@swal/vault 0.0.0-stage → 0.2.0

package/dist/web/vault-client.js

@@ -0,0 +1,249 @@
+// web/vault-client.ts — VaultClient para navegador (PWA). Solo WebCrypto + IndexedDB.
+// Nunca realiza peticiones de red. Nada sale del dispositivo salvo lo que el llamador decida
+// hacer con el share de recuperacion o con la meshKey.
+//
+// Modelo de claves:
+//   * identidad de dispositivo: ECDSA P-256, CryptoKey NO extraible guardada en IndexedDB.
+//   * KEK (AES-GCM, no extraible): derivada de passphrase (PBKDF2-SHA256) o de passkey PRF (HKDF).
+//   * meshKey (32 bytes): se guarda siempre envuelta (AES-GCM) con la KEK.
+//   * recuperacion: Shamir 2-de-3 sobre la meshKey; share 1 queda en el dispositivo,
+//     share 2 se muestra una sola vez al usuario, share 3 se devuelve para custodia opcional.
+import { bs, fromBase64Url, randomBytes, sha256, toBase64Url, utf8 } from '../bytes.js';
+import { reconstructDEK, splitDEK } from '../sealedPack.js';
+export const MIN_PBKDF2_ITERATIONS = 310_000;
+export const DEFAULT_PBKDF2_ITERATIONS = 600_000;
+export class VaultError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'VaultError';
+    }
+}
+// ── IndexedDB mini wrapper ────────────────────────────────────────────────────
+const STORE = 'kv';
+function openDb(name) {
+    return new Promise((resolve, reject) => {
+        const req = indexedDB.open(name, 1);
+        req.onupgradeneeded = () => req.result.createObjectStore(STORE);
+        req.onsuccess = () => resolve(req.result);
+        req.onerror = () => reject(req.error);
+    });
+}
+function tx(db, mode, fn) {
+    return new Promise((resolve, reject) => {
+        const t = db.transaction(STORE, mode);
+        const r = fn(t.objectStore(STORE));
+        t.oncomplete = () => resolve(r.result);
+        t.onerror = () => reject(t.error);
+        t.onabort = () => reject(t.error);
+    });
+}
+// ── Primitivas ────────────────────────────────────────────────────────────────
+const subtle = () => globalThis.crypto.subtle;
+async function kekFromPassphrase(passphrase, salt, iterations) {
+    const base = await subtle().importKey('raw', bs(utf8(passphrase.normalize('NFKC'))), 'PBKDF2', false, ['deriveKey']);
+    return subtle().deriveKey({ name: 'PBKDF2', hash: 'SHA-256', salt: bs(salt), iterations }, base, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+async function kekFromPrf(prf, salt) {
+    const base = await subtle().importKey('raw', bs(prf), 'HKDF', false, ['deriveKey']);
+    return subtle().deriveKey({ name: 'HKDF', hash: 'SHA-256', salt: bs(salt), info: bs(utf8('swal-vault/kek/v1')) }, base, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+/** Formato: "v1.<iv b64url>.<ct+tag b64url>" */
+async function wrapWith(raw, kek) {
+    const iv = randomBytes(12);
+    const ct = new Uint8Array(await subtle().encrypt({ name: 'AES-GCM', iv: bs(iv) }, kek, bs(raw)));
+    return `v1.${toBase64Url(iv)}.${toBase64Url(ct)}`;
+}
+async function unwrapWith(wrapped, kek) {
+    const parts = wrapped.split('.');
+    if (parts.length !== 3 || parts[0] !== 'v1')
+        throw new VaultError('BAD_FORMAT', 'formato de clave envuelta invalido');
+    try {
+        const pt = await subtle().decrypt({ name: 'AES-GCM', iv: bs(fromBase64Url(parts[1])) }, kek, bs(fromBase64Url(parts[2])));
+        return new Uint8Array(pt);
+    }
+    catch {
+        throw new VaultError('BAD_KEY', 'no se pudo desenvolver la clave (KEK incorrecta o datos alterados)');
+    }
+}
+function defaultPasskeyProvider(kv, rpId) {
+    if (typeof PublicKeyCredential === 'undefined' || !globalThis.navigator?.credentials)
+        return undefined;
+    return {
+        async getPrfOutput(salt) {
+            const cred = globalThis.navigator.credentials;
+            const idRaw = await kv.get('passkeyCredId');
+            const ext = { prf: { eval: { first: salt } } };
+            let credential;
+            if (!idRaw) {
+                credential = (await cred.create({
+                    publicKey: {
+                        rp: { name: 'SWAL Vault', ...(rpId ? { id: rpId } : {}) },
+                        user: { id: bs(randomBytes(16)), name: 'swal-vault', displayName: 'SWAL Vault' },
+                        challenge: bs(randomBytes(32)),
+                        pubKeyCredParams: [{ type: 'public-key', alg: -7 }, { type: 'public-key', alg: -257 }],
+                        authenticatorSelection: { residentKey: 'preferred', userVerification: 'required' },
+                        extensions: { prf: {} },
+                    },
+                }));
+                if (!credential)
+                    throw new VaultError('NO_PASSKEY', 'creacion de passkey cancelada');
+                if (!credential.getClientExtensionResults().prf?.enabled)
+                    throw new VaultError('NO_PASSKEY', 'el autenticador no soporta PRF');
+                await kv.put('passkeyCredId', new Uint8Array(credential.rawId));
+            }
+            const id = (await kv.get('passkeyCredId'));
+            const asr = (await cred.get({
+                publicKey: {
+                    challenge: bs(randomBytes(32)),
+                    allowCredentials: [{ type: 'public-key', id: bs(id) }],
+                    userVerification: 'required',
+                    extensions: ext,
+                    ...(rpId ? { rpId } : {}),
+                },
+            }));
+            const first = asr?.getClientExtensionResults()?.prf?.results?.first;
+            if (!first)
+                throw new VaultError('NO_PASSKEY', 'el passkey no devolvio salida PRF');
+            return new Uint8Array(first);
+        },
+    };
+}
+// ── Fabrica ───────────────────────────────────────────────────────────────────
+export function createVaultClient(opts) {
+    if (opts.storage !== 'idb')
+        throw new VaultError('BAD_PARAMS', "solo storage: 'idb' esta soportado");
+    const iterations = opts.pbkdf2Iterations ?? DEFAULT_PBKDF2_ITERATIONS;
+    if (iterations < MIN_PBKDF2_ITERATIONS)
+        throw new VaultError('BAD_PARAMS', `pbkdf2Iterations debe ser >= ${MIN_PBKDF2_ITERATIONS}`);
+    const dbName = opts.dbName ?? 'swal-vault';
+    let dbp = null;
+    const db = () => (dbp ??= openDb(dbName));
+    const get = async (k) => (await tx(await db(), 'readonly', (s) => s.get(k)));
+    const put = async (k, v) => {
+        await tx(await db(), 'readwrite', (s) => s.put(v, k));
+    };
+    const passkey = opts.passkey ?? defaultPasskeyProvider({ get, put }, opts.rpId);
+    let kek = null;
+    const needKek = (k) => {
+        const v = k ?? kek;
+        if (!v)
+            throw new VaultError('LOCKED', 'vault bloqueado: llama unlock() primero');
+        return v;
+    };
+    async function salt() {
+        let s = await get('kekSalt');
+        if (!s) {
+            s = randomBytes(16);
+            await put('kekSalt', s);
+        }
+        return s;
+    }
+    async function deriveKek(o) {
+        const s = await salt();
+        if ('passkey' in o) {
+            if (!passkey)
+                throw new VaultError('NO_PASSKEY', 'passkeys no disponibles en este entorno');
+            return kekFromPrf(await passkey.getPrfOutput(s), s);
+        }
+        return kekFromPassphrase(o.passphrase, s, iterations);
+    }
+    async function toMeshKey(raw) {
+        const key = await subtle().importKey('raw', bs(raw), { name: 'AES-GCM' }, false, ['encrypt', 'decrypt']);
+        return { raw, key };
+    }
+    const self = {
+        async getDeviceIdentity() {
+            let pair = await get('deviceKeyPair');
+            if (!pair) {
+                pair = (await subtle().generateKey({ name: 'ECDSA', namedCurve: 'P-256' }, false, ['sign', 'verify']));
+                await put('deviceKeyPair', pair);
+            }
+            const spki = new Uint8Array(await subtle().exportKey('spki', pair.publicKey));
+            const publicKeyJwk = await subtle().exportKey('jwk', pair.publicKey);
+            return {
+                deviceId: toBase64Url((await sha256(spki)).subarray(0, 16)),
+                publicKey: toBase64Url(spki),
+                publicKeyJwk,
+            };
+        },
+        async sign(data) {
+            await self.getDeviceIdentity();
+            const pair = (await get('deviceKeyPair'));
+            return new Uint8Array(await subtle().sign({ name: 'ECDSA', hash: 'SHA-256' }, pair.privateKey, bs(data)));
+        },
+        async verify(jwk, data, signature) {
+            const key = await subtle().importKey('jwk', jwk, { name: 'ECDSA', namedCurve: 'P-256' }, false, ['verify']);
+            return subtle().verify({ name: 'ECDSA', hash: 'SHA-256' }, key, bs(signature), bs(data));
+        },
+        isPasskeyPrfAvailable: () => !!passkey,
+        async unlock(o) {
+            const candidate = await deriveKek(o);
+            // Si ya existe meshKey, valida la KEK (falla con BAD_KEY si es incorrecta).
+            const wrapped = await get('meshKeyWrapped');
+            if (wrapped)
+                await unwrapWith(wrapped, candidate);
+            kek = candidate;
+        },
+        async unlockPreferPasskey(passphrase) {
+            if (passkey) {
+                try {
+                    await self.unlock({ passkey: true });
+                    return 'passkey';
+                }
+                catch (e) {
+                    if (!(e instanceof VaultError) || e.code !== 'NO_PASSKEY') {
+                        // cancelacion del usuario u otro error de WebAuthn: cae a passphrase
+                    }
+                }
+            }
+            await self.unlock({ passphrase });
+            return 'passphrase';
+        },
+        lock() {
+            kek = null;
+        },
+        isUnlocked: () => kek !== null,
+        wrapKey: (raw32, k) => {
+            if (raw32.length !== 32)
+                throw new VaultError('BAD_PARAMS', 'se esperan 32 bytes');
+            return wrapWith(raw32, needKek(k));
+        },
+        unwrapKey: (wrapped, k) => unwrapWith(wrapped, needKek(k)),
+        async getOrCreateMeshKey() {
+            const k = needKek();
+            const wrapped = await get('meshKeyWrapped');
+            if (wrapped)
+                return toMeshKey(await unwrapWith(wrapped, k));
+            const raw = randomBytes(32);
+            await put('meshKeyWrapped', await wrapWith(raw, k));
+            return toMeshKey(raw);
+        },
+        async exportRecoveryShare() {
+            const { raw } = await self.getOrCreateMeshKey();
+            if (await get('recoveryShown'))
+                throw new VaultError('SHARE_ALREADY_SHOWN', 'el share de recuperacion ya se mostro y no puede repetirse');
+            const [device, recoveryShare, cloudShare] = splitDEK(raw);
+            await put('deviceShare', device); // un solo share no revela nada (umbral 2)
+            await put('recoveryShown', true);
+            return { recoveryShare, cloudShare };
+        },
+        async recoverMeshKey(recoveryShare) {
+            const device = await get('deviceShare');
+            if (!device)
+                throw new VaultError('NO_MESH_KEY', 'no hay share de dispositivo');
+            return reconstructDEK([device, recoveryShare]);
+        },
+        async resetPassphrase(recoveryShare, newPassphrase) {
+            const raw = await self.recoverMeshKey(recoveryShare);
+            const s = randomBytes(16);
+            const newKek = await kekFromPassphrase(newPassphrase, s, iterations);
+            await put('kekSalt', s);
+            await put('meshKeyWrapped', await wrapWith(raw, newKek));
+            kek = newKek;
+        },
+    };
+    return self;
+}
+//# sourceMappingURL=vault-client.js.map

package/dist/web/vault-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-client.js","sourceRoot":"","sources":["../../src/web/vault-client.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,6FAA6F;AAC7F,uDAAuD;AACvD,EAAE;AACF,oBAAoB;AACpB,2FAA2F;AAC3F,mGAAmG;AACnG,2EAA2E;AAC3E,qFAAqF;AACrF,8FAA8F;AAE9F,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAiB,MAAM,kBAAkB,CAAC;AAE3E,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAC7C,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAEjD,MAAM,OAAO,UAAW,SAAQ,KAAK;IAE1B,IAAI;IADb,YACS,IAA+G,EACtH,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;oBAHR,IAAI;QAIX,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AA2DD,iFAAiF;AAEjF,MAAM,KAAK,GAAG,IAAI,CAAC;AAEnB,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpC,GAAG,CAAC,eAAe,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChE,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,EAAE,CAAI,EAAe,EAAE,IAAwB,EAAE,EAAwC;IAChG,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAE9C,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,IAAgB,EAAE,UAAkB;IACvF,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACrH,OAAO,MAAM,EAAE,CAAC,SAAS,CACvB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAC/D,IAAI,EACJ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAe,EAAE,IAAgB;IACzD,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACpF,OAAO,MAAM,EAAE,CAAC,SAAS,CACvB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAAE,EACtF,IAAI,EACJ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,KAAK,UAAU,QAAQ,CAAC,GAAe,EAAE,GAAc;IACrD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,MAAM,WAAW,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,GAAc;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,oCAAoC,CAAC,CAAC;IACtH,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC,OAAO,CAC/B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EACpD,GAAG,EACH,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5B,CAAC;QACF,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,oEAAoE,CAAC,CAAC;IACxG,CAAC;AACH,CAAC;AAOD,SAAS,sBAAsB,CAAC,EAAM,EAAE,IAAa;IACnD,IAAI,OAAO,mBAAmB,KAAK,WAAW,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW;QAAE,OAAO,SAAS,CAAC;IACvG,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,IAAI;YACrB,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAa,eAAe,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAA0C,CAAC;YACvF,IAAI,UAAsC,CAAC;YAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC;oBAC9B,SAAS,EAAE;wBACT,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;wBACzD,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE;wBAChF,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;wBAC9B,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;wBACtF,sBAAsB,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE;wBAClF,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,EAA0C;qBAChE;iBACF,CAAC,CAA+B,CAAC;gBAClC,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,+BAA+B,CAAC,CAAC;gBACrF,IAAI,CAAE,UAAU,CAAC,yBAAyB,EAAU,CAAC,GAAG,EAAE,OAAO;oBAC/D,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,gCAAgC,CAAC,CAAC;gBACvE,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAa,eAAe,CAAC,CAAE,CAAC;YACxD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC;gBAC1B,SAAS,EAAE;oBACT,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;oBAC9B,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;oBACtD,gBAAgB,EAAE,UAAU;oBAC5B,UAAU,EAAE,GAAG;oBACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1B;aACF,CAAC,CAA+B,CAAC;YAClC,MAAM,KAAK,GAAI,GAAG,EAAE,yBAAyB,EAAU,EAAE,GAAG,EAAE,OAAO,EAAE,KAAgC,CAAC;YACxG,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,mCAAmC,CAAC,CAAC;YACpF,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,oCAAoC,CAAC,CAAC;IACrG,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;IACtE,IAAI,UAAU,GAAG,qBAAqB;QACpC,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,gCAAgC,qBAAqB,EAAE,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC;IAE3C,IAAI,GAAG,GAAgC,IAAI,CAAC;IAC5C,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,EAAK,CAAS,EAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAkB,CAAC;IACjI,MAAM,GAAG,GAAG,KAAK,EAAE,CAAS,EAAE,CAAU,EAAiB,EAAE;QACzD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAEhF,IAAI,GAAG,GAAqB,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,CAAa,EAAa,EAAE;QAC3C,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QACnB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,yCAAyC,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,KAAK,UAAU,IAAI;QACjB,IAAI,CAAC,GAAG,MAAM,GAAG,CAAa,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YACpB,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,CAAgB;QACvC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;QACvB,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;YAC5F,OAAO,UAAU,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,iBAAiB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,GAAe;QACtC,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QACzG,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAgB;QACxB,KAAK,CAAC,iBAAiB;YACrB,IAAI,IAAI,GAAG,MAAM,GAAG,CAAgB,eAAe,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAkB,CAAC;gBACxH,MAAM,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9E,MAAM,YAAY,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACrE,OAAO;gBACL,QAAQ,EAAE,WAAW,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3D,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC;gBAC5B,YAAY;aACb,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,IAAI;YACb,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAgB,eAAe,CAAC,CAAE,CAAC;YAC1D,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5G,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS;YAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5G,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3F,CAAC;QAED,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO;QAEtC,KAAK,CAAC,MAAM,CAAC,CAAC;YACZ,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;YACrC,4EAA4E;YAC5E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAS,gBAAgB,CAAC,CAAC;YACpD,IAAI,OAAO;gBAAE,MAAM,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAClD,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,UAAU;YAClC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrC,OAAO,SAAS,CAAC;gBACnB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC1D,qEAAqE;oBACvE,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YAClC,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI;YACF,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,IAAI;QAE9B,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACpB,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;YACnF,OAAO,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAE1D,KAAK,CAAC,kBAAkB;YACtB,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAS,gBAAgB,CAAC,CAAC;YACpD,IAAI,OAAO;gBAAE,OAAO,SAAS,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YAC5B,MAAM,GAAG,CAAC,gBAAgB,EAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,KAAK,CAAC,mBAAmB;YACvB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAChD,IAAI,MAAM,GAAG,CAAU,eAAe,CAAC;gBACrC,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,4DAA4D,CAAC,CAAC;YAC5G,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1D,MAAM,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,0CAA0C;YAC5E,MAAM,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,aAAa;YAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAW,aAAa,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC;YAChF,OAAO,cAAc,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,aAAa,EAAE,aAAa;YAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;YACrE,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACxB,MAAM,GAAG,CAAC,gBAAgB,EAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YACzD,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,81 @@
 {
   "name": "@swal/vault",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "SWAL Vault Core: browser-safe end-to-end encryption for local-first apps (AES-256-GCM AEAD, Shamir 2-of-3 key shares, Ed25519-signed sealed packs, optional R2 cloud share). WebCrypto only.",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./web": {
+      "types": "./dist/web/vault-client.d.ts",
+      "import": "./dist/web/vault-client.js"
+    },
+    "./web.js": {
+      "types": "./dist/web/vault-client.d.ts",
+      "import": "./dist/web/vault-client.js"
+    },
+    "./sealedPack": {
+      "types": "./dist/sealedPack.d.ts",
+      "import": "./dist/sealedPack.js"
+    },
+    "./sealedPack.js": {
+      "types": "./dist/sealedPack.d.ts",
+      "import": "./dist/sealedPack.js"
+    },
+    "./r2Client": {
+      "types": "./dist/r2Client.d.ts",
+      "import": "./dist/r2Client.js"
+    },
+    "./r2Client.js": {
+      "types": "./dist/r2Client.d.ts",
+      "import": "./dist/r2Client.js"
+    },
+    "./cloudShare": {
+      "types": "./dist/cloudShare.d.ts",
+      "import": "./dist/cloudShare.js"
+    },
+    "./cloudShare.js": {
+      "types": "./dist/cloudShare.d.ts",
+      "import": "./dist/cloudShare.js"
+    }
+  },
+  "scripts": {
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "build": "tsc -p tsconfig.build.json",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "devDependencies": {
+    "@types/node": "26.6.4",
+    "fake-indexeddb": "6.2.5",
+    "typescript": "7.0.2",
+    "vitest": "5.0.3"
+  },
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/iberi22/swal-vault-core.git"
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "LICENSE"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "sideEffects": false,
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "e2ee",
+    "webcrypto",
+    "aes-gcm",
+    "shamir",
+    "local-first",
+    "encryption"
+  ]
+}

package/src/bytes.ts

@@ -0,0 +1,126 @@
+// bytes.ts — helpers Uint8Array <-> base64 / base64url / hex (sin Buffer, aptos para navegador)
+
+export function utf8(s: string): Uint8Array {
+  return new TextEncoder().encode(s);
+}
+
+export function fromUtf8(b: Uint8Array): string {
+  return new TextDecoder().decode(b);
+}
+
+export function concatBytes(...parts: Uint8Array[]): Uint8Array {
+  const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+  let o = 0;
+  for (const p of parts) {
+    out.set(p, o);
+    o += p.length;
+  }
+  return out;
+}
+
+export function toBase64(b: Uint8Array): string {
+  let s = '';
+  for (let i = 0; i < b.length; i += 0x8000) s += String.fromCharCode(...b.subarray(i, i + 0x8000));
+  return btoa(s);
+}
+
+export function fromBase64(s: string): Uint8Array {
+  const bin = atob(s);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+
+export function toBase64Url(b: Uint8Array): string {
+  return toBase64(b).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+
+export function fromBase64Url(s: string): Uint8Array {
+  const t = s.replace(/-/g, '+').replace(/_/g, '/');
+  return fromBase64(t + '='.repeat((4 - (t.length % 4)) % 4));
+}
+
+export function toHex(b: Uint8Array): string {
+  let s = '';
+  for (const x of b) s += x.toString(16).padStart(2, '0');
+  return s;
+}
+
+export function fromHex(h: string): Uint8Array {
+  if (h.length % 2) throw new Error('hex invalido');
+  const out = new Uint8Array(h.length / 2);
+  for (let i = 0; i < out.length; i++) out[i] = parseInt(h.slice(i * 2, i * 2 + 2), 16);
+  return out;
+}
+
+/** Bytes aleatorios criptograficos (WebCrypto). */
+export function randomBytes(n: number): Uint8Array {
+  const out = new Uint8Array(n);
+  globalThis.crypto.getRandomValues(out);
+  return out;
+}
+
+/** Entero uniforme en [min, max) sin sesgo (rejection sampling). */
+export function randomInt(min: number, max: number): number {
+  const range = max - min;
+  const limit = Math.floor(0x100000000 / range) * range;
+  const buf = new Uint32Array(1);
+  do globalThis.crypto.getRandomValues(buf);
+  while (buf[0] >= limit);
+  return min + (buf[0] % range);
+}
+
+/** Cast para TS >=5.7 (Uint8Array<ArrayBufferLike> -> BufferSource). */
+export function bs(b: Uint8Array): BufferSource {
+  return b as unknown as BufferSource;
+}
+
+/** SHA-256 con WebCrypto. */
+export async function sha256(b: Uint8Array): Promise<Uint8Array> {
+  return new Uint8Array(await globalThis.crypto.subtle.digest('SHA-256', bs(b)));
+}
+
+/** SHA-256 sincrono en JS puro (solo para el API legacy computeContentHash sincrono). */
+export function sha256Sync(msg: Uint8Array): Uint8Array {
+  const K = new Uint32Array([
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+  ]);
+  const H = new Uint32Array([
+    0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+  ]);
+  const len = msg.length;
+  const padded = new Uint8Array(((len + 9 + 63) >> 6) << 6);
+  padded.set(msg);
+  padded[len] = 0x80;
+  const dv = new DataView(padded.buffer);
+  dv.setUint32(padded.length - 8, Math.floor((len * 8) / 0x100000000));
+  dv.setUint32(padded.length - 4, (len * 8) >>> 0);
+  const w = new Uint32Array(64);
+  const rotr = (x: number, n: number) => (x >>> n) | (x << (32 - n));
+  for (let off = 0; off < padded.length; off += 64) {
+    for (let i = 0; i < 16; i++) w[i] = dv.getUint32(off + i * 4);
+    for (let i = 16; i < 64; i++) {
+      const s0 = rotr(w[i - 15], 7) ^ rotr(w[i - 15], 18) ^ (w[i - 15] >>> 3);
+      const s1 = rotr(w[i - 2], 17) ^ rotr(w[i - 2], 19) ^ (w[i - 2] >>> 10);
+      w[i] = (w[i - 16] + s0 + w[i - 7] + s1) >>> 0;
+    }
+    let [a, b, c, d, e, f, g, h] = H;
+    for (let i = 0; i < 64; i++) {
+      const t1 = (h + (rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25)) + ((e & f) ^ (~e & g)) + K[i] + w[i]) >>> 0;
+      const t2 = ((rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22)) + ((a & b) ^ (a & c) ^ (b & c))) >>> 0;
+      h = g; g = f; f = e; e = (d + t1) >>> 0; d = c; c = b; b = a; a = (t1 + t2) >>> 0;
+    }
+    H[0] += a; H[1] += b; H[2] += c; H[3] += d; H[4] += e; H[5] += f; H[6] += g; H[7] += h;
+  }
+  const out = new Uint8Array(32);
+  const odv = new DataView(out.buffer);
+  for (let i = 0; i < 8; i++) odv.setUint32(i * 4, H[i]);
+  return out;
+}

package/src/cloudShare.ts

@@ -0,0 +1,27 @@
+// cloudShare.ts — interfaz agnostica de almacenamiento para el unico share que la nube puede tener (x=3).
+// Implementala con D1 (recomendado: 100.000 filas/dia), KV (1 escritura por registro; cupo de 1.000
+// escrituras/dia por cuenta de Cloudflare) o memoria en tests. El vault no depende de ninguna.
+import { assertCloudSharesSafe, CLOUD_SHARE_INDEX, cloudBoundShare, type DEKShare, type SealedPack } from './sealedPack.js';
+
+export interface CloudShareStore {
+  /** Guarda el share x=3 del pack `packId`. */
+  put(packId: string, share: DEKShare): Promise<void>;
+  get(packId: string): Promise<DEKShare | null>;
+  delete(packId: string): Promise<void>;
+}
+
+/** Guarda en `store` el unico share permitido (x=3) de un pack recien sellado. Lanza si no existe. */
+export async function storeCloudShare(store: CloudShareStore, pack: SealedPack): Promise<void> {
+  const share = cloudBoundShare(pack.shares);
+  if (!share) throw new Error(`El pack no tiene el share x=${CLOUD_SHARE_INDEX}`);
+  assertCloudSharesSafe(1);
+  await store.put(pack.id, share);
+}
+
+/** Implementacion en memoria (tests / mesh-only). */
+export class MemoryCloudShareStore implements CloudShareStore {
+  private m = new Map<string, DEKShare>();
+  async put(id: string, s: DEKShare) { if (s.index !== CLOUD_SHARE_INDEX) throw new Error('solo se admite el share x=3'); this.m.set(id, { ...s }); }
+  async get(id: string) { const s = this.m.get(id); return s ? { ...s } : null; }
+  async delete(id: string) { this.m.delete(id); }
+}

package/src/index.ts

@@ -0,0 +1,4 @@
+// @swal/vault — entrypoint reusable
+export * from './sealedPack.js';
+export * from './r2Client.js';
+export * from './cloudShare.js';

package/src/r2Client.ts

@@ -0,0 +1,123 @@
+// r2Client.ts — core reusable R2 vault (antes gara-g especifico)
+// Reusable para cualquier app SWAL: gara-g, hosteler-ia, flota. Pay-per-use + mesh-only fallback.
+// Si hay binding SWAL_R2 (Cloudflare), usa R2 real via fetch/Worker. Si no, memoryStore (mesh-only P2P replica).
+// Path generico: packs/{appId}/{instanceId}/{entity}/{content_hash}.json
+import type { SealedPack, SealedPackMetadata } from './sealedPack.js';
+import { assertCloudSharesSafe, packWithoutShares, verifySealedPackHash } from './sealedPack.js';
+
+export interface R2ClientConfig {
+  bucketName?: string;
+  endpointUrl?: string;
+  accessKeyId?: string;
+  secretAccessKey?: string;
+  // Cloudflare binding real (cuando corre en Worker/Pages)
+  r2Binding?: any; // R2Bucket
+  appId?: string;
+  instanceId?: string;
+}
+
+export class R2StorageClient {
+  private bucketName: string;
+  private endpointUrl: string;
+  private r2Binding: any | null;
+  private appId: string;
+  private instanceId: string;
+  private memoryStore: Map<string, SealedPack> = new Map();
+
+  constructor(config: R2ClientConfig = {}) {
+    this.bucketName = config.bucketName || `swal-${config.appId || 'app'}-vault`;
+    this.endpointUrl = config.endpointUrl || 'https://r2.swal.dev';
+    this.r2Binding = config.r2Binding ?? null;
+    this.appId = config.appId || 'my-app';
+    this.instanceId = config.instanceId || 'default';
+  }
+
+  getBucketName(): string { return this.bucketName; }
+  isCloudEnabled(): boolean { return !!this.r2Binding; }
+
+  private r2KeyForPack(pack: SealedPack): string {
+    const m: any = pack.metadata;
+    const app = (m.appId as string) || this.appId;
+    const inst = (m.instanceId as string) || this.instanceId;
+    const entity = (m.entity as string) || 'generic';
+    return `packs/${app}/${inst}/${entity}/${pack.content_hash}.json`;
+  }
+
+  /**
+   * Sube el pack SIN shares (frontera E2EE). Lanza si el pack trae >=2 shares: el llamador debe
+   * quitar los shares 1 y 2 y guardar el 3 aparte (ver `CloudShareStore`).
+   */
+  async uploadSealedPack(input: SealedPack): Promise<{ url: string; contentHash: string; key: string }> {
+    if (!input?.content_hash) throw new Error('SealedPack sin content_hash');
+    assertCloudSharesSafe(input.shares?.length ?? 0);
+    const pack = packWithoutShares(input);
+    const ok = await verifySealedPackHash(pack);
+    if (!ok) throw new Error('SealedPack content_hash mismatch');
+
+    const key = this.r2KeyForPack(pack);
+
+    // Cloud real si hay binding
+    if (this.r2Binding?.put) {
+      await this.r2Binding.put(key, JSON.stringify(pack), { httpMetadata: { contentType: 'application/json' } });
+    }
+    // Siempre memory replica (mesh fallback)
+    this.memoryStore.set(key, JSON.parse(JSON.stringify(pack)));
+    this.memoryStore.set(pack.content_hash, JSON.parse(JSON.stringify(pack)));
+
+    const url = `${this.endpointUrl}/${this.bucketName}/${key}`;
+    return { url, contentHash: pack.content_hash, key };
+  }
+
+  async getSealedPack(keyOrHash: string): Promise<SealedPack | null> {
+    // Intenta R2 real primero
+    if (this.r2Binding?.get) {
+      try {
+        const obj = await this.r2Binding.get(keyOrHash);
+        if (obj) return JSON.parse(await obj.text());
+        // intenta como hash -> busca key generica
+      } catch {}
+    }
+    const p = this.memoryStore.get(keyOrHash);
+    return p ? JSON.parse(JSON.stringify(p)) : null;
+  }
+
+  async deleteSealedPack(keyOrHash: string): Promise<boolean> {
+    if (this.r2Binding?.delete) try { await this.r2Binding.delete(keyOrHash); } catch {}
+    const pack = this.memoryStore.get(keyOrHash);
+    if (!pack) return false;
+    this.memoryStore.delete(keyOrHash);
+    this.memoryStore.delete(pack.content_hash);
+    this.memoryStore.delete(this.r2KeyForPack(pack));
+    return true;
+  }
+
+  async verifyR2PackIntegrity(keyOrHash: string): Promise<boolean> {
+    const p = await this.getSealedPack(keyOrHash);
+    if (!p) return false;
+    return verifySealedPackHash(p);
+  }
+
+  async listSealedPacks(prefix?: string): Promise<string[]> {
+    if (this.r2Binding?.list) {
+      try {
+        const listed = await this.r2Binding.list({ prefix: prefix ?? `packs/${this.appId}/` });
+        return (listed.objects ?? []).map((o: any) => o.key);
+      } catch {}
+    }
+    const keys = new Set<string>();
+    for (const k of this.memoryStore.keys()) if (k.startsWith('packs/')) keys.add(k);
+    const pref = prefix ?? `packs/${this.appId}/`;
+    return [...keys].filter((k) => k.startsWith(pref));
+  }
+
+  // Helper pay-per-use: calcula bytes para metering
+  async estimateStoredBytes(): Promise<number> {
+    const keys = await this.listSealedPacks();
+    let total = 0;
+    for (const k of keys) {
+      const p = await this.getSealedPack(k);
+      if (p) total += JSON.stringify(p).length;
+    }
+    return total;
+  }
+}