@digitaldefiance/ecies-lib 4.4.2 → 4.4.3

package/src/services/encryption-stream.js

@@ -1,295 +0,0 @@
-import { Constants } from '../constants';
-import { DEFAULT_STREAM_CONFIG } from '../interfaces/stream-config';
-import { STREAM_HEADER_CONSTANTS } from '../interfaces/stream-header';
-import { ChunkProcessor } from './chunk-processor';
-import { ProgressTracker } from './progress-tracker';
-import { MultiRecipientProcessor } from './multi-recipient-processor';
-import { EciesComponentId, getEciesI18nEngine } from '../i18n-setup';
-import { EciesStringKey } from '../enumerations';
-/**
- * Streaming encryption/decryption service
- */
-export class EncryptionStream {
-    ecies;
-    config;
-    eciesConsts;
-    constants;
-    processor;
-    multiRecipientProcessor;
-    constructor(ecies, config = DEFAULT_STREAM_CONFIG, eciesConsts = Constants.ECIES, constants = Constants) {
-        this.ecies = ecies;
-        this.config = config;
-        this.eciesConsts = eciesConsts;
-        this.constants = constants;
-        this.processor = new ChunkProcessor(ecies, eciesConsts);
-        this.multiRecipientProcessor = new MultiRecipientProcessor(ecies, constants);
-    }
-    /**
-     * Build stream header
-     */
-    buildStreamHeader(header) {
-        const buffer = new Uint8Array(STREAM_HEADER_CONSTANTS.HEADER_SIZE);
-        const view = new DataView(buffer.buffer);
-        view.setUint32(0, header.magic, false);
-        view.setUint16(4, header.version, false);
-        view.setUint8(6, header.encryptionType);
-        view.setUint32(7, header.chunkSize, false);
-        view.setUint32(11, header.totalChunks, false);
-        view.setBigUint64(15, BigInt(header.totalBytes), false);
-        view.setBigUint64(23, BigInt(header.timestamp), false);
-        // Bytes 31-127: reserved (zeros)
-        return buffer;
-    }
-    /**
-     * Parse stream header
-     */
-    parseStreamHeader(data) {
-        const engine = getEciesI18nEngine();
-        if (data.length < STREAM_HEADER_CONSTANTS.HEADER_SIZE) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_DataTooShortForHeader));
-        }
-        const view = new DataView(data.buffer, data.byteOffset);
-        const magic = view.getUint32(0, false);
-        if (magic !== STREAM_HEADER_CONSTANTS.MAGIC) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_InvalidMagicBytes));
-        }
-        const version = view.getUint16(4, false);
-        if (version !== STREAM_HEADER_CONSTANTS.VERSION) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_UnsupportedVersion));
-        }
-        return {
-            magic,
-            version,
-            encryptionType: view.getUint8(6),
-            chunkSize: view.getUint32(7, false),
-            totalChunks: view.getUint32(11, false),
-            totalBytes: Number(view.getBigUint64(15, false)),
-            timestamp: Number(view.getBigUint64(23, false)),
-        };
-    }
-    /**
-     * Encrypt data stream
-     */
-    async *encryptStream(source, publicKey, options = {}) {
-        const engine = getEciesI18nEngine();
-        // Validate public key (65 bytes uncompressed with 0x04 prefix)
-        if (!publicKey || (publicKey.length !== 65 && publicKey.length !== 33)) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_InvalidPublicKeyLength));
-        }
-        const chunkSize = options.chunkSize ?? this.config.chunkSize;
-        const includeChecksums = options.includeChecksums ?? this.config.includeChecksums;
-        const signal = options.signal;
-        const onProgress = options.onProgress;
-        let buffer = new Uint8Array(0);
-        let chunkIndex = 0;
-        let lastYieldedChunk = null;
-        let tracker;
-        let totalBytesRead = 0;
-        const maxSingleChunk = 100 * 1024 * 1024; // 100MB max per source chunk
-        for await (const data of source) {
-            // Check for cancellation
-            if (signal?.aborted) {
-                throw new DOMException(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_EncryptionCancelled), 'AbortError');
-            }
-            // Prevent buffer exhaustion from single large source chunk
-            if (data.length > maxSingleChunk) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_BufferOverflowTemplate, { max: maxSingleChunk }));
-            }
-            // Append to buffer
-            const newBuffer = new Uint8Array(buffer.length + data.length);
-            newBuffer.set(buffer);
-            newBuffer.set(data, buffer.length);
-            buffer = newBuffer;
-            totalBytesRead += data.length;
-            // Initialize tracker on first data
-            if (!tracker && onProgress) {
-                tracker = new ProgressTracker();
-            }
-            // Process complete chunks
-            while (buffer.length >= chunkSize) {
-                if (signal?.aborted) {
-                    throw new DOMException('Encryption cancelled', 'AbortError');
-                }
-                const chunkData = buffer.slice(0, chunkSize);
-                buffer = buffer.slice(chunkSize);
-                const encryptedChunk = await this.processor.encryptChunk(chunkData, publicKey, chunkIndex++, false, includeChecksums);
-                lastYieldedChunk = encryptedChunk;
-                yield encryptedChunk;
-                // Report progress
-                if (tracker && onProgress) {
-                    onProgress(tracker.update(chunkSize));
-                }
-            }
-        }
-        // Process remaining data as last chunk
-        if (buffer.length > 0) {
-            if (signal?.aborted) {
-                throw new DOMException('Encryption cancelled', 'AbortError');
-            }
-            const encryptedChunk = await this.processor.encryptChunk(buffer, publicKey, chunkIndex, true, includeChecksums);
-            yield encryptedChunk;
-            // Report final progress
-            if (tracker && onProgress) {
-                onProgress(tracker.update(buffer.length));
-            }
-        }
-        else if (chunkIndex === 0) {
-            // Empty stream - yield nothing
-            return;
-        }
-        else if (lastYieldedChunk) {
-            // Mark the last yielded chunk as last
-            lastYieldedChunk.isLast = true;
-        }
-    }
-    /**
-     * Encrypt stream for multiple recipients
-     * Uses shared symmetric key encrypted for each recipient
-     */
-    async *encryptStreamMultiple(source, recipients, options = {}) {
-        const engine = getEciesI18nEngine();
-        if (recipients.length === 0) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_AtLeastOneRecipientRequired));
-        }
-        if (recipients.length > 65535) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_MaxRecipientsExceeded));
-        }
-        // Validate all recipient public keys
-        for (const recipient of recipients) {
-            if (!recipient.publicKey || (recipient.publicKey.length !== 65 && recipient.publicKey.length !== 33)) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_InvalidRecipientPublicKeyLength));
-            }
-            if (!recipient.id || recipient.id.length !== this.constants.MEMBER_ID_LENGTH) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_InvalidRecipientIdLengthTemplate, { expected: this.constants.MEMBER_ID_LENGTH }));
-            }
-        }
-        const chunkSize = options.chunkSize ?? this.config.chunkSize;
-        const signal = options.signal;
-        const onProgress = options.onProgress;
-        // Generate shared symmetric key for this stream
-        const symmetricKey = crypto.getRandomValues(new Uint8Array(32));
-        let buffer = new Uint8Array(0);
-        let chunkIndex = 0;
-        let tracker;
-        const maxSingleChunk = 100 * 1024 * 1024;
-        for await (const data of source) {
-            if (signal?.aborted) {
-                throw new DOMException('Encryption cancelled', 'AbortError');
-            }
-            if (data.length > maxSingleChunk) {
-                throw new Error(`Buffer overflow: source chunk exceeds ${maxSingleChunk} bytes`);
-            }
-            const newBuffer = new Uint8Array(buffer.length + data.length);
-            newBuffer.set(buffer);
-            newBuffer.set(data, buffer.length);
-            buffer = newBuffer;
-            if (!tracker && onProgress) {
-                tracker = new ProgressTracker();
-            }
-            while (buffer.length >= chunkSize) {
-                if (signal?.aborted) {
-                    throw new DOMException('Encryption cancelled', 'AbortError');
-                }
-                const chunkData = buffer.slice(0, chunkSize);
-                buffer = buffer.slice(chunkSize);
-                const encryptedChunk = await this.multiRecipientProcessor.encryptChunk(chunkData, recipients, chunkIndex++, false, symmetricKey);
-                yield encryptedChunk;
-                if (tracker && onProgress) {
-                    onProgress(tracker.update(chunkSize));
-                }
-            }
-        }
-        // Process remaining data as last chunk
-        if (buffer.length > 0) {
-            if (signal?.aborted) {
-                throw new DOMException('Encryption cancelled', 'AbortError');
-            }
-            const encryptedChunk = await this.multiRecipientProcessor.encryptChunk(buffer, recipients, chunkIndex, true, symmetricKey);
-            yield encryptedChunk;
-            if (tracker && onProgress) {
-                onProgress(tracker.update(buffer.length));
-            }
-        }
-        else if (chunkIndex > 0) {
-            // Mark last yielded chunk - need to re-yield with isLast=true
-            // This is handled by the processor setting isLast flag
-        }
-    }
-    /**
-     * Decrypt multi-recipient stream
-     */
-    async *decryptStreamMultiple(source, recipientId, privateKey, options = {}) {
-        const engine = getEciesI18nEngine();
-        if (!recipientId || recipientId.length !== this.constants.MEMBER_ID_LENGTH) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_InvalidRecipientIdLengthTemplate, { expected: this.constants.MEMBER_ID_LENGTH }));
-        }
-        if (!privateKey || privateKey.length !== 32) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_InvalidPrivateKeyMust32Bytes));
-        }
-        const signal = options.signal;
-        const onProgress = options.onProgress;
-        let expectedIndex = 0;
-        let tracker;
-        if (onProgress) {
-            tracker = new ProgressTracker();
-        }
-        for await (const chunkData of source) {
-            if (signal?.aborted) {
-                throw new DOMException(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_DecryptionCancelled), 'AbortError');
-            }
-            const { data, header } = await this.multiRecipientProcessor.decryptChunk(chunkData, recipientId, privateKey);
-            if (header.chunkIndex !== expectedIndex) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_ChunkSequenceErrorTemplate, { expected: expectedIndex, actual: header.chunkIndex }));
-            }
-            expectedIndex++;
-            yield data;
-            if (tracker && onProgress) {
-                onProgress(tracker.update(data.length));
-            }
-            const isLast = (header.flags & 0x01) !== 0;
-            if (isLast) {
-                break;
-            }
-        }
-    }
-    /**
-     * Decrypt data stream
-     */
-    async *decryptStream(source, privateKey, options = {}) {
-        const engine = getEciesI18nEngine();
-        // Validate private key
-        if (!privateKey || privateKey.length !== 32) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_InvalidPrivateKeyMust32Bytes));
-        }
-        const signal = options.signal;
-        const onProgress = options.onProgress;
-        let expectedIndex = 0;
-        let tracker;
-        if (onProgress) {
-            tracker = new ProgressTracker();
-        }
-        for await (const chunkData of source) {
-            // Check for cancellation
-            if (signal?.aborted) {
-                throw new DOMException(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_DecryptionCancelled), 'AbortError');
-            }
-            const { data, header } = await this.processor.decryptChunk(chunkData, privateKey);
-            // Validate sequence
-            if (header.index !== expectedIndex) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_Stream_ChunkSequenceErrorTemplate, { expected: expectedIndex, actual: header.index }));
-            }
-            expectedIndex++;
-            yield data;
-            // Report progress
-            if (tracker && onProgress) {
-                onProgress(tracker.update(data.length));
-            }
-            // Check if this was the last chunk
-            const isLast = (header.flags & 0x01) !== 0;
-            if (isLast) {
-                break;
-            }
-        }
-    }
-}
-//# sourceMappingURL=encryption-stream.js.map

package/src/services/encryption-stream.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"encryption-stream.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/encryption-stream.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAiB,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEnF,OAAO,EAAiB,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAIrF,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAwBjD;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAKR;IACA;IACA;IACA;IAPF,SAAS,CAAiB;IAC1B,uBAAuB,CAA0B;IAElE,YACmB,KAAmB,EACnB,SAAwB,qBAAqB,EAC7C,cAA+B,SAAS,CAAC,KAAK,EAC9C,YAAwB,SAAS;QAHjC,UAAK,GAAL,KAAK,CAAc;QACnB,WAAM,GAAN,MAAM,CAAuC;QAC7C,gBAAW,GAAX,WAAW,CAAmC;QAC9C,cAAS,GAAT,SAAS,CAAwB;QAElD,IAAI,CAAC,SAAS,GAAG,IAAI,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,uBAAuB,GAAG,IAAI,uBAAuB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,MAAqB;QACrC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEzC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QACvD,iCAAiC;QAEjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,IAAgB;QAChC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB,CAAC,WAAW,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,kCAAkC,CAAC,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,uBAAuB,CAAC,KAAK,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,uBAAuB,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,+BAA+B,CAAC,CAAC,CAAC;QACtG,CAAC;QAED,OAAO;YACL,KAAK;YACL,OAAO;YACP,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAA4B;YAC3D,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC;YACnC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC;YACtC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAChD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,CAAC,aAAa,CAClB,MAAiC,EACjC,SAAqB,EACrB,UAAiC,EAAE;QAEnC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,+DAA+D;QAC/D,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7D,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,IAAI,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,gBAAgB,GAA2B,IAAI,CAAC;QACpD,IAAI,OAAoC,CAAC;QACzC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,6BAA6B;QAEvE,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAChC,yBAAyB;YACzB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,gCAAgC,CAAC,EAAE,YAAY,CAAC,CAAC;YAC5H,CAAC;YAED,2DAA2D;YAC3D,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,mCAAmC,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;YACnI,CAAC;YAED,mBAAmB;YACnB,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9D,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,GAAG,SAAS,CAAC;YACnB,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC;YAE9B,mCAAmC;YACnC,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC3B,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,CAAC;YAED,0BAA0B;YAC1B,OAAO,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAClC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;oBACpB,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;gBAC/D,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC7C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAEjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CACtD,SAAS,EACT,SAAS,EACT,UAAU,EAAE,EACZ,KAAK,EACL,gBAAgB,CACjB,CAAC;gBAEF,gBAAgB,GAAG,cAAc,CAAC;gBAClC,MAAM,cAAc,CAAC;gBAErB,kBAAkB;gBAClB,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;oBAC1B,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CACtD,MAAM,EACN,SAAS,EACT,UAAU,EACV,IAAI,EACJ,gBAAgB,CACjB,CAAC;YAEF,MAAM,cAAc,CAAC;YAErB,wBAAwB;YACxB,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC1B,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YAC5B,+BAA+B;YAC/B,OAAO;QACT,CAAC;aAAM,IAAI,gBAAgB,EAAE,CAAC;YAC5B,sCAAsC;YACtC,gBAAgB,CAAC,MAAM,GAAG,IAAI,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,CAAC,qBAAqB,CAC1B,MAAiC,EACjC,UAA4D,EAC5D,UAAiC,EAAE;QAEnC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAC/G,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,kCAAkC,CAAC,CAAC,CAAC;QACzG,CAAC;QAED,qCAAqC;QACrC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,CAAC;gBACrG,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,4CAA4C,CAAC,CAAC,CAAC;YACnH,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAC9B,gBAAgB,EAChB,cAAc,CAAC,6CAA6C,EAC5D,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,gDAAgD;QAChD,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhE,IAAI,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,OAAoC,CAAC;QACzC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;QAEzC,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAChC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,yCAAyC,cAAc,QAAQ,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9D,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,GAAG,SAAS,CAAC;YAEnB,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC3B,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,CAAC;YAED,OAAO,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAClC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;oBACpB,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;gBAC/D,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC7C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAEjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,CACpE,SAAS,EACT,UAAU,EACV,UAAU,EAAE,EACZ,KAAK,EACL,YAAY,CACb,CAAC;gBAEF,MAAM,cAAc,CAAC;gBAErB,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;oBAC1B,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,CACpE,MAAM,EACN,UAAU,EACV,UAAU,EACV,IAAI,EACJ,YAAY,CACb,CAAC;YAEF,MAAM,cAAc,CAAC;YAErB,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC1B,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YAC1B,8DAA8D;YAC9D,uDAAuD;QACzD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,CAAC,qBAAqB,CAC1B,MAAiC,EACjC,WAAuB,EACvB,UAAsB,EACtB,UAAiC,EAAE;QAEnC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,6CAA6C,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACnK,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAChH,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,OAAoC,CAAC;QAEzC,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,CAAC;QAED,IAAI,KAAK,EAAE,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YACrC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,gCAAgC,CAAC,EAAE,YAAY,CAAC,CAAC;YAC5H,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,CACtE,SAAS,EACT,WAAW,EACX,UAAU,CACX,CAAC;YAEF,IAAI,MAAM,CAAC,UAAU,KAAK,aAAa,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,uCAAuC,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CACnJ,CAAC;YACJ,CAAC;YAED,aAAa,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC;YAEX,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC1B,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,CAAC,aAAa,CAClB,MAAiC,EACjC,UAAsB,EACtB,UAAiC,EAAE;QAEnC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,uBAAuB;QACvB,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAChH,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,OAAoC,CAAC;QAEzC,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,CAAC;QAED,IAAI,KAAK,EAAE,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YACrC,yBAAyB;YACzB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,gCAAgC,CAAC,EAAE,YAAY,CAAC,CAAC;YAC5H,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CACxD,SAAS,EACT,UAAU,CACX,CAAC;YAEF,oBAAoB;YACpB,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,uCAAuC,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAC9I,CAAC;YACJ,CAAC;YAED,aAAa,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC;YAEX,kBAAkB;YAClB,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC1B,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1C,CAAC;YAED,mCAAmC;YACnC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/src/services/index.d.ts

@@ -1,11 +0,0 @@
-export * from './aes-gcm';
-export * from './chunk-processor';
-export * from './ecies';
-export * from './encryption-stream';
-export * from './multi-recipient-processor';
-export * from './password-login';
-export * from './pbkdf2';
-export * from './progress-tracker';
-export * from './resumable-encryption';
-export * from './xor';
-//# sourceMappingURL=index.d.ts.map

package/src/services/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,OAAO,CAAC"}

package/src/services/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,OAAO,CAAC"}

package/src/services/multi-recipient-processor.d.ts

@@ -1,35 +0,0 @@
-import { ECIESService } from './ecies/service';
-import { IMultiRecipientChunk, IMultiRecipientChunkHeader } from '../interfaces/multi-recipient-chunk';
-import { IConstants } from '../interfaces/constants';
-/**
- * Processes multi-recipient chunks using symmetric encryption.
- * Supports dynamic recipient ID sizes based on the configured ID provider.
- */
-export declare class MultiRecipientProcessor {
-    private readonly ecies;
-    private readonly config;
-    private readonly recipientIdSize;
-    private readonly constants;
-    /**
-     * Create a new multi-recipient processor.
-     * @param ecies - ECIES service for key encryption
-     * @param config - Configuration containing ID provider (defaults to global Constants)
-     */
-    constructor(ecies: ECIESService, config?: IConstants);
-    /**
-     * Encrypt chunk for multiple recipients
-     */
-    encryptChunk(data: Uint8Array, recipients: Array<{
-        id: Uint8Array;
-        publicKey: Uint8Array;
-    }>, chunkIndex: number, isLast: boolean, symmetricKey: Uint8Array, senderPrivateKey?: Uint8Array): Promise<IMultiRecipientChunk>;
-    /**
-     * Decrypt chunk for specific recipient
-     */
-    decryptChunk(chunkData: Uint8Array, recipientId: Uint8Array, privateKey: Uint8Array, senderPublicKey?: Uint8Array): Promise<{
-        data: Uint8Array;
-        header: IMultiRecipientChunkHeader;
-    }>;
-    private arraysEqual;
-}
-//# sourceMappingURL=multi-recipient-processor.d.ts.map

package/src/services/multi-recipient-processor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"multi-recipient-processor.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-ecies-lib/src/services/multi-recipient-processor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAI3B,MAAM,qCAAqC,CAAC;AAI7C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIrD;;;GAGG;AACH,qBAAa,uBAAuB;IAUhC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAVzB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IAErD;;;;OAIG;gBAEgB,KAAK,EAAE,YAAY,EACnB,MAAM,GAAE,UAAsB;IAMjD;;OAEG;IACG,YAAY,CAChB,IAAI,EAAE,UAAU,EAChB,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC,EAC5D,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,UAAU,EACxB,gBAAgB,CAAC,EAAE,UAAU,GAC5B,OAAO,CAAC,oBAAoB,CAAC;IA6JhC;;OAEG;IACG,YAAY,CAChB,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,UAAU,EACvB,UAAU,EAAE,UAAU,EACtB,eAAe,CAAC,EAAE,UAAU,GAC3B,OAAO,CAAC;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,0BAA0B,CAAA;KAAE,CAAC;IA2JpE,OAAO,CAAC,WAAW;CAUpB"}

package/src/services/multi-recipient-processor.js

@@ -1,289 +0,0 @@
-import { getMultiRecipientConstants, } from '../interfaces/multi-recipient-chunk';
-import { EciesComponentId, getEciesI18nEngine } from '../i18n-setup';
-import { EciesStringKey } from '../enumerations';
-import { Constants } from '../constants';
-import { AESGCMService } from './aes-gcm';
-import { concatUint8Arrays } from '../utils';
-/**
- * Processes multi-recipient chunks using symmetric encryption.
- * Supports dynamic recipient ID sizes based on the configured ID provider.
- */
-export class MultiRecipientProcessor {
-    ecies;
-    config;
-    recipientIdSize;
-    constants;
-    /**
-     * Create a new multi-recipient processor.
-     * @param ecies - ECIES service for key encryption
-     * @param config - Configuration containing ID provider (defaults to global Constants)
-     */
-    constructor(ecies, config = Constants) {
-        this.ecies = ecies;
-        this.config = config;
-        this.recipientIdSize = config.idProvider.byteLength;
-        this.constants = getMultiRecipientConstants(this.recipientIdSize);
-    }
-    /**
-     * Encrypt chunk for multiple recipients
-     */
-    async encryptChunk(data, recipients, chunkIndex, isLast, symmetricKey, senderPrivateKey) {
-        // Validate inputs
-        const engine = getEciesI18nEngine();
-        if (recipients.length === 0 || recipients.length > this.constants.MAX_RECIPIENTS) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_InvalidRecipientCountTemplate, { count: recipients.length }));
-        }
-        if (symmetricKey.length !== 32) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_SymmetricKeyMust32Bytes));
-        }
-        if (chunkIndex < 0 || chunkIndex > 0xFFFFFFFF) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_InvalidChunkIndexTemplate, { index: chunkIndex }));
-        }
-        // Sign-then-Encrypt
-        let dataToEncrypt = data;
-        if (senderPrivateKey) {
-            const signature = this.ecies.core.sign(senderPrivateKey, data);
-            dataToEncrypt = concatUint8Arrays(signature, data);
-        }
-        if (dataToEncrypt.length > 0x7FFFFFFF) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_DataSizeExceedsMaximumTemplate, { size: dataToEncrypt.length }));
-        }
-        // Check for duplicate recipient IDs
-        const seenIds = new Set();
-        for (const recipient of recipients) {
-            const idStr = Buffer.from(recipient.id).toString('hex');
-            if (seenIds.has(idStr)) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_DuplicateRecipientId));
-            }
-            seenIds.add(idStr);
-        }
-        // Generate ONE ephemeral key pair for all recipients
-        const ephemeralKeyPair = await this.ecies.core.generateEphemeralKeyPair();
-        // Build recipient headers
-        const recipientHeaders = [];
-        for (const recipient of recipients) {
-            if (recipient.id.length !== this.recipientIdSize) {
-                throw new Error(`Recipient ID must be ${this.recipientIdSize} bytes (configured by ID provider), got ${recipient.id.length} bytes`);
-            }
-            // Use Recipient ID as AAD for key encryption
-            const encryptedKey = await this.ecies.encryptKey(recipient.publicKey, symmetricKey, ephemeralKeyPair.privateKey, recipient.id);
-            recipientHeaders.push({
-                id: recipient.id,
-                keySize: encryptedKey.length,
-                encryptedKey,
-            });
-        }
-        // Calculate sizes with overflow check
-        let recipientHeadersSize = 0;
-        for (const h of recipientHeaders) {
-            const headerSize = this.recipientIdSize +
-                this.constants.KEY_SIZE_BYTES + h.keySize;
-            if (recipientHeadersSize + headerSize < recipientHeadersSize) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_RecipientHeadersSizeOverflow));
-            }
-            recipientHeadersSize += headerSize;
-        }
-        // Calculate encrypted size (Data + Tag)
-        // AES-GCM tag is 16 bytes
-        const encryptedSize = dataToEncrypt.length + 16;
-        const totalSize = this.constants.HEADER_SIZE +
-            recipientHeadersSize +
-            Constants.ECIES.IV_SIZE + // IV
-            encryptedSize;
-        // Check for integer overflow (max safe: 2^31 - 1 for Uint8Array)
-        if (totalSize > 0x7FFFFFFF || totalSize < 0) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_ChunkSizeOverflow));
-        }
-        // Build chunk buffer
-        const chunk = new Uint8Array(totalSize);
-        const view = new DataView(chunk.buffer);
-        let offset = 0;
-        // Write header
-        view.setUint32(offset, this.constants.MAGIC, false);
-        offset += 4;
-        view.setUint16(offset, this.constants.VERSION, false);
-        offset += 2;
-        view.setUint16(offset, recipients.length, false);
-        offset += 2;
-        view.setUint32(offset, chunkIndex, false);
-        offset += 4;
-        view.setUint32(offset, dataToEncrypt.length, false); // Original Size (includes signature if present)
-        offset += 4;
-        view.setUint32(offset, encryptedSize, false);
-        offset += 4;
-        view.setUint8(offset, isLast ? this.constants.FLAG_IS_LAST : 0);
-        offset += 1;
-        // Write Ephemeral Public Key (33 bytes)
-        chunk.set(ephemeralKeyPair.publicKey, offset);
-        offset += 33;
-        // Padding to HEADER_SIZE (64 bytes)
-        offset = this.constants.HEADER_SIZE;
-        // Write recipient headers
-        for (const header of recipientHeaders) {
-            chunk.set(header.id, offset);
-            offset += this.recipientIdSize;
-            view.setUint16(offset, header.keySize, false);
-            offset += this.constants.KEY_SIZE_BYTES;
-            chunk.set(header.encryptedKey, offset);
-            offset += header.keySize;
-        }
-        // Extract the full header (including recipient headers) to use as AAD
-        const headerBytes = chunk.slice(0, offset);
-        // Encrypt data with AES-256-GCM using Header as AAD
-        const encryptResult = await AESGCMService.encrypt(dataToEncrypt, symmetricKey, true, // Return tag separately
-        Constants.ECIES, headerBytes // AAD
-        );
-        // Write IV
-        chunk.set(encryptResult.iv, offset);
-        offset += Constants.ECIES.IV_SIZE;
-        // Write encrypted data
-        chunk.set(encryptResult.encrypted, offset);
-        offset += encryptResult.encrypted.length;
-        // Write auth tag
-        if (encryptResult.tag) {
-            chunk.set(encryptResult.tag, offset);
-        }
-        return {
-            index: chunkIndex,
-            data: chunk,
-            isLast,
-            recipientCount: recipients.length,
-        };
-    }
-    /**
-     * Decrypt chunk for specific recipient
-     */
-    async decryptChunk(chunkData, recipientId, privateKey, senderPublicKey) {
-        const engine = getEciesI18nEngine();
-        if (chunkData.length < this.constants.HEADER_SIZE) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_ChunkTooSmall));
-        }
-        const view = new DataView(chunkData.buffer, chunkData.byteOffset);
-        let offset = 0;
-        // Parse header
-        const magic = view.getUint32(offset, false);
-        offset += 4;
-        if (magic !== this.constants.MAGIC) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_InvalidChunkMagic));
-        }
-        const version = view.getUint16(offset, false);
-        offset += 2;
-        if (version !== this.constants.VERSION) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_UnsupportedVersionTemplate, { version }));
-        }
-        const recipientCount = view.getUint16(offset, false);
-        offset += 2;
-        if (recipientCount === 0 || recipientCount > this.constants.MAX_RECIPIENTS) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_InvalidRecipientCountTemplate, { count: recipientCount }));
-        }
-        const chunkIndex = view.getUint32(offset, false);
-        offset += 4;
-        const originalSize = view.getUint32(offset, false);
-        offset += 4;
-        const encryptedSize = view.getUint32(offset, false);
-        offset += 4;
-        const flags = view.getUint8(offset);
-        offset += 1;
-        // Read Ephemeral Public Key (33 bytes)
-        const ephemeralPublicKey = chunkData.slice(offset, offset + 33);
-        offset += 33;
-        offset = this.constants.HEADER_SIZE;
-        // Validate encryptedSize against chunk size
-        // We know it must be at least HEADER + IV + EncryptedSize (which includes tag)
-        const minChunkSize = this.constants.HEADER_SIZE + Constants.ECIES.IV_SIZE + encryptedSize;
-        if (chunkData.length < minChunkSize) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_ChunkTooSmallForEncryptedSize));
-        }
-        // Find recipient header and decrypt symmetric key
-        let symmetricKey = null;
-        let tempOffset = offset;
-        for (let i = 0; i < recipientCount; i++) {
-            // Check if we have enough data for recipient ID
-            if (tempOffset + this.recipientIdSize > chunkData.length) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_ChunkTruncatedRecipientId));
-            }
-            const id = chunkData.slice(tempOffset, tempOffset + this.recipientIdSize);
-            tempOffset += this.recipientIdSize;
-            // Check if we have enough data for keySize field
-            if (tempOffset + this.constants.KEY_SIZE_BYTES > chunkData.length) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_ChunkTruncatedKeySize));
-            }
-            const keySize = view.getUint16(tempOffset, false);
-            tempOffset += this.constants.KEY_SIZE_BYTES;
-            // Validate keySize (typical ECIES: 100-400 bytes)
-            if (keySize === 0 || keySize > 1000) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_InvalidKeySizeTemplate, { size: keySize }));
-            }
-            // Check if we have enough data for the encrypted key
-            if (tempOffset + keySize > chunkData.length) {
-                throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_ChunkTruncatedEncryptedKey));
-            }
-            const encryptedKey = chunkData.slice(tempOffset, tempOffset + keySize);
-            tempOffset += keySize;
-            // Check if this is our recipient
-            if (this.arraysEqual(id, recipientId)) {
-                // Use Recipient ID as AAD for key decryption
-                symmetricKey = await this.ecies.decryptKey(privateKey, encryptedKey, ephemeralPublicKey, id);
-                // Don't break - need to skip all recipient headers
-            }
-        }
-        if (!symmetricKey) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_RecipientNotFoundInChunk));
-        }
-        // Update offset to after all recipient headers
-        offset = tempOffset;
-        // Extract header bytes for AAD
-        const headerBytes = chunkData.slice(0, offset);
-        // Read IV
-        if (offset + Constants.ECIES.IV_SIZE > chunkData.length) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_ChunkTooSmall));
-        }
-        const iv = chunkData.slice(offset, offset + Constants.ECIES.IV_SIZE);
-        offset += Constants.ECIES.IV_SIZE;
-        // Read encrypted data (includes auth tag)
-        if (offset + encryptedSize > chunkData.length) {
-            throw new Error(engine.translate(EciesComponentId, EciesStringKey.Error_MultiRecipient_ChunkTooSmall));
-        }
-        const encryptedWithTag = chunkData.slice(offset, offset + encryptedSize);
-        offset += encryptedSize;
-        // Decrypt with AAD
-        const decrypted = await AESGCMService.decrypt(iv, encryptedWithTag, symmetricKey, true, Constants.ECIES, headerBytes);
-        // Verify signature if sender public key provided
-        let finalData = decrypted;
-        if (senderPublicKey) {
-            if (decrypted.length < 64) {
-                throw new Error('Decrypted chunk too short to contain signature');
-            }
-            const signature = decrypted.slice(0, 64);
-            const message = decrypted.slice(64);
-            const isValid = this.ecies.core.verify(senderPublicKey, message, signature);
-            if (!isValid) {
-                throw new Error('Invalid sender signature in chunk');
-            }
-            finalData = message;
-        }
-        return {
-            data: finalData,
-            header: {
-                magic,
-                version,
-                recipientCount,
-                chunkIndex,
-                originalSize,
-                encryptedSize,
-                flags,
-            },
-        };
-    }
-    arraysEqual(a, b) {
-        if (a.length !== b.length)
-            return false;
-        // Constant-time comparison to prevent timing attacks
-        let diff = 0;
-        for (let i = 0; i < a.length; i++) {
-            diff |= a[i] ^ b[i];
-        }
-        return diff === 0;
-    }
-}
-//# sourceMappingURL=multi-recipient-processor.js.map