@northstartech/cipher 0.0.0-stage → 1.0.0

package/dist/crypto.d.ts

@@ -0,0 +1,72 @@
+import { randomBytes } from './encoding.js';
+export declare function subtle(): SubtleCrypto;
+export type EnvKind = 'development' | 'production';
+export interface ParsedCredential {
+    env: EnvKind;
+    id: string;
+    key: CryptoKey;
+}
+/** Import an Ed25519 private key from its 32-byte seed. */
+export declare function importEd25519Seed(seed: Uint8Array, extractable?: boolean): Promise<CryptoKey>;
+/** Parse a `nsc_dev_…` / `nsc_live_…` credential secret (protocol §4). */
+export declare function parseCredential(secret: string): Promise<ParsedCredential>;
+/** Build a credential secret from its parts (used by the console when minting credentials). */
+export declare function buildCredentialSecret(env: EnvKind, id: string, seed: Uint8Array): Promise<string>;
+/** Generate a fresh Ed25519 key pair: returns `{ seed, publicKey }` (raw bytes). */
+export declare function generateCredentialKeyPair(): Promise<{
+    seed: Uint8Array;
+    publicKey: Uint8Array;
+}>;
+export declare function signJws(typ: string, kid: string, claims: unknown, key: CryptoKey): Promise<string>;
+export interface JwsHeader {
+    alg: string;
+    typ: string;
+    kid: string;
+}
+export declare function peekJws(token: string): {
+    header: JwsHeader;
+    claims: Record<string, unknown>;
+};
+/** Verify an EdDSA compact JWS against a raw Ed25519 public key. */
+export declare function verifyJws(token: string, typ: string, publicKey: Uint8Array): Promise<Record<string, unknown>>;
+/** X-Wing public key: ML-KEM-768 encapsulation key (1184) ‖ X25519 public key (32). */
+export declare const XWING_PUBLIC_KEY_LENGTH = 1216;
+/** X-Wing ciphertext (`enc`): ML-KEM-768 ciphertext (1088) ‖ X25519 ephemeral public key (32). */
+export declare const XWING_ENC_LENGTH = 1120;
+/**
+ * Reject anything but a well-formed X-Wing public key: the exact length, and the
+ * FIPS 203 §7.2 modulus check (every 12-bit coefficient of ek_M is < q).
+ */
+export declare function assertXWingPublicKey(pk: Uint8Array): void;
+/** X-Wing encapsulation to `pk` (KEM level; tests and diagnostics). `eseed` is for tests only. */
+export declare function xwingEncapsulate(pk: Uint8Array, eseed?: Uint8Array): Promise<{
+    enc: Uint8Array;
+    sharedSecret: Uint8Array;
+}>;
+export interface SessionKeys {
+    c2s: CryptoKey;
+    s2c: CryptoKey;
+    sid: Uint8Array;
+}
+export declare function sessionInfo(instanceId: string, nonce: Uint8Array): Uint8Array;
+/**
+ * HPKE SetupBaseS (X-Wing) to the attested session key; export the session secrets (protocol §6.1).
+ * `eseed` (64 bytes) makes the encapsulation deterministic and is for tests only.
+ */
+export declare function establishSession(sessionPk: Uint8Array, instanceId: string, nonce: Uint8Array, eseed?: Uint8Array): Promise<{
+    enc: Uint8Array;
+    keys: SessionKeys;
+    raw?: {
+        c2s: Uint8Array;
+        s2c: Uint8Array;
+    };
+}>;
+export declare function sessionIdFor(instanceId: string, sid: Uint8Array): string;
+export declare function requestAad(sessionId: string, method: string, path: string, timestampMs: number): Uint8Array;
+export declare function responseAad(sessionId: string, requestNonce: Uint8Array, status: number): Uint8Array;
+export declare function seal(key: CryptoKey, aad: Uint8Array, plaintext: Uint8Array, nonce?: Uint8Array<ArrayBufferLike>): Promise<{
+    nonce: Uint8Array;
+    ciphertext: Uint8Array;
+}>;
+export declare function open(key: CryptoKey, nonce: Uint8Array, aad: Uint8Array, ciphertext: Uint8Array): Promise<Uint8Array>;
+export { randomBytes };

package/dist/crypto.js

@@ -0,0 +1,244 @@
+/**
+ * Protocol cryptography on WebCrypto (Node ≥ 20 and modern browsers):
+ * Ed25519 credentials and JWS, post-quantum hybrid HPKE session establishment
+ * (RFC 9180 via @hpke/core with the X-Wing KEM, MLKEM768-X25519), AES-256-GCM
+ * sealing of session messages.
+ */
+import { CipherSuite, ExportOnly, HkdfSha256 } from '@hpke/core';
+import { XWing } from '@hpke/hybridkem-x-wing';
+import { b64u, buf, bytesToUuid, concat, equalBytes, lp, randomBytes, u16, u64, unb64u, utf8, uuidBytes } from './encoding.js';
+import { CipherError } from './errors.js';
+export function subtle() {
+    const s = globalThis.crypto?.subtle;
+    if (!s)
+        throw new CipherError('CONFIGURATION_ERROR', 'WebCrypto is unavailable (Node.js ≥ 20 or a modern browser is required)');
+    return s;
+}
+async function sha256(b) {
+    return new Uint8Array(await subtle().digest('SHA-256', buf(b)));
+}
+const PKCS8_ED25519 = new Uint8Array([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20]);
+/** Import an Ed25519 private key from its 32-byte seed. */
+export async function importEd25519Seed(seed, extractable = false) {
+    const der = concat(PKCS8_ED25519, seed);
+    try {
+        return await subtle().importKey('pkcs8', buf(der), { name: 'Ed25519' }, extractable, ['sign']);
+    }
+    catch {
+        throw new CipherError('CONFIGURATION_ERROR', 'this runtime does not support Ed25519 in WebCrypto (Node.js ≥ 20, Chrome ≥ 137, Safari ≥ 17, Firefox ≥ 129)');
+    }
+    finally {
+        der.fill(0);
+    }
+}
+const MALFORMED = 'credential is malformed (was it copied completely?)';
+/** Parse a `nsc_dev_…` / `nsc_live_…` credential secret (protocol §4). */
+export async function parseCredential(secret) {
+    const s = secret.trim();
+    const prefix = s.startsWith('nsc_dev_') ? 'nsc_dev_' : s.startsWith('nsc_live_') ? 'nsc_live_' : null;
+    if (!prefix)
+        throw new CipherError('CONFIGURATION_ERROR', 'credential must start with nsc_dev_ or nsc_live_');
+    let body;
+    try {
+        body = unb64u(s.slice(prefix.length));
+    }
+    catch {
+        throw new CipherError('CONFIGURATION_ERROR', MALFORMED);
+    }
+    try {
+        if (body.length !== 53 || body[0] !== 1)
+            throw new CipherError('CONFIGURATION_ERROR', MALFORMED);
+        const sum = await sha256(concat(utf8(prefix), body.subarray(0, 49)));
+        if (!equalBytes(sum.subarray(0, 4), body.subarray(49, 53)))
+            throw new CipherError('CONFIGURATION_ERROR', MALFORMED);
+        const id = bytesToUuid(body.subarray(1, 17));
+        const key = await importEd25519Seed(body.subarray(17, 49));
+        return { env: prefix === 'nsc_dev_' ? 'development' : 'production', id, key };
+    }
+    finally {
+        body.fill(0);
+    }
+}
+/** Build a credential secret from its parts (used by the console when minting credentials). */
+export async function buildCredentialSecret(env, id, seed) {
+    const prefix = env === 'development' ? 'nsc_dev_' : 'nsc_live_';
+    const head = concat(new Uint8Array([1]), uuidBytes(id), seed);
+    const sum = await sha256(concat(utf8(prefix), head));
+    const body = concat(head, sum.subarray(0, 4));
+    const out = prefix + b64u(body);
+    head.fill(0);
+    body.fill(0);
+    return out;
+}
+/** Generate a fresh Ed25519 key pair: returns `{ seed, publicKey }` (raw bytes). */
+export async function generateCredentialKeyPair() {
+    const seed = randomBytes(32);
+    const key = await importEd25519Seed(seed, true);
+    const jwk = await subtle().exportKey('jwk', key);
+    return { seed, publicKey: unb64u(jwk.x) };
+}
+// ------------------------------------------------------------------------- JWS
+export async function signJws(typ, kid, claims, key) {
+    const h = b64u(utf8(JSON.stringify({ alg: 'EdDSA', typ, kid })));
+    const p = b64u(utf8(JSON.stringify(claims)));
+    const sig = new Uint8Array(await subtle().sign({ name: 'Ed25519' }, key, buf(utf8(`${h}.${p}`))));
+    return `${h}.${p}.${b64u(sig)}`;
+}
+export function peekJws(token) {
+    const [h, p] = token.split('.');
+    if (!h || !p)
+        throw new CipherError('PROTOCOL_ERROR', 'malformed token');
+    const dec = new TextDecoder();
+    return { header: JSON.parse(dec.decode(unb64u(h))), claims: JSON.parse(dec.decode(unb64u(p))) };
+}
+/** Verify an EdDSA compact JWS against a raw Ed25519 public key. */
+export async function verifyJws(token, typ, publicKey) {
+    const parts = token.split('.');
+    if (parts.length !== 3)
+        throw new CipherError('ATTESTATION_FAILED', 'malformed attestation token');
+    const { header, claims } = peekJws(token);
+    if (header.alg !== 'EdDSA' || header.typ !== typ)
+        throw new CipherError('ATTESTATION_FAILED', 'unexpected token type');
+    const key = await subtle().importKey('raw', buf(publicKey), { name: 'Ed25519' }, false, ['verify']);
+    const ok = await subtle().verify({ name: 'Ed25519' }, key, buf(unb64u(parts[2])), buf(utf8(`${parts[0]}.${parts[1]}`)));
+    if (!ok)
+        throw new CipherError('ATTESTATION_FAILED', 'attestation token signature is invalid');
+    return claims;
+}
+// --------------------------------------------------------------------- session
+//
+// Protocol §6.1: HPKE (RFC 9180) mode_base, KEM X-Wing = MLKEM768-X25519 (0x647a,
+// draft-ietf-hpke-pq), KDF HKDF-SHA256, export-only AEAD. The session secrets stay
+// confidential unless both ML-KEM-768 and X25519 are broken, which protects recorded
+// traffic against harvest-now-decrypt-later attacks. Clients only encapsulate, and there
+// is deliberately no fallback to the classical DHKEM(X25519) suite: a 32-byte session key
+// is rejected.
+/** X-Wing public key: ML-KEM-768 encapsulation key (1184) ‖ X25519 public key (32). */
+export const XWING_PUBLIC_KEY_LENGTH = 1216;
+/** X-Wing ciphertext (`enc`): ML-KEM-768 ciphertext (1088) ‖ X25519 ephemeral public key (32). */
+export const XWING_ENC_LENGTH = 1120;
+/** Length of the encapsulation seed: ML-KEM `m` (32) ‖ X25519 ephemeral secret (32). */
+const ESEED_LENGTH = 64;
+/** ByteEncode12(t̂) part of the ML-KEM-768 encapsulation key (k = 3), followed by the 32-byte ρ. */
+const MLKEM768_T_LENGTH = 1152;
+const MLKEM_Q = 3329;
+/**
+ * Reject anything but a well-formed X-Wing public key: the exact length, and the
+ * FIPS 203 §7.2 modulus check (every 12-bit coefficient of ek_M is < q).
+ */
+export function assertXWingPublicKey(pk) {
+    if (pk.length !== XWING_PUBLIC_KEY_LENGTH) {
+        throw new CipherError('ATTESTATION_FAILED', `enclave session key is not an X-Wing (MLKEM768-X25519) public key (${pk.length} bytes, expected ${XWING_PUBLIC_KEY_LENGTH})`);
+    }
+    for (let i = 0; i < MLKEM768_T_LENGTH; i += 3) {
+        const b0 = pk[i];
+        const b1 = pk[i + 1];
+        const b2 = pk[i + 2];
+        if ((b0 | ((b1 & 0x0f) << 8)) >= MLKEM_Q || ((b1 >> 4) | (b2 << 4)) >= MLKEM_Q) {
+            throw new CipherError('ATTESTATION_FAILED', 'enclave session key is not a valid ML-KEM-768 encapsulation key');
+        }
+    }
+}
+/** X-Wing (via @hpke/hybridkem-x-wing) that keeps the shared secrets it produces so they can be wiped. */
+class WipingXWing extends XWing {
+    secrets = [];
+    async encap(params) {
+        let r;
+        try {
+            r = await super.encap(params);
+        }
+        catch {
+            // e.g. an ML-KEM key check or a low-order X25519 point
+            throw new CipherError('ATTESTATION_FAILED', 'X-Wing encapsulation to the enclave session key failed');
+        }
+        this.secrets.push(new Uint8Array(r.sharedSecret));
+        return r;
+    }
+    wipe() {
+        for (const s of this.secrets)
+            s.fill(0);
+        this.secrets.length = 0;
+    }
+}
+/**
+ * Run `fn` with an X-Wing sender set up for `pk`. `eseed` (64 bytes) is for tests only:
+ * production draws 64 bytes from the CSPRNG. The seed and the shared secret are wiped afterwards.
+ */
+async function withEncapsulation(pk, eseed, fn) {
+    assertXWingPublicKey(pk);
+    if (eseed && eseed.length !== ESEED_LENGTH)
+        throw new CipherError('CONFIGURATION_ERROR', `eseed must be ${ESEED_LENGTH} bytes`);
+    const seed = eseed ? buf(eseed) : randomBytes(ESEED_LENGTH);
+    const kem = new WipingXWing();
+    try {
+        const recipientPublicKey = await kem.deserializePublicKey(buf(pk).buffer);
+        // Passed as the seed's own ArrayBuffer (not copied by the library), so wiping `seed` wipes its view too.
+        return await fn(kem, { recipientPublicKey, ekm: seed.buffer });
+    }
+    finally {
+        seed.fill(0);
+        kem.wipe();
+    }
+}
+/** X-Wing encapsulation to `pk` (KEM level; tests and diagnostics). `eseed` is for tests only. */
+export async function xwingEncapsulate(pk, eseed) {
+    return withEncapsulation(pk, eseed, async (kem, params) => {
+        const r = await kem.encap(params);
+        // Copy: the original is wiped when this returns.
+        return { enc: new Uint8Array(r.enc), sharedSecret: new Uint8Array(r.sharedSecret).slice() };
+    });
+}
+export function sessionInfo(instanceId, nonce) {
+    return concat(utf8('northstar-cipher/v1/session'), new Uint8Array([0]), uuidBytes(instanceId), nonce);
+}
+async function aesKey(raw) {
+    return subtle().importKey('raw', raw, { name: 'AES-GCM' }, false, ['encrypt', 'decrypt']);
+}
+/**
+ * HPKE SetupBaseS (X-Wing) to the attested session key; export the session secrets (protocol §6.1).
+ * `eseed` (64 bytes) makes the encapsulation deterministic and is for tests only.
+ */
+export async function establishSession(sessionPk, instanceId, nonce, eseed) {
+    return withEncapsulation(sessionPk, eseed, async (kem, params) => {
+        const suite = new CipherSuite({ kem, kdf: new HkdfSha256(), aead: new ExportOnly() });
+        const ctx = await suite.createSenderContext({ ...params, info: buf(sessionInfo(instanceId, nonce)).buffer });
+        const enc = new Uint8Array(ctx.enc);
+        if (enc.length !== XWING_ENC_LENGTH)
+            throw new CipherError('INTERNAL', 'unexpected X-Wing ciphertext length');
+        const c2s = await ctx.export(buf(utf8('nsc c2s')).buffer, 32);
+        const s2c = await ctx.export(buf(utf8('nsc s2c')).buffer, 32);
+        try {
+            const sid = new Uint8Array(await ctx.export(buf(utf8('nsc sid')).buffer, 16));
+            const keys = { c2s: await aesKey(c2s), s2c: await aesKey(s2c), sid };
+            const raw = eseed ? { c2s: new Uint8Array(c2s.slice(0)), s2c: new Uint8Array(s2c.slice(0)) } : undefined;
+            return { enc, keys, raw };
+        }
+        finally {
+            new Uint8Array(c2s).fill(0);
+            new Uint8Array(s2c).fill(0);
+        }
+    });
+}
+export function sessionIdFor(instanceId, sid) {
+    return `${instanceId}.${b64u(sid)}`;
+}
+export function requestAad(sessionId, method, path, timestampMs) {
+    return concat(lp(utf8('northstar-cipher/v1/request')), lp(utf8(sessionId)), lp(utf8(method)), lp(utf8(path)), lp(u64(timestampMs)));
+}
+export function responseAad(sessionId, requestNonce, status) {
+    return concat(lp(utf8('northstar-cipher/v1/response')), lp(utf8(sessionId)), lp(requestNonce), lp(u16(status)));
+}
+export async function seal(key, aad, plaintext, nonce = randomBytes(12)) {
+    const ct = await subtle().encrypt({ name: 'AES-GCM', iv: buf(nonce), additionalData: buf(aad), tagLength: 128 }, key, buf(plaintext));
+    return { nonce, ciphertext: new Uint8Array(ct) };
+}
+export async function open(key, nonce, aad, ciphertext) {
+    try {
+        return new Uint8Array(await subtle().decrypt({ name: 'AES-GCM', iv: buf(nonce), additionalData: buf(aad), tagLength: 128 }, key, buf(ciphertext)));
+    }
+    catch {
+        throw new CipherError('PROTOCOL_ERROR', 'response failed authentication');
+    }
+}
+export { randomBytes };
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAA4B,MAAM,YAAY,CAAA;AAC1F,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9H,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,UAAU,MAAM;IACpB,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAA;IACnC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,yEAAyE,CAAC,CAAA;IAC/H,OAAO,CAAC,CAAA;AACV,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAAa;IACjC,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACjE,CAAC;AAYD,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAEtI,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAgB,EAAE,WAAW,GAAG,KAAK;IAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IACvC,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAChG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,6GAA6G,CAAC,CAAA;IAC7J,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,qDAAqD,CAAA;AAEvE,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc;IAClD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IACvB,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAA;IACrG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,kDAAkD,CAAC,CAAA;IAC7G,IAAI,IAAgB,CAAA;IACpB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAA;QAChG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;QACpE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAA;QACnH,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1D,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,EAAE,CAAA;IAC/E,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACd,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAY,EAAE,EAAU,EAAE,IAAgB;IACpF,MAAM,MAAM,GAAG,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAA;IAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACZ,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC/C,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAChD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAE,CAAC,EAAE,CAAA;AAC5C,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,GAAW,EAAE,MAAe,EAAE,GAAc;IACrF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACjG,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;AACjC,CAAC;AAQD,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAA;IACxE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;IAC7B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACjG,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,GAAW,EAAE,SAAqB;IAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,6BAA6B,CAAC,CAAA;IAClG,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IACzC,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAA;IACtH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IACnG,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACxH,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,wCAAwC,CAAC,CAAA;IAC9F,OAAO,MAAM,CAAA;AACf,CAAC;AAED,gFAAgF;AAChF,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,qFAAqF;AACrF,yFAAyF;AACzF,0FAA0F;AAC1F,eAAe;AAEf,uFAAuF;AACvF,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAA;AAC3C,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAA;AACpC,wFAAwF;AACxF,MAAM,YAAY,GAAG,EAAE,CAAA;AACvB,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAC9B,MAAM,OAAO,GAAG,IAAI,CAAA;AAEpB;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAc;IACjD,IAAI,EAAE,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QAC1C,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,sEAAsE,EAAE,CAAC,MAAM,oBAAoB,uBAAuB,GAAG,CAAC,CAAA;IAC5K,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAE,CAAA;QACjB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAE,CAAA;QACrB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAE,CAAA;QACrB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;YAC/E,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,iEAAiE,CAAC,CAAA;QAChH,CAAC;IACH,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,MAAM,WAAY,SAAQ,KAAK;IACZ,OAAO,GAAiB,EAAE,CAAA;IAElC,KAAK,CAAC,KAAK,CAAC,MAA2B;QAC9C,IAAI,CAAkD,CAAA;QACtD,IAAI,CAAC;YACH,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;YACvD,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,wDAAwD,CAAC,CAAA;QACvG,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAA;QACjD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI;QACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAA;IACzB,CAAC;CACF;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,EAAc,EACd,KAA6B,EAC7B,EAAiE;IAEjE,oBAAoB,CAAC,EAAE,CAAC,CAAA;IACxB,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY;QAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,iBAAiB,YAAY,QAAQ,CAAC,CAAA;IAC/H,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAA;IAC3D,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;IAC7B,IAAI,CAAC;QACH,MAAM,kBAAkB,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;QACzE,yGAAyG;QACzG,OAAO,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAChE,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACZ,GAAG,CAAC,IAAI,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAc,EAAE,KAAkB;IACvE,OAAO,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACjC,iDAAiD;QACjD,OAAO,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;IAC7F,CAAC,CAAC,CAAA;AACJ,CAAC;AAQD,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,KAAiB;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAA;AACvG,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAgB;IACpC,OAAO,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAqB,EACrB,UAAkB,EAClB,KAAiB,EACjB,KAAkB;IAElB,OAAO,iBAAiB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC/D,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAA;QACrF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QAC5G,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,GAAG,CAAC,MAAM,KAAK,gBAAgB;YAAE,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,qCAAqC,CAAC,CAAA;QAC7G,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAC7D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAC7E,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAA;YACpE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YACxG,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;QAC3B,CAAC;gBAAS,CAAC;YACT,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC3B,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,GAAe;IAC9D,OAAO,GAAG,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;AACrC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,MAAc,EAAE,IAAY,EAAE,WAAmB;IAC7F,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;AACrI,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,YAAwB,EAAE,MAAc;IACrF,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACjH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,GAAc,EAAE,GAAe,EAAE,SAAqB,EAAE,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC;IACxG,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;IACrI,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAA;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,GAAc,EAAE,KAAiB,EAAE,GAAe,EAAE,UAAsB;IACnG,IAAI,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACpJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAA"}

package/dist/encoding.d.ts

@@ -0,0 +1,17 @@
+/** Strict base64url without padding (protocol §0) and small byte helpers. */
+export declare function utf8(s: string): Uint8Array;
+export declare function fromUtf8(b: Uint8Array): string;
+export declare function b64u(bytes: Uint8Array): string;
+export declare function unb64u(s: string): Uint8Array;
+export declare function concat(...parts: Uint8Array[]): Uint8Array;
+export declare function u16(n: number): Uint8Array;
+export declare function u32(n: number): Uint8Array;
+export declare function u64(n: number): Uint8Array;
+/** `u32(len) ‖ bytes` */
+export declare function lp(b: Uint8Array): Uint8Array;
+export declare function uuidBytes(uuid: string): Uint8Array;
+export declare function bytesToUuid(b: Uint8Array): string;
+export declare function equalBytes(a: Uint8Array, b: Uint8Array): boolean;
+export declare function randomBytes(n: number): Uint8Array;
+/** Copy into a fresh ArrayBuffer-backed view (WebCrypto rejects SharedArrayBuffer views). */
+export declare function buf(b: Uint8Array): Uint8Array<ArrayBuffer>;

package/dist/encoding.js

@@ -0,0 +1,79 @@
+/** Strict base64url without padding (protocol §0) and small byte helpers. */
+const enc = new TextEncoder();
+const dec = new TextDecoder('utf-8', { fatal: true });
+export function utf8(s) {
+    return enc.encode(s);
+}
+export function fromUtf8(b) {
+    return dec.decode(b);
+}
+export function b64u(bytes) {
+    let bin = '';
+    for (let i = 0; i < bytes.length; i++)
+        bin += String.fromCharCode(bytes[i]);
+    return btoa(bin).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+export function unb64u(s) {
+    if (!/^[A-Za-z0-9_-]*$/.test(s) || s.length % 4 === 1)
+        throw new TypeError('invalid base64url');
+    const bin = atob(s.replace(/-/g, '+').replace(/_/g, '/') + '='.repeat((4 - (s.length % 4)) % 4));
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+export function concat(...parts) {
+    const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let o = 0;
+    for (const p of parts) {
+        out.set(p, o);
+        o += p.length;
+    }
+    return out;
+}
+export function u16(n) {
+    return new Uint8Array([(n >>> 8) & 0xff, n & 0xff]);
+}
+export function u32(n) {
+    return new Uint8Array([(n >>> 24) & 0xff, (n >>> 16) & 0xff, (n >>> 8) & 0xff, n & 0xff]);
+}
+export function u64(n) {
+    const out = new Uint8Array(8);
+    new DataView(out.buffer).setBigUint64(0, BigInt(n));
+    return out;
+}
+/** `u32(len) ‖ bytes` */
+export function lp(b) {
+    return concat(u32(b.length), b);
+}
+export function uuidBytes(uuid) {
+    const hex = uuid.replace(/-/g, '');
+    if (!/^[0-9a-fA-F]{32}$/.test(hex))
+        throw new TypeError('invalid UUID');
+    const out = new Uint8Array(16);
+    for (let i = 0; i < 16; i++)
+        out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+export function bytesToUuid(b) {
+    const h = Array.from(b, (x) => x.toString(16).padStart(2, '0')).join('');
+    return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+}
+export function equalBytes(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let d = 0;
+    for (let i = 0; i < a.length; i++)
+        d |= a[i] ^ b[i];
+    return d === 0;
+}
+export function randomBytes(n) {
+    return globalThis.crypto.getRandomValues(new Uint8Array(n));
+}
+/** Copy into a fresh ArrayBuffer-backed view (WebCrypto rejects SharedArrayBuffer views). */
+export function buf(b) {
+    const out = new Uint8Array(new ArrayBuffer(b.length));
+    out.set(b);
+    return out;
+}
+//# sourceMappingURL=encoding.js.map

package/dist/encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../src/encoding.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAC7B,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAErD,MAAM,UAAU,IAAI,CAAC,CAAS;IAC5B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACtB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAa;IACpC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACtB,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,KAAiB;IACpC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;IAC5E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,CAAS;IAC9B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAA;IAC/F,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAChG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAC/D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAG,KAAmB;IAC3C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IACnE,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACb,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;IACf,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS;IAC3B,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;AACrD,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS;IAC3B,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS;IAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;IAC7B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IACnD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,EAAE,CAAC,CAAa;IAC9B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAClC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,cAAc,CAAC,CAAA;IACvE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC/E,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAa;IACvC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAA;AAClG,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAa,EAAE,CAAa;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACrD,OAAO,CAAC,KAAK,CAAC,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,GAAG,CAAC,CAAa;IAC/B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACrD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACV,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,14 @@
+/** Errors raised by the SDK. Messages never contain plaintext or secrets. */
+export type CipherErrorCode = 'AUTHENTICATION_FAILED' | 'SESSION_EXPIRED' | 'PERMISSION_DENIED' | 'TENANT_MISMATCH' | 'KEY_DISABLED' | 'ATTESTATION_FAILED' | 'KEY_NOT_FOUND' | 'INDEX_NOT_ENABLED' | 'NOT_FOUND' | 'CONFLICT' | 'INVALID_REQUEST' | 'INVALID_CONTEXT' | 'INVALID_CIPHERTEXT' | 'RATE_LIMITED' | 'RESOURCE_EXHAUSTED' | 'KEY_AUTHORITY_UNAVAILABLE' | 'SERVICE_UNAVAILABLE' | 'INTERNAL' | 'NETWORK_ERROR' | 'CONFIGURATION_ERROR' | 'PROTOCOL_ERROR' | (string & {});
+export declare class CipherError extends Error {
+    readonly code: CipherErrorCode;
+    readonly requestId?: string;
+    readonly status?: number;
+    readonly retryable: boolean;
+    constructor(code: CipherErrorCode, message: string, opts?: {
+        requestId?: string;
+        status?: number;
+        retryable?: boolean;
+    });
+}
+export declare function errorFromBody(status: number, body: unknown): CipherError;

package/dist/errors.js

@@ -0,0 +1,22 @@
+/** Errors raised by the SDK. Messages never contain plaintext or secrets. */
+export class CipherError extends Error {
+    code;
+    requestId;
+    status;
+    retryable;
+    constructor(code, message, opts = {}) {
+        super(`${code}: ${message}`);
+        this.name = 'CipherError';
+        this.code = code;
+        this.requestId = opts.requestId;
+        this.status = opts.status;
+        this.retryable = opts.retryable ?? false;
+    }
+}
+export function errorFromBody(status, body) {
+    const e = body?.error;
+    if (e?.code)
+        return new CipherError(e.code, e.message ?? 'request failed', { requestId: e.request_id, status, retryable: e.retryable });
+    return new CipherError('PROTOCOL_ERROR', `unexpected HTTP ${status} from Northstar Cipher`, { status, retryable: status >= 500 });
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,6EAA6E;AA0B7E,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAiB;IACrB,SAAS,CAAS;IAClB,MAAM,CAAS;IACf,SAAS,CAAS;IAE3B,YAAY,IAAqB,EAAE,OAAe,EAAE,OAAqE,EAAE;QACzH,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAA;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,IAAa;IACzD,MAAM,CAAC,GAAI,IAAyG,EAAE,KAAK,CAAA;IAC3H,IAAI,CAAC,EAAE,IAAI;QAAE,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAA;IACvI,OAAO,IAAI,WAAW,CAAC,gBAAgB,EAAE,mBAAmB,MAAM,wBAAwB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,EAAE,CAAC,CAAA;AACnI,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { NorthstarCipher, wireContext } from './client.js';
+export type { CipherContext, DecryptInput, DecryptObjectInput, DecryptOutput, EncryptInput, EncryptObjectInput, EncryptOutput, Normalization, NorthstarCipherOptions, SessionDetails, Settled, WireEvent, } from './client.js';
+export { CipherError } from './errors.js';
+export { EncryptedObject, canonicalContext, objectContentKey, objectLength, openObject, sealObject } from './object.js';
+export { SearchIndex } from './search.js';
+export type { SearchCiphertext, SearchDocument, SearchField, SearchFieldType, SearchFields, SearchFilter, SearchFilterValue, SearchHit, SearchIndexInfo, SearchIndexVersion, SearchLanguage, SearchQuery, SearchResult, SearchScalar, SearchSchema, SearchSchemaInput, SearchValue, SearchWriteMode, SearchWriteRequest, SearchWriteResult, } from './search.js';
+export type { CipherErrorCode } from './errors.js';
+export { buildCredentialSecret, generateCredentialKeyPair, parseCredential } from './crypto.js';

package/dist/index.js

@@ -0,0 +1,6 @@
+export { NorthstarCipher, wireContext } from './client.js';
+export { CipherError } from './errors.js';
+export { EncryptedObject, canonicalContext, objectContentKey, objectLength, openObject, sealObject } from './object.js';
+export { SearchIndex } from './search.js';
+export { buildCredentialSecret, generateCredentialKeyPair, parseCredential } from './crypto.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAe1D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACvH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAwBzC,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA"}

package/dist/integrations/drizzle.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Drizzle ORM helpers. Drizzle has no async lifecycle hooks, so encryption is an
+ * explicit, typed step around your queries.
+ *
+ * ```ts
+ * import { encrypted, northstarDrizzle, cipherEq } from '@northstartech/cipher/drizzle'
+ *
+ * export const todos = encrypted(
+ *   pgTable('todos', { id: serial('id').primaryKey(), title: text('title'), email: text('email'), emailBidx: varchar('email_bidx', { length: 64 }) }),
+ *   { title: true, email: { searchable: 'email', indexField: 'emailBidx' } },
+ * )
+ * const nsc = northstarDrizzle(cipher, { db })          // `db` reserves serial ids on PostgreSQL
+ *
+ * await db.insert(todos).values(await nsc.encryptRows(todos, [{ title: 'Buy milk', email: 'ana@example.com' }]))
+ * const rows = await nsc.decryptRows(todos, await db.select().from(todos))        // one decrypt request
+ * const tokens = await nsc.searchTokens(todos.email, 'ANA@example.com')
+ * const mine = await nsc.decryptRows(todos, await db.select().from(todos).where(cipherEq(todos.email, tokens)))
+ *
+ * // Northstar Search: index stored rows as they are (the enclave decrypts the ciphertext)
+ * await cipher.index('todos').upsert(searchDocuments(todos, await db.select().from(todos), ['title', 'email', 'done']))
+ * ```
+ */
+import { Column, type SQL, Table } from 'drizzle-orm';
+import type { NorthstarCipher } from '../client.js';
+import { CipherError } from '../errors.js';
+import { type CipherIntegrationOptions, type EncryptedFieldSpec } from './shared.js';
+import type { SearchDocument } from '../search.js';
+export { CIPHERTEXT_PREFIX, PENDING_SENTINEL } from './shared.js';
+export type { EncryptedFieldOptions, EncryptedFieldSpec, CipherIntegrationOptions } from './shared.js';
+type ColumnsOf<T extends Table> = T['_']['columns'];
+type ColumnKey<T extends Table> = keyof ColumnsOf<T> & string;
+/** Encrypted columns of a table, keyed by the table's JS property names. */
+export type DrizzleFieldsConfig<T extends Table> = Partial<Record<ColumnKey<T>, EncryptedFieldSpec>>;
+export interface EncryptedTableOptions<T extends Table> {
+    /** JS key of the primary-key column. Default: the column declared `.primaryKey()`. */
+    primaryKey?: ColumnKey<T>;
+}
+/** Anything with Drizzle's `execute(sql)`: a database or a transaction. */
+export interface DrizzleExecutor {
+    execute(query: SQL): Promise<unknown>;
+}
+export interface NorthstarDrizzleOptions extends CipherIntegrationOptions {
+    /** Used to reserve PostgreSQL serial/identity ids before inserts (override per call with `{ db: tx }`). */
+    db?: DrizzleExecutor;
+}
+/**
+ * Declare the encrypted columns of a Drizzle table (call once, next to the table
+ * definition). Returns the table unchanged so it can wrap the definition.
+ */
+export declare function encrypted<T extends Table>(table: T, fields: DrizzleFieldsConfig<T>, options?: EncryptedTableOptions<T>): T;
+/**
+ * Exact-match condition: `cipherEq(todos.email, tokens)` → `email_bidx IN (…tokens)`.
+ * Accepts the encrypted column (mapped to its blind index) or the blind-index column.
+ * Empty token lists match nothing.
+ */
+export declare function cipherEq(column: Column, tokens: readonly string[] | readonly (readonly string[])[]): SQL;
+/**
+ * Two-phase write, step 1 (databases where the id is only known after INSERT):
+ * the row with every non-null encrypted value replaced by the `nsc:pending:v1`
+ * sentinel. Insert it, then `update(...).set(await nsc.encryptRow(table, row, { recordId }))`
+ * `.where(and(eq(table.id, id), eq(table.col, PENDING_SENTINEL)))`, ideally in one transaction.
+ */
+export declare function pendingRow<T extends Table, R extends Record<string, unknown>>(table: T, row: R): R;
+/**
+ * Northstar Search documents for stored rows (`db.select().from(table)`, not
+ * decrypted): encrypted columns are sent as their ciphertext with the context
+ * they are bound to and decrypted inside the enclave, so indexing needs no
+ * decrypt request. Rows already decrypted with `decryptRows` work too (their
+ * plaintext is sent). Document ids are the primary keys; field names are the
+ * table's JS keys.
+ */
+export declare function searchDocuments<T extends Table>(table: T, rows: Record<string, unknown>[], fields: ColumnKey<T>[]): SearchDocument[];
+export interface EncryptRowOptions {
+    /** Record id to bind to (for updates of partial rows, or step 2 of the two-phase write). */
+    recordId?: string | number | bigint;
+    /** Database/transaction used to reserve PostgreSQL serial ids. */
+    db?: DrizzleExecutor;
+}
+/** The bound helper set returned by {@link northstarDrizzle}. */
+/** A row after encryption: the input plus the columns the helper may fill (primary key, blind indexes). */
+export type EncryptedRow<T extends Table, R> = R & Partial<T['$inferInsert']>;
+export interface NorthstarDrizzle {
+    encryptRow<T extends Table, R extends Partial<T['$inferInsert']>>(table: T, row: R, opts?: EncryptRowOptions): Promise<EncryptedRow<T, R>>;
+    encryptRows<T extends Table, R extends Partial<T['$inferInsert']>>(table: T, rows: R[], opts?: Omit<EncryptRowOptions, 'recordId'>): Promise<EncryptedRow<T, R>[]>;
+    decryptRows<T extends Table, R extends Record<string, unknown>>(table: T, rows: R[], opts?: {
+        purpose?: string;
+    }): Promise<R[]>;
+    decryptRow<T extends Table, R extends Record<string, unknown>>(table: T, row: R | undefined | null, opts?: {
+        purpose?: string;
+    }): Promise<R | undefined | null>;
+    searchTokens(column: Column, value: string | string[]): Promise<string[]>;
+    reserveIds<T extends Table>(table: T, count: number, db?: DrizzleExecutor): Promise<(number | bigint)[]>;
+}
+/** Bind the helpers to a Northstar Cipher client. */
+export declare function northstarDrizzle(cipher: NorthstarCipher, options?: NorthstarDrizzleOptions): NorthstarDrizzle;
+export { CipherError };