@reallyme/crypto 0.1.8 → 0.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reallyme/crypto",
-  "version": "0.1.8",
+  "version": "0.2.0",
   "description": "ReallyMe crypto SDK for TypeScript/JavaScript with an explicit, pinned provider set.",
   "license": "Apache-2.0",
   "type": "module",
@@ -25,19 +25,24 @@
   },
   "files": [
     "dist",
+    "LICENSE",
     "README.md"
   ],
   "scripts": {
     "build": "node scripts/clean-dist.mjs && npm run build:wasm && tsc",
     "build:ts": "tsc",
     "build:wasm": "node scripts/build-wasm.mjs",
+    "pack:check": "node scripts/check-pack.mjs",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm test && npm run pack:check",
     "typecheck": "tsc --noEmit",
     "test": "npm run build && node --test \"test/*.test.mjs\""
   },
   "dependencies": {
     "@bufbuild/protobuf": "2.12.1",
     "@noble/curves": "2.2.0",
-    "@noble/hashes": "2.2.0"
+    "@noble/hashes": "2.2.0",
+    "@reallyme/codec": "0.1.21"
   },
   "devDependencies": {
     "typescript": "5.8.3"

package/dist/codecs.d.ts

@@ -1,35 +0,0 @@
-export type ReallyMeMulticodecTag = "encryption" | "hash" | "key" | "multihash" | "multikey";
-export type ReallyMeKeyMaterialKind = "not-key" | "public-key" | "private-key" | "symmetric-key";
-export type ReallyMeMulticodecMetadata = Readonly<{
-    name: string;
-    alg: string;
-    tag: ReallyMeMulticodecTag;
-    keyMaterial: ReallyMeKeyMaterialKind;
-    prefix: Uint8Array;
-    expectedKeyLength?: number;
-}>;
-export type ReallyMeParsedMultikey = Readonly<{
-    codecName: string;
-    algorithmName: string;
-    publicKey: Uint8Array;
-    expectedPublicKeyLength?: number;
-}>;
-export type ReallyMeDagCborCidVerification = Readonly<{
-    valid: boolean;
-    expectedCid: string;
-    actualCid: string;
-}>;
-export declare const ReallyMeCodecs: {
-    readonly base64urlEncode: (bytes: Uint8Array) => string;
-    readonly base64urlDecode: (encoded: string) => Uint8Array;
-    readonly base64urlDecodeBytes: (encoded: Uint8Array) => Uint8Array;
-    readonly multibaseBase64urlEncode: (bytes: Uint8Array) => string;
-    readonly multibaseBase58btcEncode: (bytes: Uint8Array) => string;
-    readonly multibaseDecode: (encoded: string) => Uint8Array;
-    readonly multicodecPrefixForName: (codecName: string) => ReallyMeMulticodecMetadata;
-    readonly multicodecLookupPrefix: (bytes: Uint8Array) => ReallyMeMulticodecMetadata;
-    readonly multikeyEncode: (codecName: string, publicKey: Uint8Array) => string;
-    readonly multikeyParse: (multikey: string) => ReallyMeParsedMultikey;
-    readonly dagCborComputeCid: (bytes: Uint8Array) => string;
-    readonly dagCborVerifyCid: (cid: string, bytes: Uint8Array) => ReallyMeDagCborCidVerification;
-};

package/dist/codecs.js

@@ -1,216 +0,0 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
-//
-// SPDX-License-Identifier: Apache-2.0
-import { ReallyMeCryptoError } from "./errors.js";
-import { requireReallyMeWasmProvider } from "./wasmProvider.js";
-const validTags = new Set([
-    "encryption",
-    "hash",
-    "key",
-    "multihash",
-    "multikey",
-]);
-const validKeyMaterialKinds = new Set([
-    "not-key",
-    "public-key",
-    "private-key",
-    "symmetric-key",
-]);
-const ensureStringInput = (value) => {
-    if (typeof value !== "string" || value.length === 0) {
-        throw new ReallyMeCryptoError("invalid-input");
-    }
-};
-const ensureBytesInput = (value) => {
-    if (!(value instanceof Uint8Array)) {
-        throw new ReallyMeCryptoError("invalid-input");
-    }
-};
-const requireObjectOutput = (value) => {
-    if (typeof value !== "object" || value === null) {
-        throw new ReallyMeCryptoError("provider-failure");
-    }
-    return value;
-};
-const readStringOutput = (value) => {
-    if (typeof value !== "string") {
-        throw new ReallyMeCryptoError("provider-failure");
-    }
-    return value;
-};
-const readBytesOutput = (value) => {
-    if (!(value instanceof Uint8Array)) {
-        throw new ReallyMeCryptoError("provider-failure");
-    }
-    return value;
-};
-const readStringProperty = (object, propertyName) => {
-    const property = Reflect.get(object, propertyName);
-    if (typeof property !== "string" || property.length === 0) {
-        throw new ReallyMeCryptoError("provider-failure");
-    }
-    return property;
-};
-const readBooleanProperty = (object, propertyName) => {
-    const property = Reflect.get(object, propertyName);
-    if (typeof property !== "boolean") {
-        throw new ReallyMeCryptoError("provider-failure");
-    }
-    return property;
-};
-const readBytesProperty = (object, propertyName) => {
-    const property = Reflect.get(object, propertyName);
-    if (!(property instanceof Uint8Array)) {
-        throw new ReallyMeCryptoError("provider-failure");
-    }
-    return property;
-};
-const readOptionalLengthProperty = (object, propertyName) => {
-    const property = Reflect.get(object, propertyName);
-    if (property === undefined) {
-        return undefined;
-    }
-    if (typeof property !== "number" || !Number.isSafeInteger(property) || property < 0) {
-        throw new ReallyMeCryptoError("provider-failure");
-    }
-    return property;
-};
-const readTagProperty = (object) => {
-    const tag = readStringProperty(object, "tag");
-    if (!validTags.has(tag)) {
-        throw new ReallyMeCryptoError("provider-failure");
-    }
-    switch (tag) {
-        case "encryption":
-        case "hash":
-        case "key":
-        case "multihash":
-        case "multikey":
-            return tag;
-        default:
-            throw new ReallyMeCryptoError("provider-failure");
-    }
-};
-const readKeyMaterialProperty = (object) => {
-    const keyMaterial = readStringProperty(object, "keyMaterial");
-    if (!validKeyMaterialKinds.has(keyMaterial)) {
-        throw new ReallyMeCryptoError("provider-failure");
-    }
-    switch (keyMaterial) {
-        case "not-key":
-        case "public-key":
-        case "private-key":
-        case "symmetric-key":
-            return keyMaterial;
-        default:
-            throw new ReallyMeCryptoError("provider-failure");
-    }
-};
-const readMulticodecMetadata = (value) => {
-    const object = requireObjectOutput(value);
-    const expectedKeyLength = readOptionalLengthProperty(object, "expectedKeyLength");
-    if (expectedKeyLength === undefined) {
-        return {
-            name: readStringProperty(object, "name"),
-            alg: readStringProperty(object, "alg"),
-            tag: readTagProperty(object),
-            keyMaterial: readKeyMaterialProperty(object),
-            prefix: readBytesProperty(object, "prefix"),
-        };
-    }
-    return {
-        name: readStringProperty(object, "name"),
-        alg: readStringProperty(object, "alg"),
-        tag: readTagProperty(object),
-        keyMaterial: readKeyMaterialProperty(object),
-        prefix: readBytesProperty(object, "prefix"),
-        expectedKeyLength,
-    };
-};
-const readParsedMultikey = (value) => {
-    const object = requireObjectOutput(value);
-    const expectedPublicKeyLength = readOptionalLengthProperty(object, "expectedPublicKeyLength");
-    if (expectedPublicKeyLength === undefined) {
-        return {
-            codecName: readStringProperty(object, "codecName"),
-            algorithmName: readStringProperty(object, "algorithmName"),
-            publicKey: readBytesProperty(object, "publicKey"),
-        };
-    }
-    return {
-        codecName: readStringProperty(object, "codecName"),
-        algorithmName: readStringProperty(object, "algorithmName"),
-        publicKey: readBytesProperty(object, "publicKey"),
-        expectedPublicKeyLength,
-    };
-};
-const readCidVerification = (value) => {
-    const object = requireObjectOutput(value);
-    return {
-        valid: readBooleanProperty(object, "valid"),
-        expectedCid: readStringProperty(object, "expectedCid"),
-        actualCid: readStringProperty(object, "actualCid"),
-    };
-};
-const asciiBytesToString = (bytes) => {
-    let value = "";
-    for (const byte of bytes) {
-        if (byte > 0x7f) {
-            throw new ReallyMeCryptoError("invalid-input");
-        }
-        value += String.fromCharCode(byte);
-    }
-    return value;
-};
-export const ReallyMeCodecs = {
-    base64urlEncode(bytes) {
-        ensureBytesInput(bytes);
-        return readStringOutput(requireReallyMeWasmProvider().base64urlEncode(bytes));
-    },
-    base64urlDecode(encoded) {
-        ensureStringInput(encoded);
-        return readBytesOutput(requireReallyMeWasmProvider().base64urlDecode(encoded));
-    },
-    base64urlDecodeBytes(encoded) {
-        ensureBytesInput(encoded);
-        return readBytesOutput(requireReallyMeWasmProvider().base64urlDecode(asciiBytesToString(encoded)));
-    },
-    multibaseBase64urlEncode(bytes) {
-        ensureBytesInput(bytes);
-        return readStringOutput(requireReallyMeWasmProvider().multibaseBase64urlEncode(bytes));
-    },
-    multibaseBase58btcEncode(bytes) {
-        ensureBytesInput(bytes);
-        return readStringOutput(requireReallyMeWasmProvider().multibaseBase58btcEncode(bytes));
-    },
-    multibaseDecode(encoded) {
-        ensureStringInput(encoded);
-        return readBytesOutput(requireReallyMeWasmProvider().multibaseDecode(encoded));
-    },
-    multicodecPrefixForName(codecName) {
-        ensureStringInput(codecName);
-        return readMulticodecMetadata(requireReallyMeWasmProvider().multicodecPrefixForName(codecName));
-    },
-    multicodecLookupPrefix(bytes) {
-        ensureBytesInput(bytes);
-        return readMulticodecMetadata(requireReallyMeWasmProvider().multicodecLookupPrefix(bytes));
-    },
-    multikeyEncode(codecName, publicKey) {
-        ensureStringInput(codecName);
-        ensureBytesInput(publicKey);
-        return readStringOutput(requireReallyMeWasmProvider().multikeyEncode(codecName, publicKey));
-    },
-    multikeyParse(multikey) {
-        ensureStringInput(multikey);
-        return readParsedMultikey(requireReallyMeWasmProvider().multikeyParse(multikey));
-    },
-    dagCborComputeCid(bytes) {
-        ensureBytesInput(bytes);
-        return readStringOutput(requireReallyMeWasmProvider().dagCborComputeCid(bytes));
-    },
-    dagCborVerifyCid(cid, bytes) {
-        ensureStringInput(cid);
-        ensureBytesInput(bytes);
-        return readCidVerification(requireReallyMeWasmProvider().dagCborVerifyCid(cid, bytes));
-    },
-};

package/dist/proto/generated/reallyme/codec/v1/codec_pb.d.ts

@@ -1,253 +0,0 @@
-import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
-import type { Message } from "@bufbuild/protobuf";
-/**
- * Describes the file reallyme/codec/v1/codec.proto.
- */
-export declare const file_reallyme_codec_v1_codec: GenFile;
-/**
- * CodecError is the public, non-PII error envelope for codec boundary failures.
- * The oneof keeps base encoding, PEM, multiformat, and canonicalization
- * failures distinct while the shared CodecErrorReason enum provides stable
- * cross-language reason codes.
- *
- * @generated from message reallyme.codec.v1.CodecError
- */
-export type CodecError = Message<"reallyme.codec.v1.CodecError"> & {
-    /**
-     * @generated from oneof reallyme.codec.v1.CodecError.error
-     */
-    error: {
-        /**
-         * @generated from field: reallyme.codec.v1.CodecBaseEncodingError base_encoding = 1;
-         */
-        value: CodecBaseEncodingError;
-        case: "baseEncoding";
-    } | {
-        /**
-         * @generated from field: reallyme.codec.v1.CodecPemError pem = 2;
-         */
-        value: CodecPemError;
-        case: "pem";
-    } | {
-        /**
-         * @generated from field: reallyme.codec.v1.CodecMultiformatError multiformat = 3;
-         */
-        value: CodecMultiformatError;
-        case: "multiformat";
-    } | {
-        /**
-         * @generated from field: reallyme.codec.v1.CodecCanonicalizationError canonicalization = 4;
-         */
-        value: CodecCanonicalizationError;
-        case: "canonicalization";
-    } | {
-        case: undefined;
-        value?: undefined;
-    };
-};
-/**
- * Describes the message reallyme.codec.v1.CodecError.
- * Use `create(CodecErrorSchema)` to create a new message.
- */
-export declare const CodecErrorSchema: GenMessage<CodecError>;
-/**
- * CodecBaseEncodingError describes base64, base64url, hex, and generic byte
- * encoding failures.
- *
- * @generated from message reallyme.codec.v1.CodecBaseEncodingError
- */
-export type CodecBaseEncodingError = Message<"reallyme.codec.v1.CodecBaseEncodingError"> & {
-    /**
-     * Reason must be one of the CODEC_ERROR_REASON_BASE_* values.
-     *
-     * @generated from field: reallyme.codec.v1.CodecErrorReason reason = 1;
-     */
-    reason: CodecErrorReason;
-};
-/**
- * Describes the message reallyme.codec.v1.CodecBaseEncodingError.
- * Use `create(CodecBaseEncodingErrorSchema)` to create a new message.
- */
-export declare const CodecBaseEncodingErrorSchema: GenMessage<CodecBaseEncodingError>;
-/**
- * CodecPemError describes RFC 7468-style PEM armor boundary and body failures.
- *
- * @generated from message reallyme.codec.v1.CodecPemError
- */
-export type CodecPemError = Message<"reallyme.codec.v1.CodecPemError"> & {
-    /**
-     * Reason must be one of the CODEC_ERROR_REASON_PEM_* values.
-     *
-     * @generated from field: reallyme.codec.v1.CodecErrorReason reason = 1;
-     */
-    reason: CodecErrorReason;
-};
-/**
- * Describes the message reallyme.codec.v1.CodecPemError.
- * Use `create(CodecPemErrorSchema)` to create a new message.
- */
-export declare const CodecPemErrorSchema: GenMessage<CodecPemError>;
-/**
- * CodecMultiformatError describes multibase, multicodec, and multikey
- * envelope failures.
- *
- * @generated from message reallyme.codec.v1.CodecMultiformatError
- */
-export type CodecMultiformatError = Message<"reallyme.codec.v1.CodecMultiformatError"> & {
-    /**
-     * Reason must be one of the CODEC_ERROR_REASON_MULTIFORMAT_* values.
-     *
-     * @generated from field: reallyme.codec.v1.CodecErrorReason reason = 1;
-     */
-    reason: CodecErrorReason;
-};
-/**
- * Describes the message reallyme.codec.v1.CodecMultiformatError.
- * Use `create(CodecMultiformatErrorSchema)` to create a new message.
- */
-export declare const CodecMultiformatErrorSchema: GenMessage<CodecMultiformatError>;
-/**
- * CodecCanonicalizationError describes CBOR, DAG-CBOR, JCS, and JSON
- * canonicalization failures.
- *
- * @generated from message reallyme.codec.v1.CodecCanonicalizationError
- */
-export type CodecCanonicalizationError = Message<"reallyme.codec.v1.CodecCanonicalizationError"> & {
-    /**
-     * Reason must be one of the CODEC_ERROR_REASON_CANONICAL_* values.
-     *
-     * @generated from field: reallyme.codec.v1.CodecErrorReason reason = 1;
-     */
-    reason: CodecErrorReason;
-};
-/**
- * Describes the message reallyme.codec.v1.CodecCanonicalizationError.
- * Use `create(CodecCanonicalizationErrorSchema)` to create a new message.
- */
-export declare const CodecCanonicalizationErrorSchema: GenMessage<CodecCanonicalizationError>;
-/**
- * CodecErrorReason is the component-owned reason-code enum for reallyme/codec.
- * Values are stable public boundary codes; local parser errors must map into
- * one of these before crossing RPC, SDK, FFI, storage, audit, or telemetry
- * boundaries. Numeric ranges are intentionally split by codec subpart:
- *   100-199: base encodings
- *   200-299: PEM armor
- *   300-399: multiformats and key envelopes
- *   400-499: CBOR/JCS/JSON canonicalization
- *
- * @generated from enum reallyme.codec.v1.CodecErrorReason
- */
-export declare enum CodecErrorReason {
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_UNSPECIFIED = 0;
-     */
-    UNSPECIFIED = 0,
-    /**
-     * Base encodings and generic byte-envelope limits.
-     *
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_UNSUPPORTED_CODEC = 100;
-     */
-    BASE_UNSUPPORTED_CODEC = 100,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_INVALID_ENCODING = 101;
-     */
-    BASE_INVALID_ENCODING = 101,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_INVALID_LENGTH = 102;
-     */
-    BASE_INVALID_LENGTH = 102,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_INPUT_TOO_LARGE = 103;
-     */
-    BASE_INPUT_TOO_LARGE = 103,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_OUTPUT_TOO_LARGE = 104;
-     */
-    BASE_OUTPUT_TOO_LARGE = 104,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_INVALID_BASE64 = 110;
-     */
-    BASE_INVALID_BASE64 = 110,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_INVALID_BASE64URL = 111;
-     */
-    BASE_INVALID_BASE64URL = 111,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_NON_CANONICAL_BASE64URL = 112;
-     */
-    BASE_NON_CANONICAL_BASE64URL = 112,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_INVALID_HEX = 120;
-     */
-    BASE_INVALID_HEX = 120,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_BASE_NON_CANONICAL_HEX = 121;
-     */
-    BASE_NON_CANONICAL_HEX = 121,
-    /**
-     * PEM armor.
-     *
-     * @generated from enum value: CODEC_ERROR_REASON_PEM_INVALID_BOUNDARY = 200;
-     */
-    PEM_INVALID_BOUNDARY = 200,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_PEM_LABEL_MISMATCH = 201;
-     */
-    PEM_LABEL_MISMATCH = 201,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_PEM_UNSUPPORTED_LABEL = 202;
-     */
-    PEM_UNSUPPORTED_LABEL = 202,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_PEM_INVALID_BODY = 203;
-     */
-    PEM_INVALID_BODY = 203,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_PEM_DER_TOO_LARGE = 204;
-     */
-    PEM_DER_TOO_LARGE = 204,
-    /**
-     * Multiformats and key envelopes.
-     *
-     * @generated from enum value: CODEC_ERROR_REASON_MULTIFORMAT_INVALID_MULTIBASE_PREFIX = 300;
-     */
-    MULTIFORMAT_INVALID_MULTIBASE_PREFIX = 300,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_MULTIFORMAT_INVALID_MULTICODEC_PREFIX = 301;
-     */
-    MULTIFORMAT_INVALID_MULTICODEC_PREFIX = 301,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_MULTIFORMAT_UNKNOWN_MULTICODEC = 302;
-     */
-    MULTIFORMAT_UNKNOWN_MULTICODEC = 302,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_MULTIFORMAT_INVALID_MULTIKEY = 303;
-     */
-    MULTIFORMAT_INVALID_MULTIKEY = 303,
-    /**
-     * CBOR, DAG-CBOR, JCS, and JSON canonicalization.
-     *
-     * @generated from enum value: CODEC_ERROR_REASON_CANONICAL_INVALID_CBOR = 400;
-     */
-    CANONICAL_INVALID_CBOR = 400,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_CANONICAL_NON_CANONICAL_CBOR = 401;
-     */
-    CANONICAL_NON_CANONICAL_CBOR = 401,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_CANONICAL_INVALID_JSON = 402;
-     */
-    CANONICAL_INVALID_JSON = 402,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_CANONICAL_NON_CANONICAL_JSON = 403;
-     */
-    CANONICAL_NON_CANONICAL_JSON = 403,
-    /**
-     * @generated from enum value: CODEC_ERROR_REASON_CANONICAL_INTERNAL = 404;
-     */
-    CANONICAL_INTERNAL = 404
-}
-/**
- * Describes the enum reallyme.codec.v1.CodecErrorReason.
- */
-export declare const CodecErrorReasonSchema: GenEnum<CodecErrorReason>;