@atlasauth/pca-abe 0.1.0 → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Atlas Authorization
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,63 @@
+# @atlasauth/pca-abe
+
+Proof-carrying encryption for Proof-Carrying Authority (PCA). Tool payloads or results are sealed under an access policy over capability attributes (`holder:`, `verb:`, `resource:`, `scope:`), so they decrypt only for an agent whose PCA capability satisfies the policy. The construction is a Boneh-Franklin identity-based KEM on BLS12-381 composed over a monotone AND/OR/threshold tree by Shamir secret sharing, with the payload sealed by AES-256-GCM.
+
+## Install
+
+```sh
+npm i @atlasauth/pca-abe
+```
+
+Depends on `@atlasauth/pca`, `@noble/curves` and `@noble/hashes` (installed transitively).
+
+## Usage
+
+```ts
+import { generateKeyPair, mintGrant, b64u, DEFAULT_RISK_POLICY } from '@atlasauth/pca';
+import {
+  setup, keygenForCapability, encryptToolPayload, decryptWithCapability, Attr,
+} from '@atlasauth/pca-abe';
+
+// A capability bound to an agent, authorising `read` on /tickets/*.
+const principal = generateKeyPair();
+const agentPub = b64u(generateKeyPair().publicKey);
+const { grant } = mintGrant({
+  principalSecret: principal.secretKey,
+  principalPublic: b64u(principal.publicKey),
+  holder: agentPub,
+  goal: 'read tickets',
+  envelope: {
+    predicates: [{ verb: 'read', resource: '/tickets/*' }],
+    caveats: [], agent_binding: {}, risk_policy: DEFAULT_RISK_POLICY,
+  },
+});
+
+// The issuer holds the master key; the encryptor only needs the public half.
+const { mpk, msk } = setup();
+const policy = { allOf: [{ attr: Attr.holder(agentPub) }, { attr: Attr.verb('read') }] };
+const { ciphertext } = encryptToolPayload(mpk, policy, { ticket: 'T-42' });
+
+// The issuer derives a key from the capability and hands it to the agent.
+const key = keygenForCapability(msk, grant);
+decryptWithCapability(key, ciphertext); // { ok: true, payload: { ticket: 'T-42' } }
+```
+
+A key derived from a capability that does not satisfy the policy gets `{ ok: false, reason }`.
+
+## API
+
+- Keys: `setup`, `keygenForAttributes`, `keygenForCapability`.
+- Raw bytes/text: `encryptForPolicy`, `decrypt`, `decryptText`, `parseCiphertext`.
+- Tool payloads: `encryptToolPayload`, `decryptWithCapability`.
+- Policies: `Policy` (`{ attr }`, `{ allOf }`, `{ anyOf }`, `{ threshold, of }`), `normalizePolicy`, `satisfies`, `policyAttributes`.
+- Attributes: `Attr`, `capabilityAttributes`.
+
+## Status
+
+Experimental and unaudited. Confidentiality rests on the Bilinear Diffie-Hellman assumption (random-oracle model); integrity on AES-256-GCM. Policies are monotone (no negation). This binds confidentiality to possession of capability-derived keys, not to a zero-knowledge proof, and collusion resistance holds only within a single issued key: two separately issued keys could pool attributes. Issue one key per capability. The scheme is not post-quantum.
+
+Source and issues: https://github.com/Atlas-Authorization/pca
+
+## License
+
+MIT - see LICENSE

package/package.json

@@ -1,7 +1,26 @@
 {
   "name": "@atlasauth/pca-abe",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Proof-carrying encryption for PCA: attribute/policy-based encryption on BLS12-381 so a tool payload decrypts only for a holder whose capability satisfies the policy — binding confidentiality to proven authority.",
+  "keywords": [
+    "attribute-based encryption",
+    "bls12-381",
+    "policy encryption",
+    "agent authorization",
+    "proof-carrying authority",
+    "pca",
+    "ai agents"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/Atlas-Authorization/pca#readme",
+  "bugs": {
+    "url": "https://github.com/Atlas-Authorization/pca/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Atlas-Authorization/pca.git",
+    "directory": "packages/pca-abe"
+  },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -14,7 +33,7 @@
   "dependencies": {
     "@noble/curves": "^1.6.0",
     "@noble/hashes": "^1.5.0",
-    "@atlasauth/pca": "0.1.0"
+    "@atlasauth/pca": "0.2.0"
   },
   "devDependencies": {
     "typescript": "^5.6.3",
@@ -22,8 +41,12 @@
   },
   "files": [
     "dist",
-    "README.md"
+    "README.md",
+    "LICENSE"
   ],
+  "engines": {
+    "node": ">=20"
+  },
   "publishConfig": {
     "access": "public"
   },