@sempdev/semp 0.4.3

package/dist/recovery/sign.js

@@ -0,0 +1,359 @@
+/**
+ * Sign / verify primitives for recovery wire records per
+ * RECOVERY.md §5.2, §5.3, §7.3, §7.5.
+ *
+ * @module
+ */
+import { marshal as canonicalMarshal } from "../canonical/index.js";
+import { sign as ed25519Sign, verify as ed25519Verify } from "../keys/index.js";
+import { signSignedDoc, verifySignedDoc } from "../keys/index.js";
+import { RecoveryManifestPrefix, RecoveryShareSignaturePrefix, SignatureAlgorithmEd25519, SuccessorRecordPrefix, } from "./types.js";
+// ---------------------------------------------------------------------------
+// SuccessorRecord — three-signature record per §7.3
+/**
+ * Pre-populate the algorithm + key_id fields on all three signature
+ * blocks so the canonical bytes are stable across the three signing
+ * passes. Every signing pass signs the SAME canonical bytes (with
+ * all three `value` fields elided), so this MUST be called before
+ * any of the {@link signSuccessor*} functions.
+ */
+export function prepareSuccessorSignatures(r, recoveryKeyId, newKeyId, domainKeyId) {
+    r.recovery_signature.algorithm = SignatureAlgorithmEd25519;
+    r.recovery_signature.key_id = recoveryKeyId;
+    r.recovery_signature.value = "";
+    r.new_key_signature.algorithm = SignatureAlgorithmEd25519;
+    r.new_key_signature.key_id = newKeyId;
+    r.new_key_signature.value = "";
+    r.domain_signature.algorithm = SignatureAlgorithmEd25519;
+    r.domain_signature.key_id = domainKeyId;
+    r.domain_signature.value = "";
+}
+/** Sign `r.recovery_signature` per §7.3. */
+export function signSuccessorRecovery(r, recoveryPriv, recoveryKeyId) {
+    return signOneOfThree(r, "recovery_signature", recoveryPriv, recoveryKeyId, "recoveryKeyId");
+}
+/** Sign `r.new_key_signature` per §7.3. */
+export function signSuccessorNewKey(r, newIdentityPriv, newKeyId) {
+    return signOneOfThree(r, "new_key_signature", newIdentityPriv, newKeyId, "newKeyId");
+}
+/** Sign `r.domain_signature` per §7.3. */
+export function signSuccessorDomain(r, domainPriv, domainKeyId) {
+    return signOneOfThree(r, "domain_signature", domainPriv, domainKeyId, "domainKeyId");
+}
+function signOneOfThree(r, field, priv, keyId, argLabel) {
+    if (priv.length === 0) {
+        throw new Error(`recovery: empty private key for ${field}`);
+    }
+    if (keyId === "") {
+        throw new Error(`recovery: empty ${argLabel}`);
+    }
+    validateSuccessorRecord(r, { skipSignatureCheck: true });
+    const sigBlock = r[field];
+    if (sigBlock.algorithm === "" || sigBlock.key_id === "") {
+        throw new Error(`recovery: call prepareSuccessorSignatures before sign${field}`);
+    }
+    if (sigBlock.key_id !== keyId) {
+        throw new Error(`recovery: ${field}.key_id ${JSON.stringify(sigBlock.key_id)} does not match passed ${argLabel} ${JSON.stringify(keyId)}`);
+    }
+    sigBlock.value = "";
+    const canonical = canonicalSuccessorBytesElidingThreeSignatures(r);
+    const signingInput = concat(new TextEncoder().encode(SuccessorRecordPrefix), canonical);
+    const sig = ed25519Sign(priv, signingInput);
+    const sigB64 = base64Encode(sig);
+    sigBlock.value = sigB64;
+    return sigB64;
+}
+/**
+ * Verify the two device-side signatures (recovery, new_key) on `r`
+ * and accept an empty `domain_signature.value`. This is what the
+ * home server runs on receipt of a key-compromise rotation cascade
+ * (KEY.md §10.5.5): the device produced both signatures, the server
+ * has not yet added its own.
+ */
+export function verifySuccessorTwoSignatures(r, recoveryVerifyPub, newKeyPub) {
+    // Skip the full-signature-presence check; this two-signature
+    // entry point intentionally accepts an empty domain signature.
+    validateSuccessorRecord(r, { skipSignatureCheck: true });
+    if (r.recovery_signature.value === "" || r.new_key_signature.value === "") {
+        return false;
+    }
+    if (r.domain_signature.value !== "") {
+        throw new Error("recovery: verifySuccessorTwoSignatures called on a fully-signed record; use verifySuccessorRecord");
+    }
+    const canonical = canonicalSuccessorBytesElidingThreeSignatures(r);
+    const signingInput = concat(new TextEncoder().encode(SuccessorRecordPrefix), canonical);
+    if (!ed25519Verify(recoveryVerifyPub, base64Decode(r.recovery_signature.value), signingInput)) {
+        return false;
+    }
+    if (!ed25519Verify(newKeyPub, base64Decode(r.new_key_signature.value), signingInput)) {
+        return false;
+    }
+    return true;
+}
+/** Verify all three signatures on `r` per §7.5. */
+export function verifySuccessorRecord(r, recoveryVerifyPub, newKeyPub, domainPub) {
+    validateSuccessorRecord(r);
+    if (r.recovery_signature.value === "" ||
+        r.new_key_signature.value === "" ||
+        r.domain_signature.value === "") {
+        return false;
+    }
+    const canonical = canonicalSuccessorBytesElidingThreeSignatures(r);
+    const signingInput = concat(new TextEncoder().encode(SuccessorRecordPrefix), canonical);
+    return (ed25519Verify(recoveryVerifyPub, base64Decode(r.recovery_signature.value), signingInput) &&
+        ed25519Verify(newKeyPub, base64Decode(r.new_key_signature.value), signingInput) &&
+        ed25519Verify(domainPub, base64Decode(r.domain_signature.value), signingInput));
+}
+/** Structural validation per §7. Throws on first violation. */
+export function validateSuccessorRecord(r, opts = {}) {
+    if (r.type !== "SEMP_SUCCESSOR") {
+        throw new Error(`recovery: successor type ${JSON.stringify(r.type)}, want SEMP_SUCCESSOR`);
+    }
+    for (const f of ["user_id", "prior_key_id", "new_key_id", "new_public_key", "recovered_at"]) {
+        if (typeof r[f] !== "string" || r[f] === "") {
+            throw new Error(`recovery: successor record missing ${f}`);
+        }
+    }
+    if (Number.isNaN(Date.parse(r.recovered_at))) {
+        throw new Error("recovery: recovered_at is not ISO 8601");
+    }
+    for (const f of ["recovery_signature", "new_key_signature", "domain_signature"]) {
+        if (typeof r[f]?.algorithm !== "string") {
+            throw new Error(`recovery: ${f}.algorithm missing`);
+        }
+        if (typeof r[f]?.key_id !== "string") {
+            throw new Error(`recovery: ${f}.key_id missing`);
+        }
+        if (typeof r[f]?.value !== "string") {
+            throw new Error(`recovery: ${f}.value must be a string`);
+        }
+    }
+    if (!opts.skipSignatureCheck &&
+        (r.recovery_signature.value === "" ||
+            r.new_key_signature.value === "" ||
+            r.domain_signature.value === "")) {
+        throw new Error("recovery: successor record missing one or more signatures");
+    }
+}
+/**
+ * Canonical bytes of `r` with all three signature `value` fields
+ * elided to "" (algorithm and key_id are covered).
+ */
+function canonicalSuccessorBytesElidingThreeSignatures(r) {
+    const clone = JSON.parse(JSON.stringify(r));
+    for (const f of ["recovery_signature", "new_key_signature", "domain_signature"]) {
+        const sig = clone[f];
+        sig.value = "";
+    }
+    return canonicalMarshal(clone);
+}
+// ---------------------------------------------------------------------------
+// RecoverySetManifest — single user-identity signature per §5.2
+/**
+ * Sign `m.signature` with the user's identity private key per §5.2.
+ * Pre-populates algorithm + key_id so the canonical bytes cover them.
+ */
+export function signManifest(m, identityPriv, identityKeyId) {
+    if (identityKeyId === "") {
+        throw new Error("recovery: empty identity key_id");
+    }
+    validateManifest(m, { skipSignatureCheck: true });
+    m.signature.algorithm = SignatureAlgorithmEd25519;
+    m.signature.key_id = identityKeyId;
+    m.signature.value = "";
+    const { signedJSON, signatureB64 } = signSignedDoc({
+        preSignJSON: m,
+        seed: identityPriv,
+        signaturePath: "signature.value",
+        prefix: RecoveryManifestPrefix,
+    });
+    // signSignedDoc returns a clone; mutate the caller-supplied object
+    // in place so behavior matches the other recovery sign* functions.
+    m.signature.value = signedJSON.signature.value;
+    return signatureB64;
+}
+/** Verify `m.signature` against `identityPub` per §5.2. */
+export function verifyManifest(m, identityPub) {
+    validateManifest(m);
+    if (m.signature.value === "") {
+        return false;
+    }
+    const { ok } = verifySignedDoc({
+        signedJSON: m,
+        publicKey: identityPub,
+        signaturePath: "signature.value",
+        prefix: RecoveryManifestPrefix,
+    });
+    return ok;
+}
+/** Structural validation per §5.2. Throws on first violation. */
+export function validateManifest(m, opts = {}) {
+    if (m.type !== "SEMP_RECOVERY_SET_MANIFEST") {
+        throw new Error(`recovery: manifest type ${JSON.stringify(m.type)}, want SEMP_RECOVERY_SET_MANIFEST`);
+    }
+    if (typeof m.bundle_id !== "string" || m.bundle_id === "") {
+        throw new Error("recovery: manifest missing bundle_id");
+    }
+    if (!Number.isInteger(m.threshold) || m.threshold < 1) {
+        throw new Error(`recovery: manifest threshold ${m.threshold} MUST be >= 1`);
+    }
+    if (!Number.isInteger(m.total_shares) || m.total_shares < m.threshold) {
+        throw new Error(`recovery: manifest total_shares ${m.total_shares} MUST be >= threshold ${m.threshold}`);
+    }
+    if (!Array.isArray(m.contributors) || m.contributors.length !== m.total_shares) {
+        throw new Error(`recovery: manifest contributors length ${m.contributors?.length ?? 0} MUST equal total_shares ${m.total_shares}`);
+    }
+    if (typeof m.issued_at !== "string" || m.issued_at === "") {
+        throw new Error("recovery: manifest missing issued_at");
+    }
+    const seenIndex = new Set();
+    const seenDevice = new Set();
+    for (let i = 0; i < m.contributors.length; i++) {
+        const c = m.contributors[i];
+        if (!Number.isInteger(c.share_index) ||
+            c.share_index < 1 ||
+            c.share_index > m.total_shares) {
+            throw new Error(`recovery: manifest contributors[${i}] share_index ${c.share_index} out of [1, ${m.total_shares}]`);
+        }
+        if (seenIndex.has(c.share_index)) {
+            throw new Error(`recovery: manifest share_index ${c.share_index} appears more than once`);
+        }
+        seenIndex.add(c.share_index);
+        if (typeof c.device_id !== "string" || c.device_id === "") {
+            throw new Error(`recovery: manifest contributors[${i}] missing device_id`);
+        }
+        if (seenDevice.has(c.device_id)) {
+            throw new Error(`recovery: manifest device_id ${JSON.stringify(c.device_id)} appears more than once`);
+        }
+        seenDevice.add(c.device_id);
+        if (typeof c.device_identity_pubkey?.public_key !== "string" ||
+            c.device_identity_pubkey.public_key === "") {
+            throw new Error(`recovery: manifest contributors[${i}] missing device_identity_pubkey.public_key`);
+        }
+        if (typeof c.device_identity_pubkey?.algorithm !== "string" ||
+            c.device_identity_pubkey.algorithm === "") {
+            throw new Error(`recovery: manifest contributors[${i}] missing device_identity_pubkey.algorithm`);
+        }
+    }
+    if (!opts.skipSignatureCheck && m.signature.value === "") {
+        throw new Error("recovery: manifest is unsigned");
+    }
+}
+// ---------------------------------------------------------------------------
+// RecoveryShareRecord — single device-identity signature per §5.3
+/** Sign `s.device_signature` with the device's identity private key per §5.3. */
+export function signShareRecord(s, devicePriv, deviceKeyId) {
+    if (deviceKeyId === "") {
+        throw new Error("recovery: empty device key_id");
+    }
+    validateShareRecord(s, { skipSignatureCheck: true });
+    s.device_signature.algorithm = SignatureAlgorithmEd25519;
+    s.device_signature.key_id = deviceKeyId;
+    s.device_signature.value = "";
+    const { signedJSON, signatureB64 } = signSignedDoc({
+        preSignJSON: s,
+        seed: devicePriv,
+        signaturePath: "device_signature.value",
+        prefix: RecoveryShareSignaturePrefix,
+    });
+    s.device_signature.value = signedJSON.device_signature.value;
+    return signatureB64;
+}
+/** Verify `s.device_signature` against `devicePub` per §5.3. */
+export function verifyShareRecord(s, devicePub) {
+    validateShareRecord(s);
+    if (s.device_signature.value === "") {
+        return false;
+    }
+    const { ok } = verifySignedDoc({
+        signedJSON: s,
+        publicKey: devicePub,
+        signaturePath: "device_signature.value",
+        prefix: RecoveryShareSignaturePrefix,
+    });
+    return ok;
+}
+/** Structural validation per §5.3. Throws on first violation. */
+export function validateShareRecord(s, opts = {}) {
+    if (s.type !== "SEMP_RECOVERY_SHARE") {
+        throw new Error(`recovery: share type ${JSON.stringify(s.type)}, want SEMP_RECOVERY_SHARE`);
+    }
+    if (typeof s.bundle_id !== "string" || s.bundle_id === "") {
+        throw new Error("recovery: share record missing bundle_id");
+    }
+    if (!Number.isInteger(s.share_index) || s.share_index < 1) {
+        throw new Error(`recovery: share record share_index ${s.share_index} MUST be >= 1`);
+    }
+    if (!Number.isInteger(s.threshold) ||
+        s.threshold < 1 ||
+        !Number.isInteger(s.total_shares) ||
+        s.total_shares < s.threshold ||
+        s.share_index > s.total_shares) {
+        throw new Error(`recovery: share record (threshold=${s.threshold}, total_shares=${s.total_shares}, share_index=${s.share_index}) is inconsistent`);
+    }
+    if (typeof s.device_id !== "string" || s.device_id === "") {
+        throw new Error("recovery: share record missing device_id");
+    }
+    if (typeof s.share_value !== "string" || s.share_value === "") {
+        throw new Error("recovery: share record missing share_value");
+    }
+    if (typeof s.issued_at !== "string" || s.issued_at === "") {
+        throw new Error("recovery: share record missing issued_at");
+    }
+    if (!opts.skipSignatureCheck && s.device_signature.value === "") {
+        throw new Error("recovery: share record is unsigned");
+    }
+}
+/**
+ * Cross-check that `s` belongs to `m` per §5.3 step 2: bundle_id,
+ * share_index, device_id, threshold, total_shares MUST all match.
+ * Returns true when every check passes.
+ */
+export function checkShareMatchesManifest(s, m) {
+    if (s.bundle_id !== m.bundle_id) {
+        return false;
+    }
+    if (s.threshold !== m.threshold) {
+        return false;
+    }
+    if (s.total_shares !== m.total_shares) {
+        return false;
+    }
+    for (const c of m.contributors) {
+        if (c.share_index !== s.share_index) {
+            continue;
+        }
+        return c.device_id === s.device_id;
+    }
+    return false;
+}
+// ---------------------------------------------------------------------------
+// Helpers
+function concat(a, b) {
+    const out = new Uint8Array(a.length + b.length);
+    out.set(a, 0);
+    out.set(b, a.length);
+    return out;
+}
+function base64Encode(b) {
+    if (typeof Buffer !== "undefined") {
+        return Buffer.from(b).toString("base64");
+    }
+    let bin = "";
+    for (let i = 0; i < b.length; i++) {
+        bin += String.fromCharCode(b[i] ?? 0);
+    }
+    return btoa(bin);
+}
+function base64Decode(s) {
+    if (typeof Buffer !== "undefined") {
+        return new Uint8Array(Buffer.from(s, "base64"));
+    }
+    const bin = atob(s);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++) {
+        out[i] = bin.charCodeAt(i);
+    }
+    return out;
+}
+//# sourceMappingURL=sign.js.map

package/dist/recovery/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../src/recovery/sign.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAElE,OAAO,EAIL,sBAAsB,EACtB,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,8EAA8E;AAC9E,oDAAoD;AAEpD;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,CAAkB,EAClB,aAAqB,EACrB,QAAgB,EAChB,WAAmB;IAEnB,CAAC,CAAC,kBAAkB,CAAC,SAAS,GAAG,yBAAyB,CAAC;IAC3D,CAAC,CAAC,kBAAkB,CAAC,MAAM,GAAG,aAAa,CAAC;IAC5C,CAAC,CAAC,kBAAkB,CAAC,KAAK,GAAG,EAAE,CAAC;IAChC,CAAC,CAAC,iBAAiB,CAAC,SAAS,GAAG,yBAAyB,CAAC;IAC1D,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,QAAQ,CAAC;IACtC,CAAC,CAAC,iBAAiB,CAAC,KAAK,GAAG,EAAE,CAAC;IAC/B,CAAC,CAAC,gBAAgB,CAAC,SAAS,GAAG,yBAAyB,CAAC;IACzD,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,WAAW,CAAC;IACxC,CAAC,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;AAChC,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,qBAAqB,CACnC,CAAkB,EAClB,YAAwB,EACxB,aAAqB;IAErB,OAAO,cAAc,CACnB,CAAC,EACD,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,eAAe,CAChB,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,mBAAmB,CACjC,CAAkB,EAClB,eAA2B,EAC3B,QAAgB;IAEhB,OAAO,cAAc,CACnB,CAAC,EACD,mBAAmB,EACnB,eAAe,EACf,QAAQ,EACR,UAAU,CACX,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,mBAAmB,CACjC,CAAkB,EAClB,UAAsB,EACtB,WAAmB;IAEnB,OAAO,cAAc,CACnB,CAAC,EACD,kBAAkB,EAClB,UAAU,EACV,WAAW,EACX,aAAa,CACd,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,CAAkB,EAClB,KAAsE,EACtE,IAAgB,EAChB,KAAa,EACb,QAAgB;IAEhB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,uBAAuB,CAAC,CAAC,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,QAAQ,CAAC,SAAS,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,wDAAwD,KAAK,EAAE,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,aAAa,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC1H,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;IACpB,MAAM,SAAS,GAAG,6CAA6C,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,MAAM,CACzB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAC/C,SAAS,CACV,CAAC;IACF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,CAAkB,EAClB,iBAA6B,EAC7B,SAAqB;IAErB,6DAA6D;IAC7D,+DAA+D;IAC/D,uBAAuB,CAAC,CAAC,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,kBAAkB,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,CAAC,iBAAiB,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,6CAA6C,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,MAAM,CACzB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAC/C,SAAS,CACV,CAAC;IACF,IACE,CAAC,aAAa,CACZ,iBAAiB,EACjB,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,EACxC,YAAY,CACb,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,CAAC,aAAa,CACZ,SAAS,EACT,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,EACvC,YAAY,CACb,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,qBAAqB,CACnC,CAAkB,EAClB,iBAA6B,EAC7B,SAAqB,EACrB,SAAqB;IAErB,uBAAuB,CAAC,CAAC,CAAC,CAAC;IAC3B,IACE,CAAC,CAAC,kBAAkB,CAAC,KAAK,KAAK,EAAE;QACjC,CAAC,CAAC,iBAAiB,CAAC,KAAK,KAAK,EAAE;QAChC,CAAC,CAAC,gBAAgB,CAAC,KAAK,KAAK,EAAE,EAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,6CAA6C,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,MAAM,CACzB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAC/C,SAAS,CACV,CAAC;IACF,OAAO,CACL,aAAa,CACX,iBAAiB,EACjB,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,EACxC,YAAY,CACb;QACD,aAAa,CACX,SAAS,EACT,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,EACvC,YAAY,CACb;QACD,aAAa,CACX,SAAS,EACT,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EACtC,YAAY,CACb,CACF,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,uBAAuB,CACrC,CAAkB,EAClB,OAAyC,EAAE;IAE3C,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,cAAc,CAAU,EAAE,CAAC;QACrG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,CAAU,EAAE,CAAC;QACzF,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,IACE,CAAC,IAAI,CAAC,kBAAkB;QACxB,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,KAAK,EAAE;YAChC,CAAC,CAAC,iBAAiB,CAAC,KAAK,KAAK,EAAE;YAChC,CAAC,CAAC,gBAAgB,CAAC,KAAK,KAAK,EAAE,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,6CAA6C,CACpD,CAAkB;IAElB,MAAM,KAAK,GAA4B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,CAAU,EAAE,CAAC;QACzF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAA4B,CAAC;QAChD,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;IACjB,CAAC;IACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,gEAAgE;AAEhE;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,CAAsB,EACtB,YAAwB,EACxB,aAAqB;IAErB,IAAI,aAAa,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,gBAAgB,CAAC,CAAC,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,SAAS,CAAC,SAAS,GAAG,yBAAyB,CAAC;IAClD,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,aAAa,CAAC;IACnC,CAAC,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC;QACjD,WAAW,EAAE,CAAuC;QACpD,IAAI,EAAE,YAAY;QAClB,aAAa,EAAE,iBAAiB;QAChC,MAAM,EAAE,sBAAsB;KAC/B,CAAC,CAAC;IACH,mEAAmE;IACnE,mEAAmE;IACnE,CAAC,CAAC,SAAS,CAAC,KAAK,GAAI,UAAU,CAAC,SAA+B,CAAC,KAAK,CAAC;IACtE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAC5B,CAAsB,EACtB,WAAuB;IAEvB,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC;QAC7B,UAAU,EAAE,CAAuC;QACnD,SAAS,EAAE,WAAW;QACtB,aAAa,EAAE,iBAAiB;QAChC,MAAM,EAAE,sBAAsB;KAC/B,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAC9B,CAAsB,EACtB,OAAyC,EAAE;IAE3C,IAAI,CAAC,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAmC,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,SAAS,eAAe,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,mCAAmC,CAAC,CAAC,YAAY,yBAAyB,CAAC,CAAC,SAAS,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,0CAA0C,CAAC,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,4BAA4B,CAAC,CAAC,YAAY,EAAE,CAClH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC;QAC7B,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;YAChC,CAAC,CAAC,WAAW,GAAG,CAAC;YACjB,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,YAAY,EAC9B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,mCAAmC,CAAC,iBAAiB,CAAC,CAAC,WAAW,eAAe,CAAC,CAAC,YAAY,GAAG,CACnG,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,kCAAkC,CAAC,CAAC,WAAW,yBAAyB,CACzE,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC7B,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,qBAAqB,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CACrF,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5B,IACE,OAAO,CAAC,CAAC,sBAAsB,EAAE,UAAU,KAAK,QAAQ;YACxD,CAAC,CAAC,sBAAsB,CAAC,UAAU,KAAK,EAAE,EAC1C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,mCAAmC,CAAC,6CAA6C,CAClF,CAAC;QACJ,CAAC;QACD,IACE,OAAO,CAAC,CAAC,sBAAsB,EAAE,SAAS,KAAK,QAAQ;YACvD,CAAC,CAAC,sBAAsB,CAAC,SAAS,KAAK,EAAE,EACzC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,mCAAmC,CAAC,4CAA4C,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAElE,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAC7B,CAAsB,EACtB,UAAsB,EACtB,WAAmB;IAEnB,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,mBAAmB,CAAC,CAAC,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,gBAAgB,CAAC,SAAS,GAAG,yBAAyB,CAAC;IACzD,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,WAAW,CAAC;IACxC,CAAC,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;IAC9B,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC;QACjD,WAAW,EAAE,CAAuC;QACpD,IAAI,EAAE,UAAU;QAChB,aAAa,EAAE,wBAAwB;QACvC,MAAM,EAAE,4BAA4B;KACrC,CAAC,CAAC;IACH,CAAC,CAAC,gBAAgB,CAAC,KAAK,GAAI,UAAU,CAAC,gBAAsC,CAAC,KAAK,CAAC;IACpF,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,iBAAiB,CAC/B,CAAsB,EACtB,SAAqB;IAErB,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC;QAC7B,UAAU,EAAE,CAAuC;QACnD,SAAS,EAAE,SAAS;QACpB,aAAa,EAAE,wBAAwB;QACvC,MAAM,EAAE,4BAA4B;KACrC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CACjC,CAAsB,EACtB,OAAyC,EAAE;IAE3C,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,sCAAsC,CAAC,CAAC,WAAW,eAAe,CACnE,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9B,CAAC,CAAC,SAAS,GAAG,CAAC;QACf,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;QACjC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,SAAS;QAC5B,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,YAAY,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qCAAqC,CAAC,CAAC,SAAS,kBAAkB,CAAC,CAAC,YAAY,iBAAiB,CAAC,CAAC,WAAW,mBAAmB,CAClI,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,gBAAgB,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,CAAsB,EACtB,CAAsB;IAEtB,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QACD,OAAO,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,UAAU;AAEV,SAAS,MAAM,CAAC,CAAa,EAAE,CAAa;IAC1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/recovery/types.d.ts

@@ -0,0 +1,180 @@
+/**
+ * Wire-record types for SEMP account recovery per RECOVERY.md.
+ *
+ * @module
+ */
+/** Wire-level type discriminators per RECOVERY.md. */
+export declare const SuccessorRecordType = "SEMP_SUCCESSOR";
+export declare const RecoverySetManifestType = "SEMP_RECOVERY_SET_MANIFEST";
+export declare const RecoveryShareRecordType = "SEMP_RECOVERY_SHARE";
+export declare const BundleType = "SEMP_BACKUP_BUNDLE";
+export declare const RecordVersion = "1.0.0";
+/** Domain-separation prefixes per ENVELOPE.md §4.3. */
+export declare const SuccessorRecordPrefix = "SEMP-SUCCESSOR-RECORD:";
+export declare const RecoveryManifestPrefix = "SEMP-RECOVERY-MANIFEST:";
+export declare const RecoveryShareSignaturePrefix = "SEMP-RECOVERY-SHARE:";
+export declare const RecoveryBundlePrefix = "SEMP-RECOVERY-BUNDLE:";
+/** Only signature algorithm currently defined for recovery records. */
+export declare const SignatureAlgorithmEd25519 = "ed25519";
+/** Bundle payload AEAD per §2.5: xchacha20-poly1305 with 24-byte nonce. */
+export declare const BundlePayloadAEAD = "xchacha20-poly1305";
+/** Bundle KDF per §2.5: Argon2id. */
+export declare const KDFAlgorithmArgon2id = "argon2id";
+/** Argon2id parameter floors per §2.5. */
+export declare const MinKDFMemoryKB = 65536;
+export declare const MinKDFIterations = 2;
+export declare const MinKDFParallelism = 1;
+export declare const MinKDFSaltBytes = 16;
+export declare const RecommendedKDFMemoryKB = 262144;
+export declare const RecommendedKDFIterations = 3;
+export declare const RecommendedKDFParallelism = 4;
+/** Reusable signature block. */
+export interface RecoverySignatureBlock {
+    algorithm: string;
+    key_id: string;
+    value: string;
+}
+/**
+ * SEMP_SUCCESSOR per §7.2 — links a prior identity key to a new one
+ * after recovery or rotation. Carries three independent signatures
+ * so third-party domains can verify continuity without needing the
+ * prior identity private key.
+ */
+export interface SuccessorRecord {
+    type: typeof SuccessorRecordType;
+    version: string;
+    user_id: string;
+    prior_key_id: string;
+    new_key_id: string;
+    /** Base64. */
+    new_public_key: string;
+    /** ISO 8601 UTC. */
+    recovered_at: string;
+    recovery_signature: RecoverySignatureBlock;
+    new_key_signature: RecoverySignatureBlock;
+    domain_signature: RecoverySignatureBlock;
+}
+/** Embedded device-key block carried in each manifest contributor entry. */
+export interface DeviceIdentityPubkey {
+    algorithm: string;
+    /** Base64. */
+    public_key: string;
+    key_id: string;
+}
+/** One device's binding to a Shamir share inside a manifest. */
+export interface RecoveryContributor {
+    share_index: number;
+    device_id: string;
+    device_identity_pubkey: DeviceIdentityPubkey;
+}
+/**
+ * SEMP_RECOVERY_SET_MANIFEST per §5.2 — binds each Shamir share
+ * index to a specific device's identity public key.
+ */
+export interface RecoverySetManifest {
+    type: typeof RecoverySetManifestType;
+    version: string;
+    bundle_id: string;
+    threshold: number;
+    total_shares: number;
+    contributors: RecoveryContributor[];
+    /** ISO 8601 UTC. */
+    issued_at: string;
+    signature: RecoverySignatureBlock;
+}
+/**
+ * SEMP_RECOVERY_SHARE per §5.3 — one device's holding of a Shamir
+ * share, authenticated by the device's identity-key signature.
+ */
+export interface RecoveryShareRecord {
+    type: typeof RecoveryShareRecordType;
+    version: string;
+    bundle_id: string;
+    share_index: number;
+    device_id: string;
+    threshold: number;
+    total_shares: number;
+    /** Base64. */
+    share_value: string;
+    /** ISO 8601 UTC. */
+    issued_at: string;
+    device_signature: RecoverySignatureBlock;
+}
+/** KDF parameter block carried in a backup bundle per §2.1 / §2.5. */
+export interface BundleKDF {
+    algorithm: string;
+    /** Base64 salt. */
+    salt: string;
+    memory_kb: number;
+    iterations: number;
+    parallelism: number;
+}
+/** Public half of the deterministic recovery key pair per §3.3. */
+export interface RecoveryVerifyPK {
+    algorithm: string;
+    /** Base64. */
+    public_key: string;
+}
+/** Inner identity-key block carried in {@link BundlePayload} per §2.3. */
+export interface IdentityKey {
+    algorithm: string;
+    /** Base64-encoded public key. */
+    public_key: string;
+    /** Base64-encoded private key. */
+    private_key: string;
+    /** ISO 8601 UTC. */
+    created: string;
+    /** ISO 8601 UTC; absent when the key does not expire. */
+    expires?: string;
+}
+/** Inner encryption-key block carried in {@link BundlePayload} per §2.3. */
+export interface EncryptionKey {
+    algorithm: string;
+    key_id: string;
+    /** Base64-encoded public key. */
+    public_key: string;
+    /** Base64-encoded private key. */
+    private_key: string;
+    /** ISO 8601 UTC. */
+    created: string;
+    /** ISO 8601 UTC; absent when the key does not expire. */
+    expires?: string;
+    /** ISO 8601 UTC; null when the key is still current. */
+    superseded_at?: string | null;
+}
+/**
+ * Plaintext shape of {@link BackupBundle.encrypted_payload} per
+ * §2.3. Includes superseded + revoked encryption keys so envelopes
+ * sealed under any historical key remain decryptable after recovery.
+ */
+export interface BundlePayload {
+    identity_key: IdentityKey;
+    encryption_keys: EncryptionKey[];
+    /** Accumulated SEMP_DELIVERY_RECEIPT objects (§2.3.1). */
+    receipts?: unknown[];
+    /** Application-defined metadata. */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * SEMP_BACKUP_BUNDLE per §2.1. Signed by the user's currently active
+ * identity private key under the SEMP-RECOVERY-BUNDLE: prefix.
+ */
+export interface BackupBundle {
+    type: typeof BundleType;
+    version: string;
+    user_id: string;
+    bundle_id: string;
+    /** ISO 8601 UTC. */
+    created_at: string;
+    /** Bundle id this one supersedes; nullable. */
+    supersedes: string | null;
+    kdf: BundleKDF;
+    payload_algorithm: string;
+    /** Base64 24-byte XChaCha20-Poly1305 nonce. */
+    payload_nonce: string;
+    /** Base64 AEAD output. */
+    encrypted_payload: string;
+    recovery_verify_pk: RecoveryVerifyPK;
+    signature: RecoverySignatureBlock;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/recovery/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/recovery/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,sDAAsD;AACtD,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,eAAO,MAAM,uBAAuB,+BAA+B,CAAC;AACpE,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,UAAU,uBAAuB,CAAC;AAC/C,eAAO,MAAM,aAAa,UAAU,CAAC;AAErC,uDAAuD;AACvD,eAAO,MAAM,qBAAqB,2BAA2B,CAAC;AAC9D,eAAO,MAAM,sBAAsB,4BAA4B,CAAC;AAChE,eAAO,MAAM,4BAA4B,yBAAyB,CAAC;AACnE,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D,uEAAuE;AACvE,eAAO,MAAM,yBAAyB,YAAY,CAAC;AAEnD,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD,qCAAqC;AACrC,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAE/C,0CAA0C;AAC1C,eAAO,MAAM,cAAc,QAAS,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAC9C,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,gCAAgC;AAChC,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,mBAAmB,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,sBAAsB,CAAC;IAC3C,iBAAiB,EAAE,sBAAsB,CAAC;IAC1C,gBAAgB,EAAE,sBAAsB,CAAC;CAC1C;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,oBAAoB,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,uBAAuB,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,mBAAmB,EAAE,CAAC;IACpC,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,sBAAsB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,uBAAuB,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,sBAAsB,CAAC;CAC1C;AAED,sEAAsE;AACtE,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,mEAAmE;AACnE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,WAAW,CAAC;IAC1B,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,UAAU,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,SAAS,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,gBAAgB,CAAC;IACrC,SAAS,EAAE,sBAAsB,CAAC;CACnC"}

package/dist/recovery/types.js

@@ -0,0 +1,31 @@
+/**
+ * Wire-record types for SEMP account recovery per RECOVERY.md.
+ *
+ * @module
+ */
+/** Wire-level type discriminators per RECOVERY.md. */
+export const SuccessorRecordType = "SEMP_SUCCESSOR";
+export const RecoverySetManifestType = "SEMP_RECOVERY_SET_MANIFEST";
+export const RecoveryShareRecordType = "SEMP_RECOVERY_SHARE";
+export const BundleType = "SEMP_BACKUP_BUNDLE";
+export const RecordVersion = "1.0.0";
+/** Domain-separation prefixes per ENVELOPE.md §4.3. */
+export const SuccessorRecordPrefix = "SEMP-SUCCESSOR-RECORD:";
+export const RecoveryManifestPrefix = "SEMP-RECOVERY-MANIFEST:";
+export const RecoveryShareSignaturePrefix = "SEMP-RECOVERY-SHARE:";
+export const RecoveryBundlePrefix = "SEMP-RECOVERY-BUNDLE:";
+/** Only signature algorithm currently defined for recovery records. */
+export const SignatureAlgorithmEd25519 = "ed25519";
+/** Bundle payload AEAD per §2.5: xchacha20-poly1305 with 24-byte nonce. */
+export const BundlePayloadAEAD = "xchacha20-poly1305";
+/** Bundle KDF per §2.5: Argon2id. */
+export const KDFAlgorithmArgon2id = "argon2id";
+/** Argon2id parameter floors per §2.5. */
+export const MinKDFMemoryKB = 65_536;
+export const MinKDFIterations = 2;
+export const MinKDFParallelism = 1;
+export const MinKDFSaltBytes = 16;
+export const RecommendedKDFMemoryKB = 262_144;
+export const RecommendedKDFIterations = 3;
+export const RecommendedKDFParallelism = 4;
+//# sourceMappingURL=types.js.map

package/dist/recovery/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/recovery/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAC7D,MAAM,CAAC,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AAErC,uDAAuD;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAC9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAChE,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D,uEAAuE;AACvE,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAEnD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,qCAAqC;AACrC,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAE/C,0CAA0C;AAC1C,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC"}

package/dist/reputation/abuse_report.d.ts

@@ -0,0 +1,62 @@
+/**
+ * SEMP_ABUSE_REPORT compose helpers per REPUTATION.md §3.2 / §3.5 /
+ * §3.7.
+ *
+ * Abuse reports flow user → home-server over an authenticated
+ * session — the handshake identifies the reporting user so the
+ * report itself does NOT carry its own signature. The report's
+ * evidence MAY include decrypted envelope fragments, in which case
+ * an embedded {@link DisclosureAuthorization} signed by the
+ * affected user is required per §3.5 + §3.7.
+ *
+ * @module
+ */
+import { type AbuseCategory, type AbuseReport, type DisclosureAuthorization, type Evidence } from "./types.js";
+/** Inputs to {@link newAbuseReport}. */
+export interface AbuseReportInput {
+    /** ULID for the report. */
+    id: string;
+    reporter: string;
+    reported_domain: string;
+    reported_address?: string;
+    category: AbuseCategory | string;
+    evidence: Evidence;
+    description?: string;
+    extensions?: Record<string, unknown>;
+    /** Optional clock; defaults to `() => new Date()`. */
+    nowFn?: () => Date;
+}
+/**
+ * Construct a SEMP_ABUSE_REPORT with `type` / `version` /
+ * `timestamp` / `extensions` pre-populated.
+ *
+ * Throws when required fields are missing.
+ */
+export declare function newAbuseReport(input: AbuseReportInput): AbuseReport;
+/**
+ * Lookup hook used by {@link validateEvidence} to resolve a user's
+ * identity public key. Returning `null` means "unknown user" —
+ * callers MUST treat that as a §3.7 verification failure.
+ */
+export type UserKeyLookup = (user: string) => Promise<Uint8Array | null>;
+/**
+ * Walk an evidence payload and enforce the §3.7 rule: decrypted
+ * content requires a valid {@link DisclosureAuthorization} signed
+ * by the affected user.
+ *
+ * Metadata-only evidence is always acceptable — postmark + seal
+ * data is verifiable from the sender's published domain key without
+ * disclosing user content.
+ *
+ * Sealed evidence with disclosed brief / enclosure requires:
+ *
+ *  1. An embedded `disclosure_authorization`;
+ *  2. The authorization's `scope` covers what's actually disclosed;
+ *  3. The authorization's signature verifies under the affected
+ *     user's identity public key.
+ *
+ * Throws on the first violation.
+ */
+export declare function validateEvidence(ev: Evidence, userKeyLookup: UserKeyLookup | null): Promise<void>;
+export type { DisclosureAuthorization };
+//# sourceMappingURL=abuse_report.d.ts.map