@storacha/encrypt-upload-client 1.1.65 → 1.1.67

package/dist/types.d.ts

@@ -1,9 +1,10 @@
-import { Wallet } from 'ethers';
 import { UnknownLink } from 'multiformats';
 import { Client as StorachaClient } from '@storacha/client';
 import { Result, Failure, Block, Proof } from '@ucanto/interface';
-import { AccessControlConditions, AuthMethod, AuthSig, SessionSigsMap } from '@lit-protocol/types';
+import { AuthSig, SessionSigsMap } from '@lit-protocol/types';
+import { AccessControlConditions } from '@lit-protocol/access-control-conditions';
 import type { BlobLike, AnyLink, Signer, DID, SigAlg, UploadOptions } from '@storacha/client/types';
+import type { AuthData } from '@lit-protocol/schemas';
 export type { IPLDBlock } from '@ucanto/interface';
 export type { SpaceDID } from '@storacha/capabilities/types';
 export type { UnknownFormat } from '@storacha/capabilities/types';
@@ -11,6 +12,12 @@ export type { Result, UnknownLink };
 export type { BlobLike, AnyLink };
 export type { UploadOptions } from '@storacha/client/types';
 import type { SpaceDID } from '@storacha/capabilities/types';
+import { Account } from 'viem';
+import { createAuthManager } from '@lit-protocol/auth';
+export type AuthManager = ReturnType<typeof createAuthManager>;
+export type EoaAuthContext = Awaited<ReturnType<AuthManager['createEoaAuthContext']>>;
+export type PkpAuthContext = Awaited<ReturnType<AuthManager['createPkpAuthContext']>>;
+export type AuthenticationContext = EoaAuthContext | PkpAuthContext;
 export interface FileMetadata {
     name: string;
     type: string;
@@ -98,10 +105,10 @@ export interface DecryptionConfig {
      * Proofs to access the space
      */
     proofs?: Proof[];
-    wallet?: Wallet;
+    wallet?: Account;
     sessionSigs?: SessionSigsMap;
     pkpPublicKey?: string;
-    authMethod?: AuthMethod;
+    authData?: AuthData;
 }
 export interface EncryptedKeyResult {
     strategy: EncryptionStrategy;
@@ -173,28 +180,21 @@ export interface KMSMetadataView extends KMSMetadata {
 export interface DecodeFailure extends Failure {
     name: 'DecodeFailure';
 }
-export interface SessionSignatureOptions {
-    wallet: Wallet;
+export interface EoaAuthContextOptions {
+    wallet: Account;
     accessControlConditions: AccessControlConditions;
     dataToEncryptHash: string;
     expiration?: string;
     capabilityAuthSigs?: AuthSig[];
 }
-export interface PkpSessionSignatureOptions {
+export interface PkpAuthContextOptions {
     pkpPublicKey: string;
-    authMethod: AuthMethod;
+    authData: AuthData;
     accessControlConditions: AccessControlConditions;
     dataToEncryptHash: string;
     expiration?: string;
     capabilityAuthSigs?: AuthSig[];
 }
-export interface LitPkpSigner {
-    pkpPublicKey: string;
-    authMethod: AuthMethod;
-}
-export interface LitWalletSigner {
-    wallet: Wallet;
-}
 export interface CreateDecryptWrappedInvocationOptions {
     decryptDelegation: Proof;
     issuer: Signer<DID, SigAlg>;
@@ -211,6 +211,15 @@ export interface ExecuteUcanValidationOptions {
     accessControlConditions: AccessControlConditions;
     wrappedInvocationJSON: string;
 }
+export type AuthContext = EoaAuthContext | PkpAuthContext;
+export interface ExecuteUcanValidationActionOptions {
+    authContext: AuthContext;
+    spaceDID: `did:key:${string}`;
+    identityBoundCiphertext: string;
+    plaintextKeyHash: string;
+    accessControlConditions: AccessControlConditions;
+    wrappedInvocationJSON: string;
+}
 export type ExtractedMetadata = LitExtractedMetadata | KMSExtractedMetadata;
 export interface LitExtractedMetadata {
     strategy: 'lit';

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,MAAM,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACjE,OAAO,EACL,uBAAuB,EACvB,UAAU,EACV,OAAO,EACP,cAAc,EACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EACV,QAAQ,EACR,OAAO,EACP,MAAM,EACN,GAAG,EACH,MAAM,EACN,aAAa,EACd,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,YAAY,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AACjE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AACnC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AACjC,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAG3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAE5D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,cAAc,CAAA;IACtB,YAAY,CAAC,EAAE,YAAY,CAAA;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,oBAAoB,CAClB,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE,gBAAgB,EACxB,aAAa,CAAC,EAAE,aAAa,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,sBAAsB,CACpB,GAAG,EAAE,OAAO,EACZ,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAAA;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,cAAc,EAAE,cAAc,CAAA;IAC9B,aAAa,EAAE,aAAa,CAAA;IAC5B,UAAU,CAAC,EAAE,GAAG,CAAA;CACjB,CAAA;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,UAAU,CAAA;IACf,EAAE,EAAE,UAAU,CAAA;IACd,eAAe,EAAE,cAAc,CAAA;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,aAAa,CACX,aAAa,EAAE,cAAc,EAC7B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,cAAc,CAAC,CAAA;IAG1B,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,GAAG,UAAU,CAAA;IAC5D,aAAa,CAAC,QAAQ,EAAE,UAAU,GAAG;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAA;KAAE,CAAA;CACzE;AAED,MAAM,WAAW,aAAa;IAE5B,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,aAAa,CACX,aAAa,EAAE,cAAc,EAC7B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,cAAc,CAAC,CAAA;IAG1B,mBAAmB,CACjB,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9B,mBAAmB,CACjB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;QACP,gBAAgB,EAAE,gBAAgB,CAAA;QAClC,QAAQ,EAAE,iBAAiB,CAAA;QAC3B,WAAW,EAAE,OAAO,CAAA;QACpB,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3B,QAAQ,EAAE,GAAG,CAAA;KACd,GACA,OAAO,CAAC;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;IAC/C,wBAAwB,CAAC,GAAG,EAAE,UAAU,GAAG,iBAAiB,CAAA;IAC5D,eAAe,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAAA;IACpD,cAAc,CACZ,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,cAAc,GAAG,cAAc,GACxC,OAAO,CAAC;QAAE,GAAG,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;CAChD;AAGD,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAE3B;;OAEG;IACH,QAAQ,EAAE,QAAQ,CAAA;IAElB;;OAEG;IACH,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAE/B,iBAAiB,EAAE,KAAK,CAAA;IACxB,QAAQ,EAAE,QAAQ,CAAA;IAClB;;OAEG;IACH,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IAGhB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,cAAc,CAAA;IAE5B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,cAAc,GAAG,cAAc,CAAA;CAC1C;AAED,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,KAAK,CAAA;AAE9C,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,QAAQ,CAAA;IACf,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,cAAc,GAAG,cAAc,CAAA;IACzC,iBAAiB,EAAE,QAAQ,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,6BAA6B,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;AAEjE,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,WAAW,CAAA;IAC7B,uBAAuB,EAAE,UAAU,CAAA;IACnC,gBAAgB,EAAE,UAAU,CAAA;IAC5B,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,+BAA+B;IAC/B,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,IAAI,gBAAgB,CAAA;CAC3B;AAGD,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,WAAW,CAAA;IAC7B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,KAAK,EAAE,QAAQ,CAAA;IACf,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,+BAA+B;IAC/B,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,IAAI,gBAAgB,CAAA;CAC3B;AAED,MAAM,WAAW,aAAc,SAAQ,OAAO;IAC5C,IAAI,EAAE,eAAe,CAAA;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAA;IACd,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;IACtB,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,qCAAqC;IACpD,iBAAiB,EAAE,KAAK,CAAA;IACxB,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC3B,QAAQ,EAAE,OAAO,MAAM,IAAI,MAAM,EAAE,CAAA;IACnC,QAAQ,EAAE,WAAW,MAAM,EAAE,CAAA;IAC7B,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,cAAc,CAAA;IAC3B,QAAQ,EAAE,WAAW,MAAM,EAAE,CAAA;IAC7B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,MAAM,CAAA;CAC9B;AAGD,MAAM,MAAM,iBAAiB,GAAG,oBAAoB,GAAG,oBAAoB,CAAA;AAE3E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,KAAK,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,KAAK,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,KAAK,EAAE,QAAQ,CAAA;IACf,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,MAAM,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAA;AACjF,OAAO,KAAK,EACV,QAAQ,EACR,OAAO,EACP,MAAM,EACN,GAAG,EACH,MAAM,EACN,aAAa,EACd,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAErD,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,YAAY,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AACjE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AACnC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AACjC,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAG3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAE9D,MAAM,MAAM,cAAc,GAAG,OAAO,CAClC,UAAU,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,CAChD,CAAA;AACD,MAAM,MAAM,cAAc,GAAG,OAAO,CAClC,UAAU,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,CAChD,CAAA;AACD,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG,cAAc,CAAA;AAEnE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,cAAc,CAAA;IACtB,YAAY,CAAC,EAAE,YAAY,CAAA;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,oBAAoB,CAClB,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE,gBAAgB,EACxB,aAAa,CAAC,EAAE,aAAa,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,sBAAsB,CACpB,GAAG,EAAE,OAAO,EACZ,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAAA;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,cAAc,EAAE,cAAc,CAAA;IAC9B,aAAa,EAAE,aAAa,CAAA;IAC5B,UAAU,CAAC,EAAE,GAAG,CAAA;CACjB,CAAA;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,UAAU,CAAA;IACf,EAAE,EAAE,UAAU,CAAA;IACd,eAAe,EAAE,cAAc,CAAA;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,aAAa,CACX,aAAa,EAAE,cAAc,EAC7B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,cAAc,CAAC,CAAA;IAG1B,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,GAAG,UAAU,CAAA;IAC5D,aAAa,CAAC,QAAQ,EAAE,UAAU,GAAG;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAA;KAAE,CAAA;CACzE;AAED,MAAM,WAAW,aAAa;IAE5B,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,aAAa,CACX,aAAa,EAAE,cAAc,EAC7B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,cAAc,CAAC,CAAA;IAG1B,mBAAmB,CACjB,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9B,mBAAmB,CACjB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;QACP,gBAAgB,EAAE,gBAAgB,CAAA;QAClC,QAAQ,EAAE,iBAAiB,CAAA;QAC3B,WAAW,EAAE,OAAO,CAAA;QACpB,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3B,QAAQ,EAAE,GAAG,CAAA;KACd,GACA,OAAO,CAAC;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;IAC/C,wBAAwB,CAAC,GAAG,EAAE,UAAU,GAAG,iBAAiB,CAAA;IAC5D,eAAe,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAAA;IACpD,cAAc,CACZ,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,cAAc,GAAG,cAAc,GACxC,OAAO,CAAC;QAAE,GAAG,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;CAChD;AAGD,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAE3B;;OAEG;IACH,QAAQ,EAAE,QAAQ,CAAA;IAElB;;OAEG;IACH,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAE/B,iBAAiB,EAAE,KAAK,CAAA;IACxB,QAAQ,EAAE,QAAQ,CAAA;IAClB;;OAEG;IACH,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IAGhB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,WAAW,CAAC,EAAE,cAAc,CAAA;IAE5B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,QAAQ,CAAA;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,cAAc,GAAG,cAAc,CAAA;CAC1C;AAED,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,KAAK,CAAA;AAE9C,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,QAAQ,CAAA;IACf,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,cAAc,GAAG,cAAc,CAAA;IACzC,iBAAiB,EAAE,QAAQ,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,6BAA6B,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;AAEjE,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,WAAW,CAAA;IAC7B,uBAAuB,EAAE,UAAU,CAAA;IACnC,gBAAgB,EAAE,UAAU,CAAA;IAC5B,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,+BAA+B;IAC/B,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,IAAI,gBAAgB,CAAA;CAC3B;AAGD,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,WAAW,CAAA;IAC7B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,KAAK,EAAE,QAAQ,CAAA;IACf,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,+BAA+B;IAC/B,YAAY,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,IAAI,gBAAgB,CAAA;CAC3B;AAED,MAAM,WAAW,aAAc,SAAQ,OAAO;IAC5C,IAAI,EAAE,eAAe,CAAA;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,CAAA;IACf,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,QAAQ,CAAA;IAClB,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,qCAAqC;IACpD,iBAAiB,EAAE,KAAK,CAAA;IACxB,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC3B,QAAQ,EAAE,OAAO,MAAM,IAAI,MAAM,EAAE,CAAA;IACnC,QAAQ,EAAE,WAAW,MAAM,EAAE,CAAA;IAC7B,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,cAAc,CAAA;IAC3B,QAAQ,EAAE,WAAW,MAAM,EAAE,CAAA;IAC7B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,cAAc,CAAA;AAEzD,MAAM,WAAW,kCAAkC;IACjD,WAAW,EAAE,WAAW,CAAA;IACxB,QAAQ,EAAE,WAAW,MAAM,EAAE,CAAA;IAC7B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,MAAM,CAAA;CAC9B;AAGD,MAAM,MAAM,iBAAiB,GAAG,oBAAoB,GAAG,oBAAoB,CAAA;AAE3E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,KAAK,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;IACxB,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,KAAK,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,KAAK,EAAE,QAAQ,CAAA;IACf,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF"}

package/dist/utils/file-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-metadata.d.ts","sourceRoot":"","sources":["../../src/utils/file-metadata.js"],"names":[],"mappings":"AAUA;;;;;YAKE;AASK,6CAJI,IAAI,CAAC,QAAQ,aACb,IAAI,CAAC,YAAY,GACf,IAAI,CAmDhB;AAQM,qDAHI,cAAc,GACZ,OAAO,CAAC;IAAC,UAAU,EAAE,cAAc,CAAC;IAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAA;CAAC,CAAC,CA8DnF;uBA5IsB,cAAc;sBADf,aAAa"}
+{"version":3,"file":"file-metadata.d.ts","sourceRoot":"","sources":["../../src/utils/file-metadata.js"],"names":[],"mappings":"AAUA;;;;;YAKE;AASK,6CAJI,IAAI,CAAC,QAAQ,aACb,IAAI,CAAC,YAAY,GACf,IAAI,CAmDhB;AAQM,qDAHI,cAAc,GACZ,OAAO,CAAC;IAAC,UAAU,EAAE,cAAc,CAAC;IAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAA;CAAC,CAAC,CA8FnF;uBA5KsB,cAAc;sBADf,aAAa"}

package/dist/utils/file-metadata.js

@@ -73,30 +73,55 @@ export const extractFileMetadata = async (decryptedStream) => {
         // Read metadata length from first 4 bytes
         const lengthView = new DataView(header.buffer, 0, 4);
         const metadataLength = lengthView.getUint32(0, true);
-        // Validate length
-        if (metadataLength < 0 || metadataLength > METADATA_HEADER_SIZE - 4) {
-            throw new Error('Invalid metadata length');
-        }
+        // Detect if this is a valid metadata header or raw file content
+        // Valid metadata length should be 0-1020, anything else indicates no metadata header
+        const hasValidMetadataHeader = metadataLength >= 0 && metadataLength <= METADATA_HEADER_SIZE - 4;
         let fileMetadata = undefined;
-        if (metadataLength > 0) {
-            // Extract and parse metadata
-            const metadataBytes = header.slice(4, 4 + metadataLength);
-            const metadataJson = new TextDecoder('utf-8', { fatal: true }).decode(metadataBytes);
-            fileMetadata = secureJsonParse(metadataJson);
-            validateMetadataStructure(fileMetadata);
+        let headerBytesToInclude = null;
+        if (hasValidMetadataHeader) {
+            // Valid metadata header detected
+            if (metadataLength > 0) {
+                try {
+                    // Extract and parse metadata
+                    const metadataBytes = header.slice(4, 4 + metadataLength);
+                    const metadataJson = new TextDecoder('utf-8', { fatal: true }).decode(metadataBytes);
+                    const parsedMetadata = secureJsonParse(metadataJson);
+                    // Use existing validation - if it throws, treat as no metadata
+                    validateMetadataStructure(parsedMetadata);
+                    fileMetadata = parsedMetadata;
+                }
+                catch (error) {
+                    // JSON parsing or validation failed - treat as no metadata
+                    console.warn('Metadata parsing/validation failed - treating as file without metadata:', error);
+                    headerBytesToInclude = header;
+                }
+            }
+            // If metadataLength is 0, header is consumed normally (no metadata but valid header)
         }
-        // Create file stream (header is consumed, continue with rest)
-        // Include any remainder bytes from the header read first
+        else {
+            // Invalid metadata length - treat entire stream as file content without metadata
+            console.warn(`Detected file without metadata header (apparent length: ${metadataLength})`);
+            // Include the "header" bytes as part of file content
+            headerBytesToInclude = header;
+        }
+        // Create file stream (reusing logic for both cases)
         let remainderEnqueued = false;
+        let headerEnqueued = !headerBytesToInclude; // Skip header injection if no header to include
         const fileStream = new ReadableStream({
             async pull(controller) {
-                // First, enqueue any remainder bytes from header read
+                // First, enqueue header bytes if this file has no metadata header
+                if (!headerEnqueued && headerBytesToInclude) {
+                    controller.enqueue(headerBytesToInclude);
+                    headerEnqueued = true;
+                    return;
+                }
+                // Then, enqueue any remainder bytes from the header read
                 if (!remainderEnqueued && remainder) {
                     controller.enqueue(remainder);
                     remainderEnqueued = true;
                     return;
                 }
-                // Then continue with the reader
+                // Finally, continue with the reader
                 const { done, value } = await reader.read();
                 if (done) {
                     controller.close();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@storacha/encrypt-upload-client",
   "type": "module",
-  "version": "1.1.65",
+  "version": "1.1.67",
   "license": "Apache-2.0 OR MIT",
   "description": "Client for upload and download encrypted files",
   "author": "Storacha",
@@ -61,12 +61,12 @@
     "@ipld/dag-json": "^10.2.3",
     "@ipld/dag-ucan": "^3.4.5",
     "@ipld/schema": "^6.0.6",
-    "@lit-protocol/auth-helpers": "^7.0.2",
-    "@lit-protocol/constants": "^7.0.2",
-    "@lit-protocol/contracts-sdk": "^7.0.2",
-    "@lit-protocol/encryption": "^7.0.2",
-    "@lit-protocol/lit-auth-client": "^7.0.3",
-    "@lit-protocol/lit-node-client": "^7.0.2",
+    "@lit-protocol/access-control-conditions": "^8.0.2",
+    "@lit-protocol/auth": "^8.1.2",
+    "@lit-protocol/auth-helpers": "^8.1.1",
+    "@lit-protocol/constants": "^8.0.8",
+    "@lit-protocol/lit-client": "^8.2.3",
+    "@lit-protocol/networks": "8.3.1",
     "@ucanto/client": "^9.0.2",
     "@ucanto/core": "^10.4.5",
     "@ucanto/interface": "^11.0.1",
@@ -76,16 +76,17 @@
     "@ucanto/validator": "^10.0.1",
     "blockstore-core": "^3.0.0",
     "carstream": "^2.1.0",
-    "dotenv": "^16.4.7",
-    "ethers": "5.7.1",
+    "dotenv": "^17.2.3",
     "ipfs-unixfs-exporter": "^10.0.0",
     "multiformats": "^13.3.6",
+    "viem": "^2.39.0",
     "@storacha/capabilities": "^1.12.0",
-    "@storacha/client": "^1.8.22",
+    "@storacha/client": "^1.8.24",
     "@storacha/upload-client": "^1.3.6"
   },
   "devDependencies": {
-    "@lit-protocol/types": "^7.0.8",
+    "@lit-protocol/schemas": "^8.0.2",
+    "@lit-protocol/types": "^8.0.2",
     "@playwright/test": "^1.29.2",
     "esbuild": "^0.25.1",
     "mkcert": "^3.2.0",

package/dist/test/cid-verification.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=cid-verification.spec.d.ts.map

package/dist/test/cid-verification.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cid-verification.spec.d.ts","sourceRoot":"","sources":["../../test/cid-verification.spec.js"],"names":[],"mappings":""}

package/dist/test/cid-verification.spec.js

@@ -1,314 +0,0 @@
-import assert from 'node:assert';
-import { describe, test } from 'node:test';
-import { getCarFileFromPublicGateway } from '../src/handlers/decrypt-handler.js';
-import { createTestCar } from './helpers/test-file-utils.js';
-await describe('CID Verification', async () => {
-    await describe('getCarFileFromPublicGateway', async () => {
-        await test('should construct correct gateway URL format', async () => {
-            // This is a basic test to verify the function exists and can be called
-            // Integration tests with real network calls would test full functionality
-            const gatewayURL = new URL('https://example.com');
-            const testCID = 'bafkreih5aznjvttude6c3wbvqeebb6rlx5wkbzyppv7z3aldwdht2oqadq';
-            // Mock fetch to avoid network calls in unit tests
-            const originalFetch = globalThis.fetch;
-            let capturedURL = '';
-            // @ts-ignore - Mock fetch for testing
-            globalThis.fetch = async (url) => {
-                capturedURL = url.toString();
-                // Return a mock response that looks like a failed fetch
-                return {
-                    ok: false,
-                    status: 404,
-                    statusText: 'Not Found',
-                    arrayBuffer: async () => {
-                        throw new Error('Mock 404');
-                    },
-                };
-            };
-            try {
-                await getCarFileFromPublicGateway(gatewayURL, testCID);
-            }
-            catch (error) {
-                // We expect this to fail with our mock, that's fine
-            }
-            finally {
-                globalThis.fetch = originalFetch;
-            }
-            // Verify the URL was constructed correctly
-            const expectedURL = `https://example.com/ipfs/${testCID}?format=car`;
-            assert.strictEqual(capturedURL, expectedURL, 'Should construct correct gateway URL');
-        });
-        await test('should be exported and callable', async () => {
-            // Basic smoke test
-            assert.strictEqual(typeof getCarFileFromPublicGateway, 'function', 'Should be a function');
-            // Verify it requires proper parameters
-            try {
-                // @ts-ignore - intentionally testing invalid input
-                await getCarFileFromPublicGateway(null, 'test');
-                assert.fail('Should throw error for null gateway URL');
-            }
-            catch (error) {
-                // Expected to fail - good
-                assert(error instanceof Error, 'Should throw an Error');
-            }
-        });
-        await test('should validate CID format', async () => {
-            const gatewayURL = new URL('https://example.com');
-            // Mock fetch to return valid CAR response
-            const originalFetch = globalThis.fetch;
-            // @ts-ignore - Mock fetch for testing
-            globalThis.fetch = async (url) => ({
-                ok: true,
-                status: 200,
-                statusText: 'OK',
-                arrayBuffer: async () => new ArrayBuffer(100), // Mock CAR data
-            });
-            try {
-                await getCarFileFromPublicGateway(gatewayURL, 'invalid-cid');
-                assert.fail('Should throw error for invalid CID');
-            }
-            catch (error) {
-                // Expected to fail due to invalid CID format
-                assert(error instanceof Error, 'Should throw an Error for invalid CID');
-            }
-            finally {
-                globalThis.fetch = originalFetch;
-            }
-        });
-        await test('should accept valid CAR file with matching root CID', async () => {
-            const gatewayURL = new URL('https://example.com');
-            // Create a valid KMS metadata CAR file
-            const testContent = {
-                encryptedDataCID: 'bafkreih5aznjvttude6c3wbvqeebb6rlx5wkbzyppv7z3aldwdht2oqadq',
-                encryptedSymmetricKey: 'test-encrypted-key',
-                space: 'did:key:z6MkwDK3M4PxU1FqcSt6quBH1xRBSGnPRdQYP9B13h3Wq5X1',
-                kms: {
-                    provider: 'google-kms',
-                    keyId: 'test-key-id',
-                    algorithm: 'RSA-OAEP-2048-SHA256',
-                },
-            };
-            const { car, actualRootCID } = await createTestCar(testContent);
-            // Mock fetch to return the valid CAR
-            const originalFetch = globalThis.fetch;
-            // @ts-ignore - Mock fetch for testing
-            globalThis.fetch = async (url) => ({
-                ok: true,
-                status: 200,
-                statusText: 'OK',
-                arrayBuffer: async () => car.buffer,
-            });
-            try {
-                const result = await getCarFileFromPublicGateway(gatewayURL, actualRootCID.toString());
-                assert(result instanceof Uint8Array, 'Should return Uint8Array');
-                assert.deepStrictEqual(result, car, 'Should return the exact CAR file');
-            }
-            finally {
-                globalThis.fetch = originalFetch;
-            }
-        });
-        await test('should reject CAR file with wrong root CID (tampering detection)', async () => {
-            const gatewayURL = new URL('https://example.com');
-            // Create a CAR file with content A
-            const originalContent = {
-                encryptedDataCID: 'bafkreih5aznjvttude6c3wbvqeebb6rlx5wkbzyppv7z3aldwdht2oqadq',
-                encryptedSymmetricKey: 'original-encrypted-key',
-                space: 'did:key:z6MkwDK3M4PxU1FqcSt6quBH1xRBSGnPRdQYP9B13h3Wq5X1',
-                kms: {
-                    provider: 'google-kms',
-                    keyId: 'original-key-id',
-                    algorithm: 'RSA-OAEP-2048-SHA256',
-                },
-            };
-            const { actualRootCID: originalCID } = await createTestCar(originalContent);
-            // Create a different CAR file with content B
-            const tamperedContent = {
-                encryptedDataCID: 'bafkreidb6v6sjfnpnf6lqkh7p4w7zfzqfuzn2lqhp5x6zkojfuzwzlhpny',
-                encryptedSymmetricKey: 'tampered-encrypted-key',
-                space: 'did:key:z6MkMaliciousSpaceDIDThatShouldNotBeAccepted',
-                kms: {
-                    provider: 'google-kms',
-                    keyId: 'tampered-key-id',
-                    algorithm: 'RSA-OAEP-2048-SHA256',
-                },
-            };
-            const { car: tamperedCar } = await createTestCar(tamperedContent);
-            // Mock fetch to return the tampered CAR when requesting the original CID
-            const originalFetch = globalThis.fetch;
-            // @ts-ignore - Mock fetch for testing
-            globalThis.fetch = async (url) => ({
-                ok: true,
-                status: 200,
-                statusText: 'OK',
-                arrayBuffer: async () => tamperedCar.buffer, // Return wrong CAR!
-            });
-            try {
-                await getCarFileFromPublicGateway(gatewayURL, originalCID.toString());
-                assert.fail('Should throw error for CID verification failure');
-            }
-            catch (error) {
-                assert(error instanceof Error, 'Should throw an Error');
-                assert(error.message.includes('CID verification failed'), `Should mention CID verification failure. Got: ${error.message}`);
-            }
-            finally {
-                globalThis.fetch = originalFetch;
-            }
-        });
-        await test('should detect when malicious gateway serves completely different CAR', async () => {
-            const gatewayURL = new URL('https://example.com');
-            // CID we're requesting
-            const requestedCID = 'bafkreih5aznjvttude6c3wbvqeebb6rlx5wkbzyppv7z3aldwdht2oqadq';
-            // Create a completely different CAR file
-            const maliciousContent = {
-                encryptedDataCID: 'bafkreig6h5fimhfvj3wmlsf4fzj2d2ndqxd7qnugcgcmkn6dcqzxcq5zdu',
-                encryptedSymmetricKey: 'malicious-encrypted-key',
-                space: 'did:key:z6MkMaliciousSpaceDIDControlledByAttacker',
-                kms: {
-                    provider: 'google-kms',
-                    keyId: 'attacker-controlled-key',
-                    algorithm: 'RSA-OAEP-2048-SHA256',
-                },
-            };
-            const { car: maliciousCar } = await createTestCar(maliciousContent);
-            // Mock fetch to return the malicious CAR
-            const originalFetch = globalThis.fetch;
-            // @ts-ignore - Mock fetch for testing
-            globalThis.fetch = async (url) => ({
-                ok: true,
-                status: 200,
-                statusText: 'OK',
-                arrayBuffer: async () => maliciousCar.buffer,
-            });
-            try {
-                await getCarFileFromPublicGateway(gatewayURL, requestedCID);
-                assert.fail('Should throw error when gateway serves wrong CAR');
-            }
-            catch (error) {
-                assert(error instanceof Error, 'Should throw an Error');
-                assert(error.message.includes('CID verification failed'), `Should mention CID verification failure. Got: ${error.message}`);
-            }
-            finally {
-                globalThis.fetch = originalFetch;
-            }
-        });
-        await test('should handle network errors gracefully', async () => {
-            const gatewayURL = new URL('https://example.com');
-            const testCID = 'bafkreih5aznjvttude6c3wbvqeebb6rlx5wkbzyppv7z3aldwdht2oqadq';
-            // Mock fetch to return network error
-            const originalFetch = globalThis.fetch;
-            // @ts-ignore - Mock fetch for testing
-            globalThis.fetch = async (url) => ({
-                ok: false,
-                status: 500,
-                statusText: 'Internal Server Error',
-                arrayBuffer: async () => {
-                    throw new Error('Network error');
-                },
-            });
-            try {
-                await getCarFileFromPublicGateway(gatewayURL, testCID);
-                assert.fail('Should throw error for network errors');
-            }
-            catch (error) {
-                assert(error instanceof Error, 'Should throw an Error');
-                assert(error.message.includes('Failed to fetch'), `Should mention fetch failure. Got: ${error.message}`);
-            }
-            finally {
-                globalThis.fetch = originalFetch;
-            }
-        });
-    });
-    await describe('Metadata Tampering Detection', async () => {
-        await test('should prevent modification of space DID in metadata', async () => {
-            const gatewayURL = new URL('https://example.com');
-            // Original metadata with legitimate space DID
-            const originalMetadata = {
-                encryptedDataCID: 'bafkreie2hvzhqzj3ixnmjh7h3nkhdyp6qxhqltkq6qxf3wxq7hqxd6nzde',
-                encryptedSymmetricKey: 'encrypted-key-data',
-                space: 'did:key:z6MkwDK3M4PxU1FqcSt6quBH1xRBSGnPRdQYP9B13h3Wq5X1', // Original space
-                kms: {
-                    provider: 'google-kms',
-                    keyId: 'test-key-id',
-                    algorithm: 'RSA-OAEP-2048-SHA256',
-                },
-            };
-            // Tampered metadata with different space DID
-            const tamperedMetadata = {
-                ...originalMetadata,
-                space: 'did:key:z6MkMaliciousSpaceDIDThatShouldNotBeAccepted', // Malicious space!
-            };
-            // Create CAR files for both
-            const { actualRootCID: originalCID } = await createTestCar(originalMetadata);
-            const { car: tamperedCar } = await createTestCar(tamperedMetadata);
-            // Mock fetch to return tampered CAR when requesting original CID
-            const originalFetch = globalThis.fetch;
-            // @ts-ignore - Mock fetch for testing
-            globalThis.fetch = async (url) => ({
-                ok: true,
-                status: 200,
-                statusText: 'OK',
-                arrayBuffer: async () => tamperedCar.buffer, // Returns tampered metadata!
-            });
-            try {
-                await getCarFileFromPublicGateway(gatewayURL, originalCID.toString());
-                assert.fail('Should detect space DID tampering via CID verification');
-            }
-            catch (error) {
-                assert(error instanceof Error, 'Should throw an Error');
-                assert(error.message.includes('CID verification failed'), `Should catch tampering via CID verification. Got: ${error.message}`);
-            }
-            finally {
-                globalThis.fetch = originalFetch;
-            }
-        });
-        await test('should prevent complete metadata substitution attacks', async () => {
-            const gatewayURL = new URL('https://example.com');
-            // Original legitimate metadata
-            const originalMetadata = {
-                encryptedDataCID: 'bafkreih5aznjvttude6c3wbvqeebb6rlx5wkbzyppv7z3aldwdht2oqadq',
-                encryptedSymmetricKey: 'original-encrypted-key',
-                space: 'did:key:z6MkwDK3M4PxU1FqcSt6quBH1xRBSGnPRdQYP9B13h3Wq5X1',
-                kms: {
-                    provider: 'google-kms',
-                    keyId: 'legitimate-key-id',
-                    algorithm: 'RSA-OAEP-2048-SHA256',
-                },
-            };
-            // Completely different malicious metadata (using same CID but different content)
-            const maliciousMetadata = {
-                encryptedDataCID: 'bafkreih5aznjvttude6c3wbvqeebb6rlx5wkbzyppv7z3aldwdht2oqadq',
-                encryptedSymmetricKey: 'malicious-encrypted-key',
-                space: 'did:key:z6MkMaliciousSpaceDIDControlledByAttacker',
-                kms: {
-                    provider: 'google-kms',
-                    keyId: 'attacker-controlled-key',
-                    algorithm: 'RSA-OAEP-2048-SHA256',
-                },
-            };
-            // Create CAR files for both
-            const { actualRootCID: originalCID } = await createTestCar(originalMetadata);
-            const { car: maliciousCar } = await createTestCar(maliciousMetadata);
-            // Mock fetch to return completely different metadata
-            const originalFetch = globalThis.fetch;
-            // @ts-ignore - Mock fetch for testing
-            globalThis.fetch = async (url) => ({
-                ok: true,
-                status: 200,
-                statusText: 'OK',
-                arrayBuffer: async () => maliciousCar.buffer, // Complete substitution attack!
-            });
-            try {
-                await getCarFileFromPublicGateway(gatewayURL, originalCID.toString());
-                assert.fail('Should detect complete metadata substitution via CID verification');
-            }
-            catch (error) {
-                assert(error instanceof Error, 'Should throw an Error');
-                assert(error.message.includes('CID verification failed'), `Should catch complete substitution via CID verification. Got: ${error.message}`);
-            }
-            finally {
-                globalThis.fetch = originalFetch;
-            }
-        });
-    });
-});
-//# sourceMappingURL=cid-verification.spec.js.map

package/dist/test/crypto-compatibility.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=crypto-compatibility.spec.d.ts.map

package/dist/test/crypto-compatibility.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto-compatibility.spec.d.ts","sourceRoot":"","sources":["../../test/crypto-compatibility.spec.js"],"names":[],"mappings":""}