@de-otio/trellis 0.4.0 → 0.6.0

package/dist/lib/crypto/versioning.js

@@ -1,148 +0,0 @@
-"use strict";
-/**
- * Parameter Versioning
- *
- * Manages versioning of cryptographic parameters to enable safe upgrades
- * and maintain backward compatibility.
- *
- * Version Format: Semantic versioning (MAJOR.MINOR.PATCH)
- * - Major: Breaking changes (algorithm change)
- * - Minor: Parameter changes (iteration count increase)
- * - Patch: Bug fixes
- *
- * @see doc/02-technical/architecture/cryptography/08-implementation-recommendations.md
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ParameterVersionManager = exports.MINIMUM_VERSION = exports.CURRENT_VERSION = exports.SUPPORTED_VERSIONS = void 0;
-/**
- * Supported parameter versions
- */
-exports.SUPPORTED_VERSIONS = {
-    "1.0.0": {
-        version: "1.0.0",
-        deprecated: false,
-    },
-};
-/**
- * Current default version
- */
-exports.CURRENT_VERSION = "1.0.0";
-/**
- * Minimum supported version (for backward compatibility)
- */
-exports.MINIMUM_VERSION = "1.0.0";
-/**
- * Parameter version manager
- */
-class ParameterVersionManager {
-    /**
-     * Validate version format
-     *
-     * @param version - Version string to validate
-     * @returns true if valid semantic version format
-     */
-    static isValidVersion(version) {
-        // Semantic versioning: MAJOR.MINOR.PATCH
-        const versionRegex = /^\d+\.\d+\.\d+$/;
-        return versionRegex.test(version);
-    }
-    /**
-     * Compare two versions
-     *
-     * @param version1 - First version
-     * @param version2 - Second version
-     * @returns -1 if version1 < version2, 0 if equal, 1 if version1 > version2
-     */
-    static compareVersions(version1, version2) {
-        if (!this.isValidVersion(version1) || !this.isValidVersion(version2)) {
-            throw new Error("Invalid version format");
-        }
-        const v1Parts = version1.split(".").map(Number);
-        const v2Parts = version2.split(".").map(Number);
-        for (let i = 0; i < 3; i++) {
-            if (v1Parts[i] < v2Parts[i])
-                return -1;
-            if (v1Parts[i] > v2Parts[i])
-                return 1;
-        }
-        return 0;
-    }
-    /**
-     * Check if version is supported
-     *
-     * @param version - Version to check
-     * @returns true if version is supported
-     */
-    static isSupported(version) {
-        if (!this.isValidVersion(version)) {
-            return false;
-        }
-        // Check if version is in supported versions
-        if (exports.SUPPORTED_VERSIONS[version]) {
-            return !exports.SUPPORTED_VERSIONS[version].deprecated;
-        }
-        // Check if version is between minimum and current
-        const minCompare = this.compareVersions(version, exports.MINIMUM_VERSION);
-        const currentCompare = this.compareVersions(version, exports.CURRENT_VERSION);
-        return minCompare >= 0 && currentCompare <= 0;
-    }
-    /**
-     * Check if version is deprecated
-     *
-     * @param version - Version to check
-     * @returns true if version is deprecated
-     */
-    static isDeprecated(version) {
-        const versionInfo = exports.SUPPORTED_VERSIONS[version];
-        return versionInfo?.deprecated === true;
-    }
-    /**
-     * Get version information
-     *
-     * @param version - Version string
-     * @returns Version information or null if not found
-     */
-    static getVersionInfo(version) {
-        return exports.SUPPORTED_VERSIONS[version] || null;
-    }
-    /**
-     * Get current default version
-     *
-     * @returns Current version string
-     */
-    static getCurrentVersion() {
-        return exports.CURRENT_VERSION;
-    }
-    /**
-     * Get minimum supported version
-     *
-     * @returns Minimum version string
-     */
-    static getMinimumVersion() {
-        return exports.MINIMUM_VERSION;
-    }
-    /**
-     * Validate and normalize version
-     *
-     * If version is not provided, returns current version.
-     * If version is invalid, throws error.
-     *
-     * @param version - Optional version string
-     * @returns Validated version string
-     * @throws Error if version is invalid
-     */
-    static validateAndNormalize(version) {
-        if (!version) {
-            return exports.CURRENT_VERSION;
-        }
-        if (!this.isValidVersion(version)) {
-            throw new Error(`Invalid version format: ${version}. Expected MAJOR.MINOR.PATCH`);
-        }
-        if (!this.isSupported(version)) {
-            throw new Error(`Unsupported version: ${version}. Minimum: ${exports.MINIMUM_VERSION}, Current: ${exports.CURRENT_VERSION}`);
-        }
-        return version;
-    }
-}
-exports.ParameterVersionManager = ParameterVersionManager;
-//# sourceMappingURL=versioning.js.map

package/dist/lib/crypto/versioning.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"versioning.js","sourceRoot":"","sources":["../../../src/lib/crypto/versioning.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AA4BH;;GAEG;AACU,QAAA,kBAAkB,GAAqC;IAClE,OAAO,EAAE;QACP,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,KAAK;KAClB;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,eAAe,GAAG,OAAO,CAAC;AAEvC;;GAEG;AACU,QAAA,eAAe,GAAG,OAAO,CAAC;AAEvC;;GAEG;AACH,MAAa,uBAAuB;IAClC;;;;;OAKG;IACH,MAAM,CAAC,cAAc,CAAC,OAAe;QACnC,yCAAyC;QACzC,MAAM,YAAY,GAAG,iBAAiB,CAAC;QACvC,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,eAAe,CAAC,QAAgB,EAAE,QAAgB;QACvD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEhD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC;YACvC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,WAAW,CAAC,OAAe;QAChC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,4CAA4C;QAC5C,IAAI,0BAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,0BAAkB,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;QACjD,CAAC;QAED,kDAAkD;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,uBAAe,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,uBAAe,CAAC,CAAC;QAEtE,OAAO,UAAU,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,OAAe;QACjC,MAAM,WAAW,GAAG,0BAAkB,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,cAAc,CAAC,OAAe;QACnC,OAAO,0BAAkB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,iBAAiB;QACtB,OAAO,uBAAe,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,iBAAiB;QACtB,OAAO,uBAAe,CAAC;IACzB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,oBAAoB,CAAC,OAAgB;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,uBAAe,CAAC;QACzB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,2BAA2B,OAAO,8BAA8B,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,cAAc,uBAAe,cAAc,uBAAe,EAAE,CAC5F,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AA/HD,0DA+HC"}

package/dist/lib/encryption-key-service.d.ts

@@ -1,115 +0,0 @@
-/**
- * EncryptionKeyService
- *
- * Manages UserEncryptionKey records for Border Safety Mode and Encrypted DM.
- * Provides unified key management using the shared cryptographic library.
- *
- * Features:
- * - Key creation and retrieval
- * - Key derivation from passwords (using shared crypto library)
- * - Key rotation support
- * - Multiple key types (border_safety, e2e_messages)
- * - Multiple key purposes (data_encryption, backup, export, message_encryption)
- *
- * @see packages/crypto for shared cryptographic operations
- * @see doc/02-technical/architecture/cryptography/ for design documentation
- */
-import { PrismaClient, UserEncryptionKey } from "@prisma/client";
-import type { KDFParams } from "./crypto/index.js";
-import { type LoggerEnv } from "./logger";
-/**
- * Key type values
- */
-export type KeyType = "border_safety" | "e2e_messages";
-/**
- * Key purpose values
- */
-export type KeyPurpose = "data_encryption" | "backup" | "export" | "message_encryption";
-/**
- * EncryptionKeyService class for managing user encryption keys
- */
-export declare class EncryptionKeyService {
-    private prisma;
-    private logger;
-    constructor(prisma: PrismaClient, env?: LoggerEnv);
-    /**
-     * Get or create an encryption key for a user
-     *
-     * If a key with the same userId, contextId, keyPurpose, and keyType exists,
-     * it is returned. Otherwise, a new key is created.
-     *
-     * Note: This method does NOT derive the key from a password. The key material
-     * should be derived client-side and passed as encryptedKey (encrypted with
-     * the user's password-derived key).
-     *
-     * @param userId - User ID
-     * @param contextId - Context ID ('primary' or 'decoy')
-     * @param keyPurpose - Key purpose ('data_encryption', 'backup', 'export', 'message_encryption')
-     * @param keyType - Key type ('border_safety' or 'e2e_messages')
-     * @param encryptedKey - Encrypted key material (encrypted with user's password-derived key)
-     * @param kdfParams - Key derivation parameters (JSON string)
-     * @param algorithm - Encryption algorithm (default: 'AES-256-GCM')
-     * @returns UserEncryptionKey record
-     * @throws Error if key creation fails
-     */
-    getOrCreateKey(userId: string, contextId: string, keyPurpose: KeyPurpose, keyType: KeyType, encryptedKey: string, kdfParams: string, algorithm?: string): Promise<UserEncryptionKey>;
-    /**
-     * Derive encryption key from password using shared cryptographic library
-     *
-     * This is a convenience method that uses EncryptionService.deriveKey().
-     * The derived key is a CryptoKey and cannot be exported (for security).
-     *
-     * @param password - Password to derive key from
-     * @param salt - Salt (base64-encoded, minimum 128 bits / 16 bytes)
-     * @param kdfParams - Key derivation parameters
-     * @returns CryptoKey for AES-256-GCM
-     * @throws Error if key derivation fails
-     */
-    deriveKeyFromPassword(password: string, salt: string, kdfParams: KDFParams): Promise<CryptoKey>;
-    /**
-     * Rotate an encryption key
-     *
-     * Updates the key record with new encrypted key material and sets rotatedAt timestamp.
-     * The old key material is replaced (not kept for backward compatibility).
-     *
-     * @param keyId - Key ID to rotate
-     * @param newEncryptedKey - New encrypted key material
-     * @param newKdfParams - New KDF parameters (optional, if key derivation changed)
-     * @returns Updated UserEncryptionKey record
-     * @throws Error if key rotation fails
-     */
-    rotateKey(keyId: string, newEncryptedKey: string, newKdfParams?: string): Promise<UserEncryptionKey>;
-    /**
-     * Get encryption key by type for a user
-     *
-     * Returns the first key matching the userId and keyType.
-     * If multiple keys exist (different contexts or purposes), use getKeysByUser().
-     *
-     * @param userId - User ID
-     * @param keyType - Key type ('border_safety' or 'e2e_messages')
-     * @returns UserEncryptionKey or null if not found
-     */
-    getKeyByType(userId: string, keyType: KeyType): Promise<UserEncryptionKey | null>;
-    /**
-     * Get all encryption keys for a user
-     *
-     * @param userId - User ID
-     * @returns Array of UserEncryptionKey records
-     */
-    getKeysByUser(userId: string): Promise<UserEncryptionKey[]>;
-    /**
-     * Get encryption key by ID
-     *
-     * @param keyId - Key ID
-     * @returns UserEncryptionKey or null if not found
-     */
-    getKeyById(keyId: string): Promise<UserEncryptionKey | null>;
-    /**
-     * Delete an encryption key
-     *
-     * @param keyId - Key ID
-     * @throws Error if key deletion fails
-     */
-    deleteKey(keyId: string): Promise<void>;
-}
-//# sourceMappingURL=encryption-key-service.d.ts.map

package/dist/lib/encryption-key-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"encryption-key-service.d.ts","sourceRoot":"","sources":["../../src/lib/encryption-key-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAElD;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG,eAAe,GAAG,cAAc,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,UAAU,GAClB,iBAAiB,GACjB,QAAQ,GACR,QAAQ,GACR,oBAAoB,CAAC;AAEzB;;GAEG;AACH,qBAAa,oBAAoB;IAI7B,OAAO,CAAC,MAAM;IAHhB,OAAO,CAAC,MAAM,CAAS;gBAGb,MAAM,EAAE,YAAY,EAC5B,GAAG,CAAC,EAAE,SAAS;IAKjB;;;;;;;;;;;;;;;;;;;OAmBG;IACG,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,SAAS,GAAE,MAAsB,GAChC,OAAO,CAAC,iBAAiB,CAAC;IA6D7B;;;;;;;;;;;OAWG;IACG,qBAAqB,CACzB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,SAAS,CAAC;IAarB;;;;;;;;;;;OAWG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,MAAM,EACvB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,iBAAiB,CAAC;IAqC7B;;;;;;;;;OASG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAsBpC;;;;;OAKG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAuBjE;;;;;OAKG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAkBlE;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAiB9C"}

package/dist/lib/encryption-key-service.js

@@ -1,272 +0,0 @@
-"use strict";
-/**
- * EncryptionKeyService
- *
- * Manages UserEncryptionKey records for Border Safety Mode and Encrypted DM.
- * Provides unified key management using the shared cryptographic library.
- *
- * Features:
- * - Key creation and retrieval
- * - Key derivation from passwords (using shared crypto library)
- * - Key rotation support
- * - Multiple key types (border_safety, e2e_messages)
- * - Multiple key purposes (data_encryption, backup, export, message_encryption)
- *
- * @see packages/crypto for shared cryptographic operations
- * @see doc/02-technical/architecture/cryptography/ for design documentation
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EncryptionKeyService = void 0;
-const index_js_1 = require("./crypto/index.js");
-const logger_1 = require("./logger");
-/**
- * EncryptionKeyService class for managing user encryption keys
- */
-class EncryptionKeyService {
-    prisma;
-    logger;
-    constructor(prisma, env) {
-        this.prisma = prisma;
-        this.logger = logger_1.Logger.getInstance(env);
-    }
-    /**
-     * Get or create an encryption key for a user
-     *
-     * If a key with the same userId, contextId, keyPurpose, and keyType exists,
-     * it is returned. Otherwise, a new key is created.
-     *
-     * Note: This method does NOT derive the key from a password. The key material
-     * should be derived client-side and passed as encryptedKey (encrypted with
-     * the user's password-derived key).
-     *
-     * @param userId - User ID
-     * @param contextId - Context ID ('primary' or 'decoy')
-     * @param keyPurpose - Key purpose ('data_encryption', 'backup', 'export', 'message_encryption')
-     * @param keyType - Key type ('border_safety' or 'e2e_messages')
-     * @param encryptedKey - Encrypted key material (encrypted with user's password-derived key)
-     * @param kdfParams - Key derivation parameters (JSON string)
-     * @param algorithm - Encryption algorithm (default: 'AES-256-GCM')
-     * @returns UserEncryptionKey record
-     * @throws Error if key creation fails
-     */
-    async getOrCreateKey(userId, contextId, keyPurpose, keyType, encryptedKey, kdfParams, algorithm = "AES-256-GCM") {
-        try {
-            // Try to find existing key
-            const existing = await this.prisma.userEncryptionKey.findUnique({
-                where: {
-                    userId_contextId_keyPurpose_keyType: {
-                        userId,
-                        contextId,
-                        keyPurpose,
-                        keyType,
-                    },
-                },
-            });
-            if (existing) {
-                this.logger.debug("Encryption key found", {
-                    keyId: existing.id,
-                    userId,
-                    contextId,
-                    keyPurpose,
-                    keyType,
-                });
-                return existing;
-            }
-            // Create new key
-            const newKey = await this.prisma.userEncryptionKey.create({
-                data: {
-                    userId,
-                    contextId,
-                    keyPurpose,
-                    keyType,
-                    encryptedKey,
-                    kdfParams,
-                    algorithm,
-                },
-            });
-            this.logger.info("Encryption key created", {
-                keyId: newKey.id,
-                userId,
-                contextId,
-                keyPurpose,
-                keyType,
-            });
-            return newKey;
-        }
-        catch (error) {
-            this.logger.error("Failed to get or create encryption key", {
-                userId,
-                contextId,
-                keyPurpose,
-                keyType,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            throw new Error(`Failed to get or create encryption key: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
-    /**
-     * Derive encryption key from password using shared cryptographic library
-     *
-     * This is a convenience method that uses EncryptionService.deriveKey().
-     * The derived key is a CryptoKey and cannot be exported (for security).
-     *
-     * @param password - Password to derive key from
-     * @param salt - Salt (base64-encoded, minimum 128 bits / 16 bytes)
-     * @param kdfParams - Key derivation parameters
-     * @returns CryptoKey for AES-256-GCM
-     * @throws Error if key derivation fails
-     */
-    async deriveKeyFromPassword(password, salt, kdfParams) {
-        try {
-            return await index_js_1.EncryptionService.deriveKey(password, salt, kdfParams);
-        }
-        catch (error) {
-            this.logger.error("Failed to derive key from password", {
-                error: error instanceof Error ? error.message : String(error),
-            });
-            throw new Error(`Failed to derive key from password: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
-    /**
-     * Rotate an encryption key
-     *
-     * Updates the key record with new encrypted key material and sets rotatedAt timestamp.
-     * The old key material is replaced (not kept for backward compatibility).
-     *
-     * @param keyId - Key ID to rotate
-     * @param newEncryptedKey - New encrypted key material
-     * @param newKdfParams - New KDF parameters (optional, if key derivation changed)
-     * @returns Updated UserEncryptionKey record
-     * @throws Error if key rotation fails
-     */
-    async rotateKey(keyId, newEncryptedKey, newKdfParams) {
-        try {
-            const existing = await this.prisma.userEncryptionKey.findUnique({
-                where: { id: keyId },
-            });
-            if (!existing) {
-                throw new Error(`Encryption key not found: ${keyId}`);
-            }
-            const updated = await this.prisma.userEncryptionKey.update({
-                where: { id: keyId },
-                data: {
-                    encryptedKey: newEncryptedKey,
-                    kdfParams: newKdfParams ?? existing.kdfParams,
-                    rotatedAt: new Date(),
-                },
-            });
-            this.logger.info("Encryption key rotated", {
-                keyId,
-                userId: existing.userId,
-                rotatedAt: updated.rotatedAt,
-            });
-            return updated;
-        }
-        catch (error) {
-            this.logger.error("Failed to rotate encryption key", {
-                keyId,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            throw new Error(`Failed to rotate encryption key: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
-    /**
-     * Get encryption key by type for a user
-     *
-     * Returns the first key matching the userId and keyType.
-     * If multiple keys exist (different contexts or purposes), use getKeysByUser().
-     *
-     * @param userId - User ID
-     * @param keyType - Key type ('border_safety' or 'e2e_messages')
-     * @returns UserEncryptionKey or null if not found
-     */
-    async getKeyByType(userId, keyType) {
-        try {
-            const key = await this.prisma.userEncryptionKey.findFirst({
-                where: {
-                    userId,
-                    keyType,
-                },
-            });
-            return key;
-        }
-        catch (error) {
-            this.logger.error("Failed to get key by type", {
-                userId,
-                keyType,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            throw new Error(`Failed to get key by type: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
-    /**
-     * Get all encryption keys for a user
-     *
-     * @param userId - User ID
-     * @returns Array of UserEncryptionKey records
-     */
-    async getKeysByUser(userId) {
-        try {
-            const keys = await this.prisma.userEncryptionKey.findMany({
-                where: {
-                    userId,
-                },
-                orderBy: {
-                    createdAt: "desc",
-                },
-            });
-            return keys;
-        }
-        catch (error) {
-            this.logger.error("Failed to get keys by user", {
-                userId,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            throw new Error(`Failed to get keys by user: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
-    /**
-     * Get encryption key by ID
-     *
-     * @param keyId - Key ID
-     * @returns UserEncryptionKey or null if not found
-     */
-    async getKeyById(keyId) {
-        try {
-            const key = await this.prisma.userEncryptionKey.findUnique({
-                where: { id: keyId },
-            });
-            return key;
-        }
-        catch (error) {
-            this.logger.error("Failed to get key by ID", {
-                keyId,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            throw new Error(`Failed to get key by ID: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
-    /**
-     * Delete an encryption key
-     *
-     * @param keyId - Key ID
-     * @throws Error if key deletion fails
-     */
-    async deleteKey(keyId) {
-        try {
-            await this.prisma.userEncryptionKey.delete({
-                where: { id: keyId },
-            });
-            this.logger.info("Encryption key deleted", { keyId });
-        }
-        catch (error) {
-            this.logger.error("Failed to delete encryption key", {
-                keyId,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            throw new Error(`Failed to delete encryption key: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    }
-}
-exports.EncryptionKeyService = EncryptionKeyService;
-//# sourceMappingURL=encryption-key-service.js.map

package/dist/lib/encryption-key-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"encryption-key-service.js","sourceRoot":"","sources":["../../src/lib/encryption-key-service.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAGH,gDAAsD;AAEtD,qCAAkD;AAgBlD;;GAEG;AACH,MAAa,oBAAoB;IAIrB;IAHF,MAAM,CAAS;IAEvB,YACU,MAAoB,EAC5B,GAAe;QADP,WAAM,GAAN,MAAM,CAAc;QAG5B,IAAI,CAAC,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,cAAc,CAClB,MAAc,EACd,SAAiB,EACjB,UAAsB,EACtB,OAAgB,EAChB,YAAoB,EACpB,SAAiB,EACjB,YAAoB,aAAa;QAEjC,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBAC9D,KAAK,EAAE;oBACL,mCAAmC,EAAE;wBACnC,MAAM;wBACN,SAAS;wBACT,UAAU;wBACV,OAAO;qBACR;iBACF;aACF,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBACxC,KAAK,EAAE,QAAQ,CAAC,EAAE;oBAClB,MAAM;oBACN,SAAS;oBACT,UAAU;oBACV,OAAO;iBACR,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,iBAAiB;YACjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACxD,IAAI,EAAE;oBACJ,MAAM;oBACN,SAAS;oBACT,UAAU;oBACV,OAAO;oBACP,YAAY;oBACZ,SAAS;oBACT,SAAS;iBACV;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACzC,KAAK,EAAE,MAAM,CAAC,EAAE;gBAChB,MAAM;gBACN,SAAS;gBACT,UAAU;gBACV,OAAO;aACR,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;gBAC1D,MAAM;gBACN,SAAS;gBACT,UAAU;gBACV,OAAO;gBACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,2CAA2C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,qBAAqB,CACzB,QAAgB,EAChB,IAAY,EACZ,SAAoB;QAEpB,IAAI,CAAC;YACH,OAAO,MAAM,4BAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,uCAAuC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,CACb,KAAa,EACb,eAAuB,EACvB,YAAqB;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBAC9D,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACzD,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;gBACpB,IAAI,EAAE;oBACJ,YAAY,EAAE,eAAe;oBAC7B,SAAS,EAAE,YAAY,IAAI,QAAQ,CAAC,SAAS;oBAC7C,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACzC,KAAK;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YAEH,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBACnD,KAAK;gBACL,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY,CAChB,MAAc,EACd,OAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC;gBACxD,KAAK,EAAE;oBACL,MAAM;oBACN,OAAO;iBACR;aACF,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBAC7C,MAAM;gBACN,OAAO;gBACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC;gBACxD,KAAK,EAAE;oBACL,MAAM;iBACP;gBACD,OAAO,EAAE;oBACP,SAAS,EAAE,MAAM;iBAClB;aACF,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;gBAC9C,MAAM;gBACN,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBACzD,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;aACrB,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBAC3C,KAAK;gBACL,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACzC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;aACrB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBACnD,KAAK;gBACL,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AApSD,oDAoSC"}

package/dist/lib/followers-handler.d.ts

@@ -1,21 +0,0 @@
-/**
- * Followers Handler — STUBBED pending redesign
- *
- * The Follow model has been removed. Follow relationships are replaced by
- * scored Relationships in the graph database (Neptune). This handler will
- * be reimplemented as RelationshipHandler in Phase 3 of the redesign.
- *
- * All methods return 501 Not Implemented.
- */
-import type { Env } from "../env";
-import type { RequestContext } from "./request-context";
-import type { Session } from "./session-manager";
-export declare class FollowersHandler {
-    handleFollow(_request: Request, _session: Session, _env: Env, _requestContext: RequestContext): Promise<Response>;
-    handleUnfollow(_request: Request, _session: Session, _env: Env, _requestContext: RequestContext): Promise<Response>;
-    handleGetFollowing(_request: Request, _session: Session, _env: Env, _requestContext: RequestContext): Promise<Response>;
-    handleGetFollowers(_request: Request, _session: Session, _env: Env, _requestContext: RequestContext): Promise<Response>;
-    handleGetStatus(_request: Request, _session: Session, _env: Env, _requestContext: RequestContext): Promise<Response>;
-    handleGetCount(_request: Request, _session: Session, _env: Env, _requestContext: RequestContext): Promise<Response>;
-}
-//# sourceMappingURL=followers-handler.d.ts.map

package/dist/lib/followers-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"followers-handler.d.ts","sourceRoot":"","sources":["../../src/lib/followers-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAOjD,qBAAa,gBAAgB;IACrB,YAAY,CAChB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,GAAG,EACT,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAId,cAAc,CAClB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,GAAG,EACT,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAId,kBAAkB,CACtB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,GAAG,EACT,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAId,kBAAkB,CACtB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,GAAG,EACT,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAId,eAAe,CACnB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,GAAG,EACT,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAId,cAAc,CAClB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,GAAG,EACT,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;CAGrB"}

package/dist/lib/followers-handler.js

@@ -1,35 +0,0 @@
-"use strict";
-/**
- * Followers Handler — STUBBED pending redesign
- *
- * The Follow model has been removed. Follow relationships are replaced by
- * scored Relationships in the graph database (Neptune). This handler will
- * be reimplemented as RelationshipHandler in Phase 3 of the redesign.
- *
- * All methods return 501 Not Implemented.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.FollowersHandler = void 0;
-const NOT_IMPLEMENTED = new Response(JSON.stringify({ error: "Not implemented - pending redesign" }), { status: 501, headers: { "content-type": "application/json" } });
-class FollowersHandler {
-    async handleFollow(_request, _session, _env, _requestContext) {
-        return NOT_IMPLEMENTED;
-    }
-    async handleUnfollow(_request, _session, _env, _requestContext) {
-        return NOT_IMPLEMENTED;
-    }
-    async handleGetFollowing(_request, _session, _env, _requestContext) {
-        return NOT_IMPLEMENTED;
-    }
-    async handleGetFollowers(_request, _session, _env, _requestContext) {
-        return NOT_IMPLEMENTED;
-    }
-    async handleGetStatus(_request, _session, _env, _requestContext) {
-        return NOT_IMPLEMENTED;
-    }
-    async handleGetCount(_request, _session, _env, _requestContext) {
-        return NOT_IMPLEMENTED;
-    }
-}
-exports.FollowersHandler = FollowersHandler;
-//# sourceMappingURL=followers-handler.js.map

package/dist/lib/followers-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"followers-handler.js","sourceRoot":"","sources":["../../src/lib/followers-handler.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAMH,MAAM,eAAe,GAAG,IAAI,QAAQ,CAClC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,EAC/D,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;AAEF,MAAa,gBAAgB;IAC3B,KAAK,CAAC,YAAY,CAChB,QAAiB,EACjB,QAAiB,EACjB,IAAS,EACT,eAA+B;QAE/B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAiB,EACjB,QAAiB,EACjB,IAAS,EACT,eAA+B;QAE/B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,QAAiB,EACjB,QAAiB,EACjB,IAAS,EACT,eAA+B;QAE/B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,QAAiB,EACjB,QAAiB,EACjB,IAAS,EACT,eAA+B;QAE/B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,QAAiB,EACjB,QAAiB,EACjB,IAAS,EACT,eAA+B;QAE/B,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAiB,EACjB,QAAiB,EACjB,IAAS,EACT,eAA+B;QAE/B,OAAO,eAAe,CAAC;IACzB,CAAC;CACF;AAtDD,4CAsDC"}

package/dist/lib/routes/followers.d.ts

@@ -1,6 +0,0 @@
-/**
- * Followers Routes
- */
-import type { Route } from "./types";
-export declare const followersRoutes: Route[];
-//# sourceMappingURL=followers.d.ts.map

package/dist/lib/routes/followers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"followers.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/followers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAaH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,eAAe,EAAE,KAAK,EA8hBlC,CAAC"}