@interncom/diplomatic 0.12.6 → 0.12.9

package/dist/web/shared/crypto/enclave.d.ts

@@ -47,6 +47,8 @@ export type Identity = {
     /** Per-bag KDM mixed with this identity's private key (see bag seal). */
     kdmFor: (msgHeadEnc: Uint8Array) => Promise<Uint8Array>;
 };
+declare const SEAL_WRAP_DOMAIN: Uint8Array<ArrayBufferLike>;
+declare const SEAL_PAIR_DOMAIN: Uint8Array<ArrayBufferLike>;
 declare const SEAL_KEY_LEN = 32;
 declare const SEAL_PRF_MIN_LEN = 16;
 export declare class Enclave {
@@ -153,5 +155,5 @@ export declare class Enclave {
     deriveIdentity(keyPath: string, idx?: number): Promise<Identity>;
 }
 /** Derive seal key from PRF output (domain-separated). Used by enclave seal/unseal. */
-export declare function sealKeyFromPrf(crypto: ICrypto, prf: Uint8Array): Promise<ValStat<Uint8Array>>;
-export { MASTER_SEED_LEN, SEAL_KEY_LEN, SEAL_PRF_MIN_LEN };
+export declare function sealKeyFromPrf(crypto: ICrypto, prf: Uint8Array, domain?: Uint8Array): Promise<ValStat<Uint8Array>>;
+export { MASTER_SEED_LEN, SEAL_KEY_LEN, SEAL_PAIR_DOMAIN, SEAL_PRF_MIN_LEN, SEAL_WRAP_DOMAIN, };

package/dist/web/shared/crypto/noble.d.ts

@@ -4,7 +4,6 @@ import type { DerivationSeed, Hash, ICrypto, KeyPair } from "../types.ts";
  */
 export declare class NobleCrypto implements ICrypto {
     private verifyKeys;
-    private signKeys;
     genRandomBytes(bytes: number): Promise<Uint8Array>;
     gen256BitSecureRandomSeed(): Promise<Uint8Array>;
     encryptXSalsa20Poly1305Combined(data: Uint8Array, key: Uint8Array): Promise<Uint8Array>;

package/dist/web/stores/idb/seed.d.ts

@@ -4,14 +4,13 @@ import type { ISeedStore, SetSeedOpts } from "../../types";
 import { type PrfSeedMeta, PrfSeedStore, type PrfSeedStoreOpts } from "../../passkey/prf-store";
 export declare class IDBSeedStore implements ISeedStore {
     #private;
-    enclave?: Enclave;
     db: IDBDatabase;
     constructor(db: IDBDatabase, crypto: ICrypto);
     /**
      * Hold enclave in memory only. Durable identity is sealed meta
      * ({@link openPrfStore} / {@link persistPrfMeta}), never plain seed.
      * Pins identity (nonce+hash) on first save; later saves must match
-     * (largeBlob / hex / PRF unlock cannot switch masters under this DB).
+     * (largeBlob / PRF unlock cannot switch masters under this DB).
      * `opts.persist` is ignored (kept for API compatibility).
      *
      * TODO(passphrase): when PRF is missing, `persist: true` (or a dedicated
@@ -21,8 +20,8 @@ export declare class IDBSeedStore implements ISeedStore {
     save(enclave: Enclave, _opts?: SetSeedOpts): Promise<Enclave>;
     load(): Promise<Enclave | undefined>;
     /**
-     * Drop in-memory enclave and any leftover legacy hex. Keeps {@link K_PRF_META}
-     * and {@link K_ID_PIN} so unlock / largeBlob restore still match this device.
+     * Drop in-memory enclave. Keeps {@link K_PRF_META} and {@link K_ID_PIN}
+     * so unlock / largeBlob restore still match this device.
      */
     clearSession(): Promise<void>;
     wipe(): Promise<void>;

package/dist/web/stores/memory/seed.d.ts

@@ -4,7 +4,6 @@ import type { ISeedStore, SetSeedOpts } from "../../types";
 import { type IdPin } from "../identityPin";
 export declare class MemorySeedStore implements ISeedStore {
     #private;
-    enclave?: Enclave;
     constructor(crypto: ICrypto);
     save(enclave: Enclave, _opts?: SetSeedOpts): Promise<Enclave>;
     load(): Promise<Enclave | undefined>;