@getmyenv/crypto 0.2.0 → 0.4.0

package/dist/backup.d.ts

@@ -1,8 +1,8 @@
-import type { BackupContext, BackupValue, EncryptedBackupEnvelope, WrappedProjectKey } from "./types.js";
-import { encryptSecret, decryptSecret } from "./envelope.js";
+import type { BackupContext, BackupValue, EncryptedBackupEnvelope, WrappedPrivateKey } from "./types.js";
 export declare function createBackupEnvelope(input: {
     projectName: string;
-    wrappedProjectKey: WrappedProjectKey;
+    publicKey: string;
+    wrappedPrivateKey: WrappedPrivateKey;
     contexts: BackupContext[];
     keys: string[];
     tags?: Record<string, string>;
@@ -10,6 +10,11 @@ export declare function createBackupEnvelope(input: {
 }): EncryptedBackupEnvelope;
 export declare function serializeBackup(envelope: EncryptedBackupEnvelope): string;
 export declare function parseBackup(raw: string): EncryptedBackupEnvelope;
+/**
+ * Open every context key in a backup with the Vault password it was made with.
+ * Keyed by context slug. Caller wipes the returned keys when done.
+ */
+export declare function openBackupKeys(vaultPassword: string, envelope: EncryptedBackupEnvelope): Promise<Map<string, Uint8Array>>;
 /**
  * Decrypt every value in a backup with the Vault password.
  * Works without getmyenv being reachable.
@@ -24,5 +29,3 @@ export declare function restoreValuesFromBackup(vaultPassword: string, envelope:
         expiresAt: string | null;
     }>;
 }>;
-export { encryptSecret, decryptSecret };
-//# sourceMappingURL=backup.d.ts.map

package/dist/backup.js

@@ -1,5 +1,5 @@
 import { BACKUP_FORMAT_VERSION } from "./types.js";
-import { encryptSecret, decryptSecret, unwrapProjectKey } from "./envelope.js";
+import { decryptSecret, openSealedKey, parseSealedKey, parseWrappedKey, publicKeyFromPrivate, unwrapPrivateKey, wipe, } from "./envelope.js";
 export function createBackupEnvelope(input) {
     const hasTags = input.tags && Object.keys(input.tags).length > 0;
     return {
@@ -7,7 +7,8 @@ export function createBackupEnvelope(input) {
         version: BACKUP_FORMAT_VERSION,
         createdAt: new Date().toISOString(),
         projectName: input.projectName,
-        wrappedProjectKey: input.wrappedProjectKey,
+        publicKey: input.publicKey,
+        wrappedPrivateKey: input.wrappedPrivateKey,
         contexts: input.contexts,
         keys: input.keys,
         ...(hasTags ? { tags: input.tags } : {}),
@@ -25,24 +26,68 @@ export function parseBackup(raw) {
     if (parsed.version !== BACKUP_FORMAT_VERSION) {
         throw new Error(`Unsupported backup version: ${String(parsed.version)}`);
     }
+    if (typeof parsed.projectName !== "string" ||
+        typeof parsed.publicKey !== "string" ||
+        !Array.isArray(parsed.contexts) ||
+        !Array.isArray(parsed.keys) ||
+        !Array.isArray(parsed.values)) {
+        throw new Error("Invalid backup file");
+    }
+    parseWrappedKey(JSON.stringify(parsed.wrappedPrivateKey));
+    for (const c of parsed.contexts) {
+        if (!Number.isInteger(c.id) || typeof c.slug !== "string") {
+            throw new Error("Invalid backup file");
+        }
+        if (c.sealedKey !== null)
+            parseSealedKey(JSON.stringify(c.sealedKey));
+    }
     return parsed;
 }
+/**
+ * Open every context key in a backup with the Vault password it was made with.
+ * Keyed by context slug. Caller wipes the returned keys when done.
+ */
+export async function openBackupKeys(vaultPassword, envelope) {
+    const privateKey = await unwrapPrivateKey(vaultPassword, envelope.wrappedPrivateKey);
+    try {
+        if (publicKeyFromPrivate(privateKey) !== envelope.publicKey) {
+            throw new Error("Backup key mismatch");
+        }
+        const keys = new Map();
+        for (const c of envelope.contexts) {
+            if (c.sealedKey)
+                keys.set(c.slug, openSealedKey(c.sealedKey, privateKey, c.id));
+        }
+        return keys;
+    }
+    finally {
+        wipe(privateKey);
+    }
+}
 /**
  * Decrypt every value in a backup with the Vault password.
  * Works without getmyenv being reachable.
  */
 export async function restoreValuesFromBackup(vaultPassword, envelope) {
-    const pek = await unwrapProjectKey(vaultPassword, envelope.wrappedProjectKey);
-    return {
-        contexts: envelope.contexts,
-        keys: envelope.keys,
-        values: envelope.values.map((v) => ({
-            key: v.key,
-            context: v.context,
-            value: decryptSecret(pek, v.payload),
-            expiresAt: v.expiresAt,
-        })),
-    };
+    const contextKeys = await openBackupKeys(vaultPassword, envelope);
+    try {
+        return {
+            contexts: envelope.contexts,
+            keys: envelope.keys,
+            values: envelope.values.map((v) => {
+                const key = contextKeys.get(v.context);
+                if (!key)
+                    throw new Error(`Backup has no key for context ${v.context}`);
+                return {
+                    key: v.key,
+                    context: v.context,
+                    value: decryptSecret(key, v.key, v.payload),
+                    expiresAt: v.expiresAt,
+                };
+            }),
+        };
+    }
+    finally {
+        wipe(...contextKeys.values());
+    }
 }
-export { encryptSecret, decryptSecret };
-//# sourceMappingURL=backup.js.map

package/dist/bytes.d.ts

@@ -1,7 +1,7 @@
 export declare function bytesToBase64(bytes: Uint8Array): string;
 export declare function base64ToBytes(b64: string): Uint8Array;
+export declare function bytesToBase64Url(bytes: Uint8Array): string;
+export declare function base64UrlToBytes(b64url: string): Uint8Array;
 export declare function getRandomBytes(length: number): Uint8Array;
 export declare function utf8Encode(text: string): Uint8Array;
 export declare function utf8Decode(bytes: Uint8Array): string;
-export declare function concatBytes(...parts: Uint8Array[]): Uint8Array;
-//# sourceMappingURL=bytes.d.ts.map

package/dist/bytes.js

@@ -19,6 +19,13 @@ export function base64ToBytes(b64) {
     }
     return bytes;
 }
+export function bytesToBase64Url(bytes) {
+    return bytesToBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+export function base64UrlToBytes(b64url) {
+    const b64 = b64url.replace(/-/g, "+").replace(/_/g, "/");
+    return base64ToBytes(b64 + "=".repeat((4 - (b64.length % 4)) % 4));
+}
 export function getRandomBytes(length) {
     const bytes = new Uint8Array(length);
     if (typeof globalThis.crypto?.getRandomValues === "function") {
@@ -33,14 +40,3 @@ export function utf8Encode(text) {
 export function utf8Decode(bytes) {
     return new TextDecoder().decode(bytes);
 }
-export function concatBytes(...parts) {
-    const total = parts.reduce((n, p) => n + p.length, 0);
-    const out = new Uint8Array(total);
-    let offset = 0;
-    for (const part of parts) {
-        out.set(part, offset);
-        offset += part.length;
-    }
-    return out;
-}
-//# sourceMappingURL=bytes.js.map

package/dist/envelope.d.ts

@@ -1,30 +1,49 @@
-import { type EncryptedSecretPayload, type WrappedProjectKey } from "./types.js";
+import { type EncryptedSecretPayload, type SealedKey, type WrappedPrivateKey } from "./types.js";
+/** Overwrite key material in place. */
+export declare function wipe(...buffers: Array<Uint8Array | null | undefined>): void;
+/** A fresh X25519 keypair. Used for server tokens and guest projects. */
+export declare function generateKeypair(): {
+    publicKey: string;
+    privateKey: Uint8Array;
+};
+export declare function publicKeyFromPrivate(privateKey: Uint8Array): string;
 /**
- * Create a new project encryption key and wrap it with a password-derived KEK.
+ * Short, comparable form of a public key: the first 10 bytes of its SHA-256,
+ * as five groups of four hex digits. Two people compare it out of band.
  */
-export declare function createWrappedProjectKey(vaultPassword: string): Promise<{
-    pek: Uint8Array;
-    wrapped: WrappedProjectKey;
+export declare function publicKeyFingerprint(publicKey: string): string;
+/** Wrap an X25519 private key with a key derived from a password. */
+export declare function wrapPrivateKey(password: string, privateKey: Uint8Array): Promise<WrappedPrivateKey>;
+/** Throws when the password is wrong or the blob was changed. */
+export declare function unwrapPrivateKey(password: string, wrapped: WrappedPrivateKey): Promise<Uint8Array>;
+/** New user keypair, wrapped with the Vault password. */
+export declare function createUserKeys(password: string): Promise<{
+    publicKey: string;
+    privateKey: Uint8Array;
+    wrapped: WrappedPrivateKey;
 }>;
-/**
- * Unwrap (decrypt) the project encryption key using the vault password.
- */
-export declare function unwrapProjectKey(vaultPassword: string, wrapped: WrappedProjectKey): Promise<Uint8Array>;
-/**
- * Change vault password: unwrap PEK with old password, rewrap with new.
- * Secret ciphertext does NOT need to be re-encrypted.
- */
-export declare function rewrapProjectKey(oldPassword: string, newPassword: string, wrapped: WrappedProjectKey): Promise<WrappedProjectKey>;
-/**
- * Encrypt a secret value with the project encryption key.
- */
-export declare function encryptSecret(pek: Uint8Array, plaintext: string): EncryptedSecretPayload;
-/**
- * Decrypt a secret value with the project encryption key.
- */
-export declare function decryptSecret(pek: Uint8Array, payload: EncryptedSecretPayload): string;
+/** Change the Vault password. Context keys and values stay the same. */
+export declare function rewrapPrivateKey(oldPassword: string, newPassword: string, wrapped: WrappedPrivateKey): Promise<WrappedPrivateKey>;
+/** Seal a context key to one recipient. Bound to the context id and recipient key. */
+export declare function sealContextKey(contextKey: Uint8Array, recipientPublicKey: string, contextId: number): SealedKey;
+/** Open a sealed context key with the recipient's private key. */
+export declare function openSealedKey(sealed: SealedKey, privateKey: Uint8Array, contextId: number): Uint8Array;
+/** Encrypt a value with its context key. Bound to the variable name. */
+export declare function encryptSecret(contextKey: Uint8Array, name: string, plaintext: string): EncryptedSecretPayload;
+/** Throws when the key is wrong, the name differs, or the payload was changed. */
+export declare function decryptSecret(contextKey: Uint8Array, name: string, payload: EncryptedSecretPayload): string;
 export declare function serializePayload(payload: EncryptedSecretPayload): string;
 export declare function parsePayload(raw: string): EncryptedSecretPayload;
-export declare function serializeWrappedKey(wrapped: WrappedProjectKey): string;
-export declare function parseWrappedKey(raw: string): WrappedProjectKey;
-//# sourceMappingURL=envelope.d.ts.map
+export declare function serializeWrappedKey(wrapped: WrappedPrivateKey): string;
+export declare function parseWrappedKey(raw: string): WrappedPrivateKey;
+export declare function serializeSealedKey(sealed: SealedKey): string;
+export declare function parseSealedKey(raw: string): SealedKey;
+/**
+ * Server tokens carry their own private key after the dot. Only the part
+ * before the dot is sent to the server.
+ */
+export declare function joinServerToken(authPart: string, privateKey: Uint8Array): string;
+export declare function splitServerToken(token: string): {
+    authPart: string;
+    privateKey: Uint8Array | null;
+};

package/dist/envelope.js

@@ -1,72 +1,159 @@
 import { gcm } from "@noble/ciphers/aes.js";
-import { ALGORITHM, CRYPTO_FORMAT_VERSION, DEFAULT_KDF_PARAMS, KDF, } from "./types.js";
-import { base64ToBytes, bytesToBase64, getRandomBytes, utf8Decode, utf8Encode, } from "./bytes.js";
-import { deriveKek, generateProjectKey, generateSalt } from "./kdf.js";
+import { x25519 } from "@noble/curves/ed25519.js";
+import { hkdf } from "@noble/hashes/hkdf.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { ALGORITHM, CRYPTO_FORMAT_VERSION, DEFAULT_KDF_PARAMS, KDF, SEAL, } from "./types.js";
+import { base64ToBytes, base64UrlToBytes, bytesToBase64, bytesToBase64Url, getRandomBytes, utf8Decode, utf8Encode, } from "./bytes.js";
+import { assertKdfParams, deriveKek, generateSalt } from "./kdf.js";
 const NONCE_LENGTH = 12;
-function aesGcmEncrypt(key, plaintext) {
+const KEY_LENGTH = 32;
+const AAD_USER_KEY = "getmyenv:v2:userkey";
+const HKDF_INFO_SEAL = "getmyenv:v2:seal";
+/** Overwrite key material in place. */
+export function wipe(...buffers) {
+    for (const b of buffers)
+        b?.fill(0);
+}
+function aesGcmEncrypt(key, plaintext, aad) {
     const nonce = getRandomBytes(NONCE_LENGTH);
-    const aes = gcm(key, nonce);
-    const ciphertext = aes.encrypt(plaintext);
+    const ciphertext = gcm(key, nonce, utf8Encode(aad)).encrypt(plaintext);
     return { nonce, ciphertext };
 }
-function aesGcmDecrypt(key, nonce, ciphertext) {
-    const aes = gcm(key, nonce);
-    return aes.decrypt(ciphertext);
+function aesGcmDecrypt(key, nonce, ciphertext, aad) {
+    return gcm(key, nonce, utf8Encode(aad)).decrypt(ciphertext);
+}
+function assertKey(key) {
+    if (key.length !== KEY_LENGTH)
+        throw new Error("Invalid key length");
+}
+/** A fresh X25519 keypair. Used for server tokens and guest projects. */
+export function generateKeypair() {
+    const privateKey = x25519.utils.randomSecretKey();
+    return { publicKey: publicKeyFromPrivate(privateKey), privateKey };
+}
+export function publicKeyFromPrivate(privateKey) {
+    assertKey(privateKey);
+    return bytesToBase64(x25519.getPublicKey(privateKey));
 }
 /**
- * Create a new project encryption key and wrap it with a password-derived KEK.
+ * Short, comparable form of a public key: the first 10 bytes of its SHA-256,
+ * as five groups of four hex digits. Two people compare it out of band.
  */
-export async function createWrappedProjectKey(vaultPassword) {
+export function publicKeyFingerprint(publicKey) {
+    const bytes = base64ToBytes(publicKey);
+    assertKey(bytes);
+    const hex = Array.from(sha256(bytes).subarray(0, 10), (b) => b.toString(16).padStart(2, "0")).join("");
+    return hex.toUpperCase().match(/.{4}/g).join(" ");
+}
+/** Wrap an X25519 private key with a key derived from a password. */
+export async function wrapPrivateKey(password, privateKey) {
+    assertKey(privateKey);
     const salt = generateSalt();
-    const kek = await deriveKek(vaultPassword, salt);
-    const pek = generateProjectKey();
-    const { nonce, ciphertext } = aesGcmEncrypt(kek, pek);
-    const wrapped = {
-        version: CRYPTO_FORMAT_VERSION,
-        salt: bytesToBase64(salt),
-        wrappedKey: bytesToBase64(ciphertext),
-        wrappedKeyNonce: bytesToBase64(nonce),
-        kdf: KDF,
-        kdfParams: { ...DEFAULT_KDF_PARAMS },
-    };
-    return { pek, wrapped };
+    const kek = await deriveKek(password, salt);
+    try {
+        const { nonce, ciphertext } = aesGcmEncrypt(kek, privateKey, AAD_USER_KEY);
+        return {
+            version: CRYPTO_FORMAT_VERSION,
+            kdf: KDF,
+            kdfParams: { ...DEFAULT_KDF_PARAMS },
+            salt: bytesToBase64(salt),
+            nonce: bytesToBase64(nonce),
+            ciphertext: bytesToBase64(ciphertext),
+        };
+    }
+    finally {
+        wipe(kek);
+    }
 }
-/**
- * Unwrap (decrypt) the project encryption key using the vault password.
- */
-export async function unwrapProjectKey(vaultPassword, wrapped) {
-    if (wrapped.version !== CRYPTO_FORMAT_VERSION) {
-        throw new Error(`Unsupported wrapped key version: ${wrapped.version}`);
+/** Throws when the password is wrong or the blob was changed. */
+export async function unwrapPrivateKey(password, wrapped) {
+    if (wrapped.version !== CRYPTO_FORMAT_VERSION || wrapped.kdf !== KDF) {
+        throw new Error("Unsupported wrapped key");
+    }
+    assertKdfParams(wrapped.kdfParams);
+    const kek = await deriveKek(password, base64ToBytes(wrapped.salt), wrapped.kdfParams);
+    try {
+        const key = aesGcmDecrypt(kek, base64ToBytes(wrapped.nonce), base64ToBytes(wrapped.ciphertext), AAD_USER_KEY);
+        assertKey(key);
+        return key;
+    }
+    finally {
+        wipe(kek);
     }
-    const salt = base64ToBytes(wrapped.salt);
-    const kek = await deriveKek(vaultPassword, salt, wrapped.kdfParams);
-    const nonce = base64ToBytes(wrapped.wrappedKeyNonce);
-    const ciphertext = base64ToBytes(wrapped.wrappedKey);
-    return aesGcmDecrypt(kek, nonce, ciphertext);
 }
-/**
- * Change vault password: unwrap PEK with old password, rewrap with new.
- * Secret ciphertext does NOT need to be re-encrypted.
- */
-export async function rewrapProjectKey(oldPassword, newPassword, wrapped) {
-    const pek = await unwrapProjectKey(oldPassword, wrapped);
-    const salt = generateSalt();
-    const kek = await deriveKek(newPassword, salt);
-    const { nonce, ciphertext } = aesGcmEncrypt(kek, pek);
-    return {
-        version: CRYPTO_FORMAT_VERSION,
-        salt: bytesToBase64(salt),
-        wrappedKey: bytesToBase64(ciphertext),
-        wrappedKeyNonce: bytesToBase64(nonce),
-        kdf: KDF,
-        kdfParams: { ...DEFAULT_KDF_PARAMS },
-    };
+/** New user keypair, wrapped with the Vault password. */
+export async function createUserKeys(password) {
+    const { publicKey, privateKey } = generateKeypair();
+    const wrapped = await wrapPrivateKey(password, privateKey);
+    return { publicKey, privateKey, wrapped };
 }
-/**
- * Encrypt a secret value with the project encryption key.
- */
-export function encryptSecret(pek, plaintext) {
-    const { nonce, ciphertext } = aesGcmEncrypt(pek, utf8Encode(plaintext));
+/** Change the Vault password. Context keys and values stay the same. */
+export async function rewrapPrivateKey(oldPassword, newPassword, wrapped) {
+    const privateKey = await unwrapPrivateKey(oldPassword, wrapped);
+    try {
+        return await wrapPrivateKey(newPassword, privateKey);
+    }
+    finally {
+        wipe(privateKey);
+    }
+}
+function sealAad(contextId, recipientPublicKey) {
+    return `getmyenv:v2:ctxkey:${contextId}:${recipientPublicKey}`;
+}
+function sealKek(shared, ephemeralPublicKey, recipientPublicKey) {
+    const salt = new Uint8Array(ephemeralPublicKey.length + recipientPublicKey.length);
+    salt.set(ephemeralPublicKey, 0);
+    salt.set(recipientPublicKey, ephemeralPublicKey.length);
+    return hkdf(sha256, shared, salt, utf8Encode(HKDF_INFO_SEAL), KEY_LENGTH);
+}
+/** Seal a context key to one recipient. Bound to the context id and recipient key. */
+export function sealContextKey(contextKey, recipientPublicKey, contextId) {
+    assertKey(contextKey);
+    const recipient = base64ToBytes(recipientPublicKey);
+    const ephemeralPrivate = x25519.utils.randomSecretKey();
+    const ephemeralPublic = x25519.getPublicKey(ephemeralPrivate);
+    const shared = x25519.getSharedSecret(ephemeralPrivate, recipient);
+    const kek = sealKek(shared, ephemeralPublic, recipient);
+    try {
+        const { nonce, ciphertext } = aesGcmEncrypt(kek, contextKey, sealAad(contextId, recipientPublicKey));
+        return {
+            version: CRYPTO_FORMAT_VERSION,
+            algorithm: SEAL,
+            ephemeralPublicKey: bytesToBase64(ephemeralPublic),
+            nonce: bytesToBase64(nonce),
+            ciphertext: bytesToBase64(ciphertext),
+        };
+    }
+    finally {
+        wipe(ephemeralPrivate, shared, kek);
+    }
+}
+/** Open a sealed context key with the recipient's private key. */
+export function openSealedKey(sealed, privateKey, contextId) {
+    if (sealed.version !== CRYPTO_FORMAT_VERSION || sealed.algorithm !== SEAL) {
+        throw new Error("Unsupported sealed key");
+    }
+    const recipientPublicKey = publicKeyFromPrivate(privateKey);
+    const recipient = base64ToBytes(recipientPublicKey);
+    const ephemeralPublic = base64ToBytes(sealed.ephemeralPublicKey);
+    const shared = x25519.getSharedSecret(privateKey, ephemeralPublic);
+    const kek = sealKek(shared, ephemeralPublic, recipient);
+    try {
+        const key = aesGcmDecrypt(kek, base64ToBytes(sealed.nonce), base64ToBytes(sealed.ciphertext), sealAad(contextId, recipientPublicKey));
+        assertKey(key);
+        return key;
+    }
+    finally {
+        wipe(shared, kek);
+    }
+}
+function secretAad(name) {
+    return `getmyenv:v2:secret:${name}`;
+}
+/** Encrypt a value with its context key. Bound to the variable name. */
+export function encryptSecret(contextKey, name, plaintext) {
+    assertKey(contextKey);
+    const { nonce, ciphertext } = aesGcmEncrypt(contextKey, utf8Encode(plaintext), secretAad(name));
     return {
         version: CRYPTO_FORMAT_VERSION,
         algorithm: ALGORITHM,
@@ -74,37 +161,80 @@ export function encryptSecret(pek, plaintext) {
         ciphertext: bytesToBase64(ciphertext),
     };
 }
-/**
- * Decrypt a secret value with the project encryption key.
- */
-export function decryptSecret(pek, payload) {
-    if (payload.version !== CRYPTO_FORMAT_VERSION) {
-        throw new Error(`Unsupported secret payload version: ${payload.version}`);
+/** Throws when the key is wrong, the name differs, or the payload was changed. */
+export function decryptSecret(contextKey, name, payload) {
+    if (payload.version !== CRYPTO_FORMAT_VERSION || payload.algorithm !== ALGORITHM) {
+        throw new Error("Unsupported secret payload");
+    }
+    return utf8Decode(aesGcmDecrypt(contextKey, base64ToBytes(payload.nonce), base64ToBytes(payload.ciphertext), secretAad(name)));
+}
+function parseJsonObject(raw, what) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
     }
-    if (payload.algorithm !== ALGORITHM) {
-        throw new Error(`Unsupported algorithm: ${payload.algorithm}`);
+    catch {
+        throw new Error(`Invalid ${what}`);
     }
-    const plaintext = aesGcmDecrypt(pek, base64ToBytes(payload.nonce), base64ToBytes(payload.ciphertext));
-    return utf8Decode(plaintext);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error(`Invalid ${what}`);
+    }
+    return parsed;
+}
+function hasStrings(o, keys) {
+    return keys.every((k) => typeof o[k] === "string" && o[k].length > 0);
 }
 export function serializePayload(payload) {
     return JSON.stringify(payload);
 }
 export function parsePayload(raw) {
-    const parsed = JSON.parse(raw);
-    if (parsed.version !== CRYPTO_FORMAT_VERSION || !parsed.nonce || !parsed.ciphertext) {
+    const o = parseJsonObject(raw, "encrypted secret payload");
+    if (o.version !== CRYPTO_FORMAT_VERSION ||
+        o.algorithm !== ALGORITHM ||
+        !hasStrings(o, ["nonce", "ciphertext"])) {
         throw new Error("Invalid encrypted secret payload");
     }
-    return parsed;
+    return o;
 }
 export function serializeWrappedKey(wrapped) {
     return JSON.stringify(wrapped);
 }
 export function parseWrappedKey(raw) {
-    const parsed = JSON.parse(raw);
-    if (parsed.version !== CRYPTO_FORMAT_VERSION || !parsed.wrappedKey || !parsed.salt) {
-        throw new Error("Invalid wrapped project key");
+    const o = parseJsonObject(raw, "wrapped key");
+    if (o.version !== CRYPTO_FORMAT_VERSION ||
+        o.kdf !== KDF ||
+        !hasStrings(o, ["salt", "nonce", "ciphertext"]) ||
+        !o.kdfParams ||
+        typeof o.kdfParams !== "object") {
+        throw new Error("Invalid wrapped key");
     }
-    return parsed;
+    assertKdfParams(o.kdfParams);
+    return o;
+}
+export function serializeSealedKey(sealed) {
+    return JSON.stringify(sealed);
+}
+export function parseSealedKey(raw) {
+    const o = parseJsonObject(raw, "sealed key");
+    if (o.version !== CRYPTO_FORMAT_VERSION ||
+        o.algorithm !== SEAL ||
+        !hasStrings(o, ["ephemeralPublicKey", "nonce", "ciphertext"])) {
+        throw new Error("Invalid sealed key");
+    }
+    return o;
+}
+/**
+ * Server tokens carry their own private key after the dot. Only the part
+ * before the dot is sent to the server.
+ */
+export function joinServerToken(authPart, privateKey) {
+    return `${authPart}.${bytesToBase64Url(privateKey)}`;
+}
+export function splitServerToken(token) {
+    const dot = token.indexOf(".");
+    if (dot < 0)
+        return { authPart: token, privateKey: null };
+    const privateKey = base64UrlToBytes(token.slice(dot + 1));
+    assertKey(privateKey);
+    return { authPart: token.slice(0, dot), privateKey };
 }
-//# sourceMappingURL=envelope.js.map

package/dist/identity.d.ts

@@ -9,4 +9,3 @@ export type MachineKeypair = {
 export declare function generateMachineIdentity(): MachineKeypair;
 export declare function signAccessRequest(privateKeyB64: string, message: string): string;
 export declare function verifyAccessRequest(publicKeyB64: string, message: string, signatureB64: string): boolean;
-//# sourceMappingURL=identity.d.ts.map

package/dist/identity.js

@@ -21,4 +21,3 @@ export function verifyAccessRequest(publicKeyB64, message, signatureB64) {
         return false;
     }
 }
-//# sourceMappingURL=identity.js.map

package/dist/index.d.ts

@@ -4,4 +4,3 @@ export * from "./kdf.js";
 export * from "./envelope.js";
 export * from "./backup.js";
 export * from "./identity.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -4,4 +4,3 @@ export * from "./kdf.js";
 export * from "./envelope.js";
 export * from "./backup.js";
 export * from "./identity.js";
-//# sourceMappingURL=index.js.map

package/dist/kdf.d.ts

@@ -1,9 +1,10 @@
 import { type KdfParams } from "./types.js";
+/** Throw when Argon2id parameters are outside KDF_BOUNDS. */
+export declare function assertKdfParams(params: KdfParams): void;
 /**
- * Derive a Key Encryption Key (KEK) from a vault password using Argon2id.
+ * Derive a Key Encryption Key (KEK) from a Vault password using Argon2id.
  */
 export declare function deriveKek(password: string, salt: Uint8Array, params?: KdfParams): Promise<Uint8Array>;
 export declare function generateSalt(length?: number): Uint8Array;
-export declare function generateProjectKey(): Uint8Array;
-export declare function saltToBase64(salt: Uint8Array): string;
-//# sourceMappingURL=kdf.d.ts.map
+/** A random 32-byte key for one context. */
+export declare function generateContextKey(): Uint8Array;

package/dist/kdf.js

@@ -1,10 +1,21 @@
 import { argon2id } from "hash-wasm";
-import { DEFAULT_KDF_PARAMS, } from "./types.js";
-import { bytesToBase64, getRandomBytes } from "./bytes.js";
+import { DEFAULT_KDF_PARAMS, KDF_BOUNDS } from "./types.js";
+import { getRandomBytes } from "./bytes.js";
+/** Throw when Argon2id parameters are outside KDF_BOUNDS. */
+export function assertKdfParams(params) {
+    const inRange = (v, r) => Number.isInteger(v) && v >= r.min && v <= r.max;
+    if (!inRange(params.memory, KDF_BOUNDS.memory) ||
+        !inRange(params.iterations, KDF_BOUNDS.iterations) ||
+        !inRange(params.parallelism, KDF_BOUNDS.parallelism) ||
+        params.hashLength !== KDF_BOUNDS.hashLength) {
+        throw new Error("Unsupported key derivation parameters");
+    }
+}
 /**
- * Derive a Key Encryption Key (KEK) from a vault password using Argon2id.
+ * Derive a Key Encryption Key (KEK) from a Vault password using Argon2id.
  */
 export async function deriveKek(password, salt, params = DEFAULT_KDF_PARAMS) {
+    assertKdfParams(params);
     const hash = await argon2id({
         password,
         salt,
@@ -19,10 +30,7 @@ export async function deriveKek(password, salt, params = DEFAULT_KDF_PARAMS) {
 export function generateSalt(length = 16) {
     return getRandomBytes(length);
 }
-export function generateProjectKey() {
+/** A random 32-byte key for one context. */
+export function generateContextKey() {
     return getRandomBytes(32);
 }
-export function saltToBase64(salt) {
-    return bytesToBase64(salt);
-}
-//# sourceMappingURL=kdf.js.map

package/dist/types.d.ts

@@ -1,7 +1,8 @@
-/** Versioned getmyenv crypto protocol  -  shared by browser and CLI. */
-export declare const CRYPTO_FORMAT_VERSION: 1;
+/** Versioned getmyenv crypto protocol, shared by browser and CLI. */
+export declare const CRYPTO_FORMAT_VERSION: 2;
 export declare const ALGORITHM: "AES-256-GCM";
 export declare const KDF: "argon2id";
+export declare const SEAL: "X25519-HKDF-SHA256-AES-256-GCM";
 /** Argon2id parameters (balanced for browser + CLI). */
 export declare const DEFAULT_KDF_PARAMS: {
     readonly memory: number;
@@ -9,20 +10,47 @@ export declare const DEFAULT_KDF_PARAMS: {
     readonly parallelism: 1;
     readonly hashLength: 32;
 };
+/** Accepted Argon2id bounds. Weaker or client-crashing parameters are refused. */
+export declare const KDF_BOUNDS: {
+    readonly memory: {
+        readonly min: 19456;
+        readonly max: 1048576;
+    };
+    readonly iterations: {
+        readonly min: 2;
+        readonly max: 10;
+    };
+    readonly parallelism: {
+        readonly min: 1;
+        readonly max: 4;
+    };
+    readonly hashLength: 32;
+};
 export type KdfParams = {
     memory: number;
     iterations: number;
     parallelism: number;
     hashLength: number;
 };
-/** Wrapped project encryption key (stored server-side / in backups). */
-export type WrappedProjectKey = {
+/**
+ * A user's X25519 private key wrapped with a key derived from the Vault password.
+ * Stored on the server, useless without the password.
+ */
+export type WrappedPrivateKey = {
     version: typeof CRYPTO_FORMAT_VERSION;
-    salt: string;
-    wrappedKey: string;
-    wrappedKeyNonce: string;
     kdf: typeof KDF;
     kdfParams: KdfParams;
+    salt: string;
+    nonce: string;
+    ciphertext: string;
+};
+/** A context key sealed to one recipient's X25519 public key. */
+export type SealedKey = {
+    version: typeof CRYPTO_FORMAT_VERSION;
+    algorithm: typeof SEAL;
+    ephemeralPublicKey: string;
+    nonce: string;
+    ciphertext: string;
 };
 /** Encrypted secret value payload. */
 export type EncryptedSecretPayload = {
@@ -31,11 +59,15 @@ export type EncryptedSecretPayload = {
     nonce: string;
     ciphertext: string;
 };
-export declare const BACKUP_FORMAT_VERSION: 2;
+export declare const BACKUP_FORMAT_VERSION: 3;
 export type BackupContext = {
+    /** Context id when the backup was made. Part of the sealed key's binding. */
+    id: number;
     slug: string;
     name: string;
     protection: "open" | "locked";
+    /** Context key sealed to the backup's public key. Null when the context had no key yet. */
+    sealedKey: SealedKey | null;
 };
 export type BackupValue = {
     key: string;
@@ -44,13 +76,17 @@ export type BackupValue = {
     expiresAt: string | null;
     payload: EncryptedSecretPayload;
 };
-/** Portable encrypted backup envelope. */
+/**
+ * Portable encrypted backup. Opens with the Vault password that was set when
+ * it was made: it carries the wrapped private key and the context keys sealed to it.
+ */
 export type EncryptedBackupEnvelope = {
     format: "getmyenv-backup";
     version: typeof BACKUP_FORMAT_VERSION;
     createdAt: string;
     projectName: string;
-    wrappedProjectKey: WrappedProjectKey;
+    publicKey: string;
+    wrappedPrivateKey: WrappedPrivateKey;
     contexts: BackupContext[];
     /** Every variable name in the project, including ones with no values. */
     keys: string[];
@@ -58,4 +94,3 @@ export type EncryptedBackupEnvelope = {
     tags?: Record<string, string>;
     values: BackupValue[];
 };
-//# sourceMappingURL=types.d.ts.map

package/dist/types.js

@@ -1,7 +1,8 @@
-/** Versioned getmyenv crypto protocol  -  shared by browser and CLI. */
-export const CRYPTO_FORMAT_VERSION = 1;
+/** Versioned getmyenv crypto protocol, shared by browser and CLI. */
+export const CRYPTO_FORMAT_VERSION = 2;
 export const ALGORITHM = "AES-256-GCM";
 export const KDF = "argon2id";
+export const SEAL = "X25519-HKDF-SHA256-AES-256-GCM";
 /** Argon2id parameters (balanced for browser + CLI). */
 export const DEFAULT_KDF_PARAMS = {
     memory: 64 * 1024, // KiB
@@ -9,5 +10,11 @@ export const DEFAULT_KDF_PARAMS = {
     parallelism: 1,
     hashLength: 32,
 };
-export const BACKUP_FORMAT_VERSION = 2;
-//# sourceMappingURL=types.js.map
+/** Accepted Argon2id bounds. Weaker or client-crashing parameters are refused. */
+export const KDF_BOUNDS = {
+    memory: { min: 19_456, max: 1_048_576 },
+    iterations: { min: 2, max: 10 },
+    parallelism: { min: 1, max: 4 },
+    hashLength: 32,
+};
+export const BACKUP_FORMAT_VERSION = 3;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@getmyenv/crypto",
-  "version": "0.2.0",
-  "description": "Envelope encryption for getmyenv (Argon2id + AES-256-GCM)",
+  "version": "0.4.0",
+  "description": "Encryption for getmyenv: Argon2id-wrapped X25519 keys, sealed per-context keys, AES-256-GCM values",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/dist/backup.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../src/backup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,WAAW,EACX,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAoB,MAAM,eAAe,CAAC;AAE/E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB,GAAG,uBAAuB,CAa1B;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,uBAAuB,GAAG,MAAM,CAEzE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,uBAAuB,CAShE;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAAC;IACT,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,KAAK,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CAAC;CACJ,CAAC,CAYD;AAED,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC"}

package/dist/backup.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"backup.js","sourceRoot":"","sources":["../src/backup.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE/E,MAAM,UAAU,oBAAoB,CAAC,KAOpC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACjE,OAAO;QACL,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,qBAAqB;QAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAiC;IAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4C,CAAC;IAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,qBAAqB,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAqB,EACrB,QAAiC;IAWjC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC9E,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,KAAK,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC"}

package/dist/bytes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bytes.d.ts","sourceRoot":"","sources":["../src/bytes.ts"],"names":[],"mappings":"AAAA,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CASvD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAUrD;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAOzD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAEnD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEpD;AAED,wBAAgB,WAAW,CAAC,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,CAS9D"}

package/dist/bytes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../src/bytes.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,OAAO,UAAU,CAAC,MAAM,EAAE,eAAe,KAAK,UAAU,EAAE,CAAC;QAC7D,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAG,KAAmB;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/envelope.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAC;AA+BpB;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC;IAAE,GAAG,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAgB1D;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,UAAU,CAAC,CASrB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,UAAU,EACf,SAAS,EAAE,MAAM,GAChB,sBAAsB,CAQxB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,sBAAsB,GAC9B,MAAM,CAaR;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAExE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,CAMhE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAEtE;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAM9D"}

package/dist/envelope.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC5C,OAAO,EACL,SAAS,EACT,qBAAqB,EACrB,kBAAkB,EAClB,GAAG,GAGJ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,aAAa,EACb,aAAa,EACb,cAAc,EACd,UAAU,EACV,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAEvE,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,SAAS,aAAa,CACpB,GAAe,EACf,SAAqB;IAErB,MAAM,KAAK,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CACpB,GAAe,EACf,KAAiB,EACjB,UAAsB;IAEtB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAqB;IAErB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAEtD,MAAM,OAAO,GAAsB;QACjC,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;QACzB,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC;QACrC,eAAe,EAAE,aAAa,CAAC,KAAK,CAAC;QACrC,GAAG,EAAE,GAAG;QACR,SAAS,EAAE,EAAE,GAAG,kBAAkB,EAAE;KACrC,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,OAA0B;IAE1B,IAAI,OAAO,CAAC,OAAO,KAAK,qBAAqB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,WAAmB,EACnB,OAA0B;IAE1B,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO;QACL,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;QACzB,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC;QACrC,eAAe,EAAE,aAAa,CAAC,KAAK,CAAC;QACrC,GAAG,EAAE,GAAG;QACR,SAAS,EAAE,EAAE,GAAG,kBAAkB,EAAE;KACrC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAe,EACf,SAAiB;IAEjB,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,OAAO;QACL,OAAO,EAAE,qBAAqB;QAC9B,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;QAC3B,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC;KACtC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAe,EACf,OAA+B;IAE/B,IAAI,OAAO,CAAC,OAAO,KAAK,qBAAqB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAC7B,GAAG,EACH,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAC5B,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAClC,CAAC;IACF,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA+B;IAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;IACzD,IAAI,MAAM,CAAC,OAAO,KAAK,qBAAqB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA0B;IAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IACpD,IAAI,MAAM,CAAC,OAAO,KAAK,qBAAqB,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/identity.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAgB,uBAAuB,IAAI,cAAc,CAOxD;AAED,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,GACd,MAAM,CAIR;AAED,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAUT"}

package/dist/identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAWtF,MAAM,UAAU,uBAAuB;IACrC,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO;QACL,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC;QACnC,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,aAAqB,EACrB,OAAe;IAEf,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1D,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,YAAoB,EACpB,OAAe,EACf,YAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CACnB,aAAa,CAAC,YAAY,CAAC,EAC3B,UAAU,CAAC,OAAO,CAAC,EACnB,aAAa,CAAC,YAAY,CAAC,CAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC"}

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC"}

package/dist/kdf.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kdf.d.ts","sourceRoot":"","sources":["../src/kdf.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAGpB;;GAEG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,GAAE,SAA8B,GACrC,OAAO,CAAC,UAAU,CAAC,CAWrB;AAED,wBAAgB,YAAY,CAAC,MAAM,SAAK,GAAG,UAAU,CAEpD;AAED,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAErD"}

package/dist/kdf.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kdf.js","sourceRoot":"","sources":["../src/kdf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EACL,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE3D;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,IAAgB,EAChB,SAAoB,kBAAkB;IAEtC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC;QAC1B,QAAQ;QACR,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,QAAQ;KACrB,CAAC,CAAC;IACH,OAAO,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAM,GAAG,EAAE;IACtC,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,EAAG,CAAU,CAAC;AAChD,eAAO,MAAM,SAAS,EAAG,aAAsB,CAAC;AAChD,eAAO,MAAM,GAAG,EAAG,UAAmB,CAAC;AAEvC,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;;;CAKrB,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,OAAO,qBAAqB,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,OAAO,GAAG,CAAC;IAChB,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF,sCAAsC;AACtC,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,OAAO,qBAAqB,CAAC;IACtC,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAG,CAAU,CAAC;AAEhD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,sBAAsB,CAAC;CACjC,CAAC;AAEF,0CAA0C;AAC1C,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,OAAO,qBAAqB,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,yEAAyE;IACzE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB,CAAC"}

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAU,CAAC;AAChD,MAAM,CAAC,MAAM,SAAS,GAAG,aAAsB,CAAC;AAChD,MAAM,CAAC,MAAM,GAAG,GAAG,UAAmB,CAAC;AAEvC,wDAAwD;AACxD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM;IACzB,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,UAAU,EAAE,EAAE;CACN,CAAC;AA2BX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAU,CAAC"}