@keynv/core 0.1.0-rc.23

package/dist/crypto/envelope.d.ts

@@ -0,0 +1,55 @@
+import { type SealedSecret, type SymmetricKey, type WrappedKey } from './types.js';
+/**
+ * Generates a fresh 32-byte symmetric key.
+ *
+ * Use for both the master KEK (held by the org owner, encrypts each
+ * project's DEK) and per-project DEKs (encrypts secret values).
+ */
+export declare function generateKey(): Promise<SymmetricKey>;
+/**
+ * Wraps a DEK with a KEK. Output is the ciphertext + the random nonce
+ * used for this wrap operation; both are needed to unwrap.
+ *
+ * Throws if either key has the wrong length — typed inputs make this
+ * a programmer-error indicator, not a user-facing failure.
+ */
+export declare function wrapDek(dek: SymmetricKey, kek: SymmetricKey): Promise<WrappedKey>;
+/**
+ * Unwraps a DEK previously produced by `wrapDek`. Throws if
+ * authentication fails (wrong KEK, tampered ciphertext, wrong nonce).
+ */
+export declare function unwrapDek(wrapped: WrappedKey, kek: SymmetricKey): Promise<SymmetricKey>;
+/**
+ * Encrypts raw secret bytes with the project's DEK. Each call uses a fresh
+ * random nonce; identical plaintexts produce different ciphertexts.
+ *
+ * The caller owns `plaintext` and must zero it after this function returns.
+ */
+export declare function encryptSecretBytes(plaintext: Uint8Array, dek: SymmetricKey): Promise<SealedSecret>;
+/**
+ * Decrypts a sealed secret to raw bytes. Throws if authentication fails.
+ *
+ * The returned buffer contains plaintext. Callers must either zero it in a
+ * `finally` block or use `withDecryptedSecretBytes`, which does that for them.
+ */
+export declare function decryptSecretBytes(sealed: SealedSecret, dek: SymmetricKey): Promise<Uint8Array>;
+/**
+ * Decrypts secret bytes for the duration of a callback and then zeroes the
+ * plaintext buffer even when the callback throws.
+ */
+export declare function withDecryptedSecretBytes<T>(sealed: SealedSecret, dek: SymmetricKey, usePlaintext: (plaintext: Uint8Array) => T | Promise<T>): Promise<T>;
+/**
+ * Encrypts a UTF-8 string secret value with the project's DEK.
+ *
+ * This compatibility wrapper zeroes its encoded byte buffer, but the input
+ * string itself remains V8-managed and cannot be reliably wiped.
+ */
+export declare function encryptSecret(value: string, dek: SymmetricKey): Promise<SealedSecret>;
+/**
+ * Decrypts a sealed secret to a UTF-8 string.
+ *
+ * This compatibility wrapper zeroes decrypted bytes after decoding, but the
+ * returned string is V8-managed and cannot be reliably wiped by callers.
+ */
+export declare function decryptSecret(sealed: SealedSecret, dek: SymmetricKey): Promise<string>;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/crypto/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/crypto/envelope.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EAChB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,CAGzD;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAOvF;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAK7F;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,UAAU,EACrB,GAAG,EAAE,YAAY,GAChB,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,YAAY,GAChB,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,CAAC,EAC9C,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,YAAY,EACjB,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACtD,OAAO,CAAC,CAAC,CAAC,CAOZ;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAO3F;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAI5F"}

package/dist/crypto/envelope.js

@@ -0,0 +1,108 @@
+import { loadSodium, zero } from './sodium.js';
+import { KEY_BYTES, NONCE_BYTES, } from './types.js';
+/**
+ * Generates a fresh 32-byte symmetric key.
+ *
+ * Use for both the master KEK (held by the org owner, encrypts each
+ * project's DEK) and per-project DEKs (encrypts secret values).
+ */
+export async function generateKey() {
+    const sodium = await loadSodium();
+    return sodium.randombytes_buf(KEY_BYTES);
+}
+/**
+ * Wraps a DEK with a KEK. Output is the ciphertext + the random nonce
+ * used for this wrap operation; both are needed to unwrap.
+ *
+ * Throws if either key has the wrong length — typed inputs make this
+ * a programmer-error indicator, not a user-facing failure.
+ */
+export async function wrapDek(dek, kek) {
+    if (dek.length !== KEY_BYTES)
+        throw new Error('wrapDek: DEK must be 32 bytes');
+    if (kek.length !== KEY_BYTES)
+        throw new Error('wrapDek: KEK must be 32 bytes');
+    const sodium = await loadSodium();
+    const nonce = sodium.randombytes_buf(NONCE_BYTES);
+    const ciphertext = sodium.crypto_secretbox_easy(dek, nonce, kek);
+    return { ciphertext, nonce };
+}
+/**
+ * Unwraps a DEK previously produced by `wrapDek`. Throws if
+ * authentication fails (wrong KEK, tampered ciphertext, wrong nonce).
+ */
+export async function unwrapDek(wrapped, kek) {
+    if (kek.length !== KEY_BYTES)
+        throw new Error('unwrapDek: KEK must be 32 bytes');
+    if (wrapped.nonce.length !== NONCE_BYTES)
+        throw new Error('unwrapDek: nonce must be 24 bytes');
+    const sodium = await loadSodium();
+    return sodium.crypto_secretbox_open_easy(wrapped.ciphertext, wrapped.nonce, kek);
+}
+/**
+ * Encrypts raw secret bytes with the project's DEK. Each call uses a fresh
+ * random nonce; identical plaintexts produce different ciphertexts.
+ *
+ * The caller owns `plaintext` and must zero it after this function returns.
+ */
+export async function encryptSecretBytes(plaintext, dek) {
+    if (dek.length !== KEY_BYTES)
+        throw new Error('encryptSecretBytes: DEK must be 32 bytes');
+    const sodium = await loadSodium();
+    const nonce = sodium.randombytes_buf(NONCE_BYTES);
+    const ciphertext = sodium.crypto_secretbox_easy(plaintext, nonce, dek);
+    return { ciphertext, nonce };
+}
+/**
+ * Decrypts a sealed secret to raw bytes. Throws if authentication fails.
+ *
+ * The returned buffer contains plaintext. Callers must either zero it in a
+ * `finally` block or use `withDecryptedSecretBytes`, which does that for them.
+ */
+export async function decryptSecretBytes(sealed, dek) {
+    if (dek.length !== KEY_BYTES)
+        throw new Error('decryptSecretBytes: DEK must be 32 bytes');
+    if (sealed.nonce.length !== NONCE_BYTES) {
+        throw new Error('decryptSecretBytes: nonce must be 24 bytes');
+    }
+    const sodium = await loadSodium();
+    return sodium.crypto_secretbox_open_easy(sealed.ciphertext, sealed.nonce, dek);
+}
+/**
+ * Decrypts secret bytes for the duration of a callback and then zeroes the
+ * plaintext buffer even when the callback throws.
+ */
+export async function withDecryptedSecretBytes(sealed, dek, usePlaintext) {
+    const plaintext = await decryptSecretBytes(sealed, dek);
+    try {
+        return await usePlaintext(plaintext);
+    }
+    finally {
+        zero(plaintext);
+    }
+}
+/**
+ * Encrypts a UTF-8 string secret value with the project's DEK.
+ *
+ * This compatibility wrapper zeroes its encoded byte buffer, but the input
+ * string itself remains V8-managed and cannot be reliably wiped.
+ */
+export async function encryptSecret(value, dek) {
+    const plaintext = new TextEncoder().encode(value);
+    try {
+        return await encryptSecretBytes(plaintext, dek);
+    }
+    finally {
+        zero(plaintext);
+    }
+}
+/**
+ * Decrypts a sealed secret to a UTF-8 string.
+ *
+ * This compatibility wrapper zeroes decrypted bytes after decoding, but the
+ * returned string is V8-managed and cannot be reliably wiped by callers.
+ */
+export async function decryptSecret(sealed, dek) {
+    return withDecryptedSecretBytes(sealed, dek, (plaintext) => new TextDecoder('utf-8', { fatal: true }).decode(plaintext));
+}
+//# sourceMappingURL=envelope.js.map

package/dist/crypto/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/crypto/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,SAAS,EACT,WAAW,GAIZ,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAiB,EAAE,GAAiB;IAChE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACjE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAmB,EAAE,GAAiB;IACpE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,0BAA0B,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAqB,EACrB,GAAiB;IAEjB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACvE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,GAAiB;IAEjB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAoB,EACpB,GAAiB,EACjB,YAAuD;IAEvD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,SAAS,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,GAAiB;IAClE,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,SAAS,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAoB,EAAE,GAAiB;IACzE,OAAO,wBAAwB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CACzD,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAC5D,CAAC;AACJ,CAAC"}

package/dist/crypto/envelope.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=envelope.test.d.ts.map

package/dist/crypto/envelope.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.test.d.ts","sourceRoot":"","sources":["../../src/crypto/envelope.test.ts"],"names":[],"mappings":""}

package/dist/crypto/envelope.test.js

@@ -0,0 +1,163 @@
+import fc from 'fast-check';
+import { describe, expect, it } from 'vitest';
+import { KEY_BYTES, NONCE_BYTES, decryptSecret, decryptSecretBytes, encryptSecret, encryptSecretBytes, generateKey, unwrapDek, withDecryptedSecretBytes, wrapDek, } from './index.js';
+describe('generateKey', () => {
+    it('produces 32 bytes', async () => {
+        const k = await generateKey();
+        expect(k).toBeInstanceOf(Uint8Array);
+        expect(k.length).toBe(KEY_BYTES);
+    });
+    it('produces unique keys across calls', async () => {
+        const a = await generateKey();
+        const b = await generateKey();
+        expect(Buffer.from(a).equals(Buffer.from(b))).toBe(false);
+    });
+});
+describe('wrapDek / unwrapDek', () => {
+    it('round-trips a DEK through a KEK', async () => {
+        const kek = await generateKey();
+        const dek = await generateKey();
+        const wrapped = await wrapDek(dek, kek);
+        expect(wrapped.nonce.length).toBe(NONCE_BYTES);
+        expect(wrapped.ciphertext.length).toBeGreaterThan(0);
+        const unwrapped = await unwrapDek(wrapped, kek);
+        expect(Buffer.from(unwrapped).equals(Buffer.from(dek))).toBe(true);
+    });
+    it('produces a different nonce on each wrap', async () => {
+        const kek = await generateKey();
+        const dek = await generateKey();
+        const a = await wrapDek(dek, kek);
+        const b = await wrapDek(dek, kek);
+        expect(Buffer.from(a.nonce).equals(Buffer.from(b.nonce))).toBe(false);
+        expect(Buffer.from(a.ciphertext).equals(Buffer.from(b.ciphertext))).toBe(false);
+    });
+    it('rejects unwrap with the wrong KEK', async () => {
+        const kek = await generateKey();
+        const wrongKek = await generateKey();
+        const dek = await generateKey();
+        const wrapped = await wrapDek(dek, kek);
+        await expect(unwrapDek(wrapped, wrongKek)).rejects.toThrow();
+    });
+    it('rejects unwrap with tampered ciphertext', async () => {
+        const kek = await generateKey();
+        const dek = await generateKey();
+        const wrapped = await wrapDek(dek, kek);
+        const tampered = new Uint8Array(wrapped.ciphertext);
+        tampered[0] = (tampered[0] ?? 0) ^ 0xff;
+        await expect(unwrapDek({ ...wrapped, ciphertext: tampered }, kek)).rejects.toThrow();
+    });
+    it('rejects unwrap with tampered nonce', async () => {
+        const kek = await generateKey();
+        const dek = await generateKey();
+        const wrapped = await wrapDek(dek, kek);
+        const tampered = new Uint8Array(wrapped.nonce);
+        tampered[0] = (tampered[0] ?? 0) ^ 0xff;
+        await expect(unwrapDek({ ...wrapped, nonce: tampered }, kek)).rejects.toThrow();
+    });
+    it('throws when called with wrong-length keys', async () => {
+        const dek = await generateKey();
+        const tooShort = new Uint8Array(16);
+        await expect(wrapDek(dek, tooShort)).rejects.toThrow(/32 bytes/);
+        await expect(wrapDek(tooShort, dek)).rejects.toThrow(/32 bytes/);
+    });
+});
+describe('encryptSecret / decryptSecret', () => {
+    it('round-trips raw byte inputs without requiring a JS string', async () => {
+        const dek = await generateKey();
+        const value = new Uint8Array([0, 1, 2, 3, 255]);
+        const sealed = await encryptSecretBytes(value, dek);
+        const plaintext = await decryptSecretBytes(sealed, dek);
+        expect(Buffer.from(plaintext).equals(Buffer.from(value))).toBe(true);
+    });
+    it('zeroes decrypted bytes after the callback completes', async () => {
+        const dek = await generateKey();
+        const value = new TextEncoder().encode('short-lived secret');
+        const sealed = await encryptSecretBytes(value, dek);
+        const captured = [];
+        const result = await withDecryptedSecretBytes(sealed, dek, (plaintext) => {
+            captured.push(plaintext);
+            return new TextDecoder('utf-8', { fatal: true }).decode(plaintext);
+        });
+        expect(result).toBe('short-lived secret');
+        const capturedBytes = captured[0];
+        expect(capturedBytes).toBeDefined();
+        if (!capturedBytes)
+            throw new Error('expected decrypted plaintext buffer');
+        expect(Array.from(capturedBytes)).toEqual(new Array(capturedBytes.length).fill(0));
+    });
+    it('zeroes decrypted bytes even when the callback throws', async () => {
+        const dek = await generateKey();
+        const value = new TextEncoder().encode('throwing secret');
+        const sealed = await encryptSecretBytes(value, dek);
+        const captured = [];
+        await expect(withDecryptedSecretBytes(sealed, dek, (plaintext) => {
+            captured.push(plaintext);
+            throw new Error('boom');
+        })).rejects.toThrow('boom');
+        const capturedBytes = captured[0];
+        expect(capturedBytes).toBeDefined();
+        if (!capturedBytes)
+            throw new Error('expected decrypted plaintext buffer');
+        expect(Array.from(capturedBytes)).toEqual(new Array(capturedBytes.length).fill(0));
+    });
+    it('round-trips an ASCII string', async () => {
+        const dek = await generateKey();
+        const sealed = await encryptSecret('hello world', dek);
+        expect(await decryptSecret(sealed, dek)).toBe('hello world');
+    });
+    it('round-trips a UTF-8 multibyte string', async () => {
+        const dek = await generateKey();
+        const value = 'şifre 🔑 пароль';
+        const sealed = await encryptSecret(value, dek);
+        expect(await decryptSecret(sealed, dek)).toBe(value);
+    });
+    it('round-trips an empty string', async () => {
+        const dek = await generateKey();
+        const sealed = await encryptSecret('', dek);
+        expect(await decryptSecret(sealed, dek)).toBe('');
+    });
+    it('round-trips a 16 KB value', async () => {
+        const dek = await generateKey();
+        const value = 'x'.repeat(16 * 1024);
+        const sealed = await encryptSecret(value, dek);
+        expect(await decryptSecret(sealed, dek)).toBe(value);
+    });
+    it('produces a fresh nonce per call (CPA-safe)', async () => {
+        const dek = await generateKey();
+        const a = await encryptSecret('same', dek);
+        const b = await encryptSecret('same', dek);
+        expect(Buffer.from(a.ciphertext).equals(Buffer.from(b.ciphertext))).toBe(false);
+    });
+    it('rejects decrypt with the wrong DEK', async () => {
+        const dek = await generateKey();
+        const wrongDek = await generateKey();
+        const sealed = await encryptSecret('secret', dek);
+        await expect(decryptSecret(sealed, wrongDek)).rejects.toThrow();
+    });
+    it('rejects decrypt with tampered ciphertext', async () => {
+        const dek = await generateKey();
+        const sealed = await encryptSecret('secret', dek);
+        const tampered = new Uint8Array(sealed.ciphertext);
+        tampered[0] = (tampered[0] ?? 0) ^ 0x01;
+        await expect(decryptSecret({ ...sealed, ciphertext: tampered }, dek)).rejects.toThrow();
+    });
+});
+describe('property tests', () => {
+    it('every wrap roundtrips for any DEK/KEK pair', async () => {
+        await fc.assert(fc.asyncProperty(fc.uint8Array({ minLength: 32, maxLength: 32 }), async (kekBytes) => {
+            const kek = new Uint8Array(kekBytes);
+            const dek = await generateKey();
+            const wrapped = await wrapDek(dek, kek);
+            const unwrapped = await unwrapDek(wrapped, kek);
+            expect(Buffer.from(unwrapped).equals(Buffer.from(dek))).toBe(true);
+        }), { numRuns: 30 });
+    });
+    it('every encrypt roundtrips for any UTF-8 string', async () => {
+        await fc.assert(fc.asyncProperty(fc.string({ maxLength: 1024 }), async (value) => {
+            const dek = await generateKey();
+            const sealed = await encryptSecret(value, dek);
+            expect(await decryptSecret(sealed, dek)).toBe(value);
+        }), { numRuns: 50 });
+    });
+});
+//# sourceMappingURL=envelope.test.js.map

package/dist/crypto/envelope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.test.js","sourceRoot":"","sources":["../../src/crypto/envelope.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,SAAS,EACT,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,wBAAwB,EACxB,OAAO,GACR,MAAM,YAAY,CAAC;AAEpB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAErD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpD,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACxC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACxC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAExD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE;YACvE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAElC,MAAM,MAAM,CACV,wBAAwB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE;YAClD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE1B,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,iBAAiB,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACxC,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YACnF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,EAAE,EAAE,CAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,CAAC,MAAM,CACb,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/D,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC,CAAC,EACF,EAAE,OAAO,EAAE,EAAE,EAAE,CAChB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/crypto/index.d.ts

@@ -0,0 +1,5 @@
+export type { SealedSecret, SymmetricKey, WrappedKey } from './types.js';
+export { KEY_BYTES, NONCE_BYTES } from './types.js';
+export { decryptSecret, decryptSecretBytes, encryptSecret, encryptSecretBytes, generateKey, unwrapDek, withDecryptedSecretBytes, wrapDek, } from './envelope.js';
+export { zero } from './sodium.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/crypto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,wBAAwB,EACxB,OAAO,GACR,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC"}

package/dist/crypto/index.js

@@ -0,0 +1,4 @@
+export { KEY_BYTES, NONCE_BYTES } from './types.js';
+export { decryptSecret, decryptSecretBytes, encryptSecret, encryptSecretBytes, generateKey, unwrapDek, withDecryptedSecretBytes, wrapDek, } from './envelope.js';
+export { zero } from './sodium.js';
+//# sourceMappingURL=index.js.map

package/dist/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,wBAAwB,EACxB,OAAO,GACR,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC"}

package/dist/crypto/sodium.d.ts

@@ -0,0 +1,21 @@
+interface Sodium {
+    ready: Promise<void>;
+    randombytes_buf(length: number): Uint8Array;
+    crypto_secretbox_easy(message: Uint8Array, nonce: Uint8Array, key: Uint8Array): Uint8Array;
+    crypto_secretbox_open_easy(ciphertext: Uint8Array, nonce: Uint8Array, key: Uint8Array): Uint8Array;
+    memzero(buf: Uint8Array): void;
+}
+/**
+ * Returns a fully-initialized libsodium handle. Calling sites must `await`
+ * this before using any crypto primitive — libsodium loads its WASM
+ * module asynchronously.
+ */
+export declare function loadSodium(): Promise<Sodium>;
+/**
+ * Best-effort zeroing of a sensitive buffer. Falls back to a JS-side
+ * fill when libsodium's `memzero` is unavailable (it always is in WASM
+ * builds, but documenting the fallback explicitly).
+ */
+export declare function zero(buf: Uint8Array): void;
+export {};
+//# sourceMappingURL=sodium.d.ts.map

package/dist/crypto/sodium.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sodium.d.ts","sourceRoot":"","sources":["../../src/crypto/sodium.ts"],"names":[],"mappings":"AAMA,UAAU,MAAM;IACd,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IAC5C,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU,CAAC;IAC3F,0BAA0B,CACxB,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,UAAU,GACd,UAAU,CAAC;IACd,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;CAChC;AAmBD;;;;GAIG;AACH,wBAAgB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAK5C;AAED;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAM1C"}

package/dist/crypto/sodium.js

@@ -0,0 +1,43 @@
+// libsodium-wrappers ships an ESM build whose internal `import 'libsodium'`
+// trips up some bundlers; loading via createRequire keeps the module path
+// stable across Node, Bun, and tsx.
+import { createRequire } from 'node:module';
+import { join } from 'node:path';
+const moduleRequire = createRequire(import.meta.url);
+function loadSodiumModule() {
+    try {
+        return moduleRequire('libsodium-wrappers');
+    }
+    catch {
+        // Next standalone can preserve workspace-absolute module origins, so fall
+        // back to resolving from the runtime app root where copied dependencies live.
+        const runtimeRequire = createRequire(join(process.cwd(), 'package.json'));
+        return runtimeRequire('libsodium-wrappers');
+    }
+}
+const sodium = loadSodiumModule();
+let readyPromise = null;
+/**
+ * Returns a fully-initialized libsodium handle. Calling sites must `await`
+ * this before using any crypto primitive — libsodium loads its WASM
+ * module asynchronously.
+ */
+export function loadSodium() {
+    if (!readyPromise) {
+        readyPromise = sodium.ready.then(() => sodium);
+    }
+    return readyPromise;
+}
+/**
+ * Best-effort zeroing of a sensitive buffer. Falls back to a JS-side
+ * fill when libsodium's `memzero` is unavailable (it always is in WASM
+ * builds, but documenting the fallback explicitly).
+ */
+export function zero(buf) {
+    if (typeof sodium.memzero === 'function') {
+        sodium.memzero(buf);
+        return;
+    }
+    buf.fill(0);
+}
+//# sourceMappingURL=sodium.js.map

package/dist/crypto/sodium.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sodium.js","sourceRoot":"","sources":["../../src/crypto/sodium.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,oCAAoC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAcjC,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErD,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,oBAAoB,CAAW,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,8EAA8E;QAC9E,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1E,OAAO,cAAc,CAAC,oBAAoB,CAAW,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;AAElC,IAAI,YAAY,GAA2B,IAAI,CAAC;AAEhD;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,GAAe;IAClC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACd,CAAC"}

package/dist/crypto/types.d.ts

@@ -0,0 +1,37 @@
+/**
+ * A 32-byte symmetric key. Used for both KEKs (master key) and DEKs
+ * (per-project data-encryption keys).
+ *
+ * Always wrap real key material in a `Uint8Array` rather than a string —
+ * strings are immutable and cannot be reliably zeroed.
+ */
+export type SymmetricKey = Uint8Array;
+/**
+ * A wrapped (encrypted) DEK. Produced by `wrapDek(dek, kek)` and stored
+ * in the `projects.dek_wrapped` column. Without the KEK that wrapped it,
+ * the contents are unrecoverable.
+ */
+export interface WrappedKey {
+    readonly ciphertext: Uint8Array;
+    readonly nonce: Uint8Array;
+}
+/**
+ * An encrypted secret value. Produced by `encryptSecretBytes(value, dek)` or
+ * the string compatibility wrapper `encryptSecret(value, dek)`, and stored in
+ * the `secrets.ciphertext` / `secrets.nonce` columns.
+ */
+export interface SealedSecret {
+    readonly ciphertext: Uint8Array;
+    readonly nonce: Uint8Array;
+}
+/**
+ * Symmetric-key length used by libsodium's `crypto_secretbox`
+ * (XSalsa20-Poly1305).
+ */
+export declare const KEY_BYTES = 32;
+/**
+ * Nonce length for `crypto_secretbox`. Each encryption draws a fresh
+ * random nonce of this length.
+ */
+export declare const NONCE_BYTES = 24;
+//# sourceMappingURL=types.d.ts.map

package/dist/crypto/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/crypto/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC;AAEtC;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED;;;GAGG;AACH,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B;;;GAGG;AACH,eAAO,MAAM,WAAW,KAAK,CAAC"}

package/dist/crypto/types.js

@@ -0,0 +1,11 @@
+/**
+ * Symmetric-key length used by libsodium's `crypto_secretbox`
+ * (XSalsa20-Poly1305).
+ */
+export const KEY_BYTES = 32;
+/**
+ * Nonce length for `crypto_secretbox`. Each encryption draws a fresh
+ * random nonce of this length.
+ */
+export const NONCE_BYTES = 24;
+//# sourceMappingURL=types.js.map

package/dist/crypto/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/crypto/types.ts"],"names":[],"mappings":"AA6BA;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAE5B;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * as reference from './reference/index.js';
+export * as crypto from './crypto/index.js';
+export * as audit from './audit/index.js';
+export * as validation from './validation/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAC1C,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export * as reference from './reference/index.js';
+export * as crypto from './crypto/index.js';
+export * as audit from './audit/index.js';
+export * as validation from './validation/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAC1C,OAAO,KAAK,UAAU,MAAM,uBAAuB,CAAC"}

package/dist/reference/index.d.ts

@@ -0,0 +1,4 @@
+export type { Alias, AliasMatch, FindMode } from './types.js';
+export { ALIAS_LIMITS } from './types.js';
+export { parseAlias, findAliases, findAliasesInArgv, replaceAliases, buildAlias, } from './parser.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/reference/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/reference/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,UAAU,GACX,MAAM,aAAa,CAAC"}

package/dist/reference/index.js

@@ -0,0 +1,3 @@
+export { ALIAS_LIMITS } from './types.js';
+export { parseAlias, findAliases, findAliasesInArgv, replaceAliases, buildAlias, } from './parser.js';
+//# sourceMappingURL=index.js.map

package/dist/reference/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/reference/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,UAAU,GACX,MAAM,aAAa,CAAC"}

package/dist/reference/parser-property.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=parser-property.test.d.ts.map

package/dist/reference/parser-property.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser-property.test.d.ts","sourceRoot":"","sources":["../../src/reference/parser-property.test.ts"],"names":[],"mappings":""}