@getmyenv/crypto 0.6.1 → 0.6.2

package/dist/backup.js

@@ -1,4 +1,4 @@
-import { BACKUP_FORMAT_VERSION, READABLE_BACKUP_VERSIONS } from "./types.js";
+import { BACKUP_FORMAT_VERSION } from "./types.js";
 import { decryptSecret, openSealedKey, parseSealedKey, parseWrappedKey, publicKeyFromPrivate, unwrapPrivateKey, wipe, } from "./envelope.js";
 import { looksLikeRecoveryCode, parseRecoveryCode, unwrapWithRecoveryCode } from "./recovery.js";
 export function createBackupEnvelope(input) {
@@ -25,7 +25,7 @@ export function parseBackup(raw) {
     if (parsed.format !== "getmyenv-backup") {
         throw new Error("Not a getmyenv backup file");
     }
-    if (!READABLE_BACKUP_VERSIONS.includes(parsed.version)) {
+    if (parsed.version !== BACKUP_FORMAT_VERSION) {
         throw new Error(`Unsupported backup version: ${String(parsed.version)}`);
     }
     if (typeof parsed.projectName !== "string" ||
@@ -74,9 +74,7 @@ async function openBackupPrivateKey(secret, envelope) {
     }
     catch (err) {
         if (code) {
-            throw new Error(envelope.version === 3
-                ? "This backup was made before recovery codes. Use the Vault password it was made with."
-                : "This backup has no recovery code. Use the Vault password it was made with.");
+            throw new Error("This backup has no recovery code. Use the Vault password it was made with.");
         }
         throw err;
     }

package/dist/types.d.ts

@@ -60,8 +60,6 @@ export type EncryptedSecretPayload = {
     ciphertext: string;
 };
 export declare const BACKUP_FORMAT_VERSION: 4;
-/** Versions parseBackup reads. v3 has no recovery wrap and opens with its Vault password only. */
-export declare const READABLE_BACKUP_VERSIONS: readonly [3, 4];
 export type BackupContext = {
     /** Context id when the backup was made. Part of the sealed key's binding. */
     id: number;
@@ -85,12 +83,12 @@ export type BackupValue = {
  */
 export type EncryptedBackupEnvelope = {
     format: "getmyenv-backup";
-    version: (typeof READABLE_BACKUP_VERSIONS)[number];
+    version: typeof BACKUP_FORMAT_VERSION;
     createdAt: string;
     projectName: string;
     publicKey: string;
     wrappedPrivateKey: WrappedPrivateKey;
-    /** The private key wrapped with the recovery code. Absent in v3, null for guests and vaults without a code. */
+    /** The private key wrapped with the recovery code. Null for guests and vaults without a code. */
     recoveryWrappedKey?: WrappedPrivateKey | null;
     contexts: BackupContext[];
     /** Every variable name in the project, including ones with no values. */

package/dist/types.js

@@ -18,5 +18,3 @@ export const KDF_BOUNDS = {
     hashLength: 32,
 };
 export const BACKUP_FORMAT_VERSION = 4;
-/** Versions parseBackup reads. v3 has no recovery wrap and opens with its Vault password only. */
-export const READABLE_BACKUP_VERSIONS = [3, 4];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmyenv/crypto",
-  "version": "0.6.1",
+  "version": "0.6.2",
   "description": "Encryption for getmyenv: Argon2id-wrapped X25519 keys, sealed per-context keys, AES-256-GCM values",
   "type": "module",
   "main": "./dist/index.js",