@trustbaseai/account 0.1.0

package/dist/hd.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * 助记词 → 账户（设备账户的"首次打开即建账户"路径，SDK 方案 §3.2.3 / §8.3.2 ②）。
+ *
+ * ```
+ * BIP39 助记词 ──(PBKDF2-HMAC-SHA512, 2048 次, salt="mnemonic"+passphrase)──▶ 64 字节种子
+ *   种子 ──(BIP32/CIP-3 路径 m/44'/118'/0'/0/0)──▶ secp256k1 私钥（32 字节）
+ *     私钥 ──▶ 33 字节压缩公钥 ──▶ tct1… 地址（口径见 address.ts）
+ * ```
+ *
+ * ## 为什么路径是 `m/44'/118'/0'/0/0`
+ *
+ * `118` 是 Cosmos 的 coin type（SLIP-44 登记值），后面 `0'/0/0` 是"第一个账户、
+ * 外部链、第一个地址"。这与 cosmjs 的 `DirectSecp256k1HdWallet` 默认值一致
+ * （`@trustbase/protocol` 的 `HD_PATH` 就是这一串），所以同一份助记词在本 SDK、
+ * 在 cosmjs、在链侧 keyring 里派生出的是**同一个地址**。改这个路径 = 让所有
+ * 已发出的纸密钥指向另一个地址，属于红线。
+ *
+ * ## 助记词口令（passphrase，BIP39 的"第 13/25 个词"）
+ *
+ * 本 SDK v0 **不使用**它（不引导用户设置，避免多一层"忘了我还设过口令"的坑），
+ * 但参数保留并直通底层：将来要支持时不必改签名，且**必须**记住 BIP39 的交错
+ * 结构 —— 助记词带不带 passphrase 派生出的是两个完全不同的账户。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WORDLIST_ENGLISH = exports.ACCOUNT_DERIVATION_PATH = void 0;
+exports.mnemonicToSeed = mnemonicToSeed;
+exports.deriveAccountFromMnemonic = deriveAccountFromMnemonic;
+exports.accountFromPrivateKey = accountFromPrivateKey;
+exports.createAccount = createAccount;
+const bip32_1 = require("@scure/bip32");
+const bip39_1 = require("@scure/bip39");
+const english_1 = require("@scure/bip39/wordlists/english");
+const address_1 = require("./address");
+const bytes_1 = require("./bytes");
+const errors_1 = require("./errors");
+const keys_1 = require("./keys");
+const mnemonic_1 = require("./mnemonic");
+/**
+ * 账户派生路径。与 `@trustbase/protocol` 的 `HD_PATH` 同值
+ * （漂移由 `test/constants-drift.test.ts` 静态核对）。
+ */
+exports.ACCOUNT_DERIVATION_PATH = "m/44'/118'/0'/0/0";
+/** 助记词（+可选 passphrase）→ 64 字节 BIP39 种子。非法助记词抛 `INVALID_MNEMONIC` */
+function mnemonicToSeed(mnemonic, passphrase = '') {
+    if (!(0, mnemonic_1.validateMnemonic)(mnemonic)) {
+        throw new errors_1.AccountError('INVALID_MNEMONIC', '助记词不合法（词表或校验和不对）—— 请逐词检查拼写');
+    }
+    // 先做空白/NFKD 归一化再交给 BIP39：种子是对助记词**字符串本身**做 PBKDF2，
+    // 多一个空格就是另一份种子（见 mnemonic.ts 的 normalizeMnemonic）
+    return (0, bip39_1.mnemonicToSeedSync)((0, mnemonic_1.normalizeMnemonic)(mnemonic), passphrase);
+}
+function assertPath(path) {
+    if (typeof path !== 'string' || !/^m(\/\d+'?)*$/u.test(path)) {
+        throw new errors_1.AccountError('INVALID_ARGUMENT', `派生路径非法：${String(path)}（形如 m/44'/118'/0'/0/0）`);
+    }
+}
+/**
+ * 助记词 → 账户密钥对 + 地址。
+ *
+ * 种子在函数内派生出私钥后立即清零（种子是我们自己分配的缓冲区）。
+ */
+function deriveAccountFromMnemonic(mnemonic, options = {}) {
+    const path = options.path ?? exports.ACCOUNT_DERIVATION_PATH;
+    const hrp = options.hrp ?? address_1.ACCOUNT_ADDRESS_HRP;
+    assertPath(path);
+    const seed = mnemonicToSeed(mnemonic, options.passphrase ?? '');
+    try {
+        let node;
+        try {
+            node = bip32_1.HDKey.fromMasterSeed(seed).derive(path);
+        }
+        catch (error) {
+            throw new errors_1.AccountError('INVALID_ARGUMENT', `派生失败：${error instanceof Error ? error.message : String(error)}（路径 ${path}）`);
+        }
+        const privateKey = node.privateKey;
+        if (!privateKey || privateKey.length === 0) {
+            throw new errors_1.AccountError('INVALID_MNEMONIC', '派生出的私钥为空 —— 助记词或路径有问题');
+        }
+        const privateKeyCopy = Uint8Array.from(privateKey);
+        const publicKey = (0, keys_1.publicKeyFromPrivateKey)(privateKeyCopy);
+        return { privateKey: privateKeyCopy, publicKey, address: (0, address_1.accountAddressFromPublicKey)(publicKey, hrp), path };
+    }
+    finally {
+        (0, bytes_1.wipe)(seed);
+    }
+}
+/**
+ * 已有私钥 → 账户（地址口径与助记词路径完全一致）。
+ *
+ * 用于备份恢复、测试向量、以及将来"把链上 keyring 里的密钥导进设备账户"。
+ */
+function accountFromPrivateKey(privateKey, options = {}) {
+    const hrp = options.hrp ?? address_1.ACCOUNT_ADDRESS_HRP;
+    const privateKeyCopy = Uint8Array.from(privateKey);
+    const publicKey = (0, keys_1.publicKeyFromPrivateKey)(privateKeyCopy);
+    return { privateKey: privateKeyCopy, publicKey, address: (0, address_1.accountAddressFromPublicKey)(publicKey, hrp) };
+}
+/**
+ * 建一个新设备账户（助记词 + 密钥对 + 地址）。
+ *
+ * ⚠️ 调用方拿到 `mnemonic` 后应当立刻走"抄写门"（见 mnemonic.ts），
+ * 然后**只在内存里**留到写入加密 keystore 为止 —— 本包不落任何明文。
+ */
+function createAccount(options = {}) {
+    const mnemonic = (0, mnemonic_1.generateMnemonic)(options.strength ?? mnemonic_1.DEFAULT_MNEMONIC_STRENGTH, options.rng);
+    const derived = deriveAccountFromMnemonic(mnemonic, options);
+    return { ...derived, mnemonic };
+}
+/** 助记词词表（界面上做拼写提示/校验用；只导出英文表，与生成口径一致） */
+exports.WORDLIST_ENGLISH = english_1.wordlist;
+//# sourceMappingURL=hd.js.map

package/dist/hd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hd.js","sourceRoot":"","sources":["../src/hd.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAiDH,wCAOC;AAaD,8DA0BC;AAOD,sDAKC;AAoBD,sCAIC;AAjID,wCAAqC;AACrC,wCAAkD;AAClD,4DAA6E;AAE7E,uCAA6E;AAC7E,mCAA+B;AAC/B,qCAAwC;AACxC,iCAAiD;AACjD,yCAOoB;AAEpB;;;GAGG;AACU,QAAA,uBAAuB,GAAG,mBAAmB,CAAC;AAyB3D,oEAAoE;AACpE,SAAgB,cAAc,CAAC,QAAgB,EAAE,UAAU,GAAG,EAAE;IAC9D,IAAI,CAAC,IAAA,2BAAgB,EAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,qBAAY,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;IAC3E,CAAC;IACD,mDAAmD;IACnD,kDAAkD;IAClD,OAAO,IAAA,0BAAkB,EAAC,IAAA,4BAAiB,EAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,qBAAY,CAAC,kBAAkB,EAAE,UAAU,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,yBAAyB,CAAC,QAAgB,EAAE,UAAgC,EAAE;IAC5F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,+BAAuB,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,6BAAmB,CAAC;IAC/C,UAAU,CAAC,IAAI,CAAC,CAAC;IAEjB,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,IAAI,IAAW,CAAC;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,aAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,qBAAY,CACpB,kBAAkB,EAClB,QAAQ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAC7E,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,qBAAY,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,IAAA,8BAAuB,EAAC,cAAc,CAAC,CAAC;QAC1D,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,IAAA,qCAA2B,EAAC,SAAS,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/G,CAAC;YAAS,CAAC;QACT,IAAA,YAAI,EAAC,IAAI,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,UAAsB,EAAE,UAA4B,EAAE;IAC1F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,6BAAmB,CAAC;IAC/C,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAA,8BAAuB,EAAC,cAAc,CAAC,CAAC;IAC1D,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,IAAA,qCAA2B,EAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;AACzG,CAAC;AAcD;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,UAAgC,EAAE;IAC9D,MAAM,QAAQ,GAAG,IAAA,2BAAgB,EAAC,OAAO,CAAC,QAAQ,IAAI,oCAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED,yCAAyC;AAC5B,QAAA,gBAAgB,GAAsB,kBAAe,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,60 @@
+/**
+ * `@trustbase/account` —— 账户与密钥库（SDK 方案的"第一块砖"）。
+ *
+ * 任何基于本 SDK 的 PWA 打开就要能"登录并管理自己的账户"（SDK 方案 §3.2），
+ * 本包提供这件事里所有**与密钥材料打交道**的部分，四块能力：
+ *
+ * | 模块 | 能力 | 依据 |
+ * |---|---|---|
+ * | `address` / `keys` / `bech32` | `tct1…` 地址派生（与链上账户地址同口径） | 入口文档 §8.3.2 ①②、SDK 方案 §3.2.3 |
+ * | `keystore` / `kdf` | 口令加密的密钥库（Argon2id + AES-256-GCM，版本化、参数落盘） | SDK 方案 §3.3.1 / §3.3.2 |
+ * | `prf` / `prf-webauthn` / `envelope` | WebAuthn PRF 硬件解锁（生物识别优先、口令回退，双轨解出同一份密钥材料） | SDK 方案 §3.3.5 / §3.3.7 |
+ * | `password` / `mnemonic` / `hd` | 口令强度估算（≥3 分 + 本地黑名单）与 BIP39 助记词 + 抄写门 | SDK 方案 §3.3.6 / §3.3.3 |
+ *
+ * ## 三条不变量（本包的"红线"，改代码前先读）
+ *
+ * 1. **同构**：`src/` 里不得出现任何 Node 内建模块或 Node 全局
+ *    （`node:` 导入 / `process.` / `Buffer` / `__dirname`）。
+ *    这条由 `test/isomorphic.test.ts` 静态扫描守着，不靠自觉。
+ * 2. **绝不托管**：本包不知道任何用户的明文；没有"找回密码"能力；
+ *    助记词是唯一退路（SDK 方案 §3.3.3）。**不提供任何把明文写进
+ *    localStorage / sessionStorage 的路径**。
+ * 3. **一个数据一个来源**：地址 HRP（`tct`）与派生路径（`m/44'/118'/0'/0/0`）
+ *    以 `@trustbase/protocol` 为真源，本包同值声明并由 `test/constants-drift.test.ts`
+ *    静态核对 —— 不在源码里 import 它，是为了让本包能独立构建/发布。
+ *
+ * ## 典型用法（PWA 建户 + 解锁）
+ *
+ * ```ts
+ * // 1) 建户：生成助记词 → 派生账户 → 抄写门 → 写加密 keystore
+ * const account = createAccount();                    // 12 词助记词 + 私钥 + tct1…
+ * const indices = pickTranscriptionIndices(account.mnemonic, 3);
+ * // …让用户回填，然后 checkTranscription(account.mnemonic, indices, answers)
+ * const envelope = await createUnlockEnvelope(account.privateKey, password, { minStrength: 3 });
+ * wipe(account.privateKey);                            // 明文用完就清
+ * // 只把 envelope / 助记词（纸密钥）交给持久化与用户
+ *
+ * // 2) 解锁（口令轨），拿到私钥去做签名
+ * const privateKey = await unlockEnvelope(envelope, { strategy: 'password', password });
+ *
+ * // 3) 之后开启生物识别：不需要重新加密，也不需要重新抄助记词
+ * const withPrf = await attachPrfTrack(envelope, { password, prfSecret, credentialId });
+ * ```
+ *
+ * 详细的格式规范、金标准向量、未验证清单见包 README。
+ */
+export { AccountError, isAccountError, type AccountErrorCode } from './errors';
+export { base64Decode, base64Encode, bytesToHex, bytesToUtf8, concatBytes, decodeBlobField, equalBytes, hexToBytes, utf8ToBytes, wipe, wipeRandom, zeroBytes, type BlobFieldLengthRule, } from './bytes';
+export { AES_GCM_IV_LENGTH, AES_GCM_TAG_LENGTH, AES_KEY_LENGTH, aesGcmDecrypt, aesGcmEncrypt, isWebCryptoAvailable, randomBytes, requireSubtle, type CryptoKeyLike, type CryptoLike, type SubtleCryptoLike, } from './webcrypto';
+export { BECH32_CHARSET, BECH32_MAX_LENGTH, bech32Decode, bech32Encode, bech32HrpExpand, bech32Polymod, convertBits, decodeBech32Address, encodeBech32Address, type Bech32Decoded, } from './bech32';
+export { COMPRESSED_PUBLIC_KEY_LENGTH, PRIVATE_KEY_LENGTH, UNCOMPRESSED_PUBLIC_KEY_LENGTH, compressPublicKey, generatePrivateKey, isValidPrivateKey, isValidPublicKey, publicKeyFromPrivateKey, } from './keys';
+export { ACCOUNT_ADDRESS_BYTES, ACCOUNT_ADDRESS_HRP, accountAddressBytes, accountAddressFromPrivateKey, accountAddressFromPublicKey, isAccountAddress, normalizeAccountAddress, parseAccountAddress, type ParsedAccountAddress, } from './address';
+export { ARGON2ID_MIN_CREATE_PARAMS, ARGON2ID_VERSION, DEFAULT_ARGON2ID_PARAMS, DEFAULT_PBKDF2_ITERATIONS, DERIVED_KEY_LENGTH, KDF_ALGORITHMS, KDF_SALT_LENGTH, MAX_PASSWORD_LENGTH, PBKDF2_MIN_CREATE_ITERATIONS, UNTRUSTED_ARGON2ID_LIMITS, UNTRUSTED_PBKDF2_LIMITS, assertArgon2idParams, assertCreateTimeKdfParams, assertPbkdf2Params, deriveArgon2idKey, derivePbkdf2Key, generateSalt, isArgon2idAvailable, isKdfAlgorithm, passwordToKdfInput, resetArgon2AvailabilityCache, type Argon2idParams, type KdfAlgorithm, type Pbkdf2Params, } from './kdf';
+export { KEYSTORE_AAD_PREFIX, KEYSTORE_CIPHER, KEYSTORE_VERSION, MAX_SECRET_MATERIAL_LENGTH, createKeystore, isKeystoreBlob, keystoreAad, keystoreAadText, parseKeystore, serializeKeystore, unlockKeystore, type CreateKeystoreOptions, type KeystoreBlob, type KeystoreHeader, } from './keystore';
+export { PRF_SALT_DEFAULT_LENGTH, PRF_SALT_MAX_LENGTH, PRF_SALT_MIN_LENGTH, PRF_SECRET_LENGTH, PRF_WRAP_AAD_PREFIX, PRF_WRAP_CIPHER, PRF_WRAP_INFO, PRF_WRAP_KDF, PRF_WRAP_VERSION, createStaticPrfProvider, derivePrfKek, isPrfWrappedKey, isSameSecret, parsePrfWrappedKey, prfWrapAadText, serializePrfWrappedKey, unwrapKeyWithPrf, wrapKeyWithPrf, type PrfProvider, type PrfWrappedKey, type UnlockStrategy, type WrapKeyWithPrfOptions, } from './prf';
+export { UNLOCK_ENVELOPE_AAD_PREFIX, UNLOCK_ENVELOPE_VERSION, DATA_KEY_LENGTH, attachPrfTrack, createUnlockEnvelope, detachPrfTrack, envelopeAadText, isUnlockEnvelope, parseUnlockEnvelope, serializeUnlockEnvelope, unlockEnvelope, type AttachPrfTrackRequest, type EnvelopePayload, type EnvelopeUnlockRequest, type UnlockEnvelope, } from './envelope';
+export { base64UrlToBytes, bytesToBase64Url, createWebAuthnPrfProvider, isWebAuthnPrfSupported, registerWebAuthnPrfCredential, wipePrfSecret, type RegisterWebAuthnPrfOptions, type RegisteredWebAuthnPrfCredential, type WebAuthnPrfProviderOptions, } from './prf-webauthn';
+export { ACCEPTABLE_SCORE, APP_BLOCKLIST, estimatePasswordStrength, isBlocklisted, type PasswordScore, type PasswordStrength, type PasswordStrengthOptions, } from './password';
+export { DEFAULT_MNEMONIC_STRENGTH, MNEMONIC_STRENGTHS, checkTranscription, entropyToMnemonic, generateMnemonic, mnemonicToEntropy, normalizeMnemonic, pickTranscriptionIndices, splitMnemonicWords, validateMnemonic, type MnemonicStrength, type RandomSource, type TranscriptionAnswer, type TranscriptionResult, } from './mnemonic';
+export { ACCOUNT_DERIVATION_PATH, WORDLIST_ENGLISH, accountFromPrivateKey, createAccount, deriveAccountFromMnemonic, mnemonicToSeed, type AccountKeyPair, type CreateAccountOptions, type CreatedAccount, type DeriveAccountOptions, type DerivedAccount, } from './hd';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE/E,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,WAAW,EACX,WAAW,EACX,eAAe,EACf,UAAU,EACV,UAAU,EACV,WAAW,EACX,IAAI,EACJ,UAAU,EACV,SAAS,EACT,KAAK,mBAAmB,GACzB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,aAAa,GACnB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,EAClB,8BAA8B,EAC9B,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,4BAA4B,EAC5B,2BAA2B,EAC3B,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,4BAA4B,EAC5B,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,YAAY,GAClB,MAAM,OAAO,CAAC;AAEf,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,0BAA0B,EAC1B,cAAc,EACd,cAAc,EACd,WAAW,EACX,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACvB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,qBAAqB,GAC3B,MAAM,OAAO,CAAC;AAEf,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,EACb,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,0BAA0B,GAChC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,wBAAwB,EACxB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,yBAAyB,EACzB,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,cAAc,GACpB,MAAM,MAAM,CAAC"}

package/dist/index.js

@@ -0,0 +1,199 @@
+"use strict";
+/**
+ * `@trustbase/account` —— 账户与密钥库（SDK 方案的"第一块砖"）。
+ *
+ * 任何基于本 SDK 的 PWA 打开就要能"登录并管理自己的账户"（SDK 方案 §3.2），
+ * 本包提供这件事里所有**与密钥材料打交道**的部分，四块能力：
+ *
+ * | 模块 | 能力 | 依据 |
+ * |---|---|---|
+ * | `address` / `keys` / `bech32` | `tct1…` 地址派生（与链上账户地址同口径） | 入口文档 §8.3.2 ①②、SDK 方案 §3.2.3 |
+ * | `keystore` / `kdf` | 口令加密的密钥库（Argon2id + AES-256-GCM，版本化、参数落盘） | SDK 方案 §3.3.1 / §3.3.2 |
+ * | `prf` / `prf-webauthn` / `envelope` | WebAuthn PRF 硬件解锁（生物识别优先、口令回退，双轨解出同一份密钥材料） | SDK 方案 §3.3.5 / §3.3.7 |
+ * | `password` / `mnemonic` / `hd` | 口令强度估算（≥3 分 + 本地黑名单）与 BIP39 助记词 + 抄写门 | SDK 方案 §3.3.6 / §3.3.3 |
+ *
+ * ## 三条不变量（本包的"红线"，改代码前先读）
+ *
+ * 1. **同构**：`src/` 里不得出现任何 Node 内建模块或 Node 全局
+ *    （`node:` 导入 / `process.` / `Buffer` / `__dirname`）。
+ *    这条由 `test/isomorphic.test.ts` 静态扫描守着，不靠自觉。
+ * 2. **绝不托管**：本包不知道任何用户的明文；没有"找回密码"能力；
+ *    助记词是唯一退路（SDK 方案 §3.3.3）。**不提供任何把明文写进
+ *    localStorage / sessionStorage 的路径**。
+ * 3. **一个数据一个来源**：地址 HRP（`tct`）与派生路径（`m/44'/118'/0'/0/0`）
+ *    以 `@trustbase/protocol` 为真源，本包同值声明并由 `test/constants-drift.test.ts`
+ *    静态核对 —— 不在源码里 import 它，是为了让本包能独立构建/发布。
+ *
+ * ## 典型用法（PWA 建户 + 解锁）
+ *
+ * ```ts
+ * // 1) 建户：生成助记词 → 派生账户 → 抄写门 → 写加密 keystore
+ * const account = createAccount();                    // 12 词助记词 + 私钥 + tct1…
+ * const indices = pickTranscriptionIndices(account.mnemonic, 3);
+ * // …让用户回填，然后 checkTranscription(account.mnemonic, indices, answers)
+ * const envelope = await createUnlockEnvelope(account.privateKey, password, { minStrength: 3 });
+ * wipe(account.privateKey);                            // 明文用完就清
+ * // 只把 envelope / 助记词（纸密钥）交给持久化与用户
+ *
+ * // 2) 解锁（口令轨），拿到私钥去做签名
+ * const privateKey = await unlockEnvelope(envelope, { strategy: 'password', password });
+ *
+ * // 3) 之后开启生物识别：不需要重新加密，也不需要重新抄助记词
+ * const withPrf = await attachPrfTrack(envelope, { password, prfSecret, credentialId });
+ * ```
+ *
+ * 详细的格式规范、金标准向量、未验证清单见包 README。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ARGON2ID_PARAMS = exports.ARGON2ID_VERSION = exports.ARGON2ID_MIN_CREATE_PARAMS = exports.parseAccountAddress = exports.normalizeAccountAddress = exports.isAccountAddress = exports.accountAddressFromPublicKey = exports.accountAddressFromPrivateKey = exports.accountAddressBytes = exports.ACCOUNT_ADDRESS_HRP = exports.ACCOUNT_ADDRESS_BYTES = exports.publicKeyFromPrivateKey = exports.isValidPublicKey = exports.isValidPrivateKey = exports.generatePrivateKey = exports.compressPublicKey = exports.UNCOMPRESSED_PUBLIC_KEY_LENGTH = exports.PRIVATE_KEY_LENGTH = exports.COMPRESSED_PUBLIC_KEY_LENGTH = exports.encodeBech32Address = exports.decodeBech32Address = exports.convertBits = exports.bech32Polymod = exports.bech32HrpExpand = exports.bech32Encode = exports.bech32Decode = exports.BECH32_MAX_LENGTH = exports.BECH32_CHARSET = exports.requireSubtle = exports.randomBytes = exports.isWebCryptoAvailable = exports.aesGcmEncrypt = exports.aesGcmDecrypt = exports.AES_KEY_LENGTH = exports.AES_GCM_TAG_LENGTH = exports.AES_GCM_IV_LENGTH = exports.zeroBytes = exports.wipeRandom = exports.wipe = exports.utf8ToBytes = exports.hexToBytes = exports.equalBytes = exports.decodeBlobField = exports.concatBytes = exports.bytesToUtf8 = exports.bytesToHex = exports.base64Encode = exports.base64Decode = exports.isAccountError = exports.AccountError = void 0;
+exports.DATA_KEY_LENGTH = exports.UNLOCK_ENVELOPE_VERSION = exports.UNLOCK_ENVELOPE_AAD_PREFIX = exports.wrapKeyWithPrf = exports.unwrapKeyWithPrf = exports.serializePrfWrappedKey = exports.prfWrapAadText = exports.parsePrfWrappedKey = exports.isSameSecret = exports.isPrfWrappedKey = exports.derivePrfKek = exports.createStaticPrfProvider = exports.PRF_WRAP_VERSION = exports.PRF_WRAP_KDF = exports.PRF_WRAP_INFO = exports.PRF_WRAP_CIPHER = exports.PRF_WRAP_AAD_PREFIX = exports.PRF_SECRET_LENGTH = exports.PRF_SALT_MIN_LENGTH = exports.PRF_SALT_MAX_LENGTH = exports.PRF_SALT_DEFAULT_LENGTH = exports.unlockKeystore = exports.serializeKeystore = exports.parseKeystore = exports.keystoreAadText = exports.keystoreAad = exports.isKeystoreBlob = exports.createKeystore = exports.MAX_SECRET_MATERIAL_LENGTH = exports.KEYSTORE_VERSION = exports.KEYSTORE_CIPHER = exports.KEYSTORE_AAD_PREFIX = exports.resetArgon2AvailabilityCache = exports.passwordToKdfInput = exports.isKdfAlgorithm = exports.isArgon2idAvailable = exports.generateSalt = exports.derivePbkdf2Key = exports.deriveArgon2idKey = exports.assertPbkdf2Params = exports.assertCreateTimeKdfParams = exports.assertArgon2idParams = exports.UNTRUSTED_PBKDF2_LIMITS = exports.UNTRUSTED_ARGON2ID_LIMITS = exports.PBKDF2_MIN_CREATE_ITERATIONS = exports.MAX_PASSWORD_LENGTH = exports.KDF_SALT_LENGTH = exports.KDF_ALGORITHMS = exports.DERIVED_KEY_LENGTH = exports.DEFAULT_PBKDF2_ITERATIONS = void 0;
+exports.mnemonicToSeed = exports.deriveAccountFromMnemonic = exports.createAccount = exports.accountFromPrivateKey = exports.WORDLIST_ENGLISH = exports.ACCOUNT_DERIVATION_PATH = exports.validateMnemonic = exports.splitMnemonicWords = exports.pickTranscriptionIndices = exports.normalizeMnemonic = exports.mnemonicToEntropy = exports.generateMnemonic = exports.entropyToMnemonic = exports.checkTranscription = exports.MNEMONIC_STRENGTHS = exports.DEFAULT_MNEMONIC_STRENGTH = exports.isBlocklisted = exports.estimatePasswordStrength = exports.APP_BLOCKLIST = exports.ACCEPTABLE_SCORE = exports.wipePrfSecret = exports.registerWebAuthnPrfCredential = exports.isWebAuthnPrfSupported = exports.createWebAuthnPrfProvider = exports.bytesToBase64Url = exports.base64UrlToBytes = exports.unlockEnvelope = exports.serializeUnlockEnvelope = exports.parseUnlockEnvelope = exports.isUnlockEnvelope = exports.envelopeAadText = exports.detachPrfTrack = exports.createUnlockEnvelope = exports.attachPrfTrack = void 0;
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "AccountError", { enumerable: true, get: function () { return errors_1.AccountError; } });
+Object.defineProperty(exports, "isAccountError", { enumerable: true, get: function () { return errors_1.isAccountError; } });
+var bytes_1 = require("./bytes");
+Object.defineProperty(exports, "base64Decode", { enumerable: true, get: function () { return bytes_1.base64Decode; } });
+Object.defineProperty(exports, "base64Encode", { enumerable: true, get: function () { return bytes_1.base64Encode; } });
+Object.defineProperty(exports, "bytesToHex", { enumerable: true, get: function () { return bytes_1.bytesToHex; } });
+Object.defineProperty(exports, "bytesToUtf8", { enumerable: true, get: function () { return bytes_1.bytesToUtf8; } });
+Object.defineProperty(exports, "concatBytes", { enumerable: true, get: function () { return bytes_1.concatBytes; } });
+Object.defineProperty(exports, "decodeBlobField", { enumerable: true, get: function () { return bytes_1.decodeBlobField; } });
+Object.defineProperty(exports, "equalBytes", { enumerable: true, get: function () { return bytes_1.equalBytes; } });
+Object.defineProperty(exports, "hexToBytes", { enumerable: true, get: function () { return bytes_1.hexToBytes; } });
+Object.defineProperty(exports, "utf8ToBytes", { enumerable: true, get: function () { return bytes_1.utf8ToBytes; } });
+Object.defineProperty(exports, "wipe", { enumerable: true, get: function () { return bytes_1.wipe; } });
+Object.defineProperty(exports, "wipeRandom", { enumerable: true, get: function () { return bytes_1.wipeRandom; } });
+Object.defineProperty(exports, "zeroBytes", { enumerable: true, get: function () { return bytes_1.zeroBytes; } });
+var webcrypto_1 = require("./webcrypto");
+Object.defineProperty(exports, "AES_GCM_IV_LENGTH", { enumerable: true, get: function () { return webcrypto_1.AES_GCM_IV_LENGTH; } });
+Object.defineProperty(exports, "AES_GCM_TAG_LENGTH", { enumerable: true, get: function () { return webcrypto_1.AES_GCM_TAG_LENGTH; } });
+Object.defineProperty(exports, "AES_KEY_LENGTH", { enumerable: true, get: function () { return webcrypto_1.AES_KEY_LENGTH; } });
+Object.defineProperty(exports, "aesGcmDecrypt", { enumerable: true, get: function () { return webcrypto_1.aesGcmDecrypt; } });
+Object.defineProperty(exports, "aesGcmEncrypt", { enumerable: true, get: function () { return webcrypto_1.aesGcmEncrypt; } });
+Object.defineProperty(exports, "isWebCryptoAvailable", { enumerable: true, get: function () { return webcrypto_1.isWebCryptoAvailable; } });
+Object.defineProperty(exports, "randomBytes", { enumerable: true, get: function () { return webcrypto_1.randomBytes; } });
+Object.defineProperty(exports, "requireSubtle", { enumerable: true, get: function () { return webcrypto_1.requireSubtle; } });
+var bech32_1 = require("./bech32");
+Object.defineProperty(exports, "BECH32_CHARSET", { enumerable: true, get: function () { return bech32_1.BECH32_CHARSET; } });
+Object.defineProperty(exports, "BECH32_MAX_LENGTH", { enumerable: true, get: function () { return bech32_1.BECH32_MAX_LENGTH; } });
+Object.defineProperty(exports, "bech32Decode", { enumerable: true, get: function () { return bech32_1.bech32Decode; } });
+Object.defineProperty(exports, "bech32Encode", { enumerable: true, get: function () { return bech32_1.bech32Encode; } });
+Object.defineProperty(exports, "bech32HrpExpand", { enumerable: true, get: function () { return bech32_1.bech32HrpExpand; } });
+Object.defineProperty(exports, "bech32Polymod", { enumerable: true, get: function () { return bech32_1.bech32Polymod; } });
+Object.defineProperty(exports, "convertBits", { enumerable: true, get: function () { return bech32_1.convertBits; } });
+Object.defineProperty(exports, "decodeBech32Address", { enumerable: true, get: function () { return bech32_1.decodeBech32Address; } });
+Object.defineProperty(exports, "encodeBech32Address", { enumerable: true, get: function () { return bech32_1.encodeBech32Address; } });
+var keys_1 = require("./keys");
+Object.defineProperty(exports, "COMPRESSED_PUBLIC_KEY_LENGTH", { enumerable: true, get: function () { return keys_1.COMPRESSED_PUBLIC_KEY_LENGTH; } });
+Object.defineProperty(exports, "PRIVATE_KEY_LENGTH", { enumerable: true, get: function () { return keys_1.PRIVATE_KEY_LENGTH; } });
+Object.defineProperty(exports, "UNCOMPRESSED_PUBLIC_KEY_LENGTH", { enumerable: true, get: function () { return keys_1.UNCOMPRESSED_PUBLIC_KEY_LENGTH; } });
+Object.defineProperty(exports, "compressPublicKey", { enumerable: true, get: function () { return keys_1.compressPublicKey; } });
+Object.defineProperty(exports, "generatePrivateKey", { enumerable: true, get: function () { return keys_1.generatePrivateKey; } });
+Object.defineProperty(exports, "isValidPrivateKey", { enumerable: true, get: function () { return keys_1.isValidPrivateKey; } });
+Object.defineProperty(exports, "isValidPublicKey", { enumerable: true, get: function () { return keys_1.isValidPublicKey; } });
+Object.defineProperty(exports, "publicKeyFromPrivateKey", { enumerable: true, get: function () { return keys_1.publicKeyFromPrivateKey; } });
+var address_1 = require("./address");
+Object.defineProperty(exports, "ACCOUNT_ADDRESS_BYTES", { enumerable: true, get: function () { return address_1.ACCOUNT_ADDRESS_BYTES; } });
+Object.defineProperty(exports, "ACCOUNT_ADDRESS_HRP", { enumerable: true, get: function () { return address_1.ACCOUNT_ADDRESS_HRP; } });
+Object.defineProperty(exports, "accountAddressBytes", { enumerable: true, get: function () { return address_1.accountAddressBytes; } });
+Object.defineProperty(exports, "accountAddressFromPrivateKey", { enumerable: true, get: function () { return address_1.accountAddressFromPrivateKey; } });
+Object.defineProperty(exports, "accountAddressFromPublicKey", { enumerable: true, get: function () { return address_1.accountAddressFromPublicKey; } });
+Object.defineProperty(exports, "isAccountAddress", { enumerable: true, get: function () { return address_1.isAccountAddress; } });
+Object.defineProperty(exports, "normalizeAccountAddress", { enumerable: true, get: function () { return address_1.normalizeAccountAddress; } });
+Object.defineProperty(exports, "parseAccountAddress", { enumerable: true, get: function () { return address_1.parseAccountAddress; } });
+var kdf_1 = require("./kdf");
+Object.defineProperty(exports, "ARGON2ID_MIN_CREATE_PARAMS", { enumerable: true, get: function () { return kdf_1.ARGON2ID_MIN_CREATE_PARAMS; } });
+Object.defineProperty(exports, "ARGON2ID_VERSION", { enumerable: true, get: function () { return kdf_1.ARGON2ID_VERSION; } });
+Object.defineProperty(exports, "DEFAULT_ARGON2ID_PARAMS", { enumerable: true, get: function () { return kdf_1.DEFAULT_ARGON2ID_PARAMS; } });
+Object.defineProperty(exports, "DEFAULT_PBKDF2_ITERATIONS", { enumerable: true, get: function () { return kdf_1.DEFAULT_PBKDF2_ITERATIONS; } });
+Object.defineProperty(exports, "DERIVED_KEY_LENGTH", { enumerable: true, get: function () { return kdf_1.DERIVED_KEY_LENGTH; } });
+Object.defineProperty(exports, "KDF_ALGORITHMS", { enumerable: true, get: function () { return kdf_1.KDF_ALGORITHMS; } });
+Object.defineProperty(exports, "KDF_SALT_LENGTH", { enumerable: true, get: function () { return kdf_1.KDF_SALT_LENGTH; } });
+Object.defineProperty(exports, "MAX_PASSWORD_LENGTH", { enumerable: true, get: function () { return kdf_1.MAX_PASSWORD_LENGTH; } });
+Object.defineProperty(exports, "PBKDF2_MIN_CREATE_ITERATIONS", { enumerable: true, get: function () { return kdf_1.PBKDF2_MIN_CREATE_ITERATIONS; } });
+Object.defineProperty(exports, "UNTRUSTED_ARGON2ID_LIMITS", { enumerable: true, get: function () { return kdf_1.UNTRUSTED_ARGON2ID_LIMITS; } });
+Object.defineProperty(exports, "UNTRUSTED_PBKDF2_LIMITS", { enumerable: true, get: function () { return kdf_1.UNTRUSTED_PBKDF2_LIMITS; } });
+Object.defineProperty(exports, "assertArgon2idParams", { enumerable: true, get: function () { return kdf_1.assertArgon2idParams; } });
+Object.defineProperty(exports, "assertCreateTimeKdfParams", { enumerable: true, get: function () { return kdf_1.assertCreateTimeKdfParams; } });
+Object.defineProperty(exports, "assertPbkdf2Params", { enumerable: true, get: function () { return kdf_1.assertPbkdf2Params; } });
+Object.defineProperty(exports, "deriveArgon2idKey", { enumerable: true, get: function () { return kdf_1.deriveArgon2idKey; } });
+Object.defineProperty(exports, "derivePbkdf2Key", { enumerable: true, get: function () { return kdf_1.derivePbkdf2Key; } });
+Object.defineProperty(exports, "generateSalt", { enumerable: true, get: function () { return kdf_1.generateSalt; } });
+Object.defineProperty(exports, "isArgon2idAvailable", { enumerable: true, get: function () { return kdf_1.isArgon2idAvailable; } });
+Object.defineProperty(exports, "isKdfAlgorithm", { enumerable: true, get: function () { return kdf_1.isKdfAlgorithm; } });
+Object.defineProperty(exports, "passwordToKdfInput", { enumerable: true, get: function () { return kdf_1.passwordToKdfInput; } });
+Object.defineProperty(exports, "resetArgon2AvailabilityCache", { enumerable: true, get: function () { return kdf_1.resetArgon2AvailabilityCache; } });
+var keystore_1 = require("./keystore");
+Object.defineProperty(exports, "KEYSTORE_AAD_PREFIX", { enumerable: true, get: function () { return keystore_1.KEYSTORE_AAD_PREFIX; } });
+Object.defineProperty(exports, "KEYSTORE_CIPHER", { enumerable: true, get: function () { return keystore_1.KEYSTORE_CIPHER; } });
+Object.defineProperty(exports, "KEYSTORE_VERSION", { enumerable: true, get: function () { return keystore_1.KEYSTORE_VERSION; } });
+Object.defineProperty(exports, "MAX_SECRET_MATERIAL_LENGTH", { enumerable: true, get: function () { return keystore_1.MAX_SECRET_MATERIAL_LENGTH; } });
+Object.defineProperty(exports, "createKeystore", { enumerable: true, get: function () { return keystore_1.createKeystore; } });
+Object.defineProperty(exports, "isKeystoreBlob", { enumerable: true, get: function () { return keystore_1.isKeystoreBlob; } });
+Object.defineProperty(exports, "keystoreAad", { enumerable: true, get: function () { return keystore_1.keystoreAad; } });
+Object.defineProperty(exports, "keystoreAadText", { enumerable: true, get: function () { return keystore_1.keystoreAadText; } });
+Object.defineProperty(exports, "parseKeystore", { enumerable: true, get: function () { return keystore_1.parseKeystore; } });
+Object.defineProperty(exports, "serializeKeystore", { enumerable: true, get: function () { return keystore_1.serializeKeystore; } });
+Object.defineProperty(exports, "unlockKeystore", { enumerable: true, get: function () { return keystore_1.unlockKeystore; } });
+var prf_1 = require("./prf");
+Object.defineProperty(exports, "PRF_SALT_DEFAULT_LENGTH", { enumerable: true, get: function () { return prf_1.PRF_SALT_DEFAULT_LENGTH; } });
+Object.defineProperty(exports, "PRF_SALT_MAX_LENGTH", { enumerable: true, get: function () { return prf_1.PRF_SALT_MAX_LENGTH; } });
+Object.defineProperty(exports, "PRF_SALT_MIN_LENGTH", { enumerable: true, get: function () { return prf_1.PRF_SALT_MIN_LENGTH; } });
+Object.defineProperty(exports, "PRF_SECRET_LENGTH", { enumerable: true, get: function () { return prf_1.PRF_SECRET_LENGTH; } });
+Object.defineProperty(exports, "PRF_WRAP_AAD_PREFIX", { enumerable: true, get: function () { return prf_1.PRF_WRAP_AAD_PREFIX; } });
+Object.defineProperty(exports, "PRF_WRAP_CIPHER", { enumerable: true, get: function () { return prf_1.PRF_WRAP_CIPHER; } });
+Object.defineProperty(exports, "PRF_WRAP_INFO", { enumerable: true, get: function () { return prf_1.PRF_WRAP_INFO; } });
+Object.defineProperty(exports, "PRF_WRAP_KDF", { enumerable: true, get: function () { return prf_1.PRF_WRAP_KDF; } });
+Object.defineProperty(exports, "PRF_WRAP_VERSION", { enumerable: true, get: function () { return prf_1.PRF_WRAP_VERSION; } });
+Object.defineProperty(exports, "createStaticPrfProvider", { enumerable: true, get: function () { return prf_1.createStaticPrfProvider; } });
+Object.defineProperty(exports, "derivePrfKek", { enumerable: true, get: function () { return prf_1.derivePrfKek; } });
+Object.defineProperty(exports, "isPrfWrappedKey", { enumerable: true, get: function () { return prf_1.isPrfWrappedKey; } });
+Object.defineProperty(exports, "isSameSecret", { enumerable: true, get: function () { return prf_1.isSameSecret; } });
+Object.defineProperty(exports, "parsePrfWrappedKey", { enumerable: true, get: function () { return prf_1.parsePrfWrappedKey; } });
+Object.defineProperty(exports, "prfWrapAadText", { enumerable: true, get: function () { return prf_1.prfWrapAadText; } });
+Object.defineProperty(exports, "serializePrfWrappedKey", { enumerable: true, get: function () { return prf_1.serializePrfWrappedKey; } });
+Object.defineProperty(exports, "unwrapKeyWithPrf", { enumerable: true, get: function () { return prf_1.unwrapKeyWithPrf; } });
+Object.defineProperty(exports, "wrapKeyWithPrf", { enumerable: true, get: function () { return prf_1.wrapKeyWithPrf; } });
+var envelope_1 = require("./envelope");
+Object.defineProperty(exports, "UNLOCK_ENVELOPE_AAD_PREFIX", { enumerable: true, get: function () { return envelope_1.UNLOCK_ENVELOPE_AAD_PREFIX; } });
+Object.defineProperty(exports, "UNLOCK_ENVELOPE_VERSION", { enumerable: true, get: function () { return envelope_1.UNLOCK_ENVELOPE_VERSION; } });
+Object.defineProperty(exports, "DATA_KEY_LENGTH", { enumerable: true, get: function () { return envelope_1.DATA_KEY_LENGTH; } });
+Object.defineProperty(exports, "attachPrfTrack", { enumerable: true, get: function () { return envelope_1.attachPrfTrack; } });
+Object.defineProperty(exports, "createUnlockEnvelope", { enumerable: true, get: function () { return envelope_1.createUnlockEnvelope; } });
+Object.defineProperty(exports, "detachPrfTrack", { enumerable: true, get: function () { return envelope_1.detachPrfTrack; } });
+Object.defineProperty(exports, "envelopeAadText", { enumerable: true, get: function () { return envelope_1.envelopeAadText; } });
+Object.defineProperty(exports, "isUnlockEnvelope", { enumerable: true, get: function () { return envelope_1.isUnlockEnvelope; } });
+Object.defineProperty(exports, "parseUnlockEnvelope", { enumerable: true, get: function () { return envelope_1.parseUnlockEnvelope; } });
+Object.defineProperty(exports, "serializeUnlockEnvelope", { enumerable: true, get: function () { return envelope_1.serializeUnlockEnvelope; } });
+Object.defineProperty(exports, "unlockEnvelope", { enumerable: true, get: function () { return envelope_1.unlockEnvelope; } });
+var prf_webauthn_1 = require("./prf-webauthn");
+Object.defineProperty(exports, "base64UrlToBytes", { enumerable: true, get: function () { return prf_webauthn_1.base64UrlToBytes; } });
+Object.defineProperty(exports, "bytesToBase64Url", { enumerable: true, get: function () { return prf_webauthn_1.bytesToBase64Url; } });
+Object.defineProperty(exports, "createWebAuthnPrfProvider", { enumerable: true, get: function () { return prf_webauthn_1.createWebAuthnPrfProvider; } });
+Object.defineProperty(exports, "isWebAuthnPrfSupported", { enumerable: true, get: function () { return prf_webauthn_1.isWebAuthnPrfSupported; } });
+Object.defineProperty(exports, "registerWebAuthnPrfCredential", { enumerable: true, get: function () { return prf_webauthn_1.registerWebAuthnPrfCredential; } });
+Object.defineProperty(exports, "wipePrfSecret", { enumerable: true, get: function () { return prf_webauthn_1.wipePrfSecret; } });
+var password_1 = require("./password");
+Object.defineProperty(exports, "ACCEPTABLE_SCORE", { enumerable: true, get: function () { return password_1.ACCEPTABLE_SCORE; } });
+Object.defineProperty(exports, "APP_BLOCKLIST", { enumerable: true, get: function () { return password_1.APP_BLOCKLIST; } });
+Object.defineProperty(exports, "estimatePasswordStrength", { enumerable: true, get: function () { return password_1.estimatePasswordStrength; } });
+Object.defineProperty(exports, "isBlocklisted", { enumerable: true, get: function () { return password_1.isBlocklisted; } });
+var mnemonic_1 = require("./mnemonic");
+Object.defineProperty(exports, "DEFAULT_MNEMONIC_STRENGTH", { enumerable: true, get: function () { return mnemonic_1.DEFAULT_MNEMONIC_STRENGTH; } });
+Object.defineProperty(exports, "MNEMONIC_STRENGTHS", { enumerable: true, get: function () { return mnemonic_1.MNEMONIC_STRENGTHS; } });
+Object.defineProperty(exports, "checkTranscription", { enumerable: true, get: function () { return mnemonic_1.checkTranscription; } });
+Object.defineProperty(exports, "entropyToMnemonic", { enumerable: true, get: function () { return mnemonic_1.entropyToMnemonic; } });
+Object.defineProperty(exports, "generateMnemonic", { enumerable: true, get: function () { return mnemonic_1.generateMnemonic; } });
+Object.defineProperty(exports, "mnemonicToEntropy", { enumerable: true, get: function () { return mnemonic_1.mnemonicToEntropy; } });
+Object.defineProperty(exports, "normalizeMnemonic", { enumerable: true, get: function () { return mnemonic_1.normalizeMnemonic; } });
+Object.defineProperty(exports, "pickTranscriptionIndices", { enumerable: true, get: function () { return mnemonic_1.pickTranscriptionIndices; } });
+Object.defineProperty(exports, "splitMnemonicWords", { enumerable: true, get: function () { return mnemonic_1.splitMnemonicWords; } });
+Object.defineProperty(exports, "validateMnemonic", { enumerable: true, get: function () { return mnemonic_1.validateMnemonic; } });
+var hd_1 = require("./hd");
+Object.defineProperty(exports, "ACCOUNT_DERIVATION_PATH", { enumerable: true, get: function () { return hd_1.ACCOUNT_DERIVATION_PATH; } });
+Object.defineProperty(exports, "WORDLIST_ENGLISH", { enumerable: true, get: function () { return hd_1.WORDLIST_ENGLISH; } });
+Object.defineProperty(exports, "accountFromPrivateKey", { enumerable: true, get: function () { return hd_1.accountFromPrivateKey; } });
+Object.defineProperty(exports, "createAccount", { enumerable: true, get: function () { return hd_1.createAccount; } });
+Object.defineProperty(exports, "deriveAccountFromMnemonic", { enumerable: true, get: function () { return hd_1.deriveAccountFromMnemonic; } });
+Object.defineProperty(exports, "mnemonicToSeed", { enumerable: true, get: function () { return hd_1.mnemonicToSeed; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;;;;;AAEH,mCAA+E;AAAtE,sGAAA,YAAY,OAAA;AAAE,wGAAA,cAAc,OAAA;AAErC,iCAciB;AAbf,qGAAA,YAAY,OAAA;AACZ,qGAAA,YAAY,OAAA;AACZ,mGAAA,UAAU,OAAA;AACV,oGAAA,WAAW,OAAA;AACX,oGAAA,WAAW,OAAA;AACX,wGAAA,eAAe,OAAA;AACf,mGAAA,UAAU,OAAA;AACV,mGAAA,UAAU,OAAA;AACV,oGAAA,WAAW,OAAA;AACX,6FAAA,IAAI,OAAA;AACJ,mGAAA,UAAU,OAAA;AACV,kGAAA,SAAS,OAAA;AAIX,yCAYqB;AAXnB,8GAAA,iBAAiB,OAAA;AACjB,+GAAA,kBAAkB,OAAA;AAClB,2GAAA,cAAc,OAAA;AACd,0GAAA,aAAa,OAAA;AACb,0GAAA,aAAa,OAAA;AACb,iHAAA,oBAAoB,OAAA;AACpB,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AAMf,mCAWkB;AAVhB,wGAAA,cAAc,OAAA;AACd,2GAAA,iBAAiB,OAAA;AACjB,sGAAA,YAAY,OAAA;AACZ,sGAAA,YAAY,OAAA;AACZ,yGAAA,eAAe,OAAA;AACf,uGAAA,aAAa,OAAA;AACb,qGAAA,WAAW,OAAA;AACX,6GAAA,mBAAmB,OAAA;AACnB,6GAAA,mBAAmB,OAAA;AAIrB,+BASgB;AARd,oHAAA,4BAA4B,OAAA;AAC5B,0GAAA,kBAAkB,OAAA;AAClB,sHAAA,8BAA8B,OAAA;AAC9B,yGAAA,iBAAiB,OAAA;AACjB,0GAAA,kBAAkB,OAAA;AAClB,yGAAA,iBAAiB,OAAA;AACjB,wGAAA,gBAAgB,OAAA;AAChB,+GAAA,uBAAuB,OAAA;AAGzB,qCAUmB;AATjB,gHAAA,qBAAqB,OAAA;AACrB,8GAAA,mBAAmB,OAAA;AACnB,8GAAA,mBAAmB,OAAA;AACnB,uHAAA,4BAA4B,OAAA;AAC5B,sHAAA,2BAA2B,OAAA;AAC3B,2GAAA,gBAAgB,OAAA;AAChB,kHAAA,uBAAuB,OAAA;AACvB,8GAAA,mBAAmB,OAAA;AAIrB,6BAyBe;AAxBb,iHAAA,0BAA0B,OAAA;AAC1B,uGAAA,gBAAgB,OAAA;AAChB,8GAAA,uBAAuB,OAAA;AACvB,gHAAA,yBAAyB,OAAA;AACzB,yGAAA,kBAAkB,OAAA;AAClB,qGAAA,cAAc,OAAA;AACd,sGAAA,eAAe,OAAA;AACf,0GAAA,mBAAmB,OAAA;AACnB,mHAAA,4BAA4B,OAAA;AAC5B,gHAAA,yBAAyB,OAAA;AACzB,8GAAA,uBAAuB,OAAA;AACvB,2GAAA,oBAAoB,OAAA;AACpB,gHAAA,yBAAyB,OAAA;AACzB,yGAAA,kBAAkB,OAAA;AAClB,wGAAA,iBAAiB,OAAA;AACjB,sGAAA,eAAe,OAAA;AACf,mGAAA,YAAY,OAAA;AACZ,0GAAA,mBAAmB,OAAA;AACnB,qGAAA,cAAc,OAAA;AACd,yGAAA,kBAAkB,OAAA;AAClB,mHAAA,4BAA4B,OAAA;AAM9B,uCAeoB;AAdlB,+GAAA,mBAAmB,OAAA;AACnB,2GAAA,eAAe,OAAA;AACf,4GAAA,gBAAgB,OAAA;AAChB,sHAAA,0BAA0B,OAAA;AAC1B,0GAAA,cAAc,OAAA;AACd,0GAAA,cAAc,OAAA;AACd,uGAAA,WAAW,OAAA;AACX,2GAAA,eAAe,OAAA;AACf,yGAAA,aAAa,OAAA;AACb,6GAAA,iBAAiB,OAAA;AACjB,0GAAA,cAAc,OAAA;AAMhB,6BAuBe;AAtBb,8GAAA,uBAAuB,OAAA;AACvB,0GAAA,mBAAmB,OAAA;AACnB,0GAAA,mBAAmB,OAAA;AACnB,wGAAA,iBAAiB,OAAA;AACjB,0GAAA,mBAAmB,OAAA;AACnB,sGAAA,eAAe,OAAA;AACf,oGAAA,aAAa,OAAA;AACb,mGAAA,YAAY,OAAA;AACZ,uGAAA,gBAAgB,OAAA;AAChB,8GAAA,uBAAuB,OAAA;AACvB,mGAAA,YAAY,OAAA;AACZ,sGAAA,eAAe,OAAA;AACf,mGAAA,YAAY,OAAA;AACZ,yGAAA,kBAAkB,OAAA;AAClB,qGAAA,cAAc,OAAA;AACd,6GAAA,sBAAsB,OAAA;AACtB,uGAAA,gBAAgB,OAAA;AAChB,qGAAA,cAAc,OAAA;AAOhB,uCAgBoB;AAflB,sHAAA,0BAA0B,OAAA;AAC1B,mHAAA,uBAAuB,OAAA;AACvB,2GAAA,eAAe,OAAA;AACf,0GAAA,cAAc,OAAA;AACd,gHAAA,oBAAoB,OAAA;AACpB,0GAAA,cAAc,OAAA;AACd,2GAAA,eAAe,OAAA;AACf,4GAAA,gBAAgB,OAAA;AAChB,+GAAA,mBAAmB,OAAA;AACnB,mHAAA,uBAAuB,OAAA;AACvB,0GAAA,cAAc,OAAA;AAOhB,+CAUwB;AATtB,gHAAA,gBAAgB,OAAA;AAChB,gHAAA,gBAAgB,OAAA;AAChB,yHAAA,yBAAyB,OAAA;AACzB,sHAAA,sBAAsB,OAAA;AACtB,6HAAA,6BAA6B,OAAA;AAC7B,6GAAA,aAAa,OAAA;AAMf,uCAQoB;AAPlB,4GAAA,gBAAgB,OAAA;AAChB,yGAAA,aAAa,OAAA;AACb,oHAAA,wBAAwB,OAAA;AACxB,yGAAA,aAAa,OAAA;AAMf,uCAeoB;AAdlB,qHAAA,yBAAyB,OAAA;AACzB,8GAAA,kBAAkB,OAAA;AAClB,8GAAA,kBAAkB,OAAA;AAClB,6GAAA,iBAAiB,OAAA;AACjB,4GAAA,gBAAgB,OAAA;AAChB,6GAAA,iBAAiB,OAAA;AACjB,6GAAA,iBAAiB,OAAA;AACjB,oHAAA,wBAAwB,OAAA;AACxB,8GAAA,kBAAkB,OAAA;AAClB,4GAAA,gBAAgB,OAAA;AAOlB,2BAYc;AAXZ,6GAAA,uBAAuB,OAAA;AACvB,sGAAA,gBAAgB,OAAA;AAChB,2GAAA,qBAAqB,OAAA;AACrB,mGAAA,aAAa,OAAA;AACb,+GAAA,yBAAyB,OAAA;AACzB,oGAAA,cAAc,OAAA"}

package/dist/kdf.d.ts

@@ -0,0 +1,163 @@
+/**
+ * 口令 → 密钥（KDF 层）：Argon2id 优先，PBKDF2-HMAC-SHA256 兜底。
+ *
+ * ## 这一层的三条硬规则
+ *
+ * 1. **参数随密文落盘，解锁时只认密文里的参数**。同一个口令 + 同一份盐 +
+ *    不同参数 = 不同的密钥。所以"解锁时按当前默认参数重算"是致命 bug：
+ *    它会解不开旧密文，而报错看起来像"密码错了"。参数里每个字段都必须参与
+ *    认证（见 keystore 的 AAD）。
+ * 2. **不在解锁时偷偷换 KDF**。若密文声明 `argon2id` 而当前环境没有 WASM，
+ *    正确行为是**报错**（`UNSUPPORTED_KDF`），不是"用 PBKDF2 试试" ——
+ *    后者会派生出另一个密钥，把"环境不支持"伪装成"口令错"。
+ *    （SDK 方案 §3.3.1：PBKDF2 是**创建时**的退化方案，不是解锁时的备胎。）
+ * 3. **不可信参数必须先过界再算**。密文可能来自任何地方，`memory: 2^30` 的
+ *    blob 就是一次 DoS。所以先 `assert*Params` 再派生。
+ *
+ * ## 参数默认值的依据
+ *
+ * | 项 | 默认 | 依据 |
+ * |---|---|---|
+ * | Argon2id memory / cost / parallelism | 19456 KiB / 2 / 1 | OWASP Password Storage Cheat Sheet 的 Argon2id 推荐下限（19 MiB, t=2, p=1）。本机实测 ~40ms（WASM，见包 README） |
+ * | Argon2id 版本 | 19（`0x13`） | hash-wasm 内置 Argon2 v1.3（其 README 明确写 "Argon2d, Argon2i, Argon2id (v1.3)"）；别的版本号一律拒，不猜 |
+ * | PBKDF2 iterations | 600000 | SDK 方案 §3.3.1 规定的下限（仅无 WASM 时使用）；本实现不允许低于它**创建** |
+ * | 盐 | 16 字节随机 | 每次创建新随机，绝不复用（复用 = 同口令同密钥） |
+ * | 派生密钥长度 | 32 字节 | AES-256-GCM 的密钥长度；**格式 v1 固定 32**，将来要加长就换版本号 |
+ *
+ * ## 口令的归一化（跨平台一致性）
+ *
+ * 口令先做 **NFC** 归一化再转 UTF-8。理由不是"安全"而是"能打开"：iOS/Android/
+ * 桌面的输入法对 `é` 这类字符给的是"预组合"还是"组合"序列并不一致，不做归一
+ * 会让用户**明明输对了却打不开**（而且我们会说"口令错误"）。用 NFC（不是 NFKC）
+ * 是有意的：NFC 只做**规范等价**合并，不改变字面；NFKC 会把全角变半角、
+ * `①②` 变 `12`，那是真的改口令。将来若有别的语言重写本包，这一步必须一致，
+ * 否则跨端互通会碎。
+ */
+/** 本实现产出的派生密钥长度（AES-256 用）；格式 v1 固定这个值 */
+export declare const DERIVED_KEY_LENGTH = 32;
+/** 盐长度（字节） */
+export declare const KDF_SALT_LENGTH = 16;
+/** hash-wasm 内置的 Argon2 版本（v1.3 = 19）；其它版本号不认 */
+export declare const ARGON2ID_VERSION = 19;
+/** Argon2id 默认参数（OWASP 下限，见文件头） */
+export declare const DEFAULT_ARGON2ID_PARAMS: {
+    readonly memory: 19456;
+    readonly cost: 2;
+    readonly parallelism: 1;
+    readonly hashLength: 32;
+    readonly version: 19;
+};
+/** Argon2id **创建**时的参数下限（低于它 = 不符合设计，直接拒） */
+export declare const ARGON2ID_MIN_CREATE_PARAMS: {
+    readonly memory: 19456;
+    readonly cost: 2;
+};
+/** PBKDF2 默认迭代次数 */
+export declare const DEFAULT_PBKDF2_ITERATIONS = 600000;
+/** PBKDF2 **创建**时的迭代次数下限（SDK 方案 §3.3.1「≥60 万次」） */
+export declare const PBKDF2_MIN_CREATE_ITERATIONS = 600000;
+/** 口令长度上限（SDK 方案 §3.3.6「上限制长度（≤128）防 DoS」） */
+export declare const MAX_PASSWORD_LENGTH = 128;
+/**
+ * 不可信 KDF 参数的取值边界（**解码外来密文**时防 DoS 用）。
+ * 上限取"远高于任何合理参数、又低到打不出资源灾难"的位置。
+ */
+export declare const UNTRUSTED_ARGON2ID_LIMITS: {
+    readonly memory: {
+        readonly min: 8;
+        readonly max: 1048576;
+    };
+    readonly cost: {
+        readonly min: 1;
+        readonly max: 1000;
+    };
+    readonly parallelism: {
+        readonly min: 1;
+        readonly max: 64;
+    };
+};
+export declare const UNTRUSTED_PBKDF2_LIMITS: {
+    readonly iterations: {
+        readonly min: 1;
+        readonly max: 10000000;
+    };
+};
+export type KdfAlgorithm = 'argon2id' | 'pbkdf2';
+export interface Argon2idParams {
+    /** 盐（base64） */
+    salt: string;
+    /** 内存开销，单位 KiB（Argon2 规范 `m`） */
+    memory: number;
+    /** 迭代次数（Argon2 规范 `t`） */
+    cost: number;
+    /** 并行度（Argon2 规范 `p`；hash-wasm 串行执行，但该值参与派生，必须原样保留） */
+    parallelism: number;
+    /** 派生密钥长度（字节）。格式 v1 固定 32 */
+    hashLength: number;
+    /** Argon2 版本号（19 = v1.3） */
+    version: number;
+}
+export interface Pbkdf2Params {
+    /** 盐（base64） */
+    salt: string;
+    iterations: number;
+    /** 派生密钥长度（字节）。格式 v1 固定 32 */
+    hashLength: number;
+    /** 摘要算法；只有 `sha256` —— 别的写法不认（不猜） */
+    hash: 'sha256';
+}
+export declare const KDF_ALGORITHMS: readonly KdfAlgorithm[];
+export declare function isKdfAlgorithm(value: unknown): value is KdfAlgorithm;
+/**
+ * 口令 → KDF 输入字节（NFC 归一 + UTF-8 + 长度上限）。
+ *
+ * 返回的是**我们自己的缓冲区**，用完可以 `wipe()`；口令字符串本身清不掉
+ * （见 bytes.ts 的 `wipe` 说明），所以这一层的价值是"把不可清的东西缩小到
+ * 一次函数调用的范围"。
+ */
+export declare function passwordToKdfInput(password: string): Uint8Array;
+/** 校验（不可信的）Argon2id 参数；不合法抛 `INVALID_BLOB` / `UNSUPPORTED_KDF` */
+export declare function assertArgon2idParams(value: unknown): asserts value is Argon2idParams;
+/** 校验（不可信的）PBKDF2 参数；不合法抛 `INVALID_BLOB` / `UNSUPPORTED_KDF` */
+export declare function assertPbkdf2Params(value: unknown): asserts value is Pbkdf2Params;
+/**
+ * **创建**时的参数下限校验（调用方给的参数是我们自己的口径，不合格就拒）。
+ *
+ * 与解锁路径分开：解锁要"照 blob 走"，不能因为参数低于今天的下限就拒
+ * —— 那是别人（或旧版本的我们）的密文，拒了等于把人锁在门外。
+ */
+export declare function assertCreateTimeKdfParams(algorithm: KdfAlgorithm, params: Argon2idParams | Pbkdf2Params): void;
+/**
+ * 真跑一次的探测（不是只查 `typeof WebAssembly`）。
+ *
+ * 为什么要真跑：CSP 里没有 `wasm-unsafe-eval` 时 `WebAssembly.instantiate`
+ * 会抛错，而 `typeof WebAssembly === 'object'` 照样为 true —— 只查存在性
+ * 会朝"能创建 keystore、将来打不开"的方向失败。这里用一个 8 KiB / 1 迭代的
+ * 极小参数实跑一次，失败即判定不可用（于是创建时退到 PBKDF2）。
+ *
+ * 结果被缓存（包括失败结果）：探测本身约几毫秒，但没必要每次创建都付。
+ */
+export declare function isArgon2idAvailable(): Promise<boolean>;
+/** 仅供测试：清掉探测缓存（例如模拟"这台设备没有 WASM"） */
+export declare function resetArgon2AvailabilityCache(): void;
+/**
+ * Argon2id 派生。本环境跑不起来（没有 WASM / 被 CSP 拦下 / 模块加载失败）时
+ * 抛 `UNSUPPORTED_KDF` —— **不回退**，理由见文件头第 2 条。
+ *
+ * 注意这里把底层调用**整个**包在 try/catch 里：hash-wasm 的模块能加载、
+ * 但 WASM 实例化失败的情况（CSP 缺 `wasm-unsafe-eval`）是在**调用时**才炸的，
+ * 如果只检查"模块加载成功"就会把浏览器原生的错误直接抛给上层，
+ * 而调用方需要的是"这个环境跑不了 Argon2id"这个可分支的语义。
+ */
+export declare function deriveArgon2idKey(params: Argon2idParams, kdfInput: Uint8Array): Promise<Uint8Array>;
+/**
+ * PBKDF2-HMAC-SHA256 派生（无 WASM 时的兜底路径）。
+ *
+ * 用 `@noble/hashes/pbkdf2` 而不是 WebCrypto 的 `deriveBits`：一是确定性更强
+ * （同构环境给同样的字节，便于与 OpenSSL 对照复算），二是这条路径的定位就是
+ * "平台能力缺失时的备胎"，不该再依赖平台。
+ */
+export declare function derivePbkdf2Key(params: Pbkdf2Params, kdfInput: Uint8Array): Promise<Uint8Array>;
+/** 生成一个新盐（base64）—— 只用于**创建**路径 */
+export declare function generateSalt(): string;
+//# sourceMappingURL=kdf.d.ts.map

package/dist/kdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kdf.d.ts","sourceRoot":"","sources":["../src/kdf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AASH,0CAA0C;AAC1C,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,cAAc;AACd,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,iDAAiD;AACjD,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,mCAAmC;AACnC,eAAO,MAAM,uBAAuB;;;;;;CAM1B,CAAC;AACX,6CAA6C;AAC7C,eAAO,MAAM,0BAA0B;;;CAG7B,CAAC;AACX,oBAAoB;AACpB,eAAO,MAAM,yBAAyB,SAAU,CAAC;AACjD,mDAAmD;AACnD,eAAO,MAAM,4BAA4B,SAAU,CAAC;AACpD,8CAA8C;AAC9C,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;CAI5B,CAAC;AACX,eAAO,MAAM,uBAAuB;;;;;CAE1B,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjD,MAAM,WAAW,cAAc;IAC7B,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAA2B,CAAC;AAE9E,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAc/D;AA6BD,kEAAkE;AAClE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAkCpF;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAqBhF;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,GAAG,YAAY,GAAG,IAAI,CAqB9G;AAkBD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAKtD;AAED,qCAAqC;AACrC,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AA+CD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAiCzG;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAMrG;AAED,mCAAmC;AACnC,wBAAgB,YAAY,IAAI,MAAM,CAErC"}