@storacha/encrypt-upload-client 0.0.33 → 0.0.36

package/README.md

@@ -3,7 +3,7 @@
 
 ## About
 
-This library leverages @storacha/cli and @lit-protocol/lit-node-client to provide a simple interface for encrypting files with Lit Protocol and uploading them to the Storacha Network. It also enables anyone with a valid space/content/decrypt UCAN delegation to decrypt the file. With Lit Protocol, encryption keys are managed in a decentralized way, so you don’t have to handle them yourself.
+This library leverages `@storacha/cli` and `@lit-protocol/lit-node-client` to provide a simple interface for encrypting files with Lit Protocol and uploading them to the Storacha Network. It also enables anyone with a valid `space/content/decrypt` UCAN delegation to decrypt the file. With Lit Protocol, encryption keys are managed in a decentralized way, so you don't have to handle them yourself.
 
 ## Install
 
@@ -15,9 +15,9 @@ npm @storacha/encrypt-upload-client
 
 ## Usage
 
-To use this library, you'll need to install `@storacha/cli` and `@lit-protocol/lit-node-client`, as they are required for initialization—though the Lit client is optional. You must also provide a crypto adapter that implements the `CryptoAdapter` interface. A ready-to-use Node.js crypto adapter is already available.
+To use this library, you'll need to install `@storacha/cli` and `@lit-protocol/lit-node-client`, as they are required for initialization—though the Lit client is optional. You must also provide a crypto adapter that implements the `CryptoAdapter` interface. A ready-to-use Node.js & Browser crypto adapters are available.
 
-#### CryptoAdapter Interface
+### CryptoAdapter Interface
 
 ```js
 interface CryptoAdapter {
@@ -32,7 +32,7 @@ interface EncryptOutput {
 }
 ```
 
-#### Example Usage
+### Node Usage
 
 ```js
 const encryptedClient = await EncryptClient.create({
@@ -41,11 +41,24 @@ const encryptedClient = await EncryptClient.create({
 })
 ```
 
+### Browser Usage
+
+For browser apps, use the `BrowserCryptoAdapter`:
+
+```js
+import { BrowserCryptoAdapter } from '@storacha/encrypt-upload-client/crypto-adapters/browser-crypto-adapter.js'
+
+const encryptedClient = await EncryptClient.create({
+  storachaClient: client,
+  cryptoAdapter: new BrowserCryptoAdapter(),
+})
+```
+
 ### Encryption
 
-The encryption process automatically generates a custom Access Control Condition (ACC) based on the current space setup in your Storacha client. It then creates a symmetric key to encrypt the file and uses Lit Protocol to encrypt that key, so you don’t have to manage it yourself. Once encrypted, both the file and the generated encrypted metadata are uploaded to Storacha.
+The encryption process automatically generates a custom Access Control Condition (ACC) based on the current space setup in your Storacha client. It then creates a symmetric key to encrypt the file and uses Lit Protocol to encrypt that key, so you don't have to manage it yourself. Once encrypted, both the file and the generated encrypted metadata are uploaded to Storacha.
 
-#### Example Usage
+#### Encryption Example
 
 ```js
 const fileContent = await fs.promises.readFile('./README.md')
@@ -61,7 +74,7 @@ To decrypt a file, you'll need the CID returned from `uploadEncryptedFile`, a UC
 
 For details on minting Capacity Credits, check out the [official documentation](https://developer.litprotocol.com/concepts/capacity-credits-concept).
 
-#### Example Usage
+#### Decryption Example
 
 ```js
 const decryptedContent = await encryptedClient.retrieveAndDecryptFile(

package/dist/config/constants.d.ts

@@ -1,3 +1,3 @@
-export const STORACHA_LIT_ACTION_CID: "QmPS28E5jcwn3GDs5heNkE2w84nKdYYkaimJHCisHiBc7C";
+export const STORACHA_LIT_ACTION_CID: "QmWSLN9m2Noj3kp8rx76yfQ9U7U1Mzjj3kGVpCr891Mjn1";
 export const GATEWAY_URL: URL;
 //# sourceMappingURL=constants.d.ts.map

package/dist/config/constants.js

@@ -1,3 +1,3 @@
-export const STORACHA_LIT_ACTION_CID = 'QmPS28E5jcwn3GDs5heNkE2w84nKdYYkaimJHCisHiBc7C';
+export const STORACHA_LIT_ACTION_CID = 'QmWSLN9m2Noj3kp8rx76yfQ9U7U1Mzjj3kGVpCr891Mjn1';
 export const GATEWAY_URL = new URL('https://w3s.link');
 //# sourceMappingURL=constants.js.map

package/dist/config/env.d.ts

@@ -1,6 +1,5 @@
 export default env;
 declare const env: Schema.InferStruct<{
-    WALLET_PK: Schema.StringSchema<string, unknown>;
     LIT_NETWORK: Schema.DefaultSchema<"custom" | "datil" | "datil-dev" | "datil-test", unknown>;
     LIT_DEBUG: Schema.DefaultSchema<boolean, unknown>;
 }>;

package/dist/config/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/config/env.js"],"names":[],"mappings":";AAuBA;;;;GAAsC;uBAtBf,cAAc"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/config/env.js"],"names":[],"mappings":";AAwBA;;;GAAsC;uBAvBf,cAAc"}

package/dist/config/env.js

@@ -1,9 +1,11 @@
 import dotenv from 'dotenv';
 import { Schema } from '@ucanto/core';
 import { LIT_NETWORK } from '@lit-protocol/constants';
-dotenv.config();
+// Only load env variables if running in node
+if (typeof window === 'undefined') {
+    dotenv.config();
+}
 const envSchema = Schema.struct({
-    WALLET_PK: Schema.text(),
     LIT_NETWORK: Schema.enum([
         LIT_NETWORK.Custom,
         LIT_NETWORK.Datil,
@@ -15,7 +17,6 @@ const envSchema = Schema.struct({
 const processEnv = {
     LIT_DEBUG: process.env.LIT_DEBUG,
     LIT_NETWORK: process.env.LIT_NETWORK,
-    WALLET_PK: process.env.WALLET_PK,
 };
 const env = envSchema.from(processEnv);
 export default env;

package/dist/config/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/config/service.js"],"names":[],"mappings":"AAQA,mCAA2D;AAC3D,kFAAqE;AAErE,iEAIE;AAEF,mCAA2D;AAC3D,kFAAqE;AAErE,iEAIE;AAEF,qCAA6D;AAC7D,oFAAuE;AAEvE,mEAIE;AAEF,2DAA2D;AAC3D,0BADW,OAAO,wBAAwB,EAAE,WAAW,CAMtD;AAED,mCAAyE;wBA3CjD,gBAAgB"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/config/service.js"],"names":[],"mappings":"AAYA,mCAA2D;AAC3D,kFAAqE;AAErE,iEAIE;AAEF,mCAA2D;AAC3D,kFAAqE;AAErE,iEAIE;AAEF,qCAA6D;AAC7D,oFAAuE;AAEvE,mEAIE;AAEF,2DAA2D;AAC3D,0BADW,OAAO,wBAAwB,EAAE,WAAW,CAMtD;AAED,mCAAyE;wBA/CjD,gBAAgB"}

package/dist/config/service.js

@@ -4,6 +4,10 @@ import * as DID from '@ipld/dag-ucan/did';
 import { gatewayServiceConnection } from '@storacha/client/service';
 const storachaServiceURL = 'https://up.web3.storage';
 const storachaPrincipalDID = 'did:web:web3.storage';
+//TODO: Instead of declaring the service URL and principal here,
+// import them from the w3up-client/service package.
+// It needs to be done after the repo unification tasks is completed
+// Because the DID Web is did:web:up.storacha.network
 export const accessServiceURL = new URL(storachaServiceURL);
 export const accessServicePrincipal = DID.parse(storachaPrincipalDID);
 export const accessServiceConnection = client.connect({

package/dist/core/client.d.ts

@@ -37,14 +37,13 @@ export class EncryptedClient implements Type.EncryptedClient {
     /**
      * Retrieve and decrypt a file from the Storacha network
      *
-     * @param {Wallet} wallet - The wallet to use to decrypt the file
+     * @param {Type.LitWalletSigner | Type.LitPkpSigner} signer - The wallet or PKP key signer to decrypt the file
      * @param {Type.AnyLink} cid - The link to the file to retrieve
      * @param {Uint8Array} delegationCAR - The delegation that gives permission to decrypt the file
      * @returns {Promise<ReadableStream>} - The decrypted file
      */
-    retrieveAndDecryptFile(wallet: Wallet, cid: Type.AnyLink, delegationCAR: Uint8Array): Promise<ReadableStream>;
+    retrieveAndDecryptFile(signer: Type.LitWalletSigner | Type.LitPkpSigner, cid: Type.AnyLink, delegationCAR: Uint8Array): Promise<ReadableStream>;
 }
 export function create(options: Type.EncryptedClientOptions): Promise<EncryptedClient>;
 import * as Type from '../types.js';
-import { Wallet } from 'ethers';
 //# sourceMappingURL=client.d.ts.map

package/dist/core/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/core/client.js"],"names":[],"mappings":"AAQA,yCAAyC;AACzC,wCADiB,IAAI,CAAC,eAAe;IA0BnC;;;;;OAKG;IACH,4BALW,OAAO,kBAAkB,EAAE,MAAM,iBACjC,IAAI,CAAC,aAAa,aAClB,OAAO,+BAA+B,EAAE,aAAa,cACrD,GAAG,EAOb;IAnCD;;;OAGG;IACH,0BAHU,IAAI,CAAC,aAAa,CAGd;IAEd;;;OAGG;IACH,2BAHU,OAAO,kBAAkB,EAAE,MAAM,CAG5B;IAEf;;;OAGG;IACH,sBAHU,OAAO,+BAA+B,EAAE,aAAa,CAGrD;IAEV;;;OAGG;IACH,uBAHU,GAAG,CAGF;IAeX;;;;;OAKG;IACH,0BAHW,IAAI,CAAC,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CASjC;IAED;;;;;;;OAOG;IACH,+BALW,MAAM,OACN,IAAI,CAAC,OAAO,iBACZ,UAAU,GACR,OAAO,CAAC,cAAc,CAAC,CAYnC;CACF;AAWM,gCAFI,IAAI,CAAC,sBAAsB,4BAcrC;sBAtGqB,aAAa;uBAFZ,QAAQ"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/core/client.js"],"names":[],"mappings":"AAMA,yCAAyC;AACzC,wCADiB,IAAI,CAAC,eAAe;IA0BnC;;;;;OAKG;IACH,4BALW,OAAO,kBAAkB,EAAE,MAAM,iBACjC,IAAI,CAAC,aAAa,aAClB,OAAO,+BAA+B,EAAE,aAAa,cACrD,GAAG,EAOb;IAnCD;;;OAGG;IACH,0BAHU,IAAI,CAAC,aAAa,CAGd;IAEd;;;OAGG;IACH,2BAHU,OAAO,kBAAkB,EAAE,MAAM,CAG5B;IAEf;;;OAGG;IACH,sBAHU,OAAO,+BAA+B,EAAE,aAAa,CAGrD;IAEV;;;OAGG;IACH,uBAHU,GAAG,CAGF;IAeX;;;;;OAKG;IACH,0BAHW,IAAI,CAAC,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CASjC;IAED;;;;;;;OAOG;IACH,+BALW,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,YAAY,OACxC,IAAI,CAAC,OAAO,iBACZ,UAAU,GACR,OAAO,CAAC,cAAc,CAAC,CAYnC;CACF;AAWM,gCAFI,IAAI,CAAC,sBAAsB,4BAcrC;sBAtGqB,aAAa"}

package/dist/core/client.js

@@ -1,4 +1,3 @@
-import { Wallet } from 'ethers';
 import * as Type from '../types.js';
 import { getLitClient } from '../protocols/lit.js';
 import { GATEWAY_URL } from '../config/constants.js';
@@ -50,13 +49,13 @@ export class EncryptedClient {
     /**
      * Retrieve and decrypt a file from the Storacha network
      *
-     * @param {Wallet} wallet - The wallet to use to decrypt the file
+     * @param {Type.LitWalletSigner | Type.LitPkpSigner} signer - The wallet or PKP key signer to decrypt the file
      * @param {Type.AnyLink} cid - The link to the file to retrieve
      * @param {Uint8Array} delegationCAR - The delegation that gives permission to decrypt the file
      * @returns {Promise<ReadableStream>} - The decrypted file
      */
-    async retrieveAndDecryptFile(wallet, cid, delegationCAR) {
-        return retrieveAndDecrypt(this._storachaClient, this._litClient, this._cryptoAdapter, this._gatewayURL, wallet, cid, delegationCAR);
+    async retrieveAndDecryptFile(signer, cid, delegationCAR) {
+        return retrieveAndDecrypt(this._storachaClient, this._litClient, this._cryptoAdapter, this._gatewayURL, signer, cid, delegationCAR);
     }
 }
 /**

package/dist/crypto-adapters/browser-crypto-adapter.d.ts

@@ -0,0 +1,42 @@
+/**
+ * BrowserCryptoAdapter implements the CryptoAdapter interface for browser environments.
+ * It uses AES-CTR mode for encryption via the Web Crypto API.
+ *
+ * Why AES-CTR?
+ * - We use AES-CTR with pseudo-streaming (buffering chunks before emitting) for simplicity and streaming support.
+ * - AES-CTR allows chunked processing without padding, making it suitable for large files and browser environments.
+ * - The Web Crypto API supports AES-CTR natively in all modern browsers and in Node.js 19+ as globalThis.crypto.
+ * - For Node.js <19, you must polyfill globalThis.crypto (e.g., with `node --experimental-global-webcrypto` or a package like @peculiar/webcrypto).
+ * - This allows for processing large files in chunks with no padding issues found in other libraries such as node-forge.
+ *
+ * Note: This implementation is currently pseudo-streaming: it buffers all encrypted/decrypted chunks before emitting them as a stream.
+ * For true streaming (lower memory usage), we need to refactor it to emit each chunk as soon as it is processed.
+ *
+ * @class
+ * @implements {Type.CryptoAdapter}
+ */
+export class BrowserCryptoAdapter implements Type.CryptoAdapter {
+    generateKey(): Promise<Uint8Array<ArrayBuffer>>;
+    /**
+     * Encrypt a stream of data using AES-CTR (chunked, Web Crypto API).
+     *
+     * @param {Blob} data The data to encrypt.
+     * @returns {Promise<{ key: Uint8Array, iv: Uint8Array, encryptedStream: ReadableStream }>}
+     */
+    encryptStream(data: Blob): Promise<{
+        key: Uint8Array;
+        iv: Uint8Array;
+        encryptedStream: ReadableStream;
+    }>;
+    /**
+     * Decrypt a stream of data using AES-CTR (chunked, Web Crypto API).
+     *
+     * @param {ReadableStream} encryptedData The encrypted data stream.
+     * @param {Uint8Array} key The encryption key.
+     * @param {Uint8Array} iv The initialization vector (counter).
+     * @returns {Promise<ReadableStream>} A stream of decrypted data.
+     */
+    decryptStream(encryptedData: ReadableStream, key: Uint8Array, iv: Uint8Array): Promise<ReadableStream>;
+}
+import * as Type from '../types.js';
+//# sourceMappingURL=browser-crypto-adapter.d.ts.map

package/dist/crypto-adapters/browser-crypto-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-crypto-adapter.d.ts","sourceRoot":"","sources":["../../src/crypto-adapters/browser-crypto-adapter.js"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;GAgBG;AACH,6CAFgB,IAAI,CAAC,aAAa;IAGhC,gDAEC;IAED;;;;;OAKG;IACH,oBAHW,IAAI,GACF,OAAO,CAAC;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAC;QAAC,eAAe,EAAE,cAAc,CAAA;KAAE,CAAC,CAoDzF;IAED;;;;;;;OAOG;IACH,6BALW,cAAc,OACd,UAAU,MACV,UAAU,GACR,OAAO,CAAC,cAAc,CAAC,CA8CnC;CACF;sBA5IqB,aAAa"}

package/dist/crypto-adapters/browser-crypto-adapter.js

@@ -0,0 +1,109 @@
+import * as Type from '../types.js';
+const ENCRYPTION_ALGORITHM = 'AES-CTR';
+const KEY_LENGTH = 256; // bits
+const IV_LENGTH = 16; // bytes (128 bits, used as counter)
+const COUNTER_LENGTH = 64; // bits (Web Crypto API default for AES-CTR)
+/**
+ * BrowserCryptoAdapter implements the CryptoAdapter interface for browser environments.
+ * It uses AES-CTR mode for encryption via the Web Crypto API.
+ *
+ * Why AES-CTR?
+ * - We use AES-CTR with pseudo-streaming (buffering chunks before emitting) for simplicity and streaming support.
+ * - AES-CTR allows chunked processing without padding, making it suitable for large files and browser environments.
+ * - The Web Crypto API supports AES-CTR natively in all modern browsers and in Node.js 19+ as globalThis.crypto.
+ * - For Node.js <19, you must polyfill globalThis.crypto (e.g., with `node --experimental-global-webcrypto` or a package like @peculiar/webcrypto).
+ * - This allows for processing large files in chunks with no padding issues found in other libraries such as node-forge.
+ *
+ * Note: This implementation is currently pseudo-streaming: it buffers all encrypted/decrypted chunks before emitting them as a stream.
+ * For true streaming (lower memory usage), we need to refactor it to emit each chunk as soon as it is processed.
+ *
+ * @class
+ * @implements {Type.CryptoAdapter}
+ */
+export class BrowserCryptoAdapter {
+    async generateKey() {
+        return globalThis.crypto.getRandomValues(new Uint8Array(KEY_LENGTH / 8));
+    }
+    /**
+     * Encrypt a stream of data using AES-CTR (chunked, Web Crypto API).
+     *
+     * @param {Blob} data The data to encrypt.
+     * @returns {Promise<{ key: Uint8Array, iv: Uint8Array, encryptedStream: ReadableStream }>}
+     */
+    async encryptStream(data) {
+        const key = await this.generateKey();
+        const iv = globalThis.crypto.getRandomValues(new Uint8Array(IV_LENGTH));
+        const cryptoKey = await globalThis.crypto.subtle.importKey('raw', key, { name: ENCRYPTION_ALGORITHM }, false, ['encrypt', 'decrypt']);
+        const reader = data.stream().getReader();
+        let counter = new Uint8Array(iv); // Copy the IV for counter
+        let chunkIndex = 0;
+        /** @type {Uint8Array[]} */
+        const encryptedChunks = [];
+        // eslint-disable-next-line no-constant-condition
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            // Increment counter for each chunk
+            const chunkCounter = new Uint8Array(counter);
+            // For each chunk, increment the last byte of the counter
+            chunkCounter[chunkCounter.length - 1] += chunkIndex;
+            chunkIndex++;
+            const encrypted = new Uint8Array(await globalThis.crypto.subtle.encrypt({
+                name: ENCRYPTION_ALGORITHM,
+                counter: chunkCounter,
+                length: COUNTER_LENGTH,
+            }, cryptoKey, value));
+            encryptedChunks.push(encrypted);
+        }
+        const encryptedStream = new ReadableStream({
+            start(controller) {
+                for (const chunk of encryptedChunks) {
+                    controller.enqueue(chunk);
+                }
+                controller.close();
+            },
+        });
+        return { key, iv, encryptedStream };
+    }
+    /**
+     * Decrypt a stream of data using AES-CTR (chunked, Web Crypto API).
+     *
+     * @param {ReadableStream} encryptedData The encrypted data stream.
+     * @param {Uint8Array} key The encryption key.
+     * @param {Uint8Array} iv The initialization vector (counter).
+     * @returns {Promise<ReadableStream>} A stream of decrypted data.
+     */
+    async decryptStream(encryptedData, key, iv) {
+        const cryptoKey = await globalThis.crypto.subtle.importKey('raw', key, { name: ENCRYPTION_ALGORITHM }, false, ['encrypt', 'decrypt']);
+        const reader = encryptedData.getReader();
+        let counter = new Uint8Array(iv);
+        let chunkIndex = 0;
+        /** @type {Uint8Array[]} */
+        const decryptedChunks = [];
+        // eslint-disable-next-line no-constant-condition
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            const chunkCounter = new Uint8Array(counter);
+            chunkCounter[chunkCounter.length - 1] += chunkIndex;
+            chunkIndex++;
+            const decrypted = new Uint8Array(await globalThis.crypto.subtle.decrypt({
+                name: ENCRYPTION_ALGORITHM,
+                counter: chunkCounter,
+                length: COUNTER_LENGTH,
+            }, cryptoKey, value));
+            decryptedChunks.push(decrypted);
+        }
+        return new ReadableStream({
+            start(controller) {
+                for (const chunk of decryptedChunks) {
+                    controller.enqueue(chunk);
+                }
+                controller.close();
+            },
+        });
+    }
+}
+//# sourceMappingURL=browser-crypto-adapter.js.map

package/dist/crypto-adapters/node-crypto-adapter.d.ts

@@ -1,17 +1,17 @@
 /** @implements {Type.CryptoAdapter} */
 export class NodeCryptoAdapter implements Type.CryptoAdapter {
     /** @param {Type.BlobLike} data  */
-    encryptStream(data: Type.BlobLike): {
+    encryptStream(data: Type.BlobLike): Promise<{
         key: Buffer<ArrayBufferLike>;
         iv: Buffer<ArrayBufferLike>;
         encryptedStream: ReadableStream<any>;
-    };
+    }>;
     /**
      * @param {ReadableStream} encryptedData
      * @param {Uint8Array} key
      * @param {Uint8Array} iv
      */
-    decryptStream(encryptedData: ReadableStream, key: Uint8Array, iv: Uint8Array): ReadableStream<any>;
+    decryptStream(encryptedData: ReadableStream, key: Uint8Array, iv: Uint8Array): Promise<ReadableStream<any>>;
 }
 import * as Type from '../types.js';
 //# sourceMappingURL=node-crypto-adapter.d.ts.map

package/dist/crypto-adapters/node-crypto-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-crypto-adapter.d.ts","sourceRoot":"","sources":["../../src/crypto-adapters/node-crypto-adapter.js"],"names":[],"mappings":"AAMA,uCAAuC;AACvC,0CADiB,IAAI,CAAC,aAAa;IAEjC,mCAAmC;IACnC,oBADY,IAAI,CAAC,QAAQ;;;;MA+BxB;IAED;;;;OAIG;IACH,6BAJW,cAAc,OACd,UAAU,MACV,UAAU,uBA8BpB;CACF;sBAzEqB,aAAa"}
+{"version":3,"file":"node-crypto-adapter.d.ts","sourceRoot":"","sources":["../../src/crypto-adapters/node-crypto-adapter.js"],"names":[],"mappings":"AAMA,uCAAuC;AACvC,0CADiB,IAAI,CAAC,aAAa;IAEjC,mCAAmC;IACnC,oBADY,IAAI,CAAC,QAAQ;;;;OA+BxB;IAED;;;;OAIG;IACH,6BAJW,cAAc,OACd,UAAU,MACV,UAAU,gCA8BpB;CACF;sBAzEqB,aAAa"}

package/dist/crypto-adapters/node-crypto-adapter.js

@@ -4,7 +4,7 @@ const ENCRYPTION_ALGORITHM = 'aes-256-cbc';
 /** @implements {Type.CryptoAdapter} */
 export class NodeCryptoAdapter {
     /** @param {Type.BlobLike} data  */
-    encryptStream(data) {
+    async encryptStream(data) {
         const symmetricKey = randomBytes(32); // 256 bits for AES-256
         const initializationVector = randomBytes(16); // 16 bytes for AES
         const cipher = createCipheriv(ENCRYPTION_ALGORITHM, symmetricKey, initializationVector);
@@ -22,18 +22,18 @@ export class NodeCryptoAdapter {
                 }
             },
         });
-        return {
+        return Promise.resolve({
             key: symmetricKey,
             iv: initializationVector,
             encryptedStream: data.stream().pipeThrough(encryptStream),
-        };
+        });
     }
     /**
      * @param {ReadableStream} encryptedData
      * @param {Uint8Array} key
      * @param {Uint8Array} iv
      */
-    decryptStream(encryptedData, key, iv) {
+    async decryptStream(encryptedData, key, iv) {
         const decipher = createDecipheriv(ENCRYPTION_ALGORITHM, key, iv);
         const decryptor = new TransformStream({
             async transform(chunk, controller) {
@@ -60,7 +60,7 @@ export class NodeCryptoAdapter {
                 }
             },
         });
-        return encryptedData.pipeThrough(decryptor);
+        return Promise.resolve(encryptedData.pipeThrough(decryptor));
     }
 }
 //# sourceMappingURL=node-crypto-adapter.js.map

package/dist/handlers/decrypt-handler.d.ts

@@ -4,8 +4,7 @@
  * @param {string} combinedKey
  * @param {Uint8Array} content
  */
-export function decryptFileWithKey(cryptoAdapter: Type.CryptoAdapter, combinedKey: string, content: Uint8Array): ReadableStream<any>;
-export function retrieveAndDecrypt(storachaClient: import("@storacha/client").Client, litClient: import("@lit-protocol/lit-node-client").LitNodeClient, cryptoAdapter: Type.CryptoAdapter, gatewayURL: URL, wallet: Wallet, cid: Type.AnyLink, delegationCAR: Uint8Array): Promise<ReadableStream<any>>;
+export function decryptFileWithKey(cryptoAdapter: Type.CryptoAdapter, combinedKey: string, content: Uint8Array): Promise<ReadableStream<any>>;
+export function retrieveAndDecrypt(storachaClient: import("@storacha/client").Client, litClient: import("@lit-protocol/lit-node-client").LitNodeClient, cryptoAdapter: Type.CryptoAdapter, gatewayURL: URL, signer: Type.LitWalletSigner | Type.LitPkpSigner, cid: Type.AnyLink, delegationCAR: Uint8Array): Promise<ReadableStream<any>>;
 import * as Type from '../types.js';
-import { Wallet } from 'ethers';
 //# sourceMappingURL=decrypt-handler.d.ts.map

package/dist/handlers/decrypt-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decrypt-handler.d.ts","sourceRoot":"","sources":["../../src/handlers/decrypt-handler.js"],"names":[],"mappings":"AAsFA;;;;;GAKG;AACH,kDALW,IAAI,CAAC,aAAa,eAElB,MAAM,WACN,UAAU,uBAuBpB;AA1FM,mDATI,OAAO,kBAAkB,EAAE,MAAM,aACjC,OAAO,+BAA+B,EAAE,aAAa,iBACrD,IAAI,CAAC,aAAa,cAElB,GAAG,UACH,MAAM,OACN,IAAI,CAAC,OAAO,iBACZ,UAAU,gCA+DpB;sBA5EqB,aAAa;uBARZ,QAAQ"}
+{"version":3,"file":"decrypt-handler.d.ts","sourceRoot":"","sources":["../../src/handlers/decrypt-handler.js"],"names":[],"mappings":"AAuGA;;;;;GAKG;AACH,kDALW,IAAI,CAAC,aAAa,eAElB,MAAM,WACN,UAAU,gCAuBpB;AA3GM,mDATI,OAAO,kBAAkB,EAAE,MAAM,aACjC,OAAO,+BAA+B,EAAE,aAAa,iBACrD,IAAI,CAAC,aAAa,cAElB,GAAG,UACH,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,YAAY,OACxC,IAAI,CAAC,OAAO,iBACZ,UAAU,gCAgFpB;sBA9FqB,aAAa"}

package/dist/handlers/decrypt-handler.js

@@ -1,4 +1,3 @@
-import { Wallet } from 'ethers';
 import { CID } from 'multiformats';
 import { CarIndexer } from '@ipld/car';
 import { exporter } from 'ipfs-unixfs-exporter';
@@ -9,33 +8,51 @@ import * as Type from '../types.js';
 import * as EncryptedMetadata from '../core/encrypted-metadata.js';
 import { createDecryptWrappedInvocation } from '../utils.js';
 /**
+ * Retrieve and decrypt a file from the IPFS gateway.
  *
  * @param {import('@storacha/client').Client} storachaClient - The Storacha client
  * @param {import('@lit-protocol/lit-node-client').LitNodeClient} litClient - The Lit client
  * @param {Type.CryptoAdapter} cryptoAdapter - The crypto adapter responsible for performing
  * encryption and decryption operations.
  * @param {URL} gatewayURL - The IPFS gateway URL
- * @param {Wallet} wallet - The wallet to use to decrypt the file
+ * @param {Type.LitWalletSigner | Type.LitPkpSigner} signer - The wallet or PKP key signer to decrypt the file
  * @param {Type.AnyLink} cid - The link to the file to retrieve
  * @param {Uint8Array} delegationCAR - The delegation that gives permission to decrypt the file
  */
-export const retrieveAndDecrypt = async (storachaClient, litClient, cryptoAdapter, gatewayURL, wallet, cid, delegationCAR) => {
+export const retrieveAndDecrypt = async (storachaClient, litClient, cryptoAdapter, gatewayURL, signer, cid, delegationCAR) => {
     const encryptedMetadataCar = await getCarFileFromGateway(gatewayURL, cid.toString());
     const { encryptedDataCID, identityBoundCiphertext, plaintextKeyHash, accessControlConditions, } = extractEncryptedMetadata(encryptedMetadataCar);
     const spaceDID = /** @type {`did:key:${string}`} */ (accessControlConditions[0].parameters[1]);
     const encryptedData = await getEncryptedDataFromCar(encryptedMetadataCar, encryptedDataCID);
+    if (!signer) {
+        throw new Error('Signer is required');
+    }
     /**
      * TODO: check if the wallet has capacity credits, if not get it
      */
+    const acc = 
+    /** @type import('@lit-protocol/types').AccessControlConditions */ (
+    /** @type {unknown} */ (accessControlConditions));
+    const expiration = new Date(Date.now() + 1000 * 60 * 5).toISOString(); // 5 min
     // TODO: store the session signature (https://developer.litprotocol.com/intro/first-request/generating-session-sigs#nodejs)
-    const sessionSigs = await Lit.getSessionSigs(litClient, {
-        wallet,
-        dataToEncryptHash: plaintextKeyHash,
-        expiration: new Date(Date.now() + 1000 * 60 * 5).toISOString(), // 5 min
-        accessControlConditions: 
-        /** @type import('@lit-protocol/types').AccessControlConditions */ (
-        /** @type {unknown} */ (accessControlConditions)),
-    });
+    let sessionSigs;
+    if ('wallet' in signer) {
+        sessionSigs = await Lit.getSessionSigs(litClient, {
+            wallet: signer.wallet,
+            dataToEncryptHash: plaintextKeyHash,
+            expiration,
+            accessControlConditions: acc,
+        });
+    }
+    else {
+        sessionSigs = await Lit.getPkpSessionSigs(litClient, {
+            pkpPublicKey: signer.pkpPublicKey,
+            authMethod: signer.authMethod,
+            dataToEncryptHash: plaintextKeyHash,
+            expiration,
+            accessControlConditions: acc,
+        });
+    }
     const wrappedInvocationJSON = await createDecryptWrappedInvocation({
         delegationCAR,
         spaceDID,
@@ -44,7 +61,7 @@ export const retrieveAndDecrypt = async (storachaClient, litClient, cryptoAdapte
         audience: storachaClient.defaultProvider(),
         expiration: new Date(Date.now() + 1000 * 60 * 10).getTime(), // 10 min
     });
-    const decryptKey = await Lit.executeUcanValidatoinAction(litClient, {
+    const decryptKey = await Lit.executeUcanValidationAction(litClient, {
         sessionSigs,
         spaceDID,
         identityBoundCiphertext,

package/dist/handlers/encrypt-handler.js

@@ -29,9 +29,13 @@ export const encryptAndUpload = async (storachaClient, litClient, cryptoAdapter,
  * @param {import('@storacha/client').Client} storachaClient - The Storacha client
  * @param {Type.EncryptedPayload} encryptedPayload - The encrypted payload
  * @param {import('@lit-protocol/types').AccessControlConditions} accessControlConditions - The access control conditions
+ * @param {object} [options] - The upload options
+ * @param {boolean} [options.publishToFilecoin] - Whether to publish the data to Filecoin
  * @returns {Promise<Type.AnyLink>} - The link to the uploaded metadata
  */
-const uploadEncryptedMetadata = async (storachaClient, encryptedPayload, accessControlConditions) => {
+const uploadEncryptedMetadata = async (storachaClient, encryptedPayload, accessControlConditions, options = {
+    publishToFilecoin: false,
+}) => {
     const { identityBoundCiphertext, plaintextKeyHash, encryptedBlobLike } = encryptedPayload;
     return storachaClient.uploadCAR({
         stream() {
@@ -51,7 +55,8 @@ const uploadEncryptedMetadata = async (storachaClient, encryptedPayload, accessC
                         encryptedDataCID: root.cid.toString(),
                         identityBoundCiphertext,
                         plaintextKeyHash,
-                        accessControlConditions: /** @type {[Record<string, any>]} */ (
+                        accessControlConditions: 
+                        /** @type {[Record<string, any>]} */ (
                         /** @type {unknown} */ (accessControlConditions)),
                     };
                     const encryptedMetadata = EncryptedMetadata.create(uploadData);
@@ -61,6 +66,9 @@ const uploadEncryptedMetadata = async (storachaClient, encryptedPayload, accessC
             }))
                 .pipeThrough(new CARWriterStream());
         },
+    }, {
+        // if publishToFilecoin is false, the data won't be published to Filecoin, so we need to set pieceHasher to undefined
+        ...(options.publishToFilecoin === true ? {} : { pieceHasher: undefined }),
     });
 };
 /**
@@ -74,7 +82,7 @@ const uploadEncryptedMetadata = async (storachaClient, encryptedPayload, accessC
  * @returns {Promise<Type.EncryptedPayload>} - The encrypted file
  */
 const encryptFile = async (litClient, cryptoAdapter, file, accessControlConditions) => {
-    const { key, iv, encryptedStream } = cryptoAdapter.encryptStream(file);
+    const { key, iv, encryptedStream } = await cryptoAdapter.encryptStream(file);
     // Combine key and initializationVector for Lit encryption
     const dataToEncrypt = base64.encode(new Uint8Array([...key, ...iv]));
     const { ciphertext, dataToEncryptHash } = await Lit.encryptString({ dataToEncrypt, accessControlConditions }, litClient);

package/dist/index.d.ts

@@ -1,4 +1,3 @@
 export { Wallet } from "ethers";
 export { create } from "./core/client.js";
-export { NodeCryptoAdapter } from "./crypto-adapters/node-crypto-adapter.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,4 +1,3 @@
 export { Wallet } from 'ethers';
 export { create } from './core/client.js';
-export { NodeCryptoAdapter } from './crypto-adapters/node-crypto-adapter.js';
 //# sourceMappingURL=index.js.map

package/dist/protocols/lit.d.ts

@@ -8,11 +8,20 @@ export function getLitClient(): Promise<LitNodeClient>;
  * @returns {Promise<import('@lit-protocol/types').SessionSigsMap>}
  */
 export function getSessionSigs(litClient: LitNodeClient, { wallet, accessControlConditions, dataToEncryptHash, expiration, capabilityAuthSigs, }: Type.SessionSignatureOptions): Promise<import("@lit-protocol/types").SessionSigsMap>;
+/**
+ * Get session signatures for a PKP key and auth method.
+ * There is not need to execute the auth callback for this function, because the auth method provided.
+ *
+ * @param {LitNodeClient} litClient
+ * @param {Type.PkpSessionSignatureOptions} options
+ * @returns {Promise<import('@lit-protocol/types').SessionSigsMap>}
+ */
+export function getPkpSessionSigs(litClient: LitNodeClient, { pkpPublicKey, authMethod, accessControlConditions, dataToEncryptHash, expiration, capabilityAuthSigs, }: Type.PkpSessionSignatureOptions): Promise<import("@lit-protocol/types").SessionSigsMap>;
 export { encryptString } from "@lit-protocol/encryption";
 export function getAccessControlConditions(spaceDID: import("@ucanto/core/schema").Schema<`did:key:${string}` & `did:${string}` & import("multiformats").Phantom<{
     protocol: "did:";
 }>, any>): import("@lit-protocol/types").AccessControlConditions;
-export function executeUcanValidatoinAction(litClient: LitNodeClient, options: Type.ExecuteUcanValidationOptions): Promise<any>;
+export function executeUcanValidationAction(litClient: LitNodeClient, options: Type.ExecuteUcanValidationOptions): Promise<any>;
 import { LitNodeClient } from '@lit-protocol/lit-node-client';
 import * as Type from '../types.js';
 //# sourceMappingURL=lit.d.ts.map

package/dist/protocols/lit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lit.d.ts","sourceRoot":"","sources":["../../src/protocols/lit.js"],"names":[],"mappings":"AAsCA;;GAEG;AACH,uDAQC;AAED;;;;GAIG;AACH,0CAJW,aAAa,2FACb,IAAI,CAAC,uBAAuB,GAC1B,OAAO,CAAC,OAAO,qBAAqB,EAAE,cAAc,CAAC,CAsDjE;;AAtFM;;WAFM,OAAO,qBAAqB,EAAE,uBAAuB,CAgBjE;AAgFM,uDAJI,aAAa,WACb,IAAI,CAAC,4BAA4B,gBA4B3C;8BA7I6B,+BAA+B;sBAUvC,aAAa"}
+{"version":3,"file":"lit.d.ts","sourceRoot":"","sources":["../../src/protocols/lit.js"],"names":[],"mappings":"AAsCA;;GAEG;AACH,uDAQC;AAED;;;;GAIG;AACH,0CAJW,aAAa,2FACb,IAAI,CAAC,uBAAuB,GAC1B,OAAO,CAAC,OAAO,qBAAqB,EAAE,cAAc,CAAC,CAsDjE;AAED;;;;;;;GAOG;AACH,6CAJW,aAAa,6GACb,IAAI,CAAC,0BAA0B,GAC7B,OAAO,CAAC,OAAO,qBAAqB,EAAE,cAAc,CAAC,CAqCjE;;AAnIM;;WAFM,OAAO,qBAAqB,EAAE,uBAAuB,CAgBjE;AA6HM,uDAJI,aAAa,WACb,IAAI,CAAC,4BAA4B,gBA4B3C;8BA1L6B,+BAA+B;sBAUvC,aAAa"}

package/dist/protocols/lit.js

@@ -76,13 +76,41 @@ export async function getSessionSigs(litClient, { wallet, accessControlCondition
     });
     return sessionSigs;
 }
+/**
+ * Get session signatures for a PKP key and auth method.
+ * There is not need to execute the auth callback for this function, because the auth method provided.
+ *
+ * @param {LitNodeClient} litClient
+ * @param {Type.PkpSessionSignatureOptions} options
+ * @returns {Promise<import('@lit-protocol/types').SessionSigsMap>}
+ */
+export async function getPkpSessionSigs(litClient, { pkpPublicKey, authMethod, accessControlConditions, dataToEncryptHash, expiration, capabilityAuthSigs, }) {
+    const accsResourceString = await LitAccessControlConditionResource.generateResourceString(accessControlConditions, dataToEncryptHash);
+    const sessionSigs = await litClient.getPkpSessionSigs({
+        pkpPublicKey,
+        authMethods: [authMethod],
+        resourceAbilityRequests: [
+            {
+                resource: new LitAccessControlConditionResource(accsResourceString),
+                ability: LIT_ABILITY.AccessControlConditionDecryption,
+            },
+            {
+                resource: new LitActionResource('*'),
+                ability: LIT_ABILITY.LitActionExecution,
+            },
+        ],
+        expiration,
+        capabilityAuthSigs,
+    });
+    return sessionSigs;
+}
 /**
  *
  * @param {LitNodeClient} litClient
  * @param {Type.ExecuteUcanValidationOptions} options
  * @returns
  */
-export const executeUcanValidatoinAction = async (litClient, options) => {
+export const executeUcanValidationAction = async (litClient, options) => {
     const { sessionSigs, ...jsParams } = options;
     const litActionResponse = await litClient.executeJs({
         ipfsId: STORACHA_LIT_ACTION_CID,

package/dist/types.d.ts

@@ -3,7 +3,7 @@ import { UnknownLink } from 'multiformats';
 import { Client as StorachaClient } from '@storacha/client';
 import { Result, Failure, Block } from '@ucanto/interface';
 import { LitNodeClient } from '@lit-protocol/lit-node-client';
-import { AccessControlConditions, AuthSig, SessionSigsMap } from '@lit-protocol/types';
+import { AccessControlConditions, AuthMethod, AuthSig, SessionSigsMap } from '@lit-protocol/types';
 import type { BlobLike, AnyLink, Signer, DID, SigAlg } from '@storacha/client/types';
 export type { IPLDBlock } from '@ucanto/interface';
 export type { SpaceDID } from '@storacha/capabilities/utils';
@@ -12,7 +12,7 @@ export type { Result, UnknownLink };
 export type { BlobLike, AnyLink };
 export interface EncryptedClient {
     uploadEncryptedFile(file: BlobLike): Promise<AnyLink>;
-    retrieveAndDecryptFile(wallet: Wallet, cid: AnyLink, delegationCAR: Uint8Array): Promise<ReadableStream>;
+    retrieveAndDecryptFile(signer: LitWalletSigner | LitPkpSigner, cid: AnyLink, delegationCAR: Uint8Array): Promise<ReadableStream>;
 }
 export type EncryptedClientOptions = {
     storachaClient: StorachaClient;
@@ -21,8 +21,8 @@ export type EncryptedClientOptions = {
     gatewayURL?: URL;
 };
 export interface CryptoAdapter {
-    encryptStream(data: BlobLike): EncryptOutput;
-    decryptStream(encryptedData: ReadableStream, key: Uint8Array, iv: Uint8Array): ReadableStream;
+    encryptStream(data: BlobLike): Promise<EncryptOutput>;
+    decryptStream(encryptedData: ReadableStream, key: Uint8Array, iv: Uint8Array): Promise<ReadableStream>;
 }
 export interface EncryptOutput {
     key: Uint8Array;
@@ -63,6 +63,21 @@ export interface SessionSignatureOptions {
     expiration?: string;
     capabilityAuthSigs?: AuthSig[];
 }
+export interface PkpSessionSignatureOptions {
+    pkpPublicKey: string;
+    authMethod: AuthMethod;
+    accessControlConditions: AccessControlConditions;
+    dataToEncryptHash: string;
+    expiration?: string;
+    capabilityAuthSigs?: AuthSig[];
+}
+export interface LitPkpSigner {
+    pkpPublicKey: string;
+    authMethod: AuthMethod;
+}
+export interface LitWalletSigner {
+    wallet: Wallet;
+}
 export interface CreateDecryptWrappedInvocationOptions {
     delegationCAR: Uint8Array;
     issuer: Signer<DID, SigAlg>;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,MAAM,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC7D,OAAO,EACL,uBAAuB,EACvB,OAAO,EACP,cAAc,EACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EACV,QAAQ,EACR,OAAO,EACP,MAAM,EACN,GAAG,EACH,MAAM,EACP,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,YAAY,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AACjE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AACnC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AAEjC,MAAM,WAAW,eAAe;IAC9B,mBAAmB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrD,sBAAsB,CACpB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,OAAO,EACZ,aAAa,EAAE,UAAU,GACxB,OAAO,CAAC,cAAc,CAAC,CAAA;CAC3B;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,cAAc,EAAE,cAAc,CAAA;IAC9B,aAAa,EAAE,aAAa,CAAA;IAC5B,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,UAAU,CAAC,EAAE,GAAG,CAAA;CACjB,CAAA;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,aAAa,CAAA;IAC5C,aAAa,CACX,aAAa,EAAE,cAAc,EAC7B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,GACb,cAAc,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,UAAU,CAAA;IACf,EAAE,EAAE,UAAU,CAAA;IACd,eAAe,EAAE,cAAc,CAAA;CAChC;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,QAAQ,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,6BAA6B,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;AAEjE,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,6BAA6B,CAAA;CACvD;AAED,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,WAAW,CAAA;IAC7B,uBAAuB,EAAE,UAAU,CAAA;IACnC,gBAAgB,EAAE,UAAU,CAAA;IAC5B,uBAAuB,EAAE,6BAA6B,CAAA;CACvD;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,+BAA+B;IAC/B,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;IACtC,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,IAAI,sBAAsB,CAAA;CACjC;AAED,MAAM,WAAW,aAAc,SAAQ,OAAO;IAC5C,IAAI,EAAE,eAAe,CAAA;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,qCAAqC;IACpD,aAAa,EAAE,UAAU,CAAA;IACzB,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC3B,QAAQ,EAAE,OAAO,MAAM,IAAI,MAAM,EAAE,CAAA;IACnC,QAAQ,EAAE,WAAW,MAAM,EAAE,CAAA;IAC7B,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,cAAc,CAAA;IAC3B,QAAQ,EAAE,WAAW,MAAM,EAAE,CAAA;IAC7B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,MAAM,CAAA;CAC9B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,MAAM,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC7D,OAAO,EACL,uBAAuB,EACvB,UAAU,EACV,OAAO,EACP,cAAc,EACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EACV,QAAQ,EACR,OAAO,EACP,MAAM,EACN,GAAG,EACH,MAAM,EACP,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,YAAY,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AACjE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AACnC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AAEjC,MAAM,WAAW,eAAe;IAC9B,mBAAmB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrD,sBAAsB,CACpB,MAAM,EAAE,eAAe,GAAG,YAAY,EACtC,GAAG,EAAE,OAAO,EACZ,aAAa,EAAE,UAAU,GACxB,OAAO,CAAC,cAAc,CAAC,CAAA;CAC3B;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,cAAc,EAAE,cAAc,CAAA;IAC9B,aAAa,EAAE,aAAa,CAAA;IAC5B,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,UAAU,CAAC,EAAE,GAAG,CAAA;CACjB,CAAA;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,aAAa,CACX,aAAa,EAAE,cAAc,EAC7B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,cAAc,CAAC,CAAA;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,UAAU,CAAA;IACf,EAAE,EAAE,UAAU,CAAA;IACd,eAAe,EAAE,cAAc,CAAA;CAChC;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,QAAQ,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,6BAA6B,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;AAEjE,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,6BAA6B,CAAA;CACvD;AAED,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,WAAW,CAAA;IAC7B,uBAAuB,EAAE,UAAU,CAAA;IACnC,gBAAgB,EAAE,UAAU,CAAA;IAC5B,uBAAuB,EAAE,6BAA6B,CAAA;CACvD;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,+BAA+B;IAC/B,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;IACtC,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,IAAI,sBAAsB,CAAA;CACjC;AAED,MAAM,WAAW,aAAc,SAAQ,OAAO;IAC5C,IAAI,EAAE,eAAe,CAAA;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;IACtB,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,qCAAqC;IACpD,aAAa,EAAE,UAAU,CAAA;IACzB,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC3B,QAAQ,EAAE,OAAO,MAAM,IAAI,MAAM,EAAE,CAAA;IACnC,QAAQ,EAAE,WAAW,MAAM,EAAE,CAAA;IAC7B,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,cAAc,CAAA;IAC3B,QAAQ,EAAE,WAAW,MAAM,EAAE,CAAA;IAC7B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,MAAM,CAAA;CAC9B"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@storacha/encrypt-upload-client",
   "type": "module",
-  "version": "0.0.33",
+  "version": "0.0.36",
   "license": "Apache-2.0 OR MIT",
   "description": "Client for upload and download encrypted files",
   "author": "Storacha",
@@ -34,12 +34,24 @@
   ],
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
     },
-    "./crypto/adapters": {
-      "types": "./dist/crypto-adapters/node-crypto-adapter.d.ts",
-      "import": "./dist/crypto-adapters/node-crypto-adapter.js"
+    "./node": {
+      "import": "./dist/crypto-adapters/node-crypto-adapter.js",
+      "require": "./dist/crypto-adapters/node-crypto-adapter.js"
+    },
+    "./browser": {
+      "import": "./dist/crypto-adapters/browser-crypto-adapter.js",
+      "require": "./dist/crypto-adapters/browser-crypto-adapter.js"
+    },
+    "./crypto-adapters/browser-crypto-adapter": {
+      "import": "./dist/crypto-adapters/browser-crypto-adapter.js",
+      "types": "./dist/crypto-adapters/browser-crypto-adapter.d.ts"
+    },
+    "./crypto-adapters/node-crypto-adapter": {
+      "import": "./dist/crypto-adapters/node-crypto-adapter.js",
+      "types": "./dist/crypto-adapters/node-crypto-adapter.d.ts"
     },
     "./types": "./dist/types.js"
   },
@@ -68,9 +80,9 @@
     "ethers": "5.7.1",
     "ipfs-unixfs-exporter": "^10.0.0",
     "multiformats": "^13.3.3",
-    "@storacha/capabilities": "^1.7.0",
-    "@storacha/client": "^1.3.4",
-    "@storacha/upload-client": "^1.2.3"
+    "@storacha/upload-client": "^1.2.4",
+    "@storacha/client": "^1.4.1",
+    "@storacha/capabilities": "^1.7.0"
   },
   "devDependencies": {
     "@lit-protocol/types": "^7.0.8",
@@ -123,6 +135,7 @@
     "lint:fix": "tsc --build && eslint '**/*.{js,ts}' --fix && prettier --write '**/*.{js,ts,yml,json}' --ignore-path ../../.gitignore",
     "build-actions": "node lit-actions/esbuild.js",
     "attw": "attw --pack .",
-    "rc": "npm version prerelease --preid rc"
+    "rc": "npm version prerelease --preid rc",
+    "test": "node --test test/*.spec.js"
   }
 }