkCount,\n      headerCommitment: sha256(header),\n      rng,\n      seen: new Set(),\n    };\n    const state = makePublicState(\"encryption\", record, header, undefined);\n    encryptionStates.set(state, record);\n    retained = true;\n    return state;\n  } finally {\n    if (!retained) fileKey.fill(0);\n  }\n}\n\nexport function createFileEncryption(options) {\n  return createFileEncryptionImpl(options, randomBytes);\n}\n\nexport function encryptChunk({ state, index, plaintext }) {\n  const record = encryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-encryption state\");\n  bytes(plaintext);\n  const expected = expectedPlaintextLength(record, index);\n  if (plaintext.length !== expected) fail(\"E_CHUNK_SIZE\", `chunk ${index} must contain exactly ${expected} plaintext bytes`);\n  const nonce = bytes(record.rng(NONCE_BYTES), NONCE_BYTES, \"random chunk nonce\");\n  const key = deriveChunkKey(record.fileKey, record.fileId, index);\n  let ciphertext;\n  try { ciphertext = xchacha20poly1305(key, nonce, chunkAad(record, index)).encrypt(plaintext); }\n  finally { key.fill(0); }\n  record.seen.add(index);\n  return concat(nonce, ciphertext);\n}\n\nexport function openFileEnvelope({ identity, unwrapFileKey, header }) {\n  if ((identity === undefined) === (unwrapFileKey === undefined))\n    fail(\"E_INPUT\", \"provide exactly one of identity or unwrapFileKey\");\n  const parsed = parseEnvelopeHeader(header);\n  // unwrapFileKey supports holders that never release an identity scalar\n  // (e.g. the pkvault agent): it receives a COPY of the age header and must\n  // return the 16-byte file key. The package copies the result, so the\n  // caller may wipe its own buffer afterwards.\n  const fileKey = identity !== undefined\n    ? ageInternals.decryptAgeHeader(parsed.ageHeader, identity)\n    : new Uint8Array(bytes(unwrapFileKey(new Uint8Array(parsed.ageHeader)), 16, \"unwrapped file key\"));\n  let retained = false;\n  try {\n    const metadataKey = deriveMetadataKey(fileKey, parsed.fileId);\n    let metadataPlaintext;\n    try { metadataPlaintext = xchacha20poly1305(metadataKey, parsed.metadataNonce, metadataAad(parsed.prefix)).decrypt(parsed.metadataCiphertext); }\n    catch { fail(\"E_ENVELOPE_AUTH\", \"file metadata authentication failed\"); }\n    finally { metadataKey.fill(0); }\n    let metadata;\n    try { metadata = parseMetadata(metadataPlaintext); }\n    finally { metadataPlaintext.fill(0); }\n    const record = {\n      fileKey,\n      fileId: new Uint8Array(parsed.fileId),\n      plaintextSize: parsed.plaintextSize,\n      chunkSize: parsed.chunkSize,\n      chunkCount: parsed.chunkCount,\n      headerCommitment: new Uint8Array(parsed.headerCommitment),\n      seen: new Set(),\n    };\n    const state = makePublicState(\"decryption\", record, new Uint8Array(header), metadata);\n    decryptionStates.set(state, record);\n    retained = true;\n    return state;\n  } finally {\n    if (!retained) fileKey.fill(0);\n  }\n}\n\nexport function decryptChunk({ state, index, ciphertext }) {\n  const record = decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-decryption state\");\n  bytes(ciphertext);\n  const expected = expectedPlaintextLength(record, index);\n  if (ciphertext.length !== NONCE_BYTES + expected + TAG_BYTES)\n    fail(\"E_CHUNK_SIZE\", `chunk ${index} ciphertext has the wrong length`);\n  const nonce = ciphertext.subarray(0, NONCE_BYTES);\n  const body = ciphertext.subarray(NONCE_BYTES);\n  const key = deriveChunkKey(record.fileKey, record.fileId, index);\n  let plaintext;\n  try { plaintext = xchacha20poly1305(key, nonce, chunkAad(record, index)).decrypt(body); }\n  catch { fail(\"E_CHUNK_AUTH\", `chunk ${index} authentication failed`); }\n  finally { key.fill(0); }\n  record.seen.add(index);\n  return plaintext;\n}\n\nexport function finalizeEnvelope(state) {\n  const record = encryptionStates.get(state) ?? decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-envelope state\");\n  if (record.seen.size !== record.chunkCount) fail(\"E_ENVELOPE_INCOMPLETE\", `expected ${record.chunkCount} authenticated chunks, observed ${record.seen.size}`);\n  const finalized = Object.freeze({\n    version: VERSION,\n    header: state.header,\n    metadata: state.metadata,\n    plaintextSize: record.plaintextSize,\n    chunkSize: record.chunkSize,\n    chunkCount: record.chunkCount,\n  });\n  disposeEnvelope(state);\n  return finalized;\n}\n\nexport function disposeEnvelope(state) {\n  const record = encryptionStates.get(state) ?? decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not an active file-envelope state\");\n  record.fileKey.fill(0);\n  record.seen.clear();\n  encryptionStates.delete(state);\n  decryptionStates.delete(state);\n}\n\nexport const fileInternals = Object.freeze({\n  createFileEncryptionWithRandom: createFileEncryptionImpl,\n  parseEnvelopeHeader,\n  metadataAad,\n  chunkAad,\n  constants: Object.freeze({ MAGIC, VERSION, NONCE_BYTES, TAG_BYTES, DEFAULT_CHUNK_SIZE, MIN_CHUNK_SIZE, MAX_CHUNK_SIZE }),\n});\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YAAY,MAAM,SAAS;AACzB,UAAM,GAAG,IAAI,KAAK,OAAO,EAAE;AAC3B,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,OAAO,CAAC,MAAM,YAAY;AACrC,QAAM,IAAI,cAAc,MAAM,OAAO;AACvC;;;ACVA,oBAAiC;AACjC,qBAAuB;AACvB,kBAAqB;AACrB,kBAAqB;AACrB,oBAAuB;AACvB,mBAA4B;;;ACL5B,IAAM,SAAS;AACf,IAAM,eAAe,IAAI,WAAW,GAAG,EAAE,KAAK,EAAE;AAChD,SAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,IAAK,cAAa,OAAO,WAAW,CAAC,CAAC,IAAI;AAEtE,IAAM,QAAQ,IAAI,WAAW,CAAC;AAC9B,IAAM,OAAO,CAAC,UAAU,IAAI,YAAY,EAAE,OAAO,KAAK;AAEtD,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;AACnD,MAAI,EAAE,iBAAiB,YAAa,OAAM,IAAI,UAAU,GAAG,IAAI,uBAAuB;AACtF,MAAI,WAAW,UAAa,MAAM,WAAW,OAAQ,OAAM,IAAI,UAAU,GAAG,IAAI,YAAY,MAAM,QAAQ;AAC1G,SAAO;AACT;AAEO,SAAS,UAAU,OAAO;AAC/B,QAAM,SAAS,MAAM,OAAO,CAAC,KAAK,SAAS,MAAM,MAAM,IAAI,EAAE,QAAQ,CAAC;AACtE,QAAM,MAAM,IAAI,WAAW,MAAM;AACjC,MAAI,SAAS;AACb,aAAW,QAAQ,OAAO;AACxB,QAAI,IAAI,MAAM,MAAM;AACpB,cAAU,KAAK;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,MAAM,GAAG,GAAG;AAC1B,MAAI,EAAE,aAAa,eAAe,EAAE,aAAa,eAAe,EAAE,WAAW,EAAE,OAAQ,QAAO;AAC9F,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,SAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;AACrD,SAAO,SAAS;AAClB;AAEO,SAAS,QAAQ,OAAO;AAC7B,MAAI,MAAM;AACV,aAAW,QAAQ,MAAO,QAAO;AACjC,SAAO,QAAQ;AACjB;AAEO,SAAS,IAAI,OAAO;AACzB,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,WAAY,OAAM,IAAI,WAAW,uBAAuB;AAC7G,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,MAAI,SAAS,IAAI,MAAM,EAAE,UAAU,GAAG,OAAO,KAAK;AAClD,SAAO;AACT;AAEO,SAAS,IAAI,OAAO;AACzB,MAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,EAAG,OAAM,IAAI,WAAW,0CAA0C;AAC9G,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,QAAM,OAAO,IAAI,SAAS,IAAI,MAAM;AACpC,QAAM,MAAM,OAAO,KAAK;AACxB,OAAK,UAAU,GAAG,OAAO,OAAO,GAAG,GAAG,KAAK;AAC3C,OAAK,UAAU,GAAG,OAAO,MAAM,WAAW,GAAG,KAAK;AAClD,SAAO;AACT;AAEO,SAAS,QAAQ,OAAO,QAAQ;AACrC,MAAI,SAAS,KAAK,SAAS,IAAI,MAAM,OAAQ,OAAM,IAAI,WAAW,kBAAkB;AACpF,SAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,aAAa,QAAQ,CAAC,EAAE,UAAU,GAAG,KAAK;AACpF;AAEO,SAAS,QAAQ,OAAO,QAAQ;AACrC,MAAI,SAAS,KAAK,SAAS,IAAI,MAAM,OAAQ,OAAM,IAAI,WAAW,kBAAkB;AACpF,QAAM,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,aAAa,QAAQ,CAAC;AACpE,QAAM,MAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC,KAAK,MAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC;AACvF,MAAI,MAAM,OAAO,OAAO,gBAAgB,EAAG,OAAM,IAAI,WAAW,8CAA8C;AAC9G,SAAO,OAAO,GAAG;AACnB;AAEO,SAAS,aAAa,OAAO,EAAE,UAAU,MAAM,IAAI,CAAC,GAAG;AAC5D,QAAM,KAAK;AACX,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;AACxC,UAAM,IAAI,MAAM,CAAC;AACjB,UAAM,QAAQ,IAAI,IAAI,MAAM;AAC5B,UAAM,QAAQ,IAAI,IAAI,MAAM;AAC5B,UAAM,IAAI,QAAQ,MAAM,IAAI,CAAC,IAAI;AACjC,UAAM,IAAI,QAAQ,MAAM,IAAI,CAAC,IAAI;AACjC,WAAO,OAAO,MAAM,CAAC;AACrB,WAAO,QAAS,IAAI,MAAM,IAAM,MAAM,CAAE;AACxC,QAAI,MAAO,QAAO,QAAS,IAAI,OAAO,IAAM,MAAM,CAAE;AAAA,aAC3C,QAAS,QAAO;AACzB,QAAI,MAAO,QAAO,OAAO,IAAI,EAAE;AAAA,aACtB,QAAS,QAAO;AAAA,EAC3B;AACA,SAAO;AACT;AAEO,SAAS,aAAa,OAAO,EAAE,UAAU,MAAM,IAAI,CAAC,GAAG;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,SAAS;AACX,QAAI,CAAC,yBAAyB,KAAK,KAAK,KAAK,MAAM,SAAS,MAAM,EAAG,QAAO;AAAA,EAC9E,WAAW,CAAC,mBAAmB,KAAK,KAAK,KAAK,MAAM,SAAS,MAAM,EAAG,QAAO;AAE7E,QAAM,WAAW,UAAU,MAAM,QAAQ,OAAO,EAAE,IAAI;AACtD,QAAM,eAAe,KAAK,MAAO,SAAS,SAAS,IAAK,CAAC;AACzD,QAAM,MAAM,IAAI,WAAW,YAAY;AACvC,MAAI,cAAc;AAClB,MAAI,OAAO;AACX,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,UAAM,OAAO,SAAS,WAAW,CAAC;AAClC,QAAI,QAAQ,aAAa,UAAU,aAAa,IAAI,IAAI,EAAG,QAAO;AAClE,kBAAe,eAAe,IAAK,aAAa,IAAI;AACpD,YAAQ;AACR,QAAI,QAAQ,GAAG;AACb,cAAQ;AACR,UAAI,QAAQ,IAAK,gBAAgB,OAAQ;AAAA,IAC3C;AAAA,EACF;AACA,MAAI,OAAO,MAAM,eAAgB,KAAK,QAAQ,OAAQ,EAAG,QAAO;AAChE,MAAI,aAAa,KAAK,EAAE,QAAQ,CAAC,MAAM,MAAO,QAAO;AACrD,SAAO;AACT;;;AC/GA,IAAM,UAAU;AAChB,IAAM,aAAa,CAAC,WAAY,WAAY,WAAY,YAAY,SAAU;AAE9E,SAAS,QAAQ,QAAQ;AACvB,MAAI,WAAW;AACf,aAAW,SAAS,QAAQ;AAC1B,UAAM,MAAM,aAAa;AACzB,gBAAa,WAAW,aAAc,IAAK;AAC3C,aAAS,IAAI,GAAG,IAAI,GAAG,IAAK,KAAK,QAAQ,IAAK,EAAG,aAAY,WAAW,CAAC;AAAA,EAC3E;AACA,SAAO,aAAa;AACtB;AAEA,SAAS,UAAU,KAAK;AACtB,QAAM,MAAM,CAAC;AACb,aAAW,QAAQ,IAAK,KAAI,KAAK,KAAK,WAAW,CAAC,MAAM,CAAC;AACzD,MAAI,KAAK,CAAC;AACV,aAAW,QAAQ,IAAK,KAAI,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE;AACxD,SAAO;AACT;AAEA,SAAS,YAAY,MAAM,MAAM,IAAI,KAAK;AACxC,MAAI,cAAc;AAClB,MAAI,OAAO;AACX,QAAM,MAAM,CAAC;AACb,QAAM,WAAW,KAAK,MAAM;AAC5B,aAAW,SAAS,MAAM;AACxB,QAAI,QAAQ,KAAK,UAAU,KAAM,QAAO;AACxC,kBAAe,eAAe,OAAQ;AACtC,YAAQ;AACR,WAAO,QAAQ,IAAI;AACjB,cAAQ;AACR,UAAI,KAAM,gBAAgB,OAAQ,OAAO;AAAA,IAC3C;AAAA,EACF;AACA,MAAI,OAAO,KAAM,KAAI,KAAM,eAAgB,KAAK,OAAS,OAAO;AAAA,WACvD,CAAC,QAAQ,QAAQ,QAAU,eAAgB,KAAK,OAAS,SAAW,QAAO;AACpF,SAAO;AACT;AAEO,SAAS,aAAa,KAAK,MAAM;AACtC,QAAM,QAAQ,YAAY,MAAM,GAAG,GAAG,IAAI;AAC1C,QAAM,SAAS,CAAC,GAAG,UAAU,GAAG,GAAG,GAAG,KAAK;AAC3C,QAAM,MAAM,QAAQ,CAAC,GAAG,QAAQ,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI;AACrD,QAAM,WAAW,CAAC;AAClB,WAAS,IAAI,GAAG,IAAI,GAAG,IAAK,UAAS,KAAM,QAAS,KAAK,IAAI,KAAO,EAAE;AACtE,SAAO,MAAM,MAAM,CAAC,GAAG,OAAO,GAAG,QAAQ,EAAE,IAAI,CAAC,SAAS,QAAQ,IAAI,CAAC,EAAE,KAAK,EAAE;AACjF;AAEO,SAAS,aAAa,OAAO;AAClC,MAAI,OAAO,UAAU,YAAa,UAAU,MAAM,YAAY,KAAK,UAAU,MAAM,YAAY,EAAI,QAAO;AAC1G,QAAM,aAAa,MAAM,YAAY;AACrC,QAAM,YAAY,WAAW,YAAY,GAAG;AAC5C,MAAI,YAAY,KAAK,YAAY,IAAI,WAAW,OAAQ,QAAO;AAC/D,QAAM,MAAM,WAAW,MAAM,GAAG,SAAS;AACzC,QAAM,QAAQ,CAAC;AACf,aAAW,QAAQ,WAAW,MAAM,YAAY,CAAC,GAAG;AAClD,UAAM,OAAO,QAAQ,QAAQ,IAAI;AACjC,QAAI,SAAS,GAAI,QAAO;AACxB,UAAM,KAAK,IAAI;AAAA,EACjB;AACA,MAAI,QAAQ,CAAC,GAAG,UAAU,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAG,QAAO;AACzD,QAAM,OAAO,YAAY,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,GAAG,KAAK;AACxD,SAAO,SAAS,OAAO,OAAO,EAAE,KAAK,MAAM,IAAI,WAAW,IAAI,EAAE;AAClE;;;AFtDA,IAAM,eAAe;AACrB,IAAM,kBAAkB,KAAK,8BAA8B;AAC3D,IAAM,kBAAkB,KAAK,QAAQ;AACrC,IAAM,aAAa,IAAI,WAAW,EAAE;AAEpC,IAAM,SAAS,CAAC,eAAW,0BAAY,MAAM;AAEtC,SAAS,eAAe,WAAW;AACxC,MAAI,OAAO,cAAc,YAAY,cAAc,UAAU,YAAY,EAAG,MAAK,eAAe,kDAAkD;AAClJ,QAAM,UAAU,aAAa,SAAS;AACtC,MAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,KAAK,WAAW,MAAM,aAAa,OAAO,QAAQ,IAAI,MAAM;AAC3G,SAAK,eAAe,8BAA8B;AACpD,SAAO,QAAQ;AACjB;AAEO,SAAS,cAAc,UAAU;AACtC,MAAI,OAAO,aAAa,YAAa,aAAa,SAAS,YAAY,KAAK,aAAa,SAAS,YAAY;AAC5G,SAAK,cAAc,uCAAuC;AAC5D,QAAM,UAAU,aAAa,QAAQ;AACrC,MAAI,CAAC,WAAW,QAAQ,QAAQ,qBAAqB,QAAQ,KAAK,WAAW,MAAM,aAAa,mBAAmB,QAAQ,IAAI,MAAM,SAAS,YAAY;AACxJ,SAAK,cAAc,6BAA6B;AAClD,SAAO,QAAQ;AACjB;AAEO,SAAS,sBAAsB,UAAU;AAC9C,SAAO,aAAa,OAAO,sBAAO,aAAa,cAAc,QAAQ,CAAC,CAAC;AACzE;AAEO,SAAS,gBAAgB,WAAW;AACzC,SAAO,aAAa,OAAO,MAAM,WAAW,IAAI,WAAW,CAAC;AAC9D;AAEO,SAAS,eAAe,WAAW;AACxC,SAAO,aAAa,mBAAmB,MAAM,WAAW,IAAI,WAAW,CAAC,EAAE,YAAY;AACxF;AAEO,SAAS,uBAAuB,WAAW;AAChD,SAAO,sBAAO,aAAa,MAAM,WAAW,IAAI,WAAW,CAAC;AAC9D;AAEO,SAAS,0BAA0B;AACxC,SAAO,kCAAkC,OAAO,EAAE,CAAC;AACrD;AAEO,SAAS,kCAAkC,WAAW;AAC3D,QAAM,SAAS,MAAM,WAAW,IAAI,WAAW;AAC/C,SAAO,EAAE,UAAU,eAAe,MAAM,GAAG,WAAW,gBAAgB,uBAAuB,MAAM,CAAC,EAAE;AACxG;AAEA,SAAS,YAAY,QAAQ;AAC3B,QAAM,MAAM;AACZ,MAAI,WAAW;AACf,QAAM,OAAO,MAAM;AACjB,UAAM,UAAU,OAAO,QAAQ,IAAM,QAAQ;AAC7C,QAAI,YAAY,GAAI,MAAK,sBAAsB,sBAAsB;AACrE,UAAM,QAAQ,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,OAAO,SAAS,UAAU,OAAO,CAAC;AACjG,eAAW,UAAU;AACrB,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AAAE,cAAU,KAAK;AAAA,EAAG,SACjB,OAAO;AAAE,QAAI,OAAO,KAAM,OAAM;AAAO,SAAK,sBAAsB,+BAA+B;AAAA,EAAG;AAC3G,MAAI,YAAY,aAAc,MAAK,wBAAwB,gCAAgC;AAE3F,QAAM,UAAU,CAAC;AACjB,aAAS;AACP,QAAI;AACJ,QAAI;AAAE,gBAAU,KAAK;AAAA,IAAG,SACjB,OAAO;AAAE,UAAI,OAAO,KAAM,OAAM;AAAO,WAAK,sBAAsB,+BAA+B;AAAA,IAAG;AAC3G,QAAI,QAAQ,WAAW,MAAM,GAAG;AAC9B,YAAM,MAAM,aAAa,QAAQ,MAAM,CAAC,CAAC;AACzC,UAAI,CAAC,OAAO,IAAI,WAAW,MAAM,aAAa,OAAO,OAAQ,MAAK,sBAAsB,6BAA6B;AACrH,YAAM,YAAY,WAAW,QAAQ,SAAS,IAAI;AAClD,aAAO,EAAE,SAAS,KAAK,eAAe,OAAO,SAAS,GAAG,SAAS,EAAE;AAAA,IACtE;AACA,QAAI,CAAC,QAAQ,WAAW,KAAK,EAAG,MAAK,sBAAsB,8BAA8B;AACzF,UAAM,OAAO,QAAQ,MAAM,CAAC,EAAE,MAAM,GAAG;AACvC,QAAI,KAAK,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,EAAG,MAAK,sBAAsB,iCAAiC;AACtG,UAAM,YAAY,CAAC;AACnB,eAAS;AACP,UAAI;AACJ,UAAI;AAAE,mBAAW,KAAK;AAAA,MAAG,SAClB,OAAO;AAAE,YAAI,OAAO,KAAM,OAAM;AAAO,aAAK,sBAAsB,+BAA+B;AAAA,MAAG;AAC3G,UAAI,CAAC,mBAAmB,KAAK,QAAQ,KAAK,SAAS,SAAS,GAAI,MAAK,sBAAsB,yBAAyB;AACpH,gBAAU,KAAK,QAAQ;AACvB,UAAI,SAAS,SAAS,GAAI;AAAA,IAC5B;AACA,UAAM,OAAO,aAAa,UAAU,KAAK,EAAE,CAAC;AAC5C,QAAI,CAAC,KAAM,MAAK,sBAAsB,+BAA+B;AACrE,YAAQ,KAAK,EAAE,MAAM,KAAK,CAAC;AAAA,EAC7B;AACF;AAEA,SAAS,iBAAiB,SAAS,YAAY,KAAK;AAClD,QAAM,SAAS,IAAI,SAAS;AAC5B,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,EAAG,MAAK,eAAe,oCAAoC;AACnH,MAAI,OAAO,GAAG,YAAY;AAAA;AAC1B,aAAW,aAAa,YAAY;AAClC,UAAM,kBAAkB,OAAO,cAAc,WAAW,eAAe,SAAS,IAAI,MAAM,WAAW,IAAI,WAAW;AACpH,UAAM,kBAAkB,IAAI,EAAE;AAC9B,UAAM,iBAAiB,IAAI,eAAe;AAC1C,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,kBAAkB,sBAAO,aAAa,eAAe;AAC3D,UAAI;AAAE,iBAAS,sBAAO,gBAAgB,iBAAiB,eAAe;AAAA,MAAG,QACnE;AAAE,aAAK,eAAe,uCAAuC;AAAA,MAAG;AACtE,UAAI,QAAQ,MAAM,EAAG,MAAK,eAAe,uCAAuC;AAChF,oBAAU,kBAAK,sBAAQ,QAAQ,OAAO,iBAAiB,eAAe,GAAG,iBAAiB,EAAE;AAC5F,YAAM,cAAU,gCAAiB,SAAS,UAAU,EAAE,QAAQ,OAAO;AACrE,cAAQ,aAAa,aAAa,eAAe,CAAC;AAAA,EAAK,aAAa,OAAO,CAAC;AAAA;AAAA,IAC9E,UAAE;AACA,sBAAgB,KAAK,CAAC;AACtB,cAAQ,KAAK,CAAC;AACd,eAAS,KAAK,CAAC;AAAA,IACjB;AAAA,EACF;AACA,UAAQ;AACR,QAAM,gBAAgB,KAAK,IAAI;AAC/B,QAAM,aAAS,kBAAK,sBAAQ,SAAS,OAAO,iBAAiB,EAAE;AAC/D,MAAI;AACF,UAAM,UAAM,kBAAK,sBAAQ,QAAQ,aAAa;AAC9C,WAAO,KAAK,GAAG,IAAI,IAAI,aAAa,GAAG,CAAC;AAAA,CAAI;AAAA,EAC9C,UAAE;AAAU,WAAO,KAAK,CAAC;AAAA,EAAG;AAC9B;AAEA,SAAS,iBAAiB,QAAQ,UAAU;AAC1C,QAAM,aAAa,OAAO,aAAa;AACvC,QAAM,SAAS,aAAa,cAAc,QAAQ,IAAI,MAAM,UAAU,IAAI,UAAU;AACpF,MAAI,UAAU;AACd,MAAI,gBAAgB;AACpB,MAAI;AACF,UAAM,SAAS,YAAY,MAAM;AACjC,QAAI,OAAO,QAAQ,WAAW,EAAG,MAAK,sBAAsB,8BAA8B;AAC1F,UAAM,kBAAkB,sBAAO,aAAa,MAAM;AAClD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,OAAO,KAAK,CAAC,MAAM,SAAU,MAAK,0BAA0B,2CAA2C;AAC3G,UAAI,OAAO,KAAK,WAAW,KAAK,OAAO,KAAK,WAAW,GAAI,MAAK,sBAAsB,uBAAuB;AAC7G,YAAM,kBAAkB,aAAa,OAAO,KAAK,CAAC,CAAC;AACnD,UAAI,CAAC,mBAAmB,gBAAgB,WAAW,GAAI,MAAK,sBAAsB,gCAAgC;AAAA,IACpH;AACA,eAAW,UAAU,OAAO,SAAS;AACnC,YAAM,kBAAkB,aAAa,OAAO,KAAK,CAAC,CAAC;AACnD,UAAI;AACJ,UAAI;AACJ,UAAI;AACF,YAAI;AAAE,mBAAS,sBAAO,gBAAgB,QAAQ,eAAe;AAAA,QAAG,QAC1D;AAAE;AAAA,QAAU;AAClB,YAAI,QAAQ,MAAM,EAAG;AACrB,sBAAU,kBAAK,sBAAQ,QAAQ,OAAO,iBAAiB,eAAe,GAAG,iBAAiB,EAAE;AAC5F,YAAI;AACF,gBAAM,gBAAY,gCAAiB,SAAS,UAAU,EAAE,QAAQ,OAAO,IAAI;AAC3E,cAAI,UAAU,WAAW,IAAI;AAAE,sBAAU;AAAW;AAAA,UAAO;AAC3D,oBAAU,KAAK,CAAC;AAAA,QAClB,QAAQ;AAAA,QAAuC;AAAA,MACjD,UAAE;AACA,gBAAQ,KAAK,CAAC;AACd,iBAAS,KAAK,CAAC;AAAA,MACjB;AAAA,IACF;AACA,QAAI,CAAC,QAAS,MAAK,qBAAqB,4CAA4C;AACpF,UAAM,aAAS,kBAAK,sBAAQ,SAAS,OAAO,iBAAiB,EAAE;AAC/D,UAAM,kBAAc,kBAAK,sBAAQ,QAAQ,OAAO,aAAa;AAC7D,QAAI;AACF,UAAI,CAAC,MAAM,aAAa,OAAO,GAAG,EAAG,MAAK,mBAAmB,kCAAkC;AAC/F,sBAAgB;AAChB,aAAO;AAAA,IACT,UAAE;AACA,aAAO,KAAK,CAAC;AACb,kBAAY,KAAK,CAAC;AAAA,IACpB;AAAA,EACF,UAAE;AACA,QAAI,WAAY,QAAO,KAAK,CAAC;AAC7B,QAAI,CAAC,cAAe,UAAS,KAAK,CAAC;AAAA,EACrC;AACF;AAEO,IAAM,YAAY,OAAO,OAAO;AAAA,EACrC,MAAM,CAAC,SAAS,eAAe,iBAAiB,SAAS,YAAY,MAAM;AAAA,EAC3E,MAAM;AACR,CAAC;AAEM,IAAM,eAAe,OAAO,OAAO,EAAE,kBAAkB,iBAAiB,CAAC;;;AGjMhF,IAAAA,iBAAkC;AAClC,IAAAC,eAAqB;AACrB,IAAAC,iBAAuB;AACvB,IAAAC,gBAA4B;AAK5B,IAAM,QAAQ,KAAK,WAAW;AAC9B,IAAM,UAAU;AAChB,IAAM,gBAAgB;AACtB,IAAM,cAAc;AACpB,IAAM,YAAY;AAClB,IAAM,qBAAqB,OAAO;AAClC,IAAM,iBAAiB,KAAK;AAC5B,IAAM,iBAAiB,KAAK,OAAO;AACnC,IAAM,kBAAkB,OAAO;AAC/B,IAAM,sBAAsB,MAAM;AAClC,IAAM,+BAA+B,KAAK;AAE1C,IAAM,oBAAoB,KAAK,8BAA8B;AAC7D,IAAM,iBAAiB,KAAK,2BAA2B;AACvD,IAAM,sBAAsB,KAAK,0BAA0B;AAC3D,IAAM,mBAAmB,KAAK,uBAAuB;AACrD,IAAM,mBAAmB,IAAI,WAAW,CAAC,CAAC,CAAC;AAE3C,IAAM,mBAAmB,oBAAI,QAAQ;AACrC,IAAM,mBAAmB,oBAAI,QAAQ;AAErC,SAAS,iBAAiB,eAAe,WAAW;AAClD,MAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB,EAAG,MAAK,WAAW,mDAAmD;AAClI,MAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,kBAAkB,YAAY;AAC5E,SAAK,WAAW,6BAA6B,cAAc,QAAQ,cAAc,QAAQ;AAC3F,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,gBAAgB,SAAS,CAAC;AACnE,MAAI,aAAa,WAAY,MAAK,WAAW,+BAA+B;AAC5E,SAAO;AACT;AAEA,SAAS,wBAAwB,EAAE,eAAe,WAAW,WAAW,GAAG,OAAO;AAChF,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,SAAS,WAAY,MAAK,iBAAiB,qCAAqC;AAC7H,MAAI,kBAAkB,EAAG,QAAO;AAChC,SAAO,UAAU,aAAa,IAAI,gBAAgB,YAAY,QAAQ;AACxE;AAEA,SAAS,oBAAoB,OAAO,OAAO;AACzC,MAAI,SAAS;AACb,WAAS,SAAS,GAAG,SAAS,MAAM,UAAS;AAC3C,UAAM,QAAQ,MAAM,WAAW,MAAM;AACrC,QAAI;AACJ,QAAI,SAAS,SAAU,SAAS,OAAQ;AACtC,YAAM,SAAS,MAAM,WAAW,SAAS,CAAC;AAC1C,UAAI,EAAE,UAAU,SAAU,UAAU,OAAS,MAAK,cAAc,GAAG,KAAK,0CAA0C;AAClH,kBAAY,MAAM,MAAM,QAAQ,SAAS,CAAC;AAC1C,gBAAU;AAAA,IACZ,OAAO;AACL,UAAI,SAAS,SAAU,SAAS,MAAQ,MAAK,cAAc,GAAG,KAAK,0CAA0C;AAC7G,kBAAY,MAAM,QAAQ;AAAA,IAC5B;AACA,QAAI,cAAc,IAAK,WAAU;AAAA,aACxB,cAAc,KAAM,WAAU;AAAA,aAC9B,UAAU,EAAM,WAAU;AAAA,aAC1B,UAAU,EAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,QAAQ,GAAM,WAAU,MAAM,MAAM,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,QACrE,WAAU;AAAA,EACjB;AACA,SAAO,GAAG,MAAM;AAClB;AAEA,SAAS,kBAAkB,UAAU;AACnC,MAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,EAAG,MAAK,cAAc,4BAA4B;AACzH,MAAI,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,aAAa,cAAc,EAAE,SAAS,GAAG,CAAC;AAC1F,SAAK,cAAc,oCAAoC;AACzD,QAAM,EAAE,MAAM,YAAY,4BAA4B,eAAe,KAAK,IAAI;AAC9E,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,KAAK,IAAI,EAAE,SAAS,QAAQ,yBAAyB,KAAK,IAAI;AACjH,SAAK,cAAc,uEAAuE;AAC5F,MAAI,SAAS,OAAO,SAAS,QAAQ,UAAU,KAAK,IAAI,KAAK,SAAS,KAAK,IAAI,KAAK,mDAAmD,KAAK,IAAI;AAC9I,SAAK,cAAc,6EAA6E;AAClG,MAAI,OAAO,cAAc,YAAY,KAAK,SAAS,EAAE,SAAS,OAAO,CAAC,iBAAiB,KAAK,SAAS;AACnG,SAAK,cAAc,qEAAqE;AAC1F,MAAI,iBAAiB,SAAS,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe;AAClF,SAAK,cAAc,mEAAmE;AACxF,SAAO,KAAK,WAAW,oBAAoB,MAAM,eAAe,CAAC,gBAAgB,oBAAoB,WAAW,oBAAoB,CAAC,mBAAmB,iBAAiB,OAAO,SAAS,OAAO,YAAY,CAAC,GAAG;AAClN;AAEA,SAAS,cAAc,WAAW;AAChC,MAAI;AACJ,MAAI;AAAE,aAAS,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;AAAA,EAAG,QAClF;AAAE,SAAK,cAAc,gDAAgD;AAAA,EAAG;AAC9E,QAAM,YAAY,kBAAkB,MAAM;AAC1C,MAAI,UAAU,WAAW,UAAU,UAAU,UAAU,KAAK,CAAC,MAAM,UAAU,SAAS,UAAU,KAAK,CAAC;AACpG,SAAK,cAAc,qCAAqC;AAC1D,SAAO;AACT;AAEA,SAAS,iBAAiB,EAAE,WAAW,eAAe,YAAY,QAAQ,WAAAC,WAAU,GAAG;AACrF,SAAO,OAAO,IAAI,SAAS,GAAG,IAAI,aAAa,GAAG,IAAI,UAAU,GAAG,QAAQ,IAAIA,WAAU,MAAM,GAAGA,UAAS;AAC7G;AAEA,SAAS,YAAY,QAAQ;AAC3B,SAAO,OAAO,qBAAqB,kBAAkB,IAAI,OAAO,OAAG,uBAAO,OAAO,OAAO,MAAM,CAAC,CAAC;AAClG;AAEA,SAAS,SAAS,QAAQ,OAAO;AAC/B,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,IAAI,OAAO;AAAA,IACX,OAAO;AAAA,IACP,OAAO;AAAA,IACP,IAAI,KAAK;AAAA,IACT,IAAI,OAAO,UAAU;AAAA,IACrB,IAAI,OAAO,aAAa;AAAA,IACxB,IAAI,OAAO,SAAS;AAAA,IACpB,IAAI,QAAQ;AAAA,EACd;AACF;AAEA,SAAS,kBAAkB,SAAS,QAAQ;AAC1C,aAAO,mBAAK,uBAAQ,SAAS,QAAQ,mBAAmB,EAAE;AAC5D;AAEA,SAAS,eAAe,SAAS,QAAQ,OAAO;AAC9C,aAAO,mBAAK,uBAAQ,SAAS,OAAO,QAAQ,IAAI,KAAK,CAAC,GAAG,gBAAgB,EAAE;AAC7E;AAEA,SAAS,oBAAoB,QAAQ;AACnC,QAAM,MAAM;AACZ,MAAI,OAAO,SAAS,MAAM,SAAS,KAAK,MAAM,KAAK,CAAC,MAAM,UAAU,OAAO,KAAK,MAAM,IAAI;AACxF,SAAK,sBAAsB,4CAA4C;AACzE,MAAI;AACJ,MAAI;AAAE,iBAAa,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAAG,QAC5C;AAAE,SAAK,oBAAoB,iCAAiC;AAAA,EAAG;AACrE,MAAI,aAAa,mBAAmB,eAAe,OAAO,SAAS,MAAM,SAAS;AAChF,SAAK,oBAAoB,sCAAsC;AACjE,MAAI,SAAS,MAAM,SAAS;AAC5B,QAAM,OAAO,CAAC,QAAQ,UAAU;AAC9B,QAAI,CAAC,OAAO,UAAU,MAAM,KAAK,SAAS,KAAK,SAAS,SAAS,OAAO,OAAQ,MAAK,oBAAoB,aAAa,KAAK,EAAE;AAC7H,UAAM,QAAQ,OAAO,SAAS,QAAQ,SAAS,MAAM;AACrD,cAAU;AACV,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,eAAe,YAAY,iBAAiB;AAC3D,MAAI;AACF,gBAAY,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAC/C,oBAAgB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AACnD,iBAAa,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAClD,QAAQ;AAAE,SAAK,oBAAoB,uBAAuB;AAAA,EAAG;AAC7D,QAAM,SAAS,KAAK,eAAe,SAAS;AAC5C,MAAI;AAAE,sBAAkB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAAG,QACxD;AAAE,SAAK,oBAAoB,6BAA6B;AAAA,EAAG;AACjE,MAAI,oBAAoB,KAAK,kBAAkB,oBAAqB,MAAK,oBAAoB,2BAA2B;AACxH,QAAMA,aAAY,KAAK,iBAAiB,YAAY;AACpD,QAAM,YAAY;AAClB,QAAM,gBAAgB,KAAK,aAAa,gBAAgB;AACxD,MAAI;AAAE,qBAAiB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAAG,QACvD;AAAE,SAAK,oBAAoB,2BAA2B;AAAA,EAAG;AAC/D,MAAI,iBAAiB,aAAa,iBAAiB,6BAA8B,MAAK,oBAAoB,oCAAoC;AAC9I,QAAM,qBAAqB,KAAK,gBAAgB,qBAAqB;AACrE,MAAI,WAAW,OAAO,OAAQ,MAAK,oBAAoB,wCAAwC;AAE/F,QAAM,gBAAgB,iBAAiB,eAAe,SAAS;AAC/D,MAAI,eAAe,cAAe,MAAK,oBAAoB,0CAA0C;AACrG,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAAA;AAAA,IACA,QAAQ,OAAO,SAAS,MAAM,SAAS,GAAG,SAAS;AAAA,IACnD;AAAA,IACA;AAAA,IACA,sBAAkB,uBAAO,MAAM;AAAA,EACjC;AACF;AAEA,SAAS,gBAAgB,MAAM,QAAQ,QAAQ,UAAU;AACvD,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,eAAe,OAAO;AAAA,IACtB,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,yBAAyB,EAAE,WAAW,YAAY,UAAU,eAAe,YAAY,mBAAmB,GAAG,KAAK;AACzH,MAAI,cAAc,UAAa,eAAe,OAAW,MAAK,WAAW,2CAA2C;AACpH,QAAM,gBAAgB,eAAe,cAAc,SAAY,CAAC,IAAI,CAAC,SAAS;AAC9E,QAAM,aAAa,iBAAiB,eAAe,SAAS;AAC5D,QAAM,UAAU,MAAM,IAAI,EAAE,GAAG,IAAI,iBAAiB;AACpD,MAAI,WAAW;AACf,MAAI;AACF,UAAM,SAAS,MAAM,IAAI,aAAa,GAAG,eAAe,gBAAgB;AACxE,UAAMA,aAAY,aAAa,iBAAiB,SAAS,eAAe,GAAG;AAC3E,QAAIA,WAAU,SAAS,oBAAqB,MAAK,WAAW,+BAA+B;AAC3F,UAAM,SAAS,iBAAiB,EAAE,WAAW,eAAe,YAAY,QAAQ,WAAAA,WAAU,CAAC;AAC3F,UAAM,gBAAgB,MAAM,IAAI,WAAW,GAAG,aAAa,uBAAuB;AAClF,UAAM,oBAAoB,kBAAkB,QAAQ;AACpD,UAAM,cAAc,kBAAkB,SAAS,MAAM;AACrD,QAAI;AACJ,QAAI;AAAE,+BAAqB,kCAAkB,aAAa,eAAe,YAAY,MAAM,CAAC,EAAE,QAAQ,iBAAiB;AAAA,IAAG,UAC1H;AAAU,kBAAY,KAAK,CAAC;AAAG,wBAAkB,KAAK,CAAC;AAAA,IAAG;AAC1D,QAAI,mBAAmB,SAAS,6BAA8B,MAAK,cAAc,iCAAiC;AAClH,UAAM,OAAO,OAAO,QAAQ,eAAe,IAAI,mBAAmB,MAAM,GAAG,kBAAkB;AAC7F,QAAI,KAAK,SAAS,gBAAiB,MAAK,WAAW,mCAAmC;AACtF,UAAM,SAAS,OAAO,OAAO,IAAI,KAAK,MAAM,GAAG,IAAI;AACnD,UAAM,SAAS;AAAA,MACb;AAAA,MACA,QAAQ,IAAI,WAAW,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,sBAAkB,uBAAO,MAAM;AAAA,MAC/B;AAAA,MACA,MAAM,oBAAI,IAAI;AAAA,IAChB;AACA,UAAM,QAAQ,gBAAgB,cAAc,QAAQ,QAAQ,MAAS;AACrE,qBAAiB,IAAI,OAAO,MAAM;AAClC,eAAW;AACX,WAAO;AAAA,EACT,UAAE;AACA,QAAI,CAAC,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC/B;AACF;AAEO,SAAS,qBAAqB,SAAS;AAC5C,SAAO,yBAAyB,SAAS,yBAAW;AACtD;AAEO,SAAS,aAAa,EAAE,OAAO,OAAO,UAAU,GAAG;AACxD,QAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,MAAI,CAAC,OAAQ,MAAK,WAAW,sCAAsC;AACnE,QAAM,SAAS;AACf,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,MAAI,UAAU,WAAW,SAAU,MAAK,gBAAgB,SAAS,KAAK,yBAAyB,QAAQ,kBAAkB;AACzH,QAAM,QAAQ,MAAM,OAAO,IAAI,WAAW,GAAG,aAAa,oBAAoB;AAC9E,QAAM,MAAM,eAAe,OAAO,SAAS,OAAO,QAAQ,KAAK;AAC/D,MAAI;AACJ,MAAI;AAAE,qBAAa,kCAAkB,KAAK,OAAO,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,SAAS;AAAA,EAAG,UAC9F;AAAU,QAAI,KAAK,CAAC;AAAA,EAAG;AACvB,SAAO,KAAK,IAAI,KAAK;AACrB,SAAO,OAAO,OAAO,UAAU;AACjC;AAEO,SAAS,iBAAiB,EAAE,UAAU,eAAe,OAAO,GAAG;AACpE,MAAK,aAAa,YAAgB,kBAAkB;AAClD,SAAK,WAAW,kDAAkD;AACpE,QAAM,SAAS,oBAAoB,MAAM;AAKzC,QAAM,UAAU,aAAa,SACzB,aAAa,iBAAiB,OAAO,WAAW,QAAQ,IACxD,IAAI,WAAW,MAAM,cAAc,IAAI,WAAW,OAAO,SAAS,CAAC,GAAG,IAAI,oBAAoB,CAAC;AACnG,MAAI,WAAW;AACf,MAAI;AACF,UAAM,cAAc,kBAAkB,SAAS,OAAO,MAAM;AAC5D,QAAI;AACJ,QAAI;AAAE,8BAAoB,kCAAkB,aAAa,OAAO,eAAe,YAAY,OAAO,MAAM,CAAC,EAAE,QAAQ,OAAO,kBAAkB;AAAA,IAAG,QACzI;AAAE,WAAK,mBAAmB,qCAAqC;AAAA,IAAG,UACxE;AAAU,kBAAY,KAAK,CAAC;AAAA,IAAG;AAC/B,QAAI;AACJ,QAAI;AAAE,iBAAW,cAAc,iBAAiB;AAAA,IAAG,UACnD;AAAU,wBAAkB,KAAK,CAAC;AAAA,IAAG;AACrC,UAAM,SAAS;AAAA,MACb;AAAA,MACA,QAAQ,IAAI,WAAW,OAAO,MAAM;AAAA,MACpC,eAAe,OAAO;AAAA,MACtB,WAAW,OAAO;AAAA,MAClB,YAAY,OAAO;AAAA,MACnB,kBAAkB,IAAI,WAAW,OAAO,gBAAgB;AAAA,MACxD,MAAM,oBAAI,IAAI;AAAA,IAChB;AACA,UAAM,QAAQ,gBAAgB,cAAc,QAAQ,IAAI,WAAW,MAAM,GAAG,QAAQ;AACpF,qBAAiB,IAAI,OAAO,MAAM;AAClC,eAAW;AACX,WAAO;AAAA,EACT,UAAE;AACA,QAAI,CAAC,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC/B;AACF;AAEO,SAAS,aAAa,EAAE,OAAO,OAAO,WAAW,GAAG;AACzD,QAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,MAAI,CAAC,OAAQ,MAAK,WAAW,sCAAsC;AACnE,QAAM,UAAU;AAChB,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,MAAI,WAAW,WAAW,cAAc,WAAW;AACjD,SAAK,gBAAgB,SAAS,KAAK,kCAAkC;AACvE,QAAM,QAAQ,WAAW,SAAS,GAAG,WAAW;AAChD,QAAM,OAAO,WAAW,SAAS,WAAW;AAC5C,QAAM,MAAM,eAAe,OAAO,SAAS,OAAO,QAAQ,KAAK;AAC/D,MAAI;AACJ,MAAI;AAAE,oBAAY,kCAAkB,KAAK,OAAO,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,IAAI;AAAA,EAAG,QAClF;AAAE,SAAK,gBAAgB,SAAS,KAAK,wBAAwB;AAAA,EAAG,UACtE;AAAU,QAAI,KAAK,CAAC;AAAA,EAAG;AACvB,SAAO,KAAK,IAAI,KAAK;AACrB,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAO;AACtC,QAAM,SAAS,iBAAiB,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK;AACxE,MAAI,CAAC,OAAQ,MAAK,WAAW,oCAAoC;AACjE,MAAI,OAAO,KAAK,SAAS,OAAO,WAAY,MAAK,yBAAyB,YAAY,OAAO,UAAU,mCAAmC,OAAO,KAAK,IAAI,EAAE;AAC5J,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,SAAS;AAAA,IACT,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,eAAe,OAAO;AAAA,IACtB,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,EACrB,CAAC;AACD,kBAAgB,KAAK;AACrB,SAAO;AACT;AAEO,SAAS,gBAAgB,OAAO;AACrC,QAAM,SAAS,iBAAiB,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK;AACxE,MAAI,CAAC,OAAQ,MAAK,WAAW,4CAA4C;AACzE,SAAO,QAAQ,KAAK,CAAC;AACrB,SAAO,KAAK,MAAM;AAClB,mBAAiB,OAAO,KAAK;AAC7B,mBAAiB,OAAO,KAAK;AAC/B;AAEO,IAAM,gBAAgB,OAAO,OAAO;AAAA,EACzC,gCAAgC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,OAAO,OAAO,EAAE,OAAO,SAAS,aAAa,WAAW,oBAAoB,gBAAgB,eAAe,CAAC;AACzH,CAAC;",
   "names": ["import_chacha", "import_hkdf", "import_sha256", "import_utils", "ageHeader"]
 }
diff --git a/packages/crypto/dist/index.d.ts b/packages/crypto/dist/index.d.ts
index 1645cdf..a8afc6c 100644
--- a/packages/crypto/dist/index.d.ts
+++ b/packages/crypto/dist/index.d.ts
@@ -62,7 +62,15 @@ export function encryptChunk(options: {
 }): Uint8Array;
 
 export function openFileEnvelope(options: {
-  identity: string | Uint8Array;
+  /** age identity string or 32-byte X25519 scalar. Provide exactly one of identity or unwrapFileKey. */
+  identity?: string | Uint8Array;
+  /**
+   * Alternative for holders that never release the identity scalar (e.g. an
+   * agent): receives a copy of the envelope's age header and must return the
+   * 16-byte file key. The package copies the result; the callback may wipe
+   * its own buffer afterwards.
+   */
+  unwrapFileKey?: (ageHeader: Uint8Array) => Uint8Array;
   header: Uint8Array;
 }): FileEnvelopeState & { readonly kind: "decryption"; readonly metadata: Required<FileMetadata> };
 
diff --git a/packages/crypto/dist/index.js b/packages/crypto/dist/index.js
index f3980e9..429f8b7 100644
--- a/packages/crypto/dist/index.js
+++ b/packages/crypto/dist/index.js
@@ -634,9 +634,11 @@ function encryptChunk({ state, index, plaintext }) {
   record.seen.add(index);
   return concat(nonce, ciphertext);
 }
-function openFileEnvelope({ identity, header }) {
+function openFileEnvelope({ identity, unwrapFileKey, header }) {
+  if (identity === void 0 === (unwrapFileKey === void 0))
+    fail("E_INPUT", "provide exactly one of identity or unwrapFileKey");
   const parsed = parseEnvelopeHeader(header);
-  const fileKey = ageInternals.decryptAgeHeader(parsed.ageHeader, identity);
+  const fileKey = identity !== void 0 ? ageInternals.decryptAgeHeader(parsed.ageHeader, identity) : new Uint8Array(bytes(unwrapFileKey(new Uint8Array(parsed.ageHeader)), 16, "unwrapped file key"));
   let retained = false;
   try {
     const metadataKey = deriveMetadataKey(fileKey, parsed.fileId);
diff --git a/packages/crypto/dist/index.js.map b/packages/crypto/dist/index.js.map
index 52ac919..864ebb7 100644
--- a/packages/crypto/dist/index.js.map
+++ b/packages/crypto/dist/index.js.map
@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/error.js", "../src/age.js", "../src/bytes.js", "../src/bech32.js", "../src/file.js"],
-  "sourcesContent": ["export class PkCryptoError extends Error {\n  constructor(code, message) {\n    super(`${code}: ${message}`);\n    this.name = \"PkCryptoError\";\n    this.code = code;\n  }\n}\n\nexport const fail = (code, message) => {\n  throw new PkCryptoError(code, message);\n};\n", "import { chacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { x25519 } from \"@noble/curves/ed25519.js\";\nimport { hkdf } from \"@noble/hashes/hkdf.js\";\nimport { hmac } from \"@noble/hashes/hmac.js\";\nimport { sha256 } from \"@noble/hashes/sha256.js\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport { allZero, bytes, concat, decodeBase64, EMPTY, encodeBase64, equal, utf8 } from \"./bytes.js\";\nimport { decodeBech32, encodeBech32 } from \"./bech32.js\";\nimport { fail } from \"./error.js\";\n\nconst VERSION_LINE = \"age-encryption.org/v1\";\nconst AGE_X25519_INFO = utf8(\"age-encryption.org/v1/X25519\");\nconst AGE_HEADER_INFO = utf8(\"header\");\nconst ZERO_NONCE = new Uint8Array(12);\n\nconst random = (length) => randomBytes(length);\n\nexport function parseRecipient(recipient) {\n  if (typeof recipient !== \"string\" || recipient !== recipient.toLowerCase()) fail(\"E_RECIPIENT\", \"recipient must be canonical lowercase age Bech32\");\n  const decoded = decodeBech32(recipient);\n  if (!decoded || decoded.hrp !== \"age\" || decoded.data.length !== 32 || encodeBech32(\"age\", decoded.data) !== recipient)\n    fail(\"E_RECIPIENT\", \"invalid X25519 age recipient\");\n  return decoded.data;\n}\n\nexport function parseIdentity(identity) {\n  if (typeof identity !== \"string\" || (identity !== identity.toUpperCase() && identity !== identity.toLowerCase()))\n    fail(\"E_IDENTITY\", \"identity must use uniform Bech32 case\");\n  const decoded = decodeBech32(identity);\n  if (!decoded || decoded.hrp !== \"age-secret-key-\" || decoded.data.length !== 32 || encodeBech32(\"age-secret-key-\", decoded.data) !== identity.toLowerCase())\n    fail(\"E_IDENTITY\", \"invalid X25519 age identity\");\n  return decoded.data;\n}\n\nexport function recipientFromIdentity(identity) {\n  return encodeBech32(\"age\", x25519.getPublicKey(parseIdentity(identity)));\n}\n\nexport function formatRecipient(publicKey) {\n  return encodeBech32(\"age\", bytes(publicKey, 32, \"publicKey\"));\n}\n\nexport function formatIdentity(secretKey) {\n  return encodeBech32(\"age-secret-key-\", bytes(secretKey, 32, \"secretKey\")).toUpperCase();\n}\n\nexport function publicKeyFromSecretKey(secretKey) {\n  return x25519.getPublicKey(bytes(secretKey, 32, \"secretKey\"));\n}\n\nexport function createRecipientIdentity() {\n  return createRecipientIdentityFromSecret(random(32));\n}\n\nexport function createRecipientIdentityFromSecret(secretKey) {\n  const scalar = bytes(secretKey, 32, \"secretKey\");\n  return { identity: formatIdentity(scalar), recipient: formatRecipient(publicKeyFromSecretKey(scalar)) };\n}\n\nfunction parseHeader(header) {\n  bytes(header);\n  let position = 0;\n  const line = () => {\n    const newline = header.indexOf(0x0a, position);\n    if (newline === -1) fail(\"E_AGE_HEADER_PARSE\", \"truncated age header\");\n    const value = new TextDecoder(\"utf-8\", { fatal: true }).decode(header.subarray(position, newline));\n    position = newline + 1;\n    return value;\n  };\n\n  let version;\n  try { version = line(); }\n  catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n  if (version !== VERSION_LINE) fail(\"E_AGE_HEADER_VERSION\", \"unsupported age header version\");\n\n  const stanzas = [];\n  for (;;) {\n    let current;\n    try { current = line(); }\n    catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n    if (current.startsWith(\"--- \")) {\n      const mac = decodeBase64(current.slice(4));\n      if (!mac || mac.length !== 32 || position !== header.length) fail(\"E_AGE_HEADER_PARSE\", \"invalid age header MAC line\");\n      const markerEnd = position - current.length - 1 + 3;\n      return { stanzas, mac, authenticated: header.subarray(0, markerEnd) };\n    }\n    if (!current.startsWith(\"-> \")) fail(\"E_AGE_HEADER_PARSE\", \"invalid age recipient stanza\");\n    const args = current.slice(3).split(\" \");\n    if (args.some((arg) => arg.length === 0)) fail(\"E_AGE_HEADER_PARSE\", \"invalid age recipient arguments\");\n    const bodyLines = [];\n    for (;;) {\n      let bodyLine;\n      try { bodyLine = line(); }\n      catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n      if (!/^[A-Za-z0-9+/]*$/.test(bodyLine) || bodyLine.length > 64) fail(\"E_AGE_HEADER_PARSE\", \"invalid age stanza body\");\n      bodyLines.push(bodyLine);\n      if (bodyLine.length < 64) break;\n    }\n    const body = decodeBase64(bodyLines.join(\"\"));\n    if (!body) fail(\"E_AGE_HEADER_PARSE\", \"non-canonical age stanza body\");\n    stanzas.push({ args, body });\n  }\n}\n\nfunction encryptAgeHeader(fileKey, recipients, rng) {\n  bytes(fileKey, 16, \"fileKey\");\n  if (!Array.isArray(recipients) || recipients.length === 0) fail(\"E_RECIPIENT\", \"at least one recipient is required\");\n  let text = `${VERSION_LINE}\\n`;\n  for (const recipient of recipients) {\n    const recipientPublic = typeof recipient === \"string\" ? parseRecipient(recipient) : bytes(recipient, 32, \"recipient\");\n    const ephemeralSecret = rng(32);\n    bytes(ephemeralSecret, 32, \"random output\");\n    let shared;\n    let wrapKey;\n    try {\n      const ephemeralPublic = x25519.getPublicKey(ephemeralSecret);\n      try { shared = x25519.getSharedSecret(ephemeralSecret, recipientPublic); }\n      catch { fail(\"E_RECIPIENT\", \"recipient is a low-order X25519 point\"); }\n      if (allZero(shared)) fail(\"E_RECIPIENT\", \"recipient is a low-order X25519 point\");\n      wrapKey = hkdf(sha256, shared, concat(ephemeralPublic, recipientPublic), AGE_X25519_INFO, 32);\n      const wrapped = chacha20poly1305(wrapKey, ZERO_NONCE).encrypt(fileKey);\n      text += `-> X25519 ${encodeBase64(ephemeralPublic)}\\n${encodeBase64(wrapped)}\\n`;\n    } finally {\n      ephemeralSecret.fill(0);\n      shared?.fill(0);\n      wrapKey?.fill(0);\n    }\n  }\n  text += \"---\";\n  const authenticated = utf8(text);\n  const macKey = hkdf(sha256, fileKey, EMPTY, AGE_HEADER_INFO, 32);\n  try {\n    const mac = hmac(sha256, macKey, authenticated);\n    return utf8(`${text} ${encodeBase64(mac)}\\n`);\n  } finally { macKey.fill(0); }\n}\n\nfunction decryptAgeHeader(header, identity) {\n  const ownsScalar = typeof identity === \"string\";\n  const scalar = ownsScalar ? parseIdentity(identity) : bytes(identity, 32, \"identity\");\n  let fileKey = null;\n  let authenticated = false;\n  try {\n    const parsed = parseHeader(header);\n    if (parsed.stanzas.length === 0) fail(\"E_AGE_HEADER_PARSE\", \"age header has no recipients\");\n    const recipientPublic = x25519.getPublicKey(scalar);\n    for (const stanza of parsed.stanzas) {\n      if (stanza.args[0] !== \"X25519\") fail(\"E_AGE_HEADER_RECIPIENT\", \"foreign recipient stanza is not supported\");\n      if (stanza.args.length !== 2 || stanza.body.length !== 32) fail(\"E_AGE_HEADER_PARSE\", \"invalid X25519 stanza\");\n      const ephemeralPublic = decodeBase64(stanza.args[1]);\n      if (!ephemeralPublic || ephemeralPublic.length !== 32) fail(\"E_AGE_HEADER_PARSE\", \"invalid X25519 ephemeral share\");\n    }\n    for (const stanza of parsed.stanzas) {\n      const ephemeralPublic = decodeBase64(stanza.args[1]);\n      let shared;\n      let wrapKey;\n      try {\n        try { shared = x25519.getSharedSecret(scalar, ephemeralPublic); }\n        catch { continue; }\n        if (allZero(shared)) continue;\n        wrapKey = hkdf(sha256, shared, concat(ephemeralPublic, recipientPublic), AGE_X25519_INFO, 32);\n        try {\n          const candidate = chacha20poly1305(wrapKey, ZERO_NONCE).decrypt(stanza.body);\n          if (candidate.length === 16) { fileKey = candidate; break; }\n          candidate.fill(0);\n        } catch { /* stanza is for another identity */ }\n      } finally {\n        shared?.fill(0);\n        wrapKey?.fill(0);\n      }\n    }\n    if (!fileKey) fail(\"E_WRONG_RECIPIENT\", \"identity does not match this file envelope\");\n    const macKey = hkdf(sha256, fileKey, EMPTY, AGE_HEADER_INFO, 32);\n    const expectedMac = hmac(sha256, macKey, parsed.authenticated);\n    try {\n      if (!equal(expectedMac, parsed.mac)) fail(\"E_ENVELOPE_AUTH\", \"age header authentication failed\");\n      authenticated = true;\n      return fileKey;\n    } finally {\n      macKey.fill(0);\n      expectedMac.fill(0);\n    }\n  } finally {\n    if (ownsScalar) scalar.fill(0);\n    if (!authenticated) fileKey?.fill(0);\n  }\n}\n\nexport const ageHeader = Object.freeze({\n  seal: (fileKey, recipients) => encryptAgeHeader(fileKey, recipients, random),\n  open: decryptAgeHeader,\n});\n\nexport const ageInternals = Object.freeze({ encryptAgeHeader, decryptAgeHeader });\n", "const BASE64 = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\";\nconst BASE64_VALUE = new Int16Array(128).fill(-1);\nfor (let i = 0; i < BASE64.length; i++) BASE64_VALUE[BASE64.charCodeAt(i)] = i;\n\nexport const EMPTY = new Uint8Array(0);\nexport const utf8 = (value) => new TextEncoder().encode(value);\n\nexport function bytes(value, length, name = \"value\") {\n  if (!(value instanceof Uint8Array)) throw new TypeError(`${name} must be a Uint8Array`);\n  if (length !== undefined && value.length !== length) throw new TypeError(`${name} must be ${length} bytes`);\n  return value;\n}\n\nexport function concat(...parts) {\n  const length = parts.reduce((sum, part) => sum + bytes(part).length, 0);\n  const out = new Uint8Array(length);\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\nexport function equal(a, b) {\n  if (!(a instanceof Uint8Array) || !(b instanceof Uint8Array) || a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n  return diff === 0;\n}\n\nexport function allZero(value) {\n  let acc = 0;\n  for (const byte of value) acc |= byte;\n  return acc === 0;\n}\n\nexport function u32(value) {\n  if (!Number.isInteger(value) || value < 0 || value > 0xffffffff) throw new RangeError(\"value is not a uint32\");\n  const out = new Uint8Array(4);\n  new DataView(out.buffer).setUint32(0, value, false);\n  return out;\n}\n\nexport function u64(value) {\n  if (!Number.isSafeInteger(value) || value < 0) throw new RangeError(\"value is not a non-negative safe integer\");\n  const out = new Uint8Array(8);\n  const view = new DataView(out.buffer);\n  const big = BigInt(value);\n  view.setUint32(0, Number(big >> 32n), false);\n  view.setUint32(4, Number(big & 0xffffffffn), false);\n  return out;\n}\n\nexport function readU32(value, offset) {\n  if (offset < 0 || offset + 4 > value.length) throw new RangeError(\"truncated uint32\");\n  return new DataView(value.buffer, value.byteOffset + offset, 4).getUint32(0, false);\n}\n\nexport function readU64(value, offset) {\n  if (offset < 0 || offset + 8 > value.length) throw new RangeError(\"truncated uint64\");\n  const view = new DataView(value.buffer, value.byteOffset + offset, 8);\n  const big = (BigInt(view.getUint32(0, false)) << 32n) | BigInt(view.getUint32(4, false));\n  if (big > BigInt(Number.MAX_SAFE_INTEGER)) throw new RangeError(\"uint64 exceeds JavaScript safe integer range\");\n  return Number(big);\n}\n\nexport function encodeBase64(value, { padding = false } = {}) {\n  bytes(value);\n  let out = \"\";\n  for (let i = 0; i < value.length; i += 3) {\n    const a = value[i];\n    const haveB = i + 1 < value.length;\n    const haveC = i + 2 < value.length;\n    const b = haveB ? value[i + 1] : 0;\n    const c = haveC ? value[i + 2] : 0;\n    out += BASE64[a >>> 2];\n    out += BASE64[((a & 3) << 4) | (b >>> 4)];\n    if (haveB) out += BASE64[((b & 15) << 2) | (c >>> 6)];\n    else if (padding) out += \"=\";\n    if (haveC) out += BASE64[c & 63];\n    else if (padding) out += \"=\";\n  }\n  return out;\n}\n\nexport function decodeBase64(value, { padding = false } = {}) {\n  if (typeof value !== \"string\") return null;\n  if (padding) {\n    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(value) || value.length % 4 !== 0) return null;\n  } else if (!/^[A-Za-z0-9+/]*$/.test(value) || value.length % 4 === 1) return null;\n\n  const stripped = padding ? value.replace(/=+$/, \"\") : value;\n  const outputLength = Math.floor((stripped.length * 6) / 8);\n  const out = new Uint8Array(outputLength);\n  let accumulator = 0;\n  let bits = 0;\n  let offset = 0;\n  for (let i = 0; i < stripped.length; i++) {\n    const code = stripped.charCodeAt(i);\n    if (code >= BASE64_VALUE.length || BASE64_VALUE[code] < 0) return null;\n    accumulator = (accumulator << 6) | BASE64_VALUE[code];\n    bits += 6;\n    if (bits >= 8) {\n      bits -= 8;\n      out[offset++] = (accumulator >>> bits) & 0xff;\n    }\n  }\n  if (bits > 0 && (accumulator & ((1 << bits) - 1)) !== 0) return null;\n  if (encodeBase64(out, { padding }) !== value) return null;\n  return out;\n}\n", "const CHARSET = \"qpzry9x8gf2tvdw0s3jn54khce6mua7l\";\nconst GENERATORS = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3];\n\nfunction polymod(values) {\n  let checksum = 1;\n  for (const value of values) {\n    const top = checksum >>> 25;\n    checksum = ((checksum & 0x1ffffff) << 5) ^ value;\n    for (let i = 0; i < 5; i++) if ((top >>> i) & 1) checksum ^= GENERATORS[i];\n  }\n  return checksum >>> 0;\n}\n\nfunction expandHrp(hrp) {\n  const out = [];\n  for (const char of hrp) out.push(char.charCodeAt(0) >>> 5);\n  out.push(0);\n  for (const char of hrp) out.push(char.charCodeAt(0) & 31);\n  return out;\n}\n\nfunction convertBits(data, from, to, pad) {\n  let accumulator = 0;\n  let bits = 0;\n  const out = [];\n  const maximum = (1 << to) - 1;\n  for (const value of data) {\n    if (value < 0 || value >>> from) return null;\n    accumulator = (accumulator << from) | value;\n    bits += from;\n    while (bits >= to) {\n      bits -= to;\n      out.push((accumulator >>> bits) & maximum);\n    }\n  }\n  if (pad && bits) out.push((accumulator << (to - bits)) & maximum);\n  else if (!pad && (bits >= from || ((accumulator << (to - bits)) & maximum))) return null;\n  return out;\n}\n\nexport function encodeBech32(hrp, data) {\n  const words = convertBits(data, 8, 5, true);\n  const values = [...expandHrp(hrp), ...words];\n  const mod = polymod([...values, 0, 0, 0, 0, 0, 0]) ^ 1;\n  const checksum = [];\n  for (let i = 0; i < 6; i++) checksum.push((mod >>> (5 * (5 - i))) & 31);\n  return hrp + \"1\" + [...words, ...checksum].map((word) => CHARSET[word]).join(\"\");\n}\n\nexport function decodeBech32(value) {\n  if (typeof value !== \"string\" || (value !== value.toLowerCase() && value !== value.toUpperCase())) return null;\n  const normalized = value.toLowerCase();\n  const separator = normalized.lastIndexOf(\"1\");\n  if (separator < 1 || separator + 7 > normalized.length) return null;\n  const hrp = normalized.slice(0, separator);\n  const words = [];\n  for (const char of normalized.slice(separator + 1)) {\n    const word = CHARSET.indexOf(char);\n    if (word === -1) return null;\n    words.push(word);\n  }\n  if (polymod([...expandHrp(hrp), ...words]) !== 1) return null;\n  const data = convertBits(words.slice(0, -6), 5, 8, false);\n  return data === null ? null : { hrp, data: new Uint8Array(data) };\n}\n", "import { xchacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { hkdf } from \"@noble/hashes/hkdf.js\";\nimport { sha256 } from \"@noble/hashes/sha256.js\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport { ageInternals } from \"./age.js\";\nimport { bytes, concat, readU32, readU64, u32, u64, utf8 } from \"./bytes.js\";\nimport { fail } from \"./error.js\";\n\nconst MAGIC = utf8(\"PKFILE1\\n\");\nconst VERSION = 1;\nconst FILE_ID_BYTES = 16;\nconst NONCE_BYTES = 24;\nconst TAG_BYTES = 16;\nconst DEFAULT_CHUNK_SIZE = 1024 * 1024;\nconst MIN_CHUNK_SIZE = 64 * 1024;\nconst MAX_CHUNK_SIZE = 16 * 1024 * 1024;\nconst MAX_HEADER_SIZE = 1024 * 1024;\nconst MAX_AGE_HEADER_SIZE = 256 * 1024;\nconst MAX_METADATA_CIPHERTEXT_SIZE = 64 * 1024;\n\nconst METADATA_KEY_INFO = utf8(\"pksuite/file/metadata-key/v1\");\nconst CHUNK_KEY_INFO = utf8(\"pksuite/file/chunk-key/v1\");\nconst METADATA_AAD_DOMAIN = utf8(\"pksuite/file/metadata/v1\");\nconst CHUNK_AAD_DOMAIN = utf8(\"pksuite/file/chunk/v1\");\nconst DOMAIN_SEPARATOR = new Uint8Array([0]);\n\nconst encryptionStates = new WeakMap();\nconst decryptionStates = new WeakMap();\n\nfunction validateGeometry(plaintextSize, chunkSize) {\n  if (!Number.isSafeInteger(plaintextSize) || plaintextSize < 0) fail(\"E_INPUT\", \"plaintextSize must be a non-negative safe integer\");\n  if (!Number.isInteger(chunkSize) || chunkSize < MIN_CHUNK_SIZE || chunkSize > MAX_CHUNK_SIZE)\n    fail(\"E_INPUT\", `chunkSize must be between ${MIN_CHUNK_SIZE} and ${MAX_CHUNK_SIZE} bytes`);\n  const chunkCount = Math.max(1, Math.ceil(plaintextSize / chunkSize));\n  if (chunkCount > 0xffffffff) fail(\"E_INPUT\", \"file requires too many chunks\");\n  return chunkCount;\n}\n\nfunction expectedPlaintextLength({ plaintextSize, chunkSize, chunkCount }, index) {\n  if (!Number.isInteger(index) || index < 0 || index >= chunkCount) fail(\"E_CHUNK_INDEX\", \"chunk index is outside the envelope\");\n  if (plaintextSize === 0) return 0;\n  return index === chunkCount - 1 ? plaintextSize - chunkSize * index : chunkSize;\n}\n\nfunction canonicalJsonString(value, label) {\n  let result = '\"';\n  for (let offset = 0; offset < value.length;) {\n    const first = value.charCodeAt(offset);\n    let character;\n    if (first >= 0xd800 && first <= 0xdbff) {\n      const second = value.charCodeAt(offset + 1);\n      if (!(second >= 0xdc00 && second <= 0xdfff)) fail(\"E_METADATA\", `${label} must contain only Unicode scalar values`);\n      character = value.slice(offset, offset + 2);\n      offset += 2;\n    } else {\n      if (first >= 0xdc00 && first <= 0xdfff) fail(\"E_METADATA\", `${label} must contain only Unicode scalar values`);\n      character = value[offset++];\n    }\n    if (character === '\"') result += '\\\\\"';\n    else if (character === \"\\\\\") result += \"\\\\\\\\\";\n    else if (first === 0x08) result += \"\\\\b\";\n    else if (first === 0x09) result += \"\\\\t\";\n    else if (first === 0x0a) result += \"\\\\n\";\n    else if (first === 0x0c) result += \"\\\\f\";\n    else if (first === 0x0d) result += \"\\\\r\";\n    else if (first < 0x20) result += `\\\\u${first.toString(16).padStart(4, \"0\")}`;\n    else result += character;\n  }\n  return `${result}\"`;\n}\n\nfunction canonicalMetadata(metadata) {\n  if (!metadata || typeof metadata !== \"object\" || Array.isArray(metadata)) fail(\"E_METADATA\", \"metadata must be an object\");\n  if (Object.keys(metadata).some((key) => ![\"name\", \"mediaType\", \"lastModified\"].includes(key)))\n    fail(\"E_METADATA\", \"metadata contains an unknown field\");\n  const { name, mediaType = \"application/octet-stream\", lastModified = null } = metadata;\n  if (typeof name !== \"string\" || name.length === 0 || utf8(name).length > 4096 || /[\\u0000-\\u001f\\u007f]/u.test(name))\n    fail(\"E_METADATA\", \"metadata.name must be a non-empty filename without control characters\");\n  if (name === \".\" || name === \"..\" || /[\\\\/:]/u.test(name) || /[ .]$/u.test(name) || /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\\.|$)/iu.test(name))\n    fail(\"E_METADATA\", \"metadata.name must be a portable single filename, not a path or device name\");\n  if (typeof mediaType !== \"string\" || utf8(mediaType).length > 255 || !/^[\\x20-\\x7e]*$/.test(mediaType))\n    fail(\"E_METADATA\", \"metadata.mediaType must be printable ASCII no longer than 255 bytes\");\n  if (lastModified !== null && (!Number.isSafeInteger(lastModified) || lastModified < 0))\n    fail(\"E_METADATA\", \"metadata.lastModified must be null or a non-negative safe integer\");\n  return utf8(`{\"name\":${canonicalJsonString(name, \"metadata.name\")},\"mediaType\":${canonicalJsonString(mediaType, \"metadata.mediaType\")},\"lastModified\":${lastModified === null ? \"null\" : String(lastModified)}}`);\n}\n\nfunction parseMetadata(plaintext) {\n  let parsed;\n  try { parsed = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(plaintext)); }\n  catch { fail(\"E_METADATA\", \"encrypted metadata is not canonical UTF-8 JSON\"); }\n  const canonical = canonicalMetadata(parsed);\n  if (canonical.length !== plaintext.length || canonical.some((byte, index) => byte !== plaintext[index]))\n    fail(\"E_METADATA\", \"encrypted metadata is not canonical\");\n  return parsed;\n}\n\nfunction structuralPrefix({ chunkSize, plaintextSize, chunkCount, fileId, ageHeader }) {\n  return concat(u32(chunkSize), u64(plaintextSize), u32(chunkCount), fileId, u32(ageHeader.length), ageHeader);\n}\n\nfunction metadataAad(prefix) {\n  return concat(METADATA_AAD_DOMAIN, DOMAIN_SEPARATOR, u32(VERSION), sha256(concat(MAGIC, prefix)));\n}\n\nfunction chunkAad(record, index) {\n  const expected = expectedPlaintextLength(record, index);\n  return concat(\n    CHUNK_AAD_DOMAIN,\n    DOMAIN_SEPARATOR,\n    u32(VERSION),\n    record.fileId,\n    record.headerCommitment,\n    u32(index),\n    u32(record.chunkCount),\n    u64(record.plaintextSize),\n    u32(record.chunkSize),\n    u32(expected),\n  );\n}\n\nfunction deriveMetadataKey(fileKey, fileId) {\n  return hkdf(sha256, fileKey, fileId, METADATA_KEY_INFO, 32);\n}\n\nfunction deriveChunkKey(fileKey, fileId, index) {\n  return hkdf(sha256, fileKey, concat(fileId, u32(index)), CHUNK_KEY_INFO, 32);\n}\n\nfunction parseEnvelopeHeader(header) {\n  bytes(header);\n  if (header.length < MAGIC.length + 4 || MAGIC.some((byte, index) => header[index] !== byte))\n    fail(\"E_ENVELOPE_VERSION\", \"unsupported file envelope magic or version\");\n  let bodyLength;\n  try { bodyLength = readU32(header, MAGIC.length); }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated file envelope prelude\"); }\n  if (bodyLength > MAX_HEADER_SIZE || bodyLength !== header.length - MAGIC.length - 4)\n    fail(\"E_ENVELOPE_PARSE\", \"file envelope header length mismatch\");\n  let offset = MAGIC.length + 4;\n  const take = (length, label) => {\n    if (!Number.isInteger(length) || length < 0 || offset + length > header.length) fail(\"E_ENVELOPE_PARSE\", `truncated ${label}`);\n    const value = header.subarray(offset, offset + length);\n    offset += length;\n    return value;\n  };\n\n  let chunkSize, plaintextSize, chunkCount, ageHeaderLength, metadataLength;\n  try {\n    chunkSize = readU32(header, offset); offset += 4;\n    plaintextSize = readU64(header, offset); offset += 8;\n    chunkCount = readU32(header, offset); offset += 4;\n  } catch { fail(\"E_ENVELOPE_PARSE\", \"invalid file geometry\"); }\n  const fileId = take(FILE_ID_BYTES, \"file id\");\n  try { ageHeaderLength = readU32(header, offset); offset += 4; }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated age header length\"); }\n  if (ageHeaderLength === 0 || ageHeaderLength > MAX_AGE_HEADER_SIZE) fail(\"E_ENVELOPE_PARSE\", \"invalid age header length\");\n  const ageHeader = take(ageHeaderLength, \"age header\");\n  const prefixEnd = offset;\n  const metadataNonce = take(NONCE_BYTES, \"metadata nonce\");\n  try { metadataLength = readU32(header, offset); offset += 4; }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated metadata length\"); }\n  if (metadataLength < TAG_BYTES || metadataLength > MAX_METADATA_CIPHERTEXT_SIZE) fail(\"E_ENVELOPE_PARSE\", \"invalid metadata ciphertext length\");\n  const metadataCiphertext = take(metadataLength, \"metadata ciphertext\");\n  if (offset !== header.length) fail(\"E_ENVELOPE_PARSE\", \"trailing bytes in file envelope header\");\n\n  const expectedCount = validateGeometry(plaintextSize, chunkSize);\n  if (chunkCount !== expectedCount) fail(\"E_ENVELOPE_PARSE\", \"chunk count does not match file geometry\");\n  return {\n    chunkSize,\n    plaintextSize,\n    chunkCount,\n    fileId,\n    ageHeader,\n    prefix: header.subarray(MAGIC.length + 4, prefixEnd),\n    metadataNonce,\n    metadataCiphertext,\n    headerCommitment: sha256(header),\n  };\n}\n\nfunction makePublicState(kind, record, header, metadata) {\n  return Object.freeze({\n    kind,\n    version: VERSION,\n    header,\n    metadata,\n    plaintextSize: record.plaintextSize,\n    chunkSize: record.chunkSize,\n    chunkCount: record.chunkCount,\n  });\n}\n\nfunction createFileEncryptionImpl({ recipient, recipients, metadata, plaintextSize, chunkSize = DEFAULT_CHUNK_SIZE }, rng) {\n  if (recipient !== undefined && recipients !== undefined) fail(\"E_INPUT\", \"provide recipient or recipients, not both\");\n  const recipientList = recipients ?? (recipient === undefined ? [] : [recipient]);\n  const chunkCount = validateGeometry(plaintextSize, chunkSize);\n  const fileKey = bytes(rng(16), 16, \"random file key\");\n  let retained = false;\n  try {\n    const fileId = bytes(rng(FILE_ID_BYTES), FILE_ID_BYTES, \"random file id\");\n    const ageHeader = ageInternals.encryptAgeHeader(fileKey, recipientList, rng);\n    if (ageHeader.length > MAX_AGE_HEADER_SIZE) fail(\"E_INPUT\", \"recipient header is too large\");\n    const prefix = structuralPrefix({ chunkSize, plaintextSize, chunkCount, fileId, ageHeader });\n    const metadataNonce = bytes(rng(NONCE_BYTES), NONCE_BYTES, \"random metadata nonce\");\n    const metadataPlaintext = canonicalMetadata(metadata);\n    const metadataKey = deriveMetadataKey(fileKey, fileId);\n    let metadataCiphertext;\n    try { metadataCiphertext = xchacha20poly1305(metadataKey, metadataNonce, metadataAad(prefix)).encrypt(metadataPlaintext); }\n    finally { metadataKey.fill(0); metadataPlaintext.fill(0); }\n    if (metadataCiphertext.length > MAX_METADATA_CIPHERTEXT_SIZE) fail(\"E_METADATA\", \"encrypted metadata is too large\");\n    const body = concat(prefix, metadataNonce, u32(metadataCiphertext.length), metadataCiphertext);\n    if (body.length > MAX_HEADER_SIZE) fail(\"E_INPUT\", \"file envelope header is too large\");\n    const header = concat(MAGIC, u32(body.length), body);\n    const record = {\n      fileKey,\n      fileId: new Uint8Array(fileId),\n      plaintextSize,\n      chunkSize,\n      chunkCount,\n      headerCommitment: sha256(header),\n      rng,\n      seen: new Set(),\n    };\n    const state = makePublicState(\"encryption\", record, header, undefined);\n    encryptionStates.set(state, record);\n    retained = true;\n    return state;\n  } finally {\n    if (!retained) fileKey.fill(0);\n  }\n}\n\nexport function createFileEncryption(options) {\n  return createFileEncryptionImpl(options, randomBytes);\n}\n\nexport function encryptChunk({ state, index, plaintext }) {\n  const record = encryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-encryption state\");\n  bytes(plaintext);\n  const expected = expectedPlaintextLength(record, index);\n  if (plaintext.length !== expected) fail(\"E_CHUNK_SIZE\", `chunk ${index} must contain exactly ${expected} plaintext bytes`);\n  const nonce = bytes(record.rng(NONCE_BYTES), NONCE_BYTES, \"random chunk nonce\");\n  const key = deriveChunkKey(record.fileKey, record.fileId, index);\n  let ciphertext;\n  try { ciphertext = xchacha20poly1305(key, nonce, chunkAad(record, index)).encrypt(plaintext); }\n  finally { key.fill(0); }\n  record.seen.add(index);\n  return concat(nonce, ciphertext);\n}\n\nexport function openFileEnvelope({ identity, header }) {\n  const parsed = parseEnvelopeHeader(header);\n  const fileKey = ageInternals.decryptAgeHeader(parsed.ageHeader, identity);\n  let retained = false;\n  try {\n    const metadataKey = deriveMetadataKey(fileKey, parsed.fileId);\n    let metadataPlaintext;\n    try { metadataPlaintext = xchacha20poly1305(metadataKey, parsed.metadataNonce, metadataAad(parsed.prefix)).decrypt(parsed.metadataCiphertext); }\n    catch { fail(\"E_ENVELOPE_AUTH\", \"file metadata authentication failed\"); }\n    finally { metadataKey.fill(0); }\n    let metadata;\n    try { metadata = parseMetadata(metadataPlaintext); }\n    finally { metadataPlaintext.fill(0); }\n    const record = {\n      fileKey,\n      fileId: new Uint8Array(parsed.fileId),\n      plaintextSize: parsed.plaintextSize,\n      chunkSize: parsed.chunkSize,\n      chunkCount: parsed.chunkCount,\n      headerCommitment: new Uint8Array(parsed.headerCommitment),\n      seen: new Set(),\n    };\n    const state = makePublicState(\"decryption\", record, new Uint8Array(header), metadata);\n    decryptionStates.set(state, record);\n    retained = true;\n    return state;\n  } finally {\n    if (!retained) fileKey.fill(0);\n  }\n}\n\nexport function decryptChunk({ state, index, ciphertext }) {\n  const record = decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-decryption state\");\n  bytes(ciphertext);\n  const expected = expectedPlaintextLength(record, index);\n  if (ciphertext.length !== NONCE_BYTES + expected + TAG_BYTES)\n    fail(\"E_CHUNK_SIZE\", `chunk ${index} ciphertext has the wrong length`);\n  const nonce = ciphertext.subarray(0, NONCE_BYTES);\n  const body = ciphertext.subarray(NONCE_BYTES);\n  const key = deriveChunkKey(record.fileKey, record.fileId, index);\n  let plaintext;\n  try { plaintext = xchacha20poly1305(key, nonce, chunkAad(record, index)).decrypt(body); }\n  catch { fail(\"E_CHUNK_AUTH\", `chunk ${index} authentication failed`); }\n  finally { key.fill(0); }\n  record.seen.add(index);\n  return plaintext;\n}\n\nexport function finalizeEnvelope(state) {\n  const record = encryptionStates.get(state) ?? decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-envelope state\");\n  if (record.seen.size !== record.chunkCount) fail(\"E_ENVELOPE_INCOMPLETE\", `expected ${record.chunkCount} authenticated chunks, observed ${record.seen.size}`);\n  const finalized = Object.freeze({\n    version: VERSION,\n    header: state.header,\n    metadata: state.metadata,\n    plaintextSize: record.plaintextSize,\n    chunkSize: record.chunkSize,\n    chunkCount: record.chunkCount,\n  });\n  disposeEnvelope(state);\n  return finalized;\n}\n\nexport function disposeEnvelope(state) {\n  const record = encryptionStates.get(state) ?? decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not an active file-envelope state\");\n  record.fileKey.fill(0);\n  record.seen.clear();\n  encryptionStates.delete(state);\n  decryptionStates.delete(state);\n}\n\nexport const fileInternals = Object.freeze({\n  createFileEncryptionWithRandom: createFileEncryptionImpl,\n  parseEnvelopeHeader,\n  metadataAad,\n  chunkAad,\n  constants: Object.freeze({ MAGIC, VERSION, NONCE_BYTES, TAG_BYTES, DEFAULT_CHUNK_SIZE, MIN_CHUNK_SIZE, MAX_CHUNK_SIZE }),\n});\n"],
-  "mappings": ";AAAO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YAAY,MAAM,SAAS;AACzB,UAAM,GAAG,IAAI,KAAK,OAAO,EAAE;AAC3B,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,OAAO,CAAC,MAAM,YAAY;AACrC,QAAM,IAAI,cAAc,MAAM,OAAO;AACvC;;;ACVA,SAAS,wBAAwB;AACjC,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,mBAAmB;;;ACL5B,IAAM,SAAS;AACf,IAAM,eAAe,IAAI,WAAW,GAAG,EAAE,KAAK,EAAE;AAChD,SAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,IAAK,cAAa,OAAO,WAAW,CAAC,CAAC,IAAI;AAEtE,IAAM,QAAQ,IAAI,WAAW,CAAC;AAC9B,IAAM,OAAO,CAAC,UAAU,IAAI,YAAY,EAAE,OAAO,KAAK;AAEtD,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;AACnD,MAAI,EAAE,iBAAiB,YAAa,OAAM,IAAI,UAAU,GAAG,IAAI,uBAAuB;AACtF,MAAI,WAAW,UAAa,MAAM,WAAW,OAAQ,OAAM,IAAI,UAAU,GAAG,IAAI,YAAY,MAAM,QAAQ;AAC1G,SAAO;AACT;AAEO,SAAS,UAAU,OAAO;AAC/B,QAAM,SAAS,MAAM,OAAO,CAAC,KAAK,SAAS,MAAM,MAAM,IAAI,EAAE,QAAQ,CAAC;AACtE,QAAM,MAAM,IAAI,WAAW,MAAM;AACjC,MAAI,SAAS;AACb,aAAW,QAAQ,OAAO;AACxB,QAAI,IAAI,MAAM,MAAM;AACpB,cAAU,KAAK;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,MAAM,GAAG,GAAG;AAC1B,MAAI,EAAE,aAAa,eAAe,EAAE,aAAa,eAAe,EAAE,WAAW,EAAE,OAAQ,QAAO;AAC9F,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,SAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;AACrD,SAAO,SAAS;AAClB;AAEO,SAAS,QAAQ,OAAO;AAC7B,MAAI,MAAM;AACV,aAAW,QAAQ,MAAO,QAAO;AACjC,SAAO,QAAQ;AACjB;AAEO,SAAS,IAAI,OAAO;AACzB,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,WAAY,OAAM,IAAI,WAAW,uBAAuB;AAC7G,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,MAAI,SAAS,IAAI,MAAM,EAAE,UAAU,GAAG,OAAO,KAAK;AAClD,SAAO;AACT;AAEO,SAAS,IAAI,OAAO;AACzB,MAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,EAAG,OAAM,IAAI,WAAW,0CAA0C;AAC9G,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,QAAM,OAAO,IAAI,SAAS,IAAI,MAAM;AACpC,QAAM,MAAM,OAAO,KAAK;AACxB,OAAK,UAAU,GAAG,OAAO,OAAO,GAAG,GAAG,KAAK;AAC3C,OAAK,UAAU,GAAG,OAAO,MAAM,WAAW,GAAG,KAAK;AAClD,SAAO;AACT;AAEO,SAAS,QAAQ,OAAO,QAAQ;AACrC,MAAI,SAAS,KAAK,SAAS,IAAI,MAAM,OAAQ,OAAM,IAAI,WAAW,kBAAkB;AACpF,SAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,aAAa,QAAQ,CAAC,EAAE,UAAU,GAAG,KAAK;AACpF;AAEO,SAAS,QAAQ,OAAO,QAAQ;AACrC,MAAI,SAAS,KAAK,SAAS,IAAI,MAAM,OAAQ,OAAM,IAAI,WAAW,kBAAkB;AACpF,QAAM,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,aAAa,QAAQ,CAAC;AACpE,QAAM,MAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC,KAAK,MAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC;AACvF,MAAI,MAAM,OAAO,OAAO,gBAAgB,EAAG,OAAM,IAAI,WAAW,8CAA8C;AAC9G,SAAO,OAAO,GAAG;AACnB;AAEO,SAAS,aAAa,OAAO,EAAE,UAAU,MAAM,IAAI,CAAC,GAAG;AAC5D,QAAM,KAAK;AACX,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;AACxC,UAAM,IAAI,MAAM,CAAC;AACjB,UAAM,QAAQ,IAAI,IAAI,MAAM;AAC5B,UAAM,QAAQ,IAAI,IAAI,MAAM;AAC5B,UAAM,IAAI,QAAQ,MAAM,IAAI,CAAC,IAAI;AACjC,UAAM,IAAI,QAAQ,MAAM,IAAI,CAAC,IAAI;AACjC,WAAO,OAAO,MAAM,CAAC;AACrB,WAAO,QAAS,IAAI,MAAM,IAAM,MAAM,CAAE;AACxC,QAAI,MAAO,QAAO,QAAS,IAAI,OAAO,IAAM,MAAM,CAAE;AAAA,aAC3C,QAAS,QAAO;AACzB,QAAI,MAAO,QAAO,OAAO,IAAI,EAAE;AAAA,aACtB,QAAS,QAAO;AAAA,EAC3B;AACA,SAAO;AACT;AAEO,SAAS,aAAa,OAAO,EAAE,UAAU,MAAM,IAAI,CAAC,GAAG;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,SAAS;AACX,QAAI,CAAC,yBAAyB,KAAK,KAAK,KAAK,MAAM,SAAS,MAAM,EAAG,QAAO;AAAA,EAC9E,WAAW,CAAC,mBAAmB,KAAK,KAAK,KAAK,MAAM,SAAS,MAAM,EAAG,QAAO;AAE7E,QAAM,WAAW,UAAU,MAAM,QAAQ,OAAO,EAAE,IAAI;AACtD,QAAM,eAAe,KAAK,MAAO,SAAS,SAAS,IAAK,CAAC;AACzD,QAAM,MAAM,IAAI,WAAW,YAAY;AACvC,MAAI,cAAc;AAClB,MAAI,OAAO;AACX,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,UAAM,OAAO,SAAS,WAAW,CAAC;AAClC,QAAI,QAAQ,aAAa,UAAU,aAAa,IAAI,IAAI,EAAG,QAAO;AAClE,kBAAe,eAAe,IAAK,aAAa,IAAI;AACpD,YAAQ;AACR,QAAI,QAAQ,GAAG;AACb,cAAQ;AACR,UAAI,QAAQ,IAAK,gBAAgB,OAAQ;AAAA,IAC3C;AAAA,EACF;AACA,MAAI,OAAO,MAAM,eAAgB,KAAK,QAAQ,OAAQ,EAAG,QAAO;AAChE,MAAI,aAAa,KAAK,EAAE,QAAQ,CAAC,MAAM,MAAO,QAAO;AACrD,SAAO;AACT;;;AC/GA,IAAM,UAAU;AAChB,IAAM,aAAa,CAAC,WAAY,WAAY,WAAY,YAAY,SAAU;AAE9E,SAAS,QAAQ,QAAQ;AACvB,MAAI,WAAW;AACf,aAAW,SAAS,QAAQ;AAC1B,UAAM,MAAM,aAAa;AACzB,gBAAa,WAAW,aAAc,IAAK;AAC3C,aAAS,IAAI,GAAG,IAAI,GAAG,IAAK,KAAK,QAAQ,IAAK,EAAG,aAAY,WAAW,CAAC;AAAA,EAC3E;AACA,SAAO,aAAa;AACtB;AAEA,SAAS,UAAU,KAAK;AACtB,QAAM,MAAM,CAAC;AACb,aAAW,QAAQ,IAAK,KAAI,KAAK,KAAK,WAAW,CAAC,MAAM,CAAC;AACzD,MAAI,KAAK,CAAC;AACV,aAAW,QAAQ,IAAK,KAAI,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE;AACxD,SAAO;AACT;AAEA,SAAS,YAAY,MAAM,MAAM,IAAI,KAAK;AACxC,MAAI,cAAc;AAClB,MAAI,OAAO;AACX,QAAM,MAAM,CAAC;AACb,QAAM,WAAW,KAAK,MAAM;AAC5B,aAAW,SAAS,MAAM;AACxB,QAAI,QAAQ,KAAK,UAAU,KAAM,QAAO;AACxC,kBAAe,eAAe,OAAQ;AACtC,YAAQ;AACR,WAAO,QAAQ,IAAI;AACjB,cAAQ;AACR,UAAI,KAAM,gBAAgB,OAAQ,OAAO;AAAA,IAC3C;AAAA,EACF;AACA,MAAI,OAAO,KAAM,KAAI,KAAM,eAAgB,KAAK,OAAS,OAAO;AAAA,WACvD,CAAC,QAAQ,QAAQ,QAAU,eAAgB,KAAK,OAAS,SAAW,QAAO;AACpF,SAAO;AACT;AAEO,SAAS,aAAa,KAAK,MAAM;AACtC,QAAM,QAAQ,YAAY,MAAM,GAAG,GAAG,IAAI;AAC1C,QAAM,SAAS,CAAC,GAAG,UAAU,GAAG,GAAG,GAAG,KAAK;AAC3C,QAAM,MAAM,QAAQ,CAAC,GAAG,QAAQ,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI;AACrD,QAAM,WAAW,CAAC;AAClB,WAAS,IAAI,GAAG,IAAI,GAAG,IAAK,UAAS,KAAM,QAAS,KAAK,IAAI,KAAO,EAAE;AACtE,SAAO,MAAM,MAAM,CAAC,GAAG,OAAO,GAAG,QAAQ,EAAE,IAAI,CAAC,SAAS,QAAQ,IAAI,CAAC,EAAE,KAAK,EAAE;AACjF;AAEO,SAAS,aAAa,OAAO;AAClC,MAAI,OAAO,UAAU,YAAa,UAAU,MAAM,YAAY,KAAK,UAAU,MAAM,YAAY,EAAI,QAAO;AAC1G,QAAM,aAAa,MAAM,YAAY;AACrC,QAAM,YAAY,WAAW,YAAY,GAAG;AAC5C,MAAI,YAAY,KAAK,YAAY,IAAI,WAAW,OAAQ,QAAO;AAC/D,QAAM,MAAM,WAAW,MAAM,GAAG,SAAS;AACzC,QAAM,QAAQ,CAAC;AACf,aAAW,QAAQ,WAAW,MAAM,YAAY,CAAC,GAAG;AAClD,UAAM,OAAO,QAAQ,QAAQ,IAAI;AACjC,QAAI,SAAS,GAAI,QAAO;AACxB,UAAM,KAAK,IAAI;AAAA,EACjB;AACA,MAAI,QAAQ,CAAC,GAAG,UAAU,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAG,QAAO;AACzD,QAAM,OAAO,YAAY,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,GAAG,KAAK;AACxD,SAAO,SAAS,OAAO,OAAO,EAAE,KAAK,MAAM,IAAI,WAAW,IAAI,EAAE;AAClE;;;AFtDA,IAAM,eAAe;AACrB,IAAM,kBAAkB,KAAK,8BAA8B;AAC3D,IAAM,kBAAkB,KAAK,QAAQ;AACrC,IAAM,aAAa,IAAI,WAAW,EAAE;AAEpC,IAAM,SAAS,CAAC,WAAW,YAAY,MAAM;AAEtC,SAAS,eAAe,WAAW;AACxC,MAAI,OAAO,cAAc,YAAY,cAAc,UAAU,YAAY,EAAG,MAAK,eAAe,kDAAkD;AAClJ,QAAM,UAAU,aAAa,SAAS;AACtC,MAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,KAAK,WAAW,MAAM,aAAa,OAAO,QAAQ,IAAI,MAAM;AAC3G,SAAK,eAAe,8BAA8B;AACpD,SAAO,QAAQ;AACjB;AAEO,SAAS,cAAc,UAAU;AACtC,MAAI,OAAO,aAAa,YAAa,aAAa,SAAS,YAAY,KAAK,aAAa,SAAS,YAAY;AAC5G,SAAK,cAAc,uCAAuC;AAC5D,QAAM,UAAU,aAAa,QAAQ;AACrC,MAAI,CAAC,WAAW,QAAQ,QAAQ,qBAAqB,QAAQ,KAAK,WAAW,MAAM,aAAa,mBAAmB,QAAQ,IAAI,MAAM,SAAS,YAAY;AACxJ,SAAK,cAAc,6BAA6B;AAClD,SAAO,QAAQ;AACjB;AAEO,SAAS,sBAAsB,UAAU;AAC9C,SAAO,aAAa,OAAO,OAAO,aAAa,cAAc,QAAQ,CAAC,CAAC;AACzE;AAEO,SAAS,gBAAgB,WAAW;AACzC,SAAO,aAAa,OAAO,MAAM,WAAW,IAAI,WAAW,CAAC;AAC9D;AAEO,SAAS,eAAe,WAAW;AACxC,SAAO,aAAa,mBAAmB,MAAM,WAAW,IAAI,WAAW,CAAC,EAAE,YAAY;AACxF;AAEO,SAAS,uBAAuB,WAAW;AAChD,SAAO,OAAO,aAAa,MAAM,WAAW,IAAI,WAAW,CAAC;AAC9D;AAEO,SAAS,0BAA0B;AACxC,SAAO,kCAAkC,OAAO,EAAE,CAAC;AACrD;AAEO,SAAS,kCAAkC,WAAW;AAC3D,QAAM,SAAS,MAAM,WAAW,IAAI,WAAW;AAC/C,SAAO,EAAE,UAAU,eAAe,MAAM,GAAG,WAAW,gBAAgB,uBAAuB,MAAM,CAAC,EAAE;AACxG;AAEA,SAAS,YAAY,QAAQ;AAC3B,QAAM,MAAM;AACZ,MAAI,WAAW;AACf,QAAM,OAAO,MAAM;AACjB,UAAM,UAAU,OAAO,QAAQ,IAAM,QAAQ;AAC7C,QAAI,YAAY,GAAI,MAAK,sBAAsB,sBAAsB;AACrE,UAAM,QAAQ,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,OAAO,SAAS,UAAU,OAAO,CAAC;AACjG,eAAW,UAAU;AACrB,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AAAE,cAAU,KAAK;AAAA,EAAG,SACjB,OAAO;AAAE,QAAI,OAAO,KAAM,OAAM;AAAO,SAAK,sBAAsB,+BAA+B;AAAA,EAAG;AAC3G,MAAI,YAAY,aAAc,MAAK,wBAAwB,gCAAgC;AAE3F,QAAM,UAAU,CAAC;AACjB,aAAS;AACP,QAAI;AACJ,QAAI;AAAE,gBAAU,KAAK;AAAA,IAAG,SACjB,OAAO;AAAE,UAAI,OAAO,KAAM,OAAM;AAAO,WAAK,sBAAsB,+BAA+B;AAAA,IAAG;AAC3G,QAAI,QAAQ,WAAW,MAAM,GAAG;AAC9B,YAAM,MAAM,aAAa,QAAQ,MAAM,CAAC,CAAC;AACzC,UAAI,CAAC,OAAO,IAAI,WAAW,MAAM,aAAa,OAAO,OAAQ,MAAK,sBAAsB,6BAA6B;AACrH,YAAM,YAAY,WAAW,QAAQ,SAAS,IAAI;AAClD,aAAO,EAAE,SAAS,KAAK,eAAe,OAAO,SAAS,GAAG,SAAS,EAAE;AAAA,IACtE;AACA,QAAI,CAAC,QAAQ,WAAW,KAAK,EAAG,MAAK,sBAAsB,8BAA8B;AACzF,UAAM,OAAO,QAAQ,MAAM,CAAC,EAAE,MAAM,GAAG;AACvC,QAAI,KAAK,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,EAAG,MAAK,sBAAsB,iCAAiC;AACtG,UAAM,YAAY,CAAC;AACnB,eAAS;AACP,UAAI;AACJ,UAAI;AAAE,mBAAW,KAAK;AAAA,MAAG,SAClB,OAAO;AAAE,YAAI,OAAO,KAAM,OAAM;AAAO,aAAK,sBAAsB,+BAA+B;AAAA,MAAG;AAC3G,UAAI,CAAC,mBAAmB,KAAK,QAAQ,KAAK,SAAS,SAAS,GAAI,MAAK,sBAAsB,yBAAyB;AACpH,gBAAU,KAAK,QAAQ;AACvB,UAAI,SAAS,SAAS,GAAI;AAAA,IAC5B;AACA,UAAM,OAAO,aAAa,UAAU,KAAK,EAAE,CAAC;AAC5C,QAAI,CAAC,KAAM,MAAK,sBAAsB,+BAA+B;AACrE,YAAQ,KAAK,EAAE,MAAM,KAAK,CAAC;AAAA,EAC7B;AACF;AAEA,SAAS,iBAAiB,SAAS,YAAY,KAAK;AAClD,QAAM,SAAS,IAAI,SAAS;AAC5B,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,EAAG,MAAK,eAAe,oCAAoC;AACnH,MAAI,OAAO,GAAG,YAAY;AAAA;AAC1B,aAAW,aAAa,YAAY;AAClC,UAAM,kBAAkB,OAAO,cAAc,WAAW,eAAe,SAAS,IAAI,MAAM,WAAW,IAAI,WAAW;AACpH,UAAM,kBAAkB,IAAI,EAAE;AAC9B,UAAM,iBAAiB,IAAI,eAAe;AAC1C,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,kBAAkB,OAAO,aAAa,eAAe;AAC3D,UAAI;AAAE,iBAAS,OAAO,gBAAgB,iBAAiB,eAAe;AAAA,MAAG,QACnE;AAAE,aAAK,eAAe,uCAAuC;AAAA,MAAG;AACtE,UAAI,QAAQ,MAAM,EAAG,MAAK,eAAe,uCAAuC;AAChF,gBAAU,KAAK,QAAQ,QAAQ,OAAO,iBAAiB,eAAe,GAAG,iBAAiB,EAAE;AAC5F,YAAM,UAAU,iBAAiB,SAAS,UAAU,EAAE,QAAQ,OAAO;AACrE,cAAQ,aAAa,aAAa,eAAe,CAAC;AAAA,EAAK,aAAa,OAAO,CAAC;AAAA;AAAA,IAC9E,UAAE;AACA,sBAAgB,KAAK,CAAC;AACtB,cAAQ,KAAK,CAAC;AACd,eAAS,KAAK,CAAC;AAAA,IACjB;AAAA,EACF;AACA,UAAQ;AACR,QAAM,gBAAgB,KAAK,IAAI;AAC/B,QAAM,SAAS,KAAK,QAAQ,SAAS,OAAO,iBAAiB,EAAE;AAC/D,MAAI;AACF,UAAM,MAAM,KAAK,QAAQ,QAAQ,aAAa;AAC9C,WAAO,KAAK,GAAG,IAAI,IAAI,aAAa,GAAG,CAAC;AAAA,CAAI;AAAA,EAC9C,UAAE;AAAU,WAAO,KAAK,CAAC;AAAA,EAAG;AAC9B;AAEA,SAAS,iBAAiB,QAAQ,UAAU;AAC1C,QAAM,aAAa,OAAO,aAAa;AACvC,QAAM,SAAS,aAAa,cAAc,QAAQ,IAAI,MAAM,UAAU,IAAI,UAAU;AACpF,MAAI,UAAU;AACd,MAAI,gBAAgB;AACpB,MAAI;AACF,UAAM,SAAS,YAAY,MAAM;AACjC,QAAI,OAAO,QAAQ,WAAW,EAAG,MAAK,sBAAsB,8BAA8B;AAC1F,UAAM,kBAAkB,OAAO,aAAa,MAAM;AAClD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,OAAO,KAAK,CAAC,MAAM,SAAU,MAAK,0BAA0B,2CAA2C;AAC3G,UAAI,OAAO,KAAK,WAAW,KAAK,OAAO,KAAK,WAAW,GAAI,MAAK,sBAAsB,uBAAuB;AAC7G,YAAM,kBAAkB,aAAa,OAAO,KAAK,CAAC,CAAC;AACnD,UAAI,CAAC,mBAAmB,gBAAgB,WAAW,GAAI,MAAK,sBAAsB,gCAAgC;AAAA,IACpH;AACA,eAAW,UAAU,OAAO,SAAS;AACnC,YAAM,kBAAkB,aAAa,OAAO,KAAK,CAAC,CAAC;AACnD,UAAI;AACJ,UAAI;AACJ,UAAI;AACF,YAAI;AAAE,mBAAS,OAAO,gBAAgB,QAAQ,eAAe;AAAA,QAAG,QAC1D;AAAE;AAAA,QAAU;AAClB,YAAI,QAAQ,MAAM,EAAG;AACrB,kBAAU,KAAK,QAAQ,QAAQ,OAAO,iBAAiB,eAAe,GAAG,iBAAiB,EAAE;AAC5F,YAAI;AACF,gBAAM,YAAY,iBAAiB,SAAS,UAAU,EAAE,QAAQ,OAAO,IAAI;AAC3E,cAAI,UAAU,WAAW,IAAI;AAAE,sBAAU;AAAW;AAAA,UAAO;AAC3D,oBAAU,KAAK,CAAC;AAAA,QAClB,QAAQ;AAAA,QAAuC;AAAA,MACjD,UAAE;AACA,gBAAQ,KAAK,CAAC;AACd,iBAAS,KAAK,CAAC;AAAA,MACjB;AAAA,IACF;AACA,QAAI,CAAC,QAAS,MAAK,qBAAqB,4CAA4C;AACpF,UAAM,SAAS,KAAK,QAAQ,SAAS,OAAO,iBAAiB,EAAE;AAC/D,UAAM,cAAc,KAAK,QAAQ,QAAQ,OAAO,aAAa;AAC7D,QAAI;AACF,UAAI,CAAC,MAAM,aAAa,OAAO,GAAG,EAAG,MAAK,mBAAmB,kCAAkC;AAC/F,sBAAgB;AAChB,aAAO;AAAA,IACT,UAAE;AACA,aAAO,KAAK,CAAC;AACb,kBAAY,KAAK,CAAC;AAAA,IACpB;AAAA,EACF,UAAE;AACA,QAAI,WAAY,QAAO,KAAK,CAAC;AAC7B,QAAI,CAAC,cAAe,UAAS,KAAK,CAAC;AAAA,EACrC;AACF;AAEO,IAAM,YAAY,OAAO,OAAO;AAAA,EACrC,MAAM,CAAC,SAAS,eAAe,iBAAiB,SAAS,YAAY,MAAM;AAAA,EAC3E,MAAM;AACR,CAAC;AAEM,IAAM,eAAe,OAAO,OAAO,EAAE,kBAAkB,iBAAiB,CAAC;;;AGjMhF,SAAS,yBAAyB;AAClC,SAAS,QAAAA,aAAY;AACrB,SAAS,UAAAC,eAAc;AACvB,SAAS,eAAAC,oBAAmB;AAK5B,IAAM,QAAQ,KAAK,WAAW;AAC9B,IAAM,UAAU;AAChB,IAAM,gBAAgB;AACtB,IAAM,cAAc;AACpB,IAAM,YAAY;AAClB,IAAM,qBAAqB,OAAO;AAClC,IAAM,iBAAiB,KAAK;AAC5B,IAAM,iBAAiB,KAAK,OAAO;AACnC,IAAM,kBAAkB,OAAO;AAC/B,IAAM,sBAAsB,MAAM;AAClC,IAAM,+BAA+B,KAAK;AAE1C,IAAM,oBAAoB,KAAK,8BAA8B;AAC7D,IAAM,iBAAiB,KAAK,2BAA2B;AACvD,IAAM,sBAAsB,KAAK,0BAA0B;AAC3D,IAAM,mBAAmB,KAAK,uBAAuB;AACrD,IAAM,mBAAmB,IAAI,WAAW,CAAC,CAAC,CAAC;AAE3C,IAAM,mBAAmB,oBAAI,QAAQ;AACrC,IAAM,mBAAmB,oBAAI,QAAQ;AAErC,SAAS,iBAAiB,eAAe,WAAW;AAClD,MAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB,EAAG,MAAK,WAAW,mDAAmD;AAClI,MAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,kBAAkB,YAAY;AAC5E,SAAK,WAAW,6BAA6B,cAAc,QAAQ,cAAc,QAAQ;AAC3F,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,gBAAgB,SAAS,CAAC;AACnE,MAAI,aAAa,WAAY,MAAK,WAAW,+BAA+B;AAC5E,SAAO;AACT;AAEA,SAAS,wBAAwB,EAAE,eAAe,WAAW,WAAW,GAAG,OAAO;AAChF,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,SAAS,WAAY,MAAK,iBAAiB,qCAAqC;AAC7H,MAAI,kBAAkB,EAAG,QAAO;AAChC,SAAO,UAAU,aAAa,IAAI,gBAAgB,YAAY,QAAQ;AACxE;AAEA,SAAS,oBAAoB,OAAO,OAAO;AACzC,MAAI,SAAS;AACb,WAAS,SAAS,GAAG,SAAS,MAAM,UAAS;AAC3C,UAAM,QAAQ,MAAM,WAAW,MAAM;AACrC,QAAI;AACJ,QAAI,SAAS,SAAU,SAAS,OAAQ;AACtC,YAAM,SAAS,MAAM,WAAW,SAAS,CAAC;AAC1C,UAAI,EAAE,UAAU,SAAU,UAAU,OAAS,MAAK,cAAc,GAAG,KAAK,0CAA0C;AAClH,kBAAY,MAAM,MAAM,QAAQ,SAAS,CAAC;AAC1C,gBAAU;AAAA,IACZ,OAAO;AACL,UAAI,SAAS,SAAU,SAAS,MAAQ,MAAK,cAAc,GAAG,KAAK,0CAA0C;AAC7G,kBAAY,MAAM,QAAQ;AAAA,IAC5B;AACA,QAAI,cAAc,IAAK,WAAU;AAAA,aACxB,cAAc,KAAM,WAAU;AAAA,aAC9B,UAAU,EAAM,WAAU;AAAA,aAC1B,UAAU,EAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,QAAQ,GAAM,WAAU,MAAM,MAAM,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,QACrE,WAAU;AAAA,EACjB;AACA,SAAO,GAAG,MAAM;AAClB;AAEA,SAAS,kBAAkB,UAAU;AACnC,MAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,EAAG,MAAK,cAAc,4BAA4B;AACzH,MAAI,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,aAAa,cAAc,EAAE,SAAS,GAAG,CAAC;AAC1F,SAAK,cAAc,oCAAoC;AACzD,QAAM,EAAE,MAAM,YAAY,4BAA4B,eAAe,KAAK,IAAI;AAC9E,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,KAAK,IAAI,EAAE,SAAS,QAAQ,yBAAyB,KAAK,IAAI;AACjH,SAAK,cAAc,uEAAuE;AAC5F,MAAI,SAAS,OAAO,SAAS,QAAQ,UAAU,KAAK,IAAI,KAAK,SAAS,KAAK,IAAI,KAAK,mDAAmD,KAAK,IAAI;AAC9I,SAAK,cAAc,6EAA6E;AAClG,MAAI,OAAO,cAAc,YAAY,KAAK,SAAS,EAAE,SAAS,OAAO,CAAC,iBAAiB,KAAK,SAAS;AACnG,SAAK,cAAc,qEAAqE;AAC1F,MAAI,iBAAiB,SAAS,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe;AAClF,SAAK,cAAc,mEAAmE;AACxF,SAAO,KAAK,WAAW,oBAAoB,MAAM,eAAe,CAAC,gBAAgB,oBAAoB,WAAW,oBAAoB,CAAC,mBAAmB,iBAAiB,OAAO,SAAS,OAAO,YAAY,CAAC,GAAG;AAClN;AAEA,SAAS,cAAc,WAAW;AAChC,MAAI;AACJ,MAAI;AAAE,aAAS,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;AAAA,EAAG,QAClF;AAAE,SAAK,cAAc,gDAAgD;AAAA,EAAG;AAC9E,QAAM,YAAY,kBAAkB,MAAM;AAC1C,MAAI,UAAU,WAAW,UAAU,UAAU,UAAU,KAAK,CAAC,MAAM,UAAU,SAAS,UAAU,KAAK,CAAC;AACpG,SAAK,cAAc,qCAAqC;AAC1D,SAAO;AACT;AAEA,SAAS,iBAAiB,EAAE,WAAW,eAAe,YAAY,QAAQ,WAAAC,WAAU,GAAG;AACrF,SAAO,OAAO,IAAI,SAAS,GAAG,IAAI,aAAa,GAAG,IAAI,UAAU,GAAG,QAAQ,IAAIA,WAAU,MAAM,GAAGA,UAAS;AAC7G;AAEA,SAAS,YAAY,QAAQ;AAC3B,SAAO,OAAO,qBAAqB,kBAAkB,IAAI,OAAO,GAAGC,QAAO,OAAO,OAAO,MAAM,CAAC,CAAC;AAClG;AAEA,SAAS,SAAS,QAAQ,OAAO;AAC/B,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,IAAI,OAAO;AAAA,IACX,OAAO;AAAA,IACP,OAAO;AAAA,IACP,IAAI,KAAK;AAAA,IACT,IAAI,OAAO,UAAU;AAAA,IACrB,IAAI,OAAO,aAAa;AAAA,IACxB,IAAI,OAAO,SAAS;AAAA,IACpB,IAAI,QAAQ;AAAA,EACd;AACF;AAEA,SAAS,kBAAkB,SAAS,QAAQ;AAC1C,SAAOC,MAAKD,SAAQ,SAAS,QAAQ,mBAAmB,EAAE;AAC5D;AAEA,SAAS,eAAe,SAAS,QAAQ,OAAO;AAC9C,SAAOC,MAAKD,SAAQ,SAAS,OAAO,QAAQ,IAAI,KAAK,CAAC,GAAG,gBAAgB,EAAE;AAC7E;AAEA,SAAS,oBAAoB,QAAQ;AACnC,QAAM,MAAM;AACZ,MAAI,OAAO,SAAS,MAAM,SAAS,KAAK,MAAM,KAAK,CAAC,MAAM,UAAU,OAAO,KAAK,MAAM,IAAI;AACxF,SAAK,sBAAsB,4CAA4C;AACzE,MAAI;AACJ,MAAI;AAAE,iBAAa,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAAG,QAC5C;AAAE,SAAK,oBAAoB,iCAAiC;AAAA,EAAG;AACrE,MAAI,aAAa,mBAAmB,eAAe,OAAO,SAAS,MAAM,SAAS;AAChF,SAAK,oBAAoB,sCAAsC;AACjE,MAAI,SAAS,MAAM,SAAS;AAC5B,QAAM,OAAO,CAAC,QAAQ,UAAU;AAC9B,QAAI,CAAC,OAAO,UAAU,MAAM,KAAK,SAAS,KAAK,SAAS,SAAS,OAAO,OAAQ,MAAK,oBAAoB,aAAa,KAAK,EAAE;AAC7H,UAAM,QAAQ,OAAO,SAAS,QAAQ,SAAS,MAAM;AACrD,cAAU;AACV,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,eAAe,YAAY,iBAAiB;AAC3D,MAAI;AACF,gBAAY,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAC/C,oBAAgB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AACnD,iBAAa,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAClD,QAAQ;AAAE,SAAK,oBAAoB,uBAAuB;AAAA,EAAG;AAC7D,QAAM,SAAS,KAAK,eAAe,SAAS;AAC5C,MAAI;AAAE,sBAAkB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAAG,QACxD;AAAE,SAAK,oBAAoB,6BAA6B;AAAA,EAAG;AACjE,MAAI,oBAAoB,KAAK,kBAAkB,oBAAqB,MAAK,oBAAoB,2BAA2B;AACxH,QAAMD,aAAY,KAAK,iBAAiB,YAAY;AACpD,QAAM,YAAY;AAClB,QAAM,gBAAgB,KAAK,aAAa,gBAAgB;AACxD,MAAI;AAAE,qBAAiB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAAG,QACvD;AAAE,SAAK,oBAAoB,2BAA2B;AAAA,EAAG;AAC/D,MAAI,iBAAiB,aAAa,iBAAiB,6BAA8B,MAAK,oBAAoB,oCAAoC;AAC9I,QAAM,qBAAqB,KAAK,gBAAgB,qBAAqB;AACrE,MAAI,WAAW,OAAO,OAAQ,MAAK,oBAAoB,wCAAwC;AAE/F,QAAM,gBAAgB,iBAAiB,eAAe,SAAS;AAC/D,MAAI,eAAe,cAAe,MAAK,oBAAoB,0CAA0C;AACrG,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAAA;AAAA,IACA,QAAQ,OAAO,SAAS,MAAM,SAAS,GAAG,SAAS;AAAA,IACnD;AAAA,IACA;AAAA,IACA,kBAAkBC,QAAO,MAAM;AAAA,EACjC;AACF;AAEA,SAAS,gBAAgB,MAAM,QAAQ,QAAQ,UAAU;AACvD,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,eAAe,OAAO;AAAA,IACtB,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,yBAAyB,EAAE,WAAW,YAAY,UAAU,eAAe,YAAY,mBAAmB,GAAG,KAAK;AACzH,MAAI,cAAc,UAAa,eAAe,OAAW,MAAK,WAAW,2CAA2C;AACpH,QAAM,gBAAgB,eAAe,cAAc,SAAY,CAAC,IAAI,CAAC,SAAS;AAC9E,QAAM,aAAa,iBAAiB,eAAe,SAAS;AAC5D,QAAM,UAAU,MAAM,IAAI,EAAE,GAAG,IAAI,iBAAiB;AACpD,MAAI,WAAW;AACf,MAAI;AACF,UAAM,SAAS,MAAM,IAAI,aAAa,GAAG,eAAe,gBAAgB;AACxE,UAAMD,aAAY,aAAa,iBAAiB,SAAS,eAAe,GAAG;AAC3E,QAAIA,WAAU,SAAS,oBAAqB,MAAK,WAAW,+BAA+B;AAC3F,UAAM,SAAS,iBAAiB,EAAE,WAAW,eAAe,YAAY,QAAQ,WAAAA,WAAU,CAAC;AAC3F,UAAM,gBAAgB,MAAM,IAAI,WAAW,GAAG,aAAa,uBAAuB;AAClF,UAAM,oBAAoB,kBAAkB,QAAQ;AACpD,UAAM,cAAc,kBAAkB,SAAS,MAAM;AACrD,QAAI;AACJ,QAAI;AAAE,2BAAqB,kBAAkB,aAAa,eAAe,YAAY,MAAM,CAAC,EAAE,QAAQ,iBAAiB;AAAA,IAAG,UAC1H;AAAU,kBAAY,KAAK,CAAC;AAAG,wBAAkB,KAAK,CAAC;AAAA,IAAG;AAC1D,QAAI,mBAAmB,SAAS,6BAA8B,MAAK,cAAc,iCAAiC;AAClH,UAAM,OAAO,OAAO,QAAQ,eAAe,IAAI,mBAAmB,MAAM,GAAG,kBAAkB;AAC7F,QAAI,KAAK,SAAS,gBAAiB,MAAK,WAAW,mCAAmC;AACtF,UAAM,SAAS,OAAO,OAAO,IAAI,KAAK,MAAM,GAAG,IAAI;AACnD,UAAM,SAAS;AAAA,MACb;AAAA,MACA,QAAQ,IAAI,WAAW,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkBC,QAAO,MAAM;AAAA,MAC/B;AAAA,MACA,MAAM,oBAAI,IAAI;AAAA,IAChB;AACA,UAAM,QAAQ,gBAAgB,cAAc,QAAQ,QAAQ,MAAS;AACrE,qBAAiB,IAAI,OAAO,MAAM;AAClC,eAAW;AACX,WAAO;AAAA,EACT,UAAE;AACA,QAAI,CAAC,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC/B;AACF;AAEO,SAAS,qBAAqB,SAAS;AAC5C,SAAO,yBAAyB,SAASE,YAAW;AACtD;AAEO,SAAS,aAAa,EAAE,OAAO,OAAO,UAAU,GAAG;AACxD,QAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,MAAI,CAAC,OAAQ,MAAK,WAAW,sCAAsC;AACnE,QAAM,SAAS;AACf,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,MAAI,UAAU,WAAW,SAAU,MAAK,gBAAgB,SAAS,KAAK,yBAAyB,QAAQ,kBAAkB;AACzH,QAAM,QAAQ,MAAM,OAAO,IAAI,WAAW,GAAG,aAAa,oBAAoB;AAC9E,QAAM,MAAM,eAAe,OAAO,SAAS,OAAO,QAAQ,KAAK;AAC/D,MAAI;AACJ,MAAI;AAAE,iBAAa,kBAAkB,KAAK,OAAO,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,SAAS;AAAA,EAAG,UAC9F;AAAU,QAAI,KAAK,CAAC;AAAA,EAAG;AACvB,SAAO,KAAK,IAAI,KAAK;AACrB,SAAO,OAAO,OAAO,UAAU;AACjC;AAEO,SAAS,iBAAiB,EAAE,UAAU,OAAO,GAAG;AACrD,QAAM,SAAS,oBAAoB,MAAM;AACzC,QAAM,UAAU,aAAa,iBAAiB,OAAO,WAAW,QAAQ;AACxE,MAAI,WAAW;AACf,MAAI;AACF,UAAM,cAAc,kBAAkB,SAAS,OAAO,MAAM;AAC5D,QAAI;AACJ,QAAI;AAAE,0BAAoB,kBAAkB,aAAa,OAAO,eAAe,YAAY,OAAO,MAAM,CAAC,EAAE,QAAQ,OAAO,kBAAkB;AAAA,IAAG,QACzI;AAAE,WAAK,mBAAmB,qCAAqC;AAAA,IAAG,UACxE;AAAU,kBAAY,KAAK,CAAC;AAAA,IAAG;AAC/B,QAAI;AACJ,QAAI;AAAE,iBAAW,cAAc,iBAAiB;AAAA,IAAG,UACnD;AAAU,wBAAkB,KAAK,CAAC;AAAA,IAAG;AACrC,UAAM,SAAS;AAAA,MACb;AAAA,MACA,QAAQ,IAAI,WAAW,OAAO,MAAM;AAAA,MACpC,eAAe,OAAO;AAAA,MACtB,WAAW,OAAO;AAAA,MAClB,YAAY,OAAO;AAAA,MACnB,kBAAkB,IAAI,WAAW,OAAO,gBAAgB;AAAA,MACxD,MAAM,oBAAI,IAAI;AAAA,IAChB;AACA,UAAM,QAAQ,gBAAgB,cAAc,QAAQ,IAAI,WAAW,MAAM,GAAG,QAAQ;AACpF,qBAAiB,IAAI,OAAO,MAAM;AAClC,eAAW;AACX,WAAO;AAAA,EACT,UAAE;AACA,QAAI,CAAC,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC/B;AACF;AAEO,SAAS,aAAa,EAAE,OAAO,OAAO,WAAW,GAAG;AACzD,QAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,MAAI,CAAC,OAAQ,MAAK,WAAW,sCAAsC;AACnE,QAAM,UAAU;AAChB,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,MAAI,WAAW,WAAW,cAAc,WAAW;AACjD,SAAK,gBAAgB,SAAS,KAAK,kCAAkC;AACvE,QAAM,QAAQ,WAAW,SAAS,GAAG,WAAW;AAChD,QAAM,OAAO,WAAW,SAAS,WAAW;AAC5C,QAAM,MAAM,eAAe,OAAO,SAAS,OAAO,QAAQ,KAAK;AAC/D,MAAI;AACJ,MAAI;AAAE,gBAAY,kBAAkB,KAAK,OAAO,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,IAAI;AAAA,EAAG,QAClF;AAAE,SAAK,gBAAgB,SAAS,KAAK,wBAAwB;AAAA,EAAG,UACtE;AAAU,QAAI,KAAK,CAAC;AAAA,EAAG;AACvB,SAAO,KAAK,IAAI,KAAK;AACrB,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAO;AACtC,QAAM,SAAS,iBAAiB,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK;AACxE,MAAI,CAAC,OAAQ,MAAK,WAAW,oCAAoC;AACjE,MAAI,OAAO,KAAK,SAAS,OAAO,WAAY,MAAK,yBAAyB,YAAY,OAAO,UAAU,mCAAmC,OAAO,KAAK,IAAI,EAAE;AAC5J,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,SAAS;AAAA,IACT,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,eAAe,OAAO;AAAA,IACtB,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,EACrB,CAAC;AACD,kBAAgB,KAAK;AACrB,SAAO;AACT;AAEO,SAAS,gBAAgB,OAAO;AACrC,QAAM,SAAS,iBAAiB,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK;AACxE,MAAI,CAAC,OAAQ,MAAK,WAAW,4CAA4C;AACzE,SAAO,QAAQ,KAAK,CAAC;AACrB,SAAO,KAAK,MAAM;AAClB,mBAAiB,OAAO,KAAK;AAC7B,mBAAiB,OAAO,KAAK;AAC/B;AAEO,IAAM,gBAAgB,OAAO,OAAO;AAAA,EACzC,gCAAgC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,OAAO,OAAO,EAAE,OAAO,SAAS,aAAa,WAAW,oBAAoB,gBAAgB,eAAe,CAAC;AACzH,CAAC;",
+  "sourcesContent": ["export class PkCryptoError extends Error {\n  constructor(code, message) {\n    super(`${code}: ${message}`);\n    this.name = \"PkCryptoError\";\n    this.code = code;\n  }\n}\n\nexport const fail = (code, message) => {\n  throw new PkCryptoError(code, message);\n};\n", "import { chacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { x25519 } from \"@noble/curves/ed25519.js\";\nimport { hkdf } from \"@noble/hashes/hkdf.js\";\nimport { hmac } from \"@noble/hashes/hmac.js\";\nimport { sha256 } from \"@noble/hashes/sha256.js\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport { allZero, bytes, concat, decodeBase64, EMPTY, encodeBase64, equal, utf8 } from \"./bytes.js\";\nimport { decodeBech32, encodeBech32 } from \"./bech32.js\";\nimport { fail } from \"./error.js\";\n\nconst VERSION_LINE = \"age-encryption.org/v1\";\nconst AGE_X25519_INFO = utf8(\"age-encryption.org/v1/X25519\");\nconst AGE_HEADER_INFO = utf8(\"header\");\nconst ZERO_NONCE = new Uint8Array(12);\n\nconst random = (length) => randomBytes(length);\n\nexport function parseRecipient(recipient) {\n  if (typeof recipient !== \"string\" || recipient !== recipient.toLowerCase()) fail(\"E_RECIPIENT\", \"recipient must be canonical lowercase age Bech32\");\n  const decoded = decodeBech32(recipient);\n  if (!decoded || decoded.hrp !== \"age\" || decoded.data.length !== 32 || encodeBech32(\"age\", decoded.data) !== recipient)\n    fail(\"E_RECIPIENT\", \"invalid X25519 age recipient\");\n  return decoded.data;\n}\n\nexport function parseIdentity(identity) {\n  if (typeof identity !== \"string\" || (identity !== identity.toUpperCase() && identity !== identity.toLowerCase()))\n    fail(\"E_IDENTITY\", \"identity must use uniform Bech32 case\");\n  const decoded = decodeBech32(identity);\n  if (!decoded || decoded.hrp !== \"age-secret-key-\" || decoded.data.length !== 32 || encodeBech32(\"age-secret-key-\", decoded.data) !== identity.toLowerCase())\n    fail(\"E_IDENTITY\", \"invalid X25519 age identity\");\n  return decoded.data;\n}\n\nexport function recipientFromIdentity(identity) {\n  return encodeBech32(\"age\", x25519.getPublicKey(parseIdentity(identity)));\n}\n\nexport function formatRecipient(publicKey) {\n  return encodeBech32(\"age\", bytes(publicKey, 32, \"publicKey\"));\n}\n\nexport function formatIdentity(secretKey) {\n  return encodeBech32(\"age-secret-key-\", bytes(secretKey, 32, \"secretKey\")).toUpperCase();\n}\n\nexport function publicKeyFromSecretKey(secretKey) {\n  return x25519.getPublicKey(bytes(secretKey, 32, \"secretKey\"));\n}\n\nexport function createRecipientIdentity() {\n  return createRecipientIdentityFromSecret(random(32));\n}\n\nexport function createRecipientIdentityFromSecret(secretKey) {\n  const scalar = bytes(secretKey, 32, \"secretKey\");\n  return { identity: formatIdentity(scalar), recipient: formatRecipient(publicKeyFromSecretKey(scalar)) };\n}\n\nfunction parseHeader(header) {\n  bytes(header);\n  let position = 0;\n  const line = () => {\n    const newline = header.indexOf(0x0a, position);\n    if (newline === -1) fail(\"E_AGE_HEADER_PARSE\", \"truncated age header\");\n    const value = new TextDecoder(\"utf-8\", { fatal: true }).decode(header.subarray(position, newline));\n    position = newline + 1;\n    return value;\n  };\n\n  let version;\n  try { version = line(); }\n  catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n  if (version !== VERSION_LINE) fail(\"E_AGE_HEADER_VERSION\", \"unsupported age header version\");\n\n  const stanzas = [];\n  for (;;) {\n    let current;\n    try { current = line(); }\n    catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n    if (current.startsWith(\"--- \")) {\n      const mac = decodeBase64(current.slice(4));\n      if (!mac || mac.length !== 32 || position !== header.length) fail(\"E_AGE_HEADER_PARSE\", \"invalid age header MAC line\");\n      const markerEnd = position - current.length - 1 + 3;\n      return { stanzas, mac, authenticated: header.subarray(0, markerEnd) };\n    }\n    if (!current.startsWith(\"-> \")) fail(\"E_AGE_HEADER_PARSE\", \"invalid age recipient stanza\");\n    const args = current.slice(3).split(\" \");\n    if (args.some((arg) => arg.length === 0)) fail(\"E_AGE_HEADER_PARSE\", \"invalid age recipient arguments\");\n    const bodyLines = [];\n    for (;;) {\n      let bodyLine;\n      try { bodyLine = line(); }\n      catch (error) { if (error?.code) throw error; fail(\"E_AGE_HEADER_PARSE\", \"age header is not valid UTF-8\"); }\n      if (!/^[A-Za-z0-9+/]*$/.test(bodyLine) || bodyLine.length > 64) fail(\"E_AGE_HEADER_PARSE\", \"invalid age stanza body\");\n      bodyLines.push(bodyLine);\n      if (bodyLine.length < 64) break;\n    }\n    const body = decodeBase64(bodyLines.join(\"\"));\n    if (!body) fail(\"E_AGE_HEADER_PARSE\", \"non-canonical age stanza body\");\n    stanzas.push({ args, body });\n  }\n}\n\nfunction encryptAgeHeader(fileKey, recipients, rng) {\n  bytes(fileKey, 16, \"fileKey\");\n  if (!Array.isArray(recipients) || recipients.length === 0) fail(\"E_RECIPIENT\", \"at least one recipient is required\");\n  let text = `${VERSION_LINE}\\n`;\n  for (const recipient of recipients) {\n    const recipientPublic = typeof recipient === \"string\" ? parseRecipient(recipient) : bytes(recipient, 32, \"recipient\");\n    const ephemeralSecret = rng(32);\n    bytes(ephemeralSecret, 32, \"random output\");\n    let shared;\n    let wrapKey;\n    try {\n      const ephemeralPublic = x25519.getPublicKey(ephemeralSecret);\n      try { shared = x25519.getSharedSecret(ephemeralSecret, recipientPublic); }\n      catch { fail(\"E_RECIPIENT\", \"recipient is a low-order X25519 point\"); }\n      if (allZero(shared)) fail(\"E_RECIPIENT\", \"recipient is a low-order X25519 point\");\n      wrapKey = hkdf(sha256, shared, concat(ephemeralPublic, recipientPublic), AGE_X25519_INFO, 32);\n      const wrapped = chacha20poly1305(wrapKey, ZERO_NONCE).encrypt(fileKey);\n      text += `-> X25519 ${encodeBase64(ephemeralPublic)}\\n${encodeBase64(wrapped)}\\n`;\n    } finally {\n      ephemeralSecret.fill(0);\n      shared?.fill(0);\n      wrapKey?.fill(0);\n    }\n  }\n  text += \"---\";\n  const authenticated = utf8(text);\n  const macKey = hkdf(sha256, fileKey, EMPTY, AGE_HEADER_INFO, 32);\n  try {\n    const mac = hmac(sha256, macKey, authenticated);\n    return utf8(`${text} ${encodeBase64(mac)}\\n`);\n  } finally { macKey.fill(0); }\n}\n\nfunction decryptAgeHeader(header, identity) {\n  const ownsScalar = typeof identity === \"string\";\n  const scalar = ownsScalar ? parseIdentity(identity) : bytes(identity, 32, \"identity\");\n  let fileKey = null;\n  let authenticated = false;\n  try {\n    const parsed = parseHeader(header);\n    if (parsed.stanzas.length === 0) fail(\"E_AGE_HEADER_PARSE\", \"age header has no recipients\");\n    const recipientPublic = x25519.getPublicKey(scalar);\n    for (const stanza of parsed.stanzas) {\n      if (stanza.args[0] !== \"X25519\") fail(\"E_AGE_HEADER_RECIPIENT\", \"foreign recipient stanza is not supported\");\n      if (stanza.args.length !== 2 || stanza.body.length !== 32) fail(\"E_AGE_HEADER_PARSE\", \"invalid X25519 stanza\");\n      const ephemeralPublic = decodeBase64(stanza.args[1]);\n      if (!ephemeralPublic || ephemeralPublic.length !== 32) fail(\"E_AGE_HEADER_PARSE\", \"invalid X25519 ephemeral share\");\n    }\n    for (const stanza of parsed.stanzas) {\n      const ephemeralPublic = decodeBase64(stanza.args[1]);\n      let shared;\n      let wrapKey;\n      try {\n        try { shared = x25519.getSharedSecret(scalar, ephemeralPublic); }\n        catch { continue; }\n        if (allZero(shared)) continue;\n        wrapKey = hkdf(sha256, shared, concat(ephemeralPublic, recipientPublic), AGE_X25519_INFO, 32);\n        try {\n          const candidate = chacha20poly1305(wrapKey, ZERO_NONCE).decrypt(stanza.body);\n          if (candidate.length === 16) { fileKey = candidate; break; }\n          candidate.fill(0);\n        } catch { /* stanza is for another identity */ }\n      } finally {\n        shared?.fill(0);\n        wrapKey?.fill(0);\n      }\n    }\n    if (!fileKey) fail(\"E_WRONG_RECIPIENT\", \"identity does not match this file envelope\");\n    const macKey = hkdf(sha256, fileKey, EMPTY, AGE_HEADER_INFO, 32);\n    const expectedMac = hmac(sha256, macKey, parsed.authenticated);\n    try {\n      if (!equal(expectedMac, parsed.mac)) fail(\"E_ENVELOPE_AUTH\", \"age header authentication failed\");\n      authenticated = true;\n      return fileKey;\n    } finally {\n      macKey.fill(0);\n      expectedMac.fill(0);\n    }\n  } finally {\n    if (ownsScalar) scalar.fill(0);\n    if (!authenticated) fileKey?.fill(0);\n  }\n}\n\nexport const ageHeader = Object.freeze({\n  seal: (fileKey, recipients) => encryptAgeHeader(fileKey, recipients, random),\n  open: decryptAgeHeader,\n});\n\nexport const ageInternals = Object.freeze({ encryptAgeHeader, decryptAgeHeader });\n", "const BASE64 = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\";\nconst BASE64_VALUE = new Int16Array(128).fill(-1);\nfor (let i = 0; i < BASE64.length; i++) BASE64_VALUE[BASE64.charCodeAt(i)] = i;\n\nexport const EMPTY = new Uint8Array(0);\nexport const utf8 = (value) => new TextEncoder().encode(value);\n\nexport function bytes(value, length, name = \"value\") {\n  if (!(value instanceof Uint8Array)) throw new TypeError(`${name} must be a Uint8Array`);\n  if (length !== undefined && value.length !== length) throw new TypeError(`${name} must be ${length} bytes`);\n  return value;\n}\n\nexport function concat(...parts) {\n  const length = parts.reduce((sum, part) => sum + bytes(part).length, 0);\n  const out = new Uint8Array(length);\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\nexport function equal(a, b) {\n  if (!(a instanceof Uint8Array) || !(b instanceof Uint8Array) || a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n  return diff === 0;\n}\n\nexport function allZero(value) {\n  let acc = 0;\n  for (const byte of value) acc |= byte;\n  return acc === 0;\n}\n\nexport function u32(value) {\n  if (!Number.isInteger(value) || value < 0 || value > 0xffffffff) throw new RangeError(\"value is not a uint32\");\n  const out = new Uint8Array(4);\n  new DataView(out.buffer).setUint32(0, value, false);\n  return out;\n}\n\nexport function u64(value) {\n  if (!Number.isSafeInteger(value) || value < 0) throw new RangeError(\"value is not a non-negative safe integer\");\n  const out = new Uint8Array(8);\n  const view = new DataView(out.buffer);\n  const big = BigInt(value);\n  view.setUint32(0, Number(big >> 32n), false);\n  view.setUint32(4, Number(big & 0xffffffffn), false);\n  return out;\n}\n\nexport function readU32(value, offset) {\n  if (offset < 0 || offset + 4 > value.length) throw new RangeError(\"truncated uint32\");\n  return new DataView(value.buffer, value.byteOffset + offset, 4).getUint32(0, false);\n}\n\nexport function readU64(value, offset) {\n  if (offset < 0 || offset + 8 > value.length) throw new RangeError(\"truncated uint64\");\n  const view = new DataView(value.buffer, value.byteOffset + offset, 8);\n  const big = (BigInt(view.getUint32(0, false)) << 32n) | BigInt(view.getUint32(4, false));\n  if (big > BigInt(Number.MAX_SAFE_INTEGER)) throw new RangeError(\"uint64 exceeds JavaScript safe integer range\");\n  return Number(big);\n}\n\nexport function encodeBase64(value, { padding = false } = {}) {\n  bytes(value);\n  let out = \"\";\n  for (let i = 0; i < value.length; i += 3) {\n    const a = value[i];\n    const haveB = i + 1 < value.length;\n    const haveC = i + 2 < value.length;\n    const b = haveB ? value[i + 1] : 0;\n    const c = haveC ? value[i + 2] : 0;\n    out += BASE64[a >>> 2];\n    out += BASE64[((a & 3) << 4) | (b >>> 4)];\n    if (haveB) out += BASE64[((b & 15) << 2) | (c >>> 6)];\n    else if (padding) out += \"=\";\n    if (haveC) out += BASE64[c & 63];\n    else if (padding) out += \"=\";\n  }\n  return out;\n}\n\nexport function decodeBase64(value, { padding = false } = {}) {\n  if (typeof value !== \"string\") return null;\n  if (padding) {\n    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(value) || value.length % 4 !== 0) return null;\n  } else if (!/^[A-Za-z0-9+/]*$/.test(value) || value.length % 4 === 1) return null;\n\n  const stripped = padding ? value.replace(/=+$/, \"\") : value;\n  const outputLength = Math.floor((stripped.length * 6) / 8);\n  const out = new Uint8Array(outputLength);\n  let accumulator = 0;\n  let bits = 0;\n  let offset = 0;\n  for (let i = 0; i < stripped.length; i++) {\n    const code = stripped.charCodeAt(i);\n    if (code >= BASE64_VALUE.length || BASE64_VALUE[code] < 0) return null;\n    accumulator = (accumulator << 6) | BASE64_VALUE[code];\n    bits += 6;\n    if (bits >= 8) {\n      bits -= 8;\n      out[offset++] = (accumulator >>> bits) & 0xff;\n    }\n  }\n  if (bits > 0 && (accumulator & ((1 << bits) - 1)) !== 0) return null;\n  if (encodeBase64(out, { padding }) !== value) return null;\n  return out;\n}\n", "const CHARSET = \"qpzry9x8gf2tvdw0s3jn54khce6mua7l\";\nconst GENERATORS = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3];\n\nfunction polymod(values) {\n  let checksum = 1;\n  for (const value of values) {\n    const top = checksum >>> 25;\n    checksum = ((checksum & 0x1ffffff) << 5) ^ value;\n    for (let i = 0; i < 5; i++) if ((top >>> i) & 1) checksum ^= GENERATORS[i];\n  }\n  return checksum >>> 0;\n}\n\nfunction expandHrp(hrp) {\n  const out = [];\n  for (const char of hrp) out.push(char.charCodeAt(0) >>> 5);\n  out.push(0);\n  for (const char of hrp) out.push(char.charCodeAt(0) & 31);\n  return out;\n}\n\nfunction convertBits(data, from, to, pad) {\n  let accumulator = 0;\n  let bits = 0;\n  const out = [];\n  const maximum = (1 << to) - 1;\n  for (const value of data) {\n    if (value < 0 || value >>> from) return null;\n    accumulator = (accumulator << from) | value;\n    bits += from;\n    while (bits >= to) {\n      bits -= to;\n      out.push((accumulator >>> bits) & maximum);\n    }\n  }\n  if (pad && bits) out.push((accumulator << (to - bits)) & maximum);\n  else if (!pad && (bits >= from || ((accumulator << (to - bits)) & maximum))) return null;\n  return out;\n}\n\nexport function encodeBech32(hrp, data) {\n  const words = convertBits(data, 8, 5, true);\n  const values = [...expandHrp(hrp), ...words];\n  const mod = polymod([...values, 0, 0, 0, 0, 0, 0]) ^ 1;\n  const checksum = [];\n  for (let i = 0; i < 6; i++) checksum.push((mod >>> (5 * (5 - i))) & 31);\n  return hrp + \"1\" + [...words, ...checksum].map((word) => CHARSET[word]).join(\"\");\n}\n\nexport function decodeBech32(value) {\n  if (typeof value !== \"string\" || (value !== value.toLowerCase() && value !== value.toUpperCase())) return null;\n  const normalized = value.toLowerCase();\n  const separator = normalized.lastIndexOf(\"1\");\n  if (separator < 1 || separator + 7 > normalized.length) return null;\n  const hrp = normalized.slice(0, separator);\n  const words = [];\n  for (const char of normalized.slice(separator + 1)) {\n    const word = CHARSET.indexOf(char);\n    if (word === -1) return null;\n    words.push(word);\n  }\n  if (polymod([...expandHrp(hrp), ...words]) !== 1) return null;\n  const data = convertBits(words.slice(0, -6), 5, 8, false);\n  return data === null ? null : { hrp, data: new Uint8Array(data) };\n}\n", "import { xchacha20poly1305 } from \"@noble/ciphers/chacha.js\";\nimport { hkdf } from \"@noble/hashes/hkdf.js\";\nimport { sha256 } from \"@noble/hashes/sha256.js\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport { ageInternals } from \"./age.js\";\nimport { bytes, concat, readU32, readU64, u32, u64, utf8 } from \"./bytes.js\";\nimport { fail } from \"./error.js\";\n\nconst MAGIC = utf8(\"PKFILE1\\n\");\nconst VERSION = 1;\nconst FILE_ID_BYTES = 16;\nconst NONCE_BYTES = 24;\nconst TAG_BYTES = 16;\nconst DEFAULT_CHUNK_SIZE = 1024 * 1024;\nconst MIN_CHUNK_SIZE = 64 * 1024;\nconst MAX_CHUNK_SIZE = 16 * 1024 * 1024;\nconst MAX_HEADER_SIZE = 1024 * 1024;\nconst MAX_AGE_HEADER_SIZE = 256 * 1024;\nconst MAX_METADATA_CIPHERTEXT_SIZE = 64 * 1024;\n\nconst METADATA_KEY_INFO = utf8(\"pksuite/file/metadata-key/v1\");\nconst CHUNK_KEY_INFO = utf8(\"pksuite/file/chunk-key/v1\");\nconst METADATA_AAD_DOMAIN = utf8(\"pksuite/file/metadata/v1\");\nconst CHUNK_AAD_DOMAIN = utf8(\"pksuite/file/chunk/v1\");\nconst DOMAIN_SEPARATOR = new Uint8Array([0]);\n\nconst encryptionStates = new WeakMap();\nconst decryptionStates = new WeakMap();\n\nfunction validateGeometry(plaintextSize, chunkSize) {\n  if (!Number.isSafeInteger(plaintextSize) || plaintextSize < 0) fail(\"E_INPUT\", \"plaintextSize must be a non-negative safe integer\");\n  if (!Number.isInteger(chunkSize) || chunkSize < MIN_CHUNK_SIZE || chunkSize > MAX_CHUNK_SIZE)\n    fail(\"E_INPUT\", `chunkSize must be between ${MIN_CHUNK_SIZE} and ${MAX_CHUNK_SIZE} bytes`);\n  const chunkCount = Math.max(1, Math.ceil(plaintextSize / chunkSize));\n  if (chunkCount > 0xffffffff) fail(\"E_INPUT\", \"file requires too many chunks\");\n  return chunkCount;\n}\n\nfunction expectedPlaintextLength({ plaintextSize, chunkSize, chunkCount }, index) {\n  if (!Number.isInteger(index) || index < 0 || index >= chunkCount) fail(\"E_CHUNK_INDEX\", \"chunk index is outside the envelope\");\n  if (plaintextSize === 0) return 0;\n  return index === chunkCount - 1 ? plaintextSize - chunkSize * index : chunkSize;\n}\n\nfunction canonicalJsonString(value, label) {\n  let result = '\"';\n  for (let offset = 0; offset < value.length;) {\n    const first = value.charCodeAt(offset);\n    let character;\n    if (first >= 0xd800 && first <= 0xdbff) {\n      const second = value.charCodeAt(offset + 1);\n      if (!(second >= 0xdc00 && second <= 0xdfff)) fail(\"E_METADATA\", `${label} must contain only Unicode scalar values`);\n      character = value.slice(offset, offset + 2);\n      offset += 2;\n    } else {\n      if (first >= 0xdc00 && first <= 0xdfff) fail(\"E_METADATA\", `${label} must contain only Unicode scalar values`);\n      character = value[offset++];\n    }\n    if (character === '\"') result += '\\\\\"';\n    else if (character === \"\\\\\") result += \"\\\\\\\\\";\n    else if (first === 0x08) result += \"\\\\b\";\n    else if (first === 0x09) result += \"\\\\t\";\n    else if (first === 0x0a) result += \"\\\\n\";\n    else if (first === 0x0c) result += \"\\\\f\";\n    else if (first === 0x0d) result += \"\\\\r\";\n    else if (first < 0x20) result += `\\\\u${first.toString(16).padStart(4, \"0\")}`;\n    else result += character;\n  }\n  return `${result}\"`;\n}\n\nfunction canonicalMetadata(metadata) {\n  if (!metadata || typeof metadata !== \"object\" || Array.isArray(metadata)) fail(\"E_METADATA\", \"metadata must be an object\");\n  if (Object.keys(metadata).some((key) => ![\"name\", \"mediaType\", \"lastModified\"].includes(key)))\n    fail(\"E_METADATA\", \"metadata contains an unknown field\");\n  const { name, mediaType = \"application/octet-stream\", lastModified = null } = metadata;\n  if (typeof name !== \"string\" || name.length === 0 || utf8(name).length > 4096 || /[\\u0000-\\u001f\\u007f]/u.test(name))\n    fail(\"E_METADATA\", \"metadata.name must be a non-empty filename without control characters\");\n  if (name === \".\" || name === \"..\" || /[\\\\/:]/u.test(name) || /[ .]$/u.test(name) || /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\\.|$)/iu.test(name))\n    fail(\"E_METADATA\", \"metadata.name must be a portable single filename, not a path or device name\");\n  if (typeof mediaType !== \"string\" || utf8(mediaType).length > 255 || !/^[\\x20-\\x7e]*$/.test(mediaType))\n    fail(\"E_METADATA\", \"metadata.mediaType must be printable ASCII no longer than 255 bytes\");\n  if (lastModified !== null && (!Number.isSafeInteger(lastModified) || lastModified < 0))\n    fail(\"E_METADATA\", \"metadata.lastModified must be null or a non-negative safe integer\");\n  return utf8(`{\"name\":${canonicalJsonString(name, \"metadata.name\")},\"mediaType\":${canonicalJsonString(mediaType, \"metadata.mediaType\")},\"lastModified\":${lastModified === null ? \"null\" : String(lastModified)}}`);\n}\n\nfunction parseMetadata(plaintext) {\n  let parsed;\n  try { parsed = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(plaintext)); }\n  catch { fail(\"E_METADATA\", \"encrypted metadata is not canonical UTF-8 JSON\"); }\n  const canonical = canonicalMetadata(parsed);\n  if (canonical.length !== plaintext.length || canonical.some((byte, index) => byte !== plaintext[index]))\n    fail(\"E_METADATA\", \"encrypted metadata is not canonical\");\n  return parsed;\n}\n\nfunction structuralPrefix({ chunkSize, plaintextSize, chunkCount, fileId, ageHeader }) {\n  return concat(u32(chunkSize), u64(plaintextSize), u32(chunkCount), fileId, u32(ageHeader.length), ageHeader);\n}\n\nfunction metadataAad(prefix) {\n  return concat(METADATA_AAD_DOMAIN, DOMAIN_SEPARATOR, u32(VERSION), sha256(concat(MAGIC, prefix)));\n}\n\nfunction chunkAad(record, index) {\n  const expected = expectedPlaintextLength(record, index);\n  return concat(\n    CHUNK_AAD_DOMAIN,\n    DOMAIN_SEPARATOR,\n    u32(VERSION),\n    record.fileId,\n    record.headerCommitment,\n    u32(index),\n    u32(record.chunkCount),\n    u64(record.plaintextSize),\n    u32(record.chunkSize),\n    u32(expected),\n  );\n}\n\nfunction deriveMetadataKey(fileKey, fileId) {\n  return hkdf(sha256, fileKey, fileId, METADATA_KEY_INFO, 32);\n}\n\nfunction deriveChunkKey(fileKey, fileId, index) {\n  return hkdf(sha256, fileKey, concat(fileId, u32(index)), CHUNK_KEY_INFO, 32);\n}\n\nfunction parseEnvelopeHeader(header) {\n  bytes(header);\n  if (header.length < MAGIC.length + 4 || MAGIC.some((byte, index) => header[index] !== byte))\n    fail(\"E_ENVELOPE_VERSION\", \"unsupported file envelope magic or version\");\n  let bodyLength;\n  try { bodyLength = readU32(header, MAGIC.length); }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated file envelope prelude\"); }\n  if (bodyLength > MAX_HEADER_SIZE || bodyLength !== header.length - MAGIC.length - 4)\n    fail(\"E_ENVELOPE_PARSE\", \"file envelope header length mismatch\");\n  let offset = MAGIC.length + 4;\n  const take = (length, label) => {\n    if (!Number.isInteger(length) || length < 0 || offset + length > header.length) fail(\"E_ENVELOPE_PARSE\", `truncated ${label}`);\n    const value = header.subarray(offset, offset + length);\n    offset += length;\n    return value;\n  };\n\n  let chunkSize, plaintextSize, chunkCount, ageHeaderLength, metadataLength;\n  try {\n    chunkSize = readU32(header, offset); offset += 4;\n    plaintextSize = readU64(header, offset); offset += 8;\n    chunkCount = readU32(header, offset); offset += 4;\n  } catch { fail(\"E_ENVELOPE_PARSE\", \"invalid file geometry\"); }\n  const fileId = take(FILE_ID_BYTES, \"file id\");\n  try { ageHeaderLength = readU32(header, offset); offset += 4; }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated age header length\"); }\n  if (ageHeaderLength === 0 || ageHeaderLength > MAX_AGE_HEADER_SIZE) fail(\"E_ENVELOPE_PARSE\", \"invalid age header length\");\n  const ageHeader = take(ageHeaderLength, \"age header\");\n  const prefixEnd = offset;\n  const metadataNonce = take(NONCE_BYTES, \"metadata nonce\");\n  try { metadataLength = readU32(header, offset); offset += 4; }\n  catch { fail(\"E_ENVELOPE_PARSE\", \"truncated metadata length\"); }\n  if (metadataLength < TAG_BYTES || metadataLength > MAX_METADATA_CIPHERTEXT_SIZE) fail(\"E_ENVELOPE_PARSE\", \"invalid metadata ciphertext length\");\n  const metadataCiphertext = take(metadataLength, \"metadata ciphertext\");\n  if (offset !== header.length) fail(\"E_ENVELOPE_PARSE\", \"trailing bytes in file envelope header\");\n\n  const expectedCount = validateGeometry(plaintextSize, chunkSize);\n  if (chunkCount !== expectedCount) fail(\"E_ENVELOPE_PARSE\", \"chunk count does not match file geometry\");\n  return {\n    chunkSize,\n    plaintextSize,\n    chunkCount,\n    fileId,\n    ageHeader,\n    prefix: header.subarray(MAGIC.length + 4, prefixEnd),\n    metadataNonce,\n    metadataCiphertext,\n    headerCommitment: sha256(header),\n  };\n}\n\nfunction makePublicState(kind, record, header, metadata) {\n  return Object.freeze({\n    kind,\n    version: VERSION,\n    header,\n    metadata,\n    plaintextSize: record.plaintextSize,\n    chunkSize: record.chunkSize,\n    chunkCount: record.chunkCount,\n  });\n}\n\nfunction createFileEncryptionImpl({ recipient, recipients, metadata, plaintextSize, chunkSize = DEFAULT_CHUNK_SIZE }, rng) {\n  if (recipient !== undefined && recipients !== undefined) fail(\"E_INPUT\", \"provide recipient or recipients, not both\");\n  const recipientList = recipients ?? (recipient === undefined ? [] : [recipient]);\n  const chunkCount = validateGeometry(plaintextSize, chunkSize);\n  const fileKey = bytes(rng(16), 16, \"random file key\");\n  let retained = false;\n  try {\n    const fileId = bytes(rng(FILE_ID_BYTES), FILE_ID_BYTES, \"random file id\");\n    const ageHeader = ageInternals.encryptAgeHeader(fileKey, recipientList, rng);\n    if (ageHeader.length > MAX_AGE_HEADER_SIZE) fail(\"E_INPUT\", \"recipient header is too large\");\n    const prefix = structuralPrefix({ chunkSize, plaintextSize, chunkCount, fileId, ageHeader });\n    const metadataNonce = bytes(rng(NONCE_BYTES), NONCE_BYTES, \"random metadata nonce\");\n    const metadataPlaintext = canonicalMetadata(metadata);\n    const metadataKey = deriveMetadataKey(fileKey, fileId);\n    let metadataCiphertext;\n    try { metadataCiphertext = xchacha20poly1305(metadataKey, metadataNonce, metadataAad(prefix)).encrypt(metadataPlaintext); }\n    finally { metadataKey.fill(0); metadataPlaintext.fill(0); }\n    if (metadataCiphertext.length > MAX_METADATA_CIPHERTEXT_SIZE) fail(\"E_METADATA\", \"encrypted metadata is too large\");\n    const body = concat(prefix, metadataNonce, u32(metadataCiphertext.length), metadataCiphertext);\n    if (body.length > MAX_HEADER_SIZE) fail(\"E_INPUT\", \"file envelope header is too large\");\n    const header = concat(MAGIC, u32(body.length), body);\n    const record = {\n      fileKey,\n      fileId: new Uint8Array(fileId),\n      plaintextSize,\n      chunkSize,\n      chunkCount,\n      headerCommitment: sha256(header),\n      rng,\n      seen: new Set(),\n    };\n    const state = makePublicState(\"encryption\", record, header, undefined);\n    encryptionStates.set(state, record);\n    retained = true;\n    return state;\n  } finally {\n    if (!retained) fileKey.fill(0);\n  }\n}\n\nexport function createFileEncryption(options) {\n  return createFileEncryptionImpl(options, randomBytes);\n}\n\nexport function encryptChunk({ state, index, plaintext }) {\n  const record = encryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-encryption state\");\n  bytes(plaintext);\n  const expected = expectedPlaintextLength(record, index);\n  if (plaintext.length !== expected) fail(\"E_CHUNK_SIZE\", `chunk ${index} must contain exactly ${expected} plaintext bytes`);\n  const nonce = bytes(record.rng(NONCE_BYTES), NONCE_BYTES, \"random chunk nonce\");\n  const key = deriveChunkKey(record.fileKey, record.fileId, index);\n  let ciphertext;\n  try { ciphertext = xchacha20poly1305(key, nonce, chunkAad(record, index)).encrypt(plaintext); }\n  finally { key.fill(0); }\n  record.seen.add(index);\n  return concat(nonce, ciphertext);\n}\n\nexport function openFileEnvelope({ identity, unwrapFileKey, header }) {\n  if ((identity === undefined) === (unwrapFileKey === undefined))\n    fail(\"E_INPUT\", \"provide exactly one of identity or unwrapFileKey\");\n  const parsed = parseEnvelopeHeader(header);\n  // unwrapFileKey supports holders that never release an identity scalar\n  // (e.g. the pkvault agent): it receives a COPY of the age header and must\n  // return the 16-byte file key. The package copies the result, so the\n  // caller may wipe its own buffer afterwards.\n  const fileKey = identity !== undefined\n    ? ageInternals.decryptAgeHeader(parsed.ageHeader, identity)\n    : new Uint8Array(bytes(unwrapFileKey(new Uint8Array(parsed.ageHeader)), 16, \"unwrapped file key\"));\n  let retained = false;\n  try {\n    const metadataKey = deriveMetadataKey(fileKey, parsed.fileId);\n    let metadataPlaintext;\n    try { metadataPlaintext = xchacha20poly1305(metadataKey, parsed.metadataNonce, metadataAad(parsed.prefix)).decrypt(parsed.metadataCiphertext); }\n    catch { fail(\"E_ENVELOPE_AUTH\", \"file metadata authentication failed\"); }\n    finally { metadataKey.fill(0); }\n    let metadata;\n    try { metadata = parseMetadata(metadataPlaintext); }\n    finally { metadataPlaintext.fill(0); }\n    const record = {\n      fileKey,\n      fileId: new Uint8Array(parsed.fileId),\n      plaintextSize: parsed.plaintextSize,\n      chunkSize: parsed.chunkSize,\n      chunkCount: parsed.chunkCount,\n      headerCommitment: new Uint8Array(parsed.headerCommitment),\n      seen: new Set(),\n    };\n    const state = makePublicState(\"decryption\", record, new Uint8Array(header), metadata);\n    decryptionStates.set(state, record);\n    retained = true;\n    return state;\n  } finally {\n    if (!retained) fileKey.fill(0);\n  }\n}\n\nexport function decryptChunk({ state, index, ciphertext }) {\n  const record = decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-decryption state\");\n  bytes(ciphertext);\n  const expected = expectedPlaintextLength(record, index);\n  if (ciphertext.length !== NONCE_BYTES + expected + TAG_BYTES)\n    fail(\"E_CHUNK_SIZE\", `chunk ${index} ciphertext has the wrong length`);\n  const nonce = ciphertext.subarray(0, NONCE_BYTES);\n  const body = ciphertext.subarray(NONCE_BYTES);\n  const key = deriveChunkKey(record.fileKey, record.fileId, index);\n  let plaintext;\n  try { plaintext = xchacha20poly1305(key, nonce, chunkAad(record, index)).decrypt(body); }\n  catch { fail(\"E_CHUNK_AUTH\", `chunk ${index} authentication failed`); }\n  finally { key.fill(0); }\n  record.seen.add(index);\n  return plaintext;\n}\n\nexport function finalizeEnvelope(state) {\n  const record = encryptionStates.get(state) ?? decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not a file-envelope state\");\n  if (record.seen.size !== record.chunkCount) fail(\"E_ENVELOPE_INCOMPLETE\", `expected ${record.chunkCount} authenticated chunks, observed ${record.seen.size}`);\n  const finalized = Object.freeze({\n    version: VERSION,\n    header: state.header,\n    metadata: state.metadata,\n    plaintextSize: record.plaintextSize,\n    chunkSize: record.chunkSize,\n    chunkCount: record.chunkCount,\n  });\n  disposeEnvelope(state);\n  return finalized;\n}\n\nexport function disposeEnvelope(state) {\n  const record = encryptionStates.get(state) ?? decryptionStates.get(state);\n  if (!record) fail(\"E_STATE\", \"state is not an active file-envelope state\");\n  record.fileKey.fill(0);\n  record.seen.clear();\n  encryptionStates.delete(state);\n  decryptionStates.delete(state);\n}\n\nexport const fileInternals = Object.freeze({\n  createFileEncryptionWithRandom: createFileEncryptionImpl,\n  parseEnvelopeHeader,\n  metadataAad,\n  chunkAad,\n  constants: Object.freeze({ MAGIC, VERSION, NONCE_BYTES, TAG_BYTES, DEFAULT_CHUNK_SIZE, MIN_CHUNK_SIZE, MAX_CHUNK_SIZE }),\n});\n"],
+  "mappings": ";AAAO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YAAY,MAAM,SAAS;AACzB,UAAM,GAAG,IAAI,KAAK,OAAO,EAAE;AAC3B,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,OAAO,CAAC,MAAM,YAAY;AACrC,QAAM,IAAI,cAAc,MAAM,OAAO;AACvC;;;ACVA,SAAS,wBAAwB;AACjC,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,mBAAmB;;;ACL5B,IAAM,SAAS;AACf,IAAM,eAAe,IAAI,WAAW,GAAG,EAAE,KAAK,EAAE;AAChD,SAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,IAAK,cAAa,OAAO,WAAW,CAAC,CAAC,IAAI;AAEtE,IAAM,QAAQ,IAAI,WAAW,CAAC;AAC9B,IAAM,OAAO,CAAC,UAAU,IAAI,YAAY,EAAE,OAAO,KAAK;AAEtD,SAAS,MAAM,OAAO,QAAQ,OAAO,SAAS;AACnD,MAAI,EAAE,iBAAiB,YAAa,OAAM,IAAI,UAAU,GAAG,IAAI,uBAAuB;AACtF,MAAI,WAAW,UAAa,MAAM,WAAW,OAAQ,OAAM,IAAI,UAAU,GAAG,IAAI,YAAY,MAAM,QAAQ;AAC1G,SAAO;AACT;AAEO,SAAS,UAAU,OAAO;AAC/B,QAAM,SAAS,MAAM,OAAO,CAAC,KAAK,SAAS,MAAM,MAAM,IAAI,EAAE,QAAQ,CAAC;AACtE,QAAM,MAAM,IAAI,WAAW,MAAM;AACjC,MAAI,SAAS;AACb,aAAW,QAAQ,OAAO;AACxB,QAAI,IAAI,MAAM,MAAM;AACpB,cAAU,KAAK;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,MAAM,GAAG,GAAG;AAC1B,MAAI,EAAE,aAAa,eAAe,EAAE,aAAa,eAAe,EAAE,WAAW,EAAE,OAAQ,QAAO;AAC9F,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,SAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;AACrD,SAAO,SAAS;AAClB;AAEO,SAAS,QAAQ,OAAO;AAC7B,MAAI,MAAM;AACV,aAAW,QAAQ,MAAO,QAAO;AACjC,SAAO,QAAQ;AACjB;AAEO,SAAS,IAAI,OAAO;AACzB,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,WAAY,OAAM,IAAI,WAAW,uBAAuB;AAC7G,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,MAAI,SAAS,IAAI,MAAM,EAAE,UAAU,GAAG,OAAO,KAAK;AAClD,SAAO;AACT;AAEO,SAAS,IAAI,OAAO;AACzB,MAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,EAAG,OAAM,IAAI,WAAW,0CAA0C;AAC9G,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,QAAM,OAAO,IAAI,SAAS,IAAI,MAAM;AACpC,QAAM,MAAM,OAAO,KAAK;AACxB,OAAK,UAAU,GAAG,OAAO,OAAO,GAAG,GAAG,KAAK;AAC3C,OAAK,UAAU,GAAG,OAAO,MAAM,WAAW,GAAG,KAAK;AAClD,SAAO;AACT;AAEO,SAAS,QAAQ,OAAO,QAAQ;AACrC,MAAI,SAAS,KAAK,SAAS,IAAI,MAAM,OAAQ,OAAM,IAAI,WAAW,kBAAkB;AACpF,SAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,aAAa,QAAQ,CAAC,EAAE,UAAU,GAAG,KAAK;AACpF;AAEO,SAAS,QAAQ,OAAO,QAAQ;AACrC,MAAI,SAAS,KAAK,SAAS,IAAI,MAAM,OAAQ,OAAM,IAAI,WAAW,kBAAkB;AACpF,QAAM,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,aAAa,QAAQ,CAAC;AACpE,QAAM,MAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC,KAAK,MAAO,OAAO,KAAK,UAAU,GAAG,KAAK,CAAC;AACvF,MAAI,MAAM,OAAO,OAAO,gBAAgB,EAAG,OAAM,IAAI,WAAW,8CAA8C;AAC9G,SAAO,OAAO,GAAG;AACnB;AAEO,SAAS,aAAa,OAAO,EAAE,UAAU,MAAM,IAAI,CAAC,GAAG;AAC5D,QAAM,KAAK;AACX,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;AACxC,UAAM,IAAI,MAAM,CAAC;AACjB,UAAM,QAAQ,IAAI,IAAI,MAAM;AAC5B,UAAM,QAAQ,IAAI,IAAI,MAAM;AAC5B,UAAM,IAAI,QAAQ,MAAM,IAAI,CAAC,IAAI;AACjC,UAAM,IAAI,QAAQ,MAAM,IAAI,CAAC,IAAI;AACjC,WAAO,OAAO,MAAM,CAAC;AACrB,WAAO,QAAS,IAAI,MAAM,IAAM,MAAM,CAAE;AACxC,QAAI,MAAO,QAAO,QAAS,IAAI,OAAO,IAAM,MAAM,CAAE;AAAA,aAC3C,QAAS,QAAO;AACzB,QAAI,MAAO,QAAO,OAAO,IAAI,EAAE;AAAA,aACtB,QAAS,QAAO;AAAA,EAC3B;AACA,SAAO;AACT;AAEO,SAAS,aAAa,OAAO,EAAE,UAAU,MAAM,IAAI,CAAC,GAAG;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,SAAS;AACX,QAAI,CAAC,yBAAyB,KAAK,KAAK,KAAK,MAAM,SAAS,MAAM,EAAG,QAAO;AAAA,EAC9E,WAAW,CAAC,mBAAmB,KAAK,KAAK,KAAK,MAAM,SAAS,MAAM,EAAG,QAAO;AAE7E,QAAM,WAAW,UAAU,MAAM,QAAQ,OAAO,EAAE,IAAI;AACtD,QAAM,eAAe,KAAK,MAAO,SAAS,SAAS,IAAK,CAAC;AACzD,QAAM,MAAM,IAAI,WAAW,YAAY;AACvC,MAAI,cAAc;AAClB,MAAI,OAAO;AACX,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,UAAM,OAAO,SAAS,WAAW,CAAC;AAClC,QAAI,QAAQ,aAAa,UAAU,aAAa,IAAI,IAAI,EAAG,QAAO;AAClE,kBAAe,eAAe,IAAK,aAAa,IAAI;AACpD,YAAQ;AACR,QAAI,QAAQ,GAAG;AACb,cAAQ;AACR,UAAI,QAAQ,IAAK,gBAAgB,OAAQ;AAAA,IAC3C;AAAA,EACF;AACA,MAAI,OAAO,MAAM,eAAgB,KAAK,QAAQ,OAAQ,EAAG,QAAO;AAChE,MAAI,aAAa,KAAK,EAAE,QAAQ,CAAC,MAAM,MAAO,QAAO;AACrD,SAAO;AACT;;;AC/GA,IAAM,UAAU;AAChB,IAAM,aAAa,CAAC,WAAY,WAAY,WAAY,YAAY,SAAU;AAE9E,SAAS,QAAQ,QAAQ;AACvB,MAAI,WAAW;AACf,aAAW,SAAS,QAAQ;AAC1B,UAAM,MAAM,aAAa;AACzB,gBAAa,WAAW,aAAc,IAAK;AAC3C,aAAS,IAAI,GAAG,IAAI,GAAG,IAAK,KAAK,QAAQ,IAAK,EAAG,aAAY,WAAW,CAAC;AAAA,EAC3E;AACA,SAAO,aAAa;AACtB;AAEA,SAAS,UAAU,KAAK;AACtB,QAAM,MAAM,CAAC;AACb,aAAW,QAAQ,IAAK,KAAI,KAAK,KAAK,WAAW,CAAC,MAAM,CAAC;AACzD,MAAI,KAAK,CAAC;AACV,aAAW,QAAQ,IAAK,KAAI,KAAK,KAAK,WAAW,CAAC,IAAI,EAAE;AACxD,SAAO;AACT;AAEA,SAAS,YAAY,MAAM,MAAM,IAAI,KAAK;AACxC,MAAI,cAAc;AAClB,MAAI,OAAO;AACX,QAAM,MAAM,CAAC;AACb,QAAM,WAAW,KAAK,MAAM;AAC5B,aAAW,SAAS,MAAM;AACxB,QAAI,QAAQ,KAAK,UAAU,KAAM,QAAO;AACxC,kBAAe,eAAe,OAAQ;AACtC,YAAQ;AACR,WAAO,QAAQ,IAAI;AACjB,cAAQ;AACR,UAAI,KAAM,gBAAgB,OAAQ,OAAO;AAAA,IAC3C;AAAA,EACF;AACA,MAAI,OAAO,KAAM,KAAI,KAAM,eAAgB,KAAK,OAAS,OAAO;AAAA,WACvD,CAAC,QAAQ,QAAQ,QAAU,eAAgB,KAAK,OAAS,SAAW,QAAO;AACpF,SAAO;AACT;AAEO,SAAS,aAAa,KAAK,MAAM;AACtC,QAAM,QAAQ,YAAY,MAAM,GAAG,GAAG,IAAI;AAC1C,QAAM,SAAS,CAAC,GAAG,UAAU,GAAG,GAAG,GAAG,KAAK;AAC3C,QAAM,MAAM,QAAQ,CAAC,GAAG,QAAQ,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI;AACrD,QAAM,WAAW,CAAC;AAClB,WAAS,IAAI,GAAG,IAAI,GAAG,IAAK,UAAS,KAAM,QAAS,KAAK,IAAI,KAAO,EAAE;AACtE,SAAO,MAAM,MAAM,CAAC,GAAG,OAAO,GAAG,QAAQ,EAAE,IAAI,CAAC,SAAS,QAAQ,IAAI,CAAC,EAAE,KAAK,EAAE;AACjF;AAEO,SAAS,aAAa,OAAO;AAClC,MAAI,OAAO,UAAU,YAAa,UAAU,MAAM,YAAY,KAAK,UAAU,MAAM,YAAY,EAAI,QAAO;AAC1G,QAAM,aAAa,MAAM,YAAY;AACrC,QAAM,YAAY,WAAW,YAAY,GAAG;AAC5C,MAAI,YAAY,KAAK,YAAY,IAAI,WAAW,OAAQ,QAAO;AAC/D,QAAM,MAAM,WAAW,MAAM,GAAG,SAAS;AACzC,QAAM,QAAQ,CAAC;AACf,aAAW,QAAQ,WAAW,MAAM,YAAY,CAAC,GAAG;AAClD,UAAM,OAAO,QAAQ,QAAQ,IAAI;AACjC,QAAI,SAAS,GAAI,QAAO;AACxB,UAAM,KAAK,IAAI;AAAA,EACjB;AACA,MAAI,QAAQ,CAAC,GAAG,UAAU,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAG,QAAO;AACzD,QAAM,OAAO,YAAY,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,GAAG,KAAK;AACxD,SAAO,SAAS,OAAO,OAAO,EAAE,KAAK,MAAM,IAAI,WAAW,IAAI,EAAE;AAClE;;;AFtDA,IAAM,eAAe;AACrB,IAAM,kBAAkB,KAAK,8BAA8B;AAC3D,IAAM,kBAAkB,KAAK,QAAQ;AACrC,IAAM,aAAa,IAAI,WAAW,EAAE;AAEpC,IAAM,SAAS,CAAC,WAAW,YAAY,MAAM;AAEtC,SAAS,eAAe,WAAW;AACxC,MAAI,OAAO,cAAc,YAAY,cAAc,UAAU,YAAY,EAAG,MAAK,eAAe,kDAAkD;AAClJ,QAAM,UAAU,aAAa,SAAS;AACtC,MAAI,CAAC,WAAW,QAAQ,QAAQ,SAAS,QAAQ,KAAK,WAAW,MAAM,aAAa,OAAO,QAAQ,IAAI,MAAM;AAC3G,SAAK,eAAe,8BAA8B;AACpD,SAAO,QAAQ;AACjB;AAEO,SAAS,cAAc,UAAU;AACtC,MAAI,OAAO,aAAa,YAAa,aAAa,SAAS,YAAY,KAAK,aAAa,SAAS,YAAY;AAC5G,SAAK,cAAc,uCAAuC;AAC5D,QAAM,UAAU,aAAa,QAAQ;AACrC,MAAI,CAAC,WAAW,QAAQ,QAAQ,qBAAqB,QAAQ,KAAK,WAAW,MAAM,aAAa,mBAAmB,QAAQ,IAAI,MAAM,SAAS,YAAY;AACxJ,SAAK,cAAc,6BAA6B;AAClD,SAAO,QAAQ;AACjB;AAEO,SAAS,sBAAsB,UAAU;AAC9C,SAAO,aAAa,OAAO,OAAO,aAAa,cAAc,QAAQ,CAAC,CAAC;AACzE;AAEO,SAAS,gBAAgB,WAAW;AACzC,SAAO,aAAa,OAAO,MAAM,WAAW,IAAI,WAAW,CAAC;AAC9D;AAEO,SAAS,eAAe,WAAW;AACxC,SAAO,aAAa,mBAAmB,MAAM,WAAW,IAAI,WAAW,CAAC,EAAE,YAAY;AACxF;AAEO,SAAS,uBAAuB,WAAW;AAChD,SAAO,OAAO,aAAa,MAAM,WAAW,IAAI,WAAW,CAAC;AAC9D;AAEO,SAAS,0BAA0B;AACxC,SAAO,kCAAkC,OAAO,EAAE,CAAC;AACrD;AAEO,SAAS,kCAAkC,WAAW;AAC3D,QAAM,SAAS,MAAM,WAAW,IAAI,WAAW;AAC/C,SAAO,EAAE,UAAU,eAAe,MAAM,GAAG,WAAW,gBAAgB,uBAAuB,MAAM,CAAC,EAAE;AACxG;AAEA,SAAS,YAAY,QAAQ;AAC3B,QAAM,MAAM;AACZ,MAAI,WAAW;AACf,QAAM,OAAO,MAAM;AACjB,UAAM,UAAU,OAAO,QAAQ,IAAM,QAAQ;AAC7C,QAAI,YAAY,GAAI,MAAK,sBAAsB,sBAAsB;AACrE,UAAM,QAAQ,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,OAAO,SAAS,UAAU,OAAO,CAAC;AACjG,eAAW,UAAU;AACrB,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AAAE,cAAU,KAAK;AAAA,EAAG,SACjB,OAAO;AAAE,QAAI,OAAO,KAAM,OAAM;AAAO,SAAK,sBAAsB,+BAA+B;AAAA,EAAG;AAC3G,MAAI,YAAY,aAAc,MAAK,wBAAwB,gCAAgC;AAE3F,QAAM,UAAU,CAAC;AACjB,aAAS;AACP,QAAI;AACJ,QAAI;AAAE,gBAAU,KAAK;AAAA,IAAG,SACjB,OAAO;AAAE,UAAI,OAAO,KAAM,OAAM;AAAO,WAAK,sBAAsB,+BAA+B;AAAA,IAAG;AAC3G,QAAI,QAAQ,WAAW,MAAM,GAAG;AAC9B,YAAM,MAAM,aAAa,QAAQ,MAAM,CAAC,CAAC;AACzC,UAAI,CAAC,OAAO,IAAI,WAAW,MAAM,aAAa,OAAO,OAAQ,MAAK,sBAAsB,6BAA6B;AACrH,YAAM,YAAY,WAAW,QAAQ,SAAS,IAAI;AAClD,aAAO,EAAE,SAAS,KAAK,eAAe,OAAO,SAAS,GAAG,SAAS,EAAE;AAAA,IACtE;AACA,QAAI,CAAC,QAAQ,WAAW,KAAK,EAAG,MAAK,sBAAsB,8BAA8B;AACzF,UAAM,OAAO,QAAQ,MAAM,CAAC,EAAE,MAAM,GAAG;AACvC,QAAI,KAAK,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,EAAG,MAAK,sBAAsB,iCAAiC;AACtG,UAAM,YAAY,CAAC;AACnB,eAAS;AACP,UAAI;AACJ,UAAI;AAAE,mBAAW,KAAK;AAAA,MAAG,SAClB,OAAO;AAAE,YAAI,OAAO,KAAM,OAAM;AAAO,aAAK,sBAAsB,+BAA+B;AAAA,MAAG;AAC3G,UAAI,CAAC,mBAAmB,KAAK,QAAQ,KAAK,SAAS,SAAS,GAAI,MAAK,sBAAsB,yBAAyB;AACpH,gBAAU,KAAK,QAAQ;AACvB,UAAI,SAAS,SAAS,GAAI;AAAA,IAC5B;AACA,UAAM,OAAO,aAAa,UAAU,KAAK,EAAE,CAAC;AAC5C,QAAI,CAAC,KAAM,MAAK,sBAAsB,+BAA+B;AACrE,YAAQ,KAAK,EAAE,MAAM,KAAK,CAAC;AAAA,EAC7B;AACF;AAEA,SAAS,iBAAiB,SAAS,YAAY,KAAK;AAClD,QAAM,SAAS,IAAI,SAAS;AAC5B,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,WAAW,WAAW,EAAG,MAAK,eAAe,oCAAoC;AACnH,MAAI,OAAO,GAAG,YAAY;AAAA;AAC1B,aAAW,aAAa,YAAY;AAClC,UAAM,kBAAkB,OAAO,cAAc,WAAW,eAAe,SAAS,IAAI,MAAM,WAAW,IAAI,WAAW;AACpH,UAAM,kBAAkB,IAAI,EAAE;AAC9B,UAAM,iBAAiB,IAAI,eAAe;AAC1C,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,kBAAkB,OAAO,aAAa,eAAe;AAC3D,UAAI;AAAE,iBAAS,OAAO,gBAAgB,iBAAiB,eAAe;AAAA,MAAG,QACnE;AAAE,aAAK,eAAe,uCAAuC;AAAA,MAAG;AACtE,UAAI,QAAQ,MAAM,EAAG,MAAK,eAAe,uCAAuC;AAChF,gBAAU,KAAK,QAAQ,QAAQ,OAAO,iBAAiB,eAAe,GAAG,iBAAiB,EAAE;AAC5F,YAAM,UAAU,iBAAiB,SAAS,UAAU,EAAE,QAAQ,OAAO;AACrE,cAAQ,aAAa,aAAa,eAAe,CAAC;AAAA,EAAK,aAAa,OAAO,CAAC;AAAA;AAAA,IAC9E,UAAE;AACA,sBAAgB,KAAK,CAAC;AACtB,cAAQ,KAAK,CAAC;AACd,eAAS,KAAK,CAAC;AAAA,IACjB;AAAA,EACF;AACA,UAAQ;AACR,QAAM,gBAAgB,KAAK,IAAI;AAC/B,QAAM,SAAS,KAAK,QAAQ,SAAS,OAAO,iBAAiB,EAAE;AAC/D,MAAI;AACF,UAAM,MAAM,KAAK,QAAQ,QAAQ,aAAa;AAC9C,WAAO,KAAK,GAAG,IAAI,IAAI,aAAa,GAAG,CAAC;AAAA,CAAI;AAAA,EAC9C,UAAE;AAAU,WAAO,KAAK,CAAC;AAAA,EAAG;AAC9B;AAEA,SAAS,iBAAiB,QAAQ,UAAU;AAC1C,QAAM,aAAa,OAAO,aAAa;AACvC,QAAM,SAAS,aAAa,cAAc,QAAQ,IAAI,MAAM,UAAU,IAAI,UAAU;AACpF,MAAI,UAAU;AACd,MAAI,gBAAgB;AACpB,MAAI;AACF,UAAM,SAAS,YAAY,MAAM;AACjC,QAAI,OAAO,QAAQ,WAAW,EAAG,MAAK,sBAAsB,8BAA8B;AAC1F,UAAM,kBAAkB,OAAO,aAAa,MAAM;AAClD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,OAAO,KAAK,CAAC,MAAM,SAAU,MAAK,0BAA0B,2CAA2C;AAC3G,UAAI,OAAO,KAAK,WAAW,KAAK,OAAO,KAAK,WAAW,GAAI,MAAK,sBAAsB,uBAAuB;AAC7G,YAAM,kBAAkB,aAAa,OAAO,KAAK,CAAC,CAAC;AACnD,UAAI,CAAC,mBAAmB,gBAAgB,WAAW,GAAI,MAAK,sBAAsB,gCAAgC;AAAA,IACpH;AACA,eAAW,UAAU,OAAO,SAAS;AACnC,YAAM,kBAAkB,aAAa,OAAO,KAAK,CAAC,CAAC;AACnD,UAAI;AACJ,UAAI;AACJ,UAAI;AACF,YAAI;AAAE,mBAAS,OAAO,gBAAgB,QAAQ,eAAe;AAAA,QAAG,QAC1D;AAAE;AAAA,QAAU;AAClB,YAAI,QAAQ,MAAM,EAAG;AACrB,kBAAU,KAAK,QAAQ,QAAQ,OAAO,iBAAiB,eAAe,GAAG,iBAAiB,EAAE;AAC5F,YAAI;AACF,gBAAM,YAAY,iBAAiB,SAAS,UAAU,EAAE,QAAQ,OAAO,IAAI;AAC3E,cAAI,UAAU,WAAW,IAAI;AAAE,sBAAU;AAAW;AAAA,UAAO;AAC3D,oBAAU,KAAK,CAAC;AAAA,QAClB,QAAQ;AAAA,QAAuC;AAAA,MACjD,UAAE;AACA,gBAAQ,KAAK,CAAC;AACd,iBAAS,KAAK,CAAC;AAAA,MACjB;AAAA,IACF;AACA,QAAI,CAAC,QAAS,MAAK,qBAAqB,4CAA4C;AACpF,UAAM,SAAS,KAAK,QAAQ,SAAS,OAAO,iBAAiB,EAAE;AAC/D,UAAM,cAAc,KAAK,QAAQ,QAAQ,OAAO,aAAa;AAC7D,QAAI;AACF,UAAI,CAAC,MAAM,aAAa,OAAO,GAAG,EAAG,MAAK,mBAAmB,kCAAkC;AAC/F,sBAAgB;AAChB,aAAO;AAAA,IACT,UAAE;AACA,aAAO,KAAK,CAAC;AACb,kBAAY,KAAK,CAAC;AAAA,IACpB;AAAA,EACF,UAAE;AACA,QAAI,WAAY,QAAO,KAAK,CAAC;AAC7B,QAAI,CAAC,cAAe,UAAS,KAAK,CAAC;AAAA,EACrC;AACF;AAEO,IAAM,YAAY,OAAO,OAAO;AAAA,EACrC,MAAM,CAAC,SAAS,eAAe,iBAAiB,SAAS,YAAY,MAAM;AAAA,EAC3E,MAAM;AACR,CAAC;AAEM,IAAM,eAAe,OAAO,OAAO,EAAE,kBAAkB,iBAAiB,CAAC;;;AGjMhF,SAAS,yBAAyB;AAClC,SAAS,QAAAA,aAAY;AACrB,SAAS,UAAAC,eAAc;AACvB,SAAS,eAAAC,oBAAmB;AAK5B,IAAM,QAAQ,KAAK,WAAW;AAC9B,IAAM,UAAU;AAChB,IAAM,gBAAgB;AACtB,IAAM,cAAc;AACpB,IAAM,YAAY;AAClB,IAAM,qBAAqB,OAAO;AAClC,IAAM,iBAAiB,KAAK;AAC5B,IAAM,iBAAiB,KAAK,OAAO;AACnC,IAAM,kBAAkB,OAAO;AAC/B,IAAM,sBAAsB,MAAM;AAClC,IAAM,+BAA+B,KAAK;AAE1C,IAAM,oBAAoB,KAAK,8BAA8B;AAC7D,IAAM,iBAAiB,KAAK,2BAA2B;AACvD,IAAM,sBAAsB,KAAK,0BAA0B;AAC3D,IAAM,mBAAmB,KAAK,uBAAuB;AACrD,IAAM,mBAAmB,IAAI,WAAW,CAAC,CAAC,CAAC;AAE3C,IAAM,mBAAmB,oBAAI,QAAQ;AACrC,IAAM,mBAAmB,oBAAI,QAAQ;AAErC,SAAS,iBAAiB,eAAe,WAAW;AAClD,MAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB,EAAG,MAAK,WAAW,mDAAmD;AAClI,MAAI,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,kBAAkB,YAAY;AAC5E,SAAK,WAAW,6BAA6B,cAAc,QAAQ,cAAc,QAAQ;AAC3F,QAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAK,gBAAgB,SAAS,CAAC;AACnE,MAAI,aAAa,WAAY,MAAK,WAAW,+BAA+B;AAC5E,SAAO;AACT;AAEA,SAAS,wBAAwB,EAAE,eAAe,WAAW,WAAW,GAAG,OAAO;AAChF,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,SAAS,WAAY,MAAK,iBAAiB,qCAAqC;AAC7H,MAAI,kBAAkB,EAAG,QAAO;AAChC,SAAO,UAAU,aAAa,IAAI,gBAAgB,YAAY,QAAQ;AACxE;AAEA,SAAS,oBAAoB,OAAO,OAAO;AACzC,MAAI,SAAS;AACb,WAAS,SAAS,GAAG,SAAS,MAAM,UAAS;AAC3C,UAAM,QAAQ,MAAM,WAAW,MAAM;AACrC,QAAI;AACJ,QAAI,SAAS,SAAU,SAAS,OAAQ;AACtC,YAAM,SAAS,MAAM,WAAW,SAAS,CAAC;AAC1C,UAAI,EAAE,UAAU,SAAU,UAAU,OAAS,MAAK,cAAc,GAAG,KAAK,0CAA0C;AAClH,kBAAY,MAAM,MAAM,QAAQ,SAAS,CAAC;AAC1C,gBAAU;AAAA,IACZ,OAAO;AACL,UAAI,SAAS,SAAU,SAAS,MAAQ,MAAK,cAAc,GAAG,KAAK,0CAA0C;AAC7G,kBAAY,MAAM,QAAQ;AAAA,IAC5B;AACA,QAAI,cAAc,IAAK,WAAU;AAAA,aACxB,cAAc,KAAM,WAAU;AAAA,aAC9B,UAAU,EAAM,WAAU;AAAA,aAC1B,UAAU,EAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,UAAU,GAAM,WAAU;AAAA,aAC1B,QAAQ,GAAM,WAAU,MAAM,MAAM,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,QACrE,WAAU;AAAA,EACjB;AACA,SAAO,GAAG,MAAM;AAClB;AAEA,SAAS,kBAAkB,UAAU;AACnC,MAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,EAAG,MAAK,cAAc,4BAA4B;AACzH,MAAI,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,aAAa,cAAc,EAAE,SAAS,GAAG,CAAC;AAC1F,SAAK,cAAc,oCAAoC;AACzD,QAAM,EAAE,MAAM,YAAY,4BAA4B,eAAe,KAAK,IAAI;AAC9E,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,KAAK,IAAI,EAAE,SAAS,QAAQ,yBAAyB,KAAK,IAAI;AACjH,SAAK,cAAc,uEAAuE;AAC5F,MAAI,SAAS,OAAO,SAAS,QAAQ,UAAU,KAAK,IAAI,KAAK,SAAS,KAAK,IAAI,KAAK,mDAAmD,KAAK,IAAI;AAC9I,SAAK,cAAc,6EAA6E;AAClG,MAAI,OAAO,cAAc,YAAY,KAAK,SAAS,EAAE,SAAS,OAAO,CAAC,iBAAiB,KAAK,SAAS;AACnG,SAAK,cAAc,qEAAqE;AAC1F,MAAI,iBAAiB,SAAS,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe;AAClF,SAAK,cAAc,mEAAmE;AACxF,SAAO,KAAK,WAAW,oBAAoB,MAAM,eAAe,CAAC,gBAAgB,oBAAoB,WAAW,oBAAoB,CAAC,mBAAmB,iBAAiB,OAAO,SAAS,OAAO,YAAY,CAAC,GAAG;AAClN;AAEA,SAAS,cAAc,WAAW;AAChC,MAAI;AACJ,MAAI;AAAE,aAAS,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;AAAA,EAAG,QAClF;AAAE,SAAK,cAAc,gDAAgD;AAAA,EAAG;AAC9E,QAAM,YAAY,kBAAkB,MAAM;AAC1C,MAAI,UAAU,WAAW,UAAU,UAAU,UAAU,KAAK,CAAC,MAAM,UAAU,SAAS,UAAU,KAAK,CAAC;AACpG,SAAK,cAAc,qCAAqC;AAC1D,SAAO;AACT;AAEA,SAAS,iBAAiB,EAAE,WAAW,eAAe,YAAY,QAAQ,WAAAC,WAAU,GAAG;AACrF,SAAO,OAAO,IAAI,SAAS,GAAG,IAAI,aAAa,GAAG,IAAI,UAAU,GAAG,QAAQ,IAAIA,WAAU,MAAM,GAAGA,UAAS;AAC7G;AAEA,SAAS,YAAY,QAAQ;AAC3B,SAAO,OAAO,qBAAqB,kBAAkB,IAAI,OAAO,GAAGC,QAAO,OAAO,OAAO,MAAM,CAAC,CAAC;AAClG;AAEA,SAAS,SAAS,QAAQ,OAAO;AAC/B,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,IAAI,OAAO;AAAA,IACX,OAAO;AAAA,IACP,OAAO;AAAA,IACP,IAAI,KAAK;AAAA,IACT,IAAI,OAAO,UAAU;AAAA,IACrB,IAAI,OAAO,aAAa;AAAA,IACxB,IAAI,OAAO,SAAS;AAAA,IACpB,IAAI,QAAQ;AAAA,EACd;AACF;AAEA,SAAS,kBAAkB,SAAS,QAAQ;AAC1C,SAAOC,MAAKD,SAAQ,SAAS,QAAQ,mBAAmB,EAAE;AAC5D;AAEA,SAAS,eAAe,SAAS,QAAQ,OAAO;AAC9C,SAAOC,MAAKD,SAAQ,SAAS,OAAO,QAAQ,IAAI,KAAK,CAAC,GAAG,gBAAgB,EAAE;AAC7E;AAEA,SAAS,oBAAoB,QAAQ;AACnC,QAAM,MAAM;AACZ,MAAI,OAAO,SAAS,MAAM,SAAS,KAAK,MAAM,KAAK,CAAC,MAAM,UAAU,OAAO,KAAK,MAAM,IAAI;AACxF,SAAK,sBAAsB,4CAA4C;AACzE,MAAI;AACJ,MAAI;AAAE,iBAAa,QAAQ,QAAQ,MAAM,MAAM;AAAA,EAAG,QAC5C;AAAE,SAAK,oBAAoB,iCAAiC;AAAA,EAAG;AACrE,MAAI,aAAa,mBAAmB,eAAe,OAAO,SAAS,MAAM,SAAS;AAChF,SAAK,oBAAoB,sCAAsC;AACjE,MAAI,SAAS,MAAM,SAAS;AAC5B,QAAM,OAAO,CAAC,QAAQ,UAAU;AAC9B,QAAI,CAAC,OAAO,UAAU,MAAM,KAAK,SAAS,KAAK,SAAS,SAAS,OAAO,OAAQ,MAAK,oBAAoB,aAAa,KAAK,EAAE;AAC7H,UAAM,QAAQ,OAAO,SAAS,QAAQ,SAAS,MAAM;AACrD,cAAU;AACV,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,eAAe,YAAY,iBAAiB;AAC3D,MAAI;AACF,gBAAY,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAC/C,oBAAgB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AACnD,iBAAa,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAClD,QAAQ;AAAE,SAAK,oBAAoB,uBAAuB;AAAA,EAAG;AAC7D,QAAM,SAAS,KAAK,eAAe,SAAS;AAC5C,MAAI;AAAE,sBAAkB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAAG,QACxD;AAAE,SAAK,oBAAoB,6BAA6B;AAAA,EAAG;AACjE,MAAI,oBAAoB,KAAK,kBAAkB,oBAAqB,MAAK,oBAAoB,2BAA2B;AACxH,QAAMD,aAAY,KAAK,iBAAiB,YAAY;AACpD,QAAM,YAAY;AAClB,QAAM,gBAAgB,KAAK,aAAa,gBAAgB;AACxD,MAAI;AAAE,qBAAiB,QAAQ,QAAQ,MAAM;AAAG,cAAU;AAAA,EAAG,QACvD;AAAE,SAAK,oBAAoB,2BAA2B;AAAA,EAAG;AAC/D,MAAI,iBAAiB,aAAa,iBAAiB,6BAA8B,MAAK,oBAAoB,oCAAoC;AAC9I,QAAM,qBAAqB,KAAK,gBAAgB,qBAAqB;AACrE,MAAI,WAAW,OAAO,OAAQ,MAAK,oBAAoB,wCAAwC;AAE/F,QAAM,gBAAgB,iBAAiB,eAAe,SAAS;AAC/D,MAAI,eAAe,cAAe,MAAK,oBAAoB,0CAA0C;AACrG,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAAA;AAAA,IACA,QAAQ,OAAO,SAAS,MAAM,SAAS,GAAG,SAAS;AAAA,IACnD;AAAA,IACA;AAAA,IACA,kBAAkBC,QAAO,MAAM;AAAA,EACjC;AACF;AAEA,SAAS,gBAAgB,MAAM,QAAQ,QAAQ,UAAU;AACvD,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,eAAe,OAAO;AAAA,IACtB,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,EACrB,CAAC;AACH;AAEA,SAAS,yBAAyB,EAAE,WAAW,YAAY,UAAU,eAAe,YAAY,mBAAmB,GAAG,KAAK;AACzH,MAAI,cAAc,UAAa,eAAe,OAAW,MAAK,WAAW,2CAA2C;AACpH,QAAM,gBAAgB,eAAe,cAAc,SAAY,CAAC,IAAI,CAAC,SAAS;AAC9E,QAAM,aAAa,iBAAiB,eAAe,SAAS;AAC5D,QAAM,UAAU,MAAM,IAAI,EAAE,GAAG,IAAI,iBAAiB;AACpD,MAAI,WAAW;AACf,MAAI;AACF,UAAM,SAAS,MAAM,IAAI,aAAa,GAAG,eAAe,gBAAgB;AACxE,UAAMD,aAAY,aAAa,iBAAiB,SAAS,eAAe,GAAG;AAC3E,QAAIA,WAAU,SAAS,oBAAqB,MAAK,WAAW,+BAA+B;AAC3F,UAAM,SAAS,iBAAiB,EAAE,WAAW,eAAe,YAAY,QAAQ,WAAAA,WAAU,CAAC;AAC3F,UAAM,gBAAgB,MAAM,IAAI,WAAW,GAAG,aAAa,uBAAuB;AAClF,UAAM,oBAAoB,kBAAkB,QAAQ;AACpD,UAAM,cAAc,kBAAkB,SAAS,MAAM;AACrD,QAAI;AACJ,QAAI;AAAE,2BAAqB,kBAAkB,aAAa,eAAe,YAAY,MAAM,CAAC,EAAE,QAAQ,iBAAiB;AAAA,IAAG,UAC1H;AAAU,kBAAY,KAAK,CAAC;AAAG,wBAAkB,KAAK,CAAC;AAAA,IAAG;AAC1D,QAAI,mBAAmB,SAAS,6BAA8B,MAAK,cAAc,iCAAiC;AAClH,UAAM,OAAO,OAAO,QAAQ,eAAe,IAAI,mBAAmB,MAAM,GAAG,kBAAkB;AAC7F,QAAI,KAAK,SAAS,gBAAiB,MAAK,WAAW,mCAAmC;AACtF,UAAM,SAAS,OAAO,OAAO,IAAI,KAAK,MAAM,GAAG,IAAI;AACnD,UAAM,SAAS;AAAA,MACb;AAAA,MACA,QAAQ,IAAI,WAAW,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkBC,QAAO,MAAM;AAAA,MAC/B;AAAA,MACA,MAAM,oBAAI,IAAI;AAAA,IAChB;AACA,UAAM,QAAQ,gBAAgB,cAAc,QAAQ,QAAQ,MAAS;AACrE,qBAAiB,IAAI,OAAO,MAAM;AAClC,eAAW;AACX,WAAO;AAAA,EACT,UAAE;AACA,QAAI,CAAC,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC/B;AACF;AAEO,SAAS,qBAAqB,SAAS;AAC5C,SAAO,yBAAyB,SAASE,YAAW;AACtD;AAEO,SAAS,aAAa,EAAE,OAAO,OAAO,UAAU,GAAG;AACxD,QAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,MAAI,CAAC,OAAQ,MAAK,WAAW,sCAAsC;AACnE,QAAM,SAAS;AACf,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,MAAI,UAAU,WAAW,SAAU,MAAK,gBAAgB,SAAS,KAAK,yBAAyB,QAAQ,kBAAkB;AACzH,QAAM,QAAQ,MAAM,OAAO,IAAI,WAAW,GAAG,aAAa,oBAAoB;AAC9E,QAAM,MAAM,eAAe,OAAO,SAAS,OAAO,QAAQ,KAAK;AAC/D,MAAI;AACJ,MAAI;AAAE,iBAAa,kBAAkB,KAAK,OAAO,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,SAAS;AAAA,EAAG,UAC9F;AAAU,QAAI,KAAK,CAAC;AAAA,EAAG;AACvB,SAAO,KAAK,IAAI,KAAK;AACrB,SAAO,OAAO,OAAO,UAAU;AACjC;AAEO,SAAS,iBAAiB,EAAE,UAAU,eAAe,OAAO,GAAG;AACpE,MAAK,aAAa,YAAgB,kBAAkB;AAClD,SAAK,WAAW,kDAAkD;AACpE,QAAM,SAAS,oBAAoB,MAAM;AAKzC,QAAM,UAAU,aAAa,SACzB,aAAa,iBAAiB,OAAO,WAAW,QAAQ,IACxD,IAAI,WAAW,MAAM,cAAc,IAAI,WAAW,OAAO,SAAS,CAAC,GAAG,IAAI,oBAAoB,CAAC;AACnG,MAAI,WAAW;AACf,MAAI;AACF,UAAM,cAAc,kBAAkB,SAAS,OAAO,MAAM;AAC5D,QAAI;AACJ,QAAI;AAAE,0BAAoB,kBAAkB,aAAa,OAAO,eAAe,YAAY,OAAO,MAAM,CAAC,EAAE,QAAQ,OAAO,kBAAkB;AAAA,IAAG,QACzI;AAAE,WAAK,mBAAmB,qCAAqC;AAAA,IAAG,UACxE;AAAU,kBAAY,KAAK,CAAC;AAAA,IAAG;AAC/B,QAAI;AACJ,QAAI;AAAE,iBAAW,cAAc,iBAAiB;AAAA,IAAG,UACnD;AAAU,wBAAkB,KAAK,CAAC;AAAA,IAAG;AACrC,UAAM,SAAS;AAAA,MACb;AAAA,MACA,QAAQ,IAAI,WAAW,OAAO,MAAM;AAAA,MACpC,eAAe,OAAO;AAAA,MACtB,WAAW,OAAO;AAAA,MAClB,YAAY,OAAO;AAAA,MACnB,kBAAkB,IAAI,WAAW,OAAO,gBAAgB;AAAA,MACxD,MAAM,oBAAI,IAAI;AAAA,IAChB;AACA,UAAM,QAAQ,gBAAgB,cAAc,QAAQ,IAAI,WAAW,MAAM,GAAG,QAAQ;AACpF,qBAAiB,IAAI,OAAO,MAAM;AAClC,eAAW;AACX,WAAO;AAAA,EACT,UAAE;AACA,QAAI,CAAC,SAAU,SAAQ,KAAK,CAAC;AAAA,EAC/B;AACF;AAEO,SAAS,aAAa,EAAE,OAAO,OAAO,WAAW,GAAG;AACzD,QAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,MAAI,CAAC,OAAQ,MAAK,WAAW,sCAAsC;AACnE,QAAM,UAAU;AAChB,QAAM,WAAW,wBAAwB,QAAQ,KAAK;AACtD,MAAI,WAAW,WAAW,cAAc,WAAW;AACjD,SAAK,gBAAgB,SAAS,KAAK,kCAAkC;AACvE,QAAM,QAAQ,WAAW,SAAS,GAAG,WAAW;AAChD,QAAM,OAAO,WAAW,SAAS,WAAW;AAC5C,QAAM,MAAM,eAAe,OAAO,SAAS,OAAO,QAAQ,KAAK;AAC/D,MAAI;AACJ,MAAI;AAAE,gBAAY,kBAAkB,KAAK,OAAO,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,IAAI;AAAA,EAAG,QAClF;AAAE,SAAK,gBAAgB,SAAS,KAAK,wBAAwB;AAAA,EAAG,UACtE;AAAU,QAAI,KAAK,CAAC;AAAA,EAAG;AACvB,SAAO,KAAK,IAAI,KAAK;AACrB,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAO;AACtC,QAAM,SAAS,iBAAiB,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK;AACxE,MAAI,CAAC,OAAQ,MAAK,WAAW,oCAAoC;AACjE,MAAI,OAAO,KAAK,SAAS,OAAO,WAAY,MAAK,yBAAyB,YAAY,OAAO,UAAU,mCAAmC,OAAO,KAAK,IAAI,EAAE;AAC5J,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,SAAS;AAAA,IACT,QAAQ,MAAM;AAAA,IACd,UAAU,MAAM;AAAA,IAChB,eAAe,OAAO;AAAA,IACtB,WAAW,OAAO;AAAA,IAClB,YAAY,OAAO;AAAA,EACrB,CAAC;AACD,kBAAgB,KAAK;AACrB,SAAO;AACT;AAEO,SAAS,gBAAgB,OAAO;AACrC,QAAM,SAAS,iBAAiB,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK;AACxE,MAAI,CAAC,OAAQ,MAAK,WAAW,4CAA4C;AACzE,SAAO,QAAQ,KAAK,CAAC;AACrB,SAAO,KAAK,MAAM;AAClB,mBAAiB,OAAO,KAAK;AAC7B,mBAAiB,OAAO,KAAK;AAC/B;AAEO,IAAM,gBAAgB,OAAO,OAAO;AAAA,EACzC,gCAAgC;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,OAAO,OAAO,EAAE,OAAO,SAAS,aAAa,WAAW,oBAAoB,gBAAgB,eAAe,CAAC;AACzH,CAAC;",
   "names": ["hkdf", "sha256", "randomBytes", "ageHeader", "sha256", "hkdf", "randomBytes"]
 }
diff --git a/packages/crypto/package.json b/packages/crypto/package.json
index 3705032..1cbba2a 100644
--- a/packages/crypto/package.json
+++ b/packages/crypto/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pksuite/crypto",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Browser and Node cryptographic primitives for the pk suite.",
   "type": "module",
   "sideEffects": false,
diff --git a/packages/crypto/src/file.js b/packages/crypto/src/file.js
index 6a82f8d..5c91c1b 100644
--- a/packages/crypto/src/file.js
+++ b/packages/crypto/src/file.js
@@ -249,9 +249,17 @@ export function encryptChunk({ state, index, plaintext }) {
   return concat(nonce, ciphertext);
 }
 
-export function openFileEnvelope({ identity, header }) {
+export function openFileEnvelope({ identity, unwrapFileKey, header }) {
+  if ((identity === undefined) === (unwrapFileKey === undefined))
+    fail("E_INPUT", "provide exactly one of identity or unwrapFileKey");
   const parsed = parseEnvelopeHeader(header);
-  const fileKey = ageInternals.decryptAgeHeader(parsed.ageHeader, identity);
+  // unwrapFileKey supports holders that never release an identity scalar
+  // (e.g. the pkvault agent): it receives a COPY of the age header and must
+  // return the 16-byte file key. The package copies the result, so the
+  // caller may wipe its own buffer afterwards.
+  const fileKey = identity !== undefined
+    ? ageInternals.decryptAgeHeader(parsed.ageHeader, identity)
+    : new Uint8Array(bytes(unwrapFileKey(new Uint8Array(parsed.ageHeader)), 16, "unwrapped file key"));
   let retained = false;
   try {
     const metadataKey = deriveMetadataKey(fileKey, parsed.fileId);
diff --git a/packages/crypto/src/index.d.ts b/packages/crypto/src/index.d.ts
index 1645cdf..a8afc6c 100644
--- a/packages/crypto/src/index.d.ts
+++ b/packages/crypto/src/index.d.ts
@@ -62,7 +62,15 @@ export function encryptChunk(options: {
 }): Uint8Array;
 
 export function openFileEnvelope(options: {
-  identity: string | Uint8Array;
+  /** age identity string or 32-byte X25519 scalar. Provide exactly one of identity or unwrapFileKey. */
+  identity?: string | Uint8Array;
+  /**
+   * Alternative for holders that never release the identity scalar (e.g. an
+   * agent): receives a copy of the envelope's age header and must return the
+   * 16-byte file key. The package copies the result; the callback may wipe
+   * its own buffer afterwards.
+   */
+  unwrapFileKey?: (ageHeader: Uint8Array) => Uint8Array;
   header: Uint8Array;
 }): FileEnvelopeState & { readonly kind: "decryption"; readonly metadata: Required<FileMetadata> };
 
diff --git a/packages/crypto/test/file.test.js b/packages/crypto/test/file.test.js
index 6da49bd..d6622d5 100644
--- a/packages/crypto/test/file.test.js
+++ b/packages/crypto/test/file.test.js
@@ -405,3 +405,36 @@ test("finalization detects missing chunks after an interrupted resume", () => {
   decryptChunk({ state: decryption, index: 0, ciphertext: ciphertext0 });
   throwsCode(() => finalizeEnvelope(decryption), "E_ENVELOPE_INCOMPLETE");
 });
+
+test("openFileEnvelope accepts an external unwrapFileKey instead of an identity", () => {
+  const identity = createRecipientIdentity();
+  const state = createFileEncryption({ recipient: identity.recipient, plaintextSize: 5, metadata: { name: "agent.bin" } });
+  const ciphertext = encryptChunk({ state, index: 0, plaintext: new Uint8Array([9, 8, 7, 6, 5]) });
+  finalizeEnvelope(state);
+
+  // exactly-one-of validation
+  throwsCode(() => openFileEnvelope({ header: state.header }), "E_INPUT");
+  throwsCode(() => openFileEnvelope({ identity: identity.identity, unwrapFileKey: () => new Uint8Array(16), header: state.header }), "E_INPUT");
+
+  // callback path: unwrap out-of-band (models the agent holding the scalar),
+  // and prove the package copies the key — the callback wipes its buffer.
+  let sawHeaderCopy = null;
+  const unwrapFileKey = (ageHeader) => {
+    sawHeaderCopy = ageHeader;
+    const fileKey = ageInternals.decryptAgeHeader(ageHeader, identity.identity);
+    const shared = new Uint8Array(fileKey);
+    fileKey.fill(0);
+    return shared;
+  };
+  const opened = openFileEnvelope({ unwrapFileKey, header: state.header });
+  sawHeaderCopy.fill(0); // mutating the copy must not affect the opened state
+  const plaintext = decryptChunk({ state: opened, index: 0, ciphertext });
+  assert.deepEqual(Array.from(plaintext), [9, 8, 7, 6, 5]);
+  finalizeEnvelope(opened);
+
+  // wrong-length key from the callback is rejected before use
+  assert.throws(
+    () => openFileEnvelope({ unwrapFileKey: () => new Uint8Array(32), header: state.header }),
+    (error) => /16 bytes/.test(error.message),
+  );
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 77e92a9..824ce6d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -11,7 +11,7 @@ importers:
   apps/pkvault:
     dependencies:
       '@pksuite/crypto':
-        specifier: 0.1.0
+        specifier: 0.2.0
         version: link:../../packages/crypto
 
   packages/crypto:
diff --git a/spec/SPEC-FILE.md b/spec/SPEC-FILE.md
index 62d02c4..893ceab 100644
--- a/spec/SPEC-FILE.md
+++ b/spec/SPEC-FILE.md
@@ -194,6 +194,23 @@ internal copies are erased.
 Storage-specific identifiers and authorization capabilities are deliberately
 outside the envelope and MUST NOT be added as authenticated fields in v1.
 
+### 7.1 Single-file serialization
+
+When the envelope is stored as one local file (e.g. `pkvault seal`), the
+canonical layout is the header followed immediately by every chunk in index
+order, with no framing between chunks and no trailing bytes:
+
+```text
+header || chunk_0 || chunk_1 || ... || chunk_{chunk_count-1}
+```
+
+Chunk boundaries are fully derivable from the header geometry (each stored
+chunk is exactly `24 + expected_plaintext_length(i) + 16` bytes), so the
+file remains seekable without an index. Readers MUST reject trailing bytes
+after the final chunk. The RECOMMENDED file extension is `.pkfile`. This
+serialization adds no cryptographic surface: it is the §3–§5 envelope,
+concatenated.
+
 ## 8. Test requirements
 
 Published vectors cover identity encoding, age-header sealing, header bytes,