@agimon-ai/doompi-web-security 0.0.1-alpha.2 → 0.0.1-alpha.26

package/dist/adapters/sealedTransport.d.cts

@@ -1,5 +1,5 @@
 //#region src/adapters/sealedTransport.d.ts
-interface SealedTransport {
+export interface SealedTransport {
   /** False on loopback and before the handshake completes, where everything passes through. */
   active(): boolean;
   sealText(text: string): Promise<string>;
@@ -11,7 +11,7 @@ interface SealedTransport {
   fetch(input: string, init?: RequestInit): Promise<Response>;
   lastFailure(): string | undefined;
 }
-declare function createSealedTransport(): SealedTransport & {
+export declare function createSealedTransport(): SealedTransport & {
   /** Completes the handshake against the host key from the QR. */
   connect: (hostPublicKey: string) => Promise<string | undefined>;
   /** Drops the channel, so everything falls back to pass-through. */
@@ -30,7 +30,7 @@ declare function createSealedTransport(): SealedTransport & {
  * Inactive until a handshake completes, and inactive forever on the loopback
  * listener, so `sealedTransport.fetch` is a plain `fetch` there.
  */
-declare const sealedTransport: SealedTransport & {
+export declare const sealedTransport: SealedTransport & {
   /** Completes the handshake against the host key from the QR. */
   connect: (hostPublicKey: string) => Promise<string | undefined>;
   /** Drops the channel, so everything falls back to pass-through. */
@@ -39,5 +39,4 @@ declare const sealedTransport: SealedTransport & {
   relayRequestsThrough: (path: string) => void;
 };
 //#endregion
-export { SealedTransport, createSealedTransport, sealedTransport };
 //# sourceMappingURL=sealedTransport.d.cts.map

package/dist/adapters/sealedTransport.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"sealedTransport.d.cts","names":[],"sources":["../../src/adapters/sealedTransport.ts"],"mappings":";UAqBiB;;EAEf;EACA,SAAS,eAAe;;EAExB,SAAS,eAAe;EACxB,WAAW,OAAO,aAAa,QAAQ;EACvC,WAAW,OAAO,aAAa,QAAQ;;EAEvC,MAAM,eAAe,OAAO,cAAc,QAAQ;EAClD;;iBA4Dc,yBAAyB;;EAEvC,UAAU,0BAA0B;;EAEpC;;EAEA,uBAAuB;;;;;;;;;;;;;cAmJZ,iBAAe;;EAvJjB,UAAC,0BAA0B;;EAE7B;;EAEe,uBAAC"}
+{"version":3,"file":"sealedTransport.d.cts","names":[],"sources":["../../src/adapters/sealedTransport.ts"],"mappings":";iBAqBiB;;EAEf;EACA,SAAS,eAAe;;EAExB,SAAS,eAAe;EACxB,WAAW,OAAO,aAAa,QAAQ;EACvC,WAAW,OAAO,aAAa,QAAQ;;EAEvC,MAAM,eAAe,OAAO,cAAc,QAAQ;EAClD;;wBA4Dc,yBAAyB;;EAEvC,UAAU,0BAA0B;;EAEpC;;EAEA,uBAAuB;;;;;;;;;;;;;qBAmJZ,iBAAe;;EAvJjB,UAAC,0BAA0B;;EAE7B;;EAEe,uBAAC"}

package/dist/adapters/sealedTransport.d.mts

@@ -1,5 +1,5 @@
 //#region src/adapters/sealedTransport.d.ts
-interface SealedTransport {
+export interface SealedTransport {
   /** False on loopback and before the handshake completes, where everything passes through. */
   active(): boolean;
   sealText(text: string): Promise<string>;
@@ -11,7 +11,7 @@ interface SealedTransport {
   fetch(input: string, init?: RequestInit): Promise<Response>;
   lastFailure(): string | undefined;
 }
-declare function createSealedTransport(): SealedTransport & {
+export declare function createSealedTransport(): SealedTransport & {
   /** Completes the handshake against the host key from the QR. */
   connect: (hostPublicKey: string) => Promise<string | undefined>;
   /** Drops the channel, so everything falls back to pass-through. */
@@ -30,7 +30,7 @@ declare function createSealedTransport(): SealedTransport & {
  * Inactive until a handshake completes, and inactive forever on the loopback
  * listener, so `sealedTransport.fetch` is a plain `fetch` there.
  */
-declare const sealedTransport: SealedTransport & {
+export declare const sealedTransport: SealedTransport & {
   /** Completes the handshake against the host key from the QR. */
   connect: (hostPublicKey: string) => Promise<string | undefined>;
   /** Drops the channel, so everything falls back to pass-through. */
@@ -39,5 +39,4 @@ declare const sealedTransport: SealedTransport & {
   relayRequestsThrough: (path: string) => void;
 };
 //#endregion
-export { SealedTransport, createSealedTransport, sealedTransport };
 //# sourceMappingURL=sealedTransport.d.mts.map

package/dist/adapters/sealedTransport.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"sealedTransport.d.mts","names":[],"sources":["../../src/adapters/sealedTransport.ts"],"mappings":";UAqBiB;;EAEf;EACA,SAAS,eAAe;;EAExB,SAAS,eAAe;EACxB,WAAW,OAAO,aAAa,QAAQ;EACvC,WAAW,OAAO,aAAa,QAAQ;;EAEvC,MAAM,eAAe,OAAO,cAAc,QAAQ;EAClD;;iBA4Dc,yBAAyB;;EAEvC,UAAU,0BAA0B;;EAEpC;;EAEA,uBAAuB;;;;;;;;;;;;;cAmJZ,iBAAe;;EAvJjB,UAAC,0BAA0B;;EAE7B;;EAEe,uBAAC"}
+{"version":3,"file":"sealedTransport.d.mts","names":[],"sources":["../../src/adapters/sealedTransport.ts"],"mappings":";iBAqBiB;;EAEf;EACA,SAAS,eAAe;;EAExB,SAAS,eAAe;EACxB,WAAW,OAAO,aAAa,QAAQ;EACvC,WAAW,OAAO,aAAa,QAAQ;;EAEvC,MAAM,eAAe,OAAO,cAAc,QAAQ;EAClD;;wBA4Dc,yBAAyB;;EAEvC,UAAU,0BAA0B;;EAEpC;;EAEA,uBAAuB;;;;;;;;;;;;;qBAmJZ,iBAAe;;EAvJjB,UAAC,0BAA0B;;EAE7B;;EAEe,uBAAC"}

package/dist/browser.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./adapters/browserSealedChannel.cjs"),t=require("./adapters/sealedTransport.cjs");exports.channelFromSecret=e.channelFromSecret,exports.connectSealedChannel=e.connectSealedChannel,exports.createSealedTransport=t.createSealedTransport,exports.sealedTransport=t.sealedTransport;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./types/bundleManifest.cjs"),t=require("./adapters/browserBundleVerifier.cjs"),n=require("./adapters/browserSealedChannel.cjs"),r=require("./adapters/sealedTransport.cjs");exports.BUNDLE_MANIFEST_ROUTE=e.BUNDLE_MANIFEST_ROUTE,exports.BUNDLE_MANIFEST_VERSION=e.BUNDLE_MANIFEST_VERSION,exports.assetFor=e.assetFor,exports.canonicalManifest=e.canonicalManifest,exports.channelFromSecret=n.channelFromSecret,exports.connectSealedChannel=n.connectSealedChannel,exports.createSealedTransport=r.createSealedTransport,exports.digestFor=e.digestFor,exports.isBundleManifest=e.isBundleManifest,exports.isSignedBundleManifest=e.isSignedBundleManifest,exports.sealedTransport=r.sealedTransport,exports.verifyBundleAsset=t.verifyBundleAsset,exports.verifySignedBundleManifest=t.verifySignedBundleManifest;

package/dist/browser.d.cts

@@ -1,3 +1,5 @@
+import { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, BundleAsset, BundleManifest, SignedBundleManifest, assetFor, canonicalManifest, digestFor, isBundleManifest, isSignedBundleManifest } from "./types/bundleManifest.cjs";
+import { BundleAssetVerificationFailure, BundleAssetVerificationResult, BundleVerificationFailure, BundleVerificationResult, verifyBundleAsset, verifySignedBundleManifest } from "./adapters/browserBundleVerifier.cjs";
 import { OpenResult, SealResult, SealedChannel, channelFromSecret, connectSealedChannel } from "./adapters/browserSealedChannel.cjs";
 import { SealedTransport, createSealedTransport, sealedTransport } from "./adapters/sealedTransport.cjs";
-export { type OpenResult, type SealResult, type SealedChannel, type SealedTransport, channelFromSecret, connectSealedChannel, createSealedTransport, sealedTransport };
+export { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, type BundleAsset, type BundleAssetVerificationFailure, type BundleAssetVerificationResult, type BundleManifest, type BundleVerificationFailure, type BundleVerificationResult, type OpenResult, type SealResult, type SealedChannel, type SealedTransport, type SignedBundleManifest, assetFor, canonicalManifest, channelFromSecret, connectSealedChannel, createSealedTransport, digestFor, isBundleManifest, isSignedBundleManifest, sealedTransport, verifyBundleAsset, verifySignedBundleManifest };

package/dist/browser.d.mts

@@ -1,3 +1,5 @@
+import { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, BundleAsset, BundleManifest, SignedBundleManifest, assetFor, canonicalManifest, digestFor, isBundleManifest, isSignedBundleManifest } from "./types/bundleManifest.mjs";
+import { BundleAssetVerificationFailure, BundleAssetVerificationResult, BundleVerificationFailure, BundleVerificationResult, verifyBundleAsset, verifySignedBundleManifest } from "./adapters/browserBundleVerifier.mjs";
 import { OpenResult, SealResult, SealedChannel, channelFromSecret, connectSealedChannel } from "./adapters/browserSealedChannel.mjs";
 import { SealedTransport, createSealedTransport, sealedTransport } from "./adapters/sealedTransport.mjs";
-export { type OpenResult, type SealResult, type SealedChannel, type SealedTransport, channelFromSecret, connectSealedChannel, createSealedTransport, sealedTransport };
+export { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, type BundleAsset, type BundleAssetVerificationFailure, type BundleAssetVerificationResult, type BundleManifest, type BundleVerificationFailure, type BundleVerificationResult, type OpenResult, type SealResult, type SealedChannel, type SealedTransport, type SignedBundleManifest, assetFor, canonicalManifest, channelFromSecret, connectSealedChannel, createSealedTransport, digestFor, isBundleManifest, isSignedBundleManifest, sealedTransport, verifyBundleAsset, verifySignedBundleManifest };

package/dist/browser.mjs

@@ -1 +1 @@
-import{channelFromSecret as e,connectSealedChannel as t}from"./adapters/browserSealedChannel.mjs";import{createSealedTransport as n,sealedTransport as r}from"./adapters/sealedTransport.mjs";export{e as channelFromSecret,t as connectSealedChannel,n as createSealedTransport,r as sealedTransport};
+import{BUNDLE_MANIFEST_ROUTE as e,BUNDLE_MANIFEST_VERSION as t,assetFor as n,canonicalManifest as r,digestFor as i,isBundleManifest as a,isSignedBundleManifest as o}from"./types/bundleManifest.mjs";import{verifyBundleAsset as s,verifySignedBundleManifest as c}from"./adapters/browserBundleVerifier.mjs";import{channelFromSecret as l,connectSealedChannel as u}from"./adapters/browserSealedChannel.mjs";import{createSealedTransport as d,sealedTransport as f}from"./adapters/sealedTransport.mjs";export{e as BUNDLE_MANIFEST_ROUTE,t as BUNDLE_MANIFEST_VERSION,n as assetFor,r as canonicalManifest,l as channelFromSecret,u as connectSealedChannel,d as createSealedTransport,i as digestFor,a as isBundleManifest,o as isSignedBundleManifest,f as sealedTransport,s as verifyBundleAsset,c as verifySignedBundleManifest};

package/dist/index.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./types/sealedChannel.cjs"),t=require("./services/serialQueue.cjs"),n=require("./types/bundleManifest.cjs");exports.BUNDLE_MANIFEST_ROUTE=n.BUNDLE_MANIFEST_ROUTE,exports.BUNDLE_MANIFEST_VERSION=n.BUNDLE_MANIFEST_VERSION,exports.CLIENT_TO_SERVER_INFO=e.CLIENT_TO_SERVER_INFO,exports.MAX_MESSAGES_PER_KEY=e.MAX_MESSAGES_PER_KEY,exports.NONCE_BYTES=e.NONCE_BYTES,exports.NONCE_COUNTER_BYTES=e.NONCE_COUNTER_BYTES,exports.NONCE_PREFIX_BYTES=e.NONCE_PREFIX_BYTES,exports.SEALED_BODY_HEADER=e.SEALED_BODY_HEADER,exports.SEALED_CLIENT_KEY_HEADER=e.SEALED_CLIENT_KEY_HEADER,exports.SEALED_KEY_PARAM=e.SEALED_KEY_PARAM,exports.SEALED_VERSION=e.SEALED_VERSION,exports.SERVER_TO_CLIENT_INFO=e.SERVER_TO_CLIENT_INFO,exports.canonicalManifest=n.canonicalManifest,exports.createSerialQueue=t.createSerialQueue,exports.describeSealedFailure=e.describeSealedFailure,exports.digestFor=n.digestFor,exports.infoFor=e.infoFor,exports.isBundleManifest=n.isBundleManifest,exports.isSealedEnvelope=e.isSealedEnvelope;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./types/bundleManifest.cjs"),t=require("./types/sealedChannel.cjs"),n=require("./services/serialQueue.cjs");exports.BUNDLE_MANIFEST_ROUTE=e.BUNDLE_MANIFEST_ROUTE,exports.BUNDLE_MANIFEST_VERSION=e.BUNDLE_MANIFEST_VERSION,exports.CLIENT_TO_SERVER_INFO=t.CLIENT_TO_SERVER_INFO,exports.MAX_MESSAGES_PER_KEY=t.MAX_MESSAGES_PER_KEY,exports.NONCE_BYTES=t.NONCE_BYTES,exports.NONCE_COUNTER_BYTES=t.NONCE_COUNTER_BYTES,exports.NONCE_PREFIX_BYTES=t.NONCE_PREFIX_BYTES,exports.SEALED_BODY_HEADER=t.SEALED_BODY_HEADER,exports.SEALED_CLIENT_KEY_HEADER=t.SEALED_CLIENT_KEY_HEADER,exports.SEALED_KEY_PARAM=t.SEALED_KEY_PARAM,exports.SEALED_VERSION=t.SEALED_VERSION,exports.SERVER_TO_CLIENT_INFO=t.SERVER_TO_CLIENT_INFO,exports.assetFor=e.assetFor,exports.canonicalManifest=e.canonicalManifest,exports.createSerialQueue=n.createSerialQueue,exports.describeSealedFailure=t.describeSealedFailure,exports.digestFor=e.digestFor,exports.infoFor=t.infoFor,exports.isBundleManifest=e.isBundleManifest,exports.isSealedEnvelope=t.isSealedEnvelope,exports.isSignedBundleManifest=e.isSignedBundleManifest;

package/dist/index.d.cts

@@ -1,4 +1,4 @@
+import { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, BundleAsset, BundleManifest, SignedBundleManifest, assetFor, canonicalManifest, digestFor, isBundleManifest, isSignedBundleManifest } from "./types/bundleManifest.cjs";
 import { CLIENT_TO_SERVER_INFO, MAX_MESSAGES_PER_KEY, NONCE_BYTES, NONCE_COUNTER_BYTES, NONCE_PREFIX_BYTES, SEALED_BODY_HEADER, SEALED_CLIENT_KEY_HEADER, SEALED_KEY_PARAM, SEALED_VERSION, SERVER_TO_CLIENT_INFO, SealedDirection, SealedEnvelope, SealedFailure, describeSealedFailure, infoFor, isSealedEnvelope } from "./types/sealedChannel.cjs";
-import { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, BundleAsset, BundleManifest, SignedBundleManifest, canonicalManifest, digestFor, isBundleManifest } from "./types/bundleManifest.cjs";
 import { SerialQueue, createSerialQueue } from "./services/serialQueue.cjs";
-export { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, type BundleAsset, type BundleManifest, CLIENT_TO_SERVER_INFO, MAX_MESSAGES_PER_KEY, NONCE_BYTES, NONCE_COUNTER_BYTES, NONCE_PREFIX_BYTES, SEALED_BODY_HEADER, SEALED_CLIENT_KEY_HEADER, SEALED_KEY_PARAM, SEALED_VERSION, SERVER_TO_CLIENT_INFO, type SealedDirection, type SealedEnvelope, type SealedFailure, type SerialQueue, type SignedBundleManifest, canonicalManifest, createSerialQueue, describeSealedFailure, digestFor, infoFor, isBundleManifest, isSealedEnvelope };
+export { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, type BundleAsset, type BundleManifest, CLIENT_TO_SERVER_INFO, MAX_MESSAGES_PER_KEY, NONCE_BYTES, NONCE_COUNTER_BYTES, NONCE_PREFIX_BYTES, SEALED_BODY_HEADER, SEALED_CLIENT_KEY_HEADER, SEALED_KEY_PARAM, SEALED_VERSION, SERVER_TO_CLIENT_INFO, type SealedDirection, type SealedEnvelope, type SealedFailure, type SerialQueue, type SignedBundleManifest, assetFor, canonicalManifest, createSerialQueue, describeSealedFailure, digestFor, infoFor, isBundleManifest, isSealedEnvelope, isSignedBundleManifest };

package/dist/index.d.mts

@@ -1,4 +1,4 @@
+import { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, BundleAsset, BundleManifest, SignedBundleManifest, assetFor, canonicalManifest, digestFor, isBundleManifest, isSignedBundleManifest } from "./types/bundleManifest.mjs";
 import { CLIENT_TO_SERVER_INFO, MAX_MESSAGES_PER_KEY, NONCE_BYTES, NONCE_COUNTER_BYTES, NONCE_PREFIX_BYTES, SEALED_BODY_HEADER, SEALED_CLIENT_KEY_HEADER, SEALED_KEY_PARAM, SEALED_VERSION, SERVER_TO_CLIENT_INFO, SealedDirection, SealedEnvelope, SealedFailure, describeSealedFailure, infoFor, isSealedEnvelope } from "./types/sealedChannel.mjs";
-import { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, BundleAsset, BundleManifest, SignedBundleManifest, canonicalManifest, digestFor, isBundleManifest } from "./types/bundleManifest.mjs";
 import { SerialQueue, createSerialQueue } from "./services/serialQueue.mjs";
-export { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, type BundleAsset, type BundleManifest, CLIENT_TO_SERVER_INFO, MAX_MESSAGES_PER_KEY, NONCE_BYTES, NONCE_COUNTER_BYTES, NONCE_PREFIX_BYTES, SEALED_BODY_HEADER, SEALED_CLIENT_KEY_HEADER, SEALED_KEY_PARAM, SEALED_VERSION, SERVER_TO_CLIENT_INFO, type SealedDirection, type SealedEnvelope, type SealedFailure, type SerialQueue, type SignedBundleManifest, canonicalManifest, createSerialQueue, describeSealedFailure, digestFor, infoFor, isBundleManifest, isSealedEnvelope };
+export { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, type BundleAsset, type BundleManifest, CLIENT_TO_SERVER_INFO, MAX_MESSAGES_PER_KEY, NONCE_BYTES, NONCE_COUNTER_BYTES, NONCE_PREFIX_BYTES, SEALED_BODY_HEADER, SEALED_CLIENT_KEY_HEADER, SEALED_KEY_PARAM, SEALED_VERSION, SERVER_TO_CLIENT_INFO, type SealedDirection, type SealedEnvelope, type SealedFailure, type SerialQueue, type SignedBundleManifest, assetFor, canonicalManifest, createSerialQueue, describeSealedFailure, digestFor, infoFor, isBundleManifest, isSealedEnvelope, isSignedBundleManifest };

package/dist/index.mjs

@@ -1 +1 @@
-import{CLIENT_TO_SERVER_INFO as e,MAX_MESSAGES_PER_KEY as t,NONCE_BYTES as n,NONCE_COUNTER_BYTES as r,NONCE_PREFIX_BYTES as i,SEALED_BODY_HEADER as a,SEALED_CLIENT_KEY_HEADER as o,SEALED_KEY_PARAM as s,SEALED_VERSION as c,SERVER_TO_CLIENT_INFO as l,describeSealedFailure as u,infoFor as d,isSealedEnvelope as f}from"./types/sealedChannel.mjs";import{createSerialQueue as p}from"./services/serialQueue.mjs";import{BUNDLE_MANIFEST_ROUTE as m,BUNDLE_MANIFEST_VERSION as h,canonicalManifest as g,digestFor as _,isBundleManifest as v}from"./types/bundleManifest.mjs";export{m as BUNDLE_MANIFEST_ROUTE,h as BUNDLE_MANIFEST_VERSION,e as CLIENT_TO_SERVER_INFO,t as MAX_MESSAGES_PER_KEY,n as NONCE_BYTES,r as NONCE_COUNTER_BYTES,i as NONCE_PREFIX_BYTES,a as SEALED_BODY_HEADER,o as SEALED_CLIENT_KEY_HEADER,s as SEALED_KEY_PARAM,c as SEALED_VERSION,l as SERVER_TO_CLIENT_INFO,g as canonicalManifest,p as createSerialQueue,u as describeSealedFailure,_ as digestFor,d as infoFor,v as isBundleManifest,f as isSealedEnvelope};
+import{BUNDLE_MANIFEST_ROUTE as e,BUNDLE_MANIFEST_VERSION as t,assetFor as n,canonicalManifest as r,digestFor as i,isBundleManifest as a,isSignedBundleManifest as o}from"./types/bundleManifest.mjs";import{CLIENT_TO_SERVER_INFO as s,MAX_MESSAGES_PER_KEY as c,NONCE_BYTES as l,NONCE_COUNTER_BYTES as u,NONCE_PREFIX_BYTES as d,SEALED_BODY_HEADER as f,SEALED_CLIENT_KEY_HEADER as p,SEALED_KEY_PARAM as m,SEALED_VERSION as h,SERVER_TO_CLIENT_INFO as g,describeSealedFailure as _,infoFor as v,isSealedEnvelope as y}from"./types/sealedChannel.mjs";import{createSerialQueue as b}from"./services/serialQueue.mjs";export{e as BUNDLE_MANIFEST_ROUTE,t as BUNDLE_MANIFEST_VERSION,s as CLIENT_TO_SERVER_INFO,c as MAX_MESSAGES_PER_KEY,l as NONCE_BYTES,u as NONCE_COUNTER_BYTES,d as NONCE_PREFIX_BYTES,f as SEALED_BODY_HEADER,p as SEALED_CLIENT_KEY_HEADER,m as SEALED_KEY_PARAM,h as SEALED_VERSION,g as SERVER_TO_CLIENT_INFO,n as assetFor,r as canonicalManifest,b as createSerialQueue,_ as describeSealedFailure,i as digestFor,v as infoFor,a as isBundleManifest,y as isSealedEnvelope,o as isSignedBundleManifest};

package/dist/services/serialQueue.d.cts

@@ -13,11 +13,10 @@
  * Deliberately not a general work pool. A pool with any concurrency above one
  * reintroduces exactly the reordering this exists to prevent.
  */
-interface SerialQueue {
+export interface SerialQueue {
   /** Resolves with the task's result once every task queued before it has settled. */
   run<T>(task: () => Promise<T>): Promise<T>;
 }
-declare function createSerialQueue(): SerialQueue;
+export declare function createSerialQueue(): SerialQueue;
 //#endregion
-export { SerialQueue, createSerialQueue };
 //# sourceMappingURL=serialQueue.d.cts.map

package/dist/services/serialQueue.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"serialQueue.d.cts","names":[],"sources":["../../src/services/serialQueue.ts"],"mappings":";;;;;;;;;;;;;;;UAciB;;EAEf,IAAI,GAAG,YAAY,QAAQ,KAAK,QAAQ;;iBAG1B,qBAAqB"}
+{"version":3,"file":"serialQueue.d.cts","names":[],"sources":["../../src/services/serialQueue.ts"],"mappings":";;;;;;;;;;;;;;;iBAciB;;EAEf,IAAI,GAAG,YAAY,QAAQ,KAAK,QAAQ;;wBAG1B,qBAAqB"}

package/dist/services/serialQueue.d.mts

@@ -13,11 +13,10 @@
  * Deliberately not a general work pool. A pool with any concurrency above one
  * reintroduces exactly the reordering this exists to prevent.
  */
-interface SerialQueue {
+export interface SerialQueue {
   /** Resolves with the task's result once every task queued before it has settled. */
   run<T>(task: () => Promise<T>): Promise<T>;
 }
-declare function createSerialQueue(): SerialQueue;
+export declare function createSerialQueue(): SerialQueue;
 //#endregion
-export { SerialQueue, createSerialQueue };
 //# sourceMappingURL=serialQueue.d.mts.map

package/dist/services/serialQueue.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"serialQueue.d.mts","names":[],"sources":["../../src/services/serialQueue.ts"],"mappings":";;;;;;;;;;;;;;;UAciB;;EAEf,IAAI,GAAG,YAAY,QAAQ,KAAK,QAAQ;;iBAG1B,qBAAqB"}
+{"version":3,"file":"serialQueue.d.mts","names":[],"sources":["../../src/services/serialQueue.ts"],"mappings":";;;;;;;;;;;;;;;iBAciB;;EAEf,IAAI,GAAG,YAAY,QAAQ,KAAK,QAAQ;;wBAG1B,qBAAqB"}

package/dist/types/bundleManifest.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"bundleManifest.cjs","names":[],"sources":["../../src/types/bundleManifest.ts"],"sourcesContent":["/**\n * A signed description of cockpit assets for an independently trusted verifier.\n *\n * A manifest does not let a browser SPA defend itself against the server or TLS\n * edge that supplied its executable code. Such an attacker can omit the\n * verifier or substitute its trust key. Consumers need a separately trusted\n * bootstrap and key before these signatures become a delivery guarantee.\n *\n * Lives in types rather than services because any verifier must use the same\n * canonical encoding the server signs, byte for byte.\n */\n\nexport const BUNDLE_MANIFEST_ROUTE = '/bundle-manifest.json';\nexport const BUNDLE_MANIFEST_VERSION = 1;\n\nexport interface BundleAsset {\n  /** Path as the browser requests it, leading slash included. */\n  path: string;\n  /** Lowercase hex SHA-256 of the bytes served at that path. */\n  sha256: string;\n}\n\nexport interface BundleManifest {\n  version: number;\n  /** Milliseconds, so a stale manifest is visible without another lookup. */\n  builtAt: number;\n  assets: BundleAsset[];\n}\n\nexport interface SignedBundleManifest {\n  manifest: BundleManifest;\n  /** Base64url ECDSA P-256 signature over the canonical serialization. */\n  signature: string;\n  /** Base64url SPKI of the key that signed it; trust must be established out of band. */\n  publicKey: string;\n}\n\n/**\n * The exact bytes that get signed.\n *\n * Hand-rolled rather than `JSON.stringify` of the whole object, because a\n * signature is only worth anything if both sides agree byte for byte on what\n * was signed. Key order in a JSON object is an implementation detail; a sorted\n * line-per-asset encoding is not.\n */\nexport function canonicalManifest(manifest: BundleManifest): string {\n  const assets = [...manifest.assets].sort((left, right) =>\n    left.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n  );\n  const lines = assets.map((asset) => `${asset.path}\u0000${asset.sha256}`);\n  return [String(manifest.version), String(manifest.builtAt), ...lines].join('\\n');\n}\n\nexport function isBundleManifest(value: unknown): value is BundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  const candidate = value as Partial<BundleManifest>;\n  if (candidate.version !== BUNDLE_MANIFEST_VERSION) return false;\n  if (typeof candidate.builtAt !== 'number' || !Array.isArray(candidate.assets)) return false;\n  return candidate.assets.every(\n    (asset: unknown) =>\n      typeof asset === 'object' &&\n      asset !== null &&\n      typeof (asset as BundleAsset).path === 'string' &&\n      /^[0-9a-f]{64}$/u.test((asset as BundleAsset).sha256),\n  );\n}\n\n/** The recorded digest for one asset, or undefined if the manifest does not cover it. */\nexport function digestFor(manifest: BundleManifest, path: string): string | undefined {\n  return manifest.assets.find((asset) => asset.path === path)?.sha256;\n}\n"],"mappings":"AA6CA,SAAgB,EAAkB,EAAkC,CAIlE,IAAM,EAHS,CAAC,GAAG,EAAS,MAAM,CAAC,CAAC,MAAM,EAAM,IAC9C,EAAK,KAAO,EAAM,KAAO,GAAK,IAAK,KAAO,EAAM,KAE/B,CAAC,CAAC,IAAK,GAAU,GAAG,EAAM,KAAK,GAAG,EAAM,QAAQ,EACnE,MAAO,CAAC,OAAO,EAAS,OAAO,EAAG,OAAO,EAAS,OAAO,EAAG,GAAG,CAAK,CAAC,CAAC,KAAK;CAAI,CACjF,CAEA,SAAgB,EAAiB,EAAyC,CACxE,GAAI,OAAO,GAAU,WAAY,EAAgB,MAAO,GACxD,IAAM,EAAY,EAGlB,OAFI,EAAU,UAAA,GACV,OAAO,EAAU,SAAY,UAAY,CAAC,MAAM,QAAQ,EAAU,MAAM,EAAU,GAC/E,EAAU,OAAO,MACrB,GACC,OAAO,GAAU,YACjB,GACA,OAAQ,EAAsB,MAAS,UACvC,kBAAkB,KAAM,EAAsB,MAAM,CACxD,CACF,CAGA,SAAgB,EAAU,EAA0B,EAAkC,CACpF,OAAO,EAAS,OAAO,KAAM,GAAU,EAAM,OAAS,CAAI,CAAC,EAAE,MAC/D"}
+{"version":3,"file":"bundleManifest.cjs","names":[],"sources":["../../src/types/bundleManifest.ts"],"sourcesContent":["/**\n * A signed description of cockpit assets for an independently trusted verifier.\n *\n * A manifest does not let a browser SPA defend itself against the server or TLS\n * edge that supplied its executable code. Consumers need a separately trusted\n * bootstrap and key before these signatures become a delivery guarantee.\n */\n\nexport const BUNDLE_MANIFEST_ROUTE = '/bundle-manifest.json';\nexport const BUNDLE_MANIFEST_VERSION = 2;\n\nconst SHA256 = /^[0-9a-f]{64}$/u;\nconst BASE64URL = /^[A-Za-z0-9_-]+$/u;\nconst CONTENT_TYPE = /^[a-z0-9][a-z0-9!#$&^_.+-]*\\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;\n\nexport interface BundleAsset {\n  /** Normalized absolute URL path, without a query or fragment. */\n  path: string;\n  /** Lowercase hex SHA-256 of the served bytes. */\n  sha256: string;\n  byteLength: number;\n  /** MIME type of the response, without parameters. */\n  contentType: string;\n}\n\nexport interface BundleManifest {\n  version: typeof BUNDLE_MANIFEST_VERSION;\n  /** Monotonically increasing persistent signer revision. */\n  revision: number;\n  /** Unix time in milliseconds. */\n  builtAt: number;\n  assets: BundleAsset[];\n}\n\nexport interface SignedBundleManifest {\n  manifest: BundleManifest;\n  /** Base64url IEEE P1363 ECDSA P-256 signature over the canonical serialization. */\n  signature: string;\n  /** Base64url SPKI of the signing key. Trust must be established out of band. */\n  publicKey: string;\n}\n\nfunction hasExactKeys(value: object, expected: readonly string[]): boolean {\n  const keys = Object.keys(value).sort();\n  return keys.length === expected.length && keys.every((key, index) => key === expected[index]);\n}\n\nfunction isSafeInteger(value: unknown, minimum: number): value is number {\n  return typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum;\n}\n\nfunction isSafeAssetPath(value: unknown): value is string {\n  if (typeof value !== 'string' || value.length < 2 || !value.startsWith('/')) return false;\n  if (value.includes('\\\\') || value.includes('\\0') || value.includes('?') || value.includes('#')) return false;\n  if (/[^\\x21-\\x7e]/u.test(value) || value.includes('//') || /%(?![0-9a-f]{2})/iu.test(value)) return false;\n  if (/%(?:2e|2f|5c)/iu.test(value)) return false;\n  return value\n    .split('/')\n    .slice(1)\n    .every((segment) => segment !== '' && segment !== '.' && segment !== '..');\n}\n\n/** The exact bytes signed by Node and verified by WebCrypto. */\nexport function canonicalManifest(manifest: BundleManifest): string {\n  const assets = [...manifest.assets].sort((left, right) =>\n    left.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n  );\n  const lines = assets.map(\n    (asset) => `${asset.path}\\0${asset.sha256}\\0${String(asset.byteLength)}\\0${asset.contentType}`,\n  );\n  return [String(manifest.version), String(manifest.revision), String(manifest.builtAt), ...lines].join('\\n');\n}\n\nexport function isBundleManifest(value: unknown): value is BundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['assets', 'builtAt', 'revision', 'version'])) return false;\n  const candidate = value as Partial<BundleManifest>;\n  if (candidate.version !== BUNDLE_MANIFEST_VERSION) return false;\n  if (!isSafeInteger(candidate.revision, 1) || !isSafeInteger(candidate.builtAt, 0)) return false;\n  if (!Array.isArray(candidate.assets) || candidate.assets.length === 0) return false;\n\n  const paths = new Set<string>();\n  for (const valueAsset of candidate.assets) {\n    if (typeof valueAsset !== 'object' || valueAsset === null) return false;\n    if (!hasExactKeys(valueAsset, ['byteLength', 'contentType', 'path', 'sha256'])) return false;\n    const asset = valueAsset as Partial<BundleAsset>;\n    if (!isSafeAssetPath(asset.path) || paths.has(asset.path)) return false;\n    if (typeof asset.sha256 !== 'string' || !SHA256.test(asset.sha256)) return false;\n    if (!isSafeInteger(asset.byteLength, 0)) return false;\n    if (typeof asset.contentType !== 'string' || !CONTENT_TYPE.test(asset.contentType)) return false;\n    paths.add(asset.path);\n  }\n  return paths.has('/index.html');\n}\n\nexport function isSignedBundleManifest(value: unknown): value is SignedBundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['manifest', 'publicKey', 'signature'])) return false;\n  const candidate = value as Partial<SignedBundleManifest>;\n  return (\n    isBundleManifest(candidate.manifest) &&\n    typeof candidate.signature === 'string' &&\n    candidate.signature.length === 86 &&\n    BASE64URL.test(candidate.signature) &&\n    typeof candidate.publicKey === 'string' &&\n    candidate.publicKey.length <= 512 &&\n    BASE64URL.test(candidate.publicKey)\n  );\n}\n\n/** The recorded asset for one path, or undefined if the manifest does not cover it. */\nexport function assetFor(manifest: BundleManifest, path: string): BundleAsset | undefined {\n  return manifest.assets.find((asset) => asset.path === path);\n}\n\n/** The recorded digest for one asset, or undefined if the manifest does not cover it. */\nexport function digestFor(manifest: BundleManifest, path: string): string | undefined {\n  return assetFor(manifest, path)?.sha256;\n}\n"],"mappings":"AAQA,MAGM,EAAS,kBACT,EAAY,oBACZ,EAAe,4DA6BrB,SAAS,EAAa,EAAe,EAAsC,CACzE,IAAM,EAAO,OAAO,KAAK,CAAK,CAAC,CAAC,KAAK,EACrC,OAAO,EAAK,SAAW,EAAS,QAAU,EAAK,OAAO,EAAK,IAAU,IAAQ,EAAS,EAAM,CAC9F,CAEA,SAAS,EAAc,EAAgB,EAAkC,CACvE,OAAO,OAAO,GAAU,UAAY,OAAO,cAAc,CAAK,GAAK,GAAS,CAC9E,CAEA,SAAS,EAAgB,EAAiC,CAKxD,OAJI,OAAO,GAAU,UAAY,EAAM,OAAS,GAAK,CAAC,EAAM,WAAW,GAAG,GACtE,EAAM,SAAS,IAAI,GAAK,EAAM,SAAS,IAAI,GAAK,EAAM,SAAS,GAAG,GAAK,EAAM,SAAS,GAAG,GACzF,gBAAgB,KAAK,CAAK,GAAK,EAAM,SAAS,IAAI,GAAK,qBAAqB,KAAK,CAAK,GACtF,kBAAkB,KAAK,CAAK,EAAU,GACnC,EACJ,MAAM,GAAG,CAAC,CACV,MAAM,CAAC,CAAC,CACR,MAAO,GAAY,IAAY,IAAM,IAAY,KAAO,IAAY,IAAI,CAC7E,CAGA,SAAgB,EAAkB,EAAkC,CAIlE,IAAM,EAHS,CAAC,GAAG,EAAS,MAAM,CAAC,CAAC,MAAM,EAAM,IAC9C,EAAK,KAAO,EAAM,KAAO,GAAK,IAAK,KAAO,EAAM,KAE/B,CAAC,CAAC,IAClB,GAAU,GAAG,EAAM,KAAK,IAAI,EAAM,OAAO,IAAI,OAAO,EAAM,UAAU,EAAE,IAAI,EAAM,aACnF,EACA,MAAO,CAAC,OAAO,EAAS,OAAO,EAAG,OAAO,EAAS,QAAQ,EAAG,OAAO,EAAS,OAAO,EAAG,GAAG,CAAK,CAAC,CAAC,KAAK;CAAI,CAC5G,CAEA,SAAgB,EAAiB,EAAyC,CAExE,GADI,OAAO,GAAU,WAAY,GAC7B,CAAC,EAAa,EAAO,CAAC,SAAU,UAAW,WAAY,SAAS,CAAC,EAAG,MAAO,GAC/E,IAAM,EAAY,EAGlB,GAFI,EAAU,UAAA,GACV,CAAC,EAAc,EAAU,SAAU,CAAC,GAAK,CAAC,EAAc,EAAU,QAAS,CAAC,GAC5E,CAAC,MAAM,QAAQ,EAAU,MAAM,GAAK,EAAU,OAAO,SAAW,EAAG,MAAO,GAE9E,IAAM,EAAQ,IAAI,IAClB,IAAK,IAAM,KAAc,EAAU,OAAQ,CAEzC,GADI,OAAO,GAAe,WAAY,GAClC,CAAC,EAAa,EAAY,CAAC,aAAc,cAAe,OAAQ,QAAQ,CAAC,EAAG,MAAO,GACvF,IAAM,EAAQ,EAId,GAHI,CAAC,EAAgB,EAAM,IAAI,GAAK,EAAM,IAAI,EAAM,IAAI,GACpD,OAAO,EAAM,QAAW,UAAY,CAAC,EAAO,KAAK,EAAM,MAAM,GAC7D,CAAC,EAAc,EAAM,WAAY,CAAC,GAClC,OAAO,EAAM,aAAgB,UAAY,CAAC,EAAa,KAAK,EAAM,WAAW,EAAG,MAAO,GAC3F,EAAM,IAAI,EAAM,IAAI,CACtB,CACA,OAAO,EAAM,IAAI,aAAa,CAChC,CAEA,SAAgB,EAAuB,EAA+C,CAEpF,GADI,OAAO,GAAU,WAAY,GAC7B,CAAC,EAAa,EAAO,CAAC,WAAY,YAAa,WAAW,CAAC,EAAG,MAAO,GACzE,IAAM,EAAY,EAClB,OACE,EAAiB,EAAU,QAAQ,GACnC,OAAO,EAAU,WAAc,UAC/B,EAAU,UAAU,SAAW,IAC/B,EAAU,KAAK,EAAU,SAAS,GAClC,OAAO,EAAU,WAAc,UAC/B,EAAU,UAAU,QAAU,KAC9B,EAAU,KAAK,EAAU,SAAS,CAEtC,CAGA,SAAgB,EAAS,EAA0B,EAAuC,CACxF,OAAO,EAAS,OAAO,KAAM,GAAU,EAAM,OAAS,CAAI,CAC5D,CAGA,SAAgB,EAAU,EAA0B,EAAkC,CACpF,OAAO,EAAS,EAAU,CAAI,CAAC,EAAE,MACnC"}

package/dist/types/bundleManifest.d.cts

@@ -3,46 +3,42 @@
  * A signed description of cockpit assets for an independently trusted verifier.
  *
  * A manifest does not let a browser SPA defend itself against the server or TLS
- * edge that supplied its executable code. Such an attacker can omit the
- * verifier or substitute its trust key. Consumers need a separately trusted
+ * edge that supplied its executable code. Consumers need a separately trusted
  * bootstrap and key before these signatures become a delivery guarantee.
- *
- * Lives in types rather than services because any verifier must use the same
- * canonical encoding the server signs, byte for byte.
  */
-declare const BUNDLE_MANIFEST_ROUTE = "/bundle-manifest.json";
-declare const BUNDLE_MANIFEST_VERSION = 1;
-interface BundleAsset {
-  /** Path as the browser requests it, leading slash included. */
+export declare const BUNDLE_MANIFEST_ROUTE = "/bundle-manifest.json";
+export declare const BUNDLE_MANIFEST_VERSION = 2;
+export interface BundleAsset {
+  /** Normalized absolute URL path, without a query or fragment. */
   path: string;
-  /** Lowercase hex SHA-256 of the bytes served at that path. */
+  /** Lowercase hex SHA-256 of the served bytes. */
   sha256: string;
+  byteLength: number;
+  /** MIME type of the response, without parameters. */
+  contentType: string;
 }
-interface BundleManifest {
-  version: number;
-  /** Milliseconds, so a stale manifest is visible without another lookup. */
+export interface BundleManifest {
+  version: typeof BUNDLE_MANIFEST_VERSION;
+  /** Monotonically increasing persistent signer revision. */
+  revision: number;
+  /** Unix time in milliseconds. */
   builtAt: number;
   assets: BundleAsset[];
 }
-interface SignedBundleManifest {
+export interface SignedBundleManifest {
   manifest: BundleManifest;
-  /** Base64url ECDSA P-256 signature over the canonical serialization. */
+  /** Base64url IEEE P1363 ECDSA P-256 signature over the canonical serialization. */
   signature: string;
-  /** Base64url SPKI of the key that signed it; trust must be established out of band. */
+  /** Base64url SPKI of the signing key. Trust must be established out of band. */
   publicKey: string;
 }
-/**
- * The exact bytes that get signed.
- *
- * Hand-rolled rather than `JSON.stringify` of the whole object, because a
- * signature is only worth anything if both sides agree byte for byte on what
- * was signed. Key order in a JSON object is an implementation detail; a sorted
- * line-per-asset encoding is not.
- */
-declare function canonicalManifest(manifest: BundleManifest): string;
-declare function isBundleManifest(value: unknown): value is BundleManifest;
+/** The exact bytes signed by Node and verified by WebCrypto. */
+export declare function canonicalManifest(manifest: BundleManifest): string;
+export declare function isBundleManifest(value: unknown): value is BundleManifest;
+export declare function isSignedBundleManifest(value: unknown): value is SignedBundleManifest;
+/** The recorded asset for one path, or undefined if the manifest does not cover it. */
+export declare function assetFor(manifest: BundleManifest, path: string): BundleAsset | undefined;
 /** The recorded digest for one asset, or undefined if the manifest does not cover it. */
-declare function digestFor(manifest: BundleManifest, path: string): string | undefined;
+export declare function digestFor(manifest: BundleManifest, path: string): string | undefined;
 //#endregion
-export { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, BundleAsset, BundleManifest, SignedBundleManifest, canonicalManifest, digestFor, isBundleManifest };
 //# sourceMappingURL=bundleManifest.d.cts.map

package/dist/types/bundleManifest.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"bundleManifest.d.cts","names":[],"sources":["../../src/types/bundleManifest.ts"],"mappings":";;;;;;;;;;;;cAYa;cACA;UAEI;;EAEf;;EAEA;;UAGe;EACf;;EAEA;EACA,QAAQ;;UAGO;EACf,UAAU;;EAEV;;EAEA;;;;;;;;;;iBAWc,kBAAkB,UAAU;iBAQ5B,iBAAiB,iBAAiB,SAAS;;iBAe3C,UAAU,UAAU,gBAAgB"}
+{"version":3,"file":"bundleManifest.d.cts","names":[],"sources":["../../src/types/bundleManifest.ts"],"mappings":";;;;;;;;qBAQa;qBACA;iBAMI;;EAEf;;EAEA;EACA;;EAEA;;iBAGe;EACf,gBAAgB;;EAEhB;;EAEA;EACA,QAAQ;;iBAGO;EACf,UAAU;;EAEV;;EAEA;;;wBAwBc,kBAAkB,UAAU;wBAU5B,iBAAiB,iBAAiB,SAAS;wBAsB3C,uBAAuB,iBAAiB,SAAS;;wBAgBjD,SAAS,UAAU,gBAAgB,eAAe;;wBAKlD,UAAU,UAAU,gBAAgB"}

package/dist/types/bundleManifest.d.mts

@@ -3,46 +3,42 @@
  * A signed description of cockpit assets for an independently trusted verifier.
  *
  * A manifest does not let a browser SPA defend itself against the server or TLS
- * edge that supplied its executable code. Such an attacker can omit the
- * verifier or substitute its trust key. Consumers need a separately trusted
+ * edge that supplied its executable code. Consumers need a separately trusted
  * bootstrap and key before these signatures become a delivery guarantee.
- *
- * Lives in types rather than services because any verifier must use the same
- * canonical encoding the server signs, byte for byte.
  */
-declare const BUNDLE_MANIFEST_ROUTE = "/bundle-manifest.json";
-declare const BUNDLE_MANIFEST_VERSION = 1;
-interface BundleAsset {
-  /** Path as the browser requests it, leading slash included. */
+export declare const BUNDLE_MANIFEST_ROUTE = "/bundle-manifest.json";
+export declare const BUNDLE_MANIFEST_VERSION = 2;
+export interface BundleAsset {
+  /** Normalized absolute URL path, without a query or fragment. */
   path: string;
-  /** Lowercase hex SHA-256 of the bytes served at that path. */
+  /** Lowercase hex SHA-256 of the served bytes. */
   sha256: string;
+  byteLength: number;
+  /** MIME type of the response, without parameters. */
+  contentType: string;
 }
-interface BundleManifest {
-  version: number;
-  /** Milliseconds, so a stale manifest is visible without another lookup. */
+export interface BundleManifest {
+  version: typeof BUNDLE_MANIFEST_VERSION;
+  /** Monotonically increasing persistent signer revision. */
+  revision: number;
+  /** Unix time in milliseconds. */
   builtAt: number;
   assets: BundleAsset[];
 }
-interface SignedBundleManifest {
+export interface SignedBundleManifest {
   manifest: BundleManifest;
-  /** Base64url ECDSA P-256 signature over the canonical serialization. */
+  /** Base64url IEEE P1363 ECDSA P-256 signature over the canonical serialization. */
   signature: string;
-  /** Base64url SPKI of the key that signed it; trust must be established out of band. */
+  /** Base64url SPKI of the signing key. Trust must be established out of band. */
   publicKey: string;
 }
-/**
- * The exact bytes that get signed.
- *
- * Hand-rolled rather than `JSON.stringify` of the whole object, because a
- * signature is only worth anything if both sides agree byte for byte on what
- * was signed. Key order in a JSON object is an implementation detail; a sorted
- * line-per-asset encoding is not.
- */
-declare function canonicalManifest(manifest: BundleManifest): string;
-declare function isBundleManifest(value: unknown): value is BundleManifest;
+/** The exact bytes signed by Node and verified by WebCrypto. */
+export declare function canonicalManifest(manifest: BundleManifest): string;
+export declare function isBundleManifest(value: unknown): value is BundleManifest;
+export declare function isSignedBundleManifest(value: unknown): value is SignedBundleManifest;
+/** The recorded asset for one path, or undefined if the manifest does not cover it. */
+export declare function assetFor(manifest: BundleManifest, path: string): BundleAsset | undefined;
 /** The recorded digest for one asset, or undefined if the manifest does not cover it. */
-declare function digestFor(manifest: BundleManifest, path: string): string | undefined;
+export declare function digestFor(manifest: BundleManifest, path: string): string | undefined;
 //#endregion
-export { BUNDLE_MANIFEST_ROUTE, BUNDLE_MANIFEST_VERSION, BundleAsset, BundleManifest, SignedBundleManifest, canonicalManifest, digestFor, isBundleManifest };
 //# sourceMappingURL=bundleManifest.d.mts.map

package/dist/types/bundleManifest.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"bundleManifest.d.mts","names":[],"sources":["../../src/types/bundleManifest.ts"],"mappings":";;;;;;;;;;;;cAYa;cACA;UAEI;;EAEf;;EAEA;;UAGe;EACf;;EAEA;EACA,QAAQ;;UAGO;EACf,UAAU;;EAEV;;EAEA;;;;;;;;;;iBAWc,kBAAkB,UAAU;iBAQ5B,iBAAiB,iBAAiB,SAAS;;iBAe3C,UAAU,UAAU,gBAAgB"}
+{"version":3,"file":"bundleManifest.d.mts","names":[],"sources":["../../src/types/bundleManifest.ts"],"mappings":";;;;;;;;qBAQa;qBACA;iBAMI;;EAEf;;EAEA;EACA;;EAEA;;iBAGe;EACf,gBAAgB;;EAEhB;;EAEA;EACA,QAAQ;;iBAGO;EACf,UAAU;;EAEV;;EAEA;;;wBAwBc,kBAAkB,UAAU;wBAU5B,iBAAiB,iBAAiB,SAAS;wBAsB3C,uBAAuB,iBAAiB,SAAS;;wBAgBjD,SAAS,UAAU,gBAAgB,eAAe;;wBAKlD,UAAU,UAAU,gBAAgB"}

package/dist/types/bundleManifest.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"bundleManifest.mjs","names":[],"sources":["../../src/types/bundleManifest.ts"],"sourcesContent":["/**\n * A signed description of cockpit assets for an independently trusted verifier.\n *\n * A manifest does not let a browser SPA defend itself against the server or TLS\n * edge that supplied its executable code. Such an attacker can omit the\n * verifier or substitute its trust key. Consumers need a separately trusted\n * bootstrap and key before these signatures become a delivery guarantee.\n *\n * Lives in types rather than services because any verifier must use the same\n * canonical encoding the server signs, byte for byte.\n */\n\nexport const BUNDLE_MANIFEST_ROUTE = '/bundle-manifest.json';\nexport const BUNDLE_MANIFEST_VERSION = 1;\n\nexport interface BundleAsset {\n  /** Path as the browser requests it, leading slash included. */\n  path: string;\n  /** Lowercase hex SHA-256 of the bytes served at that path. */\n  sha256: string;\n}\n\nexport interface BundleManifest {\n  version: number;\n  /** Milliseconds, so a stale manifest is visible without another lookup. */\n  builtAt: number;\n  assets: BundleAsset[];\n}\n\nexport interface SignedBundleManifest {\n  manifest: BundleManifest;\n  /** Base64url ECDSA P-256 signature over the canonical serialization. */\n  signature: string;\n  /** Base64url SPKI of the key that signed it; trust must be established out of band. */\n  publicKey: string;\n}\n\n/**\n * The exact bytes that get signed.\n *\n * Hand-rolled rather than `JSON.stringify` of the whole object, because a\n * signature is only worth anything if both sides agree byte for byte on what\n * was signed. Key order in a JSON object is an implementation detail; a sorted\n * line-per-asset encoding is not.\n */\nexport function canonicalManifest(manifest: BundleManifest): string {\n  const assets = [...manifest.assets].sort((left, right) =>\n    left.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n  );\n  const lines = assets.map((asset) => `${asset.path}\u0000${asset.sha256}`);\n  return [String(manifest.version), String(manifest.builtAt), ...lines].join('\\n');\n}\n\nexport function isBundleManifest(value: unknown): value is BundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  const candidate = value as Partial<BundleManifest>;\n  if (candidate.version !== BUNDLE_MANIFEST_VERSION) return false;\n  if (typeof candidate.builtAt !== 'number' || !Array.isArray(candidate.assets)) return false;\n  return candidate.assets.every(\n    (asset: unknown) =>\n      typeof asset === 'object' &&\n      asset !== null &&\n      typeof (asset as BundleAsset).path === 'string' &&\n      /^[0-9a-f]{64}$/u.test((asset as BundleAsset).sha256),\n  );\n}\n\n/** The recorded digest for one asset, or undefined if the manifest does not cover it. */\nexport function digestFor(manifest: BundleManifest, path: string): string | undefined {\n  return manifest.assets.find((asset) => asset.path === path)?.sha256;\n}\n"],"mappings":"AAYA,MAAa,EAAwB,wBACxB,EAA0B,EAgCvC,SAAgB,EAAkB,EAAkC,CAIlE,IAAM,EAHS,CAAC,GAAG,EAAS,MAAM,CAAC,CAAC,MAAM,EAAM,IAC9C,EAAK,KAAO,EAAM,KAAO,GAAK,IAAK,KAAO,EAAM,KAE/B,CAAC,CAAC,IAAK,GAAU,GAAG,EAAM,KAAK,GAAG,EAAM,QAAQ,EACnE,MAAO,CAAC,OAAO,EAAS,OAAO,EAAG,OAAO,EAAS,OAAO,EAAG,GAAG,CAAK,CAAC,CAAC,KAAK;CAAI,CACjF,CAEA,SAAgB,EAAiB,EAAyC,CACxE,GAAI,OAAO,GAAU,WAAY,EAAgB,MAAO,GACxD,IAAM,EAAY,EAGlB,OAFI,EAAU,UAAA,GACV,OAAO,EAAU,SAAY,UAAY,CAAC,MAAM,QAAQ,EAAU,MAAM,EAAU,GAC/E,EAAU,OAAO,MACrB,GACC,OAAO,GAAU,YACjB,GACA,OAAQ,EAAsB,MAAS,UACvC,kBAAkB,KAAM,EAAsB,MAAM,CACxD,CACF,CAGA,SAAgB,EAAU,EAA0B,EAAkC,CACpF,OAAO,EAAS,OAAO,KAAM,GAAU,EAAM,OAAS,CAAI,CAAC,EAAE,MAC/D"}
+{"version":3,"file":"bundleManifest.mjs","names":[],"sources":["../../src/types/bundleManifest.ts"],"sourcesContent":["/**\n * A signed description of cockpit assets for an independently trusted verifier.\n *\n * A manifest does not let a browser SPA defend itself against the server or TLS\n * edge that supplied its executable code. Consumers need a separately trusted\n * bootstrap and key before these signatures become a delivery guarantee.\n */\n\nexport const BUNDLE_MANIFEST_ROUTE = '/bundle-manifest.json';\nexport const BUNDLE_MANIFEST_VERSION = 2;\n\nconst SHA256 = /^[0-9a-f]{64}$/u;\nconst BASE64URL = /^[A-Za-z0-9_-]+$/u;\nconst CONTENT_TYPE = /^[a-z0-9][a-z0-9!#$&^_.+-]*\\/[a-z0-9][a-z0-9!#$&^_.+-]*$/u;\n\nexport interface BundleAsset {\n  /** Normalized absolute URL path, without a query or fragment. */\n  path: string;\n  /** Lowercase hex SHA-256 of the served bytes. */\n  sha256: string;\n  byteLength: number;\n  /** MIME type of the response, without parameters. */\n  contentType: string;\n}\n\nexport interface BundleManifest {\n  version: typeof BUNDLE_MANIFEST_VERSION;\n  /** Monotonically increasing persistent signer revision. */\n  revision: number;\n  /** Unix time in milliseconds. */\n  builtAt: number;\n  assets: BundleAsset[];\n}\n\nexport interface SignedBundleManifest {\n  manifest: BundleManifest;\n  /** Base64url IEEE P1363 ECDSA P-256 signature over the canonical serialization. */\n  signature: string;\n  /** Base64url SPKI of the signing key. Trust must be established out of band. */\n  publicKey: string;\n}\n\nfunction hasExactKeys(value: object, expected: readonly string[]): boolean {\n  const keys = Object.keys(value).sort();\n  return keys.length === expected.length && keys.every((key, index) => key === expected[index]);\n}\n\nfunction isSafeInteger(value: unknown, minimum: number): value is number {\n  return typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum;\n}\n\nfunction isSafeAssetPath(value: unknown): value is string {\n  if (typeof value !== 'string' || value.length < 2 || !value.startsWith('/')) return false;\n  if (value.includes('\\\\') || value.includes('\\0') || value.includes('?') || value.includes('#')) return false;\n  if (/[^\\x21-\\x7e]/u.test(value) || value.includes('//') || /%(?![0-9a-f]{2})/iu.test(value)) return false;\n  if (/%(?:2e|2f|5c)/iu.test(value)) return false;\n  return value\n    .split('/')\n    .slice(1)\n    .every((segment) => segment !== '' && segment !== '.' && segment !== '..');\n}\n\n/** The exact bytes signed by Node and verified by WebCrypto. */\nexport function canonicalManifest(manifest: BundleManifest): string {\n  const assets = [...manifest.assets].sort((left, right) =>\n    left.path < right.path ? -1 : left.path > right.path ? 1 : 0,\n  );\n  const lines = assets.map(\n    (asset) => `${asset.path}\\0${asset.sha256}\\0${String(asset.byteLength)}\\0${asset.contentType}`,\n  );\n  return [String(manifest.version), String(manifest.revision), String(manifest.builtAt), ...lines].join('\\n');\n}\n\nexport function isBundleManifest(value: unknown): value is BundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['assets', 'builtAt', 'revision', 'version'])) return false;\n  const candidate = value as Partial<BundleManifest>;\n  if (candidate.version !== BUNDLE_MANIFEST_VERSION) return false;\n  if (!isSafeInteger(candidate.revision, 1) || !isSafeInteger(candidate.builtAt, 0)) return false;\n  if (!Array.isArray(candidate.assets) || candidate.assets.length === 0) return false;\n\n  const paths = new Set<string>();\n  for (const valueAsset of candidate.assets) {\n    if (typeof valueAsset !== 'object' || valueAsset === null) return false;\n    if (!hasExactKeys(valueAsset, ['byteLength', 'contentType', 'path', 'sha256'])) return false;\n    const asset = valueAsset as Partial<BundleAsset>;\n    if (!isSafeAssetPath(asset.path) || paths.has(asset.path)) return false;\n    if (typeof asset.sha256 !== 'string' || !SHA256.test(asset.sha256)) return false;\n    if (!isSafeInteger(asset.byteLength, 0)) return false;\n    if (typeof asset.contentType !== 'string' || !CONTENT_TYPE.test(asset.contentType)) return false;\n    paths.add(asset.path);\n  }\n  return paths.has('/index.html');\n}\n\nexport function isSignedBundleManifest(value: unknown): value is SignedBundleManifest {\n  if (typeof value !== 'object' || value === null) return false;\n  if (!hasExactKeys(value, ['manifest', 'publicKey', 'signature'])) return false;\n  const candidate = value as Partial<SignedBundleManifest>;\n  return (\n    isBundleManifest(candidate.manifest) &&\n    typeof candidate.signature === 'string' &&\n    candidate.signature.length === 86 &&\n    BASE64URL.test(candidate.signature) &&\n    typeof candidate.publicKey === 'string' &&\n    candidate.publicKey.length <= 512 &&\n    BASE64URL.test(candidate.publicKey)\n  );\n}\n\n/** The recorded asset for one path, or undefined if the manifest does not cover it. */\nexport function assetFor(manifest: BundleManifest, path: string): BundleAsset | undefined {\n  return manifest.assets.find((asset) => asset.path === path);\n}\n\n/** The recorded digest for one asset, or undefined if the manifest does not cover it. */\nexport function digestFor(manifest: BundleManifest, path: string): string | undefined {\n  return assetFor(manifest, path)?.sha256;\n}\n"],"mappings":"AAQA,MAAa,EAAwB,wBACxB,EAA0B,EAEjC,EAAS,kBACT,EAAY,oBACZ,EAAe,4DA6BrB,SAAS,EAAa,EAAe,EAAsC,CACzE,IAAM,EAAO,OAAO,KAAK,CAAK,CAAC,CAAC,KAAK,EACrC,OAAO,EAAK,SAAW,EAAS,QAAU,EAAK,OAAO,EAAK,IAAU,IAAQ,EAAS,EAAM,CAC9F,CAEA,SAAS,EAAc,EAAgB,EAAkC,CACvE,OAAO,OAAO,GAAU,UAAY,OAAO,cAAc,CAAK,GAAK,GAAS,CAC9E,CAEA,SAAS,EAAgB,EAAiC,CAKxD,OAJI,OAAO,GAAU,UAAY,EAAM,OAAS,GAAK,CAAC,EAAM,WAAW,GAAG,GACtE,EAAM,SAAS,IAAI,GAAK,EAAM,SAAS,IAAI,GAAK,EAAM,SAAS,GAAG,GAAK,EAAM,SAAS,GAAG,GACzF,gBAAgB,KAAK,CAAK,GAAK,EAAM,SAAS,IAAI,GAAK,qBAAqB,KAAK,CAAK,GACtF,kBAAkB,KAAK,CAAK,EAAU,GACnC,EACJ,MAAM,GAAG,CAAC,CACV,MAAM,CAAC,CAAC,CACR,MAAO,GAAY,IAAY,IAAM,IAAY,KAAO,IAAY,IAAI,CAC7E,CAGA,SAAgB,EAAkB,EAAkC,CAIlE,IAAM,EAHS,CAAC,GAAG,EAAS,MAAM,CAAC,CAAC,MAAM,EAAM,IAC9C,EAAK,KAAO,EAAM,KAAO,GAAK,IAAK,KAAO,EAAM,KAE/B,CAAC,CAAC,IAClB,GAAU,GAAG,EAAM,KAAK,IAAI,EAAM,OAAO,IAAI,OAAO,EAAM,UAAU,EAAE,IAAI,EAAM,aACnF,EACA,MAAO,CAAC,OAAO,EAAS,OAAO,EAAG,OAAO,EAAS,QAAQ,EAAG,OAAO,EAAS,OAAO,EAAG,GAAG,CAAK,CAAC,CAAC,KAAK;CAAI,CAC5G,CAEA,SAAgB,EAAiB,EAAyC,CAExE,GADI,OAAO,GAAU,WAAY,GAC7B,CAAC,EAAa,EAAO,CAAC,SAAU,UAAW,WAAY,SAAS,CAAC,EAAG,MAAO,GAC/E,IAAM,EAAY,EAGlB,GAFI,EAAU,UAAA,GACV,CAAC,EAAc,EAAU,SAAU,CAAC,GAAK,CAAC,EAAc,EAAU,QAAS,CAAC,GAC5E,CAAC,MAAM,QAAQ,EAAU,MAAM,GAAK,EAAU,OAAO,SAAW,EAAG,MAAO,GAE9E,IAAM,EAAQ,IAAI,IAClB,IAAK,IAAM,KAAc,EAAU,OAAQ,CAEzC,GADI,OAAO,GAAe,WAAY,GAClC,CAAC,EAAa,EAAY,CAAC,aAAc,cAAe,OAAQ,QAAQ,CAAC,EAAG,MAAO,GACvF,IAAM,EAAQ,EAId,GAHI,CAAC,EAAgB,EAAM,IAAI,GAAK,EAAM,IAAI,EAAM,IAAI,GACpD,OAAO,EAAM,QAAW,UAAY,CAAC,EAAO,KAAK,EAAM,MAAM,GAC7D,CAAC,EAAc,EAAM,WAAY,CAAC,GAClC,OAAO,EAAM,aAAgB,UAAY,CAAC,EAAa,KAAK,EAAM,WAAW,EAAG,MAAO,GAC3F,EAAM,IAAI,EAAM,IAAI,CACtB,CACA,OAAO,EAAM,IAAI,aAAa,CAChC,CAEA,SAAgB,EAAuB,EAA+C,CAEpF,GADI,OAAO,GAAU,WAAY,GAC7B,CAAC,EAAa,EAAO,CAAC,WAAY,YAAa,WAAW,CAAC,EAAG,MAAO,GACzE,IAAM,EAAY,EAClB,OACE,EAAiB,EAAU,QAAQ,GACnC,OAAO,EAAU,WAAc,UAC/B,EAAU,UAAU,SAAW,IAC/B,EAAU,KAAK,EAAU,SAAS,GAClC,OAAO,EAAU,WAAc,UAC/B,EAAU,UAAU,QAAU,KAC9B,EAAU,KAAK,EAAU,SAAS,CAEtC,CAGA,SAAgB,EAAS,EAA0B,EAAuC,CACxF,OAAO,EAAS,OAAO,KAAM,GAAU,EAAM,OAAS,CAAI,CAC5D,CAGA,SAAgB,EAAU,EAA0B,EAAkC,CACpF,OAAO,EAAS,EAAU,CAAI,CAAC,EAAE,MACnC"}

package/dist/types/sealedChannel.d.cts

@@ -18,15 +18,15 @@
  * read it identically.
  */
 /** Bumped when the envelope layout changes; a mismatch is refused, never guessed at. */
-declare const SEALED_VERSION = 1;
+export declare const SEALED_VERSION = 1;
 /** Fragment key in the pairing URL carrying the host's ephemeral public key. */
-declare const SEALED_KEY_PARAM = "k";
+export declare const SEALED_KEY_PARAM = "k";
 /** AES-GCM standard nonce length. Longer is non-standard, shorter is unsafe. */
-declare const NONCE_BYTES = 12;
+export declare const NONCE_BYTES = 12;
 /** Random per-channel prefix, so two channels never share a nonce space. */
-declare const NONCE_PREFIX_BYTES = 4;
+export declare const NONCE_PREFIX_BYTES = 4;
 /** Monotonic per-direction counter filling the rest of the nonce. */
-declare const NONCE_COUNTER_BYTES: number;
+export declare const NONCE_COUNTER_BYTES: number;
 /**
  * Rekey well before the counter could wrap.
  *
@@ -35,43 +35,42 @@ declare const NONCE_COUNTER_BYTES: number;
  * 64 bits, so this bound is nowhere near it; the point is that the bound exists
  * and is enforced rather than assumed.
  */
-declare const MAX_MESSAGES_PER_KEY: number;
+export declare const MAX_MESSAGES_PER_KEY: number;
 /**
  * HKDF info strings, one per direction.
  *
  * Separate keys per direction, not one shared key, so a message the server sent
  * can never be replayed back at it as though the client had sent it.
  */
-declare const CLIENT_TO_SERVER_INFO = "doompi/sealed/c2s/v1";
-declare const SERVER_TO_CLIENT_INFO = "doompi/sealed/s2c/v1";
-type SealedDirection = 'c2s' | 's2c';
-declare function infoFor(direction: SealedDirection): string;
+export declare const CLIENT_TO_SERVER_INFO = "doompi/sealed/c2s/v1";
+export declare const SERVER_TO_CLIENT_INFO = "doompi/sealed/s2c/v1";
+export type SealedDirection = 'c2s' | 's2c';
+export declare function infoFor(direction: SealedDirection): string;
 /**
  * One sealed message, as it travels.
  *
  * Base64url rather than binary so the same envelope works on a JSON body and a
  * text WebSocket frame without a second encoding path to get wrong.
  */
-interface SealedEnvelope {
+export interface SealedEnvelope {
   v: number;
   /** Base64url, 4-byte prefix plus 8-byte counter. */
   n: string;
   /** Base64url ciphertext with the GCM tag appended. */
   c: string;
 }
-declare function isSealedEnvelope(value: unknown): value is SealedEnvelope;
+export declare function isSealedEnvelope(value: unknown): value is SealedEnvelope;
 /** Header naming the client's ephemeral public key during the handshake. */
-declare const SEALED_CLIENT_KEY_HEADER = "x-doompi-channel-key";
+export declare const SEALED_CLIENT_KEY_HEADER = "x-doompi-channel-key";
 /** Header carrying a sealed request body's envelope on a non-JSON request. */
-declare const SEALED_BODY_HEADER = "x-doompi-sealed";
-type SealedFailure = 'version' | 'malformed' | 'replay' | 'auth' | 'exhausted';
+export declare const SEALED_BODY_HEADER = "x-doompi-sealed";
+export type SealedFailure = 'version' | 'malformed' | 'replay' | 'auth' | 'exhausted';
 /**
  * Why an unseal failed, in words a diagnostic can show.
  *
  * A decryption failure means a blank cockpit, so every one of these has to name
  * its cause rather than leaving a dead page and no explanation.
  */
-declare function describeSealedFailure(failure: SealedFailure): string;
+export declare function describeSealedFailure(failure: SealedFailure): string;
 //#endregion
-export { CLIENT_TO_SERVER_INFO, MAX_MESSAGES_PER_KEY, NONCE_BYTES, NONCE_COUNTER_BYTES, NONCE_PREFIX_BYTES, SEALED_BODY_HEADER, SEALED_CLIENT_KEY_HEADER, SEALED_KEY_PARAM, SEALED_VERSION, SERVER_TO_CLIENT_INFO, SealedDirection, SealedEnvelope, SealedFailure, describeSealedFailure, infoFor, isSealedEnvelope };
 //# sourceMappingURL=sealedChannel.d.cts.map

package/dist/types/sealedChannel.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"sealedChannel.d.cts","names":[],"sources":["../../src/types/sealedChannel.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;cAoBa;;cAGA;;cAGA;;cAEA;;cAEA;;;;;;;;;cAUA;;;;;;;cAQA;cACA;KAED;iBAEI,QAAQ,WAAW;;;;;;;UAUlB;EACf;;EAEA;;EAEA;;iBAGc,iBAAiB,iBAAiB,SAAS;;cAO9C;;cAEA;KAED;;;;;;;iBAQI,sBAAsB,SAAS"}
+{"version":3,"file":"sealedChannel.d.cts","names":[],"sources":["../../src/types/sealedChannel.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;qBAoBa;;qBAGA;;qBAGA;;qBAEA;;qBAEA;;;;;;;;;qBAUA;;;;;;;qBAQA;qBACA;YAED;wBAEI,QAAQ,WAAW;;;;;;;iBAUlB;EACf;;EAEA;;EAEA;;wBAGc,iBAAiB,iBAAiB,SAAS;;qBAO9C;;qBAEA;YAED;;;;;;;wBAQI,sBAAsB,SAAS"}

package/dist/types/sealedChannel.d.mts

@@ -18,15 +18,15 @@
  * read it identically.
  */
 /** Bumped when the envelope layout changes; a mismatch is refused, never guessed at. */
-declare const SEALED_VERSION = 1;
+export declare const SEALED_VERSION = 1;
 /** Fragment key in the pairing URL carrying the host's ephemeral public key. */
-declare const SEALED_KEY_PARAM = "k";
+export declare const SEALED_KEY_PARAM = "k";
 /** AES-GCM standard nonce length. Longer is non-standard, shorter is unsafe. */
-declare const NONCE_BYTES = 12;
+export declare const NONCE_BYTES = 12;
 /** Random per-channel prefix, so two channels never share a nonce space. */
-declare const NONCE_PREFIX_BYTES = 4;
+export declare const NONCE_PREFIX_BYTES = 4;
 /** Monotonic per-direction counter filling the rest of the nonce. */
-declare const NONCE_COUNTER_BYTES: number;
+export declare const NONCE_COUNTER_BYTES: number;
 /**
  * Rekey well before the counter could wrap.
  *
@@ -35,43 +35,42 @@ declare const NONCE_COUNTER_BYTES: number;
  * 64 bits, so this bound is nowhere near it; the point is that the bound exists
  * and is enforced rather than assumed.
  */
-declare const MAX_MESSAGES_PER_KEY: number;
+export declare const MAX_MESSAGES_PER_KEY: number;
 /**
  * HKDF info strings, one per direction.
  *
  * Separate keys per direction, not one shared key, so a message the server sent
  * can never be replayed back at it as though the client had sent it.
  */
-declare const CLIENT_TO_SERVER_INFO = "doompi/sealed/c2s/v1";
-declare const SERVER_TO_CLIENT_INFO = "doompi/sealed/s2c/v1";
-type SealedDirection = 'c2s' | 's2c';
-declare function infoFor(direction: SealedDirection): string;
+export declare const CLIENT_TO_SERVER_INFO = "doompi/sealed/c2s/v1";
+export declare const SERVER_TO_CLIENT_INFO = "doompi/sealed/s2c/v1";
+export type SealedDirection = 'c2s' | 's2c';
+export declare function infoFor(direction: SealedDirection): string;
 /**
  * One sealed message, as it travels.
  *
  * Base64url rather than binary so the same envelope works on a JSON body and a
  * text WebSocket frame without a second encoding path to get wrong.
  */
-interface SealedEnvelope {
+export interface SealedEnvelope {
   v: number;
   /** Base64url, 4-byte prefix plus 8-byte counter. */
   n: string;
   /** Base64url ciphertext with the GCM tag appended. */
   c: string;
 }
-declare function isSealedEnvelope(value: unknown): value is SealedEnvelope;
+export declare function isSealedEnvelope(value: unknown): value is SealedEnvelope;
 /** Header naming the client's ephemeral public key during the handshake. */
-declare const SEALED_CLIENT_KEY_HEADER = "x-doompi-channel-key";
+export declare const SEALED_CLIENT_KEY_HEADER = "x-doompi-channel-key";
 /** Header carrying a sealed request body's envelope on a non-JSON request. */
-declare const SEALED_BODY_HEADER = "x-doompi-sealed";
-type SealedFailure = 'version' | 'malformed' | 'replay' | 'auth' | 'exhausted';
+export declare const SEALED_BODY_HEADER = "x-doompi-sealed";
+export type SealedFailure = 'version' | 'malformed' | 'replay' | 'auth' | 'exhausted';
 /**
  * Why an unseal failed, in words a diagnostic can show.
  *
  * A decryption failure means a blank cockpit, so every one of these has to name
  * its cause rather than leaving a dead page and no explanation.
  */
-declare function describeSealedFailure(failure: SealedFailure): string;
+export declare function describeSealedFailure(failure: SealedFailure): string;
 //#endregion
-export { CLIENT_TO_SERVER_INFO, MAX_MESSAGES_PER_KEY, NONCE_BYTES, NONCE_COUNTER_BYTES, NONCE_PREFIX_BYTES, SEALED_BODY_HEADER, SEALED_CLIENT_KEY_HEADER, SEALED_KEY_PARAM, SEALED_VERSION, SERVER_TO_CLIENT_INFO, SealedDirection, SealedEnvelope, SealedFailure, describeSealedFailure, infoFor, isSealedEnvelope };
 //# sourceMappingURL=sealedChannel.d.mts.map

package/dist/types/sealedChannel.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"sealedChannel.d.mts","names":[],"sources":["../../src/types/sealedChannel.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;cAoBa;;cAGA;;cAGA;;cAEA;;cAEA;;;;;;;;;cAUA;;;;;;;cAQA;cACA;KAED;iBAEI,QAAQ,WAAW;;;;;;;UAUlB;EACf;;EAEA;;EAEA;;iBAGc,iBAAiB,iBAAiB,SAAS;;cAO9C;;cAEA;KAED;;;;;;;iBAQI,sBAAsB,SAAS"}
+{"version":3,"file":"sealedChannel.d.mts","names":[],"sources":["../../src/types/sealedChannel.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;qBAoBa;;qBAGA;;qBAGA;;qBAEA;;qBAEA;;;;;;;;;qBAUA;;;;;;;qBAQA;qBACA;YAED;wBAEI,QAAQ,WAAW;;;;;;;iBAUlB;EACf;;EAEA;;EAEA;;wBAGc,iBAAiB,iBAAiB,SAAS;;qBAO9C;;qBAEA;YAED;;;;;;;wBAQI,sBAAsB,SAAS"}