agentic-qe 2.7.3 → 2.8.0

package/dist/edge/p2p/crypto/Signer.d.ts

@@ -0,0 +1,164 @@
+/**
+ * Ed25519 Signature Operations
+ *
+ * Provides signing and verification operations for P2P agent messages.
+ * Uses SHA-256 based HMAC for browser compatibility (production should use proper Ed25519).
+ *
+ * Features:
+ * - Sign messages with private key
+ * - Verify signatures with public key
+ * - JSON canonicalization for structured data
+ * - Batch signature verification
+ * - Identity proof generation
+ *
+ * @module edge/p2p/crypto/Signer
+ * @version 1.0.0
+ */
+import type { KeyPair, SignedMessage, VerificationResult, BatchVerificationResult, IdentityProof, AgentIdentity } from './types';
+/**
+ * Signer - Ed25519 signature operations for P2P messages
+ *
+ * @example
+ * ```typescript
+ * // Sign a message
+ * const signed = await Signer.sign(keyPair, identity, { action: 'share-pattern', data: {...} });
+ *
+ * // Verify signature
+ * const result = await Signer.verify(signed);
+ * if (result.valid) {
+ *   console.log('Signed by:', result.signerId);
+ * }
+ * ```
+ */
+export declare class Signer {
+    /**
+     * Sign a message with the private key
+     *
+     * @param keyPair - Ed25519 keypair
+     * @param identity - Agent identity
+     * @param payload - Message payload to sign
+     * @param includeNonce - Whether to include a nonce (default: true)
+     * @returns Signed message
+     */
+    static sign<T>(keyPair: KeyPair, identity: AgentIdentity, payload: T, includeNonce?: boolean): Promise<SignedMessage<T>>;
+    /**
+     * Sign raw bytes
+     *
+     * @param keyPair - Ed25519 keypair
+     * @param data - Data to sign
+     * @returns Base64-encoded signature
+     */
+    static signRaw(keyPair: KeyPair, data: Uint8Array): Promise<string>;
+    /**
+     * Verify a signed message
+     *
+     * @param signedMessage - Message to verify
+     * @returns Verification result
+     */
+    static verify<T>(signedMessage: SignedMessage<T>): Promise<VerificationResult>;
+    /**
+     * Verify raw signature
+     *
+     * @param publicKey - Base64-encoded public key
+     * @param signature - Base64-encoded signature
+     * @param data - Original data
+     * @returns true if valid
+     */
+    static verifyRaw(publicKey: string, signature: string, data: Uint8Array): Promise<boolean>;
+    /**
+     * Verify multiple messages in batch
+     *
+     * @param messages - Array of signed messages to verify
+     * @returns Batch verification results
+     */
+    static verifyBatch<T>(messages: SignedMessage<T>[]): Promise<BatchVerificationResult>;
+    /**
+     * Create an identity proof for authentication
+     *
+     * @param keyPair - Ed25519 keypair
+     * @param identity - Agent identity
+     * @param challenge - Challenge string to sign
+     * @param expiresIn - Expiration in milliseconds (default: 5 minutes)
+     * @returns Identity proof
+     */
+    static createIdentityProof(keyPair: KeyPair, identity: AgentIdentity, challenge: string, expiresIn?: number): Promise<IdentityProof>;
+    /**
+     * Verify an identity proof
+     *
+     * @param proof - Identity proof to verify
+     * @returns Verification result
+     */
+    static verifyIdentityProof(proof: IdentityProof): Promise<VerificationResult>;
+    /**
+     * Generate a random challenge for authentication
+     *
+     * @param length - Challenge length in bytes (default: 32)
+     * @returns Base64-encoded challenge
+     */
+    static generateChallenge(length?: number): string;
+    /**
+     * Canonicalize JSON for consistent signing
+     *
+     * @param obj - Object to canonicalize
+     * @returns Canonical JSON string
+     */
+    static canonicalizeJson(obj: unknown): string;
+    /**
+     * Create canonical message bytes for signing
+     */
+    private static createCanonicalMessage;
+    /**
+     * Create signature using HMAC-SHA256 (browser-compatible)
+     * Note: In production, use proper Ed25519 signing via @noble/ed25519
+     */
+    private static createSignature;
+    /**
+     * Verify signature using HMAC-SHA256 (browser-compatible)
+     * Note: In production, use proper Ed25519 verification via @noble/ed25519
+     */
+    private static verifySignature;
+    /**
+     * Generate random nonce
+     */
+    private static generateNonce;
+    /**
+     * JSON replacer that sorts object keys for canonical output
+     */
+    private static sortedReplacer;
+}
+/**
+ * Message envelope for P2P transmission
+ * Wraps signed messages with routing information
+ */
+export interface MessageEnvelope<T = unknown> {
+    /** Unique message ID */
+    messageId: string;
+    /** The signed message */
+    signedMessage: SignedMessage<T>;
+    /** Target agent ID (or '*' for broadcast) */
+    to: string;
+    /** Message type for routing */
+    type: string;
+    /** TTL in hops (for gossip protocols) */
+    ttl: number;
+    /** Timestamp for ordering */
+    timestamp: number;
+}
+/**
+ * Create a message envelope for P2P transmission
+ *
+ * @param signedMessage - The signed message
+ * @param to - Target agent ID
+ * @param type - Message type
+ * @param ttl - Time to live in hops
+ * @returns Message envelope
+ */
+export declare function createEnvelope<T>(signedMessage: SignedMessage<T>, to: string, type: string, ttl?: number): MessageEnvelope<T>;
+/**
+ * Verify a message envelope
+ *
+ * @param envelope - Message envelope to verify
+ * @returns Verification result
+ */
+export declare function verifyEnvelope<T>(envelope: MessageEnvelope<T>): Promise<VerificationResult>;
+//# sourceMappingURL=Signer.d.ts.map

package/dist/edge/p2p/crypto/Signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Signer.d.ts","sourceRoot":"","sources":["../../../../src/edge/p2p/crypto/Signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,aAAa,EACb,aAAa,EACd,MAAM,SAAS,CAAC;AASjB;;;;;;;;;;;;;;GAcG;AACH,qBAAa,MAAM;IACjB;;;;;;;;OAQG;WACU,IAAI,CAAC,CAAC,EACjB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,CAAC,EACV,YAAY,GAAE,OAAc,GAC3B,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAyB5B;;;;;;OAMG;WACU,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzE;;;;;OAKG;WACU,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAsCpF;;;;;;;OAOG;WACU,SAAS,CACpB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,OAAO,CAAC;IAInB;;;;;OAKG;WACU,WAAW,CAAC,CAAC,EACxB,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAC3B,OAAO,CAAC,uBAAuB,CAAC;IAcnC;;;;;;;;OAQG;WACU,mBAAmB,CAC9B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,aAAa,EACvB,SAAS,EAAE,MAAM,EACjB,SAAS,GAAE,MAAgC,GAC1C,OAAO,CAAC,aAAa,CAAC;IAqBzB;;;;;OAKG;WACU,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA6CnF;;;;;OAKG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM;IAMrD;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM;IAQ7C;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAiBrC;;;OAGG;mBACkB,eAAe;IA4BpC;;;OAGG;mBACkB,eAAe;IAqCpC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IAM5B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,cAAc;CAW9B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAChC,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAC9B,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,EAC/B,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAU,GACd,eAAe,CAAC,CAAC,CAAC,CAWpB;AAiBD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAG7B"}

package/dist/edge/p2p/crypto/Signer.js

@@ -0,0 +1,357 @@
+"use strict";
+/**
+ * Ed25519 Signature Operations
+ *
+ * Provides signing and verification operations for P2P agent messages.
+ * Uses SHA-256 based HMAC for browser compatibility (production should use proper Ed25519).
+ *
+ * Features:
+ * - Sign messages with private key
+ * - Verify signatures with public key
+ * - JSON canonicalization for structured data
+ * - Batch signature verification
+ * - Identity proof generation
+ *
+ * @module edge/p2p/crypto/Signer
+ * @version 1.0.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Signer = void 0;
+exports.createEnvelope = createEnvelope;
+exports.verifyEnvelope = verifyEnvelope;
+const Identity_1 = require("./Identity");
+/**
+ * Default proof expiration (5 minutes)
+ */
+const DEFAULT_PROOF_EXPIRY_MS = 5 * 60 * 1000;
+/**
+ * Signer - Ed25519 signature operations for P2P messages
+ *
+ * @example
+ * ```typescript
+ * // Sign a message
+ * const signed = await Signer.sign(keyPair, identity, { action: 'share-pattern', data: {...} });
+ *
+ * // Verify signature
+ * const result = await Signer.verify(signed);
+ * if (result.valid) {
+ *   console.log('Signed by:', result.signerId);
+ * }
+ * ```
+ */
+class Signer {
+    /**
+     * Sign a message with the private key
+     *
+     * @param keyPair - Ed25519 keypair
+     * @param identity - Agent identity
+     * @param payload - Message payload to sign
+     * @param includeNonce - Whether to include a nonce (default: true)
+     * @returns Signed message
+     */
+    static async sign(keyPair, identity, payload, includeNonce = true) {
+        const signedAt = new Date().toISOString();
+        const nonce = includeNonce ? this.generateNonce() : undefined;
+        // Create canonical message for signing
+        const messageToSign = this.createCanonicalMessage(payload, identity.publicKey, signedAt, nonce);
+        // Sign the message
+        const signature = await this.createSignature(keyPair.privateKey, messageToSign);
+        return {
+            payload,
+            signature,
+            signerPublicKey: identity.publicKey,
+            signerId: identity.agentId,
+            signedAt,
+            nonce,
+        };
+    }
+    /**
+     * Sign raw bytes
+     *
+     * @param keyPair - Ed25519 keypair
+     * @param data - Data to sign
+     * @returns Base64-encoded signature
+     */
+    static async signRaw(keyPair, data) {
+        return this.createSignature(keyPair.privateKey, data);
+    }
+    /**
+     * Verify a signed message
+     *
+     * @param signedMessage - Message to verify
+     * @returns Verification result
+     */
+    static async verify(signedMessage) {
+        try {
+            const { payload, signature, signerPublicKey, signedAt, nonce } = signedMessage;
+            // Recreate canonical message
+            const messageToVerify = this.createCanonicalMessage(payload, signerPublicKey, signedAt, nonce);
+            // Verify signature
+            const isValid = await this.verifySignature(signerPublicKey, signature, messageToVerify);
+            if (isValid) {
+                return {
+                    valid: true,
+                    signerId: signedMessage.signerId,
+                };
+            }
+            else {
+                return {
+                    valid: false,
+                    error: 'Invalid signature',
+                };
+            }
+        }
+        catch (error) {
+            return {
+                valid: false,
+                error: error instanceof Error ? error.message : 'Verification failed',
+            };
+        }
+    }
+    /**
+     * Verify raw signature
+     *
+     * @param publicKey - Base64-encoded public key
+     * @param signature - Base64-encoded signature
+     * @param data - Original data
+     * @returns true if valid
+     */
+    static async verifyRaw(publicKey, signature, data) {
+        return this.verifySignature(publicKey, signature, data);
+    }
+    /**
+     * Verify multiple messages in batch
+     *
+     * @param messages - Array of signed messages to verify
+     * @returns Batch verification results
+     */
+    static async verifyBatch(messages) {
+        const results = await Promise.all(messages.map((msg) => this.verify(msg)));
+        const valid = results.filter((r) => r.valid).length;
+        const invalid = results.filter((r) => !r.valid).length;
+        return {
+            total: messages.length,
+            valid,
+            invalid,
+            results,
+        };
+    }
+    /**
+     * Create an identity proof for authentication
+     *
+     * @param keyPair - Ed25519 keypair
+     * @param identity - Agent identity
+     * @param challenge - Challenge string to sign
+     * @param expiresIn - Expiration in milliseconds (default: 5 minutes)
+     * @returns Identity proof
+     */
+    static async createIdentityProof(keyPair, identity, challenge, expiresIn = DEFAULT_PROOF_EXPIRY_MS) {
+        const timestamp = new Date().toISOString();
+        // Create proof message
+        const proofMessage = `proof:${identity.agentId}:${challenge}:${timestamp}:${expiresIn}`;
+        const encoder = new TextEncoder();
+        const messageBytes = encoder.encode(proofMessage);
+        // Sign the proof
+        const signature = await this.createSignature(keyPair.privateKey, messageBytes);
+        return {
+            agentId: identity.agentId,
+            publicKey: identity.publicKey,
+            challenge,
+            signature,
+            timestamp,
+            expiresIn,
+        };
+    }
+    /**
+     * Verify an identity proof
+     *
+     * @param proof - Identity proof to verify
+     * @returns Verification result
+     */
+    static async verifyIdentityProof(proof) {
+        try {
+            // Check expiration
+            const proofTime = new Date(proof.timestamp).getTime();
+            const now = Date.now();
+            const expiresAt = proofTime + proof.expiresIn;
+            if (now > expiresAt) {
+                return {
+                    valid: false,
+                    error: 'Proof has expired',
+                };
+            }
+            // Recreate proof message
+            const proofMessage = `proof:${proof.agentId}:${proof.challenge}:${proof.timestamp}:${proof.expiresIn}`;
+            const encoder = new TextEncoder();
+            const messageBytes = encoder.encode(proofMessage);
+            // Verify signature
+            const isValid = await this.verifySignature(proof.publicKey, proof.signature, messageBytes);
+            if (isValid) {
+                return {
+                    valid: true,
+                    signerId: proof.agentId,
+                };
+            }
+            else {
+                return {
+                    valid: false,
+                    error: 'Invalid proof signature',
+                };
+            }
+        }
+        catch (error) {
+            return {
+                valid: false,
+                error: error instanceof Error ? error.message : 'Proof verification failed',
+            };
+        }
+    }
+    /**
+     * Generate a random challenge for authentication
+     *
+     * @param length - Challenge length in bytes (default: 32)
+     * @returns Base64-encoded challenge
+     */
+    static generateChallenge(length = 32) {
+        const bytes = new Uint8Array(length);
+        crypto.getRandomValues(bytes);
+        return Identity_1.base64Utils.encode(bytes);
+    }
+    /**
+     * Canonicalize JSON for consistent signing
+     *
+     * @param obj - Object to canonicalize
+     * @returns Canonical JSON string
+     */
+    static canonicalizeJson(obj) {
+        return JSON.stringify(obj, this.sortedReplacer);
+    }
+    // ==========================================
+    // Private Helper Methods
+    // ==========================================
+    /**
+     * Create canonical message bytes for signing
+     */
+    static createCanonicalMessage(payload, publicKey, signedAt, nonce) {
+        const canonical = {
+            payload: this.canonicalizeJson(payload),
+            publicKey,
+            signedAt,
+            nonce,
+        };
+        const encoder = new TextEncoder();
+        return encoder.encode(this.canonicalizeJson(canonical));
+    }
+    /**
+     * Create signature using HMAC-SHA256 (browser-compatible)
+     * Note: In production, use proper Ed25519 signing via @noble/ed25519
+     */
+    static async createSignature(privateKeyBase64, message) {
+        const privateKey = Identity_1.base64Utils.decode(privateKeyBase64);
+        // Use the public key portion (bytes 32-64) for HMAC to ensure
+        // verification can work with the same key
+        // In production, this should use proper Ed25519 signing
+        const publicKeyPortion = privateKey.slice(32, 64);
+        const keyBuffer = new ArrayBuffer(publicKeyPortion.length);
+        new Uint8Array(keyBuffer).set(publicKeyPortion);
+        const messageBuffer = new ArrayBuffer(message.length);
+        new Uint8Array(messageBuffer).set(message);
+        // Use HMAC-SHA256 for browser compatibility
+        const key = await crypto.subtle.importKey('raw', keyBuffer, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+        const signatureBuffer = await crypto.subtle.sign('HMAC', key, messageBuffer);
+        return Identity_1.base64Utils.encode(new Uint8Array(signatureBuffer));
+    }
+    /**
+     * Verify signature using HMAC-SHA256 (browser-compatible)
+     * Note: In production, use proper Ed25519 verification via @noble/ed25519
+     */
+    static async verifySignature(publicKeyBase64, signatureBase64, message) {
+        try {
+            // For our simplified implementation, we derive the verification key
+            // from the public key. In real Ed25519, verification uses the public key directly.
+            const publicKey = Identity_1.base64Utils.decode(publicKeyBase64);
+            // Create ArrayBuffer copies for Web Crypto API
+            const keyBuffer = new ArrayBuffer(publicKey.length);
+            new Uint8Array(keyBuffer).set(publicKey);
+            const messageBuffer = new ArrayBuffer(message.length);
+            new Uint8Array(messageBuffer).set(message);
+            // Import key for HMAC verification
+            // Note: This is a simplified approach - real Ed25519 verification
+            // would use the public key to verify the signature mathematically
+            const key = await crypto.subtle.importKey('raw', keyBuffer, { name: 'HMAC', hash: 'SHA-256' }, false, ['verify']);
+            const signature = Identity_1.base64Utils.decode(signatureBase64);
+            const sigBuffer = new ArrayBuffer(signature.length);
+            new Uint8Array(sigBuffer).set(signature);
+            return crypto.subtle.verify('HMAC', key, sigBuffer, messageBuffer);
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Generate random nonce
+     */
+    static generateNonce() {
+        const bytes = new Uint8Array(16);
+        crypto.getRandomValues(bytes);
+        return Identity_1.base64Utils.encode(bytes);
+    }
+    /**
+     * JSON replacer that sorts object keys for canonical output
+     */
+    static sortedReplacer(_key, value) {
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            const sorted = {};
+            const keys = Object.keys(value).sort();
+            for (const k of keys) {
+                sorted[k] = value[k];
+            }
+            return sorted;
+        }
+        return value;
+    }
+}
+exports.Signer = Signer;
+/**
+ * Create a message envelope for P2P transmission
+ *
+ * @param signedMessage - The signed message
+ * @param to - Target agent ID
+ * @param type - Message type
+ * @param ttl - Time to live in hops
+ * @returns Message envelope
+ */
+function createEnvelope(signedMessage, to, type, ttl = 3) {
+    const messageId = generateMessageId();
+    return {
+        messageId,
+        signedMessage,
+        to,
+        type,
+        ttl,
+        timestamp: Date.now(),
+    };
+}
+/**
+ * Generate unique message ID
+ */
+function generateMessageId() {
+    const bytes = new Uint8Array(16);
+    crypto.getRandomValues(bytes);
+    // Format as UUID-like string
+    const hex = Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+/**
+ * Verify a message envelope
+ *
+ * @param envelope - Message envelope to verify
+ * @returns Verification result
+ */
+async function verifyEnvelope(envelope) {
+    // Verify the contained signed message
+    return Signer.verify(envelope.signedMessage);
+}
+//# sourceMappingURL=Signer.js.map

package/dist/edge/p2p/crypto/Signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Signer.js","sourceRoot":"","sources":["../../../../src/edge/p2p/crypto/Signer.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAwaH,wCAgBC;AAuBD,wCAKC;AAzcD,yCAAyC;AAEzC;;GAEG;AACH,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C;;;;;;;;;;;;;;GAcG;AACH,MAAa,MAAM;IACjB;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,OAAgB,EAChB,QAAuB,EACvB,OAAU,EACV,eAAwB,IAAI;QAE5B,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9D,uCAAuC;QACvC,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAC/C,OAAO,EACP,QAAQ,CAAC,SAAS,EAClB,QAAQ,EACR,KAAK,CACN,CAAC;QAEF,mBAAmB;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAEhF,OAAO;YACL,OAAO;YACP,SAAS;YACT,eAAe,EAAE,QAAQ,CAAC,SAAS;YACnC,QAAQ,EAAE,QAAQ,CAAC,OAAO;YAC1B,QAAQ;YACR,KAAK;SACN,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAgB,EAAE,IAAgB;QACrD,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAI,aAA+B;QACpD,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC;YAE/E,6BAA6B;YAC7B,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CACjD,OAAO,EACP,eAAe,EACf,QAAQ,EACR,KAAK,CACN,CAAC;YAEF,mBAAmB;YACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CACxC,eAAe,EACf,SAAS,EACT,eAAe,CAChB,CAAC;YAEF,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,QAAQ,EAAE,aAAa,CAAC,QAAQ;iBACjC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;aACtE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CACpB,SAAiB,EACjB,SAAiB,EACjB,IAAgB;QAEhB,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW,CACtB,QAA4B;QAE5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAE3E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACpD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAEvD,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,KAAK;YACL,OAAO;YACP,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAC9B,OAAgB,EAChB,QAAuB,EACvB,SAAiB,EACjB,YAAoB,uBAAuB;QAE3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE3C,uBAAuB;QACvB,MAAM,YAAY,GAAG,SAAS,QAAQ,CAAC,OAAO,IAAI,SAAS,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QACxF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAElD,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAE/E,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS;YACT,SAAS;YACT,SAAS;YACT,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAoB;QACnD,IAAI,CAAC;YACH,mBAAmB;YACnB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAE9C,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;gBACpB,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,mBAAmB;iBAC3B,CAAC;YACJ,CAAC;YAED,yBAAyB;YACzB,MAAM,YAAY,GAAG,SAAS,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACvG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAElD,mBAAmB;YACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CACxC,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,EACf,YAAY,CACb,CAAC;YAEF,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,QAAQ,EAAE,KAAK,CAAC,OAAO;iBACxB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,yBAAyB;iBACjC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;aAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,iBAAiB,CAAC,SAAiB,EAAE;QAC1C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,sBAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAY;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;IAED,6CAA6C;IAC7C,yBAAyB;IACzB,6CAA6C;IAE7C;;OAEG;IACK,MAAM,CAAC,sBAAsB,CACnC,OAAU,EACV,SAAiB,EACjB,QAAgB,EAChB,KAAc;QAEd,MAAM,SAAS,GAAG;YAChB,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACvC,SAAS;YACT,QAAQ;YACR,KAAK;SACN,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,KAAK,CAAC,eAAe,CAClC,gBAAwB,EACxB,OAAmB;QAEnB,MAAM,UAAU,GAAG,sBAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAExD,8DAA8D;QAC9D,0CAA0C;QAC1C,wDAAwD;QACxD,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3C,4CAA4C;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,SAAS,EACT,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;QAEF,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QAC7E,OAAO,sBAAW,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,KAAK,CAAC,eAAe,CAClC,eAAuB,EACvB,eAAuB,EACvB,OAAmB;QAEnB,IAAI,CAAC;YACH,oEAAoE;YACpE,mFAAmF;YACnF,MAAM,SAAS,GAAG,sBAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAEtD,+CAA+C;YAC/C,MAAM,SAAS,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,aAAa,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE3C,mCAAmC;YACnC,kEAAkE;YAClE,kEAAkE;YAClE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,SAAS,EACT,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;YAEF,MAAM,SAAS,GAAG,sBAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAEzC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,aAAa;QAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,sBAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,cAAc,CAAC,IAAY,EAAE,KAAc;QACxD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,CAAC,CAAC,CAAC,GAAI,KAAiC,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAzWD,wBAyWC;AAqBD;;;;;;;;GAQG;AACH,SAAgB,cAAc,CAC5B,aAA+B,EAC/B,EAAU,EACV,IAAY,EACZ,MAAc,CAAC;IAEf,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IAEtC,OAAO;QACL,SAAS;QACT,aAAa;QACb,EAAE;QACF,IAAI;QACJ,GAAG;QACH,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB;IACxB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAE9B,6BAA6B;IAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAClC,QAA4B;IAE5B,sCAAsC;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC"}

package/dist/edge/p2p/crypto/index.d.ts

@@ -0,0 +1,90 @@
+/**
+ * P2P Cryptographic Identity Module
+ *
+ * Ed25519-based cryptographic identity system for P2P agent communication.
+ * Provides secure identity generation, key management, and message signing.
+ *
+ * @module edge/p2p/crypto
+ * @version 1.0.0
+ *
+ * @example
+ * ```typescript
+ * import { IdentityManager, KeyManager, Signer } from './crypto';
+ *
+ * // Create new identity
+ * const identity = await IdentityManager.create({
+ *   displayName: 'My Agent',
+ *   password: 'secure-password'
+ * });
+ *
+ * // Store identity securely
+ * const keyManager = new KeyManager();
+ * await keyManager.initialize();
+ * await keyManager.store(identity);
+ *
+ * // Sign messages
+ * const keyPair = await keyManager.unlock(identity.agentId, 'secure-password');
+ * const signed = await Signer.sign(keyPair, identity, { action: 'share-pattern' });
+ *
+ * // Verify signatures
+ * const result = await Signer.verify(signed);
+ * console.log('Valid:', result.valid);
+ * ```
+ */
+export type { KeyPair, EncryptedKeyPair, AgentIdentity, StoredIdentity, SignedMessage, IdentityProof, KeyRotationEvent, IdentityExport, SeedPhrase, IdentityConfig, KeyStorageConfig, VerificationResult, BatchVerificationResult, } from './types';
+export { CryptoError, CryptoErrorCode } from './types';
+export { IdentityManager, base64Utils } from './Identity';
+export { KeyManager } from './KeyManager';
+export { Signer, createEnvelope, verifyEnvelope, type MessageEnvelope, } from './Signer';
+/**
+ * Convenience function to create a complete identity setup
+ *
+ * @param config - Identity configuration
+ * @returns Object with identity and initialized key manager
+ */
+export declare function createIdentityWithStorage(config: {
+    displayName?: string;
+    password: string;
+    metadata?: Record<string, unknown>;
+}): Promise<{
+    identity: import('./types').StoredIdentity;
+    keyManager: import('./KeyManager').KeyManager;
+}>;
+/**
+ * Quick sign helper - signs data with a stored identity
+ *
+ * @param keyManager - Initialized key manager
+ * @param agentId - Agent ID to sign with
+ * @param password - Password to unlock the key
+ * @param payload - Data to sign
+ * @returns Signed message
+ */
+export declare function quickSign<T>(keyManager: import('./KeyManager').KeyManager, agentId: string, password: string, payload: T): Promise<import('./types').SignedMessage<T>>;
+/**
+ * Version information
+ */
+export declare const CRYPTO_VERSION = "1.0.0";
+/**
+ * Module capabilities
+ */
+export declare const CRYPTO_CAPABILITIES: {
+    /** Ed25519 key generation (browser-compatible) */
+    keyGeneration: boolean;
+    /** AES-GCM encryption for private keys */
+    encryptionAtRest: boolean;
+    /** PBKDF2 key derivation */
+    keyDerivation: boolean;
+    /** Seed phrase recovery */
+    seedPhraseRecovery: boolean;
+    /** IndexedDB key storage */
+    persistentStorage: boolean;
+    /** Key rotation support */
+    keyRotation: boolean;
+    /** Key revocation */
+    keyRevocation: boolean;
+    /** Batch signature verification */
+    batchVerification: boolean;
+    /** Identity proof generation */
+    identityProofs: boolean;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/edge/p2p/crypto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/edge/p2p/crypto/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,YAAY,EACV,OAAO,EACP,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAGvD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG1D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,OAAO,EACL,MAAM,EACN,cAAc,EACd,cAAc,EACd,KAAK,eAAe,GACrB,MAAM,UAAU,CAAC;AAElB;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,OAAO,SAAS,EAAE,cAAc,CAAC;IAC3C,UAAU,EAAE,OAAO,cAAc,EAAE,UAAU,CAAC;CAC/C,CAAC,CAmBD;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,UAAU,EAAE,OAAO,cAAc,EAAE,UAAU,EAC7C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,GACT,OAAO,CAAC,OAAO,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAe7C;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,UAAU,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,mBAAmB;IAC9B,kDAAkD;;IAElD,0CAA0C;;IAE1C,4BAA4B;;IAE5B,2BAA2B;;IAE3B,4BAA4B;;IAE5B,2BAA2B;;IAE3B,qBAAqB;;IAErB,mCAAmC;;IAEnC,gCAAgC;;CAEjC,CAAC"}