@majikah/majik-signature-client 0.6.13 → 0.6.15

package/README.md

@@ -20,7 +20,7 @@ Designed to be used natively within the Majikah ecosystem, it inherits all core
 You can instantiate and fully hydrate the client and its storage adapters in a single call using the static `create` method.
 
 ```typescript
-import { MajikSignatureClient } from "your-path-here"; // Update with actual package export
+import { MajikSignatureClient } from "@majikah/majik-signature-client";
 
 // 1. Initialize and hydrate the client state, keys, contacts, and stamps
 const client = await MajikSignatureClient.create({

package/dist/core/types.d.ts

@@ -1,7 +1,6 @@
 import { MajikContactManagerJSON } from "./contacts/types";
 import { MajikSignatureStampJSON } from "./stamp/majik-signature-stamp";
 import { UserAppPreferences } from "./storage";
-export type ISODateString = string;
 export interface MAJIK_API_RESPONSE {
     success: boolean;
     message: string;

package/dist/index.d.ts

@@ -7,6 +7,7 @@ export * from "./core/crypto/constants";
 export * from "./core/crypto/keystore-manager";
 export * from "./core/storage";
 export * from "./core/stamp/majik-signature-stamp";
+export * from "@majikah/majik-key";
 export { DEFAULT_USER_APP_PREFERENCES } from "./core/client-state-manager";
 export * from "./core/utils/utilities";
 export { migrateMajikMessageJSON } from "./core/contacts/majik-contact-migration";

package/dist/index.js

@@ -6,6 +6,7 @@ export * from "./core/crypto/constants";
 export * from "./core/crypto/keystore-manager";
 export * from "./core/storage";
 export * from "./core/stamp/majik-signature-stamp";
+export * from "@majikah/majik-key";
 export { DEFAULT_USER_APP_PREFERENCES } from "./core/client-state-manager";
 export * from "./core/utils/utilities";
 export { migrateMajikMessageJSON } from "./core/contacts/majik-contact-migration";

package/dist/majik-signature-client.d.ts

@@ -16,7 +16,7 @@
  */
 import { MajikKey, MajikKeyAddress } from "@majikah/majik-key";
 import { MajikSignature } from "@majikah/majik-signature";
-import type { EnvelopeInfo, ExpectedSigner, MajikSignatureJSON, MajikSignerPublicKeys, SealInfo, SealVerificationResult, SignatoriesFilter, SignatoriesResult, SignatoryInfo, SignOptions, VerificationResult } from "@majikah/majik-signature";
+import type { EnvelopeInfo, ExpectedSigner, MajikSignatureEnvelope, MajikSignatureEnvelopeJSON, MajikSignatureJSON, MajikSignerPublicKeys, SealInfo, SealVerificationResult, SignatoriesFilter, SignatoriesResult, SignatoryInfo, SignOptions, VerificationResult } from "@majikah/majik-signature";
 import { MAJIK_API_RESPONSE } from "./core/types";
 import { ImageSignatureStub, ImageSignOptions, ImageVerificationResult } from "@majikah/majik-signature/dist/core/stamp";
 import { MajikContactManager, MajikContactManagerAdapters } from "./core/contacts/majik-contact-manager";
@@ -320,6 +320,22 @@ export declare class MajikSignatureClient extends MajikKeyClient<MajikContact, M
         accountId?: string;
         expectedSigners?: ExpectedSigner[];
     }): Promise<ReturnType<typeof MajikSignature.signFile>>;
+    /**
+     * Sign a file with a detached signature envelope.
+     *
+     * @example
+     *   const { blob: signedPdf } = await majik.signFileDetached(pdfBlob);
+     *
+     * @example — non-active account
+     *   const { blob } = await majik.signFileDetached(wavBlob, { accountId: "acc_xyz" });
+     */
+    signFileDetached(file: Blob, options?: {
+        contentType?: string;
+        timestamp?: string;
+        mimeType?: string;
+        accountId?: string;
+        expectedSigners?: ExpectedSigner[];
+    }): Promise<ReturnType<typeof MajikSignature.signFileDetached>>;
     /**
      * Sign multiple file blobs with the active (or specified) account in one call.
      *
@@ -383,6 +399,23 @@ export declare class MajikSignatureClient extends MajikKeyClient<MajikContact, M
         handler?: string;
         reason?: string;
     }>;
+    /**
+     * Verify a file's detached signature.
+     *
+     * @example — verify a signed PDF's detached signature against a known contact
+     *   const result = await majik.verifyFileDetached(signedPdf, envelope, { contactId: "contact_abc" });
+     *   if (result.valid) console.log("Verified:", result.signerId, result.timestamp);
+     */
+    verifyFileDetached(file: Blob, envelope: MajikSignatureEnvelope | MajikSignatureEnvelopeJSON, options?: {
+        contactId?: string;
+        publicKeyBase64?: string;
+        key?: MajikKey;
+        expectedSignerId?: string;
+        mimeType?: string;
+    }): Promise<VerificationResult & {
+        handler?: string;
+        reason?: string;
+    }>;
     /**
      * Verify multiple files' embedded signatures against the same signer in
      * one call.

package/dist/majik-signature-client.js

@@ -779,6 +779,48 @@ export class MajikSignatureClient extends MajikKeyClient {
                 key?.lock();
         }
     }
+    /**
+     * Sign a file with a detached signature envelope.
+     *
+     * @example
+     *   const { blob: signedPdf } = await majik.signFileDetached(pdfBlob);
+     *
+     * @example — non-active account
+     *   const { blob } = await majik.signFileDetached(wavBlob, { accountId: "acc_xyz" });
+     */
+    async signFileDetached(file, options) {
+        const id = options?.accountId ?? this.getActiveAccount()?.id;
+        if (!id)
+            throw new Error("No active account — call setActiveAccount() first");
+        let key;
+        let shouldRelock = false;
+        try {
+            await this._keys.ensureUnlocked(id);
+            key = this._keys.get(id);
+            if (!key)
+                throw new Error(`Account not found in keystore: "${id}"`);
+            if (!key.hasSigningKeys) {
+                throw new Error(`Account "${id}" has no signing keys. ` +
+                    `Re-import via importAccountFromMnemonicBackup() to enable signing.`);
+            }
+            shouldRelock = !(await this.isOnetimeUnlockEnabled());
+            const signedResponse = await MajikSignature.signFileDetached(file, key, {
+                contentType: options?.contentType,
+                timestamp: options?.timestamp,
+                mimeType: options?.mimeType,
+                expectedSigners: options?.expectedSigners,
+            });
+            return signedResponse;
+        }
+        catch (err) {
+            this._emit("error", err, { context: "signFileDetached" });
+            throw err;
+        }
+        finally {
+            if (shouldRelock)
+                key?.lock();
+        }
+    }
     /**
      * Sign multiple file blobs with the active (or specified) account in one call.
      *
@@ -897,7 +939,49 @@ export class MajikSignatureClient extends MajikKeyClient {
             const results = await MajikSignature.verifyFile(file, firstSig.extractPublicKeys(), {
                 expectedSignerId: firstSig.signerId,
                 mimeType: options?.mimeType,
-            }, true);
+            });
+            return results[0];
+        }
+        catch (err) {
+            this._emit("error", err, { context: "verifyFile" });
+            throw err;
+        }
+    }
+    /**
+     * Verify a file's detached signature.
+     *
+     * @example — verify a signed PDF's detached signature against a known contact
+     *   const result = await majik.verifyFileDetached(signedPdf, envelope, { contactId: "contact_abc" });
+     *   if (result.valid) console.log("Verified:", result.signerId, result.timestamp);
+     */
+    async verifyFileDetached(file, envelope, options) {
+        try {
+            const publicKeys = await this._resolveSignerPublicKeys(options);
+            if (publicKeys) {
+                const results = await MajikSignature.verifyFileDetached(file, envelope, publicKeys, {
+                    expectedSignerId: options?.expectedSignerId,
+                    mimeType: options?.mimeType,
+                });
+                return results[0];
+            }
+            // No signer provided — extract and use self-reported keys from first signature.
+            const extracted = await MajikSignature.extractFrom(file, {
+                mimeType: options?.mimeType,
+            });
+            if (!extracted.length) {
+                return {
+                    valid: false,
+                    signerId: "",
+                    contentHash: "",
+                    timestamp: new Date().toISOString(),
+                    reason: "No embedded signature found",
+                };
+            }
+            const firstSig = extracted[0];
+            const results = await MajikSignature.verifyFileDetached(file, envelope, firstSig.extractPublicKeys(), {
+                expectedSignerId: firstSig.signerId,
+                mimeType: options?.mimeType,
+            });
             return results[0];
         }
         catch (err) {

package/package.json

@@ -2,7 +2,7 @@
   "name": "@majikah/majik-signature-client",
   "type": "module",
   "description": "Majik Signature Client is a hybrid post-quantum content signing and verification library for the Majikah ecosystem. Built on top of Majik Key Client, it provides tamper-proof, forgery-resistant digital signatures for any content format — using a dual-algorithm architecture that combines classical Ed25519 with post-quantum ML-DSA-87 (FIPS-204).",
-  "version": "0.6.13",
+  "version": "0.6.15",
   "license": "Apache-2.0",
   "author": "Zelijah",
   "main": "./dist/index.js",
@@ -57,7 +57,7 @@
     "@majikah/majik-file": "^0.2.4",
     "@majikah/majik-key": "^0.3.4",
     "@majikah/majik-key-client": "^0.1.8",
-    "@majikah/majik-signature": "^0.2.1",
+    "@majikah/majik-signature": "^0.2.3",
     "@stablelib/ed25519": "^2.1.0",
     "ed2curve": "^0.3.0",
     "fflate": "^0.8.3"