@swal/vault 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,128 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work.
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner.
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 SouthWest AI Labs (SWAL)
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,233 @@
-# Temporary Holding Version
+# @swal/vault
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Pure WebCrypto end-to-end encrypted (E2EE) storage core with Shamir's Secret Sharing (2-of-3 threshold), AES-256-GCM authenticated encryption with associated data (AEAD), and zero-knowledge cloud synchronization.
+
+Built for privacy-first, local-first web applications and edge runtimes.
+
+---
+
+## Overview
+
+`@swal/vault` provides cryptographic building blocks and local key custody for modern web applications and cloud edge services. It is designed so that backend storage providers (such as Cloudflare R2, D1, or S3-compatible stores) only ever see ciphertext, authentication tags, and public metadata—never plaintext data or sufficient key material to decrypt it.
+
+### Core Properties
+
+- **100% End-to-End Encrypted (E2EE):** Data is encrypted on the client device using an ephemeral Data Encryption Key (DEK).
+- **2-of-3 Shamir Secret Sharing:** The DEK is split into three shares over $\text{GF}(257)$. Reconstructing the DEK requires any two shares.
+  - **Share 1 ($x=1$):** Kept strictly on the local device.
+  - **Share 2 ($x=2$):** Recovery share provided to the user upon onboarding.
+  - **Share 3 ($x=3$):** Cloud custody share stored in a database (such as Cloudflare D1).
+- **Zero Cloud Compromise:** Because the cloud backend never holds more than one share ($x=3$), the operator or a compromised cloud infrastructure cannot decrypt user records.
+- **Pure WebCrypto Runtime:** Relies exclusively on standard `globalThis.crypto.subtle` and `Uint8Array`. Zero dependencies on Node.js-specific modules (`node:crypto`, `Buffer`). Runs seamlessly in browsers (PWAs), Cloudflare Workers, Node.js (>= 19), Bun, and Deno.
+- **Tamper-Proof Metadata (AEAD):** In Pack format v2, metadata is authenticated as Additional Authenticated Data (AAD) in AES-GCM. Modifying metadata, ciphertext, IV, or tag causes decryption to fail.
+- **Hardware-Backed Identity & Key Wrapping:** Client module (`@swal/vault/web`) provides non-extractable IndexedDB key custody, passkey PRF support, and PBKDF2-SHA256 key derivation with up to 600,000 iterations.
+
+---
+
+## Installation
+
+```bash
+npm install @swal/vault
+# or
+pnpm add @swal/vault
+```
+
+---
+
+## Usage Guide
+
+### 1. Sealing and Unpacking Data
+
+```ts
+import {
+  createSealedPack,
+  unpackSealedPack,
+  packWithoutShares,
+  packMetadataForEntity,
+} from '@swal/vault';
+
+// 1. Prepare plaintext payload and metadata
+const payload = new TextEncoder().encode(JSON.stringify({ secretNote: 'Confidential message' }));
+const metadata = packMetadataForEntity('document', 'doc-123', 'my-app', 'instance-1');
+
+// 2. Create sealed pack (AES-256-GCM + Shamir 2/3 + Ed25519 signature)
+const pack = await createSealedPack(payload, metadata);
+
+// pack.shares contains 3 shares:
+// - Share 1 (index: 1): store in device IndexedDB
+// - Share 2 (index: 2): backup/recovery key for user
+// - Share 3 (index: 3): cloud custody share
+
+// 3. Prepare pack for cloud storage (strips shares)
+const cloudSafePack = packWithoutShares(pack);
+
+// 4. Decrypt payload using any 2 shares
+const deviceShare = pack.shares[0]; // x=1
+const recoveryShare = pack.shares[1]; // x=2
+
+const decryptedBytes = await unpackSealedPack(cloudSafePack, [deviceShare, recoveryShare]);
+const decryptedText = new TextDecoder().decode(decryptedBytes);
+```
+
+### 2. Cloud Storage Boundary (R2 & CloudShareStore)
+
+```ts
+import { R2StorageClient, storeCloudShare, MemoryCloudShareStore } from '@swal/vault';
+
+// Initialize R2 storage client (supports real Cloudflare Worker R2 bucket bindings or in-memory fallback)
+const r2 = new R2StorageClient({
+  appId: 'my-app',
+  instanceId: 'inst-01',
+  r2Binding: env.SWAL_R2, // Cloudflare R2 bucket binding (optional)
+});
+
+// Upload pack: enforce that no more than 1 share is uploaded.
+// uploadSealedPack automatically strips shares and throws an error if >= 2 shares are present.
+await r2.uploadSealedPack(pack);
+
+// Store the single permitted cloud share (x=3) in CloudShareStore (D1 / KV / Memory)
+const shareStore = new MemoryCloudShareStore();
+await storeCloudShare(shareStore, pack);
+
+// Retrieve and decrypt
+const storedPack = await r2.getSealedPack(pack.content_hash);
+const cloudShare = await shareStore.get(pack.id);
+
+if (storedPack && cloudShare) {
+  const plain = await unpackSealedPack(storedPack, [deviceShare, cloudShare]);
+}
+```
+
+### 3. Browser Client (`@swal/vault/web`)
+
+The browser client provides zero-network, local-first key lifecycle management in IndexedDB.
+
+```ts
+import { createVaultClient } from '@swal/vault/web';
+
+// 1. Initialize client with IndexedDB backing
+const vault = createVaultClient({
+  storage: 'idb',
+  dbName: 'app-vault-storage',
+  pbkdf2Iterations: 600_000, // minimum allowed is 310,000
+});
+
+// 2. Hardware / device identity (non-extractable ECDSA P-256)
+const identity = await vault.getDeviceIdentity();
+
+// 3. Unlock KEK via Passkey PRF (WebAuthn) or passphrase
+await vault.unlockPreferPasskey('user-strong-passphrase');
+
+// 4. Retrieve or generate the mesh encryption key (wrapped at rest in IndexedDB)
+const { raw, key } = await vault.getOrCreateMeshKey();
+
+// 5. Export recovery shares (allowed only ONCE; subsequent calls throw SHARE_ALREADY_SHOWN)
+const { recoveryShare, cloudShare } = await vault.exportRecoveryShare();
+
+// 6. Emergency recovery / passphrase reset using recovery share
+await vault.resetPassphrase(recoveryShare, 'new-strong-passphrase');
+```
+
+---
+
+## API Reference
+
+### Core (`@swal/vault`)
+
+#### `createSealedPack(payload, metadata, keyPair?, options?)`
+Encrypts `payload` with a freshly generated 32-byte AES-GCM DEK, splits the DEK into 3 Shamir shares, computes a SHA-256 content hash over ciphertext and metadata, signs the hash using Ed25519, and binds metadata into the AES-GCM tag via AAD.
+- `payload`: `Uint8Array` of data to encrypt.
+- `metadata`: `SealedPackMetadata` object. Keys must be whitelisted unless specified in `options.extraClearKeys`.
+- `keyPair`: Optional Ed25519 `CryptoKeyPair` (or Node-compatible `KeyObject` pair). A key pair is generated if omitted.
+- `options.extraClearKeys`: Optional array of string keys permitted in plaintext metadata.
+- Returns: `Promise<SealedPack>`.
+
+#### `unpackSealedPack(pack, shares)`
+Reconstructs the 32-byte DEK from any two valid `DEKShare` objects, verifies the AAD and authentication tag, and decrypts the ciphertext.
+- `pack`: `SealedPack`.
+- `shares`: `DEKShare[]` containing at least 2 distinct shares.
+- Returns: `Promise<Uint8Array>`.
+
+#### `packWithoutShares(pack)`
+Returns a shallow copy of `pack` with `shares: []`. Safe for transmitting to cloud backends.
+
+#### `splitDEK(dek)` / `reconstructDEK(shares)`
+Low-level Shamir Secret Sharing implementation over $\text{GF}(257)$.
+- `splitDEK(dek: Uint8Array)`: Returns an array of 3 `DEKShare` objects ($x \in \{1, 2, 3\}$).
+- `reconstructDEK(shares: DEKShare[])`: Takes 2 distinct shares and returns the original 32-byte DEK.
+
+#### `verifySealedPackHash(pack)`
+Asynchronously validates that the pack's `content_hash` matches `SHA-256(ciphertext || sorted(metadata))`. Returns `Promise<boolean>`.
+
+#### `verifySealedPackSignature(pack)`
+Verifies the Ed25519 signature over `content_hash` using the embedded `publicKey`. Returns `Promise<boolean>`.
+
+#### `R2StorageClient`
+Storage client adapter for Cloudflare R2 / S3 storage:
+- `uploadSealedPack(pack)`: Verifies integrity, strips shares, and stores pack under `packs/{appId}/{instanceId}/{entity}/{content_hash}.json`. Throws if pack contains $\ge 2$ shares.
+- `getSealedPack(keyOrHash)`: Fetches pack from R2 or fallback memory store.
+- `deleteSealedPack(keyOrHash)`: Deletes pack from storage.
+- `listSealedPacks(prefix?)`: Lists stored pack keys.
+
+#### `CloudShareStore` & `storeCloudShare(store, pack)`
+- `CloudShareStore`: Abstract storage interface (`put`, `get`, `delete`) for cloud-persisted shares ($x=3$).
+- `storeCloudShare(store, pack)`: Extracts share $x=3$ and persists it. Rejects any operation that would store shares with index $\ne 3$.
+- `MemoryCloudShareStore`: In-memory reference implementation for testing and mesh node synchronization.
+
+---
+
+### Web (`@swal/vault/web`)
+
+#### `createVaultClient(options)`
+Creates a browser vault manager backed by IndexedDB.
+- `options.storage`: Currently `'idb'` is supported.
+- `options.dbName`: IndexedDB database name (default: `'swal-vault'`).
+- `options.pbkdf2Iterations`: PBKDF2 iterations for passphrase derivation (default: `600_000`, minimum: `310_000`).
+- `options.passkey`: Optional WebAuthn PRF provider implementation.
+
+#### `VaultClient` Methods
+- `getDeviceIdentity(): Promise<DeviceIdentity>`: Returns device ID and SPKI/JWK public keys.
+- `sign(data: Uint8Array): Promise<Uint8Array>`: Signs data with device private key.
+- `verify(publicKeyJwk, data, signature): Promise<boolean>`: Verifies device signature.
+- `unlock(options): Promise<void>`: Unlocks memory KEK using `{ passphrase: string }` or `{ passkey: true }`.
+- `unlockPreferPasskey(passphrase): Promise<'passkey' | 'passphrase'>`: Attempts passkey unlock with automatic passphrase fallback.
+- `lock(): void`: Wipes in-memory KEK.
+- `isUnlocked(): boolean`: Returns current unlock state.
+- `getOrCreateMeshKey(): Promise<MeshKey>`: Returns the active wrapped 32-byte mesh key.
+- `exportRecoveryShare(): Promise<{ recoveryShare: DEKShare, cloudShare: DEKShare }>`: Exports recovery and cloud shares. Allowed only once.
+- `recoverMeshKey(recoveryShare: DEKShare): Promise<Uint8Array>`: Reconstructs mesh key using device share and recovery share.
+- `resetPassphrase(recoveryShare: DEKShare, newPassphrase: string): Promise<void>`: Re-wraps mesh key under a new passphrase.
+
+---
+
+## Security Notes
+
+1. **Threshold Secrecy:** Shamir secret sharing over $\text{GF}(257)$ provides information-theoretic security for the threshold: any single share ($k=1$) reveals zero information about the underlying encryption key.
+2. **Cloud Boundary Invariant:** At no point should any single backend service accumulate 2 or more shares. Cloud storage (R2/S3) must only receive packs stripped of shares (`packWithoutShares`). Cloud databases (such as Cloudflare D1) must only ever store share $x=3$. Both `uploadSealedPack` and `storeCloudShare` enforce this programmatically (`assertCloudSharesSafe`).
+3. **AEAD Authentication:** Pack format v2 binds metadata directly into AES-GCM via AAD (`swal-vault/v2|...`). Any alteration to ciphertext, initialization vector, authentication tag, or metadata properties will fail decryption.
+4. **Clear Metadata Whitelist:** To prevent accidental data leaks in plaintext metadata fields, `createSealedPack` enforces a strict whitelist (`CLEAR_METADATA_KEYS`: `vehicleId`, `entityId`, `entity`, `appId`, `instanceId`, `timestamp`, `recordCount`, `deviceId`). Custom fields require explicit opt-in via `extraClearKeys`.
+5. **Key Derivation Standards:** PBKDF2-SHA256 derivation requires a minimum of 310,000 iterations (OWASP recommendation) and defaults to 600,000 iterations. Initializing `VaultClient` with fewer than 310,000 iterations throws a `VaultError`.
+6. **Zero Client Network Leakage:** `createVaultClient` performs zero network requests. All private and secret keys remain securely confined to memory and encrypted IndexedDB storage.
+
+---
+
+## Development & Gate
+
+Run tests and typecheck verification:
+
+```bash
+# Run test suite
+npx vitest run
+
+# Run TypeScript check
+npx tsc --noEmit
+
+# Verify package tarball contents
+npm pack --dry-run
+```
+
+---
+
+## License
+
+[Apache-2.0](LICENSE) © 2026 SouthWest AI Labs (SWAL)

package/dist/bytes.d.ts

@@ -0,0 +1,20 @@
+export declare function utf8(s: string): Uint8Array;
+export declare function fromUtf8(b: Uint8Array): string;
+export declare function concatBytes(...parts: Uint8Array[]): Uint8Array;
+export declare function toBase64(b: Uint8Array): string;
+export declare function fromBase64(s: string): Uint8Array;
+export declare function toBase64Url(b: Uint8Array): string;
+export declare function fromBase64Url(s: string): Uint8Array;
+export declare function toHex(b: Uint8Array): string;
+export declare function fromHex(h: string): Uint8Array;
+/** Bytes aleatorios criptograficos (WebCrypto). */
+export declare function randomBytes(n: number): Uint8Array;
+/** Entero uniforme en [min, max) sin sesgo (rejection sampling). */
+export declare function randomInt(min: number, max: number): number;
+/** Cast para TS >=5.7 (Uint8Array<ArrayBufferLike> -> BufferSource). */
+export declare function bs(b: Uint8Array): BufferSource;
+/** SHA-256 con WebCrypto. */
+export declare function sha256(b: Uint8Array): Promise<Uint8Array>;
+/** SHA-256 sincrono en JS puro (solo para el API legacy computeContentHash sincrono). */
+export declare function sha256Sync(msg: Uint8Array): Uint8Array;
+//# sourceMappingURL=bytes.d.ts.map

package/dist/bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.d.ts","sourceRoot":"","sources":["../src/bytes.ts"],"names":[],"mappings":"AAEA,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAE1C;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAE9C;AAED,wBAAgB,WAAW,CAAC,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,CAQ9D;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAI9C;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAKhD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAEjD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAGnD;AAED,wBAAgB,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAI3C;AAED,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAK7C;AAED,mDAAmD;AACnD,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAIjD;AAED,oEAAoE;AACpE,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAO1D;AAED,wEAAwE;AACxE,wBAAgB,EAAE,CAAC,CAAC,EAAE,UAAU,GAAG,YAAY,CAE9C;AAED,6BAA6B;AAC7B,wBAAsB,MAAM,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAE/D;AAED,yFAAyF;AACzF,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CA0CtD"}

package/dist/bytes.js

@@ -0,0 +1,135 @@
+// bytes.ts — helpers Uint8Array <-> base64 / base64url / hex (sin Buffer, aptos para navegador)
+export function utf8(s) {
+    return new TextEncoder().encode(s);
+}
+export function fromUtf8(b) {
+    return new TextDecoder().decode(b);
+}
+export function concatBytes(...parts) {
+    const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let o = 0;
+    for (const p of parts) {
+        out.set(p, o);
+        o += p.length;
+    }
+    return out;
+}
+export function toBase64(b) {
+    let s = '';
+    for (let i = 0; i < b.length; i += 0x8000)
+        s += String.fromCharCode(...b.subarray(i, i + 0x8000));
+    return btoa(s);
+}
+export function fromBase64(s) {
+    const bin = atob(s);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+export function toBase64Url(b) {
+    return toBase64(b).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+export function fromBase64Url(s) {
+    const t = s.replace(/-/g, '+').replace(/_/g, '/');
+    return fromBase64(t + '='.repeat((4 - (t.length % 4)) % 4));
+}
+export function toHex(b) {
+    let s = '';
+    for (const x of b)
+        s += x.toString(16).padStart(2, '0');
+    return s;
+}
+export function fromHex(h) {
+    if (h.length % 2)
+        throw new Error('hex invalido');
+    const out = new Uint8Array(h.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = parseInt(h.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+/** Bytes aleatorios criptograficos (WebCrypto). */
+export function randomBytes(n) {
+    const out = new Uint8Array(n);
+    globalThis.crypto.getRandomValues(out);
+    return out;
+}
+/** Entero uniforme en [min, max) sin sesgo (rejection sampling). */
+export function randomInt(min, max) {
+    const range = max - min;
+    const limit = Math.floor(0x100000000 / range) * range;
+    const buf = new Uint32Array(1);
+    do
+        globalThis.crypto.getRandomValues(buf);
+    while (buf[0] >= limit);
+    return min + (buf[0] % range);
+}
+/** Cast para TS >=5.7 (Uint8Array<ArrayBufferLike> -> BufferSource). */
+export function bs(b) {
+    return b;
+}
+/** SHA-256 con WebCrypto. */
+export async function sha256(b) {
+    return new Uint8Array(await globalThis.crypto.subtle.digest('SHA-256', bs(b)));
+}
+/** SHA-256 sincrono en JS puro (solo para el API legacy computeContentHash sincrono). */
+export function sha256Sync(msg) {
+    const K = new Uint32Array([
+        0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+        0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+        0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+        0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+        0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+        0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+        0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+        0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+    ]);
+    const H = new Uint32Array([
+        0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+    ]);
+    const len = msg.length;
+    const padded = new Uint8Array(((len + 9 + 63) >> 6) << 6);
+    padded.set(msg);
+    padded[len] = 0x80;
+    const dv = new DataView(padded.buffer);
+    dv.setUint32(padded.length - 8, Math.floor((len * 8) / 0x100000000));
+    dv.setUint32(padded.length - 4, (len * 8) >>> 0);
+    const w = new Uint32Array(64);
+    const rotr = (x, n) => (x >>> n) | (x << (32 - n));
+    for (let off = 0; off < padded.length; off += 64) {
+        for (let i = 0; i < 16; i++)
+            w[i] = dv.getUint32(off + i * 4);
+        for (let i = 16; i < 64; i++) {
+            const s0 = rotr(w[i - 15], 7) ^ rotr(w[i - 15], 18) ^ (w[i - 15] >>> 3);
+            const s1 = rotr(w[i - 2], 17) ^ rotr(w[i - 2], 19) ^ (w[i - 2] >>> 10);
+            w[i] = (w[i - 16] + s0 + w[i - 7] + s1) >>> 0;
+        }
+        let [a, b, c, d, e, f, g, h] = H;
+        for (let i = 0; i < 64; i++) {
+            const t1 = (h + (rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25)) + ((e & f) ^ (~e & g)) + K[i] + w[i]) >>> 0;
+            const t2 = ((rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22)) + ((a & b) ^ (a & c) ^ (b & c))) >>> 0;
+            h = g;
+            g = f;
+            f = e;
+            e = (d + t1) >>> 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (t1 + t2) >>> 0;
+        }
+        H[0] += a;
+        H[1] += b;
+        H[2] += c;
+        H[3] += d;
+        H[4] += e;
+        H[5] += f;
+        H[6] += g;
+        H[7] += h;
+    }
+    const out = new Uint8Array(32);
+    const odv = new DataView(out.buffer);
+    for (let i = 0; i < 8; i++)
+        odv.setUint32(i * 4, H[i]);
+    return out;
+}
+//# sourceMappingURL=bytes.js.map

package/dist/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../src/bytes.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAEhG,MAAM,UAAU,IAAI,CAAC,CAAS;IAC5B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAa;IACpC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAG,KAAmB;IAChD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACd,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAa;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAa;IACvC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,CAAa;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,GAAW;IAChD,MAAM,KAAK,GAAG,GAAG,GAAG,GAAG,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B;QAAG,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;WACnC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE;IACxB,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,EAAE,CAAC,CAAa;IAC9B,OAAO,CAA4B,CAAC;AACtC,CAAC;AAED,6BAA6B;AAC7B,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,CAAa;IACxC,OAAO,IAAI,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,UAAU,CAAC,GAAe;IACxC,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;QACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;KAC/F,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;QACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;KAC/F,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;IACrE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrG,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC5F,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACpF,CAAC;QACD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cloudShare.d.ts

@@ -0,0 +1,20 @@
+import { type DEKShare, type SealedPack } from './sealedPack.js';
+export interface CloudShareStore {
+    /** Guarda el share x=3 del pack `packId`. */
+    put(packId: string, share: DEKShare): Promise<void>;
+    get(packId: string): Promise<DEKShare | null>;
+    delete(packId: string): Promise<void>;
+}
+/** Guarda en `store` el unico share permitido (x=3) de un pack recien sellado. Lanza si no existe. */
+export declare function storeCloudShare(store: CloudShareStore, pack: SealedPack): Promise<void>;
+/** Implementacion en memoria (tests / mesh-only). */
+export declare class MemoryCloudShareStore implements CloudShareStore {
+    private m;
+    put(id: string, s: DEKShare): Promise<void>;
+    get(id: string): Promise<{
+        index: number;
+        value: string;
+    } | null>;
+    delete(id: string): Promise<void>;
+}
+//# sourceMappingURL=cloudShare.d.ts.map

package/dist/cloudShare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudShare.d.ts","sourceRoot":"","sources":["../src/cloudShare.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6D,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE5H,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,sGAAsG;AACtG,wBAAsB,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7F;AAED,qDAAqD;AACrD,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,CAAC,CAA+B;IAClC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,iBAAkH;IAC7I,GAAG,CAAC,EAAE,EAAE,MAAM;;;cAA2D;IACzE,MAAM,CAAC,EAAE,EAAE,MAAM,iBAAwB;CAChD"}

package/dist/cloudShare.js

@@ -0,0 +1,21 @@
+// cloudShare.ts — interfaz agnostica de almacenamiento para el unico share que la nube puede tener (x=3).
+// Implementala con D1 (recomendado: 100.000 filas/dia), KV (1 escritura por registro; cupo de 1.000
+// escrituras/dia por cuenta de Cloudflare) o memoria en tests. El vault no depende de ninguna.
+import { assertCloudSharesSafe, CLOUD_SHARE_INDEX, cloudBoundShare } from './sealedPack.js';
+/** Guarda en `store` el unico share permitido (x=3) de un pack recien sellado. Lanza si no existe. */
+export async function storeCloudShare(store, pack) {
+    const share = cloudBoundShare(pack.shares);
+    if (!share)
+        throw new Error(`El pack no tiene el share x=${CLOUD_SHARE_INDEX}`);
+    assertCloudSharesSafe(1);
+    await store.put(pack.id, share);
+}
+/** Implementacion en memoria (tests / mesh-only). */
+export class MemoryCloudShareStore {
+    m = new Map();
+    async put(id, s) { if (s.index !== CLOUD_SHARE_INDEX)
+        throw new Error('solo se admite el share x=3'); this.m.set(id, { ...s }); }
+    async get(id) { const s = this.m.get(id); return s ? { ...s } : null; }
+    async delete(id) { this.m.delete(id); }
+}
+//# sourceMappingURL=cloudShare.js.map

package/dist/cloudShare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudShare.js","sourceRoot":"","sources":["../src/cloudShare.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,oGAAoG;AACpG,+FAA+F;AAC/F,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,eAAe,EAAkC,MAAM,iBAAiB,CAAC;AAS5H,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAsB,EAAE,IAAgB;IAC5E,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,iBAAiB,EAAE,CAAC,CAAC;IAChF,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,qDAAqD;AACrD,MAAM,OAAO,qBAAqB;IACxB,CAAC,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,CAAW,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnJ,KAAK,CAAC,GAAG,CAAC,EAAU,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,MAAM,CAAC,EAAU,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;CAChD"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from './sealedPack.js';
+export * from './r2Client.js';
+export * from './cloudShare.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+// @swal/vault — entrypoint reusable
+export * from './sealedPack.js';
+export * from './r2Client.js';
+export * from './cloudShare.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC"}

package/dist/r2Client.d.ts

@@ -0,0 +1,37 @@
+import type { SealedPack } from './sealedPack.js';
+export interface R2ClientConfig {
+    bucketName?: string;
+    endpointUrl?: string;
+    accessKeyId?: string;
+    secretAccessKey?: string;
+    r2Binding?: any;
+    appId?: string;
+    instanceId?: string;
+}
+export declare class R2StorageClient {
+    private bucketName;
+    private endpointUrl;
+    private r2Binding;
+    private appId;
+    private instanceId;
+    private memoryStore;
+    constructor(config?: R2ClientConfig);
+    getBucketName(): string;
+    isCloudEnabled(): boolean;
+    private r2KeyForPack;
+    /**
+     * Sube el pack SIN shares (frontera E2EE). Lanza si el pack trae >=2 shares: el llamador debe
+     * quitar los shares 1 y 2 y guardar el 3 aparte (ver `CloudShareStore`).
+     */
+    uploadSealedPack(input: SealedPack): Promise<{
+        url: string;
+        contentHash: string;
+        key: string;
+    }>;
+    getSealedPack(keyOrHash: string): Promise<SealedPack | null>;
+    deleteSealedPack(keyOrHash: string): Promise<boolean>;
+    verifyR2PackIntegrity(keyOrHash: string): Promise<boolean>;
+    listSealedPacks(prefix?: string): Promise<string[]>;
+    estimateStoredBytes(): Promise<number>;
+}
+//# sourceMappingURL=r2Client.d.ts.map

package/dist/r2Client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2Client.d.ts","sourceRoot":"","sources":["../src/r2Client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAsB,MAAM,iBAAiB,CAAC;AAGtE,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAsC;IAEzD,YAAY,MAAM,GAAE,cAAmB,EAMtC;IAED,aAAa,IAAI,MAAM,CAA4B;IACnD,cAAc,IAAI,OAAO,CAA6B;IAEtD,OAAO,CAAC,YAAY;IAQpB;;;OAGG;IACG,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAmBpG;IAEK,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAWjE;IAEK,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ1D;IAEK,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAI/D;IAEK,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAWxD;IAGK,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CAQ3C;CACF"}