@byok-sdk/core 0.22.0 → 0.23.0

package/dist/errors.d.ts

@@ -37,6 +37,10 @@ export declare const CORE_ERROR_CODES: {
     readonly proof_envelope_invalid: 'proof_envelope_invalid';
     readonly proof_canonicalization_failed: 'proof_canonicalization_failed';
     readonly assertion_envelope_invalid: 'assertion_envelope_invalid';
+    readonly webcrypto_unavailable: 'webcrypto_unavailable';
+    readonly sealed_secret_invalid: 'sealed_secret_invalid';
+    readonly sealed_secret_open_failed: 'sealed_secret_open_failed';
+    readonly provider_provisioning_request_invalid: 'provider_provisioning_request_invalid';
     readonly mailbox_message_not_found: 'mailbox_message_not_found';
     readonly mailbox_cursor_regression: 'mailbox_cursor_regression';
     readonly mailbox_cursor_ahead_of_delivery: 'mailbox_cursor_ahead_of_delivery';

package/dist/hpke.d.ts

@@ -0,0 +1,58 @@
+import { type WebCryptoKey } from './webcrypto';
+/** Encoded P-256 public key and encapsulation length (uncompressed SEC1). */
+export declare const HPKE_P256_PUBLIC_KEY_BYTES = 65;
+/** AES-GCM authentication tag length. */
+export declare const HPKE_AEAD_TAG_BYTES = 16;
+type Bytes = Uint8Array<ArrayBuffer>;
+/**
+ * Import an uncompressed SEC1 P-256 public key for ECDH.
+ *
+ * The length and `0x04` prefix are checked here; the on-curve check is the
+ * WebCrypto import itself, which rejects a point that is not on P-256.
+ */
+export declare function importP256PublicKey(raw: Uint8Array): Promise<WebCryptoKey>;
+/** Key schedule output for base mode. Exported for the RFC 9180 conformance tests only. */
+export interface HpkeBaseKeySchedule {
+    readonly sharedSecret: Uint8Array;
+    readonly key: Uint8Array;
+    readonly baseNonce: Uint8Array;
+    readonly exporterSecret: Uint8Array;
+}
+/** A caller-fixed ephemeral key pair. Conformance tests only; production always generates one. */
+export interface HpkeEphemeralKeyPair {
+    readonly privateKey: WebCryptoKey;
+    readonly publicKey: Uint8Array;
+}
+/** `SetupBaseS`. Exported for the RFC 9180 conformance tests only. */
+export declare function setupBaseSender(recipientPublicKey: Uint8Array, info: Uint8Array, ephemeral?: HpkeEphemeralKeyPair): Promise<{
+    enc: Uint8Array;
+    schedule: HpkeBaseKeySchedule;
+}>;
+/** `SetupBaseR`. Exported for the RFC 9180 conformance tests only. */
+export declare function setupBaseRecipient(enc: Uint8Array, recipientPrivateKey: WebCryptoKey, recipientPublicKey: Uint8Array, info: Uint8Array): Promise<HpkeBaseKeySchedule>;
+/** `ComputeNonce(seq)`. Exported for the RFC 9180 conformance tests only. */
+export declare function hpkeNonce(baseNonce: Uint8Array, sequence: number): Bytes;
+/** AEAD seal at an explicit sequence number. Exported for the RFC 9180 conformance tests only. */
+export declare function hpkeAeadSeal(schedule: HpkeBaseKeySchedule, sequence: number, aad: Uint8Array, plaintext: Uint8Array): Promise<Bytes>;
+/** AEAD open at an explicit sequence number. Exported for the RFC 9180 conformance tests only. */
+export declare function hpkeAeadOpen(schedule: HpkeBaseKeySchedule, sequence: number, aad: Uint8Array, ciphertext: Uint8Array): Promise<Bytes>;
+/** One-shot `SealBase`: a fresh ephemeral key, sequence 0, never reused. */
+export declare function hpkeSealBase(input: {
+    readonly recipientPublicKey: Uint8Array;
+    readonly info: Uint8Array;
+    readonly aad: Uint8Array;
+    readonly plaintext: Uint8Array;
+}): Promise<{
+    enc: Uint8Array;
+    ciphertext: Uint8Array;
+}>;
+/** One-shot `OpenBase`, sequence 0. */
+export declare function hpkeOpenBase(input: {
+    readonly recipientPrivateKey: WebCryptoKey;
+    readonly recipientPublicKey: Uint8Array;
+    readonly enc: Uint8Array;
+    readonly info: Uint8Array;
+    readonly aad: Uint8Array;
+    readonly ciphertext: Uint8Array;
+}): Promise<Uint8Array>;
+export {};

package/dist/index.d.ts

@@ -2,7 +2,9 @@
  * `@byok-sdk/core` — platform contracts.
  *
  * What this package exports is deliberately narrow: contracts, schemas, errors,
- * and one in-memory reference implementation. No HTTP, no crypto, no SQL, no
+ * one in-memory reference implementation, and the sealed provider-secret byte
+ * authority (one-shot HPKE over WebCrypto only — the browser and the device
+ * must run the same code). No HTTP, no node crypto, no SQL, no
  * `@byok-sdk/protocol` (that edge would make a future `keys → core` dependency drag
  * the wire protocol along with it, §12.1), and no `node:` import (a Workers
  * composition has to be able to load this).
@@ -41,6 +43,8 @@ export type { DeviceProofAlgorithm, DeviceProofEnvelopeV1, DeviceProofProtectedC
 export { authenticateDeviceAssertion, DEVICE_ASSERTION_ALGORITHMS, DEVICE_ASSERTION_AUDIENCE_MAX_BYTES, DEVICE_ASSERTION_DEFAULT_TTL_MS, DEVICE_ASSERTION_DOMAIN_PREFIX, DEVICE_ASSERTION_MAX_TTL_MS, DEVICE_ASSERTION_SCHEMA_ID, DEVICE_ASSERTION_VERSION, DeviceAssertionClaimsSchema, DeviceAssertionEnvelopeV1Schema, deviceAssertionCanonicalClaims, deviceAssertionCanonicalJson, deviceAssertionSigningInput, parseDeviceAssertionEnvelope, verifyDeviceAssertion, } from './device-assertion';
 export { authenticateTaskAssertion, TASK_ASSERTION_AGENT_REF_MAX_BYTES, TASK_ASSERTION_DOMAIN_PREFIX, TASK_ASSERTION_SCHEMA_ID, TASK_ASSERTION_TOOLSET_ID_MAX_LENGTH, TASK_ASSERTION_VERSION, TaskAssertionAgentRefSchema, TaskAssertionClaimsSchema, TaskAssertionEnvelopeV1Schema, parseTaskAssertionEnvelope, taskAssertionCanonicalClaims, taskAssertionCanonicalJson, taskAssertionSigningInput, verifyTaskAssertion, } from './device-assertion';
 export type { AuthenticateDeviceAssertionDeps, AuthenticatedAssertion, AuthenticatedDeviceAssertion, AuthenticatedTaskAssertion, DeviceAssertionAlgorithm, DeviceAssertionAuthorityRow, DeviceAssertionClaims, DeviceAssertionDeviceRow, DeviceAssertionEnvelopeV1, DeviceAssertionExpectedBinding, DeviceAssertionReplayConsumeInput, DeviceAssertionReplayAuthority, DeviceAssertionReplaySchemaId, DeviceAssertionVerifier, DeviceAssertionVerifyDeps, DeviceAssertionVerifyInput, TaskAssertionAgentRef, TaskAssertionClaims, TaskAssertionEnvelopeV1, } from './device-assertion';
+export { PROVIDER_PROVISIONING_MAX_TTL_MS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_REQUEST_VERSION, PROVIDER_PROVISIONING_SECRET_OPERATIONS, PROVIDER_SECRET_HPKE_INFO, PROVIDER_SECRET_HPKE_SUITE, PROVIDER_SECRET_MAX_BYTES, PROVIDER_SECRET_MAX_PADDED_BYTES, PROVIDER_SECRET_PAD_BLOCK_BYTES, ProviderProvisioningConfigV1Schema, ProviderProvisioningExpectedProfileSchema, ProviderProvisioningHeaderV1Schema, ProviderProvisioningIdentityRevisionSchema, ProviderProvisioningRequestV1Schema, SEALING_KEY_ID_LENGTH, SealedProviderSecretV1Schema, SealingKeyClaimV1Schema, SealingKeyIdSchema, SealingPublicJwkSchema, assertProviderProvisioningConfigDigest, deriveSealingKeyId, openProviderProvisioningSecret, parseProviderProvisioningRequest, providerProvisioningConfigDigest, providerProvisioningRequestDigest, providerSecretAadBytes, sealProviderProvisioningRequest, sealingKeyClaimCanonicalBytes, } from './sealed-provider-secret';
+export type { ProviderProvisioningConfigV1, ProviderProvisioningExpectedProfile, ProviderProvisioningHeaderV1, ProviderProvisioningOperation, ProviderProvisioningRequestV1, ProviderSecretRecipient, SealProviderProvisioningRequestInput, SealedProviderSecretV1, SealingKeyClaimV1, SealingPublicJwk, WebCryptoKey, } from './sealed-provider-secret';
 export { NONCE_SIGNING_DOMAIN, nonceSigningBytes } from './pairing';
 export { IN_MEMORY_CLOCK_EPOCH, InMemoryBoardStore, InMemoryMailboxStore, InMemoryDeviceAssertionReplayAuthority, InMemoryObjectStore, InMemoryPresenceStore, InMemoryQuotaStore, InMemorySkillPackStore, InMemoryTruthStore, createInMemoryCoreStores, createInMemoryCoreCompositionWithClock, createMutableClock, } from './in-memory/index';
 export type { InMemoryCoreComposition, InMemoryCoreOptions } from './in-memory/index';