@agirails/sdk 4.4.9 → 4.5.2

package/dist/delivery/envelopeBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelopeBuilder.js","sourceRoot":"","sources":["../../src/delivery/envelopeBuilder.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqHG;;;AAEH,mCAKgB;AAEhB,0DAAgE;AAEhE,qCAMkB;AAClB,qCAKkB;AAClB,iCAOgB;AAChB,mCAOiB;AACjB,yCAA6E;AAE7E,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;;;;;GAOG;AACU,QAAA,2BAA2B,GAAG,GAAG,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AACU,QAAA,mBAAmB,GAAG,EAAW,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,gBAAgB,CAC9B,IAAmB,EACnB,aAA4B;IAE5B,MAAM,SAAS,GAAG,IAAA,qBAAY,EAAC,IAAI,CAAC,CAAC;IACrC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,4BAAmB,CAC3B,iCAAiC,EACjC,qCAAqC,SAAS,CAAC,MAAM,EAAE,EACvD,EAAE,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,CACnC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;IAChD,IAAI,WAAW,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,4BAAmB,CAC3B,mCAAmC,EACnC,8CAA8C,WAAW,CAAC,MAAM,EAAE,EAClE,EAAE,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,CACrC,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,2BAAmB,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAxBD,4CAwBC;AAED,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAC/E,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,wDAAwD;AACxD,EAAE;AACF,mEAAmE;AACnE,iEAAiE;AACjE,kDAAkD;AAClD,EAAE;AAEF,IAAI,cAAc,GAAiB,GAAW,EAAE;IAC9C,uEAAuE;IACvE,kEAAkE;IAClE,0BAA0B;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,UAAU;IACjB,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,qBAAqB,CAAC,IAA2B;IAC/D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,uBAAuB,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,cAAc,GAAG,IAAI,CAAC;AACxB,CAAC;AAND,sDAMC;AAED;;;;GAIG;AACH,SAAgB,uBAAuB;IACrC,cAAc,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC/D,CAAC;AAFD,0DAEC;AAkJD,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAa,uBAAuB;IAGlC;;;;;;;OAOG;IACH,YAAY,MAAe;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,6EAA6E;IAC7E,cAAc;IACd,6EAA6E;IAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,KAAK,CAAC,WAAW,CACf,MAAiC;QAEjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,4BAAmB,CAC3B,mBAAmB,EACnB,+GAA+G,CAChH,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,4BAAmB,CAC3B,4BAA4B,EAC5B,6CAA6C,MAAM,CAAC,SAAS,CAAC,EAAE,EAChE,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,EAAE;QACF,oEAAoE;QACpE,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACpD,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;YACtE,MAAM,IAAI,4BAAmB,CAC3B,iCAAiC,EACjC,yDAAyD,EACzD;gBACE,QAAQ,EAAE,YAAY,CAAC,WAAW,EAAE;gBACpC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE;aACxC,CACF,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,4BAAmB,CAC3B,oCAAoC,EACpC,wDAAwD,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAClF,EAAE,gBAAgB,EAAE,CACrB,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,EAAE;QACF,oEAAoE;QACpE,kEAAkE;QAClE,oEAAoE;QACpE,gEAAgE;QAChE,iCAAiC;QACjC,EAAE;QACF,gEAAgE;QAChE,yDAAyD;QACzD,+DAA+D;QAC/D,6DAA6D;QAC7D,8DAA8D;QAC9D,gEAAgE;QAChE,+DAA+D;QAC/D,2DAA2D;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,gCAAgC;QAC7D,MAAM,WAAW,GAAG,IAAA,iBAAQ,EAAC,UAAU,CAAC,CAAC,CAAC,gCAAgC;QAE1E,sCAAsC;QACtC,EAAE;QACF,oEAAoE;QACpE,4DAA4D;QAC5D,wCAAwC;QACxC,6CAA6C;QAC7C,MAAM,MAAM,GAA6B;YACvC,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,MAAM,EAAE,WAAW;YACnB,uBAAuB,EAAE,+BAAuB;YAChD,KAAK,EAAE,+BAAuB;YAC9B,WAAW;YACX,GAAG,EAAE,+BAAuB;YAC5B,SAAS;YACT,gBAAgB;SACjB,CAAC;QAEF,mBAAmB;QACnB,MAAM,MAAM,GAAG,IAAA,4BAAmB,EAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAClD,MAAM,EACN,mCAA0B,EAC1B,MAAM,CACP,CAAkB,CAAC;QAEpB,MAAM,IAAI,GAA2B;YACnC,MAAM;YACN,IAAI,EAAE,QAAQ;YACd,WAAW;SACZ,CAAC;QAEF,OAAO;YACL,IAAI;YACJ,SAAS,EAAE,cAAc;YACzB,mDAAmD;SACpD,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,iBAAiB;IACjB,6EAA6E;IAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,KAAK,CAAC,cAAc,CAClB,MAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,4BAAmB,CAC3B,mBAAmB,EACnB,kHAAkH,CACnH,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,IACE,MAAM,CAAC,oBAAoB,CAAC,WAAW,EAAE;YACzC,+BAAuB,CAAC,WAAW,EAAE,EACrC,CAAC;YACD,MAAM,IAAI,4BAAmB,CAC3B,mDAAmD,EACnD,8EAA8E,EAC9E,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,CACtD,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,4BAAmB,CAC3B,4BAA4B,EAC5B,6CAA6C,MAAM,CAAC,SAAS,CAAC,EAAE,EAChE,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACpD,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;YACtE,MAAM,IAAI,4BAAmB,CAC3B,iCAAiC,EACjC,yDAAyD,EACzD;gBACE,QAAQ,EAAE,YAAY,CAAC,WAAW,EAAE;gBACpC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE;aACxC,CACF,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,EAAE;QACF,oEAAoE;QACpE,iEAAiE;QACjE,+CAA+C;QAC/C,MAAM,UAAU,GACd,MAAM,CAAC,wBAAwB,IAAI,IAAA,+BAAwB,GAAE,CAAC;QAEhE,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAA,oBAAa,EAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAA,yBAAkB,EAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,IAAA,uBAAgB,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAEzD,4CAA4C;QAC5C,EAAE;QACF,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,iEAAiE;QACjE,4DAA4D;QAC5D,kDAAkD;QAClD,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACvE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAA,oBAAW,EAAC,cAAc,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAEhF,sCAAsC;QACtC,EAAE;QACF,+DAA+D;QAC/D,iEAAiE;QACjE,kDAAkD;QAClD,MAAM,WAAW,GAAG,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAA,iBAAQ,EAAC,UAAU,CAAC,CAAC;QAEzC,0CAA0C;QAC1C,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,4BAAmB,CAC3B,oCAAoC,EACpC,wDAAwD,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAClF,EAAE,gBAAgB,EAAE,CACrB,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,MAAM,MAAM,GAA6B;YACvC,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,MAAM,EAAE,qBAAqB;YAC7B,uBAAuB,EAAE,IAAA,kBAAW,EAAC,UAAU,CAAC,SAAS,CAAC;YAC1D,KAAK,EAAE,IAAA,mBAAU,EAAC,KAAK,CAAC;YACxB,WAAW;YACX,GAAG,EAAE,IAAA,mBAAU,EAAC,GAAG,CAAC;YACpB,SAAS;YACT,gBAAgB;SACjB,CAAC;QAEF,mBAAmB;QACnB,MAAM,MAAM,GAAG,IAAA,4BAAmB,EAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAClD,MAAM,EACN,mCAA0B,EAC1B,MAAM,CACP,CAAkB,CAAC;QAEpB,MAAM,IAAI,GAA2B;YACnC,MAAM;YACN,IAAI,EAAE,WAAW;YACjB,WAAW;SACZ,CAAC;QAEF,OAAO;YACL,IAAI;YACJ,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,UAAU;SACpB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,kBAAkB;IAClB,6EAA6E;IAE7E;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,MAAM,CACX,IAA4B,EAC5B,IAIC;QAID,oEAAoE;QACpE,kEAAkE;QAClE,iEAAiE;QACjE,gDAAgD;QAChD,MAAM,WAAW,GAAG,IAAA,+BAAoB,EAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE,WAAW,CAAC,KAAK;aACzB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE3B,gEAAgE;QAChE,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,gEAAgE;QAChE,MAAM,iBAAiB,GAAG,IAAA,oCAAyB,EAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;YAC1B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE,iBAAiB,CAAC,KAAK;aAC/B,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,yBAAyB;gBAC/B,KAAK,EAAE,oBAAoB,IAAI,CAAC,eAAe,SAAS,MAAM,CAAC,OAAO,EAAE;aACzE,CAAC;QACJ,CAAC;QAED,mDAAmD;QACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,CAAC;QAClE,MAAM,eAAe,GAAG,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QAC3D,IAAI,eAAe,KAAK,gBAAgB,EAAE,CAAC;YACzC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,0BAA0B;gBAChC,KAAK,EAAE,mBAAmB,gBAAgB,SAAS,eAAe,EAAE;aACrE,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,mEAAmE;QACnE,+DAA+D;QAC/D,EAAE;QACF,+CAA+C;QAC/C,8DAA8D;QAC9D,mEAAmE;QACnE,+DAA+D;QAC/D,gEAAgE;QAChE,gEAAgE;QAChE,iEAAiE;QACjE,mEAAmE;QACnE,IAAI,cAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,gEAAgE;YAChE,8DAA8D;YAC9D,+CAA+C;YAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,cAAc,GAAG,IAAA,iBAAQ,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,GAAG,IAAA,qBAAY,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,cAAc,GAAG,IAAA,iBAAQ,EAAC,SAAS,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gCAAgC;gBACtC,KAAK,EAAE,6DAA6D,GAAG,EAAE;aAC1E,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YACtE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gCAAgC;gBACtC,KAAK,EAAE,cAAc,cAAc,CAAC,WAAW,EAAE,sCAAsC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE;aAC1H,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,8DAA8D;QAC9D,4DAA4D;QAC5D,mBAAmB;QACnB,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,IAAA,8BAAqB,EAC/B,MAAM,EACN,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,qBAAqB,CAC3B,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE,GAAG;aACX,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE,oBAAoB,SAAS,CAAC,WAAW,EAAE,wCAAwC,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE;aAC/H,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,kEAAkE;QAClE,eAAe;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,mCAA2B,EAAE,CAAC;YACnE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,yBAAyB;gBAC/B,KAAK,EAAE,SAAS,GAAG,kBAAkB,MAAM,CAAC,SAAS,QAAQ,mCAA2B,GAAG;aAC5F,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,6EAA6E;IAC7E,0BAA0B;IAC1B,6EAA6E;IAE7E;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CACzB,IAA4B,EAC5B,qBAAiC;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAAmB,CAC3B,uCAAuC,EACvC,2DAA2D,MAAM,CAAC,MAAM,EAAE,EAC1E,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;QACJ,CAAC;QAED,6BAA6B;QAC7B,MAAM,cAAc,GAAG,IAAA,oBAAa,EAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAA,yBAAkB,EAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,IAAA,uBAAgB,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAEzD,sDAAsD;QACtD,MAAM,UAAU,GAAG,IAAA,qBAAY,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,qBAAY,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAErC,8DAA8D;QAC9D,0DAA0D;QAC1D,+DAA+D;QAC/D,gEAAgE;QAChE,qEAAqE;QACrE,uEAAuE;QACvE,0EAA0E;QAC1E,6CAA6C;QAC7C,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAEhE,kEAAkE;QAClE,4DAA4D;QAC5D,MAAM,cAAc,GAAG,IAAA,oBAAW,EAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAE5E,oEAAoE;QACpE,kDAAkD;QAClD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,6EAA6E;IAC7E,4BAA4B;IAC5B,6EAA6E;IAE7E;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAC3B,IAA4B,EAC5B,qBAAiC,EACjC,IAIC;QAKD,MAAM,YAAY,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;QAEnC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,gEAAgE;YAChE,4DAA4D;YAC5D,IAAI,CAAC;gBACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,yBAAyB;oBAC/B,KAAK,EAAE,2CAA2C,GAAG,EAAE;iBACxD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,uDAAuD;QACvD,oEAAoE;QACpE,8CAA8C;QAC9C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,cAAc,CAC1D,IAAI,EACJ,qBAAqB,CACtB,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,yBAAyB;gBAC/B,KAAK,EAAE,GAAG;aACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,uBAAuB;IACvB,6EAA6E;IAE7E;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,WAAW,CAAC,IAA4B;QAC7C,OAAO,IAAA,kBAAS,EAAC,IAAA,oBAAW,EAAC,IAAA,sCAAsB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;CACF;AAtpBD,0DAspBC;AAaD,sEAAsE;AACtE,wEAAwE;AACxE,sCAAsC;AACtC,6DAA6D;AAC7D,MAAM,WAAW,GAAkB,eAAM,CAAC"}

package/dist/delivery/index.d.ts

@@ -0,0 +1,53 @@
+/**
+ * AIP-16 Delivery Surface — Module Barrel
+ * ========================================
+ *
+ * Public re-export surface for the AGIRAILS delivery layer (AIP-16 Rev 5).
+ *
+ * Phase 2a foundation: types + EIP-712 domain/types/recovery helpers.
+ * Later phases add cryptographic primitives (`crypto.ts`), builders
+ * (`setupBuilder.ts`, `envelopeBuilder.ts`), verifiers, the channel
+ * client, and a structured error class extending `ACTPError`.
+ *
+ * Consumers SHOULD import from this barrel rather than reaching into
+ * individual files, so future internal refactors do not break call
+ * sites:
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   DeliveryScheme,
+ *   DeliverySetupSignedV1,
+ *   DeliveryEnvelopeWireV1,
+ *   CANONICAL_EMPTY_BYTES32,
+ *   DELIVERY_DOMAIN_NAME,
+ *   buildDeliveryDomain,
+ *   recoverSetupSigner,
+ * } from '@agirails/sdk/delivery';
+ * ```
+ */
+export type { DeliveryScheme, DeliveryMode, DeliveryPrivacy, ParticipantRole, DeliveryNetwork, DeliverySetupSignedV1, DeliverySetupWireV1, DeliveryEnvelopeSignedV1, DeliveryEnvelopeWireV1, BuildSetupResult, BuildEnvelopeResult, DeliveryErrorCode, DeliveryError, } from './types';
+export { CANONICAL_EMPTY_BYTES32, CANONICAL_EMPTY_BYTES12, CANONICAL_EMPTY_BYTES16, } from './types';
+export { DELIVERY_DOMAIN_NAME, DELIVERY_DOMAIN_VERSION, DELIVERY_SETUP_TYPES_V1, DELIVERY_ENVELOPE_TYPES_V1, chainIdForNetwork, buildDeliveryDomain, recoverSetupSigner, recoverEnvelopeSigner, DeliveryEip712Error, } from './eip712';
+export type { EphemeralKeyPair } from './keys';
+export { X25519_PUBLIC_KEY_LENGTH, X25519_PRIVATE_KEY_LENGTH, X25519_SHARED_SECRET_LENGTH, DELIVERY_SESSION_KEY_LENGTH, TX_ID_BYTES, DELIVERY_HKDF_INFO_V1, generateEphemeralKeyPair, deriveSharedSecret, deriveSessionKey, pubkeyToHex, pubkeyFromHex, DeliveryCryptoError, } from './keys';
+export type { EncryptResult } from './crypto';
+export { AES_GCM_NONCE_LENGTH, AES_GCM_TAG_LENGTH, AES_KEY_LENGTH, encryptBody, decryptBody, bodyHash, bytesToHex, bytesFromHex, } from './crypto';
+export type { ValidationResult } from './validate';
+export { isValidBytes32, isValidBytes12, isValidBytes16, isValidAddress, isValidUintString, isValidScheme, isValidPrivacy, isValidRole, isCanonicalEmptyBytes32, isCanonicalEmptyBytes12, isCanonicalEmptyBytes16, validateSetupSigned, validateSetupWire, validateEnvelopeSigned, validateEnvelopeWire, validateSchemeConsistency, } from './validate';
+export { DELIVERY_NONCE_KEY_SETUP, DELIVERY_NONCE_KEY_ENVELOPE, } from './nonce-keys';
+export type { DeliveryNonceKey } from './nonce-keys';
+export { DeliverySetupBuilder } from './setupBuilder';
+export type { BuildSetupParams } from './setupBuilder';
+export { DEFAULT_SETUP_EXPIRY_SEC, SETUP_TIMESTAMP_SKEW_SEC, DEFAULT_ACCEPTED_CHANNELS, } from './setupBuilder';
+export { DeliveryEnvelopeBuilder } from './envelopeBuilder';
+export type { BuildPublicEnvelopeParams, BuildEncryptedEnvelopeParams, } from './envelopeBuilder';
+export { ENVELOPE_TIMESTAMP_SKEW_SEC, ENVELOPE_AAD_LENGTH, buildEnvelopeAad, } from './envelopeBuilder';
+export type { DeliveryChannel, DeliverySubscription, SetupCallback, EnvelopeCallback, } from './channel';
+export type { LogFn } from './channelLog';
+export { noopLog } from './channelLog';
+export { MockDeliveryChannel } from './MockDeliveryChannel';
+export type { MockDeliveryChannelOptions } from './MockDeliveryChannel';
+export { RelayDeliveryChannel, POLL_INTERVAL_MS, REQUEST_TIMEOUT_MS, } from './RelayDeliveryChannel';
+export type { RelayDeliveryChannelOptions } from './RelayDeliveryChannel';
+//# sourceMappingURL=index.d.ts.map

package/dist/delivery/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/delivery/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,YAAY,EAEV,cAAc,EACd,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,EAEf,qBAAqB,EACrB,mBAAmB,EAEnB,wBAAwB,EACxB,sBAAsB,EAEtB,gBAAgB,EAChB,mBAAmB,EAEnB,iBAAiB,EACjB,aAAa,GACd,MAAM,SAAS,CAAC;AAEjB,OAAO,EAEL,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,SAAS,CAAC;AAMjB,OAAO,EAEL,oBAAoB,EACpB,uBAAuB,EAEvB,uBAAuB,EACvB,0BAA0B,EAE1B,iBAAiB,EACjB,mBAAmB,EAEnB,kBAAkB,EAClB,qBAAqB,EAErB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAMlB,YAAY,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAE/C,OAAO,EAEL,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,WAAW,EAEX,qBAAqB,EAErB,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAEhB,WAAW,EACX,aAAa,EAEb,mBAAmB,GACpB,MAAM,QAAQ,CAAC;AAMhB,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C,OAAO,EAEL,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EAEd,WAAW,EACX,WAAW,EAEX,QAAQ,EAER,UAAU,EACV,YAAY,GACb,MAAM,UAAU,CAAC;AAMlB,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,OAAO,EAEL,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,WAAW,EAEX,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EAEvB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EAEpB,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAMpB,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAMrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,YAAY,EACV,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAM3B,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAMnB,YAAY,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAMvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/delivery/index.js

@@ -0,0 +1,143 @@
+"use strict";
+/**
+ * AIP-16 Delivery Surface — Module Barrel
+ * ========================================
+ *
+ * Public re-export surface for the AGIRAILS delivery layer (AIP-16 Rev 5).
+ *
+ * Phase 2a foundation: types + EIP-712 domain/types/recovery helpers.
+ * Later phases add cryptographic primitives (`crypto.ts`), builders
+ * (`setupBuilder.ts`, `envelopeBuilder.ts`), verifiers, the channel
+ * client, and a structured error class extending `ACTPError`.
+ *
+ * Consumers SHOULD import from this barrel rather than reaching into
+ * individual files, so future internal refactors do not break call
+ * sites:
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   DeliveryScheme,
+ *   DeliverySetupSignedV1,
+ *   DeliveryEnvelopeWireV1,
+ *   CANONICAL_EMPTY_BYTES32,
+ *   DELIVERY_DOMAIN_NAME,
+ *   buildDeliveryDomain,
+ *   recoverSetupSigner,
+ * } from '@agirails/sdk/delivery';
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELIVERY_NONCE_KEY_ENVELOPE = exports.DELIVERY_NONCE_KEY_SETUP = exports.validateSchemeConsistency = exports.validateEnvelopeWire = exports.validateEnvelopeSigned = exports.validateSetupWire = exports.validateSetupSigned = exports.isCanonicalEmptyBytes16 = exports.isCanonicalEmptyBytes12 = exports.isCanonicalEmptyBytes32 = exports.isValidRole = exports.isValidPrivacy = exports.isValidScheme = exports.isValidUintString = exports.isValidAddress = exports.isValidBytes16 = exports.isValidBytes12 = exports.isValidBytes32 = exports.bytesFromHex = exports.bytesToHex = exports.bodyHash = exports.decryptBody = exports.encryptBody = exports.AES_KEY_LENGTH = exports.AES_GCM_TAG_LENGTH = exports.AES_GCM_NONCE_LENGTH = exports.DeliveryCryptoError = exports.pubkeyFromHex = exports.pubkeyToHex = exports.deriveSessionKey = exports.deriveSharedSecret = exports.generateEphemeralKeyPair = exports.DELIVERY_HKDF_INFO_V1 = exports.TX_ID_BYTES = exports.DELIVERY_SESSION_KEY_LENGTH = exports.X25519_SHARED_SECRET_LENGTH = exports.X25519_PRIVATE_KEY_LENGTH = exports.X25519_PUBLIC_KEY_LENGTH = exports.DeliveryEip712Error = exports.recoverEnvelopeSigner = exports.recoverSetupSigner = exports.buildDeliveryDomain = exports.chainIdForNetwork = exports.DELIVERY_ENVELOPE_TYPES_V1 = exports.DELIVERY_SETUP_TYPES_V1 = exports.DELIVERY_DOMAIN_VERSION = exports.DELIVERY_DOMAIN_NAME = exports.CANONICAL_EMPTY_BYTES16 = exports.CANONICAL_EMPTY_BYTES12 = exports.CANONICAL_EMPTY_BYTES32 = void 0;
+exports.REQUEST_TIMEOUT_MS = exports.POLL_INTERVAL_MS = exports.RelayDeliveryChannel = exports.MockDeliveryChannel = exports.noopLog = exports.buildEnvelopeAad = exports.ENVELOPE_AAD_LENGTH = exports.ENVELOPE_TIMESTAMP_SKEW_SEC = exports.DeliveryEnvelopeBuilder = exports.DEFAULT_ACCEPTED_CHANNELS = exports.SETUP_TIMESTAMP_SKEW_SEC = exports.DEFAULT_SETUP_EXPIRY_SEC = exports.DeliverySetupBuilder = void 0;
+var types_1 = require("./types");
+// Canonical empty value constants
+Object.defineProperty(exports, "CANONICAL_EMPTY_BYTES32", { enumerable: true, get: function () { return types_1.CANONICAL_EMPTY_BYTES32; } });
+Object.defineProperty(exports, "CANONICAL_EMPTY_BYTES12", { enumerable: true, get: function () { return types_1.CANONICAL_EMPTY_BYTES12; } });
+Object.defineProperty(exports, "CANONICAL_EMPTY_BYTES16", { enumerable: true, get: function () { return types_1.CANONICAL_EMPTY_BYTES16; } });
+// ---------------------------------------------------------------------------
+// EIP-712 domain, types, and recovery helpers (Phase 2a)
+// ---------------------------------------------------------------------------
+var eip712_1 = require("./eip712");
+// Domain constants
+Object.defineProperty(exports, "DELIVERY_DOMAIN_NAME", { enumerable: true, get: function () { return eip712_1.DELIVERY_DOMAIN_NAME; } });
+Object.defineProperty(exports, "DELIVERY_DOMAIN_VERSION", { enumerable: true, get: function () { return eip712_1.DELIVERY_DOMAIN_VERSION; } });
+// EIP-712 typed-data schemas (field order IMMUTABLE)
+Object.defineProperty(exports, "DELIVERY_SETUP_TYPES_V1", { enumerable: true, get: function () { return eip712_1.DELIVERY_SETUP_TYPES_V1; } });
+Object.defineProperty(exports, "DELIVERY_ENVELOPE_TYPES_V1", { enumerable: true, get: function () { return eip712_1.DELIVERY_ENVELOPE_TYPES_V1; } });
+// Network + domain helpers
+Object.defineProperty(exports, "chainIdForNetwork", { enumerable: true, get: function () { return eip712_1.chainIdForNetwork; } });
+Object.defineProperty(exports, "buildDeliveryDomain", { enumerable: true, get: function () { return eip712_1.buildDeliveryDomain; } });
+// Recovery helpers
+Object.defineProperty(exports, "recoverSetupSigner", { enumerable: true, get: function () { return eip712_1.recoverSetupSigner; } });
+Object.defineProperty(exports, "recoverEnvelopeSigner", { enumerable: true, get: function () { return eip712_1.recoverEnvelopeSigner; } });
+// Error class
+Object.defineProperty(exports, "DeliveryEip712Error", { enumerable: true, get: function () { return eip712_1.DeliveryEip712Error; } });
+var keys_1 = require("./keys");
+// Length constants
+Object.defineProperty(exports, "X25519_PUBLIC_KEY_LENGTH", { enumerable: true, get: function () { return keys_1.X25519_PUBLIC_KEY_LENGTH; } });
+Object.defineProperty(exports, "X25519_PRIVATE_KEY_LENGTH", { enumerable: true, get: function () { return keys_1.X25519_PRIVATE_KEY_LENGTH; } });
+Object.defineProperty(exports, "X25519_SHARED_SECRET_LENGTH", { enumerable: true, get: function () { return keys_1.X25519_SHARED_SECRET_LENGTH; } });
+Object.defineProperty(exports, "DELIVERY_SESSION_KEY_LENGTH", { enumerable: true, get: function () { return keys_1.DELIVERY_SESSION_KEY_LENGTH; } });
+Object.defineProperty(exports, "TX_ID_BYTES", { enumerable: true, get: function () { return keys_1.TX_ID_BYTES; } });
+// HKDF info string for v1
+Object.defineProperty(exports, "DELIVERY_HKDF_INFO_V1", { enumerable: true, get: function () { return keys_1.DELIVERY_HKDF_INFO_V1; } });
+// Core primitives
+Object.defineProperty(exports, "generateEphemeralKeyPair", { enumerable: true, get: function () { return keys_1.generateEphemeralKeyPair; } });
+Object.defineProperty(exports, "deriveSharedSecret", { enumerable: true, get: function () { return keys_1.deriveSharedSecret; } });
+Object.defineProperty(exports, "deriveSessionKey", { enumerable: true, get: function () { return keys_1.deriveSessionKey; } });
+// Hex format helpers
+Object.defineProperty(exports, "pubkeyToHex", { enumerable: true, get: function () { return keys_1.pubkeyToHex; } });
+Object.defineProperty(exports, "pubkeyFromHex", { enumerable: true, get: function () { return keys_1.pubkeyFromHex; } });
+// Error class
+Object.defineProperty(exports, "DeliveryCryptoError", { enumerable: true, get: function () { return keys_1.DeliveryCryptoError; } });
+var crypto_1 = require("./crypto");
+// Length constants
+Object.defineProperty(exports, "AES_GCM_NONCE_LENGTH", { enumerable: true, get: function () { return crypto_1.AES_GCM_NONCE_LENGTH; } });
+Object.defineProperty(exports, "AES_GCM_TAG_LENGTH", { enumerable: true, get: function () { return crypto_1.AES_GCM_TAG_LENGTH; } });
+Object.defineProperty(exports, "AES_KEY_LENGTH", { enumerable: true, get: function () { return crypto_1.AES_KEY_LENGTH; } });
+// AEAD primitives
+Object.defineProperty(exports, "encryptBody", { enumerable: true, get: function () { return crypto_1.encryptBody; } });
+Object.defineProperty(exports, "decryptBody", { enumerable: true, get: function () { return crypto_1.decryptBody; } });
+// keccak256 body hash (for payloadHash binding)
+Object.defineProperty(exports, "bodyHash", { enumerable: true, get: function () { return crypto_1.bodyHash; } });
+// Hex format helpers (wire-boundary serialization)
+Object.defineProperty(exports, "bytesToHex", { enumerable: true, get: function () { return crypto_1.bytesToHex; } });
+Object.defineProperty(exports, "bytesFromHex", { enumerable: true, get: function () { return crypto_1.bytesFromHex; } });
+var validate_1 = require("./validate");
+// Primitive validators
+Object.defineProperty(exports, "isValidBytes32", { enumerable: true, get: function () { return validate_1.isValidBytes32; } });
+Object.defineProperty(exports, "isValidBytes12", { enumerable: true, get: function () { return validate_1.isValidBytes12; } });
+Object.defineProperty(exports, "isValidBytes16", { enumerable: true, get: function () { return validate_1.isValidBytes16; } });
+Object.defineProperty(exports, "isValidAddress", { enumerable: true, get: function () { return validate_1.isValidAddress; } });
+Object.defineProperty(exports, "isValidUintString", { enumerable: true, get: function () { return validate_1.isValidUintString; } });
+Object.defineProperty(exports, "isValidScheme", { enumerable: true, get: function () { return validate_1.isValidScheme; } });
+Object.defineProperty(exports, "isValidPrivacy", { enumerable: true, get: function () { return validate_1.isValidPrivacy; } });
+Object.defineProperty(exports, "isValidRole", { enumerable: true, get: function () { return validate_1.isValidRole; } });
+// Canonical-empty checks
+Object.defineProperty(exports, "isCanonicalEmptyBytes32", { enumerable: true, get: function () { return validate_1.isCanonicalEmptyBytes32; } });
+Object.defineProperty(exports, "isCanonicalEmptyBytes12", { enumerable: true, get: function () { return validate_1.isCanonicalEmptyBytes12; } });
+Object.defineProperty(exports, "isCanonicalEmptyBytes16", { enumerable: true, get: function () { return validate_1.isCanonicalEmptyBytes16; } });
+// Schema validators
+Object.defineProperty(exports, "validateSetupSigned", { enumerable: true, get: function () { return validate_1.validateSetupSigned; } });
+Object.defineProperty(exports, "validateSetupWire", { enumerable: true, get: function () { return validate_1.validateSetupWire; } });
+Object.defineProperty(exports, "validateEnvelopeSigned", { enumerable: true, get: function () { return validate_1.validateEnvelopeSigned; } });
+Object.defineProperty(exports, "validateEnvelopeWire", { enumerable: true, get: function () { return validate_1.validateEnvelopeWire; } });
+// Cross-field consistency
+Object.defineProperty(exports, "validateSchemeConsistency", { enumerable: true, get: function () { return validate_1.validateSchemeConsistency; } });
+// ============================================================================
+// Nonce key constants (AIP-16 Rev5 — per-builder key separation)
+// ============================================================================
+var nonce_keys_1 = require("./nonce-keys");
+Object.defineProperty(exports, "DELIVERY_NONCE_KEY_SETUP", { enumerable: true, get: function () { return nonce_keys_1.DELIVERY_NONCE_KEY_SETUP; } });
+Object.defineProperty(exports, "DELIVERY_NONCE_KEY_ENVELOPE", { enumerable: true, get: function () { return nonce_keys_1.DELIVERY_NONCE_KEY_ENVELOPE; } });
+// ============================================================================
+// Buyer setup builder + verifier (Phase 2b)
+// ============================================================================
+var setupBuilder_1 = require("./setupBuilder");
+Object.defineProperty(exports, "DeliverySetupBuilder", { enumerable: true, get: function () { return setupBuilder_1.DeliverySetupBuilder; } });
+var setupBuilder_2 = require("./setupBuilder");
+Object.defineProperty(exports, "DEFAULT_SETUP_EXPIRY_SEC", { enumerable: true, get: function () { return setupBuilder_2.DEFAULT_SETUP_EXPIRY_SEC; } });
+Object.defineProperty(exports, "SETUP_TIMESTAMP_SKEW_SEC", { enumerable: true, get: function () { return setupBuilder_2.SETUP_TIMESTAMP_SKEW_SEC; } });
+Object.defineProperty(exports, "DEFAULT_ACCEPTED_CHANNELS", { enumerable: true, get: function () { return setupBuilder_2.DEFAULT_ACCEPTED_CHANNELS; } });
+// ============================================================================
+// Provider envelope builder + verifier + decryptor (Phase 2b)
+// ============================================================================
+var envelopeBuilder_1 = require("./envelopeBuilder");
+Object.defineProperty(exports, "DeliveryEnvelopeBuilder", { enumerable: true, get: function () { return envelopeBuilder_1.DeliveryEnvelopeBuilder; } });
+var envelopeBuilder_2 = require("./envelopeBuilder");
+Object.defineProperty(exports, "ENVELOPE_TIMESTAMP_SKEW_SEC", { enumerable: true, get: function () { return envelopeBuilder_2.ENVELOPE_TIMESTAMP_SKEW_SEC; } });
+Object.defineProperty(exports, "ENVELOPE_AAD_LENGTH", { enumerable: true, get: function () { return envelopeBuilder_2.ENVELOPE_AAD_LENGTH; } });
+Object.defineProperty(exports, "buildEnvelopeAad", { enumerable: true, get: function () { return envelopeBuilder_2.buildEnvelopeAad; } });
+var channelLog_1 = require("./channelLog");
+Object.defineProperty(exports, "noopLog", { enumerable: true, get: function () { return channelLog_1.noopLog; } });
+// ============================================================================
+// Channel implementations (Phase 2b)
+// ============================================================================
+var MockDeliveryChannel_1 = require("./MockDeliveryChannel");
+Object.defineProperty(exports, "MockDeliveryChannel", { enumerable: true, get: function () { return MockDeliveryChannel_1.MockDeliveryChannel; } });
+var RelayDeliveryChannel_1 = require("./RelayDeliveryChannel");
+Object.defineProperty(exports, "RelayDeliveryChannel", { enumerable: true, get: function () { return RelayDeliveryChannel_1.RelayDeliveryChannel; } });
+Object.defineProperty(exports, "POLL_INTERVAL_MS", { enumerable: true, get: function () { return RelayDeliveryChannel_1.POLL_INTERVAL_MS; } });
+Object.defineProperty(exports, "REQUEST_TIMEOUT_MS", { enumerable: true, get: function () { return RelayDeliveryChannel_1.REQUEST_TIMEOUT_MS; } });
+//# sourceMappingURL=index.js.map

package/dist/delivery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/delivery/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;;AAuBH,iCAKiB;AAJf,kCAAkC;AAClC,gHAAA,uBAAuB,OAAA;AACvB,gHAAA,uBAAuB,OAAA;AACvB,gHAAA,uBAAuB,OAAA;AAGzB,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E,mCAekB;AAdhB,mBAAmB;AACnB,8GAAA,oBAAoB,OAAA;AACpB,iHAAA,uBAAuB,OAAA;AACvB,qDAAqD;AACrD,iHAAA,uBAAuB,OAAA;AACvB,oHAAA,0BAA0B,OAAA;AAC1B,2BAA2B;AAC3B,2GAAA,iBAAiB,OAAA;AACjB,6GAAA,mBAAmB,OAAA;AACnB,mBAAmB;AACnB,4GAAA,kBAAkB,OAAA;AAClB,+GAAA,qBAAqB,OAAA;AACrB,cAAc;AACd,6GAAA,mBAAmB,OAAA;AASrB,+BAkBgB;AAjBd,mBAAmB;AACnB,gHAAA,wBAAwB,OAAA;AACxB,iHAAA,yBAAyB,OAAA;AACzB,mHAAA,2BAA2B,OAAA;AAC3B,mHAAA,2BAA2B,OAAA;AAC3B,mGAAA,WAAW,OAAA;AACX,0BAA0B;AAC1B,6GAAA,qBAAqB,OAAA;AACrB,kBAAkB;AAClB,gHAAA,wBAAwB,OAAA;AACxB,0GAAA,kBAAkB,OAAA;AAClB,wGAAA,gBAAgB,OAAA;AAChB,qBAAqB;AACrB,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,cAAc;AACd,2GAAA,mBAAmB,OAAA;AASrB,mCAakB;AAZhB,mBAAmB;AACnB,8GAAA,oBAAoB,OAAA;AACpB,4GAAA,kBAAkB,OAAA;AAClB,wGAAA,cAAc,OAAA;AACd,kBAAkB;AAClB,qGAAA,WAAW,OAAA;AACX,qGAAA,WAAW,OAAA;AACX,gDAAgD;AAChD,kGAAA,QAAQ,OAAA;AACR,mDAAmD;AACnD,oGAAA,UAAU,OAAA;AACV,sGAAA,YAAY,OAAA;AASd,uCAqBoB;AApBlB,uBAAuB;AACvB,0GAAA,cAAc,OAAA;AACd,0GAAA,cAAc,OAAA;AACd,0GAAA,cAAc,OAAA;AACd,0GAAA,cAAc,OAAA;AACd,6GAAA,iBAAiB,OAAA;AACjB,yGAAA,aAAa,OAAA;AACb,0GAAA,cAAc,OAAA;AACd,uGAAA,WAAW,OAAA;AACX,yBAAyB;AACzB,mHAAA,uBAAuB,OAAA;AACvB,mHAAA,uBAAuB,OAAA;AACvB,mHAAA,uBAAuB,OAAA;AACvB,oBAAoB;AACpB,+GAAA,mBAAmB,OAAA;AACnB,6GAAA,iBAAiB,OAAA;AACjB,kHAAA,sBAAsB,OAAA;AACtB,gHAAA,oBAAoB,OAAA;AACpB,0BAA0B;AAC1B,qHAAA,yBAAyB,OAAA;AAG3B,+EAA+E;AAC/E,iEAAiE;AACjE,+EAA+E;AAE/E,2CAGsB;AAFpB,sHAAA,wBAAwB,OAAA;AACxB,yHAAA,2BAA2B,OAAA;AAK7B,+EAA+E;AAC/E,4CAA4C;AAC5C,+EAA+E;AAE/E,+CAAsD;AAA7C,oHAAA,oBAAoB,OAAA;AAI7B,+CAIwB;AAHtB,wHAAA,wBAAwB,OAAA;AACxB,wHAAA,wBAAwB,OAAA;AACxB,yHAAA,yBAAyB,OAAA;AAG3B,+EAA+E;AAC/E,8DAA8D;AAC9D,+EAA+E;AAE/E,qDAA4D;AAAnD,0HAAA,uBAAuB,OAAA;AAOhC,qDAI2B;AAHzB,8HAAA,2BAA2B,OAAA;AAC3B,sHAAA,mBAAmB,OAAA;AACnB,mHAAA,gBAAgB,OAAA;AAoBlB,2CAAuC;AAA9B,qGAAA,OAAO,OAAA;AAEhB,+EAA+E;AAC/E,qCAAqC;AACrC,+EAA+E;AAE/E,6DAA4D;AAAnD,0HAAA,mBAAmB,OAAA;AAG5B,+DAIgC;AAH9B,4HAAA,oBAAoB,OAAA;AACpB,wHAAA,gBAAgB,OAAA;AAChB,0HAAA,kBAAkB,OAAA"}

package/dist/delivery/keys.d.ts

@@ -0,0 +1,344 @@
+/**
+ * AIP-16 Delivery Surface — X25519 Keys, ECDH, HKDF (Phase 2a Foundation)
+ * ========================================================================
+ *
+ * Cryptographic primitives for the encrypted delivery scheme
+ * (`x25519-aes256gcm-v1`) of AIP-16 Rev 5.
+ *
+ * This module is intentionally *primitive-level* — it deals only in
+ * raw key material (Uint8Array), 0x-prefixed hex serialization, and
+ * the three numbered steps of the ECDH+HKDF derivation:
+ *
+ *   1. Generate an ephemeral X25519 keypair.
+ *   2. Combine the local secret with the peer's public key (ECDH on
+ *      Curve25519, per RFC 7748) to produce a 32-byte shared secret.
+ *   3. Stretch the shared secret to a 32-byte AES-256-GCM key via
+ *      HKDF-SHA256 (RFC 5869), using the on-chain `txId` as the salt
+ *      and `"agirails-delivery-v1"` as the info string.
+ *
+ * AEAD encryption itself, body framing, and EIP-712 signing live in
+ * later phases (`crypto.ts`, `envelopeBuilder.ts`); this file is
+ * deliberately small so it can be audited end-to-end.
+ *
+ * ## Library choice
+ *
+ * X25519 is implemented via `@noble/curves/ed25519` (audited, no
+ * native deps, constant-time on supported runtimes). HKDF-SHA256 is
+ * provided by Node's built-in `crypto.hkdfSync` — chosen over
+ * `@noble/hashes` to minimize the new-dependency surface. Both choices
+ * are deterministic and have no global state.
+ *
+ * ## Memory hygiene
+ *
+ * Private key material returned by `generateEphemeralKeyPair` is held
+ * in plain `Uint8Array`s. The intent of "ephemeral" in AIP-16 is that
+ * the caller derives the session key and then drops the reference to
+ * the private key. Forward secrecy against compromise of long-term
+ * provider/requester keys is provided by *fresh keypair per delivery*;
+ * there is no key-rotation mechanism within a single delivery exchange.
+ *
+ * Callers SHOULD avoid logging `EphemeralKeyPair.privateKey` or any
+ * value derived from it.
+ *
+ * ## What is NOT here
+ *
+ * - AES-256-GCM seal/open (later: `crypto.ts`).
+ * - keccak256 hashing of body bytes (uses ethers in builders).
+ * - EIP-712 signing (already in `eip712.ts`).
+ * - Smart-wallet equality checks (later: verifier modules).
+ *
+ * @module delivery/keys
+ * @see {@link https://www.rfc-editor.org/rfc/rfc7748 RFC 7748 — Elliptic Curves for Security (X25519)}
+ * @see {@link https://www.rfc-editor.org/rfc/rfc5869 RFC 5869 — HKDF}
+ * @see ./types — `DeliveryErrorCode` (crypto_* codes referenced here)
+ * @see ./eip712 — EIP-712 domain & recovery (the *other* foundation module)
+ */
+import type { DeliveryErrorCode } from './types';
+/**
+ * Length (in bytes) of an X25519 public key. RFC 7748 §5.
+ *
+ * Both the buyer's `buyerEphemeralPubkey` field and the provider's
+ * `providerEphemeralPubkey` field in the signed EIP-712 payloads carry
+ * exactly this many bytes (encoded as `bytes32` in the typed-data
+ * schema; X25519 keys happen to also be 32 bytes, which is why a
+ * single `bytes32` slot fits).
+ */
+export declare const X25519_PUBLIC_KEY_LENGTH: 32;
+/**
+ * Length (in bytes) of an X25519 private key (clamped scalar). RFC 7748 §5.
+ *
+ * Equal to {@link X25519_PUBLIC_KEY_LENGTH}, which is coincidence — the
+ * scalar field of Curve25519 is 252 bits but is encoded into a 32-byte
+ * little-endian field with the canonical clamping applied by
+ * `@noble/curves`.
+ */
+export declare const X25519_PRIVATE_KEY_LENGTH: 32;
+/**
+ * Length (in bytes) of the X25519 shared secret produced by ECDH.
+ *
+ * Per RFC 7748 the shared secret is the 32-byte little-endian encoding
+ * of the resulting u-coordinate.
+ */
+export declare const X25519_SHARED_SECRET_LENGTH: 32;
+/**
+ * Length (in bytes) of the session key derived from HKDF. Sized for
+ * AES-256-GCM (the only AEAD scheme defined for `x25519-aes256gcm-v1`).
+ */
+export declare const DELIVERY_SESSION_KEY_LENGTH: 32;
+/**
+ * Length (in bytes) of an on-chain `txId` (`bytes32`).
+ *
+ * The txId is used directly as the HKDF salt: it is high-entropy
+ * (keccak256 of requester/provider/amount/serviceHash/nonce) and
+ * unique per transaction, satisfying RFC 5869's salt recommendation
+ * ("a non-secret random value, ideally hash-output length").
+ */
+export declare const TX_ID_BYTES: 32;
+/**
+ * HKDF `info` string for v1 delivery session-key derivation.
+ *
+ * Per RFC 5869 the `info` parameter provides context binding so that
+ * the same `(ikm, salt)` pair produces distinct keys for distinct
+ * application contexts. Locking this string at v1 prevents accidental
+ * key reuse with any future delivery scheme that lands in v2.
+ *
+ * Encoded as UTF-8 bytes when passed to `hkdfSync`.
+ */
+export declare const DELIVERY_HKDF_INFO_V1: "agirails-delivery-v1";
+/**
+ * Error thrown by the delivery key primitives when key material or
+ * ECDH/HKDF inputs are malformed, or when the derivation produces a
+ * degenerate result (e.g. all-zero shared secret indicating a
+ * low-order peer pubkey).
+ *
+ * Mirrors the `DeliveryEip712Error` pattern from `./eip712.ts` — a
+ * plain `Error` subclass with a stable `code` field. The codes here
+ * are drawn from the `crypto_*` subset of {@link DeliveryErrorCode}.
+ *
+ * The higher-level `ACTPError`-based delivery class is introduced
+ * alongside the builders/verifiers in a later phase; for the
+ * pre-builder foundation we keep the dependency surface minimal (no
+ * `ACTPError` import, no `State` import).
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   const shared = deriveSharedSecret(myPriv, peerPub);
+ * } catch (err) {
+ *   if (err instanceof DeliveryCryptoError) {
+ *     console.error(err.code, err.message, err.details);
+ *   }
+ *   throw err;
+ * }
+ * ```
+ */
+export declare class DeliveryCryptoError extends Error {
+    /** Stable machine-actionable error code from the `crypto_*` subset. */
+    readonly code: DeliveryErrorCode;
+    /** Optional structured details for debugging (expected/actual lengths, etc.). */
+    readonly details?: Record<string, unknown>;
+    constructor(code: DeliveryErrorCode, message: string, details?: Record<string, unknown>);
+}
+/**
+ * A freshly generated X25519 ephemeral keypair.
+ *
+ * Returned by {@link generateEphemeralKeyPair}. Carries both the raw
+ * 32-byte representations (for direct passing to ECDH) and the
+ * canonical lowercase 0x-prefixed hex form of the public key (for
+ * embedding into the EIP-712 signed projection as `bytes32`).
+ *
+ * The hex form is provided for the *public* key only; the private key
+ * is intentionally NOT serialized to hex by the generator. Callers
+ * that need to persist the private key (which AIP-16 does NOT
+ * require — keypairs are ephemeral) must do so explicitly.
+ */
+export interface EphemeralKeyPair {
+    /**
+     * X25519 public key as 32 raw bytes.
+     *
+     * Equal to `pubkeyFromHex(publicKeyHex)` — the two forms are kept
+     * in lock-step. Pass this to {@link deriveSharedSecret} (as the
+     * peer's pubkey on the receiving side, or for self-verification on
+     * the sending side).
+     */
+    publicKey: Uint8Array;
+    /**
+     * X25519 private (secret) scalar as 32 raw bytes.
+     *
+     * SECURITY: this value MUST NOT be logged, persisted to disk, or
+     * transmitted across a process boundary. The recommended pattern is
+     * to derive the shared secret + session key immediately after
+     * generation and let the keypair go out of scope.
+     */
+    privateKey: Uint8Array;
+    /**
+     * Canonical 0x-prefixed lowercase hex form of `publicKey`, length 66
+     * characters (`"0x" + 64`). Exactly the value to embed into the
+     * `buyerEphemeralPubkey` or `providerEphemeralPubkey` field of the
+     * signed EIP-712 projection.
+     */
+    publicKeyHex: `0x${string}`;
+}
+/**
+ * Generate a fresh X25519 ephemeral keypair using the system CSPRNG
+ * (via `@noble/curves`, which delegates to `crypto.getRandomValues` /
+ * `node:crypto.randomBytes`).
+ *
+ * The returned pair is intended to live for a *single* delivery
+ * exchange:
+ *  - Buyer side: generated when constructing the `DeliverySetup`,
+ *    public key embedded into `buyerEphemeralPubkey`, private key
+ *    held in memory until the envelope arrives and is decrypted.
+ *  - Provider side: generated when sealing the envelope, public key
+ *    embedded into `providerEphemeralPubkey`, private key used to
+ *    derive the shared secret and then dropped (forward secrecy w.r.t.
+ *    long-term provider keys).
+ *
+ * @returns A new {@link EphemeralKeyPair}.
+ * @throws {DeliveryCryptoError} `crypto_keygen_failed` if the
+ *   underlying library returns key material of unexpected length
+ *   (defensive — should never happen with `@noble/curves` on a
+ *   conformant runtime).
+ *
+ * @example
+ * ```typescript
+ * const kp = generateEphemeralKeyPair();
+ * // kp.publicKeyHex → "0x" + 64-hex-char ephemeral pubkey
+ * // pass kp.publicKey to deriveSharedSecret(myPriv, theirPub) on the peer
+ * ```
+ */
+export declare function generateEphemeralKeyPair(): EphemeralKeyPair;
+/**
+ * Compute the X25519 ECDH shared secret between a local private key
+ * and a peer's public key.
+ *
+ * Per RFC 7748, the shared secret is `X25519(privateKey, peerPubkey)`
+ * — the 32-byte little-endian encoding of the u-coordinate of the
+ * scalar multiplication. Both inputs MUST be exactly 32 bytes;
+ * X25519 itself accepts any 32-byte scalar (the canonical clamping
+ * is applied internally by `@noble/curves`), but malformed lengths
+ * indicate caller bugs.
+ *
+ * ## Low-order point check
+ *
+ * Curve25519 has a small set of "low-order" public keys for which
+ * the ECDH output is the all-zero secret regardless of the local
+ * private key. A peer that supplies a low-order pubkey can therefore
+ * force a known shared secret. We detect this by rejecting all-zero
+ * outputs with `crypto_shared_secret_failed`; the caller MUST treat
+ * this as a peer-protocol violation, not a transient error.
+ *
+ * (See RFC 7748 §6.1, which notes that implementations "MAY" reject
+ * such inputs; for AGIRAILS we MUST.)
+ *
+ * @param privateKey - Local X25519 private scalar, exactly 32 bytes.
+ * @param peerPubkey - Peer's X25519 public key, exactly 32 bytes.
+ * @returns The 32-byte shared secret (NOT the session key — see
+ *   {@link deriveSessionKey} for the HKDF stretch).
+ * @throws {DeliveryCryptoError} `crypto_shared_secret_failed` if
+ *   either input is the wrong length, if `@noble/curves` raises, or
+ *   if the resulting shared secret is all-zero (degenerate peer).
+ *
+ * @example
+ * ```typescript
+ * const shared = deriveSharedSecret(buyerPriv, providerPub);
+ * const key = deriveSessionKey(shared, txId);
+ * // → 32-byte AES-256-GCM key
+ * ```
+ */
+export declare function deriveSharedSecret(privateKey: Uint8Array, peerPubkey: Uint8Array): Uint8Array;
+/**
+ * Stretch an X25519 shared secret into a 32-byte AES-256-GCM session
+ * key via HKDF-SHA256 (RFC 5869).
+ *
+ * The derivation parameters are locked for AIP-16 v1:
+ *  - `ikm`    = `sharedSecret` (32 bytes, output of {@link deriveSharedSecret})
+ *  - `salt`   = `txId` (32 bytes, decoded from the 0x-prefixed hex form)
+ *  - `info`   = `"agirails-delivery-v1"` UTF-8 by default (overridable
+ *               for *testing only* via the optional `info` argument —
+ *               production callers MUST use the default)
+ *  - `digest` = SHA-256
+ *  - `keylen` = 32 bytes
+ *
+ * Salting with the on-chain `txId` binds the session key to a
+ * specific ACTP transaction. Even if two parties exchange the same
+ * ephemeral keypairs across two different transactions (which would
+ * itself be a protocol violation), the resulting session keys would
+ * differ — limiting blast radius.
+ *
+ * ## Implementation choice: node:crypto
+ *
+ * We use Node's built-in `crypto.hkdfSync` rather than `@noble/hashes`
+ * to keep the dependency surface minimal. The behavior is identical:
+ * both implementations follow RFC 5869 step-for-step.
+ *
+ * Note that `hkdfSync` returns an `ArrayBuffer`; we wrap it in a
+ * `Uint8Array` view for ergonomic interop with `@noble/curves` and
+ * the rest of the SDK.
+ *
+ * @param sharedSecret - The 32-byte ECDH output from {@link deriveSharedSecret}.
+ * @param txId - The on-chain transaction id (`bytes32`) as a 0x-prefixed
+ *   lowercase hex string (66 chars total).
+ * @param info - Optional info string override. Defaults to
+ *   {@link DELIVERY_HKDF_INFO_V1}. Production callers MUST omit this
+ *   argument; it exists solely so tests can assert that distinct
+ *   info strings produce distinct keys (negative test).
+ * @returns A 32-byte session key suitable for AES-256-GCM.
+ * @throws {DeliveryCryptoError} `crypto_hkdf_failed` on length mismatch,
+ *   malformed `txId`, or underlying `hkdfSync` failure.
+ *
+ * @example
+ * ```typescript
+ * const key = deriveSessionKey(shared, '0xabc…32bytes…');
+ * // → 32-byte Uint8Array, ready for createCipheriv('aes-256-gcm', key, nonce)
+ * ```
+ */
+export declare function deriveSessionKey(sharedSecret: Uint8Array, txId: `0x${string}`, info?: string): Uint8Array;
+/**
+ * Serialize a 32-byte X25519 public key to its canonical 0x-prefixed
+ * lowercase hex form.
+ *
+ * This is exactly the form embedded into the `bytes32` slots of the
+ * signed EIP-712 payloads (`buyerEphemeralPubkey`,
+ * `providerEphemeralPubkey`). The lowercase normalization ensures
+ * that two SDKs producing the same key produce byte-identical hex
+ * strings; the JSON serialization of the wire envelope then has
+ * exactly one valid encoding, which is required for any downstream
+ * `JSON.stringify` + hash anchoring.
+ *
+ * @param pubkey - X25519 public key, exactly 32 bytes.
+ * @returns The 0x-prefixed lowercase hex form (66 chars).
+ * @throws {DeliveryCryptoError} `crypto_keygen_failed` if `pubkey` is
+ *   not a `Uint8Array` of length 32.
+ *
+ * @example
+ * ```typescript
+ * pubkeyToHex(new Uint8Array(32)); // "0x00...00" (32 zero bytes)
+ * ```
+ */
+export declare function pubkeyToHex(pubkey: Uint8Array): `0x${string}`;
+/**
+ * Deserialize a 0x-prefixed hex string into a 32-byte X25519 public
+ * key.
+ *
+ * Accepts both uppercase and lowercase hex digits in the input (for
+ * resilience with legacy systems and Ethereum's mixed-case checksum
+ * convention — though X25519 keys are NOT checksummed). The output is
+ * always raw bytes; if you need the canonical hex form, call
+ * `pubkeyToHex` on the result, which will be lowercase.
+ *
+ * @param hex - 0x-prefixed hex string, exactly 66 characters (`0x` +
+ *   64 hex chars).
+ * @returns The 32-byte X25519 public key.
+ * @throws {DeliveryCryptoError} `crypto_keygen_failed` if `hex` is
+ *   missing the `0x` prefix, the wrong length, or contains non-hex
+ *   characters.
+ *
+ * @example
+ * ```typescript
+ * const bytes = pubkeyFromHex('0x' + 'ab'.repeat(32));
+ * // → Uint8Array(32) [0xab, 0xab, …]
+ * ```
+ */
+export declare function pubkeyFromHex(hex: string): Uint8Array;
+//# sourceMappingURL=keys.d.ts.map

package/dist/delivery/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/delivery/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAMH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAMjD;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,IAAc,CAAC;AAEpD;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,IAAc,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,IAAc,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,2BAA2B,IAAc,CAAC;AAEvD;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW,IAAc,CAAC;AAEvC;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,wBAAkC,CAAC;AAMrE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,uEAAuE;IACvE,SAAgB,IAAI,EAAE,iBAAiB,CAAC;IACxC,iFAAiF;IACjF,SAAgB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGhD,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CASpC;AAMD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,SAAS,EAAE,UAAU,CAAC;IAEtB;;;;;;;OAOG;IACH,UAAU,EAAE,UAAU,CAAC;IAEvB;;;;;OAKG;IACH,YAAY,EAAE,KAAK,MAAM,EAAE,CAAC;CAC7B;AAwID;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,wBAAwB,IAAI,gBAAgB,CAsC3D;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,UAAU,EACtB,UAAU,EAAE,UAAU,GACrB,UAAU,CA2CZ;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,UAAU,EACxB,IAAI,EAAE,KAAK,MAAM,EAAE,EACnB,IAAI,GAAE,MAA8B,GACnC,UAAU,CAgEZ;AAMD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,KAAK,MAAM,EAAE,CAQ7D;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAKrD"}