@swal/edge-mesh 0.0.0-stage → 0.1.0

package/dist/web/pairing.d.ts

@@ -0,0 +1,186 @@
+import { type TrustRoot } from "./admission.js";
+import type { Device, VaultClient } from "./types.js";
+export declare const PAIR_TTL_MS: number;
+/**
+ * QR payload v4. Wire form = base64url(JSON array [4, mid, appId, topic, hostPub, hostId, pairSecret, exp, root]);
+ * ~300 raw bytes (an ML-DSA-65 key and signature, ~7 KB in base64url, would not fit a scannable QR).
+ * `hostPub`: host ephemeral ECDH P-256 key (raw, 65B). `hostId`: deviceId (= fingerprint of the ML-DSA-65 identity
+ * key) of the host; the host proves that identity inside the SAS-authenticated session (`GrantBody.hostProof`, a
+ * signature over the transcript). `root`: deviceId of the mesh owner (S6). The QR itself is the out-of-band channel.
+ */
+export interface PairPayload {
+    v: 4;
+    mid: string;
+    root: string;
+    appId: string;
+    topic: string;
+    hostPub: string;
+    hostId: string;
+    pairSecret: string;
+    exp: number;
+}
+export interface GrantBody {
+    meshKey: string;
+    epoch: number;
+    mid: string;
+    hostDevice?: Device;
+    /** The host's ML-DSA-65 identity key and its signature over the pairing transcript (`hostProofBytes`). */
+    hostProof?: {
+        pub: string;
+        sig: string;
+    };
+    /** Trust anchor the guest pins (the mesh owner), sent over the SAS-authenticated session. */
+    root?: TrustRoot;
+    /**
+     * Security documents for the guest (round 5): its own grant, the issuer's grant chain up to (excluding) the root, the
+     * key-agreement records of the host and the owner, and the rotation that produced `meshKey` when known. Everything
+     * else arrives over the trust channel once the guest is in.
+     */
+    docs?: unknown[];
+    /** id of the rotation that produced `meshKey` (B4: same-epoch rotations are resolved by id) */
+    rotId?: string;
+    /** Application data attached by the host for this guest (MeshOptions pairHost({ extra })). */
+    extra?: unknown;
+}
+export declare function encodePairPayload(p: PairPayload): string;
+export declare function decodePairPayload(s: string): PairPayload;
+export declare function derivePairKey(pairSecret: Uint8Array): Promise<CryptoKey>;
+export interface PairOfferState {
+    payload: PairPayload;
+    encoded: string;
+    pairSecret: Uint8Array;
+    hostKeys: CryptoKeyPair;
+}
+export declare function createPairOffer(vault: VaultClient, o: {
+    mid: string;
+    root: string;
+    appId: string;
+    topic: string;
+    now: number;
+    ttlMs?: number;
+}): Promise<PairOfferState>;
+/** What the host signs with its identity key: the transcript, its id and key (inside the encrypted grant). */
+export declare const hostProofBytes: (transcript: Uint8Array, hostId: string, pub: string) => Uint8Array<ArrayBufferLike>;
+/** Guest-side check of the host's identity proof: hostId (from the QR) = fingerprint(pub) and a valid ML-DSA-65 signature. */
+export declare function verifyHostProof(p: PairPayload, transcript: Uint8Array, proof: unknown): Promise<boolean>;
+/**
+ * Pairing transcript hash: binds the SAS and the session key to BOTH ephemeral ECDH keys, the guest's ephemeral
+ * ML-KEM-768 encapsulation key and the host's ciphertext to it, BOTH nonces (host: pairSecret from the QR; guest:
+ * fresh `n` in its hello), the host identity (its id) and the mesh/app/topic.
+ */
+export declare function pairTranscript(p: PairPayload, guestPub: string, guestNonce: string, guestKem: string, kemCt: string): Promise<Uint8Array>;
+/**
+ * 6-digit Short Authentication String: HKDF(ikm = ML-KEM secret || ECDH secret, salt = transcript hash), 40 bits
+ * mod 10^6. A man in the middle must replace the ECDH key or the KEM ciphertext, which changes the code.
+ */
+export declare function sasCode(shared: Uint8Array, transcript: Uint8Array): Promise<string>;
+/**
+ * What the guest signs with its IDENTITY key inside the ack: proof of possession of the key it asks to be admitted
+ * with, bound to this pairing session (transcript) so it cannot be replayed into another one.
+ */
+export declare const ackSignedBytes: (transcript: Uint8Array, deviceId: string, pub: string, name: string) => Uint8Array<ArrayBufferLike>;
+export interface PairAck {
+    deviceId: string;
+    pub: string;
+    name: string;
+    sig: string;
+}
+/** Host-side check of a guest ack: deviceId = fingerprint(pub) and a valid signature by that key over the transcript. */
+export declare function verifyPairAck(verify: (pub: Uint8Array, data: Uint8Array, sig: Uint8Array) => boolean | Promise<boolean>, transcript: Uint8Array, a: Partial<PairAck>): Promise<string | null>;
+type Msg = 
+/** e: guest ephemeral ECDH key, n: guest nonce, k: guest ephemeral ML-KEM-768 encapsulation key, p: proof */
+{
+    t: "hello";
+    e: string;
+    n: string;
+    k: string;
+    p: string;
+}
+/** c: host's ML-KEM-768 ciphertext to `k` */
+ | {
+    t: "ready";
+    c: string;
+} | {
+    t: "ack";
+    ct: string;
+} | {
+    t: "grant";
+    ct: string;
+} | {
+    t: "abort";
+} | {
+    t: "err";
+    e: string;
+};
+export type PairSend = (m: Msg) => void;
+export interface SasPrompt {
+    code: string;
+    confirm(): void;
+    reject(): void;
+}
+/** Host side. One instance per offer. pairSecret is single-use: burned by the first valid hello. */
+export declare class HostPairing {
+    private offer;
+    private hooks;
+    private burned;
+    private done;
+    private sess;
+    private transcript;
+    private hostOk;
+    private guestDevice;
+    private send;
+    constructor(offer: PairOfferState, hooks: {
+        now(): number;
+        /** identity-signature check (the host vault's verify) for the guest's proof of possession */
+        verify(pub: Uint8Array, data: Uint8Array, sig: Uint8Array): boolean | Promise<boolean>;
+        /** the host's identity proof over the transcript (see `hostProofBytes`) */
+        prove(transcript: Uint8Array): Promise<{
+            pub: string;
+            sig: string;
+        }>;
+        onSas(p: SasPrompt): void;
+        buildGrant(guest: Omit<Device, "addedAt">): Promise<GrantBody>;
+        onPaired(d: Device): void;
+        onFail(reason: string): void;
+    });
+    get expired(): boolean;
+    get finished(): boolean;
+    cancel(): void;
+    handle(msg: Msg, send: PairSend): Promise<void>;
+    private fail;
+    private onHello;
+    private onAck;
+    private tryGrant;
+}
+/** Guest side. */
+export declare class GuestPairing {
+    readonly payload: PairPayload;
+    private vault;
+    private hooks;
+    private sess;
+    private transcript;
+    private ePub;
+    private nonce;
+    private kemPub;
+    private kemSecret;
+    private ecdhSecret;
+    private proof;
+    private sent;
+    private settled;
+    readonly result: Promise<GrantBody>;
+    private resolve;
+    private reject;
+    private active;
+    private constructor();
+    static create(payload: PairPayload, vault: VaultClient, hooks: {
+        name: string;
+        onSas(code: string): Promise<boolean>;
+        now: number;
+    }): Promise<GuestPairing>;
+    /** Called for every new link in the pairing room; says hello over it. */
+    attach(send: PairSend): void;
+    fail(e: Error): void;
+    handle(msg: Msg, send: PairSend): Promise<void>;
+}
+export {};
+//# sourceMappingURL=pairing.d.ts.map

package/dist/web/pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/web/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAU9D,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAYtD,eAAO,MAAM,WAAW,QAAa,CAAC;AAGtC;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC3B,CAAC,EAAE,CAAC,CAAC;IACL,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,SAAS;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0GAA0G;IAC1G,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,6FAA6F;IAC7F,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8FAA8F;IAC9F,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAgBxD;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,WAAW,CAqBxD;AAED,wBAAsB,aAAa,CAClC,UAAU,EAAE,UAAU,GACpB,OAAO,CAAC,SAAS,CAAC,CAEpB;AAMD,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,aAAa,CAAC;CACxB;AAED,wBAAsB,eAAe,CACpC,KAAK,EAAE,WAAW,EAClB,CAAC,EAAE;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,GACC,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,8GAA8G;AAC9G,eAAO,MAAM,cAAc,eACd,UAAU,UACd,MAAM,OACT,MAAM,gCAIV,CAAC;AAEH,8HAA8H;AAC9H,wBAAsB,eAAe,CACpC,CAAC,EAAE,WAAW,EACd,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC,CAclB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CACnC,CAAC,EAAE,WAAW,EACd,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACX,OAAO,CAAC,UAAU,CAAC,CAiBrB;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAC5B,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,UAAU,GACpB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAmBD;;;GAGG;AACH,eAAO,MAAM,cAAc,eACd,UAAU,YACZ,MAAM,OACX,MAAM,QACL,MAAM,gCAUX,CAAC;AAEH,MAAM,WAAW,OAAO;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,yHAAyH;AACzH,wBAAsB,aAAa,CAClC,MAAM,EAAE,CACP,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,KACX,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAC/B,UAAU,EAAE,UAAU,EACtB,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBxB;AASD,KAAK,GAAG;AACP,6GAA6G;AAC3G;IAAE,CAAC,EAAE,OAAO,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5D,6CAA6C;GAC3C;IAAE,CAAC,EAAE,OAAO,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,CAAC,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACxB;IAAE,CAAC,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,CAAC,EAAE,OAAO,CAAA;CAAE,GACd;IAAE,CAAC,EAAE,KAAK,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3B,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;AAExC,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,IAAI,IAAI,CAAC;IAChB,MAAM,IAAI,IAAI,CAAC;CACf;AAKD,oGAAoG;AACpG,qBAAa,WAAW;IAUtB,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,KAAK;IAVd,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAgD;IAC5D,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAwC;IAC3D,OAAO,CAAC,IAAI,CAAyB;IAErC,YACS,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE;QACd,GAAG,IAAI,MAAM,CAAC;QACd,6FAA6F;QAC7F,MAAM,CACL,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,GACb,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,2EAA2E;QAC3E,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACrE,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;QAC1B,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/D,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,EACE;IAEJ,IAAI,OAAO,YAEV;IACD,IAAI,QAAQ,YAEX;IAED,MAAM,SAEL;IAEK,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAYpD;IAED,OAAO,CAAC,IAAI;YAKE,OAAO;YA4DP,KAAK;YAwBL,QAAQ;CA2BtB;AAED,kBAAkB;AAClB,qBAAa,YAAY;IAiBvB,QAAQ,CAAC,OAAO,EAAE,WAAW;IAC7B,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,KAAK;IAlBd,OAAO,CAAC,IAAI,CAAgD;IAC5D,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,IAAI,CAAM;IAClB,OAAO,CAAC,KAAK,CAAM;IACnB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,KAAK,CAAM;IACnB,OAAO,CAAC,IAAI,CAAyB;IACrC,OAAO,CAAC,OAAO,CAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,MAAM,CAAyB;IAEvC,OAAO,eAUN;IAED,OAAa,MAAM,CAClB,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GACzE,OAAO,CAAC,YAAY,CAAC,CA8BvB;IAED,yEAAyE;IACzE,MAAM,CAAC,IAAI,EAAE,QAAQ,QAUpB;IAED,IAAI,CAAC,CAAC,EAAE,KAAK,QAIZ;IAEK,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAgEpD;CACD"}

package/dist/web/pairing.js

@@ -0,0 +1,395 @@
+import { idMatchesPub } from "./admission.js";
+import { hkdf, importAesKey, openUpdate, sealUpdate } from "./crypto.js";
+import { hybridSecret, identityVerify, kemDecapsulate, kemEncapsulate, kemKeygen, } from "./pq.js";
+import { hmac } from "./rooms.js";
+import { b64uDecode, b64uEncode, bs, concat, equalBytes, fromUtf8, randomBytes, utf8, } from "./util.js";
+export const PAIR_TTL_MS = 5 * 60_000;
+const ECDH = { name: "ECDH", namedCurve: "P-256" };
+export function encodePairPayload(p) {
+    return b64uEncode(utf8(JSON.stringify([
+        p.v,
+        p.mid,
+        p.appId,
+        p.topic,
+        p.hostPub,
+        p.hostId,
+        p.pairSecret,
+        p.exp,
+        p.root,
+    ])));
+}
+export function decodePairPayload(s) {
+    let a;
+    try {
+        a = JSON.parse(fromUtf8(b64uDecode(s.trim())));
+    }
+    catch {
+        throw new Error("invalid pairing payload");
+    }
+    if (!Array.isArray(a) || a.length !== 9 || a[0] !== 4)
+        throw new Error("unsupported pairing payload");
+    const [v, mid, appId, topic, hostPub, hostId, pairSecret, exp, root] = a;
+    if (![mid, appId, topic, hostPub, hostId, pairSecret, root].every((x) => typeof x === "string") ||
+        typeof exp !== "number") {
+        throw new Error("malformed pairing payload");
+    }
+    if (b64uDecode(pairSecret).length !== 16)
+        throw new Error("malformed pairing secret");
+    return { v, mid, root, appId, topic, hostPub, hostId, pairSecret, exp };
+}
+export async function derivePairKey(pairSecret) {
+    return importAesKey(await hkdf(pairSecret, "swal-pair/v1"));
+}
+async function pairMacKey(pairSecret) {
+    return hkdf(pairSecret, "swal-pair-proof/v1");
+}
+export async function createPairOffer(vault, o) {
+    const hostKeys = (await crypto.subtle.generateKey(ECDH, false, [
+        "deriveBits",
+    ]));
+    const pairSecret = randomBytes(16);
+    const payload = {
+        v: 4,
+        mid: o.mid,
+        root: o.root,
+        appId: o.appId,
+        topic: o.topic,
+        hostPub: b64uEncode(new Uint8Array(await crypto.subtle.exportKey("raw", hostKeys.publicKey))),
+        hostId: vault.deviceId,
+        pairSecret: b64uEncode(pairSecret),
+        exp: o.now + (o.ttlMs ?? PAIR_TTL_MS),
+    };
+    return { payload, encoded: encodePairPayload(payload), pairSecret, hostKeys };
+}
+/** What the host signs with its identity key: the transcript, its id and key (inside the encrypted grant). */
+export const hostProofBytes = (transcript, hostId, pub) => utf8(JSON.stringify(["swal-pair-host/v1", b64uEncode(transcript), hostId, pub]));
+/** Guest-side check of the host's identity proof: hostId (from the QR) = fingerprint(pub) and a valid ML-DSA-65 signature. */
+export async function verifyHostProof(p, transcript, proof) {
+    const h = proof;
+    if (!h || typeof h.pub !== "string" || typeof h.sig !== "string")
+        return false;
+    if (!(await idMatchesPub(p.hostId, h.pub)))
+        return false;
+    try {
+        return identityVerify(b64uDecode(h.pub), hostProofBytes(transcript, p.hostId, h.pub), b64uDecode(h.sig));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Pairing transcript hash: binds the SAS and the session key to BOTH ephemeral ECDH keys, the guest's ephemeral
+ * ML-KEM-768 encapsulation key and the host's ciphertext to it, BOTH nonces (host: pairSecret from the QR; guest:
+ * fresh `n` in its hello), the host identity (its id) and the mesh/app/topic.
+ */
+export async function pairTranscript(p, guestPub, guestNonce, guestKem, kemCt) {
+    const t = JSON.stringify([
+        "swal-pair-transcript/v5",
+        p.appId,
+        p.topic,
+        p.mid,
+        p.root,
+        p.hostId,
+        p.hostPub,
+        guestPub,
+        p.pairSecret,
+        guestNonce,
+        guestKem,
+        kemCt,
+        p.exp,
+    ]);
+    return new Uint8Array(await crypto.subtle.digest("SHA-256", bs(utf8(t))));
+}
+/**
+ * 6-digit Short Authentication String: HKDF(ikm = ML-KEM secret || ECDH secret, salt = transcript hash), 40 bits
+ * mod 10^6. A man in the middle must replace the ECDH key or the KEM ciphertext, which changes the code.
+ */
+export async function sasCode(shared, transcript) {
+    const b = await hkdf(shared, "swal-sas/v3", transcript);
+    const n = (b[0] * 2 ** 32 +
+        new DataView(b.buffer, b.byteOffset).getUint32(1, false)) %
+        1_000_000;
+    return String(n).padStart(6, "0");
+}
+/** Hybrid session (AGENTS.md §2): HKDF-SHA-256(ML-KEM-768 secret || ECDH P-256 secret, salt = transcript). */
+async function session(kemSecret, ecdhSecret, transcript) {
+    const key = await importAesKey(await hybridSecret(kemSecret, ecdhSecret, "swal-pair-session/v3", transcript));
+    return { key, sas: await sasCode(concat(kemSecret, ecdhSecret), transcript) };
+}
+/**
+ * What the guest signs with its IDENTITY key inside the ack: proof of possession of the key it asks to be admitted
+ * with, bound to this pairing session (transcript) so it cannot be replayed into another one.
+ */
+export const ackSignedBytes = (transcript, deviceId, pub, name) => utf8(JSON.stringify([
+    "swal-pair-ack/v1",
+    b64uEncode(transcript),
+    deviceId,
+    pub,
+    name,
+]));
+/** Host-side check of a guest ack: deviceId = fingerprint(pub) and a valid signature by that key over the transcript. */
+export async function verifyPairAck(verify, transcript, a) {
+    if (typeof a.deviceId !== "string" ||
+        typeof a.pub !== "string" ||
+        typeof a.sig !== "string")
+        return "malformed ack";
+    if (!(await idMatchesPub(a.deviceId, a.pub)))
+        return "deviceId is not the fingerprint of the guest key";
+    const name = typeof a.name === "string" ? a.name : "";
+    try {
+        if (await verify(b64uDecode(a.pub), ackSignedBytes(transcript, a.deviceId, a.pub, name), b64uDecode(a.sig)))
+            return null;
+    }
+    catch { }
+    return "guest did not prove possession of its identity key";
+}
+const helloProof = async (secret, e, n, k) => hmac(await pairMacKey(secret), utf8(`hello/v3|${e}|${n}|${k}`));
+const json = (o) => utf8(JSON.stringify(o));
+const parse = (b) => JSON.parse(fromUtf8(b));
+/** Host side. One instance per offer. pairSecret is single-use: burned by the first valid hello. */
+export class HostPairing {
+    offer;
+    hooks;
+    burned = false;
+    done = false;
+    sess = null;
+    transcript = null;
+    hostOk = false;
+    guestDevice = null;
+    send = null;
+    constructor(offer, hooks) {
+        this.offer = offer;
+        this.hooks = hooks;
+    }
+    get expired() {
+        return this.hooks.now() > this.offer.payload.exp;
+    }
+    get finished() {
+        return this.done;
+    }
+    cancel() {
+        this.done = true;
+    }
+    async handle(msg, send) {
+        if (this.done)
+            return send({ t: "err", e: "closed" });
+        try {
+            if (msg.t === "hello")
+                return await this.onHello(msg, send);
+            if (this.send !== send)
+                return; // only the link that burned the secret may continue
+            if (msg.t === "ack")
+                return await this.onAck(msg);
+            if (msg.t === "abort")
+                return this.fail("guest rejected SAS");
+        }
+        catch (e) {
+            if (this.send !== send)
+                return;
+            send({ t: "err", e: "refused" });
+            this.fail(e instanceof Error ? e.message : "protocol error");
+        }
+    }
+    fail(reason) {
+        this.done = true;
+        this.hooks.onFail(reason);
+    }
+    async onHello(msg, send) {
+        if (this.expired)
+            return send({ t: "err", e: "expired" });
+        if (this.burned)
+            return send({ t: "err", e: "used" });
+        const secret = this.offer.pairSecret;
+        let got;
+        try {
+            if (typeof msg.e !== "string" ||
+                typeof msg.n !== "string" ||
+                typeof msg.k !== "string" ||
+                b64uDecode(msg.n).length !== 16)
+                throw new Error();
+            got = b64uDecode(msg.p);
+        }
+        catch {
+            return send({ t: "err", e: "bad proof" });
+        }
+        const expect = await helloProof(secret, msg.e, msg.n, msg.k);
+        if (!equalBytes(expect, got))
+            return send({ t: "err", e: "bad proof" });
+        if (this.burned)
+            return send({ t: "err", e: "used" }); // re-check: another hello may have won during the awaits above
+        this.burned = true; // single use, enforced by the host (no await between check and set)
+        this.send = send;
+        const guestPub = await crypto.subtle.importKey("raw", bs(b64uDecode(msg.e)), ECDH, false, []);
+        const shared = new Uint8Array(await crypto.subtle.deriveBits({ name: "ECDH", public: guestPub }, this.offer.hostKeys.privateKey, 256));
+        const kem = kemEncapsulate(b64uDecode(msg.k)); // throws on a malformed key: the hello is refused
+        const c = b64uEncode(kem.cipherText);
+        this.transcript = await pairTranscript(this.offer.payload, msg.e, msg.n, msg.k, c);
+        this.sess = await session(kem.sharedSecret, shared, this.transcript);
+        send({ t: "ready", c });
+        this.hooks.onSas({
+            code: this.sess.sas,
+            confirm: () => {
+                this.hostOk = true;
+                void this.tryGrant();
+            },
+            reject: () => {
+                send({ t: "abort" });
+                this.fail("host rejected SAS");
+            },
+        });
+    }
+    async onAck(msg) {
+        if (!this.sess || !this.transcript || this.guestDevice)
+            return;
+        const body = parse(await openUpdate(this.sess.key, b64uDecode(msg.ct), "swal-pair/ack"));
+        const bad = await verifyPairAck(this.hooks.verify, this.transcript, body ?? {});
+        if (bad ||
+            typeof body.deviceId !== "string" ||
+            typeof body.pub !== "string")
+            throw new Error(bad ?? "malformed ack");
+        this.guestDevice = {
+            deviceId: body.deviceId,
+            pub: body.pub,
+            name: typeof body.name === "string" ? body.name : "",
+        };
+        await this.tryGrant();
+    }
+    async tryGrant() {
+        if (!this.hostOk ||
+            !this.guestDevice ||
+            !this.sess ||
+            !this.send ||
+            this.done)
+            return;
+        this.done = true;
+        let grant;
+        try {
+            grant = await this.hooks.buildGrant(this.guestDevice);
+            grant.hostProof = await this.hooks.prove(this.transcript);
+        }
+        catch (e) {
+            this.send({ t: "err", e: "refused" });
+            this.hooks.onFail(`grant refused: ${e instanceof Error ? e.message : String(e)}`);
+            return;
+        }
+        const ct = b64uEncode(await sealUpdate(this.sess.key, json(grant), "swal-pair/grant"));
+        this.send({ t: "grant", ct });
+        this.hooks.onPaired({ ...this.guestDevice, addedAt: this.hooks.now() });
+    }
+}
+/** Guest side. */
+export class GuestPairing {
+    payload;
+    vault;
+    hooks;
+    sess = null;
+    transcript = new Uint8Array(0);
+    ePub = "";
+    nonce = "";
+    kemPub = "";
+    kemSecret = new Uint8Array(0);
+    ecdhSecret = new Uint8Array(0);
+    proof = "";
+    sent = new WeakSet();
+    settled = false;
+    result;
+    resolve;
+    reject;
+    active = null;
+    constructor(payload, vault, hooks) {
+        this.payload = payload;
+        this.vault = vault;
+        this.hooks = hooks;
+        this.result = new Promise((res, rej) => {
+            this.resolve = res;
+            this.reject = rej;
+        });
+        this.result.catch(() => { });
+    }
+    static async create(payload, vault, hooks) {
+        if (hooks.now > payload.exp)
+            throw new Error("pairing code expired");
+        const g = new GuestPairing(payload, vault, hooks);
+        const eph = (await crypto.subtle.generateKey(ECDH, false, [
+            "deriveBits",
+        ]));
+        g.ePub = b64uEncode(new Uint8Array(await crypto.subtle.exportKey("raw", eph.publicKey)));
+        g.nonce = b64uEncode(randomBytes(16));
+        const kem = kemKeygen(); // ephemeral: one pairing only
+        g.kemPub = b64uEncode(kem.publicKey);
+        g.kemSecret = kem.secretKey;
+        const secret = b64uDecode(payload.pairSecret);
+        const hostPub = await crypto.subtle.importKey("raw", bs(b64uDecode(payload.hostPub)), ECDH, false, []);
+        g.ecdhSecret = new Uint8Array(await crypto.subtle.deriveBits({ name: "ECDH", public: hostPub }, eph.privateKey, 256));
+        g.proof = b64uEncode(await helloProof(secret, g.ePub, g.nonce, g.kemPub));
+        return g;
+    }
+    /** Called for every new link in the pairing room; says hello over it. */
+    attach(send) {
+        if (this.settled)
+            return;
+        send({
+            t: "hello",
+            e: this.ePub,
+            n: this.nonce,
+            k: this.kemPub,
+            p: this.proof,
+        });
+        this.sent.add(send);
+    }
+    fail(e) {
+        if (this.settled)
+            return;
+        this.settled = true;
+        this.reject(e);
+    }
+    async handle(msg, send) {
+        if (this.settled)
+            return;
+        // R4-N2: once the host's link is chosen (its `ready` started the session), the other links of the pairing room
+        // can no longer end the pairing
+        if (this.active && send !== this.active)
+            return;
+        try {
+            if (msg.t === "err")
+                return this.fail(new Error(`host refused pairing: ${msg.e}`));
+            if (msg.t === "abort")
+                return this.fail(new Error("host rejected the SAS"));
+            if (msg.t === "ready" && !this.active) {
+                if (typeof msg.c !== "string")
+                    throw new Error("pairing: the host sent no ML-KEM ciphertext");
+                this.active = send;
+                // hybrid session: a substituted ciphertext (or ECDH key) yields another SAS, caught by the user
+                const kemSecret = kemDecapsulate(b64uDecode(msg.c), this.kemSecret);
+                this.transcript = await pairTranscript(this.payload, this.ePub, this.nonce, this.kemPub, msg.c);
+                this.sess = await session(kemSecret, this.ecdhSecret, this.transcript);
+                const ok = await this.hooks.onSas(this.sess.sas);
+                if (!ok) {
+                    send({ t: "abort" });
+                    return this.fail(new Error("SAS rejected by user"));
+                }
+                const deviceId = this.vault.deviceId;
+                const pub = b64uEncode(this.vault.devicePublicKey);
+                const name = this.hooks.name;
+                const sig = b64uEncode(await this.vault.sign(ackSignedBytes(this.transcript, deviceId, pub, name)));
+                const ack = { deviceId, pub, name, sig };
+                if (!this.sess)
+                    return;
+                const ct = b64uEncode(await sealUpdate(this.sess.key, json(ack), "swal-pair/ack"));
+                send({ t: "ack", ct });
+            }
+            else if (msg.t === "grant" && this.active === send && this.sess) {
+                const g = parse(await openUpdate(this.sess.key, b64uDecode(msg.ct), "swal-pair/grant"));
+                // the host proves, inside the SAS-authenticated session, that it holds the identity the QR names
+                if (!(await verifyHostProof(this.payload, this.transcript, g.hostProof)))
+                    throw new Error("pairing grant: the host did not prove the identity named by the pairing code");
+                this.settled = true;
+                this.resolve(g);
+            }
+        }
+        catch (e) {
+            this.fail(e instanceof Error ? e : new Error(String(e)));
+        }
+    }
+}
+//# sourceMappingURL=pairing.js.map

package/dist/web/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../src/web/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAkB,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EACN,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,EACd,SAAS,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAElC,OAAO,EACN,UAAU,EACV,UAAU,EACV,EAAE,EACF,MAAM,EACN,UAAU,EACV,QAAQ,EACR,WAAW,EACX,IAAI,GACJ,MAAM,WAAW,CAAC;AAEnB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC;AACtC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;AA0C5D,MAAM,UAAU,iBAAiB,CAAC,CAAc;IAC/C,OAAO,UAAU,CAChB,IAAI,CACH,IAAI,CAAC,SAAS,CAAC;QACd,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI;KACN,CAAC,CACF,CACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAS;IAC1C,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACJ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChD,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzE,IACC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,CAC5D,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC5B;QACD,OAAO,GAAG,KAAK,QAAQ,EACtB,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,EAAE;QACvC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,UAAsB;IAEtB,OAAO,YAAY,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,UAAsB;IAC/C,OAAO,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;AAC/C,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,KAAkB,EAClB,CAOC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;QAC9D,YAAY;KACZ,CAAC,CAAkB,CAAC;IACrB,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,OAAO,GAAgB;QAC5B,CAAC,EAAE,CAAC;QACJ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,OAAO,EAAE,UAAU,CAClB,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CACxE;QACD,MAAM,EAAE,KAAK,CAAC,QAAQ;QACtB,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC;QAClC,GAAG,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC;KACrC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC/E,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,MAAM,cAAc,GAAG,CAC7B,UAAsB,EACtB,MAAc,EACd,GAAW,EACV,EAAE,CACH,IAAI,CACH,IAAI,CAAC,SAAS,CAAC,CAAC,mBAAmB,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAC1E,CAAC;AAEH,8HAA8H;AAC9H,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,CAAc,EACd,UAAsB,EACtB,KAAc;IAEd,MAAM,CAAC,GAAG,KAAgD,CAAC;IAC3D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAC/D,OAAO,KAAK,CAAC;IACd,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC;QACJ,OAAO,cAAc,CACpB,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EACjB,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAC3C,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CACjB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,CAAc,EACd,QAAgB,EAChB,UAAkB,EAClB,QAAgB,EAChB,KAAa;IAEb,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QACxB,yBAAyB;QACzB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO;QACT,QAAQ;QACR,CAAC,CAAC,UAAU;QACZ,UAAU;QACV,QAAQ;QACR,KAAK;QACL,CAAC,CAAC,GAAG;KACL,CAAC,CAAC;IACH,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,MAAkB,EAClB,UAAsB;IAEtB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,CAAC,GACN,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;QACd,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1D,SAAS,CAAC;IACX,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,8GAA8G;AAC9G,KAAK,UAAU,OAAO,CACrB,SAAqB,EACrB,UAAsB,EACtB,UAAsB;IAEtB,MAAM,GAAG,GAAG,MAAM,YAAY,CAC7B,MAAM,YAAY,CACjB,SAAS,EACT,UAAU,EACV,sBAAsB,EACtB,UAAU,CACV,CACD,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC7B,UAAsB,EACtB,QAAgB,EAChB,GAAW,EACX,IAAY,EACX,EAAE,CACH,IAAI,CACH,IAAI,CAAC,SAAS,CAAC;IACd,kBAAkB;IAClB,UAAU,CAAC,UAAU,CAAC;IACtB,QAAQ;IACR,GAAG;IACH,IAAI;CACJ,CAAC,CACF,CAAC;AASH,yHAAyH;AACzH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,MAI+B,EAC/B,UAAsB,EACtB,CAAmB;IAEnB,IACC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QACzB,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAEzB,OAAO,eAAe,CAAC;IACxB,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,kDAAkD,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,IAAI,CAAC;QACJ,IACC,MAAM,MAAM,CACX,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EACjB,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EACnD,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CACjB;YAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,oDAAoD,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,GAAG,KAAK,EACvB,MAAkB,EAClB,CAAS,EACT,CAAS,EACT,CAAS,EACR,EAAE,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAoBrE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,MAAM,KAAK,GAAG,CAAI,CAAa,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAM,CAAC;AAEjE,oGAAoG;AACpG,MAAM,OAAO,WAAW;IAUd,KAAK;IACL,KAAK;IAVN,MAAM,GAAG,KAAK,CAAC;IACf,IAAI,GAAG,KAAK,CAAC;IACb,IAAI,GAA2C,IAAI,CAAC;IACpD,UAAU,GAAsB,IAAI,CAAC;IACrC,MAAM,GAAG,KAAK,CAAC;IACf,WAAW,GAAmC,IAAI,CAAC;IACnD,IAAI,GAAoB,IAAI,CAAC;IAErC,YACS,KAAqB,EACrB,KAcP;qBAfO,KAAK;qBACL,KAAK;IAeX,CAAC;IAEJ,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;IAClD,CAAC;IACD,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,MAAM;QACL,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAQ,EAAE,IAAc;QACpC,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC;YACJ,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO;gBAAE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,CAAC,oDAAoD;YACpF,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK;gBAAE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO;YAC/B,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IAEO,IAAI,CAAC,MAAc;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAiC,EAAE,IAAc;QACtE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACrC,IAAI,GAAe,CAAC;QACpB,IAAI,CAAC;YACJ,IACC,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ;gBACzB,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ;gBACzB,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ;gBACzB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE;gBAE/B,MAAM,IAAI,KAAK,EAAE,CAAC;YACnB,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,+DAA+D;QACtH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,oEAAoE;QACxF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,KAAK,EACL,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EACrB,IAAI,EACJ,KAAK,EACL,EAAE,CACF,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,UAAU,CAC5B,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAClC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAC9B,GAAG,CACH,CACD,CAAC;QACF,MAAM,GAAG,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kDAAkD;QACjG,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,MAAM,cAAc,CACrC,IAAI,CAAC,KAAK,CAAC,OAAO,EAClB,GAAG,CAAC,CAAC,EACL,GAAG,CAAC,CAAC,EACL,GAAG,CAAC,CAAC,EACL,CAAC,CACD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;YACnB,OAAO,EAAE,GAAG,EAAE;gBACb,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,CAAC;YACD,MAAM,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,CAAC;SACD,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,GAA+B;QAClD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC/D,MAAM,IAAI,GAAG,KAAK,CACjB,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC,CACpE,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,aAAa,CAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,EACjB,IAAI,CAAC,UAAU,EACf,IAAI,IAAI,EAAE,CACV,CAAC;QACF,IACC,GAAG;YACH,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACjC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAE5B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;SACpD,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACrB,IACC,CAAC,IAAI,CAAC,MAAM;YACZ,CAAC,IAAI,CAAC,WAAW;YACjB,CAAC,IAAI,CAAC,IAAI;YACV,CAAC,IAAI,CAAC,IAAI;YACV,IAAI,CAAC,IAAI;YAET,OAAO;QACR,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtD,KAAK,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,UAAwB,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAChB,kBAAkB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC9D,CAAC;YACF,OAAO;QACR,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,CACpB,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAC/D,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;CACD;AAED,kBAAkB;AAClB,MAAM,OAAO,YAAY;IAiBd,OAAO;IACR,KAAK;IACL,KAAK;IAlBN,IAAI,GAA2C,IAAI,CAAC;IACpD,UAAU,GAAe,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,GAAG,EAAE,CAAC;IACV,KAAK,GAAG,EAAE,CAAC;IACX,MAAM,GAAG,EAAE,CAAC;IACZ,SAAS,GAAe,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1C,UAAU,GAAe,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3C,KAAK,GAAG,EAAE,CAAC;IACX,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IAC7B,OAAO,GAAG,KAAK,CAAC;IACf,MAAM,CAAqB;IAC5B,OAAO,CAA0B;IACjC,MAAM,CAAsB;IAC5B,MAAM,GAAoB,IAAI,CAAC;IAEvC,YACU,OAAoB,EACrB,KAAkB,EAClB,KAA8D;uBAF7D,OAAO;qBACR,KAAK;qBACL,KAAK;QAEb,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACtC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAClB,OAAoB,EACpB,KAAkB,EAClB,KAA2E;QAE3E,IAAI,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;YACzD,YAAY;SACZ,CAAC,CAAkB,CAAC;QACrB,CAAC,CAAC,IAAI,GAAG,UAAU,CAClB,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CACnE,CAAC;QACF,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC,CAAC,8BAA8B;QACvD,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C,KAAK,EACL,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAC/B,IAAI,EACJ,KAAK,EACL,EAAE,CACF,CAAC;QACF,CAAC,CAAC,UAAU,GAAG,IAAI,UAAU,CAC5B,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EACjC,GAAG,CAAC,UAAU,EACd,GAAG,CACH,CACD,CAAC;QACF,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,CAAC;IACV,CAAC;IAED,yEAAyE;IACzE,MAAM,CAAC,IAAc;QACpB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC;YACJ,CAAC,EAAE,OAAO;YACV,CAAC,EAAE,IAAI,CAAC,IAAI;YACZ,CAAC,EAAE,IAAI,CAAC,KAAK;YACb,CAAC,EAAE,IAAI,CAAC,MAAM;YACd,CAAC,EAAE,IAAI,CAAC,KAAK;SACb,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,CAAQ;QACZ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAQ,EAAE,IAAc;QACpC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,+GAA+G;QAC/G,gCAAgC;QAChC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO;QAChD,IAAI,CAAC;YACJ,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK;gBAClB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO;gBACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACtD,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvC,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ;oBAC5B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBAChE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,gGAAgG;gBAChG,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpE,IAAI,CAAC,UAAU,GAAG,MAAM,cAAc,CACrC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,MAAM,EACX,GAAG,CAAC,CAAC,CACL,CAAC;gBACF,IAAI,CAAC,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBACvE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjD,IAAI,CAAC,EAAE,EAAE,CAAC;oBACT,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;oBACrB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACrC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC7B,MAAM,GAAG,GAAG,UAAU,CACrB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACpB,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CACpD,CACD,CAAC;gBACF,MAAM,GAAG,GAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBAClD,IAAI,CAAC,IAAI,CAAC,IAAI;oBAAE,OAAO;gBACvB,MAAM,EAAE,GAAG,UAAU,CACpB,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,CAC3D,CAAC;gBACF,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACxB,CAAC;iBAAM,IAAI,GAAG,CAAC,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnE,MAAM,CAAC,GAAG,KAAK,CACd,MAAM,UAAU,CACf,IAAI,CAAC,IAAI,CAAC,GAAG,EACb,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAClB,iBAAiB,CACjB,CACD,CAAC;gBACF,iGAAiG;gBACjG,IACC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;oBAEpE,MAAM,IAAI,KAAK,CACd,8EAA8E,CAC9E,CAAC;gBACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC;CACD"}

package/dist/web/pq.d.ts

@@ -0,0 +1,36 @@
+export declare const IDENTITY_ALG: "ML-DSA-65";
+export declare const KEM_ALG: "ML-KEM-768";
+export declare const ML_DSA_PUBLIC_KEY_BYTES = 1952;
+export declare const ML_DSA_SECRET_KEY_BYTES = 4032;
+export declare const ML_DSA_SIGNATURE_BYTES = 3309;
+export declare const ML_KEM_PUBLIC_KEY_BYTES = 1184;
+export declare const ML_KEM_SECRET_KEY_BYTES = 2400;
+export declare const ML_KEM_CIPHERTEXT_BYTES = 1088;
+/**
+ * Device id = fingerprint of the ML-DSA-65 identity key, with ONE canonical encoding shared with `web/trust`
+ * (`keyFingerprint`): base64url(SHA-256(canonicalJson({ alg: "ML-DSA-65", pub: base64url(raw 1952-byte key) }))),
+ * 43 characters (full 256-bit hash: 128-bit second-preimage resistance even against Grover). The algorithm is part of
+ * the hashed value, so a key of another algorithm can never produce the same id.
+ */
+export declare function deviceIdOf(publicKey: Uint8Array): Promise<string>;
+/** New ML-DSA-65 identity key pair (raw bytes). */
+export declare const identityKeygen: () => {
+    publicKey: Uint8Array;
+    secretKey: Uint8Array;
+};
+export declare const identitySign: (secretKey: Uint8Array, data: Uint8Array) => Uint8Array;
+/** ML-DSA-65 verification with exact sizes; never throws (anything else, e.g. an ECDSA key or signature: false). */
+export declare function identityVerify(publicKey: Uint8Array, data: Uint8Array, signature: Uint8Array): boolean;
+/** New ML-KEM-768 key pair (raw bytes): `publicKey` is the encapsulation key, `secretKey` the decapsulation key. */
+export declare const kemKeygen: () => {
+    publicKey: Uint8Array;
+    secretKey: Uint8Array;
+};
+export declare function kemEncapsulate(publicKey: Uint8Array): {
+    cipherText: Uint8Array;
+    sharedSecret: Uint8Array;
+};
+export declare function kemDecapsulate(cipherText: Uint8Array, secretKey: Uint8Array): Uint8Array;
+/** Hybrid combiner: HKDF-SHA-256(ikm = ML-KEM secret || ECDH secret, salt, info). Both inputs are required. */
+export declare function hybridSecret(kemSecret: Uint8Array, ecdhSecret: Uint8Array, info: string, salt?: Uint8Array): Promise<Uint8Array>;
+//# sourceMappingURL=pq.d.ts.map

package/dist/web/pq.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pq.d.ts","sourceRoot":"","sources":["../../src/web/pq.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,YAAY,EAAG,WAAoB,CAAC;AACjD,eAAO,MAAM,OAAO,EAAG,YAAqB,CAAC;AAC7C,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAIjE;AAED,mDAAmD;AACnD,eAAO,MAAM,cAAc,QAAO;IACjC,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,EAAE,UAAU,CAAC;CACD,CAAC;AAEvB,eAAO,MAAM,YAAY,cACb,UAAU,QACf,UAAU,KACd,UAA4C,CAAC;AAEhD,oHAAoH;AACpH,wBAAgB,cAAc,CAC7B,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,GACnB,OAAO,CAWT;AAED,oHAAoH;AACpH,eAAO,MAAM,SAAS,QAAO;IAAE,SAAS,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CACxD,CAAC;AAEpB,wBAAgB,cAAc,CAAC,SAAS,EAAE,UAAU,GAAG;IACtD,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,UAAU,CAAC;CACzB,CAIA;AAED,wBAAgB,cAAc,CAC7B,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,UAAU,GACnB,UAAU,CAIZ;AAED,+GAA+G;AAC/G,wBAAgB,YAAY,CAC3B,SAAS,EAAE,UAAU,EACrB,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAIrB"}