@nexwage/crypto 0.1.0 → 0.1.2

package/README.md

@@ -1,14 +1,19 @@
 # @nexwage/crypto
 
-Minimal, opinionated crypto building blocks for password-based master keys, recovery keys, and file encryption. Built on libsodium with XChaCha20-Poly1305 and Argon2.
+Library kripto minimal berbasis libsodium untuk alur master key, recovery key, dan enkripsi file. Menggunakan XChaCha20-Poly1305 untuk AEAD dan Argon2 untuk KDF password.
 
-## Install
+## Instalasi
 
 ```sh
 npm i @nexwage/crypto
 ```
 
-## Quick Start
+## Kompatibilitas
+
+- ESM (type: module)
+- Node.js 18+ (direkomendasikan)
+
+## Mulai Cepat
 
 ```ts
 import {
@@ -18,12 +23,14 @@ import {
   wrapMasterKeyWithRecoveryKey,
   generateFileKey,
   wrapFileKeyWithMasterKey,
+  unwrapFileKeyWithMasterKey,
   encryptFileData,
   decryptFileData,
+  fromString,
 } from "@nexwage/crypto";
 
 const password = "strong-password";
-const aad = new TextEncoder().encode("uid:user_123|app:v1|slot:password");
+const aad = fromString("uid:user_123|app:v1|slot:password");
 
 const { masterKey, wrapped } = await generateMasterKeyWithPassword(
   password,
@@ -41,7 +48,7 @@ const wrappedByRecovery = await wrapMasterKeyWithRecoveryKey(
 const fileKey = await generateFileKey();
 const wrappedFileKey = await wrapFileKeyWithMasterKey(fileKey, masterKey, aad);
 
-const fileBytes = new TextEncoder().encode("file rahasia");
+const fileBytes = fromString("file rahasia");
 const encryptedFile = await encryptFileData(fileKey, fileBytes, aad);
 
 const masterKey2 = await unwrapMasterKeyWithPassword(password, wrapped, aad);
@@ -53,36 +60,357 @@ const fileKey2 = await unwrapFileKeyWithMasterKey(
 const decryptedFile = await decryptFileData(fileKey2, encryptedFile, aad);
 ```
 
-## Project Structure
+## Konsep Utama
+
+- Master Key: kunci utama untuk membuka kunci lain.
+- Recovery Key: kunci cadangan jika password hilang.
+- File Key: kunci khusus per file.
+- Wrap/Unwrap: membungkus dan membuka kunci memakai AEAD.
+- AAD: data konteks yang diikat ke ciphertext (tidak dienkripsi).
+- Versioning: field `v` pada payload untuk kompatibilitas format.
+
+## Alur Dasar
+
+Alur 1: Setup awal + upload
+1) Generate master key lalu wrap dengan password.
+2) Generate recovery key.
+3) Wrap master key dengan recovery key (recovery).
+4) Wrap recovery key dengan master key (backup recovery key).
+5) Generate file key.
+6) Wrap file key dengan master key.
+7) Enkripsi file pakai file key.
+
+Alur 2: Buka file (login normal)
+1) Ambil wrapped master key.
+2) Unwrap master key pakai password.
+3) Unwrap file key pakai master key.
+4) Dekripsi file.
+
+Alur 3: Recovery + re-encrypt
+1) Ambil wrapped master key.
+2) Unwrap master key pakai recovery key.
+3) Re-wrap master key dengan password baru.
+
+## Referensi API
+
+Semua fungsi diekspor dari `@nexwage/crypto`.
+
+### Peta Penggunaan di Kasus Industri (Per Domain)
+
+#### Simetris (Password + File + Recovery)
+
+| Metode/Fitur | Kasus Industri Nyata | Kenapa Dipakai | Contoh Implementasi |
+| --- | --- | --- | --- |
+| Master Key + Password KDF | Zero‑knowledge SaaS (password vault, secure notes) | Password tidak pernah dikirim ke server; master key tetap terenkripsi | `generateMasterKeyWithPassword` saat signup, simpan `wrapped` di server |
+| Recovery Key | Recovery akun tanpa reset password | Memberi opsi recovery tanpa membuka password | Simpan `wrapMasterKeyWithRecoveryKey` di server, recovery key dipegang user |
+| File Key + Wrap | Enkripsi per file untuk performa dan isolasi | Setiap file punya key sendiri; kompromi satu file tidak bocor semua | `generateFileKey` + `wrapFileKeyWithMasterKey` per file |
+| AEAD XChaCha20-Poly1305 | Enkripsi data at rest/in transit | Authenticated encryption, tahan tampering | `encryptFileData` / `decryptFileData` |
+| AAD | Bind data ke konteks (userId, fileId, slot) | Mencegah swap/replay antar konteks | AAD berisi `userId|fileId|slot` |
+| Versioning (`v`) | Migrasi format/enkripsi | Menjaga kompatibilitas payload lama | Simpan `v` di payload, upgrade saat decrypt |
+
+#### Asimetris (Key Exchange + Signature)
+
+| Metode/Fitur | Kasus Industri Nyata | Kenapa Dipakai | Contoh Implementasi |
+| --- | --- | --- | --- |
+| Key Exchange (X25519) | Secure session key (chat, realtime sync) | Negosiasi kunci simetris tanpa berbagi rahasia | `deriveClientSessionKeys` + `deriveServerSessionKeys` |
+| Sealed Box | Share ke penerima tanpa keypair pengirim | Enkripsi langsung ke public key penerima | `encryptSealedBox` untuk file sharing 1:1 |
+| Signature (Ed25519) | Audit log, proof of authorship | Verifikasi integritas dan sumber data | Tanda tangan metadata/commit dengan `signMessage` |
+| Signature Anti‑Replay | API request sensitif (approve, payment, revoke) | Mencegah replay dengan nonce+timestamp | `signMessageWithNonce` + simpan nonce di server |
+
+#### Group (MLS-like)
+
+| Metode/Fitur | Kasus Industri Nyata | Kenapa Dipakai | Contoh Implementasi |
+| --- | --- | --- | --- |
+| Group Commit + Epoch | Team sharing (drive tim, workspace) | Rotasi kunci saat member berubah | `createGroupCommit` + `applyGroupCommit` setiap perubahan anggota |
+| Group Key Derivation | Enkripsi grup skala besar | Satu group key untuk banyak file | `deriveGroupKey` untuk wrap file key |
+| Welcome Payload | Onboarding member baru | Distribusi secret awal dengan aman | `createGroupState` + `openGroupWelcome` |
+
+#### Wrapper libsodium
+
+| Metode/Fitur | Kasus Industri Nyata | Kenapa Dipakai | Contoh Implementasi |
+| --- | --- | --- | --- |
+| libsodium Wrapper | Akses primitive low-level | Integrasi fleksibel ke arsitektur existing | `cryptoPwhash`, `aeadXChaCha20Poly1305IetfEncrypt` |
+
+### Tipe Export
+
+- `AeadEnvelopeV1`
+- `PasswordKdfParamsV1`
+- `PasswordWrappedKeyV1`
+- `PasswordKdfOptions`
+- `KeyExchangeKeyPair`
+- `SessionKeys`
+- `SigningKeyPair`
+- `SignedMessageV1`
+- `GroupMember`
+- `GroupMemberWire`
+- `GroupState`
+- `GroupWelcome`
+- `GroupCommit`
+- `GroupCommitAction`
+
+### Master Key
+
+- `generateMasterKey(): Promise<Uint8Array>`
+- `generateMasterKeyWithPassword(password, opts?, aad?): Promise<{ masterKey; wrapped }>`
+- `wrapMasterKeyWithPassword(masterKey, password, opts?, aad?): Promise<PasswordWrappedKeyV1>`
+- `unwrapMasterKeyWithPassword(password, wrapped, aad?): Promise<Uint8Array>`
+
+### Recovery Key
+
+- `generateRecoveryKey(): Promise<Uint8Array>`
+- `wrapMasterKeyWithRecoveryKey(masterKey, recoveryKey, aad?): Promise<AeadEnvelopeV1>`
+- `unwrapMasterKeyWithRecoveryKey(recoveryKey, wrapped, aad?): Promise<Uint8Array>`
+- `wrapRecoveryKeyWithMasterKey(recoveryKey, masterKey, aad?): Promise<AeadEnvelopeV1>`
+- `unwrapRecoveryKeyWithMasterKey(masterKey, wrapped, aad?): Promise<Uint8Array>`
+
+### File Encryption
+
+- `generateFileKey(): Promise<Uint8Array>`
+- `wrapFileKeyWithMasterKey(fileKey, masterKey, aad?): Promise<AeadEnvelopeV1>`
+- `unwrapFileKeyWithMasterKey(masterKey, wrapped, aad?): Promise<Uint8Array>`
+- `encryptFileData(fileKey, plaintext, aad?): Promise<AeadEnvelopeV1>`
+- `decryptFileData(fileKey, wrapped, aad?): Promise<Uint8Array>`
+
+### Password KDF
+
+- `deriveKeyFromPassword(password, opts?): Promise<{ key; kdf }>`
+- `wrapKeyWithPassword(key, password, opts?, aad?): Promise<PasswordWrappedKeyV1>`
+- `unwrapKeyWithPassword(password, wrapped, aad?): Promise<Uint8Array>`
+
+Opsi KDF (`PasswordKdfOptions`):
+- `opslimit` (number)
+- `memlimit` (number)
+- `salt` (Uint8Array)
+
+### Utilitas Encoding
+
+- `encodeBase64(u8): string`
+- `decodeBase64(s): Uint8Array`
+- `fromString(s): Uint8Array`
+- `toString(u8): string`
+
+### Wrapper libsodium
+
+Wrapper disediakan agar fungsi libsodium bisa dipanggil dari library ini:
+
+- `sodiumReady(): Promise<void>`: wajib dipanggil jika ingin akses konstanta libsodium secara aman.
+- `randombytesBuf(size): Uint8Array`
+- `cryptoPwhash(outLen, password, salt, opslimit, memlimit, alg): Uint8Array`
+- `cryptoPwhashSaltBytes`
+- `cryptoPwhashOpslimitModerate`
+- `cryptoPwhashMemlimitModerate`
+- `aeadXChaCha20Poly1305IetfEncrypt(message, aad, secretNonce, publicNonce, key)`
+- `aeadXChaCha20Poly1305IetfDecrypt(secretNonce, ciphertext, aad, publicNonce, key)`
+- `aeadXChaCha20Poly1305IetfNpubBytes`
+- `toBase64(u8): string`
+- `fromBase64(s): Uint8Array`
+- `base64VariantOriginal`
+- `memcmp(a, b): boolean`
+- `sodium` (akses penuh ke instance libsodium)
+
+Catatan: konstanta seperti `cryptoPwhashSaltBytes` diisi setelah `sodiumReady()` dipanggil.
+
+### Asimetris: Key Exchange & Signature
+
+Library ini menyediakan dua keypair terpisah:
+1) X25519 untuk key exchange/shared key.
+2) Ed25519 untuk tanda tangan digital.
+
+Key exchange (X25519):
+- `generateKeyExchangeKeyPair(): Promise<{ publicKey; privateKey }>`
+- `deriveClientSessionKeys(clientKeyPair, serverPublicKey): Promise<{ rx; tx }>`
+- `deriveServerSessionKeys(serverKeyPair, clientPublicKey): Promise<{ rx; tx }>`
+- `encryptSealedBox(message, recipientPublicKey): Promise<Uint8Array>`
+- `decryptSealedBox(ciphertext, recipientKeyPair): Promise<Uint8Array>`
+
+Signature (Ed25519):
+- `generateSigningKeyPair(): Promise<{ publicKey; privateKey }>`
+- `signMessage(message, privateKey): Promise<Uint8Array>`
+- `verifySignature(message, signature, publicKey): Promise<boolean>`
+- `signMessageWithNonce(message, privateKey, opts?): Promise<SignedMessageV1>`
+- `verifySignedMessage(payload, publicKey): Promise<boolean>`
+
+Anti‑replay:
+- `signMessageWithNonce` menambahkan `nonce` + `timestamp` ke payload yang ditandatangani.
+- Simpan nonce yang sudah dipakai (mis. di cache/DB) untuk mencegah replay.
+
+### Group (MLS-like, tahap awal)
+
+Implementasi awal untuk group key management dengan commit + epoch. Saat ini masih O(n) karena secret baru dibagikan via sealed box ke setiap member. Struktur API disiapkan agar dapat ditingkatkan ke tree-based MLS.
+
+- `createGroupState(groupId, members): Promise<{ state; welcome }>`
+- `openGroupWelcome(welcome, recipientId, recipientKeyPair): Promise<GroupState>`
+- `deriveGroupKey(state): Promise<Uint8Array>`
+- `createGroupCommit(state, senderId, senderSignPrivateKey, action, updates?): Promise<{ commit; state }>`
+- `verifyGroupCommitSignature(commit, senderSignPublicKey): Promise<boolean>`
+- `applyGroupCommit(state, commit, recipientId, recipientKeyPair, senderSignPublicKey): Promise<GroupState>`
+
+Catatan:
+- `GroupMember.signPublicKey` bersifat opsional dan hanya diperlukan jika kamu ingin menyimpan public key signature di metadata group.
+- Semua payload group disarankan disimpan sebagai JSON di server (zero-knowledge friendly).
+
+## Format Payload
+
+AEAD envelope:
+```json
+{
+  "v": 1,
+  "nonce": "base64",
+  "ct": "base64"
+}
+```
+
+Password-wrapped key:
+```json
+{
+  "v": 1,
+  "kdf": { "v": 1, "salt": "...", "opslimit": 3, "memlimit": 268435456 },
+  "nonce": "....",
+  "ct": "...."
+}
+```
+
+## AAD (Additional Authenticated Data)
 
-| Path | Purpose |
+AAD digunakan untuk mengikat ciphertext ke konteks (mis. userId, slot, fileId). Jika AAD salah, proses decrypt akan gagal.
+
+Contoh AAD:
+```ts
+import { fromString } from "@nexwage/crypto";
+const aad = fromString("uid:user_123|app:v1|slot:password");
+```
+
+## Penanganan Error
+
+- Jika ukuran key/salt/nonce salah, fungsi akan melempar error validasi.
+- Jika password/AAD salah, decrypt akan gagal dan melempar error.
+
+## Struktur Proyek
+
+| Path | Tujuan |
 | --- | --- |
 | `src/index.ts` | Public exports. |
-| `src/types.ts` | Payload types + versioning. |
-| `src/crypto/password-kdf.ts` | Password KDF + key wrapping. |
-| `src/crypto/master-key.ts` | Master key lifecycle. |
+| `src/types.ts` | Tipe payload dan versioning. |
+| `src/crypto/password-kdf.ts` | KDF password + wrap/unwrap key. |
+| `src/crypto/master-key.ts` | Lifecycle master key. |
 | `src/crypto/recovery-key.ts` | Recovery key wrapping. |
-| `src/crypto/file-encryption.ts` | File key + file encryption. |
-| `src/utils/encoding.ts` | Base64 helpers. |
-| `src/utils/bytes.ts` | Byte length assertions. |
-| `src/sodium.ts` | libsodium wrapper exports. |
-| `examples/basic-flow.ts` | End-to-end flow. |
-| `examples/master-key-example.ts` | Master key example. |
+| `src/crypto/file-encryption.ts` | File key + enkripsi/dekripsi file. |
+| `src/crypto/key-exchange.ts` | Key exchange (X25519) + sealed box. |
+| `src/crypto/signature.ts` | Tanda tangan digital (Ed25519). |
+| `src/crypto/group.ts` | Group key management (MLS-like tahap awal). |
+| `src/utils/encoding.ts` | Helper base64. |
+| `src/utils/bytes.ts` | Validasi panjang bytes. |
+| `src/sodium.ts` | Wrapper libsodium. |
+| `examples/basic-flow.ts` | Contoh alur end-to-end. |
+| `examples/master-key-example.ts` | Contoh master key + KDF. |
+| `examples/asymmetric-key-exchange.ts` | Contoh key exchange + sealed box. |
+| `examples/asymmetric-signature.ts` | Contoh signature. |
+| `examples/group-basic.ts` | Contoh group basic. |
+| `SIMULATION.md` | Simulasi ringkas simetris & asimetris. |
+
+## Pengujian
+
+```sh
+npm test
+```
 
-## AAD and Versioning
+## Build
 
-- AAD (Additional Authenticated Data) binds ciphertext to context (userId, slot, fileId).
-- Versioning (`v`) keeps payloads forward-compatible when formats or algorithms change.
+```sh
+npm run build
+```
 
-## Manual Test
+## Examples
 
-See `examples/basic-flow.ts` for the full 3-flow example.
+Jalankan contoh:
 
-## Glossary
+```sh
+npm run example:kx
+npm run example:sign
+npm run example:basic
+npm run example:group
+```
+
+Contoh output (ringkas):
+
+Key exchange + sealed box:
+```text
+[kx] generate keypairs
+[kx] client public key (b64): ...
+[kx] server public key (b64): ...
+[kx] derive session keys
+[kx] client tx (b64): ...
+[kx] client rx (b64): ...
+[kx] server tx (b64): ...
+[kx] server rx (b64): ...
+[kx] shared tx/rx matches (base64 compare):
+[kx] client tx == server rx: true
+[kx] client rx == server tx: true
+[sealed] encrypt to server public key
+[sealed] ciphertext (b64): ...
+[sealed] ciphertext bytes: ...
+[sealed] decrypt with server keypair
+[sealed] plaintext: hello sealed box
+```
+
+Signature:
+```text
+[sign] generate keypair
+[sign] public key (b64): ...
+[sign] private key bytes: 64
+[sign] message bytes: ...
+[sign] create signature
+[sign] signature (b64): ...
+[sign] signature bytes: 64
+[sign] verify signature (valid)
+[sign] result: true
+[sign] verify signature (invalid)
+[sign] result: false
+```
+
+Basic flow:
+```text
+[alur1] masterKey: ...
+[alur1] wrappedMasterKey: ...
+[alur1] wrappedMasterKeyByRecovery: ...
+[alur1] wrappedRecoveryKey: ...
+[alur1] wrappedFileKey: ...
+[alur1] encryptedFile: ...
+[alur2] masterKey2: ...
+[alur2] fileKey2: ...
+[alur2] fileBytes2: file rahasia
+[alur3] masterKey3: ...
+[alur3] wrappedMasterKeyNew: ...
+[alur3] wrappedMasterKeyByRecoveryNew: ...
+[done] semua alur OK
+```
 
-Panduan ringkas istilah dan konsep yang dipakai di modul ini.
+Contoh output error (AAD/password salah):
+```text
+Error: Gagal membuka file: ciphertext/AAD/keys tidak valid
+Error: Gagal membuka key: ciphertext/AAD/keys tidak valid
+Error: Gagal membuka payload: ciphertext/AAD/keys tidak valid
+```
+
+Group:
+```text
+[group] create members
+[group] create group state
+[group] welcome epoch: 0
+[group] members: alice, bob
+[group] bob open welcome
+[group] bob groupKey epoch 0 (b64): ...
+[group] add carol with commit
+[group] commit epoch: 1
+[group] commit action: add
+[group] commit members: alice, bob, carol
+[group] bob apply commit
+[group] bob groupKey epoch 1 (b64): ...
+```
 
-| Term | Meaning |
+## Glossary
+
+| Istilah | Makna |
 | --- | --- |
 | Master Key (MK) | Kunci utama untuk membuka kunci lain (file key, recovery key). |
 | Recovery Key | Kunci cadangan jika lupa password. |
@@ -96,76 +424,6 @@ Panduan ringkas istilah dan konsep yang dipakai di modul ini.
 | Envelope | Struktur payload berisi `nonce`, `ct`, dan `v`. |
 | Versioning (v) | Versi format payload. |
 
-## libsodium Functions Used
-
-| Function/Property | Description |
-| --- | --- |
-| `sodium.ready` | Menunggu libsodium siap dipakai. |
-| `sodium.randombytes_buf` | Generate bytes acak (kunci, nonce). |
-| `sodium.crypto_pwhash` | Derivasi key dari password (Argon2). |
-| `sodium.crypto_pwhash_SALTBYTES` | Panjang salt untuk KDF. |
-| `sodium.crypto_pwhash_OPSLIMIT_MODERATE` | Default opslimit KDF. |
-| `sodium.crypto_pwhash_MEMLIMIT_MODERATE` | Default memlimit KDF. |
-| `sodium.crypto_aead_xchacha20poly1305_ietf_encrypt` | Enkripsi AEAD XChaCha20-Poly1305. |
-| `sodium.crypto_aead_xchacha20poly1305_ietf_decrypt` | Dekripsi AEAD XChaCha20-Poly1305. |
-| `sodium.crypto_aead_xchacha20poly1305_ietf_NPUBBYTES` | Panjang nonce AEAD XChaCha20-Poly1305. |
-| `sodium.to_base64` | Encode bytes ke base64. |
-| `sodium.from_base64` | Decode base64 ke bytes. |
-| `sodium.base64_variants.ORIGINAL` | Variant base64 yang dipakai. |
-| `sodium.from_string` | Encode string ke bytes (UTF-8). |
-| `sodium.to_string` | Decode bytes ke string (UTF-8). |
-| `sodium.memcmp` | Bandingkan bytes secara aman (constant-time). |
-
-## Planned libsodium Functions
-
-| Function/Property | Planned use |
-| --- | --- |
-| `sodium.crypto_generichash` | Hash konteks/AAD jika perlu bentuk stabil dan ringkas. |
-| `sodium.crypto_kdf_derive_from_key` | Derivasi sub-key per domain dari satu kunci root. |
-| `sodium.crypto_aead_aes256gcm_encrypt` | Alternatif AEAD dengan akselerasi hardware. |
-| `sodium.crypto_aead_aes256gcm_decrypt` | Pasangan decrypt AES-GCM. |
-| `sodium.crypto_secretbox_easy` | Enkripsi simetris sederhana untuk payload non-AEAD. |
-| `sodium.crypto_secretbox_open_easy` | Dekripsi secretbox. |
-
-## AAD Example
-
-```ts
-import { fromString } from "@nexwage/crypto";
-
-const aad = fromString("uid:user_123|app:v1|slot:password");
-```
-
-## KDF Parameters
-
-| Parameter | Purpose |
-| --- | --- |
-| opslimit | Jumlah operasi KDF (lebih besar = lebih lambat, lebih tahan brute-force). |
-| memlimit | Batas memori KDF (lebih besar = lebih tahan GPU/ASIC). |
-| salt | Salt acak 32-byte untuk mencegah rainbow table. |
+## Lisensi
 
-## Envelope Format
-
-```json
-{
-  "v": 1,
-  "nonce": "base64",
-  "ct": "base64"
-}
-```
-
-## Versioning Rules
-
-1. Saat encrypt, isi `v` dengan versi terbaru.
-2. Saat decrypt, cek `v` lalu pilih logika yang sesuai.
-3. Jika `v` tidak didukung, tolak dekripsi atau lakukan migrasi.
-
-Contoh payload:
-
-```json
-{
-  "v": 1,
-  "kdf": { "v": 1, "salt": "...", "opslimit": 3, "memlimit": 268435456 },
-  "nonce": "....",
-  "ct": "...."
-}
-```
+ISC

package/dist/crypto/group.d.ts

@@ -0,0 +1,102 @@
+export type GroupMember = {
+    id: string;
+    encPublicKey: Uint8Array;
+    signPublicKey?: Uint8Array;
+};
+export type GroupMemberWire = {
+    id: string;
+    encPublicKey: string;
+    signPublicKey?: string;
+};
+export type GroupState = {
+    groupId: string;
+    epoch: number;
+    members: GroupMember[];
+    secret: Uint8Array;
+};
+export type GroupWelcome = {
+    groupId: string;
+    epoch: number;
+    members: GroupMemberWire[];
+    encryptedSecrets: Record<string, string>;
+};
+export type GroupCommitAction = "add" | "remove" | "rotate";
+export type GroupCommit = {
+    groupId: string;
+    epoch: number;
+    senderId: string;
+    action: GroupCommitAction;
+    members: GroupMemberWire[];
+    removedMemberIds?: string[];
+    encryptedSecrets: Record<string, string>;
+    signature: string;
+};
+type KeyPair = {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+};
+/**
+ * Buat group baru dengan secret awal.
+ *
+ * @param groupId - ID group.
+ * @param members - Daftar member awal.
+ * @returns State group dan welcome payload.
+ */
+export declare function createGroupState(groupId: string, members: GroupMember[]): Promise<{
+    state: GroupState;
+    welcome: GroupWelcome;
+}>;
+/**
+ * Buka welcome payload untuk memperoleh state group.
+ *
+ * @param welcome - Welcome payload.
+ * @param recipientId - ID member penerima.
+ * @param recipientKeyPair - Keypair enkripsi penerima.
+ * @returns State group.
+ */
+export declare function openGroupWelcome(welcome: GroupWelcome, recipientId: string, recipientKeyPair: KeyPair): Promise<GroupState>;
+/**
+ * Derivasi group key dari secret + epoch.
+ *
+ * @param state - State group.
+ * @returns Group key 32-byte.
+ */
+export declare function deriveGroupKey(state: GroupState): Promise<Uint8Array>;
+/**
+ * Buat commit untuk add/remove/rotate member.
+ *
+ * @param state - State group saat ini.
+ * @param senderId - ID pengirim commit.
+ * @param senderSignPrivateKey - Private key Ed25519 pengirim.
+ * @param action - Jenis aksi commit.
+ * @param memberUpdates - Member yang ditambah/dihapus.
+ * @returns Commit + state baru.
+ */
+export declare function createGroupCommit(state: GroupState, senderId: string, senderSignPrivateKey: Uint8Array, action: GroupCommitAction, memberUpdates?: {
+    add?: GroupMember[];
+    removeIds?: string[];
+}): Promise<{
+    commit: GroupCommit;
+    state: GroupState;
+}>;
+/**
+ * Verifikasi signature commit.
+ *
+ * @param commit - Commit payload.
+ * @param senderSignPublicKey - Public key Ed25519 pengirim.
+ * @returns True jika valid.
+ */
+export declare function verifyGroupCommitSignature(commit: GroupCommit, senderSignPublicKey: Uint8Array): Promise<boolean>;
+/**
+ * Apply commit ke state lokal.
+ *
+ * @param state - State saat ini.
+ * @param commit - Commit terbaru.
+ * @param recipientId - ID member penerima.
+ * @param recipientKeyPair - Keypair enkripsi penerima.
+ * @param senderSignPublicKey - Public key Ed25519 pengirim.
+ * @returns State baru.
+ */
+export declare function applyGroupCommit(state: GroupState, commit: GroupCommit, recipientId: string, recipientKeyPair: KeyPair, senderSignPublicKey: Uint8Array): Promise<GroupState>;
+export {};
+//# sourceMappingURL=group.d.ts.map

package/dist/crypto/group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.d.ts","sourceRoot":"","sources":["../../src/crypto/group.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,UAAU,CAAC;IACzB,aAAa,CAAC,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE5D,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,OAAO,GAAG;IAAE,SAAS,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC;AAqFjE;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,WAAW,EAAE,GACrB,OAAO,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC,CAwBvD;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,gBAAgB,EAAE,OAAO,GACxB,OAAO,CAAC,UAAU,CAAC,CAYrB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAa3E;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,oBAAoB,EAAE,UAAU,EAChC,MAAM,EAAE,iBAAiB,EACzB,aAAa,CAAC,EAAE;IACd,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,GACA,OAAO,CAAC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CAyDrD;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,WAAW,EACnB,mBAAmB,EAAE,UAAU,GAC9B,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,MAAM,EACnB,gBAAgB,EAAE,OAAO,EACzB,mBAAmB,EAAE,UAAU,GAC9B,OAAO,CAAC,UAAU,CAAC,CAsBrB"}

package/dist/crypto/group.js

@@ -0,0 +1,228 @@
+import sodium from "libsodium-wrappers-sumo";
+import { assertByteLength } from "../utils/bytes.js";
+import { decodeBase64, encodeBase64 } from "../utils/encoding.js";
+function sortMembers(members) {
+    return [...members].sort((a, b) => a.id.localeCompare(b.id));
+}
+function toWireMember(member) {
+    const base = {
+        id: member.id,
+        encPublicKey: encodeBase64(member.encPublicKey),
+    };
+    return member.signPublicKey
+        ? { ...base, signPublicKey: encodeBase64(member.signPublicKey) }
+        : base;
+}
+function toStateMember(member) {
+    const base = {
+        id: member.id,
+        encPublicKey: decodeBase64(member.encPublicKey),
+    };
+    return member.signPublicKey
+        ? { ...base, signPublicKey: decodeBase64(member.signPublicKey) }
+        : base;
+}
+function canonicalizeCommitForSigning(commit) {
+    const members = sortMembers(commit.members);
+    const encryptedSecrets = Object.keys(commit.encryptedSecrets)
+        .sort()
+        .reduce((acc, key) => {
+        const value = commit.encryptedSecrets[key];
+        if (value) {
+            acc[key] = value;
+        }
+        return acc;
+    }, {});
+    return JSON.stringify({
+        groupId: commit.groupId,
+        epoch: commit.epoch,
+        senderId: commit.senderId,
+        action: commit.action,
+        members,
+        removedMemberIds: commit.removedMemberIds ?? [],
+        encryptedSecrets,
+    });
+}
+async function encryptSecretForMember(secret, member) {
+    await sodium.ready;
+    assertByteLength("encPublicKey", member.encPublicKey, sodium.crypto_box_PUBLICKEYBYTES);
+    const ciphertext = sodium.crypto_box_seal(secret, member.encPublicKey);
+    return encodeBase64(ciphertext);
+}
+async function decryptSecretForMember(ciphertextB64, keyPair) {
+    await sodium.ready;
+    assertByteLength("encPublicKey", keyPair.publicKey, sodium.crypto_box_PUBLICKEYBYTES);
+    assertByteLength("encPrivateKey", keyPair.privateKey, sodium.crypto_box_SECRETKEYBYTES);
+    const ciphertext = decodeBase64(ciphertextB64);
+    return sodium.crypto_box_seal_open(ciphertext, keyPair.publicKey, keyPair.privateKey);
+}
+/**
+ * Buat group baru dengan secret awal.
+ *
+ * @param groupId - ID group.
+ * @param members - Daftar member awal.
+ * @returns State group dan welcome payload.
+ */
+export async function createGroupState(groupId, members) {
+    await sodium.ready;
+    const secret = sodium.randombytes_buf(32);
+    const sortedMembers = sortMembers(members);
+    const encryptedSecrets = {};
+    for (const member of sortedMembers) {
+        encryptedSecrets[member.id] = await encryptSecretForMember(secret, member);
+    }
+    return {
+        state: {
+            groupId,
+            epoch: 0,
+            members: sortedMembers,
+            secret,
+        },
+        welcome: {
+            groupId,
+            epoch: 0,
+            members: sortedMembers.map(toWireMember),
+            encryptedSecrets,
+        },
+    };
+}
+/**
+ * Buka welcome payload untuk memperoleh state group.
+ *
+ * @param welcome - Welcome payload.
+ * @param recipientId - ID member penerima.
+ * @param recipientKeyPair - Keypair enkripsi penerima.
+ * @returns State group.
+ */
+export async function openGroupWelcome(welcome, recipientId, recipientKeyPair) {
+    const ciphertextB64 = welcome.encryptedSecrets[recipientId];
+    if (!ciphertextB64) {
+        throw new Error("Welcome tidak berisi secret untuk member ini");
+    }
+    const secret = await decryptSecretForMember(ciphertextB64, recipientKeyPair);
+    return {
+        groupId: welcome.groupId,
+        epoch: welcome.epoch,
+        members: welcome.members.map(toStateMember),
+        secret,
+    };
+}
+/**
+ * Derivasi group key dari secret + epoch.
+ *
+ * @param state - State group.
+ * @returns Group key 32-byte.
+ */
+export async function deriveGroupKey(state) {
+    await sodium.ready;
+    const epochBytes = new Uint8Array(4);
+    const view = new DataView(epochBytes.buffer);
+    view.setUint32(0, state.epoch, false);
+    const context = new TextEncoder().encode("group-key");
+    const input = new Uint8Array(context.length + epochBytes.length + state.secret.length);
+    input.set(context, 0);
+    input.set(epochBytes, context.length);
+    input.set(state.secret, context.length + epochBytes.length);
+    return sodium.crypto_generichash(32, input);
+}
+/**
+ * Buat commit untuk add/remove/rotate member.
+ *
+ * @param state - State group saat ini.
+ * @param senderId - ID pengirim commit.
+ * @param senderSignPrivateKey - Private key Ed25519 pengirim.
+ * @param action - Jenis aksi commit.
+ * @param memberUpdates - Member yang ditambah/dihapus.
+ * @returns Commit + state baru.
+ */
+export async function createGroupCommit(state, senderId, senderSignPrivateKey, action, memberUpdates) {
+    await sodium.ready;
+    assertByteLength("senderSignPrivateKey", senderSignPrivateKey, sodium.crypto_sign_SECRETKEYBYTES);
+    const removeIds = new Set(memberUpdates?.removeIds ?? []);
+    const members = action === "add"
+        ? sortMembers([...(state.members ?? []), ...(memberUpdates?.add ?? [])])
+        : action === "remove"
+            ? sortMembers(state.members.filter((m) => !removeIds.has(m.id)))
+            : sortMembers(state.members);
+    const secret = sodium.randombytes_buf(32);
+    const encryptedSecrets = {};
+    for (const member of members) {
+        encryptedSecrets[member.id] = await encryptSecretForMember(secret, member);
+    }
+    const basePayload = {
+        groupId: state.groupId,
+        epoch: state.epoch + 1,
+        senderId,
+        action,
+        members: members.map(toWireMember),
+        encryptedSecrets,
+    };
+    const payload = action === "remove"
+        ? {
+            ...basePayload,
+            removedMemberIds: Array.from(removeIds.values()),
+        }
+        : basePayload;
+    const toSign = canonicalizeCommitForSigning(payload);
+    const signature = sodium.crypto_sign_detached(new TextEncoder().encode(toSign), senderSignPrivateKey);
+    return {
+        commit: {
+            ...payload,
+            signature: encodeBase64(signature),
+        },
+        state: {
+            groupId: state.groupId,
+            epoch: state.epoch + 1,
+            members,
+            secret,
+        },
+    };
+}
+/**
+ * Verifikasi signature commit.
+ *
+ * @param commit - Commit payload.
+ * @param senderSignPublicKey - Public key Ed25519 pengirim.
+ * @returns True jika valid.
+ */
+export async function verifyGroupCommitSignature(commit, senderSignPublicKey) {
+    await sodium.ready;
+    assertByteLength("senderSignPublicKey", senderSignPublicKey, sodium.crypto_sign_PUBLICKEYBYTES);
+    const { signature, ...payload } = commit;
+    const toVerify = canonicalizeCommitForSigning(payload);
+    return sodium.crypto_sign_verify_detached(decodeBase64(signature), new TextEncoder().encode(toVerify), senderSignPublicKey);
+}
+/**
+ * Apply commit ke state lokal.
+ *
+ * @param state - State saat ini.
+ * @param commit - Commit terbaru.
+ * @param recipientId - ID member penerima.
+ * @param recipientKeyPair - Keypair enkripsi penerima.
+ * @param senderSignPublicKey - Public key Ed25519 pengirim.
+ * @returns State baru.
+ */
+export async function applyGroupCommit(state, commit, recipientId, recipientKeyPair, senderSignPublicKey) {
+    if (commit.groupId !== state.groupId) {
+        throw new Error("groupId commit tidak cocok");
+    }
+    if (commit.epoch !== state.epoch + 1) {
+        throw new Error("epoch commit tidak valid");
+    }
+    const ok = await verifyGroupCommitSignature(commit, senderSignPublicKey);
+    if (!ok) {
+        throw new Error("signature commit tidak valid");
+    }
+    const ciphertextB64 = commit.encryptedSecrets[recipientId];
+    if (!ciphertextB64) {
+        throw new Error("commit tidak berisi secret untuk member ini");
+    }
+    const secret = await decryptSecretForMember(ciphertextB64, recipientKeyPair);
+    return {
+        groupId: commit.groupId,
+        epoch: commit.epoch,
+        members: commit.members.map(toStateMember),
+        secret,
+    };
+}
+//# sourceMappingURL=group.js.map

package/dist/crypto/group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.js","sourceRoot":"","sources":["../../src/crypto/group.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,yBAAyB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AA2ClE,SAAS,WAAW,CAA2B,OAAY;IACzD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACvC,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;KAChD,CAAC;IACF,OAAO,MAAM,CAAC,aAAa;QACzB,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;QAChE,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,MAAuB;IAC5C,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;KAChD,CAAC;IACF,OAAO,MAAM,CAAC,aAAa;QACzB,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;QAChE,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAsC;IAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;SAC1D,IAAI,EAAE;SACN,MAAM,CAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE;QAC/C,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,MAAkB,EAClB,MAAmB;IAEnB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,cAAc,EACd,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACvE,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,aAAqB,EACrB,OAAgB;IAEhB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,cAAc,EACd,OAAO,CAAC,SAAS,EACjB,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,gBAAgB,CACd,eAAe,EACf,OAAO,CAAC,UAAU,EAClB,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,oBAAoB,CAChC,UAAU,EACV,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,UAAU,CACnB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,OAAsB;IAEtB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IAEpD,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,KAAK,EAAE;YACL,OAAO;YACP,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,aAAa;YACtB,MAAM;SACP;QACD,OAAO,EAAE;YACP,OAAO;YACP,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC;YACxC,gBAAgB;SACjB;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAqB,EACrB,WAAmB,EACnB,gBAAyB;IAEzB,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC7E,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC3C,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiB;IACpD,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,UAAU,CAC1B,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CACzD,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAiB,EACjB,QAAgB,EAChB,oBAAgC,EAChC,MAAyB,EACzB,aAGC;IAED,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,CAAC,0BAA0B,CAClC,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,GACX,MAAM,KAAK,KAAK;QACd,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,MAAM,KAAK,QAAQ;YACrB,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IAEpD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;QACtB,QAAQ;QACR,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAClC,gBAAgB;KACjB,CAAC;IACF,MAAM,OAAO,GACX,MAAM,KAAK,QAAQ;QACjB,CAAC,CAAC;YACE,GAAG,WAAW;YACd,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;SACjD;QACH,CAAC,CAAC,WAAW,CAAC;IAElB,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAC3C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAChC,oBAAoB,CACrB,CAAC;IAEF,OAAO;QACL,MAAM,EAAE;YACN,GAAG,OAAO;YACV,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;SACnC;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;YACtB,OAAO;YACP,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAmB,EACnB,mBAA+B;IAE/B,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,qBAAqB,EACrB,mBAAmB,EACnB,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IACzC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,2BAA2B,CACvC,YAAY,CAAC,SAAS,CAAC,EACvB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAiB,EACjB,MAAmB,EACnB,WAAmB,EACnB,gBAAyB,EACzB,mBAA+B;IAE/B,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzE,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC7E,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC1C,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/crypto/key-exchange.d.ts

@@ -0,0 +1,61 @@
+export type KeyExchangeKeyPair = {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+};
+export type SessionKeys = {
+    rx: Uint8Array;
+    tx: Uint8Array;
+};
+/**
+ * Generate key pair untuk key exchange (X25519).
+ *
+ * @returns Public/private key pair.
+ */
+export declare function generateKeyExchangeKeyPair(): Promise<KeyExchangeKeyPair>;
+/**
+ * Generate public key (X25519) dari private key untuk key exchange.
+ *
+ * @param privateKey - Private key X25519.
+ * @returns Public key X25519.
+ */
+export declare function deriveKeyExchangePublicKeyFromPrivateKey(privateKey: Uint8Array): Promise<Uint8Array>;
+/**
+ * Rekonstruksi keypair key exchange dari private key (public key akan diderivasi).
+ *
+ * @param privateKey - Private key X25519.
+ * @returns Public/private key pair.
+ */
+export declare function keyExchangeKeyPairFromPrivateKey(privateKey: Uint8Array): Promise<KeyExchangeKeyPair>;
+/**
+ * Derivasi session keys untuk sisi client.
+ *
+ * @param clientKeyPair - Key pair client.
+ * @param serverPublicKey - Public key server.
+ * @returns Session keys { rx, tx }.
+ */
+export declare function deriveClientSessionKeys(clientKeyPair: KeyExchangeKeyPair, serverPublicKey: Uint8Array): Promise<SessionKeys>;
+/**
+ * Derivasi session keys untuk sisi server.
+ *
+ * @param serverKeyPair - Key pair server.
+ * @param clientPublicKey - Public key client.
+ * @returns Session keys { rx, tx }.
+ */
+export declare function deriveServerSessionKeys(serverKeyPair: KeyExchangeKeyPair, clientPublicKey: Uint8Array): Promise<SessionKeys>;
+/**
+ * Enkripsi sealed box ke penerima menggunakan public key (tanpa keypair pengirim).
+ *
+ * @param message - Plaintext.
+ * @param recipientPublicKey - Public key penerima.
+ * @returns Ciphertext.
+ */
+export declare function encryptSealedBox(message: Uint8Array, recipientPublicKey: Uint8Array): Promise<Uint8Array>;
+/**
+ * Dekripsi sealed box menggunakan keypair penerima.
+ *
+ * @param ciphertext - Ciphertext.
+ * @param recipientKeyPair - Key pair penerima.
+ * @returns Plaintext.
+ */
+export declare function decryptSealedBox(ciphertext: Uint8Array, recipientKeyPair: KeyExchangeKeyPair): Promise<Uint8Array>;
+//# sourceMappingURL=key-exchange.d.ts.map

package/dist/crypto/key-exchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-exchange.d.ts","sourceRoot":"","sources":["../../src/crypto/key-exchange.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,UAAU,CAAC;IACf,EAAE,EAAE,UAAU,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAI9E;AAED;;;;;GAKG;AACH,wBAAsB,wCAAwC,CAC5D,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,kBAAkB,EACjC,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,WAAW,CAAC,CAuBtB;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,kBAAkB,EACjC,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,WAAW,CAAC,CAuBtB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,UAAU,EACnB,kBAAkB,EAAE,UAAU,GAC7B,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,kBAAkB,GACnC,OAAO,CAAC,UAAU,CAAC,CAiBrB"}

package/dist/crypto/key-exchange.js

@@ -0,0 +1,89 @@
+import sodium from "libsodium-wrappers-sumo";
+import { assertByteLength } from "../utils/bytes.js";
+/**
+ * Generate key pair untuk key exchange (X25519).
+ *
+ * @returns Public/private key pair.
+ */
+export async function generateKeyExchangeKeyPair() {
+    await sodium.ready;
+    const { publicKey, privateKey } = sodium.crypto_kx_keypair();
+    return { publicKey, privateKey };
+}
+/**
+ * Generate public key (X25519) dari private key untuk key exchange.
+ *
+ * @param privateKey - Private key X25519.
+ * @returns Public key X25519.
+ */
+export async function deriveKeyExchangePublicKeyFromPrivateKey(privateKey) {
+    await sodium.ready;
+    assertByteLength("privateKey", privateKey, sodium.crypto_kx_SECRETKEYBYTES);
+    return sodium.crypto_scalarmult_base(privateKey);
+}
+/**
+ * Rekonstruksi keypair key exchange dari private key (public key akan diderivasi).
+ *
+ * @param privateKey - Private key X25519.
+ * @returns Public/private key pair.
+ */
+export async function keyExchangeKeyPairFromPrivateKey(privateKey) {
+    const publicKey = await deriveKeyExchangePublicKeyFromPrivateKey(privateKey);
+    return { publicKey, privateKey };
+}
+/**
+ * Derivasi session keys untuk sisi client.
+ *
+ * @param clientKeyPair - Key pair client.
+ * @param serverPublicKey - Public key server.
+ * @returns Session keys { rx, tx }.
+ */
+export async function deriveClientSessionKeys(clientKeyPair, serverPublicKey) {
+    await sodium.ready;
+    assertByteLength("clientPublicKey", clientKeyPair.publicKey, sodium.crypto_kx_PUBLICKEYBYTES);
+    assertByteLength("clientPrivateKey", clientKeyPair.privateKey, sodium.crypto_kx_SECRETKEYBYTES);
+    assertByteLength("serverPublicKey", serverPublicKey, sodium.crypto_kx_PUBLICKEYBYTES);
+    const { sharedRx, sharedTx } = sodium.crypto_kx_client_session_keys(clientKeyPair.publicKey, clientKeyPair.privateKey, serverPublicKey);
+    return { rx: sharedRx, tx: sharedTx };
+}
+/**
+ * Derivasi session keys untuk sisi server.
+ *
+ * @param serverKeyPair - Key pair server.
+ * @param clientPublicKey - Public key client.
+ * @returns Session keys { rx, tx }.
+ */
+export async function deriveServerSessionKeys(serverKeyPair, clientPublicKey) {
+    await sodium.ready;
+    assertByteLength("serverPublicKey", serverKeyPair.publicKey, sodium.crypto_kx_PUBLICKEYBYTES);
+    assertByteLength("serverPrivateKey", serverKeyPair.privateKey, sodium.crypto_kx_SECRETKEYBYTES);
+    assertByteLength("clientPublicKey", clientPublicKey, sodium.crypto_kx_PUBLICKEYBYTES);
+    const { sharedRx, sharedTx } = sodium.crypto_kx_server_session_keys(serverKeyPair.publicKey, serverKeyPair.privateKey, clientPublicKey);
+    return { rx: sharedRx, tx: sharedTx };
+}
+/**
+ * Enkripsi sealed box ke penerima menggunakan public key (tanpa keypair pengirim).
+ *
+ * @param message - Plaintext.
+ * @param recipientPublicKey - Public key penerima.
+ * @returns Ciphertext.
+ */
+export async function encryptSealedBox(message, recipientPublicKey) {
+    await sodium.ready;
+    assertByteLength("recipientPublicKey", recipientPublicKey, sodium.crypto_box_PUBLICKEYBYTES);
+    return sodium.crypto_box_seal(message, recipientPublicKey);
+}
+/**
+ * Dekripsi sealed box menggunakan keypair penerima.
+ *
+ * @param ciphertext - Ciphertext.
+ * @param recipientKeyPair - Key pair penerima.
+ * @returns Plaintext.
+ */
+export async function decryptSealedBox(ciphertext, recipientKeyPair) {
+    await sodium.ready;
+    assertByteLength("recipientPublicKey", recipientKeyPair.publicKey, sodium.crypto_box_PUBLICKEYBYTES);
+    assertByteLength("recipientPrivateKey", recipientKeyPair.privateKey, sodium.crypto_box_SECRETKEYBYTES);
+    return sodium.crypto_box_seal_open(ciphertext, recipientKeyPair.publicKey, recipientKeyPair.privateKey);
+}
+//# sourceMappingURL=key-exchange.js.map

package/dist/crypto/key-exchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-exchange.js","sourceRoot":"","sources":["../../src/crypto/key-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,yBAAyB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAYrD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;IAC7D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,UAAsB;IAEtB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,YAAY,EACZ,UAAU,EACV,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,OAAO,MAAM,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,UAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,wCAAwC,CAAC,UAAU,CAAC,CAAC;IAC7E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAiC,EACjC,eAA2B;IAE3B,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,iBAAiB,EACjB,aAAa,CAAC,SAAS,EACvB,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,gBAAgB,CACd,kBAAkB,EAClB,aAAa,CAAC,UAAU,EACxB,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,gBAAgB,CACd,iBAAiB,EACjB,eAAe,EACf,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,6BAA6B,CACjE,aAAa,CAAC,SAAS,EACvB,aAAa,CAAC,UAAU,EACxB,eAAe,CAChB,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAiC,EACjC,eAA2B;IAE3B,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,iBAAiB,EACjB,aAAa,CAAC,SAAS,EACvB,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,gBAAgB,CACd,kBAAkB,EAClB,aAAa,CAAC,UAAU,EACxB,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,gBAAgB,CACd,iBAAiB,EACjB,eAAe,EACf,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,6BAA6B,CACjE,aAAa,CAAC,SAAS,EACvB,aAAa,CAAC,UAAU,EACxB,eAAe,CAChB,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAmB,EACnB,kBAA8B;IAE9B,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,oBAAoB,EACpB,kBAAkB,EAClB,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,OAAO,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAsB,EACtB,gBAAoC;IAEpC,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,oBAAoB,EACpB,gBAAgB,CAAC,SAAS,EAC1B,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,gBAAgB,CACd,qBAAqB,EACrB,gBAAgB,CAAC,UAAU,EAC3B,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,OAAO,MAAM,CAAC,oBAAoB,CAChC,UAAU,EACV,gBAAgB,CAAC,SAAS,EAC1B,gBAAgB,CAAC,UAAU,CAC5B,CAAC;AACJ,CAAC"}

package/dist/crypto/signature.d.ts

@@ -0,0 +1,55 @@
+export type SigningKeyPair = {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+};
+export type SignedMessageV1 = {
+    v: 1;
+    nonce: string;
+    ts: number;
+    message: string;
+    signature: string;
+};
+/**
+ * Generate key pair untuk tanda tangan (Ed25519).
+ *
+ * @returns Public/private key pair.
+ */
+export declare function generateSigningKeyPair(): Promise<SigningKeyPair>;
+/**
+ * Buat signature detached untuk message.
+ *
+ * @param message - Data input.
+ * @param privateKey - Private key Ed25519.
+ * @returns Signature.
+ */
+export declare function signMessage(message: Uint8Array, privateKey: Uint8Array): Promise<Uint8Array>;
+/**
+ * Verifikasi signature untuk message.
+ *
+ * @param message - Data input.
+ * @param signature - Signature detached.
+ * @param publicKey - Public key Ed25519.
+ * @returns True jika valid.
+ */
+export declare function verifySignature(message: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): Promise<boolean>;
+/**
+ * Buat signature dengan nonce/timestamp untuk anti‑replay.
+ *
+ * @param message - Data input.
+ * @param privateKey - Private key Ed25519.
+ * @param opts - Opsi nonce/timestamp.
+ * @returns Payload signature terstruktur.
+ */
+export declare function signMessageWithNonce(message: Uint8Array, privateKey: Uint8Array, opts?: {
+    nonce?: Uint8Array;
+    timestampMs?: number;
+}): Promise<SignedMessageV1>;
+/**
+ * Verifikasi payload signature anti‑replay.
+ *
+ * @param payload - Payload signature.
+ * @param publicKey - Public key Ed25519.
+ * @returns True jika valid.
+ */
+export declare function verifySignedMessage(payload: SignedMessageV1, publicKey: Uint8Array): Promise<boolean>;
+//# sourceMappingURL=signature.d.ts.map

package/dist/crypto/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/crypto/signature.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAaF;;;;GAIG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,cAAc,CAAC,CAItE;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,UAAU,EACtB,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,UAAU,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,eAAe,CAAC,CA4B1B;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAqBlB"}

package/dist/crypto/signature.js

@@ -0,0 +1,95 @@
+import sodium from "libsodium-wrappers-sumo";
+import { assertByteLength } from "../utils/bytes.js";
+import { decodeBase64, encodeBase64 } from "../utils/encoding.js";
+const SIGNED_NONCE_BYTES = 24;
+function canonicalizeSignedPayload(payload) {
+    return JSON.stringify({
+        v: payload.v,
+        nonce: payload.nonce,
+        ts: payload.ts,
+        message: payload.message,
+    });
+}
+/**
+ * Generate key pair untuk tanda tangan (Ed25519).
+ *
+ * @returns Public/private key pair.
+ */
+export async function generateSigningKeyPair() {
+    await sodium.ready;
+    const { publicKey, privateKey } = sodium.crypto_sign_keypair();
+    return { publicKey, privateKey };
+}
+/**
+ * Buat signature detached untuk message.
+ *
+ * @param message - Data input.
+ * @param privateKey - Private key Ed25519.
+ * @returns Signature.
+ */
+export async function signMessage(message, privateKey) {
+    await sodium.ready;
+    assertByteLength("privateKey", privateKey, sodium.crypto_sign_SECRETKEYBYTES);
+    return sodium.crypto_sign_detached(message, privateKey);
+}
+/**
+ * Verifikasi signature untuk message.
+ *
+ * @param message - Data input.
+ * @param signature - Signature detached.
+ * @param publicKey - Public key Ed25519.
+ * @returns True jika valid.
+ */
+export async function verifySignature(message, signature, publicKey) {
+    await sodium.ready;
+    assertByteLength("publicKey", publicKey, sodium.crypto_sign_PUBLICKEYBYTES);
+    return sodium.crypto_sign_verify_detached(signature, message, publicKey);
+}
+/**
+ * Buat signature dengan nonce/timestamp untuk anti‑replay.
+ *
+ * @param message - Data input.
+ * @param privateKey - Private key Ed25519.
+ * @param opts - Opsi nonce/timestamp.
+ * @returns Payload signature terstruktur.
+ */
+export async function signMessageWithNonce(message, privateKey, opts) {
+    await sodium.ready;
+    assertByteLength("privateKey", privateKey, sodium.crypto_sign_SECRETKEYBYTES);
+    const nonce = opts?.nonce ?? sodium.randombytes_buf(SIGNED_NONCE_BYTES);
+    assertByteLength("nonce", nonce, SIGNED_NONCE_BYTES);
+    const payload = {
+        v: 1,
+        nonce: encodeBase64(nonce),
+        ts: opts?.timestampMs ?? Date.now(),
+        message: encodeBase64(message),
+    };
+    const toSign = canonicalizeSignedPayload(payload);
+    const signature = sodium.crypto_sign_detached(new TextEncoder().encode(toSign), privateKey);
+    return {
+        ...payload,
+        signature: encodeBase64(signature),
+    };
+}
+/**
+ * Verifikasi payload signature anti‑replay.
+ *
+ * @param payload - Payload signature.
+ * @param publicKey - Public key Ed25519.
+ * @returns True jika valid.
+ */
+export async function verifySignedMessage(payload, publicKey) {
+    await sodium.ready;
+    assertByteLength("publicKey", publicKey, sodium.crypto_sign_PUBLICKEYBYTES);
+    const nonce = decodeBase64(payload.nonce);
+    assertByteLength("nonce", nonce, SIGNED_NONCE_BYTES);
+    const signature = decodeBase64(payload.signature);
+    const toVerify = canonicalizeSignedPayload({
+        v: payload.v,
+        nonce: payload.nonce,
+        ts: payload.ts,
+        message: payload.message,
+    });
+    return sodium.crypto_sign_verify_detached(signature, new TextEncoder().encode(toVerify), publicKey);
+}
+//# sourceMappingURL=signature.js.map

package/dist/crypto/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/crypto/signature.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,yBAAyB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAelE,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,SAAS,yBAAyB,CAAC,OAA2C;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC/D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAmB,EACnB,UAAsB;IAEtB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,YAAY,EACZ,UAAU,EACV,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,OAAO,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAmB,EACnB,SAAqB,EACrB,SAAqB;IAErB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,WAAW,EACX,SAAS,EACT,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,OAAO,MAAM,CAAC,2BAA2B,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAmB,EACnB,UAAsB,EACtB,IAAmD;IAEnD,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,YAAY,EACZ,UAAU,EACV,MAAM,CAAC,0BAA0B,CAClC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACxE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAErD,MAAM,OAAO,GAAuC;QAClD,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;QAC1B,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE;QACnC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;KAC/B,CAAC;IAEF,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAC3C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAChC,UAAU,CACX,CAAC;IAEF,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;KACnC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAwB,EACxB,SAAqB;IAErB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,WAAW,EACX,SAAS,EACT,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QACzC,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,2BAA2B,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,SAAS,CACV,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -2,6 +2,13 @@ export type { AeadEnvelopeV1, PasswordKdfParamsV1, PasswordWrappedKeyV1 } from "
 export { generateFileKey, wrapFileKeyWithMasterKey, unwrapFileKeyWithMasterKey, encryptFileData, decryptFileData, } from "./crypto/file-encryption.js";
 export { generateMasterKey, generateMasterKeyWithPassword, wrapMasterKeyWithPassword, unwrapMasterKeyWithPassword, } from "./crypto/master-key.js";
 export { generateRecoveryKey, wrapMasterKeyWithRecoveryKey, unwrapMasterKeyWithRecoveryKey, wrapRecoveryKeyWithMasterKey, unwrapRecoveryKeyWithMasterKey, } from "./crypto/recovery-key.js";
+export type { KeyExchangeKeyPair, SessionKeys } from "./crypto/key-exchange.js";
+export { generateKeyExchangeKeyPair, deriveKeyExchangePublicKeyFromPrivateKey, keyExchangeKeyPairFromPrivateKey, deriveClientSessionKeys, deriveServerSessionKeys, encryptSealedBox, decryptSealedBox, } from "./crypto/key-exchange.js";
+export type { SigningKeyPair } from "./crypto/signature.js";
+export { generateSigningKeyPair, signMessage, signMessageWithNonce, verifySignature, verifySignedMessage, } from "./crypto/signature.js";
+export type { SignedMessageV1 } from "./crypto/signature.js";
+export type { GroupMember, GroupMemberWire, GroupState, GroupWelcome, GroupCommit, GroupCommitAction, } from "./crypto/group.js";
+export { createGroupState, openGroupWelcome, deriveGroupKey, createGroupCommit, verifyGroupCommitSignature, applyGroupCommit, } from "./crypto/group.js";
 export type { PasswordKdfOptions } from "./crypto/password-kdf.js";
 export { deriveKeyFromPassword, wrapKeyWithPassword, unwrapKeyWithPassword, } from "./crypto/password-kdf.js";
 export { encodeBase64, decodeBase64 } from "./utils/encoding.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE5F,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAElC,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EACL,MAAM,EACN,KAAK,IAAI,WAAW,EACpB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE5F,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAElC,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EACL,0BAA0B,EAC1B,wCAAwC,EACxC,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAElC,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,YAAY,EACV,WAAW,EACX,eAAe,EACf,UAAU,EACV,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EACL,MAAM,EACN,KAAK,IAAI,WAAW,EACpB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,6 +1,9 @@
 export { generateFileKey, wrapFileKeyWithMasterKey, unwrapFileKeyWithMasterKey, encryptFileData, decryptFileData, } from "./crypto/file-encryption.js";
 export { generateMasterKey, generateMasterKeyWithPassword, wrapMasterKeyWithPassword, unwrapMasterKeyWithPassword, } from "./crypto/master-key.js";
 export { generateRecoveryKey, wrapMasterKeyWithRecoveryKey, unwrapMasterKeyWithRecoveryKey, wrapRecoveryKeyWithMasterKey, unwrapRecoveryKeyWithMasterKey, } from "./crypto/recovery-key.js";
+export { generateKeyExchangeKeyPair, deriveKeyExchangePublicKeyFromPrivateKey, keyExchangeKeyPairFromPrivateKey, deriveClientSessionKeys, deriveServerSessionKeys, encryptSealedBox, decryptSealedBox, } from "./crypto/key-exchange.js";
+export { generateSigningKeyPair, signMessage, signMessageWithNonce, verifySignature, verifySignedMessage, } from "./crypto/signature.js";
+export { createGroupState, openGroupWelcome, deriveGroupKey, createGroupCommit, verifyGroupCommitSignature, applyGroupCommit, } from "./crypto/group.js";
 export { deriveKeyFromPassword, wrapKeyWithPassword, unwrapKeyWithPassword, } from "./crypto/password-kdf.js";
 export { encodeBase64, decodeBase64 } from "./utils/encoding.js";
 export { sodium, ready as sodiumReady, randombytesBuf, cryptoPwhash, cryptoPwhashSaltBytes, cryptoPwhashOpslimitModerate, cryptoPwhashMemlimitModerate, aeadXChaCha20Poly1305IetfEncrypt, aeadXChaCha20Poly1305IetfDecrypt, aeadXChaCha20Poly1305IetfNpubBytes, toBase64, fromBase64, base64VariantOriginal, fromString, toString, memcmp, } from "./sodium.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EACL,MAAM,EACN,KAAK,IAAI,WAAW,EACpB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,0BAA0B,EAC1B,wCAAwC,EACxC,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EACL,MAAM,EACN,KAAK,IAAI,WAAW,EACpB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,aAAa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexwage/crypto",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Minimal crypto building blocks using libsodium (XChaCha20-Poly1305 + Argon2).",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -13,7 +13,11 @@
   "scripts": {
     "test": "NODE_OPTIONS=--experimental-vm-modules jest --coverage",
     "start": "tsx examples/basic-flow.ts",
-    "build": "tsc -p tsconfig.json"
+    "build": "tsc -p tsconfig.json",
+    "example:kx": "tsx examples/asymmetric-key-exchange.ts",
+    "example:sign": "tsx examples/asymmetric-signature.ts",
+    "example:basic": "tsx examples/basic-flow.ts",
+    "example:group": "tsx examples/group-basic.ts"
   },
   "keywords": [],
   "author": "",