@brightchain/brightchain-lib 0.29.26 → 0.30.1

package/src/lib/services/messaging/gpgKeyManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gpgKeyManager.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/gpgKeyManager.ts"],"names":[],"mappings":";;;AAAA,mEAAmE;AACnE,yEAAyE;AACzE,gFAA6E;AAC7E,kEAA+D;AAS/D;;;;;;;GAOG;AACH,MAAa,aAAa;IACxB,8DAA8D;IACtD,QAAQ,CAAM;IAEd,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD;;;;;;;;;;OAUG;IACH,KAAK,CAAC,eAAe,CACnB,IAAY,EACZ,KAAa,EACb,UAAkB;QAElB,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CACtC,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,WAAW,CAAC;gBACZ,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBAC1B,UAAU;gBACV,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,CACzB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAE1D,OAAO;gBACL,gBAAgB,EAAE,SAAS;gBAC3B,iBAAiB,EAAE,UAAU;gBAC7B,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,iBAAiB,EAChC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACtF,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,eAAe,EAC9B,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CAAC,gBAAwB;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAChB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC5C,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,eAAe,EAC9B,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,UAAkB;QAClC,IAAI,CAAC;YACH,+DAA+D;YAC/D,8EAA8E;YAC9E,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;YAClC,IACE,CAAC,OAAO,CAAC,QAAQ,CAAC,sCAAsC,CAAC;gBACzD,CAAC,OAAO,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EACvD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO,CACX,OAAmB,EACnB,0BAAoC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,0BAA0B,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5C,GAAG,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,CAC5B,CACF,CAAC;YAEF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7D,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC;gBACzC,OAAO;gBACP,cAAc;gBACd,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YAEH,OAAO,EAAE,gBAAgB,EAAE,gBAA0B,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,kBAAkB,EACjC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAClF,EAAE,cAAc,EAAE,0BAA0B,CAAC,MAAM,EAAE,CACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CACX,gBAAwB,EACxB,iBAAyB,EACzB,UAAkB;QAElB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CACvB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,cAAc,CAAC;gBACf,UAAU,EAAE,iBAAiB;aAC9B,CAAC,CAAC;YACH,MAAM,mBAAmB,GAAG,MAAM,CAChC,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,UAAU,CAAC;gBACX,UAAU;gBACV,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CACpB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,WAAW,CAAC;gBACZ,cAAc,EAAE,gBAAgB;aACjC,CAAC,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CACrB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,OAAO,CAAC;gBACR,OAAO;gBACP,cAAc,EAAE,mBAAmB;gBACnC,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YAEH,OAAO,IAAkB,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,kBAAkB,EACjC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,CACR,OAAmB,EACnB,iBAAyB,EACzB,UAAkB;QAElB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CACvB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,cAAc,CAAC;gBACf,UAAU,EAAE,iBAAiB;aAC9B,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,CACzB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,UAAU,CAAC;gBACX,UAAU;gBACV,UAAU;aACX,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CACpB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,MAAM,CACtB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,IAAI,CAAC;gBACL,OAAO;gBACP,WAAW,EAAE,YAAY;gBACzB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC;YAEpD,OAAO;gBACL,SAAS,EAAE,SAAmB;gBAC9B,WAAW;aACZ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,iBAAiB,EAChC,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,CACV,OAAmB,EACnB,SAAiB,EACjB,sBAA8B;QAE9B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CACtB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,OAAO,CAAC;gBACR,UAAU,EAAE,sBAAsB;aACnC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CACpB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,MAAM,CAChB,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,aAAa,CAAC;gBACd,gBAAgB,EAAE,SAAS;aAC5B,CAAC,CAAC;YAEH,MAAM,kBAAkB,GAAG,MAAM,CAC/B,MAAM,IAAI,CAAC,OAAO,EAAE,CACrB,CAAC,MAAM,CAAC;gBACP,OAAO;gBACP,SAAS,EAAE,GAAG;gBACd,gBAAgB,EAAE,SAAS;aAC5B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC;YAEjD,IAAI,CAAC;gBACH,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAChD,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,WAAW;iBACZ,CAAC;YACJ,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,WAAW;oBACX,MAAM,EACJ,WAAW,YAAY,KAAK;wBAC1B,CAAC,CAAC,WAAW,CAAC,OAAO;wBACrB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;iBAC1B,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,iBAAiB,EAChC,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,kBAAkB,CACtB,gBAAwB,EACxB,YAAoB;QAEpB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,UAAU,EAAE;gBACtD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,WAAW,kBAAkB,CAAC,gBAAgB,CAAC,EAAE;aACxD,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACb,2BAA2B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,mBAAmB,EAClC,uCAAuC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC/F,EAAE,YAAY,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,eAAe,CACnB,KAAa,EACb,YAAoB;QAEpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,YAAY,6BAA6B,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC;YAC/F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAElC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACb,2BAA2B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CACrE,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,MAAM,KAAK,GACT,iFAAiF,CAAC;YACpF,IAAI,KAA6B,CAAC;YAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAU,EAAE,CAAC;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,mBAAmB,EAClC,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACvF,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,8DAA8D;IACtD,KAAK,CAAC,eAAe,CAAC,GAAQ;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAE7C,IAAI,SAAS,GAAgB,IAAI,CAAC;QAClC,IAAI,cAAc,YAAY,IAAI,EAAE,CAAC;YACnC,SAAS,GAAG,cAAc,CAAC;QAC7B,CAAC;QACD,8EAA8E;QAE9E,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK;YACnC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAC7B,CAAC,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAExF,OAAO;YACL,KAAK;YACL,WAAW;YACX,SAAS;YACT,SAAS;YACT,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE;YACxB,SAAS;SACV,CAAC;IACJ,CAAC;CACF;AAleD,sCAkeC"}

package/src/lib/services/messaging/index.d.ts

@@ -7,10 +7,13 @@ export * from './emailParser';
 export * from './emailSerializer';
 export { EmailValidator, type IValidationError, type IValidationResult, type IAttachmentInput as IValidatorAttachmentInput, type IEmailInput as IValidatorEmailInput, } from './emailValidator';
 export * from './gossipRetryService';
+export * from './gpgKeyManager';
 export * from './inMemoryEmailMetadataStore';
 export * from './messageCBLService';
 export * from './messageEncryptionService';
 export { LogLevel as MessageLogLevel, MessageLogger, type IMessageLogger, } from './messageLogger';
 export * from './messageMetrics';
 export * from './recipientKeyManager';
+export * from './recipientKeyResolver';
+export * from './smimeCertificateManager';
 //# sourceMappingURL=index.d.ts.map

package/src/lib/services/messaging/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EACL,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,IAAI,yBAAyB,EAClD,KAAK,WAAW,IAAI,oBAAoB,GACzC,MAAM,kBAAkB,CAAC;AAC1B,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAG3C,OAAO,EACL,QAAQ,IAAI,eAAe,EAC3B,aAAa,EACb,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EACL,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,IAAI,yBAAyB,EAClD,KAAK,WAAW,IAAI,oBAAoB,GACzC,MAAM,kBAAkB,CAAC;AAC1B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAG3C,OAAO,EACL,QAAQ,IAAI,eAAe,EAC3B,aAAa,EACb,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC"}

package/src/lib/services/messaging/index.js

@@ -14,6 +14,7 @@ tslib_1.__exportStar(require("./emailSerializer"), exports);
 var emailValidator_1 = require("./emailValidator");
 Object.defineProperty(exports, "EmailValidator", { enumerable: true, get: function () { return emailValidator_1.EmailValidator; } });
 tslib_1.__exportStar(require("./gossipRetryService"), exports);
+tslib_1.__exportStar(require("./gpgKeyManager"), exports);
 tslib_1.__exportStar(require("./inMemoryEmailMetadataStore"), exports);
 tslib_1.__exportStar(require("./messageCBLService"), exports);
 tslib_1.__exportStar(require("./messageEncryptionService"), exports);
@@ -24,4 +25,6 @@ Object.defineProperty(exports, "MessageLogLevel", { enumerable: true, get: funct
 Object.defineProperty(exports, "MessageLogger", { enumerable: true, get: function () { return messageLogger_1.MessageLogger; } });
 tslib_1.__exportStar(require("./messageMetrics"), exports);
 tslib_1.__exportStar(require("./recipientKeyManager"), exports);
+tslib_1.__exportStar(require("./recipientKeyResolver"), exports);
+tslib_1.__exportStar(require("./smimeCertificateManager"), exports);
 //# sourceMappingURL=index.js.map

package/src/lib/services/messaging/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/index.ts"],"names":[],"mappings":";;;;AAAA,yDAA+B;AAC/B,mEAAyC;AACzC,mEAAyC;AACzC,gEAAsC;AACtC,wEAA8C;AAC9C,wDAA8B;AAC9B,4DAAkC;AAClC,+DAA+D;AAC/D,2EAA2E;AAC3E,mDAM0B;AALxB,gHAAA,cAAc,OAAA;AAMhB,+DAAqC;AACrC,uEAA6C;AAC7C,8DAAoC;AACpC,qEAA2C;AAC3C,iEAAiE;AACjE,0CAA0C;AAC1C,iDAIyB;AAHvB,gHAAA,QAAQ,OAAmB;AAC3B,8GAAA,aAAa,OAAA;AAGf,2DAAiC;AACjC,gEAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/index.ts"],"names":[],"mappings":";;;;AAAA,yDAA+B;AAC/B,mEAAyC;AACzC,mEAAyC;AACzC,gEAAsC;AACtC,wEAA8C;AAC9C,wDAA8B;AAC9B,4DAAkC;AAClC,+DAA+D;AAC/D,2EAA2E;AAC3E,mDAM0B;AALxB,gHAAA,cAAc,OAAA;AAMhB,+DAAqC;AACrC,0DAAgC;AAChC,uEAA6C;AAC7C,8DAAoC;AACpC,qEAA2C;AAC3C,iEAAiE;AACjE,0CAA0C;AAC1C,iDAIyB;AAHvB,gHAAA,QAAQ,OAAmB;AAC3B,8GAAA,aAAa,OAAA;AAGf,2DAAiC;AACjC,gEAAsC;AACtC,iEAAuC;AACvC,oEAA0C"}

package/src/lib/services/messaging/recipientKeyResolver.d.ts

@@ -0,0 +1,47 @@
+/**
+ * RecipientKeyResolver — resolves encryption key availability and retrieves
+ * cryptographic material for a set of recipients under a given scheme.
+ *
+ * Implements the IRecipientKeyResolver interface, delegating key lookups
+ * to an injected IKeyStore dependency.
+ *
+ * @see Requirements 2.3, 3.2, 7.2, 11.7, 14.1, 14.2, 14.4
+ */
+import { MessageEncryptionScheme } from '../../enumerations/messaging/messageEncryptionScheme';
+import { IKeyStore } from '../../interfaces/messaging/keyStore';
+import { IRecipientKeyAvailability, IRecipientKeyResolver, IResolvedRecipientKeys } from '../../interfaces/messaging/recipientKeyResolver';
+/**
+ * Resolves which encryption schemes are available for a set of recipients
+ * and retrieves the actual cryptographic material needed for encryption.
+ *
+ * @see Requirement 2.3 — Query keyserver for public keys by email
+ * @see Requirement 11.7 — Resolve recipient keys and display warnings
+ */
+export declare class RecipientKeyResolver implements IRecipientKeyResolver {
+    private readonly keyStore;
+    constructor(keyStore: IKeyStore);
+    /**
+     * Check key availability for all recipients.
+     *
+     * Queries the key store for each email to determine which types of
+     * cryptographic material are available.
+     *
+     * @param emails - Array of recipient email addresses to check
+     * @returns Availability information for each recipient
+     */
+    resolveAvailability(emails: string[]): Promise<IRecipientKeyAvailability[]>;
+    /**
+     * Resolve actual keys/certificates for a given encryption scheme.
+     *
+     * Retrieves the cryptographic material needed to encrypt a message
+     * under the specified scheme. Populates the appropriate key map and
+     * identifies recipients missing the required material.
+     *
+     * @param emails - Array of recipient email addresses
+     * @param scheme - The encryption scheme to resolve keys for
+     * @returns Resolved keys and lists of recipients with missing material
+     * @throws EmailError with RECIPIENT_KEY_MISSING when required keys are missing
+     */
+    resolveKeysForScheme(emails: string[], scheme: MessageEncryptionScheme): Promise<IResolvedRecipientKeys>;
+}
+//# sourceMappingURL=recipientKeyResolver.d.ts.map

package/src/lib/services/messaging/recipientKeyResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipientKeyResolver.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/recipientKeyResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAE/F,OAAO,EAAE,SAAS,EAAkB,MAAM,qCAAqC,CAAC;AAChF,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,iDAAiD,CAAC;AAEzD;;;;;;GAMG;AACH,qBAAa,oBAAqB,YAAW,qBAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,SAAS;IAEhD;;;;;;;;OAQG;IACG,mBAAmB,CACvB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAiCvC;;;;;;;;;;;OAWG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,EAAE,EAChB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,sBAAsB,CAAC;CAyEnC"}

package/src/lib/services/messaging/recipientKeyResolver.js

@@ -0,0 +1,132 @@
+"use strict";
+/**
+ * RecipientKeyResolver — resolves encryption key availability and retrieves
+ * cryptographic material for a set of recipients under a given scheme.
+ *
+ * Implements the IRecipientKeyResolver interface, delegating key lookups
+ * to an injected IKeyStore dependency.
+ *
+ * @see Requirements 2.3, 3.2, 7.2, 11.7, 14.1, 14.2, 14.4
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RecipientKeyResolver = void 0;
+const emailErrorType_1 = require("../../enumerations/messaging/emailErrorType");
+const messageEncryptionScheme_1 = require("../../enumerations/messaging/messageEncryptionScheme");
+const emailError_1 = require("../../errors/messaging/emailError");
+/**
+ * Resolves which encryption schemes are available for a set of recipients
+ * and retrieves the actual cryptographic material needed for encryption.
+ *
+ * @see Requirement 2.3 — Query keyserver for public keys by email
+ * @see Requirement 11.7 — Resolve recipient keys and display warnings
+ */
+class RecipientKeyResolver {
+    keyStore;
+    constructor(keyStore) {
+        this.keyStore = keyStore;
+    }
+    /**
+     * Check key availability for all recipients.
+     *
+     * Queries the key store for each email to determine which types of
+     * cryptographic material are available.
+     *
+     * @param emails - Array of recipient email addresses to check
+     * @returns Availability information for each recipient
+     */
+    async resolveAvailability(emails) {
+        const results = [];
+        for (const email of emails) {
+            const entries = await this.keyStore.getKeysForEmail(email);
+            let hasGpgKey = false;
+            let hasSmimeCert = false;
+            for (const entry of entries) {
+                if (entry.type.startsWith('gpg_')) {
+                    hasGpgKey = true;
+                }
+                if (entry.type.startsWith('smime_')) {
+                    hasSmimeCert = true;
+                }
+            }
+            results.push({
+                email,
+                hasGpgKey,
+                hasSmimeCert,
+                // ECIES keys are managed differently (via member lookup); default false for now
+                hasEciesKey: false,
+                // Internal member lookup not yet implemented; default false for now
+                isInternal: false,
+            });
+        }
+        return results;
+    }
+    /**
+     * Resolve actual keys/certificates for a given encryption scheme.
+     *
+     * Retrieves the cryptographic material needed to encrypt a message
+     * under the specified scheme. Populates the appropriate key map and
+     * identifies recipients missing the required material.
+     *
+     * @param emails - Array of recipient email addresses
+     * @param scheme - The encryption scheme to resolve keys for
+     * @returns Resolved keys and lists of recipients with missing material
+     * @throws EmailError with RECIPIENT_KEY_MISSING when required keys are missing
+     */
+    async resolveKeysForScheme(emails, scheme) {
+        const resolved = {
+            gpgKeys: new Map(),
+            smimeCerts: new Map(),
+            eciesKeys: new Map(),
+            missingGpg: [],
+            missingSmime: [],
+            missingEcies: [],
+        };
+        for (const email of emails) {
+            const entries = await this.keyStore.getKeysForEmail(email);
+            switch (scheme) {
+                case messageEncryptionScheme_1.MessageEncryptionScheme.GPG: {
+                    const gpgEntry = entries.find((e) => e.type === 'gpg_public' || e.type === 'gpg_keypair');
+                    if (gpgEntry) {
+                        resolved.gpgKeys.set(email, gpgEntry.publicMaterial);
+                    }
+                    else {
+                        resolved.missingGpg.push(email);
+                    }
+                    break;
+                }
+                case messageEncryptionScheme_1.MessageEncryptionScheme.S_MIME: {
+                    const smimeEntry = entries.find((e) => e.type === 'smime_cert' || e.type === 'smime_bundle');
+                    if (smimeEntry) {
+                        resolved.smimeCerts.set(email, smimeEntry.publicMaterial);
+                    }
+                    else {
+                        resolved.missingSmime.push(email);
+                    }
+                    break;
+                }
+                case messageEncryptionScheme_1.MessageEncryptionScheme.RECIPIENT_KEYS: {
+                    // ECIES keys are managed separately; mark all as missing for now
+                    resolved.missingEcies.push(email);
+                    break;
+                }
+                default:
+                    // NONE and SHARED_KEY don't require per-recipient keys
+                    break;
+            }
+        }
+        // Throw if any recipients are missing required keys for the selected scheme
+        const hasMissing = (scheme === messageEncryptionScheme_1.MessageEncryptionScheme.GPG &&
+            resolved.missingGpg.length > 0) ||
+            (scheme === messageEncryptionScheme_1.MessageEncryptionScheme.S_MIME &&
+                resolved.missingSmime.length > 0);
+        if (hasMissing) {
+            const missingEmails = scheme === messageEncryptionScheme_1.MessageEncryptionScheme.GPG
+                ? resolved.missingGpg
+                : resolved.missingSmime;
+            throw new emailError_1.EmailError(emailErrorType_1.EmailErrorType.RECIPIENT_KEY_MISSING, `Recipients missing required ${scheme} keys: ${missingEmails.join(', ')}`, { scheme, missingEmails });
+        }
+        return resolved;
+    }
+}
+exports.RecipientKeyResolver = RecipientKeyResolver;
+//# sourceMappingURL=recipientKeyResolver.js.map

package/src/lib/services/messaging/recipientKeyResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipientKeyResolver.js","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/recipientKeyResolver.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,gFAA6E;AAC7E,kGAA+F;AAC/F,kEAA+D;AAQ/D;;;;;;GAMG;AACH,MAAa,oBAAoB;IACF;IAA7B,YAA6B,QAAmB;QAAnB,aAAQ,GAAR,QAAQ,CAAW;IAAG,CAAC;IAEpD;;;;;;;;OAQG;IACH,KAAK,CAAC,mBAAmB,CACvB,MAAgB;QAEhB,MAAM,OAAO,GAAgC,EAAE,CAAC;QAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GACX,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAE7C,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,YAAY,GAAG,KAAK,CAAC;YAEzB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACpC,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK;gBACL,SAAS;gBACT,YAAY;gBACZ,gFAAgF;gBAChF,WAAW,EAAE,KAAK;gBAClB,oEAAoE;gBACpE,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,oBAAoB,CACxB,MAAgB,EAChB,MAA+B;QAE/B,MAAM,QAAQ,GAA2B;YACvC,OAAO,EAAE,IAAI,GAAG,EAAkB;YAClC,UAAU,EAAE,IAAI,GAAG,EAAkB;YACrC,SAAS,EAAE,IAAI,GAAG,EAAsB;YACxC,UAAU,EAAE,EAAE;YACd,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;SACjB,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GACX,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAE7C,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,iDAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;oBACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAC3D,CAAC;oBACF,IAAI,QAAQ,EAAE,CAAC;wBACb,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;oBACvD,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAClC,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,iDAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;oBACpC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,CAC5D,CAAC;oBACF,IAAI,UAAU,EAAE,CAAC;wBACf,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC;oBAC5D,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACpC,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,iDAAuB,CAAC,cAAc,CAAC,CAAC,CAAC;oBAC5C,iEAAiE;oBACjE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAClC,MAAM;gBACR,CAAC;gBAED;oBACE,uDAAuD;oBACvD,MAAM;YACV,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,MAAM,UAAU,GACd,CAAC,MAAM,KAAK,iDAAuB,CAAC,GAAG;YACrC,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;YACjC,CAAC,MAAM,KAAK,iDAAuB,CAAC,MAAM;gBACxC,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEtC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,aAAa,GACjB,MAAM,KAAK,iDAAuB,CAAC,GAAG;gBACpC,CAAC,CAAC,QAAQ,CAAC,UAAU;gBACrB,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;YAE5B,MAAM,IAAI,uBAAU,CAClB,+BAAc,CAAC,qBAAqB,EACpC,+BAA+B,MAAM,UAAU,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACzE,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAvID,oDAuIC"}

package/src/lib/services/messaging/smimeCertificateManager.d.ts

@@ -0,0 +1,207 @@
+import type { ISmimeCertificateBundle, ISmimeCertificateMetadata, ISmimeEncryptionResult, ISmimeSignatureResult, ISmimeVerificationResult } from '../../interfaces/messaging/smimeCertificate';
+/**
+ * Manages S/MIME X.509 certificate lifecycle: import, export, validation,
+ * and CMS encryption/signing operations.
+ *
+ * Wraps @peculiar/x509 for certificate parsing and pkijs for CMS operations.
+ *
+ * @see Requirements 6.1, 6.2, 6.4, 6.5, 6.7, 7.1, 8.1, 9.2
+ */
+export declare class SmimeCertificateManager {
+    private _x509;
+    private x509;
+    /**
+     * Import a PEM or DER X.509 certificate, validate structure, and extract metadata.
+     *
+     * @param content - PEM string or DER Uint8Array certificate data
+     * @param format - Certificate format: 'pem' or 'der'
+     * @returns Metadata extracted from the imported certificate
+     * @throws EmailError with SMIME_INVALID_CERT if the certificate is malformed
+     *
+     * @see Requirement 6.1 — Validate well-formed X.509 certificate in PEM or DER format
+     * @see Requirement 6.7 — Import S/MIME certificate from another user or CA
+     */
+    importCertificate(content: string | Uint8Array, format: 'pem' | 'der'): Promise<ISmimeCertificateMetadata>;
+    /**
+     * Import a PKCS#12 bundle (.p12/.pfx), extract certificate and private key.
+     *
+     * @param data - Raw PKCS#12 binary data
+     * @param password - Password to decrypt the PKCS#12 bundle
+     * @returns Certificate bundle with PEM certificate, optional PEM private key, and metadata
+     * @throws EmailError with SMIME_PKCS12_FAILED on extraction failure
+     *
+     * @see Requirement 6.2 — Extract and store certificate and private key from PKCS#12
+     */
+    importPkcs12(data: Uint8Array, password: string): Promise<ISmimeCertificateBundle>;
+    /**
+     * Export a certificate as PEM, validating it first.
+     *
+     * @param certificatePem - PEM-encoded X.509 certificate to export
+     * @returns The validated PEM-encoded certificate string
+     * @throws EmailError with SMIME_INVALID_CERT if the certificate is malformed
+     *
+     * @see Requirement 15.2 — PEM round-trip property
+     */
+    exportCertificatePem(certificatePem: string): Promise<string>;
+    /**
+     * Validate that content is a well-formed X.509 certificate.
+     *
+     * @param content - PEM string or DER Uint8Array certificate data
+     * @param format - Certificate format: 'pem' or 'der'
+     * @returns true if the content is a valid X.509 certificate
+     *
+     * @see Requirement 6.5 — Reject invalid X.509 certificates
+     */
+    validateCertificate(content: string | Uint8Array, format: 'pem' | 'der'): Promise<boolean>;
+    /**
+     * Encrypt content using CMS/PKCS#7 enveloped-data for one or more recipients.
+     *
+     * Uses pkijs EnvelopedData with AES-256-CBC content encryption and
+     * RSA-OAEP (SHA-256) key transport per RFC 5751.
+     *
+     * @param content - Plaintext content to encrypt
+     * @param recipientCertificatesPem - PEM-encoded X.509 certificates of recipients
+     * @returns CMS enveloped-data result with DER-encoded content and MIME content type
+     * @throws EmailError with SMIME_ENCRYPT_FAILED on any failure
+     *
+     * @see Requirement 7.1 — CMS/PKCS#7 encryption per RFC 5751
+     * @see Requirement 7.3 — S/MIME encrypted message output (application/pkcs7-mime)
+     * @see Requirement 7.4 — Error on invalid/expired certificate
+     */
+    encrypt(content: Uint8Array, recipientCertificatesPem: string[]): Promise<ISmimeEncryptionResult>;
+    /**
+     * Decrypt CMS/PKCS#7 enveloped-data content using a recipient's certificate and private key.
+     *
+     * Parses the DER-encoded ContentInfo, extracts the EnvelopedData, and decrypts
+     * using the provided certificate and private key.
+     *
+     * @param encryptedContent - DER-encoded CMS/PKCS#7 enveloped-data
+     * @param certificatePem - PEM-encoded X.509 certificate of the recipient
+     * @param privateKeyPem - PEM-encoded PKCS#8 private key of the recipient
+     * @returns Decrypted plaintext content
+     * @throws EmailError with SMIME_DECRYPT_FAILED on any failure
+     *
+     * @see Requirement 9.1 — S/MIME decryption with private key
+     * @see Requirement 9.5 — Error when private key is missing/invalid
+     */
+    decrypt(encryptedContent: Uint8Array, certificatePem: string, privateKeyPem: string): Promise<Uint8Array>;
+    /**
+     * Create a CMS detached signature over the given content.
+     *
+     * Uses pkijs SignedData with RSASSA-PKCS1-v1_5 / SHA-256 to produce
+     * a DER-encoded CMS detached signature conforming to RFC 5751.
+     *
+     * @param content - The content to sign
+     * @param certificatePem - PEM-encoded X.509 certificate of the signer
+     * @param privateKeyPem - PEM-encoded PKCS#8 private key of the signer
+     * @returns Signature result with DER-encoded CMS signature and signer subject
+     * @throws EmailError with SMIME_VERIFY_FAILED on any failure
+     *
+     * @see Requirement 8.1 — CMS detached signature production
+     * @see Requirement 8.2 — Sign before encrypt ordering
+     */
+    sign(content: Uint8Array, certificatePem: string, privateKeyPem: string): Promise<ISmimeSignatureResult>;
+    /**
+     * Verify a CMS detached signature against the given content and signer certificate.
+     *
+     * Parses the DER-encoded CMS signature, extracts the SignedData, and verifies
+     * using the provided signer certificate as a trusted certificate.
+     *
+     * @param content - The original content that was signed
+     * @param signature - DER-encoded CMS detached signature
+     * @param signerCertificatePem - PEM-encoded X.509 certificate of the expected signer
+     * @returns Verification result with valid status, signer subject, and optional reason
+     *
+     * @see Requirement 9.2 — S/MIME signature verification
+     * @see Requirement 9.3 — Verification result with signer subject and valid status
+     * @see Requirement 9.4 — Verification failure with reason
+     */
+    verify(content: Uint8Array, signature: Uint8Array, signerCertificatePem: string): Promise<ISmimeVerificationResult>;
+    /**
+     * Extract metadata from an X.509 certificate.
+     *
+     * @param cert - The parsed X.509 certificate
+     * @returns Certificate metadata
+     */
+    private extractMetadata;
+    /**
+     * Extract email addresses from the Subject Alternative Name extension.
+     *
+     * @param cert - The parsed X.509 certificate
+     * @returns Array of email addresses found in the SAN extension
+     */
+    private extractEmailAddresses;
+    /**
+     * Compute SHA-256 fingerprint of a certificate.
+     *
+     * @param cert - The parsed X.509 certificate
+     * @returns Hex-encoded SHA-256 fingerprint
+     */
+    private computeFingerprint;
+    /**
+     * Convert a string to ArrayBuffer (UTF-16 encoding as expected by pkijs).
+     *
+     * @param str - The string to convert
+     * @returns ArrayBuffer with UTF-16 encoded string
+     */
+    private static stringToArrayBuffer;
+    /**
+     * Convert DER-encoded data to PEM format.
+     *
+     * @param der - DER-encoded binary data
+     * @param tag - PEM tag (e.g., 'CERTIFICATE', 'PRIVATE KEY')
+     * @returns PEM-encoded string
+     */
+    private static derToPem;
+    /**
+     * Ensure the pkijs crypto engine is initialized with WebCrypto.
+     *
+     * @param pkijs - The pkijs module
+     */
+    private static ensureCryptoEngine;
+    /**
+     * Parse a PEM-encoded X.509 certificate into a pkijs Certificate object.
+     *
+     * @param pem - PEM-encoded certificate string
+     * @param asn1js - The asn1js module
+     * @param pkijs - The pkijs module
+     * @returns pkijs Certificate instance
+     */
+    private static pemToPkijsCertificate;
+    /**
+     * Import a PEM-encoded PKCS#8 private key as a CryptoKey for signing.
+     *
+     * Uses RSASSA-PKCS1-v1_5 with SHA-256, which is the standard algorithm
+     * for CMS/S/MIME digital signatures.
+     *
+     * @param pem - PEM-encoded PKCS#8 private key
+     * @returns CryptoKey suitable for signing
+     */
+    private static pemToSigningKey;
+    /**
+     * Extract the subject distinguished name string from a pkijs Certificate.
+     *
+     * @param cert - pkijs Certificate instance
+     * @returns Subject DN string (e.g., "CN=John Doe, O=Example Corp")
+     */
+    private static extractPkijsCertSubject;
+    /**
+     * Import a PEM-encoded PKCS#8 private key as a CryptoKey for decryption.
+     *
+     * Tries RSA-OAEP first, then falls back to ECDH if RSA import fails.
+     *
+     * @param pem - PEM-encoded PKCS#8 private key
+     * @returns CryptoKey suitable for decryption
+     */
+    private static pemToPrivateKey;
+    /**
+     * Find the recipient index in an EnvelopedData structure that matches
+     * the given certificate.
+     *
+     * @param envelopedData - The pkijs EnvelopedData structure
+     * @param recipientCert - The pkijs Certificate to match
+     * @returns The zero-based index of the matching recipient
+     */
+    private static findRecipientIndex;
+}
+//# sourceMappingURL=smimeCertificateManager.d.ts.map

package/src/lib/services/messaging/smimeCertificateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smimeCertificateManager.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/smimeCertificateManager.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,6CAA6C,CAAC;AAErD;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IAElC,OAAO,CAAC,KAAK,CAAM;YAEL,IAAI;IAMlB;;;;;;;;;;OAUG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,MAAM,EAAE,KAAK,GAAG,KAAK,GACpB,OAAO,CAAC,yBAAyB,CAAC;IAkCrC;;;;;;;;;OASG;IACG,YAAY,CAChB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,uBAAuB,CAAC;IAoInC;;;;;;;;OAQG;IACG,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAenE;;;;;;;;OAQG;IACG,mBAAmB,CACvB,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,MAAM,EAAE,KAAK,GAAG,KAAK,GACpB,OAAO,CAAC,OAAO,CAAC;IAqCnB;;;;;;;;;;;;;;OAcG;IACG,OAAO,CACX,OAAO,EAAE,UAAU,EACnB,wBAAwB,EAAE,MAAM,EAAE,GACjC,OAAO,CAAC,sBAAsB,CAAC;IAuElC;;;;;;;;;;;;;;OAcG;IACG,OAAO,CACX,gBAAgB,EAAE,UAAU,EAC5B,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,UAAU,CAAC;IA6DtB;;;;;;;;;;;;;;OAcG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,EACnB,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,qBAAqB,CAAC;IAwEjC;;;;;;;;;;;;;;OAcG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAAC,wBAAwB,CAAC;IAsEpC;;;;;OAKG;YACW,eAAe;IA4B7B;;;;;OAKG;YACW,qBAAqB;IAyBnC;;;;;OAKG;YACW,kBAAkB;IAShC;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IASlC;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ;IASvB;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAQjC;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAwBpC;;;;;;;;OAQG;mBACkB,eAAe;IAoBpC;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IA6BtC;;;;;;;OAOG;mBACkB,eAAe;IAsCpC;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,kBAAkB;CA0DlC"}