@omnituum/pqc-shared 0.4.0 → 0.6.0

package/dist/{integrity-ByMp24VA.d.cts → integrity-BkBDrHA-.d.cts}

@@ -1,14 +1,22 @@
-import { H as HybridIdentityRecord } from './types-Dx_AFqow.cjs';
+import { H as HybridIdentityRecord } from './types-DmnVueAY.cjs';
 
 /**
  * Omnituum PQC Shared - Integrity Verification
  *
- * SHA-256 based integrity checking for vault contents.
+ * SHA-256 checksum over a vault's public identity records.
+ *
+ * SCOPE: this is an UNKEYED integrity checksum — it detects accidental
+ * corruption or field mix-ups, not malicious tampering. An attacker who edits
+ * the decrypted vault can simply recompute this value. Tamper *resistance* for
+ * a stored vault comes from the AES-256-GCM authentication tag on the encrypted
+ * file (see vault/encrypt.ts), not from this hash. Do not treat a matching
+ * integrity hash as authentication.
  */
 
 /**
- * Compute SHA-256 integrity hash for a list of identities.
- * Uses only the public keys and metadata to create a deterministic hash.
+ * Compute a SHA-256 checksum for a list of identities.
+ * Uses only the public keys and metadata (never secret keys). Deterministic:
+ * the canonical objects carry a fixed key order, which JSON.stringify preserves.
  */
 declare function computeIntegrityHash(identities: HybridIdentityRecord[]): string;
 /**

package/dist/{integrity-BPvNsC50.d.ts → integrity-DsFJv5c-.d.ts}

@@ -1,14 +1,22 @@
-import { H as HybridIdentityRecord } from './types-Dx_AFqow.js';
+import { H as HybridIdentityRecord } from './types-DmnVueAY.js';
 
 /**
  * Omnituum PQC Shared - Integrity Verification
  *
- * SHA-256 based integrity checking for vault contents.
+ * SHA-256 checksum over a vault's public identity records.
+ *
+ * SCOPE: this is an UNKEYED integrity checksum — it detects accidental
+ * corruption or field mix-ups, not malicious tampering. An attacker who edits
+ * the decrypted vault can simply recompute this value. Tamper *resistance* for
+ * a stored vault comes from the AES-256-GCM authentication tag on the encrypted
+ * file (see vault/encrypt.ts), not from this hash. Do not treat a matching
+ * integrity hash as authentication.
  */
 
 /**
- * Compute SHA-256 integrity hash for a list of identities.
- * Uses only the public keys and metadata to create a deterministic hash.
+ * Compute a SHA-256 checksum for a list of identities.
+ * Uses only the public keys and metadata (never secret keys). Deterministic:
+ * the canonical objects carry a fixed key order, which JSON.stringify preserves.
  */
 declare function computeIntegrityHash(identities: HybridIdentityRecord[]): string;
 /**

package/dist/{types-Dx_AFqow.d.cts → types-DmnVueAY.d.cts}

@@ -8,16 +8,24 @@
  * @see pqc-docs/specs/vault.v1.md
  * @see pqc-docs/specs/identity.v1.md
  */
-/** HybridEnvelope version - hybrid encryption format (from registry) */
-declare const ENVELOPE_VERSION: "omnituum.hybrid.v1";
+/** HybridEnvelope v1 - independent X25519/Kyber wraps (read-only legacy; see v2) */
+declare const ENVELOPE_VERSION: any;
+/**
+ * HybridEnvelope v2 - AND-combined KEK (single wrap under
+ * HKDF(ss_mlkem || ss_x25519) with transcript binding). The version new
+ * envelopes are written in.
+ */
+declare const ENVELOPE_VERSION_V2: any;
 /** OmnituumVault version - decrypted vault format */
 declare const VAULT_VERSION: "omnituum.vault.v1";
 /** EncryptedVaultFile version - encrypted vault format (PBKDF2) */
 declare const VAULT_ENCRYPTED_VERSION: "omnituum.vault.enc.v1";
 /** EncryptedVaultFile v2 - encrypted vault format (Argon2id) */
 declare const VAULT_ENCRYPTED_VERSION_V2: "omnituum.vault.enc.v2";
-/** Algorithm suite for hybrid encryption */
+/** Algorithm suite for hybrid encryption (v1 label — kept for wire compat) */
 declare const ENVELOPE_SUITE: "x25519+kyber768";
+/** Algorithm suite for hybrid v2 (matches the actual ML-KEM-1024 backend) */
+declare const ENVELOPE_SUITE_V2: "x25519+mlkem1024";
 /** AEAD algorithm for envelope content */
 declare const ENVELOPE_AEAD: "xsalsa20poly1305";
 /** KDF for vault encryption (v1) */
@@ -27,7 +35,9 @@ declare const VAULT_KDF_V2: "Argon2id";
 /** Encryption algorithm for vault */
 declare const VAULT_ALGORITHM: "AES-256-GCM";
 /**
- * Validate envelope structure and version.
+ * Validate envelope structure and version. Dispatches per-version since v1
+ * and v2 have different wire shapes (independent dual wraps vs. a single
+ * AND-combined wrap) — see hybrid.ts for the security rationale.
  * Returns detailed validation result.
  */
 declare function validateEnvelope(envelope: unknown): {
@@ -183,4 +193,4 @@ interface VaultSession {
 declare const DEFAULT_VAULT_SETTINGS: VaultSettings;
 declare const PBKDF2_ITERATIONS = 600000;
 
-export { DEFAULT_VAULT_SETTINGS as D, type EncryptedVaultFile as E, type HybridIdentityRecord as H, type IdentityHealth as I, type OmnituumVault as O, PBKDF2_ITERATIONS as P, VAULT_VERSION as V, VAULT_ENCRYPTED_VERSION as a, VAULT_ENCRYPTED_VERSION_V2 as b, ENVELOPE_VERSION as c, ENVELOPE_SUITE as d, ENVELOPE_AEAD as e, VAULT_KDF as f, VAULT_KDF_V2 as g, VAULT_ALGORITHM as h, validateEnvelope as i, validateEncryptedVault as j, type EncryptedVaultFileV2 as k, type VaultSettings as l, type VaultSession as m, type EncryptedVaultFileV1 as n, type HealthStatus as o, validateVault as v };
+export { DEFAULT_VAULT_SETTINGS as D, type EncryptedVaultFile as E, type HybridIdentityRecord as H, type IdentityHealth as I, type OmnituumVault as O, PBKDF2_ITERATIONS as P, VAULT_VERSION as V, VAULT_ENCRYPTED_VERSION as a, VAULT_ENCRYPTED_VERSION_V2 as b, ENVELOPE_VERSION as c, ENVELOPE_VERSION_V2 as d, ENVELOPE_SUITE as e, ENVELOPE_SUITE_V2 as f, ENVELOPE_AEAD as g, VAULT_KDF as h, VAULT_KDF_V2 as i, VAULT_ALGORITHM as j, validateEnvelope as k, validateEncryptedVault as l, type EncryptedVaultFileV2 as m, type VaultSettings as n, type VaultSession as o, type EncryptedVaultFileV1 as p, type HealthStatus as q, validateVault as v };

package/dist/{types-Dx_AFqow.d.ts → types-DmnVueAY.d.ts}

@@ -8,16 +8,24 @@
  * @see pqc-docs/specs/vault.v1.md
  * @see pqc-docs/specs/identity.v1.md
  */
-/** HybridEnvelope version - hybrid encryption format (from registry) */
-declare const ENVELOPE_VERSION: "omnituum.hybrid.v1";
+/** HybridEnvelope v1 - independent X25519/Kyber wraps (read-only legacy; see v2) */
+declare const ENVELOPE_VERSION: any;
+/**
+ * HybridEnvelope v2 - AND-combined KEK (single wrap under
+ * HKDF(ss_mlkem || ss_x25519) with transcript binding). The version new
+ * envelopes are written in.
+ */
+declare const ENVELOPE_VERSION_V2: any;
 /** OmnituumVault version - decrypted vault format */
 declare const VAULT_VERSION: "omnituum.vault.v1";
 /** EncryptedVaultFile version - encrypted vault format (PBKDF2) */
 declare const VAULT_ENCRYPTED_VERSION: "omnituum.vault.enc.v1";
 /** EncryptedVaultFile v2 - encrypted vault format (Argon2id) */
 declare const VAULT_ENCRYPTED_VERSION_V2: "omnituum.vault.enc.v2";
-/** Algorithm suite for hybrid encryption */
+/** Algorithm suite for hybrid encryption (v1 label — kept for wire compat) */
 declare const ENVELOPE_SUITE: "x25519+kyber768";
+/** Algorithm suite for hybrid v2 (matches the actual ML-KEM-1024 backend) */
+declare const ENVELOPE_SUITE_V2: "x25519+mlkem1024";
 /** AEAD algorithm for envelope content */
 declare const ENVELOPE_AEAD: "xsalsa20poly1305";
 /** KDF for vault encryption (v1) */
@@ -27,7 +35,9 @@ declare const VAULT_KDF_V2: "Argon2id";
 /** Encryption algorithm for vault */
 declare const VAULT_ALGORITHM: "AES-256-GCM";
 /**
- * Validate envelope structure and version.
+ * Validate envelope structure and version. Dispatches per-version since v1
+ * and v2 have different wire shapes (independent dual wraps vs. a single
+ * AND-combined wrap) — see hybrid.ts for the security rationale.
  * Returns detailed validation result.
  */
 declare function validateEnvelope(envelope: unknown): {
@@ -183,4 +193,4 @@ interface VaultSession {
 declare const DEFAULT_VAULT_SETTINGS: VaultSettings;
 declare const PBKDF2_ITERATIONS = 600000;
 
-export { DEFAULT_VAULT_SETTINGS as D, type EncryptedVaultFile as E, type HybridIdentityRecord as H, type IdentityHealth as I, type OmnituumVault as O, PBKDF2_ITERATIONS as P, VAULT_VERSION as V, VAULT_ENCRYPTED_VERSION as a, VAULT_ENCRYPTED_VERSION_V2 as b, ENVELOPE_VERSION as c, ENVELOPE_SUITE as d, ENVELOPE_AEAD as e, VAULT_KDF as f, VAULT_KDF_V2 as g, VAULT_ALGORITHM as h, validateEnvelope as i, validateEncryptedVault as j, type EncryptedVaultFileV2 as k, type VaultSettings as l, type VaultSession as m, type EncryptedVaultFileV1 as n, type HealthStatus as o, validateVault as v };
+export { DEFAULT_VAULT_SETTINGS as D, type EncryptedVaultFile as E, type HybridIdentityRecord as H, type IdentityHealth as I, type OmnituumVault as O, PBKDF2_ITERATIONS as P, VAULT_VERSION as V, VAULT_ENCRYPTED_VERSION as a, VAULT_ENCRYPTED_VERSION_V2 as b, ENVELOPE_VERSION as c, ENVELOPE_VERSION_V2 as d, ENVELOPE_SUITE as e, ENVELOPE_SUITE_V2 as f, ENVELOPE_AEAD as g, VAULT_KDF as h, VAULT_KDF_V2 as i, VAULT_ALGORITHM as j, validateEnvelope as k, validateEncryptedVault as l, type EncryptedVaultFileV2 as m, type VaultSettings as n, type VaultSession as o, type EncryptedVaultFileV1 as p, type HealthStatus as q, validateVault as v };

package/dist/utils/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-require('@noble/hashes/sha2.js');
+var sha2_js = require('@noble/hashes/sha2.js');
 require('@noble/hashes/hmac.js');
 
 // src/utils/entropy.ts
@@ -61,11 +61,14 @@ function daysSinceRotation(lastRotatedAt, createdAt) {
 function shouldRotate(lastRotatedAt, createdAt, maxDays = 90) {
   return daysSinceRotation(lastRotatedAt, createdAt) >= maxDays;
 }
-new TextEncoder();
+var textEncoder = new TextEncoder();
 new TextDecoder();
 function toHex(bytes) {
   return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
+function sha256(bytes) {
+  return sha2_js.sha256(bytes);
+}
 
 // src/utils/integrity.ts
 function computeIntegrityHash(identities) {
@@ -77,17 +80,11 @@ function computeIntegrityHash(identities) {
     createdAt: i.createdAt,
     rotationCount: i.rotationCount
   }));
-  const serialized = JSON.stringify(canonical, Object.keys(canonical[0] || {}).sort());
+  const serialized = JSON.stringify(canonical);
   return computeStringHash(serialized);
 }
 function computeStringHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char;
-    hash = hash & hash;
-  }
-  return Math.abs(hash).toString(16).padStart(16, "0");
+  return toHex(sha256(textEncoder.encode(str)));
 }
 async function computeHashAsync(data) {
   const encoder = new TextEncoder();

package/dist/utils/index.d.cts

@@ -1,5 +1,5 @@
-export { a as computeHashAsync, c as computeIntegrityHash, b as computeKeyFingerprint, f as formatFingerprint, v as verifyIntegrity } from '../integrity-ByMp24VA.cjs';
-import '../types-Dx_AFqow.cjs';
+export { a as computeHashAsync, c as computeIntegrityHash, b as computeKeyFingerprint, f as formatFingerprint, v as verifyIntegrity } from '../integrity-BkBDrHA-.cjs';
+import '../types-DmnVueAY.cjs';
 
 /**
  * Omnituum PQC Shared - Entropy & Randomness Utilities

package/dist/utils/index.d.ts

@@ -1,5 +1,5 @@
-export { a as computeHashAsync, c as computeIntegrityHash, b as computeKeyFingerprint, f as formatFingerprint, v as verifyIntegrity } from '../integrity-BPvNsC50.js';
-import '../types-Dx_AFqow.js';
+export { a as computeHashAsync, c as computeIntegrityHash, b as computeKeyFingerprint, f as formatFingerprint, v as verifyIntegrity } from '../integrity-DsFJv5c-.js';
+import '../types-DmnVueAY.js';
 
 /**
  * Omnituum PQC Shared - Entropy & Randomness Utilities

package/dist/utils/index.js

@@ -1,4 +1,4 @@
-import '@noble/hashes/sha2.js';
+import { sha256 as sha256$1 } from '@noble/hashes/sha2.js';
 import '@noble/hashes/hmac.js';
 
 // src/utils/entropy.ts
@@ -59,11 +59,14 @@ function daysSinceRotation(lastRotatedAt, createdAt) {
 function shouldRotate(lastRotatedAt, createdAt, maxDays = 90) {
   return daysSinceRotation(lastRotatedAt, createdAt) >= maxDays;
 }
-new TextEncoder();
+var textEncoder = new TextEncoder();
 new TextDecoder();
 function toHex(bytes) {
   return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
+function sha256(bytes) {
+  return sha256$1(bytes);
+}
 
 // src/utils/integrity.ts
 function computeIntegrityHash(identities) {
@@ -75,17 +78,11 @@ function computeIntegrityHash(identities) {
     createdAt: i.createdAt,
     rotationCount: i.rotationCount
   }));
-  const serialized = JSON.stringify(canonical, Object.keys(canonical[0] || {}).sort());
+  const serialized = JSON.stringify(canonical);
   return computeStringHash(serialized);
 }
 function computeStringHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char;
-    hash = hash & hash;
-  }
-  return Math.abs(hash).toString(16).padStart(16, "0");
+  return toHex(sha256(textEncoder.encode(str)));
 }
 async function computeHashAsync(data) {
   const encoder = new TextEncoder();

package/dist/vault/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-require('@noble/hashes/sha2.js');
+var sha2_js = require('@noble/hashes/sha2.js');
 require('@noble/hashes/hmac.js');
 var envelopeRegistry = require('@omnituum/envelope-registry');
 var hashWasm = require('hash-wasm');
@@ -21,7 +21,7 @@ var DEFAULT_VAULT_SETTINGS = {
   showFingerprints: true
 };
 var PBKDF2_ITERATIONS = 6e5;
-new TextEncoder();
+var textEncoder = new TextEncoder();
 new TextDecoder();
 function toB64(bytes) {
   let binary = "";
@@ -44,8 +44,12 @@ function toHex(bytes) {
 function randN(n) {
   return globalThis.crypto.getRandomValues(new Uint8Array(n));
 }
+function sha256(bytes) {
+  return sha2_js.sha256(bytes);
+}
 var b64 = toB64;
 envelopeRegistry.OMNI_VERSIONS.HYBRID_V1;
+envelopeRegistry.OMNI_VERSIONS.HYBRID_V2;
 envelopeRegistry.DEPRECATED_VERSIONS.PQC_DEMO_HYBRID_V1;
 var VAULT_VERSION = "omnituum.vault.v1";
 var VAULT_ENCRYPTED_VERSION = "omnituum.vault.enc.v1";
@@ -337,17 +341,11 @@ function computeIntegrityHash(identities) {
     createdAt: i.createdAt,
     rotationCount: i.rotationCount
   }));
-  const serialized = JSON.stringify(canonical, Object.keys(canonical[0] || {}).sort());
+  const serialized = JSON.stringify(canonical);
   return computeStringHash(serialized);
 }
 function computeStringHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char;
-    hash = hash & hash;
-  }
-  return Math.abs(hash).toString(16).padStart(16, "0");
+  return toHex(sha256(textEncoder.encode(str)));
 }
 
 // src/utils/entropy.ts
@@ -398,7 +396,6 @@ async function createIdentity(name) {
   const x25519 = generateX25519Keypair();
   const kyber = await generateKyberKeypair();
   if (!kyber) {
-    console.error("Kyber key generation failed");
     return null;
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();

package/dist/vault/index.d.cts

@@ -1,5 +1,5 @@
-import { O as OmnituumVault, E as EncryptedVaultFile, k as EncryptedVaultFileV2, H as HybridIdentityRecord, l as VaultSettings, m as VaultSession } from '../types-Dx_AFqow.cjs';
-export { D as DEFAULT_VAULT_SETTINGS, n as EncryptedVaultFileV1, o as HealthStatus, I as IdentityHealth, P as PBKDF2_ITERATIONS } from '../types-Dx_AFqow.cjs';
+import { O as OmnituumVault, E as EncryptedVaultFile, m as EncryptedVaultFileV2, H as HybridIdentityRecord, n as VaultSettings, o as VaultSession } from '../types-DmnVueAY.cjs';
+export { D as DEFAULT_VAULT_SETTINGS, p as EncryptedVaultFileV1, q as HealthStatus, I as IdentityHealth, P as PBKDF2_ITERATIONS } from '../types-DmnVueAY.cjs';
 
 /**
  * Omnituum PQC Shared - Vault Encryption

package/dist/vault/index.d.ts

@@ -1,5 +1,5 @@
-import { O as OmnituumVault, E as EncryptedVaultFile, k as EncryptedVaultFileV2, H as HybridIdentityRecord, l as VaultSettings, m as VaultSession } from '../types-Dx_AFqow.js';
-export { D as DEFAULT_VAULT_SETTINGS, n as EncryptedVaultFileV1, o as HealthStatus, I as IdentityHealth, P as PBKDF2_ITERATIONS } from '../types-Dx_AFqow.js';
+import { O as OmnituumVault, E as EncryptedVaultFile, m as EncryptedVaultFileV2, H as HybridIdentityRecord, n as VaultSettings, o as VaultSession } from '../types-DmnVueAY.js';
+export { D as DEFAULT_VAULT_SETTINGS, p as EncryptedVaultFileV1, q as HealthStatus, I as IdentityHealth, P as PBKDF2_ITERATIONS } from '../types-DmnVueAY.js';
 
 /**
  * Omnituum PQC Shared - Vault Encryption

package/dist/vault/index.js

@@ -1,4 +1,4 @@
-import '@noble/hashes/sha2.js';
+import { sha256 as sha256$1 } from '@noble/hashes/sha2.js';
 import '@noble/hashes/hmac.js';
 import { OMNI_VERSIONS, DEPRECATED_VERSIONS } from '@omnituum/envelope-registry';
 import { argon2id } from 'hash-wasm';
@@ -15,7 +15,7 @@ var DEFAULT_VAULT_SETTINGS = {
   showFingerprints: true
 };
 var PBKDF2_ITERATIONS = 6e5;
-new TextEncoder();
+var textEncoder = new TextEncoder();
 new TextDecoder();
 function toB64(bytes) {
   let binary = "";
@@ -38,8 +38,12 @@ function toHex(bytes) {
 function randN(n) {
   return globalThis.crypto.getRandomValues(new Uint8Array(n));
 }
+function sha256(bytes) {
+  return sha256$1(bytes);
+}
 var b64 = toB64;
 OMNI_VERSIONS.HYBRID_V1;
+OMNI_VERSIONS.HYBRID_V2;
 DEPRECATED_VERSIONS.PQC_DEMO_HYBRID_V1;
 var VAULT_VERSION = "omnituum.vault.v1";
 var VAULT_ENCRYPTED_VERSION = "omnituum.vault.enc.v1";
@@ -331,17 +335,11 @@ function computeIntegrityHash(identities) {
     createdAt: i.createdAt,
     rotationCount: i.rotationCount
   }));
-  const serialized = JSON.stringify(canonical, Object.keys(canonical[0] || {}).sort());
+  const serialized = JSON.stringify(canonical);
   return computeStringHash(serialized);
 }
 function computeStringHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char;
-    hash = hash & hash;
-  }
-  return Math.abs(hash).toString(16).padStart(16, "0");
+  return toHex(sha256(textEncoder.encode(str)));
 }
 
 // src/utils/entropy.ts
@@ -392,7 +390,6 @@ async function createIdentity(name) {
   const x25519 = generateX25519Keypair();
   const kyber = await generateKyberKeypair();
   if (!kyber) {
-    console.error("Kyber key generation failed");
     return null;
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnituum/pqc-shared",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "Omnituum PQC Shared Library - Crypto, Vault, File Encryption, and Utilities",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -42,25 +42,13 @@
     "dist",
     "src"
   ],
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "clean": "rm -rf dist",
-    "typecheck": "tsc --noEmit",
-    "test:golden:generate": "pnpm -s build && tsx tests/golden/generate-vectors.ts",
-    "test:golden:verify": "pnpm -s build && tsx tests/golden/verify-vectors.ts",
-    "test:golden": "pnpm test:golden:verify",
-    "test": "vitest run tests/",
-    "test:watch": "vitest tests/",
-    "pretest": "pnpm build"
-  },
   "dependencies": {
-    "@noble/ciphers": "~2.0.0",
-    "@noble/hashes": "~2.0.0",
-    "@omnituum/envelope-registry": "github:Omnituum/envelope-registry#v0.1.2",
-    "@noble/post-quantum": "~0.5.4",
-    "hash-wasm": "^4.11.0",
-    "tweetnacl": "^1.0.3"
+    "@noble/ciphers": "2.0.1",
+    "@noble/hashes": "2.0.1",
+    "@omnituum/envelope-registry": "github:Omnituum/envelope-registry#v0.2.0",
+    "@noble/post-quantum": "0.5.4",
+    "hash-wasm": "4.12.0",
+    "tweetnacl": "1.0.3"
   },
   "devDependencies": {
     "@types/node": "^25.0.9",
@@ -91,10 +79,16 @@
     "url": "https://github.com/Omnituum/pqc-shared/issues"
   },
   "homepage": "https://github.com/Omnituum/pqc-shared#readme",
-  "packageManager": "pnpm@10.32.1",
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "@omnituum/envelope-registry"
-    ]
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit",
+    "test:golden:generate": "pnpm -s build && tsx tests/golden/generate-vectors.ts",
+    "test:golden:verify": "pnpm -s build && tsx tests/golden/verify-vectors.ts",
+    "test:golden": "pnpm test:golden:verify",
+    "test": "vitest run tests/",
+    "test:watch": "vitest tests/",
+    "pretest": "pnpm build"
   }
-}
+}

package/src/crypto/dilithium.ts

@@ -44,8 +44,8 @@ async function loadDilithium(): Promise<any> {
     const { ml_dsa65 } = await import('@noble/post-quantum/ml-dsa.js');
     dilithiumModule = ml_dsa65;
     return dilithiumModule;
-  } catch (e) {
-    console.warn('[Dilithium] Failed to load @noble/post-quantum:', e);
+  } catch {
+    // Backend unavailable in this environment; callers handle the null return.
     return null;
   }
 }
@@ -83,8 +83,8 @@ export async function generateDilithiumKeypair(): Promise<DilithiumKeypairB64 |
       publicB64: toB64(kp.publicKey),
       secretB64: toB64(kp.secretKey),
     };
-  } catch (e) {
-    console.warn('[Dilithium] Key generation failed:', e);
+  } catch {
+    // Never log the caught error: it can reference seed/key material.
     return null;
   }
 }