@xyo-network/event-kit-protocol 0.0.1 → 0.1.0

package/README.md

@@ -20,12 +20,27 @@ Paper §6 and §13.
 D-002's target is a raw strict XYO Payload plus a real short-lived wallet JWT;
 there is no separate event signature.
 
+D-005 adds a second, independent pure-protocol surface for the on-chain
+subscription handshake. It provides canonical RFC 8785 bytes, one fixed RFC
+9180 Base-mode suite (X25519/HKDF-SHA256/AES-128-GCM), dedicated encryption-key
+generation, strict one-shot subscription encryption/decryption, HMAC-SHA256
+endpoint challenge proof, and deterministic fail-closed service/key/
+subscription lifecycle selection. Clear routing fields and the structural
+subscriber claim source are HPKE associated data. This package still performs
+no XL1, datalake, filesystem, HTTP, or cloud I/O.
+
+See the normative
+[on-chain handshake profile](../../docs/ON_CHAIN_HANDSHAKE_PROFILE.md) and the
+language-neutral fixture at
+`../../conformance/vectors/subscription-hpke.json`.
+
 `createMemoryWakeInbox` ships one conformant `AtomicWakeInbox`: it serializes
 the critical section, binds a fresh `jti` to an existing wake receipt, and hands
 the wake to its sink before consuming either identity, so a failing sink leaves
 the attempt retryable. It is single-process and loses state on restart — a
-durable adapter and full runtime qualification are still pending, so this is not
-production evidence.
+durable adapter is available from `@xyo-network/event-kit-node`, but full
+resident-runtime and network qualification remain pending. The memory adapter
+is not production evidence.
 
 The pre-D-002 `admitWake` / `acceptWake` callback scaffold, its injected crypto
 port, the split `has`/`remember` replay store, and the `isPublisherEnabled`

package/dist/neutral/canonicalJson.d.ts

@@ -0,0 +1,5 @@
+/** RFC 8785 JSON Canonicalization Scheme for I-JSON-compatible values. */
+export declare function canonicalJson(value: unknown): string;
+/** UTF-8 bytes of {@link canonicalJson}. */
+export declare function canonicalJsonBytes(value: unknown): Uint8Array;
+//# sourceMappingURL=canonicalJson.d.ts.map

package/dist/neutral/canonicalJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalJson.d.ts","sourceRoot":"","sources":["../../src/canonicalJson.ts"],"names":[],"mappings":"AA6CA,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAED,4CAA4C;AAC5C,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAE7D"}

package/dist/neutral/endpointChallenge.d.ts

@@ -0,0 +1,36 @@
+import type { Base64Url32Bytes, ChainId, EndpointChallenge, EndpointChallengeResponse, FinalizedHeadEventKind, HandshakeId, Hash, NormalizedAddress } from '@xyo-network/event-kit-schemas';
+export interface CreateEndpointChallengeInput {
+    chainId: ChainId;
+    encryptionKey: Hash;
+    eventKind: FinalizedHeadEventKind;
+    grant: Hash;
+    issuedAt: number;
+    keyId: HandshakeId;
+    lifetimeSeconds?: number;
+    publisher: NormalizedAddress;
+    service: Hash;
+    subscriber: NormalizedAddress;
+    subscription: Hash;
+}
+export interface VerifyEndpointChallengeResponseInput {
+    challenge: EndpointChallenge;
+    nowSeconds: number;
+    response: EndpointChallengeResponse;
+    secret: Base64Url32Bytes;
+}
+type VerifyEndpointChallengeProofInput = Omit<VerifyEndpointChallengeResponseInput, 'nowSeconds'>;
+export declare function endpointChallengeHash(challenge: EndpointChallenge): Promise<Hash>;
+/** Construct a fresh, strict challenge request without exposing the expected proof. */
+export declare function createEndpointChallenge(input: CreateEndpointChallengeInput): EndpointChallenge;
+/** Build the endpoint's HMAC-SHA256 proof over the raw 32-byte challenge data hash. */
+export declare function createEndpointChallengeResponse(challenge: EndpointChallenge, secret: Base64Url32Bytes): Promise<EndpointChallengeResponse>;
+/**
+ * Cryptographic proof/binding check without authorizing a new time-bounded
+ * decision. This remains package-internal and exists only so an exact durable
+ * verified decision can be resumed after its Unix window closes.
+ */
+export declare function verifyEndpointChallengeProof(input: VerifyEndpointChallengeProofInput): Promise<boolean>;
+/** Pure proof/time check. Durable one-time consumption belongs to the runtime admission path. */
+export declare function verifyEndpointChallengeResponse(input: VerifyEndpointChallengeResponseInput): Promise<boolean>;
+export {};
+//# sourceMappingURL=endpointChallenge.d.ts.map

package/dist/neutral/endpointChallenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpointChallenge.d.ts","sourceRoot":"","sources":["../../src/endpointChallenge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,OAAO,EACP,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,EACtB,WAAW,EACX,IAAI,EACJ,iBAAiB,EAClB,MAAM,gCAAgC,CAAA;AAevC,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,IAAI,CAAA;IACnB,SAAS,EAAE,sBAAsB,CAAA;IACjC,KAAK,EAAE,IAAI,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,WAAW,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,OAAO,EAAE,IAAI,CAAA;IACb,UAAU,EAAE,iBAAiB,CAAA;IAC7B,YAAY,EAAE,IAAI,CAAA;CACnB;AAED,MAAM,WAAW,oCAAoC;IACnD,SAAS,EAAE,iBAAiB,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,yBAAyB,CAAA;IACnC,MAAM,EAAE,gBAAgB,CAAA;CACzB;AAED,KAAK,iCAAiC,GAAG,IAAI,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAA;AA6BjG,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGvF;AAED,uFAAuF;AACvF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CA6B9F;AAED,uFAAuF;AACvF,wBAAsB,+BAA+B,CACnD,SAAS,EAAE,iBAAiB,EAC5B,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,yBAAyB,CAAC,CAQpC;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED,iGAAiG;AACjG,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,OAAO,CAAC,CAUlB"}

package/dist/neutral/handshakeConstruction.d.ts

@@ -0,0 +1,91 @@
+import type { Base64Url32Bytes, ChainId, EncryptedWakeSubscription, EndpointChallenge, EndpointChallengeResponse, HandshakeId, Hash, NormalizedAddress, PublisherEncryptionKey, PublisherEncryptionKeyRevocation, PublisherService, PublisherServiceRevocation, WakeGrantObject, WakeGrantRevocation, WakeSubscriptionAcceptance, WakeSubscriptionAcceptanceRevocation, WakeSubscriptionPlaintext, WakeSubscriptionRevocation } from '@xyo-network/event-kit-schemas';
+import type { WakeSubscriptionPrivateKey, WakeSubscriptionPublicKey } from './wakeSubscriptionHpke.ts';
+export type EventKitHandshakePublicObject = EncryptedWakeSubscription | EndpointChallenge | EndpointChallengeResponse | PublisherEncryptionKey | PublisherEncryptionKeyRevocation | PublisherService | PublisherServiceRevocation | WakeGrantObject | WakeGrantRevocation | WakeSubscriptionAcceptance | WakeSubscriptionAcceptanceRevocation | WakeSubscriptionRevocation;
+export interface HashedHandshakeObject<T extends EventKitHandshakePublicObject> {
+    readonly body: T;
+    readonly objectHash: Hash;
+}
+export interface CreatePublisherEncryptionKeyInput {
+    readonly expiresAtBlock?: number;
+    readonly keyId?: HandshakeId;
+    readonly publicKey: Base64Url32Bytes;
+    readonly validFromBlock: number;
+}
+export interface GeneratePublisherEncryptionKeyInput {
+    readonly expiresAtBlock?: number;
+    readonly validFromBlock: number;
+}
+export interface GeneratedPublisherEncryptionKey {
+    readonly descriptor: PublisherEncryptionKey;
+    readonly descriptorHash: Hash;
+    readonly privateKey: WakeSubscriptionPrivateKey;
+    readonly publicKey: WakeSubscriptionPublicKey;
+}
+export interface CreatePublisherServiceInput {
+    readonly encryptionKeys: readonly Hash[];
+    readonly expiresAtBlock?: number;
+    readonly maxBlocksPerWake: number;
+    readonly maxSubscriptionLifetimeBlocks: number;
+    readonly preferredEncryptionKey: Hash;
+    readonly revision?: number;
+    readonly serviceId?: HandshakeId;
+    readonly supersedes?: Hash;
+    readonly validFromBlock: number;
+}
+export interface CreateWakeGrantInput {
+    readonly deploymentId: string;
+    readonly grantId?: string;
+    readonly publisher: NormalizedAddress;
+    readonly queueId?: string;
+}
+export interface CreateWakeSubscriptionPlaintextInput {
+    readonly audience: string;
+    readonly challengeSecret?: Base64Url32Bytes;
+    readonly deploymentId: string;
+    readonly endpoint: string;
+    readonly maxBlocksPerWake: number;
+    readonly queueId?: string | null;
+}
+export interface CreateEncryptedWakeSubscriptionInput {
+    readonly chainId: ChainId;
+    readonly expiresAtBlock: number;
+    readonly grant: Hash;
+    readonly plaintext: WakeSubscriptionPlaintext;
+    readonly publisher: NormalizedAddress;
+    readonly publisherKey: WakeSubscriptionPublicKey;
+    readonly revision?: number;
+    readonly service: Hash;
+    readonly subscriber: NormalizedAddress;
+    readonly subscriptionId?: HandshakeId;
+    readonly supersedes?: Hash;
+}
+export interface CreateWakeSubscriptionAcceptanceInput {
+    readonly challenge: Hash;
+    readonly encryptionKey: Hash;
+    readonly grant: Hash;
+    readonly response: Hash;
+    readonly service: Hash;
+    readonly subscription: Hash;
+}
+/** Canonical XYO data hash after strict validation of a public handshake object. */
+export declare function handshakeObjectHash(object: EventKitHandshakePublicObject): Promise<Hash>;
+export declare function withHandshakeObjectHash<T extends EventKitHandshakePublicObject>(body: T): Promise<HashedHandshakeObject<T>>;
+/** Build one strict publisher X25519 key descriptor. */
+export declare function createPublisherEncryptionKey(input: CreatePublisherEncryptionKeyInput): PublisherEncryptionKey;
+/** Generate dedicated encryption material and bind both halves to its descriptor hash. */
+export declare function generatePublisherEncryptionKey(input: GeneratePublisherEncryptionKeyInput): Promise<GeneratedPublisherEncryptionKey>;
+/** Build the fixed initial finalized-head publisher advertisement profile. */
+export declare function createPublisherService(input: CreatePublisherServiceInput): PublisherService;
+/** Build a fresh exact D-002 enqueue grant for one publisher and route scope. */
+export declare function createWakeGrant(input: CreateWakeGrantInput): WakeGrantObject;
+/** Generate a new 32-byte endpoint challenge secret when one is not supplied. */
+export declare function createWakeSubscriptionPlaintext(input: CreateWakeSubscriptionPlaintextInput): WakeSubscriptionPlaintext;
+/** Construct and encrypt one strict subscription with fresh HPKE ephemeral material. */
+export declare function createEncryptedWakeSubscription(input: CreateEncryptedWakeSubscriptionInput): Promise<EncryptedWakeSubscription>;
+export declare function createWakeSubscriptionAcceptance(input: CreateWakeSubscriptionAcceptanceInput): WakeSubscriptionAcceptance;
+export declare function createPublisherServiceRevocation(service: Hash): PublisherServiceRevocation;
+export declare function createPublisherEncryptionKeyRevocation(key: Hash): PublisherEncryptionKeyRevocation;
+export declare function createWakeGrantRevocation(grant: Hash): WakeGrantRevocation;
+export declare function createWakeSubscriptionRevocation(subscription: Hash): WakeSubscriptionRevocation;
+export declare function createWakeSubscriptionAcceptanceRevocation(acceptance: Hash): WakeSubscriptionAcceptanceRevocation;
+//# sourceMappingURL=handshakeConstruction.d.ts.map

package/dist/neutral/handshakeConstruction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshakeConstruction.d.ts","sourceRoot":"","sources":["../../src/handshakeConstruction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,OAAO,EACP,yBAAyB,EACzB,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,EACX,IAAI,EACJ,iBAAiB,EACjB,sBAAsB,EACtB,gCAAgC,EAChC,gBAAgB,EAChB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EACnB,0BAA0B,EAC1B,oCAAoC,EACpC,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,gCAAgC,CAAA;AAwCvC,OAAO,KAAK,EACV,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,2BAA2B,CAAA;AAMlC,MAAM,MAAM,6BAA6B,GACnC,yBAAyB,GACzB,iBAAiB,GACjB,yBAAyB,GACzB,sBAAsB,GACtB,gCAAgC,GAChC,gBAAgB,GAChB,0BAA0B,GAC1B,eAAe,GACf,mBAAmB,GACnB,0BAA0B,GAC1B,oCAAoC,GACpC,0BAA0B,CAAA;AAEhC,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,6BAA6B;IAC5E,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAChB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAA;IAC3C,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAA;IAC7B,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAA;IAC/C,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAA;CAC9C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,cAAc,EAAE,SAAS,IAAI,EAAE,CAAA;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAA;IAC9C,QAAQ,CAAC,sBAAsB,EAAE,IAAI,CAAA;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,CAAA;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAA;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAA;IAC7C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAA;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,WAAW,CAAA;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAA;CAC5B;AA8BD,oFAAoF;AACpF,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9F;AAED,wBAAsB,uBAAuB,CAAC,CAAC,SAAS,6BAA6B,EACnF,IAAI,EAAE,CAAC,GACN,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAEnC;AAED,wDAAwD;AACxD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,iCAAiC,GAAG,sBAAsB,CAU7G;AAED,0FAA0F;AAC1F,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,+BAA+B,CAAC,CAqB1C;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,gBAAgB,CAsB3F;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,eAAe,CAU5E;AAED,iFAAiF;AACjF,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,oCAAoC,GAC1C,yBAAyB,CAwB3B;AAED,wFAAwF;AACxF,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,yBAAyB,CAAC,CAyBpC;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,qCAAqC,GAC3C,0BAA0B,CAW5B;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,IAAI,GAAG,0BAA0B,CAI1F;AAED,wBAAgB,sCAAsC,CAAC,GAAG,EAAE,IAAI,GAAG,gCAAgC,CAIlG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,IAAI,GAAG,mBAAmB,CAI1E;AAED,wBAAgB,gCAAgC,CAAC,YAAY,EAAE,IAAI,GAAG,0BAA0B,CAI/F;AAED,wBAAgB,0CAA0C,CACxD,UAAU,EAAE,IAAI,GACf,oCAAoC,CAItC"}

package/dist/neutral/index.d.ts

@@ -2,12 +2,22 @@ export type { AtomicWakeInbox, AuthorizedWakeGrant, WakeAdmissionAttempt, WakeAd
 export { EVENT_KIT_REPLAY_RETENTION_SKEW_SECONDS } from './admissionTypes.ts';
 export type { AdmitAndEnqueueFailure, AdmitAndEnqueueFailureReason, AdmitAndEnqueueInput, AdmitAndEnqueueResult, AdmitAndEnqueueSuccess, } from './admitAndEnqueue.ts';
 export { admitAndEnqueue } from './admitAndEnqueue.ts';
+export { canonicalJson, canonicalJsonBytes, } from './canonicalJson.ts';
+export type { CreateEndpointChallengeInput, VerifyEndpointChallengeResponseInput, } from './endpointChallenge.ts';
+export { createEndpointChallenge, createEndpointChallengeResponse, endpointChallengeHash, verifyEndpointChallengeResponse, } from './endpointChallenge.ts';
+export type { CreateEncryptedWakeSubscriptionInput, CreatePublisherEncryptionKeyInput, CreatePublisherServiceInput, CreateWakeGrantInput, CreateWakeSubscriptionAcceptanceInput, CreateWakeSubscriptionPlaintextInput, EventKitHandshakePublicObject, GeneratedPublisherEncryptionKey, GeneratePublisherEncryptionKeyInput, HashedHandshakeObject, } from './handshakeConstruction.ts';
+export { createEncryptedWakeSubscription, createPublisherEncryptionKey, createPublisherEncryptionKeyRevocation, createPublisherService, createPublisherServiceRevocation, createWakeGrant, createWakeGrantRevocation, createWakeSubscriptionAcceptance, createWakeSubscriptionAcceptanceRevocation, createWakeSubscriptionPlaintext, createWakeSubscriptionRevocation, generatePublisherEncryptionKey, handshakeObjectHash, withHandshakeObjectHash, } from './handshakeConstruction.ts';
+export type { LifecycleRevisionEvidence, PreferredEncryptionKeyFailure, PreferredEncryptionKeyFailureReason, PreferredEncryptionKeyInput, PreferredEncryptionKeyResolution, PreferredEncryptionKeySuccess, PublisherAcceptanceLifecycle, PublisherEncryptionKeyLifecycle, PublisherServiceLifecycleRevision, PublisherServiceSelection, PublisherServiceSelectionFailure, PublisherServiceSelectionFailureReason, PublisherServiceSelectionInput, PublisherServiceSelectionSuccess, SubscriptionActivation, SubscriptionActivationFailure, SubscriptionActivationFailureReason, SubscriptionActivationInput, SubscriptionActivationSuccess, WakeSubscriptionLifecycleRevision, } from './lifecycleSelection.ts';
+export { resolvePreferredEncryptionKey, selectPublisherService, selectSubscriptionActivation, } from './lifecycleSelection.ts';
 export type { MemoryStatementGrantGraph } from './memoryStatementGrantGraph.ts';
 export { createMemoryStatementGrantGraph } from './memoryStatementGrantGraph.ts';
 export type { MemoryWakeInbox, MemoryWakeInboxOptions, } from './memoryWakeInbox.ts';
 export { createMemoryWakeInbox } from './memoryWakeInbox.ts';
 export type { MemoryWakeQueue } from './memoryWakeQueue.ts';
 export { createMemoryWakeQueue } from './memoryWakeQueue.ts';
+export type { BeginPublisherEndpointChallengeAttemptInput, BeginPublisherEndpointChallengeAttemptResult, CompletePublisherEndpointChallengeInput, CompletePublisherEndpointChallengeResult, IssuePublisherEndpointChallengeInput, IssuePublisherEndpointChallengeResult, PublisherEncryptionKeyLookup, PublisherEncryptionKeyStore, PublisherEndpointChallengeRecord, PublisherEndpointChallengeState, PublisherEndpointChallengeStore, } from './publisherHandshakeStores.ts';
+export type { BeginPublisherEndpointChallengeAttemptApiInput, BeginPublisherEndpointChallengeAttemptApiResult, CompletePublisherEndpointChallengeApiInput, CompletePublisherEndpointChallengeApiResult, CompletePublisherEndpointChallengeFailure, CompletePublisherEndpointChallengeFailureReason, CompletePublisherEndpointChallengeSuccess, IssuePublisherEndpointChallengeApiInput, IssuePublisherEndpointChallengeApiResult, PublisherEndpointChallengeContext, PublisherSubscriptionCandidate, PublisherSubscriptionValidation, PublisherSubscriptionValidationFailure, PublisherSubscriptionValidationFailureReason, ValidatedPublisherSubscription, } from './publisherSubscription.ts';
+export { beginPublisherEndpointChallengeAttempt, completePublisherEndpointChallenge, endpointChallengeMatchesPublisherContext, issuePublisherEndpointChallenge, validateAndDecryptPublisherSubscription, } from './publisherSubscription.ts';
 export type { StatementGrantClaim, StatementGrantClaimQuery, StatementGrantObject, StatementGraphGrantReadModel, } from './statementGraphPorts.ts';
 export type { StatementGraphWakeGrantAuthorizerOptions } from './statementGraphWakeGrantAuthorizer.ts';
 export { createStatementGraphWakeGrantAuthorizer } from './statementGraphWakeGrantAuthorizer.ts';
@@ -16,4 +26,7 @@ export type { VerifiedWakeRequest, VerifyWakeRequestFailure, VerifyWakeRequestIn
 export { EVENT_KIT_MAX_FUTURE_IAT_SECONDS, EVENT_KIT_MAX_JWT_LIFETIME_SECONDS, verifyWakeRequest, } from './verifyWakeRequest.ts';
 export type { LeasedWake, WakeHandler, WakeQueue, } from './wakeQueue.ts';
 export { drainQueue } from './wakeQueue.ts';
+export { wakeSubscriptionAadBytes, wakeSubscriptionPlaintextBytes, wakeSubscriptionPlaintextFromBytes, } from './wakeSubscriptionEncoding.ts';
+export type { DecryptWakeSubscriptionInput, EncryptWakeSubscriptionInput, WakeSubscriptionEncryptionKeyPair, WakeSubscriptionPrivateKey, WakeSubscriptionPublicKey, } from './wakeSubscriptionHpke.ts';
+export { decryptWakeSubscription, encryptWakeSubscription, generateWakeSubscriptionEncryptionKeyPair, WakeSubscriptionDecryptionError, } from './wakeSubscriptionHpke.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/neutral/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,8BAA8B,EAC9B,8BAA8B,EAC9B,6BAA6B,EAC7B,6BAA6B,EAC7B,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA;AAC7E,YAAY,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,YAAY,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAA;AAChF,YAAY,EACV,eAAe,EACf,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAA;AACtG,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAA;AAChG,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,gCAAgC,EAChC,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,iBAAiB,GAClB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,UAAU,EACV,WAAW,EACX,SAAS,GACV,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,8BAA8B,EAC9B,8BAA8B,EAC9B,6BAA6B,EAC7B,6BAA6B,EAC7B,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAA;AAC7E,YAAY,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EACL,aAAa,EACb,kBAAkB,GACnB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,4BAA4B,EAC5B,oCAAoC,GACrC,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,uBAAuB,EACvB,+BAA+B,EAC/B,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,oCAAoC,EACpC,iCAAiC,EACjC,2BAA2B,EAC3B,oBAAoB,EACpB,qCAAqC,EACrC,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,qBAAqB,GACtB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,sCAAsC,EACtC,sBAAsB,EACtB,gCAAgC,EAChC,eAAe,EACf,yBAAyB,EACzB,gCAAgC,EAChC,0CAA0C,EAC1C,+BAA+B,EAC/B,gCAAgC,EAChC,8BAA8B,EAC9B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,yBAAyB,EACzB,6BAA6B,EAC7B,mCAAmC,EACnC,2BAA2B,EAC3B,gCAAgC,EAChC,6BAA6B,EAC7B,4BAA4B,EAC5B,+BAA+B,EAC/B,iCAAiC,EACjC,yBAAyB,EACzB,gCAAgC,EAChC,sCAAsC,EACtC,8BAA8B,EAC9B,gCAAgC,EAChC,sBAAsB,EACtB,6BAA6B,EAC7B,mCAAmC,EACnC,2BAA2B,EAC3B,6BAA6B,EAC7B,iCAAiC,GAClC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,yBAAyB,CAAA;AAChC,YAAY,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAA;AAChF,YAAY,EACV,eAAe,EACf,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,YAAY,EACV,2CAA2C,EAC3C,4CAA4C,EAC5C,uCAAuC,EACvC,wCAAwC,EACxC,oCAAoC,EACpC,qCAAqC,EACrC,4BAA4B,EAC5B,2BAA2B,EAC3B,gCAAgC,EAChC,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,+BAA+B,CAAA;AACtC,YAAY,EACV,8CAA8C,EAC9C,+CAA+C,EAC/C,0CAA0C,EAC1C,2CAA2C,EAC3C,yCAAyC,EACzC,+CAA+C,EAC/C,yCAAyC,EACzC,uCAAuC,EACvC,wCAAwC,EACxC,iCAAiC,EACjC,8BAA8B,EAC9B,+BAA+B,EAC/B,sCAAsC,EACtC,4CAA4C,EAC5C,8BAA8B,GAC/B,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,sCAAsC,EACtC,kCAAkC,EAClC,wCAAwC,EACxC,+BAA+B,EAC/B,uCAAuC,GACxC,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAA;AACtG,OAAO,EAAE,uCAAuC,EAAE,MAAM,wCAAwC,CAAA;AAChG,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,gCAAgC,EAChC,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,iBAAiB,GAClB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,UAAU,EACV,WAAW,EACX,SAAS,GACV,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,+BAA+B,CAAA;AACtC,YAAY,EACV,4BAA4B,EAC5B,4BAA4B,EAC5B,iCAAiC,EACjC,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,yCAAyC,EACzC,+BAA+B,GAChC,MAAM,2BAA2B,CAAA"}