@aikdna/kdna-core 0.37.0 → 0.37.1-rc.browser.1

package/src/public-contract/protected-sections-browser.d.ts

@@ -0,0 +1,11 @@
+import type { CanonicalReadSnapshot } from './types.js';
+import type { BrowserProtectedRequestAdmission, AdmittedBrowserProtectedRequest, BrowserProtectedRequest, BrowserProtectedAuthorityContext, BrowserProtectedReadAuthority, BrowserProtectedAdmissionResult, BrowserProtectedSnapshot, BrowserProtectedSnapshotData, BrowserProtectedOperation } from './protected-browser-contract/types.js';
+export type * from './protected-browser-contract/types.js';
+export declare function admitProtectedPayloadRequestJson(requestJson: string): BrowserProtectedRequestAdmission;
+export declare function inspectProtectedPayloadRequest(request: AdmittedBrowserProtectedRequest): Readonly<BrowserProtectedRequest> | null;
+export declare function createProtectedPayloadReadAuthorityJson(callback: (context: Readonly<BrowserProtectedAuthorityContext>) => boolean | Promise<boolean>, signaturePolicyJson?: string): BrowserProtectedReadAuthority;
+// Consumes one genuine admitProtectedBrowser origin. No new decryption or physical read.
+export declare function admitProtectedSectionBrowser(snapshot: CanonicalReadSnapshot, request: AdmittedBrowserProtectedRequest, authority: BrowserProtectedReadAuthority): Promise<BrowserProtectedAdmissionResult>;
+export declare function inspectProtectedPayloadSnapshot(snapshot: BrowserProtectedSnapshot): Readonly<BrowserProtectedSnapshotData> | null;
+export declare function bindProtectedPayloadRequest(operation: BrowserProtectedOperation, requestJson: string): BrowserProtectedRequestAdmission;
+export declare function disposeProtectedSectionOperation(operation: BrowserProtectedOperation): void;

package/src/public-contract/protected-sections-browser.js

@@ -0,0 +1,22 @@
+'use strict';
+const S = require('./browser-protected/state.js'), R = require('./browser-protected/request.js');
+function bindProtectedPayloadRequest(operation, requestJson) {
+  const record = S.operation(operation);
+  if (!record) return R.failure(null);
+  const admitted = R.admit(requestJson);
+  if (admitted.channel !== 'admitted_request') return admitted;
+  try {
+    const token = S.normalized(S.request(admitted.request), record.view);
+    S.pairRequest(token, operation);
+    return Object.freeze({ channel: 'admitted_request', request: token });
+  } catch { return R.failure(S.inspectRequest(admitted.request)); }
+}
+module.exports = {
+  admitProtectedPayloadRequestJson: R.admit,
+  inspectProtectedPayloadRequest: S.inspectRequest,
+  createProtectedPayloadReadAuthorityJson: S.createAuthority,
+  admitProtectedSectionBrowser: S.admit,
+  inspectProtectedPayloadSnapshot: S.inspectSnapshot,
+  bindProtectedPayloadRequest,
+  disposeProtectedSectionOperation: S.dispose
+};

package/src/public-contract/protected-sections-browser.mjs

@@ -0,0 +1,2 @@
+import api from './protected-sections-browser.js';
+export const { admitProtectedPayloadRequestJson, inspectProtectedPayloadRequest, createProtectedPayloadReadAuthorityJson, admitProtectedSectionBrowser, inspectProtectedPayloadSnapshot, bindProtectedPayloadRequest, disposeProtectedSectionOperation } = api;

package/src/public-contract/protected-source-contract.generated.json

@@ -1,6 +1,6 @@
 {
   "api_typescript": "export type ProtectedSourceContractIdentity = { readonly id: 'kdna.protected-source/1'; readonly version: '1.0.0'; readonly definition_digest: import('./types.js').Digest };\nexport type ProtectedSourceRuntimeDescriptor = { readonly contract: ProtectedSourceContractIdentity; readonly implementation: { readonly package: '@aikdna/kdna-core'; readonly version: string }; readonly profiles: ReadonlyArray<'kdna.envelope.aead/0.1.0' | 'kdna.envelope.external-grant/0.1.0'>; readonly callables: ReadonlyArray<'getProtectedSourceContract' | 'createTrustedProtectedSourceHost' | 'withProtectedSourceNode' | 'commitProtectedSourceTransport' | 'previewProtectedSourceRevision' | 'produceProtectedSourceRevision'>; readonly limits: { readonly container_bytes: 26214400; readonly entries: 128; readonly entry_bytes: 8388608; readonly total_uncompressed_bytes: 12582912; readonly delivered_plaintext_bytes: 8388608; readonly documented_raw_byte_bound: 20971520; readonly timeout_ms_max: 60000 }; readonly proof_limits: ReadonlyArray<string> };\nexport type SourceHostObservationContext = { readonly context_id: string | null; readonly epoch: string | null; readonly asset_digest: string; readonly scope: 'complete_source'; readonly purpose: string; readonly requested_at_ms: number };\nexport type ProtectedSourceMember = { readonly name: string; readonly type: 'file'; readonly mode: number; readonly bytes: Uint8Array };\nexport type ProtectedSourceInventoryEntry = { readonly name: string; readonly type: 'file'; readonly mode: number; readonly size: number; readonly sha256: string };\nexport type ProtectedSourceBundle = { readonly identity: { readonly A: string; readonly C: string; readonly E: string }; readonly manifest: unknown; readonly payload: unknown; readonly original_members: ReadonlyArray<ProtectedSourceMember>; readonly original_inventory: ReadonlyArray<ProtectedSourceInventoryEntry>; readonly plaintext_payload: { readonly entry: 'payload.kdnab'; readonly bytes: Uint8Array; readonly sha256: string }; readonly prior_snapshot: unknown; readonly host_observation: unknown; readonly proof_limits: ReadonlyArray<string> };\nexport type ProtectedSourceRevisionContext = { readonly [brand: symbol]: true };\nexport type ProtectedSourcePreparedDelivery = { readonly [brand: symbol]: true };\nexport type ProtectedSourceHostCallbacks = { readonly observe: (context: SourceHostObservationContext) => SourceHostObservation | Promise<SourceHostObservation>; readonly deliver: (bundle: ProtectedSourceBundle, prepared: ProtectedSourcePreparedDelivery, context: ProtectedSourceRevisionContext) => boolean | Promise<boolean> };\nexport type TrustedProtectedSourceHost = { readonly [brand: symbol]: true };\nexport type ProtectedSourceRevisionOptions = { readonly admission: import('./protection-node.js').ProtectedAdmissionOptions; readonly expected_A: string; readonly timeout_ms: number };\nexport type TrustedProtectedSourceTransport = { readonly observeScope: () => SourceHostObservation | Promise<SourceHostObservation>; readonly commit: (bundle: ProtectedSourceBundle | null) => boolean };\nexport type ProtectedSourceCommitResult = { readonly status: 'source_committed'; readonly disclosure: import('./protection-node.js').ProtectionDisclosure; readonly body: null; readonly body_bytes: 0 } | SourceFailed;\nexport type ProtectedSourcePolicy = ({ readonly kind: 'password'; readonly asset_uid: string; readonly entitlement: { readonly profile: 'password'; readonly offline?: boolean; readonly revocable?: boolean }; readonly slots: ReadonlyArray<{ readonly slot: string; readonly kdf_profile: 'scrypt-sha256' | 'argon2id' }> } | { readonly kind: 'external-grant'; readonly asset_uid: string; readonly entitlement: { readonly profile: 'account' | 'org'; readonly offline?: boolean; readonly revocable?: boolean }; readonly key_ref: string; readonly issuer_key_id: string }) & { readonly checksums: boolean; readonly signature: 'none' | 'ed25519' };\nexport type ProtectedSourceEdits = { readonly manifest?: unknown; readonly payload?: unknown };\nexport type ProtectedSourceProviderRequest = { readonly source_A: string; readonly edits_digest: string; readonly policy_digest: string; readonly kind: 'password' | 'external-grant'; readonly signature: 'none' | 'ed25519' };\nexport type ProtectedSourceOutputSecrets = { readonly passwords?: ReadonlyArray<{ readonly slot: string; readonly password: Uint8Array }>; readonly signingSeed?: Uint8Array; readonly issuerRootKey?: Uint8Array };\nexport type SourceRevisionEvidence = { readonly contract: ProtectedSourceContractIdentity; readonly implementation: { readonly package: '@aikdna/kdna-core'; readonly version: string }; readonly source_A: string; readonly output: { readonly A: string; readonly C: string; readonly E: string }; readonly profile: { readonly id: string; readonly version: string }; readonly entry: 'payload.kdnab'; readonly member_actions: { readonly [name: string]: 'added' | 'replaced' | 'removed' }; readonly integrity: unknown; readonly payload_source: 'explicit_edit' | 'original_decrypted_cbor'; readonly proof: 'producer_observation_not_consumer_admission'; readonly output_delivery: 'not_published' | 'trusted_host'; readonly output_A: string | null };\nexport type ProtectedSourceRevisionResult = { readonly status: 'revision_produced'; readonly bytes: Uint8Array; readonly evidence: SourceRevisionEvidence; readonly body_bytes: number } | { readonly status: 'revision_rejected'; readonly diagnostic: SourceDiagnostic; readonly body: null; readonly body_bytes: 0 };\nexport declare function getProtectedSourceContract(): ProtectedSourceRuntimeDescriptor;\nexport declare function createTrustedProtectedSourceHost(callbacks: ProtectedSourceHostCallbacks): TrustedProtectedSourceHost;\nexport declare function withProtectedSourceNode(input: string | Uint8Array, options: ProtectedSourceRevisionOptions, protectionProvider: import('./protection-node.js').TrustedProtectionProvider, sourceHost: TrustedProtectedSourceHost): Promise<ProtectedSourceObservation>;\nexport declare function commitProtectedSourceTransport(prepared: ProtectedSourcePreparedDelivery, transport: TrustedProtectedSourceTransport): Promise<ProtectedSourceCommitResult>;\nexport declare function previewProtectedSourceRevision(context: ProtectedSourceRevisionContext, edits: ProtectedSourceEdits, policy: ProtectedSourcePolicy): Promise<ProtectedSourceRevisionPreviewResult>;\nexport declare function produceProtectedSourceRevision(context: ProtectedSourceRevisionContext, edits: ProtectedSourceEdits, policy: ProtectedSourcePolicy, outputSecretProvider: (request: ProtectedSourceProviderRequest) => ProtectedSourceOutputSecrets | Promise<ProtectedSourceOutputSecrets>): Promise<ProtectedSourceRevisionResult>;\n",
-  "definition_digest": "sha256:612b285c79566eb308ff613fbc4fd1599ee35076efaf5c1214c271ebfa3334ab",
+  "definition_digest": "sha256:6a0c62e9908100fcd03b9f9b735bb0d928fa340fbe57fb894f501968aac188a8",
   "id": "kdna.protected-source/1",
   "limits": {
     "container_bytes": 26214400,
@@ -29,8 +29,8 @@
   ],
   "schema_binding": {
     "package_versions": {
-      "@aikdna/kdna-core": "0.37.0",
-      "@aikdna/kdna-read": "0.11.1"
+      "@aikdna/kdna-core": "0.37.1-rc.browser.1",
+      "@aikdna/kdna-read": "0.11.2-rc.browser.1"
     },
     "version_tuple": {
       "container": "0.5.0",
@@ -45,8 +45,8 @@
       "trace": "kdna.judgment-trace/0.3.1"
     }
   },
-  "schema_id": "urn:kdna:schema:protected-source:1.0.0:binding:r2:7",
-  "schema_path": "specs/protected-source-r2-binding-7.schema.json",
+  "schema_id": "urn:kdna:schema:protected-source:1.0.0:binding:r2:8",
+  "schema_path": "specs/protected-source-r2-binding-8.schema.json",
   "types": {
     "AccessMode": {
       "enum": [
@@ -9260,7 +9260,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.0",
+              "const": "0.37.1-rc.browser.1",
               "type": "string"
             }
           },
@@ -10632,7 +10632,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.0",
+              "const": "0.37.1-rc.browser.1",
               "type": "string"
             }
           },
@@ -13783,7 +13783,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.0",
+              "const": "0.37.1-rc.browser.1",
               "type": "string"
             }
           },

package/src/public-contract/protected-source-node.d.ts

@@ -10,7 +10,7 @@ export type ProtectedSourceCatalog = { readonly "status": "catalog_only"; readon
 export type SourceCoreRejected = { readonly "status": "core_rejected"; readonly "stage": "admission"; readonly "core": CoreAdmissionRejected; readonly "disclosure": ProtectionDisclosure; readonly "body": null; readonly "body_bytes": 0; };
 export type ProtectedSourceObservation = (ProtectedSourceDelivered | ProtectedSourceCatalog | SourceCoreRejected | SourceFailed);
 export type SourceHostObservation = { readonly "context_id": Identifier; readonly "epoch": Identifier; readonly "asset_digest": Digest; readonly "permission": "allowed" | "denied"; readonly "scope": "complete_source"; readonly "current_ms": UInt; readonly "expires_at_ms": UInt; readonly "revoked": boolean; };
-export type SourcePreviewValidation = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "name": "@aikdna/kdna-core"; readonly "version": "0.37.0"; }; readonly "source_A": Digest; readonly "original_payload_digest": Digest; readonly "edits_digest": Digest; readonly "policy_digest": Digest; readonly "semantic_status": "valid"; readonly "proof": "semantic_validation_not_ciphertext_admission"; };
+export type SourcePreviewValidation = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "name": "@aikdna/kdna-core"; readonly "version": "0.37.1-rc.browser.1"; }; readonly "source_A": Digest; readonly "original_payload_digest": Digest; readonly "edits_digest": Digest; readonly "policy_digest": Digest; readonly "semantic_status": "valid"; readonly "proof": "semantic_validation_not_ciphertext_admission"; };
 export type SourcePreviewValid = { readonly "status": "preview_valid"; readonly "validation": SourcePreviewValidation; readonly "body": null; readonly "body_bytes": 0; };
 export type SourcePreviewRejected = { readonly "status": "preview_rejected"; readonly "diagnostic": SourceDiagnostic; readonly "body": null; readonly "body_bytes": 0; };
 export type ProtectedSourceRevisionPreviewResult = (SourcePreviewValid | SourcePreviewRejected);

package/src/public-contract/protection-admission-browser.js

@@ -30,14 +30,22 @@ function checkDeclaration(manifest) {
 }
 function inputs(value, inputProvider) {
   closed(value, ['bytes', 'plaintextPayload', 'observation'], ['signaturePolicy']);
-  if (!(value.bytes instanceof Uint8Array) || !(value.plaintextPayload instanceof Uint8Array)) fail('INPUT_INVALID', 'input');
+  const containerBytes = value.bytes, suppliedPlaintext = value.plaintextPayload;
+  if (!(containerBytes instanceof Uint8Array) || !(suppliedPlaintext instanceof Uint8Array)) fail('INPUT_INVALID', 'input');
   const policy = value.signaturePolicy === undefined ? { requireSignature: false, expectedPublicKeyHex: null } : closed(value.signaturePolicy, ['requireSignature', 'expectedPublicKeyHex']);
   if (typeof policy.requireSignature !== 'boolean' || (policy.expectedPublicKeyHex !== null && (typeof policy.expectedPublicKeyHex !== 'string' || !/^[0-9a-f]{64}$/.test(policy.expectedPublicKeyHex)))) fail('INPUT_INVALID', 'input');
   const o = closed(value.observation, ['kind', 'proof', 'checked_at_ms', 'selection']);
   if (o.kind !== 'consumer_unlock_observation' || o.proof !== 'observation_not_authority' || !uint(o.checked_at_ms)) fail('OBSERVATION_INVALID', 'observation');
   const s = closed(o.selection, ['slotIndex', 'slot', 'kdf_profile']);
   if (!uint(s.slotIndex) || !identifier(s.slot) || !['scrypt-sha256', 'argon2id'].includes(s.kdf_profile)) fail('OBSERVATION_INVALID', 'observation');
-  return { bytes: new Uint8Array(value.bytes), plaintext: new Uint8Array(value.plaintextPayload), observation: { kind: o.kind, proof: o.proof, checked_at_ms: o.checked_at_ms, selection: { slotIndex: s.slotIndex, slot: s.slot, kdf_profile: s.kdf_profile } }, signaturePolicy: { ...policy }, trustedProvider: provider(inputProvider, 'password') };
+  const trustedProvider = provider(inputProvider, 'password');
+  // Finish every caller-owned metadata access before allocating the plaintext
+  // copy. The caller may still throw while a Proxy supplies a data property.
+  const copied = { observation: { kind: o.kind, proof: o.proof, checked_at_ms: o.checked_at_ms, selection: { slotIndex: s.slotIndex, slot: s.slot, kdf_profile: s.kdf_profile } }, signaturePolicy: { ...policy }, trustedProvider };
+  const observed = copied.observation, selected = observed.selection, signaturePolicy = copied.signaturePolicy;
+  if (observed.kind !== 'consumer_unlock_observation' || observed.proof !== 'observation_not_authority' || !uint(observed.checked_at_ms) || !uint(selected.slotIndex) || !identifier(selected.slot) || !['scrypt-sha256', 'argon2id'].includes(selected.kdf_profile)) fail('OBSERVATION_INVALID', 'observation');
+  if (typeof signaturePolicy.requireSignature !== 'boolean' || (signaturePolicy.expectedPublicKeyHex !== null && (typeof signaturePolicy.expectedPublicKeyHex !== 'string' || !/^[0-9a-f]{64}$/.test(signaturePolicy.expectedPublicKeyHex)))) fail('INPUT_INVALID', 'input');
+  return { ...copied, bytes: new Uint8Array(containerBytes), plaintext: new Uint8Array(suppliedPlaintext) };
 }
 function assertObservationBinding(observation, envelope) {
   const slots = envelope.key_slots;
@@ -63,7 +71,7 @@ function parseKdsigBundle(raw) {
   return value;
 }
 async function verifyIntegrityBrowser(entries, manifest, E, policy) {
-  const integrity = { checksums: 'absent', signature: 'absent', signature_content_digest: null };
+  const integrity = { checksums: 'absent', signature: 'absent', signature_content_digest: null, public_key: null };
   if (Object.hasOwn(entries, 'checksums.json')) {
     const raw = entries['checksums.json']; let value;
     try { if (raw.length > 1048576) throw Error(); value = parseJson(raw); } catch { fail('CHECKSUMS_INVALID', 'integrity'); }
@@ -85,6 +93,7 @@ async function verifyIntegrityBrowser(entries, manifest, E, policy) {
     } catch (error) { if (isFailure(error)) throw error; throw Object.assign(new Error('WebCrypto Ed25519 failed'), { reason: 'READ_CORE_CAPABILITY_UNAVAILABLE' }); }
     integrity.signature = policy.expectedPublicKeyHex === null ? 'verified_self_key' : 'verified_pinned_key';
     integrity.signature_content_digest = signatureDigest;
+    integrity.public_key = bundle.public_key;
   } else if (policy.requireSignature || policy.expectedPublicKeyHex !== null) fail('SIGNATURE_INVALID', 'integrity');
   return integrity;
 }
@@ -103,6 +112,15 @@ async function admitProtectedBrowser(input, inputProvider) {
     stage = 'payload'; const payload = decodeValidatedPayload(manifest, plaintext);
     stage = 'interpretation'; const result = finishAdmission(manifest, payload, entries, digests, integrity.checksums === 'verified_document_1' ? digests.E : null);
     const disclosure = freeze({ slot_selection: { ...copied.observation.selection }, observation_not_authority: true, provenance: 'host_supplied_triple' });
+    if (result.status === 'accepted') {
+      const view = require('./brand.js').inspectSnapshot(result.snapshot);
+      require('./browser-protected/state.js').register(result.snapshot, {
+        provider: copied.trustedProvider, integrity, disclosure,
+        observation: { snapshot_id: view.snapshot_id, tuple: view.tuple, asset: view.asset,
+          ...digests, ir_digest: view.ir_digest, integrity, unlock_observation: copied.observation,
+          disclosure, physical_reads: 'none', new_decryption: false }
+      });
+    }
     return freeze(result.status === 'accepted' ? { status: 'accepted', snapshot: result.snapshot, disclosure } : { status: 'catalog_only', catalog: result, disclosure });
   } catch (error) {
     if (isFailure(error) || stage === 'input') return failure(error);

package/src/public-contract/protection-contract.generated.json

@@ -14,7 +14,7 @@
     "schema_path": "specs/checksums-document-1.schema.json",
     "version": "1.0.0"
   },
-  "definition_digest": "sha256:c88dfae7dc756d00fad579b02c7ea0f14b21f3d1ca3edecbf2fad8f4c5fd9e4a",
+  "definition_digest": "sha256:7257adf964aadbce546b1403a059852b72f5df269503d6b58445d1f549e2252d",
   "delivery_history": {
     "acknowledgement": "Only literal synchronous true confirms the configured trusted transport handoff. False/throw/thenable/invalid return leaves outcome_unknown. Never await or execute an untrusted then method to improve the result. Callback itself may already have sent data.",
     "disposal": "Disposal closes authority and clears secrets best effort but retains the redacted per-token delivery history while its token/owning Read remains reachable, so a later failure cannot erase past attempts.",
@@ -802,8 +802,8 @@
   "runtime_not_implemented": [],
   "schema_binding": {
     "package_versions": {
-      "@aikdna/kdna-core": "0.37.0",
-      "@aikdna/kdna-read": "0.11.1"
+      "@aikdna/kdna-core": "0.37.1-rc.browser.1",
+      "@aikdna/kdna-read": "0.11.2-rc.browser.1"
     },
     "version_tuple": {
       "container": "0.5.0",
@@ -818,12 +818,12 @@
       "trace": "kdna.judgment-trace/0.3.1"
     }
   },
-  "schema_id": "urn:kdna:schema:protection-admission:1.0.0:binding:r2:7",
-  "schema_path": "specs/protection-admission-r2-binding-7.schema.json",
+  "schema_id": "urn:kdna:schema:protection-admission:1.0.0:binding:r2:8",
+  "schema_path": "specs/protection-admission-r2-binding-8.schema.json",
   "specification": {
-    "bytes": 37902,
+    "bytes": 38180,
     "path": "specs/protection-admission.md",
-    "sha256": "7dbc85924d7c0a1d0d4556aeac92de8ac91d331185b4a65d066c0d165c3fadcc"
+    "sha256": "35180f6583ac97302096a8e2ff786f1c7a9a0c10caabc3a4fa627affd1640bef"
   },
   "types": {
     "ChecksumsDocument1": {
@@ -1060,7 +1060,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.0",
+              "const": "0.37.1-rc.browser.1",
               "type": "string"
             }
           },
@@ -2295,7 +2295,7 @@
               "type": "string"
             },
             "version": {
-              "const": "0.37.0",
+              "const": "0.37.1-rc.browser.1",
               "type": "string"
             }
           },

package/src/public-contract/protection-envelope-codec.js

@@ -1,30 +1,34 @@
 'use strict';
 const fail = (code, stage) => require('./protection-declaration.js').fail(code, stage);
+const { utf8, equal, concat } = require('./browser-native/bytes.js');
 const LIMIT = 8 * 1024 * 1024;
 function invalid() { fail('ENVELOPE_INVALID','envelope'); }
 function head(major, n) {
   if (!Number.isSafeInteger(n) || n < 0) invalid();
-  if (n < 24) return Buffer.from([(major << 5) | n]);
+  if (n < 24) return Uint8Array.of((major << 5) | n);
   const width = n <= 255 ? 1 : n <= 65535 ? 2 : n <= 4294967295 ? 4 : 8;
-  const out = Buffer.alloc(width + 1); out[0] = (major << 5) | ({1:24,2:25,4:26,8:27})[width];
-  if (width === 8) out.writeBigUInt64BE(BigInt(n),1); else out.writeUIntBE(n,1,width);
+  const out = new Uint8Array(width + 1), view = new DataView(out.buffer); out[0] = (major << 5) | ({1:24,2:25,4:26,8:27})[width];
+  if (width === 8) view.setBigUint64(1,BigInt(n),false);
+  else if (width === 4) view.setUint32(1,n,false);
+  else if (width === 2) view.setUint16(1,n,false);
+  else out[1]=n;
   return out;
 }
-function compare(a,b) { return a.length - b.length || Buffer.compare(a,b); }
+function compare(a,b) { if(a.length!==b.length)return a.length-b.length;for(let i=0;i<a.length;i++)if(a[i]!==b[i])return a[i]-b[i];return 0; }
 function encodeEnvelope(value) {
   let count = 0;
   function encode(v, depth) {
     if (++count > 100000 || depth > 16) invalid();
     if (typeof v === 'string') {
       if (!v.isWellFormed()) invalid();
-      const bytes = Buffer.from(v); if (bytes.length > LIMIT) invalid();
-      return Buffer.concat([head(3,bytes.length),bytes]);
+      const bytes = utf8(v); if (bytes.length > LIMIT) invalid();
+      return concat([head(3,bytes.length),bytes]);
     }
     if (Number.isSafeInteger(v) && v >= 0) return head(0,v);
-    if (Array.isArray(v)) return Buffer.concat([head(4,v.length), ...v.map(x=>encode(x,depth+1))]);
+    if (Array.isArray(v)) return concat([head(4,v.length), ...v.map(x=>encode(x,depth+1))]);
     if (v && typeof v === 'object' && [Object.prototype,null].includes(Object.getPrototypeOf(v))) {
       const members = Object.keys(v).map(k => [encode(k,depth+1), encode(v[k],depth+1)]).sort((a,b)=>compare(a[0],b[0]));
-      return Buffer.concat([head(5,members.length), ...members.flat()]);
+      return concat([head(5,members.length), ...members.flat()]);
     }
     invalid();
   }
@@ -34,7 +38,7 @@ function encodeEnvelope(value) {
 // It never decodes Payload: authenticated plaintext goes to the sole Payload codec.
 function decodeEnvelope(input) {
   if (!(input instanceof Uint8Array) || !input.length || input.length > LIMIT) invalid();
-  const bytes = Buffer.from(input); let offset = 0, count = 0;
+  const bytes = new Uint8Array(input), view = new DataView(bytes.buffer); let offset = 0, count = 0;
   const decoder = new TextDecoder('utf-8',{fatal:true});
   function read(depth) {
     if (++count > 100000 || depth > 16 || offset >= bytes.length) invalid();
@@ -43,7 +47,7 @@ function decodeEnvelope(input) {
     let n = add;
     if (add >= 24) {
       const width = 2 ** (add - 24); if (offset + width > bytes.length) invalid();
-      n = width === 8 ? Number(bytes.readBigUInt64BE(offset)) : bytes.readUIntBE(offset,width); offset += width;
+      n = width === 8 ? Number(view.getBigUint64(offset,false)) : width === 4 ? view.getUint32(offset,false) : width === 2 ? view.getUint16(offset,false) : bytes[offset]; offset += width;
       if (!Number.isSafeInteger(n) || n < (width === 1 ? 24 : 2 ** (8 * width / 2))) invalid();
     }
     if (major === 0) return n;
@@ -63,7 +67,7 @@ function decodeEnvelope(input) {
     }
     return value;
   }
-  const value = read(0); if (offset !== bytes.length || !encodeEnvelope(value).equals(bytes)) invalid(); return value;
+  const value = read(0); if (offset !== bytes.length || !equal(encodeEnvelope(value),bytes)) invalid(); return value;
 }
 // The frozen RFC18 ciphertext pattern is strict canonical padded base64. Native
 // RegExp's repeated four-character group can exhaust the VM stack on an otherwise
@@ -71,7 +75,7 @@ function decodeEnvelope(input) {
 // (including padding bits) in bounded linear memory; all other patterns stay native.
 const CIPHERTEXT_PATTERN = '^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/][AQgw]==|[A-Za-z0-9+/]{2}[AEIMQUYcgkosw048]=)?$';
 function envelopeRegExp(pattern, flags) {
-  if(pattern===CIPHERTEXT_PATTERN)return {test:value=>typeof value==='string'&&Buffer.from(value,'base64').toString('base64')===value};
+  if(pattern===CIPHERTEXT_PATTERN)return {test:value=>{try {decode64Bytes(value);return true;}catch{return false;}}};
   return new RegExp(pattern,flags);
 }
 envelopeRegExp.code = "require('./protection-envelope-codec.js').envelopeRegExp";

package/src/public-contract/protection-node.d.ts

@@ -39,8 +39,8 @@ declare const ProtectionCheckpointBrand: unique symbol;
 export type ProtectionCheckpoint = { readonly [ProtectionCheckpointBrand]: true };
 declare const ProtectedHostReadProviderBrand: unique symbol;
 export type ProtectedHostReadProvider = { readonly [ProtectedHostReadProviderBrand]: true };
-export type ProtectionRuntimeDescriptor = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.0"; }; readonly "profiles": ReadonlyArray<"kdna.envelope.aead/0.1.0" | "kdna.envelope.external-grant/0.1.0" | "kdna.checksums.document/1@1.0.0" | "kdsig.ed25519/0.1.0">; readonly "kdfs": ReadonlyArray<"scrypt-sha256" | "argon2id">; readonly "capabilities": ReadonlyArray<"protected_admission" | "protected_operation" | "protected_production">; };
-export type ProtectedExportEvidence = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.0"; }; readonly "source_A": Digest; readonly "output": { readonly "A": Digest; readonly "C": Digest; readonly "E": Digest; }; readonly "profile": (ProtectionProfile | null); readonly "entry": "payload.kdnab"; readonly "integrity": ProtectionIntegrity; readonly "proof": "producer_observation_not_consumer_admission"; };
+export type ProtectionRuntimeDescriptor = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.1-rc.browser.1"; }; readonly "profiles": ReadonlyArray<"kdna.envelope.aead/0.1.0" | "kdna.envelope.external-grant/0.1.0" | "kdna.checksums.document/1@1.0.0" | "kdsig.ed25519/0.1.0">; readonly "kdfs": ReadonlyArray<"scrypt-sha256" | "argon2id">; readonly "capabilities": ReadonlyArray<"protected_admission" | "protected_operation" | "protected_production">; };
+export type ProtectedExportEvidence = { readonly "contract": ProtectionContractIdentity; readonly "implementation": { readonly "package": "@aikdna/kdna-core"; readonly "version": "0.37.1-rc.browser.1"; }; readonly "source_A": Digest; readonly "output": { readonly "A": Digest; readonly "C": Digest; readonly "E": Digest; }; readonly "profile": (ProtectionProfile | null); readonly "entry": "payload.kdnab"; readonly "integrity": ProtectionIntegrity; readonly "proof": "producer_observation_not_consumer_admission"; };
 export type ProtectedRequestVersionRejected = { readonly "channel": "read_envelope"; readonly "envelope": ReadEnvelopeRejected; readonly "admission_rejection": null; readonly "control": null; readonly "transport_failure": null; };
 export type ProtectionCurrentFailure = { readonly "status": "protection_failed"; readonly "diagnostic": ProtectionDiagnostic; readonly "checked_at_ms": (UInt | null); };
 export type ProtectedSignaturePolicy = { readonly requireSignature: boolean; readonly expectedPublicKeyHex: string | null };