@maatara/core-pqc 0.1.2 → 0.2.1

package/README.md

@@ -1,96 +1,147 @@
 # Ma'atara Core PQC Toolkit
-
 A portable, audited Post-Quantum Cryptography toolkit for browser and Node.js environments.
 
+## Features
+# Ma'atara Core PQC Toolkit
+
+A portable, audited Post-Quantum Cryptography toolkit for browser and Node.js. Includes deterministic helpers for governance multisig and NFT/art token flows.
+
 ## Features
 
-- **Kyber ML-KEM-768**: Key encapsulation mechanism for secure key exchange
-- **Dilithium2**: Digital signatures with post-quantum security
-- **HKDF-SHA256**: Key derivation function
-- **AES-256-GCM**: Authenticated encryption
-- **Base64url encoding**: URL-safe encoding utilities
-- **Constant-time operations**: Security-focused implementations
+- Kyber ML-KEM-768 (key encapsulation)
+- Dilithium2 (sign/verify)
+- HKDF-SHA256 (key derivation)
+- AES-256-GCM (AEAD)
+- Base64url helpers and constant‑time compare
+- Deterministic preimage builders (JCS) for governance, mint, transfer, and anchor
+- Royalty validation and multisig attestation verification
 
-## Installation
+## Install
 
 ```bash
 npm install @maatara/core-pqc
 ```
 
-## Usage
+Initialize WASM once on startup:
+
+```ts
+import { initWasm } from '@maatara/core-pqc';
+await initWasm();
+```
 
-### Browser
+## Core PQC usage
 
-```javascript
-import { initWasm, kyberKeygen, kyberEncaps, dilithiumKeygen, dilithiumSign, dilithiumVerify } from '@maatara/core-pqc';
+```ts
+import {
+	kyberKeygen, kyberEncaps, kyberDecaps,
+	dilithiumKeygen, dilithiumSign, dilithiumVerify,
+	hkdfSha256, aesGcmWrap, aesGcmUnwrap, b64uEncode
+} from '@maatara/core-pqc';
 
-// Initialize WASM (required once per process)
 await initWasm();
 
-// Kyber key exchange
-const aliceKeys = await kyberKeygen();
-const bobKeys = await kyberKeygen();
-
-const encap = await kyberEncaps(aliceKeys.public_b64u);
-const sharedSecret = await kyberDecaps(aliceKeys.secret_b64u, encap.kem_ct_b64u);
+// Kyber
+const { public_b64u, secret_b64u } = await kyberKeygen();
+const { kem_ct_b64u, shared_b64u } = await kyberEncaps(public_b64u);
+const { shared_b64u: shared2 } = await kyberDecaps(secret_b64u, kem_ct_b64u);
 
-// Dilithium signatures
+// Dilithium
 const signKeys = await dilithiumKeygen();
-const message = b64uEncode(new TextEncoder().encode("Hello PQC!"));
-const signature = await dilithiumSign(message, signKeys.secret_b64u);
-const verified = await dilithiumVerify(message, signature.signature_b64u, signKeys.public_b64u);
+const msg = b64uEncode(new TextEncoder().encode('hello pqc'));
+const sig = await dilithiumSign(msg, signKeys.secret_b64u);
+const ok = await dilithiumVerify(msg, sig.signature_b64u, signKeys.public_b64u);
 ```
 
-### Node.js
-
-```javascript
-const { kyberKeygen, dilithiumKeygen } = require('@maatara/core-pqc');
-
-// Same API as browser
+## Deterministic helpers (multisig and NFT)
+
+All helpers return canonical JSON and a base64url message suitable for signing with Dilithium2.
+
+```ts
+import {
+	jcsCanonicalize,
+	buildPolicyPreimage,
+	buildMintPreimage,
+	buildTransferPreimage,
+	buildAnchorPreimage,
+	validateRoyalty,
+	verifyAttestations,
+	dilithiumSign
+} from '@maatara/core-pqc';
+
+// 1) Governance policy (multisig)
+const policy = { version: 'v1', threshold: 2, signers: [{ id: 'a', publicKeyB64u: '...' }, { id: 'b', publicKeyB64u: '...' }] };
+const { canonical: govCanon, msg_b64u: govMsg } = await buildPolicyPreimage(policy);
+const att = await dilithiumSign(govMsg!, signerSecret);
+
+// 2) Mint preimage (royalty optional)
+const header = { createdAt: Date.now(), royalty: { receiver: '0xabc...', bps: 500 } };
+const asset = { id: 'uuid', sha256: '...', mediaType: 'image/png' };
+if (!await validateRoyalty(header.royalty.receiver, header.royalty.bps)) throw new Error('Bad royalty');
+const { msg_b64u: mintMsg } = await buildMintPreimage(header, asset);
+const mintSig = await dilithiumSign(mintMsg!, signerSecret);
+
+// 3) Transfer preimage
+const { msg_b64u: xferMsg } = await buildTransferPreimage({ assetId: 'uuid', to: 'did:key:...' });
+const xferSig = await dilithiumSign(xferMsg!, signerSecret);
+
+// 4) Anchor preimage (Merkle root + chains)
+const { msg_b64u: anchorMsg } = await buildAnchorPreimage('user-123', 'deadbeef...', '2025-01', { apf: ['root1','root2'] });
+
+// Verify a set of governance attestations for a canonical message
+const validCount = await verifyAttestations(govMsg!, [
+	{ alg: 'dilithium2', publicKeyB64u: signerPub1, signatureB64u: sig1.signature_b64u },
+	{ alg: 'dilithium2', publicKeyB64u: signerPub2, signatureB64u: sig2.signature_b64u }
+], [signerPub1, signerPub2]);
 ```
 
-## API Reference
-
-### Kyber ML-KEM-768
+## Notes app integration (independent repo)
 
-- `kyberKeygen()`: Generate keypair
-- `kyberEncaps(publicKey)`: Encapsulate shared secret
-- `kyberDecaps(secretKey, ciphertext)`: Decapsulate shared secret
+Use the deterministic helpers to prepare messages client‑side, sign, and POST to the Core Worker endpoints.
 
-### Dilithium2 (ML-DSA-65 compatible)
+```ts
+import {
+	initWasm,
+	buildMintPreimage,
+	dilithiumSign,
+	verifyAttestations
+} from '@maatara/core-pqc';
 
-- `dilithiumKeygen()`: Generate keypair
-- `dilithiumSign(message, secretKey)`: Sign message
-- `dilithiumVerify(message, signature, publicKey)`: Verify signature
-
-### HKDF
-
-- `hkdfSha256(secret, info, salt?, length)`: Derive key
-
-### AES-GCM
-
-- `aesGcmWrap(key, plaintext, aad)`: Encrypt data
-- `aesGcmUnwrap(key, iv, ciphertext, aad)`: Decrypt data
-
-## Security Notes
+await initWasm();
 
-- **Zero-knowledge**: Server never receives user secrets or DEKs
-- **Post-quantum security**: Resistant to quantum computing attacks
-- **Constant-time operations**: Prevents timing attacks
-- **Audited implementations**: Uses vetted cryptographic libraries
+// Build preimage and sign
+const { msg_b64u } = await buildMintPreimage(header, asset);
+const sig = await dilithiumSign(msg_b64u!, userSecret_b64u);
+const attestation = { alg: 'dilithium2', publicKeyB64u: userPublic_b64u, signatureB64u: sig.signature_b64u };
+
+// Optionally validate locally before submit
+const valid = await verifyAttestations(msg_b64u!, [attestation], [userPublic_b64u]);
+if (!valid) throw new Error('Attestation failed');
+
+// Submit to Core
+await fetch(`${CORE_URL}/api/assets/mint`, {
+	method: 'POST',
+	headers: { 'content-type': 'application/json' },
+	body: JSON.stringify({ header, asset, attestations: [attestation] })
+});
+```
 
-## Building from Source
+## Build from source
 
 ```bash
-# Build WASM package
-cd packages/core-pqc-wasm
-wasm-pack build --target web --out-dir pkg
-
-# Build npm package
-cd ../core-pqc
+# Build npm wrapper
+cd packages/core-pqc
 npm run build
 ```
 
+WASM bindings live in `@maatara/core-pqc-wasm` (Rust + wasm-bindgen). This package consumes those exports and provides a browser/Node‑friendly API.
+
+## Security notes
+
+- Zero‑knowledge: server never receives user secrets/DEKs
+- Post‑quantum primitives (Kyber, Dilithium)
+- Constant‑time operations where applicable
+- Deterministic JSON canonicalization (JCS‑like) for signature stability
+
 ## License
 
-Apache-2.0
+Apache‑2.0

package/dist/index.d.ts

@@ -29,7 +29,17 @@ export interface HkdfResult {
 export interface AesGcmUnwrapResult {
     dek_b64u: string;
 }
-export declare function initWasm(): Promise<void>;
+export interface CanonicalOut {
+    canonical: string;
+    msg_b64u?: string;
+    msgB64u?: string;
+}
+/**
+ * Initialize the underlying WASM module.
+ * - In browsers/bundlers where the glue knows how to fetch the .wasm, you can call without params.
+ * - If your bundler provides a URL or Module for the .wasm, pass it as the first argument.
+ */
+export declare function initWasm(wasmInput?: any): Promise<void>;
 export declare function kyberKeygen(): Promise<KyberKeypair>;
 export declare function kyberEncaps(publicB64u: string): Promise<KyberEncap>;
 export declare function kyberDecaps(secretB64u: string, kemCtB64u: string): Promise<{
@@ -41,6 +51,17 @@ export declare function aesGcmUnwrap(keyB64u: string, ivB64u: string, ctB64u: st
 export declare function dilithiumKeygen(): Promise<DilithiumKeypair>;
 export declare function dilithiumSign(messageB64u: string, secretB64u: string): Promise<DilithiumSignResult>;
 export declare function dilithiumVerify(messageB64u: string, signatureB64u: string, publicB64u: string): Promise<DilithiumVerifyResult>;
+export declare function jcsCanonicalize(json: unknown): Promise<string>;
+export declare function buildPolicyPreimage(policy: unknown): Promise<CanonicalOut>;
+export declare function buildMintPreimage(header: unknown, asset: unknown): Promise<CanonicalOut>;
+export declare function buildTransferPreimage(header: unknown): Promise<CanonicalOut>;
+export declare function buildAnchorPreimage(userId: string, rootHex: string, epoch: string, chains: unknown): Promise<CanonicalOut>;
+export declare function validateRoyalty(receiver: string, bps: number): Promise<boolean>;
+export declare function verifyAttestations(msgB64u: string, attestations: Array<{
+    alg: string;
+    publicKeyB64u: string;
+    signatureB64u: string;
+}>, allowedPublicKeys?: string[]): Promise<number>;
 export declare function b64uEncode(data: Uint8Array): string;
 export declare function b64uDecode(str: string): Uint8Array;
 export declare function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAiBD,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAO9C;AAGD,wBAAsB,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,CAKzD;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAKzE;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAKzG;AAGD,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,EACjB,GAAG,GAAE,MAAW,GACf,OAAO,CAAC,UAAU,CAAC,CAKrB;AAGD,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,CAAC,CAK7B;AAGD,wBAAsB,eAAe,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAKjE;AAED,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,mBAAmB,CAAC,CAK9B;AAED,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,qBAAqB,CAAC,CAKhC;AAGD,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAKnD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAOlD;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAOvE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAeD,MAAM,WAAW,YAAY;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AAKxF;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAa7D;AAGD,wBAAsB,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,CAKzD;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAKzE;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAKzG;AAGD,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,EACjB,GAAG,GAAE,MAAW,GACf,OAAO,CAAC,UAAU,CAAC,CAKrB;AAGD,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,CAAC,CAK7B;AAGD,wBAAsB,eAAe,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAKjE;AAED,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,mBAAmB,CAAC,CAK9B;AAED,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,qBAAqB,CAAC,CAKhC;AAGD,wBAAsB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAMpE;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAMhF;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAM9F;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAMlF;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAMhI;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMrF;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAM3L;AAyBD,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAKnD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAGlD;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAOvE"}

package/dist/index.js

@@ -35,14 +35,26 @@ const wasm_dilithium_sign = wasmPkg__namespace.dilithium_sign;
 const wasm_dilithium_verify = wasmPkg__namespace.dilithium_verify;
 // Initialize WASM
 let wasmReady = false;
-async function initWasm() {
-    if (!wasmReady) {
-        // Call default init if present (web/bundler builds expose a default init function)
-        const maybeInit = wasmPkg__namespace.default;
-        if (typeof maybeInit === 'function')
+/**
+ * Initialize the underlying WASM module.
+ * - In browsers/bundlers where the glue knows how to fetch the .wasm, you can call without params.
+ * - If your bundler provides a URL or Module for the .wasm, pass it as the first argument.
+ */
+async function initWasm(wasmInput) {
+    if (wasmReady)
+        return;
+    const maybeInit = wasmPkg__namespace.default;
+    if (typeof maybeInit === 'function') {
+        // Some environments require a URL/Module/bytes for initialization.
+        // We forward the optional value if provided; otherwise let the glue resolve it.
+        if (wasmInput !== undefined) {
+            await maybeInit(wasmInput);
+        }
+        else {
             await maybeInit();
-        wasmReady = true;
+        }
     }
+    wasmReady = true;
 }
 // Kyber functions
 async function kyberKeygen() {
@@ -111,20 +123,95 @@ async function dilithiumVerify(messageB64u, signatureB64u, publicB64u) {
         throw new Error(result.error);
     return result;
 }
+// ---- Deterministic helpers (multisig/art token) ----
+async function jcsCanonicalize(json) {
+    await initWasm();
+    const raw = wasmPkg__namespace.jcs_canonicalize(JSON.stringify(json));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return out.canonical;
+}
+async function buildPolicyPreimage(policy) {
+    await initWasm();
+    const raw = wasmPkg__namespace.preimage_governance(JSON.stringify(policy));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };
+}
+async function buildMintPreimage(header, asset) {
+    await initWasm();
+    const raw = wasmPkg__namespace.preimage_asset_mint(JSON.stringify(header), JSON.stringify(asset));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };
+}
+async function buildTransferPreimage(header) {
+    await initWasm();
+    const raw = wasmPkg__namespace.preimage_asset_transfer(JSON.stringify(header));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };
+}
+async function buildAnchorPreimage(userId, rootHex, epoch, chains) {
+    await initWasm();
+    const raw = wasmPkg__namespace.preimage_anchor(userId, rootHex, epoch, JSON.stringify(chains));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };
+}
+async function validateRoyalty(receiver, bps) {
+    await initWasm();
+    const raw = wasmPkg__namespace.validate_royalty(receiver, bps);
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        return false;
+    return !!out.ok;
+}
+async function verifyAttestations(msgB64u, attestations, allowedPublicKeys) {
+    await initWasm();
+    const raw = wasmPkg__namespace.verify_attestations(msgB64u, JSON.stringify(attestations), allowedPublicKeys ? JSON.stringify(allowedPublicKeys) : undefined);
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return Number(out.valid_count || 0);
+}
 // Utility functions
+// Cross-env base64url helpers (browser + Node)
+function _fromByteArray(bytes) {
+    if (typeof btoa === 'function') {
+        // Browser
+        let s = '';
+        for (let i = 0; i < bytes.length; i++)
+            s += String.fromCharCode(bytes[i]);
+        return btoa(s);
+    }
+    // Node
+    return Buffer.from(bytes).toString('base64');
+}
+function _toByteArray(b64) {
+    if (typeof atob === 'function') {
+        const binary = atob(b64);
+        const out = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i++)
+            out[i] = binary.charCodeAt(i);
+        return out;
+    }
+    return new Uint8Array(Buffer.from(b64, 'base64'));
+}
 function b64uEncode(data) {
-    return btoa(String.fromCharCode(...data))
+    return _fromByteArray(data)
         .replace(/\+/g, '-')
         .replace(/\//g, '_')
-        .replace(/=/g, '');
+        .replace(/=+/g, '');
 }
 function b64uDecode(str) {
-    const binary = atob(str.replace(/-/g, '+').replace(/_/g, '/'));
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i++) {
-        bytes[i] = binary.charCodeAt(i);
-    }
-    return bytes;
+    const b64 = str.replace(/-/g, '+').replace(/_/g, '/').padEnd(Math.ceil(str.length / 4) * 4, '=');
+    return _toByteArray(b64);
 }
 function constantTimeEqual(a, b) {
     if (a.length !== b.length)
@@ -140,13 +227,20 @@ exports.aesGcmUnwrap = aesGcmUnwrap;
 exports.aesGcmWrap = aesGcmWrap;
 exports.b64uDecode = b64uDecode;
 exports.b64uEncode = b64uEncode;
+exports.buildAnchorPreimage = buildAnchorPreimage;
+exports.buildMintPreimage = buildMintPreimage;
+exports.buildPolicyPreimage = buildPolicyPreimage;
+exports.buildTransferPreimage = buildTransferPreimage;
 exports.constantTimeEqual = constantTimeEqual;
 exports.dilithiumKeygen = dilithiumKeygen;
 exports.dilithiumSign = dilithiumSign;
 exports.dilithiumVerify = dilithiumVerify;
 exports.hkdfSha256 = hkdfSha256;
 exports.initWasm = initWasm;
+exports.jcsCanonicalize = jcsCanonicalize;
 exports.kyberDecaps = kyberDecaps;
 exports.kyberEncaps = kyberEncaps;
 exports.kyberKeygen = kyberKeygen;
+exports.validateRoyalty = validateRoyalty;
+exports.verifyAttestations = verifyAttestations;
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/index.ts"],"sourcesContent":["// Ma'atara Core PQC Toolkit\r\n// Post-Quantum Cryptography for Browser and Node.js\r\n\r\nexport interface KyberKeypair {\r\n  public_b64u: string;\r\n  secret_b64u: string;\r\n}\r\n\r\nexport interface KyberEncap {\r\n  kem_ct_b64u: string;\r\n  shared_b64u: string;\r\n}\r\n\r\nexport interface AesGcmWrap {\r\n  iv_b64u: string;\r\n  ct_b64u: string;\r\n}\r\n\r\nexport interface DilithiumKeypair {\r\n  algorithm: string;\r\n  public_b64u: string;\r\n  secret_b64u: string;\r\n}\r\n\r\nexport interface DilithiumSignResult {\r\n  signature_b64u: string;\r\n  algorithm: string;\r\n}\r\n\r\nexport interface DilithiumVerifyResult {\r\n  is_valid: boolean;\r\n  algorithm: string;\r\n}\r\n\r\nexport interface HkdfResult {\r\n  key_b64u: string;\r\n}\r\n\r\nexport interface AesGcmUnwrapResult {\r\n  dek_b64u: string;\r\n}\r\n\r\n// Import WASM functions (namespace import for better bundler compatibility)\r\nimport * as wasmPkg from '@maatara/core-pqc-wasm';\r\nconst wasm_kyber_keygen = (wasmPkg as any).kyber_keygen as () => string;\r\nconst wasm_kyber_encaps = (wasmPkg as any).kyber_encaps as (p: string) => string;\r\nconst wasm_kyber_decaps = (wasmPkg as any).kyber_decaps as (s: string, c: string) => string;\r\nconst wasm_hkdf_sha256 = (wasmPkg as any).hkdf_sha256 as (s: string, i: string, salt?: string, len?: number) => string;\r\nconst wasm_aes_gcm_wrap = (wasmPkg as any).aes_gcm_wrap as (k: string, d: string, a: string) => string;\r\nconst wasm_aes_gcm_unwrap = (wasmPkg as any).aes_gcm_unwrap as (k: string, iv: string, ct: string, a: string) => string;\r\nconst wasm_dilithium_keygen = (wasmPkg as any).dilithium_keygen as () => string;\r\nconst wasm_dilithium_sign = (wasmPkg as any).dilithium_sign as (m: string, s: string) => string;\r\nconst wasm_dilithium_verify = (wasmPkg as any).dilithium_verify as (m: string, sig: string, p: string) => string;\r\n\r\n// Initialize WASM\r\nlet wasmReady = false;\r\n\r\nexport async function initWasm(): Promise<void> {\r\n  if (!wasmReady) {\r\n  // Call default init if present (web/bundler builds expose a default init function)\r\n  const maybeInit = (wasmPkg as any).default;\r\n  if (typeof maybeInit === 'function') await maybeInit();\r\n    wasmReady = true;\r\n  }\r\n}\r\n\r\n// Kyber functions\r\nexport async function kyberKeygen(): Promise<KyberKeypair> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_keygen());\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function kyberEncaps(publicB64u: string): Promise<KyberEncap> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_encaps(publicB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function kyberDecaps(secretB64u: string, kemCtB64u: string): Promise<{ shared_b64u: string }> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_decaps(secretB64u, kemCtB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// HKDF functions\r\nexport async function hkdfSha256(\r\n  secretB64u: string,\r\n  infoB64u: string,\r\n  saltB64u?: string,\r\n  len: number = 32\r\n): Promise<HkdfResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_hkdf_sha256(secretB64u, infoB64u, saltB64u, len));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// AES-GCM functions\r\nexport async function aesGcmWrap(\r\n  keyB64u: string,\r\n  dekB64u: string,\r\n  aadB64u: string\r\n): Promise<AesGcmWrap> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_aes_gcm_wrap(keyB64u, dekB64u, aadB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function aesGcmUnwrap(\r\n  keyB64u: string,\r\n  ivB64u: string,\r\n  ctB64u: string,\r\n  aadB64u: string\r\n): Promise<AesGcmUnwrapResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_aes_gcm_unwrap(keyB64u, ivB64u, ctB64u, aadB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// Dilithium functions\r\nexport async function dilithiumKeygen(): Promise<DilithiumKeypair> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_keygen());\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function dilithiumSign(\r\n  messageB64u: string,\r\n  secretB64u: string\r\n): Promise<DilithiumSignResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_sign(messageB64u, secretB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function dilithiumVerify(\r\n  messageB64u: string,\r\n  signatureB64u: string,\r\n  publicB64u: string\r\n): Promise<DilithiumVerifyResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_verify(messageB64u, signatureB64u, publicB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// Utility functions\r\nexport function b64uEncode(data: Uint8Array): string {\r\n  return btoa(String.fromCharCode(...data))\r\n    .replace(/\\+/g, '-')\r\n    .replace(/\\//g, '_')\r\n    .replace(/=/g, '');\r\n}\r\n\r\nexport function b64uDecode(str: string): Uint8Array {\r\n  const binary = atob(str.replace(/-/g, '+').replace(/_/g, '/'));\r\n  const bytes = new Uint8Array(binary.length);\r\n  for (let i = 0; i < binary.length; i++) {\r\n    bytes[i] = binary.charCodeAt(i);\r\n  }\r\n  return bytes;\r\n}\r\n\r\nexport function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\r\n  if (a.length !== b.length) return false;\r\n  let result = 0;\r\n  for (let i = 0; i < a.length; i++) {\r\n    result |= a[i] ^ b[i];\r\n  }\r\n  return result === 0;\r\n}\r\n"],"names":["wasmPkg"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AAyCA;AAEA,MAAM,iBAAiB,GAAIA,kBAAe,CAAC,YAA4B,CAAC;AACxE,MAAM,iBAAiB,GAAIA,kBAAe,CAAC,YAAqC,CAAC;AACjF,MAAM,iBAAiB,GAAIA,kBAAe,CAAC,YAAgD,CAAC;AAC5F,MAAM,gBAAgB,GAAIA,kBAAe,CAAC,WAA4E,CAAC;AACvH,MAAM,iBAAiB,GAAIA,kBAAe,CAAC,YAA2D,CAAC;AACvG,MAAM,mBAAmB,GAAIA,kBAAe,CAAC,cAA0E,CAAC;AACxH,MAAM,qBAAqB,GAAIA,kBAAe,CAAC,gBAAgC,CAAC;AAChF,MAAM,mBAAmB,GAAIA,kBAAe,CAAC,cAAkD,CAAC;AAChG,MAAM,qBAAqB,GAAIA,kBAAe,CAAC,gBAAiE,CAAC;AAEjH;AACA,IAAI,SAAS,GAAG,KAAK,CAAC;AAEf,eAAe,QAAQ,GAAA;IAC5B,IAAI,CAAC,SAAS,EAAE;;AAEhB,QAAA,MAAM,SAAS,GAAIA,kBAAe,CAAC,OAAO,CAAC;QAC3C,IAAI,OAAO,SAAS,KAAK,UAAU;YAAE,MAAM,SAAS,EAAE,CAAC;QACrD,SAAS,GAAG,IAAI,CAAC;KAClB;AACH,CAAC;AAED;AACO,eAAe,WAAW,GAAA;IAC/B,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,WAAW,CAAC,UAAkB,EAAA;IAClD,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,WAAW,CAAC,UAAkB,EAAE,SAAiB,EAAA;IACrE,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,UAAU,CAC9B,UAAkB,EAClB,QAAgB,EAChB,QAAiB,EACjB,GAAA,GAAc,EAAE,EAAA;IAEhB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,UAAU,CAC9B,OAAe,EACf,OAAe,EACf,OAAe,EAAA;IAEf,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,YAAY,CAChC,OAAe,EACf,MAAc,EACd,MAAc,EACd,OAAe,EAAA;IAEf,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,eAAe,GAAA;IACnC,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,aAAa,CACjC,WAAmB,EACnB,UAAkB,EAAA;IAElB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,eAAe,CACnC,WAAmB,EACnB,aAAqB,EACrB,UAAkB,EAAA;IAElB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACM,SAAU,UAAU,CAAC,IAAgB,EAAA;IACzC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;AACtC,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAEK,SAAU,UAAU,CAAC,GAAW,EAAA;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC5C,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;KACjC;AACD,IAAA,OAAO,KAAK,CAAC;AACf,CAAC;AAEe,SAAA,iBAAiB,CAAC,CAAa,EAAE,CAAa,EAAA;AAC5D,IAAA,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;AAAE,QAAA,OAAO,KAAK,CAAC;IACxC,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KACvB;IACD,OAAO,MAAM,KAAK,CAAC,CAAC;AACtB;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":["../src/index.ts"],"sourcesContent":["// Ma'atara Core PQC Toolkit\r\n// Post-Quantum Cryptography for Browser and Node.js\r\n\r\nexport interface KyberKeypair {\r\n  public_b64u: string;\r\n  secret_b64u: string;\r\n}\r\n\r\nexport interface KyberEncap {\r\n  kem_ct_b64u: string;\r\n  shared_b64u: string;\r\n}\r\n\r\nexport interface AesGcmWrap {\r\n  iv_b64u: string;\r\n  ct_b64u: string;\r\n}\r\n\r\nexport interface DilithiumKeypair {\r\n  algorithm: string;\r\n  public_b64u: string;\r\n  secret_b64u: string;\r\n}\r\n\r\nexport interface DilithiumSignResult {\r\n  signature_b64u: string;\r\n  algorithm: string;\r\n}\r\n\r\nexport interface DilithiumVerifyResult {\r\n  is_valid: boolean;\r\n  algorithm: string;\r\n}\r\n\r\nexport interface HkdfResult {\r\n  key_b64u: string;\r\n}\r\n\r\nexport interface AesGcmUnwrapResult {\r\n  dek_b64u: string;\r\n}\r\n\r\n// Import WASM functions (namespace import for better bundler compatibility)\r\nimport * as wasmPkg from '@maatara/core-pqc-wasm';\r\nconst wasm_kyber_keygen = (wasmPkg as any).kyber_keygen as () => string;\r\nconst wasm_kyber_encaps = (wasmPkg as any).kyber_encaps as (p: string) => string;\r\nconst wasm_kyber_decaps = (wasmPkg as any).kyber_decaps as (s: string, c: string) => string;\r\nconst wasm_hkdf_sha256 = (wasmPkg as any).hkdf_sha256 as (s: string, i: string, salt?: string, len?: number) => string;\r\nconst wasm_aes_gcm_wrap = (wasmPkg as any).aes_gcm_wrap as (k: string, d: string, a: string) => string;\r\nconst wasm_aes_gcm_unwrap = (wasmPkg as any).aes_gcm_unwrap as (k: string, iv: string, ct: string, a: string) => string;\r\nconst wasm_dilithium_keygen = (wasmPkg as any).dilithium_keygen as () => string;\r\nconst wasm_dilithium_sign = (wasmPkg as any).dilithium_sign as (m: string, s: string) => string;\r\nconst wasm_dilithium_verify = (wasmPkg as any).dilithium_verify as (m: string, sig: string, p: string) => string;\r\n\r\n// Deterministic/canonicalization and governance helpers\r\nexport interface CanonicalOut { canonical: string; msg_b64u?: string; msgB64u?: string }\r\n\r\n// Initialize WASM\r\nlet wasmReady = false;\r\n\r\n/**\r\n * Initialize the underlying WASM module.\r\n * - In browsers/bundlers where the glue knows how to fetch the .wasm, you can call without params.\r\n * - If your bundler provides a URL or Module for the .wasm, pass it as the first argument.\r\n */\r\nexport async function initWasm(wasmInput?: any): Promise<void> {\r\n  if (wasmReady) return;\r\n  const maybeInit = (wasmPkg as any).default;\r\n  if (typeof maybeInit === 'function') {\r\n    // Some environments require a URL/Module/bytes for initialization.\r\n    // We forward the optional value if provided; otherwise let the glue resolve it.\r\n    if (wasmInput !== undefined) {\r\n      await maybeInit(wasmInput);\r\n    } else {\r\n      await maybeInit();\r\n    }\r\n  }\r\n  wasmReady = true;\r\n}\r\n\r\n// Kyber functions\r\nexport async function kyberKeygen(): Promise<KyberKeypair> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_keygen());\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function kyberEncaps(publicB64u: string): Promise<KyberEncap> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_encaps(publicB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function kyberDecaps(secretB64u: string, kemCtB64u: string): Promise<{ shared_b64u: string }> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_decaps(secretB64u, kemCtB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// HKDF functions\r\nexport async function hkdfSha256(\r\n  secretB64u: string,\r\n  infoB64u: string,\r\n  saltB64u?: string,\r\n  len: number = 32\r\n): Promise<HkdfResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_hkdf_sha256(secretB64u, infoB64u, saltB64u, len));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// AES-GCM functions\r\nexport async function aesGcmWrap(\r\n  keyB64u: string,\r\n  dekB64u: string,\r\n  aadB64u: string\r\n): Promise<AesGcmWrap> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_aes_gcm_wrap(keyB64u, dekB64u, aadB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function aesGcmUnwrap(\r\n  keyB64u: string,\r\n  ivB64u: string,\r\n  ctB64u: string,\r\n  aadB64u: string\r\n): Promise<AesGcmUnwrapResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_aes_gcm_unwrap(keyB64u, ivB64u, ctB64u, aadB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// Dilithium functions\r\nexport async function dilithiumKeygen(): Promise<DilithiumKeypair> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_keygen());\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function dilithiumSign(\r\n  messageB64u: string,\r\n  secretB64u: string\r\n): Promise<DilithiumSignResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_sign(messageB64u, secretB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function dilithiumVerify(\r\n  messageB64u: string,\r\n  signatureB64u: string,\r\n  publicB64u: string\r\n): Promise<DilithiumVerifyResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_verify(messageB64u, signatureB64u, publicB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// ---- Deterministic helpers (multisig/art token) ----\r\nexport async function jcsCanonicalize(json: unknown): Promise<string> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).jcs_canonicalize(JSON.stringify(json));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return out.canonical as string;\r\n}\r\n\r\nexport async function buildPolicyPreimage(policy: unknown): Promise<CanonicalOut> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).preimage_governance(JSON.stringify(policy));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };\r\n}\r\n\r\nexport async function buildMintPreimage(header: unknown, asset: unknown): Promise<CanonicalOut> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).preimage_asset_mint(JSON.stringify(header), JSON.stringify(asset));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };\r\n}\r\n\r\nexport async function buildTransferPreimage(header: unknown): Promise<CanonicalOut> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).preimage_asset_transfer(JSON.stringify(header));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };\r\n}\r\n\r\nexport async function buildAnchorPreimage(userId: string, rootHex: string, epoch: string, chains: unknown): Promise<CanonicalOut> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).preimage_anchor(userId, rootHex, epoch, JSON.stringify(chains));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };\r\n}\r\n\r\nexport async function validateRoyalty(receiver: string, bps: number): Promise<boolean> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).validate_royalty(receiver, bps);\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) return false;\r\n  return !!out.ok;\r\n}\r\n\r\nexport async function verifyAttestations(msgB64u: string, attestations: Array<{ alg: string; publicKeyB64u: string; signatureB64u: string }>, allowedPublicKeys?: string[]): Promise<number> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).verify_attestations(msgB64u, JSON.stringify(attestations), allowedPublicKeys ? JSON.stringify(allowedPublicKeys) : undefined);\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return Number(out.valid_count || 0);\r\n}\r\n\r\n// Utility functions\r\n// Cross-env base64url helpers (browser + Node)\r\nfunction _fromByteArray(bytes: Uint8Array): string {\r\n  if (typeof btoa === 'function') {\r\n    // Browser\r\n    let s = '';\r\n    for (let i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]);\r\n    return btoa(s);\r\n  }\r\n  // Node\r\n  return Buffer.from(bytes).toString('base64');\r\n}\r\n\r\nfunction _toByteArray(b64: string): Uint8Array {\r\n  if (typeof atob === 'function') {\r\n    const binary = atob(b64);\r\n    const out = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\r\n    return out;\r\n  }\r\n  return new Uint8Array(Buffer.from(b64, 'base64'));\r\n}\r\n\r\nexport function b64uEncode(data: Uint8Array): string {\r\n  return _fromByteArray(data)\r\n    .replace(/\\+/g, '-')\r\n    .replace(/\\//g, '_')\r\n    .replace(/=+/g, '');\r\n}\r\n\r\nexport function b64uDecode(str: string): Uint8Array {\r\n  const b64 = str.replace(/-/g, '+').replace(/_/g, '/').padEnd(Math.ceil(str.length / 4) * 4, '=');\r\n  return _toByteArray(b64);\r\n}\r\n\r\nexport function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\r\n  if (a.length !== b.length) return false;\r\n  let result = 0;\r\n  for (let i = 0; i < a.length; i++) {\r\n    result |= a[i] ^ b[i];\r\n  }\r\n  return result === 0;\r\n}\r\n"],"names":["wasmPkg"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AAyCA;AAEA,MAAM,iBAAiB,GAAIA,kBAAe,CAAC,YAA4B,CAAC;AACxE,MAAM,iBAAiB,GAAIA,kBAAe,CAAC,YAAqC,CAAC;AACjF,MAAM,iBAAiB,GAAIA,kBAAe,CAAC,YAAgD,CAAC;AAC5F,MAAM,gBAAgB,GAAIA,kBAAe,CAAC,WAA4E,CAAC;AACvH,MAAM,iBAAiB,GAAIA,kBAAe,CAAC,YAA2D,CAAC;AACvG,MAAM,mBAAmB,GAAIA,kBAAe,CAAC,cAA0E,CAAC;AACxH,MAAM,qBAAqB,GAAIA,kBAAe,CAAC,gBAAgC,CAAC;AAChF,MAAM,mBAAmB,GAAIA,kBAAe,CAAC,cAAkD,CAAC;AAChG,MAAM,qBAAqB,GAAIA,kBAAe,CAAC,gBAAiE,CAAC;AAKjH;AACA,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB;;;;AAIG;AACI,eAAe,QAAQ,CAAC,SAAe,EAAA;AAC5C,IAAA,IAAI,SAAS;QAAE,OAAO;AACtB,IAAA,MAAM,SAAS,GAAIA,kBAAe,CAAC,OAAO,CAAC;AAC3C,IAAA,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE;;;AAGnC,QAAA,IAAI,SAAS,KAAK,SAAS,EAAE;AAC3B,YAAA,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;SAC5B;aAAM;YACL,MAAM,SAAS,EAAE,CAAC;SACnB;KACF;IACD,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED;AACO,eAAe,WAAW,GAAA;IAC/B,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,WAAW,CAAC,UAAkB,EAAA;IAClD,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,WAAW,CAAC,UAAkB,EAAE,SAAiB,EAAA;IACrE,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,UAAU,CAC9B,UAAkB,EAClB,QAAgB,EAChB,QAAiB,EACjB,GAAA,GAAc,EAAE,EAAA;IAEhB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,UAAU,CAC9B,OAAe,EACf,OAAe,EACf,OAAe,EAAA;IAEf,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,YAAY,CAChC,OAAe,EACf,MAAc,EACd,MAAc,EACd,OAAe,EAAA;IAEf,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,eAAe,GAAA;IACnC,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,aAAa,CACjC,WAAmB,EACnB,UAAkB,EAAA;IAElB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,eAAe,CACnC,WAAmB,EACnB,aAAqB,EACrB,UAAkB,EAAA;IAElB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,eAAe,CAAC,IAAa,EAAA;IACjD,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAIA,kBAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC,SAAmB,CAAC;AACjC,CAAC;AAEM,eAAe,mBAAmB,CAAC,MAAe,EAAA;IACvD,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAIA,kBAAe,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACzE,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,IAAA,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAEM,eAAe,iBAAiB,CAAC,MAAe,EAAE,KAAc,EAAA;IACrE,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,GAAG,GAAIA,kBAAe,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAChG,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,IAAA,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAEM,eAAe,qBAAqB,CAAC,MAAe,EAAA;IACzD,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAIA,kBAAe,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7E,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,IAAA,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAEM,eAAe,mBAAmB,CAAC,MAAc,EAAE,OAAe,EAAE,KAAa,EAAE,MAAe,EAAA;IACvG,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAIA,kBAAe,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7F,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,IAAA,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAEM,eAAe,eAAe,CAAC,QAAgB,EAAE,GAAW,EAAA;IACjE,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,GAAG,GAAIA,kBAAe,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC7D,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,OAAO,KAAK,CAAC;AAC7B,IAAA,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AAClB,CAAC;AAEM,eAAe,kBAAkB,CAAC,OAAe,EAAE,YAAkF,EAAE,iBAA4B,EAAA;IACxK,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAIA,kBAAe,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,CAAC;AAC3J,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC;AAED;AACA;AACA,SAAS,cAAc,CAAC,KAAiB,EAAA;AACvC,IAAA,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE;;QAE9B,IAAI,CAAC,GAAG,EAAE,CAAC;AACX,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,QAAA,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;KAChB;;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAA;AAC/B,IAAA,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE;AAC9B,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACtE,QAAA,OAAO,GAAG,CAAC;KACZ;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpD,CAAC;AAEK,SAAU,UAAU,CAAC,IAAgB,EAAA;IACzC,OAAO,cAAc,CAAC,IAAI,CAAC;AACxB,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAEK,SAAU,UAAU,CAAC,GAAW,EAAA;AACpC,IAAA,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACjG,IAAA,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAEe,SAAA,iBAAiB,CAAC,CAAa,EAAE,CAAa,EAAA;AAC5D,IAAA,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;AAAE,QAAA,OAAO,KAAK,CAAC;IACxC,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KACvB;IACD,OAAO,MAAM,KAAK,CAAC,CAAC;AACtB;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/index.mjs

@@ -14,14 +14,26 @@ const wasm_dilithium_sign = wasmPkg.dilithium_sign;
 const wasm_dilithium_verify = wasmPkg.dilithium_verify;
 // Initialize WASM
 let wasmReady = false;
-async function initWasm() {
-    if (!wasmReady) {
-        // Call default init if present (web/bundler builds expose a default init function)
-        const maybeInit = wasmPkg.default;
-        if (typeof maybeInit === 'function')
+/**
+ * Initialize the underlying WASM module.
+ * - In browsers/bundlers where the glue knows how to fetch the .wasm, you can call without params.
+ * - If your bundler provides a URL or Module for the .wasm, pass it as the first argument.
+ */
+async function initWasm(wasmInput) {
+    if (wasmReady)
+        return;
+    const maybeInit = wasmPkg.default;
+    if (typeof maybeInit === 'function') {
+        // Some environments require a URL/Module/bytes for initialization.
+        // We forward the optional value if provided; otherwise let the glue resolve it.
+        if (wasmInput !== undefined) {
+            await maybeInit(wasmInput);
+        }
+        else {
             await maybeInit();
-        wasmReady = true;
+        }
     }
+    wasmReady = true;
 }
 // Kyber functions
 async function kyberKeygen() {
@@ -90,20 +102,95 @@ async function dilithiumVerify(messageB64u, signatureB64u, publicB64u) {
         throw new Error(result.error);
     return result;
 }
+// ---- Deterministic helpers (multisig/art token) ----
+async function jcsCanonicalize(json) {
+    await initWasm();
+    const raw = wasmPkg.jcs_canonicalize(JSON.stringify(json));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return out.canonical;
+}
+async function buildPolicyPreimage(policy) {
+    await initWasm();
+    const raw = wasmPkg.preimage_governance(JSON.stringify(policy));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };
+}
+async function buildMintPreimage(header, asset) {
+    await initWasm();
+    const raw = wasmPkg.preimage_asset_mint(JSON.stringify(header), JSON.stringify(asset));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };
+}
+async function buildTransferPreimage(header) {
+    await initWasm();
+    const raw = wasmPkg.preimage_asset_transfer(JSON.stringify(header));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };
+}
+async function buildAnchorPreimage(userId, rootHex, epoch, chains) {
+    await initWasm();
+    const raw = wasmPkg.preimage_anchor(userId, rootHex, epoch, JSON.stringify(chains));
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };
+}
+async function validateRoyalty(receiver, bps) {
+    await initWasm();
+    const raw = wasmPkg.validate_royalty(receiver, bps);
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        return false;
+    return !!out.ok;
+}
+async function verifyAttestations(msgB64u, attestations, allowedPublicKeys) {
+    await initWasm();
+    const raw = wasmPkg.verify_attestations(msgB64u, JSON.stringify(attestations), allowedPublicKeys ? JSON.stringify(allowedPublicKeys) : undefined);
+    const out = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    if (out?.error)
+        throw new Error(out.error);
+    return Number(out.valid_count || 0);
+}
 // Utility functions
+// Cross-env base64url helpers (browser + Node)
+function _fromByteArray(bytes) {
+    if (typeof btoa === 'function') {
+        // Browser
+        let s = '';
+        for (let i = 0; i < bytes.length; i++)
+            s += String.fromCharCode(bytes[i]);
+        return btoa(s);
+    }
+    // Node
+    return Buffer.from(bytes).toString('base64');
+}
+function _toByteArray(b64) {
+    if (typeof atob === 'function') {
+        const binary = atob(b64);
+        const out = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i++)
+            out[i] = binary.charCodeAt(i);
+        return out;
+    }
+    return new Uint8Array(Buffer.from(b64, 'base64'));
+}
 function b64uEncode(data) {
-    return btoa(String.fromCharCode(...data))
+    return _fromByteArray(data)
         .replace(/\+/g, '-')
         .replace(/\//g, '_')
-        .replace(/=/g, '');
+        .replace(/=+/g, '');
 }
 function b64uDecode(str) {
-    const binary = atob(str.replace(/-/g, '+').replace(/_/g, '/'));
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i++) {
-        bytes[i] = binary.charCodeAt(i);
-    }
-    return bytes;
+    const b64 = str.replace(/-/g, '+').replace(/_/g, '/').padEnd(Math.ceil(str.length / 4) * 4, '=');
+    return _toByteArray(b64);
 }
 function constantTimeEqual(a, b) {
     if (a.length !== b.length)
@@ -115,5 +202,5 @@ function constantTimeEqual(a, b) {
     return result === 0;
 }
 
-export { aesGcmUnwrap, aesGcmWrap, b64uDecode, b64uEncode, constantTimeEqual, dilithiumKeygen, dilithiumSign, dilithiumVerify, hkdfSha256, initWasm, kyberDecaps, kyberEncaps, kyberKeygen };
+export { aesGcmUnwrap, aesGcmWrap, b64uDecode, b64uEncode, buildAnchorPreimage, buildMintPreimage, buildPolicyPreimage, buildTransferPreimage, constantTimeEqual, dilithiumKeygen, dilithiumSign, dilithiumVerify, hkdfSha256, initWasm, jcsCanonicalize, kyberDecaps, kyberEncaps, kyberKeygen, validateRoyalty, verifyAttestations };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../src/index.ts"],"sourcesContent":["// Ma'atara Core PQC Toolkit\r\n// Post-Quantum Cryptography for Browser and Node.js\r\n\r\nexport interface KyberKeypair {\r\n  public_b64u: string;\r\n  secret_b64u: string;\r\n}\r\n\r\nexport interface KyberEncap {\r\n  kem_ct_b64u: string;\r\n  shared_b64u: string;\r\n}\r\n\r\nexport interface AesGcmWrap {\r\n  iv_b64u: string;\r\n  ct_b64u: string;\r\n}\r\n\r\nexport interface DilithiumKeypair {\r\n  algorithm: string;\r\n  public_b64u: string;\r\n  secret_b64u: string;\r\n}\r\n\r\nexport interface DilithiumSignResult {\r\n  signature_b64u: string;\r\n  algorithm: string;\r\n}\r\n\r\nexport interface DilithiumVerifyResult {\r\n  is_valid: boolean;\r\n  algorithm: string;\r\n}\r\n\r\nexport interface HkdfResult {\r\n  key_b64u: string;\r\n}\r\n\r\nexport interface AesGcmUnwrapResult {\r\n  dek_b64u: string;\r\n}\r\n\r\n// Import WASM functions (namespace import for better bundler compatibility)\r\nimport * as wasmPkg from '@maatara/core-pqc-wasm';\r\nconst wasm_kyber_keygen = (wasmPkg as any).kyber_keygen as () => string;\r\nconst wasm_kyber_encaps = (wasmPkg as any).kyber_encaps as (p: string) => string;\r\nconst wasm_kyber_decaps = (wasmPkg as any).kyber_decaps as (s: string, c: string) => string;\r\nconst wasm_hkdf_sha256 = (wasmPkg as any).hkdf_sha256 as (s: string, i: string, salt?: string, len?: number) => string;\r\nconst wasm_aes_gcm_wrap = (wasmPkg as any).aes_gcm_wrap as (k: string, d: string, a: string) => string;\r\nconst wasm_aes_gcm_unwrap = (wasmPkg as any).aes_gcm_unwrap as (k: string, iv: string, ct: string, a: string) => string;\r\nconst wasm_dilithium_keygen = (wasmPkg as any).dilithium_keygen as () => string;\r\nconst wasm_dilithium_sign = (wasmPkg as any).dilithium_sign as (m: string, s: string) => string;\r\nconst wasm_dilithium_verify = (wasmPkg as any).dilithium_verify as (m: string, sig: string, p: string) => string;\r\n\r\n// Initialize WASM\r\nlet wasmReady = false;\r\n\r\nexport async function initWasm(): Promise<void> {\r\n  if (!wasmReady) {\r\n  // Call default init if present (web/bundler builds expose a default init function)\r\n  const maybeInit = (wasmPkg as any).default;\r\n  if (typeof maybeInit === 'function') await maybeInit();\r\n    wasmReady = true;\r\n  }\r\n}\r\n\r\n// Kyber functions\r\nexport async function kyberKeygen(): Promise<KyberKeypair> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_keygen());\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function kyberEncaps(publicB64u: string): Promise<KyberEncap> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_encaps(publicB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function kyberDecaps(secretB64u: string, kemCtB64u: string): Promise<{ shared_b64u: string }> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_decaps(secretB64u, kemCtB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// HKDF functions\r\nexport async function hkdfSha256(\r\n  secretB64u: string,\r\n  infoB64u: string,\r\n  saltB64u?: string,\r\n  len: number = 32\r\n): Promise<HkdfResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_hkdf_sha256(secretB64u, infoB64u, saltB64u, len));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// AES-GCM functions\r\nexport async function aesGcmWrap(\r\n  keyB64u: string,\r\n  dekB64u: string,\r\n  aadB64u: string\r\n): Promise<AesGcmWrap> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_aes_gcm_wrap(keyB64u, dekB64u, aadB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function aesGcmUnwrap(\r\n  keyB64u: string,\r\n  ivB64u: string,\r\n  ctB64u: string,\r\n  aadB64u: string\r\n): Promise<AesGcmUnwrapResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_aes_gcm_unwrap(keyB64u, ivB64u, ctB64u, aadB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// Dilithium functions\r\nexport async function dilithiumKeygen(): Promise<DilithiumKeypair> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_keygen());\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function dilithiumSign(\r\n  messageB64u: string,\r\n  secretB64u: string\r\n): Promise<DilithiumSignResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_sign(messageB64u, secretB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function dilithiumVerify(\r\n  messageB64u: string,\r\n  signatureB64u: string,\r\n  publicB64u: string\r\n): Promise<DilithiumVerifyResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_verify(messageB64u, signatureB64u, publicB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// Utility functions\r\nexport function b64uEncode(data: Uint8Array): string {\r\n  return btoa(String.fromCharCode(...data))\r\n    .replace(/\\+/g, '-')\r\n    .replace(/\\//g, '_')\r\n    .replace(/=/g, '');\r\n}\r\n\r\nexport function b64uDecode(str: string): Uint8Array {\r\n  const binary = atob(str.replace(/-/g, '+').replace(/_/g, '/'));\r\n  const bytes = new Uint8Array(binary.length);\r\n  for (let i = 0; i < binary.length; i++) {\r\n    bytes[i] = binary.charCodeAt(i);\r\n  }\r\n  return bytes;\r\n}\r\n\r\nexport function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\r\n  if (a.length !== b.length) return false;\r\n  let result = 0;\r\n  for (let i = 0; i < a.length; i++) {\r\n    result |= a[i] ^ b[i];\r\n  }\r\n  return result === 0;\r\n}\r\n"],"names":[],"mappings":";;AAAA;AACA;AAyCA;AAEA,MAAM,iBAAiB,GAAI,OAAe,CAAC,YAA4B,CAAC;AACxE,MAAM,iBAAiB,GAAI,OAAe,CAAC,YAAqC,CAAC;AACjF,MAAM,iBAAiB,GAAI,OAAe,CAAC,YAAgD,CAAC;AAC5F,MAAM,gBAAgB,GAAI,OAAe,CAAC,WAA4E,CAAC;AACvH,MAAM,iBAAiB,GAAI,OAAe,CAAC,YAA2D,CAAC;AACvG,MAAM,mBAAmB,GAAI,OAAe,CAAC,cAA0E,CAAC;AACxH,MAAM,qBAAqB,GAAI,OAAe,CAAC,gBAAgC,CAAC;AAChF,MAAM,mBAAmB,GAAI,OAAe,CAAC,cAAkD,CAAC;AAChG,MAAM,qBAAqB,GAAI,OAAe,CAAC,gBAAiE,CAAC;AAEjH;AACA,IAAI,SAAS,GAAG,KAAK,CAAC;AAEf,eAAe,QAAQ,GAAA;IAC5B,IAAI,CAAC,SAAS,EAAE;;AAEhB,QAAA,MAAM,SAAS,GAAI,OAAe,CAAC,OAAO,CAAC;QAC3C,IAAI,OAAO,SAAS,KAAK,UAAU;YAAE,MAAM,SAAS,EAAE,CAAC;QACrD,SAAS,GAAG,IAAI,CAAC;KAClB;AACH,CAAC;AAED;AACO,eAAe,WAAW,GAAA;IAC/B,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,WAAW,CAAC,UAAkB,EAAA;IAClD,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,WAAW,CAAC,UAAkB,EAAE,SAAiB,EAAA;IACrE,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,UAAU,CAC9B,UAAkB,EAClB,QAAgB,EAChB,QAAiB,EACjB,GAAA,GAAc,EAAE,EAAA;IAEhB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,UAAU,CAC9B,OAAe,EACf,OAAe,EACf,OAAe,EAAA;IAEf,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,YAAY,CAChC,OAAe,EACf,MAAc,EACd,MAAc,EACd,OAAe,EAAA;IAEf,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,eAAe,GAAA;IACnC,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,aAAa,CACjC,WAAmB,EACnB,UAAkB,EAAA;IAElB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,eAAe,CACnC,WAAmB,EACnB,aAAqB,EACrB,UAAkB,EAAA;IAElB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACM,SAAU,UAAU,CAAC,IAAgB,EAAA;IACzC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;AACtC,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAEK,SAAU,UAAU,CAAC,GAAW,EAAA;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC5C,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;KACjC;AACD,IAAA,OAAO,KAAK,CAAC;AACf,CAAC;AAEe,SAAA,iBAAiB,CAAC,CAAa,EAAE,CAAa,EAAA;AAC5D,IAAA,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;AAAE,QAAA,OAAO,KAAK,CAAC;IACxC,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KACvB;IACD,OAAO,MAAM,KAAK,CAAC,CAAC;AACtB;;;;"}
+{"version":3,"file":"index.mjs","sources":["../src/index.ts"],"sourcesContent":["// Ma'atara Core PQC Toolkit\r\n// Post-Quantum Cryptography for Browser and Node.js\r\n\r\nexport interface KyberKeypair {\r\n  public_b64u: string;\r\n  secret_b64u: string;\r\n}\r\n\r\nexport interface KyberEncap {\r\n  kem_ct_b64u: string;\r\n  shared_b64u: string;\r\n}\r\n\r\nexport interface AesGcmWrap {\r\n  iv_b64u: string;\r\n  ct_b64u: string;\r\n}\r\n\r\nexport interface DilithiumKeypair {\r\n  algorithm: string;\r\n  public_b64u: string;\r\n  secret_b64u: string;\r\n}\r\n\r\nexport interface DilithiumSignResult {\r\n  signature_b64u: string;\r\n  algorithm: string;\r\n}\r\n\r\nexport interface DilithiumVerifyResult {\r\n  is_valid: boolean;\r\n  algorithm: string;\r\n}\r\n\r\nexport interface HkdfResult {\r\n  key_b64u: string;\r\n}\r\n\r\nexport interface AesGcmUnwrapResult {\r\n  dek_b64u: string;\r\n}\r\n\r\n// Import WASM functions (namespace import for better bundler compatibility)\r\nimport * as wasmPkg from '@maatara/core-pqc-wasm';\r\nconst wasm_kyber_keygen = (wasmPkg as any).kyber_keygen as () => string;\r\nconst wasm_kyber_encaps = (wasmPkg as any).kyber_encaps as (p: string) => string;\r\nconst wasm_kyber_decaps = (wasmPkg as any).kyber_decaps as (s: string, c: string) => string;\r\nconst wasm_hkdf_sha256 = (wasmPkg as any).hkdf_sha256 as (s: string, i: string, salt?: string, len?: number) => string;\r\nconst wasm_aes_gcm_wrap = (wasmPkg as any).aes_gcm_wrap as (k: string, d: string, a: string) => string;\r\nconst wasm_aes_gcm_unwrap = (wasmPkg as any).aes_gcm_unwrap as (k: string, iv: string, ct: string, a: string) => string;\r\nconst wasm_dilithium_keygen = (wasmPkg as any).dilithium_keygen as () => string;\r\nconst wasm_dilithium_sign = (wasmPkg as any).dilithium_sign as (m: string, s: string) => string;\r\nconst wasm_dilithium_verify = (wasmPkg as any).dilithium_verify as (m: string, sig: string, p: string) => string;\r\n\r\n// Deterministic/canonicalization and governance helpers\r\nexport interface CanonicalOut { canonical: string; msg_b64u?: string; msgB64u?: string }\r\n\r\n// Initialize WASM\r\nlet wasmReady = false;\r\n\r\n/**\r\n * Initialize the underlying WASM module.\r\n * - In browsers/bundlers where the glue knows how to fetch the .wasm, you can call without params.\r\n * - If your bundler provides a URL or Module for the .wasm, pass it as the first argument.\r\n */\r\nexport async function initWasm(wasmInput?: any): Promise<void> {\r\n  if (wasmReady) return;\r\n  const maybeInit = (wasmPkg as any).default;\r\n  if (typeof maybeInit === 'function') {\r\n    // Some environments require a URL/Module/bytes for initialization.\r\n    // We forward the optional value if provided; otherwise let the glue resolve it.\r\n    if (wasmInput !== undefined) {\r\n      await maybeInit(wasmInput);\r\n    } else {\r\n      await maybeInit();\r\n    }\r\n  }\r\n  wasmReady = true;\r\n}\r\n\r\n// Kyber functions\r\nexport async function kyberKeygen(): Promise<KyberKeypair> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_keygen());\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function kyberEncaps(publicB64u: string): Promise<KyberEncap> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_encaps(publicB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function kyberDecaps(secretB64u: string, kemCtB64u: string): Promise<{ shared_b64u: string }> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_kyber_decaps(secretB64u, kemCtB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// HKDF functions\r\nexport async function hkdfSha256(\r\n  secretB64u: string,\r\n  infoB64u: string,\r\n  saltB64u?: string,\r\n  len: number = 32\r\n): Promise<HkdfResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_hkdf_sha256(secretB64u, infoB64u, saltB64u, len));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// AES-GCM functions\r\nexport async function aesGcmWrap(\r\n  keyB64u: string,\r\n  dekB64u: string,\r\n  aadB64u: string\r\n): Promise<AesGcmWrap> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_aes_gcm_wrap(keyB64u, dekB64u, aadB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function aesGcmUnwrap(\r\n  keyB64u: string,\r\n  ivB64u: string,\r\n  ctB64u: string,\r\n  aadB64u: string\r\n): Promise<AesGcmUnwrapResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_aes_gcm_unwrap(keyB64u, ivB64u, ctB64u, aadB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// Dilithium functions\r\nexport async function dilithiumKeygen(): Promise<DilithiumKeypair> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_keygen());\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function dilithiumSign(\r\n  messageB64u: string,\r\n  secretB64u: string\r\n): Promise<DilithiumSignResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_sign(messageB64u, secretB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\nexport async function dilithiumVerify(\r\n  messageB64u: string,\r\n  signatureB64u: string,\r\n  publicB64u: string\r\n): Promise<DilithiumVerifyResult> {\r\n  await initWasm();\r\n  const result = JSON.parse(wasm_dilithium_verify(messageB64u, signatureB64u, publicB64u));\r\n  if (result.error) throw new Error(result.error);\r\n  return result;\r\n}\r\n\r\n// ---- Deterministic helpers (multisig/art token) ----\r\nexport async function jcsCanonicalize(json: unknown): Promise<string> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).jcs_canonicalize(JSON.stringify(json));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return out.canonical as string;\r\n}\r\n\r\nexport async function buildPolicyPreimage(policy: unknown): Promise<CanonicalOut> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).preimage_governance(JSON.stringify(policy));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };\r\n}\r\n\r\nexport async function buildMintPreimage(header: unknown, asset: unknown): Promise<CanonicalOut> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).preimage_asset_mint(JSON.stringify(header), JSON.stringify(asset));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };\r\n}\r\n\r\nexport async function buildTransferPreimage(header: unknown): Promise<CanonicalOut> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).preimage_asset_transfer(JSON.stringify(header));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };\r\n}\r\n\r\nexport async function buildAnchorPreimage(userId: string, rootHex: string, epoch: string, chains: unknown): Promise<CanonicalOut> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).preimage_anchor(userId, rootHex, epoch, JSON.stringify(chains));\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return { canonical: out.canonical, msg_b64u: out.msg_b64u, msgB64u: out.msg_b64u };\r\n}\r\n\r\nexport async function validateRoyalty(receiver: string, bps: number): Promise<boolean> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).validate_royalty(receiver, bps);\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) return false;\r\n  return !!out.ok;\r\n}\r\n\r\nexport async function verifyAttestations(msgB64u: string, attestations: Array<{ alg: string; publicKeyB64u: string; signatureB64u: string }>, allowedPublicKeys?: string[]): Promise<number> {\r\n  await initWasm();\r\n  const raw = (wasmPkg as any).verify_attestations(msgB64u, JSON.stringify(attestations), allowedPublicKeys ? JSON.stringify(allowedPublicKeys) : undefined);\r\n  const out = typeof raw === 'string' ? JSON.parse(raw) : raw;\r\n  if (out?.error) throw new Error(out.error);\r\n  return Number(out.valid_count || 0);\r\n}\r\n\r\n// Utility functions\r\n// Cross-env base64url helpers (browser + Node)\r\nfunction _fromByteArray(bytes: Uint8Array): string {\r\n  if (typeof btoa === 'function') {\r\n    // Browser\r\n    let s = '';\r\n    for (let i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]);\r\n    return btoa(s);\r\n  }\r\n  // Node\r\n  return Buffer.from(bytes).toString('base64');\r\n}\r\n\r\nfunction _toByteArray(b64: string): Uint8Array {\r\n  if (typeof atob === 'function') {\r\n    const binary = atob(b64);\r\n    const out = new Uint8Array(binary.length);\r\n    for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\r\n    return out;\r\n  }\r\n  return new Uint8Array(Buffer.from(b64, 'base64'));\r\n}\r\n\r\nexport function b64uEncode(data: Uint8Array): string {\r\n  return _fromByteArray(data)\r\n    .replace(/\\+/g, '-')\r\n    .replace(/\\//g, '_')\r\n    .replace(/=+/g, '');\r\n}\r\n\r\nexport function b64uDecode(str: string): Uint8Array {\r\n  const b64 = str.replace(/-/g, '+').replace(/_/g, '/').padEnd(Math.ceil(str.length / 4) * 4, '=');\r\n  return _toByteArray(b64);\r\n}\r\n\r\nexport function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\r\n  if (a.length !== b.length) return false;\r\n  let result = 0;\r\n  for (let i = 0; i < a.length; i++) {\r\n    result |= a[i] ^ b[i];\r\n  }\r\n  return result === 0;\r\n}\r\n"],"names":[],"mappings":";;AAAA;AACA;AAyCA;AAEA,MAAM,iBAAiB,GAAI,OAAe,CAAC,YAA4B,CAAC;AACxE,MAAM,iBAAiB,GAAI,OAAe,CAAC,YAAqC,CAAC;AACjF,MAAM,iBAAiB,GAAI,OAAe,CAAC,YAAgD,CAAC;AAC5F,MAAM,gBAAgB,GAAI,OAAe,CAAC,WAA4E,CAAC;AACvH,MAAM,iBAAiB,GAAI,OAAe,CAAC,YAA2D,CAAC;AACvG,MAAM,mBAAmB,GAAI,OAAe,CAAC,cAA0E,CAAC;AACxH,MAAM,qBAAqB,GAAI,OAAe,CAAC,gBAAgC,CAAC;AAChF,MAAM,mBAAmB,GAAI,OAAe,CAAC,cAAkD,CAAC;AAChG,MAAM,qBAAqB,GAAI,OAAe,CAAC,gBAAiE,CAAC;AAKjH;AACA,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB;;;;AAIG;AACI,eAAe,QAAQ,CAAC,SAAe,EAAA;AAC5C,IAAA,IAAI,SAAS;QAAE,OAAO;AACtB,IAAA,MAAM,SAAS,GAAI,OAAe,CAAC,OAAO,CAAC;AAC3C,IAAA,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE;;;AAGnC,QAAA,IAAI,SAAS,KAAK,SAAS,EAAE;AAC3B,YAAA,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;SAC5B;aAAM;YACL,MAAM,SAAS,EAAE,CAAC;SACnB;KACF;IACD,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED;AACO,eAAe,WAAW,GAAA;IAC/B,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,WAAW,CAAC,UAAkB,EAAA;IAClD,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,WAAW,CAAC,UAAkB,EAAE,SAAiB,EAAA;IACrE,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,UAAU,CAC9B,UAAkB,EAClB,QAAgB,EAChB,QAAiB,EACjB,GAAA,GAAc,EAAE,EAAA;IAEhB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,UAAU,CAC9B,OAAe,EACf,OAAe,EACf,OAAe,EAAA;IAEf,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,YAAY,CAChC,OAAe,EACf,MAAc,EACd,MAAc,EACd,OAAe,EAAA;IAEf,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,eAAe,GAAA;IACnC,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,aAAa,CACjC,WAAmB,EACnB,UAAkB,EAAA;IAElB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,eAAe,eAAe,CACnC,WAAmB,EACnB,aAAqB,EACrB,UAAkB,EAAA;IAElB,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;AACO,eAAe,eAAe,CAAC,IAAa,EAAA;IACjD,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAI,OAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC,SAAmB,CAAC;AACjC,CAAC;AAEM,eAAe,mBAAmB,CAAC,MAAe,EAAA;IACvD,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAI,OAAe,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACzE,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,IAAA,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAEM,eAAe,iBAAiB,CAAC,MAAe,EAAE,KAAc,EAAA;IACrE,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,GAAG,GAAI,OAAe,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAChG,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,IAAA,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAEM,eAAe,qBAAqB,CAAC,MAAe,EAAA;IACzD,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAI,OAAe,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7E,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,IAAA,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAEM,eAAe,mBAAmB,CAAC,MAAc,EAAE,OAAe,EAAE,KAAa,EAAE,MAAe,EAAA;IACvG,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAI,OAAe,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7F,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,IAAA,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACrF,CAAC;AAEM,eAAe,eAAe,CAAC,QAAgB,EAAE,GAAW,EAAA;IACjE,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,GAAG,GAAI,OAAe,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC7D,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,OAAO,KAAK,CAAC;AAC7B,IAAA,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AAClB,CAAC;AAEM,eAAe,kBAAkB,CAAC,OAAe,EAAE,YAAkF,EAAE,iBAA4B,EAAA;IACxK,MAAM,QAAQ,EAAE,CAAC;AACjB,IAAA,MAAM,GAAG,GAAI,OAAe,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,CAAC;AAC3J,IAAA,MAAM,GAAG,GAAG,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC5D,IAAI,GAAG,EAAE,KAAK;AAAE,QAAA,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC;AAED;AACA;AACA,SAAS,cAAc,CAAC,KAAiB,EAAA;AACvC,IAAA,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE;;QAE9B,IAAI,CAAC,GAAG,EAAE,CAAC;AACX,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,QAAA,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;KAChB;;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAA;AAC/B,IAAA,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE;AAC9B,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACtE,QAAA,OAAO,GAAG,CAAC;KACZ;AACD,IAAA,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpD,CAAC;AAEK,SAAU,UAAU,CAAC,IAAgB,EAAA;IACzC,OAAO,cAAc,CAAC,IAAI,CAAC;AACxB,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACnB,SAAA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAEK,SAAU,UAAU,CAAC,GAAW,EAAA;AACpC,IAAA,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACjG,IAAA,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAEe,SAAA,iBAAiB,CAAC,CAAa,EAAE,CAAa,EAAA;AAC5D,IAAA,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;AAAE,QAAA,OAAO,KAAK,CAAC;IACxC,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KACvB;IACD,OAAO,MAAM,KAAK,CAAC,CAAC;AACtB;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maatara/core-pqc",
-  "version": "0.1.2",
+  "version": "0.2.1",
   "description": "Ma'atara Post-Quantum Cryptography Toolkit for Browser and Node.js",
   "type": "module",
   "main": "dist/index.js",
@@ -44,6 +44,6 @@
     "typescript": "^5.0.0"
   },
   "dependencies": {
-    "@maatara/core-pqc-wasm": "^0.1.2"
+    "@maatara/core-pqc-wasm": "^0.2.0"
   }
 }