@agentdock/crypto 0.0.60 → 0.0.61

package/dist/aes.d.ts

@@ -4,12 +4,18 @@
  * Bundle format:
  *   version (1 byte) | nonce (12 bytes) | ciphertext + authTag
  *
- * - version: always 0 for this implementation
+ * - version: 0 = plaintext JSON, 1 = gzip-compressed JSON (see below)
  * - nonce: 12-byte IV for AES-GCM
  * - ciphertext + authTag: Web Crypto API returns these concatenated
  *   (authTag is the last 16 bytes)
  *
  * Data is JSON-serialized before encryption and JSON-parsed after decryption.
+ *
+ * Compression: before encryption the JSON bytes are gzipped; the smaller of
+ * {compressed, original} is encrypted, and the version byte records which one
+ * (1 = compressed, 0 = original). Small payloads that gzip would grow stay at
+ * version 0. Legacy (pre-compression) bundles are always version 0, so old data
+ * decrypts unchanged with no migration.
  */
 /**
  * Encrypt arbitrary JSON-serializable data with AES-256-GCM.

package/dist/aes.js

@@ -1 +1 @@
-"use strict";import{getRandomBytes as u}from"./random.js";const a=0,n=12,E=16,S=1+n+E,d=32;export async function encryptAesGcm(t,e){l(e);const s=new TextEncoder().encode(JSON.stringify(t)),c=u(n),i=await p(e,["encrypt"]),y=await globalThis.crypto.subtle.encrypt({name:"AES-GCM",iv:c},i,s),r=new Uint8Array(y),o=new Uint8Array(1+n+r.length);return o[0]=a,o.set(c,1),o.set(r,1+n),o}export async function decryptAesGcm(t,e){if(l(e),t.length<S||t[0]!==a)return null;const s=t.slice(1,1+n),c=t.slice(1+n);try{const i=await p(e,["decrypt"]),y=await globalThis.crypto.subtle.decrypt({name:"AES-GCM",iv:s},i,c),r=new TextDecoder().decode(y);return JSON.parse(r)}catch{return null}}async function p(t,e){return globalThis.crypto.subtle.importKey("raw",t,"AES-GCM",!1,[...e])}function l(t){if(t.length!==d)throw new Error(`AES-256-GCM requires a 32-byte key, got ${t.length} bytes`)}
+"use strict";import{gzipSync as w,gunzipSync as A}from"fflate";import{getRandomBytes as _}from"./random.js";const E=0,g=1,s=12,d=16,m=1+s+d,f=104857600,N=32;export async function encryptAesGcm(t,e){h(e);const n=new TextEncoder().encode(JSON.stringify(t)),o=w(n,{level:1}),i=o.length<n.length,a=i?g:E,l=i?o:n,r=_(s),p=await S(e,["encrypt"]),c=await globalThis.crypto.subtle.encrypt({name:"AES-GCM",iv:r},p,l),u=new Uint8Array(c),y=new Uint8Array(1+s+u.length);return y[0]=a,y.set(r,1),y.set(u,1+s),y}export async function decryptAesGcm(t,e){if(h(e),t.length<m)return null;const n=t[0];if(n!==E&&n!==g)return null;const o=t.slice(1,1+s),i=t.slice(1+s);try{const a=await S(e,["decrypt"]),l=await globalThis.crypto.subtle.decrypt({name:"AES-GCM",iv:o},a,i);let r;if(n===g){const c=new Uint8Array(l);if(c.length>=4&&new DataView(c.buffer,c.byteOffset+c.length-4,4).getUint32(0,!0)>f||(r=A(c),r.length>f))return null}else r=new Uint8Array(l);const p=new TextDecoder().decode(r);return JSON.parse(p)}catch{return null}}async function S(t,e){return globalThis.crypto.subtle.importKey("raw",t,"AES-GCM",!1,[...e])}function h(t){if(t.length!==N)throw new Error(`AES-256-GCM requires a 32-byte key, got ${t.length} bytes`)}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentdock/crypto",
-  "version": "0.0.60",
+  "version": "0.0.61",
   "description": "E2E encryption for AgentDock — AES-256-GCM, key derivation, Web Crypto API",
   "license": "UNLICENSED",
   "author": "CCPark",
@@ -22,8 +22,9 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
+    "fflate": "^0.8.3",
     "tweetnacl": "^1.0.3",
-    "@agentdock/wire": "0.0.60"
+    "@agentdock/wire": "0.0.61"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "^3.0.0",