@brightchain/brightchain-lib 0.13.0 → 0.15.0

package/src/lib/services/brightpass/totpEngine.js

@@ -0,0 +1,198 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOTPEngine = void 0;
+const otpauth_1 = require("otpauth");
+const QRCode = require("qrcode");
+/**
+ * TOTPEngine - Time-based One-Time Password generation and validation
+ *
+ * Provides RFC 6238 compliant TOTP operations for two-factor authentication.
+ * Uses the otpauth library for TOTP operations and qrcode for QR code generation.
+ * Works in both browser and Node.js environments.
+ *
+ * Requirements:
+ * - 2.1: Generate RFC 6238 compliant time-based one-time passwords
+ * - 2.2: Validate TOTP codes with configurable time window tolerance
+ * - 2.3: Generate base32-encoded secrets for TOTP setup
+ * - 2.4: Generate otpauth:// URIs for authenticator app configuration
+ * - 2.5: Generate QR codes as data URLs for authenticator app scanning
+ * - 2.6: Support SHA1, SHA256, and SHA512 algorithms with configurable digit count and period
+ *
+ * @example
+ * ```typescript
+ * // Complete setup flow
+ * const { secret, uri, qrCode } = await TOTPEngine.setup({
+ *   issuer: 'BrightChain',
+ *   label: 'user@example.com'
+ * });
+ *
+ * // Generate a code
+ * const code = TOTPEngine.generate(secret);
+ *
+ * // Validate a code
+ * const isValid = TOTPEngine.validate(userInput, secret);
+ * ```
+ */
+class TOTPEngine {
+    /**
+     * Create a new random base32-encoded secret for TOTP setup.
+     *
+     * The secret is generated using cryptographically secure random bytes
+     * and encoded in base32 format for compatibility with authenticator apps.
+     *
+     * **Validates: Requirement 2.3** - Generate base32-encoded secrets for TOTP setup
+     *
+     * @returns A base32-encoded secret string
+     *
+     * @example
+     * ```typescript
+     * const secret = TOTPEngine.createSecret();
+     * // Returns something like "JBSWY3DPEHPK3PXP"
+     * ```
+     */
+    static createSecret() {
+        const secret = new otpauth_1.Secret();
+        return secret.base32;
+    }
+    /**
+     * Generate a TOTP code for the given secret.
+     *
+     * Generates an RFC 6238 compliant time-based one-time password using
+     * the provided secret and optional timestamp.
+     *
+     * **Validates: Requirement 2.1** - Generate RFC 6238 compliant time-based one-time passwords
+     *
+     * @param secret - Base32-encoded secret
+     * @param timestamp - Optional timestamp in milliseconds (defaults to current time)
+     * @returns The generated TOTP code as a string
+     *
+     * @example
+     * ```typescript
+     * const code = TOTPEngine.generate(secret);
+     * // Returns something like "123456"
+     *
+     * // Generate code for a specific time
+     * const pastCode = TOTPEngine.generate(secret, Date.now() - 30000);
+     * ```
+     */
+    static generate(secret, timestamp) {
+        const totp = new otpauth_1.TOTP({ secret: otpauth_1.Secret.fromBase32(secret) });
+        return totp.generate({ timestamp });
+    }
+    /**
+     * Validate a TOTP code against the given secret.
+     *
+     * Validates the provided token against the secret with a configurable
+     * time window tolerance to account for clock drift.
+     *
+     * **Validates: Requirement 2.2** - Validate TOTP codes with configurable time window tolerance
+     *
+     * @param token - The TOTP code to validate
+     * @param secret - Base32-encoded secret
+     * @param window - Number of periods to check before and after current time (default: 1)
+     * @returns true if the token is valid within the time window, false otherwise
+     *
+     * @example
+     * ```typescript
+     * const isValid = TOTPEngine.validate('123456', secret);
+     *
+     * // With larger window for more tolerance
+     * const isValidLargeWindow = TOTPEngine.validate('123456', secret, 2);
+     * ```
+     */
+    static validate(token, secret, window = 1) {
+        const totp = new otpauth_1.TOTP({ secret: otpauth_1.Secret.fromBase32(secret) });
+        const delta = totp.validate({ token, window });
+        return delta !== null;
+    }
+    /**
+     * Generate an otpauth:// URI for authenticator app configuration.
+     *
+     * Creates a URI that can be used to configure authenticator apps
+     * either manually or via QR code scanning.
+     *
+     * **Validates: Requirements 2.4, 2.6** - Generate otpauth:// URIs with configurable parameters
+     *
+     * @param secret - Base32-encoded secret
+     * @param config - TOTP configuration options
+     * @returns An otpauth:// URI string
+     *
+     * @example
+     * ```typescript
+     * const uri = TOTPEngine.generateOtpauthUri(secret, {
+     *   issuer: 'BrightChain',
+     *   label: 'user@example.com',
+     *   algorithm: 'SHA256',
+     *   digits: 6,
+     *   period: 30
+     * });
+     * // Returns: "otpauth://totp/BrightChain:user@example.com?secret=...&issuer=BrightChain&algorithm=SHA256&digits=6&period=30"
+     * ```
+     */
+    static generateOtpauthUri(secret, config) {
+        const totp = new otpauth_1.TOTP({
+            secret: otpauth_1.Secret.fromBase32(secret),
+            issuer: config.issuer,
+            label: config.label,
+            algorithm: config.algorithm || 'SHA1',
+            digits: config.digits || 6,
+            period: config.period || 30,
+        });
+        return totp.toString();
+    }
+    /**
+     * Generate a QR code as a data URL from an otpauth:// URI.
+     *
+     * Creates a QR code image that can be scanned by authenticator apps.
+     * The result is a data URL that can be used directly in an img src attribute.
+     *
+     * **Validates: Requirement 2.5** - Generate QR codes as data URLs for authenticator app scanning
+     *
+     * @param otpauthUri - The otpauth:// URI to encode
+     * @returns A Promise resolving to a data URL string (e.g., "data:image/png;base64,...")
+     *
+     * @example
+     * ```typescript
+     * const uri = TOTPEngine.generateOtpauthUri(secret, config);
+     * const qrCode = await TOTPEngine.generateQRCode(uri);
+     * // Use in HTML: <img src={qrCode} />
+     * ```
+     */
+    static async generateQRCode(otpauthUri) {
+        return QRCode.toDataURL(otpauthUri);
+    }
+    /**
+     * Complete TOTP setup: create secret, generate URI and QR code.
+     *
+     * Convenience method that performs all setup steps in one call:
+     * 1. Generates a new random secret
+     * 2. Creates the otpauth:// URI
+     * 3. Generates the QR code
+     *
+     * **Validates: Requirements 2.1, 2.3, 2.4, 2.5, 2.6** - Complete TOTP setup flow
+     *
+     * @param config - TOTP configuration options
+     * @returns A Promise resolving to an object containing secret, URI, and QR code
+     *
+     * @example
+     * ```typescript
+     * const { secret, uri, qrCode } = await TOTPEngine.setup({
+     *   issuer: 'BrightChain',
+     *   label: 'user@example.com',
+     *   algorithm: 'SHA256'
+     * });
+     *
+     * // Store secret securely
+     * // Display qrCode to user for scanning
+     * // Optionally show uri for manual entry
+     * ```
+     */
+    static async setup(config) {
+        const secret = this.createSecret();
+        const uri = this.generateOtpauthUri(secret, config);
+        const qrCode = await this.generateQRCode(uri);
+        return { secret, uri, qrCode };
+    }
+}
+exports.TOTPEngine = TOTPEngine;
+//# sourceMappingURL=totpEngine.js.map

package/src/lib/services/brightpass/totpEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totpEngine.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/brightpass/totpEngine.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,iCAAiC;AA8BjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAa,UAAU;IACrB;;;;;;;;;;;;;;;OAeG;IACI,MAAM,CAAC,YAAY;QACxB,MAAM,MAAM,GAAG,IAAI,gBAAM,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,MAAM,CAAC,QAAQ,CAAC,MAAc,EAAE,SAAkB;QACvD,MAAM,IAAI,GAAG,IAAI,cAAI,CAAC,EAAE,MAAM,EAAE,gBAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,MAAM,CAAC,QAAQ,CAAC,KAAa,EAAE,MAAc,EAAE,MAAM,GAAG,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,cAAI,CAAC,EAAE,MAAM,EAAE,gBAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACI,MAAM,CAAC,kBAAkB,CAAC,MAAc,EAAE,MAAkB;QACjE,MAAM,IAAI,GAAG,IAAI,cAAI,CAAC;YACpB,MAAM,EAAE,gBAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,UAAkB;QACnD,OAAO,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAkB;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;CACF;AArKD,gCAqKC"}

package/src/lib/services/brightpass/vaultKeyDerivation.d.ts

@@ -0,0 +1,26 @@
+/**
+ * VaultKeyDerivation - Derives vault encryption keys from vault seed and master password
+ *
+ * Uses HKDF-SHA256 to derive a 32-byte AES-256 key from:
+ * - IKM (Input Key Material): vault's BIP39 seed + master password
+ * - Info: vault ID (for domain separation)
+ *
+ * Security: Each vault has its own independent BIP39 seed that can be
+ * regenerated/cycled without affecting other vaults or the member's identity.
+ *
+ * Requirements:
+ * - 5.1: Derives 32-byte AES-256 keys using HKDF-SHA256
+ * - 5.2: Combines vault seed and master password as input key material
+ * - 5.3: Uses vault ID as the info parameter for domain separation
+ */
+export declare class VaultKeyDerivation {
+    /**
+     * Derive a vault encryption key
+     * @param vaultSeed - Vault's own BIP39 seed (64 bytes) - independent of member
+     * @param masterPassword - User's master password
+     * @param vaultId - Unique vault identifier (used for domain separation)
+     * @returns 32-byte AES-256 key
+     */
+    static deriveVaultKey(vaultSeed: Uint8Array, masterPassword: string, vaultId: string): Uint8Array;
+}
+//# sourceMappingURL=vaultKeyDerivation.d.ts.map

package/src/lib/services/brightpass/vaultKeyDerivation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaultKeyDerivation.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/brightpass/vaultKeyDerivation.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;GAcG;AACH,qBAAa,kBAAkB;IAC7B;;;;;;OAMG;WACW,cAAc,CAC1B,SAAS,EAAE,UAAU,EACrB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,GACd,UAAU;CAad"}

package/src/lib/services/brightpass/vaultKeyDerivation.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VaultKeyDerivation = void 0;
+const hkdf_1 = require("@noble/hashes/hkdf");
+const sha256_1 = require("@noble/hashes/sha256");
+/**
+ * VaultKeyDerivation - Derives vault encryption keys from vault seed and master password
+ *
+ * Uses HKDF-SHA256 to derive a 32-byte AES-256 key from:
+ * - IKM (Input Key Material): vault's BIP39 seed + master password
+ * - Info: vault ID (for domain separation)
+ *
+ * Security: Each vault has its own independent BIP39 seed that can be
+ * regenerated/cycled without affecting other vaults or the member's identity.
+ *
+ * Requirements:
+ * - 5.1: Derives 32-byte AES-256 keys using HKDF-SHA256
+ * - 5.2: Combines vault seed and master password as input key material
+ * - 5.3: Uses vault ID as the info parameter for domain separation
+ */
+class VaultKeyDerivation {
+    /**
+     * Derive a vault encryption key
+     * @param vaultSeed - Vault's own BIP39 seed (64 bytes) - independent of member
+     * @param masterPassword - User's master password
+     * @param vaultId - Unique vault identifier (used for domain separation)
+     * @returns 32-byte AES-256 key
+     */
+    static deriveVaultKey(vaultSeed, masterPassword, vaultId) {
+        // Combine vault seed + master password as IKM (Requirement 5.2)
+        const passwordBytes = new TextEncoder().encode(masterPassword);
+        const ikm = new Uint8Array(vaultSeed.length + passwordBytes.length);
+        ikm.set(vaultSeed, 0);
+        ikm.set(passwordBytes, vaultSeed.length);
+        // Use vault ID as info parameter for domain separation (Requirement 5.3)
+        const info = new TextEncoder().encode(vaultId);
+        // Derive 32-byte key using HKDF-SHA256 (Requirement 5.1)
+        return (0, hkdf_1.hkdf)(sha256_1.sha256, ikm, undefined, info, 32);
+    }
+}
+exports.VaultKeyDerivation = VaultKeyDerivation;
+//# sourceMappingURL=vaultKeyDerivation.js.map

package/src/lib/services/brightpass/vaultKeyDerivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaultKeyDerivation.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/brightpass/vaultKeyDerivation.ts"],"names":[],"mappings":";;;AAAA,6CAA0C;AAC1C,iDAA8C;AAE9C;;;;;;;;;;;;;;GAcG;AACH,MAAa,kBAAkB;IAC7B;;;;;;OAMG;IACI,MAAM,CAAC,cAAc,CAC1B,SAAqB,EACrB,cAAsB,EACtB,OAAe;QAEf,gEAAgE;QAChE,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAEzC,yEAAyE;QACzE,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE/C,yDAAyD;QACzD,OAAO,IAAA,WAAI,EAAC,eAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;CACF;AAzBD,gDAyBC"}

package/src/lib/services/brightpass/vaultSerializer.d.ts

@@ -0,0 +1,14 @@
+import { AuditLogEntry, VaultEntry } from '../../interfaces/brightpass';
+/**
+ * VaultSerializer — serializes and deserializes VaultEntry and AuditLogEntry objects.
+ *
+ * Handles proper Date ↔ ISO string conversion during serialization/deserialization.
+ * Pure JSON operations, fully browser-compatible.
+ */
+export declare class VaultSerializer {
+    static serializeEntry(entry: VaultEntry): string;
+    static deserializeEntry(json: string): VaultEntry;
+    static serializeAuditLog(entry: AuditLogEntry): string;
+    static deserializeAuditLog(json: string): AuditLogEntry;
+}
+//# sourceMappingURL=vaultSerializer.d.ts.map

package/src/lib/services/brightpass/vaultSerializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaultSerializer.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/brightpass/vaultSerializer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAExE;;;;;GAKG;AACH,qBAAa,eAAe;IAC1B,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM;IAehD,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;IAiCjD,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM;IAWtD,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa;CAsBxD"}

package/src/lib/services/brightpass/vaultSerializer.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VaultSerializer = void 0;
+/**
+ * VaultSerializer — serializes and deserializes VaultEntry and AuditLogEntry objects.
+ *
+ * Handles proper Date ↔ ISO string conversion during serialization/deserialization.
+ * Pure JSON operations, fully browser-compatible.
+ */
+class VaultSerializer {
+    static serializeEntry(entry) {
+        const serializable = {
+            ...entry,
+            createdAt: entry.createdAt instanceof Date && !isNaN(entry.createdAt.getTime())
+                ? entry.createdAt.toISOString()
+                : entry.createdAt,
+            updatedAt: entry.updatedAt instanceof Date && !isNaN(entry.updatedAt.getTime())
+                ? entry.updatedAt.toISOString()
+                : entry.updatedAt,
+        };
+        return JSON.stringify(serializable);
+    }
+    static deserializeEntry(json) {
+        try {
+            const parsed = JSON.parse(json);
+            if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+                throw new Error('Invalid JSON: expected object');
+            }
+            if (!parsed.type ||
+                !['login', 'secure_note', 'credit_card', 'identity'].includes(parsed.type)) {
+                throw new Error(`Invalid entry type: ${parsed.type}`);
+            }
+            if (!parsed.id || !parsed.title) {
+                throw new Error('Missing required fields: id, title');
+            }
+            parsed.createdAt = new Date(parsed.createdAt);
+            parsed.updatedAt = new Date(parsed.updatedAt);
+            return parsed;
+        }
+        catch (error) {
+            if (error instanceof SyntaxError) {
+                throw new Error(`JSON parse error: ${error.message}`);
+            }
+            throw error;
+        }
+    }
+    static serializeAuditLog(entry) {
+        const serializable = {
+            ...entry,
+            timestamp: entry.timestamp instanceof Date
+                ? entry.timestamp.toISOString()
+                : entry.timestamp,
+        };
+        return JSON.stringify(serializable);
+    }
+    static deserializeAuditLog(json) {
+        try {
+            const parsed = JSON.parse(json);
+            if (!parsed || typeof parsed !== 'object') {
+                throw new Error('Invalid JSON: expected object');
+            }
+            if (!parsed.id || !parsed.vaultId || !parsed.memberId || !parsed.action) {
+                throw new Error('Missing required audit log fields');
+            }
+            parsed.timestamp = new Date(parsed.timestamp);
+            return parsed;
+        }
+        catch (error) {
+            if (error instanceof SyntaxError) {
+                throw new Error(`JSON parse error: ${error.message}`);
+            }
+            throw error;
+        }
+    }
+}
+exports.VaultSerializer = VaultSerializer;
+//# sourceMappingURL=vaultSerializer.js.map

package/src/lib/services/brightpass/vaultSerializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaultSerializer.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/brightpass/vaultSerializer.ts"],"names":[],"mappings":";;;AAEA;;;;;GAKG;AACH,MAAa,eAAe;IAC1B,MAAM,CAAC,cAAc,CAAC,KAAiB;QACrC,MAAM,YAAY,GAAG;YACnB,GAAG,KAAK;YACR,SAAS,EACP,KAAK,CAAC,SAAS,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAClE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC/B,CAAC,CAAC,KAAK,CAAC,SAAS;YACrB,SAAS,EACP,KAAK,CAAC,SAAS,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAClE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC/B,CAAC,CAAC,KAAK,CAAC,SAAS;SACtB,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,IAAY;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEhC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,IACE,CAAC,MAAM,CAAC,IAAI;gBACZ,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,QAAQ,CAC3D,MAAM,CAAC,IAAI,CACZ,EACD,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAE9C,OAAO,MAAoB,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,KAAoB;QAC3C,MAAM,YAAY,GAAG;YACnB,GAAG,KAAK;YACR,SAAS,EACP,KAAK,CAAC,SAAS,YAAY,IAAI;gBAC7B,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC/B,CAAC,CAAC,KAAK,CAAC,SAAS;SACtB,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,IAAY;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEhC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAE9C,OAAO,MAAuB,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAlFD,0CAkFC"}

package/src/lib/services/cblService.d.ts

@@ -378,8 +378,9 @@ export declare class CBLService<TID extends PlatformID = Uint8Array> {
     makeMessageHeader(messageType: string, senderId: string, recipients: string[], priority: MessagePriority, encryptionScheme: MessageEncryptionScheme): Uint8Array;
     /**
      * Create an extended header for CBL
+     * @param lax - If true, skip file name validation (for special cases like VCBL)
      */
-    makeExtendedHeader(fileName: string, mimeType: string): Uint8Array;
+    makeExtendedHeader(fileName: string, mimeType: string, lax?: boolean): Uint8Array;
     /**
      * Parse message CBL header
      */
@@ -396,6 +397,7 @@ export declare class CBLService<TID extends PlatformID = Uint8Array> {
      * @param encryptionType - The encryption type
      * @param extendedCBL - Optional extended CBL data (fileName, mimeType)
      * @param tupleSize - The tuple size (defaults to TUPLE.SIZE)
+     * @param lax - If true, skip file name validation (for special cases like VCBL)
      * @returns Object containing headerData and signature
      * @throws {EnhancedValidationError} If block size or encryption type is invalid
      * @throws {CblError} If CBL-specific validation fails
@@ -405,7 +407,7 @@ export declare class CBLService<TID extends PlatformID = Uint8Array> {
     makeCblHeader(creator: Member<TID>, dateCreated: Date, cblAddressCount: number, fileDataLength: number, addressList: Uint8Array, blockSize: BlockSize, encryptionType: BlockEncryptionType, extendedCBL?: {
         fileName: string;
         mimeType: string;
-    }, tupleSize?: number): {
+    }, tupleSize?: number, lax?: boolean): {
         headerData: Uint8Array;
         signature: SignatureUint8Array;
     };

package/src/lib/services/cblService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cblService.d.ts","sourceRoot":"","sources":["../../../../../brightchain-lib/src/lib/services/cblService.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,YAAY,EACZ,MAAM,EACN,UAAU,EACV,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,4BAA4B,CAAC;AAQpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAqB,MAAM,2BAA2B,CAAC;AAIzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAI5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,EAAE,wCAAwC,EAAE,MAAM,yCAAyC,CAAC;AACnG,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAM7C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,UAAU,CAAC,GAAG,SAAS,UAAU,GAAG,UAAU;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA8B;IAE/D;;OAEG;IACH,IAAW,UAAU,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAEnD;gBAEC,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,EAC/B,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,CAAC;IAO/C,gDAAgD;IAChD,OAAO,CAAC,YAAY;IAapB;;OAEG;IACH,gBAAuB,oBAAoB,EAAE,MAAM,CAAK;IAExD;;OAEG;IACH,IAAW,aAAa,IAAI,MAAM,CAEjC;IAED;;;OAGG;IACH,gBAAuB,QAAQ,EAAE,MAAM,CAAgC;IAEvE;;OAEG;IACH,gBAAuB,gBAAgB,EAAE,MAAM,CAA4B;IAE3E;;OAEG;IACH,gBAAuB,aAAa,EAAE,MAAM,CAA2B;IAEvE;;OAEG;IACH,gBAAuB,cAAc,EAAE,MAAM,CAA4B;IAEzE;;OAEG;IACH,gBAAuB,gBAAgB,EAAE,MAAM,CACJ;IAE3C;;OAEG;IACH,gBAAuB,oBAAoB,EAAE,MAAM,CAA2B;IAE9E;;OAEG;IACH,gBAAuB,oBAAoB,EAAE,MAAM,CAAwB;IAE3E;;;OAGG;IACH,gBAAuB,eAAe,EAAE,MAAM,CACX;IAEnC;;OAEG;IACH,IAAW,eAAe,IAAI,MAAM,CAEnC;IAED;;OAEG;IACH,IAAW,iBAAiB,IAAI,MAAM,CAErC;IAED;;;OAGG;IACH,WAAkB,iBAAiB,IAAI,MAAM,CAE5C;IAED;;OAEG;IACH,IAAW,qBAAqB,IAAI,MAAM,CAEzC;IAED;;;OAGG;IACH,WAAkB,qBAAqB,IAAI,MAAM,CAEhD;IAED;;OAEG;IACH,IAAW,eAAe,IAAI,MAAM,CAEnC;IAED;;;OAGG;IACH,WAAkB,eAAe,IAAI,MAAM,CAE1C;IAED;;OAEG;IACH,IAAW,wBAAwB,IAAI,MAAM,CAE5C;IAED;;;OAGG;IACH,WAAkB,wBAAwB,IAAI,MAAM,CAEnD;IAED;;OAEG;IACH,IAAW,sBAAsB,IAAI,MAAM,CAE1C;IAED;;;OAGG;IACH,WAAkB,sBAAsB,IAAI,MAAM,CAEjD;IAED;;OAEG;IACH,IAAW,sBAAsB,IAAI,MAAM,CAE1C;IAED;;;OAGG;IACH,WAAkB,sBAAsB,IAAI,MAAM,CAEjD;IAED;;OAEG;IACH,IAAW,gCAAgC,IAAI,MAAM,CAEpD;IAED;;;OAGG;IACH,WAAkB,gCAAgC,IAAI,MAAM,CAE3D;IAED;;OAEG;IACH,IAAW,cAAc,IAAI,MAAM,CAIlC;IAED;;;OAGG;IACH,WAAkB,cAAc,IAAI,MAAM,CAKzC;IAED;;OAEG;IACH,IAAW,oBAAoB,IAAI,MAAM,CAExC;IAED;;;OAGG;IACH,WAAkB,oBAAoB,IAAI,MAAM,CAE/C;IAED;;OAEG;IACH,gBAAuB,kBAAkB,EAAE,MAAM,CAA4B;IAE7E;;OAEG;IACH,gBAAuB,kBAAkB,EAAE,MAAM,CAA2B;IAM5E;;OAEG;IACH,gBAAuB,uBAAuB,EAAE,MAAM,CAC3B;IAE3B;;OAEG;IACH,gBAAuB,2BAA2B,EAAE,MAAM,CAC/B;IAE3B;;OAEG;IACH,gBAAuB,iBAAiB,EAAE,MAAM,CAA4B;IAE5E;;OAEG;IACH,IAAW,yBAAyB,IAAI,MAAM,CAE7C;IAED;;OAEG;IACH,IAAW,6BAA6B,IAAI,MAAM,CAEjD;IAED;;OAEG;IACH,IAAW,mBAAmB,IAAI,MAAM,CAKvC;IAED;;OAEG;IACH,IAAW,gCAAgC,IAAI,MAAM,CAEpD;IAED;;OAEG;IACH,IAAW,8BAA8B,IAAI,MAAM,CAElD;IAED;;OAEG;IACH,IAAW,8BAA8B,IAAI,MAAM,CAElD;IAED;;OAEG;IACH,IAAW,kBAAkB,IAAI,MAAM,CAItC;IAED;;OAEG;IACH,IAAW,qBAAqB;;;;;;;;;;MAY/B;IAED;;OAEG;IACH,IAAW,aAAa;;;;;;;;;;;MAavB;IAED;;;OAGG;IACH,WAAkB,aAAa;;;;;;;;;;;MAa9B;IAED;;;;OAIG;IACI,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO;IAS7C;;OAEG;IACI,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAQnD;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsE/B;;;;OAIG;IACI,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAW5C;;OAEG;IACI,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,GAAG;IAoB5C;;OAEG;IACI,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAiB/C;;OAEG;IACI,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAYrD;;OAEG;IACI,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAO/C;;OAEG;IACI,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAgBxD;;;;OAIG;IACI,uBAAuB,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ;IAW5D;;OAEG;IACI,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAOpD;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAyChC;;OAEG;IACI,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAUpD;;OAEG;IACI,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAgB9C;;OAEG;IACI,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAUpD;;OAEG;IACI,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAgB9C;;OAEG;IACI,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,mBAAmB;IAc5D;;OAEG;IACI,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAWhD;;OAEG;IACI,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAUnD;;OAEG;IACI,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU;IAYnD;;OAEG;IACI,sBAAsB,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE;IAiB3D;;;;;;OAMG;IACI,iBAAiB,CACtB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EACpB,SAAS,CAAC,EAAE,SAAS,GACpB,OAAO;IAkDV;;;;OAIG;IACI,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAkCrD;;OAEG;IACI,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IA2BrD;;;;;OAKG;IACI,2BAA2B,CAChC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM;IAST;;OAEG;IACI,iBAAiB,CACtB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAAE,EACpB,QAAQ,EAAE,eAAe,EACzB,gBAAgB,EAAE,uBAAuB,GACxC,UAAU;IA0Db;;OAEG;IACI,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU;IAwBzE;;OAEG;IACI,kBAAkB,CACvB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GACjC,uCAAuC,CAAC,GAAG,CAAC;IAqD/C;;;;;;;;;;;;;;;;;OAiBG;IACI,aAAa,CAClB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EACpB,WAAW,EAAE,IAAI,EACjB,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,UAAU,EACvB,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,mBAAmB,EACnC,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EACpD,SAAS,GAAE,MAAmB,GAC7B;QAAE,UAAU,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,mBAAmB,CAAA;KAAE;IA0L7D;;;;;OAKG;IACI,eAAe,CACpB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GACjC,gCAAgC,CAAC,GAAG,CAAC;IA2CxC;;;;;OAKG;IACI,mBAAmB,CACxB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GACjC,wCAAwC,CAAC,GAAG,CAAC;IAqBhD;;;;;OAKG;IACI,WAAW,CAChB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAEhC,gCAAgC,CAAC,GAAG,CAAC,GACrC,wCAAwC,CAAC,GAAG,CAAC;IAMjD;;;;;;;OAOG;IACI,2BAA2B,CAChC,SAAS,EAAE,SAAS,EACpB,kBAAkB,EAAE,mBAAmB,EACvC,GAAG,CAAC,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,EACD,uBAAuB,CAAC,EAAE,wBAAwB,GACjD,MAAM;IAmDT;;;;OAIG;IACI,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO;IAU5C;;;;OAIG;IACI,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAkBzD;;;;OAIG;IACI,0BAA0B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAkB7D;;;;OAIG;IACI,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAkBnD;;;;OAIG;IACI,6BAA6B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAsBhE;;;;OAIG;IACI,+BAA+B,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ;IAkBpE;;;;OAIG;IACI,oBAAoB,CAAC,MAAM,EAAE,UAAU,GAAG,mBAAmB;IAiBpE;;;;OAIG;IACI,0BAA0B,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE;IA2B/D;;;;;;;;;;;;;;;;OAgBG;IACI,kBAAkB,CACvB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EACpB,WAAW,EAAE,IAAI,EACjB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,oBAAoB,EAAE,QAAQ,EAC9B,eAAe,EAAE,QAAQ,EAAE,EAC3B,SAAS,EAAE,SAAS,GACnB;QAAE,UAAU,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,mBAAmB,CAAA;KAAE;IAqM7D;;;;;;;;;;OAUG;IACI,yBAAyB,CAC9B,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EACpB,SAAS,CAAC,EAAE,SAAS,GACpB,OAAO;IAwDV;;;;;;;;;;OAUG;IACI,mBAAmB,CACxB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAClC,SAAS,CAAC,EAAE,SAAS,GACpB,qCAAqC,CAAC,GAAG,CAAC;CA2D9C"}
+{"version":3,"file":"cblService.d.ts","sourceRoot":"","sources":["../../../../../brightchain-lib/src/lib/services/cblService.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,YAAY,EACZ,MAAM,EACN,UAAU,EACV,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,4BAA4B,CAAC;AAQpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAqB,MAAM,2BAA2B,CAAC;AAIzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAI5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,EAAE,wCAAwC,EAAE,MAAM,yCAAyC,CAAC;AACnG,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAM7C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,UAAU,CAAC,GAAG,SAAS,UAAU,GAAG,UAAU;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA8B;IAE/D;;OAEG;IACH,IAAW,UAAU,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAEnD;gBAEC,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,EAC/B,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,CAAC;IAO/C,gDAAgD;IAChD,OAAO,CAAC,YAAY;IAapB;;OAEG;IACH,gBAAuB,oBAAoB,EAAE,MAAM,CAAK;IAExD;;OAEG;IACH,IAAW,aAAa,IAAI,MAAM,CAEjC;IAED;;;OAGG;IACH,gBAAuB,QAAQ,EAAE,MAAM,CAAgC;IAEvE;;OAEG;IACH,gBAAuB,gBAAgB,EAAE,MAAM,CAA4B;IAE3E;;OAEG;IACH,gBAAuB,aAAa,EAAE,MAAM,CAA2B;IAEvE;;OAEG;IACH,gBAAuB,cAAc,EAAE,MAAM,CAA4B;IAEzE;;OAEG;IACH,gBAAuB,gBAAgB,EAAE,MAAM,CACJ;IAE3C;;OAEG;IACH,gBAAuB,oBAAoB,EAAE,MAAM,CAA2B;IAE9E;;OAEG;IACH,gBAAuB,oBAAoB,EAAE,MAAM,CAAwB;IAE3E;;;OAGG;IACH,gBAAuB,eAAe,EAAE,MAAM,CACX;IAEnC;;OAEG;IACH,IAAW,eAAe,IAAI,MAAM,CAEnC;IAED;;OAEG;IACH,IAAW,iBAAiB,IAAI,MAAM,CAErC;IAED;;;OAGG;IACH,WAAkB,iBAAiB,IAAI,MAAM,CAE5C;IAED;;OAEG;IACH,IAAW,qBAAqB,IAAI,MAAM,CAEzC;IAED;;;OAGG;IACH,WAAkB,qBAAqB,IAAI,MAAM,CAEhD;IAED;;OAEG;IACH,IAAW,eAAe,IAAI,MAAM,CAEnC;IAED;;;OAGG;IACH,WAAkB,eAAe,IAAI,MAAM,CAE1C;IAED;;OAEG;IACH,IAAW,wBAAwB,IAAI,MAAM,CAE5C;IAED;;;OAGG;IACH,WAAkB,wBAAwB,IAAI,MAAM,CAEnD;IAED;;OAEG;IACH,IAAW,sBAAsB,IAAI,MAAM,CAE1C;IAED;;;OAGG;IACH,WAAkB,sBAAsB,IAAI,MAAM,CAEjD;IAED;;OAEG;IACH,IAAW,sBAAsB,IAAI,MAAM,CAE1C;IAED;;;OAGG;IACH,WAAkB,sBAAsB,IAAI,MAAM,CAEjD;IAED;;OAEG;IACH,IAAW,gCAAgC,IAAI,MAAM,CAEpD;IAED;;;OAGG;IACH,WAAkB,gCAAgC,IAAI,MAAM,CAE3D;IAED;;OAEG;IACH,IAAW,cAAc,IAAI,MAAM,CAIlC;IAED;;;OAGG;IACH,WAAkB,cAAc,IAAI,MAAM,CAKzC;IAED;;OAEG;IACH,IAAW,oBAAoB,IAAI,MAAM,CAExC;IAED;;;OAGG;IACH,WAAkB,oBAAoB,IAAI,MAAM,CAE/C;IAED;;OAEG;IACH,gBAAuB,kBAAkB,EAAE,MAAM,CAA4B;IAE7E;;OAEG;IACH,gBAAuB,kBAAkB,EAAE,MAAM,CAA2B;IAM5E;;OAEG;IACH,gBAAuB,uBAAuB,EAAE,MAAM,CAC3B;IAE3B;;OAEG;IACH,gBAAuB,2BAA2B,EAAE,MAAM,CAC/B;IAE3B;;OAEG;IACH,gBAAuB,iBAAiB,EAAE,MAAM,CAA4B;IAE5E;;OAEG;IACH,IAAW,yBAAyB,IAAI,MAAM,CAE7C;IAED;;OAEG;IACH,IAAW,6BAA6B,IAAI,MAAM,CAEjD;IAED;;OAEG;IACH,IAAW,mBAAmB,IAAI,MAAM,CAKvC;IAED;;OAEG;IACH,IAAW,gCAAgC,IAAI,MAAM,CAEpD;IAED;;OAEG;IACH,IAAW,8BAA8B,IAAI,MAAM,CAElD;IAED;;OAEG;IACH,IAAW,8BAA8B,IAAI,MAAM,CAElD;IAED;;OAEG;IACH,IAAW,kBAAkB,IAAI,MAAM,CAItC;IAED;;OAEG;IACH,IAAW,qBAAqB;;;;;;;;;;MAY/B;IAED;;OAEG;IACH,IAAW,aAAa;;;;;;;;;;;MAavB;IAED;;;OAGG;IACH,WAAkB,aAAa;;;;;;;;;;;MAa9B;IAED;;;;OAIG;IACI,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO;IAS7C;;OAEG;IACI,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAQnD;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAsE/B;;;;OAIG;IACI,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAW5C;;OAEG;IACI,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,GAAG;IAoB5C;;OAEG;IACI,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAiB/C;;OAEG;IACI,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAYrD;;OAEG;IACI,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAO/C;;OAEG;IACI,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAgBxD;;;;OAIG;IACI,uBAAuB,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ;IAW5D;;OAEG;IACI,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAOpD;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAyChC;;OAEG;IACI,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAUpD;;OAEG;IACI,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAgB9C;;OAEG;IACI,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAUpD;;OAEG;IACI,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAgB9C;;OAEG;IACI,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,mBAAmB;IAc5D;;OAEG;IACI,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAWhD;;OAEG;IACI,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAUnD;;OAEG;IACI,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU;IAYnD;;OAEG;IACI,sBAAsB,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE;IAiB3D;;;;;;OAMG;IACI,iBAAiB,CACtB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EACpB,SAAS,CAAC,EAAE,SAAS,GACpB,OAAO;IAkDV;;;;OAIG;IACI,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAkCrD;;OAEG;IACI,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IA2BrD;;;;;OAKG;IACI,2BAA2B,CAChC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM;IAST;;OAEG;IACI,iBAAiB,CACtB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAAE,EACpB,QAAQ,EAAE,eAAe,EACzB,gBAAgB,EAAE,uBAAuB,GACxC,UAAU;IA0Db;;;OAGG;IACI,kBAAkB,CACvB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,GAAG,UAAQ,GACV,UAAU;IA0Bb;;OAEG;IACI,kBAAkB,CACvB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GACjC,uCAAuC,CAAC,GAAG,CAAC;IAqD/C;;;;;;;;;;;;;;;;;;OAkBG;IACI,aAAa,CAClB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EACpB,WAAW,EAAE,IAAI,EACjB,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,UAAU,EACvB,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,mBAAmB,EACnC,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EACpD,SAAS,GAAE,MAAmB,EAC9B,GAAG,UAAQ,GACV;QAAE,UAAU,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,mBAAmB,CAAA;KAAE;IA0L7D;;;;;OAKG;IACI,eAAe,CACpB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GACjC,gCAAgC,CAAC,GAAG,CAAC;IA2CxC;;;;;OAKG;IACI,mBAAmB,CACxB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GACjC,wCAAwC,CAAC,GAAG,CAAC;IAqBhD;;;;;OAKG;IACI,WAAW,CAChB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAEhC,gCAAgC,CAAC,GAAG,CAAC,GACrC,wCAAwC,CAAC,GAAG,CAAC;IAMjD;;;;;;;OAOG;IACI,2BAA2B,CAChC,SAAS,EAAE,SAAS,EACpB,kBAAkB,EAAE,mBAAmB,EACvC,GAAG,CAAC,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,EACD,uBAAuB,CAAC,EAAE,wBAAwB,GACjD,MAAM;IAmDT;;;;OAIG;IACI,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO;IAU5C;;;;OAIG;IACI,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAkBzD;;;;OAIG;IACI,0BAA0B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAkB7D;;;;OAIG;IACI,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAkBnD;;;;OAIG;IACI,6BAA6B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAsBhE;;;;OAIG;IACI,+BAA+B,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ;IAkBpE;;;;OAIG;IACI,oBAAoB,CAAC,MAAM,EAAE,UAAU,GAAG,mBAAmB;IAiBpE;;;;OAIG;IACI,0BAA0B,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE;IA2B/D;;;;;;;;;;;;;;;;OAgBG;IACI,kBAAkB,CACvB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EACpB,WAAW,EAAE,IAAI,EACjB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,oBAAoB,EAAE,QAAQ,EAC9B,eAAe,EAAE,QAAQ,EAAE,EAC3B,SAAS,EAAE,SAAS,GACnB;QAAE,UAAU,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,mBAAmB,CAAA;KAAE;IAqM7D;;;;;;;;;;OAUG;IACI,yBAAyB,CAC9B,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EACpB,SAAS,CAAC,EAAE,SAAS,GACpB,OAAO;IAwDV;;;;;;;;;;OAUG;IACI,mBAAmB,CACxB,IAAI,EAAE,UAAU,EAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAClC,SAAS,CAAC,EAAE,SAAS,GACpB,qCAAqC,CAAC,GAAG,CAAC;CA2D9C"}

package/src/lib/services/cblService.js

@@ -732,9 +732,12 @@ class CBLService {
     }
     /**
      * Create an extended header for CBL
+     * @param lax - If true, skip file name validation (for special cases like VCBL)
      */
-    makeExtendedHeader(fileName, mimeType) {
-        this.validateFileNameFormat(fileName);
+    makeExtendedHeader(fileName, mimeType, lax = false) {
+        if (!lax) {
+            this.validateFileNameFormat(fileName);
+        }
         this.validateMimeTypeFormat(mimeType);
         const totalLength = this.calculateExtendedHeaderSize(fileName, mimeType);
         const result = new Uint8Array(totalLength);
@@ -795,13 +798,14 @@ class CBLService {
      * @param encryptionType - The encryption type
      * @param extendedCBL - Optional extended CBL data (fileName, mimeType)
      * @param tupleSize - The tuple size (defaults to TUPLE.SIZE)
+     * @param lax - If true, skip file name validation (for special cases like VCBL)
      * @returns Object containing headerData and signature
      * @throws {EnhancedValidationError} If block size or encryption type is invalid
      * @throws {CblError} If CBL-specific validation fails
      *
      * @see Requirements 5.1, 5.2, 5.3, 12.1, 12.2, 12.7, 9.1, 9.2, 9.4, 9.5, 10.1, 10.2, 12.4
      */
-    makeCblHeader(creator, dateCreated, cblAddressCount, fileDataLength, addressList, blockSize, encryptionType, extendedCBL, tupleSize = constants_1.TUPLE.SIZE) {
+    makeCblHeader(creator, dateCreated, cblAddressCount, fileDataLength, addressList, blockSize, encryptionType, extendedCBL, tupleSize = constants_1.TUPLE.SIZE, lax = false) {
         // Validate inputs using Validator
         validator_1.Validator.validateRequired(creator, 'creator', 'makeCblHeader');
         validator_1.Validator.validateRequired(dateCreated, 'dateCreated', 'makeCblHeader');
@@ -879,7 +883,7 @@ class CBLService {
         baseHeader[offset] = extendedCBL ? 1 : 0; // Set extended header flag
         // Create extended header if needed
         const extendedHeaderData = extendedCBL
-            ? this.makeExtendedHeader(extendedCBL.fileName, extendedCBL.mimeType)
+            ? this.makeExtendedHeader(extendedCBL.fileName, extendedCBL.mimeType, lax)
             : new Uint8Array(0);
         // Calculate checksum for signing
         const toSignSize = baseHeader.length +