@suveren/gateway 0.40.0 → 0.41.1

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/native.d.ts

@@ -0,0 +1,236 @@
+import { HkdfSha256Native, HkdfSha384Native, HkdfSha512Native } from "@hpke/common";
+import { CipherSuiteNative } from "./cipherSuiteNative.js";
+import { DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native } from "./kems/dhkemNative.js";
+/**
+ * The Hybrid Public Key Encryption (HPKE) ciphersuite,
+ * which is implemented using only
+ * {@link https://www.w3.org/TR/WebCryptoAPI/ | Web Cryptography API}.
+ *
+ * This class is the same as
+ * {@link https://jsr.io/@hpke/core/doc/~/CipherSuiteNative | @hpke/core#CipherSuiteNative} as follows:
+ * which supports only the ciphersuites that can be implemented on the native
+ * {@link https://www.w3.org/TR/WebCryptoAPI/ | Web Cryptography API}.
+ * Therefore, the following cryptographic algorithms are not supported for now:
+ * - `DHKEM(X448, HKDF-SHA512)`
+ * - `ChaCha20Poly1305`
+ *
+ * In addtion, the HKDF functions contained in this `CipherSuiteNative`
+ * class can only derive keys of the same length as the `hashSize`.
+ *
+ * If you want to use the unsupported cryptographic algorithms
+ * above or derive keys longer than the `hashSize`,
+ * please use {@link https://jsr.io/@hpke/hpke-js/doc/~/CipherSuite | hpke-js#CipherSuite}.
+ *
+ * This class provides following functions:
+ *
+ * - Creates encryption contexts both for senders and recipients.
+ *     - {@link createSenderContext}
+ *     - {@link createRecipientContext}
+ * - Provides single-shot encryption API.
+ *     - {@link seal}
+ *     - {@link open}
+ *
+ * The calling of the constructor of this class is the starting
+ * point for HPKE operations for both senders and recipients.
+ *
+ * @example Use only ciphersuites supported by Web Cryptography API.
+ *
+ * ```ts
+ * import {
+ *   Aes128Gcm,
+ *   DhkemP256HkdfSha256,
+ *   HkdfSha256,
+ *   CipherSuite,
+ * } from "@hpke/core";
+ *
+ * const suite = new CipherSuite({
+ *   kem: new DhkemP256HkdfSha256(),
+ *   kdf: new HkdfSha256(),
+ *   aead: new Aes128Gcm(),
+ * });
+ * ```
+ *
+ * @example Use DHKEM(X25519, HKDF-SHA256).
+ *
+ * ```ts
+ * import {
+ *   Aes128Gcm,
+ *   CipherSuite,
+ *   DhkemX25519HkdfSha256,
+ *   HkdfSha256,
+ * } from "@hpke/core";
+ * const suite = new CipherSuite({
+ *   kem: new DhkemX25519HkdfSha256(),
+ *   kdf: new HkdfSha256(),
+ *   aead: new Aes128Gcm(),
+ * });
+ * ```
+ */
+export declare class CipherSuite extends CipherSuiteNative {
+}
+/**
+ * The DHKEM(P-256, HKDF-SHA256) for HPKE KEM implementing {@link KemInterface}.
+ *
+ * When using `@hpke/core`, the instance of this class must be specified
+ * to the `kem` parameter of {@link CipherSuiteParams} instead of `KemId.DhkemP256HkdfSha256`
+ * as follows:
+ *
+ * @example
+ *
+ * ```ts
+ * import {
+ *   Aes128Gcm,
+ *   CipherSuite,
+ *   DhkemP256HkdfSha256,
+ *   HkdfSha256,
+ * } from "@hpke/core";
+ *
+ * const suite = new CipherSuite({
+ *   kem: new DhkemP256HkdfSha256(),
+ *   kdf: new HkdfSha256(),
+ *   aead: new Aes128Gcm(),
+ * });
+ * ```
+ */
+export declare class DhkemP256HkdfSha256 extends DhkemP256HkdfSha256Native {
+}
+/**
+ * The DHKEM(P-384, HKDF-SHA384) for HPKE KEM implementing {@link KemInterface}.
+ *
+ * When using `@hpke/core`, the instance of this class must be specified
+ * to the `kem` parameter of {@link CipherSuiteParams} instead of `KemId.DhkemP384HkdfSha384`
+ * as follows:
+ *
+ * @example
+ *
+ * ```ts
+ * import {
+ *   Aes128Gcm,
+ *   CipherSuite,
+ *   DhkemP384HkdfSha384,
+ *   HkdfSha384,
+ * } from "@hpke/core";
+ *
+ * const suite = new CipherSuite({
+ *   kem: new DhkemP384HkdfSha384(),
+ *   kdf: new HkdfSha384(),
+ *   aead: new Aes128Gcm(),
+ * });
+ * ```
+ */
+export declare class DhkemP384HkdfSha384 extends DhkemP384HkdfSha384Native {
+}
+/**
+ * The DHKEM(P-521, HKDF-SHA512) for HPKE KEM implementing {@link KemInterface}.
+ *
+ * When using `@hpke/core`, the instance of this class must be specified
+ * to the `kem` parameter of {@link CipherSuiteParams} instead of `KemId.DhkemP521HkdfSha512`
+ * as follows:
+ *
+ * @example
+ *
+ * ```ts
+ * import {
+ *   Aes256Gcm,
+ *   CipherSuite,
+ *   DhkemP521HkdfSha512,
+ *   HkdfSha512,
+ * } from "@hpke/core";
+ *
+ * const suite = new CipherSuite({
+ *   kem: new DhkemP521HkdfSha512(),
+ *   kdf: new HkdfSha512(),
+ *   aead: new Aes256Gcm(),
+ * });
+ * ```
+ */
+export declare class DhkemP521HkdfSha512 extends DhkemP521HkdfSha512Native {
+}
+/**
+ * The HKDF-SHA256 for HPKE KDF implementing {@link KdfInterface}.
+ *
+ * When using `@hpke/core`, the instance of this class must be specified
+ * to the `kem` parameter of {@link CipherSuiteParams} instead of `KdfId.HkdfSha256`.
+ *
+ * The KDF class can only derive keys of the same length as the `hashSize`.
+ * If you want to derive keys longer than the `hashSize`,
+ * please use {@link https://jsr.io/@hpke/hpke-js/doc/~/CipherSuite | hpke-js#CipherSuite}.
+ *
+ * @example
+ *
+ * ```ts
+ * import {
+ *   Aes128Gcm,
+ *   CipherSuite,
+ *   DhkemP256HkdfSha256,
+ *   HkdfSha256,
+ * } from "@hpke/core";
+ *
+ * const suite = new CipherSuite({
+ *   kem: new DhkemP256HkdfSha256(),
+ *   kdf: new HkdfSha256(),
+ *   aead: new Aes128Gcm(),
+ * });
+ * ```
+ */
+export declare class HkdfSha256 extends HkdfSha256Native {
+}
+/**
+ * The HKDF-SHA384 for HPKE KDF implementing {@link KdfInterface}.
+ *
+ * When using `@hpke/core`, the instance of this class must be specified
+ * to the `kem` parameter of {@link CipherSuiteParams} instead of `KdfId.HkdfSha384`.
+ *
+ * The KDF class can only derive keys of the same length as the `hashSize`.
+ * If you want to derive keys longer than the `hashSize`,
+ * please use {@link https://jsr.io/@hpke/hpke-js/doc/~/CipherSuite | hpke-js#CipherSuite}.
+ *
+ * @example
+ *
+ * ```ts
+ * import {
+ *   Aes128Gcm,
+ *   CipherSuite,
+ *   DhkemP384HkdfSha384,
+ *   HkdfSha384,
+ * } from "@hpke/core";
+ *
+ * const suite = new CipherSuite({
+ *   kem: new DhkemP384HkdfSha384(),
+ *   kdf: new HkdfSha384(),
+ *   aead: new Aes128Gcm(),
+ * });
+ * ```
+ */
+export declare class HkdfSha384 extends HkdfSha384Native {
+}
+/**
+ * The HKDF-SHA512 for HPKE KDF implementing {@link KdfInterface}.
+ *
+ * When using `@hpke/core`, the instance of this class must be specified
+ * to the `kem` parameter of {@link CipherSuiteParams} instead of `KdfId.HkdfSha512`.
+ *
+ * The KDF class can only derive keys of the same length as the `hashSize`.
+ * If you want to derive keys longer than the `hashSize`,
+ * please use {@link https://jsr.io/@hpke/hpke-js/doc/~/CipherSuite | hpke-js#CipherSuite}.
+ *
+ * @example
+ *
+ * ```ts
+ * import {
+ *   Aes256Gcm,
+ *   CipherSuite,
+ *   DhkemP521HkdfSha512,
+ *   HkdfSha512,
+ * } from "@hpke/core";
+ *
+ * const suite = new CipherSuite({
+ *   kem: new DhkemP521HkdfSha512(),
+ *   kdf: new HkdfSha512(),
+ *   aead: new Aes256Gcm(),
+ * });
+ * ```
+ */
+export declare class HkdfSha512 extends HkdfSha512Native {
+}
+//# sourceMappingURL=native.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../../src/src/native.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EAC1B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,qBAAa,WAAY,SAAQ,iBAAiB;CAAG;AAErD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,mBAAoB,SAAQ,yBAAyB;CAAG;AAErE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,mBAAoB,SAAQ,yBAAyB;CAAG;AAErE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,mBAAoB,SAAQ,yBAAyB;CAAG;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,UAAW,SAAQ,gBAAgB;CAAG;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,UAAW,SAAQ,gBAAgB;CAAG;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,UAAW,SAAQ,gBAAgB;CAAG"}

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/native.js

@@ -0,0 +1,255 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "@hpke/common", "./cipherSuiteNative.js", "./kems/dhkemNative.js"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.HkdfSha512 = exports.HkdfSha384 = exports.HkdfSha256 = exports.DhkemP521HkdfSha512 = exports.DhkemP384HkdfSha384 = exports.DhkemP256HkdfSha256 = exports.CipherSuite = void 0;
+    const common_1 = require("@hpke/common");
+    const cipherSuiteNative_js_1 = require("./cipherSuiteNative.js");
+    const dhkemNative_js_1 = require("./kems/dhkemNative.js");
+    /**
+     * The Hybrid Public Key Encryption (HPKE) ciphersuite,
+     * which is implemented using only
+     * {@link https://www.w3.org/TR/WebCryptoAPI/ | Web Cryptography API}.
+     *
+     * This class is the same as
+     * {@link https://jsr.io/@hpke/core/doc/~/CipherSuiteNative | @hpke/core#CipherSuiteNative} as follows:
+     * which supports only the ciphersuites that can be implemented on the native
+     * {@link https://www.w3.org/TR/WebCryptoAPI/ | Web Cryptography API}.
+     * Therefore, the following cryptographic algorithms are not supported for now:
+     * - `DHKEM(X448, HKDF-SHA512)`
+     * - `ChaCha20Poly1305`
+     *
+     * In addtion, the HKDF functions contained in this `CipherSuiteNative`
+     * class can only derive keys of the same length as the `hashSize`.
+     *
+     * If you want to use the unsupported cryptographic algorithms
+     * above or derive keys longer than the `hashSize`,
+     * please use {@link https://jsr.io/@hpke/hpke-js/doc/~/CipherSuite | hpke-js#CipherSuite}.
+     *
+     * This class provides following functions:
+     *
+     * - Creates encryption contexts both for senders and recipients.
+     *     - {@link createSenderContext}
+     *     - {@link createRecipientContext}
+     * - Provides single-shot encryption API.
+     *     - {@link seal}
+     *     - {@link open}
+     *
+     * The calling of the constructor of this class is the starting
+     * point for HPKE operations for both senders and recipients.
+     *
+     * @example Use only ciphersuites supported by Web Cryptography API.
+     *
+     * ```ts
+     * import {
+     *   Aes128Gcm,
+     *   DhkemP256HkdfSha256,
+     *   HkdfSha256,
+     *   CipherSuite,
+     * } from "@hpke/core";
+     *
+     * const suite = new CipherSuite({
+     *   kem: new DhkemP256HkdfSha256(),
+     *   kdf: new HkdfSha256(),
+     *   aead: new Aes128Gcm(),
+     * });
+     * ```
+     *
+     * @example Use DHKEM(X25519, HKDF-SHA256).
+     *
+     * ```ts
+     * import {
+     *   Aes128Gcm,
+     *   CipherSuite,
+     *   DhkemX25519HkdfSha256,
+     *   HkdfSha256,
+     * } from "@hpke/core";
+     * const suite = new CipherSuite({
+     *   kem: new DhkemX25519HkdfSha256(),
+     *   kdf: new HkdfSha256(),
+     *   aead: new Aes128Gcm(),
+     * });
+     * ```
+     */
+    class CipherSuite extends cipherSuiteNative_js_1.CipherSuiteNative {
+    }
+    exports.CipherSuite = CipherSuite;
+    /**
+     * The DHKEM(P-256, HKDF-SHA256) for HPKE KEM implementing {@link KemInterface}.
+     *
+     * When using `@hpke/core`, the instance of this class must be specified
+     * to the `kem` parameter of {@link CipherSuiteParams} instead of `KemId.DhkemP256HkdfSha256`
+     * as follows:
+     *
+     * @example
+     *
+     * ```ts
+     * import {
+     *   Aes128Gcm,
+     *   CipherSuite,
+     *   DhkemP256HkdfSha256,
+     *   HkdfSha256,
+     * } from "@hpke/core";
+     *
+     * const suite = new CipherSuite({
+     *   kem: new DhkemP256HkdfSha256(),
+     *   kdf: new HkdfSha256(),
+     *   aead: new Aes128Gcm(),
+     * });
+     * ```
+     */
+    class DhkemP256HkdfSha256 extends dhkemNative_js_1.DhkemP256HkdfSha256Native {
+    }
+    exports.DhkemP256HkdfSha256 = DhkemP256HkdfSha256;
+    /**
+     * The DHKEM(P-384, HKDF-SHA384) for HPKE KEM implementing {@link KemInterface}.
+     *
+     * When using `@hpke/core`, the instance of this class must be specified
+     * to the `kem` parameter of {@link CipherSuiteParams} instead of `KemId.DhkemP384HkdfSha384`
+     * as follows:
+     *
+     * @example
+     *
+     * ```ts
+     * import {
+     *   Aes128Gcm,
+     *   CipherSuite,
+     *   DhkemP384HkdfSha384,
+     *   HkdfSha384,
+     * } from "@hpke/core";
+     *
+     * const suite = new CipherSuite({
+     *   kem: new DhkemP384HkdfSha384(),
+     *   kdf: new HkdfSha384(),
+     *   aead: new Aes128Gcm(),
+     * });
+     * ```
+     */
+    class DhkemP384HkdfSha384 extends dhkemNative_js_1.DhkemP384HkdfSha384Native {
+    }
+    exports.DhkemP384HkdfSha384 = DhkemP384HkdfSha384;
+    /**
+     * The DHKEM(P-521, HKDF-SHA512) for HPKE KEM implementing {@link KemInterface}.
+     *
+     * When using `@hpke/core`, the instance of this class must be specified
+     * to the `kem` parameter of {@link CipherSuiteParams} instead of `KemId.DhkemP521HkdfSha512`
+     * as follows:
+     *
+     * @example
+     *
+     * ```ts
+     * import {
+     *   Aes256Gcm,
+     *   CipherSuite,
+     *   DhkemP521HkdfSha512,
+     *   HkdfSha512,
+     * } from "@hpke/core";
+     *
+     * const suite = new CipherSuite({
+     *   kem: new DhkemP521HkdfSha512(),
+     *   kdf: new HkdfSha512(),
+     *   aead: new Aes256Gcm(),
+     * });
+     * ```
+     */
+    class DhkemP521HkdfSha512 extends dhkemNative_js_1.DhkemP521HkdfSha512Native {
+    }
+    exports.DhkemP521HkdfSha512 = DhkemP521HkdfSha512;
+    /**
+     * The HKDF-SHA256 for HPKE KDF implementing {@link KdfInterface}.
+     *
+     * When using `@hpke/core`, the instance of this class must be specified
+     * to the `kem` parameter of {@link CipherSuiteParams} instead of `KdfId.HkdfSha256`.
+     *
+     * The KDF class can only derive keys of the same length as the `hashSize`.
+     * If you want to derive keys longer than the `hashSize`,
+     * please use {@link https://jsr.io/@hpke/hpke-js/doc/~/CipherSuite | hpke-js#CipherSuite}.
+     *
+     * @example
+     *
+     * ```ts
+     * import {
+     *   Aes128Gcm,
+     *   CipherSuite,
+     *   DhkemP256HkdfSha256,
+     *   HkdfSha256,
+     * } from "@hpke/core";
+     *
+     * const suite = new CipherSuite({
+     *   kem: new DhkemP256HkdfSha256(),
+     *   kdf: new HkdfSha256(),
+     *   aead: new Aes128Gcm(),
+     * });
+     * ```
+     */
+    class HkdfSha256 extends common_1.HkdfSha256Native {
+    }
+    exports.HkdfSha256 = HkdfSha256;
+    /**
+     * The HKDF-SHA384 for HPKE KDF implementing {@link KdfInterface}.
+     *
+     * When using `@hpke/core`, the instance of this class must be specified
+     * to the `kem` parameter of {@link CipherSuiteParams} instead of `KdfId.HkdfSha384`.
+     *
+     * The KDF class can only derive keys of the same length as the `hashSize`.
+     * If you want to derive keys longer than the `hashSize`,
+     * please use {@link https://jsr.io/@hpke/hpke-js/doc/~/CipherSuite | hpke-js#CipherSuite}.
+     *
+     * @example
+     *
+     * ```ts
+     * import {
+     *   Aes128Gcm,
+     *   CipherSuite,
+     *   DhkemP384HkdfSha384,
+     *   HkdfSha384,
+     * } from "@hpke/core";
+     *
+     * const suite = new CipherSuite({
+     *   kem: new DhkemP384HkdfSha384(),
+     *   kdf: new HkdfSha384(),
+     *   aead: new Aes128Gcm(),
+     * });
+     * ```
+     */
+    class HkdfSha384 extends common_1.HkdfSha384Native {
+    }
+    exports.HkdfSha384 = HkdfSha384;
+    /**
+     * The HKDF-SHA512 for HPKE KDF implementing {@link KdfInterface}.
+     *
+     * When using `@hpke/core`, the instance of this class must be specified
+     * to the `kem` parameter of {@link CipherSuiteParams} instead of `KdfId.HkdfSha512`.
+     *
+     * The KDF class can only derive keys of the same length as the `hashSize`.
+     * If you want to derive keys longer than the `hashSize`,
+     * please use {@link https://jsr.io/@hpke/hpke-js/doc/~/CipherSuite | hpke-js#CipherSuite}.
+     *
+     * @example
+     *
+     * ```ts
+     * import {
+     *   Aes256Gcm,
+     *   CipherSuite,
+     *   DhkemP521HkdfSha512,
+     *   HkdfSha512,
+     * } from "@hpke/core";
+     *
+     * const suite = new CipherSuite({
+     *   kem: new DhkemP521HkdfSha512(),
+     *   kdf: new HkdfSha512(),
+     *   aead: new Aes256Gcm(),
+     * });
+     * ```
+     */
+    class HkdfSha512 extends common_1.HkdfSha512Native {
+    }
+    exports.HkdfSha512 = HkdfSha512;
+});

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/recipientContext.d.ts

@@ -0,0 +1,6 @@
+import { EncryptionContextImpl } from "./encryptionContext.js";
+export declare class RecipientContextImpl extends EncryptionContextImpl {
+    #private;
+    open(data: ArrayBufferLike | ArrayBufferView, aad?: ArrayBufferLike | ArrayBufferView): Promise<ArrayBuffer>;
+}
+//# sourceMappingURL=recipientContext.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/recipientContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipientContext.d.ts","sourceRoot":"","sources":["../../src/src/recipientContext.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,qBAAa,oBAAqB,SAAQ,qBAAqB;;IAG9C,IAAI,CACjB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,GAAE,eAAe,GAAG,eAA6C,GACnE,OAAO,CAAC,WAAW,CAAC;CAkBxB"}

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/recipientContext.js

@@ -0,0 +1,52 @@
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "@hpke/common", "./encryptionContext.js", "./mutex.js"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    var _RecipientContextImpl_mutex;
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.RecipientContextImpl = void 0;
+    const common_1 = require("@hpke/common");
+    const encryptionContext_js_1 = require("./encryptionContext.js");
+    const mutex_js_1 = require("./mutex.js");
+    class RecipientContextImpl extends encryptionContext_js_1.EncryptionContextImpl {
+        constructor() {
+            super(...arguments);
+            _RecipientContextImpl_mutex.set(this, void 0);
+        }
+        async open(data, aad = common_1.EMPTY.buffer) {
+            __classPrivateFieldSet(this, _RecipientContextImpl_mutex, __classPrivateFieldGet(this, _RecipientContextImpl_mutex, "f") ?? new mutex_js_1.Mutex(), "f");
+            const release = await __classPrivateFieldGet(this, _RecipientContextImpl_mutex, "f").lock();
+            let pt;
+            try {
+                pt = await this._ctx.key.open(this.computeNonce(this._ctx), (0, common_1.toArrayBuffer)(data), (0, common_1.toArrayBuffer)(aad));
+            }
+            catch (e) {
+                throw new common_1.OpenError(e);
+            }
+            finally {
+                release();
+            }
+            this.incrementSeq(this._ctx);
+            return pt;
+        }
+    }
+    exports.RecipientContextImpl = RecipientContextImpl;
+    _RecipientContextImpl_mutex = new WeakMap();
+});

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/senderContext.d.ts

@@ -0,0 +1,11 @@
+import type { KdfInterface } from "@hpke/common";
+import type { AeadParams } from "./interfaces/aeadParams.js";
+import type { Encapsulator } from "./interfaces/encapsulator.js";
+import { EncryptionContextImpl } from "./encryptionContext.js";
+export declare class SenderContextImpl extends EncryptionContextImpl implements Encapsulator {
+    #private;
+    readonly enc: ArrayBuffer;
+    constructor(api: SubtleCrypto, kdf: KdfInterface, params: AeadParams, enc: ArrayBuffer);
+    seal(data: ArrayBufferLike | ArrayBufferView, aad?: ArrayBufferLike | ArrayBufferView): Promise<ArrayBuffer>;
+}
+//# sourceMappingURL=senderContext.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/senderContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"senderContext.d.ts","sourceRoot":"","sources":["../../src/src/senderContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,qBAAa,iBAAkB,SAAQ,qBACrC,YAAW,YAAY;;IACvB,SAAgB,GAAG,EAAE,WAAW,CAAC;gBAI/B,GAAG,EAAE,YAAY,EACjB,GAAG,EAAE,YAAY,EACjB,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,WAAW;IAMH,IAAI,CACjB,IAAI,EAAE,eAAe,GAAG,eAAe,EACvC,GAAG,GAAE,eAAe,GAAG,eAA6C,GACnE,OAAO,CAAC,WAAW,CAAC;CAkBxB"}

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/senderContext.js

@@ -0,0 +1,59 @@
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "@hpke/common", "./encryptionContext.js", "./mutex.js"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    var _SenderContextImpl_mutex;
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.SenderContextImpl = void 0;
+    const common_1 = require("@hpke/common");
+    const encryptionContext_js_1 = require("./encryptionContext.js");
+    const mutex_js_1 = require("./mutex.js");
+    class SenderContextImpl extends encryptionContext_js_1.EncryptionContextImpl {
+        constructor(api, kdf, params, enc) {
+            super(api, kdf, params);
+            Object.defineProperty(this, "enc", {
+                enumerable: true,
+                configurable: true,
+                writable: true,
+                value: void 0
+            });
+            _SenderContextImpl_mutex.set(this, void 0);
+            this.enc = enc;
+        }
+        async seal(data, aad = common_1.EMPTY.buffer) {
+            __classPrivateFieldSet(this, _SenderContextImpl_mutex, __classPrivateFieldGet(this, _SenderContextImpl_mutex, "f") ?? new mutex_js_1.Mutex(), "f");
+            const release = await __classPrivateFieldGet(this, _SenderContextImpl_mutex, "f").lock();
+            let ct;
+            try {
+                ct = await this._ctx.key.seal(this.computeNonce(this._ctx), (0, common_1.toArrayBuffer)(data), (0, common_1.toArrayBuffer)(aad));
+            }
+            catch (e) {
+                throw new common_1.SealError(e);
+            }
+            finally {
+                release();
+            }
+            this.incrementSeq(this._ctx);
+            return ct;
+        }
+    }
+    exports.SenderContextImpl = SenderContextImpl;
+    _SenderContextImpl_mutex = new WeakMap();
+});

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/utils/emitNotSupported.d.ts

@@ -0,0 +1,2 @@
+export declare function emitNotSupported<T>(): Promise<T>;
+//# sourceMappingURL=emitNotSupported.d.ts.map

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/utils/emitNotSupported.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitNotSupported.d.ts","sourceRoot":"","sources":["../../../src/src/utils/emitNotSupported.ts"],"names":[],"mappings":"AAEA,wBAAgB,gBAAgB,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAIhD"}

package/node_modules/@hap/core/node_modules/@hpke/core/script/src/utils/emitNotSupported.js

@@ -0,0 +1,19 @@
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "@hpke/common"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.emitNotSupported = emitNotSupported;
+    const common_1 = require("@hpke/common");
+    function emitNotSupported() {
+        return new Promise((_resolve, reject) => {
+            reject(new common_1.NotSupportedError("Not supported"));
+        });
+    }
+});

package/node_modules/@hap/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@humanagencyp/hap-core",
-  "version": "0.12.1",
+  "version": "0.13.0",
   "description": "Core types, cryptographic primitives, and verification logic for the Human Agency Protocol",
   "license": "MIT",
   "repository": {
@@ -33,6 +33,7 @@
     "release:major": "pnpm version major && git push --follow-tags"
   },
   "dependencies": {
+    "@hpke/core": "1.9.0",
     "@noble/ed25519": "^2.1.0"
   },
   "devDependencies": {