@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/internal/crypto/encapsulation/unwrapDek.js

@@ -0,0 +1,37 @@
+import { ml_kem1024 } from "@noble/post-quantum/ml-kem.js";
+import { toFingerprint } from "../fingerprint.js";
+import { AES_GCM_IV_BYTES, AES_GCM_TAG_BYTES } from "../symmetric.js";
+import { ML_KEM1024_CIPHERTEXT_BYTES, ML_KEM1024_PUBLIC_KEY_BYTES, ML_KEM1024_SECRET_KEY_BYTES, } from "./generateKeyPair.js";
+/** ML-KEM-1024 secret key layout: dk_pke (1536 bytes) || ek_pke (1568 bytes) || H(ek) || z */
+const ML_KEM1024_PK_OFFSET = 1536;
+/**
+ * Unwrap a DEK from a set of recipient entries using a recipient's ML-KEM secret key.
+ * Finds the matching recipient entry by key fingerprint lookup.
+ */
+export async function unwrapDek(recipients, secretKey) {
+    if (secretKey.length !== ML_KEM1024_SECRET_KEY_BYTES) {
+        throw new Error("ML-KEM-1024 secret key has invalid length");
+    }
+    const publicKey = secretKey.slice(ML_KEM1024_PK_OFFSET, ML_KEM1024_PK_OFFSET + ML_KEM1024_PUBLIC_KEY_BYTES);
+    const keyFingerprint = await toFingerprint(publicKey);
+    const recipient = recipients.find((r) => r.keyFingerprint === keyFingerprint);
+    if (!recipient) {
+        throw new Error("No matching recipient entry found for this secret key");
+    }
+    const { kemCipherText, wrappedKey } = recipient;
+    if (kemCipherText.length !== ML_KEM1024_CIPHERTEXT_BYTES) {
+        throw new Error("Recipient KEM ciphertext has invalid length");
+    }
+    if (wrappedKey.length < AES_GCM_TAG_BYTES) {
+        throw new Error("Wrapped key ciphertext is too short");
+    }
+    const sharedSecret = ml_kem1024.decapsulate(kemCipherText, secretKey);
+    const wrappingKey = await crypto.subtle.importKey("raw", sharedSecret.slice(), "AES-GCM", false, ["decrypt"]);
+    const wrappedKeyIv = kemCipherText.slice(0, AES_GCM_IV_BYTES);
+    const dek = new Uint8Array(await crypto.subtle.decrypt({ name: "AES-GCM", iv: wrappedKeyIv }, wrappingKey, wrappedKey.slice()));
+    if (dek.length === 0) {
+        throw new Error("Wrapped key material is empty");
+    }
+    return dek;
+}
+//# sourceMappingURL=unwrapDek.js.map

package/internal/crypto/encapsulation/unwrapDek.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unwrapDek.js","sourceRoot":"","sources":["unwrapDek.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAG3B,8FAA8F;AAC9F,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,UAA4B,EAC5B,SAAqB;IAErB,IAAI,SAAS,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAC/B,oBAAoB,EACpB,oBAAoB,GAAG,2BAA2B,CACnD,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;IAE9E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;IAChD,IAAI,aAAa,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAEtE,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,KAAK,EACL,YAAY,CAAC,KAAK,EAAE,EACpB,SAAS,EACT,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;IACF,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,UAAU,CACxB,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EACrC,WAAW,EACX,UAAU,CAAC,KAAK,EAAE,CACnB,CACF,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import { ml_kem1024 } from \"@noble/post-quantum/ml-kem.js\";\nimport { toFingerprint } from \"../fingerprint\";\nimport { AES_GCM_IV_BYTES, AES_GCM_TAG_BYTES } from \"../symmetric\";\nimport {\n  ML_KEM1024_CIPHERTEXT_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  ML_KEM1024_SECRET_KEY_BYTES,\n} from \"./generateKeyPair\";\nimport type { RecipientEntry } from \"./types\";\n\n/** ML-KEM-1024 secret key layout: dk_pke (1536 bytes) || ek_pke (1568 bytes) || H(ek) || z */\nconst ML_KEM1024_PK_OFFSET = 1536;\n\n/**\n * Unwrap a DEK from a set of recipient entries using a recipient's ML-KEM secret key.\n * Finds the matching recipient entry by key fingerprint lookup.\n */\nexport async function unwrapDek(\n  recipients: RecipientEntry[],\n  secretKey: Uint8Array,\n): Promise<Uint8Array> {\n  if (secretKey.length !== ML_KEM1024_SECRET_KEY_BYTES) {\n    throw new Error(\"ML-KEM-1024 secret key has invalid length\");\n  }\n\n  const publicKey = secretKey.slice(\n    ML_KEM1024_PK_OFFSET,\n    ML_KEM1024_PK_OFFSET + ML_KEM1024_PUBLIC_KEY_BYTES,\n  );\n  const keyFingerprint = await toFingerprint(publicKey);\n\n  const recipient = recipients.find((r) => r.keyFingerprint === keyFingerprint);\n\n  if (!recipient) {\n    throw new Error(\"No matching recipient entry found for this secret key\");\n  }\n\n  const { kemCipherText, wrappedKey } = recipient;\n  if (kemCipherText.length !== ML_KEM1024_CIPHERTEXT_BYTES) {\n    throw new Error(\"Recipient KEM ciphertext has invalid length\");\n  }\n  if (wrappedKey.length < AES_GCM_TAG_BYTES) {\n    throw new Error(\"Wrapped key ciphertext is too short\");\n  }\n\n  const sharedSecret = ml_kem1024.decapsulate(kemCipherText, secretKey);\n\n  const wrappingKey = await crypto.subtle.importKey(\n    \"raw\",\n    sharedSecret.slice(),\n    \"AES-GCM\",\n    false,\n    [\"decrypt\"],\n  );\n  const wrappedKeyIv = kemCipherText.slice(0, AES_GCM_IV_BYTES);\n  const dek = new Uint8Array(\n    await crypto.subtle.decrypt(\n      { name: \"AES-GCM\", iv: wrappedKeyIv },\n      wrappingKey,\n      wrappedKey.slice(),\n    ),\n  );\n  if (dek.length === 0) {\n    throw new Error(\"Wrapped key material is empty\");\n  }\n\n  return dek;\n}\n"]}

package/internal/crypto/encapsulation/wrapDek.d.ts

@@ -0,0 +1,7 @@
+import type { RecipientEntry } from "./types.js";
+/**
+ * Wrap an existing DEK for multiple recipients using ML-KEM-1024.
+ * Unlike encryptForRecipients, this does not encrypt a payload —
+ * it only wraps the key material for each recipient.
+ */
+export declare function wrapDekForRecipients(dek: Uint8Array, recipientPublicKeys: Uint8Array[]): Promise<RecipientEntry[]>;

package/internal/crypto/encapsulation/wrapDek.js

@@ -0,0 +1,38 @@
+import { ml_kem1024 } from "@noble/post-quantum/ml-kem.js";
+import { toFingerprint } from "../fingerprint.js";
+import { AES_GCM_IV_BYTES } from "../symmetric.js";
+import { ML_KEM1024_PUBLIC_KEY_BYTES } from "./generateKeyPair.js";
+/**
+ * Wrap an existing DEK for multiple recipients using ML-KEM-1024.
+ * Unlike encryptForRecipients, this does not encrypt a payload —
+ * it only wraps the key material for each recipient.
+ */
+export async function wrapDekForRecipients(dek, recipientPublicKeys) {
+    if (dek.length === 0) {
+        throw new Error("Wrapped key material must not be empty");
+    }
+    if (recipientPublicKeys.length === 0) {
+        throw new Error("At least one recipient public key is required");
+    }
+    const fingerprints = await Promise.all(recipientPublicKeys.map(async (publicKey, index) => {
+        if (publicKey.length !== ML_KEM1024_PUBLIC_KEY_BYTES) {
+            throw new Error(`Recipient public key[${index}] has invalid length`);
+        }
+        return toFingerprint(publicKey);
+    }));
+    if (new Set(fingerprints).size !== fingerprints.length) {
+        throw new Error("Recipient public keys must be unique");
+    }
+    return Promise.all(recipientPublicKeys.map(async (publicKey, index) => {
+        const { cipherText: kemCipherText, sharedSecret } = ml_kem1024.encapsulate(publicKey);
+        const wrappingKey = await crypto.subtle.importKey("raw", sharedSecret.slice(), "AES-GCM", false, ["encrypt"]);
+        const wrappedKeyIv = kemCipherText.slice(0, AES_GCM_IV_BYTES);
+        const wrappedKey = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv: wrappedKeyIv }, wrappingKey, dek.slice()));
+        return {
+            keyFingerprint: fingerprints[index] ?? "",
+            kemCipherText,
+            wrappedKey,
+        };
+    }));
+}
+//# sourceMappingURL=wrapDek.js.map

package/internal/crypto/encapsulation/wrapDek.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapDek.js","sourceRoot":"","sources":["wrapDek.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAGhE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAe,EACf,mBAAiC;IAEjC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;QACjD,IAAI,SAAS,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,sBAAsB,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IACF,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAChB,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;QACjD,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,GAC/C,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAEpC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,KAAK,EACL,YAAY,CAAC,KAAK,EAAE,EACpB,SAAS,EACT,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,UAAU,CAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EACrC,WAAW,EACX,GAAG,CAAC,KAAK,EAAE,CACZ,CACF,CAAC;QAEF,OAAO;YACL,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE;YACzC,aAAa;YACb,UAAU;SACX,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC","sourcesContent":["import { ml_kem1024 } from \"@noble/post-quantum/ml-kem.js\";\nimport { toFingerprint } from \"../fingerprint\";\nimport { AES_GCM_IV_BYTES } from \"../symmetric\";\nimport { ML_KEM1024_PUBLIC_KEY_BYTES } from \"./generateKeyPair\";\nimport type { RecipientEntry } from \"./types\";\n\n/**\n * Wrap an existing DEK for multiple recipients using ML-KEM-1024.\n * Unlike encryptForRecipients, this does not encrypt a payload —\n * it only wraps the key material for each recipient.\n */\nexport async function wrapDekForRecipients(\n  dek: Uint8Array,\n  recipientPublicKeys: Uint8Array[],\n): Promise<RecipientEntry[]> {\n  if (dek.length === 0) {\n    throw new Error(\"Wrapped key material must not be empty\");\n  }\n  if (recipientPublicKeys.length === 0) {\n    throw new Error(\"At least one recipient public key is required\");\n  }\n\n  const fingerprints = await Promise.all(\n    recipientPublicKeys.map(async (publicKey, index) => {\n      if (publicKey.length !== ML_KEM1024_PUBLIC_KEY_BYTES) {\n        throw new Error(`Recipient public key[${index}] has invalid length`);\n      }\n      return toFingerprint(publicKey);\n    }),\n  );\n  if (new Set(fingerprints).size !== fingerprints.length) {\n    throw new Error(\"Recipient public keys must be unique\");\n  }\n\n  return Promise.all(\n    recipientPublicKeys.map(async (publicKey, index) => {\n      const { cipherText: kemCipherText, sharedSecret } =\n        ml_kem1024.encapsulate(publicKey);\n\n      const wrappingKey = await crypto.subtle.importKey(\n        \"raw\",\n        sharedSecret.slice(),\n        \"AES-GCM\",\n        false,\n        [\"encrypt\"],\n      );\n      const wrappedKeyIv = kemCipherText.slice(0, AES_GCM_IV_BYTES);\n      const wrappedKey = new Uint8Array(\n        await crypto.subtle.encrypt(\n          { name: \"AES-GCM\", iv: wrappedKeyIv },\n          wrappingKey,\n          dek.slice(),\n        ),\n      );\n\n      return {\n        keyFingerprint: fingerprints[index] ?? \"\",\n        kemCipherText,\n        wrappedKey,\n      };\n    }),\n  );\n}\n"]}

package/internal/crypto/fingerprint.d.ts

@@ -0,0 +1 @@
+export declare function toFingerprint(bytes: Uint8Array): Promise<string>;

package/internal/crypto/fingerprint.js

@@ -0,0 +1,5 @@
+export async function toFingerprint(bytes) {
+    const hash = new Uint8Array(await crypto.subtle.digest("SHA-256", new Uint8Array(bytes)));
+    return Array.from(hash, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+//# sourceMappingURL=fingerprint.js.map

package/internal/crypto/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["fingerprint.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAiB;IACnD,MAAM,IAAI,GAAG,IAAI,UAAU,CACzB,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAC7D,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC3E,CAAC","sourcesContent":["export async function toFingerprint(bytes: Uint8Array): Promise<string> {\n  const hash = new Uint8Array(\n    await crypto.subtle.digest(\"SHA-256\", new Uint8Array(bytes)),\n  );\n  return Array.from(hash, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n"]}

package/internal/crypto/groupMetadata.d.ts

@@ -0,0 +1,31 @@
+export interface GroupMetadataKey {
+    readonly organizationId: string;
+    readonly containerId: string;
+    readonly containerKeyEpochId: string;
+    readonly keyMaterial: Uint8Array;
+}
+export type GroupMetadata = {
+    readonly format: "group-metadata-v1";
+    readonly role: "admins" | "members";
+} | {
+    readonly format: "group-metadata-v1";
+    readonly organizationId: string;
+    readonly groupId: string;
+    readonly containerId: string;
+    readonly containerKeyEpochId: string;
+    readonly iv: string;
+    readonly ciphertext: string;
+};
+export declare function encodeBuiltinGroupMetadata(role: "admins" | "members"): string;
+/** Names are never accepted in the public, signed routing header. */
+export declare function readGroupMetadata(payload: string): GroupMetadata;
+export declare function encryptGroupMetadata(input: {
+    key: GroupMetadataKey;
+    groupId: string;
+    name: string;
+}): Promise<string>;
+export declare function decryptGroupMetadata(input: {
+    key: GroupMetadataKey;
+    groupId: string;
+    payload: string;
+}): Promise<string>;

package/internal/crypto/groupMetadata.js

@@ -0,0 +1,100 @@
+import { base64ToBytes, bytesToBase64 } from "../encoding/index.js";
+import { decryptWithDek, encryptWithDek } from "./symmetric.js";
+const format = "group-metadata-v1";
+const encoder = new TextEncoder();
+function readStringField(value, field) {
+    const result = Reflect.get(value, field);
+    if (typeof result !== "string" || result.length === 0)
+        throw new Error("Encrypted group metadata is invalid");
+    return result;
+}
+export function encodeBuiltinGroupMetadata(role) {
+    return bytesToBase64(encoder.encode(JSON.stringify({ format, role })));
+}
+/** Names are never accepted in the public, signed routing header. */
+export function readGroupMetadata(payload) {
+    const value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(base64ToBytes(payload)));
+    if (!value ||
+        typeof value !== "object" ||
+        Array.isArray(value) ||
+        Reflect.get(value, "format") !== format) {
+        throw new Error("Group metadata format is invalid");
+    }
+    const role = Reflect.get(value, "role");
+    if (role === "admins" || role === "members") {
+        if (Object.keys(value).length !== 2)
+            throw new Error("Built-in group metadata contains unexpected fields");
+        return { format, role };
+    }
+    if (Object.keys(value).length !== 7) {
+        throw new Error("Encrypted group metadata is invalid");
+    }
+    const metadata = {
+        format,
+        organizationId: readStringField(value, "organizationId"),
+        groupId: readStringField(value, "groupId"),
+        containerId: readStringField(value, "containerId"),
+        containerKeyEpochId: readStringField(value, "containerKeyEpochId"),
+        iv: readStringField(value, "iv"),
+        ciphertext: readStringField(value, "ciphertext"),
+    };
+    if (base64ToBytes(metadata.iv).length !== 12 ||
+        base64ToBytes(metadata.ciphertext).length < 16) {
+        throw new Error("Encrypted group metadata is invalid");
+    }
+    return metadata;
+}
+function context(input) {
+    return encoder.encode(JSON.stringify([
+        "tearleads.group-metadata.v1",
+        input.organizationId,
+        input.groupId,
+        input.containerId,
+        input.containerKeyEpochId,
+    ]));
+}
+async function deriveKey(key, groupId) {
+    if (key.keyMaterial.length !== 32)
+        throw new Error("Group metadata requires a 32-byte container key");
+    const material = await crypto.subtle.importKey("raw", key.keyMaterial.slice(), "HKDF", false, ["deriveBits"]);
+    return new Uint8Array(await crypto.subtle.deriveBits({
+        name: "HKDF",
+        hash: "SHA-256",
+        salt: new Uint8Array(),
+        info: context({ ...key, groupId }).slice(),
+    }, material, 256));
+}
+export async function encryptGroupMetadata(input) {
+    const encrypted = await encryptWithDek(encoder.encode(JSON.stringify({ name: input.name })), await deriveKey(input.key, input.groupId), context({ ...input.key, groupId: input.groupId }));
+    return bytesToBase64(encoder.encode(JSON.stringify({
+        format,
+        organizationId: input.key.organizationId,
+        groupId: input.groupId,
+        containerId: input.key.containerId,
+        containerKeyEpochId: input.key.containerKeyEpochId,
+        iv: bytesToBase64(encrypted.iv),
+        ciphertext: bytesToBase64(encrypted.ciphertext),
+    })));
+}
+export async function decryptGroupMetadata(input) {
+    const metadata = readGroupMetadata(input.payload);
+    if ("role" in metadata ||
+        metadata.groupId !== input.groupId ||
+        metadata.organizationId !== input.key.organizationId ||
+        metadata.containerId !== input.key.containerId ||
+        metadata.containerKeyEpochId !== input.key.containerKeyEpochId) {
+        throw new Error("Group metadata scope does not match");
+    }
+    const decrypted = await decryptWithDek({
+        iv: base64ToBytes(metadata.iv),
+        ciphertext: base64ToBytes(metadata.ciphertext),
+    }, await deriveKey(input.key, input.groupId), context({ ...input.key, groupId: input.groupId }));
+    const value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(decrypted));
+    const name = value && typeof value === "object" ? Reflect.get(value, "name") : undefined;
+    if (typeof name !== "string" ||
+        name.trim().length === 0 ||
+        /[\p{Cc}\p{Cf}\p{Cs}\p{Default_Ignorable_Code_Point}]/u.test(name))
+        throw new Error("Group metadata name is invalid");
+    return name;
+}
+//# sourceMappingURL=groupMetadata.js.map

package/internal/crypto/groupMetadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groupMetadata.js","sourceRoot":"","sources":["groupMetadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAwB7D,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,MAAM,MAAM,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAA0B;IACnE,OAAO,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC/B,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CACzE,CAAC;IACF,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,MAAM,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAkB;QAC9B,MAAM;QACN,cAAc,EAAE,eAAe,CAAC,KAAK,EAAE,gBAAgB,CAAC;QACxD,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC;QAC1C,WAAW,EAAE,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC;QAClD,mBAAmB,EAAE,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC;QAClE,EAAE,EAAE,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC;QAChC,UAAU,EAAE,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC;KACjD,CAAC;IACF,IACE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,EAAE;QACxC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,EAAE,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CACd,KAAkE;IAElE,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,CAAC,SAAS,CAAC;QACb,6BAA6B;QAC7B,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,mBAAmB;KAC1B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAqB,EACrB,OAAe;IAEf,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,EAAE;QAC/B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C,KAAK,EACL,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,EACvB,MAAM,EACN,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAC;IACF,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC5B;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI,UAAU,EAAE;QACtB,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE;KAC3C,EACD,QAAQ,EACR,GAAG,CACJ,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAI1C;IACC,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EACpD,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EACzC,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAClD,CAAC;IACF,OAAO,aAAa,CAClB,OAAO,CAAC,MAAM,CACZ,IAAI,CAAC,SAAS,CAAC;QACb,MAAM;QACN,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc;QACxC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW;QAClC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,mBAAmB;QAClD,EAAE,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,UAAU,EAAE,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC;KAChD,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAI1C;IACC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClD,IACE,MAAM,IAAI,QAAQ;QAClB,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAClC,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,GAAG,CAAC,cAAc;QACpD,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,GAAG,CAAC,WAAW;QAC9C,QAAQ,CAAC,mBAAmB,KAAK,KAAK,CAAC,GAAG,CAAC,mBAAmB,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC;QACE,EAAE,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,UAAU,EAAE,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC;KAC/C,EACD,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EACzC,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAClD,CAAC;IACF,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAC/B,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAC5D,CAAC;IACF,MAAM,IAAI,GACR,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QACxB,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC;QAElE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { base64ToBytes, bytesToBase64 } from \"@tearleads/encoding\";\nimport { decryptWithDek, encryptWithDek } from \"./symmetric\";\n\nexport interface GroupMetadataKey {\n  readonly organizationId: string;\n  readonly containerId: string;\n  readonly containerKeyEpochId: string;\n  readonly keyMaterial: Uint8Array;\n}\n\nexport type GroupMetadata =\n  | {\n      readonly format: \"group-metadata-v1\";\n      readonly role: \"admins\" | \"members\";\n    }\n  | {\n      readonly format: \"group-metadata-v1\";\n      readonly organizationId: string;\n      readonly groupId: string;\n      readonly containerId: string;\n      readonly containerKeyEpochId: string;\n      readonly iv: string;\n      readonly ciphertext: string;\n    };\n\nconst format = \"group-metadata-v1\";\nconst encoder = new TextEncoder();\n\nfunction readStringField(value: object, field: string): string {\n  const result: unknown = Reflect.get(value, field);\n  if (typeof result !== \"string\" || result.length === 0)\n    throw new Error(\"Encrypted group metadata is invalid\");\n  return result;\n}\n\nexport function encodeBuiltinGroupMetadata(role: \"admins\" | \"members\"): string {\n  return bytesToBase64(encoder.encode(JSON.stringify({ format, role })));\n}\n\n/** Names are never accepted in the public, signed routing header. */\nexport function readGroupMetadata(payload: string): GroupMetadata {\n  const value: unknown = JSON.parse(\n    new TextDecoder(\"utf-8\", { fatal: true }).decode(base64ToBytes(payload)),\n  );\n  if (\n    !value ||\n    typeof value !== \"object\" ||\n    Array.isArray(value) ||\n    Reflect.get(value, \"format\") !== format\n  ) {\n    throw new Error(\"Group metadata format is invalid\");\n  }\n  const role: unknown = Reflect.get(value, \"role\");\n  if (role === \"admins\" || role === \"members\") {\n    if (Object.keys(value).length !== 2)\n      throw new Error(\"Built-in group metadata contains unexpected fields\");\n    return { format, role };\n  }\n  if (Object.keys(value).length !== 7) {\n    throw new Error(\"Encrypted group metadata is invalid\");\n  }\n  const metadata: GroupMetadata = {\n    format,\n    organizationId: readStringField(value, \"organizationId\"),\n    groupId: readStringField(value, \"groupId\"),\n    containerId: readStringField(value, \"containerId\"),\n    containerKeyEpochId: readStringField(value, \"containerKeyEpochId\"),\n    iv: readStringField(value, \"iv\"),\n    ciphertext: readStringField(value, \"ciphertext\"),\n  };\n  if (\n    base64ToBytes(metadata.iv).length !== 12 ||\n    base64ToBytes(metadata.ciphertext).length < 16\n  ) {\n    throw new Error(\"Encrypted group metadata is invalid\");\n  }\n  return metadata;\n}\n\nfunction context(\n  input: Omit<GroupMetadataKey, \"keyMaterial\"> & { groupId: string },\n): Uint8Array {\n  return encoder.encode(\n    JSON.stringify([\n      \"tearleads.group-metadata.v1\",\n      input.organizationId,\n      input.groupId,\n      input.containerId,\n      input.containerKeyEpochId,\n    ]),\n  );\n}\n\nasync function deriveKey(\n  key: GroupMetadataKey,\n  groupId: string,\n): Promise<Uint8Array> {\n  if (key.keyMaterial.length !== 32)\n    throw new Error(\"Group metadata requires a 32-byte container key\");\n  const material = await crypto.subtle.importKey(\n    \"raw\",\n    key.keyMaterial.slice(),\n    \"HKDF\",\n    false,\n    [\"deriveBits\"],\n  );\n  return new Uint8Array(\n    await crypto.subtle.deriveBits(\n      {\n        name: \"HKDF\",\n        hash: \"SHA-256\",\n        salt: new Uint8Array(),\n        info: context({ ...key, groupId }).slice(),\n      },\n      material,\n      256,\n    ),\n  );\n}\n\nexport async function encryptGroupMetadata(input: {\n  key: GroupMetadataKey;\n  groupId: string;\n  name: string;\n}): Promise<string> {\n  const encrypted = await encryptWithDek(\n    encoder.encode(JSON.stringify({ name: input.name })),\n    await deriveKey(input.key, input.groupId),\n    context({ ...input.key, groupId: input.groupId }),\n  );\n  return bytesToBase64(\n    encoder.encode(\n      JSON.stringify({\n        format,\n        organizationId: input.key.organizationId,\n        groupId: input.groupId,\n        containerId: input.key.containerId,\n        containerKeyEpochId: input.key.containerKeyEpochId,\n        iv: bytesToBase64(encrypted.iv),\n        ciphertext: bytesToBase64(encrypted.ciphertext),\n      }),\n    ),\n  );\n}\n\nexport async function decryptGroupMetadata(input: {\n  key: GroupMetadataKey;\n  groupId: string;\n  payload: string;\n}): Promise<string> {\n  const metadata = readGroupMetadata(input.payload);\n  if (\n    \"role\" in metadata ||\n    metadata.groupId !== input.groupId ||\n    metadata.organizationId !== input.key.organizationId ||\n    metadata.containerId !== input.key.containerId ||\n    metadata.containerKeyEpochId !== input.key.containerKeyEpochId\n  ) {\n    throw new Error(\"Group metadata scope does not match\");\n  }\n  const decrypted = await decryptWithDek(\n    {\n      iv: base64ToBytes(metadata.iv),\n      ciphertext: base64ToBytes(metadata.ciphertext),\n    },\n    await deriveKey(input.key, input.groupId),\n    context({ ...input.key, groupId: input.groupId }),\n  );\n  const value: unknown = JSON.parse(\n    new TextDecoder(\"utf-8\", { fatal: true }).decode(decrypted),\n  );\n  const name: unknown =\n    value && typeof value === \"object\" ? Reflect.get(value, \"name\") : undefined;\n  if (\n    typeof name !== \"string\" ||\n    name.trim().length === 0 ||\n    /[\\p{Cc}\\p{Cf}\\p{Cs}\\p{Default_Ignorable_Code_Point}]/u.test(name)\n  )\n    throw new Error(\"Group metadata name is invalid\");\n  return name;\n}\n"]}

package/internal/crypto/hex.d.ts

@@ -0,0 +1,2 @@
+export declare function bytesToHex(bytes: Uint8Array): string;
+export declare function hexToBytes(hex: string): Uint8Array;

package/internal/crypto/hex.js

@@ -0,0 +1,14 @@
+export function bytesToHex(bytes) {
+    return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+export function hexToBytes(hex) {
+    if (hex.length % 2 !== 0 || !/^[0-9a-f]*$/.test(hex)) {
+        throw new Error("Invalid hex string");
+    }
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        bytes[i / 2] = Number.parseInt(hex.substring(i, i + 2), 16);
+    }
+    return bytes;
+}
+//# sourceMappingURL=hex.js.map

package/internal/crypto/hex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hex.js","sourceRoot":"","sources":["hex.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["export function bytesToHex(bytes: Uint8Array): string {\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function hexToBytes(hex: string): Uint8Array {\n  if (hex.length % 2 !== 0 || !/^[0-9a-f]*$/.test(hex)) {\n    throw new Error(\"Invalid hex string\");\n  }\n\n  const bytes = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < hex.length; i += 2) {\n    bytes[i / 2] = Number.parseInt(hex.substring(i, i + 2), 16);\n  }\n  return bytes;\n}\n"]}

package/internal/crypto/identitySeedPhrase.d.ts

@@ -0,0 +1,16 @@
+import { type EncapsulationKeyPair } from "./encapsulation/generateKeyPair.js";
+import { type SigningKeyPair } from "./signing/generateKeyPair.js";
+export declare const IDENTITY_SEED_PHRASE_DERIVATION_SUITE = "bip39-english-256-hkdf-sha256-ml-dsa87-ml-kem1024-v1";
+export declare const IDENTITY_SEED_PHRASE_ENTROPY_BYTES = 32;
+export declare const IDENTITY_SEED_PHRASE_STRENGTH_BITS = 256;
+export declare const IDENTITY_SEED_PHRASE_WORDS = 24;
+export interface IdentitySeedPhraseKeyPairs {
+    readonly encapsulationKeyPair: EncapsulationKeyPair;
+    readonly seedPhrase: string;
+    readonly signingKeyPair: SigningKeyPair;
+}
+export declare function normalizeIdentitySeedPhrase(seedPhrase: string): string;
+export declare function validateIdentitySeedPhrase(seedPhrase: string): boolean;
+export declare function createIdentitySeedPhrase(): string;
+export declare function createIdentitySeedPhraseFromEntropy(entropy: Uint8Array): string;
+export declare function generateIdentityKeyPairsFromSeedPhrase(seedPhrase: string): IdentitySeedPhraseKeyPairs;

package/internal/crypto/identitySeedPhrase.js

@@ -0,0 +1,71 @@
+import { hkdf } from "@noble/hashes/hkdf.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { entropyToMnemonic, generateMnemonic, mnemonicToEntropy, validateMnemonic, } from "@scure/bip39";
+import { wordlist } from "@scure/bip39/wordlists/english.js";
+import { generateKemKeyPair, ML_KEM1024_SEED_BYTES, } from "./encapsulation/generateKeyPair.js";
+import { generateSigningKeyPair, } from "./signing/generateKeyPair.js";
+export const IDENTITY_SEED_PHRASE_DERIVATION_SUITE = "bip39-english-256-hkdf-sha256-ml-dsa87-ml-kem1024-v1";
+export const IDENTITY_SEED_PHRASE_ENTROPY_BYTES = 32;
+export const IDENTITY_SEED_PHRASE_STRENGTH_BITS = 256;
+export const IDENTITY_SEED_PHRASE_WORDS = 24;
+const TEXT_ENCODER = new TextEncoder();
+const HKDF_SALT = TEXT_ENCODER.encode("tearleads.identity-seed-phrase.hkdf-salt.v1");
+const SIGNING_SEED_INFO = TEXT_ENCODER.encode("tearleads.identity-seed-phrase.ml-dsa87-signing-seed.v1");
+const ENCAPSULATION_SEED_INFO = TEXT_ENCODER.encode("tearleads.identity-seed-phrase.ml-kem1024-encapsulation-seed.v1");
+const ML_DSA87_SEED_BYTES = 32;
+function seedPhraseWords(seedPhrase) {
+    return seedPhrase.trim().toLowerCase().split(/\s+/).filter(Boolean);
+}
+export function normalizeIdentitySeedPhrase(seedPhrase) {
+    return seedPhraseWords(seedPhrase).join(" ");
+}
+export function validateIdentitySeedPhrase(seedPhrase) {
+    const normalized = normalizeIdentitySeedPhrase(seedPhrase);
+    return (seedPhraseWords(normalized).length === IDENTITY_SEED_PHRASE_WORDS &&
+        validateMnemonic(normalized, wordlist));
+}
+function readIdentitySeedPhraseEntropy(seedPhrase) {
+    const normalizedSeedPhrase = normalizeIdentitySeedPhrase(seedPhrase);
+    if (seedPhraseWords(normalizedSeedPhrase).length !== IDENTITY_SEED_PHRASE_WORDS) {
+        throw new Error(`Identity seed phrase must contain ${IDENTITY_SEED_PHRASE_WORDS} words.`);
+    }
+    if (!validateMnemonic(normalizedSeedPhrase, wordlist)) {
+        throw new Error("Identity seed phrase is not a valid BIP39 phrase.");
+    }
+    const entropy = mnemonicToEntropy(normalizedSeedPhrase, wordlist);
+    if (entropy.length !== IDENTITY_SEED_PHRASE_ENTROPY_BYTES) {
+        throw new Error(`Identity seed phrase must encode ${IDENTITY_SEED_PHRASE_ENTROPY_BYTES} bytes of entropy.`);
+    }
+    return { entropy, normalizedSeedPhrase };
+}
+export function createIdentitySeedPhrase() {
+    return generateMnemonic(wordlist, IDENTITY_SEED_PHRASE_STRENGTH_BITS);
+}
+export function createIdentitySeedPhraseFromEntropy(entropy) {
+    if (entropy.length !== IDENTITY_SEED_PHRASE_ENTROPY_BYTES) {
+        throw new Error(`Identity seed phrase entropy must be ${IDENTITY_SEED_PHRASE_ENTROPY_BYTES} bytes.`);
+    }
+    return entropyToMnemonic(entropy, wordlist);
+}
+function deriveSeedMaterial(input) {
+    return hkdf(sha256, input.entropy, HKDF_SALT, input.info, input.length);
+}
+export function generateIdentityKeyPairsFromSeedPhrase(seedPhrase) {
+    const { entropy, normalizedSeedPhrase } = readIdentitySeedPhraseEntropy(seedPhrase);
+    const signingSeed = deriveSeedMaterial({
+        entropy,
+        info: SIGNING_SEED_INFO,
+        length: ML_DSA87_SEED_BYTES,
+    });
+    const encapsulationSeed = deriveSeedMaterial({
+        entropy,
+        info: ENCAPSULATION_SEED_INFO,
+        length: ML_KEM1024_SEED_BYTES,
+    });
+    return {
+        encapsulationKeyPair: generateKemKeyPair(encapsulationSeed),
+        seedPhrase: normalizedSeedPhrase,
+        signingKeyPair: generateSigningKeyPair(signingSeed),
+    };
+}
+//# sourceMappingURL=identitySeedPhrase.js.map

package/internal/crypto/identitySeedPhrase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identitySeedPhrase.js","sourceRoot":"","sources":["identitySeedPhrase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAEL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,qCAAqC,GAChD,sDAAsD,CAAC;AACzD,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,CAAC;AACrD,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AACtD,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;AACvC,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CACnC,6CAA6C,CAC9C,CAAC;AACF,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAC3C,yDAAyD,CAC1D,CAAC;AACF,MAAM,uBAAuB,GAAG,YAAY,CAAC,MAAM,CACjD,iEAAiE,CAClE,CAAC;AACF,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAQ/B,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,UAAkB;IAC3D,MAAM,UAAU,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAC3D,OAAO,CACL,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,0BAA0B;QACjE,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAkB;IAIvD,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;IACrE,IACE,eAAe,CAAC,oBAAoB,CAAC,CAAC,MAAM,KAAK,0BAA0B,EAC3E,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qCAAqC,0BAA0B,SAAS,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,kCAAkC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,oCAAoC,kCAAkC,oBAAoB,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,gBAAgB,CAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,OAAmB;IAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,kCAAkC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,wCAAwC,kCAAkC,SAAS,CACpF,CAAC;IACJ,CAAC;IAED,OAAO,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAI3B;IACC,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,UAAkB;IAElB,MAAM,EAAE,OAAO,EAAE,oBAAoB,EAAE,GACrC,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,kBAAkB,CAAC;QACrC,OAAO;QACP,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,mBAAmB;KAC5B,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;QAC3C,OAAO;QACP,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,qBAAqB;KAC9B,CAAC,CAAC;IAEH,OAAO;QACL,oBAAoB,EAAE,kBAAkB,CAAC,iBAAiB,CAAC;QAC3D,UAAU,EAAE,oBAAoB;QAChC,cAAc,EAAE,sBAAsB,CAAC,WAAW,CAAC;KACpD,CAAC;AACJ,CAAC","sourcesContent":["import { hkdf } from \"@noble/hashes/hkdf.js\";\nimport { sha256 } from \"@noble/hashes/sha2.js\";\nimport {\n  entropyToMnemonic,\n  generateMnemonic,\n  mnemonicToEntropy,\n  validateMnemonic,\n} from \"@scure/bip39\";\nimport { wordlist } from \"@scure/bip39/wordlists/english.js\";\nimport {\n  type EncapsulationKeyPair,\n  generateKemKeyPair,\n  ML_KEM1024_SEED_BYTES,\n} from \"./encapsulation/generateKeyPair\";\nimport {\n  generateSigningKeyPair,\n  type SigningKeyPair,\n} from \"./signing/generateKeyPair\";\n\nexport const IDENTITY_SEED_PHRASE_DERIVATION_SUITE =\n  \"bip39-english-256-hkdf-sha256-ml-dsa87-ml-kem1024-v1\";\nexport const IDENTITY_SEED_PHRASE_ENTROPY_BYTES = 32;\nexport const IDENTITY_SEED_PHRASE_STRENGTH_BITS = 256;\nexport const IDENTITY_SEED_PHRASE_WORDS = 24;\n\nconst TEXT_ENCODER = new TextEncoder();\nconst HKDF_SALT = TEXT_ENCODER.encode(\n  \"tearleads.identity-seed-phrase.hkdf-salt.v1\",\n);\nconst SIGNING_SEED_INFO = TEXT_ENCODER.encode(\n  \"tearleads.identity-seed-phrase.ml-dsa87-signing-seed.v1\",\n);\nconst ENCAPSULATION_SEED_INFO = TEXT_ENCODER.encode(\n  \"tearleads.identity-seed-phrase.ml-kem1024-encapsulation-seed.v1\",\n);\nconst ML_DSA87_SEED_BYTES = 32;\n\nexport interface IdentitySeedPhraseKeyPairs {\n  readonly encapsulationKeyPair: EncapsulationKeyPair;\n  readonly seedPhrase: string;\n  readonly signingKeyPair: SigningKeyPair;\n}\n\nfunction seedPhraseWords(seedPhrase: string): readonly string[] {\n  return seedPhrase.trim().toLowerCase().split(/\\s+/).filter(Boolean);\n}\n\nexport function normalizeIdentitySeedPhrase(seedPhrase: string): string {\n  return seedPhraseWords(seedPhrase).join(\" \");\n}\n\nexport function validateIdentitySeedPhrase(seedPhrase: string): boolean {\n  const normalized = normalizeIdentitySeedPhrase(seedPhrase);\n  return (\n    seedPhraseWords(normalized).length === IDENTITY_SEED_PHRASE_WORDS &&\n    validateMnemonic(normalized, wordlist)\n  );\n}\n\nfunction readIdentitySeedPhraseEntropy(seedPhrase: string): {\n  readonly entropy: Uint8Array;\n  readonly normalizedSeedPhrase: string;\n} {\n  const normalizedSeedPhrase = normalizeIdentitySeedPhrase(seedPhrase);\n  if (\n    seedPhraseWords(normalizedSeedPhrase).length !== IDENTITY_SEED_PHRASE_WORDS\n  ) {\n    throw new Error(\n      `Identity seed phrase must contain ${IDENTITY_SEED_PHRASE_WORDS} words.`,\n    );\n  }\n  if (!validateMnemonic(normalizedSeedPhrase, wordlist)) {\n    throw new Error(\"Identity seed phrase is not a valid BIP39 phrase.\");\n  }\n\n  const entropy = mnemonicToEntropy(normalizedSeedPhrase, wordlist);\n  if (entropy.length !== IDENTITY_SEED_PHRASE_ENTROPY_BYTES) {\n    throw new Error(\n      `Identity seed phrase must encode ${IDENTITY_SEED_PHRASE_ENTROPY_BYTES} bytes of entropy.`,\n    );\n  }\n\n  return { entropy, normalizedSeedPhrase };\n}\n\nexport function createIdentitySeedPhrase(): string {\n  return generateMnemonic(wordlist, IDENTITY_SEED_PHRASE_STRENGTH_BITS);\n}\n\nexport function createIdentitySeedPhraseFromEntropy(\n  entropy: Uint8Array,\n): string {\n  if (entropy.length !== IDENTITY_SEED_PHRASE_ENTROPY_BYTES) {\n    throw new Error(\n      `Identity seed phrase entropy must be ${IDENTITY_SEED_PHRASE_ENTROPY_BYTES} bytes.`,\n    );\n  }\n\n  return entropyToMnemonic(entropy, wordlist);\n}\n\nfunction deriveSeedMaterial(input: {\n  readonly entropy: Uint8Array;\n  readonly info: Uint8Array;\n  readonly length: number;\n}): Uint8Array {\n  return hkdf(sha256, input.entropy, HKDF_SALT, input.info, input.length);\n}\n\nexport function generateIdentityKeyPairsFromSeedPhrase(\n  seedPhrase: string,\n): IdentitySeedPhraseKeyPairs {\n  const { entropy, normalizedSeedPhrase } =\n    readIdentitySeedPhraseEntropy(seedPhrase);\n  const signingSeed = deriveSeedMaterial({\n    entropy,\n    info: SIGNING_SEED_INFO,\n    length: ML_DSA87_SEED_BYTES,\n  });\n  const encapsulationSeed = deriveSeedMaterial({\n    entropy,\n    info: ENCAPSULATION_SEED_INFO,\n    length: ML_KEM1024_SEED_BYTES,\n  });\n\n  return {\n    encapsulationKeyPair: generateKemKeyPair(encapsulationSeed),\n    seedPhrase: normalizedSeedPhrase,\n    signingKeyPair: generateSigningKeyPair(signingSeed),\n  };\n}\n"]}

package/internal/crypto/incrementalSha256.d.ts

@@ -0,0 +1,6 @@
+export interface IncrementalSha256 {
+    digest(): Uint8Array<ArrayBuffer>;
+    update(bytes: Uint8Array): void;
+}
+/** Incremental SHA-256 for streams that cannot be materialized as one buffer. */
+export declare function createIncrementalSha256(): IncrementalSha256;

package/internal/crypto/incrementalSha256.js

@@ -0,0 +1,22 @@
+import { sha256 } from "@noble/hashes/sha2.js";
+/** Incremental SHA-256 for streams that cannot be materialized as one buffer. */
+export function createIncrementalSha256() {
+    const hash = sha256.create();
+    let finalized = false;
+    return {
+        digest() {
+            if (finalized) {
+                throw new Error("Incremental SHA-256 has already been finalized");
+            }
+            finalized = true;
+            return new Uint8Array(hash.digest());
+        },
+        update(bytes) {
+            if (finalized) {
+                throw new Error("Incremental SHA-256 has already been finalized");
+            }
+            hash.update(bytes);
+        },
+    };
+}
+//# sourceMappingURL=incrementalSha256.js.map

package/internal/crypto/incrementalSha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incrementalSha256.js","sourceRoot":"","sources":["incrementalSha256.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAO/C,iFAAiF;AACjF,MAAM,UAAU,uBAAuB;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IAC7B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,OAAO;QACL,MAAM;YACJ,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YACD,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,KAAK;YACV,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { sha256 } from \"@noble/hashes/sha2.js\";\n\nexport interface IncrementalSha256 {\n  digest(): Uint8Array<ArrayBuffer>;\n  update(bytes: Uint8Array): void;\n}\n\n/** Incremental SHA-256 for streams that cannot be materialized as one buffer. */\nexport function createIncrementalSha256(): IncrementalSha256 {\n  const hash = sha256.create();\n  let finalized = false;\n\n  return {\n    digest() {\n      if (finalized) {\n        throw new Error(\"Incremental SHA-256 has already been finalized\");\n      }\n      finalized = true;\n      return new Uint8Array(hash.digest());\n    },\n    update(bytes) {\n      if (finalized) {\n        throw new Error(\"Incremental SHA-256 has already been finalized\");\n      }\n      hash.update(bytes);\n    },\n  };\n}\n"]}

package/internal/crypto/index.d.ts

@@ -0,0 +1,38 @@
+export { BlobEnvelopeError } from "./blobEnvelopeError.js";
+export type { BlobEnvelopeHeaderRecord, BlobEnvelopeRecord, } from "./blobEnvelopeReader.js";
+export { MAX_BLOB_ENVELOPE_HEADER_BYTES, parseBlobEnvelopeV2, parseBlobEnvelopeV2Header, readBlobEnvelopeHeaderByteLength, } from "./blobEnvelopeReader.js";
+export type { BlobEnvelopeV2Header } from "./blobEnvelopeV2.js";
+export { BLOB_CHUNK_SIZE_BYTES, BLOB_ENCRYPTED_BYTES_FORMAT, BLOB_ENCRYPTED_BYTES_VERSION, BLOB_ENVELOPE_MAGIC_BYTES, BLOB_ENVELOPE_PREFIX_BYTES, blobChunkPlaintextByteLength, computeBlobChunkCount, computeBlobEncryptedByteLength, deriveBlobChunkIv, encodeBlobEnvelopeV2Header, joinBlobPartBytes, MAX_BLOB_CHUNK_COUNT, normalizeBlobChunkSize, } from "./blobEnvelopeV2.js";
+export { compareCanonicalStrings } from "./canonicalOrdering.js";
+export { AUTH_CHALLENGE_BYTES, AUTH_CHALLENGE_HEX_LENGTH, authChallengeSigningBytes, CHALLENGE_TTL_SECONDS, canonicalAuthOrigin, generateChallenge, } from "./challenge.js";
+export type { ContentKeyEnvelopeKind, ContentKeyWrapBinding, } from "./contentKeyEnvelope.js";
+export { ContentKeyEnvelopeError, decodeContentKeyEnvelope, unwrapContentKey, wrapContentKey, } from "./contentKeyEnvelope.js";
+export { decryptAsRecipient } from "./encapsulation/decryptAsRecipient.js";
+export { encryptForRecipients } from "./encapsulation/encryptForRecipients.js";
+export type { EncapsulationKeyPair } from "./encapsulation/generateKeyPair.js";
+export { generateKemKeyPair, generateKemSeedAndKeyPair, ML_KEM1024_CIPHERTEXT_BYTES, ML_KEM1024_PUBLIC_KEY_BYTES, ML_KEM1024_SECRET_KEY_BYTES, ML_KEM1024_SEED_BYTES, } from "./encapsulation/generateKeyPair.js";
+export type { EncryptedEnvelope, RecipientEntry } from "./encapsulation/types.js";
+export { unwrapDek } from "./encapsulation/unwrapDek.js";
+export { wrapDekForRecipients } from "./encapsulation/wrapDek.js";
+export { toFingerprint } from "./fingerprint.js";
+export { decryptGroupMetadata, encodeBuiltinGroupMetadata, encryptGroupMetadata, type GroupMetadata, type GroupMetadataKey, readGroupMetadata, } from "./groupMetadata.js";
+export { bytesToHex, hexToBytes } from "./hex.js";
+export { createIdentitySeedPhrase, createIdentitySeedPhraseFromEntropy, generateIdentityKeyPairsFromSeedPhrase, IDENTITY_SEED_PHRASE_DERIVATION_SUITE, IDENTITY_SEED_PHRASE_ENTROPY_BYTES, IDENTITY_SEED_PHRASE_STRENGTH_BITS, IDENTITY_SEED_PHRASE_WORDS, type IdentitySeedPhraseKeyPairs, normalizeIdentitySeedPhrase, validateIdentitySeedPhrase, } from "./identitySeedPhrase.js";
+export { createIncrementalSha256, type IncrementalSha256, } from "./incrementalSha256.js";
+export type { AccessEvent, AccessEventType, AccessManifest, AccessManifestCheckpoint, AccessManifestTransparencyLeaf, AccessObjectKind, AnyVerifiedAccessManifest, AnyVerifiedPrincipalPolicy, AttachmentAccessEventBody, AttachmentBindAccessEventBody, AttachmentDetachAccessEventBody, BlobAccessManifest, BlobContentKeyTarget, ContainerAccessEventBody, ContainerAccessKeyState, ContainerAccessLevel, ContainerAccessManifest, ContainerAccessManifestState, ContainerAccessStructural, ContainerCreateAccessEventBody, ContainerDirectGrant, ContainerGrantAccessEventBody, ContainerGrantPrincipalHead, ContainerGrantSubjectType, ContainerKekKeyring, ContainerKekKeyringEntry, ContainerKekPredecessorBridge, ContainerKekRecipientTarget, ContainerKekTarget, ContainerKeyEpoch, ContainerKeyWrap, ContainerMoveAccessEventBody, ContainerReciteAccessEventBody, ContainerRekeyAccessEventBody, ContainerRevokeAccessEventBody, ContainerUserRecipientKey, ContentObjectKind, ContentRecordEncryptionSuite, ContentRecordNonceDomain, DeriveBlobKekTargetsInput, DeriveContainerKekRecipientTargetsInput, DeriveDocumentKekTargetsInput, DocumentAccessEventBody, DocumentContentKeyTarget, DocumentContentRecordMetadataInput, DocumentLinkAccessEventBody, DocumentLinkSetManifestState, DocumentLinkSetStructural, DocumentPurgeAccessEventBody, DocumentUnlinkAccessEventBody, IdentityStateCheckpoint, IdentityStateHead, IdentityStateTransparencyLeaf, KekRecipientKind, KeyingCanonicalJson, KeyingHashDomain, KeyingLocalCheckpointStore, KeyingVerificationCode, KeyingVerificationResult, ManagedPrincipalKind, PrincipalHistoryIndexNode, PrincipalPolicyAuthorization, PrincipalPolicyBundle, PrincipalPolicyCheckpoint, PrincipalPolicyCurrent, PrincipalPolicyExternalAuthority, PrincipalPolicyExternalAuthorityState, PrincipalPolicyHistoryInput, PrincipalPolicyHistoryPage, PrincipalPolicyHistoryProgressOptions, PrincipalPolicyHistoryReferenceProof, PrincipalPolicyHistoryVerifier, PrincipalPolicyMemberEnvelopes, PrincipalPolicyPayload, PrincipalPolicySignedState, PrincipalPolicySignerPublicKey, PrincipalPolicySnapshot, PrincipalPolicyStateChainEntry, PrincipalPolicyTransitionMismatch, PrincipalPolicyTransitionMismatchCode, PrincipalPolicyTransparencyLeaf, ReferencedPrincipalHead, SignedTransparencyTreeHead, TransparencyConsistencyProof, TransparencyInclusionProof, TransparencyLeaf, TransparencyLeafKind, TransparencyTreeCheckpoint, UnsignedAccessEvent, UnsignedTransparencyTreeHead, UnsignedWriteHeader, VerifiedAccessEvent, VerifiedAccessManifest, VerifiedAccessManifestCheckpointEvidence, VerifiedAccessManifestSnapshot, VerifiedAttachmentBinding, VerifiedAttachmentDetach, VerifiedBlobKekTargets, VerifiedContainerAccessManifest, VerifiedContainerKekState, VerifiedContainerParentEdge, VerifiedDocumentKekTargets, VerifiedDocumentLinkSetManifest, VerifiedDocumentLinkSetSnapshot, VerifiedDocumentLinkSetStateEvidence, VerifiedIdentityState, VerifiedPrincipalPolicy, VerifiedPrincipalPolicyCurrent, VerifiedPrincipalPolicyHistory, VerifiedPrincipalPolicySelection, VerifiedPrincipalPolicySnapshot, VerifiedTransparencyProof, VerifiedTransparencyTreeHead, VerifiedWriteHeader, VerifyAccessEventInput, VerifyAccessManifestInput, VerifyAttachmentBindingEventInput, VerifyAttachmentDetachEventInput, VerifyContainerAccessManifestInput, VerifyContainerKekStateInput, VerifyContainerParentEdgeInput, VerifyDocumentLinkSetManifestInput, VerifyDocumentPurgeEventInput, VerifyIdentityStateCheckpointInput, VerifyPrincipalPolicyBundleInput, VerifyPrincipalPolicySnapshotInput, VerifySignedTransparencyTreeHeadInput, VerifyTransparencyConsistencyProofInput, VerifyTransparencyInclusionProofInput, VerifyTransparencyProofInput, VerifyWriteHeaderInput, WriteHeader, } from "./keying.js";
+export { ACCESS_MANIFEST_VERIFICATION_REVISION, accessManifestCheckpointFromManifest, accessManifestTransparencyLeaf, assertSealedContainerKekKeyringLength, BLOB_CONTENT_KEY_WRAP_SUITE, CONTAINER_KEK_KEYRING_ENTRY_BYTES, CONTAINER_KEK_KEYRING_FORMAT_VERSION, CONTAINER_KEK_KEYRING_HEADER_BYTES, CONTAINER_KEK_KEYRING_SEAL_SUITE, CONTAINER_KEK_MATERIAL_ID_PREFIX, CONTAINER_KEK_PARENT_WRAP_SUITE, CONTAINER_KEK_PREDECESSOR_WRAP_SUITE, CONTAINER_KEK_USER_WRAP_SUITE, CONTENT_RECORD_ENCRYPTION_SUITE, computeAccessEventBodyHash, computeAccessEventHash, computeAccessManifestHash, computeBlobAccessManifestHash, computeBlobContentKeyTargetHash, computeContainerAccessKeyTargetHash, computeContainerAccessStructuralHash, computeContainerDirectGrantRoot, computeContainerKekKeyringHash, computeContainerKekMaterialId, computeContainerKekPredecessorBridgeHash, computeContainerKekRecipientTargetHash, computeContainerKeyEpochHash, computeContentRecordNonceDomainHash, computeDocumentContentKeyTargetHash, computeDocumentContentRecordCiphertextHash, computeDocumentContentRecordMetadataHash, computeDocumentContentRecordPlaintextHash, computeDocumentLinkSetGrantRoot, computeDocumentLinkSetKeyTargetHash, computeDocumentLinkSetStructuralHash, computeKeyingDomainHash, computeTransparencyLeafHash, computeTransparencyMerkleRoot, computeWriteHeaderHash, createContainerKekPredecessorBridge, createPrincipalHistoryIndexProof, createPrincipalPolicyHistoryVerifier, createTransparencyConsistencyProof, createTransparencyInclusionProof, DOCUMENT_CONTENT_KEY_WRAP_SUITE, deriveBlobKekTargets, deriveContainerAccessManifest, deriveContainerKekRecipientTargets, deriveContainerKekWrappingPublicKey, deriveDocumentKekTargets, deriveDocumentLinkSetManifest, derivePrincipalRecipientKeyEpochId, documentContentRecordMetadata, expectedSealedContainerKekKeyringBytes, getPrincipalPolicyTransitionMismatch, getPrincipalPolicyTransitionMismatchReason, identityStateTransparencyLeaf, isContainerKekMaterialId, isKeyingVerificationCode, KEYING_VERIFICATION_CODES, KeyingVerificationError, MAX_CONTAINER_KEY_EPOCH, MAX_CONTAINER_RECITATION_EPOCH, makeVerifiedAccessEvent, makeVerifiedBlobKekTargets, makeVerifiedContainerAccessManifest, makeVerifiedContainerKekState, makeVerifiedDocumentKekTargets, makeVerifiedDocumentLinkSetManifest, makeVerifiedDocumentLinkSetSnapshot, makeVerifiedPrincipalPolicy, normalizeAttachmentAccessEventBody, normalizeContainerAccessEventBody, normalizeContainerKekKeyring, normalizeContainerKekPredecessorBridge, normalizeDocumentAccessEventBody, normalizeDocumentPurgeAccessEventBody, openContainerKekKeyring, PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT, PRINCIPAL_HISTORY_VERIFICATION_REVISION, principalPolicyMatchesReference, principalPolicyTransparencyLeaf, resolveContainerPathUserAccessLevel, resolveContainerStatePathUserAccessLevel, resolveHistoricalContainerPathUserAccessLevel, restorePrincipalPolicyHistoryVerifier, sealContainerKekKeyring, selectPrincipalPolicyAuthorization, serializeKeyingCanonicalJson, signAccessEvent, signTransparencyTreeHead, signWriteHeader, unwrapContainerKekParentWrap, unwrapContainerKekPredecessorBridge, verifyAccessManifest, verifyAccessManifestLocalCheckpoint, verifyAccessManifestSnapshot, verifyAttachmentBindingEvent, verifyAttachmentDetachEvent, verifyContainerAccessManifest, verifyContainerKekKeyringEntry, verifyContainerKekState, verifyContainerParentEdge, verifyDocumentLinkSetManifest, verifyDocumentLinkSetSnapshot, verifyDocumentPurgeEvent, verifyIdentityStateCheckpoint, verifyPrincipalPolicyBundle, verifyPrincipalPolicyBundleAgainstHistory, verifyPrincipalPolicyCheckpoint, verifyPrincipalPolicyCurrent, verifyPrincipalPolicyHistoryReferences, verifyPrincipalPolicySnapshot, verifySignedAccessEvent, verifySignedTransparencyTreeHead, verifyTransparencyConsistencyProof, verifyTransparencyInclusionProof, verifyTransparencyProof, verifyWriteHeader, } from "./keying.js";
+export { organizationReplacementAuthorizationPayload, organizationReplacementSigningBytes, signOrganizationReplacementAuthorization, type VerifiedOrganizationReplacementAuthorization, verifyOrganizationReplacementAuthorization, } from "./organizationReplacement.js";
+export { computePrincipalContainerGrantRoot, normalizePrincipalContainerGrants, } from "./principalContainerGrants.js";
+export { computePrincipalMemberEnvelopesRoot, normalizePrincipalStateMemberEnvelopes, PrincipalMemberEnvelopeValidationError, } from "./principalMemberEnvelopes.js";
+export type { PrincipalPolicyValidationErrorCode } from "./principalPolicyValidationError.js";
+export { PrincipalPolicyValidationError, throwPrincipalPolicyValidationError, } from "./principalPolicyValidationError.js";
+export type { ManagedRecipientPrincipalType, PrincipalContainerGrant, PrincipalContainerGrantAccessLevel, PrincipalProjectionMember, PrincipalProjectionRole, PrincipalStateExternalAuthority, PrincipalStateHeaderInput, PrincipalStateMember, PrincipalStateMemberEnvelope, PrincipalStateMembershipMode, PrincipalStatePayloadCipherSuite, PrincipalStateSigningInput, SignedPrincipalState, UnsignedPrincipalState, } from "./principalState.js";
+export { buildPrincipalStateSigningInput, computePrincipalMembershipRoot, computePrincipalProjectionRoot, computePrincipalStateHash, computePrincipalStatePayloadCiphertextHash, derivePrincipalProjectionMembers, isManagedRecipientPrincipalType, isPrincipalProjectionRole, normalizePrincipalProjectionMembers, normalizePrincipalStateMembers, serializeUnsignedPrincipalState, signPrincipalState, } from "./principalState.js";
+export { verifySignedPrincipalState, verifySignedPrincipalStateResult, } from "./principalStateVerification.js";
+export { captureProjectionHistory, type HistoryProjection, omitProjectionHistory, type RetainedProjectionHistory, restoreProjectionHistory, } from "./projectionHistory.js";
+export type { SigningKeyPair } from "./signing/generateKeyPair.js";
+export { generateSigningKeyPair, generateSigningSeedAndKeyPair, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SECRET_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, } from "./signing/generateKeyPair.js";
+export { sign } from "./signing/sign.js";
+export { verify } from "./signing/verify.js";
+export type { SymmetricCiphertext } from "./symmetric.js";
+export { AES_256_KEY_BYTES, AES_GCM_IV_BYTES, AES_GCM_TAG_BYTES, assertAesGcmIv, createAesGcmIv, decryptWithDek, encryptWithDek, } from "./symmetric.js";

package/internal/crypto/index.js

@@ -0,0 +1,29 @@
+export { BlobEnvelopeError } from "./blobEnvelopeError.js";
+export { MAX_BLOB_ENVELOPE_HEADER_BYTES, parseBlobEnvelopeV2, parseBlobEnvelopeV2Header, readBlobEnvelopeHeaderByteLength, } from "./blobEnvelopeReader.js";
+export { BLOB_CHUNK_SIZE_BYTES, BLOB_ENCRYPTED_BYTES_FORMAT, BLOB_ENCRYPTED_BYTES_VERSION, BLOB_ENVELOPE_MAGIC_BYTES, BLOB_ENVELOPE_PREFIX_BYTES, blobChunkPlaintextByteLength, computeBlobChunkCount, computeBlobEncryptedByteLength, deriveBlobChunkIv, encodeBlobEnvelopeV2Header, joinBlobPartBytes, MAX_BLOB_CHUNK_COUNT, normalizeBlobChunkSize, } from "./blobEnvelopeV2.js";
+export { compareCanonicalStrings } from "./canonicalOrdering.js";
+export { AUTH_CHALLENGE_BYTES, AUTH_CHALLENGE_HEX_LENGTH, authChallengeSigningBytes, CHALLENGE_TTL_SECONDS, canonicalAuthOrigin, generateChallenge, } from "./challenge.js";
+export { ContentKeyEnvelopeError, decodeContentKeyEnvelope, unwrapContentKey, wrapContentKey, } from "./contentKeyEnvelope.js";
+export { decryptAsRecipient } from "./encapsulation/decryptAsRecipient.js";
+export { encryptForRecipients } from "./encapsulation/encryptForRecipients.js";
+export { generateKemKeyPair, generateKemSeedAndKeyPair, ML_KEM1024_CIPHERTEXT_BYTES, ML_KEM1024_PUBLIC_KEY_BYTES, ML_KEM1024_SECRET_KEY_BYTES, ML_KEM1024_SEED_BYTES, } from "./encapsulation/generateKeyPair.js";
+export { unwrapDek } from "./encapsulation/unwrapDek.js";
+export { wrapDekForRecipients } from "./encapsulation/wrapDek.js";
+export { toFingerprint } from "./fingerprint.js";
+export { decryptGroupMetadata, encodeBuiltinGroupMetadata, encryptGroupMetadata, readGroupMetadata, } from "./groupMetadata.js";
+export { bytesToHex, hexToBytes } from "./hex.js";
+export { createIdentitySeedPhrase, createIdentitySeedPhraseFromEntropy, generateIdentityKeyPairsFromSeedPhrase, IDENTITY_SEED_PHRASE_DERIVATION_SUITE, IDENTITY_SEED_PHRASE_ENTROPY_BYTES, IDENTITY_SEED_PHRASE_STRENGTH_BITS, IDENTITY_SEED_PHRASE_WORDS, normalizeIdentitySeedPhrase, validateIdentitySeedPhrase, } from "./identitySeedPhrase.js";
+export { createIncrementalSha256, } from "./incrementalSha256.js";
+export { ACCESS_MANIFEST_VERIFICATION_REVISION, accessManifestCheckpointFromManifest, accessManifestTransparencyLeaf, assertSealedContainerKekKeyringLength, BLOB_CONTENT_KEY_WRAP_SUITE, CONTAINER_KEK_KEYRING_ENTRY_BYTES, CONTAINER_KEK_KEYRING_FORMAT_VERSION, CONTAINER_KEK_KEYRING_HEADER_BYTES, CONTAINER_KEK_KEYRING_SEAL_SUITE, CONTAINER_KEK_MATERIAL_ID_PREFIX, CONTAINER_KEK_PARENT_WRAP_SUITE, CONTAINER_KEK_PREDECESSOR_WRAP_SUITE, CONTAINER_KEK_USER_WRAP_SUITE, CONTENT_RECORD_ENCRYPTION_SUITE, computeAccessEventBodyHash, computeAccessEventHash, computeAccessManifestHash, computeBlobAccessManifestHash, computeBlobContentKeyTargetHash, computeContainerAccessKeyTargetHash, computeContainerAccessStructuralHash, computeContainerDirectGrantRoot, computeContainerKekKeyringHash, computeContainerKekMaterialId, computeContainerKekPredecessorBridgeHash, computeContainerKekRecipientTargetHash, computeContainerKeyEpochHash, computeContentRecordNonceDomainHash, computeDocumentContentKeyTargetHash, computeDocumentContentRecordCiphertextHash, computeDocumentContentRecordMetadataHash, computeDocumentContentRecordPlaintextHash, computeDocumentLinkSetGrantRoot, computeDocumentLinkSetKeyTargetHash, computeDocumentLinkSetStructuralHash, computeKeyingDomainHash, computeTransparencyLeafHash, computeTransparencyMerkleRoot, computeWriteHeaderHash, createContainerKekPredecessorBridge, createPrincipalHistoryIndexProof, createPrincipalPolicyHistoryVerifier, createTransparencyConsistencyProof, createTransparencyInclusionProof, DOCUMENT_CONTENT_KEY_WRAP_SUITE, deriveBlobKekTargets, deriveContainerAccessManifest, deriveContainerKekRecipientTargets, deriveContainerKekWrappingPublicKey, deriveDocumentKekTargets, deriveDocumentLinkSetManifest, derivePrincipalRecipientKeyEpochId, documentContentRecordMetadata, expectedSealedContainerKekKeyringBytes, getPrincipalPolicyTransitionMismatch, getPrincipalPolicyTransitionMismatchReason, identityStateTransparencyLeaf, isContainerKekMaterialId, isKeyingVerificationCode, KEYING_VERIFICATION_CODES, KeyingVerificationError, MAX_CONTAINER_KEY_EPOCH, MAX_CONTAINER_RECITATION_EPOCH, makeVerifiedAccessEvent, makeVerifiedBlobKekTargets, makeVerifiedContainerAccessManifest, makeVerifiedContainerKekState, makeVerifiedDocumentKekTargets, makeVerifiedDocumentLinkSetManifest, makeVerifiedDocumentLinkSetSnapshot, makeVerifiedPrincipalPolicy, normalizeAttachmentAccessEventBody, normalizeContainerAccessEventBody, normalizeContainerKekKeyring, normalizeContainerKekPredecessorBridge, normalizeDocumentAccessEventBody, normalizeDocumentPurgeAccessEventBody, openContainerKekKeyring, PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT, PRINCIPAL_HISTORY_VERIFICATION_REVISION, principalPolicyMatchesReference, principalPolicyTransparencyLeaf, resolveContainerPathUserAccessLevel, resolveContainerStatePathUserAccessLevel, resolveHistoricalContainerPathUserAccessLevel, restorePrincipalPolicyHistoryVerifier, sealContainerKekKeyring, selectPrincipalPolicyAuthorization, serializeKeyingCanonicalJson, signAccessEvent, signTransparencyTreeHead, signWriteHeader, unwrapContainerKekParentWrap, unwrapContainerKekPredecessorBridge, verifyAccessManifest, verifyAccessManifestLocalCheckpoint, verifyAccessManifestSnapshot, verifyAttachmentBindingEvent, verifyAttachmentDetachEvent, verifyContainerAccessManifest, verifyContainerKekKeyringEntry, verifyContainerKekState, verifyContainerParentEdge, verifyDocumentLinkSetManifest, verifyDocumentLinkSetSnapshot, verifyDocumentPurgeEvent, verifyIdentityStateCheckpoint, verifyPrincipalPolicyBundle, verifyPrincipalPolicyBundleAgainstHistory, verifyPrincipalPolicyCheckpoint, verifyPrincipalPolicyCurrent, verifyPrincipalPolicyHistoryReferences, verifyPrincipalPolicySnapshot, verifySignedAccessEvent, verifySignedTransparencyTreeHead, verifyTransparencyConsistencyProof, verifyTransparencyInclusionProof, verifyTransparencyProof, verifyWriteHeader, } from "./keying.js";
+export { organizationReplacementAuthorizationPayload, organizationReplacementSigningBytes, signOrganizationReplacementAuthorization, verifyOrganizationReplacementAuthorization, } from "./organizationReplacement.js";
+export { computePrincipalContainerGrantRoot, normalizePrincipalContainerGrants, } from "./principalContainerGrants.js";
+export { computePrincipalMemberEnvelopesRoot, normalizePrincipalStateMemberEnvelopes, PrincipalMemberEnvelopeValidationError, } from "./principalMemberEnvelopes.js";
+export { PrincipalPolicyValidationError, throwPrincipalPolicyValidationError, } from "./principalPolicyValidationError.js";
+export { buildPrincipalStateSigningInput, computePrincipalMembershipRoot, computePrincipalProjectionRoot, computePrincipalStateHash, computePrincipalStatePayloadCiphertextHash, derivePrincipalProjectionMembers, isManagedRecipientPrincipalType, isPrincipalProjectionRole, normalizePrincipalProjectionMembers, normalizePrincipalStateMembers, serializeUnsignedPrincipalState, signPrincipalState, } from "./principalState.js";
+export { verifySignedPrincipalState, verifySignedPrincipalStateResult, } from "./principalStateVerification.js";
+export { captureProjectionHistory, omitProjectionHistory, restoreProjectionHistory, } from "./projectionHistory.js";
+export { generateSigningKeyPair, generateSigningSeedAndKeyPair, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SECRET_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, } from "./signing/generateKeyPair.js";
+export { sign } from "./signing/sign.js";
+export { verify } from "./signing/verify.js";
+export { AES_256_KEY_BYTES, AES_GCM_IV_BYTES, AES_GCM_TAG_BYTES, assertAesGcmIv, createAesGcmIv, decryptWithDek, encryptWithDek, } from "./symmetric.js";
+//# sourceMappingURL=index.js.map

package/internal/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKxD,OAAO,EACL,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EAGpB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,mCAAmC,EACnC,sCAAsC,EACtC,qCAAqC,EACrC,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,EAE1B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAuI7B,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,8BAA8B,EAC9B,qCAAqC,EACrC,2BAA2B,EAC3B,iCAAiC,EACjC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,+BAA+B,EAC/B,8BAA8B,EAC9B,6BAA6B,EAC7B,wCAAwC,EACxC,sCAAsC,EACtC,4BAA4B,EAC5B,mCAAmC,EACnC,mCAAmC,EACnC,0CAA0C,EAC1C,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,sBAAsB,EACtB,mCAAmC,EACnC,gCAAgC,EAChC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,+BAA+B,EAC/B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,EACnC,wBAAwB,EACxB,6BAA6B,EAC7B,kCAAkC,EAClC,6BAA6B,EAC7B,sCAAsC,EACtC,oCAAoC,EACpC,0CAA0C,EAC1C,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,mCAAmC,EACnC,6BAA6B,EAC7B,8BAA8B,EAC9B,mCAAmC,EACnC,mCAAmC,EACnC,2BAA2B,EAC3B,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,sCAAsC,EACtC,gCAAgC,EAChC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,uCAAuC,EACvC,+BAA+B,EAC/B,+BAA+B,EAC/B,mCAAmC,EACnC,wCAAwC,EACxC,6CAA6C,EAC7C,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,mCAAmC,EACnC,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,yCAAyC,EACzC,+BAA+B,EAC/B,4BAA4B,EAC5B,sCAAsC,EACtC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,kCAAkC,EAClC,gCAAgC,EAChC,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,2CAA2C,EAC3C,mCAAmC,EACnC,wCAAwC,EAExC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAiB1C,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,yBAAyB,EACzB,0CAA0C,EAC1C,gCAAgC,EAChC,+BAA+B,EAC/B,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,+BAA+B,EAC/B,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wBAAwB,EAExB,qBAAqB,EAErB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC","sourcesContent":["export { BlobEnvelopeError } from \"./blobEnvelopeError\";\nexport type {\n  BlobEnvelopeHeaderRecord,\n  BlobEnvelopeRecord,\n} from \"./blobEnvelopeReader\";\nexport {\n  MAX_BLOB_ENVELOPE_HEADER_BYTES,\n  parseBlobEnvelopeV2,\n  parseBlobEnvelopeV2Header,\n  readBlobEnvelopeHeaderByteLength,\n} from \"./blobEnvelopeReader\";\nexport type { BlobEnvelopeV2Header } from \"./blobEnvelopeV2\";\nexport {\n  BLOB_CHUNK_SIZE_BYTES,\n  BLOB_ENCRYPTED_BYTES_FORMAT,\n  BLOB_ENCRYPTED_BYTES_VERSION,\n  BLOB_ENVELOPE_MAGIC_BYTES,\n  BLOB_ENVELOPE_PREFIX_BYTES,\n  blobChunkPlaintextByteLength,\n  computeBlobChunkCount,\n  computeBlobEncryptedByteLength,\n  deriveBlobChunkIv,\n  encodeBlobEnvelopeV2Header,\n  joinBlobPartBytes,\n  MAX_BLOB_CHUNK_COUNT,\n  normalizeBlobChunkSize,\n} from \"./blobEnvelopeV2\";\nexport { compareCanonicalStrings } from \"./canonicalOrdering\";\nexport {\n  AUTH_CHALLENGE_BYTES,\n  AUTH_CHALLENGE_HEX_LENGTH,\n  authChallengeSigningBytes,\n  CHALLENGE_TTL_SECONDS,\n  canonicalAuthOrigin,\n  generateChallenge,\n} from \"./challenge\";\nexport type {\n  ContentKeyEnvelopeKind,\n  ContentKeyWrapBinding,\n} from \"./contentKeyEnvelope\";\nexport {\n  ContentKeyEnvelopeError,\n  decodeContentKeyEnvelope,\n  unwrapContentKey,\n  wrapContentKey,\n} from \"./contentKeyEnvelope\";\nexport { decryptAsRecipient } from \"./encapsulation/decryptAsRecipient\";\nexport { encryptForRecipients } from \"./encapsulation/encryptForRecipients\";\nexport type { EncapsulationKeyPair } from \"./encapsulation/generateKeyPair\";\nexport {\n  generateKemKeyPair,\n  generateKemSeedAndKeyPair,\n  ML_KEM1024_CIPHERTEXT_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  ML_KEM1024_SECRET_KEY_BYTES,\n  ML_KEM1024_SEED_BYTES,\n} from \"./encapsulation/generateKeyPair\";\nexport type { EncryptedEnvelope, RecipientEntry } from \"./encapsulation/types\";\nexport { unwrapDek } from \"./encapsulation/unwrapDek\";\nexport { wrapDekForRecipients } from \"./encapsulation/wrapDek\";\nexport { toFingerprint } from \"./fingerprint\";\nexport {\n  decryptGroupMetadata,\n  encodeBuiltinGroupMetadata,\n  encryptGroupMetadata,\n  type GroupMetadata,\n  type GroupMetadataKey,\n  readGroupMetadata,\n} from \"./groupMetadata\";\nexport { bytesToHex, hexToBytes } from \"./hex\";\nexport {\n  createIdentitySeedPhrase,\n  createIdentitySeedPhraseFromEntropy,\n  generateIdentityKeyPairsFromSeedPhrase,\n  IDENTITY_SEED_PHRASE_DERIVATION_SUITE,\n  IDENTITY_SEED_PHRASE_ENTROPY_BYTES,\n  IDENTITY_SEED_PHRASE_STRENGTH_BITS,\n  IDENTITY_SEED_PHRASE_WORDS,\n  type IdentitySeedPhraseKeyPairs,\n  normalizeIdentitySeedPhrase,\n  validateIdentitySeedPhrase,\n} from \"./identitySeedPhrase\";\nexport {\n  createIncrementalSha256,\n  type IncrementalSha256,\n} from \"./incrementalSha256\";\nexport type {\n  AccessEvent,\n  AccessEventType,\n  AccessManifest,\n  AccessManifestCheckpoint,\n  AccessManifestTransparencyLeaf,\n  AccessObjectKind,\n  AnyVerifiedAccessManifest,\n  AnyVerifiedPrincipalPolicy,\n  AttachmentAccessEventBody,\n  AttachmentBindAccessEventBody,\n  AttachmentDetachAccessEventBody,\n  BlobAccessManifest,\n  BlobContentKeyTarget,\n  ContainerAccessEventBody,\n  ContainerAccessKeyState,\n  ContainerAccessLevel,\n  ContainerAccessManifest,\n  ContainerAccessManifestState,\n  ContainerAccessStructural,\n  ContainerCreateAccessEventBody,\n  ContainerDirectGrant,\n  ContainerGrantAccessEventBody,\n  ContainerGrantPrincipalHead,\n  ContainerGrantSubjectType,\n  ContainerKekKeyring,\n  ContainerKekKeyringEntry,\n  ContainerKekPredecessorBridge,\n  ContainerKekRecipientTarget,\n  ContainerKekTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  ContainerMoveAccessEventBody,\n  ContainerReciteAccessEventBody,\n  ContainerRekeyAccessEventBody,\n  ContainerRevokeAccessEventBody,\n  ContainerUserRecipientKey,\n  ContentObjectKind,\n  ContentRecordEncryptionSuite,\n  ContentRecordNonceDomain,\n  DeriveBlobKekTargetsInput,\n  DeriveContainerKekRecipientTargetsInput,\n  DeriveDocumentKekTargetsInput,\n  DocumentAccessEventBody,\n  DocumentContentKeyTarget,\n  DocumentContentRecordMetadataInput,\n  DocumentLinkAccessEventBody,\n  DocumentLinkSetManifestState,\n  DocumentLinkSetStructural,\n  DocumentPurgeAccessEventBody,\n  DocumentUnlinkAccessEventBody,\n  IdentityStateCheckpoint,\n  IdentityStateHead,\n  IdentityStateTransparencyLeaf,\n  KekRecipientKind,\n  KeyingCanonicalJson,\n  KeyingHashDomain,\n  KeyingLocalCheckpointStore,\n  KeyingVerificationCode,\n  KeyingVerificationResult,\n  ManagedPrincipalKind,\n  PrincipalHistoryIndexNode,\n  PrincipalPolicyAuthorization,\n  PrincipalPolicyBundle,\n  PrincipalPolicyCheckpoint,\n  PrincipalPolicyCurrent,\n  PrincipalPolicyExternalAuthority,\n  PrincipalPolicyExternalAuthorityState,\n  PrincipalPolicyHistoryInput,\n  PrincipalPolicyHistoryPage,\n  PrincipalPolicyHistoryProgressOptions,\n  PrincipalPolicyHistoryReferenceProof,\n  PrincipalPolicyHistoryVerifier,\n  PrincipalPolicyMemberEnvelopes,\n  PrincipalPolicyPayload,\n  PrincipalPolicySignedState,\n  PrincipalPolicySignerPublicKey,\n  PrincipalPolicySnapshot,\n  PrincipalPolicyStateChainEntry,\n  PrincipalPolicyTransitionMismatch,\n  PrincipalPolicyTransitionMismatchCode,\n  PrincipalPolicyTransparencyLeaf,\n  ReferencedPrincipalHead,\n  SignedTransparencyTreeHead,\n  TransparencyConsistencyProof,\n  TransparencyInclusionProof,\n  TransparencyLeaf,\n  TransparencyLeafKind,\n  TransparencyTreeCheckpoint,\n  UnsignedAccessEvent,\n  UnsignedTransparencyTreeHead,\n  UnsignedWriteHeader,\n  VerifiedAccessEvent,\n  VerifiedAccessManifest,\n  VerifiedAccessManifestCheckpointEvidence,\n  VerifiedAccessManifestSnapshot,\n  VerifiedAttachmentBinding,\n  VerifiedAttachmentDetach,\n  VerifiedBlobKekTargets,\n  VerifiedContainerAccessManifest,\n  VerifiedContainerKekState,\n  VerifiedContainerParentEdge,\n  VerifiedDocumentKekTargets,\n  VerifiedDocumentLinkSetManifest,\n  VerifiedDocumentLinkSetSnapshot,\n  VerifiedDocumentLinkSetStateEvidence,\n  VerifiedIdentityState,\n  VerifiedPrincipalPolicy,\n  VerifiedPrincipalPolicyCurrent,\n  VerifiedPrincipalPolicyHistory,\n  VerifiedPrincipalPolicySelection,\n  VerifiedPrincipalPolicySnapshot,\n  VerifiedTransparencyProof,\n  VerifiedTransparencyTreeHead,\n  VerifiedWriteHeader,\n  VerifyAccessEventInput,\n  VerifyAccessManifestInput,\n  VerifyAttachmentBindingEventInput,\n  VerifyAttachmentDetachEventInput,\n  VerifyContainerAccessManifestInput,\n  VerifyContainerKekStateInput,\n  VerifyContainerParentEdgeInput,\n  VerifyDocumentLinkSetManifestInput,\n  VerifyDocumentPurgeEventInput,\n  VerifyIdentityStateCheckpointInput,\n  VerifyPrincipalPolicyBundleInput,\n  VerifyPrincipalPolicySnapshotInput,\n  VerifySignedTransparencyTreeHeadInput,\n  VerifyTransparencyConsistencyProofInput,\n  VerifyTransparencyInclusionProofInput,\n  VerifyTransparencyProofInput,\n  VerifyWriteHeaderInput,\n  WriteHeader,\n} from \"./keying\";\nexport {\n  ACCESS_MANIFEST_VERIFICATION_REVISION,\n  accessManifestCheckpointFromManifest,\n  accessManifestTransparencyLeaf,\n  assertSealedContainerKekKeyringLength,\n  BLOB_CONTENT_KEY_WRAP_SUITE,\n  CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  CONTAINER_KEK_KEYRING_FORMAT_VERSION,\n  CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  CONTAINER_KEK_KEYRING_SEAL_SUITE,\n  CONTAINER_KEK_MATERIAL_ID_PREFIX,\n  CONTAINER_KEK_PARENT_WRAP_SUITE,\n  CONTAINER_KEK_PREDECESSOR_WRAP_SUITE,\n  CONTAINER_KEK_USER_WRAP_SUITE,\n  CONTENT_RECORD_ENCRYPTION_SUITE,\n  computeAccessEventBodyHash,\n  computeAccessEventHash,\n  computeAccessManifestHash,\n  computeBlobAccessManifestHash,\n  computeBlobContentKeyTargetHash,\n  computeContainerAccessKeyTargetHash,\n  computeContainerAccessStructuralHash,\n  computeContainerDirectGrantRoot,\n  computeContainerKekKeyringHash,\n  computeContainerKekMaterialId,\n  computeContainerKekPredecessorBridgeHash,\n  computeContainerKekRecipientTargetHash,\n  computeContainerKeyEpochHash,\n  computeContentRecordNonceDomainHash,\n  computeDocumentContentKeyTargetHash,\n  computeDocumentContentRecordCiphertextHash,\n  computeDocumentContentRecordMetadataHash,\n  computeDocumentContentRecordPlaintextHash,\n  computeDocumentLinkSetGrantRoot,\n  computeDocumentLinkSetKeyTargetHash,\n  computeDocumentLinkSetStructuralHash,\n  computeKeyingDomainHash,\n  computeTransparencyLeafHash,\n  computeTransparencyMerkleRoot,\n  computeWriteHeaderHash,\n  createContainerKekPredecessorBridge,\n  createPrincipalHistoryIndexProof,\n  createPrincipalPolicyHistoryVerifier,\n  createTransparencyConsistencyProof,\n  createTransparencyInclusionProof,\n  DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n  deriveBlobKekTargets,\n  deriveContainerAccessManifest,\n  deriveContainerKekRecipientTargets,\n  deriveContainerKekWrappingPublicKey,\n  deriveDocumentKekTargets,\n  deriveDocumentLinkSetManifest,\n  derivePrincipalRecipientKeyEpochId,\n  documentContentRecordMetadata,\n  expectedSealedContainerKekKeyringBytes,\n  getPrincipalPolicyTransitionMismatch,\n  getPrincipalPolicyTransitionMismatchReason,\n  identityStateTransparencyLeaf,\n  isContainerKekMaterialId,\n  isKeyingVerificationCode,\n  KEYING_VERIFICATION_CODES,\n  KeyingVerificationError,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_CONTAINER_RECITATION_EPOCH,\n  makeVerifiedAccessEvent,\n  makeVerifiedBlobKekTargets,\n  makeVerifiedContainerAccessManifest,\n  makeVerifiedContainerKekState,\n  makeVerifiedDocumentKekTargets,\n  makeVerifiedDocumentLinkSetManifest,\n  makeVerifiedDocumentLinkSetSnapshot,\n  makeVerifiedPrincipalPolicy,\n  normalizeAttachmentAccessEventBody,\n  normalizeContainerAccessEventBody,\n  normalizeContainerKekKeyring,\n  normalizeContainerKekPredecessorBridge,\n  normalizeDocumentAccessEventBody,\n  normalizeDocumentPurgeAccessEventBody,\n  openContainerKekKeyring,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  PRINCIPAL_HISTORY_VERIFICATION_REVISION,\n  principalPolicyMatchesReference,\n  principalPolicyTransparencyLeaf,\n  resolveContainerPathUserAccessLevel,\n  resolveContainerStatePathUserAccessLevel,\n  resolveHistoricalContainerPathUserAccessLevel,\n  restorePrincipalPolicyHistoryVerifier,\n  sealContainerKekKeyring,\n  selectPrincipalPolicyAuthorization,\n  serializeKeyingCanonicalJson,\n  signAccessEvent,\n  signTransparencyTreeHead,\n  signWriteHeader,\n  unwrapContainerKekParentWrap,\n  unwrapContainerKekPredecessorBridge,\n  verifyAccessManifest,\n  verifyAccessManifestLocalCheckpoint,\n  verifyAccessManifestSnapshot,\n  verifyAttachmentBindingEvent,\n  verifyAttachmentDetachEvent,\n  verifyContainerAccessManifest,\n  verifyContainerKekKeyringEntry,\n  verifyContainerKekState,\n  verifyContainerParentEdge,\n  verifyDocumentLinkSetManifest,\n  verifyDocumentLinkSetSnapshot,\n  verifyDocumentPurgeEvent,\n  verifyIdentityStateCheckpoint,\n  verifyPrincipalPolicyBundle,\n  verifyPrincipalPolicyBundleAgainstHistory,\n  verifyPrincipalPolicyCheckpoint,\n  verifyPrincipalPolicyCurrent,\n  verifyPrincipalPolicyHistoryReferences,\n  verifyPrincipalPolicySnapshot,\n  verifySignedAccessEvent,\n  verifySignedTransparencyTreeHead,\n  verifyTransparencyConsistencyProof,\n  verifyTransparencyInclusionProof,\n  verifyTransparencyProof,\n  verifyWriteHeader,\n} from \"./keying\";\nexport {\n  organizationReplacementAuthorizationPayload,\n  organizationReplacementSigningBytes,\n  signOrganizationReplacementAuthorization,\n  type VerifiedOrganizationReplacementAuthorization,\n  verifyOrganizationReplacementAuthorization,\n} from \"./organizationReplacement\";\nexport {\n  computePrincipalContainerGrantRoot,\n  normalizePrincipalContainerGrants,\n} from \"./principalContainerGrants\";\nexport {\n  computePrincipalMemberEnvelopesRoot,\n  normalizePrincipalStateMemberEnvelopes,\n  PrincipalMemberEnvelopeValidationError,\n} from \"./principalMemberEnvelopes\";\nexport type { PrincipalPolicyValidationErrorCode } from \"./principalPolicyValidationError\";\nexport {\n  PrincipalPolicyValidationError,\n  throwPrincipalPolicyValidationError,\n} from \"./principalPolicyValidationError\";\nexport type {\n  ManagedRecipientPrincipalType,\n  PrincipalContainerGrant,\n  PrincipalContainerGrantAccessLevel,\n  PrincipalProjectionMember,\n  PrincipalProjectionRole,\n  PrincipalStateExternalAuthority,\n  PrincipalStateHeaderInput,\n  PrincipalStateMember,\n  PrincipalStateMemberEnvelope,\n  PrincipalStateMembershipMode,\n  PrincipalStatePayloadCipherSuite,\n  PrincipalStateSigningInput,\n  SignedPrincipalState,\n  UnsignedPrincipalState,\n} from \"./principalState\";\nexport {\n  buildPrincipalStateSigningInput,\n  computePrincipalMembershipRoot,\n  computePrincipalProjectionRoot,\n  computePrincipalStateHash,\n  computePrincipalStatePayloadCiphertextHash,\n  derivePrincipalProjectionMembers,\n  isManagedRecipientPrincipalType,\n  isPrincipalProjectionRole,\n  normalizePrincipalProjectionMembers,\n  normalizePrincipalStateMembers,\n  serializeUnsignedPrincipalState,\n  signPrincipalState,\n} from \"./principalState\";\nexport {\n  verifySignedPrincipalState,\n  verifySignedPrincipalStateResult,\n} from \"./principalStateVerification\";\nexport {\n  captureProjectionHistory,\n  type HistoryProjection,\n  omitProjectionHistory,\n  type RetainedProjectionHistory,\n  restoreProjectionHistory,\n} from \"./projectionHistory\";\nexport type { SigningKeyPair } from \"./signing/generateKeyPair\";\nexport {\n  generateSigningKeyPair,\n  generateSigningSeedAndKeyPair,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SECRET_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n} from \"./signing/generateKeyPair\";\nexport { sign } from \"./signing/sign\";\nexport { verify } from \"./signing/verify\";\nexport type { SymmetricCiphertext } from \"./symmetric\";\nexport {\n  AES_256_KEY_BYTES,\n  AES_GCM_IV_BYTES,\n  AES_GCM_TAG_BYTES,\n  assertAesGcmIv,\n  createAesGcmIv,\n  decryptWithDek,\n  encryptWithDek,\n} from \"./symmetric\";\n"]}

package/internal/crypto/keying/accessEvent.d.ts

@@ -0,0 +1,11 @@
+import type { AccessEvent, AccessManifest, KeyingCanonicalJson, KeyingVerificationResult, ReferencedPrincipalHead, UnsignedAccessEvent, VerifiedAccessEvent, VerifiedAccessManifest, VerifyAccessEventInput, VerifyAccessManifestInput } from "./types.js";
+export declare function computeAccessEventBodyHash(body: KeyingCanonicalJson): Promise<string>;
+export declare function signAccessEvent(event: UnsignedAccessEvent, signingPrivateKey: Uint8Array): Promise<AccessEvent>;
+export declare function computeAccessEventHash(event: AccessEvent): Promise<string>;
+export declare function verifySignedAccessEvent({ body, event, signerPublicKey, }: VerifyAccessEventInput): Promise<KeyingVerificationResult<VerifiedAccessEvent>>;
+export declare function normalizeReferencedPrincipalHead(value: unknown): ReferencedPrincipalHead;
+export declare function referencedPrincipalKey(principal: ReferencedPrincipalHead): string;
+export declare function normalizeReferencedPrincipalHeads(values: readonly unknown[]): ReferencedPrincipalHead[];
+export declare function normalizeAccessManifest(value: unknown): AccessManifest;
+export declare function computeAccessManifestHash(manifest: AccessManifest): Promise<string>;
+export declare function verifyAccessManifest({ checkpointPredecessors, event, expectedManifestHash, expectedObject, expectedPreviousManifestHash, localCheckpoint, manifest, }: VerifyAccessManifestInput): Promise<KeyingVerificationResult<VerifiedAccessManifest>>;