@smartledger/keys 1.1.0 → 1.2.0

package/dist/esm/types.d.ts

@@ -0,0 +1,117 @@
+/**
+ * @smartledger/keys - Key Management SDK
+ *
+ * Single source of truth for cryptographic key operations.
+ * Provides a clean API that hides complexity and ensures consistency.
+ */
+import { KeyMeta, CryptoProfile } from '@smartledger/crypto';
+/**
+ * Public key record (safe to expose, no private key).
+ */
+export interface KeyRecord {
+    meta: KeyMeta;
+    publicKey: Uint8Array;
+}
+/**
+ * Key creation options.
+ */
+export interface CreateKeyOptions {
+    /** Optional expiration date (ISO 8601) */
+    expiresAt?: string;
+    /** Key usage (default: ['signing']) */
+    usage?: Array<'signing' | 'encryption' | 'both'>;
+    /** Crypto profile version (default: '1.0.0') */
+    cryptoProfileVersion?: string;
+}
+/**
+ * Key SDK - Single interface for all key operations.
+ *
+ * Design principles:
+ * - Hide private keys from most callers
+ * - Single source of truth for suite selection
+ * - Crypto-agnostic API (suite is config, not code)
+ * - Easy to audit (all key operations go through this)
+ */
+export interface KeySDK {
+    /**
+     * Create a new key for an agent/module.
+     *
+     * @param agentId Agent identifier (e.g. 'agent-resonance')
+     * @param profile Crypto configuration (which suites to use)
+     * @param options Optional expiration, usage, etc.
+     * @returns KeyRecord with metadata and public key
+     */
+    createKey(agentId: string, profile: CryptoProfile, options?: CreateKeyOptions): Promise<KeyRecord>;
+    /**
+     * Get an existing key by ID.
+     *
+     * @param keyId Key identifier
+     * @returns KeyRecord or null if not found
+     */
+    getKey(keyId: string): Promise<KeyRecord | null>;
+    /**
+     * Sign a message with a key.
+     *
+     * Private key never leaves the SDK.
+     *
+     * @param keyId Which key to sign with
+     * @param message Message to sign (will be hashed internally)
+     * @returns Signature bytes
+     */
+    signWithKey(keyId: string, message: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Verify a signature against a public key.
+     *
+     * @param keyId Which key to verify with
+     * @param message Original message
+     * @param signature Signature to verify
+     * @returns true if valid
+     */
+    verifySignature(keyId: string, message: Uint8Array, signature: Uint8Array): Promise<boolean>;
+    /**
+     * List all keys for an agent.
+     *
+     * @param agentId Agent identifier
+     * @param activeOnly If true, only return active keys (default: true)
+     * @returns Array of KeyRecords
+     */
+    listKeysForAgent(agentId: string, activeOnly?: boolean): Promise<KeyRecord[]>;
+    /**
+     * Get the active crypto profile for an agent.
+     *
+     * Looks up the most recent active keys and infers the profile.
+     *
+     * @param agentId Agent identifier
+     * @returns CryptoProfile or null if no keys found
+     */
+    getActiveCryptoProfile(agentId: string): Promise<CryptoProfile | null>;
+    /**
+     * Rotate an agent's keys.
+     *
+     * Generates new keypairs for all active keys, marks old ones as rotated.
+     *
+     * @param agentId Agent identifier
+     * @returns Array of new KeyRecords
+     */
+    rotateAgentKeys(agentId: string): Promise<KeyRecord[]>;
+    /**
+     * Create key if it doesn't exist, otherwise return existing.
+     *
+     * Idempotent key creation for agent setup.
+     *
+     * @param agentId Agent identifier
+     * @param profile Crypto configuration
+     * @param options Creation options
+     * @returns KeyRecord (new or existing)
+     */
+    getOrCreateKey(agentId: string, profile: CryptoProfile, options?: CreateKeyOptions): Promise<KeyRecord>;
+}
+/**
+ * Agent metadata with crypto configuration.
+ */
+export interface AgentKeyConfig {
+    agentId: string;
+    version: string;
+    cryptoProfile: CryptoProfile;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,UAAU,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,GAAG,YAAY,GAAG,MAAM,CAAC,CAAC;IAEjD,gDAAgD;IAChD,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,MAAM;IACrB;;;;;;;OAOG;IACH,SAAS,CACP,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,SAAS,CAAC,CAAC;IAEtB;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAEjD;;;;;;;;OAQG;IACH,WAAW,CACT,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvB;;;;;;;OAOG;IACH,eAAe,CACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB;;;;;;OAMG;IACH,gBAAgB,CACd,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,OAAO,GACnB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAExB;;;;;;;OAOG;IACH,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEvE;;;;;;;OAOG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAEvD;;;;;;;;;OASG;IACH,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,aAAa,EACtB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,SAAS,CAAC,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;CAC9B"}

package/dist/esm/types.js

@@ -0,0 +1,8 @@
+/**
+ * @smartledger/keys - Key Management SDK
+ *
+ * Single source of truth for cryptographic key operations.
+ * Provides a clean API that hides complexity and ensures consistency.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}