@brightchain/brightchain-lib 0.12.0 → 0.14.0

package/src/lib/services/messaging/deliveryTimeoutService.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DeliveryTimeoutService = void 0;
 const enumerations_1 = require("../../enumerations");
-const messageDeliveryStatus_1 = require("../../enumerations/messaging/messageDeliveryStatus");
+const deliveryStatus_1 = require("../../enumerations/messaging/deliveryStatus");
 const i18n_1 = require("../../i18n");
 /**
  * Service for handling message delivery timeouts
@@ -93,7 +93,7 @@ class DeliveryTimeoutService {
      */
     async handleTimeout(messageId, recipientId) {
         try {
-            await this.metadataStore.updateDeliveryStatus(messageId, recipientId, messageDeliveryStatus_1.MessageDeliveryStatus.FAILED);
+            await this.metadataStore.updateDeliveryStatus(messageId, recipientId, deliveryStatus_1.DeliveryStatus.Failed);
             this.clearDeliveryAttempt(messageId, recipientId);
             if (this.failureCallback) {
                 this.failureCallback(messageId, recipientId);

package/src/lib/services/messaging/deliveryTimeoutService.js.map

@@ -1 +1 @@
-{"version":3,"file":"deliveryTimeoutService.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/deliveryTimeoutService.ts"],"names":[],"mappings":";;;AAAA,qDAAwD;AACxD,8FAA2F;AAC3F,qCAAuC;AAuBvC;;;GAGG;AACH,MAAa,sBAAsB;IAMjC,YACmB,aAAoC,EACrD,MAAuC;QADtB,kBAAa,GAAb,aAAa,CAAuB;QAN/C,qBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;QAS5D,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK;YACrC,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,IAAI;SACjD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,WAAmB;QACzD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;gBAC7B,SAAS;gBACT,WAAW;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,WAAmB;QACzD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,QAA0D;QAE1D,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAsD,EAAE,CAAC;QAEvE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAE5D,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAC3C,SAAS,EACT,WAAW,EACX,6CAAqB,CAAC,MAAM,CAC7B,CAAC;YAEF,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAElD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,OAAO,CAAC,KAAK,CACX,IAAA,gBAAS,EACP,iCAAkB,CAAC,6CAA6C,EAChE;gBACE,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,WAAW;aAC1B,CACF,EACD,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB,EAAE,WAAmB;QACpD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,kBAAkB;QAMhB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AA7JD,wDA6JC"}
+{"version":3,"file":"deliveryTimeoutService.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/deliveryTimeoutService.ts"],"names":[],"mappings":";;;AAAA,qDAAwD;AACxD,gFAA6E;AAC7E,qCAAuC;AAuBvC;;;GAGG;AACH,MAAa,sBAAsB;IAMjC,YACmB,aAAoC,EACrD,MAAuC;QADtB,kBAAa,GAAb,aAAa,CAAuB;QAN/C,qBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;QAS5D,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK;YACrC,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,IAAI;SACjD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,WAAmB;QACzD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;gBAC7B,SAAS;gBACT,WAAW;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,WAAmB;QACzD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,QAA0D;QAE1D,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAsD,EAAE,CAAC;QAEvE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAE5D,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAC3C,SAAS,EACT,WAAW,EACX,+BAAc,CAAC,MAAM,CACtB,CAAC;YAEF,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAElD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,OAAO,CAAC,KAAK,CACX,IAAA,gBAAS,EACP,iCAAkB,CAAC,6CAA6C,EAChE;gBACE,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,WAAW;aAC1B,CACF,EACD,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB,EAAE,WAAmB;QACpD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,kBAAkB;QAMhB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AA7JD,wDA6JC"}

package/src/lib/services/messaging/emailEncryptionService.d.ts

@@ -0,0 +1,250 @@
+/**
+ * Email Encryption Service
+ *
+ * Provides encryption, decryption, signing, and signature verification
+ * for email messages in the BrightChain messaging system.
+ *
+ * Supports:
+ * - ECIES (per-recipient public key encryption via BlockECIES)
+ * - Symmetric encryption (AES-256-GCM with a shared key)
+ * - S/MIME-style digital signatures (sign with sender's private key, verify with public key)
+ *
+ * @see Requirements 16.1, 16.3, 16.4, 16.5, 16.6, 16.7, 16.8
+ */
+import { MessageEncryptionScheme } from '../../enumerations/messaging/messageEncryptionScheme';
+/**
+ * Encryption metadata stored alongside an encrypted email.
+ *
+ * @see Requirement 16.7 - Store encryption metadata in Email_Metadata
+ */
+export interface IEmailEncryptionMetadata {
+    /** The encryption scheme used */
+    scheme: MessageEncryptionScheme;
+    /**
+     * Per-recipient encrypted symmetric key (base64-encoded).
+     * Only present when scheme is RECIPIENT_KEYS.
+     * Maps recipient address to their ECIES-encrypted copy of the symmetric key.
+     */
+    encryptedKeys?: Map<string, Uint8Array>;
+    /** Initialization vector used for symmetric encryption (base64) */
+    iv?: Uint8Array;
+    /** Authentication tag from AES-GCM (base64) */
+    authTag?: Uint8Array;
+    /** Whether the email is signed */
+    isSigned: boolean;
+    /** Digital signature bytes (if signed) */
+    signature?: Uint8Array;
+    /** Public key of the signer (for verification) */
+    signerPublicKey?: Uint8Array;
+}
+/**
+ * Result of encrypting email content for a single recipient.
+ */
+export interface IEncryptedEmailContent {
+    /** The encrypted content bytes */
+    encryptedContent: Uint8Array;
+    /** Encryption metadata for this recipient */
+    encryptionMetadata: IEmailEncryptionMetadata;
+}
+/**
+ * Result of encrypting email content for multiple recipients.
+ */
+export interface IPerRecipientEncryptionResult {
+    /**
+     * The encrypted content (encrypted once with a symmetric key).
+     * All recipients share the same ciphertext; each gets the symmetric key
+     * encrypted with their own public key.
+     */
+    encryptedContent: Uint8Array;
+    /** Encryption metadata including per-recipient encrypted keys */
+    encryptionMetadata: IEmailEncryptionMetadata;
+}
+/**
+ * Result of signing email content.
+ */
+export interface ISignatureResult {
+    /** The digital signature bytes */
+    signature: Uint8Array;
+    /** The public key of the signer */
+    signerPublicKey: Uint8Array;
+}
+/**
+ * Service for encrypting and decrypting email content.
+ *
+ * Encryption flow (ECIES / RECIPIENT_KEYS):
+ * 1. Generate a random AES-256-GCM symmetric key
+ * 2. Encrypt the email content with the symmetric key
+ * 3. Encrypt the symmetric key with each recipient's ECIES public key
+ * 4. Store the encrypted content + per-recipient encrypted keys
+ *
+ * Encryption flow (SYMMETRIC / SHARED_KEY):
+ * 1. Use the provided shared symmetric key directly
+ * 2. Encrypt the email content with AES-256-GCM
+ *
+ * @see Requirements 16.1, 16.3, 16.4, 16.5, 16.6, 16.7, 16.8
+ */
+export declare class EmailEncryptionService {
+    /**
+     * Encrypts email content using ECIES for a single recipient.
+     *
+     * Generates a random AES-256-GCM key, encrypts the content, then
+     * encrypts the symmetric key with the recipient's ECIES public key.
+     *
+     * @param content - Plaintext email content
+     * @param recipientPublicKey - Recipient's ECIES public key
+     * @returns Encrypted content and encryption metadata
+     * @throws {EmailError} If encryption fails
+     *
+     * @see Requirement 16.1 - End-to-end encryption using ECIES
+     * @see Requirement 16.3 - Encrypt content blocks using recipient's public key
+     */
+    encryptContent(content: Uint8Array, recipientPublicKey: Uint8Array): Promise<IEncryptedEmailContent>;
+    /**
+     * Encrypts email content using a shared symmetric key (AES-256-GCM).
+     *
+     * @param content - Plaintext email content
+     * @param sharedKey - 32-byte shared symmetric key
+     * @returns Encrypted content and encryption metadata
+     * @throws {EmailError} If encryption fails
+     *
+     * @see Requirement 16.1 - Support SYMMETRIC encryption scheme
+     */
+    encryptContentSymmetric(content: Uint8Array, sharedKey: Uint8Array): IEncryptedEmailContent;
+    /**
+     * Decrypts email content encrypted with ECIES (RECIPIENT_KEYS scheme).
+     *
+     * 1. Decrypts the per-recipient symmetric key using the recipient's private key
+     * 2. Decrypts the content using the recovered symmetric key
+     *
+     * @param encryptedContent - The encrypted email content
+     * @param metadata - Encryption metadata containing the encrypted key, IV, and auth tag
+     * @param recipientAddress - The recipient's address (key in encryptedKeys map)
+     * @param recipientPrivateKey - The recipient's ECIES private key
+     * @returns Decrypted plaintext content
+     * @throws {EmailError} If decryption fails
+     */
+    decryptContent(encryptedContent: Uint8Array, metadata: IEmailEncryptionMetadata, recipientAddress: string, recipientPrivateKey: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Decrypts email content encrypted with a shared symmetric key.
+     *
+     * @param encryptedContent - The encrypted email content
+     * @param metadata - Encryption metadata containing IV and auth tag
+     * @param sharedKey - The 32-byte shared symmetric key
+     * @returns Decrypted plaintext content
+     * @throws {EmailError} If decryption fails
+     */
+    decryptContentSymmetric(encryptedContent: Uint8Array, metadata: IEmailEncryptionMetadata, sharedKey: Uint8Array): Uint8Array;
+    /**
+     * Encrypts email content for multiple recipients.
+     *
+     * Generates a single symmetric key, encrypts the content once,
+     * then encrypts the symmetric key separately for each recipient
+     * using their ECIES public key.
+     *
+     * @param content - Plaintext email content
+     * @param recipientPublicKeys - Map of recipient address to their ECIES public key
+     * @returns Encrypted content and per-recipient encryption metadata
+     * @throws {EmailError} If encryption fails for any recipient
+     *
+     * @see Requirement 16.4 - Create separate encrypted copies for each recipient
+     * @see Requirement 16.7 - Store encryption metadata in Email_Metadata
+     */
+    encryptForRecipients(content: Uint8Array, recipientPublicKeys: Map<string, Uint8Array>): Promise<IPerRecipientEncryptionResult>;
+    /**
+     * Signs email content with the sender's private key.
+     *
+     * Creates a SHA-256 hash of the content and encrypts it with the
+     * sender's private key using ECIES to produce a digital signature.
+     * The signature can be verified by anyone with the sender's public key.
+     *
+     * @param content - The email content to sign
+     * @param senderPrivateKey - The sender's ECIES private key
+     * @param senderPublicKey - The sender's ECIES public key (stored with signature)
+     * @returns The signature and signer's public key
+     * @throws {EmailError} If signing fails
+     *
+     * @see Requirement 16.5 - S/MIME signatures for sender authentication
+     */
+    signContent(content: Uint8Array, senderPrivateKey: Uint8Array, senderPublicKey: Uint8Array): ISignatureResult;
+    /**
+     * Verifies a digital signature on email content.
+     *
+     * Recomputes the signature using the provided private key and compares
+     * it to the stored signature. In a production S/MIME implementation,
+     * this would use ECDSA verification with only the public key.
+     *
+     * @param content - The email content that was signed
+     * @param signature - The signature to verify
+     * @param signerPrivateKey - The signer's private key (needed for HMAC verification)
+     * @returns true if the signature is valid
+     *
+     * @see Requirement 16.8 - Verify sender's signature on decryption
+     */
+    verifySignature(content: Uint8Array, signature: Uint8Array, signerPrivateKey: Uint8Array): boolean;
+    /**
+     * Encrypts and signs email content for multiple recipients.
+     *
+     * Combines per-recipient encryption with digital signing:
+     * 1. Signs the plaintext content with the sender's private key
+     * 2. Encrypts the content for all recipients
+     * 3. Returns encrypted content with signature metadata
+     *
+     * @param content - Plaintext email content
+     * @param recipientPublicKeys - Map of recipient address to ECIES public key
+     * @param senderPrivateKey - Sender's private key for signing
+     * @param senderPublicKey - Sender's public key (stored with signature)
+     * @returns Encrypted content with signature metadata
+     *
+     * @see Requirements 16.4, 16.5
+     */
+    encryptAndSign(content: Uint8Array, recipientPublicKeys: Map<string, Uint8Array>, senderPrivateKey: Uint8Array, senderPublicKey: Uint8Array): Promise<IPerRecipientEncryptionResult>;
+    /**
+     * Decrypts email content and verifies the sender's signature.
+     *
+     * @param encryptedContent - The encrypted email content
+     * @param metadata - Encryption metadata with signature info
+     * @param recipientAddress - The recipient's address
+     * @param recipientPrivateKey - The recipient's private key for decryption
+     * @param signerPrivateKey - The signer's private key for HMAC verification
+     * @returns Decrypted content
+     * @throws {EmailError} If decryption or signature verification fails
+     *
+     * @see Requirement 16.8 - Verify sender's signature on decryption
+     */
+    decryptAndVerify(encryptedContent: Uint8Array, metadata: IEmailEncryptionMetadata, recipientAddress: string, recipientPrivateKey: Uint8Array, signerPrivateKey: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Encrypts email content using S/MIME-style encryption.
+     *
+     * S/MIME encryption combines signing and per-recipient encryption:
+     * 1. Signs the content with the sender's private key
+     * 2. Encrypts the signed content for each recipient using ECIES
+     *
+     * This is equivalent to `encryptAndSign` but explicitly sets the
+     * scheme to S_MIME for metadata tracking.
+     *
+     * @param content - Plaintext email content
+     * @param recipientPublicKeys - Map of recipient address to ECIES public key
+     * @param senderPrivateKey - Sender's private key for signing
+     * @param senderPublicKey - Sender's public key (stored with signature)
+     * @returns Encrypted content with S/MIME metadata
+     *
+     * @see Requirement 16.6 - S/MIME encryption as alternative method
+     */
+    encryptSmime(content: Uint8Array, recipientPublicKeys: Map<string, Uint8Array>, senderPrivateKey: Uint8Array, senderPublicKey: Uint8Array): Promise<IPerRecipientEncryptionResult>;
+    /**
+     * Decrypts S/MIME encrypted email content and verifies the signature.
+     *
+     * @param encryptedContent - The encrypted email content
+     * @param metadata - Encryption metadata with S/MIME info
+     * @param recipientAddress - The recipient's address
+     * @param recipientPrivateKey - The recipient's private key for decryption
+     * @param signerPrivateKey - The signer's private key for HMAC verification
+     * @returns Decrypted content
+     * @throws {EmailError} If decryption or signature verification fails
+     *
+     * @see Requirement 16.6 - S/MIME encryption
+     * @see Requirement 16.8 - Verify sender's signature on decryption
+     */
+    decryptSmime(encryptedContent: Uint8Array, metadata: IEmailEncryptionMetadata, recipientAddress: string, recipientPrivateKey: Uint8Array, signerPrivateKey: Uint8Array): Promise<Uint8Array>;
+}
+//# sourceMappingURL=emailEncryptionService.d.ts.map

package/src/lib/services/messaging/emailEncryptionService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailEncryptionService.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/emailEncryptionService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,OAAO,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAK/F;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,iCAAiC;IACjC,MAAM,EAAE,uBAAuB,CAAC;IAEhC;;;;OAIG;IACH,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAExC,mEAAmE;IACnE,EAAE,CAAC,EAAE,UAAU,CAAC;IAEhB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,UAAU,CAAC;IAErB,kCAAkC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAElB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,UAAU,CAAC;IAEvB,kDAAkD;IAClD,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,gBAAgB,EAAE,UAAU,CAAC;IAE7B,6CAA6C;IAC7C,kBAAkB,EAAE,wBAAwB,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,gBAAgB,EAAE,UAAU,CAAC;IAE7B,iEAAiE;IACjE,kBAAkB,EAAE,wBAAwB,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,SAAS,EAAE,UAAU,CAAC;IAEtB,mCAAmC;IACnC,eAAe,EAAE,UAAU,CAAC;CAC7B;AAID;;;;;;;;;;;;;;GAcG;AACH,qBAAa,sBAAsB;IAGjC;;;;;;;;;;;;;OAaG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,EACnB,kBAAkB,EAAE,UAAU,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAyClC;;;;;;;;;OASG;IACH,uBAAuB,CACrB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,GACpB,sBAAsB;IAoCzB;;;;;;;;;;;;OAYG;IACG,cAAc,CAClB,gBAAgB,EAAE,UAAU,EAC5B,QAAQ,EAAE,wBAAwB,EAClC,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,UAAU,GAC9B,OAAO,CAAC,UAAU,CAAC;IAsDtB;;;;;;;;OAQG;IACH,uBAAuB,CACrB,gBAAgB,EAAE,UAAU,EAC5B,QAAQ,EAAE,wBAAwB,EAClC,SAAS,EAAE,UAAU,GACpB,UAAU;IA6Bb;;;;;;;;;;;;;;OAcG;IACG,oBAAoB,CACxB,OAAO,EAAE,UAAU,EACnB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAC3C,OAAO,CAAC,6BAA6B,CAAC;IA4DzC;;;;;;;;;;;;;;OAcG;IACH,WAAW,CACT,OAAO,EAAE,UAAU,EACnB,gBAAgB,EAAE,UAAU,EAC5B,eAAe,EAAE,UAAU,GAC1B,gBAAgB;IA6BnB;;;;;;;;;;;;;OAaG;IACH,eAAe,CACb,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,gBAAgB,EAAE,UAAU,GAC3B,OAAO;IAqBV;;;;;;;;;;;;;;;OAeG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,EACnB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAC5C,gBAAgB,EAAE,UAAU,EAC5B,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,6BAA6B,CAAC;IAsBzC;;;;;;;;;;;;OAYG;IACG,gBAAgB,CACpB,gBAAgB,EAAE,UAAU,EAC5B,QAAQ,EAAE,wBAAwB,EAClC,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,UAAU,EAC/B,gBAAgB,EAAE,UAAU,GAC3B,OAAO,CAAC,UAAU,CAAC;IA+BtB;;;;;;;;;;;;;;;;;OAiBG;IACG,YAAY,CAChB,OAAO,EAAE,UAAU,EACnB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAC5C,gBAAgB,EAAE,UAAU,EAC5B,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,6BAA6B,CAAC;IAczC;;;;;;;;;;;;;OAaG;IACG,YAAY,CAChB,gBAAgB,EAAE,UAAU,EAC5B,QAAQ,EAAE,wBAAwB,EAClC,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,UAAU,EAC/B,gBAAgB,EAAE,UAAU,GAC3B,OAAO,CAAC,UAAU,CAAC;CASvB"}