@brightchain/brightchain-lib 0.13.0 → 0.15.0

package/src/lib/services/identity/splitPaperKeyService.js

@@ -0,0 +1,305 @@
+"use strict";
+/**
+ * Split Paper Key Service for the BrightChain identity system.
+ *
+ * Splits a 24-word BIP39 paper key into N Shamir's Secret Sharing
+ * shares with a configurable threshold T. Any T shares can reconstruct
+ * the original paper key; fewer than T shares reveal nothing.
+ *
+ * Each share is encoded as a human-readable word sequence using the
+ * BIP39 English wordlist as a dictionary (11 bits per word). Because
+ * Shamir shares include metadata (bit-width, share index) and internal
+ * padding, they are larger than the original 32-byte entropy, so they
+ * cannot be represented as standard BIP39 mnemonics. Instead, the
+ * service uses a raw 11-bit-per-word encoding that preserves the full
+ * share hex string for lossless round-trip reconstruction.
+ *
+ * Requirements: 2.1, 2.2, 2.3, 2.4, 2.7
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SplitPaperKeyService = void 0;
+const secretsModule = require("@digitaldefiance/secrets");
+const bip39_1 = require("@scure/bip39");
+const english_1 = require("@scure/bip39/wordlists/english");
+const QRCode = require("qrcode");
+const constants_1 = require("../../constants");
+// Handle both ESM default export and CommonJS module.exports patterns
+const secrets = secretsModule
+    .default ?? secretsModule;
+/**
+ * Number of bits encoded per BIP39 wordlist word (2048 words = 2^11).
+ */
+const BITS_PER_WORD = 11;
+/**
+ * Minimum threshold for Shamir's Secret Sharing.
+ * A threshold of 1 is meaningless — every share IS the secret.
+ */
+const MIN_THRESHOLD = 2;
+/**
+ * Expected byte length of 256-bit BIP39 entropy (24-word mnemonic).
+ */
+const EXPECTED_ENTROPY_BYTES = 32;
+// ─── Hex ↔ Word-list encoding ───────────────────────────────────────────────
+//
+// Shamir share strings are arbitrary-length hex and cannot be fed to
+// `entropyToMnemonic` (which requires 16/20/24/28/32-byte entropy).
+// We encode them as words by chunking the hex into 11-bit groups and
+// mapping each group to a BIP39 wordlist entry.  The encoding is
+// fully reversible.
+/**
+ * Encode an arbitrary hex string as a sequence of BIP39 wordlist words.
+ *
+ * The hex is converted to a binary string, left-padded to a multiple of
+ * {@link BITS_PER_WORD} bits, then split into 11-bit chunks. Each chunk
+ * indexes into the BIP39 English wordlist.
+ *
+ * @param hex - Hex string to encode (no `0x` prefix)
+ * @returns Array of BIP39 words representing the hex value
+ */
+function hexToWords(hex) {
+    // Convert hex → binary string
+    let binary = '';
+    for (const ch of hex) {
+        binary += parseInt(ch, 16).toString(2).padStart(4, '0');
+    }
+    // Pad to a multiple of BITS_PER_WORD
+    const remainder = binary.length % BITS_PER_WORD;
+    if (remainder !== 0) {
+        binary = '0'.repeat(BITS_PER_WORD - remainder) + binary;
+    }
+    const words = [];
+    for (let i = 0; i < binary.length; i += BITS_PER_WORD) {
+        const chunk = binary.slice(i, i + BITS_PER_WORD);
+        const index = parseInt(chunk, 2);
+        words.push(english_1.wordlist[index]);
+    }
+    return words;
+}
+/**
+ * Decode a sequence of BIP39 wordlist words back to a hex string.
+ *
+ * Each word is looked up in the BIP39 English wordlist to recover its
+ * 11-bit index. The concatenated binary is then converted back to hex.
+ *
+ * @param words - Array of BIP39 words previously produced by {@link hexToWords}
+ * @returns The original hex string
+ * @throws {Error} If any word is not in the BIP39 English wordlist
+ */
+function wordsToHex(words) {
+    let binary = '';
+    for (const word of words) {
+        const index = english_1.wordlist.indexOf(word);
+        if (index === -1) {
+            throw new Error(`Word "${word}" is not in the BIP39 English wordlist`);
+        }
+        binary += index.toString(2).padStart(BITS_PER_WORD, '0');
+    }
+    // Convert binary → hex, stripping leading zeros that were padding
+    // We need groups of 4 bits for hex conversion
+    const remainder = binary.length % 4;
+    if (remainder !== 0) {
+        binary = '0'.repeat(4 - remainder) + binary;
+    }
+    let hex = '';
+    for (let i = 0; i < binary.length; i += 4) {
+        hex += parseInt(binary.slice(i, i + 4), 2).toString(16);
+    }
+    // Strip leading zeros but preserve at least one character
+    hex = hex.replace(/^0+/, '') || '0';
+    return hex;
+}
+// ─── Secrets library initialisation ─────────────────────────────────────────
+/**
+ * Initialise (or re-initialise) the `@digitaldefiance/secrets` library
+ * with the correct Galois Field bit-width for the requested number of
+ * shares.
+ *
+ * The bit-width determines the maximum share count: `2^bits − 1`.
+ * We clamp to the range [3, 20] as required by the library.
+ *
+ * @param maxShares - Maximum number of shares that will be generated
+ */
+function initSecrets(maxShares) {
+    const bits = Math.max(3, Math.ceil(Math.log2(maxShares + 1)));
+    if (bits < 3 || bits > 20) {
+        throw new Error(`Cannot initialise secrets library: computed ${bits} bits for ${maxShares} shares (valid range: 3–20)`);
+    }
+    let csprngType = 'nodeCryptoRandomBytes';
+    try {
+        const config = secrets.getConfig();
+        if (config?.typeCSPRNG) {
+            csprngType = config.typeCSPRNG;
+        }
+    }
+    catch {
+        // Library not yet initialised — use default
+    }
+    secrets.init(bits, csprngType);
+}
+// ─── Validation helpers ─────────────────────────────────────────────────────
+/**
+ * Validate split parameters against system constraints.
+ *
+ * @throws {Error} If any parameter is out of range
+ */
+function validateSplitParams(paperKey, shares, threshold) {
+    if (!(0, bip39_1.validateMnemonic)(paperKey, english_1.wordlist)) {
+        throw new Error('Invalid paper key: not a valid BIP39 mnemonic');
+    }
+    const words = paperKey.trim().split(/\s+/);
+    if (words.length !== 24) {
+        throw new Error(`Invalid paper key: expected 24 words, got ${words.length}`);
+    }
+    if (!Number.isInteger(shares) || shares < constants_1.SEALING.MIN_SHARES) {
+        throw new Error(`Number of shares must be an integer ≥ ${constants_1.SEALING.MIN_SHARES}, got ${shares}`);
+    }
+    if (shares > constants_1.SEALING.MAX_SHARES) {
+        throw new Error(`Number of shares must be ≤ ${constants_1.SEALING.MAX_SHARES}, got ${shares}`);
+    }
+    if (!Number.isInteger(threshold) || threshold < MIN_THRESHOLD) {
+        throw new Error(`Threshold must be an integer ≥ ${MIN_THRESHOLD}, got ${threshold}`);
+    }
+    if (threshold > shares) {
+        throw new Error(`Threshold (${threshold}) cannot exceed number of shares (${shares})`);
+    }
+}
+// ─── Service ────────────────────────────────────────────────────────────────
+/**
+ * Service for splitting and reconstructing BIP39 paper keys using
+ * Shamir's Secret Sharing.
+ *
+ * All methods are static — the service is stateless and safe to call
+ * from any context (browser or Node.js).
+ *
+ * @example
+ * ```typescript
+ * // Split a 24-word paper key into 5 shares, requiring 3 to reconstruct
+ * const shares = SplitPaperKeyService.split(paperKey, 5, 3);
+ *
+ * // Reconstruct from any 3 shares
+ * const recovered = SplitPaperKeyService.reconstruct(shares, 5);
+ *
+ * // Generate a printable template for share #1
+ * const template = await SplitPaperKeyService.generateShareTemplate(
+ *   shares[0], 1, 5, 3,
+ * );
+ * ```
+ */
+class SplitPaperKeyService {
+    /**
+     * Split a 24-word BIP39 paper key into N Shamir shares.
+     *
+     * The paper key mnemonic is converted to its 32-byte entropy, then
+     * the entropy hex is split using Shamir's Secret Sharing. Each
+     * resulting share hex is encoded as human-readable words using the
+     * BIP39 wordlist (11 bits per word).
+     *
+     * **Validates: Requirements 2.1, 2.2, 2.3**
+     *
+     * @param paperKey - A valid 24-word BIP39 mnemonic
+     * @param shares  - Total number of shares to generate (2–1,048,575)
+     * @param threshold - Minimum shares needed to reconstruct (2–shares)
+     * @returns Array of word-encoded share strings (space-separated words)
+     * @throws {Error} If the paper key is invalid or parameters are out of range
+     */
+    static split(paperKey, shares, threshold) {
+        validateSplitParams(paperKey, shares, threshold);
+        // Requirement 2.2: Convert BIP39 mnemonic → raw entropy bytes
+        const entropyBytes = (0, bip39_1.mnemonicToEntropy)(paperKey, english_1.wordlist);
+        if (entropyBytes.length !== EXPECTED_ENTROPY_BYTES) {
+            throw new Error(`Unexpected entropy length: expected ${EXPECTED_ENTROPY_BYTES} bytes, got ${entropyBytes.length}`);
+        }
+        // Convert entropy to hex for the secrets library
+        const entropyHex = Buffer.from(entropyBytes).toString('hex');
+        // Initialise secrets library for the requested share count
+        initSecrets(shares);
+        // Requirement 2.1: Split using Shamir's Secret Sharing
+        // padLength=0 preserves the exact hex length (no extra zero-padding)
+        const shamirShares = secrets.share(entropyHex, shares, threshold, 0);
+        // Requirement 2.3: Convert each share to human-readable words
+        return shamirShares.map((shareHex) => {
+            const words = hexToWords(shareHex);
+            return words.join(' ');
+        });
+    }
+    /**
+     * Reconstruct a paper key from T or more Shamir shares.
+     *
+     * The word-encoded shares are decoded back to hex, combined using
+     * Shamir's Secret Sharing, and the resulting entropy is converted
+     * back to a 24-word BIP39 mnemonic.
+     *
+     * **Validates: Requirement 2.4**
+     *
+     * @param shares - Array of word-encoded share strings (at least threshold count)
+     * @param totalShares - The total number of shares originally created
+     *                      (needed to re-initialise the secrets library with
+     *                      the correct Galois Field bit-width)
+     * @returns The original 24-word BIP39 paper key
+     * @throws {Error} If shares are invalid or reconstruction fails
+     */
+    static reconstruct(shares, totalShares) {
+        if (!Array.isArray(shares) || shares.length < MIN_THRESHOLD) {
+            throw new Error(`At least ${MIN_THRESHOLD} shares are required for reconstruction`);
+        }
+        if (!Number.isInteger(totalShares) ||
+            totalShares < constants_1.SEALING.MIN_SHARES ||
+            totalShares > constants_1.SEALING.MAX_SHARES) {
+            throw new Error(`totalShares must be an integer between ${constants_1.SEALING.MIN_SHARES} and ${constants_1.SEALING.MAX_SHARES}`);
+        }
+        // Decode word-encoded shares back to hex
+        const hexShares = shares.map((shareWords) => {
+            const words = shareWords.trim().split(/\s+/);
+            return wordsToHex(words);
+        });
+        // Re-initialise secrets library with the same bit-width used during split
+        initSecrets(totalShares);
+        // Combine shares to recover the original entropy hex
+        const recoveredHex = secrets.combine(hexShares);
+        // Convert hex → bytes → BIP39 mnemonic
+        const entropyBytes = new Uint8Array(Buffer.from(recoveredHex, 'hex'));
+        // The recovered entropy should be exactly 32 bytes for a 24-word mnemonic
+        if (entropyBytes.length !== EXPECTED_ENTROPY_BYTES) {
+            throw new Error(`Reconstruction produced ${entropyBytes.length} bytes of entropy; expected ${EXPECTED_ENTROPY_BYTES}. ` +
+                'Ensure the correct number of valid shares and totalShares were provided.');
+        }
+        const mnemonic = (0, bip39_1.entropyToMnemonic)(entropyBytes, english_1.wordlist);
+        // Sanity check: the result must be a valid BIP39 mnemonic
+        if (!(0, bip39_1.validateMnemonic)(mnemonic, english_1.wordlist)) {
+            throw new Error('Reconstructed mnemonic failed BIP39 validation. ' +
+                'The shares may be corrupted or from different split operations.');
+        }
+        return mnemonic;
+    }
+    /**
+     * Generate a printable template for a single share.
+     *
+     * Produces an {@link ISplitPaperKeyShare} containing the share words,
+     * a QR code data URL for mobile scanning, and human-readable
+     * instructions with share number, total count, and threshold.
+     *
+     * **Validates: Requirement 2.7**
+     *
+     * @param share       - Space-separated word-encoded share string
+     * @param shareNumber - 1-based index of this share
+     * @param totalShares - Total number of shares created
+     * @param threshold   - Minimum shares needed to reconstruct
+     * @returns A promise resolving to the complete {@link ISplitPaperKeyShare}
+     */
+    static async generateShareTemplate(share, shareNumber, totalShares, threshold) {
+        const words = share.trim().split(/\s+/);
+        const qrCode = await QRCode.toDataURL(share);
+        return {
+            shareNumber,
+            totalShares,
+            threshold,
+            words,
+            qrCode,
+            createdAt: new Date(),
+            instructions: `This is share ${shareNumber} of ${totalShares}. ` +
+                `You need ${threshold} shares to recover your account.`,
+        };
+    }
+}
+exports.SplitPaperKeyService = SplitPaperKeyService;
+//# sourceMappingURL=splitPaperKeyService.js.map

package/src/lib/services/identity/splitPaperKeyService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"splitPaperKeyService.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/identity/splitPaperKeyService.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAGH,0DAA0D;AAC1D,wCAIsB;AACtB,4DAA0D;AAC1D,iCAAiC;AAEjC,+CAA0C;AAG1C,sEAAsE;AACtE,MAAM,OAAO,GACV,aAA2E;KACzE,OAAO,IAAI,aAAa,CAAC;AAE9B;;GAEG;AACH,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB;;;GAGG;AACH,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB;;GAEG;AACH,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,+EAA+E;AAC/E,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,qEAAqE;AACrE,iEAAiE;AACjE,oBAAoB;AAEpB;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,8BAA8B;IAC9B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,qCAAqC;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,aAAa,CAAC;IAChD,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,kBAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,KAAe;IACjC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,kBAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,wCAAwC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC;IAED,kEAAkE;IAClE,8CAA8C;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACpC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC;IAC9C,CAAC;IAED,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,0DAA0D;IAC1D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,SAAiB;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,aAAa,SAAS,6BAA6B,CACvG,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAe,uBAAuB,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;YACvB,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,MAAc,EACd,SAAiB;IAEjB,IAAI,CAAC,IAAA,wBAAgB,EAAC,QAAQ,EAAE,kBAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,6CAA6C,KAAK,CAAC,MAAM,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,mBAAO,CAAC,UAAU,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,yCAAyC,mBAAO,CAAC,UAAU,SAAS,MAAM,EAAE,CAC7E,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,GAAG,mBAAO,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,8BAA8B,mBAAO,CAAC,UAAU,SAAS,MAAM,EAAE,CAClE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,aAAa,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,kCAAkC,aAAa,SAAS,SAAS,EAAE,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,qCAAqC,MAAM,GAAG,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,oBAAoB;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,KAAK,CAAC,QAAgB,EAAE,MAAc,EAAE,SAAiB;QAC9D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAEjD,8DAA8D;QAC9D,MAAM,YAAY,GAAG,IAAA,yBAAiB,EAAC,QAAQ,EAAE,kBAAQ,CAAC,CAAC;QAC3D,IAAI,YAAY,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,uCAAuC,sBAAsB,eAAe,YAAY,CAAC,MAAM,EAAE,CAClG,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE7D,2DAA2D;QAC3D,WAAW,CAAC,MAAM,CAAC,CAAC;QAEpB,uDAAuD;QACvD,qEAAqE;QACrE,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAErE,8DAA8D;QAC9D,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,QAAgB,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,WAAW,CAAC,MAAgB,EAAE,WAAmB;QACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,YAAY,aAAa,yCAAyC,CACnE,CAAC;QACJ,CAAC;QAED,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC;YAC9B,WAAW,GAAG,mBAAO,CAAC,UAAU;YAChC,WAAW,GAAG,mBAAO,CAAC,UAAU,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,0CAA0C,mBAAO,CAAC,UAAU,QAAQ,mBAAO,CAAC,UAAU,EAAE,CACzF,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,WAAW,CAAC,WAAW,CAAC,CAAC;QAEzB,qDAAqD;QACrD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhD,uCAAuC;QACvC,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;QAEtE,0EAA0E;QAC1E,IAAI,YAAY,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,2BAA2B,YAAY,CAAC,MAAM,+BAA+B,sBAAsB,IAAI;gBACrG,0EAA0E,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,yBAAiB,EAAC,YAAY,EAAE,kBAAQ,CAAC,CAAC;QAE3D,0DAA0D;QAC1D,IAAI,CAAC,IAAA,wBAAgB,EAAC,QAAQ,EAAE,kBAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,kDAAkD;gBAChD,iEAAiE,CACpE,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAChC,KAAa,EACb,WAAmB,EACnB,WAAmB,EACnB,SAAiB;QAEjB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAE7C,OAAO;YACL,WAAW;YACX,WAAW;YACX,SAAS;YACT,KAAK;YACL,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,YAAY,EACV,iBAAiB,WAAW,OAAO,WAAW,IAAI;gBAClD,YAAY,SAAS,kCAAkC;SAC1D,CAAC;IACJ,CAAC;CACF;AAtJD,oDAsJC"}

package/src/lib/services/index.d.ts

@@ -13,5 +13,9 @@ export * from './serviceLocator';
 export * from './symmetric.service';
 export * from './tuple.service';
 export * from './tupleStorageService';
+export * from './vcblService';
 export * from './xor';
+export * from './brightpass';
+export * from './communication';
+export * from './identity';
 //# sourceMappingURL=index.d.ts.map

package/src/lib/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../brightchain-lib/src/lib/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,OAAO,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../brightchain-lib/src/lib/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,OAAO,CAAC;AAGtB,cAAc,cAAc,CAAC;AAG7B,cAAc,iBAAiB,CAAC;AAGhC,cAAc,YAAY,CAAC"}

package/src/lib/services/index.js

@@ -16,5 +16,12 @@ tslib_1.__exportStar(require("./serviceLocator"), exports);
 tslib_1.__exportStar(require("./symmetric.service"), exports);
 tslib_1.__exportStar(require("./tuple.service"), exports);
 tslib_1.__exportStar(require("./tupleStorageService"), exports);
+tslib_1.__exportStar(require("./vcblService"), exports);
 tslib_1.__exportStar(require("./xor"), exports);
+// BrightPass services (password management)
+tslib_1.__exportStar(require("./brightpass"), exports);
+// Communication services (direct messaging, groups, channels)
+tslib_1.__exportStar(require("./communication"), exports);
+// Identity services (paper keys, identity proofs, directory)
+tslib_1.__exportStar(require("./identity"), exports);
 //# sourceMappingURL=index.js.map

package/src/lib/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../brightchain-lib/src/lib/services/index.ts"],"names":[],"mappings":";;;AAAA,kEAAwC;AACxC,yDAA+B;AAC/B,uDAA6B;AAC7B,6DAAmC;AACnC,wDAA8B;AAC9B,mDAAyB;AACzB,wDAA8B;AAC9B,sDAA4B;AAC5B,0DAAgC;AAChC,4DAAkC;AAClC,6DAAmC;AACnC,2DAAiC;AACjC,8DAAoC;AACpC,0DAAgC;AAChC,gEAAsC;AACtC,gDAAsB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../brightchain-lib/src/lib/services/index.ts"],"names":[],"mappings":";;;AAAA,kEAAwC;AACxC,yDAA+B;AAC/B,uDAA6B;AAC7B,6DAAmC;AACnC,wDAA8B;AAC9B,mDAAyB;AACzB,wDAA8B;AAC9B,sDAA4B;AAC5B,0DAAgC;AAChC,4DAAkC;AAClC,6DAAmC;AACnC,2DAAiC;AACjC,8DAAoC;AACpC,0DAAgC;AAChC,gEAAsC;AACtC,wDAA8B;AAC9B,gDAAsB;AAEtB,4CAA4C;AAC5C,uDAA6B;AAE7B,8DAA8D;AAC9D,0DAAgC;AAEhC,6DAA6D;AAC7D,qDAA2B"}

package/src/lib/services/messaging/deliveryTimeoutService.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DeliveryTimeoutService = void 0;
 const enumerations_1 = require("../../enumerations");
-const messageDeliveryStatus_1 = require("../../enumerations/messaging/messageDeliveryStatus");
+const deliveryStatus_1 = require("../../enumerations/messaging/deliveryStatus");
 const i18n_1 = require("../../i18n");
 /**
  * Service for handling message delivery timeouts
@@ -93,7 +93,7 @@ class DeliveryTimeoutService {
      */
     async handleTimeout(messageId, recipientId) {
         try {
-            await this.metadataStore.updateDeliveryStatus(messageId, recipientId, messageDeliveryStatus_1.MessageDeliveryStatus.FAILED);
+            await this.metadataStore.updateDeliveryStatus(messageId, recipientId, deliveryStatus_1.DeliveryStatus.Failed);
             this.clearDeliveryAttempt(messageId, recipientId);
             if (this.failureCallback) {
                 this.failureCallback(messageId, recipientId);

package/src/lib/services/messaging/deliveryTimeoutService.js.map

@@ -1 +1 @@
-{"version":3,"file":"deliveryTimeoutService.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/deliveryTimeoutService.ts"],"names":[],"mappings":";;;AAAA,qDAAwD;AACxD,8FAA2F;AAC3F,qCAAuC;AAuBvC;;;GAGG;AACH,MAAa,sBAAsB;IAMjC,YACmB,aAAoC,EACrD,MAAuC;QADtB,kBAAa,GAAb,aAAa,CAAuB;QAN/C,qBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;QAS5D,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK;YACrC,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,IAAI;SACjD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,WAAmB;QACzD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;gBAC7B,SAAS;gBACT,WAAW;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,WAAmB;QACzD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,QAA0D;QAE1D,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAsD,EAAE,CAAC;QAEvE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAE5D,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAC3C,SAAS,EACT,WAAW,EACX,6CAAqB,CAAC,MAAM,CAC7B,CAAC;YAEF,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAElD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,OAAO,CAAC,KAAK,CACX,IAAA,gBAAS,EACP,iCAAkB,CAAC,6CAA6C,EAChE;gBACE,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,WAAW;aAC1B,CACF,EACD,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB,EAAE,WAAmB;QACpD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,kBAAkB;QAMhB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AA7JD,wDA6JC"}
+{"version":3,"file":"deliveryTimeoutService.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/deliveryTimeoutService.ts"],"names":[],"mappings":";;;AAAA,qDAAwD;AACxD,gFAA6E;AAC7E,qCAAuC;AAuBvC;;;GAGG;AACH,MAAa,sBAAsB;IAMjC,YACmB,aAAoC,EACrD,MAAuC;QADtB,kBAAa,GAAb,aAAa,CAAuB;QAN/C,qBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;QAS5D,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK;YACrC,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,IAAI;SACjD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,WAAmB;QACzD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpB,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE;gBAC7B,SAAS;gBACT,WAAW;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,WAAmB;QACzD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,QAA0D;QAE1D,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAsD,EAAE,CAAC;QAEvE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAE5D,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAC3C,SAAS,EACT,WAAW,EACX,+BAAc,CAAC,MAAM,CACtB,CAAC;YAEF,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAElD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,OAAO,CAAC,KAAK,CACX,IAAA,gBAAS,EACP,iCAAkB,CAAC,6CAA6C,EAChE;gBACE,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,WAAW;aAC1B,CACF,EACD,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB,EAAE,WAAmB;QACpD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,kBAAkB;QAMhB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AA7JD,wDA6JC"}

package/src/lib/services/messaging/emailEncryptionService.d.ts

@@ -0,0 +1,250 @@
+/**
+ * Email Encryption Service
+ *
+ * Provides encryption, decryption, signing, and signature verification
+ * for email messages in the BrightChain messaging system.
+ *
+ * Supports:
+ * - ECIES (per-recipient public key encryption via BlockECIES)
+ * - Symmetric encryption (AES-256-GCM with a shared key)
+ * - S/MIME-style digital signatures (sign with sender's private key, verify with public key)
+ *
+ * @see Requirements 16.1, 16.3, 16.4, 16.5, 16.6, 16.7, 16.8
+ */
+import { MessageEncryptionScheme } from '../../enumerations/messaging/messageEncryptionScheme';
+/**
+ * Encryption metadata stored alongside an encrypted email.
+ *
+ * @see Requirement 16.7 - Store encryption metadata in Email_Metadata
+ */
+export interface IEmailEncryptionMetadata {
+    /** The encryption scheme used */
+    scheme: MessageEncryptionScheme;
+    /**
+     * Per-recipient encrypted symmetric key (base64-encoded).
+     * Only present when scheme is RECIPIENT_KEYS.
+     * Maps recipient address to their ECIES-encrypted copy of the symmetric key.
+     */
+    encryptedKeys?: Map<string, Uint8Array>;
+    /** Initialization vector used for symmetric encryption (base64) */
+    iv?: Uint8Array;
+    /** Authentication tag from AES-GCM (base64) */
+    authTag?: Uint8Array;
+    /** Whether the email is signed */
+    isSigned: boolean;
+    /** Digital signature bytes (if signed) */
+    signature?: Uint8Array;
+    /** Public key of the signer (for verification) */
+    signerPublicKey?: Uint8Array;
+}
+/**
+ * Result of encrypting email content for a single recipient.
+ */
+export interface IEncryptedEmailContent {
+    /** The encrypted content bytes */
+    encryptedContent: Uint8Array;
+    /** Encryption metadata for this recipient */
+    encryptionMetadata: IEmailEncryptionMetadata;
+}
+/**
+ * Result of encrypting email content for multiple recipients.
+ */
+export interface IPerRecipientEncryptionResult {
+    /**
+     * The encrypted content (encrypted once with a symmetric key).
+     * All recipients share the same ciphertext; each gets the symmetric key
+     * encrypted with their own public key.
+     */
+    encryptedContent: Uint8Array;
+    /** Encryption metadata including per-recipient encrypted keys */
+    encryptionMetadata: IEmailEncryptionMetadata;
+}
+/**
+ * Result of signing email content.
+ */
+export interface ISignatureResult {
+    /** The digital signature bytes */
+    signature: Uint8Array;
+    /** The public key of the signer */
+    signerPublicKey: Uint8Array;
+}
+/**
+ * Service for encrypting and decrypting email content.
+ *
+ * Encryption flow (ECIES / RECIPIENT_KEYS):
+ * 1. Generate a random AES-256-GCM symmetric key
+ * 2. Encrypt the email content with the symmetric key
+ * 3. Encrypt the symmetric key with each recipient's ECIES public key
+ * 4. Store the encrypted content + per-recipient encrypted keys
+ *
+ * Encryption flow (SYMMETRIC / SHARED_KEY):
+ * 1. Use the provided shared symmetric key directly
+ * 2. Encrypt the email content with AES-256-GCM
+ *
+ * @see Requirements 16.1, 16.3, 16.4, 16.5, 16.6, 16.7, 16.8
+ */
+export declare class EmailEncryptionService {
+    /**
+     * Encrypts email content using ECIES for a single recipient.
+     *
+     * Generates a random AES-256-GCM key, encrypts the content, then
+     * encrypts the symmetric key with the recipient's ECIES public key.
+     *
+     * @param content - Plaintext email content
+     * @param recipientPublicKey - Recipient's ECIES public key
+     * @returns Encrypted content and encryption metadata
+     * @throws {EmailError} If encryption fails
+     *
+     * @see Requirement 16.1 - End-to-end encryption using ECIES
+     * @see Requirement 16.3 - Encrypt content blocks using recipient's public key
+     */
+    encryptContent(content: Uint8Array, recipientPublicKey: Uint8Array): Promise<IEncryptedEmailContent>;
+    /**
+     * Encrypts email content using a shared symmetric key (AES-256-GCM).
+     *
+     * @param content - Plaintext email content
+     * @param sharedKey - 32-byte shared symmetric key
+     * @returns Encrypted content and encryption metadata
+     * @throws {EmailError} If encryption fails
+     *
+     * @see Requirement 16.1 - Support SYMMETRIC encryption scheme
+     */
+    encryptContentSymmetric(content: Uint8Array, sharedKey: Uint8Array): IEncryptedEmailContent;
+    /**
+     * Decrypts email content encrypted with ECIES (RECIPIENT_KEYS scheme).
+     *
+     * 1. Decrypts the per-recipient symmetric key using the recipient's private key
+     * 2. Decrypts the content using the recovered symmetric key
+     *
+     * @param encryptedContent - The encrypted email content
+     * @param metadata - Encryption metadata containing the encrypted key, IV, and auth tag
+     * @param recipientAddress - The recipient's address (key in encryptedKeys map)
+     * @param recipientPrivateKey - The recipient's ECIES private key
+     * @returns Decrypted plaintext content
+     * @throws {EmailError} If decryption fails
+     */
+    decryptContent(encryptedContent: Uint8Array, metadata: IEmailEncryptionMetadata, recipientAddress: string, recipientPrivateKey: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Decrypts email content encrypted with a shared symmetric key.
+     *
+     * @param encryptedContent - The encrypted email content
+     * @param metadata - Encryption metadata containing IV and auth tag
+     * @param sharedKey - The 32-byte shared symmetric key
+     * @returns Decrypted plaintext content
+     * @throws {EmailError} If decryption fails
+     */
+    decryptContentSymmetric(encryptedContent: Uint8Array, metadata: IEmailEncryptionMetadata, sharedKey: Uint8Array): Uint8Array;
+    /**
+     * Encrypts email content for multiple recipients.
+     *
+     * Generates a single symmetric key, encrypts the content once,
+     * then encrypts the symmetric key separately for each recipient
+     * using their ECIES public key.
+     *
+     * @param content - Plaintext email content
+     * @param recipientPublicKeys - Map of recipient address to their ECIES public key
+     * @returns Encrypted content and per-recipient encryption metadata
+     * @throws {EmailError} If encryption fails for any recipient
+     *
+     * @see Requirement 16.4 - Create separate encrypted copies for each recipient
+     * @see Requirement 16.7 - Store encryption metadata in Email_Metadata
+     */
+    encryptForRecipients(content: Uint8Array, recipientPublicKeys: Map<string, Uint8Array>): Promise<IPerRecipientEncryptionResult>;
+    /**
+     * Signs email content with the sender's private key.
+     *
+     * Creates a SHA-256 hash of the content and encrypts it with the
+     * sender's private key using ECIES to produce a digital signature.
+     * The signature can be verified by anyone with the sender's public key.
+     *
+     * @param content - The email content to sign
+     * @param senderPrivateKey - The sender's ECIES private key
+     * @param senderPublicKey - The sender's ECIES public key (stored with signature)
+     * @returns The signature and signer's public key
+     * @throws {EmailError} If signing fails
+     *
+     * @see Requirement 16.5 - S/MIME signatures for sender authentication
+     */
+    signContent(content: Uint8Array, senderPrivateKey: Uint8Array, senderPublicKey: Uint8Array): ISignatureResult;
+    /**
+     * Verifies a digital signature on email content.
+     *
+     * Recomputes the signature using the provided private key and compares
+     * it to the stored signature. In a production S/MIME implementation,
+     * this would use ECDSA verification with only the public key.
+     *
+     * @param content - The email content that was signed
+     * @param signature - The signature to verify
+     * @param signerPrivateKey - The signer's private key (needed for HMAC verification)
+     * @returns true if the signature is valid
+     *
+     * @see Requirement 16.8 - Verify sender's signature on decryption
+     */
+    verifySignature(content: Uint8Array, signature: Uint8Array, signerPrivateKey: Uint8Array): boolean;
+    /**
+     * Encrypts and signs email content for multiple recipients.
+     *
+     * Combines per-recipient encryption with digital signing:
+     * 1. Signs the plaintext content with the sender's private key
+     * 2. Encrypts the content for all recipients
+     * 3. Returns encrypted content with signature metadata
+     *
+     * @param content - Plaintext email content
+     * @param recipientPublicKeys - Map of recipient address to ECIES public key
+     * @param senderPrivateKey - Sender's private key for signing
+     * @param senderPublicKey - Sender's public key (stored with signature)
+     * @returns Encrypted content with signature metadata
+     *
+     * @see Requirements 16.4, 16.5
+     */
+    encryptAndSign(content: Uint8Array, recipientPublicKeys: Map<string, Uint8Array>, senderPrivateKey: Uint8Array, senderPublicKey: Uint8Array): Promise<IPerRecipientEncryptionResult>;
+    /**
+     * Decrypts email content and verifies the sender's signature.
+     *
+     * @param encryptedContent - The encrypted email content
+     * @param metadata - Encryption metadata with signature info
+     * @param recipientAddress - The recipient's address
+     * @param recipientPrivateKey - The recipient's private key for decryption
+     * @param signerPrivateKey - The signer's private key for HMAC verification
+     * @returns Decrypted content
+     * @throws {EmailError} If decryption or signature verification fails
+     *
+     * @see Requirement 16.8 - Verify sender's signature on decryption
+     */
+    decryptAndVerify(encryptedContent: Uint8Array, metadata: IEmailEncryptionMetadata, recipientAddress: string, recipientPrivateKey: Uint8Array, signerPrivateKey: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Encrypts email content using S/MIME-style encryption.
+     *
+     * S/MIME encryption combines signing and per-recipient encryption:
+     * 1. Signs the content with the sender's private key
+     * 2. Encrypts the signed content for each recipient using ECIES
+     *
+     * This is equivalent to `encryptAndSign` but explicitly sets the
+     * scheme to S_MIME for metadata tracking.
+     *
+     * @param content - Plaintext email content
+     * @param recipientPublicKeys - Map of recipient address to ECIES public key
+     * @param senderPrivateKey - Sender's private key for signing
+     * @param senderPublicKey - Sender's public key (stored with signature)
+     * @returns Encrypted content with S/MIME metadata
+     *
+     * @see Requirement 16.6 - S/MIME encryption as alternative method
+     */
+    encryptSmime(content: Uint8Array, recipientPublicKeys: Map<string, Uint8Array>, senderPrivateKey: Uint8Array, senderPublicKey: Uint8Array): Promise<IPerRecipientEncryptionResult>;
+    /**
+     * Decrypts S/MIME encrypted email content and verifies the signature.
+     *
+     * @param encryptedContent - The encrypted email content
+     * @param metadata - Encryption metadata with S/MIME info
+     * @param recipientAddress - The recipient's address
+     * @param recipientPrivateKey - The recipient's private key for decryption
+     * @param signerPrivateKey - The signer's private key for HMAC verification
+     * @returns Decrypted content
+     * @throws {EmailError} If decryption or signature verification fails
+     *
+     * @see Requirement 16.6 - S/MIME encryption
+     * @see Requirement 16.8 - Verify sender's signature on decryption
+     */
+    decryptSmime(encryptedContent: Uint8Array, metadata: IEmailEncryptionMetadata, recipientAddress: string, recipientPrivateKey: Uint8Array, signerPrivateKey: Uint8Array): Promise<Uint8Array>;
+}
+//# sourceMappingURL=emailEncryptionService.d.ts.map

package/src/lib/services/messaging/emailEncryptionService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailEncryptionService.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/emailEncryptionService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,OAAO,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAK/F;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,iCAAiC;IACjC,MAAM,EAAE,uBAAuB,CAAC;IAEhC;;;;OAIG;IACH,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAExC,mEAAmE;IACnE,EAAE,CAAC,EAAE,UAAU,CAAC;IAEhB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,UAAU,CAAC;IAErB,kCAAkC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAElB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,UAAU,CAAC;IAEvB,kDAAkD;IAClD,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,gBAAgB,EAAE,UAAU,CAAC;IAE7B,6CAA6C;IAC7C,kBAAkB,EAAE,wBAAwB,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,gBAAgB,EAAE,UAAU,CAAC;IAE7B,iEAAiE;IACjE,kBAAkB,EAAE,wBAAwB,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,SAAS,EAAE,UAAU,CAAC;IAEtB,mCAAmC;IACnC,eAAe,EAAE,UAAU,CAAC;CAC7B;AAID;;;;;;;;;;;;;;GAcG;AACH,qBAAa,sBAAsB;IAGjC;;;;;;;;;;;;;OAaG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,EACnB,kBAAkB,EAAE,UAAU,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAyClC;;;;;;;;;OASG;IACH,uBAAuB,CACrB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,GACpB,sBAAsB;IAoCzB;;;;;;;;;;;;OAYG;IACG,cAAc,CAClB,gBAAgB,EAAE,UAAU,EAC5B,QAAQ,EAAE,wBAAwB,EAClC,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,UAAU,GAC9B,OAAO,CAAC,UAAU,CAAC;IAsDtB;;;;;;;;OAQG;IACH,uBAAuB,CACrB,gBAAgB,EAAE,UAAU,EAC5B,QAAQ,EAAE,wBAAwB,EAClC,SAAS,EAAE,UAAU,GACpB,UAAU;IA6Bb;;;;;;;;;;;;;;OAcG;IACG,oBAAoB,CACxB,OAAO,EAAE,UAAU,EACnB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAC3C,OAAO,CAAC,6BAA6B,CAAC;IA4DzC;;;;;;;;;;;;;;OAcG;IACH,WAAW,CACT,OAAO,EAAE,UAAU,EACnB,gBAAgB,EAAE,UAAU,EAC5B,eAAe,EAAE,UAAU,GAC1B,gBAAgB;IA6BnB;;;;;;;;;;;;;OAaG;IACH,eAAe,CACb,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,gBAAgB,EAAE,UAAU,GAC3B,OAAO;IAqBV;;;;;;;;;;;;;;;OAeG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,EACnB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAC5C,gBAAgB,EAAE,UAAU,EAC5B,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,6BAA6B,CAAC;IAsBzC;;;;;;;;;;;;OAYG;IACG,gBAAgB,CACpB,gBAAgB,EAAE,UAAU,EAC5B,QAAQ,EAAE,wBAAwB,EAClC,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,UAAU,EAC/B,gBAAgB,EAAE,UAAU,GAC3B,OAAO,CAAC,UAAU,CAAC;IA+BtB;;;;;;;;;;;;;;;;;OAiBG;IACG,YAAY,CAChB,OAAO,EAAE,UAAU,EACnB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAC5C,gBAAgB,EAAE,UAAU,EAC5B,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,6BAA6B,CAAC;IAczC;;;;;;;;;;;;;OAaG;IACG,YAAY,CAChB,gBAAgB,EAAE,UAAU,EAC5B,QAAQ,EAAE,wBAAwB,EAClC,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,UAAU,EAC/B,gBAAgB,EAAE,UAAU,GAC3B,OAAO,CAAC,UAAU,CAAC;CASvB"}