@signwho/verify 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Particular Ltd.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,48 @@
+# @signwho/verify
+
+Verify a [SignWho](https://signwho.com) signature package — the signed PDF plus its
+`evidence.json` — without SignWho: the same four checks as <https://signwho.com/verify>
+(file integrity, the WebAuthn assertion, the RFC 3161 timestamp chained to FreeTSA's CA as of
+its `genTime`, the triangle hash), the honest assurance tier, and the dispute-summary text.
+Pure, framework-free, no network.
+
+## Use in Node
+
+```js
+import { readFileSync } from 'node:fs'
+import { verifyPackage, buildDisputeSummary } from '@signwho/verify'
+
+const pdf = new Uint8Array(readFileSync('agreement-signed.pdf'))
+const evidence = JSON.parse(readFileSync('SignWho-Evidence-agreement.json', 'utf8'))
+
+const report = await verifyPackage(pdf, evidence)
+for (const c of report.checks) console.log(c.id.padEnd(10), c.status.toUpperCase().padEnd(5), c.detail)
+console.log('tier:', report.tier, '| all good:', report.allGood)
+
+const summary = buildDisputeSummary({ report, generatedAt: new Date(), pdfName: 'agreement-signed.pdf', evidenceFileName: 'SignWho-Evidence-agreement.json', evidenceSource: 'standalone' })
+console.log(summary.text)   // the plain-text summary a lawyer can read; summary.filename names it
+```
+
+Node 20 or newer (WebCrypto is global). CommonJS works too: `const { verifyPackage } = require('@signwho/verify')`.
+A known-good package to try it on ships as `@signwho/verify/sample` (`SAMPLE_PDF_B64`,
+`SAMPLE_EVIDENCE`).
+The signing formulas alone (SHA-256 helpers, the triangle hash, the WebAuthn challenge) are
+`@signwho/verify/crypto`, with none of the verifier's dependencies — for code that signs.
+
+## What a report says
+
+`report.checks` has one entry per check with `status` `pass` / `fail` / `skip` / `info` and a
+human `detail`; `report.tier` is `identity` (selfie + device assertion + timestamp),
+`device` (assertion + timestamp, no selfie) or `floor` (document + timestamp only);
+`report.allGood` is true only when nothing failed. The evidence copy embedded in the PDF can be
+read with `extractEmbeddedEvidence(pdf)` — it verifies everything except file integrity, since a
+file cannot carry its own hash; use the standalone evidence file for that.
+
+## Without JavaScript
+
+`docs/third-party-verifier.py` in the SignWho repository re-runs the same checks in Python with
+nothing from SignWho, for anyone who would rather not run JS.
+
+## License
+
+MIT © Particular Ltd.

package/dist/chunk-HSRXDJDV.js

@@ -0,0 +1,38 @@
+// src/signwho-crypto.ts
+async function hashData(data) {
+  const encoded = new TextEncoder().encode(data);
+  const buffer = await crypto.subtle.digest("SHA-256", encoded);
+  return Array.from(new Uint8Array(buffer)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+async function hashArrayBuffer(buffer) {
+  const hash = await crypto.subtle.digest("SHA-256", buffer);
+  return Array.from(new Uint8Array(hash)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+function uint8ToBase64(bytes) {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
+  return btoa(binary);
+}
+function bytesToBase64Url(bytes) {
+  return uint8ToBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function base64UrlToBytes(s) {
+  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - s.length % 4);
+  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
+  const bin = atob(b64);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+async function computeTriangleHash(selfieHash, biometricTimestamp, documentHash) {
+  return hashData(`${selfieHash}||${biometricTimestamp}||${documentHash}`);
+}
+async function computeWebAuthnChallenge(documentHash, challengeNonce) {
+  const input = new TextEncoder().encode(`${documentHash}||${challengeNonce}`);
+  const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", input));
+  return bytesToBase64Url(digest);
+}
+
+export { base64UrlToBytes, bytesToBase64Url, computeTriangleHash, computeWebAuthnChallenge, hashArrayBuffer, hashData, uint8ToBase64 };
+//# sourceMappingURL=chunk-HSRXDJDV.js.map
+//# sourceMappingURL=chunk-HSRXDJDV.js.map

package/dist/chunk-HSRXDJDV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/signwho-crypto.ts"],"names":[],"mappings":";AAeA,eAAsB,SAAS,IAAA,EAA+B;AAC5D,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,IAAI,CAAA;AAC7C,EAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,OAAO,CAAA;AAC5D,EAAA,OAAO,MAAM,IAAA,CAAK,IAAI,WAAW,MAAM,CAAC,EAAE,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAC7F;AAIA,eAAsB,gBAAgB,MAAA,EAAsC;AAC1E,EAAA,MAAM,OAAO,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,MAAM,CAAA;AACzD,EAAA,OAAO,MAAM,IAAA,CAAK,IAAI,WAAW,IAAI,CAAC,EAAE,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAC3F;AAGO,SAAS,cAAc,KAAA,EAA2B;AACvD,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,MAAA,IAAU,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAC,CAAA;AAC7E,EAAA,OAAO,KAAK,MAAM,CAAA;AACpB;AAGO,SAAS,iBAAiB,KAAA,EAA2B;AAC1D,EAAA,OAAO,aAAA,CAAc,KAAK,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AACvF;AAGO,SAAS,iBAAiB,CAAA,EAAuB;AACtD,EAAA,MAAM,GAAA,GAAM,CAAA,CAAE,MAAA,GAAS,CAAA,KAAM,CAAA,GAAI,EAAA,GAAK,GAAA,CAAI,MAAA,CAAO,CAAA,GAAK,CAAA,CAAE,MAAA,GAAS,CAAE,CAAA;AACnE,EAAA,MAAM,GAAA,GAAM,EAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,GAAI,GAAA;AACtD,EAAA,MAAM,GAAA,GAAM,KAAK,GAAG,CAAA;AACpB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,EAAA,OAAO,GAAA;AACT;AAIA,eAAsB,mBAAA,CACpB,UAAA,EACA,kBAAA,EACA,YAAA,EACiB;AACjB,EAAA,OAAO,SAAS,CAAA,EAAG,UAAU,KAAK,kBAAkB,CAAA,EAAA,EAAK,YAAY,CAAA,CAAE,CAAA;AACzE;AAIA,eAAsB,wBAAA,CACpB,cACA,cAAA,EACiB;AACjB,EAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY,CAAE,OAAO,CAAA,EAAG,YAAY,CAAA,EAAA,EAAK,cAAc,CAAA,CAAE,CAAA;AAC3E,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,MAAM,OAAO,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,KAAK,CAAC,CAAA;AAC1E,EAAA,OAAO,iBAAiB,MAAM,CAAA;AAChC","file":"chunk-HSRXDJDV.js","sourcesContent":["// ============================================================================\n// SignWho shared crypto — SINGLE SOURCE OF TRUTH\n// ============================================================================\n// These functions are imported by BOTH the signer (App.tsx) and the public\n// verifier (verify.tsx). Keeping one copy is deliberate: if the verifier ever\n// re-implemented a formula and drifted from the signer, it would produce false\n// verdicts — catastrophic for a \"verify it yourself\" product.\n//\n// hashData / hashArrayBuffer / uint8ToBase64 / bytesToBase64Url were RELOCATED\n// verbatim from App.tsx (zero logic change — see signwho-crypto.test.ts for the\n// equivalence check against the old inline implementations). base64UrlToBytes,\n// computeTriangleHash and computeWebAuthnChallenge formalize logic that was\n// previously inline in App.tsx, byte-for-byte identical.\n\n/** SHA-256 of a UTF-8 string → lowercase hex. (Was App.tsx `hashData`.) */\nexport async function hashData(data: string): Promise<string> {\n  const encoded = new TextEncoder().encode(data)\n  const buffer = await crypto.subtle.digest('SHA-256', encoded)\n  return Array.from(new Uint8Array(buffer)).map(b => b.toString(16).padStart(2, '0')).join('')\n}\n\n/** SHA-256 of raw bytes → lowercase hex. (Was App.tsx `hashArrayBuffer`.) Used for\n *  documentHash (original upload) AND signedPdfHash / verifier file-integrity. */\nexport async function hashArrayBuffer(buffer: ArrayBuffer): Promise<string> {\n  const hash = await crypto.subtle.digest('SHA-256', buffer)\n  return Array.from(new Uint8Array(hash)).map(b => b.toString(16).padStart(2, '0')).join('')\n}\n\n/** Stack-safe base64 encode for large Uint8Arrays. (Was App.tsx `uint8ToBase64`.) */\nexport function uint8ToBase64(bytes: Uint8Array): string {\n  let binary = ''\n  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i])\n  return btoa(binary)\n}\n\n/** base64url (no padding) of bytes. (Was App.tsx `bytesToBase64Url`.) */\nexport function bytesToBase64Url(bytes: Uint8Array): string {\n  return uint8ToBase64(bytes).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '')\n}\n\n/** Decode base64url (padded or not) → bytes. */\nexport function base64UrlToBytes(s: string): Uint8Array {\n  const pad = s.length % 4 === 0 ? '' : '='.repeat(4 - (s.length % 4))\n  const b64 = s.replace(/-/g, '+').replace(/_/g, '/') + pad\n  const bin = atob(b64)\n  const out = new Uint8Array(bin.length)\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i)\n  return out\n}\n\n/** Triangle Authentication binding: SHA-256(\"selfieHash||biometricTimestamp||documentHash\") → hex.\n *  Order and the literal \"||\" separators must match the signer exactly. */\nexport async function computeTriangleHash(\n  selfieHash: string,\n  biometricTimestamp: number,\n  documentHash: string,\n): Promise<string> {\n  return hashData(`${selfieHash}||${biometricTimestamp}||${documentHash}`)\n}\n\n/** Document-bound WebAuthn challenge: base64url(SHA-256(\"documentHash||challengeNonce\")).\n *  NOTE the literal \"||\" separator — the challenge is NOT a bare concatenation. */\nexport async function computeWebAuthnChallenge(\n  documentHash: string,\n  challengeNonce: string,\n): Promise<string> {\n  const input = new TextEncoder().encode(`${documentHash}||${challengeNonce}`)\n  const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', input))\n  return bytesToBase64Url(digest)\n}\n"]}

package/dist/crypto.cjs

@@ -0,0 +1,46 @@
+'use strict';
+
+// src/signwho-crypto.ts
+async function hashData(data) {
+  const encoded = new TextEncoder().encode(data);
+  const buffer = await crypto.subtle.digest("SHA-256", encoded);
+  return Array.from(new Uint8Array(buffer)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+async function hashArrayBuffer(buffer) {
+  const hash = await crypto.subtle.digest("SHA-256", buffer);
+  return Array.from(new Uint8Array(hash)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+function uint8ToBase64(bytes) {
+  let binary = "";
+  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
+  return btoa(binary);
+}
+function bytesToBase64Url(bytes) {
+  return uint8ToBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function base64UrlToBytes(s) {
+  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - s.length % 4);
+  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
+  const bin = atob(b64);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+async function computeTriangleHash(selfieHash, biometricTimestamp, documentHash) {
+  return hashData(`${selfieHash}||${biometricTimestamp}||${documentHash}`);
+}
+async function computeWebAuthnChallenge(documentHash, challengeNonce) {
+  const input = new TextEncoder().encode(`${documentHash}||${challengeNonce}`);
+  const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", input));
+  return bytesToBase64Url(digest);
+}
+
+exports.base64UrlToBytes = base64UrlToBytes;
+exports.bytesToBase64Url = bytesToBase64Url;
+exports.computeTriangleHash = computeTriangleHash;
+exports.computeWebAuthnChallenge = computeWebAuthnChallenge;
+exports.hashArrayBuffer = hashArrayBuffer;
+exports.hashData = hashData;
+exports.uint8ToBase64 = uint8ToBase64;
+//# sourceMappingURL=crypto.cjs.map
+//# sourceMappingURL=crypto.cjs.map

package/dist/crypto.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/signwho-crypto.ts"],"names":[],"mappings":";;;AAeA,eAAsB,SAAS,IAAA,EAA+B;AAC5D,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,IAAI,CAAA;AAC7C,EAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,OAAO,CAAA;AAC5D,EAAA,OAAO,MAAM,IAAA,CAAK,IAAI,WAAW,MAAM,CAAC,EAAE,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAC7F;AAIA,eAAsB,gBAAgB,MAAA,EAAsC;AAC1E,EAAA,MAAM,OAAO,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,WAAW,MAAM,CAAA;AACzD,EAAA,OAAO,MAAM,IAAA,CAAK,IAAI,WAAW,IAAI,CAAC,EAAE,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAC3F;AAGO,SAAS,cAAc,KAAA,EAA2B;AACvD,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,MAAA,IAAU,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAC,CAAA;AAC7E,EAAA,OAAO,KAAK,MAAM,CAAA;AACpB;AAGO,SAAS,iBAAiB,KAAA,EAA2B;AAC1D,EAAA,OAAO,aAAA,CAAc,KAAK,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AACvF;AAGO,SAAS,iBAAiB,CAAA,EAAuB;AACtD,EAAA,MAAM,GAAA,GAAM,CAAA,CAAE,MAAA,GAAS,CAAA,KAAM,CAAA,GAAI,EAAA,GAAK,GAAA,CAAI,MAAA,CAAO,CAAA,GAAK,CAAA,CAAE,MAAA,GAAS,CAAE,CAAA;AACnE,EAAA,MAAM,GAAA,GAAM,EAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,GAAI,GAAA;AACtD,EAAA,MAAM,GAAA,GAAM,KAAK,GAAG,CAAA;AACpB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,EAAA,OAAO,GAAA;AACT;AAIA,eAAsB,mBAAA,CACpB,UAAA,EACA,kBAAA,EACA,YAAA,EACiB;AACjB,EAAA,OAAO,SAAS,CAAA,EAAG,UAAU,KAAK,kBAAkB,CAAA,EAAA,EAAK,YAAY,CAAA,CAAE,CAAA;AACzE;AAIA,eAAsB,wBAAA,CACpB,cACA,cAAA,EACiB;AACjB,EAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY,CAAE,OAAO,CAAA,EAAG,YAAY,CAAA,EAAA,EAAK,cAAc,CAAA,CAAE,CAAA;AAC3E,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,MAAM,OAAO,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,KAAK,CAAC,CAAA;AAC1E,EAAA,OAAO,iBAAiB,MAAM,CAAA;AAChC","file":"crypto.cjs","sourcesContent":["// ============================================================================\n// SignWho shared crypto — SINGLE SOURCE OF TRUTH\n// ============================================================================\n// These functions are imported by BOTH the signer (App.tsx) and the public\n// verifier (verify.tsx). Keeping one copy is deliberate: if the verifier ever\n// re-implemented a formula and drifted from the signer, it would produce false\n// verdicts — catastrophic for a \"verify it yourself\" product.\n//\n// hashData / hashArrayBuffer / uint8ToBase64 / bytesToBase64Url were RELOCATED\n// verbatim from App.tsx (zero logic change — see signwho-crypto.test.ts for the\n// equivalence check against the old inline implementations). base64UrlToBytes,\n// computeTriangleHash and computeWebAuthnChallenge formalize logic that was\n// previously inline in App.tsx, byte-for-byte identical.\n\n/** SHA-256 of a UTF-8 string → lowercase hex. (Was App.tsx `hashData`.) */\nexport async function hashData(data: string): Promise<string> {\n  const encoded = new TextEncoder().encode(data)\n  const buffer = await crypto.subtle.digest('SHA-256', encoded)\n  return Array.from(new Uint8Array(buffer)).map(b => b.toString(16).padStart(2, '0')).join('')\n}\n\n/** SHA-256 of raw bytes → lowercase hex. (Was App.tsx `hashArrayBuffer`.) Used for\n *  documentHash (original upload) AND signedPdfHash / verifier file-integrity. */\nexport async function hashArrayBuffer(buffer: ArrayBuffer): Promise<string> {\n  const hash = await crypto.subtle.digest('SHA-256', buffer)\n  return Array.from(new Uint8Array(hash)).map(b => b.toString(16).padStart(2, '0')).join('')\n}\n\n/** Stack-safe base64 encode for large Uint8Arrays. (Was App.tsx `uint8ToBase64`.) */\nexport function uint8ToBase64(bytes: Uint8Array): string {\n  let binary = ''\n  for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i])\n  return btoa(binary)\n}\n\n/** base64url (no padding) of bytes. (Was App.tsx `bytesToBase64Url`.) */\nexport function bytesToBase64Url(bytes: Uint8Array): string {\n  return uint8ToBase64(bytes).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '')\n}\n\n/** Decode base64url (padded or not) → bytes. */\nexport function base64UrlToBytes(s: string): Uint8Array {\n  const pad = s.length % 4 === 0 ? '' : '='.repeat(4 - (s.length % 4))\n  const b64 = s.replace(/-/g, '+').replace(/_/g, '/') + pad\n  const bin = atob(b64)\n  const out = new Uint8Array(bin.length)\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i)\n  return out\n}\n\n/** Triangle Authentication binding: SHA-256(\"selfieHash||biometricTimestamp||documentHash\") → hex.\n *  Order and the literal \"||\" separators must match the signer exactly. */\nexport async function computeTriangleHash(\n  selfieHash: string,\n  biometricTimestamp: number,\n  documentHash: string,\n): Promise<string> {\n  return hashData(`${selfieHash}||${biometricTimestamp}||${documentHash}`)\n}\n\n/** Document-bound WebAuthn challenge: base64url(SHA-256(\"documentHash||challengeNonce\")).\n *  NOTE the literal \"||\" separator — the challenge is NOT a bare concatenation. */\nexport async function computeWebAuthnChallenge(\n  documentHash: string,\n  challengeNonce: string,\n): Promise<string> {\n  const input = new TextEncoder().encode(`${documentHash}||${challengeNonce}`)\n  const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', input))\n  return bytesToBase64Url(digest)\n}\n"]}

package/dist/crypto.d.cts

@@ -0,0 +1,19 @@
+/** SHA-256 of a UTF-8 string → lowercase hex. (Was App.tsx `hashData`.) */
+declare function hashData(data: string): Promise<string>;
+/** SHA-256 of raw bytes → lowercase hex. (Was App.tsx `hashArrayBuffer`.) Used for
+ *  documentHash (original upload) AND signedPdfHash / verifier file-integrity. */
+declare function hashArrayBuffer(buffer: ArrayBuffer): Promise<string>;
+/** Stack-safe base64 encode for large Uint8Arrays. (Was App.tsx `uint8ToBase64`.) */
+declare function uint8ToBase64(bytes: Uint8Array): string;
+/** base64url (no padding) of bytes. (Was App.tsx `bytesToBase64Url`.) */
+declare function bytesToBase64Url(bytes: Uint8Array): string;
+/** Decode base64url (padded or not) → bytes. */
+declare function base64UrlToBytes(s: string): Uint8Array;
+/** Triangle Authentication binding: SHA-256("selfieHash||biometricTimestamp||documentHash") → hex.
+ *  Order and the literal "||" separators must match the signer exactly. */
+declare function computeTriangleHash(selfieHash: string, biometricTimestamp: number, documentHash: string): Promise<string>;
+/** Document-bound WebAuthn challenge: base64url(SHA-256("documentHash||challengeNonce")).
+ *  NOTE the literal "||" separator — the challenge is NOT a bare concatenation. */
+declare function computeWebAuthnChallenge(documentHash: string, challengeNonce: string): Promise<string>;
+
+export { base64UrlToBytes, bytesToBase64Url, computeTriangleHash, computeWebAuthnChallenge, hashArrayBuffer, hashData, uint8ToBase64 };

package/dist/crypto.d.ts

@@ -0,0 +1,19 @@
+/** SHA-256 of a UTF-8 string → lowercase hex. (Was App.tsx `hashData`.) */
+declare function hashData(data: string): Promise<string>;
+/** SHA-256 of raw bytes → lowercase hex. (Was App.tsx `hashArrayBuffer`.) Used for
+ *  documentHash (original upload) AND signedPdfHash / verifier file-integrity. */
+declare function hashArrayBuffer(buffer: ArrayBuffer): Promise<string>;
+/** Stack-safe base64 encode for large Uint8Arrays. (Was App.tsx `uint8ToBase64`.) */
+declare function uint8ToBase64(bytes: Uint8Array): string;
+/** base64url (no padding) of bytes. (Was App.tsx `bytesToBase64Url`.) */
+declare function bytesToBase64Url(bytes: Uint8Array): string;
+/** Decode base64url (padded or not) → bytes. */
+declare function base64UrlToBytes(s: string): Uint8Array;
+/** Triangle Authentication binding: SHA-256("selfieHash||biometricTimestamp||documentHash") → hex.
+ *  Order and the literal "||" separators must match the signer exactly. */
+declare function computeTriangleHash(selfieHash: string, biometricTimestamp: number, documentHash: string): Promise<string>;
+/** Document-bound WebAuthn challenge: base64url(SHA-256("documentHash||challengeNonce")).
+ *  NOTE the literal "||" separator — the challenge is NOT a bare concatenation. */
+declare function computeWebAuthnChallenge(documentHash: string, challengeNonce: string): Promise<string>;
+
+export { base64UrlToBytes, bytesToBase64Url, computeTriangleHash, computeWebAuthnChallenge, hashArrayBuffer, hashData, uint8ToBase64 };

package/dist/crypto.js

@@ -0,0 +1,3 @@
+export { base64UrlToBytes, bytesToBase64Url, computeTriangleHash, computeWebAuthnChallenge, hashArrayBuffer, hashData, uint8ToBase64 } from './chunk-HSRXDJDV.js';
+//# sourceMappingURL=crypto.js.map
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"crypto.js"}