@agentunion/fastaun-browser 0.2.14 → 0.2.16

package/dist/e2ee-group.d.ts

@@ -1,3 +1,4 @@
+import { type ProtectedHeadersInput } from './e2ee.js';
 import type { KeyStore } from './keystore/index.js';
 import { type IdentityRecord, type JsonObject, type Message } from './types.js';
 export interface LoadedGroupSecret {
@@ -10,6 +11,20 @@ export interface LoadedGroupSecret {
     epoch_chain_unverified?: boolean;
     epoch_chain_unverified_reason?: string;
 }
+/**
+ * ECIES 加密（异步，SubtleCrypto）。
+ * @param peerPubkeyBytes 65 字节未压缩 P-256 公钥 (0x04 开头)
+ * @param plaintext 待加密明文
+ * @returns ephemeral_pubkey(65B) || iv(12B) || ciphertext || tag(16B)
+ */
+export declare function eciesEncrypt(peerPubkeyBytes: Uint8Array, plaintext: Uint8Array): Promise<Uint8Array>;
+/**
+ * ECIES 解密（异步，SubtleCrypto）。
+ * @param privateKeyPem PEM 格式 EC 私钥
+ * @param ciphertext ephemeral_pubkey(65B) || iv(12B) || encrypted+tag(16B)
+ * @returns 解密后的明文
+ */
+export declare function eciesDecrypt(privateKeyPem: string, ciphertext: Uint8Array): Promise<Uint8Array>;
 /**
  * 计算 Epoch Transcript Chain 哈希（异步，SubtleCrypto SHA-256）。
  * prev_chain=null 时使用 genesis 前缀，否则将 prev_chain hex 解码为字节。
@@ -41,6 +56,10 @@ export declare function encryptGroupMessage(groupId: string, epoch: number, grou
     timestamp: number;
     senderPrivateKeyPem?: string | null;
     senderCertPem?: string | null;
+    protectedHeaders?: ProtectedHeadersInput;
+    protected_headers?: ProtectedHeadersInput;
+    headers?: ProtectedHeadersInput;
+    context?: JsonObject | null;
 }): Promise<JsonObject>;
 /**
  * 解密群组消息（异步）。
@@ -66,6 +85,29 @@ export declare function verifyMembershipManifest(manifest: JsonObject, initiator
 export declare function computeMembershipCommitment(memberAids: string[], epoch: number, groupId: string, groupSecret: Uint8Array): Promise<string>;
 /** 验证 Membership Commitment（异步） */
 export declare function verifyMembershipCommitment(commitment: string, memberAids: string[], epoch: number, groupId: string, myAid: string, groupSecret: Uint8Array): Promise<boolean>;
+/**
+ * 计算群组状态哈希（异步，SubtleCrypto SHA-256）。
+ *
+ * state_hash = SHA-256(
+ *   group_id | 0x00 |
+ *   state_version (uint64 big-endian 8 bytes) | 0x00 |
+ *   key_epoch (uint64 big-endian 8 bytes) | 0x00 |
+ *   membership_block | 0x00 |
+ *   policy_block | 0x00 |
+ *   prev_state_hash (32 bytes, 全零表示创世)
+ * )
+ */
+export declare function computeStateHash(params: {
+    groupId: string;
+    stateVersion: number;
+    keyEpoch: number;
+    members: Array<{
+        aid: string;
+        role: string;
+    }>;
+    policy: Record<string, unknown>;
+    prevStateHash: string;
+}): Promise<string>;
 /** 存储 group_secret 到 keystore metadata（异步） */
 export declare function storeGroupSecret(keystore: KeyStore, aid: string, groupId: string, epoch: number, groupSecret: Uint8Array, commitment: string, memberAids: string[], epochChain?: string, pendingRotationId?: string, epochChainUnverified?: boolean | null, epochChainUnverifiedReason?: string | null): Promise<boolean>;
 /** 保存指定 epoch key；低于 current 时写入 old epoch，不覆盖 current。 */
@@ -158,6 +200,7 @@ export declare class GroupE2EEManager {
     /** 指定目标 epoch 号轮换（配合服务端 CAS 使用） */
     rotateEpochTo(groupId: string, targetEpoch: number, memberAids: string[], opts?: {
         rotationId?: string;
+        prevChainHint?: string | null;
     }): Promise<JsonObject>;
     /** 手动存储 group_secret。返回 false 表示 epoch 降级被拒。 */
     storeSecret(groupId: string, epoch: number, groupSecretBytes: Uint8Array, commitment: string, memberAids: string[], epochChain?: string): Promise<boolean>;
@@ -176,11 +219,19 @@ export declare class GroupE2EEManager {
     encrypt(groupId: string, payload: JsonObject, opts?: {
         messageId?: string;
         timestamp?: number;
+        protectedHeaders?: ProtectedHeadersInput;
+        protected_headers?: ProtectedHeadersInput;
+        headers?: ProtectedHeadersInput;
+        context?: JsonObject | null;
     }): Promise<JsonObject>;
     /** 使用指定 epoch 加密群消息。 */
     encryptWithEpoch(groupId: string, epoch: number, payload: JsonObject, opts?: {
         messageId?: string;
         timestamp?: number;
+        protectedHeaders?: ProtectedHeadersInput;
+        protected_headers?: ProtectedHeadersInput;
+        headers?: ProtectedHeadersInput;
+        context?: JsonObject | null;
     }): Promise<JsonObject>;
     /**
      * 解密单条群消息（异步）。内置防重放 + 发送方验签 + 外层字段校验。

package/dist/e2ee-group.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"e2ee-group.d.ts","sourceRoot":"","sources":["../src/e2ee-group.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,OAAO,EACb,MAAM,YAAY,CAAC;AAKpB,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,6BAA6B,CAAC,EAAE,MAAM,CAAC;CACxC;AAgCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAiBD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAS1G;AAED,wBAAsB,+BAA+B,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASrH;AAED,aAAa;AACb,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD,mBAAmB;AACnB,eAAO,MAAM,gBAAgB,+FAGnB,CAAC;AAEX,gCAAgC;AAChC,eAAO,MAAM,sBAAsB,kFAGzB,CAAC;AAEX,wBAAwB;AACxB,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AAqHzD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,EACvB,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE;IACJ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GACA,OAAO,CAAC,UAAU,CAAC,CA0CrB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EACrC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,EAC7B,IAAI,CAAC,EAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,GACpC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAqHzB;AAsBD,kCAAkC;AAClC,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,UAAU,EAAE,MAAM,EAAE,EACpB,IAAI,CAAC,EAAE;IACL,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,UAAU,CAYZ;AAkBD,+DAA+D;AAC/D,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,UAAU,EACpB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,oCAAoC;AACpC,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,UAAU,EACpB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC,CAWlB;AAID,2DAA2D;AAC3D,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,MAAM,EAAE,EACpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,mCAAmC;AACnC,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,OAAO,CAAC,CAUlB;AAuBD,8CAA8C;AAC9C,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,EACvB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,CAAC,EAAE,MAAM,EACnB,iBAAiB,SAAK,EACtB,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,EACrC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,GACzC,OAAO,CAAC,OAAO,CAAC,CAOlB;AA8BD,2DAA2D;AAC3D,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,EACvB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,CAAC,EAAE,MAAM,EACnB,iBAAiB,SAAK,EACtB,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,EACrC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,GACzC,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,0BAA0B;AAC1B,wBAAsB,eAAe,CACnC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAmBnC;AA0DD,uCAAuC;AACvC,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CASlC;AAED,kCAAkC;AAClC,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,gBAAgB,GAAE,MAAoC,GACrD,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,iDAAiD;AACjD,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,8BAA8B;AAC9B,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAMf;AAID,8BAA8B;AAC9B,wBAAgB,mBAAmB,IAAI,UAAU,CAIhD;AAED,oCAAoC;AACpC,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,EACvB,UAAU,EAAE,MAAM,EAAE,EACpB,aAAa,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,UAAU,GAAG,IAAI,EAC5B,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,CAAC,CAerB;AAED,+BAA+B;AAC/B,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,GAAG,UAAU,EAC7B,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,OAAO,CAAC,CAkElB;AAED,qBAAqB;AACrB,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,UAAU,CASZ;AAED,oBAAoB;AACpB,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,GAAG,UAAU,EAC7B,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,EAAE,EACxB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAgD5B;AAED,oBAAoB;AACpB,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,OAAO,GAAG,UAAU,EAC9B,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IACL,eAAe,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GACA,OAAO,CAAC,OAAO,CAAC,CAgElB;AAED,iBAAiB;AACjB,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,OAAO,CAGT;AAID,gBAAgB;AAChB,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,SAAQ;IAI3B,6CAA6C;IAC7C,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAQ9E,eAAe;IACf,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAItE,UAAU;IACV,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKnE,oBAAoB;IACpB,IAAI,IAAI,IAAI;IAQZ,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAID,oBAAoB;AACpB,qBAAa,uBAAuB;IAClC,OAAO,CAAC,KAAK,CAAkC;IAC/C,OAAO,CAAC,SAAS,CAAS;gBAEd,QAAQ,SAAO;IAI3B,6CAA6C;IAC7C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAQ3B,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;CAGzB;AAID;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,YAAY,CAAW;IAC/B,OAAO,CAAC,YAAY,CAAmB;IACvC,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,iBAAiB,CAA0B;IACnD,OAAO,CAAC,mBAAmB,CAA0C;IACrE,OAAO,CAAC,sBAAsB,CAA0C;IACxE,OAAO,CAAC,mBAAmB,CAAsC;gBAErD,IAAI,EAAE;QAChB,UAAU,EAAE,MAAM,cAAc,CAAC;QACjC,QAAQ,EAAE,QAAQ,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,kBAAkB,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QAC7D,qBAAqB,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;KACjE;IAYD,yBAAyB;YACX,aAAa;IAO3B,yEAAyE;IACnE,WAAW,CACf,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,UAAU,CAAC;IAkBtB,yBAAyB;IACnB,WAAW,CACf,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,UAAU,CAAC;IAwBtB,mCAAmC;IAC7B,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAAE,EACpB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC,UAAU,CAAC;IAqCtB,gDAAgD;IAC1C,WAAW,CACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,UAAU,EAC5B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC;IAOb,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1F,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAChE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAClI,GAAG,IAAI,CAAC;IAIH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAIjE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,SAA8B,GAAG,OAAO,CAAC,MAAM,CAAC;IAM/F,uDAAuD;IACjD,OAAO,CACX,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAChD,OAAO,CAAC,UAAU,CAAC;IAoBtB,wBAAwB;IAClB,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,UAAU,EACnB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAChD,OAAO,CAAC,UAAU,CAAC;IA2BtB;;;;OAIG;IACG,OAAO,CACX,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IA4C1B,WAAW;IACL,YAAY,CAChB,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9B,OAAO,CAAC,OAAO,EAAE,CAAC;IAUrB;;;;;;OAMG;IACG,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAqCjE,8CAA8C;IACxC,oBAAoB,CACxB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAiB7B,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAUnF,6BAA6B;IACvB,mBAAmB,CACvB,cAAc,EAAE,UAAU,EAC1B,cAAc,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAuBvB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKrD,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKvD,qCAAqC;IACrC,kBAAkB,IAAI,IAAI;IAI1B,8BAA8B;IACxB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjD,OAAO,CAAC,WAAW;CAMpB"}
+{"version":3,"file":"e2ee-group.d.ts","sourceRoot":"","sources":["../src/e2ee-group.ts"],"names":[],"mappings":"AAQA,OAAO,EAcL,KAAK,qBAAqB,EAC3B,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,OAAO,EACb,MAAM,YAAY,CAAC;AAKpB,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,6BAA6B,CAAC,EAAE,MAAM,CAAC;CACxC;AAMD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAiC1G;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CA+BrG;AAgCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAiBD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAS1G;AAED,wBAAsB,+BAA+B,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASrH;AAED,aAAa;AACb,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD,mBAAmB;AACnB,eAAO,MAAM,gBAAgB,+FAGnB,CAAC;AAEX,gCAAgC;AAChC,eAAO,MAAM,sBAAsB,kFAGzB,CAAC;AAYX,wBAAwB;AACxB,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AA2SzD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,EACvB,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE;IACJ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CAC7B,GACA,OAAO,CAAC,UAAU,CAAC,CA+CrB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EACrC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,EAC7B,IAAI,CAAC,EAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,GACpC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAiIzB;AAsBD,kCAAkC;AAClC,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,UAAU,EAAE,MAAM,EAAE,EACpB,IAAI,CAAC,EAAE;IACL,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,UAAU,CAYZ;AAkBD,+DAA+D;AAC/D,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,UAAU,EACpB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,oCAAoC;AACpC,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,UAAU,EACpB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC,CAWlB;AAID,2DAA2D;AAC3D,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,MAAM,EAAE,EACpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,mCAAmC;AACnC,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,GACtB,OAAO,CAAC,OAAO,CAAC,CAUlB;AAgCD;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiDlB;AAuBD,8CAA8C;AAC9C,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,EACvB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,CAAC,EAAE,MAAM,EACnB,iBAAiB,SAAK,EACtB,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,EACrC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,GACzC,OAAO,CAAC,OAAO,CAAC,CAOlB;AA8BD,2DAA2D;AAC3D,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,EACvB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,CAAC,EAAE,MAAM,EACnB,iBAAiB,SAAK,EACtB,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,EACrC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,GACzC,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,0BAA0B;AAC1B,wBAAsB,eAAe,CACnC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAmBnC;AA0DD,uCAAuC;AACvC,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CASlC;AAED,kCAAkC;AAClC,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,gBAAgB,GAAE,MAAoC,GACrD,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,iDAAiD;AACjD,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,8BAA8B;AAC9B,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAMf;AAID,8BAA8B;AAC9B,wBAAgB,mBAAmB,IAAI,UAAU,CAIhD;AAED,oCAAoC;AACpC,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,UAAU,EACvB,UAAU,EAAE,MAAM,EAAE,EACpB,aAAa,EAAE,MAAM,EACrB,QAAQ,CAAC,EAAE,UAAU,GAAG,IAAI,EAC5B,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,CAAC,CAerB;AAED,+BAA+B;AAC/B,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,GAAG,UAAU,EAC7B,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,OAAO,CAAC,CAkElB;AAED,qBAAqB;AACrB,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,UAAU,CASZ;AAED,oBAAoB;AACpB,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,GAAG,UAAU,EAC7B,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,EAAE,EACxB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA6C5B;AAED,oBAAoB;AACpB,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,OAAO,GAAG,UAAU,EAC9B,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IACL,eAAe,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GACA,OAAO,CAAC,OAAO,CAAC,CA0ElB;AAED,iBAAiB;AACjB,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,gBAAgB,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,OAAO,CAGT;AAID,gBAAgB;AAChB,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,SAAQ;IAI3B,6CAA6C;IAC7C,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAQ9E,eAAe;IACf,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAItE,UAAU;IACV,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAKnE,oBAAoB;IACpB,IAAI,IAAI,IAAI;IAQZ,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAID,oBAAoB;AACpB,qBAAa,uBAAuB;IAClC,OAAO,CAAC,KAAK,CAAkC;IAC/C,OAAO,CAAC,SAAS,CAAS;gBAEd,QAAQ,SAAO;IAI3B,6CAA6C;IAC7C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAQ3B,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;CAGzB;AAID;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,YAAY,CAAW;IAC/B,OAAO,CAAC,YAAY,CAAmB;IACvC,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,iBAAiB,CAA0B;IACnD,OAAO,CAAC,mBAAmB,CAA0C;IACrE,OAAO,CAAC,sBAAsB,CAA0C;IACxE,OAAO,CAAC,mBAAmB,CAAsC;gBAErD,IAAI,EAAE;QAChB,UAAU,EAAE,MAAM,cAAc,CAAC;QACjC,QAAQ,EAAE,QAAQ,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,kBAAkB,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QAC7D,qBAAqB,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;KACjE;IAYD,yBAAyB;YACX,aAAa;IAO3B,yEAAyE;IACnE,WAAW,CACf,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,UAAU,CAAC;IAkBtB,yBAAyB;IACnB,WAAW,CACf,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,UAAU,CAAC;IAwBtB,mCAAmC;IAC7B,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAAE,EACpB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAC5D,OAAO,CAAC,UAAU,CAAC;IAwCtB,gDAAgD;IAC1C,WAAW,CACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,UAAU,EAC5B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC;IAOb,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1F,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAChE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAClI,GAAG,IAAI,CAAC;IAIH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAIjE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,SAA8B,GAAG,OAAO,CAAC,MAAM,CAAC;IAM/F,uDAAuD;IACjD,OAAO,CACX,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;QACzC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;QAC1C,OAAO,CAAC,EAAE,qBAAqB,CAAC;QAChC,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;KAC7B,GACA,OAAO,CAAC,UAAU,CAAC;IAsBtB,wBAAwB;IAClB,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,UAAU,EACnB,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;QACzC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;QAC1C,OAAO,CAAC,EAAE,qBAAqB,CAAC;QAChC,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;KAC7B,GACA,OAAO,CAAC,UAAU,CAAC;IA6BtB;;;;OAIG;IACG,OAAO,CACX,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IA4C1B,WAAW;IACL,YAAY,CAChB,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9B,OAAO,CAAC,OAAO,EAAE,CAAC;IAUrB;;;;;;OAMG;IACG,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAqCjE,8CAA8C;IACxC,oBAAoB,CACxB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAiB7B,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAUnF,6BAA6B;IACvB,mBAAmB,CACvB,cAAc,EAAE,UAAU,EAC1B,cAAc,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAuBvB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKrD,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKvD,qCAAqC;IACrC,kBAAkB,IAAI,IAAI;IAI1B,8BAA8B;IACxB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjD,OAAO,CAAC,WAAW;CAMpB"}

package/dist/e2ee-group.js

@@ -1,11 +1,75 @@
 // ── GroupE2EEManager（群组端到端加密 — 浏览器 SubtleCrypto 实现）──
 // 所有密码学操作均为异步（SubtleCrypto API 要求）
 import { E2EEError, E2EEGroupSecretMissingError, } from './errors.js';
-import { uint8ToBase64, base64ToUint8, toBufferSource } from './crypto.js';
+import { uint8ToBase64, base64ToUint8, pemToArrayBuffer, toBufferSource } from './crypto.js';
 import { SUITE, _concatBytes as concatBytes, _certificateSha256Fingerprint as certificateSha256Fingerprint, _ecdsaSignDer as ecdsaSignDer, _ecdsaVerifyDer as ecdsaVerifyDer, _hkdfDerive as hkdfDerive, _aesGcmEncrypt as aesGcmEncrypt, _aesGcmDecrypt as aesGcmDecrypt, _randomNonce as randomNonce, _uuidV4 as uuidV4, _importCertPublicKeyEcdsa as importCertPublicKeyEcdsa, _importPrivateKeyEcdsa as importPrivateKeyEcdsa, } from './e2ee.js';
 import { isJsonObject, } from './types.js';
 const _encoder = new TextEncoder();
 const _decoder = new TextDecoder();
+// ── ECIES (P-256 ECDH + HKDF-SHA256 + AES-256-GCM, SubtleCrypto) ──
+const _ECIES_HKDF_INFO = _encoder.encode('aun-epoch-key-ecies');
+/**
+ * ECIES 加密（异步，SubtleCrypto）。
+ * @param peerPubkeyBytes 65 字节未压缩 P-256 公钥 (0x04 开头)
+ * @param plaintext 待加密明文
+ * @returns ephemeral_pubkey(65B) || iv(12B) || ciphertext || tag(16B)
+ */
+export async function eciesEncrypt(peerPubkeyBytes, plaintext) {
+    // 生成临时 ECDH 密钥对
+    const ephemeral = await crypto.subtle.generateKey({ name: 'ECDH', namedCurve: 'P-256' }, true, ['deriveBits']);
+    // 导出临时公钥（未压缩 65 字节）
+    const ephPubRaw = new Uint8Array(await crypto.subtle.exportKey('raw', ephemeral.publicKey));
+    // 导入对方公钥
+    const peerKey = await crypto.subtle.importKey('raw', toBufferSource(peerPubkeyBytes), { name: 'ECDH', namedCurve: 'P-256' }, false, []);
+    // ECDH 共享密钥
+    const sharedBits = await crypto.subtle.deriveBits({ name: 'ECDH', public: peerKey }, ephemeral.privateKey, 256);
+    const shared = new Uint8Array(sharedBits);
+    // HKDF 派生 32 字节 AES 密钥
+    const hkdfKey = await crypto.subtle.importKey('raw', shared, 'HKDF', false, ['deriveBits']);
+    const derivedBits = await crypto.subtle.deriveBits({ name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: _ECIES_HKDF_INFO }, hkdfKey, 256);
+    const aesKeyBytes = new Uint8Array(derivedBits);
+    // AES-256-GCM 加密
+    const iv = crypto.getRandomValues(new Uint8Array(12));
+    const aesKey = await crypto.subtle.importKey('raw', aesKeyBytes, 'AES-GCM', false, ['encrypt']);
+    const ctBuf = await crypto.subtle.encrypt({ name: 'AES-GCM', iv: toBufferSource(iv), tagLength: 128 }, aesKey, toBufferSource(plaintext));
+    const ctArr = new Uint8Array(ctBuf); // ciphertext + tag(16B)
+    // 拼接: ephemeral_pubkey(65) || iv(12) || ciphertext+tag
+    const result = new Uint8Array(65 + 12 + ctArr.length);
+    result.set(ephPubRaw, 0);
+    result.set(iv, 65);
+    result.set(ctArr, 77);
+    return result;
+}
+/**
+ * ECIES 解密（异步，SubtleCrypto）。
+ * @param privateKeyPem PEM 格式 EC 私钥
+ * @param ciphertext ephemeral_pubkey(65B) || iv(12B) || encrypted+tag(16B)
+ * @returns 解密后的明文
+ */
+export async function eciesDecrypt(privateKeyPem, ciphertext) {
+    if (ciphertext.length < 65 + 12 + 16) {
+        throw new E2EEError('ECIES ciphertext too short');
+    }
+    const ephPubBytes = ciphertext.slice(0, 65);
+    const iv = ciphertext.slice(65, 77);
+    const encryptedWithTag = ciphertext.slice(77);
+    // 导入自己的私钥
+    const privKeyDer = pemToArrayBuffer(privateKeyPem);
+    const privKey = await crypto.subtle.importKey('pkcs8', privKeyDer, { name: 'ECDH', namedCurve: 'P-256' }, false, ['deriveBits']);
+    // 导入临时公钥
+    const ephPubKey = await crypto.subtle.importKey('raw', toBufferSource(ephPubBytes), { name: 'ECDH', namedCurve: 'P-256' }, false, []);
+    // ECDH 共享密钥
+    const sharedBits = await crypto.subtle.deriveBits({ name: 'ECDH', public: ephPubKey }, privKey, 256);
+    const shared = new Uint8Array(sharedBits);
+    // HKDF 派生 AES 密钥
+    const hkdfKey = await crypto.subtle.importKey('raw', shared, 'HKDF', false, ['deriveBits']);
+    const derivedBits = await crypto.subtle.deriveBits({ name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: _ECIES_HKDF_INFO }, hkdfKey, 256);
+    const aesKeyBytes = new Uint8Array(derivedBits);
+    // AES-256-GCM 解密（SubtleCrypto 要求 ciphertext+tag 拼接传入）
+    const aesKey = await crypto.subtle.importKey('raw', aesKeyBytes, 'AES-GCM', false, ['decrypt']);
+    const ptBuf = await crypto.subtle.decrypt({ name: 'AES-GCM', iv: toBufferSource(iv), tagLength: 128 }, aesKey, toBufferSource(encryptedWithTag));
+    return new Uint8Array(ptBuf);
+}
 // ── Epoch Transcript Chain 工具函数 ──────────────────────────
 /** Genesis 前缀：aun-epoch-chain:genesis（UTF-8 字节） */
 const _EPOCH_CHAIN_GENESIS_PREFIX = _encoder.encode('aun-epoch-chain:genesis');
@@ -116,6 +180,14 @@ export const AAD_MATCH_FIELDS_GROUP = [
     'group_id', 'from', 'message_id',
     'epoch', 'encryption_mode', 'suite',
 ];
+const AAD_OPTIONAL_FIELDS = [
+    'payload_type', 'protected_headers', 'context_type', 'context_id',
+];
+const METADATA_AUTH_FIELD = '_auth';
+const METADATA_AUTH_ALG = 'HMAC-SHA256';
+const METADATA_KEY_DOMAIN = _encoder.encode('aun-envelope-metadata-key-v1');
+const PROTECTED_HEADERS_DOMAIN = _encoder.encode('aun-protected-headers-v1');
+const PROTECTED_CONTEXT_DOMAIN = _encoder.encode('aun-protected-context-v1');
 /** 旧 epoch 默认保留时间（秒） */
 export const OLD_EPOCH_RETENTION_SECONDS = 7 * 24 * 3600;
 async function loadKeyStoreGroupEpoch(keystore, aid, groupId, epoch) {
@@ -153,17 +225,170 @@ async function cleanupKeyStoreGroupOldEpochs(keystore, aid, groupId, cutoffMs) {
     throw new Error(`keystore ${keystore.constructor?.name ?? 'unknown'} missing cleanupGroupOldEpochsState method`);
 }
 // ── 群组 AAD 工具 ────────────────────────────────────────────
+function canonicalStringify(value) {
+    if (value === null || value === undefined)
+        return 'null';
+    if (Array.isArray(value)) {
+        return `[${value.map(item => canonicalStringify(item)).join(',')}]`;
+    }
+    if (typeof value === 'object') {
+        const record = value;
+        const pairs = Object.keys(record)
+            .sort()
+            .map(key => `${JSON.stringify(key)}:${canonicalStringify(record[key])}`);
+        return `{${pairs.join(',')}}`;
+    }
+    return JSON.stringify(value) ?? 'null';
+}
+function hasOwn(obj, key) {
+    return Object.prototype.hasOwnProperty.call(obj, key);
+}
+function normalizeProtectedHeaderKey(key) {
+    const value = String(key ?? '').trim().toLowerCase();
+    if (!value || !/^[a-z0-9_-]+$/.test(value)) {
+        throw new E2EEError('protected header key must match [a-z0-9_-]+');
+    }
+    if (value === METADATA_AUTH_FIELD) {
+        throw new E2EEError('protected header key is reserved');
+    }
+    return value;
+}
+function normalizeProtectedHeaders(headers) {
+    if (headers == null)
+        return {};
+    const toObject = headers.toObject;
+    const raw = typeof toObject === 'function' ? toObject.call(headers) : headers;
+    if (typeof raw !== 'object' || Array.isArray(raw)) {
+        throw new E2EEError('protected_headers must be an object');
+    }
+    const result = {};
+    for (const [key, value] of Object.entries(raw)) {
+        result[normalizeProtectedHeaderKey(key)] = value == null ? '' : String(value);
+    }
+    return result;
+}
+function metadataBody(metadata) {
+    const body = {};
+    for (const [key, value] of Object.entries(metadata)) {
+        if (key !== METADATA_AUTH_FIELD) {
+            body[key] = value;
+        }
+    }
+    return body;
+}
+async function hmacSha256(key, data) {
+    const hmacKey = await crypto.subtle.importKey('raw', toBufferSource(key), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    const sig = await crypto.subtle.sign('HMAC', hmacKey, toBufferSource(data));
+    return new Uint8Array(sig);
+}
+async function metadataAuthTag(key, domain, body) {
+    const metadataKey = await hmacSha256(key, METADATA_KEY_DOMAIN);
+    return hmacSha256(metadataKey, concatBytes(domain, new Uint8Array([0]), _encoder.encode(canonicalStringify(body))));
+}
+async function withMetadataAuth(metadata, key, domain) {
+    const body = metadataBody(metadata);
+    if (Object.keys(body).length === 0)
+        return {};
+    const tag = await metadataAuthTag(key, domain, body);
+    return {
+        ...body,
+        [METADATA_AUTH_FIELD]: {
+            alg: METADATA_AUTH_ALG,
+            tag: uint8ToBase64(tag),
+        },
+    };
+}
+function timingSafeEqual(a, b) {
+    if (a.byteLength !== b.byteLength)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.byteLength; i++) {
+        diff |= a[i] ^ b[i];
+    }
+    return diff === 0;
+}
+async function verifyMetadataAuth(metadata, key, domain) {
+    if (metadata == null)
+        return true;
+    if (typeof metadata !== 'object' || Array.isArray(metadata))
+        return false;
+    const record = metadata;
+    const auth = record[METADATA_AUTH_FIELD];
+    if (!auth || typeof auth !== 'object' || Array.isArray(auth))
+        return false;
+    const authObj = auth;
+    if (authObj.alg !== METADATA_AUTH_ALG)
+        return false;
+    if (typeof authObj.tag !== 'string' || !authObj.tag)
+        return false;
+    const body = metadataBody(record);
+    if (Object.keys(body).length === 0)
+        return false;
+    let actual;
+    try {
+        actual = base64ToUint8(authObj.tag);
+    }
+    catch {
+        return false;
+    }
+    const expected = await metadataAuthTag(key, domain, body);
+    return timingSafeEqual(actual, expected);
+}
+async function verifyEnvelopeMetadataAuth(payload, messageKey) {
+    return await verifyMetadataAuth(payload.protected_headers, messageKey, PROTECTED_HEADERS_DOMAIN)
+        && await verifyMetadataAuth(payload.context, messageKey, PROTECTED_CONTEXT_DOMAIN);
+}
+function normalizeContextMetadata(context) {
+    if (!context || typeof context !== 'object' || Array.isArray(context))
+        return {};
+    return metadataBody(context);
+}
+function exposedEnvelopeMetadata(metadata) {
+    if (!metadata || typeof metadata !== 'object' || Array.isArray(metadata))
+        return undefined;
+    const body = metadataBody(metadata);
+    return Object.keys(body).length > 0 ? body : undefined;
+}
+async function copyOptionalEnvelopeMetadata(envelope, messageKey, opts) {
+    const payloadType = String(opts?.payloadType ?? '').trim();
+    const protectedHeaders = normalizeProtectedHeaders(opts?.protectedHeaders);
+    if (payloadType) {
+        protectedHeaders.payload_type = payloadType;
+    }
+    if (Object.keys(protectedHeaders).length > 0) {
+        envelope.protected_headers = await withMetadataAuth(protectedHeaders, messageKey, PROTECTED_HEADERS_DOMAIN);
+    }
+    const contextMetadata = normalizeContextMetadata(opts?.context);
+    if (Object.keys(contextMetadata).length > 0) {
+        envelope.context = await withMetadataAuth(contextMetadata, messageKey, PROTECTED_CONTEXT_DOMAIN);
+    }
+}
+function validateDecryptedEnvelopeMetadata(decoded, payload, message) {
+    if (payload.protected_headers && typeof payload.protected_headers === 'object' && !Array.isArray(payload.protected_headers)) {
+        const headers = metadataBody(payload.protected_headers);
+        if (hasOwn(headers, 'payload_type')) {
+            if (!decoded || typeof decoded !== 'object' || Array.isArray(decoded))
+                return false;
+            if (String(decoded.type ?? '') !== String(headers.payload_type ?? '')) {
+                return false;
+            }
+        }
+    }
+    if (payload.context && typeof payload.context === 'object' && !Array.isArray(payload.context)) {
+        const protectedContext = metadataBody(payload.context);
+        const outerContext = normalizeContextMetadata(message?.context);
+        if (canonicalStringify(outerContext) !== canonicalStringify(protectedContext))
+            return false;
+    }
+    return true;
+}
 /** 群组 AAD 序列化（排序键、紧凑 JSON） */
 function aadBytesGroup(aad) {
     const obj = {};
     for (const field of AAD_FIELDS_GROUP) {
         obj[field] = aad[field] ?? null;
     }
-    const sorted = {};
-    for (const key of Object.keys(obj).sort()) {
-        sorted[key] = obj[key];
-    }
-    return _encoder.encode(JSON.stringify(sorted));
+    return _encoder.encode(canonicalStringify(obj));
 }
 /** 群组 AAD 字段匹配检查 */
 function aadMatchesGroup(expected, actual) {
@@ -198,19 +423,24 @@ export async function encryptGroupMessage(groupId, epoch, groupSecret, payload,
         encryption_mode: MODE_EPOCH_GROUP_KEY,
         suite: SUITE,
     };
-    const aadBytes = aadBytesGroup(aad);
-    const [ciphertext, tag] = await aesGcmEncrypt(msgKey, nonce, plaintext, aadBytes);
     const envelope = {
         type: 'e2ee.group_encrypted',
         version: '1',
         encryption_mode: MODE_EPOCH_GROUP_KEY,
         suite: SUITE,
         epoch,
-        nonce: uint8ToBase64(nonce),
-        ciphertext: uint8ToBase64(ciphertext),
-        tag: uint8ToBase64(tag),
-        aad,
     };
+    await copyOptionalEnvelopeMetadata(envelope, msgKey, {
+        payloadType: payload.type,
+        protectedHeaders: opts.protectedHeaders ?? opts.protected_headers ?? opts.headers,
+        context: opts.context ?? null,
+    });
+    const aadBytes = aadBytesGroup(aad);
+    const [ciphertext, tag] = await aesGcmEncrypt(msgKey, nonce, plaintext, aadBytes);
+    envelope.nonce = uint8ToBase64(nonce);
+    envelope.ciphertext = uint8ToBase64(ciphertext);
+    envelope.tag = uint8ToBase64(tag);
+    envelope.aad = aad;
     // 发送方签名：对 ciphertext + tag + aad_bytes 签名（不可否认性）
     if (opts.senderPrivateKeyPem) {
         const signKey = await importPrivateKeyEcdsa(opts.senderPrivateKeyPem);
@@ -286,20 +516,33 @@ export async function decryptGroupMessage(message, groupSecrets, senderCertPem,
         const nonce = base64ToUint8(payload.nonce);
         const ciphertext = base64ToUint8(payload.ciphertext);
         const tag = base64ToUint8(payload.tag);
+        if (!await verifyEnvelopeMetadataAuth(payload, msgKey)) {
+            return null;
+        }
         // AAD 校验：直接用 payload 中的 AAD
         const aadBytes = aad ? aadBytesGroup(aad) : new Uint8Array(0);
         const plaintext = await aesGcmDecrypt(msgKey, nonce, ciphertext, tag, aadBytes);
         const decoded = JSON.parse(_decoder.decode(plaintext));
+        if (!validateDecryptedEnvelopeMetadata(decoded, payload, message)) {
+            return null;
+        }
+        const e2ee = {
+            encryption_mode: MODE_EPOCH_GROUP_KEY,
+            suite: SUITE,
+            epoch,
+            sender_verified: false,
+        };
+        const protectedHeaders = exposedEnvelopeMetadata(payload.protected_headers);
+        if (protectedHeaders)
+            e2ee.protected_headers = protectedHeaders;
+        const context = exposedEnvelopeMetadata(payload.context);
+        if (context)
+            e2ee.context = context;
         const result = {
             ...message,
             payload: decoded,
             encrypted: true,
-            e2ee: {
-                encryption_mode: MODE_EPOCH_GROUP_KEY,
-                suite: SUITE,
-                epoch,
-                sender_verified: false,
-            },
+            e2ee,
         };
         // 发送方签名验证
         const senderSigB64 = payload.sender_signature;
@@ -431,6 +674,100 @@ export async function verifyMembershipCommitment(commitment, memberAids, epoch,
     }
     return diff === 0;
 }
+// ── Group State Hash ─────────────────────────────────────────
+/** 将数值编码为 uint64 big-endian 8 字节 */
+function _uint64BE(n) {
+    const buf = new Uint8Array(8);
+    // JS number 安全整数范围内，高 4 字节用 Math.floor(n / 2^32)
+    const hi = Math.floor(n / 0x100000000);
+    const lo = n >>> 0;
+    buf[0] = (hi >>> 24) & 0xff;
+    buf[1] = (hi >>> 16) & 0xff;
+    buf[2] = (hi >>> 8) & 0xff;
+    buf[3] = hi & 0xff;
+    buf[4] = (lo >>> 24) & 0xff;
+    buf[5] = (lo >>> 16) & 0xff;
+    buf[6] = (lo >>> 8) & 0xff;
+    buf[7] = lo & 0xff;
+    return buf;
+}
+/** 递归排序 JSON 对象的 key（用于 canonical JSON） */
+function _sortObjectKeys(obj) {
+    if (obj === null || obj === undefined || typeof obj !== 'object')
+        return obj;
+    if (Array.isArray(obj))
+        return obj.map(_sortObjectKeys);
+    const sorted = {};
+    for (const key of Object.keys(obj).sort()) {
+        sorted[key] = _sortObjectKeys(obj[key]);
+    }
+    return sorted;
+}
+/**
+ * 计算群组状态哈希（异步，SubtleCrypto SHA-256）。
+ *
+ * state_hash = SHA-256(
+ *   group_id | 0x00 |
+ *   state_version (uint64 big-endian 8 bytes) | 0x00 |
+ *   key_epoch (uint64 big-endian 8 bytes) | 0x00 |
+ *   membership_block | 0x00 |
+ *   policy_block | 0x00 |
+ *   prev_state_hash (32 bytes, 全零表示创世)
+ * )
+ */
+export async function computeStateHash(params) {
+    const { groupId, stateVersion, keyEpoch, members, policy, prevStateHash } = params;
+    // 按 AID 排序，构建 membership_block
+    const sorted = [...members].sort((a, b) => a.aid.localeCompare(b.aid));
+    const membershipBlock = sorted.map(m => `${m.aid}:${m.role}`).join('|');
+    // 按 key 递归排序的 canonical JSON（无空格）
+    const policyBlock = Object.keys(policy).length > 0
+        ? JSON.stringify(_sortObjectKeys(policy))
+        : '';
+    // prev_state_hash: 32 字节，空则全零
+    const prevBytes = prevStateHash
+        ? _hexToBytes(prevStateHash)
+        : new Uint8Array(32);
+    // state_version / key_epoch → uint64 big-endian
+    const svBuf = _uint64BE(stateVersion);
+    const keBuf = _uint64BE(keyEpoch);
+    const sep = new Uint8Array([0x00]);
+    const groupIdBytes = _encoder.encode(groupId);
+    const membershipBytes = _encoder.encode(membershipBlock);
+    const policyBytes = _encoder.encode(policyBlock);
+    // 拼接所有字段
+    const totalLen = groupIdBytes.length + 1
+        + svBuf.length + 1
+        + keBuf.length + 1
+        + membershipBytes.length + 1
+        + policyBytes.length + 1
+        + prevBytes.length;
+    const data = new Uint8Array(totalLen);
+    let offset = 0;
+    data.set(groupIdBytes, offset);
+    offset += groupIdBytes.length;
+    data.set(sep, offset);
+    offset += 1;
+    data.set(svBuf, offset);
+    offset += svBuf.length;
+    data.set(sep, offset);
+    offset += 1;
+    data.set(keBuf, offset);
+    offset += keBuf.length;
+    data.set(sep, offset);
+    offset += 1;
+    data.set(membershipBytes, offset);
+    offset += membershipBytes.length;
+    data.set(sep, offset);
+    offset += 1;
+    data.set(policyBytes, offset);
+    offset += policyBytes.length;
+    data.set(sep, offset);
+    offset += 1;
+    data.set(prevBytes, offset);
+    const digest = await crypto.subtle.digest('SHA-256', data);
+    return _bytesToHex(new Uint8Array(digest));
+}
 // ── Group Secret 生命周期管理 ────────────────────────────────
 /**
  * per-group 异步串行化锁，保护 storeGroupSecret 的 load-check-save 原子性。
@@ -694,17 +1031,14 @@ export async function handleKeyRequest(request, keystore, aid, currentMembers, p
     const secretData = await loadGroupSecret(keystore, aid, groupId, epoch);
     if (!secretData)
         return null;
-    let commitment = secretData.commitment;
+    // P0 历史隔离：若本 epoch 的 member_aids 非空且 requester 不在其中，拒绝响应
+    // 防止已退出成员通过 currentMembers 校验后拿到历史 epoch 密钥
     const memberAids = (secretData.member_aids ?? []).map(String).filter(Boolean).sort();
-    const currentMemberAids = currentMembers.map(String).filter(Boolean).sort();
-    let responseMemberAids = memberAids.length ? memberAids : currentMemberAids;
-    let includeEpochChain = true;
-    if (currentMemberAids.includes(requesterAid) && !responseMemberAids.includes(requesterAid)) {
-        responseMemberAids = currentMemberAids;
-        commitment = await computeMembershipCommitment(responseMemberAids, epoch, groupId, secretData.secret);
-        includeEpochChain = false;
-    }
-    else if (!commitment) {
+    if (memberAids.length > 0 && !memberAids.includes(requesterAid))
+        return null;
+    const responseMemberAids = memberAids.length ? memberAids : currentMembers.map(String).filter(Boolean).sort();
+    let commitment = secretData.commitment;
+    if (!commitment) {
         commitment = await computeMembershipCommitment(responseMemberAids, epoch, groupId, secretData.secret);
     }
     const response = {
@@ -719,7 +1053,8 @@ export async function handleKeyRequest(request, keystore, aid, currentMembers, p
         responder_aid: aid,
         issued_at: Date.now(),
     };
-    if (includeEpochChain && secretData.epoch_chain !== undefined) {
+    // epoch_chain 始终随响应携带（若存在），不再因兼容分支而省略
+    if (secretData.epoch_chain !== undefined) {
         response.epoch_chain = secretData.epoch_chain;
     }
     return privateKeyPem ? await signGroupKeyResponse(response, privateKeyPem) : response;
@@ -768,6 +1103,17 @@ export async function handleKeyResponse(response, keystore, aid, opts) {
     const valid = await verifyMembershipCommitment(commitment, memberAids, epoch, groupId, aid, groupSecret);
     if (!valid)
         return false;
+    const manifest = isJsonObject(payload.manifest) ? payload.manifest : null;
+    if (manifest) {
+        if (manifest.group_id !== groupId || manifest.epoch !== epoch)
+            return false;
+        const manifestMembers = Array.isArray(manifest.member_aids)
+            ? manifest.member_aids.map((item) => String(item ?? '').trim()).filter(Boolean).sort()
+            : [];
+        const payloadMembers = memberAids.map((item) => String(item ?? '').trim()).filter(Boolean).sort();
+        if (manifestMembers.length > 0 && manifestMembers.join('\n') !== payloadMembers.join('\n'))
+            return false;
+    }
     const rotationId = typeof payload.rotation_id === 'string' ? payload.rotation_id : '';
     const chainAssessment = await assessIncomingEpochChain(keystore, aid, groupId, epoch, commitment, incomingEpochChain, rotationId, String(payload.distributed_by ?? payload.rotator_aid ?? payload.responder_aid ?? ''), 'key_response');
     if (!chainAssessment.ok)
@@ -918,7 +1264,10 @@ export class GroupE2EEManager {
         const aid = this._currentAid();
         const current = await loadGroupSecret(this._keystoreRef, aid, groupId, targetEpoch - 1)
             ?? await loadGroupSecret(this._keystoreRef, aid, groupId);
-        const prevChain = current?.epoch_chain ?? null;
+        let prevChain = current?.epoch_chain ?? null;
+        if (!prevChain && opts?.prevChainHint) {
+            prevChain = opts.prevChainHint;
+        }
         const gs = generateGroupSecret();
         const commitment = await computeMembershipCommitment(memberAids, targetEpoch, groupId, gs);
         const epochChain = await computeEpochChain(prevChain, targetEpoch, commitment, aid);
@@ -971,6 +1320,8 @@ export class GroupE2EEManager {
             timestamp: opts?.timestamp ?? Date.now(),
             senderPrivateKeyPem: senderPkPem,
             senderCertPem,
+            protectedHeaders: opts?.protectedHeaders ?? opts?.protected_headers ?? opts?.headers,
+            context: opts?.context ?? null,
         });
     }
     /** 使用指定 epoch 加密群消息。 */
@@ -992,6 +1343,8 @@ export class GroupE2EEManager {
             timestamp: opts?.timestamp ?? Date.now(),
             senderPrivateKeyPem: senderPkPem,
             senderCertPem,
+            protectedHeaders: opts?.protectedHeaders ?? opts?.protected_headers ?? opts?.headers,
+            context: opts?.context ?? null,
         });
     }
     /**