@atlasauth/pca-abe 0.0.0-stage → 0.2.0

package/dist/sss.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.splitSecret = splitSecret;
+exports.recoverSecret = recoverSecret;
+exports.randomSecret = randomSecret;
+const bls_1 = require("./bls");
+/**
+ * Split `secret` into `n` shares with reconstruction threshold `t` (1 <= t <= n). Share `i` (1-based)
+ * is `f(i)` for a random degree `t-1` polynomial with `f(0) = secret`.
+ */
+function splitSecret(secret, t, n) {
+    if (!Number.isInteger(t) || !Number.isInteger(n) || t < 1 || n < 1 || t > n) {
+        throw new RangeError(`splitSecret: need 1 <= t(${t}) <= n(${n})`);
+    }
+    // Coefficients a_0 = secret, a_1..a_{t-1} random.
+    const coeffs = [secret];
+    for (let i = 1; i < t; i++)
+        coeffs.push((0, bls_1.randomScalar)());
+    const shares = [];
+    for (let i = 1; i <= n; i++) {
+        const x = BigInt(i);
+        // Horner evaluation of f(x) in Z_r.
+        let acc = 0n;
+        for (let d = coeffs.length - 1; d >= 0; d--)
+            acc = (0, bls_1.frAdd)((0, bls_1.frMul)(acc, x), coeffs[d] ?? 0n);
+        shares.push({ x, y: acc });
+    }
+    return shares;
+}
+/**
+ * Reconstruct `f(0)` by Lagrange interpolation at 0 over Z_r. Requires at least one share and distinct,
+ * non-zero `x` coordinates. Given `>= t` consistent shares of a degree `t-1` sharing, this returns the
+ * original secret; with duplicate x's it returns null (fail-closed).
+ */
+function recoverSecret(shares) {
+    if (shares.length === 0)
+        return null;
+    const seen = new Set();
+    for (const s of shares) {
+        if (s.x === 0n)
+            return null;
+        const k = s.x.toString();
+        if (seen.has(k))
+            return null;
+        seen.add(k);
+    }
+    let secret = 0n;
+    for (let i = 0; i < shares.length; i++) {
+        const si = shares[i];
+        if (si === undefined)
+            return null;
+        // Lagrange basis L_i(0) = prod_{j != i} x_j / (x_j - x_i).
+        let num = 1n;
+        let den = 1n;
+        for (let j = 0; j < shares.length; j++) {
+            if (j === i)
+                continue;
+            const sj = shares[j];
+            if (sj === undefined)
+                return null;
+            num = (0, bls_1.frMul)(num, sj.x);
+            den = (0, bls_1.frMul)(den, (0, bls_1.frSub)(sj.x, si.x));
+        }
+        const coeff = (0, bls_1.frMul)(num, (0, bls_1.frInv)(den));
+        secret = (0, bls_1.frAdd)(secret, (0, bls_1.frMul)(si.y, coeff));
+    }
+    return secret;
+}
+/** Convenience: a fresh random secret scalar together with its 32-byte big-endian encoding. */
+function randomSecret() {
+    const scalar = (0, bls_1.randomScalar)();
+    return { scalar, bytes: (0, bls_1.scalarToBytes)(scalar) };
+}
+//# sourceMappingURL=sss.js.map

package/dist/sss.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sss.js","sourceRoot":"","sources":["../src/sss.ts"],"names":[],"mappings":";;AAqBA,kCAgBC;AAOD,sCA2BC;AAGD,oCAGC;AA7ED,+BAAgF;AAiBhF;;;GAGG;AACH,SAAgB,WAAW,CAAC,MAAc,EAAE,CAAS,EAAE,CAAS;IAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,kDAAkD;IAClD,MAAM,MAAM,GAAa,CAAC,MAAM,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,IAAA,kBAAY,GAAE,CAAC,CAAC;IACxD,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,oCAAoC;QACpC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,GAAG,GAAG,IAAA,WAAK,EAAC,IAAA,WAAK,EAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,MAAe;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAClC,2DAA2D;QAC3D,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YACtB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAClC,GAAG,GAAG,IAAA,WAAK,EAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YACvB,GAAG,GAAG,IAAA,WAAK,EAAC,GAAG,EAAE,IAAA,WAAK,EAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,WAAK,EAAC,GAAG,EAAE,IAAA,WAAK,EAAC,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,IAAA,WAAK,EAAC,MAAM,EAAE,IAAA,WAAK,EAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+FAA+F;AAC/F,SAAgB,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAA,kBAAY,GAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAA,mBAAa,EAAC,MAAM,CAAC,EAAE,CAAC;AAClD,CAAC"}

package/dist/wire.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Wire helpers: base64url codec (no padding) and fail-closed structural type guards for parsing
+ * UNTRUSTED ciphertext/key material. Nothing here throws on bad input — every parser returns a typed
+ * value or `null`, so a malformed ciphertext is rejected cleanly rather than crashing the decryptor.
+ */
+/** Encode bytes as unpadded base64url. */
+export declare function b64u(bytes: Uint8Array): string;
+/** Decode unpadded base64url; null on any non-string / malformed input (round-trip checked, never throws). */
+export declare function unb64u(s: unknown): Uint8Array | null;
+export declare function isObject(x: unknown): x is Record<string, unknown>;
+export declare function isString(x: unknown): x is string;
+export declare function isPosInt(x: unknown): x is number;
+/** XOR two equal-length byte arrays; null if lengths differ. */
+export declare function xorBytes(a: Uint8Array, b: Uint8Array): Uint8Array | null;

package/dist/wire.js

@@ -0,0 +1,53 @@
+"use strict";
+/**
+ * Wire helpers: base64url codec (no padding) and fail-closed structural type guards for parsing
+ * UNTRUSTED ciphertext/key material. Nothing here throws on bad input — every parser returns a typed
+ * value or `null`, so a malformed ciphertext is rejected cleanly rather than crashing the decryptor.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.b64u = b64u;
+exports.unb64u = unb64u;
+exports.isObject = isObject;
+exports.isString = isString;
+exports.isPosInt = isPosInt;
+exports.xorBytes = xorBytes;
+/** Encode bytes as unpadded base64url. */
+function b64u(bytes) {
+    return Buffer.from(bytes).toString('base64url');
+}
+/** Decode unpadded base64url; null on any non-string / malformed input (round-trip checked, never throws). */
+function unb64u(s) {
+    if (typeof s !== 'string')
+        return null;
+    if (!/^[A-Za-z0-9_-]*$/.test(s))
+        return null;
+    try {
+        const bytes = new Uint8Array(Buffer.from(s, 'base64url'));
+        // Reject non-canonical encodings (trailing bits / padding variance): require exact round-trip.
+        if (Buffer.from(bytes).toString('base64url') !== s)
+            return null;
+        return bytes;
+    }
+    catch {
+        return null;
+    }
+}
+function isObject(x) {
+    return x !== null && typeof x === 'object' && !Array.isArray(x);
+}
+function isString(x) {
+    return typeof x === 'string';
+}
+function isPosInt(x) {
+    return typeof x === 'number' && Number.isInteger(x) && x > 0;
+}
+/** XOR two equal-length byte arrays; null if lengths differ. */
+function xorBytes(a, b) {
+    if (a.length !== b.length)
+        return null;
+    const out = new Uint8Array(a.length);
+    for (let i = 0; i < a.length; i++)
+        out[i] = (a[i] ?? 0) ^ (b[i] ?? 0);
+    return out;
+}
+//# sourceMappingURL=wire.js.map

package/dist/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../src/wire.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAGH,oBAEC;AAGD,wBAWC;AAED,4BAEC;AAED,4BAEC;AAED,4BAEC;AAGD,4BAKC;AArCD,0CAA0C;AAC1C,SAAgB,IAAI,CAAC,KAAiB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,8GAA8G;AAC9G,SAAgB,MAAM,CAAC,CAAU;IAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAC1D,+FAA+F;QAC/F,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,QAAQ,CAAC,CAAU;IACjC,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAgB,QAAQ,CAAC,CAAU;IACjC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC/B,CAAC;AAED,SAAgB,QAAQ,CAAC,CAAU;IACjC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,gEAAgE;AAChE,SAAgB,QAAQ,CAAC,CAAa,EAAE,CAAa;IACnD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,58 @@
 {
   "name": "@atlasauth/pca-abe",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.2.0",
+  "description": "Proof-carrying encryption for PCA: attribute/policy-based encryption on BLS12-381 so a tool payload decrypts only for a holder whose capability satisfies the policy — binding confidentiality to proven authority.",
+  "keywords": [
+    "attribute-based encryption",
+    "bls12-381",
+    "policy encryption",
+    "agent authorization",
+    "proof-carrying authority",
+    "pca",
+    "ai agents"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/Atlas-Authorization/pca#readme",
+  "bugs": {
+    "url": "https://github.com/Atlas-Authorization/pca/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Atlas-Authorization/pca.git",
+    "directory": "packages/pca-abe"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@noble/curves": "^1.6.0",
+    "@noble/hashes": "^1.5.0",
+    "@atlasauth/pca": "0.2.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.4"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
 }