@digitaldefiance/ecies-lib 4.4.13 → 4.4.15

package/src/lib/id-providers/uuid-provider.d.ts

@@ -0,0 +1,52 @@
+import { BaseIdProvider } from '../../interfaces/id-provider';
+/**
+ * ID provider for standard RFC 4122 UUIDs (16 bytes).
+ *
+ * Uses the 'uuid' npm package for UUID generation and validation.
+ * Serialization uses the standard UUID format with dashes (36 characters).
+ *
+ * This is functionally similar to GuidV4Provider but uses standard UUID
+ * string formatting (with dashes) instead of base64.
+ */
+export declare class UuidProvider extends BaseIdProvider {
+    readonly byteLength = 16;
+    readonly name = "UUID";
+    /**
+     * Generate a new random UUIDv4.
+     */
+    generate(): Uint8Array;
+    /**
+     * Validate a UUID buffer.
+     * Checks length and RFC 4122 compliance.
+     */
+    validate(id: Uint8Array): boolean;
+    /**
+     * Serialize UUID to standard format with dashes (36 characters).
+     * Format: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+     */
+    serialize(id: Uint8Array): string;
+    /**
+     * Deserialize a UUID string (with or without dashes) to buffer.
+     */
+    deserialize(str: string): Uint8Array;
+    /**
+     * Extract the version from a UUID buffer.
+     * Should return 4 for v4 UUIDs.
+     */
+    getVersion(id: Uint8Array): number | undefined;
+    /**
+     * Check if a UUID is the nil UUID (all zeros).
+     */
+    isNil(id: Uint8Array): boolean;
+    /**
+     * Convert an ID of unknown type to a string representation.
+     * Delegates to base implementation.
+     */
+    idToString(id: unknown): string;
+    /**
+     * Convert a string representation of an ID back to an ID buffer.
+     * Delegates to deserialize.
+     */
+    idFromString(str: string): Uint8Array;
+}
+//# sourceMappingURL=uuid-provider.d.ts.map

package/src/lib/id-providers/uuid-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid-provider.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/id-providers/uuid-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAK9D;;;;;;;;GAQG;AACH,qBAAa,YAAa,SAAQ,cAAc;IAC9C,QAAQ,CAAC,UAAU,MAAM;IACzB,QAAQ,CAAC,IAAI,UAAU;IAEvB;;OAEG;IACH,QAAQ,IAAI,UAAU;IAMtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO;IAcjC;;;OAGG;IACH,SAAS,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM;IAWjC;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IA4BpC;;;OAGG;IACH,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS;IAQ9C;;OAEG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO;IAW9B;;;OAGG;IACM,UAAU,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM;IAIxC;;;OAGG;IACM,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;CAG/C"}

package/src/lib/id-providers/uuid-provider.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UuidProvider = void 0;
+const id_provider_1 = require("../../interfaces/id-provider");
+const uuid_1 = require("uuid");
+const id_provider_2 = require("../../errors/id-provider");
+const id_provider_error_type_1 = require("../../enumerations/id-provider-error-type");
+/**
+ * ID provider for standard RFC 4122 UUIDs (16 bytes).
+ *
+ * Uses the 'uuid' npm package for UUID generation and validation.
+ * Serialization uses the standard UUID format with dashes (36 characters).
+ *
+ * This is functionally similar to GuidV4Provider but uses standard UUID
+ * string formatting (with dashes) instead of base64.
+ */
+class UuidProvider extends id_provider_1.BaseIdProvider {
+    byteLength = 16;
+    name = 'UUID';
+    /**
+     * Generate a new random UUIDv4.
+     */
+    generate() {
+        const buffer = new Uint8Array(16);
+        (0, uuid_1.v4)(undefined, buffer);
+        return buffer;
+    }
+    /**
+     * Validate a UUID buffer.
+     * Checks length and RFC 4122 compliance.
+     */
+    validate(id) {
+        if (id.length !== this.byteLength) {
+            return false;
+        }
+        try {
+            // Convert to string and validate
+            const str = this.serialize(id);
+            return (0, uuid_1.validate)(str);
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Serialize UUID to standard format with dashes (36 characters).
+     * Format: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+     */
+    serialize(id) {
+        this.validateLength(id, 'UuidProvider.serialize');
+        const hex = Array.from(id)
+            .map(b => b.toString(16).padStart(2, '0'))
+            .join('');
+        // Insert dashes at proper positions
+        return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+    }
+    /**
+     * Deserialize a UUID string (with or without dashes) to buffer.
+     */
+    deserialize(str) {
+        if (typeof str !== 'string') {
+            throw new id_provider_2.IdProviderError(id_provider_error_type_1.IdProviderErrorType.InputMustBeString);
+        }
+        // Validate format
+        if (!(0, uuid_1.validate)(str)) {
+            throw new id_provider_2.IdProviderError(id_provider_error_type_1.IdProviderErrorType.InvalidUuidFormat, undefined, undefined, { input: str });
+        }
+        try {
+            const buffer = (0, uuid_1.parse)(str);
+            return buffer;
+        }
+        catch (error) {
+            throw new id_provider_2.IdProviderError(id_provider_error_type_1.IdProviderErrorType.ParseFailed, { cause: error instanceof Error ? error : undefined }, undefined, { input: str, message: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    /**
+     * Extract the version from a UUID buffer.
+     * Should return 4 for v4 UUIDs.
+     */
+    getVersion(id) {
+        this.validateLength(id, 'UuidProvider.getVersion');
+        // Version is in the most significant 4 bits of byte 6
+        const versionByte = id[6];
+        return (versionByte >> 4) & 0x0F;
+    }
+    /**
+     * Check if a UUID is the nil UUID (all zeros).
+     */
+    isNil(id) {
+        this.validateLength(id, 'UuidProvider.isNil');
+        for (let i = 0; i < id.length; i++) {
+            if (id[i] !== 0) {
+                return false;
+            }
+        }
+        return true;
+    }
+    /**
+     * Convert an ID of unknown type to a string representation.
+     * Delegates to base implementation.
+     */
+    idToString(id) {
+        return super.idToString(id);
+    }
+    /**
+     * Convert a string representation of an ID back to an ID buffer.
+     * Delegates to deserialize.
+     */
+    idFromString(str) {
+        return this.deserialize(str);
+    }
+}
+exports.UuidProvider = UuidProvider;
+//# sourceMappingURL=uuid-provider.js.map

package/src/lib/id-providers/uuid-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid-provider.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/id-providers/uuid-provider.ts"],"names":[],"mappings":";;;AAAA,8DAA8D;AAC9D,+BAAkF;AAClF,0DAA2D;AAC3D,sFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAa,YAAa,SAAQ,4BAAc;IACrC,UAAU,GAAG,EAAE,CAAC;IAChB,IAAI,GAAG,MAAM,CAAC;IAEvB;;OAEG;IACH,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAClC,IAAA,SAAM,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,EAAc;QACrB,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC/B,OAAO,IAAA,eAAY,EAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,EAAc;QACtB,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAElD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;aACvB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aACzC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,oCAAoC;QACpC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7G,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAW;QACrB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,6BAAe,CAAC,4CAAmB,CAAC,iBAAiB,CAAC,CAAC;QACnE,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,IAAA,eAAY,EAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,6BAAe,CACvB,4CAAmB,CAAC,iBAAiB,EACrC,SAAS,EACT,SAAS,EACT,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,YAAS,EAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,6BAAe,CACvB,4CAAmB,CAAC,WAAW,EAC/B,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,EACrD,SAAS,EACT,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,EAAc;QACvB,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAEnD,sDAAsD;QACtD,MAAM,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,EAAc;QAClB,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAE9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACM,UAAU,CAAC,EAAW;QAC7B,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACM,YAAY,CAAC,GAAW;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF;AAtHD,oCAsHC"}

package/src/lib/{index.ts → index.d.ts}

@@ -1,6 +1,6 @@
 /**
  * Library exports for v2 architecture
  */
-
 export * from './crypto-container';
-export * from './guid';
+export * from './guid';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/lib/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,oBAAoB,CAAC;AACnC,cAAc,QAAQ,CAAC"}

package/src/lib/index.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Library exports for v2 architecture
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./crypto-container"), exports);
+tslib_1.__exportStar(require("./guid"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/lib/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,6DAAmC;AACnC,iDAAuB"}

package/src/lib/invariant-validator.d.ts

@@ -0,0 +1,59 @@
+import { IConstants } from '../interfaces/constants';
+import { IInvariant } from '../interfaces/invariant';
+/**
+ * Validates all configuration invariants.
+ *
+ * This class maintains a registry of all invariants and validates them
+ * whenever a configuration is created or modified.
+ *
+ * Adding new invariants is easy - just:
+ * 1. Create a class implementing IInvariant
+ * 2. Add it to the DEFAULT_INVARIANTS array
+ * 3. Tests will automatically validate it
+ */
+export declare class InvariantValidator {
+    /**
+     * Default invariants that are always checked
+     */
+    private static readonly DEFAULT_INVARIANTS;
+    /**
+     * Custom invariants registered at runtime
+     */
+    private static customInvariants;
+    /**
+     * Register a custom invariant to be checked alongside default invariants
+     */
+    static registerInvariant(invariant: IInvariant): void;
+    /**
+     * Clear all custom invariants (useful for testing)
+     */
+    static clearCustomInvariants(): void;
+    /**
+     * Get all invariants (default + custom)
+     */
+    static getAllInvariants(): readonly IInvariant[];
+    /**
+     * Validate all invariants for a given configuration
+     *
+     * @param config The configuration to validate
+     * @throws Error if any invariant fails
+     */
+    static validateAll(config: IConstants): void;
+    /**
+     * Check a single invariant
+     *
+     * @param config The configuration to validate
+     * @param invariantName Name of the invariant to check
+     * @returns true if invariant passes, false otherwise
+     */
+    static checkInvariant(config: IConstants, invariantName: string): boolean;
+    /**
+     * Get failure details for a specific invariant
+     *
+     * @param config The configuration to validate
+     * @param invariantName Name of the invariant to check
+     * @returns Error message if invariant fails, null if it passes
+     */
+    static getFailureDetails(config: IConstants, invariantName: string): string | null;
+}
+//# sourceMappingURL=invariant-validator.d.ts.map

package/src/lib/invariant-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant-validator.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariant-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAUrD;;;;;;;;;;GAUG;AACH,qBAAa,kBAAkB;IAC7B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAIxC;IAEF;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAoB;IAEnD;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IAIrD;;OAEG;IACH,MAAM,CAAC,qBAAqB,IAAI,IAAI;IAIpC;;OAEG;IACH,MAAM,CAAC,gBAAgB,IAAI,SAAS,UAAU,EAAE;IAIhD;;;;;OAKG;IACH,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAuB5C;;;;;;OAMG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO;IAgBzE;;;;;;OAMG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAenF"}

package/src/lib/invariant-validator.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvariantValidator = void 0;
+const invariants_1 = require("./invariants");
+const i18n_setup_1 = require("../i18n-setup");
+const ecies_string_key_1 = require("../enumerations/ecies-string-key");
+const i18n_lib_1 = require("@digitaldefiance/i18n-lib");
+/**
+ * Validates all configuration invariants.
+ *
+ * This class maintains a registry of all invariants and validates them
+ * whenever a configuration is created or modified.
+ *
+ * Adding new invariants is easy - just:
+ * 1. Create a class implementing IInvariant
+ * 2. Add it to the DEFAULT_INVARIANTS array
+ * 3. Tests will automatically validate it
+ */
+class InvariantValidator {
+    /**
+     * Default invariants that are always checked
+     */
+    static DEFAULT_INVARIANTS = [
+        new invariants_1.RecipientIdConsistencyInvariant(),
+        new invariants_1.Pbkdf2ProfilesValidityInvariant(),
+        new invariants_1.EncryptionAlgorithmConsistencyInvariant(),
+    ];
+    /**
+     * Custom invariants registered at runtime
+     */
+    static customInvariants = [];
+    /**
+     * Register a custom invariant to be checked alongside default invariants
+     */
+    static registerInvariant(invariant) {
+        this.customInvariants.push(invariant);
+    }
+    /**
+     * Clear all custom invariants (useful for testing)
+     */
+    static clearCustomInvariants() {
+        this.customInvariants = [];
+    }
+    /**
+     * Get all invariants (default + custom)
+     */
+    static getAllInvariants() {
+        return [...this.DEFAULT_INVARIANTS, ...this.customInvariants];
+    }
+    /**
+     * Validate all invariants for a given configuration
+     *
+     * @param config The configuration to validate
+     * @throws Error if any invariant fails
+     */
+    static validateAll(config) {
+        const allInvariants = this.getAllInvariants();
+        const failures = [];
+        for (const invariant of allInvariants) {
+            if (!invariant.check(config)) {
+                failures.push(invariant.errorMessage(config));
+            }
+        }
+        if (failures.length > 0) {
+            const engine = (0, i18n_setup_1.getEciesI18nEngine)();
+            throw i18n_lib_1.TranslatableGenericError.withEngine(engine, i18n_setup_1.EciesComponentId, ecies_string_key_1.EciesStringKey.Error_Invariant_ConfigurationValidationFailedMultipleTemplate, { count: failures.length, failures: failures.join('\n\n') }, undefined, { invariantCount: failures.length });
+        }
+    }
+    /**
+     * Check a single invariant
+     *
+     * @param config The configuration to validate
+     * @param invariantName Name of the invariant to check
+     * @returns true if invariant passes, false otherwise
+     */
+    static checkInvariant(config, invariantName) {
+        const invariant = this.getAllInvariants().find(i => i.name === invariantName);
+        if (!invariant) {
+            const engine = (0, i18n_setup_1.getEciesI18nEngine)();
+            throw i18n_lib_1.TranslatableGenericError.withEngine(engine, i18n_setup_1.EciesComponentId, ecies_string_key_1.EciesStringKey.Error_Invariant_UnknownInvariantTemplate, { name: invariantName }, undefined, { invariantName });
+        }
+        return invariant.check(config);
+    }
+    /**
+     * Get failure details for a specific invariant
+     *
+     * @param config The configuration to validate
+     * @param invariantName Name of the invariant to check
+     * @returns Error message if invariant fails, null if it passes
+     */
+    static getFailureDetails(config, invariantName) {
+        const invariant = this.getAllInvariants().find(i => i.name === invariantName);
+        if (!invariant) {
+            const engine = (0, i18n_setup_1.getEciesI18nEngine)();
+            throw i18n_lib_1.TranslatableGenericError.withEngine(engine, i18n_setup_1.EciesComponentId, ecies_string_key_1.EciesStringKey.Error_Invariant_UnknownInvariantTemplate, { name: invariantName }, undefined, { invariantName });
+        }
+        return invariant.check(config) ? null : invariant.errorMessage(config);
+    }
+}
+exports.InvariantValidator = InvariantValidator;
+//# sourceMappingURL=invariant-validator.js.map

package/src/lib/invariant-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant-validator.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariant-validator.ts"],"names":[],"mappings":";;;AAEA,6CAIsB;AACtB,8CAAqE;AACrE,uEAAkE;AAClE,wDAAqE;AAErE;;;;;;;;;;GAUG;AACH,MAAa,kBAAkB;IAC7B;;OAEG;IACK,MAAM,CAAU,kBAAkB,GAAiB;QACzD,IAAI,4CAA+B,EAAE;QACrC,IAAI,4CAA+B,EAAE;QACrC,IAAI,oDAAuC,EAAE;KAC9C,CAAC;IAEF;;OAEG;IACK,MAAM,CAAC,gBAAgB,GAAiB,EAAE,CAAC;IAEnD;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,SAAqB;QAC5C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,qBAAqB;QAC1B,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB;QACrB,OAAO,CAAC,GAAG,IAAI,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,WAAW,CAAC,MAAkB;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAA,+BAAkB,GAAE,CAAC;YACpC,MAAM,mCAAwB,CAAC,UAAU,CACvC,MAAM,EACN,6BAAgB,EAChB,iCAAc,CAAC,6DAA6D,EAC5E,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAC3D,SAAS,EACT,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,cAAc,CAAC,MAAkB,EAAE,aAAqB;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAA,+BAAkB,GAAE,CAAC;YACpC,MAAM,mCAAwB,CAAC,UAAU,CACvC,MAAM,EACN,6BAAgB,EAChB,iCAAc,CAAC,wCAAwC,EACvD,EAAE,IAAI,EAAE,aAAa,EAAE,EACvB,SAAS,EACT,EAAE,aAAa,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAAkB,EAAE,aAAqB;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAA,+BAAkB,GAAE,CAAC;YACpC,MAAM,mCAAwB,CAAC,UAAU,CACvC,MAAM,EACN,6BAAgB,EAChB,iCAAc,CAAC,wCAAwC,EACvD,EAAE,IAAI,EAAE,aAAa,EAAE,EACvB,SAAS,EACT,EAAE,aAAa,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;;AA7GH,gDA8GC"}

package/src/lib/invariants/encryption-algorithm-consistency.d.ts

@@ -0,0 +1,17 @@
+import { IConstants } from '../../interfaces/constants';
+import { BaseInvariant } from '../../interfaces/invariant';
+/**
+ * Validates that encryption algorithm parameters are consistent.
+ *
+ * Checks:
+ * - Symmetric key size matches the algorithm (AES-256 = 32 bytes)
+ * - Curve name is supported
+ * - Key derivation path is valid
+ */
+export declare class EncryptionAlgorithmConsistencyInvariant extends BaseInvariant {
+    private static readonly SUPPORTED_CURVES;
+    constructor();
+    check(config: IConstants): boolean;
+    errorMessage(config: IConstants): string;
+}
+//# sourceMappingURL=encryption-algorithm-consistency.d.ts.map

package/src/lib/invariants/encryption-algorithm-consistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-algorithm-consistency.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/encryption-algorithm-consistency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D;;;;;;;GAOG;AACH,qBAAa,uCAAwC,SAAQ,aAAa;IACxE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAKtC;;IASF,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAqBlC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;CAyBzC"}

package/src/lib/invariants/encryption-algorithm-consistency.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptionAlgorithmConsistencyInvariant = void 0;
+const invariant_1 = require("../../interfaces/invariant");
+/**
+ * Validates that encryption algorithm parameters are consistent.
+ *
+ * Checks:
+ * - Symmetric key size matches the algorithm (AES-256 = 32 bytes)
+ * - Curve name is supported
+ * - Key derivation path is valid
+ */
+class EncryptionAlgorithmConsistencyInvariant extends invariant_1.BaseInvariant {
+    static SUPPORTED_CURVES = [
+        'secp256k1',
+        'p256',
+        'p384',
+        'p521',
+    ];
+    constructor() {
+        super('EncryptionAlgorithmConsistency', 'Encryption algorithm parameters must be consistent');
+    }
+    check(config) {
+        // AES-256 requires 32-byte keys
+        if (config.ECIES.SYMMETRIC.KEY_SIZE !== 32) {
+            return false;
+        }
+        // Check curve is supported
+        if (!EncryptionAlgorithmConsistencyInvariant.SUPPORTED_CURVES.includes(config.ECIES.CURVE_NAME)) {
+            return false;
+        }
+        // Key derivation path should be valid BIP32 path
+        if (!config.ECIES.PRIMARY_KEY_DERIVATION_PATH.startsWith('m/')) {
+            return false;
+        }
+        return true;
+    }
+    errorMessage(config) {
+        const issues = [];
+        if (config.ECIES.SYMMETRIC.KEY_SIZE !== 32) {
+            issues.push(`SYMMETRIC.KEY_SIZE (${config.ECIES.SYMMETRIC.KEY_SIZE}) must be 32 for AES-256`);
+        }
+        if (!EncryptionAlgorithmConsistencyInvariant.SUPPORTED_CURVES.includes(config.ECIES.CURVE_NAME)) {
+            issues.push(`CURVE_NAME (${config.ECIES.CURVE_NAME}) must be one of: ${EncryptionAlgorithmConsistencyInvariant.SUPPORTED_CURVES.join(', ')}`);
+        }
+        if (!config.ECIES.PRIMARY_KEY_DERIVATION_PATH.startsWith('m/')) {
+            issues.push(`PRIMARY_KEY_DERIVATION_PATH (${config.ECIES.PRIMARY_KEY_DERIVATION_PATH}) must be a valid BIP32 path starting with 'm/'`);
+        }
+        return `Invariant '${this.name}' failed:\n  ${issues.join('\n  ')}`;
+    }
+}
+exports.EncryptionAlgorithmConsistencyInvariant = EncryptionAlgorithmConsistencyInvariant;
+//# sourceMappingURL=encryption-algorithm-consistency.js.map

package/src/lib/invariants/encryption-algorithm-consistency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption-algorithm-consistency.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/encryption-algorithm-consistency.ts"],"names":[],"mappings":";;;AACA,0DAA2D;AAE3D;;;;;;;GAOG;AACH,MAAa,uCAAwC,SAAQ,yBAAa;IAChE,MAAM,CAAU,gBAAgB,GAAG;QACzC,WAAW;QACX,MAAM;QACN,MAAM;QACN,MAAM;KACP,CAAC;IAEF;QACE,KAAK,CACH,gCAAgC,EAChC,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAkB;QACtB,gCAAgC;QAChC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,uCAAuC,CAAC,gBAAgB,CAAC,QAAQ,CACpE,MAAM,CAAC,KAAK,CAAC,UAAU,CACxB,EAAE,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,MAAkB;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CACT,uBAAuB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,0BAA0B,CACjF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,uCAAuC,CAAC,gBAAgB,CAAC,QAAQ,CACpE,MAAM,CAAC,KAAK,CAAC,UAAU,CACxB,EAAE,CAAC;YACF,MAAM,CAAC,IAAI,CACT,eAAe,MAAM,CAAC,KAAK,CAAC,UAAU,qBAAqB,uCAAuC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjI,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,IAAI,CACT,gCAAgC,MAAM,CAAC,KAAK,CAAC,2BAA2B,iDAAiD,CAC1H,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,IAAI,CAAC,IAAI,gBAAgB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtE,CAAC;;AA5DH,0FA6DC"}

package/src/lib/invariants/{index.ts → index.d.ts}

@@ -1,3 +1,4 @@
 export * from './recipient-id-consistency';
 export * from './pbkdf2-profiles-validity';
 export * from './encryption-algorithm-consistency';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/invariants/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC"}

package/src/lib/invariants/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./recipient-id-consistency"), exports);
+tslib_1.__exportStar(require("./pbkdf2-profiles-validity"), exports);
+tslib_1.__exportStar(require("./encryption-algorithm-consistency"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/invariants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/index.ts"],"names":[],"mappings":";;;AAAA,qEAA2C;AAC3C,qEAA2C;AAC3C,6EAAmD"}

package/src/lib/invariants/pbkdf2-profiles-validity.d.ts

@@ -0,0 +1,16 @@
+import { IConstants } from '../../interfaces/constants';
+import { BaseInvariant } from '../../interfaces/invariant';
+/**
+ * Validates that PBKDF2 profiles have sensible parameters.
+ *
+ * Checks:
+ * - iterations > 0 and not too low (security risk)
+ * - saltBytes > 0 and reasonable
+ * - hashBytes > 0 and matches expected hash output
+ */
+export declare class Pbkdf2ProfilesValidityInvariant extends BaseInvariant {
+    constructor();
+    check(config: IConstants): boolean;
+    errorMessage(config: IConstants): string;
+}
+//# sourceMappingURL=pbkdf2-profiles-validity.d.ts.map

package/src/lib/invariants/pbkdf2-profiles-validity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf2-profiles-validity.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/pbkdf2-profiles-validity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D;;;;;;;GAOG;AACH,qBAAa,+BAAgC,SAAQ,aAAa;;IAQhE,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IA2BlC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;CA8BzC"}

package/src/lib/invariants/pbkdf2-profiles-validity.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Pbkdf2ProfilesValidityInvariant = void 0;
+const invariant_1 = require("../../interfaces/invariant");
+const pbkdf2_profile_1 = require("../../enumerations/pbkdf2-profile");
+/**
+ * Validates that PBKDF2 profiles have sensible parameters.
+ *
+ * Checks:
+ * - iterations > 0 and not too low (security risk)
+ * - saltBytes > 0 and reasonable
+ * - hashBytes > 0 and matches expected hash output
+ */
+class Pbkdf2ProfilesValidityInvariant extends invariant_1.BaseInvariant {
+    constructor() {
+        super('Pbkdf2ProfilesValidity', 'PBKDF2 profiles must have valid cryptographic parameters');
+    }
+    check(config) {
+        const profiles = [
+            config.PBKDF2_PROFILES[pbkdf2_profile_1.Pbkdf2ProfileEnum.BROWSER_PASSWORD],
+            config.PBKDF2_PROFILES[pbkdf2_profile_1.Pbkdf2ProfileEnum.HIGH_SECURITY],
+            config.PBKDF2_PROFILES[pbkdf2_profile_1.Pbkdf2ProfileEnum.TEST_FAST],
+        ];
+        for (const profile of profiles) {
+            // iterations must be positive and reasonable
+            if (profile.iterations < 1000 || profile.iterations > 10_000_000) {
+                return false;
+            }
+            // saltBytes must be at least 16 bytes (128 bits)
+            if (profile.saltBytes < 16 || profile.saltBytes > 256) {
+                return false;
+            }
+            // hashBytes must be positive and reasonable for sha256
+            if (profile.hashBytes < 16 || profile.hashBytes > 64) {
+                return false;
+            }
+        }
+        return true;
+    }
+    errorMessage(config) {
+        const issues = [];
+        const profileTests = [
+            { name: 'BROWSER_PASSWORD', profile: config.PBKDF2_PROFILES[pbkdf2_profile_1.Pbkdf2ProfileEnum.BROWSER_PASSWORD] },
+            { name: 'HIGH_SECURITY', profile: config.PBKDF2_PROFILES[pbkdf2_profile_1.Pbkdf2ProfileEnum.HIGH_SECURITY] },
+            { name: 'TEST_FAST', profile: config.PBKDF2_PROFILES[pbkdf2_profile_1.Pbkdf2ProfileEnum.TEST_FAST] },
+        ];
+        for (const { name, profile } of profileTests) {
+            if (profile.iterations < 1000 || profile.iterations > 10_000_000) {
+                issues.push(`${name}.iterations (${profile.iterations}) must be between 1000 and 10,000,000`);
+            }
+            if (profile.saltBytes < 16 || profile.saltBytes > 256) {
+                issues.push(`${name}.saltBytes (${profile.saltBytes}) must be between 16 and 256`);
+            }
+            if (profile.hashBytes < 16 || profile.hashBytes > 64) {
+                issues.push(`${name}.hashBytes (${profile.hashBytes}) must be between 16 and 64`);
+            }
+        }
+        return `Invariant '${this.name}' failed:\n  ${issues.join('\n  ')}`;
+    }
+}
+exports.Pbkdf2ProfilesValidityInvariant = Pbkdf2ProfilesValidityInvariant;
+//# sourceMappingURL=pbkdf2-profiles-validity.js.map

package/src/lib/invariants/pbkdf2-profiles-validity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf2-profiles-validity.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/pbkdf2-profiles-validity.ts"],"names":[],"mappings":";;;AACA,0DAA2D;AAC3D,sEAAsE;AAEtE;;;;;;;GAOG;AACH,MAAa,+BAAgC,SAAQ,yBAAa;IAChE;QACE,KAAK,CACH,wBAAwB,EACxB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAkB;QACtB,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,eAAe,CAAC,kCAAiB,CAAC,gBAAgB,CAAC;YAC1D,MAAM,CAAC,eAAe,CAAC,kCAAiB,CAAC,aAAa,CAAC;YACvD,MAAM,CAAC,eAAe,CAAC,kCAAiB,CAAC,SAAS,CAAC;SACpD,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,6CAA6C;YAC7C,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;gBACjE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,iDAAiD;YACjD,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACtD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,uDAAuD;YACvD,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,MAAkB;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG;YACnB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,kCAAiB,CAAC,gBAAgB,CAAC,EAAE;YACjG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,kCAAiB,CAAC,aAAa,CAAC,EAAE;YAC3F,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,kCAAiB,CAAC,SAAS,CAAC,EAAE;SACpF,CAAC;QAEF,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,YAAY,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;gBACjE,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,gBAAgB,OAAO,CAAC,UAAU,uCAAuC,CACjF,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,eAAe,OAAO,CAAC,SAAS,8BAA8B,CACtE,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,eAAe,OAAO,CAAC,SAAS,6BAA6B,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,cAAc,IAAI,CAAC,IAAI,gBAAgB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtE,CAAC;CACF;AAjED,0EAiEC"}

package/src/lib/invariants/recipient-id-consistency.d.ts

@@ -0,0 +1,18 @@
+import { IConstants } from '../../interfaces/constants';
+import { BaseInvariant } from '../../interfaces/invariant';
+/**
+ * Validates that all recipient ID size configurations are consistent.
+ *
+ * This invariant would have caught the 12 vs 32 byte discrepancy.
+ *
+ * Checks:
+ * - MEMBER_ID_LENGTH === idProvider.byteLength
+ * - ECIES.MULTIPLE.RECIPIENT_ID_SIZE === idProvider.byteLength
+ * - All three values must be in sync
+ */
+export declare class RecipientIdConsistencyInvariant extends BaseInvariant {
+    constructor();
+    check(config: IConstants): boolean;
+    errorMessage(config: IConstants): string;
+}
+//# sourceMappingURL=recipient-id-consistency.d.ts.map

package/src/lib/invariants/recipient-id-consistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-id-consistency.d.ts","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/recipient-id-consistency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D;;;;;;;;;GASG;AACH,qBAAa,+BAAgC,SAAQ,aAAa;;IAQhE,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAOlC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;CAiBzC"}

package/src/lib/invariants/recipient-id-consistency.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RecipientIdConsistencyInvariant = void 0;
+const invariant_1 = require("../../interfaces/invariant");
+/**
+ * Validates that all recipient ID size configurations are consistent.
+ *
+ * This invariant would have caught the 12 vs 32 byte discrepancy.
+ *
+ * Checks:
+ * - MEMBER_ID_LENGTH === idProvider.byteLength
+ * - ECIES.MULTIPLE.RECIPIENT_ID_SIZE === idProvider.byteLength
+ * - All three values must be in sync
+ */
+class RecipientIdConsistencyInvariant extends invariant_1.BaseInvariant {
+    constructor() {
+        super('RecipientIdConsistency', 'All recipient ID size configurations must match the ID provider byte length');
+    }
+    check(config) {
+        return (config.MEMBER_ID_LENGTH === config.idProvider.byteLength &&
+            config.ECIES.MULTIPLE.RECIPIENT_ID_SIZE === config.idProvider.byteLength);
+    }
+    errorMessage(config) {
+        const issues = [];
+        if (config.MEMBER_ID_LENGTH !== config.idProvider.byteLength) {
+            issues.push(`MEMBER_ID_LENGTH (${config.MEMBER_ID_LENGTH}) !== idProvider.byteLength (${config.idProvider.byteLength})`);
+        }
+        if (config.ECIES.MULTIPLE.RECIPIENT_ID_SIZE !== config.idProvider.byteLength) {
+            issues.push(`ECIES.MULTIPLE.RECIPIENT_ID_SIZE (${config.ECIES.MULTIPLE.RECIPIENT_ID_SIZE}) !== idProvider.byteLength (${config.idProvider.byteLength})`);
+        }
+        return `Invariant '${this.name}' failed:\n  ${issues.join('\n  ')}`;
+    }
+}
+exports.RecipientIdConsistencyInvariant = RecipientIdConsistencyInvariant;
+//# sourceMappingURL=recipient-id-consistency.js.map

package/src/lib/invariants/recipient-id-consistency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-id-consistency.js","sourceRoot":"","sources":["../../../../../../packages/digitaldefiance-ecies-lib/src/lib/invariants/recipient-id-consistency.ts"],"names":[],"mappings":";;;AACA,0DAA2D;AAE3D;;;;;;;;;GASG;AACH,MAAa,+BAAgC,SAAQ,yBAAa;IAChE;QACE,KAAK,CACH,wBAAwB,EACxB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAkB;QACtB,OAAO,CACL,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,UAAU,CAAC,UAAU;YACxD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC,UAAU,CAAC,UAAU,CACzE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,MAAkB;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CACT,qBAAqB,MAAM,CAAC,gBAAgB,gCAAgC,MAAM,CAAC,UAAU,CAAC,UAAU,GAAG,CAC5G,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,CACT,qCAAqC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,gCAAgC,MAAM,CAAC,UAAU,CAAC,UAAU,GAAG,CAC5I,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,IAAI,CAAC,IAAI,gBAAgB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtE,CAAC;CACF;AAhCD,0EAgCC"}