@digitaldefiance/ecies-lib 4.4.13 → 4.4.14

package/src/lib/id-providers/uuid-provider.d.ts

@@ -0,0 +1,52 @@
+import { BaseIdProvider } from '../../interfaces/id-provider';
+/**
+ * ID provider for standard RFC 4122 UUIDs (16 bytes).
+ *
+ * Uses the 'uuid' npm package for UUID generation and validation.
+ * Serialization uses the standard UUID format with dashes (36 characters).
+ *
+ * This is functionally similar to GuidV4Provider but uses standard UUID
+ * string formatting (with dashes) instead of base64.
+ */
+export declare class UuidProvider extends BaseIdProvider {
+    readonly byteLength = 16;
+    readonly name = "UUID";
+    /**
+     * Generate a new random UUIDv4.
+     */
+    generate(): Uint8Array;
+    /**
+     * Validate a UUID buffer.
+     * Checks length and RFC 4122 compliance.
+     */
+    validate(id: Uint8Array): boolean;
+    /**
+     * Serialize UUID to standard format with dashes (36 characters).
+     * Format: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+     */
+    serialize(id: Uint8Array): string;
+    /**
+     * Deserialize a UUID string (with or without dashes) to buffer.
+     */
+    deserialize(str: string): Uint8Array;
+    /**
+     * Extract the version from a UUID buffer.
+     * Should return 4 for v4 UUIDs.
+     */
+    getVersion(id: Uint8Array): number | undefined;
+    /**
+     * Check if a UUID is the nil UUID (all zeros).
+     */
+    isNil(id: Uint8Array): boolean;
+    /**
+     * Convert an ID of unknown type to a string representation.
+     * Delegates to base implementation.
+     */
+    idToString(id: unknown): string;
+    /**
+     * Convert a string representation of an ID back to an ID buffer.
+     * Delegates to deserialize.
+     */
+    idFromString(str: string): Uint8Array;
+}
+//# sourceMappingURL=uuid-provider.d.ts.map

package/src/lib/id-providers/uuid-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid-provider.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/id-providers/uuid-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAK9D;;;;;;;;GAQG;AACH,qBAAa,YAAa,SAAQ,cAAc;IAC9C,QAAQ,CAAC,UAAU,MAAM;IACzB,QAAQ,CAAC,IAAI,UAAU;IAEvB;;OAEG;IACH,QAAQ,IAAI,UAAU;IAMtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO;IAcjC;;;OAGG;IACH,SAAS,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM;IAWjC;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IA4BpC;;;OAGG;IACH,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS;IAQ9C;;OAEG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO;IAW9B;;;OAGG;IACM,UAAU,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM;IAIxC;;;OAGG;IACM,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;CAG/C"}

package/src/lib/id-providers/uuid-provider.js

@@ -0,0 +1,110 @@
+import { BaseIdProvider } from '../../interfaces/id-provider';
+import { v4 as uuidv4, validate as uuidValidate, parse as uuidParse } from 'uuid';
+import { IdProviderError } from '../../errors/id-provider';
+import { IdProviderErrorType } from '../../enumerations/id-provider-error-type';
+/**
+ * ID provider for standard RFC 4122 UUIDs (16 bytes).
+ *
+ * Uses the 'uuid' npm package for UUID generation and validation.
+ * Serialization uses the standard UUID format with dashes (36 characters).
+ *
+ * This is functionally similar to GuidV4Provider but uses standard UUID
+ * string formatting (with dashes) instead of base64.
+ */
+export class UuidProvider extends BaseIdProvider {
+    byteLength = 16;
+    name = 'UUID';
+    /**
+     * Generate a new random UUIDv4.
+     */
+    generate() {
+        const buffer = new Uint8Array(16);
+        uuidv4(undefined, buffer);
+        return buffer;
+    }
+    /**
+     * Validate a UUID buffer.
+     * Checks length and RFC 4122 compliance.
+     */
+    validate(id) {
+        if (id.length !== this.byteLength) {
+            return false;
+        }
+        try {
+            // Convert to string and validate
+            const str = this.serialize(id);
+            return uuidValidate(str);
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Serialize UUID to standard format with dashes (36 characters).
+     * Format: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+     */
+    serialize(id) {
+        this.validateLength(id, 'UuidProvider.serialize');
+        const hex = Array.from(id)
+            .map(b => b.toString(16).padStart(2, '0'))
+            .join('');
+        // Insert dashes at proper positions
+        return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+    }
+    /**
+     * Deserialize a UUID string (with or without dashes) to buffer.
+     */
+    deserialize(str) {
+        if (typeof str !== 'string') {
+            throw new IdProviderError(IdProviderErrorType.InputMustBeString);
+        }
+        // Validate format
+        if (!uuidValidate(str)) {
+            throw new IdProviderError(IdProviderErrorType.InvalidUuidFormat, undefined, undefined, { input: str });
+        }
+        try {
+            const buffer = uuidParse(str);
+            return buffer;
+        }
+        catch (error) {
+            throw new IdProviderError(IdProviderErrorType.ParseFailed, { cause: error instanceof Error ? error : undefined }, undefined, { input: str, message: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    /**
+     * Extract the version from a UUID buffer.
+     * Should return 4 for v4 UUIDs.
+     */
+    getVersion(id) {
+        this.validateLength(id, 'UuidProvider.getVersion');
+        // Version is in the most significant 4 bits of byte 6
+        const versionByte = id[6];
+        return (versionByte >> 4) & 0x0F;
+    }
+    /**
+     * Check if a UUID is the nil UUID (all zeros).
+     */
+    isNil(id) {
+        this.validateLength(id, 'UuidProvider.isNil');
+        for (let i = 0; i < id.length; i++) {
+            if (id[i] !== 0) {
+                return false;
+            }
+        }
+        return true;
+    }
+    /**
+     * Convert an ID of unknown type to a string representation.
+     * Delegates to base implementation.
+     */
+    idToString(id) {
+        return super.idToString(id);
+    }
+    /**
+     * Convert a string representation of an ID back to an ID buffer.
+     * Delegates to deserialize.
+     */
+    idFromString(str) {
+        return this.deserialize(str);
+    }
+}
+//# sourceMappingURL=uuid-provider.js.map

package/src/lib/id-providers/uuid-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid-provider.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/id-providers/uuid-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAEhF;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAa,SAAQ,cAAc;IACrC,UAAU,GAAG,EAAE,CAAC;IAChB,IAAI,GAAG,MAAM,CAAC;IAEvB;;OAEG;IACH,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,EAAc;QACrB,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC/B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,EAAc;QACtB,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAElD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;aACvB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aACzC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,oCAAoC;QACpC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7G,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAW;QACrB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;QACnE,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CACvB,mBAAmB,CAAC,iBAAiB,EACrC,SAAS,EACT,SAAS,EACT,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,eAAe,CACvB,mBAAmB,CAAC,WAAW,EAC/B,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,EACrD,SAAS,EACT,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,EAAc;QACvB,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAEnD,sDAAsD;QACtD,MAAM,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,EAAc;QAClB,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAE9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACM,UAAU,CAAC,EAAW;QAC7B,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACM,YAAY,CAAC,GAAW;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/src/lib/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Library exports for v2 architecture
+ */
+export * from './crypto-container';
+export * from './guid';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/lib/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,oBAAoB,CAAC;AACnC,cAAc,QAAQ,CAAC"}

package/src/lib/{index.ts → index.js}

@@ -1,6 +1,6 @@
 /**
  * Library exports for v2 architecture
  */
-
 export * from './crypto-container';
-export * from './guid';
+export * from './guid';
+//# sourceMappingURL=index.js.map

package/src/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/lib/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,oBAAoB,CAAC;AACnC,cAAc,QAAQ,CAAC"}

package/src/lib/invariant-validator.d.ts

@@ -0,0 +1,59 @@
+import { IConstants } from '../interfaces/constants';
+import { IInvariant } from '../interfaces/invariant';
+/**
+ * Validates all configuration invariants.
+ *
+ * This class maintains a registry of all invariants and validates them
+ * whenever a configuration is created or modified.
+ *
+ * Adding new invariants is easy - just:
+ * 1. Create a class implementing IInvariant
+ * 2. Add it to the DEFAULT_INVARIANTS array
+ * 3. Tests will automatically validate it
+ */
+export declare class InvariantValidator {
+    /**
+     * Default invariants that are always checked
+     */
+    private static readonly DEFAULT_INVARIANTS;
+    /**
+     * Custom invariants registered at runtime
+     */
+    private static customInvariants;
+    /**
+     * Register a custom invariant to be checked alongside default invariants
+     */
+    static registerInvariant(invariant: IInvariant): void;
+    /**
+     * Clear all custom invariants (useful for testing)
+     */
+    static clearCustomInvariants(): void;
+    /**
+     * Get all invariants (default + custom)
+     */
+    static getAllInvariants(): readonly IInvariant[];
+    /**
+     * Validate all invariants for a given configuration
+     *
+     * @param config The configuration to validate
+     * @throws Error if any invariant fails
+     */
+    static validateAll(config: IConstants): void;
+    /**
+     * Check a single invariant
+     *
+     * @param config The configuration to validate
+     * @param invariantName Name of the invariant to check
+     * @returns true if invariant passes, false otherwise
+     */
+    static checkInvariant(config: IConstants, invariantName: string): boolean;
+    /**
+     * Get failure details for a specific invariant
+     *
+     * @param config The configuration to validate
+     * @param invariantName Name of the invariant to check
+     * @returns Error message if invariant fails, null if it passes
+     */
+    static getFailureDetails(config: IConstants, invariantName: string): string | null;
+}
+//# sourceMappingURL=invariant-validator.d.ts.map

package/src/lib/invariant-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant-validator.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariant-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAUrD;;;;;;;;;;GAUG;AACH,qBAAa,kBAAkB;IAC7B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAIxC;IAEF;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAoB;IAEnD;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IAIrD;;OAEG;IACH,MAAM,CAAC,qBAAqB,IAAI,IAAI;IAIpC;;OAEG;IACH,MAAM,CAAC,gBAAgB,IAAI,SAAS,UAAU,EAAE;IAIhD;;;;;OAKG;IACH,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAuB5C;;;;;;OAMG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO;IAgBzE;;;;;;OAMG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAenF"}

package/src/lib/invariant-validator.js

@@ -0,0 +1,97 @@
+import { RecipientIdConsistencyInvariant, Pbkdf2ProfilesValidityInvariant, EncryptionAlgorithmConsistencyInvariant, } from './invariants';
+import { EciesComponentId, getEciesI18nEngine } from '../i18n-setup';
+import { EciesStringKey } from '../enumerations/ecies-string-key';
+import { TranslatableGenericError } from '@digitaldefiance/i18n-lib';
+/**
+ * Validates all configuration invariants.
+ *
+ * This class maintains a registry of all invariants and validates them
+ * whenever a configuration is created or modified.
+ *
+ * Adding new invariants is easy - just:
+ * 1. Create a class implementing IInvariant
+ * 2. Add it to the DEFAULT_INVARIANTS array
+ * 3. Tests will automatically validate it
+ */
+export class InvariantValidator {
+    /**
+     * Default invariants that are always checked
+     */
+    static DEFAULT_INVARIANTS = [
+        new RecipientIdConsistencyInvariant(),
+        new Pbkdf2ProfilesValidityInvariant(),
+        new EncryptionAlgorithmConsistencyInvariant(),
+    ];
+    /**
+     * Custom invariants registered at runtime
+     */
+    static customInvariants = [];
+    /**
+     * Register a custom invariant to be checked alongside default invariants
+     */
+    static registerInvariant(invariant) {
+        this.customInvariants.push(invariant);
+    }
+    /**
+     * Clear all custom invariants (useful for testing)
+     */
+    static clearCustomInvariants() {
+        this.customInvariants = [];
+    }
+    /**
+     * Get all invariants (default + custom)
+     */
+    static getAllInvariants() {
+        return [...this.DEFAULT_INVARIANTS, ...this.customInvariants];
+    }
+    /**
+     * Validate all invariants for a given configuration
+     *
+     * @param config The configuration to validate
+     * @throws Error if any invariant fails
+     */
+    static validateAll(config) {
+        const allInvariants = this.getAllInvariants();
+        const failures = [];
+        for (const invariant of allInvariants) {
+            if (!invariant.check(config)) {
+                failures.push(invariant.errorMessage(config));
+            }
+        }
+        if (failures.length > 0) {
+            const engine = getEciesI18nEngine();
+            throw TranslatableGenericError.withEngine(engine, EciesComponentId, EciesStringKey.Error_Invariant_ConfigurationValidationFailedMultipleTemplate, { count: failures.length, failures: failures.join('\n\n') }, undefined, { invariantCount: failures.length });
+        }
+    }
+    /**
+     * Check a single invariant
+     *
+     * @param config The configuration to validate
+     * @param invariantName Name of the invariant to check
+     * @returns true if invariant passes, false otherwise
+     */
+    static checkInvariant(config, invariantName) {
+        const invariant = this.getAllInvariants().find(i => i.name === invariantName);
+        if (!invariant) {
+            const engine = getEciesI18nEngine();
+            throw TranslatableGenericError.withEngine(engine, EciesComponentId, EciesStringKey.Error_Invariant_UnknownInvariantTemplate, { name: invariantName }, undefined, { invariantName });
+        }
+        return invariant.check(config);
+    }
+    /**
+     * Get failure details for a specific invariant
+     *
+     * @param config The configuration to validate
+     * @param invariantName Name of the invariant to check
+     * @returns Error message if invariant fails, null if it passes
+     */
+    static getFailureDetails(config, invariantName) {
+        const invariant = this.getAllInvariants().find(i => i.name === invariantName);
+        if (!invariant) {
+            const engine = getEciesI18nEngine();
+            throw TranslatableGenericError.withEngine(engine, EciesComponentId, EciesStringKey.Error_Invariant_UnknownInvariantTemplate, { name: invariantName }, undefined, { invariantName });
+        }
+        return invariant.check(config) ? null : invariant.errorMessage(config);
+    }
+}
+//# sourceMappingURL=invariant-validator.js.map

package/src/lib/invariant-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant-validator.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariant-validator.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,EAC/B,uCAAuC,GACxC,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,kBAAkB;IAC7B;;OAEG;IACK,MAAM,CAAU,kBAAkB,GAAiB;QACzD,IAAI,+BAA+B,EAAE;QACrC,IAAI,+BAA+B,EAAE;QACrC,IAAI,uCAAuC,EAAE;KAC9C,CAAC;IAEF;;OAEG;IACK,MAAM,CAAC,gBAAgB,GAAiB,EAAE,CAAC;IAEnD;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,SAAqB;QAC5C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,qBAAqB;QAC1B,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB;QACrB,OAAO,CAAC,GAAG,IAAI,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,WAAW,CAAC,MAAkB;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpC,MAAM,wBAAwB,CAAC,UAAU,CACvC,MAAM,EACN,gBAAgB,EAChB,cAAc,CAAC,6DAA6D,EAC5E,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAC3D,SAAS,EACT,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,cAAc,CAAC,MAAkB,EAAE,aAAqB;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpC,MAAM,wBAAwB,CAAC,UAAU,CACvC,MAAM,EACN,gBAAgB,EAChB,cAAc,CAAC,wCAAwC,EACvD,EAAE,IAAI,EAAE,aAAa,EAAE,EACvB,SAAS,EACT,EAAE,aAAa,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAAkB,EAAE,aAAqB;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpC,MAAM,wBAAwB,CAAC,UAAU,CACvC,MAAM,EACN,gBAAgB,EAChB,cAAc,CAAC,wCAAwC,EACvD,EAAE,IAAI,EAAE,aAAa,EAAE,EACvB,SAAS,EACT,EAAE,aAAa,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC"}

package/src/lib/invariants/encryption-algorithm-consistency.d.ts

@@ -0,0 +1,17 @@
+import { IConstants } from '../../interfaces/constants';
+import { BaseInvariant } from '../../interfaces/invariant';
+/**
+ * Validates that encryption algorithm parameters are consistent.
+ *
+ * Checks:
+ * - Symmetric key size matches the algorithm (AES-256 = 32 bytes)
+ * - Curve name is supported
+ * - Key derivation path is valid
+ */
+export declare class EncryptionAlgorithmConsistencyInvariant extends BaseInvariant {
+    private static readonly SUPPORTED_CURVES;
+    constructor();
+    check(config: IConstants): boolean;
+    errorMessage(config: IConstants): string;
+}
+//# sourceMappingURL=encryption-algorithm-consistency.d.ts.map

package/src/lib/invariants/encryption-algorithm-consistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-algorithm-consistency.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/encryption-algorithm-consistency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D;;;;;;;GAOG;AACH,qBAAa,uCAAwC,SAAQ,aAAa;IACxE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAKtC;;IASF,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAqBlC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;CAyBzC"}

package/src/lib/invariants/encryption-algorithm-consistency.js

@@ -0,0 +1,49 @@
+import { BaseInvariant } from '../../interfaces/invariant';
+/**
+ * Validates that encryption algorithm parameters are consistent.
+ *
+ * Checks:
+ * - Symmetric key size matches the algorithm (AES-256 = 32 bytes)
+ * - Curve name is supported
+ * - Key derivation path is valid
+ */
+export class EncryptionAlgorithmConsistencyInvariant extends BaseInvariant {
+    static SUPPORTED_CURVES = [
+        'secp256k1',
+        'p256',
+        'p384',
+        'p521',
+    ];
+    constructor() {
+        super('EncryptionAlgorithmConsistency', 'Encryption algorithm parameters must be consistent');
+    }
+    check(config) {
+        // AES-256 requires 32-byte keys
+        if (config.ECIES.SYMMETRIC.KEY_SIZE !== 32) {
+            return false;
+        }
+        // Check curve is supported
+        if (!EncryptionAlgorithmConsistencyInvariant.SUPPORTED_CURVES.includes(config.ECIES.CURVE_NAME)) {
+            return false;
+        }
+        // Key derivation path should be valid BIP32 path
+        if (!config.ECIES.PRIMARY_KEY_DERIVATION_PATH.startsWith('m/')) {
+            return false;
+        }
+        return true;
+    }
+    errorMessage(config) {
+        const issues = [];
+        if (config.ECIES.SYMMETRIC.KEY_SIZE !== 32) {
+            issues.push(`SYMMETRIC.KEY_SIZE (${config.ECIES.SYMMETRIC.KEY_SIZE}) must be 32 for AES-256`);
+        }
+        if (!EncryptionAlgorithmConsistencyInvariant.SUPPORTED_CURVES.includes(config.ECIES.CURVE_NAME)) {
+            issues.push(`CURVE_NAME (${config.ECIES.CURVE_NAME}) must be one of: ${EncryptionAlgorithmConsistencyInvariant.SUPPORTED_CURVES.join(', ')}`);
+        }
+        if (!config.ECIES.PRIMARY_KEY_DERIVATION_PATH.startsWith('m/')) {
+            issues.push(`PRIMARY_KEY_DERIVATION_PATH (${config.ECIES.PRIMARY_KEY_DERIVATION_PATH}) must be a valid BIP32 path starting with 'm/'`);
+        }
+        return `Invariant '${this.name}' failed:\n  ${issues.join('\n  ')}`;
+    }
+}
+//# sourceMappingURL=encryption-algorithm-consistency.js.map

package/src/lib/invariants/encryption-algorithm-consistency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-algorithm-consistency.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/encryption-algorithm-consistency.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,OAAO,uCAAwC,SAAQ,aAAa;IAChE,MAAM,CAAU,gBAAgB,GAAG;QACzC,WAAW;QACX,MAAM;QACN,MAAM;QACN,MAAM;KACP,CAAC;IAEF;QACE,KAAK,CACH,gCAAgC,EAChC,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAkB;QACtB,gCAAgC;QAChC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,uCAAuC,CAAC,gBAAgB,CAAC,QAAQ,CACpE,MAAM,CAAC,KAAK,CAAC,UAAU,CACxB,EAAE,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,MAAkB;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CACT,uBAAuB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,0BAA0B,CACjF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,uCAAuC,CAAC,gBAAgB,CAAC,QAAQ,CACpE,MAAM,CAAC,KAAK,CAAC,UAAU,CACxB,EAAE,CAAC;YACF,MAAM,CAAC,IAAI,CACT,eAAe,MAAM,CAAC,KAAK,CAAC,UAAU,qBAAqB,uCAAuC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjI,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,IAAI,CACT,gCAAgC,MAAM,CAAC,KAAK,CAAC,2BAA2B,iDAAiD,CAC1H,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,IAAI,CAAC,IAAI,gBAAgB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtE,CAAC"}

package/src/lib/invariants/index.d.ts

@@ -0,0 +1,4 @@
+export * from './recipient-id-consistency';
+export * from './pbkdf2-profiles-validity';
+export * from './encryption-algorithm-consistency';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/invariants/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC"}

package/src/lib/invariants/{index.ts → index.js}

@@ -1,3 +1,4 @@
 export * from './recipient-id-consistency';
 export * from './pbkdf2-profiles-validity';
 export * from './encryption-algorithm-consistency';
+//# sourceMappingURL=index.js.map

package/src/lib/invariants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC"}

package/src/lib/invariants/pbkdf2-profiles-validity.d.ts

@@ -0,0 +1,16 @@
+import { IConstants } from '../../interfaces/constants';
+import { BaseInvariant } from '../../interfaces/invariant';
+/**
+ * Validates that PBKDF2 profiles have sensible parameters.
+ *
+ * Checks:
+ * - iterations > 0 and not too low (security risk)
+ * - saltBytes > 0 and reasonable
+ * - hashBytes > 0 and matches expected hash output
+ */
+export declare class Pbkdf2ProfilesValidityInvariant extends BaseInvariant {
+    constructor();
+    check(config: IConstants): boolean;
+    errorMessage(config: IConstants): string;
+}
+//# sourceMappingURL=pbkdf2-profiles-validity.d.ts.map

package/src/lib/invariants/pbkdf2-profiles-validity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf2-profiles-validity.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/pbkdf2-profiles-validity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D;;;;;;;GAOG;AACH,qBAAa,+BAAgC,SAAQ,aAAa;;IAQhE,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IA2BlC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;CA8BzC"}

package/src/lib/invariants/pbkdf2-profiles-validity.js

@@ -0,0 +1,58 @@
+import { BaseInvariant } from '../../interfaces/invariant';
+import { Pbkdf2ProfileEnum } from '../../enumerations/pbkdf2-profile';
+/**
+ * Validates that PBKDF2 profiles have sensible parameters.
+ *
+ * Checks:
+ * - iterations > 0 and not too low (security risk)
+ * - saltBytes > 0 and reasonable
+ * - hashBytes > 0 and matches expected hash output
+ */
+export class Pbkdf2ProfilesValidityInvariant extends BaseInvariant {
+    constructor() {
+        super('Pbkdf2ProfilesValidity', 'PBKDF2 profiles must have valid cryptographic parameters');
+    }
+    check(config) {
+        const profiles = [
+            config.PBKDF2_PROFILES[Pbkdf2ProfileEnum.BROWSER_PASSWORD],
+            config.PBKDF2_PROFILES[Pbkdf2ProfileEnum.HIGH_SECURITY],
+            config.PBKDF2_PROFILES[Pbkdf2ProfileEnum.TEST_FAST],
+        ];
+        for (const profile of profiles) {
+            // iterations must be positive and reasonable
+            if (profile.iterations < 1000 || profile.iterations > 10_000_000) {
+                return false;
+            }
+            // saltBytes must be at least 16 bytes (128 bits)
+            if (profile.saltBytes < 16 || profile.saltBytes > 256) {
+                return false;
+            }
+            // hashBytes must be positive and reasonable for sha256
+            if (profile.hashBytes < 16 || profile.hashBytes > 64) {
+                return false;
+            }
+        }
+        return true;
+    }
+    errorMessage(config) {
+        const issues = [];
+        const profileTests = [
+            { name: 'BROWSER_PASSWORD', profile: config.PBKDF2_PROFILES[Pbkdf2ProfileEnum.BROWSER_PASSWORD] },
+            { name: 'HIGH_SECURITY', profile: config.PBKDF2_PROFILES[Pbkdf2ProfileEnum.HIGH_SECURITY] },
+            { name: 'TEST_FAST', profile: config.PBKDF2_PROFILES[Pbkdf2ProfileEnum.TEST_FAST] },
+        ];
+        for (const { name, profile } of profileTests) {
+            if (profile.iterations < 1000 || profile.iterations > 10_000_000) {
+                issues.push(`${name}.iterations (${profile.iterations}) must be between 1000 and 10,000,000`);
+            }
+            if (profile.saltBytes < 16 || profile.saltBytes > 256) {
+                issues.push(`${name}.saltBytes (${profile.saltBytes}) must be between 16 and 256`);
+            }
+            if (profile.hashBytes < 16 || profile.hashBytes > 64) {
+                issues.push(`${name}.hashBytes (${profile.hashBytes}) must be between 16 and 64`);
+            }
+        }
+        return `Invariant '${this.name}' failed:\n  ${issues.join('\n  ')}`;
+    }
+}
+//# sourceMappingURL=pbkdf2-profiles-validity.js.map

package/src/lib/invariants/pbkdf2-profiles-validity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf2-profiles-validity.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/pbkdf2-profiles-validity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,OAAO,+BAAgC,SAAQ,aAAa;IAChE;QACE,KAAK,CACH,wBAAwB,EACxB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAkB;QACtB,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;YAC1D,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,aAAa,CAAC;YACvD,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,SAAS,CAAC;SACpD,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,6CAA6C;YAC7C,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;gBACjE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,iDAAiD;YACjD,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACtD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,uDAAuD;YACvD,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,MAAkB;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG;YACnB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE;YACjG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE;YAC3F,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE;SACpF,CAAC;QAEF,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,YAAY,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;gBACjE,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,gBAAgB,OAAO,CAAC,UAAU,uCAAuC,CACjF,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,eAAe,OAAO,CAAC,SAAS,8BAA8B,CACtE,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,eAAe,OAAO,CAAC,SAAS,6BAA6B,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,cAAc,IAAI,CAAC,IAAI,gBAAgB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtE,CAAC;CACF"}

package/src/lib/invariants/recipient-id-consistency.d.ts

@@ -0,0 +1,18 @@
+import { IConstants } from '../../interfaces/constants';
+import { BaseInvariant } from '../../interfaces/invariant';
+/**
+ * Validates that all recipient ID size configurations are consistent.
+ *
+ * This invariant would have caught the 12 vs 32 byte discrepancy.
+ *
+ * Checks:
+ * - MEMBER_ID_LENGTH === idProvider.byteLength
+ * - ECIES.MULTIPLE.RECIPIENT_ID_SIZE === idProvider.byteLength
+ * - All three values must be in sync
+ */
+export declare class RecipientIdConsistencyInvariant extends BaseInvariant {
+    constructor();
+    check(config: IConstants): boolean;
+    errorMessage(config: IConstants): string;
+}
+//# sourceMappingURL=recipient-id-consistency.d.ts.map

package/src/lib/invariants/recipient-id-consistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-id-consistency.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/recipient-id-consistency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D;;;;;;;;;GASG;AACH,qBAAa,+BAAgC,SAAQ,aAAa;;IAQhE,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAOlC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;CAiBzC"}

package/src/lib/invariants/recipient-id-consistency.js

@@ -0,0 +1,31 @@
+import { BaseInvariant } from '../../interfaces/invariant';
+/**
+ * Validates that all recipient ID size configurations are consistent.
+ *
+ * This invariant would have caught the 12 vs 32 byte discrepancy.
+ *
+ * Checks:
+ * - MEMBER_ID_LENGTH === idProvider.byteLength
+ * - ECIES.MULTIPLE.RECIPIENT_ID_SIZE === idProvider.byteLength
+ * - All three values must be in sync
+ */
+export class RecipientIdConsistencyInvariant extends BaseInvariant {
+    constructor() {
+        super('RecipientIdConsistency', 'All recipient ID size configurations must match the ID provider byte length');
+    }
+    check(config) {
+        return (config.MEMBER_ID_LENGTH === config.idProvider.byteLength &&
+            config.ECIES.MULTIPLE.RECIPIENT_ID_SIZE === config.idProvider.byteLength);
+    }
+    errorMessage(config) {
+        const issues = [];
+        if (config.MEMBER_ID_LENGTH !== config.idProvider.byteLength) {
+            issues.push(`MEMBER_ID_LENGTH (${config.MEMBER_ID_LENGTH}) !== idProvider.byteLength (${config.idProvider.byteLength})`);
+        }
+        if (config.ECIES.MULTIPLE.RECIPIENT_ID_SIZE !== config.idProvider.byteLength) {
+            issues.push(`ECIES.MULTIPLE.RECIPIENT_ID_SIZE (${config.ECIES.MULTIPLE.RECIPIENT_ID_SIZE}) !== idProvider.byteLength (${config.idProvider.byteLength})`);
+        }
+        return `Invariant '${this.name}' failed:\n  ${issues.join('\n  ')}`;
+    }
+}
+//# sourceMappingURL=recipient-id-consistency.js.map

package/src/lib/invariants/recipient-id-consistency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-id-consistency.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/recipient-id-consistency.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D;;;;;;;;;GASG;AACH,MAAM,OAAO,+BAAgC,SAAQ,aAAa;IAChE;QACE,KAAK,CACH,wBAAwB,EACxB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAkB;QACtB,OAAO,CACL,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,UAAU,CAAC,UAAU;YACxD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC,UAAU,CAAC,UAAU,CACzE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,MAAkB;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CACT,qBAAqB,MAAM,CAAC,gBAAgB,gCAAgC,MAAM,CAAC,UAAU,CAAC,UAAU,GAAG,CAC5G,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,CACT,qCAAqC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,gCAAgC,MAAM,CAAC,UAAU,CAAC,UAAU,GAAG,CAC5I,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,IAAI,CAAC,IAAI,gBAAgB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtE,CAAC;CACF"}