@sudp-protocol/authorizer 0.1.0 → 0.1.1

package/README.md

@@ -16,9 +16,10 @@ shapes, and the wrap-key derivation.
 
 ```
 @sudp-protocol/authorizer            ← carrier-agnostic protocol primitives
-  canonicalize, sha256, computeBinding,
+  canonicalize, sha256,
+  computeBinding, computeBatchBinding,
   deriveWrappingKey, wrapBindingAd, sealAd,
-  aeadSeal, aeadOpen, base64url helpers,
+  aeadSeal, aeadOpen, aeadEncrypt, base64url helpers,
   DS_BIND / DS_WRAP / DS_SEAL constants
 
 @sudp-protocol/authorizer/webauthn   ← WebAuthn-specific adapter

package/dist/binding.d.ts

@@ -19,4 +19,18 @@ export declare const DS_BIND: Uint8Array<ArrayBufferLike>;
  * deployment.
  */
 export declare function computeBinding(domain: Uint8Array, r: Uint8Array, op: unknown): Promise<Uint8Array>;
+/**
+ * Batch counterpart of {@link computeBinding}:
+ *
+ *     β = SHA-256(domain ‖ r ‖ SHA-256(canonical(ops)))
+ *
+ * where `ops` is a JSON array of operations. Byte-aligned with the Rust
+ * crate's `compute_beta_from_canonical(domain, r, &BatchOperations(ops).canonical_bytes())`.
+ *
+ * Semantically identical to `computeBinding(domain, r, ops)` because the
+ * canonical encoder treats arrays uniformly, but named separately so the
+ * "batch" intent is explicit at the call site (and so a single conformance
+ * vector pins the batch shape independently).
+ */
+export declare function computeBatchBinding(domain: Uint8Array, r: Uint8Array, ops: readonly unknown[]): Promise<Uint8Array>;
 //# sourceMappingURL=binding.d.ts.map

package/dist/binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../src/binding.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,eAAO,MAAM,OAAO,6BAAuB,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,UAAU,EAClB,CAAC,EAAE,UAAU,EACb,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,UAAU,CAAC,CAGrB"}
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../src/binding.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,eAAO,MAAM,OAAO,6BAAuB,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,UAAU,EAClB,CAAC,EAAE,UAAU,EACb,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,UAAU,CAAC,CAGrB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,UAAU,EAClB,CAAC,EAAE,UAAU,EACb,GAAG,EAAE,SAAS,OAAO,EAAE,GACtB,OAAO,CAAC,UAAU,CAAC,CAErB"}

package/dist/binding.js

@@ -25,4 +25,20 @@ export async function computeBinding(domain, r, op) {
     const opHash = await sha256(canonicalize(op));
     return sha256(concatBytes(domain, r, opHash));
 }
+/**
+ * Batch counterpart of {@link computeBinding}:
+ *
+ *     β = SHA-256(domain ‖ r ‖ SHA-256(canonical(ops)))
+ *
+ * where `ops` is a JSON array of operations. Byte-aligned with the Rust
+ * crate's `compute_beta_from_canonical(domain, r, &BatchOperations(ops).canonical_bytes())`.
+ *
+ * Semantically identical to `computeBinding(domain, r, ops)` because the
+ * canonical encoder treats arrays uniformly, but named separately so the
+ * "batch" intent is explicit at the call site (and so a single conformance
+ * vector pins the batch shape independently).
+ */
+export async function computeBatchBinding(domain, r, ops) {
+    return computeBinding(domain, r, ops);
+}
 //# sourceMappingURL=binding.js.map

package/dist/binding.js.map

@@ -1 +1 @@
-{"version":3,"file":"binding.js","sourceRoot":"","sources":["../src/binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAkB,EAClB,CAAa,EACb,EAAW;IAEX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../src/binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAkB,EAClB,CAAa,EACb,EAAW;IAEX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAkB,EAClB,CAAa,EACb,GAAuB;IAEvB,OAAO,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC"}

package/dist/index.d.ts

@@ -13,7 +13,7 @@
 export { utf8, concatBytes, u16beBytes, bytesToB64Url, b64UrlToBytes, } from "./bytes.js";
 export { canonicalize } from "./canonical.js";
 export { sha256 } from "./hash.js";
-export { computeBinding, DS_BIND } from "./binding.js";
+export { computeBatchBinding, computeBinding, DS_BIND } from "./binding.js";
 export { deriveWrappingKey } from "./kdf.js";
 export { wrapBindingAd, sealAd, DS_WRAP, DS_SEAL, WRAP_VERSION } from "./aad.js";
 export { aeadEncrypt, aeadSeal, aeadOpen } from "./aead.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,IAAI,EACJ,WAAW,EACX,UAAU,EACV,aAAa,EACb,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,IAAI,EACJ,WAAW,EACX,UAAU,EACV,aAAa,EACb,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -13,7 +13,7 @@
 export { utf8, concatBytes, u16beBytes, bytesToB64Url, b64UrlToBytes, } from "./bytes.js";
 export { canonicalize } from "./canonical.js";
 export { sha256 } from "./hash.js";
-export { computeBinding, DS_BIND } from "./binding.js";
+export { computeBatchBinding, computeBinding, DS_BIND } from "./binding.js";
 export { deriveWrappingKey } from "./kdf.js";
 export { wrapBindingAd, sealAd, DS_WRAP, DS_SEAL, WRAP_VERSION } from "./aad.js";
 export { aeadEncrypt, aeadSeal, aeadOpen } from "./aead.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,IAAI,EACJ,WAAW,EACX,UAAU,EACV,aAAa,EACb,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,IAAI,EACJ,WAAW,EACX,UAAU,EACV,aAAa,EACb,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sudp-protocol/authorizer",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Authorizer-side primitives for SUDP (Secret-Use Delegation Protocol): canonical JSON, β computation, wrapping-key derivation, AEAD-as-wrap, plus a WebAuthn adapter under the ./webauthn subpath.",
   "license": "Apache-2.0",
   "author": "Miracle <xhyumiracle@gmail.com>",

package/src/binding.ts

@@ -31,3 +31,24 @@ export async function computeBinding(
   const opHash = await sha256(canonicalize(op));
   return sha256(concatBytes(domain, r, opHash));
 }
+
+/**
+ * Batch counterpart of {@link computeBinding}:
+ *
+ *     β = SHA-256(domain ‖ r ‖ SHA-256(canonical(ops)))
+ *
+ * where `ops` is a JSON array of operations. Byte-aligned with the Rust
+ * crate's `compute_beta_from_canonical(domain, r, &BatchOperations(ops).canonical_bytes())`.
+ *
+ * Semantically identical to `computeBinding(domain, r, ops)` because the
+ * canonical encoder treats arrays uniformly, but named separately so the
+ * "batch" intent is explicit at the call site (and so a single conformance
+ * vector pins the batch shape independently).
+ */
+export async function computeBatchBinding(
+  domain: Uint8Array,
+  r: Uint8Array,
+  ops: readonly unknown[],
+): Promise<Uint8Array> {
+  return computeBinding(domain, r, ops);
+}

package/src/index.ts

@@ -21,7 +21,7 @@ export {
 
 export { canonicalize } from "./canonical.js";
 export { sha256 } from "./hash.js";
-export { computeBinding, DS_BIND } from "./binding.js";
+export { computeBatchBinding, computeBinding, DS_BIND } from "./binding.js";
 export { deriveWrappingKey } from "./kdf.js";
 export { wrapBindingAd, sealAd, DS_WRAP, DS_SEAL, WRAP_VERSION } from "./aad.js";
 export { aeadEncrypt, aeadSeal, aeadOpen } from "./aead.js";