@nexwage/crypto 0.1.1 → 0.1.2

package/README.md

@@ -115,6 +115,7 @@ Semua fungsi diekspor dari `@nexwage/crypto`.
 | Key Exchange (X25519) | Secure session key (chat, realtime sync) | Negosiasi kunci simetris tanpa berbagi rahasia | `deriveClientSessionKeys` + `deriveServerSessionKeys` |
 | Sealed Box | Share ke penerima tanpa keypair pengirim | Enkripsi langsung ke public key penerima | `encryptSealedBox` untuk file sharing 1:1 |
 | Signature (Ed25519) | Audit log, proof of authorship | Verifikasi integritas dan sumber data | Tanda tangan metadata/commit dengan `signMessage` |
+| Signature Anti‑Replay | API request sensitif (approve, payment, revoke) | Mencegah replay dengan nonce+timestamp | `signMessageWithNonce` + simpan nonce di server |
 
 #### Group (MLS-like)
 
@@ -139,6 +140,7 @@ Semua fungsi diekspor dari `@nexwage/crypto`.
 - `KeyExchangeKeyPair`
 - `SessionKeys`
 - `SigningKeyPair`
+- `SignedMessageV1`
 - `GroupMember`
 - `GroupMemberWire`
 - `GroupState`
@@ -225,6 +227,12 @@ Signature (Ed25519):
 - `generateSigningKeyPair(): Promise<{ publicKey; privateKey }>`
 - `signMessage(message, privateKey): Promise<Uint8Array>`
 - `verifySignature(message, signature, publicKey): Promise<boolean>`
+- `signMessageWithNonce(message, privateKey, opts?): Promise<SignedMessageV1>`
+- `verifySignedMessage(payload, publicKey): Promise<boolean>`
+
+Anti‑replay:
+- `signMessageWithNonce` menambahkan `nonce` + `timestamp` ke payload yang ditandatangani.
+- Simpan nonce yang sudah dipakai (mis. di cache/DB) untuk mencegah replay.
 
 ### Group (MLS-like, tahap awal)
 

package/dist/crypto/group.d.ts

@@ -0,0 +1,102 @@
+export type GroupMember = {
+    id: string;
+    encPublicKey: Uint8Array;
+    signPublicKey?: Uint8Array;
+};
+export type GroupMemberWire = {
+    id: string;
+    encPublicKey: string;
+    signPublicKey?: string;
+};
+export type GroupState = {
+    groupId: string;
+    epoch: number;
+    members: GroupMember[];
+    secret: Uint8Array;
+};
+export type GroupWelcome = {
+    groupId: string;
+    epoch: number;
+    members: GroupMemberWire[];
+    encryptedSecrets: Record<string, string>;
+};
+export type GroupCommitAction = "add" | "remove" | "rotate";
+export type GroupCommit = {
+    groupId: string;
+    epoch: number;
+    senderId: string;
+    action: GroupCommitAction;
+    members: GroupMemberWire[];
+    removedMemberIds?: string[];
+    encryptedSecrets: Record<string, string>;
+    signature: string;
+};
+type KeyPair = {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+};
+/**
+ * Buat group baru dengan secret awal.
+ *
+ * @param groupId - ID group.
+ * @param members - Daftar member awal.
+ * @returns State group dan welcome payload.
+ */
+export declare function createGroupState(groupId: string, members: GroupMember[]): Promise<{
+    state: GroupState;
+    welcome: GroupWelcome;
+}>;
+/**
+ * Buka welcome payload untuk memperoleh state group.
+ *
+ * @param welcome - Welcome payload.
+ * @param recipientId - ID member penerima.
+ * @param recipientKeyPair - Keypair enkripsi penerima.
+ * @returns State group.
+ */
+export declare function openGroupWelcome(welcome: GroupWelcome, recipientId: string, recipientKeyPair: KeyPair): Promise<GroupState>;
+/**
+ * Derivasi group key dari secret + epoch.
+ *
+ * @param state - State group.
+ * @returns Group key 32-byte.
+ */
+export declare function deriveGroupKey(state: GroupState): Promise<Uint8Array>;
+/**
+ * Buat commit untuk add/remove/rotate member.
+ *
+ * @param state - State group saat ini.
+ * @param senderId - ID pengirim commit.
+ * @param senderSignPrivateKey - Private key Ed25519 pengirim.
+ * @param action - Jenis aksi commit.
+ * @param memberUpdates - Member yang ditambah/dihapus.
+ * @returns Commit + state baru.
+ */
+export declare function createGroupCommit(state: GroupState, senderId: string, senderSignPrivateKey: Uint8Array, action: GroupCommitAction, memberUpdates?: {
+    add?: GroupMember[];
+    removeIds?: string[];
+}): Promise<{
+    commit: GroupCommit;
+    state: GroupState;
+}>;
+/**
+ * Verifikasi signature commit.
+ *
+ * @param commit - Commit payload.
+ * @param senderSignPublicKey - Public key Ed25519 pengirim.
+ * @returns True jika valid.
+ */
+export declare function verifyGroupCommitSignature(commit: GroupCommit, senderSignPublicKey: Uint8Array): Promise<boolean>;
+/**
+ * Apply commit ke state lokal.
+ *
+ * @param state - State saat ini.
+ * @param commit - Commit terbaru.
+ * @param recipientId - ID member penerima.
+ * @param recipientKeyPair - Keypair enkripsi penerima.
+ * @param senderSignPublicKey - Public key Ed25519 pengirim.
+ * @returns State baru.
+ */
+export declare function applyGroupCommit(state: GroupState, commit: GroupCommit, recipientId: string, recipientKeyPair: KeyPair, senderSignPublicKey: Uint8Array): Promise<GroupState>;
+export {};
+//# sourceMappingURL=group.d.ts.map

package/dist/crypto/group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.d.ts","sourceRoot":"","sources":["../../src/crypto/group.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,UAAU,CAAC;IACzB,aAAa,CAAC,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE5D,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,OAAO,GAAG;IAAE,SAAS,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC;AAqFjE;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,WAAW,EAAE,GACrB,OAAO,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC,CAwBvD;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,MAAM,EACnB,gBAAgB,EAAE,OAAO,GACxB,OAAO,CAAC,UAAU,CAAC,CAYrB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAa3E;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,oBAAoB,EAAE,UAAU,EAChC,MAAM,EAAE,iBAAiB,EACzB,aAAa,CAAC,EAAE;IACd,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,GACA,OAAO,CAAC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CAyDrD;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,WAAW,EACnB,mBAAmB,EAAE,UAAU,GAC9B,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,MAAM,EACnB,gBAAgB,EAAE,OAAO,EACzB,mBAAmB,EAAE,UAAU,GAC9B,OAAO,CAAC,UAAU,CAAC,CAsBrB"}

package/dist/crypto/group.js

@@ -0,0 +1,228 @@
+import sodium from "libsodium-wrappers-sumo";
+import { assertByteLength } from "../utils/bytes.js";
+import { decodeBase64, encodeBase64 } from "../utils/encoding.js";
+function sortMembers(members) {
+    return [...members].sort((a, b) => a.id.localeCompare(b.id));
+}
+function toWireMember(member) {
+    const base = {
+        id: member.id,
+        encPublicKey: encodeBase64(member.encPublicKey),
+    };
+    return member.signPublicKey
+        ? { ...base, signPublicKey: encodeBase64(member.signPublicKey) }
+        : base;
+}
+function toStateMember(member) {
+    const base = {
+        id: member.id,
+        encPublicKey: decodeBase64(member.encPublicKey),
+    };
+    return member.signPublicKey
+        ? { ...base, signPublicKey: decodeBase64(member.signPublicKey) }
+        : base;
+}
+function canonicalizeCommitForSigning(commit) {
+    const members = sortMembers(commit.members);
+    const encryptedSecrets = Object.keys(commit.encryptedSecrets)
+        .sort()
+        .reduce((acc, key) => {
+        const value = commit.encryptedSecrets[key];
+        if (value) {
+            acc[key] = value;
+        }
+        return acc;
+    }, {});
+    return JSON.stringify({
+        groupId: commit.groupId,
+        epoch: commit.epoch,
+        senderId: commit.senderId,
+        action: commit.action,
+        members,
+        removedMemberIds: commit.removedMemberIds ?? [],
+        encryptedSecrets,
+    });
+}
+async function encryptSecretForMember(secret, member) {
+    await sodium.ready;
+    assertByteLength("encPublicKey", member.encPublicKey, sodium.crypto_box_PUBLICKEYBYTES);
+    const ciphertext = sodium.crypto_box_seal(secret, member.encPublicKey);
+    return encodeBase64(ciphertext);
+}
+async function decryptSecretForMember(ciphertextB64, keyPair) {
+    await sodium.ready;
+    assertByteLength("encPublicKey", keyPair.publicKey, sodium.crypto_box_PUBLICKEYBYTES);
+    assertByteLength("encPrivateKey", keyPair.privateKey, sodium.crypto_box_SECRETKEYBYTES);
+    const ciphertext = decodeBase64(ciphertextB64);
+    return sodium.crypto_box_seal_open(ciphertext, keyPair.publicKey, keyPair.privateKey);
+}
+/**
+ * Buat group baru dengan secret awal.
+ *
+ * @param groupId - ID group.
+ * @param members - Daftar member awal.
+ * @returns State group dan welcome payload.
+ */
+export async function createGroupState(groupId, members) {
+    await sodium.ready;
+    const secret = sodium.randombytes_buf(32);
+    const sortedMembers = sortMembers(members);
+    const encryptedSecrets = {};
+    for (const member of sortedMembers) {
+        encryptedSecrets[member.id] = await encryptSecretForMember(secret, member);
+    }
+    return {
+        state: {
+            groupId,
+            epoch: 0,
+            members: sortedMembers,
+            secret,
+        },
+        welcome: {
+            groupId,
+            epoch: 0,
+            members: sortedMembers.map(toWireMember),
+            encryptedSecrets,
+        },
+    };
+}
+/**
+ * Buka welcome payload untuk memperoleh state group.
+ *
+ * @param welcome - Welcome payload.
+ * @param recipientId - ID member penerima.
+ * @param recipientKeyPair - Keypair enkripsi penerima.
+ * @returns State group.
+ */
+export async function openGroupWelcome(welcome, recipientId, recipientKeyPair) {
+    const ciphertextB64 = welcome.encryptedSecrets[recipientId];
+    if (!ciphertextB64) {
+        throw new Error("Welcome tidak berisi secret untuk member ini");
+    }
+    const secret = await decryptSecretForMember(ciphertextB64, recipientKeyPair);
+    return {
+        groupId: welcome.groupId,
+        epoch: welcome.epoch,
+        members: welcome.members.map(toStateMember),
+        secret,
+    };
+}
+/**
+ * Derivasi group key dari secret + epoch.
+ *
+ * @param state - State group.
+ * @returns Group key 32-byte.
+ */
+export async function deriveGroupKey(state) {
+    await sodium.ready;
+    const epochBytes = new Uint8Array(4);
+    const view = new DataView(epochBytes.buffer);
+    view.setUint32(0, state.epoch, false);
+    const context = new TextEncoder().encode("group-key");
+    const input = new Uint8Array(context.length + epochBytes.length + state.secret.length);
+    input.set(context, 0);
+    input.set(epochBytes, context.length);
+    input.set(state.secret, context.length + epochBytes.length);
+    return sodium.crypto_generichash(32, input);
+}
+/**
+ * Buat commit untuk add/remove/rotate member.
+ *
+ * @param state - State group saat ini.
+ * @param senderId - ID pengirim commit.
+ * @param senderSignPrivateKey - Private key Ed25519 pengirim.
+ * @param action - Jenis aksi commit.
+ * @param memberUpdates - Member yang ditambah/dihapus.
+ * @returns Commit + state baru.
+ */
+export async function createGroupCommit(state, senderId, senderSignPrivateKey, action, memberUpdates) {
+    await sodium.ready;
+    assertByteLength("senderSignPrivateKey", senderSignPrivateKey, sodium.crypto_sign_SECRETKEYBYTES);
+    const removeIds = new Set(memberUpdates?.removeIds ?? []);
+    const members = action === "add"
+        ? sortMembers([...(state.members ?? []), ...(memberUpdates?.add ?? [])])
+        : action === "remove"
+            ? sortMembers(state.members.filter((m) => !removeIds.has(m.id)))
+            : sortMembers(state.members);
+    const secret = sodium.randombytes_buf(32);
+    const encryptedSecrets = {};
+    for (const member of members) {
+        encryptedSecrets[member.id] = await encryptSecretForMember(secret, member);
+    }
+    const basePayload = {
+        groupId: state.groupId,
+        epoch: state.epoch + 1,
+        senderId,
+        action,
+        members: members.map(toWireMember),
+        encryptedSecrets,
+    };
+    const payload = action === "remove"
+        ? {
+            ...basePayload,
+            removedMemberIds: Array.from(removeIds.values()),
+        }
+        : basePayload;
+    const toSign = canonicalizeCommitForSigning(payload);
+    const signature = sodium.crypto_sign_detached(new TextEncoder().encode(toSign), senderSignPrivateKey);
+    return {
+        commit: {
+            ...payload,
+            signature: encodeBase64(signature),
+        },
+        state: {
+            groupId: state.groupId,
+            epoch: state.epoch + 1,
+            members,
+            secret,
+        },
+    };
+}
+/**
+ * Verifikasi signature commit.
+ *
+ * @param commit - Commit payload.
+ * @param senderSignPublicKey - Public key Ed25519 pengirim.
+ * @returns True jika valid.
+ */
+export async function verifyGroupCommitSignature(commit, senderSignPublicKey) {
+    await sodium.ready;
+    assertByteLength("senderSignPublicKey", senderSignPublicKey, sodium.crypto_sign_PUBLICKEYBYTES);
+    const { signature, ...payload } = commit;
+    const toVerify = canonicalizeCommitForSigning(payload);
+    return sodium.crypto_sign_verify_detached(decodeBase64(signature), new TextEncoder().encode(toVerify), senderSignPublicKey);
+}
+/**
+ * Apply commit ke state lokal.
+ *
+ * @param state - State saat ini.
+ * @param commit - Commit terbaru.
+ * @param recipientId - ID member penerima.
+ * @param recipientKeyPair - Keypair enkripsi penerima.
+ * @param senderSignPublicKey - Public key Ed25519 pengirim.
+ * @returns State baru.
+ */
+export async function applyGroupCommit(state, commit, recipientId, recipientKeyPair, senderSignPublicKey) {
+    if (commit.groupId !== state.groupId) {
+        throw new Error("groupId commit tidak cocok");
+    }
+    if (commit.epoch !== state.epoch + 1) {
+        throw new Error("epoch commit tidak valid");
+    }
+    const ok = await verifyGroupCommitSignature(commit, senderSignPublicKey);
+    if (!ok) {
+        throw new Error("signature commit tidak valid");
+    }
+    const ciphertextB64 = commit.encryptedSecrets[recipientId];
+    if (!ciphertextB64) {
+        throw new Error("commit tidak berisi secret untuk member ini");
+    }
+    const secret = await decryptSecretForMember(ciphertextB64, recipientKeyPair);
+    return {
+        groupId: commit.groupId,
+        epoch: commit.epoch,
+        members: commit.members.map(toStateMember),
+        secret,
+    };
+}
+//# sourceMappingURL=group.js.map

package/dist/crypto/group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.js","sourceRoot":"","sources":["../../src/crypto/group.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,yBAAyB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AA2ClE,SAAS,WAAW,CAA2B,OAAY;IACzD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACvC,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;KAChD,CAAC;IACF,OAAO,MAAM,CAAC,aAAa;QACzB,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;QAChE,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,MAAuB;IAC5C,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;KAChD,CAAC;IACF,OAAO,MAAM,CAAC,aAAa;QACzB,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;QAChE,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAsC;IAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;SAC1D,IAAI,EAAE;SACN,MAAM,CAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE;QAC/C,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,MAAkB,EAClB,MAAmB;IAEnB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,cAAc,EACd,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACvE,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,aAAqB,EACrB,OAAgB;IAEhB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,cAAc,EACd,OAAO,CAAC,SAAS,EACjB,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,gBAAgB,CACd,eAAe,EACf,OAAO,CAAC,UAAU,EAClB,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,oBAAoB,CAChC,UAAU,EACV,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,UAAU,CACnB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,OAAsB;IAEtB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IAEpD,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,KAAK,EAAE;YACL,OAAO;YACP,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,aAAa;YACtB,MAAM;SACP;QACD,OAAO,EAAE;YACP,OAAO;YACP,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC;YACxC,gBAAgB;SACjB;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAqB,EACrB,WAAmB,EACnB,gBAAyB;IAEzB,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC7E,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC3C,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiB;IACpD,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,UAAU,CAC1B,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CACzD,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtB,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAiB,EACjB,QAAgB,EAChB,oBAAgC,EAChC,MAAyB,EACzB,aAGC;IAED,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,sBAAsB,EACtB,oBAAoB,EACpB,MAAM,CAAC,0BAA0B,CAClC,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,GACX,MAAM,KAAK,KAAK;QACd,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,MAAM,KAAK,QAAQ;YACrB,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IAEpD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;QACtB,QAAQ;QACR,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAClC,gBAAgB;KACjB,CAAC;IACF,MAAM,OAAO,GACX,MAAM,KAAK,QAAQ;QACjB,CAAC,CAAC;YACE,GAAG,WAAW;YACd,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;SACjD;QACH,CAAC,CAAC,WAAW,CAAC;IAElB,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAC3C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAChC,oBAAoB,CACrB,CAAC;IAEF,OAAO;QACL,MAAM,EAAE;YACN,GAAG,OAAO;YACV,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;SACnC;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;YACtB,OAAO;YACP,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAmB,EACnB,mBAA+B;IAE/B,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,qBAAqB,EACrB,mBAAmB,EACnB,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IACzC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,2BAA2B,CACvC,YAAY,CAAC,SAAS,CAAC,EACvB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAiB,EACjB,MAAmB,EACnB,WAAmB,EACnB,gBAAyB,EACzB,mBAA+B;IAE/B,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzE,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC7E,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC1C,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/crypto/key-exchange.d.ts

@@ -0,0 +1,61 @@
+export type KeyExchangeKeyPair = {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+};
+export type SessionKeys = {
+    rx: Uint8Array;
+    tx: Uint8Array;
+};
+/**
+ * Generate key pair untuk key exchange (X25519).
+ *
+ * @returns Public/private key pair.
+ */
+export declare function generateKeyExchangeKeyPair(): Promise<KeyExchangeKeyPair>;
+/**
+ * Generate public key (X25519) dari private key untuk key exchange.
+ *
+ * @param privateKey - Private key X25519.
+ * @returns Public key X25519.
+ */
+export declare function deriveKeyExchangePublicKeyFromPrivateKey(privateKey: Uint8Array): Promise<Uint8Array>;
+/**
+ * Rekonstruksi keypair key exchange dari private key (public key akan diderivasi).
+ *
+ * @param privateKey - Private key X25519.
+ * @returns Public/private key pair.
+ */
+export declare function keyExchangeKeyPairFromPrivateKey(privateKey: Uint8Array): Promise<KeyExchangeKeyPair>;
+/**
+ * Derivasi session keys untuk sisi client.
+ *
+ * @param clientKeyPair - Key pair client.
+ * @param serverPublicKey - Public key server.
+ * @returns Session keys { rx, tx }.
+ */
+export declare function deriveClientSessionKeys(clientKeyPair: KeyExchangeKeyPair, serverPublicKey: Uint8Array): Promise<SessionKeys>;
+/**
+ * Derivasi session keys untuk sisi server.
+ *
+ * @param serverKeyPair - Key pair server.
+ * @param clientPublicKey - Public key client.
+ * @returns Session keys { rx, tx }.
+ */
+export declare function deriveServerSessionKeys(serverKeyPair: KeyExchangeKeyPair, clientPublicKey: Uint8Array): Promise<SessionKeys>;
+/**
+ * Enkripsi sealed box ke penerima menggunakan public key (tanpa keypair pengirim).
+ *
+ * @param message - Plaintext.
+ * @param recipientPublicKey - Public key penerima.
+ * @returns Ciphertext.
+ */
+export declare function encryptSealedBox(message: Uint8Array, recipientPublicKey: Uint8Array): Promise<Uint8Array>;
+/**
+ * Dekripsi sealed box menggunakan keypair penerima.
+ *
+ * @param ciphertext - Ciphertext.
+ * @param recipientKeyPair - Key pair penerima.
+ * @returns Plaintext.
+ */
+export declare function decryptSealedBox(ciphertext: Uint8Array, recipientKeyPair: KeyExchangeKeyPair): Promise<Uint8Array>;
+//# sourceMappingURL=key-exchange.d.ts.map

package/dist/crypto/key-exchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-exchange.d.ts","sourceRoot":"","sources":["../../src/crypto/key-exchange.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,UAAU,CAAC;IACf,EAAE,EAAE,UAAU,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAI9E;AAED;;;;;GAKG;AACH,wBAAsB,wCAAwC,CAC5D,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,kBAAkB,EACjC,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,WAAW,CAAC,CAuBtB;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,kBAAkB,EACjC,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,WAAW,CAAC,CAuBtB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,UAAU,EACnB,kBAAkB,EAAE,UAAU,GAC7B,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,kBAAkB,GACnC,OAAO,CAAC,UAAU,CAAC,CAiBrB"}

package/dist/crypto/key-exchange.js

@@ -0,0 +1,89 @@
+import sodium from "libsodium-wrappers-sumo";
+import { assertByteLength } from "../utils/bytes.js";
+/**
+ * Generate key pair untuk key exchange (X25519).
+ *
+ * @returns Public/private key pair.
+ */
+export async function generateKeyExchangeKeyPair() {
+    await sodium.ready;
+    const { publicKey, privateKey } = sodium.crypto_kx_keypair();
+    return { publicKey, privateKey };
+}
+/**
+ * Generate public key (X25519) dari private key untuk key exchange.
+ *
+ * @param privateKey - Private key X25519.
+ * @returns Public key X25519.
+ */
+export async function deriveKeyExchangePublicKeyFromPrivateKey(privateKey) {
+    await sodium.ready;
+    assertByteLength("privateKey", privateKey, sodium.crypto_kx_SECRETKEYBYTES);
+    return sodium.crypto_scalarmult_base(privateKey);
+}
+/**
+ * Rekonstruksi keypair key exchange dari private key (public key akan diderivasi).
+ *
+ * @param privateKey - Private key X25519.
+ * @returns Public/private key pair.
+ */
+export async function keyExchangeKeyPairFromPrivateKey(privateKey) {
+    const publicKey = await deriveKeyExchangePublicKeyFromPrivateKey(privateKey);
+    return { publicKey, privateKey };
+}
+/**
+ * Derivasi session keys untuk sisi client.
+ *
+ * @param clientKeyPair - Key pair client.
+ * @param serverPublicKey - Public key server.
+ * @returns Session keys { rx, tx }.
+ */
+export async function deriveClientSessionKeys(clientKeyPair, serverPublicKey) {
+    await sodium.ready;
+    assertByteLength("clientPublicKey", clientKeyPair.publicKey, sodium.crypto_kx_PUBLICKEYBYTES);
+    assertByteLength("clientPrivateKey", clientKeyPair.privateKey, sodium.crypto_kx_SECRETKEYBYTES);
+    assertByteLength("serverPublicKey", serverPublicKey, sodium.crypto_kx_PUBLICKEYBYTES);
+    const { sharedRx, sharedTx } = sodium.crypto_kx_client_session_keys(clientKeyPair.publicKey, clientKeyPair.privateKey, serverPublicKey);
+    return { rx: sharedRx, tx: sharedTx };
+}
+/**
+ * Derivasi session keys untuk sisi server.
+ *
+ * @param serverKeyPair - Key pair server.
+ * @param clientPublicKey - Public key client.
+ * @returns Session keys { rx, tx }.
+ */
+export async function deriveServerSessionKeys(serverKeyPair, clientPublicKey) {
+    await sodium.ready;
+    assertByteLength("serverPublicKey", serverKeyPair.publicKey, sodium.crypto_kx_PUBLICKEYBYTES);
+    assertByteLength("serverPrivateKey", serverKeyPair.privateKey, sodium.crypto_kx_SECRETKEYBYTES);
+    assertByteLength("clientPublicKey", clientPublicKey, sodium.crypto_kx_PUBLICKEYBYTES);
+    const { sharedRx, sharedTx } = sodium.crypto_kx_server_session_keys(serverKeyPair.publicKey, serverKeyPair.privateKey, clientPublicKey);
+    return { rx: sharedRx, tx: sharedTx };
+}
+/**
+ * Enkripsi sealed box ke penerima menggunakan public key (tanpa keypair pengirim).
+ *
+ * @param message - Plaintext.
+ * @param recipientPublicKey - Public key penerima.
+ * @returns Ciphertext.
+ */
+export async function encryptSealedBox(message, recipientPublicKey) {
+    await sodium.ready;
+    assertByteLength("recipientPublicKey", recipientPublicKey, sodium.crypto_box_PUBLICKEYBYTES);
+    return sodium.crypto_box_seal(message, recipientPublicKey);
+}
+/**
+ * Dekripsi sealed box menggunakan keypair penerima.
+ *
+ * @param ciphertext - Ciphertext.
+ * @param recipientKeyPair - Key pair penerima.
+ * @returns Plaintext.
+ */
+export async function decryptSealedBox(ciphertext, recipientKeyPair) {
+    await sodium.ready;
+    assertByteLength("recipientPublicKey", recipientKeyPair.publicKey, sodium.crypto_box_PUBLICKEYBYTES);
+    assertByteLength("recipientPrivateKey", recipientKeyPair.privateKey, sodium.crypto_box_SECRETKEYBYTES);
+    return sodium.crypto_box_seal_open(ciphertext, recipientKeyPair.publicKey, recipientKeyPair.privateKey);
+}
+//# sourceMappingURL=key-exchange.js.map

package/dist/crypto/key-exchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-exchange.js","sourceRoot":"","sources":["../../src/crypto/key-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,yBAAyB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAYrD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;IAC7D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,UAAsB;IAEtB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,YAAY,EACZ,UAAU,EACV,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,OAAO,MAAM,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,UAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,wCAAwC,CAAC,UAAU,CAAC,CAAC;IAC7E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAiC,EACjC,eAA2B;IAE3B,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,iBAAiB,EACjB,aAAa,CAAC,SAAS,EACvB,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,gBAAgB,CACd,kBAAkB,EAClB,aAAa,CAAC,UAAU,EACxB,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,gBAAgB,CACd,iBAAiB,EACjB,eAAe,EACf,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,6BAA6B,CACjE,aAAa,CAAC,SAAS,EACvB,aAAa,CAAC,UAAU,EACxB,eAAe,CAChB,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAiC,EACjC,eAA2B;IAE3B,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,iBAAiB,EACjB,aAAa,CAAC,SAAS,EACvB,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,gBAAgB,CACd,kBAAkB,EAClB,aAAa,CAAC,UAAU,EACxB,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,gBAAgB,CACd,iBAAiB,EACjB,eAAe,EACf,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,6BAA6B,CACjE,aAAa,CAAC,SAAS,EACvB,aAAa,CAAC,UAAU,EACxB,eAAe,CAChB,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAmB,EACnB,kBAA8B;IAE9B,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,oBAAoB,EACpB,kBAAkB,EAClB,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,OAAO,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAsB,EACtB,gBAAoC;IAEpC,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,oBAAoB,EACpB,gBAAgB,CAAC,SAAS,EAC1B,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,gBAAgB,CACd,qBAAqB,EACrB,gBAAgB,CAAC,UAAU,EAC3B,MAAM,CAAC,yBAAyB,CACjC,CAAC;IACF,OAAO,MAAM,CAAC,oBAAoB,CAChC,UAAU,EACV,gBAAgB,CAAC,SAAS,EAC1B,gBAAgB,CAAC,UAAU,CAC5B,CAAC;AACJ,CAAC"}

package/dist/crypto/signature.d.ts

@@ -0,0 +1,55 @@
+export type SigningKeyPair = {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+};
+export type SignedMessageV1 = {
+    v: 1;
+    nonce: string;
+    ts: number;
+    message: string;
+    signature: string;
+};
+/**
+ * Generate key pair untuk tanda tangan (Ed25519).
+ *
+ * @returns Public/private key pair.
+ */
+export declare function generateSigningKeyPair(): Promise<SigningKeyPair>;
+/**
+ * Buat signature detached untuk message.
+ *
+ * @param message - Data input.
+ * @param privateKey - Private key Ed25519.
+ * @returns Signature.
+ */
+export declare function signMessage(message: Uint8Array, privateKey: Uint8Array): Promise<Uint8Array>;
+/**
+ * Verifikasi signature untuk message.
+ *
+ * @param message - Data input.
+ * @param signature - Signature detached.
+ * @param publicKey - Public key Ed25519.
+ * @returns True jika valid.
+ */
+export declare function verifySignature(message: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): Promise<boolean>;
+/**
+ * Buat signature dengan nonce/timestamp untuk anti‑replay.
+ *
+ * @param message - Data input.
+ * @param privateKey - Private key Ed25519.
+ * @param opts - Opsi nonce/timestamp.
+ * @returns Payload signature terstruktur.
+ */
+export declare function signMessageWithNonce(message: Uint8Array, privateKey: Uint8Array, opts?: {
+    nonce?: Uint8Array;
+    timestampMs?: number;
+}): Promise<SignedMessageV1>;
+/**
+ * Verifikasi payload signature anti‑replay.
+ *
+ * @param payload - Payload signature.
+ * @param publicKey - Public key Ed25519.
+ * @returns True jika valid.
+ */
+export declare function verifySignedMessage(payload: SignedMessageV1, publicKey: Uint8Array): Promise<boolean>;
+//# sourceMappingURL=signature.d.ts.map

package/dist/crypto/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/crypto/signature.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAaF;;;;GAIG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,cAAc,CAAC,CAItE;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,UAAU,EACtB,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,UAAU,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,eAAe,CAAC,CA4B1B;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAqBlB"}

package/dist/crypto/signature.js

@@ -0,0 +1,95 @@
+import sodium from "libsodium-wrappers-sumo";
+import { assertByteLength } from "../utils/bytes.js";
+import { decodeBase64, encodeBase64 } from "../utils/encoding.js";
+const SIGNED_NONCE_BYTES = 24;
+function canonicalizeSignedPayload(payload) {
+    return JSON.stringify({
+        v: payload.v,
+        nonce: payload.nonce,
+        ts: payload.ts,
+        message: payload.message,
+    });
+}
+/**
+ * Generate key pair untuk tanda tangan (Ed25519).
+ *
+ * @returns Public/private key pair.
+ */
+export async function generateSigningKeyPair() {
+    await sodium.ready;
+    const { publicKey, privateKey } = sodium.crypto_sign_keypair();
+    return { publicKey, privateKey };
+}
+/**
+ * Buat signature detached untuk message.
+ *
+ * @param message - Data input.
+ * @param privateKey - Private key Ed25519.
+ * @returns Signature.
+ */
+export async function signMessage(message, privateKey) {
+    await sodium.ready;
+    assertByteLength("privateKey", privateKey, sodium.crypto_sign_SECRETKEYBYTES);
+    return sodium.crypto_sign_detached(message, privateKey);
+}
+/**
+ * Verifikasi signature untuk message.
+ *
+ * @param message - Data input.
+ * @param signature - Signature detached.
+ * @param publicKey - Public key Ed25519.
+ * @returns True jika valid.
+ */
+export async function verifySignature(message, signature, publicKey) {
+    await sodium.ready;
+    assertByteLength("publicKey", publicKey, sodium.crypto_sign_PUBLICKEYBYTES);
+    return sodium.crypto_sign_verify_detached(signature, message, publicKey);
+}
+/**
+ * Buat signature dengan nonce/timestamp untuk anti‑replay.
+ *
+ * @param message - Data input.
+ * @param privateKey - Private key Ed25519.
+ * @param opts - Opsi nonce/timestamp.
+ * @returns Payload signature terstruktur.
+ */
+export async function signMessageWithNonce(message, privateKey, opts) {
+    await sodium.ready;
+    assertByteLength("privateKey", privateKey, sodium.crypto_sign_SECRETKEYBYTES);
+    const nonce = opts?.nonce ?? sodium.randombytes_buf(SIGNED_NONCE_BYTES);
+    assertByteLength("nonce", nonce, SIGNED_NONCE_BYTES);
+    const payload = {
+        v: 1,
+        nonce: encodeBase64(nonce),
+        ts: opts?.timestampMs ?? Date.now(),
+        message: encodeBase64(message),
+    };
+    const toSign = canonicalizeSignedPayload(payload);
+    const signature = sodium.crypto_sign_detached(new TextEncoder().encode(toSign), privateKey);
+    return {
+        ...payload,
+        signature: encodeBase64(signature),
+    };
+}
+/**
+ * Verifikasi payload signature anti‑replay.
+ *
+ * @param payload - Payload signature.
+ * @param publicKey - Public key Ed25519.
+ * @returns True jika valid.
+ */
+export async function verifySignedMessage(payload, publicKey) {
+    await sodium.ready;
+    assertByteLength("publicKey", publicKey, sodium.crypto_sign_PUBLICKEYBYTES);
+    const nonce = decodeBase64(payload.nonce);
+    assertByteLength("nonce", nonce, SIGNED_NONCE_BYTES);
+    const signature = decodeBase64(payload.signature);
+    const toVerify = canonicalizeSignedPayload({
+        v: payload.v,
+        nonce: payload.nonce,
+        ts: payload.ts,
+        message: payload.message,
+    });
+    return sodium.crypto_sign_verify_detached(signature, new TextEncoder().encode(toVerify), publicKey);
+}
+//# sourceMappingURL=signature.js.map

package/dist/crypto/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/crypto/signature.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,yBAAyB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAelE,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,SAAS,yBAAyB,CAAC,OAA2C;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC/D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAmB,EACnB,UAAsB;IAEtB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,YAAY,EACZ,UAAU,EACV,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,OAAO,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAmB,EACnB,SAAqB,EACrB,SAAqB;IAErB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,WAAW,EACX,SAAS,EACT,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,OAAO,MAAM,CAAC,2BAA2B,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAmB,EACnB,UAAsB,EACtB,IAAmD;IAEnD,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,YAAY,EACZ,UAAU,EACV,MAAM,CAAC,0BAA0B,CAClC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACxE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAErD,MAAM,OAAO,GAAuC;QAClD,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC;QAC1B,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE;QACnC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;KAC/B,CAAC;IAEF,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAC3C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAChC,UAAU,CACX,CAAC;IAEF,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;KACnC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAwB,EACxB,SAAqB;IAErB,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,gBAAgB,CACd,WAAW,EACX,SAAS,EACT,MAAM,CAAC,0BAA0B,CAClC,CAAC;IACF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QACzC,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,2BAA2B,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,SAAS,CACV,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -2,6 +2,13 @@ export type { AeadEnvelopeV1, PasswordKdfParamsV1, PasswordWrappedKeyV1 } from "
 export { generateFileKey, wrapFileKeyWithMasterKey, unwrapFileKeyWithMasterKey, encryptFileData, decryptFileData, } from "./crypto/file-encryption.js";
 export { generateMasterKey, generateMasterKeyWithPassword, wrapMasterKeyWithPassword, unwrapMasterKeyWithPassword, } from "./crypto/master-key.js";
 export { generateRecoveryKey, wrapMasterKeyWithRecoveryKey, unwrapMasterKeyWithRecoveryKey, wrapRecoveryKeyWithMasterKey, unwrapRecoveryKeyWithMasterKey, } from "./crypto/recovery-key.js";
+export type { KeyExchangeKeyPair, SessionKeys } from "./crypto/key-exchange.js";
+export { generateKeyExchangeKeyPair, deriveKeyExchangePublicKeyFromPrivateKey, keyExchangeKeyPairFromPrivateKey, deriveClientSessionKeys, deriveServerSessionKeys, encryptSealedBox, decryptSealedBox, } from "./crypto/key-exchange.js";
+export type { SigningKeyPair } from "./crypto/signature.js";
+export { generateSigningKeyPair, signMessage, signMessageWithNonce, verifySignature, verifySignedMessage, } from "./crypto/signature.js";
+export type { SignedMessageV1 } from "./crypto/signature.js";
+export type { GroupMember, GroupMemberWire, GroupState, GroupWelcome, GroupCommit, GroupCommitAction, } from "./crypto/group.js";
+export { createGroupState, openGroupWelcome, deriveGroupKey, createGroupCommit, verifyGroupCommitSignature, applyGroupCommit, } from "./crypto/group.js";
 export type { PasswordKdfOptions } from "./crypto/password-kdf.js";
 export { deriveKeyFromPassword, wrapKeyWithPassword, unwrapKeyWithPassword, } from "./crypto/password-kdf.js";
 export { encodeBase64, decodeBase64 } from "./utils/encoding.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE5F,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAElC,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EACL,MAAM,EACN,KAAK,IAAI,WAAW,EACpB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE5F,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAElC,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EACL,0BAA0B,EAC1B,wCAAwC,EACxC,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAElC,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,YAAY,EACV,WAAW,EACX,eAAe,EACf,UAAU,EACV,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EACL,MAAM,EACN,KAAK,IAAI,WAAW,EACpB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,6 +1,9 @@
 export { generateFileKey, wrapFileKeyWithMasterKey, unwrapFileKeyWithMasterKey, encryptFileData, decryptFileData, } from "./crypto/file-encryption.js";
 export { generateMasterKey, generateMasterKeyWithPassword, wrapMasterKeyWithPassword, unwrapMasterKeyWithPassword, } from "./crypto/master-key.js";
 export { generateRecoveryKey, wrapMasterKeyWithRecoveryKey, unwrapMasterKeyWithRecoveryKey, wrapRecoveryKeyWithMasterKey, unwrapRecoveryKeyWithMasterKey, } from "./crypto/recovery-key.js";
+export { generateKeyExchangeKeyPair, deriveKeyExchangePublicKeyFromPrivateKey, keyExchangeKeyPairFromPrivateKey, deriveClientSessionKeys, deriveServerSessionKeys, encryptSealedBox, decryptSealedBox, } from "./crypto/key-exchange.js";
+export { generateSigningKeyPair, signMessage, signMessageWithNonce, verifySignature, verifySignedMessage, } from "./crypto/signature.js";
+export { createGroupState, openGroupWelcome, deriveGroupKey, createGroupCommit, verifyGroupCommitSignature, applyGroupCommit, } from "./crypto/group.js";
 export { deriveKeyFromPassword, wrapKeyWithPassword, unwrapKeyWithPassword, } from "./crypto/password-kdf.js";
 export { encodeBase64, decodeBase64 } from "./utils/encoding.js";
 export { sodium, ready as sodiumReady, randombytesBuf, cryptoPwhash, cryptoPwhashSaltBytes, cryptoPwhashOpslimitModerate, cryptoPwhashMemlimitModerate, aeadXChaCha20Poly1305IetfEncrypt, aeadXChaCha20Poly1305IetfDecrypt, aeadXChaCha20Poly1305IetfNpubBytes, toBase64, fromBase64, base64VariantOriginal, fromString, toString, memcmp, } from "./sodium.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EACL,MAAM,EACN,KAAK,IAAI,WAAW,EACpB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,eAAe,GAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,0BAA0B,EAC1B,wCAAwC,EACxC,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EACL,MAAM,EACN,KAAK,IAAI,WAAW,EACpB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,UAAU,EACV,QAAQ,EACR,MAAM,GACP,MAAM,aAAa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexwage/crypto",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Minimal crypto building blocks using libsodium (XChaCha20-Poly1305 + Argon2).",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",