@digitaldefiance/node-ecies-lib 4.16.30 → 4.17.4

package/README.md

@@ -2,26 +2,12 @@
 
 [![npm version](https://badge.fury.io/js/%40digitaldefiance%2Fnode-ecies-lib.svg)](https://www.npmjs.com/package/@digitaldefiance/node-ecies-lib)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Tests](https://img.shields.io/badge/tests-1100%2B%20passing-brightgreen)](https://github.com/Digital-Defiance/ecies-lib)
+[![Tests](https://img.shields.io/badge/tests-1953%20passing-brightgreen)](https://github.com/Digital-Defiance/ecies-lib)
 
 A Node.js-specific implementation of the Digital Defiance ECIES (Elliptic Curve Integrated Encryption Scheme) library, providing secure encryption, decryption, and key management capabilities using Node.js crypto primitives. This package is designed to be binary compatible with similarly numbered releases of the browser-based `@digitaldefiance/ecies-lib`, enabling seamless cross-platform cryptographic operations.
 
 Part of [Express Suite](https://github.com/Digital-Defiance/express-suite)
 
-> Current Version: v4.16.25
-
-## What's New in v4.16.x
-
-✨ **Voting Key Derivation Security Improvements** - Enhanced voting key derivation to use both X and Y coordinates of the shared secret for improved security and cross-platform consistency with the browser implementation.
-
-**Key Changes:**
-- **HKDF Salt Handling**: Per RFC 5869, when salt is not provided or empty, it now uses a string of HashLen zeros instead of an empty buffer, ensuring consistency with Web Crypto API implementation
-- **Private Key Normalization**: `deriveVotingKeysFromECDH` now handles 31-byte private keys (which can occur ~0.4% of the time when Node.js createECDH returns keys with leading zeros) by padding to 32 bytes
-- **Uncompressed Public Keys**: Voting key derivation now uses uncompressed format (65 bytes with 0x04 prefix) for maximum entropy in ECDH shared secret computation
-- **Simplified Prime Generation**: Removed constant-time padding in `generateDeterministicPrime` for cleaner implementation
-- **i18n Improvements**: Uses `I18nBuilder` pattern with `withStringKeyEnums()` for registering branded enums
-- **String Key Enum Registration**: Added `registerStringKeyEnum()` for direct translation via `translateStringKey()`
-
 This library implements a modern, enterprise-grade ECIES protocol (v4.0) featuring HKDF key derivation, AAD binding, and optimized multi-recipient encryption. It includes a pluggable ID provider system, memory-efficient streaming encryption, and comprehensive internationalization.
 
 ## Features
@@ -37,10 +23,12 @@ This library implements a modern, enterprise-grade ECIES protocol (v4.0) featuri
   - **Curve**: `secp256k1` for ECDH key exchange and ECDSA signatures.
   - **Symmetric**: `AES-256-GCM` for authenticated symmetric encryption.
   - **Hashing**: `SHA-256` and `SHA-512`.
+  - **Key Derivation**: `PBKDF2` with configurable profiles.
+  - **Checksums**: `CRC8`, `CRC16-CCITT`, `CRC32` for data integrity.
 - **Modes**:
-  - **Basic**: Minimal overhead (no length prefix).
-  - **WithLength**: Includes data length prefix.
-  - **Multiple**: Efficient encryption for up to 65,535 recipients.
+  - **Basic**: Minimal overhead (no length prefix) - Use for fixed-size data
+  - **WithLength**: Includes data length prefix - Use for variable-size data or streaming
+  - **Multiple**: Efficient encryption for up to 65,535 recipients - Use for group messaging
 
 ### 🆔 Identity & Management
 
@@ -55,14 +43,28 @@ This library implements a modern, enterprise-grade ECIES protocol (v4.0) featuri
 
 ### 🚀 Advanced Capabilities
 
-- **Streaming Encryption**: Memory-efficient processing for large files (<10MB RAM usage for any file size).
+- **Streaming Encryption**: Memory-efficient processing for large files (<10MB RAM usage for any file size) with Node.js Transform streams.
+- **Fluent Builders**: Type-safe configuration with `ECIESBuilder` and `MemberBuilder` for clean, chainable APIs.
 - **Internationalization (i18n)**: Automatic error translation in 8 languages (en-US, en-GB, fr, es, de, zh-CN, ja, uk).
 - **Runtime Configuration**: Injectable configuration profiles via `ConstantsRegistry` for dependency injection and testing.
 - **Cross-Platform**: Fully compatible with similarly numbered releases of `@digitaldefiance/ecies-lib` (browser).
 
 ### 🗳️ Government-Grade Voting System
 
-A comprehensive voting system built on homomorphic encryption with 17 voting methods and 1100+ test cases:
+A comprehensive voting system built on homomorphic encryption with 17 voting methods and 1100+ test cases.
+
+**When to use:**
+- Government elections requiring verifiable results and audit trails
+- Corporate governance and shareholder voting with privacy guarantees
+- Anonymous surveys with cryptographic receipt verification
+- Multi-round elections (IRV, STAR, STV) with intermediate tallies
+- Stakeholder voting with weighted votes and role separation
+- Any voting scenario requiring homomorphic encryption and tamper-proof audit logs
+
+**When NOT to use:**
+- Simple polls where privacy is not a concern (use a basic database instead)
+- Real-time result displays during voting (results are encrypted until poll closure)
+- Systems where the computational overhead of homomorphic encryption is prohibitive
 
 - **All 17 Methods Fully Implemented**: Plurality, Approval, Weighted, Borda Count, Score, Yes/No, Yes/No/Abstain, Supermajority, Ranked Choice (IRV), Two-Round, STAR, STV, Quadratic, Consensus, Consent-Based
 - **Node.js Optimized**: Uses Buffer instead of Uint8Array for better Node.js performance
@@ -156,24 +158,31 @@ import {
 } from '@digitaldefiance/node-ecies-lib';
 import { ObjectIdProvider } from '@digitaldefiance/ecies-lib';
 
-// 1. Configure (Optional - defaults to ObjectIdProvider)
-registerNodeRuntimeConfiguration('my-app-config', {
-  idProvider: new ObjectIdProvider()
-});
+try {
+  // 1. Configure (Optional - defaults to ObjectIdProvider)
+  registerNodeRuntimeConfiguration('my-app-config', {
+    idProvider: new ObjectIdProvider()
+  });
 
-// 2. Initialize Service
-const ecies = new ECIESService();
+  // 2. Initialize Service
+  const ecies = new ECIESService();
 
-// 3. Generate Keys
-const mnemonic = ecies.generateNewMnemonic();
-const { privateKey, publicKey } = ecies.mnemonicToSimpleKeyPair(mnemonic);
+  // 3. Generate Keys
+  const mnemonic = ecies.generateNewMnemonic();
+  const { privateKey, publicKey } = ecies.mnemonicToSimpleKeyPair(mnemonic);
 
-// 4. Encrypt & Decrypt
-const message = Buffer.from('Hello, Secure World!');
-const encrypted = ecies.encryptWithLength(publicKey, message);
-const decrypted = ecies.decryptWithLengthAndHeader(privateKey, encrypted);
+  // 4. Encrypt & Decrypt
+  const message = Buffer.from('Hello, Secure World!');
+  const encrypted = ecies.encryptWithLength(publicKey, message);
+  const decrypted = ecies.decryptWithLengthAndHeader(privateKey, encrypted);
 
-console.log(decrypted.toString()); // "Hello, Secure World!"
+  console.log(decrypted.toString()); // "Hello, Secure World!"
+} catch (error) {
+  console.error('Encryption error:', error.message);
+  if (error.code === 'INVALID_KEY') {
+    console.error('Invalid key provided');
+  }
+}
 ```
 
 ### 2. Strong Typing with ID Providers (New in v4.10.7)
@@ -478,6 +487,35 @@ const encrypted = member.encryptData('My Secrets');
 - **`EciesMultiRecipient`**: Specialized service for handling multi-recipient messages.
 - **`EncryptionStream`**: Helper for chunked file encryption.
 - **`Pbkdf2Service`**: Secure authentication using PBKDF2 and encrypted key bundles.
+- **`AESGCMService`**: Instance-based AES-256-GCM encryption with JSON support.
+  - **Methods**: `encrypt()`, `decrypt()`, `encryptJson()`, `decryptJson()`, `combineEncryptedDataAndTag()`
+  - Supports authenticated encryption with optional AAD
+- **`CrcService`**: CRC checksum computation and verification.
+  - **Algorithms**: CRC8, CRC16-CCITT, CRC32
+  - **Methods**: `crc8()`, `crc16()`, `crc32()`, `verifyCrc8()`, `verifyCrc16()`, `verifyCrc32()`
+  - Supports async stream processing
+- **`ChunkProcessor`**: Processes data in chunks for streaming encryption.
+- **`MultiRecipientProcessor`**: Handles multi-recipient encryption operations.
+- **`ProgressTracker`**: Tracks progress for long-running encryption operations.
+
+### Builders
+
+- **`ECIESBuilder`**: Fluent builder for ECIESService configuration
+  - **Methods**: `create()`, `withServiceConfig()`, `withConstants()`, `withI18n()`, `build()`
+  - Simplifies service initialization with method chaining
+- **`MemberBuilder`**: Fluent builder for creating Member instances
+  - **Methods**: `withId()`, `withName()`, `withEmail()`, `withPhone()`, `withType()`, `withKeys()`, `build()`
+  - Provides type-safe member construction with validation
+
+### Stream Transforms
+
+- **`EciesEncryptTransform`**: Node.js Transform stream for ECIES encryption
+- **`EciesDecryptTransform`**: Node.js Transform stream for ECIES decryption
+- **`ChecksumTransform`**: Transform stream for CRC checksum computation
+- **`XorTransform`**: Transform stream for XOR cipher operations
+- **`XorMultipleTransform`**: Transform stream for multiple XOR operations
+
+All transforms extend Node.js `Transform` class for use with Node.js streams.
 
 ### Configuration & Registry
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@digitaldefiance/node-ecies-lib",
-  "version": "4.16.30",
+  "version": "4.17.4",
   "description": "Digital Defiance Node ECIES Library",
   "homepage": "https://github.com/Digital-Defiance/node-ecies-lib",
   "repository": {
@@ -59,9 +59,9 @@
   "license": "MIT",
   "packageManager": "yarn@4.10.3",
   "dependencies": {
-    "@digitaldefiance/ecies-lib": "4.16.30",
+    "@digitaldefiance/ecies-lib": "4.17.2",
     "@digitaldefiance/express-suite-test-utils": "1.1.0",
-    "@digitaldefiance/i18n-lib": "4.3.0",
+    "@digitaldefiance/i18n-lib": "4.3.2",
     "@ethereumjs/wallet": "^2.0.4",
     "@noble/curves": "^1.4.2",
     "@noble/hashes": "^1.4.0",

package/src/i18n/node-ecies-i18n-setup.d.ts

@@ -2,28 +2,34 @@
  * Node.js ECIES i18n setup and configuration.
  *
  * This is the single source of truth for i18n in node-ecies-lib.
- * Uses I18nBuilder pattern for proper engine initialization and registers:
- * - Core component (for error messages)
- * - ECIES component (imported from ecies-lib - translations defined there)
+ * Uses createI18nSetup factory for proper engine initialization and registers:
+ * - Core component (automatic via factory)
+ * - ECIES component (imported from ecies-lib via createEciesComponentPackage)
  * - Node ECIES component (translations defined here)
  *
  * All components support translateStringKey for direct branded enum translation.
  */
 import { EciesComponentId } from '@digitaldefiance/ecies-lib';
-import { ComponentConfig, I18nEngine, type BrandedMasterStringsCollection, type CoreLanguageCode } from '@digitaldefiance/i18n-lib';
+import { ComponentConfig, I18nEngine, type BrandedMasterStringsCollection, type CoreLanguageCode, type I18nComponentPackage } from '@digitaldefiance/i18n-lib';
 import { NodeEciesComponentId, NodeEciesStringKey } from './node-keys';
 import type { NodeEciesStringKeyValue } from './node-keys';
 export { NodeEciesComponentId, EciesComponentId };
 /**
  * Master strings collection for the Node ECIES component.
  * These are the translations specific to node-ecies-lib.
- * ECIES translations come from ecies-lib via createEciesComponentConfig().
+ * ECIES translations come from ecies-lib via createEciesComponentPackage().
  */
 export declare const NodeEciesComponentStrings: BrandedMasterStringsCollection<typeof NodeEciesStringKey, CoreLanguageCode>;
 /**
  * Create Node ECIES component configuration
  */
 export declare function createNodeEciesComponentConfig(): ComponentConfig;
+/**
+ * Creates an I18nComponentPackage bundling the Node ECIES ComponentConfig
+ * with its branded string key enum. Use this with createI18nSetup's
+ * libraryComponents array.
+ */
+export declare function createNodeEciesComponentPackage(): I18nComponentPackage;
 /**
  * Get or create the Node ECIES i18n engine.
  *

package/src/i18n/node-ecies-i18n-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-ecies-i18n-setup.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-ecies-lib/src/i18n/node-ecies-i18n-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAEL,gBAAgB,EAEjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,eAAe,EAIf,UAAU,EAEV,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACtB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAY3D,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,8BAA8B,CACpE,OAAO,kBAAkB,EACzB,gBAAgB,CAUjB,CAAC;AAEF;;GAEG;AACH,wBAAgB,8BAA8B,IAAI,eAAe,CAMhE;AAoDD;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,UAAU,CAkCnD;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,uBAAuB,EAClC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3C,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAMR;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,uBAAuB,EAClC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3C,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAMR"}
+{"version":3,"file":"node-ecies-i18n-setup.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-ecies-lib/src/i18n/node-ecies-i18n-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAEL,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,eAAe,EAEf,UAAU,EAEV,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAY3D,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,8BAA8B,CACpE,OAAO,kBAAkB,EACzB,gBAAgB,CAUjB,CAAC;AAEF;;GAEG;AACH,wBAAgB,8BAA8B,IAAI,eAAe,CAMhE;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,IAAI,oBAAoB,CAKtE;AAID;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,UAAU,CAenD;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,uBAAuB,EAClC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3C,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAMR;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,uBAAuB,EAClC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3C,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAMR"}

package/src/i18n/node-ecies-i18n-setup.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NodeEciesComponentStrings = exports.EciesComponentId = exports.NodeEciesComponentId = void 0;
 exports.createNodeEciesComponentConfig = createNodeEciesComponentConfig;
+exports.createNodeEciesComponentPackage = createNodeEciesComponentPackage;
 exports.getNodeEciesI18nEngine = getNodeEciesI18nEngine;
 exports.resetNodeEciesI18nEngine = resetNodeEciesI18nEngine;
 exports.getNodeEciesTranslation = getNodeEciesTranslation;
@@ -10,9 +11,9 @@ exports.safeGetNodeEciesTranslation = safeGetNodeEciesTranslation;
  * Node.js ECIES i18n setup and configuration.
  *
  * This is the single source of truth for i18n in node-ecies-lib.
- * Uses I18nBuilder pattern for proper engine initialization and registers:
- * - Core component (for error messages)
- * - ECIES component (imported from ecies-lib - translations defined there)
+ * Uses createI18nSetup factory for proper engine initialization and registers:
+ * - Core component (automatic via factory)
+ * - ECIES component (imported from ecies-lib via createEciesComponentPackage)
  * - Node ECIES component (translations defined here)
  *
  * All components support translateStringKey for direct branded enum translation.
@@ -26,7 +27,7 @@ const translations_1 = require("./translations");
 /**
  * Master strings collection for the Node ECIES component.
  * These are the translations specific to node-ecies-lib.
- * ECIES translations come from ecies-lib via createEciesComponentConfig().
+ * ECIES translations come from ecies-lib via createEciesComponentPackage().
  */
 exports.NodeEciesComponentStrings = {
     [i18n_lib_1.LanguageCodes.EN_US]: translations_1.englishTranslations,
@@ -48,51 +49,18 @@ function createNodeEciesComponentConfig() {
         aliases: ['NodeEciesStringKey'],
     };
 }
-let _nodeEciesI18nEngine = null;
-let _componentRegistered = false;
 /**
- * Register the engine with all required components using I18nBuilder
+ * Creates an I18nComponentPackage bundling the Node ECIES ComponentConfig
+ * with its branded string key enum. Use this with createI18nSetup's
+ * libraryComponents array.
  */
-function registerEngine() {
-    const newEngine = i18n_lib_1.I18nBuilder.create()
-        .withLanguages((0, i18n_lib_1.getCoreLanguageDefinitions)())
-        .withDefaultLanguage(i18n_lib_1.LanguageCodes.EN_US)
-        .withInstanceKey('default')
-        .build();
-    // Register Core i18n component (required for error messages)
-    const coreReg = (0, i18n_lib_1.createCoreComponentRegistration)();
-    newEngine.register({
-        id: coreReg.component.id,
-        strings: coreReg.strings,
-    });
-    // Register ECIES component from ecies-lib (translations are defined there)
-    const eciesConfig = (0, ecies_lib_1.createEciesComponentConfig)();
-    newEngine.register({
-        ...eciesConfig,
-        aliases: ['EciesStringKey'],
-    });
-    // Register Node ECIES component (translations defined in this lib)
-    newEngine.register(createNodeEciesComponentConfig());
-    // Register branded string key enums for translateStringKey support
-    // Done after build to avoid issues with jest.resetModules() in tests
-    try {
-        if (!newEngine.hasStringKeyEnum(ecies_lib_1.EciesStringKey)) {
-            newEngine.registerStringKeyEnum(ecies_lib_1.EciesStringKey);
-        }
-    }
-    catch {
-        // Silently ignore if enum registration fails (e.g., in test environments)
-    }
-    try {
-        if (!newEngine.hasStringKeyEnum(node_keys_1.NodeEciesStringKey)) {
-            newEngine.registerStringKeyEnum(node_keys_1.NodeEciesStringKey);
-        }
-    }
-    catch {
-        // Silently ignore if enum registration fails (e.g., in test environments)
-    }
-    return newEngine;
+function createNodeEciesComponentPackage() {
+    return {
+        config: createNodeEciesComponentConfig(),
+        stringKeyEnum: node_keys_1.NodeEciesStringKey,
+    };
 }
+let _nodeEciesI18nEngine = null;
 /**
  * Get or create the Node ECIES i18n engine.
  *
@@ -100,32 +68,17 @@ function registerEngine() {
  * allowing translateStringKey to work with both EciesStringKey and NodeEciesStringKey.
  */
 function getNodeEciesI18nEngine() {
-    if (i18n_lib_1.I18nEngine.hasInstance('default')) {
-        _nodeEciesI18nEngine = i18n_lib_1.I18nEngine.getInstance('default');
-        // Ensure our components are registered on existing instance
-        if (!_componentRegistered) {
-            // Register ECIES component if not present (translations from ecies-lib)
-            const eciesConfig = (0, ecies_lib_1.createEciesComponentConfig)();
-            _nodeEciesI18nEngine.registerIfNotExists({
-                ...eciesConfig,
-                aliases: ['EciesStringKey'],
-            });
-            // Register Node ECIES component if not present
-            _nodeEciesI18nEngine.registerIfNotExists(createNodeEciesComponentConfig());
-            // Register branded string key enums for translateStringKey support
-            if (!_nodeEciesI18nEngine.hasStringKeyEnum(ecies_lib_1.EciesStringKey)) {
-                _nodeEciesI18nEngine.registerStringKeyEnum(ecies_lib_1.EciesStringKey);
-            }
-            if (!_nodeEciesI18nEngine.hasStringKeyEnum(node_keys_1.NodeEciesStringKey)) {
-                _nodeEciesI18nEngine.registerStringKeyEnum(node_keys_1.NodeEciesStringKey);
-            }
-            _componentRegistered = true;
-        }
-    }
-    else {
-        _nodeEciesI18nEngine = registerEngine();
-        _componentRegistered = true;
+    if (_nodeEciesI18nEngine && i18n_lib_1.I18nEngine.hasInstance('default')) {
+        return _nodeEciesI18nEngine;
     }
+    const result = (0, i18n_lib_1.createI18nSetup)({
+        componentId: node_keys_1.NodeEciesComponentId,
+        stringKeyEnum: node_keys_1.NodeEciesStringKey,
+        strings: exports.NodeEciesComponentStrings,
+        aliases: ['NodeEciesStringKey'],
+        libraryComponents: [(0, ecies_lib_1.createEciesComponentPackage)()],
+    });
+    _nodeEciesI18nEngine = result.engine;
     return _nodeEciesI18nEngine;
 }
 /**
@@ -133,7 +86,6 @@ function getNodeEciesI18nEngine() {
  */
 function resetNodeEciesI18nEngine() {
     _nodeEciesI18nEngine = null;
-    _componentRegistered = false;
 }
 /**
  * Helper to translate Node ECIES strings.

package/src/i18n/node-ecies-i18n-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-ecies-i18n-setup.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-ecies-lib/src/i18n/node-ecies-i18n-setup.ts"],"names":[],"mappings":";;;AAgEA,wEAMC;AA0DD,wDAkCC;AAKD,4DAGC;AAMD,0DAUC;AAKD,kEAUC;AAzMD;;;;;;;;;;GAUG;AACH,0DAIoC;AAyBL,iGA3B7B,4BAAgB,OA2B6B;AAxB/C,wDASmC;AAEnC,2CAAuE;AAa9D,qGAbA,gCAAoB,OAaA;AAX7B,iDASwB;AAIxB;;;;GAIG;AACU,QAAA,yBAAyB,GAGlC;IACF,CAAC,wBAAa,CAAC,KAAK,CAAC,EAAE,kCAAmB;IAC1C,CAAC,wBAAa,CAAC,KAAK,CAAC,EAAE,yCAA0B;IACjD,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,iCAAkB;IACtC,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,kCAAmB;IACvC,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,iCAAkB;IACtC,CAAC,wBAAa,CAAC,KAAK,CAAC,EAAE,mCAAoB;IAC3C,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,mCAAoB;IACxC,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,oCAAqB;CAC1C,CAAC;AAEF;;GAEG;AACH,SAAgB,8BAA8B;IAC5C,OAAO;QACL,EAAE,EAAE,gCAAoB;QACxB,OAAO,EAAE,iCAAyB;QAClC,OAAO,EAAE,CAAC,oBAAoB,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,IAAI,oBAAoB,GAAsB,IAAI,CAAC;AACnD,IAAI,oBAAoB,GAAG,KAAK,CAAC;AAEjC;;GAEG;AACH,SAAS,cAAc;IACrB,MAAM,SAAS,GAAG,sBAAW,CAAC,MAAM,EAAE;SACnC,aAAa,CAAC,IAAA,qCAA0B,GAAE,CAAC;SAC3C,mBAAmB,CAAC,wBAAa,CAAC,KAAK,CAAC;SACxC,eAAe,CAAC,SAAS,CAAC;SAC1B,KAAK,EAAE,CAAC;IAEX,6DAA6D;IAC7D,MAAM,OAAO,GAAG,IAAA,0CAA+B,GAAE,CAAC;IAClD,SAAS,CAAC,QAAQ,CAAC;QACjB,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE;QACxB,OAAO,EAAE,OAAO,CAAC,OAAiD;KACnE,CAAC,CAAC;IAEH,2EAA2E;IAC3E,MAAM,WAAW,GAAG,IAAA,sCAA0B,GAAE,CAAC;IACjD,SAAS,CAAC,QAAQ,CAAC;QACjB,GAAG,WAAW;QACd,OAAO,EAAE,CAAC,gBAAgB,CAAC;KAC5B,CAAC,CAAC;IAEH,mEAAmE;IACnE,SAAS,CAAC,QAAQ,CAAC,8BAA8B,EAAE,CAAC,CAAC;IAErD,mEAAmE;IACnE,qEAAqE;IACrE,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,0BAAc,CAAC,EAAE,CAAC;YAChD,SAAS,CAAC,qBAAqB,CAAC,0BAAc,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,8BAAkB,CAAC,EAAE,CAAC;YACpD,SAAS,CAAC,qBAAqB,CAAC,8BAAkB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB;IACpC,IAAI,qBAAU,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,oBAAoB,GAAG,qBAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAEzD,4DAA4D;QAC5D,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1B,wEAAwE;YACxE,MAAM,WAAW,GAAG,IAAA,sCAA0B,GAAE,CAAC;YACjD,oBAAoB,CAAC,mBAAmB,CAAC;gBACvC,GAAG,WAAW;gBACd,OAAO,EAAE,CAAC,gBAAgB,CAAC;aAC5B,CAAC,CAAC;YAEH,+CAA+C;YAC/C,oBAAoB,CAAC,mBAAmB,CACtC,8BAA8B,EAAE,CACjC,CAAC;YAEF,mEAAmE;YACnE,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,0BAAc,CAAC,EAAE,CAAC;gBAC3D,oBAAoB,CAAC,qBAAqB,CAAC,0BAAc,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,8BAAkB,CAAC,EAAE,CAAC;gBAC/D,oBAAoB,CAAC,qBAAqB,CAAC,8BAAkB,CAAC,CAAC;YACjE,CAAC;YAED,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,oBAAoB,GAAG,cAAc,EAAE,CAAC;QACxC,oBAAoB,GAAG,IAAI,CAAC;IAC9B,CAAC;IAED,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB;IACtC,oBAAoB,GAAG,IAAI,CAAC;IAC5B,oBAAoB,GAAG,KAAK,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CACrC,SAAkC,EAClC,SAA2C,EAC3C,QAAiB;IAEjB,OAAO,sBAAsB,EAAE,CAAC,kBAAkB,CAChD,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,2BAA2B,CACzC,SAAkC,EAClC,SAA2C,EAC3C,QAAiB;IAEjB,OAAO,sBAAsB,EAAE,CAAC,sBAAsB,CACpD,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"node-ecies-i18n-setup.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-ecies-lib/src/i18n/node-ecies-i18n-setup.ts"],"names":[],"mappings":";;;AA8DA,wEAMC;AAOD,0EAKC;AAUD,wDAeC;AAKD,4DAEC;AAMD,0DAUC;AAKD,kEAUC;AA/ID;;;;;;;;;;GAUG;AACH,0DAGoC;AAwBL,iGAzB7B,4BAAgB,OAyB6B;AAvB/C,wDAQmC;AAEnC,2CAAuE;AAa9D,qGAbA,gCAAoB,OAaA;AAX7B,iDASwB;AAIxB;;;;GAIG;AACU,QAAA,yBAAyB,GAGlC;IACF,CAAC,wBAAa,CAAC,KAAK,CAAC,EAAE,kCAAmB;IAC1C,CAAC,wBAAa,CAAC,KAAK,CAAC,EAAE,yCAA0B;IACjD,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,iCAAkB;IACtC,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,kCAAmB;IACvC,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,iCAAkB;IACtC,CAAC,wBAAa,CAAC,KAAK,CAAC,EAAE,mCAAoB;IAC3C,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,mCAAoB;IACxC,CAAC,wBAAa,CAAC,EAAE,CAAC,EAAE,oCAAqB;CAC1C,CAAC;AAEF;;GAEG;AACH,SAAgB,8BAA8B;IAC5C,OAAO;QACL,EAAE,EAAE,gCAAoB;QACxB,OAAO,EAAE,iCAAyB;QAClC,OAAO,EAAE,CAAC,oBAAoB,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,+BAA+B;IAC7C,OAAO;QACL,MAAM,EAAE,8BAA8B,EAAE;QACxC,aAAa,EAAE,8BAAkB;KAClC,CAAC;AACJ,CAAC;AAED,IAAI,oBAAoB,GAAsB,IAAI,CAAC;AAEnD;;;;;GAKG;AACH,SAAgB,sBAAsB;IACpC,IAAI,oBAAoB,IAAI,qBAAU,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,0BAAe,EAAC;QAC7B,WAAW,EAAE,gCAAoB;QACjC,aAAa,EAAE,8BAAkB;QACjC,OAAO,EAAE,iCAAyB;QAClC,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,iBAAiB,EAAE,CAAC,IAAA,uCAA2B,GAAE,CAAC;KACnD,CAAC,CAAC;IAEH,oBAAoB,GAAG,MAAM,CAAC,MAAoB,CAAC;IACnD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB;IACtC,oBAAoB,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CACrC,SAAkC,EAClC,SAA2C,EAC3C,QAAiB;IAEjB,OAAO,sBAAsB,EAAE,CAAC,kBAAkB,CAChD,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,2BAA2B,CACzC,SAAkC,EAClC,SAA2C,EAC3C,QAAiB;IAEjB,OAAO,sBAAsB,EAAE,CAAC,sBAAsB,CACpD,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;AACJ,CAAC"}

package/src/lib/voting/threshold/enumerations/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Re-export all threshold enumerations from ecies-lib
+ * This ensures enumeration parity between browser and Node.js implementations
+ */
+export { CeremonyStatus, GuardianStatus, IntervalTriggerType, ThresholdAuditEventType, } from '@digitaldefiance/ecies-lib';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/voting/threshold/enumerations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/threshold/enumerations/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC"}

package/src/lib/voting/threshold/enumerations/index.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ThresholdAuditEventType = exports.IntervalTriggerType = exports.GuardianStatus = exports.CeremonyStatus = void 0;
+/**
+ * Re-export all threshold enumerations from ecies-lib
+ * This ensures enumeration parity between browser and Node.js implementations
+ */
+var ecies_lib_1 = require("@digitaldefiance/ecies-lib");
+Object.defineProperty(exports, "CeremonyStatus", { enumerable: true, get: function () { return ecies_lib_1.CeremonyStatus; } });
+Object.defineProperty(exports, "GuardianStatus", { enumerable: true, get: function () { return ecies_lib_1.GuardianStatus; } });
+Object.defineProperty(exports, "IntervalTriggerType", { enumerable: true, get: function () { return ecies_lib_1.IntervalTriggerType; } });
+Object.defineProperty(exports, "ThresholdAuditEventType", { enumerable: true, get: function () { return ecies_lib_1.ThresholdAuditEventType; } });
+//# sourceMappingURL=index.js.map

package/src/lib/voting/threshold/enumerations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/threshold/enumerations/index.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,wDAKoC;AAJlC,2GAAA,cAAc,OAAA;AACd,2GAAA,cAAc,OAAA;AACd,gHAAA,mBAAmB,OAAA;AACnB,oHAAA,uBAAuB,OAAA"}

package/src/lib/voting/threshold/index.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Threshold Voting Module - Node.js Optimized
+ *
+ * Re-exports threshold voting components from ecies-lib and adds
+ * Node.js-specific extensions with Buffer support for improved performance.
+ *
+ * Key features:
+ * - Threshold Paillier cryptography (k-of-n Guardians required for decryption)
+ * - Real-time interval decryption during voting
+ * - Zero-knowledge proofs for all decryption operations
+ * - Integration with hierarchical aggregation (Precinct → County → State → National)
+ * - Backward compatible with single-authority polls
+ * - Node.js Buffer support for efficient serialization
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   ThresholdKeyGenerator,
+ *   GuardianRegistry,
+ *   CeremonyCoordinator,
+ *   GuardianStatus,
+ * } from '@digitaldefiance/node-ecies-lib';
+ *
+ * // Generate threshold keys (5-of-9 configuration)
+ * const keyGen = new ThresholdKeyGenerator();
+ * const keyPair = await keyGen.generate({ totalShares: 9, threshold: 5 });
+ *
+ * // Register Guardians
+ * const registry = new GuardianRegistry();
+ * keyPair.keyShares.forEach((share, i) => {
+ *   registry.register({
+ *     id: guardianIds[i],
+ *     name: `Guardian ${i + 1}`,
+ *     shareIndex: share.index,
+ *     verificationKey: share.verificationKey,
+ *     status: GuardianStatus.Online,
+ *   });
+ * });
+ *
+ * // Create threshold poll and conduct voting...
+ * ```
+ */
+export * from './enumerations';
+export type * from './interfaces';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/voting/threshold/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/threshold/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,cAAc,gBAAgB,CAAC;AAG/B,mBAAmB,cAAc,CAAC"}

package/src/lib/voting/threshold/index.js

@@ -0,0 +1,49 @@
+"use strict";
+/**
+ * Threshold Voting Module - Node.js Optimized
+ *
+ * Re-exports threshold voting components from ecies-lib and adds
+ * Node.js-specific extensions with Buffer support for improved performance.
+ *
+ * Key features:
+ * - Threshold Paillier cryptography (k-of-n Guardians required for decryption)
+ * - Real-time interval decryption during voting
+ * - Zero-knowledge proofs for all decryption operations
+ * - Integration with hierarchical aggregation (Precinct → County → State → National)
+ * - Backward compatible with single-authority polls
+ * - Node.js Buffer support for efficient serialization
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   ThresholdKeyGenerator,
+ *   GuardianRegistry,
+ *   CeremonyCoordinator,
+ *   GuardianStatus,
+ * } from '@digitaldefiance/node-ecies-lib';
+ *
+ * // Generate threshold keys (5-of-9 configuration)
+ * const keyGen = new ThresholdKeyGenerator();
+ * const keyPair = await keyGen.generate({ totalShares: 9, threshold: 5 });
+ *
+ * // Register Guardians
+ * const registry = new GuardianRegistry();
+ * keyPair.keyShares.forEach((share, i) => {
+ *   registry.register({
+ *     id: guardianIds[i],
+ *     name: `Guardian ${i + 1}`,
+ *     shareIndex: share.index,
+ *     verificationKey: share.verificationKey,
+ *     status: GuardianStatus.Online,
+ *   });
+ * });
+ *
+ * // Create threshold poll and conduct voting...
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+// Re-export enumerations from ecies-lib
+tslib_1.__exportStar(require("./enumerations"), exports);
+// Node.js-specific extensions will be added in Task 17
+//# sourceMappingURL=index.js.map

package/src/lib/voting/threshold/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/threshold/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;;;AAEH,wCAAwC;AACxC,yDAA+B;AAK/B,uDAAuD"}

package/src/lib/voting/threshold/interfaces/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Re-export all threshold interfaces from ecies-lib
+ * This ensures interface parity between browser and Node.js implementations
+ *
+ * Node.js-specific Buffer extensions will be added in future tasks.
+ */
+export type { KeyShare, ThresholdKeyConfig, ThresholdKeyPair, ZKProof, PartialDecryption, CombinedZKProof, CombinedDecryption, Guardian, GuardianStatusChangeEvent, IntervalConfig, IntervalTriggerEvent, Ceremony, IntervalTally, TallySubscription, VerificationResult, ThresholdPollConfig, ThresholdAuditEntry, IThresholdKeyGenerator, IPartialDecryptionService, IDecryptionCombiner, IGuardianRegistry, IIntervalScheduler, ICeremonyCoordinator, IPublicTallyFeed, ITallyVerifier, IThresholdPoll, IThresholdPollFactory, IThresholdAggregator, } from '@digitaldefiance/ecies-lib';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/voting/threshold/interfaces/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/threshold/interfaces/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,YAAY,EAEV,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAElB,QAAQ,EACR,yBAAyB,EAEzB,cAAc,EACd,oBAAoB,EAEpB,QAAQ,EAER,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAElB,mBAAmB,EAEnB,mBAAmB,EAEnB,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC"}

package/src/lib/voting/threshold/interfaces/index.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/src/lib/voting/threshold/interfaces/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-node-ecies-lib/src/lib/voting/threshold/interfaces/index.ts"],"names":[],"mappings":""}