@hongxian/crypto 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 The Hongxian Project Contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,40 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# @hongxian/crypto
+
+红线密钥体系。**零网络、零 IO、无随机源之外的副作用**——所有函数都是纯计算。
+
+## 密钥链路
+
+```
+24 词恢复短语 (BIP39)
+      │  Argon2id（内存硬，抗 GPU 爆破）
+      ▼
+   主种子
+      ├── Ed25519 身份密钥      签名：证明「这张卡是我发的」
+      ├── X25519  协商密钥      封装：把对称密钥交给对方
+      └── HKDF 派生的层密钥     L1 / L2 / L3，各自独立
+```
+
+L3 是 sealed container，每个字段用 `HKDF(L3层密钥, "l3/<字段名>")` 单独派生一把子密钥。
+所以「只给微信号、不给手机号」在密码学上成立，不是靠自觉。
+
+## 用法
+
+```ts
+import { mnemonicToKeys, signCard, verifyCard, sealLayer, openLayer } from '@hongxian/crypto';
+
+const keys = await mnemonicToKeys(mnemonic);
+const sealed = sealLayer(keys.layers.L2, JSON.stringify(payload));
+```
+
+## 命令
+
+- **密钥即身份**：没有邮箱、没有手机号、没有密码。恢复短语是唯一备份，丢了就没了，没有找回通道。
+- 恢复短语只在本机生成与使用，永不外发。
+- 封装用 AES-256-GCM；签名用 Ed25519；协商用 X25519。底层是 audited 的 noble / hash-wasm，不含自研密码学。
+
+## 许可
+
+Apache-2.0。
+
+- 源码：https://github.com/hongxian-dev/hongxian/tree/main/packages/crypto
+- 理论说明：https://github.com/hongxian-dev/hongxian/blob/main/docs/protocol-v1-spec.md

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @hongxian/crypto —— 红线密钥体系
+ *
+ * 恢复短语（BIP39 中文 24 词）→ Argon2id → 三种子密钥；
+ * Ed25519 签名 / X25519 sealed box / AES-256-GCM；私钥永不落明文。
+ */
+export * from './mnemonic.js';
+export * from './kdf.js';
+export * from './primitives.js';
+export * from './keystore.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+/**
+ * @hongxian/crypto —— 红线密钥体系
+ *
+ * 恢复短语（BIP39 中文 24 词）→ Argon2id → 三种子密钥；
+ * Ed25519 签名 / X25519 sealed box / AES-256-GCM；私钥永不落明文。
+ */
+export * from './mnemonic.js';
+export * from './kdf.js';
+export * from './primitives.js';
+export * from './keystore.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}

package/dist/kdf.d.ts

@@ -0,0 +1,23 @@
+/**
+ * 红线密钥体系 · 第二层：Argon2id 主密钥派生（技术详设 §4 / 执行设计 E5）
+ *
+ * 恢复短语 → Argon2id → MK。每个密钥文件独立盐（备份/恢复单文件可行）。
+ * MK 仅存内存，进程退出即清零（zeroize）。
+ */
+/** Argon2id 参数（t=3, m=64MB, p=4）——OWASP 2023 推荐档，哈希前向兼容 */
+export interface Argon2Params {
+    /** 时间成本（迭代次数） */
+    iterations: number;
+    /** 内存成本（KiB） */
+    memorySize: number;
+    /** 并行度 */
+    parallelism: number;
+    /** 输出长度（字节） */
+    hashLength: number;
+}
+export declare const ARGON2_PARAMS: Argon2Params;
+/** 从密码（BIP39 seed）与盐派生 32 字节密钥 */
+export declare function deriveKey(password: Uint8Array, salt: Uint8Array, params?: Argon2Params): Promise<Uint8Array>;
+/** 显式清零（MK 生命周期管理：lock / 进程退出） */
+export declare function zeroize(...bufs: (Uint8Array | undefined)[]): void;
+//# sourceMappingURL=kdf.d.ts.map

package/dist/kdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kdf.d.ts","sourceRoot":"","sources":["../src/kdf.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,iBAAiB;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,aAAa,EAAE,YAK3B,CAAC;AAEF,kCAAkC;AAClC,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,UAAU,EAChB,MAAM,GAAE,YAA4B,GACnC,OAAO,CAAC,UAAU,CAAC,CAWrB;AAED,kCAAkC;AAClC,wBAAgB,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,UAAU,GAAG,SAAS,CAAC,EAAE,GAAG,IAAI,CAIjE"}

package/dist/kdf.js

@@ -0,0 +1,34 @@
+/**
+ * 红线密钥体系 · 第二层：Argon2id 主密钥派生（技术详设 §4 / 执行设计 E5）
+ *
+ * 恢复短语 → Argon2id → MK。每个密钥文件独立盐（备份/恢复单文件可行）。
+ * MK 仅存内存，进程退出即清零（zeroize）。
+ */
+import { argon2id } from 'hash-wasm';
+export const ARGON2_PARAMS = {
+    iterations: 3,
+    memorySize: 65536, // KiB = 64 MB
+    parallelism: 4,
+    hashLength: 32,
+};
+/** 从密码（BIP39 seed）与盐派生 32 字节密钥 */
+export async function deriveKey(password, salt, params = ARGON2_PARAMS) {
+    const key = await argon2id({
+        password,
+        salt,
+        parallelism: params.parallelism,
+        iterations: params.iterations,
+        memorySize: params.memorySize,
+        hashLength: params.hashLength,
+        outputType: 'binary',
+    });
+    return new Uint8Array(key);
+}
+/** 显式清零（MK 生命周期管理：lock / 进程退出） */
+export function zeroize(...bufs) {
+    for (const buf of bufs) {
+        if (buf)
+            buf.fill(0);
+    }
+}
+//# sourceMappingURL=kdf.js.map

package/dist/kdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kdf.js","sourceRoot":"","sources":["../src/kdf.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAcrC,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,UAAU,EAAE,CAAC;IACb,UAAU,EAAE,KAAK,EAAE,cAAc;IACjC,WAAW,EAAE,CAAC;IACd,UAAU,EAAE,EAAE;CACf,CAAC;AAEF,kCAAkC;AAClC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAoB,EACpB,IAAgB,EAChB,SAAuB,aAAa;IAEpC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC;QACzB,QAAQ;QACR,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,QAAQ;KACrB,CAAC,CAAC;IACH,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,OAAO,CAAC,GAAG,IAAgC;IACzD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/keystore.d.ts

@@ -0,0 +1,81 @@
+/**
+ * 红线密钥体系 · 第三层：加密密钥文件与 KeyMaterial 管理
+ *
+ * 布局（技术详设 §4/§5）：
+ *   ~/.hongxian/keys/id.enc   身份密钥对（Ed25519）
+ *   ~/.hongxian/keys/kx.enc   协商密钥对（X25519）
+ *   ~/.hongxian/keys/lk.enc   层密钥 key_L1/L2/L3
+ * 每文件独立盐 + Argon2id → AES-256-GCM。私钥永不落明文；
+ * 解锁会话内 MK 仅存内存，lock/退出即 zeroize。
+ */
+import { type Argon2Params } from './kdf.js';
+/** 加密密钥文件格式（v1） */
+export declare const EncryptedKeyFile: {
+    readonly version: 1;
+    readonly kdf: "argon2id";
+    readonly aead: "aes-256-gcm";
+};
+export interface SealedKeyFile {
+    v: 1;
+    kdf: 'argon2id';
+    params: {
+        t: number;
+        m: number;
+        p: number;
+    };
+    salt: string;
+    nonce: string;
+    ct: string;
+}
+/** 内存中的完整密钥材料（进程级，退出即消失） */
+export interface KeyMaterial {
+    identityPrivate: Uint8Array;
+    identityPublic: Uint8Array;
+    kxPrivate: Uint8Array;
+    kxPublic: Uint8Array;
+    layerKeys: {
+        L1: Uint8Array;
+        L2: Uint8Array;
+        L3: Uint8Array;
+    };
+}
+export declare function generateKeyMaterial(): KeyMaterial;
+/**
+ * 协议固定盐（Argon2id 派生 MK 用）——公开常量。
+ * seed 本身是 256-bit BIP39 输出（高熵），固定盐无安全损失
+ * （盐的使命是防彩虹表与并行化，对单用户单口令场景不适用）。
+ */
+export declare const PROTOCOL_SALT: NodeJS.NonSharedUint8Array;
+/**
+ * 从恢复短语 seed 确定性派生 KeyMaterial（"恢复短语即身份"的工程实现）。
+ *
+ * 同短语 → 同 MK → 同 identity/kx/layer 密钥 → 同 owner_key_id：
+ * 换设备输入旧短语即重建同一身份，旧卡片签名可验、旧 grant 信封可解、
+ * 姻缘线关系不断（D15③ 的成立前提）。MK 仅存内存。
+ */
+export declare function deriveKeyMaterial(seed: Uint8Array, params?: Argon2Params): Promise<KeyMaterial>;
+/** owner_key_id（32 字节指纹） */
+export declare function keyMaterialId(km: KeyMaterial): Uint8Array;
+/** 锁定：清零全部敏感字节 */
+export declare function lockKeyMaterial(km: KeyMaterial): void;
+/**
+ * 用恢复短语 seed 加密一份明文 → SealedKeyFile。
+ * 盐独立随机（每文件不同盐：备份/恢复单文件可行，且盐无需保密）。
+ * 参数随文件记录（哈希前向兼容：未来调参不影响旧文件解密）。
+ */
+export declare function sealKeyFile(plaintext: Uint8Array, password: Uint8Array, params?: Argon2Params): Promise<SealedKeyFile>;
+/** 解密 SealedKeyFile；密码错误/文件被篡改返回 null。参数取文件自带记录 */
+export declare function openKeyFile(file: SealedKeyFile, password: Uint8Array): Promise<Uint8Array | null>;
+/** 从恢复短语 seed 创建三份加密文件 */
+export declare function createKeyFiles(password: Uint8Array, km: KeyMaterial, params?: Argon2Params): Promise<{
+    id: SealedKeyFile;
+    kx: SealedKeyFile;
+    lk: SealedKeyFile;
+}>;
+/** 从三份加密文件 + 恢复短语 seed 恢复 KeyMaterial（换设备场景，D15③） */
+export declare function restoreKeyFiles(files: {
+    id: SealedKeyFile;
+    kx: SealedKeyFile;
+    lk: SealedKeyFile;
+}, password: Uint8Array): Promise<KeyMaterial | null>;
+//# sourceMappingURL=keystore.d.ts.map

package/dist/keystore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore.d.ts","sourceRoot":"","sources":["../src/keystore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAiB,KAAK,YAAY,EAAsB,MAAM,UAAU,CAAC;AAchF,mBAAmB;AACnB,eAAO,MAAM,gBAAgB;;;;CAInB,CAAC;AAEX,MAAM,WAAW,aAAa;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,GAAG,EAAE,UAAU,CAAC;IAChB,MAAM,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,4BAA4B;AAC5B,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,UAAU,CAAC;IAC5B,cAAc,EAAE,UAAU,CAAC;IAC3B,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAA;KAAE,CAAC;CAC/D;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAUjD;AAED;;;;GAIG;AACH,eAAO,MAAM,aAAa,4BAA8D,CAAC;AAWzF;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAgBrG;AAED,4BAA4B;AAC5B,wBAAgB,aAAa,CAAC,EAAE,EAAE,WAAW,GAAG,UAAU,CAEzD;AAED,kBAAkB;AAClB,wBAAgB,eAAe,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI,CAErD;AA0BD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,UAAU,EACrB,QAAQ,EAAE,UAAU,EACpB,MAAM,GAAE,YAA4B,GACnC,OAAO,CAAC,aAAa,CAAC,CAgBxB;AAED,mDAAmD;AACnD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,UAAU,GACnB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAc5B;AAID,0BAA0B;AAC1B,wBAAsB,cAAc,CAClC,QAAQ,EAAE,UAAU,EACpB,EAAE,EAAE,WAAW,EACf,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,EAAE,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,aAAa,CAAA;CAAE,CAAC,CAOtE;AAED,qDAAqD;AACrD,wBAAsB,eAAe,CACnC,KAAK,EAAE;IAAE,EAAE,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,aAAa,CAAA;CAAE,EAClE,QAAQ,EAAE,UAAU,GACnB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAoB7B"}

package/dist/keystore.js

@@ -0,0 +1,174 @@
+/**
+ * 红线密钥体系 · 第三层：加密密钥文件与 KeyMaterial 管理
+ *
+ * 布局（技术详设 §4/§5）：
+ *   ~/.hongxian/keys/id.enc   身份密钥对（Ed25519）
+ *   ~/.hongxian/keys/kx.enc   协商密钥对（X25519）
+ *   ~/.hongxian/keys/lk.enc   层密钥 key_L1/L2/L3
+ * 每文件独立盐 + Argon2id → AES-256-GCM。私钥永不落明文；
+ * 解锁会话内 MK 仅存内存，lock/退出即 zeroize。
+ */
+import { ARGON2_PARAMS, deriveKey, zeroize } from './kdf.js';
+import { hkdf } from '@noble/hashes/hkdf';
+import { sha256 } from '@noble/hashes/sha256';
+import { aesGcmDecrypt, aesGcmEncrypt, generateIdentityKeyPair, generateKexKeyPair, getKexPublicKey, identityPublicKeyFromSeed, keyIdFromPublicKey, randomKey, } from './primitives.js';
+/** 加密密钥文件格式（v1） */
+export const EncryptedKeyFile = {
+    version: 1,
+    kdf: 'argon2id',
+    aead: 'aes-256-gcm',
+};
+export function generateKeyMaterial() {
+    const id = generateIdentityKeyPair();
+    const kx = generateKexKeyPair();
+    return {
+        identityPrivate: id.privateKey,
+        identityPublic: id.publicKey,
+        kxPrivate: kx.privateKey,
+        kxPublic: kx.publicKey,
+        layerKeys: { L1: randomKey(32), L2: randomKey(32), L3: randomKey(32) },
+    };
+}
+/**
+ * 协议固定盐（Argon2id 派生 MK 用）——公开常量。
+ * seed 本身是 256-bit BIP39 输出（高熵），固定盐无安全损失
+ * （盐的使命是防彩虹表与并行化，对单用户单口令场景不适用）。
+ */
+export const PROTOCOL_SALT = new TextEncoder().encode('hongxian/protocol-v0/mk-salt/v1');
+/** HKDF 域分离 info（各子密钥独立派生路径） */
+const INFO = {
+    identity: new TextEncoder().encode('hongxian/protocol-v0/identity-seed/v1'),
+    kx: new TextEncoder().encode('hongxian/protocol-v0/keyexchange-seed/v1'),
+    L1: new TextEncoder().encode('hongxian/protocol-v0/layer-key/L1/v1'),
+    L2: new TextEncoder().encode('hongxian/protocol-v0/layer-key/L2/v1'),
+    L3: new TextEncoder().encode('hongxian/protocol-v0/layer-key/L3/v1'),
+};
+/**
+ * 从恢复短语 seed 确定性派生 KeyMaterial（"恢复短语即身份"的工程实现）。
+ *
+ * 同短语 → 同 MK → 同 identity/kx/layer 密钥 → 同 owner_key_id：
+ * 换设备输入旧短语即重建同一身份，旧卡片签名可验、旧 grant 信封可解、
+ * 姻缘线关系不断（D15③ 的成立前提）。MK 仅存内存。
+ */
+export async function deriveKeyMaterial(seed, params) {
+    const mk = await deriveKey(seed, PROTOCOL_SALT, params ?? ARGON2_PARAMS);
+    try {
+        const sub = (info) => hkdf(sha256, mk, undefined, info, 32);
+        const identityPrivate = sub(INFO.identity);
+        const kxPrivate = sub(INFO.kx);
+        return {
+            identityPrivate,
+            identityPublic: identityPublicKeyFromSeed(identityPrivate),
+            kxPrivate,
+            kxPublic: getKexPublicKey(kxPrivate),
+            layerKeys: { L1: sub(INFO.L1), L2: sub(INFO.L2), L3: sub(INFO.L3) },
+        };
+    }
+    finally {
+        zeroize(mk);
+    }
+}
+/** owner_key_id（32 字节指纹） */
+export function keyMaterialId(km) {
+    return keyIdFromPublicKey(km.identityPublic);
+}
+/** 锁定：清零全部敏感字节 */
+export function lockKeyMaterial(km) {
+    zeroize(km.identityPrivate, km.kxPrivate, km.layerKeys.L1, km.layerKeys.L2, km.layerKeys.L3);
+}
+// ---------- 文件序列化 ----------
+function toB64(bytes) {
+    return Buffer.from(bytes).toString('base64');
+}
+function fromB64(s) {
+    return new Uint8Array(Buffer.from(s, 'base64'));
+}
+/** 层密钥明文结构（lk.enc 的内容） */
+function serializeLayerKeys(km) {
+    const json = JSON.stringify({
+        L1: toB64(km.layerKeys.L1),
+        L2: toB64(km.layerKeys.L2),
+        L3: toB64(km.layerKeys.L3),
+    });
+    return new TextEncoder().encode(json);
+}
+function parseLayerKeys(bytes) {
+    const obj = JSON.parse(new TextDecoder().decode(bytes));
+    return { L1: fromB64(obj.L1), L2: fromB64(obj.L2), L3: fromB64(obj.L3) };
+}
+/**
+ * 用恢复短语 seed 加密一份明文 → SealedKeyFile。
+ * 盐独立随机（每文件不同盐：备份/恢复单文件可行，且盐无需保密）。
+ * 参数随文件记录（哈希前向兼容：未来调参不影响旧文件解密）。
+ */
+export async function sealKeyFile(plaintext, password, params = ARGON2_PARAMS) {
+    const salt = randomKey(16);
+    const fileKey = await deriveKey(password, salt, params);
+    try {
+        const { nonce, ct } = aesGcmEncrypt(fileKey, plaintext);
+        return {
+            v: EncryptedKeyFile.version,
+            kdf: EncryptedKeyFile.kdf,
+            params: { t: params.iterations, m: params.memorySize, p: params.parallelism },
+            salt: toB64(salt),
+            nonce: toB64(nonce),
+            ct: toB64(ct),
+        };
+    }
+    finally {
+        zeroize(fileKey);
+    }
+}
+/** 解密 SealedKeyFile；密码错误/文件被篡改返回 null。参数取文件自带记录 */
+export async function openKeyFile(file, password) {
+    if (file.v !== EncryptedKeyFile.version)
+        return null;
+    const salt = fromB64(file.salt);
+    const fileKey = await deriveKey(password, salt, {
+        iterations: file.params.t,
+        memorySize: file.params.m,
+        parallelism: file.params.p,
+        hashLength: 32,
+    });
+    try {
+        return aesGcmDecrypt(fileKey, fromB64(file.nonce), fromB64(file.ct));
+    }
+    finally {
+        zeroize(fileKey);
+    }
+}
+// ---------- 三份密钥文件的高层存取 ----------
+/** 从恢复短语 seed 创建三份加密文件 */
+export async function createKeyFiles(password, km, params) {
+    const [id, kx, lk] = await Promise.all([
+        sealKeyFile(km.identityPrivate, password, params),
+        sealKeyFile(km.kxPrivate, password, params),
+        sealKeyFile(serializeLayerKeys(km), password, params),
+    ]);
+    return { id, kx, lk };
+}
+/** 从三份加密文件 + 恢复短语 seed 恢复 KeyMaterial（换设备场景，D15③） */
+export async function restoreKeyFiles(files, password) {
+    const [idBytes, kxBytes, lkBytes] = await Promise.all([
+        openKeyFile(files.id, password),
+        openKeyFile(files.kx, password),
+        openKeyFile(files.lk, password),
+    ]);
+    if (!idBytes || !kxBytes || !lkBytes)
+        return null;
+    try {
+        const layers = parseLayerKeys(lkBytes);
+        const identityPrivate = idBytes;
+        return {
+            identityPrivate,
+            identityPublic: identityPublicKeyFromSeed(identityPrivate),
+            kxPrivate: kxBytes,
+            kxPublic: getKexPublicKey(kxBytes),
+            layerKeys: layers,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=keystore.js.map

package/dist/keystore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore.js","sourceRoot":"","sources":["../src/keystore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAqB,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAChF,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EACL,aAAa,EACb,aAAa,EACb,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EACzB,kBAAkB,EAClB,SAAS,GACV,MAAM,iBAAiB,CAAC;AAEzB,mBAAmB;AACnB,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE,CAAC;IACV,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,aAAa;CACX,CAAC;AAoBX,MAAM,UAAU,mBAAmB;IACjC,MAAM,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACrC,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAChC,OAAO;QACL,eAAe,EAAE,EAAE,CAAC,UAAU;QAC9B,cAAc,EAAE,EAAE,CAAC,SAAS;QAC5B,SAAS,EAAE,EAAE,CAAC,UAAU;QACxB,QAAQ,EAAE,EAAE,CAAC,SAAS;QACtB,SAAS,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE;KACvE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;AAEzF,gCAAgC;AAChC,MAAM,IAAI,GAAG;IACX,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC;IAC3E,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,0CAA0C,CAAC;IACxE,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC;IACpE,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC;IACpE,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC;CACrE,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAgB,EAAE,MAAqB;IAC7E,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,IAAI,aAAa,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO;YACL,eAAe;YACf,cAAc,EAAE,yBAAyB,CAAC,eAAe,CAAC;YAC1D,SAAS;YACT,QAAQ,EAAE,eAAe,CAAC,SAAS,CAAC;YACpC,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;SACpE,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,aAAa,CAAC,EAAe;IAC3C,OAAO,kBAAkB,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;AAC/C,CAAC;AAED,kBAAkB;AAClB,MAAM,UAAU,eAAe,CAAC,EAAe;IAC7C,OAAO,CAAC,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,8BAA8B;AAE9B,SAAS,KAAK,CAAC,KAAiB;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AACD,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,0BAA0B;AAC1B,SAAS,kBAAkB,CAAC,EAAe;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;KAC3B,CAAC,CAAC;IACH,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAA2B,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAG,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAG,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAG,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAqB,EACrB,QAAoB,EACpB,SAAuB,aAAa;IAEpC,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxD,OAAO;YACL,CAAC,EAAE,gBAAgB,CAAC,OAAO;YAC3B,GAAG,EAAE,gBAAgB,CAAC,GAAG;YACzB,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE;YAC7E,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;YACjB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;YACnB,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAmB,EACnB,QAAoB;IAEpB,IAAI,IAAI,CAAC,CAAC,KAAK,gBAAgB,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE;QAC9C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,EAAE,EAAE;KACf,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,oCAAoC;AAEpC,0BAA0B;AAC1B,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAoB,EACpB,EAAe,EACf,MAAqB;IAErB,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrC,WAAW,CAAC,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,MAAM,CAAC;QACjD,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC3C,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC;KACtD,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;AACxB,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkE,EAClE,QAAoB;IAEpB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC/B,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC/B,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,OAAO,CAAC;QAChC,OAAO;YACL,eAAe;YACf,cAAc,EAAE,yBAAyB,CAAC,eAAe,CAAC;YAC1D,SAAS,EAAE,OAAO;YAClB,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;YAClC,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/mnemonic.d.ts

@@ -0,0 +1,17 @@
+/**
+ * 红线密钥体系 · 第一层：BIP39 恢复短语（技术详设 §4）
+ *
+ * 恢复短语 = 24 个中文简体词 = 身份的唯一备份通道（D15③）。
+ * 丢失不可恢复（设计如此）；密钥文件只是短语的加密容器——容器可复制，短语才是身份。
+ */
+/** 24 词 = 256 bit 熵（协议定稿口径） */
+export declare const MNEMONIC_WORDS = 24;
+/** 生成 24 词中文简体恢复短语 */
+export declare function generateMnemonicZh(): string;
+/** 校验中文恢复短语（词表 + 校验和） */
+export declare function validateMnemonicZh(phrase: string): boolean;
+/** 归一化用户输入（全角空格/多余空白 → 单空格分隔） */
+export declare function normalizeMnemonic(phrase: string): string;
+/** 短语 → 64 字节 BIP39 seed（Argon2id 的密码输入） */
+export declare function mnemonicToSeed(phrase: string): Uint8Array;
+//# sourceMappingURL=mnemonic.d.ts.map

package/dist/mnemonic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mnemonic.d.ts","sourceRoot":"","sources":["../src/mnemonic.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,+BAA+B;AAC/B,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,sBAAsB;AACtB,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,yBAAyB;AACzB,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAQ1D;AAED,iCAAiC;AACjC,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMxD;AAED,4CAA4C;AAC5C,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAKzD"}

package/dist/mnemonic.js

@@ -0,0 +1,42 @@
+/**
+ * 红线密钥体系 · 第一层：BIP39 恢复短语（技术详设 §4）
+ *
+ * 恢复短语 = 24 个中文简体词 = 身份的唯一备份通道（D15③）。
+ * 丢失不可恢复（设计如此）；密钥文件只是短语的加密容器——容器可复制，短语才是身份。
+ */
+import { generateMnemonic as scureGenerate, mnemonicToSeedSync, validateMnemonic as scureValidate } from '@scure/bip39';
+import { wordlist } from '@scure/bip39/wordlists/simplified-chinese';
+/** 24 词 = 256 bit 熵（协议定稿口径） */
+export const MNEMONIC_WORDS = 24;
+/** 生成 24 词中文简体恢复短语 */
+export function generateMnemonicZh() {
+    return scureGenerate(wordlist, 256);
+}
+/** 校验中文恢复短语（词表 + 校验和） */
+export function validateMnemonicZh(phrase) {
+    const words = phrase.trim().split(/\s+/).filter(Boolean);
+    if (words.length !== MNEMONIC_WORDS)
+        return false;
+    try {
+        return scureValidate(phrase.trim(), wordlist);
+    }
+    catch {
+        return false;
+    }
+}
+/** 归一化用户输入（全角空格/多余空白 → 单空格分隔） */
+export function normalizeMnemonic(phrase) {
+    return phrase
+        .replace(/\u3000/g, ' ')
+        .trim()
+        .split(/\s+/)
+        .join(' ');
+}
+/** 短语 → 64 字节 BIP39 seed（Argon2id 的密码输入） */
+export function mnemonicToSeed(phrase) {
+    if (!validateMnemonicZh(phrase)) {
+        throw new Error('恢复短语无效：必须是 24 个中文词且校验和正确');
+    }
+    return mnemonicToSeedSync(normalizeMnemonic(phrase));
+}
+//# sourceMappingURL=mnemonic.js.map

package/dist/mnemonic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mnemonic.js","sourceRoot":"","sources":["../src/mnemonic.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,IAAI,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,IAAI,aAAa,EAAE,MAAM,cAAc,CAAC;AACxH,OAAO,EAAE,QAAQ,EAAE,MAAM,2CAA2C,CAAC;AAErE,+BAA+B;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,sBAAsB;AACtB,MAAM,UAAU,kBAAkB;IAChC,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,MAAM;SACV,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC;SACZ,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,kBAAkB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/primitives.d.ts

@@ -0,0 +1,47 @@
+/**
+ * 红线密钥体系 · 原语：Ed25519 身份签名 / X25519 密钥交换 / AES-256-GCM
+ *
+ * 纯 JS（@noble），无原生依赖——跨平台安装零摩擦（技术详设 §2 选型第一原则）。
+ */
+export type IdentityKeyPair = {
+    /** 32 字节私钥种子（加密存储，永不出设备） */
+    privateKey: Uint8Array;
+    publicKey: Uint8Array;
+};
+export declare function generateIdentityKeyPair(): IdentityKeyPair;
+export declare function identityPublicKeyFromSeed(seed: Uint8Array): Uint8Array;
+/** 签名（对 canonical bytes 签名，调用方负责序列化规范） */
+export declare function signDetached(message: Uint8Array, privateKey: Uint8Array): Uint8Array;
+export declare function verifyDetached(signature: Uint8Array, message: Uint8Array, publicKey: Uint8Array): boolean;
+/** owner_key_id = SHA-256(公钥) 的 32 字节指纹（Schema §2，非身份信息） */
+export declare function keyIdFromPublicKey(publicKey: Uint8Array): Uint8Array;
+export type KexKeyPair = {
+    privateKey: Uint8Array;
+    publicKey: Uint8Array;
+};
+export declare function generateKexKeyPair(): KexKeyPair;
+export declare function getKexPublicKey(privateKey: Uint8Array): Uint8Array;
+/** Sealed box：临时密钥对 + ECDH + AES-GCM。输出 = ephPub(32) || nonce(12) || ct||tag */
+export declare function sealBox(plaintext: Uint8Array, recipientPublicKey: Uint8Array): Uint8Array;
+/** 解开 sealed box；失败（伪造/篡改/非本方）返回 null */
+export declare function openBox(sealed: Uint8Array, recipientPrivateKey: Uint8Array): Uint8Array | null;
+/** 加密。ct = ciphertext || tag(16B)；nonce 12 字节随机 */
+export declare function aesGcmEncrypt(key: Uint8Array, plaintext: Uint8Array): {
+    nonce: Uint8Array;
+    ct: Uint8Array;
+};
+/** 解密；认证失败返回 null（不降级、不部分解密——Schema §7.4） */
+export declare function aesGcmDecrypt(key: Uint8Array, nonce: Uint8Array, ct: Uint8Array): Uint8Array | null;
+/** 随机 n 字节 */
+export declare function randomKey(n: number): Uint8Array;
+/**
+ * 由层密钥派生用途子密钥：HKDF-SHA256(master, info = prefix + label)。
+ *
+ * 见面层用它把单一的 L3 层密钥摊成「每字段一把」——
+ * 交付 contact_wechat 的子密钥不等于交付 contact_phone 的子密钥，
+ * D13「给微信号但不给手机号」由此在密码学层面成立，而不只是 UI 上的开关。
+ *
+ * 单向性：子密钥推不出主密钥，也无法推到别的字段（不同 info）。
+ */
+export declare function deriveSubkey(masterKey: Uint8Array, label: string): Uint8Array;
+//# sourceMappingURL=primitives.d.ts.map

package/dist/primitives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.d.ts","sourceRoot":"","sources":["../src/primitives.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,MAAM,MAAM,eAAe,GAAG;IAC5B,4BAA4B;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;CACvB,CAAC;AAEF,wBAAgB,uBAAuB,IAAI,eAAe,CAIzD;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAEtE;AAED,0CAA0C;AAC1C,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,UAAU,CAEpF;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,GACpB,OAAO,CAMT;AAED,4DAA4D;AAC5D,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAEpE;AAID,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;CACvB,CAAC;AAEF,wBAAgB,kBAAkB,IAAI,UAAU,CAI/C;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAElE;AAWD,gFAAgF;AAChF,wBAAgB,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,GAAG,UAAU,CAUzF;AAED,yCAAyC;AACzC,wBAAgB,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAW9F;AAID,mDAAmD;AACnD,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,UAAU,CAAA;CAAE,CAK3G;AAED,6CAA6C;AAC7C,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAQnG;AAED,cAAc;AACd,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAE/C;AAOD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,CAI7E"}

package/dist/primitives.js

@@ -0,0 +1,120 @@
+/**
+ * 红线密钥体系 · 原语：Ed25519 身份签名 / X25519 密钥交换 / AES-256-GCM
+ *
+ * 纯 JS（@noble），无原生依赖——跨平台安装零摩擦（技术详设 §2 选型第一原则）。
+ */
+import { gcm } from '@noble/ciphers/aes';
+import { ed25519, x25519 } from '@noble/curves/ed25519';
+import { hkdf } from '@noble/hashes/hkdf';
+import { sha256 } from '@noble/hashes/sha256';
+import { randomBytes } from 'node:crypto';
+export function generateIdentityKeyPair() {
+    const privateKey = ed25519.utils.randomPrivateKey();
+    const publicKey = ed25519.getPublicKey(privateKey);
+    return { privateKey, publicKey };
+}
+export function identityPublicKeyFromSeed(seed) {
+    return ed25519.getPublicKey(seed);
+}
+/** 签名（对 canonical bytes 签名，调用方负责序列化规范） */
+export function signDetached(message, privateKey) {
+    return ed25519.sign(message, privateKey);
+}
+export function verifyDetached(signature, message, publicKey) {
+    try {
+        return ed25519.verify(signature, message, publicKey);
+    }
+    catch {
+        return false;
+    }
+}
+/** owner_key_id = SHA-256(公钥) 的 32 字节指纹（Schema §2，非身份信息） */
+export function keyIdFromPublicKey(publicKey) {
+    return sha256(publicKey);
+}
+export function generateKexKeyPair() {
+    const privateKey = x25519.utils.randomPrivateKey();
+    const publicKey = x25519.getPublicKey(privateKey);
+    return { privateKey, publicKey };
+}
+export function getKexPublicKey(privateKey) {
+    return x25519.getPublicKey(privateKey);
+}
+/** 协议固定 HKDF info（域分离） */
+const HKDF_INFO = new TextEncoder().encode('hongxian/protocol-v0/sealed-box/v1');
+/** ECDH(ephPriv, recipientPub) → HKDF-SHA256 → AES-256-GCM 密钥 */
+function deriveSharedKey(ephemeralPrivate, recipientPublic) {
+    const shared = x25519.getSharedSecret(ephemeralPrivate, recipientPublic);
+    return hkdf(sha256, shared, undefined, HKDF_INFO, 32);
+}
+/** Sealed box：临时密钥对 + ECDH + AES-GCM。输出 = ephPub(32) || nonce(12) || ct||tag */
+export function sealBox(plaintext, recipientPublicKey) {
+    const eph = generateKexKeyPair();
+    const key = deriveSharedKey(eph.privateKey, recipientPublicKey);
+    const nonce = randomBytes(12);
+    const sealed = gcm(key, nonce).encrypt(plaintext);
+    const out = new Uint8Array(32 + 12 + sealed.length);
+    out.set(eph.publicKey, 0);
+    out.set(nonce, 32);
+    out.set(sealed, 44);
+    return out;
+}
+/** 解开 sealed box；失败（伪造/篡改/非本方）返回 null */
+export function openBox(sealed, recipientPrivateKey) {
+    if (sealed.length < 44 + 16)
+        return null;
+    const ephPub = sealed.slice(0, 32);
+    const nonce = sealed.slice(32, 44);
+    const ct = sealed.slice(44);
+    try {
+        const key = deriveSharedKey(recipientPrivateKey, ephPub);
+        return gcm(key, nonce).decrypt(ct);
+    }
+    catch {
+        return null;
+    }
+}
+// ---------- AES-256-GCM（层密钥直接封装） ----------
+/** 加密。ct = ciphertext || tag(16B)；nonce 12 字节随机 */
+export function aesGcmEncrypt(key, plaintext) {
+    if (key.length !== 32)
+        throw new Error('AES-256 密钥必须是 32 字节');
+    const nonce = randomBytes(12);
+    const aes = gcm(key, nonce);
+    return { nonce, ct: aes.encrypt(plaintext) };
+}
+/** 解密；认证失败返回 null（不降级、不部分解密——Schema §7.4） */
+export function aesGcmDecrypt(key, nonce, ct) {
+    if (key.length !== 32)
+        throw new Error('AES-256 密钥必须是 32 字节');
+    try {
+        const aes = gcm(key, nonce);
+        return aes.decrypt(ct);
+    }
+    catch {
+        return null;
+    }
+}
+/** 随机 n 字节 */
+export function randomKey(n) {
+    return randomBytes(n);
+}
+// ---------- 域分离子密钥（D13 见面层逐字段 opt-in） ----------
+/** 子密钥域分离前缀（改前缀 = 协议不兼容变更，不得随意改动） */
+const SUBKEY_INFO_PREFIX = 'hongxian/protocol/v1/subkey/';
+/**
+ * 由层密钥派生用途子密钥：HKDF-SHA256(master, info = prefix + label)。
+ *
+ * 见面层用它把单一的 L3 层密钥摊成「每字段一把」——
+ * 交付 contact_wechat 的子密钥不等于交付 contact_phone 的子密钥，
+ * D13「给微信号但不给手机号」由此在密码学层面成立，而不只是 UI 上的开关。
+ *
+ * 单向性：子密钥推不出主密钥，也无法推到别的字段（不同 info）。
+ */
+export function deriveSubkey(masterKey, label) {
+    if (masterKey.length !== 32)
+        throw new Error('主密钥必须是 32 字节');
+    const info = new TextEncoder().encode(SUBKEY_INFO_PREFIX + label);
+    return hkdf(sha256, masterKey, undefined, info, 32);
+}
+//# sourceMappingURL=primitives.js.map

package/dist/primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.js","sourceRoot":"","sources":["../src/primitives.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAU1C,MAAM,UAAU,uBAAuB;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAgB;IACxD,OAAO,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,YAAY,CAAC,OAAmB,EAAE,UAAsB;IACtE,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,SAAqB,EACrB,OAAmB,EACnB,SAAqB;IAErB,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB,CAAC,SAAqB;IACtD,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;AAC3B,CAAC;AASD,MAAM,UAAU,kBAAkB;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAsB;IACpD,OAAO,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,0BAA0B;AAC1B,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;AAEjF,iEAAiE;AACjE,SAAS,eAAe,CAAC,gBAA4B,EAAE,eAA2B;IAChF,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,OAAO,CAAC,SAAqB,EAAE,kBAA8B;IAC3E,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,OAAO,CAAC,MAAkB,EAAE,mBAA+B;IACzE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6CAA6C;AAE7C,mDAAmD;AACnD,MAAM,UAAU,aAAa,CAAC,GAAe,EAAE,SAAqB;IAClE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,aAAa,CAAC,GAAe,EAAE,KAAiB,EAAE,EAAc;IAC9E,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,cAAc;AACd,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,kDAAkD;AAElD,qCAAqC;AACrC,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAE1D;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,SAAqB,EAAE,KAAa;IAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,GAAG,KAAK,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,6 +1,47 @@
-{
-  "name": "@hongxian/crypto",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "@hongxian/crypto",
+  "version": "0.1.0",
+  "description": "红线密钥体系：BIP39 恢复短语 → Argon2id → 身份/协商/层密钥；Ed25519 签名、X25519 封装、AES-256-GCM",
+  "license": "Apache-2.0",
+  "author": "Hongxian contributors (https://hongxian.dev)",
+  "homepage": "https://hongxian.dev",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hongxian-dev/hongxian.git",
+    "directory": "packages/crypto"
+  },
+  "bugs": {
+    "url": "https://github.com/hongxian-dev/hongxian/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "prepublishOnly": "node ../../scripts/guard-publish.mjs"
+  },
+  "dependencies": {
+    "@noble/ciphers": "^1.3.0",
+    "@noble/curves": "^1.9.0",
+    "@noble/hashes": "^1.8.0",
+    "@scure/bip39": "^1.5.0",
+    "hash-wasm": "^4.12.0"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
+}