@swal/vault 0.0.0-stage → 0.2.0

package/dist/r2Client.js

@@ -0,0 +1,109 @@
+import { assertCloudSharesSafe, packWithoutShares, verifySealedPackHash } from './sealedPack.js';
+export class R2StorageClient {
+    bucketName;
+    endpointUrl;
+    r2Binding;
+    appId;
+    instanceId;
+    memoryStore = new Map();
+    constructor(config = {}) {
+        this.bucketName = config.bucketName || `swal-${config.appId || 'app'}-vault`;
+        this.endpointUrl = config.endpointUrl || 'https://r2.swal.dev';
+        this.r2Binding = config.r2Binding ?? null;
+        this.appId = config.appId || 'my-app';
+        this.instanceId = config.instanceId || 'default';
+    }
+    getBucketName() { return this.bucketName; }
+    isCloudEnabled() { return !!this.r2Binding; }
+    r2KeyForPack(pack) {
+        const m = pack.metadata;
+        const app = m.appId || this.appId;
+        const inst = m.instanceId || this.instanceId;
+        const entity = m.entity || 'generic';
+        return `packs/${app}/${inst}/${entity}/${pack.content_hash}.json`;
+    }
+    /**
+     * Sube el pack SIN shares (frontera E2EE). Lanza si el pack trae >=2 shares: el llamador debe
+     * quitar los shares 1 y 2 y guardar el 3 aparte (ver `CloudShareStore`).
+     */
+    async uploadSealedPack(input) {
+        if (!input?.content_hash)
+            throw new Error('SealedPack sin content_hash');
+        assertCloudSharesSafe(input.shares?.length ?? 0);
+        const pack = packWithoutShares(input);
+        const ok = await verifySealedPackHash(pack);
+        if (!ok)
+            throw new Error('SealedPack content_hash mismatch');
+        const key = this.r2KeyForPack(pack);
+        // Cloud real si hay binding
+        if (this.r2Binding?.put) {
+            await this.r2Binding.put(key, JSON.stringify(pack), { httpMetadata: { contentType: 'application/json' } });
+        }
+        // Siempre memory replica (mesh fallback)
+        this.memoryStore.set(key, JSON.parse(JSON.stringify(pack)));
+        this.memoryStore.set(pack.content_hash, JSON.parse(JSON.stringify(pack)));
+        const url = `${this.endpointUrl}/${this.bucketName}/${key}`;
+        return { url, contentHash: pack.content_hash, key };
+    }
+    async getSealedPack(keyOrHash) {
+        // Intenta R2 real primero
+        if (this.r2Binding?.get) {
+            try {
+                const obj = await this.r2Binding.get(keyOrHash);
+                if (obj)
+                    return JSON.parse(await obj.text());
+                // intenta como hash -> busca key generica
+            }
+            catch { }
+        }
+        const p = this.memoryStore.get(keyOrHash);
+        return p ? JSON.parse(JSON.stringify(p)) : null;
+    }
+    async deleteSealedPack(keyOrHash) {
+        if (this.r2Binding?.delete)
+            try {
+                await this.r2Binding.delete(keyOrHash);
+            }
+            catch { }
+        const pack = this.memoryStore.get(keyOrHash);
+        if (!pack)
+            return false;
+        this.memoryStore.delete(keyOrHash);
+        this.memoryStore.delete(pack.content_hash);
+        this.memoryStore.delete(this.r2KeyForPack(pack));
+        return true;
+    }
+    async verifyR2PackIntegrity(keyOrHash) {
+        const p = await this.getSealedPack(keyOrHash);
+        if (!p)
+            return false;
+        return verifySealedPackHash(p);
+    }
+    async listSealedPacks(prefix) {
+        if (this.r2Binding?.list) {
+            try {
+                const listed = await this.r2Binding.list({ prefix: prefix ?? `packs/${this.appId}/` });
+                return (listed.objects ?? []).map((o) => o.key);
+            }
+            catch { }
+        }
+        const keys = new Set();
+        for (const k of this.memoryStore.keys())
+            if (k.startsWith('packs/'))
+                keys.add(k);
+        const pref = prefix ?? `packs/${this.appId}/`;
+        return [...keys].filter((k) => k.startsWith(pref));
+    }
+    // Helper pay-per-use: calcula bytes para metering
+    async estimateStoredBytes() {
+        const keys = await this.listSealedPacks();
+        let total = 0;
+        for (const k of keys) {
+            const p = await this.getSealedPack(k);
+            if (p)
+                total += JSON.stringify(p).length;
+        }
+        return total;
+    }
+}
+//# sourceMappingURL=r2Client.js.map

package/dist/r2Client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2Client.js","sourceRoot":"","sources":["../src/r2Client.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAajG,MAAM,OAAO,eAAe;IAClB,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,SAAS,CAAa;IACtB,KAAK,CAAS;IACd,UAAU,CAAS;IACnB,WAAW,GAA4B,IAAI,GAAG,EAAE,CAAC;IAEzD,YAAY,MAAM,GAAmB,EAAE;QACrC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,QAAQ,MAAM,CAAC,KAAK,IAAI,KAAK,QAAQ,CAAC;QAC7E,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,qBAAqB,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC;IACnD,CAAC;IAED,aAAa,KAAa,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACnD,cAAc,KAAc,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAE9C,YAAY,CAAC,IAAgB;QACnC,MAAM,CAAC,GAAQ,IAAI,CAAC,QAAQ,CAAC;QAC7B,MAAM,GAAG,GAAI,CAAC,CAAC,KAAgB,IAAI,IAAI,CAAC,KAAK,CAAC;QAC9C,MAAM,IAAI,GAAI,CAAC,CAAC,UAAqB,IAAI,IAAI,CAAC,UAAU,CAAC;QACzD,MAAM,MAAM,GAAI,CAAC,CAAC,MAAiB,IAAI,SAAS,CAAC;QACjD,OAAO,SAAS,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,CAAC,YAAY,OAAO,CAAC;IACpE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAiB;QACtC,IAAI,CAAC,KAAK,EAAE,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACzE,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAE7D,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAEpC,4BAA4B;QAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,yCAAyC;QACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE1E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC5D,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,0BAA0B;QAC1B,IAAI,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAChD,IAAI,GAAG;oBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7C,0CAA0C;YAC5C,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,IAAI,IAAI,CAAC,SAAS,EAAE,MAAM;YAAE,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACpF,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAC3C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAe;QACnC,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,SAAS,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;gBACvF,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,IAAI,SAAS,IAAI,CAAC,KAAK,GAAG,CAAC;QAC9C,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,mBAAmB;QACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC;gBAAE,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/sealedPack.d.ts

@@ -0,0 +1,90 @@
+/** Version de formato del pack. Ausente = legado (sin AAD). 2 = metadatos ligados como AAD de AES-GCM. */
+export declare const PACK_VERSION = 2;
+/**
+ * Lista blanca de metadatos que pueden viajar EN CLARO junto al pack. Todo lo que no este aqui
+ * se rechaza al sellar (salvo `extraClearKeys` explicito): los metadatos no van cifrados.
+ */
+export declare const CLEAR_METADATA_KEYS: readonly string[];
+export interface DEKShare {
+    index: number;
+    value: string;
+}
+export interface SealedPackMetadata {
+    vehicleId?: string;
+    entityId?: string;
+    entity?: string;
+    appId?: string;
+    instanceId?: string;
+    timestamp: number;
+    recordCount?: number;
+    deviceId?: string;
+    [k: string]: unknown;
+}
+export interface SealedPack {
+    /** Version de formato. Ausente = legado sin AAD. */
+    v?: number;
+    id: string;
+    content_hash: string;
+    ciphertext: string;
+    iv: string;
+    tag: string;
+    shares: DEKShare[];
+    signature: string;
+    publicKey: string;
+    metadata: SealedPackMetadata;
+    chain: string;
+    chainId: number;
+}
+export declare function splitDEK(dek: Uint8Array): DEKShare[];
+export declare function reconstructDEK(shares: DEKShare[]): Uint8Array;
+/**
+ * @deprecated Usa `computeContentHashAsync` (WebCrypto). Se mantiene sincrono (SHA-256 JS puro)
+ * solo por compatibilidad; produce el mismo resultado.
+ */
+export declare function computeContentHash(ciphertext: Uint8Array, metadata: SealedPackMetadata): string;
+export declare function computeContentHashAsync(ciphertext: Uint8Array, metadata: SealedPackMetadata): Promise<string>;
+/** Umbral de Shamir: shares necesarias para reconstruir. */
+export declare const SHAMIR_THRESHOLD = 2;
+/** Indice del unico share que puede residir en la nube. */
+export declare const CLOUD_SHARE_INDEX = 3;
+/** Devuelve una copia del pack SIN shares, apta para almacenar en la nube. */
+export declare function packWithoutShares(pack: SealedPack): SealedPack;
+/** El share que puede subirse a KV (x=3). `null` si no existe. */
+export declare function cloudBoundShare(shares: DEKShare[]): DEKShare | null;
+/**
+ * Guarda de la frontera: lanza si la nube acumularia el umbral o mas shares.
+ * Se usa antes de subir nada, para fallar cerrado en vez de filtrar la clave.
+ */
+export declare function assertCloudSharesSafe(cloudShareCount: number): void;
+/**
+ * Par de claves Ed25519. Acepta CryptoKeyPair (WebCrypto) o, por compat, el par de
+ * `KeyObject` de node (se detecta por duck-typing, sin depender de modulos de node).
+ */
+export type SealedPackKeyPair = CryptoKeyPair | {
+    privateKey: {
+        export(o: {
+            type: 'pkcs8';
+            format: 'der';
+        }): Uint8Array;
+    };
+    publicKey: {
+        export(o: {
+            type: 'spki';
+            format: 'der';
+        }): Uint8Array;
+    };
+};
+export declare function createSealedPack(payload: Uint8Array, metadata: SealedPackMetadata, keyPair?: SealedPackKeyPair, options?: {
+    extraClearKeys?: string[];
+}): Promise<SealedPack>;
+export declare function unpackSealedPack(pack: SealedPack, shares: DEKShare[]): Promise<Uint8Array>;
+export declare function verifySealedPackHash(pack: SealedPack): Promise<boolean>;
+/** Verifica la firma Ed25519 del content_hash con la publicKey del pack. */
+export declare function verifySealedPackSignature(pack: SealedPack): Promise<boolean>;
+export declare function packMetadataForEntity(entity: string, id: string, appId: string, instanceId: string): SealedPackMetadata;
+/**
+ * @deprecated Eliminado: la version anterior fabricaba un `walletAddress` falso (0x + prefijo de la
+ * publicKey) y emitia eventos con el. El anclaje real en Polygon aun no esta implementado.
+ */
+export declare function registerOnPolygon(_pack: SealedPack, _bus?: unknown): never;
+//# sourceMappingURL=sealedPack.d.ts.map

package/dist/sealedPack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealedPack.d.ts","sourceRoot":"","sources":["../src/sealedPack.ts"],"names":[],"mappings":"AAgBA,0GAA0G;AAC1G,eAAO,MAAM,YAAY,IAAI,CAAC;AAE9B;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAEhD,CAAC;AAEF,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAoBD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,EAAE,CAuBpD;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAa7D;AA8BD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAE/F;AAED,wBAAsB,uBAAuB,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnH;AAeD,4DAA4D;AAC5D,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,2DAA2D;AAC3D,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC,8EAA8E;AAC9E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAE9D;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,GAAG,IAAI,CAEnE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAOnE;AAED;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GACzB,aAAa,GACb;IAAE,UAAU,EAAE;QAAE,MAAM,CAAC,CAAC,EAAE;YAAE,IAAI,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,KAAK,CAAA;SAAE,GAAG,UAAU,CAAA;KAAE,CAAC;IAAC,SAAS,EAAE;QAAE,MAAM,CAAC,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,KAAK,CAAA;SAAE,GAAG,UAAU,CAAA;KAAE,CAAA;CAAE,CAAC;AAoBvJ,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,CAAC,EAAE,iBAAiB,EAC3B,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAC1C,OAAO,CAAC,UAAU,CAAC,CA4BrB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAehG;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7E;AAED,4EAA4E;AAC5E,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAOlF;AAGD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAEvH;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,KAAK,CAE1E"}

package/dist/sealedPack.js

@@ -0,0 +1,233 @@
+// sealedPack.ts — core reusable vault (antes en gara-g app-pwa)
+// Extraído a cores/swal-vault para reuso en gara-g, hosteler-ia, flota, cualquier app SWAL.
+// 100% cifrado: AES-256-GCM + Shamir 2-of-3 sobre DEK + SHA256 content_hash + Ed25519.
+// Cloudflare nunca ve plaintext, solo ciphertext+shares+hash.
+// Pay-per-use: costo solo si se sube a R2; mesh-only gratis (replica P2P en otros nodos gara-g).
+import { bs, concatBytes, fromBase64, fromHex, randomBytes, randomInt, sha256, sha256Sync, toBase64, toHex, utf8, } from './bytes.js';
+const subtle = () => globalThis.crypto.subtle;
+// Cadena de anclaje por defecto (sin dependencia de @swal/econ-sdk; el vault es puro).
+const _econChain = 'polygon';
+const _econChainId = 137;
+/** Version de formato del pack. Ausente = legado (sin AAD). 2 = metadatos ligados como AAD de AES-GCM. */
+export const PACK_VERSION = 2;
+/**
+ * Lista blanca de metadatos que pueden viajar EN CLARO junto al pack. Todo lo que no este aqui
+ * se rechaza al sellar (salvo `extraClearKeys` explicito): los metadatos no van cifrados.
+ */
+export const CLEAR_METADATA_KEYS = [
+    'vehicleId', 'entityId', 'entity', 'appId', 'instanceId', 'timestamp', 'recordCount', 'deviceId',
+];
+function mod257(n) {
+    const r = n % 257;
+    return r < 0 ? r + 257 : r;
+}
+function modInverse257(n) {
+    const a = mod257(n);
+    if (a === 0)
+        throw new Error('Division by zero GF257');
+    let res = 1;
+    let base = a;
+    let exp = 255;
+    while (exp > 0) {
+        if (exp % 2 === 1)
+            res = (res * base) % 257;
+        base = (base * base) % 257;
+        exp = Math.floor(exp / 2);
+    }
+    return res;
+}
+export function splitDEK(dek) {
+    if (dek.length !== 32)
+        throw new Error('DEK 32 bytes');
+    const s1 = new Uint8Array(32);
+    const s2 = new Uint8Array(32);
+    const s3 = new Uint8Array(32);
+    for (let i = 0; i < 32; i++) {
+        const secret = dek[i];
+        let a1, y1, y2, y3;
+        do {
+            a1 = randomInt(1, 257);
+            y1 = mod257(secret + a1 * 1);
+            y2 = mod257(secret + a1 * 2);
+            y3 = mod257(secret + a1 * 3);
+        } while (y1 === 256 || y2 === 256 || y3 === 256);
+        s1[i] = y1;
+        s2[i] = y2;
+        s3[i] = y3;
+    }
+    return [
+        { index: 1, value: toBase64(s1) },
+        { index: 2, value: toBase64(s2) },
+        { index: 3, value: toBase64(s3) },
+    ];
+}
+export function reconstructDEK(shares) {
+    if (shares.length < 2)
+        throw new Error('At least 2 shares are required to reconstruct DEK');
+    const s1 = shares[0], s2 = shares[1];
+    const x1 = s1.index, x2 = s2.index;
+    if (x1 === x2)
+        throw new Error('shares duplicate x');
+    const y1 = fromBase64(s1.value);
+    const y2 = fromBase64(s2.value);
+    if (y1.length !== 32 || y2.length !== 32)
+        throw new Error('share length 32');
+    const num1 = mod257(-x2), den1 = mod257(x1 - x2), L1 = mod257(num1 * modInverse257(den1));
+    const num2 = mod257(-x1), den2 = mod257(x2 - x1), L2 = mod257(num2 * modInverse257(den2));
+    const dek = new Uint8Array(32);
+    for (let i = 0; i < 32; i++)
+        dek[i] = mod257(y1[i] * L1 + y2[i] * L2);
+    return dek;
+}
+function canonicalJson(v) {
+    if (Array.isArray(v))
+        return `[${v.map(canonicalJson).join(',')}]`;
+    if (v && typeof v === 'object') {
+        const o = v;
+        return `{${Object.keys(o).sort().filter((k) => o[k] !== undefined)
+            .map((k) => `${JSON.stringify(k)}:${canonicalJson(o[k])}`).join(',')}}`;
+    }
+    return JSON.stringify(v) ?? 'null';
+}
+/** AAD de AES-GCM (v2): los metadatos quedan autenticados; alterarlos rompe el descifrado. */
+function metadataAad(metadata) {
+    return utf8(`swal-vault/v${PACK_VERSION}|${canonicalJson(metadata)}`);
+}
+function assertMetadataWhitelisted(metadata, extra) {
+    const allowed = new Set([...CLEAR_METADATA_KEYS, ...extra]);
+    for (const k of Object.keys(metadata)) {
+        if (!allowed.has(k)) {
+            throw new Error(`Metadato "${k}" no esta en la lista blanca de metadatos en claro (usa extraClearKeys si es intencional)`);
+        }
+    }
+}
+function contentHashInput(ciphertext, metadata) {
+    return concatBytes(ciphertext, utf8(JSON.stringify(metadata, Object.keys(metadata).sort())));
+}
+/**
+ * @deprecated Usa `computeContentHashAsync` (WebCrypto). Se mantiene sincrono (SHA-256 JS puro)
+ * solo por compatibilidad; produce el mismo resultado.
+ */
+export function computeContentHash(ciphertext, metadata) {
+    return '0x' + toHex(sha256Sync(contentHashInput(ciphertext, metadata)));
+}
+export async function computeContentHashAsync(ciphertext, metadata) {
+    return '0x' + toHex(await sha256(contentHashInput(ciphertext, metadata)));
+}
+// ── Frontera de confianza: qué NO puede vivir en la nube ─────────────────────────
+//
+// El reparto es Shamir 2-de-3: con DOS shares cualquiera se reconstruye la DEK. Por tanto la nube
+// (R2 + D1 + KV) **nunca** puede acumular 2 shares, o el operador podria leer los datos y la
+// promesa "el operador no puede leer" seria falsa.
+//
+// Reparto correcto:
+//   * share x=1 -> DISPOSITIVO (nunca se sube)
+//   * share x=2 -> RECUPERACION (nunca se sube; se entrega al usuario en el alta)
+//   * share x=3 -> KV (unico share que la nube puede tener)
+//
+// Asi R2+D1+KV juntos suman 1 share y no alcanzan el umbral.
+/** Umbral de Shamir: shares necesarias para reconstruir. */
+export const SHAMIR_THRESHOLD = 2;
+/** Indice del unico share que puede residir en la nube. */
+export const CLOUD_SHARE_INDEX = 3;
+/** Devuelve una copia del pack SIN shares, apta para almacenar en la nube. */
+export function packWithoutShares(pack) {
+    return { ...pack, shares: [] };
+}
+/** El share que puede subirse a KV (x=3). `null` si no existe. */
+export function cloudBoundShare(shares) {
+    return shares.find((s) => s.index === CLOUD_SHARE_INDEX) ?? null;
+}
+/**
+ * Guarda de la frontera: lanza si la nube acumularia el umbral o mas shares.
+ * Se usa antes de subir nada, para fallar cerrado en vez de filtrar la clave.
+ */
+export function assertCloudSharesSafe(cloudShareCount) {
+    if (cloudShareCount >= SHAMIR_THRESHOLD) {
+        throw new Error(`E2EE: la nube no puede acumular ${cloudShareCount} shares (umbral ${SHAMIR_THRESHOLD}). ` +
+            'Deja en el dispositivo los shares 1 y 2 y sube solo el 3.');
+    }
+}
+async function resolveKeyPair(kp) {
+    if (!kp) {
+        const pair = (await subtle().generateKey({ name: 'Ed25519' }, true, ['sign', 'verify']));
+        return { priv: pair.privateKey, pubSpki: new Uint8Array(await subtle().exportKey('spki', pair.publicKey)) };
+    }
+    const priv = kp.privateKey;
+    if (typeof priv.export === 'function') {
+        const pkcs8 = new Uint8Array(priv.export({ type: 'pkcs8', format: 'der' }));
+        const pubSpki = new Uint8Array(kp.publicKey.export({ type: 'spki', format: 'der' }));
+        return { priv: await subtle().importKey('pkcs8', bs(pkcs8), { name: 'Ed25519' }, false, ['sign']), pubSpki };
+    }
+    return { priv: priv, pubSpki: new Uint8Array(await subtle().exportKey('spki', kp.publicKey)) };
+}
+async function aesKey(dek, usage) {
+    return subtle().importKey('raw', bs(dek), { name: 'AES-GCM' }, false, [usage]);
+}
+export async function createSealedPack(payload, metadata, keyPair, options = {}) {
+    assertMetadataWhitelisted(metadata, options.extraClearKeys ?? []);
+    const dek = randomBytes(32);
+    const iv = randomBytes(12);
+    // WebCrypto devuelve ciphertext||tag(16); se separan para mantener el formato del pack.
+    const sealed = new Uint8Array(await subtle().encrypt({ name: 'AES-GCM', iv: bs(iv), tagLength: 128, additionalData: bs(metadataAad(metadata)) }, await aesKey(dek, 'encrypt'), bs(payload)));
+    const ct = sealed.subarray(0, sealed.length - 16);
+    const tag = sealed.subarray(sealed.length - 16);
+    const shares = splitDEK(dek);
+    const contentHash = await computeContentHashAsync(ct, metadata);
+    const { priv, pubSpki } = await resolveKeyPair(keyPair);
+    const sig = new Uint8Array(await subtle().sign({ name: 'Ed25519' }, priv, bs(utf8(contentHash))));
+    return {
+        v: PACK_VERSION,
+        id: `pack-${globalThis.crypto.randomUUID()}`,
+        content_hash: contentHash,
+        ciphertext: toBase64(ct),
+        iv: toBase64(iv),
+        tag: toBase64(tag),
+        shares,
+        signature: toHex(sig),
+        publicKey: toHex(pubSpki),
+        metadata,
+        chain: _econChain,
+        chainId: _econChainId,
+    };
+}
+export async function unpackSealedPack(pack, shares) {
+    const dek = reconstructDEK(shares);
+    const ct = fromBase64(pack.ciphertext);
+    const iv = fromBase64(pack.iv);
+    const tag = fromBase64(pack.tag);
+    if (pack.v !== undefined && pack.v !== PACK_VERSION)
+        throw new Error(`Version de pack no soportada: ${pack.v}`);
+    // Legado (sin `v`): sin AAD. Un pack v2 al que se le quita `v` falla por tag al no coincidir el AAD.
+    const params = { name: 'AES-GCM', iv: bs(iv), tagLength: 128 };
+    if (pack.v === PACK_VERSION)
+        params.additionalData = bs(metadataAad(pack.metadata));
+    const dec = await subtle().decrypt(params, await aesKey(dek, 'decrypt'), bs(concatBytes(ct, tag)));
+    return new Uint8Array(dec);
+}
+export async function verifySealedPackHash(pack) {
+    const exp = await computeContentHashAsync(fromBase64(pack.ciphertext), pack.metadata);
+    return exp.toLowerCase() === pack.content_hash.toLowerCase();
+}
+/** Verifica la firma Ed25519 del content_hash con la publicKey del pack. */
+export async function verifySealedPackSignature(pack) {
+    try {
+        const key = await subtle().importKey('spki', bs(fromHex(pack.publicKey)), { name: 'Ed25519' }, false, ['verify']);
+        return await subtle().verify({ name: 'Ed25519' }, key, bs(fromHex(pack.signature)), bs(utf8(pack.content_hash)));
+    }
+    catch {
+        return false;
+    }
+}
+// Helper generico para cualquier entity (no solo vehicle)
+export function packMetadataForEntity(entity, id, appId, instanceId) {
+    return { entity, entityId: id, appId, instanceId, timestamp: Date.now() };
+}
+/**
+ * @deprecated Eliminado: la version anterior fabricaba un `walletAddress` falso (0x + prefijo de la
+ * publicKey) y emitia eventos con el. El anclaje real en Polygon aun no esta implementado.
+ */
+export function registerOnPolygon(_pack, _bus) {
+    throw new Error('registerOnPolygon: not implemented');
+}
+//# sourceMappingURL=sealedPack.js.map

package/dist/sealedPack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealedPack.js","sourceRoot":"","sources":["../src/sealedPack.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,4FAA4F;AAC5F,uFAAuF;AACvF,8DAA8D;AAC9D,iGAAiG;AAEjG,OAAO,EACL,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,GACxG,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAE9C,uFAAuF;AACvF,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,0GAA0G;AAC1G,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAE9B;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU;CACjG,CAAC;AAoCF,SAAS,MAAM,CAAC,CAAS;IACvB,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AACD,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACvD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;QACf,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC;YAAE,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;QAC5C,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;QAC3B,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAe;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,EAAU,EAAE,EAAU,EAAE,EAAU,EAAE,EAAU,CAAC;QACnD,GAAG,CAAC;YACF,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvB,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7B,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7B,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/B,CAAC,QAAQ,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE;QACjD,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACX,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACX,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACb,CAAC;IACD,OAAO;QACL,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE;QACjC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE;QACjC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC5F,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;IACnC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AACrC,CAAC;AAED,8FAA8F;AAC9F,SAAS,WAAW,CAAC,QAA4B;IAC/C,OAAO,IAAI,CAAC,eAAe,YAAY,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,yBAAyB,CAAC,QAA4B,EAAE,KAAwB;IACvF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,mBAAmB,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,2FAA2F,CAAC,CAAC;QAC7H,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAsB,EAAE,QAA4B;IAC5E,OAAO,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAsB,EAAE,QAA4B;IACrF,OAAO,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAAsB,EAAE,QAA4B;IAChG,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,oFAAoF;AACpF,EAAE;AACF,kGAAkG;AAClG,6FAA6F;AAC7F,mDAAmD;AACnD,EAAE;AACF,oBAAoB;AACpB,+CAA+C;AAC/C,kFAAkF;AAClF,4DAA4D;AAC5D,EAAE;AACF,6DAA6D;AAE7D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,iBAAiB,CAAC,IAAI,IAAI,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,eAAuB;IAC3D,IAAI,eAAe,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,mCAAmC,eAAe,mBAAmB,gBAAgB,KAAK;YACxF,2DAA2D,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAUD,KAAK,UAAU,cAAc,CAAC,EAAsB;IAClD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAkB,CAAC;QAC1G,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAC9G,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,UAAiB,CAAC;IAClC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,IAAI,UAAU,CAAE,EAAE,CAAC,SAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9F,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAC/G,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAiB,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,SAAsB,CAAC,CAAC,EAAE,CAAC;AAC3H,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAe,EAAE,KAA4B;IACjE,OAAO,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAmB,EACnB,QAA4B,EAC5B,OAA2B,EAC3B,OAAO,GAAkC,EAAE;IAE3C,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,wFAAwF;IACxF,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,MAAM,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAC9J,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO;QACL,CAAC,EAAE,YAAY;QACf,EAAE,EAAE,QAAQ,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE;QAC5C,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxB,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChB,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC;QAClB,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC;QACrB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QACzB,QAAQ;QACR,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,YAAY;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAgB,EAAE,MAAkB;IACzE,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAChH,qGAAqG;IACrG,MAAM,MAAM,GAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC7E,IAAI,IAAI,CAAC,CAAC,KAAK,YAAY;QAAE,MAAM,CAAC,cAAc,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,OAAO,CAChC,MAAM,EACN,MAAM,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,EAC5B,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CACzB,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAgB;IACzD,MAAM,GAAG,GAAG,MAAM,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAgB;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClH,OAAO,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,EAAU,EAAE,KAAa,EAAE,UAAkB;IACjG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAiB,EAAE,IAAc;IACjE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACxD,CAAC"}

package/dist/web/vault-client.d.ts

@@ -0,0 +1,64 @@
+import { type DEKShare } from '../sealedPack.js';
+export declare const MIN_PBKDF2_ITERATIONS = 310000;
+export declare const DEFAULT_PBKDF2_ITERATIONS = 600000;
+export declare class VaultError extends Error {
+    code: 'LOCKED' | 'BAD_KEY' | 'BAD_FORMAT' | 'NO_PASSKEY' | 'SHARE_ALREADY_SHOWN' | 'NO_MESH_KEY' | 'BAD_PARAMS';
+    constructor(code: 'LOCKED' | 'BAD_KEY' | 'BAD_FORMAT' | 'NO_PASSKEY' | 'SHARE_ALREADY_SHOWN' | 'NO_MESH_KEY' | 'BAD_PARAMS', message: string);
+}
+/** Proveedor de salida PRF de un passkey (inyectable; por defecto usa WebAuthn). */
+export interface PasskeyPrfProvider {
+    /** Devuelve >=32 bytes deterministas para `salt`, o lanza si el autenticador no soporta PRF. */
+    getPrfOutput(salt: Uint8Array): Promise<Uint8Array>;
+}
+export interface VaultClientOptions {
+    storage: 'idb';
+    dbName?: string;
+    pbkdf2Iterations?: number;
+    passkey?: PasskeyPrfProvider;
+    /** Para WebAuthn por defecto. */
+    rpId?: string;
+}
+export interface DeviceIdentity {
+    deviceId: string;
+    /** SPKI en base64url. */
+    publicKey: string;
+    publicKeyJwk: JsonWebKey;
+}
+export type UnlockOptions = {
+    passphrase: string;
+} | {
+    passkey: true;
+};
+export interface MeshKey {
+    /** Bytes crudos (32). Evita retenerlos mas de lo necesario. */
+    raw: Uint8Array;
+    /** CryptoKey AES-GCM no extraible, derivada de los mismos bytes. */
+    key: CryptoKey;
+}
+export interface VaultClient {
+    getDeviceIdentity(): Promise<DeviceIdentity>;
+    sign(data: Uint8Array): Promise<Uint8Array>;
+    verify(publicKeyJwk: JsonWebKey, data: Uint8Array, signature: Uint8Array): Promise<boolean>;
+    /** Disponibilidad probable de passkeys (la confirmacion de PRF solo ocurre al usarlo). */
+    isPasskeyPrfAvailable(): boolean;
+    /** Deriva la KEK (passphrase o passkey PRF) y la mantiene en memoria. */
+    unlock(opts: UnlockOptions): Promise<void>;
+    /** Como unlock, pero con passkey si hay soporte; si no, usa passphrase. */
+    unlockPreferPasskey(passphrase: string): Promise<'passkey' | 'passphrase'>;
+    lock(): void;
+    isUnlocked(): boolean;
+    wrapKey(raw32: Uint8Array, kek?: CryptoKey): Promise<string>;
+    unwrapKey(wrapped: string, kek?: CryptoKey): Promise<Uint8Array>;
+    getOrCreateMeshKey(): Promise<MeshKey>;
+    /** Devuelve el share de recuperacion (x=2) UNA sola vez; luego lanza SHARE_ALREADY_SHOWN. */
+    exportRecoveryShare(): Promise<{
+        recoveryShare: DEKShare;
+        cloudShare: DEKShare;
+    }>;
+    /** Reconstruye la meshKey con el share de recuperacion + el share del dispositivo. */
+    recoverMeshKey(recoveryShare: DEKShare): Promise<Uint8Array>;
+    /** Recupera la meshKey y la re-envuelve con una nueva passphrase. */
+    resetPassphrase(recoveryShare: DEKShare, newPassphrase: string): Promise<void>;
+}
+export declare function createVaultClient(opts: VaultClientOptions): VaultClient;
+//# sourceMappingURL=vault-client.d.ts.map

package/dist/web/vault-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-client.d.ts","sourceRoot":"","sources":["../../src/web/vault-client.ts"],"names":[],"mappings":"AAYA,OAAO,EAA4B,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE3E,eAAO,MAAM,qBAAqB,SAAU,CAAC;AAC7C,eAAO,MAAM,yBAAyB,SAAU,CAAC;AAEjD,qBAAa,UAAW,SAAQ,KAAK;IAE1B,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,qBAAqB,GAAG,aAAa,GAAG,YAAY;IADxH,YACS,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,YAAY,GAAG,qBAAqB,GAAG,aAAa,GAAG,YAAY,EACtH,OAAO,EAAE,MAAM,EAIhB;CACF;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,gGAAgG;IAChG,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,OAAO;IACtB,+DAA+D;IAC/D,GAAG,EAAE,UAAU,CAAC;IAChB,oEAAoE;IACpE,GAAG,EAAE,SAAS,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE5F,0FAA0F;IAC1F,qBAAqB,IAAI,OAAO,CAAC;IACjC,yEAAyE;IACzE,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,2EAA2E;IAC3E,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,YAAY,CAAC,CAAC;IAC3E,IAAI,IAAI,IAAI,CAAC;IACb,UAAU,IAAI,OAAO,CAAC;IAEtB,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjE,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,6FAA6F;IAC7F,mBAAmB,IAAI,OAAO,CAAC;QAAE,aAAa,EAAE,QAAQ,CAAC;QAAC,UAAU,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IAClF,sFAAsF;IACtF,cAAc,CAAC,aAAa,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,qEAAqE;IACrE,eAAe,CAAC,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChF;AAyHD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG,WAAW,CAgJvE"}